internal/

Package attachio is the raw-mode terminal attach loop, extracted from cmd/rattach: raw mode (tty stdin only), SIGWINCH-driven resize, Ctrl-] detach, and sequence-number tracking for --since resume.

Package cli is the rainier CLI's HTTP client and on-disk config — the pieces cmd/rainier composes into the actual command surface, and the pieces a smoke test can drive against a real controld without going through main().

internal/controld/agentvault.go

internal/driver/contract.go

Package egress is a per-VM CONNECT proxy: default-deny, per-session allowlist, audit log.

Package eventlog is an append-only, sequence-numbered event log backed by a JSONL file.

Package reap installs a SIGCHLD-driven loop that wait()s children reparented to this process (PID 1 in the sandbox), and is the single authoritative waiter for every child on Linux so no other caller races it with its own wait4/cmd.Wait.

Package relay multiplexes many client attachments over the single outbound WebSocket a session opens to runnerd (spec rule 3).

internal/runnerd/agent.go

serve(conn) is deliberately transport-direction-agnostic: Plan 2 reuses it verbatim on an outbound-dialed connection (spec portability rule 3).

internal/session/session.go Session wires a PTY process to the emulator, the event log, and viewer fan-out.