internal/

Package budget answers one question for unattended pools: may we spend more agent money right now? Every enqueued agent task is a real cost, so the guard projects spend from the journal's task.enqueued facts and can defer to an operator-supplied command for custom ceilings.

Package consumer is the journal-as-bus push seam (ADR-0009): one paging reader over queue.Store bounded reads fans every fact out to exact subscribers, in Seq order, at-least-once.

Package depsweep converges the ecosystem on the dependency plan computed by project-dependency-graph: it pulls the machine-readable release-overview plan, turns it into deterministic "depbump" tasks (executor.TaskTypeDepBump) chained by the plan's own DAG, and lets the queue's scheduling replace wave arithmetic.

Package dlqfix closes the loop around dead-lettered agent work: every dead-lettered agent task gets ONE autopsy by a second agent, and the autopsy's verdict is executed mechanically — "fixed" rescues the original with a fresh attempt budget, "wontfix" dismisses it with the recorded reason.

Package e2e holds end-to-end CLI tests that drive the built tq binary.

Package harvest turns repository backlogs into queue tasks.

Package httpapi is the v0.2 production API for non-Go producers (ADR-0008): enqueue tasks, report production errors (ADR-0021), and read queue stats over HTTP with token auth.

Package httpauth carries the token-channel primitives shared by the two HTTP surfaces (`tq serve` dashboard, `tq api`): how a bearer token may be presented, and how a presented value is compared to the configured one.

Package incident turns production error reports into journaled facts, folds those facts into incidents, and reacts by minting agent fix tasks (ADR-0021) — the command/event spine of error-driven auto-fix:

Package lockout holds the strike limiter behind both HTTP surfaces: a client that fails MaxHits times is locked out of the guarded routes for a fixed window; a success resets the strikes.

Package prioritize scores the frontier, just in time: only the next-K claimable backlog items of a repo — the scoring frontier (O3 2026-10-05) — are worth scorer spend, so ONE batch-scorer task (executor type "prioritize") covers that window; when the task completes, its verdicts are cached (priority_scores) and applied to the matching PENDING tasks as task.reprioritized facts.

Package review closes the loop around agent work: every completed agent task gets ONE review by a second agent, and a request_changes verdict can mint fix tasks.

Package runactor composes long-running components under one signal story: named actors run concurrently, the first exit (or failure) ends the whole group, teardown runs LIFO, and an interrupt actor turns SIGINT/SIGTERM into graceful cancellation — a second signal exits hard.

Package session bridges INTERACTIVE crush sessions into the same close-out pipeline pool agents get.

Package status automates the "done prompt": after every N completed agent tasks in a project, the sweeper mints ONE status task — a headless agent that writes a full status report (docs/status/<timestamp>.md) and closes the loop by appending the next work items to the repo's TODO_LIST.md, where the next harvest tick picks them up.

Package watermark holds the durable journal cursor shared by the journal-driven sweepers (review, dlqfix, status, prioritize): one row per consumer in the queue store's watermarks table, paged Facts reads, and a checkpoint AFTER each consumed page — never before, or a crash would silently skip the page's facts.

templ: version: v0.3.1020