orchestrator

type ChunkServiceClient interface {
	// GetBuildFileSize returns the total size of a seekable diff file (memfile, rootfs.ext4).
	GetBuildFileSize(ctx context.Context, in *GetBuildFileSizeRequest, opts ...grpc.CallOption) (*GetBuildFileSizeResponse, error)
	// GetBuildFileExists checks if a blob file is present in the peer's local cache.
	GetBuildFileExists(ctx context.Context, in *GetBuildFileExistsRequest, opts ...grpc.CallOption) (*GetBuildFileExistsResponse, error)
	// ReadAtBuildSeekable streams a range from a seekable diff file (memfile, rootfs.ext4).
	ReadAtBuildSeekable(ctx context.Context, in *ReadAtBuildSeekableRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ReadAtBuildSeekableResponse], error)
	// GetBuildBlob streams an entire blob file (snapfile, metadata, headers).
	GetBuildBlob(ctx context.Context, in *GetBuildBlobRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[GetBuildBlobResponse], error)
}

type ChunkServiceServer interface {
	// GetBuildFileSize returns the total size of a seekable diff file (memfile, rootfs.ext4).
	GetBuildFileSize(context.Context, *GetBuildFileSizeRequest) (*GetBuildFileSizeResponse, error)
	// GetBuildFileExists checks if a blob file is present in the peer's local cache.
	GetBuildFileExists(context.Context, *GetBuildFileExistsRequest) (*GetBuildFileExistsResponse, error)
	// ReadAtBuildSeekable streams a range from a seekable diff file (memfile, rootfs.ext4).
	ReadAtBuildSeekable(*ReadAtBuildSeekableRequest, grpc.ServerStreamingServer[ReadAtBuildSeekableResponse]) error
	// GetBuildBlob streams an entire blob file (snapfile, metadata, headers).
	GetBuildBlob(*GetBuildBlobRequest, grpc.ServerStreamingServer[GetBuildBlobResponse]) error
	// contains filtered or unexported methods
}

type ChunkService_GetBuildBlobClient = grpc.ServerStreamingClient[GetBuildBlobResponse]

type ChunkService_GetBuildBlobServer = grpc.ServerStreamingServer[GetBuildBlobResponse]

type ChunkService_ReadAtBuildSeekableClient = grpc.ServerStreamingClient[ReadAtBuildSeekableResponse]

type ChunkService_ReadAtBuildSeekableServer = grpc.ServerStreamingServer[ReadAtBuildSeekableResponse]

type CreateDirRequest struct {
	Volume        *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	Path          string      `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	Mode          *uint32     `protobuf:"varint,3,opt,name=mode,proto3,oneof" json:"mode,omitempty"`
	Uid           *uint32     `protobuf:"varint,4,opt,name=uid,proto3,oneof" json:"uid,omitempty"`
	Gid           *uint32     `protobuf:"varint,5,opt,name=gid,proto3,oneof" json:"gid,omitempty"`
	CreateParents bool        `protobuf:"varint,6,opt,name=create_parents,json=createParents,proto3" json:"create_parents,omitempty"`
	// contains filtered or unexported fields
}

type CreateDirResponse struct {
	Entry *EntryInfo `protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
	// contains filtered or unexported fields
}

type CreateFileRequest struct {

	// Types that are valid to be assigned to Message:
	//
	//	*CreateFileRequest_Start
	//	*CreateFileRequest_Content
	//	*CreateFileRequest_Finish
	Message isCreateFileRequest_Message `protobuf_oneof:"message"`
	// contains filtered or unexported fields
}

type CreateFileRequest_Content struct {
	Content *VolumeFileCreateContent `protobuf:"bytes,2,opt,name=content,proto3,oneof"`
}

type CreateFileRequest_Finish struct {
	Finish *VolumeFileCreateFinish `protobuf:"bytes,3,opt,name=finish,proto3,oneof"`
}

type CreateFileRequest_Start struct {
	Start *VolumeFileCreateStart `protobuf:"bytes,1,opt,name=start,proto3,oneof"`
}

type CreateFileResponse struct {
	Entry *EntryInfo `protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
	// contains filtered or unexported fields
}

type CreateVolumeRequest struct {
	Volume *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	// contains filtered or unexported fields
}

type CreateVolumeResponse struct {
	VolumeType *string `protobuf:"bytes,1,opt,name=volume_type,json=volumeType,proto3,oneof" json:"volume_type,omitempty"`
	// contains filtered or unexported fields
}

type DeletePathRequest struct {
	Volume *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	Path   string      `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	// contains filtered or unexported fields
}

type DeletePathResponse struct {
	// contains filtered or unexported fields
}

type DeleteVolumeRequest struct {
	Volume *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	// contains filtered or unexported fields
}

type DeleteVolumeResponse struct {
	// contains filtered or unexported fields
}

type EntryInfo struct {
	Name         string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Type         FileType               `protobuf:"varint,2,opt,name=type,proto3,enum=FileType" json:"type,omitempty"`
	Path         string                 `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`
	Size         int64                  `protobuf:"varint,4,opt,name=size,proto3" json:"size,omitempty"`
	Mode         uint32                 `protobuf:"varint,5,opt,name=mode,proto3" json:"mode,omitempty"`
	Uid          uint32                 `protobuf:"varint,6,opt,name=uid,proto3" json:"uid,omitempty"`
	Gid          uint32                 `protobuf:"varint,7,opt,name=gid,proto3" json:"gid,omitempty"`
	ModifiedTime *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=modified_time,json=modifiedTime,proto3" json:"modified_time,omitempty"`
	// If the entry is a symlink, this field contains the target of the symlink.
	SymlinkTarget *string                `protobuf:"bytes,9,opt,name=symlink_target,json=symlinkTarget,proto3,oneof" json:"symlink_target,omitempty"`
	CreatedTime   *timestamppb.Timestamp `protobuf:"bytes,10,opt,name=created_time,json=createdTime,proto3" json:"created_time,omitempty"`
	AccessedTime  *timestamppb.Timestamp `protobuf:"bytes,11,opt,name=accessed_time,json=accessedTime,proto3" json:"accessed_time,omitempty"`
	// contains filtered or unexported fields
}

type FileType int32

type GetBuildBlobRequest struct {
	BuildId string `protobuf:"bytes,1,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	// name is one of: "snapfile", "metadata.json", "memfile.header", "rootfs.ext4.header"
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetBuildBlobResponse struct {
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// availability is only set in the first message of the stream.
	Availability *PeerAvailability `protobuf:"bytes,2,opt,name=availability,proto3" json:"availability,omitempty"`
	// contains filtered or unexported fields
}

type GetBuildFileExistsRequest struct {
	BuildId string `protobuf:"bytes,1,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	// name is one of: "snapfile", "metadata.json"
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetBuildFileExistsResponse struct {
	Availability *PeerAvailability `protobuf:"bytes,1,opt,name=availability,proto3" json:"availability,omitempty"`
	// contains filtered or unexported fields
}

type GetBuildFileSizeRequest struct {
	BuildId string `protobuf:"bytes,1,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	// name is one of the seekable diff files: "memfile", "rootfs.ext4"
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetBuildFileSizeResponse struct {
	TotalSize    int64             `protobuf:"varint,1,opt,name=total_size,json=totalSize,proto3" json:"total_size,omitempty"`
	Availability *PeerAvailability `protobuf:"bytes,2,opt,name=availability,proto3" json:"availability,omitempty"`
	// contains filtered or unexported fields
}

type GetFileRequest struct {
	Volume *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	Path   string      `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	// contains filtered or unexported fields
}

type GetFileResponse struct {

	// Types that are valid to be assigned to Message:
	//
	//	*GetFileResponse_Start
	//	*GetFileResponse_Content
	//	*GetFileResponse_Finish
	Message isGetFileResponse_Message `protobuf_oneof:"message"`
	// contains filtered or unexported fields
}

type GetFileResponse_Content struct {
	Content *VolumeFileGetResponseContent `protobuf:"bytes,2,opt,name=content,proto3,oneof"`
}

type GetFileResponse_Finish struct {
	Finish *VolumeFileGetResponseFinish `protobuf:"bytes,3,opt,name=finish,proto3,oneof"`
}

type GetFileResponse_Start struct {
	Start *VolumeFileGetResponseStart `protobuf:"bytes,1,opt,name=start,proto3,oneof"`
}

type ListDirRequest struct {
	Volume *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	Path   string      `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	Depth  uint32      `protobuf:"varint,3,opt,name=depth,proto3" json:"depth,omitempty"`
	// contains filtered or unexported fields
}

type ListDirResponse struct {
	Files []*VolumeDirectoryItem `protobuf:"bytes,1,rep,name=files,proto3" json:"files,omitempty"`
	// contains filtered or unexported fields
}

type PeerAvailability struct {

	// not_available is true when the file is not in the local cache. The caller
	// should fall back to remote storage.
	NotAvailable bool `protobuf:"varint,1,opt,name=not_available,json=notAvailable,proto3" json:"not_available,omitempty"`
	// use_storage is true when the remote storage upload has completed and the
	// caller should switch to reading from remote storage directly instead of
	// this peer.
	UseStorage bool `protobuf:"varint,2,opt,name=use_storage,json=useStorage,proto3" json:"use_storage,omitempty"`
	// contains filtered or unexported fields
}

type ReadAtBuildSeekableRequest struct {
	BuildId string `protobuf:"bytes,1,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	Name    string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Offset  int64  `protobuf:"varint,3,opt,name=offset,proto3" json:"offset,omitempty"`
	Length  int64  `protobuf:"varint,4,opt,name=length,proto3" json:"length,omitempty"`
	// contains filtered or unexported fields
}

type ReadAtBuildSeekableResponse struct {
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// availability is only set in the first message of the stream.
	Availability *PeerAvailability `protobuf:"bytes,2,opt,name=availability,proto3" json:"availability,omitempty"`
	// contains filtered or unexported fields
}

type RunningSandbox struct {

	// Deprecated: the API no longer rebuilds sandbox state from this list. Redis
	// is the source of truth; List is only used to detect sandboxes running on a
	// node that the store does not know about, so they can be killed. The fields
	// below carry everything that decision needs. Still populated so API
	// instances predating those fields keep working during a rollout.
	//
	// Deprecated: Marked as deprecated in orchestrator.proto.
	Config    *SandboxConfig         `protobuf:"bytes,1,opt,name=config,proto3" json:"config,omitempty"`
	ClientId  string                 `protobuf:"bytes,2,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	StartTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=start_time,json=startTime,proto3" json:"start_time,omitempty"`
	EndTime   *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// Minimal set required to detect an orphaned sandbox and kill it.
	// sandbox_id + team_id form the store key. execution_id is carried in the
	// edge sandbox-catalog delete event, so a cluster node's routing entry is
	// evicted too. vcpu/ram_mb feed the node's optimistic resource accounting.
	SandboxId   string `protobuf:"bytes,5,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	TeamId      string `protobuf:"bytes,6,opt,name=team_id,json=teamId,proto3" json:"team_id,omitempty"`
	ExecutionId string `protobuf:"bytes,7,opt,name=execution_id,json=executionId,proto3" json:"execution_id,omitempty"`
	Vcpu        int64  `protobuf:"varint,8,opt,name=vcpu,proto3" json:"vcpu,omitempty"`
	RamMb       int64  `protobuf:"varint,9,opt,name=ram_mb,json=ramMb,proto3" json:"ram_mb,omitempty"`
	// contains filtered or unexported fields
}

type SandboxAutoResumeConfig struct {

	// Policy values are owned by the API layer today (e.g. "off", "any").
	Policy string `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// Timeout requested on initial sandbox create (seconds).
	TimeoutSeconds uint64 `protobuf:"varint,2,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// contains filtered or unexported fields
}

type SandboxCheckpointRequest struct {
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	BuildId   string `protobuf:"bytes,3,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	// Provenance stamped onto the snapshot's storage objects for the storage
	// index (e.g. template_id). Opaque to the orchestrator, which just forwards
	// it to object metadata.
	Metadata map[string]string `` /* 143-byte string literal not displayed */
	// contains filtered or unexported fields
}

type SandboxCheckpointResponse struct {
	SchedulingMetadata *SchedulingMetadata `protobuf:"bytes,1,opt,name=scheduling_metadata,json=schedulingMetadata,proto3" json:"scheduling_metadata,omitempty"`
	// contains filtered or unexported fields
}

type SandboxConfig struct {

	// Data required for creating a new sandbox.
	TemplateId         string            `protobuf:"bytes,1,opt,name=template_id,json=templateId,proto3" json:"template_id,omitempty"`
	BuildId            string            `protobuf:"bytes,2,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	KernelVersion      string            `protobuf:"bytes,3,opt,name=kernel_version,json=kernelVersion,proto3" json:"kernel_version,omitempty"`
	FirecrackerVersion string            `protobuf:"bytes,4,opt,name=firecracker_version,json=firecrackerVersion,proto3" json:"firecracker_version,omitempty"`
	HugePages          bool              `protobuf:"varint,5,opt,name=huge_pages,json=hugePages,proto3" json:"huge_pages,omitempty"`
	SandboxId          string            `protobuf:"bytes,6,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	EnvVars            map[string]string `` /* 156-byte string literal not displayed */
	// Metadata about the sandbox.
	Metadata    map[string]string `` /* 143-byte string literal not displayed */
	Alias       *string           `protobuf:"bytes,9,opt,name=alias,proto3,oneof" json:"alias,omitempty"`
	EnvdVersion string            `protobuf:"bytes,10,opt,name=envd_version,json=envdVersion,proto3" json:"envd_version,omitempty"`
	Vcpu        int64             `protobuf:"varint,11,opt,name=vcpu,proto3" json:"vcpu,omitempty"`
	RamMb       int64             `protobuf:"varint,12,opt,name=ram_mb,json=ramMb,proto3" json:"ram_mb,omitempty"`
	TeamId      string            `protobuf:"bytes,13,opt,name=team_id,json=teamId,proto3" json:"team_id,omitempty"`
	// Maximum length of the sandbox in Hours.
	MaxSandboxLength int64   `protobuf:"varint,14,opt,name=max_sandbox_length,json=maxSandboxLength,proto3" json:"max_sandbox_length,omitempty"`
	TotalDiskSizeMb  int64   `protobuf:"varint,15,opt,name=total_disk_size_mb,json=totalDiskSizeMb,proto3" json:"total_disk_size_mb,omitempty"`
	Snapshot         bool    `protobuf:"varint,16,opt,name=snapshot,proto3" json:"snapshot,omitempty"`
	BaseTemplateId   string  `protobuf:"bytes,17,opt,name=base_template_id,json=baseTemplateId,proto3" json:"base_template_id,omitempty"`
	AutoPause        bool    `protobuf:"varint,18,opt,name=auto_pause,json=autoPause,proto3" json:"auto_pause,omitempty"`
	EnvdAccessToken  *string `protobuf:"bytes,19,opt,name=envd_access_token,json=envdAccessToken,proto3,oneof" json:"envd_access_token,omitempty"`
	ExecutionId      string  `protobuf:"bytes,20,opt,name=execution_id,json=executionId,proto3" json:"execution_id,omitempty"`
	// Whether the sandbox should have access to the internet.
	// This is optional only for backwards compatibility.
	// After migration, the optional keyword can be removed.
	AllowInternetAccess *bool                 `` /* 128-byte string literal not displayed */
	Network             *SandboxNetworkConfig `protobuf:"bytes,22,opt,name=network,proto3,oneof" json:"network,omitempty"`
	VolumeMounts        []*SandboxVolumeMount `protobuf:"bytes,23,rep,name=volumeMounts,proto3" json:"volumeMounts,omitempty"`
	// Auto-resume policy for paused sandboxes.
	AutoResume *SandboxAutoResumeConfig `protobuf:"bytes,24,opt,name=auto_resume,json=autoResume,proto3,oneof" json:"auto_resume,omitempty"`
	// When true, a timeout auto-pause takes a filesystem-only snapshot (no
	// memory) instead of a full memory snapshot. Only meaningful when auto_pause
	// is set. Passed through so the policy survives an API re-sync from the
	// orchestrator's sandbox list (mirrors auto_pause); the orchestrator itself
	// does not act on it — the API evictor does.
	AutoPauseFilesystemOnly bool `` /* 136-byte string literal not displayed */
	// Retention of sandbox events in days
	EventsTtlDays int64 `protobuf:"varint,26,opt,name=events_ttl_days,json=eventsTtlDays,proto3" json:"events_ttl_days,omitempty"`
	// Sandbox workload identity configuration requested at create time. Absent on
	// older serialized configs, which decode as no workload identity.
	Iam *SandboxIam `protobuf:"bytes,27,opt,name=iam,proto3,oneof" json:"iam,omitempty"`
	// contains filtered or unexported fields
}

type SandboxCreateRequest struct {
	Sandbox   *SandboxConfig         `protobuf:"bytes,1,opt,name=sandbox,proto3" json:"sandbox,omitempty"`
	StartTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=start_time,json=startTime,proto3" json:"start_time,omitempty"`
	EndTime   *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// When true, resume by cold-booting from the snapshot's rootfs even when it
	// includes a memory snapshot. The request can only widen toward the no-memory
	// path — it can never force a memory restore of a snapshot that has none.
	// Absent = the snapshot's own metadata alone selects the boot path, so
	// existing callers are unaffected. Request-scoped: nothing durable records it.
	FilesystemBoot *bool `protobuf:"varint,4,opt,name=filesystem_boot,json=filesystemBoot,proto3,oneof" json:"filesystem_boot,omitempty"`
	// contains filtered or unexported fields
}

type SandboxCreateResponse struct {
	ClientId           string              `protobuf:"bytes,1,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	SchedulingMetadata *SchedulingMetadata `protobuf:"bytes,2,opt,name=scheduling_metadata,json=schedulingMetadata,proto3" json:"scheduling_metadata,omitempty"`
	// Echoes whether the sandbox cold-booted from its rootfs (vs a memory
	// restore). Absent from orchestrators that predate filesystem_boot, so a
	// caller that demanded a filesystem boot can detect an unhonored demand
	// instead of trusting deploy ordering.
	FilesystemBootApplied bool `` /* 127-byte string literal not displayed */
	// The Firecracker version the sandbox actually RUNS: the request's
	// declared version resolved through the firecracker-versions flag at
	// start, frozen for the sandbox's lifetime. Callers gating features on the
	// FC version must read this rather than re-deriving it — a re-resolution
	// can disagree with the frozen value whenever the flag changes or the
	// evaluation contexts differ. Empty from orchestrators that predate the
	// field.
	ResolvedFirecrackerVersion string `` /* 141-byte string literal not displayed */
	// contains filtered or unexported fields
}

type SandboxDeleteRequest struct {
	SandboxId  string  `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	KillReason *string `protobuf:"bytes,2,opt,name=kill_reason,json=killReason,proto3,oneof" json:"kill_reason,omitempty"`
	// contains filtered or unexported fields
}

type SandboxIam struct {

	// Named workload-token definitions, keyed by a caller-chosen token name.
	Tokens map[string]*SandboxIamToken `` /* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

type SandboxIamToken struct {
	Audience  string `protobuf:"bytes,1,opt,name=audience,proto3" json:"audience,omitempty"`
	TokenType string `protobuf:"bytes,2,opt,name=token_type,json=tokenType,proto3" json:"token_type,omitempty"`
	// contains filtered or unexported fields
}

type SandboxListResponse struct {
	Sandboxes []*RunningSandbox `protobuf:"bytes,1,rep,name=sandboxes,proto3" json:"sandboxes,omitempty"`
	// contains filtered or unexported fields
}

type SandboxNetworkConfig struct {
	Egress  *SandboxNetworkEgressConfig  `protobuf:"bytes,1,opt,name=egress,proto3,oneof" json:"egress,omitempty"`
	Ingress *SandboxNetworkIngressConfig `protobuf:"bytes,2,opt,name=ingress,proto3,oneof" json:"ingress,omitempty"`
	// contains filtered or unexported fields
}

type SandboxNetworkDomainRules struct {
	Rules []*SandboxNetworkRule `protobuf:"bytes,1,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

type SandboxNetworkEgressConfig struct {
	AllowedCidrs   []string                              `protobuf:"bytes,1,rep,name=allowed_cidrs,json=allowedCidrs,proto3" json:"allowed_cidrs,omitempty"`
	DeniedCidrs    []string                              `protobuf:"bytes,2,rep,name=denied_cidrs,json=deniedCidrs,proto3" json:"denied_cidrs,omitempty"`
	AllowedDomains []string                              `protobuf:"bytes,3,rep,name=allowed_domains,json=allowedDomains,proto3" json:"allowed_domains,omitempty"`
	Rules          map[string]*SandboxNetworkDomainRules `` /* 137-byte string literal not displayed */
	// BYOP SOCKS5 egress proxy.
	EgressProxyAddress  string `protobuf:"bytes,5,opt,name=egress_proxy_address,json=egressProxyAddress,proto3" json:"egress_proxy_address,omitempty"`
	EgressProxyUsername string `protobuf:"bytes,6,opt,name=egress_proxy_username,json=egressProxyUsername,proto3" json:"egress_proxy_username,omitempty"`
	EgressProxyPassword string `protobuf:"bytes,7,opt,name=egress_proxy_password,json=egressProxyPassword,proto3" json:"egress_proxy_password,omitempty"`
	// contains filtered or unexported fields
}

type SandboxNetworkIngressConfig struct {
	TrafficAccessToken *string  `protobuf:"bytes,1,opt,name=traffic_access_token,json=trafficAccessToken,proto3,oneof" json:"traffic_access_token,omitempty"`
	MaskRequestHost    *string  `protobuf:"bytes,2,opt,name=mask_request_host,json=maskRequestHost,proto3,oneof" json:"mask_request_host,omitempty"`
	HttpsPorts         []uint32 `protobuf:"varint,3,rep,packed,name=https_ports,json=httpsPorts,proto3" json:"https_ports,omitempty"`
	// contains filtered or unexported fields
}

type SandboxNetworkRule struct {
	Transform *SandboxNetworkTransform `protobuf:"bytes,1,opt,name=transform,proto3,oneof" json:"transform,omitempty"`
	// contains filtered or unexported fields
}

type SandboxNetworkTransform struct {
	Headers map[string]string `` /* 141-byte string literal not displayed */
	// contains filtered or unexported fields
}

type SandboxPauseRequest struct {
	SandboxId  string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	TemplateId string `protobuf:"bytes,2,opt,name=template_id,json=templateId,proto3" json:"template_id,omitempty"`
	BuildId    string `protobuf:"bytes,3,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	// When true, persist only the filesystem (no memory snapshot); resuming such
	// a snapshot cold-boots (reboots) from the rootfs. Default false = full memory
	// snapshot, so existing callers are unaffected.
	FilesystemOnly bool `protobuf:"varint,4,opt,name=filesystem_only,json=filesystemOnly,proto3" json:"filesystem_only,omitempty"`
	// contains filtered or unexported fields
}

type SandboxPauseResponse struct {
	SchedulingMetadata *SchedulingMetadata `protobuf:"bytes,1,opt,name=scheduling_metadata,json=schedulingMetadata,proto3" json:"scheduling_metadata,omitempty"`
	// contains filtered or unexported fields
}

type SandboxServiceClient interface {
	Create(ctx context.Context, in *SandboxCreateRequest, opts ...grpc.CallOption) (*SandboxCreateResponse, error)
	Update(ctx context.Context, in *SandboxUpdateRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	List(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*SandboxListResponse, error)
	Delete(ctx context.Context, in *SandboxDeleteRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	Pause(ctx context.Context, in *SandboxPauseRequest, opts ...grpc.CallOption) (*SandboxPauseResponse, error)
	Checkpoint(ctx context.Context, in *SandboxCheckpointRequest, opts ...grpc.CallOption) (*SandboxCheckpointResponse, error)
}

type SandboxServiceServer interface {
	Create(context.Context, *SandboxCreateRequest) (*SandboxCreateResponse, error)
	Update(context.Context, *SandboxUpdateRequest) (*emptypb.Empty, error)
	List(context.Context, *emptypb.Empty) (*SandboxListResponse, error)
	Delete(context.Context, *SandboxDeleteRequest) (*emptypb.Empty, error)
	Pause(context.Context, *SandboxPauseRequest) (*SandboxPauseResponse, error)
	Checkpoint(context.Context, *SandboxCheckpointRequest) (*SandboxCheckpointResponse, error)
	// contains filtered or unexported methods
}

type SandboxUpdateRequest struct {
	SandboxId string `protobuf:"bytes,1,opt,name=sandbox_id,json=sandboxId,proto3" json:"sandbox_id,omitempty"`
	// All fields are optional — only set fields are applied.
	EndTime *timestamppb.Timestamp      `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3,oneof" json:"end_time,omitempty"`
	Egress  *SandboxNetworkEgressConfig `protobuf:"bytes,3,opt,name=egress,proto3,oneof" json:"egress,omitempty"`
	// contains filtered or unexported fields
}

type SandboxVolumeMount struct {
	Id   string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Path string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	Type string `protobuf:"bytes,3,opt,name=type,proto3" json:"type,omitempty"`
	Name string `protobuf:"bytes,4,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type SchedulingMetadata struct {

	// memfile_base_build_id / rootfs_base_build_id are each artifact's root layer
	// (shared across the template's sandboxes); they can differ. build_id is the
	// final/current layer. All also appear in the lists below.
	MemfileBaseBuildId string `protobuf:"bytes,1,opt,name=memfile_base_build_id,json=memfileBaseBuildId,proto3" json:"memfile_base_build_id,omitempty"`
	BuildId            string `protobuf:"bytes,2,opt,name=build_id,json=buildId,proto3" json:"build_id,omitempty"`
	// Deduplicated build IDs whose data each artifact references (all ancestor
	// layers plus the build itself). Sorted; order is not significant. When a
	// list exceeds the cap, the lightest layers are dropped first and the count
	// of dropped layers is reported.
	MemfileBuildIds      []string `protobuf:"bytes,3,rep,name=memfile_build_ids,json=memfileBuildIds,proto3" json:"memfile_build_ids,omitempty"`
	RootfsBuildIds       []string `protobuf:"bytes,4,rep,name=rootfs_build_ids,json=rootfsBuildIds,proto3" json:"rootfs_build_ids,omitempty"`
	MemfileDroppedBuilds uint32   `protobuf:"varint,5,opt,name=memfile_dropped_builds,json=memfileDroppedBuilds,proto3" json:"memfile_dropped_builds,omitempty"`
	RootfsDroppedBuilds  uint32   `protobuf:"varint,6,opt,name=rootfs_dropped_builds,json=rootfsDroppedBuilds,proto3" json:"rootfs_dropped_builds,omitempty"`
	// Referenced bytes per build, aligned with the *_build_ids lists. On save the
	// new memfile layer's bytes are a pre-dedup, block-granular upper bound.
	MemfileBuildBytes []uint64 `protobuf:"varint,7,rep,packed,name=memfile_build_bytes,json=memfileBuildBytes,proto3" json:"memfile_build_bytes,omitempty"`
	RootfsBuildBytes  []uint64 `protobuf:"varint,8,rep,packed,name=rootfs_build_bytes,json=rootfsBuildBytes,proto3" json:"rootfs_build_bytes,omitempty"`
	RootfsBaseBuildId string   `protobuf:"bytes,9,opt,name=rootfs_base_build_id,json=rootfsBaseBuildId,proto3" json:"rootfs_base_build_id,omitempty"`
	// contains filtered or unexported fields
}

type StatPathRequest struct {
	Volume         *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	Path           string      `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	FollowSymlinks bool        `protobuf:"varint,3,opt,name=follow_symlinks,json=followSymlinks,proto3" json:"follow_symlinks,omitempty"`
	// contains filtered or unexported fields
}

type StatPathResponse struct {
	Entry *EntryInfo `protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedChunkServiceServer struct{}

type UnimplementedSandboxServiceServer struct{}

type UnimplementedVolumeServiceServer struct{}

type UnknownVolumeTypeError struct {
	VolumeType string `protobuf:"bytes,1,opt,name=volume_type,json=volumeType,proto3" json:"volume_type,omitempty"`
	// contains filtered or unexported fields
}

type UnsafeChunkServiceServer interface {
	// contains filtered or unexported methods
}

type UnsafeSandboxServiceServer interface {
	// contains filtered or unexported methods
}

type UnsafeVolumeServiceServer interface {
	// contains filtered or unexported methods
}

type UpdatePathRequest struct {
	Volume *VolumeInfo `protobuf:"bytes,1,opt,name=volume,proto3" json:"volume,omitempty"`
	Path   string      `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	Mode   *uint32     `protobuf:"varint,3,opt,name=mode,proto3,oneof" json:"mode,omitempty"`
	Uid    *uint32     `protobuf:"varint,4,opt,name=uid,proto3,oneof" json:"uid,omitempty"`
	Gid    *uint32     `protobuf:"varint,5,opt,name=gid,proto3,oneof" json:"gid,omitempty"`
	// contains filtered or unexported fields
}

type UpdatePathResponse struct {
	Entry *EntryInfo `protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
	// contains filtered or unexported fields
}

type UserError struct {
	Code       UserErrorCode `protobuf:"varint,1,opt,name=code,proto3,enum=UserErrorCode" json:"code,omitempty"`
	Message    string        `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	HttpStatus uint32        `protobuf:"varint,3,opt,name=http_status,json=httpStatus,proto3" json:"http_status,omitempty"`
	// contains filtered or unexported fields
}

type UserErrorCode int32

type VolumeDirectoryItem struct {
	Entry *EntryInfo `protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
	// contains filtered or unexported fields
}

type VolumeFileCreateContent struct {
	Content []byte `protobuf:"bytes,1,opt,name=content,proto3" json:"content,omitempty"`
	// contains filtered or unexported fields
}