kernelnodeopsv1

type AgentAck struct {
	Accepted         bool   `protobuf:"varint,1,opt,name=accepted,proto3" json:"accepted,omitempty"`
	Error            string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	AcceptedAtUnixMs int64  `protobuf:"varint,3,opt,name=accepted_at_unix_ms,json=acceptedAtUnixMs,proto3" json:"accepted_at_unix_ms,omitempty"`
	SessionId        string `protobuf:"bytes,4,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	Revision         uint64 `protobuf:"varint,5,opt,name=revision,proto3" json:"revision,omitempty"`
	// contains filtered or unexported fields
}

type AgentControlOperation struct {
	NodeId         uint64 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
	Kind           string `protobuf:"bytes,2,opt,name=kind,proto3" json:"kind,omitempty"`
	PayloadJson    []byte `protobuf:"bytes,3,opt,name=payload_json,json=payloadJson,proto3" json:"payload_json,omitempty"`
	TimeoutSeconds uint32 `protobuf:"varint,4,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// agent_operation_id is the stream's operation id; the kernel generates
	// one when empty.
	AgentOperationId string `protobuf:"bytes,5,opt,name=agent_operation_id,json=agentOperationId,proto3" json:"agent_operation_id,omitempty"`
	// contains filtered or unexported fields
}

type AgentDiagnosticResult struct {
	TaskId        string    `protobuf:"bytes,1,opt,name=task_id,json=taskId,proto3" json:"task_id,omitempty"`
	MessageId     string    `protobuf:"bytes,2,opt,name=message_id,json=messageId,proto3" json:"message_id,omitempty"`
	AckReceived   bool      `protobuf:"varint,3,opt,name=ack_received,json=ackReceived,proto3" json:"ack_received,omitempty"`
	Ack           *AgentAck `protobuf:"bytes,4,opt,name=ack,proto3" json:"ack,omitempty"`
	DispatchError string    `protobuf:"bytes,5,opt,name=dispatch_error,json=dispatchError,proto3" json:"dispatch_error,omitempty"`
	// legacy_fallback is true when the task went out in the legacy task
	// message after the acknowledged dispatch failed.
	LegacyFallback bool `protobuf:"varint,6,opt,name=legacy_fallback,json=legacyFallback,proto3" json:"legacy_fallback,omitempty"`
	// ack_json is the transport's own acknowledgement as the administrator's
	// task routes show it (the WebSocket's ack message, or the stream's
	// OperationAck), scrubbed like a result; empty without one.
	AckJson []byte `protobuf:"bytes,7,opt,name=ack_json,json=ackJson,proto3" json:"ack_json,omitempty"`
	// task_json is the task's row (v2_agent_diagnostic_task) as the
	// administrator's task routes show it ("data"): as recorded after the
	// dispatch, or as created when the task could not be sent; scrubbed like
	// a result.
	TaskJson []byte `protobuf:"bytes,8,opt,name=task_json,json=taskJson,proto3" json:"task_json,omitempty"`
	// contains filtered or unexported fields
}

type AgentOperationResult struct {
	AgentOperationId string    `protobuf:"bytes,1,opt,name=agent_operation_id,json=agentOperationId,proto3" json:"agent_operation_id,omitempty"`
	Revision         uint64    `protobuf:"varint,2,opt,name=revision,proto3" json:"revision,omitempty"`
	Ack              *AgentAck `protobuf:"bytes,3,opt,name=ack,proto3" json:"ack,omitempty"`
	// deadline_unix_ms is the deadline the stream operation was sent with.
	DeadlineUnixMs int64 `protobuf:"varint,4,opt,name=deadline_unix_ms,json=deadlineUnixMs,proto3" json:"deadline_unix_ms,omitempty"`
	// contains filtered or unexported fields
}

type AgentSession struct {
	Node              *NodeRef       `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
	Transport         AgentTransport `protobuf:"varint,2,opt,name=transport,proto3,enum=anixops.kernelnodeops.v1.AgentTransport" json:"transport,omitempty"`
	SessionId         string         `protobuf:"bytes,3,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	AgentVersion      string         `protobuf:"bytes,4,opt,name=agent_version,json=agentVersion,proto3" json:"agent_version,omitempty"`
	InstanceId        string         `protobuf:"bytes,5,opt,name=instance_id,json=instanceId,proto3" json:"instance_id,omitempty"`
	Capabilities      []string       `protobuf:"bytes,6,rep,name=capabilities,proto3" json:"capabilities,omitempty"`
	ConnectedAtUnixMs int64          `protobuf:"varint,7,opt,name=connected_at_unix_ms,json=connectedAtUnixMs,proto3" json:"connected_at_unix_ms,omitempty"`
	LastSeenUnixMs    int64          `protobuf:"varint,8,opt,name=last_seen_unix_ms,json=lastSeenUnixMs,proto3" json:"last_seen_unix_ms,omitempty"`
	DesiredRevision   uint64         `protobuf:"varint,9,opt,name=desired_revision,json=desiredRevision,proto3" json:"desired_revision,omitempty"`
	ObservedRevision  uint64         `protobuf:"varint,10,opt,name=observed_revision,json=observedRevision,proto3" json:"observed_revision,omitempty"`
	// system_json is the system information a WebSocket agent reported.
	SystemJson []byte `protobuf:"bytes,11,opt,name=system_json,json=systemJson,proto3" json:"system_json,omitempty"`
	// identity is the session's authenticated identity: the agent's SPIFFE ID
	// ("spiffe://anixops/<cluster>/agent/<node>") or "api-key".
	Identity string `protobuf:"bytes,12,opt,name=identity,proto3" json:"identity,omitempty"`
	// admin_json is a WebSocket session as the administrator's agent list
	// (GET /api/v2/admin/agent/list) shows it, rendered by the kernel and
	// scrubbed like a result; empty for a stream session.
	AdminJson []byte `protobuf:"bytes,13,opt,name=admin_json,json=adminJson,proto3" json:"admin_json,omitempty"`
	// contains filtered or unexported fields
}

type AgentTransport int32

type ApplyForward struct {
	ForwardId uint64        `protobuf:"varint,1,opt,name=forward_id,json=forwardId,proto3" json:"forward_id,omitempty"`
	Action    ForwardAction `protobuf:"varint,2,opt,name=action,proto3,enum=anixops.kernelnodeops.v1.ForwardAction" json:"action,omitempty"`
	// contains filtered or unexported fields
}

type ApplyLegacyRule struct {
	RuleId uint64        `protobuf:"varint,1,opt,name=rule_id,json=ruleId,proto3" json:"rule_id,omitempty"`
	Action ForwardAction `protobuf:"varint,2,opt,name=action,proto3,enum=anixops.kernelnodeops.v1.ForwardAction" json:"action,omitempty"`
	// contains filtered or unexported fields
}

type ApplyTunnel struct {
	TunnelId uint64 `protobuf:"varint,1,opt,name=tunnel_id,json=tunnelId,proto3" json:"tunnel_id,omitempty"`
	// reasons name what changed ("protocol", "listen", "interface"), for the
	// audit trail.
	Reasons []string `protobuf:"bytes,2,rep,name=reasons,proto3" json:"reasons,omitempty"`
	// contains filtered or unexported fields
}

type CancelOperationRequest struct {
	OperationId string `protobuf:"bytes,1,opt,name=operation_id,json=operationId,proto3" json:"operation_id,omitempty"`
	Reason      string `protobuf:"bytes,2,opt,name=reason,proto3" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type CancelOperationResponse struct {
	Operation *Operation `protobuf:"bytes,1,opt,name=operation,proto3" json:"operation,omitempty"`
	// contains filtered or unexported fields
}

type Channel int32

type CheckEndpoints struct {
	Nodes []*NodeRef `protobuf:"bytes,1,rep,name=nodes,proto3" json:"nodes,omitempty"`
	// record_status writes each node's status, last check, latency and uptime,
	// as the legacy checks do.
	RecordStatus bool    `protobuf:"varint,2,opt,name=record_status,json=recordStatus,proto3" json:"record_status,omitempty"`
	Vantage      Vantage `protobuf:"varint,3,opt,name=vantage,proto3,enum=anixops.kernelnodeops.v1.Vantage" json:"vantage,omitempty"`
	// contains filtered or unexported fields
}

type CollectNodeStats struct {
	Node *NodeRef `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
	// contains filtered or unexported fields
}

type CredentialKind int32

type CredentialResult struct {
	Subject      *NodeRef        `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	Kind         CredentialKind  `protobuf:"varint,2,opt,name=kind,proto3,enum=anixops.kernelnodeops.v1.CredentialKind" json:"kind,omitempty"`
	CredentialId uint64          `protobuf:"varint,3,opt,name=credential_id,json=credentialId,proto3" json:"credential_id,omitempty"`
	Version      uint32          `protobuf:"varint,4,opt,name=version,proto3" json:"version,omitempty"`
	Reveal       []*SecretHandle `protobuf:"bytes,5,rep,name=reveal,proto3" json:"reveal,omitempty"`
	// contains filtered or unexported fields
}

type DiagnoseForward struct {
	ForwardId uint64  `protobuf:"varint,1,opt,name=forward_id,json=forwardId,proto3" json:"forward_id,omitempty"`
	Vantage   Vantage `protobuf:"varint,2,opt,name=vantage,proto3,enum=anixops.kernelnodeops.v1.Vantage" json:"vantage,omitempty"`
	// contains filtered or unexported fields
}

type DiagnoseTunnel struct {
	TunnelId uint64  `protobuf:"varint,1,opt,name=tunnel_id,json=tunnelId,proto3" json:"tunnel_id,omitempty"`
	Vantage  Vantage `protobuf:"varint,2,opt,name=vantage,proto3,enum=anixops.kernelnodeops.v1.Vantage" json:"vantage,omitempty"`
	// contains filtered or unexported fields
}

type DiagnosisOutcome struct {
	Success       bool    `protobuf:"varint,1,opt,name=success,proto3" json:"success,omitempty"`
	Description   string  `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	NodeName      string  `protobuf:"bytes,3,opt,name=node_name,json=nodeName,proto3" json:"node_name,omitempty"`
	NodeId        string  `protobuf:"bytes,4,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
	TargetIp      string  `protobuf:"bytes,5,opt,name=target_ip,json=targetIp,proto3" json:"target_ip,omitempty"`
	TargetPort    int32   `protobuf:"varint,6,opt,name=target_port,json=targetPort,proto3" json:"target_port,omitempty"`
	AverageTimeMs float64 `protobuf:"fixed64,7,opt,name=average_time_ms,json=averageTimeMs,proto3" json:"average_time_ms,omitempty"`
	PacketLoss    float64 `protobuf:"fixed64,8,opt,name=packet_loss,json=packetLoss,proto3" json:"packet_loss,omitempty"`
	Message       string  `protobuf:"bytes,9,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type DiagnosisResult struct {
	Outcomes []*DiagnosisOutcome `protobuf:"bytes,1,rep,name=outcomes,proto3" json:"outcomes,omitempty"`
	// vantage is where the diagnosis ran.
	Vantage *VantageReport `protobuf:"bytes,2,opt,name=vantage,proto3" json:"vantage,omitempty"`
	// contains filtered or unexported fields
}

type EndpointCheck struct {
	Node            *NodeRef `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
	Reachable       bool     `protobuf:"varint,2,opt,name=reachable,proto3" json:"reachable,omitempty"`
	LatencyMs       int64    `protobuf:"varint,3,opt,name=latency_ms,json=latencyMs,proto3" json:"latency_ms,omitempty"`
	Error           string   `protobuf:"bytes,4,opt,name=error,proto3" json:"error,omitempty"`
	CheckedAtUnixMs int64    `protobuf:"varint,5,opt,name=checked_at_unix_ms,json=checkedAtUnixMs,proto3" json:"checked_at_unix_ms,omitempty"`
	// vantage is where this node's check ran.
	Vantage *VantageReport `protobuf:"bytes,6,opt,name=vantage,proto3" json:"vantage,omitempty"`
	// contains filtered or unexported fields
}

type EndpointCheckResult struct {
	Checks []*EndpointCheck `protobuf:"bytes,1,rep,name=checks,proto3" json:"checks,omitempty"`
	// contains filtered or unexported fields
}

type ErrorCode int32

type FanOut struct {
	Total     uint32 `protobuf:"varint,1,opt,name=total,proto3" json:"total,omitempty"`
	Succeeded uint32 `protobuf:"varint,2,opt,name=succeeded,proto3" json:"succeeded,omitempty"`
	Failed    uint32 `protobuf:"varint,3,opt,name=failed,proto3" json:"failed,omitempty"`
	Pending   uint32 `protobuf:"varint,4,opt,name=pending,proto3" json:"pending,omitempty"`
	// contains filtered or unexported fields
}

type ForwardAction int32

type ForwardApplyResult struct {

	// backend is the runtime backend: gost, nftables_ansible,
	// iptables_ansible or clean_agent.
	Backend string `protobuf:"bytes,1,opt,name=backend,proto3" json:"backend,omitempty"`
	// runtime_status is the forward's runtime status as the kernel records
	// it (pending, running, success, failed).
	RuntimeStatus int32  `protobuf:"varint,2,opt,name=runtime_status,json=runtimeStatus,proto3" json:"runtime_status,omitempty"`
	Message       string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	// runtime_job_id is the v2_forward_runtime_job row of the change.
	RuntimeJobId   uint64 `protobuf:"varint,4,opt,name=runtime_job_id,json=runtimeJobId,proto3" json:"runtime_job_id,omitempty"`
	SyncedAtUnixMs int64  `protobuf:"varint,5,opt,name=synced_at_unix_ms,json=syncedAtUnixMs,proto3" json:"synced_at_unix_ms,omitempty"`
	// contains filtered or unexported fields
}

type ForwardBackendTestResult struct {
	Success      bool   `protobuf:"varint,1,opt,name=success,proto3" json:"success,omitempty"`
	Message      string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	ServiceCount int32  `protobuf:"varint,3,opt,name=service_count,json=serviceCount,proto3" json:"service_count,omitempty"`
	// contains filtered or unexported fields
}

type GetAgentMonitorRequest struct {
	NodeId uint64 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
	// contains filtered or unexported fields
}

type GetAgentMonitorResponse struct {
	Found            bool   `protobuf:"varint,1,opt,name=found,proto3" json:"found,omitempty"`
	SnapshotJson     []byte `protobuf:"bytes,2,opt,name=snapshot_json,json=snapshotJson,proto3" json:"snapshot_json,omitempty"`
	ReceivedAtUnixMs int64  `protobuf:"varint,3,opt,name=received_at_unix_ms,json=receivedAtUnixMs,proto3" json:"received_at_unix_ms,omitempty"`
	// monitor_json is the snapshot as the administrator's monitor route
	// (GET /api/v2/admin/agent/monitor) shows it, rendered by the kernel and
	// scrubbed like a result; empty when not found.
	MonitorJson []byte `protobuf:"bytes,4,opt,name=monitor_json,json=monitorJson,proto3" json:"monitor_json,omitempty"`
	// contains filtered or unexported fields
}

type GetAgentSessionRequest struct {
	NodeId uint64 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
	// contains filtered or unexported fields
}

type GetAgentSessionResponse struct {
	Connected bool               `protobuf:"varint,1,opt,name=connected,proto3" json:"connected,omitempty"`
	Session   *AgentSession      `protobuf:"bytes,2,opt,name=session,proto3" json:"session,omitempty"`
	Observed  *ObservedOperation `protobuf:"bytes,3,opt,name=observed,proto3" json:"observed,omitempty"`
	// connection_json and observed_state_json are the session and the last
	// observed state as the administrator's Agent Control status
	// (GET /api/v2/admin/nodes/:id/agent-control) shows them, rendered by the
	// kernel and scrubbed like a result; empty when there is none.
	ConnectionJson    []byte `protobuf:"bytes,4,opt,name=connection_json,json=connectionJson,proto3" json:"connection_json,omitempty"`
	ObservedStateJson []byte `protobuf:"bytes,5,opt,name=observed_state_json,json=observedStateJson,proto3" json:"observed_state_json,omitempty"`
	// contains filtered or unexported fields
}

type GetCapabilitiesRequest struct {
	// contains filtered or unexported fields
}

type GetCapabilitiesResponse struct {
	GrantedFamilies []OperationFamily `` /* 160-byte string literal not displayed */
	// kinds are the operation kinds this kernel serves.
	Kinds  []string           `protobuf:"bytes,2,rep,name=kinds,proto3" json:"kinds,omitempty"`
	Tables []*TableSplitState `protobuf:"bytes,3,rep,name=tables,proto3" json:"tables,omitempty"`
	// contains filtered or unexported fields
}

type GetOperationRequest struct {

	// Types that are valid to be assigned to Selector:
	//
	//	*GetOperationRequest_OperationId
	//	*GetOperationRequest_RequestId
	Selector isGetOperationRequest_Selector `protobuf_oneof:"selector"`
	// contains filtered or unexported fields
}

type GetOperationRequest_OperationId struct {
	OperationId string `protobuf:"bytes,1,opt,name=operation_id,json=operationId,proto3,oneof"`
}

type GetOperationRequest_RequestId struct {
	RequestId string `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3,oneof"`
}

type GetOperationResponse struct {
	Operation *Operation `protobuf:"bytes,1,opt,name=operation,proto3" json:"operation,omitempty"`
	// contains filtered or unexported fields
}

type IssueCleanAgent struct {
	Name          string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	ForwardNodeId uint64 `protobuf:"varint,2,opt,name=forward_node_id,json=forwardNodeId,proto3" json:"forward_node_id,omitempty"`
	// contains filtered or unexported fields
}

type IssueCredential struct {
	Subject *NodeRef       `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	Kind    CredentialKind `protobuf:"varint,2,opt,name=kind,proto3,enum=anixops.kernelnodeops.v1.CredentialKind" json:"kind,omitempty"`
	Value   *SecretRef     `protobuf:"bytes,3,opt,name=value,proto3" json:"value,omitempty"`
	// replace allows replacing an existing credential (a rotation); without
	// it an existing credential is FAILED_PRECONDITION.
	Replace bool `protobuf:"varint,4,opt,name=replace,proto3" json:"replace,omitempty"`
	// contains filtered or unexported fields
}

type IssueRegistrationKey struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// expires_at_unix ends the key; 0 never.
	ExpiresAtUnix int64 `protobuf:"varint,2,opt,name=expires_at_unix,json=expiresAtUnix,proto3" json:"expires_at_unix,omitempty"`
	// contains filtered or unexported fields
}

type KernelNodeOpsClient interface {
	// SubmitOperation records and starts one operation. A request_id seen
	// before answers the first receipt with applied false; the same id with a
	// different operation is FAILED_PRECONDITION. INVALID_ARGUMENT for a
	// malformed operation, NOT_FOUND when its target does not exist (nothing
	// is recorded), PERMISSION_DENIED without the family's capability, for a
	// target of a kind the operation does not take, or from a fenced package
	// generation, UNIMPLEMENTED for a kind this kernel does not execute
	// (nothing is recorded; GetCapabilities lists the kinds it does), and
	// RESOURCE_EXHAUSTED beyond the package's or a node's quota of operations
	// that have not ended.
	SubmitOperation(ctx context.Context, in *SubmitOperationRequest, opts ...grpc.CallOption) (*SubmitOperationResponse, error)
	// GetOperation answers one operation by operation_id or request_id.
	GetOperation(ctx context.Context, in *GetOperationRequest, opts ...grpc.CallOption) (*GetOperationResponse, error)
	// ListOperations pages through the caller's operations, newest first.
	ListOperations(ctx context.Context, in *ListOperationsRequest, opts ...grpc.CallOption) (*ListOperationsResponse, error)
	// WatchOperations streams every change of the caller's operations after a
	// cursor. A client resumes from the last cursor it saw and lists again
	// when told its cursor is too old (RESYNC).
	WatchOperations(ctx context.Context, in *WatchOperationsRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[OperationEvent], error)
	// CancelOperation asks the kernel to stop an operation that has not
	// ended. A dispatched operation is cancelled on its channel when the
	// channel supports it; the operation then ends CANCELLED, or with the
	// outcome its channel reports first. Cancelling an ended operation
	// answers it unchanged.
	CancelOperation(ctx context.Context, in *CancelOperationRequest, opts ...grpc.CallOption) (*CancelOperationResponse, error)
	// ValidateNodeConfig runs the kernel's node configuration validators (the
	// raw configuration and protocol validators the kernel also runs before it
	// builds any node's configuration) and answers their verdict. It stores
	// nothing.
	ValidateNodeConfig(ctx context.Context, in *ValidateNodeConfigRequest, opts ...grpc.CallOption) (*ValidateNodeConfigResponse, error)
	// ListAgentSessions answers the live agent sessions the kernel holds (the
	// Agent Control streams and the agent WebSockets).
	ListAgentSessions(ctx context.Context, in *ListAgentSessionsRequest, opts ...grpc.CallOption) (*ListAgentSessionsResponse, error)
	// GetAgentSession answers one node's Agent Control session and the last
	// state it observed.
	GetAgentSession(ctx context.Context, in *GetAgentSessionRequest, opts ...grpc.CallOption) (*GetAgentSessionResponse, error)
	// GetAgentMonitor answers the last monitoring snapshot an agent reported.
	GetAgentMonitor(ctx context.Context, in *GetAgentMonitorRequest, opts ...grpc.CallOption) (*GetAgentMonitorResponse, error)
	// GetCapabilities tells a package which operation families it holds,
	// which operation kinds this kernel serves, and how far the node
	// credential split has gone, so the package can keep a route legacy
	// (mode_unsupported) where the kernel cannot serve it yet.
	GetCapabilities(ctx context.Context, in *GetCapabilitiesRequest, opts ...grpc.CallOption) (*GetCapabilitiesResponse, error)
}

type KernelNodeOpsServer interface {
	// SubmitOperation records and starts one operation. A request_id seen
	// before answers the first receipt with applied false; the same id with a
	// different operation is FAILED_PRECONDITION. INVALID_ARGUMENT for a
	// malformed operation, NOT_FOUND when its target does not exist (nothing
	// is recorded), PERMISSION_DENIED without the family's capability, for a
	// target of a kind the operation does not take, or from a fenced package
	// generation, UNIMPLEMENTED for a kind this kernel does not execute
	// (nothing is recorded; GetCapabilities lists the kinds it does), and
	// RESOURCE_EXHAUSTED beyond the package's or a node's quota of operations
	// that have not ended.
	SubmitOperation(context.Context, *SubmitOperationRequest) (*SubmitOperationResponse, error)
	// GetOperation answers one operation by operation_id or request_id.
	GetOperation(context.Context, *GetOperationRequest) (*GetOperationResponse, error)
	// ListOperations pages through the caller's operations, newest first.
	ListOperations(context.Context, *ListOperationsRequest) (*ListOperationsResponse, error)
	// WatchOperations streams every change of the caller's operations after a
	// cursor. A client resumes from the last cursor it saw and lists again
	// when told its cursor is too old (RESYNC).
	WatchOperations(*WatchOperationsRequest, grpc.ServerStreamingServer[OperationEvent]) error
	// CancelOperation asks the kernel to stop an operation that has not
	// ended. A dispatched operation is cancelled on its channel when the
	// channel supports it; the operation then ends CANCELLED, or with the
	// outcome its channel reports first. Cancelling an ended operation
	// answers it unchanged.
	CancelOperation(context.Context, *CancelOperationRequest) (*CancelOperationResponse, error)
	// ValidateNodeConfig runs the kernel's node configuration validators (the
	// raw configuration and protocol validators the kernel also runs before it
	// builds any node's configuration) and answers their verdict. It stores
	// nothing.
	ValidateNodeConfig(context.Context, *ValidateNodeConfigRequest) (*ValidateNodeConfigResponse, error)
	// ListAgentSessions answers the live agent sessions the kernel holds (the
	// Agent Control streams and the agent WebSockets).
	ListAgentSessions(context.Context, *ListAgentSessionsRequest) (*ListAgentSessionsResponse, error)
	// GetAgentSession answers one node's Agent Control session and the last
	// state it observed.
	GetAgentSession(context.Context, *GetAgentSessionRequest) (*GetAgentSessionResponse, error)
	// GetAgentMonitor answers the last monitoring snapshot an agent reported.
	GetAgentMonitor(context.Context, *GetAgentMonitorRequest) (*GetAgentMonitorResponse, error)
	// GetCapabilities tells a package which operation families it holds,
	// which operation kinds this kernel serves, and how far the node
	// credential split has gone, so the package can keep a route legacy
	// (mode_unsupported) where the kernel cannot serve it yet.
	GetCapabilities(context.Context, *GetCapabilitiesRequest) (*GetCapabilitiesResponse, error)
	// contains filtered or unexported methods
}

type KernelNodeOps_WatchOperationsClient = grpc.ServerStreamingClient[OperationEvent]

type KernelNodeOps_WatchOperationsServer = grpc.ServerStreamingServer[OperationEvent]

type LegacyRuleResult struct {
	AppliedOnRelay bool   `protobuf:"varint,1,opt,name=applied_on_relay,json=appliedOnRelay,proto3" json:"applied_on_relay,omitempty"`
	AppliedOnExit  bool   `protobuf:"varint,2,opt,name=applied_on_exit,json=appliedOnExit,proto3" json:"applied_on_exit,omitempty"`
	Message        string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type ListAgentSessionsRequest struct {
	Transport AgentTransport `protobuf:"varint,1,opt,name=transport,proto3,enum=anixops.kernelnodeops.v1.AgentTransport" json:"transport,omitempty"`
	// contains filtered or unexported fields
}

type ListAgentSessionsResponse struct {
	Sessions []*AgentSession `protobuf:"bytes,1,rep,name=sessions,proto3" json:"sessions,omitempty"`
	// contains filtered or unexported fields
}

type ListOperationsRequest struct {
	Families []OperationFamily `protobuf:"varint,1,rep,packed,name=families,proto3,enum=anixops.kernelnodeops.v1.OperationFamily" json:"families,omitempty"`
	States   []OperationState  `protobuf:"varint,2,rep,packed,name=states,proto3,enum=anixops.kernelnodeops.v1.OperationState" json:"states,omitempty"`
	// target limits the list to operations on one node.
	Target    *NodeRef `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	PageToken string   `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	Limit     uint32   `protobuf:"varint,5,opt,name=limit,proto3" json:"limit,omitempty"`
	// contains filtered or unexported fields
}

type ListOperationsResponse struct {
	Operations    []*Operation `protobuf:"bytes,1,rep,name=operations,proto3" json:"operations,omitempty"`
	NextPageToken string       `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type NodeConfigKind int32

type NodeKind int32

type NodeRef struct {
	Kind NodeKind `protobuf:"varint,1,opt,name=kind,proto3,enum=anixops.kernelnodeops.v1.NodeKind" json:"kind,omitempty"`
	Id   uint64   `protobuf:"varint,2,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type NodeStatsResult struct {
	Node              *NodeRef `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
	UploadBytes       uint64   `protobuf:"varint,2,opt,name=upload_bytes,json=uploadBytes,proto3" json:"upload_bytes,omitempty"`
	DownloadBytes     uint64   `protobuf:"varint,3,opt,name=download_bytes,json=downloadBytes,proto3" json:"download_bytes,omitempty"`
	CollectedAtUnixMs int64    `protobuf:"varint,4,opt,name=collected_at_unix_ms,json=collectedAtUnixMs,proto3" json:"collected_at_unix_ms,omitempty"`
	// services are a gost node's services, by name.
	Services []*ServiceTraffic `protobuf:"bytes,5,rep,name=services,proto3" json:"services,omitempty"`
	// current_connections is an Ansible machine's connection counter.
	CurrentConnections int64 `protobuf:"varint,6,opt,name=current_connections,json=currentConnections,proto3" json:"current_connections,omitempty"`
	// contains filtered or unexported fields
}

type NodeSyncResult struct {

	// channel is AGENT_CONTROL or LEGACY_PULL.
	Channel          Channel   `protobuf:"varint,1,opt,name=channel,proto3,enum=anixops.kernelnodeops.v1.Channel" json:"channel,omitempty"`
	AgentOperationId string    `protobuf:"bytes,2,opt,name=agent_operation_id,json=agentOperationId,proto3" json:"agent_operation_id,omitempty"`
	Revision         uint64    `protobuf:"varint,3,opt,name=revision,proto3" json:"revision,omitempty"`
	Ack              *AgentAck `protobuf:"bytes,4,opt,name=ack,proto3" json:"ack,omitempty"`
	// config_hash is the SHA-256 of the desired configuration.
	ConfigHash string `protobuf:"bytes,5,opt,name=config_hash,json=configHash,proto3" json:"config_hash,omitempty"`
	// changed is false when the configuration was already the node's.
	Changed bool `protobuf:"varint,6,opt,name=changed,proto3" json:"changed,omitempty"`
	// excluded counts the protocols left out because they failed validation.
	ExcludedProtocols uint32 `protobuf:"varint,7,opt,name=excluded_protocols,json=excludedProtocols,proto3" json:"excluded_protocols,omitempty"`
	// config_revision is the desired configuration's revision
	// (v4_kernel_node_desired_config): it grows when config_hash changes.
	ConfigRevision uint64 `protobuf:"varint,8,opt,name=config_revision,json=configRevision,proto3" json:"config_revision,omitempty"`
	// snapshot is true when the configuration went out as a ConfigSnapshot
	// (the agent negotiated config.v1): ack is then its ConfigStatus, and
	// agent_operation_id is empty. Otherwise a pushed sync is a node.reload.
	Snapshot bool `protobuf:"varint,9,opt,name=snapshot,proto3" json:"snapshot,omitempty"`
	// contains filtered or unexported fields
}

type ObservedOperation struct {
	AgentOperationId string `protobuf:"bytes,1,opt,name=agent_operation_id,json=agentOperationId,proto3" json:"agent_operation_id,omitempty"`
	Revision         uint64 `protobuf:"varint,2,opt,name=revision,proto3" json:"revision,omitempty"`
	// phase is the agent's observed phase name, for example "SUCCEEDED".
	Phase            string `protobuf:"bytes,3,opt,name=phase,proto3" json:"phase,omitempty"`
	Message          string `protobuf:"bytes,4,opt,name=message,proto3" json:"message,omitempty"`
	StateJson        []byte `protobuf:"bytes,5,opt,name=state_json,json=stateJson,proto3" json:"state_json,omitempty"`
	ObservedAtUnixMs int64  `protobuf:"varint,6,opt,name=observed_at_unix_ms,json=observedAtUnixMs,proto3" json:"observed_at_unix_ms,omitempty"`
	SessionId        string `protobuf:"bytes,7,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// contains filtered or unexported fields
}

type Operation struct {
	OperationId string `protobuf:"bytes,1,opt,name=operation_id,json=operationId,proto3" json:"operation_id,omitempty"`
	RequestId   string `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	PackageId   string `protobuf:"bytes,3,opt,name=package_id,json=packageId,proto3" json:"package_id,omitempty"`
	// package_generation is the lifecycle generation that submitted it.
	PackageGeneration uint64          `protobuf:"varint,4,opt,name=package_generation,json=packageGeneration,proto3" json:"package_generation,omitempty"`
	Family            OperationFamily `protobuf:"varint,5,opt,name=family,proto3,enum=anixops.kernelnodeops.v1.OperationFamily" json:"family,omitempty"`
	// kind is the operation's stable name, for example "forward.apply" or
	// "node.sync".
	Kind             string         `protobuf:"bytes,6,opt,name=kind,proto3" json:"kind,omitempty"`
	Targets          []*NodeRef     `protobuf:"bytes,7,rep,name=targets,proto3" json:"targets,omitempty"`
	State            OperationState `protobuf:"varint,8,opt,name=state,proto3,enum=anixops.kernelnodeops.v1.OperationState" json:"state,omitempty"`
	Channel          Channel        `protobuf:"varint,9,opt,name=channel,proto3,enum=anixops.kernelnodeops.v1.Channel" json:"channel,omitempty"`
	Attempt          uint32         `protobuf:"varint,10,opt,name=attempt,proto3" json:"attempt,omitempty"`
	CreatedAtUnixMs  int64          `protobuf:"varint,11,opt,name=created_at_unix_ms,json=createdAtUnixMs,proto3" json:"created_at_unix_ms,omitempty"`
	AcceptedAtUnixMs int64          `protobuf:"varint,12,opt,name=accepted_at_unix_ms,json=acceptedAtUnixMs,proto3" json:"accepted_at_unix_ms,omitempty"`
	FinishedAtUnixMs int64          `protobuf:"varint,13,opt,name=finished_at_unix_ms,json=finishedAtUnixMs,proto3" json:"finished_at_unix_ms,omitempty"`
	DeadlineUnixMs   int64          `protobuf:"varint,14,opt,name=deadline_unix_ms,json=deadlineUnixMs,proto3" json:"deadline_unix_ms,omitempty"`
	// node_revision is the node's desired revision the operation was
	// dispatched at, on revisioned channels.
	NodeRevision uint64 `protobuf:"varint,15,opt,name=node_revision,json=nodeRevision,proto3" json:"node_revision,omitempty"`
	// parent_operation_id is set on the operations a fan-out created.
	ParentOperationId string  `protobuf:"bytes,16,opt,name=parent_operation_id,json=parentOperationId,proto3" json:"parent_operation_id,omitempty"`
	FanOut            *FanOut `protobuf:"bytes,17,opt,name=fan_out,json=fanOut,proto3" json:"fan_out,omitempty"`
	// result is the operation's outcome. A running operation may carry the
	// result so far, recorded when the channel accepted it (for example the
	// agent's acknowledgement, which an ACCEPTED wait answers); the outcome
	// replaces it.
	Result *OperationResult `protobuf:"bytes,18,opt,name=result,proto3" json:"result,omitempty"`
	Error  *OperationError  `protobuf:"bytes,19,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}