feat(core): add interceptors to start options

[alkalescent]

Proposed Changes

Checklist

• I have added or updated unit tests
• I have added or updated integration tests (if appropriate)
• I have added or updated documentation

Testing Instructions

[gemini-code-assist]

Summary of Changes

Hello @alkalescent, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request introduces a new feature that allows developers to programmatically inject custom connect.Interceptors into the server's startup process. This provides a flexible way to extend the server's RPC handling capabilities, enabling custom logic to be applied to requests and responses for both standard Connect RPCs and internal IPC mechanisms, without relying on configuration files.

Highlights

• Interceptor Extensibility: Added new fields ExtraConnectInterceptors and ExtraIPCInterceptors to the server configuration to allow programmatic injection of connect.Interceptors.
• New Server Options: Introduced WithConnectInterceptors and WithIPCInterceptors options for the server StartConfig, enabling users to supply custom interceptors at startup.
• Interceptor Integration: Integrated these newly provided interceptors into the server's RPC setup for both standard Connect RPCs and in-process IPCs.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

---

Request flows through code, Interceptors guide its path, Logic finds its way.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request introduces the ability to programmatically add connect.Interceptors at startup for both Connect and IPC RPCs. The changes are well-implemented across the server options, start logic, and RPC creation. I have a couple of suggestions to improve code conciseness and reduce duplication.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	184.007121ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	109.103588ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	377.376375ms
Throughput	264.99 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.094148723s
Average Latency	398.996823ms
Throughput	124.71 requests/second

[github-actions]

X-Test Results

opentdfplatformXCI41N.dockerbuild
cukes-report
✅ js-v0.9.0
✅ java-v0.9.0
✅ js-pull-3031
bats-test-results
✅ go-v0.9.0
✅ java-pull-3031
✅ go-pull-3031

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	152.375553ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	85.672111ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	368.498652ms
Throughput	271.37 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.821576636s
Average Latency	376.355873ms
Throughput	132.20 requests/second

[github-actions]

X-Test Results

opentdfplatformBLXUQ8.dockerbuild
cukes-report
✅ js-v0.9.0
✅ js-pull-3031
✅ java-v0.9.0
bats-test-results
✅ java-pull-3031
✅ go-v0.9.0
✅ go-pull-3031

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	183.895274ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	98.669038ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	361.99445ms
Throughput	276.25 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.493491204s
Average Latency	383.203935ms
Throughput	129.89 requests/second

[github-actions]

X-Test Results

opentdfplatformMD7OE5.dockerbuild
cukes-report
✅ js-v0.9.0
✅ js-pull-3031
✅ java-v0.9.0
bats-test-results
✅ go-v0.9.0
test-cases-mapping-report
✅ java-pull-3031
✅ go-pull-3031

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	198.225747ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	107.523188ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	367.192827ms
Throughput	272.34 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.611680473s
Average Latency	383.764944ms
Throughput	129.49 requests/second

[github-actions]

X-Test Results

opentdfplatformNCISK3.dockerbuild
cukes-report
✅ js-v0.9.0
✅ js-pull-3031
✅ java-v0.9.0
bats-test-results
test-cases-mapping-report
✅ java-pull-3031
✅ go-v0.9.0
✅ go-pull-3031