internal/

Package boundaries holds a test enforcing ContentKit's package layering from the module's dependency graph (go list; no compilation or services).

Package codes writes the content-code registry (content_codes) for the packages that own content: contenturl for host content, groups and content for ContentKit's own records.

Package contract renders ContentKit's route catalog (internal/httpapi) and error-code registry as the files other tools read: api/openapi.json, the Go client's methods (client_gen.go), the browser SDK's generated route table, wire types and error codes, and docs/api/routes.md.

Package gate builds ContentKit's route gates from the host's auth.

Package httpapi is ContentKit's HTTP surface as data.

Package hub is the engine's search and signal planes for one tenant: keyword search and typeahead, and the ClickHouse signal plane.

Package kindsroute serves the site's public content model: the part of kinds.Config clients render kinds, groups and content filters with.

Package normalize cleans user query text before retrieval.

Package pglock holds Postgres session advisory locks on dedicated connections, so the holder's work may use every connection of its pool.

Package pgtest provisions disposable keyword-profile schemas on the CONTENTKIT_TEST_URL Postgres for integration tests.

Package ratelimit admits events per key against one or more sliding windows ("at most Limit in any Per"), in process or shared through Redis (or Garnet).

Package resolve is how ContentKit's modules ask whether content exists, is visible, opens and is edited by a viewer.

Package signaltest provisions disposable signal-plane ClickHouse databases for integration tests by applying the real migration lineage.

Package tcpproxy is a test TCP forwarder that a test takes down (connections refused) and brings back on the same address, to stand in for a provider outage.

Package testauth is an auth.Authenticator for ContentKit's package tests, which cannot import a real provider: a request's bearer names its actor (As) and an Authorizer answers its Can.

Package versionid carries a version id between Go, where a content key's is "" for the work itself (contentref.ContentKey), and Postgres, where no version is NULL.

Package worker maintains one tenant's keyword documents: it drains the dirty queue and runs a bounded cursor backfill, building every document from ContentKit's own records through its Sources (the catalog's content, the groups').