MOVA Production Package API Go

Go reference implementation of MOVA Production Package API V1.

The normative contract is owned by:

../mova-operational-knowledge-repo/mova-production-package-canon/

This component implements the customer retrieval boundary. It does not execute operations, expose extraction artifacts, or mutate Canonical OKG.

Implemented endpoints

GET  /health
GET  /v1/domains
POST /v1/operations/search
GET  /v1/operations/{operation_ref}
GET  /v1/operations/{operation_ref}/related
POST /v1/explanations
POST /v1/outcomes

Production profile

• hashed bearer API-key authentication with multi-tenant credential files;
• entitlement-scoped domain filtering;
• tenant-scoped HMAC opaque references;
• read-only file adapter for published MOVA operation indexes;
• deterministic lexical retrieval;
• structured, operation-grounded explanations;
• durable, idempotent append-only outcome storage;
• per-principal rate limiting;
• structured request logging and authenticated Prometheus metrics;
• bounded HTTP timeouts, defensive headers, panic recovery, and graceful shutdown.

All adapters are interfaces and can be replaced without changing the HTTP contract.

Run locally

$env:MOVA_OKG_ROOT='D:\MOVA2.0\mova-operational-knowledge-repo'
$env:MOVA_API_TOKEN='replace-with-at-least-32-random-characters'
$env:MOVA_API_REFERENCE_SECRET='replace-with-at-least-32-random-characters'
$env:MOVA_API_ENTITLED_DOMAINS='after_effects'
go run ./cmd/mova-production-package-api

For production, use MOVA_API_CREDENTIALS_FILE with the shape shown in config/credentials.example.json. The service refuses to start with weak keys or reference secrets. See PRODUCTION.md for deployment and operations.

Test

go test ./...
go vet ./...
govulncheck ./...

Adapter upgrades for scale

• OAuth/OIDC integration;
• durable tenant and entitlement storage;
• production vector retrieval adapter;
• database-backed outcome storage for multiple replicas;
• distributed rate limiting and anomaly detection at the gateway;
• SDK and connector packaging;
• procedure endpoints and execution.