internal/

directory
v0.0.0-...-c5f7cd3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 16, 2026 License: AGPL-3.0

Directories

Path Synopsis
Package admin hosts the controller-manager's system-state HTTP surface — a single mux under /admin/* that other subsystems register handlers on for runtime introspection.
Package admin hosts the controller-manager's system-state HTTP surface — a single mux under /admin/* that other subsystems register handlers on for runtime introspection.
invocation
Package invocation backs the Invocation API kind with a ClickHouse read model materialized from a JetStream event stream.
Package invocation backs the Invocation API kind with a ClickHouse read model materialized from a JetStream event stream.
invoke
Package invoke serves the taskagents/{name}/invoke connect subresource: the write-side door the run-task CLI POSTs to.
Package invoke serves the taskagents/{name}/invoke connect subresource: the write-side door the run-task CLI POSTs to.
telemetry
Package telemetry serves the read API for an agent's OTel logs and traces: the taskagents/{name}/{logs,traces} and daemonagents/{name}/{logs,traces} connect subresources.
Package telemetry serves the read API for an agent's OTel logs and traces: the taskagents/{name}/{logs,traces} and daemonagents/{name}/{logs,traces} connect subresources.
Package certprovider implements the envoy.service.tls.v3.
Package certprovider implements the envoy.service.tls.v3.
Package chwriter persists OTLP logs and traces received by the controller-manager into the embedded ClickHouse engine (internal/clickhouse) using the ch-go columnar driver.
Package chwriter persists OTLP logs and traces received by the controller-manager into the embedded ClickHouse engine (internal/clickhouse) using the ch-go columnar driver.
Package clickhouse supervises an embedded clickhouse-server subprocess inside the controller-manager container.
Package clickhouse supervises an embedded clickhouse-server subprocess inside the controller-manager container.
Package cloudevents builds CloudEvents (CNCF) attribute sets for TaskAgent dispatches.
Package cloudevents builds CloudEvents (CNCF) attribute sets for TaskAgent dispatches.
cmd
Package cmd implements the `clrk` CLI built on top of cobra.
Package cmd implements the `clrk` CLI built on top of cobra.
devagents
Package devagents tracks the live state of TaskAgent and DaemonAgent objects in the dev cluster and rolls up per-agent telemetry from the in-process OTLP receiver.
Package devagents tracks the live state of TaskAgent and DaemonAgent objects in the dev cluster and rolls up per-agent telemetry from the in-process OTLP receiver.
devotel
Package devotel implements an in-process OTLP/HTTP receiver that `clrk dev` runs to capture egress ext_proc telemetry without having to bundle a real otel-collector container.
Package devotel implements an in-process OTLP/HTTP receiver that `clrk dev` runs to capture egress ext_proc telemetry without having to bundle a real otel-collector container.
devtui
Package devtui renders the live status of `clrk dev` (agents, k3s, controller-manager, workers) and their per-component logs in a Bubble Tea TUI.
Package devtui renders the live status of `clrk dev` (agents, k3s, controller-manager, workers) and their per-component logs in a Bubble Tea TUI.
spangraph
Package spangraph renders OTLP spans as a lazygit-style hierarchy graph: each trace drawn as a tree by parent/child with colored lanes, a status-colored node per span, a compact metadata tail, and a detail block (attributes plus event bodies) the caller expands or collapses for the whole graph at once via a global expand level.
Package spangraph renders OTLP spans as a lazygit-style hierarchy graph: each trace drawn as a tree by parent/child with colored lanes, a status-colored node per span, a compact metadata tail, and a detail block (attributes plus event bodies) the caller expands or collapses for the whole graph at once via a global expand level.
Package crds embeds the upstream Gateway API and Envoy Gateway CRD bundles and applies them via server-side apply, replacing the `kubectl apply -f https://...` step that the dev driver used to run.
Package crds embeds the upstream Gateway API and Envoy Gateway CRD bundles and applies them via server-side apply, replacing the `kubectl apply -f https://...` step that the dev driver used to run.
Package drivers orchestrates the docker-side state of `clrk dev`: the shared bridge network the k3d cluster + local registry sit on, and the k3d-library-driven cluster controller that brings them up.
Package drivers orchestrates the docker-side state of `clrk dev`: the shared bridge network the k3d cluster + local registry sit on, and the k3d-library-driven cluster controller that brings them up.
Package eg pins the upstream Envoy Gateway release this clrk build is compatible with.
Package eg pins the upstream Envoy Gateway release this clrk build is compatible with.
Package egcontrolplane spawns and supervises the upstream `envoy-gateway server` binary as a child of clrk-controller-manager.
Package egcontrolplane spawns and supervises the upstream `envoy-gateway server` binary as a child of clrk-controller-manager.
Package egextension implements the Envoy Gateway extension server that rewrites xDS resources on the way out of EG's translator.
Package egextension implements the Envoy Gateway extension server that rewrites xDS resources on the way out of EG's translator.
Package egidentity carries the EgressGateway identity from a calling Envoy proxy to the controller-manager's gRPC services (certprovider, ext_proc) over the HTTP/2 :authority pseudo-header.
Package egidentity carries the EgressGateway identity from a calling Envoy proxy to the controller-manager's gRPC services (certprovider, ext_proc) over the HTTP/2 :authority pseudo-header.
Package egress implements CRD-driven egress routing and policy enforcement for sandbox network traffic.
Package egress implements CRD-driven egress routing and policy enforcement for sandbox network traffic.
proxyproto
Package proxyproto encodes PROXY protocol v2 frames with clrk-specific TLVs that carry agent identity into the egress data plane.
Package proxyproto encodes PROXY protocol v2 frames with clrk-specific TLVs that carry agent identity into the egress data plane.
Network ext_proc server.
Network ext_proc server.
awssigv4
Package awssigv4 implements AWS Signature Version 4 request signing for credential injection at the egress proxy.
Package awssigv4 implements AWS Signature Version 4 request signing for credential injection at the egress proxy.
ingress
Package ingress implements the TaskAgent ingress ext_proc filter.
Package ingress implements the TaskAgent ingress ext_proc filter.
invocationctx
Package invocationctx is the controller-manager-local map that carries a TaskAgent invocation's W3C trace parent context from the ingress edge to every outbound LLM/MCP call the agent makes.
Package invocationctx is the controller-manager-local map that carries a TaskAgent invocation's W3C trace parent context from the ingress edge to every outbound LLM/MCP call the agent makes.
jsonx
Package jsonx pins the egress data path to a single JSON engine: bytedance/sonic in std-compatible mode.
Package jsonx pins the egress data path to a single JSON engine: bytedance/sonic in std-compatible mode.
llmcall
Package llmcall defines clrk's canonical intermediate representation (IR) for LLM API traffic and the provider registry that converts wire schemas (Anthropic, OpenAI, Google, ...) to and from it.
Package llmcall defines clrk's canonical intermediate representation (IR) for LLM API traffic and the provider registry that converts wire schemas (Anthropic, OpenAI, Google, ...) to and from it.
llmcall/providers/all
Package all registers every built-in llmcall provider via blank imports.
Package all registers every built-in llmcall provider via blank imports.
llmcall/providers/anthropic
Package anthropic is the llmcall provider plugin for api.anthropic.com (the Anthropic Messages API).
Package anthropic is the llmcall provider plugin for api.anthropic.com (the Anthropic Messages API).
llmcall/providers/azureopenai
Package azureopenai is the llmcall provider plugin for Azure OpenAI (*.openai.azure.com).
Package azureopenai is the llmcall provider plugin for Azure OpenAI (*.openai.azure.com).
llmcall/providers/bedrock
Package bedrock is the llmcall provider plugin for AWS Bedrock's Converse API (bedrock-runtime.<region>.amazonaws.com).
Package bedrock is the llmcall provider plugin for AWS Bedrock's Converse API (bedrock-runtime.<region>.amazonaws.com).
llmcall/providers/google
Package google is the llmcall provider plugin for generativelanguage.googleapis.com (Google's consumer Gemini API; "google_genai" in OTel gen_ai semconv).
Package google is the llmcall provider plugin for generativelanguage.googleapis.com (Google's consumer Gemini API; "google_genai" in OTel gen_ai semconv).
llmcall/providers/openai
Package openai is the llmcall provider plugin for api.openai.com (the OpenAI Chat Completions API surface).
Package openai is the llmcall provider plugin for api.openai.com (the OpenAI Chat Completions API surface).
parsers
Package parsers extracts AI-provider-specific facts from buffered HTTP request/response pairs captured by ext_proc.
Package parsers extracts AI-provider-specific facts from buffered HTTP request/response pairs captured by ext_proc.
tracectx
Package tracectx is the shared W3C trace-context utility used by both the ingress and egress ext_proc filters: it owns the singleton TextMapPropagator, the sensitive-header redaction list, and the helpers that extract a parent context from inbound headers / build a child traceparent for outbound injection.
Package tracectx is the shared W3C trace-context utility used by both the ingress and egress ext_proc filters: it owns the singleton TextMapPropagator, the sensitive-header redaction list, and the helpers that extract a parent context from inbound headers / build a child traceparent for outbound injection.
Package healthcheck maintains the controller-manager's view of every worker pod's routing state and exposes Pick for the ingress ext_proc to choose a per-execution worker.
Package healthcheck maintains the controller-manager's view of every worker pod's routing state and exposes Pick for the ingress ext_proc to choose a per-execution worker.
Package install holds the shared control-plane bootstrap engine used by both `clrk dev` (against a local k3d cluster) and `clrk install`/`clrk upgrade` (against a customer's existing cluster).
Package install holds the shared control-plane bootstrap engine used by both `clrk dev` (against a local k3d cluster) and `clrk install`/`clrk upgrade` (against a customer's existing cluster).
Package invevent is the shared JetStream pub/sub layer for Invocation lifecycle events.
Package invevent is the shared JetStream pub/sub layer for Invocation lifecycle events.
Package llmroute holds the LLM-rule identity and candidate-resolution logic shared between the EG extension server (which synthesizes the per-rule Envoy routes and multi-endpoint clusters) and the egress ext_proc (which pins matched requests onto those routes and adapts each upstream attempt).
Package llmroute holds the LLM-rule identity and candidate-resolution logic shared between the EG extension server (which synthesizes the per-rule Envoy routes and multi-endpoint clusters) and the egress ext_proc (which pins matched requests onto those routes and adapts each upstream attempt).
Package nats embeds a nats-server with JetStream enabled inside the controller-manager so workers and in-process producers can publish and subscribe to Invocation lifecycle events without standing up a separate NATS deployment.
Package nats embeds a nats-server with JetStream enabled inside the controller-manager so workers and in-process producers can publish and subscribe to Invocation lifecycle events without standing up a separate NATS deployment.
Package otelemit is the shared OTLP/HTTP TracerProvider+LoggerProvider bootstrap used by both the controller-manager (extproc capture sink) and the worker (sandbox/egress events).
Package otelemit is the shared OTLP/HTTP TracerProvider+LoggerProvider bootstrap used by both the controller-manager (extproc capture sink) and the worker (sandbox/egress events).
Package otelforward re-exports OTLP/HTTP signal bytes that the cm OTLP receiver captured to a customer-configured external endpoint.
Package otelforward re-exports OTLP/HTTP signal bytes that the cm OTLP receiver captured to a customer-configured external endpoint.
Package otelreceiver is the controller-manager's OTLP/HTTP receiver and the home of OTLP/protobuf decode helpers shared with the `clrk dev` TUI receiver in internal/cmd/devotel.
Package otelreceiver is the controller-manager's OTLP/HTTP receiver and the home of OTLP/protobuf decode helpers shared with the `clrk dev` TUI receiver in internal/cmd/devotel.
Package ports holds TCP/gRPC port and resource-name constants shared across the worker, the controller, and the clrk CLI.
Package ports holds TCP/gRPC port and resource-name constants shared across the worker, the controller, and the clrk CLI.
sandbox
metadata
Package metadata implements the IMDS-style HTTP service exposed inside each sandbox.
Package metadata implements the IMDS-style HTTP service exposed inside each sandbox.
The DNS cache is pure Go and shared between the Sentry-side UDP forwarder (writer) and the Sentry-side TCP forwarder (reader).
The DNS cache is pure Go and shared between the Sentry-side UDP forwarder (writer) and the Sentry-side TCP forwarder (reader).
Package version exposes the clrk binary's own build version.
Package version exposes the clrk binary's own build version.
Package worker implements the sandbox runtime for CLRK worker pods.
Package worker implements the sandbox runtime for CLRK worker pods.
Package workerlog holds the on-disk layout of per-agent stdio logs teed by the worker.
Package workerlog holds the on-disk layout of per-agent stdio logs teed by the worker.
Package workerpod assembles the worker pod template that hosts agent sandboxes.
Package workerpod assembles the worker pod template that hosts agent sandboxes.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL