Tyler King
f3ffeb38ae
Extracts agent identity registration behind AgentRegistrar protocol. Three implementations: KeycloakRegistrar — Keycloak Admin REST API (existing, refactored) EntraRegistrar — Microsoft Entra Agent ID platform (NEW) StubRegistrar — dev mode without real IdP Driver selection via AGENT_REGISTRAR env var: auto — prefers Entra if configured, Keycloak fallback, stub default keycloak — explicit Keycloak entra — explicit Entra Agent ID Entra integration: Registers agent as Entra app + service principal via Graph API Tags with delegation metadata (agent_type, delegator, governed:true) Client secret TTL matches delegation expiry Deletes application on revocation (cascades to SP) Uses msal for token acquisition Future: native Agent ID Blueprint API when GA Files: registrar.py — AgentRegistrar protocol + AgentCredentials dataclass registrar_keycloak.py — refactored from keycloak.py registrar_entra.py — NEW Entra Graph API driver registrar_stub.py — dev mode stub registrar_factory.py — driver selection factory delegation.py — updated to use registrar abstraction settings.py — added Entra config + agent_registrar field All 7 smoke tests pass with stub registrar. Implements GCAP-SPEC-LLM-PRINCIPAL-BROKER-0001 §4.1-§4.3. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
30 lines
687 B
Text
30 lines
687 B
Text
# LLM Principal Broker — companion to fastapi-gsap
|
|
|
|
# Service
|
|
LLM_BROKER_PORT=8092
|
|
|
|
# GSAP Broker
|
|
GSAP_BROKER_URL=http://localhost:8000
|
|
GSAP_BEARER_TOKEN=
|
|
|
|
# Keycloak Admin
|
|
KEYCLOAK_URL=http://localhost:8080
|
|
KEYCLOAK_REALM=substrate
|
|
KEYCLOAK_ADMIN_CLIENT_ID=llm-broker-admin
|
|
KEYCLOAK_ADMIN_CLIENT_SECRET=
|
|
|
|
# Chronicle (optional — events posted as Forgejo push webhooks)
|
|
CHRONICLE_WEBHOOK_URL=
|
|
|
|
# Agent registrar driver: auto | keycloak | entra
|
|
AGENT_REGISTRAR=auto
|
|
|
|
# Entra Agent ID (when AGENT_REGISTRAR=entra or auto)
|
|
ENTRA_TENANT_ID=
|
|
ENTRA_CLIENT_ID=
|
|
ENTRA_CLIENT_SECRET=
|
|
ENTRA_AGENT_BLUEPRINT_ID=
|
|
|
|
# Delegation Defaults
|
|
DEFAULT_DELEGATION_TTL_MINUTES=60
|
|
DEFAULT_MAX_COMMANDS=500
|