grantv1

type CapacityGrant struct {
	GrantUid string `protobuf:"bytes,1,opt,name=grant_uid,json=grantUid,proto3" json:"grant_uid,omitempty"`
	// OIDC issuer URL of the issuing home. Verifiers discover the JWKS here.
	Issuer string `protobuf:"bytes,2,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// Target environment id: the home that may exercise this grant.
	Audience string `protobuf:"bytes,3,opt,name=audience,proto3" json:"audience,omitempty"`
	// OCI digest of the zygote artifact, or of the template image.
	TemplateDigest string `protobuf:"bytes,4,opt,name=template_digest,json=templateDigest,proto3" json:"template_digest,omitempty"`
	// The issuer's tenant the grant belongs to (a Kubernetes namespace, a
	// Slurm account). A named session is filed under its tenant when it is
	// parked, so another tenant's grant on the same template never finds
	// it. A grant without a tenant runs anonymous fibers only: a named
	// Clone or Park under it fails with FailedPrecondition.
	Tenant string       `protobuf:"bytes,11,opt,name=tenant,proto3" json:"tenant,omitempty"`
	Fibers *FiberLimits `protobuf:"bytes,5,opt,name=fibers,proto3" json:"fibers,omitempty"`
	// Maximum dirtied working set per fiber, in bytes. Enforced as the
	// fiber's cgroup memory.max; also the mobility budget for deltas.
	WBudgetBytes uint64                 `protobuf:"varint,6,opt,name=w_budget_bytes,json=wBudgetBytes,proto3" json:"w_budget_bytes,omitempty"`
	MinTier      Tier                   `protobuf:"varint,7,opt,name=min_tier,json=minTier,proto3,enum=fiberd.grant.v1.Tier" json:"min_tier,omitempty"`
	LeaseExpiry  *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=lease_expiry,json=leaseExpiry,proto3" json:"lease_expiry,omitempty"`
	Policy       *Policy                `protobuf:"bytes,9,opt,name=policy,proto3" json:"policy,omitempty"`
	// Absent or zero bytes: the grant needs no device.
	DeviceBudget *DeviceBudget `protobuf:"bytes,10,opt,name=device_budget,json=deviceBudget,proto3" json:"device_budget,omitempty"`
	// Per-fiber workspace ceiling in bytes. Each fiber gets a private
	// workspace at /workspace that Upload, Download and ListFiles reach.
	// Zero means no workspace, and every file call on the grant's fibers
	// fails with FailedPrecondition and a NoWorkspace detail. A home whose
	// runtime offers no workspace refuses a grant that sets it, with
	// FailedPrecondition.
	DiskBudgetBytes uint64 `protobuf:"varint,12,opt,name=disk_budget_bytes,json=diskBudgetBytes,proto3" json:"disk_budget_bytes,omitempty"`
	// contains filtered or unexported fields
}

type CloneKind int32

type CloneRequest struct {
	GrantJwt string `protobuf:"bytes,1,opt,name=grant_jwt,json=grantJwt,proto3" json:"grant_jwt,omitempty"`
	// Optional stable identity. Empty means an anonymous, fungible fiber.
	Session string `protobuf:"bytes,2,opt,name=session,proto3" json:"session,omitempty"`
	// Hard budget for the runtime work; exceeding it is a miss, not a late fiber.
	Deadline *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=deadline,proto3" json:"deadline,omitempty"`
	// Opaque, size-capped (4096 bytes), delivered as data, never config.
	Payload []byte `protobuf:"bytes,4,opt,name=payload,proto3" json:"payload,omitempty"`
	// contains filtered or unexported fields
}

type CloneResponse struct {
	FiberId  string    `protobuf:"bytes,1,opt,name=fiber_id,json=fiberId,proto3" json:"fiber_id,omitempty"`
	Endpoint string    `protobuf:"bytes,2,opt,name=endpoint,proto3" json:"endpoint,omitempty"`
	Fence    *Fence    `protobuf:"bytes,3,opt,name=fence,proto3" json:"fence,omitempty"`
	Kind     CloneKind `protobuf:"varint,4,opt,name=kind,proto3,enum=fiberd.grant.v1.CloneKind" json:"kind,omitempty"`
	// Set when the grant's endpoint mode is HANDOFF. The caller opens TLS
	// to endpoint with server name "<routing_key>.fiberd", presents the
	// grant's client certificate, and accepts only the fiber's own
	// certificate. server_cert is that certificate as DER, for a TLS
	// library that pins a certificate during the handshake, and
	// server_key_sha256 is the hash (SHA-256, base64url) of its
	// SubjectPublicKeyInfo, for one that pins a key.
	RoutingKey      string `protobuf:"bytes,5,opt,name=routing_key,json=routingKey,proto3" json:"routing_key,omitempty"`
	ServerKeySha256 string `protobuf:"bytes,6,opt,name=server_key_sha256,json=serverKeySha256,proto3" json:"server_key_sha256,omitempty"`
	ServerCert      []byte `protobuf:"bytes,7,opt,name=server_cert,json=serverCert,proto3" json:"server_cert,omitempty"`
	// contains filtered or unexported fields
}

type DeviceBudget struct {
	Bytes uint64 `protobuf:"varint,1,opt,name=bytes,proto3" json:"bytes,omitempty"`
	// class names the device the budget is for ("gpu"; "sim" is the
	// reference workload's simulated engine). Empty means any.
	Class string `protobuf:"bytes,2,opt,name=class,proto3" json:"class,omitempty"`
	// contains filtered or unexported fields
}

type DiscardRequest struct {
	GrantJwt string `protobuf:"bytes,1,opt,name=grant_jwt,json=grantJwt,proto3" json:"grant_jwt,omitempty"`
	Session  string `protobuf:"bytes,2,opt,name=session,proto3" json:"session,omitempty"`
	// contains filtered or unexported fields
}

type DownloadRequest struct {
	FiberId string `protobuf:"bytes,1,opt,name=fiber_id,json=fiberId,proto3" json:"fiber_id,omitempty"`
	// The file's path, relative to the fiber's /workspace.
	Path string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	// Where to start reading, in bytes.
	Offset uint64 `protobuf:"varint,3,opt,name=offset,proto3" json:"offset,omitempty"`
	// contains filtered or unexported fields
}

type Durability int32

type EndpointMode int32

type Fence struct {
	GrantUid string `protobuf:"bytes,1,opt,name=grant_uid,json=grantUid,proto3" json:"grant_uid,omitempty"`
	Epoch    uint64 `protobuf:"varint,2,opt,name=epoch,proto3" json:"epoch,omitempty"`
	Seq      uint64 `protobuf:"varint,3,opt,name=seq,proto3" json:"seq,omitempty"`
	// contains filtered or unexported fields
}

type FiberLimits struct {
	Max  uint32 `protobuf:"varint,1,opt,name=max,proto3" json:"max,omitempty"`
	Warm uint32 `protobuf:"varint,2,opt,name=warm,proto3" json:"warm,omitempty"`
	// contains filtered or unexported fields
}

type FibersClient interface {
	// Clone resolves a session to attach, resume or create. Every miss
	// carries a Miss detail: ResourceExhausted for SHED, Unavailable for
	// DEFERRED_FALLBACK. FailedPrecondition when min_tier exceeds the
	// home's tier, a parked session needs a tier the home lacks, or an
	// untrusted grant reaches a home that does not isolate tenants.
	// Unauthenticated when the grant is refused, with a WrongHome detail
	// when it is not for this home.
	Clone(ctx context.Context, in *CloneRequest, opts ...grpc.CallOption) (*CloneResponse, error)
	// Park checkpoints a named session's fiber. A fiber without a session
	// is refused with InvalidArgument, since nothing could resume it, so
	// release it instead.
	Park(ctx context.Context, in *ParkRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	Release(ctx context.Context, in *ReleaseRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Discard deletes a parked session's delta by name, here and in the
	// delta registry, and the session is forgotten. The next Clone of it
	// creates. A running session is refused with InvalidArgument, so
	// release its fiber with discard instead. A session neither parked
	// here nor in the registry is NotFound. Unauthenticated when the grant
	// is refused, with a WrongHome detail when it is not for this home.
	Discard(ctx context.Context, in *DiscardRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	Watch(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (grpc.ServerStreamingClient[Status], error)
	// Upload writes one file into a running fiber's workspace. The first
	// message is the header. Each file call is authorized like Park, so
	// another caller's fiber answers NotFound.
	Upload(ctx context.Context, opts ...grpc.CallOption) (grpc.ClientStreamingClient[UploadRequest, FileInfo], error)
	// Download reads one regular file from a running fiber's workspace.
	// The first chunk carries its FileInfo.
	Download(ctx context.Context, in *DownloadRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[FileChunk], error)
	// ListFiles lists one directory of a running fiber's workspace.
	ListFiles(ctx context.Context, in *ListFilesRequest, opts ...grpc.CallOption) (*ListFilesResponse, error)
}

type FibersServer interface {
	// Clone resolves a session to attach, resume or create. Every miss
	// carries a Miss detail: ResourceExhausted for SHED, Unavailable for
	// DEFERRED_FALLBACK. FailedPrecondition when min_tier exceeds the
	// home's tier, a parked session needs a tier the home lacks, or an
	// untrusted grant reaches a home that does not isolate tenants.
	// Unauthenticated when the grant is refused, with a WrongHome detail
	// when it is not for this home.
	Clone(context.Context, *CloneRequest) (*CloneResponse, error)
	// Park checkpoints a named session's fiber. A fiber without a session
	// is refused with InvalidArgument, since nothing could resume it, so
	// release it instead.
	Park(context.Context, *ParkRequest) (*emptypb.Empty, error)
	Release(context.Context, *ReleaseRequest) (*emptypb.Empty, error)
	// Discard deletes a parked session's delta by name, here and in the
	// delta registry, and the session is forgotten. The next Clone of it
	// creates. A running session is refused with InvalidArgument, so
	// release its fiber with discard instead. A session neither parked
	// here nor in the registry is NotFound. Unauthenticated when the grant
	// is refused, with a WrongHome detail when it is not for this home.
	Discard(context.Context, *DiscardRequest) (*emptypb.Empty, error)
	Watch(*emptypb.Empty, grpc.ServerStreamingServer[Status]) error
	// Upload writes one file into a running fiber's workspace. The first
	// message is the header. Each file call is authorized like Park, so
	// another caller's fiber answers NotFound.
	Upload(grpc.ClientStreamingServer[UploadRequest, FileInfo]) error
	// Download reads one regular file from a running fiber's workspace.
	// The first chunk carries its FileInfo.
	Download(*DownloadRequest, grpc.ServerStreamingServer[FileChunk]) error
	// ListFiles lists one directory of a running fiber's workspace.
	ListFiles(context.Context, *ListFilesRequest) (*ListFilesResponse, error)
	// contains filtered or unexported methods
}

type Fibers_DownloadClient = grpc.ServerStreamingClient[FileChunk]

type Fibers_DownloadServer = grpc.ServerStreamingServer[FileChunk]

type Fibers_UploadClient = grpc.ClientStreamingClient[UploadRequest, FileInfo]

type Fibers_UploadServer = grpc.ClientStreamingServer[UploadRequest, FileInfo]

type Fibers_WatchClient = grpc.ServerStreamingClient[Status]

type Fibers_WatchServer = grpc.ServerStreamingServer[Status]

type FileChunk struct {
	Info *FileInfo `protobuf:"bytes,1,opt,name=info,proto3" json:"info,omitempty"`
	Data []byte    `protobuf:"bytes,2,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type FileInfo struct {

	// Relative to the fiber's /workspace.
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	Size uint64 `protobuf:"varint,2,opt,name=size,proto3" json:"size,omitempty"`
	// The permission bits.
	Mode      uint32 `protobuf:"varint,3,opt,name=mode,proto3" json:"mode,omitempty"`
	Directory bool   `protobuf:"varint,4,opt,name=directory,proto3" json:"directory,omitempty"`
	// SHA-256 of the content. Set in Upload's reply only.
	Sha256 []byte `protobuf:"bytes,5,opt,name=sha256,proto3" json:"sha256,omitempty"`
	// contains filtered or unexported fields
}

type Isolation int32

type ListFilesRequest struct {
	FiberId string `protobuf:"bytes,1,opt,name=fiber_id,json=fiberId,proto3" json:"fiber_id,omitempty"`
	// The directory to list, relative to the fiber's /workspace. Empty is
	// the workspace itself.
	Dir string `protobuf:"bytes,2,opt,name=dir,proto3" json:"dir,omitempty"`
	// contains filtered or unexported fields
}

type ListFilesResponse struct {

	// The directory's entries, not recursive.
	Files []*FileInfo `protobuf:"bytes,1,rep,name=files,proto3" json:"files,omitempty"`
	// contains filtered or unexported fields
}

type Miss struct {
	Code        MissCode `protobuf:"varint,1,opt,name=code,proto3,enum=fiberd.grant.v1.MissCode" json:"code,omitempty"`
	RetryAfterS uint32   `protobuf:"varint,2,opt,name=retry_after_s,json=retryAfterS,proto3" json:"retry_after_s,omitempty"`
	Issuer      string   `protobuf:"bytes,3,opt,name=issuer,proto3" json:"issuer,omitempty"`
	// For DEFERRED_FALLBACK: the home that holds the session's parked
	// state, when known.
	PreferredHome string `protobuf:"bytes,4,opt,name=preferred_home,json=preferredHome,proto3" json:"preferred_home,omitempty"`
	// contains filtered or unexported fields
}

type MissCode int32

type NoWorkspace struct {
	// contains filtered or unexported fields
}

type ParkRequest struct {
	FiberId string `protobuf:"bytes,1,opt,name=fiber_id,json=fiberId,proto3" json:"fiber_id,omitempty"`
	// sync: checkpoint completes before the reply; the fiber keeps running
	// until the delta is durable.
	Sync bool `protobuf:"varint,2,opt,name=sync,proto3" json:"sync,omitempty"`
	// contains filtered or unexported fields
}

type Policy struct {
	Durability   Durability `protobuf:"varint,1,opt,name=durability,proto3,enum=fiberd.grant.v1.Durability" json:"durability,omitempty"`
	SessionClass string     `protobuf:"bytes,2,opt,name=session_class,json=sessionClass,proto3" json:"session_class,omitempty"`
	AuditClass   string     `protobuf:"bytes,3,opt,name=audit_class,json=auditClass,proto3" json:"audit_class,omitempty"`
	// PSI memory "some avg10" watermarks on the grant's cgroup, in percent.
	// The home sets them below its own eviction threshold so park fires first.
	PsiSomeAvg10Shed float32      `protobuf:"fixed32,4,opt,name=psi_some_avg10_shed,json=psiSomeAvg10Shed,proto3" json:"psi_some_avg10_shed,omitempty"`
	PsiSomeAvg10Park float32      `protobuf:"fixed32,5,opt,name=psi_some_avg10_park,json=psiSomeAvg10Park,proto3" json:"psi_some_avg10_park,omitempty"`
	Isolation        Isolation    `protobuf:"varint,6,opt,name=isolation,proto3,enum=fiberd.grant.v1.Isolation" json:"isolation,omitempty"`
	EndpointMode     EndpointMode `` /* 132-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ReleaseRequest struct {
	FiberId string `protobuf:"bytes,1,opt,name=fiber_id,json=fiberId,proto3" json:"fiber_id,omitempty"`
	// discard: also delete any parked delta for the fiber's session.
	Discard bool `protobuf:"varint,2,opt,name=discard,proto3" json:"discard,omitempty"`
	// contains filtered or unexported fields
}

type Status struct {
	GrantUid   string `protobuf:"bytes,1,opt,name=grant_uid,json=grantUid,proto3" json:"grant_uid,omitempty"`
	Running    uint32 `protobuf:"varint,2,opt,name=running,proto3" json:"running,omitempty"`
	Parked     uint32 `protobuf:"varint,3,opt,name=parked,proto3" json:"parked,omitempty"`
	WUsedBytes uint64 `protobuf:"varint,4,opt,name=w_used_bytes,json=wUsedBytes,proto3" json:"w_used_bytes,omitempty"`
	Latest     *Fence `protobuf:"bytes,5,opt,name=latest,proto3" json:"latest,omitempty"`
	// pooled counts sandboxes restored ahead of a clone. They are inside
	// fibers.max and not in running.
	Pooled uint32 `protobuf:"varint,6,opt,name=pooled,proto3" json:"pooled,omitempty"`
	// contains filtered or unexported fields
}

type Tier int32

type UnimplementedFibersServer struct{}

type UnsafeFibersServer interface {
	// contains filtered or unexported methods
}

type UploadHeader struct {
	FiberId string `protobuf:"bytes,1,opt,name=fiber_id,json=fiberId,proto3" json:"fiber_id,omitempty"`
	// The file's path, relative to the fiber's /workspace.
	Path string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	// The file's size in bytes, declared up front so the budget is
	// reserved before any byte lands. The data chunks add up to it
	// exactly. It must be set, and zero is an empty file.
	Size *uint64 `protobuf:"varint,3,opt,name=size,proto3,oneof" json:"size,omitempty"`
	// The file's permission bits. Zero means 0644.
	Mode uint32 `protobuf:"varint,4,opt,name=mode,proto3" json:"mode,omitempty"`
	// Optional SHA-256 of the content, checked before the file appears.
	Sha256 []byte `protobuf:"bytes,5,opt,name=sha256,proto3" json:"sha256,omitempty"`
	// contains filtered or unexported fields
}

type UploadRequest struct {

	// Types that are valid to be assigned to Part:
	//
	//	*UploadRequest_Header
	//	*UploadRequest_Data
	Part isUploadRequest_Part `protobuf_oneof:"part"`
	// contains filtered or unexported fields
}

type UploadRequest_Data struct {
	Data []byte `protobuf:"bytes,2,opt,name=data,proto3,oneof"`
}

type UploadRequest_Header struct {
	Header *UploadHeader `protobuf:"bytes,1,opt,name=header,proto3,oneof"`
}

type WrongHome struct {
	Home string `protobuf:"bytes,1,opt,name=home,proto3" json:"home,omitempty"`
	// contains filtered or unexported fields
}