server

package

Go to main page

Versions in this module

v0

v0.6.1

Nov 3, 2026

v0.6.0

Nov 2, 2026

Changes in this version

+ const DefaultCheckpointInterval

+ const DefaultRetentionInterval

+ const MinAuditRetention

+ var DefaultSAMLGroupsAttributes = []string

+ func LoadExport(path string) (map[uint64]ExportedEntry, error)

type AuditEntry

+ Redacted bool

+ func LastCheckpoint(path string, v bundle.Verifier) (e AuditEntry, ok bool, err error)

type AuditResponse

+ Checkpoints int

+ LastCheckpoint uint64

+ Signed bool

+ type AuditVerifyOptions struct

+ Anchor *AuditEntry

+ Export map[uint64]ExportedEntry

+ RequireCurrentKey bool

+ Verifier bundle.Verifier

type AuditVerifyResult

+ Anchored bool

+ Checkpoints int

+ First uint64

+ LastCheckpoint uint64

+ RedactedSinceExport int

+ UnsignedTail uint64

+ func VerifyAuditExport(path string, o AuditVerifyOptions) (AuditVerifyResult, error)

+ type AuthMethods struct

+ OIDC bool

+ SAML bool

type Config

+ AuditCheckpointInterval time.Duration

+ AuditPreviousKeys []bundle.PublicKeyVerifier

+ AuditSigner bundle.KeySigner

+ AuditSigningEnableHead uint64

+ Retention Retention

+ SAML *SAMLConfig

+ type EraseReport struct

+ DryRun bool

+ Erased map[string]int

+ Errors map[string]string

+ Pseudonym string

+ Retained map[string]string

+ type EraseRequest struct

+ Aliases []string

+ DryRun bool

+ Reason string

+ User string

+ type ExportedEntry struct

+ Digest string

+ Hash string

+ type PendingErasure struct

+ Aliases []string

+ Confirm string

+ ExpiresAt time.Time

+ ID string

+ Reason string

+ RequestedBy string

+ User string

+ type Retention struct

+ Audit time.Duration

+ Devices time.Duration

+ FleetReports time.Duration

+ Interval time.Duration

+ Requests time.Duration

+ type SAMLConfig struct

+ AllowIdPInitiated bool

+ Cert *x509.Certificate

+ EntityID string

+ GroupsAttributes []string

+ IdPMetadata []byte

+ Key crypto.Signer

+ UserAttribute string

type Server

+ func (s *Server) Checkpoint(ctx context.Context) (bool, error)

+ func (s *Server) RunMaintenance(ctx context.Context)

+ func (s *Server) Sweep(ctx context.Context) (map[string]int, error)

v0.5.2

Nov 2, 2026

Changes in this version

+ const DefaultAPIBurst

+ const DefaultAPIRate

type Config

+ APIBurst int

+ APIRate float64

v0.5.1

Nov 1, 2026

v0.5.0

Oct 31, 2026

Changes in this version

+ const BreakGlassIterations

+ const BreakGlassMinPassword

+ const BreakGlassSessionTTL

+ const DefaultGraphURL

+ const DefaultServiceTokenMaxTTL

+ const DefaultSessionIdle

+ const DefaultSessionTTL

+ const KindBreakGlass

+ const KindServiceAccount

+ const MaxServiceTokenMaxTTL

+ const MaxSessionTTL

+ const MinSessionIdle

+ const MinSessionTTL

+ const ServiceAccountPrefix

+ const ServiceTokenPrefix

+ func CheckBreakGlassCIDRs(cidrs []netip.Prefix) error

+ func HashBreakGlassPassword(password string) (string, error)

+ func OpenAPI() ([]byte, error)

+ type BreakGlass struct

+ AllowedCIDRs []netip.Prefix

+ Enabled bool

+ Hash string

+ User string

+ type BreakGlassLogin struct

+ Password string

+ User string

type Capabilities

+ Bindings []policy.Grant

type CatalogItem

+ Ticket []string

type Config

+ BreakGlass BreakGlass

+ EntraGraphURL string

+ ServiceTokenMaxTTL time.Duration

+ Session SessionPolicy

+ type CreateServiceTokenRequest struct

+ Description string

+ Name string

+ Owner string

+ Role string

+ Scope json.RawMessage

+ TTL string

+ type CreateServiceTokenResponse struct

+ ServiceToken ServiceTokenInfo

+ Token string

type Portal

+ PolicyForge string

+ PolicyForgeBaseURL string

type Principal

+ Bindings []policy.Grant

+ Kind string

+ OnBehalfOf string

+ type RevokeServiceTokenRequest struct

+ Reason string

+ type ServiceTokenInfo struct

+ CreatedAt time.Time

+ CreatedBy string

+ Description string

+ Expired bool

+ ExpiresAt time.Time

+ ID string

+ Name string

+ Owner string

+ Principal string

+ RevokeReason string

+ Revoked bool

+ RevokedAt *time.Time

+ RevokedBy string

+ Role string

+ Scope policy.RoleScope

+ type ServiceTokensResponse struct

+ Tokens []ServiceTokenInfo

+ type SessionPolicy struct

+ Idle time.Duration

+ TTL time.Duration

v0.4.1

Oct 30, 2026

v0.4.0

Oct 29, 2026

Changes in this version

+ type CloudAgentsView struct

+ Alerts []cloudagents.Alert

+ Configured map[string]bool

+ Tasks []cloudagents.Task

+ type CloudKillRequest struct

+ DryRun *bool

+ Name string

+ Reason string

+ Scope string

+ type CloudKillResponse struct

+ Actions []cloudagents.Action

+ DryRun bool

+ NextSteps []string

+ Unattributed int

type Config

+ CloudClients cloudagents.Clients

+ CloudWebhookSecrets []string

+ GatewayDLPToken string

+ GatewayDLPTokens map[string]string

+ type FreezeView struct

+ Incident *policy.ActiveFreeze

+ Rings map[string]policy.FreezeStatus

type Request

+ Approvals []policy.Approval

+ Target *policy.ChangeTarget

+ Ticket string

+ type Revocation struct

+ At time.Time

+ By string

+ Expires time.Time

+ JTI string

+ Reason string

+ RevokedBefore *time.Time

+ Subject string

+ type RevocationsResponse struct

+ Revocations []Revocation

+ type RevokeRequest struct

+ JTI string

+ Reason string

+ Subject string

+ type RolloutApprovals struct

+ Approvals []policy.Approval

+ Freeze policy.FreezeStatus

+ Quorum *policy.QuorumResult

+ Rollout string

+ Step string

+ Target policy.ChangeTarget

type Server

+ func (s *Server) IncidentFreeze() (*policy.ActiveFreeze, error)

+ func (s *Server) RolloutGovernance(_ context.Context, org *policy.Org, r *policy.Rollout) (rollout.Governance, error)

+ type SessionsIngest struct

+ Records []ledger.Record

+ type SessionsResponse struct

+ Head string

+ Sessions []ledger.Stored

+ Total int

+ Verified bool

+ VerifyError string

v0.3.0

Oct 24, 2026

Changes in this version

+ const RoleAdmin

+ const RoleApprover

+ const RoleAuditor

+ const RoleOperator

+ const RoleViewer

+ var Roles = []string

+ type AuditConfig struct

+ Export AuditExport

+ Rotation AuditRotation

+ func ParseAuditConfig(r io.Reader) (AuditConfig, error)

+ func (c AuditConfig) Validate() error

type AuditEntry

+ func ChainAuditEntry(e AuditEntry, seq uint64, head string) AuditEntry

+ type AuditExport struct

+ BatchSize int

+ MaxBackoffSeconds int

+ PollIntervalSeconds int

+ Sinks []AuditSink

+ type AuditRotation struct

+ MaxAgeSeconds int64

+ MaxBytes int64

+ type AuditSink struct

+ Address string

+ CAFile string

+ CertFile string

+ Facility int

+ Format string

+ HMACSecret *SecretRef

+ Headers map[string]SecretRef

+ Index string

+ KeyFile string

+ Name string

+ SourceType string

+ TimeoutSeconds int

+ Token *SecretRef

+ Type string

+ URL string

+ type AuditVerifyResult struct

+ Entries uint64

+ Error string

+ Head string

+ Segments int

+ func VerifyAuditBackend(ctx context.Context, b Backend) (AuditVerifyResult, error)

+ func VerifyAuditDir(dir string) (AuditVerifyResult, error)

+ type Backend interface

+ AppendAudit func(ctx context.Context, e AuditEntry) error

+ ApplyBudget func(ctx context.Context, batch string, incs []pgstore.BudgetCounter) (duplicate bool, err error)

+ AuditHead func(ctx context.Context) (uint64, string, error)

+ BudgetCounters func(ctx context.Context, keys [][2]string) ([]pgstore.BudgetCounter, error)

+ ClaimPending func(ctx context.Context, dedupe, requestID string, ...) (bool, error)

+ Docs func(ctx context.Context, kind string) ([][]byte, error)

+ EachAudit func(ctx context.Context, from uint64, fn func(raw []byte, e AuditEntry) bool) error

+ EachAuditDesc func(ctx context.Context, fn func(raw []byte, e AuditEntry) bool) error

+ Leased func(ctx context.Context, name string, ...)

+ Ping func(ctx context.Context) error

+ PruneBudgets func(ctx context.Context, retention time.Duration) (int64, error)

+ ReleasePending func(ctx context.Context, dedupe, requestID string) error

+ RolloutStates func() rollout.StateStore

+ type BudgetsResponse struct

+ At time.Time

+ Budgets []budget.Status

+ type Capabilities struct

+ KillSwitch bool

+ Permissions []string

+ Roles []string

type Config

+ Audit AuditConfig

+ Backend Backend

+ DevRoles []string

+ GatewayBudgetToken string

+ GatewayDirectoryToken string

+ GatewayKillswitchToken string

+ GatewayPostureToken string

+ SCIMAuthoritative bool

+ SCIMStore SCIMStore

+ SCIMTokenSHA256 []string

+ WorkloadKey ed25519.PrivateKey

+ type EgressRequest struct

+ Agent string

+ Skill string

+ URL string

type GitPolicyWriter

+ func (w *GitPolicyWriter) FindPR(ctx context.Context, marker string) (string, bool, error)

+ type ImportReport struct

+ Copied map[string]int64

+ Head string

+ Skipped map[string]int

+ func ImportDataDir(ctx context.Context, dir string, b *PGBackend) (ImportReport, error)

type Me

+ Permissions []string

+ type PGBackend struct

+ LeaseTTL time.Duration

+ func NewPGBackend(db *pgstore.DB) *PGBackend

+ func (b *PGBackend) AppendAudit(ctx context.Context, e AuditEntry) error

+ func (b *PGBackend) EachAudit(ctx context.Context, from uint64, fn func(raw []byte, e AuditEntry) bool) error

+ func (b *PGBackend) EachAuditDesc(ctx context.Context, fn func(raw []byte, e AuditEntry) bool) error

+ func (b *PGBackend) ImportAuditEntry(ctx context.Context, e AuditEntry) error

+ func (b *PGBackend) Leased(ctx context.Context, name string, ...)

+ func (b *PGBackend) RolloutStates() rollout.StateStore

type Principal

+ Roles []string

+ type SCIMEmail struct

+ Primary bool

+ Type string

+ Value string

+ type SCIMGroup struct

+ Created time.Time

+ DisplayName string

+ ExternalID string

+ ID string

+ Members []string

+ Modified time.Time

+ type SCIMName struct

+ FamilyName string

+ Formatted string

+ GivenName string

+ type SCIMStore interface

+ Close func() error

+ DeleteGroup func(id string) error

+ DeleteUser func(id string) error

+ Group func(id string) (SCIMGroup, bool)

+ Groups func() []SCIMGroup

+ Lookup func(userName string) (u SCIMUser, groups []string, ok bool)

+ PutGroup func(SCIMGroup) error

+ PutUser func(SCIMUser) error

+ User func(id string) (SCIMUser, bool)

+ Users func() []SCIMUser

+ func OpenSCIMStore(dir string) (SCIMStore, error)

+ func OpenSCIMStoreOn(ctx context.Context, o storage.Opener, names storage.KV) (SCIMStore, error)

+ type SCIMUser struct

+ Active bool

+ Created time.Time

+ DisplayName string

+ Emails []SCIMEmail

+ ExternalID string

+ ID string

+ Modified time.Time

+ Name *SCIMName

+ UserName string

+ type SecretRef struct

+ Env string

+ File string

type Server

+ func (s *Server) Policy() (*policy.Org, error)

+ func (s *Server) RunAuditExport(ctx context.Context)

+ func (s *Server) WriteMetrics(w io.Writer)

type Store

+ func NewPGStore(db *pgstore.DB) Store

+ type TokenExchangeResponse struct

+ AccessToken string

+ Actors []string

+ ExpiresIn int

+ GatewayURL string

+ Groups []string

+ IssuedTokenType string

+ Models []string

+ Ring string

+ Rule string

+ Subject string

+ TokenType string

v0.2.1

Oct 12, 2026

v0.2.0

Oct 11, 2026

Changes in this version

type Me

+ SupportURL string

+ type MyDevice struct

+ Device Device

+ Expired bool

+ Last *Host

+ type MyDevices struct

+ Devices []MyDevice

+ Posture gateway.PostureVerdict

type Portal

+ SupportURL string

v0.1.1

Oct 4, 2026

v0.1.0

Oct 3, 2026

Changes in this version

+ const DefaultDeviceTTL

+ const DefaultPostureMaxAge

+ const ExpiryWarning

+ const MaxHistory

+ const MaxReportBytes

+ const StatusApproved

+ const StatusApproving

+ const StatusDenied

+ const StatusPending

+ var ErrManual = errors.New("no automatic policy change for this request kind")

+ func AppendAuditOffline(dir, actor, action, target string, details map[string]string, now time.Time) error

+ func CheckSeparateClone(repoDir, servedDir string) error

+ func LoadVerdicts(path string) (map[string]Verdict, error)

+ func VerifyAuditChain(entries []AuditEntry) error

+ type AssignmentRow struct

+ Control bool

+ Experiment string

+ Status string

+ Variant string

+ type AuditEntry struct

+ Action string

+ Actor string

+ Details map[string]string

+ Hash string

+ IP string

+ Prev string

+ RequestID string

+ Seq uint64

+ Target string

+ Time time.Time

+ type AuditResponse struct

+ Entries []AuditEntry

+ Head string

+ Next uint64

+ Total int

+ Verified bool

+ VerifyError string

+ type Catalog struct

+ Harnesses []HarnessPin

+ Items []CatalogItem

+ Launchers []string

+ type CatalogItem struct

+ Desc string

+ Item string

+ Kind string

+ type ChannelRelease struct

+ Channel string

+ Devices int

+ Digest string

+ Error string

+ Expired bool

+ ExpiresAt *time.Time

+ Published bool

+ Seq uint64

+ Stale bool

+ Suspicious bool

+ type Config struct

+ DataDir string

+ DevAdmin bool

+ DevGroups []string

+ DevUser string

+ DeviceTTL time.Duration

+ GatewayToken string

+ KillKey ed25519.PrivateKey

+ KillStore *controller.KillStore

+ Log *slog.Logger

+ Now func() time.Time

+ OIDCClientSecret string

+ PolicyDir string

+ Portal Portal

+ PostureMaxAge time.Duration

+ SessionKey []byte

+ Store Store

+ Token string

+ TrustedProxies []netip.Prefix

+ VerdictsPath string

+ Web fs.FS

+ Writer PolicyWriter

+ type ConvergenceView struct

+ Digests map[string]int

+ OnDigest int

+ Other int

+ Total int

+ type Device struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ Groups []string

+ Hash string

+ ID string

+ LastAuth time.Time

+ LastSeen time.Time

+ Revoked bool

+ UserID string

+ type DeviceDetail struct

+ Device Device

+ History []Host

+ Last *Host

+ type ExperimentDetail struct

+ Verdict *Verdict

+ type ExperimentView struct

+ Axis policy.Axis

+ Metrics policy.Metrics

+ Name string

+ Rings []string

+ Sample float64

+ Status string

+ Stopping policy.Stopping

+ Type policy.ExperimentType

+ Variants []policy.Variant

+ type FleetResponse struct

+ Drift int

+ Hosts []Host

+ Rings []RingStats

+ Total int

+ type GitPolicyWriter struct

+ Base string

+ Git func(ctx context.Context, args ...string) (string, error)

+ Opener promote.PROpener

+ RepoDir string

+ ServedDir string

+ Subdir string

+ func (w *GitPolicyWriter) Propose(ctx context.Context, org *policy.Org, req Request, approver string) (string, error)

+ func (w *GitPolicyWriter) ProposeRollout(ctx context.Context, plan func(string) (*promote.Change, error), ...) (string, error)

+ func (w *GitPolicyWriter) ProposeStatus(ctx context.Context, experiment, status, title, body string) (string, error)

+ type GuardrailVerdict struct

+ Metric string

+ Result struct{ ... }

+ type HarnessPin struct

+ Name string

+ Version string

+ type HarnessStatus struct

+ Installed string

+ Want string

+ type Host struct

+ LastSeen time.Time

+ type IssueView struct

+ Message string

+ Path string

+ Severity string

+ type Launch struct

+ Bash string

+ ExpiresAt *time.Time

+ Filename string

+ Launcher string

+ PowerShell string

+ Snippet string

+ TTLSeconds int

+ Token string

+ URL string

+ type LauncherSetup struct

+ Launcher string

+ Missing string

+ type Me struct

+ DevInsecure bool

+ LauncherSetup []LauncherSetup

+ Launchers []string

+ OptInRings []string

+ Profile *profileSummary

+ Release string

+ Requestable []string

+ Ring string

+ SelfService bool

+ Variants []AssignmentRow

+ type PatchSummary struct

+ Env []string

+ Hooks []string

+ MCPServers []string

+ Overrides []string

+ type PolicyView struct

+ Experiments []ExperimentView

+ Gateway *policy.Gateway

+ Issues []IssueView

+ Org string

+ Profiles []string

+ Rings []RingView

+ type PolicyWriter interface

+ Propose func(ctx context.Context, org *policy.Org, req Request, approver string) (prURL string, err error)

+ type Portal struct

+ BaseURL string

+ CoderURL string

+ CodespacesURL string

+ DevcontainerFeature string

+ DevcontainerImage string

+ HalodSHA256 map[string]string

+ HalodURL string

+ OIDCClientSecretFile string

+ PolicyBase string

+ PolicyRepoDir string

+ PolicySubdir string

+ PubKeyFile string

+ PubKeyPEM string

+ Registry string

+ RegistryPlainHTTP bool

+ SessionKeyFile string

+ func (p Portal) Validate(devInsecure bool) error

+ type Principal struct

+ Admin bool

+ Groups []string

+ ID string

+ type ReleasesResponse struct

+ Registry string

+ Rings []RingRelease

+ Stale bool

+ type Report struct

+ Device string

+ Digest string

+ Drift []string

+ ErrorCode string

+ Experiment string

+ Harnesses map[string]HarnessStatus

+ Hostname string

+ Killed bool

+ LastError string

+ Ring string

+ Time time.Time

+ User string

+ Variant string

+ type Request struct

+ CreatedAt time.Time

+ DecidedAt *time.Time

+ DecidedBy string

+ ID string

+ Item string

+ Justification string

+ Kind string

+ Note string

+ PRURL string

+ Ring string

+ Status string

+ User string

+ type RingRelease struct

+ Channels []ChannelRelease

+ Convergence ConvergenceView

+ Digest string

+ Drift int

+ Error string

+ Expired bool

+ ExpiresAt *time.Time

+ ExpiresInSec int64

+ ExpiringSoon bool

+ IssuedAt *time.Time

+ Org string

+ Published bool

+ Ring string

+ Seq uint64

+ Stale bool

+ Suspicious bool

+ type RingStats struct

+ Digests map[string]int

+ Drift int

+ Hosts int

+ Percent float64

+ Ring string

+ Versions map[string]map[string]int

+ func Aggregate(hosts []Host, order []string) []RingStats

+ type RingView struct

+ Error string

+ Membership policy.Membership

+ Name string

+ Order int

+ Profile string

+ Release string

+ Resolved *policy.Profile

+ type RolloutView struct

+ Rollout *policy.Rollout

+ State *rollout.State

+ StateError string

+ Timeline rollout.Timeline

+ type Server struct

+ func New(cfg Config) (*Server, error)

+ func (s *Server) Audit(ctx context.Context, actor, action, target string, details map[string]string)

+ func (s *Server) AuditStrict(ctx context.Context, actor, action, target string, details map[string]string) error

+ func (s *Server) Close() error

+ func (s *Server) Handler() http.Handler

+ func (s *Server) KillExperiment(ctx context.Context, name, actor, reason string) (bool, error)

+ func (s *Server) ReloadPolicy()

+ type Store interface

+ All func() []Host

+ History func(key string) []Host

+ Put func(Host) error

+ func NewMemStore() Store

+ func OpenLogStore(dir string) (Store, error)

+ type ToggleKill struct

+ At time.Time

+ By string

+ Reason string

+ type TogglePayload struct

+ Harnesses map[string]PatchSummary

+ Routes map[string]string

+ type TogglePreview struct

+ Decision toggle.Decision

+ Subject toggle.Subject

+ type ToggleView struct

+ Axis policy.Axis

+ Default bool

+ Description string

+ Expires string

+ Kill *ToggleKill

+ Name string

+ Owner string

+ Payload TogglePayload

+ Rules []policy.ToggleRule

+ Stale bool

+ type Verdict struct

+ Control string

+ Effect float64

+ EffectLower *float64

+ EffectUpper *float64

+ EvaluatedAt *time.Time

+ Experiment string

+ Guardrails []GuardrailVerdict

+ NControl int

+ NTreatment int

+ PValue float64

+ Reason string

+ Treatment string

+ Verdict string

+ type WhoAmI struct

+ Assignments []AssignmentRow

+ Groups []string

+ Profile string

+ Release string

+ Ring string

+ User string

v0.1.0-rc.2

Oct 2, 2026

v0.1.0-rc.1

Oct 2, 2026

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL