platform/

directory
v0.0.0-...-2769864 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 6, 2026 License: Apache-2.0

README

pkg/platform

The cluster and install substrate: everything that decides what gets stood up, where, and under whose identity — cloud kinds and install strategies, the embedded manifest bundle, human and agent identity, credential acquisition, the .oap agent-container format, workspace sources, artifact storage, the NATS bus, and the generic session-lifecycle pipeline.

Nothing here reconciles. Packages in this group are libraries the reconcilers in pkg/controllers and the binaries in internal/cmd call into.

What's here

Package Purpose
apimage Single source of truth for the project's first-party container images: build-target names, image names, :dev tags, Dockerfiles, contexts.
artifacts Artifact versioning shared by the artifact_* meta tools, respond_to_user attachment resolution, and the oap artifact CLI.
artifactstore The durable artifact Store interface plus its gocloud-backed multi-scheme implementation.
capacityfit Turns "this class asks for more than any node has" into install-time questions that clamp it.
cloud The cluster-kind registry (local, desktop, default, gke, eks, aks) and the per-cloud install strategies behind it.
deplogs Silences the process-global loggers our dependencies write to, so library chatter never reaches a terminal or container log.
extract Turns an uploaded file into agent-readable text, MIME-registry dispatched.
identity Canonical user identity, plus the whole credential subtree: auth kinds, the token broker, IdP login, setup flows, passthrough links.
identityd The browser-facing identity server: OIDC login, credential link + portal pages, the CLI login exchange.
kube Small Kubernetes client-config helpers shared by the server binaries.
kubeyaml Splits a multi-document Kubernetes YAML/JSON stream into unstructured objects. A leaf, so consumers get the splitter without the manifest bundle.
manifests The embedded install bundle and the component manifests. Generated — see its README.
nats NATS decentralized-JWT identity, per-client user-JWT minting, TLS material, the connection helper, and the subject grammar.
oap The .oap agent-container format: pack/unpack, questions and binding overlays, install gating, registry push/pull.
pipeline The generic session-lifecycle interceptor framework (points, hooks, decisions, executor). Imports no domain packages.
podspec Builds the sandboxed corev1.Pod from a session plus its resolved class spec.
podstatus Controller-agnostic readers over a Pod's runtime status, so every controller classifies "stuck" the same way.
schedfit Answers one question about a cluster: can it ever schedule a pod that requests this much?
settings Folds the four-tier settings chain (cluster → namespace → class → session) into one EffectiveSettings plus Violations. Pure.
settingswiring The cluster-side half of settings: loads the tiers, resolves class refs, stamps the SettingsAccepted condition.
startup Bounded-retry primitives for startup steps that wait on another component becoming reachable.
workspace Snapshot/restore of AgentSession workspace PVC contents, and the overlay-cut/reconcile Jobs.
workspacekinds The pluggable workspace-source driver surface and its registry (git today).

Boundary

  • A reconciler does not live here. Watches, status writes, and condition helpers are pkg/controllers. Platform packages are pure libraries or client-side helpers those reconcilers call.
  • Tool definition and execution do not live here. Toolspec, toolchains, MCP, skills, and sandbox backends are pkg/tools — including sandboxkinds, which is not a sibling of workspacekinds.
  • HTTP surfaces mostly do not live here. pkg/web owns what is served. identityd is the exception: it belongs to the identity concern, and registers itself as a webui.WebUI that webd mounts.
  • cloud is install-shape, not runtime config. A cluster kind decides what oap install stands up; per-agent runtime policy is settings.

See also

Directories

Path Synopsis
Package apimage is the single source of truth for oap's first-party container images: their CLI build-target names, image names, local :dev tags, Dockerfiles, and build contexts.
 Package apimage is the single source of truth for oap's first-party container images: their CLI build-target names, image names, local :dev tags, Dockerfiles, and build contexts.
Package artifacts holds the cross-cutting versioning logic shared by the artifact_* meta tools, respond_to_user attachment resolution, and the oap artifact CLI.
 Package artifacts holds the cross-cutting versioning logic shared by the artifact_* meta tools, respond_to_user attachment resolution, and the oap artifact CLI.
blob
Package blob implements artifactstore.Store over gocloud.dev/blob, giving one implementation across GCS (gs://), S3 (s3://), Azure Blob (azblob://), local disk (file://), and in-process memory (mem://).
 Package blob implements artifactstore.Store over gocloud.dev/blob, giving one implementation across GCS (gs://), S3 (s3://), Azure Blob (azblob://), local disk (file://), and in-process memory (mem://).
Package builderbundle assembles the builder .oap: the locked-down agent-builder AgentClass, its workshop SidecarToolbox, the workshop AgentUI, its page compiled from src/ui/page.tsx, and the eight builder-phase Skills, all embedded at build time from src/.
 Package builderbundle assembles the builder .oap: the locked-down agent-builder AgentClass, its workshop SidecarToolbox, the workshop AgentUI, its page compiled from src/ui/page.tsx, and the eight builder-phase Skills, all embedded at build time from src/.
Package capacityfit answers "this SpiceboxClass requests more of some resource than this cluster's largest node has — what install-time question should ask the operator to lower it?"
 Package capacityfit answers "this SpiceboxClass requests more of some resource than this cluster's largest node has — what install-time question should ask the operator to lower it?"
hook
Package hook builds the install.InstallOpts.ExtraQuestions closure every .oap install surface (the CLI, the macOS desktop installer, admind) wires in unchanged: resolve this cluster's scheduling ceiling once, then hand pkg/platform/capacityfit.Questions the CRs it is asked about plus a seam to read back an already-installed SpiceboxClass.
 Package hook builds the install.InstallOpts.ExtraQuestions closure every .oap install surface (the CLI, the macOS desktop installer, admind) wires in unchanged: resolve this cluster's scheduling ceiling once, then hand pkg/platform/capacityfit.Questions the CRs it is asked about plus a seam to read back an already-installed SpiceboxClass.
Package cloud is the cloud-aware install layer for agentprimitives.
 Package cloud is the cloud-aware install layer for agentprimitives.
aks
Package aks implements the cloud.Strategy for Azure Kubernetes Service clusters.
 Package aks implements the cloud.Strategy for Azure Kubernetes Service clusters.
certmanager
Package certmanager implements the cert-manager + Let's Encrypt TLS strategy for webd's external-access Gateway.
 Package certmanager implements the cert-manager + Let's Encrypt TLS strategy for webd's external-access Gateway.
desktop
Package desktop implements the cloud.Strategy for `oap desktop`'s guest cluster: a network-confined, single-user VM (loopback port-forward only, no public ingress), as against `oap init --local`, which tunnels the same lightweight dev profile publicly.
 Package desktop implements the cloud.Strategy for `oap desktop`'s guest cluster: a network-confined, single-user VM (loopback port-forward only, no public ingress), as against `oap init --local`, which tunnels the same lightweight dev profile publicly.
eks
Package eks implements the cloud.Strategy for Amazon EKS clusters.
 Package eks implements the cloud.Strategy for Amazon EKS clusters.
gke
Package gke provides GKE-specific implementations of pkg/platform/cloud strategies.
 Package gke provides GKE-specific implementations of pkg/platform/cloud strategies.
local
Package local implements the cloud.Strategy for the lightweight developer kind: sqlite memory, an in-memory SpiceDB datastore, a file:// artifact PVC, local :dev images, no digest pinning.
 Package local implements the cloud.Strategy for the lightweight developer kind: sqlite memory, an in-memory SpiceDB datastore, a file:// artifact PVC, local :dev images, no digest pinning.
unmanaged
Package unmanaged implements the cloud.Strategy fallback for clusters that are not identified as a big-three managed cloud (e.g.
 Package unmanaged implements the cloud.Strategy fallback for clusters that are not identified as a big-three managed cloud (e.g.
Package deplogs disables zerolog's process-global logger for dependencies that use it, so library chatter cannot reach terminals or component logs.
 Package deplogs disables zerolog's process-global logger for dependencies that use it, so library chatter cannot reach terminals or component logs.
Package extract turns an uploaded file into agent-readable text.
 Package extract turns an uploaded file into agent-readable text.
extractordclient
Package extractordclient is the HTTP client internal/cmd/operator dials extractord (internal/cmd/extractord) with — the network counterpart to pkg/platform/extract's MIME registry, which extractord wraps as a zero-egress HTTP service.
 Package extractordclient is the HTTP client internal/cmd/operator dials extractord (internal/cmd/extractord) with — the network counterpart to pkg/platform/extract's MIME registry, which extractord wraps as a zero-egress HTTP service.
tabula
Package tabula adapts github.com/tsawler/tabula (MIT; pure Go on the build path used here — OCR support lives behind the library's own "ocr" build tag, which pulls in a CGO Tesseract binding we never enable) to extract.Extractor.
 Package tabula adapts github.com/tsawler/tabula (MIT; pure Go on the build path used here — OCR support lives behind the library's own "ocr" build tag, which pulls in a CGO Tesseract binding we never enable) to extract.Extractor.
text
Package text is the extract.Extractor for formats that are already text: no document-parsing library buys anything over reading to EOF and coercing to valid UTF-8.
 Package text is the extract.Extractor for formats that are already text: no document-parsing library buys anything over reading to EOF and coercing to valid UTF-8.
ziparchive
Package ziparchive is the extract.Exploder for ZIP containers.
 Package ziparchive is the extract.Exploder for ZIP containers.
Package identity is the single source of truth for the canonical user ID used across SpiceDB writes and CheckPermission calls.
 Package identity is the single source of truth for the canonical user ID used across SpiceDB writes and CheckPermission calls.
agentidentity
Package agentidentity persists a replacement value for a credential an AgentIdentity owns — the agent's OWN shared secret, as distinct from the per-person credentials pkg/platform/identity/useridentity writes.
 Package agentidentity persists a replacement value for a credential an AgentIdentity owns — the agent's OWN shared secret, as distinct from the per-person credentials pkg/platform/identity/useridentity writes.
authkind
Package authkind defines the per-prefix plug-in surface for AgentIdentity setup routing.
 Package authkind defines the per-prefix plug-in surface for AgentIdentity setup routing.
authkind/cli
Package cli is the authkind impl for the "cli" prefix.
 Package cli is the authkind impl for the "cli" prefix.
authkind/loader
Package loader blank-imports every authkind impl so a binary gets all of them registered with a single import.
 Package loader blank-imports every authkind impl so a binary gets all of them registered with a single import.
authkind/mcp
Package mcp is the authkind impl for the "mcp" prefix.
 Package mcp is the authkind impl for the "mcp" prefix.
authkind/registry
Package registry holds the global authkind registry.
 Package registry holds the global authkind registry.
authkind/sidecartoolbox
Package sidecartoolbox is the authkind impl for the "toolbox" prefix.
 Package sidecartoolbox is the authkind impl for the "toolbox" prefix.
authkind/toolspec
Package toolspec is the authkind impl for the "toolspec" prefix.
 Package toolspec is the authkind impl for the "toolspec" prefix.
broker
Package broker defines the token broker: the single seam that turns credential descriptors into injectable tool tokens; the in-process implementation lives in ./inproc.
 Package broker defines the token broker: the single seam that turns credential descriptors into injectable tool tokens; the in-process implementation lives in ./inproc.
broker/inproc
Package inproc is the in-process token broker implementation.
 Package inproc is the in-process token broker implementation.
credhost
Package credhost answers one question: may this credential be sent to this host?
 Package credhost answers one question: may this credential be sent to this host?
credkind
Package credkind is the pluggable driver surface for identity credential types — one Kind per value of AgentCredential.Type / CredentialSource.Type.
 Package credkind is the pluggable driver surface for identity credential types — one Kind per value of AgentCredential.Type / CredentialSource.Type.
credkind/federated
Package federated implements the credkind.Kind for type=federated: a credential minted per resolve via an ID-JAG token exchange rather than read from a Secret.
 Package federated implements the credkind.Kind for type=federated: a credential minted per resolve via an ID-JAG token exchange rather than read from a Secret.
credkind/githubapp
This file implements the credkind.Kind for type=githubApp: a credential minted on demand from a stored GitHub App private key rather than read directly from a Secret.
 This file implements the credkind.Kind for type=githubApp: a credential minted on demand from a stored GitHub App private key rather than read directly from a Secret.
credkind/imports
Package imports blank-imports every credkind so a binary gets the full registry with a single import.
 Package imports blank-imports every credkind so a binary gets the full registry with a single import.
credkind/oauth
Package oauth implements the credkind.Kind for type=oauth: a token bundle stored under a FIXED multi-key Secret shape (access_token, refresh_token, expires_at, token_endpoint, client_id, scope).
 Package oauth implements the credkind.Kind for type=oauth: a token bundle stored under a FIXED multi-key Secret shape (access_token, refresh_token, expires_at, token_endpoint, client_id, scope).
credkind/registry
Package registry is the process-wide credential-kind registry.
 Package registry is the process-wide credential-kind registry.
credkind/registry/registrytest
Package registrytest provides shared credkind registry test helpers, so packages whose tests need to Reset() the registry (to probe an unregistered-type or empty-registry failure mode) don't each hand-roll the same save/restore.
 Package registrytest provides shared credkind registry test helpers, so packages whose tests need to Reset() the registry (to probe an unregistered-type or empty-registry failure mode) don't each hand-roll the same save/restore.
credkind/static
Package static implements the credkind.Kind for type=static: a single value read from one named key of one Secret.
 Package static implements the credkind.Kind for type=static: a single value read from one named key of one Secret.
credresolve
descriptors.go — the shared, kind-agnostic credential resolver.
 descriptors.go — the shared, kind-agnostic credential resolver.
credupdate
Package credupdate holds the credential-update determination: the decision about whether an agent's claim that a credential has died justifies putting a credential-entry form in front of a human.
 Package credupdate holds the credential-update determination: the decision about whether an agent's claim that a credential has died justifies putting a credential-entry form in front of a human.
externaltoken
Package externaltoken derives the SpiceDB object id and value hash used by the externaltoken token-use authorization grant.
 Package externaltoken derives the SpiceDB object id and value hash used by the externaltoken token-use authorization grant.
federation
Package federation derives an upstream resource access token from a user's enterprise identity via the ID-JAG two-legged exchange (RFC 8693 token-exchange at the IdP → JWT authorization grant at the resource AS).
 Package federation derives an upstream resource access token from a user's enterprise identity via the ID-JAG two-legged exchange (RFC 8693 token-exchange at the IdP → JWT authorization grant at the resource AS).
federation/fake
Package fake is a deterministic federation.Minter for tests.
 Package fake is a deterministic federation.Minter for tests.
federation/idjag
Package idjag is the vendor-neutral ID-JAG (Identity Assertion JWT Authorization Grant, draft-ietf-oauth-identity-assertion-authz-grant) federation.Minter.
 Package idjag is the vendor-neutral ID-JAG (Identity Assertion JWT Authorization Grant, draft-ietf-oauth-identity-assertion-authz-grant) federation.Minter.
idp
Package idp defines the pluggable human-login identity-provider seam: cluster config (ClusterIdentityProvider) names a Kind; the Kind constructs a Provider; identityd drives Begin/Complete and enforces email-verified + allowed-domain policy on the result.
 Package idp defines the pluggable human-login identity-provider seam: cluster config (ClusterIdentityProvider) names a Kind; the Kind constructs a Provider; identityd drives Begin/Complete and enforces email-verified + allowed-domain policy on the result.
idp/fakekind
Package fakekind registers an in-process idp kind for tests and the e2e harness.
 Package fakekind registers an in-process idp kind for tests and the e2e harness.
idp/googlekind
Package googlekind is the "google" idp kind: the generic oidc kind preset with Google's pinned issuer, an hd= login hint, and a server-side re-check of the hd claim (the hint is UX; the claim check is the enforcement).
 Package googlekind is the "google" idp kind: the generic oidc kind preset with Google's pinned issuer, an hd= login hint, and a server-side re-check of the hd claim (the hint is UX; the claim check is the enforcement).
idp/idpscreens
Package idpscreens holds the questions more than one identity-provider kind asks — "which client did you register, what is its secret, and who may sign in with it?" — described once instead of once per kind.
 Package idpscreens holds the questions more than one identity-provider kind asks — "which client did you register, what is its secret, and who may sign in with it?" — described once instead of once per kind.
idp/oidckind
Package oidckind implements the generic OIDC idp kind — issuer discovery + code exchange + ID-token verification via go-oidc.
 Package oidckind implements the generic OIDC idp kind — issuer discovery + code exchange + ID-token verification via go-oidc.
idp/oidckind/oidctest
Package oidctest provides a fake OIDC issuer (httptest.Server) for testing the oidc and google idp kinds.
 Package oidctest provides a fake OIDC issuer (httptest.Server) for testing the oidc and google idp kinds.
idp/passwordkind
Package passwordkind implements the "password" idp.Kind: a non-federated, password-only local IdP for the single-user macOS desktop's /admin console.
 Package passwordkind implements the "password" idp.Kind: a non-federated, password-only local IdP for the single-user macOS desktop's /admin console.
idp/registry
passthrough
Package passthrough is the canonical resolver for "which credentials does this AgentClass require under identityMode=userPassthrough?"
 Package passthrough is the canonical resolver for "which credentials does this AgentClass require under identityMode=userPassthrough?"
passthroughcatalog
Package passthroughcatalog provides MCPServer-by-credential-name lookup helpers shared between identityd (which routes credential link clicks to the OAuth or PAT flow based on the source MCPServer's Spec.Auth) and channelsd's credential_request watcher (which partitions the missing credentials into per-credential buttons by the same lookup).
 Package passthroughcatalog provides MCPServer-by-credential-name lookup helpers shared between identityd (which routes credential link clicks to the OAuth or PAT flow based on the source MCPServer's Spec.Auth) and channelsd's credential_request watcher (which partitions the missing credentials into per-credential buttons by the same lookup).
passthroughlink
Package passthroughlink mints + verifies HMAC-signed deep-links that channelsd sends a passthrough-session's starter and identityd consumes.
 Package passthroughlink mints + verifies HMAC-signed deep-links that channelsd sends a passthrough-session's starter and identityd consumes.
passthroughlink/sessionviewlink
Package sessionviewlink mints purpose="session_view" signed deep-links: a long-lived (7-day), shareable bearer capability for the session-view page (pkg/web/webui/sessionview), the shared-transcript mirror of a source channel's conversation.
 Package sessionviewlink mints purpose="session_view" signed deep-links: a long-lived (7-day), shareable bearer capability for the session-view page (pkg/web/webui/sessionview), the shared-transcript mirror of a source channel's conversation.
passthroughlink/viewlink
Package viewlink mints webd artifact-view deep-links from a passthroughlink Signer + a live webd base URL.
 Package viewlink mints webd artifact-view deep-links from a passthroughlink Signer + a live webd base URL.
provider
Package provider defines the /providers/ library shape and the compile-time embedded catalog of builtin providers.
 Package provider defines the /providers/ library shape and the compile-time embedded catalog of builtin providers.
refresh
Package refresh runs RFC 6749 refresh-token grants against an oauth credential's stored token_endpoint, writing the new access_token / refresh_token / expires_at back to the Secret atomically.
 Package refresh runs RFC 6749 refresh-token grants against an oauth credential's stored token_endpoint, writing the new access_token / refresh_token / expires_at back to the Secret atomically.
sensitive
setup
Package setup is the credential-acquisition engine.
 Package setup is the credential-acquisition engine.
setup/builtins
Package builtins holds Go-coded setup flows for curated providers.
 Package builtins holds Go-coded setup flows for curated providers.
setup/builtins/anthropic_oauth
Package anthropic_oauth is the builtin Go flow for the anthropic-oauth provider.
 Package anthropic_oauth is the builtin Go flow for the anthropic-oauth provider.
setup/builtins/flowscreens
Package flowscreens holds the steps more than one credential-setup flow takes: "open the page where this is generated", plus the flow-specific vocabulary a tui.Question is configured with — which address a provider documents itself at, and what shape its token has.
 Package flowscreens holds the steps more than one credential-setup flow takes: "open the page where this is generated", plus the flow-specific vocabulary a tui.Question is configured with — which address a provider documents itself at, and what shape its token has.
setup/builtins/github_pat
Package github_pat is the builtin Go flow for the github-pat provider.
 Package github_pat is the builtin Go flow for the github-pat provider.
setup/builtins/kubectl_kubeconfig
Package kubectl_kubeconfig is the builtin Go flow for the kubectl-kubeconfig provider.
 Package kubectl_kubeconfig is the builtin Go flow for the kubectl-kubeconfig provider.
setup/builtins/loader
Package loader blank-imports every v1 builtin flow so binaries get all of them registered with a single import.
 Package loader blank-imports every v1 builtin flow so binaries get all of them registered with a single import.
setup/builtins/oauth_mcp
Package oauth_mcp is the builtin Go flow for the oauth-mcp provider.
 Package oauth_mcp is the builtin Go flow for the oauth-mcp provider.
setup/builtins/onepassword_scim
Package onepassword_scim is the builtin Go flow for the onepassword-scim provider.
 Package onepassword_scim is the builtin Go flow for the onepassword-scim provider.
setup/builtins/slack_bot_token
Package slack_bot_token is the builtin Go flow for the slack-bot-token provider.
 Package slack_bot_token is the builtin Go flow for the slack-bot-token provider.
setup/builtins/tailscale_authkey
Package tailscale_authkey is the builtin Go flow for the tailscale-authkey provider.
 Package tailscale_authkey is the builtin Go flow for the tailscale-authkey provider.
setup/llmagent
Package llmagent runs the LLM-driven setup agent for any requirement that lacks a builtin Go flow.
 Package llmagent runs the LLM-driven setup agent for any requirement that lacks a builtin Go flow.
setup/llmagent/tools
Package tools holds the LLM-tool implementations for the setup agent.
 Package tools holds the LLM-tool implementations for the setup agent.
subjectresolve
Package subjectresolve resolves an agent-supplied user REFERENCE to a canonical platform user, server-side, against records the platform already trusts — never an agent-claimed mapping.
 Package subjectresolve resolves an agent-supplied user REFERENCE to a canonical platform user, server-side, against records the platform already trusts — never an agent-claimed mapping.
useridentity
Package useridentity persists credentials on the cluster-scoped UserIdentity CRD and its master credential Secrets, and holds the naming helpers every component derives those names with.
 Package useridentity persists credentials on the cluster-scoped UserIdentity CRD and its master credential Secrets, and holds the naming helpers every component derives those names with.
The AGENT-OWNED half of the credential_update deep-link flow.
 The AGENT-OWNED half of the credential_update deep-link flow.
icons
Package icons hosts identityd's favicon discovery + cache + serve pipeline.
 Package icons hosts identityd's favicon discovery + cache + serve pipeline.
Package kube holds small Kubernetes client-config helpers shared by the cmd/ server binaries (channelsd, webd).
 Package kube holds small Kubernetes client-config helpers shared by the cmd/ server binaries (channelsd, webd).
Package kubeyaml splits a multi-document Kubernetes YAML (or JSON) stream into unstructured objects.
 Package kubeyaml splits a multi-document Kubernetes YAML (or JSON) stream into unstructured objects.
Package manifests embeds the kustomize-rendered operator install YAML.
 Package manifests embeds the kustomize-rendered operator install YAML.
crdschematest
Package crdschematest reads field schemas out of the SHIPPED install bundle, so a test asserting a CRD default or enum derives it from generated YAML rather than from the Go marker it is supposed to be checking.
 Package crdschematest reads field schemas out of the SHIPPED install bundle, so a test asserting a CRD default or enum derives it from generated YAML rather than from the Go marker it is supposed to be checking.
Package nats provides NATS decentralized-JWT identity generation, per-client user-JWT minting, TLS material, and a connection helper.
 Package nats provides NATS decentralized-JWT identity generation, per-client user-JWT minting, TLS material, and a connection helper.
natstest
Package natstest answers one question for tests: given a minted nats.UserGrant, does the NATS server permit this subject?
 Package natstest answers one question for tests: given a minted nats.UserGrant, does the NATS server permit this subject?
subjects
Package subjects owns the NATS subject grammar: every subject any AP component publishes on or subscribes to is spelled here, once, and both its concrete and its wildcard form derive from that one spelling.
 Package subjects owns the NATS subject grammar: every subject any AP component publishes on or subscribes to is spelled here, once, and both its concrete and its wildcard form derive from that one spelling.
oap
Package oap defines the .oap agent-container format: a single-file, OCI-native bundle describing one AgentClass and its dependency graph.
 Package oap defines the .oap agent-container format: a single-file, OCI-native bundle describing one AgentClass and its dependency graph.
channelplan
Package channelplan is everything about a bundle's DECLARED channels (oap.Requires.Channels) that needs the channel-kind registry: linting the declaration today, and planning the install-time wizard runs it drives next.
 Package channelplan is everything about a bundle's DECLARED channels (oap.Requires.Channels) that needs the channel-kind registry: linting the declaration today, and planning the install-time wizard runs it drives next.
install
Package install implements the fail-closed checks that gate a .oap install before any cluster write happens.
 Package install implements the fail-closed checks that gate a .oap install before any cluster write happens.
instance
Package instance stamps install-identifying labels onto a bundle's CRs and, on --name/collision, prefixes their names and rewrites the naming cross-references between them so the graph stays internally consistent after the prefix is applied.
 Package instance stamps install-identifying labels onto a bundle's CRs and, on --name/collision, prefixes their names and rewrites the naming cross-references between them so the graph stays internally consistent after the prefix is applied.
oci
Package oci pushes and pulls .oap agent containers (the OCI-layout tar produced by pkg/platform/oap.Pack) to and from OCI-compliant registries, using oras-go/v2 for the registry-protocol plumbing.
 Package oci pushes and pulls .oap agent containers (the OCI-layout tar produced by pkg/platform/oap.Pack) to and from OCI-compliant registries, using oras-go/v2 for the registry-protocol plumbing.
questionscreen
Package questionscreen builds the tui.Screen that asks one oap.Question, whatever collected the question in the first place.
 Package questionscreen builds the tui.Screen that asks one oap.Question, whatever collected the question in the first place.
source
Package source builds an oap.Bundle from a place that holds an agent — a folder on disk today, a live cluster (cluster.go), a registry later.
 Package source builds an oap.Bundle from a place that holds an agent — a folder on disk today, a live cluster (cluster.go), a registry later.
Package pipeline is the generic session-lifecycle interceptor framework.
 Package pipeline is the generic session-lifecycle interceptor framework.
Package podspec builds a sandboxed corev1.Pod from a SpiceboxSession + resolved SpiceboxClass spec.
 Package podspec builds a sandboxed corev1.Pod from a SpiceboxSession + resolved SpiceboxClass spec.
Package podstatus holds small, controller-agnostic readers over a Pod's runtime status.
 Package podstatus holds small, controller-agnostic readers over a Pod's runtime status.
Package preferences validates and resolves per-user agent preferences: the class-authored schema (AgentClass.spec.userPreferences), the platform admin's globals (AgentSettings.spec.classUserPreferences), and the user's saved values (the user_preference memory kind).
 Package preferences validates and resolves per-user agent preferences: the class-authored schema (AgentClass.spec.userPreferences), the platform admin's globals (AgentSettings.spec.classUserPreferences), and the user's saved values (the user_preference memory kind).
Package relsync defines the seam between the RelationshipSource reconciler and the directories it syncs.
 Package relsync defines the seam between the RelationshipSource reconciler and the directories it syncs.
Package schedfit answers one question about a cluster: can it EVER schedule a pod that requests this much?
 Package schedfit answers one question about a cluster: can it EVER schedule a pod that requests this much?
Package settings folds the four-tier chain — cluster, namespace, AgentClass, AgentSession — into one EffectiveSettings plus the Violations that fold produced.
 Package settings folds the four-tier chain — cluster, namespace, AgentClass, AgentSession — into one EffectiveSettings plus the Violations that fold produced.
Package startup provides bounded-retry primitives for process startup steps that depend on other components becoming reachable.
 Package startup provides bounded-retry primitives for process startup steps that depend on other components becoming reachable.
Package workspace defines the Snapshotter interface for capturing and restoring AgentSession workspace PVC contents.
 Package workspace defines the Snapshotter interface for capturing and restoring AgentSession workspace PVC contents.
Package workspacekinds defines the pluggable driver surface for workspace sources — the origin a per-session workspace is cut from (a git repo today; hg, blob storage, or a local directory tomorrow).
 Package workspacekinds defines the pluggable driver surface for workspace sources — the origin a per-session workspace is cut from (a git repo today; hg, blob storage, or a local directory tomorrow).
git
Package git implements the git workspace-source driver: it builds the git commands to materialize a shared read-cache base, sync an overlay to the latest revision, and (Phase 4) apply overlay commits back to the origin.
 Package git implements the git workspace-source driver: it builds the git commands to materialize a shared read-cache base, sync an overlay to the latest revision, and (Phase 4) apply overlay commits back to the origin.
registry
Package registry is the global lookup for workspace-source drivers.
 Package registry is the global lookup for workspace-source drivers.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.