internal/

Package agentcreds locates Claude Code credentials on a host so the daemon can seed islands with them (and the CLI can push them to a remote daemon).

Package api defines the Dejima HTTP API: types, server, and client.

Package authtoken issues, stores, and resolves the operator bearer tokens that carry the Dejima team-auth model: three built-in roles (owner / operator / viewer) and an optional per-island scope.

Package bridge implements the PTY multiplexing between the in-container tmux session and N connected API clients.

Package capability runs curated host actions on behalf of a contained island — the execution half of the capability broker (docs/capability-broker-spec.md).

Package clientcfg persists client-side settings (things the CLI/TUI need that the daemon doesn't), stored at ~/.dejima/client.json.

Package egress is the island outbound-network gate — the containment thesis applied to the one channel Dejima didn't yet observe or control: an island's traffic to the internet (the LLM API, git, package installs, and anything else the agent decides to reach).

Package events defines the Dejima event model and the webhook delivery manager.

Package fdlimit raises the daemon's open-file limit at startup.

Package githubid manages the daemon's set of GitHub identities: named (login, host, token) triples that islands clone and push as.

Package handlers is the declarative registry of agent types ("handlers") that Dejima can run inside an island.

Package hostterm manages the daemon's host terminals: operator shells that run in tmux ON THE DAEMON HOST (not in a container).

Package hosttmux materializes the tmux config Dejima applies to the host terminals it creates (operator shells running in tmux ON the daemon host).

Package invite encodes and decodes Dejima team invites — a single paste-safe blob that carries everything a teammate needs to connect to a daemon (host:port + bearer secret + role/scope).

Package islandimage materializes the embedded island-image build context so the daemon can run `docker build` without a source checkout.

Package ledger is the append-only, hash-chained audit log for brokered operations — Port scope grants and file Trades.

Package link is the inter-island exchange broker — Lane 5, Phase 2 of docs/inter-island-exchange-spec.md.

Package localmodel is the host-side brain for Dejima's managed local-model support: a curated, hardware-aware catalog of open-weights models plus the backend-detection glue that lets islands drive them as a shared inference service.

Package mailbox is the intra-island agent message store — Lane 5, Phase 1 of docs/inter-island-exchange-spec.md.

Package mcpbroker brokers Model Context Protocol (MCP) calls on behalf of a contained island — the execution half of the audited MCP broker (docs/mcp-broker-spec.md).

Package pasteimg is the host-side clipboard-image capture seam for the host→island image-paste bridge.

Package paths centralizes the on-host filesystem layout for Dejima.

Package policy is the action-gate's auto-approve layer (docs/action-gate-spec.md §"Policy layer").

Package porttoken mints and resolves per-island bearer tokens for the authenticated in-island → dejimad path — the macOS autonomy route, where the unix socket can't be bind-mounted into a container so the brain must reach the daemon over loopback TCP (docs/port-island-spec.md §11.3, runbook §5).

Package project manages per-project configuration and lifecycle state.

Package providercreds manages the daemon's set of LLM provider credentials: named (provider, api_key, optional base_url) entries that agent frameworks inside islands use to reach a model.

Package reposrc discovers git repositories on the client filesystem and resolves a user-supplied --repo value into something the daemon can clone.

Package runtime defines the backend abstraction for container runtimes.

Package secrets stores small dejima-held secrets (webhook HMAC keys and the like) at rest in the OS keychain when one is available — the macOS login Keychain via `security`, or the Secret Service (libsecret) via `secret-tool` on Linux — and falls back to a 0600 file under ~/.dejima/secrets otherwise.

Package selfupdate powers `dejima update`.

Package service handles host service installation: launchd on macOS, systemd user units on Linux.

Package spawn is the operator-granted budget for agent-initiated EPHEMERAL sub-agents — the governance layer that makes agent spawning a gated capability rather than a free-for-all (the differentiator vs free programmatic spawn).

Package sshfacade implements the daemon-side SSH front door for islands.

Package usage computes the USD cost of an LLM token breakdown from a model price table.

Package vmmem reasons about the container runtime's memory ceiling.

Package voicein is the host-side voice-dictation bridge: capture the host microphone, transcribe it locally (whisper.cpp — no cloud, no subscription, audio never leaves the machine), and hand the transcript back to the caller, which injects it into a contained agent's prompt.

Package wsl lets a Windows-native `dejima` client drive a `dejimad` running inside a WSL2 distro.