Directories
¶
| Path | Synopsis |
|---|---|
|
Package aichat performs OpenAI-compatible chat HTTP calls for local recipe summarization.
|
Package aichat performs OpenAI-compatible chat HTTP calls for local recipe summarization. |
|
Package alerts dispatches anomaly notifications with TTL-cache deduplication.
|
Package alerts dispatches anomaly notifications with TTL-cache deduplication. |
|
Package alertwebhook implements an Alertmanager-compatible webhook receiver.
|
Package alertwebhook implements an Alertmanager-compatible webhook receiver. |
|
Package anomaly provides log anomaly detection using ONNX models or a built-in heuristic fallback.
|
Package anomaly provides log anomaly detection using ONNX models or a built-in heuristic fallback. |
|
Package approval holds pending recipe runs that an OPA policy flagged as require_approval, until an authorized actor approves or denies them.
|
Package approval holds pending recipe runs that an OPA policy flagged as require_approval, until an authorized actor approves or denies them. |
|
Package apps provides structures and validation for configuring target proxy applications in honey.yaml.
|
Package apps provides structures and validation for configuring target proxy applications in honey.yaml. |
|
Package appsecret handles decryption of secure:v1 app upstream DSNs.
|
Package appsecret handles decryption of secure:v1 app upstream DSNs. |
|
Package audit provides a durable, append-only audit event log.
|
Package audit provides a durable, append-only audit event log. |
|
Package cli implements the honey Cobra commands.
|
Package cli implements the honey Cobra commands. |
|
Package cloudtransfer resolves short-lived cloud credentials for staging (S3 / GCS).
|
Package cloudtransfer resolves short-lived cloud credentials for staging (S3 / GCS). |
|
Package cmdgate is the single decision point for whether a command may run on a host.
|
Package cmdgate is the single decision point for whether a command may run on a host. |
|
Package commandrisk analyzes recipe commands for dangerous patterns.
|
Package commandrisk analyzes recipe commands for dangerous patterns. |
|
Package config loads optional YAML settings and backend definitions for honey.
|
Package config loads optional YAML settings and backend definitions for honey. |
|
Package cuetry parses, validates, and resolves CUE remote recipes for honey.
|
Package cuetry parses, validates, and resolves CUE remote recipes for honey. |
|
secrets
Package secrets resolves CUE recipe secret refs.
|
Package secrets resolves CUE recipe secret refs. |
|
secrets/stack
Package stack implements symmetric secure:v1 encryption for recipe secrets.
|
Package stack implements symmetric secure:v1 encryption for recipe secrets. |
|
secrets/stackunwrap
Package stackunwrap unwraps stack data keys from secretsprovider URLs (KMS, keyring, age, etc.).
|
Package stackunwrap unwraps stack data keys from secretsprovider URLs (KMS, keyring, age, etc.). |
|
Package devmtls holds the process-wide device mTLS client credential used to reach honey servers behind an mTLS gateway.
|
Package devmtls holds the process-wide device mTLS client credential used to reach honey servers behind an mTLS gateway. |
|
Package engine implements the CUE recipe execution loop, decoupled from UI.
|
Package engine implements the CUE recipe execution loop, decoupled from UI. |
|
Package hostapi implements shared host search and backend listing for HTTP and MCP surfaces.
|
Package hostapi implements shared host search and backend listing for HTTP and MCP surfaces. |
|
Package hostexec defines the execution surface (HostClient, Executor) shared by the TUI, web server, CUE runner, and provider-specific transports.
|
Package hostexec defines the execution surface (HostClient, Executor) shared by the TUI, web server, CUE runner, and provider-specific transports. |
|
Package hosts defines the host search record model and pluggable cloud backends.
|
Package hosts defines the host search record model and pluggable cloud backends. |
|
Package inventory converts honey host records into Ansible-compatible JSON inventory.
|
Package inventory converts honey host records into Ansible-compatible JSON inventory. |
|
Package jsonutil wraps goccy/go-json as a drop-in for encoding/json.
|
Package jsonutil wraps goccy/go-json as a drop-in for encoding/json. |
|
Package k8sdebug provides utilities for Kubernetes debug containers.
|
Package k8sdebug provides utilities for Kubernetes debug containers. |
|
Package logger provides global debug logging initialization via go.uber.org/zap.
|
Package logger provides global debug logging initialization via go.uber.org/zap. |
|
Package macros loads and validates honeyfile.yaml macro sets.
|
Package macros loads and validates honeyfile.yaml macro sets. |
|
Package mcpserver implements the Model Context Protocol (stdio) server for honey.
|
Package mcpserver implements the Model Context Protocol (stdio) server for honey. |
|
Package meshnet holds the process-wide libp2p Host used to reach (and be reached by) honey backends flagged mesh: true, even when they sit behind NAT/CGNAT with no port-forward.
|
Package meshnet holds the process-wide libp2p Host used to reach (and be reached by) honey backends flagged mesh: true, even when they sit behind NAT/CGNAT with no port-forward. |
|
Package metrics provides Prometheus instrumentation for honey web.
|
Package metrics provides Prometheus instrumentation for honey web. |
|
Package plugincache provides a shared, reference-counted plugin manager that survives config reloads without disrupting in-flight requests.
|
Package plugincache provides a shared, reference-counted plugin manager that survives config reloads without disrupting in-flight requests. |
|
Package plugins loads Extism WASM plugins for honey (CUE transforms, custom steps, secret ref backends, and local hooks).
|
Package plugins loads Extism WASM plugins for honey (CUE transforms, custom steps, secret ref backends, and local hooks). |
|
api/v1
Package v1 defines the honey.plugins/v1 JSON contract between the host and WASM plugins.
|
Package v1 defines the honey.plugins/v1 JSON contract between the host and WASM plugins. |
|
Package policy evaluates Open Policy Agent (OPA) rego policies for honey's authorization decisions: recipe admission, API gating, in-recipe checks, and host-list filtering.
|
Package policy evaluates Open Policy Agent (OPA) rego policies for honey's authorization decisions: recipe admission, API gating, in-recipe checks, and host-list filtering. |
|
Package postgres runs host-mediated PostgreSQL queries via pgx on the operator.
|
Package postgres runs host-mediated PostgreSQL queries via pgx on the operator. |
|
provider
|
|
|
all
Package all provides all native honey provider factories.
|
Package all provides all native honey provider factories. |
|
awsprovider
Package awsprovider lists EC2 instances as honey host records.
|
Package awsprovider lists EC2 instances as honey host records. |
|
backendruntime
Package backendruntime provides a shared, thread-safe named-lookup registry for provider runtime configs (API credentials, exec mode).
|
Package backendruntime provides a shared, thread-safe named-lookup registry for provider runtime configs (API credentials, exec mode). |
|
consulprovider
Package consulprovider lists Consul catalog nodes as honey host records.
|
Package consulprovider lists Consul catalog nodes as honey host records. |
|
dockerprovider
Package dockerprovider implements the honey Docker Engine search backend.
|
Package dockerprovider implements the honey Docker Engine search backend. |
|
gcp
Package gcp lists Compute Engine VMs as honey host records.
|
Package gcp lists Compute Engine VMs as honey host records. |
|
honeyprovider
Package honeyprovider implements the remote honey backend integration.
|
Package honeyprovider implements the remote honey backend integration. |
|
k8sprovider
Package k8sprovider lists Kubernetes nodes or pods as honey host records.
|
Package k8sprovider lists Kubernetes nodes or pods as honey host records. |
|
localprovider
Package localprovider provides the ability to manage and search manually defined hosts.
|
Package localprovider provides the ability to manage and search manually defined hosts. |
|
proxmoxprovider
Package proxmoxprovider provides Proxmox search capabilities for honey.
|
Package proxmoxprovider provides Proxmox search capabilities for honey. |
|
truenasprovider
Package truenasprovider discovers TrueNAS SCALE hosts via the WebSocket JSON-RPC API.
|
Package truenasprovider discovers TrueNAS SCALE hosts via the WebSocket JSON-RPC API. |
|
Package proxy manages background connections, tunnels, and active sessions for applications.
|
Package proxy manages background connections, tunnels, and active sessions for applications. |
|
reverseproxy
Package reverseproxy provides a Teleport-inspired HTTP reverse proxy.
|
Package reverseproxy provides a Teleport-inspired HTTP reverse proxy. |
|
Package pvelxc implements Proxmox VE LXC and QEMU serial console (termproxy/vncwebsocket) bridging for the web UI and TUI.
|
Package pvelxc implements Proxmox VE LXC and QEMU serial console (termproxy/vncwebsocket) bridging for the web UI and TUI. |
|
Package queue provides asynchronous task execution interfaces and implementations.
|
Package queue provides asynchronous task execution interfaces and implementations. |
|
Package recipenotify wires github.com/nikoksr/notify from environment variables for CUE recipe step notifications.
|
Package recipenotify wires github.com/nikoksr/notify from environment variables for CUE recipe step notifications. |
|
Package recordings parses session .hrec.jsonl files used by the web UI and TUI replay.
|
Package recordings parses session .hrec.jsonl files used by the web UI and TUI replay. |
|
Package safepath constrains filesystem paths for user-controlled inputs (cache roots, config discovery, recipe files) and performs reads/writes via os.Root where appropriate.
|
Package safepath constrains filesystem paths for user-controlled inputs (cache roots, config discovery, recipe files) and performs reads/writes via os.Root where appropriate. |
|
Package scheduler provides a cron-based trigger layer for CUE recipe apps.
|
Package scheduler provides a cron-based trigger layer for CUE recipe apps. |
|
Package searchrun wires CLI flags and YAML config to host search and caching.
|
Package searchrun wires CLI flags and YAML config to host search and caching. |
|
Package snippets stores reusable web-UI exec snippets (saved commands/scripts) behind a pluggable Store interface.
|
Package snippets stores reusable web-UI exec snippets (saved commands/scripts) behind a pluggable Store interface. |
|
Package sshclient provides SSH client dialing, SFTP, tunnels, and known_hosts helpers for honey.
|
Package sshclient provides SSH client dialing, SFTP, tunnels, and known_hosts helpers for honey. |
|
Package stepkv implements a tiny loopback HTTP key/value API backed by an in-memory TTL cache.
|
Package stepkv implements a tiny loopback HTTP key/value API backed by an in-memory TTL cache. |
|
Package transferagent resolves and cross-builds honey-transfer-agent binaries for target GOOS/GOARCH and optional cloud flavor (S3/GCS/full).
|
Package transferagent resolves and cross-builds honey-transfer-agent binaries for target GOOS/GOARCH and optional cloud flavor (S3/GCS/full). |
|
presign
Package presign generates short-lived presigned URLs for transferring files to/from S3 or GCS without requiring an agent binary on the remote host.
|
Package presign generates short-lived presigned URLs for transferring files to/from S3 or GCS without requiring an agent binary on the remote host. |
|
Package truenasshell bridges honey web terminals to TrueNAS /websocket/shell.
|
Package truenasshell bridges honey web terminals to TrueNAS /websocket/shell. |
|
Package tun manages transparent VPN tunnels via tun2proxy-bin subprocess.
|
Package tun manages transparent VPN tunnels via tun2proxy-bin subprocess. |
|
Package udprelaywire is the shared datagram-frame codec and target validator for the UDP relay bridge between honeyprovider (client) and webserver (server).
|
Package udprelaywire is the shared datagram-frame codec and target validator for the UDP relay bridge between honeyprovider (client) and webserver (server). |
|
Package ui implements the bubbletea TUI, SSH helpers, and CUE recipe execution for honey.
|
Package ui implements the bubbletea TUI, SSH helpers, and CUE recipe execution for honey. |
|
Package webauthn provides WebAuthn (passkey) registration and assertion for biometric step-up, plus a short-lived signed token minted on a successful assertion.
|
Package webauthn provides WebAuthn (passkey) registration and assertion for biometric step-up, plus a short-lived signed token minted on a successful assertion. |
|
Package webserver provides the embedded HTTP server for honey.
|
Package webserver provides the embedded HTTP server for honey. |
|
cmd/swag2openapi
command
Command swag2openapi converts swag-generated Swagger 2.0 JSON to OpenAPI 3.x JSON for honey web.
|
Command swag2openapi converts swag-generated Swagger 2.0 JSON to OpenAPI 3.x JSON for honey web. |
|
recipestore
Package recipestore provides extensible storage abstractions for managing recipe content.
|
Package recipestore provides extensible storage abstractions for managing recipe content. |
|
workspacestore
Package workspacestore persists the studio workspace layout blob on disk.
|
Package workspacestore persists the studio workspace layout blob on disk. |
Click to show internal directories.
Click to hide internal directories.