internal/

Package agentcrd contains host-side helpers for managing the obol.org/Agent CRD: building a spec from CLI flags, seeding the per-agent skills dir + SOUL.md on the host (which becomes the data PVC inside the cluster), and thin wrappers around kubectl apply/get/delete.

Package buy contains host-side helpers for `obol buy` commands.

Package buyprompts is the single authoring point for buyer-facing "how to buy" instructions.

Package demo implements HTTP handlers for obol sell demo services.

Package dns manages wildcard *.obol.stack resolution on the host machine.

Package enclave provides access to the Apple Secure Enclave (SEP) for hardware-backed key management and ECIES encryption.

Package helmcmd contains small helpers for invoking the pinned helm binary.

Package images centralises the policy for selecting Docker image references in embedded Kubernetes manifests and dynamically-created workloads.

Package jobbroker is the stack's async job broker: it accepts paid requests the x402-verifier has already verified + settled, replays them against the offer's real upstream with no client-facing deadline, and serves free status pages plus gated results.

Package kubectl provides helpers for running kubectl commands with the correct KUBECONFIG environment variable set.

Package monetizeapi defines the Custom Resource Definitions for the Obol Stack monetize subsystem.

Package schemas provides shared type definitions aligned with the x402 and ERC-8004 ecosystems.

Package stackbackup implements `obol stack export` / `obol stack import`: a single archive capturing everything a running stack needs that is not regenerable from the obol binary — host config (helmfiles, values, sell offer descriptors, wallet metadata), agent data dirs (brains + remote-signer keystores), portable encrypted wallet backups, and the etcd-resident resources that drifted out of helmfile management (Agent CRs, ServiceOffers, LiteLLM/eRPC config mutations).

Package tee provides Linux Trusted Execution Environment (TEE) key management and attestation for Intel TDX, AMD SEV-SNP, and AWS Nitro Enclaves.

Package ui provides consistent terminal output primitives for the obol CLI.

Package validate provides input validation functions for the obol CLI.

Package walletbackup is the runtime-agnostic core of `obol agent wallet backup` / `restore`.

Package x402mcp serves a local x402-paid MCP (Model Context Protocol) server.

Package x402scan registers this stack's public origin in the x402scan.com discovery index (https://x402scan.com/discovery/spec).