utils

func APIKeyETag ¶

func APIKeyETag(artifactUUID, name string, updatedAt time.Time) string

APIKeyETag derives a stable UUID v7-formatted ETag from the unique (artifactUUID, name, updatedAt) tuple by SHA-256 hashing them, taking the first 16 bytes, then stamping the UUID version (7) and RFC 4122 variant bits. updatedAt is included to capture the current state of the artifact, ensuring the ETag changes on every update and remains unique as the PK in the event table.

func ArtifactImportRank ¶

func ArtifactImportRank(kind string) int

ArtifactImportRank returns the creation-order rank for a kind; unknown kinds sort last.

func BoolPtr ¶

func BoolPtr(value bool) *bool

BoolPtr returns a pointer to the provided boolean.

func CheckURLReachability ¶

func CheckURLReachability(rawURL string, timeout time.Duration) error

CheckURLReachability verifies that the given URL is reachable by sending an HTTP HEAD request. It returns an error if the request fails or cannot complete within the given timeout.

func CreateAPIYamlZip ¶

func CreateAPIYamlZip(apiYamlMap map[string]string) ([]byte, error)

CreateAPIYamlZip creates a ZIP file containing API YAML files

func CreateBatchDeploymentTarGz ¶

func CreateBatchDeploymentTarGz(deploymentContentMap map[string]*model.DeploymentContent) ([]byte, error)

CreateBatchDeploymentTarGz creates a TAR.GZ archive containing deployment YAML files organized in directories by deployment ID. The filename prefix is determined by the artifact kind: api-, llm-provider-, or llm-proxy-. Structure:

batch.tar.gz
├── dep-789/
│   └── api-{artifactID}.yaml
├── dep-456/
│   └── llm-provider-{artifactID}.yaml
└── dep-111/
    └── llm-proxy-{artifactID}.yaml

TAR.GZ is used here (over ZIP) because gzip compresses the entire stream as one unit, exploiting the high structural similarity across YAML files in a batch.

func CreateLLMProviderYamlZip ¶

func CreateLLMProviderYamlZip(providerYamlMap map[string]string) ([]byte, error)

CreateLLMProviderYamlZip creates a ZIP file containing LLM provider YAML files

func CreateLLMProxyYamlZip ¶

func CreateLLMProxyYamlZip(proxyYamlMap map[string]string) ([]byte, error)

CreateLLMProxyYamlZip creates a ZIP file containing LLM proxy YAML files

func CreateMCPProxyYamlZip ¶

func CreateMCPProxyYamlZip(proxyYamlMap map[string]string) ([]byte, error)

CreateMCPProxyYamlZip creates a ZIP file containing MCP proxy YAML files

func CreateWebBrokerAPIYamlZip ¶

func CreateWebBrokerAPIYamlZip(apiYamlMap map[string]string) ([]byte, error)

CreateWebBrokerAPIYamlZip creates a ZIP file containing WebBroker API YAML files

func CreateWebSubAPIYamlZip ¶

func CreateWebSubAPIYamlZip(apiYamlMap map[string]string) ([]byte, error)

CreateWebSubAPIYamlZip creates a ZIP file containing WebSub API YAML files

func DecodeSpec ¶

func DecodeSpec(spec map[string]interface{}, out interface{}) error

DecodeSpec re-marshals the generic spec map into a kind-specific struct via JSON. Unknown fields are ignored, matching fields are populated.

func DecryptSubscriptionToken ¶

func DecryptSubscriptionToken(key []byte, ciphertextB64 string) (string, error)

DecryptSubscriptionToken decrypts a base64-encoded ciphertext produced by EncryptSubscriptionToken.

func DefaultStringPtr ¶

func DefaultStringPtr(v *string, def string) string

DefaultStringPtr returns the string value if not nil/empty, otherwise the default

func DeriveEncryptionKey ¶

func DeriveEncryptionKey(keyStr string) ([]byte, error)

DeriveEncryptionKey converts a config string to 32 bytes for AES-256. Accepts only valid 32-byte keys: 64 hex chars or base64 that decodes to 32 bytes. Does not truncate or pad; returns an error for invalid lengths.

func EncryptSubscriptionToken ¶

func EncryptSubscriptionToken(key []byte, plaintext string) (string, error)

EncryptSubscriptionToken encrypts a plaintext string using AES-256-GCM. The key must be 32 bytes (64 hex chars or 44 base64 chars). Returns base64-encoded ciphertext.

func FetchMCPServerInfo ¶

func FetchMCPServerInfo(url string, headerName string, headerValue string) (*api.MCPServerInfoFetchResponse, error)

FetchMCPServerInfo fetches server information from an MCP backend including tools, prompts, resources, and server info

func GenerateAPIKey ¶

func GenerateAPIKey() (string, error)

GenerateAPIKey generates a cryptographically secure API key Format: {64_hex_chars} (32 random bytes hex-encoded)

func GenerateDeterministicUUIDv7 ¶

func GenerateDeterministicUUIDv7(entityID string, ts time.Time) string

GenerateDeterministicUUIDv7 generates a deterministic UUIDv7 from an entity ID and timestamp. The timestamp component uses the provided time (millisecond precision) and the random bits are derived from a SHA-256 hash of the entityID. This ensures:

• Same (entityID, timestamp) always produces the same UUID
• UUIDs are time-ordered (UUIDv7 property)
• Different entityIDs produce different UUIDs even at the same timestamp

func GenerateHandle ¶

func GenerateHandle(source string, existsCheck func(string) bool) (string, error)

GenerateHandle generates a URL-friendly handle from a given source string. If existsCheck is provided, it will verify the generated handle doesn't already exist. If the handle exists, it appends a random suffix and retries up to 5 times.

Parameters:

• source: The string to generate handle from (e.g., API name)
• existsCheck: Optional function that returns true if handle already exists, nil if no check needed

Returns:

• Generated handle string
• Error if source is empty or all retries exhausted

func GenerateUUID ¶

func GenerateUUID() (string, error)

GenerateUUID generates a new UUID v7 string

func ImportDisplayName ¶

func ImportDisplayName(cfg dto.ArtifactImportConfig) string

ImportDisplayName returns the human-friendly name, falling back to the handle.

func ImportHandle ¶

func ImportHandle(cfg dto.ArtifactImportConfig) string

ImportHandle returns the URL-safe identifier for the artifact. metadata.name is treated as the handle (identifier) in the k8s-shaped descriptor.

func ImportVersion ¶

func ImportVersion(cfg dto.ArtifactImportConfig) string

ImportVersion resolves the artifact version from the CR spec (version lives in the spec, not the k8s metadata), defaulting to "1.0.0" when absent.

func IsNewerDeployment ¶

func IsNewerDeployment(incoming, current *time.Time) bool

IsNewerDeployment reports whether incoming supersedes the working copy's current deployment time. A nil current (no dated push yet) is always superseded. A nil incoming cannot establish ordering, so it is treated as not newer (stale) to avoid letting an undated push clobber a working copy set from a dated one.

func LoadLLMProviderTemplatesFromDirectory ¶

func LoadLLMProviderTemplatesFromDirectory(dirPath string) ([]*model.LLMProviderTemplate, error)

func MapDeploymentStatus ¶

func MapDeploymentStatus(status string) model.DeploymentStatus

MapDeploymentStatus maps a pushed status string to a deployment_status value.

func MapPtrIfNotEmpty ¶

func MapPtrIfNotEmpty(m map[string]interface{}) *map[string]interface{}

func MapValueOrEmpty ¶

func MapValueOrEmpty(m *map[string]interface{}) map[string]interface{}

MapValueOrEmpty returns the map value when non-nil or an empty map otherwise.

func NormalizeAndValidateLLMResourcePath ¶

func NormalizeAndValidateLLMResourcePath(resource string) (string, bool)

func OpenAPIUUIDToString ¶

func OpenAPIUUIDToString(id openapi_types.UUID) string

OpenAPIUUIDToString converts an OpenAPI UUID to string.

func ParseGatewayArtifactsRequest ¶

func ParseGatewayArtifactsRequest(r *http.Request) ([]dto.ImportGatewayArtifactRequest, error)

ParseGatewayArtifactsRequest reads the multipart/form-data import-gateway-artifacts request: it extracts the "artifacts" zip part, decodes its artifacts.json entry into the list of import requests, and validates that the list is non-empty. It returns a descriptive error (suitable for a 400 response) when the part is missing, unreadable, not a valid zip, or empty.

func ParseOpenAPIUUID ¶

func ParseOpenAPIUUID(id string) (*openapi_types.UUID, error)

ParseOpenAPIUUID parses a UUID string into an OpenAPI UUID pointer.

func ParseOpenAPIUUIDOrZero ¶

func ParseOpenAPIUUIDOrZero(id string) openapi_types.UUID

ParseOpenAPIUUIDOrZero parses a UUID string into an OpenAPI UUID value. Returns zero UUID when input is invalid.

func ParseOptionalOpenAPIUUID ¶

func ParseOptionalOpenAPIUUID(id *string) *openapi_types.UUID

ParseOptionalOpenAPIUUID parses an optional UUID string pointer into an OpenAPI UUID pointer. Returns nil when input is nil, empty, or invalid.

func ResolveImportProject ¶

func ResolveImportProject(md dto.ArtifactImportMetadata) string

ResolveImportProject extracts the project identifier from the k8s-shaped metadata. The project is identified by the domain-prefixed project-id annotation or the label as a fallback.

func SpecString ¶

func SpecString(spec map[string]interface{}, key string) string

SpecString safely extracts a string value from the generic spec map.

func StringPtrIfNotEmpty ¶

func StringPtrIfNotEmpty(value string) *string

StringPtrIfNotEmpty returns a pointer for non-empty strings.

func StringPtrValue ¶

func StringPtrValue(ptr *string) string

StringPtrValue returns the value of a string pointer or empty string if nil

func TimePtr ¶

func TimePtr(t time.Time) *time.Time

TimePtr returns a pointer to the given time

func TimePtrIfNotZero ¶

func TimePtrIfNotZero(value time.Time) *time.Time

TimePtrIfNotZero returns a pointer for non-zero timestamps.

func UnzipGatewayArtifacts ¶

func UnzipGatewayArtifacts(zipBytes []byte) ([]dto.ImportGatewayArtifactRequest, error)

UnzipGatewayArtifacts reads the artifacts.json entry from the pushed zip and decodes it into the list of import requests.

func ValidateHandle ¶

func ValidateHandle(handle string) error

ValidateHandle validates a user-provided handle. Handle must be: - Lowercase only - Alphanumeric with hyphens allowed - No special characters - No consecutive hyphens - Cannot start or end with hyphen - Length between 3 and 63 characters

func ValidateHandleImmutable ¶

func ValidateHandleImmutable(pathHandle string, bodyHandle *string) error

ValidateHandleImmutable checks a PUT request body's optional handle/id field against the resource's path handle. A nil or empty body value is treated as "not provided" and allowed; only a non-empty value that differs from the path handle is rejected.

func ValidateHandleImmutableRequired ¶

func ValidateHandleImmutableRequired(pathHandle, bodyHandle string) error

ValidateHandleImmutableRequired is like ValidateHandleImmutable but requires the request body to explicitly include a handle/id value matching the path handle.

func ValidateURL ¶

func ValidateURL(rawURL string) error

ValidateURL validates a URL with additional checks

func ValueOrEmpty ¶

func ValueOrEmpty(s *string) string

ValueOrEmpty returns the string value or empty string if nil