pkg

Package appkit holds the worker/operator supervised-component contracts that the generated internal/app composition layer re-uses.

Package auth provides JWT and API-key authentication for forge-generated Connect RPC services.

Package authn provides the authentication interceptor mechanism that forge-generated services wire from their thin, user-owned pkg/middleware file.

Package authz provides the runtime helper used by the per-service handlers/<svc>/authorizer_gen.go file forge generates.

Package cmdkit is the paved path for forge's non-server binary shapes: CLI subcommands, one-shot admin tools, and standalone long-running binaries that ship in the same image as the Connect server but are not themselves Connect services.

Package contractkit provides runtime helpers used by the per-package mock_gen.go file forge generates from contract.go.

Package controller provides opinionated runtime helpers for controller-runtime reconcilers.

Package crud provides runtime helpers used by the per-service handlers_crud_gen.go file forge generates from a service's CRUD RPCs.

Package diagnostics surfaces unwired forge scaffolds at runtime.

Package lifecyclekit owns the uniform worker/operator supervised-component machinery that the generated internal/app/lifecycle_gen.go delegates to.

Package middleware provides the commodity HTTP middlewares and Connect interceptors that every forge-generated service ships with.

Package mountkit mounts a forge Connect service onto an http.ServeMux.

Package observe provides observability primitives for forge-generated services: Connect interceptors for logging, tracing, metrics, recovery, and request-id correlation, plus opt-in helpers (LogCall, TraceCall, RecordCall) for explicit per-method instrumentation inside internal packages.

Package pgtest provides a REAL ephemeral postgres for generate-time schema introspection and for hermetic tests that need a database.

Package serverkit runs an already-composed forge server: HTTP/Connect listener, healthz/readyz probes, the HTTP edge (CORS / security-headers / request-id / h2c), worker supervisor, operator manager, and graceful shutdown sequence.

Package svcerr provides the canonical service-error → Connect-error mapping used by every forge handler package.

Package tdd is a generics-based table-driven test library for Forge projects.

Package tenant provides multi-tenant context helpers and a Connect interceptor that extracts a tenant ID from authenticated auth.Claims and stores it in the request context.

Package testkit provides a small set of test helpers that every forge-generated bootstrap_testing.go reinvents: a discard logger, a real-postgres ORM context (bare, or with the project's embedded migrations applied), an httptest harness that wraps a Connect-mounted service, a permissive Authorizer for non-authz tests, a claims-bearing AuthedContext for handlers that read the current user, and a tenant-context helper for multi-tenant tests.