secretprovider

type EnvRefresher ¶

type EnvRefresher func(ctx context.Context, name string) error

EnvRefresher is an optional hook, consulted by envProvider before it reads a requested variable from the process environment. It lets a higher layer keep a dynamically-managed env var (e.g. a short-lived OAuth bearer token) fresh: the hook may refresh the credential and update os.Setenv for name before the value is read. It is best-effort — errors and a nil hook are ignored, and envProvider still reads whatever value is present afterwards.

This indirection avoids a dependency from this low-level provider package on the CLI's llmconfig package (which owns OAuth refresh); the CLI registers the hook at startup via RegisterEnvRefresher.

type SecretProvider ¶

type SecretProvider struct{}

func NewSecretProvider() SecretProvider

func (sp SecretProvider) GetSecret(ctx context.Context, req *secrets.GetSecretRequest) (*secrets.GetSecretResponse, error)

func (sp SecretProvider) Register(server *grpc.Server)

type SecretProviderProxy ¶ added in v0.19.7

type SecretProviderProxy struct {
	// contains filtered or unexported fields
}

func NewSecretProviderProxy(client secrets.SecretsClient) SecretProviderProxy

func (sp SecretProviderProxy) GetSecret(ctx context.Context, req *secrets.GetSecretRequest) (*secrets.GetSecretResponse, error)

func (sp SecretProviderProxy) Register(server *grpc.Server)

type SecretResolver ¶

type SecretResolver func(context.Context, string) ([]byte, error)

func ResolverForID(id string) (SecretResolver, string, error)