internal/

Package activity estimates external API network activity with keyed, epoch-scoped pseudonyms instead of retaining raw request identifiers.

Package admin serves the private operator dashboard.

Package anonymousclient attaches a server-scoped pseudonym to community API traffic.

Package apidemand records bounded, privacy-safe API demand telemetry for the private operator dashboard: how many calls each fixed route received, how they ended, how long they took, which client build made them and -- only when the edge supplies it -- which country they came from.

Package autoupdate holds the automatic signed-update polling loop shared by every long-running csx process: the stdio MCP server, the contributor worker, and the background sync daemon.

Package buildinfo answers one operational question: which build of this server is the process actually running.

Package cli is the csx command dispatcher (contract C9).

Package compatibility computes confidence and aggregation views from evidence.

Package config manages CSX_HOME and $CSX_HOME/config.json (goal.md §5.4 — every setting has a working default; the only choice the user ever has to make is the mode).

Package daemon implements the csx local daemon (plan P4.1/P4.4): a localhost-only HTTP API plus a same-mux named-pipe/unix-socket listener, a single-instance lock, background maintenance tickers (evidence upload, shard warm, cache budget, peer announce, idle verification), and the §12.5 dashboard at /ui.

Package defender asks Microsoft Defender what it thinks of a file, and reports the answer as an observation rather than as a grade.

Package domain holds CodeSampleX's core types and pure logic.

Package environment builds EnvironmentFingerprints from the host and adapter-provided hints.

Package evidence implements the local evidence loop behind `csx run` (goal.md §8.3, contract C14): scan the project, run the user's command, record aggregate observations for PUBLIC packages only, and drain them into anonymous wire batches.

Package hostpressure classifies host-level CPU contention -- the host VM not being scheduled by its hypervisor -- separately from ordinary application CPU load, by reading the steal-time field Linux's /proc/stat already tracks (see man 5 proc).

Package httpapi implements the csx-server /v1 HTTP API (plan contract C5).

Package identity holds the peer's ed25519 keypair and the secret seed behind the rotating pseudonymous evidence IDs (goal.md §8.6, plan C10).

Package mcp implements the csx MCP stdio server (plan contract C8, goal.md §12.4): newline-delimited JSON-RPC 2.0 over a provided reader and writer, exposing the eight local tools coding agents consume.

Package measurement implements the concrete two-layer measurement model for CodeSampleX (GitHub issue #206, docs/measurement-layers.md).

Package metricname holds the measured-vs-estimated naming rule for the stats documents this product publishes, as code rather than as prose.

Package peer implements the local P2P node (plan C15, goal.md §15): announcing cached sample artifacts to the central tracker, serving them to other peers over HTTP, and fetching artifacts with the fallback order local CAS → tracker peers → server → MISS.

Package registry checks whether packages exist on their public registry.

Package retrypolicy defines the one bounded retry shape used by background work.

Package samples implements the local half of the public-sample pipeline (goal.md §9, plan C13): canonical content-addressed artifacts, leakage scanning, sanitized clean-room specs, and the create workflow.

Package sandbox runs sample verification stages in isolation (goal.md §16).

Package sanitizer turns raw tool output into privacy-safe error templates (goal.md §8.5, contract C11).

Package scanner defines the ecosystem adapter contract and orchestrates project scanning.

Package search implements the local search engine over the SQLite store: candidate collection from cached samples, compatibility shards, and the FTS index; C7 score fusion; environment grading with the always-sensitive execution-context axis (docs/execution-context.md §5); and §11.5 delta construction.

Package seoreport turns a Google Search Console export into the one comparison this project needs: did the pages that were already ranking start getting clicked.

Package serverstore is the csx-server persistence layer: a Store interface over PostgreSQL (plan contract C4) plus the pure ingest logic — batch validation and delta-merge dedup semantics — which unit-tests without a database.

Package servertiming records the four fixed, public request phases used by the diagnostic API routes.

Package storage holds cross-cutting policy over the local stores: the SQLite metadata DB (localdb) and the content-addressed artifact cache (cas).

Package update implements the signed, fail-closed CodeSampleX binary updater.

Package verifier turns sandbox stage runs into signed verification receipts (goal.md §7.7, §16) and implements the cross-verification client that claims jobs from the server, re-verifies artifacts locally, and posts receipts back.

Package web is the server-rendered public website: landing page, Compatibility Explorer, sample/seeder pages, install scripts and SEO surface (plan P6.1–P6.3, goal.md §14.5/§14.6).