Versions in this module Expand all Collapse all v0 v0.0.26 Sep 3, 2026 Changes in this version + const EscalationAllowed + const MaxMessageBytes + const ProtocolVersion + var File_privilegedhelper_private_action_proto protoreflect.FileDescriptor + type Client struct + SocketPath string + Timeout time.Duration + func (c Client) Execute(ctx context.Context, req ExecuteRequest) (*ExecuteResponse, error) + func (c Client) ExecuteSignedTask(ctx context.Context, envelope SignedEnvelope) (*ExecuteResponse, error) + type ConnectionInfo struct + RunnerId string + func (*ConnectionInfo) Descriptor() ([]byte, []int) + func (*ConnectionInfo) ProtoMessage() + func (x *ConnectionInfo) GetRunnerId() string + func (x *ConnectionInfo) ProtoReflect() protoreflect.Message + func (x *ConnectionInfo) Reset() + func (x *ConnectionInfo) String() string + type Credential struct + AllowedCommands []string + AllowedPaths []string + DirectorRoot json.RawMessage + ElevatableCommands []string + Keys []CredentialKey + OrgID int64 + RunnerID string + Version int + func LoadCredential(path string) (*Credential, error) + func NewRequestCredential(keys []CredentialKey) (*Credential, error) + func (c *Credential) Verify(req ExecuteRequest, now time.Time) (*VerifiedCommand, error) + type CredentialKey struct + ID string + PEM string + Type KeyType + type DirectorKeyProof struct + Roots [][]byte + TargetFile []byte + TargetPath string + Targets []byte + type ExecuteRequest struct + Envelope SignedEnvelope + VerificationKeys []CredentialKey + Version int + func NewExecuteRequest(envelope SignedEnvelope) ExecuteRequest + type ExecuteResponse struct + Error string + ExitCode int + SandboxWarnings []string + Stderr string + Stdout string + Version int + type ExecutionMode string + const ExecutionModeReadOnly + const ExecutionModeRemediation + type Executor interface + Execute func(context.Context, *VerifiedCommand) (*ExecuteResponse, error) + type KeyType string + const KeyTypeED25519 + const KeyTypeTUFDirector + const KeyTypeX509RSA + type PrivateActionTask struct + ActionName string + BundleId string + ConnectionInfo *ConnectionInfo + ExpirationTime *timestamppb.Timestamp + Inputs *structpb.Struct + OrgId int64 + SystemInputs *SystemInputs + TaskId string + func (*PrivateActionTask) Descriptor() ([]byte, []int) + func (*PrivateActionTask) ProtoMessage() + func (x *PrivateActionTask) GetActionName() string + func (x *PrivateActionTask) GetBundleId() string + func (x *PrivateActionTask) GetConnectionInfo() *ConnectionInfo + func (x *PrivateActionTask) GetExpirationTime() *timestamppb.Timestamp + func (x *PrivateActionTask) GetInputs() *structpb.Struct + func (x *PrivateActionTask) GetOrgId() int64 + func (x *PrivateActionTask) GetSystemInputs() *SystemInputs + func (x *PrivateActionTask) GetTaskId() string + func (x *PrivateActionTask) ProtoReflect() protoreflect.Message + func (x *PrivateActionTask) Reset() + func (x *PrivateActionTask) String() string + type RemoteAction struct + AllowedCommands []string + AllowedPaths []string + func (*RemoteAction) Descriptor() ([]byte, []int) + func (*RemoteAction) ProtoMessage() + func (x *RemoteAction) GetAllowedCommands() []string + func (x *RemoteAction) GetAllowedPaths() []string + func (x *RemoteAction) ProtoReflect() protoreflect.Message + func (x *RemoteAction) Reset() + func (x *RemoteAction) String() string + type Server struct + Credential *Credential + Executor Executor + IdleTimeout time.Duration + LogWriter io.Writer + Now func() time.Time + func (s *Server) Serve(ctx context.Context, listener net.Listener) error + type Signature struct + KeyID string + KeyType KeyType + Signature []byte + type SignedEnvelope struct + Data []byte + HashType string + Signatures []Signature + type SystemInputs struct + Input isSystemInputs_Input + func (*SystemInputs) Descriptor() ([]byte, []int) + func (*SystemInputs) ProtoMessage() + func (x *SystemInputs) GetInput() isSystemInputs_Input + func (x *SystemInputs) GetRemoteAction() *RemoteAction + func (x *SystemInputs) ProtoReflect() protoreflect.Message + func (x *SystemInputs) Reset() + func (x *SystemInputs) String() string + type SystemInputs_RemoteAction struct + RemoteAction *RemoteAction + type VerifiedCommand struct + AllowedCommands []string + AllowedPaths []string + Command string + ElevatableCommands []string + Mode ExecutionMode + TaskID string