rest_http

Overview ¶

package: rest_http / transport type: logic job: extract the request's auth credential from the wire and carry it to the handlers limits: extraction only; core resolves it and applies grants (-> internal/core)

package: rest_http / transport type: logic job: answer a browser's cross-origin checks for the origins the config admits limits: transport only; which origins are admitted is policy, and policy is config's

A browser refuses a cross-origin read unless the server says the origin may have it, so without this an explorer served from anywhere but the API's own origin cannot call it at all. Which origins may is an operational choice about this deployment, so it is declared in the endpoint's config rather than decided here — and declaring none keeps a server that no browser is meant to reach exactly as closed as it is today.

package: rest_http / transport type: logic job: the write endpoint — POST /contribute limits: translation only; the merge runs behind core.Handle (-> internal/core)

package: rest_http / transport type: logic job: the dev-only endpoint — POST /dev/clock limits: translation only; whether the capability exists is core's (-> internal/core)

package: rest_http / transport type: logic job: the read endpoints — POST /query and the cacheable by-id GET reads limits: transport only; the read language is ranke-go's and the reads core's (-> internal/core)

package: rest_http / transport type: logic job: the operational endpoints — GET /health and GET /system/layers limits: translation only; the values come from core.Handle (-> internal/core)

package: rest_http / transport type: logic job: the verification run endpoints under /system/verification, and config mapping limits: translation only; runs are managed behind core.Handle (-> internal/core)

package: rest_http / transport type: adapter job: serves explorer.html when the `explorer` build tag embedded it (-> frontend) limits: a static asset route, no API surface — not part of the OpenAPI contract

package: rest_http / transport type: adapter job: the HTTP envelope — content-type + status + body copy, and error → status mapping limits: framing/rendering live in core's Stream; this sets headers/status and copies (-> internal/core)

package: rest_http / transport type: adapter job: REST/HTTP endpoint backend — the Endpoints port and its server lifecycle limits: transport + translation only; all capability lives behind core.Core (-> internal/core)

Package rest_http implements the generated openapi.ServerInterface: it lifts the raw credential off the wire, builds a core.Request, and renders what core.Handle answers. Auth and access live in core; this is pure transport.

By topic: auth.go (wire credential), respond.go (writers, error → status), endpoints_read.go, endpoints_contribute.go, endpoints_system.go, endpoints_verification.go — the Server's own lifecycle here.