internal/

Package cluster implements the per-broadcast origin registry (R17 W3, docs/22 Decision 8): one Kubernetes Lease per broadcast, named gawk-bc-<id>, holder = pod name, annotations carrying the origin's dialable pod address and an originGeneration counter bumped on every claim.

Package config holds the server configuration and its flag/env parsing.

Package hub implements the relay's pub/sub core: a registry of broadcast sessions, where each broadcast has a publisher fanning encoded video out to a small set of subscribers.

Package metrics owns everything Prometheus (R9, docs/13): the base registry (runtime collectors + build info), the hub registry collector, and the transport-layer connection counters.

Package ops serves the plain-TCP HTTP operations endpoint (R9 M1, docs/13): /metrics (Prometheus), /healthz, and /statusz.

Package tlsutil provides the two certificate paths the server supports: ephemeral self-signed dev certificates that Chromium accepts for WebTransport, and file-backed certificates (e.g.

Edge pull (R17 W4, docs/22 Decisions 9/10/12): when a viewer lands on a pod that is not a broadcast's origin, the pod subscribes upstream — dialing the origin's POD IP from the Lease (never the Service VIP: guard 1 against loops) over the same WebTransport wire protocol — and re-ingests everything into a local EDGE hub through the ordinary Publisher surface: datagrams verbatim, keyframe streams byte-identical, so store-and-forward + supersede compose per hop.