internal/

Package agentrevocation owns the wire-level contract used by the control-plane to tell a deregistered agent that it should stop reconnecting.

Package agents holds the control-plane's agent-lifecycle domain model.

Package clients holds the control-plane's managed-client domain model.

Package eventbus provides an in-process audit/event pub/sub facade with a pluggable Backend interface.

Package fleet owns the create/update/delete lifecycle for fleet groups and the integrations scaffolded on top of them.

Package integrations wires fleet-group integrations (e.g.

Package otel sets up OpenTelemetry distributed tracing for the Panvex control-plane.

Package secretvault provides at-rest envelope encryption for sensitive fields (client secrets, TOTP secrets, etc.).

Package sessions holds the control-plane's HTTP session/auth support primitives that are orthogonal to the core auth service (controlplane/auth).

Package migrateguard refuses to apply migrations that would silently destroy production data unless the operator has explicitly opted in.

Package postgres bulk insert helpers (P3-PERF-01a).

Package sqlite bulk insert helpers (P3-PERF-01a).

Package updates holds the control-plane's self-update subsystem: release discovery, artifact download, signature/checksum verification, and atomic binary replacement.