mirror of
https://github.com/hanzoai/tasks.git
synced 2026-10-04 02:04:03 +00:00
zeekay
40351cce6f
Goes from 135 MB binary with 1153 files importing go.temporal.io and 224
importing google.golang.org/grpc to a 10 MB native binary with ZERO of
either.
Deleted:
- tasks/, tasktests/, service/, chasm/, client/, api/, proto/, tools/
- cmd/tools/, components/, docker/
- schema/{cassandra,elasticsearch,mysql,postgresql,sqlite}/
- 40 tainted common/ subdirs + 7 top-level common files
- tests/testutils (no longer referenced after surviving deps drop common)
New cmd/tasksd (~100 lines) boots tasks.Embed (zap.Node) + http.Server.
New pkg/tasks/embed.go registers ZAP handlers for the SDK opcode surface
(0x0060-0x00A5). Workflow handlers return a 501 "not yet implemented"
envelope; native engine lands behind this contract.
Build: go build ./cmd/tasksd → 10 MB
Vet: go vet ./... → clean
Boot: tasksd --zap-port 9999 --http :7243
Probes: /healthz, /v1/tasks/health → 200
UI: /_/tasks/, / → 200 (embedded Vite bundle)
ZAP: _tasks._tcp on :9999 (mDNS disabled; direct connect)
go.mod: tidy. No go.temporal.io. No google.golang.org/grpc.
105 lines
3.0 KiB
Go
105 lines
3.0 KiB
Go
package nexus
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"encoding/json"
|
|
|
|
"go.temporal.io/api/serviceerror"
|
|
tokenspb "go.temporal.io/server/api/token/v1"
|
|
"google.golang.org/grpc/codes"
|
|
"google.golang.org/grpc/status"
|
|
"google.golang.org/protobuf/proto"
|
|
)
|
|
|
|
const (
|
|
// Currently supported token version.
|
|
TokenVersion = 1
|
|
// Header key for the callback token in StartOperation requests.
|
|
CallbackTokenHeader = "Temporal-Callback-Token"
|
|
)
|
|
|
|
// CallbackToken contains an encoded NexusOperationCompletion message.
|
|
type CallbackToken struct {
|
|
// Token version - currently only [TokenVersion] is supported.
|
|
Version int `json:"v"`
|
|
// Encoded [tokenspb.NexusOperationCompletion].
|
|
Data string `json:"d"`
|
|
// More fields and encryption support will come later.
|
|
}
|
|
|
|
type CallbackTokenGenerator struct {
|
|
// In the future this will contain more fields such as encryption keys.
|
|
}
|
|
|
|
func NewCallbackTokenGenerator() *CallbackTokenGenerator {
|
|
return &CallbackTokenGenerator{}
|
|
}
|
|
|
|
func (g *CallbackTokenGenerator) Tokenize(completion *tokenspb.NexusOperationCompletion) (string, error) {
|
|
b, err := proto.Marshal(completion)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
token := CallbackToken{
|
|
Version: TokenVersion,
|
|
Data: base64.URLEncoding.EncodeToString(b),
|
|
}
|
|
b, err = json.Marshal(token)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return string(b), nil
|
|
}
|
|
|
|
// DecodeCompletion decodes a callback token unwrapping the contained NexusOperationCompletion proto struct.
|
|
func (g *CallbackTokenGenerator) DecodeCompletion(token *CallbackToken) (*tokenspb.NexusOperationCompletion, error) {
|
|
plaintext, err := base64.URLEncoding.DecodeString(token.Data)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
completion := &tokenspb.NexusOperationCompletion{}
|
|
if err := proto.Unmarshal(plaintext, completion); err != nil {
|
|
return nil, err
|
|
}
|
|
if err := validateCompletion(completion); err != nil {
|
|
return nil, err
|
|
}
|
|
return completion, nil
|
|
}
|
|
|
|
func validateCompletion(completion *tokenspb.NexusOperationCompletion) error {
|
|
hasCHASMRef := len(completion.GetComponentRef()) > 0
|
|
hasHSMRef := completion.GetNamespaceId() != "" ||
|
|
completion.GetWorkflowId() != "" ||
|
|
completion.GetRunId() != "" ||
|
|
completion.GetRef() != nil
|
|
isCompleteHSM := completion.GetNamespaceId() != "" &&
|
|
completion.GetWorkflowId() != "" &&
|
|
completion.GetRunId() != "" &&
|
|
completion.GetRef() != nil
|
|
|
|
switch {
|
|
case hasCHASMRef && hasHSMRef:
|
|
return serviceerror.NewInvalidArgument("callback token contains both HSM and CHASM fields")
|
|
case hasCHASMRef:
|
|
return nil
|
|
case isCompleteHSM:
|
|
return nil
|
|
default:
|
|
return serviceerror.NewInvalidArgument("callback token must contain either all HSM fields or a component ref")
|
|
}
|
|
}
|
|
|
|
// DecodeCallbackToken unmarshals the given token applying minimal data verification.
|
|
func DecodeCallbackToken(encoded string) (token *CallbackToken, err error) {
|
|
err = json.Unmarshal([]byte(encoded), &token)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if token.Version != TokenVersion {
|
|
return nil, status.Errorf(codes.InvalidArgument, "unsupported token version: %d", token.Version)
|
|
}
|
|
return
|
|
}
|