internal/

Package authz defines shared namespace access semantics for the gateway.

Package config loads environment-backed gateway and LDAP configuration.

Package elastic contains the gateway's Elasticsearch and Kibana clients.

Package ingest contains ingest-route parsing, document validation, and short-lived LDAP auth caching for the ingest endpoint.

Package ldap authenticates gateway users and maps LDAP groups to namespaces.

Package server wires the HTTP routes, login flow, ingest API, and proxy.