pkg/

Package auth is the two credentials a harness checks.

Package coordinator is the harness's side of the Tailscale coordination protocol: ts2021, Noise inside a WebSocket at /ts2021, the one upgrade the tunnel passes.

Package elevate makes a command that needs root or admin work without the user typing sudo or opening an elevated shell first.

Package harness steps a session: load the file, build the context, call the provider, append what comes back, execute the calls, repeat until the model stops calling tools.

Package mesh puts this worker on its project's Mainplane Network: tailscale's engine (wireguard-go, magicsock, the DERP client) on a TUN of its own, with its own state, UDP port, and router, so it runs beside a user's own Tailscale.

Package pointer is how a worker or connector finds its harness from the key its token carries, or the network name a person types.

Package provider turns a context of state file records into one LLM request and the streamed response back into records.

Package relay is the DERP relay on the harness's one port.

Package release is how a binary becomes another release's.

Package server assembles the roles a mainplane-server process runs.

Package statefile reads and writes the append-only files that hold an agent session.

Package tunnel is a self-hosted harness's front door: a cloudflared child that carries one public HTTPS URL to the harness's loopback port, so the harness opens no inbound port and needs no domain.

Package version is the release a binary was built from.

Package worker is the side of a worker that runs code and moves files for a harness over one connection.