internal/

Package buildinfo exposes immutable identity compiled into a Chatz binary.

Package config loads chatz's configuration from environment variables via gonfiguration.

Package auth is chatz's authentication domain: password hashing (bcrypt), server-side opaque session tokens (only the SHA-256 hash is stored; the raw token lives in the client's HttpOnly cookie), first-run admin bootstrap, and optional single-user passwordless auto-login.

Package chat adapts elelem's provider-neutral agent loop to chatz SSE.

Package chats is the chat business-logic layer: it owns the chat + message repositories and the model registry, and drives a turn end-to-end (demo interception, model resolution, the agentic turn loop, SSE streaming, and persistence).

Package fixedresponses maps exact demo prompts to fixed assistant turns embedded at build time.

Package prompts holds generated, embedded LLM system-prompt fragments for the chat turn loop.

Package db opens the selected persistent store, runs its embedded migrations, and wires the generated gorm/gen repositories' default query.

Package migrations embeds the SQL migration files into the binary so the binary is self-contained (no directory to mount).

Package models holds the plain Go structs that gorm/gen generates type-safe repositories from.

Package heartbeat is a tiny idle-heartbeat helper for long blocking calls (an LLM stream between deltas, a single MCP tool call) that otherwise produce zero log output while waiting.

Package api provides primitives to interact with the openapi HTTP API.

Package server implements chatz's generated StrictServerInterface on echo: session-cookie auth, model discovery, MCP management, and streaming chat.

Package logging holds process-boot logging hardening that sits on top of slogconf's default handler: secret redaction (this file) and the gitignored chatz.log file sink (filesink.go).

Package mcp connects chatz to MCP servers (stdio + http) and imports their configuration.

Package metrics owns chatz's Prometheus registry and the per-subsystem metric vectors.

Package operations provides small operator-facing snapshots assembled from Chatz's already-running collaborators.

Package secrets provides authenticated encryption (AES-256-GCM) for secret values stored at rest — MCP HTTP headers and stdio env vars.

Package httpserver is the servicepack service that runs chatz's HTTP API.

Package tiktoken wraps the embedded tiktoken-go BPE codec so text can be split into model tokens with no runtime network fetch — the o200k_base vocabulary is compiled into the binary.

Package upstreams discovers models across the configured OpenAI-compatible endpoints and routes a chosen model id back to the client that serves it.

Package usage decorates an elelem.Driver so every call emits LLM metrics and best-effort persists one llm_usage row.

Package webassets embeds the built SvelteKit static SPA so the single Go binary serves both the API and the UI.