internal/

directory
v0.0.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 17, 2026 License: MIT

Directories

Path Synopsis
app
doctor
Package doctor is the application-layer service behind `pf doctor` - devenir une façade").
Package doctor is the application-layer service behind `pf doctor` - devenir une façade").
migration
Package migration contains application orchestration for migrations.
Package migration contains application orchestration for migrations.
projectinit
Package projectinit owns the application use-case for scaffolding a local Platform Factory project.
Package projectinit owns the application use-case for scaffolding a local Platform Factory project.
sbom
Package sbom is the application-layer service behind `pf sbom` - extraction internal/app/doctor already did for `pf doctor`.
Package sbom is the application-layer service behind `pf sbom` - extraction internal/app/doctor already did for `pf doctor`.
verify
Package verify is the application-layer service behind internal/app/doctor and internal/app/sbom already did for `pf doctor` and `pf sbom`.
Package verify is the application-layer service behind internal/app/doctor and internal/app/sbom already did for `pf doctor` and `pf sbom`.
Package archtest provides executable checks for repository dependency boundaries.
Package archtest provides executable checks for repository dependency boundaries.
Package assemble bridges a pipeline's declared, cached stage outputs to a real OCI image layout.
Package assemble bridges a pipeline's declared, cached stage outputs to a real OCI image layout.
Package atomicfile publishes complete files without exposing partial writes.
Package atomicfile publishes complete files without exposing partial writes.
Package attestation creates and verifies project-owned DSSE envelopes.
Package attestation creates and verifies project-owned DSSE envelopes.
Package budget provides resource budget tracking and enforcement for pipeline execution and other long-running operations.
Package budget provides resource budget tracking and enforcement for pipeline execution and other long-running operations.
Package cache provides the concrete implementation of core.CacheStore interface.
Package cache provides the concrete implementation of core.CacheStore interface.
Package control coordinates workers and leases independently of transport.
Package control coordinates workers and leases independently of transport.
Package core defines the abstract interfaces for Platform Factory's domain.
Package core defines the abstract interfaces for Platform Factory's domain.
Package detect classifies application inputs without executing them.
Package detect classifies application inputs without executing them.
Package errors provides a common typed error model for all platform-factory components.
Package errors provides a common typed error model for all platform-factory components.
Package executor runs a single validated pipeline stage as a local OS process.
Package executor runs a single validated pipeline stage as a local OS process.
Package guesttransport implements the small authenticated control protocol shared by native VMM backends and the in-guest agent.
Package guesttransport implements the small authenticated control protocol shared by native VMM backends and the in-guest agent.
hvf
Package vmm's darwin backend drives Apple's Virtualization.framework directly (vz_bridge_darwin.{h,m}) - no QEMU, no other third-party VMM.
Package vmm's darwin backend drives Apple's Virtualization.framework directly (vz_bridge_darwin.{h,m}) - no QEMU, no other third-party VMM.
kvm
sandbox
Package sandbox provides VMM sandboxing and isolation mechanisms.
Package sandbox provides VMM sandboxing and isolation mechanisms.
virtio
Package virtio provides virtio block device.
Package virtio provides virtio block device.
whpx
Package vmm's windows backend drives the Windows Hypervisor Platform (WHP, WinHvPlatform.dll) directly via syscall - no cgo, no external module, matching this repository's minimal-dependency convention.
Package vmm's windows backend drives the Windows Hypervisor Platform (WHP, WinHvPlatform.dll) directly via syscall - no cgo, no external module, matching this repository's minimal-dependency convention.
Package idempotency persists crash-safe operation outcomes.
Package idempotency persists crash-safe operation outcomes.
Package layout inspects and strictly verifies OCI image layouts.
Package layout inspects and strictly verifies OCI image layouts.
Package marketplace implements a Go-modules-inspired plugin marketplace: plugins are never hosted directly, only discovered.
Package marketplace implements a Go-modules-inspired plugin marketplace: plugins are never hosted directly, only discovered.
mcp
Package mcp implements a native Model Context Protocol server for platform-factory: a stdio JSON-RPC transport (protocol.go, server.go), a tool/resource registry (tools.go, resources.go), and typed error mapping (errors.go), with the actual platform-factory-specific tools implemented in the project/, plugins/, core/, git/, and agent/ subpackages.
Package mcp implements a native Model Context Protocol server for platform-factory: a stdio JSON-RPC transport (protocol.go, server.go), a tool/resource registry (tools.go, resources.go), and typed error mapping (errors.go), with the actual platform-factory-specific tools implemented in the project/, plugins/, core/, git/, and agent/ subpackages.
agent
Package agent implements the MCP server's opt-in, server-embedded LLM orchestration: pf_plugin_modify, the free-text mode of pf_core_patch, and pf_implement.
Package agent implements the MCP server's opt-in, server-embedded LLM orchestration: pf_plugin_modify, the free-text mode of pf_core_patch, and pf_implement.
core
Package core implements the pf_core_inspect/pf_core_validate/ pf_core_patch tools and the pf://core, pf://core/packages resources: a read-only map of this repository's internal/ domain packages plus bounded, scoped write primitives for proposing a core change.
Package core implements the pf_core_inspect/pf_core_validate/ pf_core_patch tools and the pf://core, pf://core/packages resources: a read-only map of this repository's internal/ domain packages plus bounded, scoped write primitives for proposing a core change.
docutil
Package docutil reads a Go package's doc comment straight off disk - the first line of the comment block immediately preceding "package NAME" in one of its non-test source files - without a full go/doc parse.
Package docutil reads a Go package's doc comment straight off disk - the first line of the comment block immediately preceding "package NAME" in one of its non-test source files - without a full go/doc parse.
git
Package git provides the MCP server's only path to git/gh: typed, argument-array operations (status, branch, commit, push, PR) confined to one repository directory, mirroring internal/marketplace/sync.go's existing gitEnv/runGit hardening.
Package git provides the MCP server's only path to git/gh: typed, argument-array operations (status, branch, commit, push, PR) confined to one repository directory, mirroring internal/marketplace/sync.go's existing gitEnv/runGit hardening.
plugins
Package plugins implements the pf_plugin_* tools and the pf://plugins, pf://plugins/schema, pf://marketplace resources: a read-only and creation interface onto this repository's own plugins/ directory.
Package plugins implements the pf_plugin_* tools and the pf://plugins, pf://plugins/schema, pf://marketplace resources: a read-only and creation interface onto this repository's own plugins/ directory.
product
Package product exposes platform-factory's own end-user product commands (init, build, publish, deploy, status, doctor, detect, verify/inspect) as MCP tools - the CLI capability an MCP client uses this server for beyond just inspecting/modifying platform-factory's own source, letting it drive the same "build and ship a project" workflow a human would from a terminal.
Package product exposes platform-factory's own end-user product commands (init, build, publish, deploy, status, doctor, detect, verify/inspect) as MCP tools - the CLI capability an MCP client uses this server for beyond just inspecting/modifying platform-factory's own source, letting it drive the same "build and ship a project" workflow a human would from a terminal.
project
Package project implements the pf_project_inspect tool and the pf://project / pf://architecture resources: a read-only summary of this repository's identity (module, version, git state) and its major components.
Package project implements the pf_project_inspect tool and the pf://project / pf://architecture resources: a read-only summary of this repository's identity (module, version, git state) and its major components.
Package microvm owns the contracts used by the in-process microVM domain.
Package microvm owns the contracts used by the in-process microVM domain.
forward
Package forward is a minimal host-port -> guest-port TCP relay: it accepts connections on a host listener and splices each one to a freshly dialed connection on the guest side.
Package forward is a minimal host-port -> guest-port TCP relay: it accepts connections on a host listener and splices each one to a freshly dialed connection on the guest side.
Package migration owns the private migration domain model and invariants.
Package migration owns the private migration domain model and invariants.
Package mtls creates conservative TLS configurations for service clients and servers.
Package mtls creates conservative TLS configurations for service clients and servers.
Package networking validates runtime network configuration without executing a container engine, QEMU, or a Kubernetes client.
Package networking validates runtime network configuration without executing a container engine, QEMU, or a Kubernetes client.
Package observability provides structured logging, metrics, and tracing.
Package observability provides structured logging, metrics, and tracing.
Package oci writes small, deterministic OCI image layouts without a daemon.
Package oci writes small, deterministic OCI image layouts without a daemon.
Package ociruntime implements the persistent OCI lifecycle used by container engines to run MicroVM workloads.
Package ociruntime implements the persistent OCI lifecycle used by container engines to run MicroVM workloads.
Package pipeline provides checkpoint and resume functionality for pipeline execution.
Package pipeline provides checkpoint and resume functionality for pipeline execution.
Package placement selects pending leases by platform, capability, cache locality, and priority.
Package placement selects pending leases by platform, capability, cache locality, and priority.
Package plugin is the host side of the out-of-process plugin boundary: it launches plugin subprocesses, performs the handshake, verifies signed digest-pinned manifests and discovers installed plugins.
Package plugin is the host side of the out-of-process plugin boundary: it launches plugin subprocesses, performs the handshake, verifies signed digest-pinned manifests and discovers installed plugins.
Package policy evaluates the minimal, versioned native publication policy.
Package policy evaluates the minimal, versioned native publication policy.
Package project loads and validates declarative, language-neutral project image configuration.
Package project loads and validates declarative, language-neutral project image configuration.
Package provenance builds native build provenance records: the complete pipeline DAG, its declared inputs, resolved output digests, and caller-supplied build metadata.
Package provenance builds native build provenance records: the complete pipeline DAG, its declared inputs, resolved output digests, and caller-supplied build metadata.
Package publicationtarget defines deterministic, side-effect-free target contracts shared by the CLI and the public conformance suite.
Package publicationtarget defines deterministic, side-effect-free target contracts shared by the CLI and the public conformance suite.
Package quota provides tenant-level resource quotas, priorities, and fairness for the pipeline scheduler and distributed execution system.
Package quota provides tenant-level resource quotas, priorities, and fairness for the pipeline scheduler and distributed execution system.
Package registry implements the project-owned OCI Distribution client.
Package registry implements the project-owned OCI Distribution client.
Package rootfs converts a verified local OCI image layout into a safe, deterministic filesystem tree without invoking external tools.
Package rootfs converts a verified local OCI image layout into a safe, deterministic filesystem tree without invoking external tools.
Package sbom generates a native software bill of materials: an inventory of local files correlated with their detected kind and ELF dependencies via internal/detect.
Package sbom generates a native software bill of materials: an inventory of local files correlated with their detected kind and ELF dependencies via internal/detect.
Package scheduler provides pipeline graph validation and analysis.
Package scheduler provides pipeline graph validation and analysis.
Package signing signs build artifacts with Ed25519 and verifies those signatures, using Go's native crypto/ed25519 rather than an external signing CLI.
Package signing signs build artifacts with Ed25519 and verifies those signatures, using Go's native crypto/ed25519 rather than an external signing CLI.
Package strictjson decodes one JSON value and rejects schema drift.
Package strictjson decodes one JSON value and rejects schema drift.
Package vmdisk identifies legacy virtual-machine disk image formats by header inspection only.
Package vmdisk identifies legacy virtual-machine disk image formats by header inspection only.
Package workloadstate is the durable counterpart to internal/core.RuntimeState/TransitionTo: the state machine itself is a pure, in-memory transition validator with no persistence opinion (see statemachine.go's own package doc), which is correct for a library but leaves nothing for a CLI command - whose process exits between every invocation - to read a workload's last known Phase back from before calling TransitionTo again.
Package workloadstate is the durable counterpart to internal/core.RuntimeState/TransitionTo: the state machine itself is a pure, in-memory transition validator with no persistence opinion (see statemachine.go's own package doc), which is correct for a library but leaves nothing for a CLI command - whose process exits between every invocation - to read a workload's last known Phase back from before calling TransitionTo again.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL