Namespace Openshell.Sandbox.V1

Classes

EffectiveSetting: Effective setting value and the scope it was resolved from.

FilesystemPolicy: Filesystem access policy.

GetGatewayConfigRequest: Request to get gateway-global settings.

GetGatewayConfigResponse: Response containing gateway-global settings.

GetSandboxConfigRequest: Request to get sandbox settings by sandbox name.

GetSandboxConfigResponse: Response containing effective sandbox settings and policy, projected from the SandboxConfigSnapshot that push supervisors receive.

GraphqlOperation: Trusted GraphQL operation classification.

L7Allow: Allowed action definition for L7 rules.

L7DenyRule: An L7 deny rule that blocks specific requests. Mirrors L7Allow — same fields, same matching semantics, inverted effect. Deny rules are evaluated after allow rules and take precedence.

L7QueryMatcher: Query value matcher for one query parameter key.

L7Rule: An L7 policy rule (allow-only).

LandlockPolicy: Landlock policy configuration.

MCP options are grouped so MCP-specific policy can grow without adding more top-level NetworkEndpoint fields. OpenShell owns the supported revision profiles instead of treating dependency enums as the policy contract.

Sources:

MiddlewareEndpointSelector: Host selector controlling which admitted destinations use a middleware config.

NetworkBinary: A binary identity for network policy matching.

NetworkCredentialBinding: Binds a policy endpoint to static credentials from a sandbox provider.

NetworkEndpoint: A network endpoint (host + port) with optional L7 inspection config.

NetworkMiddlewareConfig: A reusable middleware config selected for admitted egress by host.

NetworkPolicyRule: A named network access policy rule.

ProcessPolicy: Process execution policy.

SandboxConfigSnapshot: Complete effective sandbox configuration delivered to a supervisor. Fields have the same meaning as the identically numbered GetSandboxConfigResponse fields, including fail-closed handling of an unknown policy_validation_failure_mode and treating absent configuration_admitted as not admitted. Move those field comments here when the polling RPC is removed.

SandboxPolicy: Sandbox security policy configuration.

SandboxReflection: Holder for reflection information generated from sandbox.proto

SandboxServiceRoute: Gateway-declared service installed by a supervisor; this does not grant access to arbitrary workload ports or assert application health.

SettingValue: Type-aware setting value for sandbox/gateway settings.

SupervisorMiddlewareService: Connection details for one operator-registered supervisor middleware service. V1 supports plaintext and server-authenticated TLS gRPC.

Enums

NetworkAccessPreset: Shorthand access policy for an inspected network endpoint.

NetworkEnforcementMode: Enforcement behavior for inspected network traffic.

NetworkTlsMode: TLS handling for a network endpoint.

PolicySource: Source used for a sandbox configuration payload.

SettingScope: Scope that currently controls a setting.

SettingValue.ValueOneofCase: Enum of possible cases for the "value" oneof.

SupervisorMiddlewareBinding: An operation/phase pair that the platform can authorize. These identify platform capabilities, not service-owned binding names.

SupervisorMiddlewareBindingPolicy: Operator authority over the bindings in a supervisor middleware manifest.