Claude Config API (v0.6): - Add CRUD endpoints for commands, skills, and agents - Commands/skills/agents stored in /workspace/.claude/ (per-project, in git) - Credentials shared via PVC at /root/.claude/ (shared across pods) - Use base64 encoding for file writes (prevents shell injection) - Add content size limits (1MB max) Security Hardening: - Add sanitize package for command/prompt validation - Add rate limiting middleware (token bucket algorithm) - Add concurrent command limiting - Add input sanitization to all command handlers - Gitignore secrets.yaml and credentials.yaml - Add *.example templates for secrets Testing Infrastructure: - Add testutil package with mocks and fixtures - Add unit tests for auth package (63% coverage) - Add unit tests for executor (47% coverage) - Add handler integration tests (40% coverage) - Add 100% coverage for sanitize, cmdlimit packages - Add 96% coverage for ratelimit package Infrastructure: - Shared Claude credentials PVC (ReadWriteMany) - Reduced workspace PVC size from 20Gi to 5Gi - Add init container cleanup before git clone - Document Longhorn RWX requirements Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
23 lines
734 B
Go
23 lines
734 B
Go
package port
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/orchard9/rdev/internal/domain"
|
|
)
|
|
|
|
// CommandExecutor defines operations for executing commands in pods.
|
|
type CommandExecutor interface {
|
|
// Execute runs a command in the target pod and streams output to the handler.
|
|
Execute(ctx context.Context, cmd *domain.Command, podName string, handler domain.OutputHandler) (*domain.CommandResult, error)
|
|
|
|
// Cancel attempts to cancel a running command.
|
|
Cancel(ctx context.Context, cmdID domain.CommandID) error
|
|
|
|
// PodExists checks if a pod exists and is running.
|
|
PodExists(ctx context.Context, podName string) (bool, error)
|
|
|
|
// CheckConnection verifies connectivity to the Kubernetes cluster.
|
|
CheckConnection(ctx context.Context) error
|
|
}
|