Help us shape the future of Go! Take the 2026 Go Developer Survey

internal/

directory
v0.4.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 30, 2026 License: Apache-2.0

Directories

Path Synopsis
Package agent supervises member processes and the authenticated node API.
Package agent supervises member processes and the authenticated node API.
datamcp
Package datamcp supervises private, authenticated data MCP upstreams.
Package datamcp supervises private, authenticated data MCP upstreams.
elastic
Package elastic renders and supervises secured Elastic Stack node processes.
Package elastic renders and supervises secured Elastic Stack node processes.
keycloak
Package keycloak supervises the native Keycloak distribution.
Package keycloak supervises the native Keycloak distribution.
mysql
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
neo4j
Package neo4j supervises a single native Neo4j Community server JVM.
Package neo4j supervises a single native Neo4j Community server JVM.
openbao
The member configuration is cached in plaintext by the shared agent.
The member configuration is cached in plaintext by the shared agent.
postgres
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
rabbitmq
Package rabbitmq renders and supervises a RabbitMQ member using the shared agent.Engine protocol.
Package rabbitmq renders and supervises a RabbitMQ member using the shared agent.Engine protocol.
supabase
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
supabase/gateway
Package gateway renders a self-contained Envoy 1.39 bootstrap.
Package gateway renders a self-contained Envoy 1.39 bootstrap.
supabase/initsql
Package initsql owns the curated Supabase prerequisites on PostgreSQL 17.
Package initsql owns the curated Supabase prerequisites on PostgreSQL 17.
supabase/logship
Package logship pushes bounded batches of supervised process logs to a private Vector HTTP source.
Package logship pushes bounded batches of supervised process logs to a private Vector HTTP source.
temporal
Package temporal supervises native Temporal server roles and the Web UI.
Package temporal supervises native Temporal server roles and the Web UI.
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
Package agentrollout schedules opt-in provider-managed agent upgrades.
Package agentrollout schedules opt-in provider-managed agent upgrades.
Package api provides primitives to interact with the openapi HTTP API.
Package api provides primitives to interact with the openapi HTTP API.
Package apispec parses the embedded public OpenAPI document once for request validation, response-conformance tests and serving it to clients.
Package apispec parses the embedded public OpenAPI document once for request validation, response-conformance tests and serving it to clients.
Package auth manages local and OIDC accounts, sealed Ed25519 signing keys, five-minute access cookies, thirty-day rotating refresh families and CSRF.
Package auth manages local and OIDC accounts, sealed Ed25519 signing keys, five-minute access cookies, thirty-day rotating refresh families and CSRF.
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
Package certificates provides secret-free expiry inventory and durable daily warnings.
Package certificates provides secret-free expiry inventory and durable daily warnings.
Package cli implements karactl, the Karakoram REST API command-line client.
Package cli implements karactl, the Karakoram REST API command-line client.
SPDX-License-Identifier: Apache-2.0
SPDX-License-Identifier: Apache-2.0
Package cronutil defines the scheduling grammar shared by control-plane policies.
Package cronutil defines the scheduling grammar shared by control-plane policies.
Package datamcp implements the per-cluster data MCP gateway served at /mcp/clusters/{namespace}/{cluster}.
Package datamcp implements the per-cluster data MCP gateway served at /mcp/clusters/{namespace}/{cluster}.
companion
Package companion manages the stateless data MCP member independently of provider state.
Package companion manages the stateless data MCP member independently of provider state.
companionspec
Package companionspec is the control-plane to agent payload of the data MCP companion (agentapi.MemberConfig.EngineSpec when Engine is "datamcp").
Package companionspec is the control-plane to agent payload of the data MCP companion (agentapi.MemberConfig.EngineSpec when Engine is "datamcp").
nativees
Package nativees implements the versioned, scope-restricted Elasticsearch data tools.
Package nativees implements the versioned, scope-restricted Elasticsearch data tools.
nativermq
Package nativermq exposes scoped RabbitMQ data tools through the Management API.
Package nativermq exposes scoped RabbitMQ data tools through the Management API.
Package drills verifies backups using isolated, server-managed restore targets.
Package drills verifies backups using isolated, server-managed restore targets.
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
elastic
Package elastic reconciles Elasticsearch nodes and their Kibana, Logstash and APM component services.
Package elastic reconciles Elasticsearch nodes and their Kibana, Logstash and APM component services.
elastic/agentspec
Package agentspec defines the Elasticsearch engine payload carried in agentapi.MemberConfig.EngineSpec.
Package agentspec defines the Elasticsearch engine payload carried in agentapi.MemberConfig.EngineSpec.
elastic/esapi
Package esapi implements Elasticsearch administration over CA-pinned HTTPS.
Package esapi implements Elasticsearch administration over CA-pinned HTTPS.
enginetest
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
keycloak
Package keycloak reconciles an independent PostgreSQL binding consumer.
Package keycloak reconciles an independent PostgreSQL binding consumer.
keycloak/kcspec
Package kcspec defines the private Keycloak member configuration.
Package kcspec defines the private Keycloak member configuration.
mysql
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
mysql/myspec
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
nativeartifacts
Package nativeartifacts pins the native programs installed by engine members.
Package nativeartifacts pins the native programs installed by engine members.
neo4j
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
neo4j/neo4jspec
Package neo4jspec defines the Neo4j Community member payload carried in agentapi.MemberConfig.EngineSpec and the bounded agent action protocol shared by the control-plane provider (internal/engine/neo4j) and the member runner (internal/agent/neo4j).
Package neo4jspec defines the Neo4j Community member payload carried in agentapi.MemberConfig.EngineSpec and the bounded agent action protocol shared by the control-plane provider (internal/engine/neo4j) and the member runner (internal/agent/neo4j).
openbao
Package openbao manages TLS-only OpenBao servers with Raft or opt-in PostgreSQL storage.
Package openbao manages TLS-only OpenBao servers with Raft or opt-in PostgreSQL storage.
openbao/baoapi
Package baoapi is a minimal OpenBao HTTP API client shared by the control plane and the member agent.
Package baoapi is a minimal OpenBao HTTP API client shared by the control plane and the member agent.
openbao/baospec
Package baospec defines the OpenBao member specification and the bounded control-plane ↔ member-agent protocol.
Package baospec defines the OpenBao member specification and the bounded control-plane ↔ member-agent protocol.
postgres
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
postgres/pgprofile
Package pgprofile is the shared availability and curated SQL authority for PostgreSQL profiles.
Package pgprofile is the shared availability and curated SQL authority for PostgreSQL profiles.
postgres/pgspec
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
psmdb
Package psmdb manages Percona Server for MongoDB without Kubernetes.
Package psmdb manages Percona Server for MongoDB without Kubernetes.
psmdb/mongoadmin
Package mongoadmin implements authenticated, quorum-aware MongoDB administration.
Package mongoadmin implements authenticated, quorum-aware MongoDB administration.
psmdb/pbm
Package pbm orchestrates durable Percona Backup for MongoDB operations through node agents.
Package pbm orchestrates durable Percona Backup for MongoDB operations through node agents.
psmdb/users
Package users manages MongoDB application users, custom roles, and the Percona system-user split.
Package users manages MongoDB application users, custom roles, and the Percona system-user split.
pxc
Package pxc composes the shared MySQL lifecycle with Galera replication.
Package pxc composes the shared MySQL lifecycle with Galera replication.
rabbitmq
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
rabbitmq/mgmt
Package mgmt implements the RabbitMQ Management HTTP API.
Package mgmt implements the RabbitMQ Management HTTP API.
rabbitmq/rmqspec
Package rmqspec defines the RabbitMQ member and bounded agent protocol.
Package rmqspec defines the RabbitMQ member and bounded agent protocol.
supabase
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
supabase/sbkeys
Package sbkeys generates Supabase credentials without persistence or logging.
Package sbkeys generates Supabase credentials without persistence or logging.
supabase/sbspec
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
temporal
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
temporal/tspec
Package tspec defines the secret-bearing Temporal member contract shared by the control plane and the member agent.
Package tspec defines the secret-bearing Temporal member contract shared by the control plane and the member agent.
weaviate
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
weaviate/wvapi
Package wvapi implements the Weaviate v1 REST administration API.
Package wvapi implements the Weaviate v1 REST administration API.
weaviate/wvspec
Package wvspec defines the encrypted Weaviate member wire contract.
Package wvspec defines the encrypted Weaviate member wire contract.
Package infra defines the backend-neutral infrastructure contract that engine providers, namespaces and the control plane use.
Package infra defines the backend-neutral infrastructure contract that engine providers, namespaces and the control plane use.
contracttest
Package contracttest provides the portable infrastructure backend conformance suite.
Package contracttest provides the portable infrastructure backend conformance suite.
fake
Package fake implements a deterministic, thread-safe in-memory infrastructure backend for engine tests and backend contract tests.
Package fake implements a deterministic, thread-safe in-memory infrastructure backend for engine tests and backend contract tests.
nomad
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
zerops
Package zerops implements Karakoram's Zerops REST infrastructure backend.
Package zerops implements Karakoram's Zerops REST infrastructure backend.
Package maintenance evaluates permission to start new member disruptions.
Package maintenance evaluates permission to start new member disruptions.
Package mcp embeds the agent interface without adding an authorization path: all operations execute through the cached REST handler with caller credentials.
Package mcp embeds the agent interface without adding an authorization path: all operations execute through the cached REST handler with caller credentials.
Package monitoring scrapes member exporters and serves retained metric series.
Package monitoring scrapes member exporters and serves retained metric series.
Package namespaces manages project credentials and enrolled project relays.
Package namespaces manages project credentials and enrolled project relays.
Package netguard implements DNS-rebinding-safe outbound connection policy.
Package netguard implements DNS-rebinding-safe outbound connection policy.
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
Package orphanvolumes retries deletion of explicitly recorded, ID-fenced volumes.
Package orphanvolumes retries deletion of explicitly recorded, ID-fenced volumes.
Package pgbinding defines how a consumer service binds to an existing Karakoram PostgreSQL cluster: the control plane creates the consumer's databases and one least-privilege owning login role on the source, seals the role password, and blocks source deletion while the binding exists.
Package pgbinding defines how a consumer service binds to an existing Karakoram PostgreSQL cluster: the control plane creates the consumer's databases and one least-privilege owning login role on the source, seals the role password, and blocks source deletion while the binding exists.
Package pki issues cluster and agent certificates from a cluster-scoped CA.
Package pki issues cluster and agent certificates from a cluster-scoped CA.
Package rbac provides persisted, deny-overrides authorization.
Package rbac provides persisted, deny-overrides authorization.
Package redact removes credential material from native process diagnostics.
Package redact removes credential material from native process diagnostics.
Package relay provides authenticated, namespace-scoped TCP tunnels and relay credentials.
Package relay provides authenticated, namespace-scoped TCP tunnels and relay credentials.
Package s3endpoint defines the storage registration endpoint contract shared by admission, the Go object client and native-engine configuration renderers.
Package s3endpoint defines the storage registration endpoint contract shared by admission, the Go object client and native-engine configuration renderers.
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
Package statejson preserves foreign workflow keys while replacing owned state.
Package statejson preserves foreign workflow keys while replacing owned state.
SPDX-License-Identifier: Apache-2.0
SPDX-License-Identifier: Apache-2.0
tools
agentgen command
Command agentgen validates operation safety metadata and generates its lookup.
Command agentgen validates operation safety metadata and generates its lookup.
rbacgen command
Command rbacgen validates operation authorization metadata and generates the operation-ID lookup consumed by the API authorization middleware.
Command rbacgen validates operation authorization metadata and generates the operation-ID lookup consumed by the API authorization middleware.
specnoalias command
Command specnoalias expands YAML aliases for consumers with safe default alias-expansion limits.
Command specnoalias expands YAML aliases for consumers with safe default alias-expansion limits.
Package ui serves the Karakoram single-page web application.
Package ui serves the Karakoram single-page web application.
Package version exposes build metadata shared by the server and CLI.
Package version exposes build metadata shared by the server and CLI.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL