Directories
¶
| Path | Synopsis |
|---|---|
|
package: auth / authn type: interface + factory + dispatcher job: the Auth port — a credential in, a Principal out — plus factory and dispatcher limits: identity only; authority is access's, checking the backends' (-> internal/core/access)
|
package: auth / authn type: interface + factory + dispatcher job: the Auth port — a credential in, a Principal out — plus factory and dispatcher limits: identity only; authority is access's, checking the backends' (-> internal/core/access) |
|
apikey
package: apikey / authn type: adapter job: authenticate a request by matching its API key against configured account keys limits: recognises keys, never mints them; holds digests only (-> auth.New, internal/core/access)
|
package: apikey / authn type: adapter job: authenticate a request by matching its API key against configured account keys limits: recognises keys, never mints them; holds digests only (-> auth.New, internal/core/access) |
|
noauth
package: noauth / authn type: adapter job: authenticate every request as one fixed subject — the no-auth backend limits: no credential checking; for single-tenant/dev stacks (-> auth.New)
|
package: noauth / authn type: adapter job: authenticate every request as one fixed subject — the no-auth backend limits: no credential checking; for single-tenant/dev stacks (-> auth.New) |
|
package: endpoints / transport type: interface + factory job: the Endpoint port — bind a transport to core.Handle — plus the factory limits: contract + dispatch; transports live in sub-packages (-> adapters/endpoints/rest_http, mcp_http)
|
package: endpoints / transport type: interface + factory job: the Endpoint port — bind a transport to core.Handle — plus the factory limits: contract + dispatch; transports live in sub-packages (-> adapters/endpoints/rest_http, mcp_http) |
|
mcp_http
package: mcp_http / transport type: adapter job: MCP/HTTP endpoint backend (agent tools) — implements the endpoints.Endpoints port limits: stub; implementation lands when the endpoint port is built (-> adapters/endpoints)
|
package: mcp_http / transport type: adapter job: MCP/HTTP endpoint backend (agent tools) — implements the endpoints.Endpoints port limits: stub; implementation lands when the endpoint port is built (-> adapters/endpoints) |
|
rest_http
package: rest_http / transport type: logic job: extract the request's auth credential from the wire and carry it to the handlers limits: extraction only; core resolves it and applies grants (-> internal/core)
|
package: rest_http / transport type: logic job: extract the request's auth credential from the wire and carry it to the handlers limits: extraction only; core resolves it and applies grants (-> internal/core) |
|
package: sequencer / coordination type: adapter job: a steerable clock for --dev — real time until told otherwise limits: time source only; who may steer it is core's access decision (-> core)
|
package: sequencer / coordination type: adapter job: a steerable clock for --dev — real time until told otherwise limits: time source only; who may steer it is core's access decision (-> core) |
|
package: signer / crypto type: interface + factory job: the Signer port — the server's signing identity — plus its factory limits: contract + dispatch; keys live in the backends (-> inmemory, openbao, azure)
|
package: signer / crypto type: interface + factory job: the Signer port — the server's signing identity — plus its factory limits: contract + dispatch; keys live in the backends (-> inmemory, openbao, azure) |
|
inmemory
package: inmemory / crypto type: adapter job: load a config-provided ed25519 private key into a signer.Signer the server signs merges with limits: never generates a key; the key is supplied by config (inline, env(), or vault()) -> signer.New
|
package: inmemory / crypto type: adapter job: load a config-provided ed25519 private key into a signer.Signer the server signs merges with limits: never generates a key; the key is supplied by config (inline, env(), or vault()) -> signer.New |
|
inmemory/inmemorytest
package: inmemorytest / crypto type: test-support job: the inmemory signer's conformance setup hook and key fixtures, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/signer)
|
package: inmemorytest / crypto type: test-support job: the inmemory signer's conformance setup hook and key fixtures, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/signer) |
|
openbao
package: openbao / crypto type: adapter job: sign via an OpenBao Transit key that never leaves the server limits: ed25519 Transit keys, which stay in OpenBao (-> adapters/signer)
|
package: openbao / crypto type: adapter job: sign via an OpenBao Transit key that never leaves the server limits: ed25519 Transit keys, which stay in OpenBao (-> adapters/signer) |
|
openbao/openbaotest
package: openbaotest / crypto type: test-support job: the OpenBao Transit signer's conformance setup hook — a real OpenBao via podman, transit enabled limits: a test helper; it skips when podman is absent (-> adapters/signer conformance, tools/podman)
|
package: openbaotest / crypto type: test-support job: the OpenBao Transit signer's conformance setup hook — a real OpenBao via podman, transit enabled limits: a test helper; it skips when podman is absent (-> adapters/signer conformance, tools/podman) |
|
package: storage / composition type: factory job: build one ranke.Universe from a storage section — a leaf, or a composite limits: wiring only; the persistence logic is ranke-go's adapters (-> github.com/flocko-motion/ranke-go)
|
package: storage / composition type: factory job: build one ranke.Universe from a storage section — a leaf, or a composite limits: wiring only; the persistence logic is ranke-go's adapters (-> github.com/flocko-motion/ranke-go) |
|
package: vault / secrets type: interface + factory job: the Vault port — a secret reference in, its value out — plus its factory limits: contract + dispatch; secret fetching lives in the backends (-> adapters/vault/openbao, azure)
|
package: vault / secrets type: interface + factory job: the Vault port — a secret reference in, its value out — plus its factory limits: contract + dispatch; secret fetching lives in the backends (-> adapters/vault/openbao, azure) |
|
azure
package: azure / secrets type: adapter job: resolve vault(ref) secrets from Azure Key Vault limits: SCAFFOLD — construction only, no fetching yet (-> adapters/vault)
|
package: azure / secrets type: adapter job: resolve vault(ref) secrets from Azure Key Vault limits: SCAFFOLD — construction only, no fetching yet (-> adapters/vault) |
|
openbao
package: openbao / secrets type: adapter job: resolve vault(ref) secrets from an OpenBao KV v2 engine limits: KV v2 reads only; the mount + credentials come from the vault section (-> adapters/vault)
|
package: openbao / secrets type: adapter job: resolve vault(ref) secrets from an OpenBao KV v2 engine limits: KV v2 reads only; the mount + credentials come from the vault section (-> adapters/vault) |
Click to show internal directories.
Click to hide internal directories.