Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

microvm

package

Go to main page

Versions in this module

v2

v2.0.2

Jul 30, 2026

v2.0.2-rc

Jul 30, 2026

v2.0.1

Jul 25, 2026

v2.0.1-rc

Jul 25, 2026

v2.0.0

Jul 25, 2026

Changes in this version

+ const AWSLambdaMicroVMProviderID

+ const ContractName

+ const ContractVersion

+ const ContractVersionM16

+ const ControllerAuthDefaultDeny

+ const DefaultSessionProviderID

+ const DefaultSessionRegistryTableName

+ const EnvEgressNetworkConnectorRefs

+ const EnvExecutionRoleArn

+ const EnvImageRef

+ const EnvIngressNetworkConnectorRefs

+ const EnvLogging

+ const EnvNetworkConnectorRefs

+ const EnvSessionRegistryTableName

+ const ErrorCodeControllerCommandFailed

+ const ErrorCodeControllerIncomplete

+ const ErrorCodeForbiddenField

+ const ErrorCodeInvalidContract

+ const ErrorCodeInvalidControllerRequest

+ const ErrorCodeInvalidLifecycleEvent

+ const ErrorCodeLifecycleBypass

+ const ErrorCodeLifecycleHookFailed

+ const ErrorCodeLifecycleIncomplete

+ const ErrorCodeOperationContractIncomplete

+ const ErrorCodeProviderOperationFailed

+ const ErrorCodeProviderOperationUnsupported

+ const ErrorCodeProviderRequestInvalid

+ const ErrorCodeProviderStateMappingIncomplete

+ const ErrorCodeRawSDKEscapeHatch

+ const ErrorCodeRealLifecycleIncomplete

+ const ErrorCodeRouteContractIncomplete

+ const ErrorCodeSessionRegistryIncomplete

+ const ErrorCodeTenantBindingViolation

+ const ErrorCodeTokenSafetyViolation

+ const ErrorCodeUnauthenticatedController

+ const KindControllerSession

+ const KindLifecycle

+ func IsTerminalState(state LifecycleState) bool

+ func RegisterControllerRoutes(app *apptheory.App, controller *Controller) (*apptheory.App, error)

+ func RegisterMicroVMControllerRoutes(app *apptheory.App, controller *Controller) (*apptheory.App, error)

+ func RequiredForbiddenOperationFields() []string

+ func SessionRegistryPartitionKey(tenantID, namespace string) string

+ func SessionRegistrySortKey(sessionID string) string

+ func SessionRegistryTableName() string

+ func ValidateControllerContract(contract ControllerContract) error

+ func ValidateEscapeHatches(escapeHatches EscapeHatches) error

+ func ValidateLifecycleContract(contract LifecycleContract) error

+ func ValidateOperationContract(contract OperationContract) error

+ func ValidateProviderInvokeInput(input ProviderInvokeInput) error

+ func ValidateProviderListInput(input ProviderListInput) error

+ func ValidateProviderRunInput(input ProviderRunInput) error

+ func ValidateProviderSession(session ProviderSession) error

+ func ValidateProviderSessionInput(operation Operation, input ProviderSessionInput) error

+ func ValidateProviderToken(token ProviderToken) error

+ func ValidateProviderTokenInput(operation Operation, input ProviderTokenInput) error

+ func ValidateRealLifecycleContract(contract LifecycleContract) error

+ func ValidateSessionRecord(record SessionRecord) error

+ func ValidateSessionRegistryContract(registry SessionRegistryContract) error

+ func ValidateSessionRegistryRecord(record SessionRegistryRecord) error

+ func ValidateSessionStatus(status SessionStatus) error

+ func ValidateSessionTokenMetadata(token SessionTokenMetadata, requestID string) error

+ type AWSLambdaMicroVMProvider struct

+ func NewAWSLambdaMicroVMProvider(ctx context.Context, opts ...AWSLambdaMicroVMProviderOption) (*AWSLambdaMicroVMProvider, error)

+ func (p *AWSLambdaMicroVMProvider) CreateAuthToken(ctx context.Context, input ProviderTokenInput) (ProviderToken, error)

+ func (p *AWSLambdaMicroVMProvider) CreateShellToken(ctx context.Context, input ProviderTokenInput) (ProviderToken, error)

+ func (p *AWSLambdaMicroVMProvider) Get(ctx context.Context, input ProviderSessionInput) (ProviderSession, error)

+ func (p *AWSLambdaMicroVMProvider) Invoke(ctx context.Context, input ProviderInvokeInput) (ProviderInvokeOutput, error)

+ func (p *AWSLambdaMicroVMProvider) List(ctx context.Context, input ProviderListInput) (ProviderListOutput, error)

+ func (p *AWSLambdaMicroVMProvider) Resume(ctx context.Context, input ProviderSessionInput) (ProviderSession, error)

+ func (p *AWSLambdaMicroVMProvider) Run(ctx context.Context, input ProviderRunInput) (ProviderSession, error)

+ func (p *AWSLambdaMicroVMProvider) Suspend(ctx context.Context, input ProviderSessionInput) (ProviderSession, error)

+ func (p *AWSLambdaMicroVMProvider) Terminate(ctx context.Context, input ProviderSessionInput) (ProviderSession, error)

+ type AWSLambdaMicroVMProviderOption func(*awsLambdaMicroVMProviderConfig)

+ func WithAWSLambdaMicroVMClock(clock Clock) AWSLambdaMicroVMProviderOption

+ func WithAWSLambdaMicroVMRegion(region string) AWSLambdaMicroVMProviderOption

+ type AuthContext struct

+ Entitlements []string

+ Metadata map[string]string

+ Namespace string

+ Subject string

+ TenantID string

+ type Client interface

+ Create func(context.Context, CreateSessionInput) (SessionRecord, error)

+ Session func(context.Context, SessionQueryInput) (SessionRecord, error)

+ Start func(context.Context, SessionCommandInput) (SessionRecord, error)

+ Status func(context.Context, SessionQueryInput) (SessionStatus, error)

+ Stop func(context.Context, SessionCommandInput) (SessionRecord, error)

+ type Clock interface

+ Now func() time.Time

+ type Command string

+ const CommandAuthToken

+ const CommandCreate

+ const CommandGet

+ const CommandInvoke

+ const CommandLegacyShellToken

+ const CommandList

+ const CommandResume

+ const CommandRun

+ const CommandSession

+ const CommandShellAuthToken

+ const CommandShellToken

+ const CommandStart

+ const CommandStatus

+ const CommandStop

+ const CommandSuspend

+ const CommandTerminate

+ type ContractKind string

+ type Controller struct

+ func NewController(client Client, opts ...ControllerOption) (*Controller, error)

+ func NewRealController(provider Provider, registry SessionRegistry, opts ...ControllerOption) (*Controller, error)

+ func (c *Controller) Handle(ctx context.Context, request ControllerRequest) (ControllerResponse, error)

+ func (c *Controller) Invoke(ctx context.Context, request ControllerInvokeRequest) (ProviderInvokeOutput, error)

+ type ControllerAuthContract struct

+ Default string

+ Required bool

+ type ControllerCommandContract struct

+ Method string

+ Name Command

+ Path string

+ RequestFields []string

+ ResponseFields []string

+ type ControllerContract struct

+ Auth ControllerAuthContract

+ Commands []ControllerCommandContract

+ Envelope ControllerEnvelopeContract

+ func DefaultControllerContract() ControllerContract

+ type ControllerDeploymentDefaults struct

+ EgressNetworkConnectorRefs []string

+ ImageRef string

+ IngressNetworkConnectorRefs []string

+ NetworkConnectorRef string

+ type ControllerEnvelopeContract struct

+ ForbiddenFields []string

+ RequiredFields []string

+ SafeErrorFields []string

+ type ControllerInvokeRequest struct

+ AuthContext AuthContext

+ Body []byte

+ Headers map[string][]string

+ Method string

+ Namespace string

+ Path string

+ Port int32

+ Query map[string][]string

+ RequestID string

+ SessionID string

+ TTLSeconds int32

+ TenantID string

+ type ControllerOption func(*Controller)

+ func WithControllerClock(clock Clock) ControllerOption

+ func WithControllerDeploymentDefaults(defaults ControllerDeploymentDefaults) ControllerOption

+ func WithControllerExecutionRoleArn(executionRoleArn string) ControllerOption

+ func WithControllerID(controllerID string) ControllerOption

+ func WithControllerIDGenerator(ids IDGenerator) ControllerOption

+ func WithControllerLogging(logging ProviderLogging) ControllerOption

+ func WithControllerProviderID(providerID string) ControllerOption

+ func WithControllerSessionTTL(ttl time.Duration) ControllerOption

+ type ControllerRequest struct

+ AllowedPortScope []ProviderPortScope

+ AuthContext AuthContext

+ Command Command

+ EgressNetworkConnectorRefs []string

+ IdlePolicy *ProviderIdlePolicy

+ ImageRef string

+ ImageVersion string

+ IngressNetworkConnectorRefs []string

+ MaxResults int32

+ MaximumDurationSeconds int32

+ Namespace string

+ NetworkConnectorRef string

+ RequestID string

+ SessionID string

+ SessionSpec SessionSpec

+ TTLSeconds int32

+ TenantID string

+ type ControllerResponse struct

+ Command Command

+ DesiredState LifecycleState

+ Endpoint string

+ Error *SafeError

+ ExpiresAt time.Time

+ LastAction Command

+ LastTransition time.Time

+ LifecycleState LifecycleState

+ MicroVMID string

+ Namespace string

+ ProviderMicroVMID string

+ ProviderState string

+ RecoveryCursor string

+ RegistryVersion int64

+ RequestID string

+ Scope []string

+ SessionID string

+ Sessions []ProviderSession

+ State LifecycleState

+ TenantID string

+ TokenID string

+ TokenType string

+ type CreateSessionInput struct

+ AuthSubject string

+ ControllerID string

+ ImageRef string

+ Namespace string

+ NetworkConnectorRef string

+ Now time.Time

+ RequestID string

+ SessionID string

+ SessionSpec SessionSpec

+ TenantID string

+ type EscapeHatches struct

+ RawAWSSDK bool

+ RawLifecycleHookBypass bool

+ type IDGenerator interface

+ NewID func() string

+ type LifecycleAdapter struct

+ func NewLifecycleAdapter(opts ...LifecycleOption) (*LifecycleAdapter, error)

+ func (a *LifecycleAdapter) Handle(ctx context.Context, event LifecycleEvent) (LifecycleResult, error)

+ type LifecycleContract struct

+ Hooks []LifecycleHookSpec

+ States []LifecycleState

+ TerminalStates []LifecycleState

+ Transitions []LifecycleTransition

+ func DefaultLifecycleContract() LifecycleContract

+ func DefaultRealLifecycleContract() LifecycleContract

+ type LifecycleEvent struct

+ Hook LifecycleHook

+ Metadata map[string]string

+ Namespace string

+ RequestID string

+ SessionID string

+ State LifecycleState

+ TenantID string

+ type LifecycleHandler func(context.Context, LifecycleEvent) error

+ type LifecycleHook string

+ const HookFailure

+ const HookPrepareImage

+ const HookReadiness

+ const HookReady

+ const HookResume

+ const HookRun

+ const HookStart

+ const HookStop

+ const HookSuspend

+ const HookTeardown

+ const HookTerminate

+ const HookValidate

+ type LifecycleHookSpec struct

+ FailureState LifecycleState

+ Name LifecycleHook

+ Phase string

+ State LifecycleState

+ SuccessState LifecycleState

+ type LifecycleOption func(*LifecycleAdapter)

+ func WithLifecycleContract(contract LifecycleContract) LifecycleOption

+ func WithLifecycleHandler(hook LifecycleHook, handler LifecycleHandler) LifecycleOption

+ type LifecycleResult struct

+ Error *SafeError

+ Hook LifecycleHook

+ Metadata map[string]string

+ Namespace string

+ PreviousState LifecycleState

+ RequestID string

+ SessionID string

+ State LifecycleState

+ TenantID string

+ type LifecycleState string

+ const StateFailed

+ const StateImagePrepared

+ const StateImagePreparing

+ const StateReadinessProbing

+ const StateReady

+ const StateRequested

+ const StateResuming

+ const StateRunning

+ const StateStarted

+ const StateStarting

+ const StateStopped

+ const StateStopping

+ const StateSuspended

+ const StateSuspending

+ const StateTearingDown

+ const StateTerminated

+ const StateTerminating

+ const StateValidated

+ const StateValidating

+ func MapProviderState(providerState string) (LifecycleState, bool, error)

+ type LifecycleTransition struct

+ From LifecycleState

+ Hook LifecycleHook

+ To LifecycleState

+ type MemorySessionRegistry struct

+ func NewMemorySessionRegistry() *MemorySessionRegistry

+ func (r *MemorySessionRegistry) Delete(_ context.Context, key SessionKey) error

+ func (r *MemorySessionRegistry) Get(_ context.Context, key SessionKey) (SessionRecord, error)

+ func (r *MemorySessionRegistry) List(_ context.Context, input SessionListInput) ([]SessionRecord, error)

+ func (r *MemorySessionRegistry) Put(_ context.Context, record SessionRecord) (SessionRecord, error)

+ type Operation string

+ const OperationAuthToken

+ const OperationGet

+ const OperationInvoke

+ const OperationLegacyShellToken

+ const OperationList

+ const OperationResume

+ const OperationRun

+ const OperationShellAuthToken

+ const OperationShellToken

+ const OperationSuspend

+ const OperationTerminate

+ func RequiredOperations() []Operation

+ type OperationContract struct

+ ForbiddenFields []string

+ Operations []Operation

+ ProviderStateMappings []ProviderStateMapping

+ Routes []OperationHTTPRouteContract

+ TenantBinding []TenantBindingRule

+ TokenIssuance []TokenIssuanceContract

+ func DefaultOperationContract() OperationContract

+ type OperationHTTPRouteContract struct

+ AuthRequired bool

+ DefaultAuth string

+ ForbiddenFields []string

+ Method string

+ Operation Operation

+ Path string

+ Recovery bool

+ RequestFields []string

+ ResponseFields []string

+ TenantBound bool

+ type Provider interface

+ CreateAuthToken func(context.Context, ProviderTokenInput) (ProviderToken, error)

+ CreateShellToken func(context.Context, ProviderTokenInput) (ProviderToken, error)

+ Get func(context.Context, ProviderSessionInput) (ProviderSession, error)

+ Invoke func(context.Context, ProviderInvokeInput) (ProviderInvokeOutput, error)

+ List func(context.Context, ProviderListInput) (ProviderListOutput, error)

+ Resume func(context.Context, ProviderSessionInput) (ProviderSession, error)

+ Run func(context.Context, ProviderRunInput) (ProviderSession, error)

+ Suspend func(context.Context, ProviderSessionInput) (ProviderSession, error)

+ Terminate func(context.Context, ProviderSessionInput) (ProviderSession, error)

+ type ProviderCloudWatchLogging struct

+ LogGroup string

+ LogStream string

+ type ProviderIdlePolicy struct

+ AutoResumeEnabled bool

+ MaxIdleDurationSeconds int32

+ SuspendedDurationSeconds int32

+ type ProviderInvokeInput struct

+ AuthContext AuthContext

+ Binding ProviderSessionBinding

+ Body []byte

+ Endpoint string

+ Headers map[string][]string

+ Method string

+ Namespace string

+ Path string

+ Port int32

+ Query map[string][]string

+ RequestID string

+ TTLSeconds int32

+ TenantID string

+ type ProviderInvokeOutput struct

+ Body []byte

+ Headers map[string][]string

+ IsBase64 bool

+ Status int

+ type ProviderListInput struct

+ AuthContext AuthContext

+ ImageRef string

+ ImageVersion string

+ KnownSessions []ProviderSessionBinding

+ MaxResults int32

+ Namespace string

+ RequestID string

+ TenantID string

+ type ProviderListOutput struct

+ RecoveryCursor string

+ Sessions []ProviderSession

+ type ProviderLogging struct

+ CloudWatch *ProviderCloudWatchLogging

+ Disabled bool

+ type ProviderPortScope struct

+ AllPorts bool

+ EndPort int32

+ Port int32

+ StartPort int32

+ type ProviderRunInput struct

+ AuthContext AuthContext

+ EgressNetworkConnectorRefs []string

+ ExecutionRoleArn string

+ IdlePolicy *ProviderIdlePolicy

+ ImageRef string

+ ImageVersion string

+ IngressNetworkConnectorRefs []string

+ Logging ProviderLogging

+ MaximumDurationSeconds int32

+ Namespace string

+ NetworkConnectorRef string

+ RequestID string

+ SessionID string

+ SessionSpec SessionSpec

+ TenantID string

+ type ProviderSession struct

+ Endpoint string

+ ImageRef string

+ ImageVersion string

+ Namespace string

+ ProviderMicroVMID string

+ ProviderState string

+ RegistryVersion int64

+ SessionID string

+ StartedAt time.Time

+ State LifecycleState

+ TenantID string

+ Terminal bool

+ TerminatedAt time.Time

+ func (s ProviderSession) Binding() ProviderSessionBinding

+ func (s ProviderSession) Key() SessionKey

+ type ProviderSessionBinding struct

+ Namespace string

+ ProviderMicroVMID string

+ RegistryVersion int64

+ SessionID string

+ TenantID string

+ func (b ProviderSessionBinding) Key() SessionKey

+ type ProviderSessionInput struct

+ AuthContext AuthContext

+ Binding ProviderSessionBinding

+ Namespace string

+ RequestID string

+ TenantID string

+ type ProviderStateMapping struct

+ ProviderState string

+ State LifecycleState

+ Terminal bool

+ func DefaultProviderStateMappings() []ProviderStateMapping

+ type ProviderToken struct

+ ExpiresAt time.Time

+ Namespace string

+ ProviderMicroVMID string

+ Scope []string

+ SessionID string

+ TenantID string

+ TokenID string

+ TokenType string

+ type ProviderTokenInput struct

+ AllowedPortScope []ProviderPortScope

+ AuthContext AuthContext

+ Binding ProviderSessionBinding

+ Namespace string

+ RequestID string

+ TTLSeconds int32

+ TenantID string

+ type ReconstructingSessionRegistry struct

+ func NewReconstructingSessionRegistry(registry SessionRegistry, hook SessionReconstructionHook, ...) (*ReconstructingSessionRegistry, error)

+ func (r *ReconstructingSessionRegistry) Delete(ctx context.Context, key SessionKey) error

+ func (r *ReconstructingSessionRegistry) Get(ctx context.Context, key SessionKey) (SessionRecord, error)

+ func (r *ReconstructingSessionRegistry) List(ctx context.Context, input SessionListInput) ([]SessionRecord, error)

+ func (r *ReconstructingSessionRegistry) Put(ctx context.Context, record SessionRecord) (SessionRecord, error)

+ type RegistryClient struct

+ func NewRegistryClient(registry SessionRegistry, opts ...RegistryClientOption) (*RegistryClient, error)

+ func (c *RegistryClient) Create(ctx context.Context, input CreateSessionInput) (SessionRecord, error)

+ func (c *RegistryClient) Session(ctx context.Context, input SessionQueryInput) (SessionRecord, error)

+ func (c *RegistryClient) Start(ctx context.Context, input SessionCommandInput) (SessionRecord, error)

+ func (c *RegistryClient) Status(ctx context.Context, input SessionQueryInput) (SessionStatus, error)

+ func (c *RegistryClient) Stop(ctx context.Context, input SessionCommandInput) (SessionRecord, error)

+ type RegistryClientOption func(*RegistryClient)

+ func WithRegistryClientTTL(ttl time.Duration) RegistryClientOption

+ type SafeError struct

+ Code string

+ Message string

+ RequestID string

+ func (e SafeError) Error() string

+ type SessionCommandInput struct

+ AuthSubject string

+ ControllerID string

+ DesiredState LifecycleState

+ Namespace string

+ Now time.Time

+ RequestID string

+ SessionID string

+ TenantID string

+ type SessionKey struct

+ Namespace string

+ SessionID string

+ TenantID string

+ type SessionListInput struct

+ AuthSubject string

+ Namespace string

+ RequestID string

+ TenantID string

+ type SessionQueryInput struct

+ AuthSubject string

+ Namespace string

+ RequestID string

+ SessionID string

+ TenantID string

+ type SessionReconstructionHook func(context.Context, SessionReconstructionRequest) (SessionRecord, error)

+ type SessionReconstructionOption func(*ReconstructingSessionRegistry)

+ func WithSessionReconstructionClock(clock Clock) SessionReconstructionOption

+ func WithSessionReconstructionStaleAfter(staleAfter time.Duration) SessionReconstructionOption

+ type SessionReconstructionRequest struct

+ AuthSubject string

+ Existing *SessionRecord

+ Namespace string

+ Now time.Time

+ RequestID string

+ SessionID string

+ TenantID string

+ type SessionRecord struct

+ AWSLifecycleState string

+ AuthSubject string

+ ControllerID string

+ CreatedAt time.Time

+ DesiredState LifecycleState

+ EgressNetworkConnectorRefs []string

+ Endpoint string

+ ExpiresAt time.Time

+ Generation int64

+ ImageRef string

+ ImageVersion string

+ IngressNetworkConnectorRefs []string

+ LastAction Command

+ LastCommandID string

+ LastObservedAt time.Time

+ Metadata map[string]string

+ MicroVMID string

+ Namespace string

+ NetworkConnectorRef string

+ ProviderID string

+ ProviderMicroVMID string

+ ProviderStartedAt time.Time

+ ProviderState string

+ ProviderTerminatedAt time.Time

+ ReasonMetadata map[string]string

+ SessionID string

+ State LifecycleState

+ StatusMetadata map[string]string

+ TenantID string

+ TokenMetadata []SessionTokenMetadata

+ UpdatedAt time.Time

+ func ReconstructSessionRecord(ctx context.Context, request SessionReconstructionRequest, ...) (SessionRecord, error)

+ func SessionRecordFromRegistryRecord(record SessionRegistryRecord) (SessionRecord, error)

+ func (r SessionRecord) Key() SessionKey

+ type SessionRegistry interface

+ Delete func(context.Context, SessionKey) error

+ Get func(context.Context, SessionKey) (SessionRecord, error)

+ Put func(context.Context, SessionRecord) (SessionRecord, error)

+ type SessionRegistryContract struct

+ ForbiddenFields []string

+ Pattern string

+ RequiredFields []string

+ StateValues []string

+ TenantBinding []string

+ func DefaultSessionRegistryContract() SessionRegistryContract

+ type SessionRegistryLister interface

+ List func(context.Context, SessionListInput) ([]SessionRecord, error)

+ type SessionRegistryRecord struct

+ AWSLifecycleState string

+ AuthSubject string

+ ControllerID string

+ CreatedAt time.Time

+ DesiredState LifecycleState

+ EgressNetworkConnectorRefs []string

+ Endpoint string

+ ExpiresAt time.Time

+ Generation int64

+ ImageRef string

+ ImageVersion string

+ IngressNetworkConnectorRefs []string

+ LastAction Command

+ LastCommandID string

+ LastObservedAt time.Time

+ Metadata map[string]string

+ MicroVMID string

+ Namespace string

+ NetworkConnectorRef string

+ PK string

+ ProviderID string

+ ProviderMicroVMID string

+ ProviderStartedAt time.Time

+ ProviderState string

+ ProviderTerminatedAt time.Time

+ ReasonMetadata map[string]string

+ SK string

+ SessionID string

+ State LifecycleState

+ StatusMetadata map[string]string

+ TTL int64

+ TenantID string

+ TokenMetadata []SessionTokenMetadata

+ UpdatedAt time.Time

+ Version int64

+ func SessionRecordToRegistryRecord(record SessionRecord) (SessionRegistryRecord, error)

+ func (SessionRegistryRecord) TableName() string

+ type SessionSpec struct

+ Metadata map[string]string

+ type SessionStatus struct

+ DesiredState LifecycleState

+ Endpoint string

+ LastAction Command

+ LastTransition time.Time

+ LifecycleState LifecycleState

+ MicroVMID string

+ Namespace string

+ RegistryVersion int64

+ SessionID string

+ State LifecycleState

+ TenantID string

+ func (s SessionStatus) Key() SessionKey

+ type SessionTokenMetadata struct

+ ExpiresAt time.Time

+ Scope []string

+ TokenID string

+ TokenType string

+ func SessionTokenMetadataFromProviderToken(token ProviderToken) (SessionTokenMetadata, error)

+ type TableTheorySessionRegistry struct

+ func NewTableTheorySessionRegistry(db tablecore.DB) (*TableTheorySessionRegistry, error)

+ func (r *TableTheorySessionRegistry) Delete(ctx context.Context, key SessionKey) error

+ func (r *TableTheorySessionRegistry) Get(ctx context.Context, key SessionKey) (SessionRecord, error)

+ func (r *TableTheorySessionRegistry) List(ctx context.Context, input SessionListInput) ([]SessionRecord, error)

+ func (r *TableTheorySessionRegistry) Put(ctx context.Context, record SessionRecord) (SessionRecord, error)

+ type TenantBindingRule struct

+ Allowed bool

+ Operation Operation

+ RecordNamespace string

+ RecordTenantID string

+ Recovery bool

+ RequestNamespace string

+ RequestTenantID string

+ type TokenIssuanceContract struct

+ ForbiddenFields []string

+ MaxTTLSeconds int

+ Operation Operation

+ ResultFields []string

+ Sanitized bool

+ SessionBound bool

+ TenantBound bool

v2.0.0-rc

Jul 25, 2026

Other modules containing this package

github.com/theory-cloud/apptheory

github.com/theory-cloud/apptheory/v3