internal/

Package acp is the Agent Client Protocol (ACP) adapter: it lets an ACP editor (Zed, and others that speak ACP) drive the mecatl harness as a subprocess over stdio.

Package agentimport converts local Codex and Claude Code artifacts into provider-neutral Mecatl data.

Package agents is the in-repo alias shim for the agent-definition discovery adapter that graduated into the importable engine module (engine/adapter/agentfs, issue #328).

Package authfile is the adapter-layer leaf for mecatl's credentials file: a settings.yaml-sibling YAML file (conventionally $XDG_CONFIG_HOME/mecatl/auth.yaml) holding per-provider secrets: an api_key for the existing keyed providers or a manually supplied OAuth access-token snapshot for openai-codex.

Package cedarauthority provides the optional Cedar-backed authority evaluator.

Package credentialstore defines a host-internal, credential-format-agnostic port for opaque binary records and provides namespace-bound backend handles.

Package conformance provides the reusable contract tests for mutable credential stores.

Package daemonconfig is a strict, versioned, operator-selected daemon configuration file loaded ONLY when `mecated serve --config PATH` is explicitly supplied.

Package dream implements opt-in background memory consolidation.

Package envscrub builds the SECRET-neutralised process environment every agent-facing command shell runs with.

Package filewatch coalesces filesystem notifications for mounted configuration files.

Package flocklease is the single-host port.SessionLease: cross-process single-writer enforcement for sessions sharing one machine (one store directory), backed by gofrs/flock advisory locks plus a small per-session record file.

Package forker implements the default tool.EnvironmentForker used by fork-join parallelism (harness pattern 8).

Package gitenv builds the git-neutralizing process environment shared by the forker (its own fork-time git invocations) and the sandboxed team-member command runner.

Package grpcdriver implements the harness side of the mecatl.driver.v1 store-driver protocol: gRPC client adapters that satisfy the engine's store seams over a remote, operator-run driver process, plus the matching server wrappers a Go driver (or a test fixture) mounts over an in-process store.

Package hashutil is the shared, stdlib-only content-fingerprint primitive for the adapter layer.

Package hookexec implements port.HookRunner by running a configured shell command per lifecycle HookPhase.

Package k8slease is the Kubernetes-backed port.SessionLease: cross-process, cross-HOST single-writer enforcement for the multi-replica cloud-native posture (ADR 0027 Phase 4), backed by a coordination.k8s.io/v1 Lease object per session id.

Package llmresilience provides a harness-level resilience decorator around any port.LLMProvider.

Package mcp adapts tools served by external Model Context Protocol (MCP) servers into the harness's tool.Tool interface, so the agent loop can call remote MCP tools exactly as it calls built-in ones.

Package jq is a sandboxed wrapper around github.com/itchyny/gojq that evaluates a jq filter against a JSON input and returns the JSON-stringified result.

Package source is the pluggable EXTENSIBILITY POINT for WHERE the harness's MCP server configs come from.

Package mcpperf serves this Go process's runtime performance data over a read-only Model Context Protocol (MCP) server, so an agent can introspect the harness's own latency, memory, goroutine, and profile state through MCP tools and resources instead of a human reading raw /metrics or /debug/pprof.

Package memory implements harness pattern 3 (tiered memory): a conservative, cross-session memory facility exposed to the model as two tools (Remember and Recall) backed by a pluggable tool.MemoryStore.

Package modelhook is the composition-layer "guardrails" adapter (issue #27): an LLM-backed port.HookRunner DECORATOR that inspects tool-use phases with a dedicated, tool-less checker model and enforces a verdict on the call.

Package modeltext contains protocol-neutral hygiene for model catalog text.

Package openaicodex supplies the credential and HTTP request policy for the experimental ChatGPT Codex backend.

Package openaicompat is a stdlib-only LEAF adapter that fetches a LIVE model catalog from any endpoint speaking the OpenAI-shaped GET /v1/models protocol — it names the PROTOCOL, not a specific vendor.

Package openrouter is a stdlib-only LEAF adapter that fetches the LIVE OpenRouter model catalog from the public, UNAUTHENTICATED models endpoint and maps it into a neutral, package-own result type.

Package osfs implements tool.FileSystem over the real operating-system filesystem and a tool.Workspace that scopes every path under a single session root.

Package permclassify provides an OPTIONAL layer-2 model-based command/tool risk classifier, implemented as a pluggable decorator over a layer-1 port.PermissionPolicy.

Package permconfig is the file-based permission-config adapter (issue #13).

Package procgroup puts a child process in its own process group so a context cancellation kills the WHOLE group — not just the direct child.

Package providercatalog is a stdlib-only LEAF DATA adapter exposing a pinned, embed-vendored subset of the models.dev model catalog as a typed, read-only Go API.

Package redisstore implements the Redis-backed port.SessionStore, port.EventLog, port.PrunableStore, and port.ToolCallRecorder for the cloud-native posture (ADR 0048, mecak8s).

Package reflectionstore persists bounded learning proposals in a crash-safe, principal/project-partitioned document.

Package remoteenv is a deterministic, in-process, protocol-level reference fake of a REMOTE execution environment (ADR 0214, issue #462 phase 3).

Package rules is the in-repo alias shim for the project/user rule discovery adapter that lives in the importable engine module (engine/adapter/rulesfs, issue #329).

Package scheduler is the in-process tick loop for the scheduled-tasks feature (issue #189, Phase 1e).

Package server is the API adapter for mecatl: it exposes the WP8 agent loop over two network surfaces that share one domain Event taxonomy.

Package skills is the in-repo adapter for Agent Skills.

Package skillstore persists agent-owned skill lifecycle records in a flocked, crash-safe manifest with immutable content-addressed SKILL.md files.

Package slogdiag is an outbound adapter implementing port.Diagnostics over the standard library's log/slog.

Package soul implements issue #14, Phase 1: a user-scoped, agent-READ-ONLY persona/"soul" fragment loaded into the turn-0 conversation as data.

Package jsonlstore implements a versioned current-snapshot port.SessionStore, plus append-only port.ToolCallRecorder and port.EventLog sidecars.

Package telemetry is an outbound adapter that derives OpenTelemetry traces and Prometheus metrics from the harness's domain event stream.

Package tlsreload owns hot reload and expiry observation for a server TLS certificate.

Package tokenizer provides a tiktoken-backed agent.TokenCounter.

Package toolhivellm is the ToolHive-aware code in mecatl (issue #262 + #265): it detects, by reading ToolHive's OWN on-disk config file, whether a ToolHive LLM gateway proxy is set up for this user — and, if so, what LOOPBACK port it listens on — and (issue #265, tokensource.go) builds an in-process OIDC token source so the `toolhive` provider can talk DIRECTLY to the real gateway_url with no local proxy hop.

Package toolkit holds the small, tool-agnostic helpers shared by the adapter-layer tool packages (internal/adapter/tools and internal/adapter/memory).

Package tools composes the model-facing tool catalog of the mecatl kit.

Package workspacetrust is the adapter-layer reader/writer for workspace trust (Workspace-Trust feature, Phases 1 + 2b).

Package xdgconfig is the shared adapter-layer seam for resolving user-global configuration locations against the process environment.

Command configref is the BUILD-TIME generator (issue #140) that emits the two committed configuration artifacts from the permconfig YAML schema:

Package codextest creates synthetic, non-secret manual-token fixtures.

Package testhome isolates process-wide config discovery in command tests.