internal/

Package agent is Bugbot's tool-call execution harness: a reusable loop that drives an llm.Client through a bounded set of tools until the model produces a final answer, runs out of iterations, or exhausts a token budget.

Package analyzer seeds the leads blackboard with hits from deterministic static analyzers run inside the existing sandbox.

Package cli wires up Bugbot's cobra command tree.

Package config defines Bugbot's typed configuration, loaded from a YAML file with BUGBOT_* environment-variable overrides applied on top.

Package daemon implements Bugbot's continuous-operation scheduler: the final component that composes ingest, the detection funnel, reproduction, reporting, and the state store into a long-running loop.

Package domain holds the small, dependency-free vocabulary types shared across bugbot: the confidence Tier, Severity, and Confidence of a finding.

Package eval is Bugbot's offline evaluation harness: it measures the detection funnel's precision and recall against seeded-bug fixtures without spending a single API call.

Package funnel implements Bugbot's precision-first detection pipeline: the staged core that turns a repository snapshot into a small set of adversarially-verified findings.

Package ingest builds a navigable model of a target git repository for Bugbot's incremental scanning pipeline.

Package llm is a thin, provider-agnostic abstraction over the LLM backends Bugbot drives (Anthropic, OpenAI, Google, and any OpenAI-compatible endpoint).

Package lsp is a minimal, hand-rolled Language Server Protocol client used by the agent harness's code-navigation tools (find_definition, find_references, find_implementations).

Package miner seeds the leads blackboard with documented-sentinel-vs-validator contradictions mined from source files in the target repository.

Package progress is the activity-visibility seam for Bugbot: a typed, JSON-serializable event stream emitted by the funnel and daemon, fanned out to pluggable sinks that render live activity.

Package report renders Bugbot findings into human- and machine-readable forms (Markdown and SARIF 2.1.0) and delivers them through pluggable sinks (filesystem, stdout, and—later—issue trackers or webhooks).

Package repro implements the Reproduce stage of the Bugbot pipeline: the promotion of a Tier-2 ("verified") finding to Tier-1 ("reproduced") by generating a minimal failing test and demonstrating the bug inside the sandbox.

Package sandbox provides an isolated execution layer for running model-generated code against snapshots of arbitrary repositories.

Package sarif provides SARIF 2.1.0 export for Bugbot findings.

Package store implements Bugbot's embedded, durable state: findings (anchored to a commit and file-content hash), suppression memory, incremental-scan watermarks, scan-run history, and a token-spend ledger.

Package treesitter is a syntactic code-navigation fallback used when no language server can answer (the server binary is missing, crashed, or does not support the query).

Package util collects leaf-level string and map helpers that are shared across several internal Bugbot packages (cli, daemon, funnel, repro, progress, ...).