@replit/protocol 0.5.0 → 0.6.1

package/dist/api/repl/repl.d.ts

@@ -142,6 +142,14 @@ export interface Repl {
      * @generated from protobuf field: string connectors_host = 16
      */
     connectorsHost: string;
+    /**
+     * connectors_authorization is sent to connectors_host as
+     * Replit-Authorization. Only set for development sandbox endpoints; never
+     * exported to the repl.
+     *
+     * @generated from protobuf field: string connectors_authorization = 23
+     */
+    connectorsAuthorization: string;
     /**
      * Metadata that are passed into backer job as environment variables
      *

package/dist/api/repl/repl.js

@@ -203,6 +203,7 @@ class Repl$Type extends MessageType {
             { no: 13, name: "log_fields", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 15, name: "use_repl_shield", kind: "scalar", T: 8 /*ScalarType.BOOL*/ },
             { no: 16, name: "connectors_host", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
+            { no: 23, name: "connectors_authorization", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 17, name: "backer_job_metadata", kind: "map", K: 9 /*ScalarType.STRING*/, V: { kind: "scalar", T: 9 /*ScalarType.STRING*/ } },
             { no: 18, name: "custom_skills_bucket", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
             { no: 19, name: "user_email", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
@@ -225,6 +226,7 @@ class Repl$Type extends MessageType {
         message.logFields = "";
         message.useReplShield = false;
         message.connectorsHost = "";
+        message.connectorsAuthorization = "";
         message.backerJobMetadata = {};
         message.customSkillsBucket = "";
         message.userEmail = "";
@@ -283,6 +285,9 @@ class Repl$Type extends MessageType {
                 case /* string connectors_host */ 16:
                     message.connectorsHost = reader.string();
                     break;
+                case /* string connectors_authorization */ 23:
+                    message.connectorsAuthorization = reader.string();
+                    break;
                 case /* map<string, string> backer_job_metadata */ 17:
                     this.binaryReadMap17(message.backerJobMetadata, reader, options);
                     break;
@@ -392,6 +397,9 @@ class Repl$Type extends MessageType {
         /* google.protobuf.Timestamp repl_shield_state_as_of = 22; */
         if (message.replShieldStateAsOf)
             Timestamp.internalBinaryWrite(message.replShieldStateAsOf, writer.tag(22, WireType.LengthDelimited).fork(), options).join();
+        /* string connectors_authorization = 23; */
+        if (message.connectorsAuthorization !== "")
+            writer.tag(23, WireType.LengthDelimited).string(message.connectorsAuthorization);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/dist/api/signing.d.ts

@@ -147,6 +147,14 @@ export interface CertificateClaim {
          * @generated from protobuf field: google.protobuf.Timestamp repl_created_at = 9
          */
         replCreatedAt: Timestamp;
+    } | {
+        oneofKind: "originReplid";
+        /**
+         * This cert has the authority to assert this origin Repl ID.
+         *
+         * @generated from protobuf field: string origin_replid = 10
+         */
+        originReplid: string;
     } | {
         oneofKind: undefined;
     };
@@ -553,7 +561,13 @@ export declare enum FlagClaim {
      *
      * @generated from protobuf enum value: ANY_REPL_CREATED_AT = 13;
      */
-    ANY_REPL_CREATED_AT = 13
+    ANY_REPL_CREATED_AT = 13,
+    /**
+     * Cert can authorize child certs for any origin Repl ID.
+     *
+     * @generated from protobuf enum value: ANY_ORIGIN_REPLID = 14;
+     */
+    ANY_ORIGIN_REPLID = 14
 }
 declare class GovalSigningAuthority$Type extends MessageType<GovalSigningAuthority> {
     constructor();

package/dist/api/signing.js

@@ -137,6 +137,12 @@ export var FlagClaim;
      * @generated from protobuf enum value: ANY_REPL_CREATED_AT = 13;
      */
     FlagClaim[FlagClaim["ANY_REPL_CREATED_AT"] = 13] = "ANY_REPL_CREATED_AT";
+    /**
+     * Cert can authorize child certs for any origin Repl ID.
+     *
+     * @generated from protobuf enum value: ANY_ORIGIN_REPLID = 14;
+     */
+    FlagClaim[FlagClaim["ANY_ORIGIN_REPLID"] = 14] = "ANY_ORIGIN_REPLID";
 })(FlagClaim || (FlagClaim = {}));
 // @generated message type with reflection information, may provide speed optimized methods
 class GovalSigningAuthority$Type extends MessageType {
@@ -226,7 +232,8 @@ class CertificateClaim$Type extends MessageType {
             { no: 5, name: "subcluster", kind: "scalar", oneof: "claim", T: 9 /*ScalarType.STRING*/ },
             { no: 6, name: "deployment", kind: "scalar", oneof: "claim", T: 8 /*ScalarType.BOOL*/ },
             { no: 3, name: "flag", kind: "enum", oneof: "claim", T: () => ["replit.goval.api.FlagClaim", FlagClaim] },
-            { no: 9, name: "repl_created_at", kind: "message", oneof: "claim", T: () => Timestamp }
+            { no: 9, name: "repl_created_at", kind: "message", oneof: "claim", T: () => Timestamp },
+            { no: 10, name: "origin_replid", kind: "scalar", oneof: "claim", T: 9 /*ScalarType.STRING*/ }
         ]);
     }
     create(value) {
@@ -295,6 +302,12 @@ class CertificateClaim$Type extends MessageType {
                         replCreatedAt: Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.claim.replCreatedAt)
                     };
                     break;
+                case /* string origin_replid */ 10:
+                    message.claim = {
+                        oneofKind: "originReplid",
+                        originReplid: reader.string()
+                    };
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -334,6 +347,9 @@ class CertificateClaim$Type extends MessageType {
         /* google.protobuf.Timestamp repl_created_at = 9; */
         if (message.claim.oneofKind === "replCreatedAt")
             Timestamp.internalBinaryWrite(message.claim.replCreatedAt, writer.tag(9, WireType.LengthDelimited).fork(), options).join();
+        /* string origin_replid = 10; */
+        if (message.claim.oneofKind === "originReplid")
+            writer.tag(10, WireType.LengthDelimited).string(message.claim.originReplid);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);

package/dist/api/types.d.ts

@@ -1293,18 +1293,6 @@ export interface Command {
          * @generated from protobuf field: replit.goval.api.NixModuleConfigSetResponse nixModuleConfigSetResponse = 463
          */
         nixModuleConfigSetResponse: NixModuleConfigSetResponse;
-    } | {
-        oneofKind: "replspaceApiSSHTokenGetRequest";
-        /**
-         * @generated from protobuf field: replit.goval.api.ReplspaceApiSSHTokenGetRequest replspaceApiSSHTokenGetRequest = 464
-         */
-        replspaceApiSSHTokenGetRequest: ReplspaceApiSSHTokenGetRequest;
-    } | {
-        oneofKind: "replspaceApiSSHTokenGetResponse";
-        /**
-         * @generated from protobuf field: replit.goval.api.ReplspaceApiSSHTokenGetResponse replspaceApiSSHTokenGetResponse = 465
-         */
-        replspaceApiSSHTokenGetResponse: ReplspaceApiSSHTokenGetResponse;
     } | {
         oneofKind: "secretsGetRequest";
         /**
@@ -2728,6 +2716,15 @@ export interface ContainerState {
      * @generated from protobuf field: replit.goval.api.ContainerState.State state = 1
      */
     state: ContainerState_State;
+    /**
+     * The port monitor selected by pid1 before reporting READY. Older pid1
+     * versions leave this unset; callers must treat that as SECCOMP.
+     * 1 is seccomp and 2 is eBPF. Other values are invalid and must be
+     * treated as seccomp by legacy consumers.
+     *
+     * @generated from protobuf field: uint32 port_monitor = 2
+     */
+    portMonitor: number;
 }
 /**
  * @generated from protobuf enum replit.goval.api.ContainerState.State
@@ -2786,8 +2783,9 @@ export interface PortOpen {
      */
     pid: number;
     /**
-     * PidChain is the list of process ids in the hierarchy of the process,
-     * starting with the current process id and ending with 1 (pid1).
+     * PidChain lists available process IDs in child-to-parent order. The last
+     * visible ancestor need not be PID 1 when its parent is outside the PID
+     * namespace.
      *
      * @generated from protobuf field: repeated uint32 pid_chain = 9
      */
@@ -5459,46 +5457,6 @@ export interface NixModuleConfigValue {
         oneofKind: undefined;
     };
 }
-/**
- * ReplspaceApiSSHTokenGetRequest asks Workspace for a short expiration SSH
- * token for accessing a specific Repl.
- *
- * @generated from protobuf message replit.goval.api.ReplspaceApiSSHTokenGetRequest
- */
-export interface ReplspaceApiSSHTokenGetRequest {
-    /**
-     * @generated from protobuf field: string nonce = 1
-     */
-    nonce: string;
-    /**
-     * @generated from protobuf field: string replid = 2
-     */
-    replid: string;
-    /**
-     * @generated from protobuf field: google.protobuf.Timestamp before = 3
-     */
-    before?: Timestamp;
-}
-/**
- * ReplspaceApiSSHTokenGetResponse is Workspace sending back a short expiration
- * SSH token for accessing a specific Repl.
- *
- * @generated from protobuf message replit.goval.api.ReplspaceApiSSHTokenGetResponse
- */
-export interface ReplspaceApiSSHTokenGetResponse {
-    /**
-     * @generated from protobuf field: string nonce = 1
-     */
-    nonce: string;
-    /**
-     * @generated from protobuf field: string token = 2
-     */
-    token: string;
-    /**
-     * @generated from protobuf field: string ssh_hostname = 3
-     */
-    sshHostname: string;
-}
 /**
  * StringList represents an list (or array) of strings;
  * we need this only because we cannot use a
@@ -8292,26 +8250,6 @@ declare class NixModuleConfigValue$Type extends MessageType<NixModuleConfigValue
  * @generated MessageType for protobuf message replit.goval.api.NixModuleConfigValue
  */
 export declare const NixModuleConfigValue: NixModuleConfigValue$Type;
-declare class ReplspaceApiSSHTokenGetRequest$Type extends MessageType<ReplspaceApiSSHTokenGetRequest> {
-    constructor();
-    create(value?: PartialMessage<ReplspaceApiSSHTokenGetRequest>): ReplspaceApiSSHTokenGetRequest;
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ReplspaceApiSSHTokenGetRequest): ReplspaceApiSSHTokenGetRequest;
-    internalBinaryWrite(message: ReplspaceApiSSHTokenGetRequest, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter;
-}
-/**
- * @generated MessageType for protobuf message replit.goval.api.ReplspaceApiSSHTokenGetRequest
- */
-export declare const ReplspaceApiSSHTokenGetRequest: ReplspaceApiSSHTokenGetRequest$Type;
-declare class ReplspaceApiSSHTokenGetResponse$Type extends MessageType<ReplspaceApiSSHTokenGetResponse> {
-    constructor();
-    create(value?: PartialMessage<ReplspaceApiSSHTokenGetResponse>): ReplspaceApiSSHTokenGetResponse;
-    internalBinaryRead(reader: IBinaryReader, length: number, options: BinaryReadOptions, target?: ReplspaceApiSSHTokenGetResponse): ReplspaceApiSSHTokenGetResponse;
-    internalBinaryWrite(message: ReplspaceApiSSHTokenGetResponse, writer: IBinaryWriter, options: BinaryWriteOptions): IBinaryWriter;
-}
-/**
- * @generated MessageType for protobuf message replit.goval.api.ReplspaceApiSSHTokenGetResponse
- */
-export declare const ReplspaceApiSSHTokenGetResponse: ReplspaceApiSSHTokenGetResponse$Type;
 declare class StringList$Type extends MessageType<StringList> {
     constructor();
     create(value?: PartialMessage<StringList>): StringList;

package/dist/api/types.js

@@ -602,8 +602,6 @@ class Command$Type extends MessageType {
             { no: 461, name: "nixModuleConfigGetResponse", kind: "message", oneof: "body", T: () => NixModuleConfigGetResponse },
             { no: 462, name: "nixModuleConfigSetRequest", kind: "message", oneof: "body", T: () => NixModuleConfigSetRequest },
             { no: 463, name: "nixModuleConfigSetResponse", kind: "message", oneof: "body", T: () => NixModuleConfigSetResponse },
-            { no: 464, name: "replspaceApiSSHTokenGetRequest", kind: "message", oneof: "body", T: () => ReplspaceApiSSHTokenGetRequest },
-            { no: 465, name: "replspaceApiSSHTokenGetResponse", kind: "message", oneof: "body", T: () => ReplspaceApiSSHTokenGetResponse },
             { no: 466, name: "secretsGetRequest", kind: "message", oneof: "body", T: () => SecretsGetRequest },
             { no: 467, name: "secretsGetResponse", kind: "message", oneof: "body", T: () => SecretsGetResponse },
             { no: 468, name: "secretsSetRequest", kind: "message", oneof: "body", T: () => SecretsSetRequest },
@@ -1780,18 +1778,6 @@ class Command$Type extends MessageType {
                         nixModuleConfigSetResponse: NixModuleConfigSetResponse.internalBinaryRead(reader, reader.uint32(), options, message.body.nixModuleConfigSetResponse)
                     };
                     break;
-                case /* replit.goval.api.ReplspaceApiSSHTokenGetRequest replspaceApiSSHTokenGetRequest */ 464:
-                    message.body = {
-                        oneofKind: "replspaceApiSSHTokenGetRequest",
-                        replspaceApiSSHTokenGetRequest: ReplspaceApiSSHTokenGetRequest.internalBinaryRead(reader, reader.uint32(), options, message.body.replspaceApiSSHTokenGetRequest)
-                    };
-                    break;
-                case /* replit.goval.api.ReplspaceApiSSHTokenGetResponse replspaceApiSSHTokenGetResponse */ 465:
-                    message.body = {
-                        oneofKind: "replspaceApiSSHTokenGetResponse",
-                        replspaceApiSSHTokenGetResponse: ReplspaceApiSSHTokenGetResponse.internalBinaryRead(reader, reader.uint32(), options, message.body.replspaceApiSSHTokenGetResponse)
-                    };
-                    break;
                 case /* replit.goval.api.SecretsGetRequest secretsGetRequest */ 466:
                     message.body = {
                         oneofKind: "secretsGetRequest",
@@ -2447,12 +2433,6 @@ class Command$Type extends MessageType {
         /* replit.goval.api.NixModuleConfigSetResponse nixModuleConfigSetResponse = 463; */
         if (message.body.oneofKind === "nixModuleConfigSetResponse")
             NixModuleConfigSetResponse.internalBinaryWrite(message.body.nixModuleConfigSetResponse, writer.tag(463, WireType.LengthDelimited).fork(), options).join();
-        /* replit.goval.api.ReplspaceApiSSHTokenGetRequest replspaceApiSSHTokenGetRequest = 464; */
-        if (message.body.oneofKind === "replspaceApiSSHTokenGetRequest")
-            ReplspaceApiSSHTokenGetRequest.internalBinaryWrite(message.body.replspaceApiSSHTokenGetRequest, writer.tag(464, WireType.LengthDelimited).fork(), options).join();
-        /* replit.goval.api.ReplspaceApiSSHTokenGetResponse replspaceApiSSHTokenGetResponse = 465; */
-        if (message.body.oneofKind === "replspaceApiSSHTokenGetResponse")
-            ReplspaceApiSSHTokenGetResponse.internalBinaryWrite(message.body.replspaceApiSSHTokenGetResponse, writer.tag(465, WireType.LengthDelimited).fork(), options).join();
         /* replit.goval.api.SecretsGetRequest secretsGetRequest = 466; */
         if (message.body.oneofKind === "secretsGetRequest")
             SecretsGetRequest.internalBinaryWrite(message.body.secretsGetRequest, writer.tag(466, WireType.LengthDelimited).fork(), options).join();
@@ -6869,12 +6849,14 @@ export const CloseChannelRes = new CloseChannelRes$Type();
 class ContainerState$Type extends MessageType {
     constructor() {
         super("replit.goval.api.ContainerState", [
-            { no: 1, name: "state", kind: "enum", T: () => ["replit.goval.api.ContainerState.State", ContainerState_State] }
+            { no: 1, name: "state", kind: "enum", T: () => ["replit.goval.api.ContainerState.State", ContainerState_State] },
+            { no: 2, name: "port_monitor", kind: "scalar", T: 13 /*ScalarType.UINT32*/ }
         ]);
     }
     create(value) {
         const message = globalThis.Object.create((this.messagePrototype));
         message.state = 0;
+        message.portMonitor = 0;
         if (value !== undefined)
             reflectionMergePartial(this, message, value);
         return message;
@@ -6887,6 +6869,9 @@ class ContainerState$Type extends MessageType {
                 case /* replit.goval.api.ContainerState.State state */ 1:
                     message.state = reader.int32();
                     break;
+                case /* uint32 port_monitor */ 2:
+                    message.portMonitor = reader.uint32();
+                    break;
                 default:
                     let u = options.readUnknownField;
                     if (u === "throw")
@@ -6902,6 +6887,9 @@ class ContainerState$Type extends MessageType {
         /* replit.goval.api.ContainerState.State state = 1; */
         if (message.state !== 0)
             writer.tag(1, WireType.Varint).int32(message.state);
+        /* uint32 port_monitor = 2; */
+        if (message.portMonitor !== 0)
+            writer.tag(2, WireType.Varint).uint32(message.portMonitor);
         let u = options.writeUnknownFields;
         if (u !== false)
             (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
@@ -14991,131 +14979,6 @@ class NixModuleConfigValue$Type extends MessageType {
  */
 export const NixModuleConfigValue = new NixModuleConfigValue$Type();
 // @generated message type with reflection information, may provide speed optimized methods
-class ReplspaceApiSSHTokenGetRequest$Type extends MessageType {
-    constructor() {
-        super("replit.goval.api.ReplspaceApiSSHTokenGetRequest", [
-            { no: 1, name: "nonce", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "replid", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "before", kind: "message", T: () => Timestamp }
-        ]);
-    }
-    create(value) {
-        const message = globalThis.Object.create((this.messagePrototype));
-        message.nonce = "";
-        message.replid = "";
-        if (value !== undefined)
-            reflectionMergePartial(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader, length, options, target) {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string nonce */ 1:
-                    message.nonce = reader.string();
-                    break;
-                case /* string replid */ 2:
-                    message.replid = reader.string();
-                    break;
-                case /* google.protobuf.Timestamp before */ 3:
-                    message.before = Timestamp.internalBinaryRead(reader, reader.uint32(), options, message.before);
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message, writer, options) {
-        /* string nonce = 1; */
-        if (message.nonce !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.nonce);
-        /* string replid = 2; */
-        if (message.replid !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.replid);
-        /* google.protobuf.Timestamp before = 3; */
-        if (message.before)
-            Timestamp.internalBinaryWrite(message.before, writer.tag(3, WireType.LengthDelimited).fork(), options).join();
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message replit.goval.api.ReplspaceApiSSHTokenGetRequest
- */
-export const ReplspaceApiSSHTokenGetRequest = new ReplspaceApiSSHTokenGetRequest$Type();
-// @generated message type with reflection information, may provide speed optimized methods
-class ReplspaceApiSSHTokenGetResponse$Type extends MessageType {
-    constructor() {
-        super("replit.goval.api.ReplspaceApiSSHTokenGetResponse", [
-            { no: 1, name: "nonce", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 2, name: "token", kind: "scalar", T: 9 /*ScalarType.STRING*/ },
-            { no: 3, name: "ssh_hostname", kind: "scalar", T: 9 /*ScalarType.STRING*/ }
-        ]);
-    }
-    create(value) {
-        const message = globalThis.Object.create((this.messagePrototype));
-        message.nonce = "";
-        message.token = "";
-        message.sshHostname = "";
-        if (value !== undefined)
-            reflectionMergePartial(this, message, value);
-        return message;
-    }
-    internalBinaryRead(reader, length, options, target) {
-        let message = target ?? this.create(), end = reader.pos + length;
-        while (reader.pos < end) {
-            let [fieldNo, wireType] = reader.tag();
-            switch (fieldNo) {
-                case /* string nonce */ 1:
-                    message.nonce = reader.string();
-                    break;
-                case /* string token */ 2:
-                    message.token = reader.string();
-                    break;
-                case /* string ssh_hostname */ 3:
-                    message.sshHostname = reader.string();
-                    break;
-                default:
-                    let u = options.readUnknownField;
-                    if (u === "throw")
-                        throw new globalThis.Error(`Unknown field ${fieldNo} (wire type ${wireType}) for ${this.typeName}`);
-                    let d = reader.skip(wireType);
-                    if (u !== false)
-                        (u === true ? UnknownFieldHandler.onRead : u)(this.typeName, message, fieldNo, wireType, d);
-            }
-        }
-        return message;
-    }
-    internalBinaryWrite(message, writer, options) {
-        /* string nonce = 1; */
-        if (message.nonce !== "")
-            writer.tag(1, WireType.LengthDelimited).string(message.nonce);
-        /* string token = 2; */
-        if (message.token !== "")
-            writer.tag(2, WireType.LengthDelimited).string(message.token);
-        /* string ssh_hostname = 3; */
-        if (message.sshHostname !== "")
-            writer.tag(3, WireType.LengthDelimited).string(message.sshHostname);
-        let u = options.writeUnknownFields;
-        if (u !== false)
-            (u == true ? UnknownFieldHandler.onWrite : u)(this.typeName, message, writer);
-        return writer;
-    }
-}
-/**
- * @generated MessageType for protobuf message replit.goval.api.ReplspaceApiSSHTokenGetResponse
- */
-export const ReplspaceApiSSHTokenGetResponse = new ReplspaceApiSSHTokenGetResponse$Type();
-// @generated message type with reflection information, may provide speed optimized methods
 class StringList$Type extends MessageType {
     constructor() {
         super("replit.goval.api.StringList", [