internal/

Package accesslog provides local, bounded access history.

Package atomicfile provides permission-safe local state file helpers.

Package authmode persists credential-tier transitions that must be applied before existing tsnet node state is reused.

Package cliargs holds the shared Cobra flag grammar used by the CLI and process identity validation.

Package duration parses Go duration syntax plus d for days of 24 hours.

Package errcode is the one table of TSLink's stable error codes: for each code, the process exit code it produces, whether a daemon failure with it isolates one service, and what it means.

Package filelock provides cross-platform file locking.

Package health provides bounded, value-free app probes and durable alerts.

Package logrotate bounds the size of a log file that a supervisor opened on this process's behalf.

Package manifestcheck defines the stable user-facing contract for the generated CLI manifest check.

Package mcpaudit stores bounded mutation receipts consumed by the access log.

Package mcpscope defines transport-independent MCP capabilities.

Package recipes contains app advice and credential-free loopback discovery.

Package testenv provides cross-platform process environment isolation for tests.

Package testwait bounds test-side waits for asynchronous effects.