internal/

Package auth provides authentication header parsing and middleware for the MCP Gateway server.

Package cmd provides CLI flag registration using a modular pattern.

Package config provides configuration loading and parsing.

Package delegation implements the github-repository-delegation-v1 control-plane contract described by github/gh-aw-firewall ADR 0001 ("Agent enclave repository admission").

Package githubhttp provides GitHub API-specific HTTP helpers shared across multiple packages (server, proxy, etc.).

Package guard provides security context management and guard registry for the MCP Gateway.

Package hmacutil provides HMAC-SHA256 signing and verification helpers.

Package httputil provides shared HTTP helper utilities used across multiple HTTP-facing packages (server, proxy, etc.).

Package jqutil provides shared gojq utilities used by multiple packages.

Package logger provides the gateway logging implementations.

Package mountspec parses container bind-mount declarations.

Package oidc provides GitHub Actions OIDC token acquisition and caching.

Package proxy implements a filtering HTTP proxy for the GitHub API.

Package restroute provides shared REST path-matching helpers.

Redact functions mask a known secret value for safe display in logs.

Package syncutil provides concurrency utilities.

Package testutil contains helpers shared by tests across internal packages.

Package tracing provides OpenTelemetry OTLP trace export for the MCP Gateway.

Package tty provides utilities for TTY (terminal) detection.

Package util provides generic, reusable string and formatting helpers.