internal/

Package agent is the client side of the agent-hub contract defined in proto/regulus/agent/v1.

Package auth implements the hub's local accounts and everything that protects the HTTP API: first-run setup of the admin, password hashing, login sessions, users, roles and permissions, two-factor authentication (TOTP and recovery codes), credential reset and the HTTP middleware.

Package capability is the draft data model for what an agent machine does (its capabilities) and what it may reach or use (its permissions), with the defaults of each preset (compute, backup, gateway, development) and the rules for overriding them per machine.

Package config loads the hub configuration.

Package console is the interactive terminal console of Regulus and the plain-text and JSON output that takes its place when no terminal UI is wanted: what the hub is doing, its settings, its logs and health checks.

Package fleet manages the remote agents of the hub: the single-use tokens that let a new agent enroll, the registry of the agents that did, and the revocation of an agent.

Package hub implements the Regulus hub, the process that everything else talks to: it serves the dashboard and the HTTP API, accepts the connections of the agents, keeps the live state of the fleet and drives the updates.

Package inproc is an in-memory gRPC transport.

Package localstatus is the small channel between a running hub and the tools on the same machine (the console and `regulus status`): a Unix socket in the data directory, readable only by the user that runs the hub.

Package logging builds the structured logger (log/slog) used across Regulus from the log section of the configuration.

Package pki is the small certificate authority of the hub.

Package protocol holds the version of the agent-hub contract defined in proto/regulus/agent/v1 and the rules to compare versions.

Package storage opens the hub database and applies its migrations (embedded, applied in order and recorded).

Package update finds, downloads, verifies and installs new releases of Regulus.

Package webui embeds the compiled dashboard (the dashboard/ directory, built by `make build`) so the hub can serve it.