ibex-harness

module
v0.1.4 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 25, 2026 License: MIT

README

IBEX Harness

IBEX Harness

Production-grade platform for AI agent memory, context assembly, and secure LLM proxying.

Docs · Benchmarks · Developer guide · Security

CI codecov OpenSSF Scorecard OpenSSF Best Practices OpenSSF Baseline

Current status

Phases 0–2 are complete (auth, proxy, shared Go packages, docs site). Phase 2.5 (provider generalization, tokenizer, response pipeline, embedder, schema pre-work, MCP skeleton) is next. Memory substrate is Phase 3; extraction/context assembly are Phase 3.5; operator platform is Phase 4; intelligence is Phase 4.5; advanced retrieval is Phase 5. See roadmap current state.

Quick start

git clone https://github.com/Rick1330/ibex-harness.git
cd ibex-harness

make compose-dev-up
make db-migrate
make db-seed

Directories

Path Synopsis
infra
migrations/clickhouse
migrations/clickhouse/cmd/migrate command
migrations/postgres
migrations/postgres/cmd/migrate command
scripts/cmd/e2e-token-fks command
Command e2e-token-fks exercises CreateToken subject-org binds against a live auth gRPC server (compose-dev).
 Command e2e-token-fks exercises CreateToken subject-org binds against a live auth gRPC server (compose-dev).
testing/grpctest
testing/httptestx
tools/hashtoken command
packages
apierror
Package apierror defines canonical IBEX HTTP and gRPC error codes.
 Package apierror defines canonical IBEX HTTP and gRPC error codes.
authcache
chdsn
Package chdsn holds ClickHouse DSN helpers shared by migrate and app clients without importing clickhouse-go (avoids database/sql driver double-register).
 Package chdsn holds ClickHouse DSN helpers shared by migrate and app clients without importing clickhouse-go (avoids database/sql driver double-register).
circuitbreaker
clickhouse
Package clickhouse provides a typed batch writer for ibex.llm_traces.
 Package clickhouse provides a typed batch writer for ibex.llm_traces.
config
Package config provides typed, validated environment variable loading for IBEX Go services.
 Package config provides typed, validated environment variable loading for IBEX Go services.
crypto
Package crypto provides approved cryptographic primitives for IBEX Harness.
 Package crypto provides approved cryptographic primitives for IBEX Harness.
directive
Package directive provides directive resolution for the proxy hot path.
 Package directive provides directive resolution for the proxy hot path.
embedder
healthcheck
idempotency
Package idempotency provides Redis-backed claim/commit for request dedupe.
 Package idempotency provides Redis-backed claim/commit for request dedupe.
injection
Package injection inserts agent directive text into LLM message arrays.
 Package injection inserts agent directive text into LLM message arrays.
logger
Package logger provides a structured JSON logger for IBEX Harness Go services.
 Package logger provides a structured JSON logger for IBEX Harness Go services.
metrics
permissions
Package permissions defines the IBEX Harness 64-bit permission bitmap.
 Package permissions defines the IBEX Harness 64-bit permission bitmap.
provider
Package provider defines the LLM provider abstraction for IBEX Harness.
 Package provider defines the LLM provider abstraction for IBEX Harness.
provider/anthropic
provider/mockllm
Package mockllm provides an in-process LLM provider for CI and local smoke.
 Package mockllm provides an in-process LLM provider for CI and local smoke.
provider/openai
provider/openaicompatible
provider/scripts/diff_capabilities command
ratelimit
redissub
Package redissub provides a reconnecting Redis pub/sub run loop shared by proxy cache invalidation subscribers (revocation, directive updates).
 Package redissub provides a reconnecting Redis pub/sub run loop shared by proxy cache invalidation subscribers (revocation, directive updates).
reqid
Package reqid provides request ID generation and context propagation.
 Package reqid provides request ID generation and context propagation.
responsepipeline
revocation
session
shutdown
Package shutdown provides a reusable graceful shutdown coordinator.
 Package shutdown provides a reusable graceful shutdown coordinator.
telemetry
Package telemetry initialises OpenTelemetry providers for IBEX services.
 Package telemetry initialises OpenTelemetry providers for IBEX services.
tokenizer
services
auth/cmd/auth command
auth/internal/config
auth/internal/grpc
auth/internal/http
auth/internal/repository
auth/internal/service
auth/internal/token
proxy/cmd/proxy command
proxy/internal/asyncpool
Package asyncpool provides a bounded, non-dropping worker pool for post-response work (session checkpoints).
 Package asyncpool provides a bounded, non-dropping worker pool for post-response work (session checkpoints).
proxy/internal/auth
proxy/internal/bootstrap
proxy/internal/config
proxy/internal/grpc
proxy/internal/http
Package http — stream_transform_prototype.go
 Package http — stream_transform_prototype.go
proxy/internal/http/chat
proxy/internal/http/session
proxy/internal/http/trace
proxy/internal/llm
proxy/internal/sessioncache
Package sessioncache provides a thin Redis cache for session hot-path state.
 Package sessioncache provides a thin Redis cache for session hot-path state.
proxy/internal/sessionsweeper
proxy/internal/validation

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.