Gatekeeper

Gatekeeper is the auth and authorization control plane for Orkait.

It owns the hard parts: identity, API keys, quotas, billing rules, crypto, mail delivery, and storage primitives.

What It Does

• Auth: signup, login, refresh tokens, email verification, Google auth
• Authorization: central policy and access-control building blocks
• API keys: lifecycle, validation, scopes, and quota-aware usage
• Quotas and billing: usage tracking, idempotency, and pricing strategies
• Infra primitives: crypto, mail, database, analytics, and shared contracts

Repo Shape

This repo is package-first:

Package	Purpose
auth	user auth flows and token lifecycle
apikeys	API key management
quota	usage and quota enforcement
billing-strategies	pricing logic
crypto	JWT, JWKS, hashing, passwords, randomness
database	SQL, KV, Redis, R2, Dynamo abstractions
mailer	templates, providers, delivery strategies
analytics	event contracts and transport behavior
common	shared constants, types, helpers

Quick Start

bun install
bun run ci

Useful commands:

bun run type-check
bun run test:coverage
bun run test:api

Tests use vitest. Bun is used for install and workspace task execution, not for the test runner.

Quality Bar

• TypeScript across all packages
• vitest coverage enforced per package
• turbo workspace orchestration
• root gate: bun run ci

Rule

If behavior changes, tests should lock the contract, not just move the coverage number.

License

MIT