internal/

Package credentials seals app-scoped secrets independently of public run data.

Package modelauth owns encrypted run credentials, never user login state.

Package procenv builds environments for subprocesses that agents can influence.

Package sandbox confines agent-selected commands with Landlock.

Package symbols extracts declarations from source files using a pure-Go tree-sitter runtime.