ridu

Create an application from config and a document store.

Resolve executable config into a deterministic schema manifest.

Run the API, admin, jobs, and shutdown lifecycle.

Allow an access-controlled operation.

Deny an access-controlled operation.

Constrain access to documents matching a query expression.

Define a Go read function whose result is supplied to an admin component.

Reject stops an operation from a collection, global, or field hook and shows message to the person who made the request. The admin displays it, and REST, the SDK, and the Local API return it as a "rejected" error (HTTP 422). Any other hook error is reported as an internal failure.

The complete author-owned application definition.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Read content for the signed-in user while a Go admin loader runs.

A Go admin loader ready to register in your application's Admin.Loaders.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

RootHooks holds hooks for the whole application. Assign it to Config.Hooks. Its AfterError hooks see every failed operation, including failures that happen before Ridu knows which collection or global is involved.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Public authoring and runtime contracts live in core. These aliases keep the root package as the ergonomic application-facing entry point.

Content locales, fallback behavior, and optional request-scoped admin availability.

One content locale and its ordered fallback chain.

Serializable collection presentation and editorial organization.

A frontend URL template and named authoring viewports.

Policy for an auth-enabled collection.

Validation, privacy, and image-variant policy for an upload collection.

Drafts, snapshot retention, and autosave policy.

Select the auth collection trusted to enter the framework admin.

Configure admin interface languages and editor timezone choices.

One statically bundled admin interface language.

One timezone offered to editors.

Singular and plural author-facing collection labels.

One ordered compound index; Unique enforces tuple uniqueness.

Serializable singleton presentation metadata.

Expiration policy for coordinated authoring locks.

One named live-preview viewport.

HTTP security, size bounds, observers, and trusted-proxy policy.

Provide the singular document-store adapter through the Execute lifecycle.

Register the selected adapter’s compiled migration driver for project commands.

Configure the HTTP listen address independently from the store adapter.

Provide object storage through the Execute lifecycle.

Configure the generated HTTP handler used by Execute.

Configure production socket and graceful-drain bounds.

Socket timeouts, graceful drain, and readiness admission.

A lazy, lifecycle-owned document-store constructor.

A lazy, lifecycle-owned object-storage constructor.

A bounded repeatable custom readiness dependency check.

One opaque runtime option accepted by Execute.

Projection, population, actor, draft, trash, and locale controls for one read.

Filter, page, sort, projection, population, actor, draft, trash, and locale list controls.

Field, filter, page, actor, draft, trash, and locale controls for a unique-value read.

Bounded unique-index range, projection, actor, and locale controls.

Actor, revision, draft, response, and locale controls for one write.

Locale selection for concise single-document calls.

Proposed data, actor, trash, and locale input for side-effect-free access evaluation.

Evaluated operation and field permission booleans.

Trusted migration identity, status, and source timestamps.

The stable code, HTTP status, message, validation issues, cause, and commit-state error returned across operation boundaries.

In-process content operations over the shared operation engine.

Evaluated boolean permissions for resource operations.

Evaluated read/create/update booleans for one field path.

Refreshed source document plus applied inverse-relation delta counts.

Length, byte, bcrypt, and common-password policy for local credentials.

Token lifetime and trusted notification callback for password recovery.

Token lifetime and trusted notification callback for email verification.

Rules for login, sessions, recovery, API keys, and external authentication.

Exact actor, operation, request, and LocalAPI state for an auth rule or hook.

Compiled authentication lifecycle observers.

One compiled external request-authentication strategy.

An exact auth collection plus actor document.

A new bearer session, safe ID, typed user, and expiry.

Safe session/device metadata without the bearer secret.

A newly minted API key including its one-time secret.

Safe metadata for listing an existing API key.

Client IP and user-agent metadata recorded with a session.

Allow or deny one non-CRUD authentication operation.

Observe or reject one authentication lifecycle phase.

Login, logout, refresh, recovery, verification, API-key, or external-auth operation.

Normalized headers and target collection for an external strategy.

Whether an external strategy recognized and authenticated a request.

Trusted password-reset delivery payload including the raw one-time token.

Trusted email-verification delivery payload including the raw one-time token.

One named derived image variant and fit policy.

Streamed file bytes, application metadata, identity, and locale.

Scanned, candidate, and deleted counts from upload reconciliation.

Define a compiled typed durable task.

A registered typed handle for durable admission, status, and cancellation.

Select the queue used by a typed task.

Persist retry count, delay, maximum delay, and backoff policy.

Bound one handler attempt.

Keep terminal task status/output for a bounded duration.

Repair durable domain records that missed task admission.

Return a retryable handler failure using configured backoff.

Return a retryable handler failure with an explicit delay.

Return a terminal handler failure.

Cancellation, task identity, attempt number, and application access for one handler.

Run time, queue, concurrency key, target, and requester for admission.

A typed stable handle returned by durable admission.

Typed task status, attempts, failure, timestamps, and optional output.

A stable typed durable-task failure.

Fixed, linear, or exponential durable retry schedule.

Non-generic compiled task boundary stored in Config.Tasks.

Stable framework task failure category.

One typed task policy option.

Bounded recovery scan for a durable task admission gap.

Claimed, succeeded, failed, and released counts for a worker cycle.

The maximum encoded JSON size accepted for durable task input or output.

A compiled typed durable task function.

Queued, running, succeeded, failed, or canceled durable state.

An allow, deny, or atomic document-filter decision.

Authorize one operation with actor and transaction context.

Actor, target, locale, data, and nested API supplied to an access rule.

Access rules for collection admin, create, read, update, delete, and unlock operations.

Allow-or-deny rules for global reads, versions, and updates.

Allow, deny, or filtered-decision discriminant.

Read the request and values available to a collection or global hook.

Run code during a collection or global lifecycle phase.

Register callbacks for collection or global reads, writes, and other lifecycle events.

Choose how hooks run after their transaction commits.

The operation details and callback passed to an after-commit dispatcher.

One application-authored method and path handler mounted at root, collection, or global scope.

Raw HTTP, route parameters, actor identity, and LocalAPI supplied to a custom endpoint.

Trusted compiled custom endpoint handler.

The minimum stable-key contract for trusted compiled backend extensions.

Versioned public generation, migration, and admin metadata.

A plugin providing versioned public metadata.

A plugin contributing deterministic files from executable configuration.

Immutable manifest input for compiled plugin generation.

A deterministic plugin-scoped generated file.

A plugin transforming defensive config copies before final resolution.

A plugin contributing ordered collection or field hooks.

A plugin validating its custom field values.

A plugin contributing namespaced REST endpoints.

A plugin binding an application-level protocol transport.

Static package/export pairing for a plugin admin half.

Half-open framework version range supported by a plugin.

Generated Go, TypeScript, where, and OpenAPI mapping for a plugin field.

Ordered collection or field hooks contributed by a plugin.

Resolved field, concrete runtime path, and candidate value for validation.

Return path-aware issues for one plugin-owned value.

Immutable manifest and initialized public APIs supplied during protocol binding.

The compiled backend plugin API version required by PluginDescriptor.

The statically bundled admin-plugin API version required by AdminPluginMetadata.

Security-relevant application event metadata.

Completed request timing, route, response size, error code, and status metadata.

Trusted internal diagnostic detail hidden from public HTTP responses.

A resolved application bound to its document and optional service stores.

The semantic Ridu framework version used by project and CLI compatibility checks.

Public constant AccessAllow from github.com/riducms/ridu.

Public constant AccessDeny from github.com/riducms/ridu.

Public constant AccessWhere from github.com/riducms/ridu.

Public constant AuthOperationAPIKey from github.com/riducms/ridu.

Public constant AuthOperationEmailVerification from github.com/riducms/ridu.

Public constant AuthOperationExternalStrategy from github.com/riducms/ridu.

Public constant AuthOperationLogin from github.com/riducms/ridu.

Public constant AuthOperationLogout from github.com/riducms/ridu.

Public constant AuthOperationPasswordReset from github.com/riducms/ridu.

Public constant AuthOperationRotate from github.com/riducms/ridu.

Public constant AuthOperationSession from github.com/riducms/ridu.

Public constant TaskBackoffExponential from github.com/riducms/ridu.

Public constant TaskBackoffFixed from github.com/riducms/ridu.

Public constant TaskBackoffLinear from github.com/riducms/ridu.

Public constant TaskErrorInvalidInput from github.com/riducms/ridu.

Public constant TaskErrorInvalidOutput from github.com/riducms/ridu.

Public constant TaskErrorLeaseLost from github.com/riducms/ridu.

Public constant TaskErrorNotFound from github.com/riducms/ridu.

Public constant TaskErrorNotRegistered from github.com/riducms/ridu.

Public constant TaskErrorStoreFailed from github.com/riducms/ridu.

Public constant TaskErrorUnavailable from github.com/riducms/ridu.

Public constant TaskStateCanceled from github.com/riducms/ridu.

Public constant TaskStateFailed from github.com/riducms/ridu.

Public constant TaskStateQueued from github.com/riducms/ridu.

Public constant TaskStateRunning from github.com/riducms/ridu.

Public constant TaskStateSucceeded from github.com/riducms/ridu.