internal/

Package agentcrd contains host-side helpers for managing the obol.org/Agent CRD: building a spec from CLI flags, seeding the per-agent skills dir + SOUL.md on the host (which becomes the data PVC inside the cluster), and thin wrappers around kubectl apply/get/delete.

Package agentidentity keeps a host-side record of ERC-8004 AgentIdentity CRs.

Package agentskills resolves the skills obol installs into Hermes agents: the stack-operation skills embedded in the binary, plus opt-in skills from a pinned ObolNetwork/skills release (installed with `obol agent skills add`).

Package agentsync re-deploys helmfile-based agent instances (applications/hermes/<id>) from their on-disk deployment directories.

Package buy contains host-side helpers for `obol buy` commands.

Package buyprompts is the single authoring point for buyer-facing "how to buy" instructions.

Package demo implements HTTP handlers for obol sell demo services.

Package dns manages wildcard *.obol.stack resolution on the host machine.

Package doctor checks that the host, tools, cluster and services an Obol Stack needs are healthy, and says exactly how to fix what isn't.

Package fsutil holds small filesystem helpers shared across the CLI.

Package helmcmd contains small helpers for invoking the pinned helm binary.

Package images centralises the policy for selecting Docker image references in embedded Kubernetes manifests and dynamically-created workloads.

Package jobbroker is the stack's async job broker: it accepts paid requests the x402-verifier has already verified + settled, replays them against the offer's real upstream with no client-facing deadline, and serves free status pages plus gated results.

Package keystore mints secp256k1 wallets and encrypts/decrypts them as Web3 Secret Storage v3 keystores (scrypt + AES-128-CTR), the format the remote-signer loads.

Package kubectl provides helpers for running kubectl commands with the correct KUBECONFIG environment variable set.

Package monetizeapi defines the Custom Resource Definitions for the Obol Stack monetize subsystem.

Package passthrough hands control from obol to an external tool (kubectl, helm, helmfile, k9s, or `kubectl exec` into an agent pod) with the tool's native behaviour intact: argv, environment, TTY, signals and exit codes.

Package replay re-applies the host-side records in $OBOL_CONFIG_DIR to the cluster.

Package schemas provides shared type definitions aligned with the x402 and ERC-8004 ecosystems.

Package stackbackup implements `obol stack export` / `obol stack import`: a single archive capturing everything a running stack needs that is not regenerable from the obol binary — host config (helmfiles, values, sell offer descriptors, wallet metadata), agent data dirs (brains + remote-signer keystores), portable encrypted wallet backups, and the etcd-resident resources that drifted out of helmfile management (Agent CRs, ServiceOffers, LiteLLM/eRPC config mutations).

Package stackversion records which obol version last brought the stack up, so a different CLI version can say the update is not finished yet.

Package tools manages the host binaries the obol CLI shells out to (kubectl, helm, k3d, helmfile, k9s) plus the helm-diff plugin.

Package ui provides consistent terminal output primitives for the obol CLI.

Package validate provides input validation functions for the obol CLI.

Package walletbackup is the runtime-agnostic core of `obol agent wallet backup` / `restore`.

Package x402mcp serves a local x402-paid MCP (Model Context Protocol) server.

Package x402scan registers this stack's public origin in the x402scan.com discovery index (https://x402scan.com/discovery/spec).