Releases the SecurityBag request-scoped security context (drafted in the
CHANGELOG since 2026-05-28) and anchors the coordinated framework release at
v1.1.0 — the einherjar modules move to v1.1.0 in lockstep.
security:
- SecurityBag value type + NewSecurityBag, Identity/WithIdentity,
Get/With, SetBagInContext (immutable; copy-on-write attributes).
No einherjar dependencies. Badge bumped to v1.1.0.
Reviewed-on: #1
Co-authored-by: Rene Nochebuena Guerrero <rene@nochebuena.dev>
Co-committed-by: Rene Nochebuena Guerrero <rene@nochebuena.dev>
Introduces code.nochebuena.dev/einherjar/contracts — the zero-dependency
foundation of the Einherjar framework. Defines the interfaces and minimal
types consumed by every starter. Zero external dependencies. Zero Einherjar
dependencies. Nothing is above it in the dependency graph.
lifecycle:
- Component — OnInit, OnStart, OnStop three-phase lifecycle hooks
observability:
- Level (LevelCritical=0, LevelDegraded); zero value is the safe default
- Checkable — HealthCheck, Name, Priority
- Identifiable — ModulePath, ModuleVersion; implemented by all starters to
surface module identity and version in the startup banner
logging:
- Logger — Debug, Info, Warn, Error, With, WithContext
errs:
- CodedError — ErrorCode() string; satisfied by core/xerrors.Err
- ContextualError — ErrorContext() map[string]any; satisfied by core/xerrors.Err
security:
- Identity value type — UID, TenantID, DisplayName, Email; NewIdentity, WithTenant
- Permission (int64), MaxPermission=62, PermissionMask — Has, Grant
- PermissionProvider — ResolveMask(ctx, uid, resource) (PermissionMask, error)
- SecurityBag value type — immutable request-scoped security context; carries
Identity and arbitrary typed attributes (hardware IDs, grant codes, etc.);
With copies the attribute map on every call to preserve receiver-invariant behaviour
- NewSecurityBag, Identity, WithIdentity, Get, With
- SetBagInContext / BagFromContext — full bag context storage
- SetInContext / FromContext — backed by SecurityBag; all four cross-function
combinations (SetInContext+BagFromContext, SetBagInContext+FromContext) are valid
One file per type; CT-6 enforced by compliance test AST walk.
Rene Nochebuena
