internal/

Package api provides shared HTTP API handlers (auth, health) and standardized error responses.

Package invites provides session-gated API handlers for inbox invites (list, import, accept, decline).

Package shares provides session-gated API handlers for inbox shares (list, detail, accept, decline, verify-access).

Package invites provides the session-gated handler for POST /api/invites/outgoing (create invite tokens).

Package shares provides the session-gated handler for POST /api/shares/outgoing (create shares to remote receivers).

Package forwardshare implements the validator's active forward-share dispatch leg: a policy guard on the generic outgoing-share handler that refuses every non-designated share while a run is active, plus the outbox-backed designated dispatch with a single-winner send permit, idempotent replay, and capability presence healing.

Package identitybind canonicalizes OCM invite identities for the federation-validator active path.

Package reverseinvite implements the validator's active reverse-invite leg: atomic outgoing invite minting, outgoing-acceptance observation, reverse solicit, paste import, and acceptance orchestration against the live OCM invite domain operations.

Package reverseshare implements the validator's active reverse-share leg: the event-driven wait opened after the capability exercise, the inbound share observer that passes the run on a timely or late reverse share, and the durable terminal-stats retry behind both.

Package runner drives the validator active-session kick and heal loop.

Package catalog is the validator route and capability SSOT.

Package core holds federation validator shared state wired at startup.

Package httpsigprobe runs a signed two-request differential against a probe-only dummy URL.

Package jwksprobe fetches and grades a peer JWKS document without store I/O.

Package identity provides user management, authentication, and session handling.

Package sessiongate provides session authentication middleware for HTTP servers.

Package access provides remote file access for incoming OCM shares.

Package address provides OCM address parsing and formatting.

Package directoryservice fetches and verifies OCM directory service listings.

Package resolve derives OCM discovery provider configuration from service-local TOML plus narrow ResolveInputs supplied by wiring.

Package signature verifies inbound OCM HTTP request signatures.

Package invites provides shared types for OCM invitations.

Package incoming provides incoming invite models, repository, and the invite-accepted domain port used when we accept a received invite.

Package outgoing provides outgoing invite models and repository.

Package accepted handles POST /ocm/invite-accepted, which remote recipients call to accept one of OUR outgoing invites.

Package notifications provides shared OCM notification types and errors.

Package outgoing posts OCM share lifecycle notifications to remote peers.

Package outbound centralizes the shared OCM outbound POST flow: resolve the peer origin, discover the peer endpoint, sign when configured, and send the request.

Package peer provides peer resolvers for OCM signature middleware.

Package peerorigin resolves peer origin (scheme and base URL) and validates absolute-URI peer authorities for OCM outbound and inbound peer-boundary callers.

Package peertrust manages trust groups and peer allow/deny policy.

Package policy resolves OCM code-flow facts for peers.

Package reason owns the canonical internal peer/federation failure taxonomy and explicit translation tables for every outward-facing wire surface.

Package shares provides shared share lifecycle enums used by the incoming and outgoing share packages.

Package incoming provides incoming share models, repository, and the POST /ocm/shares handler.

Package outgoing provides outgoing share models and repository.

Package spec defines OCM wire-format types (discovery, shares, invites, errors).

Package wire holds leaf OCM wire-protocol string constants that the parent spec package re-exports.

Package token implements OCM token exchange (OAuth-style).

Package ocmaux provides /ocm-aux HTTP handlers (federations, discover).

Package ui provides the web UI (login, inbox, outgoing, wayf, accept-invite).

Package webdav provides WebDAV file serving with OCM Bearer auth and read-only behavior.

Package cfg provides config decoding for services (mapstructure, Setter for defaults).

Package httpwrap provides HTTP handler wrappers for service layer use.

Package ratelimit provides a rate limiting interceptor using the cache subsystem.

Package appctx provides context-based utilities for cross-cutting concerns.

Package cache provides caching with TTL support for discovery and rate limiting.

Package bounded provides a cardinality-bounded LRU container.

Package loader registers cache drivers via blank imports.

Package memory provides an in-memory cache implementation with TTL support.

Package redis provides a Redis/Valkey cache driver using valkey-go.

Package config provides configuration loading and validation.

Package crypto provides cryptographic primitives for OCM signatures.

Package jwks publishes and resolves public keys in RFC 7517 format.

Package keyid provides canonical parsing and comparison normalization for OCM keyId URIs.

Package sigalg resolves and validates RFC 9421 HTTP signature algorithms.

Package sigparams parses RFC 9421 Signature and Signature-Input headers using Structured Field Values (RFC 8941) for the subset required by OCM.

Package hostport provides scheme-aware authority normalization for host[:port] comparison.

Package client provides a safe outbound HTTP client with SSRF protections.

Package middleware provides always-on transport middleware for HTTP servers.

Package realip provides trusted proxy utilities for extracting real client IP.

Package tls provides TLS configuration and certificate management.

Package instanceid derives instance public identity from config.PublicOrigin.

Package localidentity is the single source of truth for this instance's published public identity: origin, provider domain, base path, and endpoint base.

Package logutil provides nil-safe logger helpers.

Package repos provides an app-facing persistence seam that constructs the four OCM repository interfaces from a PersistenceConfig.

Package statistics provides shared redaction and statistics hashing helpers.

Package store provides persistence primitives and driver abstractions.

Package json implements a JSON file-based persistence driver.

Package memcore is the private shared in-memory persistence engine used by the memory driver.

Package memory implements an in-memory persistence driver.

Package mirror implements a SQLite + JSON mirror persistence driver.

Package sqlite implements a SQLite-based persistence driver using GORM.

Package sqlitecore is the private shared SQLite/GORM persistence engine used by the sqlite and mirror drivers.

Package validatorcore holds federation validator session and statistics persistence models and store methods.

Package api provides the /api/* endpoints.

Package ocmaux provides OCM auxiliary endpoints (WAYF helpers).

Package ui provides the /ui/* endpoints as a registry service.

Package webdav provides the /webdav/* endpoints as a registry service.

Package crypto provides shared test helpers for platform crypto tests.

Package directoryservice provides test helpers for Directory Service JWS fixtures.

Package http provides test helper factories for outbound HTTP client configs and clients.

Package invite provides helpers for OCM invite integration tests.

Package localidentity provides shared test fixtures for local public identity.

Package configfixture provides reusable TOML string fragments for config loader tests.

Package protocol provides TOML config fragments for strict two-server protocol integration tests.

Package repos provides shared persistence backend lists and test open helpers.

Package routing provides shared route-policy test helpers and ensures service route spec registrars are linked for aggregation tests.

Package session provides HTTP helpers for authenticated integration tests.

Package store provides shared test helpers for store driver tests.

Package validatorpeer is an in-process mock OCM peer for validator tests.

Package wiring provides shared bootstrap/wiring test helpers and neutral wiring fixtures for concern-split parity tests.