gitd-client 0.7.0 → 0.9.0

package/dist/gen/gitd/v1/gitd_pb.d.ts

@@ -254,7 +254,27 @@ export declare enum GitFailure_Reason {
      *
      * @generated from enum value: REASON_CONFIG_REFUSED = 12;
      */
-    CONFIG_REFUSED = 12
+    CONFIG_REFUSED = 12,
+    /**
+     * What a publish brings breaks a publishing rule: a protected path changed, a kept
+     * path deleted, or too many files changed. Nothing was pushed.
+     *
+     * @generated from enum value: REASON_POLICY_REFUSED = 13;
+     */
+    POLICY_REFUSED = 13,
+    /**
+     * What was asked cannot be done with this host, such as a pull request where gitd does
+     * not know the host's API.
+     *
+     * @generated from enum value: REASON_UNSUPPORTED = 14;
+     */
+    UNSUPPORTED = 14,
+    /**
+     * A limit of the tenant is reached: its workspaces, its disk or its tokens.
+     *
+     * @generated from enum value: REASON_LIMIT_REACHED = 15;
+     */
+    LIMIT_REACHED = 15
 }
 /**
  * Describes the enum gitd.v1.GitFailure.Reason.
@@ -306,6 +326,23 @@ export type PrepareRequest = Message<"gitd.v1.PrepareRequest"> & {
      * @generated from field: gitd.v1.Strategy strategy = 7;
      */
     strategy: Strategy;
+    /**
+     * A warm layer of the repository to stand on, between the template and the workspace's
+     * own layer: its dependencies are there already. The workspace must be at the commit the
+     * layer was sealed at, and be made by overlay.
+     *
+     * @generated from field: string warm = 8;
+     */
+    warm: string;
+    /**
+     * The workspace names its pool by a path inside itself, `.git/gitd-pool`, where whoever
+     * mounts the workspace elsewhere — the CSI driver into a pod — mounts the pool's objects
+     * read-only (WorkspaceResult.pool_objects), so that it works wherever it is mounted. gitd
+     * accepts it only while that is truly the pool's objects directory, mounted there.
+     *
+     * @generated from field: bool pool_inside = 9;
+     */
+    poolInside: boolean;
 };
 /**
  * Describes the message gitd.v1.PrepareRequest.
@@ -331,6 +368,12 @@ export type Layers = Message<"gitd.v1.Layers"> & {
      * @generated from field: string work = 3;
      */
     work: string;
+    /**
+     * The warm layer between the template and the workspace's own, when it stands on one.
+     *
+     * @generated from field: string warm = 4;
+     */
+    warm: string;
 };
 /**
  * Describes the message gitd.v1.Layers.
@@ -400,6 +443,13 @@ export type WorkspaceResult = Message<"gitd.v1.WorkspaceResult"> & {
      * @generated from field: repeated string lfs_patterns = 6;
      */
     lfsPatterns: string[];
+    /**
+     * With pool_inside: the pool's objects directory, to mount read-only at the workspace's
+     * `.git/gitd-pool`.
+     *
+     * @generated from field: string pool_objects = 7;
+     */
+    poolObjects: string;
 };
 /**
  * Describes the message gitd.v1.WorkspaceResult.
@@ -678,6 +728,119 @@ export type RemoveResponse = Message<"gitd.v1.RemoveResponse"> & {};
  * Use `create(RemoveResponseSchema)` to create a new message.
  */
 export declare const RemoveResponseSchema: GenMessage<RemoveResponse>;
+/**
+ * @generated from message gitd.v1.SealRequest
+ */
+export type SealRequest = Message<"gitd.v1.SealRequest"> & {
+    /**
+     * An overlay workspace, not itself standing on a warm layer.
+     *
+     * @generated from field: string path = 1;
+     */
+    path: string;
+    /**
+     * What to call the layer: lowercase letters, digits, dots, dashes and underscores, 64 at
+     * most. Sealing a name again replaces the layer, once no workspace stands on it.
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+};
+/**
+ * Describes the message gitd.v1.SealRequest.
+ * Use `create(SealRequestSchema)` to create a new message.
+ */
+export declare const SealRequestSchema: GenMessage<SealRequest>;
+/**
+ * @generated from message gitd.v1.SealResponse
+ */
+export type SealResponse = Message<"gitd.v1.SealResponse"> & {
+    /**
+     * @generated from field: gitd.v1.WarmLayer warm = 1;
+     */
+    warm?: WarmLayer | undefined;
+};
+/**
+ * Describes the message gitd.v1.SealResponse.
+ * Use `create(SealResponseSchema)` to create a new message.
+ */
+export declare const SealResponseSchema: GenMessage<SealResponse>;
+/**
+ * A layer sealed from a workspace, that later workspaces stand on.
+ *
+ * @generated from message gitd.v1.WarmLayer
+ */
+export type WarmLayer = Message<"gitd.v1.WarmLayer"> & {
+    /**
+     * @generated from field: string url = 1;
+     */
+    url: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * The commit it was sealed at: workspaces stand on it at that commit only.
+     *
+     * @generated from field: string commit = 3;
+     */
+    commit: string;
+    /**
+     * When it was sealed, in seconds since the epoch, and from which workspace.
+     *
+     * @generated from field: int64 sealed_at = 4;
+     */
+    sealedAt: bigint;
+    /**
+     * @generated from field: string sealed_from = 5;
+     */
+    sealedFrom: string;
+    /**
+     * How many files it changes that git does not ignore, e.g. a lock file rewritten.
+     *
+     * @generated from field: int32 changed_files = 6;
+     */
+    changedFiles: number;
+    /**
+     * How many workspaces stand on it now.
+     *
+     * @generated from field: int32 users = 7;
+     */
+    users: number;
+};
+/**
+ * Describes the message gitd.v1.WarmLayer.
+ * Use `create(WarmLayerSchema)` to create a new message.
+ */
+export declare const WarmLayerSchema: GenMessage<WarmLayer>;
+/**
+ * @generated from message gitd.v1.ListWarmRequest
+ */
+export type ListWarmRequest = Message<"gitd.v1.ListWarmRequest"> & {
+    /**
+     * @generated from field: string url = 1;
+     */
+    url: string;
+};
+/**
+ * Describes the message gitd.v1.ListWarmRequest.
+ * Use `create(ListWarmRequestSchema)` to create a new message.
+ */
+export declare const ListWarmRequestSchema: GenMessage<ListWarmRequest>;
+/**
+ * @generated from message gitd.v1.ListWarmResponse
+ */
+export type ListWarmResponse = Message<"gitd.v1.ListWarmResponse"> & {
+    /**
+     * @generated from field: repeated gitd.v1.WarmLayer warm = 1;
+     */
+    warm: WarmLayer[];
+};
+/**
+ * Describes the message gitd.v1.ListWarmResponse.
+ * Use `create(ListWarmResponseSchema)` to create a new message.
+ */
+export declare const ListWarmResponseSchema: GenMessage<ListWarmResponse>;
 /**
  * @generated from message gitd.v1.AdoptRequest
  */
@@ -756,12 +919,138 @@ export type PublishRequest = Message<"gitd.v1.PublishRequest"> & {
      * @generated from field: repeated gitd.v1.Credential credentials = 3;
      */
     credentials: Credential[];
+    /**
+     * Who asked for the work, as their account on the git host, e.g. `josue`: written in the
+     * pull request and the audit log, and asked to review when the settings say so. gitd
+     * records it as told.
+     *
+     * @generated from field: string requested_by = 4;
+     */
+    requestedBy: string;
+    /**
+     * This publish's pull request, beyond what the settings say.
+     *
+     * @generated from field: gitd.v1.PullRequestOptions pull_request = 5;
+     */
+    pullRequest?: PullRequestOptions | undefined;
+    /**
+     * Where the work came from, written in the pull request and the audit log as told.
+     *
+     * @generated from field: gitd.v1.Provenance provenance = 6;
+     */
+    provenance?: Provenance | undefined;
+    /**
+     * Publish what a sandbox pushed through the endpoint instead of a workspace: the ID of
+     * its sandbox repository, with path left empty. branch names the branch it pushed there,
+     * published under the same name.
+     *
+     * @generated from field: string sandbox = 7;
+     */
+    sandbox: string;
 };
 /**
  * Describes the message gitd.v1.PublishRequest.
  * Use `create(PublishRequestSchema)` to create a new message.
  */
 export declare const PublishRequestSchema: GenMessage<PublishRequest>;
+/**
+ * Where a publish's work came from, as the platform says: gitd records it and never checks
+ * it, nor writes it into a commit. Each field is one line of at most 200 characters, never
+ * a secret; task_url is an https address.
+ *
+ * @generated from message gitd.v1.Provenance
+ */
+export type Provenance = Message<"gitd.v1.Provenance"> & {
+    /**
+     * The agent, e.g. `claude-code` or `openhands`.
+     *
+     * @generated from field: string agent = 1;
+     */
+    agent: string;
+    /**
+     * The model it ran on.
+     *
+     * @generated from field: string model = 2;
+     */
+    model: string;
+    /**
+     * The platform's name for the session or run.
+     *
+     * @generated from field: string session = 3;
+     */
+    session: string;
+    /**
+     * Where the task is: an issue, a ticket.
+     *
+     * @generated from field: string task_url = 4;
+     */
+    taskUrl: string;
+};
+/**
+ * Describes the message gitd.v1.Provenance.
+ * Use `create(ProvenanceSchema)` to create a new message.
+ */
+export declare const ProvenanceSchema: GenMessage<Provenance>;
+/**
+ * A publish's own say on its pull request. Unset fields take the settings'.
+ *
+ * @generated from message gitd.v1.PullRequestOptions
+ */
+export type PullRequestOptions = Message<"gitd.v1.PullRequestOptions"> & {
+    /**
+     * Open one even when the settings open them only when asked.
+     *
+     * @generated from field: bool open = 1;
+     */
+    open: boolean;
+    /**
+     * Empty: the subject of the newest commit.
+     *
+     * @generated from field: string title = 2;
+     */
+    title: string;
+    /**
+     * The platform's text; gitd's account of what it checked follows it.
+     *
+     * @generated from field: string body = 3;
+     */
+    body: string;
+    /**
+     * The branch it asks to merge into. Empty: the repository's default branch.
+     *
+     * @generated from field: string base = 4;
+     */
+    base: string;
+    /**
+     * @generated from field: optional bool draft = 5;
+     */
+    draft?: boolean | undefined;
+};
+/**
+ * Describes the message gitd.v1.PullRequestOptions.
+ * Use `create(PullRequestOptionsSchema)` to create a new message.
+ */
+export declare const PullRequestOptionsSchema: GenMessage<PullRequestOptions>;
+/**
+ * A pull request gitd opened.
+ *
+ * @generated from message gitd.v1.OpenedPullRequest
+ */
+export type OpenedPullRequest = Message<"gitd.v1.OpenedPullRequest"> & {
+    /**
+     * @generated from field: string url = 1;
+     */
+    url: string;
+    /**
+     * @generated from field: int64 number = 2;
+     */
+    number: bigint;
+};
+/**
+ * Describes the message gitd.v1.OpenedPullRequest.
+ * Use `create(OpenedPullRequestSchema)` to create a new message.
+ */
+export declare const OpenedPullRequestSchema: GenMessage<OpenedPullRequest>;
 /**
  * @generated from message gitd.v1.PublishedRepository
  */
@@ -808,6 +1097,19 @@ export type PublishResponse = Message<"gitd.v1.PublishResponse"> & {
      * @generated from field: repeated gitd.v1.PublishedRepository submodules = 3;
      */
     submodules: PublishedRepository[];
+    /**
+     * The pull request opened, when one was.
+     *
+     * @generated from field: gitd.v1.OpenedPullRequest pull_request = 4;
+     */
+    pullRequest?: OpenedPullRequest | undefined;
+    /**
+     * Why the pull request could not be opened, when it was to be. The branch is published
+     * all the same.
+     *
+     * @generated from field: gitd.v1.GitFailure pull_request_failure = 5;
+     */
+    pullRequestFailure?: GitFailure | undefined;
 };
 /**
  * Describes the message gitd.v1.PublishResponse.
@@ -815,274 +1117,1686 @@ export type PublishResponse = Message<"gitd.v1.PublishResponse"> & {
  */
 export declare const PublishResponseSchema: GenMessage<PublishResponse>;
 /**
- * @generated from message gitd.v1.ProbeRequest
+ * @generated from message gitd.v1.ChangesRequest
  */
-export type ProbeRequest = Message<"gitd.v1.ProbeRequest"> & {
+export type ChangesRequest = Message<"gitd.v1.ChangesRequest"> & {
     /**
-     * @generated from field: string url = 1;
+     * @generated from field: string path = 1;
      */
-    url: string;
+    path: string;
     /**
-     * @generated from field: repeated gitd.v1.Credential credentials = 2;
+     * Files the base commit's .gitignore ignores, such as node_modules, are left out unless
+     * asked for.
+     *
+     * @generated from field: bool include_ignored = 2;
      */
-    credentials: Credential[];
+    includeIgnored: boolean;
 };
 /**
- * Describes the message gitd.v1.ProbeRequest.
- * Use `create(ProbeRequestSchema)` to create a new message.
+ * Describes the message gitd.v1.ChangesRequest.
+ * Use `create(ChangesRequestSchema)` to create a new message.
  */
-export declare const ProbeRequestSchema: GenMessage<ProbeRequest>;
+export declare const ChangesRequestSchema: GenMessage<ChangesRequest>;
 /**
- * @generated from message gitd.v1.ProbeResponse
+ * @generated from message gitd.v1.ChangedFile
  */
-export type ProbeResponse = Message<"gitd.v1.ProbeResponse"> & {
+export type ChangedFile = Message<"gitd.v1.ChangedFile"> & {
     /**
-     * @generated from field: gitd.v1.ProbeResponse.Access access = 1;
+     * Relative to the workspace, with `/`.
+     *
+     * @generated from field: string path = 1;
      */
-    access: ProbeResponse_Access;
+    path: string;
     /**
-     * @generated from field: repeated string branches = 2;
+     * @generated from field: gitd.v1.ChangedFile.Kind kind = 2;
      */
-    branches: string[];
+    kind: ChangedFile_Kind;
     /**
-     * The branch the repository's HEAD points at.
-     *
-     * @generated from field: string default_branch = 3;
+     * @generated from field: int32 added_lines = 3;
      */
-    defaultBranch: string;
+    addedLines: number;
     /**
-     * @generated from field: gitd.v1.GitFailure failure = 4;
+     * @generated from field: int32 removed_lines = 4;
      */
-    failure?: GitFailure | undefined;
+    removedLines: number;
     /**
-     * The commit each branch points at, by branch: what a submodule's gitlink is set to.
+     * A binary file, whose lines are not counted.
      *
-     * @generated from field: map<string, string> commits = 5;
+     * @generated from field: bool binary = 5;
      */
-    commits: {
-        [key: string]: string;
-    };
+    binary: boolean;
 };
 /**
- * Describes the message gitd.v1.ProbeResponse.
- * Use `create(ProbeResponseSchema)` to create a new message.
+ * Describes the message gitd.v1.ChangedFile.
+ * Use `create(ChangedFileSchema)` to create a new message.
  */
-export declare const ProbeResponseSchema: GenMessage<ProbeResponse>;
+export declare const ChangedFileSchema: GenMessage<ChangedFile>;
 /**
- * @generated from enum gitd.v1.ProbeResponse.Access
+ * @generated from enum gitd.v1.ChangedFile.Kind
  */
-export declare enum ProbeResponse_Access {
+export declare enum ChangedFile_Kind {
     /**
-     * @generated from enum value: ACCESS_UNSPECIFIED = 0;
+     * @generated from enum value: KIND_UNSPECIFIED = 0;
      */
     UNSPECIFIED = 0,
     /**
-     * Read with nothing.
-     *
-     * @generated from enum value: ACCESS_PUBLIC = 1;
+     * @generated from enum value: KIND_ADDED = 1;
      */
-    PUBLIC = 1,
+    ADDED = 1,
     /**
-     * Read with the credentials given.
-     *
-     * @generated from enum value: ACCESS_REACHABLE = 2;
+     * @generated from enum value: KIND_MODIFIED = 2;
      */
-    REACHABLE = 2,
+    MODIFIED = 2,
     /**
-     * Not readable with what was given.
-     *
-     * @generated from enum value: ACCESS_DENIED = 3;
+     * @generated from enum value: KIND_DELETED = 3;
      */
-    DENIED = 3
+    DELETED = 3
 }
 /**
- * Describes the enum gitd.v1.ProbeResponse.Access.
+ * Describes the enum gitd.v1.ChangedFile.Kind.
  */
-export declare const ProbeResponse_AccessSchema: GenEnum<ProbeResponse_Access>;
+export declare const ChangedFile_KindSchema: GenEnum<ChangedFile_Kind>;
 /**
- * @generated from message gitd.v1.RetireRequest
+ * @generated from message gitd.v1.ChangesResponse
  */
-export type RetireRequest = Message<"gitd.v1.RetireRequest"> & {
+export type ChangesResponse = Message<"gitd.v1.ChangesResponse"> & {
     /**
-     * At least a day: a pool used moments ago is likely to be wanted again.
+     * The commit gitd last put the workspace on, which the changes are read against.
      *
-     * @generated from field: int64 unused_for_seconds = 1;
+     * @generated from field: string base = 1;
      */
-    unusedForSeconds: bigint;
+    base: string;
+    /**
+     * @generated from field: repeated gitd.v1.ChangedFile files = 2;
+     */
+    files: ChangedFile[];
+    /**
+     * Read from the agent's own layer, with no git run in the workspace; otherwise read by
+     * git in the workspace, which its sandbox should not be writing meanwhile.
+     *
+     * @generated from field: bool from_layer = 3;
+     */
+    fromLayer: boolean;
 };
 /**
- * Describes the message gitd.v1.RetireRequest.
- * Use `create(RetireRequestSchema)` to create a new message.
+ * Describes the message gitd.v1.ChangesResponse.
+ * Use `create(ChangesResponseSchema)` to create a new message.
  */
-export declare const RetireRequestSchema: GenMessage<RetireRequest>;
+export declare const ChangesResponseSchema: GenMessage<ChangesResponse>;
 /**
- * @generated from message gitd.v1.RetireResponse
+ * @generated from message gitd.v1.DiffRequest
  */
-export type RetireResponse = Message<"gitd.v1.RetireResponse"> & {
+export type DiffRequest = Message<"gitd.v1.DiffRequest"> & {
     /**
-     * @generated from field: int32 retired = 1;
+     * @generated from field: string path = 1;
      */
-    retired: number;
+    path: string;
     /**
-     * @generated from field: int64 freed_bytes = 2;
+     * Only these files, relative to the workspace; all the changes when empty.
+     *
+     * @generated from field: repeated string files = 2;
      */
-    freedBytes: bigint;
+    files: string[];
+    /**
+     * At most this many bytes of diff: 512 KiB when unset, never more than 8 MiB.
+     *
+     * @generated from field: int64 max_bytes = 3;
+     */
+    maxBytes: bigint;
+    /**
+     * @generated from field: bool include_ignored = 4;
+     */
+    includeIgnored: boolean;
 };
 /**
- * Describes the message gitd.v1.RetireResponse.
- * Use `create(RetireResponseSchema)` to create a new message.
- */
-export declare const RetireResponseSchema: GenMessage<RetireResponse>;
-/**
- * @generated from message gitd.v1.InfoRequest
- */
-export type InfoRequest = Message<"gitd.v1.InfoRequest"> & {};
-/**
- * Describes the message gitd.v1.InfoRequest.
- * Use `create(InfoRequestSchema)` to create a new message.
+ * Describes the message gitd.v1.DiffRequest.
+ * Use `create(DiffRequestSchema)` to create a new message.
  */
-export declare const InfoRequestSchema: GenMessage<InfoRequest>;
+export declare const DiffRequestSchema: GenMessage<DiffRequest>;
 /**
- * @generated from message gitd.v1.InfoResponse
+ * @generated from message gitd.v1.DiffResponse
  */
-export type InfoResponse = Message<"gitd.v1.InfoResponse"> & {
+export type DiffResponse = Message<"gitd.v1.DiffResponse"> & {
     /**
-     * @generated from field: string version = 1;
+     * @generated from field: string base = 1;
      */
-    version: string;
+    base: string;
     /**
-     * What `git version` says, e.g. "git version 2.48.1".
+     * The unified diff, with `a/` and `b/` before each path, as git writes it.
      *
-     * @generated from field: string git_version = 2;
+     * @generated from field: string diff = 2;
      */
-    gitVersion: string;
+    diff: string;
     /**
-     * How many pools there are and the disk they take, as of the last maintenance round.
+     * Cut short at max_bytes.
      *
-     * @generated from field: int32 pools = 3;
+     * @generated from field: bool truncated = 3;
      */
-    pools: number;
-    /**
-     * @generated from field: int64 pools_bytes = 4;
+    truncated: boolean;
+};
+/**
+ * Describes the message gitd.v1.DiffResponse.
+ * Use `create(DiffResponseSchema)` to create a new message.
+ */
+export declare const DiffResponseSchema: GenMessage<DiffResponse>;
+/**
+ * One work to compare: a workspace, by its path, or a branch gitd published — or any
+ * branch its pool holds — by its name.
+ *
+ * @generated from message gitd.v1.Side
+ */
+export type Side = Message<"gitd.v1.Side"> & {
+    /**
+     * @generated from oneof gitd.v1.Side.of
+     */
+    of: {
+        /**
+         * @generated from field: string workspace = 1;
+         */
+        value: string;
+        case: "workspace";
+    } | {
+        /**
+         * @generated from field: string branch = 2;
+         */
+        value: string;
+        case: "branch";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message gitd.v1.Side.
+ * Use `create(SideSchema)` to create a new message.
+ */
+export declare const SideSchema: GenMessage<Side>;
+/**
+ * @generated from message gitd.v1.CompareRequest
+ */
+export type CompareRequest = Message<"gitd.v1.CompareRequest"> & {
+    /**
+     * @generated from field: gitd.v1.Side first = 1;
+     */
+    first?: Side | undefined;
+    /**
+     * @generated from field: gitd.v1.Side second = 2;
+     */
+    second?: Side | undefined;
+    /**
+     * The repository, when both sides are branches; a workspace says its own, and every side
+     * must be of the same repository.
+     *
+     * @generated from field: string url = 3;
+     */
+    url: string;
+    /**
+     * @generated from field: bool include_ignored = 4;
+     */
+    includeIgnored: boolean;
+    /**
+     * The unified diff too, from first to second, cut short at max_bytes (512 KiB unless
+     * said, never more than 8 MiB).
+     *
+     * @generated from field: bool with_diff = 5;
+     */
+    withDiff: boolean;
+    /**
+     * @generated from field: int64 max_bytes = 6;
+     */
+    maxBytes: bigint;
+};
+/**
+ * Describes the message gitd.v1.CompareRequest.
+ * Use `create(CompareRequestSchema)` to create a new message.
+ */
+export declare const CompareRequestSchema: GenMessage<CompareRequest>;
+/**
+ * @generated from message gitd.v1.CompareResponse
+ */
+export type CompareResponse = Message<"gitd.v1.CompareResponse"> & {
+    /**
+     * From first to second: added is in second only, deleted in first only.
+     *
+     * @generated from field: repeated gitd.v1.ChangedFile files = 1;
+     */
+    files: ChangedFile[];
+    /**
+     * @generated from field: string diff = 2;
+     */
+    diff: string;
+    /**
+     * @generated from field: bool truncated = 3;
+     */
+    truncated: boolean;
+};
+/**
+ * Describes the message gitd.v1.CompareResponse.
+ * Use `create(CompareResponseSchema)` to create a new message.
+ */
+export declare const CompareResponseSchema: GenMessage<CompareResponse>;
+/**
+ * @generated from message gitd.v1.ConflictsRequest
+ */
+export type ConflictsRequest = Message<"gitd.v1.ConflictsRequest"> & {
+    /**
+     * At least two; a workspace stands for what it committed, which gitd brings into the pool
+     * as publishing does, so its sandbox should not be writing meanwhile.
+     *
+     * @generated from field: repeated gitd.v1.Side sides = 1;
+     */
+    sides: Side[];
+    /**
+     * @generated from field: string url = 2;
+     */
+    url: string;
+};
+/**
+ * Describes the message gitd.v1.ConflictsRequest.
+ * Use `create(ConflictsRequestSchema)` to create a new message.
+ */
+export declare const ConflictsRequestSchema: GenMessage<ConflictsRequest>;
+/**
+ * Two works that do not merge cleanly, and the files they conflict on.
+ *
+ * @generated from message gitd.v1.Conflict
+ */
+export type Conflict = Message<"gitd.v1.Conflict"> & {
+    /**
+     * @generated from field: gitd.v1.Side first = 1;
+     */
+    first?: Side | undefined;
+    /**
+     * @generated from field: gitd.v1.Side second = 2;
+     */
+    second?: Side | undefined;
+    /**
+     * @generated from field: repeated string paths = 3;
+     */
+    paths: string[];
+};
+/**
+ * Describes the message gitd.v1.Conflict.
+ * Use `create(ConflictSchema)` to create a new message.
+ */
+export declare const ConflictSchema: GenMessage<Conflict>;
+/**
+ * @generated from message gitd.v1.ConflictsResponse
+ */
+export type ConflictsResponse = Message<"gitd.v1.ConflictsResponse"> & {
+    /**
+     * Every pair that does not merge cleanly; none when all do.
+     *
+     * @generated from field: repeated gitd.v1.Conflict conflicts = 1;
+     */
+    conflicts: Conflict[];
+};
+/**
+ * Describes the message gitd.v1.ConflictsResponse.
+ * Use `create(ConflictsResponseSchema)` to create a new message.
+ */
+export declare const ConflictsResponseSchema: GenMessage<ConflictsResponse>;
+/**
+ * @generated from message gitd.v1.WatchRequest
+ */
+export type WatchRequest = Message<"gitd.v1.WatchRequest"> & {
+    /**
+     * Only these workspaces; every workspace when empty.
+     *
+     * @generated from field: repeated string paths = 1;
+     */
+    paths: string[];
+};
+/**
+ * Describes the message gitd.v1.WatchRequest.
+ * Use `create(WatchRequestSchema)` to create a new message.
+ */
+export declare const WatchRequestSchema: GenMessage<WatchRequest>;
+/**
+ * @generated from message gitd.v1.WatchResponse
+ */
+export type WatchResponse = Message<"gitd.v1.WatchResponse"> & {
+    /**
+     * @generated from field: gitd.v1.WatchResponse.Kind kind = 1;
+     */
+    kind: WatchResponse_Kind;
+    /**
+     * @generated from field: string path = 2;
+     */
+    path: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp time = 3;
+     */
+    time?: Timestamp | undefined;
+    /**
+     * The branch, for a publish done or refused.
+     *
+     * @generated from field: string branch = 4;
+     */
+    branch: string;
+    /**
+     * The pull request opened, or why a publish was refused.
+     *
+     * @generated from field: string detail = 5;
+     */
+    detail: string;
+};
+/**
+ * Describes the message gitd.v1.WatchResponse.
+ * Use `create(WatchResponseSchema)` to create a new message.
+ */
+export declare const WatchResponseSchema: GenMessage<WatchResponse>;
+/**
+ * @generated from enum gitd.v1.WatchResponse.Kind
+ */
+export declare enum WatchResponse_Kind {
+    /**
+     * @generated from enum value: KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: KIND_MADE = 1;
+     */
+    MADE = 1,
+    /**
+     * Something in the workspace changed: seen in the agent's layer of an overlay workspace,
+     * within a couple of seconds, and coalesced.
+     *
+     * @generated from enum value: KIND_CHANGED = 2;
+     */
+    CHANGED = 2,
+    /**
+     * @generated from enum value: KIND_PUBLISHED = 3;
+     */
+    PUBLISHED = 3,
+    /**
+     * @generated from enum value: KIND_REFUSED = 4;
+     */
+    REFUSED = 4,
+    /**
+     * @generated from enum value: KIND_REMOVED = 5;
+     */
+    REMOVED = 5
+}
+/**
+ * Describes the enum gitd.v1.WatchResponse.Kind.
+ */
+export declare const WatchResponse_KindSchema: GenEnum<WatchResponse_Kind>;
+/**
+ * @generated from message gitd.v1.ProbeRequest
+ */
+export type ProbeRequest = Message<"gitd.v1.ProbeRequest"> & {
+    /**
+     * @generated from field: string url = 1;
+     */
+    url: string;
+    /**
+     * @generated from field: repeated gitd.v1.Credential credentials = 2;
+     */
+    credentials: Credential[];
+};
+/**
+ * Describes the message gitd.v1.ProbeRequest.
+ * Use `create(ProbeRequestSchema)` to create a new message.
+ */
+export declare const ProbeRequestSchema: GenMessage<ProbeRequest>;
+/**
+ * @generated from message gitd.v1.ProbeResponse
+ */
+export type ProbeResponse = Message<"gitd.v1.ProbeResponse"> & {
+    /**
+     * @generated from field: gitd.v1.ProbeResponse.Access access = 1;
+     */
+    access: ProbeResponse_Access;
+    /**
+     * @generated from field: repeated string branches = 2;
+     */
+    branches: string[];
+    /**
+     * The branch the repository's HEAD points at.
+     *
+     * @generated from field: string default_branch = 3;
+     */
+    defaultBranch: string;
+    /**
+     * @generated from field: gitd.v1.GitFailure failure = 4;
+     */
+    failure?: GitFailure | undefined;
+    /**
+     * The commit each branch points at, by branch: what a submodule's gitlink is set to.
+     *
+     * @generated from field: map<string, string> commits = 5;
+     */
+    commits: {
+        [key: string]: string;
+    };
+};
+/**
+ * Describes the message gitd.v1.ProbeResponse.
+ * Use `create(ProbeResponseSchema)` to create a new message.
+ */
+export declare const ProbeResponseSchema: GenMessage<ProbeResponse>;
+/**
+ * @generated from enum gitd.v1.ProbeResponse.Access
+ */
+export declare enum ProbeResponse_Access {
+    /**
+     * @generated from enum value: ACCESS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Read with nothing.
+     *
+     * @generated from enum value: ACCESS_PUBLIC = 1;
+     */
+    PUBLIC = 1,
+    /**
+     * Read with the credentials given.
+     *
+     * @generated from enum value: ACCESS_REACHABLE = 2;
+     */
+    REACHABLE = 2,
+    /**
+     * Not readable with what was given.
+     *
+     * @generated from enum value: ACCESS_DENIED = 3;
+     */
+    DENIED = 3
+}
+/**
+ * Describes the enum gitd.v1.ProbeResponse.Access.
+ */
+export declare const ProbeResponse_AccessSchema: GenEnum<ProbeResponse_Access>;
+/**
+ * @generated from message gitd.v1.RetireRequest
+ */
+export type RetireRequest = Message<"gitd.v1.RetireRequest"> & {
+    /**
+     * At least a day: a pool used moments ago is likely to be wanted again.
+     *
+     * @generated from field: int64 unused_for_seconds = 1;
+     */
+    unusedForSeconds: bigint;
+};
+/**
+ * Describes the message gitd.v1.RetireRequest.
+ * Use `create(RetireRequestSchema)` to create a new message.
+ */
+export declare const RetireRequestSchema: GenMessage<RetireRequest>;
+/**
+ * @generated from message gitd.v1.RetireResponse
+ */
+export type RetireResponse = Message<"gitd.v1.RetireResponse"> & {
+    /**
+     * @generated from field: int32 retired = 1;
+     */
+    retired: number;
+    /**
+     * @generated from field: int64 freed_bytes = 2;
+     */
+    freedBytes: bigint;
+};
+/**
+ * Describes the message gitd.v1.RetireResponse.
+ * Use `create(RetireResponseSchema)` to create a new message.
+ */
+export declare const RetireResponseSchema: GenMessage<RetireResponse>;
+/**
+ * @generated from message gitd.v1.InfoRequest
+ */
+export type InfoRequest = Message<"gitd.v1.InfoRequest"> & {};
+/**
+ * Describes the message gitd.v1.InfoRequest.
+ * Use `create(InfoRequestSchema)` to create a new message.
+ */
+export declare const InfoRequestSchema: GenMessage<InfoRequest>;
+/**
+ * @generated from message gitd.v1.InfoResponse
+ */
+export type InfoResponse = Message<"gitd.v1.InfoResponse"> & {
+    /**
+     * @generated from field: string version = 1;
+     */
+    version: string;
+    /**
+     * What `git version` says, e.g. "git version 2.48.1".
+     *
+     * @generated from field: string git_version = 2;
+     */
+    gitVersion: string;
+    /**
+     * How many pools there are and the disk they take, as of the last maintenance round.
+     *
+     * @generated from field: int32 pools = 3;
+     */
+    pools: number;
+    /**
+     * @generated from field: int64 pools_bytes = 4;
+     */
+    poolsBytes: bigint;
+    /**
+     * How new workspaces are made on this machine, and why: what gitd detected at start.
+     *
+     * @generated from field: gitd.v1.Strategy strategy = 5;
+     */
+    strategy: Strategy;
+    /**
+     * @generated from field: string strategy_reason = 6;
+     */
+    strategyReason: string;
+    /**
+     * How many templates there are and the disk they take, as of the last maintenance round.
+     *
+     * @generated from field: int32 templates = 7;
+     */
+    templates: number;
+    /**
+     * @generated from field: int64 templates_bytes = 8;
+     */
+    templatesBytes: bigint;
+};
+/**
+ * Describes the message gitd.v1.InfoResponse.
+ * Use `create(InfoResponseSchema)` to create a new message.
+ */
+export declare const InfoResponseSchema: GenMessage<InfoResponse>;
+/**
+ * @generated from message gitd.v1.AuditRequest
+ */
+export type AuditRequest = Message<"gitd.v1.AuditRequest"> & {
+    /**
+     * Only the entries from this time on; all of them when unset.
+     *
+     * @generated from field: google.protobuf.Timestamp since = 1;
+     */
+    since?: Timestamp | undefined;
+    /**
+     * Only the entries of this repository, as its URL is written in them.
+     *
+     * @generated from field: string url = 2;
+     */
+    url: string;
+    /**
+     * At most this many, newest first: 100 when unset, never more than 1000.
+     *
+     * @generated from field: int32 limit = 3;
+     */
+    limit: number;
+};
+/**
+ * Describes the message gitd.v1.AuditRequest.
+ * Use `create(AuditRequestSchema)` to create a new message.
+ */
+export declare const AuditRequestSchema: GenMessage<AuditRequest>;
+/**
+ * @generated from message gitd.v1.AuditResponse
+ */
+export type AuditResponse = Message<"gitd.v1.AuditResponse"> & {
+    /**
+     * @generated from field: repeated gitd.v1.AuditEntry entries = 1;
+     */
+    entries: AuditEntry[];
+};
+/**
+ * Describes the message gitd.v1.AuditResponse.
+ * Use `create(AuditResponseSchema)` to create a new message.
+ */
+export declare const AuditResponseSchema: GenMessage<AuditResponse>;
+/**
+ * One publish, done or refused, or one change to connections or publishing settings, as
+ * the audit log keeps it: one per line of the log file, in this message's JSON form.
+ *
+ * @generated from message gitd.v1.AuditEntry
+ */
+export type AuditEntry = Message<"gitd.v1.AuditEntry"> & {
+    /**
+     * @generated from field: google.protobuf.Timestamp time = 1;
+     */
+    time?: Timestamp | undefined;
+    /**
+     * The workspace's path, as the caller gave it.
+     *
+     * @generated from field: string workspace = 2;
+     */
+    workspace: string;
+    /**
+     * The workspace's repository; empty when the workspace could not be opened.
+     *
+     * @generated from field: string url = 3;
+     */
+    url: string;
+    /**
+     * @generated from field: string branch = 4;
+     */
+    branch: string;
+    /**
+     * What was pushed: the workspace's repository, then each submodule. Unset when refused.
+     *
+     * @generated from field: gitd.v1.PublishedRepository repository = 5;
+     */
+    repository?: PublishedRepository | undefined;
+    /**
+     * @generated from field: repeated gitd.v1.PublishedRepository submodules = 6;
+     */
+    submodules: PublishedRepository[];
+    /**
+     * Why it was refused. Unset when it was published.
+     *
+     * @generated from field: gitd.v1.GitFailure refusal = 7;
+     */
+    refusal?: GitFailure | undefined;
+    /**
+     * Who asked for the work, as the publish said.
+     *
+     * @generated from field: string requested_by = 8;
+     */
+    requestedBy: string;
+    /**
+     * The pull request opened, or why it could not be.
+     *
+     * @generated from field: gitd.v1.OpenedPullRequest pull_request = 9;
+     */
+    pullRequest?: OpenedPullRequest | undefined;
+    /**
+     * @generated from field: gitd.v1.GitFailure pull_request_failure = 10;
+     */
+    pullRequestFailure?: GitFailure | undefined;
+    /**
+     * A change to connections or publishing settings; the other fields are then unset.
+     *
+     * @generated from field: gitd.v1.ConfigurationChange change = 11;
+     */
+    change?: ConfigurationChange | undefined;
+    /**
+     * Where the work came from, as the publish said.
+     *
+     * @generated from field: gitd.v1.Provenance provenance = 12;
+     */
+    provenance?: Provenance | undefined;
+    /**
+     * The sandbox repository published from, when it was not a workspace.
+     *
+     * @generated from field: string sandbox = 13;
+     */
+    sandbox: string;
+};
+/**
+ * Describes the message gitd.v1.AuditEntry.
+ * Use `create(AuditEntrySchema)` to create a new message.
+ */
+export declare const AuditEntrySchema: GenMessage<AuditEntry>;
+/**
+ * A connection added or removed, or the settings of a prefix set or removed.
+ *
+ * @generated from message gitd.v1.ConfigurationChange
+ */
+export type ConfigurationChange = Message<"gitd.v1.ConfigurationChange"> & {
+    /**
+     * @generated from field: gitd.v1.ConfigurationChange.Action action = 1;
+     */
+    action: ConfigurationChange_Action;
+    /**
+     * The connection's ID, the settings' prefix, the preset's name, or the token's ID.
+     *
+     * @generated from field: string subject = 2;
+     */
+    subject: string;
+    /**
+     * What it opens or applies to, e.g. `https://github.com/acme`.
+     *
+     * @generated from field: string url_prefix = 3;
+     */
+    urlPrefix: string;
+};
+/**
+ * Describes the message gitd.v1.ConfigurationChange.
+ * Use `create(ConfigurationChangeSchema)` to create a new message.
+ */
+export declare const ConfigurationChangeSchema: GenMessage<ConfigurationChange>;
+/**
+ * @generated from enum gitd.v1.ConfigurationChange.Action
+ */
+export declare enum ConfigurationChange_Action {
+    /**
+     * @generated from enum value: ACTION_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: ACTION_CONNECTION_ADDED = 1;
+     */
+    CONNECTION_ADDED = 1,
+    /**
+     * @generated from enum value: ACTION_CONNECTION_REMOVED = 2;
+     */
+    CONNECTION_REMOVED = 2,
+    /**
+     * @generated from enum value: ACTION_SETTINGS_SET = 3;
+     */
+    SETTINGS_SET = 3,
+    /**
+     * @generated from enum value: ACTION_SETTINGS_REMOVED = 4;
+     */
+    SETTINGS_REMOVED = 4,
+    /**
+     * @generated from enum value: ACTION_PRESET_SET = 5;
+     */
+    PRESET_SET = 5,
+    /**
+     * @generated from enum value: ACTION_PRESET_REMOVED = 6;
+     */
+    PRESET_REMOVED = 6,
+    /**
+     * @generated from enum value: ACTION_TOKEN_ISSUED = 7;
+     */
+    TOKEN_ISSUED = 7,
+    /**
+     * @generated from enum value: ACTION_TOKEN_REVOKED = 8;
+     */
+    TOKEN_REVOKED = 8
+}
+/**
+ * Describes the enum gitd.v1.ConfigurationChange.Action.
+ */
+export declare const ConfigurationChange_ActionSchema: GenEnum<ConfigurationChange_Action>;
+/**
+ * One credential gitd keeps.
+ *
+ * @generated from message gitd.v1.Connection
+ */
+export type Connection = Message<"gitd.v1.Connection"> & {
+    /**
+     * gitd's name for it, to remove it by.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: gitd.v1.Connection.Kind kind = 2;
+     */
+    kind: Connection_Kind;
+    /**
+     * The repositories it opens: those whose address starts with this.
+     *
+     * @generated from field: string url_prefix = 3;
+     */
+    urlPrefix: string;
+    /**
+     * Whom it acts as: the App's bot (`acme-agents[bot]`) or the person (`josue`). Empty for
+     * a token or a key.
+     *
+     * @generated from field: string acts_as = 4;
+     */
+    actsAs: string;
+    /**
+     * For an App: its ID, and where its installations are managed.
+     *
+     * @generated from field: int64 app_id = 5;
+     */
+    appId: bigint;
+    /**
+     * @generated from field: string manage_url = 6;
+     */
+    manageUrl: string;
+    /**
+     * When it stops working unless renewed: a sign-in's renewal ends then.
+     *
+     * @generated from field: google.protobuf.Timestamp expires = 7;
+     */
+    expires?: Timestamp | undefined;
+    /**
+     * From the configuration file: shown, never changed through the API.
+     *
+     * @generated from field: bool from_file = 8;
+     */
+    fromFile: boolean;
+    /**
+     * @generated from field: google.protobuf.Timestamp created = 9;
+     */
+    created?: Timestamp | undefined;
+};
+/**
+ * Describes the message gitd.v1.Connection.
+ * Use `create(ConnectionSchema)` to create a new message.
+ */
+export declare const ConnectionSchema: GenMessage<Connection>;
+/**
+ * @generated from enum gitd.v1.Connection.Kind
+ */
+export declare enum Connection_Kind {
+    /**
+     * @generated from enum value: KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: KIND_TOKEN = 1;
+     */
+    TOKEN = 1,
+    /**
+     * @generated from enum value: KIND_SSH_KEY = 2;
+     */
+    SSH_KEY = 2,
+    /**
+     * A GitHub App: its installation tokens open one repository each, for an hour.
+     *
+     * @generated from enum value: KIND_GITHUB_APP = 3;
+     */
+    GITHUB_APP = 3,
+    /**
+     * A person signed in through gitd's public App: their tokens, renewed by gitd.
+     *
+     * @generated from enum value: KIND_GITHUB_LOGIN = 4;
+     */
+    GITHUB_LOGIN = 4
+}
+/**
+ * Describes the enum gitd.v1.Connection.Kind.
+ */
+export declare const Connection_KindSchema: GenEnum<Connection_Kind>;
+/**
+ * @generated from message gitd.v1.BeginGitHubAppRequest
+ */
+export type BeginGitHubAppRequest = Message<"gitd.v1.BeginGitHubAppRequest"> & {
+    /**
+     * The GitHub host: empty for github.com, or a GitHub Enterprise Server's.
+     *
+     * @generated from field: string host = 1;
+     */
+    host: string;
+    /**
+     * The organisation that owns the App. Empty: the account of the person creating it.
+     *
+     * @generated from field: string organization = 2;
+     */
+    organization: string;
+    /**
+     * The App's name on GitHub, e.g. `acme-agents`; its bot is `acme-agents[bot]`.
+     *
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * Where GitHub sends the person once the App is created: the platform's page, which
+     * hands the code and state to CompleteGitHubApp.
+     *
+     * @generated from field: string redirect_url = 4;
+     */
+    redirectUrl: string;
+};
+/**
+ * Describes the message gitd.v1.BeginGitHubAppRequest.
+ * Use `create(BeginGitHubAppRequestSchema)` to create a new message.
+ */
+export declare const BeginGitHubAppRequestSchema: GenMessage<BeginGitHubAppRequest>;
+/**
+ * @generated from message gitd.v1.BeginGitHubAppResponse
+ */
+export type BeginGitHubAppResponse = Message<"gitd.v1.BeginGitHubAppResponse"> & {
+    /**
+     * Where the person's browser posts the manifest, as a form field named `manifest`.
+     *
+     * @generated from field: string form_action = 1;
+     */
+    formAction: string;
+    /**
+     * The manifest, in JSON: the App's name, its permissions (contents and pull requests,
+     * read and write; metadata, read), no webhook.
+     *
+     * @generated from field: string manifest = 2;
+     */
+    manifest: string;
+    /**
+     * Ties GitHub's answer to this request; expires in an hour.
+     *
+     * @generated from field: string state = 3;
+     */
+    state: string;
+};
+/**
+ * Describes the message gitd.v1.BeginGitHubAppResponse.
+ * Use `create(BeginGitHubAppResponseSchema)` to create a new message.
+ */
+export declare const BeginGitHubAppResponseSchema: GenMessage<BeginGitHubAppResponse>;
+/**
+ * @generated from message gitd.v1.CompleteGitHubAppRequest
+ */
+export type CompleteGitHubAppRequest = Message<"gitd.v1.CompleteGitHubAppRequest"> & {
+    /**
+     * @generated from field: string code = 1;
+     */
+    code: string;
+    /**
+     * @generated from field: string state = 2;
+     */
+    state: string;
+};
+/**
+ * Describes the message gitd.v1.CompleteGitHubAppRequest.
+ * Use `create(CompleteGitHubAppRequestSchema)` to create a new message.
+ */
+export declare const CompleteGitHubAppRequestSchema: GenMessage<CompleteGitHubAppRequest>;
+/**
+ * @generated from message gitd.v1.CompleteGitHubAppResponse
+ */
+export type CompleteGitHubAppResponse = Message<"gitd.v1.CompleteGitHubAppResponse"> & {
+    /**
+     * @generated from field: gitd.v1.Connection connection = 1;
      */
-    poolsBytes: bigint;
+    connection?: Connection | undefined;
+    /**
+     * Where the person installs the App on the repositories it may reach.
+     *
+     * @generated from field: string install_url = 2;
+     */
+    installUrl: string;
+};
+/**
+ * Describes the message gitd.v1.CompleteGitHubAppResponse.
+ * Use `create(CompleteGitHubAppResponseSchema)` to create a new message.
+ */
+export declare const CompleteGitHubAppResponseSchema: GenMessage<CompleteGitHubAppResponse>;
+/**
+ * @generated from message gitd.v1.StartGitHubLoginRequest
+ */
+export type StartGitHubLoginRequest = Message<"gitd.v1.StartGitHubLoginRequest"> & {
+    /**
+     * The GitHub host: empty for github.com.
+     *
+     * @generated from field: string host = 1;
+     */
+    host: string;
+};
+/**
+ * Describes the message gitd.v1.StartGitHubLoginRequest.
+ * Use `create(StartGitHubLoginRequestSchema)` to create a new message.
+ */
+export declare const StartGitHubLoginRequestSchema: GenMessage<StartGitHubLoginRequest>;
+/**
+ * @generated from message gitd.v1.StartGitHubLoginResponse
+ */
+export type StartGitHubLoginResponse = Message<"gitd.v1.StartGitHubLoginResponse"> & {
+    /**
+     * What the person enters at `verification_url`.
+     *
+     * @generated from field: string user_code = 1;
+     */
+    userCode: string;
+    /**
+     * @generated from field: string verification_url = 2;
+     */
+    verificationUrl: string;
+    /**
+     * Hands this sign-in to FinishGitHubLogin.
+     *
+     * @generated from field: string login_id = 3;
+     */
+    loginId: string;
+    /**
+     * How long the code is good for.
+     *
+     * @generated from field: int32 expires_in_seconds = 4;
+     */
+    expiresInSeconds: number;
+};
+/**
+ * Describes the message gitd.v1.StartGitHubLoginResponse.
+ * Use `create(StartGitHubLoginResponseSchema)` to create a new message.
+ */
+export declare const StartGitHubLoginResponseSchema: GenMessage<StartGitHubLoginResponse>;
+/**
+ * @generated from message gitd.v1.FinishGitHubLoginRequest
+ */
+export type FinishGitHubLoginRequest = Message<"gitd.v1.FinishGitHubLoginRequest"> & {
+    /**
+     * @generated from field: string login_id = 1;
+     */
+    loginId: string;
+};
+/**
+ * Describes the message gitd.v1.FinishGitHubLoginRequest.
+ * Use `create(FinishGitHubLoginRequestSchema)` to create a new message.
+ */
+export declare const FinishGitHubLoginRequestSchema: GenMessage<FinishGitHubLoginRequest>;
+/**
+ * @generated from message gitd.v1.FinishGitHubLoginResponse
+ */
+export type FinishGitHubLoginResponse = Message<"gitd.v1.FinishGitHubLoginResponse"> & {
+    /**
+     * @generated from field: gitd.v1.Connection connection = 1;
+     */
+    connection?: Connection | undefined;
+    /**
+     * Where the person installs gitd's App on the repositories it may reach, if not yet.
+     *
+     * @generated from field: string install_url = 2;
+     */
+    installUrl: string;
+};
+/**
+ * Describes the message gitd.v1.FinishGitHubLoginResponse.
+ * Use `create(FinishGitHubLoginResponseSchema)` to create a new message.
+ */
+export declare const FinishGitHubLoginResponseSchema: GenMessage<FinishGitHubLoginResponse>;
+/**
+ * @generated from message gitd.v1.AddGitHubAppRequest
+ */
+export type AddGitHubAppRequest = Message<"gitd.v1.AddGitHubAppRequest"> & {
+    /**
+     * The GitHub host: empty for github.com.
+     *
+     * @generated from field: string host = 1;
+     */
+    host: string;
+    /**
+     * @generated from field: int64 app_id = 2;
+     */
+    appId: bigint;
+    /**
+     * The App's private key, in PEM.
+     *
+     * @generated from field: string private_key = 3;
+     */
+    privateKey: string;
+    /**
+     * The repositories it opens. Empty: every repository on the host its installations reach.
+     *
+     * @generated from field: string url_prefix = 4;
+     */
+    urlPrefix: string;
+};
+/**
+ * Describes the message gitd.v1.AddGitHubAppRequest.
+ * Use `create(AddGitHubAppRequestSchema)` to create a new message.
+ */
+export declare const AddGitHubAppRequestSchema: GenMessage<AddGitHubAppRequest>;
+/**
+ * @generated from message gitd.v1.AddGitHubAppResponse
+ */
+export type AddGitHubAppResponse = Message<"gitd.v1.AddGitHubAppResponse"> & {
+    /**
+     * @generated from field: gitd.v1.Connection connection = 1;
+     */
+    connection?: Connection | undefined;
+};
+/**
+ * Describes the message gitd.v1.AddGitHubAppResponse.
+ * Use `create(AddGitHubAppResponseSchema)` to create a new message.
+ */
+export declare const AddGitHubAppResponseSchema: GenMessage<AddGitHubAppResponse>;
+/**
+ * @generated from message gitd.v1.AddTokenRequest
+ */
+export type AddTokenRequest = Message<"gitd.v1.AddTokenRequest"> & {
+    /**
+     * Must name the host, e.g. `https://gitlab.example.com/acme`.
+     *
+     * @generated from field: string url_prefix = 1;
+     */
+    urlPrefix: string;
+    /**
+     * @generated from field: string token = 2;
+     */
+    token: string;
+    /**
+     * As `Credential.https_user`.
+     *
+     * @generated from field: string user = 3;
+     */
+    user: string;
+};
+/**
+ * Describes the message gitd.v1.AddTokenRequest.
+ * Use `create(AddTokenRequestSchema)` to create a new message.
+ */
+export declare const AddTokenRequestSchema: GenMessage<AddTokenRequest>;
+/**
+ * @generated from message gitd.v1.AddTokenResponse
+ */
+export type AddTokenResponse = Message<"gitd.v1.AddTokenResponse"> & {
+    /**
+     * @generated from field: gitd.v1.Connection connection = 1;
+     */
+    connection?: Connection | undefined;
+};
+/**
+ * Describes the message gitd.v1.AddTokenResponse.
+ * Use `create(AddTokenResponseSchema)` to create a new message.
+ */
+export declare const AddTokenResponseSchema: GenMessage<AddTokenResponse>;
+/**
+ * @generated from message gitd.v1.ListConnectionsRequest
+ */
+export type ListConnectionsRequest = Message<"gitd.v1.ListConnectionsRequest"> & {};
+/**
+ * Describes the message gitd.v1.ListConnectionsRequest.
+ * Use `create(ListConnectionsRequestSchema)` to create a new message.
+ */
+export declare const ListConnectionsRequestSchema: GenMessage<ListConnectionsRequest>;
+/**
+ * @generated from message gitd.v1.ListConnectionsResponse
+ */
+export type ListConnectionsResponse = Message<"gitd.v1.ListConnectionsResponse"> & {
+    /**
+     * @generated from field: repeated gitd.v1.Connection connections = 1;
+     */
+    connections: Connection[];
+};
+/**
+ * Describes the message gitd.v1.ListConnectionsResponse.
+ * Use `create(ListConnectionsResponseSchema)` to create a new message.
+ */
+export declare const ListConnectionsResponseSchema: GenMessage<ListConnectionsResponse>;
+/**
+ * @generated from message gitd.v1.RemoveConnectionRequest
+ */
+export type RemoveConnectionRequest = Message<"gitd.v1.RemoveConnectionRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * Describes the message gitd.v1.RemoveConnectionRequest.
+ * Use `create(RemoveConnectionRequestSchema)` to create a new message.
+ */
+export declare const RemoveConnectionRequestSchema: GenMessage<RemoveConnectionRequest>;
+/**
+ * @generated from message gitd.v1.RemoveConnectionResponse
+ */
+export type RemoveConnectionResponse = Message<"gitd.v1.RemoveConnectionResponse"> & {};
+/**
+ * Describes the message gitd.v1.RemoveConnectionResponse.
+ * Use `create(RemoveConnectionResponseSchema)` to create a new message.
+ */
+export declare const RemoveConnectionResponseSchema: GenMessage<RemoveConnectionResponse>;
+/**
+ * The rules publishing follows for the repositories under a prefix.
+ *
+ * Every setting whose prefix opens a repository applies to it: their paths add up and the
+ * smallest file limit wins, so a narrower setting never loosens a broader one. A branch
+ * prefix and pull request choices are the most specific setting's, and a narrower branch
+ * prefix must start with every broader one.
+ *
+ * @generated from message gitd.v1.PublishSettings
+ */
+export type PublishSettings = Message<"gitd.v1.PublishSettings"> & {
+    /**
+     * The repositories these apply to; empty for every repository.
+     *
+     * @generated from field: string url_prefix = 1;
+     */
+    urlPrefix: string;
+    /**
+     * The name of a preset whose rules these take, and which the fields below add to.
+     *
+     * @generated from field: string preset = 2;
+     */
+    preset: string;
+    /**
+     * Paths a publish may not change, as git's glob pathspecs, e.g. `.github/workflows/**`.
+     *
+     * @generated from field: repeated string protected_paths = 3;
+     */
+    protectedPaths: string[];
+    /**
+     * Paths a publish may change but not delete or rename away, e.g. `tests/**`.
+     *
+     * @generated from field: repeated string kept_paths = 4;
+     */
+    keptPaths: string[];
+    /**
+     * At most this many files changed; unset for the preset's, or no limit.
+     *
+     * @generated from field: optional int32 max_changed_files = 5;
+     */
+    maxChangedFiles?: number | undefined;
+    /**
+     * What every published branch must start with, e.g. `agents/`.
+     *
+     * @generated from field: string branch_prefix = 6;
+     */
+    branchPrefix: string;
+    /**
+     * @generated from field: gitd.v1.PullRequestSettings pull_requests = 7;
+     */
+    pullRequests?: PullRequestSettings | undefined;
+    /**
+     * From the configuration file: shown, never changed through the API.
+     *
+     * @generated from field: bool from_file = 8;
+     */
+    fromFile: boolean;
+    /**
+     * Paths these settings' own rules — their preset's and their own — leave free, as glob
+     * pathspecs, e.g. `.gitmodules` under `recommended`. They never free what another
+     * setting protects or keeps.
+     *
+     * @generated from field: repeated string allowed_paths = 9;
+     */
+    allowedPaths: string[];
+};
+/**
+ * Describes the message gitd.v1.PublishSettings.
+ * Use `create(PublishSettingsSchema)` to create a new message.
+ */
+export declare const PublishSettingsSchema: GenMessage<PublishSettings>;
+/**
+ * A named set of rules settings take. gitd has its own `recommended`: it protects
+ * `.github/workflows/**`, `.gitlab-ci.yml`, `CODEOWNERS` and `.gitmodules`, keeps tests
+ * (`**\/*_test.*`, `**\/*.test.*`, `**\/test/**`, `**\/tests/**`, `**\/__tests__/**`) and
+ * allows at most 200 files changed; a preset of that name replaces it.
+ *
+ * @generated from message gitd.v1.Preset
+ */
+export type Preset = Message<"gitd.v1.Preset"> & {
+    /**
+     * Lowercase letters, digits, `-`, `_` and `.`, up to 64.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * @generated from field: repeated string protected_paths = 2;
+     */
+    protectedPaths: string[];
+    /**
+     * @generated from field: repeated string kept_paths = 3;
+     */
+    keptPaths: string[];
+    /**
+     * @generated from field: optional int32 max_changed_files = 4;
+     */
+    maxChangedFiles?: number | undefined;
+    /**
+     * @generated from field: gitd.v1.Preset.Origin origin = 5;
+     */
+    origin: Preset_Origin;
+};
+/**
+ * Describes the message gitd.v1.Preset.
+ * Use `create(PresetSchema)` to create a new message.
+ */
+export declare const PresetSchema: GenMessage<Preset>;
+/**
+ * Where it comes from: gitd's own, the configuration file, or the API.
+ *
+ * @generated from enum gitd.v1.Preset.Origin
+ */
+export declare enum Preset_Origin {
+    /**
+     * @generated from enum value: ORIGIN_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: ORIGIN_BUILT_IN = 1;
+     */
+    BUILT_IN = 1,
+    /**
+     * @generated from enum value: ORIGIN_FILE = 2;
+     */
+    FILE = 2,
+    /**
+     * @generated from enum value: ORIGIN_API = 3;
+     */
+    API = 3
+}
+/**
+ * Describes the enum gitd.v1.Preset.Origin.
+ */
+export declare const Preset_OriginSchema: GenEnum<Preset_Origin>;
+/**
+ * How publishes open pull requests.
+ *
+ * @generated from message gitd.v1.PullRequestSettings
+ */
+export type PullRequestSettings = Message<"gitd.v1.PullRequestSettings"> & {
+    /**
+     * @generated from field: gitd.v1.PullRequestSettings.Open open = 1;
+     */
+    open: PullRequestSettings_Open;
+    /**
+     * @generated from field: bool draft = 2;
+     */
+    draft: boolean;
+    /**
+     * @generated from field: repeated string labels = 3;
+     */
+    labels: string[];
+    /**
+     * Ask the person the publish names in `requested_by` to review it.
+     *
+     * @generated from field: bool request_review_from_requester = 4;
+     */
+    requestReviewFromRequester: boolean;
+};
+/**
+ * Describes the message gitd.v1.PullRequestSettings.
+ * Use `create(PullRequestSettingsSchema)` to create a new message.
+ */
+export declare const PullRequestSettingsSchema: GenMessage<PullRequestSettings>;
+/**
+ * @generated from enum gitd.v1.PullRequestSettings.Open
+ */
+export declare enum PullRequestSettings_Open {
+    /**
+     * @generated from enum value: OPEN_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Only when the publish asks (`PullRequestOptions.open`).
+     *
+     * @generated from enum value: OPEN_WHEN_ASKED = 1;
+     */
+    WHEN_ASKED = 1,
+    /**
+     * @generated from enum value: OPEN_ALWAYS = 2;
+     */
+    ALWAYS = 2
+}
+/**
+ * Describes the enum gitd.v1.PullRequestSettings.Open.
+ */
+export declare const PullRequestSettings_OpenSchema: GenEnum<PullRequestSettings_Open>;
+/**
+ * @generated from message gitd.v1.GetSettingsRequest
+ */
+export type GetSettingsRequest = Message<"gitd.v1.GetSettingsRequest"> & {};
+/**
+ * Describes the message gitd.v1.GetSettingsRequest.
+ * Use `create(GetSettingsRequestSchema)` to create a new message.
+ */
+export declare const GetSettingsRequestSchema: GenMessage<GetSettingsRequest>;
+/**
+ * @generated from message gitd.v1.GetSettingsResponse
+ */
+export type GetSettingsResponse = Message<"gitd.v1.GetSettingsResponse"> & {
+    /**
+     * @generated from field: repeated gitd.v1.PublishSettings settings = 1;
+     */
+    settings: PublishSettings[];
+};
+/**
+ * Describes the message gitd.v1.GetSettingsResponse.
+ * Use `create(GetSettingsResponseSchema)` to create a new message.
+ */
+export declare const GetSettingsResponseSchema: GenMessage<GetSettingsResponse>;
+/**
+ * @generated from message gitd.v1.SetSettingsRequest
+ */
+export type SetSettingsRequest = Message<"gitd.v1.SetSettingsRequest"> & {
+    /**
+     * @generated from field: gitd.v1.PublishSettings settings = 1;
+     */
+    settings?: PublishSettings | undefined;
+};
+/**
+ * Describes the message gitd.v1.SetSettingsRequest.
+ * Use `create(SetSettingsRequestSchema)` to create a new message.
+ */
+export declare const SetSettingsRequestSchema: GenMessage<SetSettingsRequest>;
+/**
+ * @generated from message gitd.v1.SetSettingsResponse
+ */
+export type SetSettingsResponse = Message<"gitd.v1.SetSettingsResponse"> & {
+    /**
+     * @generated from field: gitd.v1.PublishSettings settings = 1;
+     */
+    settings?: PublishSettings | undefined;
+};
+/**
+ * Describes the message gitd.v1.SetSettingsResponse.
+ * Use `create(SetSettingsResponseSchema)` to create a new message.
+ */
+export declare const SetSettingsResponseSchema: GenMessage<SetSettingsResponse>;
+/**
+ * @generated from message gitd.v1.RemoveSettingsRequest
+ */
+export type RemoveSettingsRequest = Message<"gitd.v1.RemoveSettingsRequest"> & {
+    /**
+     * @generated from field: string url_prefix = 1;
+     */
+    urlPrefix: string;
+};
+/**
+ * Describes the message gitd.v1.RemoveSettingsRequest.
+ * Use `create(RemoveSettingsRequestSchema)` to create a new message.
+ */
+export declare const RemoveSettingsRequestSchema: GenMessage<RemoveSettingsRequest>;
+/**
+ * @generated from message gitd.v1.RemoveSettingsResponse
+ */
+export type RemoveSettingsResponse = Message<"gitd.v1.RemoveSettingsResponse"> & {};
+/**
+ * Describes the message gitd.v1.RemoveSettingsResponse.
+ * Use `create(RemoveSettingsResponseSchema)` to create a new message.
+ */
+export declare const RemoveSettingsResponseSchema: GenMessage<RemoveSettingsResponse>;
+/**
+ * @generated from message gitd.v1.ListPresetsRequest
+ */
+export type ListPresetsRequest = Message<"gitd.v1.ListPresetsRequest"> & {};
+/**
+ * Describes the message gitd.v1.ListPresetsRequest.
+ * Use `create(ListPresetsRequestSchema)` to create a new message.
+ */
+export declare const ListPresetsRequestSchema: GenMessage<ListPresetsRequest>;
+/**
+ * @generated from message gitd.v1.ListPresetsResponse
+ */
+export type ListPresetsResponse = Message<"gitd.v1.ListPresetsResponse"> & {
     /**
-     * How new workspaces are made on this machine, and why: what gitd detected at start.
-     *
-     * @generated from field: gitd.v1.Strategy strategy = 5;
+     * @generated from field: repeated gitd.v1.Preset presets = 1;
      */
-    strategy: Strategy;
+    presets: Preset[];
+};
+/**
+ * Describes the message gitd.v1.ListPresetsResponse.
+ * Use `create(ListPresetsResponseSchema)` to create a new message.
+ */
+export declare const ListPresetsResponseSchema: GenMessage<ListPresetsResponse>;
+/**
+ * @generated from message gitd.v1.SetPresetRequest
+ */
+export type SetPresetRequest = Message<"gitd.v1.SetPresetRequest"> & {
     /**
-     * @generated from field: string strategy_reason = 6;
+     * @generated from field: gitd.v1.Preset preset = 1;
      */
-    strategyReason: string;
+    preset?: Preset | undefined;
+};
+/**
+ * Describes the message gitd.v1.SetPresetRequest.
+ * Use `create(SetPresetRequestSchema)` to create a new message.
+ */
+export declare const SetPresetRequestSchema: GenMessage<SetPresetRequest>;
+/**
+ * @generated from message gitd.v1.SetPresetResponse
+ */
+export type SetPresetResponse = Message<"gitd.v1.SetPresetResponse"> & {
     /**
-     * How many templates there are and the disk they take, as of the last maintenance round.
-     *
-     * @generated from field: int32 templates = 7;
+     * @generated from field: gitd.v1.Preset preset = 1;
      */
-    templates: number;
+    preset?: Preset | undefined;
+};
+/**
+ * Describes the message gitd.v1.SetPresetResponse.
+ * Use `create(SetPresetResponseSchema)` to create a new message.
+ */
+export declare const SetPresetResponseSchema: GenMessage<SetPresetResponse>;
+/**
+ * @generated from message gitd.v1.RemovePresetRequest
+ */
+export type RemovePresetRequest = Message<"gitd.v1.RemovePresetRequest"> & {
     /**
-     * @generated from field: int64 templates_bytes = 8;
+     * @generated from field: string name = 1;
      */
-    templatesBytes: bigint;
+    name: string;
 };
 /**
- * Describes the message gitd.v1.InfoResponse.
- * Use `create(InfoResponseSchema)` to create a new message.
+ * Describes the message gitd.v1.RemovePresetRequest.
+ * Use `create(RemovePresetRequestSchema)` to create a new message.
  */
-export declare const InfoResponseSchema: GenMessage<InfoResponse>;
+export declare const RemovePresetRequestSchema: GenMessage<RemovePresetRequest>;
 /**
- * @generated from message gitd.v1.AuditRequest
+ * @generated from message gitd.v1.RemovePresetResponse
  */
-export type AuditRequest = Message<"gitd.v1.AuditRequest"> & {
+export type RemovePresetResponse = Message<"gitd.v1.RemovePresetResponse"> & {};
+/**
+ * Describes the message gitd.v1.RemovePresetResponse.
+ * Use `create(RemovePresetResponseSchema)` to create a new message.
+ */
+export declare const RemovePresetResponseSchema: GenMessage<RemovePresetResponse>;
+/**
+ * @generated from message gitd.v1.IssueTokenRequest
+ */
+export type IssueTokenRequest = Message<"gitd.v1.IssueTokenRequest"> & {
     /**
-     * Only the entries from this time on; all of them when unset.
+     * @generated from field: string url = 1;
+     */
+    url: string;
+    /**
+     * The branch the sandbox starts from; empty for the repository's default branch.
      *
-     * @generated from field: google.protobuf.Timestamp since = 1;
+     * @generated from field: string branch = 2;
      */
-    since?: Timestamp | undefined;
+    branch: string;
     /**
-     * Only the publishes of this repository, as its URL is written in the entries.
+     * How long the token lives: an hour when zero, a day at most.
      *
-     * @generated from field: string url = 2;
+     * @generated from field: int64 lifetime_seconds = 3;
      */
-    url: string;
+    lifetimeSeconds: bigint;
     /**
-     * At most this many, newest first: 100 when unset, never more than 1000.
+     * A token that clones and fetches only.
      *
-     * @generated from field: int32 limit = 3;
+     * @generated from field: bool read_only = 4;
      */
-    limit: number;
+    readOnly: boolean;
+    /**
+     * A sandbox repository the token writes to, from an earlier token; empty makes a new one.
+     *
+     * @generated from field: string sandbox = 5;
+     */
+    sandbox: string;
 };
 /**
- * Describes the message gitd.v1.AuditRequest.
- * Use `create(AuditRequestSchema)` to create a new message.
+ * Describes the message gitd.v1.IssueTokenRequest.
+ * Use `create(IssueTokenRequestSchema)` to create a new message.
  */
-export declare const AuditRequestSchema: GenMessage<AuditRequest>;
+export declare const IssueTokenRequestSchema: GenMessage<IssueTokenRequest>;
 /**
- * @generated from message gitd.v1.AuditResponse
+ * @generated from message gitd.v1.IssueTokenResponse
  */
-export type AuditResponse = Message<"gitd.v1.AuditResponse"> & {
+export type IssueTokenResponse = Message<"gitd.v1.IssueTokenResponse"> & {
     /**
-     * @generated from field: repeated gitd.v1.AuditEntry entries = 1;
+     * The token, shown this once: gitd keeps only its hash.
+     *
+     * @generated from field: string token = 1;
      */
-    entries: AuditEntry[];
+    token: string;
+    /**
+     * @generated from field: gitd.v1.TokenInfo info = 2;
+     */
+    info?: TokenInfo | undefined;
+    /**
+     * Where the sandbox clones from, e.g. `https://gitd.internal:9420/git/github.com/acme/web.git`,
+     * with the token as the password: `git clone https://x:<token>@…`.
+     *
+     * @generated from field: string clone_url = 3;
+     */
+    cloneUrl: string;
 };
 /**
- * Describes the message gitd.v1.AuditResponse.
- * Use `create(AuditResponseSchema)` to create a new message.
+ * Describes the message gitd.v1.IssueTokenResponse.
+ * Use `create(IssueTokenResponseSchema)` to create a new message.
  */
-export declare const AuditResponseSchema: GenMessage<AuditResponse>;
+export declare const IssueTokenResponseSchema: GenMessage<IssueTokenResponse>;
 /**
- * One publish, done or refused, as the audit log keeps it: one per line of the log file,
- * in this message's JSON form.
+ * A token as gitd shows it, never its secret.
  *
- * @generated from message gitd.v1.AuditEntry
+ * @generated from message gitd.v1.TokenInfo
  */
-export type AuditEntry = Message<"gitd.v1.AuditEntry"> & {
+export type TokenInfo = Message<"gitd.v1.TokenInfo"> & {
     /**
-     * @generated from field: google.protobuf.Timestamp time = 1;
+     * @generated from field: string id = 1;
      */
-    time?: Timestamp | undefined;
+    id: string;
     /**
-     * The workspace's path, as the caller gave it.
-     *
-     * @generated from field: string workspace = 2;
+     * @generated from field: string url = 2;
      */
-    workspace: string;
+    url: string;
     /**
-     * The workspace's repository; empty when the workspace could not be opened.
-     *
-     * @generated from field: string url = 3;
+     * @generated from field: string sandbox = 3;
      */
-    url: string;
+    sandbox: string;
     /**
-     * @generated from field: string branch = 4;
+     * @generated from field: bool writable = 4;
      */
-    branch: string;
+    writable: boolean;
     /**
-     * What was pushed: the workspace's repository, then each submodule. Unset when refused.
-     *
-     * @generated from field: gitd.v1.PublishedRepository repository = 5;
+     * @generated from field: google.protobuf.Timestamp issued_at = 5;
      */
-    repository?: PublishedRepository | undefined;
+    issuedAt?: Timestamp | undefined;
     /**
-     * @generated from field: repeated gitd.v1.PublishedRepository submodules = 6;
+     * @generated from field: google.protobuf.Timestamp expires_at = 6;
      */
-    submodules: PublishedRepository[];
+    expiresAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message gitd.v1.TokenInfo.
+ * Use `create(TokenInfoSchema)` to create a new message.
+ */
+export declare const TokenInfoSchema: GenMessage<TokenInfo>;
+/**
+ * @generated from message gitd.v1.RevokeTokenRequest
+ */
+export type RevokeTokenRequest = Message<"gitd.v1.RevokeTokenRequest"> & {
     /**
-     * Why it was refused. Unset when it was published.
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Remove its sandbox repository too, with whatever was pushed there and not published.
      *
-     * @generated from field: gitd.v1.GitFailure refusal = 7;
+     * @generated from field: bool remove_sandbox = 2;
      */
-    refusal?: GitFailure | undefined;
+    removeSandbox: boolean;
 };
 /**
- * Describes the message gitd.v1.AuditEntry.
- * Use `create(AuditEntrySchema)` to create a new message.
+ * Describes the message gitd.v1.RevokeTokenRequest.
+ * Use `create(RevokeTokenRequestSchema)` to create a new message.
  */
-export declare const AuditEntrySchema: GenMessage<AuditEntry>;
+export declare const RevokeTokenRequestSchema: GenMessage<RevokeTokenRequest>;
+/**
+ * @generated from message gitd.v1.RevokeTokenResponse
+ */
+export type RevokeTokenResponse = Message<"gitd.v1.RevokeTokenResponse"> & {};
+/**
+ * Describes the message gitd.v1.RevokeTokenResponse.
+ * Use `create(RevokeTokenResponseSchema)` to create a new message.
+ */
+export declare const RevokeTokenResponseSchema: GenMessage<RevokeTokenResponse>;
+/**
+ * @generated from message gitd.v1.ListTokensRequest
+ */
+export type ListTokensRequest = Message<"gitd.v1.ListTokensRequest"> & {};
+/**
+ * Describes the message gitd.v1.ListTokensRequest.
+ * Use `create(ListTokensRequestSchema)` to create a new message.
+ */
+export declare const ListTokensRequestSchema: GenMessage<ListTokensRequest>;
+/**
+ * @generated from message gitd.v1.ListTokensResponse
+ */
+export type ListTokensResponse = Message<"gitd.v1.ListTokensResponse"> & {
+    /**
+     * @generated from field: repeated gitd.v1.TokenInfo tokens = 1;
+     */
+    tokens: TokenInfo[];
+};
+/**
+ * Describes the message gitd.v1.ListTokensResponse.
+ * Use `create(ListTokensResponseSchema)` to create a new message.
+ */
+export declare const ListTokensResponseSchema: GenMessage<ListTokensResponse>;
 /**
  * How a workspace was made.
  *
@@ -1204,6 +2918,85 @@ export declare const WorkspaceService: GenService<{
         input: typeof PublishRequestSchema;
         output: typeof PublishResponseSchema;
     };
+    /**
+     * What was changed in a workspace since gitd last put it on a commit — committed or not:
+     * each file added, modified or deleted, with its lines. On an overlay workspace it is read
+     * from the agent's own layer, and no git runs in the workspace.
+     *
+     * @generated from rpc gitd.v1.WorkspaceService.Changes
+     */
+    changes: {
+        methodKind: "unary";
+        input: typeof ChangesRequestSchema;
+        output: typeof ChangesResponseSchema;
+    };
+    /**
+     * The unified diff of a workspace's changes, of some files or all, cut short at a size.
+     *
+     * @generated from rpc gitd.v1.WorkspaceService.Diff
+     */
+    diff: {
+        methodKind: "unary";
+        input: typeof DiffRequestSchema;
+        output: typeof DiffResponseSchema;
+    };
+    /**
+     * How two works differ — two workspaces, two published branches, or one of each — file by
+     * file, with their lines and, when asked, their diff: what choosing between attempts at
+     * one task needs.
+     *
+     * @generated from rpc gitd.v1.WorkspaceService.Compare
+     */
+    compare: {
+        methodKind: "unary";
+        input: typeof CompareRequestSchema;
+        output: typeof CompareResponseSchema;
+    };
+    /**
+     * Whether the committed work of several workspaces or published branches merges cleanly,
+     * pair by pair, and on which files it does not. Read with git merge-tree in the pool,
+     * running none of the repository's code.
+     *
+     * @generated from rpc gitd.v1.WorkspaceService.Conflicts
+     */
+    conflicts: {
+        methodKind: "unary";
+        input: typeof ConflictsRequestSchema;
+        output: typeof ConflictsResponseSchema;
+    };
+    /**
+     * What happens to workspaces as it happens: made, changed, published, refused, removed.
+     *
+     * @generated from rpc gitd.v1.WorkspaceService.Watch
+     */
+    watch: {
+        methodKind: "server_streaming";
+        input: typeof WatchRequestSchema;
+        output: typeof WatchResponseSchema;
+    };
+    /**
+     * Seal an overlay workspace's own layer — what installing its dependencies wrote — as a
+     * warm layer of its repository, named, for later workspaces at the same commit to stand
+     * on (PrepareRequest.warm) instead of installing again. The workspace is removed: its
+     * layer is moved, not copied.
+     *
+     * @generated from rpc gitd.v1.WorkspaceService.Seal
+     */
+    seal: {
+        methodKind: "unary";
+        input: typeof SealRequestSchema;
+        output: typeof SealResponseSchema;
+    };
+    /**
+     * The warm layers of a repository.
+     *
+     * @generated from rpc gitd.v1.WorkspaceService.ListWarm
+     */
+    listWarm: {
+        methodKind: "unary";
+        input: typeof ListWarmRequestSchema;
+        output: typeof ListWarmResponseSchema;
+    };
 }>;
 /**
  * @generated from service gitd.v1.RepositoryService
@@ -1246,7 +3039,8 @@ export declare const ServerService: GenService<{
         output: typeof RetireResponseSchema;
     };
     /**
-     * The audit log: every publish, done or refused, newest first.
+     * The audit log: every publish, done or refused, and every change to connections and
+     * publishing settings, newest first.
      *
      * @generated from rpc gitd.v1.ServerService.Audit
      */
@@ -1256,3 +3050,212 @@ export declare const ServerService: GenService<{
         output: typeof AuditResponseSchema;
     };
 }>;
+/**
+ * The credentials gitd keeps, managed by a platform from its own pages instead of a file:
+ * GitHub connected through the organisation's own App, by signing in, or through an App
+ * the platform already has; and tokens for any host. gitd keeps them under its state
+ * directory, applies them at once, and never answers with a secret. None of this is
+ * offered to agents through MCP.
+ *
+ * @generated from service gitd.v1.ConnectionService
+ */
+export declare const ConnectionService: GenService<{
+    /**
+     * Start creating the organisation's own GitHub App from a manifest: the answer says
+     * where the person's browser posts the manifest. GitHub then sends the person to
+     * `redirect_url` with a code and the state, for CompleteGitHubApp.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.BeginGitHubApp
+     */
+    beginGitHubApp: {
+        methodKind: "unary";
+        input: typeof BeginGitHubAppRequestSchema;
+        output: typeof BeginGitHubAppResponseSchema;
+    };
+    /**
+     * Finish creating the App: gitd exchanges the code for the App's ID and private key and
+     * keeps them. The person then installs the App on the repositories it may reach.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.CompleteGitHubApp
+     */
+    completeGitHubApp: {
+        methodKind: "unary";
+        input: typeof CompleteGitHubAppRequestSchema;
+        output: typeof CompleteGitHubAppResponseSchema;
+    };
+    /**
+     * Start signing in to GitHub with gitd's public App (GitHub's device flow): the answer
+     * has the code the person enters at GitHub.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.StartGitHubLogin
+     */
+    startGitHubLogin: {
+        methodKind: "unary";
+        input: typeof StartGitHubLoginRequestSchema;
+        output: typeof StartGitHubLoginResponseSchema;
+    };
+    /**
+     * Wait until the person has entered the code, and keep the sign-in. Pull requests then
+     * appear as that person.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.FinishGitHubLogin
+     */
+    finishGitHubLogin: {
+        methodKind: "unary";
+        input: typeof FinishGitHubLoginRequestSchema;
+        output: typeof FinishGitHubLoginResponseSchema;
+    };
+    /**
+     * Keep a GitHub App the platform already has, by its ID and private key.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.AddGitHubApp
+     */
+    addGitHubApp: {
+        methodKind: "unary";
+        input: typeof AddGitHubAppRequestSchema;
+        output: typeof AddGitHubAppResponseSchema;
+    };
+    /**
+     * Keep a token for the repositories under a prefix, on any host.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.AddToken
+     */
+    addToken: {
+        methodKind: "unary";
+        input: typeof AddTokenRequestSchema;
+        output: typeof AddTokenResponseSchema;
+    };
+    /**
+     * The connections gitd keeps, those of the configuration file included, never a secret.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.ListConnections
+     */
+    listConnections: {
+        methodKind: "unary";
+        input: typeof ListConnectionsRequestSchema;
+        output: typeof ListConnectionsResponseSchema;
+    };
+    /**
+     * Forget a connection made through the API. One from the configuration file is refused.
+     *
+     * @generated from rpc gitd.v1.ConnectionService.RemoveConnection
+     */
+    removeConnection: {
+        methodKind: "unary";
+        input: typeof RemoveConnectionRequestSchema;
+        output: typeof RemoveConnectionResponseSchema;
+    };
+}>;
+/**
+ * The rules publishing follows, per repository prefix, managed by a platform from its own
+ * pages instead of a file: which paths a publish may not change or delete, how many files
+ * it may change, the branch prefix, and how pull requests are opened; and the presets,
+ * named sets of rules that settings use.
+ *
+ * @generated from service gitd.v1.PublishingService
+ */
+export declare const PublishingService: GenService<{
+    /**
+     * Every setting, those of the configuration file included.
+     *
+     * @generated from rpc gitd.v1.PublishingService.GetSettings
+     */
+    getSettings: {
+        methodKind: "unary";
+        input: typeof GetSettingsRequestSchema;
+        output: typeof GetSettingsResponseSchema;
+    };
+    /**
+     * Keep the settings of a prefix, replacing those it had.
+     *
+     * @generated from rpc gitd.v1.PublishingService.SetSettings
+     */
+    setSettings: {
+        methodKind: "unary";
+        input: typeof SetSettingsRequestSchema;
+        output: typeof SetSettingsResponseSchema;
+    };
+    /**
+     * Forget the settings of a prefix. Those of the configuration file are refused.
+     *
+     * @generated from rpc gitd.v1.PublishingService.RemoveSettings
+     */
+    removeSettings: {
+        methodKind: "unary";
+        input: typeof RemoveSettingsRequestSchema;
+        output: typeof RemoveSettingsResponseSchema;
+    };
+    /**
+     * Every preset: gitd's own (`recommended`), the configuration file's and those set
+     * through the API, as they apply.
+     *
+     * @generated from rpc gitd.v1.PublishingService.ListPresets
+     */
+    listPresets: {
+        methodKind: "unary";
+        input: typeof ListPresetsRequestSchema;
+        output: typeof ListPresetsResponseSchema;
+    };
+    /**
+     * Keep a preset, replacing one of the same name; one named `recommended` replaces gitd's.
+     *
+     * @generated from rpc gitd.v1.PublishingService.SetPreset
+     */
+    setPreset: {
+        methodKind: "unary";
+        input: typeof SetPresetRequestSchema;
+        output: typeof SetPresetResponseSchema;
+    };
+    /**
+     * Forget a preset set through the API: refused while settings use it, unless gitd has its
+     * own of that name, which then applies again.
+     *
+     * @generated from rpc gitd.v1.PublishingService.RemovePreset
+     */
+    removePreset: {
+        methodKind: "unary";
+        input: typeof RemovePresetRequestSchema;
+        output: typeof RemovePresetResponseSchema;
+    };
+}>;
+/**
+ * gitd's git endpoint, for sandboxes that cannot mount its directories — microVMs, remote
+ * sandboxes, CI runners elsewhere — and clone over HTTP instead. A token of gitd's own opens
+ * one repository for reading and one sandbox repository for writing; it is never the git
+ * host's credential. What a sandbox pushed is published with Publish and `sandbox`.
+ *
+ * @generated from service gitd.v1.EndpointService
+ */
+export declare const EndpointService: GenService<{
+    /**
+     * A token for a sandbox, with the address it clones from. The repository's pool is
+     * synced first, with the credential gitd keeps.
+     *
+     * @generated from rpc gitd.v1.EndpointService.IssueToken
+     */
+    issueToken: {
+        methodKind: "unary";
+        input: typeof IssueTokenRequestSchema;
+        output: typeof IssueTokenResponseSchema;
+    };
+    /**
+     * End a token now, and remove its sandbox repository when asked.
+     *
+     * @generated from rpc gitd.v1.EndpointService.RevokeToken
+     */
+    revokeToken: {
+        methodKind: "unary";
+        input: typeof RevokeTokenRequestSchema;
+        output: typeof RevokeTokenResponseSchema;
+    };
+    /**
+     * The tokens alive, never their secrets.
+     *
+     * @generated from rpc gitd.v1.EndpointService.ListTokens
+     */
+    listTokens: {
+        methodKind: "unary";
+        input: typeof ListTokensRequestSchema;
+        output: typeof ListTokensResponseSchema;
+    };
+}>;