Directories
¶
| Path | Synopsis |
|---|---|
|
Package accesstoken is the security primitive behind Reliant Labs' ONE machine credential, `rlat_`: its wire format, generation, hashing, constant-time comparison, the closed scope vocabulary, the rule that a token may never grant authority it does not hold, and the Principal a presented token resolves to.
|
Package accesstoken is the security primitive behind Reliant Labs' ONE machine credential, `rlat_`: its wire format, generation, hashing, constant-time comparison, the closed scope vocabulary, the rule that a token may never grant authority it does not hold, and the Principal a presented token resolves to. |
|
Package activity is forge's typed activity stream: who did what to which object, where, and through what.
|
Package activity is forge's typed activity stream: who did what to which object, where, and through what. |
|
Package alerting is a SQL alert-rule evaluator in the Prometheus shape.
|
Package alerting is a SQL alert-rule evaluator in the Prometheus shape. |
|
amconfig
Package amconfig renders an Alertmanager configuration from stored receivers and routes.
|
Package amconfig renders an Alertmanager configuration from stored receivers and routes. |
|
chquery
Package chquery is a single-owner alerting.Querier over one ClickHouse connection: the owner key is ignored and every rule runs against the connection's database.
|
Package chquery is a single-owner alerting.Querier over one ClickHouse connection: the owner key is ignored and every rule runs against the connection's database. |
|
pgstore
Package pgstore is the Postgres alerting.StateStore.
|
Package pgstore is the Postgres alerting.StateStore. |
|
Package apikey provides the security-sensitive primitives for issuing and verifying API keys: cryptographically-random key generation, hashing, and constant-time verification.
|
Package apikey provides the security-sensitive primitives for issuing and verifying API keys: cryptographically-random key generation, hashing, and constant-time verification. |
|
Package appkit holds the worker/operator supervised-component contracts that the generated internal/app composition layer re-uses.
|
Package appkit holds the worker/operator supervised-component contracts that the generated internal/app composition layer re-uses. |
|
operatorkit
Package operatorkit owns the controller-manager runtime behind the generated App.RunOperators method in forge projects.
|
Package operatorkit owns the controller-manager runtime behind the generated App.RunOperators method in forge projects. |
|
Package audit provides the durable write-side of forge's audit trail: an Entry record, a Store persistence interface, and a Postgres-backed DBAuditStore that writes and queries the audit_log table.
|
Package audit provides the durable write-side of forge's audit trail: an Entry record, a Store persistence interface, and a Postgres-backed DBAuditStore that writes and queries the audit_log table. |
|
Package auth provides JWT and API-key authentication for forge-generated Connect RPC services.
|
Package auth provides JWT and API-key authentication for forge-generated Connect RPC services. |
|
Package authn provides the authentication interceptor mechanism that forge-generated services wire from their thin, user-owned pkg/middleware file.
|
Package authn provides the authentication interceptor mechanism that forge-generated services wire from their thin, user-owned pkg/middleware file. |
|
Package cloudcred is the PUBLIC seam between forge and a HOST APPLICATION that already holds the user's session — the credential-helper protocol.
|
Package cloudcred is the PUBLIC seam between forge and a HOST APPLICATION that already holds the user's session — the credential-helper protocol. |
|
Package cmdkit is the paved path for forge's non-server binary shapes: CLI subcommands, one-shot admin tools, and standalone long-running binaries that ship in the same image as the Connect server but are not themselves Connect services.
|
Package cmdkit is the paved path for forge's non-server binary shapes: CLI subcommands, one-shot admin tools, and standalone long-running binaries that ship in the same image as the Connect server but are not themselves Connect services. |
|
Package config resolves a project's typed configuration from proto field annotations at runtime, with no per-field generated loader.
|
Package config resolves a project's typed configuration from proto field annotations at runtime, with no per-field generated loader. |
|
Package contractkit provides runtime helpers used by the per-package mock_gen.go file forge generates from contract.go.
|
Package contractkit provides runtime helpers used by the per-package mock_gen.go file forge generates from contract.go. |
|
Package controller provides opinionated runtime helpers for controller-runtime reconcilers.
|
Package controller provides opinionated runtime helpers for controller-runtime reconcilers. |
|
controllertest
Package controllertest provides a small envtest harness that generated `<crd>_controller_test.go` files use in their TestMain setup.
|
Package controllertest provides a small envtest harness that generated `<crd>_controller_test.go` files use in their TestMain setup. |
|
Package credentials is the ONE on-disk store of control-plane access tokens, shared by every CLI that talks to a Reliant Labs control plane — `forge login` and `reliant auth login` both write it, and every command of both reads it.
|
Package credentials is the ONE on-disk store of control-plane access tokens, shared by every CLI that talks to a Reliant Labs control plane — `forge login` and `reliant auth login` both write it, and every command of both reads it. |
|
Package crud provides runtime helpers used by the per-service handlers_crud_gen.go file forge generates from a service's CRUD RPCs.
|
Package crud provides runtime helpers used by the per-service handlers_crud_gen.go file forge generates from a service's CRUD RPCs. |
|
Package crypto provides at-rest AES-256-GCM encryption under a VERSIONED KEYRING, so a key can be rotated without making every already-sealed value permanently unreadable.
|
Package crypto provides at-rest AES-256-GCM encryption under a VERSIONED KEYRING, so a key can be rotated without making every already-sealed value permanently unreadable. |
|
Package dashspec is forge's renderer-neutral dashboard vocabulary (forge.dashboards/v1) and its validator: the types a dashboard file is written in, and ParseDashboard, which judges one with every problem located by line, column and path.
|
Package dashspec is forge's renderer-neutral dashboard vocabulary (forge.dashboards/v1) and its validator: the types a dashboard file is written in, and ParseDashboard, which judges one with every problem located by line, column and path. |
|
Package dbgrants is the read-only database role every forge-managed Postgres carries, and the grants that bound what it can read.
|
Package dbgrants is the read-only database role every forge-managed Postgres carries, and the grants that bound what it can read. |
|
Package dbquery runs one read-only SQL statement against a Postgres and returns typed, bounded, JSON-encodable results.
|
Package dbquery runs one read-only SQL statement against a Postgres and returns typed, bounded, JSON-encodable results. |
|
kubedial
Package kubedial reaches a CloudNativePG database in a Kubernetes namespace through the kube API server, with no network path of its own: it resolves a ready pod behind the database's Service, opens a pods/portforward stream to it and hands the stream to pgx as a net.Conn.
|
Package kubedial reaches a CloudNativePG database in a Kubernetes namespace through the kube API server, with no network path of its own: it resolves a ready pod behind the database's Service, opens a pods/portforward stream to it and hands the stream to pgx as a net.Conn. |
|
Package deploy is forge's deploy-tier library: the pure functions that operate on the tier specs in pkg/deploy/v1alpha1.
|
Package deploy is forge's deploy-tier library: the pure functions that operate on the tier specs in pkg/deploy/v1alpha1. |
|
eso
Package eso holds what forge pins about the External Secrets Operator component (forge.ExternalSecretsOperator): the chart and image it installs, the keyless-signing identity that image must carry, and the CRDs forge supplies itself.
|
Package eso holds what forge pins about the External Secrets Operator component (forge.ExternalSecretsOperator): the chart and image it installs, the keyless-signing identity that image must carry, and the CRDs forge supplies itself. |
|
openbao
Package openbao renders forge.OpenBao, the secret store an env runs itself.
|
Package openbao renders forge.OpenBao, the secret store an env runs itself. |
|
v1alpha1
Package v1alpha1 is the ONE declaration of forge's deploy kinds — Workload, StaticSite and ManagedDatabase — in API group forge.dev.
|
Package v1alpha1 is the ONE declaration of forge's deploy kinds — Workload, StaticSite and ManagedDatabase — in API group forge.dev. |
|
Package deploystate is the pluggable backend for forge's reconcile state: what forge last shipped to a target, what it last OBSERVED running there, and the per-environment policy that says whether forge is allowed to do anything about the difference.
|
Package deploystate is the pluggable backend for forge's reconcile state: what forge last shipped to a target, what it last OBSERVED running there, and the per-environment policy that says whether forge is allowed to do anything about the difference. |
|
Package devidp is the sign-in broker's client for a Zitadel instance: it drives the OIDC authorization-code flow with PKCE on the server's behalf (BeginFlow, SignIn, SignUp, RedeemCode), creates and finalizes sessions with the login broker's token, and resets passwords.
|
Package devidp is the sign-in broker's client for a Zitadel instance: it drives the OIDC authorization-code flow with PKCE on the server's behalf (BeginFlow, SignIn, SignUp, RedeemCode), creates and finalizes sessions with the login broker's token, and resets passwords. |
|
Package diagnostics surfaces unwired forge scaffolds at runtime.
|
Package diagnostics surfaces unwired forge scaffolds at runtime. |
|
Package flux holds the identity of the Flux install forge pins — ControlPlane's Flux Operator chart and the FluxInstance riding it — and the names a writer of Flux objects needs to agree with `forge.flux_chart()`: the per-namespace ClusterRoles, the tenant ServiceAccount, and the connected-cluster shard (the sharding label, its value, the shard's controller and the ClusterRole a namespace binds it to).
|
Package flux holds the identity of the Flux install forge pins — ControlPlane's Flux Operator chart and the FluxInstance riding it — and the names a writer of Flux objects needs to agree with `forge.flux_chart()`: the per-namespace ClusterRoles, the tenant ServiceAccount, and the connected-cluster shard (the sharding label, its value, the shard's controller and the ClusterRole a namespace binds it to). |
|
Package fluxdelivery is the Go half of kcl/lib/flux_delivery.k: gitless Flux delivery through a flux-operator ResourceSet.
|
Package fluxdelivery is the Go half of kcl/lib/flux_delivery.k: gitless Flux delivery through a flux-operator ResourceSet. |
|
internal/gentemplate
command
Command gentemplate writes pkg/fluxdelivery/template_gen.go: the Go constant of kcl/lib/flux_delivery.k's FLUX_DELIVERY_TEMPLATE, evaluated through forge's own KCL seam.
|
Command gentemplate writes pkg/fluxdelivery/template_gen.go: the Go constant of kcl/lib/flux_delivery.k's FLUX_DELIVERY_TEMPLATE, evaluated through forge's own KCL seam. |
|
internal/kcleval
Package kcleval evaluates a KCL program against the forge module embedded in this binary — the module a released forge renders with — for fluxdelivery's generator and its Go/KCL agreement tests.
|
Package kcleval evaluates a KCL program against the forge module embedded in this binary — the module a released forge renders with — for fluxdelivery's generator and its Go/KCL agreement tests. |
|
Package graphkit is the runtime under a project's generated composition graph (internal/app/graph_gen.go): memoized construction of each node, the root's Build — force the closure, then seal — and the lifecycle nodes of what was built, in the order it was built, for lifecyclekit.Supervise.
|
Package graphkit is the runtime under a project's generated composition graph (internal/app/graph_gen.go): memoized construction of each node, the root's Build — force the closure, then seal — and the lifecycle nodes of what was built, in the order it was built, for lifecyclekit.Supervise. |
|
Package hostslot is a host-wide counting semaphore for heavy work: at most N heavy jobs — builds, test lanes, codegen, linters — run at once on one machine, however many agents, worktrees and terminals start them.
|
Package hostslot is a host-wide counting semaphore for heavy work: at most N heavy jobs — builds, test lanes, codegen, linters — run at once on one machine, however many agents, worktrees and terminals start them. |
|
Package identity converges the CONTENT of one Zitadel instance to a declared Spec: the project, its roles, the OIDC applications (web, SPA, native and the native-sign-in broker app), machine users and their keys, the login / password-complexity / lockout policies, SMTP, declared role members and (dev and preview only) seed users.
|
Package identity converges the CONTENT of one Zitadel instance to a declared Spec: the project, its roles, the OIDC applications (web, SPA, native and the native-sign-in broker app), machine users and their keys, the login / password-complexity / lockout policies, SMTP, declared role members and (dev and preview only) seed users. |
|
Package kcleval reads values out of a forge project's KCL from Go, so a test can assert against what the project DECLARES instead of restating it.
|
Package kcleval reads values out of a forge project's KCL from Go, so a test can assert against what the project DECLARES instead of restating it. |
|
Package lease is a named, process-level singleton lock over Postgres advisory locks: at most one replica at a time runs a given job, every other replica waits as a hot standby and takes over when the holder exits, crashes or loses its database connection.
|
Package lease is a named, process-level singleton lock over Postgres advisory locks: at most one replica at a time runs a given job, every other replica waits as a hot standby and takes over when the holder exits, crashes or loses its database connection. |
|
Package lifecyclekit owns process lifecycle: the four single-method component interfaces (Runner, Drainer, Closer, Readier) and Supervise, which starts a list of components in order and stops them in reverse (supervise.go) — plus the uniform worker/operator supervised-component machinery that the generated internal/app/lifecycle_gen.go delegates to.
|
Package lifecyclekit owns process lifecycle: the four single-method component interfaces (Runner, Drainer, Closer, Readier) and Supervise, which starts a list of components in order and stops them in reverse (supervise.go) — plus the uniform worker/operator supervised-component machinery that the generated internal/app/lifecycle_gen.go delegates to. |
|
Package middleware provides the commodity HTTP middlewares and Connect interceptors that every forge-generated service ships with.
|
Package middleware provides the commodity HTTP middlewares and Connect interceptors that every forge-generated service ships with. |
|
Package migratekit is the invariant half of a forge project's `db migrate` command tree: opening a migrator over an embedded migration set, closing it, and reporting what the schema is doing.
|
Package migratekit is the invariant half of a forge project's `db migrate` command tree: opening a migrator over an embedded migration set, closing it, and reporting what the schema is doing. |
|
compat
Package compat reads the contracts a migration declares about itself: that it is BACKWARD-COMPATIBLE, or deliberately BREAKS ROLLBACK (this file), and which foreign migration history a baseline ADOPTS (adopt.go).
|
Package compat reads the contracts a migration declares about itself: that it is BACKWARD-COMPATIBLE, or deliberately BREAKS ROLLBACK (this file), and which foreign migration history a baseline ADOPTS (adopt.go). |
|
Package money provides a small, allocation-free value type for representing monetary amounts as an integer number of minor units ("cents") plus a currency, together with overflow-checked arithmetic and locale-neutral formatting.
|
Package money provides a small, allocation-free value type for representing monetary amounts as an integer number of minor units ("cents") plus a currency, together with overflow-checked arithmetic and locale-neutral formatting. |
|
Package mountkit mounts a forge Connect service onto an http.ServeMux.
|
Package mountkit mounts a forge Connect service onto an http.ServeMux. |
|
inventory
Package inventory owns the DATA-ONLY service descriptor type and reader helpers behind the generated internal/app/inventory_gen.go's `var Inventory = []inventory.ComponentInfo{...}`.
|
Package inventory owns the DATA-ONLY service descriptor type and reader helpers behind the generated internal/app/inventory_gen.go's `var Inventory = []inventory.ComponentInfo{...}`. |
|
Package netguard refuses outbound connections to destinations a caller picked but must not be able to reach: loopback, private, link-local, cloud-metadata, CGNAT, multicast, reserved and documentation ranges, the in-cluster and internal hostnames, and the IPv4 addresses hidden inside IPv6 transition forms (mapped, compatible, translated, NAT64, 6to4, Teredo).
|
Package netguard refuses outbound connections to destinations a caller picked but must not be able to reach: loopback, private, link-local, cloud-metadata, CGNAT, multicast, reserved and documentation ranges, the in-cluster and internal hostnames, and the IPv4 addresses hidden inside IPv6 transition forms (mapped, compatible, translated, NAT64, 6to4, Teredo). |
|
Package oauth2 implements the client half of the OAuth 2.0 authorization-code flow with PKCE (RFC 7636) using only the standard library.
|
Package oauth2 implements the client half of the OAuth 2.0 authorization-code flow with PKCE (RFC 7636) using only the standard library. |
|
File: client.go — the OUTBOUND Connect client stack.
|
File: client.go — the OUTBOUND Connect client stack. |
|
chtrace
Package chtrace makes a ClickHouse connection's statements OpenTelemetry spans, the way dbtrace does for Postgres.
|
Package chtrace makes a ClickHouse connection's statements OpenTelemetry spans, the way dbtrace does for Postgres. |
|
dbtrace
Package dbtrace opens a *sql.DB whose queries are OpenTelemetry spans.
|
Package dbtrace opens a *sql.DB whose queries are OpenTelemetry spans. |
|
metrics
Package metrics is forge's declared metrics registry: a typed layer over the OpenTelemetry metrics API in which every instrument is DECLARED before it is created.
|
Package metrics is forge's declared metrics registry: a typed layer over the OpenTelemetry metrics API in which every instrument is DECLARED before it is created. |
|
natsotel
Package natsotel carries trace context across NATS, so a message's consumer continues the trace of the code that published it.
|
Package natsotel carries trace context across NATS, so a message's consumer continues the trace of the code that published it. |
|
observetest
Package observetest holds test helpers that pin a process's observability wiring from a unit test.
|
Package observetest holds test helpers that pin a process's observability wiring from a unit test. |
|
temporalotel
Package temporalotel carries trace context through Temporal, so the request that starts or signals a workflow, the workflow, and every activity it runs are ONE trace.
|
Package temporalotel carries trace context through Temporal, so the request that starts or signals a workflow, the workflow, and every activity it runs are ONE trace. |
|
Package obsquery compiles typed observability requests (log search, traces, metrics, dashboard panels, workloads, profiles) into parameterized ClickHouse SQL over the OTel exporter's tables.
|
Package obsquery compiles typed observability requests (log search, traces, metrics, dashboard panels, workloads, profiles) into parameterized ClickHouse SQL over the OTel exporter's tables. |
|
Package orm is forge's typed data-access layer: a postgres-pinned query builder over uptrace/bun, plus the schema-truth machinery that projects entity types out of the applied migrations.
|
Package orm is forge's typed data-access layer: a postgres-pinned query builder over uptrace/bun, plus the schema-truth machinery that projects entity types out of the applied migrations. |
|
Package pgtest provides a REAL ephemeral postgres for generate-time schema introspection and for hermetic tests that need a database.
|
Package pgtest provides a REAL ephemeral postgres for generate-time schema introspection and for hermetic tests that need a database. |
|
Package profilequery reads continuous profiles back out of ClickHouse and writes them in formats other tools open.
|
Package profilequery reads continuous profiles back out of ClickHouse and writes them in formats other tools open. |
|
Package redact removes credential shapes and personal paths from text that leaves the process: a bug report, a log line, an error string sent to telemetry.
|
Package redact removes credential shapes and personal paths from text that leaves the process: a bug report, a log line, an error string sent to telemetry. |
|
Package release is forge's release ledger vocabulary: what a RELEASE is (an immutable, content-addressed set of artifacts under a version label), what a PROMOTION is (one append-only event binding an environment to a release), and the invariants both must hold no matter where they are stored.
|
Package release is forge's release ledger vocabulary: what a RELEASE is (an immutable, content-addressed set of artifacts under a version label), what a PROMOTION is (one append-only event binding an environment to a release), and the invariants both must hold no matter where they are stored. |
|
Package releasehealth is the rule that judges a release: given the stats of the window before a promotion and the window after it, plus the issues, alerts and workload restarts the release opened, it produces findings and a verdict (PASS, FAIL or INCONCLUSIVE).
|
Package releasehealth is the rule that judges a release: given the stats of the window before a promotion and the window after it, plus the issues, alerts and workload restarts the release opened, it produces findings and a verdict (PASS, FAIL or INCONCLUSIVE). |
|
Package schemadef projects a project's APPLIED database schema — db/migrations/*.up.sql executed in order against a REAL ephemeral postgres — into a typed model that code generation consumes.
|
Package schemadef projects a project's APPLIED database schema — db/migrations/*.up.sql executed in order against a REAL ephemeral postgres — into a typed model that code generation consumes. |
|
Package secretaccess derives OpenBao JWT auth mounts, roles and ACL policies from the set of secret names each Kubernetes namespace reads from the store.
|
Package secretaccess derives OpenBao JWT auth mounts, roles and ACL policies from the set of secret names each Kubernetes namespace reads from the store. |
|
Package secretgen mints the secret values a project declares as generated: random key material, passwords that satisfy a complexity policy, and key pairs and certificates.
|
Package secretgen mints the secret values a project declares as generated: random key material, passwords that satisfy a complexity policy, and key pairs and certificates. |
|
Package seeddata materializes deterministic, FK-coherent demo data directly into a development database — at RUNTIME, never as a persisted seed file in the user's project.
|
Package seeddata materializes deterministic, FK-coherent demo data directly into a development database — at RUNTIME, never as a persisted seed file in the user's project. |
|
Package serverkit runs an already-composed forge server: HTTP/Connect listener (HTTP/1.1, HTTP/2, h2c), healthz/readyz probes, the HTTP edge (CORS / security-headers / request-id), worker supervisor, operator manager, and graceful shutdown sequence.
|
Package serverkit runs an already-composed forge server: HTTP/Connect listener (HTTP/1.1, HTTP/2, h2c), healthz/readyz probes, the HTTP edge (CORS / security-headers / request-id), worker supervisor, operator manager, and graceful shutdown sequence. |
|
drainbudget
Package drainbudget is the one reading of a process's two drain knobs, PRE_STOP_DELAY and SHUTDOWN_TIMEOUT: how a value is written, what zero and a negative value mean, and the defaults.
|
Package drainbudget is the one reading of a process's two drain knobs, PRE_STOP_DELAY and SHUTDOWN_TIMEOUT: how a value is written, what zero and a negative value mean, and the defaults. |
|
Package servicecatalog defines Forge's browse-only, declared RPC/code inventory.
|
Package servicecatalog defines Forge's browse-only, declared RPC/code inventory. |
|
Package stsresize converges a StatefulSet whose declared volume size grew.
|
Package stsresize converges a StatefulSet whose declared volume size grew. |
|
Package svcerr provides the canonical service-error → Connect-error mapping used by every forge handler package.
|
Package svcerr provides the canonical service-error → Connect-error mapping used by every forge handler package. |
|
Package tdd is a generics-based table-driven test library for Forge projects.
|
Package tdd is a generics-based table-driven test library for Forge projects. |
|
Package testkit provides a small set of test helpers that every forge-generated bootstrap_testing.go reinvents: a discard logger, a real-postgres ORM context (bare, or with the project's embedded migrations applied), an httptest harness that wraps a Connect-mounted service, and a claims-bearing AuthedContext for handlers that read the current user.
|
Package testkit provides a small set of test helpers that every forge-generated bootstrap_testing.go reinvents: a discard logger, a real-postgres ORM context (bare, or with the project's embedded migrations applied), an httptest harness that wraps a Connect-mounted service, and a claims-bearing AuthedContext for handlers that read the current user. |
|
Package validate provides a Connect interceptor that enforces protovalidate (buf.validate) field rules at the RPC boundary.
|
Package validate provides a Connect interceptor that enforces protovalidate (buf.validate) field rules at the RPC boundary. |
Click to show internal directories.
Click to hide internal directories.