pkg/

Package edge holds the domain model for the WebMCP reverse-connection gateway: the state that tracks which browser tab (per user, per origin) is currently reachable through an edge WebSocket connection.

Package authz decides whether a Principal may call a given MCP tool, delegating the decision to an OPA sidecar (see docs/design/opa-tool-authorization-plan.ja.md).

Package edge implements the WebMCP reverse-connection gateway services: the in-memory binding registry and the pairing/edge-token service.

Package identity resolves a domainedge.IdentityKey from an AI agent's inbound HTTP request, per the identities profile referenced by a reverse Server (see the "ユーザー識別（identity プロファイル）" section of docs/design/webmcp-reverse-gateway.ja.md, implemented in Phase 2a).