internal/

Package backend defines where ciphertext lives.

Package blobcache is a session-scoped cache of encrypted namespace blobs, so a warm `notenv run` needs no network round-trip.

Package config loads the user-global config (~/.config/notenv/config.toml, not committed) and merges it with the project contract into an effective configuration.

Package contract models notenv.toml, the committed contract declaring which env vars a project needs.

Package crypto wraps age.

Package keyring handles passphrase acquisition: hidden terminal prompts plus a platform-specific session cache.

Package runner executes the child process with secrets in its environment: exec, stream stdio, propagate exit code.

Package ui is notenv's hand-rolled terminal UI: ANSI styling, prompts, an arrow-key select, and a spinner.