bridge

type AgentAuthenticator ¶

type AgentAuthenticator = types.AgentAuthenticator

AgentAuthenticator validates an incoming agent hello and returns tenant and agent IDs. Implementations may look up secrets in a datastore or config map.

type AgentConnection ¶

type AgentConnection = types.AgentConnection

Exported via types for external consumers.

type AgentRegistry ¶

type AgentRegistry = types.AgentRegistry

type FileAuthenticator ¶

type FileAuthenticator struct {
	// contains filtered or unexported fields
}

FileAuthenticator reads agent credentials from a YAML/JSON file. Schema: list of {clientID, clientSecret, tenantID, agentID}

func NewFileAuthenticator(path string) (*FileAuthenticator, error)

func (f *FileAuthenticator) Authenticate(_ context.Context, clientID, clientSecret string, tenantID string) (string, string, error)

func (f *FileAuthenticator) Reload() error

func (f *FileAuthenticator) Upsert(clientID string, secret StaticAgentSecret)

type InMemoryRegistry ¶

type InMemoryRegistry struct {
	// contains filtered or unexported fields
}

InMemoryRegistry is a simple in-process registry suitable for single-instance deployments.

func NewInMemoryRegistry() *InMemoryRegistry

func (r *InMemoryRegistry) ObserveQuery(tenantID, agentID string, latency time.Duration)

func (r *InMemoryRegistry) Pick(ctx context.Context, tenantID string) (AgentConnection, error)

func (r *InMemoryRegistry) Register(ctx context.Context, tenantID string, agentID string, conn AgentConnection) error

func (r *InMemoryRegistry) Stats() RegistryStats

func (r *InMemoryRegistry) Unregister(ctx context.Context, tenantID string, agentID string)

type LatencyAgg ¶

type LatencyAgg = types.LatencyAgg

type MutableAuthenticator ¶

type MutableAuthenticator interface {
	AgentAuthenticator
	Upsert(clientID string, secret StaticAgentSecret)
}

MutableAuthenticator allows in-memory secret updates (e.g., secret rotation without restart).

type RegistryKey ¶

type RegistryKey = types.RegistryKey

type RegistryStats ¶

type RegistryStats = types.RegistryStats

type ReloadableAuthenticator ¶

type ReloadableAuthenticator interface {
	AgentAuthenticator
	Reload() error
}

ReloadableAuthenticator optionally supports live reload of credentials.

type Server ¶

type Server struct {
	proto.UnimplementedAgentServiceServer
	// contains filtered or unexported fields
}

Server implements the AgentService gRPC handlers.

func NewServer(auth AgentAuthenticator, registry AgentRegistry, logger *slog.Logger, opts ...ServerOption) *Server

func (s *Server) Connect(stream proto.AgentService_ConnectServer) error

func (s *Server) SetAgentConfig(cfg *proto.AgentConfig, broadcast bool, tenant string, clientID string) int

type ServerOption ¶

type ServerOption func(*Server)

func WithAgentConfig(cfg *proto.AgentConfig) ServerOption

func WithAutoConnectOnRegister(enabled bool) ServerOption

type StaticAgentSecret ¶

type StaticAgentSecret struct {
	ClientSecret string
	TenantID     string
	AgentID      string
}

type StaticAuthenticator ¶

type StaticAuthenticator struct {
	Secrets map[string]StaticAgentSecret
	// contains filtered or unexported fields
}

StaticAuthenticator is a simple map-based authenticator for bootstrapping and tests.

func (a *StaticAuthenticator) Authenticate(ctx context.Context, clientID, clientSecret string, tenantID string) (string, string, error)

func (a *StaticAuthenticator) Upsert(clientID string, secret StaticAgentSecret)