cmd/

Package cmd implements the ate-setup command tree.

Package config resolves the environment ate-setup installs into.

Package demos holds the contract every bundled demo implements, the registry the command tree is built from, and the shared behavior of a demo that is one manifest template.

Package all links every bundled demo into the binary.

Package autoscaledworkerpool installs the counter workload plus the custom-metrics stack that drives a HorizontalPodAutoscaler over its WorkerPool.

Package claudemultiplex installs the claude-code-multiplex demo, which runs several Claude Code agents side by side on one WorkerPool.

Package counter installs the counter demo: a counter actor exercising snapshot, resume, and atenet ingress, optionally with an external volume attached so the CSI path is covered end to end.

Package demotest provides the fixtures the demo packages share in their tests: an Env that needs no cluster, and the assertion that a rendered template is a complete manifest.

Package egress installs the egress demo, which exercises egress policy enforcement through atenet.

Package multitemplate installs the multi-template demo, where two ActorTemplates in two different atespaces share a single WorkerPool.

Package parking installs the parking demo, which parks and unparks actors on a small WorkerPool.

Package sandbox installs the sandbox demo: an ActorTemplate driven on demand by the sandbox client rather than by a long-lived workload.

Package images decides where ate-setup gets container images from.

Package ko builds and publishes images referenced by manifests, replacing the run_ko helper in the shell installer.

Package kube provides the cluster operations ate-setup needs, replacing the kubectl invocations the install shell scripts made.

Package kustomize renders the overlays under manifests/ate-install, standing in for `kubectl kustomize <dir> --load-restrictor LoadRestrictionsNone`.

Package log prints install progress, preserving the "[step]: name" output the shell scripts produced so existing CI log scrapers keep working.

Package render expands the demos' *.yaml.tmpl files.

Package steps holds the install and teardown operations that the shell installer implemented as bash functions.

Package ateletauth authenticates RPCs that arrive from an atelet, for the ateapi services served only to atelet.

Package ateletauthtest builds the peer contexts that the ateapi services served only to atelet authenticate against.

Package oidcjwt verifies JWTs using OIDC discovery.

Package scheduling decides which worker should host an actor.

Package store contains common types for the persistence layer.

Package atepg is an ate storage backend built on PostgreSQL.

Package dockerenv points testcontainers at the active Docker context.

Package storecontract provides backend-neutral assertions for store.Interface implementations.

Package storetest provides isolated PostgreSQL-backed stores for tests.

Package workercache maintains an in-memory view of all workers, kept current via store.Interface.WatchWorkers.

Package workerservice serves the RPCs a Worker uses to tell the control plane about itself.

Package workersync reconciles Kubernetes worker pods into the Worker registry behind the ateapi Control API.

Package egress implements the ext_proc handler for outbound actor traffic: it authenticates the actor behind an egress CONNECT before the gateway tunnels it out.

Package extproc implements the external processing (ext_proc) gRPC server that the atenet router serves to its dataplane gateways.

Package ingress implements the ext_proc handler for traffic arriving at the ingress gateway: it resolves the actor a request is addressed to, resumes it through the control plane (parking the request while the worker pool is saturated), and points the dataplane at the worker that ends up hosting it.

Delta SDS: the stateful, per-connection half of the server.

Package cdiinject applies CDI container edits to an actor's OCI bundle.

Package cgroupstats reads resource usage out of a cgroup v2 directory.

Package agentstats turns the kata guest agent's per-container cgroup accounting into the resource-usage sample ateom reports.

Package ch drives a single cloud-hypervisor instance over its REST api-socket: pause, snapshot, resume against a running VMM (e.g.

Package kata holds the helpers ateom uses to boot and drive a kata guest in a cloud-hypervisor micro-VM without the kata shim: ateom boots cloud-hypervisor itself (see internal/ch), then drives the stock kata-agent over its hybrid-vsock ttrpc API (DialAgent / AgentClient) to create the sandbox and run each container on its host-merged rootfs (overlay_linux.go).

Package reaper collects detached child processes in ateom-microvm.

Package rendezvous uses rendezvous hashing to help multiple controller replicas agree on which replica should handle an item.