internal/

Package auth reports credential status for the providers a run uses.

Package checksum sources a sha256 for a value=sha256 follower.

Package command implements the clover CLI: argument parsing and dispatch to the run, lint, and format modes.

Package comment recognises host-language comment syntaxes (#, //, <!-- -->) so directives are found in any text file.

Package config loads and validates Clover's optional YAML configuration.

Package console renders engine progress at the CLI edge.

Package constant holds clover's shared string vocabulary - the literal spellings of directive grammar that appear across more than one package (constraint keywords now; provider names, source selectors, and value kinds as they land).

Package directive scans for the clover: keyword and parses the key=value grammar (quote-on-demand) into an ordered Directive.

Package display formats resolved values for human-facing output.

Package exec schedules markers over the follow-edge dependency DAG: topological order, stable-sorted ready set, cycle detection, capped parallelism.

Package forge holds provider-agnostic helpers shared by forge providers - Gitea/Forgejo today, GitHub Enterprise and self-managed GitLab in future: host parsing, same-origin checks, and OAuth PKCE/Link primitives.

Package httpcache provides a caching http.RoundTripper that sits beneath the providers: they use an ordinary *http.Client and never manage caching themselves.

Package ignore matches paths against the ignore files that apply to them, for use as scan's ignore predicate.

Package infer bridges auto-detection and the provider registry: it decides whether a line Clover recognizes would actually resolve, offline.

Package jq compiles jq programs, so the gojq parse-then-compile pair lives in one place for every caller that queries JSON - the http provider's extractor and the sidecar locator alike.

Package logger centralises configuration of the process-wide clog logger for the CLI, layered on top of conductor's defaults.

Package match holds the Rewriter seam (Locate + Render -> edit-set) and its dispatch table: the smart rewriter plus the action-pin rewriter for SHA-pinned uses: lines.

Package mode implements run, lint, and format over the shared pipeline, differing only in network use and what (if anything) is written.

Package model defines the shared domain types: Directive, Target, Marker (lifecycle), Candidate (rich: Commit/sha256), and Result.

Package oci is a small client for the OCI distribution (registry v2) protocol: listing a repository's tags, resolving a tag's manifest digest, and answering the bearer-token challenge a registry returns on the first unauthenticated request.

Package output defines the detail level of a clover report.

Package pattern is clover's one matching grammar, shared by every directive that accepts a pattern (include/exclude, verify-branch, checksum, find): a value bracketed by / is a strict RE2 regex; any other value is a glob with *, ?, and <placeholders>.

Package pipeline orchestrates the phases (discover -> parse -> validate -> prepare -> execute -> report) and defines the Executor, Mode, and Reporter seams.

Package progress is the engine-facing seam for reporting the live state of a batch of concurrent work - one task per unit (a marker resolving).

Package provider defines the Provider interface, the compiled-in registry (init self-registration), and optional capabilities (Anchorer, Digester, Linker, Committer, BranchChecker, Authenticator).

Package ratelimit provides an http.RoundTripper that respects an API's rate limit headers.

Package regexlit defines clover's /regex/ literal syntax: a value bracketed by slashes is a regular expression, anything else is not.

Package registry is the run-scoped store mapping id -> resolved Candidate, enabling follow markers to reuse producers' results.

Package report renders mode summaries to the user through clog: per-marker lines with smart file:line hyperlinks, plus a closing summary.

Package rule compiles a directive's selection-policy keys (constraint, include/exclude, prerelease, cooldown, behind, downgrade) into the options the version selection chain consumes.

Package scan walks the requested paths and discovers the files that contain a clover: directive.

Package sidecar carries the format-agnostic logic for YAML sidecar files: the <target>.clover.yaml (or .yml) that holds update rules for a target that cannot host an inline clover: comment, strict JSON being the canonical case.

Package tag parses and evaluates the --tag marker filter.

Package token persists the access tokens clover mints (e.g.

Package tui holds the charmbracelet-based interactive surfaces (the clover init wizard).

Package vcs resolves the version-controlled repository a file belongs to, so clover can namespace id= per repository: the same id in two different repositories is not a clash.

Package version parses/compares semver, evaluates constraints (keyword bumps + Terraform ranges), and runs the candidate-selection filter chain.