cloud

Aug 6, 2026

Changes in this version

+ const FallbackModel

+ func CORSAllows(ctx context.Context, origin string) bool

+ func Consumes(method string) bool

+ func JWKSURLFor(issuer string) string

+ func ProjectOwnership(ctx context.Context, org, idOrSlug string) (mine, other bool, err error)

+ func ResetOrgScopeResolvers()

+ func ResolvePublishableKeyOrg(ctx context.Context, key string) string

+ func Toll(m *metering.Client, commerce CommerceClient) zip.Authorizer

Aug 5, 2026

Changes in this version

type Scope

+ func (s Scope) Refusal() error

Aug 5, 2026

Changes in this version

+ const CountryHeader

+ func ClientCountry(c *zip.Ctx) string

+ func Severity(action string) int

Aug 5, 2026

Changes in this version

type RiskVerdict

+ Policy int

+ Shape string

+ func RiskUnavailable(q RiskQuery, why string) RiskVerdict

Aug 5, 2026

Changes in this version

+ func IsCommit(s string) bool

+ func Revision() string

type Plugin

+ Global bool

type VerifiedIdentity

+ Audience []string

+ Subject string

+ TokenType string

+ func (v VerifiedIdentity) Home() string

Aug 4, 2026

Changes in this version

+ func Identify(app *zip.App, cfg *Config)

Aug 4, 2026

Changes in this version

+ var ErrNoLedger = errors.New("no validated principal")

+ var ErrStoreClosed = errors.New("cloud: org store is closed")

+ func IAMBase() string

+ func IAMExternal() bool

+ func IAMIssuer() string

+ func SetCompletionCeiling(f func(model string) int)

Aug 3, 2026

Changes in this version

+ const HeaderUserBrand

Aug 3, 2026

Changes in this version

+ const ActionAllow

+ const ActionBlock

+ const ActionChallenge

+ const ActionRestrict

+ const ActionReview

+ const MaxScorerCalls

+ const RefusalAbsent

+ const RefusalBusy

+ const RefusalError

+ const RefusalSilent

+ const RefusalStuck

+ const RefusalTimeout

+ const RefusalUnknown

+ const RiskBudget

+ const ScorerStall

+ const StagePayment

+ const StageSignup

+ const StageUsage

+ const TrustedProxiesEnv

+ func AbuseGate(deps Deps, t *edge.Traffic) zip.Handler

+ func ErrorHandler(c fiber.Ctx, err error) error

+ func Facts(m map[string]string) map[string]string

+ func Fingerprint(cred string) string

+ func MetricGatherer() prometheus.Gatherer

+ func ObserveAlertDelivery(egress, outcome string)

+ func ObserveIngest(door string, accepted, dropped int)

+ func ObserveRows(table string, n int)

+ func Privileged(method, path string) bool

+ func Probe(method, path string) bool

+ func RiskScorerInstalled() bool

+ func RoutePath(path string) string

+ func SetRiskScorer(fn RiskScorer)

+ func TrustedProxy(addr string) bool

type Deps

+ Traffic *edge.Traffic

+ type RiskQuery struct

+ Agency string

+ Privileged bool

+ Signals map[string]string

+ Stage string

+ Subject RiskSubject

+ type RiskScorer func(ctx context.Context, org string, q RiskQuery) (RiskVerdict, error)

+ type RiskSubject struct

+ ID string

+ Kind string

+ type RiskVerdict struct

+ Action string

+ Agency string

+ Cause string

+ ID string

+ Refusal string

+ Score float64

+ func Decide(ctx context.Context, org string, q RiskQuery) RiskVerdict

+ func (v RiskVerdict) Allowed() bool

+ func (v RiskVerdict) Scored() bool

Aug 2, 2026

Changes in this version

+ func KeyHint(key string) string

+ func MustOrgNamespace(org, project string) namespace.Namespace

+ func OrgFromStore(ctx context.Context, db orm.DB, key string) string

+ func OrgNamespace(org, project string) (namespace.Namespace, error)

+ func PlatformNamespace() namespace.Namespace

+ func PrincipalFromStore(ctx context.Context, db orm.DB, key string) *plane.KeyPrincipal

+ func SetIAMStore(db orm.DB)

+ type KeyRefusal string

+ func RefusalForKey(ctx context.Context, key string) (KeyRefusal, bool)

type OrgStore

+ func (c *OrgStore[T]) Has(ns namespace.Namespace) bool

+ func (c *OrgStore[T]) Stored() bool

Aug 1, 2026

Changes in this version

+ const SpecFile

+ const ToolsFile

+ var ErrNoPeer = errors.New("cloud: app is not deployed here")

+ func As(c *zip.Ctx, org string) context.Context

+ func Ask[In, Out any](ctx context.Context, app, op string, in *In) (*Out, error)

+ func Denied(err error) error

+ func DenyEnvelope() zip.Handler

+ func Describe(dir string, app *zip.App) error

+ func DescribeRequested() (string, bool)

+ func For(ctx context.Context, org string) context.Context

+ func GrantStarter(ctx context.Context, org, subject string) (int64, error)

+ func Guard(s Scope, h zip.Handler) zip.Handler

+ func Metrics() http.Handler

+ func ObsErrorIngest() http.Handler

+ func Plane() *zip.App

+ func ResetPlane()

+ func ServePlane(name string, log luxlog.Logger) (func() error, error)

+ func SetObsErrorIngest(h http.Handler)

+ func SetObsEventIngest(fn ObsEventIngestFunc)

+ func Who(ctx context.Context) zip.Caller

+ type Authority struct

+ OrgAdmin bool

+ Super bool

+ Validated bool

+ func AuthorityOf(c *zip.Ctx) Authority

type KMSPeer

+ func (k KMSPeer) DeleteSecret(ctx context.Context, ref string) error

+ type ObsEventIngestFunc func(ctx context.Context, org string, body []byte) (accepted, dropped int, claimed bool, err error)

+ func ObsEventIngest() ObsEventIngestFunc

type Plugin

+ Door zip.Source

+ type Scope int

+ const Admin

+ const Member

+ const Super

+ func (s Scope) Admits(a Authority) bool

Jul 28, 2026

Changes in this version

+ func AuthorizeReq(payload []byte) (subject string, amount money.Amount, project, service string, ...)

+ func BalanceReq(payload []byte) (subject, currency string, err error)

+ func Expose(name string, m Method)

+ func Fault(status int, msg string) error

+ func FilesReq(payload []byte) (repo, ref, glob string, err error)

+ func I64(payload []byte) (int64, error)

+ func Listen(app string, log luxlog.Logger) (io.Closer, error)

+ func PeerSocket(app string) string

+ func Publish(ctx context.Context, ev Visibility) error

+ func PublisherRegistered() bool

+ func PutApps(apps []App) []byte

+ func PutAuthorizeReq(subject string, amount money.Amount, project, service string, ...) []byte

+ func PutBalanceReq(subject, currency string) []byte

+ func PutFiles(rev string, files []File) []byte

+ func PutFilesReq(repo, ref, glob string) []byte

+ func PutI64(v int64) []byte

+ func PutRecipients(rs []Recipient) []byte

+ func PutSecretMsg(ref string, value []byte) []byte

+ func PutUsage(u Usage) []byte

+ func PutVerdict(v Verdict) []byte

+ func RegisterPublisher(f func(ctx context.Context, ev Visibility) error)

+ func SecretMsg(payload []byte) (ref string, value []byte, err error)

+ type App struct

+ Cluster string

+ DeclaredTag string

+ DriftSeverity string

+ Env string

+ Health string

+ LatestTag string

+ Name string

+ Namespace string

+ Org string

+ Phase string

+ Registry string

+ Repo string

+ Role string

+ RunningTag string

+ func Apps(payload []byte) ([]App, error)

+ type File struct

+ Data []byte

+ Path string

+ Truncated bool

+ func Files(payload []byte) (rev string, files []File, err error)

+ type Headers interface

+ Header func(string) string

+ type Ident struct

+ Admin bool

+ Email string

+ Org string

+ OrgAdmin bool

+ Project string

+ User string

+ type KMSPeer struct

+ func (k KMSPeer) GetSecret(ctx context.Context, ref string) ([]byte, error)

+ func (k KMSPeer) PutSecret(ctx context.Context, ref string, value []byte) error

+ func (k KMSPeer) Sign(ctx context.Context, keyRef string, payload []byte) ([]byte, error)

+ type Method func(ctx context.Context, who Ident, req []byte) ([]byte, error)

+ type Peer struct

+ func Dial(app string) *Peer

+ func (p *Peer) As(h Headers) *Peer

+ func (p *Peer) Call(ctx context.Context, method string, req []byte) ([]byte, error)

+ func (p *Peer) For(org string) *Peer

+ type Plugin struct

+ App func(*zip.App, Deps) error

+ Mount MountFunc

+ Name string

+ OwnsHealth bool

+ Prefixes []string

+ Price Price

+ Shutdown ShutdownFunc

+ type Recipient struct

+ Email string

+ ID string

+ Name string

+ Owner string

+ func Recipients(payload []byte) ([]Recipient, error)

+ type Usage struct

+ ClientIP string

+ Model string

+ Project string

+ Provider string

+ RequestID string

+ Service string

+ func UsageOf(payload []byte) (Usage, error)

+ type Verdict struct

+ CapSpent bool

+ NoFunds bool

+ OK bool

+ Reason string

+ func GateVerdict(payload []byte) (Verdict, error)

+ type Visibility struct

+ Description string

+ Listed bool

+ Name string

+ Org string

+ Slug string

Jul 28, 2026

Changes in this version

+ const DefaultDataDir

+ func Accepted(ctx context.Context)

+ func Bridge() zip.Handler

+ func Created(ctx context.Context)

+ func DataDir() string

+ func InstallTelemetry(ctx context.Context, log luxlog.Logger, serviceName string) func(context.Context)

+ func Members(deps Deps) []ha.Member

+ func MountMetrics(a *zip.App, deps Deps) error

+ func RegisterTraceSink(sink TraceSink)

+ func Request(ctx context.Context) (*zip.Ctx, bool)

+ func SetRollingCapReader(f RollingCapReaderFunc)

+ func SpecRequested() (string, bool)

+ func TraceInprocEnabled() bool

+ func TracerProviderInstalled() bool

+ func WriteSpec(path string, app *zip.App) error

+ func ZipApp(r Router) *zip.App

type Config

+ func SpecConfig() (*Config, func(), error)

type MountSpec

+ App func(*zip.App, Deps) error

+ type RollingCapReaderFunc func(ctx context.Context, subject, namespace string) (bool, error)

+ func RollingCapReader() RollingCapReaderFunc

type ShutdownFunc

+ func CtxShutdown(f func() error) ShutdownFunc

+ type TraceSink func(ctx context.Context, spans []sdktrace.ReadOnlySpan) error

Jul 28, 2026

Changes in this version

+ func Declare(specs []MountSpec, cfg *Config)

+ func IAMBaseURL(publicIssuer string) string

+ func IsBotActor(login string) bool

+ func KMSMachineClientID(org string) string

type MountSpec

+ Price Price

+ type Price int64

+ const Free

+ const Metered

+ const Undeclared

+ func PriceOf(path string) Price

+ func (p Price) Cents() int64

+ func (p Price) Declared() bool

+ func (p Price) MarshalText() ([]byte, error)

+ func (p Price) String() string

type Subsystem

+ Price Price

Jul 28, 2026

Changes in this version

+ func MountPrefixes(name string, declared []string) []string

+ func SubsystemOf(path string) string

type Deps

+ Self string

type Router

+ Plugins func() []zip.PluginStatus

+ type Subsystem struct

+ Enabled bool

+ Name string

+ Prefixes []string

+ func Subsystems() []Subsystem

Jul 27, 2026

Changes in this version

+ func Go(log luxlog.Logger, name string, fields []any, fn func())

type Base

+ func (b *Base) Go(name string, fields []any, fn func())

Jul 27, 2026

Changes in this version

+ var Peers func(selector, port string) (org.Source, string, error)

+ func Degradations() map[string]string

+ func Degraded(subsystem string, err error)

+ func DegradedNames() []string

+ func IsDegraded() bool

+ type BalanceReaderFunc func(ctx context.Context, subject, namespace, currency string) (int64, error)

+ func BalanceReader() BalanceReaderFunc

type Deps

+ MasterKey []byte

type GitInboundReq

+ Ref string

type GitPushEvent

+ Ref string

+ type IngestDialerFunc func(org string) (tasksclient.Client, error)

+ func IngestDialer() IngestDialerFunc

type MountSpec

+ func PluginSpec(name, prefix string, p zip.Plugin) MountSpec

type SyncEvent

+ Ref string

+ type TierReaderFunc func(ctx context.Context, subject, namespace string) (string, error)

+ func TierReader() TierReaderFunc

+ type UsageEvent struct

+ Currency string

+ Model string

+ Namespace string

+ Provider string

+ RequestID string

+ Subject string

+ USD string

+ type UsageRecorderFunc func(ctx context.Context, u UsageEvent) error

+ func UsageRecorder() UsageRecorderFunc

Jul 27, 2026

Changes in this version

+ const ReasonUnpaid

+ const ReasonUnresolved

+ const SwitchPaywallStrict

+ func Billable(method, path string) bool

+ func EnsureStarterCredit(ctx context.Context, w principal.Wallet) (int64, error)

+ func Reachable(path string) bool

+ func Refuse(c *zip.Ctx, product, reason string) error

+ func SpendGate(commerce CommerceClient) zip.Handler

+ func StarterGrant() zip.Handler

+ type Cure struct

+ Kind string

+ URL string

+ type Licence uint8

+ const LicenceActive

+ const LicenceNone

+ const LicenceUnknown

type MountFunc

+ func Global(fn func(*zip.App, Deps) error) MountFunc

type MountSpec

+ Global bool

+ Prefixes []string

+ type PlanChecker interface

+ ActivePaidPlan func(ctx context.Context, org string) (tier string, paid bool, err error)

+ type Refusal struct

+ Cure []Cure

+ Error string

+ Message string

+ Product string

+ Reason string

+ type Router interface

+ All func(path string, handlers ...zip.Handler) zip.Router

+ Delete func(path string, handlers ...zip.Handler) zip.Router

+ Fiber func() *fiber.App

+ Get func(path string, handlers ...zip.Handler) zip.Router

+ Group func(prefix string, handlers ...zip.Handler) zip.Router

+ Head func(path string, handlers ...zip.Handler) zip.Router

+ Options func(path string, handlers ...zip.Handler) zip.Router

+ Patch func(path string, handlers ...zip.Handler) zip.Router

+ Post func(path string, handlers ...zip.Handler) zip.Router

+ Put func(path string, handlers ...zip.Handler) zip.Router

+ Use func(handlers ...zip.Handler) zip.Router

+ type Standing uint8

+ const Funded

+ const Subscribed

+ const Unknown

+ const Unpaid

+ func Stand(ctx context.Context, lic Licence, w principal.Wallet) Standing

+ func (s Standing) Admits() bool

+ func (s Standing) String() string

Jul 27, 2026

Changes in this version

+ const DefaultModel

+ const PublishablePrefix

+ func Draining() bool

+ func Fail(c *zip.Ctx, msg string) error

+ func IsPublishableKey(tok string) bool

+ func OK(c *zip.Ctx, data any) error

+ func OKList(c *zip.Ctx, rows any, total int) error

+ func OKRaw(c *zip.Ctx, rows json.RawMessage, total int) error

+ func SetDraining()

+ func UpstreamModel(name string) bool

+ func ZenModel(name string) string

type Config

+ PeerSelector string

type Deps

+ LiveMembers func() []ha.Member

Jul 26, 2026

Changes in this version

+ const SwitchPaywallEnforced

+ var APIKeyPrefixes = []string

+ var ErrIssueSinkUnavailable = errors.New("cloud: tracker issue sink not registered")

+ func RegisterIssueSink(fn IssueSink)

+ func SetSwitchReader(f func(string) bool)

+ func Switch(key string) bool

type Config

+ PaywallEnforced bool

+ ResearchDurable bool

+ type IssueSink func(ctx context.Context, in IssueUpsert) (IssueUpsertResult, error)

+ type IssueUpsert struct

+ Assignee string

+ Description string

+ ExtRef string

+ Kind string

+ Labels []string

+ Org string

+ Project string

+ ProjectKey string

+ ProjectName string

+ Repo string

+ Source string

+ State string

+ Title string

+ type IssueUpsertResult struct

+ Created bool

+ Identifier string

+ Number int

+ func UpsertIssue(ctx context.Context, in IssueUpsert) (IssueUpsertResult, error)

Jul 23, 2026

Changes in this version

type Base

+ Durable *Durability

type Deps

+ Durable *Durability

+ type Durability = org.Durability

type OrgStore

+ func (c *OrgStore[T]) Sync(orgID, project string) (acked bool, err error)

+ type OrgStoreOption func(*orgStoreOpts)

+ func WithDurable(dur *Durability) OrgStoreOption

+ func WithStoreLogger(log luxlog.Logger) OrgStoreOption

Jul 23, 2026

Changes in this version

+ const AIMeterProvider

+ func AccountFromPrincipal() zip.Handler

+ func BYOFeeBps() int64

+ func BYOFloorMicros() int64

+ func BYOInferenceFeeMicros(tokens int) int64

+ func EstTokens(texts ...string) int

+ func MicrosToGateCents(micros int64) int64

type Config

+ SitesFirstPartyApex string

+ SitesFirstPartyOrg string

+ SitesFirstPartySites []string

type OrgStore

+ func (c *OrgStore[T]) Each(fn func(slug string, st T, err error)) error

Jul 22, 2026

Changes in this version

type Config

+ AIFallbackModel string

type Deps

+ AIFallbackModel string

Jul 21, 2026

Changes in this version

type Deps

+ Embed AIClient

type VerifiedIdentity

+ Orgs []model.OrgRef

Jul 19, 2026

Changes in this version

+ type TokenValidator struct

+ func NewTokenValidator(issuer string) *TokenValidator

+ func (t *TokenValidator) Validate(raw string) (VerifiedIdentity, error)

+ type VerifiedIdentity struct

+ Email string

+ Expiry time.Time

+ IsAdmin bool

+ Owner string

+ User string

+ Username string

Jul 18, 2026

Changes in this version

+ func OrgForKey(ctx context.Context, key string) (string, bool)

Jul 18, 2026

Changes in this version

+ func CallerBearer(c *zip.Ctx) string

Jul 17, 2026

Changes in this version

+ var ErrGitMirrorControllerUnavailable = errors.New("cloud: git mirror controller not registered")

+ var ErrSyncUnavailable = errors.New("cloud: sync engine not registered")

+ func EnsureGitMirror(ctx context.Context, org, project, repo, url string, enabled bool) error

+ func PlatformDB(dataDir, subsystem string) (*sql.DB, error)

+ func RegisterGitMirrorController(c GitMirrorController)

+ func RegisterSync(fn SyncFunc)

+ func Terminal(h func(*zip.Ctx) error) func(*zip.Ctx) error

type Config

+ ShardPeers string

+ ShardSelf string

+ type GitMirrorController interface

+ EnsureMirror func(ctx context.Context, org, project, repo, url string, enabled bool) error

+ type OrgConfig = types.OrgConfig

+ type SyncEvent struct

+ Actor string

+ After string

+ Before string

+ Branch string

+ Hop int

+ Kind string

+ Locator string

+ Manual bool

+ Org string

+ Provider string

+ Repo string

+ Token string

+ type SyncFunc func(ctx context.Context, ev SyncEvent) (SyncResult, error)

+ type SyncResult struct

+ Ran int

+ Skipped int

+ func Sync(ctx context.Context, ev SyncEvent) (SyncResult, error)

Jul 15, 2026

Changes in this version

+ var ErrGitImporterUnavailable = errors.New("cloud: git importer not registered")

+ var Version = "dev"

+ func GitRepoStatuses(ctx context.Context, org, project string, names []string) (map[string]GitRepoStatus, error)

+ func ImportGitRepo(ctx context.Context, req GitImportReq) error

+ func RegisterGitImporter(g GitImporter)

type Config

+ EnableStaged []string

+ Version string

type Deps

+ Version string

+ type GitImportReq struct

+ CloneURL string

+ MirrorURL string

+ Org string

+ Project string

+ Repo string

+ Token string

+ type GitImporter interface

+ ImportRepo func(ctx context.Context, req GitImportReq) error

+ InboundSync func(ctx context.Context, req GitInboundReq) (GitSyncResult, error)

+ RepoStatus func(ctx context.Context, org, project string, names []string) (map[string]GitRepoStatus, error)

+ type GitInboundReq struct

+ Branch string

+ CloneURL string

+ Org string

+ Origin string

+ Project string

+ Repo string

+ Token string

+ type GitRepoStatus struct

+ Conflict bool

+ Imported bool

+ LastSyncedAt int64

+ type GitSyncResult struct

+ After string

+ Applied bool

+ Before string

+ Conflict bool

+ Detail string

+ NoOp bool

+ func InboundGitSync(ctx context.Context, req GitInboundReq) (GitSyncResult, error)

Jul 15, 2026

Changes in this version

+ func OnServiceRelease(ctx context.Context, ev ServiceReleaseEvent) error

+ func RegisterServiceReleaser(f func(ctx context.Context, ev ServiceReleaseEvent) error)

+ func ServiceReleaserRegistered() bool

+ type ServiceReleaseEvent struct

+ Image string

+ SHA string

+ Service string

Jul 14, 2026

Changes in this version

+ func EmitLifecycle(ctx context.Context, ev LifecycleEvent)

+ func RegisterLifecycleSubscriber(fn func(ctx context.Context, ev LifecycleEvent))

+ func RepoFromCloneURL(u string) string

+ func ResetLifecycleSubscribers()

type Config

+ BodyLimit int

+ type LifecycleEvent struct

+ After string

+ Before string

+ Branch string

+ DeployID string

+ Detail string

+ Kind LifecycleKind

+ Org string

+ Origin string

+ Project string

+ Pusher string

+ Repo string

+ type LifecycleKind string

+ const LifecycleBuildStarted

+ const LifecycleDeployFailed

+ const LifecycleDeployLive

+ const LifecyclePushLanded

Jul 12, 2026

Changes in this version

+ func Handle[S any](s *Service[S], h func(*Service[S], *zip.Ctx) error) func(*zip.Ctx) error

+ func Mount[S any](app *zip.App, deps Deps, name string, build func(Base) (S, error), ...) error

+ func OnGitPush(ctx context.Context, ev GitPushEvent) error

+ func OrgDB(dataDir, org, project, subsystem string) (*sql.DB, error)

+ func RegisterCommerceClientFactory(f func(cfg *Config, log luxlog.Logger) CommerceClient)

+ func RegisterOrgScopeResolver(r OrgScopeResolver)

+ func RegisterPushBuilder(f func(ctx context.Context, ev GitPushEvent) error)

+ func RegisterTelemetryInstaller(f func(ctx context.Context, serviceName string) func(context.Context))

+ type Base struct

+ Bill *ResourceMeter

+ Brand string

+ DataDir string

+ Domain string

+ Env string

+ KMS KMSClient

+ Log luxlog.Logger

+ func NewBase(deps Deps, name string) Base

type Config

+ ReaderRetryBudget time.Duration

+ WriterLease bool

+ WriterURL string

+ type EmbedRequest = types.EmbedRequest

+ type GitPushEvent struct

+ Branch string

+ CloneURL string

+ Commit string

+ Org string

+ Project string

+ Repo string

+ type OrgScopeResolver interface

+ ProjectOwnership func(ctx context.Context, org, idOrSlug string) (mine, other bool, err error)

+ type OrgStore struct

+ func NewOrgStore[T io.Closer](dataDir, subsystem string, open func(*sql.DB) (T, error)) *OrgStore[T]

+ func (c *OrgStore[T]) CloseAll() error

+ func (c *OrgStore[T]) For(org, project string) (T, error)

+ type Service struct

+ State S

Jul 10, 2026

Changes in this version

+ func SanitizeOrg(s string) string

+ func TenantDB(dataDir, org, project, subsystem string) (*sql.DB, error)

+ type TenantStore struct

+ func NewTenantStore[T io.Closer](dataDir, subsystem string, open func(*sql.DB) (T, error)) *TenantStore[T]

+ func (c *TenantStore[T]) CloseAll() error

+ func (c *TenantStore[T]) For(org, project string) (T, error)

Jul 10, 2026

Changes in this version

+ func BrandForHost(host string) string

+ func BrandForHostOK(host string) (string, bool)

+ func EdgeCORS(pol *gatewaypolicy.Store) zip.Handler

+ func EdgeRateLimit(pol *gatewaypolicy.Store) zip.Handler

+ func MarkdownNegotiation(defaultPrefixes []string) zip.Handler

+ func RegisterKMSClientFactory(f func(cfg *Config, log luxlog.Logger) (KMSClient, error))

type BrandInfo

+ AltDomains []string

type Config

+ CORSOrigins []string

+ EdgeRateEnabled bool

+ EdgeRatePerIP int

+ EdgeRateWindowSec int

+ MarkdownDefaultPrefixes []string

+ SitesSelfDomains []string

type Deps

+ GatewayPolicy *gatewaypolicy.Store

Jul 8, 2026

Changes in this version

+ func HealthOwner(s *MountSpec)

type MountFunc

+ func Typed(mount func(*zip.App, Deps) error) MountFunc

type MountSpec

+ OwnsHealth bool

+ type Option func(*MountSpec)

Jul 8, 2026

Changes in this version

+ func MetricsHandler() http.Handler

+ func ReaderGuard() zip.Handler

type Config

+ ControlPlaneQuorum int

+ ControlPlaneRole string

+ NodeID string

+ Peers []string

+ Role role.Role

Jul 6, 2026

Changes in this version

+ func ScopeRateLimit(m *metering.Client) zip.Handler

type Config

+ Replicas int

Jul 4, 2026

Changes in this version

type Deps

+ AIDefaultModel string

Jul 4, 2026

Changes in this version

+ const TracerName

+ func TracingMiddleware() zip.Handler

Jul 4, 2026

Changes in this version

+ func EmbeddedTasks() *tasksengine.Embedded

+ func IdentityMiddleware(cfg *Config) zip.Handler

+ func RegisterTenantScopeResolver(r TenantScopeResolver)

+ type TenantScopeResolver interface

+ ProjectOwnership func(ctx context.Context, org, idOrSlug string) (mine, other bool, err error)

Jul 3, 2026

Changes in this version

+ func BrandAudiences() []string

+ func BrandIssuers() []string

type Config

+ ReadBufferSize int

Jul 3, 2026

Changes in this version

+ func OrgHasUnsafeRune(s string) bool

+ func RegisterWithShutdown(name string, order int, mount MountFunc, shutdown ShutdownFunc)

+ func ShutdownAll(ctx context.Context, cfg *Config) error

type Config

+ AIAPIKey string

+ AIAuthClientID string

+ AIAuthClientSecret string

+ AIBaseURL string

+ AIDefaultModel string

+ SitesApex string

+ SitesReserved []string

type MountSpec

+ Shutdown ShutdownFunc

type ResourceMeter

+ func (rm *ResourceMeter) MeterUsage(org, kind string, u metering.Usage)

+ type ShutdownFunc func(ctx context.Context) error

Jul 1, 2026

Changes in this version

type Config

+ KMSMPCAddr string

+ KMSMPCVaultID string

Jul 1, 2026

Changes in this version

+ const DefaultBrand

+ const DefaultResourceFeeCents

+ func AuditTrail(rec *audit.Recorder) zip.Handler

+ func BillingGate(m *metering.Client, price func(c *zip.Ctx) int64) zip.Handler

+ func ClientIP(c *zip.Ctx) string

+ func DefaultPrice(c *zip.Ctx) int64

+ func DenyResource(c *zip.Ctx, err error) error

+ func IssuerForBrand(id string) string

+ func ResourceFeeCents(envPrefix, kind string) int64

+ func SanitizeIdentity(v *identityValidator, adminOrg string) zip.Handler

+ type BrandInfo struct

+ Domain string

+ IAMIssuer string

+ ID string

+ func BrandFor(id string) BrandInfo

type Config

+ AdminOrg string

+ BillingFailOpen bool

+ CommerceHTTPURL string

+ CommerceServiceToken string

+ Env string

+ JWKSURL string

+ JWTAudiences []string

+ ZAPWebOrigins []string

type Deps

+ Audit *audit.Recorder

+ Env string

+ IAMIssuer string

+ Metering *metering.Client

+ type ResourceMeter struct

+ func NewResourceMeter(deps Deps, provider string) *ResourceMeter

+ func (rm *ResourceMeter) Enabled() bool

+ func (rm *ResourceMeter) Gate(ctx context.Context, org, kind string, costCents int64) error

+ func (rm *ResourceMeter) Meter(org, kind string, amountCents int64, requestID, clientIP string)

Jun 22, 2026

Changes in this version

+ var Registry []MountSpec

+ func MountAll(app any, cfg *Config, deps Deps) error

+ func Register(name string, order int, mount MountFunc)

+ func Serve(enable []string) error

+ type AIClient = types.AIClient

+ type BaseClient = types.BaseClient

+ type ChatRequest = types.ChatRequest

+ type ChatResponse = types.ChatResponse

+ type Claims = types.Claims

+ type CommerceClient = types.CommerceClient

+ type Config struct

+ AIZAPAddr string

+ AdminListenAddr string

+ BaseZAPAddr string

+ Brand string

+ CommerceZAPAddr string

+ DataDir string

+ Domain string

+ Enable []string

+ HealthListenAddr string

+ IAMIssuer string

+ IAMZAPAddr string

+ KMSMasterKeyRef string

+ KMSZAPAddr string

+ ListenAddr string

+ MQZAPAddr string

+ O11yZAPAddr string

+ PaymentsZAPAddr string

+ VFSZAPAddr string

+ VaultZAPAddr string

+ ZAPListenAddr string

+ func LoadConfig() *Config

+ func (c *Config) Enabled(name string) bool

+ func (c *Config) Validate() error

+ type Counter = types.Counter

+ type DBHandle = types.DBHandle

+ type Deps struct

+ AI AIClient

+ Base BaseClient

+ Brand string

+ Commerce CommerceClient

+ DataDir string

+ Domain string

+ IAM IAMClient

+ KMS KMSClient

+ Logger luxlog.Logger

+ MQ MQClient

+ O11y O11yClient

+ Payments PaymentsClient

+ VFS VFSClient

+ Vault VaultClient

+ func BuildDeps(cfg *Config) Deps

+ type IAMClient = types.IAMClient

+ type IntentRequest = types.IntentRequest

+ type IntentResponse = types.IntentResponse

+ type IntentStatus = types.IntentStatus

+ type KMSClient = types.KMSClient

+ type LicenseEntitlement = types.LicenseEntitlement

+ type MQClient = types.MQClient

+ type MountFunc func(app any, deps Deps) error

+ type MountSpec struct

+ Mount MountFunc

+ Name string

+ Order int

+ type O11yClient = types.O11yClient

+ type Org = types.Org

+ type PaymentsClient = types.PaymentsClient

+ type Span = types.Span

+ type TenantConfig = types.TenantConfig

+ type Timing = types.Timing

+ type User = types.User

+ type VFSClient = types.VFSClient

+ type VaultChargeRequest = types.VaultChargeRequest

+ type VaultChargeResponse = types.VaultChargeResponse

+ type VaultClient = types.VaultClient