pkg/

Package agent: delegation getters and setters for sub-managers.

Package agent_api: LM Studio model-list discovery.

Package agent_audit defines the facts-only per-call audit events the agent emits for every model call and tool execution, and the process-wide sink that records them.

provider_config_timeouts.go — timeout + limit accessor methods on ProviderConfig, split from provider_config.go.

design_export_paths.go — output-path confinement + artifact-relocation helpers for the design_export_tokens handler, split from design_export_handler.go.

Package apiconformance is the conformance suite for the versioned backend contract in docs/api/openapi.yaml.

Package ast (continued) — body extraction.

Package automate provides shared workflow discovery and validation for the automate/ feature used by both the CLI (cmd/automate.go) and the agent tool layer (pkg/agent/tool_handlers_automate.go).

delegation.go — the benchmark's delegation axis: the run mode that selects how a run's work is delegated (coder only, worker delegation, or economy mode) and the per-run delegation metrics the report compares.

Package buildinfo holds build-time metadata shared by the CLI, the WebUI bootstrap payload, and the update checker.

Package clihooks holds tiny callback hooks that wire higher-level CLI behavior (e.g.

Package cliui hosts the CLI terminal display helpers extracted from cmd/.

Package configuration: command categorization and force-flag detection.

Reasoning (collapsed "Thinking" header) methods for AssistantTurnRenderer, split from assistant_turn_renderer.go.

Encryption and decryption operations

Package daemon — Phase 2: Daemon lifecycle + auto-start machinery.

Cloudflare deploy adapter: ship a project to Cloudflare Pages (static output) or Cloudflare Workers (server-side code).

Package deployconfig owns the schema for the deploy config: the machine-readable document stored at .sprout/deploy.json that names where a project ships, plus the validator every reader must run.

Package design defines the design workspace directory contract: the design/ tree layout, the manifest scaffold, and parsers for the machine-readable manifest blocks.

Package envutil provides environment variable helpers with SPROUT_* prefix support.

Package errclass classifies the raw output of a failed build, test, or run command into a small, closed set of categories and pairs it with a short explanation template.

Package errors provides agent-specific error types and classification for intelligent retry/recovery logic.

Event bus implementation

ETH-1 "sync-on-resume": reconcile the git state of a workspace container and report it as a single JSON object.

Package health implements the on-demand project health check behind `sprout health`: it reports size and complexity signals for a project's source tree, near-duplicate functions, dependencies with newer versions available, and the project's failing build/test checks, and turns each concern into a finding that carries a small, separately approvable fix.

Audit logging for SP-077: tracks every write-back of OriginalCode (or NewCode) to the working tree.

Package langguard is the detection foundation of the outbound language guard (roadmap/SP-152-language-guard.md): it extracts prose from model messages, identifies the dominant writing script of that prose, and decides whether a message is long enough to judge at all.

Package llmproxy provides an http.RoundTripper that rewrites direct calls to well-known LLM provider endpoints (api.openai.com, api.anthropic.com, etc.) so they instead route through the sprout-foundry platform's /api/proxy/llm/{provider}/* path.

Model download + on-disk config helpers (split from model.go).

Package modelcontract defines the canonical, provider-agnostic model schema and the adapter interface that normalizes each provider's native model API into it.

Package modelprobe runs a bounded capability probe against a model to check, cheaply and objectively, whether it's usable for agentic coding — and whether it's strong enough for complex work.

Package modelregistry provides a client for fetching per-provider model lists from a static JSON model registry server with in-memory caching.

Package noninteractive provides utilities for detecting and handling provider-not-configured errors in non-interactive environments (daemons, CI, piped stdin).

Package notify provides cross-platform OS-level desktop notifications.

Package plancontract owns the schema for structured plans: the machine-readable plan document stored at .sprout/plan.json (plus a rendered .sprout/plan.md view that is regenerated from the JSON on every write) and the validator that every reader and writer of that file must run.

Package planstore is the file-system-facing half of the structured plan: it reads and writes the machine-readable plan document stored at .sprout/plan.json and the rendered .sprout/plan.md view.

Package preview is the preview backend: it starts or detects the project's dev server from the starter manifest's dev command and port (loaded through pkg/starterstore), and tracks the server's lifecycle — starting, running, stopped, failed — for the preview pane's presentational component.

Package providercatalog is the curated UX layer for provider onboarding — friendly descriptions, signup URLs, API-key help text, recommended-model justifications.

Remote provider cache and configuration.

Package redact provides byte-oriented secret redaction for log files and other persisted artifacts.

Package repo holds the public repository's URL — the single source of truth shared by the CLI (`sprout bug`) and any other Go-side consumer that needs to link to the project.

Package runner implements `sprout runner`: a user's own machine executing the browser build's escalated work for their platform account (SP-159).

Package search provides cross-session search indexing capabilities.

Package secretdetect provides secret detection backed by the gitleaks detection engine.

Package shelltext provides shared helpers for scanning shell command text: quote stripping, heredoc stripping, and git history-rewrite detection.

Package skills owns the catalogue of skills shipped with sprout.

Package startermanifest owns the schema for the starter manifest: the machine-readable document stored at .sprout/starter.json that declares how a project is built and run, plus the validator that every reader and writer of that file must run.

Package starters owns the embedded, versioned starter trees that sprout ships and the discovery entry points over them.

Package starterstore is the file-system-facing half of the starter manifest: it reads the machine-readable document stored at .sprout/starter.json under a project root.

Package testutil provides shared helpers for sprout's test suite.

Package training provides utilities for exporting session data into training-ready formats (ShareGPT, OpenAI fine-tuning JSONL, Alpaca).

ETH-2 "transactional escalation": the container-side execution surface of a three-phase transaction the platform drives against a workspace container — push deltas (browser→container), run a command, pull deltas (container→browser).

Package updatecheck implements the passive "new release available" check: it throttles GitHub release lookups to once per check interval, caches the result in the sprout state directory, and answers "is there a newer version than X" for the CLI notice and the WebUI banner.

Package utils provides error handling utilities and conventions for the codebase.

Package validation provides syntax validation using gofmt/goimports

Package verify implements the verification check runner for the "build", "test", "page", and "interaction" check kinds: after a turn that changed application code, the runtime (not the model) runs the project's build and test commands, and — for page and interaction checks — starts the app from the manifest's dev command and port and drives a headless browser: page checks open each listed route and fail on console errors, while interaction checks run the plan's scripted browser steps and confirm the expected outcome.

browser_rod_discovery.go — GPU probe + system browser discovery, split from browser_rod_launch.go.

Design status endpoint — SP-140-6 §6b.