internal/

Package credentials seals app-scoped secrets independently of public run data.

Package filelock provides nonblocking, process-owned locks on real files.

Package memoryconfig wires optional memory into runtime entrypoints.

Package memoryeval compares document-level evidence retrieval on a shared corpus.

Package memoryjobs owns durable background learning jobs.

Package modelauth owns encrypted run credentials, never user login state.

Package privatefile reserves sensitive files with owner-only access.

Package procenv builds environments for subprocesses that agents can influence.

Package sandbox confines agent-selected commands with Landlock.

Package sqliteuri constructs file URIs for native SQLite paths.

Package symbols extracts declarations from source files using a pure-Go tree-sitter runtime.