mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-21 06:11:31 +08:00
Roland HussandDrew Newberry
8dc55e21ee
* feat(sdk/go): complete Go SDK with domain clients, auth, and hardening Add the Go SDK implementation covering all gateway RPC services with domain-typed clients, comprehensive OIDC authentication flows, fake test doubles, and proto converters. Domain clients: Sandbox, Provider, Exec, File, TCP, SSH, Policy, Profile, Health, Service, Config, Workspace, Inference, Refresh. Each client validates inputs, resolves sandboxes by name, and converts between domain types and proto at the boundary. Auth: OIDC authorization code (PKCE), device code (RFC 8628), and client credentials (RFC 6749 Section 4.4) flows with gateway config auto-resolution. Token refresh with singleflight deduplication and exponential backoff. Edge tunnel proxy for gRPC-over-WebSocket. Gateway: On-disk gateway discovery with user/system directory precedence, lazy token loading, and auth mode mapping. Testing: In-memory fake client with deep-copy isolation, watch broadcasting with filtering, and workspace-scoped object stores. Bufconn-based gRPC tests for all domain clients. Ref: #2044 Signed-off-by: Roland Huß <rhuss@redhat.com> * feat(sdk/go): add gateway client options for logger, timeout, and retry Add WithLogger, WithTimeout, and WithRetryPolicy options to the gateway package's NewClient function. These forward the corresponding Config fields (Logger, Timeout, RetryPolicy) through to the underlying SDK client, giving callers full control over observability, connection timeouts, and retry behavior when constructing clients from on-disk gateway configurations. Also adds RetryPolicy type to types package and extends Config with the three new fields. * fix(mise): sync sccache lock entry Signed-off-by: Drew Newberry <anewberry@nvidia.com> --------- Signed-off-by: Roland Huß <rhuss@redhat.com> Signed-off-by: Drew Newberry <anewberry@nvidia.com> Co-authored-by: Drew Newberry <anewberry@nvidia.com>
37 lines
1.5 KiB
Go
37 lines
1.5 KiB
Go
// SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package gateway
|
|
|
|
import "errors"
|
|
|
|
// Sentinel errors for gateway configuration failures. All wrapped errors
|
|
// returned by this package support classification via [errors.Is].
|
|
var (
|
|
// ErrGatewayNotFound is returned when no gateway directory exists
|
|
// in either the user or system config paths.
|
|
ErrGatewayNotFound = errors.New("gateway: not found")
|
|
|
|
// ErrConfigParse is returned when metadata.json is missing,
|
|
// unreadable, or contains invalid JSON.
|
|
ErrConfigParse = errors.New("gateway: config parse error")
|
|
|
|
// ErrTokenLoad is returned when a token file (edge_token,
|
|
// oidc_token.json) is missing, unreadable, or malformed.
|
|
ErrTokenLoad = errors.New("gateway: token load error")
|
|
|
|
// ErrUnsupportedAuthMode is returned when the auth_mode value in
|
|
// metadata.json is not recognized (not none, plaintext,
|
|
// cloudflare_jwt, oidc, or mtls).
|
|
ErrUnsupportedAuthMode = errors.New("gateway: unsupported auth mode")
|
|
|
|
// ErrInvalidGatewayName is returned when a gateway name fails
|
|
// validation (empty, contains path separators, dots, or
|
|
// non-ASCII-alnum-dash-underscore characters).
|
|
ErrInvalidGatewayName = errors.New("gateway: invalid gateway name")
|
|
|
|
// ErrNoActiveGateway is returned when no active gateway is
|
|
// configured (active_gateway file missing or empty).
|
|
ErrNoActiveGateway = errors.New("gateway: no active gateway")
|
|
)
|