internal/

Package agentlint checks effective RocketClaw agent systems for unsafe permission and delegation combinations.

Package backend owns conversation execution, later-work, and cron.

Package harnessbridgetest holds test helpers for backend.

Package codemode runs Starlark scripts that call outbound MCP tools.

Package config loads and validates rocketclaw configuration files.

Package frontend defines the conversation operations consumed by frontends.

Package cronfrontend schedules cron producers and their conversation Sync.

Package externalmcp hosts MCP servers for rocketclaw integrations.

Package rpc adapts the retained Web protocol to Go-owned conversation storage.

Package slackconnector bridges Slack events into rocketclaw.

Package harness provides the reusable agent runtime.

Package mcpclient connects to outbound MCP servers for code mode.

Package oai provides ChatGPT OAuth-backed OpenAI clients for rocketclaw.

Package protocol defines shared RocketClaw event contracts.

Package sandbox runs RocketClaw's emulated shell: real Bash and Linux programs in a bubblewrap sandbox with no network, no host files but the agent's folders, cgroup limits and seccomp (docs/specs/2026-11-01-linux-native-just-bash-spec.md).

Command rootfs moves the emulated shell's guest image to the newest Ubuntu archive snapshot.

Package wire is the emulated shell's relay protocol: length-delimited protobuf Frames over a Unix socket, one invocation per connection (wire.proto, docs/explainers/2026-11-01-emulated-shell-sandbox.md).

Package skel seeds the embedded rocketclaw skeleton into workspaces.

Package workflow loads and validates saved RocketClaw workflows.