internal/

Package antipattern is the scaffold-currency "born-broken app" gate.

Package appapi is the CLI-internal client for the Civitai App Blocks developer surface: bundle submission, submission status / withdraw, the per-app dev-token and dev-tunnel machinery, the owner-only Forgejo clone info, and the OAuth device-authorization login flow.

Package auth bridges the persisted config and the civitai.TokenSource contract: it yields a Bearer token for the api client, refreshing device-flow OAuth tokens (and persisting the rotated refresh token) when they expire or after a 401.

Package blockproto is the CLI's single authority for the block -> host postMessage contract that scaffolded, SDK-free apps must implement themselves.

Package cmd wires the cobra command tree for the civitai CLI.

Package config handles the CLI's persisted configuration (API base URL and token) via Viper.

Package credscan reads the files `civitai app submit` is ABOUT TO UPLOAD and reports the lines that look like they hold a credential.

Package devtunnel holds the transport-level pieces of `civitai app dev-tunnel`: the EPHEMERAL SSH keypair the CLI mints per session, the reverse-tunnel dialer (`ssh -R` to the sish endpoint) behind an interface, and a small clock/timer seam — so the command's lifecycle (mint → tunnel → teardown on signal / idle) is unit-testable without a live server or a real network.

Package dnsprobe resolves a hostname via DNS-over-HTTPS (DoH) to Cloudflare, bypassing the OS/local resolver, and builds an *http.Client that dials the DoH-resolved IP for that host.

Package genapi is the CLI-internal client for the orchestrator generation graph (the tRPC `orchestrator.*` procedures behind `civitai generate`).

Package manifest holds the App manifest filename constant and a lightweight reader for the fields the CLI needs (slug/version/name).

Package pkgzip packages an App project directory into the canonical ZIP the platform build recipe expects: the SOURCE tree (manifest + src + build config), with build artifacts and VCS/dependency dirs excluded.

Package saferune owns the ONE rule this CLI has about which runes a SERVER-SUPPLIED string may put in front of a user, and nothing else.

Shared @civitai/* scaffold-pin logic.

Package ui is the single, cohesive presentation layer for the civitai CLI.

Package validate checks a block.manifest.json against the vendored JSON Schema plus structural project checks (manifest at root, build coherence).