internal/

client.go — LLMStreamer interface for the agent executor.

Package embedding provides a client for the local embedding sidecar — since the 2026-07-18 cutover the Nemotron NVFP4 adapter on :8002 (scripts/deploy/nemotron-embed-server.py; DENEB_EMBEDDING_URL selects the endpoint, and the BGE-M3 server on :8001 remains the rollback target).

normalize.go — Pre-send message normalization for API compliance.

Package localai provides a centralized hub for all local AI LLM requests.

Package modelcaps centralizes per-provider/per-model capability knowledge: context window size, reasoning-endpoint behavior, vision support, and prompt-cache (cache_control) compatibility.

Package modelrole provides a centralized model role registry for the gateway.

Package modeltuner is the background per-model optimization loop: measure (agent-log scorecard) → threshold (rules.go) → adjust/advise.

Package observatory aggregates Deneb's scattered self-improvement telemetry into one compact, machine-readable self-status digest.

runtime.go — Provider runtime resolution for the Go gateway.

Package regressionwatch is Stage 1 of the autoresearch cold-start trigger: an observe-only background task that samples operational telemetry from several runtime surfaces, compares each signal against a persisted rolling baseline, and logs detected regressions.

Package rerank provides an optional HTTP client for a dedicated ranking sidecar.

Package router holds the model-agnostic reasoning-effort routing policy.

Package tokenest provides model-family-aware token count estimation.

Package gowire discovers Go structs that opt into generated client wire models and exposes the shared JSON-name rules used by every client generator.

Package agentlog provides detailed JSONL logging for AI agent runs.

Package corecache provides generic cache primitives.

Package coremarkdown provides fenced code block detection for raw markdown text.

Package coremedia provides pure-Go media MIME detection.

Package htmlmd converts HTML to Markdown using a two-pass tokenize+emit architecture ported from the Rust core (core-rs/core/src/parsing/html_to_markdown/).

Package mediatokens extracts MEDIA: tokens from LLM output text.

Package urlextract extracts safe URLs from message text.

Package observe is Deneb's unified observation plane — the single access point a coding agent (external Claude Code, Propus, or a human operator) uses to watch the gateway's logging, runtime behavior, and the code paths that produced them.

Package tokens implements command registry, dispatch, text chunking, inbound debouncing, heartbeat token handling, group activation, model directive extraction, and fallback state tracking.

Package rpcerr provides structured RPC error types with debugging context.

Package approval manages execution approval requests and their lifecycle.

dreamer.go — Dreamer interface for AuroraDream memory consolidation.

Package backup ships a daily archive of the agent's memory stores to a remote host.

Package briefcase defines the portable, immutable case format used by the Deneb-Briefcase evaluation harness.

Package runcontract owns the stable execution evidence exchanged by the Briefcase runtime, evaluator, and command composition root.

Package classification buckets work items into the operator's managed parts (레인) for the "파트별 업무 현황" dashboard.

Package codesearch is the semantic (concept) code search layer over the CodeGraph index.

Package contacts mirrors the device address book on the gateway as a flat, fully-replaced snapshot.

Package daemon manages the gateway daemon process lifecycle.

Package embedindex is a corpus-agnostic in-memory dense-vector index.

Package filestore is Deneb's self-hosted user file store — the local-disk replacement for the former Dropbox integration.

Package goals implements persistent cross-turn "standing goals" — the Ralph loop.

Package knowledge exposes the curated wiki and the on-box file store under a single agent-facing surface.

Package mailpriority scores inbox rows into glanceable priority tiers using cheap, local-only heuristics — no LLM call.

Package maintenance implements filesystem cleanup for sessions and logs.

letter_tokens.go — digit-free market tokens for LLM-composed letters.

Package memory defines governed write targets for longitudinal personal memory (HealthClaw-style selective change).

Package monitoring implements gateway activity tracking.

Package notebook implements NotebookLM-style scoped source collections.

Package org models the operator's group org chart (조직도) and makes it the MASTER source for the dashboard's part classification.

Package phoneledger owns the durable raw ledger for phone notification events.

Package prompts stores operator-editable prompt instructions.

Package push delivers proactive notifications to the native client via Firebase Cloud Messaging (FCM HTTP v1).

Package rankblend combines retrieval evidence with a cross-encoder's ordinal order without assuming that the reranker's raw score scale is calibrated.

Package session manages gateway session lifecycle.

Package skills provides skill discovery, metadata parsing, filtering, and filesystem watching for the Go gateway.

Package genesis is Deneb's recursive self-improvement subsystem — the loop that evolves the agent's own skills and, at the meta level, the process that does the evolving.

Package common provides dependency-free helpers shared by genesis subsystems.

Package generation provides automatic skill creation from session experience.

Package guardrails applies deterministic safety checks to generated SKILL.md edits.

Package lifecycle defines L4 review/delivery state and the stable display identity of Deneb's operational recursive self-improvement layers.

nudger.go implements iteration-based skill nudging.

Package status defines the stable read model for recursive self-improvement health reporting.

Package usage tracks API call counts and token usage per provider.

brief.go — operator wiki brief (WIKI.md): externalized steering for the autonomous wiki-maintenance prompts (OpenWiki's "wiki brief" pattern, github.com/langchain-ai/openwiki).

Package wikiport exposes the stable, narrow contracts that non-wiki packages need from the file-backed wiki domain.

Package briefcase contains the deterministic, fail-closed grading core for Deneb-Briefcase evaluations.

Package closedloop composes a port-injected Deneb-Briefcase executor, hidden checkpoint supervisor, information firewall, and public user simulator.

Package clientauth manages the standalone native-client auth secret.

bootstrap_custom_models.go — custom provider model management for the gateway config: persisting/deleting user-added OpenAI-compatible endpoint models under models.providers, plus the endpoint/ID normalization and role-clearing helpers.

Package fileshare mints and verifies time-limited, path-scoped download links for the local file store — the replacement for Dropbox shared links.

Package httpretry provides a shared HTTP status code retry policy used across LLM and channel API clients.

Package logging — startup banner and shutdown line for the Deneb gateway.

Package metrics provides lightweight RPC call counting for the Deneb gateway.

Package middleware provides a request processing pipeline for the RPC dispatcher.

Package process manages subprocess execution with approval workflow.

Package sdsocket resolves systemd socket-activated listeners (the sd_listen_fds(3) protocol) by FileDescriptorName.

Package secret manages credential/secret resolution and reloading.

Package sparkfleet reads the SparkFleet control plane — a sibling service on the DGX Spark that launches and monitors the GPU containers Deneb depends on (OCR, ASR, embeddings, vLLM).

Package timeouts provides centralized timeout constants for the gateway.

acp.go — Agent Control Protocol (ACP) integration.

reply_directives.go — Reply directive processing (media splitting, threading, silent).

abort_cutoff.go — Abort cutoff tracking for message deduplication.

Package types defines shared data types for the autoreply subsystem.

apc_diag.go — prefix-stability diagnostics for the local-vLLM main path.

Package denebui defines the schema for Deneb-style interactive UI blocks that the agent emits inside a ```deneb-ui fenced code block in its reply text.

Knowledge enrichment: tier-1 wiki auto-injection for system prompt.

Package leafbind aggregates rarely-used leaf imports for the chat package root so direct fan-out stays under the soft boundary bar.

Package linkenrichment owns automatic URL understanding for inbound chat messages: extraction, bounded parallel fetch, content conversion, and the asynchronous start/join lifecycle used to overlap enrichment with run prep.

Package promptbudget provides token budget optimization for variable prompt additions assembled by the chat pipeline.

Package recall owns multi-source memory evidence gathering and frozen per-session recall snapshots.

abort_tracker.go — Tracks and manages active agent run abort controllers.

subagent_notify.go — Proactive parent notification on child session completion.

Package toolport — typed blackboard for multi-tool workflow I/O contracts.

Package toolreg is a thin leaf for session tool-preset constants and helpers.

blackboard.go — typed I/O board for multi-tool workflows.

chart.go — render a data chart (line/bar/area/doughnut) as a PNG the agent can deliver with send_file.

codeaction.go — the code_action tool (CodeAct paradigm).

Package document extracts readable text from documents and image attachments.

Package routine collects and renders recurring morning, evening, and weekly business briefings.

bm25.go — BM25 ranking for deferred-tool search (fetch_tools query path).

calendar.go — the `calendar` agent tool: lets the chat agent read and write the user's calendar during a conversation.

skill_manage.go implements the skill_manage agent tool, enabling the LLM to create, patch, read, and delete skills at runtime.

Package surface holds agent tools that surface server-owned caches/feeds (market quotes, work feed) without importing those domain packages directly.

deal_ledger.go — chat surface over the typed deal ledger (domain/wiki/deal_records.go).

Package toolwire is the thin facade over tool registration subpackages.

Package schema holds generated tool JSON schemas (tool_schemas_gen.go) shared by toolwire registration subpackages.

Package wire composes toolwire/core, ops, domain, and chrono registrations.

transcript_cache.go — TTL cache decorator for TranscriptStore.

archive.go — persist fetched binary documents into the user file store so a fetched source survives the turn and is browsable/recallable later, instead of being silently dropped and re-fetched next time.

activation_notice.go — the model-facing activation notices for deferred tools, and their parser.

Polaris compaction system: tiered context compression for long-running agent sessions.

Package compactuner is the ACON-style background loop that refines the compaction summarizer's preservation guidelines from observed weakness.

Package liteparse wraps the LiteParse CLI (lit) for local document parsing.

vision.go — isolated multimodal (vision) LLM call for the "watch" tool.

semantic.go — dense-vector recall over RESIDENT sessions' structured conversation artifacts and admitted high-signal bursts.

Package toolpreset defines pipeline-neutral named tool allow-lists for role-based agent sessions.

Package browserbridge talks to the workstation Page Agent bridge that owns the user's logged-in Chrome session.

Package calendar implements a native Go client for the Google Calendar REST API.

Package calprop stores calendar-event PROPOSALS — schedule-worthy items (meetings, important deadlines) that mail analysis surfaced from a message, pending the operator's accept/reject.

Package calwrite mirrors locally-authored calendar events out to the user's Google Calendar (one-way: Deneb → Google).

runlog_all.go — Cross-job run log aggregation.

format.go — human-readable rendering of Gmail results (search lists, full messages, labels) for the agent transcript.

Package googledrive is a minimal read-only Google Drive client for the Supernote ingestion path: list a configured folder for new files and download their bytes.

Package googleoauth owns the credential-file and token lifecycle shared by Google API clients.

large_attach.go — extract "large attachment" (대용량첨부) download links from an HTML mail body.

Package localcal is the gateway's own calendar store: events the user adds by hand on the native client, persisted to {stateDir}/calendar.json.

Package localtodo is the gateway's to-do store: lightweight tasks the user adds on the native client, persisted to {stateDir}/todos.json.

approval_facts.go — quote-verified cost extraction for 전자결재 documents.

Package mailarchive reads related mail from the on-box archive IMAP store (the deneb-mailarchive Maddy instance) so the email-analysis pipeline can reconstruct a message's thread and the sender's recent history locally, without depending on Gmail.

Package overlay persists local Gmail-like state for immutable archive messages.

Package mailstore is a local, file-backed mirror of the on-box mail archive with an in-memory full-text index, so agent reads never pay a per-call IMAP round-trip + re-parse + re-index.

Package mailwork tracks the local workflow state of each archived mail.

Package mcpclient implements a minimal client for the Model Context Protocol (MCP) stdio transport: it spawns a configured server command and speaks newline-delimited JSON-RPC 2.0 over the child's stdin/stdout.

Package media provides media fetching with SSRF protection for the Go gateway.

Package solarflow reads the topsolar SolarFlow ERP analytics engine (choiceoh/solarflow, a separate Rust/axum service) over its read-only /api/calc/* REST surface.

Package tmap reads the SK TMap Open API for Korean turn-by-turn directions.

Package bootstrap handles the gateway startup sequence in four discrete phases:

Package briefcase contains the deterministic, isolated runtime primitives used by Deneb-Briefcase evaluations.

Package configresolve reads runtime model, workspace, and topic settings.

Package curriculumenv assembles the curriculum lane's environment demand digest (RSI P5-1).

Package evenapi exposes an Even Realities G2 Custom AI bridge on the gateway: OpenAI-shaped chat completions in, short HUD text out via a dedicated glasses:* sync chat session.

Package events provides a pub/sub event broadcasting system for SSE clients.

codegraph_tuning.go — Deneb-side search tuning for the codegraph MCP server.

Package fileapi owns the file-store download HTTP adapter.

filestore_semindex.go — semantic (vector) search over the on-box file store.

Package fleetapi owns the authenticated SparkFleet proxy and the loopback webhook adapter that turns Fleet operational events into native alerts.

Package gatewayhttp owns the gateway's client-facing and integration-facing HTTP adapter wiring.

goal_task.go — the Ralph loop driver.

Package groupwareapi owns the groupware binary attachment HTTP adapter.

health_cache.go surfaces the self-hosted vLLM prefix-cache (APC) hit rate as an OPS signal on /health and /status — a passive regression alarm for the prompt-cache doctrine (docs/agent-rules/prompt-cache.md).

boot_task.go — Startup agent turn (inspired by OpenClaw's BOOT.md).

heartbeat_deal_signals.go — feeds per-document deal payment/delivery deadlines from the typed deal-record ledger (wiki/deal_records.go) into the proactive signal engine, so the heartbeat can flag an imminent 기한 between morning letters.

Package insights aggregates recent session/model/tool usage into a concise report that can be rendered for chat or CLI output.

mail_calendar.go — turns the schedule-worthy items of a mail analysis into calendar PROPOSALS (pending the operator's accept).

Package manifest builds a content-addressed, redacted description of the composition that the running gateway is actually using.

Package mcpapi — MCP (Model Context Protocol) gateway.

meeting_harvest.go — post-meeting outcome capture ("○○ 어떻게 되셨어요?").

Package modelmaintenance owns construction of the gateway's model-quality background tasks.

model_panel.go — research-panel fan-out engine behind the research_panel tool (deep-research skill).

miniapp_models_health.go — model-picker state assembly: the snapshot the native client renders (sections + health), provider/model health probing, and local vLLM model discovery with its TTL cache.

server_http_gzip.go — negotiated gzip for the miniapp RPC JSON responses.

Package nativeattachmentapi serves native-client mail attachment downloads.

Package nativeauth authenticates standalone native-client HTTP requests.

Package nativeeventsapi serves the native-client proactive-event SSE stream.

Package nativepush owns best-effort native-client push fan-out.

notify_deps.go — dependency (sidecar) health woven into the heartbeat.

Package proactive owns proactive relay policy and the shared alert gate that keeps operational alerts useful without over-notifying the user.

Package propusview adapts genesis persistence records to Propus read models.

role_health_watch.go — periodic auth/liveness probe for role-assigned model providers.

Package rpc handles RPC method dispatch for the gateway.

Package agent provides RPC handlers for agent management, sessions, process/cron/hooks orchestration, and agents CRUD.

Package chat provides RPC method handlers for the chat domain.

Package checkpoint provides the checkpoint.{list,restore,diff} RPC methods that back the user-facing /rollback slash command.

Package gateway provides core gateway/runtime RPC handlers that depend on live server state (uptime, daemon status, event broadcast, and runtime config).

Package handlerevents provides RPC handlers for session event subscription and broadcast methods.

groupware_approvals.go — miniapp.groupware.approvals.* + erp.list RPC handlers.

Package contract exposes the stable Mini App wire DTO surface consumed by sibling RPC handler packages.

Package files implements the authenticated miniapp.files.* RPC surface over Deneb's local file store and signed file-share service.

Package knowledge implements authenticated miniapp memory, notebook, people, unified-search, and topic-document RPC surfaces.

Package module composes independently owned Mini App capabilities into one registration surface for the gateway server.

Package schedule implements authenticated miniapp calendar, proposal, todo, and cron RPCs as one local planning surface.

Package insights provides the insights.generate RPC handler.

facade.go re-exports the Gmail-triage (gmailops) and mail-analysis (analyzebind) leaf packages' public surface under the handlermail package so server call sites keep importing only "handler/mail" — the split into leaf packages is an internal reorganization, not a wire contract change.

Package analyzebind holds the miniapp.gmail.analyze / analysis_cached / ask RPC handlers — the LLM-backed mail-analysis and follow-up Q&A surface.

analysis_store.go — per-message JSON cache for Mini App mail analyses.

Package minibind provides authenticated parameter binding for native-client RPC handlers.

Package observatory (handler) exposes the self-improvement-loop liveness digest over RPC — the same observatory.Snapshot the in-process watchdog alerts on (server_observatory_watchdog.go), now pullable on demand.

Package observe (handler) exposes Deneb's unified observation plane over RPC.

Package process contains RPC handlers for ACP (Agent Communication Protocol) and advanced cron operations.

Package provider contains RPC handlers for provider and model methods.

Package session provides RPC handlers for session management methods.

Package skill provides RPC handlers for skills.*, plugins.*, tools.*, and tools.catalog methods.

Package system provides RPC method handlers for the system domain: identity, monitoring, doctor, maintenance, update, usage, and logs.

Package wiki provides RPC handlers for wiki.* methods.

Package rpctest provides shared test helpers for RPC handler tests.

Package rpcutil provides shared helpers for RPC handler packages.

GatewayHub is the central service container for the gateway server.

Package opt holds late-bound GatewayHub services so the hub root package keeps required-only domain fan-out under the soft boundary bar.

Chat pipeline initialization: tool registration and handler construction.

Package toolbind holds concrete chat-tool bindings for the server composition root so internal/runtime/server does not import every tools/* leaf package.

Package observebind wires the concrete observe tool so toolbind's root package does not import runtimeops + observe leaf deps directly.

validation_backfill_task.go — deterministic corpus-growth lane for the held-out validation bench.

meeting_attendance.go — silently record that the operator attended a work-linked meeting.