Directories
¶
| Path | Synopsis |
|---|---|
|
Package account manages connected external accounts.
|
Package account manages connected external accounts. |
|
Package action implements parsing, validation, storage, and capability enforcement for Aileron action files.
|
Package action implements parsing, validation, storage, and capability enforcement for Aileron action files. |
|
Package spec embeds the OpenAPI specification for use by the server and docs.
|
Package spec embeds the OpenAPI specification for use by the server and docs. |
|
gen
Package api provides primitives to interact with the openapi HTTP API.
|
Package api provides primitives to interact with the openapi HTTP API. |
|
Package app wires together the Aileron control plane components and exposes them as an http.Handler.
|
Package app wires together the Aileron control plane components and exposes them as an http.Handler. |
|
Package approval defines the SPI for the approval orchestrator.
|
Package approval defines the SPI for the approval orchestrator. |
|
jsonl
Package jsonl is the JSONL-backed approval.Persister for the action-approval queue.
|
Package jsonl is the JSONL-backed approval.Persister for the action-approval queue. |
|
Package audit defines the SPI for the immutable audit/trace store.
|
Package audit defines the SPI for the immutable audit/trace store. |
|
Package auth defines the SPI for authentication providers.
|
Package auth defines the SPI for authentication providers. |
|
capture
Package capture is a provider-independent substrate for acquiring a credential by driving an interactive CLI login inside a container and reading the produced token back out.
|
Package capture is a provider-independent substrate for acquiring a credential by driving an interactive CLI login inside a container and reading the produced token back out. |
|
github
Package github implements the AuthProvider SPI for GitHub OAuth 2.0.
|
Package github implements the AuthProvider SPI for GitHub OAuth 2.0. |
|
google
Package google implements the AuthProvider SPI for Google OAuth 2.0.
|
Package google implements the AuthProvider SPI for Google OAuth 2.0. |
|
Package binding implements the per-user capability binding store.
|
Package binding implements the per-user capability binding store. |
|
Package ci holds CI-configuration regression guards.
|
Package ci holds CI-configuration regression guards. |
|
Package cli defines the declarative CLI-capability unit that lives under a devcontainer Feature's customizations.aileron.cli block (umbrella #1319).
|
Package cli defines the declarative CLI-capability unit that lives under a devcontainer Feature's customizations.aileron.cli block (umbrella #1319). |
|
unitloader
Package unitloader is the host-side bridge from a sandbox image's devcontainer.metadata OCI label to the two existing credential consumers: the internal/auth/capture registry and the internal/proxybinding host table (umbrella #1319, sub-issue #1322).
|
Package unitloader is the host-side bridge from a sandbox image's devcontainer.metadata OCI label to the two existing credential consumers: the internal/auth/capture registry and the internal/proxybinding host table (umbrella #1319, sub-issue #1322). |
|
Package clock abstracts wall-clock time for testability.
|
Package clock abstracts wall-clock time for testability. |
|
Package comms defines the SPI for bidirectional communication channels (a future channel listener implements Listener) and provides shared helpers — the notify queue, listener registry, and vault-reference resolution — that any channel implementation can build on.
|
Package comms defines the SPI for bidirectional communication channels (a future channel listener implements Listener) and provides shared helpers — the notify queue, listener registry, and vault-reference resolution — that any channel implementation can build on. |
|
Package connector defines the SPI for execution connectors.
|
Package connector defines the SPI for execution connectors. |
|
spec
Package spec defines the machine-readable connector operation spec used by sandbox discovery and generated HTTPS shims.
|
Package spec defines the machine-readable connector operation spec used by sandbox discovery and generated HTTPS shims. |
|
Package credential implements the host-side credential mediation layer ratified by [ADR-0005] and [ADR-0011].
|
Package credential implements the host-side credential mediation layer ratified by [ADR-0005] and [ADR-0011]. |
|
inject
Package inject binds a host-resolved credential onto an outbound HTTP request according to a closed set of injection [Scheme]s.
|
Package inject binds a host-resolved credential onto an outbound HTTP request according to a closed set of injection [Scheme]s. |
|
Package crypto provides cryptographic primitives for the zero-knowledge vault.
|
Package crypto provides cryptographic primitives for the zero-knowledge vault. |
|
Package cstore implements Aileron's content-addressed connector store and the install pipeline that populates it.
|
Package cstore implements Aileron's content-addressed connector store and the install pipeline that populates it. |
|
daemon
|
|
|
discovery
Package discovery manages the on-disk advertisement of the running Aileron daemon.
|
Package discovery manages the on-disk advertisement of the running Aileron daemon. |
|
spawn
Package spawn is the client-side helper for finding (or starting) the Aileron daemon.
|
Package spawn is the client-side helper for finding (or starting) the Aileron daemon. |
|
Package dailypath gives Aileron's on-disk JSONL surfaces a shared path-naming convention: `<stateDir>/<subdir>/<prefix>YYYY-MM-DD.jsonl`.
|
Package dailypath gives Aileron's on-disk JSONL surfaces a shared path-naming convention: `<stateDir>/<subdir>/<prefix>YYYY-MM-DD.jsonl`. |
|
Package draft orchestrates cloud-hosted draft generation.
|
Package draft orchestrates cloud-hosted draft generation. |
|
Package failure implements the structured failure envelope ratified by [ADR-0010]: a closed taxonomy of failure classes, a closed set of boundaries, and a single Failure type that carries enough context for the agent (and the audit log) to reason about what went wrong.
|
Package failure implements the structured failure envelope ratified by [ADR-0010]: a closed taxonomy of failure classes, a closed set of boundaries, and a single Failure type that carries enough context for the agent (and the audit log) to reason about what went wrong. |
|
flightplan
|
|
|
credreq
Package credreq derives a frozen Flight Plan's credential-binding requirements from its tool-step trust contracts.
|
Package credreq derives a frozen Flight Plan's credential-binding requirements from its tool-step trust contracts. |
|
freeze
Package freeze is the author-time step that seals an installed Aileron skill into a Flight Plan (ADR-0027).
|
Package freeze is the author-time step that seals an installed Aileron skill into a Flight Plan (ADR-0027). |
|
imgconfig
Package imgconfig computes a serialization-agnostic content digest over an image's execution-relevant configuration, the identity a composed-tools Flight Plan pin binds to (ADR-0027).
|
Package imgconfig computes a serialization-agnostic content digest over an image's execution-relevant configuration, the identity a composed-tools Flight Plan pin binds to (ADR-0027). |
|
manifest
Package manifest parses an installable Aileron skill (a SKILL.md document: YAML frontmatter plus a Markdown body) and validates the Aileron-specific frontmatter block against the normative Flight Plan manifest schema.
|
Package manifest parses an installable Aileron skill (a SKILL.md document: YAML frontmatter plus a Markdown body) and validates the Aileron-specific frontmatter block against the normative Flight Plan manifest schema. |
|
ociremote
Package ociremote builds oras remote repositories from an OCI reference and the operator's Docker/OCI credentials.
|
Package ociremote builds oras remote repositories from an OCI reference and the operator's Docker/OCI credentials. |
|
publish
Package publish implements `aileron skill publish`: pushing a frozen Flight Plan's composed (or base) image and its signed artifact to an OCI registry so a second operator on another machine can install and launch it without re-freezing (umbrella #1898, the write half of cross-machine sharing).
|
Package publish implements `aileron skill publish`: pushing a frozen Flight Plan's composed (or base) image and its signed artifact to an OCI registry so a second operator on another machine can install and launch it without re-freezing (umbrella #1898, the write half of cross-machine sharing). |
|
pull
Package pull implements the read half of cross-machine Flight Plan sharing (umbrella #1898): `aileron skill install <oci-ref>` resolves the signed artifact published by `skill publish` (#1901), pulls its four layers, and returns them as a store.FrozenVersion ready to write into the local store as a frozen version indistinguishable from a local freeze.
|
Package pull implements the read half of cross-machine Flight Plan sharing (umbrella #1898): `aileron skill install <oci-ref>` resolves the signed artifact published by `skill publish` (#1901), pulls its four layers, and returns them as a store.FrozenVersion ready to write into the local store as a frozen version indistinguishable from a local freeze. |
|
resolver
Package resolver decides whether a Flight Plan skill's declared action references (requires.actions[].ref) are satisfied by the actions the running daemon exposes.
|
Package resolver decides whether a Flight Plan skill's declared action references (requires.actions[].ref) are satisfied by the actions the running daemon exposes. |
|
runtime
Package runtime is the deterministic Launch executor for a frozen Aileron Flight Plan (ADR-0027, issue #1511).
|
Package runtime is the deterministic Launch executor for a frozen Aileron Flight Plan (ADR-0027, issue #1511). |
|
spec
Package spec holds the drift-guard test for the Flight Plan manifest specification artifacts that live under docs/.
|
Package spec holds the drift-guard test for the Flight Plan manifest specification artifacts that live under docs/. |
|
store
Package store is the host-side canonical store for installed Flight Plan skills.
|
Package store is the host-side canonical store for installed Flight Plan skills. |
|
Package hub is the daemon's client for the public Aileron discovery Hub (ADR-0013).
|
Package hub is the daemon's client for the public Aileron discovery Hub (ADR-0013). |
|
Package launch provides the launcher for AI coding agents under Aileron's daemon.
|
Package launch provides the launcher for AI coding agents under Aileron's daemon. |
|
hostimport
Package hostimport reads an already-authenticated host install's credential state for a supported coding agent so the bytes can be seeded into the Aileron vault.
|
Package hostimport reads an already-authenticated host install's credential state for a supported coding agent so the bytes can be seeded into the Aileron vault. |
|
Package llm defines a provider-agnostic interface for LLM interactions.
|
Package llm defines a provider-agnostic interface for LLM interactions. |
|
Package mcp defines shared types and interfaces for MCP tool execution.
|
Package mcp defines shared types and interfaces for MCP tool execution. |
|
Package mcpclient provides a Go client that speaks Model Context Protocol (MCP) over stdio to downstream MCP servers running as subprocesses.
|
Package mcpclient provides a Go client that speaks Model Context Protocol (MCP) over stdio to downstream MCP servers running as subprocesses. |
|
Package mcpremote provides a remote MCP client that communicates with downstream MCP servers over HTTP using the MCP Streamable HTTP transport.
|
Package mcpremote provides a remote MCP client that communicates with downstream MCP servers over HTTP using the MCP Streamable HTTP transport. |
|
Package model — Enterprise, User, Session, and SSO types for the hosted control plane.
|
Package model — Enterprise, User, Session, and SSO types for the hosted control plane. |
|
Package notify defines the SPI for human approval notifications.
|
Package notify defines the SPI for human approval notifications. |
|
Package oauth implements the client-side primitives for the OAuth dance the runtime drives at binding-setup time per ADR-0006.
|
Package oauth implements the client-side primitives for the OAuth dance the runtime drives at binding-setup time per ADR-0006. |
|
Package observability bootstraps Aileron's OpenTelemetry tracer provider and propagator.
|
Package observability bootstraps Aileron's OpenTelemetry tracer provider and propagator. |
|
Package policy defines the SPI for the policy engine.
|
Package policy defines the SPI for the policy engine. |
|
Package proxybinding parses and loads declarative host->credential binding descriptors and converts them into the binding-table entries the TLS forward-proxy boundary consults (ADR-0019, umbrella #1191).
|
Package proxybinding parses and loads declarative host->credential binding descriptors and converts them into the binding-table entries the TLS forward-proxy boundary consults (ADR-0019, umbrella #1191). |
|
Package retry implements ADR-0010's bounded-retry policy: at most 3 retries with exponential backoff (1s/2s/4s + jitter) for failures the failure package marks retriable.
|
Package retry implements ADR-0010's bounded-retry policy: at most 3 retries with exponential backoff (1s/2s/4s + jitter) for failures the failure package marks retriable. |
|
Package sandbox implements the WASM connector runtime.
|
Package sandbox implements the WASM connector runtime. |
|
composition
Package composition defines the sandbox image-composition contract.
|
Package composition defines the sandbox image-composition contract. |
|
container
Package container builds and runs sandbox container images from composition plans.
|
Package container builds and runs sandbox container images from composition plans. |
|
discovery
Package discovery derives connector tools from installed connector specs for the daemon's HTTPS data-plane operation validation.
|
Package discovery derives connector tools from installed connector specs for the daemon's HTTPS data-plane operation validation. |
|
nodedist
Package nodedist fetches a pinned Node.js distribution by version and target platform from nodejs.org, verifies it against Node's GPG-signed SHASUMS256.txt, SHA-256-matches the downloaded archive, unpacks it, and caches the unpacked tree content-addressed under the shared atomic-rename store primitive (cstore.CommitDir).
|
Package nodedist fetches a pinned Node.js distribution by version and target platform from nodejs.org, verifies it against Node's GPG-signed SHASUMS256.txt, SHA-256-matches the downloaded archive, unpacks it, and caches the unpacked tree content-addressed under the shared atomic-rename store primitive (cstore.CommitDir). |
|
sandboxtest
Package sandboxtest provides reusable test helpers for the spawn primitive (per ADR-0002, ADR-0014).
|
Package sandboxtest provides reusable test helpers for the spawn primitive (per ADR-0002, ADR-0014). |
|
spawnhelper
Package spawnhelper defines the post-namespace setup step that runs inside the spawn-sandbox namespace before the wrapped CLI exec's.
|
Package spawnhelper defines the post-namespace setup step that runs inside the spawn-sandbox namespace before the wrapped CLI exec's. |
|
toolchain
Package toolchain provisions the Aileron-managed build toolchain for a Features (Tier 1) devcontainer build: a verified Node runtime plus the pinned @devcontainers/cli.
|
Package toolchain provisions the Aileron-managed build toolchain for a Features (Tier 1) devcontainer build: a verified Node runtime plus the pinned @devcontainers/cli. |
|
Package sentinel holds the reserved, non-secret, format-mimicking placeholder tokens that the launcher plants in a sandbox so a CLI's own local validation passes, and that the daemon's forward proxy recognizes and swaps for the real credential at egress (ADR-0019, umbrella #1191).
|
Package sentinel holds the reserved, non-secret, format-mimicking placeholder tokens that the launcher plants in a sandbox so a CLI's own local validation passes, and that the daemon's forward proxy recognizes and swaps for the real credential at egress (ADR-0019, umbrella #1191). |
|
Package main is the entry point for the Aileron control plane daemon.
|
Package main is the entry point for the Aileron control plane daemon. |
|
Package sessions defines the storage interface for Aileron's launch session records.
|
Package sessions defines the storage interface for Aileron's launch session records. |
|
jsonl
Package jsonl is a sessions.Store backed by a JSONL file.
|
Package jsonl is a sessions.Store backed by a JSONL file. |
|
sessionstest
Package sessionstest provides a shared behavioural-contract test suite that any sessions.Store implementation must satisfy.
|
Package sessionstest provides a shared behavioural-contract test suite that any sessions.Store implementation must satisfy. |
|
Package source defines the SPI for read-only source connectors.
|
Package source defines the SPI for read-only source connectors. |
|
calendar
Package calendar implements a SourceConnector for Google Calendar, providing read-only tools for checking events and availability.
|
Package calendar implements a SourceConnector for Google Calendar, providing read-only tools for checking events and availability. |
|
github
Package github implements a SourceConnector for GitHub, providing read-only tools for searching code, issues/PRs, getting PR details and diffs, and reading file contents.
|
Package github implements a SourceConnector for GitHub, providing read-only tools for searching code, issues/PRs, getting PR details and diffs, and reading file contents. |
|
gmail
Package gmail implements a SourceConnector for Gmail and Google Drive, providing read-only tools for searching emails, reading threads, searching Drive files, and reading document contents.
|
Package gmail implements a SourceConnector for Gmail and Google Drive, providing read-only tools for searching emails, reading threads, searching Drive files, and reading document contents. |
|
Package store defines persistence interfaces for the control plane.
|
Package store defines persistence interfaces for the control plane. |
|
postgres
Package postgres implements store interfaces backed by PostgreSQL.
|
Package postgres implements store interfaces backed by PostgreSQL. |
|
Package suite parses Aileron action-suite manifests — the "group install" primitive from issue #564.
|
Package suite parses Aileron action-suite manifests — the "group install" primitive from issue #564. |
|
tools
|
|
|
agentdigests
command
Command agentdigests regenerates the committed sandbox image digest lockfile (internal/sandbox/composition/agent-images.lock.json).
|
Command agentdigests regenerates the committed sandbox image digest lockfile (internal/sandbox/composition/agent-images.lock.json). |
|
publishedagents
command
Command publishedagents prints the agents whose per-agent sandbox image is publishable (composition.PublishedAgents) as a JSON array, one source of truth for the sandbox-agents.yml CI build matrix.
|
Command publishedagents prints the agents whose per-agent sandbox image is publishable (composition.PublishedAgents) as a JSON array, one source of truth for the sandbox-agents.yml CI build matrix. |
|
toolslock
command
Command toolslock regenerates the committed managed-toolchain lockfile (internal/sandbox/container/tools.lock.json).
|
Command toolslock regenerates the committed managed-toolchain lockfile (internal/sandbox/container/tools.lock.json). |
|
Package vault defines the SPI for credential and secret storage.
|
Package vault defines the SPI for credential and secret storage. |
|
Package vaultscope is the single source of truth for classifying a raw vault path into its namespace scope.
|
Package vaultscope is the single source of truth for classifying a raw vault path into its namespace scope. |
|
Package version provides build-time version information for Aileron binaries.
|
Package version provides build-time version information for Aileron binaries. |
Click to show internal directories.
Click to hide internal directories.