pkg/

Package commit snapshots a stopped workspace's rootfs back into an OCI image and pushes it to a registry — the reverse of the OCI->rootfs realize path.

Package diagnostics implements the host capability checks behind "microagent doctor": backend availability, kernel assets, networking prerequisites, and the other facts needed to run microVMs on this host.

Package imagecache manages local image records: reusable rootfs baselines addressable by name and digest, backing "microagent images".

Package kernel resolves, downloads, and verifies the guest kernels that microagent boots, backing "microagent kernel".

Package model manages local GGUF model files pulled from Hugging Face, backing "microagent model pull/ls/rm/prune".

Package modelrunner manages host-local model server processes (runners): a registry with Ensure/Release/Stop/List lifecycle so workspaces can pair with a locally served model.

Package network manages user-defined named networks: VM-independent records that workspaces can join so multiple workspaces share a subnet and address each other by name.

Package ociimage assembles a single-layer OCI image from a directory tree: a gzip-compressed tar layer, an image config carrying the layer diff ID, and an image manifest.

Package perf measures workspace boot latency and runtime footprint, backing "microagent perf".

Package rootfs builds bootable ext4 root filesystems from OCI images, including registry pulls, layer extraction, and guest-init injection.

Package scaffold generates a starter agent project: a microagent.yaml spec, a provider-specific agent, the shared agent protocol, and a demo request.

Package secret resolves scheme-prefixed secret references to values held only in host process memory.

Package secretxfer carries host-resolved secrets to the guest over an io.ReadWriter (a vsock connection) using a length-prefixed JSON protocol, and materializes them as files in a guest tmpfs.

Package superviseunit generates and installs an OS init unit that runs `microagent supervise <name>` at boot, so a long-running workspace survives a host reboot — without microagent itself adding a persistent daemon.

Package vmkit defines the backend-neutral contract shared between microagent and its VM supervisors: requests, responses, VM configuration, identity, readiness, snapshots, and lifecycle events.

Package volume manages user-defined named volumes: VM-independent ext4 disks that workspaces attach by name so data persists across a workspace's lifecycle.

Package workspace orchestrates microVM workspace lifecycles end to end: create, run, start, exec, copy, halt, quarantine, snapshot, and delete, dispatching to the host backend supervisor and reporting structured state.