internal/

Package annotation owns the polymorphic annotation anchor model shared by reactions and comments: one embedded anchor of {artifact_id, anchor_type, anchor_ref} plus the canonical anchor_key the service derives from it.

Package artifact defines the Cairn Artifact aggregate — the single shared unit and aggregate root — and its creation invariants.

Package cliclient is the cairn CLI's typed HTTP client over the core /v1 REST API.

Package clicmd builds the `cairn` command tree (SPEC-0008 "Command Surface and REST-Client Boundary"): the bare pipe/path ingest command, `add`, `login`, `logout`, and `whoami`.

Package cliconfig resolves the cairn CLI's runtime configuration — the API base URL and bearer token — from flags, environment variables, and an on-disk config file, in that precedence order (SPEC-0008 "Configuration and Server Endpoint Resolution").

Package cliexit implements the cairn CLI's stable exit-code taxonomy (SPEC-0008 "Machine-Readable Error Mapping and Exit Codes").

Package code renders a code artifact body into the server-side, line numbered, syntax-highlighted HTML fragment the app shell drops into its body slot, together with a navigable symbol outline and the facts the metadata panel shows — the code-viewer analogue of internal/markdown (SPEC-0003 REQ "Code Viewer").

Package config loads Cairn's runtime configuration from the environment.

Package db owns the Postgres connection lifecycle and schema migrations.

Package errs defines Cairn's domain error taxonomy.

Package httpapi is the /v1 REST/JSON adapter over the core store service.

Package id mints Cairn's short, opaque, public artifact identifiers.

Package imageview renders the image share type's server-side body-slot fragment (SPEC-0003 REQ "Image Viewer", issue #69): the image itself plus the static scaffolding image.js progressively enhances into the bespoke pin overlay and the whole-artifact react-below affordance.

Package markdown renders a markdown artifact body into the sanitized, server-side HTML fragment the app shell drops into its body slot, together with the derived table of contents, the deterministic per-block ids anchors resolve against, and a small stats summary the metadata panel shows.

Package mcpsession is the core for tracking MCP agent sessions/connections (issue #76, SPEC-0007, ADR-0004): Joe runs multiple agents over MCP and wants to make sense of which agent is doing what.

Package oauth is Cairn's in-process OAuth 2.1 authorization server core (SPEC-0007, ADR-0004).

MinIO-backed ObjectStore.

Package outboundhook delivers post-commit artifact-creation events to configured HTTP targets (outbound webhooks).

Package pat implements Cairn's personal access tokens: human-minted bearer credentials for the /v1 surface, created and revoked from the web Settings UI (issue #74).

Package session is Cairn's minimal server-side web session store (SPEC-0001, ADR-0004).

Package sharetype is the compile-time share-type registry: the one place a stored share type is mapped to its viewer/panel/anchor affordances.

Package store is the Artifact core service: it streams bodies into content-addressed object storage and persists the Artifact aggregate and its blob registry in Postgres, transactionally.

Package trajectory is the core service for the trajectory share type: it persists an agent run as an ordered, nested span tree, spills oversized span outputs to content-addressed object storage, links a run to the artifacts it produced, and derives all run statistics from the span rows so they can never disagree with the waterfall.

Package webhook is the core service for the webhook (requestbin) share type: it provisions a capture endpoint as an ordinary Cairn artifact, holds its captured requests in a bounded, seq-ordered ring buffer — metadata in PostgreSQL, oversized bodies spilled to content-addressed object storage — and evicts the oldest record whenever a capture would push the buffer past its cap.