service/

Package agent owns the rules for a space's agent definitions.

Package artifact keeps durable files on a space's behalf.

Package audit records that a sensitive action happened.

Package identity owns what proves who a caller is.

Package llmcatalog owns what a deployment's model catalog will accept and what changing it records.

Package llmgateway resolves a model name to an operator-approved upstream target.

Package plugin owns publication and the catalog lifecycle for the private Marketplace.

Package inspect derives a bounded, sanitized description of what a plugin package contributes.

Package secret is the Space Secret lifecycle service: it validates a Secret's items, seals them through a Sealer, and stores metadata plus sealed bytes.

Package space owns membership rules: who is in a space, who may change that, and what a member may be.

Package systemadmin owns who holds a deployment-scoped role.

Package workspace owns the cross-storage commit of a Task workspace checkpoint: it validates a captured payload's descriptor, confirms the immutable bytes are already durable in the payload store, and only then records the authoritative metadata pointer through the metadata store.