internal/

Package bundle produces deterministic, distribution-ready installer package tarballs.

Package chainexec executes ConfigHub FunctionChain and validator groups against config data.

Package changeset wraps the cub changeset CLI for installer use: per-Space ChangeSets opened by `installer update` so the resulting updates can be reverted as a unit.

Package cli wires the installer's cobra commands.

Package collector runs a package's bundled fact-collection script during the wizard step.

Package cubctx reads the active cub CLI context (organization ID, server URL) and offers a sanity-check helper that compares the live context against values recorded in a work-dir's upload.yaml.

Package deps walks a Package's Dependencies, picks a version per child package satisfying every constraint, and writes a Lock pinning each pick to a manifest digest.

Package diff computes and renders the diff between a work-dir's rendered manifests and the corresponding ConfigHub Units.

Package pkg loads installer packages — kustomize trees containing an installer.yaml manifest, distributed as local directories, .tgz archives, or Helm OCI artifacts.

Package render takes a loaded package + Selection + Inputs and produces rendered Kubernetes manifests by:

Package selection resolves a user's raw component picks against the package manifest: closes the set under Requires, rejects Conflicts, validates against the chosen Base via ValidForBases, and picks a Base when the user did not specify one.

Package sign shells out to the cosign binary to sign and verify installer OCI artifacts.

Package upload turns a rendered work-dir into the inputs the cub CLI needs to materialize ConfigHub Spaces, Units, and Links — without itself shelling out.

Package userconfig reads and writes the installer's per-user state file at ~/.confighub/installer/state.yaml.

Package version exposes the installer build version.

Package wizard collects user answers (currently non-interactive only), validates them against the package's Inputs schema, runs the package's optional Collector to discover install-time facts, and emits Selection + Inputs + Facts documents into a working directory.