internal/

Package accounts provides AWS Organizations member account discovery.

Package analytics provides the scheduled collector for savings time-series data.

Package api provides the HTTP API handlers for the CUDly dashboard.

Package archera wires the explicit Archera comparison (pkg/insurance) into the server.

Package auth provides user authentication and authorization.

Package commitmentopts discovers which (term, payment) commitment tuples each AWS commitment-capable service actually sells, persists the result, and exposes it to the API layer so the frontend can hide impossible combinations instead of hardcoding them.

Package config provides configuration management functionality.

Package credentials provides AES-256-GCM encryption for cloud account credentials and helpers for resolving provider-specific credential structs.

Package ctxutil holds small context helpers shared across bounded contexts.

Package email provides email notification functionality across multiple cloud providers.

Package execution provides parallel multi-account execution primitives.

Package iacfiles embeds federation IaC templates into the binary.

Package oidc implements the CUDly OIDC issuer used to federate into target clouds (currently Azure) without storing any long-lived secret on the CUDly side.

Package planstep resolves a purchase plan's current step into the recommendations it would buy.

Package purchase handles the purchase workflow including approvals and execution.

Package runtime holds small helpers that inspect the process's runtime environment.

Package scheduler handles scheduled recommendation collection.

Package secrets provides cloud-agnostic secret management

Package server provides a cloud-agnostic server implementation for CUDly.

Package testutil provides common utilities for testing