internal/

Package anthropic forwards the requests of Claude Code in the VM to the Claude API and adds the API key on the host, so that the VM never holds the key.

Package backend says what a run of the aibox VM needs and what runs it.

Package cli defines the aibox command line.

Package clipboard lets the VM read an image from the clipboard of the host, once each time the person presses the paste key.

Package config reads the settings of a project.

Package confine takes from the aibox process what it no longer needs once the VM runs: new privileges, the file system but for the resolver files, TCP but for connecting to the allowed ports, and the syscalls that reach into the kernel, other processes or namespaces.

Package fence does the work of aibox in a folder the VM can write in a helper, aibox started again, that the kernel lets write only below one folder.

Package filelock locks an open file for one process at a time, with the lock of the system: flock on Unix, LockFileEx on Windows.

Package gitbroker lets git in the VM fetch from and push to the remotes the project config names, with the git login of the host, so that the VM never holds the login.

Package gitconfig carries the git identity of the host into the VM.

Package guest is the first process of the VM.

Package hcs talks to the Host Compute Service of Windows, which runs VMs on Hyper-V, through computecore.dll and nothing else: it creates, starts, ends and lists compute systems and grants a VM access to files on the host.

Package host serves the proxy and the terminal of a running VM, however the VM was started and however its listeners came about, and says how the run ended.

Package hvinstall installs and uninstalls the Windows service of aibox, as an Administrator does from an elevated prompt.

Package hvlaunch runs the aibox VM on Hyper-V, through the Windows service of aibox, as launch runs it with QEMU on Linux: aibox serves the shares itself, over 9p on Hyper-V sockets, and the terminal and the proxy are on ports of the VM only aibox can listen on.

Package hvserver is the Windows service of aibox, which runs as SYSTEM and makes the VMs of the people who run aibox over the pipe of hvservice.

Package hvservice is for the Windows service of aibox and the protocol aibox talks to it in.

Package ide finds the IDEs that Claude Code can connect to, from the lock files that their Claude Code plugins write, and links Claude Code in the VM to one of them.

Package image downloads the VM image of a release of aibox: the kernel and the root disk, which a release carries as one archive for each architecture.

Package launch runs the aibox VM: virtiofsd for each share, the proxy and the terminal for the VM, then QEMU.

Package machine prepares on the host what a backend that boots the kernel of aibox itself needs, whichever VMM it uses: the files of the image, the state disk with its lock, and the vm.Machine of a spec.

Package ninefs serves folders of a Windows host to a Linux guest over 9P2000.L, as the user who runs it.

Package project manages the folders aibox keeps for each project.

Package proxy forwards connections to the internet with HTTP CONNECT.

Package sandbox builds the bubblewrap command line that runs QEMU with nothing of the host but its own program, its libraries and firmware, the kernel, and the files it inherits.

Package seatbelt takes from the aibox process on macOS what it no longer needs once the VM runs, as confine does with Landlock on Linux: the file system but for the resolver files, TCP but for connecting to the allowed ports, and starting programs.

Package session carries a session between the host and the VM over SSH, on a terminal or without one.

Package task is what the host and the VM agree on for a task that runs unattended: the files the host gives it and the results it gives back.

Package tunnel accepts connections and joins pairs of them.

Package version reports the version of the aibox binary.

Package vhd writes the VHDs Hyper-V attaches, as the VHD specification lays them out: it makes a raw disk image a fixed VHD by appending the footer, so that the guest sees the same bytes as before, and makes an empty dynamic VHD, which takes up space as the guest fills it.

Package vm builds the command lines of QEMU and virtiofsd for the aibox VM.

Package vsockns gives a VM a vsock namespace of its own: a network namespace in local mode, where the guest CID is private, so every VM can have the same one, and where only aibox has sockets.

Package vzlaunch runs the aibox VM with Virtualization.framework of macOS, as launch runs it with QEMU on Linux: aibox owns the VM, the shares are virtiofs, the state disk is a block device and the terminal and the proxy are on vsock ports only aibox can reach.