mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-15 05:09:44 +08:00
Seth Jennings
4c1b16a4a1
* feat(server): add operator-only provider credential retrieval Authenticate operators exclusively through verified direct gateway mTLS. Export selected runtime credentials with freshness validation and all-or-nothing delivery. Coordinate refresh across callers and replicas, preserve rotated grants across RPC cancellation, and fence credential delivery against reconfiguration. Add generated bindings, security and regression tests, and operator documentation. Signed-off-by: Seth Jennings <sjenning@redhat.com> * feat(sdk): add curated operator credential retrieval Expose provider credential clients in Python and TypeScript with explicit workspace and key selection, freshness options, optional expiration, and preserved gateway errors. Reuse existing mTLS transports without introducing retries or secret caching. Add generated-wire and error-mapping tests, SDK package validation, and operator usage documentation. Signed-off-by: Seth Jennings <sjenning@redhat.com> * fix(server): honor recovery state for queued automatic refreshes Signed-off-by: Seth Jennings <sjenning@redhat.com> --------- Signed-off-by: Seth Jennings <sjenning@redhat.com>
68 lines
1.5 KiB
Python
68 lines
1.5 KiB
Python
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
"""OpenShell - Agent execution and management SDK."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from .errors import ErrorInfo, FieldViolation, GatewayError, from_grpc_error
|
|
from .mutations import DeletionOutcome, DeletionResult
|
|
from .providers import ProviderClient, ProviderCredentialValue
|
|
from .sandbox import (
|
|
ClientCredentialsAuth,
|
|
ExecChunk,
|
|
ExecResult,
|
|
Page,
|
|
Pager,
|
|
Sandbox,
|
|
SandboxClient,
|
|
SandboxError,
|
|
SandboxRef,
|
|
SandboxSession,
|
|
SandboxStatusRef,
|
|
SandboxTemplateClient,
|
|
SandboxWorkloadTemplateProvenanceRef,
|
|
ServiceAuthorizationMode,
|
|
ServiceExposure,
|
|
TlsConfig,
|
|
WorkspaceClient,
|
|
WorkspaceRef,
|
|
)
|
|
|
|
try:
|
|
from importlib.metadata import version
|
|
|
|
__version__ = version("openshell")
|
|
except Exception:
|
|
__version__ = "0.0.0"
|
|
|
|
__all__ = [
|
|
"ClientCredentialsAuth",
|
|
"DeletionOutcome",
|
|
"DeletionResult",
|
|
"ErrorInfo",
|
|
"ExecChunk",
|
|
"ExecResult",
|
|
"FieldViolation",
|
|
"GatewayError",
|
|
"Page",
|
|
"Pager",
|
|
"ProviderClient",
|
|
"ProviderCredentialValue",
|
|
"Sandbox",
|
|
"SandboxClient",
|
|
"SandboxError",
|
|
"SandboxRef",
|
|
"SandboxSession",
|
|
"SandboxStatusRef",
|
|
"SandboxTemplateClient",
|
|
"SandboxWorkloadTemplateProvenanceRef",
|
|
"ServiceAuthorizationMode",
|
|
"ServiceExposure",
|
|
"TlsConfig",
|
|
"WorkspaceClient",
|
|
"WorkspaceRef",
|
|
"__version__",
|
|
"from_grpc_error",
|
|
]
|