openshell 0.0.113__py3-none-any.whl

openshell/_proto/openshell_pb2_grpc.py

@@ -0,0 +1,3119 @@
+# Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT!
+"""Client and server classes corresponding to protobuf-defined services."""
+import grpc
+import warnings
+
+from . import openshell_pb2 as openshell__pb2
+from . import sandbox_pb2 as sandbox__pb2
+
+GRPC_GENERATED_VERSION = '1.78.0'
+GRPC_VERSION = grpc.__version__
+_version_not_supported = False
+
+try:
+    from grpc._utilities import first_version_is_lower
+    _version_not_supported = first_version_is_lower(GRPC_VERSION, GRPC_GENERATED_VERSION)
+except ImportError:
+    _version_not_supported = True
+
+if _version_not_supported:
+    raise RuntimeError(
+        f'The grpc package installed is at version {GRPC_VERSION},'
+        + ' but the generated code in openshell_pb2_grpc.py depends on'
+        + f' grpcio>={GRPC_GENERATED_VERSION}.'
+        + f' Please upgrade your grpc module to grpcio>={GRPC_GENERATED_VERSION}'
+        + f' or downgrade your generated code using grpcio-tools<={GRPC_VERSION}.'
+    )
+
+
+class OpenShellStub(object):
+    """OpenShell service provides sandbox, provider, and runtime management capabilities.
+
+    Conventions:
+    - This file owns the public API resource model exposed to OpenShell clients.
+    - `Sandbox`, `SandboxSpec`, `SandboxStatus`, and `SandboxPhase` are gateway-owned
+    public types. Internal compute drivers must not import or return them directly.
+    - The gateway translates internal compute-driver observations into these public
+    resource messages before persisting or returning them to clients.
+    """
+
+    def __init__(self, channel):
+        """Constructor.
+
+        Args:
+            channel: A grpc.Channel.
+        """
+        self.Health = channel.unary_unary(
+                '/openshell.v1.OpenShell/Health',
+                request_serializer=openshell__pb2.HealthRequest.SerializeToString,
+                response_deserializer=openshell__pb2.HealthResponse.FromString,
+                _registered_method=True)
+        self.GetCurrentUser = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetCurrentUser',
+                request_serializer=openshell__pb2.GetCurrentUserRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetCurrentUserResponse.FromString,
+                _registered_method=True)
+        self.GetGatewayInfo = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetGatewayInfo',
+                request_serializer=openshell__pb2.GetGatewayInfoRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetGatewayInfoResponse.FromString,
+                _registered_method=True)
+        self.CreateSandbox = channel.unary_unary(
+                '/openshell.v1.OpenShell/CreateSandbox',
+                request_serializer=openshell__pb2.CreateSandboxRequest.SerializeToString,
+                response_deserializer=openshell__pb2.SandboxResponse.FromString,
+                _registered_method=True)
+        self.GetSandbox = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetSandbox',
+                request_serializer=openshell__pb2.GetSandboxRequest.SerializeToString,
+                response_deserializer=openshell__pb2.SandboxResponse.FromString,
+                _registered_method=True)
+        self.ListSandboxes = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListSandboxes',
+                request_serializer=openshell__pb2.ListSandboxesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListSandboxesResponse.FromString,
+                _registered_method=True)
+        self.ListSandboxProviders = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListSandboxProviders',
+                request_serializer=openshell__pb2.ListSandboxProvidersRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListSandboxProvidersResponse.FromString,
+                _registered_method=True)
+        self.AttachSandboxProvider = channel.unary_unary(
+                '/openshell.v1.OpenShell/AttachSandboxProvider',
+                request_serializer=openshell__pb2.AttachSandboxProviderRequest.SerializeToString,
+                response_deserializer=openshell__pb2.AttachSandboxProviderResponse.FromString,
+                _registered_method=True)
+        self.DetachSandboxProvider = channel.unary_unary(
+                '/openshell.v1.OpenShell/DetachSandboxProvider',
+                request_serializer=openshell__pb2.DetachSandboxProviderRequest.SerializeToString,
+                response_deserializer=openshell__pb2.DetachSandboxProviderResponse.FromString,
+                _registered_method=True)
+        self.DeleteSandbox = channel.unary_unary(
+                '/openshell.v1.OpenShell/DeleteSandbox',
+                request_serializer=openshell__pb2.DeleteSandboxRequest.SerializeToString,
+                response_deserializer=openshell__pb2.DeleteSandboxResponse.FromString,
+                _registered_method=True)
+        self.StopSandbox = channel.unary_unary(
+                '/openshell.v1.OpenShell/StopSandbox',
+                request_serializer=openshell__pb2.StopSandboxRequest.SerializeToString,
+                response_deserializer=openshell__pb2.SandboxResponse.FromString,
+                _registered_method=True)
+        self.StartSandbox = channel.unary_unary(
+                '/openshell.v1.OpenShell/StartSandbox',
+                request_serializer=openshell__pb2.StartSandboxRequest.SerializeToString,
+                response_deserializer=openshell__pb2.SandboxResponse.FromString,
+                _registered_method=True)
+        self.CreateSshSession = channel.unary_unary(
+                '/openshell.v1.OpenShell/CreateSshSession',
+                request_serializer=openshell__pb2.CreateSshSessionRequest.SerializeToString,
+                response_deserializer=openshell__pb2.CreateSshSessionResponse.FromString,
+                _registered_method=True)
+        self.ExposeService = channel.unary_unary(
+                '/openshell.v1.OpenShell/ExposeService',
+                request_serializer=openshell__pb2.ExposeServiceRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ServiceEndpointResponse.FromString,
+                _registered_method=True)
+        self.GetService = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetService',
+                request_serializer=openshell__pb2.GetServiceRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ServiceEndpointResponse.FromString,
+                _registered_method=True)
+        self.ListServices = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListServices',
+                request_serializer=openshell__pb2.ListServicesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListServicesResponse.FromString,
+                _registered_method=True)
+        self.DeleteService = channel.unary_unary(
+                '/openshell.v1.OpenShell/DeleteService',
+                request_serializer=openshell__pb2.DeleteServiceRequest.SerializeToString,
+                response_deserializer=openshell__pb2.DeleteServiceResponse.FromString,
+                _registered_method=True)
+        self.RevokeSshSession = channel.unary_unary(
+                '/openshell.v1.OpenShell/RevokeSshSession',
+                request_serializer=openshell__pb2.RevokeSshSessionRequest.SerializeToString,
+                response_deserializer=openshell__pb2.RevokeSshSessionResponse.FromString,
+                _registered_method=True)
+        self.ExecSandbox = channel.unary_stream(
+                '/openshell.v1.OpenShell/ExecSandbox',
+                request_serializer=openshell__pb2.ExecSandboxRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ExecSandboxEvent.FromString,
+                _registered_method=True)
+        self.ForwardTcp = channel.stream_stream(
+                '/openshell.v1.OpenShell/ForwardTcp',
+                request_serializer=openshell__pb2.TcpForwardFrame.SerializeToString,
+                response_deserializer=openshell__pb2.TcpForwardFrame.FromString,
+                _registered_method=True)
+        self.ExecSandboxInteractive = channel.stream_stream(
+                '/openshell.v1.OpenShell/ExecSandboxInteractive',
+                request_serializer=openshell__pb2.ExecSandboxInput.SerializeToString,
+                response_deserializer=openshell__pb2.ExecSandboxEvent.FromString,
+                _registered_method=True)
+        self.CreateProvider = channel.unary_unary(
+                '/openshell.v1.OpenShell/CreateProvider',
+                request_serializer=openshell__pb2.CreateProviderRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ProviderResponse.FromString,
+                _registered_method=True)
+        self.GetProvider = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetProvider',
+                request_serializer=openshell__pb2.GetProviderRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ProviderResponse.FromString,
+                _registered_method=True)
+        self.ListProviders = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListProviders',
+                request_serializer=openshell__pb2.ListProvidersRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListProvidersResponse.FromString,
+                _registered_method=True)
+        self.ListProviderProfiles = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListProviderProfiles',
+                request_serializer=openshell__pb2.ListProviderProfilesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListProviderProfilesResponse.FromString,
+                _registered_method=True)
+        self.GetProviderProfile = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetProviderProfile',
+                request_serializer=openshell__pb2.GetProviderProfileRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ProviderProfileResponse.FromString,
+                _registered_method=True)
+        self.ImportProviderProfiles = channel.unary_unary(
+                '/openshell.v1.OpenShell/ImportProviderProfiles',
+                request_serializer=openshell__pb2.ImportProviderProfilesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ImportProviderProfilesResponse.FromString,
+                _registered_method=True)
+        self.UpdateProviderProfiles = channel.unary_unary(
+                '/openshell.v1.OpenShell/UpdateProviderProfiles',
+                request_serializer=openshell__pb2.UpdateProviderProfilesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.UpdateProviderProfilesResponse.FromString,
+                _registered_method=True)
+        self.LintProviderProfiles = channel.unary_unary(
+                '/openshell.v1.OpenShell/LintProviderProfiles',
+                request_serializer=openshell__pb2.LintProviderProfilesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.LintProviderProfilesResponse.FromString,
+                _registered_method=True)
+        self.UpdateProvider = channel.unary_unary(
+                '/openshell.v1.OpenShell/UpdateProvider',
+                request_serializer=openshell__pb2.UpdateProviderRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ProviderResponse.FromString,
+                _registered_method=True)
+        self.GetProviderRefreshStatus = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetProviderRefreshStatus',
+                request_serializer=openshell__pb2.GetProviderRefreshStatusRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetProviderRefreshStatusResponse.FromString,
+                _registered_method=True)
+        self.ConfigureProviderRefresh = channel.unary_unary(
+                '/openshell.v1.OpenShell/ConfigureProviderRefresh',
+                request_serializer=openshell__pb2.ConfigureProviderRefreshRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ConfigureProviderRefreshResponse.FromString,
+                _registered_method=True)
+        self.RotateProviderCredential = channel.unary_unary(
+                '/openshell.v1.OpenShell/RotateProviderCredential',
+                request_serializer=openshell__pb2.RotateProviderCredentialRequest.SerializeToString,
+                response_deserializer=openshell__pb2.RotateProviderCredentialResponse.FromString,
+                _registered_method=True)
+        self.DeleteProviderRefresh = channel.unary_unary(
+                '/openshell.v1.OpenShell/DeleteProviderRefresh',
+                request_serializer=openshell__pb2.DeleteProviderRefreshRequest.SerializeToString,
+                response_deserializer=openshell__pb2.DeleteProviderRefreshResponse.FromString,
+                _registered_method=True)
+        self.DeleteProvider = channel.unary_unary(
+                '/openshell.v1.OpenShell/DeleteProvider',
+                request_serializer=openshell__pb2.DeleteProviderRequest.SerializeToString,
+                response_deserializer=openshell__pb2.DeleteProviderResponse.FromString,
+                _registered_method=True)
+        self.DeleteProviderProfile = channel.unary_unary(
+                '/openshell.v1.OpenShell/DeleteProviderProfile',
+                request_serializer=openshell__pb2.DeleteProviderProfileRequest.SerializeToString,
+                response_deserializer=openshell__pb2.DeleteProviderProfileResponse.FromString,
+                _registered_method=True)
+        self.GetSandboxConfig = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetSandboxConfig',
+                request_serializer=sandbox__pb2.GetSandboxConfigRequest.SerializeToString,
+                response_deserializer=sandbox__pb2.GetSandboxConfigResponse.FromString,
+                _registered_method=True)
+        self.GetGatewayConfig = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetGatewayConfig',
+                request_serializer=sandbox__pb2.GetGatewayConfigRequest.SerializeToString,
+                response_deserializer=sandbox__pb2.GetGatewayConfigResponse.FromString,
+                _registered_method=True)
+        self.UpdateConfig = channel.unary_unary(
+                '/openshell.v1.OpenShell/UpdateConfig',
+                request_serializer=openshell__pb2.UpdateConfigRequest.SerializeToString,
+                response_deserializer=openshell__pb2.UpdateConfigResponse.FromString,
+                _registered_method=True)
+        self.GetSandboxPolicyStatus = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetSandboxPolicyStatus',
+                request_serializer=openshell__pb2.GetSandboxPolicyStatusRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetSandboxPolicyStatusResponse.FromString,
+                _registered_method=True)
+        self.ListSandboxPolicies = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListSandboxPolicies',
+                request_serializer=openshell__pb2.ListSandboxPoliciesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListSandboxPoliciesResponse.FromString,
+                _registered_method=True)
+        self.ReportPolicyStatus = channel.unary_unary(
+                '/openshell.v1.OpenShell/ReportPolicyStatus',
+                request_serializer=openshell__pb2.ReportPolicyStatusRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ReportPolicyStatusResponse.FromString,
+                _registered_method=True)
+        self.GetSandboxProviderEnvironment = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetSandboxProviderEnvironment',
+                request_serializer=openshell__pb2.GetSandboxProviderEnvironmentRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetSandboxProviderEnvironmentResponse.FromString,
+                _registered_method=True)
+        self.ExchangeProviderSubjectToken = channel.unary_unary(
+                '/openshell.v1.OpenShell/ExchangeProviderSubjectToken',
+                request_serializer=openshell__pb2.ExchangeProviderSubjectTokenRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ExchangeProviderSubjectTokenResponse.FromString,
+                _registered_method=True)
+        self.GetSandboxLogs = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetSandboxLogs',
+                request_serializer=openshell__pb2.GetSandboxLogsRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetSandboxLogsResponse.FromString,
+                _registered_method=True)
+        self.PushSandboxLogs = channel.stream_unary(
+                '/openshell.v1.OpenShell/PushSandboxLogs',
+                request_serializer=openshell__pb2.PushSandboxLogsRequest.SerializeToString,
+                response_deserializer=openshell__pb2.PushSandboxLogsResponse.FromString,
+                _registered_method=True)
+        self.ConnectSupervisor = channel.stream_stream(
+                '/openshell.v1.OpenShell/ConnectSupervisor',
+                request_serializer=openshell__pb2.SupervisorMessage.SerializeToString,
+                response_deserializer=openshell__pb2.GatewayMessage.FromString,
+                _registered_method=True)
+        self.ReportMainProcessExit = channel.unary_unary(
+                '/openshell.v1.OpenShell/ReportMainProcessExit',
+                request_serializer=openshell__pb2.ReportMainProcessExitRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ReportMainProcessExitResponse.FromString,
+                _registered_method=True)
+        self.RelayStream = channel.stream_stream(
+                '/openshell.v1.OpenShell/RelayStream',
+                request_serializer=openshell__pb2.RelayFrame.SerializeToString,
+                response_deserializer=openshell__pb2.RelayFrame.FromString,
+                _registered_method=True)
+        self.WatchSandbox = channel.unary_stream(
+                '/openshell.v1.OpenShell/WatchSandbox',
+                request_serializer=openshell__pb2.WatchSandboxRequest.SerializeToString,
+                response_deserializer=openshell__pb2.SandboxStreamEvent.FromString,
+                _registered_method=True)
+        self.SubmitPolicyAnalysis = channel.unary_unary(
+                '/openshell.v1.OpenShell/SubmitPolicyAnalysis',
+                request_serializer=openshell__pb2.SubmitPolicyAnalysisRequest.SerializeToString,
+                response_deserializer=openshell__pb2.SubmitPolicyAnalysisResponse.FromString,
+                _registered_method=True)
+        self.GetDraftPolicy = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetDraftPolicy',
+                request_serializer=openshell__pb2.GetDraftPolicyRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetDraftPolicyResponse.FromString,
+                _registered_method=True)
+        self.ApproveDraftChunk = channel.unary_unary(
+                '/openshell.v1.OpenShell/ApproveDraftChunk',
+                request_serializer=openshell__pb2.ApproveDraftChunkRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ApproveDraftChunkResponse.FromString,
+                _registered_method=True)
+        self.RejectDraftChunk = channel.unary_unary(
+                '/openshell.v1.OpenShell/RejectDraftChunk',
+                request_serializer=openshell__pb2.RejectDraftChunkRequest.SerializeToString,
+                response_deserializer=openshell__pb2.RejectDraftChunkResponse.FromString,
+                _registered_method=True)
+        self.ApproveAllDraftChunks = channel.unary_unary(
+                '/openshell.v1.OpenShell/ApproveAllDraftChunks',
+                request_serializer=openshell__pb2.ApproveAllDraftChunksRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ApproveAllDraftChunksResponse.FromString,
+                _registered_method=True)
+        self.EditDraftChunk = channel.unary_unary(
+                '/openshell.v1.OpenShell/EditDraftChunk',
+                request_serializer=openshell__pb2.EditDraftChunkRequest.SerializeToString,
+                response_deserializer=openshell__pb2.EditDraftChunkResponse.FromString,
+                _registered_method=True)
+        self.UndoDraftChunk = channel.unary_unary(
+                '/openshell.v1.OpenShell/UndoDraftChunk',
+                request_serializer=openshell__pb2.UndoDraftChunkRequest.SerializeToString,
+                response_deserializer=openshell__pb2.UndoDraftChunkResponse.FromString,
+                _registered_method=True)
+        self.ClearDraftChunks = channel.unary_unary(
+                '/openshell.v1.OpenShell/ClearDraftChunks',
+                request_serializer=openshell__pb2.ClearDraftChunksRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ClearDraftChunksResponse.FromString,
+                _registered_method=True)
+        self.GetDraftHistory = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetDraftHistory',
+                request_serializer=openshell__pb2.GetDraftHistoryRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetDraftHistoryResponse.FromString,
+                _registered_method=True)
+        self.IssueSandboxToken = channel.unary_unary(
+                '/openshell.v1.OpenShell/IssueSandboxToken',
+                request_serializer=openshell__pb2.IssueSandboxTokenRequest.SerializeToString,
+                response_deserializer=openshell__pb2.IssueSandboxTokenResponse.FromString,
+                _registered_method=True)
+        self.RefreshSandboxToken = channel.unary_unary(
+                '/openshell.v1.OpenShell/RefreshSandboxToken',
+                request_serializer=openshell__pb2.RefreshSandboxTokenRequest.SerializeToString,
+                response_deserializer=openshell__pb2.RefreshSandboxTokenResponse.FromString,
+                _registered_method=True)
+        self.CreateWorkspace = channel.unary_unary(
+                '/openshell.v1.OpenShell/CreateWorkspace',
+                request_serializer=openshell__pb2.CreateWorkspaceRequest.SerializeToString,
+                response_deserializer=openshell__pb2.CreateWorkspaceResponse.FromString,
+                _registered_method=True)
+        self.GetWorkspace = channel.unary_unary(
+                '/openshell.v1.OpenShell/GetWorkspace',
+                request_serializer=openshell__pb2.GetWorkspaceRequest.SerializeToString,
+                response_deserializer=openshell__pb2.GetWorkspaceResponse.FromString,
+                _registered_method=True)
+        self.ListWorkspaces = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListWorkspaces',
+                request_serializer=openshell__pb2.ListWorkspacesRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListWorkspacesResponse.FromString,
+                _registered_method=True)
+        self.DeleteWorkspace = channel.unary_unary(
+                '/openshell.v1.OpenShell/DeleteWorkspace',
+                request_serializer=openshell__pb2.DeleteWorkspaceRequest.SerializeToString,
+                response_deserializer=openshell__pb2.DeleteWorkspaceResponse.FromString,
+                _registered_method=True)
+        self.AddWorkspaceMember = channel.unary_unary(
+                '/openshell.v1.OpenShell/AddWorkspaceMember',
+                request_serializer=openshell__pb2.AddWorkspaceMemberRequest.SerializeToString,
+                response_deserializer=openshell__pb2.AddWorkspaceMemberResponse.FromString,
+                _registered_method=True)
+        self.RemoveWorkspaceMember = channel.unary_unary(
+                '/openshell.v1.OpenShell/RemoveWorkspaceMember',
+                request_serializer=openshell__pb2.RemoveWorkspaceMemberRequest.SerializeToString,
+                response_deserializer=openshell__pb2.RemoveWorkspaceMemberResponse.FromString,
+                _registered_method=True)
+        self.ListWorkspaceMembers = channel.unary_unary(
+                '/openshell.v1.OpenShell/ListWorkspaceMembers',
+                request_serializer=openshell__pb2.ListWorkspaceMembersRequest.SerializeToString,
+                response_deserializer=openshell__pb2.ListWorkspaceMembersResponse.FromString,
+                _registered_method=True)
+
+
+class OpenShellServicer(object):
+    """OpenShell service provides sandbox, provider, and runtime management capabilities.
+
+    Conventions:
+    - This file owns the public API resource model exposed to OpenShell clients.
+    - `Sandbox`, `SandboxSpec`, `SandboxStatus`, and `SandboxPhase` are gateway-owned
+    public types. Internal compute drivers must not import or return them directly.
+    - The gateway translates internal compute-driver observations into these public
+    resource messages before persisting or returning them to clients.
+    """
+
+    def Health(self, request, context):
+        """Check the health of the service.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetCurrentUser(self, request, context):
+        """Return the authenticated caller identity established by the gateway.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetGatewayInfo(self, request, context):
+        """Fetch elevated live gateway runtime metadata.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def CreateSandbox(self, request, context):
+        """Create a new sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetSandbox(self, request, context):
+        """Fetch a sandbox by name.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListSandboxes(self, request, context):
+        """List sandboxes.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListSandboxProviders(self, request, context):
+        """List provider records attached to a sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def AttachSandboxProvider(self, request, context):
+        """Attach a provider record to an existing sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DetachSandboxProvider(self, request, context):
+        """Detach a provider record from an existing sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DeleteSandbox(self, request, context):
+        """Delete a sandbox by name.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def StopSandbox(self, request, context):
+        """Stop a sandbox while retaining its persistent state.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def StartSandbox(self, request, context):
+        """Start a previously stopped sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def CreateSshSession(self, request, context):
+        """Create a short-lived SSH session for a sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ExposeService(self, request, context):
+        """Create or update a sandbox HTTP service endpoint for local routing.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetService(self, request, context):
+        """Fetch one sandbox HTTP service endpoint.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListServices(self, request, context):
+        """List sandbox HTTP service endpoints.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DeleteService(self, request, context):
+        """Delete one sandbox HTTP service endpoint.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def RevokeSshSession(self, request, context):
+        """Revoke a previously issued SSH session.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ExecSandbox(self, request, context):
+        """Execute a command in a ready sandbox and stream output.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ForwardTcp(self, request_iterator, context):
+        """Forward one CLI-side TCP connection to a loopback TCP target in a sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ExecSandboxInteractive(self, request_iterator, context):
+        """Execute an interactive command with bidirectional stdin/stdout streaming.
+        The first client message MUST carry an ExecSandboxInput with the start
+        variant. Subsequent messages carry stdin bytes or window resize events.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def CreateProvider(self, request, context):
+        """Create a provider.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetProvider(self, request, context):
+        """Fetch a provider by name.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListProviders(self, request, context):
+        """List providers.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListProviderProfiles(self, request, context):
+        """List available provider type profiles.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetProviderProfile(self, request, context):
+        """Fetch one provider type profile by id.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ImportProviderProfiles(self, request, context):
+        """Import custom provider type profiles.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def UpdateProviderProfiles(self, request, context):
+        """Update an existing custom provider type profile.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def LintProviderProfiles(self, request, context):
+        """Validate provider type profiles without registering them.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def UpdateProvider(self, request, context):
+        """Update an existing provider by name.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetProviderRefreshStatus(self, request, context):
+        """Fetch refresh status for one provider or provider credential.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ConfigureProviderRefresh(self, request, context):
+        """Configure gateway-owned refresh material for one provider credential.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def RotateProviderCredential(self, request, context):
+        """Record a gateway-owned refresh request for one provider credential.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DeleteProviderRefresh(self, request, context):
+        """Delete gateway-owned refresh configuration for one provider credential.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DeleteProvider(self, request, context):
+        """Delete a provider by name.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DeleteProviderProfile(self, request, context):
+        """Delete a custom provider type profile by id.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetSandboxConfig(self, request, context):
+        """Get sandbox settings by id (called by sandbox entrypoint and poll loop).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetGatewayConfig(self, request, context):
+        """Get gateway-global settings (read-only feature flags; any authenticated
+        user may read these so the CLI and TUI can discover capabilities like
+        providers_v2_enabled without requiring Platform Admin).
+
+        Scope-only (no role): scopes are granted by the IdP at token issuance,
+        orthogonal to workspace membership. Deployments that enable scope
+        enforcement configure the IdP to grant config:read (or openshell:all)
+        to all sandbox users, so this does not block least-privilege flows.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def UpdateConfig(self, request, context):
+        """Update settings or policy at sandbox or global scope.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetSandboxPolicyStatus(self, request, context):
+        """Get the load status of a specific policy version.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListSandboxPolicies(self, request, context):
+        """List policy history for a sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ReportPolicyStatus(self, request, context):
+        """Report policy load result (called by sandbox after reload attempt).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetSandboxProviderEnvironment(self, request, context):
+        """Get provider environment for a sandbox (called by sandbox supervisor at startup).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ExchangeProviderSubjectToken(self, request, context):
+        """Exchange a stored provider subject token for an intermediate token scoped
+        to the calling supervisor's SPIFFE identity.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetSandboxLogs(self, request, context):
+        """Fetch recent sandbox logs (one-shot).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def PushSandboxLogs(self, request_iterator, context):
+        """Push sandbox supervisor logs to the server (client-streaming).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ConnectSupervisor(self, request_iterator, context):
+        """Persistent supervisor-to-gateway session (bidirectional streaming).
+
+        The supervisor opens this stream at startup and keeps it alive for the
+        sandbox lifetime. The gateway uses it to coordinate relay channels for
+        SSH connect, ExecSandbox, and targetable sandbox services. Raw service
+        bytes flow over RelayStream calls (separate HTTP/2 streams on the same
+        connection), not over this stream.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ReportMainProcessExit(self, request, context):
+        """Persist the canonical main process result before the supervisor exits.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def RelayStream(self, request_iterator, context):
+        """Raw byte relay between supervisor and gateway.
+
+        The supervisor initiates this call after receiving a RelayOpen message
+        on its ConnectSupervisor stream. The first RelayFrame carries a
+        RelayInit with the channel_id to associate the new HTTP/2 stream with
+        the pending relay slot on the gateway. Subsequent frames carry raw bytes in either
+        direction between the gateway-side waiter (ForwardTcp / exec handler)
+        and the supervisor-side target bridge.
+
+        This rides the same TCP+TLS+HTTP/2 connection as ConnectSupervisor —
+        no new TLS handshake, no reverse HTTP CONNECT.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def WatchSandbox(self, request, context):
+        """Watch a sandbox and stream updates.
+
+        This stream can include:
+        - Sandbox status snapshots (phase/status)
+        - OpenShell server process logs correlated by sandbox_id
+        - Platform events correlated to the sandbox
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def SubmitPolicyAnalysis(self, request, context):
+        """---------------------------------------------------------------------------
+        Draft policy recommendation RPCs
+        ---------------------------------------------------------------------------
+
+        Submit denial analysis results from sandbox (summaries + proposed chunks).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetDraftPolicy(self, request, context):
+        """Get draft policy recommendations for a sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ApproveDraftChunk(self, request, context):
+        """Approve a single draft policy chunk (merges into active policy).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def RejectDraftChunk(self, request, context):
+        """Reject a single draft policy chunk.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ApproveAllDraftChunks(self, request, context):
+        """Approve all pending draft chunks (skips security-flagged unless forced).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def EditDraftChunk(self, request, context):
+        """Edit a pending draft chunk in-place (e.g. narrow allowed_ips).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def UndoDraftChunk(self, request, context):
+        """Reverse an approval (remove merged rule from active policy).
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ClearDraftChunks(self, request, context):
+        """Clear all pending draft chunks for a sandbox.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetDraftHistory(self, request, context):
+        """Get decision history for a sandbox's draft policy.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def IssueSandboxToken(self, request, context):
+        """Exchange a sandbox-bootstrap credential (e.g. a Kubernetes projected
+        ServiceAccount token) for a gateway-minted JWT bound to the calling
+        sandbox's UUID. Used by the Kubernetes driver path; singleplayer
+        drivers receive the gateway JWT directly from the create-sandbox flow
+        and never call this RPC.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def RefreshSandboxToken(self, request, context):
+        """Renew the calling sandbox's gateway JWT. Older tokens remain valid
+        until their own expiry; deployments should keep token TTLs short to
+        bound replay exposure. The supervisor calls this from a background
+        task at ~80% of the token's lifetime; the new token is cached in
+        memory only — the on-disk bootstrap file is intentionally not
+        rewritten.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def CreateWorkspace(self, request, context):
+        """---------------------------------------------------------------------------
+        Workspace management RPCs
+        ---------------------------------------------------------------------------
+
+        Create a workspace.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetWorkspace(self, request, context):
+        """Fetch a workspace by name.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListWorkspaces(self, request, context):
+        """List workspaces.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DeleteWorkspace(self, request, context):
+        """Delete a workspace by name.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def AddWorkspaceMember(self, request, context):
+        """Add a member to a workspace.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def RemoveWorkspaceMember(self, request, context):
+        """Remove a member from a workspace.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def ListWorkspaceMembers(self, request, context):
+        """List members of a workspace.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+
+def add_OpenShellServicer_to_server(servicer, server):
+    rpc_method_handlers = {
+            'Health': grpc.unary_unary_rpc_method_handler(
+                    servicer.Health,
+                    request_deserializer=openshell__pb2.HealthRequest.FromString,
+                    response_serializer=openshell__pb2.HealthResponse.SerializeToString,
+            ),
+            'GetCurrentUser': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetCurrentUser,
+                    request_deserializer=openshell__pb2.GetCurrentUserRequest.FromString,
+                    response_serializer=openshell__pb2.GetCurrentUserResponse.SerializeToString,
+            ),
+            'GetGatewayInfo': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetGatewayInfo,
+                    request_deserializer=openshell__pb2.GetGatewayInfoRequest.FromString,
+                    response_serializer=openshell__pb2.GetGatewayInfoResponse.SerializeToString,
+            ),
+            'CreateSandbox': grpc.unary_unary_rpc_method_handler(
+                    servicer.CreateSandbox,
+                    request_deserializer=openshell__pb2.CreateSandboxRequest.FromString,
+                    response_serializer=openshell__pb2.SandboxResponse.SerializeToString,
+            ),
+            'GetSandbox': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetSandbox,
+                    request_deserializer=openshell__pb2.GetSandboxRequest.FromString,
+                    response_serializer=openshell__pb2.SandboxResponse.SerializeToString,
+            ),
+            'ListSandboxes': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListSandboxes,
+                    request_deserializer=openshell__pb2.ListSandboxesRequest.FromString,
+                    response_serializer=openshell__pb2.ListSandboxesResponse.SerializeToString,
+            ),
+            'ListSandboxProviders': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListSandboxProviders,
+                    request_deserializer=openshell__pb2.ListSandboxProvidersRequest.FromString,
+                    response_serializer=openshell__pb2.ListSandboxProvidersResponse.SerializeToString,
+            ),
+            'AttachSandboxProvider': grpc.unary_unary_rpc_method_handler(
+                    servicer.AttachSandboxProvider,
+                    request_deserializer=openshell__pb2.AttachSandboxProviderRequest.FromString,
+                    response_serializer=openshell__pb2.AttachSandboxProviderResponse.SerializeToString,
+            ),
+            'DetachSandboxProvider': grpc.unary_unary_rpc_method_handler(
+                    servicer.DetachSandboxProvider,
+                    request_deserializer=openshell__pb2.DetachSandboxProviderRequest.FromString,
+                    response_serializer=openshell__pb2.DetachSandboxProviderResponse.SerializeToString,
+            ),
+            'DeleteSandbox': grpc.unary_unary_rpc_method_handler(
+                    servicer.DeleteSandbox,
+                    request_deserializer=openshell__pb2.DeleteSandboxRequest.FromString,
+                    response_serializer=openshell__pb2.DeleteSandboxResponse.SerializeToString,
+            ),
+            'StopSandbox': grpc.unary_unary_rpc_method_handler(
+                    servicer.StopSandbox,
+                    request_deserializer=openshell__pb2.StopSandboxRequest.FromString,
+                    response_serializer=openshell__pb2.SandboxResponse.SerializeToString,
+            ),
+            'StartSandbox': grpc.unary_unary_rpc_method_handler(
+                    servicer.StartSandbox,
+                    request_deserializer=openshell__pb2.StartSandboxRequest.FromString,
+                    response_serializer=openshell__pb2.SandboxResponse.SerializeToString,
+            ),
+            'CreateSshSession': grpc.unary_unary_rpc_method_handler(
+                    servicer.CreateSshSession,
+                    request_deserializer=openshell__pb2.CreateSshSessionRequest.FromString,
+                    response_serializer=openshell__pb2.CreateSshSessionResponse.SerializeToString,
+            ),
+            'ExposeService': grpc.unary_unary_rpc_method_handler(
+                    servicer.ExposeService,
+                    request_deserializer=openshell__pb2.ExposeServiceRequest.FromString,
+                    response_serializer=openshell__pb2.ServiceEndpointResponse.SerializeToString,
+            ),
+            'GetService': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetService,
+                    request_deserializer=openshell__pb2.GetServiceRequest.FromString,
+                    response_serializer=openshell__pb2.ServiceEndpointResponse.SerializeToString,
+            ),
+            'ListServices': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListServices,
+                    request_deserializer=openshell__pb2.ListServicesRequest.FromString,
+                    response_serializer=openshell__pb2.ListServicesResponse.SerializeToString,
+            ),
+            'DeleteService': grpc.unary_unary_rpc_method_handler(
+                    servicer.DeleteService,
+                    request_deserializer=openshell__pb2.DeleteServiceRequest.FromString,
+                    response_serializer=openshell__pb2.DeleteServiceResponse.SerializeToString,
+            ),
+            'RevokeSshSession': grpc.unary_unary_rpc_method_handler(
+                    servicer.RevokeSshSession,
+                    request_deserializer=openshell__pb2.RevokeSshSessionRequest.FromString,
+                    response_serializer=openshell__pb2.RevokeSshSessionResponse.SerializeToString,
+            ),
+            'ExecSandbox': grpc.unary_stream_rpc_method_handler(
+                    servicer.ExecSandbox,
+                    request_deserializer=openshell__pb2.ExecSandboxRequest.FromString,
+                    response_serializer=openshell__pb2.ExecSandboxEvent.SerializeToString,
+            ),
+            'ForwardTcp': grpc.stream_stream_rpc_method_handler(
+                    servicer.ForwardTcp,
+                    request_deserializer=openshell__pb2.TcpForwardFrame.FromString,
+                    response_serializer=openshell__pb2.TcpForwardFrame.SerializeToString,
+            ),
+            'ExecSandboxInteractive': grpc.stream_stream_rpc_method_handler(
+                    servicer.ExecSandboxInteractive,
+                    request_deserializer=openshell__pb2.ExecSandboxInput.FromString,
+                    response_serializer=openshell__pb2.ExecSandboxEvent.SerializeToString,
+            ),
+            'CreateProvider': grpc.unary_unary_rpc_method_handler(
+                    servicer.CreateProvider,
+                    request_deserializer=openshell__pb2.CreateProviderRequest.FromString,
+                    response_serializer=openshell__pb2.ProviderResponse.SerializeToString,
+            ),
+            'GetProvider': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetProvider,
+                    request_deserializer=openshell__pb2.GetProviderRequest.FromString,
+                    response_serializer=openshell__pb2.ProviderResponse.SerializeToString,
+            ),
+            'ListProviders': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListProviders,
+                    request_deserializer=openshell__pb2.ListProvidersRequest.FromString,
+                    response_serializer=openshell__pb2.ListProvidersResponse.SerializeToString,
+            ),
+            'ListProviderProfiles': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListProviderProfiles,
+                    request_deserializer=openshell__pb2.ListProviderProfilesRequest.FromString,
+                    response_serializer=openshell__pb2.ListProviderProfilesResponse.SerializeToString,
+            ),
+            'GetProviderProfile': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetProviderProfile,
+                    request_deserializer=openshell__pb2.GetProviderProfileRequest.FromString,
+                    response_serializer=openshell__pb2.ProviderProfileResponse.SerializeToString,
+            ),
+            'ImportProviderProfiles': grpc.unary_unary_rpc_method_handler(
+                    servicer.ImportProviderProfiles,
+                    request_deserializer=openshell__pb2.ImportProviderProfilesRequest.FromString,
+                    response_serializer=openshell__pb2.ImportProviderProfilesResponse.SerializeToString,
+            ),
+            'UpdateProviderProfiles': grpc.unary_unary_rpc_method_handler(
+                    servicer.UpdateProviderProfiles,
+                    request_deserializer=openshell__pb2.UpdateProviderProfilesRequest.FromString,
+                    response_serializer=openshell__pb2.UpdateProviderProfilesResponse.SerializeToString,
+            ),
+            'LintProviderProfiles': grpc.unary_unary_rpc_method_handler(
+                    servicer.LintProviderProfiles,
+                    request_deserializer=openshell__pb2.LintProviderProfilesRequest.FromString,
+                    response_serializer=openshell__pb2.LintProviderProfilesResponse.SerializeToString,
+            ),
+            'UpdateProvider': grpc.unary_unary_rpc_method_handler(
+                    servicer.UpdateProvider,
+                    request_deserializer=openshell__pb2.UpdateProviderRequest.FromString,
+                    response_serializer=openshell__pb2.ProviderResponse.SerializeToString,
+            ),
+            'GetProviderRefreshStatus': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetProviderRefreshStatus,
+                    request_deserializer=openshell__pb2.GetProviderRefreshStatusRequest.FromString,
+                    response_serializer=openshell__pb2.GetProviderRefreshStatusResponse.SerializeToString,
+            ),
+            'ConfigureProviderRefresh': grpc.unary_unary_rpc_method_handler(
+                    servicer.ConfigureProviderRefresh,
+                    request_deserializer=openshell__pb2.ConfigureProviderRefreshRequest.FromString,
+                    response_serializer=openshell__pb2.ConfigureProviderRefreshResponse.SerializeToString,
+            ),
+            'RotateProviderCredential': grpc.unary_unary_rpc_method_handler(
+                    servicer.RotateProviderCredential,
+                    request_deserializer=openshell__pb2.RotateProviderCredentialRequest.FromString,
+                    response_serializer=openshell__pb2.RotateProviderCredentialResponse.SerializeToString,
+            ),
+            'DeleteProviderRefresh': grpc.unary_unary_rpc_method_handler(
+                    servicer.DeleteProviderRefresh,
+                    request_deserializer=openshell__pb2.DeleteProviderRefreshRequest.FromString,
+                    response_serializer=openshell__pb2.DeleteProviderRefreshResponse.SerializeToString,
+            ),
+            'DeleteProvider': grpc.unary_unary_rpc_method_handler(
+                    servicer.DeleteProvider,
+                    request_deserializer=openshell__pb2.DeleteProviderRequest.FromString,
+                    response_serializer=openshell__pb2.DeleteProviderResponse.SerializeToString,
+            ),
+            'DeleteProviderProfile': grpc.unary_unary_rpc_method_handler(
+                    servicer.DeleteProviderProfile,
+                    request_deserializer=openshell__pb2.DeleteProviderProfileRequest.FromString,
+                    response_serializer=openshell__pb2.DeleteProviderProfileResponse.SerializeToString,
+            ),
+            'GetSandboxConfig': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetSandboxConfig,
+                    request_deserializer=sandbox__pb2.GetSandboxConfigRequest.FromString,
+                    response_serializer=sandbox__pb2.GetSandboxConfigResponse.SerializeToString,
+            ),
+            'GetGatewayConfig': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetGatewayConfig,
+                    request_deserializer=sandbox__pb2.GetGatewayConfigRequest.FromString,
+                    response_serializer=sandbox__pb2.GetGatewayConfigResponse.SerializeToString,
+            ),
+            'UpdateConfig': grpc.unary_unary_rpc_method_handler(
+                    servicer.UpdateConfig,
+                    request_deserializer=openshell__pb2.UpdateConfigRequest.FromString,
+                    response_serializer=openshell__pb2.UpdateConfigResponse.SerializeToString,
+            ),
+            'GetSandboxPolicyStatus': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetSandboxPolicyStatus,
+                    request_deserializer=openshell__pb2.GetSandboxPolicyStatusRequest.FromString,
+                    response_serializer=openshell__pb2.GetSandboxPolicyStatusResponse.SerializeToString,
+            ),
+            'ListSandboxPolicies': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListSandboxPolicies,
+                    request_deserializer=openshell__pb2.ListSandboxPoliciesRequest.FromString,
+                    response_serializer=openshell__pb2.ListSandboxPoliciesResponse.SerializeToString,
+            ),
+            'ReportPolicyStatus': grpc.unary_unary_rpc_method_handler(
+                    servicer.ReportPolicyStatus,
+                    request_deserializer=openshell__pb2.ReportPolicyStatusRequest.FromString,
+                    response_serializer=openshell__pb2.ReportPolicyStatusResponse.SerializeToString,
+            ),
+            'GetSandboxProviderEnvironment': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetSandboxProviderEnvironment,
+                    request_deserializer=openshell__pb2.GetSandboxProviderEnvironmentRequest.FromString,
+                    response_serializer=openshell__pb2.GetSandboxProviderEnvironmentResponse.SerializeToString,
+            ),
+            'ExchangeProviderSubjectToken': grpc.unary_unary_rpc_method_handler(
+                    servicer.ExchangeProviderSubjectToken,
+                    request_deserializer=openshell__pb2.ExchangeProviderSubjectTokenRequest.FromString,
+                    response_serializer=openshell__pb2.ExchangeProviderSubjectTokenResponse.SerializeToString,
+            ),
+            'GetSandboxLogs': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetSandboxLogs,
+                    request_deserializer=openshell__pb2.GetSandboxLogsRequest.FromString,
+                    response_serializer=openshell__pb2.GetSandboxLogsResponse.SerializeToString,
+            ),
+            'PushSandboxLogs': grpc.stream_unary_rpc_method_handler(
+                    servicer.PushSandboxLogs,
+                    request_deserializer=openshell__pb2.PushSandboxLogsRequest.FromString,
+                    response_serializer=openshell__pb2.PushSandboxLogsResponse.SerializeToString,
+            ),
+            'ConnectSupervisor': grpc.stream_stream_rpc_method_handler(
+                    servicer.ConnectSupervisor,
+                    request_deserializer=openshell__pb2.SupervisorMessage.FromString,
+                    response_serializer=openshell__pb2.GatewayMessage.SerializeToString,
+            ),
+            'ReportMainProcessExit': grpc.unary_unary_rpc_method_handler(
+                    servicer.ReportMainProcessExit,
+                    request_deserializer=openshell__pb2.ReportMainProcessExitRequest.FromString,
+                    response_serializer=openshell__pb2.ReportMainProcessExitResponse.SerializeToString,
+            ),
+            'RelayStream': grpc.stream_stream_rpc_method_handler(
+                    servicer.RelayStream,
+                    request_deserializer=openshell__pb2.RelayFrame.FromString,
+                    response_serializer=openshell__pb2.RelayFrame.SerializeToString,
+            ),
+            'WatchSandbox': grpc.unary_stream_rpc_method_handler(
+                    servicer.WatchSandbox,
+                    request_deserializer=openshell__pb2.WatchSandboxRequest.FromString,
+                    response_serializer=openshell__pb2.SandboxStreamEvent.SerializeToString,
+            ),
+            'SubmitPolicyAnalysis': grpc.unary_unary_rpc_method_handler(
+                    servicer.SubmitPolicyAnalysis,
+                    request_deserializer=openshell__pb2.SubmitPolicyAnalysisRequest.FromString,
+                    response_serializer=openshell__pb2.SubmitPolicyAnalysisResponse.SerializeToString,
+            ),
+            'GetDraftPolicy': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetDraftPolicy,
+                    request_deserializer=openshell__pb2.GetDraftPolicyRequest.FromString,
+                    response_serializer=openshell__pb2.GetDraftPolicyResponse.SerializeToString,
+            ),
+            'ApproveDraftChunk': grpc.unary_unary_rpc_method_handler(
+                    servicer.ApproveDraftChunk,
+                    request_deserializer=openshell__pb2.ApproveDraftChunkRequest.FromString,
+                    response_serializer=openshell__pb2.ApproveDraftChunkResponse.SerializeToString,
+            ),
+            'RejectDraftChunk': grpc.unary_unary_rpc_method_handler(
+                    servicer.RejectDraftChunk,
+                    request_deserializer=openshell__pb2.RejectDraftChunkRequest.FromString,
+                    response_serializer=openshell__pb2.RejectDraftChunkResponse.SerializeToString,
+            ),
+            'ApproveAllDraftChunks': grpc.unary_unary_rpc_method_handler(
+                    servicer.ApproveAllDraftChunks,
+                    request_deserializer=openshell__pb2.ApproveAllDraftChunksRequest.FromString,
+                    response_serializer=openshell__pb2.ApproveAllDraftChunksResponse.SerializeToString,
+            ),
+            'EditDraftChunk': grpc.unary_unary_rpc_method_handler(
+                    servicer.EditDraftChunk,
+                    request_deserializer=openshell__pb2.EditDraftChunkRequest.FromString,
+                    response_serializer=openshell__pb2.EditDraftChunkResponse.SerializeToString,
+            ),
+            'UndoDraftChunk': grpc.unary_unary_rpc_method_handler(
+                    servicer.UndoDraftChunk,
+                    request_deserializer=openshell__pb2.UndoDraftChunkRequest.FromString,
+                    response_serializer=openshell__pb2.UndoDraftChunkResponse.SerializeToString,
+            ),
+            'ClearDraftChunks': grpc.unary_unary_rpc_method_handler(
+                    servicer.ClearDraftChunks,
+                    request_deserializer=openshell__pb2.ClearDraftChunksRequest.FromString,
+                    response_serializer=openshell__pb2.ClearDraftChunksResponse.SerializeToString,
+            ),
+            'GetDraftHistory': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetDraftHistory,
+                    request_deserializer=openshell__pb2.GetDraftHistoryRequest.FromString,
+                    response_serializer=openshell__pb2.GetDraftHistoryResponse.SerializeToString,
+            ),
+            'IssueSandboxToken': grpc.unary_unary_rpc_method_handler(
+                    servicer.IssueSandboxToken,
+                    request_deserializer=openshell__pb2.IssueSandboxTokenRequest.FromString,
+                    response_serializer=openshell__pb2.IssueSandboxTokenResponse.SerializeToString,
+            ),
+            'RefreshSandboxToken': grpc.unary_unary_rpc_method_handler(
+                    servicer.RefreshSandboxToken,
+                    request_deserializer=openshell__pb2.RefreshSandboxTokenRequest.FromString,
+                    response_serializer=openshell__pb2.RefreshSandboxTokenResponse.SerializeToString,
+            ),
+            'CreateWorkspace': grpc.unary_unary_rpc_method_handler(
+                    servicer.CreateWorkspace,
+                    request_deserializer=openshell__pb2.CreateWorkspaceRequest.FromString,
+                    response_serializer=openshell__pb2.CreateWorkspaceResponse.SerializeToString,
+            ),
+            'GetWorkspace': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetWorkspace,
+                    request_deserializer=openshell__pb2.GetWorkspaceRequest.FromString,
+                    response_serializer=openshell__pb2.GetWorkspaceResponse.SerializeToString,
+            ),
+            'ListWorkspaces': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListWorkspaces,
+                    request_deserializer=openshell__pb2.ListWorkspacesRequest.FromString,
+                    response_serializer=openshell__pb2.ListWorkspacesResponse.SerializeToString,
+            ),
+            'DeleteWorkspace': grpc.unary_unary_rpc_method_handler(
+                    servicer.DeleteWorkspace,
+                    request_deserializer=openshell__pb2.DeleteWorkspaceRequest.FromString,
+                    response_serializer=openshell__pb2.DeleteWorkspaceResponse.SerializeToString,
+            ),
+            'AddWorkspaceMember': grpc.unary_unary_rpc_method_handler(
+                    servicer.AddWorkspaceMember,
+                    request_deserializer=openshell__pb2.AddWorkspaceMemberRequest.FromString,
+                    response_serializer=openshell__pb2.AddWorkspaceMemberResponse.SerializeToString,
+            ),
+            'RemoveWorkspaceMember': grpc.unary_unary_rpc_method_handler(
+                    servicer.RemoveWorkspaceMember,
+                    request_deserializer=openshell__pb2.RemoveWorkspaceMemberRequest.FromString,
+                    response_serializer=openshell__pb2.RemoveWorkspaceMemberResponse.SerializeToString,
+            ),
+            'ListWorkspaceMembers': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListWorkspaceMembers,
+                    request_deserializer=openshell__pb2.ListWorkspaceMembersRequest.FromString,
+                    response_serializer=openshell__pb2.ListWorkspaceMembersResponse.SerializeToString,
+            ),
+    }
+    generic_handler = grpc.method_handlers_generic_handler(
+            'openshell.v1.OpenShell', rpc_method_handlers)
+    server.add_generic_rpc_handlers((generic_handler,))
+    server.add_registered_method_handlers('openshell.v1.OpenShell', rpc_method_handlers)
+
+
+ # This class is part of an EXPERIMENTAL API.
+class OpenShell(object):
+    """OpenShell service provides sandbox, provider, and runtime management capabilities.
+
+    Conventions:
+    - This file owns the public API resource model exposed to OpenShell clients.
+    - `Sandbox`, `SandboxSpec`, `SandboxStatus`, and `SandboxPhase` are gateway-owned
+    public types. Internal compute drivers must not import or return them directly.
+    - The gateway translates internal compute-driver observations into these public
+    resource messages before persisting or returning them to clients.
+    """
+
+    @staticmethod
+    def Health(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/Health',
+            openshell__pb2.HealthRequest.SerializeToString,
+            openshell__pb2.HealthResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetCurrentUser(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetCurrentUser',
+            openshell__pb2.GetCurrentUserRequest.SerializeToString,
+            openshell__pb2.GetCurrentUserResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetGatewayInfo(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetGatewayInfo',
+            openshell__pb2.GetGatewayInfoRequest.SerializeToString,
+            openshell__pb2.GetGatewayInfoResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def CreateSandbox(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/CreateSandbox',
+            openshell__pb2.CreateSandboxRequest.SerializeToString,
+            openshell__pb2.SandboxResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetSandbox(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetSandbox',
+            openshell__pb2.GetSandboxRequest.SerializeToString,
+            openshell__pb2.SandboxResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListSandboxes(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListSandboxes',
+            openshell__pb2.ListSandboxesRequest.SerializeToString,
+            openshell__pb2.ListSandboxesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListSandboxProviders(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListSandboxProviders',
+            openshell__pb2.ListSandboxProvidersRequest.SerializeToString,
+            openshell__pb2.ListSandboxProvidersResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def AttachSandboxProvider(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/AttachSandboxProvider',
+            openshell__pb2.AttachSandboxProviderRequest.SerializeToString,
+            openshell__pb2.AttachSandboxProviderResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DetachSandboxProvider(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/DetachSandboxProvider',
+            openshell__pb2.DetachSandboxProviderRequest.SerializeToString,
+            openshell__pb2.DetachSandboxProviderResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DeleteSandbox(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/DeleteSandbox',
+            openshell__pb2.DeleteSandboxRequest.SerializeToString,
+            openshell__pb2.DeleteSandboxResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def StopSandbox(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/StopSandbox',
+            openshell__pb2.StopSandboxRequest.SerializeToString,
+            openshell__pb2.SandboxResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def StartSandbox(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/StartSandbox',
+            openshell__pb2.StartSandboxRequest.SerializeToString,
+            openshell__pb2.SandboxResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def CreateSshSession(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/CreateSshSession',
+            openshell__pb2.CreateSshSessionRequest.SerializeToString,
+            openshell__pb2.CreateSshSessionResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ExposeService(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ExposeService',
+            openshell__pb2.ExposeServiceRequest.SerializeToString,
+            openshell__pb2.ServiceEndpointResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetService(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetService',
+            openshell__pb2.GetServiceRequest.SerializeToString,
+            openshell__pb2.ServiceEndpointResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListServices(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListServices',
+            openshell__pb2.ListServicesRequest.SerializeToString,
+            openshell__pb2.ListServicesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DeleteService(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/DeleteService',
+            openshell__pb2.DeleteServiceRequest.SerializeToString,
+            openshell__pb2.DeleteServiceResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def RevokeSshSession(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/RevokeSshSession',
+            openshell__pb2.RevokeSshSessionRequest.SerializeToString,
+            openshell__pb2.RevokeSshSessionResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ExecSandbox(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_stream(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ExecSandbox',
+            openshell__pb2.ExecSandboxRequest.SerializeToString,
+            openshell__pb2.ExecSandboxEvent.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ForwardTcp(request_iterator,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.stream_stream(
+            request_iterator,
+            target,
+            '/openshell.v1.OpenShell/ForwardTcp',
+            openshell__pb2.TcpForwardFrame.SerializeToString,
+            openshell__pb2.TcpForwardFrame.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ExecSandboxInteractive(request_iterator,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.stream_stream(
+            request_iterator,
+            target,
+            '/openshell.v1.OpenShell/ExecSandboxInteractive',
+            openshell__pb2.ExecSandboxInput.SerializeToString,
+            openshell__pb2.ExecSandboxEvent.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def CreateProvider(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/CreateProvider',
+            openshell__pb2.CreateProviderRequest.SerializeToString,
+            openshell__pb2.ProviderResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetProvider(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetProvider',
+            openshell__pb2.GetProviderRequest.SerializeToString,
+            openshell__pb2.ProviderResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListProviders(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListProviders',
+            openshell__pb2.ListProvidersRequest.SerializeToString,
+            openshell__pb2.ListProvidersResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListProviderProfiles(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListProviderProfiles',
+            openshell__pb2.ListProviderProfilesRequest.SerializeToString,
+            openshell__pb2.ListProviderProfilesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetProviderProfile(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetProviderProfile',
+            openshell__pb2.GetProviderProfileRequest.SerializeToString,
+            openshell__pb2.ProviderProfileResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ImportProviderProfiles(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ImportProviderProfiles',
+            openshell__pb2.ImportProviderProfilesRequest.SerializeToString,
+            openshell__pb2.ImportProviderProfilesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def UpdateProviderProfiles(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/UpdateProviderProfiles',
+            openshell__pb2.UpdateProviderProfilesRequest.SerializeToString,
+            openshell__pb2.UpdateProviderProfilesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def LintProviderProfiles(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/LintProviderProfiles',
+            openshell__pb2.LintProviderProfilesRequest.SerializeToString,
+            openshell__pb2.LintProviderProfilesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def UpdateProvider(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/UpdateProvider',
+            openshell__pb2.UpdateProviderRequest.SerializeToString,
+            openshell__pb2.ProviderResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetProviderRefreshStatus(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetProviderRefreshStatus',
+            openshell__pb2.GetProviderRefreshStatusRequest.SerializeToString,
+            openshell__pb2.GetProviderRefreshStatusResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ConfigureProviderRefresh(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ConfigureProviderRefresh',
+            openshell__pb2.ConfigureProviderRefreshRequest.SerializeToString,
+            openshell__pb2.ConfigureProviderRefreshResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def RotateProviderCredential(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/RotateProviderCredential',
+            openshell__pb2.RotateProviderCredentialRequest.SerializeToString,
+            openshell__pb2.RotateProviderCredentialResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DeleteProviderRefresh(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/DeleteProviderRefresh',
+            openshell__pb2.DeleteProviderRefreshRequest.SerializeToString,
+            openshell__pb2.DeleteProviderRefreshResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DeleteProvider(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/DeleteProvider',
+            openshell__pb2.DeleteProviderRequest.SerializeToString,
+            openshell__pb2.DeleteProviderResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DeleteProviderProfile(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/DeleteProviderProfile',
+            openshell__pb2.DeleteProviderProfileRequest.SerializeToString,
+            openshell__pb2.DeleteProviderProfileResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetSandboxConfig(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetSandboxConfig',
+            sandbox__pb2.GetSandboxConfigRequest.SerializeToString,
+            sandbox__pb2.GetSandboxConfigResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetGatewayConfig(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetGatewayConfig',
+            sandbox__pb2.GetGatewayConfigRequest.SerializeToString,
+            sandbox__pb2.GetGatewayConfigResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def UpdateConfig(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/UpdateConfig',
+            openshell__pb2.UpdateConfigRequest.SerializeToString,
+            openshell__pb2.UpdateConfigResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetSandboxPolicyStatus(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetSandboxPolicyStatus',
+            openshell__pb2.GetSandboxPolicyStatusRequest.SerializeToString,
+            openshell__pb2.GetSandboxPolicyStatusResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListSandboxPolicies(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListSandboxPolicies',
+            openshell__pb2.ListSandboxPoliciesRequest.SerializeToString,
+            openshell__pb2.ListSandboxPoliciesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ReportPolicyStatus(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ReportPolicyStatus',
+            openshell__pb2.ReportPolicyStatusRequest.SerializeToString,
+            openshell__pb2.ReportPolicyStatusResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetSandboxProviderEnvironment(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetSandboxProviderEnvironment',
+            openshell__pb2.GetSandboxProviderEnvironmentRequest.SerializeToString,
+            openshell__pb2.GetSandboxProviderEnvironmentResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ExchangeProviderSubjectToken(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ExchangeProviderSubjectToken',
+            openshell__pb2.ExchangeProviderSubjectTokenRequest.SerializeToString,
+            openshell__pb2.ExchangeProviderSubjectTokenResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetSandboxLogs(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetSandboxLogs',
+            openshell__pb2.GetSandboxLogsRequest.SerializeToString,
+            openshell__pb2.GetSandboxLogsResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def PushSandboxLogs(request_iterator,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.stream_unary(
+            request_iterator,
+            target,
+            '/openshell.v1.OpenShell/PushSandboxLogs',
+            openshell__pb2.PushSandboxLogsRequest.SerializeToString,
+            openshell__pb2.PushSandboxLogsResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ConnectSupervisor(request_iterator,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.stream_stream(
+            request_iterator,
+            target,
+            '/openshell.v1.OpenShell/ConnectSupervisor',
+            openshell__pb2.SupervisorMessage.SerializeToString,
+            openshell__pb2.GatewayMessage.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ReportMainProcessExit(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ReportMainProcessExit',
+            openshell__pb2.ReportMainProcessExitRequest.SerializeToString,
+            openshell__pb2.ReportMainProcessExitResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def RelayStream(request_iterator,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.stream_stream(
+            request_iterator,
+            target,
+            '/openshell.v1.OpenShell/RelayStream',
+            openshell__pb2.RelayFrame.SerializeToString,
+            openshell__pb2.RelayFrame.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def WatchSandbox(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_stream(
+            request,
+            target,
+            '/openshell.v1.OpenShell/WatchSandbox',
+            openshell__pb2.WatchSandboxRequest.SerializeToString,
+            openshell__pb2.SandboxStreamEvent.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def SubmitPolicyAnalysis(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/SubmitPolicyAnalysis',
+            openshell__pb2.SubmitPolicyAnalysisRequest.SerializeToString,
+            openshell__pb2.SubmitPolicyAnalysisResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetDraftPolicy(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetDraftPolicy',
+            openshell__pb2.GetDraftPolicyRequest.SerializeToString,
+            openshell__pb2.GetDraftPolicyResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ApproveDraftChunk(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ApproveDraftChunk',
+            openshell__pb2.ApproveDraftChunkRequest.SerializeToString,
+            openshell__pb2.ApproveDraftChunkResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def RejectDraftChunk(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/RejectDraftChunk',
+            openshell__pb2.RejectDraftChunkRequest.SerializeToString,
+            openshell__pb2.RejectDraftChunkResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ApproveAllDraftChunks(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ApproveAllDraftChunks',
+            openshell__pb2.ApproveAllDraftChunksRequest.SerializeToString,
+            openshell__pb2.ApproveAllDraftChunksResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def EditDraftChunk(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/EditDraftChunk',
+            openshell__pb2.EditDraftChunkRequest.SerializeToString,
+            openshell__pb2.EditDraftChunkResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def UndoDraftChunk(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/UndoDraftChunk',
+            openshell__pb2.UndoDraftChunkRequest.SerializeToString,
+            openshell__pb2.UndoDraftChunkResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ClearDraftChunks(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ClearDraftChunks',
+            openshell__pb2.ClearDraftChunksRequest.SerializeToString,
+            openshell__pb2.ClearDraftChunksResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetDraftHistory(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetDraftHistory',
+            openshell__pb2.GetDraftHistoryRequest.SerializeToString,
+            openshell__pb2.GetDraftHistoryResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def IssueSandboxToken(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/IssueSandboxToken',
+            openshell__pb2.IssueSandboxTokenRequest.SerializeToString,
+            openshell__pb2.IssueSandboxTokenResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def RefreshSandboxToken(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/RefreshSandboxToken',
+            openshell__pb2.RefreshSandboxTokenRequest.SerializeToString,
+            openshell__pb2.RefreshSandboxTokenResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def CreateWorkspace(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/CreateWorkspace',
+            openshell__pb2.CreateWorkspaceRequest.SerializeToString,
+            openshell__pb2.CreateWorkspaceResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetWorkspace(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/GetWorkspace',
+            openshell__pb2.GetWorkspaceRequest.SerializeToString,
+            openshell__pb2.GetWorkspaceResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListWorkspaces(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListWorkspaces',
+            openshell__pb2.ListWorkspacesRequest.SerializeToString,
+            openshell__pb2.ListWorkspacesResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DeleteWorkspace(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/DeleteWorkspace',
+            openshell__pb2.DeleteWorkspaceRequest.SerializeToString,
+            openshell__pb2.DeleteWorkspaceResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def AddWorkspaceMember(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/AddWorkspaceMember',
+            openshell__pb2.AddWorkspaceMemberRequest.SerializeToString,
+            openshell__pb2.AddWorkspaceMemberResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def RemoveWorkspaceMember(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/RemoveWorkspaceMember',
+            openshell__pb2.RemoveWorkspaceMemberRequest.SerializeToString,
+            openshell__pb2.RemoveWorkspaceMemberResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def ListWorkspaceMembers(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/openshell.v1.OpenShell/ListWorkspaceMembers',
+            openshell__pb2.ListWorkspaceMembersRequest.SerializeToString,
+            openshell__pb2.ListWorkspaceMembersResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)