internal/

Package atomicfile writes files so a crash, kill, or disk-full error mid-write can never leave a corrupt or truncated file at the destination path - a reader always sees either the previous content or the complete new content, never a mix.

Package auth implements Lineage's publisher identity: GitHub's OAuth Device Flow, the same mechanism `gh auth login` uses.

Package graph records a project's local lineage graph: an append-only log of "this local environment descended from that package" events.

Package materialize stages enabled packages' content where a wrapped agent provider actually reads it, instead of leaving discovery results stranded in `lineage run --dry-run` output.

Package snapshot is a content-addressed, immutable object store for package snapshots: individual file objects are stored and addressed by the sha256 hash of their own content, and a snapshot manifest — itself just another content-addressed object, in a separate namespace — records which object each file in a package resolves to.