Bascule shell runtime workspace — governed shell access layer for Substrate/Guildhouse FFC deployments. Crates: - bascule-agent: node agent with SSH server + command filtering - bascule-core: audit, grant engine, ceremony types, session - bascule-filter-core: log line filtering (stdio protocol) - bascule-gateway: OIDC auth, session management, SAT validation - bascule-node-agent: k8s DaemonSet agent (pod watcher, BPF manager) - bascule-proto: protobuf definitions - bascule-shell: governed SSH shell (commands, elevation, REPL) - bascule-tail: chronicle log tail + fanout - ceremony-engine: ceremony lifecycle (6 types + request/resolution) 172 tests passing. Implements SBS-SPEC-0001 shell model. Reference impl for SPEC-SHELLOPS-0001 Layer 1 (root shell).
20 lines
785 B
Protocol Buffer
20 lines
785 B
Protocol Buffer
syntax = "proto3";
|
|
package bascule.v1;
|
|
|
|
import "bascule/v1/session.proto";
|
|
import "bascule/v1/command.proto";
|
|
|
|
service BasculeGateway {
|
|
// Session lifecycle
|
|
rpc RequestSession (RequestSessionRequest) returns (RequestSessionResponse);
|
|
rpc GetSessionStatus (GetSessionStatusRequest) returns (GetSessionStatusResponse);
|
|
rpc EndSession (EndSessionRequest) returns (EndSessionResponse);
|
|
rpc GetCeremonyStatus (GetCeremonyStatusRequest) returns (GetCeremonyStatusResponse);
|
|
|
|
// Command execution
|
|
rpc ExecuteCommand (ExecuteCommandRequest) returns (ExecuteCommandResponse);
|
|
rpc StreamCommand (ExecuteCommandRequest) returns (stream CommandStreamChunk);
|
|
|
|
// Discovery
|
|
rpc DiscoverCommands (DiscoverCommandsRequest) returns (DiscoverCommandsResponse);
|
|
}
|