internal/

Package config loads PullPilot's daemon-wide configuration from PP_* env vars.

Package engine implements PullPilot's update cycle: discover in-scope containers, decide which have a genuinely newer (and soaked) image, and recreate them with health-gated rollback.

Package labels interprets PullPilot's per-container labels (io.pullpilot.*), the Compose project labels, and Watchtower compatibility aliases.

Package logging configures a zerolog logger.

Package notify sends human-facing notifications via shoutrrr.

Package registry resolves the current manifest digest for an image tag from its registry, using a cheap manifest HEAD and the standard bearer-token auth challenge flow.

Package state persists PullPilot's update bookkeeping in the data dir: when each new digest was first seen (for soak), the last digest applied per container, and digests known to fail health checks (never auto-retried).

Package version holds build metadata, injected at build time via -ldflags.

Package webhook implements the daemon side of the relay: it provisions a webhook (registering its ed25519 public key), holds an authenticated WebSocket to the relay, and turns content-free "poke" events into debounced update triggers.