internal/

Package autolink rewrites cross-references in rendered HTML: #N and !N to the repository's issues and merge requests, owner/name#N (and !N) across repositories, and @user to owner pages.

Package ci parses .gitbay/ci.yml, the per-repo build configuration:

Package cliconfig manages the client-side configuration: named forge instances at ~/.config/forge/config.toml, and parsing of origin remote URLs so commands run inside a clone need no --repo argument.

Package config loads and validates the gitbayd server configuration.

Package control implements the forge control commands executed over SSH.

Package gitd implements the anonymous git:// protocol listener.

Package gitutil wraps the system git binary.

Package hookd is the unix-socket bridge between git hooks and the daemon.

Package httpd serves the HTTP listener: anonymous smart-HTTP git reads for public repositories, and (from M5) the web UI.

Package lfs implements Git LFS server storage and authorization.

Package mail sends transactional email over SMTP: verification codes and invites.

Package mirror synchronizes repositories with foreign remotes: push mirrors propagate local refs outward after each receive, pull mirrors keep a local copy fresh from an upstream.

Package notify drains the notification queue: activity mail with the same bounded-retry discipline as webhook delivery, so a flaky relay delays feedback instead of losing it.

Package policy holds access-control and naming rules.

Package protocol defines the wire contract shared by the CLI and server: exit codes, the JSON response envelope, and (later) the SSH command tokenizer.

Package sig verifies OpenPGP and SSHSIG signatures on git commits and tags, and maps them to the forge's trust states.

Package sshd implements the embedded SSH listener: public-key auth against registered keys, then dispatch to git transport or control commands.

Package store owns SQLite access and schema migrations.

Package web holds the server-rendered templates and static assets for the read-only UI.

Package webhook delivers events to registered endpoints: HMAC-signed JSON POSTs with bounded retries, exponential backoff, and dead-lettering.