Directories
¶
| Path | Synopsis |
|---|---|
|
Package acl is the read side of tailkeeper's policy engine: it parses a tailnet policy file, brings it to a normal form, compares two of them, and places a failure on a line.
|
Package acl is the read side of tailkeeper's policy engine: it parses a tailnet policy file, brings it to a normal form, compares two of them, and places a failure on a line. |
|
Package api is tailkeeper's Tailscale API client for reads (spec §4, §20).
|
Package api is tailkeeper's Tailscale API client for reads (spec §4, §20). |
|
apitest
Package apitest is a fake Tailscale API for tests.
|
Package apitest is a fake Tailscale API for tests. |
|
openapi
Package openapi pins the operations of Tailscale's OpenAPI document (spec §20).
|
Package openapi pins the operations of Tailscale's OpenAPI document (spec §20). |
|
Package app wires configuration, the read credential, the API client, the local runner and the audit log into one registry.Env for the CLI and the MCP server.
|
Package app wires configuration, the read credential, the API client, the local runner and the audit log into one registry.Env for the CLI and the MCP server. |
|
Package audit is tailkeeper's append-only, hash-chained JSONL log (spec §14).
|
Package audit is tailkeeper's append-only, hash-chained JSONL log (spec §14). |
|
Package cli is the tailkeeper command line (spec §16).
|
Package cli is the tailkeeper command line (spec §16). |
|
Package config loads tailkeeper's gate configuration (spec §15).
|
Package config loads tailkeeper's gate configuration (spec §15). |
|
Package creds resolves credentials (spec §7).
|
Package creds resolves credentials (spec §7). |
|
Package docsgen renders docs/tools.md from the registry, so the reference can never disagree with the code (`make docs-check` fails when it would).
|
Package docsgen renders docs/tools.md from the registry, so the reference can never disagree with the code (`make docs-check` fails when it would). |
|
Package doctor verifies a deployment (spec §7.5).
|
Package doctor verifies a deployment (spec §7.5). |
|
Package guard is the check that runs on HuJSON text before any call into github.com/tailscale/hujson that recurses (Parse, Standardize, Pack, Format, Patch).
|
Package guard is the check that runs on HuJSON text before any call into github.com/tailscale/hujson that recurses (Parse, Standardize, Pack, Format, Patch). |
|
Package local runs the node's own `tailscale` CLI for read-only tools (spec §18).
|
Package local runs the node's own `tailscale` CLI for read-only tools (spec §18). |
|
Package mcpserver serves the registry over MCP (spec §17).
|
Package mcpserver serves the registry over MCP (spec §17). |
|
Package privacy holds the per-install privacy key (spec §7.6) and what it derives: pseudonyms that follow masked values, and keyed digests of audit-log values (spec Appendix C).
|
Package privacy holds the per-install privacy key (spec §7.6) and what it derives: pseudonyms that follow masked values, and keyed digests of audit-log values (spec Appendix C). |
|
Package probe is the harness behind `make probe-acl`: the read-only live probes of the probe table (docs/design.md §22), each with its request and its expectation written down before any run, and a printer that shows what the real API said without showing a value from the tailnet.
|
Package probe is the harness behind `make probe-acl`: the read-only live probes of the probe table (docs/design.md §22), each with its request and its expectation written down before any run, and a printer that shows what the real API said without showing a value from the tailnet. |
|
Package registry is the single source of truth for tools (spec §5): metadata, input and output types, JSON Schemas, and the function that runs each tool.
|
Package registry is the single source of truth for tools (spec §5): metadata, input and output types, JSON Schemas, and the function that runs each tool. |
|
Package safefile reads a file that holds policy content: one an operator names on the command line (--from, --against, --patch, --invariants) or in the configuration (acl.invariantsFile).
|
Package safefile reads a file that holds policy content: one an operator names on the command line (--from, --against, --patch, --invariants) or in the configuration (acl.invariantsFile). |
|
Package sanitize makes attacker-influenced tailnet text safe to show (spec §3, §17).
|
Package sanitize makes attacker-influenced tailnet text safe to show (spec §3, §17). |
|
Package skeleton reduces an API answer to its structure: the HTTP status, the key paths with their JSON types, and each error text with only the grammar's own words kept.
|
Package skeleton reduces an API answer to its structure: the HTTP status, the key paths with their JSON types, and each error text with only the grammar's own words kept. |
|
Package tkerr defines tailkeeper's structured errors and their exit codes (spec §16, §19).
|
Package tkerr defines tailkeeper's structured errors and their exit codes (spec §16, §19). |
|
Package tools defines tailkeeper's tools.
|
Package tools defines tailkeeper's tools. |
|
Package tripwire is the backstop of spec §7.6.
|
Package tripwire is the backstop of spec §7.6. |
|
Package version holds the build version of tailkeeper.
|
Package version holds the build version of tailkeeper. |
Click to show internal directories.
Click to hide internal directories.