mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-30 07:33:59 +08:00

Files

T

Eric Curtin 5620c8b229 refactor: deduplicate repeated patterns across crates (#1499 )

Remove ~280 lines of duplicated code across 30 files in 5 areas:

- centered_rect: consolidate 5 identical TUI layout helpers into a
  single pub fn in openshell-tui/src/ui/mod.rs
- server test helpers: replace ~100 inline Store::connect() calls
  with local test_store() helpers; deduplicate test_server_state()
  in grpc/service.rs to use the shared test_support version
- rogue PKI: extract 20-line rogue CA+client cert generation block
  (duplicated in two integration tests) into generate_rogue_pki()
  in tests/common/mod.rs
- provider tests: replace 8 identical 28-line test modules with a
  single macro_rules! test_discovers_env_credential! invocation
- label constants: centralize openshell.ai/ container label keys
  in openshell-core::driver_utils; update Docker and Kubernetes
  drivers to import from there instead of redefining them locally

2026-05-21 10:50:49 -07:00

src

refactor: deduplicate repeated patterns across crates (#1499 )

2026-05-21 10:50:49 -07:00

Cargo.toml

feat(providers): add custom profile registry (#1170 )

2026-05-07 09:41:25 -07:00

README.md

docs(architecture): reset subsystem docs (#1184 )

2026-05-07 08:59:02 -07:00

README.md

openshell-providers

Provider discovery and normalization for credentials that sandboxes need at runtime.

The gateway persists provider records. The sandbox supervisor fetches resolved provider environment from the gateway and injects credentials into agent child processes. This crate keeps provider-specific discovery and normalization logic out of the CLI and gateway control flow.

Responsibilities

Discover local credentials from environment variables and known config files.
Normalize discovered data into provider records.
Keep provider-specific parsing rules in provider modules.
Avoid logging credential values.

Non-Responsibilities

Persisting provider records.
Authorizing provider CRUD operations.
Injecting credentials into sandbox child processes.
Routing inference requests.

Those are owned by the gateway, sandbox supervisor, and router.

Security Notes

Provider data often contains API keys, bearer tokens, or local account configuration. Discovery code should return structured values without printing or tracing secrets. Callers that display provider data must redact sensitive fields by default.