pkg/

Package apierror carries the server-side pieces of the external RPC failure contract: the not-applied marker and the transport-neutral failure vocabulary shared by the domain controllers and the API handlers.

Package archive fetches remote archives and expands them inside explicit limits.

Package capmatrix owns the engine's declared isolation and runtime capability matrix: the answer to "what can this engine enforce, and by what".

Package clientconfig persists CLI configuration that belongs to a local user.

Package credentials owns the generic credential-handle model: a short-lived, narrowly scoped, revocable reference to a credential whose truth never enters a sandbox.

Package egress owns the single decision entry point every daemon-mediated egress path uses: given a policy snapshot and a request, Decide reports whether the consumer may reach the upstream resource and which canonical resource the request resolves to.

Package guestabi owns the daemon/guest ABI contract: parsing, validating, and loading the guest ABI manifest a guest image publishes, and deciding whether this daemon release can speak it.

Package idset normalizes collections of domain identifiers.

Package projectdef exposes the stable, definition-only project API.

Package storedtime decodes timestamps read from persistent storage.

Package telemetry owns the daemon's OpenTelemetry tracing and metrics: it builds both providers from the same OTLP endpoint and headers that configure native provider export in the guest, so a daemon operation joins the caller's trace instead of starting a second one.