internal/

Package auth is the mAPI-ng dashboard authentication layer: OIDC login (GitHub/Google, no passwords — CONTEXT Member / roles), HMAC-signed session cookies, and a middleware that gates the dashboard to the caller's org.

Package control is the mAPI-ng control plane: the Postgres-backed store of orgs (tenants), ingest keys, members, and plan limits.

Package guardrail holds the server-enforced, per-tenant limits that protect the ingest path from an untrusted client (CONTEXT Guardrails): ingest rate limit, cardinality cap, max payload size, and retention.

Package ingest is the mAPI-ng collector: the Connect/gRPC IngestService handler that authenticates ingest keys, resolves the tenant, enforces the timestamp policy, and writes Summary rows to the data plane.

Package storage is the mAPI-ng data plane: the ClickHouse-backed writer and query layer for Summary rows.

Package tenant defines the TenantID value type: the organisation identity that scopes every data-plane read and write.

Package web serves the mAPI-ng dashboard: the fixed, non-configurable, auto- generated 3-level RED view (CONTEXT Dashboard) plus the live 4-step onboarding panel driven by the handshake.