Skip to content
animesao Logo
ANIMESAO
RU / EN
Active Development · v0.5.x v0.5.20

Cardinal Wings

REST API Daemon & Control Plane Facade for Cardinal

High-performance HTTP REST API daemon in Go acting as the unified control interface between the Cardinal runtime and Cardinal Panel.

Source Code on GitHub

Project Overview

cardinal-wings is an independent Go daemon providing a unified HTTP API interface for managing single nodes or entire Cardinal clusters without requiring direct SSH shell access.

The daemon enforces strict constant-time Bearer token authentication with role-based access control (readonly / admin), per-IP/key rate limiting, comprehensive audit logging of administrative mutations, and live streaming of logs and interactive terminal sessions via Server-Sent Events (SSE).

Includes an integrated, per-container SFTP server for secure file management without exposing host credentials.

Architecture & Integration

Communicates with the local node via loopback `cardinal serve` HTTP API, routes cluster commands via `?node=<name>`, and exposes SSE streaming and embedded SFTP.

Quick Invocation: 
cardinal-wings --config /etc/cardinal-wings/config.toml
curl -H "Authorization: Bearer $KEY" http://localhost:8080/v1/system/info

Capabilities & Status

Custom REST API ContractImplemented

Dedicated endpoints for container lifecycle, images, networks, and cluster nodes

Real-Time SSE StreamingImplemented

Live event streaming, log follow, and interactive terminal input/output via SSE

Role-Based Access & Audit LogImplemented

Readonly/admin permissions with rotated audit logging in wings-audit.jsonl

Integrated Per-Container SFTPImplemented

Isolated filesystem access per container over SFTP on a dedicated port

Technologies & Primitives:
GoREST APIServer-Sent Events (SSE)RBACSFTP ServerPrometheus Metrics
animesao.work.gd Website · MIT

MIT LicensePermissive

The source code of the animesao.work.gd website (Nuxt 4, Vue 3, Tailwind CSS 4), architecture schematics, and engineering notes are open-source under the MIT License. Commercial and private use, modification, and reproduction are permitted with copyright attribution.

Permissions
  • ✓Commercial use
  • ✓Modification
  • ✓Distribution
  • ✓Private use
Limitations
  • ✕No liability
  • ✕No warranty
Conditions
  • ℹCopyright and license notice (c) 2026 animesao
Full License TextSPDX: MIT
MIT License

Copyright (c) 2026 animesao

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.