builtin/

Package audit ships a sov plugin that records every dispatch event into a sliding-window in-memory ring AND emits structured JSON to a writer (typically os.Stdout or a log file).

Package auth ships a first-party sov plugin that translates verified Claims into legacy-shape headers ("X-Forwarded-User" / "X-Forwarded-Scopes" / "X-Tenant-Id") on every outbound proxy hop.

Package batch ships the cascading-batch endpoint at /rpc/_batch.

Package cors adds CORS headers to every response and handles the browser's OPTIONS preflight short-circuit.

Package explorer mounts the embedded HTML browser at /rpc/_explorer/.

Package hmacseal seals injected X-Sov-* claim headers with HMAC-SHA256 so downstream services can detect forged claim bundles.

Package introspect is the opt-in plugin that exposes the public /rpc/_introspect endpoint — the aggregated API catalog (every service, method, and type the gateway can route).

Package manifest emits the PEMM manifest of a running gateway — a single JSON document describing services, plugins, role bindings, federation map, and registered remotes.

Package meshsecret ships the HMAC gate for /rpc/_register.

Package metrics ships a Prometheus-text-format metrics plugin for sov.

Package preempt permits a federated _register to take over a service name already claimed by a different address.

Package registertoken ships the simple shared-token gate for /rpc/_register.

Package registry promotes the gateway to central-registry shape — owns POST /rpc/_register and the public top-level /health URL.

Package requestid stamps a stable X-Sov-Request-Id on every request as it enters the gateway and propagates it through every hop the request takes: outbound proxy calls, in-process local dispatch, and downstream gateways (via the same header).

Package roletakeover relaxes the default cross-name role-binding guard.

Package static mounts a static-file tree (a built SPA, a docs site, a bundle of assets) on the gateway via a RouteHandler.

Package upstreams limits which upstream gateway URLs a pod trusts X-Sov-* claim headers from.