@slicervm/sdk 0.1.6 → 0.1.7

package/dist/index.d.cts

@@ -27,6 +27,15 @@ interface VMInfo {
     status?: string;
     persistent?: boolean;
 }
+/**
+ * Per-launch network policy override for isolated host groups.
+ * Omitted lists inherit the host group's policy. Empty lists intentionally
+ * clear that list for this VM launch.
+ */
+interface CreateVMNetworkPolicy {
+    allow?: string[];
+    drop?: string[];
+}
 interface CreateVMRequest {
     ramBytes?: number;
     cpus?: number;
@@ -39,6 +48,7 @@ interface CreateVMRequest {
     ip?: string;
     tags?: string[];
     secrets?: string[];
+    network?: CreateVMNetworkPolicy;
 }
 interface CreateVMResponse {
     hostname: string;
@@ -685,6 +695,185 @@ declare class SecretsAPI {
     delete(name: string): Promise<void>;
 }
 
+/**
+ * Slicer egress-proxy admin API.
+ *
+ * Three resources:
+ *   - clients: opaque token holders. Each VM (or other consumer) presents
+ *     the token via HTTPS_PROXY; the proxy resolves it to the client and
+ *     walks the client's allow rules.
+ *   - secrets: upstream credentials (bearer or basic). When an allow rule
+ *     references a secret, the proxy strips the client's Authorization on
+ *     the inner request and substitutes the secret's value.
+ *   - allow rules: per-client. host (exact, *.suffix wildcard, or "*"),
+ *     optional method/path filters, optional secret reference, optional
+ *     TTL, optional `passthrough` (TCP-splice CONNECT, no MITM).
+ *
+ * Calls go through slicerd's `/proxy/v1/*` broker (the same transport
+ * SlicerClient already uses for every other API), so no extra
+ * configuration is needed beyond a working SlicerClient.
+ *
+ * Wire shapes mirror the Go SDK at github.com/slicervm/sdk/proxy.go.
+ * Field-name conversion (snake_case ↔ camelCase) is handled in the
+ * `*FromWire` / `*ToWire` helpers; user-facing types are camelCase.
+ */
+
+/** Credential type for upstream injection. */
+type ProxySecretType = 'bearer' | 'basic';
+declare const ProxySecretBearer: ProxySecretType;
+/** For basic auth, the secret value must be in `user:pass` form. */
+declare const ProxySecretBasic: ProxySecretType;
+/** A registered proxy client. Tokens are never returned by list/get. */
+interface ProxyClient {
+    name: string;
+    /** RFC 3339 timestamp. */
+    createdAt: string;
+}
+/**
+ * Returned only by `clients.create`. The token is shown once and never
+ * surfaced by any other endpoint — store it now or rotate the client.
+ */
+interface ProxyClientCreated {
+    name: string;
+    token: string;
+    createdAt: string;
+}
+/**
+ * Optional input to `clients.create`. Pass `token` to bring your own
+ * literal (handy for demos and reproducible tests); omit for a
+ * server-minted high-entropy `spt_…` token (recommended).
+ */
+interface CreateProxyClientOptions {
+    token?: string;
+}
+/** A registered upstream credential. `value` is never returned. */
+interface ProxySecret {
+    name: string;
+    host: string;
+    /** Defaults to `bearer` when empty in older state files. */
+    type?: ProxySecretType;
+    createdAt: string;
+}
+interface CreateProxySecretRequest {
+    name: string;
+    host: string;
+    /** Defaults to `bearer` when omitted. */
+    type?: ProxySecretType;
+    /**
+     * Plaintext credential. For `bearer`, the raw token. For `basic`,
+     * must be in `user:pass` form (the proxy base64-encodes it on the
+     * inner request).
+     */
+    value: string;
+}
+/**
+ * Per-client allow entry. First-match-wins by declaration order.
+ *
+ * - When `secret` is set, the proxy strips the client's Authorization
+ *   on the inner request and substitutes the secret's value.
+ * - `methods`/`paths` are optional filters (any-of within each list,
+ *   all-of across lists). Empty list = any.
+ * - When `passthrough` is true, the proxy splices TCP both ways at
+ *   CONNECT without terminating TLS. Cert-pinned clients work
+ *   unchanged. Mutually exclusive with `secret`, `methods`, `paths`;
+ *   the admin API rejects rules that combine them.
+ */
+interface ProxyAllowRule {
+    host: string;
+    secret?: string;
+    methods?: string[];
+    paths?: string[];
+    /** RFC 3339 timestamp; absent / zero-value when no expiry. */
+    expires?: string;
+    passthrough?: boolean;
+}
+/** Input to `allows.add`. */
+interface AddProxyAllowRequest {
+    client: string;
+    host: string;
+    secret?: string;
+    methods?: string[];
+    paths?: string[];
+    /**
+     * Time-to-live in seconds. 0 / omitted = never expires. Resolved to
+     * an absolute `expires` timestamp on the returned rule.
+     */
+    ttlSeconds?: number;
+    /** See ProxyAllowRule.passthrough. Mutually exclusive with secret/methods/paths. */
+    passthrough?: boolean;
+}
+/**
+ * Input to `allows.removeByTuple`. Mirrors the create payload minus
+ * `ttlSeconds` (TTL is mutable lifetime, not part of identity). The
+ * proxy matches the rule by (host, methods, paths, passthrough) and
+ * removes the single matching rule. Use when several rules share a
+ * host and you want surgical removal of one — pass exactly the same
+ * fields you used at create time.
+ */
+interface RemoveProxyAllowByTupleRequest {
+    client: string;
+    host: string;
+    secret?: string;
+    methods?: string[];
+    paths?: string[];
+    passthrough?: boolean;
+}
+declare class ProxyAPI {
+    private readonly transport;
+    readonly clients: ProxyClientsAPI;
+    readonly secrets: ProxySecretsAPI;
+    readonly allows: ProxyAllowsAPI;
+    constructor(transport: TransportClient);
+}
+declare class ProxyClientsAPI {
+    private readonly transport;
+    constructor(transport: TransportClient);
+    /** Mint a new proxy client. The returned token is shown once. */
+    create(name: string, opts?: CreateProxyClientOptions): Promise<ProxyClientCreated>;
+    list(): Promise<ProxyClient[]>;
+    /**
+     * Revoke the token, drop every allow rule the client owned, and
+     * remove the client.
+     */
+    delete(name: string): Promise<void>;
+    /** List a client's allow rules in declaration order (first-match-wins). */
+    rules(name: string): Promise<ProxyAllowRule[]>;
+}
+declare class ProxySecretsAPI {
+    private readonly transport;
+    constructor(transport: TransportClient);
+    create(req: CreateProxySecretRequest): Promise<void>;
+    list(): Promise<ProxySecret[]>;
+    /**
+     * Remove a secret. Allow rules that reference it stop matching until
+     * the secret is recreated or the rule is rewritten.
+     */
+    delete(name: string): Promise<void>;
+}
+declare class ProxyAllowsAPI {
+    private readonly transport;
+    constructor(transport: TransportClient);
+    /** Add an allow rule. Returns the resolved rule with absolute `expires`. */
+    add(req: AddProxyAllowRequest): Promise<ProxyAllowRule>;
+    /**
+     * Host-bulk revoke: removes **every** rule on the client whose host
+     * matches. For surgical removal of one rule among siblings on the
+     * same host (e.g. several path-scoped rules on `github.com`), use
+     * `removeByTuple` instead.
+     */
+    remove(client: string, host: string): Promise<void>;
+    /**
+     * Surgical revoke: removes the single rule whose
+     * (host, methods, paths, passthrough) tuple matches the request.
+     * Pass exactly the same fields you used at create time. Method and
+     * host casing are normalised server-side, so `"GET"` / `"get"` and
+     * `"github.com"` / `"GITHUB.COM"` all match the same stored rule.
+     *
+     * Returns 404 (surfaced as a SlicerAPIError) when no rule matches.
+     */
+    removeByTuple(req: RemoveProxyAllowByTupleRequest): Promise<void>;
+}
+
 /**
  * SlicerClient — grouped TypeScript client for the Slicer VM API.
  *
@@ -707,6 +896,7 @@ declare class SlicerClient {
     readonly hostGroups: HostGroupsAPI;
     readonly vms: VMsAPI;
     readonly secrets: SecretsAPI;
+    readonly proxy: ProxyAPI;
     constructor(opts: SlicerClientOptions);
     static fromEnv(overrides?: Partial<SlicerClientOptions>): SlicerClient;
     getInfo(): Promise<SlicerInfo>;
@@ -778,4 +968,4 @@ declare class SlicerShellSession {
     private teardown;
 }
 
-export { type AddressMapping, type AgentHealth, type BgDeleteResponse, type BgExecInfo, type BgExecRequest, type BgExecResponse, type BgKillOptions, type BgKillResponse, type BgLogOptions, type BgWaitExitResponse, type CreateSecretRequest, type CreateVMOptions, type CreateVMRequest, type CreateVMResponse, type DeleteResponse, type ExecFrame, type ExecRequest, type ExecResult, type ExecResultBinary, type ExecStdio, ExecStdioBase64, ExecStdioText, FRAME_TYPE_DATA, FRAME_TYPE_HEARTBEAT, FRAME_TYPE_SESSION_CLOSE, FRAME_TYPE_SHUTDOWN, FRAME_TYPE_WINDOW_SIZE, type FSEntry, type FSMkdirRequest, type FSWatchEvent, type FSWatchEventType, type FSWatchRequest, Forwarder, type ForwarderListener, type ForwarderOptions, GiB, type HostGroup, HostGroupsAPI, type ListOptions, MiB, NonRootUser, type Secret, SecretExistsError, SecretsAPI, type ShellSessionOptions, type ShutdownRequest, SlicerAPIError, SlicerClient, type SlicerClientOptions, type SlicerInfo, SlicerShellSession, type UpdateSecretRequest, VM, VMBg, VMFileSystem, type VMInfo, type VMInit, type VMLogs, type VMSnapshot, type VMStat, VMsAPI, type WaitOptions, type XTermLike, encodeFrame, parseAddressMapping, parseFrame, resolveTransport };
+export { type AddProxyAllowRequest, type AddressMapping, type AgentHealth, type BgDeleteResponse, type BgExecInfo, type BgExecRequest, type BgExecResponse, type BgKillOptions, type BgKillResponse, type BgLogOptions, type BgWaitExitResponse, type CreateProxyClientOptions, type CreateProxySecretRequest, type CreateSecretRequest, type CreateVMNetworkPolicy, type CreateVMOptions, type CreateVMRequest, type CreateVMResponse, type DeleteResponse, type ExecFrame, type ExecRequest, type ExecResult, type ExecResultBinary, type ExecStdio, ExecStdioBase64, ExecStdioText, FRAME_TYPE_DATA, FRAME_TYPE_HEARTBEAT, FRAME_TYPE_SESSION_CLOSE, FRAME_TYPE_SHUTDOWN, FRAME_TYPE_WINDOW_SIZE, type FSEntry, type FSMkdirRequest, type FSWatchEvent, type FSWatchEventType, type FSWatchRequest, Forwarder, type ForwarderListener, type ForwarderOptions, GiB, type HostGroup, HostGroupsAPI, type ListOptions, MiB, NonRootUser, ProxyAPI, type ProxyAllowRule, ProxyAllowsAPI, type ProxyClient, type ProxyClientCreated, ProxyClientsAPI, type ProxySecret, ProxySecretBasic, ProxySecretBearer, type ProxySecretType, ProxySecretsAPI, type RemoveProxyAllowByTupleRequest, type Secret, SecretExistsError, SecretsAPI, type ShellSessionOptions, type ShutdownRequest, SlicerAPIError, SlicerClient, type SlicerClientOptions, type SlicerInfo, SlicerShellSession, type UpdateSecretRequest, VM, VMBg, VMFileSystem, type VMInfo, type VMInit, type VMLogs, type VMSnapshot, type VMStat, VMsAPI, type WaitOptions, type XTermLike, encodeFrame, parseAddressMapping, parseFrame, resolveTransport };

package/dist/index.d.ts

@@ -27,6 +27,15 @@ interface VMInfo {
     status?: string;
     persistent?: boolean;
 }
+/**
+ * Per-launch network policy override for isolated host groups.
+ * Omitted lists inherit the host group's policy. Empty lists intentionally
+ * clear that list for this VM launch.
+ */
+interface CreateVMNetworkPolicy {
+    allow?: string[];
+    drop?: string[];
+}
 interface CreateVMRequest {
     ramBytes?: number;
     cpus?: number;
@@ -39,6 +48,7 @@ interface CreateVMRequest {
     ip?: string;
     tags?: string[];
     secrets?: string[];
+    network?: CreateVMNetworkPolicy;
 }
 interface CreateVMResponse {
     hostname: string;
@@ -685,6 +695,185 @@ declare class SecretsAPI {
     delete(name: string): Promise<void>;
 }
 
+/**
+ * Slicer egress-proxy admin API.
+ *
+ * Three resources:
+ *   - clients: opaque token holders. Each VM (or other consumer) presents
+ *     the token via HTTPS_PROXY; the proxy resolves it to the client and
+ *     walks the client's allow rules.
+ *   - secrets: upstream credentials (bearer or basic). When an allow rule
+ *     references a secret, the proxy strips the client's Authorization on
+ *     the inner request and substitutes the secret's value.
+ *   - allow rules: per-client. host (exact, *.suffix wildcard, or "*"),
+ *     optional method/path filters, optional secret reference, optional
+ *     TTL, optional `passthrough` (TCP-splice CONNECT, no MITM).
+ *
+ * Calls go through slicerd's `/proxy/v1/*` broker (the same transport
+ * SlicerClient already uses for every other API), so no extra
+ * configuration is needed beyond a working SlicerClient.
+ *
+ * Wire shapes mirror the Go SDK at github.com/slicervm/sdk/proxy.go.
+ * Field-name conversion (snake_case ↔ camelCase) is handled in the
+ * `*FromWire` / `*ToWire` helpers; user-facing types are camelCase.
+ */
+
+/** Credential type for upstream injection. */
+type ProxySecretType = 'bearer' | 'basic';
+declare const ProxySecretBearer: ProxySecretType;
+/** For basic auth, the secret value must be in `user:pass` form. */
+declare const ProxySecretBasic: ProxySecretType;
+/** A registered proxy client. Tokens are never returned by list/get. */
+interface ProxyClient {
+    name: string;
+    /** RFC 3339 timestamp. */
+    createdAt: string;
+}
+/**
+ * Returned only by `clients.create`. The token is shown once and never
+ * surfaced by any other endpoint — store it now or rotate the client.
+ */
+interface ProxyClientCreated {
+    name: string;
+    token: string;
+    createdAt: string;
+}
+/**
+ * Optional input to `clients.create`. Pass `token` to bring your own
+ * literal (handy for demos and reproducible tests); omit for a
+ * server-minted high-entropy `spt_…` token (recommended).
+ */
+interface CreateProxyClientOptions {
+    token?: string;
+}
+/** A registered upstream credential. `value` is never returned. */
+interface ProxySecret {
+    name: string;
+    host: string;
+    /** Defaults to `bearer` when empty in older state files. */
+    type?: ProxySecretType;
+    createdAt: string;
+}
+interface CreateProxySecretRequest {
+    name: string;
+    host: string;
+    /** Defaults to `bearer` when omitted. */
+    type?: ProxySecretType;
+    /**
+     * Plaintext credential. For `bearer`, the raw token. For `basic`,
+     * must be in `user:pass` form (the proxy base64-encodes it on the
+     * inner request).
+     */
+    value: string;
+}
+/**
+ * Per-client allow entry. First-match-wins by declaration order.
+ *
+ * - When `secret` is set, the proxy strips the client's Authorization
+ *   on the inner request and substitutes the secret's value.
+ * - `methods`/`paths` are optional filters (any-of within each list,
+ *   all-of across lists). Empty list = any.
+ * - When `passthrough` is true, the proxy splices TCP both ways at
+ *   CONNECT without terminating TLS. Cert-pinned clients work
+ *   unchanged. Mutually exclusive with `secret`, `methods`, `paths`;
+ *   the admin API rejects rules that combine them.
+ */
+interface ProxyAllowRule {
+    host: string;
+    secret?: string;
+    methods?: string[];
+    paths?: string[];
+    /** RFC 3339 timestamp; absent / zero-value when no expiry. */
+    expires?: string;
+    passthrough?: boolean;
+}
+/** Input to `allows.add`. */
+interface AddProxyAllowRequest {
+    client: string;
+    host: string;
+    secret?: string;
+    methods?: string[];
+    paths?: string[];
+    /**
+     * Time-to-live in seconds. 0 / omitted = never expires. Resolved to
+     * an absolute `expires` timestamp on the returned rule.
+     */
+    ttlSeconds?: number;
+    /** See ProxyAllowRule.passthrough. Mutually exclusive with secret/methods/paths. */
+    passthrough?: boolean;
+}
+/**
+ * Input to `allows.removeByTuple`. Mirrors the create payload minus
+ * `ttlSeconds` (TTL is mutable lifetime, not part of identity). The
+ * proxy matches the rule by (host, methods, paths, passthrough) and
+ * removes the single matching rule. Use when several rules share a
+ * host and you want surgical removal of one — pass exactly the same
+ * fields you used at create time.
+ */
+interface RemoveProxyAllowByTupleRequest {
+    client: string;
+    host: string;
+    secret?: string;
+    methods?: string[];
+    paths?: string[];
+    passthrough?: boolean;
+}
+declare class ProxyAPI {
+    private readonly transport;
+    readonly clients: ProxyClientsAPI;
+    readonly secrets: ProxySecretsAPI;
+    readonly allows: ProxyAllowsAPI;
+    constructor(transport: TransportClient);
+}
+declare class ProxyClientsAPI {
+    private readonly transport;
+    constructor(transport: TransportClient);
+    /** Mint a new proxy client. The returned token is shown once. */
+    create(name: string, opts?: CreateProxyClientOptions): Promise<ProxyClientCreated>;
+    list(): Promise<ProxyClient[]>;
+    /**
+     * Revoke the token, drop every allow rule the client owned, and
+     * remove the client.
+     */
+    delete(name: string): Promise<void>;
+    /** List a client's allow rules in declaration order (first-match-wins). */
+    rules(name: string): Promise<ProxyAllowRule[]>;
+}
+declare class ProxySecretsAPI {
+    private readonly transport;
+    constructor(transport: TransportClient);
+    create(req: CreateProxySecretRequest): Promise<void>;
+    list(): Promise<ProxySecret[]>;
+    /**
+     * Remove a secret. Allow rules that reference it stop matching until
+     * the secret is recreated or the rule is rewritten.
+     */
+    delete(name: string): Promise<void>;
+}
+declare class ProxyAllowsAPI {
+    private readonly transport;
+    constructor(transport: TransportClient);
+    /** Add an allow rule. Returns the resolved rule with absolute `expires`. */
+    add(req: AddProxyAllowRequest): Promise<ProxyAllowRule>;
+    /**
+     * Host-bulk revoke: removes **every** rule on the client whose host
+     * matches. For surgical removal of one rule among siblings on the
+     * same host (e.g. several path-scoped rules on `github.com`), use
+     * `removeByTuple` instead.
+     */
+    remove(client: string, host: string): Promise<void>;
+    /**
+     * Surgical revoke: removes the single rule whose
+     * (host, methods, paths, passthrough) tuple matches the request.
+     * Pass exactly the same fields you used at create time. Method and
+     * host casing are normalised server-side, so `"GET"` / `"get"` and
+     * `"github.com"` / `"GITHUB.COM"` all match the same stored rule.
+     *
+     * Returns 404 (surfaced as a SlicerAPIError) when no rule matches.
+     */
+    removeByTuple(req: RemoveProxyAllowByTupleRequest): Promise<void>;
+}
+
 /**
  * SlicerClient — grouped TypeScript client for the Slicer VM API.
  *
@@ -707,6 +896,7 @@ declare class SlicerClient {
     readonly hostGroups: HostGroupsAPI;
     readonly vms: VMsAPI;
     readonly secrets: SecretsAPI;
+    readonly proxy: ProxyAPI;
     constructor(opts: SlicerClientOptions);
     static fromEnv(overrides?: Partial<SlicerClientOptions>): SlicerClient;
     getInfo(): Promise<SlicerInfo>;
@@ -778,4 +968,4 @@ declare class SlicerShellSession {
     private teardown;
 }
 
-export { type AddressMapping, type AgentHealth, type BgDeleteResponse, type BgExecInfo, type BgExecRequest, type BgExecResponse, type BgKillOptions, type BgKillResponse, type BgLogOptions, type BgWaitExitResponse, type CreateSecretRequest, type CreateVMOptions, type CreateVMRequest, type CreateVMResponse, type DeleteResponse, type ExecFrame, type ExecRequest, type ExecResult, type ExecResultBinary, type ExecStdio, ExecStdioBase64, ExecStdioText, FRAME_TYPE_DATA, FRAME_TYPE_HEARTBEAT, FRAME_TYPE_SESSION_CLOSE, FRAME_TYPE_SHUTDOWN, FRAME_TYPE_WINDOW_SIZE, type FSEntry, type FSMkdirRequest, type FSWatchEvent, type FSWatchEventType, type FSWatchRequest, Forwarder, type ForwarderListener, type ForwarderOptions, GiB, type HostGroup, HostGroupsAPI, type ListOptions, MiB, NonRootUser, type Secret, SecretExistsError, SecretsAPI, type ShellSessionOptions, type ShutdownRequest, SlicerAPIError, SlicerClient, type SlicerClientOptions, type SlicerInfo, SlicerShellSession, type UpdateSecretRequest, VM, VMBg, VMFileSystem, type VMInfo, type VMInit, type VMLogs, type VMSnapshot, type VMStat, VMsAPI, type WaitOptions, type XTermLike, encodeFrame, parseAddressMapping, parseFrame, resolveTransport };
+export { type AddProxyAllowRequest, type AddressMapping, type AgentHealth, type BgDeleteResponse, type BgExecInfo, type BgExecRequest, type BgExecResponse, type BgKillOptions, type BgKillResponse, type BgLogOptions, type BgWaitExitResponse, type CreateProxyClientOptions, type CreateProxySecretRequest, type CreateSecretRequest, type CreateVMNetworkPolicy, type CreateVMOptions, type CreateVMRequest, type CreateVMResponse, type DeleteResponse, type ExecFrame, type ExecRequest, type ExecResult, type ExecResultBinary, type ExecStdio, ExecStdioBase64, ExecStdioText, FRAME_TYPE_DATA, FRAME_TYPE_HEARTBEAT, FRAME_TYPE_SESSION_CLOSE, FRAME_TYPE_SHUTDOWN, FRAME_TYPE_WINDOW_SIZE, type FSEntry, type FSMkdirRequest, type FSWatchEvent, type FSWatchEventType, type FSWatchRequest, Forwarder, type ForwarderListener, type ForwarderOptions, GiB, type HostGroup, HostGroupsAPI, type ListOptions, MiB, NonRootUser, ProxyAPI, type ProxyAllowRule, ProxyAllowsAPI, type ProxyClient, type ProxyClientCreated, ProxyClientsAPI, type ProxySecret, ProxySecretBasic, ProxySecretBearer, type ProxySecretType, ProxySecretsAPI, type RemoveProxyAllowByTupleRequest, type Secret, SecretExistsError, SecretsAPI, type ShellSessionOptions, type ShutdownRequest, SlicerAPIError, SlicerClient, type SlicerClientOptions, type SlicerInfo, SlicerShellSession, type UpdateSecretRequest, VM, VMBg, VMFileSystem, type VMInfo, type VMInit, type VMLogs, type VMSnapshot, type VMStat, VMsAPI, type WaitOptions, type XTermLike, encodeFrame, parseAddressMapping, parseFrame, resolveTransport };

package/dist/index.js

@@ -255,6 +255,7 @@ function createVMReqToWire(r) {
   if (r.ip !== void 0) o.ip = r.ip;
   if (r.tags !== void 0) o.tags = r.tags;
   if (r.secrets !== void 0) o.secrets = r.secrets;
+  if (r.network !== void 0) o.network = r.network;
   return o;
 }
 function createVMResFromWire(w) {
@@ -1251,17 +1252,173 @@ function buildListQuery(opts) {
   return s ? `?${s}` : "";
 }
 
+// src/proxy.ts
+var ProxySecretBearer = "bearer";
+var ProxySecretBasic = "basic";
+function clientFromWire(w) {
+  return { name: w.name, createdAt: w.created_at };
+}
+function clientCreatedFromWire(w) {
+  return { name: w.name, token: w.token, createdAt: w.created_at };
+}
+function secretFromWire2(w) {
+  const out = { name: w.name, host: w.host, createdAt: w.created_at };
+  if (w.type) out.type = w.type;
+  return out;
+}
+function ruleFromWire(w) {
+  const out = { host: w.host };
+  if (w.secret) out.secret = w.secret;
+  if (w.methods && w.methods.length > 0) out.methods = w.methods;
+  if (w.paths && w.paths.length > 0) out.paths = w.paths;
+  if (w.expires && w.expires !== "0001-01-01T00:00:00Z") out.expires = w.expires;
+  if (w.passthrough) out.passthrough = w.passthrough;
+  return out;
+}
+var ProxyAPI = class {
+  constructor(transport) {
+    this.transport = transport;
+    this.clients = new ProxyClientsAPI(transport);
+    this.secrets = new ProxySecretsAPI(transport);
+    this.allows = new ProxyAllowsAPI(transport);
+  }
+  transport;
+  clients;
+  secrets;
+  allows;
+};
+var ProxyClientsAPI = class {
+  constructor(transport) {
+    this.transport = transport;
+  }
+  transport;
+  /** Mint a new proxy client. The returned token is shown once. */
+  async create(name, opts = {}) {
+    const body = { name };
+    if (opts.token) body.token = opts.token;
+    const wire = await this.transport.request(
+      "POST",
+      "/proxy/v1/clients",
+      body
+    );
+    return clientCreatedFromWire(wire);
+  }
+  async list() {
+    const wire = await this.transport.request("GET", "/proxy/v1/clients");
+    return (wire ?? []).map(clientFromWire);
+  }
+  /**
+   * Revoke the token, drop every allow rule the client owned, and
+   * remove the client.
+   */
+  async delete(name) {
+    await this.transport.request("DELETE", `/proxy/v1/clients/${encodeURIComponent(name)}`);
+  }
+  /** List a client's allow rules in declaration order (first-match-wins). */
+  async rules(name) {
+    const wire = await this.transport.request(
+      "GET",
+      `/proxy/v1/clients/${encodeURIComponent(name)}`
+    );
+    return (wire ?? []).map(ruleFromWire);
+  }
+};
+var ProxySecretsAPI = class {
+  constructor(transport) {
+    this.transport = transport;
+  }
+  transport;
+  async create(req) {
+    const body = {
+      name: req.name,
+      host: req.host,
+      value: req.value
+    };
+    if (req.type) body.type = req.type;
+    await this.transport.request("POST", "/proxy/v1/secrets", body);
+  }
+  async list() {
+    const wire = await this.transport.request("GET", "/proxy/v1/secrets");
+    return (wire ?? []).map(secretFromWire2);
+  }
+  /**
+   * Remove a secret. Allow rules that reference it stop matching until
+   * the secret is recreated or the rule is rewritten.
+   */
+  async delete(name) {
+    await this.transport.request("DELETE", `/proxy/v1/secrets/${encodeURIComponent(name)}`);
+  }
+};
+var ProxyAllowsAPI = class {
+  constructor(transport) {
+    this.transport = transport;
+  }
+  transport;
+  /** Add an allow rule. Returns the resolved rule with absolute `expires`. */
+  async add(req) {
+    const body = {
+      client: req.client,
+      host: req.host
+    };
+    if (req.secret) body.secret = req.secret;
+    if (req.methods && req.methods.length > 0) body.methods = req.methods;
+    if (req.paths && req.paths.length > 0) body.paths = req.paths;
+    if (req.ttlSeconds && req.ttlSeconds > 0) body.ttl_seconds = req.ttlSeconds;
+    if (req.passthrough) body.passthrough = true;
+    const wire = await this.transport.request(
+      "POST",
+      "/proxy/v1/allows",
+      body
+    );
+    return ruleFromWire(wire);
+  }
+  /**
+   * Host-bulk revoke: removes **every** rule on the client whose host
+   * matches. For surgical removal of one rule among siblings on the
+   * same host (e.g. several path-scoped rules on `github.com`), use
+   * `removeByTuple` instead.
+   */
+  async remove(client, host) {
+    await this.transport.request(
+      "DELETE",
+      `/proxy/v1/allows/${encodeURIComponent(client)}/${encodeURIComponent(host)}`
+    );
+  }
+  /**
+   * Surgical revoke: removes the single rule whose
+   * (host, methods, paths, passthrough) tuple matches the request.
+   * Pass exactly the same fields you used at create time. Method and
+   * host casing are normalised server-side, so `"GET"` / `"get"` and
+   * `"github.com"` / `"GITHUB.COM"` all match the same stored rule.
+   *
+   * Returns 404 (surfaced as a SlicerAPIError) when no rule matches.
+   */
+  async removeByTuple(req) {
+    const body = {
+      client: req.client,
+      host: req.host
+    };
+    if (req.secret) body.secret = req.secret;
+    if (req.methods && req.methods.length > 0) body.methods = req.methods;
+    if (req.paths && req.paths.length > 0) body.paths = req.paths;
+    if (req.passthrough) body.passthrough = true;
+    await this.transport.request("POST", "/proxy/v1/allows/revoke", body);
+  }
+};
+
 // src/client.ts
 var SlicerClient = class _SlicerClient {
   transport;
   hostGroups;
   vms;
   secrets;
+  proxy;
   constructor(opts) {
     this.transport = new TransportClient(opts);
     this.hostGroups = new HostGroupsAPI(this.transport);
     this.vms = new VMsAPI(this.transport);
     this.secrets = new SecretsAPI(this.transport);
+    this.proxy = new ProxyAPI(this.transport);
   }
   static fromEnv(overrides = {}) {
     const baseURL = overrides.baseURL ?? process.env.SLICER_URL;
@@ -1418,6 +1575,6 @@ var SlicerShellSession = class {
   }
 };
 
-export { ExecStdioBase64, ExecStdioText, FRAME_TYPE_DATA, FRAME_TYPE_HEARTBEAT, FRAME_TYPE_SESSION_CLOSE, FRAME_TYPE_SHUTDOWN, FRAME_TYPE_WINDOW_SIZE, Forwarder, GiB, HostGroupsAPI, MiB, NonRootUser, SecretExistsError, SecretsAPI, SlicerAPIError, SlicerClient, SlicerShellSession, VM, VMBg, VMFileSystem, VMsAPI, encodeFrame, parseAddressMapping, parseFrame, resolveTransport };
+export { ExecStdioBase64, ExecStdioText, FRAME_TYPE_DATA, FRAME_TYPE_HEARTBEAT, FRAME_TYPE_SESSION_CLOSE, FRAME_TYPE_SHUTDOWN, FRAME_TYPE_WINDOW_SIZE, Forwarder, GiB, HostGroupsAPI, MiB, NonRootUser, ProxyAPI, ProxyAllowsAPI, ProxyClientsAPI, ProxySecretBasic, ProxySecretBearer, ProxySecretsAPI, SecretExistsError, SecretsAPI, SlicerAPIError, SlicerClient, SlicerShellSession, VM, VMBg, VMFileSystem, VMsAPI, encodeFrame, parseAddressMapping, parseFrame, resolveTransport };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map