Directories
¶
| Path | Synopsis |
|---|---|
|
Package agents is the domain of agent-manager: an agent on the platform is a Flux HelmRelease of the Generic agent chart (2.x).
|
Package agents is the domain of agent-manager: an agent on the platform is a Flux HelmRelease of the Generic agent chart (2.x). |
|
Package api exposes the service twice from one process: REST/JSON under /api/v1 for the portal backend, and MCP tools for muster.
|
Package api exposes the service twice from one process: REST/JSON under /api/v1 for the portal backend, and MCP tools for muster. |
|
Package buildinfo resolves the version agent-manager reports: what the build stamped with -ldflags -X when it did, else what the Go toolchain recorded from version control — the tag at HEAD as the module version, the commit and its time — so a binary built from a tagged checkout names its release without a build flag.
|
Package buildinfo resolves the version agent-manager reports: what the build stamped with -ldflags -X when it did, else what the Go toolchain recorded from version control — the tag at HEAD as the module version, the commit and its time — so a binary built from a tagged checkout names its release without a build flag. |
|
Package chart knows the agent chart: where it lives, which version a Flux OCIRepository tracking the configured semver range resolves to right now, and the values.schema.json of that version — the contract every agent's values are validated against before anything is applied.
|
Package chart knows the agent chart: where it lives, which version a Flux OCIRepository tracking the configured semver range resolves to right now, and the values.schema.json of that version — the contract every agent's values are validated against before anything is applied. |
|
Package identity carries the authenticated caller through a request: who the OAuth layer validated (subject, email, groups) and, when the server acts on the caller's behalf towards the Kubernetes API, the caller's own IdP token.
|
Package identity carries the authenticated caller through a request: who the OAuth layer validated (subject, email, groups) and, when the server acts on the caller's behalf towards the Kubernetes API, the caller's own IdP token. |
|
Package kagent calls the kagent controller's SessionService and the A2A service it serves, through agentgateway, as the caller: every call carries the caller's IdP token as `authorization: Bearer` and nothing else that identifies anyone.
|
Package kagent calls the kagent controller's SessionService and the A2A service it serves, through agentgateway, as the caller: every call carries the caller's IdP token as `authorization: Bearer` and nothing else that identifies anyone. |
|
kagenttest
Package kagenttest is a fake kagent controller for tests: SessionService and lf.a2a.v1.A2AService on an in-memory gRPC connection, addressed the way the A2A gateway routes (the Agent as tenant, the session as the message's context), recording every call's metadata.
|
Package kagenttest is a fake kagent controller for tests: SessionService and lf.a2a.v1.A2AService on an in-memory gRPC connection, addressed the way the A2A gateway routes (the Agent as tenant, the session as the message's context), recording every call's metadata. |
|
Package kube builds the Kubernetes clients agent-manager reads and writes with, and hides them behind an interface so the identity a call runs under is a deployment choice: one shared client authenticated as the pod's ServiceAccount (a server nothing but a trusted proxy can reach), or — with OAuth and downstream OAuth on — a client per caller that presents the caller's own IdP token, so the apiserver authenticates the real user and the user's RBAC decides.
|
Package kube builds the Kubernetes clients agent-manager reads and writes with, and hides them behind an interface so the identity a call runs under is a deployment choice: one shared client authenticated as the pod's ServiceAccount (a server nothing but a trusted proxy can reach), or — with OAuth and downstream OAuth on — a client per caller that presents the caller's own IdP token, so the apiserver authenticates the real user and the user's RBAC decides. |
|
Package migrate is the `agent-manager migrate` command: the expand–contract migration of an installation's agents from one Generic chart major to the next.
|
Package migrate is the `agent-manager migrate` command: the expand–contract migration of an installation's agents from one Generic chart major to the next. |
|
Package muster resolves toolsets with muster's filter_tools meta-tool, as the caller: every call carries the caller's IdP token as `Authorization: Bearer` and nothing else, so muster resolves the toolset within the caller's own catalogue, the tools the agent will see when it runs as that person.
|
Package muster resolves toolsets with muster's filter_tools meta-tool, as the caller: every call carries the caller's IdP token as `Authorization: Bearer` and nothing else, so muster resolves the toolset within the caller's own catalogue, the tools the agent will see when it runs as that person. |
|
Package oci is the minimal OCI distribution client agent-manager needs: anonymous pulls with the registry's bearer-token challenge (RFC 6750 style Www-Authenticate), the tag list of a repository, one file out of a Helm chart archive, and the digest a tag resolves to — the way Flux's source-controller reads the agent chart, and the way a tagged skill image is pinned to the digest kagent requires.
|
Package oci is the minimal OCI distribution client agent-manager needs: anonymous pulls with the registry's bearer-token challenge (RFC 6750 style Www-Authenticate), the tag list of a repository, one file out of a Helm chart archive, and the digest a tag resolves to — the way Flux's source-controller reads the agent chart, and the way a tagged skill image is pinned to the digest kagent requires. |
|
ocitest
Package ocitest is a fake OCI distribution registry for tests: one repository behind a bearer challenge, a tag list, one manifest per tag with a Docker-Content-Digest, and a chart archive per tag as the single blob.
|
Package ocitest is a fake OCI distribution registry for tests: one repository behind a bearer challenge, a tag list, one manifest per tag with a Docker-Content-Digest, and a chart archive per tag as the single blob. |
|
Package server assembles the single HTTP listener: health endpoints, the REST API and the MCP streamable-HTTP endpoint, both behind the same OAuth guard when configured.
|
Package server assembles the single HTTP listener: health endpoints, the REST API and the MCP streamable-HTTP endpoint, both behind the same OAuth guard when configured. |
|
Package skills discovers agent skills in git repositories the way the portal backend's /agent-skills endpoint does: every SKILL.md in a GitHub repository is one skill, its frontmatter name and description describe it, and its directory is the skill an agent mounts (url + path).
|
Package skills discovers agent skills in git repositories the way the portal backend's /agent-skills endpoint does: every SKILL.md in a GitHub repository is one skill, its frontmatter name and description describe it, and its directory is the skill an agent mounts (url + path). |
Click to show internal directories.
Click to hide internal directories.