pkg/

Package admission decides whether a decrypted inbound event may reach an Agent runtime.

Package agentpacketbridge carries exact Agent Packet V1 bytes through an E2EE Messenger event, reuses the service protocol's finalized verifier, and replaces its process-local replay map with the Messenger's durable journal.

Package attachmentadmission owns the recipient-side boundary from an authenticated encrypted-attachment Event to content an Agent may consume.

Package attachmentapi is the bounded service protocol for authenticated opaque attachment storage.

Package attachmentcorpus defines signed, private hostile-corpus manifests and signed execution reports for attachment scanner release acceptance.

Package attachmentops assembles the operator-owned resources and daemon-owned durable transaction used to emit encrypted attachments.

Package attachments implements the route-neutral private attachment profile.

Package chainagent reads finalized Agent state from TOS chain state and satisfies the Messenger's identity.AgentResolver.

Package chainquote resolves finalized Accepted Quotes from TOS chain state and satisfies the Messenger's negotiation.QuoteResolver.

Package conformance verifies signed reports produced by independent vector consumers.

Package contact owns the human-input boundary for Messenger contacts.

Package daemon assembles the Messenger into something that runs.

Package directhttps provides the bounded HTTPS first-contact fallback.

Package directory implements Messenger discovery: the signed Messaging Contact Descriptor and the bounded DHT locator that points at it.

Package dispatch sends queued events and decides what to do when a send fails.

Package e2ee defines the contract a candidate end-to-end encryption profile must satisfy, and the bindings that tie one ciphertext to one conversation.

Package envelope implements the two-layer Messenger wire model.

Package eventlog implements the durable single-writer journal.

Package evidence creates and verifies self-contained M0 review bundles.

Package fault defines the Messenger's typed failures and what a caller may do about them.

Package firewall is the upper half of the context firewall.

Package group contains the refutation floor and application-side TOS-MLS candidate adapter.

Package identity implements the Messaging Endpoint delegation document.

Package labgroup provides a local-only group-chat carrier for integration testing.

Package localapi is the owner-private boundary between the Messenger daemon and the Agent runtime that uses it.

Package mailbox implements the route-independent Mailbox Relay contract.

Package mailboxapi is the bounded, transport-neutral service protocol for an authenticated Mailbox store.

Package mlslab provides a local acceptance boundary between OpenFox and an untrusted group delivery service.

Package payload gives every event kind a typed body.

Package prekeyapi exposes the public-only device contribution boundary.

Package probe implements the M0-R measurement transport.

Package protocolbridge delivers admitted foreign-protocol events to protocol-specific, owner-private local consumers.

Package publicationops assembles the operator-owned resources used to publish public Messenger prekey generations.

Package publicchannel defines the route-neutral authority, signed-event and convergent-history core for public Agent channels.

Package reachability implements the M0-R reachability study record format.

Package room is the membership state machine for a private group.

Package signerapi implements the narrow local client used to keep the delegated Endpoint private key outside the Messenger daemon.

Package tosaddr recomputes TOS account addresses using the registry's own addressing rules.