internal/

Package pbclient is a minimal Portal Backend API client for CLI management commands.

Package profile manages named, reusable sets of ndx CLI flag defaults (identity provider issuer, client ID, scopes, callback port, Portal Backend URL, TLS verification) cached at ~/.openndx/config.json.

Package operation normalizes a validated consumer query into the fields the federator plans against: fragments merged, @skip and @include applied, fields grouped by response key, and each field bound to its schema definition and @sourceInfo.

Package schema supplies the consumer schema the federator plans queries against.

Package application is the Portal Backend's consumer application bounded context: applications, application submissions, their IdP clients and PDP allow-lists, and the application API.

Package caller is the Portal Backend's view of who is calling: the OAuth2 scopes its routes require, the scopes and organization unit internal/authn validated, and the member that organization unit belongs to.

Package callertest provides authenticated test personas and request helpers for Portal Backend handler tests.

Package dbtest provides database fixtures for Portal Backend tests.

Package idptest provides a fake idp.IdentityProviderAPI for Portal Backend tests.

Package thunderid implements idp.ApplicationManager against ThunderID's management API: Portal Backend creates each data-consumer application as an M2M client in its member's organization unit and grants it the data-consumer role.

Package kernel holds the shared kernel of the Portal Backend: types used by more than one bounded context.

Package member is the Portal Backend's member bounded context: member organizations, their link to the IdP, and the member API.

Package policy is the Portal Backend's client for the Policy Decision Point (PDP).

Package schema is the Portal Backend's provider schema bounded context: schemas, schema submissions, their PDP policy metadata, and the schema API.

Package db creates the PDP's PostgreSQL schema.