openshell

type AgentHarnessOpenShellClient ¶

type AgentHarnessOpenShellClient struct {
	// contains filtered or unexported fields
}

AgentHarnessOpenShellClient performs OpenShell gRPC operations for AgentHarness lifecycle (sandbox create/get/delete/exec). It wraps *OpenShellClients from Dial (client.go) together with Config and optional events: per-RPC timeouts, bearer auth on the context, and helpers that map responses to sandboxbackend types. It does not run backend-specific pre-create work (e.g. translateModelConfig); concrete backends compose findExistingSandbox + their own translation step + createSandbox in their own EnsureAgentHarness implementation.

Named with an AgentHarness prefix to avoid confusion with OpenShellClients (dial bundle) and openshellv1.OpenShellClient (generated gRPC interface).

func (c *AgentHarnessOpenShellClient) CallCtx(ctx context.Context) (context.Context, context.CancelFunc)

func (c *AgentHarnessOpenShellClient) CreateAgentHarnessSandbox(
	ctx context.Context,
	ah *v1alpha2.AgentHarness,
	req *openshellv1.CreateSandboxRequest,
	unsupported []string,
) (sandboxbackend.EnsureResult, error)

func (c *AgentHarnessOpenShellClient) DeleteAgentHarnessSandbox(ctx context.Context, h sandboxbackend.Handle) (bool, error)

func (c *AgentHarnessOpenShellClient) ExecSandbox(ctx context.Context, sandboxID string, command []string, stdin []byte, env map[string]string, timeoutSec uint32) (int32, string, error)

func (c *AgentHarnessOpenShellClient) ExecSandboxID(ctx context.Context, sandboxHandleName string) (string, error)

func (c *AgentHarnessOpenShellClient) ExecSandboxOutput(ctx context.Context, sandboxID string, command []string, stdin []byte, env map[string]string, timeoutSec uint32) (ExecSandboxResult, error)

func (c *AgentHarnessOpenShellClient) GetSandboxStatus(ctx context.Context, h sandboxbackend.Handle) (metav1.ConditionStatus, string, string)

type ClawBackend ¶

type ClawBackend struct {
	// contains filtered or unexported fields
}

ClawBackend implements AsyncBackend and PostReadyBackend for OpenClaw- and NemoClaw-typed AgentHarness resources: sync ModelConfig to the OpenShell control plane before create, fixed sandbox image, and post-ready OpenClaw bootstrap when modelConfigRef is set.

func NewOpenClawBackend(kubeClient client.Client, clients *OpenShellClients, cfg Config, recorder record.EventRecorder) *ClawBackend

func (b ClawBackend) DeleteAgentHarness(ctx context.Context, h sandboxbackend.Handle) (bool, error)

func (b *ClawBackend) EnsureAgentHarness(ctx context.Context, ah *v1alpha2.AgentHarness) (sandboxbackend.EnsureResult, error)

func (b ClawBackend) GetStatus(ctx context.Context, h sandboxbackend.Handle) (metav1.ConditionStatus, string, string)

func (b ClawBackend) Name() v1alpha2.AgentHarnessBackendType

func (b *ClawBackend) OnAgentHarnessReady(ctx context.Context, ah *v1alpha2.AgentHarness, h sandboxbackend.Handle) error

type Config ¶

type Config struct {
	// GatewayURL is a gRPC target (e.g. "dns:///gateway.openshell.svc:443"
	// or "localhost:7443"). Required.
	GatewayURL string

	// Token is a static bearer token sent as grpc metadata "authorization:
	// Bearer <token>". Optional.
	Token string

	// TLSCAPEM is a PEM-encoded CA bundle used to verify the gateway
	// certificate. If empty, system roots are used. If both TLSCAPEM is
	// empty and GatewayURL has no TLS scheme, the client dials insecurely
	// (intended for local/in-cluster plaintext only).
	TLSCAPEM []byte

	// Insecure, when true, dials without TLS regardless of other settings.
	// Use only for tests or explicit local development.
	Insecure bool

	// DialTimeout bounds the initial dial. Zero means no timeout.
	DialTimeout time.Duration

	// CallTimeout bounds each RPC. Zero means no per-call timeout.
	CallTimeout time.Duration
}

Config configures the OpenShell gateway gRPC client.

type ExecSandboxResult ¶

type ExecSandboxResult struct {
	ExitCode int32
	Stdout   string
	Stderr   string
}

type GatewayProviderDef ¶

type GatewayProviderDef struct {
	Name        string
	Type        string
	Credentials map[string]string
}

GatewayProviderDef describes an OpenShell gateway provider to create or update.

type HermesBackend ¶

type HermesBackend struct {
	// contains filtered or unexported fields
}

HermesBackend implements AsyncBackend and PostReadyBackend for Hermes AgentHarness resources.

func NewHermesBackend(kubeClient client.Client, clients *OpenShellClients, cfg Config, recorder record.EventRecorder) *HermesBackend

func (b HermesBackend) DeleteAgentHarness(ctx context.Context, h sandboxbackend.Handle) (bool, error)

func (b *HermesBackend) EnsureAgentHarness(ctx context.Context, ah *v1alpha2.AgentHarness) (sandboxbackend.EnsureResult, error)

func (b HermesBackend) GetStatus(ctx context.Context, h sandboxbackend.Handle) (metav1.ConditionStatus, string, string)

func (b HermesBackend) Name() v1alpha2.AgentHarnessBackendType

func (b *HermesBackend) OnAgentHarnessReady(ctx context.Context, ah *v1alpha2.AgentHarness, h sandboxbackend.Handle) error

type OpenShellClients ¶

type OpenShellClients struct {
	OpenShell openshellv1.OpenShellClient
	Inference inferencev1.InferenceClient
	Conn      *grpc.ClientConn
}

OpenShellClients is the result of Dial: one gRPC connection plus the generated openshell.v1.OpenShell and inference.v1.Inference stubs. It does not interpret AgentHarness or apply per-call policy; use AgentHarnessOpenShellClient for that (see agentharness_openshell_client.go in this package).

func Dial(ctx context.Context, cfg Config) (*OpenShellClients, error)

func (c *OpenShellClients) Close() error