README
¶
lesser-host
lesser-host is the control plane for lesser.host: hosted Lesser instance provisioning, host registration governance
(tips), central trust/safety services, and the soul registry.
Repo map
- Control plane API (AppTheory HTTP):
cmd/control-plane-api - Trust API (AppTheory HTTP):
cmd/trust-api - Inbound email bridge (SES -> comm-worker):
cmd/email-ingress - Managed provisioning worker (SQS):
cmd/provision-worker - Other workers:
cmd/*-worker - Web app (portal + operator console):
web/ - Infrastructure (AWS CDK):
cdk/ - Contracts (TipSplitter + Soul registry):
contracts/
Key surfaces
- Portal + operator APIs:
docs/portal.md - Managed instance provisioning (incl. lesser-body +
POST /mcp/{actor}):docs/managed-instance-provisioning.md - Soul registry surface + instance integration:
docs/soul-surface.md - Soul registry contracts:
docs/soul-registry.md
Local verification
- Go:
go test ./... - CDK:
cd cdk && npm ci && npm run synth - Web:
cd web && npm ci && npm run lint && npm run typecheck && npm test && npm run build - Contracts:
cd contracts && npm ci && npm test
Roadmap
docs/roadmap.md
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
ai-worker
command
Package main provides the ai-worker entrypoint.
|
Package main provides the ai-worker entrypoint. |
|
comm-worker
command
Package main provides the comm-worker entrypoint.
|
Package main provides the comm-worker entrypoint. |
|
control-plane-api
command
Package main provides the control-plane API entrypoint.
|
Package main provides the control-plane API entrypoint. |
|
email-ingress
command
|
|
|
provision-worker
command
Command provision-worker runs the managed instance provisioning worker Lambda.
|
Command provision-worker runs the managed instance provisioning worker Lambda. |
|
render-worker
command
Package main provides the render-worker entrypoint.
|
Package main provides the render-worker entrypoint. |
|
soul-reputation-worker
command
|
|
|
trust-api
command
Package main provides the trust-api entrypoint.
|
Package main provides the trust-api entrypoint. |
|
internal
|
|
|
ai
Package ai defines contracts and helpers for AI jobs and results.
|
Package ai defines contracts and helpers for AI jobs and results. |
|
ai/llm
Package llm contains provider-specific LLM adapters.
|
Package llm contains provider-specific LLM adapters. |
|
aiworker
Package aiworker runs background AI jobs.
|
Package aiworker runs background AI jobs. |
|
artifacts
Package artifacts provides access to external object stores.
|
Package artifacts provides access to external object stores. |
|
attestations
Package attestations implements attestation issuance and verification helpers.
|
Package attestations implements attestation issuance and verification helpers. |
|
billing
Package billing contains credit pricing and usage ledger helpers.
|
Package billing contains credit pricing and usage ledger helpers. |
|
commmailbox
Package commmailbox contains shared bounded content-storage helpers for the host-authoritative soul comm mailbox.
|
Package commmailbox contains shared bounded content-storage helpers for the host-authoritative soul comm mailbox. |
|
commworker
Package commworker implements the communication gateway worker (provider webhooks → instance notifications).
|
Package commworker implements the communication gateway worker (provider webhooks → instance notifications). |
|
config
Package config loads and validates service configuration.
|
Package config loads and validates service configuration. |
|
controlplane
Package controlplane implements the control-plane API service.
|
Package controlplane implements the control-plane API service. |
|
domains
Package domains provides canonical domain normalization helpers shared across services.
|
Package domains provides canonical domain normalization helpers shared across services. |
|
hostmetrics
Package hostmetrics provides minimal, dependency-free metric emission via CloudWatch Embedded Metric Format (EMF).
|
Package hostmetrics provides minimal, dependency-free metric emission via CloudWatch Embedded Metric Format (EMF). |
|
observability
Package observability wires up logging and tracing.
|
Package observability wires up logging and tracing. |
|
payments
Package payments provides a minimal provider-agnostic interface for portal billing flows.
|
Package payments provides a minimal provider-agnostic interface for portal billing flows. |
|
provisioning
Package provisioning contains types and helpers for managed instance provisioning workflows.
|
Package provisioning contains types and helpers for managed instance provisioning workflows. |
|
provisionworker
Package provisionworker processes managed instance provisioning jobs from SQS.
|
Package provisionworker processes managed instance provisioning jobs from SQS. |
|
rendering
Package rendering defines render artifact policies and retention rules.
|
Package rendering defines render artifact policies and retention rules. |
|
renderworker
Package renderworker runs background render jobs.
|
Package renderworker runs background render jobs. |
|
secrets
Package secrets fetches API keys and other sensitive configuration.
|
Package secrets fetches API keys and other sensitive configuration. |
|
soulreputationworker
Package soulreputationworker computes v0 soul reputation snapshots and persists current reputation records.
|
Package soulreputationworker computes v0 soul reputation snapshots and persists current reputation records. |
|
store
Package store provides database access helpers and typed queries.
|
Package store provides database access helpers and typed queries. |
|
store/models
Package models defines database record models used by the application.
|
Package models defines database record models used by the application. |
|
tips
Package tips provides helpers for interacting with the on-chain tip registry contract.
|
Package tips provides helpers for interacting with the on-chain tip registry contract. |
|
trust
Package trust implements the trust API service.
|
Package trust implements the trust API service. |
|
scripts
|
|
|
managed-release-certification
command
|
|
|
managed-release-readiness
command
|
|
|
soul-backfill-m1
command
|
|
|
soul-backfill-m11-boundary-index
command
|
|
|
soul-email-m0-inventory
command
|
|
|
soul-email-m2-migration
command
|
|
|
soul-email-m3-canary
command
|
|
|
soul-integrity-scan-m2
command
|
Click to show internal directories.
Click to hide internal directories.