pkg/

Package appinit wires common service start-up concerns: logging setup, the metrics pipeline and optional CPU profiling.

Package cache provides a small key/value cache abstraction (Provider) with a TTL per entry, a pattern-based key listing and a minimal publish/subscribe channel, backed either by process memory or by Redis.

Package crlcache defines the Verifier interface used by transport.TLSInfo to check client certificates against a CRL or OCSP source.

Package discovery is a minimal in-process service registry keyed by server name and concrete type, resolved by interface.

Package redisclient wraps github.com/redis/go-redis/v9 with a key prefix, JSON marshalling of values, error wrapping and a set of higher-level helpers: bounded ("with eviction") sets and hashes, an owner-bound distributed lock and a one-execution-per-window rate limiter.

Package retriable provides an HTTP client with a configurable retry policy, JSON request/response marshalling, header propagation through context, bearer/DPoP authorization, replay-nonce handling and file-based token storage.

Package revocation provides a revocation service for JWT tokens.

Package rpcclient builds gRPC client connections from a Config: it wires transport credentials, per-RPC bearer/DPoP tokens (loaded from the environment or from a retriable.Storage folder), keepalive parameters, message size limits and an optional blocking dial with timeout.

Package streamctx wraps a grpc.ServerStream so that its Context returns a replacement context.

Package tasks is an in-process, cron-like scheduler that runs Go functions periodically using a small, human-friendly schedule syntax.

Package tlsconfig builds tls.Config values from PEM files and keeps the certificate fresh with a file-polling reloader.

Package transport provides net.Listener wrappers for servers: a TLS listener that performs the handshake eagerly with optional CRL checking, and keepalive listeners that enable TCP keepalive on accepted connections.