Directories
¶
| Path | Synopsis |
|---|---|
|
Package api wires Wardyn's control-plane REST surface (the wardynd binary).
|
Package api wires Wardyn's control-plane REST surface (the wardynd binary). |
|
Package approval implements the ApprovalRequest FSM service.
|
Package approval implements the ApprovalRequest FSM service. |
|
Package audit defines the append-only audit contract.
|
Package audit defines the append-only audit contract. |
|
sinks
Package sinks provides production audit.Sink implementations (syslog, webhook, file) plus a Fanout multiplexer and config wiring.
|
Package sinks provides production audit.Sink implementations (syslog, webhook, file) plus a Fanout multiplexer and config wiring. |
|
auth
|
|
|
oidc
Package oidc implements human SSO for Wardyn via OpenID Connect (Dex-compatible).
|
Package oidc implements human SSO for Wardyn via OpenID Connect (Dex-compatible). |
|
Package broker implements Wardyn's token broker: the ONLY component that holds long-lived secrets and the sole issuer of short-lived run credentials.
|
Package broker implements Wardyn's token broker: the ONLY component that holds long-lived secrets and the sole issuer of short-lived run credentials. |
|
Package cliutil holds tiny env/flag helpers shared by Wardyn's cmd/* main packages (each cmd is its own `main` package, so these can't just live in one of them without the others importing "main"), plus ScrubChildEnv, the one env denylist shared by every host-exec'd third-party CLI child.
|
Package cliutil holds tiny env/flag helpers shared by Wardyn's cmd/* main packages (each cmd is its own `main` package, so these can't just live in one of them without the others importing "main"), plus ScrubChildEnv, the one env denylist shared by every host-exec'd third-party CLI child. |
|
Package component provides the shared registry that backs Wardyn's pluggable component seams (identity provider, secret store, recording store, policy evaluator, …).
|
Package component provides the shared registry that backs Wardyn's pluggable component seams (identity provider, secret store, recording store, policy evaluator, …). |
|
Package composer turns a natural-language task description into a PROPOSED Wardyn run setup — the same {run, inline_policy} shape the New Run wizard emits — that a human reviews and approves before launch.
|
Package composer turns a natural-language task description into a PROPOSED Wardyn run setup — the same {run, inline_policy} shape the New Run wizard emits — that a human reviews and approves before launch. |
|
backends
Package backends constructs composer.Composer implementations from operator config (the registry of LLM backends).
|
Package backends constructs composer.Composer implementations from operator config (the registry of LLM backends). |
|
backends/anthropic
Package anthropic implements the composer.Composer backend that drives Anthropic's Messages API (first-party API or Amazon Bedrock) to produce a Wardyn run proposal.
|
Package anthropic implements the composer.Composer backend that drives Anthropic's Messages API (first-party API or Amazon Bedrock) to produce a Wardyn run proposal. |
|
backends/cli
Package cli implements a composer.Composer backed by the operator's resident coding-agent CLI (Claude Code or Codex) running under its own logged-in SUBSCRIPTION — no API key is minted or passed.
|
Package cli implements a composer.Composer backed by the operator's resident coding-agent CLI (Claude Code or Codex) running under its own logged-in SUBSCRIPTION — no API key is minted or passed. |
|
backends/composertest
Package composertest holds fixtures shared by the cli, openai, and anthropic backend test suites: a schema-valid proposal JSON blob, a representative ComposeRequest, and the common Proposal assertions every backend's happy-path test needs.
|
Package composertest holds fixtures shared by the cli, openai, and anthropic backend test suites: a schema-valid proposal JSON blob, a representative ComposeRequest, and the common Proposal assertions every backend's happy-path test needs. |
|
backends/openai
Package openai implements the Wardyn Run Composer backend that talks to OpenAI-wire Chat Completions APIs.
|
Package openai implements the Wardyn Run Composer backend that talks to OpenAI-wire Chat Completions APIs. |
|
backends/sandbox
Package sandbox implements a composer.Composer that runs the REAL `claude` binary INSIDE a governed one-shot Wardyn sandbox, credentialed by the Wardyn-managed subscription token injected PROXY-SIDE (never resident).
|
Package sandbox implements a composer.Composer that runs the REAL `claude` binary INSIDE a governed one-shot Wardyn sandbox, credentialed by the Wardyn-managed subscription token injected PROXY-SIDE (never resident). |
|
backends/transport
Package transport provides a hardened, governed HTTP client for the composer's OWN outbound LLM API egress — the control-plane calls each networked composer backend makes to a third-party model provider (Anthropic, OpenAI, Azure, Bedrock, …).
|
Package transport provides a hardened, governed HTTP client for the composer's OWN outbound LLM API egress — the control-plane calls each networked composer backend makes to a third-party model provider (Anthropic, OpenAI, Azure, Bedrock, …). |
|
Package contentscan implements Wardyn's OPTIONAL, off-by-default outbound content-inspection layer ("egress content inspection" / inadvertent-leak guardrail).
|
Package contentscan implements Wardyn's OPTIONAL, off-by-default outbound content-inspection layer ("egress content inspection" / inadvertent-leak guardrail). |
|
Package db provides Postgres connection bootstrapping and schema migration for the Wardyn control plane.
|
Package db provides Postgres connection bootstrapping and schema migration for the Wardyn control plane. |
|
Package egress defines the L2 proxy decision model shared by cmd/wardyn-proxy and the control plane's policy/approval wiring.
|
Package egress defines the L2 proxy decision model shared by cmd/wardyn-proxy and the control plane's policy/approval wiring. |
|
evaluatortest
Package evaluatortest provides a reusable conformance suite for any egress.Evaluator implementation, so the blessed default (builtin) and a future alternate (OPA/Cedar) are held to the identical policy-verdict contract.
|
Package evaluatortest provides a reusable conformance suite for any egress.Evaluator implementation, so the blessed default (builtin) and a future alternate (OPA/Cedar) are held to the identical policy-verdict contract. |
|
proxy
Package proxy implements the L2 per-workspace egress sidecar (wardyn-proxy): an HTTP forward proxy that enforces the internal/egress decision model (default-deny domain allowlist, method rules, first-use approval), streams decision logs, and injects credentials proxy-side.
|
Package proxy implements the L2 per-workspace egress sidecar (wardyn-proxy): an HTTP forward proxy that enforces the internal/egress decision model (default-deny domain allowlist, method rules, first-use approval), streams decision logs, and injects credentials proxy-side. |
|
Package gitremote deterministically detects the git remotes configured in a local directory tree, so Wardyn can ground a composed run's GitHub grant on the workspace's ACTUAL remotes rather than an LLM guess.
|
Package gitremote deterministically detects the git remotes configured in a local directory tree, so Wardyn can ground a composed run's GitHub grant on the workspace's ACTUAL remotes rather than an LLM guess. |
|
Package groundtruth maps kernel-level observations (from an eBPF sensor — specifically Tetragon) into Wardyn's append-only audit vocabulary (types.AuditEvent).
|
Package groundtruth maps kernel-level observations (from an eBPF sensor — specifically Tetragon) into Wardyn's append-only audit vocabulary (types.AuditEvent). |
|
Package identity defines the per-run workload identity contract.
|
Package identity defines the per-run workload identity contract. |
|
embedded
Package embedded implements the default, SPIFFE-shaped JWT-SVID identity provider satisfying identity.Provider.
|
Package embedded implements the default, SPIFFE-shaped JWT-SVID identity provider satisfying identity.Provider. |
|
identitytest
Package identitytest provides a reusable conformance suite for any identity.Provider implementation, so the blessed default (embedded) and a future alternate (SPIRE) are held to the identical security contract.
|
Package identitytest provides a reusable conformance suite for any identity.Provider implementation, so the blessed default (embedded) and a future alternate (SPIRE) are held to the identical security contract. |
|
Package ipguard holds the SSRF private/reserved membership test shared by the egress proxy's policy guard (internal/egress/proxy) and the composer transport guard (internal/composer/backends/transport).
|
Package ipguard holds the SSRF private/reserved membership test shared by the egress proxy's policy guard (internal/egress/proxy) and the composer transport guard (internal/composer/backends/transport). |
|
Package lifecycle implements workspace lifecycle automation: the Reaper loop finds RUNNING agent runs that have been idle past their policy's AutoStopAfterSec threshold and stops them, emitting a "run.autostop" audit event for each.
|
Package lifecycle implements workspace lifecycle automation: the Reaper loop finds RUNNING agent runs that have been idle past their policy's AutoStopAfterSec threshold and stops them, emitting a "run.autostop" audit event for each. |
|
Package recording provides storage and HTTP serving of asciicast session recordings produced by wardyn-rec.
|
Package recording provides storage and HTTP serving of asciicast session recordings produced by wardyn-rec. |
|
recordingtest
Package recordingtest provides a reusable conformance suite for any recording.Store implementation.
|
Package recordingtest provides a reusable conformance suite for any recording.Store implementation. |
|
Package recordmode is the deterministic core of Wardyn's "Recording Mode": it OBSERVES what a fully-open (allow-all-egress, broad-grant) run actually used — purely from already-captured audit events — and SYNTHESIZES a tightened, least-privilege RunPolicySpec the operator can review and promote.
|
Package recordmode is the deterministic core of Wardyn's "Recording Mode": it OBSERVES what a fully-open (allow-all-egress, broad-grant) run actually used — purely from already-captured audit events — and SYNTHESIZES a tightened, least-privilege RunPolicySpec the operator can review and promote. |
|
Package runner defines the target-agnostic sandbox lifecycle contract.
|
Package runner defines the target-agnostic sandbox lifecycle contract. |
|
orchestrator
Package orchestrator is the build-tag-free runner.Runner the control plane talks to.
|
Package orchestrator is the build-tag-free runner.Runner the control plane talks to. |
|
substrate
Package substrate defines the confinement-substrate sub-interface: the seam beneath the runner.Runner surface that lets a non-OCI microVM VMM (SmolVM, Firecracker, …) back a Confinement Class alongside the OCI/Docker substrate, without the control plane (or each substrate) re-implementing the runner contract.
|
Package substrate defines the confinement-substrate sub-interface: the seam beneath the runner.Runner surface that lets a non-OCI microVM VMM (SmolVM, Firecracker, …) back a Confinement Class alongside the OCI/Docker substrate, without the control plane (or each substrate) re-implementing the runner contract. |
|
Package secretmask implements Wardyn's output-masking layer for PTY capture and asciicast streams.
|
Package secretmask implements Wardyn's output-masking layer for PTY capture and asciicast streams. |
|
Package secretstore defines the at-rest secret storage contract.
|
Package secretstore defines the at-rest secret storage contract. |
|
pg
Package pg implements secretstore.Store backed by an age-encrypted Postgres column (the `secrets` table in the core schema).
|
Package pg implements secretstore.Store backed by an age-encrypted Postgres column (the `secrets` table in the core schema). |
|
secretstoretest
Package secretstoretest provides a reusable conformance suite for any secretstore.Store implementation.
|
Package secretstoretest provides a reusable conformance suite for any secretstore.Store implementation. |
|
Package setup provides host-environment detection for the first-run setup surface (GET /api/v1/setup/status): which resident coding-agent CLIs are present, and the OS/WSL posture the environment-step copy keys off.
|
Package setup provides host-environment detection for the first-run setup surface (GET /api/v1/setup/status): which resident coding-agent CLIs are present, and the OS/WSL posture the environment-step copy keys off. |
|
Package sidecar holds the small brokered-PUT plumbing shared by Wardyn's in-sandbox result-uploader binaries (wardyn-scan, wardyn-verify): validate WARDYN_PROXY_URL/WARDYN_RUN_ID, build the brokered result URL, and PUT a JSON body.
|
Package sidecar holds the small brokered-PUT plumbing shared by Wardyn's in-sandbox result-uploader binaries (wardyn-scan, wardyn-verify): validate WARDYN_PROXY_URL/WARDYN_RUN_ID, build the brokered result URL, and PUT a JSON body. |
|
Package store provides typed CRUD over the Wardyn schema using pgx/v5.
|
Package store provides typed CRUD over the Wardyn schema using pgx/v5. |
|
Package subscription yields the operator's LIVE Anthropic subscription OAuth access token from the resident ~/.claude credentials, so the egress proxy can inject a fresh token per request instead of the sandbox holding a COPY that goes stale (access-token expiry + refresh-token rotation lock the copy out).
|
Package subscription yields the operator's LIVE Anthropic subscription OAuth access token from the resident ~/.claude credentials, so the egress proxy can inject a fresh token per request instead of the sandbox holding a COPY that goes stale (access-token expiry + refresh-token rotation lock the copy out). |
|
Package types defines Wardyn's core domain vocabulary: the four nouns (AgentRun, RunPolicy, CredentialGrant, ApprovalRequest) plus the audit event shape.
|
Package types defines Wardyn's core domain vocabulary: the four nouns (AgentRun, RunPolicy, CredentialGrant, ApprovalRequest) plus the audit event shape. |
|
Package version holds Wardyn's ONE shipped version string.
|
Package version holds Wardyn's ONE shipped version string. |
|
Package workspacescan deterministically detects a local directory's (or a cloned repo's) development conventions — languages, package managers, implied egress registries, dev-container/Dockerfile presence, tools, and git remotes — so Wardyn can onboard a workspace with a profile grounded in what's ACTUALLY in the tree, not an LLM guess.
|
Package workspacescan deterministically detects a local directory's (or a cloned repo's) development conventions — languages, package managers, implied egress registries, dev-container/Dockerfile presence, tools, and git remotes — so Wardyn can onboard a workspace with a profile grounded in what's ACTUALLY in the tree, not an LLM guess. |
Click to show internal directories.
Click to hide internal directories.