@toshicloud/sdk 0.5.0 → 0.6.0

package/dist/gen/toshi/workspace/v1/roles_pb.d.ts

@@ -0,0 +1,1994 @@
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, DurationJson, Timestamp, TimestampJson } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file toshi/workspace/v1/roles.proto.
+ */
+export declare const file_toshi_workspace_v1_roles: GenFile;
+/**
+ * Role is a named set of permissions.
+ *
+ * @generated from message toshi.workspace.v1.Role
+ */
+export type Role = Message<"toshi.workspace.v1.Role"> & {
+    /**
+     * Role id: "owner", "admin", "member", "agent" or "viewer" for a built-in role,
+     * such as "role-1a2b3c4d5e6f" for one of the workspace's.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * The permissions the role gives, sorted, as this API's methods or a
+     * product's calls name them.
+     *
+     * @generated from field: repeated string permissions = 3;
+     */
+    permissions: string[];
+    /**
+     * Whether the role is built in, and cannot be changed.
+     *
+     * @generated from field: bool built_in = 4;
+     */
+    builtIn: boolean;
+};
+/**
+ * Role is a named set of permissions.
+ *
+ * @generated from message toshi.workspace.v1.Role
+ */
+export type RoleJson = {
+    /**
+     * Role id: "owner", "admin", "member", "agent" or "viewer" for a built-in role,
+     * such as "role-1a2b3c4d5e6f" for one of the workspace's.
+     *
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name?: string;
+    /**
+     * The permissions the role gives, sorted, as this API's methods or a
+     * product's calls name them.
+     *
+     * @generated from field: repeated string permissions = 3;
+     */
+    permissions?: string[];
+    /**
+     * Whether the role is built in, and cannot be changed.
+     *
+     * @generated from field: bool built_in = 4;
+     */
+    builtIn?: boolean;
+};
+/**
+ * Describes the message toshi.workspace.v1.Role.
+ * Use `create(RoleSchema)` to create a new message.
+ */
+export declare const RoleSchema: GenMessage<Role, {
+    jsonType: RoleJson;
+}>;
+/**
+ * Subject is who a grant is given to, or who made it.
+ *
+ * @generated from message toshi.workspace.v1.Subject
+ */
+export type Subject = Message<"toshi.workspace.v1.Subject"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.SubjectKind kind = 1;
+     */
+    kind: SubjectKind;
+    /**
+     * The Toshi user id of a person, such as "usr-0f1e2d3c4b5a69788796a5b4",
+     * which a change of login or identity provider keeps; it is opaque, and
+     * a person who signed in before user accounts came has their GitHub user
+     * id as theirs. The token id of a token, such as "tok-1a2b3c4d5e6f";
+     * empty for the system.
+     *
+     * @generated from field: string id = 2;
+     */
+    id: string;
+};
+/**
+ * Subject is who a grant is given to, or who made it.
+ *
+ * @generated from message toshi.workspace.v1.Subject
+ */
+export type SubjectJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.SubjectKind kind = 1;
+     */
+    kind?: SubjectKindJson;
+    /**
+     * The Toshi user id of a person, such as "usr-0f1e2d3c4b5a69788796a5b4",
+     * which a change of login or identity provider keeps; it is opaque, and
+     * a person who signed in before user accounts came has their GitHub user
+     * id as theirs. The token id of a token, such as "tok-1a2b3c4d5e6f";
+     * empty for the system.
+     *
+     * @generated from field: string id = 2;
+     */
+    id?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.Subject.
+ * Use `create(SubjectSchema)` to create a new message.
+ */
+export declare const SubjectSchema: GenMessage<Subject, {
+    jsonType: SubjectJson;
+}>;
+/**
+ * RoleGrant gives a role to a subject on part of the workspace.
+ *
+ * @generated from message toshi.workspace.v1.RoleGrant
+ */
+export type RoleGrant = Message<"toshi.workspace.v1.RoleGrant"> & {
+    /**
+     * Grant id.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject subject = 2;
+     */
+    subject?: Subject | undefined;
+    /**
+     * The role's id.
+     *
+     * @generated from field: string role = 3;
+     */
+    role: string;
+    /**
+     * The project the grant applies to, by name. Empty for a grant on the
+     * whole workspace.
+     *
+     * @generated from field: string project = 4;
+     */
+    project: string;
+    /**
+     * The environment of project the grant applies to, by name. Empty for a
+     * grant on every environment of project.
+     *
+     * @generated from field: string environment = 5;
+     */
+    environment: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 6;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject created_by = 7;
+     */
+    createdBy?: Subject | undefined;
+};
+/**
+ * RoleGrant gives a role to a subject on part of the workspace.
+ *
+ * @generated from message toshi.workspace.v1.RoleGrant
+ */
+export type RoleGrantJson = {
+    /**
+     * Grant id.
+     *
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject subject = 2;
+     */
+    subject?: SubjectJson;
+    /**
+     * The role's id.
+     *
+     * @generated from field: string role = 3;
+     */
+    role?: string;
+    /**
+     * The project the grant applies to, by name. Empty for a grant on the
+     * whole workspace.
+     *
+     * @generated from field: string project = 4;
+     */
+    project?: string;
+    /**
+     * The environment of project the grant applies to, by name. Empty for a
+     * grant on every environment of project.
+     *
+     * @generated from field: string environment = 5;
+     */
+    environment?: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 6;
+     */
+    createdAt?: TimestampJson;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject created_by = 7;
+     */
+    createdBy?: SubjectJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.RoleGrant.
+ * Use `create(RoleGrantSchema)` to create a new message.
+ */
+export declare const RoleGrantSchema: GenMessage<RoleGrant, {
+    jsonType: RoleGrantJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListRolesRequest
+ */
+export type ListRolesRequest = Message<"toshi.workspace.v1.ListRolesRequest"> & {
+    /**
+     * The most roles in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListRolesRequest
+ */
+export type ListRolesRequestJson = {
+    /**
+     * The most roles in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListRolesRequest.
+ * Use `create(ListRolesRequestSchema)` to create a new message.
+ */
+export declare const ListRolesRequestSchema: GenMessage<ListRolesRequest, {
+    jsonType: ListRolesRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListRolesResponse
+ */
+export type ListRolesResponse = Message<"toshi.workspace.v1.ListRolesResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Role roles = 1;
+     */
+    roles: Role[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListRolesResponse
+ */
+export type ListRolesResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Role roles = 1;
+     */
+    roles?: RoleJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListRolesResponse.
+ * Use `create(ListRolesResponseSchema)` to create a new message.
+ */
+export declare const ListRolesResponseSchema: GenMessage<ListRolesResponse, {
+    jsonType: ListRolesResponseJson;
+}>;
+/**
+ * CreateRoleRequest names the role and what it gives.
+ *
+ * @generated from message toshi.workspace.v1.CreateRoleRequest
+ */
+export type CreateRoleRequest = Message<"toshi.workspace.v1.CreateRoleRequest"> & {
+    /**
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * At least one permission, as this API's methods or a product's calls
+     * name it.
+     *
+     * @generated from field: repeated string permissions = 2;
+     */
+    permissions: string[];
+    /**
+     * @generated from field: string request_key = 3;
+     */
+    requestKey: string;
+};
+/**
+ * CreateRoleRequest names the role and what it gives.
+ *
+ * @generated from message toshi.workspace.v1.CreateRoleRequest
+ */
+export type CreateRoleRequestJson = {
+    /**
+     * @generated from field: string name = 1;
+     */
+    name?: string;
+    /**
+     * At least one permission, as this API's methods or a product's calls
+     * name it.
+     *
+     * @generated from field: repeated string permissions = 2;
+     */
+    permissions?: string[];
+    /**
+     * @generated from field: string request_key = 3;
+     */
+    requestKey?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateRoleRequest.
+ * Use `create(CreateRoleRequestSchema)` to create a new message.
+ */
+export declare const CreateRoleRequestSchema: GenMessage<CreateRoleRequest, {
+    jsonType: CreateRoleRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.CreateRoleResponse
+ */
+export type CreateRoleResponse = Message<"toshi.workspace.v1.CreateRoleResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Role role = 1;
+     */
+    role?: Role | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.CreateRoleResponse
+ */
+export type CreateRoleResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Role role = 1;
+     */
+    role?: RoleJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateRoleResponse.
+ * Use `create(CreateRoleResponseSchema)` to create a new message.
+ */
+export declare const CreateRoleResponseSchema: GenMessage<CreateRoleResponse, {
+    jsonType: CreateRoleResponseJson;
+}>;
+/**
+ * UpdateRoleRequest names the role and its new name and permissions.
+ *
+ * @generated from message toshi.workspace.v1.UpdateRoleRequest
+ */
+export type UpdateRoleRequest = Message<"toshi.workspace.v1.UpdateRoleRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * At least one permission; they replace the role's.
+     *
+     * @generated from field: repeated string permissions = 3;
+     */
+    permissions: string[];
+};
+/**
+ * UpdateRoleRequest names the role and its new name and permissions.
+ *
+ * @generated from message toshi.workspace.v1.UpdateRoleRequest
+ */
+export type UpdateRoleRequestJson = {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name?: string;
+    /**
+     * At least one permission; they replace the role's.
+     *
+     * @generated from field: repeated string permissions = 3;
+     */
+    permissions?: string[];
+};
+/**
+ * Describes the message toshi.workspace.v1.UpdateRoleRequest.
+ * Use `create(UpdateRoleRequestSchema)` to create a new message.
+ */
+export declare const UpdateRoleRequestSchema: GenMessage<UpdateRoleRequest, {
+    jsonType: UpdateRoleRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.UpdateRoleResponse
+ */
+export type UpdateRoleResponse = Message<"toshi.workspace.v1.UpdateRoleResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Role role = 1;
+     */
+    role?: Role | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.UpdateRoleResponse
+ */
+export type UpdateRoleResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Role role = 1;
+     */
+    role?: RoleJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.UpdateRoleResponse.
+ * Use `create(UpdateRoleResponseSchema)` to create a new message.
+ */
+export declare const UpdateRoleResponseSchema: GenMessage<UpdateRoleResponse, {
+    jsonType: UpdateRoleResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.DeleteRoleRequest
+ */
+export type DeleteRoleRequest = Message<"toshi.workspace.v1.DeleteRoleRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.DeleteRoleRequest
+ */
+export type DeleteRoleRequestJson = {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.DeleteRoleRequest.
+ * Use `create(DeleteRoleRequestSchema)` to create a new message.
+ */
+export declare const DeleteRoleRequestSchema: GenMessage<DeleteRoleRequest, {
+    jsonType: DeleteRoleRequestJson;
+}>;
+/**
+ * DeleteRoleResponse carries the deleted role.
+ *
+ * @generated from message toshi.workspace.v1.DeleteRoleResponse
+ */
+export type DeleteRoleResponse = Message<"toshi.workspace.v1.DeleteRoleResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Role role = 1;
+     */
+    role?: Role | undefined;
+    /**
+     * How many grants of the role were deleted with it.
+     *
+     * @generated from field: int32 grants_deleted = 2;
+     */
+    grantsDeleted: number;
+};
+/**
+ * DeleteRoleResponse carries the deleted role.
+ *
+ * @generated from message toshi.workspace.v1.DeleteRoleResponse
+ */
+export type DeleteRoleResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Role role = 1;
+     */
+    role?: RoleJson;
+    /**
+     * How many grants of the role were deleted with it.
+     *
+     * @generated from field: int32 grants_deleted = 2;
+     */
+    grantsDeleted?: number;
+};
+/**
+ * Describes the message toshi.workspace.v1.DeleteRoleResponse.
+ * Use `create(DeleteRoleResponseSchema)` to create a new message.
+ */
+export declare const DeleteRoleResponseSchema: GenMessage<DeleteRoleResponse, {
+    jsonType: DeleteRoleResponseJson;
+}>;
+/**
+ * ListRoleGrantsRequest optionally narrows the list.
+ *
+ * @generated from message toshi.workspace.v1.ListRoleGrantsRequest
+ */
+export type ListRoleGrantsRequest = Message<"toshi.workspace.v1.ListRoleGrantsRequest"> & {
+    /**
+     * Only this subject's grants, when set.
+     *
+     * @generated from field: toshi.workspace.v1.Subject subject = 1;
+     */
+    subject?: Subject | undefined;
+    /**
+     * Only the grants on this project, by name, when set: on the project as
+     * a whole, and on each of its environments unless environment is set.
+     *
+     * @generated from field: string project = 2;
+     */
+    project: string;
+    /**
+     * Only the grants on this environment of project, by name, when set.
+     * Needs project.
+     *
+     * @generated from field: string environment = 3;
+     */
+    environment: string;
+    /**
+     * The most grants in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 4;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 5;
+     */
+    pageToken: string;
+};
+/**
+ * ListRoleGrantsRequest optionally narrows the list.
+ *
+ * @generated from message toshi.workspace.v1.ListRoleGrantsRequest
+ */
+export type ListRoleGrantsRequestJson = {
+    /**
+     * Only this subject's grants, when set.
+     *
+     * @generated from field: toshi.workspace.v1.Subject subject = 1;
+     */
+    subject?: SubjectJson;
+    /**
+     * Only the grants on this project, by name, when set: on the project as
+     * a whole, and on each of its environments unless environment is set.
+     *
+     * @generated from field: string project = 2;
+     */
+    project?: string;
+    /**
+     * Only the grants on this environment of project, by name, when set.
+     * Needs project.
+     *
+     * @generated from field: string environment = 3;
+     */
+    environment?: string;
+    /**
+     * The most grants in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 4;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 5;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListRoleGrantsRequest.
+ * Use `create(ListRoleGrantsRequestSchema)` to create a new message.
+ */
+export declare const ListRoleGrantsRequestSchema: GenMessage<ListRoleGrantsRequest, {
+    jsonType: ListRoleGrantsRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListRoleGrantsResponse
+ */
+export type ListRoleGrantsResponse = Message<"toshi.workspace.v1.ListRoleGrantsResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.RoleGrant grants = 1;
+     */
+    grants: RoleGrant[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListRoleGrantsResponse
+ */
+export type ListRoleGrantsResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.RoleGrant grants = 1;
+     */
+    grants?: RoleGrantJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListRoleGrantsResponse.
+ * Use `create(ListRoleGrantsResponseSchema)` to create a new message.
+ */
+export declare const ListRoleGrantsResponseSchema: GenMessage<ListRoleGrantsResponse, {
+    jsonType: ListRoleGrantsResponseJson;
+}>;
+/**
+ * GrantRoleRequest names the subject, the role and where it applies.
+ *
+ * @generated from message toshi.workspace.v1.GrantRoleRequest
+ */
+export type GrantRoleRequest = Message<"toshi.workspace.v1.GrantRoleRequest"> & {
+    /**
+     * A person or a token.
+     *
+     * @generated from field: toshi.workspace.v1.Subject subject = 1;
+     */
+    subject?: Subject | undefined;
+    /**
+     * The role's id.
+     *
+     * @generated from field: string role = 2;
+     */
+    role: string;
+    /**
+     * Limits the grant to this project of the workspace, by name. Empty
+     * gives the role on the whole workspace.
+     *
+     * @generated from field: string project = 3;
+     */
+    project: string;
+    /**
+     * Limits the grant further to this environment of project, by name.
+     * Needs project.
+     *
+     * @generated from field: string environment = 4;
+     */
+    environment: string;
+};
+/**
+ * GrantRoleRequest names the subject, the role and where it applies.
+ *
+ * @generated from message toshi.workspace.v1.GrantRoleRequest
+ */
+export type GrantRoleRequestJson = {
+    /**
+     * A person or a token.
+     *
+     * @generated from field: toshi.workspace.v1.Subject subject = 1;
+     */
+    subject?: SubjectJson;
+    /**
+     * The role's id.
+     *
+     * @generated from field: string role = 2;
+     */
+    role?: string;
+    /**
+     * Limits the grant to this project of the workspace, by name. Empty
+     * gives the role on the whole workspace.
+     *
+     * @generated from field: string project = 3;
+     */
+    project?: string;
+    /**
+     * Limits the grant further to this environment of project, by name.
+     * Needs project.
+     *
+     * @generated from field: string environment = 4;
+     */
+    environment?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.GrantRoleRequest.
+ * Use `create(GrantRoleRequestSchema)` to create a new message.
+ */
+export declare const GrantRoleRequestSchema: GenMessage<GrantRoleRequest, {
+    jsonType: GrantRoleRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.GrantRoleResponse
+ */
+export type GrantRoleResponse = Message<"toshi.workspace.v1.GrantRoleResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.RoleGrant grant = 1;
+     */
+    grant?: RoleGrant | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.GrantRoleResponse
+ */
+export type GrantRoleResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.RoleGrant grant = 1;
+     */
+    grant?: RoleGrantJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.GrantRoleResponse.
+ * Use `create(GrantRoleResponseSchema)` to create a new message.
+ */
+export declare const GrantRoleResponseSchema: GenMessage<GrantRoleResponse, {
+    jsonType: GrantRoleResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.RevokeRoleRequest
+ */
+export type RevokeRoleRequest = Message<"toshi.workspace.v1.RevokeRoleRequest"> & {
+    /**
+     * The grant's id.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.RevokeRoleRequest
+ */
+export type RevokeRoleRequestJson = {
+    /**
+     * The grant's id.
+     *
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.RevokeRoleRequest.
+ * Use `create(RevokeRoleRequestSchema)` to create a new message.
+ */
+export declare const RevokeRoleRequestSchema: GenMessage<RevokeRoleRequest, {
+    jsonType: RevokeRoleRequestJson;
+}>;
+/**
+ * RevokeRoleResponse carries the deleted grant.
+ *
+ * @generated from message toshi.workspace.v1.RevokeRoleResponse
+ */
+export type RevokeRoleResponse = Message<"toshi.workspace.v1.RevokeRoleResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.RoleGrant grant = 1;
+     */
+    grant?: RoleGrant | undefined;
+};
+/**
+ * RevokeRoleResponse carries the deleted grant.
+ *
+ * @generated from message toshi.workspace.v1.RevokeRoleResponse
+ */
+export type RevokeRoleResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.RoleGrant grant = 1;
+     */
+    grant?: RoleGrantJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.RevokeRoleResponse.
+ * Use `create(RevokeRoleResponseSchema)` to create a new message.
+ */
+export declare const RevokeRoleResponseSchema: GenMessage<RevokeRoleResponse, {
+    jsonType: RevokeRoleResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListMembersRequest
+ */
+export type ListMembersRequest = Message<"toshi.workspace.v1.ListMembersRequest"> & {
+    /**
+     * The most members in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken: string;
+    /**
+     * MEMBER_STATE_PENDING lists the people waiting for approval; unset or
+     * MEMBER_STATE_ACTIVE lists the members.
+     *
+     * @generated from field: toshi.workspace.v1.MemberState state = 3;
+     */
+    state: MemberState;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListMembersRequest
+ */
+export type ListMembersRequestJson = {
+    /**
+     * The most members in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken?: string;
+    /**
+     * MEMBER_STATE_PENDING lists the people waiting for approval; unset or
+     * MEMBER_STATE_ACTIVE lists the members.
+     *
+     * @generated from field: toshi.workspace.v1.MemberState state = 3;
+     */
+    state?: MemberStateJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListMembersRequest.
+ * Use `create(ListMembersRequestSchema)` to create a new message.
+ */
+export declare const ListMembersRequestSchema: GenMessage<ListMembersRequest, {
+    jsonType: ListMembersRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListMembersResponse
+ */
+export type ListMembersResponse = Message<"toshi.workspace.v1.ListMembersResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Member members = 1;
+     */
+    members: Member[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListMembersResponse
+ */
+export type ListMembersResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Member members = 1;
+     */
+    members?: MemberJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListMembersResponse.
+ * Use `create(ListMembersResponseSchema)` to create a new message.
+ */
+export declare const ListMembersResponseSchema: GenMessage<ListMembersResponse, {
+    jsonType: ListMembersResponseJson;
+}>;
+/**
+ * Member is a person a session opens the workspace for.
+ *
+ * @generated from message toshi.workspace.v1.Member
+ */
+export type Member = Message<"toshi.workspace.v1.Member"> & {
+    /**
+     * The person's user id, as grants name them.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId: string;
+    /**
+     * The name and email address the person's latest sign-in reported;
+     * shown, never matched.
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * @generated from field: string email = 3;
+     */
+    email: string;
+    /**
+     * @generated from field: toshi.workspace.v1.MemberVia via = 4;
+     */
+    via: MemberVia;
+    /**
+     * @generated from field: google.protobuf.Timestamp added_at = 5;
+     */
+    addedAt?: Timestamp | undefined;
+    /**
+     * Who made the person a member: the inviter for an invitation, the
+     * system for a sign-in, the approver for an approved request.
+     *
+     * @generated from field: toshi.workspace.v1.Subject added_by = 6;
+     */
+    addedBy?: Subject | undefined;
+    /**
+     * @generated from field: toshi.workspace.v1.MemberState state = 7;
+     */
+    state: MemberState;
+    /**
+     * When a person waiting for approval asked to join; unset for a member.
+     *
+     * @generated from field: google.protobuf.Timestamp requested_at = 8;
+     */
+    requestedAt?: Timestamp | undefined;
+    /**
+     * The login the person signed in with last, as that sign-in recorded it:
+     * the name their audit events carry as the actor. Empty for a person who
+     * has not signed in.
+     *
+     * @generated from field: string login = 9;
+     */
+    login: string;
+};
+/**
+ * Member is a person a session opens the workspace for.
+ *
+ * @generated from message toshi.workspace.v1.Member
+ */
+export type MemberJson = {
+    /**
+     * The person's user id, as grants name them.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId?: string;
+    /**
+     * The name and email address the person's latest sign-in reported;
+     * shown, never matched.
+     *
+     * @generated from field: string name = 2;
+     */
+    name?: string;
+    /**
+     * @generated from field: string email = 3;
+     */
+    email?: string;
+    /**
+     * @generated from field: toshi.workspace.v1.MemberVia via = 4;
+     */
+    via?: MemberViaJson;
+    /**
+     * @generated from field: google.protobuf.Timestamp added_at = 5;
+     */
+    addedAt?: TimestampJson;
+    /**
+     * Who made the person a member: the inviter for an invitation, the
+     * system for a sign-in, the approver for an approved request.
+     *
+     * @generated from field: toshi.workspace.v1.Subject added_by = 6;
+     */
+    addedBy?: SubjectJson;
+    /**
+     * @generated from field: toshi.workspace.v1.MemberState state = 7;
+     */
+    state?: MemberStateJson;
+    /**
+     * When a person waiting for approval asked to join; unset for a member.
+     *
+     * @generated from field: google.protobuf.Timestamp requested_at = 8;
+     */
+    requestedAt?: TimestampJson;
+    /**
+     * The login the person signed in with last, as that sign-in recorded it:
+     * the name their audit events carry as the actor. Empty for a person who
+     * has not signed in.
+     *
+     * @generated from field: string login = 9;
+     */
+    login?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.Member.
+ * Use `create(MemberSchema)` to create a new message.
+ */
+export declare const MemberSchema: GenMessage<Member, {
+    jsonType: MemberJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.RemoveMemberRequest
+ */
+export type RemoveMemberRequest = Message<"toshi.workspace.v1.RemoveMemberRequest"> & {
+    /**
+     * The person's user id.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.RemoveMemberRequest
+ */
+export type RemoveMemberRequestJson = {
+    /**
+     * The person's user id.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.RemoveMemberRequest.
+ * Use `create(RemoveMemberRequestSchema)` to create a new message.
+ */
+export declare const RemoveMemberRequestSchema: GenMessage<RemoveMemberRequest, {
+    jsonType: RemoveMemberRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ApproveMemberRequest
+ */
+export type ApproveMemberRequest = Message<"toshi.workspace.v1.ApproveMemberRequest"> & {
+    /**
+     * The person's user id.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ApproveMemberRequest
+ */
+export type ApproveMemberRequestJson = {
+    /**
+     * The person's user id.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ApproveMemberRequest.
+ * Use `create(ApproveMemberRequestSchema)` to create a new message.
+ */
+export declare const ApproveMemberRequestSchema: GenMessage<ApproveMemberRequest, {
+    jsonType: ApproveMemberRequestJson;
+}>;
+/**
+ * ApproveMemberResponse carries the new member and whether they became an
+ * owner.
+ *
+ * @generated from message toshi.workspace.v1.ApproveMemberResponse
+ */
+export type ApproveMemberResponse = Message<"toshi.workspace.v1.ApproveMemberResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Member member = 1;
+     */
+    member?: Member | undefined;
+    /**
+     * @generated from field: bool owner = 2;
+     */
+    owner: boolean;
+};
+/**
+ * ApproveMemberResponse carries the new member and whether they became an
+ * owner.
+ *
+ * @generated from message toshi.workspace.v1.ApproveMemberResponse
+ */
+export type ApproveMemberResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Member member = 1;
+     */
+    member?: MemberJson;
+    /**
+     * @generated from field: bool owner = 2;
+     */
+    owner?: boolean;
+};
+/**
+ * Describes the message toshi.workspace.v1.ApproveMemberResponse.
+ * Use `create(ApproveMemberResponseSchema)` to create a new message.
+ */
+export declare const ApproveMemberResponseSchema: GenMessage<ApproveMemberResponse, {
+    jsonType: ApproveMemberResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.DeclineMemberRequest
+ */
+export type DeclineMemberRequest = Message<"toshi.workspace.v1.DeclineMemberRequest"> & {
+    /**
+     * The person's user id.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.DeclineMemberRequest
+ */
+export type DeclineMemberRequestJson = {
+    /**
+     * The person's user id.
+     *
+     * @generated from field: string user_id = 1;
+     */
+    userId?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.DeclineMemberRequest.
+ * Use `create(DeclineMemberRequestSchema)` to create a new message.
+ */
+export declare const DeclineMemberRequestSchema: GenMessage<DeclineMemberRequest, {
+    jsonType: DeclineMemberRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.DeclineMemberResponse
+ */
+export type DeclineMemberResponse = Message<"toshi.workspace.v1.DeclineMemberResponse"> & {};
+/**
+ * @generated from message toshi.workspace.v1.DeclineMemberResponse
+ */
+export type DeclineMemberResponseJson = {};
+/**
+ * Describes the message toshi.workspace.v1.DeclineMemberResponse.
+ * Use `create(DeclineMemberResponseSchema)` to create a new message.
+ */
+export declare const DeclineMemberResponseSchema: GenMessage<DeclineMemberResponse, {
+    jsonType: DeclineMemberResponseJson;
+}>;
+/**
+ * RemoveMemberResponse says how many grants went with the membership.
+ *
+ * @generated from message toshi.workspace.v1.RemoveMemberResponse
+ */
+export type RemoveMemberResponse = Message<"toshi.workspace.v1.RemoveMemberResponse"> & {
+    /**
+     * @generated from field: int32 grants_removed = 1;
+     */
+    grantsRemoved: number;
+};
+/**
+ * RemoveMemberResponse says how many grants went with the membership.
+ *
+ * @generated from message toshi.workspace.v1.RemoveMemberResponse
+ */
+export type RemoveMemberResponseJson = {
+    /**
+     * @generated from field: int32 grants_removed = 1;
+     */
+    grantsRemoved?: number;
+};
+/**
+ * Describes the message toshi.workspace.v1.RemoveMemberResponse.
+ * Use `create(RemoveMemberResponseSchema)` to create a new message.
+ */
+export declare const RemoveMemberResponseSchema: GenMessage<RemoveMemberResponse, {
+    jsonType: RemoveMemberResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.CreateInvitationRequest
+ */
+export type CreateInvitationRequest = Message<"toshi.workspace.v1.CreateInvitationRequest"> & {
+    /**
+     * Free text, such as whom the invitation is for; 200 characters at most.
+     *
+     * @generated from field: string note = 1;
+     */
+    note: string;
+    /**
+     * How long the code is valid: seven days when unset, 30 days at most.
+     *
+     * @generated from field: google.protobuf.Duration ttl = 2;
+     */
+    ttl?: Duration | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.CreateInvitationRequest
+ */
+export type CreateInvitationRequestJson = {
+    /**
+     * Free text, such as whom the invitation is for; 200 characters at most.
+     *
+     * @generated from field: string note = 1;
+     */
+    note?: string;
+    /**
+     * How long the code is valid: seven days when unset, 30 days at most.
+     *
+     * @generated from field: google.protobuf.Duration ttl = 2;
+     */
+    ttl?: DurationJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateInvitationRequest.
+ * Use `create(CreateInvitationRequestSchema)` to create a new message.
+ */
+export declare const CreateInvitationRequestSchema: GenMessage<CreateInvitationRequest, {
+    jsonType: CreateInvitationRequestJson;
+}>;
+/**
+ * CreateInvitationResponse carries the invitation and its code, shown
+ * once.
+ *
+ * @generated from message toshi.workspace.v1.CreateInvitationResponse
+ */
+export type CreateInvitationResponse = Message<"toshi.workspace.v1.CreateInvitationResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Invitation invitation = 1;
+     */
+    invitation?: Invitation | undefined;
+    /**
+     * The code the invitee accepts; it is not shown again.
+     *
+     * @generated from field: string code = 2;
+     */
+    code: string;
+};
+/**
+ * CreateInvitationResponse carries the invitation and its code, shown
+ * once.
+ *
+ * @generated from message toshi.workspace.v1.CreateInvitationResponse
+ */
+export type CreateInvitationResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Invitation invitation = 1;
+     */
+    invitation?: InvitationJson;
+    /**
+     * The code the invitee accepts; it is not shown again.
+     *
+     * @generated from field: string code = 2;
+     */
+    code?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateInvitationResponse.
+ * Use `create(CreateInvitationResponseSchema)` to create a new message.
+ */
+export declare const CreateInvitationResponseSchema: GenMessage<CreateInvitationResponse, {
+    jsonType: CreateInvitationResponseJson;
+}>;
+/**
+ * Invitation is an invitation to join the workspace, never with its code.
+ *
+ * @generated from message toshi.workspace.v1.Invitation
+ */
+export type Invitation = Message<"toshi.workspace.v1.Invitation"> & {
+    /**
+     * Invitation id, such as "inv-1a2b3c4d5e6f7a8b9c0d1e2f".
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string note = 2;
+     */
+    note: string;
+    /**
+     * @generated from field: toshi.workspace.v1.InvitationState state = 3;
+     */
+    state: InvitationState;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 4;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject created_by = 5;
+     */
+    createdBy?: Subject | undefined;
+    /**
+     * @generated from field: google.protobuf.Timestamp expires_at = 6;
+     */
+    expiresAt?: Timestamp | undefined;
+    /**
+     * The user id of the person who accepted it, and when; empty until then.
+     *
+     * @generated from field: string accepted_by = 7;
+     */
+    acceptedBy: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp accepted_at = 8;
+     */
+    acceptedAt?: Timestamp | undefined;
+    /**
+     * When it was revoked, and by whom; empty unless revoked.
+     *
+     * @generated from field: google.protobuf.Timestamp revoked_at = 9;
+     */
+    revokedAt?: Timestamp | undefined;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject revoked_by = 10;
+     */
+    revokedBy?: Subject | undefined;
+};
+/**
+ * Invitation is an invitation to join the workspace, never with its code.
+ *
+ * @generated from message toshi.workspace.v1.Invitation
+ */
+export type InvitationJson = {
+    /**
+     * Invitation id, such as "inv-1a2b3c4d5e6f7a8b9c0d1e2f".
+     *
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * @generated from field: string note = 2;
+     */
+    note?: string;
+    /**
+     * @generated from field: toshi.workspace.v1.InvitationState state = 3;
+     */
+    state?: InvitationStateJson;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 4;
+     */
+    createdAt?: TimestampJson;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject created_by = 5;
+     */
+    createdBy?: SubjectJson;
+    /**
+     * @generated from field: google.protobuf.Timestamp expires_at = 6;
+     */
+    expiresAt?: TimestampJson;
+    /**
+     * The user id of the person who accepted it, and when; empty until then.
+     *
+     * @generated from field: string accepted_by = 7;
+     */
+    acceptedBy?: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp accepted_at = 8;
+     */
+    acceptedAt?: TimestampJson;
+    /**
+     * When it was revoked, and by whom; empty unless revoked.
+     *
+     * @generated from field: google.protobuf.Timestamp revoked_at = 9;
+     */
+    revokedAt?: TimestampJson;
+    /**
+     * @generated from field: toshi.workspace.v1.Subject revoked_by = 10;
+     */
+    revokedBy?: SubjectJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.Invitation.
+ * Use `create(InvitationSchema)` to create a new message.
+ */
+export declare const InvitationSchema: GenMessage<Invitation, {
+    jsonType: InvitationJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListInvitationsRequest
+ */
+export type ListInvitationsRequest = Message<"toshi.workspace.v1.ListInvitationsRequest"> & {
+    /**
+     * The most invitations in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListInvitationsRequest
+ */
+export type ListInvitationsRequestJson = {
+    /**
+     * The most invitations in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListInvitationsRequest.
+ * Use `create(ListInvitationsRequestSchema)` to create a new message.
+ */
+export declare const ListInvitationsRequestSchema: GenMessage<ListInvitationsRequest, {
+    jsonType: ListInvitationsRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListInvitationsResponse
+ */
+export type ListInvitationsResponse = Message<"toshi.workspace.v1.ListInvitationsResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Invitation invitations = 1;
+     */
+    invitations: Invitation[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListInvitationsResponse
+ */
+export type ListInvitationsResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Invitation invitations = 1;
+     */
+    invitations?: InvitationJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListInvitationsResponse.
+ * Use `create(ListInvitationsResponseSchema)` to create a new message.
+ */
+export declare const ListInvitationsResponseSchema: GenMessage<ListInvitationsResponse, {
+    jsonType: ListInvitationsResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.RevokeInvitationRequest
+ */
+export type RevokeInvitationRequest = Message<"toshi.workspace.v1.RevokeInvitationRequest"> & {
+    /**
+     * The invitation's id.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.RevokeInvitationRequest
+ */
+export type RevokeInvitationRequestJson = {
+    /**
+     * The invitation's id.
+     *
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.RevokeInvitationRequest.
+ * Use `create(RevokeInvitationRequestSchema)` to create a new message.
+ */
+export declare const RevokeInvitationRequestSchema: GenMessage<RevokeInvitationRequest, {
+    jsonType: RevokeInvitationRequestJson;
+}>;
+/**
+ * RevokeInvitationResponse carries the revoked invitation.
+ *
+ * @generated from message toshi.workspace.v1.RevokeInvitationResponse
+ */
+export type RevokeInvitationResponse = Message<"toshi.workspace.v1.RevokeInvitationResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Invitation invitation = 1;
+     */
+    invitation?: Invitation | undefined;
+};
+/**
+ * RevokeInvitationResponse carries the revoked invitation.
+ *
+ * @generated from message toshi.workspace.v1.RevokeInvitationResponse
+ */
+export type RevokeInvitationResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Invitation invitation = 1;
+     */
+    invitation?: InvitationJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.RevokeInvitationResponse.
+ * Use `create(RevokeInvitationResponseSchema)` to create a new message.
+ */
+export declare const RevokeInvitationResponseSchema: GenMessage<RevokeInvitationResponse, {
+    jsonType: RevokeInvitationResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.AcceptInvitationRequest
+ */
+export type AcceptInvitationRequest = Message<"toshi.workspace.v1.AcceptInvitationRequest"> & {
+    /**
+     * The code CreateInvitation returned.
+     *
+     * @generated from field: string code = 1;
+     */
+    code: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.AcceptInvitationRequest
+ */
+export type AcceptInvitationRequestJson = {
+    /**
+     * The code CreateInvitation returned.
+     *
+     * @generated from field: string code = 1;
+     */
+    code?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.AcceptInvitationRequest.
+ * Use `create(AcceptInvitationRequestSchema)` to create a new message.
+ */
+export declare const AcceptInvitationRequestSchema: GenMessage<AcceptInvitationRequest, {
+    jsonType: AcceptInvitationRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.AcceptInvitationResponse
+ */
+export type AcceptInvitationResponse = Message<"toshi.workspace.v1.AcceptInvitationResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Invitation invitation = 1;
+     */
+    invitation?: Invitation | undefined;
+    /**
+     * The id of the workspace the caller is now a member of.
+     *
+     * @generated from field: string workspace = 2;
+     */
+    workspace: string;
+    /**
+     * Whether the caller was made the workspace's owner.
+     *
+     * @generated from field: bool owner = 3;
+     */
+    owner: boolean;
+};
+/**
+ * @generated from message toshi.workspace.v1.AcceptInvitationResponse
+ */
+export type AcceptInvitationResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Invitation invitation = 1;
+     */
+    invitation?: InvitationJson;
+    /**
+     * The id of the workspace the caller is now a member of.
+     *
+     * @generated from field: string workspace = 2;
+     */
+    workspace?: string;
+    /**
+     * Whether the caller was made the workspace's owner.
+     *
+     * @generated from field: bool owner = 3;
+     */
+    owner?: boolean;
+};
+/**
+ * Describes the message toshi.workspace.v1.AcceptInvitationResponse.
+ * Use `create(AcceptInvitationResponseSchema)` to create a new message.
+ */
+export declare const AcceptInvitationResponseSchema: GenMessage<AcceptInvitationResponse, {
+    jsonType: AcceptInvitationResponseJson;
+}>;
+/**
+ * SubjectKind says who a grant is given to, or who made it.
+ *
+ * @generated from enum toshi.workspace.v1.SubjectKind
+ */
+export declare enum SubjectKind {
+    /**
+     * @generated from enum value: SUBJECT_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * A person, by Toshi user id.
+     *
+     * @generated from enum value: SUBJECT_KIND_PERSON = 1;
+     */
+    PERSON = 1,
+    /**
+     * One of the workspace's API tokens, by token id.
+     *
+     * @generated from enum value: SUBJECT_KIND_TOKEN = 2;
+     */
+    TOKEN = 2,
+    /**
+     * The control plane itself, as the maker of the grants it writes, such
+     * as a workspace's first owner. It is never given a role.
+     *
+     * @generated from enum value: SUBJECT_KIND_SYSTEM = 3;
+     */
+    SYSTEM = 3
+}
+/**
+ * SubjectKind says who a grant is given to, or who made it.
+ *
+ * @generated from enum toshi.workspace.v1.SubjectKind
+ */
+export type SubjectKindJson = "SUBJECT_KIND_UNSPECIFIED" | "SUBJECT_KIND_PERSON" | "SUBJECT_KIND_TOKEN" | "SUBJECT_KIND_SYSTEM";
+/**
+ * Describes the enum toshi.workspace.v1.SubjectKind.
+ */
+export declare const SubjectKindSchema: GenEnum<SubjectKind, SubjectKindJson>;
+/**
+ * MemberVia says how a person became a member.
+ *
+ * @generated from enum toshi.workspace.v1.MemberVia
+ */
+export declare enum MemberVia {
+    /**
+     * @generated from enum value: MEMBER_VIA_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Signing in with GitHub as an administrator of one of the workspace's
+     * GitHub App installations.
+     *
+     * @generated from enum value: MEMBER_VIA_GITHUB_ADMIN = 1;
+     */
+    GITHUB_ADMIN = 1,
+    /**
+     * Accepting an invitation.
+     *
+     * @generated from enum value: MEMBER_VIA_INVITATION = 2;
+     */
+    INVITATION = 2,
+    /**
+     * Holding a role in the workspace when members came in.
+     *
+     * @generated from enum value: MEMBER_VIA_MIGRATION = 3;
+     */
+    MIGRATION = 3,
+    /**
+     * Signing in with GitHub as a member of the organisation of one of the
+     * workspace's GitHub App installations, when the workspace lets such
+     * members join.
+     *
+     * @generated from enum value: MEMBER_VIA_GITHUB_MEMBER = 4;
+     */
+    GITHUB_MEMBER = 4
+}
+/**
+ * MemberVia says how a person became a member.
+ *
+ * @generated from enum toshi.workspace.v1.MemberVia
+ */
+export type MemberViaJson = "MEMBER_VIA_UNSPECIFIED" | "MEMBER_VIA_GITHUB_ADMIN" | "MEMBER_VIA_INVITATION" | "MEMBER_VIA_MIGRATION" | "MEMBER_VIA_GITHUB_MEMBER";
+/**
+ * Describes the enum toshi.workspace.v1.MemberVia.
+ */
+export declare const MemberViaSchema: GenEnum<MemberVia, MemberViaJson>;
+/**
+ * MemberState says whether a person is a member or waiting to be one.
+ *
+ * @generated from enum toshi.workspace.v1.MemberState
+ */
+export declare enum MemberState {
+    /**
+     * @generated from enum value: MEMBER_STATE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: MEMBER_STATE_ACTIVE = 1;
+     */
+    ACTIVE = 1,
+    /**
+     * Waiting for a workspace admin to approve them.
+     *
+     * @generated from enum value: MEMBER_STATE_PENDING = 2;
+     */
+    PENDING = 2
+}
+/**
+ * MemberState says whether a person is a member or waiting to be one.
+ *
+ * @generated from enum toshi.workspace.v1.MemberState
+ */
+export type MemberStateJson = "MEMBER_STATE_UNSPECIFIED" | "MEMBER_STATE_ACTIVE" | "MEMBER_STATE_PENDING";
+/**
+ * Describes the enum toshi.workspace.v1.MemberState.
+ */
+export declare const MemberStateSchema: GenEnum<MemberState, MemberStateJson>;
+/**
+ * InvitationState says whether an invitation's code still works.
+ *
+ * @generated from enum toshi.workspace.v1.InvitationState
+ */
+export declare enum InvitationState {
+    /**
+     * @generated from enum value: INVITATION_STATE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Its code works until expires_at.
+     *
+     * @generated from enum value: INVITATION_STATE_OPEN = 1;
+     */
+    OPEN = 1,
+    /**
+     * @generated from enum value: INVITATION_STATE_ACCEPTED = 2;
+     */
+    ACCEPTED = 2,
+    /**
+     * @generated from enum value: INVITATION_STATE_REVOKED = 3;
+     */
+    REVOKED = 3,
+    /**
+     * @generated from enum value: INVITATION_STATE_EXPIRED = 4;
+     */
+    EXPIRED = 4
+}
+/**
+ * InvitationState says whether an invitation's code still works.
+ *
+ * @generated from enum toshi.workspace.v1.InvitationState
+ */
+export type InvitationStateJson = "INVITATION_STATE_UNSPECIFIED" | "INVITATION_STATE_OPEN" | "INVITATION_STATE_ACCEPTED" | "INVITATION_STATE_REVOKED" | "INVITATION_STATE_EXPIRED";
+/**
+ * Describes the enum toshi.workspace.v1.InvitationState.
+ */
+export declare const InvitationStateSchema: GenEnum<InvitationState, InvitationStateJson>;
+/**
+ * RoleService manages who may do what in the workspace: its roles, each a
+ * named set of permissions, and the grants that give a role to a person or
+ * a token on the whole workspace, one project or one environment. A
+ * caller's permissions are the union of the roles granted to it; there are
+ * no deny rules.
+ *
+ * Five roles are built in: owner (every permission), admin (every
+ * permission but billing.write, workspace.delete and workspace.signin),
+ * member (reads and
+ * writes of every product and of projects, secrets and tokens, and reads of
+ * the rest), agent (every read, and sandboxes.write, channels.write,
+ * artifacts.write and volumes.write) and viewer (every read). They cannot
+ * be changed. A workspace adds its own from the permissions this API's
+ * methods name in their toshi.permission option and those a product's
+ * calls name.
+ *
+ * Nobody makes, changes, deletes, gives or revokes a role with a
+ * permission they do not hold where the role applies: such a call is
+ * refused with PERMISSION_DENIED, and a google.rpc.ErrorInfo detail with
+ * the reason PERMISSION_MISSING names the permission under the key
+ * "permission". So only an owner gives or revokes owner. A workspace
+ * always keeps a person who is an owner of the whole workspace.
+ *
+ * A token limited to a project or an environment is refused with
+ * PERMISSION_DENIED: these calls act in the whole workspace. A suspended
+ * workspace lists its roles and grants, and every other call is refused
+ * for it with FAILED_PRECONDITION.
+ *
+ * @generated from service toshi.workspace.v1.RoleService
+ */
+export declare const RoleService: GenService<{
+    /**
+     * ListRoles returns the built-in roles, highest first, then the
+     * workspace's own, by name, each with its permissions.
+     *
+     * A page holds 100 roles when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.ListRoles
+     */
+    listRoles: {
+        methodKind: "unary";
+        input: typeof ListRolesRequestSchema;
+        output: typeof ListRolesResponseSchema;
+    };
+    /**
+     * CreateRole adds a role of the workspace's own. A name that a role of
+     * the workspace has fails with ALREADY_EXISTS; a built-in role's name,
+     * compared without regard to case, an empty name, no permissions, or a
+     * permission that neither a method of this API nor a product's calls
+     * name, with
+     * INVALID_ARGUMENT.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.CreateRole
+     */
+    createRole: {
+        methodKind: "unary";
+        input: typeof CreateRoleRequestSchema;
+        output: typeof CreateRoleResponseSchema;
+    };
+    /**
+     * UpdateRole sets the name and the permissions of one of the
+     * workspace's roles, checked as CreateRole checks them. Its grants keep
+     * it, and give the new permissions from then on. A built-in role fails
+     * with INVALID_ARGUMENT; an unknown ID with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.UpdateRole
+     */
+    updateRole: {
+        methodKind: "unary";
+        input: typeof UpdateRoleRequestSchema;
+        output: typeof UpdateRoleResponseSchema;
+    };
+    /**
+     * DeleteRole deletes one of the workspace's roles and every grant of
+     * it. A built-in role fails with INVALID_ARGUMENT; an unknown ID with
+     * NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.DeleteRole
+     */
+    deleteRole: {
+        methodKind: "unary";
+        input: typeof DeleteRoleRequestSchema;
+        output: typeof DeleteRoleResponseSchema;
+    };
+    /**
+     * ListRoleGrants returns the workspace's grants, ordered by subject,
+     * then role, then scope, optionally only those of one subject, or only
+     * those on one project or environment.
+     *
+     * A page holds 100 grants when page_size is zero, and 1000 at most. An
+     * unknown project or environment fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.ListRoleGrants
+     */
+    listRoleGrants: {
+        methodKind: "unary";
+        input: typeof ListRoleGrantsRequestSchema;
+        output: typeof ListRoleGrantsResponseSchema;
+    };
+    /**
+     * GrantRole gives a role to a person or a token, on the whole workspace
+     * or on one project or environment. The role is a built-in role's ID or
+     * one of the workspace's. A grant the subject already has fails with
+     * ALREADY_EXISTS; an unknown role, project or environment, or a token
+     * that is not the workspace's or is revoked, with NOT_FOUND. A person
+     * who is not a member of the workspace fails with FAILED_PRECONDITION
+     * and a google.rpc.ErrorInfo detail with the reason PERSON_NOT_MEMBER,
+     * naming the person under the key "person": roles are given to members.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.GrantRole
+     */
+    grantRole: {
+        methodKind: "unary";
+        input: typeof GrantRoleRequestSchema;
+        output: typeof GrantRoleResponseSchema;
+    };
+    /**
+     * RevokeRole deletes a grant. Revoking the last grant of owner on the
+     * whole workspace to a person fails with FAILED_PRECONDITION, and a
+     * google.rpc.ErrorInfo detail with the reason LAST_OWNER names that
+     * person under the key "person". An unknown ID fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.RevokeRole
+     */
+    revokeRole: {
+        methodKind: "unary";
+        input: typeof RevokeRoleRequestSchema;
+        output: typeof RevokeRoleResponseSchema;
+    };
+    /**
+     * ListMembers returns the workspace's members, oldest first: the people
+     * a session opens the workspace for, with how and when each joined. A
+     * removed member is not listed. With state MEMBER_STATE_PENDING it
+     * returns instead the people waiting for a workspace admin's approval to
+     * join, oldest request first.
+     *
+     * A page holds 100 members when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.ListMembers
+     */
+    listMembers: {
+        methodKind: "unary";
+        input: typeof ListMembersRequestSchema;
+        output: typeof ListMembersResponseSchema;
+    };
+    /**
+     * RemoveMember ends a person's membership and deletes every grant they
+     * hold in the workspace, at once; their sessions lose the workspace at
+     * their next call. Removing the workspace's last member fails with
+     * FAILED_PRECONDITION and a google.rpc.ErrorInfo detail with the reason
+     * LAST_MEMBER, and removing its last person who is an owner of the whole
+     * workspace with the reason LAST_OWNER; each names the person under the
+     * key "person". A person who is not a member fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.RemoveMember
+     */
+    removeMember: {
+        methodKind: "unary";
+        input: typeof RemoveMemberRequestSchema;
+        output: typeof RemoveMemberResponseSchema;
+    };
+    /**
+     * ApproveMember makes a person waiting for approval a member, as an
+     * accepted invitation does: it grants no role, and makes them an owner
+     * only when the workspace has no person who owns the whole of it. A
+     * person who is not waiting fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.ApproveMember
+     */
+    approveMember: {
+        methodKind: "unary";
+        input: typeof ApproveMemberRequestSchema;
+        output: typeof ApproveMemberResponseSchema;
+    };
+    /**
+     * DeclineMember turns down a person waiting for approval. They may ask
+     * again by signing in a day after the decline at the earliest. A person
+     * who is not waiting fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.DeclineMember
+     */
+    declineMember: {
+        methodKind: "unary";
+        input: typeof DeclineMemberRequestSchema;
+        output: typeof DeclineMemberResponseSchema;
+    };
+    /**
+     * CreateInvitation makes an invitation to join the workspace and returns
+     * its code, once: the control plane keeps only its hash. It is valid for
+     * ttl, seven days when unset, and 30 days at most. The note is free text,
+     * such as whom it is for, and is never matched against anyone.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.CreateInvitation
+     */
+    createInvitation: {
+        methodKind: "unary";
+        input: typeof CreateInvitationRequestSchema;
+        output: typeof CreateInvitationResponseSchema;
+    };
+    /**
+     * ListInvitations returns the workspace's invitations, newest first,
+     * accepted, revoked and expired ones included, never their codes.
+     *
+     * A page holds 100 invitations when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.ListInvitations
+     */
+    listInvitations: {
+        methodKind: "unary";
+        input: typeof ListInvitationsRequestSchema;
+        output: typeof ListInvitationsResponseSchema;
+    };
+    /**
+     * RevokeInvitation ends an open invitation, so its code no longer works.
+     * An unknown id fails with NOT_FOUND, and one that is accepted, revoked
+     * or expired with FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.RevokeInvitation
+     */
+    revokeInvitation: {
+        methodKind: "unary";
+        input: typeof RevokeInvitationRequestSchema;
+        output: typeof RevokeInvitationResponseSchema;
+    };
+    /**
+     * AcceptInvitation makes the caller a member of the workspace whose
+     * invitation has the code, and an owner of it when the workspace has no
+     * person who owns the whole of it; it grants no other role. It is a
+     * person's call: a dashboard session or a person's access token makes it,
+     * without the Toshi-Workspace header and without any role, since the
+     * caller is not yet a member; a workspace token and the operator cannot.
+     * The permission named here is not checked. A code with no open
+     * invitation fails with NOT_FOUND, whether no invitation has it or it is
+     * accepted, revoked or expired; the workspace's audit log records which
+     * as invitation.accept_refused. A caller who is already a member fails
+     * with ALREADY_EXISTS, leaving the invitation open, and a closed
+     * workspace with FAILED_PRECONDITION: it takes no new member until it is
+     * reopened.
+     *
+     * @generated from rpc toshi.workspace.v1.RoleService.AcceptInvitation
+     */
+    acceptInvitation: {
+        methodKind: "unary";
+        input: typeof AcceptInvitationRequestSchema;
+        output: typeof AcceptInvitationResponseSchema;
+    };
+}>;