internal/

directory
v0.8.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 23, 2026 License: MIT

Directories

Path Synopsis
Package agent implements the multi-agent runtime core: an agent registry, the runtime task model, a workflow engine, agent handoffs, session/context tracking, and human approval integration.
 Package agent implements the multi-agent runtime core: an agent registry, the runtime task model, a workflow engine, agent handoffs, session/context tracking, and human approval integration.
Package agents implements the multi-agent engineering layer: specialist agent roles, the standard team, and a multi-agent pipeline that runs a task through the team with per-stage handoffs.
 Package agents implements the multi-agent engineering layer: specialist agent roles, the standard team, and a multi-agent pipeline that runs a task through the team with per-stage handoffs.
Package app is the Task-centered application-services layer that sits above the existing engines and below every interface (MCP, CLI, REST, SDK, Web).
 Package app is the Task-centered application-services layer that sits above the existing engines and below every interface (MCP, CLI, REST, SDK, Web).
Package architecture implements Architecture Governance: a declarative architecture.yaml rule file with named layers and per-rule metadata, evaluated deterministically against the standard index.
 Package architecture implements Architecture Governance: a declarative architecture.yaml rule file with named layers and per-rule metadata, evaluated deterministically against the standard index.
Package brief produces a compact onboarding digest for an agent at the start of a session: project map, index summary, hub symbols, entry points and recent kern savings.
 Package brief produces a compact onboarding digest for an agent at the start of a session: project map, index summary, hub symbols, entry points and recent kern savings.
Package budget fits text into a token budget: it removes duplicate lines, keeps the head plus important lines (errors, stack frames, recent tail), then truncates to the target size.
 Package budget fits text into a token budget: it removes duplicate lines, keeps the head plus important lines (errors, stack frames, recent tail), then truncates to the target size.
Package cache persists kern state on the local machine, outside any user workspace, so nothing generated is ever visible in a project.
 Package cache persists kern state on the local machine, outside any user workspace, so nothing generated is ever visible in a project.
Package ci provides a vendor-agnostic CI/CD adapter interface and a GitHub Actions implementation.
 Package ci provides a vendor-agnostic CI/CD adapter interface and a GitHub Actions implementation.
Package cicd integrates kern with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, etc.).
 Package cicd integrates kern with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, etc.).
Package code produces compact, symbolic summaries of source files and projects so agents get the structure without re-reading every line.
 Package code produces compact, symbolic summaries of source files and projects so agents get the structure without re-reading every line.
Package coder implements the autonomous coding agent (spec §3 capability 9).
 Package coder implements the autonomous coding agent (spec §3 capability 9).
Package commitmsg derives a deterministic commit message from a unified diff.
 Package commitmsg derives a deterministic commit message from a unified diff.
Package compress strips noise from logs and prompts deterministically.
 Package compress strips noise from logs and prompts deterministically.
Package consistency provides a cross-engine, multi-source consistency checker (Strict Plan Phase 14).
 Package consistency provides a cross-engine, multi-source consistency checker (Strict Plan Phase 14).
Package context implements the Context Engine 2.0: it assembles a domain.ContextPacket combining the intelligence graph, engineering memory, evidence, architecture, git, and risk into one structured response for the "Analyze this proposed change" workflow.
 Package context implements the Context Engine 2.0: it assembles a domain.ContextPacket combining the intelligence graph, engineering memory, evidence, architecture, git, and risk into one structured response for the "Analyze this proposed change" workflow.
Package deployment provides a vendor-agnostic deployer abstraction.
 Package deployment provides a vendor-agnostic deployer abstraction.
Package diff computes line-level unified diffs without external tooling.
 Package diff computes line-level unified diffs without external tooling.
Package docsearch chunks local documents and indexes them with a deterministic, dependency-free vector embedding (feature-hashed character n-grams).
 Package docsearch chunks local documents and indexes them with a deterministic, dependency-free vector embedding (feature-hashed character n-grams).
Package doctor runs diagnostics: agent wiring, index health, Ollama reachability and stats writability.
 Package doctor runs diagnostics: agent wiring, index health, Ollama reachability and stats writability.
This file holds the concrete report struct types for artifact kinds that had no concrete domain type of their own (Phase 3.1 Artifact contract).
 This file holds the concrete report struct types for artifact kinds that had no concrete domain type of their own (Phase 3.1 Artifact contract).
Package enterprise implements multi-project enterprise mode for kern-server (spec §30): shared org knowledge, centralized policies, org-level audit and multi-project state.
 Package enterprise implements multi-project enterprise mode for kern-server (spec §30): shared org knowledge, centralized policies, org-level audit and multi-project state.
Package eventbus provides a deterministic, in-process publish/subscribe event bus carrying typed system events.
 Package eventbus provides a deterministic, in-process publish/subscribe event bus carrying typed system events.
Package evidence wraps deterministic v1 outputs (intel, sec, verify) as typed domain.Claim objects carrying evidence, provenance and confidence, built via a fluent Builder and per-output factory functions.
 Package evidence wraps deterministic v1 outputs (intel, sec, verify) as typed domain.Claim objects carrying evidence, provenance and confidence, built via a fluent Builder and per-output factory functions.
Package execution is the 2.0 execution/sandbox layer (Phase 8 of the Kern 2.0 migration; see spec §15).
 Package execution is the 2.0 execution/sandbox layer (Phase 8 of the Kern 2.0 migration; see spec §15).
Package fetch retrieves a web document and converts it to plain text so it can be indexed locally.
 Package fetch retrieves a web document and converts it to plain text so it can be indexed locally.
Package flight is the flight recorder for Workflow E (GOVERN AI ENGINEERING — "What did our AI agents do, why, and what happened?").
 Package flight is the flight recorder for Workflow E (GOVERN AI ENGINEERING — "What did our AI agents do, why, and what happened?").
Package fw holds kern's built-in framework catalog: which frameworks each language has (Spring/Spring Boot for Java, Django/Flask/FastAPI for Python, Express/NestJS for TypeScript, Rails for Ruby, ...), the signals that reveal them in a project, and project-level detection over those signals.
 Package fw holds kern's built-in framework catalog: which frameworks each language has (Spring/Spring Boot for Java, Django/Flask/FastAPI for Python, Express/NestJS for TypeScript, Rails for Ruby, ...), the signals that reveal them in a project, and project-level detection over those signals.
Package governance is the unified policy / risk / permissions engine of the Kern 2.0 control plane.
 Package governance is the unified policy / risk / permissions engine of the Kern 2.0 control plane.
approval
Package approval provides the human-in-the-loop approval workflow used to gate HIGH/CRITICAL risk actions.
 Package approval provides the human-in-the-loop approval workflow used to gate HIGH/CRITICAL risk actions.
audit
Package audit provides the tamper-evident in-memory audit log of every governance decision.
 Package audit provides the tamper-evident in-memory audit log of every governance decision.
exec
Package exec is the single governance gate that the execution tools (kern_exec, kern_sandbox, kern_execute) pass through.
 Package exec is the single governance gate that the execution tools (kern_exec, kern_sandbox, kern_execute) pass through.
firewall
Package firewall provides the unified AI change firewall that ties together agent identity, risk scoring, the approval workflow, and the audit log.
 Package firewall provides the unified AI change firewall that ties together agent identity, risk scoring, the approval workflow, and the audit log.
identity
Package identity provides agent identities and the permission model used by the governance change firewall.
 Package identity provides agent identities and the permission model used by the governance change firewall.
risk
Package risk provides deterministic risk scoring over domain.Policy rules.
 Package risk provides deterministic risk scoring over domain.Policy rules.
Package heal implements a self-correction loop: when validation fails, it asks a local LLM for corrected file contents, applies the fix to a throwaway snapshot copy of the project, re-runs validation there, and reports the resulting diff.
 Package heal implements a self-correction loop: when validation fails, it asks a local LLM for corrected file contents, applies the fix to a throwaway snapshot copy of the project, re-runs validation there, and reports the resulting diff.
Package hook implements native hooks that give non-opencode agents the same output compression and session-memory capture that the opencode plugin provides (see .opencode/plugins/kern.ts).
 Package hook implements native hooks that give non-opencode agents the same output compression and session-memory capture that the opencode plugin provides (see .opencode/plugins/kern.ts).
Package hooks wires kern into git: a post-commit hook compresses each new commit's diff into the project's cross-session memory, so agents inherit "what changed" without reading the full history.
 Package hooks wires kern into git: a post-commit hook compresses each new commit's diff into the project's cross-session memory, so agents inherit "what changed" without reading the full history.
Package ignore implements gitignore-style ignore matching for kern's own walks: a .kernignore file takes precedence over .gitignore, and the union of both (plus kern's hardcoded defaults) decides what kern pack and kern project map skip.
 Package ignore implements gitignore-style ignore matching for kern's own walks: a .kernignore file takes precedence over .gitignore, and the union of both (plus kern's hardcoded defaults) decides what kern pack and kern project map skip.
Package incident implements Incident Engineering (Phase 12): turning a production alert into a root-caused, evidence-backed, sandbox-verified fix and PR.
 Package incident implements Incident Engineering (Phase 12): turning a production alert into a root-caused, evidence-backed, sandbox-verified fix and PR.
Package index builds a persistent AST-level index of a Go project: symbols, imports, call edges, and reverse callers.
 Package index builds a persistent AST-level index of a Go project: symbols, imports, call edges, and reverse callers.
Package intel turns kern's AST index into a code-intelligence engine: change impact (blast radius + risk), test-coverage gaps, hub/bridge hotspots, execution flows and community clustering — pure Go over the persisted index.
 Package intel turns kern's AST index into a code-intelligence engine: change impact (blast radius + risk), test-coverage gaps, hub/bridge hotspots, execution flows and community clustering — pure Go over the persisted index.
Package intelligence promotes the persisted v1 index into the canonical domain.Graph, adding provenance and version metadata, and exposes the unified query APIs (who calls X, what X depends on, what depends on X, and the affected APIs/services/events/tests).
 Package intelligence promotes the persisted v1 index into the canonical domain.Graph, adding provenance and version metadata, and exposes the unified query APIs (who calls X, what X depends on, what depends on X, and the affected APIs/services/events/tests).
Package learning extracts recurring patterns from persisted engineering memory and surfaces them as recallable memory.
 Package learning extracts recurring patterns from persisted engineering memory and surfaces them as recallable memory.
Package llm implements an optional, opt-in compression step backed by a local Ollama server.
 Package llm implements an optional, opt-in compression step backed by a local Ollama server.
Package lock provides advisory workspace locks for multi-agent coordination.
 Package lock provides advisory workspace locks for multi-agent coordination.
Package loop implements the continuous closed loop: orchestration that connects Intent → Plan → Code → Verify → Deploy → Observe → Learn, config-gated by an autonomy level (L0–L5).
 Package loop implements the continuous closed loop: orchestration that connects Intent → Plan → Code → Verify → Deploy → Observe → Learn, config-gated by an autonomy level (L0–L5).
Package mcp implements a minimal Model Context Protocol server over stdio.
 Package mcp implements a minimal Model Context Protocol server over stdio.
Package memory persists distilled, cross-session lessons per project.
 Package memory persists distilled, cross-session lessons per project.
Package metrics provides a unified, thread-safe metrics layer for kern, consolidating performance, self-observability, AI governance, and product success metrics into a single Recorder.
 Package metrics provides a unified, thread-safe metrics layer for kern, consolidating performance, self-observability, AI governance, and product success metrics into a single Recorder.
Package modernization implements the legacy modernization use case (spec §41): "Analyze this monolith and propose a safe extraction plan."
 Package modernization implements the legacy modernization use case (spec §41): "Analyze this monolith and propose a safe extraction plan."
Package optimize orchestrates prompt compression, log stripping, code summarization and build result compaction, recording before/after stats.
 Package optimize orchestrates prompt compression, log stripping, code summarization and build result compaction, recording before/after stats.
Package ownership parses CODEOWNERS files and maps file paths to their owning teams/people.
 Package ownership parses CODEOWNERS files and maps file paths to their owning teams/people.
Package pack builds a single paste-ready bundle of a whole repository: project instructions, a directory tree with per-file token counts, and the file contents, sized to fit a token budget.
 Package pack builds a single paste-ready bundle of a whole repository: project instructions, a directory tree with per-file token counts, and the file contents, sized to fit a token budget.
Package pii scans text for secrets and personally-identifiable information (API keys, passwords, tokens, URLs with credentials, IPs, emails) and swaps them for safe placeholders like [MASKED_IP_1].
 Package pii scans text for secrets and personally-identifiable information (API keys, passwords, tokens, URLs with credentials, IPs, emails) and swaps them for safe placeholders like [MASKED_IP_1].
Package planner drives an LLM to generate an implementation plan for a given intent.
 Package planner drives an LLM to generate an implementation plan for a given intent.
Package precache speculatively warms the on-disk caches (code summaries and the document vector index) in the background so interactive tools are fast when they run.
 Package precache speculatively warms the on-disk caches (code summaries and the document vector index) in the background so interactive tools are fast when they run.
Package processgroup provides a cross-platform way to run a command in its own process group so the entire group (the command and any grandchildren it spawns) can be killed together on timeout.
 Package processgroup provides a cross-platform way to run a command in its own process group so the entire group (the command and any grandchildren it spawns) can be killed together on timeout.
Package project provides a Session facade that bundles a project root with its lazily-loaded, auto-refreshed symbol index and the session identity used when recording optimization stats.
 Package project provides a Session facade that bundles a project root with its lazily-loaded, auto-refreshed symbol index and the session identity used when recording optimization stats.
Package prompt provides a small library of fine-tuned, token-efficient prompt templates for common agent tasks.
 Package prompt provides a small library of fine-tuned, token-efficient prompt templates for common agent tasks.
Package prprovider provides provider-independent PR creation.
 Package prprovider provides provider-independent PR creation.
Package rename implements structural symbol renaming on top of the AST index.
 Package rename implements structural symbol renaming on top of the AST index.
Phase 13 — Correlation contract + change fingerprint.
 Phase 13 — Correlation contract + change fingerprint.
Package sandbox runs a command against a snapshot-copy of a project and restores the tree when the command fails.
 Package sandbox runs a command against a snapshot-copy of a project and restores the tree when the command fails.
Package schema injects strict JSON-schema formatting boundaries into prompts and deterministically validates structured output against them — so an agent's reply either conforms or comes back with a list of concrete violations.
 Package schema injects strict JSON-schema formatting boundaries into prompts and deterministically validates structured output against them — so an agent's reply either conforms or comes back with a list of concrete violations.
Package script runs code in an isolated local runtime and returns only stdout — the "Think in Code" surface of a local context optimizer.
 Package script runs code in an isolated local runtime and returns only stdout — the "Think in Code" surface of a local context optimizer.
Package sdk is a thin stdlib-only Go client for the kern-server REST API.
 Package sdk is a thin stdlib-only Go client for the kern-server REST API.
Package sec scans source files for common security anti-patterns: hardcoded secrets, dynamic SQL, shell command injection, weak crypto, insecure randomness and unsafe deserialization.
 Package sec scans source files for common security anti-patterns: hardcoded secrets, dynamic SQL, shell command injection, weak crypto, insecure randomness and unsafe deserialization.
Package semcache is a deterministic, local semantic cache: it serves a previously stored result for a *similar* (not just identical) input, using Jaccard similarity over word-shingle signatures.
 Package semcache is a deterministic, local semantic cache: it serves a previously stored result for a *similar* (not just identical) input, using Jaccard similarity over word-shingle signatures.
Package setup wires kern into code agents with a single command.
 Package setup wires kern into code agents with a single command.
Package stats records before/after token counts and cost estimates in a local JSONL log.
 Package stats records before/after token counts and cost estimates in a local JSONL log.
Package storage provides a vendor-agnostic storage abstraction.
 Package storage provides a vendor-agnostic storage abstraction.
Package swap swaps code blocks in a context document between full source and per-file signatures depending on a token budget.
 Package swap swaps code blocks in a context document between full source and per-file signatures depending on a token budget.
Package terse implements deterministic LLM output compression: it strips filler, pleasantries and hedge language from a model's prose response while preserving code blocks, lists, errors and technical terms.
 Package terse implements deterministic LLM output compression: it strips filler, pleasantries and hedge language from a model's prose response while preserving code blocks, lists, errors and technical terms.
Byte-level BPE tokenizer (GPT-2 style), self-contained and deterministic.
 Byte-level BPE tokenizer (GPT-2 style), self-contained and deterministic.
Package twin provides extractors that build the non-code dimensions of the Digital Twin (APIs, databases, messaging, infrastructure, runtime) and a Merge function that unifies them with the code graph.
 Package twin provides extractors that build the non-code dimensions of the Digital Twin (APIs, databases, messaging, infrastructure, runtime) and a Merge function that unifies them with the code graph.
api
Package api extracts HTTP API contracts from source code for the Digital Twin's API category.
 Package api extracts HTTP API contracts from source code for the Digital Twin's API category.
data
Package data extracts database schemas and ORM models for the Digital Twin's Data category.
 Package data extracts database schemas and ORM models for the Digital Twin's Data category.
edges
Package edges builds process and runtime relationship edges for the knowledge graph.
 Package edges builds process and runtime relationship edges for the knowledge graph.
ids
Package ids provides helpers for building collision-safe node IDs from untrusted external strings (service names, API paths, topics, etc.).
 Package ids provides helpers for building collision-safe node IDs from untrusted external strings (service names, API paths, topics, etc.).
infra
Package infra extracts infrastructure definitions for the Digital Twin's Infrastructure category.
 Package infra extracts infrastructure definitions for the Digital Twin's Infrastructure category.
messaging
Package messaging extracts message broker topologies for the Digital Twin's Messaging category.
 Package messaging extracts message broker topologies for the Digital Twin's Messaging category.
runtime
Package runtime builds graph nodes from runtime telemetry (events, deployments) for the Digital Twin's Runtime category.
 Package runtime builds graph nodes from runtime telemetry (events, deployments) for the Digital Twin's Runtime category.
Package validate picks a language-appropriate build/test/syntax-check command for a project and runs it safely.
 Package validate picks a language-appropriate build/test/syntax-check command for a project and runs it safely.
Package verification is the unified Verification Engine.
 Package verification is the unified Verification Engine.
Package verify cross-checks an agent's output text against the real source tree and index: every referenced file:line, symbol name and route is confirmed to exist (or flagged as unverifiable / missing).
 Package verify cross-checks an agent's output text against the real source tree and index: every referenced file:line, symbol name and route is confirmed to exist (or flagged as unverifiable / missing).
Package web is a small, read-only, stdlib-only HTTP console that serves the project's digital-twin data as JSON plus a minimal server-rendered HTML dashboard.
 Package web is a small, read-only, stdlib-only HTTP console that serves the project's digital-twin data as JSON plus a minimal server-rendered HTML dashboard.
Package webhook delivers internal system events to outbound HTTP webhooks (master spec §2 "interfaces": webhooks).
 Package webhook delivers internal system events to outbound HTTP webhooks (master spec §2 "interfaces": webhooks).
Package whatif implements the What-If / Simulation capability: "What will happen if I change/remove this?" It applies a hypothetical change to an in-memory copy of the knowledge graph, recomputes the transitively affected set, and produces a deterministic scenario impact report (affected symbols, files, services, tests) plus a risk and a recommendation.
 Package whatif implements the What-If / Simulation capability: "What will happen if I change/remove this?" It applies a hypothetical change to an in-memory copy of the knowledge graph, recomputes the transitively affected set, and produces a deterministic scenario impact report (affected symbols, files, services, tests) plus a risk and a recommendation.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.