pkgs/

Package aadauth provides a shared, dependency-light emulation of Azure AD (Microsoft Entra ID)'s client-credentials OAuth2 flow: an RSA-signed JWT issuer, JWKS publication, and the two AAD instance/authority discovery documents (openid-configuration and /common/discovery/instance).

Package apptrace keeps a bounded, in-memory trace of every AWS API call that passes through the router, plus child spans for cross-service deliveries (SNS to SQS, EventBridge targets, ...) linked to the request that triggered them.

Package arn provides utilities for building AWS ARNs.

Package awscron implements the field-matching primitives shared by AWS's cron(...) schedule expression dialects: numeric values, three-letter names, *, ?, ranges, steps, and comma lists for a single field, plus AWS's day-of-month/day-of-week OR semantics.

Package awserr provides shared sentinel errors for AWS service stubs.

Package awsid mints AWS-shaped resource IDs.

Package awsmeta defines the Metadata struct that carries AWS request-scoped identity (account, region, partition, request ID) and a helper to populate it from an *http.Request.

Package awstime provides helpers for emitting timestamps in the wire format expected by AWS JSON-protocol SDK deserializers.

Package azureauth implements Azure Storage's SharedKey and SharedKeyLite Authorization-header scheme: structural parsing of the header, the canonicalization + HMAC-SHA256 signing algorithm described in Microsoft's "Authorize with Shared Key" REST reference, and an explicit, opt-in verification call.

Package billingexport holds the cost-line source, S3 sink and file encoders shared by the Cost and Usage Reports and Billing and Cost Management Data Exports emulators.

Package collections provides small, type-safe slice and map helpers that the Go standard library's slices and maps packages do not cover.

Package compress is runtime content-negotiating response compression (zstd, br, gzip) with pooled encoders and an optional cache for immutable assets.

Package condeval holds IAM policy / STS trust-policy condition-operator logic shared between services/iam and services/sts: ARN segment-wise matching (ArnEquals/ArnLike/ArnNotEquals/ArnNotLike) and Date operand parsing/comparison (DateEquals/.../DateGreaterThanEquals).

Package config provides centralized AWS configuration shared by all Gopherstack services.

Package container provides a runtime-agnostic container integration layer for Gopherstack.

Package ctxval is a type-safe wrapper over context.Context values using generics.

Package cwmetric is the shared shape for services that publish in-process CloudWatch metrics.

Package devtls provides a shared, in-memory self-signed TLS certificate generator for gopherstack's opt-in/mandatory dev HTTPS listeners.

Package dns provides an embedded DNS server for Gopherstack that resolves synthetic AWS-style hostnames (e.g.

Package docker provides a Docker integration layer for Gopherstack.

Package eventpattern holds the numeric-comparison and CIDR-matching core shared by EventBridge's and Pipes' event-pattern content filters (eb-event-patterns-content-based-filtering.html).

Package events defines the event system for Gopherstack.

Package extensions runs out-of-process gopherstack extensions: executables or container images that register routes and hooks over a local control API.

Package gcpdispatch holds helpers shared by the GCP emulators that deliver scheduled HTTP requests.

Package httpclient builds outbound HTTP clients that own their transport.

Package httptarget holds the pieces shared by services that deliver events to HTTP-style targets (API Gateway REST APIs and EventBridge API destinations).

Package httputils provides reusable HTTP utility components.

Package iampolicystream records IAM evaluation events in a bounded ring buffer, fans them out to live subscribers and derives least-privilege policy suggestions from them.

Package idempotency replays client-token creates: a retry with the same token and parameters returns the resource the first call made.

Package inithooks provides support for running user-defined scripts on Gopherstack startup.

Package iso8601 parses and formats the PnDTnHnMnS/PTnHnMnS subset of ISO 8601 durations used by Azure Service Bus's LockDuration/ DefaultMessageTimeToLive XML properties, and by ARM's equivalent JSON properties on Microsoft.ServiceBus queue/topic/subscription resources.

Package lockmetrics provides an instrumented sync.RWMutex that emits Prometheus metrics on every lock acquisition and release.

Package logger is the project-wide slog wrapper.

Package odatatable implements the shared entity CRUD / $filter engine behind Azure Table Storage's and Azure Cosmos DB's Table API OData/JSON wire protocol: both are wire-identical (same entity model, same $filter grammar), differing only in auth and endpoint/path conventions, which stay in each caller's own service package.

Package page provides a generic paginated list type used across service backends.

Package parquetio reads and writes Parquet files for the SQL engines (Athena, S3 Select, Firehose format conversion).

Package persistence provides a pluggable persistence layer for Gopherstack services.

Package pods saves and loads named, versioned whole-emulator snapshots ("pods") to a local directory or an S3-compatible bucket.

Package portalloc provides a central port allocator for Gopherstack services.

Package redisengine runs an in-process Redis-protocol server (miniredis) on an allocator-provided or ephemeral port.

Package regionpeers lets a single-region service handler serve extra regions by lazily building one sibling handler per non-home region.

Package restroute matches REST-JSON requests against smithy-style URI templates and writes AWS REST-JSON errors.

Package roleauth authorizes AWS-service-initiated calls against the customer role the service acts as.

Package safemap provides a generic, concurrency-safe map wrapper.

Package sdkcheck provides helpers for verifying that gopherstack service handlers cover all operations exposed by the corresponding AWS SDK v2 client.

Package sdktest holds AWS SDK HTTP client helpers; only test files may import it.

Package smtprelay delivers emulated SES mail to a real SMTP server using the standard library, asynchronously through a bounded queue.

Package store provides a generic, type-safe keyed collection (Table[V]) that replaces the per-backend map + Init/Reset/Snapshot/Restore boilerplate that every service.InMemoryBackend hand-rolls today (EC2 alone repeats it for ~180 maps).

Package strs provides small, dependency-free case-folding string helpers.

Package tags provides a concurrency-safe string tag map for AWS resource annotations.

Package testleak centralises goroutine-leak detection for tests.

Package transparent serves gopherstack over HTTPS for unmodified AWS SDKs that target real *.amazonaws.com endpoints (DNS points them at gopherstack).

Package version holds the build-time version information injected via ldflags.

Package worker is the standard primitive for the background work gopherstack services run: periodic "janitor" sweeps, one-shot delayed state transitions, and tracked goroutines.

Package xmlappend provides allocation-free XML text/attribute escaping and element helpers, byte-identical to encoding/xml's output, for hot response encoders.