change name to statesman

Author: breardon2011

taco/AGENTS.md

@@ -39,7 +39,7 @@ opentaco/
 ├─ Makefile                   # build/lint/test/svc/cli/prov targets
 ├─ .golangci.yml              # linters config
 ├─ cmd/
-│  ├─ opentacosvc/            # service entrypoint (Echo HTTP server)
+│  ├─ statesman/            # service entrypoint (Echo HTTP server)
 │  └─ taco/                   # CLI entrypoint (Cobra)
 │     └─ commands/            # CLI commands package (keeps root main thin)
 ├─ internal/
@@ -124,7 +124,7 @@ In this repo these commands are fully implemented and call the service. For M1-o
 - README.md: purpose, how to run service/CLI, where provider lives, constraints (no side effects outside opentaco/).
 - Makefile: build, lint, test, svc, cli, prov targets.
 - .golangci.yml: baseline linter configuration.
-- cmd/opentacosvc/: main.go bootstraps Echo; /healthz and /readyz → 200; wire API/backends.
+- cmd/statesman/: main.go bootstraps Echo; /healthz and /readyz → 200; wire API/backends.
 - internal/api/: routes registrar (only wiring).
 - internal/unit/: Management API handlers (CRUD, lock/unlock, upload/download).
 - internal/backend/: Terraform HTTP backend (GET/POST/PUT/LOCK/UNLOCK).
@@ -207,7 +207,7 @@ The repository includes working functionality beyond Milestone 1 for demos and i
   - Flags: `--dir`, `--system-unit`, `--force`, `--no-create`.
 
 - Suggested Demo Flow
-  1. Start service on S3: set `OPENTACO_S3_BUCKET`, `OPENTACO_S3_REGION`, `OPENTACO_S3_PREFIX`, run `./opentacosvc`.
+  1. Start service on S3: set `OPENTACO_S3_BUCKET`, `OPENTACO_S3_REGION`, `OPENTACO_S3_PREFIX`, run `./statesman`.
   2. Run `./taco provider init opentaco-config --server http://localhost:8080`.
   3. `cd opentaco-config && terraform init && terraform apply -auto-approve`.
   4. Verify via `taco unit ls` and S3 listing of `__opentaco_system/` and `myapp/prod/`.

taco/Makefile

@@ -10,7 +10,7 @@ build: build-svc build-cli build-prov ## Build service, CLI, and provider
 
 build-svc: ## Build the OpenTaco service
 	@echo "Building OpenTaco service..."
-	cd cmd/opentacosvc && GOWORK=off go build -o ../../opentacosvc .
+	cd cmd/statesman && GOWORK=off go build -o ../../statesman .
 
 build-cli: ## Build the taco CLI
 	@echo "Building taco CLI..."
@@ -24,7 +24,7 @@ install: install-svc install-cli ## Install service and CLI
 
 install-svc: ## Build the OpenTaco service
 	@echo "Installing OpenTaco service..."
-	cd cmd/opentacosvc && GOWORK=off go install  .
+	cd cmd/statesman && GOWORK=off go install  .
 
 install-cli: ## Build the taco CLI
 	@echo "Installing taco CLI..."
@@ -33,7 +33,7 @@ install-cli: ## Build the taco CLI
 # Run components
 svc: build-svc ## Run the OpenTaco service
 	@echo "Starting OpenTaco service on :8080..."
-	./opentacosvc
+	./statesman
 
 cli: build-cli ## Build and show CLI help
 	@echo "Taco CLI built. Run ./taco --help for usage"
@@ -42,7 +42,7 @@ cli: build-cli ## Build and show CLI help
 # Development
 test: ## Run tests
 	@echo "Running tests..."
-	cd cmd/opentacosvc && go test ./...
+	cd cmd/statesman && go test ./...
 	cd cmd/taco && go test ./...
 	cd pkg/sdk && go test ./...
 	cd providers/terraform/opentaco && go test ./...
@@ -53,15 +53,15 @@ lint: ## Run linters
 
 clean: ## Clean build artifacts
 	@echo "Cleaning build artifacts..."
-	rm -f opentacosvc taco terraform-provider-opentaco
+	rm -f statesman taco terraform-provider-opentaco
 	rm -rf .devdata/*
 	find . -name "*.test" -delete
 	find . -name "*.out" -delete
 
 # Initialize modules
 init: ## Initialize Go modules
 	@echo "Initializing Go modules..."
-	cd cmd/opentacosvc && go mod init github.com/digger/opentaco/cmd/opentacosvc && go mod tidy
+	cd cmd/statesman && go mod init github.com/digger/opentaco/cmd/statesman && go mod tidy
 	cd cmd/taco && go mod init github.com/digger/opentaco/cmd/taco && go mod tidy  
 	cd pkg/sdk && go mod init github.com/digger/opentaco/pkg/sdk && go mod tidy
 	cd providers/terraform/opentaco && go mod init github.com/digger/opentaco/providers/terraform/opentaco && go mod tidy

taco/README.md

@@ -48,7 +48,7 @@ make svc
 Auth is enabled by default. To temporarily bypass it (e.g., provider dev):
 
 ```bash
-./opentacosvc -auth-disable -storage memory
+./statesman -auth-disable -storage memory
 ```
 
 ### Use the CLI
@@ -114,7 +114,7 @@ Configure OIDC so `taco login` works and protected endpoints require login.
 ```bash
 export OPENTACO_AUTH_ISSUER="https://api.workos.com/user_management"
 export OPENTACO_AUTH_CLIENT_ID="<WORKOS_CLIENT_ID>"
-./opentacosvc -storage memory
+./statesman -storage memory
 ```
 
 3) Login via CLI (PKCE)
@@ -135,7 +135,7 @@ Auth0 variant:
 ```bash
 export OPENTACO_AUTH_ISSUER="https://<TENANT>.auth0.com"     # or <region>.auth0.com
 export OPENTACO_AUTH_CLIENT_ID="<AUTH0_NATIVE_APP_CLIENT_ID>"
-./opentacosvc -storage memory
+./statesman -storage memory
 
 # No flags needed; CLI uses discovery via /v1/auth/config
 ./taco login --server http://localhost:8080
@@ -256,7 +256,7 @@ Steps:
 OPENTACO_S3_BUCKET=<bucket> \
 OPENTACO_S3_REGION=<region> \
 OPENTACO_S3_PREFIX=<prefix> \
-./opentacosvc
+./statesman
 
 # 2) Scaffold the provider workspace
 ./taco provider init opentaco-config --server http://localhost:8080
@@ -298,7 +298,7 @@ terraform {
 
 ### Components
 
-1. **Service** (`cmd/opentacosvc/`) - HTTP server with two surfaces:
+1. **Service** (`cmd/statesman/`) - HTTP server with two surfaces:
    - Management API (`/v1`) for CRUD operations on units
    - Terraform HTTP backend proxy (`/v1/backend/{id}`) for Terraform/OpenTofu
 
@@ -427,7 +427,7 @@ Note: Terraform lock coordination uses the `X-Terraform-Lock-ID` header; the ser
 ```
 opentaco/
 ├── cmd/
-│   ├── opentacosvc/    # Service binary
+│   ├── statesman/    # Service binary
 │   └── taco/           # CLI binary
 │       └── commands/   # Cobra commands package
 ├── internal/
@@ -497,16 +497,16 @@ make clean
 OPENTACO_S3_BUCKET=my-bucket \
 OPENTACO_S3_PREFIX=opentaco \
 OPENTACO_S3_REGION=us-east-1 \
-./opentacosvc
+./statesman
 
 # Explicit flags (optional)
-./opentacosvc -storage s3 \
+./statesman -storage s3 \
   -s3-bucket my-bucket \
   -s3-prefix opentaco \
   -s3-region us-east-1
 
 # Force in-memory storage
-./opentacosvc -storage memory
+./statesman -storage memory
 ```
 
 ## Troubleshooting

taco/agents_done/002_auth-oidc-rbac.md

@@ -31,7 +31,7 @@ opentaco/
 │  ├─ backend_profile_guide.md       # user-facing how-to (profile + backend block)
 │  └─ auth_config_examples.md        # issuer-specific samples (Okta/WorkOS/Keycloak/etc.)
 ├─ cmd/
-│  ├─ opentacosvc/                   # service main (Echo server)
+│  ├─ statesman/                   # service main (Echo server)
 │  └─ taco/                          # CLI main (Cobra: login, creds, state cmds)
 ├─ internal/
 │  ├─ api/                           # JSON management API handlers (CRUD states, locks, upload/download)

taco/agents_done/003_s3-compat-backend-auth.md

@@ -114,7 +114,7 @@ Expose an S3‑compatible HTTP surface that Terraform’s `backend "s3"` can use
    - `export OPENTACO_STS_KID="k1"`
    - `export OPENTACO_STS_HMAC_k1="<BASE64URL_SECRET_32B>"`
    - `export OPENTACO_STS_TTL="2m"`
-   - `./opentacosvc -storage memory`
+   - `./statesman -storage memory`
 
 2) Login & STS
    - `./taco login --server http://localhost:8080`

taco/cmd/statesman/go.mod

@@ -1,4 +1,4 @@
-module github.com/diggerhq/digger/opentaco/cmd/opentacosvc
+module github.com/diggerhq/digger/opentaco/cmd/statesman
 
 go 1.25
 

taco/examples/cloud-block/README.md

@@ -16,7 +16,7 @@ This example demonstrates using OpenTaco as a Terraform Cloud-compatible backend
    OPENTACO_S3_BUCKET=your-bucket \
    OPENTACO_S3_REGION=us-east-1 \
    OPENTACO_S3_PREFIX=opentaco/ \
-   ./opentacosvc
+   ./statesman
    ```
 
 2. **Authenticate with OpenTaco**:
@@ -135,7 +135,7 @@ To migrate existing workspaces from Terraform Cloud:
 ### Custom Client ID
 Set a custom OAuth2 client ID:
 ```bash
-OPENTACO_AUTH_CLIENT_ID=my-terraform-app ./opentacosvc
+OPENTACO_AUTH_CLIENT_ID=my-terraform-app ./statesman
 ```
 
 ### RBAC Permissions

taco/examples/demo-provider/README.md

@@ -24,7 +24,7 @@ make build-svc build-cli build-prov
 OPENTACO_S3_BUCKET=<bucket> \
 OPENTACO_S3_REGION=<region> \
 OPENTACO_S3_PREFIX=<prefix> \
-./opentacosvc
+./statesman
 ```
 
 Notes:

taco/examples/dependencies/README.md

@@ -24,7 +24,7 @@ Quick start
 
 ```
 make build
-./opentacosvc -auth-disable -storage memory
+./statesman -auth-disable -storage memory
 # Service on http://localhost:8080
 ```
 

taco/examples/s3-compat/README.md

@@ -11,7 +11,7 @@ This example shows how to use Terraform's native `s3` backend against OpenTaco's
 
 ## Prerequisites
 - OpenTaco service running locally on `:8080` (memory storage is fine for a quick test):
-  - `./opentacosvc -storage memory`
+  - `./statesman -storage memory`
 - CLI built and logged in (saves tokens under `~/.config/opentaco/credentials.json`):
   - `./taco login --server http://localhost:8080`
 - Terraform 1.13+ (for `use_lockfile = true`).