internal/

Package adapter provides the node adapter seam (DESIGN §4.3, D12): a per-kind interpretation of graph members that keeps the graph, engine, and reconciler kind-agnostic.

Package controller hosts the Wavefront reconciler: the control loop that wires detection (internal/gitpoll), discovery (internal/adapter), topology (internal/graph), the rolling-admission core (internal/engine) and the pin mechanism (internal/pin) into one stateless pass (DESIGN §3, §4).

Package engine is the rolling-admission correctness core (DESIGN §3.3, D6, D13): a pure, stateless derivation of every node's state and the admissible set from live inputs (pins, observed refs, readiness).

Package gitpoll implements ref-advertisement polling (DESIGN §3.1, D5): the stateless, checkout-free protocol read that is both the controller's change detection and the sole source of pin values.

Package graph is the pure, kind-agnostic dependsOn DAG (DESIGN §3.2): no Kubernetes, no I/O. It derives strongly connected components (cycles), transitive ancestors, and unknown (dangling) edge targets from a flat edge map of adapter.NodeRef.

Package inputs assembles one Wavefront evaluation from live cluster state: discovery, selector-overlap detection, source resolution, graph derivation and the engine evaluation over them (DESIGN §3, §4).

Package metrics is the single owner of the controller's launch metric set (DESIGN §6): every Prometheus collector the reconciler and the poller record against is created and registered here, exactly once, so that no other package registers a metric of its own.

Package pin implements the pin mechanism (DESIGN §3.5): advancing a GitRepository's spec.ref.commit to an admitted SHA under the controller's own field manager, and detecting hand-pins made by anyone else.

Package selection implements the candidate-selection seam (DESIGN §3.6, D10): the pluggable answer to "which SHA is the candidate?", decoupled from the pin mechanism itself (which is uniform across all ref styles).