controlplane/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

Links

Open Source Insights

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
agentrevocation Package agentrevocation owns the wire-level contract used by the control-plane to tell a deregistered agent that it should stop reconnecting.	Package agentrevocation owns the wire-level contract used by the control-plane to tell a deregistered agent that it should stop reconnecting.
agents Package agents holds the control-plane's agent-lifecycle domain model.	Package agents holds the control-plane's agent-lifecycle domain model.
agenttransport
api Package api holds the control-plane's presentation (view) types — the JSON shapes served to the HTTP/WebSocket layer and mirrored by the agents LiveStore.	Package api holds the control-plane's presentation (view) types — the JSON shapes served to the HTTP/WebSocket layer and mirrored by the agents LiveStore.
archguard Package archguard contains architecture-guard tests for the control-plane layering rules (P8.2).	Package archguard contains architecture-guard tests for the control-plane layering rules (P8.2).
audit
hashchain Package hashchain implements the audit_events tamper-evident chain primitives.	Package hashchain implements the audit_events tamper-evident chain primitives.
auth internal/controlplane/auth/repository.go	internal/controlplane/auth/repository.go
batchwriter
bootstrap
clients Package clients holds the control-plane's managed-client domain model.	Package clients holds the control-plane's managed-client domain model.
storagetest internal/controlplane/clients/storagetest/repository_contract.go	internal/controlplane/clients/storagetest/repository_contract.go
config
configtargets Package configtargets owns the persistence + read semantics of per-scope agent config targets (the desired editable Telemt sections for a fleet group or a single agent).	Package configtargets owns the persistence + read semantics of per-scope agent config targets (the desired editable Telemt sections for a fleet group or a single agent).
csrf Package csrf owns the double-submit CSRF token primitives used by the panel HTTP layer.	Package csrf owns the double-submit CSRF token primitives used by the panel HTTP layer.
discovered internal/controlplane/discovered/doc.go	internal/controlplane/discovered/doc.go
storagetest internal/controlplane/discovered/storagetest/repository_contract.go	internal/controlplane/discovered/storagetest/repository_contract.go
egress Package egress owns outbound-HTTP safety for the control-plane: which destinations the panel is allowed to reach and the clients that enforce it.	Package egress owns outbound-HTTP safety for the control-plane: which destinations the panel is allowed to reach and the clients that enforce it.
enrollment Package enrollment records and exposes the per-attempt timeline of every agent enrollment, both inbound (agent dials panel) and outbound (panel dials agent), so operators can see why a connection succeeded or failed.	Package enrollment records and exposes the per-attempt timeline of every agent enrollment, both inbound (agent dials panel) and outbound (panel dials agent), so operators can see why a connection succeeded or failed.
enrollmenttest Package enrollmenttest provides an in-memory enrollment.Store for tests in other packages (server HTTP integration, agenttransport outbound).	Package enrollmenttest provides an in-memory enrollment.Store for tests in other packages (server HTTP integration, agenttransport outbound).
eventbus Package eventbus provides an in-process audit/event pub/sub facade.	Package eventbus provides an in-process audit/event pub/sub facade.
events Package events pins the panel's event taxonomy as a compile-time contract (P3-3.3, audit #22).	Package events pins the panel's event taxonomy as a compile-time contract (P3-3.3, audit #22).
fleet internal/controlplane/fleet/repository.go	internal/controlplane/fleet/repository.go
integrations Package integrations wires fleet-group integrations (e.g.	Package integrations wires fleet-group integrations (e.g.
gateway Package gateway hosts the agent-facing gRPC gateway: the Connect bidi-stream (dispatch/receive/snapshot/audit/result loops), unary certificate renewal, and enrollment-step ingestion.	Package gateway hosts the agent-facing gRPC gateway: the Connect bidi-stream (dispatch/receive/snapshot/audit/result loops), unary certificate renewal, and enrollment-step ingestion.
geoip Package geoip owns the GeoLite2 City and ASN reader lifecycle and the three acquisition strategies (auto, url, local).	Package geoip owns the GeoLite2 City and ASN reader lifecycle and the three acquisition strategies (auto, url, local).
history Package history is the read-only domain service behind the panel's time-series history endpoints (server load, DC health, per-client IP history).	Package history is the read-only domain service behind the panel's time-series history endpoints (server load, DC health, per-client IP history).
jobs
kdf Package kdf owns the project's Argon2id parameter profiles and is the single point where argon2.IDKey is invoked in the control plane (password hashes, the CA-key blob, and the secret-vault master key).	Package kdf owns the project's Argon2id parameter profiles and is the single point where argon2.IDKey is invoked in the control plane (password hashes, the CA-key blob, and the secret-vault master key).
metrics Package metrics owns the Prometheus collector bundle exposed at /metrics by the control-plane.	Package metrics owns the Prometheus collector bundle exposed at /metrics by the control-plane.
otel Package otel sets up OpenTelemetry distributed tracing for the Panvex control-plane.	Package otel sets up OpenTelemetry distributed tracing for the Panvex control-plane.
presence
runtimeevents Package runtimeevents holds the panel-side per-agent in-memory rings of runtime events shipped over the Connect bidi stream.	Package runtimeevents holds the panel-side per-agent in-memory rings of runtime events shipped over the Connect bidi stream.
secretvault Package secretvault provides at-rest envelope encryption for sensitive fields (client secrets, TOTP secrets, etc.).	Package secretvault provides at-rest envelope encryption for sensitive fields (client secrets, TOTP secrets, etc.).
server internal/controlplane/server/clients_uow_adapter.go	internal/controlplane/server/clients_uow_adapter.go
sessions Package sessions holds the control-plane's HTTP session/auth support primitives that are orthogonal to the core auth service (controlplane/auth).	Package sessions holds the control-plane's HTTP session/auth support primitives that are orthogonal to the core auth service (controlplane/auth).
settings Package settings implements the central settings registry, bootstrap loader, and operational store described in docs/superpowers/specs/2026-05-07-settings-foundation-design.md.	Package settings implements the central settings registry, bootstrap loader, and operational store described in docs/superpowers/specs/2026-05-07-settings-foundation-design.md.
storage Package storage exposes a request-scoped DB query counter so HTTP middleware can observe the number of database round-trips a single panel request fires.	Package storage exposes a request-scoped DB query counter so HTTP middleware can observe the number of database round-trips a single panel request fires.
migrate
migrateguard Package migrateguard refuses to apply migrations that would silently destroy production data unless the operator has explicitly opted in.	Package migrateguard refuses to apply migrations that would silently destroy production data unless the operator has explicitly opted in.
postgres Package postgres bulk insert helpers (P3-PERF-01a).	Package postgres bulk insert helpers (P3-PERF-01a).
sqlite Package sqlite bulk insert helpers (P3-PERF-01a).	Package sqlite bulk insert helpers (P3-PERF-01a).
sqlshared Package sqlshared holds the pieces of the SQLite and PostgreSQL stores that are genuinely dialect-independent.	Package sqlshared holds the pieces of the SQLite and PostgreSQL stores that are genuinely dialect-independent.
storagetest
uow internal/controlplane/storage/uow/uow.go	internal/controlplane/storage/uow/uow.go
subscription Package subscription holds pure, dependency-free helpers for rendering a client's public subscription page: parsing Telegram proxy links into display labels.	Package subscription holds pure, dependency-free helpers for rendering a client's public subscription page: parsing Telegram proxy links into display labels.
telemetry
updates Package updates holds the control-plane's self-update subsystem: release discovery, artifact download, SHA-256 checksum verification, and atomic binary replacement.	Package updates holds the control-plane's self-update subsystem: release discovery, artifact download, SHA-256 checksum verification, and atomic binary replacement.
webhooks Package webhooks implements at-least-once outbound HTTP delivery of control-plane events (agent.unhealthy, audit.security, job.failed, …) to operator-configured receivers (Slack, PagerDuty, custom).	Package webhooks implements at-least-once outbound HTTP delivery of control-plane events (agent.unhealthy, audit.security, job.failed, …) to operator-configured receivers (Slack, PagerDuty, custom).