internal/

Package datadir names the on-disk data root, once.

Package devmaster keys a test binary.

Package fqdn is the ONE place a public hostname is normalized, validated, and proven to be under a caller's control.

Package iamtest is a REAL IAM issuer for tests: a keypair, a JWKS endpoint, and tokens signed with it.

Package idem is exactly-once request execution over a per-org SQLite database: a request named by a caller-supplied idempotency key runs AT MOST ONCE, and any retry — including one re-routed to a different replica after a rolling upgrade — returns the first run's recorded result instead of executing the effect again.

Package magic identifies an image format from the bytes themselves.

Package migratetest is the shared regression harness for one production bug class: a store's migrate() creates an index over a column that a pre-existing (legacy) table lacks — because the column is ALTER-added later — so CREATE INDEX fails "no such column", migrate() fails, mount fails, and the pod crashloops on deploy.

Package storagelock refuses to boot the canonical Hanzo cloud orchestrator against Postgres.

Package writerlease answers ONE question for ONE process: must I take the pod's writer lease before anything on this volume is opened for write?