@toshicloud/sdk 0.5.0 → 0.5.1

package/dist/gen/toshi/workspace/v1/channels_pb.d.ts

@@ -16,6 +16,9 @@ export type Channel = Message<"toshi.workspace.v1.Channel"> & {
      */
     id: string;
     /**
+     * The job whose guest holds the channel; an event channel's is its
+     * service's live run, empty while the service has none.
+     *
      * @generated from field: string job_id = 2;
      */
     jobId: string;
@@ -28,7 +31,7 @@ export type Channel = Message<"toshi.workspace.v1.Channel"> & {
      */
     shape: ChannelShape;
     /**
-     * An http channel's port in the guest.
+     * An http or event channel's port in the guest.
      *
      * @generated from field: int32 port = 5;
      */
@@ -116,6 +119,42 @@ export type Channel = Message<"toshi.workspace.v1.Channel"> & {
      * @generated from field: repeated toshi.workspace.v1.ChannelClient clients = 20;
      */
     clients: ChannelClient[];
+    /**
+     * An event channel's service, by its ID.
+     *
+     * @generated from field: string service = 21;
+     */
+    service: string;
+    /**
+     * Where an event channel posts in the guest.
+     *
+     * @generated from field: string path = 22;
+     */
+    path: string;
+    /**
+     * An event channel's messages counted by state.
+     *
+     * @generated from field: toshi.workspace.v1.ChannelEventCounts events = 23;
+     */
+    events?: ChannelEventCounts | undefined;
+    /**
+     * The grant through which another workspace exposed the channel, or
+     * empty for one the job's own workspace exposed.
+     *
+     * @generated from field: string grant_id = 24;
+     */
+    grantId: string;
+    /**
+     * The policy version the channel's process of the control plane applies.
+     * A stream channel's owner records it as it applies each version, so a
+     * value below policy.version is a change its attached clients are not
+     * yet held to; 0 until an owner applied one. An http channel's process
+     * reads the policy at each request: its value is policy.version. An
+     * event channel's is 0.
+     *
+     * @generated from field: int64 applied_policy_version = 25;
+     */
+    appliedPolicyVersion: bigint;
 };
 /**
  * @generated from message toshi.workspace.v1.Channel
@@ -128,6 +167,9 @@ export type ChannelJson = {
      */
     id?: string;
     /**
+     * The job whose guest holds the channel; an event channel's is its
+     * service's live run, empty while the service has none.
+     *
      * @generated from field: string job_id = 2;
      */
     jobId?: string;
@@ -140,7 +182,7 @@ export type ChannelJson = {
      */
     shape?: ChannelShapeJson;
     /**
-     * An http channel's port in the guest.
+     * An http or event channel's port in the guest.
      *
      * @generated from field: int32 port = 5;
      */
@@ -228,6 +270,42 @@ export type ChannelJson = {
      * @generated from field: repeated toshi.workspace.v1.ChannelClient clients = 20;
      */
     clients?: ChannelClientJson[];
+    /**
+     * An event channel's service, by its ID.
+     *
+     * @generated from field: string service = 21;
+     */
+    service?: string;
+    /**
+     * Where an event channel posts in the guest.
+     *
+     * @generated from field: string path = 22;
+     */
+    path?: string;
+    /**
+     * An event channel's messages counted by state.
+     *
+     * @generated from field: toshi.workspace.v1.ChannelEventCounts events = 23;
+     */
+    events?: ChannelEventCountsJson;
+    /**
+     * The grant through which another workspace exposed the channel, or
+     * empty for one the job's own workspace exposed.
+     *
+     * @generated from field: string grant_id = 24;
+     */
+    grantId?: string;
+    /**
+     * The policy version the channel's process of the control plane applies.
+     * A stream channel's owner records it as it applies each version, so a
+     * value below policy.version is a change its attached clients are not
+     * yet held to; 0 until an owner applied one. An http channel's process
+     * reads the policy at each request: its value is policy.version. An
+     * event channel's is 0.
+     *
+     * @generated from field: int64 applied_policy_version = 25;
+     */
+    appliedPolicyVersion?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.Channel.
@@ -236,6 +314,295 @@ export type ChannelJson = {
 export declare const ChannelSchema: GenMessage<Channel, {
     jsonType: ChannelJson;
 }>;
+/**
+ * ChannelEventCounts counts an event channel's messages by state.
+ *
+ * @generated from message toshi.workspace.v1.ChannelEventCounts
+ */
+export type ChannelEventCounts = Message<"toshi.workspace.v1.ChannelEventCounts"> & {
+    /**
+     * @generated from field: int64 pending = 1;
+     */
+    pending: bigint;
+    /**
+     * @generated from field: int64 in_flight = 2;
+     */
+    inFlight: bigint;
+    /**
+     * @generated from field: int64 delivered = 3;
+     */
+    delivered: bigint;
+    /**
+     * @generated from field: int64 failed = 4;
+     */
+    failed: bigint;
+    /**
+     * @generated from field: int64 expired = 5;
+     */
+    expired: bigint;
+    /**
+     * The last delivery's time; unset before the first.
+     *
+     * @generated from field: google.protobuf.Timestamp last_delivery_at = 6;
+     */
+    lastDeliveryAt?: Timestamp | undefined;
+    /**
+     * Why the last failed attempt failed; empty when none has.
+     *
+     * @generated from field: string last_failure = 7;
+     */
+    lastFailure: string;
+};
+/**
+ * ChannelEventCounts counts an event channel's messages by state.
+ *
+ * @generated from message toshi.workspace.v1.ChannelEventCounts
+ */
+export type ChannelEventCountsJson = {
+    /**
+     * @generated from field: int64 pending = 1;
+     */
+    pending?: string;
+    /**
+     * @generated from field: int64 in_flight = 2;
+     */
+    inFlight?: string;
+    /**
+     * @generated from field: int64 delivered = 3;
+     */
+    delivered?: string;
+    /**
+     * @generated from field: int64 failed = 4;
+     */
+    failed?: string;
+    /**
+     * @generated from field: int64 expired = 5;
+     */
+    expired?: string;
+    /**
+     * The last delivery's time; unset before the first.
+     *
+     * @generated from field: google.protobuf.Timestamp last_delivery_at = 6;
+     */
+    lastDeliveryAt?: TimestampJson;
+    /**
+     * Why the last failed attempt failed; empty when none has.
+     *
+     * @generated from field: string last_failure = 7;
+     */
+    lastFailure?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ChannelEventCounts.
+ * Use `create(ChannelEventCountsSchema)` to create a new message.
+ */
+export declare const ChannelEventCountsSchema: GenMessage<ChannelEventCounts, {
+    jsonType: ChannelEventCountsJson;
+}>;
+/**
+ * ChannelMessageSource is who sent a message; Toshi stamps it.
+ *
+ * @generated from message toshi.workspace.v1.ChannelMessageSource
+ */
+export type ChannelMessageSource = Message<"toshi.workspace.v1.ChannelMessageSource"> & {
+    /**
+     * principal (a person or token), workload, trigger, mail or alarm.
+     *
+     * @generated from field: string kind = 1;
+     */
+    kind: string;
+    /**
+     * A principal as the audit log names an actor, or the workload's or
+     * trigger's ID.
+     *
+     * @generated from field: string id = 2;
+     */
+    id: string;
+};
+/**
+ * ChannelMessageSource is who sent a message; Toshi stamps it.
+ *
+ * @generated from message toshi.workspace.v1.ChannelMessageSource
+ */
+export type ChannelMessageSourceJson = {
+    /**
+     * principal (a person or token), workload, trigger, mail or alarm.
+     *
+     * @generated from field: string kind = 1;
+     */
+    kind?: string;
+    /**
+     * A principal as the audit log names an actor, or the workload's or
+     * trigger's ID.
+     *
+     * @generated from field: string id = 2;
+     */
+    id?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ChannelMessageSource.
+ * Use `create(ChannelMessageSourceSchema)` to create a new message.
+ */
+export declare const ChannelMessageSourceSchema: GenMessage<ChannelMessageSource, {
+    jsonType: ChannelMessageSourceJson;
+}>;
+/**
+ * ChannelMessage is one message of an event channel.
+ *
+ * @generated from message toshi.workspace.v1.ChannelMessage
+ */
+export type ChannelMessage = Message<"toshi.workspace.v1.ChannelMessage"> & {
+    /**
+     * The webhook-id of each of its posts, the same on every attempt and
+     * after a replay.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Its place in the channel's queue, from 1.
+     *
+     * @generated from field: int64 seq = 2;
+     */
+    seq: bigint;
+    /**
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp time = 4;
+     */
+    time?: Timestamp | undefined;
+    /**
+     * @generated from field: toshi.workspace.v1.ChannelMessageSource source = 5;
+     */
+    source?: ChannelMessageSource | undefined;
+    /**
+     * The message's JSON.
+     *
+     * @generated from field: bytes data = 6;
+     */
+    data: Uint8Array;
+    /**
+     * @generated from field: toshi.workspace.v1.ChannelMessageState state = 7;
+     */
+    state: ChannelMessageState;
+    /**
+     * @generated from field: int32 attempts = 8;
+     */
+    attempts: number;
+    /**
+     * When a pending message is next posted.
+     *
+     * @generated from field: google.protobuf.Timestamp next_attempt_at = 9;
+     */
+    nextAttemptAt?: Timestamp | undefined;
+    /**
+     * Why its last attempt failed; empty when none has.
+     *
+     * @generated from field: string last_error = 10;
+     */
+    lastError: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp delivered_at = 11;
+     */
+    deliveredAt?: Timestamp | undefined;
+    /**
+     * When the message was last replayed, unset for never.
+     *
+     * @generated from field: google.protobuf.Timestamp replayed_at = 12;
+     */
+    replayedAt?: Timestamp | undefined;
+    /**
+     * The instant an alarm published this message for; unset for other
+     * sources.
+     *
+     * @generated from field: google.protobuf.Timestamp scheduled_for = 13;
+     */
+    scheduledFor?: Timestamp | undefined;
+};
+/**
+ * ChannelMessage is one message of an event channel.
+ *
+ * @generated from message toshi.workspace.v1.ChannelMessage
+ */
+export type ChannelMessageJson = {
+    /**
+     * The webhook-id of each of its posts, the same on every attempt and
+     * after a replay.
+     *
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * Its place in the channel's queue, from 1.
+     *
+     * @generated from field: int64 seq = 2;
+     */
+    seq?: string;
+    /**
+     * @generated from field: string name = 3;
+     */
+    name?: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp time = 4;
+     */
+    time?: TimestampJson;
+    /**
+     * @generated from field: toshi.workspace.v1.ChannelMessageSource source = 5;
+     */
+    source?: ChannelMessageSourceJson;
+    /**
+     * The message's JSON.
+     *
+     * @generated from field: bytes data = 6;
+     */
+    data?: string;
+    /**
+     * @generated from field: toshi.workspace.v1.ChannelMessageState state = 7;
+     */
+    state?: ChannelMessageStateJson;
+    /**
+     * @generated from field: int32 attempts = 8;
+     */
+    attempts?: number;
+    /**
+     * When a pending message is next posted.
+     *
+     * @generated from field: google.protobuf.Timestamp next_attempt_at = 9;
+     */
+    nextAttemptAt?: TimestampJson;
+    /**
+     * Why its last attempt failed; empty when none has.
+     *
+     * @generated from field: string last_error = 10;
+     */
+    lastError?: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp delivered_at = 11;
+     */
+    deliveredAt?: TimestampJson;
+    /**
+     * When the message was last replayed, unset for never.
+     *
+     * @generated from field: google.protobuf.Timestamp replayed_at = 12;
+     */
+    replayedAt?: TimestampJson;
+    /**
+     * The instant an alarm published this message for; unset for other
+     * sources.
+     *
+     * @generated from field: google.protobuf.Timestamp scheduled_for = 13;
+     */
+    scheduledFor?: TimestampJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.ChannelMessage.
+ * Use `create(ChannelMessageSchema)` to create a new message.
+ */
+export declare const ChannelMessageSchema: GenMessage<ChannelMessage, {
+    jsonType: ChannelMessageJson;
+}>;
 /**
  * ChannelClient is one client of a stream channel: its last attach, who
  * made it, and how far it has acknowledged the output, which it goes on
@@ -391,25 +758,47 @@ export type ChannelPolicy = Message<"toshi.workspace.v1.ChannelPolicy"> & {
      */
     maxClients?: number | undefined;
     /**
-     * Who may send input to a stream channel: any, creator or none.
+     * Who may send input to a stream channel, or messages to an event
+     * channel: any, creator or none.
      *
      * @generated from field: string input = 4;
      */
     input: string;
     /**
      * How much output or how many records are kept: buffer, at least the
-     * newest 8 MiB, or channel, as long as the channel's record lasts.
+     * newest 8 MiB, or channel, as long as the channel's record lasts. An
+     * event channel's is a duration, how long a message waits to be
+     * delivered before it expires: 24h unless set, and at most the
+     * workspace's plan allows, which is never less than 24h.
      *
      * @generated from field: string keep = 5;
      */
     keep: string;
     /**
      * The ordered module list. Unset takes the shape's defaults; an empty
-     * list means no modules.
+     * list means no modules. An event channel takes none.
      *
      * @generated from field: toshi.workspace.v1.ChannelModuleList modules = 6;
      */
     modules?: ChannelModuleList | undefined;
+    /**
+     * How long an event channel's post may take to be answered 2xx, a
+     * duration from 1s to 10m: 30s unless set. It is the same for every
+     * message; a later answer is a failed attempt.
+     *
+     * @generated from field: string ack_deadline = 7;
+     */
+    ackDeadline: string;
+    /**
+     * How many of an event channel's posts may be in flight at once, from 1
+     * to 64: 1 unless set. At 1, messages are posted one at a time in the
+     * order they were sent, and none passes one waiting to be tried again;
+     * above 1, order is not kept. Either way a parked message holds up none
+     * after it, so order is promised among the messages delivered.
+     *
+     * @generated from field: optional int32 concurrency = 8;
+     */
+    concurrency?: number | undefined;
 };
 /**
  * ChannelPolicy is a channel's policy document, with the words a recipe's
@@ -439,25 +828,47 @@ export type ChannelPolicyJson = {
      */
     maxClients?: number;
     /**
-     * Who may send input to a stream channel: any, creator or none.
+     * Who may send input to a stream channel, or messages to an event
+     * channel: any, creator or none.
      *
      * @generated from field: string input = 4;
      */
     input?: string;
     /**
      * How much output or how many records are kept: buffer, at least the
-     * newest 8 MiB, or channel, as long as the channel's record lasts.
+     * newest 8 MiB, or channel, as long as the channel's record lasts. An
+     * event channel's is a duration, how long a message waits to be
+     * delivered before it expires: 24h unless set, and at most the
+     * workspace's plan allows, which is never less than 24h.
      *
      * @generated from field: string keep = 5;
      */
     keep?: string;
     /**
      * The ordered module list. Unset takes the shape's defaults; an empty
-     * list means no modules.
+     * list means no modules. An event channel takes none.
      *
      * @generated from field: toshi.workspace.v1.ChannelModuleList modules = 6;
      */
     modules?: ChannelModuleListJson;
+    /**
+     * How long an event channel's post may take to be answered 2xx, a
+     * duration from 1s to 10m: 30s unless set. It is the same for every
+     * message; a later answer is a failed attempt.
+     *
+     * @generated from field: string ack_deadline = 7;
+     */
+    ackDeadline?: string;
+    /**
+     * How many of an event channel's posts may be in flight at once, from 1
+     * to 64: 1 unless set. At 1, messages are posted one at a time in the
+     * order they were sent, and none passes one waiting to be tried again;
+     * above 1, order is not kept. Either way a parked message holds up none
+     * after it, so order is promised among the messages delivered.
+     *
+     * @generated from field: optional int32 concurrency = 8;
+     */
+    concurrency?: number;
 };
 /**
  * Describes the message toshi.workspace.v1.ChannelPolicy.
@@ -499,7 +910,9 @@ export declare const ChannelModuleListSchema: GenMessage<ChannelModuleList, {
  */
 export type ChannelModule = Message<"toshi.workspace.v1.ChannelModule"> & {
     /**
-     * identity_headers, sign_in_required, ip_allowlist or record_requests.
+     * redirect, rewrite, ip_allowlist, client_certificate_required,
+     * sign_in_required, rate_limit, wake_page, identity_headers or
+     * record_requests, listed in that order.
      *
      * @generated from field: string kind = 1;
      */
@@ -530,6 +943,75 @@ export type ChannelModule = Message<"toshi.workspace.v1.ChannelModule"> & {
      * @generated from field: int64 body_cap = 5;
      */
     bodyCap: bigint;
+    /**
+     * A redirect's status: 301, 302 or 308; zero takes 302.
+     *
+     * @generated from field: int32 status = 6;
+     */
+    status: number;
+    /**
+     * A redirect's target: an http or https URL or a path. $1 to $9 take
+     * what the stars of the match's path matched.
+     *
+     * @generated from field: string target = 7;
+     */
+    target: string;
+    /**
+     * The path a rewrite serves the request at; $1 to $9 as in target.
+     *
+     * @generated from field: string path = 8;
+     */
+    path: string;
+    /**
+     * The provided name, of the same workspace, a rewrite serves the request
+     * from; a service's channel only.
+     *
+     * @generated from field: string host = 9;
+     */
+    host: string;
+    /**
+     * What a rate_limit counts requests by: identity (the signed-in caller,
+     * else the address) or address.
+     *
+     * @generated from field: string key = 10;
+     */
+    key: string;
+    /**
+     * The most requests a rate_limit admits per key in one window.
+     *
+     * @generated from field: int32 count = 11;
+     */
+    count: number;
+    /**
+     * A rate_limit's window, as a duration such as 1m.
+     *
+     * @generated from field: string window = 12;
+     */
+    window: string;
+    /**
+     * The page a wake_page answers with while the service wakes; empty takes
+     * the default page. A service's channel only.
+     *
+     * @generated from field: string html = 13;
+     */
+    html: string;
+    /**
+     * The PEM certificates of the CAs, at most 64 KiB, whose client
+     * certificates a client_certificate_required admits besides the
+     * workloads'. Such a certificate is checked for its chain and its expiry
+     * only.
+     *
+     * @generated from field: string ca_bundle = 14;
+     */
+    caBundle: string;
+    /**
+     * Whether a client_certificate_required admits a workload of another
+     * workspace that an active grant, of connect or more, on the channel's
+     * environment admits.
+     *
+     * @generated from field: bool grants = 15;
+     */
+    grants: boolean;
 };
 /**
  * ChannelModule is one entry of a policy's module list. Each kind takes
@@ -539,7 +1021,9 @@ export type ChannelModule = Message<"toshi.workspace.v1.ChannelModule"> & {
  */
 export type ChannelModuleJson = {
     /**
-     * identity_headers, sign_in_required, ip_allowlist or record_requests.
+     * redirect, rewrite, ip_allowlist, client_certificate_required,
+     * sign_in_required, rate_limit, wake_page, identity_headers or
+     * record_requests, listed in that order.
      *
      * @generated from field: string kind = 1;
      */
@@ -570,6 +1054,75 @@ export type ChannelModuleJson = {
      * @generated from field: int64 body_cap = 5;
      */
     bodyCap?: string;
+    /**
+     * A redirect's status: 301, 302 or 308; zero takes 302.
+     *
+     * @generated from field: int32 status = 6;
+     */
+    status?: number;
+    /**
+     * A redirect's target: an http or https URL or a path. $1 to $9 take
+     * what the stars of the match's path matched.
+     *
+     * @generated from field: string target = 7;
+     */
+    target?: string;
+    /**
+     * The path a rewrite serves the request at; $1 to $9 as in target.
+     *
+     * @generated from field: string path = 8;
+     */
+    path?: string;
+    /**
+     * The provided name, of the same workspace, a rewrite serves the request
+     * from; a service's channel only.
+     *
+     * @generated from field: string host = 9;
+     */
+    host?: string;
+    /**
+     * What a rate_limit counts requests by: identity (the signed-in caller,
+     * else the address) or address.
+     *
+     * @generated from field: string key = 10;
+     */
+    key?: string;
+    /**
+     * The most requests a rate_limit admits per key in one window.
+     *
+     * @generated from field: int32 count = 11;
+     */
+    count?: number;
+    /**
+     * A rate_limit's window, as a duration such as 1m.
+     *
+     * @generated from field: string window = 12;
+     */
+    window?: string;
+    /**
+     * The page a wake_page answers with while the service wakes; empty takes
+     * the default page. A service's channel only.
+     *
+     * @generated from field: string html = 13;
+     */
+    html?: string;
+    /**
+     * The PEM certificates of the CAs, at most 64 KiB, whose client
+     * certificates a client_certificate_required admits besides the
+     * workloads'. Such a certificate is checked for its chain and its expiry
+     * only.
+     *
+     * @generated from field: string ca_bundle = 14;
+     */
+    caBundle?: string;
+    /**
+     * Whether a client_certificate_required admits a workload of another
+     * workspace that an active grant, of connect or more, on the channel's
+     * environment admits.
+     *
+     * @generated from field: bool grants = 15;
+     */
+    grants?: boolean;
 };
 /**
  * Describes the message toshi.workspace.v1.ChannelModule.
@@ -1005,7 +1558,8 @@ export declare const ChannelBodySchema: GenMessage<ChannelBody, {
  * Forward is one open Forward: what it reaches in the guest, named as the
  * audit log names it (a command by its first word only), who opened it,
  * with the device of the connect token that admitted them, and the http
- * channel whose connection carries it, if one does.
+ * channel whose connection carries it, if one does, and the grant it was
+ * opened through, if one was.
  *
  * @generated from message toshi.workspace.v1.Forward
  */
@@ -1030,12 +1584,20 @@ export type Forward = Message<"toshi.workspace.v1.Forward"> & {
      * @generated from field: google.protobuf.Timestamp opened_at = 5;
      */
     openedAt?: Timestamp | undefined;
+    /**
+     * The grant through which another workspace's caller opened it, or
+     * empty for one the job's own workspace opened.
+     *
+     * @generated from field: string grant_id = 6;
+     */
+    grantId: string;
 };
 /**
  * Forward is one open Forward: what it reaches in the guest, named as the
  * audit log names it (a command by its first word only), who opened it,
  * with the device of the connect token that admitted them, and the http
- * channel whose connection carries it, if one does.
+ * channel whose connection carries it, if one does, and the grant it was
+ * opened through, if one was.
  *
  * @generated from message toshi.workspace.v1.Forward
  */
@@ -1060,6 +1622,13 @@ export type ForwardJson = {
      * @generated from field: google.protobuf.Timestamp opened_at = 5;
      */
     openedAt?: TimestampJson;
+    /**
+     * The grant through which another workspace's caller opened it, or
+     * empty for one the job's own workspace opened.
+     *
+     * @generated from field: string grant_id = 6;
+     */
+    grantId?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.Forward.
@@ -1080,7 +1649,8 @@ export type Link = Message<"toshi.workspace.v1.Link"> & {
      */
     connected: boolean;
     /**
-     * Since when it has been connected; unset while it is not.
+     * Since when it has been connected; unset while it is not, and while
+     * another process of the control plane holds the link.
      *
      * @generated from field: google.protobuf.Timestamp since = 2;
      */
@@ -1132,7 +1702,8 @@ export type LinkJson = {
      */
     connected?: boolean;
     /**
-     * Since when it has been connected; unset while it is not.
+     * Since when it has been connected; unset while it is not, and while
+     * another process of the control plane holds the link.
      *
      * @generated from field: google.protobuf.Timestamp since = 2;
      */
@@ -1214,6 +1785,20 @@ export type CreateChannelRequest = Message<"toshi.workspace.v1.CreateChannelRequ
      * @generated from field: toshi.workspace.v1.ChannelPolicy policy = 5;
      */
     policy?: ChannelPolicy | undefined;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 6;
+     */
+    grant: string;
+    /**
+     * A key that makes the call safe to retry: a retry with the same key and
+     * the same request answers with the channel the first call made.
+     *
+     * @generated from field: string request_key = 7;
+     */
+    requestKey: string;
 };
 /**
  * @generated from message toshi.workspace.v1.CreateChannelRequest
@@ -1250,6 +1835,20 @@ export type CreateChannelRequestJson = {
      * @generated from field: toshi.workspace.v1.ChannelPolicy policy = 5;
      */
     policy?: ChannelPolicyJson;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 6;
+     */
+    grant?: string;
+    /**
+     * A key that makes the call safe to retry: a retry with the same key and
+     * the same request answers with the channel the first call made.
+     *
+     * @generated from field: string request_key = 7;
+     */
+    requestKey?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.CreateChannelRequest.
@@ -1288,7 +1887,8 @@ export declare const CreateChannelResponseSchema: GenMessage<CreateChannelRespon
  */
 export type ListChannelsRequest = Message<"toshi.workspace.v1.ListChannelsRequest"> & {
     /**
-     * Only this job's channels; empty lists every job's.
+     * Only this job's channels; empty lists every job's, and every
+     * service's event channels.
      *
      * @generated from field: string job_id = 1;
      */
@@ -1305,13 +1905,27 @@ export type ListChannelsRequest = Message<"toshi.workspace.v1.ListChannelsReques
      * @generated from field: string page_token = 3;
      */
     pageToken: string;
+    /**
+     * Only this service's event channels, by its ID; not with job_id.
+     *
+     * @generated from field: string service = 4;
+     */
+    service: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 5;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.ListChannelsRequest
  */
 export type ListChannelsRequestJson = {
     /**
-     * Only this job's channels; empty lists every job's.
+     * Only this job's channels; empty lists every job's, and every
+     * service's event channels.
      *
      * @generated from field: string job_id = 1;
      */
@@ -1328,6 +1942,19 @@ export type ListChannelsRequestJson = {
      * @generated from field: string page_token = 3;
      */
     pageToken?: string;
+    /**
+     * Only this service's event channels, by its ID; not with job_id.
+     *
+     * @generated from field: string service = 4;
+     */
+    service?: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 5;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.ListChannelsRequest.
@@ -1385,6 +2012,19 @@ export type GetChannelRequest = Message<"toshi.workspace.v1.GetChannelRequest">
      * @generated from field: string name = 2;
      */
     name: string;
+    /**
+     * An event channel's service, by its ID, in place of job_id.
+     *
+     * @generated from field: string service = 3;
+     */
+    service: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 4;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.GetChannelRequest
@@ -1395,9 +2035,22 @@ export type GetChannelRequestJson = {
      */
     jobId?: string;
     /**
-     * @generated from field: string name = 2;
+     * @generated from field: string name = 2;
+     */
+    name?: string;
+    /**
+     * An event channel's service, by its ID, in place of job_id.
+     *
+     * @generated from field: string service = 3;
+     */
+    service?: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 4;
      */
-    name?: string;
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.GetChannelRequest.
@@ -1443,6 +2096,12 @@ export type GetChannelPolicyRequest = Message<"toshi.workspace.v1.GetChannelPoli
      * @generated from field: string name = 2;
      */
     name: string;
+    /**
+     * An event channel's service, by its ID, in place of job_id.
+     *
+     * @generated from field: string service = 3;
+     */
+    service: string;
 };
 /**
  * @generated from message toshi.workspace.v1.GetChannelPolicyRequest
@@ -1456,6 +2115,12 @@ export type GetChannelPolicyRequestJson = {
      * @generated from field: string name = 2;
      */
     name?: string;
+    /**
+     * An event channel's service, by its ID, in place of job_id.
+     *
+     * @generated from field: string service = 3;
+     */
+    service?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.GetChannelPolicyRequest.
@@ -1507,6 +2172,20 @@ export type SetChannelPolicyRequest = Message<"toshi.workspace.v1.SetChannelPoli
      * @generated from field: toshi.workspace.v1.ChannelPolicy policy = 3;
      */
     policy?: ChannelPolicy | undefined;
+    /**
+     * An event channel's service, by its ID, in place of job_id.
+     *
+     * @generated from field: string service = 4;
+     */
+    service: string;
+    /**
+     * What the change does to a stream channel's attached clients; unset
+     * keeps them. DRAIN and END on an http or an event channel are
+     * INVALID_ARGUMENT.
+     *
+     * @generated from field: toshi.workspace.v1.ChannelStreams streams = 5;
+     */
+    streams: ChannelStreams;
 };
 /**
  * @generated from message toshi.workspace.v1.SetChannelPolicyRequest
@@ -1526,6 +2205,20 @@ export type SetChannelPolicyRequestJson = {
      * @generated from field: toshi.workspace.v1.ChannelPolicy policy = 3;
      */
     policy?: ChannelPolicyJson;
+    /**
+     * An event channel's service, by its ID, in place of job_id.
+     *
+     * @generated from field: string service = 4;
+     */
+    service?: string;
+    /**
+     * What the change does to a stream channel's attached clients; unset
+     * keeps them. DRAIN and END on an http or an event channel are
+     * INVALID_ARGUMENT.
+     *
+     * @generated from field: toshi.workspace.v1.ChannelStreams streams = 5;
+     */
+    streams?: ChannelStreamsJson;
 };
 /**
  * Describes the message toshi.workspace.v1.SetChannelPolicyRequest.
@@ -2028,6 +2721,13 @@ export type CreateChannelConnectTokenRequest = Message<"toshi.workspace.v1.Creat
      * @generated from field: toshi.workspace.v1.ChannelAttachMode mode = 4;
      */
     mode: ChannelAttachMode;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 5;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.CreateChannelConnectTokenRequest
@@ -2054,6 +2754,13 @@ export type CreateChannelConnectTokenRequestJson = {
      * @generated from field: toshi.workspace.v1.ChannelAttachMode mode = 4;
      */
     mode?: ChannelAttachModeJson;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 5;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.CreateChannelConnectTokenRequest.
@@ -2213,6 +2920,13 @@ export type DeleteChannelRequest = Message<"toshi.workspace.v1.DeleteChannelRequ
      * @generated from field: string name = 2;
      */
     name: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 3;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.DeleteChannelRequest
@@ -2226,6 +2940,13 @@ export type DeleteChannelRequestJson = {
      * @generated from field: string name = 2;
      */
     name?: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox's job through it (docs/grants.md).
+     *
+     * @generated from field: string grant = 3;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.DeleteChannelRequest.
@@ -2385,6 +3106,294 @@ export type GetLinkResponseJson = {
 export declare const GetLinkResponseSchema: GenMessage<GetLinkResponse, {
     jsonType: GetLinkResponseJson;
 }>;
+/**
+ * @generated from message toshi.workspace.v1.SendChannelMessageRequest
+ */
+export type SendChannelMessageRequest = Message<"toshi.workspace.v1.SendChannelMessageRequest"> & {
+    /**
+     * The event channel's service, by its ID, and the channel's name.
+     *
+     * @generated from field: string service = 1;
+     */
+    service: string;
+    /**
+     * @generated from field: string channel = 2;
+     */
+    channel: string;
+    /**
+     * The message's name, such as order.paid: up to 200 bytes with no space
+     * or control character.
+     *
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * The message's JSON, at most 256 KiB.
+     *
+     * @generated from field: bytes data = 4;
+     */
+    data: Uint8Array;
+    /**
+     * Makes the send safe to repeat: a key the channel holds returns that
+     * message.
+     *
+     * @generated from field: string request_key = 5;
+     */
+    requestKey: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.SendChannelMessageRequest
+ */
+export type SendChannelMessageRequestJson = {
+    /**
+     * The event channel's service, by its ID, and the channel's name.
+     *
+     * @generated from field: string service = 1;
+     */
+    service?: string;
+    /**
+     * @generated from field: string channel = 2;
+     */
+    channel?: string;
+    /**
+     * The message's name, such as order.paid: up to 200 bytes with no space
+     * or control character.
+     *
+     * @generated from field: string name = 3;
+     */
+    name?: string;
+    /**
+     * The message's JSON, at most 256 KiB.
+     *
+     * @generated from field: bytes data = 4;
+     */
+    data?: string;
+    /**
+     * Makes the send safe to repeat: a key the channel holds returns that
+     * message.
+     *
+     * @generated from field: string request_key = 5;
+     */
+    requestKey?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.SendChannelMessageRequest.
+ * Use `create(SendChannelMessageRequestSchema)` to create a new message.
+ */
+export declare const SendChannelMessageRequestSchema: GenMessage<SendChannelMessageRequest, {
+    jsonType: SendChannelMessageRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.SendChannelMessageResponse
+ */
+export type SendChannelMessageResponse = Message<"toshi.workspace.v1.SendChannelMessageResponse"> & {
+    /**
+     * @generated from field: string message_id = 1;
+     */
+    messageId: string;
+    /**
+     * Set when request_key named a message sent before.
+     *
+     * @generated from field: bool duplicate = 2;
+     */
+    duplicate: boolean;
+};
+/**
+ * @generated from message toshi.workspace.v1.SendChannelMessageResponse
+ */
+export type SendChannelMessageResponseJson = {
+    /**
+     * @generated from field: string message_id = 1;
+     */
+    messageId?: string;
+    /**
+     * Set when request_key named a message sent before.
+     *
+     * @generated from field: bool duplicate = 2;
+     */
+    duplicate?: boolean;
+};
+/**
+ * Describes the message toshi.workspace.v1.SendChannelMessageResponse.
+ * Use `create(SendChannelMessageResponseSchema)` to create a new message.
+ */
+export declare const SendChannelMessageResponseSchema: GenMessage<SendChannelMessageResponse, {
+    jsonType: SendChannelMessageResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.TailChannelMessagesRequest
+ */
+export type TailChannelMessagesRequest = Message<"toshi.workspace.v1.TailChannelMessagesRequest"> & {
+    /**
+     * The event channel's service, by its ID, and the channel's name.
+     *
+     * @generated from field: string service = 1;
+     */
+    service: string;
+    /**
+     * @generated from field: string channel = 2;
+     */
+    channel: string;
+    /**
+     * Only messages in these states; empty is every state.
+     *
+     * @generated from field: repeated toshi.workspace.v1.ChannelMessageState states = 3;
+     */
+    states: ChannelMessageState[];
+    /**
+     * A next_cursor from an earlier response; empty starts at the first
+     * message kept.
+     *
+     * @generated from field: string cursor = 4;
+     */
+    cursor: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.TailChannelMessagesRequest
+ */
+export type TailChannelMessagesRequestJson = {
+    /**
+     * The event channel's service, by its ID, and the channel's name.
+     *
+     * @generated from field: string service = 1;
+     */
+    service?: string;
+    /**
+     * @generated from field: string channel = 2;
+     */
+    channel?: string;
+    /**
+     * Only messages in these states; empty is every state.
+     *
+     * @generated from field: repeated toshi.workspace.v1.ChannelMessageState states = 3;
+     */
+    states?: ChannelMessageStateJson[];
+    /**
+     * A next_cursor from an earlier response; empty starts at the first
+     * message kept.
+     *
+     * @generated from field: string cursor = 4;
+     */
+    cursor?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.TailChannelMessagesRequest.
+ * Use `create(TailChannelMessagesRequestSchema)` to create a new message.
+ */
+export declare const TailChannelMessagesRequestSchema: GenMessage<TailChannelMessagesRequest, {
+    jsonType: TailChannelMessagesRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.TailChannelMessagesResponse
+ */
+export type TailChannelMessagesResponse = Message<"toshi.workspace.v1.TailChannelMessagesResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.ChannelMessage message = 1;
+     */
+    message?: ChannelMessage | undefined;
+    /**
+     * Where a later call goes on from, after this message.
+     *
+     * @generated from field: string next_cursor = 2;
+     */
+    nextCursor: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.TailChannelMessagesResponse
+ */
+export type TailChannelMessagesResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.ChannelMessage message = 1;
+     */
+    message?: ChannelMessageJson;
+    /**
+     * Where a later call goes on from, after this message.
+     *
+     * @generated from field: string next_cursor = 2;
+     */
+    nextCursor?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.TailChannelMessagesResponse.
+ * Use `create(TailChannelMessagesResponseSchema)` to create a new message.
+ */
+export declare const TailChannelMessagesResponseSchema: GenMessage<TailChannelMessagesResponse, {
+    jsonType: TailChannelMessagesResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ReplayChannelMessageRequest
+ */
+export type ReplayChannelMessageRequest = Message<"toshi.workspace.v1.ReplayChannelMessageRequest"> & {
+    /**
+     * The event channel's service, by its ID, and the channel's name.
+     *
+     * @generated from field: string service = 1;
+     */
+    service: string;
+    /**
+     * @generated from field: string channel = 2;
+     */
+    channel: string;
+    /**
+     * @generated from field: string message_id = 3;
+     */
+    messageId: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ReplayChannelMessageRequest
+ */
+export type ReplayChannelMessageRequestJson = {
+    /**
+     * The event channel's service, by its ID, and the channel's name.
+     *
+     * @generated from field: string service = 1;
+     */
+    service?: string;
+    /**
+     * @generated from field: string channel = 2;
+     */
+    channel?: string;
+    /**
+     * @generated from field: string message_id = 3;
+     */
+    messageId?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ReplayChannelMessageRequest.
+ * Use `create(ReplayChannelMessageRequestSchema)` to create a new message.
+ */
+export declare const ReplayChannelMessageRequestSchema: GenMessage<ReplayChannelMessageRequest, {
+    jsonType: ReplayChannelMessageRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ReplayChannelMessageResponse
+ */
+export type ReplayChannelMessageResponse = Message<"toshi.workspace.v1.ReplayChannelMessageResponse"> & {
+    /**
+     * The message as it now is: pending.
+     *
+     * @generated from field: toshi.workspace.v1.ChannelMessage message = 1;
+     */
+    message?: ChannelMessage | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.ReplayChannelMessageResponse
+ */
+export type ReplayChannelMessageResponseJson = {
+    /**
+     * The message as it now is: pending.
+     *
+     * @generated from field: toshi.workspace.v1.ChannelMessage message = 1;
+     */
+    message?: ChannelMessageJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.ReplayChannelMessageResponse.
+ * Use `create(ReplayChannelMessageResponseSchema)` to create a new message.
+ */
+export declare const ReplayChannelMessageResponseSchema: GenMessage<ReplayChannelMessageResponse, {
+    jsonType: ReplayChannelMessageResponseJson;
+}>;
 /**
  * ChannelShape is how a channel carries its bytes.
  *
@@ -2406,14 +3415,21 @@ export declare enum ChannelShape {
      *
      * @generated from enum value: CHANNEL_SHAPE_STREAM = 2;
      */
-    STREAM = 2
+    STREAM = 2,
+    /**
+     * A service's queue of messages, posted to a port and path in its
+     * guest, signed with the Standard Webhooks headers, at least once.
+     *
+     * @generated from enum value: CHANNEL_SHAPE_EVENT = 3;
+     */
+    EVENT = 3
 }
 /**
  * ChannelShape is how a channel carries its bytes.
  *
  * @generated from enum toshi.workspace.v1.ChannelShape
  */
-export type ChannelShapeJson = "CHANNEL_SHAPE_UNSPECIFIED" | "CHANNEL_SHAPE_HTTP" | "CHANNEL_SHAPE_STREAM";
+export type ChannelShapeJson = "CHANNEL_SHAPE_UNSPECIFIED" | "CHANNEL_SHAPE_HTTP" | "CHANNEL_SHAPE_STREAM" | "CHANNEL_SHAPE_EVENT";
 /**
  * Describes the enum toshi.workspace.v1.ChannelShape.
  */
@@ -2492,6 +3508,51 @@ export type ChannelAttachModeJson = "CHANNEL_ATTACH_MODE_UNSPECIFIED" | "CHANNEL
  * Describes the enum toshi.workspace.v1.ChannelAttachMode.
  */
 export declare const ChannelAttachModeSchema: GenEnum<ChannelAttachMode, ChannelAttachModeJson>;
+/**
+ * ChannelStreams is what a policy change does to a stream channel's
+ * clients attached under the policy it replaces.
+ *
+ * @generated from enum toshi.workspace.v1.ChannelStreams
+ */
+export declare enum ChannelStreams {
+    /**
+     * As KEEP.
+     *
+     * @generated from enum value: CHANNEL_STREAMS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * They stay attached; only those the new policy no longer admits, or now
+     * grants read_only while they hold input, end.
+     *
+     * @generated from enum value: CHANNEL_STREAMS_KEEP = 1;
+     */
+    KEEP = 1,
+    /**
+     * They stay attached for up to 30 seconds, then end with the reason
+     * "reconnect", so each client attaches again under the new policy.
+     *
+     * @generated from enum value: CHANNEL_STREAMS_DRAIN = 2;
+     */
+    DRAIN = 2,
+    /**
+     * They end now with the reason "policy_changed".
+     *
+     * @generated from enum value: CHANNEL_STREAMS_END = 3;
+     */
+    END = 3
+}
+/**
+ * ChannelStreams is what a policy change does to a stream channel's
+ * clients attached under the policy it replaces.
+ *
+ * @generated from enum toshi.workspace.v1.ChannelStreams
+ */
+export type ChannelStreamsJson = "CHANNEL_STREAMS_UNSPECIFIED" | "CHANNEL_STREAMS_KEEP" | "CHANNEL_STREAMS_DRAIN" | "CHANNEL_STREAMS_END";
+/**
+ * Describes the enum toshi.workspace.v1.ChannelStreams.
+ */
+export declare const ChannelStreamsSchema: GenEnum<ChannelStreams, ChannelStreamsJson>;
 /**
  * ChannelLog names the log of a channel an export carries.
  *
@@ -2525,6 +3586,61 @@ export type ChannelLogJson = "CHANNEL_LOG_UNSPECIFIED" | "CHANNEL_LOG_OUTPUT" |
  * Describes the enum toshi.workspace.v1.ChannelLog.
  */
 export declare const ChannelLogSchema: GenEnum<ChannelLog, ChannelLogJson>;
+/**
+ * ChannelMessageState is where an event channel's message is in its
+ * delivery.
+ *
+ * @generated from enum toshi.workspace.v1.ChannelMessageState
+ */
+export declare enum ChannelMessageState {
+    /**
+     * @generated from enum value: CHANNEL_MESSAGE_STATE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Waiting for its next attempt.
+     *
+     * @generated from enum value: CHANNEL_MESSAGE_STATE_PENDING = 1;
+     */
+    PENDING = 1,
+    /**
+     * Posted, and not yet answered.
+     *
+     * @generated from enum value: CHANNEL_MESSAGE_STATE_IN_FLIGHT = 2;
+     */
+    IN_FLIGHT = 2,
+    /**
+     * Answered 2xx.
+     *
+     * @generated from enum value: CHANNEL_MESSAGE_STATE_DELIVERED = 3;
+     */
+    DELIVERED = 3,
+    /**
+     * Parked after an hour of failed attempts from its send or replay. The
+     * messages after it are still delivered; ReplayChannelMessage puts it
+     * back.
+     *
+     * @generated from enum value: CHANNEL_MESSAGE_STATE_FAILED = 4;
+     */
+    FAILED = 4,
+    /**
+     * Its channel's keep passed before it was delivered.
+     *
+     * @generated from enum value: CHANNEL_MESSAGE_STATE_EXPIRED = 5;
+     */
+    EXPIRED = 5
+}
+/**
+ * ChannelMessageState is where an event channel's message is in its
+ * delivery.
+ *
+ * @generated from enum toshi.workspace.v1.ChannelMessageState
+ */
+export type ChannelMessageStateJson = "CHANNEL_MESSAGE_STATE_UNSPECIFIED" | "CHANNEL_MESSAGE_STATE_PENDING" | "CHANNEL_MESSAGE_STATE_IN_FLIGHT" | "CHANNEL_MESSAGE_STATE_DELIVERED" | "CHANNEL_MESSAGE_STATE_FAILED" | "CHANNEL_MESSAGE_STATE_EXPIRED";
+/**
+ * Describes the enum toshi.workspace.v1.ChannelMessageState.
+ */
+export declare const ChannelMessageStateSchema: GenEnum<ChannelMessageState, ChannelMessageStateJson>;
 /**
  * ChannelService manages the channels of the workspace's jobs, lists a
  * job's Forwards and reads its Link. A channel is a port in the job's
@@ -2534,6 +3650,12 @@ export declare const ChannelLogSchema: GenEnum<ChannelLog, ChannelLogJson>;
  * is NOT_FOUND. Every call names the job by its ID as the jobs API and
  * `toshi host-job list` show it, and a channel by its name on that job.
  *
+ * An event channel is a service's queue of messages, which Toshi posts to
+ * a port and path in the service's guest, in order and at least once: the
+ * service's recipe declares it, and it lasts while the service does,
+ * across its runs. A call names it by its service's ID and its name, in
+ * service, never by a job.
+ *
  * What carries a stream is not a call: a client attaches to a stream
  * channel, and a Forward opens, on an upgrade of the control plane's
  * connection, with a token from CreateChannelConnectToken. A control
@@ -2598,7 +3720,11 @@ export declare const ChannelService: GenService<{
      * changed since that version fails with ABORTED: read it again. A
      * malformed policy fails with INVALID_ARGUMENT, and one the channel
      * refuses, such as a list without a module that may not be removed,
-     * with FAILED_PRECONDITION.
+     * with FAILED_PRECONDITION. A service's event channel, named by service
+     * in place of job_id, takes what its recipe's policy takes, a keep the
+     * plan allows among it, and keeps the policy set until a deploy whose
+     * recipe changes the channel's policy; its set is recorded as
+     * service.channel_policy_set on the service.
      *
      * @generated from rpc toshi.workspace.v1.ChannelService.SetChannelPolicy
      */
@@ -2710,4 +3836,51 @@ export declare const ChannelService: GenService<{
         input: typeof GetLinkRequestSchema;
         output: typeof GetLinkResponseSchema;
     };
+    /**
+     * SendChannelMessage adds a message to the end of an event channel's
+     * queue and returns its ID at once; the message waits there until it is
+     * delivered, parked failed, or kept past the channel's keep. A sleeping
+     * on-demand service is woken. A message sent again with the same
+     * request_key is not stored again: its ID is returned, with duplicate
+     * set. A caller the channel's input rule does not admit fails with
+     * PERMISSION_DENIED; a name under a segment Toshi keeps for its own
+     * events, data that is not JSON or past 256 KiB with INVALID_ARGUMENT.
+     * Delivery is at least once: a post whose answer is lost is posted
+     * again with the same webhook-id, the message ID, so a handler drops
+     * repeats by it.
+     *
+     * @generated from rpc toshi.workspace.v1.ChannelService.SendChannelMessage
+     */
+    sendChannelMessage: {
+        methodKind: "unary";
+        input: typeof SendChannelMessageRequestSchema;
+        output: typeof SendChannelMessageResponseSchema;
+    };
+    /**
+     * TailChannelMessages streams an event channel's messages after the
+     * cursor, oldest first, then each message added after them as it is
+     * added, until the caller ends the call. States narrows the stream to
+     * messages in those states when it is read.
+     *
+     * @generated from rpc toshi.workspace.v1.ChannelService.TailChannelMessages
+     */
+    tailChannelMessages: {
+        methodKind: "server_streaming";
+        input: typeof TailChannelMessagesRequestSchema;
+        output: typeof TailChannelMessagesResponseSchema;
+    };
+    /**
+     * ReplayChannelMessage puts a failed, expired or delivered message of an
+     * event channel back in its queue under its own ID, so its webhook-id is
+     * the same: its attempts start again from 0, and its keep runs from the
+     * replay. A message pending or in flight fails with
+     * FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.ChannelService.ReplayChannelMessage
+     */
+    replayChannelMessage: {
+        methodKind: "unary";
+        input: typeof ReplayChannelMessageRequestSchema;
+        output: typeof ReplayChannelMessageResponseSchema;
+    };
 }>;