mirror of
https://github.com/hanzoai/tasks.git
synced 2026-10-04 02:04:03 +00:00
zeekay
40351cce6f
Goes from 135 MB binary with 1153 files importing go.temporal.io and 224
importing google.golang.org/grpc to a 10 MB native binary with ZERO of
either.
Deleted:
- tasks/, tasktests/, service/, chasm/, client/, api/, proto/, tools/
- cmd/tools/, components/, docker/
- schema/{cassandra,elasticsearch,mysql,postgresql,sqlite}/
- 40 tainted common/ subdirs + 7 top-level common files
- tests/testutils (no longer referenced after surviving deps drop common)
New cmd/tasksd (~100 lines) boots tasks.Embed (zap.Node) + http.Server.
New pkg/tasks/embed.go registers ZAP handlers for the SDK opcode surface
(0x0060-0x00A5). Workflow handlers return a 501 "not yet implemented"
envelope; native engine lands behind this contract.
Build: go build ./cmd/tasksd → 10 MB
Vet: go vet ./... → clean
Boot: tasksd --zap-port 9999 --http :7243
Probes: /healthz, /v1/tasks/health → 200
UI: /_/tasks/, / → 200 (embedded Vite bundle)
ZAP: _tasks._tcp on :9999 (mDNS disabled; direct connect)
go.mod: tidy. No go.temporal.io. No google.golang.org/grpc.
39 lines
1.1 KiB
Go
39 lines
1.1 KiB
Go
package authorization
|
|
|
|
type Role int16
|
|
|
|
// @@@SNIPSTART temporal-common-authorization-role-enum
|
|
// User authz within the context of an entity, such as system, namespace or workflow.
|
|
// User may have any combination of these authz within each context, except for RoleUndefined, as a bitmask.
|
|
const (
|
|
RoleWorker = Role(1 << iota)
|
|
RoleReader
|
|
RoleWriter
|
|
RoleAdmin
|
|
RoleUndefined = Role(0)
|
|
)
|
|
|
|
// @@@SNIPEND
|
|
|
|
// Checks if the provided role bitmask represents a valid combination of authz
|
|
func (b Role) IsValid() bool {
|
|
return b&^(RoleWorker|RoleReader|RoleWriter|RoleAdmin) == 0
|
|
}
|
|
|
|
// @@@SNIPSTART temporal-common-authorization-claims
|
|
// Claims contains the identity of the subject and subject's roles at the system level and for individual namespaces
|
|
type Claims struct {
|
|
// Identity of the subject
|
|
Subject string
|
|
// Role within the context of the whole Temporal cluster or a multi-cluster setup
|
|
System Role
|
|
// Roles within specific namespaces
|
|
Namespaces map[string]Role
|
|
// Free form bucket for extra data
|
|
Extensions any
|
|
// AuthType identifies the authentication method that produced these claims (e.g., "jwt", "mtls").
|
|
AuthType string
|
|
}
|
|
|
|
// @@@SNIPEND
|