internal/

Package apierr is PayCLI's error vocabulary (§11): a closed set of stable machine-readable codes, a total code-to-exit-status map, and the normaliser that folds Payload's six different error body shapes into one.

Package audit implements §12.7: the JSONL audit log of every write PayCLI performs.

Package backup implements §12.8: the automatic pre-write backup of every document a write is about to change or remove.

Package buildinfo carries the values stamped into the binary at link time (§16.4) and degrades gracefully when they are absent.

Package cache implements PayCLI's on-disk discovery cache (§8) and the in-process memo layer that sits in front of it (§8.6).

Package cli is PayCLI's command tree and the only place in the program that is allowed to see the process itself.

Package config owns everything PayCLI knows before it talks to a server: where its files live (§4.1), what is in them (§4.2, §4.3), how the layers combine (§4.5) and what can be learned about the surrounding Payload project from the local filesystem alone (§7.10, §7.11).

Package discovery builds PayCLI's adaptive capability manifest (§7).

Package docdiff is PayCLI's structural diff of two Payload documents.

Package fetch retrieves an arbitrary URL that is NOT the Payload server.

Package fsatomic implements the single durable-write primitive required by §3.1: every durable write in PayCLI goes through Write.

Package lexical converts between Payload's Lexical rich-text JSON and Markdown, and extracts plain text from it.

Package logging builds PayCLI's slog logger.

Package manifest reads the item files `pay plan` and `pay sync` execute (F6) and implements the pure half of the {"$ref": …} grammar every write body accepts: parsing a reference, finding every reference in a body, replacing them, and ordering plan items so a document is created before the items that point at it.

Package orphans models how Payload's Postgres adapter clears NESTED rows on an update, so PayCLI can predict orphan rows before a write, detect them after one, and remove them without deleting the document.

Package output owns PayCLI's single response envelope (§10) and every rendering of it.

Package payload is PayCLI's Payload CMS REST/GraphQL client.

Package payloadtest is PayCLI's hermetic test harness: a fixture-backed Payload server, a golden-file comparator and a deterministic clock.

Package redact removes credentials from everything PayCLI emits: stdout, stderr, log lines, audit records, cache files and the manifest (§5.3).

Package rows is PayCLI's local editor for an array of objects: the rows of a Payload `blocks` field, or of a plain `array` field.

Package safety implements §12 "Write safety": the four risk levels, the confirmation policy, --dry-run and the single blast-radius cap (--max-docs).

Package secret resolves, stores and fingerprints PayCLI's credentials (§5.1, §5.2, §4.4).

Package skills installs the agent-facing documentation that ships inside the binary (§14) into an agent's skill directory.

Package update implements §15: `pay update-self`, the three-state verification outcome, managed-install detection and the detached apply.