internal/

Package clientip resolves the real client IP of an HTTP request.

Package comm owns the inter-session communication subsystem: authenticated message passing between AI sessions on the same or different machines (design decision D9; full contract in docs/COMM.md).

Package commserver exposes the inter-session communication subsystem (internal/comm) as an MCP endpoint, separate from the knowledge base's.

Package embed provides Ken's pluggable embedding SPI for semantic search.

Package health reports Ken's readiness as a small set of components (the data dir is writable, the database answers a ping), in the Actuator-style JSON shape {"status":"UP","components":{…}}.

Package i18n gives Ken's human web UI runtime-reloadable, drop-in translations.

Package importer parses the user's flat Markdown "memory" files (YAML frontmatter: name/description/metadata.type; body with **Why:** / **How to apply:** lines and [[wikilinks]]) into a neutral Memory shape for migration into ken.

Package lang detects the dominant human language of prose, for Ken's curation-language guardrail (a curator can only promote what they can read).

Package mcpserver builds Ken's Model Context Protocol server: the AI-facing interface (kb_search, kb_get, kb_propose_enhancement, kb_save, kb_flag_stale) over streamable HTTP, behind scoped bearer-token auth.

Package metrics is Ken's tiny, dependency-free Prometheus exposition: a handful of atomic counters plus on-scrape gauge collectors, rendered as text/plain exposition format.

Package model holds Ken's domain types, shared across the store, MCP, and web layers.

Package oauth implements the stateless endpoints of Ken's optional OAuth 2.1 authorization server: discovery metadata (RFC 8414 + RFC 9728), dynamic client registration (RFC 7591), and the token endpoint (authorization_code + refresh_token, PKCE-S256).

Package passwd hashes and verifies passwords with Argon2id, producing and consuming standard PHC strings ($argon2id$v=19$m=..,t=..,p=..$salt$hash).

Package ratelimit is Ken's application-layer abuse defense: a per-IP token-bucket "first filter" (allowlist bypass, auto-block for repeat offenders, 429 + Retry-After otherwise) plus a reusable per-key bucket the MCP layer uses for per-token limits.

Package settings holds Ken's operator-editable runtime configuration.

Package store owns Ken's embedded SQLite database: schema migrations plus the search/get queries.

Package version carries the build version of Ken and the location of its Corresponding Source (the AGPL-3.0 §13 network-interaction obligation).

Package web serves Ken's human-facing UI: the first-run setup wizard, login (Argon2id + server-side session + CSRF + per-IP login guard), search/browse, and the proposal review queue (diff + promote/reject).

Package webtls resolves and runs Ken's TLS posture.