internal/

Package admin serves the core admin screens: dashboard widgets, users, roles, general and mail settings, system health and jobs, API keys, the audit viewer and the global admin search.

Package api is the REST layer: it mounts every operation registered in kernel.APIRegistry under /api/v1 (with scope enforcement, panic recovery and a JSON default content type), serves the generated OpenAPI 3.1 document at /api/v1/openapi.json and the Scalar reference at /api/docs, and provides the core operations (/site, /me, /health) plus helpers (pagination, decoding, error envelopes) for other modules' handlers.

Package audit writes and reads the audit log.

Package auth provides users, roles and permissions, sessions, CSRF, API keys, magic links, login rate limiting and the admin shell (login, setup, locale switch).

Package backup makes and lists data-directory backups: a consistent copy of the database (VACUUM INTO) and a tar.gz of data trees and local recovery configuration, both under <data>/backups/<UTC timestamp>.

Package commerce sells access to MCP servers: products → Stripe Checkout → orders → customers → entitlements → provisioning on billing servers over the signed mcp-billing/v1 protocol (spec §4.6, docs/COMMERCE.md).

Package config loads GoRun configuration.

Package content manages content types, custom fields, content items, revisions and queries.

Package db opens the GoRun SQLite database and provides migration, transaction, ID and time helpers shared by every module.

Package diagnostics stores bounded classifications, never raw log messages or attributes.

Package edgeprovision creates isolated GoRun Edge resources in an explicitly approved Cloudflare account.

Package ext is the extension system (spec §4.9): extensions are external programs described by a manifest.

Package hooks provides WordPress-style actions, filters and events.

Package httpx holds shared HTTP plumbing: middleware, the API response envelope, form binding/validation, the SSRF-safe client and the admin template renderer.

Package i18n loads translation catalogs and resolves the request locale.

Package identityai is an optional module that asks a configured text AI connection for identity suggestions (palette, fonts, taglines, a logo brief) and writes them to the Appearance → Identity draft, never live.

Package identitylogo stages static PNG proposals privately.

Package jobs is the DB-backed job queue: enqueue, workers with retry and exponential backoff, and a coarse cron scheduler.

Package kernel defines the Module contract and boots GoRun: it opens the database, runs each module's migrations, lets modules register into shared registries, and assembles the HTTP handler.

Package launch serves the public /start journey (customer onboarding chrome) and relies on launch overlay assets embedded under web/launch.

Package mailer sends transactional email over SMTP or Resend using mail.* settings.

Package mcp is GoRun's official Model Context Protocol server: the streamable HTTP endpoint at /mcp (bearer API keys only) and the stdio transport behind `gorun mcp --key`.

Package media manages the media library, storage drivers and image variants.

Package membership provides explicit local grants, never payment assertions.

Package menus manages navigation menus and their items.

Package metrics serves an optional Prometheus text exposition at GET /metrics.

Package observe keeps durable, revision-fenced observations of expensive or external checks so pages and APIs serve the last saved result at once while refreshes run as bounded background jobs.

Package pattern is the site-layout pattern system: declarative packages that layer opinionated page templates above the active theme identity.

Package redirects manages URL redirects.

Package saas preserves app ownership, subscriptions and atomic usage independently of commerce provisioning.

Package seo renders SEO metadata, public sitemaps and robots.txt.

Package settings is the key/value settings store.

Package site is the public front controller: it maps public URLs to content, terms and listings and renders them through the active theme (theme.Service).

Package starter holds the content a new site starts with (Arabic sample posts, pages and categories as WXR), so a fresh site is never empty.

Package taxonomy manages taxonomies, terms and their assignment to content.

Package theme loads themes, resolves the template hierarchy and renders the public site.

Package update implements the staged core update lifecycle: a persisted operation whose phases (compatibility, release verification, backup, activation, health and links, final acceptance) are reported and completed independently, protected by a durable lease, driven by a resumable job, and reconciled after a process restart.

Package webhooks sends signed HTTP notifications of site events (content, media, menus, forms, sign-ins, orders, migrations) to subscribed endpoints, with retries, a delivery log, redelivery and secret rotation.

Package workagents runs owner-scoped text agents through GoRun's job queue.

Package wpmigrate is the WordPress Migrator (spec §4.7): an honest Discovery Report, a 7-step wizard, a job-based import pipeline with resume/retry/dry-run, Gutenberg conversion, media download and URL rewrite, Yoast mapping, a WooCommerce catalog adapter and a WXR fallback.