Kibotos
API reference

API reference

This page lists the packages of the Kibotos API that applications call: kibotos.ctrl.v1 for Workspaces and their data, kibotos.operator.v1 for operating the deployment, and kibotos.enrollment.v1 for obtaining an identity. Each service has a page, generated from the proto file and the comments in it, that lists its methods together with the request and response of each.

Every method is a Connect RPC at the path shown in its section, called on the endpoint its service names. The node data plane also serves two HTTP endpoints, listed at the end. For how to authenticate and call them, see API overview.

kibotos.ctrl.v1

ServiceEndpointDescription
ServerInfoServicectrl APIServerInfoService exposes the source revision this endpoint was built from and the capabilities it serves, so a client can check them before it starts a business operation.
TemplateServicectrl APITemplateService exposes the deployment catalog without revealing private delivery or materialization details.
WorkspaceServicectrl APIWorkspaceService owns the Native Workspace lifecycle and stable identity.
VolumeServicectrl APIVolumeService owns the Native logical Volume lifecycle.
ExposureServicectrl APIExposureService turns one HTTP port inside a guest into a stable public hostname.
EgressServicectrl APIEgressService owns caller-owned egress endpoints.
ResolverServicectrl APIResolverService owns caller-chosen DNS upstreams.
TransferServicectrl APITransferService owns Workspace transfer intent and provider-neutral artifact metadata.
WorkspaceObservationServicectrl APIWorkspaceObservationService reports deletion cleanup without exposing execution or host implementation identities.
WorkspaceMetricsServicectrl APIWorkspaceMetricsService reads a Workspace's resource readings back from the deployment's metrics store.
DataPlaneSessionServicectrl APIDataPlaneSessionService issues short-lived credentials for one available workspace.
ServiceConnectionServiceNode data planeServiceConnectionService transports raw bytes to one precisely authorized guest service.
FilesystemServiceNode data planeFilesystemService performs metadata operations on the Workspace filesystem: stat, listing, directory creation, move, removal, and directory watching.
ProcessServiceNode data planeProcessService owns reconnectable pipe and PTY processes.
DesktopServiceNode data planeDesktopService captures the Workspace desktop and delivers pointer and keyboard input to it.

kibotos.operator.v1

ServiceEndpointDescription
ArtifactPublicationServicectrl APIArtifactPublicationService is an Operator-only, single-kind artifact publication API.
TemplateLifecycleServicectrl APITemplateLifecycleService is an Operator-only admission surface.
TemplateCatalogServicectrl APITemplateCatalogService is the Operator-only Template catalog admission surface: it answers which revisions a Template may be created from and which one it defaults to, and it carries the three named catalog changes.
NodeRegistrationServicectrl APINodeRegistrationService is the Operator-only view and desired-state surface for nodes admitted to this control plane.
PlatformCatalogServicectrl APIPlatformCatalogService is the Operator-only Platform catalog surface: it answers what has been registered, which revision each PlatformKey currently defaults to, and it carries the three named catalog changes.
ArtifactRetentionServicectrl APIArtifactRetentionService is the Operator-only reclamation surface for the artifact store.
EnrollmentGrantServicectrl APIEnrollmentGrantService lets an authenticated Operator create one-time enrollment grants for other Operators or for exact node IDs, and revoke a principal.

kibotos.enrollment.v1

ServiceEndpointDescription
EnrollmentServiceOperator API and node APIEnrollmentService is mounted on both the Operator API and the node API.

HTTP endpoints

Besides its Connect services, the node data plane serves these endpoints at the endpoint of a data-plane session.

EndpointDescription
/v1/filesReads and writes the content of one file in the guest.
/v1/serviceConnects to one TCP loopback port or Unix stream socket in the guest over a WebSocket.

On this page