Documentation
¶
Overview ¶
Package tokens maintains a per-AgentSession bearer-token registry. The memory HTTP handler uses Lookup to authenticate; the operator's AgentSession reconciler calls Set on EVERY reconcile of a live session and Revoke on deletion.
Every map here is process memory, and nothing rebuilds it at startup: a restarted operator begins with an empty registry while the per-session Secret holding each token — and every client presenting one — survives untouched. Re-installing a session's token is therefore the reconciler's job on every pass, not only at creation (see the reconciler's reregisterMemoryToken, which reads the durable value back out of the Secret). Set on creation alone once left a finished session's memory unreadable for the rest of the operator's life, answering every read with a bare 401.
Index ¶
- type Registry
- func (r *Registry) Authorizes(token string, key memory.NamespacedName) bool
- func (r *Registry) AuthorizesMutation(token string, key memory.NamespacedName) bool
- func (r *Registry) IsAuthzdToken(token string) bool
- func (r *Registry) IsChannelsdToken(token string) bool
- func (r *Registry) IsWebdToken(token string) bool
- func (r *Registry) Lookup(token string) (memory.NamespacedName, bool)
- func (r *Registry) LookupInfo(token string) (TokenInfo, bool)
- func (r *Registry) PublisherKey(publisher, keyID string) (ed25519.PublicKey, bool)
- func (r *Registry) Registered(k memory.NamespacedName) bool
- func (r *Registry) Revoke(k memory.NamespacedName)
- func (r *Registry) Set(k memory.NamespacedName, token string, callerID string, ...)
- func (r *Registry) SetAuthzdToken(token string)
- func (r *Registry) SetChannelsdToken(token string)
- func (r *Registry) SetPublisherKey(publisher, keyID string, pub ed25519.PublicKey)
- func (r *Registry) SetWebdToken(token string)
- type TokenInfo
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Registry ¶
type Registry struct {
// contains filtered or unexported fields
}
func NewRegistry ¶
func NewRegistry() *Registry
func (*Registry) Authorizes ¶
func (r *Registry) Authorizes(token string, key memory.NamespacedName) bool
Authorizes reports whether token is registered AND key is one of the session paths it was registered for (the primary or any extra).
This is the READ answer. It says "this token may look at key's data"; it does NOT say the token may change it — see AuthorizesMutation.
func (*Registry) AuthorizesMutation ¶
func (r *Registry) AuthorizesMutation(token string, key memory.NamespacedName) bool
AuthorizesMutation reports whether token may CHANGE data under key: write an entry, delete one, or send a signal into the scope.
Only the token's PRIMARY session qualifies. The extras Set registers are READ scopes — a runner holds them to fetch artifacts produced by ToolCalls it dispatched against per-bundle SpiceboxSessions, and nothing in the runner writes into one. Answering a mutation with Authorizes instead would let a runner's token Put and DELETE across every bundle scope it was registered with — a strictly wider surface than its own session.
func (*Registry) IsAuthzdToken ¶
IsAuthzdToken returns true if the bearer matches the configured authzd token.
func (*Registry) IsChannelsdToken ¶
IsChannelsdToken returns true if the bearer matches the system channelsd token (and the token has been configured). A channelsd token is authorized for GET (read transcript) and POST (append turn) on any session; DELETE remains denied.
func (*Registry) IsWebdToken ¶
IsWebdToken returns true if the bearer matches the configured webd token. Callers MUST gate it to read operations only — this method reports identity, not authorization. httpsrv does so at both entry points in one vocabulary: ServeHTTP derives a route's access from memoryRouteAccess, and the routes mounted beside /memory/* pass their access to checkSystemBearer, which refuses this token on anything but a read. Reducing the question to "is it a system token?" reintroduces the defect this doc exists to prevent (/inbound-asset once accepted this token on a POST).
func (*Registry) Lookup ¶
func (r *Registry) Lookup(token string) (memory.NamespacedName, bool)
Lookup resolves token to its primary session.
func (*Registry) LookupInfo ¶
LookupInfo resolves token to its full TokenInfo including CallerID.
func (*Registry) PublisherKey ¶
PublisherKey implements provenance.PublisherKeyLookup.
func (*Registry) Registered ¶
func (r *Registry) Registered(k memory.NamespacedName) bool
Registered reports whether k currently has a token installed. It answers "does this process still know this session's bearer?", which is the question a restarted operator asks before paying to read the token back out of the session's Secret — the maps above are process memory and start empty, while the Secret and every client holding its value do not.
It deliberately says nothing about WHICH token is installed: the caller that re-registers cannot mint, so a true answer means the durable value was already installed by whoever minted it.
func (*Registry) Revoke ¶
func (r *Registry) Revoke(k memory.NamespacedName)
Revoke removes any token associated with k. Idempotent.
func (*Registry) Set ¶
func (r *Registry) Set(k memory.NamespacedName, token string, callerID string, extras ...memory.NamespacedName)
Set installs token for k, replacing (and invalidating) any prior token. callerID is the canonical user ID of the token holder (may be empty). extras lists additional session paths the token should authorize for artifact READS (e.g. per-bundle SpiceboxSessions whose artifacts the AgentSession's runner needs to fetch).
"Reads" is a CONTRACT, not a description: an extra scope is a foreign session's data this token may look at, never one it may write into. Authorizes and AuthorizesMutation are the two halves of that — a consumer answering a mutation with Authorizes grants every extra scope full write access.
func (*Registry) SetAuthzdToken ¶
SetAuthzdToken records the system-level authzd token. Accepted for GET (read) and POST (append) on every session; DELETE remains denied. Empty string disables.
func (*Registry) SetChannelsdToken ¶
SetChannelsdToken records the system-level channelsd token. It is accepted for GET (read transcript) and POST (append turn) on every session. DELETE remains denied — only per-session bearers may delete a session's memory. Setting an empty string disables it.
func (*Registry) SetPublisherKey ¶
SetPublisherKey registers (or appends) a public key for a publisher (caller ID). Old keys remain valid for verifying old entries.
func (*Registry) SetWebdToken ¶
SetWebdToken records the system-level webd token. Unlike the channelsd and authzd tokens, it is READ-ONLY: accepted for reads on any session (so webd can serve the browser artifact view) but never for writes or publisher-key registration. webd is browser-facing, so it must not hold a credential that can append to or forge the audit log. Empty string disables it.
type TokenInfo ¶
type TokenInfo struct {
Session memory.NamespacedName
CallerID string
}
TokenInfo holds the session identity and optional caller ID associated with a token.
Source Files