pkg/

Package accesstoken is the security primitive behind Reliant Labs' ONE machine credential, `rlat_`: its wire format, generation, hashing, constant-time comparison, the closed scope vocabulary, the rule that a token may never grant authority it does not hold, and the Principal a presented token resolves to.

Package alerting is a SQL alert-rule evaluator in the Prometheus shape.

Package apikey provides the security-sensitive primitives for issuing and verifying API keys: cryptographically-random key generation, hashing, and constant-time verification.

Package appkit holds the worker/operator supervised-component contracts that the generated internal/app composition layer re-uses.

Package audit provides the durable write-side of forge's audit trail: an Entry record, a Store persistence interface, and a Postgres-backed DBAuditStore that writes and queries the audit_log table.

Package auth provides JWT and API-key authentication for forge-generated Connect RPC services.

Package authn provides the authentication interceptor mechanism that forge-generated services wire from their thin, user-owned pkg/middleware file.

Package cloudcred is the PUBLIC seam between forge and a HOST APPLICATION that already holds the user's session — the credential-helper protocol.

Package cmdkit is the paved path for forge's non-server binary shapes: CLI subcommands, one-shot admin tools, and standalone long-running binaries that ship in the same image as the Connect server but are not themselves Connect services.

Package config resolves a project's typed configuration from proto field annotations at runtime, with no per-field generated loader.

Package contractkit provides runtime helpers used by the per-package mock_gen.go file forge generates from contract.go.

Package controller provides opinionated runtime helpers for controller-runtime reconcilers.

Package credentials is the ONE on-disk store of control-plane access tokens, shared by every CLI that talks to a Reliant Labs control plane — `forge login` and `reliant auth login` both write it, and every command of both reads it.

Package crud provides runtime helpers used by the per-service handlers_crud_gen.go file forge generates from a service's CRUD RPCs.

Package crypto provides at-rest AES-256-GCM encryption under a VERSIONED KEYRING, so a key can be rotated without making every already-sealed value permanently unreadable.

Package deploy is forge's deploy-tier library: the pure functions that operate on the tier specs in pkg/deploy/v1alpha1.

Package deploystate is the pluggable backend for forge's reconcile state: what forge last shipped to a target, what it last OBSERVED running there, and the per-environment policy that says whether forge is allowed to do anything about the difference.

Package devidp provisions a project's dev identity provider (Zitadel): registering the project and its single-page application, and publishing the values Zitadel GENERATES (client_id, project id) so the rest of the stack can reference them by name instead of by value.

Package diagnostics surfaces unwired forge scaffolds at runtime.

Package kcleval reads values out of a forge project's KCL from Go, so a test can assert against what the project DECLARES instead of restating it.

Package lease is a named, process-level singleton lock over Postgres advisory locks: at most one replica at a time runs a given job, every other replica waits as a hot standby and takes over when the holder exits, crashes or loses its database connection.

Package lifecyclekit owns the uniform worker/operator supervised-component machinery that the generated internal/app/lifecycle_gen.go delegates to.

Package middleware provides the commodity HTTP middlewares and Connect interceptors that every forge-generated service ships with.

Package migratekit is the invariant half of a forge project's `db migrate` command tree: opening a migrator over an embedded migration set, closing it, and reporting what the schema is doing.

Package money provides a small, allocation-free value type for representing monetary amounts as an integer number of minor units ("cents") plus a currency, together with overflow-checked arithmetic and locale-neutral formatting.

Package mountkit mounts a forge Connect service onto an http.ServeMux.

Package oauth2 implements the client half of the OAuth 2.0 authorization-code flow with PKCE (RFC 7636) using only the standard library.

File: client.go — the OUTBOUND Connect client stack.

Package orm is forge's typed data-access layer: a postgres-pinned query builder over uptrace/bun, plus the schema-truth machinery that projects entity types out of the applied migrations.

Package pgtest provides a REAL ephemeral postgres for generate-time schema introspection and for hermetic tests that need a database.

Package profilequery reads continuous profiles back out of ClickHouse and writes them in formats other tools open.

Package release is forge's release ledger vocabulary: what a RELEASE is (an immutable, content-addressed set of artifacts under a version label), what a PROMOTION is (one append-only event binding an environment to a release), and the invariants both must hold no matter where they are stored.

Package schemadef projects a project's APPLIED database schema — db/migrations/*.up.sql executed in order against a REAL ephemeral postgres — into a typed model that code generation consumes.

Package seeddata materializes deterministic, FK-coherent demo data directly into a development database — at RUNTIME, never as a persisted seed file in the user's project.

Package serverkit runs an already-composed forge server: HTTP/Connect listener, healthz/readyz probes, the HTTP edge (CORS / security-headers / request-id / h2c), worker supervisor, operator manager, and graceful shutdown sequence.

Package svcerr provides the canonical service-error → Connect-error mapping used by every forge handler package.

Package tdd is a generics-based table-driven test library for Forge projects.

Package testkit provides a small set of test helpers that every forge-generated bootstrap_testing.go reinvents: a discard logger, a real-postgres ORM context (bare, or with the project's embedded migrations applied), an httptest harness that wraps a Connect-mounted service, and a claims-bearing AuthedContext for handlers that read the current user.

Package validate provides a Connect interceptor that enforces protovalidate (buf.validate) field rules at the RPC boundary.