Directories
¶
| Path | Synopsis |
|---|---|
|
Package bench drives a reproducible agent workload against the mesh.
|
Package bench drives a reproducible agent workload against the mesh. |
|
client
Package client is how a mesh component reads from its control plane.
|
Package client is how a mesh component reads from its control plane. |
|
Package credprovider implements outbound credential brokering for Agent Mesh egress destinations (static secrets, RFC 8693 OIDC federation with optional Google Service Account impersonation, AWS STS AssumeRoleWithWebIdentity with inline IAM session policy compilation, and platform metadata identity) as well as TaskAuthorizationRule scope/permission/resource narrowing.
|
Package credprovider implements outbound credential brokering for Agent Mesh egress destinations (static secrets, RFC 8693 OIDC federation with optional Google Service Account impersonation, AWS STS AssumeRoleWithWebIdentity with inline IAM session policy compilation, and platform metadata identity) as well as TaskAuthorizationRule scope/permission/resource narrowing. |
|
Package envoy implements Envoy ext_authz (HTTP and gRPC v3/v2) and ext_proc (gRPC v3 gateway server and outbound inspection callout client) using official google.golang.org/grpc and envoyproxy/go-control-plane bindings.
|
Package envoy implements Envoy ext_authz (HTTP and gRPC v3/v2) and ext_proc (gRPC v3 gateway server and outbound inspection callout client) using official google.golang.org/grpc and envoyproxy/go-control-plane bindings. |
|
Package logging configures go-log the same way in every binary.
|
Package logging configures go-log the same way in every binary. |
|
Package p2plimits builds the libp2p resource manager a mesh component runs with: limits sized from its connection budget, a per-source-address connection cap and rate in place of libp2p's default of 8, applied to the address a connection comes from and not to a relay it comes through, and a wrapper that counts and logs every inbound connection the manager refuses.
|
Package p2plimits builds the libp2p resource manager a mesh component runs with: limits sized from its connection budget, a per-source-address connection cap and rate in place of libp2p's default of 8, applied to the address a connection comes from and not to a relay it comes through, and a wrapper that counts and logs every inbound connection the manager refuses. |
|
Package pprofserver serves Go's runtime profiles on a listener of their own.
|
Package pprofserver serves Go's runtime profiles on a listener of their own. |
|
Package ratelimit bounds how often an individual peer may make a node or router do pre-authentication work.
|
Package ratelimit bounds how often an individual peer may make a node or router do pre-authentication work. |
|
Package secrets resolves secret configuration for Agent Mesh binaries.
|
Package secrets resolves secret configuration for Agent Mesh binaries. |
|
Package skill installs the Agent Mesh agent skill into the directories local AI agents scan, so an agent can bootstrap a node and drive the mesh without the user pasting instructions by hand.
|
Package skill installs the Agent Mesh agent skill into the directories local AI agents scan, so an agent can bootstrap a node and drive the mesh without the user pasting instructions by hand. |
|
Package standalone wires the control plane, the libp2p router and the shared SQL store into one process serving a single public port: the router's WebSocket listener carries libp2p upgrades while every other HTTP request falls through to the control-plane mux.
|
Package standalone wires the control plane, the libp2p router and the shared SQL store into one process serving a single public port: the router's WebSocket listener carries libp2p upgrades while every other HTTP request falls through to the control-plane mux. |
|
Package tlsinspect parses and verifies TLS ClientHello records on named TCP tunnels without terminating TLS.
|
Package tlsinspect parses and verifies TLS ClientHello records on named TCP tunnels without terminating TLS. |
|
Package tunnel publishes a local HTTP listener on a public https URL through a third-party connector, so devices that cannot route to the host (a phone on cellular, a laptop on another network) can still enroll and join the mesh.
|
Package tunnel publishes a local HTTP listener on a public https URL through a third-party connector, so devices that cannot route to the host (a phone on cellular, a laptop on another network) can still enroll and join the mesh. |
Click to show internal directories.
Click to hide internal directories.