From eb4fe24d2367bf7b026a449685910e2c45645d6d Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 07:26:46 +0000 Subject: [PATCH] =?UTF-8?q?Needs=20a=20live=20run:=20OpenShell=20v0.1.2=20?= =?UTF-8?q?=E2=86=92=20v0.1.3,=20interceptor=20stubs=20regenerated?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- interceptor/_gen/datamodel_pb2.py | 6 +- interceptor/_gen/datamodel_pb2_grpc.py | 6 +- interceptor/_gen/extension_pb2.py | 6 +- interceptor/_gen/extension_pb2_grpc.py | 6 +- interceptor/_gen/gateway_interceptor_pb2.py | 6 +- .../_gen/gateway_interceptor_pb2_grpc.py | 6 +- interceptor/_gen/openshell_pb2.py | 1038 +++++++++-------- interceptor/_gen/openshell_pb2_grpc.py | 6 +- interceptor/_gen/options_pb2.py | 6 +- interceptor/_gen/options_pb2_grpc.py | 6 +- interceptor/_gen/sandbox_pb2.py | 114 +- interceptor/_gen/sandbox_pb2_grpc.py | 6 +- interceptor/proto/SOURCE | 8 +- interceptor/proto/openshell.proto | 116 +- interceptor/proto/sandbox.proto | 4 + 15 files changed, 730 insertions(+), 610 deletions(-) diff --git a/interceptor/_gen/datamodel_pb2.py b/interceptor/_gen/datamodel_pb2.py index 5c3cf6f..0721c26 100644 --- a/interceptor/_gen/datamodel_pb2.py +++ b/interceptor/_gen/datamodel_pb2.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # -*- coding: utf-8 -*- # Generated by the protocol buffer compiler. DO NOT EDIT! diff --git a/interceptor/_gen/datamodel_pb2_grpc.py b/interceptor/_gen/datamodel_pb2_grpc.py index c9195e7..4be2e00 100644 --- a/interceptor/_gen/datamodel_pb2_grpc.py +++ b/interceptor/_gen/datamodel_pb2_grpc.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT! """Client and server classes corresponding to protobuf-defined services.""" diff --git a/interceptor/_gen/extension_pb2.py b/interceptor/_gen/extension_pb2.py index 1d248cb..3548052 100644 --- a/interceptor/_gen/extension_pb2.py +++ b/interceptor/_gen/extension_pb2.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # -*- coding: utf-8 -*- # Generated by the protocol buffer compiler. DO NOT EDIT! diff --git a/interceptor/_gen/extension_pb2_grpc.py b/interceptor/_gen/extension_pb2_grpc.py index 2e31103..191f133 100644 --- a/interceptor/_gen/extension_pb2_grpc.py +++ b/interceptor/_gen/extension_pb2_grpc.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT! """Client and server classes corresponding to protobuf-defined services.""" diff --git a/interceptor/_gen/gateway_interceptor_pb2.py b/interceptor/_gen/gateway_interceptor_pb2.py index 2095e46..86c5fd9 100644 --- a/interceptor/_gen/gateway_interceptor_pb2.py +++ b/interceptor/_gen/gateway_interceptor_pb2.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # -*- coding: utf-8 -*- # Generated by the protocol buffer compiler. DO NOT EDIT! diff --git a/interceptor/_gen/gateway_interceptor_pb2_grpc.py b/interceptor/_gen/gateway_interceptor_pb2_grpc.py index 355bde6..e758f3f 100644 --- a/interceptor/_gen/gateway_interceptor_pb2_grpc.py +++ b/interceptor/_gen/gateway_interceptor_pb2_grpc.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT! """Client and server classes corresponding to protobuf-defined services.""" diff --git a/interceptor/_gen/openshell_pb2.py b/interceptor/_gen/openshell_pb2.py index 56ca173..df4cbec 100644 --- a/interceptor/_gen/openshell_pb2.py +++ b/interceptor/_gen/openshell_pb2.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # -*- coding: utf-8 -*- # Generated by the protocol buffer compiler. DO NOT EDIT! @@ -39,7 +39,7 @@ import sandbox_pb2 as sandbox__pb2 -DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x0fopenshell.proto\x12\x0copenshell.v1\x1a\x0f\x64\x61tamodel.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\roptions.proto\x1a\rsandbox.proto\"\x1a\n\x18IssueSandboxTokenRequest\"z\n\x19IssueSandboxTokenResponse\x12\x13\n\x05token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18\x66 \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x02\x10\x03R\rexpires_at_ms\"=\n\x1aRefreshSandboxTokenRequest\x12\x1f\n\x17\x65xtension_service_names\x18\x01 \x03(\t\"\xea\x02\n\x1bRefreshSandboxTokenResponse\x12\x13\n\x05token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18\x66 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12G\n\x15\x65xtension_credentials\x18\x03 \x03(\x0b\x32(.openshell.v1.ExtensionServiceCredential\x12\x1b\n\rsandbox_token\x18\x04 \x01(\tB\x04\x88\xb5\x18\x01\x12;\n\x17sandbox_expiration_time\x18i \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nsession_id\x18\x06 \x01(\t\x12\x18\n\x10\x63redential_epoch\x18\x07 \x01(\x04J\x04\x08\x02\x10\x03J\x04\x08\x05\x10\x06R\rexpires_at_msR\x15sandbox_expires_at_ms\"\x0f\n\rHealthRequest\"N\n\x0eHealthResponse\x12+\n\x06status\x18\x01 \x01(\x0e\x32\x1b.openshell.v1.ServiceStatus\x12\x0f\n\x07version\x18\x02 \x01(\t\"\x17\n\x15GetCurrentUserRequest\"y\n\x16GetCurrentUserResponse\x12\x0f\n\x07subject\x18\x01 \x01(\t\x12\x14\n\x0c\x64isplay_name\x18\x02 \x01(\t\x12\r\n\x05roles\x18\x03 \x03(\t\x12\x0e\n\x06scopes\x18\x04 \x03(\t\x12\x19\n\x11identity_provider\x18\x05 \x01(\t\"\x17\n\x15GetGatewayInfoRequest\"\xd3\x01\n\x16GetGatewayInfoResponse\x12+\n\x06status\x18\x01 \x01(\x0e\x32\x1b.openshell.v1.ServiceStatus\x12\x17\n\x0fgateway_version\x18\x02 \x01(\t\x12\x38\n\x0f\x63ompute_drivers\x18\x03 \x03(\x0b\x32\x1f.openshell.v1.ComputeDriverInfo\x12\x39\n\nextensions\x18\x04 \x03(\x0b\x32%.openshell.v1.NegotiatedExtensionInfo\"\x89\x02\n\x17NegotiatedExtensionInfo\x12)\n\x04kind\x18\x01 \x01(\x0e\x32\x1b.openshell.v1.ExtensionKind\x12\x17\n\x0f\x63onfigured_name\x18\x02 \x01(\t\x12\x1b\n\x13implementation_name\x18\x03 \x01(\t\x12\x1e\n\x16implementation_version\x18\x04 \x01(\t\x12\x16\n\x0eprotocol_major\x18\x05 \x01(\r\x12\x16\n\x0eprotocol_minor\x18\x06 \x01(\r\x12\x1e\n\x16supported_capabilities\x18\x07 \x03(\t\x12\x1d\n\x15required_capabilities\x18\x08 \x03(\t\"`\n\x11\x43omputeDriverInfo\x12\x0c\n\x04name\x18\x01 \x01(\t\x12=\n\x0c\x63\x61pabilities\x18\x02 \x01(\x0b\x32\'.openshell.v1.ComputeDriverCapabilities\"\x8b\x01\n\x19\x43omputeDriverCapabilities\x12\x13\n\x0b\x64river_name\x18\x01 \x01(\t\x12\x16\n\x0e\x64river_version\x18\x02 \x01(\t\x12\x41\n\x15resource_capabilities\x18\x03 \x01(\x0b\x32\".openshell.v1.ResourceCapabilities\"\xb8\x01\n\x14ResourceCapabilities\x12\x32\n\x03\x63pu\x18\x01 \x01(\x0b\x32%.openshell.v1.CpuResourceCapabilities\x12\x38\n\x06memory\x18\x02 \x01(\x0b\x32(.openshell.v1.MemoryResourceCapabilities\x12\x32\n\x03gpu\x18\x03 \x01(\x0b\x32%.openshell.v1.GpuResourceCapabilities\"2\n\x17\x43puResourceCapabilities\x12\x17\n\x0flimit_supported\x18\x01 \x01(\x08\"5\n\x1aMemoryResourceCapabilities\x12\x17\n\x0flimit_supported\x18\x01 \x01(\x08\"a\n\x17GpuResourceCapabilities\x12#\n\x1b\x64\x65\x66\x61ult_selection_supported\x18\x01 \x01(\x08\x12!\n\x19\x63ount_selection_supported\x18\x02 \x01(\x08\"\x99\x02\n\x07Sandbox\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\'\n\x04spec\x18\x02 \x01(\x0b\x32\x19.openshell.v1.SandboxSpec\x12+\n\x06status\x18\x03 \x01(\x0b\x32\x1b.openshell.v1.SandboxStatus\x12W\n\x1e\x63reated_from_workload_template\x18\x14 \x01(\x0b\x32/.openshell.v1.SandboxWorkloadTemplateProvenanceJ\x04\x08\x04\x10\x05J\x04\x08\x05\x10\x06R\x05phaseR\x16\x63urrent_policy_version\"\xc2\x03\n\x0bSandboxSpec\x12\x11\n\tlog_level\x18\x01 \x01(\t\x12?\n\x0b\x65nvironment\x18\x05 \x03(\x0b\x32*.openshell.v1.SandboxSpec.EnvironmentEntry\x12/\n\x08template\x18\x06 \x01(\x0b\x32\x1d.openshell.v1.SandboxTemplate\x12\x33\n\x06policy\x18\x07 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12\x11\n\tproviders\x18\x08 \x03(\t\x12\x41\n\x15resource_requirements\x18\t \x01(\x0b\x32\".openshell.v1.ResourceRequirements\x12\x0f\n\x07\x63ommand\x18\x0c \x03(\t\x12\x0b\n\x03tty\x18\r \x01(\x08\x12!\n\x19provider_attachment_epoch\x18\x0e \x01(\t\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\n\x10\x0bJ\x04\x08\x0b\x10\x0cR\ngpu_deviceR\x16proposal_approval_mode\"J\n\x14ResourceRequirements\x12\x32\n\x03gpu\x18\x01 \x01(\x0b\x32%.openshell.v1.GpuResourceRequirements\"7\n\x17GpuResourceRequirements\x12\x12\n\x05\x63ount\x18\x01 \x01(\rH\x00\x88\x01\x01\x42\x08\n\x06_count\"\xda\x04\n\x0fSandboxTemplate\x12\r\n\x05image\x18\x01 \x01(\t\x12\x1a\n\x12runtime_class_name\x18\x02 \x01(\t\x12\x14\n\x0c\x61gent_socket\x18\x03 \x01(\t\x12\x39\n\x06labels\x18\x04 \x03(\x0b\x32).openshell.v1.SandboxTemplate.LabelsEntry\x12\x43\n\x0b\x61nnotations\x18\x05 \x03(\x0b\x32..openshell.v1.SandboxTemplate.AnnotationsEntry\x12\x43\n\x0b\x65nvironment\x18\x06 \x03(\x0b\x32..openshell.v1.SandboxTemplate.EnvironmentEntry\x12*\n\tresources\x18\x07 \x01(\x0b\x32\x17.google.protobuf.Struct\x12\x1c\n\x0fuser_namespaces\x18\n \x01(\x08H\x00\x88\x01\x01\x12.\n\rdriver_config\x18\x0b \x01(\x0b\x32\x17.google.protobuf.Struct\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42\x12\n\x10_user_namespacesJ\x04\x08\t\x10\nR\x16volume_claim_templates\"\x88\x01\n\x17SandboxWorkloadTemplate\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x37\n\x04spec\x18\x02 \x01(\x0b\x32).openshell.v1.SandboxWorkloadTemplateSpec\"\xc6\x01\n\x1bSandboxWorkloadTemplateSpec\x12\x35\n\x08workload\x18\x01 \x01(\x0b\x32#.openshell.v1.SandboxWorkloadConfig\x12.\n\rdriver_config\x18\x02 \x01(\x0b\x32\x17.google.protobuf.Struct\x12@\n\x15\x64\x65sired_service_level\x18\x03 \x01(\x0b\x32!.openshell.v1.SandboxServiceLevel\"\xd8\x01\n\x15SandboxWorkloadConfig\x12\r\n\x05image\x18\x01 \x01(\t\x12I\n\x0b\x65nvironment\x18\x02 \x03(\x0b\x32\x34.openshell.v1.SandboxWorkloadConfig.EnvironmentEntry\x12\x31\n\tresources\x18\x03 \x01(\x0b\x32\x1e.openshell.v1.SandboxResources\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"c\n\x10SandboxResources\x12\x0b\n\x03\x63pu\x18\x01 \x01(\t\x12\x0e\n\x06memory\x18\x02 \x01(\t\x12\x32\n\x03gpu\x18\x03 \x01(\x0b\x32%.openshell.v1.GpuResourceRequirements\"D\n\x13SandboxServiceLevel\x12-\n\x07startup\x18\x01 \x01(\x0b\x32\x1c.openshell.v1.SandboxStartup\"T\n\x0eSandboxStartup\x12/\n\x0cready_within\x18\x01 \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x11\n\tmax_burst\x18\x02 \x01(\r\"K\n!SandboxWorkloadTemplateProvenance\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x18\n\x10resource_version\x18\x02 \x01(\t\"\x91\x04\n\rSandboxStatus\x12\x11\n\tagent_pod\x18\x02 \x01(\t\x12\x10\n\x08\x61gent_fd\x18\x03 \x01(\t\x12\x12\n\nsandbox_fd\x18\x04 \x01(\t\x12\x32\n\nconditions\x18\x05 \x03(\x0b\x32\x1e.openshell.v1.SandboxCondition\x12)\n\x05phase\x18\x06 \x01(\x0e\x32\x1a.openshell.v1.SandboxPhase\x12\x1e\n\x16\x63urrent_policy_version\x18\x07 \x01(\r\x12 \n\x18main_process_instance_id\x18\x08 \x01(\t\x12\x16\n\texit_code\x18\t \x01(\x05H\x00\x88\x01\x01\x12\x37\n\x11\x65ndpoint_statuses\x18\n \x03(\x0b\x32\x1c.openshell.v1.EndpointStatus\x12L\n\x17\x63onfiguration_admission\x18\x0b \x01(\x0b\x32+.openshell.v1.SandboxConfigurationAdmission\x12$\n\x17\x63onfiguration_activated\x18\x0c \x01(\x08H\x01\x88\x01\x01\x12\x37\n\x0cprovisioning\x18\r \x01(\x0b\x32!.openshell.v1.SandboxProvisioningB\x0c\n\n_exit_codeB\x1a\n\x18_configuration_activated\"\xa2\x01\n\x10SandboxCondition\x12\x0c\n\x04type\x18\x01 \x01(\t\x12\x0e\n\x06status\x18\x02 \x01(\t\x12\x0e\n\x06reason\x18\x03 \x01(\t\x12\x0f\n\x07message\x18\x04 \x01(\t\x12\x33\n\x0ftransition_time\x18i \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x05\x10\x06R\x14last_transition_time\"\x80\x02\n\rPlatformEvent\x12.\n\nevent_time\x18\x65 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06source\x18\x02 \x01(\t\x12\x0c\n\x04type\x18\x03 \x01(\t\x12\x0e\n\x06reason\x18\x04 \x01(\t\x12\x0f\n\x07message\x18\x05 \x01(\t\x12;\n\x08metadata\x18\x06 \x03(\x0b\x32).openshell.v1.PlatformEvent.MetadataEntry\x1a/\n\rMetadataEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x01\x10\x02R\x0ctimestamp_ms\"\x95\x04\n\x14\x43reateSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x07 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\'\n\x04spec\x18\x01 \x01(\x0b\x32\x19.openshell.v1.SandboxSpec\x12\x0c\n\x04name\x18\x02 \x01(\t\x12>\n\x06labels\x18\x03 \x03(\x0b\x32..openshell.v1.CreateSandboxRequest.LabelsEntry\x12H\n\x0b\x61nnotations\x18\x04 \x03(\x0b\x32\x33.openshell.v1.CreateSandboxRequest.AnnotationsEntry\x12%\n\x1d\x61wait_main_process_attachment\x18\x05 \x01(\x08\x12\x19\n\x11workload_template\x18\x06 \x01(\t\x12\x12\n\nrequest_id\x18\x08 \x01(\t\x12?\n\x11service_exposures\x18\t \x03(\x0b\x32$.openshell.v1.SandboxServiceExposure\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\xaf\x01\n\x1c\x43reateSandboxTemplateRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x37\n\x08template\x18\x01 \x01(\x0b\x32%.openshell.v1.SandboxWorkloadTemplate\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"m\n\x19GetSandboxTemplateRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\xa0\x01\n\x1bListSandboxTemplatesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\x12\x16\n\x0elabel_selector\x18\x03 \x01(\t\"\x9b\x01\n\x1c\x44\x65leteSandboxTemplateRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"R\n\x17SandboxTemplateResponse\x12\x37\n\x08template\x18\x01 \x01(\x0b\x32%.openshell.v1.SandboxWorkloadTemplate\"q\n\x1cListSandboxTemplatesResponse\x12\x38\n\ttemplates\x18\x01 \x03(\x0b\x32%.openshell.v1.SandboxWorkloadTemplate\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"^\n\x1d\x44\x65leteSandboxTemplateResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\x89\x01\n\x1c\x42\x65ginRootfsTarStagingRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tfile_name\x18\x01 \x01(\t\x12\x12\n\nsize_bytes\x18\x02 \x01(\x04\"\xa8\x01\n\x1d\x42\x65ginRootfsTarStagingResponse\x12\x15\n\rstaging_token\x18\x01 \x01(\t\x12\x13\n\x0bupload_path\x18\x02 \x01(\t\x12\x11\n\tmax_bytes\x18\x03 \x01(\x04\x12\x33\n\x0f\x65xpiration_time\x18h \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x04\x10\x05R\rexpires_at_ms\"e\n\x11GetSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\x99\x01\n\x14ListSandboxesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\x12\x16\n\x0elabel_selector\x18\x03 \x01(\t\"\x99\x01\n\x1bListSandboxProvidersRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"\xbc\x01\n\x1c\x41ttachSandboxProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12!\n\x19\x65xpected_resource_version\x18\x03 \x01(\x04\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\xbc\x01\n\x1c\x44\x65tachSandboxProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12!\n\x19\x65xpected_resource_version\x18\x03 \x01(\x04\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x93\x01\n\x14\x44\x65leteSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"z\n\x12StopSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"{\n\x13StartSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"\xb3\x01\n\x0fSandboxResponse\x12&\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.Sandbox\x12\x44\n\x0cservice_urls\x18\x02 \x03(\x0b\x32..openshell.v1.SandboxResponse.ServiceUrlsEntry\x1a\x32\n\x10ServiceUrlsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"Z\n\x15ListSandboxesResponse\x12(\n\tsandboxes\x18\x01 \x03(\x0b\x32\x15.openshell.v1.Sandbox\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"l\n\x1cListSandboxProvidersResponse\x12\x33\n\tproviders\x18\x01 \x03(\x0b\x32 .openshell.datamodel.v1.Provider\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x91\x01\n\x1d\x41ttachSandboxProviderResponse\x12&\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.Sandbox\x12\x10\n\x08\x61ttached\x18\x02 \x01(\x08\x12\x36\n\x07receipt\x18\x03 \x01(\x0b\x32%.openshell.v1.ProviderMutationReceipt\"\x91\x01\n\x1d\x44\x65tachSandboxProviderResponse\x12&\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.Sandbox\x12\x10\n\x08\x64\x65tached\x18\x02 \x01(\x08\x12\x36\n\x07receipt\x18\x03 \x01(\x0b\x32%.openshell.v1.ProviderMutationReceipt\"\xdd\x01\n\x17ProviderDesiredIdentity\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x0f\n\x07sandbox\x18\x02 \x01(\t\x12\x18\n\x10\x61ttachment_epoch\x18\x03 \x01(\t\x12\x13\n\x0bprovider_id\x18\x04 \x01(\t\x12!\n\x19provider_resource_version\x18\x05 \x01(\x04\x12\x1d\n\x15provider_env_revision\x18\x06 \x01(\x04\x12\x17\n\x0f\x63onfig_revision\x18\x07 \x01(\x04\x12\x13\n\x0bpolicy_hash\x18\x08 \x01(\t\"\xc6\x01\n\x16\x43onfigSnapshotRevision\x12=\n\x0esandbox_config\x18\x01 \x01(\x0b\x32#.openshell.v1.SandboxConfigRevisionH\x00\x12\x1e\n\x14provider_environment\x18\x02 \x01(\x04H\x00\x12@\n\x0fprovider_target\x18\x03 \x01(\x0b\x32%.openshell.v1.ProviderDesiredIdentityH\x00\x42\x0b\n\tcomponent\"\xbd\x01\n\x15SandboxConfigRevision\x12\x17\n\x0f\x63onfig_revision\x18\x01 \x01(\x04\x12\x16\n\x0epolicy_version\x18\x02 \x01(\r\x12\x39\n\rpolicy_source\x18\x03 \x01(\x0e\x32\".openshell.sandbox.v1.PolicySource\x12\x1d\n\x15global_policy_version\x18\x04 \x01(\r\x12\x19\n\x11settings_revision\x18\x05 \x01(\x04\"\x90\x04\n\x15\x43onfigUpdateOperation\x12\x14\n\x0coperation_id\x18\x01 \x01(\t\x12\x12\n\nsandbox_id\x18\x02 \x01(\t\x12\x30\n\tcomponent\x18\x03 \x01(\x0e\x32\x1d.openshell.v1.ConfigComponent\x12=\n\x0ftarget_revision\x18\x04 \x01(\x0b\x32$.openshell.v1.ConfigSnapshotRevision\x12\x37\n\x05state\x18\x05 \x01(\x0e\x32(.openshell.v1.ConfigUpdateOperationState\x12\x31\n\x07outcome\x18\x06 \x01(\x0e\x32 .openshell.v1.ConfigApplyOutcome\x12\x17\n\x0fsanitized_error\x18\x07 \x01(\t\x12\x30\n\x0c\x63reated_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x30\n\x0cupdated_time\x18m \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0e\x63ompleted_time\x18n \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x08\x10\tJ\x04\x08\t\x10\nJ\x04\x08\n\x10\x0bR\rcreated_at_msR\rupdated_at_msR\x0f\x63ompleted_at_ms\"\x9c\x02\n\x17ProviderMutationReceipt\x12\x12\n\nreceipt_id\x18\x01 \x01(\t\x12\x13\n\x0bmutation_id\x18\x02 \x01(\t\x12\x10\n\x08provider\x18\x03 \x01(\t\x12\x11\n\tworkspace\x18\x04 \x01(\t\x12\x30\n\x04kind\x18\x05 \x01(\x0e\x32\".openshell.v1.ProviderMutationKind\x12\x36\n\x07\x64\x65sired\x18\x06 \x01(\x0b\x32%.openshell.v1.ProviderDesiredIdentity\x12\x32\n\x0epersisted_time\x18k \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x07\x10\x08R\x0fpersisted_at_ms\"\xdb\x02\n\x1cProviderReadinessObservation\x12\x12\n\nsession_id\x18\x01 \x01(\t\x12\x10\n\x08sequence\x18\x02 \x01(\x04\x12\x18\n\x10\x61ttachment_epoch\x18\x03 \x01(\t\x12\x1d\n\x15provider_env_revision\x18\x04 \x01(\x04\x12\x17\n\x0f\x63onfig_revision\x18\x05 \x01(\x04\x12\x13\n\x0bpolicy_hash\x18\x06 \x01(\t\x12\x1d\n\x15\x63redentials_installed\x18\x07 \x01(\x08\x12\x15\n\rpolicy_active\x18\x08 \x01(\x08\x12$\n\x1claunch_environment_installed\x18\t \x01(\x08\x12\x1b\n\x13process_instance_id\x18\n \x01(\t\x12\x35\n\x06reason\x18\x0b \x01(\x0e\x32%.openshell.v1.ProviderReadinessReason\"\xe4\x03\n\x17ProviderReadinessStatus\x12\x36\n\x07receipt\x18\x01 \x01(\x0b\x32%.openshell.v1.ProviderMutationReceipt\x12\x33\n\x05state\x18\x02 \x01(\x0e\x32$.openshell.v1.ProviderReadinessState\x12\x35\n\x06reason\x18\x03 \x01(\x0e\x32%.openshell.v1.ProviderReadinessReason\x12<\n\x08observed\x18\x04 \x01(\x0b\x32*.openshell.v1.ProviderReadinessObservation\x12\x1b\n\x13network_instance_id\x18\x05 \x01(\t\x12\x31\n\robserved_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0e\x65valuated_time\x18k \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x36\n\toperation\x18\x08 \x01(\x0b\x32#.openshell.v1.ConfigUpdateOperationJ\x04\x08\x06\x10\x07J\x04\x08\x07\x10\x08R\x0eobserved_at_msR\x0f\x65valuated_at_ms\"\x9c\x01\n\x1fGetSandboxProviderStatusRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12\x12\n\nreceipt_id\x18\x03 \x01(\t\"Y\n GetSandboxProviderStatusResponse\x12\x35\n\x06status\x18\x01 \x01(\x0b\x32%.openshell.v1.ProviderReadinessStatus\"u\n\x1eReportProviderReadinessRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12?\n\x0bobservation\x18\x02 \x01(\x0b\x32*.openshell.v1.ProviderReadinessObservation\"\xe2\x01\n\x1fReportProviderReadinessResponse\x12\x19\n\x11\x61\x63\x63\x65pted_sequence\x18\x01 \x01(\x04\x12\x32\n\x0freport_interval\x18\x66 \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x32\n\x0fobservation_ttl\x18g \x01(\x0b\x32\x19.google.protobuf.DurationJ\x04\x08\x02\x10\x03J\x04\x08\x03\x10\x04R\x17report_interval_secondsR\x17observation_ttl_seconds\"j\n\x15\x44\x65leteSandboxResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcome\x12\x12\n\nsandbox_id\x18\x03 \x01(\tJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"n\n\x17\x43reateSshSessionRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\xef\x01\n\x18\x43reateSshSessionResponse\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x05token\x18\x02 \x01(\tB\x04\x88\xb5\x18\x01\x12\x14\n\x0cgateway_host\x18\x03 \x01(\t\x12\x14\n\x0cgateway_port\x18\x04 \x01(\r\x12\x16\n\x0egateway_scheme\x18\x05 \x01(\t\x12\x1c\n\x14host_key_fingerprint\x18\x07 \x01(\t\x12\x33\n\x0f\x65xpiration_time\x18l \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x08\x10\tR\rexpires_at_ms\"\xb2\x01\n\x14\x45xposeServiceRequest\x12\x42\n\x0fworkspace_scope\x18\x05 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x13\n\x0btarget_port\x18\x03 \x01(\r\x12\x0e\n\x06\x64omain\x18\x04 \x01(\x08\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x06 \x01(\t\"v\n\x11GetServiceRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\x91\x01\n\x13ListServicesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"h\n\x14ListServicesResponse\x12\x37\n\x08services\x18\x01 \x03(\x0b\x32%.openshell.v1.ServiceEndpointResponse\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\xa4\x01\n\x14\x44\x65leteServiceRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x04 \x01(\x08\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"V\n\x15\x44\x65leteServiceResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\x9f\x01\n\x0fServiceEndpoint\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x12\n\nsandbox_id\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x03 \x01(\t\x12\x0c\n\x04name\x18\x04 \x01(\t\x12\x13\n\x0btarget_port\x18\x05 \x01(\r\x12\x0e\n\x06\x64omain\x18\x06 \x01(\x08\"W\n\x17ServiceEndpointResponse\x12/\n\x08\x65ndpoint\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.ServiceEndpoint\x12\x0b\n\x03url\x18\x02 \x01(\t\"E\n\x17RevokeSshSessionRequest\x12\x13\n\x05token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x15\n\rallow_missing\x18\x02 \x01(\x08\"Y\n\x18RevokeSshSessionResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07revoked\"\xb8\x03\n\x12\x45xecSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x0c \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x02 \x03(\t\x12\x0f\n\x07workdir\x18\x03 \x01(\t\x12\x46\n\x0b\x65nvironment\x18\x04 \x03(\x0b\x32\x31.openshell.v1.ExecSandboxRequest.EnvironmentEntry\x12\x34\n\x11\x65xecution_timeout\x18i \x01(\x0b\x32\x19.google.protobuf.Duration\x12\r\n\x05stdin\x18\x06 \x01(\x0c\x12\x0b\n\x03tty\x18\x07 \x01(\x08\x12\x0c\n\x04\x63ols\x18\x08 \x01(\r\x12\x0c\n\x04rows\x18\t \x01(\r\x12\x16\n\x0eno_login_shell\x18\n \x01(\x08\x12\x12\n\nrequest_id\x18\x0b \x01(\t\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x05\x10\x06R\x0ftimeout_seconds\"!\n\x11\x45xecSandboxStdout\x12\x0c\n\x04\x64\x61ta\x18\x01 \x01(\x0c\"!\n\x11\x45xecSandboxStderr\x12\x0c\n\x04\x64\x61ta\x18\x01 \x01(\x0c\"$\n\x0f\x45xecSandboxExit\x12\x11\n\texit_code\x18\x01 \x01(\x05\"\xb2\x01\n\x10\x45xecSandboxEvent\x12\x31\n\x06stdout\x18\x01 \x01(\x0b\x32\x1f.openshell.v1.ExecSandboxStdoutH\x00\x12\x31\n\x06stderr\x18\x02 \x01(\x0b\x32\x1f.openshell.v1.ExecSandboxStderrH\x00\x12-\n\x04\x65xit\x18\x03 \x01(\x0b\x32\x1d.openshell.v1.ExecSandboxExitH\x00\x42\t\n\x07payload\"\xcf\x01\n\x0eTcpForwardInit\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x11\n\tworkspace\x18\x03 \x01(\t\x12\x12\n\nservice_id\x18\x04 \x01(\t\x12+\n\x03ssh\x18\x05 \x01(\x0b\x32\x1c.openshell.v1.SshRelayTargetH\x00\x12+\n\x03tcp\x18\x06 \x01(\x0b\x32\x1c.openshell.v1.TcpRelayTargetH\x00\x12!\n\x13\x61uthorization_token\x18\x07 \x01(\tB\x04\x88\xb5\x18\x01\x42\x08\n\x06target\"Z\n\x0fTcpForwardFrame\x12,\n\x04init\x18\x01 \x01(\x0b\x32\x1c.openshell.v1.TcpForwardInitH\x00\x12\x0e\n\x04\x64\x61ta\x18\x02 \x01(\x0cH\x00\x42\t\n\x07payload\"\x9a\x01\n\x10\x45xecSandboxInput\x12\x31\n\x05start\x18\x01 \x01(\x0b\x32 .openshell.v1.ExecSandboxRequestH\x00\x12\x0f\n\x05stdin\x18\x02 \x01(\x0cH\x00\x12\x37\n\x06resize\x18\x03 \x01(\x0b\x32%.openshell.v1.ExecSandboxWindowResizeH\x00\x42\t\n\x07payload\"5\n\x17\x45xecSandboxWindowResize\x12\x0c\n\x04\x63ols\x18\x01 \x01(\r\x12\x0c\n\x04rows\x18\x02 \x01(\r\"\xc6\x01\n\nSshSession\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x12\n\nsandbox_id\x18\x02 \x01(\t\x12\x13\n\x05token\x18\x03 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18h \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0f\n\x07revoked\x18\x05 \x01(\x08J\x04\x08\x04\x10\x05R\rexpires_at_ms\"\x80\x03\n\x13WatchSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x0b \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x15\n\rfollow_status\x18\x02 \x01(\x08\x12\x13\n\x0b\x66ollow_logs\x18\x03 \x01(\x08\x12\x15\n\rfollow_events\x18\x04 \x01(\x08\x12\x16\n\x0elog_tail_lines\x18\x05 \x01(\r\x12\x12\n\nevent_tail\x18\x06 \x01(\r\x12\x18\n\x10stop_on_terminal\x18\x07 \x01(\x08\x12.\n\nsince_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x13\n\x0blog_sources\x18\t \x03(\t\x12\x15\n\rlog_min_level\x18\n \x01(\t\x12\x1b\n\x13resume_after_cursor\x18\x0c \x01(\tJ\x04\x08\x08\x10\tR\x0clog_since_ms\"\xab\x02\n\x12SandboxStreamEvent\x12(\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.SandboxH\x00\x12+\n\x03log\x18\x02 \x01(\x0b\x32\x1c.openshell.v1.SandboxLogLineH\x00\x12,\n\x05\x65vent\x18\x03 \x01(\x0b\x32\x1b.openshell.v1.PlatformEventH\x00\x12\x35\n\x07warning\x18\x04 \x01(\x0b\x32\".openshell.v1.SandboxStreamWarningH\x00\x12>\n\x13\x64raft_policy_update\x18\x05 \x01(\x0b\x32\x1f.openshell.v1.DraftPolicyUpdateH\x00\x12\x0e\n\x06\x63ursor\x18\x06 \x01(\tB\t\n\x07payload\"\x91\x02\n\x0eSandboxLogLine\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12.\n\nevent_time\x18\x66 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\r\n\x05level\x18\x03 \x01(\t\x12\x0e\n\x06target\x18\x04 \x01(\t\x12\x0f\n\x07message\x18\x05 \x01(\t\x12\x0e\n\x06source\x18\x06 \x01(\t\x12\x38\n\x06\x66ields\x18\x07 \x03(\x0b\x32(.openshell.v1.SandboxLogLine.FieldsEntry\x1a-\n\x0b\x46ieldsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x02\x10\x03R\x0ctimestamp_ms\"\'\n\x14SandboxStreamWarning\x12\x0f\n\x07message\x18\x01 \x01(\t\"\xa3\x01\n\x15\x43reateProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x32\n\x08provider\x18\x01 \x01(\x0b\x32 .openshell.datamodel.v1.Provider\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"f\n\x12GetProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\x81\x01\n\x14ListProvidersRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\"\xb4\x03\n\x15UpdateProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x32\n\x08provider\x18\x01 \x01(\x0b\x32 .openshell.datamodel.v1.Provider\x12g\n\x1b\x63redential_expiration_times\x18\x66 \x03(\x0b\x32\x42.openshell.v1.UpdateProviderRequest.CredentialExpirationTimesEntry\x12(\n clear_credential_expiration_keys\x18g \x03(\t\x12\x12\n\nrequest_id\x18\x04 \x01(\t\x1a\\\n\x1e\x43redentialExpirationTimesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12)\n\x05value\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.Timestamp:\x02\x38\x01J\x04\x08\x02\x10\x03R\x18\x63redential_expires_at_ms\"\x94\x01\n\x15\x44\x65leteProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x04 \x01(\x08\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x9b\x01\n\x10ProviderResponse\x12\x32\n\x08provider\x18\x01 \x01(\x0b\x32 .openshell.datamodel.v1.Provider\x12>\n\x0ftarget_receipts\x18\x02 \x03(\x0b\x32%.openshell.v1.ProviderMutationReceipt\x12\x13\n\x0bmutation_id\x18\x03 \x01(\t\"e\n\x15ListProvidersResponse\x12\x33\n\tproviders\x18\x01 \x03(\x0b\x32 .openshell.datamodel.v1.Provider\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x88\x01\n\x1bListProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\"k\n\x19GetProviderProfileRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\n\n\x02id\x18\x01 \x01(\t\"[\n\x19ProviderProfileImportItem\x12.\n\x07profile\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x0e\n\x06source\x18\x02 \x01(\t\"q\n\x19ProviderProfileDiagnostic\x12\x0e\n\x06source\x18\x01 \x01(\t\x12\x12\n\nprofile_id\x18\x02 \x01(\t\x12\r\n\x05\x66ield\x18\x03 \x01(\t\x12\x0f\n\x07message\x18\x04 \x01(\t\x12\x10\n\x08severity\x18\x05 \x01(\t\"z\n,ProviderCredentialTokenGrantAudienceOverride\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\x12\x0c\n\x04path\x18\x03 \x01(\t\x12\x10\n\x08\x61udience\x18\x04 \x01(\t\x12\x0e\n\x06scopes\x18\x05 \x03(\t\"j\n(ProviderCredentialTokenGrantSubjectToken\x12\x0e\n\x06source\x18\x01 \x01(\t\x12\x12\n\ncredential\x18\x02 \x01(\t\x12\x1a\n\x12subject_token_type\x18\x03 \x01(\t\"\xe2\x03\n\x1cProviderCredentialTokenGrant\x12\x16\n\x0etoken_endpoint\x18\x01 \x01(\t\x12\x10\n\x08\x61udience\x18\x02 \x01(\t\x12\x19\n\x11jwt_svid_audience\x18\x06 \x01(\t\x12\x0e\n\x06scopes\x18\x03 \x03(\t\x12,\n\tcache_ttl\x18h \x01(\x0b\x32\x19.google.protobuf.Duration\x12V\n\x12\x61udience_overrides\x18\x05 \x03(\x0b\x32:.openshell.v1.ProviderCredentialTokenGrantAudienceOverride\x12\x1d\n\x15\x63lient_assertion_type\x18\x07 \x01(\t\x12\x42\n\ngrant_type\x18\x08 \x01(\x0e\x32..openshell.v1.ProviderCredentialTokenGrantType\x12M\n\rsubject_token\x18\t \x01(\x0b\x32\x36.openshell.v1.ProviderCredentialTokenGrantSubjectToken\x12\x1c\n\x14requested_token_type\x18\n \x01(\tJ\x04\x08\x04\x10\x05R\x11\x63\x61\x63he_ttl_seconds\"\xb2\x02\n\x19ProviderProfileCredential\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x10\n\x08\x65nv_vars\x18\x03 \x03(\t\x12\x10\n\x08required\x18\x04 \x01(\x08\x12\x12\n\nauth_style\x18\x05 \x01(\t\x12\x13\n\x0bheader_name\x18\x06 \x01(\t\x12\x13\n\x0bquery_param\x18\x07 \x01(\t\x12\x38\n\x07refresh\x18\x08 \x01(\x0b\x32\'.openshell.v1.ProviderCredentialRefresh\x12\x15\n\rpath_template\x18\t \x01(\t\x12?\n\x0btoken_grant\x18\n \x01(\x0b\x32*.openshell.v1.ProviderCredentialTokenGrant\"h\n!ProviderCredentialRefreshMaterial\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x10\n\x08required\x18\x03 \x01(\x08\x12\x0e\n\x06secret\x18\x04 \x01(\x08\"E\n\x1fProviderCredentialRefreshOutput\x12\x0e\n\x06output\x18\x01 \x01(\t\x12\x12\n\ncredential\x18\x02 \x01(\t\"\xad\x03\n\x19ProviderCredentialRefresh\x12\x41\n\x08strategy\x18\x01 \x01(\x0e\x32/.openshell.v1.ProviderCredentialRefreshStrategy\x12\x11\n\ttoken_url\x18\x02 \x01(\t\x12\x0e\n\x06scopes\x18\x03 \x03(\t\x12\x31\n\x0erefresh_before\x18h \x01(\x0b\x32\x19.google.protobuf.Duration\x12/\n\x0cmax_lifetime\x18i \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x41\n\x08material\x18\x06 \x03(\x0b\x32/.openshell.v1.ProviderCredentialRefreshMaterial\x12I\n\x12\x61\x64\x64itional_outputs\x18\x07 \x03(\x0b\x32-.openshell.v1.ProviderCredentialRefreshOutputJ\x04\x08\x04\x10\x05J\x04\x08\x05\x10\x06R\x16refresh_before_secondsR\x14max_lifetime_seconds\"\x86\x05\n\x1fProviderCredentialRefreshStatus\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x13\n\x0bprovider_id\x18\x02 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x03 \x01(\t\x12\x41\n\x08strategy\x18\x04 \x01(\x0e\x32/.openshell.v1.ProviderCredentialRefreshStrategy\x12\x0e\n\x06status\x18\x05 \x01(\t\x12\x33\n\x0f\x65xpiration_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x35\n\x11next_refresh_time\x18k \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x35\n\x11last_refresh_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nlast_error\x18\t \x01(\t\x12N\n\x0frecovery_action\x18\n \x01(\x0e\x32\x35.openshell.v1.ProviderCredentialRefreshRecoveryAction\x12\x14\n\x0c\x66\x61ilure_code\x18\x0b \x01(\t\x12\x1e\n\x16provider_error_subtype\x18\x0c \x01(\t\x12\x33\n\x0flast_error_time\x18q \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x06\x10\x07J\x04\x08\x07\x10\x08J\x04\x08\x08\x10\tJ\x04\x08\r\x10\x0eR\rexpires_at_msR\x12next_refresh_at_msR\x12last_refresh_at_msR\x10last_error_at_ms\"/\n\x18ProviderProfileDiscovery\x12\x13\n\x0b\x63redentials\x18\x01 \x03(\t\"\x8f\x01\n\x1fGetProviderRefreshStatusRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\"f\n GetProviderRefreshStatusResponse\x12\x42\n\x0b\x63redentials\x18\x01 \x03(\x0b\x32-.openshell.v1.ProviderCredentialRefreshStatus\"\xd4\x03\n\x1f\x43onfigureProviderRefreshRequest\x12\x42\n\x0fworkspace_scope\x18\x07 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\x12\x41\n\x08strategy\x18\x03 \x01(\x0e\x32/.openshell.v1.ProviderCredentialRefreshStrategy\x12S\n\x08material\x18\x04 \x03(\x0b\x32;.openshell.v1.ConfigureProviderRefreshRequest.MaterialEntryB\x04\x88\xb5\x18\x01\x12\x1c\n\x14secret_material_keys\x18\x05 \x03(\t\x12\x33\n\x0f\x65xpiration_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nrequest_id\x18\x08 \x01(\t\x1a/\n\rMaterialEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x06\x10\x07R\rexpires_at_ms\"a\n ConfigureProviderRefreshResponse\x12=\n\x06status\x18\x01 \x01(\x0b\x32-.openshell.v1.ProviderCredentialRefreshStatus\"\xa3\x01\n\x1fRotateProviderCredentialRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"a\n RotateProviderCredentialResponse\x12=\n\x06status\x18\x01 \x01(\x0b\x32-.openshell.v1.ProviderCredentialRefreshStatus\"\xb7\x01\n\x1c\x44\x65leteProviderRefreshRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\x12\x15\n\rallow_missing\x18\x05 \x01(\x08\x12\x12\n\nrequest_id\x18\x06 \x01(\t\"^\n\x1d\x44\x65leteProviderRefreshResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\xb8\x04\n\x0fProviderProfile\x12\n\n\x02id\x18\x01 \x01(\t\x12\x14\n\x0c\x64isplay_name\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12\x37\n\x08\x63\x61tegory\x18\x04 \x01(\x0e\x32%.openshell.v1.ProviderProfileCategory\x12<\n\x0b\x63redentials\x18\x05 \x03(\x0b\x32\'.openshell.v1.ProviderProfileCredential\x12\x38\n\tendpoints\x18\x06 \x03(\x0b\x32%.openshell.sandbox.v1.NetworkEndpoint\x12\x35\n\x08\x62inaries\x18\x07 \x03(\x0b\x32#.openshell.sandbox.v1.NetworkBinary\x12\x19\n\x11inference_capable\x18\x08 \x01(\x08\x12\x39\n\tdiscovery\x18\t \x01(\x0b\x32&.openshell.v1.ProviderProfileDiscovery\x12\x18\n\x10resource_version\x18\n \x01(\x04\x12\x43\n\x0b\x61nnotations\x18\x0b \x03(\x0b\x32..openshell.v1.ProviderProfile.AnnotationsEntry\x12\x0e\n\x06source\x18\x0c \x01(\t\x12\r\n\x05scope\x18\r \x01(\t\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"I\n\x17ProviderProfileResponse\x12.\n\x07profile\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.ProviderProfile\"h\n\x1cListProviderProfilesResponse\x12/\n\x08profiles\x18\x01 \x03(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\xb2\x01\n\x1dImportProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x39\n\x08profiles\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileImportItem\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"\xa1\x01\n\x1eImportProviderProfilesResponse\x12<\n\x0b\x64iagnostics\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileDiagnostic\x12/\n\x08profiles\x18\x02 \x03(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x10\n\x08imported\x18\x03 \x01(\x08\"\xe0\x01\n\x1dUpdateProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x38\n\x07profile\x18\x01 \x01(\x0b\x32\'.openshell.v1.ProviderProfileImportItem\x12!\n\x19\x65xpected_resource_version\x18\x02 \x01(\x04\x12\n\n\x02id\x18\x03 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x9f\x01\n\x1eUpdateProviderProfilesResponse\x12<\n\x0b\x64iagnostics\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileDiagnostic\x12.\n\x07profile\x18\x02 \x01(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x0f\n\x07updated\x18\x03 \x01(\x08\"\x9c\x01\n\x1bLintProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x39\n\x08profiles\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileImportItem\"k\n\x1cLintProviderProfilesResponse\x12<\n\x0b\x64iagnostics\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileDiagnostic\x12\r\n\x05valid\x18\x02 \x01(\x08\"W\n\x16\x44\x65leteProviderResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\x99\x01\n\x1c\x44\x65leteProviderProfileRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\n\n\x02id\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"^\n\x1d\x44\x65leteProviderProfileResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"g\n$GetSandboxProviderEnvironmentRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12+\n#supports_static_credential_bindings\x18\x02 \x01(\x08\"K\n\x1fStaticCredentialEndpointBinding\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\x12\x0c\n\x04path\x18\x03 \x01(\t\"\x9c\x01\n\x17StaticCredentialBinding\x12@\n\tendpoints\x18\x01 \x03(\x0b\x32-.openshell.v1.StaticCredentialEndpointBinding\x12\x1b\n\x13\x63redential_identity\x18\x02 \x01(\t\x12\"\n\x1aworkload_credential_handle\x18\x03 \x01(\t\"\x9d\x08\n%GetSandboxProviderEnvironmentResponse\x12_\n\x0b\x65nvironment\x18\x01 \x03(\x0b\x32\x44.openshell.v1.GetSandboxProviderEnvironmentResponse.EnvironmentEntryB\x04\x88\xb5\x18\x01\x12\x1d\n\x15provider_env_revision\x18\x02 \x01(\x04\x12w\n\x1b\x63redential_expiration_times\x18g \x03(\x0b\x32R.openshell.v1.GetSandboxProviderEnvironmentResponse.CredentialExpirationTimesEntry\x12h\n\x13\x64ynamic_credentials\x18\x04 \x03(\x0b\x32K.openshell.v1.GetSandboxProviderEnvironmentResponse.DynamicCredentialsEntry\x12u\n\x1astatic_credential_bindings\x18\x05 \x03(\x0b\x32Q.openshell.v1.GetSandboxProviderEnvironmentResponse.StaticCredentialBindingsEntry\x12#\n\x1bnon_secret_environment_keys\x18\x06 \x03(\t\x12!\n\x19provider_attachment_epoch\x18\x07 \x01(\t\x12\x13\n\x0bpolicy_hash\x18\x08 \x01(\t\x12?\n\x10readiness_reason\x18\t \x01(\x0e\x32%.openshell.v1.ProviderReadinessReason\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\\\n\x1e\x43redentialExpirationTimesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12)\n\x05value\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.Timestamp:\x02\x38\x01\x1a\x62\n\x17\x44ynamicCredentialsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x36\n\x05value\x18\x02 \x01(\x0b\x32\'.openshell.v1.ProviderProfileCredential:\x02\x38\x01\x1a\x66\n\x1dStaticCredentialBindingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x34\n\x05value\x18\x02 \x01(\x0b\x32%.openshell.v1.StaticCredentialBinding:\x02\x38\x01J\x04\x08\x03\x10\x04R\x18\x63redential_expires_at_ms\"\x86\x01\n#ExchangeProviderSubjectTokenRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x03 \x01(\t\x12!\n\x13supervisor_jwt_svid\x18\x04 \x01(\tB\x04\x88\xb5\x18\x01\"\x9a\x01\n$ExchangeProviderSubjectTokenResponse\x12\x1a\n\x0c\x61\x63\x63\x65ss_token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x30\n\rexpires_after\x18\x66 \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x12\n\ntoken_type\x18\x03 \x01(\tJ\x04\x08\x02\x10\x03R\nexpires_in\"\x89\x04\n\x13UpdateConfigRequest\x12\x42\n\x0fworkspace_scope\x18\n \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x33\n\x06policy\x18\x02 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12\x13\n\x0bsetting_key\x18\x03 \x01(\t\x12\x39\n\rsetting_value\x18\x04 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue\x12\x16\n\x0e\x64\x65lete_setting\x18\x05 \x01(\x08\x12\x0e\n\x06global\x18\x06 \x01(\x08\x12<\n\x10merge_operations\x18\x07 \x03(\x0b\x32\".openshell.v1.PolicyMergeOperation\x12!\n\x19\x65xpected_resource_version\x18\x08 \x01(\x04\x12G\n\x0b\x61nnotations\x18\t \x03(\x0b\x32\x32.openshell.v1.UpdateConfigRequest.AnnotationsEntry\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x0b \x01(\t\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\xf7\x02\n\x14PolicyMergeOperation\x12\x30\n\x08\x61\x64\x64_rule\x18\x01 \x01(\x0b\x32\x1c.openshell.v1.AddNetworkRuleH\x00\x12>\n\x0fremove_endpoint\x18\x02 \x01(\x0b\x32#.openshell.v1.RemoveNetworkEndpointH\x00\x12\x36\n\x0bremove_rule\x18\x03 \x01(\x0b\x32\x1f.openshell.v1.RemoveNetworkRuleH\x00\x12\x34\n\x0e\x61\x64\x64_deny_rules\x18\x04 \x01(\x0b\x32\x1a.openshell.v1.AddDenyRulesH\x00\x12\x36\n\x0f\x61\x64\x64_allow_rules\x18\x05 \x01(\x0b\x32\x1b.openshell.v1.AddAllowRulesH\x00\x12:\n\rremove_binary\x18\x06 \x01(\x0b\x32!.openshell.v1.RemoveNetworkBinaryH\x00\x42\x0b\n\toperation\"Z\n\x0e\x41\x64\x64NetworkRule\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x35\n\x04rule\x18\x02 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule\"F\n\x15RemoveNetworkEndpoint\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\x0c\n\x04port\x18\x03 \x01(\r\"&\n\x11RemoveNetworkRule\x12\x11\n\trule_name\x18\x01 \x01(\t\"\xa5\x01\n\x0cL7RuleTarget\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\r\n\x05ports\x18\x03 \x03(\r\x12\x11\n\x04path\x18\x04 \x01(\tH\x00\x88\x01\x01\x12\x35\n\x08\x62inaries\x18\x05 \x03(\x0b\x32#.openshell.sandbox.v1.NetworkBinary\x12\x12\n\nany_binary\x18\x06 \x01(\x08\x42\x07\n\x05_path\"\x88\x01\n\x0c\x41\x64\x64\x44\x65nyRules\x12\x34\n\ndeny_rules\x18\x03 \x03(\x0b\x32 .openshell.sandbox.v1.L7DenyRule\x12*\n\x06target\x18\x04 \x01(\x0b\x32\x1a.openshell.v1.L7RuleTargetJ\x04\x08\x01\x10\x02J\x04\x08\x02\x10\x03R\x04hostR\x04port\"\x80\x01\n\rAddAllowRules\x12+\n\x05rules\x18\x03 \x03(\x0b\x32\x1c.openshell.sandbox.v1.L7Rule\x12*\n\x06target\x18\x04 \x01(\x0b\x32\x1a.openshell.v1.L7RuleTargetJ\x04\x08\x01\x10\x02J\x04\x08\x02\x10\x03R\x04hostR\x04port\"=\n\x13RemoveNetworkBinary\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x13\n\x0b\x62inary_path\x18\x02 \x01(\t\"\xe6\x01\n\x14UpdateConfigResponse\x12\x0f\n\x07version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12\x19\n\x11settings_revision\x18\x03 \x01(\x04\x12\x0f\n\x07\x64\x65leted\x18\x04 \x01(\x08\x12H\n\x0b\x61nnotations\x18\x05 \x03(\x0b\x32\x33.openshell.v1.UpdateConfigResponse.AnnotationsEntry\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\x95\x01\n\x1dGetSandboxPolicyStatusRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07version\x18\x02 \x01(\r\x12\x0e\n\x06global\x18\x03 \x01(\x08\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"o\n\x1eGetSandboxPolicyStatusResponse\x12\x35\n\x08revision\x18\x01 \x01(\x0b\x32#.openshell.v1.SandboxPolicyRevision\x12\x16\n\x0e\x61\x63tive_version\x18\x02 \x01(\r\"\xa8\x01\n\x1aListSandboxPoliciesRequest\x12\x42\n\x0fworkspace_scope\x18\x05 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\x12\x0e\n\x06global\x18\x04 \x01(\x08\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"n\n\x1bListSandboxPoliciesResponse\x12\x36\n\trevisions\x18\x01 \x03(\x0b\x32#.openshell.v1.SandboxPolicyRevision\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x80\x01\n\x19ReportPolicyStatusRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x0f\n\x07version\x18\x02 \x01(\r\x12*\n\x06status\x18\x03 \x01(\x0e\x32\x1a.openshell.v1.PolicyStatus\x12\x12\n\nload_error\x18\x04 \x01(\t\"\x1c\n\x1aReportPolicyStatusResponse\"\xe2\x01\n\x1dSandboxConfigurationAdmission\x12\x13\n\x0binstance_id\x18\x01 \x01(\t\x12\x38\n\x05state\x18\x02 \x01(\x0e\x32).openshell.v1.ConfigurationAdmissionState\x12\x16\n\x0epolicy_version\x18\x03 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x04 \x01(\t\x12\x17\n\x0f\x63onfig_revision\x18\x05 \x01(\x04\x12\x1d\n\x15provider_env_revision\x18\x06 \x01(\x04\x12\r\n\x05\x65rror\x18\x07 \x01(\t\"\x95\x01\n!ReportSandboxConfigurationRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12>\n\tadmission\x18\x02 \x01(\x0b\x32+.openshell.v1.SandboxConfigurationAdmission\x12\x1c\n\x14\x65xpected_instance_id\x18\x03 \x01(\t\"$\n\"ReportSandboxConfigurationResponse\"\xba\x03\n\x15SandboxPolicyRevision\x12\x0f\n\x07version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12*\n\x06status\x18\x03 \x01(\x0e\x32\x1a.openshell.v1.PolicyStatus\x12\x12\n\nload_error\x18\x04 \x01(\t\x12\x30\n\x0c\x63reated_time\x18i \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0bloaded_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x33\n\x06policy\x18\x07 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12G\n\nprovenance\x18\x08 \x03(\x0b\x32\x33.openshell.v1.SandboxPolicyRevision.ProvenanceEntry\x1a\x31\n\x0fProvenanceEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x05\x10\x06J\x04\x08\x06\x10\x07R\rcreated_at_msR\x0cloaded_at_ms\"\xdf\x01\n\x15GetSandboxLogsRequest\x12\x42\n\x0fworkspace_scope\x18\x06 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\r\n\x05lines\x18\x02 \x01(\r\x12.\n\nsince_time\x18g \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0f\n\x07sources\x18\x04 \x03(\t\x12\x11\n\tmin_level\x18\x05 \x01(\tJ\x04\x08\x03\x10\x04R\x08since_ms\"X\n\x16PushSandboxLogsRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12*\n\x04logs\x18\x02 \x03(\x0b\x32\x1c.openshell.v1.SandboxLogLine\"\x19\n\x17PushSandboxLogsResponse\"Z\n\x16GetSandboxLogsResponse\x12*\n\x04logs\x18\x01 \x03(\x0b\x32\x1c.openshell.v1.SandboxLogLine\x12\x14\n\x0c\x62uffer_total\x18\x02 \x01(\r\"\xf3\x01\n\x11SupervisorMessage\x12.\n\x05hello\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.SupervisorHelloH\x00\x12\x36\n\theartbeat\x18\x02 \x01(\x0b\x32!.openshell.v1.SupervisorHeartbeatH\x00\x12:\n\x11relay_open_result\x18\x03 \x01(\x0b\x32\x1d.openshell.v1.RelayOpenResultH\x00\x12/\n\x0brelay_close\x18\x04 \x01(\x0b\x32\x18.openshell.v1.RelayCloseH\x00\x42\t\n\x07payload\"\xa6\x02\n\x0eGatewayMessage\x12\x39\n\x10session_accepted\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.SessionAcceptedH\x00\x12\x39\n\x10session_rejected\x18\x02 \x01(\x0b\x32\x1d.openshell.v1.SessionRejectedH\x00\x12\x33\n\theartbeat\x18\x03 \x01(\x0b\x32\x1e.openshell.v1.GatewayHeartbeatH\x00\x12-\n\nrelay_open\x18\x04 \x01(\x0b\x32\x17.openshell.v1.RelayOpenH\x00\x12/\n\x0brelay_close\x18\x05 \x01(\x0b\x32\x18.openshell.v1.RelayCloseH\x00\x42\t\n\x07payload\"y\n\x0fSupervisorHello\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0binstance_id\x18\x02 \x01(\t\x12\x18\n\x10\x63onnection_epoch\x18\x03 \x01(\x04\x12#\n\x1bsupports_provider_readiness\x18\x04 \x01(\x08\"{\n\x0fSessionAccepted\x12\x12\n\nsession_id\x18\x01 \x01(\t\x12\x35\n\x12heartbeat_interval\x18\x66 \x01(\x0b\x32\x19.google.protobuf.DurationJ\x04\x08\x02\x10\x03R\x17heartbeat_interval_secs\"!\n\x0fSessionRejected\x12\x0e\n\x06reason\x18\x01 \x01(\t\"\x15\n\x13SupervisorHeartbeat\"\x12\n\x10GatewayHeartbeat\"Z\n\x1cReportMainProcessExitRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0binstance_id\x18\x02 \x01(\t\x12\x11\n\texit_code\x18\x03 \x01(\x05\"\x1f\n\x1dReportMainProcessExitResponse\"I\n\x1e\x46inalizeMainProcessExitRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0binstance_id\x18\x02 \x01(\t\"!\n\x1f\x46inalizeMainProcessExitResponse\"\x97\x01\n\tRelayOpen\x12\x12\n\nchannel_id\x18\x01 \x01(\t\x12+\n\x03ssh\x18\x02 \x01(\x0b\x32\x1c.openshell.v1.SshRelayTargetH\x00\x12+\n\x03tcp\x18\x03 \x01(\x0b\x32\x1c.openshell.v1.TcpRelayTargetH\x00\x12\x12\n\nservice_id\x18\x05 \x01(\tB\x08\n\x06target\"\x10\n\x0eSshRelayTarget\",\n\x0eTcpRelayTarget\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\"\x1f\n\tRelayInit\x12\x12\n\nchannel_id\x18\x01 \x01(\t\"P\n\nRelayFrame\x12\'\n\x04init\x18\x01 \x01(\x0b\x32\x17.openshell.v1.RelayInitH\x00\x12\x0e\n\x04\x64\x61ta\x18\x02 \x01(\x0cH\x00\x42\t\n\x07payload\"n\n\rPeerRelayInit\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12+\n\nrelay_open\x18\x02 \x01(\x0b\x32\x17.openshell.v1.RelayOpen\x12\x1c\n\x14requester_replica_id\x18\x03 \x01(\t\"X\n\x0ePeerRelayFrame\x12+\n\x04init\x18\x01 \x01(\x0b\x32\x1b.openshell.v1.PeerRelayInitH\x00\x12\x0e\n\x04\x64\x61ta\x18\x02 \x01(\x0cH\x00\x42\t\n\x07payload\"E\n\x0fRelayOpenResult\x12\x12\n\nchannel_id\x18\x01 \x01(\t\x12\x0f\n\x07success\x18\x02 \x01(\x08\x12\r\n\x05\x65rror\x18\x03 \x01(\t\"0\n\nRelayClose\x12\x12\n\nchannel_id\x18\x01 \x01(\t\x12\x0e\n\x06reason\x18\x02 \x01(\t\"P\n\x0fL7RequestSample\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x10\n\x08\x64\x65\x63ision\x18\x03 \x01(\t\x12\r\n\x05\x63ount\x18\x04 \x01(\r\"\xfa\x03\n\rDenialSummary\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\x0c\n\x04port\x18\x03 \x01(\r\x12\x0e\n\x06\x62inary\x18\x04 \x01(\t\x12\x11\n\tancestors\x18\x05 \x03(\t\x12\x13\n\x0b\x64\x65ny_reason\x18\x06 \x01(\t\x12\x33\n\x0f\x66irst_seen_time\x18k \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0elast_seen_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\r\n\x05\x63ount\x18\t \x01(\r\x12\x18\n\x10suppressed_count\x18\n \x01(\r\x12\x13\n\x0btotal_count\x18\x0b \x01(\r\x12\x17\n\x0fsample_cmdlines\x18\x0c \x03(\t\x12\x15\n\rbinary_sha256\x18\r \x01(\t\x12\x12\n\npersistent\x18\x0e \x01(\x08\x12\x14\n\x0c\x64\x65nial_stage\x18\x0f \x01(\t\x12\x39\n\x12l7_request_samples\x18\x10 \x03(\x0b\x32\x1d.openshell.v1.L7RequestSample\x12\x1c\n\x14l7_inspection_active\x18\x11 \x01(\x08J\x04\x08\x07\x10\x08J\x04\x08\x08\x10\tR\rfirst_seen_msR\x0clast_seen_ms\"<\n\x10\x44\x65nialGroupCount\x12\x12\n\ndeny_group\x18\x01 \x01(\t\x12\x14\n\x0c\x64\x65nied_count\x18\x02 \x01(\r\"\x8f\x01\n\x16NetworkActivitySummary\x12\x1e\n\x16network_activity_count\x18\x01 \x01(\r\x12\x1b\n\x13\x64\x65nied_action_count\x18\x02 \x01(\r\x12\x38\n\x10\x64\x65nials_by_group\x18\x03 \x03(\x0b\x32\x1e.openshell.v1.DenialGroupCount\"\x8c\x07\n\x0bPolicyChunk\x12\n\n\x02id\x18\x01 \x01(\t\x12\x0e\n\x06status\x18\x02 \x01(\t\x12\x11\n\trule_name\x18\x03 \x01(\t\x12>\n\rproposed_rule\x18\x04 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule\x12\x11\n\trationale\x18\x05 \x01(\t\x12\x16\n\x0esecurity_notes\x18\x06 \x01(\t\x12\x12\n\nconfidence\x18\x07 \x01(\x02\x12\x1a\n\x12\x64\x65nial_summary_ids\x18\x08 \x03(\t\x12\x30\n\x0c\x63reated_time\x18m \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x30\n\x0c\x64\x65\x63ided_time\x18n \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\r\n\x05stage\x18\x0b \x01(\t\x12\x1b\n\x13supersedes_chunk_id\x18\x0c \x01(\t\x12\x11\n\thit_count\x18\r \x01(\x05\x12\x33\n\x0f\x66irst_seen_time\x18r \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0elast_seen_time\x18s \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06\x62inary\x18\x10 \x01(\t\x12\x19\n\x11validation_result\x18\x11 \x01(\t\x12\x18\n\x10rejection_reason\x18\x12 \x01(\t\x12\x19\n\x11\x61pplication_error\x18\x13 \x01(\t\x12\x14\n\x0creview_token\x18\x14 \x01(\t\x12%\n\x1d\x63urrent_effective_policy_hash\x18\x15 \x01(\t\x12\'\n\x1f\x63\x61ndidate_effective_policy_hash\x18\x16 \x01(\t\x12\x45\n\x18\x63urrent_effective_policy\x18\x17 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12G\n\x1a\x63\x61ndidate_effective_policy\x18\x18 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicyJ\x04\x08\t\x10\nJ\x04\x08\n\x10\x0bJ\x04\x08\x0e\x10\x0fJ\x04\x08\x0f\x10\x10R\rcreated_at_msR\rdecided_at_msR\rfirst_seen_msR\x0clast_seen_ms\"f\n\x11\x44raftPolicyUpdate\x12\x15\n\rdraft_version\x18\x01 \x01(\x04\x12\x12\n\nnew_chunks\x18\x02 \x01(\r\x12\x15\n\rtotal_pending\x18\x03 \x01(\r\x12\x0f\n\x07summary\x18\x04 \x01(\t\"\xb4\x02\n\x1bSubmitPolicyAnalysisRequest\x12\x42\n\x0fworkspace_scope\x18\x06 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12.\n\tsummaries\x18\x01 \x03(\x0b\x32\x1b.openshell.v1.DenialSummary\x12\x32\n\x0fproposed_chunks\x18\x02 \x03(\x0b\x32\x19.openshell.v1.PolicyChunk\x12\x15\n\ranalysis_mode\x18\x03 \x01(\t\x12\x0c\n\x04name\x18\x04 \x01(\t\x12H\n\x1anetwork_activity_summaries\x18\x05 \x03(\x0b\x32$.openshell.v1.NetworkActivitySummary\"\x87\x01\n\x1cSubmitPolicyAnalysisResponse\x12\x17\n\x0f\x61\x63\x63\x65pted_chunks\x18\x01 \x01(\r\x12\x17\n\x0frejected_chunks\x18\x02 \x01(\r\x12\x19\n\x11rejection_reasons\x18\x03 \x03(\t\x12\x1a\n\x12\x61\x63\x63\x65pted_chunk_ids\x18\x04 \x03(\t\"\x83\x01\n\x15GetDraftPolicyRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x15\n\rstatus_filter\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\xc6\x01\n\x16GetDraftPolicyResponse\x12)\n\x06\x63hunks\x18\x01 \x03(\x0b\x32\x19.openshell.v1.PolicyChunk\x12\x17\n\x0frolling_summary\x18\x02 \x01(\t\x12\x15\n\rdraft_version\x18\x03 \x01(\x04\x12\x36\n\x12last_analyzed_time\x18h \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x04\x10\x05R\x13last_analyzed_at_ms\"\xab\x01\n\x18\x41pproveDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12\x14\n\x0creview_token\x18\x04 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"H\n\x19\x41pproveDraftChunkResponse\x12\x16\n\x0epolicy_version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\"\xa4\x01\n\x17RejectDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12\x0e\n\x06reason\x18\x03 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x1a\n\x18RejectDraftChunkResponse\"<\n\x12\x44raftChunkApproval\x12\x10\n\x08\x63hunk_id\x18\x01 \x01(\t\x12\x14\n\x0creview_token\x18\x02 \x01(\t\"\xde\x01\n\x1c\x41pproveAllDraftChunksRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12 \n\x18include_security_flagged\x18\x02 \x01(\x08\x12\x33\n\tapprovals\x18\x03 \x03(\x0b\x32 .openshell.v1.DraftChunkApproval\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"}\n\x1d\x41pproveAllDraftChunksResponse\x12\x16\n\x0epolicy_version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12\x17\n\x0f\x63hunks_approved\x18\x03 \x01(\r\x12\x16\n\x0e\x63hunks_skipped\x18\x04 \x01(\r\"\xd2\x01\n\x15\x45\x64itDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12>\n\rproposed_rule\x18\x03 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x18\n\x16\x45\x64itDraftChunkResponse\"\x92\x01\n\x15UndoDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"E\n\x16UndoDraftChunkResponse\x12\x16\n\x0epolicy_version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\"\x82\x01\n\x17\x43learDraftChunksRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"2\n\x18\x43learDraftChunksResponse\x12\x16\n\x0e\x63hunks_cleared\x18\x01 \x01(\r\"m\n\x16GetDraftHistoryRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\x92\x01\n\x11\x44raftHistoryEntry\x12.\n\nevent_time\x18\x65 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nevent_type\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12\x10\n\x08\x63hunk_id\x18\x04 \x01(\tJ\x04\x08\x01\x10\x02R\x0ctimestamp_ms\"K\n\x17GetDraftHistoryResponse\x12\x30\n\x07\x65ntries\x18\x01 \x03(\x0b\x32\x1f.openshell.v1.DraftHistoryEntry\"\xab\x01\n\x16\x43reateWorkspaceRequest\x12\x0c\n\x04name\x18\x01 \x01(\t\x12@\n\x06labels\x18\x02 \x03(\x0b\x32\x30.openshell.v1.CreateWorkspaceRequest.LabelsEntry\x12\x12\n\nrequest_id\x18\x03 \x01(\t\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"O\n\x17\x43reateWorkspaceResponse\x12\x34\n\tworkspace\x18\x01 \x01(\x0b\x32!.openshell.datamodel.v1.Workspace\"#\n\x13GetWorkspaceRequest\x12\x0c\n\x04name\x18\x01 \x01(\t\"L\n\x14GetWorkspaceResponse\x12\x34\n\tworkspace\x18\x01 \x01(\x0b\x32!.openshell.datamodel.v1.Workspace\"V\n\x15ListWorkspacesRequest\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\x12\x16\n\x0elabel_selector\x18\x03 \x01(\t\"h\n\x16ListWorkspacesResponse\x12\x35\n\nworkspaces\x18\x01 \x03(\x0b\x32!.openshell.datamodel.v1.Workspace\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"Q\n\x16\x44\x65leteWorkspaceRequest\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x02 \x01(\x08\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"X\n\x17\x44\x65leteWorkspaceResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\x8d\x01\n\x0fWorkspaceMember\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x19\n\x11principal_subject\x18\x02 \x01(\t\x12)\n\x04role\x18\x03 \x01(\x0e\x32\x1b.openshell.v1.WorkspaceRole\"\xb9\x01\n\x19\x41\x64\x64WorkspaceMemberRequest\x12\x42\n\x0fworkspace_scope\x18\x01 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x19\n\x11principal_subject\x18\x02 \x01(\t\x12)\n\x04role\x18\x03 \x01(\x0e\x32\x1b.openshell.v1.WorkspaceRole\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"K\n\x1a\x41\x64\x64WorkspaceMemberResponse\x12-\n\x06member\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.WorkspaceMember\"\xa8\x01\n\x1cRemoveWorkspaceMemberRequest\x12\x42\n\x0fworkspace_scope\x18\x01 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x19\n\x11principal_subject\x18\x02 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"^\n\x1dRemoveWorkspaceMemberResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07removed\"\x88\x01\n\x1bListWorkspaceMembersRequest\x12\x42\n\x0fworkspace_scope\x18\x01 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\"g\n\x1cListWorkspaceMembersResponse\x12.\n\x07members\x18\x01 \x03(\x0b\x32\x1d.openshell.v1.WorkspaceMember\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x91\x01\n\x1a\x45xtensionServiceCredential\x12\x14\n\x0cservice_name\x18\x01 \x01(\t\x12\x13\n\x05token\x18\x02 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18g \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x03\x10\x04R\rexpires_at_ms\"X\n\x13\x45ndpointObservation\x12\x13\n\x0b\x65ndpoint_id\x18\x01 \x01(\t\x12,\n\x06result\x18\x02 \x01(\x0e\x32\x1c.openshell.v1.EndpointResult\"\xf5\x01\n\x1bReportEndpointStatusRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12\x1d\n\x15provider_env_revision\x18\x03 \x01(\x04\x12\x37\n\x0cobservations\x18\x04 \x03(\x0b\x32!.openshell.v1.EndpointObservation\x12\x1d\n\x15observed_endpoint_ids\x18\x05 \x03(\t\x12\x1d\n\x15supervisor_session_id\x18\x06 \x01(\t\x12\x17\n\x0freport_sequence\x18\x07 \x01(\x04\"\x1e\n\x1cReportEndpointStatusResponse\"\xd3\x01\n\x0e\x45ndpointStatus\x12\x13\n\x0b\x65ndpoint_id\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\r\n\x05ports\x18\x03 \x03(\r\x12\x0c\n\x04path\x18\x04 \x01(\t\x12\x31\n\x0blast_result\x18\x05 \x01(\x0e\x32\x1c.openshell.v1.EndpointResult\x12\x36\n\x12last_reported_time\x18j \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x06\x10\x07R\x10last_reported_at\"\x88\x04\n\x13SandboxProvisioning\x12\x12\n\nattempt_id\x18\x01 \x01(\t\x12\x1f\n\x17\x63onfiguration_change_id\x18\x02 \x01(\t\x12=\n\x19\x63onfiguration_change_time\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x38\n\x14\x66irst_rejection_time\x18\x04 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12,\n\x08\x64\x65\x61\x64line\x18\x05 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x30\n\x0ctimeout_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12:\n\x16\x63leanup_completed_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x15\n\rcleanup_error\x18\x08 \x01(\t\x12\x36\n\x12\x63leanup_retry_time\x18\t \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x1c\n\x14\x61ttachment_change_id\x18\n \x01(\t\x12:\n\x16\x61ttachment_change_time\x18\x0b \x01(\x0b\x32\x1a.google.protobuf.Timestamp\">\n\x16SandboxServiceExposure\x12\x0f\n\x07service\x18\x01 \x01(\t\x12\x13\n\x0btarget_port\x18\x02 \x01(\r*\xca\x01\n\rExtensionKind\x12\x1e\n\x1a\x45XTENSION_KIND_UNSPECIFIED\x10\x00\x12!\n\x1d\x45XTENSION_KIND_COMPUTE_DRIVER\x10\x01\x12$\n EXTENSION_KIND_CREDENTIAL_DRIVER\x10\x02\x12&\n\"EXTENSION_KIND_GATEWAY_INTERCEPTOR\x10\x03\x12(\n$EXTENSION_KIND_SUPERVISOR_MIDDLEWARE\x10\x04*\xa6\x02\n\x0cSandboxPhase\x12\x1d\n\x19SANDBOX_PHASE_UNSPECIFIED\x10\x00\x12\x1e\n\x1aSANDBOX_PHASE_PROVISIONING\x10\x01\x12\x17\n\x13SANDBOX_PHASE_READY\x10\x02\x12\x17\n\x13SANDBOX_PHASE_ERROR\x10\x03\x12\x1a\n\x16SANDBOX_PHASE_DELETING\x10\x04\x12\x19\n\x15SANDBOX_PHASE_UNKNOWN\x10\x05\x12\x1a\n\x16SANDBOX_PHASE_STOPPING\x10\x06\x12\x19\n\x15SANDBOX_PHASE_STOPPED\x10\x07\x12\x1a\n\x16SANDBOX_PHASE_STARTING\x10\x08\x12\x1b\n\x17SANDBOX_PHASE_COMPLETED\x10\t*\xcb\x01\n\x14ProviderMutationKind\x12&\n\"PROVIDER_MUTATION_KIND_UNSPECIFIED\x10\x00\x12!\n\x1dPROVIDER_MUTATION_KIND_ATTACH\x10\x01\x12!\n\x1dPROVIDER_MUTATION_KIND_DETACH\x10\x02\x12!\n\x1dPROVIDER_MUTATION_KIND_UPDATE\x10\x03\x12\"\n\x1ePROVIDER_MUTATION_KIND_OBSERVE\x10\x04*\xcf\x02\n\x16ProviderReadinessState\x12(\n$PROVIDER_READINESS_STATE_UNSPECIFIED\x10\x00\x12&\n\"PROVIDER_READINESS_STATE_PERSISTED\x10\x01\x12$\n PROVIDER_READINESS_STATE_PENDING\x10\x02\x12\"\n\x1ePROVIDER_READINESS_STATE_READY\x10\x03\x12%\n!PROVIDER_READINESS_STATE_WITHHELD\x10\x04\x12$\n PROVIDER_READINESS_STATE_REVOKED\x10\x05\x12#\n\x1fPROVIDER_READINESS_STATE_FAILED\x10\x06\x12\'\n#PROVIDER_READINESS_STATE_SUPERSEDED\x10\x07*\xda\x06\n\x17ProviderReadinessReason\x12)\n%PROVIDER_READINESS_REASON_UNSPECIFIED\x10\x00\x12\x34\n0PROVIDER_READINESS_REASON_WAITING_FOR_SUPERVISOR\x10\x01\x12\x35\n1PROVIDER_READINESS_REASON_WAITING_FOR_CREDENTIALS\x10\x02\x12\x30\n,PROVIDER_READINESS_REASON_WAITING_FOR_POLICY\x10\x03\x12\x31\n-PROVIDER_READINESS_REASON_WAITING_FOR_PROCESS\x10\x04\x12\x34\n0PROVIDER_READINESS_REASON_UNSUPPORTED_SUPERVISOR\x10\x05\x12\x32\n.PROVIDER_READINESS_REASON_CREDENTIALS_WITHHELD\x10\x06\x12\x37\n3PROVIDER_READINESS_REASON_CREDENTIAL_INSTALL_FAILED\x10\x07\x12\x36\n2PROVIDER_READINESS_REASON_POLICY_ACTIVATION_FAILED\x10\x08\x12\x34\n0PROVIDER_READINESS_REASON_PROCESS_INSTALL_FAILED\x10\t\x12\x35\n1PROVIDER_READINESS_REASON_SUPERVISOR_DISCONNECTED\x10\n\x12\x36\n2PROVIDER_READINESS_REASON_SUPERVISOR_LEASE_EXPIRED\x10\x0b\x12\x33\n/PROVIDER_READINESS_REASON_DESIRED_STATE_CHANGED\x10\x0c\x12\x30\n,PROVIDER_READINESS_REASON_CREDENTIAL_EXPIRED\x10\r\x12*\n&PROVIDER_READINESS_REASON_LOCAL_POLICY\x10\x0e\x12/\n+PROVIDER_READINESS_REASON_SNAPSHOT_MISMATCH\x10\x0f*\x83\x01\n\x0f\x43onfigComponent\x12 \n\x1c\x43ONFIG_COMPONENT_UNSPECIFIED\x10\x00\x12#\n\x1f\x43ONFIG_COMPONENT_SANDBOX_CONFIG\x10\x01\x12)\n%CONFIG_COMPONENT_PROVIDER_ENVIRONMENT\x10\x02*\x8d\x03\n\x12\x43onfigApplyOutcome\x12$\n CONFIG_APPLY_OUTCOME_UNSPECIFIED\x10\x00\x12 \n\x1c\x43ONFIG_APPLY_OUTCOME_APPLIED\x10\x01\x12*\n&CONFIG_APPLY_OUTCOME_IGNORED_DUPLICATE\x10\x02\x12&\n\"CONFIG_APPLY_OUTCOME_IGNORED_STALE\x10\x03\x12\x30\n,CONFIG_APPLY_OUTCOME_RETAINED_LOCAL_OVERRIDE\x10\x04\x12!\n\x1d\x43ONFIG_APPLY_OUTCOME_DEGRADED\x10\x05\x12\x38\n4CONFIG_APPLY_OUTCOME_FAILED_RETAINED_LAST_KNOWN_GOOD\x10\x06\x12&\n\"CONFIG_APPLY_OUTCOME_FAILED_CLOSED\x10\x07\x12$\n CONFIG_APPLY_OUTCOME_UNSUPPORTED\x10\x08*\xd2\x02\n\x1a\x43onfigUpdateOperationState\x12-\n)CONFIG_UPDATE_OPERATION_STATE_UNSPECIFIED\x10\x00\x12)\n%CONFIG_UPDATE_OPERATION_STATE_PENDING\x10\x01\x12)\n%CONFIG_UPDATE_OPERATION_STATE_APPLIED\x10\x02\x12*\n&CONFIG_UPDATE_OPERATION_STATE_INACTIVE\x10\x03\x12(\n$CONFIG_UPDATE_OPERATION_STATE_FAILED\x10\x04\x12,\n(CONFIG_UPDATE_OPERATION_STATE_SUPERSEDED\x10\x05\x12+\n\'CONFIG_UPDATE_OPERATION_STATE_CANCELLED\x10\x06*\xce\x01\n ProviderCredentialTokenGrantType\x12\x34\n0PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_UNSPECIFIED\x10\x00\x12;\n7PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_CLIENT_CREDENTIALS\x10\x01\x12\x37\n3PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_TOKEN_EXCHANGE\x10\x02*\xc3\x03\n!ProviderCredentialRefreshStrategy\x12\x34\n0PROVIDER_CREDENTIAL_REFRESH_STRATEGY_UNSPECIFIED\x10\x00\x12/\n+PROVIDER_CREDENTIAL_REFRESH_STRATEGY_STATIC\x10\x01\x12\x31\n-PROVIDER_CREDENTIAL_REFRESH_STRATEGY_EXTERNAL\x10\x02\x12=\n9PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_REFRESH_TOKEN\x10\x03\x12\x42\n>PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_CLIENT_CREDENTIALS\x10\x04\x12\x43\n?PROVIDER_CREDENTIAL_REFRESH_STRATEGY_GOOGLE_SERVICE_ACCOUNT_JWT\x10\x05\x12<\n8PROVIDER_CREDENTIAL_REFRESH_STRATEGY_AWS_STS_ASSUME_ROLE\x10\x06*\xdb\x02\n\x17ProviderProfileCategory\x12)\n%PROVIDER_PROFILE_CATEGORY_UNSPECIFIED\x10\x00\x12#\n\x1fPROVIDER_PROFILE_CATEGORY_OTHER\x10\x01\x12\'\n#PROVIDER_PROFILE_CATEGORY_INFERENCE\x10\x02\x12#\n\x1fPROVIDER_PROFILE_CATEGORY_AGENT\x10\x03\x12,\n(PROVIDER_PROFILE_CATEGORY_SOURCE_CONTROL\x10\x04\x12\'\n#PROVIDER_PROFILE_CATEGORY_MESSAGING\x10\x05\x12\"\n\x1ePROVIDER_PROFILE_CATEGORY_DATA\x10\x06\x12\'\n#PROVIDER_PROFILE_CATEGORY_KNOWLEDGE\x10\x07*\xcf\x01\n\x1b\x43onfigurationAdmissionState\x12-\n)CONFIGURATION_ADMISSION_STATE_UNSPECIFIED\x10\x00\x12)\n%CONFIGURATION_ADMISSION_STATE_PENDING\x10\x01\x12*\n&CONFIGURATION_ADMISSION_STATE_ACCEPTED\x10\x02\x12*\n&CONFIGURATION_ADMISSION_STATE_REJECTED\x10\x03*\x9a\x01\n\x0cPolicyStatus\x12\x1d\n\x19POLICY_STATUS_UNSPECIFIED\x10\x00\x12\x19\n\x15POLICY_STATUS_PENDING\x10\x01\x12\x18\n\x14POLICY_STATUS_LOADED\x10\x02\x12\x18\n\x14POLICY_STATUS_FAILED\x10\x03\x12\x1c\n\x18POLICY_STATUS_SUPERSEDED\x10\x04*\x86\x01\n\rServiceStatus\x12\x1e\n\x1aSERVICE_STATUS_UNSPECIFIED\x10\x00\x12\x1a\n\x16SERVICE_STATUS_HEALTHY\x10\x01\x12\x1b\n\x17SERVICE_STATUS_DEGRADED\x10\x02\x12\x1c\n\x18SERVICE_STATUS_UNHEALTHY\x10\x03*b\n\rWorkspaceRole\x12\x1e\n\x1aWORKSPACE_ROLE_UNSPECIFIED\x10\x00\x12\x17\n\x13WORKSPACE_ROLE_USER\x10\x01\x12\x18\n\x14WORKSPACE_ROLE_ADMIN\x10\x02*\xda\x02\n\'ProviderCredentialRefreshRecoveryAction\x12;\n7PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_UNSPECIFIED\x10\x00\x12\x35\n1PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_RETRY\x10\x01\x12;\n7PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_REAUTHORIZE\x10\x02\x12\x41\n=PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_FIX_CONFIGURATION\x10\x03\x12;\n7PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_INVESTIGATE\x10\x04*\x97\x01\n\x0f\x44\x65letionOutcome\x12 \n\x1c\x44\x45LETION_OUTCOME_UNSPECIFIED\x10\x00\x12\x1e\n\x1a\x44\x45LETION_OUTCOME_COMPLETED\x10\x01\x12\x1d\n\x19\x44\x45LETION_OUTCOME_ACCEPTED\x10\x02\x12#\n\x1f\x44\x45LETION_OUTCOME_ALREADY_ABSENT\x10\x03*\xc3\x02\n\x0e\x45ndpointResult\x12\x1f\n\x1b\x45NDPOINT_RESULT_UNSPECIFIED\x10\x00\x12(\n$ENDPOINT_RESULT_NO_OBSERVED_EXCHANGE\x10\x01\x12*\n&ENDPOINT_RESULT_HTTP_RESPONSE_RECEIVED\x10\x02\x12!\n\x1d\x45NDPOINT_RESULT_POLICY_DENIED\x10\x03\x12*\n&ENDPOINT_RESULT_CREDENTIAL_UNAVAILABLE\x10\x04\x12\x1e\n\x1a\x45NDPOINT_RESULT_TLS_FAILED\x10\x05\x12$\n ENDPOINT_RESULT_TRANSPORT_FAILED\x10\x06\x12%\n!ENDPOINT_RESULT_UPSTREAM_REJECTED\x10\x07\x32\xafU\n\tOpenShell\x12Z\n\x06Health\x12\x1b.openshell.v1.HealthRequest\x1a\x1c.openshell.v1.HealthResponse\"\x15\x82\xb5\x18\x11\n\x0funauthenticated\x12i\n\x0eGetCurrentUser\x12#.openshell.v1.GetCurrentUserRequest\x1a$.openshell.v1.GetCurrentUserResponse\"\x0c\x82\xb5\x18\x08\n\x06\x62\x65\x61rer\x12\x86\x01\n\x0eGetGatewayInfo\x12#.openshell.v1.GetGatewayInfoRequest\x1a$.openshell.v1.GetGatewayInfoResponse\")\x82\xb5\x18%\n\x06\x62\x65\x61rer\x1a\x0eplatform_admin\"\x0b\x63onfig:read\x12u\n\rCreateSandbox\x12\".openshell.v1.CreateSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x93\x01\n\x15\x42\x65ginRootfsTarStaging\x12*.openshell.v1.BeginRootfsTarStagingRequest\x1a+.openshell.v1.BeginRootfsTarStagingResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12n\n\nGetSandbox\x12\x1f.openshell.v1.GetSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12z\n\rListSandboxes\x12\".openshell.v1.ListSandboxesRequest\x1a#.openshell.v1.ListSandboxesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x8e\x01\n\x15\x43reateSandboxTemplate\x12*.openshell.v1.CreateSandboxTemplateRequest\x1a%.openshell.v1.SandboxTemplateResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\rsandbox:write\x12\x86\x01\n\x12GetSandboxTemplate\x12\'.openshell.v1.GetSandboxTemplateRequest\x1a%.openshell.v1.SandboxTemplateResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x8f\x01\n\x14ListSandboxTemplates\x12).openshell.v1.ListSandboxTemplatesRequest\x1a*.openshell.v1.ListSandboxTemplatesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x94\x01\n\x15\x44\x65leteSandboxTemplate\x12*.openshell.v1.DeleteSandboxTemplateRequest\x1a+.openshell.v1.DeleteSandboxTemplateResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\rsandbox:write\x12\x8f\x01\n\x14ListSandboxProviders\x12).openshell.v1.ListSandboxProvidersRequest\x1a*.openshell.v1.ListSandboxProvidersResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x93\x01\n\x15\x41ttachSandboxProvider\x12*.openshell.v1.AttachSandboxProviderRequest\x1a+.openshell.v1.AttachSandboxProviderResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x93\x01\n\x15\x44\x65tachSandboxProvider\x12*.openshell.v1.DetachSandboxProviderRequest\x1a+.openshell.v1.DetachSandboxProviderResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x9b\x01\n\x18GetSandboxProviderStatus\x12-.openshell.v1.GetSandboxProviderStatusRequest\x1a..openshell.v1.GetSandboxProviderStatusResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12{\n\rDeleteSandbox\x12\".openshell.v1.DeleteSandboxRequest\x1a#.openshell.v1.DeleteSandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12q\n\x0bStopSandbox\x12 .openshell.v1.StopSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12s\n\x0cStartSandbox\x12!.openshell.v1.StartSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x84\x01\n\x10\x43reateSshSession\x12%.openshell.v1.CreateSshSessionRequest\x1a&.openshell.v1.CreateSshSessionResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12}\n\rExposeService\x12\".openshell.v1.ExposeServiceRequest\x1a%.openshell.v1.ServiceEndpointResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12v\n\nGetService\x12\x1f.openshell.v1.GetServiceRequest\x1a%.openshell.v1.ServiceEndpointResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12w\n\x0cListServices\x12!.openshell.v1.ListServicesRequest\x1a\".openshell.v1.ListServicesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12{\n\rDeleteService\x12\".openshell.v1.DeleteServiceRequest\x1a#.openshell.v1.DeleteServiceResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x84\x01\n\x10RevokeSshSession\x12%.openshell.v1.RevokeSshSessionRequest\x1a&.openshell.v1.RevokeSshSessionResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12t\n\x0b\x45xecSandbox\x12 .openshell.v1.ExecSandboxRequest\x1a\x1e.openshell.v1.ExecSandboxEvent\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write0\x01\x12q\n\nForwardTcp\x12\x1d.openshell.v1.TcpForwardFrame\x1a\x1d.openshell.v1.TcpForwardFrame\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write(\x01\x30\x01\x12\x7f\n\x16\x45xecSandboxInteractive\x12\x1e.openshell.v1.ExecSandboxInput\x1a\x1e.openshell.v1.ExecSandboxEvent\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write(\x01\x30\x01\x12z\n\x0e\x43reateProvider\x12#.openshell.v1.CreateProviderRequest\x1a\x1e.openshell.v1.ProviderResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12r\n\x0bGetProvider\x12 .openshell.v1.GetProviderRequest\x1a\x1e.openshell.v1.ProviderResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12{\n\rListProviders\x12\".openshell.v1.ListProvidersRequest\x1a#.openshell.v1.ListProvidersResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x90\x01\n\x14ListProviderProfiles\x12).openshell.v1.ListProviderProfilesRequest\x1a*.openshell.v1.ListProviderProfilesResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x87\x01\n\x12GetProviderProfile\x12\'.openshell.v1.GetProviderProfileRequest\x1a%.openshell.v1.ProviderProfileResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x98\x01\n\x16ImportProviderProfiles\x12+.openshell.v1.ImportProviderProfilesRequest\x1a,.openshell.v1.ImportProviderProfilesResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x98\x01\n\x16UpdateProviderProfiles\x12+.openshell.v1.UpdateProviderProfilesRequest\x1a,.openshell.v1.UpdateProviderProfilesResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x90\x01\n\x14LintProviderProfiles\x12).openshell.v1.LintProviderProfilesRequest\x1a*.openshell.v1.LintProviderProfilesResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12z\n\x0eUpdateProvider\x12#.openshell.v1.UpdateProviderRequest\x1a\x1e.openshell.v1.ProviderResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x9c\x01\n\x18GetProviderRefreshStatus\x12-.openshell.v1.GetProviderRefreshStatusRequest\x1a..openshell.v1.GetProviderRefreshStatusResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x9e\x01\n\x18\x43onfigureProviderRefresh\x12-.openshell.v1.ConfigureProviderRefreshRequest\x1a..openshell.v1.ConfigureProviderRefreshResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x9e\x01\n\x18RotateProviderCredential\x12-.openshell.v1.RotateProviderCredentialRequest\x1a..openshell.v1.RotateProviderCredentialResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x95\x01\n\x15\x44\x65leteProviderRefresh\x12*.openshell.v1.DeleteProviderRefreshRequest\x1a+.openshell.v1.DeleteProviderRefreshResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x80\x01\n\x0e\x44\x65leteProvider\x12#.openshell.v1.DeleteProviderRequest\x1a$.openshell.v1.DeleteProviderResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x95\x01\n\x15\x44\x65leteProviderProfile\x12*.openshell.v1.DeleteProviderProfileRequest\x1a+.openshell.v1.DeleteProviderProfileResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x90\x01\n\x10GetSandboxConfig\x12-.openshell.sandbox.v1.GetSandboxConfigRequest\x1a..openshell.sandbox.v1.GetSandboxConfigResponse\"\x1d\x82\xb5\x18\x19\n\x04\x64ual\x12\x04user\"\x0b\x63onfig:read\x12\x8c\x01\n\x10GetGatewayConfig\x12-.openshell.sandbox.v1.GetGatewayConfigRequest\x1a..openshell.sandbox.v1.GetGatewayConfigResponse\"\x19\x82\xb5\x18\x15\n\x06\x62\x65\x61rer\"\x0b\x63onfig:read\x12v\n\x0cUpdateConfig\x12!.openshell.v1.UpdateConfigRequest\x1a\".openshell.v1.UpdateConfigResponse\"\x1f\x82\xb5\x18\x1b\n\x04\x64ual\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x95\x01\n\x16GetSandboxPolicyStatus\x12+.openshell.v1.GetSandboxPolicyStatusRequest\x1a,.openshell.v1.GetSandboxPolicyStatusResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x8c\x01\n\x13ListSandboxPolicies\x12(.openshell.v1.ListSandboxPoliciesRequest\x1a).openshell.v1.ListSandboxPoliciesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12v\n\x12ReportPolicyStatus\x12\'.openshell.v1.ReportPolicyStatusRequest\x1a(.openshell.v1.ReportPolicyStatusResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12|\n\x14ReportEndpointStatus\x12).openshell.v1.ReportEndpointStatusRequest\x1a*.openshell.v1.ReportEndpointStatusResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x85\x01\n\x17ReportProviderReadiness\x12,.openshell.v1.ReportProviderReadinessRequest\x1a-.openshell.v1.ReportProviderReadinessResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x8e\x01\n\x1aReportSandboxConfiguration\x12/.openshell.v1.ReportSandboxConfigurationRequest\x1a\x30.openshell.v1.ReportSandboxConfigurationResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x97\x01\n\x1dGetSandboxProviderEnvironment\x12\x32.openshell.v1.GetSandboxProviderEnvironmentRequest\x1a\x33.openshell.v1.GetSandboxProviderEnvironmentResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x94\x01\n\x1c\x45xchangeProviderSubjectToken\x12\x31.openshell.v1.ExchangeProviderSubjectTokenRequest\x1a\x32.openshell.v1.ExchangeProviderSubjectTokenResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12}\n\x0eGetSandboxLogs\x12#.openshell.v1.GetSandboxLogsRequest\x1a$.openshell.v1.GetSandboxLogsResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12o\n\x0fPushSandboxLogs\x12$.openshell.v1.PushSandboxLogsRequest\x1a%.openshell.v1.PushSandboxLogsResponse\"\r\x82\xb5\x18\t\n\x07sandbox(\x01\x12\x65\n\x11\x43onnectSupervisor\x12\x1f.openshell.v1.SupervisorMessage\x1a\x1c.openshell.v1.GatewayMessage\"\r\x82\xb5\x18\t\n\x07sandbox(\x01\x30\x01\x12\x7f\n\x15ReportMainProcessExit\x12*.openshell.v1.ReportMainProcessExitRequest\x1a+.openshell.v1.ReportMainProcessExitResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x85\x01\n\x17\x46inalizeMainProcessExit\x12,.openshell.v1.FinalizeMainProcessExitRequest\x1a-.openshell.v1.FinalizeMainProcessExitResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12T\n\x0bRelayStream\x12\x18.openshell.v1.RelayFrame\x1a\x18.openshell.v1.RelayFrame\"\r\x82\xb5\x18\t\n\x07sandbox(\x01\x30\x01\x12W\n\tPeerRelay\x12\x1c.openshell.v1.PeerRelayFrame\x1a\x1c.openshell.v1.PeerRelayFrame\"\n\x82\xb5\x18\x06\n\x04peer(\x01\x30\x01\x12\x86\x01\n\x1bPeerReportProviderReadiness\x12,.openshell.v1.ReportProviderReadinessRequest\x1a-.openshell.v1.ReportProviderReadinessResponse\"\n\x82\xb5\x18\x06\n\x04peer\x12}\n\x18PeerReportEndpointStatus\x12).openshell.v1.ReportEndpointStatusRequest\x1a*.openshell.v1.ReportEndpointStatusResponse\"\n\x82\xb5\x18\x06\n\x04peer\x12\x89\x01\n\x1cPeerGetSandboxProviderStatus\x12-.openshell.v1.GetSandboxProviderStatusRequest\x1a..openshell.v1.GetSandboxProviderStatusResponse\"\n\x82\xb5\x18\x06\n\x04peer\x12w\n\x0cWatchSandbox\x12!.openshell.v1.WatchSandboxRequest\x1a .openshell.v1.SandboxStreamEvent\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read0\x01\x12|\n\x14SubmitPolicyAnalysis\x12).openshell.v1.SubmitPolicyAnalysisRequest\x1a*.openshell.v1.SubmitPolicyAnalysisResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12z\n\x0eGetDraftPolicy\x12#.openshell.v1.GetDraftPolicyRequest\x1a$.openshell.v1.GetDraftPolicyResponse\"\x1d\x82\xb5\x18\x19\n\x04\x64ual\x12\x04user\"\x0b\x63onfig:read\x12\x87\x01\n\x11\x41pproveDraftChunk\x12&.openshell.v1.ApproveDraftChunkRequest\x1a\'.openshell.v1.ApproveDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x84\x01\n\x10RejectDraftChunk\x12%.openshell.v1.RejectDraftChunkRequest\x1a&.openshell.v1.RejectDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x93\x01\n\x15\x41pproveAllDraftChunks\x12*.openshell.v1.ApproveAllDraftChunksRequest\x1a+.openshell.v1.ApproveAllDraftChunksResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12~\n\x0e\x45\x64itDraftChunk\x12#.openshell.v1.EditDraftChunkRequest\x1a$.openshell.v1.EditDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12~\n\x0eUndoDraftChunk\x12#.openshell.v1.UndoDraftChunkRequest\x1a$.openshell.v1.UndoDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x84\x01\n\x10\x43learDraftChunks\x12%.openshell.v1.ClearDraftChunksRequest\x1a&.openshell.v1.ClearDraftChunksResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x7f\n\x0fGetDraftHistory\x12$.openshell.v1.GetDraftHistoryRequest\x1a%.openshell.v1.GetDraftHistoryResponse\"\x1f\x82\xb5\x18\x1b\n\x06\x62\x65\x61rer\x12\x04user\"\x0b\x63onfig:read\x12s\n\x11IssueSandboxToken\x12&.openshell.v1.IssueSandboxTokenRequest\x1a\'.openshell.v1.IssueSandboxTokenResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12y\n\x13RefreshSandboxToken\x12(.openshell.v1.RefreshSandboxTokenRequest\x1a).openshell.v1.RefreshSandboxTokenResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x8d\x01\n\x0f\x43reateWorkspace\x12$.openshell.v1.CreateWorkspaceRequest\x1a%.openshell.v1.CreateWorkspaceResponse\"-\x82\xb5\x18)\n\x06\x62\x65\x61rer\x1a\x0eplatform_admin\"\x0fworkspace:write\x12y\n\x0cGetWorkspace\x12!.openshell.v1.GetWorkspaceRequest\x1a\".openshell.v1.GetWorkspaceResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x04user\"\x0eworkspace:read\x12\x7f\n\x0eListWorkspaces\x12#.openshell.v1.ListWorkspacesRequest\x1a$.openshell.v1.ListWorkspacesResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x04user\"\x0eworkspace:read\x12\x8d\x01\n\x0f\x44\x65leteWorkspace\x12$.openshell.v1.DeleteWorkspaceRequest\x1a%.openshell.v1.DeleteWorkspaceResponse\"-\x82\xb5\x18)\n\x06\x62\x65\x61rer\x1a\x0eplatform_admin\"\x0fworkspace:write\x12\x8d\x01\n\x12\x41\x64\x64WorkspaceMember\x12\'.openshell.v1.AddWorkspaceMemberRequest\x1a(.openshell.v1.AddWorkspaceMemberResponse\"$\x82\xb5\x18 \n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0fworkspace:write\x12\x96\x01\n\x15RemoveWorkspaceMember\x12*.openshell.v1.RemoveWorkspaceMemberRequest\x1a+.openshell.v1.RemoveWorkspaceMemberResponse\"$\x82\xb5\x18 \n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0fworkspace:write\x12\x91\x01\n\x14ListWorkspaceMembers\x12).openshell.v1.ListWorkspaceMembersRequest\x1a*.openshell.v1.ListWorkspaceMembersResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x04user\"\x0eworkspace:readb\x06proto3') +DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x0fopenshell.proto\x12\x0copenshell.v1\x1a\x0f\x64\x61tamodel.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\roptions.proto\x1a\rsandbox.proto\"\x1a\n\x18IssueSandboxTokenRequest\"z\n\x19IssueSandboxTokenResponse\x12\x13\n\x05token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18\x66 \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x02\x10\x03R\rexpires_at_ms\"=\n\x1aRefreshSandboxTokenRequest\x12\x1f\n\x17\x65xtension_service_names\x18\x01 \x03(\t\"\xea\x02\n\x1bRefreshSandboxTokenResponse\x12\x13\n\x05token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18\x66 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12G\n\x15\x65xtension_credentials\x18\x03 \x03(\x0b\x32(.openshell.v1.ExtensionServiceCredential\x12\x1b\n\rsandbox_token\x18\x04 \x01(\tB\x04\x88\xb5\x18\x01\x12;\n\x17sandbox_expiration_time\x18i \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nsession_id\x18\x06 \x01(\t\x12\x18\n\x10\x63redential_epoch\x18\x07 \x01(\x04J\x04\x08\x02\x10\x03J\x04\x08\x05\x10\x06R\rexpires_at_msR\x15sandbox_expires_at_ms\"\x0f\n\rHealthRequest\"N\n\x0eHealthResponse\x12+\n\x06status\x18\x01 \x01(\x0e\x32\x1b.openshell.v1.ServiceStatus\x12\x0f\n\x07version\x18\x02 \x01(\t\"\x17\n\x15GetCurrentUserRequest\"y\n\x16GetCurrentUserResponse\x12\x0f\n\x07subject\x18\x01 \x01(\t\x12\x14\n\x0c\x64isplay_name\x18\x02 \x01(\t\x12\r\n\x05roles\x18\x03 \x03(\t\x12\x0e\n\x06scopes\x18\x04 \x03(\t\x12\x19\n\x11identity_provider\x18\x05 \x01(\t\"\x17\n\x15GetGatewayInfoRequest\"\xd3\x01\n\x16GetGatewayInfoResponse\x12+\n\x06status\x18\x01 \x01(\x0e\x32\x1b.openshell.v1.ServiceStatus\x12\x17\n\x0fgateway_version\x18\x02 \x01(\t\x12\x38\n\x0f\x63ompute_drivers\x18\x03 \x03(\x0b\x32\x1f.openshell.v1.ComputeDriverInfo\x12\x39\n\nextensions\x18\x04 \x03(\x0b\x32%.openshell.v1.NegotiatedExtensionInfo\"\x89\x02\n\x17NegotiatedExtensionInfo\x12)\n\x04kind\x18\x01 \x01(\x0e\x32\x1b.openshell.v1.ExtensionKind\x12\x17\n\x0f\x63onfigured_name\x18\x02 \x01(\t\x12\x1b\n\x13implementation_name\x18\x03 \x01(\t\x12\x1e\n\x16implementation_version\x18\x04 \x01(\t\x12\x16\n\x0eprotocol_major\x18\x05 \x01(\r\x12\x16\n\x0eprotocol_minor\x18\x06 \x01(\r\x12\x1e\n\x16supported_capabilities\x18\x07 \x03(\t\x12\x1d\n\x15required_capabilities\x18\x08 \x03(\t\"`\n\x11\x43omputeDriverInfo\x12\x0c\n\x04name\x18\x01 \x01(\t\x12=\n\x0c\x63\x61pabilities\x18\x02 \x01(\x0b\x32\'.openshell.v1.ComputeDriverCapabilities\"\x8b\x01\n\x19\x43omputeDriverCapabilities\x12\x13\n\x0b\x64river_name\x18\x01 \x01(\t\x12\x16\n\x0e\x64river_version\x18\x02 \x01(\t\x12\x41\n\x15resource_capabilities\x18\x03 \x01(\x0b\x32\".openshell.v1.ResourceCapabilities\"\xb8\x01\n\x14ResourceCapabilities\x12\x32\n\x03\x63pu\x18\x01 \x01(\x0b\x32%.openshell.v1.CpuResourceCapabilities\x12\x38\n\x06memory\x18\x02 \x01(\x0b\x32(.openshell.v1.MemoryResourceCapabilities\x12\x32\n\x03gpu\x18\x03 \x01(\x0b\x32%.openshell.v1.GpuResourceCapabilities\"2\n\x17\x43puResourceCapabilities\x12\x17\n\x0flimit_supported\x18\x01 \x01(\x08\"5\n\x1aMemoryResourceCapabilities\x12\x17\n\x0flimit_supported\x18\x01 \x01(\x08\"a\n\x17GpuResourceCapabilities\x12#\n\x1b\x64\x65\x66\x61ult_selection_supported\x18\x01 \x01(\x08\x12!\n\x19\x63ount_selection_supported\x18\x02 \x01(\x08\"\xb7\x02\n\x07Sandbox\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\'\n\x04spec\x18\x02 \x01(\x0b\x32\x19.openshell.v1.SandboxSpec\x12+\n\x06status\x18\x03 \x01(\x0b\x32\x1b.openshell.v1.SandboxStatus\x12\x1c\n\x14host_key_fingerprint\x18\x06 \x01(\t\x12W\n\x1e\x63reated_from_workload_template\x18\x14 \x01(\x0b\x32/.openshell.v1.SandboxWorkloadTemplateProvenanceJ\x04\x08\x04\x10\x05J\x04\x08\x05\x10\x06R\x05phaseR\x16\x63urrent_policy_version\"\xfe\x03\n\x0bSandboxSpec\x12\x11\n\tlog_level\x18\x01 \x01(\t\x12?\n\x0b\x65nvironment\x18\x05 \x03(\x0b\x32*.openshell.v1.SandboxSpec.EnvironmentEntry\x12/\n\x08template\x18\x06 \x01(\x0b\x32\x1d.openshell.v1.SandboxTemplate\x12\x33\n\x06policy\x18\x07 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12\x11\n\tproviders\x18\x08 \x03(\t\x12\x41\n\x15resource_requirements\x18\t \x01(\x0b\x32\".openshell.v1.ResourceRequirements\x12\x0f\n\x07\x63ommand\x18\x0c \x03(\t\x12\x0b\n\x03tty\x18\r \x01(\x08\x12!\n\x19provider_attachment_epoch\x18\x0e \x01(\t\x12:\n\x0erestart_policy\x18\x0f \x01(\x0e\x32\".openshell.v1.SandboxRestartPolicy\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\n\x10\x0bJ\x04\x08\x0b\x10\x0cR\ngpu_deviceR\x16proposal_approval_mode\"J\n\x14ResourceRequirements\x12\x32\n\x03gpu\x18\x01 \x01(\x0b\x32%.openshell.v1.GpuResourceRequirements\"7\n\x17GpuResourceRequirements\x12\x12\n\x05\x63ount\x18\x01 \x01(\rH\x00\x88\x01\x01\x42\x08\n\x06_count\"\xda\x04\n\x0fSandboxTemplate\x12\r\n\x05image\x18\x01 \x01(\t\x12\x1a\n\x12runtime_class_name\x18\x02 \x01(\t\x12\x14\n\x0c\x61gent_socket\x18\x03 \x01(\t\x12\x39\n\x06labels\x18\x04 \x03(\x0b\x32).openshell.v1.SandboxTemplate.LabelsEntry\x12\x43\n\x0b\x61nnotations\x18\x05 \x03(\x0b\x32..openshell.v1.SandboxTemplate.AnnotationsEntry\x12\x43\n\x0b\x65nvironment\x18\x06 \x03(\x0b\x32..openshell.v1.SandboxTemplate.EnvironmentEntry\x12*\n\tresources\x18\x07 \x01(\x0b\x32\x17.google.protobuf.Struct\x12\x1c\n\x0fuser_namespaces\x18\n \x01(\x08H\x00\x88\x01\x01\x12.\n\rdriver_config\x18\x0b \x01(\x0b\x32\x17.google.protobuf.Struct\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42\x12\n\x10_user_namespacesJ\x04\x08\t\x10\nR\x16volume_claim_templates\"\x88\x01\n\x17SandboxWorkloadTemplate\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x37\n\x04spec\x18\x02 \x01(\x0b\x32).openshell.v1.SandboxWorkloadTemplateSpec\"\xc6\x01\n\x1bSandboxWorkloadTemplateSpec\x12\x35\n\x08workload\x18\x01 \x01(\x0b\x32#.openshell.v1.SandboxWorkloadConfig\x12.\n\rdriver_config\x18\x02 \x01(\x0b\x32\x17.google.protobuf.Struct\x12@\n\x15\x64\x65sired_service_level\x18\x03 \x01(\x0b\x32!.openshell.v1.SandboxServiceLevel\"\xd8\x01\n\x15SandboxWorkloadConfig\x12\r\n\x05image\x18\x01 \x01(\t\x12I\n\x0b\x65nvironment\x18\x02 \x03(\x0b\x32\x34.openshell.v1.SandboxWorkloadConfig.EnvironmentEntry\x12\x31\n\tresources\x18\x03 \x01(\x0b\x32\x1e.openshell.v1.SandboxResources\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"c\n\x10SandboxResources\x12\x0b\n\x03\x63pu\x18\x01 \x01(\t\x12\x0e\n\x06memory\x18\x02 \x01(\t\x12\x32\n\x03gpu\x18\x03 \x01(\x0b\x32%.openshell.v1.GpuResourceRequirements\"D\n\x13SandboxServiceLevel\x12-\n\x07startup\x18\x01 \x01(\x0b\x32\x1c.openshell.v1.SandboxStartup\"T\n\x0eSandboxStartup\x12/\n\x0cready_within\x18\x01 \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x11\n\tmax_burst\x18\x02 \x01(\r\"K\n!SandboxWorkloadTemplateProvenance\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x18\n\x10resource_version\x18\x02 \x01(\t\"\x9e\x05\n\rSandboxStatus\x12\x11\n\tagent_pod\x18\x02 \x01(\t\x12\x10\n\x08\x61gent_fd\x18\x03 \x01(\t\x12\x12\n\nsandbox_fd\x18\x04 \x01(\t\x12\x32\n\nconditions\x18\x05 \x03(\x0b\x32\x1e.openshell.v1.SandboxCondition\x12)\n\x05phase\x18\x06 \x01(\x0e\x32\x1a.openshell.v1.SandboxPhase\x12\x1e\n\x16\x63urrent_policy_version\x18\x07 \x01(\r\x12 \n\x18main_process_instance_id\x18\x08 \x01(\t\x12\x16\n\texit_code\x18\t \x01(\x05H\x00\x88\x01\x01\x12\x37\n\x11\x65ndpoint_statuses\x18\n \x03(\x0b\x32\x1c.openshell.v1.EndpointStatus\x12L\n\x17\x63onfiguration_admission\x18\x0b \x01(\x0b\x32+.openshell.v1.SandboxConfigurationAdmission\x12$\n\x17\x63onfiguration_activated\x18\x0c \x01(\x08H\x01\x88\x01\x01\x12\x37\n\x0cprovisioning\x18\r \x01(\x0b\x32!.openshell.v1.SandboxProvisioning\x12\x15\n\rrestart_count\x18\x0e \x01(\r\x12\x35\n\x11next_restart_time\x18\x0f \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12=\n\x19main_process_started_time\x18\x10 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x0c\n\n_exit_codeB\x1a\n\x18_configuration_activated\"\xa2\x01\n\x10SandboxCondition\x12\x0c\n\x04type\x18\x01 \x01(\t\x12\x0e\n\x06status\x18\x02 \x01(\t\x12\x0e\n\x06reason\x18\x03 \x01(\t\x12\x0f\n\x07message\x18\x04 \x01(\t\x12\x33\n\x0ftransition_time\x18i \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x05\x10\x06R\x14last_transition_time\"\x80\x02\n\rPlatformEvent\x12.\n\nevent_time\x18\x65 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06source\x18\x02 \x01(\t\x12\x0c\n\x04type\x18\x03 \x01(\t\x12\x0e\n\x06reason\x18\x04 \x01(\t\x12\x0f\n\x07message\x18\x05 \x01(\t\x12;\n\x08metadata\x18\x06 \x03(\x0b\x32).openshell.v1.PlatformEvent.MetadataEntry\x1a/\n\rMetadataEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x01\x10\x02R\x0ctimestamp_ms\"\x95\x04\n\x14\x43reateSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x07 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\'\n\x04spec\x18\x01 \x01(\x0b\x32\x19.openshell.v1.SandboxSpec\x12\x0c\n\x04name\x18\x02 \x01(\t\x12>\n\x06labels\x18\x03 \x03(\x0b\x32..openshell.v1.CreateSandboxRequest.LabelsEntry\x12H\n\x0b\x61nnotations\x18\x04 \x03(\x0b\x32\x33.openshell.v1.CreateSandboxRequest.AnnotationsEntry\x12%\n\x1d\x61wait_main_process_attachment\x18\x05 \x01(\x08\x12\x19\n\x11workload_template\x18\x06 \x01(\t\x12\x12\n\nrequest_id\x18\x08 \x01(\t\x12?\n\x11service_exposures\x18\t \x03(\x0b\x32$.openshell.v1.SandboxServiceExposure\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\xaf\x01\n\x1c\x43reateSandboxTemplateRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x37\n\x08template\x18\x01 \x01(\x0b\x32%.openshell.v1.SandboxWorkloadTemplate\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"m\n\x19GetSandboxTemplateRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\xa0\x01\n\x1bListSandboxTemplatesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\x12\x16\n\x0elabel_selector\x18\x03 \x01(\t\"\x9b\x01\n\x1c\x44\x65leteSandboxTemplateRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"R\n\x17SandboxTemplateResponse\x12\x37\n\x08template\x18\x01 \x01(\x0b\x32%.openshell.v1.SandboxWorkloadTemplate\"q\n\x1cListSandboxTemplatesResponse\x12\x38\n\ttemplates\x18\x01 \x03(\x0b\x32%.openshell.v1.SandboxWorkloadTemplate\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"^\n\x1d\x44\x65leteSandboxTemplateResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\x89\x01\n\x1c\x42\x65ginRootfsTarStagingRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tfile_name\x18\x01 \x01(\t\x12\x12\n\nsize_bytes\x18\x02 \x01(\x04\"\xa8\x01\n\x1d\x42\x65ginRootfsTarStagingResponse\x12\x15\n\rstaging_token\x18\x01 \x01(\t\x12\x13\n\x0bupload_path\x18\x02 \x01(\t\x12\x11\n\tmax_bytes\x18\x03 \x01(\x04\x12\x33\n\x0f\x65xpiration_time\x18h \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x04\x10\x05R\rexpires_at_ms\"e\n\x11GetSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\x99\x01\n\x14ListSandboxesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\x12\x16\n\x0elabel_selector\x18\x03 \x01(\t\"\x99\x01\n\x1bListSandboxProvidersRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"\xbc\x01\n\x1c\x41ttachSandboxProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12!\n\x19\x65xpected_resource_version\x18\x03 \x01(\x04\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\xbc\x01\n\x1c\x44\x65tachSandboxProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12!\n\x19\x65xpected_resource_version\x18\x03 \x01(\x04\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x93\x01\n\x14\x44\x65leteSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"z\n\x12StopSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"{\n\x13StartSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"\xb3\x01\n\x0fSandboxResponse\x12&\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.Sandbox\x12\x44\n\x0cservice_urls\x18\x02 \x03(\x0b\x32..openshell.v1.SandboxResponse.ServiceUrlsEntry\x1a\x32\n\x10ServiceUrlsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"Z\n\x15ListSandboxesResponse\x12(\n\tsandboxes\x18\x01 \x03(\x0b\x32\x15.openshell.v1.Sandbox\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"l\n\x1cListSandboxProvidersResponse\x12\x33\n\tproviders\x18\x01 \x03(\x0b\x32 .openshell.datamodel.v1.Provider\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x91\x01\n\x1d\x41ttachSandboxProviderResponse\x12&\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.Sandbox\x12\x10\n\x08\x61ttached\x18\x02 \x01(\x08\x12\x36\n\x07receipt\x18\x03 \x01(\x0b\x32%.openshell.v1.ProviderMutationReceipt\"\x91\x01\n\x1d\x44\x65tachSandboxProviderResponse\x12&\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.Sandbox\x12\x10\n\x08\x64\x65tached\x18\x02 \x01(\x08\x12\x36\n\x07receipt\x18\x03 \x01(\x0b\x32%.openshell.v1.ProviderMutationReceipt\"\xdd\x01\n\x17ProviderDesiredIdentity\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x0f\n\x07sandbox\x18\x02 \x01(\t\x12\x18\n\x10\x61ttachment_epoch\x18\x03 \x01(\t\x12\x13\n\x0bprovider_id\x18\x04 \x01(\t\x12!\n\x19provider_resource_version\x18\x05 \x01(\x04\x12\x1d\n\x15provider_env_revision\x18\x06 \x01(\x04\x12\x17\n\x0f\x63onfig_revision\x18\x07 \x01(\x04\x12\x13\n\x0bpolicy_hash\x18\x08 \x01(\t\"\xc6\x01\n\x16\x43onfigSnapshotRevision\x12=\n\x0esandbox_config\x18\x01 \x01(\x0b\x32#.openshell.v1.SandboxConfigRevisionH\x00\x12\x1e\n\x14provider_environment\x18\x02 \x01(\x04H\x00\x12@\n\x0fprovider_target\x18\x03 \x01(\x0b\x32%.openshell.v1.ProviderDesiredIdentityH\x00\x42\x0b\n\tcomponent\"\xbd\x01\n\x15SandboxConfigRevision\x12\x17\n\x0f\x63onfig_revision\x18\x01 \x01(\x04\x12\x16\n\x0epolicy_version\x18\x02 \x01(\r\x12\x39\n\rpolicy_source\x18\x03 \x01(\x0e\x32\".openshell.sandbox.v1.PolicySource\x12\x1d\n\x15global_policy_version\x18\x04 \x01(\r\x12\x19\n\x11settings_revision\x18\x05 \x01(\x04\"\x90\x04\n\x15\x43onfigUpdateOperation\x12\x14\n\x0coperation_id\x18\x01 \x01(\t\x12\x12\n\nsandbox_id\x18\x02 \x01(\t\x12\x30\n\tcomponent\x18\x03 \x01(\x0e\x32\x1d.openshell.v1.ConfigComponent\x12=\n\x0ftarget_revision\x18\x04 \x01(\x0b\x32$.openshell.v1.ConfigSnapshotRevision\x12\x37\n\x05state\x18\x05 \x01(\x0e\x32(.openshell.v1.ConfigUpdateOperationState\x12\x31\n\x07outcome\x18\x06 \x01(\x0e\x32 .openshell.v1.ConfigApplyOutcome\x12\x17\n\x0fsanitized_error\x18\x07 \x01(\t\x12\x30\n\x0c\x63reated_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x30\n\x0cupdated_time\x18m \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0e\x63ompleted_time\x18n \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x08\x10\tJ\x04\x08\t\x10\nJ\x04\x08\n\x10\x0bR\rcreated_at_msR\rupdated_at_msR\x0f\x63ompleted_at_ms\"\x9c\x02\n\x17ProviderMutationReceipt\x12\x12\n\nreceipt_id\x18\x01 \x01(\t\x12\x13\n\x0bmutation_id\x18\x02 \x01(\t\x12\x10\n\x08provider\x18\x03 \x01(\t\x12\x11\n\tworkspace\x18\x04 \x01(\t\x12\x30\n\x04kind\x18\x05 \x01(\x0e\x32\".openshell.v1.ProviderMutationKind\x12\x36\n\x07\x64\x65sired\x18\x06 \x01(\x0b\x32%.openshell.v1.ProviderDesiredIdentity\x12\x32\n\x0epersisted_time\x18k \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x07\x10\x08R\x0fpersisted_at_ms\"\xdb\x02\n\x1cProviderReadinessObservation\x12\x12\n\nsession_id\x18\x01 \x01(\t\x12\x10\n\x08sequence\x18\x02 \x01(\x04\x12\x18\n\x10\x61ttachment_epoch\x18\x03 \x01(\t\x12\x1d\n\x15provider_env_revision\x18\x04 \x01(\x04\x12\x17\n\x0f\x63onfig_revision\x18\x05 \x01(\x04\x12\x13\n\x0bpolicy_hash\x18\x06 \x01(\t\x12\x1d\n\x15\x63redentials_installed\x18\x07 \x01(\x08\x12\x15\n\rpolicy_active\x18\x08 \x01(\x08\x12$\n\x1claunch_environment_installed\x18\t \x01(\x08\x12\x1b\n\x13process_instance_id\x18\n \x01(\t\x12\x35\n\x06reason\x18\x0b \x01(\x0e\x32%.openshell.v1.ProviderReadinessReason\"\xe4\x03\n\x17ProviderReadinessStatus\x12\x36\n\x07receipt\x18\x01 \x01(\x0b\x32%.openshell.v1.ProviderMutationReceipt\x12\x33\n\x05state\x18\x02 \x01(\x0e\x32$.openshell.v1.ProviderReadinessState\x12\x35\n\x06reason\x18\x03 \x01(\x0e\x32%.openshell.v1.ProviderReadinessReason\x12<\n\x08observed\x18\x04 \x01(\x0b\x32*.openshell.v1.ProviderReadinessObservation\x12\x1b\n\x13network_instance_id\x18\x05 \x01(\t\x12\x31\n\robserved_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0e\x65valuated_time\x18k \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x36\n\toperation\x18\x08 \x01(\x0b\x32#.openshell.v1.ConfigUpdateOperationJ\x04\x08\x06\x10\x07J\x04\x08\x07\x10\x08R\x0eobserved_at_msR\x0f\x65valuated_at_ms\"\x9c\x01\n\x1fGetSandboxProviderStatusRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12\x12\n\nreceipt_id\x18\x03 \x01(\t\"Y\n GetSandboxProviderStatusResponse\x12\x35\n\x06status\x18\x01 \x01(\x0b\x32%.openshell.v1.ProviderReadinessStatus\"u\n\x1eReportProviderReadinessRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12?\n\x0bobservation\x18\x02 \x01(\x0b\x32*.openshell.v1.ProviderReadinessObservation\"\xe2\x01\n\x1fReportProviderReadinessResponse\x12\x19\n\x11\x61\x63\x63\x65pted_sequence\x18\x01 \x01(\x04\x12\x32\n\x0freport_interval\x18\x66 \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x32\n\x0fobservation_ttl\x18g \x01(\x0b\x32\x19.google.protobuf.DurationJ\x04\x08\x02\x10\x03J\x04\x08\x03\x10\x04R\x17report_interval_secondsR\x17observation_ttl_seconds\"j\n\x15\x44\x65leteSandboxResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcome\x12\x12\n\nsandbox_id\x18\x03 \x01(\tJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"n\n\x17\x43reateSshSessionRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\xef\x01\n\x18\x43reateSshSessionResponse\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x05token\x18\x02 \x01(\tB\x04\x88\xb5\x18\x01\x12\x14\n\x0cgateway_host\x18\x03 \x01(\t\x12\x14\n\x0cgateway_port\x18\x04 \x01(\r\x12\x16\n\x0egateway_scheme\x18\x05 \x01(\t\x12\x1c\n\x14host_key_fingerprint\x18\x07 \x01(\t\x12\x33\n\x0f\x65xpiration_time\x18l \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x08\x10\tR\rexpires_at_ms\"\xf6\x01\n\x14\x45xposeServiceRequest\x12\x42\n\x0fworkspace_scope\x18\x05 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x13\n\x0btarget_port\x18\x03 \x01(\r\x12\x0e\n\x06\x64omain\x18\x04 \x01(\x08\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x06 \x01(\t\x12\x42\n\x12\x61uthorization_mode\x18\x07 \x01(\x0e\x32&.openshell.v1.ServiceAuthorizationMode\"v\n\x11GetServiceRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\x91\x01\n\x13ListServicesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"h\n\x14ListServicesResponse\x12\x37\n\x08services\x18\x01 \x03(\x0b\x32%.openshell.v1.ServiceEndpointResponse\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\xa4\x01\n\x14\x44\x65leteServiceRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x04 \x01(\x08\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"V\n\x15\x44\x65leteServiceResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\xe3\x01\n\x0fServiceEndpoint\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x12\n\nsandbox_id\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x03 \x01(\t\x12\x0c\n\x04name\x18\x04 \x01(\t\x12\x13\n\x0btarget_port\x18\x05 \x01(\r\x12\x0e\n\x06\x64omain\x18\x06 \x01(\x08\x12\x42\n\x12\x61uthorization_mode\x18\x07 \x01(\x0e\x32&.openshell.v1.ServiceAuthorizationMode\"W\n\x17ServiceEndpointResponse\x12/\n\x08\x65ndpoint\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.ServiceEndpoint\x12\x0b\n\x03url\x18\x02 \x01(\t\"E\n\x17RevokeSshSessionRequest\x12\x13\n\x05token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x15\n\rallow_missing\x18\x02 \x01(\x08\"Y\n\x18RevokeSshSessionResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07revoked\"\xb8\x03\n\x12\x45xecSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x0c \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x02 \x03(\t\x12\x0f\n\x07workdir\x18\x03 \x01(\t\x12\x46\n\x0b\x65nvironment\x18\x04 \x03(\x0b\x32\x31.openshell.v1.ExecSandboxRequest.EnvironmentEntry\x12\x34\n\x11\x65xecution_timeout\x18i \x01(\x0b\x32\x19.google.protobuf.Duration\x12\r\n\x05stdin\x18\x06 \x01(\x0c\x12\x0b\n\x03tty\x18\x07 \x01(\x08\x12\x0c\n\x04\x63ols\x18\x08 \x01(\r\x12\x0c\n\x04rows\x18\t \x01(\r\x12\x16\n\x0eno_login_shell\x18\n \x01(\x08\x12\x12\n\nrequest_id\x18\x0b \x01(\t\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x05\x10\x06R\x0ftimeout_seconds\"!\n\x11\x45xecSandboxStdout\x12\x0c\n\x04\x64\x61ta\x18\x01 \x01(\x0c\"!\n\x11\x45xecSandboxStderr\x12\x0c\n\x04\x64\x61ta\x18\x01 \x01(\x0c\"$\n\x0f\x45xecSandboxExit\x12\x11\n\texit_code\x18\x01 \x01(\x05\"\xb2\x01\n\x10\x45xecSandboxEvent\x12\x31\n\x06stdout\x18\x01 \x01(\x0b\x32\x1f.openshell.v1.ExecSandboxStdoutH\x00\x12\x31\n\x06stderr\x18\x02 \x01(\x0b\x32\x1f.openshell.v1.ExecSandboxStderrH\x00\x12-\n\x04\x65xit\x18\x03 \x01(\x0b\x32\x1d.openshell.v1.ExecSandboxExitH\x00\x42\t\n\x07payload\"\xcf\x01\n\x0eTcpForwardInit\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x11\n\tworkspace\x18\x03 \x01(\t\x12\x12\n\nservice_id\x18\x04 \x01(\t\x12+\n\x03ssh\x18\x05 \x01(\x0b\x32\x1c.openshell.v1.SshRelayTargetH\x00\x12+\n\x03tcp\x18\x06 \x01(\x0b\x32\x1c.openshell.v1.TcpRelayTargetH\x00\x12!\n\x13\x61uthorization_token\x18\x07 \x01(\tB\x04\x88\xb5\x18\x01\x42\x08\n\x06target\"Z\n\x0fTcpForwardFrame\x12,\n\x04init\x18\x01 \x01(\x0b\x32\x1c.openshell.v1.TcpForwardInitH\x00\x12\x0e\n\x04\x64\x61ta\x18\x02 \x01(\x0cH\x00\x42\t\n\x07payload\"\x9a\x01\n\x10\x45xecSandboxInput\x12\x31\n\x05start\x18\x01 \x01(\x0b\x32 .openshell.v1.ExecSandboxRequestH\x00\x12\x0f\n\x05stdin\x18\x02 \x01(\x0cH\x00\x12\x37\n\x06resize\x18\x03 \x01(\x0b\x32%.openshell.v1.ExecSandboxWindowResizeH\x00\x42\t\n\x07payload\"5\n\x17\x45xecSandboxWindowResize\x12\x0c\n\x04\x63ols\x18\x01 \x01(\r\x12\x0c\n\x04rows\x18\x02 \x01(\r\"\xc6\x01\n\nSshSession\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x12\n\nsandbox_id\x18\x02 \x01(\t\x12\x13\n\x05token\x18\x03 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18h \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0f\n\x07revoked\x18\x05 \x01(\x08J\x04\x08\x04\x10\x05R\rexpires_at_ms\"\x80\x03\n\x13WatchSandboxRequest\x12\x42\n\x0fworkspace_scope\x18\x0b \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x15\n\rfollow_status\x18\x02 \x01(\x08\x12\x13\n\x0b\x66ollow_logs\x18\x03 \x01(\x08\x12\x15\n\rfollow_events\x18\x04 \x01(\x08\x12\x16\n\x0elog_tail_lines\x18\x05 \x01(\r\x12\x12\n\nevent_tail\x18\x06 \x01(\r\x12\x18\n\x10stop_on_terminal\x18\x07 \x01(\x08\x12.\n\nsince_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x13\n\x0blog_sources\x18\t \x03(\t\x12\x15\n\rlog_min_level\x18\n \x01(\t\x12\x1b\n\x13resume_after_cursor\x18\x0c \x01(\tJ\x04\x08\x08\x10\tR\x0clog_since_ms\"\xab\x02\n\x12SandboxStreamEvent\x12(\n\x07sandbox\x18\x01 \x01(\x0b\x32\x15.openshell.v1.SandboxH\x00\x12+\n\x03log\x18\x02 \x01(\x0b\x32\x1c.openshell.v1.SandboxLogLineH\x00\x12,\n\x05\x65vent\x18\x03 \x01(\x0b\x32\x1b.openshell.v1.PlatformEventH\x00\x12\x35\n\x07warning\x18\x04 \x01(\x0b\x32\".openshell.v1.SandboxStreamWarningH\x00\x12>\n\x13\x64raft_policy_update\x18\x05 \x01(\x0b\x32\x1f.openshell.v1.DraftPolicyUpdateH\x00\x12\x0e\n\x06\x63ursor\x18\x06 \x01(\tB\t\n\x07payload\"\x91\x02\n\x0eSandboxLogLine\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12.\n\nevent_time\x18\x66 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\r\n\x05level\x18\x03 \x01(\t\x12\x0e\n\x06target\x18\x04 \x01(\t\x12\x0f\n\x07message\x18\x05 \x01(\t\x12\x0e\n\x06source\x18\x06 \x01(\t\x12\x38\n\x06\x66ields\x18\x07 \x03(\x0b\x32(.openshell.v1.SandboxLogLine.FieldsEntry\x1a-\n\x0b\x46ieldsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x02\x10\x03R\x0ctimestamp_ms\"\'\n\x14SandboxStreamWarning\x12\x0f\n\x07message\x18\x01 \x01(\t\"\xa3\x01\n\x15\x43reateProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x32\n\x08provider\x18\x01 \x01(\x0b\x32 .openshell.datamodel.v1.Provider\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"f\n\x12GetProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\x81\x01\n\x14ListProvidersRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\"\xb4\x03\n\x15UpdateProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x32\n\x08provider\x18\x01 \x01(\x0b\x32 .openshell.datamodel.v1.Provider\x12g\n\x1b\x63redential_expiration_times\x18\x66 \x03(\x0b\x32\x42.openshell.v1.UpdateProviderRequest.CredentialExpirationTimesEntry\x12(\n clear_credential_expiration_keys\x18g \x03(\t\x12\x12\n\nrequest_id\x18\x04 \x01(\t\x1a\\\n\x1e\x43redentialExpirationTimesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12)\n\x05value\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.Timestamp:\x02\x38\x01J\x04\x08\x02\x10\x03R\x18\x63redential_expires_at_ms\"\x94\x01\n\x15\x44\x65leteProviderRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x04 \x01(\x08\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x9b\x01\n\x10ProviderResponse\x12\x32\n\x08provider\x18\x01 \x01(\x0b\x32 .openshell.datamodel.v1.Provider\x12>\n\x0ftarget_receipts\x18\x02 \x03(\x0b\x32%.openshell.v1.ProviderMutationReceipt\x12\x13\n\x0bmutation_id\x18\x03 \x01(\t\"e\n\x15ListProvidersResponse\x12\x33\n\tproviders\x18\x01 \x03(\x0b\x32 .openshell.datamodel.v1.Provider\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x88\x01\n\x1bListProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\"k\n\x19GetProviderProfileRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\n\n\x02id\x18\x01 \x01(\t\"[\n\x19ProviderProfileImportItem\x12.\n\x07profile\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x0e\n\x06source\x18\x02 \x01(\t\"q\n\x19ProviderProfileDiagnostic\x12\x0e\n\x06source\x18\x01 \x01(\t\x12\x12\n\nprofile_id\x18\x02 \x01(\t\x12\r\n\x05\x66ield\x18\x03 \x01(\t\x12\x0f\n\x07message\x18\x04 \x01(\t\x12\x10\n\x08severity\x18\x05 \x01(\t\"z\n,ProviderCredentialTokenGrantAudienceOverride\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\x12\x0c\n\x04path\x18\x03 \x01(\t\x12\x10\n\x08\x61udience\x18\x04 \x01(\t\x12\x0e\n\x06scopes\x18\x05 \x03(\t\"j\n(ProviderCredentialTokenGrantSubjectToken\x12\x0e\n\x06source\x18\x01 \x01(\t\x12\x12\n\ncredential\x18\x02 \x01(\t\x12\x1a\n\x12subject_token_type\x18\x03 \x01(\t\"\xe2\x03\n\x1cProviderCredentialTokenGrant\x12\x16\n\x0etoken_endpoint\x18\x01 \x01(\t\x12\x10\n\x08\x61udience\x18\x02 \x01(\t\x12\x19\n\x11jwt_svid_audience\x18\x06 \x01(\t\x12\x0e\n\x06scopes\x18\x03 \x03(\t\x12,\n\tcache_ttl\x18h \x01(\x0b\x32\x19.google.protobuf.Duration\x12V\n\x12\x61udience_overrides\x18\x05 \x03(\x0b\x32:.openshell.v1.ProviderCredentialTokenGrantAudienceOverride\x12\x1d\n\x15\x63lient_assertion_type\x18\x07 \x01(\t\x12\x42\n\ngrant_type\x18\x08 \x01(\x0e\x32..openshell.v1.ProviderCredentialTokenGrantType\x12M\n\rsubject_token\x18\t \x01(\x0b\x32\x36.openshell.v1.ProviderCredentialTokenGrantSubjectToken\x12\x1c\n\x14requested_token_type\x18\n \x01(\tJ\x04\x08\x04\x10\x05R\x11\x63\x61\x63he_ttl_seconds\"\xce\x02\n\x19ProviderProfileCredential\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x10\n\x08\x65nv_vars\x18\x03 \x03(\t\x12\x10\n\x08required\x18\x04 \x01(\x08\x12\x12\n\nauth_style\x18\x05 \x01(\t\x12\x13\n\x0bheader_name\x18\x06 \x01(\t\x12\x13\n\x0bquery_param\x18\x07 \x01(\t\x12\x38\n\x07refresh\x18\x08 \x01(\x0b\x32\'.openshell.v1.ProviderCredentialRefresh\x12\x15\n\rpath_template\x18\t \x01(\t\x12?\n\x0btoken_grant\x18\n \x01(\x0b\x32*.openshell.v1.ProviderCredentialTokenGrant\x12\x1a\n\x12token_grant_owners\x18\x0b \x03(\t\"h\n!ProviderCredentialRefreshMaterial\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x10\n\x08required\x18\x03 \x01(\x08\x12\x0e\n\x06secret\x18\x04 \x01(\x08\"E\n\x1fProviderCredentialRefreshOutput\x12\x0e\n\x06output\x18\x01 \x01(\t\x12\x12\n\ncredential\x18\x02 \x01(\t\"\xad\x03\n\x19ProviderCredentialRefresh\x12\x41\n\x08strategy\x18\x01 \x01(\x0e\x32/.openshell.v1.ProviderCredentialRefreshStrategy\x12\x11\n\ttoken_url\x18\x02 \x01(\t\x12\x0e\n\x06scopes\x18\x03 \x03(\t\x12\x31\n\x0erefresh_before\x18h \x01(\x0b\x32\x19.google.protobuf.Duration\x12/\n\x0cmax_lifetime\x18i \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x41\n\x08material\x18\x06 \x03(\x0b\x32/.openshell.v1.ProviderCredentialRefreshMaterial\x12I\n\x12\x61\x64\x64itional_outputs\x18\x07 \x03(\x0b\x32-.openshell.v1.ProviderCredentialRefreshOutputJ\x04\x08\x04\x10\x05J\x04\x08\x05\x10\x06R\x16refresh_before_secondsR\x14max_lifetime_seconds\"\x86\x05\n\x1fProviderCredentialRefreshStatus\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x13\n\x0bprovider_id\x18\x02 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x03 \x01(\t\x12\x41\n\x08strategy\x18\x04 \x01(\x0e\x32/.openshell.v1.ProviderCredentialRefreshStrategy\x12\x0e\n\x06status\x18\x05 \x01(\t\x12\x33\n\x0f\x65xpiration_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x35\n\x11next_refresh_time\x18k \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x35\n\x11last_refresh_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nlast_error\x18\t \x01(\t\x12N\n\x0frecovery_action\x18\n \x01(\x0e\x32\x35.openshell.v1.ProviderCredentialRefreshRecoveryAction\x12\x14\n\x0c\x66\x61ilure_code\x18\x0b \x01(\t\x12\x1e\n\x16provider_error_subtype\x18\x0c \x01(\t\x12\x33\n\x0flast_error_time\x18q \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x06\x10\x07J\x04\x08\x07\x10\x08J\x04\x08\x08\x10\tJ\x04\x08\r\x10\x0eR\rexpires_at_msR\x12next_refresh_at_msR\x12last_refresh_at_msR\x10last_error_at_ms\"/\n\x18ProviderProfileDiscovery\x12\x13\n\x0b\x63redentials\x18\x01 \x03(\t\"\x8f\x01\n\x1fGetProviderRefreshStatusRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\"f\n GetProviderRefreshStatusResponse\x12\x42\n\x0b\x63redentials\x18\x01 \x03(\x0b\x32-.openshell.v1.ProviderCredentialRefreshStatus\"\xd4\x03\n\x1f\x43onfigureProviderRefreshRequest\x12\x42\n\x0fworkspace_scope\x18\x07 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\x12\x41\n\x08strategy\x18\x03 \x01(\x0e\x32/.openshell.v1.ProviderCredentialRefreshStrategy\x12S\n\x08material\x18\x04 \x03(\x0b\x32;.openshell.v1.ConfigureProviderRefreshRequest.MaterialEntryB\x04\x88\xb5\x18\x01\x12\x1c\n\x14secret_material_keys\x18\x05 \x03(\t\x12\x33\n\x0f\x65xpiration_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nrequest_id\x18\x08 \x01(\t\x1a/\n\rMaterialEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x06\x10\x07R\rexpires_at_ms\"a\n ConfigureProviderRefreshResponse\x12=\n\x06status\x18\x01 \x01(\x0b\x32-.openshell.v1.ProviderCredentialRefreshStatus\"\xa3\x01\n\x1fRotateProviderCredentialRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"a\n RotateProviderCredentialResponse\x12=\n\x06status\x18\x01 \x01(\x0b\x32-.openshell.v1.ProviderCredentialRefreshStatus\"\xb7\x01\n\x1c\x44\x65leteProviderRefreshRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08provider\x18\x01 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x02 \x01(\t\x12\x15\n\rallow_missing\x18\x05 \x01(\x08\x12\x12\n\nrequest_id\x18\x06 \x01(\t\"^\n\x1d\x44\x65leteProviderRefreshResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\xea\x04\n\x0fProviderProfile\x12\n\n\x02id\x18\x01 \x01(\t\x12\x14\n\x0c\x64isplay_name\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12\x37\n\x08\x63\x61tegory\x18\x04 \x01(\x0e\x32%.openshell.v1.ProviderProfileCategory\x12<\n\x0b\x63redentials\x18\x05 \x03(\x0b\x32\'.openshell.v1.ProviderProfileCredential\x12\x38\n\tendpoints\x18\x06 \x03(\x0b\x32%.openshell.sandbox.v1.NetworkEndpoint\x12\x35\n\x08\x62inaries\x18\x07 \x03(\x0b\x32#.openshell.sandbox.v1.NetworkBinary\x12\x19\n\x11inference_capable\x18\x08 \x01(\x08\x12\x39\n\tdiscovery\x18\t \x01(\x0b\x32&.openshell.v1.ProviderProfileDiscovery\x12\x18\n\x10resource_version\x18\n \x01(\x04\x12\x43\n\x0b\x61nnotations\x18\x0b \x03(\x0b\x32..openshell.v1.ProviderProfile.AnnotationsEntry\x12\x0e\n\x06source\x18\x0c \x01(\t\x12\r\n\x05scope\x18\r \x01(\t\x12\x30\n\x05\x66iles\x18\x0e \x03(\x0b\x32!.openshell.v1.ProviderProfileFile\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"E\n\x13ProviderProfileFile\x12\x0c\n\x04path\x18\x01 \x01(\t\x12\x0f\n\x07\x63ontent\x18\x02 \x01(\t\x12\x0f\n\x07\x65nv_var\x18\x03 \x01(\t\"I\n\x17ProviderProfileResponse\x12.\n\x07profile\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.ProviderProfile\"h\n\x1cListProviderProfilesResponse\x12/\n\x08profiles\x18\x01 \x03(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\xb2\x01\n\x1dImportProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x39\n\x08profiles\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileImportItem\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"\xa1\x01\n\x1eImportProviderProfilesResponse\x12<\n\x0b\x64iagnostics\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileDiagnostic\x12/\n\x08profiles\x18\x02 \x03(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x10\n\x08imported\x18\x03 \x01(\x08\"\xe0\x01\n\x1dUpdateProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x38\n\x07profile\x18\x01 \x01(\x0b\x32\'.openshell.v1.ProviderProfileImportItem\x12!\n\x19\x65xpected_resource_version\x18\x02 \x01(\x04\x12\n\n\x02id\x18\x03 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x9f\x01\n\x1eUpdateProviderProfilesResponse\x12<\n\x0b\x64iagnostics\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileDiagnostic\x12.\n\x07profile\x18\x02 \x01(\x0b\x32\x1d.openshell.v1.ProviderProfile\x12\x0f\n\x07updated\x18\x03 \x01(\x08\"\x9c\x01\n\x1bLintProviderProfilesRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x39\n\x08profiles\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileImportItem\"k\n\x1cLintProviderProfilesResponse\x12<\n\x0b\x64iagnostics\x18\x01 \x03(\x0b\x32\'.openshell.v1.ProviderProfileDiagnostic\x12\r\n\x05valid\x18\x02 \x01(\x08\"W\n\x16\x44\x65leteProviderResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\x99\x01\n\x1c\x44\x65leteProviderProfileRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\n\n\x02id\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"^\n\x1d\x44\x65leteProviderProfileResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"g\n$GetSandboxProviderEnvironmentRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12+\n#supports_static_credential_bindings\x18\x02 \x01(\x08\"K\n\x1fStaticCredentialEndpointBinding\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\x12\x0c\n\x04path\x18\x03 \x01(\t\"\x9c\x01\n\x17StaticCredentialBinding\x12@\n\tendpoints\x18\x01 \x03(\x0b\x32-.openshell.v1.StaticCredentialEndpointBinding\x12\x1b\n\x13\x63redential_identity\x18\x02 \x01(\t\x12\"\n\x1aworkload_credential_handle\x18\x03 \x01(\t\"\x9a\t\n%GetSandboxProviderEnvironmentResponse\x12_\n\x0b\x65nvironment\x18\x01 \x03(\x0b\x32\x44.openshell.v1.GetSandboxProviderEnvironmentResponse.EnvironmentEntryB\x04\x88\xb5\x18\x01\x12\x1d\n\x15provider_env_revision\x18\x02 \x01(\x04\x12w\n\x1b\x63redential_expiration_times\x18g \x03(\x0b\x32R.openshell.v1.GetSandboxProviderEnvironmentResponse.CredentialExpirationTimesEntry\x12h\n\x13\x64ynamic_credentials\x18\x04 \x03(\x0b\x32K.openshell.v1.GetSandboxProviderEnvironmentResponse.DynamicCredentialsEntry\x12u\n\x1astatic_credential_bindings\x18\x05 \x03(\x0b\x32Q.openshell.v1.GetSandboxProviderEnvironmentResponse.StaticCredentialBindingsEntry\x12#\n\x1bnon_secret_environment_keys\x18\x06 \x03(\t\x12!\n\x19provider_attachment_epoch\x18\x07 \x01(\t\x12\x13\n\x0bpolicy_hash\x18\x08 \x01(\t\x12?\n\x10readiness_reason\x18\t \x01(\x0e\x32%.openshell.v1.ProviderReadinessReason\x12M\n\x05\x66iles\x18\n \x03(\x0b\x32>.openshell.v1.GetSandboxProviderEnvironmentResponse.FilesEntry\x1a\x32\n\x10\x45nvironmentEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\\\n\x1e\x43redentialExpirationTimesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12)\n\x05value\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.Timestamp:\x02\x38\x01\x1a\x62\n\x17\x44ynamicCredentialsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x36\n\x05value\x18\x02 \x01(\x0b\x32\'.openshell.v1.ProviderProfileCredential:\x02\x38\x01\x1a\x66\n\x1dStaticCredentialBindingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x34\n\x05value\x18\x02 \x01(\x0b\x32%.openshell.v1.StaticCredentialBinding:\x02\x38\x01\x1a,\n\nFilesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x03\x10\x04R\x18\x63redential_expires_at_ms\"\x86\x01\n#ExchangeProviderSubjectTokenRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x10\n\x08provider\x18\x02 \x01(\t\x12\x16\n\x0e\x63redential_key\x18\x03 \x01(\t\x12!\n\x13supervisor_jwt_svid\x18\x04 \x01(\tB\x04\x88\xb5\x18\x01\"\x9a\x01\n$ExchangeProviderSubjectTokenResponse\x12\x1a\n\x0c\x61\x63\x63\x65ss_token\x18\x01 \x01(\tB\x04\x88\xb5\x18\x01\x12\x30\n\rexpires_after\x18\x66 \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x12\n\ntoken_type\x18\x03 \x01(\tJ\x04\x08\x02\x10\x03R\nexpires_in\"\x89\x04\n\x13UpdateConfigRequest\x12\x42\n\x0fworkspace_scope\x18\n \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x33\n\x06policy\x18\x02 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12\x13\n\x0bsetting_key\x18\x03 \x01(\t\x12\x39\n\rsetting_value\x18\x04 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue\x12\x16\n\x0e\x64\x65lete_setting\x18\x05 \x01(\x08\x12\x0e\n\x06global\x18\x06 \x01(\x08\x12<\n\x10merge_operations\x18\x07 \x03(\x0b\x32\".openshell.v1.PolicyMergeOperation\x12!\n\x19\x65xpected_resource_version\x18\x08 \x01(\x04\x12G\n\x0b\x61nnotations\x18\t \x03(\x0b\x32\x32.openshell.v1.UpdateConfigRequest.AnnotationsEntry\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x0b \x01(\t\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\xf7\x02\n\x14PolicyMergeOperation\x12\x30\n\x08\x61\x64\x64_rule\x18\x01 \x01(\x0b\x32\x1c.openshell.v1.AddNetworkRuleH\x00\x12>\n\x0fremove_endpoint\x18\x02 \x01(\x0b\x32#.openshell.v1.RemoveNetworkEndpointH\x00\x12\x36\n\x0bremove_rule\x18\x03 \x01(\x0b\x32\x1f.openshell.v1.RemoveNetworkRuleH\x00\x12\x34\n\x0e\x61\x64\x64_deny_rules\x18\x04 \x01(\x0b\x32\x1a.openshell.v1.AddDenyRulesH\x00\x12\x36\n\x0f\x61\x64\x64_allow_rules\x18\x05 \x01(\x0b\x32\x1b.openshell.v1.AddAllowRulesH\x00\x12:\n\rremove_binary\x18\x06 \x01(\x0b\x32!.openshell.v1.RemoveNetworkBinaryH\x00\x42\x0b\n\toperation\"Z\n\x0e\x41\x64\x64NetworkRule\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x35\n\x04rule\x18\x02 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule\"F\n\x15RemoveNetworkEndpoint\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\x0c\n\x04port\x18\x03 \x01(\r\"&\n\x11RemoveNetworkRule\x12\x11\n\trule_name\x18\x01 \x01(\t\"\xa5\x01\n\x0cL7RuleTarget\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\r\n\x05ports\x18\x03 \x03(\r\x12\x11\n\x04path\x18\x04 \x01(\tH\x00\x88\x01\x01\x12\x35\n\x08\x62inaries\x18\x05 \x03(\x0b\x32#.openshell.sandbox.v1.NetworkBinary\x12\x12\n\nany_binary\x18\x06 \x01(\x08\x42\x07\n\x05_path\"\x88\x01\n\x0c\x41\x64\x64\x44\x65nyRules\x12\x34\n\ndeny_rules\x18\x03 \x03(\x0b\x32 .openshell.sandbox.v1.L7DenyRule\x12*\n\x06target\x18\x04 \x01(\x0b\x32\x1a.openshell.v1.L7RuleTargetJ\x04\x08\x01\x10\x02J\x04\x08\x02\x10\x03R\x04hostR\x04port\"\x80\x01\n\rAddAllowRules\x12+\n\x05rules\x18\x03 \x03(\x0b\x32\x1c.openshell.sandbox.v1.L7Rule\x12*\n\x06target\x18\x04 \x01(\x0b\x32\x1a.openshell.v1.L7RuleTargetJ\x04\x08\x01\x10\x02J\x04\x08\x02\x10\x03R\x04hostR\x04port\"=\n\x13RemoveNetworkBinary\x12\x11\n\trule_name\x18\x01 \x01(\t\x12\x13\n\x0b\x62inary_path\x18\x02 \x01(\t\"\xe6\x01\n\x14UpdateConfigResponse\x12\x0f\n\x07version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12\x19\n\x11settings_revision\x18\x03 \x01(\x04\x12\x0f\n\x07\x64\x65leted\x18\x04 \x01(\x08\x12H\n\x0b\x61nnotations\x18\x05 \x03(\x0b\x32\x33.openshell.v1.UpdateConfigResponse.AnnotationsEntry\x1a\x32\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\x95\x01\n\x1dGetSandboxPolicyStatusRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07version\x18\x02 \x01(\r\x12\x0e\n\x06global\x18\x03 \x01(\x08\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"o\n\x1eGetSandboxPolicyStatusResponse\x12\x35\n\x08revision\x18\x01 \x01(\x0b\x32#.openshell.v1.SandboxPolicyRevision\x12\x16\n\x0e\x61\x63tive_version\x18\x02 \x01(\r\"\xa8\x01\n\x1aListSandboxPoliciesRequest\x12\x42\n\x0fworkspace_scope\x18\x05 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\x12\x0e\n\x06global\x18\x04 \x01(\x08\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"n\n\x1bListSandboxPoliciesResponse\x12\x36\n\trevisions\x18\x01 \x03(\x0b\x32#.openshell.v1.SandboxPolicyRevision\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x80\x01\n\x19ReportPolicyStatusRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x0f\n\x07version\x18\x02 \x01(\r\x12*\n\x06status\x18\x03 \x01(\x0e\x32\x1a.openshell.v1.PolicyStatus\x12\x12\n\nload_error\x18\x04 \x01(\t\"\x1c\n\x1aReportPolicyStatusResponse\"\xe2\x01\n\x1dSandboxConfigurationAdmission\x12\x13\n\x0binstance_id\x18\x01 \x01(\t\x12\x38\n\x05state\x18\x02 \x01(\x0e\x32).openshell.v1.ConfigurationAdmissionState\x12\x16\n\x0epolicy_version\x18\x03 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x04 \x01(\t\x12\x17\n\x0f\x63onfig_revision\x18\x05 \x01(\x04\x12\x1d\n\x15provider_env_revision\x18\x06 \x01(\x04\x12\r\n\x05\x65rror\x18\x07 \x01(\t\"\x95\x01\n!ReportSandboxConfigurationRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12>\n\tadmission\x18\x02 \x01(\x0b\x32+.openshell.v1.SandboxConfigurationAdmission\x12\x1c\n\x14\x65xpected_instance_id\x18\x03 \x01(\t\"$\n\"ReportSandboxConfigurationResponse\"\xba\x03\n\x15SandboxPolicyRevision\x12\x0f\n\x07version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12*\n\x06status\x18\x03 \x01(\x0e\x32\x1a.openshell.v1.PolicyStatus\x12\x12\n\nload_error\x18\x04 \x01(\t\x12\x30\n\x0c\x63reated_time\x18i \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0bloaded_time\x18j \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x33\n\x06policy\x18\x07 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12G\n\nprovenance\x18\x08 \x03(\x0b\x32\x33.openshell.v1.SandboxPolicyRevision.ProvenanceEntry\x1a\x31\n\x0fProvenanceEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01J\x04\x08\x05\x10\x06J\x04\x08\x06\x10\x07R\rcreated_at_msR\x0cloaded_at_ms\"\xdf\x01\n\x15GetSandboxLogsRequest\x12\x42\n\x0fworkspace_scope\x18\x06 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\r\n\x05lines\x18\x02 \x01(\r\x12.\n\nsince_time\x18g \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0f\n\x07sources\x18\x04 \x03(\t\x12\x11\n\tmin_level\x18\x05 \x01(\tJ\x04\x08\x03\x10\x04R\x08since_ms\"X\n\x16PushSandboxLogsRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12*\n\x04logs\x18\x02 \x03(\x0b\x32\x1c.openshell.v1.SandboxLogLine\"\x19\n\x17PushSandboxLogsResponse\"Z\n\x16GetSandboxLogsResponse\x12*\n\x04logs\x18\x01 \x03(\x0b\x32\x1c.openshell.v1.SandboxLogLine\x12\x14\n\x0c\x62uffer_total\x18\x02 \x01(\r\"\xf3\x01\n\x11SupervisorMessage\x12.\n\x05hello\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.SupervisorHelloH\x00\x12\x36\n\theartbeat\x18\x02 \x01(\x0b\x32!.openshell.v1.SupervisorHeartbeatH\x00\x12:\n\x11relay_open_result\x18\x03 \x01(\x0b\x32\x1d.openshell.v1.RelayOpenResultH\x00\x12/\n\x0brelay_close\x18\x04 \x01(\x0b\x32\x18.openshell.v1.RelayCloseH\x00\x42\t\n\x07payload\"\xe1\x02\n\x0eGatewayMessage\x12\x39\n\x10session_accepted\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.SessionAcceptedH\x00\x12\x39\n\x10session_rejected\x18\x02 \x01(\x0b\x32\x1d.openshell.v1.SessionRejectedH\x00\x12\x33\n\theartbeat\x18\x03 \x01(\x0b\x32\x1e.openshell.v1.GatewayHeartbeatH\x00\x12-\n\nrelay_open\x18\x04 \x01(\x0b\x32\x17.openshell.v1.RelayOpenH\x00\x12/\n\x0brelay_close\x18\x05 \x01(\x0b\x32\x18.openshell.v1.RelayCloseH\x00\x12\x39\n\x10session_redirect\x18\x06 \x01(\x0b\x32\x1d.openshell.v1.SessionRedirectH\x00\x42\t\n\x07payload\"\xb0\x01\n\x0fSupervisorHello\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0binstance_id\x18\x02 \x01(\t\x12\x18\n\x10\x63onnection_epoch\x18\x03 \x01(\x04\x12#\n\x1bsupports_provider_readiness\x18\x04 \x01(\x08\x12\x12\n\nredirected\x18\x05 \x01(\x08\x12!\n\x19supports_session_redirect\x18\x06 \x01(\x08\"{\n\x0fSessionAccepted\x12\x12\n\nsession_id\x18\x01 \x01(\t\x12\x35\n\x12heartbeat_interval\x18\x66 \x01(\x0b\x32\x19.google.protobuf.DurationJ\x04\x08\x02\x10\x03R\x17heartbeat_interval_secs\"!\n\x0fSessionRejected\x12\x0e\n\x06reason\x18\x01 \x01(\t\"B\n\x0fSessionRedirect\x12\x15\n\rpeer_endpoint\x18\x01 \x01(\t\x12\x18\n\x10owner_replica_id\x18\x02 \x01(\t\"\x15\n\x13SupervisorHeartbeat\"\x12\n\x10GatewayHeartbeat\"Z\n\x1cReportMainProcessExitRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0binstance_id\x18\x02 \x01(\t\x12\x11\n\texit_code\x18\x03 \x01(\x05\"\x1f\n\x1dReportMainProcessExitResponse\"I\n\x1e\x46inalizeMainProcessExitRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0binstance_id\x18\x02 \x01(\t\"!\n\x1f\x46inalizeMainProcessExitResponse\"\x97\x01\n\tRelayOpen\x12\x12\n\nchannel_id\x18\x01 \x01(\t\x12+\n\x03ssh\x18\x02 \x01(\x0b\x32\x1c.openshell.v1.SshRelayTargetH\x00\x12+\n\x03tcp\x18\x03 \x01(\x0b\x32\x1c.openshell.v1.TcpRelayTargetH\x00\x12\x12\n\nservice_id\x18\x05 \x01(\tB\x08\n\x06target\"\x10\n\x0eSshRelayTarget\",\n\x0eTcpRelayTarget\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\"\x1f\n\tRelayInit\x12\x12\n\nchannel_id\x18\x01 \x01(\t\"P\n\nRelayFrame\x12\'\n\x04init\x18\x01 \x01(\x0b\x32\x17.openshell.v1.RelayInitH\x00\x12\x0e\n\x04\x64\x61ta\x18\x02 \x01(\x0cH\x00\x42\t\n\x07payload\"n\n\rPeerRelayInit\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12+\n\nrelay_open\x18\x02 \x01(\x0b\x32\x17.openshell.v1.RelayOpen\x12\x1c\n\x14requester_replica_id\x18\x03 \x01(\t\"X\n\x0ePeerRelayFrame\x12+\n\x04init\x18\x01 \x01(\x0b\x32\x1b.openshell.v1.PeerRelayInitH\x00\x12\x0e\n\x04\x64\x61ta\x18\x02 \x01(\x0cH\x00\x42\t\n\x07payload\"E\n\x0fRelayOpenResult\x12\x12\n\nchannel_id\x18\x01 \x01(\t\x12\x0f\n\x07success\x18\x02 \x01(\x08\x12\r\n\x05\x65rror\x18\x03 \x01(\t\"0\n\nRelayClose\x12\x12\n\nchannel_id\x18\x01 \x01(\t\x12\x0e\n\x06reason\x18\x02 \x01(\t\"P\n\x0fL7RequestSample\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x10\n\x08\x64\x65\x63ision\x18\x03 \x01(\t\x12\r\n\x05\x63ount\x18\x04 \x01(\r\"\xfa\x03\n\rDenialSummary\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\x0c\n\x04port\x18\x03 \x01(\r\x12\x0e\n\x06\x62inary\x18\x04 \x01(\t\x12\x11\n\tancestors\x18\x05 \x03(\t\x12\x13\n\x0b\x64\x65ny_reason\x18\x06 \x01(\t\x12\x33\n\x0f\x66irst_seen_time\x18k \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0elast_seen_time\x18l \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\r\n\x05\x63ount\x18\t \x01(\r\x12\x18\n\x10suppressed_count\x18\n \x01(\r\x12\x13\n\x0btotal_count\x18\x0b \x01(\r\x12\x17\n\x0fsample_cmdlines\x18\x0c \x03(\t\x12\x15\n\rbinary_sha256\x18\r \x01(\t\x12\x12\n\npersistent\x18\x0e \x01(\x08\x12\x14\n\x0c\x64\x65nial_stage\x18\x0f \x01(\t\x12\x39\n\x12l7_request_samples\x18\x10 \x03(\x0b\x32\x1d.openshell.v1.L7RequestSample\x12\x1c\n\x14l7_inspection_active\x18\x11 \x01(\x08J\x04\x08\x07\x10\x08J\x04\x08\x08\x10\tR\rfirst_seen_msR\x0clast_seen_ms\"<\n\x10\x44\x65nialGroupCount\x12\x12\n\ndeny_group\x18\x01 \x01(\t\x12\x14\n\x0c\x64\x65nied_count\x18\x02 \x01(\r\"\x8f\x01\n\x16NetworkActivitySummary\x12\x1e\n\x16network_activity_count\x18\x01 \x01(\r\x12\x1b\n\x13\x64\x65nied_action_count\x18\x02 \x01(\r\x12\x38\n\x10\x64\x65nials_by_group\x18\x03 \x03(\x0b\x32\x1e.openshell.v1.DenialGroupCount\"\x8c\x07\n\x0bPolicyChunk\x12\n\n\x02id\x18\x01 \x01(\t\x12\x0e\n\x06status\x18\x02 \x01(\t\x12\x11\n\trule_name\x18\x03 \x01(\t\x12>\n\rproposed_rule\x18\x04 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule\x12\x11\n\trationale\x18\x05 \x01(\t\x12\x16\n\x0esecurity_notes\x18\x06 \x01(\t\x12\x12\n\nconfidence\x18\x07 \x01(\x02\x12\x1a\n\x12\x64\x65nial_summary_ids\x18\x08 \x03(\t\x12\x30\n\x0c\x63reated_time\x18m \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x30\n\x0c\x64\x65\x63ided_time\x18n \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\r\n\x05stage\x18\x0b \x01(\t\x12\x1b\n\x13supersedes_chunk_id\x18\x0c \x01(\t\x12\x11\n\thit_count\x18\r \x01(\x05\x12\x33\n\x0f\x66irst_seen_time\x18r \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x32\n\x0elast_seen_time\x18s \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06\x62inary\x18\x10 \x01(\t\x12\x19\n\x11validation_result\x18\x11 \x01(\t\x12\x18\n\x10rejection_reason\x18\x12 \x01(\t\x12\x19\n\x11\x61pplication_error\x18\x13 \x01(\t\x12\x14\n\x0creview_token\x18\x14 \x01(\t\x12%\n\x1d\x63urrent_effective_policy_hash\x18\x15 \x01(\t\x12\'\n\x1f\x63\x61ndidate_effective_policy_hash\x18\x16 \x01(\t\x12\x45\n\x18\x63urrent_effective_policy\x18\x17 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12G\n\x1a\x63\x61ndidate_effective_policy\x18\x18 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicyJ\x04\x08\t\x10\nJ\x04\x08\n\x10\x0bJ\x04\x08\x0e\x10\x0fJ\x04\x08\x0f\x10\x10R\rcreated_at_msR\rdecided_at_msR\rfirst_seen_msR\x0clast_seen_ms\"f\n\x11\x44raftPolicyUpdate\x12\x15\n\rdraft_version\x18\x01 \x01(\x04\x12\x12\n\nnew_chunks\x18\x02 \x01(\r\x12\x15\n\rtotal_pending\x18\x03 \x01(\r\x12\x0f\n\x07summary\x18\x04 \x01(\t\"\xb4\x02\n\x1bSubmitPolicyAnalysisRequest\x12\x42\n\x0fworkspace_scope\x18\x06 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12.\n\tsummaries\x18\x01 \x03(\x0b\x32\x1b.openshell.v1.DenialSummary\x12\x32\n\x0fproposed_chunks\x18\x02 \x03(\x0b\x32\x19.openshell.v1.PolicyChunk\x12\x15\n\ranalysis_mode\x18\x03 \x01(\t\x12\x0c\n\x04name\x18\x04 \x01(\t\x12H\n\x1anetwork_activity_summaries\x18\x05 \x03(\x0b\x32$.openshell.v1.NetworkActivitySummary\"\x87\x01\n\x1cSubmitPolicyAnalysisResponse\x12\x17\n\x0f\x61\x63\x63\x65pted_chunks\x18\x01 \x01(\r\x12\x17\n\x0frejected_chunks\x18\x02 \x01(\r\x12\x19\n\x11rejection_reasons\x18\x03 \x03(\t\x12\x1a\n\x12\x61\x63\x63\x65pted_chunk_ids\x18\x04 \x03(\t\"\x83\x01\n\x15GetDraftPolicyRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x15\n\rstatus_filter\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\xc6\x01\n\x16GetDraftPolicyResponse\x12)\n\x06\x63hunks\x18\x01 \x03(\x0b\x32\x19.openshell.v1.PolicyChunk\x12\x17\n\x0frolling_summary\x18\x02 \x01(\t\x12\x15\n\rdraft_version\x18\x03 \x01(\x04\x12\x36\n\x12last_analyzed_time\x18h \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x04\x10\x05R\x13last_analyzed_at_ms\"\xab\x01\n\x18\x41pproveDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12\x14\n\x0creview_token\x18\x04 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"H\n\x19\x41pproveDraftChunkResponse\x12\x16\n\x0epolicy_version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\"\xa4\x01\n\x17RejectDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12\x0e\n\x06reason\x18\x03 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x1a\n\x18RejectDraftChunkResponse\"<\n\x12\x44raftChunkApproval\x12\x10\n\x08\x63hunk_id\x18\x01 \x01(\t\x12\x14\n\x0creview_token\x18\x02 \x01(\t\"\xde\x01\n\x1c\x41pproveAllDraftChunksRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12 \n\x18include_security_flagged\x18\x02 \x01(\x08\x12\x33\n\tapprovals\x18\x03 \x03(\x0b\x32 .openshell.v1.DraftChunkApproval\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"}\n\x1d\x41pproveAllDraftChunksResponse\x12\x16\n\x0epolicy_version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12\x17\n\x0f\x63hunks_approved\x18\x03 \x01(\r\x12\x16\n\x0e\x63hunks_skipped\x18\x04 \x01(\r\"\xd2\x01\n\x15\x45\x64itDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x04 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12>\n\rproposed_rule\x18\x03 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x05 \x01(\t\"\x18\n\x16\x45\x64itDraftChunkResponse\"\x92\x01\n\x15UndoDraftChunkRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x10\n\x08\x63hunk_id\x18\x02 \x01(\t\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"E\n\x16UndoDraftChunkResponse\x12\x16\n\x0epolicy_version\x18\x01 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\"\x82\x01\n\x17\x43learDraftChunksRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"2\n\x18\x43learDraftChunksResponse\x12\x16\n\x0e\x63hunks_cleared\x18\x01 \x01(\r\"m\n\x16GetDraftHistoryRequest\x12\x42\n\x0fworkspace_scope\x18\x02 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0f\n\x07sandbox\x18\x01 \x01(\t\"\x92\x01\n\x11\x44raftHistoryEntry\x12.\n\nevent_time\x18\x65 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x12\n\nevent_type\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12\x10\n\x08\x63hunk_id\x18\x04 \x01(\tJ\x04\x08\x01\x10\x02R\x0ctimestamp_ms\"K\n\x17GetDraftHistoryResponse\x12\x30\n\x07\x65ntries\x18\x01 \x03(\x0b\x32\x1f.openshell.v1.DraftHistoryEntry\"\xab\x01\n\x16\x43reateWorkspaceRequest\x12\x0c\n\x04name\x18\x01 \x01(\t\x12@\n\x06labels\x18\x02 \x03(\x0b\x32\x30.openshell.v1.CreateWorkspaceRequest.LabelsEntry\x12\x12\n\nrequest_id\x18\x03 \x01(\t\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"O\n\x17\x43reateWorkspaceResponse\x12\x34\n\tworkspace\x18\x01 \x01(\x0b\x32!.openshell.datamodel.v1.Workspace\"#\n\x13GetWorkspaceRequest\x12\x0c\n\x04name\x18\x01 \x01(\t\"L\n\x14GetWorkspaceResponse\x12\x34\n\tworkspace\x18\x01 \x01(\x0b\x32!.openshell.datamodel.v1.Workspace\"V\n\x15ListWorkspacesRequest\x12\x11\n\tpage_size\x18\x01 \x01(\x05\x12\x12\n\npage_token\x18\x02 \x01(\t\x12\x16\n\x0elabel_selector\x18\x03 \x01(\t\"h\n\x16ListWorkspacesResponse\x12\x35\n\nworkspaces\x18\x01 \x03(\x0b\x32!.openshell.datamodel.v1.Workspace\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"Q\n\x16\x44\x65leteWorkspaceRequest\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rallow_missing\x18\x02 \x01(\x08\x12\x12\n\nrequest_id\x18\x03 \x01(\t\"X\n\x17\x44\x65leteWorkspaceResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07\x64\x65leted\"\x8d\x01\n\x0fWorkspaceMember\x12\x34\n\x08metadata\x18\x01 \x01(\x0b\x32\".openshell.datamodel.v1.ObjectMeta\x12\x19\n\x11principal_subject\x18\x02 \x01(\t\x12)\n\x04role\x18\x03 \x01(\x0e\x32\x1b.openshell.v1.WorkspaceRole\"\xb9\x01\n\x19\x41\x64\x64WorkspaceMemberRequest\x12\x42\n\x0fworkspace_scope\x18\x01 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x19\n\x11principal_subject\x18\x02 \x01(\t\x12)\n\x04role\x18\x03 \x01(\x0e\x32\x1b.openshell.v1.WorkspaceRole\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"K\n\x1a\x41\x64\x64WorkspaceMemberResponse\x12-\n\x06member\x18\x01 \x01(\x0b\x32\x1d.openshell.v1.WorkspaceMember\"\xa8\x01\n\x1cRemoveWorkspaceMemberRequest\x12\x42\n\x0fworkspace_scope\x18\x01 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x19\n\x11principal_subject\x18\x02 \x01(\t\x12\x15\n\rallow_missing\x18\x03 \x01(\x08\x12\x12\n\nrequest_id\x18\x04 \x01(\t\"^\n\x1dRemoveWorkspaceMemberResponse\x12.\n\x07outcome\x18\x02 \x01(\x0e\x32\x1d.openshell.v1.DeletionOutcomeJ\x04\x08\x01\x10\x02R\x07removed\"\x88\x01\n\x1bListWorkspaceMembersRequest\x12\x42\n\x0fworkspace_scope\x18\x01 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\"g\n\x1cListWorkspaceMembersResponse\x12.\n\x07members\x18\x01 \x03(\x0b\x32\x1d.openshell.v1.WorkspaceMember\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x91\x01\n\x1a\x45xtensionServiceCredential\x12\x14\n\x0cservice_name\x18\x01 \x01(\t\x12\x13\n\x05token\x18\x02 \x01(\tB\x04\x88\xb5\x18\x01\x12\x33\n\x0f\x65xpiration_time\x18g \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x03\x10\x04R\rexpires_at_ms\"X\n\x13\x45ndpointObservation\x12\x13\n\x0b\x65ndpoint_id\x18\x01 \x01(\t\x12,\n\x06result\x18\x02 \x01(\x0e\x32\x1c.openshell.v1.EndpointResult\"\xf5\x01\n\x1bReportEndpointStatusRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\x12\x13\n\x0bpolicy_hash\x18\x02 \x01(\t\x12\x1d\n\x15provider_env_revision\x18\x03 \x01(\x04\x12\x37\n\x0cobservations\x18\x04 \x03(\x0b\x32!.openshell.v1.EndpointObservation\x12\x1d\n\x15observed_endpoint_ids\x18\x05 \x03(\t\x12\x1d\n\x15supervisor_session_id\x18\x06 \x01(\t\x12\x17\n\x0freport_sequence\x18\x07 \x01(\x04\"\x1e\n\x1cReportEndpointStatusResponse\"\xd3\x01\n\x0e\x45ndpointStatus\x12\x13\n\x0b\x65ndpoint_id\x18\x01 \x01(\t\x12\x0c\n\x04host\x18\x02 \x01(\t\x12\r\n\x05ports\x18\x03 \x03(\r\x12\x0c\n\x04path\x18\x04 \x01(\t\x12\x31\n\x0blast_result\x18\x05 \x01(\x0e\x32\x1c.openshell.v1.EndpointResult\x12\x36\n\x12last_reported_time\x18j \x01(\x0b\x32\x1a.google.protobuf.TimestampJ\x04\x08\x06\x10\x07R\x10last_reported_at\"\xbb\x05\n\x13SandboxProvisioning\x12\x12\n\nattempt_id\x18\x01 \x01(\t\x12\x1f\n\x17\x63onfiguration_change_id\x18\x02 \x01(\t\x12=\n\x19\x63onfiguration_change_time\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x38\n\x14\x66irst_rejection_time\x18\x04 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12,\n\x08\x64\x65\x61\x64line\x18\x05 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x30\n\x0ctimeout_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12:\n\x16\x63leanup_completed_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x15\n\rcleanup_error\x18\x08 \x01(\t\x12\x36\n\x12\x63leanup_retry_time\x18\t \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x1c\n\x14\x61ttachment_change_id\x18\n \x01(\t\x12:\n\x16\x61ttachment_change_time\x18\x0b \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x38\n\x14preparation_deadline\x18\x0c \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x38\n\x14\x61\x64mission_start_time\x18\r \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12 \n\x18\x64river_operation_pending\x18\x0e \x01(\x08\x12\x1b\n\x13\x64river_operation_id\x18\x0f \x01(\t\"\x82\x01\n\x16SandboxServiceExposure\x12\x0f\n\x07service\x18\x01 \x01(\t\x12\x13\n\x0btarget_port\x18\x02 \x01(\r\x12\x42\n\x12\x61uthorization_mode\x18\x03 \x01(\x0e\x32&.openshell.v1.ServiceAuthorizationMode*\xca\x01\n\rExtensionKind\x12\x1e\n\x1a\x45XTENSION_KIND_UNSPECIFIED\x10\x00\x12!\n\x1d\x45XTENSION_KIND_COMPUTE_DRIVER\x10\x01\x12$\n EXTENSION_KIND_CREDENTIAL_DRIVER\x10\x02\x12&\n\"EXTENSION_KIND_GATEWAY_INTERCEPTOR\x10\x03\x12(\n$EXTENSION_KIND_SUPERVISOR_MIDDLEWARE\x10\x04*\xc6\x02\n\x0cSandboxPhase\x12\x1d\n\x19SANDBOX_PHASE_UNSPECIFIED\x10\x00\x12\x1e\n\x1aSANDBOX_PHASE_PROVISIONING\x10\x01\x12\x17\n\x13SANDBOX_PHASE_READY\x10\x02\x12\x17\n\x13SANDBOX_PHASE_ERROR\x10\x03\x12\x1a\n\x16SANDBOX_PHASE_DELETING\x10\x04\x12\x19\n\x15SANDBOX_PHASE_UNKNOWN\x10\x05\x12\x1a\n\x16SANDBOX_PHASE_STOPPING\x10\x06\x12\x19\n\x15SANDBOX_PHASE_STOPPED\x10\x07\x12\x1a\n\x16SANDBOX_PHASE_STARTING\x10\x08\x12\x1b\n\x17SANDBOX_PHASE_COMPLETED\x10\t\"\x04\x08\n\x10\n*\x18SANDBOX_PHASE_RESTARTING*\xcb\x01\n\x14ProviderMutationKind\x12&\n\"PROVIDER_MUTATION_KIND_UNSPECIFIED\x10\x00\x12!\n\x1dPROVIDER_MUTATION_KIND_ATTACH\x10\x01\x12!\n\x1dPROVIDER_MUTATION_KIND_DETACH\x10\x02\x12!\n\x1dPROVIDER_MUTATION_KIND_UPDATE\x10\x03\x12\"\n\x1ePROVIDER_MUTATION_KIND_OBSERVE\x10\x04*\xcf\x02\n\x16ProviderReadinessState\x12(\n$PROVIDER_READINESS_STATE_UNSPECIFIED\x10\x00\x12&\n\"PROVIDER_READINESS_STATE_PERSISTED\x10\x01\x12$\n PROVIDER_READINESS_STATE_PENDING\x10\x02\x12\"\n\x1ePROVIDER_READINESS_STATE_READY\x10\x03\x12%\n!PROVIDER_READINESS_STATE_WITHHELD\x10\x04\x12$\n PROVIDER_READINESS_STATE_REVOKED\x10\x05\x12#\n\x1fPROVIDER_READINESS_STATE_FAILED\x10\x06\x12\'\n#PROVIDER_READINESS_STATE_SUPERSEDED\x10\x07*\xda\x06\n\x17ProviderReadinessReason\x12)\n%PROVIDER_READINESS_REASON_UNSPECIFIED\x10\x00\x12\x34\n0PROVIDER_READINESS_REASON_WAITING_FOR_SUPERVISOR\x10\x01\x12\x35\n1PROVIDER_READINESS_REASON_WAITING_FOR_CREDENTIALS\x10\x02\x12\x30\n,PROVIDER_READINESS_REASON_WAITING_FOR_POLICY\x10\x03\x12\x31\n-PROVIDER_READINESS_REASON_WAITING_FOR_PROCESS\x10\x04\x12\x34\n0PROVIDER_READINESS_REASON_UNSUPPORTED_SUPERVISOR\x10\x05\x12\x32\n.PROVIDER_READINESS_REASON_CREDENTIALS_WITHHELD\x10\x06\x12\x37\n3PROVIDER_READINESS_REASON_CREDENTIAL_INSTALL_FAILED\x10\x07\x12\x36\n2PROVIDER_READINESS_REASON_POLICY_ACTIVATION_FAILED\x10\x08\x12\x34\n0PROVIDER_READINESS_REASON_PROCESS_INSTALL_FAILED\x10\t\x12\x35\n1PROVIDER_READINESS_REASON_SUPERVISOR_DISCONNECTED\x10\n\x12\x36\n2PROVIDER_READINESS_REASON_SUPERVISOR_LEASE_EXPIRED\x10\x0b\x12\x33\n/PROVIDER_READINESS_REASON_DESIRED_STATE_CHANGED\x10\x0c\x12\x30\n,PROVIDER_READINESS_REASON_CREDENTIAL_EXPIRED\x10\r\x12*\n&PROVIDER_READINESS_REASON_LOCAL_POLICY\x10\x0e\x12/\n+PROVIDER_READINESS_REASON_SNAPSHOT_MISMATCH\x10\x0f*\x83\x01\n\x0f\x43onfigComponent\x12 \n\x1c\x43ONFIG_COMPONENT_UNSPECIFIED\x10\x00\x12#\n\x1f\x43ONFIG_COMPONENT_SANDBOX_CONFIG\x10\x01\x12)\n%CONFIG_COMPONENT_PROVIDER_ENVIRONMENT\x10\x02*\x8d\x03\n\x12\x43onfigApplyOutcome\x12$\n CONFIG_APPLY_OUTCOME_UNSPECIFIED\x10\x00\x12 \n\x1c\x43ONFIG_APPLY_OUTCOME_APPLIED\x10\x01\x12*\n&CONFIG_APPLY_OUTCOME_IGNORED_DUPLICATE\x10\x02\x12&\n\"CONFIG_APPLY_OUTCOME_IGNORED_STALE\x10\x03\x12\x30\n,CONFIG_APPLY_OUTCOME_RETAINED_LOCAL_OVERRIDE\x10\x04\x12!\n\x1d\x43ONFIG_APPLY_OUTCOME_DEGRADED\x10\x05\x12\x38\n4CONFIG_APPLY_OUTCOME_FAILED_RETAINED_LAST_KNOWN_GOOD\x10\x06\x12&\n\"CONFIG_APPLY_OUTCOME_FAILED_CLOSED\x10\x07\x12$\n CONFIG_APPLY_OUTCOME_UNSUPPORTED\x10\x08*\xd2\x02\n\x1a\x43onfigUpdateOperationState\x12-\n)CONFIG_UPDATE_OPERATION_STATE_UNSPECIFIED\x10\x00\x12)\n%CONFIG_UPDATE_OPERATION_STATE_PENDING\x10\x01\x12)\n%CONFIG_UPDATE_OPERATION_STATE_APPLIED\x10\x02\x12*\n&CONFIG_UPDATE_OPERATION_STATE_INACTIVE\x10\x03\x12(\n$CONFIG_UPDATE_OPERATION_STATE_FAILED\x10\x04\x12,\n(CONFIG_UPDATE_OPERATION_STATE_SUPERSEDED\x10\x05\x12+\n\'CONFIG_UPDATE_OPERATION_STATE_CANCELLED\x10\x06*\xce\x01\n ProviderCredentialTokenGrantType\x12\x34\n0PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_UNSPECIFIED\x10\x00\x12;\n7PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_CLIENT_CREDENTIALS\x10\x01\x12\x37\n3PROVIDER_CREDENTIAL_TOKEN_GRANT_TYPE_TOKEN_EXCHANGE\x10\x02*\xc3\x03\n!ProviderCredentialRefreshStrategy\x12\x34\n0PROVIDER_CREDENTIAL_REFRESH_STRATEGY_UNSPECIFIED\x10\x00\x12/\n+PROVIDER_CREDENTIAL_REFRESH_STRATEGY_STATIC\x10\x01\x12\x31\n-PROVIDER_CREDENTIAL_REFRESH_STRATEGY_EXTERNAL\x10\x02\x12=\n9PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_REFRESH_TOKEN\x10\x03\x12\x42\n>PROVIDER_CREDENTIAL_REFRESH_STRATEGY_OAUTH2_CLIENT_CREDENTIALS\x10\x04\x12\x43\n?PROVIDER_CREDENTIAL_REFRESH_STRATEGY_GOOGLE_SERVICE_ACCOUNT_JWT\x10\x05\x12<\n8PROVIDER_CREDENTIAL_REFRESH_STRATEGY_AWS_STS_ASSUME_ROLE\x10\x06*\xdb\x02\n\x17ProviderProfileCategory\x12)\n%PROVIDER_PROFILE_CATEGORY_UNSPECIFIED\x10\x00\x12#\n\x1fPROVIDER_PROFILE_CATEGORY_OTHER\x10\x01\x12\'\n#PROVIDER_PROFILE_CATEGORY_INFERENCE\x10\x02\x12#\n\x1fPROVIDER_PROFILE_CATEGORY_AGENT\x10\x03\x12,\n(PROVIDER_PROFILE_CATEGORY_SOURCE_CONTROL\x10\x04\x12\'\n#PROVIDER_PROFILE_CATEGORY_MESSAGING\x10\x05\x12\"\n\x1ePROVIDER_PROFILE_CATEGORY_DATA\x10\x06\x12\'\n#PROVIDER_PROFILE_CATEGORY_KNOWLEDGE\x10\x07*\xcf\x01\n\x1b\x43onfigurationAdmissionState\x12-\n)CONFIGURATION_ADMISSION_STATE_UNSPECIFIED\x10\x00\x12)\n%CONFIGURATION_ADMISSION_STATE_PENDING\x10\x01\x12*\n&CONFIGURATION_ADMISSION_STATE_ACCEPTED\x10\x02\x12*\n&CONFIGURATION_ADMISSION_STATE_REJECTED\x10\x03*\x9a\x01\n\x0cPolicyStatus\x12\x1d\n\x19POLICY_STATUS_UNSPECIFIED\x10\x00\x12\x19\n\x15POLICY_STATUS_PENDING\x10\x01\x12\x18\n\x14POLICY_STATUS_LOADED\x10\x02\x12\x18\n\x14POLICY_STATUS_FAILED\x10\x03\x12\x1c\n\x18POLICY_STATUS_SUPERSEDED\x10\x04*\x86\x01\n\rServiceStatus\x12\x1e\n\x1aSERVICE_STATUS_UNSPECIFIED\x10\x00\x12\x1a\n\x16SERVICE_STATUS_HEALTHY\x10\x01\x12\x1b\n\x17SERVICE_STATUS_DEGRADED\x10\x02\x12\x1c\n\x18SERVICE_STATUS_UNHEALTHY\x10\x03*b\n\rWorkspaceRole\x12\x1e\n\x1aWORKSPACE_ROLE_UNSPECIFIED\x10\x00\x12\x17\n\x13WORKSPACE_ROLE_USER\x10\x01\x12\x18\n\x14WORKSPACE_ROLE_ADMIN\x10\x02*\xda\x02\n\'ProviderCredentialRefreshRecoveryAction\x12;\n7PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_UNSPECIFIED\x10\x00\x12\x35\n1PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_RETRY\x10\x01\x12;\n7PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_REAUTHORIZE\x10\x02\x12\x41\n=PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_FIX_CONFIGURATION\x10\x03\x12;\n7PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_INVESTIGATE\x10\x04*\xaa\x01\n\x14SandboxRestartPolicy\x12&\n\"SANDBOX_RESTART_POLICY_UNSPECIFIED\x10\x00\x12 \n\x1cSANDBOX_RESTART_POLICY_NEVER\x10\x01\x12%\n!SANDBOX_RESTART_POLICY_ON_FAILURE\x10\x02\x12!\n\x1dSANDBOX_RESTART_POLICY_ALWAYS\x10\x03*\x97\x01\n\x0f\x44\x65letionOutcome\x12 \n\x1c\x44\x45LETION_OUTCOME_UNSPECIFIED\x10\x00\x12\x1e\n\x1a\x44\x45LETION_OUTCOME_COMPLETED\x10\x01\x12\x1d\n\x19\x44\x45LETION_OUTCOME_ACCEPTED\x10\x02\x12#\n\x1f\x44\x45LETION_OUTCOME_ALREADY_ABSENT\x10\x03*\xc3\x02\n\x0e\x45ndpointResult\x12\x1f\n\x1b\x45NDPOINT_RESULT_UNSPECIFIED\x10\x00\x12(\n$ENDPOINT_RESULT_NO_OBSERVED_EXCHANGE\x10\x01\x12*\n&ENDPOINT_RESULT_HTTP_RESPONSE_RECEIVED\x10\x02\x12!\n\x1d\x45NDPOINT_RESULT_POLICY_DENIED\x10\x03\x12*\n&ENDPOINT_RESULT_CREDENTIAL_UNAVAILABLE\x10\x04\x12\x1e\n\x1a\x45NDPOINT_RESULT_TLS_FAILED\x10\x05\x12$\n ENDPOINT_RESULT_TRANSPORT_FAILED\x10\x06\x12%\n!ENDPOINT_RESULT_UPSTREAM_REJECTED\x10\x07*\x9f\x01\n\x18ServiceAuthorizationMode\x12*\n&SERVICE_AUTHORIZATION_MODE_UNSPECIFIED\x10\x00\x12$\n SERVICE_AUTHORIZATION_MODE_STRIP\x10\x01\x12\x31\n-SERVICE_AUTHORIZATION_MODE_BEARER_PASSTHROUGH\x10\x02\x32\xafU\n\tOpenShell\x12Z\n\x06Health\x12\x1b.openshell.v1.HealthRequest\x1a\x1c.openshell.v1.HealthResponse\"\x15\x82\xb5\x18\x11\n\x0funauthenticated\x12i\n\x0eGetCurrentUser\x12#.openshell.v1.GetCurrentUserRequest\x1a$.openshell.v1.GetCurrentUserResponse\"\x0c\x82\xb5\x18\x08\n\x06\x62\x65\x61rer\x12\x86\x01\n\x0eGetGatewayInfo\x12#.openshell.v1.GetGatewayInfoRequest\x1a$.openshell.v1.GetGatewayInfoResponse\")\x82\xb5\x18%\n\x06\x62\x65\x61rer\x1a\x0eplatform_admin\"\x0b\x63onfig:read\x12u\n\rCreateSandbox\x12\".openshell.v1.CreateSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x93\x01\n\x15\x42\x65ginRootfsTarStaging\x12*.openshell.v1.BeginRootfsTarStagingRequest\x1a+.openshell.v1.BeginRootfsTarStagingResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12n\n\nGetSandbox\x12\x1f.openshell.v1.GetSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12z\n\rListSandboxes\x12\".openshell.v1.ListSandboxesRequest\x1a#.openshell.v1.ListSandboxesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x8e\x01\n\x15\x43reateSandboxTemplate\x12*.openshell.v1.CreateSandboxTemplateRequest\x1a%.openshell.v1.SandboxTemplateResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\rsandbox:write\x12\x86\x01\n\x12GetSandboxTemplate\x12\'.openshell.v1.GetSandboxTemplateRequest\x1a%.openshell.v1.SandboxTemplateResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x8f\x01\n\x14ListSandboxTemplates\x12).openshell.v1.ListSandboxTemplatesRequest\x1a*.openshell.v1.ListSandboxTemplatesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x94\x01\n\x15\x44\x65leteSandboxTemplate\x12*.openshell.v1.DeleteSandboxTemplateRequest\x1a+.openshell.v1.DeleteSandboxTemplateResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\rsandbox:write\x12\x8f\x01\n\x14ListSandboxProviders\x12).openshell.v1.ListSandboxProvidersRequest\x1a*.openshell.v1.ListSandboxProvidersResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x93\x01\n\x15\x41ttachSandboxProvider\x12*.openshell.v1.AttachSandboxProviderRequest\x1a+.openshell.v1.AttachSandboxProviderResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x93\x01\n\x15\x44\x65tachSandboxProvider\x12*.openshell.v1.DetachSandboxProviderRequest\x1a+.openshell.v1.DetachSandboxProviderResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x9b\x01\n\x18GetSandboxProviderStatus\x12-.openshell.v1.GetSandboxProviderStatusRequest\x1a..openshell.v1.GetSandboxProviderStatusResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12{\n\rDeleteSandbox\x12\".openshell.v1.DeleteSandboxRequest\x1a#.openshell.v1.DeleteSandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12q\n\x0bStopSandbox\x12 .openshell.v1.StopSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12s\n\x0cStartSandbox\x12!.openshell.v1.StartSandboxRequest\x1a\x1d.openshell.v1.SandboxResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x84\x01\n\x10\x43reateSshSession\x12%.openshell.v1.CreateSshSessionRequest\x1a&.openshell.v1.CreateSshSessionResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12}\n\rExposeService\x12\".openshell.v1.ExposeServiceRequest\x1a%.openshell.v1.ServiceEndpointResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12v\n\nGetService\x12\x1f.openshell.v1.GetServiceRequest\x1a%.openshell.v1.ServiceEndpointResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12w\n\x0cListServices\x12!.openshell.v1.ListServicesRequest\x1a\".openshell.v1.ListServicesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12{\n\rDeleteService\x12\".openshell.v1.DeleteServiceRequest\x1a#.openshell.v1.DeleteServiceResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12\x84\x01\n\x10RevokeSshSession\x12%.openshell.v1.RevokeSshSessionRequest\x1a&.openshell.v1.RevokeSshSessionResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write\x12t\n\x0b\x45xecSandbox\x12 .openshell.v1.ExecSandboxRequest\x1a\x1e.openshell.v1.ExecSandboxEvent\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write0\x01\x12q\n\nForwardTcp\x12\x1d.openshell.v1.TcpForwardFrame\x1a\x1d.openshell.v1.TcpForwardFrame\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write(\x01\x30\x01\x12\x7f\n\x16\x45xecSandboxInteractive\x12\x1e.openshell.v1.ExecSandboxInput\x1a\x1e.openshell.v1.ExecSandboxEvent\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rsandbox:write(\x01\x30\x01\x12z\n\x0e\x43reateProvider\x12#.openshell.v1.CreateProviderRequest\x1a\x1e.openshell.v1.ProviderResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12r\n\x0bGetProvider\x12 .openshell.v1.GetProviderRequest\x1a\x1e.openshell.v1.ProviderResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12{\n\rListProviders\x12\".openshell.v1.ListProvidersRequest\x1a#.openshell.v1.ListProvidersResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x90\x01\n\x14ListProviderProfiles\x12).openshell.v1.ListProviderProfilesRequest\x1a*.openshell.v1.ListProviderProfilesResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x87\x01\n\x12GetProviderProfile\x12\'.openshell.v1.GetProviderProfileRequest\x1a%.openshell.v1.ProviderProfileResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x98\x01\n\x16ImportProviderProfiles\x12+.openshell.v1.ImportProviderProfilesRequest\x1a,.openshell.v1.ImportProviderProfilesResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x98\x01\n\x16UpdateProviderProfiles\x12+.openshell.v1.UpdateProviderProfilesRequest\x1a,.openshell.v1.UpdateProviderProfilesResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x90\x01\n\x14LintProviderProfiles\x12).openshell.v1.LintProviderProfilesRequest\x1a*.openshell.v1.LintProviderProfilesResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12z\n\x0eUpdateProvider\x12#.openshell.v1.UpdateProviderRequest\x1a\x1e.openshell.v1.ProviderResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x9c\x01\n\x18GetProviderRefreshStatus\x12-.openshell.v1.GetProviderRefreshStatusRequest\x1a..openshell.v1.GetProviderRefreshStatusResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x04user\"\rprovider:read\x12\x9e\x01\n\x18\x43onfigureProviderRefresh\x12-.openshell.v1.ConfigureProviderRefreshRequest\x1a..openshell.v1.ConfigureProviderRefreshResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x9e\x01\n\x18RotateProviderCredential\x12-.openshell.v1.RotateProviderCredentialRequest\x1a..openshell.v1.RotateProviderCredentialResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x95\x01\n\x15\x44\x65leteProviderRefresh\x12*.openshell.v1.DeleteProviderRefreshRequest\x1a+.openshell.v1.DeleteProviderRefreshResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x80\x01\n\x0e\x44\x65leteProvider\x12#.openshell.v1.DeleteProviderRequest\x1a$.openshell.v1.DeleteProviderResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x95\x01\n\x15\x44\x65leteProviderProfile\x12*.openshell.v1.DeleteProviderProfileRequest\x1a+.openshell.v1.DeleteProviderProfileResponse\"#\x82\xb5\x18\x1f\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0eprovider:write\x12\x90\x01\n\x10GetSandboxConfig\x12-.openshell.sandbox.v1.GetSandboxConfigRequest\x1a..openshell.sandbox.v1.GetSandboxConfigResponse\"\x1d\x82\xb5\x18\x19\n\x04\x64ual\x12\x04user\"\x0b\x63onfig:read\x12\x8c\x01\n\x10GetGatewayConfig\x12-.openshell.sandbox.v1.GetGatewayConfigRequest\x1a..openshell.sandbox.v1.GetGatewayConfigResponse\"\x19\x82\xb5\x18\x15\n\x06\x62\x65\x61rer\"\x0b\x63onfig:read\x12v\n\x0cUpdateConfig\x12!.openshell.v1.UpdateConfigRequest\x1a\".openshell.v1.UpdateConfigResponse\"\x1f\x82\xb5\x18\x1b\n\x04\x64ual\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x95\x01\n\x16GetSandboxPolicyStatus\x12+.openshell.v1.GetSandboxPolicyStatusRequest\x1a,.openshell.v1.GetSandboxPolicyStatusResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12\x8c\x01\n\x13ListSandboxPolicies\x12(.openshell.v1.ListSandboxPoliciesRequest\x1a).openshell.v1.ListSandboxPoliciesResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12v\n\x12ReportPolicyStatus\x12\'.openshell.v1.ReportPolicyStatusRequest\x1a(.openshell.v1.ReportPolicyStatusResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12|\n\x14ReportEndpointStatus\x12).openshell.v1.ReportEndpointStatusRequest\x1a*.openshell.v1.ReportEndpointStatusResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x85\x01\n\x17ReportProviderReadiness\x12,.openshell.v1.ReportProviderReadinessRequest\x1a-.openshell.v1.ReportProviderReadinessResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x8e\x01\n\x1aReportSandboxConfiguration\x12/.openshell.v1.ReportSandboxConfigurationRequest\x1a\x30.openshell.v1.ReportSandboxConfigurationResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x97\x01\n\x1dGetSandboxProviderEnvironment\x12\x32.openshell.v1.GetSandboxProviderEnvironmentRequest\x1a\x33.openshell.v1.GetSandboxProviderEnvironmentResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x94\x01\n\x1c\x45xchangeProviderSubjectToken\x12\x31.openshell.v1.ExchangeProviderSubjectTokenRequest\x1a\x32.openshell.v1.ExchangeProviderSubjectTokenResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12}\n\x0eGetSandboxLogs\x12#.openshell.v1.GetSandboxLogsRequest\x1a$.openshell.v1.GetSandboxLogsResponse\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read\x12o\n\x0fPushSandboxLogs\x12$.openshell.v1.PushSandboxLogsRequest\x1a%.openshell.v1.PushSandboxLogsResponse\"\r\x82\xb5\x18\t\n\x07sandbox(\x01\x12\x65\n\x11\x43onnectSupervisor\x12\x1f.openshell.v1.SupervisorMessage\x1a\x1c.openshell.v1.GatewayMessage\"\r\x82\xb5\x18\t\n\x07sandbox(\x01\x30\x01\x12\x7f\n\x15ReportMainProcessExit\x12*.openshell.v1.ReportMainProcessExitRequest\x1a+.openshell.v1.ReportMainProcessExitResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x85\x01\n\x17\x46inalizeMainProcessExit\x12,.openshell.v1.FinalizeMainProcessExitRequest\x1a-.openshell.v1.FinalizeMainProcessExitResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12T\n\x0bRelayStream\x12\x18.openshell.v1.RelayFrame\x1a\x18.openshell.v1.RelayFrame\"\r\x82\xb5\x18\t\n\x07sandbox(\x01\x30\x01\x12W\n\tPeerRelay\x12\x1c.openshell.v1.PeerRelayFrame\x1a\x1c.openshell.v1.PeerRelayFrame\"\n\x82\xb5\x18\x06\n\x04peer(\x01\x30\x01\x12\x86\x01\n\x1bPeerReportProviderReadiness\x12,.openshell.v1.ReportProviderReadinessRequest\x1a-.openshell.v1.ReportProviderReadinessResponse\"\n\x82\xb5\x18\x06\n\x04peer\x12}\n\x18PeerReportEndpointStatus\x12).openshell.v1.ReportEndpointStatusRequest\x1a*.openshell.v1.ReportEndpointStatusResponse\"\n\x82\xb5\x18\x06\n\x04peer\x12\x89\x01\n\x1cPeerGetSandboxProviderStatus\x12-.openshell.v1.GetSandboxProviderStatusRequest\x1a..openshell.v1.GetSandboxProviderStatusResponse\"\n\x82\xb5\x18\x06\n\x04peer\x12w\n\x0cWatchSandbox\x12!.openshell.v1.WatchSandboxRequest\x1a .openshell.v1.SandboxStreamEvent\" \x82\xb5\x18\x1c\n\x06\x62\x65\x61rer\x12\x04user\"\x0csandbox:read0\x01\x12|\n\x14SubmitPolicyAnalysis\x12).openshell.v1.SubmitPolicyAnalysisRequest\x1a*.openshell.v1.SubmitPolicyAnalysisResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12z\n\x0eGetDraftPolicy\x12#.openshell.v1.GetDraftPolicyRequest\x1a$.openshell.v1.GetDraftPolicyResponse\"\x1d\x82\xb5\x18\x19\n\x04\x64ual\x12\x04user\"\x0b\x63onfig:read\x12\x87\x01\n\x11\x41pproveDraftChunk\x12&.openshell.v1.ApproveDraftChunkRequest\x1a\'.openshell.v1.ApproveDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x84\x01\n\x10RejectDraftChunk\x12%.openshell.v1.RejectDraftChunkRequest\x1a&.openshell.v1.RejectDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x93\x01\n\x15\x41pproveAllDraftChunks\x12*.openshell.v1.ApproveAllDraftChunksRequest\x1a+.openshell.v1.ApproveAllDraftChunksResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12~\n\x0e\x45\x64itDraftChunk\x12#.openshell.v1.EditDraftChunkRequest\x1a$.openshell.v1.EditDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12~\n\x0eUndoDraftChunk\x12#.openshell.v1.UndoDraftChunkRequest\x1a$.openshell.v1.UndoDraftChunkResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x84\x01\n\x10\x43learDraftChunks\x12%.openshell.v1.ClearDraftChunksRequest\x1a&.openshell.v1.ClearDraftChunksResponse\"!\x82\xb5\x18\x1d\n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0c\x63onfig:write\x12\x7f\n\x0fGetDraftHistory\x12$.openshell.v1.GetDraftHistoryRequest\x1a%.openshell.v1.GetDraftHistoryResponse\"\x1f\x82\xb5\x18\x1b\n\x06\x62\x65\x61rer\x12\x04user\"\x0b\x63onfig:read\x12s\n\x11IssueSandboxToken\x12&.openshell.v1.IssueSandboxTokenRequest\x1a\'.openshell.v1.IssueSandboxTokenResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12y\n\x13RefreshSandboxToken\x12(.openshell.v1.RefreshSandboxTokenRequest\x1a).openshell.v1.RefreshSandboxTokenResponse\"\r\x82\xb5\x18\t\n\x07sandbox\x12\x8d\x01\n\x0f\x43reateWorkspace\x12$.openshell.v1.CreateWorkspaceRequest\x1a%.openshell.v1.CreateWorkspaceResponse\"-\x82\xb5\x18)\n\x06\x62\x65\x61rer\x1a\x0eplatform_admin\"\x0fworkspace:write\x12y\n\x0cGetWorkspace\x12!.openshell.v1.GetWorkspaceRequest\x1a\".openshell.v1.GetWorkspaceResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x04user\"\x0eworkspace:read\x12\x7f\n\x0eListWorkspaces\x12#.openshell.v1.ListWorkspacesRequest\x1a$.openshell.v1.ListWorkspacesResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x04user\"\x0eworkspace:read\x12\x8d\x01\n\x0f\x44\x65leteWorkspace\x12$.openshell.v1.DeleteWorkspaceRequest\x1a%.openshell.v1.DeleteWorkspaceResponse\"-\x82\xb5\x18)\n\x06\x62\x65\x61rer\x1a\x0eplatform_admin\"\x0fworkspace:write\x12\x8d\x01\n\x12\x41\x64\x64WorkspaceMember\x12\'.openshell.v1.AddWorkspaceMemberRequest\x1a(.openshell.v1.AddWorkspaceMemberResponse\"$\x82\xb5\x18 \n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0fworkspace:write\x12\x96\x01\n\x15RemoveWorkspaceMember\x12*.openshell.v1.RemoveWorkspaceMemberRequest\x1a+.openshell.v1.RemoveWorkspaceMemberResponse\"$\x82\xb5\x18 \n\x06\x62\x65\x61rer\x12\x05\x61\x64min\"\x0fworkspace:write\x12\x91\x01\n\x14ListWorkspaceMembers\x12).openshell.v1.ListWorkspaceMembersRequest\x1a*.openshell.v1.ListWorkspaceMembersResponse\"\"\x82\xb5\x18\x1e\n\x06\x62\x65\x61rer\x12\x04user\"\x0eworkspace:readb\x06proto3') _globals = globals() _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals) @@ -98,6 +98,8 @@ _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_DYNAMICCREDENTIALSENTRY']._serialized_options = b'8\001' _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_STATICCREDENTIALBINDINGSENTRY']._loaded_options = None _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_STATICCREDENTIALBINDINGSENTRY']._serialized_options = b'8\001' + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_FILESENTRY']._loaded_options = None + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_FILESENTRY']._serialized_options = b'8\001' _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE'].fields_by_name['environment']._loaded_options = None _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE'].fields_by_name['environment']._serialized_options = b'\210\265\030\001' _globals['_EXCHANGEPROVIDERSUBJECTTOKENREQUEST'].fields_by_name['supervisor_jwt_svid']._loaded_options = None @@ -278,42 +280,46 @@ _globals['_OPENSHELL'].methods_by_name['RemoveWorkspaceMember']._serialized_options = b'\202\265\030 \n\006bearer\022\005admin\"\017workspace:write' _globals['_OPENSHELL'].methods_by_name['ListWorkspaceMembers']._loaded_options = None _globals['_OPENSHELL'].methods_by_name['ListWorkspaceMembers']._serialized_options = b'\202\265\030\036\n\006bearer\022\004user\"\016workspace:read' - _globals['_EXTENSIONKIND']._serialized_start=38316 - _globals['_EXTENSIONKIND']._serialized_end=38518 - _globals['_SANDBOXPHASE']._serialized_start=38521 - _globals['_SANDBOXPHASE']._serialized_end=38815 - _globals['_PROVIDERMUTATIONKIND']._serialized_start=38818 - _globals['_PROVIDERMUTATIONKIND']._serialized_end=39021 - _globals['_PROVIDERREADINESSSTATE']._serialized_start=39024 - _globals['_PROVIDERREADINESSSTATE']._serialized_end=39359 - _globals['_PROVIDERREADINESSREASON']._serialized_start=39362 - _globals['_PROVIDERREADINESSREASON']._serialized_end=40220 - _globals['_CONFIGCOMPONENT']._serialized_start=40223 - _globals['_CONFIGCOMPONENT']._serialized_end=40354 - _globals['_CONFIGAPPLYOUTCOME']._serialized_start=40357 - _globals['_CONFIGAPPLYOUTCOME']._serialized_end=40754 - _globals['_CONFIGUPDATEOPERATIONSTATE']._serialized_start=40757 - _globals['_CONFIGUPDATEOPERATIONSTATE']._serialized_end=41095 - _globals['_PROVIDERCREDENTIALTOKENGRANTTYPE']._serialized_start=41098 - _globals['_PROVIDERCREDENTIALTOKENGRANTTYPE']._serialized_end=41304 - _globals['_PROVIDERCREDENTIALREFRESHSTRATEGY']._serialized_start=41307 - _globals['_PROVIDERCREDENTIALREFRESHSTRATEGY']._serialized_end=41758 - _globals['_PROVIDERPROFILECATEGORY']._serialized_start=41761 - _globals['_PROVIDERPROFILECATEGORY']._serialized_end=42108 - _globals['_CONFIGURATIONADMISSIONSTATE']._serialized_start=42111 - _globals['_CONFIGURATIONADMISSIONSTATE']._serialized_end=42318 - _globals['_POLICYSTATUS']._serialized_start=42321 - _globals['_POLICYSTATUS']._serialized_end=42475 - _globals['_SERVICESTATUS']._serialized_start=42478 - _globals['_SERVICESTATUS']._serialized_end=42612 - _globals['_WORKSPACEROLE']._serialized_start=42614 - _globals['_WORKSPACEROLE']._serialized_end=42712 - _globals['_PROVIDERCREDENTIALREFRESHRECOVERYACTION']._serialized_start=42715 - _globals['_PROVIDERCREDENTIALREFRESHRECOVERYACTION']._serialized_end=43061 - _globals['_DELETIONOUTCOME']._serialized_start=43064 - _globals['_DELETIONOUTCOME']._serialized_end=43215 - _globals['_ENDPOINTRESULT']._serialized_start=43218 - _globals['_ENDPOINTRESULT']._serialized_end=43541 + _globals['_EXTENSIONKIND']._serialized_start=39388 + _globals['_EXTENSIONKIND']._serialized_end=39590 + _globals['_SANDBOXPHASE']._serialized_start=39593 + _globals['_SANDBOXPHASE']._serialized_end=39919 + _globals['_PROVIDERMUTATIONKIND']._serialized_start=39922 + _globals['_PROVIDERMUTATIONKIND']._serialized_end=40125 + _globals['_PROVIDERREADINESSSTATE']._serialized_start=40128 + _globals['_PROVIDERREADINESSSTATE']._serialized_end=40463 + _globals['_PROVIDERREADINESSREASON']._serialized_start=40466 + _globals['_PROVIDERREADINESSREASON']._serialized_end=41324 + _globals['_CONFIGCOMPONENT']._serialized_start=41327 + _globals['_CONFIGCOMPONENT']._serialized_end=41458 + _globals['_CONFIGAPPLYOUTCOME']._serialized_start=41461 + _globals['_CONFIGAPPLYOUTCOME']._serialized_end=41858 + _globals['_CONFIGUPDATEOPERATIONSTATE']._serialized_start=41861 + _globals['_CONFIGUPDATEOPERATIONSTATE']._serialized_end=42199 + _globals['_PROVIDERCREDENTIALTOKENGRANTTYPE']._serialized_start=42202 + _globals['_PROVIDERCREDENTIALTOKENGRANTTYPE']._serialized_end=42408 + _globals['_PROVIDERCREDENTIALREFRESHSTRATEGY']._serialized_start=42411 + _globals['_PROVIDERCREDENTIALREFRESHSTRATEGY']._serialized_end=42862 + _globals['_PROVIDERPROFILECATEGORY']._serialized_start=42865 + _globals['_PROVIDERPROFILECATEGORY']._serialized_end=43212 + _globals['_CONFIGURATIONADMISSIONSTATE']._serialized_start=43215 + _globals['_CONFIGURATIONADMISSIONSTATE']._serialized_end=43422 + _globals['_POLICYSTATUS']._serialized_start=43425 + _globals['_POLICYSTATUS']._serialized_end=43579 + _globals['_SERVICESTATUS']._serialized_start=43582 + _globals['_SERVICESTATUS']._serialized_end=43716 + _globals['_WORKSPACEROLE']._serialized_start=43718 + _globals['_WORKSPACEROLE']._serialized_end=43816 + _globals['_PROVIDERCREDENTIALREFRESHRECOVERYACTION']._serialized_start=43819 + _globals['_PROVIDERCREDENTIALREFRESHRECOVERYACTION']._serialized_end=44165 + _globals['_SANDBOXRESTARTPOLICY']._serialized_start=44168 + _globals['_SANDBOXRESTARTPOLICY']._serialized_end=44338 + _globals['_DELETIONOUTCOME']._serialized_start=44341 + _globals['_DELETIONOUTCOME']._serialized_end=44492 + _globals['_ENDPOINTRESULT']._serialized_start=44495 + _globals['_ENDPOINTRESULT']._serialized_end=44818 + _globals['_SERVICEAUTHORIZATIONMODE']._serialized_start=44821 + _globals['_SERVICEAUTHORIZATIONMODE']._serialized_end=44980 _globals['_ISSUESANDBOXTOKENREQUEST']._serialized_start=175 _globals['_ISSUESANDBOXTOKENREQUEST']._serialized_end=201 _globals['_ISSUESANDBOXTOKENRESPONSE']._serialized_start=203 @@ -349,477 +355,483 @@ _globals['_GPURESOURCECAPABILITIES']._serialized_start=2041 _globals['_GPURESOURCECAPABILITIES']._serialized_end=2138 _globals['_SANDBOX']._serialized_start=2141 - _globals['_SANDBOX']._serialized_end=2422 - _globals['_SANDBOXSPEC']._serialized_start=2425 - _globals['_SANDBOXSPEC']._serialized_end=2875 - _globals['_SANDBOXSPEC_ENVIRONMENTENTRY']._serialized_start=2777 - _globals['_SANDBOXSPEC_ENVIRONMENTENTRY']._serialized_end=2827 - _globals['_RESOURCEREQUIREMENTS']._serialized_start=2877 - _globals['_RESOURCEREQUIREMENTS']._serialized_end=2951 - _globals['_GPURESOURCEREQUIREMENTS']._serialized_start=2953 - _globals['_GPURESOURCEREQUIREMENTS']._serialized_end=3008 - _globals['_SANDBOXTEMPLATE']._serialized_start=3011 - _globals['_SANDBOXTEMPLATE']._serialized_end=3613 - _globals['_SANDBOXTEMPLATE_LABELSENTRY']._serialized_start=3414 - _globals['_SANDBOXTEMPLATE_LABELSENTRY']._serialized_end=3459 - _globals['_SANDBOXTEMPLATE_ANNOTATIONSENTRY']._serialized_start=3461 - _globals['_SANDBOXTEMPLATE_ANNOTATIONSENTRY']._serialized_end=3511 - _globals['_SANDBOXTEMPLATE_ENVIRONMENTENTRY']._serialized_start=2777 - _globals['_SANDBOXTEMPLATE_ENVIRONMENTENTRY']._serialized_end=2827 - _globals['_SANDBOXWORKLOADTEMPLATE']._serialized_start=3616 - _globals['_SANDBOXWORKLOADTEMPLATE']._serialized_end=3752 - _globals['_SANDBOXWORKLOADTEMPLATESPEC']._serialized_start=3755 - _globals['_SANDBOXWORKLOADTEMPLATESPEC']._serialized_end=3953 - _globals['_SANDBOXWORKLOADCONFIG']._serialized_start=3956 - _globals['_SANDBOXWORKLOADCONFIG']._serialized_end=4172 - _globals['_SANDBOXWORKLOADCONFIG_ENVIRONMENTENTRY']._serialized_start=2777 - _globals['_SANDBOXWORKLOADCONFIG_ENVIRONMENTENTRY']._serialized_end=2827 - _globals['_SANDBOXRESOURCES']._serialized_start=4174 - _globals['_SANDBOXRESOURCES']._serialized_end=4273 - _globals['_SANDBOXSERVICELEVEL']._serialized_start=4275 - _globals['_SANDBOXSERVICELEVEL']._serialized_end=4343 - _globals['_SANDBOXSTARTUP']._serialized_start=4345 - _globals['_SANDBOXSTARTUP']._serialized_end=4429 - _globals['_SANDBOXWORKLOADTEMPLATEPROVENANCE']._serialized_start=4431 - _globals['_SANDBOXWORKLOADTEMPLATEPROVENANCE']._serialized_end=4506 - _globals['_SANDBOXSTATUS']._serialized_start=4509 - _globals['_SANDBOXSTATUS']._serialized_end=5038 - _globals['_SANDBOXCONDITION']._serialized_start=5041 - _globals['_SANDBOXCONDITION']._serialized_end=5203 - _globals['_PLATFORMEVENT']._serialized_start=5206 - _globals['_PLATFORMEVENT']._serialized_end=5462 - _globals['_PLATFORMEVENT_METADATAENTRY']._serialized_start=5395 - _globals['_PLATFORMEVENT_METADATAENTRY']._serialized_end=5442 - _globals['_CREATESANDBOXREQUEST']._serialized_start=5465 - _globals['_CREATESANDBOXREQUEST']._serialized_end=5998 - _globals['_CREATESANDBOXREQUEST_LABELSENTRY']._serialized_start=3414 - _globals['_CREATESANDBOXREQUEST_LABELSENTRY']._serialized_end=3459 - _globals['_CREATESANDBOXREQUEST_ANNOTATIONSENTRY']._serialized_start=3461 - _globals['_CREATESANDBOXREQUEST_ANNOTATIONSENTRY']._serialized_end=3511 - _globals['_CREATESANDBOXTEMPLATEREQUEST']._serialized_start=6001 - _globals['_CREATESANDBOXTEMPLATEREQUEST']._serialized_end=6176 - _globals['_GETSANDBOXTEMPLATEREQUEST']._serialized_start=6178 - _globals['_GETSANDBOXTEMPLATEREQUEST']._serialized_end=6287 - _globals['_LISTSANDBOXTEMPLATESREQUEST']._serialized_start=6290 - _globals['_LISTSANDBOXTEMPLATESREQUEST']._serialized_end=6450 - _globals['_DELETESANDBOXTEMPLATEREQUEST']._serialized_start=6453 - _globals['_DELETESANDBOXTEMPLATEREQUEST']._serialized_end=6608 - _globals['_SANDBOXTEMPLATERESPONSE']._serialized_start=6610 - _globals['_SANDBOXTEMPLATERESPONSE']._serialized_end=6692 - _globals['_LISTSANDBOXTEMPLATESRESPONSE']._serialized_start=6694 - _globals['_LISTSANDBOXTEMPLATESRESPONSE']._serialized_end=6807 - _globals['_DELETESANDBOXTEMPLATERESPONSE']._serialized_start=6809 - _globals['_DELETESANDBOXTEMPLATERESPONSE']._serialized_end=6903 - _globals['_BEGINROOTFSTARSTAGINGREQUEST']._serialized_start=6906 - _globals['_BEGINROOTFSTARSTAGINGREQUEST']._serialized_end=7043 - _globals['_BEGINROOTFSTARSTAGINGRESPONSE']._serialized_start=7046 - _globals['_BEGINROOTFSTARSTAGINGRESPONSE']._serialized_end=7214 - _globals['_GETSANDBOXREQUEST']._serialized_start=7216 - _globals['_GETSANDBOXREQUEST']._serialized_end=7317 - _globals['_LISTSANDBOXESREQUEST']._serialized_start=7320 - _globals['_LISTSANDBOXESREQUEST']._serialized_end=7473 - _globals['_LISTSANDBOXPROVIDERSREQUEST']._serialized_start=7476 - _globals['_LISTSANDBOXPROVIDERSREQUEST']._serialized_end=7629 - _globals['_ATTACHSANDBOXPROVIDERREQUEST']._serialized_start=7632 - _globals['_ATTACHSANDBOXPROVIDERREQUEST']._serialized_end=7820 - _globals['_DETACHSANDBOXPROVIDERREQUEST']._serialized_start=7823 - _globals['_DETACHSANDBOXPROVIDERREQUEST']._serialized_end=8011 - _globals['_DELETESANDBOXREQUEST']._serialized_start=8014 - _globals['_DELETESANDBOXREQUEST']._serialized_end=8161 - _globals['_STOPSANDBOXREQUEST']._serialized_start=8163 - _globals['_STOPSANDBOXREQUEST']._serialized_end=8285 - _globals['_STARTSANDBOXREQUEST']._serialized_start=8287 - _globals['_STARTSANDBOXREQUEST']._serialized_end=8410 - _globals['_SANDBOXRESPONSE']._serialized_start=8413 - _globals['_SANDBOXRESPONSE']._serialized_end=8592 - _globals['_SANDBOXRESPONSE_SERVICEURLSENTRY']._serialized_start=8542 - _globals['_SANDBOXRESPONSE_SERVICEURLSENTRY']._serialized_end=8592 - _globals['_LISTSANDBOXESRESPONSE']._serialized_start=8594 - _globals['_LISTSANDBOXESRESPONSE']._serialized_end=8684 - _globals['_LISTSANDBOXPROVIDERSRESPONSE']._serialized_start=8686 - _globals['_LISTSANDBOXPROVIDERSRESPONSE']._serialized_end=8794 - _globals['_ATTACHSANDBOXPROVIDERRESPONSE']._serialized_start=8797 - _globals['_ATTACHSANDBOXPROVIDERRESPONSE']._serialized_end=8942 - _globals['_DETACHSANDBOXPROVIDERRESPONSE']._serialized_start=8945 - _globals['_DETACHSANDBOXPROVIDERRESPONSE']._serialized_end=9090 - _globals['_PROVIDERDESIREDIDENTITY']._serialized_start=9093 - _globals['_PROVIDERDESIREDIDENTITY']._serialized_end=9314 - _globals['_CONFIGSNAPSHOTREVISION']._serialized_start=9317 - _globals['_CONFIGSNAPSHOTREVISION']._serialized_end=9515 - _globals['_SANDBOXCONFIGREVISION']._serialized_start=9518 - _globals['_SANDBOXCONFIGREVISION']._serialized_end=9707 - _globals['_CONFIGUPDATEOPERATION']._serialized_start=9710 - _globals['_CONFIGUPDATEOPERATION']._serialized_end=10238 - _globals['_PROVIDERMUTATIONRECEIPT']._serialized_start=10241 - _globals['_PROVIDERMUTATIONRECEIPT']._serialized_end=10525 - _globals['_PROVIDERREADINESSOBSERVATION']._serialized_start=10528 - _globals['_PROVIDERREADINESSOBSERVATION']._serialized_end=10875 - _globals['_PROVIDERREADINESSSTATUS']._serialized_start=10878 - _globals['_PROVIDERREADINESSSTATUS']._serialized_end=11362 - _globals['_GETSANDBOXPROVIDERSTATUSREQUEST']._serialized_start=11365 - _globals['_GETSANDBOXPROVIDERSTATUSREQUEST']._serialized_end=11521 - _globals['_GETSANDBOXPROVIDERSTATUSRESPONSE']._serialized_start=11523 - _globals['_GETSANDBOXPROVIDERSTATUSRESPONSE']._serialized_end=11612 - _globals['_REPORTPROVIDERREADINESSREQUEST']._serialized_start=11614 - _globals['_REPORTPROVIDERREADINESSREQUEST']._serialized_end=11731 - _globals['_REPORTPROVIDERREADINESSRESPONSE']._serialized_start=11734 - _globals['_REPORTPROVIDERREADINESSRESPONSE']._serialized_end=11960 - _globals['_DELETESANDBOXRESPONSE']._serialized_start=11962 - _globals['_DELETESANDBOXRESPONSE']._serialized_end=12068 - _globals['_CREATESSHSESSIONREQUEST']._serialized_start=12070 - _globals['_CREATESSHSESSIONREQUEST']._serialized_end=12180 - _globals['_CREATESSHSESSIONRESPONSE']._serialized_start=12183 - _globals['_CREATESSHSESSIONRESPONSE']._serialized_end=12422 - _globals['_EXPOSESERVICEREQUEST']._serialized_start=12425 - _globals['_EXPOSESERVICEREQUEST']._serialized_end=12603 - _globals['_GETSERVICEREQUEST']._serialized_start=12605 - _globals['_GETSERVICEREQUEST']._serialized_end=12723 - _globals['_LISTSERVICESREQUEST']._serialized_start=12726 - _globals['_LISTSERVICESREQUEST']._serialized_end=12871 - _globals['_LISTSERVICESRESPONSE']._serialized_start=12873 - _globals['_LISTSERVICESRESPONSE']._serialized_end=12977 - _globals['_DELETESERVICEREQUEST']._serialized_start=12980 - _globals['_DELETESERVICEREQUEST']._serialized_end=13144 - _globals['_DELETESERVICERESPONSE']._serialized_start=13146 - _globals['_DELETESERVICERESPONSE']._serialized_end=13232 - _globals['_SERVICEENDPOINT']._serialized_start=13235 - _globals['_SERVICEENDPOINT']._serialized_end=13394 - _globals['_SERVICEENDPOINTRESPONSE']._serialized_start=13396 - _globals['_SERVICEENDPOINTRESPONSE']._serialized_end=13483 - _globals['_REVOKESSHSESSIONREQUEST']._serialized_start=13485 - _globals['_REVOKESSHSESSIONREQUEST']._serialized_end=13554 - _globals['_REVOKESSHSESSIONRESPONSE']._serialized_start=13556 - _globals['_REVOKESSHSESSIONRESPONSE']._serialized_end=13645 - _globals['_EXECSANDBOXREQUEST']._serialized_start=13648 - _globals['_EXECSANDBOXREQUEST']._serialized_end=14088 - _globals['_EXECSANDBOXREQUEST_ENVIRONMENTENTRY']._serialized_start=2777 - _globals['_EXECSANDBOXREQUEST_ENVIRONMENTENTRY']._serialized_end=2827 - _globals['_EXECSANDBOXSTDOUT']._serialized_start=14090 - _globals['_EXECSANDBOXSTDOUT']._serialized_end=14123 - _globals['_EXECSANDBOXSTDERR']._serialized_start=14125 - _globals['_EXECSANDBOXSTDERR']._serialized_end=14158 - _globals['_EXECSANDBOXEXIT']._serialized_start=14160 - _globals['_EXECSANDBOXEXIT']._serialized_end=14196 - _globals['_EXECSANDBOXEVENT']._serialized_start=14199 - _globals['_EXECSANDBOXEVENT']._serialized_end=14377 - _globals['_TCPFORWARDINIT']._serialized_start=14380 - _globals['_TCPFORWARDINIT']._serialized_end=14587 - _globals['_TCPFORWARDFRAME']._serialized_start=14589 - _globals['_TCPFORWARDFRAME']._serialized_end=14679 - _globals['_EXECSANDBOXINPUT']._serialized_start=14682 - _globals['_EXECSANDBOXINPUT']._serialized_end=14836 - _globals['_EXECSANDBOXWINDOWRESIZE']._serialized_start=14838 - _globals['_EXECSANDBOXWINDOWRESIZE']._serialized_end=14891 - _globals['_SSHSESSION']._serialized_start=14894 - _globals['_SSHSESSION']._serialized_end=15092 - _globals['_WATCHSANDBOXREQUEST']._serialized_start=15095 - _globals['_WATCHSANDBOXREQUEST']._serialized_end=15479 - _globals['_SANDBOXSTREAMEVENT']._serialized_start=15482 - _globals['_SANDBOXSTREAMEVENT']._serialized_end=15781 - _globals['_SANDBOXLOGLINE']._serialized_start=15784 - _globals['_SANDBOXLOGLINE']._serialized_end=16057 - _globals['_SANDBOXLOGLINE_FIELDSENTRY']._serialized_start=15992 - _globals['_SANDBOXLOGLINE_FIELDSENTRY']._serialized_end=16037 - _globals['_SANDBOXSTREAMWARNING']._serialized_start=16059 - _globals['_SANDBOXSTREAMWARNING']._serialized_end=16098 - _globals['_CREATEPROVIDERREQUEST']._serialized_start=16101 - _globals['_CREATEPROVIDERREQUEST']._serialized_end=16264 - _globals['_GETPROVIDERREQUEST']._serialized_start=16266 - _globals['_GETPROVIDERREQUEST']._serialized_end=16368 - _globals['_LISTPROVIDERSREQUEST']._serialized_start=16371 - _globals['_LISTPROVIDERSREQUEST']._serialized_end=16500 - _globals['_UPDATEPROVIDERREQUEST']._serialized_start=16503 - _globals['_UPDATEPROVIDERREQUEST']._serialized_end=16939 - _globals['_UPDATEPROVIDERREQUEST_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_start=16815 - _globals['_UPDATEPROVIDERREQUEST_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_end=16907 - _globals['_DELETEPROVIDERREQUEST']._serialized_start=16942 - _globals['_DELETEPROVIDERREQUEST']._serialized_end=17090 - _globals['_PROVIDERRESPONSE']._serialized_start=17093 - _globals['_PROVIDERRESPONSE']._serialized_end=17248 - _globals['_LISTPROVIDERSRESPONSE']._serialized_start=17250 - _globals['_LISTPROVIDERSRESPONSE']._serialized_end=17351 - _globals['_LISTPROVIDERPROFILESREQUEST']._serialized_start=17354 - _globals['_LISTPROVIDERPROFILESREQUEST']._serialized_end=17490 - _globals['_GETPROVIDERPROFILEREQUEST']._serialized_start=17492 - _globals['_GETPROVIDERPROFILEREQUEST']._serialized_end=17599 - _globals['_PROVIDERPROFILEIMPORTITEM']._serialized_start=17601 - _globals['_PROVIDERPROFILEIMPORTITEM']._serialized_end=17692 - _globals['_PROVIDERPROFILEDIAGNOSTIC']._serialized_start=17694 - _globals['_PROVIDERPROFILEDIAGNOSTIC']._serialized_end=17807 - _globals['_PROVIDERCREDENTIALTOKENGRANTAUDIENCEOVERRIDE']._serialized_start=17809 - _globals['_PROVIDERCREDENTIALTOKENGRANTAUDIENCEOVERRIDE']._serialized_end=17931 - _globals['_PROVIDERCREDENTIALTOKENGRANTSUBJECTTOKEN']._serialized_start=17933 - _globals['_PROVIDERCREDENTIALTOKENGRANTSUBJECTTOKEN']._serialized_end=18039 - _globals['_PROVIDERCREDENTIALTOKENGRANT']._serialized_start=18042 - _globals['_PROVIDERCREDENTIALTOKENGRANT']._serialized_end=18524 - _globals['_PROVIDERPROFILECREDENTIAL']._serialized_start=18527 - _globals['_PROVIDERPROFILECREDENTIAL']._serialized_end=18833 - _globals['_PROVIDERCREDENTIALREFRESHMATERIAL']._serialized_start=18835 - _globals['_PROVIDERCREDENTIALREFRESHMATERIAL']._serialized_end=18939 - _globals['_PROVIDERCREDENTIALREFRESHOUTPUT']._serialized_start=18941 - _globals['_PROVIDERCREDENTIALREFRESHOUTPUT']._serialized_end=19010 - _globals['_PROVIDERCREDENTIALREFRESH']._serialized_start=19013 - _globals['_PROVIDERCREDENTIALREFRESH']._serialized_end=19442 - _globals['_PROVIDERCREDENTIALREFRESHSTATUS']._serialized_start=19445 - _globals['_PROVIDERCREDENTIALREFRESHSTATUS']._serialized_end=20091 - _globals['_PROVIDERPROFILEDISCOVERY']._serialized_start=20093 - _globals['_PROVIDERPROFILEDISCOVERY']._serialized_end=20140 - _globals['_GETPROVIDERREFRESHSTATUSREQUEST']._serialized_start=20143 - _globals['_GETPROVIDERREFRESHSTATUSREQUEST']._serialized_end=20286 - _globals['_GETPROVIDERREFRESHSTATUSRESPONSE']._serialized_start=20288 - _globals['_GETPROVIDERREFRESHSTATUSRESPONSE']._serialized_end=20390 - _globals['_CONFIGUREPROVIDERREFRESHREQUEST']._serialized_start=20393 - _globals['_CONFIGUREPROVIDERREFRESHREQUEST']._serialized_end=20861 - _globals['_CONFIGUREPROVIDERREFRESHREQUEST_MATERIALENTRY']._serialized_start=20793 - _globals['_CONFIGUREPROVIDERREFRESHREQUEST_MATERIALENTRY']._serialized_end=20840 - _globals['_CONFIGUREPROVIDERREFRESHRESPONSE']._serialized_start=20863 - _globals['_CONFIGUREPROVIDERREFRESHRESPONSE']._serialized_end=20960 - _globals['_ROTATEPROVIDERCREDENTIALREQUEST']._serialized_start=20963 - _globals['_ROTATEPROVIDERCREDENTIALREQUEST']._serialized_end=21126 - _globals['_ROTATEPROVIDERCREDENTIALRESPONSE']._serialized_start=21128 - _globals['_ROTATEPROVIDERCREDENTIALRESPONSE']._serialized_end=21225 - _globals['_DELETEPROVIDERREFRESHREQUEST']._serialized_start=21228 - _globals['_DELETEPROVIDERREFRESHREQUEST']._serialized_end=21411 - _globals['_DELETEPROVIDERREFRESHRESPONSE']._serialized_start=21413 - _globals['_DELETEPROVIDERREFRESHRESPONSE']._serialized_end=21507 - _globals['_PROVIDERPROFILE']._serialized_start=21510 - _globals['_PROVIDERPROFILE']._serialized_end=22078 - _globals['_PROVIDERPROFILE_ANNOTATIONSENTRY']._serialized_start=3461 - _globals['_PROVIDERPROFILE_ANNOTATIONSENTRY']._serialized_end=3511 - _globals['_PROVIDERPROFILERESPONSE']._serialized_start=22080 - _globals['_PROVIDERPROFILERESPONSE']._serialized_end=22153 - _globals['_LISTPROVIDERPROFILESRESPONSE']._serialized_start=22155 - _globals['_LISTPROVIDERPROFILESRESPONSE']._serialized_end=22259 - _globals['_IMPORTPROVIDERPROFILESREQUEST']._serialized_start=22262 - _globals['_IMPORTPROVIDERPROFILESREQUEST']._serialized_end=22440 - _globals['_IMPORTPROVIDERPROFILESRESPONSE']._serialized_start=22443 - _globals['_IMPORTPROVIDERPROFILESRESPONSE']._serialized_end=22604 - _globals['_UPDATEPROVIDERPROFILESREQUEST']._serialized_start=22607 - _globals['_UPDATEPROVIDERPROFILESREQUEST']._serialized_end=22831 - _globals['_UPDATEPROVIDERPROFILESRESPONSE']._serialized_start=22834 - _globals['_UPDATEPROVIDERPROFILESRESPONSE']._serialized_end=22993 - _globals['_LINTPROVIDERPROFILESREQUEST']._serialized_start=22996 - _globals['_LINTPROVIDERPROFILESREQUEST']._serialized_end=23152 - _globals['_LINTPROVIDERPROFILESRESPONSE']._serialized_start=23154 - _globals['_LINTPROVIDERPROFILESRESPONSE']._serialized_end=23261 - _globals['_DELETEPROVIDERRESPONSE']._serialized_start=23263 - _globals['_DELETEPROVIDERRESPONSE']._serialized_end=23350 - _globals['_DELETEPROVIDERPROFILEREQUEST']._serialized_start=23353 - _globals['_DELETEPROVIDERPROFILEREQUEST']._serialized_end=23506 - _globals['_DELETEPROVIDERPROFILERESPONSE']._serialized_start=23508 - _globals['_DELETEPROVIDERPROFILERESPONSE']._serialized_end=23602 - _globals['_GETSANDBOXPROVIDERENVIRONMENTREQUEST']._serialized_start=23604 - _globals['_GETSANDBOXPROVIDERENVIRONMENTREQUEST']._serialized_end=23707 - _globals['_STATICCREDENTIALENDPOINTBINDING']._serialized_start=23709 - _globals['_STATICCREDENTIALENDPOINTBINDING']._serialized_end=23784 - _globals['_STATICCREDENTIALBINDING']._serialized_start=23787 - _globals['_STATICCREDENTIALBINDING']._serialized_end=23943 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE']._serialized_start=23946 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE']._serialized_end=24999 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_ENVIRONMENTENTRY']._serialized_start=2777 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_ENVIRONMENTENTRY']._serialized_end=2827 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_start=16815 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_end=16907 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_DYNAMICCREDENTIALSENTRY']._serialized_start=24765 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_DYNAMICCREDENTIALSENTRY']._serialized_end=24863 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_STATICCREDENTIALBINDINGSENTRY']._serialized_start=24865 - _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_STATICCREDENTIALBINDINGSENTRY']._serialized_end=24967 - _globals['_EXCHANGEPROVIDERSUBJECTTOKENREQUEST']._serialized_start=25002 - _globals['_EXCHANGEPROVIDERSUBJECTTOKENREQUEST']._serialized_end=25136 - _globals['_EXCHANGEPROVIDERSUBJECTTOKENRESPONSE']._serialized_start=25139 - _globals['_EXCHANGEPROVIDERSUBJECTTOKENRESPONSE']._serialized_end=25293 - _globals['_UPDATECONFIGREQUEST']._serialized_start=25296 - _globals['_UPDATECONFIGREQUEST']._serialized_end=25817 - _globals['_UPDATECONFIGREQUEST_ANNOTATIONSENTRY']._serialized_start=3461 - _globals['_UPDATECONFIGREQUEST_ANNOTATIONSENTRY']._serialized_end=3511 - _globals['_POLICYMERGEOPERATION']._serialized_start=25820 - _globals['_POLICYMERGEOPERATION']._serialized_end=26195 - _globals['_ADDNETWORKRULE']._serialized_start=26197 - _globals['_ADDNETWORKRULE']._serialized_end=26287 - _globals['_REMOVENETWORKENDPOINT']._serialized_start=26289 - _globals['_REMOVENETWORKENDPOINT']._serialized_end=26359 - _globals['_REMOVENETWORKRULE']._serialized_start=26361 - _globals['_REMOVENETWORKRULE']._serialized_end=26399 - _globals['_L7RULETARGET']._serialized_start=26402 - _globals['_L7RULETARGET']._serialized_end=26567 - _globals['_ADDDENYRULES']._serialized_start=26570 - _globals['_ADDDENYRULES']._serialized_end=26706 - _globals['_ADDALLOWRULES']._serialized_start=26709 - _globals['_ADDALLOWRULES']._serialized_end=26837 - _globals['_REMOVENETWORKBINARY']._serialized_start=26839 - _globals['_REMOVENETWORKBINARY']._serialized_end=26900 - _globals['_UPDATECONFIGRESPONSE']._serialized_start=26903 - _globals['_UPDATECONFIGRESPONSE']._serialized_end=27133 - _globals['_UPDATECONFIGRESPONSE_ANNOTATIONSENTRY']._serialized_start=3461 - _globals['_UPDATECONFIGRESPONSE_ANNOTATIONSENTRY']._serialized_end=3511 - _globals['_GETSANDBOXPOLICYSTATUSREQUEST']._serialized_start=27136 - _globals['_GETSANDBOXPOLICYSTATUSREQUEST']._serialized_end=27285 - _globals['_GETSANDBOXPOLICYSTATUSRESPONSE']._serialized_start=27287 - _globals['_GETSANDBOXPOLICYSTATUSRESPONSE']._serialized_end=27398 - _globals['_LISTSANDBOXPOLICIESREQUEST']._serialized_start=27401 - _globals['_LISTSANDBOXPOLICIESREQUEST']._serialized_end=27569 - _globals['_LISTSANDBOXPOLICIESRESPONSE']._serialized_start=27571 - _globals['_LISTSANDBOXPOLICIESRESPONSE']._serialized_end=27681 - _globals['_REPORTPOLICYSTATUSREQUEST']._serialized_start=27684 - _globals['_REPORTPOLICYSTATUSREQUEST']._serialized_end=27812 - _globals['_REPORTPOLICYSTATUSRESPONSE']._serialized_start=27814 - _globals['_REPORTPOLICYSTATUSRESPONSE']._serialized_end=27842 - _globals['_SANDBOXCONFIGURATIONADMISSION']._serialized_start=27845 - _globals['_SANDBOXCONFIGURATIONADMISSION']._serialized_end=28071 - _globals['_REPORTSANDBOXCONFIGURATIONREQUEST']._serialized_start=28074 - _globals['_REPORTSANDBOXCONFIGURATIONREQUEST']._serialized_end=28223 - _globals['_REPORTSANDBOXCONFIGURATIONRESPONSE']._serialized_start=28225 - _globals['_REPORTSANDBOXCONFIGURATIONRESPONSE']._serialized_end=28261 - _globals['_SANDBOXPOLICYREVISION']._serialized_start=28264 - _globals['_SANDBOXPOLICYREVISION']._serialized_end=28706 - _globals['_SANDBOXPOLICYREVISION_PROVENANCEENTRY']._serialized_start=28616 - _globals['_SANDBOXPOLICYREVISION_PROVENANCEENTRY']._serialized_end=28665 - _globals['_GETSANDBOXLOGSREQUEST']._serialized_start=28709 - _globals['_GETSANDBOXLOGSREQUEST']._serialized_end=28932 - _globals['_PUSHSANDBOXLOGSREQUEST']._serialized_start=28934 - _globals['_PUSHSANDBOXLOGSREQUEST']._serialized_end=29022 - _globals['_PUSHSANDBOXLOGSRESPONSE']._serialized_start=29024 - _globals['_PUSHSANDBOXLOGSRESPONSE']._serialized_end=29049 - _globals['_GETSANDBOXLOGSRESPONSE']._serialized_start=29051 - _globals['_GETSANDBOXLOGSRESPONSE']._serialized_end=29141 - _globals['_SUPERVISORMESSAGE']._serialized_start=29144 - _globals['_SUPERVISORMESSAGE']._serialized_end=29387 - _globals['_GATEWAYMESSAGE']._serialized_start=29390 - _globals['_GATEWAYMESSAGE']._serialized_end=29684 - _globals['_SUPERVISORHELLO']._serialized_start=29686 - _globals['_SUPERVISORHELLO']._serialized_end=29807 - _globals['_SESSIONACCEPTED']._serialized_start=29809 - _globals['_SESSIONACCEPTED']._serialized_end=29932 - _globals['_SESSIONREJECTED']._serialized_start=29934 - _globals['_SESSIONREJECTED']._serialized_end=29967 - _globals['_SUPERVISORHEARTBEAT']._serialized_start=29969 - _globals['_SUPERVISORHEARTBEAT']._serialized_end=29990 - _globals['_GATEWAYHEARTBEAT']._serialized_start=29992 - _globals['_GATEWAYHEARTBEAT']._serialized_end=30010 - _globals['_REPORTMAINPROCESSEXITREQUEST']._serialized_start=30012 - _globals['_REPORTMAINPROCESSEXITREQUEST']._serialized_end=30102 - _globals['_REPORTMAINPROCESSEXITRESPONSE']._serialized_start=30104 - _globals['_REPORTMAINPROCESSEXITRESPONSE']._serialized_end=30135 - _globals['_FINALIZEMAINPROCESSEXITREQUEST']._serialized_start=30137 - _globals['_FINALIZEMAINPROCESSEXITREQUEST']._serialized_end=30210 - _globals['_FINALIZEMAINPROCESSEXITRESPONSE']._serialized_start=30212 - _globals['_FINALIZEMAINPROCESSEXITRESPONSE']._serialized_end=30245 - _globals['_RELAYOPEN']._serialized_start=30248 - _globals['_RELAYOPEN']._serialized_end=30399 - _globals['_SSHRELAYTARGET']._serialized_start=30401 - _globals['_SSHRELAYTARGET']._serialized_end=30417 - _globals['_TCPRELAYTARGET']._serialized_start=30419 - _globals['_TCPRELAYTARGET']._serialized_end=30463 - _globals['_RELAYINIT']._serialized_start=30465 - _globals['_RELAYINIT']._serialized_end=30496 - _globals['_RELAYFRAME']._serialized_start=30498 - _globals['_RELAYFRAME']._serialized_end=30578 - _globals['_PEERRELAYINIT']._serialized_start=30580 - _globals['_PEERRELAYINIT']._serialized_end=30690 - _globals['_PEERRELAYFRAME']._serialized_start=30692 - _globals['_PEERRELAYFRAME']._serialized_end=30780 - _globals['_RELAYOPENRESULT']._serialized_start=30782 - _globals['_RELAYOPENRESULT']._serialized_end=30851 - _globals['_RELAYCLOSE']._serialized_start=30853 - _globals['_RELAYCLOSE']._serialized_end=30901 - _globals['_L7REQUESTSAMPLE']._serialized_start=30903 - _globals['_L7REQUESTSAMPLE']._serialized_end=30983 - _globals['_DENIALSUMMARY']._serialized_start=30986 - _globals['_DENIALSUMMARY']._serialized_end=31492 - _globals['_DENIALGROUPCOUNT']._serialized_start=31494 - _globals['_DENIALGROUPCOUNT']._serialized_end=31554 - _globals['_NETWORKACTIVITYSUMMARY']._serialized_start=31557 - _globals['_NETWORKACTIVITYSUMMARY']._serialized_end=31700 - _globals['_POLICYCHUNK']._serialized_start=31703 - _globals['_POLICYCHUNK']._serialized_end=32611 - _globals['_DRAFTPOLICYUPDATE']._serialized_start=32613 - _globals['_DRAFTPOLICYUPDATE']._serialized_end=32715 - _globals['_SUBMITPOLICYANALYSISREQUEST']._serialized_start=32718 - _globals['_SUBMITPOLICYANALYSISREQUEST']._serialized_end=33026 - _globals['_SUBMITPOLICYANALYSISRESPONSE']._serialized_start=33029 - _globals['_SUBMITPOLICYANALYSISRESPONSE']._serialized_end=33164 - _globals['_GETDRAFTPOLICYREQUEST']._serialized_start=33167 - _globals['_GETDRAFTPOLICYREQUEST']._serialized_end=33298 - _globals['_GETDRAFTPOLICYRESPONSE']._serialized_start=33301 - _globals['_GETDRAFTPOLICYRESPONSE']._serialized_end=33499 - _globals['_APPROVEDRAFTCHUNKREQUEST']._serialized_start=33502 - _globals['_APPROVEDRAFTCHUNKREQUEST']._serialized_end=33673 - _globals['_APPROVEDRAFTCHUNKRESPONSE']._serialized_start=33675 - _globals['_APPROVEDRAFTCHUNKRESPONSE']._serialized_end=33747 - _globals['_REJECTDRAFTCHUNKREQUEST']._serialized_start=33750 - _globals['_REJECTDRAFTCHUNKREQUEST']._serialized_end=33914 - _globals['_REJECTDRAFTCHUNKRESPONSE']._serialized_start=33916 - _globals['_REJECTDRAFTCHUNKRESPONSE']._serialized_end=33942 - _globals['_DRAFTCHUNKAPPROVAL']._serialized_start=33944 - _globals['_DRAFTCHUNKAPPROVAL']._serialized_end=34004 - _globals['_APPROVEALLDRAFTCHUNKSREQUEST']._serialized_start=34007 - _globals['_APPROVEALLDRAFTCHUNKSREQUEST']._serialized_end=34229 - _globals['_APPROVEALLDRAFTCHUNKSRESPONSE']._serialized_start=34231 - _globals['_APPROVEALLDRAFTCHUNKSRESPONSE']._serialized_end=34356 - _globals['_EDITDRAFTCHUNKREQUEST']._serialized_start=34359 - _globals['_EDITDRAFTCHUNKREQUEST']._serialized_end=34569 - _globals['_EDITDRAFTCHUNKRESPONSE']._serialized_start=34571 - _globals['_EDITDRAFTCHUNKRESPONSE']._serialized_end=34595 - _globals['_UNDODRAFTCHUNKREQUEST']._serialized_start=34598 - _globals['_UNDODRAFTCHUNKREQUEST']._serialized_end=34744 - _globals['_UNDODRAFTCHUNKRESPONSE']._serialized_start=34746 - _globals['_UNDODRAFTCHUNKRESPONSE']._serialized_end=34815 - _globals['_CLEARDRAFTCHUNKSREQUEST']._serialized_start=34818 - _globals['_CLEARDRAFTCHUNKSREQUEST']._serialized_end=34948 - _globals['_CLEARDRAFTCHUNKSRESPONSE']._serialized_start=34950 - _globals['_CLEARDRAFTCHUNKSRESPONSE']._serialized_end=35000 - _globals['_GETDRAFTHISTORYREQUEST']._serialized_start=35002 - _globals['_GETDRAFTHISTORYREQUEST']._serialized_end=35111 - _globals['_DRAFTHISTORYENTRY']._serialized_start=35114 - _globals['_DRAFTHISTORYENTRY']._serialized_end=35260 - _globals['_GETDRAFTHISTORYRESPONSE']._serialized_start=35262 - _globals['_GETDRAFTHISTORYRESPONSE']._serialized_end=35337 - _globals['_CREATEWORKSPACEREQUEST']._serialized_start=35340 - _globals['_CREATEWORKSPACEREQUEST']._serialized_end=35511 - _globals['_CREATEWORKSPACEREQUEST_LABELSENTRY']._serialized_start=3414 - _globals['_CREATEWORKSPACEREQUEST_LABELSENTRY']._serialized_end=3459 - _globals['_CREATEWORKSPACERESPONSE']._serialized_start=35513 - _globals['_CREATEWORKSPACERESPONSE']._serialized_end=35592 - _globals['_GETWORKSPACEREQUEST']._serialized_start=35594 - _globals['_GETWORKSPACEREQUEST']._serialized_end=35629 - _globals['_GETWORKSPACERESPONSE']._serialized_start=35631 - _globals['_GETWORKSPACERESPONSE']._serialized_end=35707 - _globals['_LISTWORKSPACESREQUEST']._serialized_start=35709 - _globals['_LISTWORKSPACESREQUEST']._serialized_end=35795 - _globals['_LISTWORKSPACESRESPONSE']._serialized_start=35797 - _globals['_LISTWORKSPACESRESPONSE']._serialized_end=35901 - _globals['_DELETEWORKSPACEREQUEST']._serialized_start=35903 - _globals['_DELETEWORKSPACEREQUEST']._serialized_end=35984 - _globals['_DELETEWORKSPACERESPONSE']._serialized_start=35986 - _globals['_DELETEWORKSPACERESPONSE']._serialized_end=36074 - _globals['_WORKSPACEMEMBER']._serialized_start=36077 - _globals['_WORKSPACEMEMBER']._serialized_end=36218 - _globals['_ADDWORKSPACEMEMBERREQUEST']._serialized_start=36221 - _globals['_ADDWORKSPACEMEMBERREQUEST']._serialized_end=36406 - _globals['_ADDWORKSPACEMEMBERRESPONSE']._serialized_start=36408 - _globals['_ADDWORKSPACEMEMBERRESPONSE']._serialized_end=36483 - _globals['_REMOVEWORKSPACEMEMBERREQUEST']._serialized_start=36486 - _globals['_REMOVEWORKSPACEMEMBERREQUEST']._serialized_end=36654 - _globals['_REMOVEWORKSPACEMEMBERRESPONSE']._serialized_start=36656 - _globals['_REMOVEWORKSPACEMEMBERRESPONSE']._serialized_end=36750 - _globals['_LISTWORKSPACEMEMBERSREQUEST']._serialized_start=36753 - _globals['_LISTWORKSPACEMEMBERSREQUEST']._serialized_end=36889 - _globals['_LISTWORKSPACEMEMBERSRESPONSE']._serialized_start=36891 - _globals['_LISTWORKSPACEMEMBERSRESPONSE']._serialized_end=36994 - _globals['_EXTENSIONSERVICECREDENTIAL']._serialized_start=36997 - _globals['_EXTENSIONSERVICECREDENTIAL']._serialized_end=37142 - _globals['_ENDPOINTOBSERVATION']._serialized_start=37144 - _globals['_ENDPOINTOBSERVATION']._serialized_end=37232 - _globals['_REPORTENDPOINTSTATUSREQUEST']._serialized_start=37235 - _globals['_REPORTENDPOINTSTATUSREQUEST']._serialized_end=37480 - _globals['_REPORTENDPOINTSTATUSRESPONSE']._serialized_start=37482 - _globals['_REPORTENDPOINTSTATUSRESPONSE']._serialized_end=37512 - _globals['_ENDPOINTSTATUS']._serialized_start=37515 - _globals['_ENDPOINTSTATUS']._serialized_end=37726 - _globals['_SANDBOXPROVISIONING']._serialized_start=37729 - _globals['_SANDBOXPROVISIONING']._serialized_end=38249 - _globals['_SANDBOXSERVICEEXPOSURE']._serialized_start=38251 - _globals['_SANDBOXSERVICEEXPOSURE']._serialized_end=38313 - _globals['_OPENSHELL']._serialized_start=43544 - _globals['_OPENSHELL']._serialized_end=54471 + _globals['_SANDBOX']._serialized_end=2452 + _globals['_SANDBOXSPEC']._serialized_start=2455 + _globals['_SANDBOXSPEC']._serialized_end=2965 + _globals['_SANDBOXSPEC_ENVIRONMENTENTRY']._serialized_start=2867 + _globals['_SANDBOXSPEC_ENVIRONMENTENTRY']._serialized_end=2917 + _globals['_RESOURCEREQUIREMENTS']._serialized_start=2967 + _globals['_RESOURCEREQUIREMENTS']._serialized_end=3041 + _globals['_GPURESOURCEREQUIREMENTS']._serialized_start=3043 + _globals['_GPURESOURCEREQUIREMENTS']._serialized_end=3098 + _globals['_SANDBOXTEMPLATE']._serialized_start=3101 + _globals['_SANDBOXTEMPLATE']._serialized_end=3703 + _globals['_SANDBOXTEMPLATE_LABELSENTRY']._serialized_start=3504 + _globals['_SANDBOXTEMPLATE_LABELSENTRY']._serialized_end=3549 + _globals['_SANDBOXTEMPLATE_ANNOTATIONSENTRY']._serialized_start=3551 + _globals['_SANDBOXTEMPLATE_ANNOTATIONSENTRY']._serialized_end=3601 + _globals['_SANDBOXTEMPLATE_ENVIRONMENTENTRY']._serialized_start=2867 + _globals['_SANDBOXTEMPLATE_ENVIRONMENTENTRY']._serialized_end=2917 + _globals['_SANDBOXWORKLOADTEMPLATE']._serialized_start=3706 + _globals['_SANDBOXWORKLOADTEMPLATE']._serialized_end=3842 + _globals['_SANDBOXWORKLOADTEMPLATESPEC']._serialized_start=3845 + _globals['_SANDBOXWORKLOADTEMPLATESPEC']._serialized_end=4043 + _globals['_SANDBOXWORKLOADCONFIG']._serialized_start=4046 + _globals['_SANDBOXWORKLOADCONFIG']._serialized_end=4262 + _globals['_SANDBOXWORKLOADCONFIG_ENVIRONMENTENTRY']._serialized_start=2867 + _globals['_SANDBOXWORKLOADCONFIG_ENVIRONMENTENTRY']._serialized_end=2917 + _globals['_SANDBOXRESOURCES']._serialized_start=4264 + _globals['_SANDBOXRESOURCES']._serialized_end=4363 + _globals['_SANDBOXSERVICELEVEL']._serialized_start=4365 + _globals['_SANDBOXSERVICELEVEL']._serialized_end=4433 + _globals['_SANDBOXSTARTUP']._serialized_start=4435 + _globals['_SANDBOXSTARTUP']._serialized_end=4519 + _globals['_SANDBOXWORKLOADTEMPLATEPROVENANCE']._serialized_start=4521 + _globals['_SANDBOXWORKLOADTEMPLATEPROVENANCE']._serialized_end=4596 + _globals['_SANDBOXSTATUS']._serialized_start=4599 + _globals['_SANDBOXSTATUS']._serialized_end=5269 + _globals['_SANDBOXCONDITION']._serialized_start=5272 + _globals['_SANDBOXCONDITION']._serialized_end=5434 + _globals['_PLATFORMEVENT']._serialized_start=5437 + _globals['_PLATFORMEVENT']._serialized_end=5693 + _globals['_PLATFORMEVENT_METADATAENTRY']._serialized_start=5626 + _globals['_PLATFORMEVENT_METADATAENTRY']._serialized_end=5673 + _globals['_CREATESANDBOXREQUEST']._serialized_start=5696 + _globals['_CREATESANDBOXREQUEST']._serialized_end=6229 + _globals['_CREATESANDBOXREQUEST_LABELSENTRY']._serialized_start=3504 + _globals['_CREATESANDBOXREQUEST_LABELSENTRY']._serialized_end=3549 + _globals['_CREATESANDBOXREQUEST_ANNOTATIONSENTRY']._serialized_start=3551 + _globals['_CREATESANDBOXREQUEST_ANNOTATIONSENTRY']._serialized_end=3601 + _globals['_CREATESANDBOXTEMPLATEREQUEST']._serialized_start=6232 + _globals['_CREATESANDBOXTEMPLATEREQUEST']._serialized_end=6407 + _globals['_GETSANDBOXTEMPLATEREQUEST']._serialized_start=6409 + _globals['_GETSANDBOXTEMPLATEREQUEST']._serialized_end=6518 + _globals['_LISTSANDBOXTEMPLATESREQUEST']._serialized_start=6521 + _globals['_LISTSANDBOXTEMPLATESREQUEST']._serialized_end=6681 + _globals['_DELETESANDBOXTEMPLATEREQUEST']._serialized_start=6684 + _globals['_DELETESANDBOXTEMPLATEREQUEST']._serialized_end=6839 + _globals['_SANDBOXTEMPLATERESPONSE']._serialized_start=6841 + _globals['_SANDBOXTEMPLATERESPONSE']._serialized_end=6923 + _globals['_LISTSANDBOXTEMPLATESRESPONSE']._serialized_start=6925 + _globals['_LISTSANDBOXTEMPLATESRESPONSE']._serialized_end=7038 + _globals['_DELETESANDBOXTEMPLATERESPONSE']._serialized_start=7040 + _globals['_DELETESANDBOXTEMPLATERESPONSE']._serialized_end=7134 + _globals['_BEGINROOTFSTARSTAGINGREQUEST']._serialized_start=7137 + _globals['_BEGINROOTFSTARSTAGINGREQUEST']._serialized_end=7274 + _globals['_BEGINROOTFSTARSTAGINGRESPONSE']._serialized_start=7277 + _globals['_BEGINROOTFSTARSTAGINGRESPONSE']._serialized_end=7445 + _globals['_GETSANDBOXREQUEST']._serialized_start=7447 + _globals['_GETSANDBOXREQUEST']._serialized_end=7548 + _globals['_LISTSANDBOXESREQUEST']._serialized_start=7551 + _globals['_LISTSANDBOXESREQUEST']._serialized_end=7704 + _globals['_LISTSANDBOXPROVIDERSREQUEST']._serialized_start=7707 + _globals['_LISTSANDBOXPROVIDERSREQUEST']._serialized_end=7860 + _globals['_ATTACHSANDBOXPROVIDERREQUEST']._serialized_start=7863 + _globals['_ATTACHSANDBOXPROVIDERREQUEST']._serialized_end=8051 + _globals['_DETACHSANDBOXPROVIDERREQUEST']._serialized_start=8054 + _globals['_DETACHSANDBOXPROVIDERREQUEST']._serialized_end=8242 + _globals['_DELETESANDBOXREQUEST']._serialized_start=8245 + _globals['_DELETESANDBOXREQUEST']._serialized_end=8392 + _globals['_STOPSANDBOXREQUEST']._serialized_start=8394 + _globals['_STOPSANDBOXREQUEST']._serialized_end=8516 + _globals['_STARTSANDBOXREQUEST']._serialized_start=8518 + _globals['_STARTSANDBOXREQUEST']._serialized_end=8641 + _globals['_SANDBOXRESPONSE']._serialized_start=8644 + _globals['_SANDBOXRESPONSE']._serialized_end=8823 + _globals['_SANDBOXRESPONSE_SERVICEURLSENTRY']._serialized_start=8773 + _globals['_SANDBOXRESPONSE_SERVICEURLSENTRY']._serialized_end=8823 + _globals['_LISTSANDBOXESRESPONSE']._serialized_start=8825 + _globals['_LISTSANDBOXESRESPONSE']._serialized_end=8915 + _globals['_LISTSANDBOXPROVIDERSRESPONSE']._serialized_start=8917 + _globals['_LISTSANDBOXPROVIDERSRESPONSE']._serialized_end=9025 + _globals['_ATTACHSANDBOXPROVIDERRESPONSE']._serialized_start=9028 + _globals['_ATTACHSANDBOXPROVIDERRESPONSE']._serialized_end=9173 + _globals['_DETACHSANDBOXPROVIDERRESPONSE']._serialized_start=9176 + _globals['_DETACHSANDBOXPROVIDERRESPONSE']._serialized_end=9321 + _globals['_PROVIDERDESIREDIDENTITY']._serialized_start=9324 + _globals['_PROVIDERDESIREDIDENTITY']._serialized_end=9545 + _globals['_CONFIGSNAPSHOTREVISION']._serialized_start=9548 + _globals['_CONFIGSNAPSHOTREVISION']._serialized_end=9746 + _globals['_SANDBOXCONFIGREVISION']._serialized_start=9749 + _globals['_SANDBOXCONFIGREVISION']._serialized_end=9938 + _globals['_CONFIGUPDATEOPERATION']._serialized_start=9941 + _globals['_CONFIGUPDATEOPERATION']._serialized_end=10469 + _globals['_PROVIDERMUTATIONRECEIPT']._serialized_start=10472 + _globals['_PROVIDERMUTATIONRECEIPT']._serialized_end=10756 + _globals['_PROVIDERREADINESSOBSERVATION']._serialized_start=10759 + _globals['_PROVIDERREADINESSOBSERVATION']._serialized_end=11106 + _globals['_PROVIDERREADINESSSTATUS']._serialized_start=11109 + _globals['_PROVIDERREADINESSSTATUS']._serialized_end=11593 + _globals['_GETSANDBOXPROVIDERSTATUSREQUEST']._serialized_start=11596 + _globals['_GETSANDBOXPROVIDERSTATUSREQUEST']._serialized_end=11752 + _globals['_GETSANDBOXPROVIDERSTATUSRESPONSE']._serialized_start=11754 + _globals['_GETSANDBOXPROVIDERSTATUSRESPONSE']._serialized_end=11843 + _globals['_REPORTPROVIDERREADINESSREQUEST']._serialized_start=11845 + _globals['_REPORTPROVIDERREADINESSREQUEST']._serialized_end=11962 + _globals['_REPORTPROVIDERREADINESSRESPONSE']._serialized_start=11965 + _globals['_REPORTPROVIDERREADINESSRESPONSE']._serialized_end=12191 + _globals['_DELETESANDBOXRESPONSE']._serialized_start=12193 + _globals['_DELETESANDBOXRESPONSE']._serialized_end=12299 + _globals['_CREATESSHSESSIONREQUEST']._serialized_start=12301 + _globals['_CREATESSHSESSIONREQUEST']._serialized_end=12411 + _globals['_CREATESSHSESSIONRESPONSE']._serialized_start=12414 + _globals['_CREATESSHSESSIONRESPONSE']._serialized_end=12653 + _globals['_EXPOSESERVICEREQUEST']._serialized_start=12656 + _globals['_EXPOSESERVICEREQUEST']._serialized_end=12902 + _globals['_GETSERVICEREQUEST']._serialized_start=12904 + _globals['_GETSERVICEREQUEST']._serialized_end=13022 + _globals['_LISTSERVICESREQUEST']._serialized_start=13025 + _globals['_LISTSERVICESREQUEST']._serialized_end=13170 + _globals['_LISTSERVICESRESPONSE']._serialized_start=13172 + _globals['_LISTSERVICESRESPONSE']._serialized_end=13276 + _globals['_DELETESERVICEREQUEST']._serialized_start=13279 + _globals['_DELETESERVICEREQUEST']._serialized_end=13443 + _globals['_DELETESERVICERESPONSE']._serialized_start=13445 + _globals['_DELETESERVICERESPONSE']._serialized_end=13531 + _globals['_SERVICEENDPOINT']._serialized_start=13534 + _globals['_SERVICEENDPOINT']._serialized_end=13761 + _globals['_SERVICEENDPOINTRESPONSE']._serialized_start=13763 + _globals['_SERVICEENDPOINTRESPONSE']._serialized_end=13850 + _globals['_REVOKESSHSESSIONREQUEST']._serialized_start=13852 + _globals['_REVOKESSHSESSIONREQUEST']._serialized_end=13921 + _globals['_REVOKESSHSESSIONRESPONSE']._serialized_start=13923 + _globals['_REVOKESSHSESSIONRESPONSE']._serialized_end=14012 + _globals['_EXECSANDBOXREQUEST']._serialized_start=14015 + _globals['_EXECSANDBOXREQUEST']._serialized_end=14455 + _globals['_EXECSANDBOXREQUEST_ENVIRONMENTENTRY']._serialized_start=2867 + _globals['_EXECSANDBOXREQUEST_ENVIRONMENTENTRY']._serialized_end=2917 + _globals['_EXECSANDBOXSTDOUT']._serialized_start=14457 + _globals['_EXECSANDBOXSTDOUT']._serialized_end=14490 + _globals['_EXECSANDBOXSTDERR']._serialized_start=14492 + _globals['_EXECSANDBOXSTDERR']._serialized_end=14525 + _globals['_EXECSANDBOXEXIT']._serialized_start=14527 + _globals['_EXECSANDBOXEXIT']._serialized_end=14563 + _globals['_EXECSANDBOXEVENT']._serialized_start=14566 + _globals['_EXECSANDBOXEVENT']._serialized_end=14744 + _globals['_TCPFORWARDINIT']._serialized_start=14747 + _globals['_TCPFORWARDINIT']._serialized_end=14954 + _globals['_TCPFORWARDFRAME']._serialized_start=14956 + _globals['_TCPFORWARDFRAME']._serialized_end=15046 + _globals['_EXECSANDBOXINPUT']._serialized_start=15049 + _globals['_EXECSANDBOXINPUT']._serialized_end=15203 + _globals['_EXECSANDBOXWINDOWRESIZE']._serialized_start=15205 + _globals['_EXECSANDBOXWINDOWRESIZE']._serialized_end=15258 + _globals['_SSHSESSION']._serialized_start=15261 + _globals['_SSHSESSION']._serialized_end=15459 + _globals['_WATCHSANDBOXREQUEST']._serialized_start=15462 + _globals['_WATCHSANDBOXREQUEST']._serialized_end=15846 + _globals['_SANDBOXSTREAMEVENT']._serialized_start=15849 + _globals['_SANDBOXSTREAMEVENT']._serialized_end=16148 + _globals['_SANDBOXLOGLINE']._serialized_start=16151 + _globals['_SANDBOXLOGLINE']._serialized_end=16424 + _globals['_SANDBOXLOGLINE_FIELDSENTRY']._serialized_start=16359 + _globals['_SANDBOXLOGLINE_FIELDSENTRY']._serialized_end=16404 + _globals['_SANDBOXSTREAMWARNING']._serialized_start=16426 + _globals['_SANDBOXSTREAMWARNING']._serialized_end=16465 + _globals['_CREATEPROVIDERREQUEST']._serialized_start=16468 + _globals['_CREATEPROVIDERREQUEST']._serialized_end=16631 + _globals['_GETPROVIDERREQUEST']._serialized_start=16633 + _globals['_GETPROVIDERREQUEST']._serialized_end=16735 + _globals['_LISTPROVIDERSREQUEST']._serialized_start=16738 + _globals['_LISTPROVIDERSREQUEST']._serialized_end=16867 + _globals['_UPDATEPROVIDERREQUEST']._serialized_start=16870 + _globals['_UPDATEPROVIDERREQUEST']._serialized_end=17306 + _globals['_UPDATEPROVIDERREQUEST_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_start=17182 + _globals['_UPDATEPROVIDERREQUEST_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_end=17274 + _globals['_DELETEPROVIDERREQUEST']._serialized_start=17309 + _globals['_DELETEPROVIDERREQUEST']._serialized_end=17457 + _globals['_PROVIDERRESPONSE']._serialized_start=17460 + _globals['_PROVIDERRESPONSE']._serialized_end=17615 + _globals['_LISTPROVIDERSRESPONSE']._serialized_start=17617 + _globals['_LISTPROVIDERSRESPONSE']._serialized_end=17718 + _globals['_LISTPROVIDERPROFILESREQUEST']._serialized_start=17721 + _globals['_LISTPROVIDERPROFILESREQUEST']._serialized_end=17857 + _globals['_GETPROVIDERPROFILEREQUEST']._serialized_start=17859 + _globals['_GETPROVIDERPROFILEREQUEST']._serialized_end=17966 + _globals['_PROVIDERPROFILEIMPORTITEM']._serialized_start=17968 + _globals['_PROVIDERPROFILEIMPORTITEM']._serialized_end=18059 + _globals['_PROVIDERPROFILEDIAGNOSTIC']._serialized_start=18061 + _globals['_PROVIDERPROFILEDIAGNOSTIC']._serialized_end=18174 + _globals['_PROVIDERCREDENTIALTOKENGRANTAUDIENCEOVERRIDE']._serialized_start=18176 + _globals['_PROVIDERCREDENTIALTOKENGRANTAUDIENCEOVERRIDE']._serialized_end=18298 + _globals['_PROVIDERCREDENTIALTOKENGRANTSUBJECTTOKEN']._serialized_start=18300 + _globals['_PROVIDERCREDENTIALTOKENGRANTSUBJECTTOKEN']._serialized_end=18406 + _globals['_PROVIDERCREDENTIALTOKENGRANT']._serialized_start=18409 + _globals['_PROVIDERCREDENTIALTOKENGRANT']._serialized_end=18891 + _globals['_PROVIDERPROFILECREDENTIAL']._serialized_start=18894 + _globals['_PROVIDERPROFILECREDENTIAL']._serialized_end=19228 + _globals['_PROVIDERCREDENTIALREFRESHMATERIAL']._serialized_start=19230 + _globals['_PROVIDERCREDENTIALREFRESHMATERIAL']._serialized_end=19334 + _globals['_PROVIDERCREDENTIALREFRESHOUTPUT']._serialized_start=19336 + _globals['_PROVIDERCREDENTIALREFRESHOUTPUT']._serialized_end=19405 + _globals['_PROVIDERCREDENTIALREFRESH']._serialized_start=19408 + _globals['_PROVIDERCREDENTIALREFRESH']._serialized_end=19837 + _globals['_PROVIDERCREDENTIALREFRESHSTATUS']._serialized_start=19840 + _globals['_PROVIDERCREDENTIALREFRESHSTATUS']._serialized_end=20486 + _globals['_PROVIDERPROFILEDISCOVERY']._serialized_start=20488 + _globals['_PROVIDERPROFILEDISCOVERY']._serialized_end=20535 + _globals['_GETPROVIDERREFRESHSTATUSREQUEST']._serialized_start=20538 + _globals['_GETPROVIDERREFRESHSTATUSREQUEST']._serialized_end=20681 + _globals['_GETPROVIDERREFRESHSTATUSRESPONSE']._serialized_start=20683 + _globals['_GETPROVIDERREFRESHSTATUSRESPONSE']._serialized_end=20785 + _globals['_CONFIGUREPROVIDERREFRESHREQUEST']._serialized_start=20788 + _globals['_CONFIGUREPROVIDERREFRESHREQUEST']._serialized_end=21256 + _globals['_CONFIGUREPROVIDERREFRESHREQUEST_MATERIALENTRY']._serialized_start=21188 + _globals['_CONFIGUREPROVIDERREFRESHREQUEST_MATERIALENTRY']._serialized_end=21235 + _globals['_CONFIGUREPROVIDERREFRESHRESPONSE']._serialized_start=21258 + _globals['_CONFIGUREPROVIDERREFRESHRESPONSE']._serialized_end=21355 + _globals['_ROTATEPROVIDERCREDENTIALREQUEST']._serialized_start=21358 + _globals['_ROTATEPROVIDERCREDENTIALREQUEST']._serialized_end=21521 + _globals['_ROTATEPROVIDERCREDENTIALRESPONSE']._serialized_start=21523 + _globals['_ROTATEPROVIDERCREDENTIALRESPONSE']._serialized_end=21620 + _globals['_DELETEPROVIDERREFRESHREQUEST']._serialized_start=21623 + _globals['_DELETEPROVIDERREFRESHREQUEST']._serialized_end=21806 + _globals['_DELETEPROVIDERREFRESHRESPONSE']._serialized_start=21808 + _globals['_DELETEPROVIDERREFRESHRESPONSE']._serialized_end=21902 + _globals['_PROVIDERPROFILE']._serialized_start=21905 + _globals['_PROVIDERPROFILE']._serialized_end=22523 + _globals['_PROVIDERPROFILE_ANNOTATIONSENTRY']._serialized_start=3551 + _globals['_PROVIDERPROFILE_ANNOTATIONSENTRY']._serialized_end=3601 + _globals['_PROVIDERPROFILEFILE']._serialized_start=22525 + _globals['_PROVIDERPROFILEFILE']._serialized_end=22594 + _globals['_PROVIDERPROFILERESPONSE']._serialized_start=22596 + _globals['_PROVIDERPROFILERESPONSE']._serialized_end=22669 + _globals['_LISTPROVIDERPROFILESRESPONSE']._serialized_start=22671 + _globals['_LISTPROVIDERPROFILESRESPONSE']._serialized_end=22775 + _globals['_IMPORTPROVIDERPROFILESREQUEST']._serialized_start=22778 + _globals['_IMPORTPROVIDERPROFILESREQUEST']._serialized_end=22956 + _globals['_IMPORTPROVIDERPROFILESRESPONSE']._serialized_start=22959 + _globals['_IMPORTPROVIDERPROFILESRESPONSE']._serialized_end=23120 + _globals['_UPDATEPROVIDERPROFILESREQUEST']._serialized_start=23123 + _globals['_UPDATEPROVIDERPROFILESREQUEST']._serialized_end=23347 + _globals['_UPDATEPROVIDERPROFILESRESPONSE']._serialized_start=23350 + _globals['_UPDATEPROVIDERPROFILESRESPONSE']._serialized_end=23509 + _globals['_LINTPROVIDERPROFILESREQUEST']._serialized_start=23512 + _globals['_LINTPROVIDERPROFILESREQUEST']._serialized_end=23668 + _globals['_LINTPROVIDERPROFILESRESPONSE']._serialized_start=23670 + _globals['_LINTPROVIDERPROFILESRESPONSE']._serialized_end=23777 + _globals['_DELETEPROVIDERRESPONSE']._serialized_start=23779 + _globals['_DELETEPROVIDERRESPONSE']._serialized_end=23866 + _globals['_DELETEPROVIDERPROFILEREQUEST']._serialized_start=23869 + _globals['_DELETEPROVIDERPROFILEREQUEST']._serialized_end=24022 + _globals['_DELETEPROVIDERPROFILERESPONSE']._serialized_start=24024 + _globals['_DELETEPROVIDERPROFILERESPONSE']._serialized_end=24118 + _globals['_GETSANDBOXPROVIDERENVIRONMENTREQUEST']._serialized_start=24120 + _globals['_GETSANDBOXPROVIDERENVIRONMENTREQUEST']._serialized_end=24223 + _globals['_STATICCREDENTIALENDPOINTBINDING']._serialized_start=24225 + _globals['_STATICCREDENTIALENDPOINTBINDING']._serialized_end=24300 + _globals['_STATICCREDENTIALBINDING']._serialized_start=24303 + _globals['_STATICCREDENTIALBINDING']._serialized_end=24459 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE']._serialized_start=24462 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE']._serialized_end=25640 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_ENVIRONMENTENTRY']._serialized_start=2867 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_ENVIRONMENTENTRY']._serialized_end=2917 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_start=17182 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_CREDENTIALEXPIRATIONTIMESENTRY']._serialized_end=17274 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_DYNAMICCREDENTIALSENTRY']._serialized_start=25360 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_DYNAMICCREDENTIALSENTRY']._serialized_end=25458 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_STATICCREDENTIALBINDINGSENTRY']._serialized_start=25460 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_STATICCREDENTIALBINDINGSENTRY']._serialized_end=25562 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_FILESENTRY']._serialized_start=25564 + _globals['_GETSANDBOXPROVIDERENVIRONMENTRESPONSE_FILESENTRY']._serialized_end=25608 + _globals['_EXCHANGEPROVIDERSUBJECTTOKENREQUEST']._serialized_start=25643 + _globals['_EXCHANGEPROVIDERSUBJECTTOKENREQUEST']._serialized_end=25777 + _globals['_EXCHANGEPROVIDERSUBJECTTOKENRESPONSE']._serialized_start=25780 + _globals['_EXCHANGEPROVIDERSUBJECTTOKENRESPONSE']._serialized_end=25934 + _globals['_UPDATECONFIGREQUEST']._serialized_start=25937 + _globals['_UPDATECONFIGREQUEST']._serialized_end=26458 + _globals['_UPDATECONFIGREQUEST_ANNOTATIONSENTRY']._serialized_start=3551 + _globals['_UPDATECONFIGREQUEST_ANNOTATIONSENTRY']._serialized_end=3601 + _globals['_POLICYMERGEOPERATION']._serialized_start=26461 + _globals['_POLICYMERGEOPERATION']._serialized_end=26836 + _globals['_ADDNETWORKRULE']._serialized_start=26838 + _globals['_ADDNETWORKRULE']._serialized_end=26928 + _globals['_REMOVENETWORKENDPOINT']._serialized_start=26930 + _globals['_REMOVENETWORKENDPOINT']._serialized_end=27000 + _globals['_REMOVENETWORKRULE']._serialized_start=27002 + _globals['_REMOVENETWORKRULE']._serialized_end=27040 + _globals['_L7RULETARGET']._serialized_start=27043 + _globals['_L7RULETARGET']._serialized_end=27208 + _globals['_ADDDENYRULES']._serialized_start=27211 + _globals['_ADDDENYRULES']._serialized_end=27347 + _globals['_ADDALLOWRULES']._serialized_start=27350 + _globals['_ADDALLOWRULES']._serialized_end=27478 + _globals['_REMOVENETWORKBINARY']._serialized_start=27480 + _globals['_REMOVENETWORKBINARY']._serialized_end=27541 + _globals['_UPDATECONFIGRESPONSE']._serialized_start=27544 + _globals['_UPDATECONFIGRESPONSE']._serialized_end=27774 + _globals['_UPDATECONFIGRESPONSE_ANNOTATIONSENTRY']._serialized_start=3551 + _globals['_UPDATECONFIGRESPONSE_ANNOTATIONSENTRY']._serialized_end=3601 + _globals['_GETSANDBOXPOLICYSTATUSREQUEST']._serialized_start=27777 + _globals['_GETSANDBOXPOLICYSTATUSREQUEST']._serialized_end=27926 + _globals['_GETSANDBOXPOLICYSTATUSRESPONSE']._serialized_start=27928 + _globals['_GETSANDBOXPOLICYSTATUSRESPONSE']._serialized_end=28039 + _globals['_LISTSANDBOXPOLICIESREQUEST']._serialized_start=28042 + _globals['_LISTSANDBOXPOLICIESREQUEST']._serialized_end=28210 + _globals['_LISTSANDBOXPOLICIESRESPONSE']._serialized_start=28212 + _globals['_LISTSANDBOXPOLICIESRESPONSE']._serialized_end=28322 + _globals['_REPORTPOLICYSTATUSREQUEST']._serialized_start=28325 + _globals['_REPORTPOLICYSTATUSREQUEST']._serialized_end=28453 + _globals['_REPORTPOLICYSTATUSRESPONSE']._serialized_start=28455 + _globals['_REPORTPOLICYSTATUSRESPONSE']._serialized_end=28483 + _globals['_SANDBOXCONFIGURATIONADMISSION']._serialized_start=28486 + _globals['_SANDBOXCONFIGURATIONADMISSION']._serialized_end=28712 + _globals['_REPORTSANDBOXCONFIGURATIONREQUEST']._serialized_start=28715 + _globals['_REPORTSANDBOXCONFIGURATIONREQUEST']._serialized_end=28864 + _globals['_REPORTSANDBOXCONFIGURATIONRESPONSE']._serialized_start=28866 + _globals['_REPORTSANDBOXCONFIGURATIONRESPONSE']._serialized_end=28902 + _globals['_SANDBOXPOLICYREVISION']._serialized_start=28905 + _globals['_SANDBOXPOLICYREVISION']._serialized_end=29347 + _globals['_SANDBOXPOLICYREVISION_PROVENANCEENTRY']._serialized_start=29257 + _globals['_SANDBOXPOLICYREVISION_PROVENANCEENTRY']._serialized_end=29306 + _globals['_GETSANDBOXLOGSREQUEST']._serialized_start=29350 + _globals['_GETSANDBOXLOGSREQUEST']._serialized_end=29573 + _globals['_PUSHSANDBOXLOGSREQUEST']._serialized_start=29575 + _globals['_PUSHSANDBOXLOGSREQUEST']._serialized_end=29663 + _globals['_PUSHSANDBOXLOGSRESPONSE']._serialized_start=29665 + _globals['_PUSHSANDBOXLOGSRESPONSE']._serialized_end=29690 + _globals['_GETSANDBOXLOGSRESPONSE']._serialized_start=29692 + _globals['_GETSANDBOXLOGSRESPONSE']._serialized_end=29782 + _globals['_SUPERVISORMESSAGE']._serialized_start=29785 + _globals['_SUPERVISORMESSAGE']._serialized_end=30028 + _globals['_GATEWAYMESSAGE']._serialized_start=30031 + _globals['_GATEWAYMESSAGE']._serialized_end=30384 + _globals['_SUPERVISORHELLO']._serialized_start=30387 + _globals['_SUPERVISORHELLO']._serialized_end=30563 + _globals['_SESSIONACCEPTED']._serialized_start=30565 + _globals['_SESSIONACCEPTED']._serialized_end=30688 + _globals['_SESSIONREJECTED']._serialized_start=30690 + _globals['_SESSIONREJECTED']._serialized_end=30723 + _globals['_SESSIONREDIRECT']._serialized_start=30725 + _globals['_SESSIONREDIRECT']._serialized_end=30791 + _globals['_SUPERVISORHEARTBEAT']._serialized_start=30793 + _globals['_SUPERVISORHEARTBEAT']._serialized_end=30814 + _globals['_GATEWAYHEARTBEAT']._serialized_start=30816 + _globals['_GATEWAYHEARTBEAT']._serialized_end=30834 + _globals['_REPORTMAINPROCESSEXITREQUEST']._serialized_start=30836 + _globals['_REPORTMAINPROCESSEXITREQUEST']._serialized_end=30926 + _globals['_REPORTMAINPROCESSEXITRESPONSE']._serialized_start=30928 + _globals['_REPORTMAINPROCESSEXITRESPONSE']._serialized_end=30959 + _globals['_FINALIZEMAINPROCESSEXITREQUEST']._serialized_start=30961 + _globals['_FINALIZEMAINPROCESSEXITREQUEST']._serialized_end=31034 + _globals['_FINALIZEMAINPROCESSEXITRESPONSE']._serialized_start=31036 + _globals['_FINALIZEMAINPROCESSEXITRESPONSE']._serialized_end=31069 + _globals['_RELAYOPEN']._serialized_start=31072 + _globals['_RELAYOPEN']._serialized_end=31223 + _globals['_SSHRELAYTARGET']._serialized_start=31225 + _globals['_SSHRELAYTARGET']._serialized_end=31241 + _globals['_TCPRELAYTARGET']._serialized_start=31243 + _globals['_TCPRELAYTARGET']._serialized_end=31287 + _globals['_RELAYINIT']._serialized_start=31289 + _globals['_RELAYINIT']._serialized_end=31320 + _globals['_RELAYFRAME']._serialized_start=31322 + _globals['_RELAYFRAME']._serialized_end=31402 + _globals['_PEERRELAYINIT']._serialized_start=31404 + _globals['_PEERRELAYINIT']._serialized_end=31514 + _globals['_PEERRELAYFRAME']._serialized_start=31516 + _globals['_PEERRELAYFRAME']._serialized_end=31604 + _globals['_RELAYOPENRESULT']._serialized_start=31606 + _globals['_RELAYOPENRESULT']._serialized_end=31675 + _globals['_RELAYCLOSE']._serialized_start=31677 + _globals['_RELAYCLOSE']._serialized_end=31725 + _globals['_L7REQUESTSAMPLE']._serialized_start=31727 + _globals['_L7REQUESTSAMPLE']._serialized_end=31807 + _globals['_DENIALSUMMARY']._serialized_start=31810 + _globals['_DENIALSUMMARY']._serialized_end=32316 + _globals['_DENIALGROUPCOUNT']._serialized_start=32318 + _globals['_DENIALGROUPCOUNT']._serialized_end=32378 + _globals['_NETWORKACTIVITYSUMMARY']._serialized_start=32381 + _globals['_NETWORKACTIVITYSUMMARY']._serialized_end=32524 + _globals['_POLICYCHUNK']._serialized_start=32527 + _globals['_POLICYCHUNK']._serialized_end=33435 + _globals['_DRAFTPOLICYUPDATE']._serialized_start=33437 + _globals['_DRAFTPOLICYUPDATE']._serialized_end=33539 + _globals['_SUBMITPOLICYANALYSISREQUEST']._serialized_start=33542 + _globals['_SUBMITPOLICYANALYSISREQUEST']._serialized_end=33850 + _globals['_SUBMITPOLICYANALYSISRESPONSE']._serialized_start=33853 + _globals['_SUBMITPOLICYANALYSISRESPONSE']._serialized_end=33988 + _globals['_GETDRAFTPOLICYREQUEST']._serialized_start=33991 + _globals['_GETDRAFTPOLICYREQUEST']._serialized_end=34122 + _globals['_GETDRAFTPOLICYRESPONSE']._serialized_start=34125 + _globals['_GETDRAFTPOLICYRESPONSE']._serialized_end=34323 + _globals['_APPROVEDRAFTCHUNKREQUEST']._serialized_start=34326 + _globals['_APPROVEDRAFTCHUNKREQUEST']._serialized_end=34497 + _globals['_APPROVEDRAFTCHUNKRESPONSE']._serialized_start=34499 + _globals['_APPROVEDRAFTCHUNKRESPONSE']._serialized_end=34571 + _globals['_REJECTDRAFTCHUNKREQUEST']._serialized_start=34574 + _globals['_REJECTDRAFTCHUNKREQUEST']._serialized_end=34738 + _globals['_REJECTDRAFTCHUNKRESPONSE']._serialized_start=34740 + _globals['_REJECTDRAFTCHUNKRESPONSE']._serialized_end=34766 + _globals['_DRAFTCHUNKAPPROVAL']._serialized_start=34768 + _globals['_DRAFTCHUNKAPPROVAL']._serialized_end=34828 + _globals['_APPROVEALLDRAFTCHUNKSREQUEST']._serialized_start=34831 + _globals['_APPROVEALLDRAFTCHUNKSREQUEST']._serialized_end=35053 + _globals['_APPROVEALLDRAFTCHUNKSRESPONSE']._serialized_start=35055 + _globals['_APPROVEALLDRAFTCHUNKSRESPONSE']._serialized_end=35180 + _globals['_EDITDRAFTCHUNKREQUEST']._serialized_start=35183 + _globals['_EDITDRAFTCHUNKREQUEST']._serialized_end=35393 + _globals['_EDITDRAFTCHUNKRESPONSE']._serialized_start=35395 + _globals['_EDITDRAFTCHUNKRESPONSE']._serialized_end=35419 + _globals['_UNDODRAFTCHUNKREQUEST']._serialized_start=35422 + _globals['_UNDODRAFTCHUNKREQUEST']._serialized_end=35568 + _globals['_UNDODRAFTCHUNKRESPONSE']._serialized_start=35570 + _globals['_UNDODRAFTCHUNKRESPONSE']._serialized_end=35639 + _globals['_CLEARDRAFTCHUNKSREQUEST']._serialized_start=35642 + _globals['_CLEARDRAFTCHUNKSREQUEST']._serialized_end=35772 + _globals['_CLEARDRAFTCHUNKSRESPONSE']._serialized_start=35774 + _globals['_CLEARDRAFTCHUNKSRESPONSE']._serialized_end=35824 + _globals['_GETDRAFTHISTORYREQUEST']._serialized_start=35826 + _globals['_GETDRAFTHISTORYREQUEST']._serialized_end=35935 + _globals['_DRAFTHISTORYENTRY']._serialized_start=35938 + _globals['_DRAFTHISTORYENTRY']._serialized_end=36084 + _globals['_GETDRAFTHISTORYRESPONSE']._serialized_start=36086 + _globals['_GETDRAFTHISTORYRESPONSE']._serialized_end=36161 + _globals['_CREATEWORKSPACEREQUEST']._serialized_start=36164 + _globals['_CREATEWORKSPACEREQUEST']._serialized_end=36335 + _globals['_CREATEWORKSPACEREQUEST_LABELSENTRY']._serialized_start=3504 + _globals['_CREATEWORKSPACEREQUEST_LABELSENTRY']._serialized_end=3549 + _globals['_CREATEWORKSPACERESPONSE']._serialized_start=36337 + _globals['_CREATEWORKSPACERESPONSE']._serialized_end=36416 + _globals['_GETWORKSPACEREQUEST']._serialized_start=36418 + _globals['_GETWORKSPACEREQUEST']._serialized_end=36453 + _globals['_GETWORKSPACERESPONSE']._serialized_start=36455 + _globals['_GETWORKSPACERESPONSE']._serialized_end=36531 + _globals['_LISTWORKSPACESREQUEST']._serialized_start=36533 + _globals['_LISTWORKSPACESREQUEST']._serialized_end=36619 + _globals['_LISTWORKSPACESRESPONSE']._serialized_start=36621 + _globals['_LISTWORKSPACESRESPONSE']._serialized_end=36725 + _globals['_DELETEWORKSPACEREQUEST']._serialized_start=36727 + _globals['_DELETEWORKSPACEREQUEST']._serialized_end=36808 + _globals['_DELETEWORKSPACERESPONSE']._serialized_start=36810 + _globals['_DELETEWORKSPACERESPONSE']._serialized_end=36898 + _globals['_WORKSPACEMEMBER']._serialized_start=36901 + _globals['_WORKSPACEMEMBER']._serialized_end=37042 + _globals['_ADDWORKSPACEMEMBERREQUEST']._serialized_start=37045 + _globals['_ADDWORKSPACEMEMBERREQUEST']._serialized_end=37230 + _globals['_ADDWORKSPACEMEMBERRESPONSE']._serialized_start=37232 + _globals['_ADDWORKSPACEMEMBERRESPONSE']._serialized_end=37307 + _globals['_REMOVEWORKSPACEMEMBERREQUEST']._serialized_start=37310 + _globals['_REMOVEWORKSPACEMEMBERREQUEST']._serialized_end=37478 + _globals['_REMOVEWORKSPACEMEMBERRESPONSE']._serialized_start=37480 + _globals['_REMOVEWORKSPACEMEMBERRESPONSE']._serialized_end=37574 + _globals['_LISTWORKSPACEMEMBERSREQUEST']._serialized_start=37577 + _globals['_LISTWORKSPACEMEMBERSREQUEST']._serialized_end=37713 + _globals['_LISTWORKSPACEMEMBERSRESPONSE']._serialized_start=37715 + _globals['_LISTWORKSPACEMEMBERSRESPONSE']._serialized_end=37818 + _globals['_EXTENSIONSERVICECREDENTIAL']._serialized_start=37821 + _globals['_EXTENSIONSERVICECREDENTIAL']._serialized_end=37966 + _globals['_ENDPOINTOBSERVATION']._serialized_start=37968 + _globals['_ENDPOINTOBSERVATION']._serialized_end=38056 + _globals['_REPORTENDPOINTSTATUSREQUEST']._serialized_start=38059 + _globals['_REPORTENDPOINTSTATUSREQUEST']._serialized_end=38304 + _globals['_REPORTENDPOINTSTATUSRESPONSE']._serialized_start=38306 + _globals['_REPORTENDPOINTSTATUSRESPONSE']._serialized_end=38336 + _globals['_ENDPOINTSTATUS']._serialized_start=38339 + _globals['_ENDPOINTSTATUS']._serialized_end=38550 + _globals['_SANDBOXPROVISIONING']._serialized_start=38553 + _globals['_SANDBOXPROVISIONING']._serialized_end=39252 + _globals['_SANDBOXSERVICEEXPOSURE']._serialized_start=39255 + _globals['_SANDBOXSERVICEEXPOSURE']._serialized_end=39385 + _globals['_OPENSHELL']._serialized_start=44983 + _globals['_OPENSHELL']._serialized_end=55910 # @@protoc_insertion_point(module_scope) diff --git a/interceptor/_gen/openshell_pb2_grpc.py b/interceptor/_gen/openshell_pb2_grpc.py index f8b9a35..35c0014 100644 --- a/interceptor/_gen/openshell_pb2_grpc.py +++ b/interceptor/_gen/openshell_pb2_grpc.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT! """Client and server classes corresponding to protobuf-defined services.""" diff --git a/interceptor/_gen/options_pb2.py b/interceptor/_gen/options_pb2.py index 8fcab1e..080fc6c 100644 --- a/interceptor/_gen/options_pb2.py +++ b/interceptor/_gen/options_pb2.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # -*- coding: utf-8 -*- # Generated by the protocol buffer compiler. DO NOT EDIT! diff --git a/interceptor/_gen/options_pb2_grpc.py b/interceptor/_gen/options_pb2_grpc.py index 4f41e2f..0a24471 100644 --- a/interceptor/_gen/options_pb2_grpc.py +++ b/interceptor/_gen/options_pb2_grpc.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT! """Client and server classes corresponding to protobuf-defined services.""" diff --git a/interceptor/_gen/sandbox_pb2.py b/interceptor/_gen/sandbox_pb2.py index f7c6915..8b9f661 100644 --- a/interceptor/_gen/sandbox_pb2.py +++ b/interceptor/_gen/sandbox_pb2.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # -*- coding: utf-8 -*- # Generated by the protocol buffer compiler. DO NOT EDIT! @@ -36,7 +36,7 @@ import datamodel_pb2 as datamodel__pb2 -DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\rsandbox.proto\x12\x14openshell.sandbox.v1\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x0f\x64\x61tamodel.proto\"\xc3\x04\n\rSandboxPolicy\x12\x0f\n\x07version\x18\x01 \x01(\r\x12:\n\nfilesystem\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.FilesystemPolicy\x12\x36\n\x08landlock\x18\x03 \x01(\x0b\x32$.openshell.sandbox.v1.LandlockPolicy\x12\x34\n\x07process\x18\x04 \x01(\x0b\x32#.openshell.sandbox.v1.ProcessPolicy\x12R\n\x10network_policies\x18\x05 \x03(\x0b\x32\x38.openshell.sandbox.v1.SandboxPolicy.NetworkPoliciesEntry\x12X\n\x13network_middlewares\x18\x06 \x03(\x0b\x32;.openshell.sandbox.v1.SandboxPolicy.NetworkMiddlewaresEntry\x1a_\n\x14NetworkPoliciesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x36\n\x05value\x18\x02 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule:\x02\x38\x01\x1ah\n\x17NetworkMiddlewaresEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12<\n\x05value\x18\x02 \x01(\x0b\x32-.openshell.sandbox.v1.NetworkMiddlewareConfig:\x02\x38\x01\"R\n\x10\x46ilesystemPolicy\x12\x17\n\x0finclude_workdir\x18\x01 \x01(\x08\x12\x11\n\tread_only\x18\x02 \x03(\t\x12\x12\n\nread_write\x18\x03 \x03(\t\"\'\n\x0eLandlockPolicy\x12\x15\n\rcompatibility\x18\x01 \x01(\t\":\n\rProcessPolicy\x12\x13\n\x0brun_as_user\x18\x01 \x01(\t\x12\x14\n\x0crun_as_group\x18\x02 \x01(\t\"\x92\x01\n\x11NetworkPolicyRule\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x38\n\tendpoints\x18\x02 \x03(\x0b\x32%.openshell.sandbox.v1.NetworkEndpoint\x12\x35\n\x08\x62inaries\x18\x03 \x03(\x0b\x32#.openshell.sandbox.v1.NetworkBinary\"\xca\x01\n\x17NetworkMiddlewareConfig\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nmiddleware\x18\x02 \x01(\t\x12\'\n\x06\x63onfig\x18\x03 \x01(\x0b\x32\x17.google.protobuf.Struct\x12\x10\n\x08on_error\x18\x04 \x01(\t\x12\x43\n\tendpoints\x18\x05 \x01(\x0b\x32\x30.openshell.sandbox.v1.MiddlewareEndpointSelector\x12\r\n\x05order\x18\x06 \x01(\x05\">\n\x1aMiddlewareEndpointSelector\x12\x0f\n\x07include\x18\x01 \x03(\t\x12\x0f\n\x07\x65xclude\x18\x02 \x03(\t\",\n\x18NetworkCredentialBinding\x12\x10\n\x08provider\x18\x01 \x01(\t\"\xc4\x08\n\x0fNetworkEndpoint\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\x12\x10\n\x08protocol\x18\x03 \x01(\t\x12\x31\n\x03tls\x18\x04 \x01(\x0e\x32$.openshell.sandbox.v1.NetworkTlsMode\x12\x41\n\x0b\x65nforcement\x18\x05 \x01(\x0e\x32,.openshell.sandbox.v1.NetworkEnforcementMode\x12\x39\n\x06\x61\x63\x63\x65ss\x18\x06 \x01(\x0e\x32).openshell.sandbox.v1.NetworkAccessPreset\x12+\n\x05rules\x18\x07 \x03(\x0b\x32\x1c.openshell.sandbox.v1.L7Rule\x12\x13\n\x0b\x61llowed_ips\x18\x08 \x03(\t\x12\r\n\x05ports\x18\t \x03(\r\x12\x34\n\ndeny_rules\x18\n \x03(\x0b\x32 .openshell.sandbox.v1.L7DenyRule\x12\x1b\n\x13\x61llow_encoded_slash\x18\x0b \x01(\x08\x12\x19\n\x11persisted_queries\x18\x0c \x01(\t\x12\x65\n\x19graphql_persisted_queries\x18\r \x03(\x0b\x32\x42.openshell.sandbox.v1.NetworkEndpoint.GraphqlPersistedQueriesEntry\x12\x1e\n\x16graphql_max_body_bytes\x18\x0e \x01(\r\x12\x0c\n\x04path\x18\x0f \x01(\t\x12$\n\x1cwebsocket_credential_rewrite\x18\x10 \x01(\x08\x12\'\n\x1frequest_body_credential_rewrite\x18\x11 \x01(\x08\x12\x18\n\x10\x61\x64visor_proposed\x18\x12 \x01(\x08\x12\x1a\n\x12\x63redential_signing\x18\x13 \x01(\t\x12\x17\n\x0fsigning_service\x18\x14 \x01(\t\x12\x16\n\x0esigning_region\x18\x15 \x01(\t\x12\x1f\n\x17json_rpc_max_body_bytes\x18\x16 \x01(\r\x12-\n\x03mcp\x18\x17 \x01(\x0b\x32 .openshell.sandbox.v1.McpOptions\x12J\n\x12\x63redential_binding\x18\x18 \x01(\x0b\x32..openshell.sandbox.v1.NetworkCredentialBinding\x12%\n\x1d\x61llow_uninspected_credentials\x18\x19 \x01(\x08\x12\x1d\n\x15provider_credentialed\x18\x1a \x01(\x08\x1a\x66\n\x1cGraphqlPersistedQueriesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x35\n\x05value\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.GraphqlOperation:\x02\x38\x01\"\x9e\x01\n\nMcpOptions\x12\x1e\n\x11strict_tool_names\x18\x01 \x01(\x08H\x00\x88\x01\x01\x12(\n\x1b\x61llow_all_known_mcp_methods\x18\x02 \x01(\x08H\x01\x88\x01\x01\x12\x10\n\x08versions\x18\x03 \x03(\tB\x14\n\x12_strict_tool_namesB\x1e\n\x1c_allow_all_known_mcp_methods\"R\n\x10GraphqlOperation\x12\x16\n\x0eoperation_type\x18\x01 \x01(\t\x12\x16\n\x0eoperation_name\x18\x02 \x01(\t\x12\x0e\n\x06\x66ields\x18\x03 \x03(\t\"\xa4\x03\n\nL7DenyRule\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x03 \x01(\t\x12:\n\x05query\x18\x04 \x03(\x0b\x32+.openshell.sandbox.v1.L7DenyRule.QueryEntry\x12\x16\n\x0eoperation_type\x18\x05 \x01(\t\x12\x16\n\x0eoperation_name\x18\x06 \x01(\t\x12\x0e\n\x06\x66ields\x18\x07 \x03(\t\x12<\n\x06params\x18\t \x03(\x0b\x32,.openshell.sandbox.v1.L7DenyRule.ParamsEntry\x1aR\n\nQueryEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01\x1aS\n\x0bParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01J\x04\x08\x08\x10\t\"6\n\x06L7Rule\x12,\n\x05\x61llow\x18\x01 \x01(\x0b\x32\x1d.openshell.sandbox.v1.L7Allow\"\x9b\x03\n\x07L7Allow\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x03 \x01(\t\x12\x37\n\x05query\x18\x04 \x03(\x0b\x32(.openshell.sandbox.v1.L7Allow.QueryEntry\x12\x16\n\x0eoperation_type\x18\x05 \x01(\t\x12\x16\n\x0eoperation_name\x18\x06 \x01(\t\x12\x0e\n\x06\x66ields\x18\x07 \x03(\t\x12\x39\n\x06params\x18\t \x03(\x0b\x32).openshell.sandbox.v1.L7Allow.ParamsEntry\x1aR\n\nQueryEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01\x1aS\n\x0bParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01J\x04\x08\x08\x10\t\"+\n\x0eL7QueryMatcher\x12\x0c\n\x04glob\x18\x01 \x01(\t\x12\x0b\n\x03\x61ny\x18\x02 \x03(\t\",\n\rNetworkBinary\x12\x0c\n\x04path\x18\x01 \x01(\tJ\x04\x08\x02\x10\x03R\x07harness\"k\n\x17GetSandboxConfigRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\x19\n\x17GetGatewayConfigRequest\"\xda\x01\n\x18GetGatewayConfigResponse\x12N\n\x08settings\x18\x01 \x03(\x0b\x32<.openshell.sandbox.v1.GetGatewayConfigResponse.SettingsEntry\x12\x19\n\x11settings_revision\x18\x02 \x01(\x04\x1aS\n\rSettingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x31\n\x05value\x18\x02 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue:\x02\x38\x01\"q\n\x0cSettingValue\x12\x16\n\x0cstring_value\x18\x01 \x01(\tH\x00\x12\x14\n\nbool_value\x18\x02 \x01(\x08H\x00\x12\x13\n\tint_value\x18\x03 \x01(\x03H\x00\x12\x15\n\x0b\x62ytes_value\x18\x04 \x01(\x0cH\x00\x42\x07\n\x05value\"x\n\x10\x45\x66\x66\x65\x63tiveSetting\x12\x31\n\x05value\x18\x01 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue\x12\x31\n\x05scope\x18\x02 \x01(\x0e\x32\".openshell.sandbox.v1.SettingScope\"\xf3\x05\n\x18GetSandboxConfigResponse\x12\x33\n\x06policy\x18\x01 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12\x0f\n\x07version\x18\x02 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x03 \x01(\t\x12N\n\x08settings\x18\x04 \x03(\x0b\x32<.openshell.sandbox.v1.GetSandboxConfigResponse.SettingsEntry\x12\x17\n\x0f\x63onfig_revision\x18\x05 \x01(\x04\x12\x39\n\rpolicy_source\x18\x06 \x01(\x0e\x32\".openshell.sandbox.v1.PolicySource\x12\x1d\n\x15global_policy_version\x18\x07 \x01(\r\x12\x1d\n\x15provider_env_revision\x18\x08 \x01(\x04\x12Y\n\x1esupervisor_middleware_services\x18\t \x03(\x0b\x32\x31.openshell.sandbox.v1.SupervisorMiddlewareService\x12\x11\n\tworkspace\x18\n \x01(\t\x12&\n\x1epolicy_validation_failure_mode\x18\x0b \x01(\t\x12(\n extension_authentication_enabled\x18\x0c \x01(\x08\x12!\n\x19provider_attachment_epoch\x18\x0e \x01(\t\x12\x1e\n\x16\x63onfiguration_admitted\x18\r \x01(\x08\x12\x1b\n\x13\x63onfiguration_error\x18\x10 \x01(\t\x12!\n\x19\x63onfiguration_instance_id\x18\x0f \x01(\t\x1aW\n\rSettingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x35\n\x05value\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.EffectiveSetting:\x02\x38\x01\"\xed\x01\n\x1bSupervisorMiddlewareService\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rgrpc_endpoint\x18\x02 \x01(\t\x12\x19\n\x11max_payload_bytes\x18\x03 \x01(\x04\x12\x32\n\x0frequest_timeout\x18h \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x17\n\x0ftls_ca_cert_pem\x18\x05 \x01(\x0c\x12\x10\n\x08\x61udience\x18\x06 \x01(\t\x12 \n\x18\x61llow_insecure_transport\x18\x07 \x01(\x08J\x04\x08\x04\x10\x05R\x07timeout*\x97\x01\n\x0eNetworkTlsMode\x12 \n\x1cNETWORK_TLS_MODE_UNSPECIFIED\x10\x00\x12\x19\n\x15NETWORK_TLS_MODE_SKIP\x10\x01\x12\"\n\x1aNETWORK_TLS_MODE_TERMINATE\x10\x02\x1a\x02\x08\x01\x12$\n\x1cNETWORK_TLS_MODE_PASSTHROUGH\x10\x03\x1a\x02\x08\x01*\x8c\x01\n\x16NetworkEnforcementMode\x12(\n$NETWORK_ENFORCEMENT_MODE_UNSPECIFIED\x10\x00\x12$\n NETWORK_ENFORCEMENT_MODE_ENFORCE\x10\x01\x12\"\n\x1eNETWORK_ENFORCEMENT_MODE_AUDIT\x10\x02*\xa7\x01\n\x13NetworkAccessPreset\x12%\n!NETWORK_ACCESS_PRESET_UNSPECIFIED\x10\x00\x12#\n\x1fNETWORK_ACCESS_PRESET_READ_ONLY\x10\x01\x12$\n NETWORK_ACCESS_PRESET_READ_WRITE\x10\x02\x12\x1e\n\x1aNETWORK_ACCESS_PRESET_FULL\x10\x03*b\n\x0cSettingScope\x12\x1d\n\x19SETTING_SCOPE_UNSPECIFIED\x10\x00\x12\x19\n\x15SETTING_SCOPE_SANDBOX\x10\x01\x12\x18\n\x14SETTING_SCOPE_GLOBAL\x10\x02*b\n\x0cPolicySource\x12\x1d\n\x19POLICY_SOURCE_UNSPECIFIED\x10\x00\x12\x19\n\x15POLICY_SOURCE_SANDBOX\x10\x01\x12\x18\n\x14POLICY_SOURCE_GLOBAL\x10\x02\x62\x06proto3') +DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\rsandbox.proto\x12\x14openshell.sandbox.v1\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x0f\x64\x61tamodel.proto\"\xc3\x04\n\rSandboxPolicy\x12\x0f\n\x07version\x18\x01 \x01(\r\x12:\n\nfilesystem\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.FilesystemPolicy\x12\x36\n\x08landlock\x18\x03 \x01(\x0b\x32$.openshell.sandbox.v1.LandlockPolicy\x12\x34\n\x07process\x18\x04 \x01(\x0b\x32#.openshell.sandbox.v1.ProcessPolicy\x12R\n\x10network_policies\x18\x05 \x03(\x0b\x32\x38.openshell.sandbox.v1.SandboxPolicy.NetworkPoliciesEntry\x12X\n\x13network_middlewares\x18\x06 \x03(\x0b\x32;.openshell.sandbox.v1.SandboxPolicy.NetworkMiddlewaresEntry\x1a_\n\x14NetworkPoliciesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x36\n\x05value\x18\x02 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule:\x02\x38\x01\x1ah\n\x17NetworkMiddlewaresEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12<\n\x05value\x18\x02 \x01(\x0b\x32-.openshell.sandbox.v1.NetworkMiddlewareConfig:\x02\x38\x01\"R\n\x10\x46ilesystemPolicy\x12\x17\n\x0finclude_workdir\x18\x01 \x01(\x08\x12\x11\n\tread_only\x18\x02 \x03(\t\x12\x12\n\nread_write\x18\x03 \x03(\t\"\'\n\x0eLandlockPolicy\x12\x15\n\rcompatibility\x18\x01 \x01(\t\":\n\rProcessPolicy\x12\x13\n\x0brun_as_user\x18\x01 \x01(\t\x12\x14\n\x0crun_as_group\x18\x02 \x01(\t\"\x92\x01\n\x11NetworkPolicyRule\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x38\n\tendpoints\x18\x02 \x03(\x0b\x32%.openshell.sandbox.v1.NetworkEndpoint\x12\x35\n\x08\x62inaries\x18\x03 \x03(\x0b\x32#.openshell.sandbox.v1.NetworkBinary\"\xca\x01\n\x17NetworkMiddlewareConfig\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nmiddleware\x18\x02 \x01(\t\x12\'\n\x06\x63onfig\x18\x03 \x01(\x0b\x32\x17.google.protobuf.Struct\x12\x10\n\x08on_error\x18\x04 \x01(\t\x12\x43\n\tendpoints\x18\x05 \x01(\x0b\x32\x30.openshell.sandbox.v1.MiddlewareEndpointSelector\x12\r\n\x05order\x18\x06 \x01(\x05\">\n\x1aMiddlewareEndpointSelector\x12\x0f\n\x07include\x18\x01 \x03(\t\x12\x0f\n\x07\x65xclude\x18\x02 \x03(\t\",\n\x18NetworkCredentialBinding\x12\x10\n\x08provider\x18\x01 \x01(\t\"\xdf\x08\n\x0fNetworkEndpoint\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\x12\x10\n\x08protocol\x18\x03 \x01(\t\x12\x31\n\x03tls\x18\x04 \x01(\x0e\x32$.openshell.sandbox.v1.NetworkTlsMode\x12\x41\n\x0b\x65nforcement\x18\x05 \x01(\x0e\x32,.openshell.sandbox.v1.NetworkEnforcementMode\x12\x39\n\x06\x61\x63\x63\x65ss\x18\x06 \x01(\x0e\x32).openshell.sandbox.v1.NetworkAccessPreset\x12+\n\x05rules\x18\x07 \x03(\x0b\x32\x1c.openshell.sandbox.v1.L7Rule\x12\x13\n\x0b\x61llowed_ips\x18\x08 \x03(\t\x12\r\n\x05ports\x18\t \x03(\r\x12\x34\n\ndeny_rules\x18\n \x03(\x0b\x32 .openshell.sandbox.v1.L7DenyRule\x12\x1b\n\x13\x61llow_encoded_slash\x18\x0b \x01(\x08\x12\x19\n\x11persisted_queries\x18\x0c \x01(\t\x12\x65\n\x19graphql_persisted_queries\x18\r \x03(\x0b\x32\x42.openshell.sandbox.v1.NetworkEndpoint.GraphqlPersistedQueriesEntry\x12\x1e\n\x16graphql_max_body_bytes\x18\x0e \x01(\r\x12\x0c\n\x04path\x18\x0f \x01(\t\x12$\n\x1cwebsocket_credential_rewrite\x18\x10 \x01(\x08\x12\'\n\x1frequest_body_credential_rewrite\x18\x11 \x01(\x08\x12\x18\n\x10\x61\x64visor_proposed\x18\x12 \x01(\x08\x12\x1a\n\x12\x63redential_signing\x18\x13 \x01(\t\x12\x17\n\x0fsigning_service\x18\x14 \x01(\t\x12\x16\n\x0esigning_region\x18\x15 \x01(\t\x12\x1f\n\x17json_rpc_max_body_bytes\x18\x16 \x01(\r\x12-\n\x03mcp\x18\x17 \x01(\x0b\x32 .openshell.sandbox.v1.McpOptions\x12J\n\x12\x63redential_binding\x18\x18 \x01(\x0b\x32..openshell.sandbox.v1.NetworkCredentialBinding\x12%\n\x1d\x61llow_uninspected_credentials\x18\x19 \x01(\x08\x12\x1d\n\x15provider_credentialed\x18\x1a \x01(\x08\x12\x19\n\x11token_grant_owner\x18\x1b \x01(\t\x1a\x66\n\x1cGraphqlPersistedQueriesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x35\n\x05value\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.GraphqlOperation:\x02\x38\x01\"\x9e\x01\n\nMcpOptions\x12\x1e\n\x11strict_tool_names\x18\x01 \x01(\x08H\x00\x88\x01\x01\x12(\n\x1b\x61llow_all_known_mcp_methods\x18\x02 \x01(\x08H\x01\x88\x01\x01\x12\x10\n\x08versions\x18\x03 \x03(\tB\x14\n\x12_strict_tool_namesB\x1e\n\x1c_allow_all_known_mcp_methods\"R\n\x10GraphqlOperation\x12\x16\n\x0eoperation_type\x18\x01 \x01(\t\x12\x16\n\x0eoperation_name\x18\x02 \x01(\t\x12\x0e\n\x06\x66ields\x18\x03 \x03(\t\"\xa4\x03\n\nL7DenyRule\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x03 \x01(\t\x12:\n\x05query\x18\x04 \x03(\x0b\x32+.openshell.sandbox.v1.L7DenyRule.QueryEntry\x12\x16\n\x0eoperation_type\x18\x05 \x01(\t\x12\x16\n\x0eoperation_name\x18\x06 \x01(\t\x12\x0e\n\x06\x66ields\x18\x07 \x03(\t\x12<\n\x06params\x18\t \x03(\x0b\x32,.openshell.sandbox.v1.L7DenyRule.ParamsEntry\x1aR\n\nQueryEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01\x1aS\n\x0bParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01J\x04\x08\x08\x10\t\"6\n\x06L7Rule\x12,\n\x05\x61llow\x18\x01 \x01(\x0b\x32\x1d.openshell.sandbox.v1.L7Allow\"\x9b\x03\n\x07L7Allow\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x03 \x01(\t\x12\x37\n\x05query\x18\x04 \x03(\x0b\x32(.openshell.sandbox.v1.L7Allow.QueryEntry\x12\x16\n\x0eoperation_type\x18\x05 \x01(\t\x12\x16\n\x0eoperation_name\x18\x06 \x01(\t\x12\x0e\n\x06\x66ields\x18\x07 \x03(\t\x12\x39\n\x06params\x18\t \x03(\x0b\x32).openshell.sandbox.v1.L7Allow.ParamsEntry\x1aR\n\nQueryEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01\x1aS\n\x0bParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01J\x04\x08\x08\x10\t\"+\n\x0eL7QueryMatcher\x12\x0c\n\x04glob\x18\x01 \x01(\t\x12\x0b\n\x03\x61ny\x18\x02 \x03(\t\",\n\rNetworkBinary\x12\x0c\n\x04path\x18\x01 \x01(\tJ\x04\x08\x02\x10\x03R\x07harness\"k\n\x17GetSandboxConfigRequest\x12\x42\n\x0fworkspace_scope\x18\x03 \x01(\x0b\x32).openshell.datamodel.v1.WorkspaceSelector\x12\x0c\n\x04name\x18\x01 \x01(\t\"\x19\n\x17GetGatewayConfigRequest\"\xda\x01\n\x18GetGatewayConfigResponse\x12N\n\x08settings\x18\x01 \x03(\x0b\x32<.openshell.sandbox.v1.GetGatewayConfigResponse.SettingsEntry\x12\x19\n\x11settings_revision\x18\x02 \x01(\x04\x1aS\n\rSettingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x31\n\x05value\x18\x02 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue:\x02\x38\x01\"q\n\x0cSettingValue\x12\x16\n\x0cstring_value\x18\x01 \x01(\tH\x00\x12\x14\n\nbool_value\x18\x02 \x01(\x08H\x00\x12\x13\n\tint_value\x18\x03 \x01(\x03H\x00\x12\x15\n\x0b\x62ytes_value\x18\x04 \x01(\x0cH\x00\x42\x07\n\x05value\"x\n\x10\x45\x66\x66\x65\x63tiveSetting\x12\x31\n\x05value\x18\x01 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue\x12\x31\n\x05scope\x18\x02 \x01(\x0e\x32\".openshell.sandbox.v1.SettingScope\"\xf3\x05\n\x18GetSandboxConfigResponse\x12\x33\n\x06policy\x18\x01 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12\x0f\n\x07version\x18\x02 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x03 \x01(\t\x12N\n\x08settings\x18\x04 \x03(\x0b\x32<.openshell.sandbox.v1.GetSandboxConfigResponse.SettingsEntry\x12\x17\n\x0f\x63onfig_revision\x18\x05 \x01(\x04\x12\x39\n\rpolicy_source\x18\x06 \x01(\x0e\x32\".openshell.sandbox.v1.PolicySource\x12\x1d\n\x15global_policy_version\x18\x07 \x01(\r\x12\x1d\n\x15provider_env_revision\x18\x08 \x01(\x04\x12Y\n\x1esupervisor_middleware_services\x18\t \x03(\x0b\x32\x31.openshell.sandbox.v1.SupervisorMiddlewareService\x12\x11\n\tworkspace\x18\n \x01(\t\x12&\n\x1epolicy_validation_failure_mode\x18\x0b \x01(\t\x12(\n extension_authentication_enabled\x18\x0c \x01(\x08\x12!\n\x19provider_attachment_epoch\x18\x0e \x01(\t\x12\x1e\n\x16\x63onfiguration_admitted\x18\r \x01(\x08\x12\x1b\n\x13\x63onfiguration_error\x18\x10 \x01(\t\x12!\n\x19\x63onfiguration_instance_id\x18\x0f \x01(\t\x1aW\n\rSettingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x35\n\x05value\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.EffectiveSetting:\x02\x38\x01\"\xed\x01\n\x1bSupervisorMiddlewareService\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rgrpc_endpoint\x18\x02 \x01(\t\x12\x19\n\x11max_payload_bytes\x18\x03 \x01(\x04\x12\x32\n\x0frequest_timeout\x18h \x01(\x0b\x32\x19.google.protobuf.Duration\x12\x17\n\x0ftls_ca_cert_pem\x18\x05 \x01(\x0c\x12\x10\n\x08\x61udience\x18\x06 \x01(\t\x12 \n\x18\x61llow_insecure_transport\x18\x07 \x01(\x08J\x04\x08\x04\x10\x05R\x07timeout*\x97\x01\n\x0eNetworkTlsMode\x12 \n\x1cNETWORK_TLS_MODE_UNSPECIFIED\x10\x00\x12\x19\n\x15NETWORK_TLS_MODE_SKIP\x10\x01\x12\"\n\x1aNETWORK_TLS_MODE_TERMINATE\x10\x02\x1a\x02\x08\x01\x12$\n\x1cNETWORK_TLS_MODE_PASSTHROUGH\x10\x03\x1a\x02\x08\x01*\x8c\x01\n\x16NetworkEnforcementMode\x12(\n$NETWORK_ENFORCEMENT_MODE_UNSPECIFIED\x10\x00\x12$\n NETWORK_ENFORCEMENT_MODE_ENFORCE\x10\x01\x12\"\n\x1eNETWORK_ENFORCEMENT_MODE_AUDIT\x10\x02*\xa7\x01\n\x13NetworkAccessPreset\x12%\n!NETWORK_ACCESS_PRESET_UNSPECIFIED\x10\x00\x12#\n\x1fNETWORK_ACCESS_PRESET_READ_ONLY\x10\x01\x12$\n NETWORK_ACCESS_PRESET_READ_WRITE\x10\x02\x12\x1e\n\x1aNETWORK_ACCESS_PRESET_FULL\x10\x03*b\n\x0cSettingScope\x12\x1d\n\x19SETTING_SCOPE_UNSPECIFIED\x10\x00\x12\x19\n\x15SETTING_SCOPE_SANDBOX\x10\x01\x12\x18\n\x14SETTING_SCOPE_GLOBAL\x10\x02*b\n\x0cPolicySource\x12\x1d\n\x19POLICY_SOURCE_UNSPECIFIED\x10\x00\x12\x19\n\x15POLICY_SOURCE_SANDBOX\x10\x01\x12\x18\n\x14POLICY_SOURCE_GLOBAL\x10\x02\x62\x06proto3') _globals = globals() _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals) @@ -65,16 +65,16 @@ _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_options = b'8\001' _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._loaded_options = None _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_options = b'8\001' - _globals['_NETWORKTLSMODE']._serialized_start=5266 - _globals['_NETWORKTLSMODE']._serialized_end=5417 - _globals['_NETWORKENFORCEMENTMODE']._serialized_start=5420 - _globals['_NETWORKENFORCEMENTMODE']._serialized_end=5560 - _globals['_NETWORKACCESSPRESET']._serialized_start=5563 - _globals['_NETWORKACCESSPRESET']._serialized_end=5730 - _globals['_SETTINGSCOPE']._serialized_start=5732 - _globals['_SETTINGSCOPE']._serialized_end=5830 - _globals['_POLICYSOURCE']._serialized_start=5832 - _globals['_POLICYSOURCE']._serialized_end=5930 + _globals['_NETWORKTLSMODE']._serialized_start=5293 + _globals['_NETWORKTLSMODE']._serialized_end=5444 + _globals['_NETWORKENFORCEMENTMODE']._serialized_start=5447 + _globals['_NETWORKENFORCEMENTMODE']._serialized_end=5587 + _globals['_NETWORKACCESSPRESET']._serialized_start=5590 + _globals['_NETWORKACCESSPRESET']._serialized_end=5757 + _globals['_SETTINGSCOPE']._serialized_start=5759 + _globals['_SETTINGSCOPE']._serialized_end=5857 + _globals['_POLICYSOURCE']._serialized_start=5859 + _globals['_POLICYSOURCE']._serialized_end=5957 _globals['_SANDBOXPOLICY']._serialized_start=119 _globals['_SANDBOXPOLICY']._serialized_end=698 _globals['_SANDBOXPOLICY_NETWORKPOLICIESENTRY']._serialized_start=497 @@ -96,47 +96,47 @@ _globals['_NETWORKCREDENTIALBINDING']._serialized_start=1303 _globals['_NETWORKCREDENTIALBINDING']._serialized_end=1347 _globals['_NETWORKENDPOINT']._serialized_start=1350 - _globals['_NETWORKENDPOINT']._serialized_end=2442 - _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._serialized_start=2340 - _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._serialized_end=2442 - _globals['_MCPOPTIONS']._serialized_start=2445 - _globals['_MCPOPTIONS']._serialized_end=2603 - _globals['_GRAPHQLOPERATION']._serialized_start=2605 - _globals['_GRAPHQLOPERATION']._serialized_end=2687 - _globals['_L7DENYRULE']._serialized_start=2690 - _globals['_L7DENYRULE']._serialized_end=3110 - _globals['_L7DENYRULE_QUERYENTRY']._serialized_start=2937 - _globals['_L7DENYRULE_QUERYENTRY']._serialized_end=3019 - _globals['_L7DENYRULE_PARAMSENTRY']._serialized_start=3021 - _globals['_L7DENYRULE_PARAMSENTRY']._serialized_end=3104 - _globals['_L7RULE']._serialized_start=3112 - _globals['_L7RULE']._serialized_end=3166 - _globals['_L7ALLOW']._serialized_start=3169 - _globals['_L7ALLOW']._serialized_end=3580 - _globals['_L7ALLOW_QUERYENTRY']._serialized_start=2937 - _globals['_L7ALLOW_QUERYENTRY']._serialized_end=3019 - _globals['_L7ALLOW_PARAMSENTRY']._serialized_start=3021 - _globals['_L7ALLOW_PARAMSENTRY']._serialized_end=3104 - _globals['_L7QUERYMATCHER']._serialized_start=3582 - _globals['_L7QUERYMATCHER']._serialized_end=3625 - _globals['_NETWORKBINARY']._serialized_start=3627 - _globals['_NETWORKBINARY']._serialized_end=3671 - _globals['_GETSANDBOXCONFIGREQUEST']._serialized_start=3673 - _globals['_GETSANDBOXCONFIGREQUEST']._serialized_end=3780 - _globals['_GETGATEWAYCONFIGREQUEST']._serialized_start=3782 - _globals['_GETGATEWAYCONFIGREQUEST']._serialized_end=3807 - _globals['_GETGATEWAYCONFIGRESPONSE']._serialized_start=3810 - _globals['_GETGATEWAYCONFIGRESPONSE']._serialized_end=4028 - _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_start=3945 - _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_end=4028 - _globals['_SETTINGVALUE']._serialized_start=4030 - _globals['_SETTINGVALUE']._serialized_end=4143 - _globals['_EFFECTIVESETTING']._serialized_start=4145 - _globals['_EFFECTIVESETTING']._serialized_end=4265 - _globals['_GETSANDBOXCONFIGRESPONSE']._serialized_start=4268 - _globals['_GETSANDBOXCONFIGRESPONSE']._serialized_end=5023 - _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_start=4936 - _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_end=5023 - _globals['_SUPERVISORMIDDLEWARESERVICE']._serialized_start=5026 - _globals['_SUPERVISORMIDDLEWARESERVICE']._serialized_end=5263 + _globals['_NETWORKENDPOINT']._serialized_end=2469 + _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._serialized_start=2367 + _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._serialized_end=2469 + _globals['_MCPOPTIONS']._serialized_start=2472 + _globals['_MCPOPTIONS']._serialized_end=2630 + _globals['_GRAPHQLOPERATION']._serialized_start=2632 + _globals['_GRAPHQLOPERATION']._serialized_end=2714 + _globals['_L7DENYRULE']._serialized_start=2717 + _globals['_L7DENYRULE']._serialized_end=3137 + _globals['_L7DENYRULE_QUERYENTRY']._serialized_start=2964 + _globals['_L7DENYRULE_QUERYENTRY']._serialized_end=3046 + _globals['_L7DENYRULE_PARAMSENTRY']._serialized_start=3048 + _globals['_L7DENYRULE_PARAMSENTRY']._serialized_end=3131 + _globals['_L7RULE']._serialized_start=3139 + _globals['_L7RULE']._serialized_end=3193 + _globals['_L7ALLOW']._serialized_start=3196 + _globals['_L7ALLOW']._serialized_end=3607 + _globals['_L7ALLOW_QUERYENTRY']._serialized_start=2964 + _globals['_L7ALLOW_QUERYENTRY']._serialized_end=3046 + _globals['_L7ALLOW_PARAMSENTRY']._serialized_start=3048 + _globals['_L7ALLOW_PARAMSENTRY']._serialized_end=3131 + _globals['_L7QUERYMATCHER']._serialized_start=3609 + _globals['_L7QUERYMATCHER']._serialized_end=3652 + _globals['_NETWORKBINARY']._serialized_start=3654 + _globals['_NETWORKBINARY']._serialized_end=3698 + _globals['_GETSANDBOXCONFIGREQUEST']._serialized_start=3700 + _globals['_GETSANDBOXCONFIGREQUEST']._serialized_end=3807 + _globals['_GETGATEWAYCONFIGREQUEST']._serialized_start=3809 + _globals['_GETGATEWAYCONFIGREQUEST']._serialized_end=3834 + _globals['_GETGATEWAYCONFIGRESPONSE']._serialized_start=3837 + _globals['_GETGATEWAYCONFIGRESPONSE']._serialized_end=4055 + _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_start=3972 + _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_end=4055 + _globals['_SETTINGVALUE']._serialized_start=4057 + _globals['_SETTINGVALUE']._serialized_end=4170 + _globals['_EFFECTIVESETTING']._serialized_start=4172 + _globals['_EFFECTIVESETTING']._serialized_end=4292 + _globals['_GETSANDBOXCONFIGRESPONSE']._serialized_start=4295 + _globals['_GETSANDBOXCONFIGRESPONSE']._serialized_end=5050 + _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_start=4963 + _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_end=5050 + _globals['_SUPERVISORMIDDLEWARESERVICE']._serialized_start=5053 + _globals['_SUPERVISORMIDDLEWARESERVICE']._serialized_end=5290 # @@protoc_insertion_point(module_scope) diff --git a/interceptor/_gen/sandbox_pb2_grpc.py b/interceptor/_gen/sandbox_pb2_grpc.py index 42c94f1..203ea89 100644 --- a/interceptor/_gen/sandbox_pb2_grpc.py +++ b/interceptor/_gen/sandbox_pb2_grpc.py @@ -1,11 +1,11 @@ # Generated by interceptor/regen.sh from OpenShell's protos. Do not edit. -# source-tag v0.1.2 +# source-tag v0.1.3 # sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto # sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto # sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -# sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +# sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto # sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -# sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +# sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto # Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT! """Client and server classes corresponding to protobuf-defined services.""" diff --git a/interceptor/proto/SOURCE b/interceptor/proto/SOURCE index d7c4de4..e65433e 100644 --- a/interceptor/proto/SOURCE +++ b/interceptor/proto/SOURCE @@ -1,9 +1,9 @@ # OpenShell protos vendored by interceptor/regen.sh. Do not edit. -tag v0.1.2 -commit 6648bd0c290efbc41ba131ee9831ee45cd431f94 +tag v0.1.3 +commit e1f3c82caa3ed3b65de22889ae7ef32a774878ef sha256 e50bd875a760f54b80269c65ee47984cae424fb623b7f59551ba62550c23e70b datamodel.proto sha256 60f28ee9dc846d41152f4db7e82a439c78d024786efaceb464900d1d1ad129ad extension.proto sha256 931411aaae512b41117039f35b8c8727c8aefa87e898879e8b6f277c0149f79d gateway_interceptor.proto -sha256 2e31d0faca652b91729f88bd4053447e5d162e74de7dbacdcc06327ed82e5b95 openshell.proto +sha256 3f0f7ca84819725e27b41ce5f603b536db9450c660afc906445b53dc4776c7ea openshell.proto sha256 10c8a99b505047f759951285fdae6068afd267ef672d00a65385a91ee8d027ee options.proto -sha256 ed3d2650c8d1c4cbb653259c6055adba2dba8a51498ab6a1b2cfc339997ab2b9 sandbox.proto +sha256 d06089ccd15b57519adb3236e7a4c16661c7c52c9f184f2f826246c62e090839 sandbox.proto diff --git a/interceptor/proto/openshell.proto b/interceptor/proto/openshell.proto index a836e16..df57690 100644 --- a/interceptor/proto/openshell.proto +++ b/interceptor/proto/openshell.proto @@ -1006,6 +1006,10 @@ message Sandbox { SandboxSpec spec = 2; // Latest user-facing observed status derived by the gateway. SandboxStatus status = 3; + // Read-only SSH host identity in OpenSSH SHA256: form. Stable for + // this sandbox's lifetime, including runtime restarts. Empty on legacy + // runtimes that do not provide a gateway-managed SSH identity. + string host_key_fingerprint = 6; // Read-only provenance for sandboxes created from a reusable workload template. SandboxWorkloadTemplateProvenance created_from_workload_template = 20; @@ -1045,6 +1049,9 @@ message SandboxSpec { // Gateway-owned attachment identity, changed atomically with the provider set. // Equality only: detach and reattach must not revive an older receipt. string provider_attachment_epoch = 14; + // Gateway-owned policy for replacing the sandbox runtime after the canonical + // main process exits. Unspecified is normalized to Never before persistence. + SandboxRestartPolicy restart_policy = 15; } message ResourceRequirements { @@ -1170,9 +1177,8 @@ message SandboxStatus { // Supervisor instance currently associated with the canonical main process. // The gateway uses this to reject stale exit reports after a restart. string main_process_instance_id = 8; - // Normalized main process result. Signal exits use 128 + signal number. - // Presence indicates that the canonical main process exited. Exit code 0 - // produces Completed; nonzero and signal-normalized exits produce Error. + // Most recent normalized main process result. Signal exits use 128 + signal number. + // Cleared when a replacement main process becomes ready. optional int32 exit_code = 9; // Last accepted network result for each configured tool server endpoint. // Currently populated for MCP-over-HTTP endpoints. These passive results @@ -1182,8 +1188,14 @@ message SandboxStatus { SandboxConfigurationAdmission configuration_admission = 11; // Durable first-acceptance marker. Absent on legacy records; never reset by restart. optional bool configuration_activated = 12; - // Gateway-owned repair window. Retained after timeout for inspection and retry. + // Gateway-owned provisioning deadlines, retained after timeout for inspection and retry. SandboxProvisioning provisioning = 13; + // Consecutive policy-driven restart number in the current crash loop. + uint32 restart_count = 14; + // Deadline for the next restart attempt or recovery check. + google.protobuf.Timestamp next_restart_time = 15; + // Time when the current main process became ready. + google.protobuf.Timestamp main_process_started_time = 16; } // User-facing sandbox condition derived from platform or gateway observations. @@ -1218,6 +1230,8 @@ enum SandboxPhase { SANDBOX_PHASE_STARTING = 8; // The canonical main process exited successfully and its result is final. SANDBOX_PHASE_COMPLETED = 9; + reserved 10; + reserved "SANDBOX_PHASE_RESTARTING"; } // Public platform event exposed on the sandbox watch stream. @@ -1743,7 +1757,8 @@ message CreateSshSessionResponse { // Gateway scheme. Must be exactly "http" or "https". string gateway_scheme = 5; - // Optional host key fingerprint. If non-empty, [A-Za-z0-9:+/=-] only. + // Expected sandbox SSH host identity in OpenSSH SHA256: form. + // Stable for the sandbox's lifetime. Empty only for legacy runtimes. string host_key_fingerprint = 7; // Absolute expiry. Absence means no expiry. @@ -1764,6 +1779,8 @@ message ExposeServiceRequest { // Optional nonzero UUID for durable at-most-once admission. Successful results // can be replayed for 24 hours; see the API errors and retries reference. string request_id = 6; + // Application authorization behavior. Omission resolves to STRIP. + ServiceAuthorizationMode authorization_mode = 7; } // Request to fetch an exposed sandbox service endpoint. @@ -1830,6 +1847,8 @@ message ServiceEndpoint { uint32 target_port = 5; // Whether browser-facing service routing is enabled for this endpoint. bool domain = 6; + // Effective application authorization behavior for ingress requests. + ServiceAuthorizationMode authorization_mode = 7; } // Response containing a service endpoint and, when available, its local URL. @@ -2298,6 +2317,12 @@ message ProviderProfileCredential { ProviderCredentialRefresh refresh = 8; string path_template = 9; ProviderCredentialTokenGrant token_grant = 10; + // Output-only gateway-derived endpoint authorities for resolved token grants. + // For inspected L7 requests, empty means no endpoint may obtain this grant. + // L4 injection uses selectors without checking these authorities. + // Profile-authored values are ignored; normal policies name the originating + // provider endpoint, while a global policy uses its own endpoint authorities. + repeated string token_grant_owners = 11; } enum ProviderCredentialRefreshStrategy { @@ -2470,6 +2495,19 @@ message ProviderProfile { // Server-set visibility: "platform", "workspace", or empty for // non-scoped sources. Ignored on import/update payloads. string scope = 13; + // EXPERIMENTAL: Non-secret files rendered from provider configuration for the + // workload. This API and its behavior may change or be removed. + repeated ProviderProfileFile files = 14; +} + +// EXPERIMENTAL: Provider file templates may change or be removed. +message ProviderProfileFile { + // One virtual file name below /run/openshell/providers//. + string path = 1; + // UTF-8 template. Only {{config.KEY}} references are supported. + string content = 2; + // Optional environment variable containing the virtual absolute path. + string env_var = 3; } // Provider profile response. @@ -2623,6 +2661,8 @@ message GetSandboxProviderEnvironmentResponse { string policy_hash = 8; // Nonzero when material was withheld; installing an empty map is not readiness. ProviderReadinessReason readiness_reason = 9; + // Complete desired set of non-secret managed files, keyed by absolute path. + map files = 10; } message ExchangeProviderSubjectTokenRequest { @@ -2958,6 +2998,7 @@ message GatewayMessage { GatewayHeartbeat heartbeat = 3; RelayOpen relay_open = 4; RelayClose relay_close = 5; + SessionRedirect session_redirect = 6; } } @@ -2972,6 +3013,14 @@ message SupervisorHello { uint64 connection_epoch = 3; // The supervisor can report credential, policy, and launch-environment installation. bool supports_provider_readiness = 4; + // Set when this connection is the result of following a SessionRedirect. The + // receiving gateway serves a redirected hello locally instead of redirecting + // again, so a disagreement about membership cannot bounce the supervisor + // between replicas. A gateway that is shutting down may still redirect it. + bool redirected = 5; + // The supervisor understands SessionRedirect. Gateways never redirect a + // supervisor that does not set this. + bool supports_session_redirect = 6; } // Gateway accepts the supervisor session. @@ -2990,6 +3039,20 @@ message SessionRejected { string reason = 1; } +// Gateway declines to own this session and names the replica that should. +// +// Sent instead of SessionAccepted when the placement ring puts the sandbox on +// a different live replica, and to established sessions when their gateway +// shuts down. The supervisor reconnects to peer_endpoint once with +// SupervisorHello.redirected set, and falls back to its configured gateway +// address if that fails. +message SessionRedirect { + // Peer endpoint of the replica that should own this sandbox. + string peer_endpoint = 1; + // Replica ID that should own this sandbox, for logging. + string owner_replica_id = 2; +} + // Supervisor heartbeat. message SupervisorHeartbeat {} @@ -3552,6 +3615,16 @@ enum ProviderCredentialRefreshRecoveryAction { PROVIDER_CREDENTIAL_REFRESH_RECOVERY_ACTION_INVESTIGATE = 4; } +// Policy applied when the canonical main process exits outside an intentional +// stop or delete operation. Kept after existing enums so generated enum +// descriptors remain stable. +enum SandboxRestartPolicy { + SANDBOX_RESTART_POLICY_UNSPECIFIED = 0; + SANDBOX_RESTART_POLICY_NEVER = 1; + SANDBOX_RESTART_POLICY_ON_FAILURE = 2; + SANDBOX_RESTART_POLICY_ALWAYS = 3; +} + // Workspace membership record. message WorkspaceMember { openshell.datamodel.v1.ObjectMeta metadata = 1; @@ -3730,7 +3803,7 @@ message SandboxProvisioning { string configuration_change_id = 2; google.protobuf.Timestamp configuration_change_time = 3; google.protobuf.Timestamp first_rejection_time = 4; - // Present only while the repair window is armed. + // Active preparation or admission-repair deadline. Absent after Ready/timeout. google.protobuf.Timestamp deadline = 5; google.protobuf.Timestamp timeout_time = 6; // Set only after both supervisor and workload compute have been reclaimed. @@ -3742,6 +3815,24 @@ message SandboxProvisioning { // Attachment edits have their own durable clock; status writes do not change it. string attachment_change_id = 10; google.protobuf.Timestamp attachment_change_time = 11; + // Absolute ceiling for image preparation and initial supervisor startup. + // Set once per new attempt; progress, configuration writes, and restarts + // cannot extend it. Absent on attempts created before preparation timing. + google.protobuf.Timestamp preparation_deadline = 12; + // First authenticated supervisor configuration report for this attempt. + // Starts the admission repair window. Absent while preparing, including + // after a preparation timeout. Duplicate reports never change this value. + google.protobuf.Timestamp admission_start_time = 13; + // An owned driver create/start future is still pending. Claimed before + // dispatch and cleared on its actual success or error response. Monitor + // interruption, owner loss, and StopSandbox/NotFound do not clear it. + // While set, cleanup cannot complete and retry/deletion remain blocked. + // This does not strengthen a driver's transport-error settlement contract. + bool driver_operation_pending = 14; + // Unique for each claimed driver operation, including recovery and automatic + // restart. Retained after settlement to reject delayed callbacks from an + // earlier operation on the same attempt and runtime generation. + string driver_operation_id = 15; } // Create-time request to expose one loopback HTTP service in a sandbox. @@ -3750,4 +3841,17 @@ message SandboxServiceExposure { string service = 1; // Loopback TCP port inside the sandbox. uint32 target_port = 2; + // Application authorization behavior. Omission resolves to STRIP. + ServiceAuthorizationMode authorization_mode = 3; +} + +// Controls whether an exposed service receives the request's application +// Authorization header. +enum ServiceAuthorizationMode { + // Omission preserves the secure legacy behavior and resolves to STRIP. + SERVICE_AUTHORIZATION_MODE_UNSPECIFIED = 0; + // Remove Authorization before forwarding to the sandbox service. + SERVICE_AUTHORIZATION_MODE_STRIP = 1; + // Forward one syntactically valid bearer Authorization header unchanged. + SERVICE_AUTHORIZATION_MODE_BEARER_PASSTHROUGH = 2; } diff --git a/interceptor/proto/sandbox.proto b/interceptor/proto/sandbox.proto index 1d837b7..7f7f407 100644 --- a/interceptor/proto/sandbox.proto +++ b/interceptor/proto/sandbox.proto @@ -230,6 +230,10 @@ message NetworkEndpoint { // Internal gateway-derived marker indicating that this endpoint belongs to // an attached credentialed provider. User-authored values are ignored. bool provider_credentialed = 26; + // Internal gateway-derived identity of this endpoint's token-grant authority. + // It binds the provider record and complete profile policy, or the active + // global policy, to this endpoint. User-authored values are ignored. + string token_grant_owner = 27; } // MCP options are grouped so MCP-specific policy can grow without adding more