internal/

Package audit records redacted operation logs for security-sensitive backend actions.

Package auth implements the backend authentication session, JWT Cookie, CSRF, and current-user route handlers.

Package rbac implements tenant-scoped permission route guards and extension points for later object-level authorization.

Package tenant contains tenant scope primitives shared by request middleware and tenant-aware repositories.