internal/

Package accessrule exposes auth_access_rules, the second platform-level configuration system.

Package admin carries the platform-staff surface.

Package apikey is the management surface for API credentials: listing them, minting them, and revoking them.

Package featureflag mounts the feature flag surface.

Package firewall exposes rule authoring.

Package fleet carries the Bees surface: the endpoints a fleet agent on a Proxmox host talks to, and the platform-staff endpoints that drive them.

Package invitation carries two route groups that must never be mounted together: the organization-facing endpoints that create and withdraw invitations, which require an admin session, and the accept endpoints in accept.go, which are public by design because the invitee usually has no account yet.

Package org carries the organization-management surface: who is in this organization and what they may do.

Package policy exposes platform and organization policy management.

Package sshkey exposes the credential the control plane uses to reach hypervisors.