mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-26 06:52:57 +08:00
Drew Newberry
77929d9c14
* feat(isolation): publish backend protocol contracts independently of runtime Signed-off-by: Drew Newberry <anewberry@nvidia.com> * feat(isolation): expose trusted launch and registry data contracts Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(isolation): name the required capability sandbox Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(sandbox): align protocol and compute capability names Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(sandbox): finalize public protocol contract names Signed-off-by: Drew Newberry <anewberry@nvidia.com> * feat(isolation)!: activate backend contracts in sandbox runtime and driver selection Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(sandbox): simplify runtime and fix backend example Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(examples): organize WASI backend in Rust Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(sandbox): defer protocol conformance fixtures Signed-off-by: Drew Newberry <anewberry@nvidia.com> * feat(examples): add supervised V8 backend demo Signed-off-by: Drew Newberry <anewberry@nvidia.com> * fix(examples): stream V8 guest output with default policy Signed-off-by: Drew Newberry <anewberry@nvidia.com> * fix(examples): handle V8 rejections and roll back failed launches Signed-off-by: Drew Newberry <anewberry@nvidia.com> * fix(examples): align V8 crypto dependencies with CI AWS-LC Signed-off-by: Drew Newberry <anewberry@nvidia.com> * feat(sandbox): represent Sandbox Protocol operations in protobuf Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(isolation): replace backend traits with RPC clients Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(proto): remove legacy isolation protocol reservations Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(proto): clarify Sandbox Protocol names Signed-off-by: Drew Newberry <anewberry@nvidia.com> * docs(isolation): clarify authentication bootstrap and supervisor APIs Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(isolation): simplify policy enforcement confirmation Signed-off-by: Drew Newberry <anewberry@nvidia.com> * fix(sandbox): rotate launch generations and stabilize retry sessions Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(sandbox): remove redundant backend adapters and TCP flags Signed-off-by: Drew Newberry <anewberry@nvidia.com> * fix(sandbox): repair Docker restarts and macOS lint Signed-off-by: Drew Newberry <anewberry@nvidia.com> * refactor(isolation): simplify RPC contracts and backend registration Signed-off-by: Drew Newberry <anewberry@nvidia.com> * fix(sandbox): deliver TCP denials before closing the RPC Signed-off-by: Drew Newberry <anewberry@nvidia.com> --------- Signed-off-by: Drew Newberry <anewberry@nvidia.com>
74 lines
2.5 KiB
Markdown
74 lines
2.5 KiB
Markdown
# openshell-core
|
|
|
|
Shared types, constants, configuration, and helpers used across OpenShell
|
|
crates.
|
|
|
|
## Isolation registrations
|
|
|
|
`isolation_registration` owns the operator registry's backend names, byte-stream
|
|
endpoints, and shared validation. Its fallible conversions carry registrations
|
|
through the compute-driver protobuf and back into the supervisor's JSON launch
|
|
file. These routes contain no credentials or driver-owned launch coordinates.
|
|
|
|
## Object Metadata
|
|
|
|
Top-level user-facing objects use a Kubernetes-style metadata convention. The
|
|
metadata shape provides:
|
|
|
|
- Stable server-generated ID.
|
|
- Human-readable name.
|
|
- Creation timestamp.
|
|
- Optional labels for filtering and automation.
|
|
|
|
Code that works with object metadata should use the traits in
|
|
`openshell_core::metadata` instead of reaching into protobuf fields directly:
|
|
|
|
```rust
|
|
use openshell_core::{ObjectId, ObjectLabels, ObjectName};
|
|
|
|
let id = sandbox.object_id();
|
|
let name = sandbox.object_name();
|
|
let labels = sandbox.object_labels();
|
|
```
|
|
|
|
Trait methods must tolerate missing metadata and return safe empty values rather
|
|
than panicking.
|
|
|
|
## Label Rules
|
|
|
|
Labels follow Kubernetes-style key and value conventions:
|
|
|
|
- Keys may include an optional DNS-prefix followed by `/`.
|
|
- Names are limited to alphanumeric characters plus `-`, `_`, and `.`.
|
|
- Values use the same character set and may be empty.
|
|
- Selectors use comma-separated `key=value` pairs with AND semantics.
|
|
|
|
Validate labels at API ingress before persisting objects.
|
|
|
|
## Inference Profiles
|
|
|
|
Provider inference profiles live in this crate so the gateway, sandbox, and
|
|
router agree on provider defaults. Profiles define:
|
|
|
|
- Auth header style.
|
|
- Default upstream headers.
|
|
- Client-supplied passthrough headers.
|
|
- Supported inference protocol shapes.
|
|
|
|
Do not duplicate provider-specific inference behavior in callers. Add shared
|
|
behavior here, then consume it from the gateway, sandbox, and router.
|
|
|
|
## Middleware Contracts
|
|
|
|
Built-in supervisor middleware identifiers, host-selector matching, and pure
|
|
configuration validation live in `openshell_core::middleware`. Policy admission
|
|
and the supervisor runtime consume the same contract without introducing a
|
|
dependency from the policy crate to the supervisor implementation.
|
|
|
|
## Protobuf Struct Conversion
|
|
|
|
Use `openshell_core::proto_struct` when crossing between `serde_json` values and
|
|
`prost_types::{Struct, Value}`. Both conversion directions live in this module;
|
|
JSON-to-protobuf conversion is fallible so callers cannot silently replace an
|
|
unrepresentable number.
|