internal/

Package db owns cs-plane's Postgres connection and complete state-operation boundary.

Dev Tunnels authorization exchanges Microsoft or GitHub device codes for credentials accepted by the management service.

Package identity implements the OIDC protocol client that establishes a caller's identity from a CILogon ID token.

Package router owns the process-wide HTTP route registry.

Package security enforces process-wide rules for authenticated identity, guarded HTTP, validated external names, and protected local files.

Package slurm runs the fixed Slurm programs used by sessions and parses their bounded output.

Serves the interactive SSH authentication WebSocket, whose prompt establishes a control master.

Package testutil holds the small assertions and waits shared across otherwise independent tests.