exec/

Package capability owns execution-side capability discovery.

Package cloudworker runs one exact cloud-leased target through Fort's native runtime without importing any provider credential or cloud database client.

Package cluster composes a machine's local runtime with remote runtimes for its peers (spec 022).

Package codexsubscription implements the isolated, subscription-backed Primary Channel execution contract.

Package fake is an in-memory runtime.Runtime for fast, deterministic unit tests (backlog AO-014: "Interface is mockable — a FakeRuntime powers fast unit tests").

Package gateway is an optional runtime.Runtime decorator (backlog AO-042) that puts spend caps, tracing, and failover in front of any underlying runtime — the role agentgateway/plano play in front of providers.

Package meshjoin hosts the spec-024 enrollment endpoints on the hub daemon:

Package native is Fort's NativeRuntime (backlog AO-014): it spawns agent CLIs itself — no Multica — normalizes their stdout into runtime.RunEvents, injects stdin for Signal (human-in-the-loop), and tracks exit codes.

Package node exposes a Fort's local runtime over HTTP so another Fort — the control plane — can dispatch runs to this machine (spec 022).

Package relay maintains fort serve's outbound tunnel to the 028 gateway: one WebSocket to the broker, per-client-session Noise IK handshakes (exec/relay/secure), and sealed HTTP/SSE service against an injected http.Handler — the transport never imports ui (seam: it moves bytes).

Package remote dispatches runs to another Fort over HTTP (spec 022).

Package runtimemux keeps legacy execution and the isolated Primary Channel subscription lane mutually exclusive.

Package watchdog bounds silent runtime invocations.