go/

Package netbox is a small read-only client for the NetBox GraphQL API.

Package vault is a read-only KV v2 secret reader over github.com/hashicorp/vault/api, honouring the standard environment plus the ~/.vault-token fallback and caching reads per process.

Command barf is the read-only network config tool: it renders device configs from network.yml and compares them against what the fleet is running.

Package pytext provides Go equivalents of Python stdlib text primitives, each differentially validated against CPython: not "a line splitter" but *Python's*, byte-for-byte.

Package cli is the barf command surface: a cobra tree over the model, render and device packages.

Package device provides transports to network devices, split into a read surface (the default) and a separate, opt-in write surface.

Package firmware ports barf's image provider and firmware mirror (projects/barf/barf/util/images.py, .../firmware.py): the newest image for a device type, and where a device downloads it from.

Package lifecycle implements `barf device update` and `barf device cleanup`: image install, BGP drain, reboot, post-reboot routing verification, and old-image cleanup.

Package model holds the network.yml fabric description: hosts, interfaces, the wireguard links between them, and global metadata.

Package prefetch warms the secret cache before a fleet render, porting barf.util.render.prefetch_link_keys: a host needs the WireGuard keypairs of BOTH sides of each link, and fetching them serially dominates render time.

Package progress renders live byte-transfer progress for the long, silent steps of `barf device update`: the ~700MB firmware download and the mirror upload of the same bytes.

Package render turns a parsed network.yml host into device config text.

Package scope compares a device against ONLY the slice of its config that barf manages.

Package sshx is the SSH transport the device-lifecycle commands run on, porting barf/util/ssh.py and barf/util/vyos_scripts.py.

Package tui holds the Bubble Tea interfaces for the read-only barf commands.

Package vendor says what barf can do to each kind of device: one table, one row per devicetype, composing render/device/scope rather than replacing them.

Package vyosconfig parses and diffs VyOS configuration as path sets, a port of barf/util/vyos_config.py.

Package vyoswire is the VyOS HTTPS API wire protocol and nothing else: a form-POST of `data` (a JSON op) plus `key`, answered by a {success, data, error} envelope.