internal/

Parallel agent work scheduling: runs a single assistant turn's independent work units up to agent.max_concurrency at a time, while serializing on declared dependencies and conflicting write targets.

Assembles the single synthetic system message sent on every provider request: the active mode's product-authored base prompt, the environment block, and the loaded AGENTS.md instructions, in that fixed order.

Parse, classify, and persist the OpenAI ChatGPT session stored as plaintext under auth.openai-chatgpt in the global settings file.

Offline OpenAI auth-status report backing `codemeld auth status`: classifies the OpenAI Platform (API-key) and OpenAI ChatGPT (subscription) providers from OPENAI_API_KEY and the global settings file only, without printing secrets, composing project-local settings, constructing a provider client, or making any network call.

Production permission-authorizer assembly: binds the landed permission seams — the in-memory grant table, the turn-scoped approval cache, the gated prompt, persistence-with-degradation, and the event emitters — into one dispatch.Authorizer that drives permissions.Authorize for every production tool/shell permission check.

`codemeld auth login` wiring: starts the OpenAI ChatGPT browser/device login flow and persists the resulting session under auth.openai-chatgpt only after upstream login succeeds, while refusing a ChatGPT login for the API-key-only `openai` provider.

Session-lifetime composed-config cache: the single read source for one run.

Raw shell dispatch: normalize a whole command, resolve one request/execution path scope, authorize each stage or the literal subject, then run direct pipelines or the literal form through the shared runner —.

Package enforce reports the session-level execution capability.

Event append API: validates a payload, coerces invalid UTF-8 to U+FFFD, mints a UUIDv7 record id, stamps the canonical timestamp, and appends the event record to the active session store.

codemeld-owned ignore filtering: a single-format `codemeldignore` matcher plugged into the walker's traversal seam, honored by glob/grep/list/tree by default in place of native .gitignore/.hgignore parsing.

Package fserrors maps filesystem errnos to codemeld's canonical error-category vocabulary.

Atomic file write via a sibling temp file plus rename, fsyncing the temp file and parent directory.

Package ids mints and validates the UUIDv7 identifiers used for sessions and records.

Package locks wraps gofrs/flock with typed-reason acquire helpers for the kernel-managed advisory locks required by and 440b, plus a non-blocking single-attempt try (TryAcquire) for the retention pruner.

Run-scoped holder for the active interaction mode and the Source the next interaction_mode event must record, mirroring model.ActiveState.

Run-scoped holder for the active model Selection and the Source the next model_turn must record, with a distinct "no model selected yet" state.

OpenAI Codex OAuth device-authorization-grant primitives (RFC 8628) for the explicit interactive fallback when browser/loopback login cannot be used.

Package paths resolves the user's home directory and expands ~-prefixed paths against it.

Package permissionpersist persists permission grants.

Capability tool-subjects: reserved grant subjects that fold a family of concrete file-tool subjects so one approval authorizes every member.

Package procowner records which process instance created a durable artifact and reports whether that exact process is still running.

OpenAI-compatible API-key GET /models discovery: a redirect-refusing, credential-safe request returning sanitized model ids plus whitelisted reasoning-effort capability metadata.

Package runner is the single internal command runner every tool invocation routes through.

Classification of the run's protected settings files and blocked paths, and the typed refusal a covered structured-tool call produces before it is authorized.

Session write-failure protocol: the per-turn handler that records a failed atomic session write and the clean-shutdown final-flush retry.

Explicit session deletion plus the shared lock-and-unlink core the retention pruner reuses.

Package sessionturn owns the pre-turn boundary that makes user input durable on disk before a model-provider request is issued.

Package subagent runs one bounded child agent conversation in a private, memory-only session and reports its outcome as a bounded Result.

Package subagenttool registers the delegate tool, the production caller that hands one bounded piece of work to a child agent confined to caller-declared write, delete, and move scopes.

Package testsupport holds small helpers shared across package test suites.

Package toolactivity formats tool-activity display lines.

Package tools defines the structured-tool registry, the Tool interface, and the shared tool-dispatch Result type.

Package trust records which project roots the user approved to contribute their own settings layer to a run.

Package tui implements the terminal user interface shell: the tview application, the transcript pane, and the input area.

Builds the streaming provider.Request from the active model selection and the session's text conversation history.

Boundary-aware upward VCS auto-detection: innermost-match selection across built-in and user detectors.