didericis
ea0c070cfe
Bridges the per-bottle `prepare` output to the consolidated registry: `registration_inputs(plan)` turns a prepared egress plan into the backend-neutral inputs `Orchestrator.launch_bottle` takes. - egress_policy(plan): the policy blob = the exact routes YAML the per-bottle sidecar read from a file; the multi-tenant gateway's PolicyResolver now fetches it from the registry per request instead. Same egress_render_routes, so a bottle's allow-list is byte-identical moving onto the shared gateway. - RegistrationInputs bundles policy + metadata; metadata carries the human slug so the shared registry can map a minted bottle id back to a name (console / supervise display). Host-side glue (imports bot_bottle.egress) used by the launch path — not the lean orchestrator control-plane process. Not yet wired into launch (that's 13c/13d), consistent with the slice-6/10 pattern of landing the primitive before the cut-over. Key test: the policy round-trips through load_config back to the same routes + log level — the resolver-served policy reconstructs the per-bottle egress config exactly. pyright 0 errors; pylint 9.83/10; unit suite green (1718 tests; the 13 test_sidecar_init /bin/sleep errors are pre-existing NixOS-local noise). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WBMWTEtQdJ4W5UrWuLHCck
58 lines
2.1 KiB
Python
58 lines
2.1 KiB
Python
"""Consolidated registration inputs (PRD 0070, docker slice).
|
|
|
|
Bridges the existing per-bottle `prepare` output to the consolidated
|
|
registry: turns a prepared bottle's egress plan into the backend-neutral
|
|
inputs `Orchestrator.launch_bottle` takes — the egress **policy** blob and
|
|
launch **metadata**.
|
|
|
|
The policy blob is the exact routes YAML the per-bottle egress sidecar used
|
|
to read from a file; in the consolidated model the multi-tenant gateway's
|
|
`PolicyResolver` fetches it from the registry per request (keyed by source
|
|
IP) instead. Same render, so consolidated and single-tenant egress apply
|
|
byte-identical policy — a bottle's allow-list doesn't change when it moves
|
|
onto the shared gateway.
|
|
|
|
Host-side glue (imports `bot_bottle.egress`), used by the launch path — not
|
|
by the lean orchestrator control-plane process itself.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import json
|
|
from dataclasses import dataclass
|
|
|
|
from ..egress import EgressPlan, egress_render_routes
|
|
|
|
|
|
@dataclass(frozen=True)
|
|
class RegistrationInputs:
|
|
"""What `Orchestrator.launch_bottle` needs to register a bottle, derived
|
|
from its prepared plan. `policy` is served verbatim by the gateway's
|
|
`/resolve`; `metadata` is opaque forward-compat state — it carries the
|
|
human slug so the console / supervise can show a name, not just the
|
|
minted bottle id."""
|
|
|
|
policy: str
|
|
metadata: str
|
|
|
|
|
|
def egress_policy(plan: EgressPlan) -> str:
|
|
"""The bottle's egress policy blob: the routes YAML the gateway serves
|
|
and the addon parses with `load_config`. Identical to the per-bottle
|
|
`routes.yaml` render, so the consolidated path applies the same
|
|
allow-list."""
|
|
return egress_render_routes(plan.routes, log=plan.log)
|
|
|
|
|
|
def registration_inputs(plan: EgressPlan) -> RegistrationInputs:
|
|
"""Assemble the orchestrator registration inputs from a prepared egress
|
|
plan. `metadata` records the slug so the shared registry can map a minted
|
|
bottle id back to its human name."""
|
|
return RegistrationInputs(
|
|
policy=egress_policy(plan),
|
|
metadata=json.dumps({"slug": plan.slug}),
|
|
)
|
|
|
|
|
|
__all__ = ["RegistrationInputs", "egress_policy", "registration_inputs"]
|