internal/

Package auth stores and resolves provider credentials.

Package cli wires the kong grammar, the runtime, and the exit-code mapping.

Package errs defines the stable exit-code table and the structured CLI error type.

Package fence wraps attacker-controllable free text (product titles, bullet features, descriptions, and especially review bodies) so an agent treats it as untrusted data, not instructions.

Package httpx is the shared HTTP core for provider backends: a client with bounded retries + backoff on transient failures, Retry-After handling, and defensive JSON helpers so an upstream field rename surfaces as SCHEMA_DRIFT, not a panic.

Package output is the single output contract: data to stdout, human chatter to stderr, stable JSON, --format json|plain|tsv, --select projection, and --limit bounding.

Package provider defines the normalized Amazon-Shopping data schema and the pluggable backend interface.

Package skill embeds the agent-facing SKILL.md into the binary so the `agent` subcommand can print it with no repo or network access.

Package throttle is a persistent, cross-process circuit-breaker.

Package update does a passive, cached "is there a newer release?" check against GitHub.