@replit/protocol 0.4.31 → 0.5.0

package/dist/api/repl/repl.d.ts

@@ -5,6 +5,7 @@ import type { IBinaryReader } from "@protobuf-ts/runtime";
 import type { PartialMessage } from "@protobuf-ts/runtime";
 import { MessageType } from "@protobuf-ts/runtime";
 import { Feature } from "../features/features.js";
+import { Timestamp } from "../../google/protobuf/timestamp.js";
 /**
  * @generated from protobuf message replit.goval.api.repl.Buckets
  */
@@ -169,6 +170,19 @@ export interface Repl {
      * @generated from protobuf field: bool inject_chatgpt_link_override = 20
      */
     injectChatgptLinkOverride: boolean;
+    /**
+     * The creation time of the source Repl in Replit web.
+     *
+     * @generated from protobuf field: google.protobuf.Timestamp repl_created_at = 21
+     */
+    replCreatedAt?: Timestamp;
+    /**
+     * Versions use_repl_shield: the Replit web row snapshot time read with the
+     * flag. PatchSandbox uses it to order live CR updates against boot state.
+     *
+     * @generated from protobuf field: google.protobuf.Timestamp repl_shield_state_as_of = 22
+     */
+    replShieldStateAsOf?: Timestamp;
 }
 /**
  * autocontainer needs to know if we are in a teams org
@@ -206,6 +220,15 @@ export interface Org {
      * @generated from protobuf field: string customer_id = 5
      */
     customerId: string;
+    /**
+     * Customer VPN domain (e.g. "replit.corp.example.com") when this org's
+     * customer forces access through its VPN. Private deployments of the org
+     * send ReplShield logins to this host instead of replit.com and only accept
+     * ReplShield tokens minted there. Empty when the customer is not forced.
+     *
+     * @generated from protobuf field: string customer_vpn_domain = 6
+     */
+    customerVpnDomain: string;
 }
 /**
  * Organization type. There are legacy types, but we are not
@@ -301,6 +324,13 @@ export interface ResourceLimits {
      * @generated from protobuf field: bool restrictNetwork = 7
      */
     restrictNetwork: boolean;
+    /**
+     * The authorized user-facing Helium PostgreSQL quota in bytes. Zero means
+     * the legacy standard quota.
+     *
+     * @generated from protobuf field: uint64 helium_user_quota_bytes = 11
+     */
+    heliumUserQuotaBytes: bigint;
 }
 /**
  * Whether these limits are cachable, and if they are, by what facet of the

package/dist/api/repl/repl.js

@@ -3,6 +3,7 @@ import { UnknownFieldHandler } from "@protobuf-ts/runtime";
 import { reflectionMergePartial } from "@protobuf-ts/runtime";
 import { MessageType } from "@protobuf-ts/runtime";
 import { Feature } from "../features/features.js";
+import { Timestamp } from "../../google/protobuf/timestamp.js";
 /**
  * Organization type. There are legacy types, but we are not
  * supporting them, and they should not be getting passed.
@@ -205,7 +206,9 @@ class Repl$Type extends MessageType {
             { no: 17, name: "backer_job_metadata", kind: "map", K: 9 /*ScalarType.STRING*/, V: { kind: "scalar", T: 9 /*ScalarType.STRING*/ } },
             { no: 18, name: "custom_skills_bucket", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 19, name: "user_email", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 20, name: "inject_chatgpt_link_override", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+            { no: 20, name: "inject_chatgpt_link_override", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 21, name: "repl_created_at", kind: "message", T: () => Timestamp },
+            { no: 22, name: "repl_shield_state_as_of", kind: "message", T: () => Timestamp }
         ]);
     }
     create(value) {
@@ -292,6 +295,12 @@ class Repl$Type extends MessageType {
                 case /* bool inject_chatgpt_link_override */ 20:
                     message.injectChatgptLinkOverride = reader.bool();
                     break;
+                case /* google.protobuf.Timestamp repl_created_at */ 21:
+                    message.replCreatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.replCreatedAt);
+                    break;
+                case /* google.protobuf.Timestamp repl_shield_state_as_of */ 22:
+                    message.replShieldStateAsOf = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.replShieldStateAsOf);
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -377,6 +386,12 @@ class Repl$Type extends MessageType {
         /* bool inject_chatgpt_link_override = 20; */
         if (message.injectChatgptLinkOverride !== false)
             writer.tag(20, WireType.Varint).bool(message.injectChatgptLinkOverride);
+        /* google.protobuf.Timestamp repl_created_at = 21; */
+        if (message.replCreatedAt)
+            Timestamp.internalBinaryWrite(message.replCreatedAt, writer.tag(21, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp repl_shield_state_as_of = 22; */
+        if (message.replShieldStateAsOf)
+            Timestamp.internalBinaryWrite(message.replShieldStateAsOf, writer.tag(22, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -395,7 +410,8 @@ class Org$Type extends MessageType {
             { no: 2, name: "type", kind: "enum", T: () => ["replit.goval.api.repl.Org.OrgType", Org_OrgType] },
             { no: 3, name: "slug", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 4, name: "is_enterprise", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
-            { no: 5, name: "customer_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
+            { no: 5, name: "customer_id", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 6, name: "customer_vpn_domain", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value) {
@@ -405,6 +421,7 @@ class Org$Type extends MessageType {
         message.slug = "";
         message.isEnterprise = false;
         message.customerId = "";
+        message.customerVpnDomain = "";
         if (value !== undefined)
             reflectionMergePartial(this, message, value);
         return message;
@@ -429,6 +446,9 @@ class Org$Type extends MessageType {
                 case /* string customer_id */ 5:
                     message.customerId = reader.string();
                     break;
+                case /* string customer_vpn_domain */ 6:
+                    message.customerVpnDomain = reader.string();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -456,6 +476,9 @@ class Org$Type extends MessageType {
         /* string customer_id = 5; */
         if (message.customerId !== "")
             writer.tag(5, WireType.LengthDelimited).string(message.customerId);
+        /* string customer_vpn_domain = 6; */
+        if (message.customerVpnDomain !== "")
+            writer.tag(6, WireType.LengthDelimited).string(message.customerVpnDomain);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -533,7 +556,8 @@ class ResourceLimits$Type extends MessageType {
             { no: 10, name: "minimum_disk", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 9, name: "scratch_disk", kind: "scalar", T: 3 /*ScalarType.INT64*/, L: 0 /*LongType.BIGINT*/ },
             { no: 6, name: "cache", kind: "enum", T: () => ["replit.goval.api.repl.ResourceLimits.Cachability", ResourceLimits_Cachability] },
-            { no: 7, name: "restrictNetwork", kind: "scalar", T: 8 /*ScalarType.BOOL*/ }
+            { no: 7, name: "restrictNetwork", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
+            { no: 11, name: "helium_user_quota_bytes", kind: "scalar", T: 4 /*ScalarType.UINT64*/, L: 0 /*LongType.BIGINT*/ }
         ]);
     }
     create(value) {
@@ -547,6 +571,7 @@ class ResourceLimits$Type extends MessageType {
         message.scratchDisk = 0n;
         message.cache = 0;
         message.restrictNetwork = false;
+        message.heliumUserQuotaBytes = 0n;
         if (value !== undefined)
             reflectionMergePartial(this, message, value);
         return message;
@@ -583,6 +608,9 @@ class ResourceLimits$Type extends MessageType {
                 case /* bool restrictNetwork */ 7:
                     message.restrictNetwork = reader.bool();
                     break;
+                case /* uint64 helium_user_quota_bytes */ 11:
+                    message.heliumUserQuotaBytes = reader.uint64().toBigInt();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -622,6 +650,9 @@ class ResourceLimits$Type extends MessageType {
         /* int64 minimum_disk = 10; */
         if (message.minimumDisk !== 0n)
             writer.tag(10, WireType.Varint).int64(message.minimumDisk);
+        /* uint64 helium_user_quota_bytes = 11; */
+        if (message.heliumUserQuotaBytes !== 0n)
+            writer.tag(11, WireType.Varint).uint64(message.heliumUserQuotaBytes);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/dist/api/signing.d.ts

@@ -139,6 +139,14 @@ export interface CertificateClaim {
          * @generated from protobuf field: replit.goval.api.FlagClaim flag = 3
          */
         flag: FlagClaim;
+    } | {
+        oneofKind: "replCreatedAt";
+        /**
+         * This cert has the authority to assert this Repl creation timestamp.
+         *
+         * @generated from protobuf field: google.protobuf.Timestamp repl_created_at = 9
+         */
+        replCreatedAt: Timestamp;
     } | {
         oneofKind: undefined;
     };
@@ -371,6 +379,12 @@ export interface GovalReplIdentity {
      * @generated from protobuf field: replit.goval.api.repl.Org org = 14
      */
     org?: Org;
+    /**
+     * The creation time of the source Repl in Replit web.
+     *
+     * @generated from protobuf field: google.protobuf.Timestamp repl_created_at = 15
+     */
+    replCreatedAt?: Timestamp;
 }
 /**
  * @generated from protobuf message replit.goval.api.ReplRuntimeInteractive
@@ -533,7 +547,13 @@ export declare enum FlagClaim {
      *
      * @generated from protobuf enum value: ANY_SUBCLUSTER = 9;
      */
-    ANY_SUBCLUSTER = 9
+    ANY_SUBCLUSTER = 9,
+    /**
+     * Cert can authorize child certs for any Repl creation timestamp.
+     *
+     * @generated from protobuf enum value: ANY_REPL_CREATED_AT = 13;
+     */
+    ANY_REPL_CREATED_AT = 13
 }
 declare class GovalSigningAuthority$Type extends MessageType<GovalSigningAuthority> {
     constructor();

package/dist/api/signing.js

@@ -131,6 +131,12 @@ export var FlagClaim;
      * @generated from protobuf enum value: ANY_SUBCLUSTER = 9;
      */
     FlagClaim[FlagClaim["ANY_SUBCLUSTER"] = 9] = "ANY_SUBCLUSTER";
+    /**
+     * Cert can authorize child certs for any Repl creation timestamp.
+     *
+     * @generated from protobuf enum value: ANY_REPL_CREATED_AT = 13;
+     */
+    FlagClaim[FlagClaim["ANY_REPL_CREATED_AT"] = 13] = "ANY_REPL_CREATED_AT";
 })(FlagClaim || (FlagClaim = {}));
 // @generated message type with reflection information, may provide speed optimized methods
 class GovalSigningAuthority$Type extends MessageType {
@@ -219,7 +225,8 @@ class CertificateClaim$Type extends MessageType {
             { no: 4, name: "cluster", kind: "scalar", oneof: "claim", T: 9 /*ScalarType.STRING*/ },
             { no: 5, name: "subcluster", kind: "scalar", oneof: "claim", T: 9 /*ScalarType.STRING*/ },
             { no: 6, name: "deployment", kind: "scalar", oneof: "claim", T: 8 /*ScalarType.BOOL*/ },
-            { no: 3, name: "flag", kind: "enum", oneof: "claim", T: () => ["replit.goval.api.FlagClaim", FlagClaim] }
+            { no: 3, name: "flag", kind: "enum", oneof: "claim", T: () => ["replit.goval.api.FlagClaim", FlagClaim] },
+            { no: 9, name: "repl_created_at", kind: "message", oneof: "claim", T: () => Timestamp }
         ]);
     }
     create(value) {
@@ -282,6 +289,12 @@ class CertificateClaim$Type extends MessageType {
                         flag: reader.int32()
                     };
                     break;
+                case /* google.protobuf.Timestamp repl_created_at */ 9:
+                    message.claim = {
+                        oneofKind: "replCreatedAt",
+                        replCreatedAt: Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.claim.replCreatedAt)
+                    };
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -318,6 +331,9 @@ class CertificateClaim$Type extends MessageType {
         /* replit.goval.api.repl.Org org = 8; */
         if (message.claim.oneofKind === "org")
             Org.internalBinaryWrite(message.claim.org, writer.tag(8, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp repl_created_at = 9; */
+        if (message.claim.oneofKind === "replCreatedAt")
+            Timestamp.internalBinaryWrite(message.claim.replCreatedAt, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -496,7 +512,8 @@ class GovalReplIdentity$Type extends MessageType {
             { no: 11, name: "interactive", kind: "message", oneof: "runtime", T: () => ReplRuntimeInteractive },
             { no: 13, name: "hosting", kind: "message", oneof: "runtime", T: () => ReplRuntimeHosting },
             { no: 12, name: "deployment", kind: "message", oneof: "runtime", T: () => ReplRuntimeDeployment },
-            { no: 14, name: "org", kind: "message", T: () => Org }
+            { no: 14, name: "org", kind: "message", T: () => Org },
+            { no: 15, name: "repl_created_at", kind: "message", T: () => Timestamp }
         ]);
     }
     create(value) {
@@ -571,6 +588,9 @@ class GovalReplIdentity$Type extends MessageType {
                 case /* replit.goval.api.repl.Org org */ 14:
                     message.org = Org.internalBinaryRead(reader, reader.uint32(), options, message.org);
                     break;
+                case /* google.protobuf.Timestamp repl_created_at */ 15:
+                    message.replCreatedAt = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.replCreatedAt);
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -625,6 +645,9 @@ class GovalReplIdentity$Type extends MessageType {
         /* replit.goval.api.repl.Org org = 14; */
         if (message.org)
             Org.internalBinaryWrite(message.org, writer.tag(14, WireType.LengthDelimited).fork(), options).join();
+        /* google.protobuf.Timestamp repl_created_at = 15; */
+        if (message.replCreatedAt)
+            Timestamp.internalBinaryWrite(message.replCreatedAt, writer.tag(15, WireType.LengthDelimited).fork(), options).join();
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/dist/api/token/token.d.ts

@@ -172,10 +172,10 @@ export interface ReplToken {
      */
     replexec: boolean;
     /**
-     * ExternalSecrets contains the information goval needs to access external
-     * secrets.
+     * Deprecated: replvisor fetches external secrets through web RPC.
      *
-     * @generated from protobuf field: repeated replit.goval.api.token.ReplToken.ExternalSecret external_secrets = 22
+     * @deprecated
+     * @generated from protobuf field: repeated replit.goval.api.token.ReplToken.ExternalSecret external_secrets = 22 [deprecated = true]
      */
     externalSecrets: ReplToken_ExternalSecret[];
     /**
@@ -188,9 +188,9 @@ export interface ReplToken {
     before?: Timestamp;
     /**
      * Resource tier selects the Goval 3 resource size. Current values are
-     * "small", "medium", and "large". Goval 3 combines this with `paid` to
-     * select a ReplPool tier such as "free-small", "paid-medium", or
-     * "paid-large".
+     * "small", "medium", "large", and "xlarge". Goval 3 combines this with `paid`
+     * to select a ReplPool tier such as "free-small", "paid-medium", or
+     * "paid-xlarge".
      *
      * @generated from protobuf field: string resource_tier = 25
      */

package/dist/api/token/token.js

@@ -182,7 +182,7 @@ class ReplToken$Type extends MessageType {
                 case /* bool replexec */ 21:
                     message.replexec = reader.bool();
                     break;
-                case /* repeated replit.goval.api.token.ReplToken.ExternalSecret external_secrets */ 22:
+                case /* repeated replit.goval.api.token.ReplToken.ExternalSecret external_secrets = 22 [deprecated = true] */ 22:
                     message.externalSecrets.push(ReplToken_ExternalSecret.internalBinaryRead(reader, reader.uint32(), options));
                     break;
                 case /* google.protobuf.Timestamp before */ 23:
@@ -269,7 +269,7 @@ class ReplToken$Type extends MessageType {
         /* bool replexec = 21; */
         if (message.replexec !== false)
             writer.tag(21, WireType.Varint).bool(message.replexec);
-        /* repeated replit.goval.api.token.ReplToken.ExternalSecret external_secrets = 22; */
+        /* repeated replit.goval.api.token.ReplToken.ExternalSecret external_secrets = 22 [deprecated = true]; */
         for (let i = 0; i < message.externalSecrets.length; i++)
             ReplToken_ExternalSecret.internalBinaryWrite(message.externalSecrets[i], writer.tag(22, WireType.LengthDelimited).fork(), options).join();
         /* google.protobuf.Timestamp before = 23; */