internal/

Package ab is the Apple Business API client: ES256 client-assertion auth + typed read methods.

Package archive is the audit safety net for bidirectional sync.

Package cli is the abctl command surface, built on Cobra.

Package config loads the Apple Business API settings from the gitignored .env.

Package gitops is the on-disk desired-state tree: lib/ profiles, blueprint manifests, and the committed baseline.

Package hash is the drift signal.

Package reconcile computes the 3-way plan (git desired ↔ committed baseline ↔ live ABM) for bidirectional, newest-wins sync.

Package state is the committed sync baseline (gitops/state/sync-state.json) — the last-synced snapshot that makes the 3-way (git ↔ baseline ↔ ABM) diff possible.

Package vpp is a read client for Apple's App and Book Management API v2 (vpp.itunes.apple.com/mdm/v2) — the Apps & Books license inventory: which apps/books the organization owns licenses for, how many are free/assigned, and to whom.