internal/

Package accounting tracks per-sandbox and per-profile token and spend usage, exposes Prometheus counters, and supports budget checks.

Package agent implements the in-sandbox agent, a small HTTP server exposing shell, code, and file operations over JSON.

Package anomaly provides a lightweight, in-process behavioural anomaly detector that plugs into the audit-sink chain.

Package auditsink streams audit ledger events to external sinks (webhook, SIEM, or file) in real time.

Package authz provides multi-principal, RBAC-style access control for the control plane.

Package backend abstracts the sandbox runtime so callers don't care whether a sandbox is a Docker container or a Kubernetes Pod.

Package browser defines the wire contract between the runeward control plane and the in-sandbox browser driver (cmd/runeward-browser), plus a minimal Chrome DevTools Protocol client used by the driver.

Package cli implements the runeward command-line surface.

Package controller reconciles runeward Sandbox and Fleet custom resources onto the control-plane Manager.

Package controlplane is runeward's governed execution core.

Package egress implements the forward proxy that constrains sandbox network traffic.

Package fleet implements an in-memory task board that workers pull from.

Package ledger implements an append-only audit ledger stored as JSON Lines.

Package manifests embeds the CRDs and controller install bundle for `runeward up`.

Package mcp exposes runeward's governed tools over the Model Context Protocol, going through the same policy/guardrails/audit path as the REST API.

Package obs holds runeward's observability wiring: structured logging and Prometheus metrics.

Package policy implements runeward's authority engine and cost/loop guardrails.

Package policybundle distributes runeward policies as signed OCI artifacts.

Package policytemplates provides ready-made profile snippets for common security controls.

Package profile defines the declarative profile schema and its loader.

Package secrets resolves secret references from multiple backends so a profile's [[env]] entries can pull values from more than literals and files.

Package server exposes the control plane over HTTP: sandbox lifecycle, governed tool calls, approvals, audit endpoints, a terminal WebSocket, and optionally the web dashboard.

Package telemetry sends optional, anonymous usage events.

Package termrec records governed terminal sessions as asciinema v2 "cast" files and replays them.

Package webhook implements the runeward admission webhook enforcing ClusterPolicy defaults and guardrails on Sandbox and Fleet resources.