import { GetBalancesResponse } from "../../ledger/read/v1/ledger_read_pb.js";
import { ApiKey } from "./api_keys_pb.js";
import { PolicyAction, SubaccountPolicyView } from "./policies_pb.js";
import { Message } from "@bufbuild/protobuf";
import { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
import { FieldMask, Timestamp } from "@bufbuild/protobuf/wkt";
declare namespace subaccounts_pb_d_exports {
  export { ActivityEntityKind, ActivityEntityKindSchema, ActivityEvent, ActivityEventAction, ActivityEventActionSchema, ActivityEventSchema, ActivityEventSource, ActivityEventSourceSchema, CreateSubaccountChallengeRequest, CreateSubaccountChallengeRequestSchema, CreateSubaccountChallengeResponse, CreateSubaccountChallengeResponseSchema, CreateSubaccountRequest, CreateSubaccountRequestSchema, CreateSubaccountResponse, CreateSubaccountResponseSchema, GetEffectiveSubaccountPermissionsRequest, GetEffectiveSubaccountPermissionsRequestSchema, GetEffectiveSubaccountPermissionsResponse, GetEffectiveSubaccountPermissionsResponseSchema, GetSubaccountRequest, GetSubaccountRequestSchema, GetSubaccountResponse, GetSubaccountResponseSchema, InviteSubaccountMemberRequest, InviteSubaccountMemberRequestSchema, InviteSubaccountMemberResponse, InviteSubaccountMemberResponseSchema, ListSubaccountEventsRequest, ListSubaccountEventsRequestSchema, ListSubaccountEventsResponse, ListSubaccountEventsResponseSchema, ListSubaccountInvitesRequest, ListSubaccountInvitesRequestSchema, ListSubaccountInvitesResponse, ListSubaccountInvitesResponseSchema, ListSubaccountMembersRequest, ListSubaccountMembersRequestSchema, ListSubaccountMembersResponse, ListSubaccountMembersResponseSchema, ListSubaccountRolesRequest, ListSubaccountRolesRequestSchema, ListSubaccountRolesResponse, ListSubaccountRolesResponseSchema, ListSubaccountsRequest, ListSubaccountsRequestSchema, ListSubaccountsResponse, ListSubaccountsResponseSchema, RemoveSubaccountMemberRequest, RemoveSubaccountMemberRequestSchema, RemoveSubaccountMemberResponse, RemoveSubaccountMemberResponseSchema, RespondSubaccountInviteRequest, RespondSubaccountInviteRequestSchema, RespondSubaccountInviteResponse, RespondSubaccountInviteResponseSchema, SetSubaccountMemberMFARequirementRequest, SetSubaccountMemberMFARequirementRequestSchema, SetSubaccountMemberMFARequirementResponse, SetSubaccountMemberMFARequirementResponseSchema, Subaccount, SubaccountInvite, SubaccountInviteAction, SubaccountInviteActionSchema, SubaccountInviteDirection, SubaccountInviteDirectionSchema, SubaccountInviteSchema, SubaccountInviteStatus, SubaccountInviteStatusSchema, SubaccountMemberView, SubaccountMemberViewSchema, SubaccountPermission, SubaccountPermissionDefinition, SubaccountPermissionDefinitionSchema, SubaccountPermissionSchema, SubaccountRole, SubaccountRoleDefinition, SubaccountRoleDefinitionSchema, SubaccountRoleSchema, SubaccountRoleService, SubaccountRoleView, SubaccountRoleViewSchema, SubaccountSchema, SubaccountService, SubaccountStatus, SubaccountStatusSchema, SubaccountUpdateSpec, SubaccountUpdateSpecSchema, SubaccountViewService, UpdateSubaccountMemberRoleRequest, UpdateSubaccountMemberRoleRequestSchema, UpdateSubaccountMemberRoleResponse, UpdateSubaccountMemberRoleResponseSchema, UpdateSubaccountRequest, UpdateSubaccountRequestSchema, UpdateSubaccountResponse, UpdateSubaccountResponseSchema, file_auth_v1_subaccounts };
}
/**
 * Describes the file auth/v1/subaccounts.proto.
 */
declare const file_auth_v1_subaccounts: GenFile;
/**
 * User-facing metadata for one stable sub-account permission.
 *
 * @generated from message auth.v1.SubaccountPermissionDefinition
 */
type SubaccountPermissionDefinition = Message<"auth.v1.SubaccountPermissionDefinition"> & {
  /**
   * Stable permission identifier used by authorization and clients.
   *
   * @generated from field: auth.v1.SubaccountPermission permission = 1;
   */
  permission: SubaccountPermission;
  /**
   * Human-readable permission name.
   *
   * @generated from field: string display_name = 2;
   */
  displayName: string;
  /**
   * Human-readable explanation of the capability and its important boundaries.
   *
   * @generated from field: string description = 3;
   */
  description: string;
  /**
   * Policy action that can further restrict this permission. Unspecified means
   * the permission is controlled by role and request context only.
   *
   * @generated from field: auth.v1.PolicyAction policy_action = 4;
   */
  policyAction: PolicyAction;
};
/**
 * Describes the message auth.v1.SubaccountPermissionDefinition.
 * Use `create(SubaccountPermissionDefinitionSchema)` to create a new message.
 */
declare const SubaccountPermissionDefinitionSchema: GenMessage<SubaccountPermissionDefinition>;
/**
 * Authoritative definition of one built-in sub-account role.
 *
 * @generated from message auth.v1.SubaccountRoleDefinition
 */
type SubaccountRoleDefinition = Message<"auth.v1.SubaccountRoleDefinition"> & {
  /**
   * Stable built-in role identifier.
   *
   * @generated from field: auth.v1.SubaccountRole role = 1;
   */
  role: SubaccountRole;
  /**
   * Human-readable role name.
   *
   * @generated from field: string display_name = 2;
   */
  displayName: string;
  /**
   * Human-readable summary of the role.
   *
   * @generated from field: string description = 3;
   */
  description: string;
  /**
   * Whether this role can be assigned to a delegated member.
   *
   * @generated from field: bool assignable = 4;
   */
  assignable: boolean;
  /**
   * Complete role-granted permission set in canonical permission order.
   *
   * @generated from field: repeated auth.v1.SubaccountPermission permissions = 5;
   */
  permissions: SubaccountPermission[];
};
/**
 * Describes the message auth.v1.SubaccountRoleDefinition.
 * Use `create(SubaccountRoleDefinitionSchema)` to create a new message.
 */
declare const SubaccountRoleDefinitionSchema: GenMessage<SubaccountRoleDefinition>;
/**
 * Request for the public built-in sub-account role and permission catalog.
 *
 * @generated from message auth.v1.ListSubaccountRolesRequest
 */
type ListSubaccountRolesRequest = Message<"auth.v1.ListSubaccountRolesRequest"> & {};
/**
 * Describes the message auth.v1.ListSubaccountRolesRequest.
 * Use `create(ListSubaccountRolesRequestSchema)` to create a new message.
 */
declare const ListSubaccountRolesRequestSchema: GenMessage<ListSubaccountRolesRequest>;
/**
 * Public built-in sub-account role and permission catalog.
 *
 * @generated from message auth.v1.ListSubaccountRolesResponse
 */
type ListSubaccountRolesResponse = Message<"auth.v1.ListSubaccountRolesResponse"> & {
  /**
   * Stable permission metadata in canonical permission order.
   *
   * @generated from field: repeated auth.v1.SubaccountPermissionDefinition permissions = 1;
   */
  permissions: SubaccountPermissionDefinition[];
  /**
   * Built-in roles in display order from Owner through Viewer.
   *
   * @generated from field: repeated auth.v1.SubaccountRoleDefinition roles = 2;
   */
  roles: SubaccountRoleDefinition[];
};
/**
 * Describes the message auth.v1.ListSubaccountRolesResponse.
 * Use `create(ListSubaccountRolesResponseSchema)` to create a new message.
 */
declare const ListSubaccountRolesResponseSchema: GenMessage<ListSubaccountRolesResponse>;
/**
 * Request for the authenticated caller's effective permissions on one sub-account.
 *
 * @generated from message auth.v1.GetEffectiveSubaccountPermissionsRequest
 */
type GetEffectiveSubaccountPermissionsRequest = Message<"auth.v1.GetEffectiveSubaccountPermissionsRequest"> & {
  /**
   * Target sub-account (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
};
/**
 * Describes the message auth.v1.GetEffectiveSubaccountPermissionsRequest.
 * Use `create(GetEffectiveSubaccountPermissionsRequestSchema)` to create a new message.
 */
declare const GetEffectiveSubaccountPermissionsRequestSchema: GenMessage<GetEffectiveSubaccountPermissionsRequest>;
/**
 * Effective role-granted permissions for the caller on one sub-account.
 *
 * @generated from message auth.v1.GetEffectiveSubaccountPermissionsResponse
 */
type GetEffectiveSubaccountPermissionsResponse = Message<"auth.v1.GetEffectiveSubaccountPermissionsResponse"> & {
  /**
   * Current role of the caller on the sub-account.
   *
   * @generated from field: auth.v1.SubaccountRole role = 1;
   */
  role: SubaccountRole;
  /**
   * Permissions allowed by the role and current sub-account policy. Resource
   * state, MFA, limits, and other request context may still deny an operation.
   *
   * @generated from field: repeated auth.v1.SubaccountPermission permissions = 2;
   */
  permissions: SubaccountPermission[];
  /**
   * Attached sub-account policy identifier, or zero when no policy is attached.
   *
   * @generated from field: fixed64 subaccount_policy_id = 3;
   */
  subaccountPolicyId: bigint;
};
/**
 * Describes the message auth.v1.GetEffectiveSubaccountPermissionsResponse.
 * Use `create(GetEffectiveSubaccountPermissionsResponseSchema)` to create a new message.
 */
declare const GetEffectiveSubaccountPermissionsResponseSchema: GenMessage<GetEffectiveSubaccountPermissionsResponse>;
/**
 * Role summary for one sub-account visible to the caller.
 *
 * @generated from message auth.v1.SubaccountRoleView
 */
type SubaccountRoleView = Message<"auth.v1.SubaccountRoleView"> & {
  /**
   * Sub-account identifier (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Effective role of the caller on this sub-account.
   *
   * @generated from field: auth.v1.SubaccountRole role = 2;
   */
  role: SubaccountRole;
};
/**
 * Describes the message auth.v1.SubaccountRoleView.
 * Use `create(SubaccountRoleViewSchema)` to create a new message.
 */
declare const SubaccountRoleViewSchema: GenMessage<SubaccountRoleView>;
/**
 * Sub-account summary visible to the caller.
 *
 * @generated from message auth.v1.Subaccount
 */
type Subaccount = Message<"auth.v1.Subaccount"> & {
  /**
   * Sub-account identifier (opaque ID).
   *
   * @generated from field: fixed64 id = 1;
   */
  id: bigint;
  /**
   * Role of the current caller on this sub-account.
   *
   * @generated from field: auth.v1.SubaccountRole role = 2;
   */
  role: SubaccountRole;
  /**
   * Optional human-readable label for this sub-account.
   *
   * @generated from field: string label = 3;
   */
  label: string;
  /**
   * Optional user-chosen icon/emoji for UI display.
   *
   * @generated from field: string icon = 10;
   */
  icon: string;
  /**
   * Optional user-chosen color token for UI display. Tokens use lowercase letters, numbers, underscores, or hyphens.
   *
   * @generated from field: string color = 11;
   */
  color: string;
  /**
   * Current public lifecycle status of the sub-account.
   *
   * @generated from field: auth.v1.SubaccountStatus status = 4;
   */
  status: SubaccountStatus;
  /**
   * Smart Account EVM address backing this sub-account.
   *
   * @generated from field: string smart_account_address = 5;
   */
  smartAccountAddress: string;
  /**
   * Owner (root account) public username, if set. Useful for shared views.
   *
   * @generated from field: string owner_username = 6;
   */
  ownerUsername: string;
  /**
   * Owner (root account) avatar URL, if set.
   *
   * @generated from field: string owner_avatar_url = 7;
   */
  ownerAvatarUrl: string;
  /**
   * Owner (root account) primary Smart Account address, when available. Allows
   * clients to display a stable identity even when no username is set.
   *
   * @generated from field: string owner_root_smart_account_address = 8;
   */
  ownerRootSmartAccountAddress: string;
  /**
   * Optional sub-account policy identifier (opaque ID). 0 means no
   * explicit policy attached.
   *
   * @generated from field: fixed64 subaccount_policy_id = 9;
   */
  subaccountPolicyId: bigint;
  /**
   * Owner-controlled security baseline for delegated interactive members on
   * protected sub-account actions. This does not apply to read-only real-time
   * subscriptions.
   *
   * @generated from field: bool require_member_mfa = 12;
   */
  requireMemberMfa: boolean;
  /**
   * Smart-account derivation salt nonce assigned when this sub-account was
   * created. Present only when the caller owns the sub-account and can use it
   * for direct chain signing.
   *
   * @generated from field: optional uint32 smart_account_salt_nonce = 13;
   */
  smartAccountSaltNonce?: number | undefined;
  /**
   * Time in UTC when this sub-account's configuration was last changed. For the
   * same sub-account, later is fresher, equal is an idempotent replay, and
   * earlier is stale. Equal timestamps with different configuration indicate
   * an invariant failure.
   *
   * @generated from field: google.protobuf.Timestamp updated_at = 14;
   */
  updatedAt?: Timestamp | undefined;
  /**
   * Monotonic resource revision used for conditional updates.
   *
   * @generated from field: uint64 revision = 15;
   */
  revision: bigint;
};
/**
 * Describes the message auth.v1.Subaccount.
 * Use `create(SubaccountSchema)` to create a new message.
 */
declare const SubaccountSchema: GenMessage<Subaccount>;
/**
 * Request to list sub-accounts owned by or shared with the caller.
 *
 * @generated from message auth.v1.ListSubaccountsRequest
 */
type ListSubaccountsRequest = Message<"auth.v1.ListSubaccountsRequest"> & {};
/**
 * Describes the message auth.v1.ListSubaccountsRequest.
 * Use `create(ListSubaccountsRequestSchema)` to create a new message.
 */
declare const ListSubaccountsRequestSchema: GenMessage<ListSubaccountsRequest>;
/**
 * Response containing sub-accounts visible to the caller.
 *
 * @generated from message auth.v1.ListSubaccountsResponse
 */
type ListSubaccountsResponse = Message<"auth.v1.ListSubaccountsResponse"> & {
  /**
   * Sub-accounts owned by or shared with the caller, ordered by sub-account ID ascending.
   *
   * @generated from field: repeated auth.v1.Subaccount subaccounts = 1;
   */
  subaccounts: Subaccount[];
  /**
   * Total number of sub-accounts that have ever been created for this root,
   * including soft-deleted ones. Request CreateSubaccountChallenge to obtain
   * the canonical next smart-account address and salt.
   *
   * @generated from field: uint32 total_created = 2;
   */
  totalCreated: number;
};
/**
 * Describes the message auth.v1.ListSubaccountsResponse.
 * Use `create(ListSubaccountsResponseSchema)` to create a new message.
 */
declare const ListSubaccountsResponseSchema: GenMessage<ListSubaccountsResponse>;
/**
 * Request an authorization for the canonical next sub-account. Requires a
 * session token for the root account and current terms acceptance.
 *
 * @generated from message auth.v1.CreateSubaccountChallengeRequest
 */
type CreateSubaccountChallengeRequest = Message<"auth.v1.CreateSubaccountChallengeRequest"> & {
  /**
   * Selected EOA bound to the authenticated root account.
   *
   * @generated from field: string owner_address = 1;
   */
  ownerAddress: string;
  /**
   * Requesting browser origin including scheme and optional port, without path,
   * query, fragment, or user information. Must match the HTTP Origin when present.
   *
   * @generated from field: string uri = 2;
   */
  uri: string;
};
/**
 * Describes the message auth.v1.CreateSubaccountChallengeRequest.
 * Use `create(CreateSubaccountChallengeRequestSchema)` to create a new message.
 */
declare const CreateSubaccountChallengeRequestSchema: GenMessage<CreateSubaccountChallengeRequest>;
/**
 * Canonical sub-account authorization. Issuing a new challenge replaces the
 * previous challenge for this root. A stale challenge requires reissue.
 *
 * @generated from message auth.v1.CreateSubaccountChallengeResponse
 */
type CreateSubaccountChallengeResponse = Message<"auth.v1.CreateSubaccountChallengeResponse"> & {
  /**
   * Exact UTF-8 EIP-191 personal_sign message. This is an account-control
   * authorization, not an EIP-4361 sign-in message. Sign through the returned
   * smart account; do not hash, alter, or reconstruct the message.
   *
   * @generated from field: string message = 1;
   */
  message: string;
  /**
   * Canonical address of the next smart account, derived by the server.
   *
   * @generated from field: string smart_account_address = 2;
   */
  smartAccountAddress: string;
  /**
   * Canonical derivation salt nonce for the returned smart account.
   *
   * @generated from field: uint32 smart_account_salt_nonce = 3;
   */
  smartAccountSaltNonce: number;
  /**
   * Expiration in UTC, five minutes after issuance.
   *
   * @generated from field: google.protobuf.Timestamp expires_at = 4;
   */
  expiresAt?: Timestamp | undefined;
  /**
   * Polyester EIP-155 chain ID used for smart-account derivation and verification.
   *
   * @generated from field: uint64 polyester_chain_id = 5;
   */
  polyesterChainId: bigint;
};
/**
 * Describes the message auth.v1.CreateSubaccountChallengeResponse.
 * Use `create(CreateSubaccountChallengeResponseSchema)` to create a new message.
 */
declare const CreateSubaccountChallengeResponseSchema: GenMessage<CreateSubaccountChallengeResponse>;
/**
 * Request to create a new sub-account under the caller's root account.
 *
 * @generated from message auth.v1.CreateSubaccountRequest
 */
type CreateSubaccountRequest = Message<"auth.v1.CreateSubaccountRequest"> & {
  /**
   * Optional human label for display in UI.
   *
   * @generated from field: string label = 1;
   */
  label: string;
  /**
   * Optional user-chosen icon/emoji for UI display.
   *
   * @generated from field: string icon = 7;
   */
  icon: string;
  /**
   * Optional user-chosen color token for UI display. Tokens use lowercase letters, numbers, underscores, or hyphens.
   *
   * @generated from field: string color = 8;
   */
  color: string;
  /**
   * Smart Account EVM address for the new sub-account.
   *
   * @generated from field: string smart_account_address = 2;
   */
  smartAccountAddress: string;
  /**
   * Exact EIP-191 authorization returned by CreateSubaccountChallenge.
   *
   * @generated from field: string message = 3;
   */
  message: string;
  /**
   * Smart-account signature over message using EIP-191 personal_sign semantics.
   * Deployed ERC-1271 and counterfactual ERC-6492 signatures are supported.
   *
   * @generated from field: string signature = 4;
   */
  signature: string;
};
/**
 * Describes the message auth.v1.CreateSubaccountRequest.
 * Use `create(CreateSubaccountRequestSchema)` to create a new message.
 */
declare const CreateSubaccountRequestSchema: GenMessage<CreateSubaccountRequest>;
/**
 * Response returned after creating a sub-account.
 *
 * @generated from message auth.v1.CreateSubaccountResponse
 */
type CreateSubaccountResponse = Message<"auth.v1.CreateSubaccountResponse"> & {
  /**
   * Identifier for the created sub-account (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Total number of sub-accounts that have ever been created for this root,
   * including soft-deleted ones. Request a new challenge for the next account.
   *
   * @generated from field: uint32 total_created = 2;
   */
  totalCreated: number;
  /**
   * Smart-account derivation salt nonce assigned to the created sub-account.
   * Today this equals total_created for a successful create.
   *
   * @generated from field: uint32 smart_account_salt_nonce = 3;
   */
  smartAccountSaltNonce: number;
  /**
   * Initial monotonic resource revision. Clients can pass this value directly
   * as expected_revision on the next revision-gated mutation.
   *
   * @generated from field: uint64 revision = 4;
   */
  revision: bigint;
};
/**
 * Describes the message auth.v1.CreateSubaccountResponse.
 * Use `create(CreateSubaccountResponseSchema)` to create a new message.
 */
declare const CreateSubaccountResponseSchema: GenMessage<CreateSubaccountResponse>;
/**
 * SubaccountUpdateSpec contains mutable display and status configuration.
 *
 * @generated from message auth.v1.SubaccountUpdateSpec
 */
type SubaccountUpdateSpec = Message<"auth.v1.SubaccountUpdateSpec"> & {
  /**
   * Label for the sub-account. Empty clears the label when selected.
   *
   * @generated from field: string label = 1;
   */
  label: string;
  /**
   * User-chosen icon/emoji for UI display. Empty clears the icon when selected.
   *
   * @generated from field: string icon = 2;
   */
  icon: string;
  /**
   * User-chosen color token for UI display. Empty clears the color when selected.
   *
   * @generated from field: string color = 3;
   */
  color: string;
  /**
   * New lifecycle status. ACTIVE and DISABLED are accepted when selected by update_mask.
   *
   * @generated from field: auth.v1.SubaccountStatus status = 4;
   */
  status: SubaccountStatus;
};
/**
 * Describes the message auth.v1.SubaccountUpdateSpec.
 * Use `create(SubaccountUpdateSpecSchema)` to create a new message.
 */
declare const SubaccountUpdateSpecSchema: GenMessage<SubaccountUpdateSpec>;
/**
 * Request to change selected mutable fields for a sub-account.
 *
 * @generated from message auth.v1.UpdateSubaccountRequest
 */
type UpdateSubaccountRequest = Message<"auth.v1.UpdateSubaccountRequest"> & {
  /**
   * Sub-account to update (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Candidate values for fields selected by update_mask.
   *
   * @generated from field: auth.v1.SubaccountUpdateSpec subaccount = 2;
   */
  subaccount?: SubaccountUpdateSpec | undefined;
  /**
   * Mutable fields to apply. Paths are relative to subaccount. The mask is
   * required, must be non-empty, and cannot contain "*".
   *
   * @generated from field: google.protobuf.FieldMask update_mask = 3;
   */
  updateMask?: FieldMask | undefined;
  /**
   * Revision returned by the latest successful read.
   *
   * @generated from field: uint64 expected_revision = 4;
   */
  expectedRevision: bigint;
};
/**
 * Describes the message auth.v1.UpdateSubaccountRequest.
 * Use `create(UpdateSubaccountRequestSchema)` to create a new message.
 */
declare const UpdateSubaccountRequestSchema: GenMessage<UpdateSubaccountRequest>;
/**
 * Response returned after updating a sub-account.
 *
 * @generated from message auth.v1.UpdateSubaccountResponse
 */
type UpdateSubaccountResponse = Message<"auth.v1.UpdateSubaccountResponse"> & {
  /**
   * Sub-account after applying the update.
   *
   * @generated from field: auth.v1.Subaccount subaccount = 1;
   */
  subaccount?: Subaccount | undefined;
};
/**
 * Describes the message auth.v1.UpdateSubaccountResponse.
 * Use `create(UpdateSubaccountResponseSchema)` to create a new message.
 */
declare const UpdateSubaccountResponseSchema: GenMessage<UpdateSubaccountResponse>;
/**
 * Request to update the delegated-member MFA requirement for a sub-account.
 *
 * @generated from message auth.v1.SetSubaccountMemberMFARequirementRequest
 */
type SetSubaccountMemberMFARequirementRequest = Message<"auth.v1.SetSubaccountMemberMFARequirementRequest"> & {
  /**
   * Sub-account whose delegated-member MFA requirement should be updated (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * When true, delegated interactive members must satisfy MFA requirements for
   * protected sub-account actions. This does not apply to read-only real-time
   * subscriptions.
   *
   * @generated from field: bool require_member_mfa = 2;
   */
  requireMemberMfa: boolean;
};
/**
 * Describes the message auth.v1.SetSubaccountMemberMFARequirementRequest.
 * Use `create(SetSubaccountMemberMFARequirementRequestSchema)` to create a new message.
 */
declare const SetSubaccountMemberMFARequirementRequestSchema: GenMessage<SetSubaccountMemberMFARequirementRequest>;
/**
 * Empty response returned after updating the delegated-member MFA requirement.
 *
 * @generated from message auth.v1.SetSubaccountMemberMFARequirementResponse
 */
type SetSubaccountMemberMFARequirementResponse = Message<"auth.v1.SetSubaccountMemberMFARequirementResponse"> & {};
/**
 * Describes the message auth.v1.SetSubaccountMemberMFARequirementResponse.
 * Use `create(SetSubaccountMemberMFARequirementResponseSchema)` to create a new message.
 */
declare const SetSubaccountMemberMFARequirementResponseSchema: GenMessage<SetSubaccountMemberMFARequirementResponse>;
/**
 * Member summary for a root account with access to a sub-account.
 *
 * @generated from message auth.v1.SubaccountMemberView
 */
type SubaccountMemberView = Message<"auth.v1.SubaccountMemberView"> & {
  /**
   * Identifier for the member's root account (opaque ID).
   *
   * @generated from field: fixed64 account_id = 1;
   */
  accountId: bigint;
  /**
   * Effective role on this sub-account.
   *
   * @generated from field: auth.v1.SubaccountRole role = 2;
   */
  role: SubaccountRole;
  /**
   * Optional username for the member's root account.
   *
   * @generated from field: string username = 3;
   */
  username: string;
  /**
   * Smart Account address for the member's root account, if any.
   *
   * @generated from field: string smart_account_address = 4;
   */
  smartAccountAddress: string;
  /**
   * Optional avatar URL for the member's root account.
   *
   * @generated from field: string avatar_url = 5;
   */
  avatarUrl: string;
  /**
   * True when the member has at least one MFA factor enrolled on their root account.
   *
   * @generated from field: bool mfa_enrolled = 6;
   */
  mfaEnrolled: boolean;
};
/**
 * Describes the message auth.v1.SubaccountMemberView.
 * Use `create(SubaccountMemberViewSchema)` to create a new message.
 */
declare const SubaccountMemberViewSchema: GenMessage<SubaccountMemberView>;
/**
 * Request to list members for a sub-account.
 *
 * @generated from message auth.v1.ListSubaccountMembersRequest
 */
type ListSubaccountMembersRequest = Message<"auth.v1.ListSubaccountMembersRequest"> & {
  /**
   * Sub-account to inspect (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
};
/**
 * Describes the message auth.v1.ListSubaccountMembersRequest.
 * Use `create(ListSubaccountMembersRequestSchema)` to create a new message.
 */
declare const ListSubaccountMembersRequestSchema: GenMessage<ListSubaccountMembersRequest>;
/**
 * Response containing the members of a sub-account.
 *
 * @generated from message auth.v1.ListSubaccountMembersResponse
 */
type ListSubaccountMembersResponse = Message<"auth.v1.ListSubaccountMembersResponse"> & {
  /**
   * Members for the sub-account. The owner is first, followed by delegated members oldest first.
   *
   * @generated from field: repeated auth.v1.SubaccountMemberView members = 1;
   */
  members: SubaccountMemberView[];
};
/**
 * Describes the message auth.v1.ListSubaccountMembersResponse.
 * Use `create(ListSubaccountMembersResponseSchema)` to create a new message.
 */
declare const ListSubaccountMembersResponseSchema: GenMessage<ListSubaccountMembersResponse>;
/**
 * Request to remove a delegated member from a sub-account.
 *
 * @generated from message auth.v1.RemoveSubaccountMemberRequest
 */
type RemoveSubaccountMemberRequest = Message<"auth.v1.RemoveSubaccountMemberRequest"> & {
  /**
   * Sub-account to modify (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Root account ID of the member to revoke (opaque ID).
   *
   * @generated from field: fixed64 grantee_account_id = 2;
   */
  granteeAccountId: bigint;
};
/**
 * Describes the message auth.v1.RemoveSubaccountMemberRequest.
 * Use `create(RemoveSubaccountMemberRequestSchema)` to create a new message.
 */
declare const RemoveSubaccountMemberRequestSchema: GenMessage<RemoveSubaccountMemberRequest>;
/**
 * Empty response returned after removing a sub-account member.
 *
 * @generated from message auth.v1.RemoveSubaccountMemberResponse
 */
type RemoveSubaccountMemberResponse = Message<"auth.v1.RemoveSubaccountMemberResponse"> & {};
/**
 * Describes the message auth.v1.RemoveSubaccountMemberResponse.
 * Use `create(RemoveSubaccountMemberResponseSchema)` to create a new message.
 */
declare const RemoveSubaccountMemberResponseSchema: GenMessage<RemoveSubaccountMemberResponse>;
/**
 * Request to change the role of an existing sub-account member without sending a new invitation.
 *
 * @generated from message auth.v1.UpdateSubaccountMemberRoleRequest
 */
type UpdateSubaccountMemberRoleRequest = Message<"auth.v1.UpdateSubaccountMemberRoleRequest"> & {
  /**
   * Sub-account to modify (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Root account ID of the member whose role should be updated (opaque ID).
   *
   * @generated from field: fixed64 grantee_account_id = 2;
   */
  granteeAccountId: bigint;
  /**
   * New role to assign.
   *
   * @generated from field: auth.v1.SubaccountRole role = 3;
   */
  role: SubaccountRole;
};
/**
 * Describes the message auth.v1.UpdateSubaccountMemberRoleRequest.
 * Use `create(UpdateSubaccountMemberRoleRequestSchema)` to create a new message.
 */
declare const UpdateSubaccountMemberRoleRequestSchema: GenMessage<UpdateSubaccountMemberRoleRequest>;
/**
 * Empty response returned after updating a member role.
 *
 * @generated from message auth.v1.UpdateSubaccountMemberRoleResponse
 */
type UpdateSubaccountMemberRoleResponse = Message<"auth.v1.UpdateSubaccountMemberRoleResponse"> & {};
/**
 * Describes the message auth.v1.UpdateSubaccountMemberRoleResponse.
 * Use `create(UpdateSubaccountMemberRoleResponseSchema)` to create a new message.
 */
declare const UpdateSubaccountMemberRoleResponseSchema: GenMessage<UpdateSubaccountMemberRoleResponse>;
/**
 * View of a pending or historical invitation to a sub-account.
 *
 * @generated from message auth.v1.SubaccountInvite
 */
type SubaccountInvite = Message<"auth.v1.SubaccountInvite"> & {
  /**
   * Invite identifier (opaque ID).
   *
   * @generated from field: fixed64 id = 1;
   */
  id: bigint;
  /**
   * Target sub-account (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 2;
   */
  subaccountId: bigint;
  /**
   * Grantee root account ID the invite is for (opaque ID).
   *
   * @generated from field: fixed64 grantee_account_id = 3;
   */
  granteeAccountId: bigint;
  /**
   * Inviter root account ID (opaque ID).
   *
   * @generated from field: fixed64 inviter_account_id = 4;
   */
  inviterAccountId: bigint;
  /**
   * Requested role for the grantee.
   *
   * @generated from field: auth.v1.SubaccountRole role = 5;
   */
  role: SubaccountRole;
  /**
   * Current invitation status.
   *
   * @generated from field: auth.v1.SubaccountInviteStatus status = 6;
   */
  status: SubaccountInviteStatus;
  /**
   * Time when the invitation was created.
   *
   * @generated from field: google.protobuf.Timestamp created_at = 7;
   */
  createdAt?: Timestamp | undefined;
  /**
   * Time when the invitation was accepted, declined, or cancelled. Empty while pending.
   *
   * @generated from field: google.protobuf.Timestamp responded_at = 8;
   */
  respondedAt?: Timestamp | undefined;
  /**
   * Optional usernames for better UX in invite lists.
   *
   * @generated from field: string grantee_username = 9;
   */
  granteeUsername: string;
  /**
   * Username of the account that sent the invitation, when available.
   *
   * @generated from field: string inviter_username = 10;
   */
  inviterUsername: string;
  /**
   * Optional label for the target sub-account, for display in invite lists.
   *
   * @generated from field: string subaccount_label = 11;
   */
  subaccountLabel: string;
  /**
   * Inviter (root account) primary Smart Account address, when available.
   * Useful for displaying a stable identity when no username is set.
   *
   * @generated from field: string inviter_root_smart_account_address = 12;
   */
  inviterRootSmartAccountAddress: string;
  /**
   * Grantee (root account) primary Smart Account address, when available.
   * Useful for displaying a stable identity when no username is set.
   *
   * @generated from field: string grantee_root_smart_account_address = 13;
   */
  granteeRootSmartAccountAddress: string;
  /**
   * Current delegated-member MFA requirement on the target sub-account. If true, accepting the invite requires MFA enrollment and fresh step-up.
   *
   * @generated from field: bool require_member_mfa = 14;
   */
  requireMemberMfa: boolean;
};
/**
 * Describes the message auth.v1.SubaccountInvite.
 * Use `create(SubaccountInviteSchema)` to create a new message.
 */
declare const SubaccountInviteSchema: GenMessage<SubaccountInvite>;
/**
 * Request to invite another root account to a sub-account.
 *
 * @generated from message auth.v1.InviteSubaccountMemberRequest
 */
type InviteSubaccountMemberRequest = Message<"auth.v1.InviteSubaccountMemberRequest"> & {
  /**
   * Sub-account to share (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Root account ID of the grantee (opaque ID).
   *
   * @generated from field: fixed64 grantee_account_id = 2;
   */
  granteeAccountId: bigint;
  /**
   * Role to grant if the invite is accepted.
   *
   * @generated from field: auth.v1.SubaccountRole role = 3;
   */
  role: SubaccountRole;
};
/**
 * Describes the message auth.v1.InviteSubaccountMemberRequest.
 * Use `create(InviteSubaccountMemberRequestSchema)` to create a new message.
 */
declare const InviteSubaccountMemberRequestSchema: GenMessage<InviteSubaccountMemberRequest>;
/**
 * Response containing the created or refreshed invitation.
 *
 * @generated from message auth.v1.InviteSubaccountMemberResponse
 */
type InviteSubaccountMemberResponse = Message<"auth.v1.InviteSubaccountMemberResponse"> & {
  /**
   * Pending invitation.
   *
   * @generated from field: auth.v1.SubaccountInvite invite = 1;
   */
  invite?: SubaccountInvite | undefined;
};
/**
 * Describes the message auth.v1.InviteSubaccountMemberResponse.
 * Use `create(InviteSubaccountMemberResponseSchema)` to create a new message.
 */
declare const InviteSubaccountMemberResponseSchema: GenMessage<InviteSubaccountMemberResponse>;
/**
 * Request to list sub-account invitations.
 *
 * @generated from message auth.v1.ListSubaccountInvitesRequest
 */
type ListSubaccountInvitesRequest = Message<"auth.v1.ListSubaccountInvitesRequest"> & {
  /**
   * Optional direction filter. An omitted value includes both scopes.
   *
   * @generated from field: auth.v1.SubaccountInviteDirection direction = 1;
   */
  direction: SubaccountInviteDirection;
};
/**
 * Describes the message auth.v1.ListSubaccountInvitesRequest.
 * Use `create(ListSubaccountInvitesRequestSchema)` to create a new message.
 */
declare const ListSubaccountInvitesRequestSchema: GenMessage<ListSubaccountInvitesRequest>;
/**
 * Response containing sub-account invitations.
 *
 * @generated from message auth.v1.ListSubaccountInvitesResponse
 */
type ListSubaccountInvitesResponse = Message<"auth.v1.ListSubaccountInvitesResponse"> & {
  /**
   * Invitations visible to the caller, ordered newest first. Owners and admins
   * see all invitations for sub-accounts they administer, regardless of inviter.
   *
   * @generated from field: repeated auth.v1.SubaccountInvite invites = 1;
   */
  invites: SubaccountInvite[];
};
/**
 * Describes the message auth.v1.ListSubaccountInvitesResponse.
 * Use `create(ListSubaccountInvitesResponseSchema)` to create a new message.
 */
declare const ListSubaccountInvitesResponseSchema: GenMessage<ListSubaccountInvitesResponse>;
/**
 * Request to accept, decline, or cancel an invitation.
 *
 * @generated from message auth.v1.RespondSubaccountInviteRequest
 */
type RespondSubaccountInviteRequest = Message<"auth.v1.RespondSubaccountInviteRequest"> & {
  /**
   * Invite identifier (opaque ID).
   *
   * @generated from field: fixed64 invite_id = 1;
   */
  inviteId: bigint;
  /**
   * Action to apply to the invitation.
   *
   * @generated from field: auth.v1.SubaccountInviteAction action = 2;
   */
  action: SubaccountInviteAction;
};
/**
 * Describes the message auth.v1.RespondSubaccountInviteRequest.
 * Use `create(RespondSubaccountInviteRequestSchema)` to create a new message.
 */
declare const RespondSubaccountInviteRequestSchema: GenMessage<RespondSubaccountInviteRequest>;
/**
 * Response containing the updated invitation.
 *
 * @generated from message auth.v1.RespondSubaccountInviteResponse
 */
type RespondSubaccountInviteResponse = Message<"auth.v1.RespondSubaccountInviteResponse"> & {
  /**
   * Invitation after applying the response action.
   *
   * @generated from field: auth.v1.SubaccountInvite invite = 1;
   */
  invite?: SubaccountInvite | undefined;
};
/**
 * Describes the message auth.v1.RespondSubaccountInviteResponse.
 * Use `create(RespondSubaccountInviteResponseSchema)` to create a new message.
 */
declare const RespondSubaccountInviteResponseSchema: GenMessage<RespondSubaccountInviteResponse>;
/**
 * Request for an aggregated sub-account read view. Requested administrative
 * sections unavailable to the caller are returned empty without failing an
 * otherwise authorized sub-account read.
 *
 * @generated from message auth.v1.GetSubaccountRequest
 */
type GetSubaccountRequest = Message<"auth.v1.GetSubaccountRequest"> & {
  /**
   * Target sub-account (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Include API keys scoped to this sub-account. Only owner and admin callers receive API keys.
   *
   * @generated from field: bool include_api_keys = 2;
   */
  includeApiKeys: boolean;
  /**
   * Include current members for this sub-account. Every current member may receive the roster.
   *
   * @generated from field: bool include_members = 3;
   */
  includeMembers: boolean;
  /**
   * Include invitations visible to the caller.
   *
   * @generated from field: bool include_invites = 4;
   */
  includeInvites: boolean;
  /**
   * Include the attached sub-account policy, when one is attached. Every current member may receive it.
   *
   * @generated from field: bool include_policy = 5;
   */
  includePolicy: boolean;
  /**
   * Include current balances for this sub-account.
   *
   * @generated from field: bool include_balances = 6;
   */
  includeBalances: boolean;
  /**
   * Optional invitation direction filter. An omitted value includes both scopes.
   *
   * @generated from field: auth.v1.SubaccountInviteDirection invites_direction = 7;
   */
  invitesDirection: SubaccountInviteDirection;
};
/**
 * Describes the message auth.v1.GetSubaccountRequest.
 * Use `create(GetSubaccountRequestSchema)` to create a new message.
 */
declare const GetSubaccountRequestSchema: GenMessage<GetSubaccountRequest>;
/**
 * Aggregated sub-account read view.
 *
 * @generated from message auth.v1.GetSubaccountResponse
 */
type GetSubaccountResponse = Message<"auth.v1.GetSubaccountResponse"> & {
  /**
   * Requested sub-account summary.
   *
   * @generated from field: auth.v1.Subaccount subaccount = 1;
   */
  subaccount?: Subaccount | undefined;
  /**
   * API keys scoped to this sub-account when include_api_keys is true and the caller is owner or admin.
   *
   * @generated from field: repeated auth.v1.ApiKey api_keys = 2;
   */
  apiKeys: ApiKey[];
  /**
   * Current members for this sub-account when include_members is true and the caller is a current member.
   *
   * @generated from field: repeated auth.v1.SubaccountMemberView members = 3;
   */
  members: SubaccountMemberView[];
  /**
   * Invitations visible to the caller when include_invites is true.
   *
   * @generated from field: repeated auth.v1.SubaccountInvite invites = 4;
   */
  invites: SubaccountInvite[];
  /**
   * Attached policy when include_policy is true, the caller is a current member, and the sub-account has a policy.
   *
   * @generated from field: auth.v1.SubaccountPolicyView policy = 5;
   */
  policy?: SubaccountPolicyView | undefined;
  /**
   * Current balances when include_balances is true.
   *
   * @generated from field: ledger.read.v1.GetBalancesResponse balances = 6;
   */
  balances?: GetBalancesResponse | undefined;
};
/**
 * Describes the message auth.v1.GetSubaccountResponse.
 * Use `create(GetSubaccountResponseSchema)` to create a new message.
 */
declare const GetSubaccountResponseSchema: GenMessage<GetSubaccountResponse>;
/**
 * Activity or audit event for a sub-account.
 *
 * @generated from message auth.v1.ActivityEvent
 */
type ActivityEvent = Message<"auth.v1.ActivityEvent"> & {
  /**
   * Time when the event occurred.
   *
   * @generated from field: google.protobuf.Timestamp created_at = 2;
   */
  createdAt?: Timestamp | undefined;
  /**
   * Category of entity affected by the event.
   *
   * @generated from field: auth.v1.ActivityEntityKind entity_kind = 3;
   */
  entityKind: ActivityEntityKind;
  /**
   * Action recorded for the entity.
   *
   * @generated from field: auth.v1.ActivityEventAction event_action = 4;
   */
  eventAction: ActivityEventAction;
  /**
   * Client channel from which the event originated.
   *
   * @generated from field: auth.v1.ActivityEventSource source = 5;
   */
  source: ActivityEventSource;
  /**
   * Origin IP address. Masked for non-owner and non-admin callers.
   *
   * @generated from field: string ip = 6;
   */
  ip: string;
  /**
   * User agent associated with the event, when available.
   *
   * @generated from field: string user_agent = 7;
   */
  userAgent: string;
  /**
   * Account that performed the action (opaque ID).
   *
   * @generated from field: fixed64 actor_account_id = 8;
   */
  actorAccountId: bigint;
  /**
   * Structured event details as a JSON string. Maximum 64 KiB.
   *
   * @generated from field: string payload_json = 9;
   */
  payloadJson: string;
};
/**
 * Describes the message auth.v1.ActivityEvent.
 * Use `create(ActivityEventSchema)` to create a new message.
 */
declare const ActivityEventSchema: GenMessage<ActivityEvent>;
/**
 * Request to list sub-account activity.
 *
 * @generated from message auth.v1.ListSubaccountEventsRequest
 */
type ListSubaccountEventsRequest = Message<"auth.v1.ListSubaccountEventsRequest"> & {
  /**
   * Target sub-account (opaque ID).
   *
   * @generated from field: fixed64 subaccount_id = 1;
   */
  subaccountId: bigint;
  /**
   * Maximum number of events to return. Defaults to 50 when omitted; maximum is
   * 200.
   *
   * @generated from field: uint32 limit = 2;
   */
  limit: number;
  /**
   * Opaque keyset cursor from a previous response. The cursor is exclusive and
   * bound to the authenticated account and requested sub-account.
   *
   * @generated from field: string page_token = 4;
   */
  pageToken: string;
};
/**
 * Describes the message auth.v1.ListSubaccountEventsRequest.
 * Use `create(ListSubaccountEventsRequestSchema)` to create a new message.
 */
declare const ListSubaccountEventsRequestSchema: GenMessage<ListSubaccountEventsRequest>;
/**
 * Response containing sub-account activity events.
 *
 * @generated from message auth.v1.ListSubaccountEventsResponse
 */
type ListSubaccountEventsResponse = Message<"auth.v1.ListSubaccountEventsResponse"> & {
  /**
   * Activity events ordered newest first.
   *
   * @generated from field: repeated auth.v1.ActivityEvent events = 1;
   */
  events: ActivityEvent[];
  /**
   * Opaque cursor for the next page. Empty when no more results exist.
   *
   * @generated from field: string next_page_token = 3;
   */
  nextPageToken: string;
};
/**
 * Describes the message auth.v1.ListSubaccountEventsResponse.
 * Use `create(ListSubaccountEventsResponseSchema)` to create a new message.
 */
declare const ListSubaccountEventsResponseSchema: GenMessage<ListSubaccountEventsResponse>;
/**
 * Public lifecycle status of a sub-account.
 *
 * @generated from enum auth.v1.SubaccountStatus
 */
declare enum SubaccountStatus {
  /**
   * No sub-account status was specified.
   *
   * @generated from enum value: SUBACCOUNT_STATUS_UNSPECIFIED = 0;
   */
  UNSPECIFIED = 0,
  /**
   * The sub-account can be used normally.
   *
   * @generated from enum value: SUBACCOUNT_STATUS_ACTIVE = 1;
   */
  ACTIVE = 1,
  /**
   * The sub-account is disabled and cannot be used until re-enabled.
   *
   * @generated from enum value: SUBACCOUNT_STATUS_DISABLED = 2;
   */
  DISABLED = 2
}
/**
 * Describes the enum auth.v1.SubaccountStatus.
 */
declare const SubaccountStatusSchema: GenEnum<SubaccountStatus>;
/**
 * Role granted to a root account on a sub-account.
 *
 * @generated from enum auth.v1.SubaccountRole
 */
declare enum SubaccountRole {
  /**
   * No sub-account role was specified.
   *
   * @generated from enum value: SUBACCOUNT_ROLE_UNSPECIFIED = 0;
   */
  SUBACCOUNT_ROLE_UNSPECIFIED = 0,
  /**
   * Can view permitted sub-account data.
   *
   * @generated from enum value: VIEWER = 1;
   */
  VIEWER = 1,
  /**
   * Can place and manage spot orders where policy allows.
   *
   * @generated from enum value: TRADER = 2;
   */
  TRADER = 2,
  /**
   * Can place and manage spot and leverage-enabled orders where policy allows.
   *
   * @generated from enum value: LEVERAGED_TRADER = 3;
   */
  LEVERAGED_TRADER = 3,
  /**
   * Can manage permitted funding and treasury actions where policy allows.
   *
   * @generated from enum value: TREASURY = 4;
   */
  TREASURY = 4,
  /**
   * Can administer delegated members and settings, except owner-only controls.
   *
   * @generated from enum value: ADMIN = 5;
   */
  ADMIN = 5,
  /**
   * Owns the sub-account and can administer all sub-account settings.
   *
   * @generated from enum value: OWNER = 6;
   */
  OWNER = 6
}
/**
 * Describes the enum auth.v1.SubaccountRole.
 */
declare const SubaccountRoleSchema: GenEnum<SubaccountRole>;
/**
 * A stable capability granted by a sub-account role. These values describe
 * role authorization only; resource state, MFA, limits, and other request
 * context may still deny an operation.
 *
 * @generated from enum auth.v1.SubaccountPermission
 */
declare enum SubaccountPermission {
  /**
   * No permission selected.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_UNSPECIFIED = 0;
   */
  UNSPECIFIED = 0,
  /**
   * Read the sub-account and its non-sensitive metadata.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_SUBACCOUNT = 1;
   */
  READ_SUBACCOUNT = 1,
  /**
   * Update sub-account metadata or lifecycle status.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_UPDATE_SUBACCOUNT = 2;
   */
  UPDATE_SUBACCOUNT = 2,
  /**
   * Read balances and equity.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_BALANCES = 3;
   */
  READ_BALANCES = 3,
  /**
   * Read spot orders and trades.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_SPOT = 4;
   */
  READ_SPOT = 4,
  /**
   * Place and manage spot orders and triggers.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_TRADE_SPOT = 5;
   */
  TRADE_SPOT = 5,
  /**
   * Read internal-transfer history.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_INTERNAL_TRANSFERS = 6;
   */
  READ_INTERNAL_TRANSFERS = 6,
  /**
   * Create internal transfers.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_INTERNAL_TRANSFER = 7;
   */
  INTERNAL_TRANSFER = 7,
  /**
   * Withdraw value from Trading to an external destination.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_EXTERNAL_WITHDRAW = 8;
   */
  EXTERNAL_WITHDRAW = 8,
  /**
   * Read saved, recent, and whitelisted destinations.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_ADDRESS_BOOK = 9;
   */
  READ_ADDRESS_BOOK = 9,
  /**
   * Create, update, delete, and copy saved destinations.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_MANAGE_ADDRESS_BOOK = 10;
   */
  MANAGE_ADDRESS_BOOK = 10,
  /**
   * Read the current member roster.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_MEMBERS = 11;
   */
  READ_MEMBERS = 11,
  /**
   * Invite, remove, and change delegated members.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_MANAGE_MEMBERS = 12;
   */
  MANAGE_MEMBERS = 12,
  /**
   * Read pending and historical invitations for the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_INVITES = 13;
   */
  READ_INVITES = 13,
  /**
   * Cancel invitations for the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_MANAGE_INVITES = 14;
   */
  MANAGE_INVITES = 14,
  /**
   * Read API keys and their attached policies for the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_API_KEYS = 15;
   */
  READ_API_KEYS = 15,
  /**
   * Create, update, and delete API keys for the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_MANAGE_API_KEYS = 16;
   */
  MANAGE_API_KEYS = 16,
  /**
   * Read the policy attached to the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_SUBACCOUNT_POLICY = 17;
   */
  READ_SUBACCOUNT_POLICY = 17,
  /**
   * Create, update, attach, or replace policies for the sub-account, subject to owner-only policy safeguards.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_MANAGE_SUBACCOUNT_POLICY = 18;
   */
  MANAGE_SUBACCOUNT_POLICY = 18,
  /**
   * Read sub-account activity with role-appropriate redaction.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_ACTIVITY = 19;
   */
  READ_ACTIVITY = 19,
  /**
   * Read unmasked security details in sub-account activity.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_ACTIVITY_SECURITY_DETAILS = 20;
   */
  READ_ACTIVITY_SECURITY_DETAILS = 20,
  /**
   * Change the delegated-member MFA requirement.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_MANAGE_MEMBER_MFA_REQUIREMENT = 21;
   */
  MANAGE_MEMBER_MFA_REQUIREMENT = 21,
  /**
   * Create or retrieve a deposit address for the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_CREATE_DEPOSIT_ADDRESS = 22;
   */
  CREATE_DEPOSIT_ADDRESS = 22,
  /**
   * List deposit addresses for the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_DEPOSIT_ADDRESSES = 23;
   */
  READ_DEPOSIT_ADDRESSES = 23,
  /**
   * Read Guard Signer wallet and on-chain status for the sub-account.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_READ_GUARD_SIGNER_STATUS = 24;
   */
  READ_GUARD_SIGNER_STATUS = 24,
  /**
   * Create, sign with, rotate, or export the sub-account Guard Signer wallet.
   *
   * @generated from enum value: SUBACCOUNT_PERMISSION_MANAGE_GUARD_SIGNER = 25;
   */
  MANAGE_GUARD_SIGNER = 25
}
/**
 * Describes the enum auth.v1.SubaccountPermission.
 */
declare const SubaccountPermissionSchema: GenEnum<SubaccountPermission>;
/**
 * Status of an invitation to join a sub-account.
 *
 * @generated from enum auth.v1.SubaccountInviteStatus
 */
declare enum SubaccountInviteStatus {
  /**
   * No invitation status was specified.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_UNSPECIFIED = 0;
   */
  UNSPECIFIED = 0,
  /**
   * Invitation is waiting for the grantee to respond.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_PENDING = 1;
   */
  PENDING = 1,
  /**
   * Invitation was accepted and access was granted.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_ACCEPTED = 2;
   */
  ACCEPTED = 2,
  /**
   * Invitation was declined by the grantee.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_DECLINED = 3;
   */
  DECLINED = 3,
  /**
   * Invitation was cancelled by the inviter.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_CANCELLED = 4;
   */
  CANCELLED = 4
}
/**
 * Describes the enum auth.v1.SubaccountInviteStatus.
 */
declare const SubaccountInviteStatusSchema: GenEnum<SubaccountInviteStatus>;
/**
 * Direction used to filter invitations relative to the caller.
 *
 * @generated from enum auth.v1.SubaccountInviteDirection
 */
declare enum SubaccountInviteDirection {
  /**
   * Include both incoming and outgoing invitations.
   *
   * @generated from enum value: DIRECTION_UNSPECIFIED = 0;
   */
  DIRECTION_UNSPECIFIED = 0,
  /**
   * Include invitations where the caller is the grantee.
   *
   * @generated from enum value: INCOMING = 1;
   */
  INCOMING = 1,
  /**
   * Include invitations for sub-accounts the caller owns or administers.
   *
   * @generated from enum value: OUTGOING = 2;
   */
  OUTGOING = 2
}
/**
 * Describes the enum auth.v1.SubaccountInviteDirection.
 */
declare const SubaccountInviteDirectionSchema: GenEnum<SubaccountInviteDirection>;
/**
 * Action to take on a sub-account invitation.
 *
 * @generated from enum auth.v1.SubaccountInviteAction
 */
declare enum SubaccountInviteAction {
  /**
   * No invitation action was specified.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_UNSPECIFIED = 0;
   */
  UNSPECIFIED = 0,
  /**
   * Accept an incoming invitation as the grantee.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_ACCEPT = 1;
   */
  ACCEPT = 1,
  /**
   * Decline an incoming invitation as the grantee.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_DECLINE = 2;
   */
  DECLINE = 2,
  /**
   * Cancel an invitation as a current owner or admin of its sub-account.
   *
   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_CANCEL = 3;
   */
  CANCEL = 3
}
/**
 * Describes the enum auth.v1.SubaccountInviteAction.
 */
declare const SubaccountInviteActionSchema: GenEnum<SubaccountInviteAction>;
/**
 * Entity category affected by an activity event.
 *
 * @generated from enum auth.v1.ActivityEntityKind
 */
declare enum ActivityEntityKind {
  /**
   * No activity entity category was specified.
   *
   * @generated from enum value: ACTIVITY_ENTITY_UNSPECIFIED = 0;
   */
  ACTIVITY_ENTITY_UNSPECIFIED = 0,
  /**
   * Root account.
   *
   * @generated from enum value: ACTIVITY_ENTITY_ACCOUNT = 1;
   */
  ACTIVITY_ENTITY_ACCOUNT = 1,
  /**
   * Authentication session.
   *
   * @generated from enum value: ACTIVITY_ENTITY_SESSION = 2;
   */
  ACTIVITY_ENTITY_SESSION = 2,
  /**
   * API key.
   *
   * @generated from enum value: ACTIVITY_ENTITY_API_KEY = 3;
   */
  ACTIVITY_ENTITY_API_KEY = 3,
  /**
   * Sub-account.
   *
   * @generated from enum value: ACTIVITY_ENTITY_SUBACCOUNT = 4;
   */
  ACTIVITY_ENTITY_SUBACCOUNT = 4,
  /**
   * Sub-account member.
   *
   * @generated from enum value: ACTIVITY_ENTITY_MEMBER = 5;
   */
  ACTIVITY_ENTITY_MEMBER = 5,
  /**
   * Access policy.
   *
   * @generated from enum value: ACTIVITY_ENTITY_POLICY = 6;
   */
  ACTIVITY_ENTITY_POLICY = 6,
  /**
   * Sub-account invitation.
   *
   * @generated from enum value: ACTIVITY_ENTITY_INVITE = 7;
   */
  ACTIVITY_ENTITY_INVITE = 7,
  /**
   * Account security configuration.
   *
   * @generated from enum value: ACTIVITY_ENTITY_SECURITY = 8;
   */
  ACTIVITY_ENTITY_SECURITY = 8,
  /**
   * Saved transfer destination.
   *
   * @generated from enum value: ACTIVITY_ENTITY_DESTINATION = 9;
   */
  ACTIVITY_ENTITY_DESTINATION = 9
}
/**
 * Describes the enum auth.v1.ActivityEntityKind.
 */
declare const ActivityEntityKindSchema: GenEnum<ActivityEntityKind>;
/**
 * Action recorded by an activity event.
 *
 * @generated from enum auth.v1.ActivityEventAction
 */
declare enum ActivityEventAction {
  /**
   * No activity action was specified.
   *
   * @generated from enum value: ACTIVITY_ACTION_UNSPECIFIED = 0;
   */
  ACTIVITY_ACTION_UNSPECIFIED = 0,
  /**
   * Entity was created.
   *
   * @generated from enum value: ACTIVITY_ACTION_CREATED = 1;
   */
  ACTIVITY_ACTION_CREATED = 1,
  /**
   * Entity was updated.
   *
   * @generated from enum value: ACTIVITY_ACTION_UPDATED = 2;
   */
  ACTIVITY_ACTION_UPDATED = 2,
  /**
   * Entity was deleted.
   *
   * @generated from enum value: ACTIVITY_ACTION_DELETED = 3;
   */
  ACTIVITY_ACTION_DELETED = 3,
  /**
   * Entity was enabled.
   *
   * @generated from enum value: ACTIVITY_ACTION_ENABLED = 4;
   */
  ACTIVITY_ACTION_ENABLED = 4,
  /**
   * Entity was disabled.
   *
   * @generated from enum value: ACTIVITY_ACTION_DISABLED = 5;
   */
  ACTIVITY_ACTION_DISABLED = 5,
  /**
   * Entity was removed from its parent scope.
   *
   * @generated from enum value: ACTIVITY_ACTION_REMOVED = 6;
   */
  ACTIVITY_ACTION_REMOVED = 6,
  /**
   * Member role was assigned or changed.
   *
   * @generated from enum value: ACTIVITY_ACTION_ROLE_SET = 7;
   */
  ACTIVITY_ACTION_ROLE_SET = 7,
  /**
   * Security challenge or request was received.
   *
   * @generated from enum value: ACTIVITY_ACTION_RECEIVED = 8;
   */
  ACTIVITY_ACTION_RECEIVED = 8,
  /**
   * Invitation or request was answered.
   *
   * @generated from enum value: ACTIVITY_ACTION_REPLIED = 9;
   */
  ACTIVITY_ACTION_REPLIED = 9,
  /**
   * Operation failed.
   *
   * @generated from enum value: ACTIVITY_ACTION_FAILED = 10;
   */
  ACTIVITY_ACTION_FAILED = 10,
  /**
   * Access was revoked.
   *
   * @generated from enum value: ACTIVITY_ACTION_REVOKED = 11;
   */
  ACTIVITY_ACTION_REVOKED = 11,
  /**
   * Operation was blocked.
   *
   * @generated from enum value: ACTIVITY_ACTION_BLOCKED = 12;
   */
  ACTIVITY_ACTION_BLOCKED = 12,
  /**
   * Security hold was placed.
   *
   * @generated from enum value: ACTIVITY_ACTION_HOLD_PLACED = 13;
   */
  ACTIVITY_ACTION_HOLD_PLACED = 13,
  /**
   * Security hold was released.
   *
   * @generated from enum value: ACTIVITY_ACTION_HOLD_RELEASED = 14;
   */
  ACTIVITY_ACTION_HOLD_RELEASED = 14
}
/**
 * Describes the enum auth.v1.ActivityEventAction.
 */
declare const ActivityEventActionSchema: GenEnum<ActivityEventAction>;
/**
 * Client channel from which an activity event originated.
 *
 * @generated from enum auth.v1.ActivityEventSource
 */
declare enum ActivityEventSource {
  /**
   * No activity source was specified.
   *
   * @generated from enum value: ACTIVITY_SOURCE_UNSPECIFIED = 0;
   */
  ACTIVITY_SOURCE_UNSPECIFIED = 0,
  /**
   * Web client.
   *
   * @generated from enum value: ACTIVITY_SOURCE_WEB = 1;
   */
  ACTIVITY_SOURCE_WEB = 1,
  /**
   * Mobile client.
   *
   * @generated from enum value: ACTIVITY_SOURCE_MOBILE = 2;
   */
  ACTIVITY_SOURCE_MOBILE = 2,
  /**
   * Programmatic API client.
   *
   * @generated from enum value: ACTIVITY_SOURCE_API = 3;
   */
  ACTIVITY_SOURCE_API = 3
}
/**
 * Describes the enum auth.v1.ActivityEventSource.
 */
declare const ActivityEventSourceSchema: GenEnum<ActivityEventSource>;
/**
 * Read service for aggregated sub-account pages.
 *
 * @generated from service auth.v1.SubaccountViewService
 */
declare const SubaccountViewService: GenService<{
  /**
   * Aggregate commonly-needed read data for a sub-account dashboard page.
   *
   * @generated from rpc auth.v1.SubaccountViewService.GetSubaccount
   */
  getSubaccount: {
    methodKind: "unary";
    input: typeof GetSubaccountRequestSchema;
    output: typeof GetSubaccountResponseSchema;
  };
  /**
   * List audit and activity events for a sub-account.
   *
   * @generated from rpc auth.v1.SubaccountViewService.ListSubaccountActivity
   */
  listSubaccountActivity: {
    methodKind: "unary";
    input: typeof ListSubaccountEventsRequestSchema;
    output: typeof ListSubaccountEventsResponseSchema;
  };
}>;
/**
 * Service for creating, updating, sharing, and listing sub-accounts.
 *
 * @generated from service auth.v1.SubaccountService
 */
declare const SubaccountService: GenService<{
  /**
   * List sub-accounts owned by or shared with the caller.
   *
   * @generated from rpc auth.v1.SubaccountService.ListSubaccounts
   */
  listSubaccounts: {
    methodKind: "unary";
    input: typeof ListSubaccountsRequestSchema;
    output: typeof ListSubaccountsResponseSchema;
  };
  /**
   * Request the canonical next smart account and a short-lived account-control
   * authorization bound to the authenticated root and selected owner wallet.
   *
   * @generated from rpc auth.v1.SubaccountService.CreateSubaccountChallenge
   */
  createSubaccountChallenge: {
    methodKind: "unary";
    input: typeof CreateSubaccountChallengeRequestSchema;
    output: typeof CreateSubaccountChallengeResponseSchema;
  };
  /**
   * Create a new sub-account under the caller's root account. Requires current
   * terms acceptance; otherwise FailedPrecondition with AUTH_TERMS_NOT_ACCEPTED
   * is returned.
   *
   * @generated from rpc auth.v1.SubaccountService.CreateSubaccount
   */
  createSubaccount: {
    methodKind: "unary";
    input: typeof CreateSubaccountRequestSchema;
    output: typeof CreateSubaccountResponseSchema;
  };
  /**
   * Update mutable sub-account fields (label/status/icon/color).
   *
   * @generated from rpc auth.v1.SubaccountService.UpdateSubaccount
   */
  updateSubaccount: {
    methodKind: "unary";
    input: typeof UpdateSubaccountRequestSchema;
    output: typeof UpdateSubaccountResponseSchema;
  };
  /**
   * Toggle the delegated member MFA requirement for one sub-account (owner only).
   *
   * @generated from rpc auth.v1.SubaccountService.SetSubaccountMemberMFARequirement
   */
  setSubaccountMemberMFARequirement: {
    methodKind: "unary";
    input: typeof SetSubaccountMemberMFARequirementRequestSchema;
    output: typeof SetSubaccountMemberMFARequirementResponseSchema;
  };
  /**
   * List current members for a sub-account visible to any current member.
   *
   * @generated from rpc auth.v1.SubaccountService.ListSubaccountMembers
   */
  listSubaccountMembers: {
    methodKind: "unary";
    input: typeof ListSubaccountMembersRequestSchema;
    output: typeof ListSubaccountMembersResponseSchema;
  };
  /**
   * Remove a member from a sub-account (owner/admin only).
   *
   * @generated from rpc auth.v1.SubaccountService.RemoveSubaccountMember
   */
  removeSubaccountMember: {
    methodKind: "unary";
    input: typeof RemoveSubaccountMemberRequestSchema;
    output: typeof RemoveSubaccountMemberResponseSchema;
  };
  /**
   * Update an existing sub-account member's role (owner/admin only).
   *
   * @generated from rpc auth.v1.SubaccountService.UpdateSubaccountMemberRole
   */
  updateSubaccountMemberRole: {
    methodKind: "unary";
    input: typeof UpdateSubaccountMemberRoleRequestSchema;
    output: typeof UpdateSubaccountMemberRoleResponseSchema;
  };
  /**
   * Invite a member to a sub-account.
   *
   * @generated from rpc auth.v1.SubaccountService.InviteSubaccountMember
   */
  inviteSubaccountMember: {
    methodKind: "unary";
    input: typeof InviteSubaccountMemberRequestSchema;
    output: typeof InviteSubaccountMemberResponseSchema;
  };
  /**
   * List incoming invitations and invitations for administered sub-accounts.
   *
   * @generated from rpc auth.v1.SubaccountService.ListSubaccountInvites
   */
  listSubaccountInvites: {
    methodKind: "unary";
    input: typeof ListSubaccountInvitesRequestSchema;
    output: typeof ListSubaccountInvitesResponseSchema;
  };
  /**
   * Accept or decline an invite as the grantee, or cancel it as a current owner or admin.
   * Acceptance requires an enrolled factor and a recently MFA-elevated session when the subaccount requires member MFA.
   *
   * @generated from rpc auth.v1.SubaccountService.RespondSubaccountInvite
   */
  respondSubaccountInvite: {
    methodKind: "unary";
    input: typeof RespondSubaccountInviteRequestSchema;
    output: typeof RespondSubaccountInviteResponseSchema;
  };
}>;
/**
 * Read-only discovery of built-in role capabilities and caller-effective permissions.
 *
 * @generated from service auth.v1.SubaccountRoleService
 */
declare const SubaccountRoleService: GenService<{
  /**
   * List the authoritative built-in role and permission catalog. This metadata is public.
   *
   * @generated from rpc auth.v1.SubaccountRoleService.ListSubaccountRoles
   */
  listSubaccountRoles: {
    methodKind: "unary";
    input: typeof ListSubaccountRolesRequestSchema;
    output: typeof ListSubaccountRolesResponseSchema;
  };
  /**
   * Return the authenticated caller's effective permissions for one sub-account.
   *
   * @generated from rpc auth.v1.SubaccountRoleService.GetEffectiveSubaccountPermissions
   */
  getEffectiveSubaccountPermissions: {
    methodKind: "unary";
    input: typeof GetEffectiveSubaccountPermissionsRequestSchema;
    output: typeof GetEffectiveSubaccountPermissionsResponseSchema;
  };
}>;
//#endregion
export { ActivityEntityKind, ActivityEntityKindSchema, ActivityEvent, ActivityEventAction, ActivityEventActionSchema, ActivityEventSchema, ActivityEventSource, ActivityEventSourceSchema, CreateSubaccountChallengeRequest, CreateSubaccountChallengeRequestSchema, CreateSubaccountChallengeResponse, CreateSubaccountChallengeResponseSchema, CreateSubaccountRequest, CreateSubaccountRequestSchema, CreateSubaccountResponse, CreateSubaccountResponseSchema, GetEffectiveSubaccountPermissionsRequest, GetEffectiveSubaccountPermissionsRequestSchema, GetEffectiveSubaccountPermissionsResponse, GetEffectiveSubaccountPermissionsResponseSchema, GetSubaccountRequest, GetSubaccountRequestSchema, GetSubaccountResponse, GetSubaccountResponseSchema, InviteSubaccountMemberRequest, InviteSubaccountMemberRequestSchema, InviteSubaccountMemberResponse, InviteSubaccountMemberResponseSchema, ListSubaccountEventsRequest, ListSubaccountEventsRequestSchema, ListSubaccountEventsResponse, ListSubaccountEventsResponseSchema, ListSubaccountInvitesRequest, ListSubaccountInvitesRequestSchema, ListSubaccountInvitesResponse, ListSubaccountInvitesResponseSchema, ListSubaccountMembersRequest, ListSubaccountMembersRequestSchema, ListSubaccountMembersResponse, ListSubaccountMembersResponseSchema, ListSubaccountRolesRequest, ListSubaccountRolesRequestSchema, ListSubaccountRolesResponse, ListSubaccountRolesResponseSchema, ListSubaccountsRequest, ListSubaccountsRequestSchema, ListSubaccountsResponse, ListSubaccountsResponseSchema, RemoveSubaccountMemberRequest, RemoveSubaccountMemberRequestSchema, RemoveSubaccountMemberResponse, RemoveSubaccountMemberResponseSchema, RespondSubaccountInviteRequest, RespondSubaccountInviteRequestSchema, RespondSubaccountInviteResponse, RespondSubaccountInviteResponseSchema, SetSubaccountMemberMFARequirementRequest, SetSubaccountMemberMFARequirementRequestSchema, SetSubaccountMemberMFARequirementResponse, SetSubaccountMemberMFARequirementResponseSchema, Subaccount, SubaccountInvite, SubaccountInviteAction, SubaccountInviteActionSchema, SubaccountInviteDirection, SubaccountInviteDirectionSchema, SubaccountInviteSchema, SubaccountInviteStatus, SubaccountInviteStatusSchema, SubaccountMemberView, SubaccountMemberViewSchema, SubaccountPermission, SubaccountPermissionDefinition, SubaccountPermissionDefinitionSchema, SubaccountPermissionSchema, SubaccountRole, SubaccountRoleDefinition, SubaccountRoleDefinitionSchema, SubaccountRoleSchema, SubaccountRoleService, SubaccountRoleView, SubaccountRoleViewSchema, SubaccountSchema, SubaccountService, SubaccountStatus, SubaccountStatusSchema, SubaccountUpdateSpec, SubaccountUpdateSpecSchema, SubaccountViewService, UpdateSubaccountMemberRoleRequest, UpdateSubaccountMemberRoleRequestSchema, UpdateSubaccountMemberRoleResponse, UpdateSubaccountMemberRoleResponseSchema, UpdateSubaccountRequest, UpdateSubaccountRequestSchema, UpdateSubaccountResponse, UpdateSubaccountResponseSchema, file_auth_v1_subaccounts, subaccounts_pb_d_exports };
//# sourceMappingURL=subaccounts_pb.d.ts.map