internal/

Package cli declares the command-line port of the SDK: the Action one command runs, the Binder that declares its flags, and the Executor that resolves an argument vector against a tree of CommandValue and dispatches it.

Package config — range 0.2.10.* (ADR 0028 core/app/config block).

Package events — ranges 0.2.22.* (ADR 0053 core/app/events block) and 0.3.52.* (ADR 0053 service/app/events block, declared here since ADR 0160).

Package health — ranges 0.2.29.* (ADR 0060 core/app/health block) and 0.3.59.* (ADR 0060 service/app/health block, declared here since ADR 0160).

Package i18n — ranges 0.2.30.* (ADR 0063 core/app/i18n block) and 0.3.60.* (ADR 0063 service/app/i18n block, declared here since ADR 0160).

Package id — ranges 0.2.7.* (ADR 0024 core/app/id block) and 0.3.39.* (ADR 0024 service/app/id block, declared here since ADR 0160).

Package lifecycle — ranges 0.2.19.* (ADR 0050 core/app/lifecycle block) and 0.3.49.* (ADR 0050 service/app/lifecycle block, declared here since ADR 0160).

Package lock — ranges 0.2.21.* (ADR 0052 core/app/lock block) and 0.3.51.* (ADR 0052 service/app/lock block, declared here since ADR 0160).

Package mail — the mailbox value.

Package spool — range 0.3.81.* (ADR 0111 service/app/mail/spool block, declared here since ADR 0160).

Package resilience — range 0.2.8.* (ADR 0026 core/app/resilience block).

Package scheduler — ranges 0.2.12.* (ADR 0041 core/app/scheduler block) and 0.3.43.* (ADR 0041 service/app/scheduler block, declared here since ADR 0160).

Package statemachine — ranges 0.2.56.* (ADR 0120 core/app/statemachine block) and 0.3.88.* (ADR 0120 service/app/statemachine block, declared here since ADR 0160).

Package validation — ranges 0.2.15.* (ADR 0046 core/app/validation block) and 0.3.47.* (ADR 0046 service/app/validation block, declared here since ADR 0160).

Package view — ranges 0.2.27.* (ADR 0058 core/app/view block) and 0.3.57.* (ADR 0058 service/app/view block, declared here since ADR 0160).

Package crypto — the AEAD port implemented by each concrete algorithm.

Package jwk — the JSON Web Key format's codes, range 0.3.42.* (ADR 0005).

Package cache declares the SDK's cache DOMAIN: the Store port that owns a set of keyed entries, the EntryValue a caller hands it, and the three sibling interfaces through which a store advertises what else it can do.

Package codec — declares the optional Appender extension that hot-path encoders (NDJSON, JSON, text) implement so callers can write into a caller-supplied buffer without paying for an intermediate allocation.

Package asn1 declares the error codes and the sentinels of the ASN.1 DER codec, internal/service/data/codec/asn1 — range 0.3.9.* (ADR 0005 service/data/codec/asn1 block).

Package baseenc declares the error codes and the sentinels of the base-N codec family (base64, base64url, base32, base16, hex, ascii85, base45, base58, base62), internal/service/data/codec/baseenc — range 0.3.24.* (ADR 0006 service/data/codec/baseenc block).

Package bson declares the error codes and the sentinels of the BSON codec, internal/service/data/codec/bson — range 0.3.36.* (ADR 0021 service/data/codec/bson block).

Package cbor declares the error codes and the sentinels of the CBOR codec, internal/service/data/codec/cbor — range 0.3.6.* (ADR 0005 service/data/codec/cbor block).

Package csv declares the error codes and the sentinels of the CSV codec, internal/service/data/codec/csv — range 0.3.8.* (ADR 0005 service/data/codec/csv block).

Package flatbuffers declares the error codes and the sentinels of the FlatBuffers passthrough codec, internal/service/data/codec/flatbuffers — range 0.3.23.* (ADR 0006 service/data/codec/flatbuffers block).

Package form declares the error codes and the sentinels of the application/x-www-form-urlencoded codec, internal/service/data/codec/form — range 0.3.40.* (ADR 0005 service/data/codec/form block).

Package json declares the error codes and the sentinels of the JSON codec, internal/service/data/codec/json — range 0.3.2.* (ADR 0005 service/data/codec/json block).

Package jsonpatch declares the error codes and the sentinels of the JSON-difference package (RFC 6902 operations, not a codec), internal/service/data/codec/jsonpatch — range 0.3.90.* (ADR 0143 service/data/codec/jsonpatch block).

Package msgpack declares the error codes and the sentinels of the MessagePack codec, internal/service/data/codec/msgpack — range 0.3.7.* (ADR 0005 service/data/codec/msgpack block).

Package multipart declares the error codes and the sentinels of the multipart/form-data codec, internal/service/data/codec/multipart — range 0.3.41.* (ADR 0005 service/data/codec/multipart block).

Package ndjson declares the error codes and the sentinels of the NDJSON codec, internal/service/data/codec/ndjson — range 0.3.11.* (ADR 0005 service/data/codec/ndjson block).

Package pem declares the error codes and the sentinels of the PEM codec, internal/service/data/codec/pem — range 0.3.10.* (ADR 0005 service/data/codec/pem block).

Package scratch provides shared, size-bounded recycling primitives for the service codecs.

Package strictjson declares the error codes and the sentinels of the strict JSON decoder (not a codec), internal/service/data/codec/strictjson — range 0.3.72.* (ADR 0102 service/data/codec/strictjson block).

Package tlv declares the error codes and the sentinels of the TLV codec, internal/service/data/codec/tlv — range 0.3.22.* (ADR 0006 service/data/codec/tlv block).

Package toml declares the error codes and the sentinels of the TOML codec, internal/service/data/codec/toml — range 0.3.5.* (ADR 0005 service/data/codec/toml block).

Package xml declares the error codes and the sentinels of the XML codec, internal/service/data/codec/xml — range 0.3.3.* (ADR 0005 service/data/codec/xml block).

Package yaml declares the error codes and the sentinels of the YAML codec, internal/service/data/codec/yaml — range 0.3.4.* (ADR 0005 service/data/codec/yaml block).

Package docstore — range 0.3.80.* (ADR 0110 service/data/docstore block; ADR 0139 added 16 and 17, ADR 0143 18 to 20).

Package queue — the ADR 0039 capability siblings of the frozen Broker port, and the dead-letter record one of them returns.

Package sql — range 0.2.24.* (ADR 0055 core/data/sql block), and the transaction manager's, health probe's and migration runner's 0.3.54.* (ADR 0055 service/data/sql block, declared here since ADR 0160).

Package transform — range 0.2.5.* (ADR 0014 core/data/transform block), and the stdlib schemes' 0.3.26.* (ADR 0014 service/data/transform block, declared here since ADR 0160).

Package vfs — range 0.2.25.* (ADR 0056 core/data/vfs block), and the concrete filesystem's 0.3.55.* (ADR 0056 service/data/vfs block, declared here since ADR 0160).

Package net — the listen address value.

Package logger — range 0.3.1.*, the logger engine's (ADR 0005 service/observe/logger block), declared here since ADR 0160: the engine, internal/service/observe/logger, returns these and declares none.

Package level defines severity levels for log records.

Package async declares the codes and sentinels of the logger's asynchronous middleware, internal/service/observe/logger/middleware/async: range 0.3.17.*, allocated to that engine (ADR 0005 service/observe/logger/middleware/async block) and declared here since ADR 0160, so the engine declares none.

Package encwrite declares the codes and sentinels of the logger's byte-encrypting middleware, internal/service/observe/logger/middleware/encwrite: range 0.3.28.*, allocated to that engine (ADR 0014 service slot 0x1c) and declared here since ADR 0160, so the engine declares none.

Package failover declares the codes and sentinels of the logger's failover middleware, internal/service/observe/logger/middleware/failover: range 0.3.19.*, allocated to that engine (ADR 0005 service/observe/logger/middleware/failover block) and declared here since ADR 0160, so the engine declares none.

Package multi declares the codes and sentinels of the logger's fan-out middleware, internal/service/observe/logger/middleware/multi: range 0.3.16.*, allocated to that engine (ADR 0005 service/observe/logger/middleware/multi block) and declared here since ADR 0160, so the engine declares none.

Package recover declares the codes and sentinels of the logger's panic-recovering middleware, internal/service/observe/logger/middleware/recover: range 0.3.21.*, allocated to that engine (ADR 0005 service/observe/logger/middleware/recover block) and declared here since ADR 0160, so the engine declares none.

Package route declares the codes and sentinels of the logger's routing middleware, internal/service/observe/logger/middleware/route: range 0.3.18.*, allocated to that engine (ADR 0005 service/observe/logger/middleware/route block) and declared here since ADR 0160, so the engine declares none.

Package sample declares the codes and sentinels of the logger's sampling middleware, internal/service/observe/logger/middleware/sample: range 0.3.20.*, allocated to that engine (ADR 0005 service/observe/logger/middleware/sample block) and declared here since ADR 0160, so the engine declares none.

Package tee declares the codes and sentinels of the logger's dead-letter tee middleware, internal/service/observe/logger/middleware/tee: range 0.3.29.*, allocated to that engine (ADR 0014 service slot 0x1d) and declared here since ADR 0160, so the engine declares none.

Package console declares the codes and sentinels of the logger's console sink, internal/service/observe/logger/sink/console: range 0.3.13.*, allocated to that engine (ADR 0005 service/observe/logger/sink/console block) and declared here since ADR 0160, so the engine declares none.

Package file declares the codes and sentinels of the logger's file sink, internal/service/observe/logger/sink/file: range 0.3.14.*, allocated to that engine (ADR 0005 service/observe/logger/sink/file block) and declared here since ADR 0160, so the engine declares none.

Package syslog declares the codes and sentinels of the logger's syslog sink, internal/service/observe/logger/sink/syslog: range 0.3.15.*, allocated to that engine (ADR 0005 service/observe/logger/sink/syslog block) and declared here since ADR 0160, so the engine declares none.

Package writer — range 0.2.3.* (ADR 0012 core/observe/logger/writer block).

Package journald declares the codes and sentinels of the journald log writer, internal/service/observe/logger/writer/journald: range 0.3.31.*, allocated to that engine (ADR 0015 service slot 0x1f) and declared here since ADR 0160, so the engine declares none.

Package nettransport declares the codes and sentinels of the network log writer, internal/service/observe/logger/writer/nettransport: range 0.3.30.*, allocated to that engine (ADR 0015 service slot 0x1e) and declared here since ADR 0160, so the engine declares none.

Package rotfile declares the codes and sentinels of the rotating-file log writer, internal/service/observe/logger/writer/rotfile: range 0.3.27.*, allocated to that engine (ADR 0014 service slot 0x1b) and declared here since ADR 0160, so the engine declares none.

Package metrics — the sibling port that registers asynchronous instruments.

Package otel holds the OpenTelemetry types every signal shares: the typed attribute (common/v1 KeyValue and AnyValue), the Resource (resource/v1) and the InstrumentationScope (common/v1).

Package profiling — range 0.3.89.*, allocated to the engine (ADR 0121 service/observe/profiling block) and declared here since ADR 0160: the engine returns these and declares none.

Package trace — this signal's half of the shared attribute model (internal/core/observe/otel): the refusal an unusable set earns HERE, and the Resource a Tracer publishes.

Package proc — range 0.2.6.* (ADR 0016 core/proc block).

Package ipc — the private socket's codes, range 0.3.91.* (ADR 0148).

Package authz — hosts AttrValue, one typed fact about a request.

Package redact — range 0.3.73.* (ADR 0101), declared here since ADR 0160.

Package secret — ranges 0.2.37.* (the port's verdicts) and 0.3.68.* (the engines' own refusals) — ADR 0096 and ADR 0142, declared here since ADR 0160.

Package session — ranges 0.2.14.* (the port's verdicts) and 0.3.46.* (the engines' own refusals) — ADR 0045, declared here since ADR 0160.

Package token — the immutable claim set every concrete token format decodes into and every issuer renders from.

Package backoff computes an exponential backoff: how long a loop that keeps failing waits before its next attempt.

Package clock abstracts the passage of time so higher layers can inject a deterministic time source in tests instead of coupling to the wall clock.

Package cache provides a generic, concurrency-safe LRU + TTL cache (Cache[K,V]) — a kernel primitive (stdlib-only, no domain vocabulary).

Package heap provides Heap[T], a binary heap ordered by a comparison function the caller supplies.

Package ring — range 0.1.3.* (ADR 0005 kernel/collections/ring block).

Package batcher provides a generic coalescing buffer: items are appended via Add and handed to a deliver closure in batches — flushed eagerly when an item-count or weight cap is reached, on an optional background ticker, or on an explicit Flush / Close.

Package buffer provides a pooled *[]byte for zero-alloc formatting in hot paths.

Package group — the typed fan-out built on the Group.

Package recycler — CappedPool[T] layers a reset-on-Put + cap-discard policy on top of the plain Pool[T] declared in recycler.go.

Package singleflight — the in-flight call record shared by every caller of one key.

Package snapshot provides Value[T any], a copy-on-write container for read-mostly shared state.

Package worker — Every layers a ticker loop on top of the LoopDaemon lifecycle.

Package errs — provides package-level introspection helpers that walk a cause chain and read fields from the deepest *Error encountered.

Package flock takes an exclusive lock on a whole file WITHOUT waiting for it, and gives it back: flock(2) on the Unix kernels that have it, LockFileEx over every byte of the file on Windows (ADR 0081, ADR 0159).

Package pathchain resolves a path one component at a time and reports what each component IS, instead of only what the whole path finally names.

Package winacl reads a Windows directory's discretionary access control list and answers one question of it: does an identifier meaning ANYBODY — Everyone, Authenticated Users, BUILTIN\Users — hold a right, on the directory itself or on the files that will be created in it?

Package plugin answers one question a process-wide registry must ask before it publishes anything: is this value usable as an entry at all?

Package semver — the parser: a version cut into what precedence reads, in one pass over its bytes and without a copy of any of them.

Package cli is the command-line engine: it validates a whole command tree once, resolves an argument vector against it, renders the help the tree implies, and returns a typed error carrying an exit status.

Package config — environment-variable Source.

Package events — hosts the engine: registration, removal, and the copy-on-write membership the dispatch reads.

Package health — hosts Ask, the client half of a readiness probe: the question a container's HEALTHCHECK asks a running process, from an image that has no shell and no curl to ask it with (ADR 0131).

Package i18n — the RFC 9110 Accept-Language header parser.

Package id wraps stdlib crypto/rand + the kernel clock as core/app/id.Generator implementations (UUIDv4, UUIDv7, ULID, snowflake, NanoID, KSUID, TypeID).

Package lifecycle — hosts Config, the engine's construction parameters.

Package lock — the kernel lock the file locker stands on, and what each kernel's version of it means for THIS domain.

Package mail — the addr-spec subset this domain accepts, and the display-name rule the composer depends on.

Package spool — the spool's construction parameters, the defaults their zero values clamp to, and the refusals.

Package resilience — the exponential backoff every waiting policy computes, re-exported from the kernel package that owns it.

Package scheduler — hosts Config, the engine's construction parameters.

Package statemachine — hosts the agenda: when each entity's next automatic transition falls due, the entities written since the loop last looked, and the backoff of those whose transition failed.

Package validation — the ordered-value bounds constraints.

Package view — the cycle detection the trust-type scan needs, kept in its own file so scan.go holds the walk and nothing else.

Package aesgcm registers the "aes-256-gcm" AEAD scheme (ADR 0013).

Package streamaead (reader.go) — the streaming-AEAD read path: header verify, chunk-by-chunk decrypt with hold-back, and one-byte EOF look-ahead.

Package x25519 registers the "x25519" key-agreement scheme (ADR 0014).

Package stdhash — CRC-32C (Castagnoli) scheme registration (see stdhash.go).

Package hkdfsha256 registers the "hkdf-sha256" key-derivation scheme (ADR 0013).

Package keytree implements path-addressed hierarchical key derivation.

Package jwk — the bridge between a JWK and the key encodings the SDK's own schemes already speak, so adopting the format costs no re-encoding by hand:

Package keyenvelope wraps a symmetric DEK at rest under a passphrase.

Package hmacsha2 registers the "hmac-sha256" MAC scheme (ADR 0014).

Package commonpw holds the ten thousand most common passwords, and says whether a password is one of them (ADR 0143 §D10).

Package pbkdf2pw registers the "pbkdf2-sha256" password-hashing scheme (ADR 0013).

Package ecdsasig registers the "ecdsa-p256" signature scheme (ADR 0013).

Package ed25519sig registers the "ed25519" signature scheme (ADR 0013).

Package cache — hosts the compile-time interface assertions, keeping them out of the production source so the runtime binary carries no diagnostic-only declarations.

Package asn1 wraps encoding/asn1 as a codec.Codec implementation.

Package baseenc — Base45 (RFC 9285) alphabet codec.

Package bson is the BSON codec: a native implementation of the BSON 1.1 specification (bsonspec.org) behind the universal core/data/codec.Codec dispatch, written with the standard library alone.

Package cbor is the SDK's CBOR codec (RFC 8949), written on the standard library alone.

Package csv wraps encoding/csv as a codec.Codec implementation.

Package flatbuffers implements a thin passthrough codec for already-encoded FlatBuffer payloads.

Package form implements application/x-www-form-urlencoded as a codec.Codec — the encoding every HTML form POSTs and every query string carries.

Package json wraps encoding/json as a codec.Codec implementation registered under Format("json").

Package jsonpatch computes the structural difference between two JSON documents as RFC 6902 operations — add, remove and replace, each at an RFC 6901 JSON Pointer — with the value each operation writes AND the value it replaces or removes (ADR 0143).

Package jsonshape — the members encoding/json writes for a struct, resolved by its own rules: json/v2's field walk under the v1 options Go 1.27's encoding/json runs with.

Package msgpack is the MessagePack codec — a native implementation of the specification (github.com/msgpack/msgpack/blob/master/spec.md) on the standard library alone, registered as the "msgpack" Format.

Package multipart — boundary recovery and validation.

Package ndjson implements newline-delimited JSON as a codec.Codec.

Package pem wraps encoding/pem as a codec.Codec implementation.

Package strictjson — the reader that bounds a document and remembers why it stopped.

Package httpbody decodes the JSON body of an HTTP request with the strict decoder of its parent package, adding the three things only an HTTP body has: a bound net/http enforces too, an empty body settled before anything else, and a media type that must declare JSON.

Package tlv implements a self-describing Type-Length-Value codec.

Package toml is the TOML codec, written against TOML v1.0.0 (https://toml.io/en/v1.0.0) with the standard library alone.

Package xml wraps encoding/xml as a codec.Codec implementation registered under Format("xml").

Package yaml — the block structure: mappings, sequences, keys and values.

Package docstore — the store's construction parameters, and the refusals a configuration no store could honour gets, the index declarations' included: an IndexSpec is core/data/docstore's, which both engines take (ADR 0160).

Package queue — the consumer engine: the pull loop that runs a Handler on a CONSUMER'S goroutine, which is the third axis of ADR 0053's frontier.

Package sql — hosts Config, the parameters every port in this package is built from, and the pool policy it applies.

Package transform — shared decompression bound for the stdlib gzip, flate and zlib schemes.

Package vfs — the in-memory filesystem, and the read half of its contract.

Package client — the response body size ceiling.

Package server — adoption of listeners inherited from a supervisor.

Package sse — an event's wire form, as the WHATWG HTML standard's Server-Sent Events format spells it: the encoder that turns a corenet.SSEEventValue into the bytes a stream writes, and a comment into the one frame no client dispatches.

Package static — what NewHandler refuses in a Config.

Package tlsid loads TLS and mutual-TLS material into the opaque, redacting identity declared by internal/core/net (ADR 0029).

Package websocket — the closing handshake's payload (RFC 6455 §5.5.1): a two-byte status code and an optional UTF-8 reason, written and read here.

Package logger — declares the chainable Builder API — the low-allocation hot path for callers that care about per-call cost.

Package encoder provides concrete Encoder implementations (Text today; NDJSON and JSON to land in follow-up commits).

Package async wraps any corelogger.Sink with a non-blocking ring buffer and a single drainer goroutine, decoupling the producer hot path from the (potentially slow) downstream sink.

Package encwrite — declares the Config value type consumed by NewEncWriter.

Package failover implements a sequential-retry Sink that tries downstream sinks in order until one succeeds.

Package multi implements a fanout Sink that broadcasts each Write to a fixed list of downstream sinks.

Package recover — holds the Config struct consumed by NewWithConfig.

Package route implements a predicate-based router Sink.

Package sample implements a 1-of-N rate-limiter Sink.

Package tee — declares the Config value type consumed by New.

Package console implements a Sink that writes formatted records onto an io.Writer (typically os.Stdout or os.Stderr) under a local mutex so concurrent goroutines emit atomic lines.

Package file implements a Sink that appends formatted records to an on-disk file.

Package memory implements a Sink that retains a defensive snapshot of every RecordEvent it receives in a mutex-guarded slice.

Package syslog — holds the Config struct consumed by NewWithConfig.

Package console registers the "console" writer factory.

Package dbsink is the driver-AGNOSTIC database sink shell (ADR 0015, gated).

Package file registers the "file" writer factory.

Package journald — the config Decoder making "journald" reachable from a config file via pkg/v1/observe/logger.FromConfig.

Package levelgate provides a Sink decorator that forwards records at or above a minimum severity and silently drops the rest.

Package nettransport — the transport seams: the ONLY file that touches net / net/http.

Package rotfile — backup-name arithmetic and the per-slot move/gzip helpers split out of rotate.go so each function stays under KTN-FUNC-MAXLOC.

Package metrics — one instrument name's slot in a collection arena.

Package profiling — hosts CanonicalName: one spelling for a function, whoever named it.

Package trace — the Tracer's configuration: producing Resource, instrumentation Scope, sampling policy, span destination and clock.

Package cgroup — creates and manages cgroup v2 control groups.

Package childwait decides who receives a child's exit status (ADR 0093).

Package exec — Unix best-effort post-start attributes: scheduling priority (Nice), OOM-killer bias (OOMScoreAdj).

Package ipc — the components ABOVE the socket's directory, and who could steer them: ADR 0083's rule, applied where the directory is the whole of the access control (ADR 0148).

Package memlimit — resolving WHICH cgroup limit files govern this process: where each hierarchy is mounted, which part of the filesystem that mount exposes, which cgroup the process belongs to, and the ancestors whose caps bound it just as effectively.

Package reaper — the PID1 / subreaper zombie collector backing pkg/v1/proc/reaper.

Package rlimit — applies per-process setrlimit(2) resource ceilings.

Package self is what the running process can say about itself: what it was built from (build.go) and what it is doing right now (stats.go).

Package signal — Unix Relay: forwards each received signal to a pid or process group via kill(2), where a negative Target addresses the group whose id is its absolute value.

Package listen — Unix socket activation (sd_listen_fds(3) family).

Package notify — the supervisor (listener) side on Linux: SO_PASSCRED.

Package authz — hosts the attribute-based evaluator.

Package redact — log attributes rendered as display text.

Package secret — the read-only store over the process environment, with the NAME_FILE convention Docker and Kubernetes secrets use.

Package session — the components ABOVE the store directory, which no flag on an open can reach.

Package token — one JWK Set member, with its binding already derived.