pkg/

Package audit writes one JSONL record per CLI invocation to an append-only log outside the working tree.

App-dir namespacing.

Package exitcode is the public contract for what the process exit code means.

Package flock wraps the BSD advisory whole-file lock (flock(2)) so a consumer can serialise mutually-exclusive work across processes that share a lock file - e.g.

Package mcpapps is the MCP Apps host bridge: the frame-level half of a terminal or embedded host that renders an MCP App and answers the calls that App makes back through its postMessage channel.

Package mcpclient is the Model Context Protocol client umbra's mcp dialect speaks: one declared upstream server, a session over it, and the three calls the dialect needs (tools/list, tools/call, resources/read).

Package negcontrol is the shared result of a negative control, which the dialects produce and the umbra driver reports.

Package policy validates that verb arguments do not contain shell metacharacters.

Package scope resolves cwd to its git toplevel for an audit record's RepoRoot.

Package skillgen renders an urfave/cli v3 command tree into agent-facing discovery artifacts without making those artifacts runtime authority.

Package stepflow executes transport-agnostic ordered step sequences.

Package tokenmint resolves a value that has to be MINTED rather than read.

Package ttlcache is a small on-disk key/value cache with per-entry TTLs.

Package valuesource is umbra's shared value-resolution layer: a Provider reads a named address at request time, so neither engine imports a store SDK.