internal/

Package instance prepares a relocated copy of the checked-in gokrazy instance so an image build never runs from, or writes to, a tracked path.

Package kernelbuilder builds Ze runtime and installer kernels without an interpreter.

Design: docs/architecture/chaos-web-dashboard.md — chaos action scheduling

Package guard filters chaos actions that are incompatible with a peer's current state.

Package inprocess schedules in-process chaos fault injection against simulated BGP peers.

Package mcp exposes chaos dashboard state and controls as MCP tools for AI queries.

Design: docs/architecture/chaos-web-dashboard.md — mock network for in-process chaos

Design: docs/architecture/chaos-web-dashboard.md — BGP peer simulation

Design: docs/architecture/chaos-web-dashboard.md — event replay and diff

Design: docs/architecture/chaos-web-dashboard.md — chaos reporting and metrics

Design: docs/architecture/chaos-web-dashboard.md — route action scheduling

Design: docs/architecture/chaos-web-dashboard.md — scenario generation

Design: docs/architecture/chaos-web-dashboard.md — test case shrinking

Design: docs/architecture/chaos-web-dashboard.md — property-based validation

Package watchdog detects anomalies such as reconnect timeouts and convergence plateaus during chaos runs.

Design: docs/architecture/chaos-web-dashboard.md — web dashboard UI Detail: state_activeset.go — active set peer visibility management Detail: state_routematrix.go — route flow matrix and heatmap tracking Related: viz_convergence_trend.go — ConvergenceTrend RingBuffer and ComputeConvergencePercentiles

Package aaa defines the pluggable AAA (Authentication, Authorization, Accounting) backend layer.

Package all blank-imports every AAA backend so their init() functions fire and aaa.Default contains the backend factories.

Package cmd registers engine-side RPC handlers for the AAA component's CLI surface.

Design: docs/features/ai-first.md -- AI reference assembly (single source of truth)

Package api provides the shared command-execution engine backing the REST and gRPC transports.

Design: docs/architecture/api/architecture.md -- gRPC API transport

Package yang embeds and registers the gRPC transport YANG configuration module.

Design: docs/architecture/api/architecture.md -- REST API transport Related: auth.go -- the per-request credential gate and the reload seam that replaces it

Package yang embeds and registers the REST transport YANG configuration module.

Package yang embeds and registers the API YANG configuration module.

Package authz provides profile-based command authorization.

Package yang embeds and registers the authorization YANG configuration module.

Design: rfc/short/rfc5880.md -- BFD plugin entry point Design: docs/research/bfd-implementation-guide.md -- ze plugin layout Detail: config.go -- parser for the YANG bfd container

Package api defines the BFD engine's client-facing service interface for requesting sessions and receiving state changes.

Package auth implements BFD packet authentication signers and verifiers per RFC 5880.

Design: docs/architecture/bfd.md -- BFD CLI handlers

Design: rfc/short/rfc5880.md -- Echo Function (Section 6.4) Related: loop.go -- express-loop goroutine that drains the echo RX channel Related: ../packet/echo.go -- ZEEC envelope codec Related: ../session/timers.go -- EchoInterval / NextEchoTxDeadline / AdvanceEcho

Design: rfc/short/rfc5880.md -- Authentication Section (Section 4.2-4.4) Related: control.go -- 24-byte mandatory section codec

Design: rfc/short/rfc5880.md -- Section 6.7 (authentication integration) Related: session.go -- Machine state and identity Related: fsm.go -- reception procedure that drives Verify

Design: rfc/short/rfc5881.md -- single-hop UDP encapsulation Design: rfc/short/rfc5883.md -- multi-hop UDP encapsulation Related: udp.go -- IPv4 UDP transport wrapped by Dual Related: socket.go -- Transport interface contract

Package yang embeds and registers the BFD YANG configuration and command modules.

Package bgp provides shared types and event parsing for the BGP subsystem.

Package attrpool provides refcounted, deduplicating attribute pools for BGP path attributes.

Package blackholecfg reads the per-peer `blackhole` container of a BGP config subtree.

Design: docs/architecture/core-design.md — BGP CLI commands Detail: cmd_plugin.go — plugin CLI simulator subcommand

Package yang embeds and registers the BGP tools CLI command YANG module.

Design: docs/architecture/config/syntax.md — the bgp/as-notation leaf Overview: loader_create.go — the two apply paths that call this Related: internal/core/bgp/asn/asn.go — Configure, the one writer of the value

Package configjson provides shared helpers for traversing BGP config JSON delivered to plugins at Stage 2 (configure callback).

Package filter implements BGP route filtering based on attribute matching rules.

Design: docs/architecture/bgp/fanout-dedup.md -- fingerprint the edit set, confirm by equality Overview: filterapi.go -- ModAccumulator, whose state this encodes Related: editset.go -- the rebuild plan the digest predicts the output of

Package filtertext reads one attribute out of the policy filter text format.

Package format provides JSON and text formatting of BGP messages directly from wire bytes.

Package fsm implements the BGP Finite State Machine per RFC 4271 Section 8, managing peer state transitions, timers, and session lifecycle events.

Design: docs/architecture/core-design.md -- GR restart marker for Restarting Speaker detection

Design: docs/architecture/wire/messages.md — BGP message types Related: update_build.go — UPDATE builder infrastructure

Design: docs/architecture/plugin/rib-storage-design.md — Adj-RIB-In raw hex storage RFC: rfc/short/rfc4271.md -- Adj-RIBs-In stores unprocessed routing information Detail: rib_commands.go — command handlers (status, show, replay, validation) Detail: rib_validation.go — RPKI validation gate (pending routes, timeout, state constants)

Package yang embeds and registers the adj-rib-in API YANG module.

Design: (none -- predates documentation) RFC: rfc/short/rfc7311.md

Design: docs/architecture/core-design.md -- BGP plugin model

Package yang embeds and registers the BMP command and configuration YANG modules.

Package announce implements the on-demand BGP route origination command handlers.

Package yang embeds and registers the BGP announce command and API YANG modules.

Package cache implements the BGP cache operation command handlers.

Package yang embeds and registers the YANG schema modules for the cache command.

Package commit implements the BGP commit command that manages named route commit transactions.

Package yang embeds and registers the YANG schema modules for the commit command.

Design: docs/architecture/api/commands.md — BGP monitor command handlers

Package yang embeds and registers the YANG schema modules for the monitor command.

Package peer provides BGP peer lifecycle and introspection command handlers for the plugin server.

Package yang embeds and registers the YANG schema modules for the peer command.

Package policy implements the show policy commands that inspect policy chains and dry-run policy evaluation.

Package yang embeds and registers the YANG schema module for the policy command.

Design: docs/architecture/api/commands.md — BGP raw message command handler

Package yang embeds and registers the YANG schema modules for the raw command.

Design: docs/architecture/api/commands.md — RIB CLI proxy handlers

Package yang embeds and registers the YANG schema modules for the rib command.

Design: docs/architecture/bgp/replay-cursor.md -- stateful cursor for replay batching Overview: update_text.go — handleUpdate dispatch, parsedAttrs, snapshot, parseCommonAttributeText Related: update_text_nlri.go — parseNLRISection (reused unchanged)

Package yang embeds and registers the YANG schema modules for the update command.

Design: docs/architecture/core-design.md -- AS-path filter config parsing Related: match.go -- AS-path regex matching algorithm Related: filter_aspath.go -- SDK entry point and handleFilterUpdate

Package yang embeds and registers the YANG schema module for the aspath filter.

Package yang embeds and registers the YANG schema module for the aspath-length filter.

Package filter_community implements the bgp-filter-community plugin.

Package yang embeds and registers the community-filter plugin's YANG configuration schema module.

Design: docs/architecture/core-design.md -- community match filter config parsing Related: match.go -- community matching algorithm Related: filter_community_match.go -- SDK entry point and handleFilterUpdate

Package yang embeds and registers the YANG schema module for the community-match filter.

Design: docs/architecture/core-design.md -- address-family policy filter Related: config.go -- bgp/policy/family-filter config parsing + tear-down-in-export guard Related: match.go -- family extraction from the raw UPDATE body Related: handler.go -- per-update remove / tear-down decision RFC: rfc/short/rfc4760.md -- multiprotocol families (Section 6) RFC: rfc/short/rfc4271.md -- NOTIFICATION + session close (Section 6)

Package yang embeds and registers the family-filter plugin's YANG configuration schema module.

Package yang embeds and registers the IRR-filter plugin's YANG configuration schema modules.

Design: docs/architecture/core-design.md -- route modify filter config parsing Related: modify.go -- delta building and attribute encoding Related: filter_modify.go -- SDK entry point and handleFilterUpdate

Package yang embeds and registers the modify-filter plugin's YANG configuration schema module.

Design: docs/architecture/bgp/filter-path-asn.md -- the reject-asn filter plugin Detail: register_command.go -- the YANG command nodes and the in-core forwarders Detail: curated.go -- the annotation table and the transit-free set Related: filter_path_asn.go -- the SDK entry point that installs handleCommand

Package yang embeds and registers the YANG schema module for the reject-asn filter.

Design: docs/architecture/core-design.md -- prefix-list filter plugin Detail: match.go -- prefix matching algorithm and update evaluator Detail: config.go -- bgp/policy/prefix-list config parsing

Package yang embeds and registers the prefix-filter plugin's YANG configuration schema module.

Package yang embeds and registers the remove-private-AS filter plugin's YANG configuration schema module.

Design: docs/architecture/core-design.md — graceful restart plugin RFC: rfc/short/rfc4724.md RFC: rfc/short/rfc9494.md Detail: gr_state.go — GR state machine (per-peer timers, stale family tracking) Detail: gr_llgr.go — LLGR capability decode, config extraction, CLI decode (RFC 9494)

Package yang embeds and registers the graceful-restart plugin's YANG configuration schema module.

Design: docs/architecture/bgp/healthcheck-plugin.md -- healthcheck config parsing Overview: healthcheck.go -- plugin lifecycle and probe management

Package yang embeds and registers the healthcheck plugin's YANG configuration schema module.

Design: docs/architecture/core-design.md — hostname capability plugin

Package yang embeds and registers the hostname plugin's YANG configuration schema module.

Design: docs/architecture/core-design.md — link-local next-hop plugin RFC: rfc/short/rfc5549.md

Package yang embeds and registers the link-local-nexthop plugin's YANG configuration schema module.

Design: docs/architecture/wire/nlri-evpn.md — EVPN NLRI plugin RFC: rfc/short/rfc7432.md

Design: docs/architecture/wire/nlri-flowspec.md — FlowSpec NLRI plugin RFC: rfc/short/rfc5575.md Detail: plugin_decode.go — wire-to-JSON decoding and formatting Detail: plugin_encode_text.go — text-to-wire encoding Detail: plugin_protocol.go — stdin/stdout protocol dispatch

Package yang embeds and registers the FlowSpec match components that augment the announce command tree.

Design: docs/architecture/wire/nlri.md — labeled unicast NLRI plugin RFC: rfc/short/rfc8277.md

Design: docs/architecture/wire/nlri-bgpls.md — BGP-LS attribute TLV framework RFC: rfc/short/rfc7752.md — BGP-LS attribute type 29 TLV format Overview: types.go — core types, TLV constants, and helper functions Detail: attr_node.go — node attribute TLV types Detail: attr_link.go — link attribute TLV types Detail: attr_prefix.go — prefix attribute TLV types Detail: attr_srv6.go — SRv6 attribute TLV types Detail: register_attr.go — attribute TLV registration

Design: docs/architecture/wire/nlri.md — MUP NLRI prefix encoding helpers RFC: rfc/short/draft-ietf-bess-mup-safi.md — MUP SAFI encoding

Design: docs/architecture/wire/nlri.md — MVPN NLRI plugin

Design: docs/architecture/wire/nlri.md — route target constraint plugin RFC: rfc/short/rfc4684.md

Design: docs/architecture/wire/nlri.md -- SR-Policy NLRI plugin RFC: rfc/short/rfc9830.md -- SR-Policy NLRI wire format (SAFI 73)

Design: docs/architecture/wire/nlri.md — VPLS NLRI plugin RFC: rfc/short/rfc4761.md

Design: docs/architecture/wire/nlri.md — VPN NLRI plugin RFC: rfc/short/rfc4364.md

Design: docs/architecture/plugin/rib-storage-design.md — best-path selection Overview: rib.go — RIB plugin core types and event handlers Related: rib_attr_format.go — attribute formatting (asPathLength, firstASInPath shared concern) Related: rib_commands.go — extractCandidate, gatherCandidates Related: rib_pipeline_best.go — best-path pipeline for show bgp rib best commands Related: rib_bestchange.go — best-path change tracking and Bus publishing

Package pool holds the per-attribute-type BGP path-attribute pools used for fine-grained RIB deduplication.

Package storage implements the per-peer, per-family RIB storage with per-attribute-type deduplication.

Package yang embeds and registers the BGP RIB YANG schema modules.

Design: docs/architecture/core-design.md — BGP role plugin RFC: rfc/short/rfc9234.md Detail: otc.go — OTC attribute processing (ingress/egress) Detail: config.go — per-peer role config parsing (import/export)

Package yang embeds and registers the BGP role YANG schema module.

Design: docs/architecture/core-design.md — route refresh capability plugin RFC: rfc/short/rfc2918.md — route refresh capability RFC: rfc/short/rfc7313.md — enhanced route refresh

Design: docs/architecture/api/commands.md — BGP route refresh command handlers Overview: ../register.go — bgp-route-refresh SDK plugin registration

Package yang embeds and registers the BGP route-refresh YANG schema modules.

Design: docs/architecture/plugin/rib-storage-design.md -- ASPA record cache Overview: rpki.go -- plugin using this cache for ASPA path verification Related: roa_cache.go -- ROA cache following the same pattern

Package yang embeds and registers the RPKI YANG schema module.

Package rpki_decorator provides the bgp-rpki-decorator plugin.

Package yang embeds and registers the RPKI decorator YANG schema module.

Package yang embeds and registers the BGP route-reflector command YANG schema module.

Package yang embeds and registers the BGP route-server configuration YANG schema module.

Design: docs/architecture/core-design.md — software-version capability plugin

Package yang embeds and registers the BGP software-version capability YANG schema module.

Design: docs/architecture/rib-transition.md — watchdog plugin extraction Detail: server.go — command dispatch and state management Detail: config.go — config tree parser Detail: pool.go — route pool management

RFC: rfc/short/rfc4271.md -- Adj-RIB-Out (Section 3.2) and the Update-Send Process (Section 9.2) Design: docs/architecture/update-building.md -- the API origination rail this table guards Overview: reactor_api_batch.go -- announceBatchToPeers and withdrawBatchFromPeers, the only writers Related: forward_dedup.go -- the fan-out's per-call dedup, which shares a BUILD rather than suppressing a SEND

Design: docs/architecture/core-design.md — route loop detection ingress filter RFC: rfc/short/rfc4271.md RFC: rfc/short/rfc4456.md

Package yang embeds and registers the BGP loop-detection filter YANG schema module.

Package redistribute bridges BGP RIB best-path changes into the generic redistribution subsystem and injects redistributed routes back as BGP updates.

Package rib implements the BGP Routing Information Base with per-attribute-type deduplication.

Package route parses text-format BGP route definitions into wire-ready attributes and NLRI.

Package server provides BGP-specific event delivery and dispatch for the plugin server.

Package textparse provides a zero-allocation tokenizer and keyword resolution for BGP text commands.

Package transaction manages named BGP commits that queue route announcements and withdrawals until they are ended or rolled back.

Package types defines shared BGP-specific types for routes, next-hops, and reactor interfaces.

Package wireu ("wire UPDATE") implements lazy-parsed BGP UPDATE messages with zero-copy iterators over wire bytes.

Package schema embeds the YANG schemas for BGP configuration and API.

Package cli provides a unified interactive TUI for config editing, CLI, and SSH sessions.

Design: docs/architecture/core-design.md — interactive CLI Related: ../../../../cmd/ze/internal/cmdutil/cmdutil.go — shared command utilities (uses BuildCommandTree)

Design: docs/architecture/core-design.md -- component boundaries (cli/contract)

Design: docs/architecture/config/yang-config-design.md — editor test infrastructure

Design: docs/architecture/api/commands.md -- clear verb (generic verb shell)

Package yang embeds and registers the CLI clear command YANG schema modules.

Design: docs/architecture/api/commands.md — delete verb command handlers

Package yang embeds and registers the CLI delete command YANG schema modules.

Design: docs/architecture/api/commands.md — BGP log level command handlers

Package yang embeds and registers the BGP log command YANG schema modules.

Design: docs/architecture/api/commands.md — BGP command discovery and plugin configuration

Package yang embeds and registers the BGP meta command YANG schema modules.

Design: docs/architecture/api/commands.md — BGP metrics command handlers

Package yang embeds and registers the BGP metrics command YANG schema modules.

Design: docs/architecture/api/commands.md — monitor verb root (unowned)

Package yang embeds and registers the CLI monitor command YANG module.

Design: docs/architecture/api/commands.md — set verb command handlers

Package yang embeds and registers the CLI set command and API YANG modules.

Design: docs/architecture/api/commands.md -- show verb command handlers

Package yang embeds and registers the CLI show command and API YANG modules.

Design: docs/architecture/api/commands.md — BGP event subscription handlers

Package yang embeds and registers the CLI subscribe command and API YANG modules.

Design: docs/architecture/api/commands.md — update verb command handlers

Package yang embeds and registers the CLI update command and API YANG modules.

Package command provides shared types and logic for operational command execution.

Design: docs/architecture/cli/command-namespacing.md -- CLI command grammar

Package registry holds the process-wide registries for ze's command-line surface: offline local handlers, top-level root commands, and owner-backed root command handlers.

Design: docs/architecture/config/syntax.md — config parsing and loading

Package archive saves committed configuration to file and HTTP locations on commit, manual, and scheduled triggers.

Package cmd handles the config archive trigger command that archives the running configuration.

Package yang embeds and registers the config archive API YANG module.

Design: docs/architecture/config/yang-config-design.md — config claim model Related: schema.go -- builds the merged config-schema tree Audit walks Related: allowlist.json -- recorded exceptions, one reason and one owner each

Design: docs/architecture/config/syntax.md — stdin ("-") wiring for config editor commands Overview: main.go — dispatch and exit codes

Design: docs/architecture/config/environment.md — environment variable handling

Package infra holds the always-on daemon-startup contract between the hub and whichever routing engine constructs a reactor.

Package migration rewrites deprecated configuration syntax into its current equivalent.

Package redistribute moves routes between routing protocols with origin-based loop prevention.

Package yang embeds and registers the redistribute configuration YANG module.

Design: docs/architecture/config/yang-config-design.md — schema CLI

Design: docs/architecture/config/syntax.md — sensitive value encoding

Design: docs/architecture/zefs-format.md -- config storage abstraction Detail: blob.go -- blob storage implementation wrapping zefs

Design: docs/architecture/zefs-format.md -- ZeFS blob store CLI

Package system manages system-wide configuration including identity, DNS, console, connection tracking, and self-update.

Package yang embeds and registers the system configuration YANG module.

Package transaction implements the stream-based config transaction protocol.

Package events defines event constants for config transactions.

Design: docs/architecture/config/yang-config-design.md — YANG schema handling

Design: docs/architecture/config/yang-config-design.md -- YANG analysis tool Related: tree.go -- unified analysis tree builder Related: format.go -- output formatting for collisions and trees

Package yang registers debug YANG modules and validates debug flag and scope names against them.

Package cmd handles the show doctor command that runs system and plugin diagnostic checks.

Package yang embeds and registers the doctor command YANG module.

Package engine implements the top-level supervisor that composes Bus, ConfigProvider, and PluginManager.

Package firewall defines the abstract data model for ze-managed nftables firewall tables.

Package firewall provides the ze firewall subcommand for viewing nftables firewall state (tables, chains, rules, counters).

Package cmd provides formatting functions for firewall CLI output.

Package yang embeds and registers the firewall domain-group command and schema YANG modules.

Design: docs/architecture/firewall/firewall-irr.md -- firewall IRR plugin entry point Related: doctor.go -- the ze doctor check over the same references verifyRefs guards

Package yang embeds and registers the firewall IRR command and schema YANG modules.

Package yang embeds and registers the firewall component's YANG schema modules.

Package gnmi implements a gNMI server exposing Ze's YANG-modeled configuration over gRPC.

Package yang embeds and registers the gNMI component's YANG schema module.

Design: (none — new component for gokrazy management proxy)

Design: rfc/short/rfc5082.md -- GTSM, the TTL 255 rule for related ICMP messages Overview: route_linux.go -- the RTAX_HOPLIMIT host route this package installs Related: internal/core/network/ttl_linux.go -- the socket options that carry GTSM for the main protocol packets

Design: docs/architecture/host/inventory.md -- hardware inventory detection

Package yang embeds and registers the hub component's YANG schema module.

Package iface implements the interface monitoring and management plugin.

Design: docs/architecture/iface/management.md -- Interface CLI commands

Design: docs/features/interfaces.md — Interface RPC handlers for daemon dispatch Related: manage.go — command registration and server wiring for this package

Package yang embeds and registers the interface component's YANG schema modules.

Package cmd registers the IPsec VPN operational command handlers.

Package crypto implements the IKEv2 cryptographic primitives and proposal negotiation.

Package dataplane abstracts installation of IPsec security associations and policies across xfrm and VPP backends.

Design: docs/architecture/ike/ipsec-7-ikev2-engine.md -- AUTH payload computation Related: remote_id.go -- remote identity policy and certificate binding Detail: cert_payload.go -- CERT payload assembly, the received-chain bound, Hash and URL RFC: rfc/short/rfc7296.md -- Authentication of the IKE SA (Section 2.15) RFC: rfc/short/rfc7427.md -- Digital Signature AUTH method 14

Package ipsec defines the IPsec data model types and parses their configuration.

Package yang embeds and registers the IPsec configuration YANG schema module.

Package transport implements the IKE UDP transport with NAT detection and keepalive handling.

Design: docs/architecture/wire/buffer-writer.md -- payload chain parsing RFC: rfc/short/rfc7296.md -- encrypted payload contents (Section 3.14)

Package yang embeds and registers the IPsec operational command YANG schema module.

Package kernelcap enrolls the kernel features a configured subsystem cannot work without, so ze doctor reports a missing one, the daemon refuses to start, a reload is refused and ze config validate fails, all from one verdict.

Package l2tp implements L2TPv2 (RFC 2661) wire format parsing and serialization for ze's L2TP subsystem.

Design: docs/architecture/core-design.md -- l2tp offline CLI

Design: docs/guide/l2tp.md -- L2TP CLI handlers

Package yang embeds and registers the L2TP operational command YANG schema module.

Package events defines the typed EventBus handle for L2TP subscriber route-change events.

Package yang embeds and registers the L2TP local authentication YANG schema module.

Package yang embeds and registers the L2TP RADIUS authentication YANG schema module.

Package yang embeds and registers the L2TP address pool YANG schema module.

Package yang embeds and registers the L2TP shaper configuration YANG module.

Package ppp implements the PPP control plane (LCP, authentication, IPCP, IPv6CP) over chan/unit file descriptors obtained from /dev/ppp.

Package pppoe implements the PPPoE (RFC 2516) access concentrator for subscriber session management over Ethernet.

Design: docs/architecture/l2tp/bng-5-pppoe.md -- PPPoE CLI handlers

Package yang embeds and registers the PPPoE command YANG module.

Package yang embeds and registers the PPPoE API and configuration YANG modules.

Package pppoeclient implements a PPPoE client dialer that performs RFC 2516 discovery and kernel session setup.

Package subscriber provides the shared subscriber session model, registry, and metrics for PPPoE and L2TP access.

Package cmd registers the show subscriber CLI RPC handlers.

Package yang embeds and registers the subscriber command YANG module.

Package events defines the subscriber session event namespace and payloads.

Package yang embeds and registers the L2TP API and configuration YANG modules.

Package lg provides the looking glass HTTP server for Ze.

Package yang embeds and registers the looking-glass configuration YANG module.

Design: docs/architecture/fleet-config.md — managed client component

Package mcp implements the MCP (Model Context Protocol) server surface: JSON-RPC tool dispatch wrapping Ze's command dispatcher, served over the Streamable HTTP transport (streamable.go).

Package yang embeds and registers the MCP configuration YANG module.

Package mpls reads the kernel MPLS forwarding table and serves the show mpls forwarding command.

Package cmd owns the entire ping feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").

Package pki parses, validates, and stores X.509 certificates with show commands and expiry health checks.

Package yang embeds and registers the PKI API and configuration YANG modules.

Package plugin provides the plugin infrastructure for ze, including registry management, process lifecycle, hub-based message routing, and event dispatch.

Package all imports all internal plugins and schema packages, triggering their init() registration.

Design: docs/architecture/cli/plugin-modes.md — plugin CLI framework

Package doctor registers a diagnostic check that verifies configured plugin binaries are present.

Package ipc provides Unix socket pairs and typed RPC for engine-plugin communication.

Package plugin implements the PluginManager for plugin registration, lifecycle, and capabilities.

Package process manages plugin process lifecycle, respawn, and event delivery pipelines.

Package registry provides compile-time plugin registration and query for CLI dispatch, engine startup, and decode routing.

Package server manages plugin process connections, the 5-stage startup protocol, and command dispatch.

Package schema embeds the YANG schema for plugin configuration.

radiusAuthenticator bridges the RADIUS client to aaa.Authenticator for operator/admin login (SSH, web, MCP).

Package yang embeds the radius component's YANG configuration schema and registers it with the config module registry.

Design: docs/architecture/resolve.md -- Resolution component container

Design: docs/architecture/resolve.md -- Shared TTL cache for resolution components

Design: docs/architecture/resolve.md -- Team Cymru ASN resolution CLI

Design: docs/architecture/resolve.md -- resolve command handlers for dispatcher

Design: docs/architecture/resolve.md -- Team Cymru ASN name resolution Related: ../dns/resolver.go -- DNS resolver used for TXT queries

Package dns provides a DNS resolver component for Ze.

Design: (none -- predates documentation)

Design: docs/architecture/resolve.md -- shared IRR prefix resolution + persistence

Design: docs/architecture/resolve.md -- PeeringDB client for prefix update

Package yang embeds and registers the resolver API YANG module.

Package ssh implements the SSH server that serves the interactive CLI over public-key-authenticated sessions.

Package yang embeds and registers the SSH configuration YANG module.

Package storage runs periodic SMART disk health checks and self-test scheduling for block devices.

Package yang embeds the storage component's YANG configuration schema and registers it with the config module registry.

Package support collects host and configuration diagnostics into a sanitized tech-support archive.

Design: docs/architecture/core-design.md -- sysctl plugin Detail: backend.go -- platform-specific read/write Detail: register.go -- plugin registration and EventBus wiring

Design: docs/architecture/core-design.md -- sysctl offline CLI

Package events defines event constants for the sysctl plugin.

Package yang embeds the sysctl component's YANG configuration schema and registers it with the config module registry.

Design: docs/architecture/core-design.md -- System RIB plugin Related: nhresolver.go -- recursive next-hop resolution using Loc-RIB LPM Related: ecmp.go -- ECMP path collection from equal-cost protocol routes

Package events defines event constants and typed event handles for the system RIB plugin.

Package yang embeds the sysrib component's YANG configuration schema and registers it with the config module registry.

TacacsAccountant implements aaa.Accountant for TACACS+ accounting.

Design: docs/architecture/aaa-tacacs.md -- TACACS+ AAA operational CLI

Package yang embeds the tacacs component's YANG configuration schema and registers it with the config module registry.

Package collector reads Netdata-compatible OS metrics from procfs and sysfs and feeds them into the shared metrics registry.

Package yang embeds the telemetry exporter's YANG configuration schema and registers it with the config module registry.

Package cmd owns the entire traceroute feature surface as a dedicated feature module (see ai/rules/plugins.md "Dedicated feature modules").

Package traffic defines the data model for ze-managed tc (traffic control) qdiscs, classes, and filters.

Package tc provides the ze traffic control subcommand for viewing tc qdisc, class, and filter state on network interfaces.

Package cmd provides formatting functions for traffic control CLI output.

Package yang embeds the traffic component's YANG configuration schema and registers it with the config module registry.

Package trafficfeature derives neutral per-source traffic feature signals from the observation feed for detection plugins.

Package cmd registers the show traffic feature CLI handler that surfaces neutral per-source feature signals.

Package yang embeds the traffic-feature command's YANG schema and registers it with the config module registry.

Package trafficstat aggregates the observation feed into a lazy, consumer-refcounted snapshot of top talkers, ports, and protocols.

Package cmd registers the show and monitor traffic stat CLI handlers.

Package yang embeds the traffic-stat command's YANG schema and registers it with the config module registry.

Package yang embeds the vpp component's YANG configuration schema and registers it with the config module registry.

Package web provides the ze web interface, including session-based authentication middleware and security headers for all HTTP responses.

Design: docs/architecture/testing/ci-format.md -- web browser test parser Related: runner.go -- .wb test execution and browser control Related: expect.go -- expectation checking

Package yang embeds the web component's YANG configuration schema and registers it with the config module registry.

Package anomalyevent defines the source-oriented behavioral anomaly detection event contract.

Package audit provides Ze's local, append-only structured audit log.

Design: docs/architecture/config/syntax.md — the config tokens an operator types Related: internal/core/bgp/attribute/text.go — AS-path text parsing that calls Parse Related: internal/core/bgp/attribute/text_append.go — AS-path text rendering that calls Append

Design: docs/architecture/wire/attributes.md — path attribute encoding RFC: rfc/short/rfc4271.md — AS_PATH attribute (Section 5.1.2) RFC: rfc/short/rfc6793.md — 4-byte ASN support in AS_PATH

Design: docs/architecture/wire/capabilities.md — capability negotiation RFC: rfc/short/rfc5492.md — BGP capability advertisement

Package configop defines the config operation labels of the BGP root.

Design: docs/architecture/encoding-context.md — encoding context

Package events defines event constants for the BGP component.

Package msgtype owns the BGP message-type code (the 1-octet Type field of the RFC 4271 header) and its RFC-defined values.

Design: docs/architecture/wire/nlri.md — NLRI encoding and decoding RFC: rfc/short/rfc4271.md — IPv4 unicast NLRI (Section 4.3) RFC: rfc/short/rfc4760.md — multiprotocol NLRI extensions

Design: docs/architecture/rib/unified-locrib.md -- per-family NLRI split

Design: rfc/short/rfc7606.md -- Section 5.4, typed NLRI RFC: rfc/short/rfc7606.md -- Section 5.4 discard of unrecognized NLRI types Related: ../nlrisplit/nlrisplit.go -- the per-family framing this registry carves with

Package ribevents defines the (bgp-rib, ...) event constants and typed event handles: the best-path change contract between the BGP RIB and everything downstream of it.

Package routeaction owns the typed route-action vocabulary shared by the BGP engine and the always-on route consumers (sysrib, the FIB backends, the best-change event contract).

Package wire provides zero-allocation buffer writing for BGP message encoding.

Package bufpool provides a sync.Pool-seeded-for-peak byte-slice pool for protocol subsystems that share a buffer path across multiple goroutines (TACACS+ AAA, plugin-rpc framing, BGP BMP sender, etc.).

Package callsink is the neutral registration seam between the PPPoE access concentrator and the L2TP tunnel engine, letting a PADS-completed PPPoE subscriber be relayed into an L2TP incoming call (the LAC role, RFC 2661) WITHOUT the pppoe package importing the l2tp package.

Package capture defines the on-disk format of a Ze protocol event capture: a JSONL stream whose first line is a version header and whose every later line is one event.

Package ccm implements Counter with CBC-MAC, the authenticated encryption block cipher mode of RFC 3610 and NIST SP 800-38C.

Design: ai/rules/cli.md -- "-" means stdin/stdout across every command

Package clock provides injectable abstractions for time operations.

Design: docs/architecture/config/syntax.md -- the entry order of a YANG list on the plugin config path RFC: rfc/short/rfc7950.md -- Section 6.2, what a YANG identifier can start with

Design: docs/architecture/config/syntax.md -- the shapes a delivered config value takes

Package cos holds the shared registry of named class-of-service QoS profiles and their resolver.

Package ddosevent defines the destination-oriented DDoS attack detection event contract.

Package diagnostic provides stable diagnostic records, codes, and explanations for Ze's agent-facing tooling surface.

Package diskspace answers how much room a filesystem has left.

Design: docs/architecture/dns/server-harness.md -- generic DNS listener lifecycle shared by two or more authoritative-only DNS plugins.

Package dscp parses DSCP class names (e.g.

Package duration parses CLI duration strings with explicit unit suffixes into minutes.

Package eap implements the EAP authentication framework and its MD5-Challenge, MSCHAPv2 and TLS methods for IKEv2.

Design: docs/architecture/config/environment.md — centralized env var lookup Detail: registry.go — env var registration and entry listing

Package envcatalog assembles the catalog of visible environment configuration keys, expanding per-subsystem log-level entries.

Package errorfragment answers a refused htmx request with markup the browser can swap into the target the request named.

Design: docs/architecture/api/process-protocol.md -- event bus namespace and type registry Related: ids.go -- typed NamespaceID/EventTypeID/Direction populated by registration here Related: typed.go -- Event[T]/SignalEvent generic handles that call RegisterNamespace

Design: docs/architecture/wire/nlri.md -- BGP address family types RFC: rfc/short/rfc4760.md -- Multiprotocol Extensions (AFI/SAFI wire format) Detail: registry.go -- runtime registration and string cache

Package gokrazyutil provides helpers for authenticating to gokrazy's HTTP management interface.

Package health registers named component health checks and aggregates them into a JSON status report.

Design: docs/architecture/core-design.md — CLI help formatting

Package hostload samples system load to classify whether a test run was CPU-contended.

Package identity resolves a stable machine identity and persists it to the blob store.

Package events defines event constants for the interface component.

Package ipc routes and serializes plugin RPC method calls for the IPC wire protocol.

Package yang embeds the ze plugin and system YANG modules and registers them with the config loader.

Design: docs/architecture/memory/lifetime-contracts.md — shared "held past boundary" vocabulary

Design: docs/architecture/core-design.md — metric collection interfaces Detail: prometheus.go — Prometheus backend implementing Registry Detail: nop.go — no-op backend for tests and disabled state Detail: server.go — HTTP server for metrics endpoint

Package mplsfib defines the event channel carrying MPLS forwarding entries from label-distribution sources to the kernel FIB.

Package naming validates configuration node names against the shared node-name pattern.

Design: docs/architecture/core-design.md -- shared IPv6 Neighbor Discovery encoding

Package network provides injectable abstractions for network operations.

Package observation provides an in-process, multi-subscriber feed for traffic observations.

Package pacer paces the retries of a goroutine whose read keeps failing.

Design: docs/architecture/config/syntax.md — parsing helpers

Package paths resolves the ze configuration directory from the running binary's location.

Design: docs/architecture/diagnostics/packet-capture.md -- the one owner of the pcap file format Detail: frame.go -- synthetic IP and TCP headers around a payload Detail: reader.go -- reading a pcap file back, either endianness Detail: reassemble.go -- TCP stream reassembly across records

Package portname resolves transport port numbers to service names and amplification-vector labels.

Design: docs/architecture/system-architecture.md — daemon privilege dropping Detail: drop_unix.go — Unix setuid/setgid implementation Detail: drop_other.go — no-op for non-Unix platforms

Design: docs/architecture/api/commands.md — shared ICMP probe primitives

Package procfs provides helpers for reading and decoding Linux /proc network state.

Package redact scrubs credential-bearing tokens from strings before they are logged.

Design: docs/architecture/core-design.md -- cross-protocol route-change events Detail: pool.go -- batch pool allocation Detail: registry.go -- protocol ID registration

Design: docs/architecture/core-design.md -- shared late-join replay vocabulary (Redistribute Late-Join Replay)

Package rescueauth encodes and verifies the installer's rescue-shell credential.

Package resolve selects the storage backend and default config filename for ze.

Package distance carries every protocol's administrative distance from the one place it is declared to the producers that stamp it on a route.

Package igpcost carries the IGP metric of a resolved next-hop from whoever computes it to whoever ranks paths by it.

Package locrib implements the unified, sharded Loc-RIB that arbitrates best paths across routing protocols.

Package nexthop carries the one description of a forwarding target that crosses every RIB boundary: the Loc-RIB Path, the best-change event the BGP RIB emits, and the multipath group sysrib hands the FIB plugins.

Design: docs/architecture/forked-route-install.md -- forked route install via Loc-RIB RPC

Package routetype holds the forwarding action a FIB entry takes.

Package store provides a generic prefix-keyed route store backed by a BART trie.

Package routewatch subscribes to kernel route changes via netlink and fans them out to handlers.

Package routingtable maps routing-table names to kernel table IDs.

Design: docs/architecture/core-design.md -- Linux route protocol IDs

Design: docs/architecture/core-design.md — peer selector

Package selfcert generates and persists self-signed HTTPS certificates for local Ze services.

Design: (none — internal utility, no architecture doc) — generic sequence-indexed map

Package show registers enrichers that augment show-command output with plugin-provided fields.

Design: docs/architecture/config/environment.md — structured logging utilities Detail: color.go — ANSI color formatting for terminal output

Package smart reads disk SMART health data via direct ATA and NVMe ioctls.

Design: docs/architecture/core-design.md — source registry

Package client provides SSH client connectivity for ze CLI tools.

Design: ai/rules/architecture.md -- runtime state persists in the managed zefs store, never as loose files.

Design: docs/architecture/traffic/traffic-analysis-layers.md -- shared traffic-analysis stats primitives

Package stringsx provides string-splitting helpers that also report the resulting count.

Package subdispatch routes action-first CLI subcommands to registered handlers.

Design: (none — utility package)

Package syncutil provides concurrency helpers.

Design: docs/architecture/core-design.md -- sysctl known-keys registry Detail: known_linux.go -- Linux sysctl key registrations

Package textbuf provides allocation-free string building and formatting helpers.

Package version provides build and VCS version information for ze.

Package events defines event constants for the VPP component.

Design: docs/architecture/core-design.md — startup protocol and bridge runtime Detail: bridge_event.go — ZeBGP to ExaBGP JSON event translation Detail: bridge_command.go — ExaBGP text command translation Detail: bridge_muxconn.go — MuxConn wire format parsing for post-startup I/O

Package migration converts ExaBGP configuration to Ze format.

Package topics provides the canonical mapping from ExaBGP log topic names to Ze subsystem paths.

Package disk implements the ze install disk workflow that writes a disk image and injects the database.

Design: ai/rules/repo-maintenance.md -- one canonical source, several tool mirrors Related: actions.go -- the verbs that reach this mirror Related: report.go -- what a run answers

Design: docs/architecture/core-design.md -- the architecture lists, generated

Design: docs/architecture/testing/verify-freshness-scope.md -- what a scoped run covers Related: actions.go -- the verbs that reach this selection Related: scope.go -- the scoped-verify question this area also answers Related: report.go -- the two renderings of one selection

Design: docs/architecture/core-design.md -- one structured commit workflow command

Design: docs/architecture/testing/interop.md -- ze against a real peer Related: l2tp.go -- the first proof built on what this file holds Related: vppiface.go -- the second Related: daemonbuild.go -- the daemon both of them drive Related: gokrazykernel.go -- the kernel gate an appliance proof goes through Detail: netns.go -- the namespaces the on-host proofs keep their daemons apart in

Design: docs/architecture/core-design.md -- a derived artifact declares its inputs and its rebuild

Design: docs/contributing/documentation-testing.md -- the digest anchor check

Design: docs/architecture/core-design.md -- the generated package map Detail: report.go -- what the command answers and the two halves that write it Detail: sources.go -- which changed file can drift the index

Design: docs/architecture/core-design.md -- changed-file wiring and docs router.

Package dockerhost names the Docker daemon socket a development command must talk to when nothing else can name one.

Design: docs/architecture/core-design.md -- the generated docs-to-code index Detail: report.go -- what the command answers, and the rendering of the file Detail: codetodocs.go -- the MIRROR index, from the anchors inside docs/

Design: docs/architecture/core-design.md -- published command surfaces come from the live catalog

Design: docs/architecture/testing/ci-format.md -- the release-candidate gate Detail: report.go -- the payload this run answers Related: actions.go -- the area table that reaches this run

Design: ai/rules/plugins.md -- static consumers are GENERATED, not hand-maintained Related: daemontags.go -- the second consumer of the same manifest

Design: docs/architecture/core-design.md -- how le runs a gate's command Detail: ../gotoolchain/gotoolchain.go -- the environment that command runs under

Design: docs/architecture/core-design.md -- moving Go declarations between files

Design: docs/architecture/appliance/gokrazy-build-pins.md -- the packed go.sum gate

Design: docs/architecture/core-design.md -- one declaration of the Go version, and the carriers that copy it Detail: dockerfile.go -- how a build stage is read out of a Dockerfile Detail: report.go -- what `le go-version check` answers

Design: docs/architecture/core-design.md -- hook selftests and runtime are one le action area Overview: hookcheck.go -- native selftest implementation

Design: docs/architecture/core-design.md -- native delegation hook policy

Design: docs/architecture/resolve.md -- the shipped RIR delegation seed

Design: docs/architecture/testing/interop.md -- what an integration gate needs Detail: actions.go -- the dispatch every row here is turned into

Design: docs/architecture/testing/interop.md -- scenario discovery and selector contract Related: lab.go -- discovered scenarios become lifecycle plans.

Design: docs/architecture/testing/interop.md -- fail-closed peer assertions.

Design: docs/architecture/testing/interop.md -- complete typed assertions for every checked-in strongSwan scenario.

Design: docs/architecture/testing/interop.md -- typed L2TP scenario assertions.

Design: docs/architecture/testing/interop.md -- independent RADIUS wire peer for the L2TP accounting scenario.

Design: docs/architecture/testing/interop.md -- typed Ze access-concentrator checks against an independent pppd client.

Design: docs/architecture/testing/interop.md -- what a checker owes, and the five vacuity traps.

Design: docs/architecture/core-design.md -- admission for heavy jobs in a shared checkout Detail: registry.go -- the entry that IS the claim, and the scan that reads every one of them Detail: attach.go -- what a second asker does instead of running the same job twice Detail: treehash.go -- the fingerprint of the tree a job judges Detail: jobkey.go -- the fingerprint of the work a job does

Design: docs/architecture/core-design.md -- the journal area, as one command

Design: docs/architecture/core-design.md -- an le area, as one command

Design: docs/features/ai-first.md -- per-harness commit-session identity

Design: docs/architecture/core-design.md -- le's registration adapter Detail: dispatch.go -- the loop that runs the commands registered here Detail: group.go -- the five groups a registration names, and their order

Design: docs/architecture/core-design.md -- module migration workflows

Design: docs/architecture/core-design.md -- native developer-tool actions

actions.go exposes the native netlab render check and golden rewrite through leaction.

Design: docs/architecture/core-design.md -- the perf benchmark, as three actions Detail: ../../test/perfrunner/run.go -- the multi-DUT Docker run these verbs drive Overview: actions.go -- the table these three verbs are declared in

Design: docs/architecture/core-design.md -- the platform-vet area, as one command Overview: platformvet.go -- the shared runner for both cross-target actions

Design: docs/architecture/command-ownership.md -- the generated composition root

Design: docs/contributing/testing.md -- a gate accounts for every member it does not walk Related: ../verify/lint/verifylint.go -- the first gate that carried this accounting

Design: ai/rules/protocol.md -- the protocol skeleton, as a lens

Design: docs/architecture/testing/qemu-integration.md -- what the VM proves Related: alltests_report.go -- what one whole run answers Related: alltests_tally.go -- how many tests a suite actually executed Related: netns.go -- which suites run outside the transport's namespace Related: actions.go -- the verb that reaches this run

Design: docs/architecture/core-design.md -- what the repository gate answers

Design: docs/architecture/core-design.md -- the rfc area, as one command Overview: rfc.go -- the types, the paths and the closed sets every reader here shares

Design: docs/architecture/core-design.md -- measure whether routed rules were read Overview: actions.go -- the rules command surface Related: rules.go -- the shared rule corpus predicate

Design: docs/contributing/running-commands.md -- the lines of a run log a reader needs first Related: ../verify/engine/summary.go -- the verification failure index built from these lines Related: ../job/quiet.go -- the same lines, answered by one job

Design: docs/architecture/core-design.md -- le action packages Overview: scratch.go -- filesystem policy and implementation

Design: docs/architecture/core-design.md -- native session lifecycle command Related: seed.go -- session store seeding Related: summary.go -- session recovery snapshot

Design: docs/guide/developer-setup.md -- the supported Ubuntu server bootstrap

Design: website/AI.md -- one native command surface owns site build tools

Design: docs/architecture/core-design.md -- the published repository facts, as one command

Design: docs/architecture/core-design.md -- the wiki-index area, as one command

Design: docs/architecture/core-design.md -- one command area, separate native actions

Design: docs/architecture/core-design.md -- le's native development gates Related: report.go -- structured findings and the legacy text rendering

Package specsession owns spec claims, state paths, review artifacts, and the transcript facts those contracts use.

Design: docs/architecture/core-design.md -- le's one declaration of the spec layout

Design: docs/architecture/core-design.md -- le's spec inventory

Design: docs/architecture/core-design.md -- the ste area Overview: ste.go -- the checker behind each action

Design: docs/architecture/core-design.md -- one definition of the demo manifest contract Overview: manifest.go -- the contracts a render writes and verifies Related: types.go -- Manifest, Demo and ArtifactEntry, which this answers

Design: docs/architecture/core-design.md -- the chaos test area.

Design: docs/architecture/testing/test-health.md -- native health actions

Design: docs/architecture/core-design.md -- native development command composition

Design: docs/architecture/core-design.md -- the unit-test area as one command Overview: groups.go -- the named package groups, and what `all` sweeps

Design: docs/architecture/testing/test-health.md -- weakened-test gate declarations Related: testweakened.go -- the live check; selftest.go -- the fixture proof.

Design: docs/architecture/core-design.md -- stable quoted diagnostic values.

Design: ai/rules/architecture.md -- the tier area, as one command

Design: ai/rules/context-economy.md -- where a session's tokens go Detail: aggregate.go -- the figures derived from what this file reads Detail: run.go -- the command that resolves a store and fills the report

Design: docs/architecture/core-design.md -- the vendored-web tools, as commands

Design: docs/architecture/testing/verify-freshness-scope.md -- detached-worktree verification command

Design: docs/architecture/core-design.md -- verifier dependencies as one command Overview: verifydeps.go -- plans, execution, and structured reports

Design: docs/architecture/core-design.md -- registered in-process verification dispatch

Design: docs/functional-tests.md -- published verification failure protocol

Design: docs/architecture/testing/verify-freshness-scope.md -- failure attribution Related: ../engine/artifacts.go -- DeclaredGroups, which reads what Declare writes Related: ../../commit/verification.go -- structuralGateReds, which charges the red

Design: docs/architecture/core-design.md -- native verifier work is callable through le Detail: verifylint.go -- the full lint plan and direct process execution

Design: docs/architecture/core-design.md -- verify-class admission through the shared job registry Related: ../job/job.go -- the single admission, locking, and process implementation

Design: docs/architecture/testing/verify-freshness-scope.md -- verification status command

Design: docs/architecture/testing/verify-freshness-scope.md -- verification failure summary command

Design: docs/architecture/web-interface.md -- per-page web asset sets

Design: docs/architecture/core-design.md -- the weekly update's command Detail: poster.go -- what the parsed options drive

Design: docs/architecture/core-design.md -- one closed le action area

Design: ai/rules/git-safety.md -- how wide the uncommitted tree is

Design: ai/rules/git-safety.md -- what may rewrite a checkout, and what may not Related: report.go -- what an update answers Related: actions.go -- the verb that reaches this updater

Design: docs/architecture/command-ownership.md -- YANG as data, generated glue wires it in

Design: docs/architecture/core-design.md -- three native YANG migration actions

Design: (none -- new tool, predates documentation)

Package yang embeds and registers the AAA command YANG schema module.

Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.

Package yang embeds and registers the anomaly-detection command YANG schema module.

Package yang embeds and registers the anomaly-detection configuration YANG schema module.

Package yang embeds and registers the ze-anomaly-observe-cmd YANG command schema for the behavioral anomaly observe plugin.

Package yang embeds and registers the ze-anomaly-observe-conf YANG configuration schema for the behavioral anomaly observe plugin.

Design: docs/architecture/anomaly/anomaly-4-interop-harness.md -- in-process test composition seam.

Package yang embeds and registers the anomaly-shaping command YANG schema module.

Package yang embeds and registers the anomaly-shaping configuration YANG schema module.

Package as112events holds the as112 plugin's redistribute producer identity: its numeric ProtocolID and the LOCAL typed EventBus handle for (as112, route-change).

Package yang embeds and registers the AS112 command and configuration YANG schema modules.

Design: (none -- new feature, shell completion generation) Detail: bash.go -- bash completion script generation Detail: zsh.go -- zsh completion script generation Detail: fish.go -- fish completion script generation Detail: nushell.go -- nushell completion script generation Detail: words.go -- dynamic completion data source for shell scripts Detail: peers.go -- dynamic peer selector completion from running daemon

Package yang embeds and registers the configuration-archive command YANG schema module.

Package yang embeds and registers the config CLI command YANG schema module.

Package yang embeds and registers the schema CLI command YANG schema module.

Package yang embeds and registers the storage CLI command YANG schema module.

Package yang embeds and registers the YANG CLI command YANG schema module.

Package connectedevents registers the connected-routes redistribution producer and route-change event.

Package yang embeds and registers the connected-routes configuration YANG schema module.

Package yang embeds and registers the control-plane policing (CoPP) configuration YANG schema module.

Package yang embeds and registers the class-of-service (CoS) configuration YANG schema module.

Package cmd registers the show-crashes RPC handler that lists and displays recorded crash reports.

Package yang embeds and registers the crashes command YANG schema module.

Design: docs/architecture/ddos/cp-survival-5-detect-5-characterization.md -- flow-source readiness.

Package yang embeds and registers the DDoS-detection configuration YANG schema module.

Package yang embeds and registers the ze-ddos-flowspec-cmd YANG command schema for the DDoS FlowSpec plugin.

Package yang embeds and registers the ze-ddos-flowspec-conf YANG configuration schema for the DDoS FlowSpec plugin.

Package yang embeds and registers the ze-ddos-flowtriq-conf YANG configuration schema for the DDoS flowtriq plugin.

Package yang embeds and registers the ze-ddos-local-cmd YANG command schema for the DDoS local plugin.

Package yang embeds and registers the ze-ddos-local-conf YANG configuration schema for the DDoS local plugin.

Package yang embeds and registers the ze-ddos-cmd YANG command schema for the DDoS observe plugin.

Package yang embeds and registers the ze-ddos-observe-conf YANG configuration schema for the DDoS observe plugin.

Package cmd registers RPC handlers that report live debug logging state for the debug plugin.

Package yang embeds and registers the ze-debug-cmd YANG command schema for the debug plugin.

Package yang embeds and registers the ze-dhcp-server-conf YANG configuration schema for the DHCP server plugin.

Package cmd registers RPC handlers for diagnostic show commands including TCP reachability checks and control-plane packet capture.

Package yang embeds and registers the ze-diag-cmd YANG command schema for the diag plugin.

Package yang embeds and registers the ze-env-cmd YANG command schema for the env plugin.

Design: docs/architecture/core-design.md — external format bridge CLI Detail: main_sdk.go — SDK/TLS connect-back mode for engine-launched bridge

Design: docs/architecture/core-design.md -- FIB backend abstraction Overview: fibkernel.go -- FIB kernel plugin Related: backend_linux.go -- Linux netlink backend Related: backend_other.go -- noop backend for non-Linux platforms Related: monitor.go -- external route change handling

Package events defines event constants for the FIB kernel plugin.

Package yang embeds and registers the ze-fib-conf YANG configuration schema for the kernel FIB plugin.

Design: docs/architecture/core-design.md -- FIB P4 backend Overview: fibp4.go -- FIB P4 plugin

Package yang embeds and registers the ze-fib-p4-conf YANG configuration schema for the P4 FIB plugin.

Design: docs/research/vpp-deployment-reference.md -- VPP FIB route programming Detail: backend.go -- GoVPP backend and mock for testing

Package yang embeds and registers the ze-fib-vpp-conf YANG configuration schema for the VPP FIB plugin.

Package firewallnft implements the firewall backend using google/nftables.

Package firewallvpp implements the ze firewall Backend interface on top of VPP's ACL plugin binary API via GoVPP.

Package yang embeds and registers the ze-flowexport-cmd YANG command schema for the flow export plugin.

Package conntrack reads Linux conntrack flow entries via netlink and tracks per-flow byte and packet deltas for flow export.

Package enrich annotates exported flows with BGP-derived AS, next-hop, and local-pref metadata via longest-prefix-match lookups.

Package ipfix encodes flow and interface-counter records into IPFIX export messages.

Package netflow9 encodes flow and interface-counter records into NetFlow v9 export packets.

Package sampling captures sampled packets using the Linux tc sample action and the psample generic netlink reader.

Package sflow encodes interface counters and sampled packets into sFlow v5 export datagrams.

Package yang embeds and registers the flow export configuration YANG schema module.

Design: docs/architecture/core-design.md -- FlowSpec-to-firewall bridge engine Related: register.go -- plugin registration that invokes runEngine

Design: docs/architecture/dns/geodns.md -- geodns listen-port bind-capability doctor check Related: register.go -- DoctorChecks registration (geodns-listen-capability)

Package yang embeds and registers the GeoDNS command and configuration YANG schema modules.

Package yang embeds and registers the gNMI command YANG schema module.

Package host is the offline fallback for `show host [section]`.

Package cmd registers the host inventory, kernel-log, and file-descriptor command handlers.

Package yang embeds and registers the host command YANG schema modules.

Package ifacedhcp implements DHCPv4/DHCPv6 client functionality as a separate plugin.

Package ifacenetlink implements the netlink-based interface management backend for Linux.

Design: docs/features/interfaces.md -- Router Advertisement sender for a LAN unit Related: register.go -- the factory that binds the counters declared here

Package ifacevpp implements the iface backend for VPP via the GoVPP binary API.

Package yang embeds and registers the VPP interface command YANG schema module.

Package yang embeds and registers the image server configuration YANG schema module.

Package init provides the `ze init` command that bootstraps the zefs database with SSH credentials before any other ze command can work.

Design: docs/architecture/isis/isis-4-component-config.md -- IS-IS component registration Related: config.go -- typed config resolution Related: server.go -- engine orchestration + PDU dispatcher Related: events.go -- event namespace + typed handles

Package adjacency implements the IS-IS adjacency finite state machine and per-circuit neighbor table.

Package circuit implements the per-interface IS-IS circuit runtime that drives Hello exchange and the adjacency table.

Package lsdb implements the per-level IS-IS link-state database store.

Package packet is the IS-IS PDU and TLV wire codec: the protocol's serialization boundary.

Design: docs/architecture/isis/isis-11-redistribution.md -- IS-IS redistevents producer wiring.

Package spf computes IS-IS shortest paths via Dijkstra over the LSDB graph and installs the resulting routes.

Package transport implements the raw L2 transport that carries IS-IS PDUs between the socket and the engine.

Package types defines the pure IS-IS domain value types: SystemID, SourceID, LSPID, NET, AreaID, the two wide metric widths (Metric and PrefixMetric), SequenceNumber, RemainingLifetime and HoldingTime.

Package yang embeds and registers the IS-IS command and configuration YANG schema modules.

Package kernelevents registers the kernel redistribution protocol and its route-change events.

Package yang embeds and registers the kernel plugin's YANG configuration schema.

RFC: rfc/short/rfc5036.md -- Section 3.5.2 Hello Hold Time defaults Design: docs/architecture/ldp/mpls-ldp.md -- LDP discovery (UDP hello) Related: wire.go -- HelloMessage encoding/decoding

Package yang embeds and registers the LDP plugin's YANG command and configuration schemas.

Package local implements the ze install and uninstall local-mode commands that copy the binary and scaffold its config directory.

Package cmd implements the log plugin's command handlers for listing, setting, and reading runtime log levels.

Package yang embeds and registers the log plugin's YANG command schema.

Design: docs/architecture/plugin/plugin-system.md -- plugin registration Detail: memlock_linux.go -- the init() that takes the lock Detail: register.go -- registration, the engine run, and the doctor check

Package cmd implements the meta plugin's command discovery, help, event-monitor, and plugin-configuration handlers.

Package yang embeds and registers the command-meta plugin's YANG API, command, and monitor schemas.

Package yang embeds and registers the MPLS command plugin's YANG schema.

Package yang embeds and registers the MRT plugin's YANG configuration schema.

Package ntp implements a lightweight NTP client plugin for ze.

Package events defines event constants for the "system" event namespace.

Package yang embeds and registers the NTP plugin's YANG command and configuration schemas.

Design: docs/architecture/ospf/ospf-4-component-config.md -- per-area state scaffolding Related: config.go -- areaConfig and interfaceConfig inputs

Package iface implements the per-interface OSPF runtime, including the interface state machine, Hello exchange, DR election, and neighbor management.

Package lsdb implements the per-area OSPF link-state database with LSA flooding, origination, and aging.

Package neighbor implements the OSPFv2 Neighbor State Machine and database-exchange scaffolding.

Package packet is the OSPFv2 packet and LSA wire codec: the protocol's serialization boundary.

Design: docs/architecture/ospf/ospf-10-as-external-asbr.md -- OSPF redistevents producer wiring.

Package spf implements OSPF shortest-path-first computation, route selection, and loop-free-alternate backup calculation.

Package sr holds the address-family-neutral control plane for OSPF Segment Routing (RFC 8665 for the IPv4 family, RFC 8666 for the IPv6 family).

Package transport is the OSPFv2 raw IPv4 transport byte pipe.

Package types contains pure OSPFv2 value types and checksum algorithms.

Package packet is the OSPFv3 (RFC 5340) packet and LSA wire codec: the protocol's serialization boundary.

Package transport implements the OSPFv3 raw IPv6 socket transport that sends and receives OSPF datagrams per interface.

Package types holds the OSPFv3 (RFC 5340) leaf value types shared by every later OSPFv3 child spec: Router ID, Area ID, Instance ID, Interface ID, Link State ID, the 16-bit LS Type with embedded flooding scope, the comparable LSA key, sequence numbers, ages, the 24-bit Options field, IPv6 prefix length/options, and metrics.

Package wire defines the address-family-neutral RawPacket handed from an OSPF transport up to the shared engine.

Package yang embeds and registers the OSPF plugin's YANG command and configuration schemas.

Package passwd implements the `ze passwd` subcommand.

Package yang embeds and registers the ping command plugin's YANG schema.

Package yang embeds and registers the PKI command plugin's YANG schema.

Package yang embeds and registers the policy-route plugin's YANG command and configuration schemas.

Package provision implements the ze provision command that runs DHCP, PXE, and TFTP servers for remote device installation.

Package yang embeds and registers the resolve command plugin's YANG schema.

Package yang embeds and registers the routing-table plugin's YANG configuration schema.

Design: docs/architecture/rsvpte/mpls-rsvp-te.md -- RSVP-TE bandwidth admission control Related: wire.go -- FlowSpec carries bandwidth parameters Related: fsm.go -- LSP tracks bandwidth reservation

Package yang embeds and registers the RSVP-TE plugin's YANG schema modules.

Design: docs/architecture/behavior/signals.md — signal handling CLI

Package staticevents registers the static route protocol's redistribution event types.

Package staticvpp programs static routes into the VPP FIB via GoVPP.

Package yang embeds and registers the static route plugin's YANG schema modules.

Package yang embeds and registers the storage command plugin's YANG schema module.

Package systemd installs and uninstalls ze as a systemd service.

Package yang embeds and registers the TFTP server plugin's YANG schema module.

Package yang embeds and registers the traceroute command plugin's YANG schema module.

Package yang embeds and registers the traffic command plugin's YANG schema module.

Package trafficnetlink implements the traffic control backend using vishvananda/netlink.

Package trafficvpp implements the ze traffic-control Backend interface on top of VPP's binary API via GoVPP.

Package trafficusage implements the `traffic-usage` system plugin: eBPF TCX per-(port,protocol) and (opt-in) per-IP byte accounting on operator-selected interfaces, exported as Prometheus metrics and viewable via `show traffic-usage`.

Package yang embeds and registers the traffic-usage plugin's YANG schema modules.

Package cmd handles the system update and firmware show/update RPC commands.

Package yang embeds and registers the update command plugin's YANG schema modules.

Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- Accept_Mode dataplane enforcement RFC: rfc/short/rfc9568.md (VRRPv3) -- Section 6.1 Accept_Mode, Section 6.4.3 Active Related: instance.go -- doInstallVIPs and doRemoveVIPs own this filter's lifetime

Design: docs/architecture/vrrp/vrrp-first-hop-redundancy.md -- VRRP FSM output actions (closed set) RFC: rfc/short/rfc9568.md (VRRPv3) and rfc/short/rfc3768.md (VRRPv2)

RFC: rfc/short/rfc9568.md -- Section 5.2.8 (v3 checksum, IPv4 message-only) + rx RFC 5798 dual-accept RFC: rfc/short/rfc3768.md -- Section 5.3.7 (v2 checksum, no pseudo-header) Design: (RFC 8200 Section 8.1 -- IPv6 upper-layer checksum pseudo-header)

Design: docs/architecture/testing/ci-format.md — CI test format parsing

Package cli registers the ze-test command's functional-test and mock-server handlers.

Design: docs/architecture/testing/ci-format.md — decode test helpers

Package failsyscall fails one named syscall for one launched process, through a seccomp filter rather than a tracer.

Package fixture provides compiled helper processes for .ci scenarios.

Package golden compares captured bytes against fixtures committed beside the package under test.

Package markupcheck holds the static checks over a package that renders markup.

Package cymru implements a deterministic Team Cymru DNS mock server for tests.

Package dns implements a deterministic DNS mock server for functional tests.

Package irr implements a deterministic IRR whois mock server for tests.

Package peeringdb implements a deterministic PeeringDB HTTP mock server for tests.

Package radius implements a mock RADIUS server (RFC 2865) for AAA testing.

Package rpki implements a deterministic RPKI/RTR mock server for tests.

Package rtr implements a mock RTR cache server for RPKI testing.

Package tacacs implements a mock TACACS+ server for AAA testing.

Design: docs/architecture/testing/ci-format.md — test BGP peer Detail: message.go — BGP message types, wire helpers, and Message struct Detail: checker.go — message validation against expected patterns Detail: expect.go — .ci file loading and option parsing RFC: rfc/short/rfc4724.md — the Graceful Restart capability a .ci declares here RFC: rfc/short/rfc9494.md — the Long-Lived Graceful Restart stale time RFC: rfc/short/draft-abraitis-idr-addpath-paths-limit.md — the PATHS-LIMIT entry

Design: docs/architecture/core-design.md -- in-process test producer for the AS112 redistribute source

Package yang provides the YANG schema for the fakeas112 test plugin.

Package fakeddos is a test-only plugin that drives the ddos-local responder end-to-end against a REAL nft backend.

Package yang provides the YANG schema for the fakeddos test plugin.

Design: docs/architecture/core-design.md -- in-process test producer for L2TP route-change events

Package yang provides the YANG schema for the fakel2tp test plugin.

Package yang provides the YANG schema for the fakeredist test plugin.

Design: docs/architecture/testing/ci-format.md — test runner framework

Package sessionpath answers one question: where do THIS AI session's build and test artifacts go?

Package sim provides fake implementations of clock and network interfaces for use in unit tests.

Design: docs/architecture/testing/ci-format.md — syslog test helpers

Package templcheck reads the components templ generates and requires every parameter to be a type the compiler checks a field name against.

Package testcond provides conditional test-skipping helpers.

Design: docs/architecture/system-architecture.md — temporary filesystem management

Package trace formats per-step functional-test trace output.

Package fat implements writing FAT16B file system images, which is useful when generating images for embedded devices such as the Raspberry Pi.