internal/

Package accountusage is the pure logic behind `hadron team usage` (cli#1472): read each configured model account's rate-limit snapshot (and optionally a ccusage JSON file the operator produced), validate everything before any record exists, and shape one `account-usage` record per account.

Package api wraps the Hadron GraphQL endpoint: a genqlient client for typed operations, a raw escape hatch for `hadron api`, and the mapping from transport/GraphQL errors to exit codes.

Package approster holds the App-agents read — the AppAgent join (cor:dmo:050:03) that answers "which Agents are installed in this App?".

Package approvalhash implements the server's versioned approval hash for a node's reader-visible title, abstract, and content (server #1591).

Package auth implements `hadron auth login` flows against the Hadron OAuth endpoints (spec 025: authorization-code + PKCE, public client via dynamic client registration).

Package build holds version metadata stamped at build time via -ldflags (see Makefile and .goreleaser.yaml).

Package cmd assembles the hadron command tree and owns the single error → exit-code → rendering path.

Package cmdutil provides the Factory injected into every command: lazily-resolved config, token store, and API client, plus the values of the persistent --json/--server/--app flags.

Package config reads and writes ~/.config/hadron/config.toml.

Package coveragematrix reads the CLI coverage matrix, internal/api/coverage-matrix.txt (hadron-cli#1334, #66): every Query and Mutation field hadron-server exposes, mapped to the command that reaches it, the issue that tracks the gap, or an exclusion with its reason (cor:api:240:02).

Package delivery is one batch's deliver-and-confirm transaction (cli#907, C1), shared by the host poller and C2's posting CLI (#908).

Package exitcode defines the hadron CLI's stable, documented exit codes.

Package healthsched renders and manages the user-level scheduler entry that runs `hadron team health sweep` on a host: a systemd user timer, a crontab line or a launchd agent.

Package hostpoller is the host side of Hadron's host operations (hadron-cli#831, cor:agt:070): a poller that registers the workers this host can launch, collects the operations issued to it, carries out only the closed set of five, and reports every outcome.

Package modelreport reads the model a native agent session is running from that session's transcript file, for `hadron team session sync-model` (hadron-cli#995, #2252 slice B1).

Package nodedoc is the codec for a single node's portable file form — the frontmatter-markdown (and canonical JSON) representation that `hadron memory export`, `hadron node export`, and `hadron node import` all share.

Package orcaterm is the terminal half of chat delivery (cli#907, C1): the bounded `orca` runner, the four terminal calls delivery may make, and the screen checks that decide whether a composer may be typed into.

Package output renders command results as human-readable text or JSON.

Package secretfile creates a file that is going to hold a secret, so that the file is never wider than 0600 and never reached through a symlink as its final component (cli#1223).

Package skilldoc is the pure half of `hadron skill` (hadron-cli#580): the contract between a Hadron task node and the skill file exported from it.

Package terminalstatus is the `terminal-status@1` output contract of `hadron orca terminal status` (cli#1187) and the dark rule behind it.

Package urlsec holds the URL-scheme security primitives shared by the API transport guard (which refuses to put a bearer token on a cleartext wire) and the OAuth login flow (which validates server-controlled discovery endpoints before handing them to the OS URL-opener or sending a token to them).