SQL returns a safe, validated ORDER BY fragment (e.g. "created_at DESC"). The column is sanitized — only lowercase letters, digits, and underscores ar

WithLevel returns a new logger filtered to the given minimum level.

grpcBearerToken extracts and validates the Bearer token from incoming gRPC metadata.

maskedJSON marshals v after applying go-masker field masking.

Clamp enforces sane bounds: - Number < 1 → 1 - Size < 1 → 20 (default) - Size > maxSize (when maxSize > 0) → maxSize

ConsumerAuthRequired validates a JWT token string extracted from a message header/payload and injects the authenticated user into the context. Returns

CreateTestDB provisions an isolated PostgreSQL database for a single test. It creates a uniquely-named database, optionally applies migrations, and r

FailSpan records err on span and sets its status to Error. Returns err unchanged so callers can write: return tracing.FailSpan(span, err)

GRPCAuthOptional validates the JWT only when the authorization metadata key is present. RPCs without the header continue unauthenticated — user.ID wil

GRPCLogging returns a unary server interceptor that logs every inbound RPC call and any errors the handler returns.

GRPCTracing returns a unary server interceptor that starts an OTel span for every call.

GenerateToken creates a signed JWT token for testing.

InitializeClients initialises all external client connections and returns them wrapped in a Dependencies struct.

InitializeRepositories wires up and returns the shared repository instances.

InitializeRepositories wires up and returns the shared repository instances.

InitializeRepositories wires up and returns the shared repository instances.

InitializeRouter wires up the message router — one entry per consumed message type. Each entry pairs a transport-layer decode function with a go-kit e

InitializeRoutes builds and returns the root mux.Router.

InitializeServiceHandler wires up and returns the ExampleServiceHandler.

LoggingGRPCMiddleware logs gRPC endpoint processing with masking.

LoggingPubSubMiddleware logs pub/sub message processing with masking. Attaches topic and transport attributes to every log line.

NewConn creates a MySQL connection pool. By default, no tracing is applied. Use WithTracerProvider to enable OTel-traced queries. DSN format: user:pas

NewPageResult computes PageResult from a clamped Page and a total count.

NewReporter registers the service-level metric instruments on the provided meter.

NewSharedResource creates a SharedResource with the required logger and optional observability concerns. Without any options, tracing and metrics are

NewSharedResource creates a SharedResource with the required logger and optional observability concerns. Without any options, tracing is disabled.

Offset derives the SQL OFFSET value for this page.

ParseDSN parses a PostgreSQL DSN into a DBConfig.

RecordRequest increments the request counter with the provided attributes. Avoid high-cardinality attributes (user IDs, session IDs) to prevent metric

RegisterV1Routes registers all v1 API routes on the provided router. Route layout: - /api/v1/examples GET, POST (auth required) - /api/v1/

StartSpan is a convenience helper that starts a named span on the global tracer. The caller is responsible for calling span.End(). ctx, span := trac

WithCallerSkip returns a new logger with an adjusted caller frame offset. Use this when wrapping ZerologLogger in another logger type.

WithClaimsParserTTL overrides the default token TTL.

WithHost returns a new logger with the host field set.

WithMeter enables runtime metrics collection on the HTTP server.

WithMeterProvider sets the OTel MeterProvider on the HTTP server.

WithPrettyOutput returns a new logger with human-readable console output. Use this in local development; JSON output is better in production.

WithTracer enables distributed tracing on the HTTP server.

WithTracer enables distributed tracing on the gRPC server.

WithTracerProvider enables OTel tracing on all SQL operations.

applyMigrations runs all up migrations against the given database.

buildLogAttrs marshals request and response with sensitive-field masking applied.

chooseAuthMiddleware selects the right JWT middleware based on config.

findMigrationsDir walks upward from the working directory looking for db/migrations (the project convention).

findProjectRoot walks upward from the working directory looking for go.mod (the project root marker). This avoids brittle hardcoded relative paths tha