internal/

Package aigen builds interactive `claude` CLI invocations — for generating or revising stool tool scripts, and for ad-hoc "do something on these hosts" sessions.

Package backup creates and restores tar.gz snapshots of stool's config directory (~/.config/stool) — data.json, the encrypted vault, tool scripts, caches — so the whole setup can be saved and moved between machines.

Package cfgdir is the single source of truth for stool's working directory (config, projects, tools, vault, caches).

Package gitsync keeps stool data in git repositories and syncs them with remotes, using the SYSTEM git binary — so the user's own ~/.gitconfig, ssh-agent and credential helpers all just work, and stool never stores tokens or auth config of its own.

Package probe resolves domains/IPs and checks TLS certificate validity.

Package runlog records a history of tool runs (what tool, on which targets, when) so they can be reviewed and repeated.

Package runner executes stool tools as live terminal sessions (handing the real terminal over via tea.ExecProcess), so interactive tools like htop, top or vim work exactly as they would in a normal shell.

Package secrets implements an encrypted-at-rest password vault (~/.config/stool/secrets.enc) for optionally remembering ssh passwords when a host can't use key-based auth.

Package sshauto runs `ssh` inside a pseudo-terminal and auto-types a saved password the first time the remote asks for one, then hands the session over to the real terminal for fully interactive use.

Package sshconfig provides a minimal reader/writer for ~/.ssh/config that understands a "stool managed" section delimited by marker comments, so stool-created Host entries can be edited/removed without touching hand-written entries elsewhere in the file.

Package sshlaunch builds the command used to hand off the terminal to an interactive `ssh` session via tea.ExecProcess.

Package tools discovers and runs user-defined scripts from ~/.config/stool/tools/.

Package ui implements the stool Bubble Tea application: project list, domain list (grouped/sorted by ssh host), ssh host management, and tool execution.

Package whois looks up basic registration info (netname / mnt-by) for an IP address via the classic WHOIS protocol (port 43), following the IANA referral to the responsible regional registry, and caches results forever in ~/.config/stool/whois_cache.json — this data essentially never changes for a given IP, and re-querying on every render/resolve would be wasteful and slow.