mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-17 05:31:16 +08:00

Files

T

History

Eric Curtin b332ffdf7d refactor: deduplicate shared driver and provider constants (#1474 )

Move default_sandbox_image() and SUPERVISOR_IMAGE_BINARY_PATH into
openshell-core so all compute drivers share a single authoritative
definition. Eliminates four identical copies of default_sandbox_image()
and two identical copies of SUPERVISOR_IMAGE_BINARY_PATH.

Implement ProviderPlugin for ProviderDiscoverySpec to remove the
repeated three-method delegation boilerplate from eight simple
provider modules. Each now declares only a SPEC constant; the blanket
impl handles id(), discover_existing(), and credential_env_vars().

2026-05-20 09:24:57 -07:00

src

refactor: deduplicate shared driver and provider constants (#1474 )

2026-05-20 09:24:57 -07:00

Cargo.toml

feat(providers): add custom profile registry (#1170 )

2026-05-07 09:41:25 -07:00

README.md

docs(architecture): reset subsystem docs (#1184 )

2026-05-07 08:59:02 -07:00

README.md

openshell-providers

Provider discovery and normalization for credentials that sandboxes need at runtime.

The gateway persists provider records. The sandbox supervisor fetches resolved provider environment from the gateway and injects credentials into agent child processes. This crate keeps provider-specific discovery and normalization logic out of the CLI and gateway control flow.

Responsibilities

Discover local credentials from environment variables and known config files.
Normalize discovered data into provider records.
Keep provider-specific parsing rules in provider modules.
Avoid logging credential values.

Non-Responsibilities

Persisting provider records.
Authorizing provider CRUD operations.
Injecting credentials into sandbox child processes.
Routing inference requests.

Those are owned by the gateway, sandbox supervisor, and router.

Security Notes

Provider data often contains API keys, bearer tokens, or local account configuration. Discovery code should return structured values without printing or tracing secrets. Callers that display provider data must redact sensitive fields by default.