internal/

Package agentguard refuses agent tool calls that would write into a canonical clone.

Package archiveprune audits and, only under explicit apply, deletes local clones of repositories confirmed archived on GitHub.

Package buildinfo resolves the running WB binary's version so that any package can record it, not just the command layer.

Package canonicalrescue moves uncommitted work out of a canonical clone onto a branch, without discarding anything and without disturbing the clone.

Package checkoutmarker writes one `.worktree.md` into every checkout, stating what that checkout is and whether it may be written to.

Package ciaudit checks repository CI/CD files for explicit coverage gates and build-once artifact promotion.

Package console reports whether wb is attached to a human terminal.

Package deps coordinates exact dependency updates across isolated repository worktrees.

Package discover finds the repositories to operate on by reconciling the local ~/projects/{org}/{repo} tree with the non-archived repositories GitHub reports for the relevant orgs.

Package diskusage measures a directory tree twice: the size it appears to occupy, and the size deleting it would actually reclaim.

Package encode renders wb's report types as JSON.

Package fleetsync decides and performs the sync action for a single repo: clone or pull an active repo, or — only when the caller explicitly opts in — remove an archived one's local clone.

Package gitops wraps the git and gh commands needed to read the default branch of a repo and to land a change on it — pushing directly when allowed, or opening an auto-merge PR when the branch is protected.

Package gitremote validates the portable, credential-free identity of Git remotes carried across WB session-move boundaries.

Package graduation composes independently produced WB and deployment evidence into one strict, reviewable graduation receipt.

Package hooks manages declarative, user-owned Git hook templates.

Package layout audits and safely cleans local clone placement under a projects root.

Package locallink builds a consumer against a library's *working tree* instead of a published version, so a change is proven across every affected repository before anything is published.

Package migrate plans and applies declarative source migrations.

Package npmrelease coordinates an approved npm publication workflow without ever handling npm credentials.

Package orchestrate runs typed repository mutations through isolated worktrees, local verification, and optional GitHub publication stages.

Package prinventory owns the remote pull-request inventory.

Package process starts bounded subprocesses with a lifecycle that owns their descendants as well as their direct child.

Package progress defines the transport-neutral event contract used by long-running WB operations.

Package quality runs read-only coverage and verification checks for a local repository fleet.

Package recipe implements wb's config-driven fleet operations: a Recipe describes how to detect and mutate matching repos, and how to land the result via the same worktree/commit/push-or-PR flow used everywhere else in wb.

Package remotestate publishes one machine's WB fleet state to a shared store and reads every machine's state back.

Package scan inspects a repository working tree.

Package secretscan is WB's deterministic secret-shape gate for agent-authored continuation text (wb session move's handover and wb session park's continuation).

Package session records which agent sessions are running on this machine.

Package sessionauthority defines the transport-neutral authority consumed by the shared pinned-worktree and successor-launch primitives.

Package sessioncourier delivers WB-owned session handoff protocol values.

Package sessioncustody owns source-side receipt acknowledgement.

Package sessionlaunch owns the fixed target-side harness launch boundary.

Package sessionmessage owns durable follow-up delivery to a completed session-move successor.

Package sessionmessenger owns source-side durable session-message delivery.

Package sessionmove defines WB's portable agent-session handoff protocol and the local durable aggregate used by both source and target machines.

Package sessionpark stores a complete, durable checkpoint for a parked WB session.

Package sessionparkcourier transports canonical parked-session envelopes.

Package sessionparkreceive owns target-side admission and atomic execution of one parked multi-worktree bundle.

Package sessionreceive owns target-side request admission, pinned-worktree recovery, successor launch, and completed-receipt publication.

Package skills installs WB's Agent Skills (embedded from ai/skills, see package ai) into a harness's own skills directory -- Claude Code's ~/.claude/skills, Cursor's ~/.cursor/skills, Codex's ~/.codex/skills -- so they are discoverable in every project, not only inside a checkout of sneat-dev/wb.

Package streambranch names the branch namespace a dependency stream owns.

Package streams owns the identity of a dependency stream: one named cross-repository unit of work spanning a library and the consumers that must change with it.

Package streamsync keeps a stream branch current and verifies its batch.

Package tui holds the bubbletea models for `wb sync`'s progress display.

Package wbconfig resolves the user-level WB configuration file that several commands share (recipes for wb run, the remote section for wb remote).

Package wbhome resolves the directories WB uses to coordinate work across agents and sessions: task worktrees, operation locks, and reports.

Package worktreeend closes one task's worktrees: the verb every lane contract already tells an agent to finish with.

Package worktrees creates and validates the isolated Git worktrees used for human and agent development.