internal/

Package dbmigrate applies versioned Postgres schema migrations (goose SQL under sql/).

syncs interfaces, addresses, VRF-aware address dedup, LLDP-discovered cable connections, and on-device services (ELINE/ELAN as NetBox L2VPNs, L3VPN as VRFs — kinds come from cfgmgmt service types) from live network devices into NetBox.

Package housekeeping trims persisted job history (Job / JobTask / JobTaskEvent) so the tables that receive hub "event" envelopes cannot grow without bound.

Package jobevent lets a sync tool (internal/dns, internal/icinga, internal/librenms, internal/netbox, internal/lime) report structured info/warning/error progress instead of ad hoc fmt.Println/slog calls.

Package jobscheduler runs user-defined JobSchedule rows: each due schedule triggers the same StartJob path as the Job overview page (one sync target, housekeeping, or a sequenced "sync all").

Package ldapauth implements the search-and-bind flow used to authenticate a user against an LDAP/Active Directory server and to read the attributes (email, display name, group membership) needed for local auto-provisioning and role sync.

Package mail sends outbound email over the shared SMTP relay settings (Settings.Smtp*/EmailSender, edited on the admin UI's Factum > Email tab, projected into util.CommonConfig by util.NewCommonConfig).

Package netboxtool is Factum's NetBox GraphQL/REST client (devices, VMs, interfaces, addresses, cables, VRFs, L2VPNs).

Package sbom builds a human-readable software bill of materials for a Factum release: every Go module in the module graph plus production npm packages locked for the Vue GUI.

Package tmpl executes operator-facing templates with Jet (CloudyKit).

Package worker runs predefined shell commands dispatched by the primary over the hub transport (see hub.go/hub_agent.go).