internal/

Package agentskill bundles the canonical "promptvm" Agent Skill with the CLI and installs it into the local agent skills directories for Claude Code and Codex, so any agent session already knows how to drive PromptVM.

Package capture builds and uploads context-sync session captures.

Package ctxblock writes the local context-export managed block (CEO-1): the thin v1 payoff that closes the capture loop without Phase-2 retrieval.

Package detach re-execs the current binary as a detached background child so a hook-invoked command can return control to Claude Code immediately and never block the session (FR-3 / HOOK-3 / DX-6).

Package gitutil provides the minimal git introspection the context-sync configurator needs: repo root, origin remote, current branch, HEAD sha, plus an idempotent .gitignore helper anchored at the repo root (DX-10).

Package hooks manages Claude Code settings.json files and the PromptVM hook tracker sidecar (.promptvm-hooks.json).

Package managed detects OS-level Claude Code managed (enterprise) settings so the configurator honors an admin's hook policy (SEC-6).

Package manifest reads and writes the PromptVM context-sync manifest that declares which workspace/directory a repo syncs to and what gets captured.

Package mcpsetup derives the hosted PromptVM MCP endpoint from the API base URL and writes/prints per-client MCP configuration (Claude Code, Codex CLI).

Package oauth implements the OAuth 2.0 flows used by the PromptVM CLI: the Authorization Code flow with PKCE over a loopback redirect (RFC 8252) and the Device Authorization Grant (RFC 8628).

Package redact applies layered, client-side secret redaction to captured session content BEFORE anything leaves the machine (SEC-3 / FR-12).

Package sanitize cleans raw Claude Code transcript text BEFORE it is redacted, hashed, or stored (CAPQ-4 / FR-Q3).

Package skills contains the filesystem and validation logic for the folder-shaped Agent Skills format (agentskills.io): SKILL.md frontmatter validation, bundled-file discovery, and safe path handling for downloads.

Package spool persists capture payloads that could not be uploaded (network failure, offline) so they can be retried on the next SessionStart reconcile or `sync status`.

Package transcript reads Claude Code session transcript JSONL files and extracts the structural metadata and text body the capture uploader needs.