pkg/

Package accessprovider defines the AccessProvider interface — the writer-side seam between the access graph and the various sources of authorization data that may populate it.

Package graph provides an in-memory RBAC permission map for kcp.

Package rbacprovider implements the kcp-native RBAC AccessProvider.

Package server wires the Access Virtual Workspace binary together: the shared access graph, the RBAC provider that populates it, and a virtual-workspace root apiserver (kcp virtual-workspace-framework) serving the access virtual workspace at /services/access behind kcp's front-proxy.

Package virtual provides shared building blocks for the virtual workspaces served by this binary, built on the kcp virtual-workspace-framework and served behind kcp's front-proxy.