openshellv1

package
v0.1.7 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 3, 2026 License: Apache-2.0 Imports: 15 Imported by: 6

Documentation

Index

Constants

View Source 
const (
	OpenShell_Health_FullMethodName                        = "/openshell.v1.OpenShell/Health"
	OpenShell_GetCurrentUser_FullMethodName                = "/openshell.v1.OpenShell/GetCurrentUser"
	OpenShell_GetGatewayInfo_FullMethodName                = "/openshell.v1.OpenShell/GetGatewayInfo"
	OpenShell_CreateSandbox_FullMethodName                 = "/openshell.v1.OpenShell/CreateSandbox"
	OpenShell_BeginRootfsTarStaging_FullMethodName         = "/openshell.v1.OpenShell/BeginRootfsTarStaging"
	OpenShell_GetSandbox_FullMethodName                    = "/openshell.v1.OpenShell/GetSandbox"
	OpenShell_ListSandboxes_FullMethodName                 = "/openshell.v1.OpenShell/ListSandboxes"
	OpenShell_CreateSandboxTemplate_FullMethodName         = "/openshell.v1.OpenShell/CreateSandboxTemplate"
	OpenShell_GetSandboxTemplate_FullMethodName            = "/openshell.v1.OpenShell/GetSandboxTemplate"
	OpenShell_ListSandboxTemplates_FullMethodName          = "/openshell.v1.OpenShell/ListSandboxTemplates"
	OpenShell_DeleteSandboxTemplate_FullMethodName         = "/openshell.v1.OpenShell/DeleteSandboxTemplate"
	OpenShell_ListSandboxProviders_FullMethodName          = "/openshell.v1.OpenShell/ListSandboxProviders"
	OpenShell_AttachSandboxProvider_FullMethodName         = "/openshell.v1.OpenShell/AttachSandboxProvider"
	OpenShell_DetachSandboxProvider_FullMethodName         = "/openshell.v1.OpenShell/DetachSandboxProvider"
	OpenShell_GetSandboxProviderStatus_FullMethodName      = "/openshell.v1.OpenShell/GetSandboxProviderStatus"
	OpenShell_DeleteSandbox_FullMethodName                 = "/openshell.v1.OpenShell/DeleteSandbox"
	OpenShell_StopSandbox_FullMethodName                   = "/openshell.v1.OpenShell/StopSandbox"
	OpenShell_StartSandbox_FullMethodName                  = "/openshell.v1.OpenShell/StartSandbox"
	OpenShell_SuspendSandbox_FullMethodName                = "/openshell.v1.OpenShell/SuspendSandbox"
	OpenShell_ResumeSandbox_FullMethodName                 = "/openshell.v1.OpenShell/ResumeSandbox"
	OpenShell_CreateSshSession_FullMethodName              = "/openshell.v1.OpenShell/CreateSshSession"
	OpenShell_ExposeService_FullMethodName                 = "/openshell.v1.OpenShell/ExposeService"
	OpenShell_GetService_FullMethodName                    = "/openshell.v1.OpenShell/GetService"
	OpenShell_ListServices_FullMethodName                  = "/openshell.v1.OpenShell/ListServices"
	OpenShell_DeleteService_FullMethodName                 = "/openshell.v1.OpenShell/DeleteService"
	OpenShell_RevokeSshSession_FullMethodName              = "/openshell.v1.OpenShell/RevokeSshSession"
	OpenShell_ExecSandbox_FullMethodName                   = "/openshell.v1.OpenShell/ExecSandbox"
	OpenShell_ForwardTcp_FullMethodName                    = "/openshell.v1.OpenShell/ForwardTcp"
	OpenShell_ExecSandboxInteractive_FullMethodName        = "/openshell.v1.OpenShell/ExecSandboxInteractive"
	OpenShell_CreateProvider_FullMethodName                = "/openshell.v1.OpenShell/CreateProvider"
	OpenShell_GetProvider_FullMethodName                   = "/openshell.v1.OpenShell/GetProvider"
	OpenShell_GetProviderCredentials_FullMethodName        = "/openshell.v1.OpenShell/GetProviderCredentials"
	OpenShell_ListProviders_FullMethodName                 = "/openshell.v1.OpenShell/ListProviders"
	OpenShell_ListProviderProfiles_FullMethodName          = "/openshell.v1.OpenShell/ListProviderProfiles"
	OpenShell_GetProviderProfile_FullMethodName            = "/openshell.v1.OpenShell/GetProviderProfile"
	OpenShell_ImportProviderProfiles_FullMethodName        = "/openshell.v1.OpenShell/ImportProviderProfiles"
	OpenShell_UpdateProviderProfiles_FullMethodName        = "/openshell.v1.OpenShell/UpdateProviderProfiles"
	OpenShell_LintProviderProfiles_FullMethodName          = "/openshell.v1.OpenShell/LintProviderProfiles"
	OpenShell_UpdateProvider_FullMethodName                = "/openshell.v1.OpenShell/UpdateProvider"
	OpenShell_GetProviderRefreshStatus_FullMethodName      = "/openshell.v1.OpenShell/GetProviderRefreshStatus"
	OpenShell_ConfigureProviderRefresh_FullMethodName      = "/openshell.v1.OpenShell/ConfigureProviderRefresh"
	OpenShell_RotateProviderCredential_FullMethodName      = "/openshell.v1.OpenShell/RotateProviderCredential"
	OpenShell_DeleteProviderRefresh_FullMethodName         = "/openshell.v1.OpenShell/DeleteProviderRefresh"
	OpenShell_DeleteProvider_FullMethodName                = "/openshell.v1.OpenShell/DeleteProvider"
	OpenShell_DeleteProviderProfile_FullMethodName         = "/openshell.v1.OpenShell/DeleteProviderProfile"
	OpenShell_GetSandboxConfig_FullMethodName              = "/openshell.v1.OpenShell/GetSandboxConfig"
	OpenShell_GetGatewayConfig_FullMethodName              = "/openshell.v1.OpenShell/GetGatewayConfig"
	OpenShell_UpdateConfig_FullMethodName                  = "/openshell.v1.OpenShell/UpdateConfig"
	OpenShell_GetSandboxPolicyStatus_FullMethodName        = "/openshell.v1.OpenShell/GetSandboxPolicyStatus"
	OpenShell_ListSandboxPolicies_FullMethodName           = "/openshell.v1.OpenShell/ListSandboxPolicies"
	OpenShell_ReportPolicyStatus_FullMethodName            = "/openshell.v1.OpenShell/ReportPolicyStatus"
	OpenShell_ReportEndpointStatus_FullMethodName          = "/openshell.v1.OpenShell/ReportEndpointStatus"
	OpenShell_ReportProviderReadiness_FullMethodName       = "/openshell.v1.OpenShell/ReportProviderReadiness"
	OpenShell_ReportSandboxConfiguration_FullMethodName    = "/openshell.v1.OpenShell/ReportSandboxConfiguration"
	OpenShell_GetSandboxProviderEnvironment_FullMethodName = "/openshell.v1.OpenShell/GetSandboxProviderEnvironment"
	OpenShell_ExchangeProviderSubjectToken_FullMethodName  = "/openshell.v1.OpenShell/ExchangeProviderSubjectToken"
	OpenShell_GetSandboxLogs_FullMethodName                = "/openshell.v1.OpenShell/GetSandboxLogs"
	OpenShell_PushSandboxLogs_FullMethodName               = "/openshell.v1.OpenShell/PushSandboxLogs"
	OpenShell_ConnectSupervisor_FullMethodName             = "/openshell.v1.OpenShell/ConnectSupervisor"
	OpenShell_ReportMainProcessExit_FullMethodName         = "/openshell.v1.OpenShell/ReportMainProcessExit"
	OpenShell_FinalizeMainProcessExit_FullMethodName       = "/openshell.v1.OpenShell/FinalizeMainProcessExit"
	OpenShell_RelayStream_FullMethodName                   = "/openshell.v1.OpenShell/RelayStream"
	OpenShell_PeerRelay_FullMethodName                     = "/openshell.v1.OpenShell/PeerRelay"
	OpenShell_PeerReportProviderReadiness_FullMethodName   = "/openshell.v1.OpenShell/PeerReportProviderReadiness"
	OpenShell_PeerReportEndpointStatus_FullMethodName      = "/openshell.v1.OpenShell/PeerReportEndpointStatus"
	OpenShell_PeerGetSandboxProviderStatus_FullMethodName  = "/openshell.v1.OpenShell/PeerGetSandboxProviderStatus"
	OpenShell_PeerNotifyConfigUpdate_FullMethodName        = "/openshell.v1.OpenShell/PeerNotifyConfigUpdate"
	OpenShell_WatchSandbox_FullMethodName                  = "/openshell.v1.OpenShell/WatchSandbox"
	OpenShell_SubmitPolicyAnalysis_FullMethodName          = "/openshell.v1.OpenShell/SubmitPolicyAnalysis"
	OpenShell_GetDraftPolicy_FullMethodName                = "/openshell.v1.OpenShell/GetDraftPolicy"
	OpenShell_ApproveDraftChunk_FullMethodName             = "/openshell.v1.OpenShell/ApproveDraftChunk"
	OpenShell_RejectDraftChunk_FullMethodName              = "/openshell.v1.OpenShell/RejectDraftChunk"
	OpenShell_ApproveAllDraftChunks_FullMethodName         = "/openshell.v1.OpenShell/ApproveAllDraftChunks"
	OpenShell_EditDraftChunk_FullMethodName                = "/openshell.v1.OpenShell/EditDraftChunk"
	OpenShell_UndoDraftChunk_FullMethodName                = "/openshell.v1.OpenShell/UndoDraftChunk"
	OpenShell_ClearDraftChunks_FullMethodName              = "/openshell.v1.OpenShell/ClearDraftChunks"
	OpenShell_GetDraftHistory_FullMethodName               = "/openshell.v1.OpenShell/GetDraftHistory"
	OpenShell_IssueSandboxToken_FullMethodName             = "/openshell.v1.OpenShell/IssueSandboxToken"
	OpenShell_RefreshSandboxToken_FullMethodName           = "/openshell.v1.OpenShell/RefreshSandboxToken"
	OpenShell_CreateWorkspace_FullMethodName               = "/openshell.v1.OpenShell/CreateWorkspace"
	OpenShell_GetWorkspace_FullMethodName                  = "/openshell.v1.OpenShell/GetWorkspace"
	OpenShell_ListWorkspaces_FullMethodName                = "/openshell.v1.OpenShell/ListWorkspaces"
	OpenShell_DeleteWorkspace_FullMethodName               = "/openshell.v1.OpenShell/DeleteWorkspace"
	OpenShell_AddWorkspaceMember_FullMethodName            = "/openshell.v1.OpenShell/AddWorkspaceMember"
	OpenShell_RemoveWorkspaceMember_FullMethodName         = "/openshell.v1.OpenShell/RemoveWorkspaceMember"
	OpenShell_ListWorkspaceMembers_FullMethodName          = "/openshell.v1.OpenShell/ListWorkspaceMembers"
)
View Source 
const (
	SandboxUpdates_UpdateSandbox_FullMethodName = "/openshell.v1.SandboxUpdates/UpdateSandbox"
)

Variables

View Source 
var (
	ExtensionKind_name = map[int32]string{
		0: "EXTENSION_KIND_UNSPECIFIED",
		1: "EXTENSION_KIND_COMPUTE_DRIVER",
		2: "EXTENSION_KIND_CREDENTIAL_DRIVER",
		3: "EXTENSION_KIND_GATEWAY_INTERCEPTOR",
		4: "EXTENSION_KIND_SUPERVISOR_MIDDLEWARE",
	}
	ExtensionKind_value = map[string]int32{
		"EXTENSION_KIND_UNSPECIFIED":           0,
		"EXTENSION_KIND_COMPUTE_DRIVER":        1,
		"EXTENSION_KIND_CREDENTIAL_DRIVER":     2,
		"EXTENSION_KIND_GATEWAY_INTERCEPTOR":   3,
		"EXTENSION_KIND_SUPERVISOR_MIDDLEWARE": 4,
	}
)

Enum value maps for ExtensionKind.

View Source 
var (
	SandboxPhase_name = map[int32]string{
		0:  "SANDBOX_PHASE_UNSPECIFIED",
		1:  "SANDBOX_PHASE_PROVISIONING",
		2:  "SANDBOX_PHASE_READY",
		3:  "SANDBOX_PHASE_ERROR",
		4:  "SANDBOX_PHASE_DELETING",
		5:  "SANDBOX_PHASE_UNKNOWN",
		6:  "SANDBOX_PHASE_STOPPING",
		7:  "SANDBOX_PHASE_STOPPED",
		8:  "SANDBOX_PHASE_STARTING",
		9:  "SANDBOX_PHASE_COMPLETED",
		11: "SANDBOX_PHASE_SUSPENDING",
		12: "SANDBOX_PHASE_SUSPENDED",
	}
	SandboxPhase_value = map[string]int32{
		"SANDBOX_PHASE_UNSPECIFIED":  0,
		"SANDBOX_PHASE_PROVISIONING": 1,
		"SANDBOX_PHASE_READY":        2,
		"SANDBOX_PHASE_ERROR":        3,
		"SANDBOX_PHASE_DELETING":     4,
		"SANDBOX_PHASE_UNKNOWN":      5,
		"SANDBOX_PHASE_STOPPING":     6,
		"SANDBOX_PHASE_STOPPED":      7,
		"SANDBOX_PHASE_STARTING":     8,
		"SANDBOX_PHASE_COMPLETED":    9,
		"SANDBOX_PHASE_SUSPENDING":   11,
		"SANDBOX_PHASE_SUSPENDED":    12,
	}
)

Enum value maps for SandboxPhase.

View Source 
var (
	ProviderMutationKind_name = map[int32]string{
		0: "PROVIDER_MUTATION_KIND_UNSPECIFIED",
		1: "PROVIDER_MUTATION_KIND_ATTACH",
		2: "PROVIDER_MUTATION_KIND_DETACH",
		3: "PROVIDER_MUTATION_KIND_UPDATE",
		4: "PROVIDER_MUTATION_KIND_OBSERVE",
	}
	ProviderMutationKind_value = map[string]int32{
		"PROVIDER_MUTATION_KIND_UNSPECIFIED": 0,
		"PROVIDER_MUTATION_KIND_ATTACH":      1,
		"PROVIDER_MUTATION_KIND_DETACH":      2,
		"PROVIDER_MUTATION_KIND_UPDATE":      3,
		"PROVIDER_MUTATION_KIND_OBSERVE":     4,
	}
)

Enum value maps for ProviderMutationKind.

View Source 
var (
	ProviderReadinessState_name = map[int32]string{
		0: "PROVIDER_READINESS_STATE_UNSPECIFIED",
		1: "PROVIDER_READINESS_STATE_PERSISTED",
		2: "PROVIDER_READINESS_STATE_PENDING",
		3: "PROVIDER_READINESS_STATE_READY",
		4: "PROVIDER_READINESS_STATE_WITHHELD",
		5: "PROVIDER_READINESS_STATE_REVOKED",
		6: "PROVIDER_READINESS_STATE_FAILED",
		7: "PROVIDER_READINESS_STATE_SUPERSEDED",
	}
	ProviderReadinessState_value = map[string]int32{
		"PROVIDER_READINESS_STATE_UNSPECIFIED": 0,
		"PROVIDER_READINESS_STATE_PERSISTED":   1,
		"PROVIDER_READINESS_STATE_PENDING":     2,
		"PROVIDER_READINESS_STATE_READY":       3,
		"PROVIDER_READINESS_STATE_WITHHELD":    4,
		"PROVIDER_READINESS_STATE_REVOKED":     5,
		"PROVIDER_READINESS_STATE_FAILED":      6,
		"PROVIDER_READINESS_STATE_SUPERSEDED":  7,
	}
)

Enum value maps for ProviderReadinessState.

View Source 
var (
	ProviderReadinessReason_name = map[int32]string{
		0:  "PROVIDER_READINESS_REASON_UNSPECIFIED",
		1:  "PROVIDER_READINESS_REASON_WAITING_FOR_SUPERVISOR",
		2:  "PROVIDER_READINESS_REASON_WAITING_FOR_CREDENTIALS",
		3:  "PROVIDER_READINESS_REASON_WAITING_FOR_POLICY",
		4:  "PROVIDER_READINESS_REASON_WAITING_FOR_PROCESS",
		5:  "PROVIDER_READINESS_REASON_UNSUPPORTED_SUPERVISOR",
		6:  "PROVIDER_READINESS_REASON_CREDENTIALS_WITHHELD",
		7:  "PROVIDER_READINESS_REASON_CREDENTIAL_INSTALL_FAILED",
		8:  "PROVIDER_READINESS_REASON_POLICY_ACTIVATION_FAILED",
		9:  "PROVIDER_READINESS_REASON_PROCESS_INSTALL_FAILED",
		10: "PROVIDER_READINESS_REASON_SUPERVISOR_DISCONNECTED",
		11: "PROVIDER_READINESS_REASON_SUPERVISOR_LEASE_EXPIRED",
		12: "PROVIDER_READINESS_REASON_DESIRED_STATE_CHANGED",
		13: "PROVIDER_READINESS_REASON_CREDENTIAL_EXPIRED",
		14: "PROVIDER_READINESS_REASON_LOCAL_POLICY",
		15: "PROVIDER_READINESS_REASON_SNAPSHOT_MISMATCH",
	}
	ProviderReadinessReason_value = map[string]int32{
		"PROVIDER_READINESS_REASON_UNSPECIFIED":               0,
		"PROVIDER_READINESS_REASON_WAITING_FOR_SUPERVISOR":    1,
		"PROVIDER_READINESS_REASON_WAITING_FOR_CREDENTIALS":   2,
		"PROVIDER_READINESS_REASON_WAITING_FOR_POLICY":        3,
		"PROVIDER_READINESS_REASON_WAITING_FOR_PROCESS":       4,
		"PROVIDER_READINESS_REASON_UNSUPPORTED_SUPERVISOR":    5,
		"PROVIDER_READINESS_REASON_CREDENTIALS_WITHHELD":      6,
		"PROVIDER_READINESS_REASON_CREDENTIAL_INSTALL_FAILED": 7,
		"PROVIDER_READINESS_REASON_POLICY_ACTIVATION_FAILED":  8,
		"PROVIDER_READINESS_REASON_PROCESS_INSTALL_FAILED":    9,
		"PROVIDER_READINESS_REASON_SUPERVISOR_DISCONNECTED":   10,
		"PROVIDER_READINESS_REASON_SUPERVISOR_LEASE_EXPIRED":  11,
		"PROVIDER_READINESS_REASON_DESIRED_STATE_CHANGED":     12,
		"PROVIDER_READINESS_REASON_CREDENTIAL_EXPIRED":        13,
		"PROVIDER_READINESS_REASON_LOCAL_POLICY":              14,
		"PROVIDER_READINESS_REASON_SNAPSHOT_MISMATCH":         15,
	}
)

Enum value maps for ProviderReadinessReason.

View Source 
var (
	ConfigComponent_name = map[int32]string{
		0: "CONFIG_COMPONENT_UNSPECIFIED",
		1: "CONFIG_COMPONENT_SANDBOX_CONFIG",
		2: "CONFIG_COMPONENT_PROVIDER_ENVIRONMENT",
	}
	ConfigComponent_value = map[string]int32{
		"CONFIG_COMPONENT_UNSPECIFIED":          0,
		"CONFIG_COMPONENT_SANDBOX_CONFIG":       1,
		"CONFIG_COMPONENT_PROVIDER_ENVIRONMENT": 2,
	}
)

Enum value maps for ConfigComponent.

View Source 
var (
	ConfigApplyOutcome_name = map[int32]string{
		0: "CONFIG_APPLY_OUTCOME_UNSPECIFIED",
		1: "CONFIG_APPLY_OUTCOME_APPLIED",
		2: "CONFIG_APPLY_OUTCOME_IGNORED_DUPLICATE",
		3: "CONFIG_APPLY_OUTCOME_IGNORED_STALE",
		4: "CONFIG_APPLY_OUTCOME_RETAINED_LOCAL_OVERRIDE",
		5: "CONFIG_APPLY_OUTCOME_DEGRADED",
		6: "CONFIG_APPLY_OUTCOME_FAILED_RETAINED_LAST_KNOWN_GOOD",
		7: "CONFIG_APPLY_OUTCOME_FAILED_CLOSED",
		8: "CONFIG_APPLY_OUTCOME_UNSUPPORTED",
	}
	ConfigApplyOutcome_value = map[string]int32{
		"CONFIG_APPLY_OUTCOME_UNSPECIFIED":                     0,
		"CONFIG_APPLY_OUTCOME_APPLIED":                         1,
		"CONFIG_APPLY_OUTCOME_IGNORED_DUPLICATE":               2,
		"CONFIG_APPLY_OUTCOME_IGNORED_STALE":                   3,
		"CONFIG_APPLY_OUTCOME_RETAINED_LOCAL_OVERRIDE":         4,
		"CONFIG_APPLY_OUTCOME_DEGRADED":                        5,
		"CONFIG_APPLY_OUTCOME_FAILED_RETAINED_LAST_KNOWN_GOOD": 6,
		"CONFIG_APPLY_OUTCOME_FAILED_CLOSED":                   7,
		"CONFIG_APPLY_OUTCOME_UNSUPPORTED":                     8,
	}
)

Enum value maps for ConfigApplyOutcome.

View Source 
var (
	ConfigUpdateOperationState_name = map[int32]string{
		0: "CONFIG_UPDATE_OPERATION_STATE_UNSPECIFIED",
		1: "CONFIG_UPDATE_OPERATION_STATE_PENDING",
		2: "CONFIG_UPDATE_OPERATION_STATE_APPLIED",
		3: "CONFIG_UPDATE_OPERATION_STATE_INACTIVE",
		4: "CONFIG_UPDATE_OPERATION_STATE_FAILED",
		5: "CONFIG_UPDATE_OPERATION_STATE_SUPERSEDED",
		6: "CONFIG_UPDATE_OPERATION_STATE_CANCELLED",
	}
	ConfigUpdateOperationState_value = map[string]int32{
		"CONFIG_UPDATE_OPERATION_STATE_UNSPECIFIED": 0,
		"CONFIG_UPDATE_OPERATION_STATE_PENDING":     1,
		"CONFIG_UPDATE_OPERATION_STATE_APPLIED":     2,
		"CONFIG_UPDATE_OPERATION_STATE_INACTIVE":    3,
		"CONFIG_UPDATE_OPERATION_STATE_FAILED":      4,
		"CONFIG_UPDATE_OPERATION_STATE_SUPERSEDED":  5,
		"CONFIG_UPDATE_OPERATION_STATE_CANCELLED":   6,
	}
)

Enum value maps for ConfigUpdateOperationState.

View Source 
var (
	ProviderCredentialTokenGrantType_name = map[int32]string{
		0: "PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_UNSPECIFIED",
		1: "PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_CLIENT_CREDENTIALS",
		2: "PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_TOKEN_EXCHANGE",
	}
	ProviderCredentialTokenGrantType_value = map[string]int32{
		"PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_UNSPECIFIED":        0,
		"PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_CLIENT_CREDENTIALS": 1,
		"PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_TOKEN_EXCHANGE":     2,
	}
)

Enum value maps for ProviderCredentialTokenGrantType.

View Source 
var (
	ProviderCredentialRefreshStrategy_name = map[int32]string{
		0: "PROVIDER_CREDENTIAL_REFRESH_STRATEGY_UNSPECIFIED",
		1: "PROVIDER_CREDENTIAL_REFRESH_STRATEGY_STATIC",
		2: "PROVIDER_CREDENTIAL_REFRESH_STRATEGY_EXTERNAL",
		3: "PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_REFRESH_TOKEN",
		4: "PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_CLIENT_CREDENTIALS",
		5: "PROVIDER_CREDENTIAL_REFRESH_STRATEGY_GOOGLE_SERVICE_ACCOUNT_JWT",
		6: "PROVIDER_CREDENTIAL_REFRESH_STRATEGY_AWS_STS_ASSUME_ROLE",
	}
	ProviderCredentialRefreshStrategy_value = map[string]int32{
		"PROVIDER_CREDENTIAL_REFRESH_STRATEGY_UNSPECIFIED":                0,
		"PROVIDER_CREDENTIAL_REFRESH_STRATEGY_STATIC":                     1,
		"PROVIDER_CREDENTIAL_REFRESH_STRATEGY_EXTERNAL":                   2,
		"PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_REFRESH_TOKEN":       3,
		"PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_CLIENT_CREDENTIALS":  4,
		"PROVIDER_CREDENTIAL_REFRESH_STRATEGY_GOOGLE_SERVICE_ACCOUNT_JWT": 5,
		"PROVIDER_CREDENTIAL_REFRESH_STRATEGY_AWS_STS_ASSUME_ROLE":        6,
	}
)

Enum value maps for ProviderCredentialRefreshStrategy.

View Source 
var (
	ProviderProfileCategory_name = map[int32]string{
		0: "PROVIDER_PROFILE_CATEGORY_UNSPECIFIED",
		1: "PROVIDER_PROFILE_CATEGORY_OTHER",
		2: "PROVIDER_PROFILE_CATEGORY_INFERENCE",
		3: "PROVIDER_PROFILE_CATEGORY_AGENT",
		4: "PROVIDER_PROFILE_CATEGORY_SOURCE_CONTROL",
		5: "PROVIDER_PROFILE_CATEGORY_MESSAGING",
		6: "PROVIDER_PROFILE_CATEGORY_DATA",
		7: "PROVIDER_PROFILE_CATEGORY_KNOWLEDGE",
	}
	ProviderProfileCategory_value = map[string]int32{
		"PROVIDER_PROFILE_CATEGORY_UNSPECIFIED":    0,
		"PROVIDER_PROFILE_CATEGORY_OTHER":          1,
		"PROVIDER_PROFILE_CATEGORY_INFERENCE":      2,
		"PROVIDER_PROFILE_CATEGORY_AGENT":          3,
		"PROVIDER_PROFILE_CATEGORY_SOURCE_CONTROL": 4,
		"PROVIDER_PROFILE_CATEGORY_MESSAGING":      5,
		"PROVIDER_PROFILE_CATEGORY_DATA":           6,
		"PROVIDER_PROFILE_CATEGORY_KNOWLEDGE":      7,
	}
)

Enum value maps for ProviderProfileCategory.

View Source 
var (
	ProviderEnvironmentValueClassification_name = map[int32]string{
		0: "PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_UNSPECIFIED",
		1: "PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_NON_SECRET",
		2: "PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_STATIC_CREDENTIAL",
	}
	ProviderEnvironmentValueClassification_value = map[string]int32{
		"PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_UNSPECIFIED":       0,
		"PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_NON_SECRET":        1,
		"PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_STATIC_CREDENTIAL": 2,
	}
)

Enum value maps for ProviderEnvironmentValueClassification.

View Source 
var (
	ConfigurationAdmissionState_name = map[int32]string{
		0: "CONFIGURATION_ADMISSION_STATE_UNSPECIFIED",
		1: "CONFIGURATION_ADMISSION_STATE_PENDING",
		2: "CONFIGURATION_ADMISSION_STATE_ACCEPTED",
		3: "CONFIGURATION_ADMISSION_STATE_REJECTED",
	}
	ConfigurationAdmissionState_value = map[string]int32{
		"CONFIGURATION_ADMISSION_STATE_UNSPECIFIED": 0,
		"CONFIGURATION_ADMISSION_STATE_PENDING":     1,
		"CONFIGURATION_ADMISSION_STATE_ACCEPTED":    2,
		"CONFIGURATION_ADMISSION_STATE_REJECTED":    3,
	}
)

Enum value maps for ConfigurationAdmissionState.

View Source 
var (
	PolicyStatus_name = map[int32]string{
		0: "POLICY_STATUS_UNSPECIFIED",
		1: "POLICY_STATUS_PENDING",
		2: "POLICY_STATUS_LOADED",
		3: "POLICY_STATUS_FAILED",
		4: "POLICY_STATUS_SUPERSEDED",
	}
	PolicyStatus_value = map[string]int32{
		"POLICY_STATUS_UNSPECIFIED": 0,
		"POLICY_STATUS_PENDING":     1,
		"POLICY_STATUS_LOADED":      2,
		"POLICY_STATUS_FAILED":      3,
		"POLICY_STATUS_SUPERSEDED":  4,
	}
)

Enum value maps for PolicyStatus.

View Source 
var (
	ServiceStatus_name = map[int32]string{
		0: "SERVICE_STATUS_UNSPECIFIED",
		1: "SERVICE_STATUS_HEALTHY",
		2: "SERVICE_STATUS_DEGRADED",
		3: "SERVICE_STATUS_UNHEALTHY",
	}
	ServiceStatus_value = map[string]int32{
		"SERVICE_STATUS_UNSPECIFIED": 0,
		"SERVICE_STATUS_HEALTHY":     1,
		"SERVICE_STATUS_DEGRADED":    2,
		"SERVICE_STATUS_UNHEALTHY":   3,
	}
)

Enum value maps for ServiceStatus.

View Source 
var (
	WorkspaceRole_name = map[int32]string{
		0: "WORKSPACE_ROLE_UNSPECIFIED",
		1: "WORKSPACE_ROLE_USER",
		2: "WORKSPACE_ROLE_ADMIN",
	}
	WorkspaceRole_value = map[string]int32{
		"WORKSPACE_ROLE_UNSPECIFIED": 0,
		"WORKSPACE_ROLE_USER":        1,
		"WORKSPACE_ROLE_ADMIN":       2,
	}
)

Enum value maps for WorkspaceRole.

View Source 
var (
	ProviderCredentialRefreshRecoveryAction_name = map[int32]string{
		0: "PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_UNSPECIFIED",
		1: "PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_RETRY",
		2: "PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_REAUTHORIZE",
		3: "PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_FIX_CONFIGURATION",
		4: "PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_INVESTIGATE",
	}
	ProviderCredentialRefreshRecoveryAction_value = map[string]int32{
		"PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_UNSPECIFIED":       0,
		"PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_RETRY":             1,
		"PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_REAUTHORIZE":       2,
		"PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_FIX_CONFIGURATION": 3,
		"PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_INVESTIGATE":       4,
	}
)

Enum value maps for ProviderCredentialRefreshRecoveryAction.

View Source 
var (
	SandboxRestartPolicy_name = map[int32]string{
		0: "SANDBOX_RESTART_POLICY_UNSPECIFIED",
		1: "SANDBOX_RESTART_POLICY_NEVER",
		2: "SANDBOX_RESTART_POLICY_ON_FAILURE",
		3: "SANDBOX_RESTART_POLICY_ALWAYS",
	}
	SandboxRestartPolicy_value = map[string]int32{
		"SANDBOX_RESTART_POLICY_UNSPECIFIED": 0,
		"SANDBOX_RESTART_POLICY_NEVER":       1,
		"SANDBOX_RESTART_POLICY_ON_FAILURE":  2,
		"SANDBOX_RESTART_POLICY_ALWAYS":      3,
	}
)

Enum value maps for SandboxRestartPolicy.

View Source 
var (
	DeletionOutcome_name = map[int32]string{
		0: "DELETION_OUTCOME_UNSPECIFIED",
		1: "DELETION_OUTCOME_COMPLETED",
		2: "DELETION_OUTCOME_ACCEPTED",
		3: "DELETION_OUTCOME_ALREADY_ABSENT",
	}
	DeletionOutcome_value = map[string]int32{
		"DELETION_OUTCOME_UNSPECIFIED":    0,
		"DELETION_OUTCOME_COMPLETED":      1,
		"DELETION_OUTCOME_ACCEPTED":       2,
		"DELETION_OUTCOME_ALREADY_ABSENT": 3,
	}
)

Enum value maps for DeletionOutcome.

View Source 
var (
	EndpointResult_name = map[int32]string{
		0: "ENDPOINT_RESULT_UNSPECIFIED",
		1: "ENDPOINT_RESULT_NO_OBSERVED_EXCHANGE",
		2: "ENDPOINT_RESULT_HTTP_RESPONSE_RECEIVED",
		3: "ENDPOINT_RESULT_POLICY_DENIED",
		4: "ENDPOINT_RESULT_CREDENTIAL_UNAVAILABLE",
		5: "ENDPOINT_RESULT_TLS_FAILED",
		6: "ENDPOINT_RESULT_TRANSPORT_FAILED",
		7: "ENDPOINT_RESULT_UPSTREAM_REJECTED",
	}
	EndpointResult_value = map[string]int32{
		"ENDPOINT_RESULT_UNSPECIFIED":            0,
		"ENDPOINT_RESULT_NO_OBSERVED_EXCHANGE":   1,
		"ENDPOINT_RESULT_HTTP_RESPONSE_RECEIVED": 2,
		"ENDPOINT_RESULT_POLICY_DENIED":          3,
		"ENDPOINT_RESULT_CREDENTIAL_UNAVAILABLE": 4,
		"ENDPOINT_RESULT_TLS_FAILED":             5,
		"ENDPOINT_RESULT_TRANSPORT_FAILED":       6,
		"ENDPOINT_RESULT_UPSTREAM_REJECTED":      7,
	}
)

Enum value maps for EndpointResult.

View Source 
var (
	ServiceAuthorizationMode_name = map[int32]string{
		0: "SERVICE_AUTHORIZATION_MODE_UNSPECIFIED",
		1: "SERVICE_AUTHORIZATION_MODE_STRIP",
		2: "SERVICE_AUTHORIZATION_MODE_BEARER_PASSTHROUGH",
	}
	ServiceAuthorizationMode_value = map[string]int32{
		"SERVICE_AUTHORIZATION_MODE_UNSPECIFIED":        0,
		"SERVICE_AUTHORIZATION_MODE_STRIP":              1,
		"SERVICE_AUTHORIZATION_MODE_BEARER_PASSTHROUGH": 2,
	}
)

Enum value maps for ServiceAuthorizationMode.

View Source 
var (
	EndpointFailureDomain_name = map[int32]string{
		0: "ENDPOINT_FAILURE_DOMAIN_UNSPECIFIED",
		1: "ENDPOINT_FAILURE_DOMAIN_TOKEN_GRANT",
	}
	EndpointFailureDomain_value = map[string]int32{
		"ENDPOINT_FAILURE_DOMAIN_UNSPECIFIED": 0,
		"ENDPOINT_FAILURE_DOMAIN_TOKEN_GRANT": 1,
	}
)

Enum value maps for EndpointFailureDomain.

View Source 
var File_openshell_proto protoreflect.FileDescriptor
View Source 
var OpenShell_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "openshell.v1.OpenShell",
	HandlerType: (*OpenShellServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "Health",
			Handler:    _OpenShell_Health_Handler,
		},
		{
			MethodName: "GetCurrentUser",
			Handler:    _OpenShell_GetCurrentUser_Handler,
		},
		{
			MethodName: "GetGatewayInfo",
			Handler:    _OpenShell_GetGatewayInfo_Handler,
		},
		{
			MethodName: "CreateSandbox",
			Handler:    _OpenShell_CreateSandbox_Handler,
		},
		{
			MethodName: "BeginRootfsTarStaging",
			Handler:    _OpenShell_BeginRootfsTarStaging_Handler,
		},
		{
			MethodName: "GetSandbox",
			Handler:    _OpenShell_GetSandbox_Handler,
		},
		{
			MethodName: "ListSandboxes",
			Handler:    _OpenShell_ListSandboxes_Handler,
		},
		{
			MethodName: "CreateSandboxTemplate",
			Handler:    _OpenShell_CreateSandboxTemplate_Handler,
		},
		{
			MethodName: "GetSandboxTemplate",
			Handler:    _OpenShell_GetSandboxTemplate_Handler,
		},
		{
			MethodName: "ListSandboxTemplates",
			Handler:    _OpenShell_ListSandboxTemplates_Handler,
		},
		{
			MethodName: "DeleteSandboxTemplate",
			Handler:    _OpenShell_DeleteSandboxTemplate_Handler,
		},
		{
			MethodName: "ListSandboxProviders",
			Handler:    _OpenShell_ListSandboxProviders_Handler,
		},
		{
			MethodName: "AttachSandboxProvider",
			Handler:    _OpenShell_AttachSandboxProvider_Handler,
		},
		{
			MethodName: "DetachSandboxProvider",
			Handler:    _OpenShell_DetachSandboxProvider_Handler,
		},
		{
			MethodName: "GetSandboxProviderStatus",
			Handler:    _OpenShell_GetSandboxProviderStatus_Handler,
		},
		{
			MethodName: "DeleteSandbox",
			Handler:    _OpenShell_DeleteSandbox_Handler,
		},
		{
			MethodName: "StopSandbox",
			Handler:    _OpenShell_StopSandbox_Handler,
		},
		{
			MethodName: "StartSandbox",
			Handler:    _OpenShell_StartSandbox_Handler,
		},
		{
			MethodName: "SuspendSandbox",
			Handler:    _OpenShell_SuspendSandbox_Handler,
		},
		{
			MethodName: "ResumeSandbox",
			Handler:    _OpenShell_ResumeSandbox_Handler,
		},
		{
			MethodName: "CreateSshSession",
			Handler:    _OpenShell_CreateSshSession_Handler,
		},
		{
			MethodName: "ExposeService",
			Handler:    _OpenShell_ExposeService_Handler,
		},
		{
			MethodName: "GetService",
			Handler:    _OpenShell_GetService_Handler,
		},
		{
			MethodName: "ListServices",
			Handler:    _OpenShell_ListServices_Handler,
		},
		{
			MethodName: "DeleteService",
			Handler:    _OpenShell_DeleteService_Handler,
		},
		{
			MethodName: "RevokeSshSession",
			Handler:    _OpenShell_RevokeSshSession_Handler,
		},
		{
			MethodName: "CreateProvider",
			Handler:    _OpenShell_CreateProvider_Handler,
		},
		{
			MethodName: "GetProvider",
			Handler:    _OpenShell_GetProvider_Handler,
		},
		{
			MethodName: "GetProviderCredentials",
			Handler:    _OpenShell_GetProviderCredentials_Handler,
		},
		{
			MethodName: "ListProviders",
			Handler:    _OpenShell_ListProviders_Handler,
		},
		{
			MethodName: "ListProviderProfiles",
			Handler:    _OpenShell_ListProviderProfiles_Handler,
		},
		{
			MethodName: "GetProviderProfile",
			Handler:    _OpenShell_GetProviderProfile_Handler,
		},
		{
			MethodName: "ImportProviderProfiles",
			Handler:    _OpenShell_ImportProviderProfiles_Handler,
		},
		{
			MethodName: "UpdateProviderProfiles",
			Handler:    _OpenShell_UpdateProviderProfiles_Handler,
		},
		{
			MethodName: "LintProviderProfiles",
			Handler:    _OpenShell_LintProviderProfiles_Handler,
		},
		{
			MethodName: "UpdateProvider",
			Handler:    _OpenShell_UpdateProvider_Handler,
		},
		{
			MethodName: "GetProviderRefreshStatus",
			Handler:    _OpenShell_GetProviderRefreshStatus_Handler,
		},
		{
			MethodName: "ConfigureProviderRefresh",
			Handler:    _OpenShell_ConfigureProviderRefresh_Handler,
		},
		{
			MethodName: "RotateProviderCredential",
			Handler:    _OpenShell_RotateProviderCredential_Handler,
		},
		{
			MethodName: "DeleteProviderRefresh",
			Handler:    _OpenShell_DeleteProviderRefresh_Handler,
		},
		{
			MethodName: "DeleteProvider",
			Handler:    _OpenShell_DeleteProvider_Handler,
		},
		{
			MethodName: "DeleteProviderProfile",
			Handler:    _OpenShell_DeleteProviderProfile_Handler,
		},
		{
			MethodName: "GetSandboxConfig",
			Handler:    _OpenShell_GetSandboxConfig_Handler,
		},
		{
			MethodName: "GetGatewayConfig",
			Handler:    _OpenShell_GetGatewayConfig_Handler,
		},
		{
			MethodName: "UpdateConfig",
			Handler:    _OpenShell_UpdateConfig_Handler,
		},
		{
			MethodName: "GetSandboxPolicyStatus",
			Handler:    _OpenShell_GetSandboxPolicyStatus_Handler,
		},
		{
			MethodName: "ListSandboxPolicies",
			Handler:    _OpenShell_ListSandboxPolicies_Handler,
		},
		{
			MethodName: "ReportPolicyStatus",
			Handler:    _OpenShell_ReportPolicyStatus_Handler,
		},
		{
			MethodName: "ReportEndpointStatus",
			Handler:    _OpenShell_ReportEndpointStatus_Handler,
		},
		{
			MethodName: "ReportProviderReadiness",
			Handler:    _OpenShell_ReportProviderReadiness_Handler,
		},
		{
			MethodName: "ReportSandboxConfiguration",
			Handler:    _OpenShell_ReportSandboxConfiguration_Handler,
		},
		{
			MethodName: "GetSandboxProviderEnvironment",
			Handler:    _OpenShell_GetSandboxProviderEnvironment_Handler,
		},
		{
			MethodName: "ExchangeProviderSubjectToken",
			Handler:    _OpenShell_ExchangeProviderSubjectToken_Handler,
		},
		{
			MethodName: "GetSandboxLogs",
			Handler:    _OpenShell_GetSandboxLogs_Handler,
		},
		{
			MethodName: "ReportMainProcessExit",
			Handler:    _OpenShell_ReportMainProcessExit_Handler,
		},
		{
			MethodName: "FinalizeMainProcessExit",
			Handler:    _OpenShell_FinalizeMainProcessExit_Handler,
		},
		{
			MethodName: "PeerReportProviderReadiness",
			Handler:    _OpenShell_PeerReportProviderReadiness_Handler,
		},
		{
			MethodName: "PeerReportEndpointStatus",
			Handler:    _OpenShell_PeerReportEndpointStatus_Handler,
		},
		{
			MethodName: "PeerGetSandboxProviderStatus",
			Handler:    _OpenShell_PeerGetSandboxProviderStatus_Handler,
		},
		{
			MethodName: "PeerNotifyConfigUpdate",
			Handler:    _OpenShell_PeerNotifyConfigUpdate_Handler,
		},
		{
			MethodName: "SubmitPolicyAnalysis",
			Handler:    _OpenShell_SubmitPolicyAnalysis_Handler,
		},
		{
			MethodName: "GetDraftPolicy",
			Handler:    _OpenShell_GetDraftPolicy_Handler,
		},
		{
			MethodName: "ApproveDraftChunk",
			Handler:    _OpenShell_ApproveDraftChunk_Handler,
		},
		{
			MethodName: "RejectDraftChunk",
			Handler:    _OpenShell_RejectDraftChunk_Handler,
		},
		{
			MethodName: "ApproveAllDraftChunks",
			Handler:    _OpenShell_ApproveAllDraftChunks_Handler,
		},
		{
			MethodName: "EditDraftChunk",
			Handler:    _OpenShell_EditDraftChunk_Handler,
		},
		{
			MethodName: "UndoDraftChunk",
			Handler:    _OpenShell_UndoDraftChunk_Handler,
		},
		{
			MethodName: "ClearDraftChunks",
			Handler:    _OpenShell_ClearDraftChunks_Handler,
		},
		{
			MethodName: "GetDraftHistory",
			Handler:    _OpenShell_GetDraftHistory_Handler,
		},
		{
			MethodName: "IssueSandboxToken",
			Handler:    _OpenShell_IssueSandboxToken_Handler,
		},
		{
			MethodName: "RefreshSandboxToken",
			Handler:    _OpenShell_RefreshSandboxToken_Handler,
		},
		{
			MethodName: "CreateWorkspace",
			Handler:    _OpenShell_CreateWorkspace_Handler,
		},
		{
			MethodName: "GetWorkspace",
			Handler:    _OpenShell_GetWorkspace_Handler,
		},
		{
			MethodName: "ListWorkspaces",
			Handler:    _OpenShell_ListWorkspaces_Handler,
		},
		{
			MethodName: "DeleteWorkspace",
			Handler:    _OpenShell_DeleteWorkspace_Handler,
		},
		{
			MethodName: "AddWorkspaceMember",
			Handler:    _OpenShell_AddWorkspaceMember_Handler,
		},
		{
			MethodName: "RemoveWorkspaceMember",
			Handler:    _OpenShell_RemoveWorkspaceMember_Handler,
		},
		{
			MethodName: "ListWorkspaceMembers",
			Handler:    _OpenShell_ListWorkspaceMembers_Handler,
		},
	},
	Streams: []grpc.StreamDesc{
		{
			StreamName:    "ExecSandbox",
			Handler:       _OpenShell_ExecSandbox_Handler,
			ServerStreams: true,
		},
		{
			StreamName:    "ForwardTcp",
			Handler:       _OpenShell_ForwardTcp_Handler,
			ServerStreams: true,
			ClientStreams: true,
		},
		{
			StreamName:    "ExecSandboxInteractive",
			Handler:       _OpenShell_ExecSandboxInteractive_Handler,
			ServerStreams: true,
			ClientStreams: true,
		},
		{
			StreamName:    "PushSandboxLogs",
			Handler:       _OpenShell_PushSandboxLogs_Handler,
			ClientStreams: true,
		},
		{
			StreamName:    "ConnectSupervisor",
			Handler:       _OpenShell_ConnectSupervisor_Handler,
			ServerStreams: true,
			ClientStreams: true,
		},
		{
			StreamName:    "RelayStream",
			Handler:       _OpenShell_RelayStream_Handler,
			ServerStreams: true,
			ClientStreams: true,
		},
		{
			StreamName:    "PeerRelay",
			Handler:       _OpenShell_PeerRelay_Handler,
			ServerStreams: true,
			ClientStreams: true,
		},
		{
			StreamName:    "WatchSandbox",
			Handler:       _OpenShell_WatchSandbox_Handler,
			ServerStreams: true,
		},
	},
	Metadata: "openshell.proto",
}

OpenShell_ServiceDesc is the grpc.ServiceDesc for OpenShell service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

View Source 
var SandboxUpdates_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "openshell.v1.SandboxUpdates",
	HandlerType: (*SandboxUpdatesServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "UpdateSandbox",
			Handler:    _SandboxUpdates_UpdateSandbox_Handler,
		},
	},
	Streams:  []grpc.StreamDesc{},
	Metadata: "openshell.proto",
}

SandboxUpdates_ServiceDesc is the grpc.ServiceDesc for SandboxUpdates service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

Functions

func RegisterOpenShellServer 

func RegisterOpenShellServer(s grpc.ServiceRegistrar, srv OpenShellServer)

func RegisterSandboxUpdatesServer added in v0.1.7 

func RegisterSandboxUpdatesServer(s grpc.ServiceRegistrar, srv SandboxUpdatesServer)

Types

type AddAllowRules 

type AddAllowRules struct {
	Rules  []*sandboxv1.L7Rule `protobuf:"bytes,3,rep,name=rules,proto3" json:"rules,omitempty"`
	Target *L7RuleTarget       `protobuf:"bytes,4,opt,name=target,proto3" json:"target,omitempty"`
	// contains filtered or unexported fields
}

func (*AddAllowRules) Descriptor deprecated 

func (*AddAllowRules) Descriptor() ([]byte, []int)

Deprecated: Use AddAllowRules.ProtoReflect.Descriptor instead.

func (*AddAllowRules) GetRules 

func (x *AddAllowRules) GetRules() []*sandboxv1.L7Rule

func (*AddAllowRules) GetTarget 

func (x *AddAllowRules) GetTarget() *L7RuleTarget

func (*AddAllowRules) ProtoMessage 

func (*AddAllowRules) ProtoMessage()

func (*AddAllowRules) ProtoReflect 

func (x *AddAllowRules) ProtoReflect() protoreflect.Message

func (*AddAllowRules) Reset 

func (x *AddAllowRules) Reset()

func (*AddAllowRules) String 

func (x *AddAllowRules) String() string

type AddDenyRules 

type AddDenyRules struct {
	DenyRules []*sandboxv1.L7DenyRule `protobuf:"bytes,3,rep,name=deny_rules,json=denyRules,proto3" json:"deny_rules,omitempty"`
	Target    *L7RuleTarget           `protobuf:"bytes,4,opt,name=target,proto3" json:"target,omitempty"`
	// contains filtered or unexported fields
}

func (*AddDenyRules) Descriptor deprecated 

func (*AddDenyRules) Descriptor() ([]byte, []int)

Deprecated: Use AddDenyRules.ProtoReflect.Descriptor instead.

func (*AddDenyRules) GetDenyRules 

func (x *AddDenyRules) GetDenyRules() []*sandboxv1.L7DenyRule

func (*AddDenyRules) GetTarget 

func (x *AddDenyRules) GetTarget() *L7RuleTarget

func (*AddDenyRules) ProtoMessage 

func (*AddDenyRules) ProtoMessage()

func (*AddDenyRules) ProtoReflect 

func (x *AddDenyRules) ProtoReflect() protoreflect.Message

func (*AddDenyRules) Reset 

func (x *AddDenyRules) Reset()

func (*AddDenyRules) String 

func (x *AddDenyRules) String() string

type AddNetworkRule 

type AddNetworkRule struct {
	RuleName string                       `protobuf:"bytes,1,opt,name=rule_name,json=ruleName,proto3" json:"rule_name,omitempty"`
	Rule     *sandboxv1.NetworkPolicyRule `protobuf:"bytes,2,opt,name=rule,proto3" json:"rule,omitempty"`
	// contains filtered or unexported fields
}

func (*AddNetworkRule) Descriptor deprecated 

func (*AddNetworkRule) Descriptor() ([]byte, []int)

Deprecated: Use AddNetworkRule.ProtoReflect.Descriptor instead.

func (*AddNetworkRule) GetRule 

func (x *AddNetworkRule) GetRule() *sandboxv1.NetworkPolicyRule

func (*AddNetworkRule) GetRuleName 

func (x *AddNetworkRule) GetRuleName() string

func (*AddNetworkRule) ProtoMessage 

func (*AddNetworkRule) ProtoMessage()

func (*AddNetworkRule) ProtoReflect 

func (x *AddNetworkRule) ProtoReflect() protoreflect.Message

func (*AddNetworkRule) Reset 

func (x *AddNetworkRule) Reset()

func (*AddNetworkRule) String 

func (x *AddNetworkRule) String() string

type AddWorkspaceMemberRequest 

type AddWorkspaceMemberRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,1,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// OIDC subject claim identifying the principal.
	PrincipalSubject string `protobuf:"bytes,2,opt,name=principal_subject,json=principalSubject,proto3" json:"principal_subject,omitempty"`
	// Role to assign.
	Role WorkspaceRole `protobuf:"varint,3,opt,name=role,proto3,enum=openshell.v1.WorkspaceRole" json:"role,omitempty"`
	// Optional nonzero UUID. Same ID and payload replay success for 24 hours.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Add workspace member request.

func (*AddWorkspaceMemberRequest) Descriptor deprecated 

func (*AddWorkspaceMemberRequest) Descriptor() ([]byte, []int)

Deprecated: Use AddWorkspaceMemberRequest.ProtoReflect.Descriptor instead.

func (*AddWorkspaceMemberRequest) GetPrincipalSubject 

func (x *AddWorkspaceMemberRequest) GetPrincipalSubject() string

func (*AddWorkspaceMemberRequest) GetRequestId 

func (x *AddWorkspaceMemberRequest) GetRequestId() string

func (*AddWorkspaceMemberRequest) GetRole 

func (x *AddWorkspaceMemberRequest) GetRole() WorkspaceRole

func (*AddWorkspaceMemberRequest) GetWorkspaceScope 

func (x *AddWorkspaceMemberRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*AddWorkspaceMemberRequest) ProtoMessage 

func (*AddWorkspaceMemberRequest) ProtoMessage()

func (*AddWorkspaceMemberRequest) ProtoReflect 

func (x *AddWorkspaceMemberRequest) ProtoReflect() protoreflect.Message

func (*AddWorkspaceMemberRequest) Reset 

func (x *AddWorkspaceMemberRequest) Reset()

func (*AddWorkspaceMemberRequest) String 

func (x *AddWorkspaceMemberRequest) String() string

type AddWorkspaceMemberResponse 

type AddWorkspaceMemberResponse struct {
	Member *WorkspaceMember `protobuf:"bytes,1,opt,name=member,proto3" json:"member,omitempty"`
	// contains filtered or unexported fields
}

Add workspace member response.

func (*AddWorkspaceMemberResponse) Descriptor deprecated 

func (*AddWorkspaceMemberResponse) Descriptor() ([]byte, []int)

Deprecated: Use AddWorkspaceMemberResponse.ProtoReflect.Descriptor instead.

func (*AddWorkspaceMemberResponse) GetMember 

func (x *AddWorkspaceMemberResponse) GetMember() *WorkspaceMember

func (*AddWorkspaceMemberResponse) ProtoMessage 

func (*AddWorkspaceMemberResponse) ProtoMessage()

func (*AddWorkspaceMemberResponse) ProtoReflect 

func (x *AddWorkspaceMemberResponse) ProtoReflect() protoreflect.Message

func (*AddWorkspaceMemberResponse) Reset 

func (x *AddWorkspaceMemberResponse) Reset()

func (*AddWorkspaceMemberResponse) String 

func (x *AddWorkspaceMemberResponse) String() string

type ApproveAllDraftChunksRequest 

type ApproveAllDraftChunksRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Include chunks with security_notes (default false: skips them).
	IncludeSecurityFlagged bool `` /* 130-byte string literal not displayed */
	// Exact reviewed chunks and tokens. The server validates them against one
	// live snapshot, stages compatible operations in order, and writes once.
	Approvals []*DraftChunkApproval `protobuf:"bytes,3,rep,name=approvals,proto3" json:"approvals,omitempty"`
	Sandbox   string                `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

func (*ApproveAllDraftChunksRequest) Descriptor deprecated 

func (*ApproveAllDraftChunksRequest) Descriptor() ([]byte, []int)

Deprecated: Use ApproveAllDraftChunksRequest.ProtoReflect.Descriptor instead.

func (*ApproveAllDraftChunksRequest) GetApprovals 

func (x *ApproveAllDraftChunksRequest) GetApprovals() []*DraftChunkApproval

func (*ApproveAllDraftChunksRequest) GetIncludeSecurityFlagged 

func (x *ApproveAllDraftChunksRequest) GetIncludeSecurityFlagged() bool

func (*ApproveAllDraftChunksRequest) GetRequestId 

func (x *ApproveAllDraftChunksRequest) GetRequestId() string

func (*ApproveAllDraftChunksRequest) GetSandbox 

func (x *ApproveAllDraftChunksRequest) GetSandbox() string

func (*ApproveAllDraftChunksRequest) GetWorkspaceScope 

func (x *ApproveAllDraftChunksRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ApproveAllDraftChunksRequest) ProtoMessage 

func (*ApproveAllDraftChunksRequest) ProtoMessage()

func (*ApproveAllDraftChunksRequest) ProtoReflect 

func (x *ApproveAllDraftChunksRequest) ProtoReflect() protoreflect.Message

func (*ApproveAllDraftChunksRequest) Reset 

func (x *ApproveAllDraftChunksRequest) Reset()

func (*ApproveAllDraftChunksRequest) String 

func (x *ApproveAllDraftChunksRequest) String() string

type ApproveAllDraftChunksResponse 

type ApproveAllDraftChunksResponse struct {

	// New policy version after merge.
	PolicyVersion uint32 `protobuf:"varint,1,opt,name=policy_version,json=policyVersion,proto3" json:"policy_version,omitempty"`
	// SHA-256 hash of the new policy.
	PolicyHash string `protobuf:"bytes,2,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// Number of chunks approved.
	ChunksApproved uint32 `protobuf:"varint,3,opt,name=chunks_approved,json=chunksApproved,proto3" json:"chunks_approved,omitempty"`
	// Number of chunks skipped for any reason, including security flags,
	// stale or invalid candidates, and conflicts within the staged batch.
	ChunksSkipped uint32 `protobuf:"varint,4,opt,name=chunks_skipped,json=chunksSkipped,proto3" json:"chunks_skipped,omitempty"`
	// contains filtered or unexported fields
}

func (*ApproveAllDraftChunksResponse) Descriptor deprecated 

func (*ApproveAllDraftChunksResponse) Descriptor() ([]byte, []int)

Deprecated: Use ApproveAllDraftChunksResponse.ProtoReflect.Descriptor instead.

func (*ApproveAllDraftChunksResponse) GetChunksApproved 

func (x *ApproveAllDraftChunksResponse) GetChunksApproved() uint32

func (*ApproveAllDraftChunksResponse) GetChunksSkipped 

func (x *ApproveAllDraftChunksResponse) GetChunksSkipped() uint32

func (*ApproveAllDraftChunksResponse) GetPolicyHash 

func (x *ApproveAllDraftChunksResponse) GetPolicyHash() string

func (*ApproveAllDraftChunksResponse) GetPolicyVersion 

func (x *ApproveAllDraftChunksResponse) GetPolicyVersion() uint32

func (*ApproveAllDraftChunksResponse) ProtoMessage 

func (*ApproveAllDraftChunksResponse) ProtoMessage()

func (*ApproveAllDraftChunksResponse) ProtoReflect 

func (x *ApproveAllDraftChunksResponse) ProtoReflect() protoreflect.Message

func (*ApproveAllDraftChunksResponse) Reset 

func (x *ApproveAllDraftChunksResponse) Reset()

func (*ApproveAllDraftChunksResponse) String 

func (x *ApproveAllDraftChunksResponse) String() string

type ApproveDraftChunkRequest 

type ApproveDraftChunkRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Chunk ID to approve.
	ChunkId string `protobuf:"bytes,2,opt,name=chunk_id,json=chunkId,proto3" json:"chunk_id,omitempty"`
	// Token returned with the reviewed PolicyChunk. Approval fails with
	// FAILED_PRECONDITION if live decision inputs no longer match it.
	ReviewToken string `protobuf:"bytes,4,opt,name=review_token,json=reviewToken,proto3" json:"review_token,omitempty"`
	Sandbox     string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Approve a single draft chunk.

func (*ApproveDraftChunkRequest) Descriptor deprecated 

func (*ApproveDraftChunkRequest) Descriptor() ([]byte, []int)

Deprecated: Use ApproveDraftChunkRequest.ProtoReflect.Descriptor instead.

func (*ApproveDraftChunkRequest) GetChunkId 

func (x *ApproveDraftChunkRequest) GetChunkId() string

func (*ApproveDraftChunkRequest) GetRequestId 

func (x *ApproveDraftChunkRequest) GetRequestId() string

func (*ApproveDraftChunkRequest) GetReviewToken 

func (x *ApproveDraftChunkRequest) GetReviewToken() string

func (*ApproveDraftChunkRequest) GetSandbox 

func (x *ApproveDraftChunkRequest) GetSandbox() string

func (*ApproveDraftChunkRequest) GetWorkspaceScope 

func (x *ApproveDraftChunkRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ApproveDraftChunkRequest) ProtoMessage 

func (*ApproveDraftChunkRequest) ProtoMessage()

func (*ApproveDraftChunkRequest) ProtoReflect 

func (x *ApproveDraftChunkRequest) ProtoReflect() protoreflect.Message

func (*ApproveDraftChunkRequest) Reset 

func (x *ApproveDraftChunkRequest) Reset()

func (*ApproveDraftChunkRequest) String 

func (x *ApproveDraftChunkRequest) String() string

type ApproveDraftChunkResponse 

type ApproveDraftChunkResponse struct {

	// New policy version after merge.
	PolicyVersion uint32 `protobuf:"varint,1,opt,name=policy_version,json=policyVersion,proto3" json:"policy_version,omitempty"`
	// SHA-256 hash of the new policy.
	PolicyHash string `protobuf:"bytes,2,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// contains filtered or unexported fields
}

func (*ApproveDraftChunkResponse) Descriptor deprecated 

func (*ApproveDraftChunkResponse) Descriptor() ([]byte, []int)

Deprecated: Use ApproveDraftChunkResponse.ProtoReflect.Descriptor instead.

func (*ApproveDraftChunkResponse) GetPolicyHash 

func (x *ApproveDraftChunkResponse) GetPolicyHash() string

func (*ApproveDraftChunkResponse) GetPolicyVersion 

func (x *ApproveDraftChunkResponse) GetPolicyVersion() uint32

func (*ApproveDraftChunkResponse) ProtoMessage 

func (*ApproveDraftChunkResponse) ProtoMessage()

func (*ApproveDraftChunkResponse) ProtoReflect 

func (x *ApproveDraftChunkResponse) ProtoReflect() protoreflect.Message

func (*ApproveDraftChunkResponse) Reset 

func (x *ApproveDraftChunkResponse) Reset()

func (*ApproveDraftChunkResponse) String 

func (x *ApproveDraftChunkResponse) String() string

type AttachSandboxProviderRequest 

type AttachSandboxProviderRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Sandbox        string                         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Provider name to attach.
	Provider string `protobuf:"bytes,2,opt,name=provider,proto3" json:"provider,omitempty"`
	// Expected resource version for optimistic concurrency control.
	// If 0, the server uses the current version (backward compatibility).
	// If non-zero, the server validates that the sandbox's current resource_version
	// matches this value before applying the mutation, returning ABORTED on mismatch.
	ExpectedResourceVersion uint64 `` /* 133-byte string literal not displayed */
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Attach provider to sandbox request.

func (*AttachSandboxProviderRequest) Descriptor deprecated 

func (*AttachSandboxProviderRequest) Descriptor() ([]byte, []int)

Deprecated: Use AttachSandboxProviderRequest.ProtoReflect.Descriptor instead.

func (*AttachSandboxProviderRequest) GetExpectedResourceVersion 

func (x *AttachSandboxProviderRequest) GetExpectedResourceVersion() uint64

func (*AttachSandboxProviderRequest) GetProvider 

func (x *AttachSandboxProviderRequest) GetProvider() string

func (*AttachSandboxProviderRequest) GetRequestId 

func (x *AttachSandboxProviderRequest) GetRequestId() string

func (*AttachSandboxProviderRequest) GetSandbox 

func (x *AttachSandboxProviderRequest) GetSandbox() string

func (*AttachSandboxProviderRequest) GetWorkspaceScope 

func (x *AttachSandboxProviderRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*AttachSandboxProviderRequest) ProtoMessage 

func (*AttachSandboxProviderRequest) ProtoMessage()

func (*AttachSandboxProviderRequest) ProtoReflect 

func (x *AttachSandboxProviderRequest) ProtoReflect() protoreflect.Message

func (*AttachSandboxProviderRequest) Reset 

func (x *AttachSandboxProviderRequest) Reset()

func (*AttachSandboxProviderRequest) String 

func (x *AttachSandboxProviderRequest) String() string

type AttachSandboxProviderResponse 

type AttachSandboxProviderResponse struct {
	Sandbox *Sandbox `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// True when the provider was newly attached. False means it was already attached.
	Attached bool `protobuf:"varint,2,opt,name=attached,proto3" json:"attached,omitempty"`
	// Persisted intent; readiness requires current supervisor observations.
	Receipt *ProviderMutationReceipt `protobuf:"bytes,3,opt,name=receipt,proto3" json:"receipt,omitempty"`
	// contains filtered or unexported fields
}

Attach provider to sandbox response.

func (*AttachSandboxProviderResponse) Descriptor deprecated 

func (*AttachSandboxProviderResponse) Descriptor() ([]byte, []int)

Deprecated: Use AttachSandboxProviderResponse.ProtoReflect.Descriptor instead.

func (*AttachSandboxProviderResponse) GetAttached 

func (x *AttachSandboxProviderResponse) GetAttached() bool

func (*AttachSandboxProviderResponse) GetReceipt 

func (x *AttachSandboxProviderResponse) GetReceipt() *ProviderMutationReceipt

func (*AttachSandboxProviderResponse) GetSandbox 

func (x *AttachSandboxProviderResponse) GetSandbox() *Sandbox

func (*AttachSandboxProviderResponse) ProtoMessage 

func (*AttachSandboxProviderResponse) ProtoMessage()

func (*AttachSandboxProviderResponse) ProtoReflect 

func (x *AttachSandboxProviderResponse) ProtoReflect() protoreflect.Message

func (*AttachSandboxProviderResponse) Reset 

func (x *AttachSandboxProviderResponse) Reset()

func (*AttachSandboxProviderResponse) String 

func (x *AttachSandboxProviderResponse) String() string

type BeginRootfsTarStagingRequest 

type BeginRootfsTarStagingRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Base file name of the local archive. The gateway uses it only to name the
	// staged file; path separators and traversal components are rejected.
	FileName string `protobuf:"bytes,1,opt,name=file_name,json=fileName,proto3" json:"file_name,omitempty"`
	// Size of the local archive in bytes, checked against the driver limit
	// before the gateway allocates a slot.
	SizeBytes uint64 `protobuf:"varint,2,opt,name=size_bytes,json=sizeBytes,proto3" json:"size_bytes,omitempty"`
	// contains filtered or unexported fields
}

Request a gateway-owned staging slot for a local rootfs tar archive.

func (*BeginRootfsTarStagingRequest) Descriptor deprecated 

func (*BeginRootfsTarStagingRequest) Descriptor() ([]byte, []int)

Deprecated: Use BeginRootfsTarStagingRequest.ProtoReflect.Descriptor instead.

func (*BeginRootfsTarStagingRequest) GetFileName 

func (x *BeginRootfsTarStagingRequest) GetFileName() string

func (*BeginRootfsTarStagingRequest) GetSizeBytes 

func (x *BeginRootfsTarStagingRequest) GetSizeBytes() uint64

func (*BeginRootfsTarStagingRequest) GetWorkspaceScope 

func (x *BeginRootfsTarStagingRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*BeginRootfsTarStagingRequest) ProtoMessage 

func (*BeginRootfsTarStagingRequest) ProtoMessage()

func (*BeginRootfsTarStagingRequest) ProtoReflect 

func (x *BeginRootfsTarStagingRequest) ProtoReflect() protoreflect.Message

func (*BeginRootfsTarStagingRequest) Reset 

func (x *BeginRootfsTarStagingRequest) Reset()

func (*BeginRootfsTarStagingRequest) String 

func (x *BeginRootfsTarStagingRequest) String() string

type BeginRootfsTarStagingResponse 

type BeginRootfsTarStagingResponse struct {

	// Opaque single-use token. Pass it as
	// `template.driver_config.<driver>.rootfs_tar_staging_token` on
	// CreateSandbox. The first CreateSandbox presenting it consumes it.
	StagingToken string `protobuf:"bytes,1,opt,name=staging_token,json=stagingToken,proto3" json:"staging_token,omitempty"`
	// Absolute path on the gateway host the client must write the archive to.
	UploadPath string `protobuf:"bytes,2,opt,name=upload_path,json=uploadPath,proto3" json:"upload_path,omitempty"`
	// Maximum accepted archive size in bytes, enforced again by the driver.
	MaxBytes uint64 `protobuf:"varint,3,opt,name=max_bytes,json=maxBytes,proto3" json:"max_bytes,omitempty"`
	// Wall-clock deadline after which the gateway reclaims the slot.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,104,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// contains filtered or unexported fields
}

Gateway-issued staging slot.

func (*BeginRootfsTarStagingResponse) Descriptor deprecated 

func (*BeginRootfsTarStagingResponse) Descriptor() ([]byte, []int)

Deprecated: Use BeginRootfsTarStagingResponse.ProtoReflect.Descriptor instead.

func (*BeginRootfsTarStagingResponse) GetExpirationTime 

func (x *BeginRootfsTarStagingResponse) GetExpirationTime() *timestamppb.Timestamp

func (*BeginRootfsTarStagingResponse) GetMaxBytes 

func (x *BeginRootfsTarStagingResponse) GetMaxBytes() uint64

func (*BeginRootfsTarStagingResponse) GetStagingToken 

func (x *BeginRootfsTarStagingResponse) GetStagingToken() string

func (*BeginRootfsTarStagingResponse) GetUploadPath 

func (x *BeginRootfsTarStagingResponse) GetUploadPath() string

func (*BeginRootfsTarStagingResponse) ProtoMessage 

func (*BeginRootfsTarStagingResponse) ProtoMessage()

func (*BeginRootfsTarStagingResponse) ProtoReflect 

func (x *BeginRootfsTarStagingResponse) ProtoReflect() protoreflect.Message

func (*BeginRootfsTarStagingResponse) Reset 

func (x *BeginRootfsTarStagingResponse) Reset()

func (*BeginRootfsTarStagingResponse) String 

func (x *BeginRootfsTarStagingResponse) String() string

type ClearDraftChunksRequest 

type ClearDraftChunksRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Sandbox        string                         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Clear all pending draft chunks for a sandbox.

func (*ClearDraftChunksRequest) Descriptor deprecated 

func (*ClearDraftChunksRequest) Descriptor() ([]byte, []int)

Deprecated: Use ClearDraftChunksRequest.ProtoReflect.Descriptor instead.

func (*ClearDraftChunksRequest) GetRequestId 

func (x *ClearDraftChunksRequest) GetRequestId() string

func (*ClearDraftChunksRequest) GetSandbox 

func (x *ClearDraftChunksRequest) GetSandbox() string

func (*ClearDraftChunksRequest) GetWorkspaceScope 

func (x *ClearDraftChunksRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ClearDraftChunksRequest) ProtoMessage 

func (*ClearDraftChunksRequest) ProtoMessage()

func (*ClearDraftChunksRequest) ProtoReflect 

func (x *ClearDraftChunksRequest) ProtoReflect() protoreflect.Message

func (*ClearDraftChunksRequest) Reset 

func (x *ClearDraftChunksRequest) Reset()

func (*ClearDraftChunksRequest) String 

func (x *ClearDraftChunksRequest) String() string

type ClearDraftChunksResponse 

type ClearDraftChunksResponse struct {

	// Number of chunks cleared.
	ChunksCleared uint32 `protobuf:"varint,1,opt,name=chunks_cleared,json=chunksCleared,proto3" json:"chunks_cleared,omitempty"`
	// contains filtered or unexported fields
}

func (*ClearDraftChunksResponse) Descriptor deprecated 

func (*ClearDraftChunksResponse) Descriptor() ([]byte, []int)

Deprecated: Use ClearDraftChunksResponse.ProtoReflect.Descriptor instead.

func (*ClearDraftChunksResponse) GetChunksCleared 

func (x *ClearDraftChunksResponse) GetChunksCleared() uint32

func (*ClearDraftChunksResponse) ProtoMessage 

func (*ClearDraftChunksResponse) ProtoMessage()

func (*ClearDraftChunksResponse) ProtoReflect 

func (x *ClearDraftChunksResponse) ProtoReflect() protoreflect.Message

func (*ClearDraftChunksResponse) Reset 

func (x *ClearDraftChunksResponse) Reset()

func (*ClearDraftChunksResponse) String 

func (x *ClearDraftChunksResponse) String() string

type ComputeDriverCapabilities 

type ComputeDriverCapabilities struct {

	// Driver-reported human-readable name from the startup capability snapshot.
	DriverName string `protobuf:"bytes,1,opt,name=driver_name,json=driverName,proto3" json:"driver_name,omitempty"`
	// Driver-reported implementation version from the startup capability snapshot.
	DriverVersion string `protobuf:"bytes,2,opt,name=driver_version,json=driverVersion,proto3" json:"driver_version,omitempty"`
	// Static portable resource request forms reported by the driver.
	ResourceCapabilities *ResourceCapabilities `protobuf:"bytes,3,opt,name=resource_capabilities,json=resourceCapabilities,proto3" json:"resource_capabilities,omitempty"`
	// contains filtered or unexported fields
}

Public compute driver capability snapshot.

func (*ComputeDriverCapabilities) Descriptor deprecated 

func (*ComputeDriverCapabilities) Descriptor() ([]byte, []int)

Deprecated: Use ComputeDriverCapabilities.ProtoReflect.Descriptor instead.

func (*ComputeDriverCapabilities) GetDriverName 

func (x *ComputeDriverCapabilities) GetDriverName() string

func (*ComputeDriverCapabilities) GetDriverVersion 

func (x *ComputeDriverCapabilities) GetDriverVersion() string

func (*ComputeDriverCapabilities) GetResourceCapabilities 

func (x *ComputeDriverCapabilities) GetResourceCapabilities() *ResourceCapabilities

func (*ComputeDriverCapabilities) ProtoMessage 

func (*ComputeDriverCapabilities) ProtoMessage()

func (*ComputeDriverCapabilities) ProtoReflect 

func (x *ComputeDriverCapabilities) ProtoReflect() protoreflect.Message

func (*ComputeDriverCapabilities) Reset 

func (x *ComputeDriverCapabilities) Reset()

func (*ComputeDriverCapabilities) String 

func (x *ComputeDriverCapabilities) String() string

type ComputeDriverInfo 

type ComputeDriverInfo struct {

	// Gateway-selected driver name used for routing and driver_config keys.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Capabilities reported by the driver during gateway runtime initialization.
	Capabilities *ComputeDriverCapabilities `protobuf:"bytes,2,opt,name=capabilities,proto3" json:"capabilities,omitempty"`
	// contains filtered or unexported fields
}

Info for one initialized compute driver runtime.

func (*ComputeDriverInfo) Descriptor deprecated 

func (*ComputeDriverInfo) Descriptor() ([]byte, []int)

Deprecated: Use ComputeDriverInfo.ProtoReflect.Descriptor instead.

func (*ComputeDriverInfo) GetCapabilities 

func (x *ComputeDriverInfo) GetCapabilities() *ComputeDriverCapabilities

func (*ComputeDriverInfo) GetName 

func (x *ComputeDriverInfo) GetName() string

func (*ComputeDriverInfo) ProtoMessage 

func (*ComputeDriverInfo) ProtoMessage()

func (*ComputeDriverInfo) ProtoReflect 

func (x *ComputeDriverInfo) ProtoReflect() protoreflect.Message

func (*ComputeDriverInfo) Reset 

func (x *ComputeDriverInfo) Reset()

func (*ComputeDriverInfo) String 

func (x *ComputeDriverInfo) String() string

type ConfigApplyFailure 

type ConfigApplyFailure struct {
	Code      string `protobuf:"bytes,1,opt,name=code,proto3" json:"code,omitempty"`
	Message   string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	Retryable bool   `protobuf:"varint,3,opt,name=retryable,proto3" json:"retryable,omitempty"`
	// contains filtered or unexported fields
}

Sanitized application failure. Messages must not contain configuration payloads, credentials, or provider values.

func (*ConfigApplyFailure) Descriptor deprecated 

func (*ConfigApplyFailure) Descriptor() ([]byte, []int)

Deprecated: Use ConfigApplyFailure.ProtoReflect.Descriptor instead.

func (*ConfigApplyFailure) GetCode 

func (x *ConfigApplyFailure) GetCode() string

func (*ConfigApplyFailure) GetMessage 

func (x *ConfigApplyFailure) GetMessage() string

func (*ConfigApplyFailure) GetRetryable 

func (x *ConfigApplyFailure) GetRetryable() bool

func (*ConfigApplyFailure) ProtoMessage 

func (*ConfigApplyFailure) ProtoMessage()

func (*ConfigApplyFailure) ProtoReflect 

func (x *ConfigApplyFailure) ProtoReflect() protoreflect.Message

func (*ConfigApplyFailure) Reset 

func (x *ConfigApplyFailure) Reset()

func (*ConfigApplyFailure) String 

func (x *ConfigApplyFailure) String() string

type ConfigApplyOutcome 

type ConfigApplyOutcome int32

Result of applying a component revision at its owning runtime boundary. 

const (
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_UNSPECIFIED                     ConfigApplyOutcome = 0
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_APPLIED                         ConfigApplyOutcome = 1
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_IGNORED_DUPLICATE               ConfigApplyOutcome = 2
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_IGNORED_STALE                   ConfigApplyOutcome = 3
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_RETAINED_LOCAL_OVERRIDE         ConfigApplyOutcome = 4
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_DEGRADED                        ConfigApplyOutcome = 5
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_FAILED_RETAINED_LAST_KNOWN_GOOD ConfigApplyOutcome = 6
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_FAILED_CLOSED                   ConfigApplyOutcome = 7
	ConfigApplyOutcome_CONFIG_APPLY_OUTCOME_UNSUPPORTED                     ConfigApplyOutcome = 8
)

func (ConfigApplyOutcome) Descriptor 

func (ConfigApplyOutcome) Descriptor() protoreflect.EnumDescriptor

func (ConfigApplyOutcome) Enum 

func (x ConfigApplyOutcome) Enum() *ConfigApplyOutcome

func (ConfigApplyOutcome) EnumDescriptor deprecated 

func (ConfigApplyOutcome) EnumDescriptor() ([]byte, []int)

Deprecated: Use ConfigApplyOutcome.Descriptor instead.

func (ConfigApplyOutcome) Number 

func (x ConfigApplyOutcome) Number() protoreflect.EnumNumber

func (ConfigApplyOutcome) String 

func (x ConfigApplyOutcome) String() string

func (ConfigApplyOutcome) Type 

func (ConfigApplyOutcome) Type() protoreflect.EnumType

type ConfigComponent 

type ConfigComponent int32

Component whose desired state is tracked by a durable update operation. 

const (
	ConfigComponent_CONFIG_COMPONENT_UNSPECIFIED          ConfigComponent = 0
	ConfigComponent_CONFIG_COMPONENT_SANDBOX_CONFIG       ConfigComponent = 1
	ConfigComponent_CONFIG_COMPONENT_PROVIDER_ENVIRONMENT ConfigComponent = 2
)

func (ConfigComponent) Descriptor 

func (ConfigComponent) Descriptor() protoreflect.EnumDescriptor

func (ConfigComponent) Enum 

func (x ConfigComponent) Enum() *ConfigComponent

func (ConfigComponent) EnumDescriptor deprecated 

func (ConfigComponent) EnumDescriptor() ([]byte, []int)

Deprecated: Use ConfigComponent.Descriptor instead.

func (ConfigComponent) Number 

func (x ConfigComponent) Number() protoreflect.EnumNumber

func (ConfigComponent) String 

func (x ConfigComponent) String() string

func (ConfigComponent) Type 

func (ConfigComponent) Type() protoreflect.EnumType

type ConfigSnapshotRevision 

type ConfigSnapshotRevision struct {

	// Types that are valid to be assigned to Component:
	//
	//	*ConfigSnapshotRevision_SandboxConfig
	//	*ConfigSnapshotRevision_ProviderEnvironment
	//	*ConfigSnapshotRevision_ProviderTarget
	Component isConfigSnapshotRevision_Component `protobuf_oneof:"component"`
	// contains filtered or unexported fields
}

Identifies one component snapshot revision. Revisions are equality tokens, not members of one shared ordering domain.

func (*ConfigSnapshotRevision) Descriptor deprecated 

func (*ConfigSnapshotRevision) Descriptor() ([]byte, []int)

Deprecated: Use ConfigSnapshotRevision.ProtoReflect.Descriptor instead.

func (*ConfigSnapshotRevision) GetComponent 

func (x *ConfigSnapshotRevision) GetComponent() isConfigSnapshotRevision_Component

func (*ConfigSnapshotRevision) GetProviderEnvironment 

func (x *ConfigSnapshotRevision) GetProviderEnvironment() uint64

func (*ConfigSnapshotRevision) GetProviderTarget 

func (x *ConfigSnapshotRevision) GetProviderTarget() *ProviderDesiredIdentity

func (*ConfigSnapshotRevision) GetSandboxConfig 

func (x *ConfigSnapshotRevision) GetSandboxConfig() *SandboxConfigRevision

func (*ConfigSnapshotRevision) ProtoMessage 

func (*ConfigSnapshotRevision) ProtoMessage()

func (*ConfigSnapshotRevision) ProtoReflect 

func (x *ConfigSnapshotRevision) ProtoReflect() protoreflect.Message

func (*ConfigSnapshotRevision) Reset 

func (x *ConfigSnapshotRevision) Reset()

func (*ConfigSnapshotRevision) String 

func (x *ConfigSnapshotRevision) String() string

type ConfigSnapshotRevision_ProviderEnvironment 

type ConfigSnapshotRevision_ProviderEnvironment struct {
	ProviderEnvironment uint64 `protobuf:"varint,2,opt,name=provider_environment,json=providerEnvironment,proto3,oneof"`
}

type ConfigSnapshotRevision_ProviderTarget 

type ConfigSnapshotRevision_ProviderTarget struct {
	// Complete desired authority for one sandbox-scoped provider mutation.
	ProviderTarget *ProviderDesiredIdentity `protobuf:"bytes,3,opt,name=provider_target,json=providerTarget,proto3,oneof"`
}

type ConfigSnapshotRevision_SandboxConfig 

type ConfigSnapshotRevision_SandboxConfig struct {
	SandboxConfig *SandboxConfigRevision `protobuf:"bytes,1,opt,name=sandbox_config,json=sandboxConfig,proto3,oneof"`
}

type ConfigUpdate 

type ConfigUpdate struct {

	// Opaque non-empty identifier scoped to the active supervisor session.
	UpdateId      string                           `protobuf:"bytes,1,opt,name=update_id,json=updateId,proto3" json:"update_id,omitempty"`
	SandboxConfig *sandboxv1.SandboxConfigSnapshot `protobuf:"bytes,2,opt,name=sandbox_config,json=sandboxConfig,proto3" json:"sandbox_config,omitempty"`
	// The provider environment the sandbox configuration names through its
	// provider revision, attachment epoch, and policy hash.
	ProviderEnvironment *ProviderEnvironmentSnapshot `protobuf:"bytes,3,opt,name=provider_environment,json=providerEnvironment,proto3" json:"provider_environment,omitempty"`
	// contains filtered or unexported fields
}

Complete gateway-owned configuration for a supervisor session. Each update replaces the previous one. The supervisor applies the two parts together and answers every update with one ConfigUpdateResult before the gateway sends the next.

func (*ConfigUpdate) Descriptor deprecated 

func (*ConfigUpdate) Descriptor() ([]byte, []int)

Deprecated: Use ConfigUpdate.ProtoReflect.Descriptor instead.

func (*ConfigUpdate) GetProviderEnvironment 

func (x *ConfigUpdate) GetProviderEnvironment() *ProviderEnvironmentSnapshot

func (*ConfigUpdate) GetSandboxConfig 

func (x *ConfigUpdate) GetSandboxConfig() *sandboxv1.SandboxConfigSnapshot

func (*ConfigUpdate) GetUpdateId 

func (x *ConfigUpdate) GetUpdateId() string

func (*ConfigUpdate) ProtoMessage 

func (*ConfigUpdate) ProtoMessage()

func (*ConfigUpdate) ProtoReflect 

func (x *ConfigUpdate) ProtoReflect() protoreflect.Message

func (*ConfigUpdate) Reset 

func (x *ConfigUpdate) Reset()

func (*ConfigUpdate) String 

func (x *ConfigUpdate) String() string

type ConfigUpdateOperation 

type ConfigUpdateOperation struct {
	OperationId    string                     `protobuf:"bytes,1,opt,name=operation_id,json=operationId,proto3" json:"operation_id,omitempty"`
	SandboxId      string                     `protobuf:"bytes,2,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	Component      ConfigComponent            `protobuf:"varint,3,opt,name=component,proto3,enum=openshell.v1.ConfigComponent" json:"component,omitempty"`
	TargetRevision *ConfigSnapshotRevision    `protobuf:"bytes,4,opt,name=target_revision,json=targetRevision,proto3" json:"target_revision,omitempty"`
	State          ConfigUpdateOperationState `protobuf:"varint,5,opt,name=state,proto3,enum=openshell.v1.ConfigUpdateOperationState" json:"state,omitempty"`
	Outcome        ConfigApplyOutcome         `protobuf:"varint,6,opt,name=outcome,proto3,enum=openshell.v1.ConfigApplyOutcome" json:"outcome,omitempty"`
	SanitizedError string                     `protobuf:"bytes,7,opt,name=sanitized_error,json=sanitizedError,proto3" json:"sanitized_error,omitempty"`
	CreatedTime    *timestamppb.Timestamp     `protobuf:"bytes,108,opt,name=created_time,json=createdTime,proto3" json:"created_time,omitempty"`
	UpdatedTime    *timestamppb.Timestamp     `protobuf:"bytes,109,opt,name=updated_time,json=updatedTime,proto3" json:"updated_time,omitempty"`
	// Absent until the operation reaches a terminal state.
	CompletedTime *timestamppb.Timestamp `protobuf:"bytes,110,opt,name=completed_time,json=completedTime,proto3" json:"completed_time,omitempty"`
	// contains filtered or unexported fields
}

Durable progress for one sandbox-scoped desired-state mutation. Snapshot contents and credentials are never stored in this resource.

func (*ConfigUpdateOperation) Descriptor deprecated 

func (*ConfigUpdateOperation) Descriptor() ([]byte, []int)

Deprecated: Use ConfigUpdateOperation.ProtoReflect.Descriptor instead.

func (*ConfigUpdateOperation) GetCompletedTime 

func (x *ConfigUpdateOperation) GetCompletedTime() *timestamppb.Timestamp

func (*ConfigUpdateOperation) GetComponent 

func (x *ConfigUpdateOperation) GetComponent() ConfigComponent

func (*ConfigUpdateOperation) GetCreatedTime 

func (x *ConfigUpdateOperation) GetCreatedTime() *timestamppb.Timestamp

func (*ConfigUpdateOperation) GetOperationId 

func (x *ConfigUpdateOperation) GetOperationId() string

func (*ConfigUpdateOperation) GetOutcome 

func (x *ConfigUpdateOperation) GetOutcome() ConfigApplyOutcome

func (*ConfigUpdateOperation) GetSandboxId 

func (x *ConfigUpdateOperation) GetSandboxId() string

func (*ConfigUpdateOperation) GetSanitizedError 

func (x *ConfigUpdateOperation) GetSanitizedError() string

func (*ConfigUpdateOperation) GetState 

func (x *ConfigUpdateOperation) GetState() ConfigUpdateOperationState

func (*ConfigUpdateOperation) GetTargetRevision 

func (x *ConfigUpdateOperation) GetTargetRevision() *ConfigSnapshotRevision

func (*ConfigUpdateOperation) GetUpdatedTime 

func (x *ConfigUpdateOperation) GetUpdatedTime() *timestamppb.Timestamp

func (*ConfigUpdateOperation) ProtoMessage 

func (*ConfigUpdateOperation) ProtoMessage()

func (*ConfigUpdateOperation) ProtoReflect 

func (x *ConfigUpdateOperation) ProtoReflect() protoreflect.Message

func (*ConfigUpdateOperation) Reset 

func (x *ConfigUpdateOperation) Reset()

func (*ConfigUpdateOperation) String 

func (x *ConfigUpdateOperation) String() string

type ConfigUpdateOperationState 

type ConfigUpdateOperationState int32

Durable lifecycle of one desired-state update operation. 

const (
	ConfigUpdateOperationState_CONFIG_UPDATE_OPERATION_STATE_UNSPECIFIED ConfigUpdateOperationState = 0
	ConfigUpdateOperationState_CONFIG_UPDATE_OPERATION_STATE_PENDING     ConfigUpdateOperationState = 1
	ConfigUpdateOperationState_CONFIG_UPDATE_OPERATION_STATE_APPLIED     ConfigUpdateOperationState = 2
	ConfigUpdateOperationState_CONFIG_UPDATE_OPERATION_STATE_INACTIVE    ConfigUpdateOperationState = 3
	ConfigUpdateOperationState_CONFIG_UPDATE_OPERATION_STATE_FAILED      ConfigUpdateOperationState = 4
	ConfigUpdateOperationState_CONFIG_UPDATE_OPERATION_STATE_SUPERSEDED  ConfigUpdateOperationState = 5
	ConfigUpdateOperationState_CONFIG_UPDATE_OPERATION_STATE_CANCELLED   ConfigUpdateOperationState = 6
)

func (ConfigUpdateOperationState) Descriptor 

func (ConfigUpdateOperationState) Descriptor() protoreflect.EnumDescriptor

func (ConfigUpdateOperationState) Enum 

func (x ConfigUpdateOperationState) Enum() *ConfigUpdateOperationState

func (ConfigUpdateOperationState) EnumDescriptor deprecated 

func (ConfigUpdateOperationState) EnumDescriptor() ([]byte, []int)

Deprecated: Use ConfigUpdateOperationState.Descriptor instead.

func (ConfigUpdateOperationState) Number 

func (x ConfigUpdateOperationState) Number() protoreflect.EnumNumber

func (ConfigUpdateOperationState) String 

func (x ConfigUpdateOperationState) String() string

func (ConfigUpdateOperationState) Type 

func (ConfigUpdateOperationState) Type() protoreflect.EnumType

type ConfigUpdateResult 

type ConfigUpdateResult struct {

	// Echoes ConfigUpdate.update_id for session-local correlation.
	UpdateId string             `protobuf:"bytes,1,opt,name=update_id,json=updateId,proto3" json:"update_id,omitempty"`
	Outcome  ConfigApplyOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.ConfigApplyOutcome" json:"outcome,omitempty"`
	// Why the update did not take effect. Omitted when it did.
	Failure *ConfigApplyFailure `protobuf:"bytes,3,opt,name=failure,proto3" json:"failure,omitempty"`
	// Admission state of the delivered sandbox configuration.
	Admission *SandboxConfigurationAdmission `protobuf:"bytes,4,opt,name=admission,proto3" json:"admission,omitempty"`
	// Load result of the sandbox policy revision the update changed, as a
	// polling supervisor reports it with ReportPolicyStatus. Omitted when the
	// update did not change the sandbox policy.
	PolicyLoad *PolicyLoadResult `protobuf:"bytes,5,opt,name=policy_load,json=policyLoad,proto3" json:"policy_load,omitempty"`
	// contains filtered or unexported fields
}

Application result for one ConfigUpdate, including the bootstrap.

func (*ConfigUpdateResult) Descriptor deprecated 

func (*ConfigUpdateResult) Descriptor() ([]byte, []int)

Deprecated: Use ConfigUpdateResult.ProtoReflect.Descriptor instead.

func (*ConfigUpdateResult) GetAdmission 

func (x *ConfigUpdateResult) GetAdmission() *SandboxConfigurationAdmission

func (*ConfigUpdateResult) GetFailure 

func (x *ConfigUpdateResult) GetFailure() *ConfigApplyFailure

func (*ConfigUpdateResult) GetOutcome 

func (x *ConfigUpdateResult) GetOutcome() ConfigApplyOutcome

func (*ConfigUpdateResult) GetPolicyLoad 

func (x *ConfigUpdateResult) GetPolicyLoad() *PolicyLoadResult

func (*ConfigUpdateResult) GetUpdateId 

func (x *ConfigUpdateResult) GetUpdateId() string

func (*ConfigUpdateResult) ProtoMessage 

func (*ConfigUpdateResult) ProtoMessage()

func (*ConfigUpdateResult) ProtoReflect 

func (x *ConfigUpdateResult) ProtoReflect() protoreflect.Message

func (*ConfigUpdateResult) Reset 

func (x *ConfigUpdateResult) Reset()

func (*ConfigUpdateResult) String 

func (x *ConfigUpdateResult) String() string

type ConfigurationAdmissionState 

type ConfigurationAdmissionState int32
const (
	ConfigurationAdmissionState_CONFIGURATION_ADMISSION_STATE_UNSPECIFIED ConfigurationAdmissionState = 0
	ConfigurationAdmissionState_CONFIGURATION_ADMISSION_STATE_PENDING     ConfigurationAdmissionState = 1
	ConfigurationAdmissionState_CONFIGURATION_ADMISSION_STATE_ACCEPTED    ConfigurationAdmissionState = 2
	ConfigurationAdmissionState_CONFIGURATION_ADMISSION_STATE_REJECTED    ConfigurationAdmissionState = 3
)

func (ConfigurationAdmissionState) Descriptor 

func (ConfigurationAdmissionState) Descriptor() protoreflect.EnumDescriptor

func (ConfigurationAdmissionState) Enum 

func (x ConfigurationAdmissionState) Enum() *ConfigurationAdmissionState

func (ConfigurationAdmissionState) EnumDescriptor deprecated 

func (ConfigurationAdmissionState) EnumDescriptor() ([]byte, []int)

Deprecated: Use ConfigurationAdmissionState.Descriptor instead.

func (ConfigurationAdmissionState) Number 

func (x ConfigurationAdmissionState) Number() protoreflect.EnumNumber

func (ConfigurationAdmissionState) String 

func (x ConfigurationAdmissionState) String() string

func (ConfigurationAdmissionState) Type 

func (ConfigurationAdmissionState) Type() protoreflect.EnumType

type ConfigureProviderRefreshRequest 

type ConfigureProviderRefreshRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector    `protobuf:"bytes,7,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Provider       string                            `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	CredentialKey  string                            `protobuf:"bytes,2,opt,name=credential_key,json=credentialKey,proto3" json:"credential_key,omitempty"`
	Strategy       ProviderCredentialRefreshStrategy `protobuf:"varint,3,opt,name=strategy,proto3,enum=openshell.v1.ProviderCredentialRefreshStrategy" json:"strategy,omitempty"`
	Material       map[string]string                 `` /* 143-byte string literal not displayed */
	// Additional material names the caller requests be stored as secrets. Every
	// name must be present in material. The server also classifies secrets from
	// the authoritative provider profile and refresh strategy.
	SecretMaterialKeys []string               `protobuf:"bytes,5,rep,name=secret_material_keys,json=secretMaterialKeys,proto3" json:"secret_material_keys,omitempty"`
	ExpirationTime     *timestamppb.Timestamp `protobuf:"bytes,106,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,8,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

func (*ConfigureProviderRefreshRequest) Descriptor deprecated 

func (*ConfigureProviderRefreshRequest) Descriptor() ([]byte, []int)

Deprecated: Use ConfigureProviderRefreshRequest.ProtoReflect.Descriptor instead.

func (*ConfigureProviderRefreshRequest) GetCredentialKey 

func (x *ConfigureProviderRefreshRequest) GetCredentialKey() string

func (*ConfigureProviderRefreshRequest) GetExpirationTime 

func (x *ConfigureProviderRefreshRequest) GetExpirationTime() *timestamppb.Timestamp

func (*ConfigureProviderRefreshRequest) GetMaterial 

func (x *ConfigureProviderRefreshRequest) GetMaterial() map[string]string

func (*ConfigureProviderRefreshRequest) GetProvider 

func (x *ConfigureProviderRefreshRequest) GetProvider() string

func (*ConfigureProviderRefreshRequest) GetRequestId 

func (x *ConfigureProviderRefreshRequest) GetRequestId() string

func (*ConfigureProviderRefreshRequest) GetSecretMaterialKeys 

func (x *ConfigureProviderRefreshRequest) GetSecretMaterialKeys() []string

func (*ConfigureProviderRefreshRequest) GetStrategy 

func (x *ConfigureProviderRefreshRequest) GetStrategy() ProviderCredentialRefreshStrategy

func (*ConfigureProviderRefreshRequest) GetWorkspaceScope 

func (x *ConfigureProviderRefreshRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ConfigureProviderRefreshRequest) ProtoMessage 

func (*ConfigureProviderRefreshRequest) ProtoMessage()

func (*ConfigureProviderRefreshRequest) ProtoReflect 

func (x *ConfigureProviderRefreshRequest) ProtoReflect() protoreflect.Message

func (*ConfigureProviderRefreshRequest) Reset 

func (x *ConfigureProviderRefreshRequest) Reset()

func (*ConfigureProviderRefreshRequest) String 

func (x *ConfigureProviderRefreshRequest) String() string

type ConfigureProviderRefreshResponse 

type ConfigureProviderRefreshResponse struct {
	Status *ProviderCredentialRefreshStatus `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

func (*ConfigureProviderRefreshResponse) Descriptor deprecated 

func (*ConfigureProviderRefreshResponse) Descriptor() ([]byte, []int)

Deprecated: Use ConfigureProviderRefreshResponse.ProtoReflect.Descriptor instead.

func (*ConfigureProviderRefreshResponse) GetStatus 

func (x *ConfigureProviderRefreshResponse) GetStatus() *ProviderCredentialRefreshStatus

func (*ConfigureProviderRefreshResponse) ProtoMessage 

func (*ConfigureProviderRefreshResponse) ProtoMessage()

func (*ConfigureProviderRefreshResponse) ProtoReflect 

func (x *ConfigureProviderRefreshResponse) ProtoReflect() protoreflect.Message

func (*ConfigureProviderRefreshResponse) Reset 

func (x *ConfigureProviderRefreshResponse) Reset()

func (*ConfigureProviderRefreshResponse) String 

func (x *ConfigureProviderRefreshResponse) String() string

type CpuResourceCapabilities 

type CpuResourceCapabilities struct {

	// The driver accepts and enforces a portable CPU limit.
	LimitSupported bool `protobuf:"varint,1,opt,name=limit_supported,json=limitSupported,proto3" json:"limit_supported,omitempty"`
	// contains filtered or unexported fields
}

func (*CpuResourceCapabilities) Descriptor deprecated 

func (*CpuResourceCapabilities) Descriptor() ([]byte, []int)

Deprecated: Use CpuResourceCapabilities.ProtoReflect.Descriptor instead.

func (*CpuResourceCapabilities) GetLimitSupported 

func (x *CpuResourceCapabilities) GetLimitSupported() bool

func (*CpuResourceCapabilities) ProtoMessage 

func (*CpuResourceCapabilities) ProtoMessage()

func (*CpuResourceCapabilities) ProtoReflect 

func (x *CpuResourceCapabilities) ProtoReflect() protoreflect.Message

func (*CpuResourceCapabilities) Reset 

func (x *CpuResourceCapabilities) Reset()

func (*CpuResourceCapabilities) String 

func (x *CpuResourceCapabilities) String() string

type CreateProviderRequest 

type CreateProviderRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Provider       *datamodelv1.Provider          `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Create provider request.

func (*CreateProviderRequest) Descriptor deprecated 

func (*CreateProviderRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateProviderRequest.ProtoReflect.Descriptor instead.

func (*CreateProviderRequest) GetProvider 

func (x *CreateProviderRequest) GetProvider() *datamodelv1.Provider

func (*CreateProviderRequest) GetRequestId 

func (x *CreateProviderRequest) GetRequestId() string

func (*CreateProviderRequest) GetWorkspaceScope 

func (x *CreateProviderRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*CreateProviderRequest) ProtoMessage 

func (*CreateProviderRequest) ProtoMessage()

func (*CreateProviderRequest) ProtoReflect 

func (x *CreateProviderRequest) ProtoReflect() protoreflect.Message

func (*CreateProviderRequest) Reset 

func (x *CreateProviderRequest) Reset()

func (*CreateProviderRequest) String 

func (x *CreateProviderRequest) String() string

type CreateSandboxRequest 

type CreateSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,7,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Spec           *SandboxSpec                   `protobuf:"bytes,1,opt,name=spec,proto3" json:"spec,omitempty"`
	// Optional user-supplied sandbox name. When empty the server generates one.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Optional labels for the sandbox (key-value metadata).
	Labels map[string]string `` /* 139-byte string literal not displayed */
	// Optional annotations for the sandbox (non-selector metadata). Keys under
	// the `internal.openshell.ai/` prefix are reserved for the gateway.
	Annotations map[string]string `` /* 149-byte string literal not displayed */
	// One-shot launch hint indicating that the creating client will attach to
	// the canonical main process. The supervisor keeps the terminal transport
	// alive until that attachment connects and closes naturally.
	AwaitMainProcessAttachment bool `` /* 144-byte string literal not displayed */
	// Workspace-scoped SandboxWorkloadTemplate name to resolve at creation time.
	WorkloadTemplate string `protobuf:"bytes,6,opt,name=workload_template,json=workloadTemplate,proto3" json:"workload_template,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,8,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// HTTP services to expose when the sandbox is created. Endpoints are
	// registered after the sandbox has been persisted and route only while the
	// sandbox is ready.
	ServiceExposures []*SandboxServiceExposure `protobuf:"bytes,9,rep,name=service_exposures,json=serviceExposures,proto3" json:"service_exposures,omitempty"`
	// contains filtered or unexported fields
}

Create sandbox request.

func (*CreateSandboxRequest) Descriptor deprecated 

func (*CreateSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateSandboxRequest.ProtoReflect.Descriptor instead.

func (*CreateSandboxRequest) GetAnnotations 

func (x *CreateSandboxRequest) GetAnnotations() map[string]string

func (*CreateSandboxRequest) GetAwaitMainProcessAttachment 

func (x *CreateSandboxRequest) GetAwaitMainProcessAttachment() bool

func (*CreateSandboxRequest) GetLabels 

func (x *CreateSandboxRequest) GetLabels() map[string]string

func (*CreateSandboxRequest) GetName 

func (x *CreateSandboxRequest) GetName() string

func (*CreateSandboxRequest) GetRequestId 

func (x *CreateSandboxRequest) GetRequestId() string

func (*CreateSandboxRequest) GetServiceExposures 

func (x *CreateSandboxRequest) GetServiceExposures() []*SandboxServiceExposure

func (*CreateSandboxRequest) GetSpec 

func (x *CreateSandboxRequest) GetSpec() *SandboxSpec

func (*CreateSandboxRequest) GetWorkloadTemplate 

func (x *CreateSandboxRequest) GetWorkloadTemplate() string

func (*CreateSandboxRequest) GetWorkspaceScope 

func (x *CreateSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*CreateSandboxRequest) ProtoMessage 

func (*CreateSandboxRequest) ProtoMessage()

func (*CreateSandboxRequest) ProtoReflect 

func (x *CreateSandboxRequest) ProtoReflect() protoreflect.Message

func (*CreateSandboxRequest) Reset 

func (x *CreateSandboxRequest) Reset()

func (*CreateSandboxRequest) String 

func (x *CreateSandboxRequest) String() string

type CreateSandboxTemplateRequest 

type CreateSandboxTemplateRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Template       *SandboxWorkloadTemplate       `protobuf:"bytes,1,opt,name=template,proto3" json:"template,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

func (*CreateSandboxTemplateRequest) Descriptor deprecated 

func (*CreateSandboxTemplateRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateSandboxTemplateRequest.ProtoReflect.Descriptor instead.

func (*CreateSandboxTemplateRequest) GetRequestId 

func (x *CreateSandboxTemplateRequest) GetRequestId() string

func (*CreateSandboxTemplateRequest) GetTemplate 

func (x *CreateSandboxTemplateRequest) GetTemplate() *SandboxWorkloadTemplate

func (*CreateSandboxTemplateRequest) GetWorkspaceScope 

func (x *CreateSandboxTemplateRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*CreateSandboxTemplateRequest) ProtoMessage 

func (*CreateSandboxTemplateRequest) ProtoMessage()

func (*CreateSandboxTemplateRequest) ProtoReflect 

func (x *CreateSandboxTemplateRequest) ProtoReflect() protoreflect.Message

func (*CreateSandboxTemplateRequest) Reset 

func (x *CreateSandboxTemplateRequest) Reset()

func (*CreateSandboxTemplateRequest) String 

func (x *CreateSandboxTemplateRequest) String() string

type CreateSshSessionRequest 

type CreateSshSessionRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Sandbox        string                         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// contains filtered or unexported fields
}

Create SSH session request.

func (*CreateSshSessionRequest) Descriptor deprecated 

func (*CreateSshSessionRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateSshSessionRequest.ProtoReflect.Descriptor instead.

func (*CreateSshSessionRequest) GetSandbox 

func (x *CreateSshSessionRequest) GetSandbox() string

func (*CreateSshSessionRequest) GetWorkspaceScope 

func (x *CreateSshSessionRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*CreateSshSessionRequest) ProtoMessage 

func (*CreateSshSessionRequest) ProtoMessage()

func (*CreateSshSessionRequest) ProtoReflect 

func (x *CreateSshSessionRequest) ProtoReflect() protoreflect.Message

func (*CreateSshSessionRequest) Reset 

func (x *CreateSshSessionRequest) Reset()

func (*CreateSshSessionRequest) String 

func (x *CreateSshSessionRequest) String() string

type CreateSshSessionResponse 

type CreateSshSessionResponse struct {

	// Sandbox id. [A-Za-z0-9._-]{1,128}.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Session token for the gateway tunnel. URL-safe ASCII
	// ([A-Za-z0-9._~+/=-]) up to 4096 bytes. No shell metacharacters or
	// whitespace.
	Token string `protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
	// Gateway host for SSH proxy connection. IPv4 address, bracketed IPv6
	// address, or DNS hostname (Punycode-encoded for IDN). Alphanumeric plus
	// `.-:[]` only, up to 253 bytes.
	GatewayHost string `protobuf:"bytes,3,opt,name=gateway_host,json=gatewayHost,proto3" json:"gateway_host,omitempty"`
	// Gateway port for SSH proxy connection. Must be in range 1..=65535.
	GatewayPort uint32 `protobuf:"varint,4,opt,name=gateway_port,json=gatewayPort,proto3" json:"gateway_port,omitempty"`
	// Gateway scheme. Must be exactly "http" or "https".
	GatewayScheme string `protobuf:"bytes,5,opt,name=gateway_scheme,json=gatewayScheme,proto3" json:"gateway_scheme,omitempty"`
	// Expected sandbox SSH host identity in OpenSSH SHA256:<base64> form.
	// Stable for the sandbox's lifetime. Empty only for legacy runtimes.
	HostKeyFingerprint string `protobuf:"bytes,7,opt,name=host_key_fingerprint,json=hostKeyFingerprint,proto3" json:"host_key_fingerprint,omitempty"`
	// Absolute expiry. Absence means no expiry.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,108,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// contains filtered or unexported fields
}

Create SSH session response.

Fields are interpolated into an SSH `ProxyCommand` string that OpenSSH executes through `/bin/sh -c` on the caller's workstation. Servers MUST uphold the charset contract below; clients MUST reject responses that violate it. The client's own escaping provides defense-in-depth, but narrow charsets close injection vectors at the trust boundary.

func (*CreateSshSessionResponse) Descriptor deprecated 

func (*CreateSshSessionResponse) Descriptor() ([]byte, []int)

Deprecated: Use CreateSshSessionResponse.ProtoReflect.Descriptor instead.

func (*CreateSshSessionResponse) GetExpirationTime 

func (x *CreateSshSessionResponse) GetExpirationTime() *timestamppb.Timestamp

func (*CreateSshSessionResponse) GetGatewayHost 

func (x *CreateSshSessionResponse) GetGatewayHost() string

func (*CreateSshSessionResponse) GetGatewayPort 

func (x *CreateSshSessionResponse) GetGatewayPort() uint32

func (*CreateSshSessionResponse) GetGatewayScheme 

func (x *CreateSshSessionResponse) GetGatewayScheme() string

func (*CreateSshSessionResponse) GetHostKeyFingerprint 

func (x *CreateSshSessionResponse) GetHostKeyFingerprint() string

func (*CreateSshSessionResponse) GetSandboxId 

func (x *CreateSshSessionResponse) GetSandboxId() string

func (*CreateSshSessionResponse) GetToken 

func (x *CreateSshSessionResponse) GetToken() string

func (*CreateSshSessionResponse) ProtoMessage 

func (*CreateSshSessionResponse) ProtoMessage()

func (*CreateSshSessionResponse) ProtoReflect 

func (x *CreateSshSessionResponse) ProtoReflect() protoreflect.Message

func (*CreateSshSessionResponse) Reset 

func (x *CreateSshSessionResponse) Reset()

func (*CreateSshSessionResponse) String 

func (x *CreateSshSessionResponse) String() string

type CreateWorkspaceRequest 

type CreateWorkspaceRequest struct {

	// Workspace name. Must be a valid DNS-1123 label.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional labels for the workspace (key-value metadata).
	Labels map[string]string `` /* 139-byte string literal not displayed */
	// Optional nonzero UUID. Same ID and payload replay success for 24 hours.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Create workspace request.

func (*CreateWorkspaceRequest) Descriptor deprecated 

func (*CreateWorkspaceRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateWorkspaceRequest.ProtoReflect.Descriptor instead.

func (*CreateWorkspaceRequest) GetLabels 

func (x *CreateWorkspaceRequest) GetLabels() map[string]string

func (*CreateWorkspaceRequest) GetName 

func (x *CreateWorkspaceRequest) GetName() string

func (*CreateWorkspaceRequest) GetRequestId 

func (x *CreateWorkspaceRequest) GetRequestId() string

func (*CreateWorkspaceRequest) ProtoMessage 

func (*CreateWorkspaceRequest) ProtoMessage()

func (*CreateWorkspaceRequest) ProtoReflect 

func (x *CreateWorkspaceRequest) ProtoReflect() protoreflect.Message

func (*CreateWorkspaceRequest) Reset 

func (x *CreateWorkspaceRequest) Reset()

func (*CreateWorkspaceRequest) String 

func (x *CreateWorkspaceRequest) String() string

type CreateWorkspaceResponse 

type CreateWorkspaceResponse struct {
	Workspace *datamodelv1.Workspace `protobuf:"bytes,1,opt,name=workspace,proto3" json:"workspace,omitempty"`
	// contains filtered or unexported fields
}

Create workspace response.

func (*CreateWorkspaceResponse) Descriptor deprecated 

func (*CreateWorkspaceResponse) Descriptor() ([]byte, []int)

Deprecated: Use CreateWorkspaceResponse.ProtoReflect.Descriptor instead.

func (*CreateWorkspaceResponse) GetWorkspace 

func (x *CreateWorkspaceResponse) GetWorkspace() *datamodelv1.Workspace

func (*CreateWorkspaceResponse) ProtoMessage 

func (*CreateWorkspaceResponse) ProtoMessage()

func (*CreateWorkspaceResponse) ProtoReflect 

func (x *CreateWorkspaceResponse) ProtoReflect() protoreflect.Message

func (*CreateWorkspaceResponse) Reset 

func (x *CreateWorkspaceResponse) Reset()

func (*CreateWorkspaceResponse) String 

func (x *CreateWorkspaceResponse) String() string

type DeleteProviderProfileRequest 

type DeleteProviderProfileRequest struct {

	// Workspace scope. Omit for platform profiles; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Id             string                         `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	AllowMissing   bool                           `protobuf:"varint,3,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Delete custom provider profile request.

func (*DeleteProviderProfileRequest) Descriptor deprecated 

func (*DeleteProviderProfileRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProviderProfileRequest.ProtoReflect.Descriptor instead.

func (*DeleteProviderProfileRequest) GetAllowMissing 

func (x *DeleteProviderProfileRequest) GetAllowMissing() bool

func (*DeleteProviderProfileRequest) GetId 

func (x *DeleteProviderProfileRequest) GetId() string

func (*DeleteProviderProfileRequest) GetRequestId 

func (x *DeleteProviderProfileRequest) GetRequestId() string

func (*DeleteProviderProfileRequest) GetWorkspaceScope 

func (x *DeleteProviderProfileRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*DeleteProviderProfileRequest) ProtoMessage 

func (*DeleteProviderProfileRequest) ProtoMessage()

func (*DeleteProviderProfileRequest) ProtoReflect 

func (x *DeleteProviderProfileRequest) ProtoReflect() protoreflect.Message

func (*DeleteProviderProfileRequest) Reset 

func (x *DeleteProviderProfileRequest) Reset()

func (*DeleteProviderProfileRequest) String 

func (x *DeleteProviderProfileRequest) String() string

type DeleteProviderProfileResponse 

type DeleteProviderProfileResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

Delete custom provider profile response.

func (*DeleteProviderProfileResponse) Descriptor deprecated 

func (*DeleteProviderProfileResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProviderProfileResponse.ProtoReflect.Descriptor instead.

func (*DeleteProviderProfileResponse) GetOutcome 

func (x *DeleteProviderProfileResponse) GetOutcome() DeletionOutcome

func (*DeleteProviderProfileResponse) ProtoMessage 

func (*DeleteProviderProfileResponse) ProtoMessage()

func (*DeleteProviderProfileResponse) ProtoReflect 

func (x *DeleteProviderProfileResponse) ProtoReflect() protoreflect.Message

func (*DeleteProviderProfileResponse) Reset 

func (x *DeleteProviderProfileResponse) Reset()

func (*DeleteProviderProfileResponse) String 

func (x *DeleteProviderProfileResponse) String() string

type DeleteProviderRefreshRequest 

type DeleteProviderRefreshRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Provider       string                         `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	CredentialKey  string                         `protobuf:"bytes,2,opt,name=credential_key,json=credentialKey,proto3" json:"credential_key,omitempty"`
	AllowMissing   bool                           `protobuf:"varint,5,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,6,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

func (*DeleteProviderRefreshRequest) Descriptor deprecated 

func (*DeleteProviderRefreshRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProviderRefreshRequest.ProtoReflect.Descriptor instead.

func (*DeleteProviderRefreshRequest) GetAllowMissing 

func (x *DeleteProviderRefreshRequest) GetAllowMissing() bool

func (*DeleteProviderRefreshRequest) GetCredentialKey 

func (x *DeleteProviderRefreshRequest) GetCredentialKey() string

func (*DeleteProviderRefreshRequest) GetProvider 

func (x *DeleteProviderRefreshRequest) GetProvider() string

func (*DeleteProviderRefreshRequest) GetRequestId 

func (x *DeleteProviderRefreshRequest) GetRequestId() string

func (*DeleteProviderRefreshRequest) GetWorkspaceScope 

func (x *DeleteProviderRefreshRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*DeleteProviderRefreshRequest) ProtoMessage 

func (*DeleteProviderRefreshRequest) ProtoMessage()

func (*DeleteProviderRefreshRequest) ProtoReflect 

func (x *DeleteProviderRefreshRequest) ProtoReflect() protoreflect.Message

func (*DeleteProviderRefreshRequest) Reset 

func (x *DeleteProviderRefreshRequest) Reset()

func (*DeleteProviderRefreshRequest) String 

func (x *DeleteProviderRefreshRequest) String() string

type DeleteProviderRefreshResponse 

type DeleteProviderRefreshResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

func (*DeleteProviderRefreshResponse) Descriptor deprecated 

func (*DeleteProviderRefreshResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProviderRefreshResponse.ProtoReflect.Descriptor instead.

func (*DeleteProviderRefreshResponse) GetOutcome 

func (x *DeleteProviderRefreshResponse) GetOutcome() DeletionOutcome

func (*DeleteProviderRefreshResponse) ProtoMessage 

func (*DeleteProviderRefreshResponse) ProtoMessage()

func (*DeleteProviderRefreshResponse) ProtoReflect 

func (x *DeleteProviderRefreshResponse) ProtoReflect() protoreflect.Message

func (*DeleteProviderRefreshResponse) Reset 

func (x *DeleteProviderRefreshResponse) Reset()

func (*DeleteProviderRefreshResponse) String 

func (x *DeleteProviderRefreshResponse) String() string

type DeleteProviderRequest 

type DeleteProviderRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	AllowMissing   bool                           `protobuf:"varint,4,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Delete provider request.

func (*DeleteProviderRequest) Descriptor deprecated 

func (*DeleteProviderRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProviderRequest.ProtoReflect.Descriptor instead.

func (*DeleteProviderRequest) GetAllowMissing 

func (x *DeleteProviderRequest) GetAllowMissing() bool

func (*DeleteProviderRequest) GetName 

func (x *DeleteProviderRequest) GetName() string

func (*DeleteProviderRequest) GetRequestId 

func (x *DeleteProviderRequest) GetRequestId() string

func (*DeleteProviderRequest) GetWorkspaceScope 

func (x *DeleteProviderRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*DeleteProviderRequest) ProtoMessage 

func (*DeleteProviderRequest) ProtoMessage()

func (*DeleteProviderRequest) ProtoReflect 

func (x *DeleteProviderRequest) ProtoReflect() protoreflect.Message

func (*DeleteProviderRequest) Reset 

func (x *DeleteProviderRequest) Reset()

func (*DeleteProviderRequest) String 

func (x *DeleteProviderRequest) String() string

type DeleteProviderResponse 

type DeleteProviderResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

Delete provider response.

func (*DeleteProviderResponse) Descriptor deprecated 

func (*DeleteProviderResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProviderResponse.ProtoReflect.Descriptor instead.

func (*DeleteProviderResponse) GetOutcome 

func (x *DeleteProviderResponse) GetOutcome() DeletionOutcome

func (*DeleteProviderResponse) ProtoMessage 

func (*DeleteProviderResponse) ProtoMessage()

func (*DeleteProviderResponse) ProtoReflect 

func (x *DeleteProviderResponse) ProtoReflect() protoreflect.Message

func (*DeleteProviderResponse) Reset 

func (x *DeleteProviderResponse) Reset()

func (*DeleteProviderResponse) String 

func (x *DeleteProviderResponse) String() string

type DeleteSandboxRequest 

type DeleteSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Canonical sandbox name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Succeed with ALREADY_ABSENT if the target is missing. Does not wait for
	// asynchronous cleanup and does not suppress authorization or parent errors.
	AllowMissing bool `protobuf:"varint,3,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Delete sandbox request.

func (*DeleteSandboxRequest) Descriptor deprecated 

func (*DeleteSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteSandboxRequest.ProtoReflect.Descriptor instead.

func (*DeleteSandboxRequest) GetAllowMissing 

func (x *DeleteSandboxRequest) GetAllowMissing() bool

func (*DeleteSandboxRequest) GetName 

func (x *DeleteSandboxRequest) GetName() string

func (*DeleteSandboxRequest) GetRequestId 

func (x *DeleteSandboxRequest) GetRequestId() string

func (*DeleteSandboxRequest) GetWorkspaceScope 

func (x *DeleteSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*DeleteSandboxRequest) ProtoMessage 

func (*DeleteSandboxRequest) ProtoMessage()

func (*DeleteSandboxRequest) ProtoReflect 

func (x *DeleteSandboxRequest) ProtoReflect() protoreflect.Message

func (*DeleteSandboxRequest) Reset 

func (x *DeleteSandboxRequest) Reset()

func (*DeleteSandboxRequest) String 

func (x *DeleteSandboxRequest) String() string

type DeleteSandboxResponse 

type DeleteSandboxResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// Immutable identity of the targeted sandbox, empty for ALREADY_ABSENT.
	// A same-name replacement is not part of this deletion.
	SandboxId string `protobuf:"bytes,3,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// contains filtered or unexported fields
}

Delete sandbox response.

func (*DeleteSandboxResponse) Descriptor deprecated 

func (*DeleteSandboxResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteSandboxResponse.ProtoReflect.Descriptor instead.

func (*DeleteSandboxResponse) GetOutcome 

func (x *DeleteSandboxResponse) GetOutcome() DeletionOutcome

func (*DeleteSandboxResponse) GetSandboxId 

func (x *DeleteSandboxResponse) GetSandboxId() string

func (*DeleteSandboxResponse) ProtoMessage 

func (*DeleteSandboxResponse) ProtoMessage()

func (*DeleteSandboxResponse) ProtoReflect 

func (x *DeleteSandboxResponse) ProtoReflect() protoreflect.Message

func (*DeleteSandboxResponse) Reset 

func (x *DeleteSandboxResponse) Reset()

func (*DeleteSandboxResponse) String 

func (x *DeleteSandboxResponse) String() string

type DeleteSandboxTemplateRequest 

type DeleteSandboxTemplateRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Succeed with ALREADY_ABSENT if the target is missing. Authorization and
	// parent-workspace checks still apply.
	AllowMissing bool `protobuf:"varint,3,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID. Same ID and payload replay success for 24 hours.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

func (*DeleteSandboxTemplateRequest) Descriptor deprecated 

func (*DeleteSandboxTemplateRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteSandboxTemplateRequest.ProtoReflect.Descriptor instead.

func (*DeleteSandboxTemplateRequest) GetAllowMissing 

func (x *DeleteSandboxTemplateRequest) GetAllowMissing() bool

func (*DeleteSandboxTemplateRequest) GetName 

func (x *DeleteSandboxTemplateRequest) GetName() string

func (*DeleteSandboxTemplateRequest) GetRequestId 

func (x *DeleteSandboxTemplateRequest) GetRequestId() string

func (*DeleteSandboxTemplateRequest) GetWorkspaceScope 

func (x *DeleteSandboxTemplateRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*DeleteSandboxTemplateRequest) ProtoMessage 

func (*DeleteSandboxTemplateRequest) ProtoMessage()

func (*DeleteSandboxTemplateRequest) ProtoReflect 

func (x *DeleteSandboxTemplateRequest) ProtoReflect() protoreflect.Message

func (*DeleteSandboxTemplateRequest) Reset 

func (x *DeleteSandboxTemplateRequest) Reset()

func (*DeleteSandboxTemplateRequest) String 

func (x *DeleteSandboxTemplateRequest) String() string

type DeleteSandboxTemplateResponse 

type DeleteSandboxTemplateResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

func (*DeleteSandboxTemplateResponse) Descriptor deprecated 

func (*DeleteSandboxTemplateResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteSandboxTemplateResponse.ProtoReflect.Descriptor instead.

func (*DeleteSandboxTemplateResponse) GetOutcome 

func (x *DeleteSandboxTemplateResponse) GetOutcome() DeletionOutcome

func (*DeleteSandboxTemplateResponse) ProtoMessage 

func (*DeleteSandboxTemplateResponse) ProtoMessage()

func (*DeleteSandboxTemplateResponse) ProtoReflect 

func (x *DeleteSandboxTemplateResponse) ProtoReflect() protoreflect.Message

func (*DeleteSandboxTemplateResponse) Reset 

func (x *DeleteSandboxTemplateResponse) Reset()

func (*DeleteSandboxTemplateResponse) String 

func (x *DeleteSandboxTemplateResponse) String() string

type DeleteServiceRequest 

type DeleteServiceRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Service name within the sandbox. Empty selects the unnamed endpoint.
	Name         string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Sandbox      string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	AllowMissing bool   `protobuf:"varint,4,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Request to delete an exposed sandbox service endpoint.

func (*DeleteServiceRequest) Descriptor deprecated 

func (*DeleteServiceRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteServiceRequest.ProtoReflect.Descriptor instead.

func (*DeleteServiceRequest) GetAllowMissing 

func (x *DeleteServiceRequest) GetAllowMissing() bool

func (*DeleteServiceRequest) GetName 

func (x *DeleteServiceRequest) GetName() string

func (*DeleteServiceRequest) GetRequestId 

func (x *DeleteServiceRequest) GetRequestId() string

func (*DeleteServiceRequest) GetSandbox 

func (x *DeleteServiceRequest) GetSandbox() string

func (*DeleteServiceRequest) GetWorkspaceScope 

func (x *DeleteServiceRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*DeleteServiceRequest) ProtoMessage 

func (*DeleteServiceRequest) ProtoMessage()

func (*DeleteServiceRequest) ProtoReflect 

func (x *DeleteServiceRequest) ProtoReflect() protoreflect.Message

func (*DeleteServiceRequest) Reset 

func (x *DeleteServiceRequest) Reset()

func (*DeleteServiceRequest) String 

func (x *DeleteServiceRequest) String() string

type DeleteServiceResponse 

type DeleteServiceResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

Response for deleting an exposed sandbox service endpoint.

func (*DeleteServiceResponse) Descriptor deprecated 

func (*DeleteServiceResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteServiceResponse.ProtoReflect.Descriptor instead.

func (*DeleteServiceResponse) GetOutcome 

func (x *DeleteServiceResponse) GetOutcome() DeletionOutcome

func (*DeleteServiceResponse) ProtoMessage 

func (*DeleteServiceResponse) ProtoMessage()

func (*DeleteServiceResponse) ProtoReflect 

func (x *DeleteServiceResponse) ProtoReflect() protoreflect.Message

func (*DeleteServiceResponse) Reset 

func (x *DeleteServiceResponse) Reset()

func (*DeleteServiceResponse) String 

func (x *DeleteServiceResponse) String() string

type DeleteWorkspaceRequest 

type DeleteWorkspaceRequest struct {

	// Workspace name (canonical lookup key).
	Name         string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	AllowMissing bool   `protobuf:"varint,2,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID. Same ID and payload replay success for 24 hours.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Delete workspace request.

func (*DeleteWorkspaceRequest) Descriptor deprecated 

func (*DeleteWorkspaceRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteWorkspaceRequest.ProtoReflect.Descriptor instead.

func (*DeleteWorkspaceRequest) GetAllowMissing 

func (x *DeleteWorkspaceRequest) GetAllowMissing() bool

func (*DeleteWorkspaceRequest) GetName 

func (x *DeleteWorkspaceRequest) GetName() string

func (*DeleteWorkspaceRequest) GetRequestId 

func (x *DeleteWorkspaceRequest) GetRequestId() string

func (*DeleteWorkspaceRequest) ProtoMessage 

func (*DeleteWorkspaceRequest) ProtoMessage()

func (*DeleteWorkspaceRequest) ProtoReflect 

func (x *DeleteWorkspaceRequest) ProtoReflect() protoreflect.Message

func (*DeleteWorkspaceRequest) Reset 

func (x *DeleteWorkspaceRequest) Reset()

func (*DeleteWorkspaceRequest) String 

func (x *DeleteWorkspaceRequest) String() string

type DeleteWorkspaceResponse 

type DeleteWorkspaceResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

Delete workspace response.

func (*DeleteWorkspaceResponse) Descriptor deprecated 

func (*DeleteWorkspaceResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteWorkspaceResponse.ProtoReflect.Descriptor instead.

func (*DeleteWorkspaceResponse) GetOutcome 

func (x *DeleteWorkspaceResponse) GetOutcome() DeletionOutcome

func (*DeleteWorkspaceResponse) ProtoMessage 

func (*DeleteWorkspaceResponse) ProtoMessage()

func (*DeleteWorkspaceResponse) ProtoReflect 

func (x *DeleteWorkspaceResponse) ProtoReflect() protoreflect.Message

func (*DeleteWorkspaceResponse) Reset 

func (x *DeleteWorkspaceResponse) Reset()

func (*DeleteWorkspaceResponse) String 

func (x *DeleteWorkspaceResponse) String() string

type DeletionOutcome 

type DeletionOutcome int32

Result of a public delete, membership removal, or session revocation. Default requests return NOT_FOUND for a missing target. With allow_missing, only a missing target becomes ALREADY_ABSENT; parent lookup, authorization, validation, precondition, and backend errors retain their normal status. These results describe the targeted resource, not a same-name replacement. 

const (
	// No outcome was supplied. Never infer completion from this value.
	DeletionOutcome_DELETION_OUTCOME_UNSPECIFIED DeletionOutcome = 0
	// The targeted gateway resource is removed (or the SSH session is revoked).
	// Downstream platform garbage collection may still be finishing.
	DeletionOutcome_DELETION_OUTCOME_COMPLETED DeletionOutcome = 1
	// Sandbox deletion is accepted but its gateway record still exists.
	// Observe the targeted sandbox ID until it disappears for completion.
	DeletionOutcome_DELETION_OUTCOME_ACCEPTED DeletionOutcome = 2
	// The target did not exist and allow_missing was true.
	DeletionOutcome_DELETION_OUTCOME_ALREADY_ABSENT DeletionOutcome = 3
)

func (DeletionOutcome) Descriptor 

func (DeletionOutcome) Descriptor() protoreflect.EnumDescriptor

func (DeletionOutcome) Enum 

func (x DeletionOutcome) Enum() *DeletionOutcome

func (DeletionOutcome) EnumDescriptor deprecated 

func (DeletionOutcome) EnumDescriptor() ([]byte, []int)

Deprecated: Use DeletionOutcome.Descriptor instead.

func (DeletionOutcome) Number 

func (x DeletionOutcome) Number() protoreflect.EnumNumber

func (DeletionOutcome) String 

func (x DeletionOutcome) String() string

func (DeletionOutcome) Type 

func (DeletionOutcome) Type() protoreflect.EnumType

type DenialGroupCount 

type DenialGroupCount struct {

	// Sanitized denial category, e.g. "connect_policy", "l7_policy", "ssrf".
	DenyGroup string `protobuf:"bytes,1,opt,name=deny_group,json=denyGroup,proto3" json:"deny_group,omitempty"`
	// Number of denied actions in this category.
	DeniedCount uint32 `protobuf:"varint,2,opt,name=denied_count,json=deniedCount,proto3" json:"denied_count,omitempty"`
	// contains filtered or unexported fields
}

Count of denied actions grouped only by sanitized telemetry category.

func (*DenialGroupCount) Descriptor deprecated 

func (*DenialGroupCount) Descriptor() ([]byte, []int)

Deprecated: Use DenialGroupCount.ProtoReflect.Descriptor instead.

func (*DenialGroupCount) GetDeniedCount 

func (x *DenialGroupCount) GetDeniedCount() uint32

func (*DenialGroupCount) GetDenyGroup 

func (x *DenialGroupCount) GetDenyGroup() string

func (*DenialGroupCount) ProtoMessage 

func (*DenialGroupCount) ProtoMessage()

func (*DenialGroupCount) ProtoReflect 

func (x *DenialGroupCount) ProtoReflect() protoreflect.Message

func (*DenialGroupCount) Reset 

func (x *DenialGroupCount) Reset()

func (*DenialGroupCount) String 

func (x *DenialGroupCount) String() string

type DenialSummary 

type DenialSummary struct {

	// Sandbox ID that produced this summary.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Denied destination host.
	Host string `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	// Denied destination port.
	Port uint32 `protobuf:"varint,3,opt,name=port,proto3" json:"port,omitempty"`
	// Binary that attempted the connection.
	Binary string `protobuf:"bytes,4,opt,name=binary,proto3" json:"binary,omitempty"`
	// Process ancestor chain.
	Ancestors []string `protobuf:"bytes,5,rep,name=ancestors,proto3" json:"ancestors,omitempty"`
	// Denial reason from OPA evaluation.
	DenyReason string `protobuf:"bytes,6,opt,name=deny_reason,json=denyReason,proto3" json:"deny_reason,omitempty"`
	// Time of the first denial.
	FirstSeenTime *timestamppb.Timestamp `protobuf:"bytes,107,opt,name=first_seen_time,json=firstSeenTime,proto3" json:"first_seen_time,omitempty"`
	// Time of the most recent denial.
	LastSeenTime *timestamppb.Timestamp `protobuf:"bytes,108,opt,name=last_seen_time,json=lastSeenTime,proto3" json:"last_seen_time,omitempty"`
	// Number of denials in the current window.
	Count uint32 `protobuf:"varint,9,opt,name=count,proto3" json:"count,omitempty"`
	// Events dropped during aggregator cooldown.
	SuppressedCount uint32 `protobuf:"varint,10,opt,name=suppressed_count,json=suppressedCount,proto3" json:"suppressed_count,omitempty"`
	// Cumulative lifetime count (never resets).
	TotalCount uint32 `protobuf:"varint,11,opt,name=total_count,json=totalCount,proto3" json:"total_count,omitempty"`
	// Distinct cmdline strings observed (sanitized of credentials).
	SampleCmdlines []string `protobuf:"bytes,12,rep,name=sample_cmdlines,json=sampleCmdlines,proto3" json:"sample_cmdlines,omitempty"`
	// SHA-256 of the binary for audit trail.
	BinarySha256 string `protobuf:"bytes,13,opt,name=binary_sha256,json=binarySha256,proto3" json:"binary_sha256,omitempty"`
	// True if emitted by stale-flush rather than threshold.
	Persistent bool `protobuf:"varint,14,opt,name=persistent,proto3" json:"persistent,omitempty"`
	// Denial category: "l4_deny", "l7_deny", "l7_audit", "ssrf".
	DenialStage string `protobuf:"bytes,15,opt,name=denial_stage,json=denialStage,proto3" json:"denial_stage,omitempty"`
	// Observed HTTP request patterns (from L7 inspection).
	L7RequestSamples []*L7RequestSample `protobuf:"bytes,16,rep,name=l7_request_samples,json=l7RequestSamples,proto3" json:"l7_request_samples,omitempty"`
	// True if L7 inspection was active during observation window.
	L7InspectionActive bool `protobuf:"varint,17,opt,name=l7_inspection_active,json=l7InspectionActive,proto3" json:"l7_inspection_active,omitempty"`
	// contains filtered or unexported fields
}

Structured denial summary from sandbox aggregator.

func (*DenialSummary) Descriptor deprecated 

func (*DenialSummary) Descriptor() ([]byte, []int)

Deprecated: Use DenialSummary.ProtoReflect.Descriptor instead.

func (*DenialSummary) GetAncestors 

func (x *DenialSummary) GetAncestors() []string

func (*DenialSummary) GetBinary 

func (x *DenialSummary) GetBinary() string

func (*DenialSummary) GetBinarySha256 

func (x *DenialSummary) GetBinarySha256() string

func (*DenialSummary) GetCount 

func (x *DenialSummary) GetCount() uint32

func (*DenialSummary) GetDenialStage 

func (x *DenialSummary) GetDenialStage() string

func (*DenialSummary) GetDenyReason 

func (x *DenialSummary) GetDenyReason() string

func (*DenialSummary) GetFirstSeenTime 

func (x *DenialSummary) GetFirstSeenTime() *timestamppb.Timestamp

func (*DenialSummary) GetHost 

func (x *DenialSummary) GetHost() string

func (*DenialSummary) GetL7InspectionActive 

func (x *DenialSummary) GetL7InspectionActive() bool

func (*DenialSummary) GetL7RequestSamples 

func (x *DenialSummary) GetL7RequestSamples() []*L7RequestSample

func (*DenialSummary) GetLastSeenTime 

func (x *DenialSummary) GetLastSeenTime() *timestamppb.Timestamp

func (*DenialSummary) GetPersistent 

func (x *DenialSummary) GetPersistent() bool

func (*DenialSummary) GetPort 

func (x *DenialSummary) GetPort() uint32

func (*DenialSummary) GetSampleCmdlines 

func (x *DenialSummary) GetSampleCmdlines() []string

func (*DenialSummary) GetSandboxId 

func (x *DenialSummary) GetSandboxId() string

func (*DenialSummary) GetSuppressedCount 

func (x *DenialSummary) GetSuppressedCount() uint32

func (*DenialSummary) GetTotalCount 

func (x *DenialSummary) GetTotalCount() uint32

func (*DenialSummary) ProtoMessage 

func (*DenialSummary) ProtoMessage()

func (*DenialSummary) ProtoReflect 

func (x *DenialSummary) ProtoReflect() protoreflect.Message

func (*DenialSummary) Reset 

func (x *DenialSummary) Reset()

func (*DenialSummary) String 

func (x *DenialSummary) String() string

type DetachSandboxProviderRequest 

type DetachSandboxProviderRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Sandbox        string                         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Provider name to detach.
	Provider string `protobuf:"bytes,2,opt,name=provider,proto3" json:"provider,omitempty"`
	// Expected resource version for optimistic concurrency control.
	// If 0, the server uses the current version (backward compatibility).
	// If non-zero, the server validates that the sandbox's current resource_version
	// matches this value before applying the mutation, returning ABORTED on mismatch.
	ExpectedResourceVersion uint64 `` /* 133-byte string literal not displayed */
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Detach provider from sandbox request.

func (*DetachSandboxProviderRequest) Descriptor deprecated 

func (*DetachSandboxProviderRequest) Descriptor() ([]byte, []int)

Deprecated: Use DetachSandboxProviderRequest.ProtoReflect.Descriptor instead.

func (*DetachSandboxProviderRequest) GetExpectedResourceVersion 

func (x *DetachSandboxProviderRequest) GetExpectedResourceVersion() uint64

func (*DetachSandboxProviderRequest) GetProvider 

func (x *DetachSandboxProviderRequest) GetProvider() string

func (*DetachSandboxProviderRequest) GetRequestId 

func (x *DetachSandboxProviderRequest) GetRequestId() string

func (*DetachSandboxProviderRequest) GetSandbox 

func (x *DetachSandboxProviderRequest) GetSandbox() string

func (*DetachSandboxProviderRequest) GetWorkspaceScope 

func (x *DetachSandboxProviderRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*DetachSandboxProviderRequest) ProtoMessage 

func (*DetachSandboxProviderRequest) ProtoMessage()

func (*DetachSandboxProviderRequest) ProtoReflect 

func (x *DetachSandboxProviderRequest) ProtoReflect() protoreflect.Message

func (*DetachSandboxProviderRequest) Reset 

func (x *DetachSandboxProviderRequest) Reset()

func (*DetachSandboxProviderRequest) String 

func (x *DetachSandboxProviderRequest) String() string

type DetachSandboxProviderResponse 

type DetachSandboxProviderResponse struct {
	Sandbox *Sandbox `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// True when the provider was removed. False means it was not attached.
	Detached bool `protobuf:"varint,2,opt,name=detached,proto3" json:"detached,omitempty"`
	// Revocation is complete only when this receipt reports REVOKED.
	Receipt *ProviderMutationReceipt `protobuf:"bytes,3,opt,name=receipt,proto3" json:"receipt,omitempty"`
	// contains filtered or unexported fields
}

Detach provider from sandbox response.

func (*DetachSandboxProviderResponse) Descriptor deprecated 

func (*DetachSandboxProviderResponse) Descriptor() ([]byte, []int)

Deprecated: Use DetachSandboxProviderResponse.ProtoReflect.Descriptor instead.

func (*DetachSandboxProviderResponse) GetDetached 

func (x *DetachSandboxProviderResponse) GetDetached() bool

func (*DetachSandboxProviderResponse) GetReceipt 

func (x *DetachSandboxProviderResponse) GetReceipt() *ProviderMutationReceipt

func (*DetachSandboxProviderResponse) GetSandbox 

func (x *DetachSandboxProviderResponse) GetSandbox() *Sandbox

func (*DetachSandboxProviderResponse) ProtoMessage 

func (*DetachSandboxProviderResponse) ProtoMessage()

func (*DetachSandboxProviderResponse) ProtoReflect 

func (x *DetachSandboxProviderResponse) ProtoReflect() protoreflect.Message

func (*DetachSandboxProviderResponse) Reset 

func (x *DetachSandboxProviderResponse) Reset()

func (*DetachSandboxProviderResponse) String 

func (x *DetachSandboxProviderResponse) String() string

type DraftChunkApproval 

type DraftChunkApproval struct {
	ChunkId     string `protobuf:"bytes,1,opt,name=chunk_id,json=chunkId,proto3" json:"chunk_id,omitempty"`
	ReviewToken string `protobuf:"bytes,2,opt,name=review_token,json=reviewToken,proto3" json:"review_token,omitempty"`
	// contains filtered or unexported fields
}

Approve all pending chunks.

func (*DraftChunkApproval) Descriptor deprecated 

func (*DraftChunkApproval) Descriptor() ([]byte, []int)

Deprecated: Use DraftChunkApproval.ProtoReflect.Descriptor instead.

func (*DraftChunkApproval) GetChunkId 

func (x *DraftChunkApproval) GetChunkId() string

func (*DraftChunkApproval) GetReviewToken 

func (x *DraftChunkApproval) GetReviewToken() string

func (*DraftChunkApproval) ProtoMessage 

func (*DraftChunkApproval) ProtoMessage()

func (*DraftChunkApproval) ProtoReflect 

func (x *DraftChunkApproval) ProtoReflect() protoreflect.Message

func (*DraftChunkApproval) Reset 

func (x *DraftChunkApproval) Reset()

func (*DraftChunkApproval) String 

func (x *DraftChunkApproval) String() string

type DraftHistoryEntry 

type DraftHistoryEntry struct {

	// Time when the event occurred.
	EventTime *timestamppb.Timestamp `protobuf:"bytes,101,opt,name=event_time,json=eventTime,proto3" json:"event_time,omitempty"`
	// Event type: "denial_detected", "analysis_cycle", "approved",
	// "rejected", "edited", "undone", "cleared".
	EventType string `protobuf:"bytes,2,opt,name=event_type,json=eventType,proto3" json:"event_type,omitempty"`
	// Human-readable description.
	Description string `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	// Associated chunk ID (if applicable).
	ChunkId string `protobuf:"bytes,4,opt,name=chunk_id,json=chunkId,proto3" json:"chunk_id,omitempty"`
	// contains filtered or unexported fields
}

func (*DraftHistoryEntry) Descriptor deprecated 

func (*DraftHistoryEntry) Descriptor() ([]byte, []int)

Deprecated: Use DraftHistoryEntry.ProtoReflect.Descriptor instead.

func (*DraftHistoryEntry) GetChunkId 

func (x *DraftHistoryEntry) GetChunkId() string

func (*DraftHistoryEntry) GetDescription 

func (x *DraftHistoryEntry) GetDescription() string

func (*DraftHistoryEntry) GetEventTime 

func (x *DraftHistoryEntry) GetEventTime() *timestamppb.Timestamp

func (*DraftHistoryEntry) GetEventType 

func (x *DraftHistoryEntry) GetEventType() string

func (*DraftHistoryEntry) ProtoMessage 

func (*DraftHistoryEntry) ProtoMessage()

func (*DraftHistoryEntry) ProtoReflect 

func (x *DraftHistoryEntry) ProtoReflect() protoreflect.Message

func (*DraftHistoryEntry) Reset 

func (x *DraftHistoryEntry) Reset()

func (*DraftHistoryEntry) String 

func (x *DraftHistoryEntry) String() string

type DraftPolicyUpdate 

type DraftPolicyUpdate struct {

	// Current draft version.
	DraftVersion uint64 `protobuf:"varint,1,opt,name=draft_version,json=draftVersion,proto3" json:"draft_version,omitempty"`
	// Number of new chunks added in this update.
	NewChunks uint32 `protobuf:"varint,2,opt,name=new_chunks,json=newChunks,proto3" json:"new_chunks,omitempty"`
	// Total pending chunks awaiting approval.
	TotalPending uint32 `protobuf:"varint,3,opt,name=total_pending,json=totalPending,proto3" json:"total_pending,omitempty"`
	// Brief description of what changed.
	Summary string `protobuf:"bytes,4,opt,name=summary,proto3" json:"summary,omitempty"`
	// contains filtered or unexported fields
}

Notification that the draft policy was updated.

func (*DraftPolicyUpdate) Descriptor deprecated 

func (*DraftPolicyUpdate) Descriptor() ([]byte, []int)

Deprecated: Use DraftPolicyUpdate.ProtoReflect.Descriptor instead.

func (*DraftPolicyUpdate) GetDraftVersion 

func (x *DraftPolicyUpdate) GetDraftVersion() uint64

func (*DraftPolicyUpdate) GetNewChunks 

func (x *DraftPolicyUpdate) GetNewChunks() uint32

func (*DraftPolicyUpdate) GetSummary 

func (x *DraftPolicyUpdate) GetSummary() string

func (*DraftPolicyUpdate) GetTotalPending 

func (x *DraftPolicyUpdate) GetTotalPending() uint32

func (*DraftPolicyUpdate) ProtoMessage 

func (*DraftPolicyUpdate) ProtoMessage()

func (*DraftPolicyUpdate) ProtoReflect 

func (x *DraftPolicyUpdate) ProtoReflect() protoreflect.Message

func (*DraftPolicyUpdate) Reset 

func (x *DraftPolicyUpdate) Reset()

func (*DraftPolicyUpdate) String 

func (x *DraftPolicyUpdate) String() string

type EditDraftChunkRequest 

type EditDraftChunkRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Chunk ID to edit.
	ChunkId string `protobuf:"bytes,2,opt,name=chunk_id,json=chunkId,proto3" json:"chunk_id,omitempty"`
	// The modified rule (replaces existing proposed_rule).
	ProposedRule *sandboxv1.NetworkPolicyRule `protobuf:"bytes,3,opt,name=proposed_rule,json=proposedRule,proto3" json:"proposed_rule,omitempty"`
	Sandbox      string                       `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Edit a pending chunk in-place.

func (*EditDraftChunkRequest) Descriptor deprecated 

func (*EditDraftChunkRequest) Descriptor() ([]byte, []int)

Deprecated: Use EditDraftChunkRequest.ProtoReflect.Descriptor instead.

func (*EditDraftChunkRequest) GetChunkId 

func (x *EditDraftChunkRequest) GetChunkId() string

func (*EditDraftChunkRequest) GetProposedRule 

func (x *EditDraftChunkRequest) GetProposedRule() *sandboxv1.NetworkPolicyRule

func (*EditDraftChunkRequest) GetRequestId 

func (x *EditDraftChunkRequest) GetRequestId() string

func (*EditDraftChunkRequest) GetSandbox 

func (x *EditDraftChunkRequest) GetSandbox() string

func (*EditDraftChunkRequest) GetWorkspaceScope 

func (x *EditDraftChunkRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*EditDraftChunkRequest) ProtoMessage 

func (*EditDraftChunkRequest) ProtoMessage()

func (*EditDraftChunkRequest) ProtoReflect 

func (x *EditDraftChunkRequest) ProtoReflect() protoreflect.Message

func (*EditDraftChunkRequest) Reset 

func (x *EditDraftChunkRequest) Reset()

func (*EditDraftChunkRequest) String 

func (x *EditDraftChunkRequest) String() string

type EditDraftChunkResponse 

type EditDraftChunkResponse struct {
	// contains filtered or unexported fields
}

func (*EditDraftChunkResponse) Descriptor deprecated 

func (*EditDraftChunkResponse) Descriptor() ([]byte, []int)

Deprecated: Use EditDraftChunkResponse.ProtoReflect.Descriptor instead.

func (*EditDraftChunkResponse) ProtoMessage 

func (*EditDraftChunkResponse) ProtoMessage()

func (*EditDraftChunkResponse) ProtoReflect 

func (x *EditDraftChunkResponse) ProtoReflect() protoreflect.Message

func (*EditDraftChunkResponse) Reset 

func (x *EditDraftChunkResponse) Reset()

func (*EditDraftChunkResponse) String 

func (x *EditDraftChunkResponse) String() string

type EndpointFailure 

type EndpointFailure struct {
	Domain EndpointFailureDomain `protobuf:"varint,1,opt,name=domain,proto3,enum=openshell.v1.EndpointFailureDomain" json:"domain,omitempty"`
	// Stable lower_snake_case code from the domain's closed set, such as
	// provider_authorization_required.
	Code string `protobuf:"bytes,2,opt,name=code,proto3" json:"code,omitempty"`
	// Who can resolve the failure; always the action documented for the code.
	RecoveryAction ProviderCredentialRefreshRecoveryAction `` /* 162-byte string literal not displayed */
	// Provider whose credential failed. Empty when the failure happened before
	// a credential was selected.
	Provider string `protobuf:"bytes,4,opt,name=provider,proto3" json:"provider,omitempty"`
	// Credential name within the provider. Never a credential value.
	CredentialKey string `protobuf:"bytes,5,opt,name=credential_key,json=credentialKey,proto3" json:"credential_key,omitempty"`
	// Step that observed the failure, from the domain's closed set.
	Stage string `protobuf:"bytes,6,opt,name=stage,proto3" json:"stage,omitempty"`
	// HTTP status a token service returned, when one was received.
	UpstreamHttpStatus *uint32 `protobuf:"varint,7,opt,name=upstream_http_status,json=upstreamHttpStatus,proto3,oneof" json:"upstream_http_status,omitempty"`
	// Supervisor-minted UUID of the refused exchange. The workload receives the
	// same value in the x-openshell-request-id response header.
	RequestId string `protobuf:"bytes,8,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Bounded cause of a failed endpoint observation, including failures before any request reaches the endpoint. No field carries remote text: code and stage come from the domain's closed sets, provider and credential_key are configured names, and request_id is an opaque random ID.

func (*EndpointFailure) Descriptor deprecated 

func (*EndpointFailure) Descriptor() ([]byte, []int)

Deprecated: Use EndpointFailure.ProtoReflect.Descriptor instead.

func (*EndpointFailure) GetCode 

func (x *EndpointFailure) GetCode() string

func (*EndpointFailure) GetCredentialKey 

func (x *EndpointFailure) GetCredentialKey() string

func (*EndpointFailure) GetDomain 

func (x *EndpointFailure) GetDomain() EndpointFailureDomain

func (*EndpointFailure) GetProvider 

func (x *EndpointFailure) GetProvider() string

func (*EndpointFailure) GetRecoveryAction 

func (x *EndpointFailure) GetRecoveryAction() ProviderCredentialRefreshRecoveryAction

func (*EndpointFailure) GetRequestId 

func (x *EndpointFailure) GetRequestId() string

func (*EndpointFailure) GetStage 

func (x *EndpointFailure) GetStage() string

func (*EndpointFailure) GetUpstreamHttpStatus 

func (x *EndpointFailure) GetUpstreamHttpStatus() uint32

func (*EndpointFailure) ProtoMessage 

func (*EndpointFailure) ProtoMessage()

func (*EndpointFailure) ProtoReflect 

func (x *EndpointFailure) ProtoReflect() protoreflect.Message

func (*EndpointFailure) Reset 

func (x *EndpointFailure) Reset()

func (*EndpointFailure) String 

func (x *EndpointFailure) String() string

type EndpointFailureDomain 

type EndpointFailureDomain int32

Subsystem whose closed code set explains an endpoint failure. Each domain defines its codes, stages, recovery actions, and the endpoint results it can explain. Kept at the end of the file so adding it does not renumber existing generated descriptors. 

const (
	EndpointFailureDomain_ENDPOINT_FAILURE_DOMAIN_UNSPECIFIED EndpointFailureDomain = 0
	// A dynamic token grant for a provider credential failed, so OpenShell
	// refused the request before any of it reached the endpoint. Explains
	// ENDPOINT_RESULT_CREDENTIAL_UNAVAILABLE.
	EndpointFailureDomain_ENDPOINT_FAILURE_DOMAIN_TOKEN_GRANT EndpointFailureDomain = 1
)

func (EndpointFailureDomain) Descriptor 

func (EndpointFailureDomain) Descriptor() protoreflect.EnumDescriptor

func (EndpointFailureDomain) Enum 

func (x EndpointFailureDomain) Enum() *EndpointFailureDomain

func (EndpointFailureDomain) EnumDescriptor deprecated 

func (EndpointFailureDomain) EnumDescriptor() ([]byte, []int)

Deprecated: Use EndpointFailureDomain.Descriptor instead.

func (EndpointFailureDomain) Number 

func (x EndpointFailureDomain) Number() protoreflect.EnumNumber

func (EndpointFailureDomain) String 

func (x EndpointFailureDomain) String() string

func (EndpointFailureDomain) Type 

func (EndpointFailureDomain) Type() protoreflect.EnumType

type EndpointObservation 

type EndpointObservation struct {

	// Stable identifier derived from the configured host, ports, and path.
	EndpointId string `protobuf:"bytes,1,opt,name=endpoint_id,json=endpointId,proto3" json:"endpoint_id,omitempty"`
	// Latest result under the reported configuration and supervisor session.
	Result EndpointResult `protobuf:"varint,2,opt,name=result,proto3,enum=openshell.v1.EndpointResult" json:"result,omitempty"`
	// Bounded cause of result, when the supervisor classified it. Each failure
	// domain names the results it can explain.
	Failure *EndpointFailure `protobuf:"bytes,3,opt,name=failure,proto3" json:"failure,omitempty"`
	// contains filtered or unexported fields
}

One redacted endpoint result in a supervisor's complete status report.

func (*EndpointObservation) Descriptor deprecated 

func (*EndpointObservation) Descriptor() ([]byte, []int)

Deprecated: Use EndpointObservation.ProtoReflect.Descriptor instead.

func (*EndpointObservation) GetEndpointId 

func (x *EndpointObservation) GetEndpointId() string

func (*EndpointObservation) GetFailure 

func (x *EndpointObservation) GetFailure() *EndpointFailure

func (*EndpointObservation) GetResult 

func (x *EndpointObservation) GetResult() EndpointResult

func (*EndpointObservation) ProtoMessage 

func (*EndpointObservation) ProtoMessage()

func (*EndpointObservation) ProtoReflect 

func (x *EndpointObservation) ProtoReflect() protoreflect.Message

func (*EndpointObservation) Reset 

func (x *EndpointObservation) Reset()

func (*EndpointObservation) String 

func (x *EndpointObservation) String() string

type EndpointResult 

type EndpointResult int32

Last observed network result for a configured external tool endpoint. Results describe accepted traffic observations, not present availability. 

const (
	EndpointResult_ENDPOINT_RESULT_UNSPECIFIED EndpointResult = 0
	// No exchange has been observed under the current configuration and session.
	EndpointResult_ENDPOINT_RESULT_NO_OBSERVED_EXCHANGE EndpointResult = 1
	// An upstream HTTP status below 400 was received. Its body can still contain
	// an MCP error; this result does not establish tool-call success.
	EndpointResult_ENDPOINT_RESULT_HTTP_RESPONSE_RECEIVED EndpointResult = 2
	// OpenShell policy denied the request locally.
	EndpointResult_ENDPOINT_RESULT_POLICY_DENIED EndpointResult = 3
	// An applicable OpenShell-managed credential was unavailable.
	EndpointResult_ENDPOINT_RESULT_CREDENTIAL_UNAVAILABLE EndpointResult = 4
	// TLS setup for the upstream connection failed.
	EndpointResult_ENDPOINT_RESULT_TLS_FAILED EndpointResult = 5
	// The upstream transport failed before an HTTP response arrived.
	EndpointResult_ENDPOINT_RESULT_TRANSPORT_FAILED EndpointResult = 6
	// The upstream service returned an HTTP rejection.
	EndpointResult_ENDPOINT_RESULT_UPSTREAM_REJECTED EndpointResult = 7
)

func (EndpointResult) Descriptor 

func (EndpointResult) Descriptor() protoreflect.EnumDescriptor

func (EndpointResult) Enum 

func (x EndpointResult) Enum() *EndpointResult

func (EndpointResult) EnumDescriptor deprecated 

func (EndpointResult) EnumDescriptor() ([]byte, []int)

Deprecated: Use EndpointResult.Descriptor instead.

func (EndpointResult) Number 

func (x EndpointResult) Number() protoreflect.EnumNumber

func (EndpointResult) String 

func (x EndpointResult) String() string

func (EndpointResult) Type 

func (EndpointResult) Type() protoreflect.EnumType

type EndpointStatus 

type EndpointStatus struct {

	// Stable identifier for selecting this endpoint without parsing display text.
	EndpointId string `protobuf:"bytes,1,opt,name=endpoint_id,json=endpointId,proto3" json:"endpoint_id,omitempty"`
	// Lowercase configured endpoint host.
	Host string `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	// Sorted, deduplicated effective endpoint ports. Validated endpoints have at
	// least one port.
	Ports []uint32 `protobuf:"varint,3,rep,packed,name=ports,proto3" json:"ports,omitempty"`
	// Canonical configured path selector; an unrestricted path is /**.
	Path string `protobuf:"bytes,4,opt,name=path,proto3" json:"path,omitempty"`
	// Last accepted result, aggregated across configured callers and ports.
	// NoObservedExchange retains the address and has no report timestamp.
	LastResult EndpointResult `protobuf:"varint,5,opt,name=last_result,json=lastResult,proto3,enum=openshell.v1.EndpointResult" json:"last_result,omitempty"`
	// Time when the gateway accepted the observation. This is not the request
	// time: still-valid evidence can be reaccepted after a reset. Identical
	// same-sequence retries do not advance it. Absent until a result is reported.
	LastReportedTime *timestamppb.Timestamp `protobuf:"bytes,106,opt,name=last_reported_time,json=lastReportedTime,proto3" json:"last_reported_time,omitempty"`
	// Bounded cause of last_result, when the supervisor classified it. Each
	// failure domain names the results it can explain. Replaced or cleared by
	// every later observation, and cleared by the same resets that clear
	// last_result.
	LastFailure *EndpointFailure `protobuf:"bytes,7,opt,name=last_failure,json=lastFailure,proto3" json:"last_failure,omitempty"`
	// contains filtered or unexported fields
}

A configured endpoint and its last accepted network result in one record. Address fields contain policy selectors, never request URLs or credentials.

func (*EndpointStatus) Descriptor deprecated 

func (*EndpointStatus) Descriptor() ([]byte, []int)

Deprecated: Use EndpointStatus.ProtoReflect.Descriptor instead.

func (*EndpointStatus) GetEndpointId 

func (x *EndpointStatus) GetEndpointId() string

func (*EndpointStatus) GetHost 

func (x *EndpointStatus) GetHost() string

func (*EndpointStatus) GetLastFailure 

func (x *EndpointStatus) GetLastFailure() *EndpointFailure

func (*EndpointStatus) GetLastReportedTime 

func (x *EndpointStatus) GetLastReportedTime() *timestamppb.Timestamp

func (*EndpointStatus) GetLastResult 

func (x *EndpointStatus) GetLastResult() EndpointResult

func (*EndpointStatus) GetPath 

func (x *EndpointStatus) GetPath() string

func (*EndpointStatus) GetPorts 

func (x *EndpointStatus) GetPorts() []uint32

func (*EndpointStatus) ProtoMessage 

func (*EndpointStatus) ProtoMessage()

func (*EndpointStatus) ProtoReflect 

func (x *EndpointStatus) ProtoReflect() protoreflect.Message

func (*EndpointStatus) Reset 

func (x *EndpointStatus) Reset()

func (*EndpointStatus) String 

func (x *EndpointStatus) String() string

type ExchangeProviderSubjectTokenRequest 

type ExchangeProviderSubjectTokenRequest struct {

	// The sandbox ID. Must match the authenticated sandbox principal.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Attached provider record holding the configured subject token credential.
	Provider string `protobuf:"bytes,2,opt,name=provider,proto3" json:"provider,omitempty"`
	// Provider profile credential that declares the token_exchange grant.
	CredentialKey string `protobuf:"bytes,3,opt,name=credential_key,json=credentialKey,proto3" json:"credential_key,omitempty"`
	// Supervisor JWT-SVID. The gateway verifies this and uses its `sub` claim
	// as the requested audience for the intermediate token.
	SupervisorJwtSvid string `protobuf:"bytes,4,opt,name=supervisor_jwt_svid,json=supervisorJwtSvid,proto3" json:"supervisor_jwt_svid,omitempty"`
	// contains filtered or unexported fields
}

func (*ExchangeProviderSubjectTokenRequest) Descriptor deprecated 

func (*ExchangeProviderSubjectTokenRequest) Descriptor() ([]byte, []int)

Deprecated: Use ExchangeProviderSubjectTokenRequest.ProtoReflect.Descriptor instead.

func (*ExchangeProviderSubjectTokenRequest) GetCredentialKey 

func (x *ExchangeProviderSubjectTokenRequest) GetCredentialKey() string

func (*ExchangeProviderSubjectTokenRequest) GetProvider 

func (x *ExchangeProviderSubjectTokenRequest) GetProvider() string

func (*ExchangeProviderSubjectTokenRequest) GetSandboxId 

func (x *ExchangeProviderSubjectTokenRequest) GetSandboxId() string

func (*ExchangeProviderSubjectTokenRequest) GetSupervisorJwtSvid 

func (x *ExchangeProviderSubjectTokenRequest) GetSupervisorJwtSvid() string

func (*ExchangeProviderSubjectTokenRequest) ProtoMessage 

func (*ExchangeProviderSubjectTokenRequest) ProtoMessage()

func (*ExchangeProviderSubjectTokenRequest) ProtoReflect 

func (x *ExchangeProviderSubjectTokenRequest) ProtoReflect() protoreflect.Message

func (*ExchangeProviderSubjectTokenRequest) Reset 

func (x *ExchangeProviderSubjectTokenRequest) Reset()

func (*ExchangeProviderSubjectTokenRequest) String 

func (x *ExchangeProviderSubjectTokenRequest) String() string

type ExchangeProviderSubjectTokenResponse 

type ExchangeProviderSubjectTokenResponse struct {
	AccessToken  string               `protobuf:"bytes,1,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
	ExpiresAfter *durationpb.Duration `protobuf:"bytes,102,opt,name=expires_after,json=expiresAfter,proto3" json:"expires_after,omitempty"`
	TokenType    string               `protobuf:"bytes,3,opt,name=token_type,json=tokenType,proto3" json:"token_type,omitempty"`
	// contains filtered or unexported fields
}

func (*ExchangeProviderSubjectTokenResponse) Descriptor deprecated 

func (*ExchangeProviderSubjectTokenResponse) Descriptor() ([]byte, []int)

Deprecated: Use ExchangeProviderSubjectTokenResponse.ProtoReflect.Descriptor instead.

func (*ExchangeProviderSubjectTokenResponse) GetAccessToken 

func (x *ExchangeProviderSubjectTokenResponse) GetAccessToken() string

func (*ExchangeProviderSubjectTokenResponse) GetExpiresAfter 

func (x *ExchangeProviderSubjectTokenResponse) GetExpiresAfter() *durationpb.Duration

func (*ExchangeProviderSubjectTokenResponse) GetTokenType 

func (x *ExchangeProviderSubjectTokenResponse) GetTokenType() string

func (*ExchangeProviderSubjectTokenResponse) ProtoMessage 

func (*ExchangeProviderSubjectTokenResponse) ProtoMessage()

func (*ExchangeProviderSubjectTokenResponse) ProtoReflect 

func (x *ExchangeProviderSubjectTokenResponse) ProtoReflect() protoreflect.Message

func (*ExchangeProviderSubjectTokenResponse) Reset 

func (x *ExchangeProviderSubjectTokenResponse) Reset()

func (*ExchangeProviderSubjectTokenResponse) String 

func (x *ExchangeProviderSubjectTokenResponse) String() string

type ExecSandboxEvent 

type ExecSandboxEvent struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*ExecSandboxEvent_Stdout
	//	*ExecSandboxEvent_Stderr
	//	*ExecSandboxEvent_Exit
	Payload isExecSandboxEvent_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

One event in a sandbox exec stream.

func (*ExecSandboxEvent) Descriptor deprecated 

func (*ExecSandboxEvent) Descriptor() ([]byte, []int)

Deprecated: Use ExecSandboxEvent.ProtoReflect.Descriptor instead.

func (*ExecSandboxEvent) GetExit 

func (x *ExecSandboxEvent) GetExit() *ExecSandboxExit

func (*ExecSandboxEvent) GetPayload 

func (x *ExecSandboxEvent) GetPayload() isExecSandboxEvent_Payload

func (*ExecSandboxEvent) GetStderr 

func (x *ExecSandboxEvent) GetStderr() *ExecSandboxStderr

func (*ExecSandboxEvent) GetStdout 

func (x *ExecSandboxEvent) GetStdout() *ExecSandboxStdout

func (*ExecSandboxEvent) ProtoMessage 

func (*ExecSandboxEvent) ProtoMessage()

func (*ExecSandboxEvent) ProtoReflect 

func (x *ExecSandboxEvent) ProtoReflect() protoreflect.Message

func (*ExecSandboxEvent) Reset 

func (x *ExecSandboxEvent) Reset()

func (*ExecSandboxEvent) String 

func (x *ExecSandboxEvent) String() string

type ExecSandboxEvent_Exit 

type ExecSandboxEvent_Exit struct {
	Exit *ExecSandboxExit `protobuf:"bytes,3,opt,name=exit,proto3,oneof"`
}

type ExecSandboxEvent_Stderr 

type ExecSandboxEvent_Stderr struct {
	Stderr *ExecSandboxStderr `protobuf:"bytes,2,opt,name=stderr,proto3,oneof"`
}

type ExecSandboxEvent_Stdout 

type ExecSandboxEvent_Stdout struct {
	Stdout *ExecSandboxStdout `protobuf:"bytes,1,opt,name=stdout,proto3,oneof"`
}

type ExecSandboxExit 

type ExecSandboxExit struct {
	ExitCode int32 `protobuf:"varint,1,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`
	// contains filtered or unexported fields
}

Final exit status for a sandbox exec.

func (*ExecSandboxExit) Descriptor deprecated 

func (*ExecSandboxExit) Descriptor() ([]byte, []int)

Deprecated: Use ExecSandboxExit.ProtoReflect.Descriptor instead.

func (*ExecSandboxExit) GetExitCode 

func (x *ExecSandboxExit) GetExitCode() int32

func (*ExecSandboxExit) ProtoMessage 

func (*ExecSandboxExit) ProtoMessage()

func (*ExecSandboxExit) ProtoReflect 

func (x *ExecSandboxExit) ProtoReflect() protoreflect.Message

func (*ExecSandboxExit) Reset 

func (x *ExecSandboxExit) Reset()

func (*ExecSandboxExit) String 

func (x *ExecSandboxExit) String() string

type ExecSandboxInput 

type ExecSandboxInput struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*ExecSandboxInput_Start
	//	*ExecSandboxInput_Stdin
	//	*ExecSandboxInput_Resize
	Payload isExecSandboxInput_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

Client-to-server message for interactive exec.

func (*ExecSandboxInput) Descriptor deprecated 

func (*ExecSandboxInput) Descriptor() ([]byte, []int)

Deprecated: Use ExecSandboxInput.ProtoReflect.Descriptor instead.

func (*ExecSandboxInput) GetPayload 

func (x *ExecSandboxInput) GetPayload() isExecSandboxInput_Payload

func (*ExecSandboxInput) GetResize 

func (x *ExecSandboxInput) GetResize() *ExecSandboxWindowResize

func (*ExecSandboxInput) GetStart 

func (x *ExecSandboxInput) GetStart() *ExecSandboxRequest

func (*ExecSandboxInput) GetStdin 

func (x *ExecSandboxInput) GetStdin() []byte

func (*ExecSandboxInput) ProtoMessage 

func (*ExecSandboxInput) ProtoMessage()

func (*ExecSandboxInput) ProtoReflect 

func (x *ExecSandboxInput) ProtoReflect() protoreflect.Message

func (*ExecSandboxInput) Reset 

func (x *ExecSandboxInput) Reset()

func (*ExecSandboxInput) String 

func (x *ExecSandboxInput) String() string

type ExecSandboxInput_Resize 

type ExecSandboxInput_Resize struct {
	// Terminal window size change.
	Resize *ExecSandboxWindowResize `protobuf:"bytes,3,opt,name=resize,proto3,oneof"`
}

type ExecSandboxInput_Start 

type ExecSandboxInput_Start struct {
	// First message: exec request metadata.
	Start *ExecSandboxRequest `protobuf:"bytes,1,opt,name=start,proto3,oneof"`
}

type ExecSandboxInput_Stdin 

type ExecSandboxInput_Stdin struct {
	// Subsequent messages: raw stdin bytes.
	Stdin []byte `protobuf:"bytes,2,opt,name=stdin,proto3,oneof"`
}

type ExecSandboxRequest 

type ExecSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,12,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Canonical sandbox name.
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Command and arguments.
	Command []string `protobuf:"bytes,2,rep,name=command,proto3" json:"command,omitempty"`
	// Optional working directory.
	Workdir string `protobuf:"bytes,3,opt,name=workdir,proto3" json:"workdir,omitempty"`
	// Optional environment overrides.
	Environment map[string]string `` /* 149-byte string literal not displayed */
	// Optional execution timeout. Absence means no timeout.
	ExecutionTimeout *durationpb.Duration `protobuf:"bytes,105,opt,name=execution_timeout,json=executionTimeout,proto3" json:"execution_timeout,omitempty"`
	// Optional stdin payload passed to the command.
	Stdin []byte `protobuf:"bytes,6,opt,name=stdin,proto3" json:"stdin,omitempty"`
	// Request a pseudo-terminal for the remote command.
	Tty bool `protobuf:"varint,7,opt,name=tty,proto3" json:"tty,omitempty"`
	// Initial terminal columns (used when tty=true, 0 = use default).
	Cols uint32 `protobuf:"varint,8,opt,name=cols,proto3" json:"cols,omitempty"`
	// Initial terminal rows (used when tty=true, 0 = use default).
	Rows uint32 `protobuf:"varint,9,opt,name=rows,proto3" json:"rows,omitempty"`
	// Skip sourcing shell login/profile startup files before running the command.
	// When false (the default), the command runs through a login shell
	// (`bash -lc`) so user startup files (.bash_profile/.profile, and .bashrc if
	// sourced by them) are applied. When true, the command runs without those
	// files (`bash -c`), for automation that needs predictable startup behavior.
	NoLoginShell bool `protobuf:"varint,10,opt,name=no_login_shell,json=noLoginShell,proto3" json:"no_login_shell,omitempty"`
	// Optional nonzero UUID for durable launch admission. Also applies to the
	// initial ExecSandboxInteractive start message. Duplicates never relaunch,
	// reattach, or replay output/stdin. Unconfirmed executions remain fenced;
	// confirmed terminal executions retain the fence for 24 hours.
	RequestId string `protobuf:"bytes,11,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Execute command request.

func (*ExecSandboxRequest) Descriptor deprecated 

func (*ExecSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use ExecSandboxRequest.ProtoReflect.Descriptor instead.

func (*ExecSandboxRequest) GetCols 

func (x *ExecSandboxRequest) GetCols() uint32

func (*ExecSandboxRequest) GetCommand 

func (x *ExecSandboxRequest) GetCommand() []string

func (*ExecSandboxRequest) GetEnvironment 

func (x *ExecSandboxRequest) GetEnvironment() map[string]string

func (*ExecSandboxRequest) GetExecutionTimeout 

func (x *ExecSandboxRequest) GetExecutionTimeout() *durationpb.Duration

func (*ExecSandboxRequest) GetNoLoginShell 

func (x *ExecSandboxRequest) GetNoLoginShell() bool

func (*ExecSandboxRequest) GetRequestId 

func (x *ExecSandboxRequest) GetRequestId() string

func (*ExecSandboxRequest) GetRows 

func (x *ExecSandboxRequest) GetRows() uint32

func (*ExecSandboxRequest) GetSandbox 

func (x *ExecSandboxRequest) GetSandbox() string

func (*ExecSandboxRequest) GetStdin 

func (x *ExecSandboxRequest) GetStdin() []byte

func (*ExecSandboxRequest) GetTty 

func (x *ExecSandboxRequest) GetTty() bool

func (*ExecSandboxRequest) GetWorkdir 

func (x *ExecSandboxRequest) GetWorkdir() string

func (*ExecSandboxRequest) GetWorkspaceScope 

func (x *ExecSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ExecSandboxRequest) ProtoMessage 

func (*ExecSandboxRequest) ProtoMessage()

func (*ExecSandboxRequest) ProtoReflect 

func (x *ExecSandboxRequest) ProtoReflect() protoreflect.Message

func (*ExecSandboxRequest) Reset 

func (x *ExecSandboxRequest) Reset()

func (*ExecSandboxRequest) String 

func (x *ExecSandboxRequest) String() string

type ExecSandboxStderr 

type ExecSandboxStderr struct {
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

One stderr chunk from a sandbox exec.

func (*ExecSandboxStderr) Descriptor deprecated 

func (*ExecSandboxStderr) Descriptor() ([]byte, []int)

Deprecated: Use ExecSandboxStderr.ProtoReflect.Descriptor instead.

func (*ExecSandboxStderr) GetData 

func (x *ExecSandboxStderr) GetData() []byte

func (*ExecSandboxStderr) ProtoMessage 

func (*ExecSandboxStderr) ProtoMessage()

func (*ExecSandboxStderr) ProtoReflect 

func (x *ExecSandboxStderr) ProtoReflect() protoreflect.Message

func (*ExecSandboxStderr) Reset 

func (x *ExecSandboxStderr) Reset()

func (*ExecSandboxStderr) String 

func (x *ExecSandboxStderr) String() string

type ExecSandboxStdout 

type ExecSandboxStdout struct {
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

One stdout chunk from a sandbox exec.

func (*ExecSandboxStdout) Descriptor deprecated 

func (*ExecSandboxStdout) Descriptor() ([]byte, []int)

Deprecated: Use ExecSandboxStdout.ProtoReflect.Descriptor instead.

func (*ExecSandboxStdout) GetData 

func (x *ExecSandboxStdout) GetData() []byte

func (*ExecSandboxStdout) ProtoMessage 

func (*ExecSandboxStdout) ProtoMessage()

func (*ExecSandboxStdout) ProtoReflect 

func (x *ExecSandboxStdout) ProtoReflect() protoreflect.Message

func (*ExecSandboxStdout) Reset 

func (x *ExecSandboxStdout) Reset()

func (*ExecSandboxStdout) String 

func (x *ExecSandboxStdout) String() string

type ExecSandboxWindowResize 

type ExecSandboxWindowResize struct {
	Cols uint32 `protobuf:"varint,1,opt,name=cols,proto3" json:"cols,omitempty"`
	Rows uint32 `protobuf:"varint,2,opt,name=rows,proto3" json:"rows,omitempty"`
	// contains filtered or unexported fields
}

Terminal window resize event for interactive exec.

func (*ExecSandboxWindowResize) Descriptor deprecated 

func (*ExecSandboxWindowResize) Descriptor() ([]byte, []int)

Deprecated: Use ExecSandboxWindowResize.ProtoReflect.Descriptor instead.

func (*ExecSandboxWindowResize) GetCols 

func (x *ExecSandboxWindowResize) GetCols() uint32

func (*ExecSandboxWindowResize) GetRows 

func (x *ExecSandboxWindowResize) GetRows() uint32

func (*ExecSandboxWindowResize) ProtoMessage 

func (*ExecSandboxWindowResize) ProtoMessage()

func (*ExecSandboxWindowResize) ProtoReflect 

func (x *ExecSandboxWindowResize) ProtoReflect() protoreflect.Message

func (*ExecSandboxWindowResize) Reset 

func (x *ExecSandboxWindowResize) Reset()

func (*ExecSandboxWindowResize) String 

func (x *ExecSandboxWindowResize) String() string

type ExposeServiceRequest 

type ExposeServiceRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,5,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Service name within the sandbox.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Loopback TCP port inside the sandbox.
	TargetPort uint32 `protobuf:"varint,3,opt,name=target_port,json=targetPort,proto3" json:"target_port,omitempty"`
	// Whether to print/use the browser-facing service URL.
	Domain  bool   `protobuf:"varint,4,opt,name=domain,proto3" json:"domain,omitempty"`
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,6,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// Application authorization behavior. Omission resolves to STRIP.
	AuthorizationMode ServiceAuthorizationMode `` /* 156-byte string literal not displayed */
	// contains filtered or unexported fields
}

Request to expose an HTTP service running inside a sandbox.

func (*ExposeServiceRequest) Descriptor deprecated 

func (*ExposeServiceRequest) Descriptor() ([]byte, []int)

Deprecated: Use ExposeServiceRequest.ProtoReflect.Descriptor instead.

func (*ExposeServiceRequest) GetAuthorizationMode 

func (x *ExposeServiceRequest) GetAuthorizationMode() ServiceAuthorizationMode

func (*ExposeServiceRequest) GetDomain 

func (x *ExposeServiceRequest) GetDomain() bool

func (*ExposeServiceRequest) GetName 

func (x *ExposeServiceRequest) GetName() string

func (*ExposeServiceRequest) GetRequestId 

func (x *ExposeServiceRequest) GetRequestId() string

func (*ExposeServiceRequest) GetSandbox 

func (x *ExposeServiceRequest) GetSandbox() string

func (*ExposeServiceRequest) GetTargetPort 

func (x *ExposeServiceRequest) GetTargetPort() uint32

func (*ExposeServiceRequest) GetWorkspaceScope 

func (x *ExposeServiceRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ExposeServiceRequest) ProtoMessage 

func (*ExposeServiceRequest) ProtoMessage()

func (*ExposeServiceRequest) ProtoReflect 

func (x *ExposeServiceRequest) ProtoReflect() protoreflect.Message

func (*ExposeServiceRequest) Reset 

func (x *ExposeServiceRequest) Reset()

func (*ExposeServiceRequest) String 

func (x *ExposeServiceRequest) String() string

type ExtensionKind 

type ExtensionKind int32
const (
	ExtensionKind_EXTENSION_KIND_UNSPECIFIED           ExtensionKind = 0
	ExtensionKind_EXTENSION_KIND_COMPUTE_DRIVER        ExtensionKind = 1
	ExtensionKind_EXTENSION_KIND_CREDENTIAL_DRIVER     ExtensionKind = 2
	ExtensionKind_EXTENSION_KIND_GATEWAY_INTERCEPTOR   ExtensionKind = 3
	ExtensionKind_EXTENSION_KIND_SUPERVISOR_MIDDLEWARE ExtensionKind = 4
)

func (ExtensionKind) Descriptor 

func (ExtensionKind) Descriptor() protoreflect.EnumDescriptor

func (ExtensionKind) Enum 

func (x ExtensionKind) Enum() *ExtensionKind

func (ExtensionKind) EnumDescriptor deprecated 

func (ExtensionKind) EnumDescriptor() ([]byte, []int)

Deprecated: Use ExtensionKind.Descriptor instead.

func (ExtensionKind) Number 

func (x ExtensionKind) Number() protoreflect.EnumNumber

func (ExtensionKind) String 

func (x ExtensionKind) String() string

func (ExtensionKind) Type 

func (ExtensionKind) Type() protoreflect.EnumType

type ExtensionServiceCredential 

type ExtensionServiceCredential struct {

	// Operator registration name used to correlate the credential with the
	// stable service registration delivered by GetSandboxConfig.
	ServiceName string `protobuf:"bytes,1,opt,name=service_name,json=serviceName,proto3" json:"service_name,omitempty"`
	// Gateway-minted JWT with an audience derived from the registration.
	Token string `protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
	// Absolute expiry of the token.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,103,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// contains filtered or unexported fields
}

Short-lived credential for one policy-authorized extension service. Kept at the end of the file so adding it does not renumber existing generated message descriptors.

func (*ExtensionServiceCredential) Descriptor deprecated 

func (*ExtensionServiceCredential) Descriptor() ([]byte, []int)

Deprecated: Use ExtensionServiceCredential.ProtoReflect.Descriptor instead.

func (*ExtensionServiceCredential) GetExpirationTime 

func (x *ExtensionServiceCredential) GetExpirationTime() *timestamppb.Timestamp

func (*ExtensionServiceCredential) GetServiceName 

func (x *ExtensionServiceCredential) GetServiceName() string

func (*ExtensionServiceCredential) GetToken 

func (x *ExtensionServiceCredential) GetToken() string

func (*ExtensionServiceCredential) ProtoMessage 

func (*ExtensionServiceCredential) ProtoMessage()

func (*ExtensionServiceCredential) ProtoReflect 

func (x *ExtensionServiceCredential) ProtoReflect() protoreflect.Message

func (*ExtensionServiceCredential) Reset 

func (x *ExtensionServiceCredential) Reset()

func (*ExtensionServiceCredential) String 

func (x *ExtensionServiceCredential) String() string

type FinalizeMainProcessExitRequest 

type FinalizeMainProcessExitRequest struct {
	SandboxId  string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	InstanceId string `protobuf:"bytes,2,opt,name=instance_id,json=instanceId,proto3" json:"instance_id,omitempty"`
	// contains filtered or unexported fields
}

Terminal-delivery completion reported after all expected foreground SSH attachments close. A successful response permits ephemeral cleanup.

func (*FinalizeMainProcessExitRequest) Descriptor deprecated 

func (*FinalizeMainProcessExitRequest) Descriptor() ([]byte, []int)

Deprecated: Use FinalizeMainProcessExitRequest.ProtoReflect.Descriptor instead.

func (*FinalizeMainProcessExitRequest) GetInstanceId 

func (x *FinalizeMainProcessExitRequest) GetInstanceId() string

func (*FinalizeMainProcessExitRequest) GetSandboxId 

func (x *FinalizeMainProcessExitRequest) GetSandboxId() string

func (*FinalizeMainProcessExitRequest) ProtoMessage 

func (*FinalizeMainProcessExitRequest) ProtoMessage()

func (*FinalizeMainProcessExitRequest) ProtoReflect 

func (x *FinalizeMainProcessExitRequest) ProtoReflect() protoreflect.Message

func (*FinalizeMainProcessExitRequest) Reset 

func (x *FinalizeMainProcessExitRequest) Reset()

func (*FinalizeMainProcessExitRequest) String 

func (x *FinalizeMainProcessExitRequest) String() string

type FinalizeMainProcessExitResponse 

type FinalizeMainProcessExitResponse struct {
	// contains filtered or unexported fields
}

func (*FinalizeMainProcessExitResponse) Descriptor deprecated 

func (*FinalizeMainProcessExitResponse) Descriptor() ([]byte, []int)

Deprecated: Use FinalizeMainProcessExitResponse.ProtoReflect.Descriptor instead.

func (*FinalizeMainProcessExitResponse) ProtoMessage 

func (*FinalizeMainProcessExitResponse) ProtoMessage()

func (*FinalizeMainProcessExitResponse) ProtoReflect 

func (x *FinalizeMainProcessExitResponse) ProtoReflect() protoreflect.Message

func (*FinalizeMainProcessExitResponse) Reset 

func (x *FinalizeMainProcessExitResponse) Reset()

func (*FinalizeMainProcessExitResponse) String 

func (x *FinalizeMainProcessExitResponse) String() string

type GatewayHeartbeat 

type GatewayHeartbeat struct {
	// contains filtered or unexported fields
}

Gateway heartbeat.

func (*GatewayHeartbeat) Descriptor deprecated 

func (*GatewayHeartbeat) Descriptor() ([]byte, []int)

Deprecated: Use GatewayHeartbeat.ProtoReflect.Descriptor instead.

func (*GatewayHeartbeat) ProtoMessage 

func (*GatewayHeartbeat) ProtoMessage()

func (*GatewayHeartbeat) ProtoReflect 

func (x *GatewayHeartbeat) ProtoReflect() protoreflect.Message

func (*GatewayHeartbeat) Reset 

func (x *GatewayHeartbeat) Reset()

func (*GatewayHeartbeat) String 

func (x *GatewayHeartbeat) String() string

type GatewayMessage 

type GatewayMessage struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*GatewayMessage_SessionAccepted
	//	*GatewayMessage_SessionRejected
	//	*GatewayMessage_Heartbeat
	//	*GatewayMessage_RelayOpen
	//	*GatewayMessage_RelayClose
	//	*GatewayMessage_SessionRedirect
	//	*GatewayMessage_ConfigUpdate
	Payload isGatewayMessage_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

Envelope for gateway-to-supervisor messages on the ConnectSupervisor stream.

func (*GatewayMessage) Descriptor deprecated 

func (*GatewayMessage) Descriptor() ([]byte, []int)

Deprecated: Use GatewayMessage.ProtoReflect.Descriptor instead.

func (*GatewayMessage) GetConfigUpdate 

func (x *GatewayMessage) GetConfigUpdate() *ConfigUpdate

func (*GatewayMessage) GetHeartbeat 

func (x *GatewayMessage) GetHeartbeat() *GatewayHeartbeat

func (*GatewayMessage) GetPayload 

func (x *GatewayMessage) GetPayload() isGatewayMessage_Payload

func (*GatewayMessage) GetRelayClose 

func (x *GatewayMessage) GetRelayClose() *RelayClose

func (*GatewayMessage) GetRelayOpen 

func (x *GatewayMessage) GetRelayOpen() *RelayOpen

func (*GatewayMessage) GetSessionAccepted 

func (x *GatewayMessage) GetSessionAccepted() *SessionAccepted

func (*GatewayMessage) GetSessionRedirect 

func (x *GatewayMessage) GetSessionRedirect() *SessionRedirect

func (*GatewayMessage) GetSessionRejected 

func (x *GatewayMessage) GetSessionRejected() *SessionRejected

func (*GatewayMessage) ProtoMessage 

func (*GatewayMessage) ProtoMessage()

func (*GatewayMessage) ProtoReflect 

func (x *GatewayMessage) ProtoReflect() protoreflect.Message

func (*GatewayMessage) Reset 

func (x *GatewayMessage) Reset()

func (*GatewayMessage) String 

func (x *GatewayMessage) String() string

type GatewayMessage_ConfigUpdate 

type GatewayMessage_ConfigUpdate struct {
	ConfigUpdate *ConfigUpdate `protobuf:"bytes,7,opt,name=config_update,json=configUpdate,proto3,oneof"`
}

type GatewayMessage_Heartbeat 

type GatewayMessage_Heartbeat struct {
	Heartbeat *GatewayHeartbeat `protobuf:"bytes,3,opt,name=heartbeat,proto3,oneof"`
}

type GatewayMessage_RelayClose 

type GatewayMessage_RelayClose struct {
	RelayClose *RelayClose `protobuf:"bytes,5,opt,name=relay_close,json=relayClose,proto3,oneof"`
}

type GatewayMessage_RelayOpen 

type GatewayMessage_RelayOpen struct {
	RelayOpen *RelayOpen `protobuf:"bytes,4,opt,name=relay_open,json=relayOpen,proto3,oneof"`
}

type GatewayMessage_SessionAccepted 

type GatewayMessage_SessionAccepted struct {
	SessionAccepted *SessionAccepted `protobuf:"bytes,1,opt,name=session_accepted,json=sessionAccepted,proto3,oneof"`
}

type GatewayMessage_SessionRedirect 

type GatewayMessage_SessionRedirect struct {
	SessionRedirect *SessionRedirect `protobuf:"bytes,6,opt,name=session_redirect,json=sessionRedirect,proto3,oneof"`
}

type GatewayMessage_SessionRejected 

type GatewayMessage_SessionRejected struct {
	SessionRejected *SessionRejected `protobuf:"bytes,2,opt,name=session_rejected,json=sessionRejected,proto3,oneof"`
}

type GetCurrentUserRequest 

type GetCurrentUserRequest struct {
	// contains filtered or unexported fields
}

Current-user request. The identity comes from the authenticated request.

func (*GetCurrentUserRequest) Descriptor deprecated 

func (*GetCurrentUserRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetCurrentUserRequest.ProtoReflect.Descriptor instead.

func (*GetCurrentUserRequest) ProtoMessage 

func (*GetCurrentUserRequest) ProtoMessage()

func (*GetCurrentUserRequest) ProtoReflect 

func (x *GetCurrentUserRequest) ProtoReflect() protoreflect.Message

func (*GetCurrentUserRequest) Reset 

func (x *GetCurrentUserRequest) Reset()

func (*GetCurrentUserRequest) String 

func (x *GetCurrentUserRequest) String() string

type GetCurrentUserResponse 

type GetCurrentUserResponse struct {

	// Stable identity subject (for example, the OIDC `sub` claim).
	Subject string `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	// Human-readable identity name when supplied by the authentication provider.
	DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Roles granted to the authenticated identity.
	Roles []string `protobuf:"bytes,3,rep,name=roles,proto3" json:"roles,omitempty"`
	// OAuth2 scopes granted to the authenticated identity.
	Scopes []string `protobuf:"bytes,4,rep,name=scopes,proto3" json:"scopes,omitempty"`
	// Authentication provider that established the identity.
	IdentityProvider string `protobuf:"bytes,5,opt,name=identity_provider,json=identityProvider,proto3" json:"identity_provider,omitempty"`
	// contains filtered or unexported fields
}

Authenticated user identity as validated by the gateway.

func (*GetCurrentUserResponse) Descriptor deprecated 

func (*GetCurrentUserResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetCurrentUserResponse.ProtoReflect.Descriptor instead.

func (*GetCurrentUserResponse) GetDisplayName 

func (x *GetCurrentUserResponse) GetDisplayName() string

func (*GetCurrentUserResponse) GetIdentityProvider 

func (x *GetCurrentUserResponse) GetIdentityProvider() string

func (*GetCurrentUserResponse) GetRoles 

func (x *GetCurrentUserResponse) GetRoles() []string

func (*GetCurrentUserResponse) GetScopes 

func (x *GetCurrentUserResponse) GetScopes() []string

func (*GetCurrentUserResponse) GetSubject 

func (x *GetCurrentUserResponse) GetSubject() string

func (*GetCurrentUserResponse) ProtoMessage 

func (*GetCurrentUserResponse) ProtoMessage()

func (*GetCurrentUserResponse) ProtoReflect 

func (x *GetCurrentUserResponse) ProtoReflect() protoreflect.Message

func (*GetCurrentUserResponse) Reset 

func (x *GetCurrentUserResponse) Reset()

func (*GetCurrentUserResponse) String 

func (x *GetCurrentUserResponse) String() string

type GetDraftHistoryRequest 

type GetDraftHistoryRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Sandbox        string                         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// contains filtered or unexported fields
}

Get decision history for a sandbox's draft policy.

func (*GetDraftHistoryRequest) Descriptor deprecated 

func (*GetDraftHistoryRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetDraftHistoryRequest.ProtoReflect.Descriptor instead.

func (*GetDraftHistoryRequest) GetSandbox 

func (x *GetDraftHistoryRequest) GetSandbox() string

func (*GetDraftHistoryRequest) GetWorkspaceScope 

func (x *GetDraftHistoryRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetDraftHistoryRequest) ProtoMessage 

func (*GetDraftHistoryRequest) ProtoMessage()

func (*GetDraftHistoryRequest) ProtoReflect 

func (x *GetDraftHistoryRequest) ProtoReflect() protoreflect.Message

func (*GetDraftHistoryRequest) Reset 

func (x *GetDraftHistoryRequest) Reset()

func (*GetDraftHistoryRequest) String 

func (x *GetDraftHistoryRequest) String() string

type GetDraftHistoryResponse 

type GetDraftHistoryResponse struct {

	// Chronological decision history.
	Entries []*DraftHistoryEntry `protobuf:"bytes,1,rep,name=entries,proto3" json:"entries,omitempty"`
	// contains filtered or unexported fields
}

func (*GetDraftHistoryResponse) Descriptor deprecated 

func (*GetDraftHistoryResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetDraftHistoryResponse.ProtoReflect.Descriptor instead.

func (*GetDraftHistoryResponse) GetEntries 

func (x *GetDraftHistoryResponse) GetEntries() []*DraftHistoryEntry

func (*GetDraftHistoryResponse) ProtoMessage 

func (*GetDraftHistoryResponse) ProtoMessage()

func (*GetDraftHistoryResponse) ProtoReflect 

func (x *GetDraftHistoryResponse) ProtoReflect() protoreflect.Message

func (*GetDraftHistoryResponse) Reset 

func (x *GetDraftHistoryResponse) Reset()

func (*GetDraftHistoryResponse) String 

func (x *GetDraftHistoryResponse) String() string

type GetDraftPolicyRequest 

type GetDraftPolicyRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Optional status filter: "pending", "approved", "rejected", or "" for all.
	StatusFilter string `protobuf:"bytes,2,opt,name=status_filter,json=statusFilter,proto3" json:"status_filter,omitempty"`
	Sandbox      string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// contains filtered or unexported fields
}

Get draft policy for a sandbox.

func (*GetDraftPolicyRequest) Descriptor deprecated 

func (*GetDraftPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetDraftPolicyRequest.ProtoReflect.Descriptor instead.

func (*GetDraftPolicyRequest) GetSandbox 

func (x *GetDraftPolicyRequest) GetSandbox() string

func (*GetDraftPolicyRequest) GetStatusFilter 

func (x *GetDraftPolicyRequest) GetStatusFilter() string

func (*GetDraftPolicyRequest) GetWorkspaceScope 

func (x *GetDraftPolicyRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetDraftPolicyRequest) ProtoMessage 

func (*GetDraftPolicyRequest) ProtoMessage()

func (*GetDraftPolicyRequest) ProtoReflect 

func (x *GetDraftPolicyRequest) ProtoReflect() protoreflect.Message

func (*GetDraftPolicyRequest) Reset 

func (x *GetDraftPolicyRequest) Reset()

func (*GetDraftPolicyRequest) String 

func (x *GetDraftPolicyRequest) String() string

type GetDraftPolicyResponse 

type GetDraftPolicyResponse struct {

	// Draft policy chunks.
	Chunks []*PolicyChunk `protobuf:"bytes,1,rep,name=chunks,proto3" json:"chunks,omitempty"`
	// LLM-generated summary of all analysis (empty in mechanistic mode).
	RollingSummary string `protobuf:"bytes,2,opt,name=rolling_summary,json=rollingSummary,proto3" json:"rolling_summary,omitempty"`
	// Current draft version.
	DraftVersion uint64 `protobuf:"varint,3,opt,name=draft_version,json=draftVersion,proto3" json:"draft_version,omitempty"`
	// Time when the last analysis completed.
	LastAnalyzedTime *timestamppb.Timestamp `protobuf:"bytes,104,opt,name=last_analyzed_time,json=lastAnalyzedTime,proto3" json:"last_analyzed_time,omitempty"`
	// contains filtered or unexported fields
}

func (*GetDraftPolicyResponse) Descriptor deprecated 

func (*GetDraftPolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetDraftPolicyResponse.ProtoReflect.Descriptor instead.

func (*GetDraftPolicyResponse) GetChunks 

func (x *GetDraftPolicyResponse) GetChunks() []*PolicyChunk

func (*GetDraftPolicyResponse) GetDraftVersion 

func (x *GetDraftPolicyResponse) GetDraftVersion() uint64

func (*GetDraftPolicyResponse) GetLastAnalyzedTime 

func (x *GetDraftPolicyResponse) GetLastAnalyzedTime() *timestamppb.Timestamp

func (*GetDraftPolicyResponse) GetRollingSummary 

func (x *GetDraftPolicyResponse) GetRollingSummary() string

func (*GetDraftPolicyResponse) ProtoMessage 

func (*GetDraftPolicyResponse) ProtoMessage()

func (*GetDraftPolicyResponse) ProtoReflect 

func (x *GetDraftPolicyResponse) ProtoReflect() protoreflect.Message

func (*GetDraftPolicyResponse) Reset 

func (x *GetDraftPolicyResponse) Reset()

func (*GetDraftPolicyResponse) String 

func (x *GetDraftPolicyResponse) String() string

type GetGatewayInfoRequest 

type GetGatewayInfoRequest struct {
	// contains filtered or unexported fields
}

Gateway info request.

func (*GetGatewayInfoRequest) Descriptor deprecated 

func (*GetGatewayInfoRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetGatewayInfoRequest.ProtoReflect.Descriptor instead.

func (*GetGatewayInfoRequest) ProtoMessage 

func (*GetGatewayInfoRequest) ProtoMessage()

func (*GetGatewayInfoRequest) ProtoReflect 

func (x *GetGatewayInfoRequest) ProtoReflect() protoreflect.Message

func (*GetGatewayInfoRequest) Reset 

func (x *GetGatewayInfoRequest) Reset()

func (*GetGatewayInfoRequest) String 

func (x *GetGatewayInfoRequest) String() string

type GetGatewayInfoResponse 

type GetGatewayInfoResponse struct {

	// Service status.
	Status ServiceStatus `protobuf:"varint,1,opt,name=status,proto3,enum=openshell.v1.ServiceStatus" json:"status,omitempty"`
	// OpenShell gateway binary version.
	GatewayVersion string `protobuf:"bytes,2,opt,name=gateway_version,json=gatewayVersion,proto3" json:"gateway_version,omitempty"`
	// Compute driver runtimes initialized by this gateway. Current gateways
	// return exactly one entry.
	ComputeDrivers []*ComputeDriverInfo `protobuf:"bytes,3,rep,name=compute_drivers,json=computeDrivers,proto3" json:"compute_drivers,omitempty"`
	// Negotiated non-secret metadata for every initialized extension.
	Extensions []*NegotiatedExtensionInfo `protobuf:"bytes,4,rep,name=extensions,proto3" json:"extensions,omitempty"`
	// contains filtered or unexported fields
}

Gateway info response.

func (*GetGatewayInfoResponse) Descriptor deprecated 

func (*GetGatewayInfoResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetGatewayInfoResponse.ProtoReflect.Descriptor instead.

func (*GetGatewayInfoResponse) GetComputeDrivers 

func (x *GetGatewayInfoResponse) GetComputeDrivers() []*ComputeDriverInfo

func (*GetGatewayInfoResponse) GetExtensions 

func (x *GetGatewayInfoResponse) GetExtensions() []*NegotiatedExtensionInfo

func (*GetGatewayInfoResponse) GetGatewayVersion 

func (x *GetGatewayInfoResponse) GetGatewayVersion() string

func (*GetGatewayInfoResponse) GetStatus 

func (x *GetGatewayInfoResponse) GetStatus() ServiceStatus

func (*GetGatewayInfoResponse) ProtoMessage 

func (*GetGatewayInfoResponse) ProtoMessage()

func (*GetGatewayInfoResponse) ProtoReflect 

func (x *GetGatewayInfoResponse) ProtoReflect() protoreflect.Message

func (*GetGatewayInfoResponse) Reset 

func (x *GetGatewayInfoResponse) Reset()

func (*GetGatewayInfoResponse) String 

func (x *GetGatewayInfoResponse) String() string

type GetProviderCredentialsRequest 

type GetProviderCredentialsRequest struct {

	// Required named workspace selection; all_workspaces is not accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,1,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Provider canonical name.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Nonempty selection of runtime environment keys (maximum 32).
	CredentialKeys []string `protobuf:"bytes,3,rep,name=credential_keys,json=credentialKeys,proto3" json:"credential_keys,omitempty"`
	// Omitted/zero uses a five-minute safety margin. Maximum is 24 hours.
	MinimumRemainingLifetime *durationpb.Duration `` /* 135-byte string literal not displayed */
	// contains filtered or unexported fields
}

Retrieve selected runtime credentials from one provider in one workspace. Refresh side effects can persist even when the complete request fails.

func (*GetProviderCredentialsRequest) Descriptor deprecated 

func (*GetProviderCredentialsRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetProviderCredentialsRequest.ProtoReflect.Descriptor instead.

func (*GetProviderCredentialsRequest) GetCredentialKeys 

func (x *GetProviderCredentialsRequest) GetCredentialKeys() []string

func (*GetProviderCredentialsRequest) GetMinimumRemainingLifetime 

func (x *GetProviderCredentialsRequest) GetMinimumRemainingLifetime() *durationpb.Duration

func (*GetProviderCredentialsRequest) GetName 

func (x *GetProviderCredentialsRequest) GetName() string

func (*GetProviderCredentialsRequest) GetWorkspaceScope 

func (x *GetProviderCredentialsRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetProviderCredentialsRequest) ProtoMessage 

func (*GetProviderCredentialsRequest) ProtoMessage()

func (*GetProviderCredentialsRequest) ProtoReflect 

func (x *GetProviderCredentialsRequest) ProtoReflect() protoreflect.Message

func (*GetProviderCredentialsRequest) Reset 

func (x *GetProviderCredentialsRequest) Reset()

func (*GetProviderCredentialsRequest) String 

func (x *GetProviderCredentialsRequest) String() string

type GetProviderCredentialsResponse 

type GetProviderCredentialsResponse struct {

	// All requested values or an error; no partial response.
	Credentials map[string]*ProviderCredentialValue `` /* 149-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*GetProviderCredentialsResponse) Descriptor deprecated 

func (*GetProviderCredentialsResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetProviderCredentialsResponse.ProtoReflect.Descriptor instead.

func (*GetProviderCredentialsResponse) GetCredentials 

func (x *GetProviderCredentialsResponse) GetCredentials() map[string]*ProviderCredentialValue

func (*GetProviderCredentialsResponse) ProtoMessage 

func (*GetProviderCredentialsResponse) ProtoMessage()

func (*GetProviderCredentialsResponse) ProtoReflect 

func (x *GetProviderCredentialsResponse) ProtoReflect() protoreflect.Message

func (*GetProviderCredentialsResponse) Reset 

func (x *GetProviderCredentialsResponse) Reset()

func (*GetProviderCredentialsResponse) String 

func (x *GetProviderCredentialsResponse) String() string

type GetProviderProfileRequest 

type GetProviderProfileRequest struct {

	// Workspace scope. Omit for platform profiles; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Id             string                         `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

Fetch provider type profile request.

func (*GetProviderProfileRequest) Descriptor deprecated 

func (*GetProviderProfileRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetProviderProfileRequest.ProtoReflect.Descriptor instead.

func (*GetProviderProfileRequest) GetId 

func (x *GetProviderProfileRequest) GetId() string

func (*GetProviderProfileRequest) GetWorkspaceScope 

func (x *GetProviderProfileRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetProviderProfileRequest) ProtoMessage 

func (*GetProviderProfileRequest) ProtoMessage()

func (*GetProviderProfileRequest) ProtoReflect 

func (x *GetProviderProfileRequest) ProtoReflect() protoreflect.Message

func (*GetProviderProfileRequest) Reset 

func (x *GetProviderProfileRequest) Reset()

func (*GetProviderProfileRequest) String 

func (x *GetProviderProfileRequest) String() string

type GetProviderRefreshStatusRequest 

type GetProviderRefreshStatusRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Provider       string                         `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	CredentialKey  string                         `protobuf:"bytes,2,opt,name=credential_key,json=credentialKey,proto3" json:"credential_key,omitempty"`
	// contains filtered or unexported fields
}

func (*GetProviderRefreshStatusRequest) Descriptor deprecated 

func (*GetProviderRefreshStatusRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetProviderRefreshStatusRequest.ProtoReflect.Descriptor instead.

func (*GetProviderRefreshStatusRequest) GetCredentialKey 

func (x *GetProviderRefreshStatusRequest) GetCredentialKey() string

func (*GetProviderRefreshStatusRequest) GetProvider 

func (x *GetProviderRefreshStatusRequest) GetProvider() string

func (*GetProviderRefreshStatusRequest) GetWorkspaceScope 

func (x *GetProviderRefreshStatusRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetProviderRefreshStatusRequest) ProtoMessage 

func (*GetProviderRefreshStatusRequest) ProtoMessage()

func (*GetProviderRefreshStatusRequest) ProtoReflect 

func (x *GetProviderRefreshStatusRequest) ProtoReflect() protoreflect.Message

func (*GetProviderRefreshStatusRequest) Reset 

func (x *GetProviderRefreshStatusRequest) Reset()

func (*GetProviderRefreshStatusRequest) String 

func (x *GetProviderRefreshStatusRequest) String() string

type GetProviderRefreshStatusResponse 

type GetProviderRefreshStatusResponse struct {
	Credentials []*ProviderCredentialRefreshStatus `protobuf:"bytes,1,rep,name=credentials,proto3" json:"credentials,omitempty"`
	// contains filtered or unexported fields
}

func (*GetProviderRefreshStatusResponse) Descriptor deprecated 

func (*GetProviderRefreshStatusResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetProviderRefreshStatusResponse.ProtoReflect.Descriptor instead.

func (*GetProviderRefreshStatusResponse) GetCredentials 

func (x *GetProviderRefreshStatusResponse) GetCredentials() []*ProviderCredentialRefreshStatus

func (*GetProviderRefreshStatusResponse) ProtoMessage 

func (*GetProviderRefreshStatusResponse) ProtoMessage()

func (*GetProviderRefreshStatusResponse) ProtoReflect 

func (x *GetProviderRefreshStatusResponse) ProtoReflect() protoreflect.Message

func (*GetProviderRefreshStatusResponse) Reset 

func (x *GetProviderRefreshStatusResponse) Reset()

func (*GetProviderRefreshStatusResponse) String 

func (x *GetProviderRefreshStatusResponse) String() string

type GetProviderRequest 

type GetProviderRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Get provider request.

func (*GetProviderRequest) Descriptor deprecated 

func (*GetProviderRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetProviderRequest.ProtoReflect.Descriptor instead.

func (*GetProviderRequest) GetName 

func (x *GetProviderRequest) GetName() string

func (*GetProviderRequest) GetWorkspaceScope 

func (x *GetProviderRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetProviderRequest) ProtoMessage 

func (*GetProviderRequest) ProtoMessage()

func (*GetProviderRequest) ProtoReflect 

func (x *GetProviderRequest) ProtoReflect() protoreflect.Message

func (*GetProviderRequest) Reset 

func (x *GetProviderRequest) Reset()

func (*GetProviderRequest) String 

func (x *GetProviderRequest) String() string

type GetSandboxLogsRequest 

type GetSandboxLogsRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,6,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Canonical sandbox name.
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Maximum number of log lines to return. 0 means use default (2000).
	Lines uint32 `protobuf:"varint,2,opt,name=lines,proto3" json:"lines,omitempty"`
	// Only include logs at or after this time. Absence means no filter.
	SinceTime *timestamppb.Timestamp `protobuf:"bytes,103,opt,name=since_time,json=sinceTime,proto3" json:"since_time,omitempty"`
	// Filter by log source (e.g. "gateway", "sandbox"). Empty means all sources.
	Sources []string `protobuf:"bytes,4,rep,name=sources,proto3" json:"sources,omitempty"`
	// Minimum log level to include (e.g. "INFO", "WARN", "ERROR"). Empty means all levels.
	MinLevel string `protobuf:"bytes,5,opt,name=min_level,json=minLevel,proto3" json:"min_level,omitempty"`
	// contains filtered or unexported fields
}

Get sandbox logs request (one-shot fetch).

func (*GetSandboxLogsRequest) Descriptor deprecated 

func (*GetSandboxLogsRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxLogsRequest.ProtoReflect.Descriptor instead.

func (*GetSandboxLogsRequest) GetLines 

func (x *GetSandboxLogsRequest) GetLines() uint32

func (*GetSandboxLogsRequest) GetMinLevel 

func (x *GetSandboxLogsRequest) GetMinLevel() string

func (*GetSandboxLogsRequest) GetSandbox 

func (x *GetSandboxLogsRequest) GetSandbox() string

func (*GetSandboxLogsRequest) GetSinceTime 

func (x *GetSandboxLogsRequest) GetSinceTime() *timestamppb.Timestamp

func (*GetSandboxLogsRequest) GetSources 

func (x *GetSandboxLogsRequest) GetSources() []string

func (*GetSandboxLogsRequest) GetWorkspaceScope 

func (x *GetSandboxLogsRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetSandboxLogsRequest) ProtoMessage 

func (*GetSandboxLogsRequest) ProtoMessage()

func (*GetSandboxLogsRequest) ProtoReflect 

func (x *GetSandboxLogsRequest) ProtoReflect() protoreflect.Message

func (*GetSandboxLogsRequest) Reset 

func (x *GetSandboxLogsRequest) Reset()

func (*GetSandboxLogsRequest) String 

func (x *GetSandboxLogsRequest) String() string

type GetSandboxLogsResponse 

type GetSandboxLogsResponse struct {

	// Log lines in chronological order.
	Logs []*SandboxLogLine `protobuf:"bytes,1,rep,name=logs,proto3" json:"logs,omitempty"`
	// Total number of lines in the server's buffer for this sandbox.
	BufferTotal uint32 `protobuf:"varint,2,opt,name=buffer_total,json=bufferTotal,proto3" json:"buffer_total,omitempty"`
	// contains filtered or unexported fields
}

Get sandbox logs response.

func (*GetSandboxLogsResponse) Descriptor deprecated 

func (*GetSandboxLogsResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxLogsResponse.ProtoReflect.Descriptor instead.

func (*GetSandboxLogsResponse) GetBufferTotal 

func (x *GetSandboxLogsResponse) GetBufferTotal() uint32

func (*GetSandboxLogsResponse) GetLogs 

func (x *GetSandboxLogsResponse) GetLogs() []*SandboxLogLine

func (*GetSandboxLogsResponse) ProtoMessage 

func (*GetSandboxLogsResponse) ProtoMessage()

func (*GetSandboxLogsResponse) ProtoReflect 

func (x *GetSandboxLogsResponse) ProtoReflect() protoreflect.Message

func (*GetSandboxLogsResponse) Reset 

func (x *GetSandboxLogsResponse) Reset()

func (*GetSandboxLogsResponse) String 

func (x *GetSandboxLogsResponse) String() string

type GetSandboxPolicyStatusRequest 

type GetSandboxPolicyStatusRequest struct {

	// Workspace scope. Omit for global queries; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The specific policy version to query. 0 means latest.
	Version uint32 `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	// Query global policy revisions instead of a sandbox-scoped one.
	Global  bool   `protobuf:"varint,3,opt,name=global,proto3" json:"global,omitempty"`
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// contains filtered or unexported fields
}

Get sandbox policy status request.

func (*GetSandboxPolicyStatusRequest) Descriptor deprecated 

func (*GetSandboxPolicyStatusRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxPolicyStatusRequest.ProtoReflect.Descriptor instead.

func (*GetSandboxPolicyStatusRequest) GetGlobal 

func (x *GetSandboxPolicyStatusRequest) GetGlobal() bool

func (*GetSandboxPolicyStatusRequest) GetSandbox 

func (x *GetSandboxPolicyStatusRequest) GetSandbox() string

func (*GetSandboxPolicyStatusRequest) GetVersion 

func (x *GetSandboxPolicyStatusRequest) GetVersion() uint32

func (*GetSandboxPolicyStatusRequest) GetWorkspaceScope 

func (x *GetSandboxPolicyStatusRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetSandboxPolicyStatusRequest) ProtoMessage 

func (*GetSandboxPolicyStatusRequest) ProtoMessage()

func (*GetSandboxPolicyStatusRequest) ProtoReflect 

func (x *GetSandboxPolicyStatusRequest) ProtoReflect() protoreflect.Message

func (*GetSandboxPolicyStatusRequest) Reset 

func (x *GetSandboxPolicyStatusRequest) Reset()

func (*GetSandboxPolicyStatusRequest) String 

func (x *GetSandboxPolicyStatusRequest) String() string

type GetSandboxPolicyStatusResponse 

type GetSandboxPolicyStatusResponse struct {

	// The queried policy revision.
	Revision *SandboxPolicyRevision `protobuf:"bytes,1,opt,name=revision,proto3" json:"revision,omitempty"`
	// The currently active (loaded) policy version for this sandbox.
	ActiveVersion uint32 `protobuf:"varint,2,opt,name=active_version,json=activeVersion,proto3" json:"active_version,omitempty"`
	// contains filtered or unexported fields
}

Get sandbox policy status response.

func (*GetSandboxPolicyStatusResponse) Descriptor deprecated 

func (*GetSandboxPolicyStatusResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxPolicyStatusResponse.ProtoReflect.Descriptor instead.

func (*GetSandboxPolicyStatusResponse) GetActiveVersion 

func (x *GetSandboxPolicyStatusResponse) GetActiveVersion() uint32

func (*GetSandboxPolicyStatusResponse) GetRevision 

func (x *GetSandboxPolicyStatusResponse) GetRevision() *SandboxPolicyRevision

func (*GetSandboxPolicyStatusResponse) ProtoMessage 

func (*GetSandboxPolicyStatusResponse) ProtoMessage()

func (*GetSandboxPolicyStatusResponse) ProtoReflect 

func (x *GetSandboxPolicyStatusResponse) ProtoReflect() protoreflect.Message

func (*GetSandboxPolicyStatusResponse) Reset 

func (x *GetSandboxPolicyStatusResponse) Reset()

func (*GetSandboxPolicyStatusResponse) String 

func (x *GetSandboxPolicyStatusResponse) String() string

type GetSandboxProviderEnvironmentRequest 

type GetSandboxProviderEnvironmentRequest struct {

	// The sandbox ID.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Whether the requesting supervisor enforces endpoint bindings for static
	// provider credentials. Gateways withhold static credential material when
	// this capability is absent.
	SupportsStaticCredentialBindings bool `` /* 162-byte string literal not displayed */
	// Whether the requesting supervisor understands stable external-placeholder
	// metadata. Gateways withhold credentials that require this behavior when
	// the capability is absent.
	SupportsStablePlaceholderEnvironmentKeys bool `` /* 188-byte string literal not displayed */
	// contains filtered or unexported fields
}

Get sandbox provider environment request.

func (*GetSandboxProviderEnvironmentRequest) Descriptor deprecated 

func (*GetSandboxProviderEnvironmentRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxProviderEnvironmentRequest.ProtoReflect.Descriptor instead.

func (*GetSandboxProviderEnvironmentRequest) GetSandboxId 

func (x *GetSandboxProviderEnvironmentRequest) GetSandboxId() string

func (*GetSandboxProviderEnvironmentRequest) GetSupportsStablePlaceholderEnvironmentKeys 

func (x *GetSandboxProviderEnvironmentRequest) GetSupportsStablePlaceholderEnvironmentKeys() bool

func (*GetSandboxProviderEnvironmentRequest) GetSupportsStaticCredentialBindings 

func (x *GetSandboxProviderEnvironmentRequest) GetSupportsStaticCredentialBindings() bool

func (*GetSandboxProviderEnvironmentRequest) ProtoMessage 

func (*GetSandboxProviderEnvironmentRequest) ProtoMessage()

func (*GetSandboxProviderEnvironmentRequest) ProtoReflect 

func (x *GetSandboxProviderEnvironmentRequest) ProtoReflect() protoreflect.Message

func (*GetSandboxProviderEnvironmentRequest) Reset 

func (x *GetSandboxProviderEnvironmentRequest) Reset()

func (*GetSandboxProviderEnvironmentRequest) String 

func (x *GetSandboxProviderEnvironmentRequest) String() string

type GetSandboxProviderEnvironmentResponse 

type GetSandboxProviderEnvironmentResponse struct {

	// Provider credential environment variables.
	Environment map[string]string `` /* 149-byte string literal not displayed */
	// Fingerprint for the provider credential inputs that produced environment.
	ProviderEnvRevision uint64 `protobuf:"varint,2,opt,name=provider_env_revision,json=providerEnvRevision,proto3" json:"provider_env_revision,omitempty"`
	// Expiration timestamps for returned environment variables.
	CredentialExpirationTimes map[string]*timestamppb.Timestamp `` /* 214-byte string literal not displayed */
	// Dynamic credentials that require token grants or other runtime injection.
	// Maps endpoint-bound provider metadata to credential metadata.
	// Supervisor uses this to inject Authorization headers for token grant credentials.
	DynamicCredentials map[string]*ProviderProfileCredential `` /* 189-byte string literal not displayed */
	// Endpoint allowlists for static credential environment variables. Metadata
	// can be incomplete when a provider profile is invalid; capable supervisors
	// reject all static material in that snapshot while preserving independently
	// endpoint-bound dynamic credentials.
	StaticCredentialBindings map[string]*StaticCredentialBinding `` /* 209-byte string literal not displayed */
	// Environment variables that contain provider configuration rather than
	// credentials and therefore do not require endpoint-scoped resolution.
	NonSecretEnvironmentKeys []string `` /* 137-byte string literal not displayed */
	// Attachment identity captured with the returned provider records.
	ProviderAttachmentEpoch string `` /* 132-byte string literal not displayed */
	// Effective policy identity used to derive this snapshot's endpoint bindings.
	PolicyHash string `protobuf:"bytes,8,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// Nonzero when material was withheld; installing an empty map is not readiness.
	ReadinessReason ProviderReadinessReason `` /* 149-byte string literal not displayed */
	// Complete desired set of non-secret managed files, keyed by absolute path.
	Files map[string]string `` /* 138-byte string literal not displayed */
	// Credential environment variables whose opaque resolver handle remains
	// stable across value-only provider revisions. These keys are still secrets;
	// this metadata only selects the stable external-placeholder behavior.
	StablePlaceholderEnvironmentKeys []string `` /* 162-byte string literal not displayed */
	// Supporting gateways always acknowledge the stable-placeholder delivery
	// contract, including responses without opted-in credentials. Supervisors
	// require acknowledgment for declared or previously activated external
	// stable credentials; ordinary legacy delivery does not require it.
	SupportsStablePlaceholderEnvironmentKeys bool `` /* 189-byte string literal not displayed */
	// contains filtered or unexported fields
}

Polling projection of ProviderEnvironmentSnapshot. The parallel maps below are keyed by the same environment variable names. Removed with the polling RPCs; new provider environment fields belong on the snapshot first.

func (*GetSandboxProviderEnvironmentResponse) Descriptor deprecated 

func (*GetSandboxProviderEnvironmentResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxProviderEnvironmentResponse.ProtoReflect.Descriptor instead.

func (*GetSandboxProviderEnvironmentResponse) GetCredentialExpirationTimes 

func (x *GetSandboxProviderEnvironmentResponse) GetCredentialExpirationTimes() map[string]*timestamppb.Timestamp

func (*GetSandboxProviderEnvironmentResponse) GetDynamicCredentials 

func (x *GetSandboxProviderEnvironmentResponse) GetDynamicCredentials() map[string]*ProviderProfileCredential

func (*GetSandboxProviderEnvironmentResponse) GetEnvironment 

func (x *GetSandboxProviderEnvironmentResponse) GetEnvironment() map[string]string

func (*GetSandboxProviderEnvironmentResponse) GetFiles 

func (x *GetSandboxProviderEnvironmentResponse) GetFiles() map[string]string

func (*GetSandboxProviderEnvironmentResponse) GetNonSecretEnvironmentKeys 

func (x *GetSandboxProviderEnvironmentResponse) GetNonSecretEnvironmentKeys() []string

func (*GetSandboxProviderEnvironmentResponse) GetPolicyHash 

func (x *GetSandboxProviderEnvironmentResponse) GetPolicyHash() string

func (*GetSandboxProviderEnvironmentResponse) GetProviderAttachmentEpoch 

func (x *GetSandboxProviderEnvironmentResponse) GetProviderAttachmentEpoch() string

func (*GetSandboxProviderEnvironmentResponse) GetProviderEnvRevision 

func (x *GetSandboxProviderEnvironmentResponse) GetProviderEnvRevision() uint64

func (*GetSandboxProviderEnvironmentResponse) GetReadinessReason 

func (x *GetSandboxProviderEnvironmentResponse) GetReadinessReason() ProviderReadinessReason

func (*GetSandboxProviderEnvironmentResponse) GetStablePlaceholderEnvironmentKeys 

func (x *GetSandboxProviderEnvironmentResponse) GetStablePlaceholderEnvironmentKeys() []string

func (*GetSandboxProviderEnvironmentResponse) GetStaticCredentialBindings 

func (x *GetSandboxProviderEnvironmentResponse) GetStaticCredentialBindings() map[string]*StaticCredentialBinding

func (*GetSandboxProviderEnvironmentResponse) GetSupportsStablePlaceholderEnvironmentKeys 

func (x *GetSandboxProviderEnvironmentResponse) GetSupportsStablePlaceholderEnvironmentKeys() bool

func (*GetSandboxProviderEnvironmentResponse) ProtoMessage 

func (*GetSandboxProviderEnvironmentResponse) ProtoMessage()

func (*GetSandboxProviderEnvironmentResponse) ProtoReflect 

func (x *GetSandboxProviderEnvironmentResponse) ProtoReflect() protoreflect.Message

func (*GetSandboxProviderEnvironmentResponse) Reset 

func (x *GetSandboxProviderEnvironmentResponse) Reset()

func (*GetSandboxProviderEnvironmentResponse) String 

func (x *GetSandboxProviderEnvironmentResponse) String() string

type GetSandboxProviderStatusRequest 

type GetSandboxProviderStatusRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Sandbox        string                         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	Provider       string                         `protobuf:"bytes,2,opt,name=provider,proto3" json:"provider,omitempty"`
	ReceiptId      string                         `protobuf:"bytes,3,opt,name=receipt_id,json=receiptId,proto3" json:"receipt_id,omitempty"`
	// contains filtered or unexported fields
}

Query an immutable receipt, or reconstruct the current desired state when receipt_id is empty. The sandbox identity must match the receipt.

func (*GetSandboxProviderStatusRequest) Descriptor deprecated 

func (*GetSandboxProviderStatusRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxProviderStatusRequest.ProtoReflect.Descriptor instead.

func (*GetSandboxProviderStatusRequest) GetProvider 

func (x *GetSandboxProviderStatusRequest) GetProvider() string

func (*GetSandboxProviderStatusRequest) GetReceiptId 

func (x *GetSandboxProviderStatusRequest) GetReceiptId() string

func (*GetSandboxProviderStatusRequest) GetSandbox 

func (x *GetSandboxProviderStatusRequest) GetSandbox() string

func (*GetSandboxProviderStatusRequest) GetWorkspaceScope 

func (x *GetSandboxProviderStatusRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetSandboxProviderStatusRequest) ProtoMessage 

func (*GetSandboxProviderStatusRequest) ProtoMessage()

func (*GetSandboxProviderStatusRequest) ProtoReflect 

func (x *GetSandboxProviderStatusRequest) ProtoReflect() protoreflect.Message

func (*GetSandboxProviderStatusRequest) Reset 

func (x *GetSandboxProviderStatusRequest) Reset()

func (*GetSandboxProviderStatusRequest) String 

func (x *GetSandboxProviderStatusRequest) String() string

type GetSandboxProviderStatusResponse 

type GetSandboxProviderStatusResponse struct {
	Status *ProviderReadinessStatus `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

func (*GetSandboxProviderStatusResponse) Descriptor deprecated 

func (*GetSandboxProviderStatusResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxProviderStatusResponse.ProtoReflect.Descriptor instead.

func (*GetSandboxProviderStatusResponse) GetStatus 

func (x *GetSandboxProviderStatusResponse) GetStatus() *ProviderReadinessStatus

func (*GetSandboxProviderStatusResponse) ProtoMessage 

func (*GetSandboxProviderStatusResponse) ProtoMessage()

func (*GetSandboxProviderStatusResponse) ProtoReflect 

func (x *GetSandboxProviderStatusResponse) ProtoReflect() protoreflect.Message

func (*GetSandboxProviderStatusResponse) Reset 

func (x *GetSandboxProviderStatusResponse) Reset()

func (*GetSandboxProviderStatusResponse) String 

func (x *GetSandboxProviderStatusResponse) String() string

type GetSandboxRequest 

type GetSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Get sandbox request.

func (*GetSandboxRequest) Descriptor deprecated 

func (*GetSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxRequest.ProtoReflect.Descriptor instead.

func (*GetSandboxRequest) GetName 

func (x *GetSandboxRequest) GetName() string

func (*GetSandboxRequest) GetWorkspaceScope 

func (x *GetSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetSandboxRequest) ProtoMessage 

func (*GetSandboxRequest) ProtoMessage()

func (*GetSandboxRequest) ProtoReflect 

func (x *GetSandboxRequest) ProtoReflect() protoreflect.Message

func (*GetSandboxRequest) Reset 

func (x *GetSandboxRequest) Reset()

func (*GetSandboxRequest) String 

func (x *GetSandboxRequest) String() string

type GetSandboxTemplateRequest 

type GetSandboxTemplateRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

func (*GetSandboxTemplateRequest) Descriptor deprecated 

func (*GetSandboxTemplateRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSandboxTemplateRequest.ProtoReflect.Descriptor instead.

func (*GetSandboxTemplateRequest) GetName 

func (x *GetSandboxTemplateRequest) GetName() string

func (*GetSandboxTemplateRequest) GetWorkspaceScope 

func (x *GetSandboxTemplateRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetSandboxTemplateRequest) ProtoMessage 

func (*GetSandboxTemplateRequest) ProtoMessage()

func (*GetSandboxTemplateRequest) ProtoReflect 

func (x *GetSandboxTemplateRequest) ProtoReflect() protoreflect.Message

func (*GetSandboxTemplateRequest) Reset 

func (x *GetSandboxTemplateRequest) Reset()

func (*GetSandboxTemplateRequest) String 

func (x *GetSandboxTemplateRequest) String() string

type GetServiceRequest 

type GetServiceRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Service name within the sandbox. Empty selects the unnamed endpoint.
	Name    string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// contains filtered or unexported fields
}

Request to fetch an exposed sandbox service endpoint.

func (*GetServiceRequest) Descriptor deprecated 

func (*GetServiceRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetServiceRequest.ProtoReflect.Descriptor instead.

func (*GetServiceRequest) GetName 

func (x *GetServiceRequest) GetName() string

func (*GetServiceRequest) GetSandbox 

func (x *GetServiceRequest) GetSandbox() string

func (*GetServiceRequest) GetWorkspaceScope 

func (x *GetServiceRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*GetServiceRequest) ProtoMessage 

func (*GetServiceRequest) ProtoMessage()

func (*GetServiceRequest) ProtoReflect 

func (x *GetServiceRequest) ProtoReflect() protoreflect.Message

func (*GetServiceRequest) Reset 

func (x *GetServiceRequest) Reset()

func (*GetServiceRequest) String 

func (x *GetServiceRequest) String() string

type GetWorkspaceRequest 

type GetWorkspaceRequest struct {

	// Workspace name (canonical lookup key).
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Get workspace request.

func (*GetWorkspaceRequest) Descriptor deprecated 

func (*GetWorkspaceRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetWorkspaceRequest.ProtoReflect.Descriptor instead.

func (*GetWorkspaceRequest) GetName 

func (x *GetWorkspaceRequest) GetName() string

func (*GetWorkspaceRequest) ProtoMessage 

func (*GetWorkspaceRequest) ProtoMessage()

func (*GetWorkspaceRequest) ProtoReflect 

func (x *GetWorkspaceRequest) ProtoReflect() protoreflect.Message

func (*GetWorkspaceRequest) Reset 

func (x *GetWorkspaceRequest) Reset()

func (*GetWorkspaceRequest) String 

func (x *GetWorkspaceRequest) String() string

type GetWorkspaceResponse 

type GetWorkspaceResponse struct {
	Workspace *datamodelv1.Workspace `protobuf:"bytes,1,opt,name=workspace,proto3" json:"workspace,omitempty"`
	// contains filtered or unexported fields
}

Get workspace response.

func (*GetWorkspaceResponse) Descriptor deprecated 

func (*GetWorkspaceResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetWorkspaceResponse.ProtoReflect.Descriptor instead.

func (*GetWorkspaceResponse) GetWorkspace 

func (x *GetWorkspaceResponse) GetWorkspace() *datamodelv1.Workspace

func (*GetWorkspaceResponse) ProtoMessage 

func (*GetWorkspaceResponse) ProtoMessage()

func (*GetWorkspaceResponse) ProtoReflect 

func (x *GetWorkspaceResponse) ProtoReflect() protoreflect.Message

func (*GetWorkspaceResponse) Reset 

func (x *GetWorkspaceResponse) Reset()

func (*GetWorkspaceResponse) String 

func (x *GetWorkspaceResponse) String() string

type GpuResourceCapabilities 

type GpuResourceCapabilities struct {

	// The driver accepts a GPU request with no explicit count.
	DefaultSelectionSupported bool `` /* 139-byte string literal not displayed */
	// The driver accepts an explicit `gpu.count` request.
	CountSelectionSupported bool `` /* 133-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*GpuResourceCapabilities) Descriptor deprecated 

func (*GpuResourceCapabilities) Descriptor() ([]byte, []int)

Deprecated: Use GpuResourceCapabilities.ProtoReflect.Descriptor instead.

func (*GpuResourceCapabilities) GetCountSelectionSupported 

func (x *GpuResourceCapabilities) GetCountSelectionSupported() bool

func (*GpuResourceCapabilities) GetDefaultSelectionSupported 

func (x *GpuResourceCapabilities) GetDefaultSelectionSupported() bool

func (*GpuResourceCapabilities) ProtoMessage 

func (*GpuResourceCapabilities) ProtoMessage()

func (*GpuResourceCapabilities) ProtoReflect 

func (x *GpuResourceCapabilities) ProtoReflect() protoreflect.Message

func (*GpuResourceCapabilities) Reset 

func (x *GpuResourceCapabilities) Reset()

func (*GpuResourceCapabilities) String 

func (x *GpuResourceCapabilities) String() string

type GpuResourceRequirements 

type GpuResourceRequirements struct {

	// Optional number of GPUs requested. When omitted, the request is for one
	// GPU using the selected driver's default assignment behavior.
	Count *uint32 `protobuf:"varint,1,opt,name=count,proto3,oneof" json:"count,omitempty"`
	// contains filtered or unexported fields
}

Public GPU resource requirements.

func (*GpuResourceRequirements) Descriptor deprecated 

func (*GpuResourceRequirements) Descriptor() ([]byte, []int)

Deprecated: Use GpuResourceRequirements.ProtoReflect.Descriptor instead.

func (*GpuResourceRequirements) GetCount 

func (x *GpuResourceRequirements) GetCount() uint32

func (*GpuResourceRequirements) ProtoMessage 

func (*GpuResourceRequirements) ProtoMessage()

func (*GpuResourceRequirements) ProtoReflect 

func (x *GpuResourceRequirements) ProtoReflect() protoreflect.Message

func (*GpuResourceRequirements) Reset 

func (x *GpuResourceRequirements) Reset()

func (*GpuResourceRequirements) String 

func (x *GpuResourceRequirements) String() string

type HealthRequest 

type HealthRequest struct {
	// contains filtered or unexported fields
}

Health check request.

func (*HealthRequest) Descriptor deprecated 

func (*HealthRequest) Descriptor() ([]byte, []int)

Deprecated: Use HealthRequest.ProtoReflect.Descriptor instead.

func (*HealthRequest) ProtoMessage 

func (*HealthRequest) ProtoMessage()

func (*HealthRequest) ProtoReflect 

func (x *HealthRequest) ProtoReflect() protoreflect.Message

func (*HealthRequest) Reset 

func (x *HealthRequest) Reset()

func (*HealthRequest) String 

func (x *HealthRequest) String() string

type HealthResponse 

type HealthResponse struct {

	// Service status.
	Status ServiceStatus `protobuf:"varint,1,opt,name=status,proto3,enum=openshell.v1.ServiceStatus" json:"status,omitempty"`
	// Service version.
	Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
	// contains filtered or unexported fields
}

Health check response.

func (*HealthResponse) Descriptor deprecated 

func (*HealthResponse) Descriptor() ([]byte, []int)

Deprecated: Use HealthResponse.ProtoReflect.Descriptor instead.

func (*HealthResponse) GetStatus 

func (x *HealthResponse) GetStatus() ServiceStatus

func (*HealthResponse) GetVersion 

func (x *HealthResponse) GetVersion() string

func (*HealthResponse) ProtoMessage 

func (*HealthResponse) ProtoMessage()

func (*HealthResponse) ProtoReflect 

func (x *HealthResponse) ProtoReflect() protoreflect.Message

func (*HealthResponse) Reset 

func (x *HealthResponse) Reset()

func (*HealthResponse) String 

func (x *HealthResponse) String() string

type ImportProviderProfilesRequest 

type ImportProviderProfilesRequest struct {

	// Workspace scope. Omit for platform profiles; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Profiles       []*ProviderProfileImportItem   `protobuf:"bytes,1,rep,name=profiles,proto3" json:"profiles,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Import custom provider profiles request.

func (*ImportProviderProfilesRequest) Descriptor deprecated 

func (*ImportProviderProfilesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ImportProviderProfilesRequest.ProtoReflect.Descriptor instead.

func (*ImportProviderProfilesRequest) GetProfiles 

func (x *ImportProviderProfilesRequest) GetProfiles() []*ProviderProfileImportItem

func (*ImportProviderProfilesRequest) GetRequestId 

func (x *ImportProviderProfilesRequest) GetRequestId() string

func (*ImportProviderProfilesRequest) GetWorkspaceScope 

func (x *ImportProviderProfilesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ImportProviderProfilesRequest) ProtoMessage 

func (*ImportProviderProfilesRequest) ProtoMessage()

func (*ImportProviderProfilesRequest) ProtoReflect 

func (x *ImportProviderProfilesRequest) ProtoReflect() protoreflect.Message

func (*ImportProviderProfilesRequest) Reset 

func (x *ImportProviderProfilesRequest) Reset()

func (*ImportProviderProfilesRequest) String 

func (x *ImportProviderProfilesRequest) String() string

type ImportProviderProfilesResponse 

type ImportProviderProfilesResponse struct {
	Diagnostics []*ProviderProfileDiagnostic `protobuf:"bytes,1,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	Profiles    []*ProviderProfile           `protobuf:"bytes,2,rep,name=profiles,proto3" json:"profiles,omitempty"`
	Imported    bool                         `protobuf:"varint,3,opt,name=imported,proto3" json:"imported,omitempty"`
	// contains filtered or unexported fields
}

Import custom provider profiles response.

func (*ImportProviderProfilesResponse) Descriptor deprecated 

func (*ImportProviderProfilesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ImportProviderProfilesResponse.ProtoReflect.Descriptor instead.

func (*ImportProviderProfilesResponse) GetDiagnostics 

func (x *ImportProviderProfilesResponse) GetDiagnostics() []*ProviderProfileDiagnostic

func (*ImportProviderProfilesResponse) GetImported 

func (x *ImportProviderProfilesResponse) GetImported() bool

func (*ImportProviderProfilesResponse) GetProfiles 

func (x *ImportProviderProfilesResponse) GetProfiles() []*ProviderProfile

func (*ImportProviderProfilesResponse) ProtoMessage 

func (*ImportProviderProfilesResponse) ProtoMessage()

func (*ImportProviderProfilesResponse) ProtoReflect 

func (x *ImportProviderProfilesResponse) ProtoReflect() protoreflect.Message

func (*ImportProviderProfilesResponse) Reset 

func (x *ImportProviderProfilesResponse) Reset()

func (*ImportProviderProfilesResponse) String 

func (x *ImportProviderProfilesResponse) String() string

type IssueSandboxTokenRequest 

type IssueSandboxTokenRequest struct {
	// contains filtered or unexported fields
}

IssueSandboxToken request. Empty body; identity is established by the authentication credentials carried in the request headers (a projected Kubernetes ServiceAccount JWT in the K8s driver path).

func (*IssueSandboxTokenRequest) Descriptor deprecated 

func (*IssueSandboxTokenRequest) Descriptor() ([]byte, []int)

Deprecated: Use IssueSandboxTokenRequest.ProtoReflect.Descriptor instead.

func (*IssueSandboxTokenRequest) ProtoMessage 

func (*IssueSandboxTokenRequest) ProtoMessage()

func (*IssueSandboxTokenRequest) ProtoReflect 

func (x *IssueSandboxTokenRequest) ProtoReflect() protoreflect.Message

func (*IssueSandboxTokenRequest) Reset 

func (x *IssueSandboxTokenRequest) Reset()

func (*IssueSandboxTokenRequest) String 

func (x *IssueSandboxTokenRequest) String() string

type IssueSandboxTokenResponse 

type IssueSandboxTokenResponse struct {

	// Gateway-minted session JWT bound to the calling sandbox's UUID, active
	// runtime generation, authorization epoch, and durable token lineage.
	Token string `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	// Absolute expiry of the issued token. Absence means the token is non-expiring.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,102,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// contains filtered or unexported fields
}

IssueSandboxToken response. The supervisor caches the returned token in memory and presents it as `Authorization: Bearer` on every subsequent gateway RPC.

func (*IssueSandboxTokenResponse) Descriptor deprecated 

func (*IssueSandboxTokenResponse) Descriptor() ([]byte, []int)

Deprecated: Use IssueSandboxTokenResponse.ProtoReflect.Descriptor instead.

func (*IssueSandboxTokenResponse) GetExpirationTime 

func (x *IssueSandboxTokenResponse) GetExpirationTime() *timestamppb.Timestamp

func (*IssueSandboxTokenResponse) GetToken 

func (x *IssueSandboxTokenResponse) GetToken() string

func (*IssueSandboxTokenResponse) ProtoMessage 

func (*IssueSandboxTokenResponse) ProtoMessage()

func (*IssueSandboxTokenResponse) ProtoReflect 

func (x *IssueSandboxTokenResponse) ProtoReflect() protoreflect.Message

func (*IssueSandboxTokenResponse) Reset 

func (x *IssueSandboxTokenResponse) Reset()

func (*IssueSandboxTokenResponse) String 

func (x *IssueSandboxTokenResponse) String() string

type L7RequestSample 

type L7RequestSample struct {

	// HTTP method: GET, POST, PUT, DELETE, etc.
	Method string `protobuf:"bytes,1,opt,name=method,proto3" json:"method,omitempty"`
	// HTTP path: /v1/models, /repos/myorg/issues
	Path string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	// L7 decision: "audit" or "deny" (allowed requests not collected).
	Decision string `protobuf:"bytes,3,opt,name=decision,proto3" json:"decision,omitempty"`
	// Number of times this (method, path) was observed.
	Count uint32 `protobuf:"varint,4,opt,name=count,proto3" json:"count,omitempty"`
	// contains filtered or unexported fields
}

Observed HTTP method+path pattern from L7 inspection.

func (*L7RequestSample) Descriptor deprecated 

func (*L7RequestSample) Descriptor() ([]byte, []int)

Deprecated: Use L7RequestSample.ProtoReflect.Descriptor instead.

func (*L7RequestSample) GetCount 

func (x *L7RequestSample) GetCount() uint32

func (*L7RequestSample) GetDecision 

func (x *L7RequestSample) GetDecision() string

func (*L7RequestSample) GetMethod 

func (x *L7RequestSample) GetMethod() string

func (*L7RequestSample) GetPath 

func (x *L7RequestSample) GetPath() string

func (*L7RequestSample) ProtoMessage 

func (*L7RequestSample) ProtoMessage()

func (*L7RequestSample) ProtoReflect 

func (x *L7RequestSample) ProtoReflect() protoreflect.Message

func (*L7RequestSample) Reset 

func (x *L7RequestSample) Reset()

func (*L7RequestSample) String 

func (x *L7RequestSample) String() string

type L7RuleTarget 

type L7RuleTarget struct {
	RuleName string   `protobuf:"bytes,1,opt,name=rule_name,json=ruleName,proto3" json:"rule_name,omitempty"`
	Host     string   `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	Ports    []uint32 `protobuf:"varint,3,rep,packed,name=ports,proto3" json:"ports,omitempty"`
	// An absent path requires a unique endpoint. An empty path selects an
	// endpoint without a path selector. This is not the appended request path.
	Path *string `protobuf:"bytes,4,opt,name=path,proto3,oneof" json:"path,omitempty"`
	// Declare either a nonempty binary list or any_binary, never both.
	Binaries  []*sandboxv1.NetworkBinary `protobuf:"bytes,5,rep,name=binaries,proto3" json:"binaries,omitempty"`
	AnyBinary bool                       `protobuf:"varint,6,opt,name=any_binary,json=anyBinary,proto3" json:"any_binary,omitempty"`
	// contains filtered or unexported fields
}

Exact endpoint and complete authorization scope affected by an L7 append. All ports and binaries must match the stored target; omitted scope is invalid.

func (*L7RuleTarget) Descriptor deprecated 

func (*L7RuleTarget) Descriptor() ([]byte, []int)

Deprecated: Use L7RuleTarget.ProtoReflect.Descriptor instead.

func (*L7RuleTarget) GetAnyBinary 

func (x *L7RuleTarget) GetAnyBinary() bool

func (*L7RuleTarget) GetBinaries 

func (x *L7RuleTarget) GetBinaries() []*sandboxv1.NetworkBinary

func (*L7RuleTarget) GetHost 

func (x *L7RuleTarget) GetHost() string

func (*L7RuleTarget) GetPath 

func (x *L7RuleTarget) GetPath() string

func (*L7RuleTarget) GetPorts 

func (x *L7RuleTarget) GetPorts() []uint32

func (*L7RuleTarget) GetRuleName 

func (x *L7RuleTarget) GetRuleName() string

func (*L7RuleTarget) ProtoMessage 

func (*L7RuleTarget) ProtoMessage()

func (*L7RuleTarget) ProtoReflect 

func (x *L7RuleTarget) ProtoReflect() protoreflect.Message

func (*L7RuleTarget) Reset 

func (x *L7RuleTarget) Reset()

func (*L7RuleTarget) String 

func (x *L7RuleTarget) String() string

type LintProviderProfilesRequest 

type LintProviderProfilesRequest struct {

	// Workspace scope. Omit for platform profiles; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Profiles       []*ProviderProfileImportItem   `protobuf:"bytes,1,rep,name=profiles,proto3" json:"profiles,omitempty"`
	// contains filtered or unexported fields
}

Lint provider profiles request.

func (*LintProviderProfilesRequest) Descriptor deprecated 

func (*LintProviderProfilesRequest) Descriptor() ([]byte, []int)

Deprecated: Use LintProviderProfilesRequest.ProtoReflect.Descriptor instead.

func (*LintProviderProfilesRequest) GetProfiles 

func (x *LintProviderProfilesRequest) GetProfiles() []*ProviderProfileImportItem

func (*LintProviderProfilesRequest) GetWorkspaceScope 

func (x *LintProviderProfilesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*LintProviderProfilesRequest) ProtoMessage 

func (*LintProviderProfilesRequest) ProtoMessage()

func (*LintProviderProfilesRequest) ProtoReflect 

func (x *LintProviderProfilesRequest) ProtoReflect() protoreflect.Message

func (*LintProviderProfilesRequest) Reset 

func (x *LintProviderProfilesRequest) Reset()

func (*LintProviderProfilesRequest) String 

func (x *LintProviderProfilesRequest) String() string

type LintProviderProfilesResponse 

type LintProviderProfilesResponse struct {
	Diagnostics []*ProviderProfileDiagnostic `protobuf:"bytes,1,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	Valid       bool                         `protobuf:"varint,2,opt,name=valid,proto3" json:"valid,omitempty"`
	// Clients enabling stable_placeholder check this before import or update,
	// since older gateways silently discard unknown credential fields.
	SupportsStablePlaceholder bool `` /* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

Lint provider profiles response.

func (*LintProviderProfilesResponse) Descriptor deprecated 

func (*LintProviderProfilesResponse) Descriptor() ([]byte, []int)

Deprecated: Use LintProviderProfilesResponse.ProtoReflect.Descriptor instead.

func (*LintProviderProfilesResponse) GetDiagnostics 

func (x *LintProviderProfilesResponse) GetDiagnostics() []*ProviderProfileDiagnostic

func (*LintProviderProfilesResponse) GetSupportsStablePlaceholder 

func (x *LintProviderProfilesResponse) GetSupportsStablePlaceholder() bool

func (*LintProviderProfilesResponse) GetValid 

func (x *LintProviderProfilesResponse) GetValid() bool

func (*LintProviderProfilesResponse) ProtoMessage 

func (*LintProviderProfilesResponse) ProtoMessage()

func (*LintProviderProfilesResponse) ProtoReflect 

func (x *LintProviderProfilesResponse) ProtoReflect() protoreflect.Message

func (*LintProviderProfilesResponse) Reset 

func (x *LintProviderProfilesResponse) Reset()

func (*LintProviderProfilesResponse) String 

func (x *LintProviderProfilesResponse) String() string

type ListProviderProfilesRequest 

type ListProviderProfilesRequest struct {

	// Workspace scope. Omit for platform profiles; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The maximum number of profiles to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListProviderProfiles response. All other request
	// parameters except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

List provider type profiles request.

func (*ListProviderProfilesRequest) Descriptor deprecated 

func (*ListProviderProfilesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListProviderProfilesRequest.ProtoReflect.Descriptor instead.

func (*ListProviderProfilesRequest) GetPageSize 

func (x *ListProviderProfilesRequest) GetPageSize() int32

func (*ListProviderProfilesRequest) GetPageToken 

func (x *ListProviderProfilesRequest) GetPageToken() string

func (*ListProviderProfilesRequest) GetWorkspaceScope 

func (x *ListProviderProfilesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListProviderProfilesRequest) ProtoMessage 

func (*ListProviderProfilesRequest) ProtoMessage()

func (*ListProviderProfilesRequest) ProtoReflect 

func (x *ListProviderProfilesRequest) ProtoReflect() protoreflect.Message

func (*ListProviderProfilesRequest) Reset 

func (x *ListProviderProfilesRequest) Reset()

func (*ListProviderProfilesRequest) String 

func (x *ListProviderProfilesRequest) String() string

type ListProviderProfilesResponse 

type ListProviderProfilesResponse struct {
	Profiles []*ProviderProfile `protobuf:"bytes,1,rep,name=profiles,proto3" json:"profiles,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

List provider profiles response.

func (*ListProviderProfilesResponse) Descriptor deprecated 

func (*ListProviderProfilesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListProviderProfilesResponse.ProtoReflect.Descriptor instead.

func (*ListProviderProfilesResponse) GetNextPageToken 

func (x *ListProviderProfilesResponse) GetNextPageToken() string

func (*ListProviderProfilesResponse) GetProfiles 

func (x *ListProviderProfilesResponse) GetProfiles() []*ProviderProfile

func (*ListProviderProfilesResponse) ProtoMessage 

func (*ListProviderProfilesResponse) ProtoMessage()

func (*ListProviderProfilesResponse) ProtoReflect 

func (x *ListProviderProfilesResponse) ProtoReflect() protoreflect.Message

func (*ListProviderProfilesResponse) Reset 

func (x *ListProviderProfilesResponse) Reset()

func (*ListProviderProfilesResponse) String 

func (x *ListProviderProfilesResponse) String() string

type ListProvidersRequest 

type ListProvidersRequest struct {

	// Workspace scope. Named and all-workspaces selections are accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The maximum number of providers to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListProviders response. All other request parameters
	// except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional label selector for filtering (format: "key1=value1,key2=value2").
	LabelSelector string `protobuf:"bytes,4,opt,name=label_selector,json=labelSelector,proto3" json:"label_selector,omitempty"`
	// contains filtered or unexported fields
}

List providers request.

func (*ListProvidersRequest) Descriptor deprecated 

func (*ListProvidersRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListProvidersRequest.ProtoReflect.Descriptor instead.

func (*ListProvidersRequest) GetLabelSelector 

func (x *ListProvidersRequest) GetLabelSelector() string

func (*ListProvidersRequest) GetPageSize 

func (x *ListProvidersRequest) GetPageSize() int32

func (*ListProvidersRequest) GetPageToken 

func (x *ListProvidersRequest) GetPageToken() string

func (*ListProvidersRequest) GetWorkspaceScope 

func (x *ListProvidersRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListProvidersRequest) ProtoMessage 

func (*ListProvidersRequest) ProtoMessage()

func (*ListProvidersRequest) ProtoReflect 

func (x *ListProvidersRequest) ProtoReflect() protoreflect.Message

func (*ListProvidersRequest) Reset 

func (x *ListProvidersRequest) Reset()

func (*ListProvidersRequest) String 

func (x *ListProvidersRequest) String() string

type ListProvidersResponse 

type ListProvidersResponse struct {
	Providers []*datamodelv1.Provider `protobuf:"bytes,1,rep,name=providers,proto3" json:"providers,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

List providers response.

func (*ListProvidersResponse) Descriptor deprecated 

func (*ListProvidersResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListProvidersResponse.ProtoReflect.Descriptor instead.

func (*ListProvidersResponse) GetNextPageToken 

func (x *ListProvidersResponse) GetNextPageToken() string

func (*ListProvidersResponse) GetProviders 

func (x *ListProvidersResponse) GetProviders() []*datamodelv1.Provider

func (*ListProvidersResponse) ProtoMessage 

func (*ListProvidersResponse) ProtoMessage()

func (*ListProvidersResponse) ProtoReflect 

func (x *ListProvidersResponse) ProtoReflect() protoreflect.Message

func (*ListProvidersResponse) Reset 

func (x *ListProvidersResponse) Reset()

func (*ListProvidersResponse) String 

func (x *ListProvidersResponse) String() string

type ListSandboxPoliciesRequest 

type ListSandboxPoliciesRequest struct {

	// Workspace scope. Omit for global queries; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,5,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The maximum number of revisions to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListSandboxPolicies response. All other request
	// parameters except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// List global policy revisions instead of sandbox-scoped ones.
	Global  bool   `protobuf:"varint,4,opt,name=global,proto3" json:"global,omitempty"`
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// contains filtered or unexported fields
}

List sandbox policies request.

func (*ListSandboxPoliciesRequest) Descriptor deprecated 

func (*ListSandboxPoliciesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxPoliciesRequest.ProtoReflect.Descriptor instead.

func (*ListSandboxPoliciesRequest) GetGlobal 

func (x *ListSandboxPoliciesRequest) GetGlobal() bool

func (*ListSandboxPoliciesRequest) GetPageSize 

func (x *ListSandboxPoliciesRequest) GetPageSize() int32

func (*ListSandboxPoliciesRequest) GetPageToken 

func (x *ListSandboxPoliciesRequest) GetPageToken() string

func (*ListSandboxPoliciesRequest) GetSandbox 

func (x *ListSandboxPoliciesRequest) GetSandbox() string

func (*ListSandboxPoliciesRequest) GetWorkspaceScope 

func (x *ListSandboxPoliciesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListSandboxPoliciesRequest) ProtoMessage 

func (*ListSandboxPoliciesRequest) ProtoMessage()

func (*ListSandboxPoliciesRequest) ProtoReflect 

func (x *ListSandboxPoliciesRequest) ProtoReflect() protoreflect.Message

func (*ListSandboxPoliciesRequest) Reset 

func (x *ListSandboxPoliciesRequest) Reset()

func (*ListSandboxPoliciesRequest) String 

func (x *ListSandboxPoliciesRequest) String() string

type ListSandboxPoliciesResponse 

type ListSandboxPoliciesResponse struct {

	// Invalid historical payloads remain visible as failed projections so one
	// legacy row cannot hide the rest of the policy history.
	Revisions []*SandboxPolicyRevision `protobuf:"bytes,1,rep,name=revisions,proto3" json:"revisions,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

List sandbox policies response.

func (*ListSandboxPoliciesResponse) Descriptor deprecated 

func (*ListSandboxPoliciesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxPoliciesResponse.ProtoReflect.Descriptor instead.

func (*ListSandboxPoliciesResponse) GetNextPageToken 

func (x *ListSandboxPoliciesResponse) GetNextPageToken() string

func (*ListSandboxPoliciesResponse) GetRevisions 

func (x *ListSandboxPoliciesResponse) GetRevisions() []*SandboxPolicyRevision

func (*ListSandboxPoliciesResponse) ProtoMessage 

func (*ListSandboxPoliciesResponse) ProtoMessage()

func (*ListSandboxPoliciesResponse) ProtoReflect 

func (x *ListSandboxPoliciesResponse) ProtoReflect() protoreflect.Message

func (*ListSandboxPoliciesResponse) Reset 

func (x *ListSandboxPoliciesResponse) Reset()

func (*ListSandboxPoliciesResponse) String 

func (x *ListSandboxPoliciesResponse) String() string

type ListSandboxProvidersRequest 

type ListSandboxProvidersRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Sandbox        string                         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// The maximum number of providers to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListSandboxProviders response. All other request
	// parameters except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

List providers attached to a sandbox request.

func (*ListSandboxProvidersRequest) Descriptor deprecated 

func (*ListSandboxProvidersRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxProvidersRequest.ProtoReflect.Descriptor instead.

func (*ListSandboxProvidersRequest) GetPageSize 

func (x *ListSandboxProvidersRequest) GetPageSize() int32

func (*ListSandboxProvidersRequest) GetPageToken 

func (x *ListSandboxProvidersRequest) GetPageToken() string

func (*ListSandboxProvidersRequest) GetSandbox 

func (x *ListSandboxProvidersRequest) GetSandbox() string

func (*ListSandboxProvidersRequest) GetWorkspaceScope 

func (x *ListSandboxProvidersRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListSandboxProvidersRequest) ProtoMessage 

func (*ListSandboxProvidersRequest) ProtoMessage()

func (*ListSandboxProvidersRequest) ProtoReflect 

func (x *ListSandboxProvidersRequest) ProtoReflect() protoreflect.Message

func (*ListSandboxProvidersRequest) Reset 

func (x *ListSandboxProvidersRequest) Reset()

func (*ListSandboxProvidersRequest) String 

func (x *ListSandboxProvidersRequest) String() string

type ListSandboxProvidersResponse 

type ListSandboxProvidersResponse struct {
	Providers []*datamodelv1.Provider `protobuf:"bytes,1,rep,name=providers,proto3" json:"providers,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

List providers attached to a sandbox response.

func (*ListSandboxProvidersResponse) Descriptor deprecated 

func (*ListSandboxProvidersResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxProvidersResponse.ProtoReflect.Descriptor instead.

func (*ListSandboxProvidersResponse) GetNextPageToken 

func (x *ListSandboxProvidersResponse) GetNextPageToken() string

func (*ListSandboxProvidersResponse) GetProviders 

func (x *ListSandboxProvidersResponse) GetProviders() []*datamodelv1.Provider

func (*ListSandboxProvidersResponse) ProtoMessage 

func (*ListSandboxProvidersResponse) ProtoMessage()

func (*ListSandboxProvidersResponse) ProtoReflect 

func (x *ListSandboxProvidersResponse) ProtoReflect() protoreflect.Message

func (*ListSandboxProvidersResponse) Reset 

func (x *ListSandboxProvidersResponse) Reset()

func (*ListSandboxProvidersResponse) String 

func (x *ListSandboxProvidersResponse) String() string

type ListSandboxTemplatesRequest 

type ListSandboxTemplatesRequest struct {

	// Workspace scope. Named and all-workspaces selections are accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The maximum number of templates to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListSandboxTemplates response. All other request
	// parameters except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional label selector in key=value comma-separated form.
	LabelSelector string `protobuf:"bytes,3,opt,name=label_selector,json=labelSelector,proto3" json:"label_selector,omitempty"`
	// contains filtered or unexported fields
}

func (*ListSandboxTemplatesRequest) Descriptor deprecated 

func (*ListSandboxTemplatesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxTemplatesRequest.ProtoReflect.Descriptor instead.

func (*ListSandboxTemplatesRequest) GetLabelSelector 

func (x *ListSandboxTemplatesRequest) GetLabelSelector() string

func (*ListSandboxTemplatesRequest) GetPageSize 

func (x *ListSandboxTemplatesRequest) GetPageSize() int32

func (*ListSandboxTemplatesRequest) GetPageToken 

func (x *ListSandboxTemplatesRequest) GetPageToken() string

func (*ListSandboxTemplatesRequest) GetWorkspaceScope 

func (x *ListSandboxTemplatesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListSandboxTemplatesRequest) ProtoMessage 

func (*ListSandboxTemplatesRequest) ProtoMessage()

func (*ListSandboxTemplatesRequest) ProtoReflect 

func (x *ListSandboxTemplatesRequest) ProtoReflect() protoreflect.Message

func (*ListSandboxTemplatesRequest) Reset 

func (x *ListSandboxTemplatesRequest) Reset()

func (*ListSandboxTemplatesRequest) String 

func (x *ListSandboxTemplatesRequest) String() string

type ListSandboxTemplatesResponse 

type ListSandboxTemplatesResponse struct {
	Templates []*SandboxWorkloadTemplate `protobuf:"bytes,1,rep,name=templates,proto3" json:"templates,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

func (*ListSandboxTemplatesResponse) Descriptor deprecated 

func (*ListSandboxTemplatesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxTemplatesResponse.ProtoReflect.Descriptor instead.

func (*ListSandboxTemplatesResponse) GetNextPageToken 

func (x *ListSandboxTemplatesResponse) GetNextPageToken() string

func (*ListSandboxTemplatesResponse) GetTemplates 

func (x *ListSandboxTemplatesResponse) GetTemplates() []*SandboxWorkloadTemplate

func (*ListSandboxTemplatesResponse) ProtoMessage 

func (*ListSandboxTemplatesResponse) ProtoMessage()

func (*ListSandboxTemplatesResponse) ProtoReflect 

func (x *ListSandboxTemplatesResponse) ProtoReflect() protoreflect.Message

func (*ListSandboxTemplatesResponse) Reset 

func (x *ListSandboxTemplatesResponse) Reset()

func (*ListSandboxTemplatesResponse) String 

func (x *ListSandboxTemplatesResponse) String() string

type ListSandboxesRequest 

type ListSandboxesRequest struct {

	// Workspace scope. Named and all-workspaces selections are accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The maximum number of sandboxes to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListSandboxes response. All other request parameters
	// except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional label selector for filtering (format: "key1=value1,key2=value2").
	LabelSelector string `protobuf:"bytes,3,opt,name=label_selector,json=labelSelector,proto3" json:"label_selector,omitempty"`
	// contains filtered or unexported fields
}

List sandboxes request.

func (*ListSandboxesRequest) Descriptor deprecated 

func (*ListSandboxesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxesRequest.ProtoReflect.Descriptor instead.

func (*ListSandboxesRequest) GetLabelSelector 

func (x *ListSandboxesRequest) GetLabelSelector() string

func (*ListSandboxesRequest) GetPageSize 

func (x *ListSandboxesRequest) GetPageSize() int32

func (*ListSandboxesRequest) GetPageToken 

func (x *ListSandboxesRequest) GetPageToken() string

func (*ListSandboxesRequest) GetWorkspaceScope 

func (x *ListSandboxesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListSandboxesRequest) ProtoMessage 

func (*ListSandboxesRequest) ProtoMessage()

func (*ListSandboxesRequest) ProtoReflect 

func (x *ListSandboxesRequest) ProtoReflect() protoreflect.Message

func (*ListSandboxesRequest) Reset 

func (x *ListSandboxesRequest) Reset()

func (*ListSandboxesRequest) String 

func (x *ListSandboxesRequest) String() string

type ListSandboxesResponse 

type ListSandboxesResponse struct {
	Sandboxes []*Sandbox `protobuf:"bytes,1,rep,name=sandboxes,proto3" json:"sandboxes,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

List sandboxes response.

func (*ListSandboxesResponse) Descriptor deprecated 

func (*ListSandboxesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListSandboxesResponse.ProtoReflect.Descriptor instead.

func (*ListSandboxesResponse) GetNextPageToken 

func (x *ListSandboxesResponse) GetNextPageToken() string

func (*ListSandboxesResponse) GetSandboxes 

func (x *ListSandboxesResponse) GetSandboxes() []*Sandbox

func (*ListSandboxesResponse) ProtoMessage 

func (*ListSandboxesResponse) ProtoMessage()

func (*ListSandboxesResponse) ProtoReflect 

func (x *ListSandboxesResponse) ProtoReflect() protoreflect.Message

func (*ListSandboxesResponse) Reset 

func (x *ListSandboxesResponse) Reset()

func (*ListSandboxesResponse) String 

func (x *ListSandboxesResponse) String() string

type ListServicesRequest 

type ListServicesRequest struct {

	// Workspace scope. Named and all-workspaces selections are accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The maximum number of services to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListServices response. All other request parameters
	// except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional sandbox name. Empty lists endpoints for all sandboxes.
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// contains filtered or unexported fields
}

Request to list exposed sandbox service endpoints.

func (*ListServicesRequest) Descriptor deprecated 

func (*ListServicesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListServicesRequest.ProtoReflect.Descriptor instead.

func (*ListServicesRequest) GetPageSize 

func (x *ListServicesRequest) GetPageSize() int32

func (*ListServicesRequest) GetPageToken 

func (x *ListServicesRequest) GetPageToken() string

func (*ListServicesRequest) GetSandbox 

func (x *ListServicesRequest) GetSandbox() string

func (*ListServicesRequest) GetWorkspaceScope 

func (x *ListServicesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListServicesRequest) ProtoMessage 

func (*ListServicesRequest) ProtoMessage()

func (*ListServicesRequest) ProtoReflect 

func (x *ListServicesRequest) ProtoReflect() protoreflect.Message

func (*ListServicesRequest) Reset 

func (x *ListServicesRequest) Reset()

func (*ListServicesRequest) String 

func (x *ListServicesRequest) String() string

type ListServicesResponse 

type ListServicesResponse struct {
	Services []*ServiceEndpointResponse `protobuf:"bytes,1,rep,name=services,proto3" json:"services,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Response containing exposed sandbox service endpoints.

func (*ListServicesResponse) Descriptor deprecated 

func (*ListServicesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListServicesResponse.ProtoReflect.Descriptor instead.

func (*ListServicesResponse) GetNextPageToken 

func (x *ListServicesResponse) GetNextPageToken() string

func (*ListServicesResponse) GetServices 

func (x *ListServicesResponse) GetServices() []*ServiceEndpointResponse

func (*ListServicesResponse) ProtoMessage 

func (*ListServicesResponse) ProtoMessage()

func (*ListServicesResponse) ProtoReflect 

func (x *ListServicesResponse) ProtoReflect() protoreflect.Message

func (*ListServicesResponse) Reset 

func (x *ListServicesResponse) Reset()

func (*ListServicesResponse) String 

func (x *ListServicesResponse) String() string

type ListWorkspaceMembersRequest 

type ListWorkspaceMembersRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,1,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The maximum number of members to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListWorkspaceMembers response. All other request
	// parameters except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

List workspace members request.

func (*ListWorkspaceMembersRequest) Descriptor deprecated 

func (*ListWorkspaceMembersRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListWorkspaceMembersRequest.ProtoReflect.Descriptor instead.

func (*ListWorkspaceMembersRequest) GetPageSize 

func (x *ListWorkspaceMembersRequest) GetPageSize() int32

func (*ListWorkspaceMembersRequest) GetPageToken 

func (x *ListWorkspaceMembersRequest) GetPageToken() string

func (*ListWorkspaceMembersRequest) GetWorkspaceScope 

func (x *ListWorkspaceMembersRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ListWorkspaceMembersRequest) ProtoMessage 

func (*ListWorkspaceMembersRequest) ProtoMessage()

func (*ListWorkspaceMembersRequest) ProtoReflect 

func (x *ListWorkspaceMembersRequest) ProtoReflect() protoreflect.Message

func (*ListWorkspaceMembersRequest) Reset 

func (x *ListWorkspaceMembersRequest) Reset()

func (*ListWorkspaceMembersRequest) String 

func (x *ListWorkspaceMembersRequest) String() string

type ListWorkspaceMembersResponse 

type ListWorkspaceMembersResponse struct {
	Members []*WorkspaceMember `protobuf:"bytes,1,rep,name=members,proto3" json:"members,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

List workspace members response.

func (*ListWorkspaceMembersResponse) Descriptor deprecated 

func (*ListWorkspaceMembersResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListWorkspaceMembersResponse.ProtoReflect.Descriptor instead.

func (*ListWorkspaceMembersResponse) GetMembers 

func (x *ListWorkspaceMembersResponse) GetMembers() []*WorkspaceMember

func (*ListWorkspaceMembersResponse) GetNextPageToken 

func (x *ListWorkspaceMembersResponse) GetNextPageToken() string

func (*ListWorkspaceMembersResponse) ProtoMessage 

func (*ListWorkspaceMembersResponse) ProtoMessage()

func (*ListWorkspaceMembersResponse) ProtoReflect 

func (x *ListWorkspaceMembersResponse) ProtoReflect() protoreflect.Message

func (*ListWorkspaceMembersResponse) Reset 

func (x *ListWorkspaceMembersResponse) Reset()

func (*ListWorkspaceMembersResponse) String 

func (x *ListWorkspaceMembersResponse) String() string

type ListWorkspacesRequest 

type ListWorkspacesRequest struct {

	// The maximum number of workspaces to return. Zero uses 100. Values above
	// 1000 are coerced to 1000; negative values are invalid.
	PageSize int32 `protobuf:"varint,1,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Token from a previous ListWorkspaces response. All other request parameters
	// except page_size must match the request that produced it.
	PageToken string `protobuf:"bytes,2,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional label selector for filtering (format: "key1=value1,key2=value2").
	LabelSelector string `protobuf:"bytes,3,opt,name=label_selector,json=labelSelector,proto3" json:"label_selector,omitempty"`
	// contains filtered or unexported fields
}

List workspaces request.

func (*ListWorkspacesRequest) Descriptor deprecated 

func (*ListWorkspacesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListWorkspacesRequest.ProtoReflect.Descriptor instead.

func (*ListWorkspacesRequest) GetLabelSelector 

func (x *ListWorkspacesRequest) GetLabelSelector() string

func (*ListWorkspacesRequest) GetPageSize 

func (x *ListWorkspacesRequest) GetPageSize() int32

func (*ListWorkspacesRequest) GetPageToken 

func (x *ListWorkspacesRequest) GetPageToken() string

func (*ListWorkspacesRequest) ProtoMessage 

func (*ListWorkspacesRequest) ProtoMessage()

func (*ListWorkspacesRequest) ProtoReflect 

func (x *ListWorkspacesRequest) ProtoReflect() protoreflect.Message

func (*ListWorkspacesRequest) Reset 

func (x *ListWorkspacesRequest) Reset()

func (*ListWorkspacesRequest) String 

func (x *ListWorkspacesRequest) String() string

type ListWorkspacesResponse 

type ListWorkspacesResponse struct {
	Workspaces []*datamodelv1.Workspace `protobuf:"bytes,1,rep,name=workspaces,proto3" json:"workspaces,omitempty"`
	// Token for the next page. Empty when there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

List workspaces response.

func (*ListWorkspacesResponse) Descriptor deprecated 

func (*ListWorkspacesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListWorkspacesResponse.ProtoReflect.Descriptor instead.

func (*ListWorkspacesResponse) GetNextPageToken 

func (x *ListWorkspacesResponse) GetNextPageToken() string

func (*ListWorkspacesResponse) GetWorkspaces 

func (x *ListWorkspacesResponse) GetWorkspaces() []*datamodelv1.Workspace

func (*ListWorkspacesResponse) ProtoMessage 

func (*ListWorkspacesResponse) ProtoMessage()

func (*ListWorkspacesResponse) ProtoReflect 

func (x *ListWorkspacesResponse) ProtoReflect() protoreflect.Message

func (*ListWorkspacesResponse) Reset 

func (x *ListWorkspacesResponse) Reset()

func (*ListWorkspacesResponse) String 

func (x *ListWorkspacesResponse) String() string

type MemoryResourceCapabilities 

type MemoryResourceCapabilities struct {

	// The driver accepts and enforces a portable memory limit.
	LimitSupported bool `protobuf:"varint,1,opt,name=limit_supported,json=limitSupported,proto3" json:"limit_supported,omitempty"`
	// contains filtered or unexported fields
}

func (*MemoryResourceCapabilities) Descriptor deprecated 

func (*MemoryResourceCapabilities) Descriptor() ([]byte, []int)

Deprecated: Use MemoryResourceCapabilities.ProtoReflect.Descriptor instead.

func (*MemoryResourceCapabilities) GetLimitSupported 

func (x *MemoryResourceCapabilities) GetLimitSupported() bool

func (*MemoryResourceCapabilities) ProtoMessage 

func (*MemoryResourceCapabilities) ProtoMessage()

func (*MemoryResourceCapabilities) ProtoReflect 

func (x *MemoryResourceCapabilities) ProtoReflect() protoreflect.Message

func (*MemoryResourceCapabilities) Reset 

func (x *MemoryResourceCapabilities) Reset()

func (*MemoryResourceCapabilities) String 

func (x *MemoryResourceCapabilities) String() string

type NegotiatedExtensionInfo 

type NegotiatedExtensionInfo struct {
	Kind ExtensionKind `protobuf:"varint,1,opt,name=kind,proto3,enum=openshell.v1.ExtensionKind" json:"kind,omitempty"`
	// Gateway/operator-selected registration name.
	ConfiguredName string `protobuf:"bytes,2,opt,name=configured_name,json=configuredName,proto3" json:"configured_name,omitempty"`
	// Extension-reported implementation identity.
	ImplementationName string `protobuf:"bytes,3,opt,name=implementation_name,json=implementationName,proto3" json:"implementation_name,omitempty"`
	// Extension build version, distinct from the protocol version.
	ImplementationVersion string `protobuf:"bytes,4,opt,name=implementation_version,json=implementationVersion,proto3" json:"implementation_version,omitempty"`
	ProtocolMajor         uint32 `protobuf:"varint,5,opt,name=protocol_major,json=protocolMajor,proto3" json:"protocol_major,omitempty"`
	ProtocolMinor         uint32 `protobuf:"varint,6,opt,name=protocol_minor,json=protocolMinor,proto3" json:"protocol_minor,omitempty"`
	// Extension-supported optional capabilities, sorted for stable output.
	SupportedCapabilities []string `protobuf:"bytes,7,rep,name=supported_capabilities,json=supportedCapabilities,proto3" json:"supported_capabilities,omitempty"`
	// Capabilities the extension requires from the gateway.
	RequiredCapabilities []string `protobuf:"bytes,8,rep,name=required_capabilities,json=requiredCapabilities,proto3" json:"required_capabilities,omitempty"`
	// contains filtered or unexported fields
}

Public, non-secret snapshot of one successful startup negotiation.

func (*NegotiatedExtensionInfo) Descriptor deprecated 

func (*NegotiatedExtensionInfo) Descriptor() ([]byte, []int)

Deprecated: Use NegotiatedExtensionInfo.ProtoReflect.Descriptor instead.

func (*NegotiatedExtensionInfo) GetConfiguredName 

func (x *NegotiatedExtensionInfo) GetConfiguredName() string

func (*NegotiatedExtensionInfo) GetImplementationName 

func (x *NegotiatedExtensionInfo) GetImplementationName() string

func (*NegotiatedExtensionInfo) GetImplementationVersion 

func (x *NegotiatedExtensionInfo) GetImplementationVersion() string

func (*NegotiatedExtensionInfo) GetKind 

func (x *NegotiatedExtensionInfo) GetKind() ExtensionKind

func (*NegotiatedExtensionInfo) GetProtocolMajor 

func (x *NegotiatedExtensionInfo) GetProtocolMajor() uint32

func (*NegotiatedExtensionInfo) GetProtocolMinor 

func (x *NegotiatedExtensionInfo) GetProtocolMinor() uint32

func (*NegotiatedExtensionInfo) GetRequiredCapabilities 

func (x *NegotiatedExtensionInfo) GetRequiredCapabilities() []string

func (*NegotiatedExtensionInfo) GetSupportedCapabilities 

func (x *NegotiatedExtensionInfo) GetSupportedCapabilities() []string

func (*NegotiatedExtensionInfo) ProtoMessage 

func (*NegotiatedExtensionInfo) ProtoMessage()

func (*NegotiatedExtensionInfo) ProtoReflect 

func (x *NegotiatedExtensionInfo) ProtoReflect() protoreflect.Message

func (*NegotiatedExtensionInfo) Reset 

func (x *NegotiatedExtensionInfo) Reset()

func (*NegotiatedExtensionInfo) String 

func (x *NegotiatedExtensionInfo) String() string

type NetworkActivitySummary 

type NetworkActivitySummary struct {

	// Total observed network activities in the current window.
	NetworkActivityCount uint32 `protobuf:"varint,1,opt,name=network_activity_count,json=networkActivityCount,proto3" json:"network_activity_count,omitempty"`
	// Total denied actions in the current window.
	DeniedActionCount uint32 `protobuf:"varint,2,opt,name=denied_action_count,json=deniedActionCount,proto3" json:"denied_action_count,omitempty"`
	// Denied action counts grouped by sanitized category.
	DenialsByGroup []*DenialGroupCount `protobuf:"bytes,3,rep,name=denials_by_group,json=denialsByGroup,proto3" json:"denials_by_group,omitempty"`
	// contains filtered or unexported fields
}

Anonymous sandbox network activity counters. This intentionally excludes hosts, paths, binaries, raw deny reasons, sandbox IDs, and user content.

func (*NetworkActivitySummary) Descriptor deprecated 

func (*NetworkActivitySummary) Descriptor() ([]byte, []int)

Deprecated: Use NetworkActivitySummary.ProtoReflect.Descriptor instead.

func (*NetworkActivitySummary) GetDenialsByGroup 

func (x *NetworkActivitySummary) GetDenialsByGroup() []*DenialGroupCount

func (*NetworkActivitySummary) GetDeniedActionCount 

func (x *NetworkActivitySummary) GetDeniedActionCount() uint32

func (*NetworkActivitySummary) GetNetworkActivityCount 

func (x *NetworkActivitySummary) GetNetworkActivityCount() uint32

func (*NetworkActivitySummary) ProtoMessage 

func (*NetworkActivitySummary) ProtoMessage()

func (*NetworkActivitySummary) ProtoReflect 

func (x *NetworkActivitySummary) ProtoReflect() protoreflect.Message

func (*NetworkActivitySummary) Reset 

func (x *NetworkActivitySummary) Reset()

func (*NetworkActivitySummary) String 

func (x *NetworkActivitySummary) String() string

type OpenShellClient 

type OpenShellClient interface {
	// Check the health of the service.
	Health(ctx context.Context, in *HealthRequest, opts ...grpc.CallOption) (*HealthResponse, error)
	// Return the authenticated caller identity established by the gateway.
	GetCurrentUser(ctx context.Context, in *GetCurrentUserRequest, opts ...grpc.CallOption) (*GetCurrentUserResponse, error)
	// Fetch elevated live gateway runtime metadata.
	GetGatewayInfo(ctx context.Context, in *GetGatewayInfoRequest, opts ...grpc.CallOption) (*GetGatewayInfoResponse, error)
	// Create a new sandbox.
	CreateSandbox(ctx context.Context, in *CreateSandboxRequest, opts ...grpc.CallOption) (*SandboxResponse, error)
	// Allocate a gateway-owned staging slot for a local rootfs tar archive.
	//
	// The gateway creates a request-scoped directory inside the compute driver's
	// staging root and returns an opaque single-use token plus the absolute path
	// the client must write the archive to. The token is then passed as
	// `template.driver_config.<driver>.rootfs_tar_staging_token` on
	// CreateSandbox; callers never name a filesystem path themselves. Only a
	// client sharing the gateway's filesystem can complete the upload.
	BeginRootfsTarStaging(ctx context.Context, in *BeginRootfsTarStagingRequest, opts ...grpc.CallOption) (*BeginRootfsTarStagingResponse, error)
	// Fetch a sandbox by name.
	GetSandbox(ctx context.Context, in *GetSandboxRequest, opts ...grpc.CallOption) (*SandboxResponse, error)
	// List sandboxes.
	ListSandboxes(ctx context.Context, in *ListSandboxesRequest, opts ...grpc.CallOption) (*ListSandboxesResponse, error)
	// Create a reusable sandbox workload template.
	CreateSandboxTemplate(ctx context.Context, in *CreateSandboxTemplateRequest, opts ...grpc.CallOption) (*SandboxTemplateResponse, error)
	// Fetch a reusable sandbox workload template by name.
	GetSandboxTemplate(ctx context.Context, in *GetSandboxTemplateRequest, opts ...grpc.CallOption) (*SandboxTemplateResponse, error)
	// List reusable sandbox workload templates.
	ListSandboxTemplates(ctx context.Context, in *ListSandboxTemplatesRequest, opts ...grpc.CallOption) (*ListSandboxTemplatesResponse, error)
	// Delete a reusable sandbox workload template by name.
	DeleteSandboxTemplate(ctx context.Context, in *DeleteSandboxTemplateRequest, opts ...grpc.CallOption) (*DeleteSandboxTemplateResponse, error)
	// List provider records attached to a sandbox.
	ListSandboxProviders(ctx context.Context, in *ListSandboxProvidersRequest, opts ...grpc.CallOption) (*ListSandboxProvidersResponse, error)
	// Attach a provider record to an existing sandbox.
	AttachSandboxProvider(ctx context.Context, in *AttachSandboxProviderRequest, opts ...grpc.CallOption) (*AttachSandboxProviderResponse, error)
	// Detach a provider record from an existing sandbox.
	DetachSandboxProvider(ctx context.Context, in *DetachSandboxProviderRequest, opts ...grpc.CallOption) (*DetachSandboxProviderResponse, error)
	// Inspect the installed authority for one sandbox provider mutation.
	GetSandboxProviderStatus(ctx context.Context, in *GetSandboxProviderStatusRequest, opts ...grpc.CallOption) (*GetSandboxProviderStatusResponse, error)
	// Delete a sandbox by name.
	DeleteSandbox(ctx context.Context, in *DeleteSandboxRequest, opts ...grpc.CallOption) (*DeleteSandboxResponse, error)
	// Stop a sandbox while retaining its persistent state.
	StopSandbox(ctx context.Context, in *StopSandboxRequest, opts ...grpc.CallOption) (*SandboxResponse, error)
	// Start a previously stopped sandbox.
	StartSandbox(ctx context.Context, in *StartSandboxRequest, opts ...grpc.CallOption) (*SandboxResponse, error)
	// Freeze a ready sandbox and retain its memory state for a later resume.
	// Requires a compute driver and isolation backend that support state
	// retention.
	SuspendSandbox(ctx context.Context, in *SuspendSandboxRequest, opts ...grpc.CallOption) (*SandboxResponse, error)
	// Restore a suspended sandbox in a new runtime generation.
	ResumeSandbox(ctx context.Context, in *ResumeSandboxRequest, opts ...grpc.CallOption) (*SandboxResponse, error)
	// Create a short-lived SSH session for a sandbox.
	CreateSshSession(ctx context.Context, in *CreateSshSessionRequest, opts ...grpc.CallOption) (*CreateSshSessionResponse, error)
	// Create or update a sandbox HTTP service endpoint for local routing.
	ExposeService(ctx context.Context, in *ExposeServiceRequest, opts ...grpc.CallOption) (*ServiceEndpointResponse, error)
	// Fetch one sandbox HTTP service endpoint.
	GetService(ctx context.Context, in *GetServiceRequest, opts ...grpc.CallOption) (*ServiceEndpointResponse, error)
	// List sandbox HTTP service endpoints.
	ListServices(ctx context.Context, in *ListServicesRequest, opts ...grpc.CallOption) (*ListServicesResponse, error)
	// Delete one sandbox HTTP service endpoint.
	DeleteService(ctx context.Context, in *DeleteServiceRequest, opts ...grpc.CallOption) (*DeleteServiceResponse, error)
	// Revoke a previously issued SSH session.
	RevokeSshSession(ctx context.Context, in *RevokeSshSessionRequest, opts ...grpc.CallOption) (*RevokeSshSessionResponse, error)
	// Execute a command in a ready sandbox and stream output.
	ExecSandbox(ctx context.Context, in *ExecSandboxRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ExecSandboxEvent], error)
	// Forward one CLI-side TCP connection to a loopback TCP target in a sandbox.
	ForwardTcp(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[TcpForwardFrame, TcpForwardFrame], error)
	// Execute an interactive command with bidirectional stdin/stdout streaming.
	// The first client message MUST carry an ExecSandboxInput with the start
	// variant. Subsequent messages carry stdin bytes or window resize events.
	ExecSandboxInteractive(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[ExecSandboxInput, ExecSandboxEvent], error)
	// Create a provider.
	CreateProvider(ctx context.Context, in *CreateProviderRequest, opts ...grpc.CallOption) (*ProviderResponse, error)
	// Fetch a provider by name.
	GetProvider(ctx context.Context, in *GetProviderRequest, opts ...grpc.CallOption) (*ProviderResponse, error)
	// Export selected usable runtime credentials. Only directly authenticated
	// mTLS operators may call this method; refresh material is never returned.
	GetProviderCredentials(ctx context.Context, in *GetProviderCredentialsRequest, opts ...grpc.CallOption) (*GetProviderCredentialsResponse, error)
	// List providers.
	ListProviders(ctx context.Context, in *ListProvidersRequest, opts ...grpc.CallOption) (*ListProvidersResponse, error)
	// List available provider type profiles.
	ListProviderProfiles(ctx context.Context, in *ListProviderProfilesRequest, opts ...grpc.CallOption) (*ListProviderProfilesResponse, error)
	// Fetch one provider type profile by id.
	GetProviderProfile(ctx context.Context, in *GetProviderProfileRequest, opts ...grpc.CallOption) (*ProviderProfileResponse, error)
	// Import custom provider type profiles.
	ImportProviderProfiles(ctx context.Context, in *ImportProviderProfilesRequest, opts ...grpc.CallOption) (*ImportProviderProfilesResponse, error)
	// Update an existing custom provider type profile.
	UpdateProviderProfiles(ctx context.Context, in *UpdateProviderProfilesRequest, opts ...grpc.CallOption) (*UpdateProviderProfilesResponse, error)
	// Validate provider type profiles without registering them.
	LintProviderProfiles(ctx context.Context, in *LintProviderProfilesRequest, opts ...grpc.CallOption) (*LintProviderProfilesResponse, error)
	// Update an existing provider by name.
	UpdateProvider(ctx context.Context, in *UpdateProviderRequest, opts ...grpc.CallOption) (*ProviderResponse, error)
	// Fetch refresh status for one provider or provider credential.
	GetProviderRefreshStatus(ctx context.Context, in *GetProviderRefreshStatusRequest, opts ...grpc.CallOption) (*GetProviderRefreshStatusResponse, error)
	// Configure gateway-owned refresh material for one provider credential.
	ConfigureProviderRefresh(ctx context.Context, in *ConfigureProviderRefreshRequest, opts ...grpc.CallOption) (*ConfigureProviderRefreshResponse, error)
	// Record a gateway-owned refresh request for one provider credential.
	RotateProviderCredential(ctx context.Context, in *RotateProviderCredentialRequest, opts ...grpc.CallOption) (*RotateProviderCredentialResponse, error)
	// Delete gateway-owned refresh configuration for one provider credential.
	DeleteProviderRefresh(ctx context.Context, in *DeleteProviderRefreshRequest, opts ...grpc.CallOption) (*DeleteProviderRefreshResponse, error)
	// Delete a provider by name.
	DeleteProvider(ctx context.Context, in *DeleteProviderRequest, opts ...grpc.CallOption) (*DeleteProviderResponse, error)
	// Delete a custom provider type profile by id.
	DeleteProviderProfile(ctx context.Context, in *DeleteProviderProfileRequest, opts ...grpc.CallOption) (*DeleteProviderProfileResponse, error)
	// Get sandbox settings by id (called by users, and by supervisors at startup
	// and in their poll loop). A supervisor whose session pushes configuration
	// receives later updates over ConnectSupervisor and stops polling.
	GetSandboxConfig(ctx context.Context, in *sandboxv1.GetSandboxConfigRequest, opts ...grpc.CallOption) (*sandboxv1.GetSandboxConfigResponse, error)
	// Get gateway-global settings (read-only runtime configuration; any
	// authenticated user may read these without requiring Platform Admin).
	//
	// Scope-only (no role): scopes are granted by the IdP at token issuance,
	// orthogonal to workspace membership. Deployments that enable scope
	// enforcement configure the IdP to grant config:read (or openshell:all)
	// to all sandbox users, so this does not block least-privilege flows.
	GetGatewayConfig(ctx context.Context, in *sandboxv1.GetGatewayConfigRequest, opts ...grpc.CallOption) (*sandboxv1.GetGatewayConfigResponse, error)
	// Update settings or policy at sandbox or global scope.
	UpdateConfig(ctx context.Context, in *UpdateConfigRequest, opts ...grpc.CallOption) (*UpdateConfigResponse, error)
	// Get the load status of a specific policy version.
	GetSandboxPolicyStatus(ctx context.Context, in *GetSandboxPolicyStatusRequest, opts ...grpc.CallOption) (*GetSandboxPolicyStatusResponse, error)
	// List policy history for a sandbox.
	ListSandboxPolicies(ctx context.Context, in *ListSandboxPoliciesRequest, opts ...grpc.CallOption) (*ListSandboxPoliciesResponse, error)
	// Report policy load result (called by sandbox after reload attempt).
	ReportPolicyStatus(ctx context.Context, in *ReportPolicyStatusRequest, opts ...grpc.CallOption) (*ReportPolicyStatusResponse, error)
	// Replace the gateway's observed tool server endpoint status for one sandbox.
	ReportEndpointStatus(ctx context.Context, in *ReportEndpointStatusRequest, opts ...grpc.CallOption) (*ReportEndpointStatusResponse, error)
	// Report installed provider state for the current ConnectSupervisor session.
	// Replacing or losing that session invalidates its observations.
	ReportProviderReadiness(ctx context.Context, in *ReportProviderReadinessRequest, opts ...grpc.CallOption) (*ReportProviderReadinessResponse, error)
	// Register startup and acknowledge an exact validated runtime configuration.
	ReportSandboxConfiguration(ctx context.Context, in *ReportSandboxConfigurationRequest, opts ...grpc.CallOption) (*ReportSandboxConfigurationResponse, error)
	// Get provider environment for a sandbox (called by the sandbox supervisor at
	// startup and by its poll loop). Polling projection of the provider
	// environment delivered over ConnectSupervisor; removed with the polling RPCs.
	GetSandboxProviderEnvironment(ctx context.Context, in *GetSandboxProviderEnvironmentRequest, opts ...grpc.CallOption) (*GetSandboxProviderEnvironmentResponse, error)
	// Exchange a stored provider subject token for an intermediate token scoped
	// to the calling supervisor's SPIFFE identity.
	ExchangeProviderSubjectToken(ctx context.Context, in *ExchangeProviderSubjectTokenRequest, opts ...grpc.CallOption) (*ExchangeProviderSubjectTokenResponse, error)
	// Fetch recent sandbox logs (one-shot).
	GetSandboxLogs(ctx context.Context, in *GetSandboxLogsRequest, opts ...grpc.CallOption) (*GetSandboxLogsResponse, error)
	// Push sandbox supervisor logs to the server (client-streaming).
	PushSandboxLogs(ctx context.Context, opts ...grpc.CallOption) (grpc.ClientStreamingClient[PushSandboxLogsRequest, PushSandboxLogsResponse], error)
	// Persistent supervisor-to-gateway session (bidirectional streaming).
	//
	// The supervisor opens this stream at startup and keeps it alive for the
	// sandbox lifetime. The gateway uses it to coordinate relay channels for
	// SSH connect, ExecSandbox, targetable sandbox services, and configuration
	// delivery. Supervisors advertise optional stream features in
	// SupervisorHello, and the gateway sends only payloads the supervisor
	// advertises. Raw service bytes flow over RelayStream calls (separate HTTP/2
	// streams on the same connection), not over this stream.
	ConnectSupervisor(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[SupervisorMessage, GatewayMessage], error)
	// Persist the canonical main process result before the supervisor exits.
	ReportMainProcessExit(ctx context.Context, in *ReportMainProcessExitRequest, opts ...grpc.CallOption) (*ReportMainProcessExitResponse, error)
	// Confirm that foreground terminal delivery completed naturally.
	FinalizeMainProcessExit(ctx context.Context, in *FinalizeMainProcessExitRequest, opts ...grpc.CallOption) (*FinalizeMainProcessExitResponse, error)
	// Raw byte relay between supervisor and gateway.
	//
	// The supervisor initiates this call after receiving a RelayOpen message
	// on its ConnectSupervisor stream. The first RelayFrame carries a
	// RelayInit with the channel_id to associate the new HTTP/2 stream with
	// the pending relay slot on the gateway. Subsequent frames carry raw bytes in either
	// direction between the gateway-side waiter (ForwardTcp / exec handler)
	// and the supervisor-side target bridge.
	//
	// This rides the same TCP+TLS+HTTP/2 connection as ConnectSupervisor —
	// no new TLS handshake, no reverse HTTP CONNECT.
	RelayStream(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[RelayFrame, RelayFrame], error)
	// Internal gateway-to-gateway relay forwarding.
	//
	// A gateway replica that receives a user request for a sandbox whose
	// supervisor session is owned by a different replica opens this stream to the
	// owner. The first frame carries PeerRelayInit; subsequent frames carry raw
	// bytes in either direction. This RPC is authenticated as a gateway peer, not
	// as a user or sandbox supervisor.
	PeerRelay(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[PeerRelayFrame, PeerRelayFrame], error)
	// Internal gateway-to-owner forwarding for supervisor-bound state.
	PeerReportProviderReadiness(ctx context.Context, in *ReportProviderReadinessRequest, opts ...grpc.CallOption) (*ReportProviderReadinessResponse, error)
	PeerReportEndpointStatus(ctx context.Context, in *ReportEndpointStatusRequest, opts ...grpc.CallOption) (*ReportEndpointStatusResponse, error)
	PeerGetSandboxProviderStatus(ctx context.Context, in *GetSandboxProviderStatusRequest, opts ...grpc.CallOption) (*GetSandboxProviderStatusResponse, error)
	// Best-effort notification to the replica that owns a supervisor session.
	// The receiver rebuilds snapshots from authoritative state.
	PeerNotifyConfigUpdate(ctx context.Context, in *PeerNotifyConfigUpdateRequest, opts ...grpc.CallOption) (*PeerNotifyConfigUpdateResponse, error)
	// Watch a sandbox and stream updates.
	//
	// This stream can include:
	// - Sandbox status snapshots (phase/status)
	// - OpenShell server process logs correlated by sandbox_id
	// - Platform events correlated to the sandbox
	WatchSandbox(ctx context.Context, in *WatchSandboxRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[SandboxStreamEvent], error)
	// Submit denial analysis results from sandbox (summaries + proposed chunks).
	SubmitPolicyAnalysis(ctx context.Context, in *SubmitPolicyAnalysisRequest, opts ...grpc.CallOption) (*SubmitPolicyAnalysisResponse, error)
	// Get draft policy recommendations for a sandbox.
	GetDraftPolicy(ctx context.Context, in *GetDraftPolicyRequest, opts ...grpc.CallOption) (*GetDraftPolicyResponse, error)
	// Approve a single draft policy chunk (merges into active policy).
	ApproveDraftChunk(ctx context.Context, in *ApproveDraftChunkRequest, opts ...grpc.CallOption) (*ApproveDraftChunkResponse, error)
	// Reject a single draft policy chunk.
	RejectDraftChunk(ctx context.Context, in *RejectDraftChunkRequest, opts ...grpc.CallOption) (*RejectDraftChunkResponse, error)
	// Approve all pending draft chunks (skips security-flagged unless forced).
	ApproveAllDraftChunks(ctx context.Context, in *ApproveAllDraftChunksRequest, opts ...grpc.CallOption) (*ApproveAllDraftChunksResponse, error)
	// Edit a pending draft chunk in-place (e.g. narrow allowed_ips).
	EditDraftChunk(ctx context.Context, in *EditDraftChunkRequest, opts ...grpc.CallOption) (*EditDraftChunkResponse, error)
	// Reverse an approval (remove merged rule from active policy).
	UndoDraftChunk(ctx context.Context, in *UndoDraftChunkRequest, opts ...grpc.CallOption) (*UndoDraftChunkResponse, error)
	// Clear all pending draft chunks for a sandbox.
	ClearDraftChunks(ctx context.Context, in *ClearDraftChunksRequest, opts ...grpc.CallOption) (*ClearDraftChunksResponse, error)
	// Get decision history for a sandbox's draft policy.
	GetDraftHistory(ctx context.Context, in *GetDraftHistoryRequest, opts ...grpc.CallOption) (*GetDraftHistoryResponse, error)
	// Exchange a sandbox-bootstrap credential (e.g. a Kubernetes projected
	// ServiceAccount token) for a gateway-minted JWT bound to the calling
	// sandbox's UUID. Used by the Kubernetes driver path; singleplayer
	// drivers receive the gateway JWT directly from the create-sandbox flow
	// and never call this RPC.
	IssueSandboxToken(ctx context.Context, in *IssueSandboxTokenRequest, opts ...grpc.CallOption) (*IssueSandboxTokenResponse, error)
	// Renew the calling sandbox's gateway JWT. Older tokens remain valid
	// until their own expiry; deployments should keep token TTLs short to
	// bound replay exposure. The supervisor calls this from a background
	// task at ~80% of the token's lifetime; the new token is cached in
	// memory only — the on-disk bootstrap file is intentionally not
	// rewritten.
	RefreshSandboxToken(ctx context.Context, in *RefreshSandboxTokenRequest, opts ...grpc.CallOption) (*RefreshSandboxTokenResponse, error)
	// Create a workspace.
	CreateWorkspace(ctx context.Context, in *CreateWorkspaceRequest, opts ...grpc.CallOption) (*CreateWorkspaceResponse, error)
	// Fetch a workspace by name.
	GetWorkspace(ctx context.Context, in *GetWorkspaceRequest, opts ...grpc.CallOption) (*GetWorkspaceResponse, error)
	// List workspaces.
	ListWorkspaces(ctx context.Context, in *ListWorkspacesRequest, opts ...grpc.CallOption) (*ListWorkspacesResponse, error)
	// Delete a workspace by name.
	DeleteWorkspace(ctx context.Context, in *DeleteWorkspaceRequest, opts ...grpc.CallOption) (*DeleteWorkspaceResponse, error)
	// Add a member to a workspace.
	AddWorkspaceMember(ctx context.Context, in *AddWorkspaceMemberRequest, opts ...grpc.CallOption) (*AddWorkspaceMemberResponse, error)
	// Remove a member from a workspace.
	RemoveWorkspaceMember(ctx context.Context, in *RemoveWorkspaceMemberRequest, opts ...grpc.CallOption) (*RemoveWorkspaceMemberResponse, error)
	// List members of a workspace.
	ListWorkspaceMembers(ctx context.Context, in *ListWorkspaceMembersRequest, opts ...grpc.CallOption) (*ListWorkspaceMembersResponse, error)
}

OpenShellClient is the client API for OpenShell service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

OpenShell service provides sandbox, provider, and runtime management capabilities.

Conventions:

  • This file owns the public API resource model exposed to OpenShell clients.
  • `Sandbox`, `SandboxSpec`, `SandboxStatus`, and `SandboxPhase` are gateway-owned public types. Internal compute drivers must not import or return them directly.
  • The gateway translates internal compute-driver observations into these public resource messages before persisting or returning them to clients.

func NewOpenShellClient 

func NewOpenShellClient(cc grpc.ClientConnInterface) OpenShellClient

type OpenShellServer 

type OpenShellServer interface {
	// Check the health of the service.
	Health(context.Context, *HealthRequest) (*HealthResponse, error)
	// Return the authenticated caller identity established by the gateway.
	GetCurrentUser(context.Context, *GetCurrentUserRequest) (*GetCurrentUserResponse, error)
	// Fetch elevated live gateway runtime metadata.
	GetGatewayInfo(context.Context, *GetGatewayInfoRequest) (*GetGatewayInfoResponse, error)
	// Create a new sandbox.
	CreateSandbox(context.Context, *CreateSandboxRequest) (*SandboxResponse, error)
	// Allocate a gateway-owned staging slot for a local rootfs tar archive.
	//
	// The gateway creates a request-scoped directory inside the compute driver's
	// staging root and returns an opaque single-use token plus the absolute path
	// the client must write the archive to. The token is then passed as
	// `template.driver_config.<driver>.rootfs_tar_staging_token` on
	// CreateSandbox; callers never name a filesystem path themselves. Only a
	// client sharing the gateway's filesystem can complete the upload.
	BeginRootfsTarStaging(context.Context, *BeginRootfsTarStagingRequest) (*BeginRootfsTarStagingResponse, error)
	// Fetch a sandbox by name.
	GetSandbox(context.Context, *GetSandboxRequest) (*SandboxResponse, error)
	// List sandboxes.
	ListSandboxes(context.Context, *ListSandboxesRequest) (*ListSandboxesResponse, error)
	// Create a reusable sandbox workload template.
	CreateSandboxTemplate(context.Context, *CreateSandboxTemplateRequest) (*SandboxTemplateResponse, error)
	// Fetch a reusable sandbox workload template by name.
	GetSandboxTemplate(context.Context, *GetSandboxTemplateRequest) (*SandboxTemplateResponse, error)
	// List reusable sandbox workload templates.
	ListSandboxTemplates(context.Context, *ListSandboxTemplatesRequest) (*ListSandboxTemplatesResponse, error)
	// Delete a reusable sandbox workload template by name.
	DeleteSandboxTemplate(context.Context, *DeleteSandboxTemplateRequest) (*DeleteSandboxTemplateResponse, error)
	// List provider records attached to a sandbox.
	ListSandboxProviders(context.Context, *ListSandboxProvidersRequest) (*ListSandboxProvidersResponse, error)
	// Attach a provider record to an existing sandbox.
	AttachSandboxProvider(context.Context, *AttachSandboxProviderRequest) (*AttachSandboxProviderResponse, error)
	// Detach a provider record from an existing sandbox.
	DetachSandboxProvider(context.Context, *DetachSandboxProviderRequest) (*DetachSandboxProviderResponse, error)
	// Inspect the installed authority for one sandbox provider mutation.
	GetSandboxProviderStatus(context.Context, *GetSandboxProviderStatusRequest) (*GetSandboxProviderStatusResponse, error)
	// Delete a sandbox by name.
	DeleteSandbox(context.Context, *DeleteSandboxRequest) (*DeleteSandboxResponse, error)
	// Stop a sandbox while retaining its persistent state.
	StopSandbox(context.Context, *StopSandboxRequest) (*SandboxResponse, error)
	// Start a previously stopped sandbox.
	StartSandbox(context.Context, *StartSandboxRequest) (*SandboxResponse, error)
	// Freeze a ready sandbox and retain its memory state for a later resume.
	// Requires a compute driver and isolation backend that support state
	// retention.
	SuspendSandbox(context.Context, *SuspendSandboxRequest) (*SandboxResponse, error)
	// Restore a suspended sandbox in a new runtime generation.
	ResumeSandbox(context.Context, *ResumeSandboxRequest) (*SandboxResponse, error)
	// Create a short-lived SSH session for a sandbox.
	CreateSshSession(context.Context, *CreateSshSessionRequest) (*CreateSshSessionResponse, error)
	// Create or update a sandbox HTTP service endpoint for local routing.
	ExposeService(context.Context, *ExposeServiceRequest) (*ServiceEndpointResponse, error)
	// Fetch one sandbox HTTP service endpoint.
	GetService(context.Context, *GetServiceRequest) (*ServiceEndpointResponse, error)
	// List sandbox HTTP service endpoints.
	ListServices(context.Context, *ListServicesRequest) (*ListServicesResponse, error)
	// Delete one sandbox HTTP service endpoint.
	DeleteService(context.Context, *DeleteServiceRequest) (*DeleteServiceResponse, error)
	// Revoke a previously issued SSH session.
	RevokeSshSession(context.Context, *RevokeSshSessionRequest) (*RevokeSshSessionResponse, error)
	// Execute a command in a ready sandbox and stream output.
	ExecSandbox(*ExecSandboxRequest, grpc.ServerStreamingServer[ExecSandboxEvent]) error
	// Forward one CLI-side TCP connection to a loopback TCP target in a sandbox.
	ForwardTcp(grpc.BidiStreamingServer[TcpForwardFrame, TcpForwardFrame]) error
	// Execute an interactive command with bidirectional stdin/stdout streaming.
	// The first client message MUST carry an ExecSandboxInput with the start
	// variant. Subsequent messages carry stdin bytes or window resize events.
	ExecSandboxInteractive(grpc.BidiStreamingServer[ExecSandboxInput, ExecSandboxEvent]) error
	// Create a provider.
	CreateProvider(context.Context, *CreateProviderRequest) (*ProviderResponse, error)
	// Fetch a provider by name.
	GetProvider(context.Context, *GetProviderRequest) (*ProviderResponse, error)
	// Export selected usable runtime credentials. Only directly authenticated
	// mTLS operators may call this method; refresh material is never returned.
	GetProviderCredentials(context.Context, *GetProviderCredentialsRequest) (*GetProviderCredentialsResponse, error)
	// List providers.
	ListProviders(context.Context, *ListProvidersRequest) (*ListProvidersResponse, error)
	// List available provider type profiles.
	ListProviderProfiles(context.Context, *ListProviderProfilesRequest) (*ListProviderProfilesResponse, error)
	// Fetch one provider type profile by id.
	GetProviderProfile(context.Context, *GetProviderProfileRequest) (*ProviderProfileResponse, error)
	// Import custom provider type profiles.
	ImportProviderProfiles(context.Context, *ImportProviderProfilesRequest) (*ImportProviderProfilesResponse, error)
	// Update an existing custom provider type profile.
	UpdateProviderProfiles(context.Context, *UpdateProviderProfilesRequest) (*UpdateProviderProfilesResponse, error)
	// Validate provider type profiles without registering them.
	LintProviderProfiles(context.Context, *LintProviderProfilesRequest) (*LintProviderProfilesResponse, error)
	// Update an existing provider by name.
	UpdateProvider(context.Context, *UpdateProviderRequest) (*ProviderResponse, error)
	// Fetch refresh status for one provider or provider credential.
	GetProviderRefreshStatus(context.Context, *GetProviderRefreshStatusRequest) (*GetProviderRefreshStatusResponse, error)
	// Configure gateway-owned refresh material for one provider credential.
	ConfigureProviderRefresh(context.Context, *ConfigureProviderRefreshRequest) (*ConfigureProviderRefreshResponse, error)
	// Record a gateway-owned refresh request for one provider credential.
	RotateProviderCredential(context.Context, *RotateProviderCredentialRequest) (*RotateProviderCredentialResponse, error)
	// Delete gateway-owned refresh configuration for one provider credential.
	DeleteProviderRefresh(context.Context, *DeleteProviderRefreshRequest) (*DeleteProviderRefreshResponse, error)
	// Delete a provider by name.
	DeleteProvider(context.Context, *DeleteProviderRequest) (*DeleteProviderResponse, error)
	// Delete a custom provider type profile by id.
	DeleteProviderProfile(context.Context, *DeleteProviderProfileRequest) (*DeleteProviderProfileResponse, error)
	// Get sandbox settings by id (called by users, and by supervisors at startup
	// and in their poll loop). A supervisor whose session pushes configuration
	// receives later updates over ConnectSupervisor and stops polling.
	GetSandboxConfig(context.Context, *sandboxv1.GetSandboxConfigRequest) (*sandboxv1.GetSandboxConfigResponse, error)
	// Get gateway-global settings (read-only runtime configuration; any
	// authenticated user may read these without requiring Platform Admin).
	//
	// Scope-only (no role): scopes are granted by the IdP at token issuance,
	// orthogonal to workspace membership. Deployments that enable scope
	// enforcement configure the IdP to grant config:read (or openshell:all)
	// to all sandbox users, so this does not block least-privilege flows.
	GetGatewayConfig(context.Context, *sandboxv1.GetGatewayConfigRequest) (*sandboxv1.GetGatewayConfigResponse, error)
	// Update settings or policy at sandbox or global scope.
	UpdateConfig(context.Context, *UpdateConfigRequest) (*UpdateConfigResponse, error)
	// Get the load status of a specific policy version.
	GetSandboxPolicyStatus(context.Context, *GetSandboxPolicyStatusRequest) (*GetSandboxPolicyStatusResponse, error)
	// List policy history for a sandbox.
	ListSandboxPolicies(context.Context, *ListSandboxPoliciesRequest) (*ListSandboxPoliciesResponse, error)
	// Report policy load result (called by sandbox after reload attempt).
	ReportPolicyStatus(context.Context, *ReportPolicyStatusRequest) (*ReportPolicyStatusResponse, error)
	// Replace the gateway's observed tool server endpoint status for one sandbox.
	ReportEndpointStatus(context.Context, *ReportEndpointStatusRequest) (*ReportEndpointStatusResponse, error)
	// Report installed provider state for the current ConnectSupervisor session.
	// Replacing or losing that session invalidates its observations.
	ReportProviderReadiness(context.Context, *ReportProviderReadinessRequest) (*ReportProviderReadinessResponse, error)
	// Register startup and acknowledge an exact validated runtime configuration.
	ReportSandboxConfiguration(context.Context, *ReportSandboxConfigurationRequest) (*ReportSandboxConfigurationResponse, error)
	// Get provider environment for a sandbox (called by the sandbox supervisor at
	// startup and by its poll loop). Polling projection of the provider
	// environment delivered over ConnectSupervisor; removed with the polling RPCs.
	GetSandboxProviderEnvironment(context.Context, *GetSandboxProviderEnvironmentRequest) (*GetSandboxProviderEnvironmentResponse, error)
	// Exchange a stored provider subject token for an intermediate token scoped
	// to the calling supervisor's SPIFFE identity.
	ExchangeProviderSubjectToken(context.Context, *ExchangeProviderSubjectTokenRequest) (*ExchangeProviderSubjectTokenResponse, error)
	// Fetch recent sandbox logs (one-shot).
	GetSandboxLogs(context.Context, *GetSandboxLogsRequest) (*GetSandboxLogsResponse, error)
	// Push sandbox supervisor logs to the server (client-streaming).
	PushSandboxLogs(grpc.ClientStreamingServer[PushSandboxLogsRequest, PushSandboxLogsResponse]) error
	// Persistent supervisor-to-gateway session (bidirectional streaming).
	//
	// The supervisor opens this stream at startup and keeps it alive for the
	// sandbox lifetime. The gateway uses it to coordinate relay channels for
	// SSH connect, ExecSandbox, targetable sandbox services, and configuration
	// delivery. Supervisors advertise optional stream features in
	// SupervisorHello, and the gateway sends only payloads the supervisor
	// advertises. Raw service bytes flow over RelayStream calls (separate HTTP/2
	// streams on the same connection), not over this stream.
	ConnectSupervisor(grpc.BidiStreamingServer[SupervisorMessage, GatewayMessage]) error
	// Persist the canonical main process result before the supervisor exits.
	ReportMainProcessExit(context.Context, *ReportMainProcessExitRequest) (*ReportMainProcessExitResponse, error)
	// Confirm that foreground terminal delivery completed naturally.
	FinalizeMainProcessExit(context.Context, *FinalizeMainProcessExitRequest) (*FinalizeMainProcessExitResponse, error)
	// Raw byte relay between supervisor and gateway.
	//
	// The supervisor initiates this call after receiving a RelayOpen message
	// on its ConnectSupervisor stream. The first RelayFrame carries a
	// RelayInit with the channel_id to associate the new HTTP/2 stream with
	// the pending relay slot on the gateway. Subsequent frames carry raw bytes in either
	// direction between the gateway-side waiter (ForwardTcp / exec handler)
	// and the supervisor-side target bridge.
	//
	// This rides the same TCP+TLS+HTTP/2 connection as ConnectSupervisor —
	// no new TLS handshake, no reverse HTTP CONNECT.
	RelayStream(grpc.BidiStreamingServer[RelayFrame, RelayFrame]) error
	// Internal gateway-to-gateway relay forwarding.
	//
	// A gateway replica that receives a user request for a sandbox whose
	// supervisor session is owned by a different replica opens this stream to the
	// owner. The first frame carries PeerRelayInit; subsequent frames carry raw
	// bytes in either direction. This RPC is authenticated as a gateway peer, not
	// as a user or sandbox supervisor.
	PeerRelay(grpc.BidiStreamingServer[PeerRelayFrame, PeerRelayFrame]) error
	// Internal gateway-to-owner forwarding for supervisor-bound state.
	PeerReportProviderReadiness(context.Context, *ReportProviderReadinessRequest) (*ReportProviderReadinessResponse, error)
	PeerReportEndpointStatus(context.Context, *ReportEndpointStatusRequest) (*ReportEndpointStatusResponse, error)
	PeerGetSandboxProviderStatus(context.Context, *GetSandboxProviderStatusRequest) (*GetSandboxProviderStatusResponse, error)
	// Best-effort notification to the replica that owns a supervisor session.
	// The receiver rebuilds snapshots from authoritative state.
	PeerNotifyConfigUpdate(context.Context, *PeerNotifyConfigUpdateRequest) (*PeerNotifyConfigUpdateResponse, error)
	// Watch a sandbox and stream updates.
	//
	// This stream can include:
	// - Sandbox status snapshots (phase/status)
	// - OpenShell server process logs correlated by sandbox_id
	// - Platform events correlated to the sandbox
	WatchSandbox(*WatchSandboxRequest, grpc.ServerStreamingServer[SandboxStreamEvent]) error
	// Submit denial analysis results from sandbox (summaries + proposed chunks).
	SubmitPolicyAnalysis(context.Context, *SubmitPolicyAnalysisRequest) (*SubmitPolicyAnalysisResponse, error)
	// Get draft policy recommendations for a sandbox.
	GetDraftPolicy(context.Context, *GetDraftPolicyRequest) (*GetDraftPolicyResponse, error)
	// Approve a single draft policy chunk (merges into active policy).
	ApproveDraftChunk(context.Context, *ApproveDraftChunkRequest) (*ApproveDraftChunkResponse, error)
	// Reject a single draft policy chunk.
	RejectDraftChunk(context.Context, *RejectDraftChunkRequest) (*RejectDraftChunkResponse, error)
	// Approve all pending draft chunks (skips security-flagged unless forced).
	ApproveAllDraftChunks(context.Context, *ApproveAllDraftChunksRequest) (*ApproveAllDraftChunksResponse, error)
	// Edit a pending draft chunk in-place (e.g. narrow allowed_ips).
	EditDraftChunk(context.Context, *EditDraftChunkRequest) (*EditDraftChunkResponse, error)
	// Reverse an approval (remove merged rule from active policy).
	UndoDraftChunk(context.Context, *UndoDraftChunkRequest) (*UndoDraftChunkResponse, error)
	// Clear all pending draft chunks for a sandbox.
	ClearDraftChunks(context.Context, *ClearDraftChunksRequest) (*ClearDraftChunksResponse, error)
	// Get decision history for a sandbox's draft policy.
	GetDraftHistory(context.Context, *GetDraftHistoryRequest) (*GetDraftHistoryResponse, error)
	// Exchange a sandbox-bootstrap credential (e.g. a Kubernetes projected
	// ServiceAccount token) for a gateway-minted JWT bound to the calling
	// sandbox's UUID. Used by the Kubernetes driver path; singleplayer
	// drivers receive the gateway JWT directly from the create-sandbox flow
	// and never call this RPC.
	IssueSandboxToken(context.Context, *IssueSandboxTokenRequest) (*IssueSandboxTokenResponse, error)
	// Renew the calling sandbox's gateway JWT. Older tokens remain valid
	// until their own expiry; deployments should keep token TTLs short to
	// bound replay exposure. The supervisor calls this from a background
	// task at ~80% of the token's lifetime; the new token is cached in
	// memory only — the on-disk bootstrap file is intentionally not
	// rewritten.
	RefreshSandboxToken(context.Context, *RefreshSandboxTokenRequest) (*RefreshSandboxTokenResponse, error)
	// Create a workspace.
	CreateWorkspace(context.Context, *CreateWorkspaceRequest) (*CreateWorkspaceResponse, error)
	// Fetch a workspace by name.
	GetWorkspace(context.Context, *GetWorkspaceRequest) (*GetWorkspaceResponse, error)
	// List workspaces.
	ListWorkspaces(context.Context, *ListWorkspacesRequest) (*ListWorkspacesResponse, error)
	// Delete a workspace by name.
	DeleteWorkspace(context.Context, *DeleteWorkspaceRequest) (*DeleteWorkspaceResponse, error)
	// Add a member to a workspace.
	AddWorkspaceMember(context.Context, *AddWorkspaceMemberRequest) (*AddWorkspaceMemberResponse, error)
	// Remove a member from a workspace.
	RemoveWorkspaceMember(context.Context, *RemoveWorkspaceMemberRequest) (*RemoveWorkspaceMemberResponse, error)
	// List members of a workspace.
	ListWorkspaceMembers(context.Context, *ListWorkspaceMembersRequest) (*ListWorkspaceMembersResponse, error)
	// contains filtered or unexported methods
}

OpenShellServer is the server API for OpenShell service. All implementations must embed UnimplementedOpenShellServer for forward compatibility.

OpenShell service provides sandbox, provider, and runtime management capabilities.

Conventions:

  • This file owns the public API resource model exposed to OpenShell clients.
  • `Sandbox`, `SandboxSpec`, `SandboxStatus`, and `SandboxPhase` are gateway-owned public types. Internal compute drivers must not import or return them directly.
  • The gateway translates internal compute-driver observations into these public resource messages before persisting or returning them to clients.

type OpenShell_ConnectSupervisorClient 

type OpenShell_ConnectSupervisorClient = grpc.BidiStreamingClient[SupervisorMessage, GatewayMessage]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_ConnectSupervisorServer 

type OpenShell_ConnectSupervisorServer = grpc.BidiStreamingServer[SupervisorMessage, GatewayMessage]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_ExecSandboxClient 

type OpenShell_ExecSandboxClient = grpc.ServerStreamingClient[ExecSandboxEvent]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_ExecSandboxInteractiveClient 

type OpenShell_ExecSandboxInteractiveClient = grpc.BidiStreamingClient[ExecSandboxInput, ExecSandboxEvent]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_ExecSandboxInteractiveServer 

type OpenShell_ExecSandboxInteractiveServer = grpc.BidiStreamingServer[ExecSandboxInput, ExecSandboxEvent]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_ExecSandboxServer 

type OpenShell_ExecSandboxServer = grpc.ServerStreamingServer[ExecSandboxEvent]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_ForwardTcpClient 

type OpenShell_ForwardTcpClient = grpc.BidiStreamingClient[TcpForwardFrame, TcpForwardFrame]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_ForwardTcpServer 

type OpenShell_ForwardTcpServer = grpc.BidiStreamingServer[TcpForwardFrame, TcpForwardFrame]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_PeerRelayClient 

type OpenShell_PeerRelayClient = grpc.BidiStreamingClient[PeerRelayFrame, PeerRelayFrame]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_PeerRelayServer 

type OpenShell_PeerRelayServer = grpc.BidiStreamingServer[PeerRelayFrame, PeerRelayFrame]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_PushSandboxLogsClient 

type OpenShell_PushSandboxLogsClient = grpc.ClientStreamingClient[PushSandboxLogsRequest, PushSandboxLogsResponse]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_PushSandboxLogsServer 

type OpenShell_PushSandboxLogsServer = grpc.ClientStreamingServer[PushSandboxLogsRequest, PushSandboxLogsResponse]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_RelayStreamClient 

type OpenShell_RelayStreamClient = grpc.BidiStreamingClient[RelayFrame, RelayFrame]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_RelayStreamServer 

type OpenShell_RelayStreamServer = grpc.BidiStreamingServer[RelayFrame, RelayFrame]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_WatchSandboxClient 

type OpenShell_WatchSandboxClient = grpc.ServerStreamingClient[SandboxStreamEvent]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type OpenShell_WatchSandboxServer 

type OpenShell_WatchSandboxServer = grpc.ServerStreamingServer[SandboxStreamEvent]

This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.

type PeerConfigProviderTarget 

type PeerConfigProviderTarget struct {
	Workspace string `protobuf:"bytes,1,opt,name=workspace,proto3" json:"workspace,omitempty"`
	Name      string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Sandboxes in a workspace that attach the named provider.

func (*PeerConfigProviderTarget) Descriptor deprecated 

func (*PeerConfigProviderTarget) Descriptor() ([]byte, []int)

Deprecated: Use PeerConfigProviderTarget.ProtoReflect.Descriptor instead.

func (*PeerConfigProviderTarget) GetName 

func (x *PeerConfigProviderTarget) GetName() string

func (*PeerConfigProviderTarget) GetWorkspace 

func (x *PeerConfigProviderTarget) GetWorkspace() string

func (*PeerConfigProviderTarget) ProtoMessage 

func (*PeerConfigProviderTarget) ProtoMessage()

func (*PeerConfigProviderTarget) ProtoReflect 

func (x *PeerConfigProviderTarget) ProtoReflect() protoreflect.Message

func (*PeerConfigProviderTarget) Reset 

func (x *PeerConfigProviderTarget) Reset()

func (*PeerConfigProviderTarget) String 

func (x *PeerConfigProviderTarget) String() string

type PeerConfigSandboxTarget 

type PeerConfigSandboxTarget struct {
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Fences a targeted notification to the session observed by the sending replica.
	SessionId string `protobuf:"bytes,2,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// contains filtered or unexported fields
}

func (*PeerConfigSandboxTarget) Descriptor deprecated 

func (*PeerConfigSandboxTarget) Descriptor() ([]byte, []int)

Deprecated: Use PeerConfigSandboxTarget.ProtoReflect.Descriptor instead.

func (*PeerConfigSandboxTarget) GetSandboxId 

func (x *PeerConfigSandboxTarget) GetSandboxId() string

func (*PeerConfigSandboxTarget) GetSessionId 

func (x *PeerConfigSandboxTarget) GetSessionId() string

func (*PeerConfigSandboxTarget) ProtoMessage 

func (*PeerConfigSandboxTarget) ProtoMessage()

func (*PeerConfigSandboxTarget) ProtoReflect 

func (x *PeerConfigSandboxTarget) ProtoReflect() protoreflect.Message

func (*PeerConfigSandboxTarget) Reset 

func (x *PeerConfigSandboxTarget) Reset()

func (*PeerConfigSandboxTarget) String 

func (x *PeerConfigSandboxTarget) String() string

type PeerNotifyConfigUpdateRequest 

type PeerNotifyConfigUpdateRequest struct {

	// Types that are valid to be assigned to Scope:
	//
	//	*PeerNotifyConfigUpdateRequest_Sandbox
	//	*PeerNotifyConfigUpdateRequest_Workspace
	//	*PeerNotifyConfigUpdateRequest_AllConnected
	//	*PeerNotifyConfigUpdateRequest_Provider
	Scope isPeerNotifyConfigUpdateRequest_Scope `protobuf_oneof:"scope"`
	// contains filtered or unexported fields
}

func (*PeerNotifyConfigUpdateRequest) Descriptor deprecated 

func (*PeerNotifyConfigUpdateRequest) Descriptor() ([]byte, []int)

Deprecated: Use PeerNotifyConfigUpdateRequest.ProtoReflect.Descriptor instead.

func (*PeerNotifyConfigUpdateRequest) GetAllConnected 

func (x *PeerNotifyConfigUpdateRequest) GetAllConnected() bool

func (*PeerNotifyConfigUpdateRequest) GetProvider 

func (x *PeerNotifyConfigUpdateRequest) GetProvider() *PeerConfigProviderTarget

func (*PeerNotifyConfigUpdateRequest) GetSandbox 

func (x *PeerNotifyConfigUpdateRequest) GetSandbox() *PeerConfigSandboxTarget

func (*PeerNotifyConfigUpdateRequest) GetScope 

func (x *PeerNotifyConfigUpdateRequest) GetScope() isPeerNotifyConfigUpdateRequest_Scope

func (*PeerNotifyConfigUpdateRequest) GetWorkspace 

func (x *PeerNotifyConfigUpdateRequest) GetWorkspace() string

func (*PeerNotifyConfigUpdateRequest) ProtoMessage 

func (*PeerNotifyConfigUpdateRequest) ProtoMessage()

func (*PeerNotifyConfigUpdateRequest) ProtoReflect 

func (x *PeerNotifyConfigUpdateRequest) ProtoReflect() protoreflect.Message

func (*PeerNotifyConfigUpdateRequest) Reset 

func (x *PeerNotifyConfigUpdateRequest) Reset()

func (*PeerNotifyConfigUpdateRequest) String 

func (x *PeerNotifyConfigUpdateRequest) String() string

type PeerNotifyConfigUpdateRequest_AllConnected 

type PeerNotifyConfigUpdateRequest_AllConnected struct {
	AllConnected bool `protobuf:"varint,3,opt,name=all_connected,json=allConnected,proto3,oneof"`
}

type PeerNotifyConfigUpdateRequest_Provider 

type PeerNotifyConfigUpdateRequest_Provider struct {
	Provider *PeerConfigProviderTarget `protobuf:"bytes,4,opt,name=provider,proto3,oneof"`
}

type PeerNotifyConfigUpdateRequest_Sandbox 

type PeerNotifyConfigUpdateRequest_Sandbox struct {
	Sandbox *PeerConfigSandboxTarget `protobuf:"bytes,1,opt,name=sandbox,proto3,oneof"`
}

type PeerNotifyConfigUpdateRequest_Workspace 

type PeerNotifyConfigUpdateRequest_Workspace struct {
	Workspace string `protobuf:"bytes,2,opt,name=workspace,proto3,oneof"`
}

type PeerNotifyConfigUpdateResponse 

type PeerNotifyConfigUpdateResponse struct {

	// The targeted session moved before the receiving replica accepted the notification.
	StaleOwner bool `protobuf:"varint,1,opt,name=stale_owner,json=staleOwner,proto3" json:"stale_owner,omitempty"`
	// contains filtered or unexported fields
}

func (*PeerNotifyConfigUpdateResponse) Descriptor deprecated 

func (*PeerNotifyConfigUpdateResponse) Descriptor() ([]byte, []int)

Deprecated: Use PeerNotifyConfigUpdateResponse.ProtoReflect.Descriptor instead.

func (*PeerNotifyConfigUpdateResponse) GetStaleOwner 

func (x *PeerNotifyConfigUpdateResponse) GetStaleOwner() bool

func (*PeerNotifyConfigUpdateResponse) ProtoMessage 

func (*PeerNotifyConfigUpdateResponse) ProtoMessage()

func (*PeerNotifyConfigUpdateResponse) ProtoReflect 

func (x *PeerNotifyConfigUpdateResponse) ProtoReflect() protoreflect.Message

func (*PeerNotifyConfigUpdateResponse) Reset 

func (x *PeerNotifyConfigUpdateResponse) Reset()

func (*PeerNotifyConfigUpdateResponse) String 

func (x *PeerNotifyConfigUpdateResponse) String() string

type PeerRelayFrame 

type PeerRelayFrame struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*PeerRelayFrame_Init
	//	*PeerRelayFrame_Data
	Payload isPeerRelayFrame_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

A single frame on the gateway-to-gateway peer relay RPC.

func (*PeerRelayFrame) Descriptor deprecated 

func (*PeerRelayFrame) Descriptor() ([]byte, []int)

Deprecated: Use PeerRelayFrame.ProtoReflect.Descriptor instead.

func (*PeerRelayFrame) GetData 

func (x *PeerRelayFrame) GetData() []byte

func (*PeerRelayFrame) GetInit 

func (x *PeerRelayFrame) GetInit() *PeerRelayInit

func (*PeerRelayFrame) GetPayload 

func (x *PeerRelayFrame) GetPayload() isPeerRelayFrame_Payload

func (*PeerRelayFrame) ProtoMessage 

func (*PeerRelayFrame) ProtoMessage()

func (*PeerRelayFrame) ProtoReflect 

func (x *PeerRelayFrame) ProtoReflect() protoreflect.Message

func (*PeerRelayFrame) Reset 

func (x *PeerRelayFrame) Reset()

func (*PeerRelayFrame) String 

func (x *PeerRelayFrame) String() string

type PeerRelayFrame_Data 

type PeerRelayFrame_Data struct {
	Data []byte `protobuf:"bytes,2,opt,name=data,proto3,oneof"`
}

type PeerRelayFrame_Init 

type PeerRelayFrame_Init struct {
	Init *PeerRelayInit `protobuf:"bytes,1,opt,name=init,proto3,oneof"`
}

type PeerRelayInit 

type PeerRelayInit struct {

	// Stable sandbox UUID whose supervisor relay should be opened.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Relay target to ask the owning gateway to open on its local supervisor
	// session. The channel_id is assigned by the forwarding gateway.
	RelayOpen *RelayOpen `protobuf:"bytes,2,opt,name=relay_open,json=relayOpen,proto3" json:"relay_open,omitempty"`
	// Gateway replica id that initiated the peer relay.
	RequesterReplicaId string `protobuf:"bytes,3,opt,name=requester_replica_id,json=requesterReplicaId,proto3" json:"requester_replica_id,omitempty"`
	// contains filtered or unexported fields
}

Initial frame for gateway peer relay forwarding.

func (*PeerRelayInit) Descriptor deprecated 

func (*PeerRelayInit) Descriptor() ([]byte, []int)

Deprecated: Use PeerRelayInit.ProtoReflect.Descriptor instead.

func (*PeerRelayInit) GetRelayOpen 

func (x *PeerRelayInit) GetRelayOpen() *RelayOpen

func (*PeerRelayInit) GetRequesterReplicaId 

func (x *PeerRelayInit) GetRequesterReplicaId() string

func (*PeerRelayInit) GetSandboxId 

func (x *PeerRelayInit) GetSandboxId() string

func (*PeerRelayInit) ProtoMessage 

func (*PeerRelayInit) ProtoMessage()

func (*PeerRelayInit) ProtoReflect 

func (x *PeerRelayInit) ProtoReflect() protoreflect.Message

func (*PeerRelayInit) Reset 

func (x *PeerRelayInit) Reset()

func (*PeerRelayInit) String 

func (x *PeerRelayInit) String() string

type PlatformEvent 

type PlatformEvent struct {

	// Time when the event occurred.
	EventTime *timestamppb.Timestamp `protobuf:"bytes,101,opt,name=event_time,json=eventTime,proto3" json:"event_time,omitempty"`
	// Event source (e.g. "kubernetes", "docker", "process").
	Source string `protobuf:"bytes,2,opt,name=source,proto3" json:"source,omitempty"`
	// Event type/severity (e.g. "Normal", "Warning").
	Type string `protobuf:"bytes,3,opt,name=type,proto3" json:"type,omitempty"`
	// Short reason code (e.g. "Started", "Pulled", "Failed").
	Reason string `protobuf:"bytes,4,opt,name=reason,proto3" json:"reason,omitempty"`
	// Human-readable event message.
	Message string `protobuf:"bytes,5,opt,name=message,proto3" json:"message,omitempty"`
	// Optional metadata as key-value pairs.
	Metadata map[string]string `` /* 143-byte string literal not displayed */
	// contains filtered or unexported fields
}

Public platform event exposed on the sandbox watch stream.

func (*PlatformEvent) Descriptor deprecated 

func (*PlatformEvent) Descriptor() ([]byte, []int)

Deprecated: Use PlatformEvent.ProtoReflect.Descriptor instead.

func (*PlatformEvent) GetEventTime 

func (x *PlatformEvent) GetEventTime() *timestamppb.Timestamp

func (*PlatformEvent) GetMessage 

func (x *PlatformEvent) GetMessage() string

func (*PlatformEvent) GetMetadata 

func (x *PlatformEvent) GetMetadata() map[string]string

func (*PlatformEvent) GetReason 

func (x *PlatformEvent) GetReason() string

func (*PlatformEvent) GetSource 

func (x *PlatformEvent) GetSource() string

func (*PlatformEvent) GetType 

func (x *PlatformEvent) GetType() string

func (*PlatformEvent) ProtoMessage 

func (*PlatformEvent) ProtoMessage()

func (*PlatformEvent) ProtoReflect 

func (x *PlatformEvent) ProtoReflect() protoreflect.Message

func (*PlatformEvent) Reset 

func (x *PlatformEvent) Reset()

func (*PlatformEvent) String 

func (x *PlatformEvent) String() string

type PolicyChunk 

type PolicyChunk struct {

	// Unique chunk identifier.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Approval status: "pending", "approved", "rejected".
	Status string `protobuf:"bytes,2,opt,name=status,proto3" json:"status,omitempty"`
	// Proposed network_policies map key.
	RuleName string `protobuf:"bytes,3,opt,name=rule_name,json=ruleName,proto3" json:"rule_name,omitempty"`
	// The proposed network policy rule.
	ProposedRule *sandboxv1.NetworkPolicyRule `protobuf:"bytes,4,opt,name=proposed_rule,json=proposedRule,proto3" json:"proposed_rule,omitempty"`
	// Human-readable explanation of why this rule is proposed.
	Rationale string `protobuf:"bytes,5,opt,name=rationale,proto3" json:"rationale,omitempty"`
	// Security concerns flagged by analysis (empty if none).
	SecurityNotes string `protobuf:"bytes,6,opt,name=security_notes,json=securityNotes,proto3" json:"security_notes,omitempty"`
	// Analysis confidence (0.0-1.0). 0 for mechanistic mode.
	Confidence float32 `protobuf:"fixed32,7,opt,name=confidence,proto3" json:"confidence,omitempty"`
	// IDs of denial summaries that led to this chunk.
	DenialSummaryIds []string `protobuf:"bytes,8,rep,name=denial_summary_ids,json=denialSummaryIds,proto3" json:"denial_summary_ids,omitempty"`
	// Time when this chunk was created.
	CreatedTime *timestamppb.Timestamp `protobuf:"bytes,109,opt,name=created_time,json=createdTime,proto3" json:"created_time,omitempty"`
	// Time when the user approved or rejected the chunk. Absent if undecided.
	DecidedTime *timestamppb.Timestamp `protobuf:"bytes,110,opt,name=decided_time,json=decidedTime,proto3" json:"decided_time,omitempty"`
	// Recommendation stage: "initial" or "refined" (progressive L7 visibility).
	Stage string `protobuf:"bytes,11,opt,name=stage,proto3" json:"stage,omitempty"`
	// For stage="refined": the initial chunk this replaces.
	SupersedesChunkId string `protobuf:"bytes,12,opt,name=supersedes_chunk_id,json=supersedesChunkId,proto3" json:"supersedes_chunk_id,omitempty"`
	// How many times this endpoint has been seen across denial flush cycles.
	HitCount int32 `protobuf:"varint,13,opt,name=hit_count,json=hitCount,proto3" json:"hit_count,omitempty"`
	// First time this endpoint was proposed.
	FirstSeenTime *timestamppb.Timestamp `protobuf:"bytes,114,opt,name=first_seen_time,json=firstSeenTime,proto3" json:"first_seen_time,omitempty"`
	// Most recent time this endpoint was proposed again.
	LastSeenTime *timestamppb.Timestamp `protobuf:"bytes,115,opt,name=last_seen_time,json=lastSeenTime,proto3" json:"last_seen_time,omitempty"`
	// Binary path that triggered the denial (denormalized for display convenience).
	Binary string `protobuf:"bytes,16,opt,name=binary,proto3" json:"binary,omitempty"`
	// Validation verdict from gateway-side static checks (prover output).
	// Free-form summary string for human consumption in the inbox card.
	// Empty until the prover has run for this chunk.
	ValidationResult string `protobuf:"bytes,17,opt,name=validation_result,json=validationResult,proto3" json:"validation_result,omitempty"`
	// Operator-supplied free-form text accompanying a rejection. Populated
	// when the reviewer rejects via `RejectDraftChunkRequest.reason`; surfaced
	// back to the in-sandbox agent so it can revise the proposal.
	// Empty for non-rejected chunks.
	RejectionReason string `protobuf:"bytes,18,opt,name=rejection_reason,json=rejectionReason,proto3" json:"rejection_reason,omitempty"`
	// Gateway-side merge/application preflight failure. Kept separate from
	// prover output and operator rejection so clients can explain why a
	// prover-clean proposal is not currently applicable.
	ApplicationError string `protobuf:"bytes,19,opt,name=application_error,json=applicationError,proto3" json:"application_error,omitempty"`
	// Opaque digest binding review to the exact live inputs and complete
	// effective candidate evaluated by the gateway.
	ReviewToken string `protobuf:"bytes,20,opt,name=review_token,json=reviewToken,proto3" json:"review_token,omitempty"`
	// Deterministic hashes for compact candidate display and diagnostics.
	CurrentEffectivePolicyHash   string `` /* 144-byte string literal not displayed */
	CandidateEffectivePolicyHash string `` /* 150-byte string literal not displayed */
	// Complete effective policies used for review. These contain policy
	// configuration only; credential secret values are never materialized.
	CurrentEffectivePolicy   *sandboxv1.SandboxPolicy `` /* 130-byte string literal not displayed */
	CandidateEffectivePolicy *sandboxv1.SandboxPolicy `` /* 136-byte string literal not displayed */
	// contains filtered or unexported fields
}

A proposed policy rule with rationale and approval status.

func (*PolicyChunk) Descriptor deprecated 

func (*PolicyChunk) Descriptor() ([]byte, []int)

Deprecated: Use PolicyChunk.ProtoReflect.Descriptor instead.

func (*PolicyChunk) GetApplicationError 

func (x *PolicyChunk) GetApplicationError() string

func (*PolicyChunk) GetBinary 

func (x *PolicyChunk) GetBinary() string

func (*PolicyChunk) GetCandidateEffectivePolicy 

func (x *PolicyChunk) GetCandidateEffectivePolicy() *sandboxv1.SandboxPolicy

func (*PolicyChunk) GetCandidateEffectivePolicyHash 

func (x *PolicyChunk) GetCandidateEffectivePolicyHash() string

func (*PolicyChunk) GetConfidence 

func (x *PolicyChunk) GetConfidence() float32

func (*PolicyChunk) GetCreatedTime 

func (x *PolicyChunk) GetCreatedTime() *timestamppb.Timestamp

func (*PolicyChunk) GetCurrentEffectivePolicy 

func (x *PolicyChunk) GetCurrentEffectivePolicy() *sandboxv1.SandboxPolicy

func (*PolicyChunk) GetCurrentEffectivePolicyHash 

func (x *PolicyChunk) GetCurrentEffectivePolicyHash() string

func (*PolicyChunk) GetDecidedTime 

func (x *PolicyChunk) GetDecidedTime() *timestamppb.Timestamp

func (*PolicyChunk) GetDenialSummaryIds 

func (x *PolicyChunk) GetDenialSummaryIds() []string

func (*PolicyChunk) GetFirstSeenTime 

func (x *PolicyChunk) GetFirstSeenTime() *timestamppb.Timestamp

func (*PolicyChunk) GetHitCount 

func (x *PolicyChunk) GetHitCount() int32

func (*PolicyChunk) GetId 

func (x *PolicyChunk) GetId() string

func (*PolicyChunk) GetLastSeenTime 

func (x *PolicyChunk) GetLastSeenTime() *timestamppb.Timestamp

func (*PolicyChunk) GetProposedRule 

func (x *PolicyChunk) GetProposedRule() *sandboxv1.NetworkPolicyRule

func (*PolicyChunk) GetRationale 

func (x *PolicyChunk) GetRationale() string

func (*PolicyChunk) GetRejectionReason 

func (x *PolicyChunk) GetRejectionReason() string

func (*PolicyChunk) GetReviewToken 

func (x *PolicyChunk) GetReviewToken() string

func (*PolicyChunk) GetRuleName 

func (x *PolicyChunk) GetRuleName() string

func (*PolicyChunk) GetSecurityNotes 

func (x *PolicyChunk) GetSecurityNotes() string

func (*PolicyChunk) GetStage 

func (x *PolicyChunk) GetStage() string

func (*PolicyChunk) GetStatus 

func (x *PolicyChunk) GetStatus() string

func (*PolicyChunk) GetSupersedesChunkId 

func (x *PolicyChunk) GetSupersedesChunkId() string

func (*PolicyChunk) GetValidationResult 

func (x *PolicyChunk) GetValidationResult() string

func (*PolicyChunk) ProtoMessage 

func (*PolicyChunk) ProtoMessage()

func (*PolicyChunk) ProtoReflect 

func (x *PolicyChunk) ProtoReflect() protoreflect.Message

func (*PolicyChunk) Reset 

func (x *PolicyChunk) Reset()

func (*PolicyChunk) String 

func (x *PolicyChunk) String() string

type PolicyLoadResult 

type PolicyLoadResult struct {
	Version uint32 `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	Loaded  bool   `protobuf:"varint,2,opt,name=loaded,proto3" json:"loaded,omitempty"`
	// Sanitized load error. Empty when loaded.
	Error string `protobuf:"bytes,3,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

Load result of one sandbox policy revision.

func (*PolicyLoadResult) Descriptor deprecated 

func (*PolicyLoadResult) Descriptor() ([]byte, []int)

Deprecated: Use PolicyLoadResult.ProtoReflect.Descriptor instead.

func (*PolicyLoadResult) GetError 

func (x *PolicyLoadResult) GetError() string

func (*PolicyLoadResult) GetLoaded 

func (x *PolicyLoadResult) GetLoaded() bool

func (*PolicyLoadResult) GetVersion 

func (x *PolicyLoadResult) GetVersion() uint32

func (*PolicyLoadResult) ProtoMessage 

func (*PolicyLoadResult) ProtoMessage()

func (*PolicyLoadResult) ProtoReflect 

func (x *PolicyLoadResult) ProtoReflect() protoreflect.Message

func (*PolicyLoadResult) Reset 

func (x *PolicyLoadResult) Reset()

func (*PolicyLoadResult) String 

func (x *PolicyLoadResult) String() string

type PolicyMergeOperation 

type PolicyMergeOperation struct {

	// Types that are valid to be assigned to Operation:
	//
	//	*PolicyMergeOperation_AddRule
	//	*PolicyMergeOperation_RemoveEndpoint
	//	*PolicyMergeOperation_RemoveRule
	//	*PolicyMergeOperation_AddDenyRules
	//	*PolicyMergeOperation_AddAllowRules
	//	*PolicyMergeOperation_RemoveBinary
	Operation isPolicyMergeOperation_Operation `protobuf_oneof:"operation"`
	// contains filtered or unexported fields
}

func (*PolicyMergeOperation) Descriptor deprecated 

func (*PolicyMergeOperation) Descriptor() ([]byte, []int)

Deprecated: Use PolicyMergeOperation.ProtoReflect.Descriptor instead.

func (*PolicyMergeOperation) GetAddAllowRules 

func (x *PolicyMergeOperation) GetAddAllowRules() *AddAllowRules

func (*PolicyMergeOperation) GetAddDenyRules 

func (x *PolicyMergeOperation) GetAddDenyRules() *AddDenyRules

func (*PolicyMergeOperation) GetAddRule 

func (x *PolicyMergeOperation) GetAddRule() *AddNetworkRule

func (*PolicyMergeOperation) GetOperation 

func (x *PolicyMergeOperation) GetOperation() isPolicyMergeOperation_Operation

func (*PolicyMergeOperation) GetRemoveBinary 

func (x *PolicyMergeOperation) GetRemoveBinary() *RemoveNetworkBinary

func (*PolicyMergeOperation) GetRemoveEndpoint 

func (x *PolicyMergeOperation) GetRemoveEndpoint() *RemoveNetworkEndpoint

func (*PolicyMergeOperation) GetRemoveRule 

func (x *PolicyMergeOperation) GetRemoveRule() *RemoveNetworkRule

func (*PolicyMergeOperation) ProtoMessage 

func (*PolicyMergeOperation) ProtoMessage()

func (*PolicyMergeOperation) ProtoReflect 

func (x *PolicyMergeOperation) ProtoReflect() protoreflect.Message

func (*PolicyMergeOperation) Reset 

func (x *PolicyMergeOperation) Reset()

func (*PolicyMergeOperation) String 

func (x *PolicyMergeOperation) String() string

type PolicyMergeOperation_AddAllowRules 

type PolicyMergeOperation_AddAllowRules struct {
	AddAllowRules *AddAllowRules `protobuf:"bytes,5,opt,name=add_allow_rules,json=addAllowRules,proto3,oneof"`
}

type PolicyMergeOperation_AddDenyRules 

type PolicyMergeOperation_AddDenyRules struct {
	AddDenyRules *AddDenyRules `protobuf:"bytes,4,opt,name=add_deny_rules,json=addDenyRules,proto3,oneof"`
}

type PolicyMergeOperation_AddRule 

type PolicyMergeOperation_AddRule struct {
	AddRule *AddNetworkRule `protobuf:"bytes,1,opt,name=add_rule,json=addRule,proto3,oneof"`
}

type PolicyMergeOperation_RemoveBinary 

type PolicyMergeOperation_RemoveBinary struct {
	RemoveBinary *RemoveNetworkBinary `protobuf:"bytes,6,opt,name=remove_binary,json=removeBinary,proto3,oneof"`
}

type PolicyMergeOperation_RemoveEndpoint 

type PolicyMergeOperation_RemoveEndpoint struct {
	RemoveEndpoint *RemoveNetworkEndpoint `protobuf:"bytes,2,opt,name=remove_endpoint,json=removeEndpoint,proto3,oneof"`
}

type PolicyMergeOperation_RemoveRule 

type PolicyMergeOperation_RemoveRule struct {
	RemoveRule *RemoveNetworkRule `protobuf:"bytes,3,opt,name=remove_rule,json=removeRule,proto3,oneof"`
}

type PolicyStatus 

type PolicyStatus int32

Policy load status. 

const (
	PolicyStatus_POLICY_STATUS_UNSPECIFIED PolicyStatus = 0
	// Server received the update; sandbox has not yet loaded it.
	PolicyStatus_POLICY_STATUS_PENDING PolicyStatus = 1
	// Sandbox successfully applied this policy version.
	PolicyStatus_POLICY_STATUS_LOADED PolicyStatus = 2
	// Sandbox attempted to apply but failed; LKG policy remains active.
	// ListSandboxPolicies also uses FAILED for historical payloads that are
	// invalid under the current schema; load_error contains the diagnostic.
	PolicyStatus_POLICY_STATUS_FAILED PolicyStatus = 3
	// A newer version was persisted before the sandbox loaded this one.
	PolicyStatus_POLICY_STATUS_SUPERSEDED PolicyStatus = 4
)

func (PolicyStatus) Descriptor 

func (PolicyStatus) Descriptor() protoreflect.EnumDescriptor

func (PolicyStatus) Enum 

func (x PolicyStatus) Enum() *PolicyStatus

func (PolicyStatus) EnumDescriptor deprecated 

func (PolicyStatus) EnumDescriptor() ([]byte, []int)

Deprecated: Use PolicyStatus.Descriptor instead.

func (PolicyStatus) Number 

func (x PolicyStatus) Number() protoreflect.EnumNumber

func (PolicyStatus) String 

func (x PolicyStatus) String() string

func (PolicyStatus) Type 

func (PolicyStatus) Type() protoreflect.EnumType

type ProviderCredentialRefresh 

type ProviderCredentialRefresh struct {
	Strategy          ProviderCredentialRefreshStrategy    `protobuf:"varint,1,opt,name=strategy,proto3,enum=openshell.v1.ProviderCredentialRefreshStrategy" json:"strategy,omitempty"`
	TokenUrl          string                               `protobuf:"bytes,2,opt,name=token_url,json=tokenUrl,proto3" json:"token_url,omitempty"`
	Scopes            []string                             `protobuf:"bytes,3,rep,name=scopes,proto3" json:"scopes,omitempty"`
	RefreshBefore     *durationpb.Duration                 `protobuf:"bytes,104,opt,name=refresh_before,json=refreshBefore,proto3" json:"refresh_before,omitempty"`
	MaxLifetime       *durationpb.Duration                 `protobuf:"bytes,105,opt,name=max_lifetime,json=maxLifetime,proto3" json:"max_lifetime,omitempty"`
	Material          []*ProviderCredentialRefreshMaterial `protobuf:"bytes,6,rep,name=material,proto3" json:"material,omitempty"`
	AdditionalOutputs []*ProviderCredentialRefreshOutput   `protobuf:"bytes,7,rep,name=additional_outputs,json=additionalOutputs,proto3" json:"additional_outputs,omitempty"`
	// contains filtered or unexported fields
}

func (*ProviderCredentialRefresh) Descriptor deprecated 

func (*ProviderCredentialRefresh) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialRefresh.ProtoReflect.Descriptor instead.

func (*ProviderCredentialRefresh) GetAdditionalOutputs 

func (x *ProviderCredentialRefresh) GetAdditionalOutputs() []*ProviderCredentialRefreshOutput

func (*ProviderCredentialRefresh) GetMaterial 

func (x *ProviderCredentialRefresh) GetMaterial() []*ProviderCredentialRefreshMaterial

func (*ProviderCredentialRefresh) GetMaxLifetime 

func (x *ProviderCredentialRefresh) GetMaxLifetime() *durationpb.Duration

func (*ProviderCredentialRefresh) GetRefreshBefore 

func (x *ProviderCredentialRefresh) GetRefreshBefore() *durationpb.Duration

func (*ProviderCredentialRefresh) GetScopes 

func (x *ProviderCredentialRefresh) GetScopes() []string

func (*ProviderCredentialRefresh) GetStrategy 

func (x *ProviderCredentialRefresh) GetStrategy() ProviderCredentialRefreshStrategy

func (*ProviderCredentialRefresh) GetTokenUrl 

func (x *ProviderCredentialRefresh) GetTokenUrl() string

func (*ProviderCredentialRefresh) ProtoMessage 

func (*ProviderCredentialRefresh) ProtoMessage()

func (*ProviderCredentialRefresh) ProtoReflect 

func (x *ProviderCredentialRefresh) ProtoReflect() protoreflect.Message

func (*ProviderCredentialRefresh) Reset 

func (x *ProviderCredentialRefresh) Reset()

func (*ProviderCredentialRefresh) String 

func (x *ProviderCredentialRefresh) String() string

type ProviderCredentialRefreshMaterial 

type ProviderCredentialRefreshMaterial struct {
	Name        string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	Required    bool   `protobuf:"varint,3,opt,name=required,proto3" json:"required,omitempty"`
	Secret      bool   `protobuf:"varint,4,opt,name=secret,proto3" json:"secret,omitempty"`
	// contains filtered or unexported fields
}

func (*ProviderCredentialRefreshMaterial) Descriptor deprecated 

func (*ProviderCredentialRefreshMaterial) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialRefreshMaterial.ProtoReflect.Descriptor instead.

func (*ProviderCredentialRefreshMaterial) GetDescription 

func (x *ProviderCredentialRefreshMaterial) GetDescription() string

func (*ProviderCredentialRefreshMaterial) GetName 

func (x *ProviderCredentialRefreshMaterial) GetName() string

func (*ProviderCredentialRefreshMaterial) GetRequired 

func (x *ProviderCredentialRefreshMaterial) GetRequired() bool

func (*ProviderCredentialRefreshMaterial) GetSecret 

func (x *ProviderCredentialRefreshMaterial) GetSecret() bool

func (*ProviderCredentialRefreshMaterial) ProtoMessage 

func (*ProviderCredentialRefreshMaterial) ProtoMessage()

func (*ProviderCredentialRefreshMaterial) ProtoReflect 

func (x *ProviderCredentialRefreshMaterial) ProtoReflect() protoreflect.Message

func (*ProviderCredentialRefreshMaterial) Reset 

func (x *ProviderCredentialRefreshMaterial) Reset()

func (*ProviderCredentialRefreshMaterial) String 

func (x *ProviderCredentialRefreshMaterial) String() string

type ProviderCredentialRefreshOutput 

type ProviderCredentialRefreshOutput struct {
	Output     string `protobuf:"bytes,1,opt,name=output,proto3" json:"output,omitempty"`         // strategy-defined semantic output id (e.g. "session_token")
	Credential string `protobuf:"bytes,2,opt,name=credential,proto3" json:"credential,omitempty"` // sibling credential name whose env_vars receive this output
	// contains filtered or unexported fields
}

Declares that a single refresh operation mints more than one credential. The refresh is attached to a primary credential; each additional output maps a strategy-defined semantic output id to a sibling credential whose env_vars receive the minted value.

func (*ProviderCredentialRefreshOutput) Descriptor deprecated 

func (*ProviderCredentialRefreshOutput) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialRefreshOutput.ProtoReflect.Descriptor instead.

func (*ProviderCredentialRefreshOutput) GetCredential 

func (x *ProviderCredentialRefreshOutput) GetCredential() string

func (*ProviderCredentialRefreshOutput) GetOutput 

func (x *ProviderCredentialRefreshOutput) GetOutput() string

func (*ProviderCredentialRefreshOutput) ProtoMessage 

func (*ProviderCredentialRefreshOutput) ProtoMessage()

func (*ProviderCredentialRefreshOutput) ProtoReflect 

func (x *ProviderCredentialRefreshOutput) ProtoReflect() protoreflect.Message

func (*ProviderCredentialRefreshOutput) Reset 

func (x *ProviderCredentialRefreshOutput) Reset()

func (*ProviderCredentialRefreshOutput) String 

func (x *ProviderCredentialRefreshOutput) String() string

type ProviderCredentialRefreshRecoveryAction 

type ProviderCredentialRefreshRecoveryAction int32

Stable recovery action for the most recent provider credential refresh failure. Kept after the pre-existing enums so adding it does not renumber their generated descriptors. Clients should use this field instead of parsing last_error. 

const (
	ProviderCredentialRefreshRecoveryAction_PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_UNSPECIFIED       ProviderCredentialRefreshRecoveryAction = 0
	ProviderCredentialRefreshRecoveryAction_PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_RETRY             ProviderCredentialRefreshRecoveryAction = 1
	ProviderCredentialRefreshRecoveryAction_PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_REAUTHORIZE       ProviderCredentialRefreshRecoveryAction = 2
	ProviderCredentialRefreshRecoveryAction_PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_FIX_CONFIGURATION ProviderCredentialRefreshRecoveryAction = 3
	ProviderCredentialRefreshRecoveryAction_PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_INVESTIGATE       ProviderCredentialRefreshRecoveryAction = 4
)

func (ProviderCredentialRefreshRecoveryAction) Descriptor 

func (ProviderCredentialRefreshRecoveryAction) Descriptor() protoreflect.EnumDescriptor

func (ProviderCredentialRefreshRecoveryAction) Enum 

func (x ProviderCredentialRefreshRecoveryAction) Enum() *ProviderCredentialRefreshRecoveryAction

func (ProviderCredentialRefreshRecoveryAction) EnumDescriptor deprecated 

func (ProviderCredentialRefreshRecoveryAction) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialRefreshRecoveryAction.Descriptor instead.

func (ProviderCredentialRefreshRecoveryAction) Number 

func (x ProviderCredentialRefreshRecoveryAction) Number() protoreflect.EnumNumber

func (ProviderCredentialRefreshRecoveryAction) String 

func (x ProviderCredentialRefreshRecoveryAction) String() string

func (ProviderCredentialRefreshRecoveryAction) Type 

func (ProviderCredentialRefreshRecoveryAction) Type() protoreflect.EnumType

type ProviderCredentialRefreshStatus 

type ProviderCredentialRefreshStatus struct {
	Provider       string                            `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	ProviderId     string                            `protobuf:"bytes,2,opt,name=provider_id,json=providerId,proto3" json:"provider_id,omitempty"`
	CredentialKey  string                            `protobuf:"bytes,3,opt,name=credential_key,json=credentialKey,proto3" json:"credential_key,omitempty"`
	Strategy       ProviderCredentialRefreshStrategy `protobuf:"varint,4,opt,name=strategy,proto3,enum=openshell.v1.ProviderCredentialRefreshStrategy" json:"strategy,omitempty"`
	Status         string                            `protobuf:"bytes,5,opt,name=status,proto3" json:"status,omitempty"`
	ExpirationTime *timestamppb.Timestamp            `protobuf:"bytes,106,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// Next automatic refresh time. Absence means no automatic retry is scheduled;
	// use recovery_action to determine the required recovery workflow.
	NextRefreshTime *timestamppb.Timestamp                  `protobuf:"bytes,107,opt,name=next_refresh_time,json=nextRefreshTime,proto3" json:"next_refresh_time,omitempty"`
	LastRefreshTime *timestamppb.Timestamp                  `protobuf:"bytes,108,opt,name=last_refresh_time,json=lastRefreshTime,proto3" json:"last_refresh_time,omitempty"`
	LastError       string                                  `protobuf:"bytes,9,opt,name=last_error,json=lastError,proto3" json:"last_error,omitempty"`
	RecoveryAction  ProviderCredentialRefreshRecoveryAction `` /* 163-byte string literal not displayed */
	// Stable gateway-owned failure identifier, for example
	// "oauth_invalid_grant". This is not provider-controlled prose and
	// incorporates any recognized top-level OAuth error classification.
	FailureCode string `protobuf:"bytes,11,opt,name=failure_code,json=failureCode,proto3" json:"failure_code,omitempty"`
	// A bounded, recognized provider subtype that refines failure_code; clients
	// do not need a separate provider_error field. Unknown provider-controlled
	// values are not persisted or returned.
	ProviderErrorSubtype string                 `protobuf:"bytes,12,opt,name=provider_error_subtype,json=providerErrorSubtype,proto3" json:"provider_error_subtype,omitempty"`
	LastErrorTime        *timestamppb.Timestamp `protobuf:"bytes,113,opt,name=last_error_time,json=lastErrorTime,proto3" json:"last_error_time,omitempty"`
	// contains filtered or unexported fields
}

func (*ProviderCredentialRefreshStatus) Descriptor deprecated 

func (*ProviderCredentialRefreshStatus) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialRefreshStatus.ProtoReflect.Descriptor instead.

func (*ProviderCredentialRefreshStatus) GetCredentialKey 

func (x *ProviderCredentialRefreshStatus) GetCredentialKey() string

func (*ProviderCredentialRefreshStatus) GetExpirationTime 

func (x *ProviderCredentialRefreshStatus) GetExpirationTime() *timestamppb.Timestamp

func (*ProviderCredentialRefreshStatus) GetFailureCode 

func (x *ProviderCredentialRefreshStatus) GetFailureCode() string

func (*ProviderCredentialRefreshStatus) GetLastError 

func (x *ProviderCredentialRefreshStatus) GetLastError() string

func (*ProviderCredentialRefreshStatus) GetLastErrorTime 

func (x *ProviderCredentialRefreshStatus) GetLastErrorTime() *timestamppb.Timestamp

func (*ProviderCredentialRefreshStatus) GetLastRefreshTime 

func (x *ProviderCredentialRefreshStatus) GetLastRefreshTime() *timestamppb.Timestamp

func (*ProviderCredentialRefreshStatus) GetNextRefreshTime 

func (x *ProviderCredentialRefreshStatus) GetNextRefreshTime() *timestamppb.Timestamp

func (*ProviderCredentialRefreshStatus) GetProvider 

func (x *ProviderCredentialRefreshStatus) GetProvider() string

func (*ProviderCredentialRefreshStatus) GetProviderErrorSubtype 

func (x *ProviderCredentialRefreshStatus) GetProviderErrorSubtype() string

func (*ProviderCredentialRefreshStatus) GetProviderId 

func (x *ProviderCredentialRefreshStatus) GetProviderId() string

func (*ProviderCredentialRefreshStatus) GetRecoveryAction 

func (x *ProviderCredentialRefreshStatus) GetRecoveryAction() ProviderCredentialRefreshRecoveryAction

func (*ProviderCredentialRefreshStatus) GetStatus 

func (x *ProviderCredentialRefreshStatus) GetStatus() string

func (*ProviderCredentialRefreshStatus) GetStrategy 

func (x *ProviderCredentialRefreshStatus) GetStrategy() ProviderCredentialRefreshStrategy

func (*ProviderCredentialRefreshStatus) ProtoMessage 

func (*ProviderCredentialRefreshStatus) ProtoMessage()

func (*ProviderCredentialRefreshStatus) ProtoReflect 

func (x *ProviderCredentialRefreshStatus) ProtoReflect() protoreflect.Message

func (*ProviderCredentialRefreshStatus) Reset 

func (x *ProviderCredentialRefreshStatus) Reset()

func (*ProviderCredentialRefreshStatus) String 

func (x *ProviderCredentialRefreshStatus) String() string

type ProviderCredentialRefreshStrategy 

type ProviderCredentialRefreshStrategy int32
const (
	ProviderCredentialRefreshStrategy_PROVIDER_CREDENTIAL_REFRESH_STRATEGY_UNSPECIFIED                ProviderCredentialRefreshStrategy = 0
	ProviderCredentialRefreshStrategy_PROVIDER_CREDENTIAL_REFRESH_STRATEGY_STATIC                     ProviderCredentialRefreshStrategy = 1
	ProviderCredentialRefreshStrategy_PROVIDER_CREDENTIAL_REFRESH_STRATEGY_EXTERNAL                   ProviderCredentialRefreshStrategy = 2
	ProviderCredentialRefreshStrategy_PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_REFRESH_TOKEN       ProviderCredentialRefreshStrategy = 3
	ProviderCredentialRefreshStrategy_PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_CLIENT_CREDENTIALS  ProviderCredentialRefreshStrategy = 4
	ProviderCredentialRefreshStrategy_PROVIDER_CREDENTIAL_REFRESH_STRATEGY_GOOGLE_SERVICE_ACCOUNT_JWT ProviderCredentialRefreshStrategy = 5
	ProviderCredentialRefreshStrategy_PROVIDER_CREDENTIAL_REFRESH_STRATEGY_AWS_STS_ASSUME_ROLE        ProviderCredentialRefreshStrategy = 6
)

func (ProviderCredentialRefreshStrategy) Descriptor 

func (ProviderCredentialRefreshStrategy) Descriptor() protoreflect.EnumDescriptor

func (ProviderCredentialRefreshStrategy) Enum 

func (x ProviderCredentialRefreshStrategy) Enum() *ProviderCredentialRefreshStrategy

func (ProviderCredentialRefreshStrategy) EnumDescriptor deprecated 

func (ProviderCredentialRefreshStrategy) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialRefreshStrategy.Descriptor instead.

func (ProviderCredentialRefreshStrategy) Number 

func (x ProviderCredentialRefreshStrategy) Number() protoreflect.EnumNumber

func (ProviderCredentialRefreshStrategy) String 

func (x ProviderCredentialRefreshStrategy) String() string

func (ProviderCredentialRefreshStrategy) Type 

func (ProviderCredentialRefreshStrategy) Type() protoreflect.EnumType

type ProviderCredentialTokenGrant 

type ProviderCredentialTokenGrant struct {

	// OAuth2 token endpoint URL (e.g., https://keycloak.example.com/realms/my-realm/protocol/openid-connect/token)
	TokenEndpoint string `protobuf:"bytes,1,opt,name=token_endpoint,json=tokenEndpoint,proto3" json:"token_endpoint,omitempty"`
	// Optional: default resource audience to request from the token service
	Audience string `protobuf:"bytes,2,opt,name=audience,proto3" json:"audience,omitempty"`
	// Optional: audience to request when fetching the JWT-SVID from SPIRE.
	// If omitted, the sandbox derives this from token_endpoint.
	JwtSvidAudience string `protobuf:"bytes,6,opt,name=jwt_svid_audience,json=jwtSvidAudience,proto3" json:"jwt_svid_audience,omitempty"`
	// Optional: OAuth2 scopes to request
	Scopes []string `protobuf:"bytes,3,rep,name=scopes,proto3" json:"scopes,omitempty"`
	// Optional token cache TTL override. If absent, use expires_in from the token response.
	CacheTtl *durationpb.Duration `protobuf:"bytes,104,opt,name=cache_ttl,json=cacheTtl,proto3" json:"cache_ttl,omitempty"`
	// Optional: endpoint-specific resource audience overrides.
	AudienceOverrides []*ProviderCredentialTokenGrantAudienceOverride `protobuf:"bytes,5,rep,name=audience_overrides,json=audienceOverrides,proto3" json:"audience_overrides,omitempty"`
	// Optional: OAuth2 client_assertion_type value. If omitted, OpenShell uses
	// urn:ietf:params:oauth:client-assertion-type:jwt-bearer.
	ClientAssertionType string `protobuf:"bytes,7,opt,name=client_assertion_type,json=clientAssertionType,proto3" json:"client_assertion_type,omitempty"`
	// Grant type. If omitted/unspecified, OpenShell treats this as client_credentials
	// for backwards compatibility.
	GrantType ProviderCredentialTokenGrantType `` /* 140-byte string literal not displayed */
	// Subject token metadata for token_exchange grants.
	SubjectToken *ProviderCredentialTokenGrantSubjectToken `protobuf:"bytes,9,opt,name=subject_token,json=subjectToken,proto3" json:"subject_token,omitempty"`
	// OAuth2 requested_token_type. If omitted for token_exchange, OpenShell uses
	// urn:ietf:params:oauth:token-type:access_token.
	RequestedTokenType string `protobuf:"bytes,10,opt,name=requested_token_type,json=requestedTokenType,proto3" json:"requested_token_type,omitempty"`
	// contains filtered or unexported fields
}

func (*ProviderCredentialTokenGrant) Descriptor deprecated 

func (*ProviderCredentialTokenGrant) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialTokenGrant.ProtoReflect.Descriptor instead.

func (*ProviderCredentialTokenGrant) GetAudience 

func (x *ProviderCredentialTokenGrant) GetAudience() string

func (*ProviderCredentialTokenGrant) GetAudienceOverrides 

func (x *ProviderCredentialTokenGrant) GetAudienceOverrides() []*ProviderCredentialTokenGrantAudienceOverride

func (*ProviderCredentialTokenGrant) GetCacheTtl 

func (x *ProviderCredentialTokenGrant) GetCacheTtl() *durationpb.Duration

func (*ProviderCredentialTokenGrant) GetClientAssertionType 

func (x *ProviderCredentialTokenGrant) GetClientAssertionType() string

func (*ProviderCredentialTokenGrant) GetGrantType 

func (x *ProviderCredentialTokenGrant) GetGrantType() ProviderCredentialTokenGrantType

func (*ProviderCredentialTokenGrant) GetJwtSvidAudience 

func (x *ProviderCredentialTokenGrant) GetJwtSvidAudience() string

func (*ProviderCredentialTokenGrant) GetRequestedTokenType 

func (x *ProviderCredentialTokenGrant) GetRequestedTokenType() string

func (*ProviderCredentialTokenGrant) GetScopes 

func (x *ProviderCredentialTokenGrant) GetScopes() []string

func (*ProviderCredentialTokenGrant) GetSubjectToken 

func (x *ProviderCredentialTokenGrant) GetSubjectToken() *ProviderCredentialTokenGrantSubjectToken

func (*ProviderCredentialTokenGrant) GetTokenEndpoint 

func (x *ProviderCredentialTokenGrant) GetTokenEndpoint() string

func (*ProviderCredentialTokenGrant) ProtoMessage 

func (*ProviderCredentialTokenGrant) ProtoMessage()

func (*ProviderCredentialTokenGrant) ProtoReflect 

func (x *ProviderCredentialTokenGrant) ProtoReflect() protoreflect.Message

func (*ProviderCredentialTokenGrant) Reset 

func (x *ProviderCredentialTokenGrant) Reset()

func (*ProviderCredentialTokenGrant) String 

func (x *ProviderCredentialTokenGrant) String() string

type ProviderCredentialTokenGrantAudienceOverride 

type ProviderCredentialTokenGrantAudienceOverride struct {

	// Optional: endpoint host selector. If omitted, inherits the profile endpoint host.
	Host string `protobuf:"bytes,1,opt,name=host,proto3" json:"host,omitempty"`
	// Optional: endpoint port selector. If omitted, matches the expanded profile endpoint port.
	Port uint32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// Optional: endpoint path selector. If omitted, inherits the profile endpoint path.
	Path string `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`
	// Resource audience to request for matching endpoints.
	Audience string `protobuf:"bytes,4,opt,name=audience,proto3" json:"audience,omitempty"`
	// Optional: OAuth2 scopes to request. If omitted, inherits the token grant scopes.
	Scopes []string `protobuf:"bytes,5,rep,name=scopes,proto3" json:"scopes,omitempty"`
	// contains filtered or unexported fields
}

Endpoint selector for token grant audience overrides.

func (*ProviderCredentialTokenGrantAudienceOverride) Descriptor deprecated 

func (*ProviderCredentialTokenGrantAudienceOverride) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialTokenGrantAudienceOverride.ProtoReflect.Descriptor instead.

func (*ProviderCredentialTokenGrantAudienceOverride) GetAudience 

func (x *ProviderCredentialTokenGrantAudienceOverride) GetAudience() string

func (*ProviderCredentialTokenGrantAudienceOverride) GetHost 

func (x *ProviderCredentialTokenGrantAudienceOverride) GetHost() string

func (*ProviderCredentialTokenGrantAudienceOverride) GetPath 

func (x *ProviderCredentialTokenGrantAudienceOverride) GetPath() string

func (*ProviderCredentialTokenGrantAudienceOverride) GetPort 

func (x *ProviderCredentialTokenGrantAudienceOverride) GetPort() uint32

func (*ProviderCredentialTokenGrantAudienceOverride) GetScopes 

func (x *ProviderCredentialTokenGrantAudienceOverride) GetScopes() []string

func (*ProviderCredentialTokenGrantAudienceOverride) ProtoMessage 

func (*ProviderCredentialTokenGrantAudienceOverride) ProtoMessage()

func (*ProviderCredentialTokenGrantAudienceOverride) ProtoReflect 

func (x *ProviderCredentialTokenGrantAudienceOverride) ProtoReflect() protoreflect.Message

func (*ProviderCredentialTokenGrantAudienceOverride) Reset 

func (x *ProviderCredentialTokenGrantAudienceOverride) Reset()

func (*ProviderCredentialTokenGrantAudienceOverride) String 

func (x *ProviderCredentialTokenGrantAudienceOverride) String() string

type ProviderCredentialTokenGrantSubjectToken 

type ProviderCredentialTokenGrantSubjectToken struct {

	// Source for the token exchange subject token. Phase one supports
	// "provider_credential".
	Source string `protobuf:"bytes,1,opt,name=source,proto3" json:"source,omitempty"`
	// Provider credential key that stores the subject token.
	Credential string `protobuf:"bytes,2,opt,name=credential,proto3" json:"credential,omitempty"`
	// OAuth2 subject_token_type. If omitted, OpenShell uses
	// urn:ietf:params:oauth:token-type:access_token.
	SubjectTokenType string `protobuf:"bytes,3,opt,name=subject_token_type,json=subjectTokenType,proto3" json:"subject_token_type,omitempty"`
	// contains filtered or unexported fields
}

func (*ProviderCredentialTokenGrantSubjectToken) Descriptor deprecated 

func (*ProviderCredentialTokenGrantSubjectToken) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialTokenGrantSubjectToken.ProtoReflect.Descriptor instead.

func (*ProviderCredentialTokenGrantSubjectToken) GetCredential 

func (x *ProviderCredentialTokenGrantSubjectToken) GetCredential() string

func (*ProviderCredentialTokenGrantSubjectToken) GetSource 

func (x *ProviderCredentialTokenGrantSubjectToken) GetSource() string

func (*ProviderCredentialTokenGrantSubjectToken) GetSubjectTokenType 

func (x *ProviderCredentialTokenGrantSubjectToken) GetSubjectTokenType() string

func (*ProviderCredentialTokenGrantSubjectToken) ProtoMessage 

func (*ProviderCredentialTokenGrantSubjectToken) ProtoMessage()

func (*ProviderCredentialTokenGrantSubjectToken) ProtoReflect 

func (x *ProviderCredentialTokenGrantSubjectToken) ProtoReflect() protoreflect.Message

func (*ProviderCredentialTokenGrantSubjectToken) Reset 

func (x *ProviderCredentialTokenGrantSubjectToken) Reset()

func (*ProviderCredentialTokenGrantSubjectToken) String 

func (x *ProviderCredentialTokenGrantSubjectToken) String() string

type ProviderCredentialTokenGrantType 

type ProviderCredentialTokenGrantType int32

Provider credential token grant configuration. When present, the credential is obtained dynamically via OAuth2 grant when needed. 

const (
	ProviderCredentialTokenGrantType_PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_UNSPECIFIED        ProviderCredentialTokenGrantType = 0
	ProviderCredentialTokenGrantType_PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_CLIENT_CREDENTIALS ProviderCredentialTokenGrantType = 1
	ProviderCredentialTokenGrantType_PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_TOKEN_EXCHANGE     ProviderCredentialTokenGrantType = 2
)

func (ProviderCredentialTokenGrantType) Descriptor 

func (ProviderCredentialTokenGrantType) Descriptor() protoreflect.EnumDescriptor

func (ProviderCredentialTokenGrantType) Enum 

func (x ProviderCredentialTokenGrantType) Enum() *ProviderCredentialTokenGrantType

func (ProviderCredentialTokenGrantType) EnumDescriptor deprecated 

func (ProviderCredentialTokenGrantType) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialTokenGrantType.Descriptor instead.

func (ProviderCredentialTokenGrantType) Number 

func (x ProviderCredentialTokenGrantType) Number() protoreflect.EnumNumber

func (ProviderCredentialTokenGrantType) String 

func (x ProviderCredentialTokenGrantType) String() string

func (ProviderCredentialTokenGrantType) Type 

func (ProviderCredentialTokenGrantType) Type() protoreflect.EnumType

type ProviderCredentialValue 

type ProviderCredentialValue struct {
	Value string `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
	// Absent for credentials with no declared expiration.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// contains filtered or unexported fields
}

Usable runtime value, never gateway-only minting material.

func (*ProviderCredentialValue) Descriptor deprecated 

func (*ProviderCredentialValue) Descriptor() ([]byte, []int)

Deprecated: Use ProviderCredentialValue.ProtoReflect.Descriptor instead.

func (*ProviderCredentialValue) GetExpirationTime 

func (x *ProviderCredentialValue) GetExpirationTime() *timestamppb.Timestamp

func (*ProviderCredentialValue) GetValue 

func (x *ProviderCredentialValue) GetValue() string

func (*ProviderCredentialValue) ProtoMessage 

func (*ProviderCredentialValue) ProtoMessage()

func (*ProviderCredentialValue) ProtoReflect 

func (x *ProviderCredentialValue) ProtoReflect() protoreflect.Message

func (*ProviderCredentialValue) Reset 

func (x *ProviderCredentialValue) Reset()

func (*ProviderCredentialValue) String 

func (x *ProviderCredentialValue) String() string

type ProviderDesiredIdentity 

type ProviderDesiredIdentity struct {
	SandboxId       string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	Sandbox         string `protobuf:"bytes,2,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	AttachmentEpoch string `protobuf:"bytes,3,opt,name=attachment_epoch,json=attachmentEpoch,proto3" json:"attachment_epoch,omitempty"`
	// Empty for a detached provider.
	ProviderId              string `protobuf:"bytes,4,opt,name=provider_id,json=providerId,proto3" json:"provider_id,omitempty"`
	ProviderResourceVersion uint64 `` /* 133-byte string literal not displayed */
	ProviderEnvRevision     uint64 `protobuf:"varint,6,opt,name=provider_env_revision,json=providerEnvRevision,proto3" json:"provider_env_revision,omitempty"`
	ConfigRevision          uint64 `protobuf:"varint,7,opt,name=config_revision,json=configRevision,proto3" json:"config_revision,omitempty"`
	PolicyHash              string `protobuf:"bytes,8,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// contains filtered or unexported fields
}

Exact desired authority. Revisions are opaque identities, never ordered.

func (*ProviderDesiredIdentity) Descriptor deprecated 

func (*ProviderDesiredIdentity) Descriptor() ([]byte, []int)

Deprecated: Use ProviderDesiredIdentity.ProtoReflect.Descriptor instead.

func (*ProviderDesiredIdentity) GetAttachmentEpoch 

func (x *ProviderDesiredIdentity) GetAttachmentEpoch() string

func (*ProviderDesiredIdentity) GetConfigRevision 

func (x *ProviderDesiredIdentity) GetConfigRevision() uint64

func (*ProviderDesiredIdentity) GetPolicyHash 

func (x *ProviderDesiredIdentity) GetPolicyHash() string

func (*ProviderDesiredIdentity) GetProviderEnvRevision 

func (x *ProviderDesiredIdentity) GetProviderEnvRevision() uint64

func (*ProviderDesiredIdentity) GetProviderId 

func (x *ProviderDesiredIdentity) GetProviderId() string

func (*ProviderDesiredIdentity) GetProviderResourceVersion 

func (x *ProviderDesiredIdentity) GetProviderResourceVersion() uint64

func (*ProviderDesiredIdentity) GetSandbox 

func (x *ProviderDesiredIdentity) GetSandbox() string

func (*ProviderDesiredIdentity) GetSandboxId 

func (x *ProviderDesiredIdentity) GetSandboxId() string

func (*ProviderDesiredIdentity) ProtoMessage 

func (*ProviderDesiredIdentity) ProtoMessage()

func (*ProviderDesiredIdentity) ProtoReflect 

func (x *ProviderDesiredIdentity) ProtoReflect() protoreflect.Message

func (*ProviderDesiredIdentity) Reset 

func (x *ProviderDesiredIdentity) Reset()

func (*ProviderDesiredIdentity) String 

func (x *ProviderDesiredIdentity) String() string

type ProviderEnvironmentSnapshot 

type ProviderEnvironmentSnapshot struct {
	ProviderEnvRevision     uint64                                `protobuf:"varint,1,opt,name=provider_env_revision,json=providerEnvRevision,proto3" json:"provider_env_revision,omitempty"`
	Values                  []*ProviderEnvironmentValue           `protobuf:"bytes,2,rep,name=values,proto3" json:"values,omitempty"`
	DynamicCredentials      map[string]*ProviderProfileCredential `` /* 189-byte string literal not displayed */
	ProviderAttachmentEpoch string                                `` /* 132-byte string literal not displayed */
	PolicyHash              string                                `protobuf:"bytes,5,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	ReadinessReason         ProviderReadinessReason               `` /* 149-byte string literal not displayed */
	// Complete desired set of non-secret managed files, keyed by absolute path.
	Files map[string]string `` /* 137-byte string literal not displayed */
	// contains filtered or unexported fields
}

Complete provider environment state delivered to a supervisor. This is the canonical provider environment shape; GetSandboxProviderEnvironmentResponse is its polling projection and is removed with the polling RPCs. Dynamic credentials are endpoint selectors rather than environment values and stay in their own collection.

func (*ProviderEnvironmentSnapshot) Descriptor deprecated 

func (*ProviderEnvironmentSnapshot) Descriptor() ([]byte, []int)

Deprecated: Use ProviderEnvironmentSnapshot.ProtoReflect.Descriptor instead.

func (*ProviderEnvironmentSnapshot) GetDynamicCredentials 

func (x *ProviderEnvironmentSnapshot) GetDynamicCredentials() map[string]*ProviderProfileCredential

func (*ProviderEnvironmentSnapshot) GetFiles 

func (x *ProviderEnvironmentSnapshot) GetFiles() map[string]string

func (*ProviderEnvironmentSnapshot) GetPolicyHash 

func (x *ProviderEnvironmentSnapshot) GetPolicyHash() string

func (*ProviderEnvironmentSnapshot) GetProviderAttachmentEpoch 

func (x *ProviderEnvironmentSnapshot) GetProviderAttachmentEpoch() string

func (*ProviderEnvironmentSnapshot) GetProviderEnvRevision 

func (x *ProviderEnvironmentSnapshot) GetProviderEnvRevision() uint64

func (*ProviderEnvironmentSnapshot) GetReadinessReason 

func (x *ProviderEnvironmentSnapshot) GetReadinessReason() ProviderReadinessReason

func (*ProviderEnvironmentSnapshot) GetValues 

func (x *ProviderEnvironmentSnapshot) GetValues() []*ProviderEnvironmentValue

func (*ProviderEnvironmentSnapshot) ProtoMessage 

func (*ProviderEnvironmentSnapshot) ProtoMessage()

func (*ProviderEnvironmentSnapshot) ProtoReflect 

func (x *ProviderEnvironmentSnapshot) ProtoReflect() protoreflect.Message

func (*ProviderEnvironmentSnapshot) Reset 

func (x *ProviderEnvironmentSnapshot) Reset()

func (*ProviderEnvironmentSnapshot) String 

func (x *ProviderEnvironmentSnapshot) String() string

type ProviderEnvironmentValue 

type ProviderEnvironmentValue struct {
	Name                    string                                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Value                   string                                 `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	Classification          ProviderEnvironmentValueClassification `` /* 139-byte string literal not displayed */
	StaticCredentialBinding *StaticCredentialBinding               `` /* 132-byte string literal not displayed */
	// Absolute expiration time. Absence means no expiry.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// The static credential keeps one opaque resolver handle across value-only
	// provider revisions. Set only for STATIC_CREDENTIAL values whose binding
	// carries a workload_credential_handle.
	StablePlaceholder bool `protobuf:"varint,6,opt,name=stable_placeholder,json=stablePlaceholder,proto3" json:"stable_placeholder,omitempty"`
	// contains filtered or unexported fields
}

One environment value and all metadata that shares its key. Names are unique within a snapshot. static_credential_binding is present exactly when classification is STATIC_CREDENTIAL. Snapshots that violate either rule are invalid.

func (*ProviderEnvironmentValue) Descriptor deprecated 

func (*ProviderEnvironmentValue) Descriptor() ([]byte, []int)

Deprecated: Use ProviderEnvironmentValue.ProtoReflect.Descriptor instead.

func (*ProviderEnvironmentValue) GetClassification 

func (x *ProviderEnvironmentValue) GetClassification() ProviderEnvironmentValueClassification

func (*ProviderEnvironmentValue) GetExpirationTime 

func (x *ProviderEnvironmentValue) GetExpirationTime() *timestamppb.Timestamp

func (*ProviderEnvironmentValue) GetName 

func (x *ProviderEnvironmentValue) GetName() string

func (*ProviderEnvironmentValue) GetStablePlaceholder 

func (x *ProviderEnvironmentValue) GetStablePlaceholder() bool

func (*ProviderEnvironmentValue) GetStaticCredentialBinding 

func (x *ProviderEnvironmentValue) GetStaticCredentialBinding() *StaticCredentialBinding

func (*ProviderEnvironmentValue) GetValue 

func (x *ProviderEnvironmentValue) GetValue() string

func (*ProviderEnvironmentValue) ProtoMessage 

func (*ProviderEnvironmentValue) ProtoMessage()

func (*ProviderEnvironmentValue) ProtoReflect 

func (x *ProviderEnvironmentValue) ProtoReflect() protoreflect.Message

func (*ProviderEnvironmentValue) Reset 

func (x *ProviderEnvironmentValue) Reset()

func (*ProviderEnvironmentValue) String 

func (x *ProviderEnvironmentValue) String() string

type ProviderEnvironmentValueClassification 

type ProviderEnvironmentValueClassification int32

Receivers treat UNSPECIFIED and unknown values as secret. 

const (
	ProviderEnvironmentValueClassification_PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_UNSPECIFIED       ProviderEnvironmentValueClassification = 0
	ProviderEnvironmentValueClassification_PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_NON_SECRET        ProviderEnvironmentValueClassification = 1
	ProviderEnvironmentValueClassification_PROVIDER_ENVIRONMENT_VALUE_CLASSIFICATION_STATIC_CREDENTIAL ProviderEnvironmentValueClassification = 2
)

func (ProviderEnvironmentValueClassification) Descriptor 

func (ProviderEnvironmentValueClassification) Descriptor() protoreflect.EnumDescriptor

func (ProviderEnvironmentValueClassification) Enum 

func (x ProviderEnvironmentValueClassification) Enum() *ProviderEnvironmentValueClassification

func (ProviderEnvironmentValueClassification) EnumDescriptor deprecated 

func (ProviderEnvironmentValueClassification) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderEnvironmentValueClassification.Descriptor instead.

func (ProviderEnvironmentValueClassification) Number 

func (x ProviderEnvironmentValueClassification) Number() protoreflect.EnumNumber

func (ProviderEnvironmentValueClassification) String 

func (x ProviderEnvironmentValueClassification) String() string

func (ProviderEnvironmentValueClassification) Type 

func (ProviderEnvironmentValueClassification) Type() protoreflect.EnumType

type ProviderMutationKind 

type ProviderMutationKind int32

Operation whose installed authority is tracked by a receipt. 

const (
	ProviderMutationKind_PROVIDER_MUTATION_KIND_UNSPECIFIED ProviderMutationKind = 0
	ProviderMutationKind_PROVIDER_MUTATION_KIND_ATTACH      ProviderMutationKind = 1
	ProviderMutationKind_PROVIDER_MUTATION_KIND_DETACH      ProviderMutationKind = 2
	ProviderMutationKind_PROVIDER_MUTATION_KIND_UPDATE      ProviderMutationKind = 3
	// Reconstructed status for existing desired state without a mutation receipt.
	ProviderMutationKind_PROVIDER_MUTATION_KIND_OBSERVE ProviderMutationKind = 4
)

func (ProviderMutationKind) Descriptor 

func (ProviderMutationKind) Descriptor() protoreflect.EnumDescriptor

func (ProviderMutationKind) Enum 

func (x ProviderMutationKind) Enum() *ProviderMutationKind

func (ProviderMutationKind) EnumDescriptor deprecated 

func (ProviderMutationKind) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderMutationKind.Descriptor instead.

func (ProviderMutationKind) Number 

func (x ProviderMutationKind) Number() protoreflect.EnumNumber

func (ProviderMutationKind) String 

func (x ProviderMutationKind) String() string

func (ProviderMutationKind) Type 

func (ProviderMutationKind) Type() protoreflect.EnumType

type ProviderMutationReceipt 

type ProviderMutationReceipt struct {
	ReceiptId string `protobuf:"bytes,1,opt,name=receipt_id,json=receiptId,proto3" json:"receipt_id,omitempty"`
	// Shared by all sandbox receipts from one provider update.
	MutationId    string                   `protobuf:"bytes,2,opt,name=mutation_id,json=mutationId,proto3" json:"mutation_id,omitempty"`
	Provider      string                   `protobuf:"bytes,3,opt,name=provider,proto3" json:"provider,omitempty"`
	Workspace     string                   `protobuf:"bytes,4,opt,name=workspace,proto3" json:"workspace,omitempty"`
	Kind          ProviderMutationKind     `protobuf:"varint,5,opt,name=kind,proto3,enum=openshell.v1.ProviderMutationKind" json:"kind,omitempty"`
	Desired       *ProviderDesiredIdentity `protobuf:"bytes,6,opt,name=desired,proto3" json:"desired,omitempty"`
	PersistedTime *timestamppb.Timestamp   `protobuf:"bytes,107,opt,name=persisted_time,json=persistedTime,proto3" json:"persisted_time,omitempty"`
	// contains filtered or unexported fields
}

Immutable, secret-free record of one sandbox's intended provider mutation.

func (*ProviderMutationReceipt) Descriptor deprecated 

func (*ProviderMutationReceipt) Descriptor() ([]byte, []int)

Deprecated: Use ProviderMutationReceipt.ProtoReflect.Descriptor instead.

func (*ProviderMutationReceipt) GetDesired 

func (x *ProviderMutationReceipt) GetDesired() *ProviderDesiredIdentity

func (*ProviderMutationReceipt) GetKind 

func (x *ProviderMutationReceipt) GetKind() ProviderMutationKind

func (*ProviderMutationReceipt) GetMutationId 

func (x *ProviderMutationReceipt) GetMutationId() string

func (*ProviderMutationReceipt) GetPersistedTime 

func (x *ProviderMutationReceipt) GetPersistedTime() *timestamppb.Timestamp

func (*ProviderMutationReceipt) GetProvider 

func (x *ProviderMutationReceipt) GetProvider() string

func (*ProviderMutationReceipt) GetReceiptId 

func (x *ProviderMutationReceipt) GetReceiptId() string

func (*ProviderMutationReceipt) GetWorkspace 

func (x *ProviderMutationReceipt) GetWorkspace() string

func (*ProviderMutationReceipt) ProtoMessage 

func (*ProviderMutationReceipt) ProtoMessage()

func (*ProviderMutationReceipt) ProtoReflect 

func (x *ProviderMutationReceipt) ProtoReflect() protoreflect.Message

func (*ProviderMutationReceipt) Reset 

func (x *ProviderMutationReceipt) Reset()

func (*ProviderMutationReceipt) String 

func (x *ProviderMutationReceipt) String() string

type ProviderProfile 

type ProviderProfile struct {
	Id               string                       `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	DisplayName      string                       `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	Description      string                       `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	Category         ProviderProfileCategory      `protobuf:"varint,4,opt,name=category,proto3,enum=openshell.v1.ProviderProfileCategory" json:"category,omitempty"`
	Credentials      []*ProviderProfileCredential `protobuf:"bytes,5,rep,name=credentials,proto3" json:"credentials,omitempty"`
	Endpoints        []*sandboxv1.NetworkEndpoint `protobuf:"bytes,6,rep,name=endpoints,proto3" json:"endpoints,omitempty"`
	Binaries         []*sandboxv1.NetworkBinary   `protobuf:"bytes,7,rep,name=binaries,proto3" json:"binaries,omitempty"`
	InferenceCapable bool                         `protobuf:"varint,8,opt,name=inference_capable,json=inferenceCapable,proto3" json:"inference_capable,omitempty"`
	Discovery        *ProviderProfileDiscovery    `protobuf:"bytes,9,opt,name=discovery,proto3" json:"discovery,omitempty"`
	// Storage resource version for custom profiles. Built-in profiles and new
	// profile files use 0. Gateway responses set this for stored custom profiles.
	// Update calls use this for optimistic concurrency.
	ResourceVersion uint64 `protobuf:"varint,10,opt,name=resource_version,json=resourceVersion,proto3" json:"resource_version,omitempty"`
	// Optional non-secret annotations attached by profile sources or importers.
	Annotations map[string]string `` /* 150-byte string literal not displayed */
	// Server-set provenance: "builtin", "user", or "interceptor/{name}".
	// Ignored on import/update payloads.
	Source string `protobuf:"bytes,12,opt,name=source,proto3" json:"source,omitempty"`
	// Server-set visibility: "platform", "workspace", or empty for
	// non-scoped sources. Ignored on import/update payloads.
	Scope string `protobuf:"bytes,13,opt,name=scope,proto3" json:"scope,omitempty"`
	// EXPERIMENTAL: Non-secret files rendered from provider configuration for the
	// workload. This API and its behavior may change or be removed.
	Files []*ProviderProfileFile `protobuf:"bytes,14,rep,name=files,proto3" json:"files,omitempty"`
	// contains filtered or unexported fields
}

Provider type profile metadata exposed to clients.

func (*ProviderProfile) Descriptor deprecated 

func (*ProviderProfile) Descriptor() ([]byte, []int)

Deprecated: Use ProviderProfile.ProtoReflect.Descriptor instead.

func (*ProviderProfile) GetAnnotations 

func (x *ProviderProfile) GetAnnotations() map[string]string

func (*ProviderProfile) GetBinaries 

func (x *ProviderProfile) GetBinaries() []*sandboxv1.NetworkBinary

func (*ProviderProfile) GetCategory 

func (x *ProviderProfile) GetCategory() ProviderProfileCategory

func (*ProviderProfile) GetCredentials 

func (x *ProviderProfile) GetCredentials() []*ProviderProfileCredential

func (*ProviderProfile) GetDescription 

func (x *ProviderProfile) GetDescription() string

func (*ProviderProfile) GetDiscovery 

func (x *ProviderProfile) GetDiscovery() *ProviderProfileDiscovery

func (*ProviderProfile) GetDisplayName 

func (x *ProviderProfile) GetDisplayName() string

func (*ProviderProfile) GetEndpoints 

func (x *ProviderProfile) GetEndpoints() []*sandboxv1.NetworkEndpoint

func (*ProviderProfile) GetFiles 

func (x *ProviderProfile) GetFiles() []*ProviderProfileFile

func (*ProviderProfile) GetId 

func (x *ProviderProfile) GetId() string

func (*ProviderProfile) GetInferenceCapable 

func (x *ProviderProfile) GetInferenceCapable() bool

func (*ProviderProfile) GetResourceVersion 

func (x *ProviderProfile) GetResourceVersion() uint64

func (*ProviderProfile) GetScope 

func (x *ProviderProfile) GetScope() string

func (*ProviderProfile) GetSource 

func (x *ProviderProfile) GetSource() string

func (*ProviderProfile) ProtoMessage 

func (*ProviderProfile) ProtoMessage()

func (*ProviderProfile) ProtoReflect 

func (x *ProviderProfile) ProtoReflect() protoreflect.Message

func (*ProviderProfile) Reset 

func (x *ProviderProfile) Reset()

func (*ProviderProfile) String 

func (x *ProviderProfile) String() string

type ProviderProfileCategory 

type ProviderProfileCategory int32

Stable provider profile categories used by clients for grouping and filtering. 

const (
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_UNSPECIFIED    ProviderProfileCategory = 0
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_OTHER          ProviderProfileCategory = 1
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_INFERENCE      ProviderProfileCategory = 2
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_AGENT          ProviderProfileCategory = 3
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_SOURCE_CONTROL ProviderProfileCategory = 4
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_MESSAGING      ProviderProfileCategory = 5
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_DATA           ProviderProfileCategory = 6
	ProviderProfileCategory_PROVIDER_PROFILE_CATEGORY_KNOWLEDGE      ProviderProfileCategory = 7
)

func (ProviderProfileCategory) Descriptor 

func (ProviderProfileCategory) Descriptor() protoreflect.EnumDescriptor

func (ProviderProfileCategory) Enum 

func (x ProviderProfileCategory) Enum() *ProviderProfileCategory

func (ProviderProfileCategory) EnumDescriptor deprecated 

func (ProviderProfileCategory) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderProfileCategory.Descriptor instead.

func (ProviderProfileCategory) Number 

func (x ProviderProfileCategory) Number() protoreflect.EnumNumber

func (ProviderProfileCategory) String 

func (x ProviderProfileCategory) String() string

func (ProviderProfileCategory) Type 

func (ProviderProfileCategory) Type() protoreflect.EnumType

type ProviderProfileCredential 

type ProviderProfileCredential struct {
	Name         string                        `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Description  string                        `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	EnvVars      []string                      `protobuf:"bytes,3,rep,name=env_vars,json=envVars,proto3" json:"env_vars,omitempty"`
	Required     bool                          `protobuf:"varint,4,opt,name=required,proto3" json:"required,omitempty"`
	AuthStyle    string                        `protobuf:"bytes,5,opt,name=auth_style,json=authStyle,proto3" json:"auth_style,omitempty"`
	HeaderName   string                        `protobuf:"bytes,6,opt,name=header_name,json=headerName,proto3" json:"header_name,omitempty"`
	QueryParam   string                        `protobuf:"bytes,7,opt,name=query_param,json=queryParam,proto3" json:"query_param,omitempty"`
	Refresh      *ProviderCredentialRefresh    `protobuf:"bytes,8,opt,name=refresh,proto3" json:"refresh,omitempty"`
	PathTemplate string                        `protobuf:"bytes,9,opt,name=path_template,json=pathTemplate,proto3" json:"path_template,omitempty"`
	TokenGrant   *ProviderCredentialTokenGrant `protobuf:"bytes,10,opt,name=token_grant,json=tokenGrant,proto3" json:"token_grant,omitempty"`
	// Output-only gateway-derived endpoint authorities for resolved token grants.
	// For inspected L7 requests, empty means no endpoint may obtain this grant.
	// L4 injection uses selectors without checking these authorities.
	// Profile-authored values are ignored; normal policies name the originating
	// provider endpoint, while a global policy uses its own endpoint authorities.
	TokenGrantOwners []string `protobuf:"bytes,11,rep,name=token_grant_owners,json=tokenGrantOwners,proto3" json:"token_grant_owners,omitempty"`
	// Opt in to an opaque identity-bound environment placeholder for every env
	// var declared by this credential. Use this only when an external credential
	// updater requires one placeholder across value-only provider revisions.
	// Gateway-managed refresh and token-grant credentials cannot opt in because
	// they require identity-bearing handles for authorization-epoch revocation.
	StablePlaceholder bool `protobuf:"varint,12,opt,name=stable_placeholder,json=stablePlaceholder,proto3" json:"stable_placeholder,omitempty"`
	// contains filtered or unexported fields
}

Provider credential declaration.

func (*ProviderProfileCredential) Descriptor deprecated 

func (*ProviderProfileCredential) Descriptor() ([]byte, []int)

Deprecated: Use ProviderProfileCredential.ProtoReflect.Descriptor instead.

func (*ProviderProfileCredential) GetAuthStyle 

func (x *ProviderProfileCredential) GetAuthStyle() string

func (*ProviderProfileCredential) GetDescription 

func (x *ProviderProfileCredential) GetDescription() string

func (*ProviderProfileCredential) GetEnvVars 

func (x *ProviderProfileCredential) GetEnvVars() []string

func (*ProviderProfileCredential) GetHeaderName 

func (x *ProviderProfileCredential) GetHeaderName() string

func (*ProviderProfileCredential) GetName 

func (x *ProviderProfileCredential) GetName() string

func (*ProviderProfileCredential) GetPathTemplate 

func (x *ProviderProfileCredential) GetPathTemplate() string

func (*ProviderProfileCredential) GetQueryParam 

func (x *ProviderProfileCredential) GetQueryParam() string

func (*ProviderProfileCredential) GetRefresh 

func (x *ProviderProfileCredential) GetRefresh() *ProviderCredentialRefresh

func (*ProviderProfileCredential) GetRequired 

func (x *ProviderProfileCredential) GetRequired() bool

func (*ProviderProfileCredential) GetStablePlaceholder 

func (x *ProviderProfileCredential) GetStablePlaceholder() bool

func (*ProviderProfileCredential) GetTokenGrant 

func (x *ProviderProfileCredential) GetTokenGrant() *ProviderCredentialTokenGrant

func (*ProviderProfileCredential) GetTokenGrantOwners 

func (x *ProviderProfileCredential) GetTokenGrantOwners() []string

func (*ProviderProfileCredential) ProtoMessage 

func (*ProviderProfileCredential) ProtoMessage()

func (*ProviderProfileCredential) ProtoReflect 

func (x *ProviderProfileCredential) ProtoReflect() protoreflect.Message

func (*ProviderProfileCredential) Reset 

func (x *ProviderProfileCredential) Reset()

func (*ProviderProfileCredential) String 

func (x *ProviderProfileCredential) String() string

type ProviderProfileDiagnostic 

type ProviderProfileDiagnostic struct {
	Source    string `protobuf:"bytes,1,opt,name=source,proto3" json:"source,omitempty"`
	ProfileId string `protobuf:"bytes,2,opt,name=profile_id,json=profileId,proto3" json:"profile_id,omitempty"`
	Field     string `protobuf:"bytes,3,opt,name=field,proto3" json:"field,omitempty"`
	Message   string `protobuf:"bytes,4,opt,name=message,proto3" json:"message,omitempty"`
	Severity  string `protobuf:"bytes,5,opt,name=severity,proto3" json:"severity,omitempty"`
	// contains filtered or unexported fields
}

Provider profile validation diagnostic.

func (*ProviderProfileDiagnostic) Descriptor deprecated 

func (*ProviderProfileDiagnostic) Descriptor() ([]byte, []int)

Deprecated: Use ProviderProfileDiagnostic.ProtoReflect.Descriptor instead.

func (*ProviderProfileDiagnostic) GetField 

func (x *ProviderProfileDiagnostic) GetField() string

func (*ProviderProfileDiagnostic) GetMessage 

func (x *ProviderProfileDiagnostic) GetMessage() string

func (*ProviderProfileDiagnostic) GetProfileId 

func (x *ProviderProfileDiagnostic) GetProfileId() string

func (*ProviderProfileDiagnostic) GetSeverity 

func (x *ProviderProfileDiagnostic) GetSeverity() string

func (*ProviderProfileDiagnostic) GetSource 

func (x *ProviderProfileDiagnostic) GetSource() string

func (*ProviderProfileDiagnostic) ProtoMessage 

func (*ProviderProfileDiagnostic) ProtoMessage()

func (*ProviderProfileDiagnostic) ProtoReflect 

func (x *ProviderProfileDiagnostic) ProtoReflect() protoreflect.Message

func (*ProviderProfileDiagnostic) Reset 

func (x *ProviderProfileDiagnostic) Reset()

func (*ProviderProfileDiagnostic) String 

func (x *ProviderProfileDiagnostic) String() string

type ProviderProfileDiscovery 

type ProviderProfileDiscovery struct {

	// Credential names from ProviderProfile.credentials eligible for local discovery.
	Credentials []string `protobuf:"bytes,1,rep,name=credentials,proto3" json:"credentials,omitempty"`
	// contains filtered or unexported fields
}

Provider profile local discovery declaration.

func (*ProviderProfileDiscovery) Descriptor deprecated 

func (*ProviderProfileDiscovery) Descriptor() ([]byte, []int)

Deprecated: Use ProviderProfileDiscovery.ProtoReflect.Descriptor instead.

func (*ProviderProfileDiscovery) GetCredentials 

func (x *ProviderProfileDiscovery) GetCredentials() []string

func (*ProviderProfileDiscovery) ProtoMessage 

func (*ProviderProfileDiscovery) ProtoMessage()

func (*ProviderProfileDiscovery) ProtoReflect 

func (x *ProviderProfileDiscovery) ProtoReflect() protoreflect.Message

func (*ProviderProfileDiscovery) Reset 

func (x *ProviderProfileDiscovery) Reset()

func (*ProviderProfileDiscovery) String 

func (x *ProviderProfileDiscovery) String() string

type ProviderProfileFile 

type ProviderProfileFile struct {

	// One virtual file name below /run/openshell/providers/<provider>/.
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// UTF-8 template. Only {{config.KEY}} references are supported.
	Content string `protobuf:"bytes,2,opt,name=content,proto3" json:"content,omitempty"`
	// Optional environment variable containing the virtual absolute path.
	EnvVar string `protobuf:"bytes,3,opt,name=env_var,json=envVar,proto3" json:"env_var,omitempty"`
	// contains filtered or unexported fields
}

EXPERIMENTAL: Provider file templates may change or be removed.

func (*ProviderProfileFile) Descriptor deprecated 

func (*ProviderProfileFile) Descriptor() ([]byte, []int)

Deprecated: Use ProviderProfileFile.ProtoReflect.Descriptor instead.

func (*ProviderProfileFile) GetContent 

func (x *ProviderProfileFile) GetContent() string

func (*ProviderProfileFile) GetEnvVar 

func (x *ProviderProfileFile) GetEnvVar() string

func (*ProviderProfileFile) GetPath 

func (x *ProviderProfileFile) GetPath() string

func (*ProviderProfileFile) ProtoMessage 

func (*ProviderProfileFile) ProtoMessage()

func (*ProviderProfileFile) ProtoReflect 

func (x *ProviderProfileFile) ProtoReflect() protoreflect.Message

func (*ProviderProfileFile) Reset 

func (x *ProviderProfileFile) Reset()

func (*ProviderProfileFile) String 

func (x *ProviderProfileFile) String() string

type ProviderProfileImportItem 

type ProviderProfileImportItem struct {
	Profile *ProviderProfile `protobuf:"bytes,1,opt,name=profile,proto3" json:"profile,omitempty"`
	Source  string           `protobuf:"bytes,2,opt,name=source,proto3" json:"source,omitempty"`
	// contains filtered or unexported fields
}

Provider profile payload with optional source metadata for diagnostics.

func (*ProviderProfileImportItem) Descriptor deprecated 

func (*ProviderProfileImportItem) Descriptor() ([]byte, []int)

Deprecated: Use ProviderProfileImportItem.ProtoReflect.Descriptor instead.

func (*ProviderProfileImportItem) GetProfile 

func (x *ProviderProfileImportItem) GetProfile() *ProviderProfile

func (*ProviderProfileImportItem) GetSource 

func (x *ProviderProfileImportItem) GetSource() string

func (*ProviderProfileImportItem) ProtoMessage 

func (*ProviderProfileImportItem) ProtoMessage()

func (*ProviderProfileImportItem) ProtoReflect 

func (x *ProviderProfileImportItem) ProtoReflect() protoreflect.Message

func (*ProviderProfileImportItem) Reset 

func (x *ProviderProfileImportItem) Reset()

func (*ProviderProfileImportItem) String 

func (x *ProviderProfileImportItem) String() string

type ProviderProfileResponse 

type ProviderProfileResponse struct {
	Profile *ProviderProfile `protobuf:"bytes,1,opt,name=profile,proto3" json:"profile,omitempty"`
	// contains filtered or unexported fields
}

Provider profile response.

func (*ProviderProfileResponse) Descriptor deprecated 

func (*ProviderProfileResponse) Descriptor() ([]byte, []int)

Deprecated: Use ProviderProfileResponse.ProtoReflect.Descriptor instead.

func (*ProviderProfileResponse) GetProfile 

func (x *ProviderProfileResponse) GetProfile() *ProviderProfile

func (*ProviderProfileResponse) ProtoMessage 

func (*ProviderProfileResponse) ProtoMessage()

func (*ProviderProfileResponse) ProtoReflect 

func (x *ProviderProfileResponse) ProtoReflect() protoreflect.Message

func (*ProviderProfileResponse) Reset 

func (x *ProviderProfileResponse) Reset()

func (*ProviderProfileResponse) String 

func (x *ProviderProfileResponse) String() string

type ProviderReadinessObservation 

type ProviderReadinessObservation struct {

	// Gateway-issued identifier from the current ConnectSupervisor response.
	SessionId string `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// Monotonic only within this connection; unrelated to revision fingerprints.
	Sequence                   uint64                  `protobuf:"varint,2,opt,name=sequence,proto3" json:"sequence,omitempty"`
	AttachmentEpoch            string                  `protobuf:"bytes,3,opt,name=attachment_epoch,json=attachmentEpoch,proto3" json:"attachment_epoch,omitempty"`
	ProviderEnvRevision        uint64                  `protobuf:"varint,4,opt,name=provider_env_revision,json=providerEnvRevision,proto3" json:"provider_env_revision,omitempty"`
	ConfigRevision             uint64                  `protobuf:"varint,5,opt,name=config_revision,json=configRevision,proto3" json:"config_revision,omitempty"`
	PolicyHash                 string                  `protobuf:"bytes,6,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	CredentialsInstalled       bool                    `protobuf:"varint,7,opt,name=credentials_installed,json=credentialsInstalled,proto3" json:"credentials_installed,omitempty"`
	PolicyActive               bool                    `protobuf:"varint,8,opt,name=policy_active,json=policyActive,proto3" json:"policy_active,omitempty"`
	LaunchEnvironmentInstalled bool                    `` /* 142-byte string literal not displayed */
	ProcessInstanceId          string                  `protobuf:"bytes,10,opt,name=process_instance_id,json=processInstanceId,proto3" json:"process_instance_id,omitempty"`
	Reason                     ProviderReadinessReason `protobuf:"varint,11,opt,name=reason,proto3,enum=openshell.v1.ProviderReadinessReason" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

Installed state reported by the current supervisor. Process installation is acknowledged by the authenticated sandbox boundary after replacing its environment for future process launches.

func (*ProviderReadinessObservation) Descriptor deprecated 

func (*ProviderReadinessObservation) Descriptor() ([]byte, []int)

Deprecated: Use ProviderReadinessObservation.ProtoReflect.Descriptor instead.

func (*ProviderReadinessObservation) GetAttachmentEpoch 

func (x *ProviderReadinessObservation) GetAttachmentEpoch() string

func (*ProviderReadinessObservation) GetConfigRevision 

func (x *ProviderReadinessObservation) GetConfigRevision() uint64

func (*ProviderReadinessObservation) GetCredentialsInstalled 

func (x *ProviderReadinessObservation) GetCredentialsInstalled() bool

func (*ProviderReadinessObservation) GetLaunchEnvironmentInstalled 

func (x *ProviderReadinessObservation) GetLaunchEnvironmentInstalled() bool

func (*ProviderReadinessObservation) GetPolicyActive 

func (x *ProviderReadinessObservation) GetPolicyActive() bool

func (*ProviderReadinessObservation) GetPolicyHash 

func (x *ProviderReadinessObservation) GetPolicyHash() string

func (*ProviderReadinessObservation) GetProcessInstanceId 

func (x *ProviderReadinessObservation) GetProcessInstanceId() string

func (*ProviderReadinessObservation) GetProviderEnvRevision 

func (x *ProviderReadinessObservation) GetProviderEnvRevision() uint64

func (*ProviderReadinessObservation) GetReason 

func (x *ProviderReadinessObservation) GetReason() ProviderReadinessReason

func (*ProviderReadinessObservation) GetSequence 

func (x *ProviderReadinessObservation) GetSequence() uint64

func (*ProviderReadinessObservation) GetSessionId 

func (x *ProviderReadinessObservation) GetSessionId() string

func (*ProviderReadinessObservation) ProtoMessage 

func (*ProviderReadinessObservation) ProtoMessage()

func (*ProviderReadinessObservation) ProtoReflect 

func (x *ProviderReadinessObservation) ProtoReflect() protoreflect.Message

func (*ProviderReadinessObservation) Reset 

func (x *ProviderReadinessObservation) Reset()

func (*ProviderReadinessObservation) String 

func (x *ProviderReadinessObservation) String() string

type ProviderReadinessReason 

type ProviderReadinessReason int32

Closed reason categories are safe to display. Raw installation errors are never part of the readiness protocol. 

const (
	ProviderReadinessReason_PROVIDER_READINESS_REASON_UNSPECIFIED               ProviderReadinessReason = 0
	ProviderReadinessReason_PROVIDER_READINESS_REASON_WAITING_FOR_SUPERVISOR    ProviderReadinessReason = 1
	ProviderReadinessReason_PROVIDER_READINESS_REASON_WAITING_FOR_CREDENTIALS   ProviderReadinessReason = 2
	ProviderReadinessReason_PROVIDER_READINESS_REASON_WAITING_FOR_POLICY        ProviderReadinessReason = 3
	ProviderReadinessReason_PROVIDER_READINESS_REASON_WAITING_FOR_PROCESS       ProviderReadinessReason = 4
	ProviderReadinessReason_PROVIDER_READINESS_REASON_UNSUPPORTED_SUPERVISOR    ProviderReadinessReason = 5
	ProviderReadinessReason_PROVIDER_READINESS_REASON_CREDENTIALS_WITHHELD      ProviderReadinessReason = 6
	ProviderReadinessReason_PROVIDER_READINESS_REASON_CREDENTIAL_INSTALL_FAILED ProviderReadinessReason = 7
	ProviderReadinessReason_PROVIDER_READINESS_REASON_POLICY_ACTIVATION_FAILED  ProviderReadinessReason = 8
	ProviderReadinessReason_PROVIDER_READINESS_REASON_PROCESS_INSTALL_FAILED    ProviderReadinessReason = 9
	ProviderReadinessReason_PROVIDER_READINESS_REASON_SUPERVISOR_DISCONNECTED   ProviderReadinessReason = 10
	ProviderReadinessReason_PROVIDER_READINESS_REASON_SUPERVISOR_LEASE_EXPIRED  ProviderReadinessReason = 11
	ProviderReadinessReason_PROVIDER_READINESS_REASON_DESIRED_STATE_CHANGED     ProviderReadinessReason = 12
	ProviderReadinessReason_PROVIDER_READINESS_REASON_CREDENTIAL_EXPIRED        ProviderReadinessReason = 13
	ProviderReadinessReason_PROVIDER_READINESS_REASON_LOCAL_POLICY              ProviderReadinessReason = 14
	ProviderReadinessReason_PROVIDER_READINESS_REASON_SNAPSHOT_MISMATCH         ProviderReadinessReason = 15
)

func (ProviderReadinessReason) Descriptor 

func (ProviderReadinessReason) Descriptor() protoreflect.EnumDescriptor

func (ProviderReadinessReason) Enum 

func (x ProviderReadinessReason) Enum() *ProviderReadinessReason

func (ProviderReadinessReason) EnumDescriptor deprecated 

func (ProviderReadinessReason) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderReadinessReason.Descriptor instead.

func (ProviderReadinessReason) Number 

func (x ProviderReadinessReason) Number() protoreflect.EnumNumber

func (ProviderReadinessReason) String 

func (x ProviderReadinessReason) String() string

func (ProviderReadinessReason) Type 

func (ProviderReadinessReason) Type() protoreflect.EnumType

type ProviderReadinessState 

type ProviderReadinessState int32

Readiness states describe persisted intent separately from installed state. 

const (
	ProviderReadinessState_PROVIDER_READINESS_STATE_UNSPECIFIED ProviderReadinessState = 0
	ProviderReadinessState_PROVIDER_READINESS_STATE_PERSISTED   ProviderReadinessState = 1
	ProviderReadinessState_PROVIDER_READINESS_STATE_PENDING     ProviderReadinessState = 2
	ProviderReadinessState_PROVIDER_READINESS_STATE_READY       ProviderReadinessState = 3
	ProviderReadinessState_PROVIDER_READINESS_STATE_WITHHELD    ProviderReadinessState = 4
	ProviderReadinessState_PROVIDER_READINESS_STATE_REVOKED     ProviderReadinessState = 5
	ProviderReadinessState_PROVIDER_READINESS_STATE_FAILED      ProviderReadinessState = 6
	ProviderReadinessState_PROVIDER_READINESS_STATE_SUPERSEDED  ProviderReadinessState = 7
)

func (ProviderReadinessState) Descriptor 

func (ProviderReadinessState) Descriptor() protoreflect.EnumDescriptor

func (ProviderReadinessState) Enum 

func (x ProviderReadinessState) Enum() *ProviderReadinessState

func (ProviderReadinessState) EnumDescriptor deprecated 

func (ProviderReadinessState) EnumDescriptor() ([]byte, []int)

Deprecated: Use ProviderReadinessState.Descriptor instead.

func (ProviderReadinessState) Number 

func (x ProviderReadinessState) Number() protoreflect.EnumNumber

func (ProviderReadinessState) String 

func (x ProviderReadinessState) String() string

func (ProviderReadinessState) Type 

func (ProviderReadinessState) Type() protoreflect.EnumType

type ProviderReadinessStatus 

type ProviderReadinessStatus struct {
	Receipt           *ProviderMutationReceipt      `protobuf:"bytes,1,opt,name=receipt,proto3" json:"receipt,omitempty"`
	State             ProviderReadinessState        `protobuf:"varint,2,opt,name=state,proto3,enum=openshell.v1.ProviderReadinessState" json:"state,omitempty"`
	Reason            ProviderReadinessReason       `protobuf:"varint,3,opt,name=reason,proto3,enum=openshell.v1.ProviderReadinessReason" json:"reason,omitempty"`
	Observed          *ProviderReadinessObservation `protobuf:"bytes,4,opt,name=observed,proto3" json:"observed,omitempty"`
	NetworkInstanceId string                        `protobuf:"bytes,5,opt,name=network_instance_id,json=networkInstanceId,proto3" json:"network_instance_id,omitempty"`
	// Absent until the current supervisor session supplies accepted evidence.
	ObservedTime  *timestamppb.Timestamp `protobuf:"bytes,106,opt,name=observed_time,json=observedTime,proto3" json:"observed_time,omitempty"`
	EvaluatedTime *timestamppb.Timestamp `protobuf:"bytes,107,opt,name=evaluated_time,json=evaluatedTime,proto3" json:"evaluated_time,omitempty"`
	// Durable operation for the receipt, including its terminal apply outcome.
	Operation *ConfigUpdateOperation `protobuf:"bytes,8,opt,name=operation,proto3" json:"operation,omitempty"`
	// contains filtered or unexported fields
}

Operator view of desired and observed state; contains no credential material.

func (*ProviderReadinessStatus) Descriptor deprecated 

func (*ProviderReadinessStatus) Descriptor() ([]byte, []int)

Deprecated: Use ProviderReadinessStatus.ProtoReflect.Descriptor instead.

func (*ProviderReadinessStatus) GetEvaluatedTime 

func (x *ProviderReadinessStatus) GetEvaluatedTime() *timestamppb.Timestamp

func (*ProviderReadinessStatus) GetNetworkInstanceId 

func (x *ProviderReadinessStatus) GetNetworkInstanceId() string

func (*ProviderReadinessStatus) GetObserved 

func (x *ProviderReadinessStatus) GetObserved() *ProviderReadinessObservation

func (*ProviderReadinessStatus) GetObservedTime 

func (x *ProviderReadinessStatus) GetObservedTime() *timestamppb.Timestamp

func (*ProviderReadinessStatus) GetOperation 

func (x *ProviderReadinessStatus) GetOperation() *ConfigUpdateOperation

func (*ProviderReadinessStatus) GetReason 

func (x *ProviderReadinessStatus) GetReason() ProviderReadinessReason

func (*ProviderReadinessStatus) GetReceipt 

func (x *ProviderReadinessStatus) GetReceipt() *ProviderMutationReceipt

func (*ProviderReadinessStatus) GetState 

func (x *ProviderReadinessStatus) GetState() ProviderReadinessState

func (*ProviderReadinessStatus) ProtoMessage 

func (*ProviderReadinessStatus) ProtoMessage()

func (*ProviderReadinessStatus) ProtoReflect 

func (x *ProviderReadinessStatus) ProtoReflect() protoreflect.Message

func (*ProviderReadinessStatus) Reset 

func (x *ProviderReadinessStatus) Reset()

func (*ProviderReadinessStatus) String 

func (x *ProviderReadinessStatus) String() string

type ProviderResponse 

type ProviderResponse struct {
	Provider *datamodelv1.Provider `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	// Selection-time sandbox target set for an update, with one receipt per target.
	// Sandboxes attached later are outside this operation's readiness result.
	TargetReceipts []*ProviderMutationReceipt `protobuf:"bytes,2,rep,name=target_receipts,json=targetReceipts,proto3" json:"target_receipts,omitempty"`
	// Identifies the update even when its target set is empty.
	MutationId string `protobuf:"bytes,3,opt,name=mutation_id,json=mutationId,proto3" json:"mutation_id,omitempty"`
	// contains filtered or unexported fields
}

Provider response.

func (*ProviderResponse) Descriptor deprecated 

func (*ProviderResponse) Descriptor() ([]byte, []int)

Deprecated: Use ProviderResponse.ProtoReflect.Descriptor instead.

func (*ProviderResponse) GetMutationId 

func (x *ProviderResponse) GetMutationId() string

func (*ProviderResponse) GetProvider 

func (x *ProviderResponse) GetProvider() *datamodelv1.Provider

func (*ProviderResponse) GetTargetReceipts 

func (x *ProviderResponse) GetTargetReceipts() []*ProviderMutationReceipt

func (*ProviderResponse) ProtoMessage 

func (*ProviderResponse) ProtoMessage()

func (*ProviderResponse) ProtoReflect 

func (x *ProviderResponse) ProtoReflect() protoreflect.Message

func (*ProviderResponse) Reset 

func (x *ProviderResponse) Reset()

func (*ProviderResponse) String 

func (x *ProviderResponse) String() string

type PushSandboxLogsRequest 

type PushSandboxLogsRequest struct {

	// The sandbox ID.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Log lines to ingest.
	Logs []*SandboxLogLine `protobuf:"bytes,2,rep,name=logs,proto3" json:"logs,omitempty"`
	// contains filtered or unexported fields
}

Batch of log lines pushed from sandbox to server.

func (*PushSandboxLogsRequest) Descriptor deprecated 

func (*PushSandboxLogsRequest) Descriptor() ([]byte, []int)

Deprecated: Use PushSandboxLogsRequest.ProtoReflect.Descriptor instead.

func (*PushSandboxLogsRequest) GetLogs 

func (x *PushSandboxLogsRequest) GetLogs() []*SandboxLogLine

func (*PushSandboxLogsRequest) GetSandboxId 

func (x *PushSandboxLogsRequest) GetSandboxId() string

func (*PushSandboxLogsRequest) ProtoMessage 

func (*PushSandboxLogsRequest) ProtoMessage()

func (*PushSandboxLogsRequest) ProtoReflect 

func (x *PushSandboxLogsRequest) ProtoReflect() protoreflect.Message

func (*PushSandboxLogsRequest) Reset 

func (x *PushSandboxLogsRequest) Reset()

func (*PushSandboxLogsRequest) String 

func (x *PushSandboxLogsRequest) String() string

type PushSandboxLogsResponse 

type PushSandboxLogsResponse struct {
	// contains filtered or unexported fields
}

Push sandbox logs response.

func (*PushSandboxLogsResponse) Descriptor deprecated 

func (*PushSandboxLogsResponse) Descriptor() ([]byte, []int)

Deprecated: Use PushSandboxLogsResponse.ProtoReflect.Descriptor instead.

func (*PushSandboxLogsResponse) ProtoMessage 

func (*PushSandboxLogsResponse) ProtoMessage()

func (*PushSandboxLogsResponse) ProtoReflect 

func (x *PushSandboxLogsResponse) ProtoReflect() protoreflect.Message

func (*PushSandboxLogsResponse) Reset 

func (x *PushSandboxLogsResponse) Reset()

func (*PushSandboxLogsResponse) String 

func (x *PushSandboxLogsResponse) String() string

type RefreshSandboxTokenRequest 

type RefreshSandboxTokenRequest struct {

	// Operator registration names for extension services selected by the
	// sandbox's effective policy.
	ExtensionServiceNames []string `` /* 126-byte string literal not displayed */
	// contains filtered or unexported fields
}

RefreshSandboxToken request. The calling principal must already be a sandbox principal (i.e. the request carries a still-valid gateway-minted JWT in its Authorization header). Extension service names are resolved against server-owned registrations and the sandbox's effective policy; callers never choose token audiences directly.

func (*RefreshSandboxTokenRequest) Descriptor deprecated 

func (*RefreshSandboxTokenRequest) Descriptor() ([]byte, []int)

Deprecated: Use RefreshSandboxTokenRequest.ProtoReflect.Descriptor instead.

func (*RefreshSandboxTokenRequest) GetExtensionServiceNames 

func (x *RefreshSandboxTokenRequest) GetExtensionServiceNames() []string

func (*RefreshSandboxTokenRequest) ProtoMessage 

func (*RefreshSandboxTokenRequest) ProtoMessage()

func (*RefreshSandboxTokenRequest) ProtoReflect 

func (x *RefreshSandboxTokenRequest) ProtoReflect() protoreflect.Message

func (*RefreshSandboxTokenRequest) Reset 

func (x *RefreshSandboxTokenRequest) Reset()

func (*RefreshSandboxTokenRequest) String 

func (x *RefreshSandboxTokenRequest) String() string

type RefreshSandboxTokenResponse 

type RefreshSandboxTokenResponse struct {

	// Fresh gateway-minted JWT bound to the same sandbox UUID.
	Token string `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	// Absolute expiry of the new token. Absence means the token is non-expiring.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,102,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// Fresh credentials for the requested, policy-authorized extension
	// services. These remain in supervisor memory and are never persisted.
	ExtensionCredentials []*ExtensionServiceCredential `protobuf:"bytes,3,rep,name=extension_credentials,json=extensionCredentials,proto3" json:"extension_credentials,omitempty"`
	// Fresh Sandbox Protocol bearer token from the same atomic refresh.
	SandboxToken string `protobuf:"bytes,4,opt,name=sandbox_token,json=sandboxToken,proto3" json:"sandbox_token,omitempty"`
	// Absolute Sandbox Protocol token expiry. Absence means the token is non-expiring.
	SandboxExpirationTime *timestamppb.Timestamp `` /* 128-byte string literal not displayed */
	// Launch generation to which both refreshed credentials are bound.
	SessionId string `protobuf:"bytes,6,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// Durable authorization epoch shared by the gateway and Sandbox Runtime.
	CredentialEpoch uint64 `protobuf:"varint,7,opt,name=credential_epoch,json=credentialEpoch,proto3" json:"credential_epoch,omitempty"`
	// contains filtered or unexported fields
}

RefreshSandboxToken response. The new token replaces the supervisor's in-memory bearer credential.

func (*RefreshSandboxTokenResponse) Descriptor deprecated 

func (*RefreshSandboxTokenResponse) Descriptor() ([]byte, []int)

Deprecated: Use RefreshSandboxTokenResponse.ProtoReflect.Descriptor instead.

func (*RefreshSandboxTokenResponse) GetCredentialEpoch 

func (x *RefreshSandboxTokenResponse) GetCredentialEpoch() uint64

func (*RefreshSandboxTokenResponse) GetExpirationTime 

func (x *RefreshSandboxTokenResponse) GetExpirationTime() *timestamppb.Timestamp

func (*RefreshSandboxTokenResponse) GetExtensionCredentials 

func (x *RefreshSandboxTokenResponse) GetExtensionCredentials() []*ExtensionServiceCredential

func (*RefreshSandboxTokenResponse) GetSandboxExpirationTime 

func (x *RefreshSandboxTokenResponse) GetSandboxExpirationTime() *timestamppb.Timestamp

func (*RefreshSandboxTokenResponse) GetSandboxToken 

func (x *RefreshSandboxTokenResponse) GetSandboxToken() string

func (*RefreshSandboxTokenResponse) GetSessionId 

func (x *RefreshSandboxTokenResponse) GetSessionId() string

func (*RefreshSandboxTokenResponse) GetToken 

func (x *RefreshSandboxTokenResponse) GetToken() string

func (*RefreshSandboxTokenResponse) ProtoMessage 

func (*RefreshSandboxTokenResponse) ProtoMessage()

func (*RefreshSandboxTokenResponse) ProtoReflect 

func (x *RefreshSandboxTokenResponse) ProtoReflect() protoreflect.Message

func (*RefreshSandboxTokenResponse) Reset 

func (x *RefreshSandboxTokenResponse) Reset()

func (*RefreshSandboxTokenResponse) String 

func (x *RefreshSandboxTokenResponse) String() string

type RejectDraftChunkRequest 

type RejectDraftChunkRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Chunk ID to reject.
	ChunkId string `protobuf:"bytes,2,opt,name=chunk_id,json=chunkId,proto3" json:"chunk_id,omitempty"`
	// Optional reason for rejection (fed to LLM context in future analysis).
	Reason  string `protobuf:"bytes,3,opt,name=reason,proto3" json:"reason,omitempty"`
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Reject a single draft chunk.

func (*RejectDraftChunkRequest) Descriptor deprecated 

func (*RejectDraftChunkRequest) Descriptor() ([]byte, []int)

Deprecated: Use RejectDraftChunkRequest.ProtoReflect.Descriptor instead.

func (*RejectDraftChunkRequest) GetChunkId 

func (x *RejectDraftChunkRequest) GetChunkId() string

func (*RejectDraftChunkRequest) GetReason 

func (x *RejectDraftChunkRequest) GetReason() string

func (*RejectDraftChunkRequest) GetRequestId 

func (x *RejectDraftChunkRequest) GetRequestId() string

func (*RejectDraftChunkRequest) GetSandbox 

func (x *RejectDraftChunkRequest) GetSandbox() string

func (*RejectDraftChunkRequest) GetWorkspaceScope 

func (x *RejectDraftChunkRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*RejectDraftChunkRequest) ProtoMessage 

func (*RejectDraftChunkRequest) ProtoMessage()

func (*RejectDraftChunkRequest) ProtoReflect 

func (x *RejectDraftChunkRequest) ProtoReflect() protoreflect.Message

func (*RejectDraftChunkRequest) Reset 

func (x *RejectDraftChunkRequest) Reset()

func (*RejectDraftChunkRequest) String 

func (x *RejectDraftChunkRequest) String() string

type RejectDraftChunkResponse 

type RejectDraftChunkResponse struct {
	// contains filtered or unexported fields
}

func (*RejectDraftChunkResponse) Descriptor deprecated 

func (*RejectDraftChunkResponse) Descriptor() ([]byte, []int)

Deprecated: Use RejectDraftChunkResponse.ProtoReflect.Descriptor instead.

func (*RejectDraftChunkResponse) ProtoMessage 

func (*RejectDraftChunkResponse) ProtoMessage()

func (*RejectDraftChunkResponse) ProtoReflect 

func (x *RejectDraftChunkResponse) ProtoReflect() protoreflect.Message

func (*RejectDraftChunkResponse) Reset 

func (x *RejectDraftChunkResponse) Reset()

func (*RejectDraftChunkResponse) String 

func (x *RejectDraftChunkResponse) String() string

type RelayClose 

type RelayClose struct {

	// Channel identifier to close.
	ChannelId string `protobuf:"bytes,1,opt,name=channel_id,json=channelId,proto3" json:"channel_id,omitempty"`
	// Optional reason for closure.
	Reason string `protobuf:"bytes,2,opt,name=reason,proto3" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

Either side requests closure of a relay channel.

func (*RelayClose) Descriptor deprecated 

func (*RelayClose) Descriptor() ([]byte, []int)

Deprecated: Use RelayClose.ProtoReflect.Descriptor instead.

func (*RelayClose) GetChannelId 

func (x *RelayClose) GetChannelId() string

func (*RelayClose) GetReason 

func (x *RelayClose) GetReason() string

func (*RelayClose) ProtoMessage 

func (*RelayClose) ProtoMessage()

func (*RelayClose) ProtoReflect 

func (x *RelayClose) ProtoReflect() protoreflect.Message

func (*RelayClose) Reset 

func (x *RelayClose) Reset()

func (*RelayClose) String 

func (x *RelayClose) String() string

type RelayFrame 

type RelayFrame struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*RelayFrame_Init
	//	*RelayFrame_Data
	Payload isRelayFrame_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

A single frame on the RelayStream RPC.

The supervisor MUST send `init` as the first frame. All subsequent frames in either direction carry raw bytes in `data`.

func (*RelayFrame) Descriptor deprecated 

func (*RelayFrame) Descriptor() ([]byte, []int)

Deprecated: Use RelayFrame.ProtoReflect.Descriptor instead.

func (*RelayFrame) GetData 

func (x *RelayFrame) GetData() []byte

func (*RelayFrame) GetInit 

func (x *RelayFrame) GetInit() *RelayInit

func (*RelayFrame) GetPayload 

func (x *RelayFrame) GetPayload() isRelayFrame_Payload

func (*RelayFrame) ProtoMessage 

func (*RelayFrame) ProtoMessage()

func (*RelayFrame) ProtoReflect 

func (x *RelayFrame) ProtoReflect() protoreflect.Message

func (*RelayFrame) Reset 

func (x *RelayFrame) Reset()

func (*RelayFrame) String 

func (x *RelayFrame) String() string

type RelayFrame_Data 

type RelayFrame_Data struct {
	Data []byte `protobuf:"bytes,2,opt,name=data,proto3,oneof"`
}

type RelayFrame_Init 

type RelayFrame_Init struct {
	Init *RelayInit `protobuf:"bytes,1,opt,name=init,proto3,oneof"`
}

type RelayInit 

type RelayInit struct {

	// Gateway-allocated channel identifier (UUID).
	ChannelId string `protobuf:"bytes,1,opt,name=channel_id,json=channelId,proto3" json:"channel_id,omitempty"`
	// contains filtered or unexported fields
}

Initial RelayStream frame sent by the supervisor to claim a pending relay.

func (*RelayInit) Descriptor deprecated 

func (*RelayInit) Descriptor() ([]byte, []int)

Deprecated: Use RelayInit.ProtoReflect.Descriptor instead.

func (*RelayInit) GetChannelId 

func (x *RelayInit) GetChannelId() string

func (*RelayInit) ProtoMessage 

func (*RelayInit) ProtoMessage()

func (*RelayInit) ProtoReflect 

func (x *RelayInit) ProtoReflect() protoreflect.Message

func (*RelayInit) Reset 

func (x *RelayInit) Reset()

func (*RelayInit) String 

func (x *RelayInit) String() string

type RelayOpen 

type RelayOpen struct {

	// Gateway-allocated channel identifier (UUID).
	ChannelId string `protobuf:"bytes,1,opt,name=channel_id,json=channelId,proto3" json:"channel_id,omitempty"`
	// Target the supervisor should dial inside the sandbox.
	// If absent, supervisors treat the relay as SSH for compatibility.
	//
	// Types that are valid to be assigned to Target:
	//
	//	*RelayOpen_Ssh
	//	*RelayOpen_Tcp
	Target isRelayOpen_Target `protobuf_oneof:"target"`
	// Optional service identifier for audit/correlation.
	ServiceId string `protobuf:"bytes,5,opt,name=service_id,json=serviceId,proto3" json:"service_id,omitempty"`
	// contains filtered or unexported fields
}

Gateway requests the supervisor to open a relay channel.

On receiving this, the supervisor should initiate a RelayStream RPC to the gateway, sending a RelayInit in the first RelayFrame to associate the new HTTP/2 stream with the pending relay slot. The supervisor bridges that stream to the requested local target.

func (*RelayOpen) Descriptor deprecated 

func (*RelayOpen) Descriptor() ([]byte, []int)

Deprecated: Use RelayOpen.ProtoReflect.Descriptor instead.

func (*RelayOpen) GetChannelId 

func (x *RelayOpen) GetChannelId() string

func (*RelayOpen) GetServiceId 

func (x *RelayOpen) GetServiceId() string

func (*RelayOpen) GetSsh 

func (x *RelayOpen) GetSsh() *SshRelayTarget

func (*RelayOpen) GetTarget 

func (x *RelayOpen) GetTarget() isRelayOpen_Target

func (*RelayOpen) GetTcp 

func (x *RelayOpen) GetTcp() *TcpRelayTarget

func (*RelayOpen) ProtoMessage 

func (*RelayOpen) ProtoMessage()

func (*RelayOpen) ProtoReflect 

func (x *RelayOpen) ProtoReflect() protoreflect.Message

func (*RelayOpen) Reset 

func (x *RelayOpen) Reset()

func (*RelayOpen) String 

func (x *RelayOpen) String() string

type RelayOpenResult 

type RelayOpenResult struct {

	// Channel identifier from the RelayOpen request.
	ChannelId string `protobuf:"bytes,1,opt,name=channel_id,json=channelId,proto3" json:"channel_id,omitempty"`
	// True if the relay was successfully established.
	Success bool `protobuf:"varint,2,opt,name=success,proto3" json:"success,omitempty"`
	// Error message if success is false.
	Error string `protobuf:"bytes,3,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

Supervisor reports the result of a relay open request.

func (*RelayOpenResult) Descriptor deprecated 

func (*RelayOpenResult) Descriptor() ([]byte, []int)

Deprecated: Use RelayOpenResult.ProtoReflect.Descriptor instead.

func (*RelayOpenResult) GetChannelId 

func (x *RelayOpenResult) GetChannelId() string

func (*RelayOpenResult) GetError 

func (x *RelayOpenResult) GetError() string

func (*RelayOpenResult) GetSuccess 

func (x *RelayOpenResult) GetSuccess() bool

func (*RelayOpenResult) ProtoMessage 

func (*RelayOpenResult) ProtoMessage()

func (*RelayOpenResult) ProtoReflect 

func (x *RelayOpenResult) ProtoReflect() protoreflect.Message

func (*RelayOpenResult) Reset 

func (x *RelayOpenResult) Reset()

func (*RelayOpenResult) String 

func (x *RelayOpenResult) String() string

type RelayOpen_Ssh 

type RelayOpen_Ssh struct {
	Ssh *SshRelayTarget `protobuf:"bytes,2,opt,name=ssh,proto3,oneof"`
}

type RelayOpen_Tcp 

type RelayOpen_Tcp struct {
	Tcp *TcpRelayTarget `protobuf:"bytes,3,opt,name=tcp,proto3,oneof"`
}

type RemoveNetworkBinary 

type RemoveNetworkBinary struct {
	RuleName   string `protobuf:"bytes,1,opt,name=rule_name,json=ruleName,proto3" json:"rule_name,omitempty"`
	BinaryPath string `protobuf:"bytes,2,opt,name=binary_path,json=binaryPath,proto3" json:"binary_path,omitempty"`
	// contains filtered or unexported fields
}

func (*RemoveNetworkBinary) Descriptor deprecated 

func (*RemoveNetworkBinary) Descriptor() ([]byte, []int)

Deprecated: Use RemoveNetworkBinary.ProtoReflect.Descriptor instead.

func (*RemoveNetworkBinary) GetBinaryPath 

func (x *RemoveNetworkBinary) GetBinaryPath() string

func (*RemoveNetworkBinary) GetRuleName 

func (x *RemoveNetworkBinary) GetRuleName() string

func (*RemoveNetworkBinary) ProtoMessage 

func (*RemoveNetworkBinary) ProtoMessage()

func (*RemoveNetworkBinary) ProtoReflect 

func (x *RemoveNetworkBinary) ProtoReflect() protoreflect.Message

func (*RemoveNetworkBinary) Reset 

func (x *RemoveNetworkBinary) Reset()

func (*RemoveNetworkBinary) String 

func (x *RemoveNetworkBinary) String() string

type RemoveNetworkEndpoint 

type RemoveNetworkEndpoint struct {
	RuleName string `protobuf:"bytes,1,opt,name=rule_name,json=ruleName,proto3" json:"rule_name,omitempty"`
	Host     string `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	Port     uint32 `protobuf:"varint,3,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}

func (*RemoveNetworkEndpoint) Descriptor deprecated 

func (*RemoveNetworkEndpoint) Descriptor() ([]byte, []int)

Deprecated: Use RemoveNetworkEndpoint.ProtoReflect.Descriptor instead.

func (*RemoveNetworkEndpoint) GetHost 

func (x *RemoveNetworkEndpoint) GetHost() string

func (*RemoveNetworkEndpoint) GetPort 

func (x *RemoveNetworkEndpoint) GetPort() uint32

func (*RemoveNetworkEndpoint) GetRuleName 

func (x *RemoveNetworkEndpoint) GetRuleName() string

func (*RemoveNetworkEndpoint) ProtoMessage 

func (*RemoveNetworkEndpoint) ProtoMessage()

func (*RemoveNetworkEndpoint) ProtoReflect 

func (x *RemoveNetworkEndpoint) ProtoReflect() protoreflect.Message

func (*RemoveNetworkEndpoint) Reset 

func (x *RemoveNetworkEndpoint) Reset()

func (*RemoveNetworkEndpoint) String 

func (x *RemoveNetworkEndpoint) String() string

type RemoveNetworkRule 

type RemoveNetworkRule struct {
	RuleName string `protobuf:"bytes,1,opt,name=rule_name,json=ruleName,proto3" json:"rule_name,omitempty"`
	// contains filtered or unexported fields
}

func (*RemoveNetworkRule) Descriptor deprecated 

func (*RemoveNetworkRule) Descriptor() ([]byte, []int)

Deprecated: Use RemoveNetworkRule.ProtoReflect.Descriptor instead.

func (*RemoveNetworkRule) GetRuleName 

func (x *RemoveNetworkRule) GetRuleName() string

func (*RemoveNetworkRule) ProtoMessage 

func (*RemoveNetworkRule) ProtoMessage()

func (*RemoveNetworkRule) ProtoReflect 

func (x *RemoveNetworkRule) ProtoReflect() protoreflect.Message

func (*RemoveNetworkRule) Reset 

func (x *RemoveNetworkRule) Reset()

func (*RemoveNetworkRule) String 

func (x *RemoveNetworkRule) String() string

type RemoveWorkspaceMemberRequest 

type RemoveWorkspaceMemberRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,1,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// OIDC subject claim identifying the principal to remove.
	PrincipalSubject string `protobuf:"bytes,2,opt,name=principal_subject,json=principalSubject,proto3" json:"principal_subject,omitempty"`
	AllowMissing     bool   `protobuf:"varint,3,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// Optional nonzero UUID. Same ID and payload replay success for 24 hours.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Remove workspace member request.

func (*RemoveWorkspaceMemberRequest) Descriptor deprecated 

func (*RemoveWorkspaceMemberRequest) Descriptor() ([]byte, []int)

Deprecated: Use RemoveWorkspaceMemberRequest.ProtoReflect.Descriptor instead.

func (*RemoveWorkspaceMemberRequest) GetAllowMissing 

func (x *RemoveWorkspaceMemberRequest) GetAllowMissing() bool

func (*RemoveWorkspaceMemberRequest) GetPrincipalSubject 

func (x *RemoveWorkspaceMemberRequest) GetPrincipalSubject() string

func (*RemoveWorkspaceMemberRequest) GetRequestId 

func (x *RemoveWorkspaceMemberRequest) GetRequestId() string

func (*RemoveWorkspaceMemberRequest) GetWorkspaceScope 

func (x *RemoveWorkspaceMemberRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*RemoveWorkspaceMemberRequest) ProtoMessage 

func (*RemoveWorkspaceMemberRequest) ProtoMessage()

func (*RemoveWorkspaceMemberRequest) ProtoReflect 

func (x *RemoveWorkspaceMemberRequest) ProtoReflect() protoreflect.Message

func (*RemoveWorkspaceMemberRequest) Reset 

func (x *RemoveWorkspaceMemberRequest) Reset()

func (*RemoveWorkspaceMemberRequest) String 

func (x *RemoveWorkspaceMemberRequest) String() string

type RemoveWorkspaceMemberResponse 

type RemoveWorkspaceMemberResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

Remove workspace member response.

func (*RemoveWorkspaceMemberResponse) Descriptor deprecated 

func (*RemoveWorkspaceMemberResponse) Descriptor() ([]byte, []int)

Deprecated: Use RemoveWorkspaceMemberResponse.ProtoReflect.Descriptor instead.

func (*RemoveWorkspaceMemberResponse) GetOutcome 

func (x *RemoveWorkspaceMemberResponse) GetOutcome() DeletionOutcome

func (*RemoveWorkspaceMemberResponse) ProtoMessage 

func (*RemoveWorkspaceMemberResponse) ProtoMessage()

func (*RemoveWorkspaceMemberResponse) ProtoReflect 

func (x *RemoveWorkspaceMemberResponse) ProtoReflect() protoreflect.Message

func (*RemoveWorkspaceMemberResponse) Reset 

func (x *RemoveWorkspaceMemberResponse) Reset()

func (*RemoveWorkspaceMemberResponse) String 

func (x *RemoveWorkspaceMemberResponse) String() string

type ReportEndpointStatusRequest 

type ReportEndpointStatusRequest struct {

	// Sandbox id. Must match the authenticated sandbox principal.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Hash from the active effective policy delivered by the gateway.
	PolicyHash string `protobuf:"bytes,2,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// Provider environment revision delivered with the active configuration.
	ProviderEnvRevision uint64 `protobuf:"varint,3,opt,name=provider_env_revision,json=providerEnvRevision,proto3" json:"provider_env_revision,omitempty"`
	// Exactly one result for every distinct observed endpoint in the policy.
	Observations []*EndpointObservation `protobuf:"bytes,4,rep,name=observations,proto3" json:"observations,omitempty"`
	// Endpoints with a new observation in this batch. Omitted endpoints retain
	// their prior report time; an identical retry never advances report time.
	ObservedEndpointIds []string `protobuf:"bytes,5,rep,name=observed_endpoint_ids,json=observedEndpointIds,proto3" json:"observed_endpoint_ids,omitempty"`
	// Active ConnectSupervisor session that owns these observations.
	SupervisorSessionId string `protobuf:"bytes,6,opt,name=supervisor_session_id,json=supervisorSessionId,proto3" json:"supervisor_session_id,omitempty"`
	// Monotonically increasing sequence within the authenticated session. Gaps
	// are allowed when an inventory reset supersedes a frozen snapshot. Retrying
	// a report preserves its complete body and sequence for idempotent acknowledgement.
	ReportSequence uint64 `protobuf:"varint,7,opt,name=report_sequence,json=reportSequence,proto3" json:"report_sequence,omitempty"`
	// Complete latest grant state. Omission retains legacy compatibility;
	// a present message with no last_failure explicitly clears the prior cause.
	TokenGrantStatus *TokenGrantStatus `protobuf:"bytes,8,opt,name=token_grant_status,json=tokenGrantStatus,proto3" json:"token_grant_status,omitempty"`
	// contains filtered or unexported fields
}

Complete endpoint status report for the caller's current configuration.

func (*ReportEndpointStatusRequest) Descriptor deprecated 

func (*ReportEndpointStatusRequest) Descriptor() ([]byte, []int)

Deprecated: Use ReportEndpointStatusRequest.ProtoReflect.Descriptor instead.

func (*ReportEndpointStatusRequest) GetObservations 

func (x *ReportEndpointStatusRequest) GetObservations() []*EndpointObservation

func (*ReportEndpointStatusRequest) GetObservedEndpointIds 

func (x *ReportEndpointStatusRequest) GetObservedEndpointIds() []string

func (*ReportEndpointStatusRequest) GetPolicyHash 

func (x *ReportEndpointStatusRequest) GetPolicyHash() string

func (*ReportEndpointStatusRequest) GetProviderEnvRevision 

func (x *ReportEndpointStatusRequest) GetProviderEnvRevision() uint64

func (*ReportEndpointStatusRequest) GetReportSequence 

func (x *ReportEndpointStatusRequest) GetReportSequence() uint64

func (*ReportEndpointStatusRequest) GetSandboxId 

func (x *ReportEndpointStatusRequest) GetSandboxId() string

func (*ReportEndpointStatusRequest) GetSupervisorSessionId 

func (x *ReportEndpointStatusRequest) GetSupervisorSessionId() string

func (*ReportEndpointStatusRequest) GetTokenGrantStatus 

func (x *ReportEndpointStatusRequest) GetTokenGrantStatus() *TokenGrantStatus

func (*ReportEndpointStatusRequest) ProtoMessage 

func (*ReportEndpointStatusRequest) ProtoMessage()

func (*ReportEndpointStatusRequest) ProtoReflect 

func (x *ReportEndpointStatusRequest) ProtoReflect() protoreflect.Message

func (*ReportEndpointStatusRequest) Reset 

func (x *ReportEndpointStatusRequest) Reset()

func (*ReportEndpointStatusRequest) String 

func (x *ReportEndpointStatusRequest) String() string

type ReportEndpointStatusResponse 

type ReportEndpointStatusResponse struct {
	// contains filtered or unexported fields
}

Empty acknowledgement for a persisted endpoint status report.

func (*ReportEndpointStatusResponse) Descriptor deprecated 

func (*ReportEndpointStatusResponse) Descriptor() ([]byte, []int)

Deprecated: Use ReportEndpointStatusResponse.ProtoReflect.Descriptor instead.

func (*ReportEndpointStatusResponse) ProtoMessage 

func (*ReportEndpointStatusResponse) ProtoMessage()

func (*ReportEndpointStatusResponse) ProtoReflect 

func (x *ReportEndpointStatusResponse) ProtoReflect() protoreflect.Message

func (*ReportEndpointStatusResponse) Reset 

func (x *ReportEndpointStatusResponse) Reset()

func (*ReportEndpointStatusResponse) String 

func (x *ReportEndpointStatusResponse) String() string

type ReportMainProcessExitRequest 

type ReportMainProcessExitRequest struct {
	SandboxId  string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	InstanceId string `protobuf:"bytes,2,opt,name=instance_id,json=instanceId,proto3" json:"instance_id,omitempty"`
	// Normalized process result. Signal exits use 128 + signal number.
	ExitCode int32 `protobuf:"varint,3,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`
	// contains filtered or unexported fields
}

Terminal result reported before the supervisor shuts down. A successful RPC response confirms that the result was durably handled by the gateway.

func (*ReportMainProcessExitRequest) Descriptor deprecated 

func (*ReportMainProcessExitRequest) Descriptor() ([]byte, []int)

Deprecated: Use ReportMainProcessExitRequest.ProtoReflect.Descriptor instead.

func (*ReportMainProcessExitRequest) GetExitCode 

func (x *ReportMainProcessExitRequest) GetExitCode() int32

func (*ReportMainProcessExitRequest) GetInstanceId 

func (x *ReportMainProcessExitRequest) GetInstanceId() string

func (*ReportMainProcessExitRequest) GetSandboxId 

func (x *ReportMainProcessExitRequest) GetSandboxId() string

func (*ReportMainProcessExitRequest) ProtoMessage 

func (*ReportMainProcessExitRequest) ProtoMessage()

func (*ReportMainProcessExitRequest) ProtoReflect 

func (x *ReportMainProcessExitRequest) ProtoReflect() protoreflect.Message

func (*ReportMainProcessExitRequest) Reset 

func (x *ReportMainProcessExitRequest) Reset()

func (*ReportMainProcessExitRequest) String 

func (x *ReportMainProcessExitRequest) String() string

type ReportMainProcessExitResponse 

type ReportMainProcessExitResponse struct {
	// contains filtered or unexported fields
}

func (*ReportMainProcessExitResponse) Descriptor deprecated 

func (*ReportMainProcessExitResponse) Descriptor() ([]byte, []int)

Deprecated: Use ReportMainProcessExitResponse.ProtoReflect.Descriptor instead.

func (*ReportMainProcessExitResponse) ProtoMessage 

func (*ReportMainProcessExitResponse) ProtoMessage()

func (*ReportMainProcessExitResponse) ProtoReflect 

func (x *ReportMainProcessExitResponse) ProtoReflect() protoreflect.Message

func (*ReportMainProcessExitResponse) Reset 

func (x *ReportMainProcessExitResponse) Reset()

func (*ReportMainProcessExitResponse) String 

func (x *ReportMainProcessExitResponse) String() string

type ReportPolicyStatusRequest 

type ReportPolicyStatusRequest struct {

	// Sandbox id.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// The policy version that was attempted.
	Version uint32 `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	// Load result status.
	Status PolicyStatus `protobuf:"varint,3,opt,name=status,proto3,enum=openshell.v1.PolicyStatus" json:"status,omitempty"`
	// Error message if status is FAILED.
	LoadError string `protobuf:"bytes,4,opt,name=load_error,json=loadError,proto3" json:"load_error,omitempty"`
	// contains filtered or unexported fields
}

Report policy load status (called by sandbox runtime after reload attempt).

func (*ReportPolicyStatusRequest) Descriptor deprecated 

func (*ReportPolicyStatusRequest) Descriptor() ([]byte, []int)

Deprecated: Use ReportPolicyStatusRequest.ProtoReflect.Descriptor instead.

func (*ReportPolicyStatusRequest) GetLoadError 

func (x *ReportPolicyStatusRequest) GetLoadError() string

func (*ReportPolicyStatusRequest) GetSandboxId 

func (x *ReportPolicyStatusRequest) GetSandboxId() string

func (*ReportPolicyStatusRequest) GetStatus 

func (x *ReportPolicyStatusRequest) GetStatus() PolicyStatus

func (*ReportPolicyStatusRequest) GetVersion 

func (x *ReportPolicyStatusRequest) GetVersion() uint32

func (*ReportPolicyStatusRequest) ProtoMessage 

func (*ReportPolicyStatusRequest) ProtoMessage()

func (*ReportPolicyStatusRequest) ProtoReflect 

func (x *ReportPolicyStatusRequest) ProtoReflect() protoreflect.Message

func (*ReportPolicyStatusRequest) Reset 

func (x *ReportPolicyStatusRequest) Reset()

func (*ReportPolicyStatusRequest) String 

func (x *ReportPolicyStatusRequest) String() string

type ReportPolicyStatusResponse 

type ReportPolicyStatusResponse struct {
	// contains filtered or unexported fields
}

Report policy status response.

func (*ReportPolicyStatusResponse) Descriptor deprecated 

func (*ReportPolicyStatusResponse) Descriptor() ([]byte, []int)

Deprecated: Use ReportPolicyStatusResponse.ProtoReflect.Descriptor instead.

func (*ReportPolicyStatusResponse) ProtoMessage 

func (*ReportPolicyStatusResponse) ProtoMessage()

func (*ReportPolicyStatusResponse) ProtoReflect 

func (x *ReportPolicyStatusResponse) ProtoReflect() protoreflect.Message

func (*ReportPolicyStatusResponse) Reset 

func (x *ReportPolicyStatusResponse) Reset()

func (*ReportPolicyStatusResponse) String 

func (x *ReportPolicyStatusResponse) String() string

type ReportProviderReadinessRequest 

type ReportProviderReadinessRequest struct {
	SandboxId   string                        `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	Observation *ProviderReadinessObservation `protobuf:"bytes,2,opt,name=observation,proto3" json:"observation,omitempty"`
	// contains filtered or unexported fields
}

Installation evidence from the authenticated supervisor for this sandbox. A caller-provided instance identifier alone never establishes authority.

func (*ReportProviderReadinessRequest) Descriptor deprecated 

func (*ReportProviderReadinessRequest) Descriptor() ([]byte, []int)

Deprecated: Use ReportProviderReadinessRequest.ProtoReflect.Descriptor instead.

func (*ReportProviderReadinessRequest) GetObservation 

func (x *ReportProviderReadinessRequest) GetObservation() *ProviderReadinessObservation

func (*ReportProviderReadinessRequest) GetSandboxId 

func (x *ReportProviderReadinessRequest) GetSandboxId() string

func (*ReportProviderReadinessRequest) ProtoMessage 

func (*ReportProviderReadinessRequest) ProtoMessage()

func (*ReportProviderReadinessRequest) ProtoReflect 

func (x *ReportProviderReadinessRequest) ProtoReflect() protoreflect.Message

func (*ReportProviderReadinessRequest) Reset 

func (x *ReportProviderReadinessRequest) Reset()

func (*ReportProviderReadinessRequest) String 

func (x *ReportProviderReadinessRequest) String() string

type ReportProviderReadinessResponse 

type ReportProviderReadinessResponse struct {
	AcceptedSequence uint64               `protobuf:"varint,1,opt,name=accepted_sequence,json=acceptedSequence,proto3" json:"accepted_sequence,omitempty"`
	ReportInterval   *durationpb.Duration `protobuf:"bytes,102,opt,name=report_interval,json=reportInterval,proto3" json:"report_interval,omitempty"`
	ObservationTtl   *durationpb.Duration `protobuf:"bytes,103,opt,name=observation_ttl,json=observationTtl,proto3" json:"observation_ttl,omitempty"`
	// contains filtered or unexported fields
}

Acknowledges accepted evidence without granting a separate session authority. Identical retries do not extend the evidence's original acceptance time.

func (*ReportProviderReadinessResponse) Descriptor deprecated 

func (*ReportProviderReadinessResponse) Descriptor() ([]byte, []int)

Deprecated: Use ReportProviderReadinessResponse.ProtoReflect.Descriptor instead.

func (*ReportProviderReadinessResponse) GetAcceptedSequence 

func (x *ReportProviderReadinessResponse) GetAcceptedSequence() uint64

func (*ReportProviderReadinessResponse) GetObservationTtl 

func (x *ReportProviderReadinessResponse) GetObservationTtl() *durationpb.Duration

func (*ReportProviderReadinessResponse) GetReportInterval 

func (x *ReportProviderReadinessResponse) GetReportInterval() *durationpb.Duration

func (*ReportProviderReadinessResponse) ProtoMessage 

func (*ReportProviderReadinessResponse) ProtoMessage()

func (*ReportProviderReadinessResponse) ProtoReflect 

func (x *ReportProviderReadinessResponse) ProtoReflect() protoreflect.Message

func (*ReportProviderReadinessResponse) Reset 

func (x *ReportProviderReadinessResponse) Reset()

func (*ReportProviderReadinessResponse) String 

func (x *ReportProviderReadinessResponse) String() string

type ReportSandboxConfigurationRequest 

type ReportSandboxConfigurationRequest struct {
	SandboxId string                         `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	Admission *SandboxConfigurationAdmission `protobuf:"bytes,2,opt,name=admission,proto3" json:"admission,omitempty"`
	// Pending registration replaces only this previously observed instance.
	ExpectedInstanceId string `protobuf:"bytes,3,opt,name=expected_instance_id,json=expectedInstanceId,proto3" json:"expected_instance_id,omitempty"`
	// contains filtered or unexported fields
}

func (*ReportSandboxConfigurationRequest) Descriptor deprecated 

func (*ReportSandboxConfigurationRequest) Descriptor() ([]byte, []int)

Deprecated: Use ReportSandboxConfigurationRequest.ProtoReflect.Descriptor instead.

func (*ReportSandboxConfigurationRequest) GetAdmission 

func (x *ReportSandboxConfigurationRequest) GetAdmission() *SandboxConfigurationAdmission

func (*ReportSandboxConfigurationRequest) GetExpectedInstanceId 

func (x *ReportSandboxConfigurationRequest) GetExpectedInstanceId() string

func (*ReportSandboxConfigurationRequest) GetSandboxId 

func (x *ReportSandboxConfigurationRequest) GetSandboxId() string

func (*ReportSandboxConfigurationRequest) ProtoMessage 

func (*ReportSandboxConfigurationRequest) ProtoMessage()

func (*ReportSandboxConfigurationRequest) ProtoReflect 

func (x *ReportSandboxConfigurationRequest) ProtoReflect() protoreflect.Message

func (*ReportSandboxConfigurationRequest) Reset 

func (x *ReportSandboxConfigurationRequest) Reset()

func (*ReportSandboxConfigurationRequest) String 

func (x *ReportSandboxConfigurationRequest) String() string

type ReportSandboxConfigurationResponse 

type ReportSandboxConfigurationResponse struct {
	// contains filtered or unexported fields
}

func (*ReportSandboxConfigurationResponse) Descriptor deprecated 

func (*ReportSandboxConfigurationResponse) Descriptor() ([]byte, []int)

Deprecated: Use ReportSandboxConfigurationResponse.ProtoReflect.Descriptor instead.

func (*ReportSandboxConfigurationResponse) ProtoMessage 

func (*ReportSandboxConfigurationResponse) ProtoMessage()

func (*ReportSandboxConfigurationResponse) ProtoReflect 

func (x *ReportSandboxConfigurationResponse) ProtoReflect() protoreflect.Message

func (*ReportSandboxConfigurationResponse) Reset 

func (x *ReportSandboxConfigurationResponse) Reset()

func (*ReportSandboxConfigurationResponse) String 

func (x *ReportSandboxConfigurationResponse) String() string

type ResourceCapabilities 

type ResourceCapabilities struct {
	Cpu    *CpuResourceCapabilities    `protobuf:"bytes,1,opt,name=cpu,proto3" json:"cpu,omitempty"`
	Memory *MemoryResourceCapabilities `protobuf:"bytes,2,opt,name=memory,proto3" json:"memory,omitempty"`
	Gpu    *GpuResourceCapabilities    `protobuf:"bytes,3,opt,name=gpu,proto3" json:"gpu,omitempty"`
	// contains filtered or unexported fields
}

Static portable resource request forms reported by a compute driver. An omitted domain means the driver does not report that domain.

func (*ResourceCapabilities) Descriptor deprecated 

func (*ResourceCapabilities) Descriptor() ([]byte, []int)

Deprecated: Use ResourceCapabilities.ProtoReflect.Descriptor instead.

func (*ResourceCapabilities) GetCpu 

func (x *ResourceCapabilities) GetCpu() *CpuResourceCapabilities

func (*ResourceCapabilities) GetGpu 

func (x *ResourceCapabilities) GetGpu() *GpuResourceCapabilities

func (*ResourceCapabilities) GetMemory 

func (x *ResourceCapabilities) GetMemory() *MemoryResourceCapabilities

func (*ResourceCapabilities) ProtoMessage 

func (*ResourceCapabilities) ProtoMessage()

func (*ResourceCapabilities) ProtoReflect 

func (x *ResourceCapabilities) ProtoReflect() protoreflect.Message

func (*ResourceCapabilities) Reset 

func (x *ResourceCapabilities) Reset()

func (*ResourceCapabilities) String 

func (x *ResourceCapabilities) String() string

type ResourceRequirements 

type ResourceRequirements struct {

	// GPU requirements for the sandbox. Presence indicates a GPU request.
	Gpu *GpuResourceRequirements `protobuf:"bytes,1,opt,name=gpu,proto3" json:"gpu,omitempty"`
	// contains filtered or unexported fields
}

func (*ResourceRequirements) Descriptor deprecated 

func (*ResourceRequirements) Descriptor() ([]byte, []int)

Deprecated: Use ResourceRequirements.ProtoReflect.Descriptor instead.

func (*ResourceRequirements) GetGpu 

func (x *ResourceRequirements) GetGpu() *GpuResourceRequirements

func (*ResourceRequirements) ProtoMessage 

func (*ResourceRequirements) ProtoMessage()

func (*ResourceRequirements) ProtoReflect 

func (x *ResourceRequirements) ProtoReflect() protoreflect.Message

func (*ResourceRequirements) Reset 

func (x *ResourceRequirements) Reset()

func (*ResourceRequirements) String 

func (x *ResourceRequirements) String() string

type ResumeSandboxRequest 

type ResumeSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// If true, the isolation backend may boot the workload cleanly when it
	// cannot restore the retained memory state. If false, resume fails instead.
	RestartIfRestoreFails bool `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}

Resume sandbox request.

func (*ResumeSandboxRequest) Descriptor deprecated 

func (*ResumeSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use ResumeSandboxRequest.ProtoReflect.Descriptor instead.

func (*ResumeSandboxRequest) GetName 

func (x *ResumeSandboxRequest) GetName() string

func (*ResumeSandboxRequest) GetRestartIfRestoreFails 

func (x *ResumeSandboxRequest) GetRestartIfRestoreFails() bool

func (*ResumeSandboxRequest) GetWorkspaceScope 

func (x *ResumeSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*ResumeSandboxRequest) ProtoMessage 

func (*ResumeSandboxRequest) ProtoMessage()

func (*ResumeSandboxRequest) ProtoReflect 

func (x *ResumeSandboxRequest) ProtoReflect() protoreflect.Message

func (*ResumeSandboxRequest) Reset 

func (x *ResumeSandboxRequest) Reset()

func (*ResumeSandboxRequest) String 

func (x *ResumeSandboxRequest) String() string

type RevokeSshSessionRequest 

type RevokeSshSessionRequest struct {

	// Session token to revoke.
	Token string `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	// A missing token is NOT_FOUND unless this is true. Revoking an existing,
	// already-revoked session succeeds with COMPLETED.
	AllowMissing bool `protobuf:"varint,2,opt,name=allow_missing,json=allowMissing,proto3" json:"allow_missing,omitempty"`
	// contains filtered or unexported fields
}

Revoke SSH session request.

func (*RevokeSshSessionRequest) Descriptor deprecated 

func (*RevokeSshSessionRequest) Descriptor() ([]byte, []int)

Deprecated: Use RevokeSshSessionRequest.ProtoReflect.Descriptor instead.

func (*RevokeSshSessionRequest) GetAllowMissing 

func (x *RevokeSshSessionRequest) GetAllowMissing() bool

func (*RevokeSshSessionRequest) GetToken 

func (x *RevokeSshSessionRequest) GetToken() string

func (*RevokeSshSessionRequest) ProtoMessage 

func (*RevokeSshSessionRequest) ProtoMessage()

func (*RevokeSshSessionRequest) ProtoReflect 

func (x *RevokeSshSessionRequest) ProtoReflect() protoreflect.Message

func (*RevokeSshSessionRequest) Reset 

func (x *RevokeSshSessionRequest) Reset()

func (*RevokeSshSessionRequest) String 

func (x *RevokeSshSessionRequest) String() string

type RevokeSshSessionResponse 

type RevokeSshSessionResponse struct {
	Outcome DeletionOutcome `protobuf:"varint,2,opt,name=outcome,proto3,enum=openshell.v1.DeletionOutcome" json:"outcome,omitempty"`
	// contains filtered or unexported fields
}

Revoke SSH session response.

func (*RevokeSshSessionResponse) Descriptor deprecated 

func (*RevokeSshSessionResponse) Descriptor() ([]byte, []int)

Deprecated: Use RevokeSshSessionResponse.ProtoReflect.Descriptor instead.

func (*RevokeSshSessionResponse) GetOutcome 

func (x *RevokeSshSessionResponse) GetOutcome() DeletionOutcome

func (*RevokeSshSessionResponse) ProtoMessage 

func (*RevokeSshSessionResponse) ProtoMessage()

func (*RevokeSshSessionResponse) ProtoReflect 

func (x *RevokeSshSessionResponse) ProtoReflect() protoreflect.Message

func (*RevokeSshSessionResponse) Reset 

func (x *RevokeSshSessionResponse) Reset()

func (*RevokeSshSessionResponse) String 

func (x *RevokeSshSessionResponse) String() string

type RotateProviderCredentialRequest 

type RotateProviderCredentialRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Provider       string                         `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	CredentialKey  string                         `protobuf:"bytes,2,opt,name=credential_key,json=credentialKey,proto3" json:"credential_key,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

func (*RotateProviderCredentialRequest) Descriptor deprecated 

func (*RotateProviderCredentialRequest) Descriptor() ([]byte, []int)

Deprecated: Use RotateProviderCredentialRequest.ProtoReflect.Descriptor instead.

func (*RotateProviderCredentialRequest) GetCredentialKey 

func (x *RotateProviderCredentialRequest) GetCredentialKey() string

func (*RotateProviderCredentialRequest) GetProvider 

func (x *RotateProviderCredentialRequest) GetProvider() string

func (*RotateProviderCredentialRequest) GetRequestId 

func (x *RotateProviderCredentialRequest) GetRequestId() string

func (*RotateProviderCredentialRequest) GetWorkspaceScope 

func (x *RotateProviderCredentialRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*RotateProviderCredentialRequest) ProtoMessage 

func (*RotateProviderCredentialRequest) ProtoMessage()

func (*RotateProviderCredentialRequest) ProtoReflect 

func (x *RotateProviderCredentialRequest) ProtoReflect() protoreflect.Message

func (*RotateProviderCredentialRequest) Reset 

func (x *RotateProviderCredentialRequest) Reset()

func (*RotateProviderCredentialRequest) String 

func (x *RotateProviderCredentialRequest) String() string

type RotateProviderCredentialResponse 

type RotateProviderCredentialResponse struct {
	Status *ProviderCredentialRefreshStatus `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

func (*RotateProviderCredentialResponse) Descriptor deprecated 

func (*RotateProviderCredentialResponse) Descriptor() ([]byte, []int)

Deprecated: Use RotateProviderCredentialResponse.ProtoReflect.Descriptor instead.

func (*RotateProviderCredentialResponse) GetStatus 

func (x *RotateProviderCredentialResponse) GetStatus() *ProviderCredentialRefreshStatus

func (*RotateProviderCredentialResponse) ProtoMessage 

func (*RotateProviderCredentialResponse) ProtoMessage()

func (*RotateProviderCredentialResponse) ProtoReflect 

func (x *RotateProviderCredentialResponse) ProtoReflect() protoreflect.Message

func (*RotateProviderCredentialResponse) Reset 

func (x *RotateProviderCredentialResponse) Reset()

func (*RotateProviderCredentialResponse) String 

func (x *RotateProviderCredentialResponse) String() string

type Sandbox 

type Sandbox struct {

	// Kubernetes-style metadata (id, name, labels, timestamps, resource version).
	Metadata *datamodelv1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// Desired sandbox configuration submitted through the API.
	Spec *SandboxSpec `protobuf:"bytes,2,opt,name=spec,proto3" json:"spec,omitempty"`
	// Latest user-facing observed status derived by the gateway.
	Status *SandboxStatus `protobuf:"bytes,3,opt,name=status,proto3" json:"status,omitempty"`
	// Read-only SSH host identity in OpenSSH SHA256:<base64> form. Stable for
	// this sandbox's lifetime, including runtime restarts. Empty on legacy
	// runtimes that do not provide a gateway-managed SSH identity.
	HostKeyFingerprint string `protobuf:"bytes,6,opt,name=host_key_fingerprint,json=hostKeyFingerprint,proto3" json:"host_key_fingerprint,omitempty"`
	// Read-only provenance for sandboxes created from a reusable workload template.
	CreatedFromWorkloadTemplate *SandboxWorkloadTemplateProvenance `` /* 147-byte string literal not displayed */
	// contains filtered or unexported fields
}

Public sandbox resource exposed by the OpenShell API.

This is the canonical gateway-owned view of a sandbox. It merges user intent (`spec`) with gateway-managed metadata and status derived from internal compute-driver observations.

Note: The `namespace` field has been removed from the public API. It remains in the internal `DriverSandbox` message as a compute-driver implementation detail.

func (*Sandbox) Descriptor deprecated 

func (*Sandbox) Descriptor() ([]byte, []int)

Deprecated: Use Sandbox.ProtoReflect.Descriptor instead.

func (*Sandbox) GetCreatedFromWorkloadTemplate 

func (x *Sandbox) GetCreatedFromWorkloadTemplate() *SandboxWorkloadTemplateProvenance

func (*Sandbox) GetHostKeyFingerprint 

func (x *Sandbox) GetHostKeyFingerprint() string

func (*Sandbox) GetMetadata 

func (x *Sandbox) GetMetadata() *datamodelv1.ObjectMeta

func (*Sandbox) GetSpec 

func (x *Sandbox) GetSpec() *SandboxSpec

func (*Sandbox) GetStatus 

func (x *Sandbox) GetStatus() *SandboxStatus

func (*Sandbox) ProtoMessage 

func (*Sandbox) ProtoMessage()

func (*Sandbox) ProtoReflect 

func (x *Sandbox) ProtoReflect() protoreflect.Message

func (*Sandbox) Reset 

func (x *Sandbox) Reset()

func (*Sandbox) String 

func (x *Sandbox) String() string

type SandboxCommandUpdate added in v0.1.7 

type SandboxCommandUpdate struct {
	Argv []string `protobuf:"bytes,1,rep,name=argv,proto3" json:"argv,omitempty"`
	// contains filtered or unexported fields
}

Presence selects replacement, including an explicitly empty list.

func (*SandboxCommandUpdate) Descriptor deprecated added in v0.1.7 

func (*SandboxCommandUpdate) Descriptor() ([]byte, []int)

Deprecated: Use SandboxCommandUpdate.ProtoReflect.Descriptor instead.

func (*SandboxCommandUpdate) GetArgv added in v0.1.7 

func (x *SandboxCommandUpdate) GetArgv() []string

func (*SandboxCommandUpdate) ProtoMessage added in v0.1.7 

func (*SandboxCommandUpdate) ProtoMessage()

func (*SandboxCommandUpdate) ProtoReflect added in v0.1.7 

func (x *SandboxCommandUpdate) ProtoReflect() protoreflect.Message

func (*SandboxCommandUpdate) Reset added in v0.1.7 

func (x *SandboxCommandUpdate) Reset()

func (*SandboxCommandUpdate) String added in v0.1.7 

func (x *SandboxCommandUpdate) String() string

type SandboxCondition 

type SandboxCondition struct {

	// Condition class, typically mirroring the underlying platform condition type.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// Condition status value such as `True`, `False`, or `Unknown`.
	Status string `protobuf:"bytes,2,opt,name=status,proto3" json:"status,omitempty"`
	// Short machine-readable reason associated with the condition.
	Reason string `protobuf:"bytes,3,opt,name=reason,proto3" json:"reason,omitempty"`
	// Human-readable condition message.
	Message string `protobuf:"bytes,4,opt,name=message,proto3" json:"message,omitempty"`
	// Timestamp reported by the condition owner for the last transition.
	TransitionTime *timestamppb.Timestamp `protobuf:"bytes,105,opt,name=transition_time,json=transitionTime,proto3" json:"transition_time,omitempty"`
	// contains filtered or unexported fields
}

User-facing sandbox condition derived from platform or gateway observations.

func (*SandboxCondition) Descriptor deprecated 

func (*SandboxCondition) Descriptor() ([]byte, []int)

Deprecated: Use SandboxCondition.ProtoReflect.Descriptor instead.

func (*SandboxCondition) GetMessage 

func (x *SandboxCondition) GetMessage() string

func (*SandboxCondition) GetReason 

func (x *SandboxCondition) GetReason() string

func (*SandboxCondition) GetStatus 

func (x *SandboxCondition) GetStatus() string

func (*SandboxCondition) GetTransitionTime 

func (x *SandboxCondition) GetTransitionTime() *timestamppb.Timestamp

func (*SandboxCondition) GetType 

func (x *SandboxCondition) GetType() string

func (*SandboxCondition) ProtoMessage 

func (*SandboxCondition) ProtoMessage()

func (*SandboxCondition) ProtoReflect 

func (x *SandboxCondition) ProtoReflect() protoreflect.Message

func (*SandboxCondition) Reset 

func (x *SandboxCondition) Reset()

func (*SandboxCondition) String 

func (x *SandboxCondition) String() string

type SandboxConfigRevision 

type SandboxConfigRevision struct {
	ConfigRevision      uint64                 `protobuf:"varint,1,opt,name=config_revision,json=configRevision,proto3" json:"config_revision,omitempty"`
	PolicyVersion       uint32                 `protobuf:"varint,2,opt,name=policy_version,json=policyVersion,proto3" json:"policy_version,omitempty"`
	PolicySource        sandboxv1.PolicySource `` /* 137-byte string literal not displayed */
	GlobalPolicyVersion uint32                 `protobuf:"varint,4,opt,name=global_policy_version,json=globalPolicyVersion,proto3" json:"global_policy_version,omitempty"`
	// Monotonic revision of the sandbox-scoped settings row. This disambiguates
	// setting operations whose effective config fingerprint is equality-only.
	SettingsRevision uint64 `protobuf:"varint,5,opt,name=settings_revision,json=settingsRevision,proto3" json:"settings_revision,omitempty"`
	// contains filtered or unexported fields
}

Identity needed to correlate effective sandbox configuration with the policy-history row whose apply status the gateway records.

func (*SandboxConfigRevision) Descriptor deprecated 

func (*SandboxConfigRevision) Descriptor() ([]byte, []int)

Deprecated: Use SandboxConfigRevision.ProtoReflect.Descriptor instead.

func (*SandboxConfigRevision) GetConfigRevision 

func (x *SandboxConfigRevision) GetConfigRevision() uint64

func (*SandboxConfigRevision) GetGlobalPolicyVersion 

func (x *SandboxConfigRevision) GetGlobalPolicyVersion() uint32

func (*SandboxConfigRevision) GetPolicySource 

func (x *SandboxConfigRevision) GetPolicySource() sandboxv1.PolicySource

func (*SandboxConfigRevision) GetPolicyVersion 

func (x *SandboxConfigRevision) GetPolicyVersion() uint32

func (*SandboxConfigRevision) GetSettingsRevision 

func (x *SandboxConfigRevision) GetSettingsRevision() uint64

func (*SandboxConfigRevision) ProtoMessage 

func (*SandboxConfigRevision) ProtoMessage()

func (*SandboxConfigRevision) ProtoReflect 

func (x *SandboxConfigRevision) ProtoReflect() protoreflect.Message

func (*SandboxConfigRevision) Reset 

func (x *SandboxConfigRevision) Reset()

func (*SandboxConfigRevision) String 

func (x *SandboxConfigRevision) String() string

type SandboxConfigurationAdmission 

type SandboxConfigurationAdmission struct {
	InstanceId          string                      `protobuf:"bytes,1,opt,name=instance_id,json=instanceId,proto3" json:"instance_id,omitempty"`
	State               ConfigurationAdmissionState `protobuf:"varint,2,opt,name=state,proto3,enum=openshell.v1.ConfigurationAdmissionState" json:"state,omitempty"`
	PolicyVersion       uint32                      `protobuf:"varint,3,opt,name=policy_version,json=policyVersion,proto3" json:"policy_version,omitempty"`
	PolicyHash          string                      `protobuf:"bytes,4,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	ConfigRevision      uint64                      `protobuf:"varint,5,opt,name=config_revision,json=configRevision,proto3" json:"config_revision,omitempty"`
	ProviderEnvRevision uint64                      `protobuf:"varint,6,opt,name=provider_env_revision,json=providerEnvRevision,proto3" json:"provider_env_revision,omitempty"`
	Error               string                      `protobuf:"bytes,7,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxConfigurationAdmission) Descriptor deprecated 

func (*SandboxConfigurationAdmission) Descriptor() ([]byte, []int)

Deprecated: Use SandboxConfigurationAdmission.ProtoReflect.Descriptor instead.

func (*SandboxConfigurationAdmission) GetConfigRevision 

func (x *SandboxConfigurationAdmission) GetConfigRevision() uint64

func (*SandboxConfigurationAdmission) GetError 

func (x *SandboxConfigurationAdmission) GetError() string

func (*SandboxConfigurationAdmission) GetInstanceId 

func (x *SandboxConfigurationAdmission) GetInstanceId() string

func (*SandboxConfigurationAdmission) GetPolicyHash 

func (x *SandboxConfigurationAdmission) GetPolicyHash() string

func (*SandboxConfigurationAdmission) GetPolicyVersion 

func (x *SandboxConfigurationAdmission) GetPolicyVersion() uint32

func (*SandboxConfigurationAdmission) GetProviderEnvRevision 

func (x *SandboxConfigurationAdmission) GetProviderEnvRevision() uint64

func (*SandboxConfigurationAdmission) GetState 

func (x *SandboxConfigurationAdmission) GetState() ConfigurationAdmissionState

func (*SandboxConfigurationAdmission) ProtoMessage 

func (*SandboxConfigurationAdmission) ProtoMessage()

func (*SandboxConfigurationAdmission) ProtoReflect 

func (x *SandboxConfigurationAdmission) ProtoReflect() protoreflect.Message

func (*SandboxConfigurationAdmission) Reset 

func (x *SandboxConfigurationAdmission) Reset()

func (*SandboxConfigurationAdmission) String 

func (x *SandboxConfigurationAdmission) String() string

type SandboxLogLine 

type SandboxLogLine struct {
	SandboxId string                 `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	EventTime *timestamppb.Timestamp `protobuf:"bytes,102,opt,name=event_time,json=eventTime,proto3" json:"event_time,omitempty"`
	Level     string                 `protobuf:"bytes,3,opt,name=level,proto3" json:"level,omitempty"`
	Target    string                 `protobuf:"bytes,4,opt,name=target,proto3" json:"target,omitempty"`
	Message   string                 `protobuf:"bytes,5,opt,name=message,proto3" json:"message,omitempty"`
	// Log source: "gateway" (server-side) or "sandbox" (supervisor).
	// Empty is treated as "gateway" for backward compatibility.
	Source string `protobuf:"bytes,6,opt,name=source,proto3" json:"source,omitempty"`
	// Structured key-value fields from the tracing event (e.g. dst_host, action).
	Fields map[string]string `` /* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

Log line correlated to a sandbox.

func (*SandboxLogLine) Descriptor deprecated 

func (*SandboxLogLine) Descriptor() ([]byte, []int)

Deprecated: Use SandboxLogLine.ProtoReflect.Descriptor instead.

func (*SandboxLogLine) GetEventTime 

func (x *SandboxLogLine) GetEventTime() *timestamppb.Timestamp

func (*SandboxLogLine) GetFields 

func (x *SandboxLogLine) GetFields() map[string]string

func (*SandboxLogLine) GetLevel 

func (x *SandboxLogLine) GetLevel() string

func (*SandboxLogLine) GetMessage 

func (x *SandboxLogLine) GetMessage() string

func (*SandboxLogLine) GetSandboxId 

func (x *SandboxLogLine) GetSandboxId() string

func (*SandboxLogLine) GetSource 

func (x *SandboxLogLine) GetSource() string

func (*SandboxLogLine) GetTarget 

func (x *SandboxLogLine) GetTarget() string

func (*SandboxLogLine) ProtoMessage 

func (*SandboxLogLine) ProtoMessage()

func (*SandboxLogLine) ProtoReflect 

func (x *SandboxLogLine) ProtoReflect() protoreflect.Message

func (*SandboxLogLine) Reset 

func (x *SandboxLogLine) Reset()

func (*SandboxLogLine) String 

func (x *SandboxLogLine) String() string

type SandboxMapUpdate added in v0.1.7 

type SandboxMapUpdate struct {
	Values map[string]string `` /* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

Presence selects replacement, including an explicitly empty map.

func (*SandboxMapUpdate) Descriptor deprecated added in v0.1.7 

func (*SandboxMapUpdate) Descriptor() ([]byte, []int)

Deprecated: Use SandboxMapUpdate.ProtoReflect.Descriptor instead.

func (*SandboxMapUpdate) GetValues added in v0.1.7 

func (x *SandboxMapUpdate) GetValues() map[string]string

func (*SandboxMapUpdate) ProtoMessage added in v0.1.7 

func (*SandboxMapUpdate) ProtoMessage()

func (*SandboxMapUpdate) ProtoReflect added in v0.1.7 

func (x *SandboxMapUpdate) ProtoReflect() protoreflect.Message

func (*SandboxMapUpdate) Reset added in v0.1.7 

func (x *SandboxMapUpdate) Reset()

func (*SandboxMapUpdate) String added in v0.1.7 

func (x *SandboxMapUpdate) String() string

type SandboxPhase 

type SandboxPhase int32

High-level sandbox lifecycle phase derived by the gateway.

Clients should rely on this normalized lifecycle summary for readiness and deletion decisions instead of interpreting raw conditions. 

const (
	SandboxPhase_SANDBOX_PHASE_UNSPECIFIED  SandboxPhase = 0
	SandboxPhase_SANDBOX_PHASE_PROVISIONING SandboxPhase = 1
	SandboxPhase_SANDBOX_PHASE_READY        SandboxPhase = 2
	SandboxPhase_SANDBOX_PHASE_ERROR        SandboxPhase = 3
	SandboxPhase_SANDBOX_PHASE_DELETING     SandboxPhase = 4
	SandboxPhase_SANDBOX_PHASE_UNKNOWN      SandboxPhase = 5
	SandboxPhase_SANDBOX_PHASE_STOPPING     SandboxPhase = 6
	SandboxPhase_SANDBOX_PHASE_STOPPED      SandboxPhase = 7
	SandboxPhase_SANDBOX_PHASE_STARTING     SandboxPhase = 8
	// The canonical main process exited successfully and its result is final.
	SandboxPhase_SANDBOX_PHASE_COMPLETED SandboxPhase = 9
	// The gateway requested suspension and the driver has not confirmed it.
	SandboxPhase_SANDBOX_PHASE_SUSPENDING SandboxPhase = 11
	// The workload is frozen and its memory state is retained by the isolation
	// backend. ResumeSandbox restores it; StartSandbox discards it.
	SandboxPhase_SANDBOX_PHASE_SUSPENDED SandboxPhase = 12
)

func (SandboxPhase) Descriptor 

func (SandboxPhase) Descriptor() protoreflect.EnumDescriptor

func (SandboxPhase) Enum 

func (x SandboxPhase) Enum() *SandboxPhase

func (SandboxPhase) EnumDescriptor deprecated 

func (SandboxPhase) EnumDescriptor() ([]byte, []int)

Deprecated: Use SandboxPhase.Descriptor instead.

func (SandboxPhase) Number 

func (x SandboxPhase) Number() protoreflect.EnumNumber

func (SandboxPhase) String 

func (x SandboxPhase) String() string

func (SandboxPhase) Type 

func (SandboxPhase) Type() protoreflect.EnumType

type SandboxPolicyRevision 

type SandboxPolicyRevision struct {

	// Policy version (monotonically increasing per sandbox).
	Version uint32 `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	// SHA-256 hash of the canonical serialized policy payload. Empty in a
	// ListSandboxPolicies projection when the stored payload is invalid under
	// the current schema and therefore has no trusted canonical identity.
	PolicyHash string `protobuf:"bytes,2,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// Load status of this revision. ListSandboxPolicies reports FAILED when a
	// stored historical payload is invalid under the current schema, regardless
	// of its persisted sandbox load status.
	Status PolicyStatus `protobuf:"varint,3,opt,name=status,proto3,enum=openshell.v1.PolicyStatus" json:"status,omitempty"`
	// Sandbox load error, or the schema-validation diagnostic for an invalid
	// historical row returned by ListSandboxPolicies.
	LoadError string `protobuf:"bytes,4,opt,name=load_error,json=loadError,proto3" json:"load_error,omitempty"`
	// Time when this revision was created.
	CreatedTime *timestamppb.Timestamp `protobuf:"bytes,105,opt,name=created_time,json=createdTime,proto3" json:"created_time,omitempty"`
	// Time when this revision was loaded by the sandbox. Absent if not loaded.
	LoadedTime *timestamppb.Timestamp `protobuf:"bytes,106,opt,name=loaded_time,json=loadedTime,proto3" json:"loaded_time,omitempty"`
	// The full policy (only populated when explicitly requested).
	Policy *sandboxv1.SandboxPolicy `protobuf:"bytes,7,opt,name=policy,proto3" json:"policy,omitempty"`
	// Immutable provenance supplied with this policy revision.
	Provenance map[string]string `` /* 147-byte string literal not displayed */
	// contains filtered or unexported fields
}

A versioned policy revision with metadata.

func (*SandboxPolicyRevision) Descriptor deprecated 

func (*SandboxPolicyRevision) Descriptor() ([]byte, []int)

Deprecated: Use SandboxPolicyRevision.ProtoReflect.Descriptor instead.

func (*SandboxPolicyRevision) GetCreatedTime 

func (x *SandboxPolicyRevision) GetCreatedTime() *timestamppb.Timestamp

func (*SandboxPolicyRevision) GetLoadError 

func (x *SandboxPolicyRevision) GetLoadError() string

func (*SandboxPolicyRevision) GetLoadedTime 

func (x *SandboxPolicyRevision) GetLoadedTime() *timestamppb.Timestamp

func (*SandboxPolicyRevision) GetPolicy 

func (x *SandboxPolicyRevision) GetPolicy() *sandboxv1.SandboxPolicy

func (*SandboxPolicyRevision) GetPolicyHash 

func (x *SandboxPolicyRevision) GetPolicyHash() string

func (*SandboxPolicyRevision) GetProvenance 

func (x *SandboxPolicyRevision) GetProvenance() map[string]string

func (*SandboxPolicyRevision) GetStatus 

func (x *SandboxPolicyRevision) GetStatus() PolicyStatus

func (*SandboxPolicyRevision) GetVersion 

func (x *SandboxPolicyRevision) GetVersion() uint32

func (*SandboxPolicyRevision) ProtoMessage 

func (*SandboxPolicyRevision) ProtoMessage()

func (*SandboxPolicyRevision) ProtoReflect 

func (x *SandboxPolicyRevision) ProtoReflect() protoreflect.Message

func (*SandboxPolicyRevision) Reset 

func (x *SandboxPolicyRevision) Reset()

func (*SandboxPolicyRevision) String 

func (x *SandboxPolicyRevision) String() string

type SandboxProvisioning 

type SandboxProvisioning struct {
	AttemptId               string                 `protobuf:"bytes,1,opt,name=attempt_id,json=attemptId,proto3" json:"attempt_id,omitempty"`
	ConfigurationChangeId   string                 `` /* 126-byte string literal not displayed */
	ConfigurationChangeTime *timestamppb.Timestamp `` /* 132-byte string literal not displayed */
	FirstRejectionTime      *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=first_rejection_time,json=firstRejectionTime,proto3" json:"first_rejection_time,omitempty"`
	// Active preparation or admission-repair deadline. Absent after Ready/timeout.
	Deadline    *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=deadline,proto3" json:"deadline,omitempty"`
	TimeoutTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=timeout_time,json=timeoutTime,proto3" json:"timeout_time,omitempty"`
	// Set only after both supervisor and workload compute have been reclaimed.
	CleanupCompletedTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=cleanup_completed_time,json=cleanupCompletedTime,proto3" json:"cleanup_completed_time,omitempty"`
	// A safe gateway-authored diagnostic; never a raw driver error.
	CleanupError string `protobuf:"bytes,8,opt,name=cleanup_error,json=cleanupError,proto3" json:"cleanup_error,omitempty"`
	// Durable backoff for interrupted or failed reclamation.
	CleanupRetryTime *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=cleanup_retry_time,json=cleanupRetryTime,proto3" json:"cleanup_retry_time,omitempty"`
	// Attachment edits have their own durable clock; status writes do not change it.
	AttachmentChangeId   string                 `protobuf:"bytes,10,opt,name=attachment_change_id,json=attachmentChangeId,proto3" json:"attachment_change_id,omitempty"`
	AttachmentChangeTime *timestamppb.Timestamp `protobuf:"bytes,11,opt,name=attachment_change_time,json=attachmentChangeTime,proto3" json:"attachment_change_time,omitempty"`
	// Absolute ceiling for image preparation and initial supervisor startup.
	// Set once per new attempt; progress, configuration writes, and restarts
	// cannot extend it. Absent on attempts created before preparation timing.
	PreparationDeadline *timestamppb.Timestamp `protobuf:"bytes,12,opt,name=preparation_deadline,json=preparationDeadline,proto3" json:"preparation_deadline,omitempty"`
	// First authenticated supervisor configuration report for this attempt.
	// Starts the admission repair window. Absent while preparing, including
	// after a preparation timeout. Duplicate reports never change this value.
	AdmissionStartTime *timestamppb.Timestamp `protobuf:"bytes,13,opt,name=admission_start_time,json=admissionStartTime,proto3" json:"admission_start_time,omitempty"`
	// An owned driver create/start future is still pending. Claimed before
	// dispatch and cleared on its actual success or error response. Monitor
	// interruption, owner loss, and StopSandbox/NotFound do not clear it.
	// While set, cleanup cannot complete and retry/deletion remain blocked.
	// This does not strengthen a driver's transport-error settlement contract.
	DriverOperationPending bool `` /* 131-byte string literal not displayed */
	// Unique for each claimed driver operation, including recovery and automatic
	// restart. Retained after settlement to reject delayed callbacks from an
	// earlier operation on the same attempt and runtime generation.
	DriverOperationId string `protobuf:"bytes,15,opt,name=driver_operation_id,json=driverOperationId,proto3" json:"driver_operation_id,omitempty"`
	// contains filtered or unexported fields
}

Durable provisioning attempt, independent of supervisor registration and polling.

func (*SandboxProvisioning) Descriptor deprecated 

func (*SandboxProvisioning) Descriptor() ([]byte, []int)

Deprecated: Use SandboxProvisioning.ProtoReflect.Descriptor instead.

func (*SandboxProvisioning) GetAdmissionStartTime 

func (x *SandboxProvisioning) GetAdmissionStartTime() *timestamppb.Timestamp

func (*SandboxProvisioning) GetAttachmentChangeId 

func (x *SandboxProvisioning) GetAttachmentChangeId() string

func (*SandboxProvisioning) GetAttachmentChangeTime 

func (x *SandboxProvisioning) GetAttachmentChangeTime() *timestamppb.Timestamp

func (*SandboxProvisioning) GetAttemptId 

func (x *SandboxProvisioning) GetAttemptId() string

func (*SandboxProvisioning) GetCleanupCompletedTime 

func (x *SandboxProvisioning) GetCleanupCompletedTime() *timestamppb.Timestamp

func (*SandboxProvisioning) GetCleanupError 

func (x *SandboxProvisioning) GetCleanupError() string

func (*SandboxProvisioning) GetCleanupRetryTime 

func (x *SandboxProvisioning) GetCleanupRetryTime() *timestamppb.Timestamp

func (*SandboxProvisioning) GetConfigurationChangeId 

func (x *SandboxProvisioning) GetConfigurationChangeId() string

func (*SandboxProvisioning) GetConfigurationChangeTime 

func (x *SandboxProvisioning) GetConfigurationChangeTime() *timestamppb.Timestamp

func (*SandboxProvisioning) GetDeadline 

func (x *SandboxProvisioning) GetDeadline() *timestamppb.Timestamp

func (*SandboxProvisioning) GetDriverOperationId 

func (x *SandboxProvisioning) GetDriverOperationId() string

func (*SandboxProvisioning) GetDriverOperationPending 

func (x *SandboxProvisioning) GetDriverOperationPending() bool

func (*SandboxProvisioning) GetFirstRejectionTime 

func (x *SandboxProvisioning) GetFirstRejectionTime() *timestamppb.Timestamp

func (*SandboxProvisioning) GetPreparationDeadline 

func (x *SandboxProvisioning) GetPreparationDeadline() *timestamppb.Timestamp

func (*SandboxProvisioning) GetTimeoutTime 

func (x *SandboxProvisioning) GetTimeoutTime() *timestamppb.Timestamp

func (*SandboxProvisioning) ProtoMessage 

func (*SandboxProvisioning) ProtoMessage()

func (*SandboxProvisioning) ProtoReflect 

func (x *SandboxProvisioning) ProtoReflect() protoreflect.Message

func (*SandboxProvisioning) Reset 

func (x *SandboxProvisioning) Reset()

func (*SandboxProvisioning) String 

func (x *SandboxProvisioning) String() string

type SandboxResources 

type SandboxResources struct {

	// Portable CPU quantity, for example "500m" or "2".
	Cpu string `protobuf:"bytes,1,opt,name=cpu,proto3" json:"cpu,omitempty"`
	// Portable memory quantity, for example "512Mi" or "2Gi".
	Memory string `protobuf:"bytes,2,opt,name=memory,proto3" json:"memory,omitempty"`
	// GPU requirements for the sandbox workload. Presence indicates a GPU
	// request. When count is omitted, the request uses the selected driver's
	// default GPU assignment behavior.
	Gpu *GpuResourceRequirements `protobuf:"bytes,3,opt,name=gpu,proto3" json:"gpu,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxResources) Descriptor deprecated 

func (*SandboxResources) Descriptor() ([]byte, []int)

Deprecated: Use SandboxResources.ProtoReflect.Descriptor instead.

func (*SandboxResources) GetCpu 

func (x *SandboxResources) GetCpu() string

func (*SandboxResources) GetGpu 

func (x *SandboxResources) GetGpu() *GpuResourceRequirements

func (*SandboxResources) GetMemory 

func (x *SandboxResources) GetMemory() string

func (*SandboxResources) ProtoMessage 

func (*SandboxResources) ProtoMessage()

func (*SandboxResources) ProtoReflect 

func (x *SandboxResources) ProtoReflect() protoreflect.Message

func (*SandboxResources) Reset 

func (x *SandboxResources) Reset()

func (*SandboxResources) String 

func (x *SandboxResources) String() string

type SandboxResponse 

type SandboxResponse struct {
	Sandbox *Sandbox `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Service URLs created by CreateSandbox, keyed by service name. The empty
	// key identifies the unnamed service. Other sandbox RPCs return an empty map.
	ServiceUrls map[string]string `` /* 168-byte string literal not displayed */
	// contains filtered or unexported fields
}

Sandbox response.

func (*SandboxResponse) Descriptor deprecated 

func (*SandboxResponse) Descriptor() ([]byte, []int)

Deprecated: Use SandboxResponse.ProtoReflect.Descriptor instead.

func (*SandboxResponse) GetSandbox 

func (x *SandboxResponse) GetSandbox() *Sandbox

func (*SandboxResponse) GetServiceUrls 

func (x *SandboxResponse) GetServiceUrls() map[string]string

func (*SandboxResponse) ProtoMessage 

func (*SandboxResponse) ProtoMessage()

func (*SandboxResponse) ProtoReflect 

func (x *SandboxResponse) ProtoReflect() protoreflect.Message

func (*SandboxResponse) Reset 

func (x *SandboxResponse) Reset()

func (*SandboxResponse) String 

func (x *SandboxResponse) String() string

type SandboxRestartPolicy 

type SandboxRestartPolicy int32

Policy applied when the canonical main process exits outside an intentional stop or delete operation. Kept after existing enums so generated enum descriptors remain stable. 

const (
	SandboxRestartPolicy_SANDBOX_RESTART_POLICY_UNSPECIFIED SandboxRestartPolicy = 0
	SandboxRestartPolicy_SANDBOX_RESTART_POLICY_NEVER       SandboxRestartPolicy = 1
	SandboxRestartPolicy_SANDBOX_RESTART_POLICY_ON_FAILURE  SandboxRestartPolicy = 2
	SandboxRestartPolicy_SANDBOX_RESTART_POLICY_ALWAYS      SandboxRestartPolicy = 3
)

func (SandboxRestartPolicy) Descriptor 

func (SandboxRestartPolicy) Descriptor() protoreflect.EnumDescriptor

func (SandboxRestartPolicy) Enum 

func (x SandboxRestartPolicy) Enum() *SandboxRestartPolicy

func (SandboxRestartPolicy) EnumDescriptor deprecated 

func (SandboxRestartPolicy) EnumDescriptor() ([]byte, []int)

Deprecated: Use SandboxRestartPolicy.Descriptor instead.

func (SandboxRestartPolicy) Number 

func (x SandboxRestartPolicy) Number() protoreflect.EnumNumber

func (SandboxRestartPolicy) String 

func (x SandboxRestartPolicy) String() string

func (SandboxRestartPolicy) Type 

func (SandboxRestartPolicy) Type() protoreflect.EnumType

type SandboxServiceExposure 

type SandboxServiceExposure struct {

	// Service name within the sandbox. Empty selects the unnamed endpoint.
	Service string `protobuf:"bytes,1,opt,name=service,proto3" json:"service,omitempty"`
	// Loopback TCP port inside the sandbox.
	TargetPort uint32 `protobuf:"varint,2,opt,name=target_port,json=targetPort,proto3" json:"target_port,omitempty"`
	// Application authorization behavior. Omission resolves to STRIP.
	AuthorizationMode ServiceAuthorizationMode `` /* 156-byte string literal not displayed */
	// contains filtered or unexported fields
}

Create-time request to expose one loopback HTTP service in a sandbox.

func (*SandboxServiceExposure) Descriptor deprecated 

func (*SandboxServiceExposure) Descriptor() ([]byte, []int)

Deprecated: Use SandboxServiceExposure.ProtoReflect.Descriptor instead.

func (*SandboxServiceExposure) GetAuthorizationMode 

func (x *SandboxServiceExposure) GetAuthorizationMode() ServiceAuthorizationMode

func (*SandboxServiceExposure) GetService 

func (x *SandboxServiceExposure) GetService() string

func (*SandboxServiceExposure) GetTargetPort 

func (x *SandboxServiceExposure) GetTargetPort() uint32

func (*SandboxServiceExposure) ProtoMessage 

func (*SandboxServiceExposure) ProtoMessage()

func (*SandboxServiceExposure) ProtoReflect 

func (x *SandboxServiceExposure) ProtoReflect() protoreflect.Message

func (*SandboxServiceExposure) Reset 

func (x *SandboxServiceExposure) Reset()

func (*SandboxServiceExposure) String 

func (x *SandboxServiceExposure) String() string

type SandboxServiceLevel 

type SandboxServiceLevel struct {
	Startup *SandboxStartup `protobuf:"bytes,1,opt,name=startup,proto3" json:"startup,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxServiceLevel) Descriptor deprecated 

func (*SandboxServiceLevel) Descriptor() ([]byte, []int)

Deprecated: Use SandboxServiceLevel.ProtoReflect.Descriptor instead.

func (*SandboxServiceLevel) GetStartup 

func (x *SandboxServiceLevel) GetStartup() *SandboxStartup

func (*SandboxServiceLevel) ProtoMessage 

func (*SandboxServiceLevel) ProtoMessage()

func (*SandboxServiceLevel) ProtoReflect 

func (x *SandboxServiceLevel) ProtoReflect() protoreflect.Message

func (*SandboxServiceLevel) Reset 

func (x *SandboxServiceLevel) Reset()

func (*SandboxServiceLevel) String 

func (x *SandboxServiceLevel) String() string

type SandboxSpec 

type SandboxSpec struct {

	// Log level exposed to processes running inside the sandbox.
	LogLevel string `protobuf:"bytes,1,opt,name=log_level,json=logLevel,proto3" json:"log_level,omitempty"`
	// Environment variables injected into the sandbox runtime.
	Environment map[string]string `` /* 149-byte string literal not displayed */
	// Container or VM template used to provision the sandbox.
	Template *SandboxTemplate `protobuf:"bytes,6,opt,name=template,proto3" json:"template,omitempty"`
	// Required sandbox policy configuration.
	Policy *sandboxv1.SandboxPolicy `protobuf:"bytes,7,opt,name=policy,proto3" json:"policy,omitempty"`
	// Provider names to attach to this sandbox.
	Providers []string `protobuf:"bytes,8,rep,name=providers,proto3" json:"providers,omitempty"`
	// Portable resource requirements used by the gateway for driver selection
	// and by drivers for provisioning.
	ResourceRequirements *ResourceRequirements `protobuf:"bytes,9,opt,name=resource_requirements,json=resourceRequirements,proto3" json:"resource_requirements,omitempty"`
	// Canonical command launched once by the sandbox supervisor. No shell
	// parsing is performed. The gateway normalizes an omitted command to the
	// portable scratch login shell before persistence.
	Command []string `protobuf:"bytes,12,rep,name=command,proto3" json:"command,omitempty"`
	// Allocate a retained pseudo-terminal for the main process.
	Tty bool `protobuf:"varint,13,opt,name=tty,proto3" json:"tty,omitempty"`
	// Gateway-owned attachment identity, changed atomically with the provider set.
	// Equality only: detach and reattach must not revive an older receipt.
	ProviderAttachmentEpoch string `` /* 133-byte string literal not displayed */
	// Gateway-owned policy for replacing the sandbox runtime after the canonical
	// main process exits. Unspecified is normalized to Never before persistence.
	RestartPolicy SandboxRestartPolicy `` /* 141-byte string literal not displayed */
	// contains filtered or unexported fields
}

Desired sandbox configuration provided through the public API.

func (*SandboxSpec) Descriptor deprecated 

func (*SandboxSpec) Descriptor() ([]byte, []int)

Deprecated: Use SandboxSpec.ProtoReflect.Descriptor instead.

func (*SandboxSpec) GetCommand 

func (x *SandboxSpec) GetCommand() []string

func (*SandboxSpec) GetEnvironment 

func (x *SandboxSpec) GetEnvironment() map[string]string

func (*SandboxSpec) GetLogLevel 

func (x *SandboxSpec) GetLogLevel() string

func (*SandboxSpec) GetPolicy 

func (x *SandboxSpec) GetPolicy() *sandboxv1.SandboxPolicy

func (*SandboxSpec) GetProviderAttachmentEpoch 

func (x *SandboxSpec) GetProviderAttachmentEpoch() string

func (*SandboxSpec) GetProviders 

func (x *SandboxSpec) GetProviders() []string

func (*SandboxSpec) GetResourceRequirements 

func (x *SandboxSpec) GetResourceRequirements() *ResourceRequirements

func (*SandboxSpec) GetRestartPolicy 

func (x *SandboxSpec) GetRestartPolicy() SandboxRestartPolicy

func (*SandboxSpec) GetTemplate 

func (x *SandboxSpec) GetTemplate() *SandboxTemplate

func (*SandboxSpec) GetTty 

func (x *SandboxSpec) GetTty() bool

func (*SandboxSpec) ProtoMessage 

func (*SandboxSpec) ProtoMessage()

func (*SandboxSpec) ProtoReflect 

func (x *SandboxSpec) ProtoReflect() protoreflect.Message

func (*SandboxSpec) Reset 

func (x *SandboxSpec) Reset()

func (*SandboxSpec) String 

func (x *SandboxSpec) String() string

type SandboxStartup 

type SandboxStartup struct {
	ReadyWithin *durationpb.Duration `protobuf:"bytes,1,opt,name=ready_within,json=readyWithin,proto3" json:"ready_within,omitempty"`
	MaxBurst    uint32               `protobuf:"varint,2,opt,name=max_burst,json=maxBurst,proto3" json:"max_burst,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxStartup) Descriptor deprecated 

func (*SandboxStartup) Descriptor() ([]byte, []int)

Deprecated: Use SandboxStartup.ProtoReflect.Descriptor instead.

func (*SandboxStartup) GetMaxBurst 

func (x *SandboxStartup) GetMaxBurst() uint32

func (*SandboxStartup) GetReadyWithin 

func (x *SandboxStartup) GetReadyWithin() *durationpb.Duration

func (*SandboxStartup) ProtoMessage 

func (*SandboxStartup) ProtoMessage()

func (*SandboxStartup) ProtoReflect 

func (x *SandboxStartup) ProtoReflect() protoreflect.Message

func (*SandboxStartup) Reset 

func (x *SandboxStartup) Reset()

func (*SandboxStartup) String 

func (x *SandboxStartup) String() string

type SandboxStatus 

type SandboxStatus struct {

	// Name of the agent pod or equivalent runtime instance.
	AgentPod string `protobuf:"bytes,2,opt,name=agent_pod,json=agentPod,proto3" json:"agent_pod,omitempty"`
	// File descriptor or endpoint for reaching the agent service, when available.
	AgentFd string `protobuf:"bytes,3,opt,name=agent_fd,json=agentFd,proto3" json:"agent_fd,omitempty"`
	// File descriptor or endpoint for reaching the sandbox service, when available.
	SandboxFd string `protobuf:"bytes,4,opt,name=sandbox_fd,json=sandboxFd,proto3" json:"sandbox_fd,omitempty"`
	// Latest user-facing readiness and lifecycle conditions.
	Conditions []*SandboxCondition `protobuf:"bytes,5,rep,name=conditions,proto3" json:"conditions,omitempty"`
	// Gateway-derived lifecycle summary.
	Phase SandboxPhase `protobuf:"varint,6,opt,name=phase,proto3,enum=openshell.v1.SandboxPhase" json:"phase,omitempty"`
	// Currently active policy version (updated when sandbox reports loaded).
	CurrentPolicyVersion uint32 `protobuf:"varint,7,opt,name=current_policy_version,json=currentPolicyVersion,proto3" json:"current_policy_version,omitempty"`
	// Supervisor instance currently associated with the canonical main process.
	// The gateway uses this to reject stale exit reports after a restart.
	MainProcessInstanceId string `` /* 128-byte string literal not displayed */
	// Most recent normalized main process result. Signal exits use 128 + signal number.
	// Cleared when a replacement main process becomes ready.
	ExitCode *int32 `protobuf:"varint,9,opt,name=exit_code,json=exitCode,proto3,oneof" json:"exit_code,omitempty"`
	// Last accepted network result for each configured tool server endpoint.
	// Currently populated for MCP-over-HTTP endpoints. These passive results
	// remain separate from sandbox lifecycle conditions and readiness.
	EndpointStatuses []*EndpointStatus `protobuf:"bytes,10,rep,name=endpoint_statuses,json=endpointStatuses,proto3" json:"endpoint_statuses,omitempty"`
	// Independent of infrastructure phase; retained across driver observations.
	ConfigurationAdmission *SandboxConfigurationAdmission `` /* 128-byte string literal not displayed */
	// Durable first-acceptance marker. Absent on legacy records; never reset by restart.
	ConfigurationActivated *bool `` /* 135-byte string literal not displayed */
	// Gateway-owned provisioning deadlines, retained after timeout for inspection and retry.
	Provisioning *SandboxProvisioning `protobuf:"bytes,13,opt,name=provisioning,proto3" json:"provisioning,omitempty"`
	// Consecutive policy-driven restart number in the current crash loop.
	RestartCount uint32 `protobuf:"varint,14,opt,name=restart_count,json=restartCount,proto3" json:"restart_count,omitempty"`
	// Deadline for the next restart attempt or recovery check.
	NextRestartTime *timestamppb.Timestamp `protobuf:"bytes,15,opt,name=next_restart_time,json=nextRestartTime,proto3" json:"next_restart_time,omitempty"`
	// Time when the current main process became ready.
	MainProcessStartedTime *timestamppb.Timestamp `` /* 132-byte string literal not displayed */
	// Latest refused token grant across all outbound HTTP protocols, including
	// failures before a configured endpoint or credential could be selected.
	// Matching grant success or a policy, provider, or supervisor reset clears it.
	LastTokenGrantFailure *TokenGrantFailureObservation `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}

User-facing sandbox status derived by the gateway from compute-driver observations.

Public status does not embed driver-only flags such as `deleting`.

func (*SandboxStatus) Descriptor deprecated 

func (*SandboxStatus) Descriptor() ([]byte, []int)

Deprecated: Use SandboxStatus.ProtoReflect.Descriptor instead.

func (*SandboxStatus) GetAgentFd 

func (x *SandboxStatus) GetAgentFd() string

func (*SandboxStatus) GetAgentPod 

func (x *SandboxStatus) GetAgentPod() string

func (*SandboxStatus) GetConditions 

func (x *SandboxStatus) GetConditions() []*SandboxCondition

func (*SandboxStatus) GetConfigurationActivated 

func (x *SandboxStatus) GetConfigurationActivated() bool

func (*SandboxStatus) GetConfigurationAdmission 

func (x *SandboxStatus) GetConfigurationAdmission() *SandboxConfigurationAdmission

func (*SandboxStatus) GetCurrentPolicyVersion 

func (x *SandboxStatus) GetCurrentPolicyVersion() uint32

func (*SandboxStatus) GetEndpointStatuses 

func (x *SandboxStatus) GetEndpointStatuses() []*EndpointStatus

func (*SandboxStatus) GetExitCode 

func (x *SandboxStatus) GetExitCode() int32

func (*SandboxStatus) GetLastTokenGrantFailure 

func (x *SandboxStatus) GetLastTokenGrantFailure() *TokenGrantFailureObservation

func (*SandboxStatus) GetMainProcessInstanceId 

func (x *SandboxStatus) GetMainProcessInstanceId() string

func (*SandboxStatus) GetMainProcessStartedTime 

func (x *SandboxStatus) GetMainProcessStartedTime() *timestamppb.Timestamp

func (*SandboxStatus) GetNextRestartTime 

func (x *SandboxStatus) GetNextRestartTime() *timestamppb.Timestamp

func (*SandboxStatus) GetPhase 

func (x *SandboxStatus) GetPhase() SandboxPhase

func (*SandboxStatus) GetProvisioning 

func (x *SandboxStatus) GetProvisioning() *SandboxProvisioning

func (*SandboxStatus) GetRestartCount 

func (x *SandboxStatus) GetRestartCount() uint32

func (*SandboxStatus) GetSandboxFd 

func (x *SandboxStatus) GetSandboxFd() string

func (*SandboxStatus) ProtoMessage 

func (*SandboxStatus) ProtoMessage()

func (*SandboxStatus) ProtoReflect 

func (x *SandboxStatus) ProtoReflect() protoreflect.Message

func (*SandboxStatus) Reset 

func (x *SandboxStatus) Reset()

func (*SandboxStatus) String 

func (x *SandboxStatus) String() string

type SandboxStreamEvent 

type SandboxStreamEvent struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*SandboxStreamEvent_Sandbox
	//	*SandboxStreamEvent_Log
	//	*SandboxStreamEvent_Event
	//	*SandboxStreamEvent_Warning
	//	*SandboxStreamEvent_DraftPolicyUpdate
	Payload isSandboxStreamEvent_Payload `protobuf_oneof:"payload"`
	// Opaque position in this sandbox's cursor space, shared across the resumable
	// log and platform event sources. Empty for non-resumable events (status
	// snapshots, warnings).
	//
	// Do not parse this token; its encoding is not part of the contract. The only
	// supported operation is comparing two non-empty cursors observed on the same
	// stream and keeping the greater one, then passing it as
	// WatchSandboxRequest.resume_after_cursor to resume without loss or
	// duplication. That comparison is a plain byte-wise string comparison. It is
	// well defined only within one stream: a stream never spans two cursor
	// spaces, because a reset ends it.
	Cursor string `protobuf:"bytes,6,opt,name=cursor,proto3" json:"cursor,omitempty"`
	// contains filtered or unexported fields
}

One event in a sandbox watch stream.

func (*SandboxStreamEvent) Descriptor deprecated 

func (*SandboxStreamEvent) Descriptor() ([]byte, []int)

Deprecated: Use SandboxStreamEvent.ProtoReflect.Descriptor instead.

func (*SandboxStreamEvent) GetCursor 

func (x *SandboxStreamEvent) GetCursor() string

func (*SandboxStreamEvent) GetDraftPolicyUpdate 

func (x *SandboxStreamEvent) GetDraftPolicyUpdate() *DraftPolicyUpdate

func (*SandboxStreamEvent) GetEvent 

func (x *SandboxStreamEvent) GetEvent() *PlatformEvent

func (*SandboxStreamEvent) GetLog 

func (x *SandboxStreamEvent) GetLog() *SandboxLogLine

func (*SandboxStreamEvent) GetPayload 

func (x *SandboxStreamEvent) GetPayload() isSandboxStreamEvent_Payload

func (*SandboxStreamEvent) GetSandbox 

func (x *SandboxStreamEvent) GetSandbox() *Sandbox

func (*SandboxStreamEvent) GetWarning 

func (x *SandboxStreamEvent) GetWarning() *SandboxStreamWarning

func (*SandboxStreamEvent) ProtoMessage 

func (*SandboxStreamEvent) ProtoMessage()

func (*SandboxStreamEvent) ProtoReflect 

func (x *SandboxStreamEvent) ProtoReflect() protoreflect.Message

func (*SandboxStreamEvent) Reset 

func (x *SandboxStreamEvent) Reset()

func (*SandboxStreamEvent) String 

func (x *SandboxStreamEvent) String() string

type SandboxStreamEvent_DraftPolicyUpdate 

type SandboxStreamEvent_DraftPolicyUpdate struct {
	// Draft policy update notification.
	DraftPolicyUpdate *DraftPolicyUpdate `protobuf:"bytes,5,opt,name=draft_policy_update,json=draftPolicyUpdate,proto3,oneof"`
}

type SandboxStreamEvent_Event 

type SandboxStreamEvent_Event struct {
	// One platform event.
	Event *PlatformEvent `protobuf:"bytes,3,opt,name=event,proto3,oneof"`
}

type SandboxStreamEvent_Log 

type SandboxStreamEvent_Log struct {
	// One server log line/event.
	Log *SandboxLogLine `protobuf:"bytes,2,opt,name=log,proto3,oneof"`
}

type SandboxStreamEvent_Sandbox 

type SandboxStreamEvent_Sandbox struct {
	// Latest sandbox snapshot.
	Sandbox *Sandbox `protobuf:"bytes,1,opt,name=sandbox,proto3,oneof"`
}

type SandboxStreamEvent_Warning 

type SandboxStreamEvent_Warning struct {
	// Recoverable warning from the server, e.g. messages dropped because a
	// broadcast receiver lagged. The stream continues after this warning; the
	// client can detect the gap from the warning itself.
	Warning *SandboxStreamWarning `protobuf:"bytes,4,opt,name=warning,proto3,oneof"`
}

type SandboxStreamWarning 

type SandboxStreamWarning struct {
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

Recoverable loss notification on a watch stream. Emitted when the server skips ahead after a broadcast lag instead of terminating; the stream keeps running. Cursors are opaque, so this message is the only signal that events were skipped. Unrecoverable loss (a trimmed or foreign resume cursor) is reported as an OUT_OF_RANGE stream status, not this message.

func (*SandboxStreamWarning) Descriptor deprecated 

func (*SandboxStreamWarning) Descriptor() ([]byte, []int)

Deprecated: Use SandboxStreamWarning.ProtoReflect.Descriptor instead.

func (*SandboxStreamWarning) GetMessage 

func (x *SandboxStreamWarning) GetMessage() string

func (*SandboxStreamWarning) ProtoMessage 

func (*SandboxStreamWarning) ProtoMessage()

func (*SandboxStreamWarning) ProtoReflect 

func (x *SandboxStreamWarning) ProtoReflect() protoreflect.Message

func (*SandboxStreamWarning) Reset 

func (x *SandboxStreamWarning) Reset()

func (*SandboxStreamWarning) String 

func (x *SandboxStreamWarning) String() string

type SandboxTemplate 

type SandboxTemplate struct {

	// Fully-qualified OCI image reference used to boot the sandbox.
	Image string `protobuf:"bytes,1,opt,name=image,proto3" json:"image,omitempty"`
	// Optional runtime class name requested from the compute platform.
	RuntimeClassName string `protobuf:"bytes,2,opt,name=runtime_class_name,json=runtimeClassName,proto3" json:"runtime_class_name,omitempty"`
	// Optional agent socket path exposed to the workload.
	AgentSocket string `protobuf:"bytes,3,opt,name=agent_socket,json=agentSocket,proto3" json:"agent_socket,omitempty"`
	// Labels applied to compute-platform resources for this sandbox.
	Labels map[string]string `` /* 139-byte string literal not displayed */
	// Annotations applied to compute-platform resources for this sandbox.
	Annotations map[string]string `` /* 149-byte string literal not displayed */
	// Additional environment variables injected by the template.
	Environment map[string]string `` /* 149-byte string literal not displayed */
	// Platform-specific compute resource requirements and limits.
	Resources *structpb.Struct `protobuf:"bytes,7,opt,name=resources,proto3" json:"resources,omitempty"`
	// Enable Kubernetes user namespace isolation (hostUsers: false).
	// When true, container UID 0 maps to a non-root host UID and capabilities
	// become namespaced. Requires Kubernetes 1.33+ with user namespace support
	// available (beta through 1.35, GA in 1.36+) and a supporting runtime.
	// When unset, the cluster-wide default is used.
	UserNamespaces *bool `protobuf:"varint,10,opt,name=user_namespaces,json=userNamespaces,proto3,oneof" json:"user_namespaces,omitempty"`
	// Driver-keyed opaque config envelope supplied by the caller.
	// The gateway selects the block matching the active compute driver and
	// forwards only that inner Struct to DriverSandboxTemplate.driver_config.
	// The selected driver owns nested schema validation.
	DriverConfig *structpb.Struct `protobuf:"bytes,11,opt,name=driver_config,json=driverConfig,proto3" json:"driver_config,omitempty"`
	// contains filtered or unexported fields
}

Historical inline compute template mapped onto compute-driver template inputs.

Despite its name, this is not a reusable named sandbox template resource. It is an inline part of `SandboxSpec` kept for v1 compatibility. A future breaking API cleanup may rename this message to free `SandboxTemplate` for the reusable template resource now represented by `SandboxWorkloadTemplate`.

func (*SandboxTemplate) Descriptor deprecated 

func (*SandboxTemplate) Descriptor() ([]byte, []int)

Deprecated: Use SandboxTemplate.ProtoReflect.Descriptor instead.

func (*SandboxTemplate) GetAgentSocket 

func (x *SandboxTemplate) GetAgentSocket() string

func (*SandboxTemplate) GetAnnotations 

func (x *SandboxTemplate) GetAnnotations() map[string]string

func (*SandboxTemplate) GetDriverConfig 

func (x *SandboxTemplate) GetDriverConfig() *structpb.Struct

func (*SandboxTemplate) GetEnvironment 

func (x *SandboxTemplate) GetEnvironment() map[string]string

func (*SandboxTemplate) GetImage 

func (x *SandboxTemplate) GetImage() string

func (*SandboxTemplate) GetLabels 

func (x *SandboxTemplate) GetLabels() map[string]string

func (*SandboxTemplate) GetResources 

func (x *SandboxTemplate) GetResources() *structpb.Struct

func (*SandboxTemplate) GetRuntimeClassName 

func (x *SandboxTemplate) GetRuntimeClassName() string

func (*SandboxTemplate) GetUserNamespaces 

func (x *SandboxTemplate) GetUserNamespaces() bool

func (*SandboxTemplate) ProtoMessage 

func (*SandboxTemplate) ProtoMessage()

func (*SandboxTemplate) ProtoReflect 

func (x *SandboxTemplate) ProtoReflect() protoreflect.Message

func (*SandboxTemplate) Reset 

func (x *SandboxTemplate) Reset()

func (*SandboxTemplate) String 

func (x *SandboxTemplate) String() string

type SandboxTemplateResponse 

type SandboxTemplateResponse struct {
	Template *SandboxWorkloadTemplate `protobuf:"bytes,1,opt,name=template,proto3" json:"template,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxTemplateResponse) Descriptor deprecated 

func (*SandboxTemplateResponse) Descriptor() ([]byte, []int)

Deprecated: Use SandboxTemplateResponse.ProtoReflect.Descriptor instead.

func (*SandboxTemplateResponse) GetTemplate 

func (x *SandboxTemplateResponse) GetTemplate() *SandboxWorkloadTemplate

func (*SandboxTemplateResponse) ProtoMessage 

func (*SandboxTemplateResponse) ProtoMessage()

func (*SandboxTemplateResponse) ProtoReflect 

func (x *SandboxTemplateResponse) ProtoReflect() protoreflect.Message

func (*SandboxTemplateResponse) Reset 

func (x *SandboxTemplateResponse) Reset()

func (*SandboxTemplateResponse) String 

func (x *SandboxTemplateResponse) String() string

type SandboxUpdatesClient added in v0.1.7 

type SandboxUpdatesClient interface {
	// Update the workload image, command, environment, labels, or annotations of a
	// stopped sandbox while preserving its identity and retained storage. Requires
	// compute-driver support for the selected changes and explicit gateway activation
	// of sandbox updates.
	UpdateSandbox(ctx context.Context, in *UpdateSandboxRequest, opts ...grpc.CallOption) (*SandboxResponse, error)
}

SandboxUpdatesClient is the client API for SandboxUpdates service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

Optional sandbox mutations are separate from OpenShell so existing generated OpenShell server implementations remain source-compatible.

func NewSandboxUpdatesClient added in v0.1.7 

func NewSandboxUpdatesClient(cc grpc.ClientConnInterface) SandboxUpdatesClient

type SandboxUpdatesServer added in v0.1.7 

type SandboxUpdatesServer interface {
	// Update the workload image, command, environment, labels, or annotations of a
	// stopped sandbox while preserving its identity and retained storage. Requires
	// compute-driver support for the selected changes and explicit gateway activation
	// of sandbox updates.
	UpdateSandbox(context.Context, *UpdateSandboxRequest) (*SandboxResponse, error)
	// contains filtered or unexported methods
}

SandboxUpdatesServer is the server API for SandboxUpdates service. All implementations must embed UnimplementedSandboxUpdatesServer for forward compatibility.

Optional sandbox mutations are separate from OpenShell so existing generated OpenShell server implementations remain source-compatible.

type SandboxWorkloadConfig 

type SandboxWorkloadConfig struct {

	// Fully-qualified OCI image reference used to boot the sandbox.
	Image string `protobuf:"bytes,1,opt,name=image,proto3" json:"image,omitempty"`
	// Environment variables injected into the sandbox runtime.
	Environment map[string]string `` /* 149-byte string literal not displayed */
	// Portable resource requirements for sandboxes created from this workload.
	Resources *SandboxResources `protobuf:"bytes,3,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxWorkloadConfig) Descriptor deprecated 

func (*SandboxWorkloadConfig) Descriptor() ([]byte, []int)

Deprecated: Use SandboxWorkloadConfig.ProtoReflect.Descriptor instead.

func (*SandboxWorkloadConfig) GetEnvironment 

func (x *SandboxWorkloadConfig) GetEnvironment() map[string]string

func (*SandboxWorkloadConfig) GetImage 

func (x *SandboxWorkloadConfig) GetImage() string

func (*SandboxWorkloadConfig) GetResources 

func (x *SandboxWorkloadConfig) GetResources() *SandboxResources

func (*SandboxWorkloadConfig) ProtoMessage 

func (*SandboxWorkloadConfig) ProtoMessage()

func (*SandboxWorkloadConfig) ProtoReflect 

func (x *SandboxWorkloadConfig) ProtoReflect() protoreflect.Message

func (*SandboxWorkloadConfig) Reset 

func (x *SandboxWorkloadConfig) Reset()

func (*SandboxWorkloadConfig) String 

func (x *SandboxWorkloadConfig) String() string

type SandboxWorkloadTemplate 

type SandboxWorkloadTemplate struct {

	// Kubernetes-style metadata (id, name, labels, timestamps, resource version).
	Metadata *datamodelv1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// Desired reusable workload shape and template-owned driver config.
	Spec *SandboxWorkloadTemplateSpec `protobuf:"bytes,2,opt,name=spec,proto3" json:"spec,omitempty"`
	// contains filtered or unexported fields
}

Reusable named sandbox workload template resource.

This is the actual workspace-scoped template resource used to create sandboxes by reference. It uses the longer name in v1 to avoid colliding with the historical inline `SandboxTemplate` message. A future breaking API cleanup may rename this resource to `SandboxTemplate`.

func (*SandboxWorkloadTemplate) Descriptor deprecated 

func (*SandboxWorkloadTemplate) Descriptor() ([]byte, []int)

Deprecated: Use SandboxWorkloadTemplate.ProtoReflect.Descriptor instead.

func (*SandboxWorkloadTemplate) GetMetadata 

func (x *SandboxWorkloadTemplate) GetMetadata() *datamodelv1.ObjectMeta

func (*SandboxWorkloadTemplate) GetSpec 

func (x *SandboxWorkloadTemplate) GetSpec() *SandboxWorkloadTemplateSpec

func (*SandboxWorkloadTemplate) ProtoMessage 

func (*SandboxWorkloadTemplate) ProtoMessage()

func (*SandboxWorkloadTemplate) ProtoReflect 

func (x *SandboxWorkloadTemplate) ProtoReflect() protoreflect.Message

func (*SandboxWorkloadTemplate) Reset 

func (x *SandboxWorkloadTemplate) Reset()

func (*SandboxWorkloadTemplate) String 

func (x *SandboxWorkloadTemplate) String() string

type SandboxWorkloadTemplateProvenance 

type SandboxWorkloadTemplateProvenance struct {
	Name            string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	ResourceVersion string `protobuf:"bytes,2,opt,name=resource_version,json=resourceVersion,proto3" json:"resource_version,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxWorkloadTemplateProvenance) Descriptor deprecated 

func (*SandboxWorkloadTemplateProvenance) Descriptor() ([]byte, []int)

Deprecated: Use SandboxWorkloadTemplateProvenance.ProtoReflect.Descriptor instead.

func (*SandboxWorkloadTemplateProvenance) GetName 

func (x *SandboxWorkloadTemplateProvenance) GetName() string

func (*SandboxWorkloadTemplateProvenance) GetResourceVersion 

func (x *SandboxWorkloadTemplateProvenance) GetResourceVersion() string

func (*SandboxWorkloadTemplateProvenance) ProtoMessage 

func (*SandboxWorkloadTemplateProvenance) ProtoMessage()

func (*SandboxWorkloadTemplateProvenance) ProtoReflect 

func (x *SandboxWorkloadTemplateProvenance) ProtoReflect() protoreflect.Message

func (*SandboxWorkloadTemplateProvenance) Reset 

func (x *SandboxWorkloadTemplateProvenance) Reset()

func (*SandboxWorkloadTemplateProvenance) String 

func (x *SandboxWorkloadTemplateProvenance) String() string

type SandboxWorkloadTemplateSpec 

type SandboxWorkloadTemplateSpec struct {

	// Portable workload shape.
	Workload *SandboxWorkloadConfig `protobuf:"bytes,1,opt,name=workload,proto3" json:"workload,omitempty"`
	// Driver-keyed opaque config envelope supplied by the template owner.
	DriverConfig *structpb.Struct `protobuf:"bytes,2,opt,name=driver_config,json=driverConfig,proto3" json:"driver_config,omitempty"`
	// Desired service level associated with this template.
	DesiredServiceLevel *SandboxServiceLevel `protobuf:"bytes,3,opt,name=desired_service_level,json=desiredServiceLevel,proto3" json:"desired_service_level,omitempty"`
	// contains filtered or unexported fields
}

func (*SandboxWorkloadTemplateSpec) Descriptor deprecated 

func (*SandboxWorkloadTemplateSpec) Descriptor() ([]byte, []int)

Deprecated: Use SandboxWorkloadTemplateSpec.ProtoReflect.Descriptor instead.

func (*SandboxWorkloadTemplateSpec) GetDesiredServiceLevel 

func (x *SandboxWorkloadTemplateSpec) GetDesiredServiceLevel() *SandboxServiceLevel

func (*SandboxWorkloadTemplateSpec) GetDriverConfig 

func (x *SandboxWorkloadTemplateSpec) GetDriverConfig() *structpb.Struct

func (*SandboxWorkloadTemplateSpec) GetWorkload 

func (x *SandboxWorkloadTemplateSpec) GetWorkload() *SandboxWorkloadConfig

func (*SandboxWorkloadTemplateSpec) ProtoMessage 

func (*SandboxWorkloadTemplateSpec) ProtoMessage()

func (*SandboxWorkloadTemplateSpec) ProtoReflect 

func (x *SandboxWorkloadTemplateSpec) ProtoReflect() protoreflect.Message

func (*SandboxWorkloadTemplateSpec) Reset 

func (x *SandboxWorkloadTemplateSpec) Reset()

func (*SandboxWorkloadTemplateSpec) String 

func (x *SandboxWorkloadTemplateSpec) String() string

type ServiceAuthorizationMode 

type ServiceAuthorizationMode int32

Controls whether an exposed service receives the request's application Authorization header. 

const (
	// Omission preserves the secure legacy behavior and resolves to STRIP.
	ServiceAuthorizationMode_SERVICE_AUTHORIZATION_MODE_UNSPECIFIED ServiceAuthorizationMode = 0
	// Remove Authorization before forwarding to the sandbox service.
	ServiceAuthorizationMode_SERVICE_AUTHORIZATION_MODE_STRIP ServiceAuthorizationMode = 1
	// Forward one syntactically valid bearer Authorization header unchanged.
	ServiceAuthorizationMode_SERVICE_AUTHORIZATION_MODE_BEARER_PASSTHROUGH ServiceAuthorizationMode = 2
)

func (ServiceAuthorizationMode) Descriptor 

func (ServiceAuthorizationMode) Descriptor() protoreflect.EnumDescriptor

func (ServiceAuthorizationMode) Enum 

func (x ServiceAuthorizationMode) Enum() *ServiceAuthorizationMode

func (ServiceAuthorizationMode) EnumDescriptor deprecated 

func (ServiceAuthorizationMode) EnumDescriptor() ([]byte, []int)

Deprecated: Use ServiceAuthorizationMode.Descriptor instead.

func (ServiceAuthorizationMode) Number 

func (x ServiceAuthorizationMode) Number() protoreflect.EnumNumber

func (ServiceAuthorizationMode) String 

func (x ServiceAuthorizationMode) String() string

func (ServiceAuthorizationMode) Type 

func (ServiceAuthorizationMode) Type() protoreflect.EnumType

type ServiceEndpoint 

type ServiceEndpoint struct {

	// Kubernetes-style metadata.
	Metadata *datamodelv1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// Sandbox object ID.
	SandboxId string `protobuf:"bytes,2,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Sandbox name.
	Sandbox string `protobuf:"bytes,3,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Service name within the sandbox.
	Name string `protobuf:"bytes,4,opt,name=name,proto3" json:"name,omitempty"`
	// Loopback TCP port inside the sandbox.
	TargetPort uint32 `protobuf:"varint,5,opt,name=target_port,json=targetPort,proto3" json:"target_port,omitempty"`
	// Whether browser-facing service routing is enabled for this endpoint.
	Domain bool `protobuf:"varint,6,opt,name=domain,proto3" json:"domain,omitempty"`
	// Effective application authorization behavior for ingress requests.
	AuthorizationMode ServiceAuthorizationMode `` /* 156-byte string literal not displayed */
	// contains filtered or unexported fields
}

Persisted sandbox service endpoint.

func (*ServiceEndpoint) Descriptor deprecated 

func (*ServiceEndpoint) Descriptor() ([]byte, []int)

Deprecated: Use ServiceEndpoint.ProtoReflect.Descriptor instead.

func (*ServiceEndpoint) GetAuthorizationMode 

func (x *ServiceEndpoint) GetAuthorizationMode() ServiceAuthorizationMode

func (*ServiceEndpoint) GetDomain 

func (x *ServiceEndpoint) GetDomain() bool

func (*ServiceEndpoint) GetMetadata 

func (x *ServiceEndpoint) GetMetadata() *datamodelv1.ObjectMeta

func (*ServiceEndpoint) GetName 

func (x *ServiceEndpoint) GetName() string

func (*ServiceEndpoint) GetSandbox 

func (x *ServiceEndpoint) GetSandbox() string

func (*ServiceEndpoint) GetSandboxId 

func (x *ServiceEndpoint) GetSandboxId() string

func (*ServiceEndpoint) GetTargetPort 

func (x *ServiceEndpoint) GetTargetPort() uint32

func (*ServiceEndpoint) ProtoMessage 

func (*ServiceEndpoint) ProtoMessage()

func (*ServiceEndpoint) ProtoReflect 

func (x *ServiceEndpoint) ProtoReflect() protoreflect.Message

func (*ServiceEndpoint) Reset 

func (x *ServiceEndpoint) Reset()

func (*ServiceEndpoint) String 

func (x *ServiceEndpoint) String() string

type ServiceEndpointResponse 

type ServiceEndpointResponse struct {
	Endpoint *ServiceEndpoint `protobuf:"bytes,1,opt,name=endpoint,proto3" json:"endpoint,omitempty"`
	Url      string           `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// contains filtered or unexported fields
}

Response containing a service endpoint and, when available, its local URL.

func (*ServiceEndpointResponse) Descriptor deprecated 

func (*ServiceEndpointResponse) Descriptor() ([]byte, []int)

Deprecated: Use ServiceEndpointResponse.ProtoReflect.Descriptor instead.

func (*ServiceEndpointResponse) GetEndpoint 

func (x *ServiceEndpointResponse) GetEndpoint() *ServiceEndpoint

func (*ServiceEndpointResponse) GetUrl 

func (x *ServiceEndpointResponse) GetUrl() string

func (*ServiceEndpointResponse) ProtoMessage 

func (*ServiceEndpointResponse) ProtoMessage()

func (*ServiceEndpointResponse) ProtoReflect 

func (x *ServiceEndpointResponse) ProtoReflect() protoreflect.Message

func (*ServiceEndpointResponse) Reset 

func (x *ServiceEndpointResponse) Reset()

func (*ServiceEndpointResponse) String 

func (x *ServiceEndpointResponse) String() string

type ServiceStatus 

type ServiceStatus int32

Service status enum. 

const (
	ServiceStatus_SERVICE_STATUS_UNSPECIFIED ServiceStatus = 0
	ServiceStatus_SERVICE_STATUS_HEALTHY     ServiceStatus = 1
	ServiceStatus_SERVICE_STATUS_DEGRADED    ServiceStatus = 2
	ServiceStatus_SERVICE_STATUS_UNHEALTHY   ServiceStatus = 3
)

func (ServiceStatus) Descriptor 

func (ServiceStatus) Descriptor() protoreflect.EnumDescriptor

func (ServiceStatus) Enum 

func (x ServiceStatus) Enum() *ServiceStatus

func (ServiceStatus) EnumDescriptor deprecated 

func (ServiceStatus) EnumDescriptor() ([]byte, []int)

Deprecated: Use ServiceStatus.Descriptor instead.

func (ServiceStatus) Number 

func (x ServiceStatus) Number() protoreflect.EnumNumber

func (ServiceStatus) String 

func (x ServiceStatus) String() string

func (ServiceStatus) Type 

func (ServiceStatus) Type() protoreflect.EnumType

type SessionAccepted 

type SessionAccepted struct {

	// Gateway-assigned session ID for this connection.
	SessionId string `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// The session's first configuration update. Present exactly when
	// config_push_enabled is set.
	Bootstrap *ConfigUpdate `protobuf:"bytes,3,opt,name=bootstrap,proto3" json:"bootstrap,omitempty"`
	// The gateway pushes configuration authoritatively on this stream instead
	// of the supervisor polling for it: the bootstrap is required, ConfigUpdate
	// payloads are applied and acknowledged, and the supervisor stops polling.
	// Set only for supervisors that set SupervisorHello.supports_config_push.
	ConfigPushEnabled bool `protobuf:"varint,4,opt,name=config_push_enabled,json=configPushEnabled,proto3" json:"config_push_enabled,omitempty"`
	// Recommended heartbeat interval.
	HeartbeatInterval *durationpb.Duration `protobuf:"bytes,102,opt,name=heartbeat_interval,json=heartbeatInterval,proto3" json:"heartbeat_interval,omitempty"`
	// contains filtered or unexported fields
}

Gateway accepts the supervisor session.

func (*SessionAccepted) Descriptor deprecated 

func (*SessionAccepted) Descriptor() ([]byte, []int)

Deprecated: Use SessionAccepted.ProtoReflect.Descriptor instead.

func (*SessionAccepted) GetBootstrap 

func (x *SessionAccepted) GetBootstrap() *ConfigUpdate

func (*SessionAccepted) GetConfigPushEnabled 

func (x *SessionAccepted) GetConfigPushEnabled() bool

func (*SessionAccepted) GetHeartbeatInterval 

func (x *SessionAccepted) GetHeartbeatInterval() *durationpb.Duration

func (*SessionAccepted) GetSessionId 

func (x *SessionAccepted) GetSessionId() string

func (*SessionAccepted) ProtoMessage 

func (*SessionAccepted) ProtoMessage()

func (*SessionAccepted) ProtoReflect 

func (x *SessionAccepted) ProtoReflect() protoreflect.Message

func (*SessionAccepted) Reset 

func (x *SessionAccepted) Reset()

func (*SessionAccepted) String 

func (x *SessionAccepted) String() string

type SessionRedirect 

type SessionRedirect struct {

	// Peer endpoint of the replica that should own this sandbox.
	PeerEndpoint string `protobuf:"bytes,1,opt,name=peer_endpoint,json=peerEndpoint,proto3" json:"peer_endpoint,omitempty"`
	// Replica ID that should own this sandbox, for logging.
	OwnerReplicaId string `protobuf:"bytes,2,opt,name=owner_replica_id,json=ownerReplicaId,proto3" json:"owner_replica_id,omitempty"`
	// contains filtered or unexported fields
}

Gateway declines to own this session and names the replica that should.

Sent instead of SessionAccepted when the placement ring puts the sandbox on a different live replica, and to established sessions when their gateway shuts down. The supervisor reconnects to peer_endpoint once with SupervisorHello.redirected set, and falls back to its configured gateway address if that fails.

func (*SessionRedirect) Descriptor deprecated 

func (*SessionRedirect) Descriptor() ([]byte, []int)

Deprecated: Use SessionRedirect.ProtoReflect.Descriptor instead.

func (*SessionRedirect) GetOwnerReplicaId 

func (x *SessionRedirect) GetOwnerReplicaId() string

func (*SessionRedirect) GetPeerEndpoint 

func (x *SessionRedirect) GetPeerEndpoint() string

func (*SessionRedirect) ProtoMessage 

func (*SessionRedirect) ProtoMessage()

func (*SessionRedirect) ProtoReflect 

func (x *SessionRedirect) ProtoReflect() protoreflect.Message

func (*SessionRedirect) Reset 

func (x *SessionRedirect) Reset()

func (*SessionRedirect) String 

func (x *SessionRedirect) String() string

type SessionRejected 

type SessionRejected struct {

	// Human-readable rejection reason.
	Reason string `protobuf:"bytes,1,opt,name=reason,proto3" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

Gateway rejects the supervisor session.

func (*SessionRejected) Descriptor deprecated 

func (*SessionRejected) Descriptor() ([]byte, []int)

Deprecated: Use SessionRejected.ProtoReflect.Descriptor instead.

func (*SessionRejected) GetReason 

func (x *SessionRejected) GetReason() string

func (*SessionRejected) ProtoMessage 

func (*SessionRejected) ProtoMessage()

func (*SessionRejected) ProtoReflect 

func (x *SessionRejected) ProtoReflect() protoreflect.Message

func (*SessionRejected) Reset 

func (x *SessionRejected) Reset()

func (*SessionRejected) String 

func (x *SessionRejected) String() string

type SshRelayTarget 

type SshRelayTarget struct {
	// contains filtered or unexported fields
}

Built-in SSH relay target.

func (*SshRelayTarget) Descriptor deprecated 

func (*SshRelayTarget) Descriptor() ([]byte, []int)

Deprecated: Use SshRelayTarget.ProtoReflect.Descriptor instead.

func (*SshRelayTarget) ProtoMessage 

func (*SshRelayTarget) ProtoMessage()

func (*SshRelayTarget) ProtoReflect 

func (x *SshRelayTarget) ProtoReflect() protoreflect.Message

func (*SshRelayTarget) Reset 

func (x *SshRelayTarget) Reset()

func (*SshRelayTarget) String 

func (x *SshRelayTarget) String() string

type SshSession 

type SshSession struct {

	// Kubernetes-style metadata (id, name, labels, timestamps, resource version).
	Metadata *datamodelv1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// Sandbox id.
	SandboxId string `protobuf:"bytes,2,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Session token.
	Token string `protobuf:"bytes,3,opt,name=token,proto3" json:"token,omitempty"`
	// Absolute expiry. Absence means no expiry.
	ExpirationTime *timestamppb.Timestamp `protobuf:"bytes,104,opt,name=expiration_time,json=expirationTime,proto3" json:"expiration_time,omitempty"`
	// Revoked flag.
	Revoked bool `protobuf:"varint,5,opt,name=revoked,proto3" json:"revoked,omitempty"`
	// contains filtered or unexported fields
}

SSH session record stored in persistence.

func (*SshSession) Descriptor deprecated 

func (*SshSession) Descriptor() ([]byte, []int)

Deprecated: Use SshSession.ProtoReflect.Descriptor instead.

func (*SshSession) GetExpirationTime 

func (x *SshSession) GetExpirationTime() *timestamppb.Timestamp

func (*SshSession) GetMetadata 

func (x *SshSession) GetMetadata() *datamodelv1.ObjectMeta

func (*SshSession) GetRevoked 

func (x *SshSession) GetRevoked() bool

func (*SshSession) GetSandboxId 

func (x *SshSession) GetSandboxId() string

func (*SshSession) GetToken 

func (x *SshSession) GetToken() string

func (*SshSession) ProtoMessage 

func (*SshSession) ProtoMessage()

func (*SshSession) ProtoReflect 

func (x *SshSession) ProtoReflect() protoreflect.Message

func (*SshSession) Reset 

func (x *SshSession) Reset()

func (*SshSession) String 

func (x *SshSession) String() string

type StartSandboxRequest 

type StartSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Start sandbox request.

func (*StartSandboxRequest) Descriptor deprecated 

func (*StartSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use StartSandboxRequest.ProtoReflect.Descriptor instead.

func (*StartSandboxRequest) GetName 

func (x *StartSandboxRequest) GetName() string

func (*StartSandboxRequest) GetRequestId 

func (x *StartSandboxRequest) GetRequestId() string

func (*StartSandboxRequest) GetWorkspaceScope 

func (x *StartSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*StartSandboxRequest) ProtoMessage 

func (*StartSandboxRequest) ProtoMessage()

func (*StartSandboxRequest) ProtoReflect 

func (x *StartSandboxRequest) ProtoReflect() protoreflect.Message

func (*StartSandboxRequest) Reset 

func (x *StartSandboxRequest) Reset()

func (*StartSandboxRequest) String 

func (x *StartSandboxRequest) String() string

type StaticCredentialBinding 

type StaticCredentialBinding struct {
	Endpoints []*StaticCredentialEndpointBinding `protobuf:"bytes,1,rep,name=endpoints,proto3" json:"endpoints,omitempty"`
	// Stable identity of the provider credential that produced this binding.
	// Supervisors use it to retain old revision placeholders only across
	// rotations of the same provider credential.
	CredentialIdentity string `protobuf:"bytes,2,opt,name=credential_identity,json=credentialIdentity,proto3" json:"credential_identity,omitempty"`
	// Opaque gateway-issued handle for a stable credential lifecycle. When
	// non-empty, supervisors keep the workload placeholder stable across value
	// updates and replace only the resolver value. The handle changes when the
	// sandbox, provider, credential key, endpoint authorization, or an applicable
	// refresh authorization epoch changes.
	WorkloadCredentialHandle string `` /* 135-byte string literal not displayed */
	// contains filtered or unexported fields
}

Endpoint allowlist for one static provider credential environment variable.

func (*StaticCredentialBinding) Descriptor deprecated 

func (*StaticCredentialBinding) Descriptor() ([]byte, []int)

Deprecated: Use StaticCredentialBinding.ProtoReflect.Descriptor instead.

func (*StaticCredentialBinding) GetCredentialIdentity 

func (x *StaticCredentialBinding) GetCredentialIdentity() string

func (*StaticCredentialBinding) GetEndpoints 

func (x *StaticCredentialBinding) GetEndpoints() []*StaticCredentialEndpointBinding

func (*StaticCredentialBinding) GetWorkloadCredentialHandle 

func (x *StaticCredentialBinding) GetWorkloadCredentialHandle() string

func (*StaticCredentialBinding) ProtoMessage 

func (*StaticCredentialBinding) ProtoMessage()

func (*StaticCredentialBinding) ProtoReflect 

func (x *StaticCredentialBinding) ProtoReflect() protoreflect.Message

func (*StaticCredentialBinding) Reset 

func (x *StaticCredentialBinding) Reset()

func (*StaticCredentialBinding) String 

func (x *StaticCredentialBinding) String() string

type StaticCredentialEndpointBinding 

type StaticCredentialEndpointBinding struct {
	Host string `protobuf:"bytes,1,opt,name=host,proto3" json:"host,omitempty"`
	Port uint32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	Path string `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`
	// contains filtered or unexported fields
}

One network endpoint at which a static provider credential may be resolved.

func (*StaticCredentialEndpointBinding) Descriptor deprecated 

func (*StaticCredentialEndpointBinding) Descriptor() ([]byte, []int)

Deprecated: Use StaticCredentialEndpointBinding.ProtoReflect.Descriptor instead.

func (*StaticCredentialEndpointBinding) GetHost 

func (x *StaticCredentialEndpointBinding) GetHost() string

func (*StaticCredentialEndpointBinding) GetPath 

func (x *StaticCredentialEndpointBinding) GetPath() string

func (*StaticCredentialEndpointBinding) GetPort 

func (x *StaticCredentialEndpointBinding) GetPort() uint32

func (*StaticCredentialEndpointBinding) ProtoMessage 

func (*StaticCredentialEndpointBinding) ProtoMessage()

func (*StaticCredentialEndpointBinding) ProtoReflect 

func (x *StaticCredentialEndpointBinding) ProtoReflect() protoreflect.Message

func (*StaticCredentialEndpointBinding) Reset 

func (x *StaticCredentialEndpointBinding) Reset()

func (*StaticCredentialEndpointBinding) String 

func (x *StaticCredentialEndpointBinding) String() string

type StopSandboxRequest 

type StopSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Stop sandbox request.

func (*StopSandboxRequest) Descriptor deprecated 

func (*StopSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use StopSandboxRequest.ProtoReflect.Descriptor instead.

func (*StopSandboxRequest) GetName 

func (x *StopSandboxRequest) GetName() string

func (*StopSandboxRequest) GetRequestId 

func (x *StopSandboxRequest) GetRequestId() string

func (*StopSandboxRequest) GetWorkspaceScope 

func (x *StopSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*StopSandboxRequest) ProtoMessage 

func (*StopSandboxRequest) ProtoMessage()

func (*StopSandboxRequest) ProtoReflect 

func (x *StopSandboxRequest) ProtoReflect() protoreflect.Message

func (*StopSandboxRequest) Reset 

func (x *StopSandboxRequest) Reset()

func (*StopSandboxRequest) String 

func (x *StopSandboxRequest) String() string

type SubmitPolicyAnalysisRequest 

type SubmitPolicyAnalysisRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,6,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Aggregated denial summaries.
	Summaries []*DenialSummary `protobuf:"bytes,1,rep,name=summaries,proto3" json:"summaries,omitempty"`
	// Proposed policy chunks (validated by sandbox OPA engine).
	ProposedChunks []*PolicyChunk `protobuf:"bytes,2,rep,name=proposed_chunks,json=proposedChunks,proto3" json:"proposed_chunks,omitempty"`
	// Analysis mode. `mechanistic` is the observation-driven path from the
	// denial aggregator — chunks targeting the same host|port|binary fold
	// into one row with hit_count incremented. `agent_authored` is an
	// intentional proposal from an in-sandbox agent — each submission lands
	// as its own chunk so the redraft-after-rejection loop has a stable id
	// to watch. Other values are treated as agent-style (no dedup) so a new
	// mode does not silently collapse proposals.
	AnalysisMode string `protobuf:"bytes,3,opt,name=analysis_mode,json=analysisMode,proto3" json:"analysis_mode,omitempty"`
	// Sandbox name. The authenticated sandbox principal remains authoritative
	// for this internal callback.
	Name string `protobuf:"bytes,4,opt,name=name,proto3" json:"name,omitempty"`
	// Anonymous network activity counters.
	NetworkActivitySummaries []*NetworkActivitySummary `` /* 135-byte string literal not displayed */
	// contains filtered or unexported fields
}

Submit analysis results from sandbox to gateway.

func (*SubmitPolicyAnalysisRequest) Descriptor deprecated 

func (*SubmitPolicyAnalysisRequest) Descriptor() ([]byte, []int)

Deprecated: Use SubmitPolicyAnalysisRequest.ProtoReflect.Descriptor instead.

func (*SubmitPolicyAnalysisRequest) GetAnalysisMode 

func (x *SubmitPolicyAnalysisRequest) GetAnalysisMode() string

func (*SubmitPolicyAnalysisRequest) GetName 

func (x *SubmitPolicyAnalysisRequest) GetName() string

func (*SubmitPolicyAnalysisRequest) GetNetworkActivitySummaries 

func (x *SubmitPolicyAnalysisRequest) GetNetworkActivitySummaries() []*NetworkActivitySummary

func (*SubmitPolicyAnalysisRequest) GetProposedChunks 

func (x *SubmitPolicyAnalysisRequest) GetProposedChunks() []*PolicyChunk

func (*SubmitPolicyAnalysisRequest) GetSummaries 

func (x *SubmitPolicyAnalysisRequest) GetSummaries() []*DenialSummary

func (*SubmitPolicyAnalysisRequest) GetWorkspaceScope 

func (x *SubmitPolicyAnalysisRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*SubmitPolicyAnalysisRequest) ProtoMessage 

func (*SubmitPolicyAnalysisRequest) ProtoMessage()

func (*SubmitPolicyAnalysisRequest) ProtoReflect 

func (x *SubmitPolicyAnalysisRequest) ProtoReflect() protoreflect.Message

func (*SubmitPolicyAnalysisRequest) Reset 

func (x *SubmitPolicyAnalysisRequest) Reset()

func (*SubmitPolicyAnalysisRequest) String 

func (x *SubmitPolicyAnalysisRequest) String() string

type SubmitPolicyAnalysisResponse 

type SubmitPolicyAnalysisResponse struct {

	// Number of chunks accepted by the gateway.
	AcceptedChunks uint32 `protobuf:"varint,1,opt,name=accepted_chunks,json=acceptedChunks,proto3" json:"accepted_chunks,omitempty"`
	// Number of chunks rejected by gateway validation.
	RejectedChunks uint32 `protobuf:"varint,2,opt,name=rejected_chunks,json=rejectedChunks,proto3" json:"rejected_chunks,omitempty"`
	// Reasons for each rejected chunk.
	RejectionReasons []string `protobuf:"bytes,3,rep,name=rejection_reasons,json=rejectionReasons,proto3" json:"rejection_reasons,omitempty"`
	// Server-assigned chunk IDs for the accepted chunks, in submission order.
	// Agents use these to watch proposal state via policy.local's
	// GET /v1/proposals/{id} and /wait endpoints.
	AcceptedChunkIds []string `protobuf:"bytes,4,rep,name=accepted_chunk_ids,json=acceptedChunkIds,proto3" json:"accepted_chunk_ids,omitempty"`
	// contains filtered or unexported fields
}

func (*SubmitPolicyAnalysisResponse) Descriptor deprecated 

func (*SubmitPolicyAnalysisResponse) Descriptor() ([]byte, []int)

Deprecated: Use SubmitPolicyAnalysisResponse.ProtoReflect.Descriptor instead.

func (*SubmitPolicyAnalysisResponse) GetAcceptedChunkIds 

func (x *SubmitPolicyAnalysisResponse) GetAcceptedChunkIds() []string

func (*SubmitPolicyAnalysisResponse) GetAcceptedChunks 

func (x *SubmitPolicyAnalysisResponse) GetAcceptedChunks() uint32

func (*SubmitPolicyAnalysisResponse) GetRejectedChunks 

func (x *SubmitPolicyAnalysisResponse) GetRejectedChunks() uint32

func (*SubmitPolicyAnalysisResponse) GetRejectionReasons 

func (x *SubmitPolicyAnalysisResponse) GetRejectionReasons() []string

func (*SubmitPolicyAnalysisResponse) ProtoMessage 

func (*SubmitPolicyAnalysisResponse) ProtoMessage()

func (*SubmitPolicyAnalysisResponse) ProtoReflect 

func (x *SubmitPolicyAnalysisResponse) ProtoReflect() protoreflect.Message

func (*SubmitPolicyAnalysisResponse) Reset 

func (x *SubmitPolicyAnalysisResponse) Reset()

func (*SubmitPolicyAnalysisResponse) String 

func (x *SubmitPolicyAnalysisResponse) String() string

type SupervisorHeartbeat 

type SupervisorHeartbeat struct {
	// contains filtered or unexported fields
}

Supervisor heartbeat.

func (*SupervisorHeartbeat) Descriptor deprecated 

func (*SupervisorHeartbeat) Descriptor() ([]byte, []int)

Deprecated: Use SupervisorHeartbeat.ProtoReflect.Descriptor instead.

func (*SupervisorHeartbeat) ProtoMessage 

func (*SupervisorHeartbeat) ProtoMessage()

func (*SupervisorHeartbeat) ProtoReflect 

func (x *SupervisorHeartbeat) ProtoReflect() protoreflect.Message

func (*SupervisorHeartbeat) Reset 

func (x *SupervisorHeartbeat) Reset()

func (*SupervisorHeartbeat) String 

func (x *SupervisorHeartbeat) String() string

type SupervisorHello 

type SupervisorHello struct {

	// Sandbox ID this supervisor manages.
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// Supervisor instance ID (e.g. boot id or process epoch).
	InstanceId string `protobuf:"bytes,2,opt,name=instance_id,json=instanceId,proto3" json:"instance_id,omitempty"`
	// Monotonic counter scoped to instance_id. Incremented for each reconnect so
	// gateways can distinguish a fresh supervisor connection from stale cleanup.
	ConnectionEpoch uint64 `protobuf:"varint,3,opt,name=connection_epoch,json=connectionEpoch,proto3" json:"connection_epoch,omitempty"`
	// The supervisor can report credential, policy, and launch-environment installation.
	SupportsProviderReadiness bool `` /* 139-byte string literal not displayed */
	// Set when this connection is the result of following a SessionRedirect. The
	// receiving gateway serves a redirected hello locally instead of redirecting
	// again, so a disagreement about membership cannot bounce the supervisor
	// between replicas. A gateway that is shutting down may still redirect it.
	Redirected bool `protobuf:"varint,5,opt,name=redirected,proto3" json:"redirected,omitempty"`
	// The supervisor understands SessionRedirect. Gateways never redirect a
	// supervisor that does not set this.
	SupportsSessionRedirect bool `` /* 133-byte string literal not displayed */
	// The supervisor can receive its configuration over this stream instead of
	// polling for it: it applies the bootstrap ConfigUpdate and later
	// ConfigUpdate payloads, and answers each with its result and admission.
	// Gateways push configuration only to supervisors that set this.
	SupportsConfigPush bool `protobuf:"varint,7,opt,name=supports_config_push,json=supportsConfigPush,proto3" json:"supports_config_push,omitempty"`
	// contains filtered or unexported fields
}

Supervisor identifies itself and the sandbox it manages.

func (*SupervisorHello) Descriptor deprecated 

func (*SupervisorHello) Descriptor() ([]byte, []int)

Deprecated: Use SupervisorHello.ProtoReflect.Descriptor instead.

func (*SupervisorHello) GetConnectionEpoch 

func (x *SupervisorHello) GetConnectionEpoch() uint64

func (*SupervisorHello) GetInstanceId 

func (x *SupervisorHello) GetInstanceId() string

func (*SupervisorHello) GetRedirected 

func (x *SupervisorHello) GetRedirected() bool

func (*SupervisorHello) GetSandboxId 

func (x *SupervisorHello) GetSandboxId() string

func (*SupervisorHello) GetSupportsConfigPush 

func (x *SupervisorHello) GetSupportsConfigPush() bool

func (*SupervisorHello) GetSupportsProviderReadiness 

func (x *SupervisorHello) GetSupportsProviderReadiness() bool

func (*SupervisorHello) GetSupportsSessionRedirect 

func (x *SupervisorHello) GetSupportsSessionRedirect() bool

func (*SupervisorHello) ProtoMessage 

func (*SupervisorHello) ProtoMessage()

func (*SupervisorHello) ProtoReflect 

func (x *SupervisorHello) ProtoReflect() protoreflect.Message

func (*SupervisorHello) Reset 

func (x *SupervisorHello) Reset()

func (*SupervisorHello) String 

func (x *SupervisorHello) String() string

type SupervisorMessage 

type SupervisorMessage struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*SupervisorMessage_Hello
	//	*SupervisorMessage_Heartbeat
	//	*SupervisorMessage_RelayOpenResult
	//	*SupervisorMessage_RelayClose
	//	*SupervisorMessage_ConfigUpdateResult
	Payload isSupervisorMessage_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

Envelope for supervisor-to-gateway messages on the ConnectSupervisor stream.

func (*SupervisorMessage) Descriptor deprecated 

func (*SupervisorMessage) Descriptor() ([]byte, []int)

Deprecated: Use SupervisorMessage.ProtoReflect.Descriptor instead.

func (*SupervisorMessage) GetConfigUpdateResult 

func (x *SupervisorMessage) GetConfigUpdateResult() *ConfigUpdateResult

func (*SupervisorMessage) GetHeartbeat 

func (x *SupervisorMessage) GetHeartbeat() *SupervisorHeartbeat

func (*SupervisorMessage) GetHello 

func (x *SupervisorMessage) GetHello() *SupervisorHello

func (*SupervisorMessage) GetPayload 

func (x *SupervisorMessage) GetPayload() isSupervisorMessage_Payload

func (*SupervisorMessage) GetRelayClose 

func (x *SupervisorMessage) GetRelayClose() *RelayClose

func (*SupervisorMessage) GetRelayOpenResult 

func (x *SupervisorMessage) GetRelayOpenResult() *RelayOpenResult

func (*SupervisorMessage) ProtoMessage 

func (*SupervisorMessage) ProtoMessage()

func (*SupervisorMessage) ProtoReflect 

func (x *SupervisorMessage) ProtoReflect() protoreflect.Message

func (*SupervisorMessage) Reset 

func (x *SupervisorMessage) Reset()

func (*SupervisorMessage) String 

func (x *SupervisorMessage) String() string

type SupervisorMessage_ConfigUpdateResult 

type SupervisorMessage_ConfigUpdateResult struct {
	ConfigUpdateResult *ConfigUpdateResult `protobuf:"bytes,5,opt,name=config_update_result,json=configUpdateResult,proto3,oneof"`
}

type SupervisorMessage_Heartbeat 

type SupervisorMessage_Heartbeat struct {
	Heartbeat *SupervisorHeartbeat `protobuf:"bytes,2,opt,name=heartbeat,proto3,oneof"`
}

type SupervisorMessage_Hello 

type SupervisorMessage_Hello struct {
	Hello *SupervisorHello `protobuf:"bytes,1,opt,name=hello,proto3,oneof"`
}

type SupervisorMessage_RelayClose 

type SupervisorMessage_RelayClose struct {
	RelayClose *RelayClose `protobuf:"bytes,4,opt,name=relay_close,json=relayClose,proto3,oneof"`
}

type SupervisorMessage_RelayOpenResult 

type SupervisorMessage_RelayOpenResult struct {
	RelayOpenResult *RelayOpenResult `protobuf:"bytes,3,opt,name=relay_open_result,json=relayOpenResult,proto3,oneof"`
}

type SuspendSandboxRequest 

type SuspendSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,2,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Name           string                         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Suspend sandbox request.

func (*SuspendSandboxRequest) Descriptor deprecated 

func (*SuspendSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use SuspendSandboxRequest.ProtoReflect.Descriptor instead.

func (*SuspendSandboxRequest) GetName 

func (x *SuspendSandboxRequest) GetName() string

func (*SuspendSandboxRequest) GetWorkspaceScope 

func (x *SuspendSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*SuspendSandboxRequest) ProtoMessage 

func (*SuspendSandboxRequest) ProtoMessage()

func (*SuspendSandboxRequest) ProtoReflect 

func (x *SuspendSandboxRequest) ProtoReflect() protoreflect.Message

func (*SuspendSandboxRequest) Reset 

func (x *SuspendSandboxRequest) Reset()

func (*SuspendSandboxRequest) String 

func (x *SuspendSandboxRequest) String() string

type TcpForwardFrame 

type TcpForwardFrame struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*TcpForwardFrame_Init
	//	*TcpForwardFrame_Data
	Payload isTcpForwardFrame_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

A single frame on the CLI-to-gateway TCP forward stream.

func (*TcpForwardFrame) Descriptor deprecated 

func (*TcpForwardFrame) Descriptor() ([]byte, []int)

Deprecated: Use TcpForwardFrame.ProtoReflect.Descriptor instead.

func (*TcpForwardFrame) GetData 

func (x *TcpForwardFrame) GetData() []byte

func (*TcpForwardFrame) GetInit 

func (x *TcpForwardFrame) GetInit() *TcpForwardInit

func (*TcpForwardFrame) GetPayload 

func (x *TcpForwardFrame) GetPayload() isTcpForwardFrame_Payload

func (*TcpForwardFrame) ProtoMessage 

func (*TcpForwardFrame) ProtoMessage()

func (*TcpForwardFrame) ProtoReflect 

func (x *TcpForwardFrame) ProtoReflect() protoreflect.Message

func (*TcpForwardFrame) Reset 

func (x *TcpForwardFrame) Reset()

func (*TcpForwardFrame) String 

func (x *TcpForwardFrame) String() string

type TcpForwardFrame_Data 

type TcpForwardFrame_Data struct {
	Data []byte `protobuf:"bytes,2,opt,name=data,proto3,oneof"`
}

type TcpForwardFrame_Init 

type TcpForwardFrame_Init struct {
	Init *TcpForwardInit `protobuf:"bytes,1,opt,name=init,proto3,oneof"`
}

type TcpForwardInit 

type TcpForwardInit struct {
	Sandbox   string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	Workspace string `protobuf:"bytes,3,opt,name=workspace,proto3" json:"workspace,omitempty"`
	// Optional service identifier for audit/correlation.
	ServiceId string `protobuf:"bytes,4,opt,name=service_id,json=serviceId,proto3" json:"service_id,omitempty"`
	// Target the gateway should request from the supervisor.
	//
	// Types that are valid to be assigned to Target:
	//
	//	*TcpForwardInit_Ssh
	//	*TcpForwardInit_Tcp
	Target isTcpForwardInit_Target `protobuf_oneof:"target"`
	// Optional target-specific authorization token. SSH targets use this as the
	// short-lived SSH session token issued by CreateSshSession.
	AuthorizationToken string `protobuf:"bytes,7,opt,name=authorization_token,json=authorizationToken,proto3" json:"authorization_token,omitempty"`
	// contains filtered or unexported fields
}

Initial frame for one TCP forward stream.

func (*TcpForwardInit) Descriptor deprecated 

func (*TcpForwardInit) Descriptor() ([]byte, []int)

Deprecated: Use TcpForwardInit.ProtoReflect.Descriptor instead.

func (*TcpForwardInit) GetAuthorizationToken 

func (x *TcpForwardInit) GetAuthorizationToken() string

func (*TcpForwardInit) GetSandbox 

func (x *TcpForwardInit) GetSandbox() string

func (*TcpForwardInit) GetServiceId 

func (x *TcpForwardInit) GetServiceId() string

func (*TcpForwardInit) GetSsh 

func (x *TcpForwardInit) GetSsh() *SshRelayTarget

func (*TcpForwardInit) GetTarget 

func (x *TcpForwardInit) GetTarget() isTcpForwardInit_Target

func (*TcpForwardInit) GetTcp 

func (x *TcpForwardInit) GetTcp() *TcpRelayTarget

func (*TcpForwardInit) GetWorkspace 

func (x *TcpForwardInit) GetWorkspace() string

func (*TcpForwardInit) ProtoMessage 

func (*TcpForwardInit) ProtoMessage()

func (*TcpForwardInit) ProtoReflect 

func (x *TcpForwardInit) ProtoReflect() protoreflect.Message

func (*TcpForwardInit) Reset 

func (x *TcpForwardInit) Reset()

func (*TcpForwardInit) String 

func (x *TcpForwardInit) String() string

type TcpForwardInit_Ssh 

type TcpForwardInit_Ssh struct {
	Ssh *SshRelayTarget `protobuf:"bytes,5,opt,name=ssh,proto3,oneof"`
}

type TcpForwardInit_Tcp 

type TcpForwardInit_Tcp struct {
	Tcp *TcpRelayTarget `protobuf:"bytes,6,opt,name=tcp,proto3,oneof"`
}

type TcpRelayTarget 

type TcpRelayTarget struct {

	// Phase 1 accepts loopback only: 127.0.0.1, ::1, or localhost.
	Host string `protobuf:"bytes,1,opt,name=host,proto3" json:"host,omitempty"`
	// Target port. Must fit in u16 and be non-zero.
	Port uint32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}

TCP target dialed by the supervisor from inside the sandbox.

func (*TcpRelayTarget) Descriptor deprecated 

func (*TcpRelayTarget) Descriptor() ([]byte, []int)

Deprecated: Use TcpRelayTarget.ProtoReflect.Descriptor instead.

func (*TcpRelayTarget) GetHost 

func (x *TcpRelayTarget) GetHost() string

func (*TcpRelayTarget) GetPort 

func (x *TcpRelayTarget) GetPort() uint32

func (*TcpRelayTarget) ProtoMessage 

func (*TcpRelayTarget) ProtoMessage()

func (*TcpRelayTarget) ProtoReflect 

func (x *TcpRelayTarget) ProtoReflect() protoreflect.Message

func (*TcpRelayTarget) Reset 

func (x *TcpRelayTarget) Reset()

func (*TcpRelayTarget) String 

func (x *TcpRelayTarget) String() string

type TokenGrantFailureObservation 

type TokenGrantFailureObservation struct {

	// Canonical observed host or IP address, bounded to 253 ASCII bytes.
	DestinationHost string `protobuf:"bytes,1,opt,name=destination_host,json=destinationHost,proto3" json:"destination_host,omitempty"`
	// Observed destination port in the range 1 through 65535.
	DestinationPort uint32 `protobuf:"varint,2,opt,name=destination_port,json=destinationPort,proto3" json:"destination_port,omitempty"`
	// Bounded token_grant cause. Provider and credential may be absent when
	// selection failed; the request ID still identifies the refused exchange.
	Failure *EndpointFailure `protobuf:"bytes,3,opt,name=failure,proto3" json:"failure,omitempty"`
	// contains filtered or unexported fields
}

A refused grant and its destination, without request paths or remote text. This describes the failed attempt, not the destination's current health.

func (*TokenGrantFailureObservation) Descriptor deprecated 

func (*TokenGrantFailureObservation) Descriptor() ([]byte, []int)

Deprecated: Use TokenGrantFailureObservation.ProtoReflect.Descriptor instead.

func (*TokenGrantFailureObservation) GetDestinationHost 

func (x *TokenGrantFailureObservation) GetDestinationHost() string

func (*TokenGrantFailureObservation) GetDestinationPort 

func (x *TokenGrantFailureObservation) GetDestinationPort() uint32

func (*TokenGrantFailureObservation) GetFailure 

func (x *TokenGrantFailureObservation) GetFailure() *EndpointFailure

func (*TokenGrantFailureObservation) ProtoMessage 

func (*TokenGrantFailureObservation) ProtoMessage()

func (*TokenGrantFailureObservation) ProtoReflect 

func (x *TokenGrantFailureObservation) ProtoReflect() protoreflect.Message

func (*TokenGrantFailureObservation) Reset 

func (x *TokenGrantFailureObservation) Reset()

func (*TokenGrantFailureObservation) String 

func (x *TokenGrantFailureObservation) String() string

type TokenGrantStatus 

type TokenGrantStatus struct {
	LastFailure *TokenGrantFailureObservation `protobuf:"bytes,1,opt,name=last_failure,json=lastFailure,proto3" json:"last_failure,omitempty"`
	// contains filtered or unexported fields
}

Latest token-grant state sent by the authenticated supervisor.

func (*TokenGrantStatus) Descriptor deprecated 

func (*TokenGrantStatus) Descriptor() ([]byte, []int)

Deprecated: Use TokenGrantStatus.ProtoReflect.Descriptor instead.

func (*TokenGrantStatus) GetLastFailure 

func (x *TokenGrantStatus) GetLastFailure() *TokenGrantFailureObservation

func (*TokenGrantStatus) ProtoMessage 

func (*TokenGrantStatus) ProtoMessage()

func (*TokenGrantStatus) ProtoReflect 

func (x *TokenGrantStatus) ProtoReflect() protoreflect.Message

func (*TokenGrantStatus) Reset 

func (x *TokenGrantStatus) Reset()

func (*TokenGrantStatus) String 

func (x *TokenGrantStatus) String() string

type UndoDraftChunkRequest 

type UndoDraftChunkRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Chunk ID to undo.
	ChunkId string `protobuf:"bytes,2,opt,name=chunk_id,json=chunkId,proto3" json:"chunk_id,omitempty"`
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Reverse an approval (remove merged rule from active policy).

func (*UndoDraftChunkRequest) Descriptor deprecated 

func (*UndoDraftChunkRequest) Descriptor() ([]byte, []int)

Deprecated: Use UndoDraftChunkRequest.ProtoReflect.Descriptor instead.

func (*UndoDraftChunkRequest) GetChunkId 

func (x *UndoDraftChunkRequest) GetChunkId() string

func (*UndoDraftChunkRequest) GetRequestId 

func (x *UndoDraftChunkRequest) GetRequestId() string

func (*UndoDraftChunkRequest) GetSandbox 

func (x *UndoDraftChunkRequest) GetSandbox() string

func (*UndoDraftChunkRequest) GetWorkspaceScope 

func (x *UndoDraftChunkRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*UndoDraftChunkRequest) ProtoMessage 

func (*UndoDraftChunkRequest) ProtoMessage()

func (*UndoDraftChunkRequest) ProtoReflect 

func (x *UndoDraftChunkRequest) ProtoReflect() protoreflect.Message

func (*UndoDraftChunkRequest) Reset 

func (x *UndoDraftChunkRequest) Reset()

func (*UndoDraftChunkRequest) String 

func (x *UndoDraftChunkRequest) String() string

type UndoDraftChunkResponse 

type UndoDraftChunkResponse struct {

	// New policy version after removal.
	PolicyVersion uint32 `protobuf:"varint,1,opt,name=policy_version,json=policyVersion,proto3" json:"policy_version,omitempty"`
	// SHA-256 hash of the updated policy.
	PolicyHash string `protobuf:"bytes,2,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// contains filtered or unexported fields
}

func (*UndoDraftChunkResponse) Descriptor deprecated 

func (*UndoDraftChunkResponse) Descriptor() ([]byte, []int)

Deprecated: Use UndoDraftChunkResponse.ProtoReflect.Descriptor instead.

func (*UndoDraftChunkResponse) GetPolicyHash 

func (x *UndoDraftChunkResponse) GetPolicyHash() string

func (*UndoDraftChunkResponse) GetPolicyVersion 

func (x *UndoDraftChunkResponse) GetPolicyVersion() uint32

func (*UndoDraftChunkResponse) ProtoMessage 

func (*UndoDraftChunkResponse) ProtoMessage()

func (*UndoDraftChunkResponse) ProtoReflect 

func (x *UndoDraftChunkResponse) ProtoReflect() protoreflect.Message

func (*UndoDraftChunkResponse) Reset 

func (x *UndoDraftChunkResponse) Reset()

func (*UndoDraftChunkResponse) String 

func (x *UndoDraftChunkResponse) String() string

type UnimplementedOpenShellServer 

type UnimplementedOpenShellServer struct{}

UnimplementedOpenShellServer must be embedded to have forward compatible implementations.

NOTE: this should be embedded by value instead of pointer to avoid a nil pointer dereference when methods are called.

func (UnimplementedOpenShellServer) AddWorkspaceMember 

func (UnimplementedOpenShellServer) AddWorkspaceMember(context.Context, *AddWorkspaceMemberRequest) (*AddWorkspaceMemberResponse, error)

func (UnimplementedOpenShellServer) ApproveAllDraftChunks 

func (UnimplementedOpenShellServer) ApproveAllDraftChunks(context.Context, *ApproveAllDraftChunksRequest) (*ApproveAllDraftChunksResponse, error)

func (UnimplementedOpenShellServer) ApproveDraftChunk 

func (UnimplementedOpenShellServer) ApproveDraftChunk(context.Context, *ApproveDraftChunkRequest) (*ApproveDraftChunkResponse, error)

func (UnimplementedOpenShellServer) AttachSandboxProvider 

func (UnimplementedOpenShellServer) AttachSandboxProvider(context.Context, *AttachSandboxProviderRequest) (*AttachSandboxProviderResponse, error)

func (UnimplementedOpenShellServer) BeginRootfsTarStaging 

func (UnimplementedOpenShellServer) BeginRootfsTarStaging(context.Context, *BeginRootfsTarStagingRequest) (*BeginRootfsTarStagingResponse, error)

func (UnimplementedOpenShellServer) ClearDraftChunks 

func (UnimplementedOpenShellServer) ClearDraftChunks(context.Context, *ClearDraftChunksRequest) (*ClearDraftChunksResponse, error)

func (UnimplementedOpenShellServer) ConfigureProviderRefresh 

func (UnimplementedOpenShellServer) ConfigureProviderRefresh(context.Context, *ConfigureProviderRefreshRequest) (*ConfigureProviderRefreshResponse, error)

func (UnimplementedOpenShellServer) ConnectSupervisor 

func (UnimplementedOpenShellServer) ConnectSupervisor(grpc.BidiStreamingServer[SupervisorMessage, GatewayMessage]) error

func (UnimplementedOpenShellServer) CreateProvider 

func (UnimplementedOpenShellServer) CreateProvider(context.Context, *CreateProviderRequest) (*ProviderResponse, error)

func (UnimplementedOpenShellServer) CreateSandbox 

func (UnimplementedOpenShellServer) CreateSandbox(context.Context, *CreateSandboxRequest) (*SandboxResponse, error)

func (UnimplementedOpenShellServer) CreateSandboxTemplate 

func (UnimplementedOpenShellServer) CreateSandboxTemplate(context.Context, *CreateSandboxTemplateRequest) (*SandboxTemplateResponse, error)

func (UnimplementedOpenShellServer) CreateSshSession 

func (UnimplementedOpenShellServer) CreateSshSession(context.Context, *CreateSshSessionRequest) (*CreateSshSessionResponse, error)

func (UnimplementedOpenShellServer) CreateWorkspace 

func (UnimplementedOpenShellServer) CreateWorkspace(context.Context, *CreateWorkspaceRequest) (*CreateWorkspaceResponse, error)

func (UnimplementedOpenShellServer) DeleteProvider 

func (UnimplementedOpenShellServer) DeleteProvider(context.Context, *DeleteProviderRequest) (*DeleteProviderResponse, error)

func (UnimplementedOpenShellServer) DeleteProviderProfile 

func (UnimplementedOpenShellServer) DeleteProviderProfile(context.Context, *DeleteProviderProfileRequest) (*DeleteProviderProfileResponse, error)

func (UnimplementedOpenShellServer) DeleteProviderRefresh 

func (UnimplementedOpenShellServer) DeleteProviderRefresh(context.Context, *DeleteProviderRefreshRequest) (*DeleteProviderRefreshResponse, error)

func (UnimplementedOpenShellServer) DeleteSandbox 

func (UnimplementedOpenShellServer) DeleteSandbox(context.Context, *DeleteSandboxRequest) (*DeleteSandboxResponse, error)

func (UnimplementedOpenShellServer) DeleteSandboxTemplate 

func (UnimplementedOpenShellServer) DeleteSandboxTemplate(context.Context, *DeleteSandboxTemplateRequest) (*DeleteSandboxTemplateResponse, error)

func (UnimplementedOpenShellServer) DeleteService 

func (UnimplementedOpenShellServer) DeleteService(context.Context, *DeleteServiceRequest) (*DeleteServiceResponse, error)

func (UnimplementedOpenShellServer) DeleteWorkspace 

func (UnimplementedOpenShellServer) DeleteWorkspace(context.Context, *DeleteWorkspaceRequest) (*DeleteWorkspaceResponse, error)

func (UnimplementedOpenShellServer) DetachSandboxProvider 

func (UnimplementedOpenShellServer) DetachSandboxProvider(context.Context, *DetachSandboxProviderRequest) (*DetachSandboxProviderResponse, error)

func (UnimplementedOpenShellServer) EditDraftChunk 

func (UnimplementedOpenShellServer) EditDraftChunk(context.Context, *EditDraftChunkRequest) (*EditDraftChunkResponse, error)

func (UnimplementedOpenShellServer) ExchangeProviderSubjectToken 

func (UnimplementedOpenShellServer) ExchangeProviderSubjectToken(context.Context, *ExchangeProviderSubjectTokenRequest) (*ExchangeProviderSubjectTokenResponse, error)

func (UnimplementedOpenShellServer) ExecSandbox 

func (UnimplementedOpenShellServer) ExecSandbox(*ExecSandboxRequest, grpc.ServerStreamingServer[ExecSandboxEvent]) error

func (UnimplementedOpenShellServer) ExecSandboxInteractive 

func (UnimplementedOpenShellServer) ExecSandboxInteractive(grpc.BidiStreamingServer[ExecSandboxInput, ExecSandboxEvent]) error

func (UnimplementedOpenShellServer) ExposeService 

func (UnimplementedOpenShellServer) ExposeService(context.Context, *ExposeServiceRequest) (*ServiceEndpointResponse, error)

func (UnimplementedOpenShellServer) FinalizeMainProcessExit 

func (UnimplementedOpenShellServer) FinalizeMainProcessExit(context.Context, *FinalizeMainProcessExitRequest) (*FinalizeMainProcessExitResponse, error)

func (UnimplementedOpenShellServer) ForwardTcp 

func (UnimplementedOpenShellServer) ForwardTcp(grpc.BidiStreamingServer[TcpForwardFrame, TcpForwardFrame]) error

func (UnimplementedOpenShellServer) GetCurrentUser 

func (UnimplementedOpenShellServer) GetCurrentUser(context.Context, *GetCurrentUserRequest) (*GetCurrentUserResponse, error)

func (UnimplementedOpenShellServer) GetDraftHistory 

func (UnimplementedOpenShellServer) GetDraftHistory(context.Context, *GetDraftHistoryRequest) (*GetDraftHistoryResponse, error)

func (UnimplementedOpenShellServer) GetDraftPolicy 

func (UnimplementedOpenShellServer) GetDraftPolicy(context.Context, *GetDraftPolicyRequest) (*GetDraftPolicyResponse, error)

func (UnimplementedOpenShellServer) GetGatewayConfig 

func (UnimplementedOpenShellServer) GetGatewayConfig(context.Context, *sandboxv1.GetGatewayConfigRequest) (*sandboxv1.GetGatewayConfigResponse, error)

func (UnimplementedOpenShellServer) GetGatewayInfo 

func (UnimplementedOpenShellServer) GetGatewayInfo(context.Context, *GetGatewayInfoRequest) (*GetGatewayInfoResponse, error)

func (UnimplementedOpenShellServer) GetProvider 

func (UnimplementedOpenShellServer) GetProvider(context.Context, *GetProviderRequest) (*ProviderResponse, error)

func (UnimplementedOpenShellServer) GetProviderCredentials 

func (UnimplementedOpenShellServer) GetProviderCredentials(context.Context, *GetProviderCredentialsRequest) (*GetProviderCredentialsResponse, error)

func (UnimplementedOpenShellServer) GetProviderProfile 

func (UnimplementedOpenShellServer) GetProviderProfile(context.Context, *GetProviderProfileRequest) (*ProviderProfileResponse, error)

func (UnimplementedOpenShellServer) GetProviderRefreshStatus 

func (UnimplementedOpenShellServer) GetProviderRefreshStatus(context.Context, *GetProviderRefreshStatusRequest) (*GetProviderRefreshStatusResponse, error)

func (UnimplementedOpenShellServer) GetSandbox 

func (UnimplementedOpenShellServer) GetSandbox(context.Context, *GetSandboxRequest) (*SandboxResponse, error)

func (UnimplementedOpenShellServer) GetSandboxConfig 

func (UnimplementedOpenShellServer) GetSandboxConfig(context.Context, *sandboxv1.GetSandboxConfigRequest) (*sandboxv1.GetSandboxConfigResponse, error)

func (UnimplementedOpenShellServer) GetSandboxLogs 

func (UnimplementedOpenShellServer) GetSandboxLogs(context.Context, *GetSandboxLogsRequest) (*GetSandboxLogsResponse, error)

func (UnimplementedOpenShellServer) GetSandboxPolicyStatus 

func (UnimplementedOpenShellServer) GetSandboxPolicyStatus(context.Context, *GetSandboxPolicyStatusRequest) (*GetSandboxPolicyStatusResponse, error)

func (UnimplementedOpenShellServer) GetSandboxProviderEnvironment 

func (UnimplementedOpenShellServer) GetSandboxProviderEnvironment(context.Context, *GetSandboxProviderEnvironmentRequest) (*GetSandboxProviderEnvironmentResponse, error)

func (UnimplementedOpenShellServer) GetSandboxProviderStatus 

func (UnimplementedOpenShellServer) GetSandboxProviderStatus(context.Context, *GetSandboxProviderStatusRequest) (*GetSandboxProviderStatusResponse, error)

func (UnimplementedOpenShellServer) GetSandboxTemplate 

func (UnimplementedOpenShellServer) GetSandboxTemplate(context.Context, *GetSandboxTemplateRequest) (*SandboxTemplateResponse, error)

func (UnimplementedOpenShellServer) GetService 

func (UnimplementedOpenShellServer) GetService(context.Context, *GetServiceRequest) (*ServiceEndpointResponse, error)

func (UnimplementedOpenShellServer) GetWorkspace 

func (UnimplementedOpenShellServer) GetWorkspace(context.Context, *GetWorkspaceRequest) (*GetWorkspaceResponse, error)

func (UnimplementedOpenShellServer) Health 

func (UnimplementedOpenShellServer) Health(context.Context, *HealthRequest) (*HealthResponse, error)

func (UnimplementedOpenShellServer) ImportProviderProfiles 

func (UnimplementedOpenShellServer) ImportProviderProfiles(context.Context, *ImportProviderProfilesRequest) (*ImportProviderProfilesResponse, error)

func (UnimplementedOpenShellServer) IssueSandboxToken 

func (UnimplementedOpenShellServer) IssueSandboxToken(context.Context, *IssueSandboxTokenRequest) (*IssueSandboxTokenResponse, error)

func (UnimplementedOpenShellServer) LintProviderProfiles 

func (UnimplementedOpenShellServer) LintProviderProfiles(context.Context, *LintProviderProfilesRequest) (*LintProviderProfilesResponse, error)

func (UnimplementedOpenShellServer) ListProviderProfiles 

func (UnimplementedOpenShellServer) ListProviderProfiles(context.Context, *ListProviderProfilesRequest) (*ListProviderProfilesResponse, error)

func (UnimplementedOpenShellServer) ListProviders 

func (UnimplementedOpenShellServer) ListProviders(context.Context, *ListProvidersRequest) (*ListProvidersResponse, error)

func (UnimplementedOpenShellServer) ListSandboxPolicies 

func (UnimplementedOpenShellServer) ListSandboxPolicies(context.Context, *ListSandboxPoliciesRequest) (*ListSandboxPoliciesResponse, error)

func (UnimplementedOpenShellServer) ListSandboxProviders 

func (UnimplementedOpenShellServer) ListSandboxProviders(context.Context, *ListSandboxProvidersRequest) (*ListSandboxProvidersResponse, error)

func (UnimplementedOpenShellServer) ListSandboxTemplates 

func (UnimplementedOpenShellServer) ListSandboxTemplates(context.Context, *ListSandboxTemplatesRequest) (*ListSandboxTemplatesResponse, error)

func (UnimplementedOpenShellServer) ListSandboxes 

func (UnimplementedOpenShellServer) ListSandboxes(context.Context, *ListSandboxesRequest) (*ListSandboxesResponse, error)

func (UnimplementedOpenShellServer) ListServices 

func (UnimplementedOpenShellServer) ListServices(context.Context, *ListServicesRequest) (*ListServicesResponse, error)

func (UnimplementedOpenShellServer) ListWorkspaceMembers 

func (UnimplementedOpenShellServer) ListWorkspaceMembers(context.Context, *ListWorkspaceMembersRequest) (*ListWorkspaceMembersResponse, error)

func (UnimplementedOpenShellServer) ListWorkspaces 

func (UnimplementedOpenShellServer) ListWorkspaces(context.Context, *ListWorkspacesRequest) (*ListWorkspacesResponse, error)

func (UnimplementedOpenShellServer) PeerGetSandboxProviderStatus 

func (UnimplementedOpenShellServer) PeerGetSandboxProviderStatus(context.Context, *GetSandboxProviderStatusRequest) (*GetSandboxProviderStatusResponse, error)

func (UnimplementedOpenShellServer) PeerNotifyConfigUpdate 

func (UnimplementedOpenShellServer) PeerNotifyConfigUpdate(context.Context, *PeerNotifyConfigUpdateRequest) (*PeerNotifyConfigUpdateResponse, error)

func (UnimplementedOpenShellServer) PeerRelay 

func (UnimplementedOpenShellServer) PeerRelay(grpc.BidiStreamingServer[PeerRelayFrame, PeerRelayFrame]) error

func (UnimplementedOpenShellServer) PeerReportEndpointStatus 

func (UnimplementedOpenShellServer) PeerReportEndpointStatus(context.Context, *ReportEndpointStatusRequest) (*ReportEndpointStatusResponse, error)

func (UnimplementedOpenShellServer) PeerReportProviderReadiness 

func (UnimplementedOpenShellServer) PeerReportProviderReadiness(context.Context, *ReportProviderReadinessRequest) (*ReportProviderReadinessResponse, error)

func (UnimplementedOpenShellServer) PushSandboxLogs 

func (UnimplementedOpenShellServer) PushSandboxLogs(grpc.ClientStreamingServer[PushSandboxLogsRequest, PushSandboxLogsResponse]) error

func (UnimplementedOpenShellServer) RefreshSandboxToken 

func (UnimplementedOpenShellServer) RefreshSandboxToken(context.Context, *RefreshSandboxTokenRequest) (*RefreshSandboxTokenResponse, error)

func (UnimplementedOpenShellServer) RejectDraftChunk 

func (UnimplementedOpenShellServer) RejectDraftChunk(context.Context, *RejectDraftChunkRequest) (*RejectDraftChunkResponse, error)

func (UnimplementedOpenShellServer) RelayStream 

func (UnimplementedOpenShellServer) RelayStream(grpc.BidiStreamingServer[RelayFrame, RelayFrame]) error

func (UnimplementedOpenShellServer) RemoveWorkspaceMember 

func (UnimplementedOpenShellServer) RemoveWorkspaceMember(context.Context, *RemoveWorkspaceMemberRequest) (*RemoveWorkspaceMemberResponse, error)

func (UnimplementedOpenShellServer) ReportEndpointStatus 

func (UnimplementedOpenShellServer) ReportEndpointStatus(context.Context, *ReportEndpointStatusRequest) (*ReportEndpointStatusResponse, error)

func (UnimplementedOpenShellServer) ReportMainProcessExit 

func (UnimplementedOpenShellServer) ReportMainProcessExit(context.Context, *ReportMainProcessExitRequest) (*ReportMainProcessExitResponse, error)

func (UnimplementedOpenShellServer) ReportPolicyStatus 

func (UnimplementedOpenShellServer) ReportPolicyStatus(context.Context, *ReportPolicyStatusRequest) (*ReportPolicyStatusResponse, error)

func (UnimplementedOpenShellServer) ReportProviderReadiness 

func (UnimplementedOpenShellServer) ReportProviderReadiness(context.Context, *ReportProviderReadinessRequest) (*ReportProviderReadinessResponse, error)

func (UnimplementedOpenShellServer) ReportSandboxConfiguration 

func (UnimplementedOpenShellServer) ReportSandboxConfiguration(context.Context, *ReportSandboxConfigurationRequest) (*ReportSandboxConfigurationResponse, error)

func (UnimplementedOpenShellServer) ResumeSandbox 

func (UnimplementedOpenShellServer) ResumeSandbox(context.Context, *ResumeSandboxRequest) (*SandboxResponse, error)

func (UnimplementedOpenShellServer) RevokeSshSession 

func (UnimplementedOpenShellServer) RevokeSshSession(context.Context, *RevokeSshSessionRequest) (*RevokeSshSessionResponse, error)

func (UnimplementedOpenShellServer) RotateProviderCredential 

func (UnimplementedOpenShellServer) RotateProviderCredential(context.Context, *RotateProviderCredentialRequest) (*RotateProviderCredentialResponse, error)

func (UnimplementedOpenShellServer) StartSandbox 

func (UnimplementedOpenShellServer) StartSandbox(context.Context, *StartSandboxRequest) (*SandboxResponse, error)

func (UnimplementedOpenShellServer) StopSandbox 

func (UnimplementedOpenShellServer) StopSandbox(context.Context, *StopSandboxRequest) (*SandboxResponse, error)

func (UnimplementedOpenShellServer) SubmitPolicyAnalysis 

func (UnimplementedOpenShellServer) SubmitPolicyAnalysis(context.Context, *SubmitPolicyAnalysisRequest) (*SubmitPolicyAnalysisResponse, error)

func (UnimplementedOpenShellServer) SuspendSandbox 

func (UnimplementedOpenShellServer) SuspendSandbox(context.Context, *SuspendSandboxRequest) (*SandboxResponse, error)

func (UnimplementedOpenShellServer) UndoDraftChunk 

func (UnimplementedOpenShellServer) UndoDraftChunk(context.Context, *UndoDraftChunkRequest) (*UndoDraftChunkResponse, error)

func (UnimplementedOpenShellServer) UpdateConfig 

func (UnimplementedOpenShellServer) UpdateConfig(context.Context, *UpdateConfigRequest) (*UpdateConfigResponse, error)

func (UnimplementedOpenShellServer) UpdateProvider 

func (UnimplementedOpenShellServer) UpdateProvider(context.Context, *UpdateProviderRequest) (*ProviderResponse, error)

func (UnimplementedOpenShellServer) UpdateProviderProfiles 

func (UnimplementedOpenShellServer) UpdateProviderProfiles(context.Context, *UpdateProviderProfilesRequest) (*UpdateProviderProfilesResponse, error)

func (UnimplementedOpenShellServer) WatchSandbox 

func (UnimplementedOpenShellServer) WatchSandbox(*WatchSandboxRequest, grpc.ServerStreamingServer[SandboxStreamEvent]) error

type UnimplementedSandboxUpdatesServer added in v0.1.7 

type UnimplementedSandboxUpdatesServer struct{}

UnimplementedSandboxUpdatesServer must be embedded to have forward compatible implementations.

NOTE: this should be embedded by value instead of pointer to avoid a nil pointer dereference when methods are called.

func (UnimplementedSandboxUpdatesServer) UpdateSandbox added in v0.1.7 

func (UnimplementedSandboxUpdatesServer) UpdateSandbox(context.Context, *UpdateSandboxRequest) (*SandboxResponse, error)

type UnsafeOpenShellServer 

type UnsafeOpenShellServer interface {
	// contains filtered or unexported methods
}

UnsafeOpenShellServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to OpenShellServer will result in compilation errors.

type UnsafeSandboxUpdatesServer added in v0.1.7 

type UnsafeSandboxUpdatesServer interface {
	// contains filtered or unexported methods
}

UnsafeSandboxUpdatesServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to SandboxUpdatesServer will result in compilation errors.

type UpdateConfigRequest 

type UpdateConfigRequest struct {

	// Workspace scope. Omit for global updates; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,10,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// The new policy to apply.
	//
	// Sandbox scope (`global=false`):
	//   - only network_policies may differ from create-time
	//     policy; static fields must match version 1.
	//
	// Global scope (`global=true`):
	// - applies to all sandboxes in full (no merge).
	Policy *sandboxv1.SandboxPolicy `protobuf:"bytes,2,opt,name=policy,proto3" json:"policy,omitempty"`
	// Optional single setting key to mutate.
	SettingKey string `protobuf:"bytes,3,opt,name=setting_key,json=settingKey,proto3" json:"setting_key,omitempty"`
	// Setting value for upsert operations.
	SettingValue *sandboxv1.SettingValue `protobuf:"bytes,4,opt,name=setting_value,json=settingValue,proto3" json:"setting_value,omitempty"`
	// Delete the setting key from scope.
	// Sandbox-scoped deletes are rejected; only global delete is supported.
	DeleteSetting bool `protobuf:"varint,5,opt,name=delete_setting,json=deleteSetting,proto3" json:"delete_setting,omitempty"`
	// Apply mutation at gateway-global scope.
	Global bool `protobuf:"varint,6,opt,name=global,proto3" json:"global,omitempty"`
	// Batched incremental policy merge operations. Sandbox-scoped only.
	MergeOperations []*PolicyMergeOperation `protobuf:"bytes,7,rep,name=merge_operations,json=mergeOperations,proto3" json:"merge_operations,omitempty"`
	// Expected resource version for optimistic concurrency control (sandbox-scoped only).
	// If 0, the server uses the current version (backward compatibility).
	// If non-zero, the server validates that the sandbox's current resource_version
	// matches this value before applying the mutation, returning ABORTED on mismatch.
	// Ignored for global-scoped updates.
	ExpectedResourceVersion uint64 `` /* 133-byte string literal not displayed */
	// Caller-provided annotations associated with a sandbox-scoped update. Values
	// must not contain secrets; the gateway treats them as opaque metadata and does
	// not interpret or verify their semantics. For policy updates, the gateway
	// stores the annotations immutably with the revision and merges them into
	// sandbox metadata as a convenience projection. For setting-only updates, it
	// only merges them into sandbox metadata. Keys under the
	// `internal.openshell.ai/` prefix are reserved for the gateway.
	Annotations map[string]string `` /* 149-byte string literal not displayed */
	// Required for sandbox-scoped updates and empty for global updates.
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,11,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Update sandbox policy request.

func (*UpdateConfigRequest) Descriptor deprecated 

func (*UpdateConfigRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateConfigRequest.ProtoReflect.Descriptor instead.

func (*UpdateConfigRequest) GetAnnotations 

func (x *UpdateConfigRequest) GetAnnotations() map[string]string

func (*UpdateConfigRequest) GetDeleteSetting 

func (x *UpdateConfigRequest) GetDeleteSetting() bool

func (*UpdateConfigRequest) GetExpectedResourceVersion 

func (x *UpdateConfigRequest) GetExpectedResourceVersion() uint64

func (*UpdateConfigRequest) GetGlobal 

func (x *UpdateConfigRequest) GetGlobal() bool

func (*UpdateConfigRequest) GetMergeOperations 

func (x *UpdateConfigRequest) GetMergeOperations() []*PolicyMergeOperation

func (*UpdateConfigRequest) GetPolicy 

func (x *UpdateConfigRequest) GetPolicy() *sandboxv1.SandboxPolicy

func (*UpdateConfigRequest) GetRequestId 

func (x *UpdateConfigRequest) GetRequestId() string

func (*UpdateConfigRequest) GetSandbox 

func (x *UpdateConfigRequest) GetSandbox() string

func (*UpdateConfigRequest) GetSettingKey 

func (x *UpdateConfigRequest) GetSettingKey() string

func (*UpdateConfigRequest) GetSettingValue 

func (x *UpdateConfigRequest) GetSettingValue() *sandboxv1.SettingValue

func (*UpdateConfigRequest) GetWorkspaceScope 

func (x *UpdateConfigRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*UpdateConfigRequest) ProtoMessage 

func (*UpdateConfigRequest) ProtoMessage()

func (*UpdateConfigRequest) ProtoReflect 

func (x *UpdateConfigRequest) ProtoReflect() protoreflect.Message

func (*UpdateConfigRequest) Reset 

func (x *UpdateConfigRequest) Reset()

func (*UpdateConfigRequest) String 

func (x *UpdateConfigRequest) String() string

type UpdateConfigResponse 

type UpdateConfigResponse struct {

	// Assigned policy version (monotonically increasing per sandbox).
	Version uint32 `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	// SHA-256 hash of the serialized policy payload.
	PolicyHash string `protobuf:"bytes,2,opt,name=policy_hash,json=policyHash,proto3" json:"policy_hash,omitempty"`
	// Settings revision for the scope that was modified.
	SettingsRevision uint64 `protobuf:"varint,3,opt,name=settings_revision,json=settingsRevision,proto3" json:"settings_revision,omitempty"`
	// True when a setting delete operation removed an existing key.
	Deleted bool `protobuf:"varint,4,opt,name=deleted,proto3" json:"deleted,omitempty"`
	// Sandbox metadata annotations after the update. Empty for global updates.
	Annotations map[string]string `` /* 149-byte string literal not displayed */
	// contains filtered or unexported fields
}

Update sandbox policy response.

func (*UpdateConfigResponse) Descriptor deprecated 

func (*UpdateConfigResponse) Descriptor() ([]byte, []int)

Deprecated: Use UpdateConfigResponse.ProtoReflect.Descriptor instead.

func (*UpdateConfigResponse) GetAnnotations 

func (x *UpdateConfigResponse) GetAnnotations() map[string]string

func (*UpdateConfigResponse) GetDeleted 

func (x *UpdateConfigResponse) GetDeleted() bool

func (*UpdateConfigResponse) GetPolicyHash 

func (x *UpdateConfigResponse) GetPolicyHash() string

func (*UpdateConfigResponse) GetSettingsRevision 

func (x *UpdateConfigResponse) GetSettingsRevision() uint64

func (*UpdateConfigResponse) GetVersion 

func (x *UpdateConfigResponse) GetVersion() uint32

func (*UpdateConfigResponse) ProtoMessage 

func (*UpdateConfigResponse) ProtoMessage()

func (*UpdateConfigResponse) ProtoReflect 

func (x *UpdateConfigResponse) ProtoReflect() protoreflect.Message

func (*UpdateConfigResponse) Reset 

func (x *UpdateConfigResponse) Reset()

func (*UpdateConfigResponse) String 

func (x *UpdateConfigResponse) String() string

type UpdateProviderProfilesRequest 

type UpdateProviderProfilesRequest struct {

	// Workspace scope. Omit for platform profiles; otherwise select one named workspace.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,4,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Profile        *ProviderProfileImportItem     `protobuf:"bytes,1,opt,name=profile,proto3" json:"profile,omitempty"`
	// Expected storage resource version for optimistic concurrency control.
	// If 0, the server uses the resource_version embedded in profile.profile.
	// Updates without a non-zero version are rejected to prevent stale files from
	// silently overwriting newer profile definitions.
	ExpectedResourceVersion uint64 `` /* 133-byte string literal not displayed */
	// Existing custom provider profile ID to update. The payload ID must match.
	Id string `protobuf:"bytes,3,opt,name=id,proto3" json:"id,omitempty"`
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Update one custom provider profile request.

func (*UpdateProviderProfilesRequest) Descriptor deprecated 

func (*UpdateProviderProfilesRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateProviderProfilesRequest.ProtoReflect.Descriptor instead.

func (*UpdateProviderProfilesRequest) GetExpectedResourceVersion 

func (x *UpdateProviderProfilesRequest) GetExpectedResourceVersion() uint64

func (*UpdateProviderProfilesRequest) GetId 

func (x *UpdateProviderProfilesRequest) GetId() string

func (*UpdateProviderProfilesRequest) GetProfile 

func (x *UpdateProviderProfilesRequest) GetProfile() *ProviderProfileImportItem

func (*UpdateProviderProfilesRequest) GetRequestId 

func (x *UpdateProviderProfilesRequest) GetRequestId() string

func (*UpdateProviderProfilesRequest) GetWorkspaceScope 

func (x *UpdateProviderProfilesRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*UpdateProviderProfilesRequest) ProtoMessage 

func (*UpdateProviderProfilesRequest) ProtoMessage()

func (*UpdateProviderProfilesRequest) ProtoReflect 

func (x *UpdateProviderProfilesRequest) ProtoReflect() protoreflect.Message

func (*UpdateProviderProfilesRequest) Reset 

func (x *UpdateProviderProfilesRequest) Reset()

func (*UpdateProviderProfilesRequest) String 

func (x *UpdateProviderProfilesRequest) String() string

type UpdateProviderProfilesResponse 

type UpdateProviderProfilesResponse struct {
	Diagnostics []*ProviderProfileDiagnostic `protobuf:"bytes,1,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	Profile     *ProviderProfile             `protobuf:"bytes,2,opt,name=profile,proto3" json:"profile,omitempty"`
	Updated     bool                         `protobuf:"varint,3,opt,name=updated,proto3" json:"updated,omitempty"`
	// contains filtered or unexported fields
}

Update one custom provider profile response.

func (*UpdateProviderProfilesResponse) Descriptor deprecated 

func (*UpdateProviderProfilesResponse) Descriptor() ([]byte, []int)

Deprecated: Use UpdateProviderProfilesResponse.ProtoReflect.Descriptor instead.

func (*UpdateProviderProfilesResponse) GetDiagnostics 

func (x *UpdateProviderProfilesResponse) GetDiagnostics() []*ProviderProfileDiagnostic

func (*UpdateProviderProfilesResponse) GetProfile 

func (x *UpdateProviderProfilesResponse) GetProfile() *ProviderProfile

func (*UpdateProviderProfilesResponse) GetUpdated 

func (x *UpdateProviderProfilesResponse) GetUpdated() bool

func (*UpdateProviderProfilesResponse) ProtoMessage 

func (*UpdateProviderProfilesResponse) ProtoMessage()

func (*UpdateProviderProfilesResponse) ProtoReflect 

func (x *UpdateProviderProfilesResponse) ProtoReflect() protoreflect.Message

func (*UpdateProviderProfilesResponse) Reset 

func (x *UpdateProviderProfilesResponse) Reset()

func (*UpdateProviderProfilesResponse) String 

func (x *UpdateProviderProfilesResponse) String() string

type UpdateProviderRequest 

type UpdateProviderRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,3,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	Provider       *datamodelv1.Provider          `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	// Optional per-credential expiry timestamps to merge into the provider.
	// Omitted keys are unchanged. Use clear_credential_expiration_keys to remove
	// an existing expiry.
	CredentialExpirationTimes map[string]*timestamppb.Timestamp `` /* 214-byte string literal not displayed */
	// Credential keys whose existing expiry should be removed.
	ClearCredentialExpirationKeys []string `` /* 154-byte string literal not displayed */
	// Optional nonzero UUID for durable at-most-once admission. Successful results
	// can be replayed for 24 hours; see the API errors and retries reference.
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Update provider request.

func (*UpdateProviderRequest) Descriptor deprecated 

func (*UpdateProviderRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateProviderRequest.ProtoReflect.Descriptor instead.

func (*UpdateProviderRequest) GetClearCredentialExpirationKeys 

func (x *UpdateProviderRequest) GetClearCredentialExpirationKeys() []string

func (*UpdateProviderRequest) GetCredentialExpirationTimes 

func (x *UpdateProviderRequest) GetCredentialExpirationTimes() map[string]*timestamppb.Timestamp

func (*UpdateProviderRequest) GetProvider 

func (x *UpdateProviderRequest) GetProvider() *datamodelv1.Provider

func (*UpdateProviderRequest) GetRequestId 

func (x *UpdateProviderRequest) GetRequestId() string

func (*UpdateProviderRequest) GetWorkspaceScope 

func (x *UpdateProviderRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*UpdateProviderRequest) ProtoMessage 

func (*UpdateProviderRequest) ProtoMessage()

func (*UpdateProviderRequest) ProtoReflect 

func (x *UpdateProviderRequest) ProtoReflect() protoreflect.Message

func (*UpdateProviderRequest) Reset 

func (x *UpdateProviderRequest) Reset()

func (*UpdateProviderRequest) String 

func (x *UpdateProviderRequest) String() string

type UpdateSandboxRequest added in v0.1.7 

type UpdateSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,1,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Canonical name of the existing sandbox; this is not a rename or upsert.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Nonempty OCI workload image reference. This does not change trusted runtime
	// images or reseed an existing workspace.
	Image *string `protobuf:"bytes,3,opt,name=image,proto3,oneof" json:"image,omitempty"`
	// Replace workload argv; an empty list restores image-resolved default shell behavior.
	Command *SandboxCommandUpdate `protobuf:"bytes,6,opt,name=command,proto3" json:"command,omitempty"`
	// Replace sandbox-level overrides. Empty clears overrides; template defaults remain.
	Environment *SandboxMapUpdate `protobuf:"bytes,7,opt,name=environment,proto3" json:"environment,omitempty"`
	// Replace user metadata, preserving gateway-owned keys. These do not set pod metadata.
	Labels      *SandboxMapUpdate `protobuf:"bytes,8,opt,name=labels,proto3" json:"labels,omitempty"`
	Annotations *SandboxMapUpdate `protobuf:"bytes,9,opt,name=annotations,proto3" json:"annotations,omitempty"`
	// Required nonzero resource version read by the caller.
	ExpectedResourceVersion uint64 `` /* 133-byte string literal not displayed */
	// Optional nonzero UUID for durable at-most-once admission.
	RequestId string `protobuf:"bytes,5,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

Update selected configuration of a stopped sandbox. Omitted fields are unchanged. Start explicitly after a successful update. With no fields selected, resume the pending operation stored by the gateway using the current resource version.

func (*UpdateSandboxRequest) Descriptor deprecated added in v0.1.7 

func (*UpdateSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateSandboxRequest.ProtoReflect.Descriptor instead.

func (*UpdateSandboxRequest) GetAnnotations added in v0.1.7 

func (x *UpdateSandboxRequest) GetAnnotations() *SandboxMapUpdate

func (*UpdateSandboxRequest) GetCommand added in v0.1.7 

func (x *UpdateSandboxRequest) GetCommand() *SandboxCommandUpdate

func (*UpdateSandboxRequest) GetEnvironment added in v0.1.7 

func (x *UpdateSandboxRequest) GetEnvironment() *SandboxMapUpdate

func (*UpdateSandboxRequest) GetExpectedResourceVersion added in v0.1.7 

func (x *UpdateSandboxRequest) GetExpectedResourceVersion() uint64

func (*UpdateSandboxRequest) GetImage added in v0.1.7 

func (x *UpdateSandboxRequest) GetImage() string

func (*UpdateSandboxRequest) GetLabels added in v0.1.7 

func (x *UpdateSandboxRequest) GetLabels() *SandboxMapUpdate

func (*UpdateSandboxRequest) GetName added in v0.1.7 

func (x *UpdateSandboxRequest) GetName() string

func (*UpdateSandboxRequest) GetRequestId added in v0.1.7 

func (x *UpdateSandboxRequest) GetRequestId() string

func (*UpdateSandboxRequest) GetWorkspaceScope added in v0.1.7 

func (x *UpdateSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*UpdateSandboxRequest) ProtoMessage added in v0.1.7 

func (*UpdateSandboxRequest) ProtoMessage()

func (*UpdateSandboxRequest) ProtoReflect added in v0.1.7 

func (x *UpdateSandboxRequest) ProtoReflect() protoreflect.Message

func (*UpdateSandboxRequest) Reset added in v0.1.7 

func (x *UpdateSandboxRequest) Reset()

func (*UpdateSandboxRequest) String added in v0.1.7 

func (x *UpdateSandboxRequest) String() string

type WatchSandboxRequest 

type WatchSandboxRequest struct {

	// Workspace scope. Only a named workspace selection is accepted.
	WorkspaceScope *datamodelv1.WorkspaceSelector `protobuf:"bytes,11,opt,name=workspace_scope,json=workspaceScope,proto3" json:"workspace_scope,omitempty"`
	// Canonical sandbox name.
	Sandbox string `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	// Stream sandbox status snapshots.
	FollowStatus bool `protobuf:"varint,2,opt,name=follow_status,json=followStatus,proto3" json:"follow_status,omitempty"`
	// Stream openshell-server process logs correlated to this sandbox.
	FollowLogs bool `protobuf:"varint,3,opt,name=follow_logs,json=followLogs,proto3" json:"follow_logs,omitempty"`
	// Stream platform events correlated to this sandbox.
	FollowEvents bool `protobuf:"varint,4,opt,name=follow_events,json=followEvents,proto3" json:"follow_events,omitempty"`
	// Replay the last N log lines (best-effort) before following.
	LogTailLines uint32 `protobuf:"varint,5,opt,name=log_tail_lines,json=logTailLines,proto3" json:"log_tail_lines,omitempty"`
	// Replay the last N platform events (best-effort) before following.
	EventTail uint32 `protobuf:"varint,6,opt,name=event_tail,json=eventTail,proto3" json:"event_tail,omitempty"`
	// Stop streaming once the sandbox reaches READY or a terminal result phase
	// (COMPLETED, STOPPED, or ERROR).
	StopOnTerminal bool `protobuf:"varint,7,opt,name=stop_on_terminal,json=stopOnTerminal,proto3" json:"stop_on_terminal,omitempty"`
	// Only include log lines at or after this time. Absence means no time filter.
	// Applies to both tail replay and live streaming.
	SinceTime *timestamppb.Timestamp `protobuf:"bytes,108,opt,name=since_time,json=sinceTime,proto3" json:"since_time,omitempty"`
	// Filter by log source (e.g. "gateway", "sandbox"). Empty means all sources.
	LogSources []string `protobuf:"bytes,9,rep,name=log_sources,json=logSources,proto3" json:"log_sources,omitempty"`
	// Minimum log level to include (e.g. "INFO", "WARN", "ERROR"). Empty means all levels.
	LogMinLevel string `protobuf:"bytes,10,opt,name=log_min_level,json=logMinLevel,proto3" json:"log_min_level,omitempty"`
	// Resume streaming after this cursor. Empty means no cursor resume: the
	// server falls back to tail-limited replay controlled by log_tail_lines and
	// event_tail. Otherwise set it to the highest `SandboxStreamEvent.cursor`
	// already processed; the server replays only log and platform events after
	// it, merged in cursor order, before resuming live delivery. If the requested
	// cursor has already been trimmed from the server's buffer, the resume is
	// unrecoverable and the stream terminates with OUT_OF_RANGE (see
	// SandboxStreamWarning for the recoverable case).
	//
	// A cursor is bound to the cursor space that issued it. A gateway restart,
	// teardown of the sandbox's buffers, or a reconnect to a different gateway
	// replica starts a new space, and cursors from the previous one are rejected
	// with OUT_OF_RANGE rather than silently suppressing live events beneath
	// them. OUT_OF_RANGE is terminal for that cursor: restart the watch with an
	// empty resume_after_cursor, because retrying the same token fails
	// identically. A cursor this server could not have issued is rejected with
	// INVALID_ARGUMENT.
	ResumeAfterCursor string `protobuf:"bytes,12,opt,name=resume_after_cursor,json=resumeAfterCursor,proto3" json:"resume_after_cursor,omitempty"`
	// contains filtered or unexported fields
}

Watch sandbox request.

func (*WatchSandboxRequest) Descriptor deprecated 

func (*WatchSandboxRequest) Descriptor() ([]byte, []int)

Deprecated: Use WatchSandboxRequest.ProtoReflect.Descriptor instead.

func (*WatchSandboxRequest) GetEventTail 

func (x *WatchSandboxRequest) GetEventTail() uint32

func (*WatchSandboxRequest) GetFollowEvents 

func (x *WatchSandboxRequest) GetFollowEvents() bool

func (*WatchSandboxRequest) GetFollowLogs 

func (x *WatchSandboxRequest) GetFollowLogs() bool

func (*WatchSandboxRequest) GetFollowStatus 

func (x *WatchSandboxRequest) GetFollowStatus() bool

func (*WatchSandboxRequest) GetLogMinLevel 

func (x *WatchSandboxRequest) GetLogMinLevel() string

func (*WatchSandboxRequest) GetLogSources 

func (x *WatchSandboxRequest) GetLogSources() []string

func (*WatchSandboxRequest) GetLogTailLines 

func (x *WatchSandboxRequest) GetLogTailLines() uint32

func (*WatchSandboxRequest) GetResumeAfterCursor 

func (x *WatchSandboxRequest) GetResumeAfterCursor() string

func (*WatchSandboxRequest) GetSandbox 

func (x *WatchSandboxRequest) GetSandbox() string

func (*WatchSandboxRequest) GetSinceTime 

func (x *WatchSandboxRequest) GetSinceTime() *timestamppb.Timestamp

func (*WatchSandboxRequest) GetStopOnTerminal 

func (x *WatchSandboxRequest) GetStopOnTerminal() bool

func (*WatchSandboxRequest) GetWorkspaceScope 

func (x *WatchSandboxRequest) GetWorkspaceScope() *datamodelv1.WorkspaceSelector

func (*WatchSandboxRequest) ProtoMessage 

func (*WatchSandboxRequest) ProtoMessage()

func (*WatchSandboxRequest) ProtoReflect 

func (x *WatchSandboxRequest) ProtoReflect() protoreflect.Message

func (*WatchSandboxRequest) Reset 

func (x *WatchSandboxRequest) Reset()

func (*WatchSandboxRequest) String 

func (x *WatchSandboxRequest) String() string

type WorkspaceMember 

type WorkspaceMember struct {
	Metadata *datamodelv1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// OIDC subject claim identifying the principal.
	PrincipalSubject string `protobuf:"bytes,2,opt,name=principal_subject,json=principalSubject,proto3" json:"principal_subject,omitempty"`
	// Role assigned to the principal within the workspace.
	Role WorkspaceRole `protobuf:"varint,3,opt,name=role,proto3,enum=openshell.v1.WorkspaceRole" json:"role,omitempty"`
	// contains filtered or unexported fields
}

Workspace membership record.

func (*WorkspaceMember) Descriptor deprecated 

func (*WorkspaceMember) Descriptor() ([]byte, []int)

Deprecated: Use WorkspaceMember.ProtoReflect.Descriptor instead.

func (*WorkspaceMember) GetMetadata 

func (x *WorkspaceMember) GetMetadata() *datamodelv1.ObjectMeta

func (*WorkspaceMember) GetPrincipalSubject 

func (x *WorkspaceMember) GetPrincipalSubject() string

func (*WorkspaceMember) GetRole 

func (x *WorkspaceMember) GetRole() WorkspaceRole

func (*WorkspaceMember) ProtoMessage 

func (*WorkspaceMember) ProtoMessage()

func (*WorkspaceMember) ProtoReflect 

func (x *WorkspaceMember) ProtoReflect() protoreflect.Message

func (*WorkspaceMember) Reset 

func (x *WorkspaceMember) Reset()

func (*WorkspaceMember) String 

func (x *WorkspaceMember) String() string

type WorkspaceRole 

type WorkspaceRole int32

Workspace-scoped role for members. 

const (
	WorkspaceRole_WORKSPACE_ROLE_UNSPECIFIED WorkspaceRole = 0
	WorkspaceRole_WORKSPACE_ROLE_USER        WorkspaceRole = 1
	WorkspaceRole_WORKSPACE_ROLE_ADMIN       WorkspaceRole = 2
)

func (WorkspaceRole) Descriptor 

func (WorkspaceRole) Descriptor() protoreflect.EnumDescriptor

func (WorkspaceRole) Enum 

func (x WorkspaceRole) Enum() *WorkspaceRole

func (WorkspaceRole) EnumDescriptor deprecated 

func (WorkspaceRole) EnumDescriptor() ([]byte, []int)

Deprecated: Use WorkspaceRole.Descriptor instead.

func (WorkspaceRole) Number 

func (x WorkspaceRole) Number() protoreflect.EnumNumber

func (WorkspaceRole) String 

func (x WorkspaceRole) String() string

func (WorkspaceRole) Type 

func (WorkspaceRole) Type() protoreflect.EnumType

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.