internal/

Package aat mints and verifies the delegation chain: AAT-shaped hop tokens per `draft-niyikiza-oauth-attenuating-agent-tokens-01`, adopted as specified rather than reinvented (D8.1, Q95).

Package capture holds the receipt-building primitives every behalf capture surface needs: the cross-process monotonic counter, the intent and step-key digests, the payload-slot builder, the authority/attribution rollup, and the seal-sign-envelope step.

Package cas is the customer-held content-addressed payload store (architecture Q34–Q38, D7): blobs live under a store directory named by the lowercase-hex SHA-256 of their raw plaintext bytes, so the commitment recorded in a receipt and the storage address are one value.

Package deskmcp is the in-repo fake MCP server the demo recording runs against: a support desk with the two dozen tools a refund flow touches.

Package diff answers "which step caused it".

Package dsse implements the DSSE pre-authentication encoding (PAE), Ed25519 signing over PAE bytes, and the Week-1 leaf hash, exactly per docs/export-format-v1.md §1.2:

Package envelope assembles and reads the stored log-entry bytes: the DSSE-signed receipt envelope whose complete bytes the log's Merkle leaf covers (receipt-schema-v1.md §2).

Package exportv1 writes the behalf.sh/export/v1 run export file per docs/export-format-v1.md: one header line with embedded JWK keys, one leaf line per receipt with the plaintext payload spliced byte-exactly, and a signed head line.

Package fixture generates the deterministic Week-1 fixture runs (docs/export-format-v1.md §4): run_9f2a.jsonl and run_c71e.jsonl, 47 receipts each, plus a tiny 3-receipt export for the vector corpus.

Package flock wraps advisory whole-file locks.

Package hooks is behalf's Claude Code hook capture surface — the demo companion, scoped to one client (D4, Q44).

Package htmlexport renders one run — or one pair of runs — as a single self-contained HTML file.

Package identity manages the behalf state directory and the two local Ed25519 keys that live in it:

Package index is the SQLite follower index of the behalf log: a derived, rebuildable projection of the Tessera tile directory (D1, Q55, Q56).

Package jsonspan extracts the exact byte span of a value inside a single-line JSON object, walking JSON syntax (strings, escapes, nesting) without ever parse-and-reserializing.

Package oidclogin implements `behalf login` — the verified identity root (D5, Q17, Q21, Q22) — and its offline re-verification.

Package oidctest is an httptest fake OIDC provider for exercising the `behalf login` flow with no real IdP and no browser.

Package payload is the rehydration and verification read path for customer-held payloads (Q83, Q84, D7).

Package proxy is the behalf MCP stdio interposer — the canonical v1 capture surface and reference implementation (D4, Q44).

Package receipt models the behalf v1 Action Receipt payload (docs/receipt-schema-v1.md §4–§8, docs/receipt-schema-v1.schema.json).

Package spool is the MCP proxy's durable capture spool — the thing that makes Q4's intent contract true.

Package testkeys provides deterministic Ed25519 keys for tests, fixtures, and test vectors.

Package tlog is the behalf log service: a Tessera tiled transparency log on the POSIX driver (architecture D1), one appender per log dir (Q57), with receipt-id dedup in front of the log (Q46) and an SCT-style receipt promise returned with every ack (D2).

Package why answers "why did this happen": it loads one receipt out of the log by run and step, parses the delegation chain embedded in it, and renders the authority tree with its three verification states — verified, asserted, broken (Q12, D5) — plus any scope excess computed at read time from the raw per-hop grants (Q11, Q13).

Package witness is behalf's independent witness: the party that holds tree heads the log operator cannot retroactively change (architecture D3.5, Q29, Q74, Q76, Q96).