internal/

Package antipattern is the scaffold-currency "born-broken app" gate.

Package api is the (thin) HTTP client for the Civitai Apps surface.

Package auth bridges the persisted config and the api.TokenSource contract: it yields a Bearer token for the api client, refreshing device-flow OAuth tokens (and persisting the rotated refresh token) when they expire or after a 401.

Package cmd wires the cobra command tree for the civitai CLI.

Package config handles the CLI's persisted configuration (API base URL and token) via Viper.

Package devtunnel holds the transport-level pieces of `civitai app dev-tunnel`: the EPHEMERAL SSH keypair the CLI mints per session, the reverse-tunnel dialer (`ssh -R` to the sish endpoint) behind an interface, and a small clock/timer seam — so the command's lifecycle (mint → tunnel → teardown on signal / idle) is unit-testable without a live server or a real network.

Package dnsprobe resolves a hostname via DNS-over-HTTPS (DoH) to Cloudflare, bypassing the OS/local resolver, and builds an *http.Client that dials the DoH-resolved IP for that host.

Package manifest holds the App manifest filename constant and a lightweight reader for the fields the CLI needs (slug/version/name).

Package pkgzip packages an App project directory into the canonical ZIP the platform build recipe expects: the SOURCE tree (manifest + src + build config), with build artifacts and VCS/dependency dirs excluded.

Shared @civitai/* scaffold-pin logic.

Package ui is the single, cohesive presentation layer for the civitai CLI.

Package validate checks a block.manifest.json against the vendored JSON Schema plus structural project checks (manifest at root, build coherence).