internal/

Package app is the small facade used by mnemon-harness product commands.

Package assembler is the select-only Loop/Capability Assembler: it compiles a config.File (which capabilities are enabled + how they are bound/limited) plus the channel bindings into a runtime.RuntimeConfig.

Package assets embeds the harness's built-in loop/host/binding manifests and their projected asset files (GUIDE, hooks, skills, subagents).

Package autopilot is the OPTIONAL auto-drive layer over the governed collaboration channel.

Package capability holds the built-in admission rules (the pure leaf): given an Event + Projection it returns a RuleDecision, never writing.

Package codexapp drives a real Codex CLI app-server over JSON-RPC (stdio) and parses its output.

Package coreguard holds architectural guard tests that keep the collaboration-channel core generic.

Package driver is the co-hosted Background Driver: it runs INSIDE the Local Runtime process (holding the same single store-writer lock — never a second opener) and periodically drives the governed Tick, drains projection invalidations, and re-projects the host's managed definition files.

Package remotesync holds the pure store-side helpers for Remote Workspace sync: reading the pending push batch, applying a push response's per-commit status, reading pull state/counts, and advancing the pull cursor.

Package replay re-derives decisions from the canonical event log on a throwaway kernel (event-sourcing purity, S8): replay reads the log only, never advances a live cursor or writes a live store, and its determinism is established by FIELD-MASKING the dynamic decision fields (DecisionID/AppliedAt) before any diff (D1) — production decisions keep their real uuid/time.

Package rule is the server-side admission-controller pre-gate (D4).

Package runtime is the governed control loop: a ControlServer ingests observations exactly-once, runs them through the rule pre-gate, bridges proposals into trusted *.proposed events, reconciles them through the single-writer kernel, and emits outbox invalidations + durable diagnostics.

Package syncserver is the hub half of Remote Workspace sync (sync-abi-v2; the accept surface is the grant scope, §4): push adjudication against the append-only sync_remote_commits log, pull serving with the ONE scope clamp, and the status counters.

Package ui is the Control Tower's presentation layer (P6).