cmd/

Package atomicfile replaces a file so that a concurrent reader (another celeste process, a new lane's setup) sees either the old content or the new, never a half-written file, and a crash never leaves a truncated one.

Package clock is celeste's one process-wide clock that never repeats.

Package fakeprovider serves scripted, streaming LLM provider responses from httptest so tests exercise the real llm backends end to end (2.0 F1).

Package filelock serializes a read-modify-write of a small shared file (the trust store) across celeste processes with an advisory lock on a sidecar file.

Package gitsafe runs celeste's own git commands without the programs a repository's configuration can name.

Package gittest runs git in tests without ever touching a repository the test did not create: variables a parent git may export (git rebase -x exports GIT_DIR) are dropped, and the identity is passed per command, so no test writes user.name or user.email into any config.

Package hooktest runs the test binary itself as a hook command, so hook tests behave the same under sh on Unix and cmd.exe on Windows (2.0 F0).

Package imagefit makes an image fit a provider's limits (#239): it keeps an image that fits, else downscales and re-encodes it with the standard library, else says which limit it can't meet.

Package imagefittest builds test images: noise that PNG can't compress, so a small size in pixels is still large in bytes.

Package pathutil compares file paths the way the filesystem does.

Package privfs creates and tightens account-private files and directories: credentials, logs, transcripts and the rest of ~/.celeste.

Package proctree runs a command as the root of its own process tree and kills the whole tree: hooks and the shell tools share it, so a timeout takes down whatever the command started as well.

Package realroot opens a directory as an os.Root without following a symlink anywhere on its path.

Package sandbox runs model-chosen shell commands under the operating system's sandbox (2.0 W4, #176): a seatbelt profile on macOS, bubblewrap on Linux.

Package shellparse reads a shell command line roughly as a shell would: quotes (including $'...' escapes and $"..."), a leading backslash, unquoted $IFS as a word break, operators, subshells, $( ) and backtick substitutions, and the strings run by sh -c, eval and ssh.

Package shellrun is the one runner for every sh -c command celeste starts: the bash tool (through builtin.RunShell, which checks the denylist first), user-authored custom tools and the agent's --verify-cmd; Args runs a program directly (the agent's artifact git calls).

Package termsafe is the one rule for showing untrusted text on a terminal: model output, tool results, workspace files and names, provider metadata and hook output.

Package textutil holds the byte-bounded text cut shared by everything that caps text on its way to a model or a user, so no cap can split a UTF-8 character.