lib/

Package authengine implements the AtomiCloud Go server-side auth contract: JWT/JWKS validation against a baked OIDC issuer, claims-to-principal mapping, per-resource access tokens over the resourceTree model, machine-to-machine client-credential flows, and the family nullable-userId ownership authorization pattern.

Package deferred implements the deferred deep-link login primitives: the server-side mint/redeem module and the store-carrier builders the web client hands to an app store.

Package logto is the Logto adapter behind the auth-engine provider seam.

Package onboard implements OnboardSync: the claims-first, per-backend onboarding gate and the pre-onboarding home-landscape selector.