limes

Oct 30, 2026

Changes in this version

type CountRecordsRequest

+ ClientID string

+ OnBehalfOf string

+ RunID uuid.UUID

+ Session string

+ Subject string

type ListRecordsRequest

+ ClientID string

+ OnBehalfOf string

+ RunID uuid.UUID

+ Session string

type RevokeMatchingRequest

+ RunID uuid.UUID

Oct 30, 2026

Changes in this version

type RevokeMatchingRequest

+ AllTenants bool

type RevokeMatchingResult

+ Tenants []uuid.UUID

Oct 29, 2026

Changes in this version

+ var ErrInternal = errs.ErrInternal

+ var ErrInvalidConfig = errs.ErrInvalidConfig

type Code

+ const CodeInternal

+ const CodeInvalidConfig

type Problem

+ func ProblemFor(err error) Problem

Oct 29, 2026

Changes in this version

+ const CodeAudienceMismatch

+ const CodeAuthSchemeMismatch

+ const CodeBiscuitAttenuation

+ const CodeBudgetExceeded

+ const CodeExpired

+ const CodeIdempotencyKeyRequired

+ const CodeInvalidToken

+ const CodeKeysUnavailable

+ const CodeMalformedAuthorization

+ const CodeNoCredentials

+ const CodeNonceRequired

+ const CodeNotYetValid

+ const CodeOpNotAllowed

+ const CodeProofInvalid

+ const CodeProofReplayed

+ const CodeProofRequired

+ const CodeRequestLimitExceeded

+ const CodeResourceNotAllowed

+ const CodeRevoked

+ const CodeSourceIPNotAllowed

+ const CodeTaintedReadNotAllowed

+ const CodeTenantBudgetExceeded

+ func ProblemTypeURI(kind string) string

+ type Code string

+ const CodeAlreadyExists

+ const CodeCaveatViolation

+ const CodeConflict

+ const CodeCopyCountersNotMetered

+ const CodeCursorMismatch

+ const CodeCursorRepeated

+ const CodeDelegationTooDeep

+ const CodeDelegationTooWide

+ const CodeEffectConflict

+ const CodeInvalidAmount

+ const CodeInvalidCaveats

+ const CodeInvalidRequest

+ const CodeNoRevocationLineage

+ const CodeNotFound

+ const CodeProofOfPossession

+ const CodeProofUnsupported

+ const CodeScopeMismatch

+ const CodeTenantDeleted

+ const CodeTenantErased

+ const CodeUnauthenticated

+ const CodeUnitCodeMismatch

+ const CodeUnknownKID

+ const CodeUnknownTenant

+ func CodeOf(err error) (Code, bool)

+ func Codes() []Code

type Problem

+ Code Code

+ func ProblemOf(err error) (Problem, bool)

Oct 29, 2026

Changes in this version

+ type BulkRevoker interface

+ RevokeMatching func(ctx context.Context, req RevokeMatchingRequest) (RevokeMatchingResult, error)

type InsertRequest

+ Session string

type IssueRequest

+ Session string

type Record

+ Session string

+ type RevokeMatchingRequest struct

+ Actor string

+ ClientID string

+ Limit int

+ Note string

+ OnBehalfOf string

+ Session string

+ Subject string

+ TenantID uuid.UUID

+ func (r RevokeMatchingRequest) BatchLimit() int

+ func (r RevokeMatchingRequest) Validate() error

+ type RevokeMatchingResult struct

+ More bool

+ Revoked int64

Oct 29, 2026

Changes in this version

+ func HasLimesKeyID(token string) bool

Oct 29, 2026

Changes in this version

+ type ExchangeKey struct

+ Issuer string

+ TenantID uuid.UUID

+ TokenID string

+ func (k ExchangeKey) Validate() error

+ type ExchangeStore interface

+ ClaimExchange func(ctx context.Context, key ExchangeKey, id uuid.UUID) (recorded uuid.UUID, claimed bool, err error)

+ ExchangedFor func(ctx context.Context, key ExchangeKey) (uuid.UUID, error)

type Issuer

+ func (i *Issuer) Reissue(ctx context.Context, id uuid.UUID) (IssueResult, error)

Oct 29, 2026

Changes in this version

type Attenuation

+ func (a Attenuation) Validate() error

type BiscuitConfig

+ Form TokenForm

type IssuerConfig

+ Biscuit TokenForm

+ type TokenForm interface

+ Open func(token string) (sealed string, unseal func(root ed25519.PublicKey) (Unsealed, error), ...)

+ Seal func(ctx context.Context, ...) (string, error)

+ type Unsealed struct

+ Blocks []Attenuation

+ RevocationIDs [][]byte

Oct 28, 2026

Changes in this version

type AuthScheme

+ func ParseAuthorizationValues(values []string) (AuthScheme, string, error)

type VerifierConfig

+ Logger *slog.Logger

Oct 28, 2026

Changes in this version

type Introspection

+ Copies []CopyCeiling

Oct 27, 2026

Changes in this version

type Capability

+ PriorActors []string

type IssueRequest

+ OnBehalfOf *Principal

Oct 27, 2026

Changes in this version

+ func MarshalCaveats(c Caveats) ([]byte, error)

Oct 27, 2026

Changes in this version

type Introspection

+ Capability Capability

+ FromBiscuit bool

type Verifier

+ func (v *Verifier) Introspect(ctx context.Context, token string) (Introspection, error)

Oct 27, 2026

Changes in this version

+ func MatchResourceName(prefix, uri string) bool

type Capability

+ ClientID string

type Caveats

+ ResourceNamePrefixes []string

type DelegateRequest

+ ClientID string

type IssueRequest

+ ClientID string

type TokenType

+ const TokenTypeV7

Oct 27, 2026

Changes in this version

type SignerConfig

+ Algorithm SigningAlgorithm

+ type SigningAlgorithm string

+ const SigningAlgorithmEd25519

+ const SigningAlgorithmEdDSA

Oct 25, 2026

Changes in this version

+ const MaxRevocationCacheSyncedTTL

Oct 24, 2026

Changes in this version

type RevocationCache

+ func (c *RevocationCache) NewSignal() *RevocationSignal

+ type RevocationSignal struct

+ func (s *RevocationSignal) Close()

+ func (s *RevocationSignal) Listening()

+ func (s *RevocationSignal) NotListening()

+ func (s *RevocationSignal) Revoked(ids ...uuid.UUID)

+ func (s *RevocationSignal) RevokedAll()

+ type RevocationSignalTarget interface

+ NewSignal func() *RevocationSignal

Oct 24, 2026

Changes in this version

type RevocationCacheStats

+ NarrowClears uint64

type RevokeResult

+ PriorDisposition RecordDisposition

Oct 24, 2026

Changes in this version

+ type RevokeBiscuitResult struct

+ AlreadyRevoked bool

+ Revocation BiscuitRevocation

Oct 24, 2026

Changes in this version

+ type RevocationAnswer struct

+ Ancestors []uuid.UUID

+ Revoked bool

Oct 24, 2026

Changes in this version

type RevocationCacheConfig

+ Signals int

Oct 22, 2026

Changes in this version

type RevocationCache

+ func (c *RevocationCache) Signal(ids ...uuid.UUID)

type RevocationCacheStats

+ LastSyncLoss time.Time

+ Signals uint64

+ SignalsWhole uint64

+ SyncsLost uint64

Oct 22, 2026

Changes in this version

+ var ErrNoRevocationLineage = errors.New("limes: the revocation upstream names no lineage")

type RevocationCache

+ func (c *RevocationCache) Listening()

+ func (c *RevocationCache) NotListening()

type RevocationCacheConfig

+ RequireLineage bool

+ SyncedTTL time.Duration

type RevocationCacheStats

+ ClearsWithoutLineage uint64

+ Lineage bool

+ Synced bool

+ Syncs uint64

type RevokeResult

+ Before RecordDisposition

Oct 22, 2026

Changes in this version

+ type CapabilityRevocation struct

+ CapabilityID uuid.UUID

+ Revocation Revocation

type RecordListing

+ StoppedBy *CapabilityRevocation

type RevocationCache

+ func (c *RevocationCache) ClearRevoked(ids ...uuid.UUID)

type RevocationCacheStats

+ ClearsRevoked uint64

+ type RevocationLineageLookup interface

+ RevocationLineage func(ctx context.Context, id uuid.UUID) (revoked bool, ancestors []uuid.UUID, err error)

Oct 22, 2026

Changes in this version

+ var ErrCursorMismatch error = &familyError

+ type RecordReporter interface

+ type RevokeResult struct

+ AlreadyRevoked bool

+ Revocation Revocation

Oct 21, 2026

Changes in this version

+ type RecordListingReader interface

+ GetRecordListing func(ctx context.Context, id uuid.UUID) (RecordListing, error)

Oct 21, 2026

Changes in this version

+ type ListOrder uint8

+ const ListOrderAscending

+ const ListOrderDescending

+ func (o ListOrder) String() string

+ func (o ListOrder) Validate() error

+ type ListRecordsRequest struct

+ Cursor string

+ Dispositions []RecordDisposition

+ Limit int

+ Order ListOrder

+ PrincipalType PrincipalType

+ Subject string

+ SubjectPrefix string

+ TenantID uuid.UUID

+ func (r ListRecordsRequest) Admits(d RecordDisposition) bool

+ func (r ListRecordsRequest) Validate() error

+ type RecordDisposition string

+ const RecordDispositionActive

+ const RecordDispositionExpired

+ const RecordDispositionRevoked

+ const RecordDispositionUnspecified

+ func (d RecordDisposition) Validate() error

+ type RecordLister interface

+ ListRecords func(ctx context.Context, req ListRecordsRequest) (Page[RecordListing], error)

+ type RecordListing struct

+ Disposition RecordDisposition

+ Record Record

Oct 20, 2026

Changes in this version

type RevocationCache

+ func (c *RevocationCache) Stats() RevocationCacheStats

+ type RevocationCacheCounts struct

+ Entries int

+ Evictions uint64

+ Hits uint64

+ Lookups uint64

+ Misses uint64

+ type RevocationCacheStats struct

+ Biscuits RevocationCacheCounts

+ Capabilities RevocationCacheCounts

+ Clears uint64

Oct 20, 2026

Changes in this version

type RevocationCache

+ func (c *RevocationCache) IsBiscuitRevoked(ctx context.Context, revocationIDs [][]byte) (bool, error)

type RevocationCacheConfig

+ Biscuits BiscuitRevocationLookup

+ Capabilities RevocationLookup

Oct 19, 2026

Changes in this version

type CopyQuota

+ func (q CopyQuota) Admits(n int64) bool

Oct 19, 2026

Changes in this version

+ type SealedKey struct

+ func SealKey(key crypto.Signer) SealedKey

+ func (SealedKey) Format(f fmt.State, _ rune)

+ func (SealedKey) GoString() string

+ func (SealedKey) MarshalText() ([]byte, error)

+ func (SealedKey) String() string

+ func (k SealedKey) IsZero() bool

+ func (k SealedKey) Public() crypto.PublicKey

+ func (k SealedKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)

Oct 19, 2026

Changes in this version

type Caveats

+ Copies CopyQuota

+ type CopyQuota struct

+ Max int64

+ Unlimited bool

+ func (q CopyQuota) Bounded(bound int64) int64

+ func (q CopyQuota) String() string

+ func (q CopyQuota) Validate() error

+ func (q CopyQuota) Within(outer CopyQuota) bool

type MeterSubject

+ func (s MeterSubject) CopyQuota() CopyQuota

type TokenType

+ const TokenTypeV6

Oct 18, 2026

Changes in this version

+ func AllPages[T any](ctx context.Context, cursor string, ...) iter.Seq2[T, error]

type MeterSubject

+ func (s MeterSubject) Validate() error

+ func (s MeterSubject) ValidateAmounts() error

Oct 18, 2026

Changes in this version

+ const DefaultMaxCopiesPerCapability

+ var ErrCopyLimitExceeded error = &familyError

Oct 18, 2026

Changes in this version

+ var ErrSettleConflict error = &familyError

Oct 18, 2026

Changes in this version

+ var ErrTenantErased error = &familyError

Oct 18, 2026

Changes in this version

type BiscuitCopy

+ func (c BiscuitCopy) Validate() error

type CopyUsageRequest

+ CapabilityID uuid.UUID

Oct 18, 2026

Changes in this version

+ func HousekeepingLimit(limit int) int

type ChargeByRefRequest

+ func (r ChargeByRefRequest) Validate() error

type DeleteUsageRequest

+ func (r DeleteUsageRequest) Validate() error

type PurgeOrphansRequest

+ func (r PurgeOrphansRequest) Validate() error

type ReleaseExpiredRequest

+ func (r ReleaseExpiredRequest) Validate() error

type RevokeRequest

+ func (r RevokeRequest) Validate() error

Oct 18, 2026

Changes in this version

+ const BasisPointsPerWhole

type ListTenantBudgetsRequest

+ ThresholdBasisPoints int

Oct 18, 2026

Changes in this version

+ type BiscuitConfig struct

+ MeterCopies bool

+ Revocations BiscuitRevocationLookup

type VerifierConfig

+ Biscuit *BiscuitConfig

Oct 18, 2026

Changes in this version

+ type BiscuitRevocationCache struct

+ func NewBiscuitRevocationCache(cfg BiscuitRevocationCacheConfig) (*BiscuitRevocationCache, error)

+ func (c *BiscuitRevocationCache) Clear()

+ func (c *BiscuitRevocationCache) IsBiscuitRevoked(ctx context.Context, revocationIDs [][]byte) (bool, error)

+ func (c *BiscuitRevocationCache) Sweep() int

+ type RevocationCache struct

+ func NewRevocationCache(cfg RevocationCacheConfig) (*RevocationCache, error)

+ func (c *RevocationCache) Clear()

+ func (c *RevocationCache) IsRevoked(ctx context.Context, id uuid.UUID) (bool, error)

+ func (c *RevocationCache) Sweep() int

Oct 18, 2026

Changes in this version

type Problem

+ Reason Reason

Oct 18, 2026

Changes in this version

type VerifiedCapability

+ func (v VerifiedCapability) Copies() []CopyCeiling

Oct 18, 2026

Changes in this version

+ var ErrConflict = errors.New("limes: conflict")

Oct 18, 2026

Changes in this version

type AgentPrincipal

+ ParentRunID uuid.UUID

type SignerConfig

+ TokenType TokenType

type TokenType

+ const TokenTypeV5

Oct 18, 2026

Changes in this version

type SignerConfig

+ func (cfg SignerConfig) LogValue() slog.Value

+ func (cfg SignerConfig) MarshalJSON() ([]byte, error)

type SigningKey

+ func (k SigningKey) LogValue() slog.Value

+ func (k SigningKey) MarshalJSON() ([]byte, error)

Oct 17, 2026

Changes in this version

type BudgetCeiling

+ UnitCode string

Oct 17, 2026

Changes in this version

type OverrunPolicy

+ const OverrunPolicyRecord

+ const OverrunPolicyReject

+ const OverrunPolicyUnspecified

type PrincipalType

+ const PrincipalTypeAgent

+ const PrincipalTypeService

+ const PrincipalTypeUnspecified

+ const PrincipalTypeUser

type TenantBudgetFilter

+ const TenantBudgetFilterAll

+ const TenantBudgetFilterAtOrPast

+ const TenantBudgetFilterUnlimited

+ const TenantBudgetFilterUnspecified

Oct 17, 2026

Changes in this version

type ChargeBucket

+ const ChargeBucketUnspecified

Oct 17, 2026

Changes in this version

type BumpRequest

+ func (r BumpRequest) Validate() error

type ChargeRequest

+ func (r ChargeRequest) Validate() error

type ReleaseRequest

+ func (r ReleaseRequest) Validate() error

type ReserveRequest

+ func (r ReserveRequest) Validate() error

type SettleRequest

+ func (r SettleRequest) Validate() error

Oct 17, 2026

Changes in this version

+ type Charged struct

+ Receipt ChargeReceipt

+ Tx TX

Oct 15, 2026

Changes in this version

type ReleaseRequest

+ Subject MeterSubject

type Signer

+ func (s Signer) Format(f fmt.State, verb rune)

type SignerConfig

+ func (cfg SignerConfig) Format(f fmt.State, verb rune)

type SigningKey

+ func (k SigningKey) Format(f fmt.State, verb rune)

Oct 14, 2026

Changes in this version

+ type CountRecordsRequest struct

+ AllTenants bool

+ ByPrincipalType bool

+ ByTenant bool

+ Cursor string

+ ExpiringWithin time.Duration

+ Limit int

+ TenantID uuid.UUID

+ func (r CountRecordsRequest) Validate() error

+ type RecordCensus interface

+ CountRecords func(ctx context.Context, req CountRecordsRequest) (Page[RecordCount], error)

+ type RecordCount struct

+ Active int64

+ Delegated int64

+ Expired int64

+ ExpiringSoon int64

+ PrincipalType PrincipalType

+ Revoked int64

+ TenantID uuid.UUID

+ Total int64

Oct 14, 2026

Changes in this version

type ChargeBucket

+ const ChargeBucketWeek

Oct 14, 2026

Changes in this version

+ type ChargeBucket uint8

+ const ChargeBucketDay

+ const ChargeBucketHour

+ const ChargeBucketMonth

+ const ChargeBucketNone

+ func (b ChargeBucket) Start(t time.Time) time.Time

+ func (b ChargeBucket) String() string

+ func (b ChargeBucket) Validate() error

+ type ChargeSum struct

+ Actor string

+ BucketStart time.Time

+ CapabilityID uuid.UUID

+ Charged Nanos

+ Charges int64

+ Op Op

+ Refunded Nanos

+ UnitCode string

+ type LedgerReader interface

+ SumCharges func(ctx context.Context, req SumChargesRequest) (Page[ChargeSum], error)

+ type SumChargesRequest struct

+ Bucket ChargeBucket

+ ByActor bool

+ ByCapability bool

+ ByOp bool

+ Cursor string

+ From time.Time

+ Limit int

+ TenantID uuid.UUID

+ To time.Time

+ func (r SumChargesRequest) Validate() error

Oct 14, 2026

Changes in this version

+ type EraseTenantRequest struct

+ Actor string

+ Note string

+ TenantID uuid.UUID

+ func (r EraseTenantRequest) Validate() error

+ type EraseTenantResult struct

+ Kept int64

+ Removed int64

+ Revoked int64

+ type EraseTenantUsageRequest struct

+ TenantID uuid.UUID

+ func (r EraseTenantUsageRequest) Validate() error

+ type TenantRecordEraser interface

+ EraseTenantRecords func(ctx context.Context, req EraseTenantRequest) (EraseTenantResult, error)

+ type TenantUsageEraser interface

+ EraseTenantUsage func(ctx context.Context, req EraseTenantUsageRequest) error

Oct 14, 2026

Changes in this version

+ var ErrScopeMismatch = errors.New("limes: call scoped to another tenant than its request names")

Oct 13, 2026

Changes in this version

type TenantBudgetFilter

+ const TenantBudgetsUnspecified

Oct 12, 2026

Changes in this version

type InsertRequest

+ func (r InsertRequest) Validate() error

Oct 12, 2026

Changes in this version

+ var ErrProofUnsupported = errors.New("limes: key-bound capability, and this verifier checks no proof")

Oct 12, 2026

Changes in this version

+ const MaxCopyUsageIDs

type CopyCeiling

+ func (c CopyCeiling) AdmitsBudget(amount Nanos) bool

+ func (c CopyCeiling) AdmitsRequests(n int64) bool

+ type CopyUsageRequest struct

+ RevocationIDs [][]byte

+ func (r CopyUsageRequest) Validate() error

+ type CopyUsageResult struct

+ Copies []CopyUsage

+ type HeldCopy struct

+ Budget *BudgetCeiling

+ RevocationID []byte

Oct 12, 2026

Changes in this version

+ func ExactPercent(pct float64) *big.Rat

Oct 12, 2026

Changes in this version

type BiscuitCopy

+ func (c BiscuitCopy) Copies() []CopyCeiling

type RefundReceipt

+ Amount Nanos

type VerifierConfig

+ NoLeeway bool

Oct 12, 2026

Changes in this version

+ const MaxBiscuitBlocks

Oct 12, 2026

Changes in this version

type ListTenantBudgetsRequest

+ Filter TenantBudgetFilter

+ type TenantBudgetFilter uint8

+ const TenantBudgetsAll

+ const TenantBudgetsAtOrPast

+ const TenantBudgetsUnlimited

+ func (f TenantBudgetFilter) String() string

+ func (f TenantBudgetFilter) Validate() error

Oct 12, 2026

Changes in this version

+ type BiscuitRequest struct

+ Capability VerifiedCapability

+ type BiscuitResult struct

+ Token string

+ type IssueResult struct

+ Capability Capability

+ Token string

Oct 12, 2026

Changes in this version

type RevokeBiscuitRequest

+ Copy BiscuitCopy

+ func (r RevokeBiscuitRequest) Validate() error

Oct 12, 2026

Changes in this version

type ChargeRecord

+ Actor string

+ At time.Time

+ Op Op

+ TenantID uuid.UUID

+ type RecordReader interface

+ GetRecord func(ctx context.Context, id uuid.UUID) (Record, error)

Oct 12, 2026

Changes in this version

+ var ErrCounterOverflow = errors.New("limes: counter would pass MaxNanos")

type SetTenantBudgetRequest

+ func (r SetTenantBudgetRequest) Validate() error

Oct 12, 2026

Changes in this version

+ const DefaultGeneration

type AuthScheme

+ func (s AuthScheme) Validate() error

type Effect

+ func (e Effect) Validate() error

Oct 12, 2026

Changes in this version

type BumpReceipt

+ RequestCount int64

type Revocation

+ Cascaded bool

type UsageHousekeeping

+ DeleteUsage func(ctx context.Context, req DeleteUsageRequest) error

type Verifier

+ func NewVerifier(cfg VerifierConfig) (*Verifier, error)

+ func (v *Verifier) BiscuitCopy(ctx context.Context, token string) (BiscuitCopy, error)

+ func (v *Verifier) DPoPNonce(ctx context.Context) (string, error)

+ func (v *Verifier) ErrorResponse(ctx context.Context, err error, scheme AuthScheme) ErrorResponse

Oct 12, 2026

Changes in this version

+ const DefaultRealm

type VerifierConfig

+ Realm string

Oct 12, 2026

Changes in this version

type MeterSubject

+ func StoredMeterSubject(ctx context.Context, store Store, capabilityID uuid.UUID) (MeterSubject, error)

type Reason

+ const ReasonAuthSchemeMismatch

+ const ReasonBiscuitAttenuation

+ const ReasonNonceRequired

+ const ReasonSourceIPNotAllowed

Oct 12, 2026

Changes in this version

+ var ErrNoCredentials error = &familyError

+ type ChargeByRefRequest struct

+ CapabilityID uuid.UUID

+ ExternalRef string

+ type DeleteUsageRequest struct

+ CapabilityID uuid.UUID

type Reason

+ const ReasonNoCredentials

Oct 12, 2026

Changes in this version

+ const PurgeClockSkew

type VerifierConfig

+ SharedKeys bool

Oct 12, 2026

Changes in this version

+ const TokenTypeV4

type Attenuation

+ Budget *BudgetCeiling

+ Requests *RequestCeiling

+ type BudgetCeiling struct

+ Max Nanos

+ Unlimited bool

+ func (c BudgetCeiling) Admits(amount Nanos) bool

+ func (c BudgetCeiling) String() string

+ func (c BudgetCeiling) Validate() error

+ func (c BudgetCeiling) Within(outer BudgetCeiling) bool

type Caveats

+ Budget BudgetCeiling

+ Requests RequestCeiling

type CopyCeiling

+ Budget BudgetCeiling

+ Requests RequestCeiling

type MeterSubject

+ func (s MeterSubject) Budget() BudgetCeiling

+ func (s MeterSubject) Requests() RequestCeiling

+ type RequestCeiling struct

+ Max int64

+ Unlimited bool

+ func (c RequestCeiling) Admits(n int64) bool

+ func (c RequestCeiling) String() string

+ func (c RequestCeiling) Validate() error

+ func (c RequestCeiling) Within(outer RequestCeiling) bool

type SetTenantBudgetRequest

+ Ceiling BudgetCeiling

type TenantBudget

+ Ceiling BudgetCeiling

Oct 12, 2026

Changes in this version

type VerifiedCapability

+ func (v VerifiedCapability) FromBiscuit() bool

Oct 12, 2026

Changes in this version

type IssuerConfig

+ MaxTokenBytes int

Oct 12, 2026

Changes in this version

type Capability

+ func (c Capability) Clone() Capability

type Principal

+ func (p Principal) Clone() Principal

Oct 12, 2026

Changes in this version

+ const MaxLeeway

+ const MinPurgeRetention

+ var ErrDelegationTooDeep error = &familyError

type PurgeRequest

+ func (r PurgeRequest) Retention() time.Duration

Oct 12, 2026

Changes in this version

+ const TokenTypeV3

type VerifierConfig

+ AcceptTokenTypes []string

Oct 12, 2026

Changes in this version

type OverrunPolicy

+ const OverrunUnspecified

+ func (p OverrunPolicy) String() string

type PrincipalType

+ const PrincipalUnspecified

+ func (t PrincipalType) Validate() error

Oct 12, 2026

Changes in this version

type AuthorizeRequest

+ Check CheckRequest

+ Verify VerifyRequest

Oct 12, 2026

Changes in this version

+ func NormalizeUnitCode(u string) (string, error)

type Attenuation

+ Audience []string

+ MaxBudgetAmount Nanos

type BiscuitRevocation

+ Note string

type ChargeReceipt

+ SpentAmount Nanos

type ChargeRecord

+ ID uuid.UUID

+ RefundedAmount Nanos

type CopyCeiling

+ MaxBudgetAmount Nanos

type MeterSubject

+ func (s MeterSubject) MaxBudgetAmount() Nanos

type RefundReceipt

+ RefundedAmount Nanos

type RefundRequest

+ Remaining bool

+ func (r RefundRequest) Validate() error

type Revocation

+ Note string

type RevokeBiscuitRequest

+ Note string

type RevokeRequest

+ CapabilityID uuid.UUID

+ Note string

type TenantBudget

+ func (b TenantBudget) Utilization() (pct float64, limited bool)

Oct 11, 2026

Changes in this version

type BumpRequest

+ Subject MeterSubject

type ChargeRequest

+ Subject MeterSubject

+ type MeterSubject struct

+ func (s MeterSubject) CapabilityID() uuid.UUID

+ func (s MeterSubject) Copies() []CopyCeiling

+ func (s MeterSubject) MaxBudget() Nanos

+ func (s MeterSubject) MaxRequests() int64

+ func (s MeterSubject) TenantID() uuid.UUID

+ func (s MeterSubject) UnitCode() string

type Record

+ func (r Record) MeterSubject() MeterSubject

type ReserveRequest

+ Subject MeterSubject

type SettleRequest

+ Subject MeterSubject

type VerifiedCapability

+ func (v VerifiedCapability) MeterSubject() MeterSubject

Oct 11, 2026

Changes in this version

+ const DefaultHousekeepingLimit

+ type BumpReceipt struct

+ Requests int64

+ type ListReservationsRequest struct

+ CapabilityID uuid.UUID

+ Cursor string

+ Limit int32

+ func (r ListReservationsRequest) Validate() error

+ type MeterReader interface

+ ChargeByRef func(ctx context.Context, capID uuid.UUID, externalRef string) (ChargeRecord, error)

+ GetCharge func(ctx context.Context, chargeID uuid.UUID) (ChargeRecord, error)

+ GetReservation func(ctx context.Context, reservationID uuid.UUID) (Reservation, error)

+ GetUsage func(ctx context.Context, capID uuid.UUID) (Usage, error)

+ ListReservations func(ctx context.Context, req ListReservationsRequest) (Page[Reservation], error)

+ type PurgeOrphansRequest struct

+ Limit int

+ type PurgeOrphansResult struct

+ Purged int64

+ type ReleaseExpiredRequest struct

+ Limit int

+ type ReleaseExpiredResult struct

+ Released int64

+ type ReleaseRequest struct

+ ReservationID uuid.UUID

Oct 11, 2026

Changes in this version

+ const DefaultPurgeLimit

+ type InsertRequest struct

+ Capability Capability

+ IssuedBy Principal

+ type IssuanceStore interface

+ Insert func(ctx context.Context, req InsertRequest) error

+ IsRevoked func(ctx context.Context, id uuid.UUID) (bool, error)

+ type Page struct

+ Items []T

+ Next string

+ type PurgeRequest struct

+ ExpiredFor time.Duration

+ Limit int

+ func (r PurgeRequest) Validate() error

+ type PurgeResult struct

+ Purged int64

type Store

+ Purge func(ctx context.Context, req PurgeRequest) (PurgeResult, error)

Oct 11, 2026

Changes in this version

+ type ContextSigner interface

+ SignContext func(ctx context.Context, rand io.Reader, message []byte, opts crypto.SignerOpts) ([]byte, error)

type Signer

+ func NewSigner(cfg SignerConfig) (*Signer, error)

+ type SignerConfig struct

+ Key crypto.Signer

+ KeyID string

+ type VerifiedCapability struct

+ func (v VerifiedCapability) Capability() Capability

Oct 11, 2026

Changes in this version

+ const DefaultIssueTTL

+ const DefaultLeeway

+ type BiscuitRevocationCacheConfig struct

+ MaxEntries int

+ Now func() time.Time

+ TTL time.Duration

+ Upstream BiscuitRevocationLookup

type ListTenantBudgetsRequest

+ func (r ListTenantBudgetsRequest) Validate() error

+ type RevocationCacheConfig struct

+ MaxEntries int

+ Now func() time.Time

+ TTL time.Duration

+ Upstream RevocationLookup

type SigningKey

+ func LoadKey(path, kid string) (SigningKey, error)

Oct 11, 2026

Changes in this version

+ type InstrumentOption func(*meteringConfig)

type Nanos

+ func (n Nanos) Validate() error

type SigningKey

+ func GenerateKey() (SigningKey, error)

type UsageStore

+ func Instrument[TX any](inner UsageStore[TX], opts ...InstrumentOption) (UsageStore[TX], error)

Oct 11, 2026

Changes in this version

+ var ErrInvalidToken error = &familyError

+ var ErrProofOfPossession error = &familyError

+ var ErrUnauthenticated = errors.New("limes: unauthenticated")

type Reason

+ const ReasonInvalidToken

Oct 11, 2026

Changes in this version

type Principal

+ func (p Principal) Validate() error

type Reason

+ const ReasonMalformedAuthorization

Oct 11, 2026

Changes in this version

+ const DefaultReplayEntriesPerKey

+ const HMACNonceClockSkew

+ type ReplayCacheOption func(*MemoryReplayCache)

+ func WithEntriesPerKey(n int) ReplayCacheOption

Oct 10, 2026

Changes in this version

+ const AuthorizationDetailsType

+ const AuthorizationHeader

+ const DPoPNonceHeader

+ const DefaultDPoPNonceLifetime

+ const HMACNonceKeyBytes

+ const MaxDelegationDepth

+ const MaxIJSONInteger

+ const MediaTypeProblem

+ const WWWAuthenticateHeader

+ var ErrAuthSchemeMismatch error = &popError

+ var ErrClientUnauthorized = errors.New("limes: client not authenticated")

+ var ErrDPoPNonceRequired error = &popError

+ var ErrExternalRefConflict error = &requestError

+ var ErrInvalidMetadata = errors.New("limes: invalid issuer metadata")

+ var ErrMalformedAuthorization = errors.New("limes: malformed Authorization header")

+ func DPoPSigningAlgorithms() []string

+ func DeriveKeyID(pub ed25519.PublicKey) string

+ func HasDotSegment(s string) bool

+ func IntrospectionHandler(cfg IntrospectionConfig) (http.Handler, error)

+ func IsUnitCode(u string) bool

+ func JWKSHandler(keys func() map[string]ed25519.PublicKey, maxAge time.Duration) http.Handler

+ func MarshalAuthorizationDetails(c Caveats) ([]byte, error)

+ func MetadataHandler(m IssuerMetadata) (http.Handler, error)

+ func MetadataURL(issuer string) (string, error)

+ func RevocationHandler(cfg RevocationConfig) (http.Handler, error)

+ func ValidateResourceIndicator(s string) error

+ func WriteErrorResponse(w http.ResponseWriter, resp ErrorResponse)

+ type Actor struct

+ Actor *Actor

+ Subject string

+ type AuthScheme string

+ const AuthSchemeBearer

+ const AuthSchemeDPoP

+ const AuthSchemeUnspecified

+ func ParseAuthorization(header string) (AuthScheme, string, error)

+ type AuthorizationDetail struct

+ Type string

+ func NewAuthorizationDetail(c Caveats) AuthorizationDetail

+ type AuthorizeRequest struct

+ ClientAddr netip.Addr

type Capability

+ Actor *Actor

+ OnBehalfOf string

+ func (c Capability) Authority() string

type Caveats

+ func ParseAuthorizationDetails(raw []byte) (Caveats, error)

type ChargeReceipt

+ TenantID uuid.UUID

+ UnitCode string

+ type ClientAuthenticator func(r *http.Request) (Principal, error)

+ type ClientAuthorizer func(client Principal, c Capability) bool

+ type DPoPNonces interface

+ Nonce func(ctx context.Context) (string, error)

+ Valid func(ctx context.Context, nonce string) bool

+ type DPoPProof struct

+ Method string

+ Proof string

+ URL string

+ type DPoPProofRequest struct

+ Method string

+ Nonce string

+ Now time.Time

+ Token string

+ URL string

type DPoPVerifier

+ MatchPathOnly bool

+ Nonces DPoPNonces

+ type ErrorResponse struct

+ Challenges []string

+ DPoPNonce string

+ Problem Problem

+ Status int

+ type HMACNonces struct

+ func NewHMACNonces(lifetime time.Duration, keys ...[]byte) (*HMACNonces, error)

+ func (n *HMACNonces) Nonce(context.Context) (string, error)

+ func (n *HMACNonces) Valid(_ context.Context, nonce string) bool

+ type Introspection struct

+ Active bool

+ Actor *Actor

+ Audience []string

+ AuthorizationDetails []AuthorizationDetail

+ Confirmation *cnfClaim

+ ExpiresAt int64

+ ID string

+ IssuedAt int64

+ Issuer string

+ NotBefore int64

+ Subject string

+ TokenType string

+ func NewIntrospection(c Capability) Introspection

+ type IntrospectionConfig struct

+ Authenticate ClientAuthenticator

+ Authorize ClientAuthorizer

+ Verifier *StandardVerifier

+ type IssuerMetadata struct

+ AuthorizationDetailsTypesSupported []string

+ DPoPSigningAlgValuesSupported []string

+ IntrospectionEndpoint string

+ Issuer string

+ JWKSURI string

+ RevocationEndpoint string

+ func DiscoverIssuer(ctx context.Context, client *http.Client, issuer string) (IssuerMetadata, error)

+ func NewIssuerMetadata(issuer, jwksURI string) (IssuerMetadata, error)

+ func (m IssuerMetadata) Validate() error

+ type MeteringOption func(*meteringConfig)

+ func WithMeterProvider(p metric.MeterProvider) MeteringOption

+ func WithTenantAttribute() MeteringOption

+ type Problem struct

+ Detail string

+ Status int

+ Title string

+ Type string

+ type RefundReceipt struct

+ ChargeID uuid.UUID

+ Refunded Nanos

+ TenantID uuid.UUID

+ UnitCode string

+ type RevocationConfig struct

+ Authenticate ClientAuthenticator

+ Authorize ClientAuthorizer

+ Biscuits BiscuitRevocationStore

+ Store Store

+ Verifier *StandardVerifier

+ type SigningKey struct

+ Generated bool

+ KeyID string

+ Private ed25519.PrivateKey

+ Public ed25519.PublicKey

+ func LoadOrGenerateKey(path, kid string) (SigningKey, error)

type StandardVerifier

+ func (v *StandardVerifier) Authorize(ctx context.Context, req AuthorizeRequest) (Capability, error)

+ func (v *StandardVerifier) DPoPNonce(ctx context.Context) (string, error)

+ func (v *StandardVerifier) ErrorResponse(ctx context.Context, err error, scheme AuthScheme) ErrorResponse

+ func (v *StandardVerifier) Introspect(ctx context.Context, token string) (Capability, error)

type Verifier

+ Authorize func(ctx context.Context, req AuthorizeRequest) (Capability, error)

type VerifierConfig

+ DPoP *DPoPVerifier

+ type VerifyRequest struct

+ Audience string

+ DPoP DPoPProof

+ Scheme AuthScheme

+ Token string

Oct 9, 2026

Changes in this version

+ var ErrCursorRepeated = errors.New("limes: a page returned the cursor it was fetched with")

+ func AllByPrincipal(ctx context.Context, l CapabilityLister, req ListByPrincipalRequest) iter.Seq2[Capability, error]

+ func AllTenantBudgets(ctx context.Context, l TenantBudgetLister, req ListTenantBudgetsRequest) iter.Seq2[TenantBudgetSummary, error]

+ type CapabilityLister interface

+ ListByPrincipal func(ctx context.Context, req ListByPrincipalRequest) ([]Capability, string, error)

+ type TenantBudgetLister interface

+ ListTenantBudgets func(ctx context.Context, req ListTenantBudgetsRequest) ([]TenantBudgetSummary, string, error)

Oct 9, 2026

Changes in this version

+ const AbstractUnitCode

+ const AudiencePlaneAdmin

+ const AudiencePlaneData

+ const AudiencePlaneMCP

+ const DPoPHeader

+ const DPoPTokenType

+ const DefaultDPoPWindow

+ const DefaultListLimit

+ const DefaultMaxTokenBytes

+ const DefaultReservationTTL

+ const DefaultRevocationCacheEntries

+ const DefaultRevocationCacheTTL

+ const DefaultUnitCode

+ const MaxExternalRefBytes

+ const MaxListLimit

+ const NanosPerUnit

+ const TokenType

+ var AllowedUnitCodes = []string

+ var ErrAlreadyExists = errors.New("capability: already exists")

+ var ErrAudienceMismatch = errors.New("capability: audience mismatch")

+ var ErrBiscuitAttenuation error = &popError

+ var ErrBudgetExceeded = errors.New("capability: budget exceeded")

+ var ErrCaveatViolation = errors.New("capability: caveat violation")

+ var ErrChargeNotFound = errors.New("capability: charge not found")

+ var ErrCopyCountersNotMetered = fmt.Errorf("%w: copy limits need a verifier with MeterCopies", ErrBiscuitAttenuation)

+ var ErrDPoPInvalid error = &popError

+ var ErrDPoPReplayed error = &popError

+ var ErrDPoPRequired error = &popError

+ var ErrDelegationTooWide = errors.New("capability: child wider than parent")

+ var ErrEffectConflict error = &requestError

+ var ErrExpired = errors.New("capability: expired")

+ var ErrIdempotencyKeyRequired error = &caveatError

+ var ErrInvalidAmount = errors.New("capability: invalid amount")

+ var ErrInvalidCaveats error = &requestError

+ var ErrInvalidRequest = errors.New("capability: invalid request")

+ var ErrInvalidSignature = errors.New("capability: invalid signature")

+ var ErrJWKSUnavailable = errors.New("capability: JWKS unavailable")

+ var ErrNotFound = errors.New("capability: not found")

+ var ErrNotYetValid = errors.New("capability: not yet valid")

+ var ErrOpNotAllowed error = &caveatError

+ var ErrRefundExceedsCharge = errors.New("capability: refund exceeds charge")

+ var ErrRequestLimitExceeded = errors.New("capability: request limit exceeded")

+ var ErrReservationNotFound = errors.New("capability: reservation not found")

+ var ErrResourceNotAllowed error = &caveatError

+ var ErrRevoked = errors.New("capability: revoked")

+ var ErrSourceIPNotAllowed error = &caveatError

+ var ErrTaintedReadNotAllowed error = &caveatError

+ var ErrTenantBudgetExceeded = errors.New("capability: tenant aggregate budget exceeded")

+ var ErrTenantBudgetNotFound = errors.New("capability: tenant budget row not found")

+ var ErrTenantBudgetVersionMismatch = errors.New("capability: tenant budget resource_version mismatch")

+ var ErrTenantDeleted = errors.New("capability: tenant deleted")

+ var ErrUnitCodeMismatch = errors.New("capability: unit_code mismatch between parent and child")

+ var ErrUnknownKID = errors.New("capability: unknown kid")

+ var ErrUnknownTenant = errors.New("capability: unknown tenant")

+ var ErrUsageNotFound = errors.New("capability: usage row not found")

+ func AccessTokenHash(token string) string

+ func Attenuate(token string, a Attenuation) (string, error)

+ func GenerateEd25519Keypair() (kid string, pub ed25519.PublicKey, priv ed25519.PrivateKey, err error)

+ func IsAllowedUnitCode(u string) bool

+ func IsBiscuit(token string) bool

+ func KeyThumbprint(pub crypto.PublicKey) (string, error)

+ func LoadPrivateKey(path string) (ed25519.PrivateKey, error)

+ func MarshalJWKS(keys map[string]ed25519.PublicKey) ([]byte, error)

+ func MatchResource(prefix, uri string) bool

+ func MustLoadOrGenerate(path, kid string) (resolvedKID string, pub ed25519.PublicKey, priv ed25519.PrivateKey, ...)

+ func Narrows(parent, child Capability) error

+ func NewDPoPProof(key crypto.Signer, method, rawURL, token string, now time.Time) (string, error)

+ func NormaliseUnitCode(u string) (string, error)

+ func PageLimit(requested int32) int32

+ func ParseJWKS(raw []byte) (map[string]ed25519.PublicKey, error)

+ func ValidateAmount(amount Nanos) error

+ func ValidateExternalRef(ref string) error

+ func VerifySignature(token string, pub ed25519.PublicKey) error

+ type AgentPrincipal struct

+ AgentType string

+ AgentVersion string

+ MCPClient string

+ Model string

+ ParentAgentID uuid.UUID

+ RunID uuid.UUID

+ type Attenuation struct

+ ConfirmationJKT string

+ ExpiresAt time.Time

+ MaxBudget Nanos

+ MaxRequests int64

+ Ops []Op

+ Planes []string

+ ResourcePrefixes []string

+ ResourceURIs []string

+ type BiscuitCopy struct

+ CapabilityID uuid.UUID

+ Limits []CopyCeiling

+ RevocationID []byte

+ type BiscuitRevocation struct

+ Actor string

+ CapabilityID uuid.UUID

+ Reason string

+ RevocationID []byte

+ RevokedAt time.Time

+ type BiscuitRevocationLookup interface

+ IsBiscuitRevoked func(ctx context.Context, revocationIDs [][]byte) (bool, error)

+ type BiscuitRevocationStore interface

+ GetBiscuitRevocation func(ctx context.Context, revocationID []byte) (BiscuitRevocation, error)

+ RevokeBiscuit func(ctx context.Context, req RevokeBiscuitRequest) error

+ type BumpRequest struct

+ CapabilityID uuid.UUID

+ Copies []CopyCeiling

+ MaxRequests int64

+ TenantID uuid.UUID

+ type CacheOption func(*cacheConfig)

+ func WithCacheClock(now func() time.Time) CacheOption

+ func WithMaxEntries(n int) CacheOption

+ type CachedBiscuitRevocationChecker struct

+ func NewCachedBiscuitRevocationChecker(upstream BiscuitRevocationLookup, ttl time.Duration, opts ...CacheOption) *CachedBiscuitRevocationChecker

+ func (c *CachedBiscuitRevocationChecker) Clear()

+ func (c *CachedBiscuitRevocationChecker) IsBiscuitRevoked(ctx context.Context, revocationIDs [][]byte) (bool, error)

+ func (c *CachedBiscuitRevocationChecker) Sweep() int

+ type CachedRevocationChecker struct

+ func NewCachedRevocationChecker(upstream RevocationLookup, ttl time.Duration, opts ...CacheOption) *CachedRevocationChecker

+ func (c *CachedRevocationChecker) Clear()

+ func (c *CachedRevocationChecker) Invalidate(id uuid.UUID)

+ func (c *CachedRevocationChecker) IsRevoked(ctx context.Context, id uuid.UUID) (bool, error)

+ func (c *CachedRevocationChecker) Sweep() int

+ type Capability struct

+ Audience []string

+ BiscuitRoot string

+ Caveats Caveats

+ ConfirmationJKT string

+ Copies []CopyCeiling

+ ExpiresAt time.Time

+ Generation int64

+ ID uuid.UUID

+ IssuedAt time.Time

+ Issuer string

+ NotBefore time.Time

+ ParentID uuid.UUID

+ Subject Principal

+ func Decode(token string) (Capability, error)

+ type Caveats struct

+ AllowTaintedRead bool

+ IdempotencyKeyRequired bool

+ MaxBudgetAmount Nanos

+ MaxRequests int

+ Ops []Op

+ ResourcePrefixes []string

+ ResourceURIs []string

+ SourceIPCIDR []string

+ UnitCode string

+ func (c Caveats) AllowsResource(uri string) bool

+ func (c Caveats) Check(req CheckRequest) error

+ func (c Caveats) CheckSource(addr netip.Addr) error

+ func (c Caveats) RestrictsResources() bool

+ func (c Caveats) Validate() error

+ type ChargeReceipt struct

+ ChargeID uuid.UUID

+ Overrun bool

+ Replayed bool

+ Spent Nanos

+ type ChargeRecord struct

+ Amount Nanos

+ CapabilityID uuid.UUID

+ ChargeID uuid.UUID

+ ExternalRef string

+ Overrun bool

+ Refunded Nanos

+ UnitCode string

+ type ChargeRequest struct

+ Actor string

+ Amount Nanos

+ CapabilityID uuid.UUID

+ Copies []CopyCeiling

+ ExternalRef string

+ MaxBudget Nanos

+ Op string

+ Overrun OverrunPolicy

+ TenantID uuid.UUID

+ UnitCode string

+ type CheckRequest struct

+ Effect Effect

+ HasIdempotencyKey bool

+ Op Op

+ Resource string

+ ResourceTainted bool

+ func (req CheckRequest) Mutating() (bool, error)

+ type CopyCeiling struct

+ MaxBudget Nanos

+ MaxRequests int64

+ RevocationID []byte

+ type CopyUsage struct

+ CapabilityID uuid.UUID

+ RequestCount int64

+ ReservedAmount Nanos

+ RevocationID []byte

+ SpentAmount Nanos

+ type CopyUsageReader interface

+ CopyUsage func(ctx context.Context, revocationIDs [][]byte) ([]CopyUsage, error)

+ type DPoPJWK struct

+ Crv string

+ Kty string

+ X string

+ Y string

+ func PublicJWK(pub crypto.PublicKey) (DPoPJWK, error)

+ func (j DPoPJWK) Thumbprint() (string, error)

+ type DPoPRequest struct

+ MatchPathOnly bool

+ Method string

+ Proof string

+ Token string

+ URL string

+ type DPoPVerifier struct

+ Now func() time.Time

+ Replay ReplayCache

+ Window time.Duration

+ func (v *DPoPVerifier) Check(ctx context.Context, c Capability, req DPoPRequest) error

+ type DelegateRequest struct

+ Audience []string

+ Caveats Caveats

+ ConfirmationJKT string

+ InheritCaveats bool

+ NotBefore time.Time

+ Parent Capability

+ Subject Principal

+ TTL time.Duration

+ type Effect uint8

+ const EffectRead

+ const EffectUnspecified

+ const EffectWrite

+ func (e Effect) String() string

+ type IssueRequest struct

+ Audience []string

+ Caveats Caveats

+ ConfirmationJKT string

+ Generation int64

+ IssuedBy Principal

+ NotBefore time.Time

+ Subject Principal

+ TTL time.Duration

+ type Issuer struct

+ func NewIssuer(cfg IssuerConfig) (*Issuer, error)

+ func (i *Issuer) Biscuit(c Capability) (string, error)

+ func (i *Issuer) Delegate(ctx context.Context, req DelegateRequest) (Capability, string, error)

+ func (i *Issuer) Issue(ctx context.Context, req IssueRequest) (Capability, string, error)

+ type IssuerConfig struct

+ DefaultTTL time.Duration

+ IssuerName string

+ Now func() time.Time

+ Signer Signer

+ Store Store

+ type JWK struct

+ Alg string

+ Crv string

+ Kid string

+ Kty string

+ X string

+ type JWKSDocument struct

+ Keys []JWK

+ type KeyResolver interface

+ PublicKey func(ctx context.Context, kid string) (ed25519.PublicKey, error)

+ type ListByPrincipalRequest struct

+ Cursor string

+ IncludeExpired bool

+ IncludeRevoked bool

+ Limit int32

+ PrincipalType PrincipalType

+ Subject string

+ TenantID uuid.UUID

+ func (r ListByPrincipalRequest) Validate() error

+ type ListTenantBudgetsRequest struct

+ Cursor string

+ ExcludeInactive bool

+ Limit int32

+ ThresholdPct float64

+ UnlimitedOnly bool

+ type MemoryReplayCache struct

+ func NewMemoryReplayCache(maxEntries int) *MemoryReplayCache

+ func (c *MemoryReplayCache) Seen(_ context.Context, jti string, expires time.Time) bool

+ type Meter interface

+ Bump func(ctx context.Context, req BumpRequest) (newCount int64, err error)

+ Charge func(ctx context.Context, req ChargeRequest, ...) (ChargeReceipt, error)

+ ChargeByRef func(ctx context.Context, capID uuid.UUID, externalRef string) (ChargeRecord, error)

+ GetCharge func(ctx context.Context, chargeID uuid.UUID) (ChargeRecord, error)

+ GetReservation func(ctx context.Context, reservationID uuid.UUID) (Reservation, error)

+ GetUsage func(ctx context.Context, capID uuid.UUID) (Usage, error)

+ ListReservations func(ctx context.Context, capID uuid.UUID) ([]Reservation, error)

+ Refund func(ctx context.Context, req RefundRequest) (refunded Nanos, err error)

+ Release func(ctx context.Context, reservationID uuid.UUID) error

+ Reserve func(ctx context.Context, req ReserveRequest) (Reservation, error)

+ Settle func(ctx context.Context, req SettleRequest, ...) (ChargeReceipt, error)

+ type MeteringStore struct

+ Inner UsageStore[TX]

+ func (s *MeteringStore[TX]) Bump(ctx context.Context, req BumpRequest) (int64, error)

+ func (s *MeteringStore[TX]) Charge(ctx context.Context, req ChargeRequest, ...) (ChargeReceipt, error)

+ func (s *MeteringStore[TX]) ChargeByRef(ctx context.Context, capID uuid.UUID, externalRef string) (ChargeRecord, error)

+ func (s *MeteringStore[TX]) Delete(ctx context.Context, capID uuid.UUID) error

+ func (s *MeteringStore[TX]) GetCharge(ctx context.Context, chargeID uuid.UUID) (ChargeRecord, error)

+ func (s *MeteringStore[TX]) GetReservation(ctx context.Context, reservationID uuid.UUID) (Reservation, error)

+ func (s *MeteringStore[TX]) GetTenantBudget(ctx context.Context, tenantID uuid.UUID) (TenantBudget, error)

+ func (s *MeteringStore[TX]) GetUsage(ctx context.Context, capID uuid.UUID) (Usage, error)

+ func (s *MeteringStore[TX]) ListReservations(ctx context.Context, capID uuid.UUID) ([]Reservation, error)

+ func (s *MeteringStore[TX]) ListTenantBudgets(ctx context.Context, args ListTenantBudgetsRequest) ([]TenantBudgetSummary, string, error)

+ func (s *MeteringStore[TX]) PurgeOrphans(ctx context.Context) (int64, error)

+ func (s *MeteringStore[TX]) Refund(ctx context.Context, req RefundRequest) (Nanos, error)

+ func (s *MeteringStore[TX]) Release(ctx context.Context, reservationID uuid.UUID) error

+ func (s *MeteringStore[TX]) ReleaseExpired(ctx context.Context) (int64, error)

+ func (s *MeteringStore[TX]) Reserve(ctx context.Context, req ReserveRequest) (Reservation, error)

+ func (s *MeteringStore[TX]) SetTenantBudget(ctx context.Context, args SetTenantBudgetRequest) (TenantBudget, error)

+ func (s *MeteringStore[TX]) Settle(ctx context.Context, req SettleRequest, ...) (ChargeReceipt, error)

+ type Nanos int64

+ const MaxNanos

+ func AmountFromFloat(f float64) (Nanos, error)

+ func MustParseAmount(s string) Nanos

+ func ParseAmount(s string) (Nanos, error)

+ func (n *Nanos) UnmarshalJSON(b []byte) error

+ func (n *Nanos) UnmarshalText(b []byte) error

+ func (n Nanos) Float64() float64

+ func (n Nanos) MarshalJSON() ([]byte, error)

+ func (n Nanos) MarshalText() ([]byte, error)

+ func (n Nanos) String() string

+ type Op string

+ const OpDelete

+ const OpEmbed

+ const OpGet

+ const OpList

+ const OpManage

+ const OpPresign

+ const OpPut

+ const OpSearch

+ const OpShare

+ const OpTag

+ func (op Op) Builtin() bool

+ func (op Op) Mutating() bool

+ func (op Op) ResolveEffect(declared Effect) (Effect, error)

+ func (op Op) Validate() error

+ type OverrunPolicy uint8

+ const OverrunRecord

+ const OverrunReject

+ func (p OverrunPolicy) Validate() error

+ type Principal struct

+ Agent *AgentPrincipal

+ Subject string

+ TenantID uuid.UUID

+ Type PrincipalType

+ type PrincipalType string

+ const PrincipalAgent

+ const PrincipalService

+ const PrincipalUser

+ type Reason string

+ const ReasonAudienceMismatch

+ const ReasonBudgetExceeded

+ const ReasonExpired

+ const ReasonIdempotencyKeyRequired

+ const ReasonInvalidBiscuit

+ const ReasonInvalidSignature

+ const ReasonKeysUnavailable

+ const ReasonNotYetValid

+ const ReasonOpNotAllowed

+ const ReasonProofInvalid

+ const ReasonProofReplayed

+ const ReasonProofRequired

+ const ReasonRequestLimitExceeded

+ const ReasonResourceNotAllowed

+ const ReasonRevoked

+ const ReasonSourceNotAllowed

+ const ReasonTaintedReadNotAllowed

+ const ReasonTenantBudgetExceeded

+ func ReasonOf(err error) (Reason, bool)

+ func Reasons() []Reason

+ func (r Reason) Permanent() bool

+ type Record struct

+ Capability Capability

+ IssuedBy Principal

+ Revocation *Revocation

+ type RefundRequest struct

+ Amount Nanos

+ ChargeID uuid.UUID

+ type RemoteJWKSConfig struct

+ Client *http.Client

+ MaxDocumentBytes int64

+ MaxStale time.Duration

+ MinRefreshInterval time.Duration

+ Now func() time.Time

+ RefreshInterval time.Duration

+ URL string

+ type RemoteJWKSResolver struct

+ func NewRemoteJWKSResolver(cfg RemoteJWKSConfig) (*RemoteJWKSResolver, error)

+ func (r *RemoteJWKSResolver) PublicKey(ctx context.Context, kid string) (ed25519.PublicKey, error)

+ type ReplayCache interface

+ Seen func(ctx context.Context, jti string, expires time.Time) bool

+ type Reservation struct

+ Actor string

+ Amount Nanos

+ CapabilityID uuid.UUID

+ Copies []CopyCeiling

+ ExpiresAt time.Time

+ ID uuid.UUID

+ Op string

+ TenantID uuid.UUID

+ UnitCode string

+ type ReserveRequest struct

+ Actor string

+ Amount Nanos

+ CapabilityID uuid.UUID

+ Copies []CopyCeiling

+ MaxBudget Nanos

+ Op string

+ TTL time.Duration

+ TenantID uuid.UUID

+ UnitCode string

+ type Revocation struct

+ Actor string

+ Cascade bool

+ Reason string

+ RevokedAt time.Time

+ type RevocationLookup interface

+ IsRevoked func(ctx context.Context, id uuid.UUID) (bool, error)

+ type RevokeBiscuitRequest struct

+ Actor string

+ CapabilityID uuid.UUID

+ Reason string

+ RevocationID []byte

+ type RevokeRequest struct

+ Actor string

+ CascadeChildren bool

+ ID uuid.UUID

+ Reason string

+ type SetTenantBudgetRequest struct

+ ExpectedVersion int64

+ MaxBudgetAmount Nanos

+ PeriodEnd *time.Time

+ ResetSpend bool

+ TenantID uuid.UUID

+ UnitCode string

+ type SettleRequest struct

+ Amount Nanos

+ MaxBudget Nanos

+ Overrun OverrunPolicy

+ ReservationID uuid.UUID

+ type Signer interface

+ KeyID func() string

+ Sign func(c Capability) (string, error)

+ func NewEd25519Signer(keyID string, priv ed25519.PrivateKey) (Signer, error)

+ type StandardVerifier struct

+ func NewStandardVerifier(cfg VerifierConfig) (*StandardVerifier, error)

+ func (v *StandardVerifier) BiscuitCopy(ctx context.Context, token string) (BiscuitCopy, error)

+ func (v *StandardVerifier) Verify(ctx context.Context, token string, audience string) (Capability, error)

+ type StaticKeyResolver struct

+ func NewStaticKeyResolver(keys map[string]ed25519.PublicKey) *StaticKeyResolver

+ func (r *StaticKeyResolver) Keys() map[string]ed25519.PublicKey

+ func (r *StaticKeyResolver) PublicKey(_ context.Context, kid string) (ed25519.PublicKey, error)

+ func (r *StaticKeyResolver) RemoveKey(kid string)

+ func (r *StaticKeyResolver) SetKey(kid string, key ed25519.PublicKey)

+ type Store interface

+ Get func(ctx context.Context, id uuid.UUID) (Capability, error)

+ GetRecord func(ctx context.Context, id uuid.UUID) (Record, error)

+ Insert func(ctx context.Context, c Capability, issuedBy Principal) error

+ IsRevoked func(ctx context.Context, id uuid.UUID) (bool, error)

+ ListByPrincipal func(ctx context.Context, req ListByPrincipalRequest) ([]Capability, string, error)

+ PurgeExpired func(ctx context.Context, expiredFor time.Duration) (int64, error)

+ Revoke func(ctx context.Context, req RevokeRequest) error

+ type TenantBudget struct

+ MaxBudgetAmount Nanos

+ PeriodEnd *time.Time

+ PeriodStart time.Time

+ ReservedAmount Nanos

+ ResourceVersion int64

+ SpentAmount Nanos

+ TenantID uuid.UUID

+ UnitCode string

+ UpdatedAt time.Time

+ type TenantBudgetCursor struct

+ TenantID uuid.UUID

+ Utilisation string

+ func DecodeTenantBudgetCursor(s string) (TenantBudgetCursor, error)

+ func (c TenantBudgetCursor) Encode() string

+ type TenantBudgetSummary struct

+ Budget TenantBudget

+ DisplayName string

+ Slug string

+ TenantID uuid.UUID

+ UtilisationPct float64

+ type TenantBudgets interface

+ GetTenantBudget func(ctx context.Context, tenantID uuid.UUID) (TenantBudget, error)

+ ListTenantBudgets func(ctx context.Context, req ListTenantBudgetsRequest) ([]TenantBudgetSummary, string, error)

+ SetTenantBudget func(ctx context.Context, req SetTenantBudgetRequest) (TenantBudget, error)

+ type Usage struct

+ CapabilityID uuid.UUID

+ RequestCount int64

+ ReservedAmount Nanos

+ SpentAmount Nanos

+ UnitCode string

+ type UsageHousekeeping interface

+ Delete func(ctx context.Context, capID uuid.UUID) error

+ PurgeOrphans func(ctx context.Context) (int64, error)

+ ReleaseExpired func(ctx context.Context) (int64, error)

+ type UsageStore interface

+ func WithMetering[TX any](inner UsageStore[TX]) UsageStore[TX]

+ type Verifier interface

+ Verify func(ctx context.Context, token string, audience string) (Capability, error)

+ type VerifierConfig struct

+ AcceptBiscuit bool

+ BiscuitRevocations BiscuitRevocationLookup

+ KeyIssuers map[string]string

+ Keys KeyResolver

+ Leeway time.Duration

+ MaxTokenBytes int

+ MeterCopies bool

+ Now func() time.Time

+ Revocations RevocationLookup

+ TrustedIssuers []string