cloudserver

Sep 18, 2026

Changes in this version

+ var ErrDashboardSessionCodecRequired = errors.New("dashboard session codec is required for dashboard auth")

+ func PrincipalFromContext(ctx context.Context) (cloudauth.Principal, bool)

+ func WithPrincipal(ctx context.Context, principal cloudauth.Principal) context.Context

+ type AdminIdentityStore interface

+ CreateHumanUser func(ctx context.Context, params cloudstore.CreateHumanUserParams) (cloudstore.HumanUser, error)

+ CreatePrincipalTokenWithAudit func(ctx context.Context, params cloudstore.CreatePrincipalTokenParams, ...) (cloudstore.PrincipalToken, error)

+ CreateProjectGrant func(ctx context.Context, params cloudstore.CreateProjectGrantParams) (cloudstore.ProjectGrant, error)

+ InsertAuthAuditEvent func(ctx context.Context, event cloudstore.AuthAuditEvent) error

+ ListHumanUsers func(ctx context.Context) ([]cloudstore.HumanUser, error)

+ ListPrincipalTokens func(ctx context.Context, principalID string) ([]cloudstore.PrincipalToken, error)

+ ListProjectGrants func(ctx context.Context, principalID string) ([]cloudstore.ProjectGrant, error)

+ RevokePrincipalToken func(ctx context.Context, tokenID, revokedByPrincipalID, reason string) error

+ RevokeProjectGrant func(ctx context.Context, principalID, project string) error

+ SetHumanUserEnabled func(ctx context.Context, principalID string, enabled bool) error

+ type Authenticator interface

+ Authorize func(r *http.Request) error

+ type ChunkStore interface

+ KnownSessionIDs func(ctx context.Context, project string) (map[string]struct{}, error)

+ ReadChunk func(ctx context.Context, project, chunkID string) ([]byte, error)

+ ReadManifest func(ctx context.Context, project string) (*engramsync.Manifest, error)

+ WriteChunk func(ctx context.Context, project, chunkID, createdBy, clientCreatedAt string, ...) error

+ type CloudServer struct

+ func New(store ChunkStore, authSvc Authenticator, port int, opts ...Option) *CloudServer

+ func (s *CloudServer) Handler() http.Handler

+ func (s *CloudServer) Start() error

+ type EnrolledProjectsProvider interface

+ EnrolledProjects func() []string

+ type MutationEntry = cloudstore.MutationEntry

+ type MutationStore interface

+ InsertMutationBatch func(ctx context.Context, batch []cloudstore.MutationEntry) ([]int64, error)

+ IsProjectSyncEnabled func(project string) (bool, error)

+ ListMutationsSince func(ctx context.Context, sinceSeq int64, limit int, allowedProjects []string) ([]cloudstore.StoredMutation, bool, int64, error)

+ type Option func(*CloudServer)

+ func WithAdminIdentityStore(store AdminIdentityStore) Option

+ func WithDashboardAdminToken(adminToken string) Option

+ func WithHost(host string) Option

+ func WithManagedTokenHasher(hasher *cloudauth.ManagedTokenHasher) Option

+ func WithMaxPushBodyBytes(limit int64) Option

+ func WithPrincipalProjectAuthorizer(authorizer PrincipalProjectAuthorizer) Option

+ func WithPrincipalStateStore(store principalStateStore) Option

+ func WithProjectAuthorizer(authorizer ProjectAuthorizer) Option

+ func WithSyncStatusProvider(provider dashboard.SyncStatusProvider) Option

+ type PrincipalProjectAuthorizer interface

+ AuthorizeProjectForPrincipal func(ctx context.Context, principal cloudauth.Principal, project string) error

+ EnrolledProjectsForPrincipal func(ctx context.Context, principal cloudauth.Principal) ([]string, error)

+ type ProjectAuthorizer interface

+ AuthorizeProject func(project string) error

+ type StoredMutation = cloudstore.StoredMutation