openshell 0.0.113__py3-none-any.whl

openshell/_proto/options_pb2.py

@@ -0,0 +1,37 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: options.proto
+# Protobuf Python Version: 6.31.1
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    6,
+    31,
+    1,
+    '',
+    'options.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+from google.protobuf import descriptor_pb2 as google_dot_protobuf_dot_descriptor__pb2
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\roptions.proto\x12\x14openshell.options.v1\x1a google/protobuf/descriptor.proto\"b\n\x11\x41uthorizationRule\x12\x11\n\tauth_mode\x18\x01 \x01(\t\x12\x16\n\x0eworkspace_role\x18\x02 \x01(\t\x12\x13\n\x0bglobal_role\x18\x03 \x01(\t\x12\r\n\x05scope\x18\x04 \x01(\t:`\n\rauthorization\x12\x1e.google.protobuf.MethodOptions\x18\xd0\x86\x03 \x01(\x0b\x32\'.openshell.options.v1.AuthorizationRule:/\n\x06secret\x12\x1d.google.protobuf.FieldOptions\x18\xd1\x86\x03 \x01(\x08\x62\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'options_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  DESCRIPTOR._loaded_options = None
+  _globals['_AUTHORIZATIONRULE']._serialized_start=73
+  _globals['_AUTHORIZATIONRULE']._serialized_end=171
+# @@protoc_insertion_point(module_scope)

openshell/_proto/options_pb2.pyi

@@ -0,0 +1,22 @@
+from google.protobuf import descriptor_pb2 as _descriptor_pb2
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import message as _message
+from typing import ClassVar as _ClassVar, Optional as _Optional
+
+DESCRIPTOR: _descriptor.FileDescriptor
+AUTHORIZATION_FIELD_NUMBER: _ClassVar[int]
+authorization: _descriptor.FieldDescriptor
+SECRET_FIELD_NUMBER: _ClassVar[int]
+secret: _descriptor.FieldDescriptor
+
+class AuthorizationRule(_message.Message):
+    __slots__ = ("auth_mode", "workspace_role", "global_role", "scope")
+    AUTH_MODE_FIELD_NUMBER: _ClassVar[int]
+    WORKSPACE_ROLE_FIELD_NUMBER: _ClassVar[int]
+    GLOBAL_ROLE_FIELD_NUMBER: _ClassVar[int]
+    SCOPE_FIELD_NUMBER: _ClassVar[int]
+    auth_mode: str
+    workspace_role: str
+    global_role: str
+    scope: str
+    def __init__(self, auth_mode: _Optional[str] = ..., workspace_role: _Optional[str] = ..., global_role: _Optional[str] = ..., scope: _Optional[str] = ...) -> None: ...

openshell/_proto/options_pb2_grpc.py

@@ -0,0 +1,24 @@
+# Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT!
+"""Client and server classes corresponding to protobuf-defined services."""
+import grpc
+import warnings
+
+
+GRPC_GENERATED_VERSION = '1.78.0'
+GRPC_VERSION = grpc.__version__
+_version_not_supported = False
+
+try:
+    from grpc._utilities import first_version_is_lower
+    _version_not_supported = first_version_is_lower(GRPC_VERSION, GRPC_GENERATED_VERSION)
+except ImportError:
+    _version_not_supported = True
+
+if _version_not_supported:
+    raise RuntimeError(
+        f'The grpc package installed is at version {GRPC_VERSION},'
+        + ' but the generated code in options_pb2_grpc.py depends on'
+        + f' grpcio>={GRPC_GENERATED_VERSION}.'
+        + f' Please upgrade your grpc module to grpcio>={GRPC_GENERATED_VERSION}'
+        + f' or downgrade your generated code using grpcio-tools<={GRPC_VERSION}.'
+    )

openshell/_proto/sandbox_pb2.py

@@ -0,0 +1,123 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: sandbox.proto
+# Protobuf Python Version: 6.31.1
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    6,
+    31,
+    1,
+    '',
+    'sandbox.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+from google.protobuf import struct_pb2 as google_dot_protobuf_dot_struct__pb2
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\rsandbox.proto\x12\x14openshell.sandbox.v1\x1a\x1cgoogle/protobuf/struct.proto\"\xc3\x04\n\rSandboxPolicy\x12\x0f\n\x07version\x18\x01 \x01(\r\x12:\n\nfilesystem\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.FilesystemPolicy\x12\x36\n\x08landlock\x18\x03 \x01(\x0b\x32$.openshell.sandbox.v1.LandlockPolicy\x12\x34\n\x07process\x18\x04 \x01(\x0b\x32#.openshell.sandbox.v1.ProcessPolicy\x12R\n\x10network_policies\x18\x05 \x03(\x0b\x32\x38.openshell.sandbox.v1.SandboxPolicy.NetworkPoliciesEntry\x12X\n\x13network_middlewares\x18\x06 \x03(\x0b\x32;.openshell.sandbox.v1.SandboxPolicy.NetworkMiddlewaresEntry\x1a_\n\x14NetworkPoliciesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x36\n\x05value\x18\x02 \x01(\x0b\x32\'.openshell.sandbox.v1.NetworkPolicyRule:\x02\x38\x01\x1ah\n\x17NetworkMiddlewaresEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12<\n\x05value\x18\x02 \x01(\x0b\x32-.openshell.sandbox.v1.NetworkMiddlewareConfig:\x02\x38\x01\"R\n\x10\x46ilesystemPolicy\x12\x17\n\x0finclude_workdir\x18\x01 \x01(\x08\x12\x11\n\tread_only\x18\x02 \x03(\t\x12\x12\n\nread_write\x18\x03 \x03(\t\"\'\n\x0eLandlockPolicy\x12\x15\n\rcompatibility\x18\x01 \x01(\t\":\n\rProcessPolicy\x12\x13\n\x0brun_as_user\x18\x01 \x01(\t\x12\x14\n\x0crun_as_group\x18\x02 \x01(\t\"\x92\x01\n\x11NetworkPolicyRule\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x38\n\tendpoints\x18\x02 \x03(\x0b\x32%.openshell.sandbox.v1.NetworkEndpoint\x12\x35\n\x08\x62inaries\x18\x03 \x03(\x0b\x32#.openshell.sandbox.v1.NetworkBinary\"\xca\x01\n\x17NetworkMiddlewareConfig\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nmiddleware\x18\x02 \x01(\t\x12\'\n\x06\x63onfig\x18\x03 \x01(\x0b\x32\x17.google.protobuf.Struct\x12\x10\n\x08on_error\x18\x04 \x01(\t\x12\x43\n\tendpoints\x18\x05 \x01(\x0b\x32\x30.openshell.sandbox.v1.MiddlewareEndpointSelector\x12\r\n\x05order\x18\x06 \x01(\x05\">\n\x1aMiddlewareEndpointSelector\x12\x0f\n\x07include\x18\x01 \x03(\t\x12\x0f\n\x07\x65xclude\x18\x02 \x03(\t\",\n\x18NetworkCredentialBinding\x12\x10\n\x08provider\x18\x01 \x01(\t\"\xc5\x07\n\x0fNetworkEndpoint\x12\x0c\n\x04host\x18\x01 \x01(\t\x12\x0c\n\x04port\x18\x02 \x01(\r\x12\x10\n\x08protocol\x18\x03 \x01(\t\x12\x0b\n\x03tls\x18\x04 \x01(\t\x12\x13\n\x0b\x65nforcement\x18\x05 \x01(\t\x12\x0e\n\x06\x61\x63\x63\x65ss\x18\x06 \x01(\t\x12+\n\x05rules\x18\x07 \x03(\x0b\x32\x1c.openshell.sandbox.v1.L7Rule\x12\x13\n\x0b\x61llowed_ips\x18\x08 \x03(\t\x12\r\n\x05ports\x18\t \x03(\r\x12\x34\n\ndeny_rules\x18\n \x03(\x0b\x32 .openshell.sandbox.v1.L7DenyRule\x12\x1b\n\x13\x61llow_encoded_slash\x18\x0b \x01(\x08\x12\x19\n\x11persisted_queries\x18\x0c \x01(\t\x12\x65\n\x19graphql_persisted_queries\x18\r \x03(\x0b\x32\x42.openshell.sandbox.v1.NetworkEndpoint.GraphqlPersistedQueriesEntry\x12\x1e\n\x16graphql_max_body_bytes\x18\x0e \x01(\r\x12\x0c\n\x04path\x18\x0f \x01(\t\x12$\n\x1cwebsocket_credential_rewrite\x18\x10 \x01(\x08\x12\'\n\x1frequest_body_credential_rewrite\x18\x11 \x01(\x08\x12\x18\n\x10\x61\x64visor_proposed\x18\x12 \x01(\x08\x12\x1a\n\x12\x63redential_signing\x18\x13 \x01(\t\x12\x17\n\x0fsigning_service\x18\x14 \x01(\t\x12\x16\n\x0esigning_region\x18\x15 \x01(\t\x12\x1f\n\x17json_rpc_max_body_bytes\x18\x16 \x01(\r\x12-\n\x03mcp\x18\x17 \x01(\x0b\x32 .openshell.sandbox.v1.McpOptions\x12J\n\x12\x63redential_binding\x18\x18 \x01(\x0b\x32..openshell.sandbox.v1.NetworkCredentialBinding\x12%\n\x1d\x61llow_uninspected_credentials\x18\x19 \x01(\x08\x12\x1d\n\x15provider_credentialed\x18\x1a \x01(\x08\x1a\x66\n\x1cGraphqlPersistedQueriesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x35\n\x05value\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.GraphqlOperation:\x02\x38\x01\"\x8c\x01\n\nMcpOptions\x12\x1e\n\x11strict_tool_names\x18\x01 \x01(\x08H\x00\x88\x01\x01\x12(\n\x1b\x61llow_all_known_mcp_methods\x18\x02 \x01(\x08H\x01\x88\x01\x01\x42\x14\n\x12_strict_tool_namesB\x1e\n\x1c_allow_all_known_mcp_methods\"R\n\x10GraphqlOperation\x12\x16\n\x0eoperation_type\x18\x01 \x01(\t\x12\x16\n\x0eoperation_name\x18\x02 \x01(\t\x12\x0e\n\x06\x66ields\x18\x03 \x03(\t\"\xa4\x03\n\nL7DenyRule\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x03 \x01(\t\x12:\n\x05query\x18\x04 \x03(\x0b\x32+.openshell.sandbox.v1.L7DenyRule.QueryEntry\x12\x16\n\x0eoperation_type\x18\x05 \x01(\t\x12\x16\n\x0eoperation_name\x18\x06 \x01(\t\x12\x0e\n\x06\x66ields\x18\x07 \x03(\t\x12<\n\x06params\x18\t \x03(\x0b\x32,.openshell.sandbox.v1.L7DenyRule.ParamsEntry\x1aR\n\nQueryEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01\x1aS\n\x0bParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01J\x04\x08\x08\x10\t\"6\n\x06L7Rule\x12,\n\x05\x61llow\x18\x01 \x01(\x0b\x32\x1d.openshell.sandbox.v1.L7Allow\"\x9b\x03\n\x07L7Allow\x12\x0e\n\x06method\x18\x01 \x01(\t\x12\x0c\n\x04path\x18\x02 \x01(\t\x12\x0f\n\x07\x63ommand\x18\x03 \x01(\t\x12\x37\n\x05query\x18\x04 \x03(\x0b\x32(.openshell.sandbox.v1.L7Allow.QueryEntry\x12\x16\n\x0eoperation_type\x18\x05 \x01(\t\x12\x16\n\x0eoperation_name\x18\x06 \x01(\t\x12\x0e\n\x06\x66ields\x18\x07 \x03(\t\x12\x39\n\x06params\x18\t \x03(\x0b\x32).openshell.sandbox.v1.L7Allow.ParamsEntry\x1aR\n\nQueryEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01\x1aS\n\x0bParamsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x33\n\x05value\x18\x02 \x01(\x0b\x32$.openshell.sandbox.v1.L7QueryMatcher:\x02\x38\x01J\x04\x08\x08\x10\t\"+\n\x0eL7QueryMatcher\x12\x0c\n\x04glob\x18\x01 \x01(\t\x12\x0b\n\x03\x61ny\x18\x02 \x03(\t\"2\n\rNetworkBinary\x12\x0c\n\x04path\x18\x01 \x01(\t\x12\x13\n\x07harness\x18\x02 \x01(\x08\x42\x02\x18\x01\"-\n\x17GetSandboxConfigRequest\x12\x12\n\nsandbox_id\x18\x01 \x01(\t\"\x19\n\x17GetGatewayConfigRequest\"\xda\x01\n\x18GetGatewayConfigResponse\x12N\n\x08settings\x18\x01 \x03(\x0b\x32<.openshell.sandbox.v1.GetGatewayConfigResponse.SettingsEntry\x12\x19\n\x11settings_revision\x18\x02 \x01(\x04\x1aS\n\rSettingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x31\n\x05value\x18\x02 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue:\x02\x38\x01\"q\n\x0cSettingValue\x12\x16\n\x0cstring_value\x18\x01 \x01(\tH\x00\x12\x14\n\nbool_value\x18\x02 \x01(\x08H\x00\x12\x13\n\tint_value\x18\x03 \x01(\x03H\x00\x12\x15\n\x0b\x62ytes_value\x18\x04 \x01(\x0cH\x00\x42\x07\n\x05value\"x\n\x10\x45\x66\x66\x65\x63tiveSetting\x12\x31\n\x05value\x18\x01 \x01(\x0b\x32\".openshell.sandbox.v1.SettingValue\x12\x31\n\x05scope\x18\x02 \x01(\x0e\x32\".openshell.sandbox.v1.SettingScope\"\xf0\x04\n\x18GetSandboxConfigResponse\x12\x33\n\x06policy\x18\x01 \x01(\x0b\x32#.openshell.sandbox.v1.SandboxPolicy\x12\x0f\n\x07version\x18\x02 \x01(\r\x12\x13\n\x0bpolicy_hash\x18\x03 \x01(\t\x12N\n\x08settings\x18\x04 \x03(\x0b\x32<.openshell.sandbox.v1.GetSandboxConfigResponse.SettingsEntry\x12\x17\n\x0f\x63onfig_revision\x18\x05 \x01(\x04\x12\x39\n\rpolicy_source\x18\x06 \x01(\x0e\x32\".openshell.sandbox.v1.PolicySource\x12\x1d\n\x15global_policy_version\x18\x07 \x01(\r\x12\x1d\n\x15provider_env_revision\x18\x08 \x01(\x04\x12Y\n\x1esupervisor_middleware_services\x18\t \x03(\x0b\x32\x31.openshell.sandbox.v1.SupervisorMiddlewareService\x12\x11\n\tworkspace\x18\n \x01(\t\x12&\n\x1epolicy_validation_failure_mode\x18\x0b \x01(\t\x12(\n extension_authentication_enabled\x18\x0c \x01(\x08\x1aW\n\rSettingsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x35\n\x05value\x18\x02 \x01(\x0b\x32&.openshell.sandbox.v1.EffectiveSetting:\x02\x38\x01\"\xbb\x01\n\x1bSupervisorMiddlewareService\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x15\n\rgrpc_endpoint\x18\x02 \x01(\t\x12\x19\n\x11max_payload_bytes\x18\x03 \x01(\x04\x12\x0f\n\x07timeout\x18\x04 \x01(\t\x12\x17\n\x0ftls_ca_cert_pem\x18\x05 \x01(\x0c\x12\x10\n\x08\x61udience\x18\x06 \x01(\t\x12 \n\x18\x61llow_insecure_transport\x18\x07 \x01(\x08*b\n\x0cSettingScope\x12\x1d\n\x19SETTING_SCOPE_UNSPECIFIED\x10\x00\x12\x19\n\x15SETTING_SCOPE_SANDBOX\x10\x01\x12\x18\n\x14SETTING_SCOPE_GLOBAL\x10\x02*b\n\x0cPolicySource\x12\x1d\n\x19POLICY_SOURCE_UNSPECIFIED\x10\x00\x12\x19\n\x15POLICY_SOURCE_SANDBOX\x10\x01\x12\x18\n\x14POLICY_SOURCE_GLOBAL\x10\x02\x62\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'sandbox_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  DESCRIPTOR._loaded_options = None
+  _globals['_SANDBOXPOLICY_NETWORKPOLICIESENTRY']._loaded_options = None
+  _globals['_SANDBOXPOLICY_NETWORKPOLICIESENTRY']._serialized_options = b'8\001'
+  _globals['_SANDBOXPOLICY_NETWORKMIDDLEWARESENTRY']._loaded_options = None
+  _globals['_SANDBOXPOLICY_NETWORKMIDDLEWARESENTRY']._serialized_options = b'8\001'
+  _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._loaded_options = None
+  _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._serialized_options = b'8\001'
+  _globals['_L7DENYRULE_QUERYENTRY']._loaded_options = None
+  _globals['_L7DENYRULE_QUERYENTRY']._serialized_options = b'8\001'
+  _globals['_L7DENYRULE_PARAMSENTRY']._loaded_options = None
+  _globals['_L7DENYRULE_PARAMSENTRY']._serialized_options = b'8\001'
+  _globals['_L7ALLOW_QUERYENTRY']._loaded_options = None
+  _globals['_L7ALLOW_QUERYENTRY']._serialized_options = b'8\001'
+  _globals['_L7ALLOW_PARAMSENTRY']._loaded_options = None
+  _globals['_L7ALLOW_PARAMSENTRY']._serialized_options = b'8\001'
+  _globals['_NETWORKBINARY'].fields_by_name['harness']._loaded_options = None
+  _globals['_NETWORKBINARY'].fields_by_name['harness']._serialized_options = b'\030\001'
+  _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._loaded_options = None
+  _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_options = b'8\001'
+  _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._loaded_options = None
+  _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_options = b'8\001'
+  _globals['_SETTINGSCOPE']._serialized_start=4834
+  _globals['_SETTINGSCOPE']._serialized_end=4932
+  _globals['_POLICYSOURCE']._serialized_start=4934
+  _globals['_POLICYSOURCE']._serialized_end=5032
+  _globals['_SANDBOXPOLICY']._serialized_start=70
+  _globals['_SANDBOXPOLICY']._serialized_end=649
+  _globals['_SANDBOXPOLICY_NETWORKPOLICIESENTRY']._serialized_start=448
+  _globals['_SANDBOXPOLICY_NETWORKPOLICIESENTRY']._serialized_end=543
+  _globals['_SANDBOXPOLICY_NETWORKMIDDLEWARESENTRY']._serialized_start=545
+  _globals['_SANDBOXPOLICY_NETWORKMIDDLEWARESENTRY']._serialized_end=649
+  _globals['_FILESYSTEMPOLICY']._serialized_start=651
+  _globals['_FILESYSTEMPOLICY']._serialized_end=733
+  _globals['_LANDLOCKPOLICY']._serialized_start=735
+  _globals['_LANDLOCKPOLICY']._serialized_end=774
+  _globals['_PROCESSPOLICY']._serialized_start=776
+  _globals['_PROCESSPOLICY']._serialized_end=834
+  _globals['_NETWORKPOLICYRULE']._serialized_start=837
+  _globals['_NETWORKPOLICYRULE']._serialized_end=983
+  _globals['_NETWORKMIDDLEWARECONFIG']._serialized_start=986
+  _globals['_NETWORKMIDDLEWARECONFIG']._serialized_end=1188
+  _globals['_MIDDLEWAREENDPOINTSELECTOR']._serialized_start=1190
+  _globals['_MIDDLEWAREENDPOINTSELECTOR']._serialized_end=1252
+  _globals['_NETWORKCREDENTIALBINDING']._serialized_start=1254
+  _globals['_NETWORKCREDENTIALBINDING']._serialized_end=1298
+  _globals['_NETWORKENDPOINT']._serialized_start=1301
+  _globals['_NETWORKENDPOINT']._serialized_end=2266
+  _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._serialized_start=2164
+  _globals['_NETWORKENDPOINT_GRAPHQLPERSISTEDQUERIESENTRY']._serialized_end=2266
+  _globals['_MCPOPTIONS']._serialized_start=2269
+  _globals['_MCPOPTIONS']._serialized_end=2409
+  _globals['_GRAPHQLOPERATION']._serialized_start=2411
+  _globals['_GRAPHQLOPERATION']._serialized_end=2493
+  _globals['_L7DENYRULE']._serialized_start=2496
+  _globals['_L7DENYRULE']._serialized_end=2916
+  _globals['_L7DENYRULE_QUERYENTRY']._serialized_start=2743
+  _globals['_L7DENYRULE_QUERYENTRY']._serialized_end=2825
+  _globals['_L7DENYRULE_PARAMSENTRY']._serialized_start=2827
+  _globals['_L7DENYRULE_PARAMSENTRY']._serialized_end=2910
+  _globals['_L7RULE']._serialized_start=2918
+  _globals['_L7RULE']._serialized_end=2972
+  _globals['_L7ALLOW']._serialized_start=2975
+  _globals['_L7ALLOW']._serialized_end=3386
+  _globals['_L7ALLOW_QUERYENTRY']._serialized_start=2743
+  _globals['_L7ALLOW_QUERYENTRY']._serialized_end=2825
+  _globals['_L7ALLOW_PARAMSENTRY']._serialized_start=2827
+  _globals['_L7ALLOW_PARAMSENTRY']._serialized_end=2910
+  _globals['_L7QUERYMATCHER']._serialized_start=3388
+  _globals['_L7QUERYMATCHER']._serialized_end=3431
+  _globals['_NETWORKBINARY']._serialized_start=3433
+  _globals['_NETWORKBINARY']._serialized_end=3483
+  _globals['_GETSANDBOXCONFIGREQUEST']._serialized_start=3485
+  _globals['_GETSANDBOXCONFIGREQUEST']._serialized_end=3530
+  _globals['_GETGATEWAYCONFIGREQUEST']._serialized_start=3532
+  _globals['_GETGATEWAYCONFIGREQUEST']._serialized_end=3557
+  _globals['_GETGATEWAYCONFIGRESPONSE']._serialized_start=3560
+  _globals['_GETGATEWAYCONFIGRESPONSE']._serialized_end=3778
+  _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_start=3695
+  _globals['_GETGATEWAYCONFIGRESPONSE_SETTINGSENTRY']._serialized_end=3778
+  _globals['_SETTINGVALUE']._serialized_start=3780
+  _globals['_SETTINGVALUE']._serialized_end=3893
+  _globals['_EFFECTIVESETTING']._serialized_start=3895
+  _globals['_EFFECTIVESETTING']._serialized_end=4015
+  _globals['_GETSANDBOXCONFIGRESPONSE']._serialized_start=4018
+  _globals['_GETSANDBOXCONFIGRESPONSE']._serialized_end=4642
+  _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_start=4555
+  _globals['_GETSANDBOXCONFIGRESPONSE_SETTINGSENTRY']._serialized_end=4642
+  _globals['_SUPERVISORMIDDLEWARESERVICE']._serialized_start=4645
+  _globals['_SUPERVISORMIDDLEWARESERVICE']._serialized_end=4832
+# @@protoc_insertion_point(module_scope)

openshell/_proto/sandbox_pb2.pyi

@@ -0,0 +1,390 @@
+from google.protobuf import struct_pb2 as _struct_pb2
+from google.protobuf.internal import containers as _containers
+from google.protobuf.internal import enum_type_wrapper as _enum_type_wrapper
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import message as _message
+from collections.abc import Iterable as _Iterable, Mapping as _Mapping
+from typing import ClassVar as _ClassVar, Optional as _Optional, Union as _Union
+
+DESCRIPTOR: _descriptor.FileDescriptor
+
+class SettingScope(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
+    __slots__ = ()
+    SETTING_SCOPE_UNSPECIFIED: _ClassVar[SettingScope]
+    SETTING_SCOPE_SANDBOX: _ClassVar[SettingScope]
+    SETTING_SCOPE_GLOBAL: _ClassVar[SettingScope]
+
+class PolicySource(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
+    __slots__ = ()
+    POLICY_SOURCE_UNSPECIFIED: _ClassVar[PolicySource]
+    POLICY_SOURCE_SANDBOX: _ClassVar[PolicySource]
+    POLICY_SOURCE_GLOBAL: _ClassVar[PolicySource]
+SETTING_SCOPE_UNSPECIFIED: SettingScope
+SETTING_SCOPE_SANDBOX: SettingScope
+SETTING_SCOPE_GLOBAL: SettingScope
+POLICY_SOURCE_UNSPECIFIED: PolicySource
+POLICY_SOURCE_SANDBOX: PolicySource
+POLICY_SOURCE_GLOBAL: PolicySource
+
+class SandboxPolicy(_message.Message):
+    __slots__ = ("version", "filesystem", "landlock", "process", "network_policies", "network_middlewares")
+    class NetworkPoliciesEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: NetworkPolicyRule
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[NetworkPolicyRule, _Mapping]] = ...) -> None: ...
+    class NetworkMiddlewaresEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: NetworkMiddlewareConfig
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[NetworkMiddlewareConfig, _Mapping]] = ...) -> None: ...
+    VERSION_FIELD_NUMBER: _ClassVar[int]
+    FILESYSTEM_FIELD_NUMBER: _ClassVar[int]
+    LANDLOCK_FIELD_NUMBER: _ClassVar[int]
+    PROCESS_FIELD_NUMBER: _ClassVar[int]
+    NETWORK_POLICIES_FIELD_NUMBER: _ClassVar[int]
+    NETWORK_MIDDLEWARES_FIELD_NUMBER: _ClassVar[int]
+    version: int
+    filesystem: FilesystemPolicy
+    landlock: LandlockPolicy
+    process: ProcessPolicy
+    network_policies: _containers.MessageMap[str, NetworkPolicyRule]
+    network_middlewares: _containers.MessageMap[str, NetworkMiddlewareConfig]
+    def __init__(self, version: _Optional[int] = ..., filesystem: _Optional[_Union[FilesystemPolicy, _Mapping]] = ..., landlock: _Optional[_Union[LandlockPolicy, _Mapping]] = ..., process: _Optional[_Union[ProcessPolicy, _Mapping]] = ..., network_policies: _Optional[_Mapping[str, NetworkPolicyRule]] = ..., network_middlewares: _Optional[_Mapping[str, NetworkMiddlewareConfig]] = ...) -> None: ...
+
+class FilesystemPolicy(_message.Message):
+    __slots__ = ("include_workdir", "read_only", "read_write")
+    INCLUDE_WORKDIR_FIELD_NUMBER: _ClassVar[int]
+    READ_ONLY_FIELD_NUMBER: _ClassVar[int]
+    READ_WRITE_FIELD_NUMBER: _ClassVar[int]
+    include_workdir: bool
+    read_only: _containers.RepeatedScalarFieldContainer[str]
+    read_write: _containers.RepeatedScalarFieldContainer[str]
+    def __init__(self, include_workdir: bool = ..., read_only: _Optional[_Iterable[str]] = ..., read_write: _Optional[_Iterable[str]] = ...) -> None: ...
+
+class LandlockPolicy(_message.Message):
+    __slots__ = ("compatibility",)
+    COMPATIBILITY_FIELD_NUMBER: _ClassVar[int]
+    compatibility: str
+    def __init__(self, compatibility: _Optional[str] = ...) -> None: ...
+
+class ProcessPolicy(_message.Message):
+    __slots__ = ("run_as_user", "run_as_group")
+    RUN_AS_USER_FIELD_NUMBER: _ClassVar[int]
+    RUN_AS_GROUP_FIELD_NUMBER: _ClassVar[int]
+    run_as_user: str
+    run_as_group: str
+    def __init__(self, run_as_user: _Optional[str] = ..., run_as_group: _Optional[str] = ...) -> None: ...
+
+class NetworkPolicyRule(_message.Message):
+    __slots__ = ("name", "endpoints", "binaries")
+    NAME_FIELD_NUMBER: _ClassVar[int]
+    ENDPOINTS_FIELD_NUMBER: _ClassVar[int]
+    BINARIES_FIELD_NUMBER: _ClassVar[int]
+    name: str
+    endpoints: _containers.RepeatedCompositeFieldContainer[NetworkEndpoint]
+    binaries: _containers.RepeatedCompositeFieldContainer[NetworkBinary]
+    def __init__(self, name: _Optional[str] = ..., endpoints: _Optional[_Iterable[_Union[NetworkEndpoint, _Mapping]]] = ..., binaries: _Optional[_Iterable[_Union[NetworkBinary, _Mapping]]] = ...) -> None: ...
+
+class NetworkMiddlewareConfig(_message.Message):
+    __slots__ = ("name", "middleware", "config", "on_error", "endpoints", "order")
+    NAME_FIELD_NUMBER: _ClassVar[int]
+    MIDDLEWARE_FIELD_NUMBER: _ClassVar[int]
+    CONFIG_FIELD_NUMBER: _ClassVar[int]
+    ON_ERROR_FIELD_NUMBER: _ClassVar[int]
+    ENDPOINTS_FIELD_NUMBER: _ClassVar[int]
+    ORDER_FIELD_NUMBER: _ClassVar[int]
+    name: str
+    middleware: str
+    config: _struct_pb2.Struct
+    on_error: str
+    endpoints: MiddlewareEndpointSelector
+    order: int
+    def __init__(self, name: _Optional[str] = ..., middleware: _Optional[str] = ..., config: _Optional[_Union[_struct_pb2.Struct, _Mapping]] = ..., on_error: _Optional[str] = ..., endpoints: _Optional[_Union[MiddlewareEndpointSelector, _Mapping]] = ..., order: _Optional[int] = ...) -> None: ...
+
+class MiddlewareEndpointSelector(_message.Message):
+    __slots__ = ("include", "exclude")
+    INCLUDE_FIELD_NUMBER: _ClassVar[int]
+    EXCLUDE_FIELD_NUMBER: _ClassVar[int]
+    include: _containers.RepeatedScalarFieldContainer[str]
+    exclude: _containers.RepeatedScalarFieldContainer[str]
+    def __init__(self, include: _Optional[_Iterable[str]] = ..., exclude: _Optional[_Iterable[str]] = ...) -> None: ...
+
+class NetworkCredentialBinding(_message.Message):
+    __slots__ = ("provider",)
+    PROVIDER_FIELD_NUMBER: _ClassVar[int]
+    provider: str
+    def __init__(self, provider: _Optional[str] = ...) -> None: ...
+
+class NetworkEndpoint(_message.Message):
+    __slots__ = ("host", "port", "protocol", "tls", "enforcement", "access", "rules", "allowed_ips", "ports", "deny_rules", "allow_encoded_slash", "persisted_queries", "graphql_persisted_queries", "graphql_max_body_bytes", "path", "websocket_credential_rewrite", "request_body_credential_rewrite", "advisor_proposed", "credential_signing", "signing_service", "signing_region", "json_rpc_max_body_bytes", "mcp", "credential_binding", "allow_uninspected_credentials", "provider_credentialed")
+    class GraphqlPersistedQueriesEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: GraphqlOperation
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[GraphqlOperation, _Mapping]] = ...) -> None: ...
+    HOST_FIELD_NUMBER: _ClassVar[int]
+    PORT_FIELD_NUMBER: _ClassVar[int]
+    PROTOCOL_FIELD_NUMBER: _ClassVar[int]
+    TLS_FIELD_NUMBER: _ClassVar[int]
+    ENFORCEMENT_FIELD_NUMBER: _ClassVar[int]
+    ACCESS_FIELD_NUMBER: _ClassVar[int]
+    RULES_FIELD_NUMBER: _ClassVar[int]
+    ALLOWED_IPS_FIELD_NUMBER: _ClassVar[int]
+    PORTS_FIELD_NUMBER: _ClassVar[int]
+    DENY_RULES_FIELD_NUMBER: _ClassVar[int]
+    ALLOW_ENCODED_SLASH_FIELD_NUMBER: _ClassVar[int]
+    PERSISTED_QUERIES_FIELD_NUMBER: _ClassVar[int]
+    GRAPHQL_PERSISTED_QUERIES_FIELD_NUMBER: _ClassVar[int]
+    GRAPHQL_MAX_BODY_BYTES_FIELD_NUMBER: _ClassVar[int]
+    PATH_FIELD_NUMBER: _ClassVar[int]
+    WEBSOCKET_CREDENTIAL_REWRITE_FIELD_NUMBER: _ClassVar[int]
+    REQUEST_BODY_CREDENTIAL_REWRITE_FIELD_NUMBER: _ClassVar[int]
+    ADVISOR_PROPOSED_FIELD_NUMBER: _ClassVar[int]
+    CREDENTIAL_SIGNING_FIELD_NUMBER: _ClassVar[int]
+    SIGNING_SERVICE_FIELD_NUMBER: _ClassVar[int]
+    SIGNING_REGION_FIELD_NUMBER: _ClassVar[int]
+    JSON_RPC_MAX_BODY_BYTES_FIELD_NUMBER: _ClassVar[int]
+    MCP_FIELD_NUMBER: _ClassVar[int]
+    CREDENTIAL_BINDING_FIELD_NUMBER: _ClassVar[int]
+    ALLOW_UNINSPECTED_CREDENTIALS_FIELD_NUMBER: _ClassVar[int]
+    PROVIDER_CREDENTIALED_FIELD_NUMBER: _ClassVar[int]
+    host: str
+    port: int
+    protocol: str
+    tls: str
+    enforcement: str
+    access: str
+    rules: _containers.RepeatedCompositeFieldContainer[L7Rule]
+    allowed_ips: _containers.RepeatedScalarFieldContainer[str]
+    ports: _containers.RepeatedScalarFieldContainer[int]
+    deny_rules: _containers.RepeatedCompositeFieldContainer[L7DenyRule]
+    allow_encoded_slash: bool
+    persisted_queries: str
+    graphql_persisted_queries: _containers.MessageMap[str, GraphqlOperation]
+    graphql_max_body_bytes: int
+    path: str
+    websocket_credential_rewrite: bool
+    request_body_credential_rewrite: bool
+    advisor_proposed: bool
+    credential_signing: str
+    signing_service: str
+    signing_region: str
+    json_rpc_max_body_bytes: int
+    mcp: McpOptions
+    credential_binding: NetworkCredentialBinding
+    allow_uninspected_credentials: bool
+    provider_credentialed: bool
+    def __init__(self, host: _Optional[str] = ..., port: _Optional[int] = ..., protocol: _Optional[str] = ..., tls: _Optional[str] = ..., enforcement: _Optional[str] = ..., access: _Optional[str] = ..., rules: _Optional[_Iterable[_Union[L7Rule, _Mapping]]] = ..., allowed_ips: _Optional[_Iterable[str]] = ..., ports: _Optional[_Iterable[int]] = ..., deny_rules: _Optional[_Iterable[_Union[L7DenyRule, _Mapping]]] = ..., allow_encoded_slash: bool = ..., persisted_queries: _Optional[str] = ..., graphql_persisted_queries: _Optional[_Mapping[str, GraphqlOperation]] = ..., graphql_max_body_bytes: _Optional[int] = ..., path: _Optional[str] = ..., websocket_credential_rewrite: bool = ..., request_body_credential_rewrite: bool = ..., advisor_proposed: bool = ..., credential_signing: _Optional[str] = ..., signing_service: _Optional[str] = ..., signing_region: _Optional[str] = ..., json_rpc_max_body_bytes: _Optional[int] = ..., mcp: _Optional[_Union[McpOptions, _Mapping]] = ..., credential_binding: _Optional[_Union[NetworkCredentialBinding, _Mapping]] = ..., allow_uninspected_credentials: bool = ..., provider_credentialed: bool = ...) -> None: ...
+
+class McpOptions(_message.Message):
+    __slots__ = ("strict_tool_names", "allow_all_known_mcp_methods")
+    STRICT_TOOL_NAMES_FIELD_NUMBER: _ClassVar[int]
+    ALLOW_ALL_KNOWN_MCP_METHODS_FIELD_NUMBER: _ClassVar[int]
+    strict_tool_names: bool
+    allow_all_known_mcp_methods: bool
+    def __init__(self, strict_tool_names: bool = ..., allow_all_known_mcp_methods: bool = ...) -> None: ...
+
+class GraphqlOperation(_message.Message):
+    __slots__ = ("operation_type", "operation_name", "fields")
+    OPERATION_TYPE_FIELD_NUMBER: _ClassVar[int]
+    OPERATION_NAME_FIELD_NUMBER: _ClassVar[int]
+    FIELDS_FIELD_NUMBER: _ClassVar[int]
+    operation_type: str
+    operation_name: str
+    fields: _containers.RepeatedScalarFieldContainer[str]
+    def __init__(self, operation_type: _Optional[str] = ..., operation_name: _Optional[str] = ..., fields: _Optional[_Iterable[str]] = ...) -> None: ...
+
+class L7DenyRule(_message.Message):
+    __slots__ = ("method", "path", "command", "query", "operation_type", "operation_name", "fields", "params")
+    class QueryEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: L7QueryMatcher
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[L7QueryMatcher, _Mapping]] = ...) -> None: ...
+    class ParamsEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: L7QueryMatcher
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[L7QueryMatcher, _Mapping]] = ...) -> None: ...
+    METHOD_FIELD_NUMBER: _ClassVar[int]
+    PATH_FIELD_NUMBER: _ClassVar[int]
+    COMMAND_FIELD_NUMBER: _ClassVar[int]
+    QUERY_FIELD_NUMBER: _ClassVar[int]
+    OPERATION_TYPE_FIELD_NUMBER: _ClassVar[int]
+    OPERATION_NAME_FIELD_NUMBER: _ClassVar[int]
+    FIELDS_FIELD_NUMBER: _ClassVar[int]
+    PARAMS_FIELD_NUMBER: _ClassVar[int]
+    method: str
+    path: str
+    command: str
+    query: _containers.MessageMap[str, L7QueryMatcher]
+    operation_type: str
+    operation_name: str
+    fields: _containers.RepeatedScalarFieldContainer[str]
+    params: _containers.MessageMap[str, L7QueryMatcher]
+    def __init__(self, method: _Optional[str] = ..., path: _Optional[str] = ..., command: _Optional[str] = ..., query: _Optional[_Mapping[str, L7QueryMatcher]] = ..., operation_type: _Optional[str] = ..., operation_name: _Optional[str] = ..., fields: _Optional[_Iterable[str]] = ..., params: _Optional[_Mapping[str, L7QueryMatcher]] = ...) -> None: ...
+
+class L7Rule(_message.Message):
+    __slots__ = ("allow",)
+    ALLOW_FIELD_NUMBER: _ClassVar[int]
+    allow: L7Allow
+    def __init__(self, allow: _Optional[_Union[L7Allow, _Mapping]] = ...) -> None: ...
+
+class L7Allow(_message.Message):
+    __slots__ = ("method", "path", "command", "query", "operation_type", "operation_name", "fields", "params")
+    class QueryEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: L7QueryMatcher
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[L7QueryMatcher, _Mapping]] = ...) -> None: ...
+    class ParamsEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: L7QueryMatcher
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[L7QueryMatcher, _Mapping]] = ...) -> None: ...
+    METHOD_FIELD_NUMBER: _ClassVar[int]
+    PATH_FIELD_NUMBER: _ClassVar[int]
+    COMMAND_FIELD_NUMBER: _ClassVar[int]
+    QUERY_FIELD_NUMBER: _ClassVar[int]
+    OPERATION_TYPE_FIELD_NUMBER: _ClassVar[int]
+    OPERATION_NAME_FIELD_NUMBER: _ClassVar[int]
+    FIELDS_FIELD_NUMBER: _ClassVar[int]
+    PARAMS_FIELD_NUMBER: _ClassVar[int]
+    method: str
+    path: str
+    command: str
+    query: _containers.MessageMap[str, L7QueryMatcher]
+    operation_type: str
+    operation_name: str
+    fields: _containers.RepeatedScalarFieldContainer[str]
+    params: _containers.MessageMap[str, L7QueryMatcher]
+    def __init__(self, method: _Optional[str] = ..., path: _Optional[str] = ..., command: _Optional[str] = ..., query: _Optional[_Mapping[str, L7QueryMatcher]] = ..., operation_type: _Optional[str] = ..., operation_name: _Optional[str] = ..., fields: _Optional[_Iterable[str]] = ..., params: _Optional[_Mapping[str, L7QueryMatcher]] = ...) -> None: ...
+
+class L7QueryMatcher(_message.Message):
+    __slots__ = ("glob", "any")
+    GLOB_FIELD_NUMBER: _ClassVar[int]
+    ANY_FIELD_NUMBER: _ClassVar[int]
+    glob: str
+    any: _containers.RepeatedScalarFieldContainer[str]
+    def __init__(self, glob: _Optional[str] = ..., any: _Optional[_Iterable[str]] = ...) -> None: ...
+
+class NetworkBinary(_message.Message):
+    __slots__ = ("path", "harness")
+    PATH_FIELD_NUMBER: _ClassVar[int]
+    HARNESS_FIELD_NUMBER: _ClassVar[int]
+    path: str
+    harness: bool
+    def __init__(self, path: _Optional[str] = ..., harness: bool = ...) -> None: ...
+
+class GetSandboxConfigRequest(_message.Message):
+    __slots__ = ("sandbox_id",)
+    SANDBOX_ID_FIELD_NUMBER: _ClassVar[int]
+    sandbox_id: str
+    def __init__(self, sandbox_id: _Optional[str] = ...) -> None: ...
+
+class GetGatewayConfigRequest(_message.Message):
+    __slots__ = ()
+    def __init__(self) -> None: ...
+
+class GetGatewayConfigResponse(_message.Message):
+    __slots__ = ("settings", "settings_revision")
+    class SettingsEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: SettingValue
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[SettingValue, _Mapping]] = ...) -> None: ...
+    SETTINGS_FIELD_NUMBER: _ClassVar[int]
+    SETTINGS_REVISION_FIELD_NUMBER: _ClassVar[int]
+    settings: _containers.MessageMap[str, SettingValue]
+    settings_revision: int
+    def __init__(self, settings: _Optional[_Mapping[str, SettingValue]] = ..., settings_revision: _Optional[int] = ...) -> None: ...
+
+class SettingValue(_message.Message):
+    __slots__ = ("string_value", "bool_value", "int_value", "bytes_value")
+    STRING_VALUE_FIELD_NUMBER: _ClassVar[int]
+    BOOL_VALUE_FIELD_NUMBER: _ClassVar[int]
+    INT_VALUE_FIELD_NUMBER: _ClassVar[int]
+    BYTES_VALUE_FIELD_NUMBER: _ClassVar[int]
+    string_value: str
+    bool_value: bool
+    int_value: int
+    bytes_value: bytes
+    def __init__(self, string_value: _Optional[str] = ..., bool_value: bool = ..., int_value: _Optional[int] = ..., bytes_value: _Optional[bytes] = ...) -> None: ...
+
+class EffectiveSetting(_message.Message):
+    __slots__ = ("value", "scope")
+    VALUE_FIELD_NUMBER: _ClassVar[int]
+    SCOPE_FIELD_NUMBER: _ClassVar[int]
+    value: SettingValue
+    scope: SettingScope
+    def __init__(self, value: _Optional[_Union[SettingValue, _Mapping]] = ..., scope: _Optional[_Union[SettingScope, str]] = ...) -> None: ...
+
+class GetSandboxConfigResponse(_message.Message):
+    __slots__ = ("policy", "version", "policy_hash", "settings", "config_revision", "policy_source", "global_policy_version", "provider_env_revision", "supervisor_middleware_services", "workspace", "policy_validation_failure_mode", "extension_authentication_enabled")
+    class SettingsEntry(_message.Message):
+        __slots__ = ("key", "value")
+        KEY_FIELD_NUMBER: _ClassVar[int]
+        VALUE_FIELD_NUMBER: _ClassVar[int]
+        key: str
+        value: EffectiveSetting
+        def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[EffectiveSetting, _Mapping]] = ...) -> None: ...
+    POLICY_FIELD_NUMBER: _ClassVar[int]
+    VERSION_FIELD_NUMBER: _ClassVar[int]
+    POLICY_HASH_FIELD_NUMBER: _ClassVar[int]
+    SETTINGS_FIELD_NUMBER: _ClassVar[int]
+    CONFIG_REVISION_FIELD_NUMBER: _ClassVar[int]
+    POLICY_SOURCE_FIELD_NUMBER: _ClassVar[int]
+    GLOBAL_POLICY_VERSION_FIELD_NUMBER: _ClassVar[int]
+    PROVIDER_ENV_REVISION_FIELD_NUMBER: _ClassVar[int]
+    SUPERVISOR_MIDDLEWARE_SERVICES_FIELD_NUMBER: _ClassVar[int]
+    WORKSPACE_FIELD_NUMBER: _ClassVar[int]
+    POLICY_VALIDATION_FAILURE_MODE_FIELD_NUMBER: _ClassVar[int]
+    EXTENSION_AUTHENTICATION_ENABLED_FIELD_NUMBER: _ClassVar[int]
+    policy: SandboxPolicy
+    version: int
+    policy_hash: str
+    settings: _containers.MessageMap[str, EffectiveSetting]
+    config_revision: int
+    policy_source: PolicySource
+    global_policy_version: int
+    provider_env_revision: int
+    supervisor_middleware_services: _containers.RepeatedCompositeFieldContainer[SupervisorMiddlewareService]
+    workspace: str
+    policy_validation_failure_mode: str
+    extension_authentication_enabled: bool
+    def __init__(self, policy: _Optional[_Union[SandboxPolicy, _Mapping]] = ..., version: _Optional[int] = ..., policy_hash: _Optional[str] = ..., settings: _Optional[_Mapping[str, EffectiveSetting]] = ..., config_revision: _Optional[int] = ..., policy_source: _Optional[_Union[PolicySource, str]] = ..., global_policy_version: _Optional[int] = ..., provider_env_revision: _Optional[int] = ..., supervisor_middleware_services: _Optional[_Iterable[_Union[SupervisorMiddlewareService, _Mapping]]] = ..., workspace: _Optional[str] = ..., policy_validation_failure_mode: _Optional[str] = ..., extension_authentication_enabled: bool = ...) -> None: ...
+
+class SupervisorMiddlewareService(_message.Message):
+    __slots__ = ("name", "grpc_endpoint", "max_payload_bytes", "timeout", "tls_ca_cert_pem", "audience", "allow_insecure_transport")
+    NAME_FIELD_NUMBER: _ClassVar[int]
+    GRPC_ENDPOINT_FIELD_NUMBER: _ClassVar[int]
+    MAX_PAYLOAD_BYTES_FIELD_NUMBER: _ClassVar[int]
+    TIMEOUT_FIELD_NUMBER: _ClassVar[int]
+    TLS_CA_CERT_PEM_FIELD_NUMBER: _ClassVar[int]
+    AUDIENCE_FIELD_NUMBER: _ClassVar[int]
+    ALLOW_INSECURE_TRANSPORT_FIELD_NUMBER: _ClassVar[int]
+    name: str
+    grpc_endpoint: str
+    max_payload_bytes: int
+    timeout: str
+    tls_ca_cert_pem: bytes
+    audience: str
+    allow_insecure_transport: bool
+    def __init__(self, name: _Optional[str] = ..., grpc_endpoint: _Optional[str] = ..., max_payload_bytes: _Optional[int] = ..., timeout: _Optional[str] = ..., tls_ca_cert_pem: _Optional[bytes] = ..., audience: _Optional[str] = ..., allow_insecure_transport: bool = ...) -> None: ...

openshell/_proto/sandbox_pb2_grpc.py

@@ -0,0 +1,24 @@
+# Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT!
+"""Client and server classes corresponding to protobuf-defined services."""
+import grpc
+import warnings
+
+
+GRPC_GENERATED_VERSION = '1.78.0'
+GRPC_VERSION = grpc.__version__
+_version_not_supported = False
+
+try:
+    from grpc._utilities import first_version_is_lower
+    _version_not_supported = first_version_is_lower(GRPC_VERSION, GRPC_GENERATED_VERSION)
+except ImportError:
+    _version_not_supported = True
+
+if _version_not_supported:
+    raise RuntimeError(
+        f'The grpc package installed is at version {GRPC_VERSION},'
+        + ' but the generated code in sandbox_pb2_grpc.py depends on'
+        + f' grpcio>={GRPC_GENERATED_VERSION}.'
+        + f' Please upgrade your grpc module to grpcio>={GRPC_GENERATED_VERSION}'
+        + f' or downgrade your generated code using grpcio-tools<={GRPC_VERSION}.'
+    )

openshell/openshell_test.py

@@ -0,0 +1,11 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+"""Basic tests for the openshell package."""
+
+import openshell
+
+
+def test_version() -> None:
+    """Test that version is defined."""
+    assert openshell.__version__