controller

Package admin implements the Controller's command-line administration: creating the first administrator on a fresh install and recovering an account whose owner is locked out.

Package agentsvc serves the Controller side of the Agent protocol: enrollment on its own listener, and (from the session milestone) the mTLS session every enrolled Agent holds open.

Package api serves the Controller's public REST API, /api/v1.

Package apigen provides primitives to interact with the openapi HTTP API.

Package artifacts keeps the Controller's cache of software artifacts (server jars): files in the data directory named by their SHA-256, with a database record of what each one is.

Package auth holds the credential building blocks: Argon2id password hashing, random tokens stored only as hashes, and login rate limiting.

Package ca is the Controller's certificate authority.

Package catalog answers the Controller's software questions from the stored catalog snapshot (synced and verified by catalogsync): which versions of a template exist, and which build, download URL and published checksum a version resolves to.

Package catalogsync keeps the Controller's copy of the central catalog: it fetches the signed snapshot index, verifies it against the trusted keys, refuses anything not newer than what it has, checks every object's hash and size, and stores the snapshot in one transaction.

Package domain holds the Controller's core types and the rules of the state machines in docs/design.md.

Package localnode enrolls the Agent bundled with a Controller (the Compose install's) without anyone copying a token: the Controller creates that Node and keeps a fresh enrollment token in a file only the bundled Agent shares, until the Node is enrolled.

Package provision runs the PROVISIONING workflow's asynchronous part: placement and reservation happen when a server is created; this worker resolves the server's software to an exact build, makes sure the artifact is in the Controller's cache, records it on the server and pushes the spec to the Node.

Package store persists the Controller's state in PostgreSQL: desired state, observed state and history.

Package storetest runs integration tests against a real PostgreSQL.

Package tlsserve provides the TLS configuration for the Controller's web UI and API.

Package transfers runs the workflows that move data into a server: restoring a backup in place or as a new server, migrating a server to another Node, and cloning parts of one server into another.

Package webui serves the web UI (web/, built into build/app) embedded in the Controller binary: static files with long-lived caching for hashed names, index.html for the app's own routes, and a strict Content Security Policy with a fresh nonce for every page load.