internal/

Package authn is dax's own check of who sends a request, and the header its clients send: the libraries dax serves and dials through (agentworkspace's remote, agentsession's remote, agentturn's front/control and front/a2a) take an authenticator and an HTTP client, and ship no authentication of their own that dax relies on.

Package box keeps a project's box: a long-lived container, run under a sandboxing runtime (runsc by default; any runtime docker has registered, Kata's among them), that a session's tools run in through `docker exec -i ...

Package cmdline splits a command line into a program and its arguments the way a POSIX shell splits words, and does nothing else a shell does.

Package config reads dax's settings.

Package executor is the session's execution plane for the extensions' tools: what runs a call, says what a call would touch, and says whether one may run again.

Package modelinfo asks a provider what a model supports, ahead of the first request, and fits the reasoning effort a configuration asks for to it.

Package offer is how dax starts an MCP server that holds secrets, and the servers dax workspace -servers offers: a command in a workspace offered through agentworkspace's Offer, given the variables its secret_env names from the environment of the process that starts it, with what it writes, standard output and standard error, read through agentredact's secrets filter (Filter) before any of it is passed on.

Package private keeps dax's own directories private and holds the writer dax's warnings go to, which a front about to take the screen swaps for a buffer (agent.CaptureWarnings).

Package prompt builds the session's part of the system prompt: the role line, the extensions' instructions and the user's, and the working directory.

Package provider turns the provider setting into a model: the openresponses.Streamer the agent loop calls.

Package render is the print front: an agentturn subscriber that streams a run to a writer as it happens.