Directories
¶
| Path | Synopsis |
|---|---|
|
Package benchworkload contains the publisher and visitor workloads shared by local runtime tests and deployed benchmarks.
|
Package benchworkload contains the publisher and visitor workloads shared by local runtime tests and deployed benchmarks. |
|
package browserfonts owns the bundled Fira Code assets used by tnl browser UI.
|
package browserfonts owns the bundled Fira Code assets used by tnl browser UI. |
|
client
|
|
|
auth
package clientauth separates ordinary authenticated requests from explicit login.
|
package clientauth separates ordinary authenticated requests from explicit login. |
|
authority
Package authorityclient calls the authority API.
|
Package authorityclient calls the authority API. |
|
control
Package controlclient calls the tnl control API.
|
Package controlclient calls the tnl control API. |
|
filelock
Package filelock acquires user-owned, mode-0600 regular lock files on Unix.
|
Package filelock acquires user-owned, mode-0600 regular lock files on Unix. |
|
project
Package projectconfig finds, loads, and validates project configuration.
|
Package projectconfig finds, loads, and validates project configuration. |
|
project/githubmetadata
package githubmetadata resolves immutable repository metadata during trusted apply.
|
package githubmetadata resolves immutable repository metadata during trusted apply. |
|
project/init
package projectinit owns project initialization planning, safe edits, and project-local dependency installation.
|
package projectinit owns project initialization planning, safe edits, and project-local dependency installation. |
|
project/meta
Package projectmeta validates and writes browser-safe project metadata.
|
Package projectmeta validates and writes browser-safe project metadata. |
|
project/resolve
package resolve composes project selection with client state and current server facts.
|
package resolve composes project selection with client state and current server facts. |
|
project/sourcestate
package sourcestate records bounded Git identifiers without saving source files.
|
package sourcestate records bounded Git identifiers without saving source files. |
|
project/workloadmanifest
package workloadmanifest owns the nonsecret build-to-runtime workload context.
|
package workloadmanifest owns the nonsecret build-to-runtime workload context. |
|
server
package clientserver selects the control URL shared by native clients.
|
package clientserver selects the control URL shared by native clients. |
|
state
package clientstate owns fresh v1 SQLite state, authenticated secret storage, and the transactional project journal shared by apps and publications.
|
package clientstate owns fresh v1 SQLite state, authenticated secret storage, and the transactional project journal shared by apps and publications. |
|
state/sqlite
Package sqlite manages client SQLite connections and migrations.
|
Package sqlite manages client SQLite connections and migrations. |
|
supervisor
package publisherjob owns installed publications and their private state.
|
package publisherjob owns installed publications and their private state. |
|
Package clioutput renders stable human-readable CLI diagrams.
|
Package clioutput renders stable human-readable CLI diagrams. |
|
Package config defines the versioned YAML and JSON configuration format.
|
Package config defines the versioned YAML and JSON configuration format. |
|
cmd/configgen
command
|
|
|
kubeconfig
package kubeconfig prepares owned contexts without selecting a global context.
|
package kubeconfig prepares owned contexts without selecting a global context. |
|
runtime
package connectionruntime owns one bounded native connection session and its private local IPC.
|
package connectionruntime owns one bounded native connection session and its private local IPC. |
|
stream
package tcpconnect owns the loopback visitor endpoint of private tunnels.
|
package tcpconnect owns the loopback visitor endpoint of private tunnels. |
|
workload
package workloadclient is the native visitor authentication adapter for a provider workload.
|
package workloadclient is the native visitor authentication adapter for a provider workload. |
|
control
|
|
|
api/authority
Package authorityapi serves the built-in authority HTTP API.
|
Package authorityapi serves the built-in authority HTTP API. |
|
api/private/ingress
Package ingressapi serves control's private API for ingress processes.
|
Package ingressapi serves control's private API for ingress processes. |
|
api/private/relay
Package relayapi serves control's private API for relay processes.
|
Package relayapi serves control's private API for relay processes. |
|
api/public
Package controlapi serves the control API and authorizes public URL operations.
|
Package controlapi serves the control API and authorizes public URL operations. |
|
api/serviceaccess
Package serviceaccess projects the existing exact-service access records for both the control-session API and the signed-human authority bridge.
|
Package serviceaccess projects the existing exact-service access records for both the control-session API and the signed-human authority bridge. |
|
certificates
Package certificates uses ACME to issue public URL and relay transport certificates.
|
Package certificates uses ACME to issue public URL and relay transport certificates. |
|
certificates/visitor
package visitorcert owns control's client-certificate issuer.
|
package visitorcert owns control's client-certificate issuer. |
|
dns
Package dnscontroller applies persistent DNS changes requested by control.
|
Package dnscontroller applies persistent DNS changes requested by control. |
|
email
package emaildelivery sends queued invitation emails to a mailer.
|
package emaildelivery sends queued invitation emails to a mailer. |
|
oidc
package oidcauth implements control-owned standard OIDC authentication.
|
package oidcauth implements control-owned standard OIDC authentication. |
|
proxy
package controlproxy admits HTTP requests from an explicitly trusted HTTPS terminator.
|
package controlproxy admits HTTP requests from an explicitly trusted HTTPS terminator. |
|
state
Package controlstate stores persistent control state in PostgreSQL and changes that state in transactions.
|
Package controlstate stores persistent control state in PostgreSQL and changes that state in transactions. |
|
storagekey
Package storagekey encrypts recoverable secrets stored by control.
|
Package storagekey encrypts recoverable secrets stored by control. |
|
usage
Package publicurlusageworker finishes and sends stored public URL usage reports.
|
Package publicurlusageworker finishes and sends stored public URL usage reports. |
|
webhooks
package webhookcatalog resolves bounded provider sender policies for control.
|
package webhookcatalog resolves bounded provider sender policies for control. |
|
config
Package tnldconfig loads and validates tnld process configuration.
|
Package tnldconfig loads and validates tnld process configuration. |
|
development
|
|
|
dns/cmd/dnsdev
command
dnsdev is a disposable, in-memory Route 53 wire fixture and authoritative DNS server for local development.
|
dnsdev is a disposable, in-memory Route 53 wire fixture and authoritative DNS server for local development. |
|
oidc
Package devoidc is a local development OIDC provider.
|
Package devoidc is a local development OIDC provider. |
|
oidc/cmd/oidcdev
command
|
|
|
package failure defines shared error reasons, retry policies, and safe messages.
|
package failure defines shared error reasons, retry policies, and safe messages. |
|
cmd/cataloggen
command
|
|
|
diagnostic
Code generated by scripts/generate/diagnostic-codes.ts.
|
Code generated by scripts/generate/diagnostic-codes.ts. |
|
problem
Package problemtype defines canonical API problem type URIs.
|
Package problemtype defines canonical API problem type URIs. |
|
Package httpclient contains shared HTTP client policy for internal clients.
|
Package httpclient contains shared HTTP client policy for internal clients. |
|
Package httpjson reads and writes size-limited JSON.
|
Package httpjson reads and writes size-limited JSON. |
|
package ingress routes HTTPS by exact SNI and authenticates private connectors.
|
package ingress routes HTTPS by exact SNI and authenticates private connectors. |
|
backend
Package routebackend defines how ingress opens a visitor stream to a publisher.
|
Package routebackend defines how ingress opens a visitor stream to a publisher. |
|
clienthello
Package router reads a size-limited TLS ClientHello and preserves every byte so the connection can replay it.
|
Package router reads a size-limited TLS ClientHello and preserves every byte so the connection can replay it. |
|
pool
package ingresspool names the public ingress-address placement boundary.
|
package ingresspool names the public ingress-address placement boundary. |
|
Package naming defines public-hostname rules used by control and ingress.
|
Package naming defines public-hostname rules used by control and ingress. |
|
opaqueid
Package opaqueid creates and validates prefixed, cryptographically random identifiers.
|
Package opaqueid creates and validates prefixed, cryptographically random identifiers. |
|
tcpport
package tcpport defines network TCP port bounds.
|
package tcpport defines network TCP port bounds. |
|
package observability owns tnl's OTel instruments, process-scoped metrics and trace providers, bounded optional OTLP/HTTPS export, and Prometheus exposition.
|
package observability owns tnl's OTel instruments, process-scoped metrics and trace providers, bounded optional OTLP/HTTPS export, and Prometheus exposition. |
|
cmd/vocabulary
command
|
|
|
operatorlog
Package operatorlog presents typed failures in compact one-line tnld logs.
|
Package operatorlog presents typed failures in compact one-line tnld logs. |
|
publicurlusage
Package publicurlusage defines public URL usage data that can be combined across reports.
|
Package publicurlusage defines public URL usage data that can be combined across reports. |
|
serviceaudit
package serviceaudit defines the allowlisted service audit boundary.
|
package serviceaudit defines the allowlisted service audit boundary. |
|
policy
|
|
|
applicationlimits
package applicationlimits owns validation shared by control and publishers.
|
package applicationlimits owns validation shared by control and publishers. |
|
authorization
Package authorization authorizes control operations and builds stable request hashes.
|
Package authorization authorizes control operations and builds stable request hashes. |
|
httpsubject
package httpsubject names the authorization boundary of an HTTP frontend.
|
package httpsubject names the authorization boundary of an HTTP frontend. |
|
ippolicy
package ippolicy verifies allowed CIDRs without exposing their network addresses.
|
package ippolicy verifies allowed CIDRs without exposing their network addresses. |
|
publisherprovenance
package publisherprovenance validates publisher-reported deployment metadata.
|
package publisherprovenance validates publisher-reported deployment metadata. |
|
target
package target validates target origins and path prefixes without network I/O.
|
package target validates target origins and path prefixes without network I/O. |
|
tcptarget
package tcptarget validates the TCP target address used by a publisher.
|
package tcptarget validates the TCP target address used by a publisher. |
|
trafficlimits
package trafficlimits defines process-local encrypted visitor traffic budgets.
|
package trafficlimits defines process-local encrypted visitor traffic budgets. |
|
visitorsubject
package visitorsubject converts the tagged visitor principal at HTTP boundaries.
|
package visitorsubject converts the tagged visitor principal at HTTP boundaries. |
|
Package publisher publishes one local service through a public URL.
|
Package publisher publishes one local service through a public URL. |
|
adhoc
package adhoc owns the scoped native Go publication lifecycle.
|
package adhoc owns the scoped native Go publication lifecycle. |
|
app
package clientruntime owns local app registration and publication observations.
|
package clientruntime owns local app registration and publication observations. |
|
demo
package demo serves a small local HTTP app for trying a public URL.
|
package demo serves a small local HTTP app for trying a public URL. |
|
deployment
package publisherdeployment owns offline publisher deployment artifacts and the nonsecret parameter contract consumed by identity bootstrap tooling.
|
package publisherdeployment owns offline publisher deployment artifacts and the nonsecret parameter contract consumed by identity bootstrap tooling. |
|
deployment/aws
package awsbootstrap prepares publisher identity secrets and nonsecret bindings.
|
package awsbootstrap prepares publisher identity secrets and nonsecret bindings. |
|
deployment/cmd/fixture
command
fixture renders the reviewed two-replica example from the product renderer.
|
fixture renders the reviewed two-replica example from the product renderer. |
|
deployment/cmd/storage-check
command
command storage-check validates resolved publisher parameter transitions offline.
|
command storage-check validates resolved publisher parameter transitions offline. |
|
group
package grouppublisher reconciles one signed publisher-group replica.
|
package grouppublisher reconciles one signed publisher-group replica. |
|
identity/credentialfile
package credentialfile stores a portable publisher key and its exact grant.
|
package credentialfile stores a portable publisher key and its exact grant. |
|
identity/publishingtest
package publishingtest exercises scoped native clients against signed enrollment HTTP exchanges and real publisher TLS/yamux lifecycle connections.
|
package publishingtest exercises scoped native clients against signed enrollment HTTP exchanges and real publisher TLS/yamux lifecycle connections. |
|
inspection
package protocolinspection observes bounded, body-free protocol summaries.
|
package protocolinspection observes bounded, body-free protocol summaries. |
|
integrations
package integrationurls maintains project integration URLs on the publisher's machine.
|
package integrationurls maintains project integration URLs on the publisher's machine. |
|
localapi
package localpublisher owns the private HTTP boundary for one native project owner.
|
package localpublisher owns the private HTTP boundary for one native project owner. |
|
localapi/protocol
package privateprotocol owns the bounded, machine-local SDK protocol.
|
package privateprotocol owns the bounded, machine-local SDK protocol. |
|
proxy
Package localproxy forwards one public hostname to one HTTP or HTTPS target.
|
Package localproxy forwards one public hostname to one HTTP or HTTPS target. |
|
runtime
package publisherruntime owns one explicitly deployed publisher's process identity.
|
package publisherruntime owns one explicitly deployed publisher's process identity. |
|
service
package privatepublisher owns service runs, verified visitor TLS and authenticated publisher connections.
|
package privatepublisher owns service runs, verified visitor TLS and authenticated publisher connections. |
|
setup
package publisherprovision owns durable group signing identity provisioning.
|
package publisherprovision owns durable group signing identity provisioning. |
|
target
package publishertarget discovers exact, worktree-scoped private listeners.
|
package publishertarget discovers exact, worktree-scoped private listeners. |
|
target/discovery
package targetdiscovery resolves cloud targets in the publisher's credential and network boundary.
|
package targetdiscovery resolves cloud targets in the publisher's credential and network boundary. |
|
target/discovery/rdsroots
package rdsroots owns the pinned, regional Amazon RDS root trust library.
|
package rdsroots owns the pinned, regional Amazon RDS root trust library. |
|
target/discovery/rdsroots/cmd/update
command
command update refreshes the vendored public certificate data.
|
command update refreshes the vendored public certificate data. |
|
target/kubernetes
package kubernetes owns native Kubernetes request semantics, not tunnel transport.
|
package kubernetes owns native Kubernetes request semantics, not tunnel transport. |
|
toolbar
Package feedbacktoolbar serves the versioned development-only browser script.
|
Package feedbacktoolbar serves the versioned development-only browser script. |
|
security
|
|
|
credentials
Package credentials creates and validates typed credentials.
|
Package credentials creates and validates typed credentials. |
|
publisherproof
package publisheridentity owns publisher-held Ed25519 proofs.
|
package publisheridentity owns publisher-held Ed25519 proofs. |
|
targettrust
package privatetrust captures public CA material for publisher-to-target TLS.
|
package privatetrust captures public CA material for publisher-to-target TLS. |
|
visitorcert
package visitorcert owns the shared client-certificate bounds and error.
|
package visitorcert owns the shared client-certificate bounds and error. |
|
workloadproof
package workloadproof defines the native exchange's key-possession proof.
|
package workloadproof defines the native exchange's key-possession proof. |
|
Package serviceapi provides HTTP helpers for the service APIs.
|
Package serviceapi provides HTTP helpers for the service APIs. |
|
awsfixture
package awsfixture implements the bounded Secrets Manager and STS HTTPS wire protocols used by publisher bootstrap.
|
package awsfixture implements the bounded Secrets Manager and STS HTTPS wire protocols used by publisher bootstrap. |
|
controltest
Package controltest creates named OIDC session fixtures for tests whose boundary is authorization or publishing.
|
Package controltest creates named OIDC session fixtures for tests whose boundary is authorization or publishing. |
|
githubtest
package githubtest serves signed GitHub workload fixtures without allowing tests to substitute a production issuer or contact GitHub.
|
package githubtest serves signed GitHub workload fixtures without allowing tests to substitute a production issuer or contact GitHub. |
|
groupdiscovery
package groupdiscovery supplies local signed control/AWS HTTPS boundaries and a verified EKS TLS target.
|
package groupdiscovery supplies local signed control/AWS HTTPS boundaries and a verified EKS TLS target. |
|
managedcert
package managedcert replaces only the external CA exchange in state tests.
|
package managedcert replaces only the external CA exchange in state tests. |
|
projectinit
package projectinittest supplies project fixtures for init operation and command presentation tests.
|
package projectinittest supplies project fixtures for init operation and command presentation tests. |
|
workerobservation
package workerobservation records actual worker spans and operator diagnostics through a process-owned exporter and a local HTTPS collector.
|
package workerobservation records actual worker spans and operator diagnostics through a process-owned exporter and a local HTTPS collector. |
|
transport
|
|
|
httpstream
package httpstream serves HTTP over one already-selected upstream connection.
|
package httpstream serves HTTP over one already-selected upstream connection. |
|
muxsession
Package muxsession carries multiplexed byte streams over supported transports.
|
Package muxsession carries multiplexed byte streams over supported transports. |
|
proxyproto
Package proxyproto implements tnl's strict PROXY protocol v2 boundary.
|
Package proxyproto implements tnl's strict PROXY protocol v2 boundary. |
|
streamcopy
Package streamcopy copies bytes in both directions and preserves half-closes.
|
Package streamcopy copies bytes in both directions and preserves half-closes. |
|
targettransport
package targettransport owns publisher-to-target negotiation.
|
package targettransport owns publisher-to-target negotiation. |
|
tunnel
Package tunnel runs tunnelv1 sessions over supported transports.
|
Package tunnel runs tunnelv1 sessions over supported transports. |
|
Package workerloop schedules bounded background-work iterations.
|
Package workerloop schedules bounded background-work iterations. |
Click to show internal directories.
Click to hide internal directories.