internal/

Package dryrun builds the standard dry-run preview envelopes that tool handlers return when a caller passes dry_run:true.

Package jsonmergepatch is a hand-rolled, stdlib-only implementation of JSON Merge Patch (RFC 7396).

Package jsonschema is a tiny stdlib-only JSON-schema validator scoped to the keyword subset that the Clockify MCP server's one-user tool input schemas actually use.

Package logging provides a stdlib-only slog.Handler decorator that scrubs sensitive values from log attributes before they reach the underlying handler.

Package paths centralises Clockify URL path construction for handlers.

Package resolve centralises Clockify entity resolution and ID validation.

Package runtime holds the shared production wiring for the one-user Clockify MCP server.

Package safety implements the runtime safety rails for destructive, administrative, and raw-write tool calls: confirmation-token issuance and validation (TokenStore), risk-class policy lookup (RequirementForRisk), and canonical-JSON hashing used to bind a confirmation token to the exact argument payload that previewed it (HashCanonical).

Package testclockify provides an in-process fake of the Clockify REST API used by internal/tools tests.

Package tracing is the stdlib-only tracing facade.