internal/

Package acp implements yottacode as an Agent Client Protocol (ACP) server — a long-lived process hosting N concurrent sessions over one stdio JSON-RPC connection, so yottacode is embeddable in editors that speak ACP (Zed, JetBrains, and others).

Path-validation helpers for the mutating filesystem tools (write_file, edit_file, mkdir, copy_file, move_file, delete_file).

Package agentruntime is the shared session-construction layer behind `yottacode run` (internal/oneshot), the TUI (internal/tui), and the ACP server (internal/acp).

Package browser drives a real Chromium/Chrome instance over the Chrome DevTools Protocol via go-rod/rod, giving the agent's browser_* tools a pure-Go backend with no Node.js or Playwright dependency.

Package catalog is yottacode's source of truth for the set of cloud LLMs the wizard and TUI offer.

Package checkpoint implements the file + conversation snapshot store behind the TUI's /rewind command and Esc Esc keybinding.

Package codemap builds a compact, read-only structural index of a workspace.

Package config loads ~/.yottacode/config.toml — the single tunable surface for context-window watermarks, retrieval, and provider profiles.

Package contextwindow estimates token usage for a message history.

Package dap provides a small yottacode-owned Debug Adapter Protocol client.

Package documents provides bounded, provenance-rich text extraction from local structured and markup files — CSV, TSV, JSON, JSONL, XML, and HTML — for the read_document agent tool.

Package dotenv loads KEY=VALUE pairs from .env files into a map.

Package execguard hardens an already-built *exec.Cmd against the orphaned-descendant hang: a subprocess we invoke (git, gh, ...) can itself fork a child that inherits its stdout/stderr pipes — a git commit launching $EDITOR, a GPG pinentry prompt, an SSH host-key or passphrase prompt, a credential helper.

Package experimental gates not-yet-stable features behind named flags so early adopters can iterate on them while the default experience stays stable.

Package filerefs implements the @file reference system: when a user types something like "explain @main.go and @internal/foo.go", the agent detects the @-prefixed tokens, reads the matching files from the working directory, and injects their contents into the system prompt so the model sees the file as authoritative context for the turn — no extra read_file tool call required.

Package github is the typed adapter between yottacode and GitHub.

Package lsp provides the small language-server bridge used by yottacode's experimental code-intelligence tools.

Package mcp implements yottacode's client for the Model Context Protocol (MCP).

Package memory loads optional context files that are auto-injected into the system prompt at session start.

Package netguard holds small, dependency-free network-address checks shared by anything that dials a URL it doesn't fully control the destination of — a model-chosen fetch, or a hostname-configured remote server whose DNS could be rebound after the admin approved it.

Package oneshot is the non-interactive entry point: read one prompt, run one agent turn, print the final answer to stdout, exit.

Package permissions implements the project-local permissions layer that gates tool calls.

Package promptmacros holds the "prompt macro" slash commands shared between internal/tui and internal/acp — the bucket-A commands (/git-commit, /git-push, /git-create-pr, /git-update-pr, /git-create-issue, /git-review-pr, /code-review, /git-implement-issue, /init) that translate a slash invocation into a directive prompt for the agent loop to run as a normal turn.

Package providerops centralizes the provider/model mutation operations the TUI picker and the cobra `yottacode provider` / `yottacode model` subcommands both perform.

Package recall is a tiny full-text index over saved sessions.

Package sandbox holds the podman-backed Sandbox implementation (internal/agent.Sandbox) — a session- or worker-scoped rootless container that RunBashTool dispatches commands into via `podman exec` instead of running them directly on the host.

Package sandboxcache centralizes host paths shared by sandbox startup and sandboxed tool command preparation.

Sensitive projects — the per-repository opt-out that stops automatic session recall from moving a project's conversations across the network.

Package shellseg splits a (possibly compound) shell command into its top-level segments — the pieces separated by &&, ||, ;, and pipes — while respecting quotes, escapes, and $(...)/backtick substitutions so a separator inside a string literal or substitution doesn't split.

Package skills owns spec-compliant Agent Skills: discovery, parsing, and the in-memory registry the agent loop reads.

Package subagents owns typed-subagent configuration, the per-session task registry for background runs, and the discovery + parsing of agent definition files (`.yottacode/agents/*.md` and `~/.yottacode/agents/*.md`).

Package syncutil re-exports Mutex and RWMutex so the rest of the codebase can declare lock fields without caring whether a build wants the plain runtime primitives (this file, the default) or the instrumented ones from mutex_deadlock.go (`go test -tags deadlock`, `go run -tags deadlock`).

Folder trust — the per-directory consent gate that fires before the TUI opens a session in a previously-unseen workspace.

Package update polls GitHub once a day for newer yottacode releases and caches the answer under ~/.yottacode/cache/update-check.json.

Package usercmd loads user-authored slash commands from markdown files dropped in ~/.yottacode/commands/ (user scope) and <cwd>/.yottacode/commands/ (project scope).

Package version exposes the build version.

Package wizard implements `yottacode setup` — the first-run setup flow.

Package worktree owns the git-worktree machinery yottacode layers on top of plain `git worktree`: name generation, path resolution under <repo>/.yottacode/worktrees/, .worktreeinclude file copying, and clean/dirty detection for end-of-session cleanup.

Package ychome resolves the root directory for yottacode's global state: $YOTTACODE_HOME when the override is set, ~/.yottacode otherwise.