internal/

Package api wires the HTTP surface together: REST endpoints for auth and Docker operations, the WebSocket upgrade, and serving the embedded SPA.

Package config loads runtime configuration from flags and environment variables and resolves sensible cross-platform defaults.

Package crypto provides authenticated symmetric encryption (AES-256-GCM) for secrets stored at rest, such as registry credentials.

Package docker manages connections to one or more Docker engines and exposes a domain-shaped API (containers, networks, stats, logs) for the rest of the app.

Package history stores a rolling window of container resource metrics for charting.

Package mcp exposes a remote, RBAC-gated Model Context Protocol server over the application's existing HTTP listener.

Package monitor is the alerting engine.

Package selfupdate implements `dockercmd --self-upgrade`: download the latest GitHub release asset for this OS/arch, verify its SHA-256 and atomically replace the running executable.

Package service implements `dockercmd --install-service` and friends: it installs Docker Commander as a background service for the current OS so the monitor, alert engine and metric history keep running without a browser.

Package store provides a pure-Go SQLite-backed persistence layer.

Package templates provides the built-in project scaffolds ("presets") and the composable service blocks ("blocks", the builder/skládačka) for the Projects feature, plus the rendering that turns either into concrete project files.

Package version compares dotted semantic-version strings (major.minor.patch).

Package ws implements the WebSocket endpoint that streams real-time data (container stats and logs) to authenticated frontend clients.