Directories
¶
| Path | Synopsis |
|---|---|
|
package: auth / authn type: interface + factory + dispatcher job: the Auth port — a credential in, a Principal out — plus factory and dispatcher limits: identity only; authority is access's, checking the backends' (-> internal/core/access)
|
package: auth / authn type: interface + factory + dispatcher job: the Auth port — a credential in, a Principal out — plus factory and dispatcher limits: identity only; authority is access's, checking the backends' (-> internal/core/access) |
|
apikey
package: apikey / authn type: adapter job: authenticate a request by matching its API key against configured account keys limits: recognises keys, never mints them; holds digests only (-> auth.New, internal/core/access)
|
package: apikey / authn type: adapter job: authenticate a request by matching its API key against configured account keys limits: recognises keys, never mints them; holds digests only (-> auth.New, internal/core/access) |
|
apikey/apikeytest
package: apikeytest / authn type: test-support job: the apikey backend's conformance setup hook, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/auth)
|
package: apikeytest / authn type: test-support job: the apikey backend's conformance setup hook, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/auth) |
|
autherr
package: autherr / authn type: errors job: the auth port's rejection sentinel, held where every backend can return it limits: one error value; auth.go re-exports it as auth.ErrUnauthenticated (-> auth.go)
|
package: autherr / authn type: errors job: the auth port's rejection sentinel, held where every backend can return it limits: one error value; auth.go re-exports it as auth.ErrUnauthenticated (-> auth.go) |
|
jwt
package: jwt / authn type: adapter (JWKS key source) job: fetch and refresh a JSON Web Key Set — the key source for a rotating issuer limits: the only network access in this backend; Authenticate only reads the cached set
|
package: jwt / authn type: adapter (JWKS key source) job: fetch and refresh a JSON Web Key Set — the key source for a rotating issuer limits: the only network access in this backend; Authenticate only reads the cached set |
|
jwt/jwttest
package: jwttest / authn type: test-support job: the jwt backend's conformance setup hook and token fixtures, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/auth)
|
package: jwttest / authn type: test-support job: the jwt backend's conformance setup hook and token fixtures, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/auth) |
|
macaroon
package: macaroon / authn type: adapter job: authenticate a macaroon, translating its caveats into attenuated grants limits: verification only — this server never mints or attenuates one (-> auth.New)
|
package: macaroon / authn type: adapter job: authenticate a macaroon, translating its caveats into attenuated grants limits: verification only — this server never mints or attenuates one (-> auth.New) |
|
macaroon/macaroontest
package: macaroontest / authn type: test-support job: the macaroon backend's conformance setup hook, and a minting helper for fixtures limits: a test helper; only tests import it — this server never mints a macaroon itself
|
package: macaroontest / authn type: test-support job: the macaroon backend's conformance setup hook, and a minting helper for fixtures limits: a test helper; only tests import it — this server never mints a macaroon itself |
|
noauth
package: noauth / authn type: adapter job: authenticate every request as one fixed subject — the no-auth backend limits: no credential checking; for single-tenant/dev stacks (-> auth.New)
|
package: noauth / authn type: adapter job: authenticate every request as one fixed subject — the no-auth backend limits: no credential checking; for single-tenant/dev stacks (-> auth.New) |
|
noauth/noauthtest
package: noauthtest / authn type: test-support job: the noauth backend's conformance setup hook, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/auth)
|
package: noauthtest / authn type: test-support job: the noauth backend's conformance setup hook, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/auth) |
|
package: endpoints / transport type: interface + factory job: the Endpoint port — bind a transport to core.Handle — plus the factory limits: contract + dispatch; transports live in sub-packages (-> adapters/endpoints/rest_http, mcp_http)
|
package: endpoints / transport type: interface + factory job: the Endpoint port — bind a transport to core.Handle — plus the factory limits: contract + dispatch; transports live in sub-packages (-> adapters/endpoints/rest_http, mcp_http) |
|
mcp_http
package: mcp_http / transport type: adapter job: MCP/HTTP endpoint backend (agent tools) — implements the endpoints.Endpoints port limits: stub; implementation lands when the endpoint port is built (-> adapters/endpoints)
|
package: mcp_http / transport type: adapter job: MCP/HTTP endpoint backend (agent tools) — implements the endpoints.Endpoints port limits: stub; implementation lands when the endpoint port is built (-> adapters/endpoints) |
|
rest_http
package: rest_http / transport type: logic job: extract the request's auth credential from the wire and carry it to the handlers limits: extraction only; core resolves it and applies grants (-> internal/core)
|
package: rest_http / transport type: logic job: extract the request's auth credential from the wire and carry it to the handlers limits: extraction only; core resolves it and applies grants (-> internal/core) |
|
package: sequencer / coordination type: adapter job: a steerable clock for --dev — real time until told otherwise limits: time source only; who may steer it is core's access decision (-> core)
|
package: sequencer / coordination type: adapter job: a steerable clock for --dev — real time until told otherwise limits: time source only; who may steer it is core's access decision (-> core) |
|
package: signer / crypto type: interface + factory job: the Signer port — the server's signing identity — plus its factory limits: contract + dispatch; keys live in the backends (-> inmemory, openbao, azure)
|
package: signer / crypto type: interface + factory job: the Signer port — the server's signing identity — plus its factory limits: contract + dispatch; keys live in the backends (-> inmemory, openbao, azure) |
|
inmemory
package: inmemory / crypto type: adapter job: load a config-provided ed25519 private key into a signer.Signer the server signs merges with limits: never generates a key; the key is supplied by config (inline, env(), or vault()) -> signer.New
|
package: inmemory / crypto type: adapter job: load a config-provided ed25519 private key into a signer.Signer the server signs merges with limits: never generates a key; the key is supplied by config (inline, env(), or vault()) -> signer.New |
|
inmemory/inmemorytest
package: inmemorytest / crypto type: test-support job: the inmemory signer's conformance setup hook and key fixtures, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/signer)
|
package: inmemorytest / crypto type: test-support job: the inmemory signer's conformance setup hook and key fixtures, beside the backend limits: a test helper; only the conformance driver imports it (-> adapters/signer) |
|
openbao
package: openbao / crypto type: adapter job: sign via an OpenBao Transit key that never leaves the server limits: ed25519 Transit keys, which stay in OpenBao (-> adapters/signer)
|
package: openbao / crypto type: adapter job: sign via an OpenBao Transit key that never leaves the server limits: ed25519 Transit keys, which stay in OpenBao (-> adapters/signer) |
|
openbao/openbaotest
package: openbaotest / crypto type: test-support job: the OpenBao Transit signer's conformance setup hook — a real OpenBao via podman, transit enabled limits: a test helper; it skips when podman is absent (-> adapters/signer conformance, tools/podman)
|
package: openbaotest / crypto type: test-support job: the OpenBao Transit signer's conformance setup hook — a real OpenBao via podman, transit enabled limits: a test helper; it skips when podman is absent (-> adapters/signer conformance, tools/podman) |
|
package: storage / composition type: factory job: build one ranke.Universe from a storage section — a leaf, or a composite limits: wiring only; the persistence logic is ranke-go's adapters (-> github.com/flocko-motion/ranke-go)
|
package: storage / composition type: factory job: build one ranke.Universe from a storage section — a leaf, or a composite limits: wiring only; the persistence logic is ranke-go's adapters (-> github.com/flocko-motion/ranke-go) |
|
package: vault / secrets type: interface + factory job: the Vault port — a secret reference in, its value out — plus its factory limits: contract + dispatch; secret fetching lives in the backends (-> adapters/vault/openbao, azure)
|
package: vault / secrets type: interface + factory job: the Vault port — a secret reference in, its value out — plus its factory limits: contract + dispatch; secret fetching lives in the backends (-> adapters/vault/openbao, azure) |
|
azure
package: azure / secrets type: adapter job: resolve vault(ref) secrets from Azure Key Vault limits: SCAFFOLD — construction only, no fetching yet (-> adapters/vault)
|
package: azure / secrets type: adapter job: resolve vault(ref) secrets from Azure Key Vault limits: SCAFFOLD — construction only, no fetching yet (-> adapters/vault) |
|
openbao
package: openbao / secrets type: adapter job: resolve vault(ref) secrets from an OpenBao KV v2 engine limits: KV v2 reads only; the mount + credentials come from the vault section (-> adapters/vault)
|
package: openbao / secrets type: adapter job: resolve vault(ref) secrets from an OpenBao KV v2 engine limits: KV v2 reads only; the mount + credentials come from the vault section (-> adapters/vault) |
Click to show internal directories.
Click to hide internal directories.