Add cloud credential serialization package

go.mod

@@ -7,26 +7,26 @@ toolchain go1.23.2
 require (
 	github.com/alecthomas/units v0.0.0-20240927000941-0f3dac36c52b
 	github.com/bojanz/currency v1.3.1
+	github.com/cenkalti/backoff/v4 v4.3.0
+	github.com/gliderlabs/ssh v0.3.8
 	github.com/google/go-cmp v0.7.0
 	github.com/google/uuid v1.6.0
 	github.com/jarcoal/httpmock v1.4.0
 	github.com/nebius/gosdk v0.0.0-20250731090238-d96c0d4a5930
 	github.com/stretchr/testify v1.9.0
+	golang.org/x/crypto v0.41.0
 )
 
 require (
 	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.31.0-20231030212536-12f9cba37c9d.2 // indirect
 	github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be // indirect
-	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/cockroachdb/apd/v3 v3.2.1 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/gliderlabs/ssh v0.3.8 // indirect
 	github.com/gofrs/flock v0.12.1 // indirect
 	github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
 	github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.1.0 // indirect
 	github.com/kr/text v0.2.0 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
-	golang.org/x/crypto v0.41.0 // indirect
 	golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect
 	golang.org/x/net v0.42.0 // indirect
 	golang.org/x/sync v0.16.0 // indirect

go.sum

@@ -58,20 +58,14 @@ golang.org/x/crypto v0.41.0 h1:WKYxWedPGCTVVl5+WHSSrOBT0O8lx32+zxmHxijgXp4=
 golang.org/x/crypto v0.41.0/go.mod h1:pO5AFd7FA68rFak7rOAGVuygIISepHftHnr8dr6+sUc=
 golang.org/x/exp v0.0.0-20230905200255-921286631fa9 h1:GoHiUyI/Tp2nVkLI2mCxVkOjsbSXD66ic0XW0js0R9g=
 golang.org/x/exp v0.0.0-20230905200255-921286631fa9/go.mod h1:S2oDrQGGwySpoQPVqRShND87VCbxmc6bL1Yd2oYrm6k=
-golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
-golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
 golang.org/x/net v0.42.0 h1:jzkYrhi3YQWD6MLBJcsklgQsoAcw89EcZbJw8Z614hs=
 golang.org/x/net v0.42.0/go.mod h1:FF1RA5d3u7nAYA4z2TkclSCKh68eSXtiFwcWQpPXdt8=
-golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
-golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sync v0.16.0 h1:ycBJEhp9p4vXvUZNszeOq0kGTPghopOL8q0fq3vstxw=
 golang.org/x/sync v0.16.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
-golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik=
-golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI=
 golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/text v0.23.0 h1:D71I7dUrlY+VX0gQShAThNGHFxZ13dGLBHQLVl1mJlY=
-golang.org/x/text v0.23.0/go.mod h1:/BLNzu4aZCJ1+kcD0DNRotWKage4q2rGVAg4o22unh4=
+golang.org/x/term v0.34.0 h1:O/2T7POpk0ZZ7MAzMeWFSg6S5IpWd/RXDlM9hgM3DR4=
+golang.org/x/term v0.34.0/go.mod h1:5jC53AEywhIVebHgPVeg0mj8OD3VO9OzclacVrqpaAw=
 golang.org/x/text v0.28.0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng=
 golang.org/x/text v0.28.0/go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=

internal/fluidstack/v1/client.go

@@ -14,8 +14,8 @@ const CloudProviderID = "fluidstack"
 
 // FluidStackCredential implements the CloudCredential interface for FluidStack
 type FluidStackCredential struct {
-	RefID  string
-	APIKey string
+	RefID  string `json:"ref_id"`
+	APIKey string `json:"api_key"`
 }
 
 var _ v1.CloudCredential = &FluidStackCredential{}

internal/lambdalabs/v1/client.go

@@ -14,8 +14,8 @@ import (
 
 // LambdaLabsCredential implements the CloudCredential interface for Lambda Labs
 type LambdaLabsCredential struct {
-	RefID  string
-	APIKey string
+	RefID  string `json:"ref_id"`
+	APIKey string `json:"api_key"`
 }
 
 var _ v1.CloudCredential = &LambdaLabsCredential{}

internal/nebius/v1/client.go

@@ -9,9 +9,9 @@ import (
 )
 
 type NebiusCredential struct {
-	RefID             string
-	ServiceAccountKey string // JSON service account key
-	ProjectID         string
+	RefID             string `json:"ref_id"`
+	ServiceAccountKey string `json:"service_account_key"` // JSON service account key
+	ProjectID         string `json:"project_id"`
 }
 
 var _ v1.CloudCredential = &NebiusCredential{}

internal/serialization/v1/serialization.go

@@ -0,0 +1,179 @@
+package v1
+
+import (
+	"encoding/json"
+	"fmt"
+
+	fluidstackv1 "github.com/brevdev/cloud/internal/fluidstack/v1"
+	lambdalabsv1 "github.com/brevdev/cloud/internal/lambdalabs/v1"
+	nebiusv1 "github.com/brevdev/cloud/internal/nebius/v1"
+	v1 "github.com/brevdev/cloud/pkg/v1"
+)
+
+type SerializedCredential struct {
+	ProviderID string          `json:"provider_id"`
+	Data       json.RawMessage `json:"data"`
+}
+
+type SerializableCredential interface {
+	v1.CloudCredential
+	SerializeData() (interface{}, error)
+}
+
+func SerializeCredentialData(providerID string, credData interface{}) ([]byte, error) {
+	if providerID == "" {
+		return nil, fmt.Errorf("provider_id cannot be empty")
+	}
+
+	dataBytes, err := json.Marshal(credData)
+	if err != nil {
+		return nil, fmt.Errorf("failed to marshal credential data: %w", err)
+	}
+
+	serialized := SerializedCredential{
+		ProviderID: providerID,
+		Data:       dataBytes,
+	}
+
+	return json.Marshal(serialized)
+}
+
+func SerializeCredentialDataToString(providerID string, credData interface{}) (string, error) {
+	bytes, err := SerializeCredentialData(providerID, credData)
+	if err != nil {
+		return "", err
+	}
+	return string(bytes), nil
+}
+
+func SerializeCredentialDataToJSON(providerID string, credData interface{}) ([]byte, error) {
+	return SerializeCredentialData(providerID, credData)
+}
+
+func SerializeCredential(cred v1.CloudCredential) ([]byte, error) {
+	if cred == nil {
+		return nil, fmt.Errorf("credential cannot be nil")
+	}
+
+	serializableCred, ok := cred.(SerializableCredential)
+	if !ok {
+		return nil, fmt.Errorf("credential does not implement SerializableCredential interface")
+	}
+
+	providerID := string(cred.GetCloudProviderID())
+	if providerID == "" {
+		return nil, fmt.Errorf("credential must have a valid provider ID")
+	}
+
+	credData, err := serializableCred.SerializeData()
+	if err != nil {
+		return nil, fmt.Errorf("failed to serialize credential data: %w", err)
+	}
+
+	return SerializeCredentialData(providerID, credData)
+}
+
+func SerializeCredentialToString(cred v1.CloudCredential) (string, error) {
+	bytes, err := SerializeCredential(cred)
+	if err != nil {
+		return "", err
+	}
+	return string(bytes), nil
+}
+
+func SerializeCredentialToJSON(cred v1.CloudCredential) ([]byte, error) {
+	return SerializeCredential(cred)
+}
+
+func DeserializeCredential(data []byte) (v1.CloudCredential, error) {
+	if len(data) == 0 {
+		return nil, fmt.Errorf("data cannot be empty")
+	}
+
+	var serialized SerializedCredential
+	if err := json.Unmarshal(data, &serialized); err != nil {
+		return nil, fmt.Errorf("failed to unmarshal serialized credential: %w", err)
+	}
+
+	if serialized.ProviderID == "" {
+		return nil, fmt.Errorf("provider_id cannot be empty")
+	}
+
+	return DeserializeCredentialByProvider(serialized.ProviderID, serialized.Data)
+}
+
+func DeserializeCredentialFromString(data string) (v1.CloudCredential, error) {
+	return DeserializeCredential([]byte(data))
+}
+
+func DeserializeCredentialFromJSON(data []byte) (v1.CloudCredential, error) {
+	return DeserializeCredential(data)
+}
+
+func DeserializeCredentialByProvider(providerID string, data json.RawMessage) (v1.CloudCredential, error) {
+	switch providerID {
+	case lambdalabsv1.CloudProviderID:
+		return DeserializeLambdaLabsCredential(data)
+	case fluidstackv1.CloudProviderID:
+		return DeserializeFluidStackCredential(data)
+	case "nebius":
+		return DeserializeNebiusCredential(data)
+	default:
+		return nil, fmt.Errorf("unsupported provider: %s", providerID)
+	}
+}
+
+func DeserializeLambdaLabsCredential(data json.RawMessage) (v1.CloudCredential, error) {
+	var credData lambdalabsv1.LambdaLabsCredential
+	if err := json.Unmarshal(data, &credData); err != nil {
+		return nil, fmt.Errorf("failed to unmarshal lambda labs credential data: %w", err)
+	}
+
+	if credData.RefID == "" {
+		return nil, fmt.Errorf("lambda labs credential must have a reference ID")
+	}
+
+	if credData.APIKey == "" {
+		return nil, fmt.Errorf("lambda labs credential must have an API key")
+	}
+
+	return &credData, nil
+}
+
+func DeserializeFluidStackCredential(data json.RawMessage) (v1.CloudCredential, error) {
+	var credData fluidstackv1.FluidStackCredential
+	if err := json.Unmarshal(data, &credData); err != nil {
+		return nil, fmt.Errorf("failed to unmarshal fluidstack credential data: %w", err)
+	}
+
+	if credData.RefID == "" {
+		return nil, fmt.Errorf("fluidstack credential must have a reference ID")
+	}
+
+	if credData.APIKey == "" {
+		return nil, fmt.Errorf("fluidstack credential must have an API key")
+	}
+
+	return &credData, nil
+}
+
+func DeserializeNebiusCredential(data json.RawMessage) (v1.CloudCredential, error) {
+	var credData nebiusv1.NebiusCredential
+	if err := json.Unmarshal(data, &credData); err != nil {
+		return nil, fmt.Errorf("failed to unmarshal nebius credential data: %w", err)
+	}
+
+	if credData.RefID == "" {
+		return nil, fmt.Errorf("nebius credential must have a reference ID")
+	}
+
+	if credData.ServiceAccountKey == "" {
+		return nil, fmt.Errorf("nebius credential must have a service account key")
+	}
+
+	if credData.ProjectID == "" {
+		return nil, fmt.Errorf("nebius credential must have a project ID")
+	}
+
+	return &credData, nil
+}