provider/

Package broker is the trusted host-mediated HTTP boundary for provider agents.

Package cassette records and replays broker responses deterministically.

Package credentials mints and resolves opaque credential handles as attenuated capabilities.

Package llm is a thin, CGO-free client surface for LLM chat and embedding calls that go through the provider broker.

Package responsepolicy filters untrusted vendor responses into safe, schema-declared bytes.

Package sink defines the managed writable secret sink contract.