internal/

Package api serves a small newline-delimited JSON protocol over a unix socket, so an agent harness can drive the environment programmatically (run commands, branch, roll back) and get structured results — including the snapshot node id produced by each command, which it can later checkout or branch from.

Package backend abstracts the two environment-specific concerns — how to run a command in a rootfs (Runner) and how to snapshot/restore that rootfs (Snapshotter) — behind interfaces, so the orchestration layer (DAG, capture, retention, serve/watch) is identical everywhere.

Package btrfs wraps btrfs subvolume/snapshot operations (cgo).

Package cli implements the agentenv command-line interface — the command registry, one-shot handlers (commands.go), long-running modes (session.go), the out-of-band socket client (ctl.go), and shared helpers (cli.go).

Package daemonclient is the in-process client for the agentenv daemon's newline-delimited JSON API (see internal/protocol).

Package dag maintains the commit-DAG of environment snapshots.

Package image extracts a rootfs into a destination directory.

Package mcp implements an MCP (Model Context Protocol) server that bridges Claude Code (and any other MCP host) to a running `agentenv daemon`.

Package protocol defines the wire types for the agentenv daemon's newline-delimited JSON API.

Package repo This file defines the agentenv-specific archive ("bundle") format used by `agentenv export --format agentenv` / `agentenv import`.

Package sandbox runs a real binary inside a given rootfs using Linux namespaces + pivot_root, implemented directly on golang.org/x/sys/unix (no libcontainer / runc dependency).

Package upgrade implements agentenv's zero-downtime self-upgrade: a daemon polls a release source, verifies a newer build, and hot-swaps its own binary via an in-place execve that preserves the repo flock, the listening sockets, and — crucially — every running agent child process.

Package watch provides an unprivileged, recursive inotify watcher used to detect changes to the working rootfs without polling/walking the whole tree (which is expensive on network filesystems).