@openkaiden/opnshll-sdk 0.0.110
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +186 -0
- package/dist/client.d.ts +594 -0
- package/dist/client.d.ts.map +1 -0
- package/dist/client.js +930 -0
- package/dist/client.js.map +1 -0
- package/dist/errors.d.ts +18 -0
- package/dist/errors.d.ts.map +1 -0
- package/dist/errors.js +56 -0
- package/dist/errors.js.map +1 -0
- package/dist/gen/datamodel_pb.d.ts +246 -0
- package/dist/gen/datamodel_pb.d.ts.map +1 -0
- package/dist/gen/datamodel_pb.js +58 -0
- package/dist/gen/datamodel_pb.js.map +1 -0
- package/dist/gen/openshell_pb.d.ts +6739 -0
- package/dist/gen/openshell_pb.d.ts.map +1 -0
- package/dist/gen/openshell_pb.js +1180 -0
- package/dist/gen/openshell_pb.js.map +1 -0
- package/dist/gen/options_pb.d.ts +58 -0
- package/dist/gen/options_pb.d.ts.map +1 -0
- package/dist/gen/options_pb.js +24 -0
- package/dist/gen/options_pb.js.map +1 -0
- package/dist/gen/sandbox_pb.d.ts +1069 -0
- package/dist/gen/sandbox_pb.d.ts.map +1 -0
- package/dist/gen/sandbox_pb.js +172 -0
- package/dist/gen/sandbox_pb.js.map +1 -0
- package/dist/index.d.ts +5 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +5 -0
- package/dist/index.js.map +1 -0
- package/dist/raw.d.ts +5 -0
- package/dist/raw.d.ts.map +1 -0
- package/dist/raw.js +14 -0
- package/dist/raw.js.map +1 -0
- package/dist/ssh-validate.d.ts +11 -0
- package/dist/ssh-validate.d.ts.map +1 -0
- package/dist/ssh-validate.js +58 -0
- package/dist/ssh-validate.js.map +1 -0
- package/dist/transport.d.ts +29 -0
- package/dist/transport.d.ts.map +1 -0
- package/dist/transport.js +92 -0
- package/dist/transport.js.map +1 -0
- package/package.json +58 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sandbox_pb.d.ts","sourceRoot":"","sources":["../../src/gen/sandbox_pb.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAGjF,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,OAC0iN,CAAC;AAEtkN;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,oCAAoC,CAAC,GAAG;IAC1E;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,UAAU,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAEtC;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAEpC;;;;OAIG;IACH,eAAe,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;KAAE,CAAC;IAEtD;;;;;;OAMG;IACH,kBAAkB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,uBAAuB,CAAA;KAAE,CAAC;CAChE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAC5B,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,uCAAuC,CAAC,GAAG;IAChF;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IAEnB;;;;OAIG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAClC,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,qCAAqC,CAAC,GAAG;IAC5E;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,CAAC,cAAc,CAC9B,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,oCAAoC,CAAC,GAAG;IAC1E;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAC5B,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,wCAAwC,CAAC,GAAG;IAClF;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,SAAS,EAAE,eAAe,EAAE,CAAC;IAE7B;;;;OAIG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CACpC,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAAC,8CAA8C,CAAC,GAAG;IAC9F;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAEhC;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,SAAS,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAEnD;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE,UAAU,CAAC,uBAAuB,CAChD,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAAC,iDAAiD,CAAC,GAAG;IACpG;;;;;OAKG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAElB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gCAAgC,EAAE,UAAU,CAAC,0BAA0B,CACtD,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,+CAA+C,CAAC,GAAG;IAChG;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,UAAU,CAAC,wBAAwB,CAClD,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,sCAAsC,CAAC,GAAG;IAC9E;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;;;;;;;;;OAUG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;;;;;OAMG;IACH,SAAS,EAAE,UAAU,EAAE,CAAC;IAExB;;;;;;;OAOG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAE3B;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;;OAKG;IACH,uBAAuB,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAA;KAAE,CAAC;IAE7D;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;OAMG;IACH,0BAA0B,EAAE,OAAO,CAAC;IAEpC;;;;;;OAMG;IACH,4BAA4B,EAAE,OAAO,CAAC;IAEtC;;;;;;OAMG;IACH,eAAe,EAAE,OAAO,CAAC;IAEzB;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;;OAIG;IACH,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE7B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAEzD;;;;;;OAMG;IACH,2BAA2B,EAAE,OAAO,CAAC;IAErC;;;;;OAKG;IACH,oBAAoB,EAAE,OAAO,CAAC;CAC/B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,UAAU,CAAC,eAAe,CAChC,CAAC;AAE/B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,iCAAiC,CAAC,GAAG;IACpE;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAEtC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,UAAU,CAAC,UAAU,CACtB,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,uCAAuC,CAAC,GAAG;IAChF;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CACjC,CAAC;AAEhC;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,iCAAiC,CAAC,GAAG;IACpE;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAA;KAAE,CAAC;IAEzC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB;;;;;OAKG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAA;KAAE,CAAC;CAC3C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,UAAU,CAAC,UAAU,CACrB,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC,GAAG;IAC5D;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,UAAU,CAAC,MAAM,CACb,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC,8BAA8B,CAAC,GAAG;IAC9D;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;;OAMG;IACH,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAA;KAAE,CAAC;IAEzC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB;;;;;OAKG;IACH,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAA;KAAE,CAAC;CAC3C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,UAAU,CAAC,OAAO,CACf,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,qCAAqC,CAAC,GAAG;IAC5E;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,CAAC,cAAc,CAC7B,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,oCAAoC,CAAC,GAAG;IAC1E;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;OAKG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAC3B,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAAC,8CAA8C,CAAC,GAAG;IAC9F;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE,UAAU,CAAC,uBAAuB,CAC/C,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAAC,8CAA8C,CAAC,GAAG,EAC/F,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE,UAAU,CAAC,uBAAuB,CAC/C,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,+CAA+C,CAAC,GAAG;IAChG;;;;;OAKG;IACH,QAAQ,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAA;KAAE,CAAC;IAE1C;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,UAAU,CAAC,wBAAwB,CACjD,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,mCAAmC,CAAC,GAAG;IACxE;;OAEG;IACH,KAAK,EAAE;QACL;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,aAAa,CAAC;KACrB,GAAG;QACF;;WAEG;QACH,KAAK,EAAE,OAAO,CAAC;QACf,IAAI,EAAE,WAAW,CAAC;KACnB,GAAG;QACF;;WAEG;QACH,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,UAAU,CAAC;KAClB,GAAG;QACF;;WAEG;QACH,KAAK,EAAE,UAAU,CAAC;QAClB,IAAI,EAAE,YAAY,CAAC;KACpB,GAAG;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC;CAC5C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAAU,CAAC,YAAY,CACzB,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,uCAAuC,CAAC,GAAG;IAChF;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAEjC;;OAEG;IACH,KAAK,EAAE,YAAY,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CACjC,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,+CAA+C,CAAC,GAAG;IAChG;;;;OAIG;IACH,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAEnC;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,QAAQ,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAA;KAAE,CAAC;IAE9C;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,4BAA4B,EAAE,2BAA2B,EAAE,CAAC;IAE5D;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACH,2BAA2B,EAAE,MAAM,CAAC;IAEpC;;;;;;OAMG;IACH,8BAA8B,EAAE,OAAO,CAAC;CACzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,UAAU,CAAC,wBAAwB,CACjD,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,GAAG,OAAO,CAAC,kDAAkD,CAAC,GAAG;IACtG;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;OAKG;IACH,eAAe,EAAE,MAAM,CAAC;IAExB;;;;;;OAMG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,YAAY,EAAE,UAAU,CAAC;IAEzB;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;;;;OAOG;IACH,sBAAsB,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iCAAiC,EAAE,UAAU,CAAC,2BAA2B,CACvD,CAAC;AAEhC;;;;GAIG;AACH,oBAAY,YAAY;IACtB;;OAEG;IACH,WAAW,IAAI;IAEf;;OAEG;IACH,OAAO,IAAI;IAEX;;OAEG;IACH,MAAM,IAAI;CACX;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAC1B,CAAC;AAE5B;;;;GAIG;AACH,oBAAY,YAAY;IACtB;;OAEG;IACH,WAAW,IAAI;IAEf;;OAEG;IACH,OAAO,IAAI;IAEX;;OAEG;IACH,MAAM,IAAI;CACX;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAC1B,CAAC"}
|
|
@@ -0,0 +1,172 @@
|
|
|
1
|
+
// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
|
|
4
|
+
import { file_google_protobuf_struct } from "@bufbuild/protobuf/wkt";
|
|
5
|
+
/**
|
|
6
|
+
* Describes the file sandbox.proto.
|
|
7
|
+
*/
|
|
8
|
+
export const file_sandbox = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_struct]);
|
|
9
|
+
/**
|
|
10
|
+
* Describes the message openshell.sandbox.v1.SandboxPolicy.
|
|
11
|
+
* Use `create(SandboxPolicySchema)` to create a new message.
|
|
12
|
+
*/
|
|
13
|
+
export const SandboxPolicySchema = /*@__PURE__*/ messageDesc(file_sandbox, 0);
|
|
14
|
+
/**
|
|
15
|
+
* Describes the message openshell.sandbox.v1.FilesystemPolicy.
|
|
16
|
+
* Use `create(FilesystemPolicySchema)` to create a new message.
|
|
17
|
+
*/
|
|
18
|
+
export const FilesystemPolicySchema = /*@__PURE__*/ messageDesc(file_sandbox, 1);
|
|
19
|
+
/**
|
|
20
|
+
* Describes the message openshell.sandbox.v1.LandlockPolicy.
|
|
21
|
+
* Use `create(LandlockPolicySchema)` to create a new message.
|
|
22
|
+
*/
|
|
23
|
+
export const LandlockPolicySchema = /*@__PURE__*/ messageDesc(file_sandbox, 2);
|
|
24
|
+
/**
|
|
25
|
+
* Describes the message openshell.sandbox.v1.ProcessPolicy.
|
|
26
|
+
* Use `create(ProcessPolicySchema)` to create a new message.
|
|
27
|
+
*/
|
|
28
|
+
export const ProcessPolicySchema = /*@__PURE__*/ messageDesc(file_sandbox, 3);
|
|
29
|
+
/**
|
|
30
|
+
* Describes the message openshell.sandbox.v1.NetworkPolicyRule.
|
|
31
|
+
* Use `create(NetworkPolicyRuleSchema)` to create a new message.
|
|
32
|
+
*/
|
|
33
|
+
export const NetworkPolicyRuleSchema = /*@__PURE__*/ messageDesc(file_sandbox, 4);
|
|
34
|
+
/**
|
|
35
|
+
* Describes the message openshell.sandbox.v1.NetworkMiddlewareConfig.
|
|
36
|
+
* Use `create(NetworkMiddlewareConfigSchema)` to create a new message.
|
|
37
|
+
*/
|
|
38
|
+
export const NetworkMiddlewareConfigSchema = /*@__PURE__*/ messageDesc(file_sandbox, 5);
|
|
39
|
+
/**
|
|
40
|
+
* Describes the message openshell.sandbox.v1.MiddlewareEndpointSelector.
|
|
41
|
+
* Use `create(MiddlewareEndpointSelectorSchema)` to create a new message.
|
|
42
|
+
*/
|
|
43
|
+
export const MiddlewareEndpointSelectorSchema = /*@__PURE__*/ messageDesc(file_sandbox, 6);
|
|
44
|
+
/**
|
|
45
|
+
* Describes the message openshell.sandbox.v1.NetworkCredentialBinding.
|
|
46
|
+
* Use `create(NetworkCredentialBindingSchema)` to create a new message.
|
|
47
|
+
*/
|
|
48
|
+
export const NetworkCredentialBindingSchema = /*@__PURE__*/ messageDesc(file_sandbox, 7);
|
|
49
|
+
/**
|
|
50
|
+
* Describes the message openshell.sandbox.v1.NetworkEndpoint.
|
|
51
|
+
* Use `create(NetworkEndpointSchema)` to create a new message.
|
|
52
|
+
*/
|
|
53
|
+
export const NetworkEndpointSchema = /*@__PURE__*/ messageDesc(file_sandbox, 8);
|
|
54
|
+
/**
|
|
55
|
+
* Describes the message openshell.sandbox.v1.McpOptions.
|
|
56
|
+
* Use `create(McpOptionsSchema)` to create a new message.
|
|
57
|
+
*/
|
|
58
|
+
export const McpOptionsSchema = /*@__PURE__*/ messageDesc(file_sandbox, 9);
|
|
59
|
+
/**
|
|
60
|
+
* Describes the message openshell.sandbox.v1.GraphqlOperation.
|
|
61
|
+
* Use `create(GraphqlOperationSchema)` to create a new message.
|
|
62
|
+
*/
|
|
63
|
+
export const GraphqlOperationSchema = /*@__PURE__*/ messageDesc(file_sandbox, 10);
|
|
64
|
+
/**
|
|
65
|
+
* Describes the message openshell.sandbox.v1.L7DenyRule.
|
|
66
|
+
* Use `create(L7DenyRuleSchema)` to create a new message.
|
|
67
|
+
*/
|
|
68
|
+
export const L7DenyRuleSchema = /*@__PURE__*/ messageDesc(file_sandbox, 11);
|
|
69
|
+
/**
|
|
70
|
+
* Describes the message openshell.sandbox.v1.L7Rule.
|
|
71
|
+
* Use `create(L7RuleSchema)` to create a new message.
|
|
72
|
+
*/
|
|
73
|
+
export const L7RuleSchema = /*@__PURE__*/ messageDesc(file_sandbox, 12);
|
|
74
|
+
/**
|
|
75
|
+
* Describes the message openshell.sandbox.v1.L7Allow.
|
|
76
|
+
* Use `create(L7AllowSchema)` to create a new message.
|
|
77
|
+
*/
|
|
78
|
+
export const L7AllowSchema = /*@__PURE__*/ messageDesc(file_sandbox, 13);
|
|
79
|
+
/**
|
|
80
|
+
* Describes the message openshell.sandbox.v1.L7QueryMatcher.
|
|
81
|
+
* Use `create(L7QueryMatcherSchema)` to create a new message.
|
|
82
|
+
*/
|
|
83
|
+
export const L7QueryMatcherSchema = /*@__PURE__*/ messageDesc(file_sandbox, 14);
|
|
84
|
+
/**
|
|
85
|
+
* Describes the message openshell.sandbox.v1.NetworkBinary.
|
|
86
|
+
* Use `create(NetworkBinarySchema)` to create a new message.
|
|
87
|
+
*/
|
|
88
|
+
export const NetworkBinarySchema = /*@__PURE__*/ messageDesc(file_sandbox, 15);
|
|
89
|
+
/**
|
|
90
|
+
* Describes the message openshell.sandbox.v1.GetSandboxConfigRequest.
|
|
91
|
+
* Use `create(GetSandboxConfigRequestSchema)` to create a new message.
|
|
92
|
+
*/
|
|
93
|
+
export const GetSandboxConfigRequestSchema = /*@__PURE__*/ messageDesc(file_sandbox, 16);
|
|
94
|
+
/**
|
|
95
|
+
* Describes the message openshell.sandbox.v1.GetGatewayConfigRequest.
|
|
96
|
+
* Use `create(GetGatewayConfigRequestSchema)` to create a new message.
|
|
97
|
+
*/
|
|
98
|
+
export const GetGatewayConfigRequestSchema = /*@__PURE__*/ messageDesc(file_sandbox, 17);
|
|
99
|
+
/**
|
|
100
|
+
* Describes the message openshell.sandbox.v1.GetGatewayConfigResponse.
|
|
101
|
+
* Use `create(GetGatewayConfigResponseSchema)` to create a new message.
|
|
102
|
+
*/
|
|
103
|
+
export const GetGatewayConfigResponseSchema = /*@__PURE__*/ messageDesc(file_sandbox, 18);
|
|
104
|
+
/**
|
|
105
|
+
* Describes the message openshell.sandbox.v1.SettingValue.
|
|
106
|
+
* Use `create(SettingValueSchema)` to create a new message.
|
|
107
|
+
*/
|
|
108
|
+
export const SettingValueSchema = /*@__PURE__*/ messageDesc(file_sandbox, 19);
|
|
109
|
+
/**
|
|
110
|
+
* Describes the message openshell.sandbox.v1.EffectiveSetting.
|
|
111
|
+
* Use `create(EffectiveSettingSchema)` to create a new message.
|
|
112
|
+
*/
|
|
113
|
+
export const EffectiveSettingSchema = /*@__PURE__*/ messageDesc(file_sandbox, 20);
|
|
114
|
+
/**
|
|
115
|
+
* Describes the message openshell.sandbox.v1.GetSandboxConfigResponse.
|
|
116
|
+
* Use `create(GetSandboxConfigResponseSchema)` to create a new message.
|
|
117
|
+
*/
|
|
118
|
+
export const GetSandboxConfigResponseSchema = /*@__PURE__*/ messageDesc(file_sandbox, 21);
|
|
119
|
+
/**
|
|
120
|
+
* Describes the message openshell.sandbox.v1.SupervisorMiddlewareService.
|
|
121
|
+
* Use `create(SupervisorMiddlewareServiceSchema)` to create a new message.
|
|
122
|
+
*/
|
|
123
|
+
export const SupervisorMiddlewareServiceSchema = /*@__PURE__*/ messageDesc(file_sandbox, 22);
|
|
124
|
+
/**
|
|
125
|
+
* Scope that currently controls a setting.
|
|
126
|
+
*
|
|
127
|
+
* @generated from enum openshell.sandbox.v1.SettingScope
|
|
128
|
+
*/
|
|
129
|
+
export var SettingScope;
|
|
130
|
+
(function (SettingScope) {
|
|
131
|
+
/**
|
|
132
|
+
* @generated from enum value: SETTING_SCOPE_UNSPECIFIED = 0;
|
|
133
|
+
*/
|
|
134
|
+
SettingScope[SettingScope["UNSPECIFIED"] = 0] = "UNSPECIFIED";
|
|
135
|
+
/**
|
|
136
|
+
* @generated from enum value: SETTING_SCOPE_SANDBOX = 1;
|
|
137
|
+
*/
|
|
138
|
+
SettingScope[SettingScope["SANDBOX"] = 1] = "SANDBOX";
|
|
139
|
+
/**
|
|
140
|
+
* @generated from enum value: SETTING_SCOPE_GLOBAL = 2;
|
|
141
|
+
*/
|
|
142
|
+
SettingScope[SettingScope["GLOBAL"] = 2] = "GLOBAL";
|
|
143
|
+
})(SettingScope || (SettingScope = {}));
|
|
144
|
+
/**
|
|
145
|
+
* Describes the enum openshell.sandbox.v1.SettingScope.
|
|
146
|
+
*/
|
|
147
|
+
export const SettingScopeSchema = /*@__PURE__*/ enumDesc(file_sandbox, 0);
|
|
148
|
+
/**
|
|
149
|
+
* Source used for the policy payload in GetSandboxConfigResponse.
|
|
150
|
+
*
|
|
151
|
+
* @generated from enum openshell.sandbox.v1.PolicySource
|
|
152
|
+
*/
|
|
153
|
+
export var PolicySource;
|
|
154
|
+
(function (PolicySource) {
|
|
155
|
+
/**
|
|
156
|
+
* @generated from enum value: POLICY_SOURCE_UNSPECIFIED = 0;
|
|
157
|
+
*/
|
|
158
|
+
PolicySource[PolicySource["UNSPECIFIED"] = 0] = "UNSPECIFIED";
|
|
159
|
+
/**
|
|
160
|
+
* @generated from enum value: POLICY_SOURCE_SANDBOX = 1;
|
|
161
|
+
*/
|
|
162
|
+
PolicySource[PolicySource["SANDBOX"] = 1] = "SANDBOX";
|
|
163
|
+
/**
|
|
164
|
+
* @generated from enum value: POLICY_SOURCE_GLOBAL = 2;
|
|
165
|
+
*/
|
|
166
|
+
PolicySource[PolicySource["GLOBAL"] = 2] = "GLOBAL";
|
|
167
|
+
})(PolicySource || (PolicySource = {}));
|
|
168
|
+
/**
|
|
169
|
+
* Describes the enum openshell.sandbox.v1.PolicySource.
|
|
170
|
+
*/
|
|
171
|
+
export const PolicySourceSchema = /*@__PURE__*/ enumDesc(file_sandbox, 1);
|
|
172
|
+
//# sourceMappingURL=sandbox_pb.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sandbox_pb.js","sourceRoot":"","sources":["../../src/gen/sandbox_pb.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sCAAsC;AAOtC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAY,aAAa,CAChD,QAAQ,CAAC,0hNAA0hN,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAqDtkN;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AA8B/B;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAgB/B;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAuB/B;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AA8B/B;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkC,aAAa,CACjF,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAmD/B;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAyB/B;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA2C,aAAa,CACnG,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAiB/B;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAsO/B;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AA+C/B;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AA8B/B;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAuEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B,aAAa,CACnE,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAchC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAuB,aAAa,CAC3D,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAsEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB,aAAa,CAC7D,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAuBhC;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAsBhC;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAgBhC;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAUhC;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwC,aAAa,CAC7F,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAwBhC;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAsChC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA6B,aAAa,CACvE,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAmBhC;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiC,aAAa,CAC/E,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAsGhC;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAyC,aAAa,CAC/F,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAoEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4C,aAAa,CACrG,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAEhC;;;;GAIG;AACH,MAAM,CAAN,IAAY,YAeX;AAfD,WAAY,YAAY;IACtB;;OAEG;IACH,6DAAe,CAAA;IAEf;;OAEG;IACH,qDAAW,CAAA;IAEX;;OAEG;IACH,mDAAU,CAAA;AACZ,CAAC,EAfW,YAAY,KAAZ,YAAY,QAevB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAN,IAAY,YAeX;AAfD,WAAY,YAAY;IACtB;;OAEG;IACH,6DAAe,CAAA;IAEf;;OAEG;IACH,qDAAW,CAAA;IAEX;;OAEG;IACH,mDAAU,CAAA;AACZ,CAAC,EAfW,YAAY,KAAZ,YAAY,QAevB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA0B,aAAa,CACpE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC"}
|
package/dist/index.d.ts
ADDED
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
export type { ConnectOptions, EffectiveSettingView, ExecExitEvent, ExecInteractiveOptions, ExecInteractiveSession, ExecOptions, ExecResult, ExecStreamChunk, ExecStreamEvent, ForwardHandle, ForwardOptions, Health, HealthStatus, ListOptions, PolicySourceName, ProviderChange, ProviderChangeOptions, ProviderRef, SandboxConfig, SandboxPhaseName, SandboxPolicy, SandboxRef, SandboxSpec, SetPolicyOptions, SettingScopeName, SettingValue, SshSession, UpdateConfigResult, WaitOptions, } from './client.js';
|
|
2
|
+
export { errorCode, OpenShellClient, SandboxClient } from './client.js';
|
|
3
|
+
export type { SdkErrorCode } from './errors.js';
|
|
4
|
+
export { SdkError } from './errors.js';
|
|
5
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,MAAM,EACN,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACxE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC"}
|
package/dist/index.js
ADDED
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
export { errorCode, OpenShellClient, SandboxClient } from './client.js';
|
|
4
|
+
export { SdkError } from './errors.js';
|
|
5
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sCAAsC;AAwCtC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC"}
|
package/dist/raw.d.ts
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../src/raw.ts"],"names":[],"mappings":"AAGA,cAAc,uBAAuB,CAAC;AAQtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC"}
|
package/dist/raw.js
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
export * from './gen/datamodel_pb.js';
|
|
4
|
+
// Advanced surface: the full generated protobuf types (messages, enums, and the
|
|
5
|
+
// OpenShell service descriptor) for callers using the raw escape hatch on
|
|
6
|
+
// OpenShellClient / SandboxClient (`.raw` and `.transport`). These are the
|
|
7
|
+
// uncurated wire types; import them from '@nvidia/openshell-sdk/raw'. The
|
|
8
|
+
// curated entry point stays free of generated types so its surface does not
|
|
9
|
+
// shift when the proto regenerates. The four generated modules export disjoint
|
|
10
|
+
// symbol names, so a flat re-export is unambiguous.
|
|
11
|
+
export * from './gen/openshell_pb.js';
|
|
12
|
+
export * from './gen/options_pb.js';
|
|
13
|
+
export * from './gen/sandbox_pb.js';
|
|
14
|
+
//# sourceMappingURL=raw.js.map
|
package/dist/raw.js.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"raw.js","sourceRoot":"","sources":["../src/raw.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sCAAsC;AAEtC,cAAc,uBAAuB,CAAC;AACtC,gFAAgF;AAChF,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,+EAA+E;AAC/E,oDAAoD;AACpD,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
/** The subset of the response the SDK validates and forwards. */
|
|
2
|
+
export interface SshResponseFields {
|
|
3
|
+
sandboxId: string;
|
|
4
|
+
token: string;
|
|
5
|
+
gatewayHost: string;
|
|
6
|
+
gatewayPort: number;
|
|
7
|
+
gatewayScheme: string;
|
|
8
|
+
hostKeyFingerprint: string;
|
|
9
|
+
}
|
|
10
|
+
export declare function validateSshResponse(resp: SshResponseFields, expectedSandboxId?: string): void;
|
|
11
|
+
//# sourceMappingURL=ssh-validate.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ssh-validate.d.ts","sourceRoot":"","sources":["../src/ssh-validate.ts"],"names":[],"mappings":"AAkBA,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAoBD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CA8B7F"}
|
|
@@ -0,0 +1,58 @@
|
|
|
1
|
+
// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
// Trust-boundary validation for CreateSshSession responses. The gateway's
|
|
4
|
+
// values are interpolated into an OpenSSH `ProxyCommand` that OpenSSH runs
|
|
5
|
+
// through `/bin/sh -c` on the caller's workstation, so proto/openshell.proto
|
|
6
|
+
// (CreateSshSessionResponse) says clients MUST reject responses outside the
|
|
7
|
+
// specified character sets and ranges. This enforces exactly that contract at
|
|
8
|
+
// the SDK edge so no consumer has to rediscover the invariant.
|
|
9
|
+
import { isIP } from 'node:net';
|
|
10
|
+
import { SdkError } from './errors.js';
|
|
11
|
+
// Charsets and bounds mirror the proto CreateSshSessionResponse field comments.
|
|
12
|
+
const SANDBOX_ID = /^[A-Za-z0-9._-]{1,128}$/;
|
|
13
|
+
const TOKEN = /^[A-Za-z0-9._~+/=-]+$/;
|
|
14
|
+
const FINGERPRINT = /^[A-Za-z0-9:+/=-]+$/;
|
|
15
|
+
function reject(field, detail) {
|
|
16
|
+
throw new SdkError('invalid_config', `CreateSshSession response ${field} ${detail}`);
|
|
17
|
+
}
|
|
18
|
+
function validGatewayHost(host) {
|
|
19
|
+
if (isIP(host) === 4)
|
|
20
|
+
return true;
|
|
21
|
+
if (host.startsWith('[') && host.endsWith(']')) {
|
|
22
|
+
return isIP(host.slice(1, -1)) === 6;
|
|
23
|
+
}
|
|
24
|
+
const dns = host.endsWith('.') ? host.slice(0, -1) : host;
|
|
25
|
+
if (dns.length === 0)
|
|
26
|
+
return false;
|
|
27
|
+
return dns.split('.').every((label) => {
|
|
28
|
+
return label.length >= 1 && label.length <= 63 && /^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?$/.test(label);
|
|
29
|
+
});
|
|
30
|
+
}
|
|
31
|
+
// Throw SdkError('invalid_config') if any field violates the proto contract.
|
|
32
|
+
export function validateSshResponse(resp, expectedSandboxId) {
|
|
33
|
+
if (!SANDBOX_ID.test(resp.sandboxId)) {
|
|
34
|
+
reject('sandbox_id', 'must match [A-Za-z0-9._-]{1,128}');
|
|
35
|
+
}
|
|
36
|
+
if (expectedSandboxId !== undefined && resp.sandboxId !== expectedSandboxId) {
|
|
37
|
+
reject('sandbox_id', `must match requested sandbox '${expectedSandboxId}'`);
|
|
38
|
+
}
|
|
39
|
+
const tokenBytes = Buffer.byteLength(resp.token, 'utf8');
|
|
40
|
+
if (tokenBytes < 1 || tokenBytes > 4096 || !TOKEN.test(resp.token)) {
|
|
41
|
+
reject('token', 'must be 1..4096 bytes of [A-Za-z0-9._~+/=-]');
|
|
42
|
+
}
|
|
43
|
+
const hostBytes = Buffer.byteLength(resp.gatewayHost, 'utf8');
|
|
44
|
+
if (hostBytes < 1 || hostBytes > 253 || !validGatewayHost(resp.gatewayHost)) {
|
|
45
|
+
reject('gateway_host', 'must be a valid DNS name, IPv4 address, or bracketed IPv6 address');
|
|
46
|
+
}
|
|
47
|
+
if (!Number.isInteger(resp.gatewayPort) || resp.gatewayPort < 1 || resp.gatewayPort > 65535) {
|
|
48
|
+
reject('gateway_port', 'must be an integer in 1..65535');
|
|
49
|
+
}
|
|
50
|
+
if (resp.gatewayScheme !== 'http' && resp.gatewayScheme !== 'https') {
|
|
51
|
+
reject('gateway_scheme', "must be exactly 'http' or 'https'");
|
|
52
|
+
}
|
|
53
|
+
const fingerprintBytes = Buffer.byteLength(resp.hostKeyFingerprint, 'utf8');
|
|
54
|
+
if (resp.hostKeyFingerprint !== '' && (fingerprintBytes > 256 || !FINGERPRINT.test(resp.hostKeyFingerprint))) {
|
|
55
|
+
reject('host_key_fingerprint', 'must be at most 256 bytes of [A-Za-z0-9:+/=-] when non-empty');
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
//# sourceMappingURL=ssh-validate.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ssh-validate.js","sourceRoot":"","sources":["../src/ssh-validate.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sCAAsC;AAEtC,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+DAA+D;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,gFAAgF;AAChF,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC;AACtC,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAY1C,SAAS,MAAM,CAAC,KAAa,EAAE,MAAc;IAC3C,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,IAAuB,EAAE,iBAA0B;IACrF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,YAAY,EAAE,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC5E,MAAM,CAAC,YAAY,EAAE,iCAAiC,iBAAiB,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,cAAc,EAAE,mEAAmE,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,KAAK,EAAE,CAAC;QAC5F,MAAM,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QACpE,MAAM,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,kBAAkB,KAAK,EAAE,IAAI,CAAC,gBAAgB,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;QAC7G,MAAM,CAAC,sBAAsB,EAAE,8DAA8D,CAAC,CAAC;IACjG,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import type { Transport } from '@connectrpc/connect';
|
|
2
|
+
export interface ConnectOptions {
|
|
3
|
+
/** Gateway URL (`http://...` or `https://...`). */
|
|
4
|
+
gateway: string;
|
|
5
|
+
/** CA certificate (PEM). Omit to use system roots. */
|
|
6
|
+
caCert?: Buffer;
|
|
7
|
+
/**
|
|
8
|
+
* Client certificate (PEM) for mTLS. Authenticates the CALLER, not just the
|
|
9
|
+
* server. The default local OpenShell gateway (Docker, VM, Homebrew, Linux
|
|
10
|
+
* package) requires this. Must be paired with clientKey.
|
|
11
|
+
*/
|
|
12
|
+
clientCert?: Buffer;
|
|
13
|
+
/** Client private key (PEM) for mTLS. Must be paired with clientCert. */
|
|
14
|
+
clientKey?: Buffer;
|
|
15
|
+
/** Bearer token for direct OIDC auth. Mutually exclusive with edgeToken. */
|
|
16
|
+
oidcToken?: string;
|
|
17
|
+
/** Cloudflare Access token. See the sidecar note above for CF-fronted gateways. */
|
|
18
|
+
edgeToken?: string;
|
|
19
|
+
/** Disable TLS verification (dev/debug only). */
|
|
20
|
+
insecureSkipVerify?: boolean;
|
|
21
|
+
/**
|
|
22
|
+
* Permit sending an auth token (oidcToken/edgeToken) over plaintext `http://`
|
|
23
|
+
* to a non-loopback host. Off by default: tokens over cleartext to a remote
|
|
24
|
+
* host leak credentials on the wire. Loopback hosts are always allowed.
|
|
25
|
+
*/
|
|
26
|
+
allowInsecureAuth?: boolean;
|
|
27
|
+
}
|
|
28
|
+
export declare function buildTransport(opts: ConnectOptions): Transport;
|
|
29
|
+
//# sourceMappingURL=transport.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAe,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIlE,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAyED,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,CAoB9D"}
|
|
@@ -0,0 +1,92 @@
|
|
|
1
|
+
// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
import { createGrpcTransport } from '@connectrpc/connect-node';
|
|
4
|
+
import { SdkError } from './errors.js';
|
|
5
|
+
// OIDC bearer takes precedence; otherwise attach the Cloudflare Access header +
|
|
6
|
+
// cookie. No-op when neither token is set.
|
|
7
|
+
function authInterceptor(opts) {
|
|
8
|
+
return (next) => async (req) => {
|
|
9
|
+
if (opts.oidcToken) {
|
|
10
|
+
req.header.set('authorization', `Bearer ${opts.oidcToken}`);
|
|
11
|
+
}
|
|
12
|
+
else if (opts.edgeToken) {
|
|
13
|
+
req.header.set('cf-access-jwt-assertion', opts.edgeToken);
|
|
14
|
+
req.header.set('cookie', `CF_Authorization=${opts.edgeToken}`);
|
|
15
|
+
}
|
|
16
|
+
return next(req);
|
|
17
|
+
};
|
|
18
|
+
}
|
|
19
|
+
// The client certificate and key are an all-or-nothing pair: a cert without a
|
|
20
|
+
// key (or a key without a cert) cannot complete an mTLS handshake, so reject it
|
|
21
|
+
// up front rather than surfacing an opaque TLS failure at connect time.
|
|
22
|
+
function assertMtlsPair(opts) {
|
|
23
|
+
const hasCert = opts.clientCert !== undefined;
|
|
24
|
+
const hasKey = opts.clientKey !== undefined;
|
|
25
|
+
if (hasCert !== hasKey) {
|
|
26
|
+
const missing = hasCert ? 'clientKey' : 'clientCert';
|
|
27
|
+
throw new SdkError('invalid_config', `mTLS requires both clientCert and clientKey; ${missing} is missing`);
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
// oidcToken and edgeToken are documented as mutually exclusive; the interceptor
|
|
31
|
+
// silently prefers OIDC when both are set. Reject that ambiguity up front so a
|
|
32
|
+
// caller does not think an edge token is in effect when it is being ignored.
|
|
33
|
+
function assertTokenExclusivity(opts) {
|
|
34
|
+
if (opts.oidcToken !== undefined && opts.edgeToken !== undefined) {
|
|
35
|
+
throw new SdkError('invalid_config', 'oidcToken and edgeToken are mutually exclusive');
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
// edgeToken is also interpolated into a Cookie header. Restrict it to the
|
|
39
|
+
// cookie-safe base64url/JWT character set so a caller cannot inject a second
|
|
40
|
+
// cookie or a new header through an untrusted token value.
|
|
41
|
+
function assertEdgeToken(opts) {
|
|
42
|
+
if (opts.edgeToken !== undefined && !/^[A-Za-z0-9._~-]+$/.test(opts.edgeToken)) {
|
|
43
|
+
throw new SdkError('invalid_config', 'edgeToken must contain only cookie-safe JWT characters');
|
|
44
|
+
}
|
|
45
|
+
}
|
|
46
|
+
function isLoopbackHost(host) {
|
|
47
|
+
// URL.hostname keeps the brackets on IPv6 literals (e.g. `[::1]`); strip them.
|
|
48
|
+
const h = host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
|
|
49
|
+
if (h === 'localhost' || h === '::1')
|
|
50
|
+
return true;
|
|
51
|
+
return /^127(?:\.\d{1,3}){3}$/.test(h);
|
|
52
|
+
}
|
|
53
|
+
// Attaching a bearer/CF token to a plaintext `http://` request to a non-loopback
|
|
54
|
+
// host puts the credential on the wire in the clear. Refuse it unless the caller
|
|
55
|
+
// explicitly opts in. Loopback (local-dev / edge-sidecar) is always fine.
|
|
56
|
+
function assertTokenTransportSecurity(opts) {
|
|
57
|
+
const hasToken = opts.oidcToken !== undefined || opts.edgeToken !== undefined;
|
|
58
|
+
if (!hasToken || opts.allowInsecureAuth || opts.gateway.startsWith('https://'))
|
|
59
|
+
return;
|
|
60
|
+
let host;
|
|
61
|
+
try {
|
|
62
|
+
host = new URL(opts.gateway).hostname;
|
|
63
|
+
}
|
|
64
|
+
catch {
|
|
65
|
+
return; // A malformed gateway URL surfaces from the transport itself.
|
|
66
|
+
}
|
|
67
|
+
if (!isLoopbackHost(host)) {
|
|
68
|
+
throw new SdkError('invalid_config', `refusing to send an auth token over plaintext http:// to non-loopback host '${host}'; use https:// or set allowInsecureAuth`);
|
|
69
|
+
}
|
|
70
|
+
}
|
|
71
|
+
export function buildTransport(opts) {
|
|
72
|
+
assertMtlsPair(opts);
|
|
73
|
+
assertTokenExclusivity(opts);
|
|
74
|
+
assertEdgeToken(opts);
|
|
75
|
+
assertTokenTransportSecurity(opts);
|
|
76
|
+
const isTls = opts.gateway.startsWith('https://');
|
|
77
|
+
return createGrpcTransport({
|
|
78
|
+
baseUrl: opts.gateway,
|
|
79
|
+
interceptors: [authInterceptor(opts)],
|
|
80
|
+
// For https:// gateways, pass Node TLS options straight through. For
|
|
81
|
+
// http:// (local dev) these are ignored and the client speaks h2c.
|
|
82
|
+
nodeOptions: isTls
|
|
83
|
+
? {
|
|
84
|
+
ca: opts.caCert,
|
|
85
|
+
cert: opts.clientCert,
|
|
86
|
+
key: opts.clientKey,
|
|
87
|
+
rejectUnauthorized: opts.insecureSkipVerify ? false : undefined,
|
|
88
|
+
}
|
|
89
|
+
: undefined,
|
|
90
|
+
});
|
|
91
|
+
}
|
|
92
|
+
//# sourceMappingURL=transport.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sCAAsC;AAYtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA6BvC,gFAAgF;AAChF,2CAA2C;AAC3C,SAAS,eAAe,CAAC,IAAoB;IAC3C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,oBAAoB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,wEAAwE;AACxE,SAAS,cAAc,CAAC,IAAoB;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IAC5C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,gDAAgD,OAAO,aAAa,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,SAAS,sBAAsB,CAAC,IAAoB;IAClD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,2DAA2D;AAC3D,SAAS,eAAe,CAAC,IAAoB;IAC3C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,+EAA+E;IAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,0EAA0E;AAC1E,SAAS,4BAA4B,CAAC,IAAoB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IAC9E,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IACvF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,8DAA8D;IACxE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,+EAA+E,IAAI,0CAA0C,CAC9H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,cAAc,CAAC,IAAI,CAAC,CAAC;IACrB,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,mBAAmB,CAAC;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,qEAAqE;QACrE,mEAAmE;QACnE,WAAW,EAAE,KAAK;YAChB,CAAC,CAAC;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,UAAU;gBACrB,GAAG,EAAE,IAAI,CAAC,SAAS;gBACnB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aAChE;YACH,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;AACL,CAAC"}
|
package/package.json
ADDED
|
@@ -0,0 +1,58 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@openkaiden/opnshll-sdk",
|
|
3
|
+
"version": "0.0.110",
|
|
4
|
+
"description": "Official TypeScript SDK for the OpenShell gateway.",
|
|
5
|
+
"license": "Apache-2.0",
|
|
6
|
+
"type": "module",
|
|
7
|
+
"homepage": "https://github.com/NVIDIA/OpenShell",
|
|
8
|
+
"repository": {
|
|
9
|
+
"type": "git",
|
|
10
|
+
"url": "https://github.com/openkaiden/openshell-sdk-mirror-npmjs"
|
|
11
|
+
},
|
|
12
|
+
"publishConfig": {
|
|
13
|
+
"access": "public",
|
|
14
|
+
"registry": "https://registry.npmjs.org"
|
|
15
|
+
},
|
|
16
|
+
"main": "./dist/index.js",
|
|
17
|
+
"types": "./dist/index.d.ts",
|
|
18
|
+
"exports": {
|
|
19
|
+
".": {
|
|
20
|
+
"types": "./dist/index.d.ts",
|
|
21
|
+
"import": "./dist/index.js"
|
|
22
|
+
},
|
|
23
|
+
"./raw": {
|
|
24
|
+
"types": "./dist/raw.d.ts",
|
|
25
|
+
"import": "./dist/raw.js"
|
|
26
|
+
}
|
|
27
|
+
},
|
|
28
|
+
"files": [
|
|
29
|
+
"dist",
|
|
30
|
+
"README.md"
|
|
31
|
+
],
|
|
32
|
+
"engines": {
|
|
33
|
+
"node": ">=20.3"
|
|
34
|
+
},
|
|
35
|
+
"scripts": {
|
|
36
|
+
"gen": "buf generate",
|
|
37
|
+
"build": "tsc -p tsconfig.build.json",
|
|
38
|
+
"typecheck": "tsc --noEmit",
|
|
39
|
+
"format": "biome check --write .",
|
|
40
|
+
"lint": "biome ci .",
|
|
41
|
+
"test": "vitest run --coverage",
|
|
42
|
+
"prepublishOnly": "npm run gen && npm run build"
|
|
43
|
+
},
|
|
44
|
+
"dependencies": {
|
|
45
|
+
"@bufbuild/protobuf": "^2.2.3",
|
|
46
|
+
"@connectrpc/connect": "^2.0.0",
|
|
47
|
+
"@connectrpc/connect-node": "^2.0.0"
|
|
48
|
+
},
|
|
49
|
+
"devDependencies": {
|
|
50
|
+
"@biomejs/biome": "^2.5.4",
|
|
51
|
+
"@bufbuild/buf": "^1.71.0",
|
|
52
|
+
"@bufbuild/protoc-gen-es": "^2.2.3",
|
|
53
|
+
"@types/node": "^24",
|
|
54
|
+
"@vitest/coverage-v8": "^4.1.10",
|
|
55
|
+
"typescript": "^6.0.3",
|
|
56
|
+
"vitest": "^4.1.10"
|
|
57
|
+
}
|
|
58
|
+
}
|