internal/

Package job owns the local background jobs of one AgentApp: identity, state, bounded output, stop, lifecycle events, and shutdown.

Package taskrun provides task-run execution.

Package agent provides the core AI agent logic: task planning, tool invocation, and conversation.

Package apierr is the vocabulary a service uses to say why it refused.

Package hook holds the shape of a hooks configuration block and the naming its events and transports use.

Package llm holds LLM wire types and the Tool contract used across core services and agent execution.

Package localproject owns the local Project: the stable identity that groups the sessions of one local unit of work across CLI, TUI, and Desktop, and that will own the first cross-session memory scope.

Package mcp holds the shape of an mcp.json document and the rules a server definition must satisfy.

Package plugin owns the plugin manifest: its format, its rules, and the version arithmetic that decides whether a build may run a release.

Package schema is what a database says has been done to it.

Package secret owns the Space Secret domain: a Space-owned group of named items, its lifecycle, and the store contract.

Package session provides the core session model: identity, the linked history journal, the reducer that replays it, recovery analysis, and the persistence seam.

Package space owns what a space's roles may do.

Package subagent holds the shape of a subagent definition file and the rules its frontmatter must satisfy.

Package clie2e drives the built CLI binary end to end against a scripted model.

Package db provides persistence for BuildMax backend entities (MySQL via GORM).

Package flock is an advisory file lock that the operating system releases when the holding process exits.

Package httpclient decodes the error envelope the BuildMax server writes.

Package llm implements the core/llm.LLMClient contract over the LLM wire protocols BuildMax speaks: OpenAI Chat Completions, OpenAI Responses, Anthropic Messages, and Ollama's native local API.

Package llmremote implements the core LLM contract against a BuildMax managed gateway instead of a provider.

Package llmwire is the versioned wire contract for BuildMax managed inference.

Package localprojectstore is the file backend for local Projects: the bundle under projects/<project_id>/, the rebuildable catalog projection beside it, and the writer lock that serializes changes to either.

Package log configures the application's default slog logger.

Package objectstore provides pluggable blob storage for space workspace files and task-run artifacts.

Package archive packs and extracts a plugin package.

Package pluginwire is the wire contract for the private plugin Marketplace.

Package proc starts and supervises the OS processes behind local background jobs: process-group spawning, bounded output capture, and process-tree termination.

Package sandbox provides the OS-level bash subprocess sandbox.

Package secret implements the cryptography behind Space Secrets: envelope encryption of a Secret's item map, and the key-encryption-key providers that wrap the per-write data keys.

Package sessionstore is the file backend for local sessions: the JSONL journal codec, the single-writer lock, and tail repair.

Package trace persists a durable, bounded, redacted record of a single Agent run by consuming the core/agent event stream.

Package workerclient defines the worker API client and HTTP contract types.

Package wsarchive encodes and decodes a Task workspace checkpoint's payload: one Zstandard-compressed tar archive, format tar.zst.v1.

Package auth provides credential persistence and renewal for the BuildMax client.

Package cli: root and subcommands for the BuildMax CLI.

Package client provides an HTTP client for the BuildMax server API.

Package desktop implements the BuildMax desktop app (Wails) and is used by cmd/buildmax-desktop.

Package pluginmgr installs plugins from a deployment's Marketplace.

Package slashcmd is the single source of truth for the runtime chat's slash-command set.

Package access owns who a caller is and what they may do.

Package authtoken signs and verifies the run token a worker presents to the managed LLM gateway.

Package admin serves the deployment-scoped routes.

Package artifact serves the durable files a space keeps.

Package auditexport streams the audit trail as CSV.

Package auth serves the routes that establish a session.

Package llmhttp presents the managed gateway over HTTP.

Package runterminal announces a task run that reached a terminal status.

Package space serves what a space owns: its membership, its agents, its webhook keys, its consumption, and its audit trail.

Package work serves the surface a space does its work on: issues and their comments, workflows, tasks and the runs that execute them, the conversations that start them, and the files and traces they leave behind.

Package worker serves the routes a running worker calls back on.

Package scheduler provides task run scheduling.

Package turnqueue serializes the turns of one conversation.

Package streamhub provides task-scoped stream buffers for worker-push and client subscribe (SSE).

Package agent owns the rules for a space's agent definitions.

Package artifact keeps durable files on a space's behalf.

Package audit records that a sensitive action happened.

Package identity owns what proves who a caller is.

Package llmcatalog owns what a deployment's model catalog will accept and what changing it records.

Package llmgateway resolves a model name to an operator-approved upstream target.

Package plugin owns publication and the catalog lifecycle for the private Marketplace.

Package inspect derives a bounded, sanitized description of what a plugin package contributes.

Package secret is the Space Secret lifecycle service: it validates a Secret's items, seals them through a Sealer, and stores metadata plus sealed bytes.

Package space owns membership rules: who is in a space, who may change that, and what a member may be.

Package systemadmin owns who holds a deployment-scoped role.

Package workspace owns the cross-storage commit of a Task workspace checkpoint: it validates a captured payload's descriptor, confirms the immutable bytes are already durable in the payload store, and only then records the authoritative metadata pointer through the metadata store.

Package mockllm serves scripted model replies over the three wire protocols BuildMax speaks, so an end-to-end suite can drive a real run without a provider, a key, or a paid call.

Package secretscan recognizes common secret shapes in free text.