0sec-cli 0.15.0 → 0.18.0

package/chunks/dist-4YICS2J2.js

@@ -0,0 +1,2776 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  BenchCaseSchema,
+  BenchIntegrationRegistry,
+  BenchManifestSchema,
+  BenchObjectiveSchema,
+  BenchTargetSchema,
+  CANONICAL_WEB_CHAINS,
+  CHAIN_AUTHBYPASS_SQLI_EXFIL,
+  CHAIN_IDOR_PRIVESC_ATO,
+  CHAIN_SSRF_METADATA_RCE,
+  CHAIN_SSTI_RCE,
+  COMPACT_ACTIONS_RENDER_CAP,
+  COMPACT_ACTION_CHARS,
+  COMPACT_DETAIL_CHARS,
+  Cpg,
+  CraftMemoryStore,
+  CraftStagedOrchestrator,
+  DEFAULT_CALL_TIMEOUT_MS,
+  DEFAULT_HANDSHAKE_TIMEOUT_MS,
+  DEFAULT_RACE_WIDEN_DELAY_MS,
+  DEFAULT_REGISTRY_URL,
+  DEFAULT_SEED_DIRS,
+  DEFAULT_STRATEGIES,
+  DEFAULT_TARGET_SUBSYSTEMS,
+  DISPATCH2022,
+  DISTRO_DEFAULTS,
+  ENABLEMENT_DIR_MODE,
+  ENABLEMENT_DIR_NAME,
+  ENABLEMENT_FILE_MODE,
+  ENABLEMENT_SCHEMA_VERSION,
+  EnforcementTracker,
+  FEATURE_NAMES,
+  FindingMatchObjectiveSchema,
+  FixTemplateRegistry,
+  FlagCaptureObjectiveSchema,
+  GADGET_FACTORIES,
+  GADGET_KINDS,
+  GADGET_SETUP_MARKER,
+  GEMMAFORGE_LEADS_SCHEMA,
+  GOAL_WEB_ACCOUNT_TAKEOVER,
+  GOAL_WEB_DATA_EXFIL,
+  GOAL_WEB_RCE,
+  GOAL_WEB_SSRF_INTERNAL,
+  H1AuthError,
+  H1AuthMissingError,
+  H1Client,
+  H1Error,
+  H1ForbiddenError,
+  H1NetworkError,
+  H1RateLimitError,
+  HARD_TO_FUZZ_PATH_PREFIXES,
+  HerdrEventSink,
+  HuntResearchAdapter,
+  KERNELCTF_TIER1_RACE_GRID,
+  KERNEL_RUN_PROGRAM_MAX_BYTES,
+  KERNEL_RUN_TOOL_DEFINITION,
+  KNOWN_ATTACK_SURFACES,
+  LIFETIME_SINKS,
+  LinuxBootMatrixImportAdapter,
+  LinuxKernelResearchAdapter,
+  LiveAgenticScanResearchAdapter,
+  MAX_INFLIGHT_CALLS,
+  MAX_OBJECTIVE_CHARS,
+  MAX_OBJECTIVE_WORDS,
+  MAX_PROTOCOL_ERRORS,
+  McpHost,
+  MemoryStore,
+  MobileStaticResearchAdapter,
+  OPT_IN_MOAT_LAYERS,
+  ObjectiveOracle,
+  PLUGINS_ROOT_NAME,
+  PLUGIN_DIR_MODE,
+  PLUGIN_ENTRY_FILE,
+  PLUGIN_FILE_MODE,
+  PLUGIN_MANIFEST_FILE,
+  PROGRAM_MAGIC,
+  PROGRAM_VERSION,
+  PathPolicy,
+  PluginHost,
+  ProtocolHttpResearchAdapter,
+  RECENCY_DENYLIST,
+  RECENCY_DETECTORS_ALL,
+  RECENCY_DETECTORS_FULL,
+  RECENCY_REACHABLE_ALLOWLIST,
+  ResearchAdapterRegistry,
+  SEMANTIC_COSMETIC_RUBRIC,
+  STAGE_ACTION_HISTORY_CAP,
+  SYNTH_TOOL,
+  SYNTH_TOOL_NAME,
+  SourceAuditTargetSchema,
+  SuiteOracleObjectiveSchema,
+  SuiteTaskTargetSchema,
+  TECHNIQUE_LIBRARY,
+  TartVmLane,
+  UNINSTRUMENTED_LAYERS,
+  UnifiedPipelineResearchAdapter,
+  UserspaceMemSafetyResearchAdapter,
+  VARIABLE_SIZE,
+  VERBOSE_ACTIONS_RENDER_CAP,
+  VERBOSE_ACTION_CHARS,
+  WEAPONIZATION_PROVEN_BAR,
+  WEB_GOALS,
+  WindowsEvidenceWorkerClient,
+  WindowsEvidenceWorkerTransportError,
+  WindowsHyperVImportAdapter,
+  WindowsVariantResearchAdapter,
+  XNU_RECEIPT_SCHEMA_VERSION,
+  XnuIokitResearchAdapter,
+  XnuReceiptReplayer,
+  addAttackResult,
+  addFinding,
+  agenticScan,
+  aggregateCapabilities,
+  allocateCandidatesAcrossLanes,
+  alreadyFixedInTarget,
+  appFixVariantsToSeedFindings,
+  appendLedgerEntry,
+  appendProposalAttempt,
+  appendStageAction,
+  applySurfaceRanking,
+  applyVerificationToFinding,
+  approveObservation,
+  arbReadValueWitnessed,
+  arbWriteFaultWitnessed,
+  arbWriteTargetV,
+  assessEscalation,
+  atlasTechniquesForCategory,
+  atlasTechniquesForEvent,
+  attemptExploitabilityUpgrade,
+  attemptWinRace,
+  auditReportToBenchResult,
+  autoTriage,
+  automationVerdict,
+  autonomousClimb,
+  breakRecordToFinding,
+  buildBranchName,
+  buildCandidateJudgePrompt,
+  buildCompositionGraph,
+  buildConsoleSystemPrompt,
+  buildCraftCpgContext,
+  buildCraftTargetSpec,
+  buildDeepScanPrompt,
+  buildGraphSliceHuntContext,
+  buildHypothesesMarkdown,
+  buildInvariantHuntContext,
+  buildKernelPromotionEnvelope,
+  buildKernelVerifyInitialPrompt,
+  buildKernelVerifySystemPrompt,
+  buildMcpAuditPrompt,
+  buildPluginEnv,
+  buildPrBody,
+  buildPrTitle,
+  buildRegistryEntry,
+  buildReproReadme,
+  buildSlice,
+  buildSourceAnalysisPrompt,
+  buildTier1Harness,
+  buildTier2Harness,
+  buildWebPrimitiveNode,
+  buildWidenEnv,
+  cacheMissStallGadget,
+  cairoFinderLenses,
+  cairoVerifyLenses,
+  callMcpTool,
+  canonicalEntryPayload,
+  captureLensCandidates,
+  captureObservation,
+  cardanoFinderLenses,
+  cardanoVerifyLenses,
+  categoryToWebKind,
+  changedFilesInRange,
+  checkFixPresentInTarget,
+  checkNotYetIntroduced,
+  checkResearchNovelty,
+  claimForProcessing,
+  classifyBashCommand,
+  classifyPatchGapReachability,
+  classifySemanticVsCosmetic,
+  classifyToolRisk,
+  classifyVerifyOutcome,
+  clusterCandidates,
+  coerceEnablementRecord,
+  compareScorecards,
+  compileAndRunReproducer,
+  composeGadgetSetup,
+  computePriorityScore,
+  computeSurfaceScore,
+  confirmedMissToCandidate,
+  connectMcpServers,
+  consolidateMemory,
+  controlRungForDemo,
+  corpusV1Path,
+  countCommits,
+  coverageGapToCandidate,
+  craftedPocToFinding,
+  crashSeverity,
+  crashSignatureFromReport,
+  crashSignatureFromText,
+  crashToFinding,
+  crashTypeToCategory,
+  createAgenticScanAdapter,
+  createBenchIntegrationRegistry,
+  createConsoleRuntime,
+  createConsoleSession,
+  createCoreBenchIntegration,
+  createDefaultFixTemplateRegistry,
+  createDefaultResearchRegistry,
+  createDefaultVariantScan,
+  createDockerWebProvisioner,
+  createEvolvedFinder,
+  createHerdrEventSink,
+  createOperationalEventSink,
+  createPackageAuditScanAdapter,
+  createProposalAttempt,
+  createR2Backend,
+  createReproductionBundle,
+  createScanContext,
+  createSessionObjectiveService,
+  createStubSignatureVerifier,
+  createVariantExecutionFactory,
+  createXnuFuzzReceipt,
+  decodeProgram,
+  dedupByCrashSignature,
+  dedupFindingsByCrashSignature,
+  defaultComposerModel,
+  defaultCraftCandidateReviewer,
+  defaultDifferentialRootDetector,
+  defaultDmesgFor,
+  defaultGadgetsFor,
+  defaultGitExec,
+  defaultKernelVerifyRunner,
+  defaultNeeds,
+  defaultProvides,
+  defaultReproducerFor,
+  defaultSecondAuditModel,
+  defaultSyzbotFetcher,
+  defaultVulnsFeedIo,
+  deriveObjectiveHeuristic,
+  deriveSubsystemScope,
+  describeDestructiveCategory,
+  describeEscalation,
+  detectBuildSystem,
+  detectKasanSplat,
+  digestBenchManifest,
+  disable,
+  discoverMcpTarget,
+  discoverObjectSubset,
+  dispatchTableByteLength,
+  emitFindingsAsPRs,
+  emitMarkerHelper,
+  emptyEnablement,
+  emptyLedger,
+  enable,
+  enablementDir,
+  enablementFilePath,
+  encodeProgram,
+  ensurePluginsRoot,
+  enumerateAttackSurfaces,
+  enumerateTargetModel,
+  enumerateTargetModelFromKext,
+  epollWaitqueueFloodGadget,
+  evaluateRegression,
+  evaluateSignature,
+  evmFinderLenses,
+  evmVerifyLenses,
+  exampleManifestPath,
+  executeKernelRun,
+  extractCorpus,
+  extractCraftCpgTargets,
+  extractDupeSignature,
+  extractFeatures,
+  extractKernelFindingMetadata,
+  extractTouchedFunctions,
+  fetchRegistryIndex,
+  fileDiff,
+  finalize,
+  findCraftFuzzerEntrypoints,
+  findInstallable,
+  findTargets,
+  fnv1a64,
+  foldExploitabilityIntoSeverity,
+  foldWeaponizationIntoVerdict,
+  formatAttackSurfaceForPrompt,
+  formatGraphSlicePromptBlock,
+  formatInvariantPromptBlock,
+  formatStageDetail,
+  formatTournamentSummary,
+  formatTriageProvenance,
+  foxguardFindingToKernelVariantFinding,
+  foxguardLeadSource,
+  futexHoldGadget,
+  gatherSurfaceSignals,
+  generateBaseInput,
+  generateInputsForSelector,
+  generateInvariantCandidates,
+  generateRaceSmellCandidates,
+  generateRemediation,
+  generateRemediationWithLLM,
+  generateSyzChoiceWeights,
+  getObservation,
+  getProgram,
+  getStructuredScopes,
+  getTechnique,
+  hardCodedSecretTemplate,
+  harvestEvidenceText,
+  hasLiveAgentState,
+  hasValidValidation,
+  havoc,
+  heuristicCraftCandidateScore,
+  hex64,
+  huntAppFixVariants,
+  inferPackage,
+  ingestArtifactsFromDirectory,
+  ingestArtifactsFromFile,
+  ingestDirectory,
+  ingestFile,
+  injectOps,
+  inspectLensRegistry,
+  installableFromEntry,
+  instantiateGadget,
+  integerTruncationGuardTemplate,
+  isConfirmed,
+  isCrossLanguageHint,
+  isDispatchTableSymbol,
+  isEnabled,
+  isHardToFuzzSurface,
+  isHypothesisOnly,
+  isPlannable,
+  isReachablePath,
+  isReproduced,
+  isSafePluginId,
+  isVariable,
+  judgeCraftCandidatesWithLlm,
+  kcsanRaceToBrief,
+  kcsanRaceToFinding,
+  knownDupe,
+  lastGreen,
+  lengthBoundaryValues,
+  lifetimeTokenSignal,
+  listInstalledPluginIds,
+  listMcpTools,
+  listObservations,
+  listPrograms,
+  loadCpg,
+  loadH1Credentials,
+  loadLedger,
+  loadManifest,
+  loadVulnsFeedFromDir,
+  loadableIds,
+  makeDefaultLensSynthesisModel,
+  makeDifferentialGate,
+  makeDifferentialOracle,
+  makeDiversifyOracle,
+  makeExploitabilityGate,
+  makeFinderLensProbe,
+  makeHuntProveStage,
+  makeKernelVmDifferentialRunner,
+  makeKernelVmDiversifyRunner,
+  makeKernelVmExploitabilityGate,
+  makeKernelVmOracles,
+  makeKernelVmProbe,
+  makeKernelVmRaceProver,
+  makeKernelVmRungAdjudicator,
+  makeRaceWidenProver,
+  makeRng,
+  makeRungRankingGate,
+  makeSecondAuditRefiner,
+  makeTargetTreeLookup,
+  makeTemplateRacePocSynth,
+  makeWeaponizeHook,
+  manifestDrift,
+  mapVerificationToOutcome,
+  markProcessed,
+  matchCrashSignature,
+  matchesLane,
+  maxCeiling,
+  maybeSubscribeOperationalEventSink,
+  mergeCraftEvidence,
+  mineSyzbotQueue,
+  mintRootProofChallenge,
+  missingInputValidationTemplate,
+  moveFinderLenses,
+  moveVerifyLenses,
+  mutantBudget,
+  mutateStructured,
+  mutexSleepWidenGadget,
+  nodeChildSpawner,
+  normalizeFrame,
+  normalizeStageAction,
+  normalizeStageEndDetail,
+  objectiveOracle,
+  objectiveOracleEvaluatorAttestation,
+  objectiveOracleEvaluatorCodeBytes,
+  objectiveOracleEvaluatorConfigJson,
+  observationDigest,
+  observationQueueSummary,
+  packageAudit,
+  pairwiseDeltas,
+  parseApprovedObservationShape,
+  parseAutoconfHeader,
+  parseBugDetailKernelVersion,
+  parseCraftCandidateReview,
+  parseCraftStageCitations,
+  parseCrashReport,
+  parseDispatchTable,
+  parseEnsembleModels,
+  parseJudgeJson,
+  parseKcsanReport,
+  parseKernelConfig,
+  parseListing,
+  parseListingRow,
+  parseLlmEscalation,
+  parseManifest,
+  parseMcpConfig,
+  parseNameStatus,
+  parseNestedName,
+  parseObservationInput,
+  parseRegistryIndex,
+  parseSeedFindings,
+  parseSelectorMapText,
+  parseSubsystems,
+  parseSynthesizedContent,
+  parseThreatLaneJson,
+  parseVulnsCveRecord,
+  parseWidenTarget,
+  partitionCases,
+  persistMisses,
+  pickChampion,
+  planChains,
+  planSingleShardRun,
+  pluginsRootDir,
+  prepareValidationCorpus,
+  preseedMemory,
+  primitiveBaselineClass,
+  projectResearchExecutionEvidence,
+  projectResearchImprovementResult,
+  promoteFindingsWithTier3Result,
+  proposalReplayDigest,
+  proposalTrainingExamples,
+  proposalsFromInvariantViolations,
+  provenExploitabilityScore,
+  raceStrategies,
+  raceWidenEnv,
+  raceWithDefaults,
+  rankAndDedupeFoxguardLeads,
+  rankBugsByProvenRung,
+  rankCandidates,
+  rankResearchProposals,
+  reachabilityGate,
+  reachableTargets,
+  readEnablement,
+  readInstalledPlugin,
+  readProposalReplay,
+  readSeedFindings,
+  reconcile,
+  reduceLiveAgentState,
+  registerArchetype,
+  rejectObservation,
+  releaseClaim,
+  releaseStaleClaims,
+  renderCraftTargetSpec,
+  renderEmptyScoreboard,
+  renderLibraryBrief,
+  renderRaceHarness,
+  renderRecencyReportMarkdown,
+  renderRungReliabilitySeeds,
+  renderScoreboard,
+  renderSlice,
+  renderTriggerSeed,
+  renderUnifiedDiff,
+  researchCandidateChangeDigest,
+  researchExecutionEvidenceDigest,
+  researchExecutionEvidenceRef,
+  researchVariantDescriptor,
+  researchVariantDescriptorDigest,
+  resolveEnsembleModels,
+  resolveMcpEndpoint,
+  resolveNovelty,
+  resolveRange,
+  retireArchetype,
+  reviewKernelCrashSubsystems,
+  rootProofInstructions,
+  runBehavioralRepair,
+  runBenchCase,
+  runBenchSuite,
+  runCliPathTraversalReplayFixture,
+  runCraftScan,
+  runDifferential,
+  runEGATS,
+  runEGATSWithDefaults,
+  runEnsembleCraft,
+  runExploitScan,
+  runKernelExploitChain,
+  runKernelVariantHunt,
+  runLensSynthesisLoop,
+  runLlmIpiAudit,
+  runMcpSecurityChecks,
+  runMobileStaticIntake,
+  runPipeline,
+  runProposalLearningLoop,
+  runRecencyDualViewDetector,
+  runRecencyExtraDetectors,
+  runRecencyHunt,
+  runReproductionBundle,
+  runResearch,
+  runSecondAudit,
+  runSecureProject,
+  runSelfConsistencyVerify,
+  runStaticAnalysis,
+  runStructuredVerify,
+  runThreatModelPlanner,
+  runTier3Validation,
+  runTournament,
+  rungRankingEnabled,
+  sameCrash,
+  sanitizerOutputFromCraftResult,
+  satisfiesMinVersion,
+  saveLedger,
+  scaffoldTier1Harness,
+  scaffoldTier2Harness,
+  scan,
+  scanForModuleInit,
+  scanForPatchGapCandidates,
+  scanReportToBenchResult,
+  scoreEvidence,
+  scoreMemory,
+  scoreResearchProposal,
+  scoreSurfaceDesirability,
+  searchInstallable,
+  selectCiCases,
+  selectRaceGadgets,
+  selectSprayPlans,
+  selectSubsystemSourceSlice,
+  selectVisibleActions,
+  selectorModelToLine,
+  serializeProposalReplay,
+  setEnv,
+  shouldWeaponize,
+  shouldWeaponize2,
+  signatureKey,
+  sliceAroundTargets,
+  snapshotBenchVariant,
+  solanaFinderLenses,
+  solanaVerifyLenses,
+  sourceReview,
+  spliceGadgetSetup,
+  subsetManifest,
+  summariseScopes,
+  summariseTree,
+  summarizeTriageProvenance,
+  synthesizeArchetypes,
+  syzChoiceWeightsFromPlan,
+  syzbotQueueBrief,
+  tableMetrics,
+  tallyConsensus,
+  techniquesForBug,
+  techniquesForCategory,
+  techniquesForEvent,
+  templateIdForCategory,
+  timerfdInterruptGadget,
+  toCrossValidatedLeads,
+  toHuntCandidate,
+  toHuntCandidates,
+  toScopeFile,
+  toScopeJson,
+  toVerifyVerdict,
+  trainProposalRanker,
+  triageKcsanRace,
+  triggerSplatWitnessed,
+  triggerTechniquesForFamily,
+  truncateStageAction,
+  unconfiguredVerifier,
+  validateBundlePlan,
+  validateCandidateLens,
+  validateCrashReportConsistency,
+  validateKernelRunArgs,
+  validateProposalAttempt,
+  validateProposalReplay,
+  validateXnuFuzzReceipt,
+  variableLengthSchedule,
+  verify,
+  verifyKernelCrash,
+  verifyRootProof,
+  verifyStandaloneKernelReproducer,
+  verifyStaticKernelFinding,
+  verifyStatusFromOutcome,
+  weaponizationProven,
+  webFindingToPrimitiveNode,
+  widenEnvFor,
+  withEnvOverrides,
+  withVariantFeatureFlags,
+  writeEnablement,
+  xnuArtifactDigest
+} from "./chunk-5JI7L7KV.js";
+import {
+  RateLimiter,
+  TokenBucket,
+  enumerateJsChunkUrls,
+  parseRateLimitFlag,
+  parseRetryAfter
+} from "./chunk-CMKXP5RR.js";
+import {
+  getEvalCategories,
+  runEval
+} from "./chunk-AHTBZC3E.js";
+import {
+  classifyUserspacePrimitive,
+  crashArtifactToFinding,
+  describeExploitabilityVerdict,
+  generatePov,
+  isReproducedMemCorruption,
+  judgePovEvidence,
+  maxMemSeverity,
+  memCorruptionVerdict,
+  memPrimitiveToCategory,
+  oracleForCategory,
+  parseCrashOutput,
+  runMemSafetyScan,
+  runUserspaceFuzzLoop,
+  sniffMemPrimitive
+} from "./chunk-WVTBZEQO.js";
+import {
+  leadToFinding,
+  runNpmDynamicDiscovery
+} from "./chunk-5G3ZXFBW.js";
+import {
+  OsvLookupError,
+  createOsvAdvisoryLookup,
+  createSandboxPackageRunner,
+  deriveForkSiblings,
+  inProcessProbe,
+  localSandboxProvider,
+  staticProbe
+} from "./chunk-7DQEV5QI.js";
+import {
+  DETECTOR_REGISTRY,
+  DETECTOR_REGISTRY_BY_ID,
+  dedupConfirmation,
+  getDetectorById,
+  guardPackage,
+  listDetectorIds,
+  parserDiffDetector,
+  readUnstableDetector,
+  resolveDetectors,
+  runDetectorOnPackage,
+  ssppFuzzDetector
+} from "./chunk-RWONANDA.js";
+import {
+  PRIMITIVE_LIBRARY,
+  RUNG_MARKER_TAG,
+  adjudicate,
+  bootedCacheKey,
+  emitWeaponizationC,
+  getStrategy,
+  introspectExploitConfig,
+  kernelVmArtifactsReady,
+  markerFired,
+  markerLine,
+  mintCanary,
+  runStrategy,
+  runWeaponization,
+  selectStrategies
+} from "./chunk-BATRQBOR.js";
+import {
+  BENIGN_MAX_CLASS,
+  UPGRADE_MIN_CLASS,
+  classifyDmesgDanger,
+  classifyKernelPrimitive,
+  classifyPrimitiveFromDmesg,
+  describeKernelPrimitive,
+  isDangerUpgrade,
+  maxDangerClass,
+  rankDanger
+} from "./chunk-2JCCA2JL.js";
+import {
+  MAX_POC_BYTES,
+  PocFetchError,
+  adaptAndVerify,
+  applyUnifiedDiff,
+  extractInlineCodeBlock,
+  fetchPoc,
+  renderAdaptationPrompt
+} from "./chunk-ASUR522M.js";
+import {
+  applyReachabilityGate,
+  classifyPathReachability,
+  generateVariantCandidates
+} from "./chunk-BFRB6HB2.js";
+import {
+  ASSUMPTION_MODEL_VERSION,
+  INVARIANT_MODEL_VERSION,
+  assumptionsToHuntPlan,
+  buildFocusedCandidates,
+  buildFunctionBodyIndex,
+  buildInvariantModel,
+  buildSynthesisPrompt,
+  candidateReferenceTokens,
+  checkWitness,
+  computeEstablisherSets,
+  computeEstablisherWrappers,
+  crossCheckAssumptions,
+  defaultBootPoc,
+  dualViewCandidateFromContext,
+  extractCFromLlmOutput,
+  extractSplatRegion,
+  findInvariantViolations,
+  findInvariantViolationsTokenLevel,
+  findViolationsDataflow,
+  isCrossApiAssumption,
+  isMechanizableEstablisher,
+  loadAssumptionModel,
+  loadInvariantModel,
+  makeDefaultSynthesizePoc,
+  mineAssumptions,
+  normalizeAssumptions,
+  objectTypeToken,
+  parseC,
+  pocFabricatesSplat,
+  runAssumptionHunt,
+  runSubsystemInvariantHunt,
+  scanDualViewContexts,
+  scanViolatingContexts,
+  storeAssumptionModel,
+  storeInvariantModel,
+  subjectSelfEnforces,
+  violationsToHuntPlan,
+  witnessAssumptionViolation,
+  witnessDualViewContexts
+} from "./chunk-JQHOLLTD.js";
+import {
+  defaultDmesgOutPath,
+  detectOutOfBandModuleLoad,
+  loadKernelVmConfigFromEnv,
+  prepareKernelVmArtifacts,
+  verifyKernelFinding,
+  writeProofFileReadOnly
+} from "./chunk-3KPWWJCI.js";
+import {
+  evaluateVerificationSpec,
+  runSourceFix
+} from "./chunk-F3WBKITT.js";
+import {
+  DEFAULT_STEP_TIMEOUT_MS as DEFAULT_STEP_TIMEOUT_MS2,
+  DockerRunner,
+  LocalShellRunner,
+  MAX_STREAM_CAPTURE_BYTES,
+  QemuRunner,
+  STREAM_EXCERPT_BYTES,
+  argvForStep,
+  assertionFromStepExpect,
+  evaluateAssertion,
+  excerpt,
+  persistArtifact,
+  runDeterministicReplay
+} from "./chunk-C2WXWFBB.js";
+import {
+  generateConformanceModel,
+  judgeHttpDivergence,
+  runHttpConformanceCheck,
+  structurallyValidateConformanceModel
+} from "./chunk-IOL7D5YV.js";
+import {
+  createLiveHttpSender
+} from "./chunk-2RMLOJVB.js";
+import {
+  extractSpecInvariants,
+  mapInvariantsToImplementation,
+  planSpecdriftHypotheses,
+  runSpecdriftPlan,
+  runSpecdriftScan
+} from "./chunk-BKZFDZ23.js";
+import {
+  collectScopeFiles,
+  countScopeFilesUpTo
+} from "./chunk-53G27VPS.js";
+import {
+  CHROMIUM_BARE_WORDS,
+  FREEBSD_BARE_KERNEL_WORDS,
+  HUNT_CLAIM_SCHEMA_VERSION,
+  HUNT_MEMORY_LAYERS,
+  HuntMemory,
+  MAX_CLAIM_STATEMENT_CHARS,
+  MAX_EVIDENCE_PER_CLAIM,
+  MAX_KNOWN_NEGATIVES,
+  MAX_NEGATIVE_REASON_CHARS,
+  NEGATIVE_MIN,
+  OWN_FROM_MARKERS,
+  PRIME_MIN,
+  appendHuntClaim,
+  applyDeploymentContextCap,
+  archetypeSweepEnabled,
+  archetypeToHuntBrief,
+  auditAgentPrompt,
+  availableRefuterCandidates,
+  candidateGrepPatterns,
+  canonicalProposalJson,
+  checkNovelty,
+  chromiumArchetypesPath,
+  classTokens,
+  classifyDeploymentContext,
+  composeGate,
+  createHuntClaim,
+  createResearchProposal,
+  crossFamilyRefuteEnabled,
+  deriveSearchTerms,
+  describeRefuterChoice,
+  digestTargetSnapshot,
+  discoverEpochs,
+  disprovenHuntClaims,
+  filterArchetypes,
+  findingToQuery,
+  findingTokens,
+  freebsdArchetypesPath,
+  generateArchetypeCandidates,
+  hasTrustBoundaryBypass,
+  heuristicCandidateScore,
+  huntFlywheelEnabled,
+  huntNegativesEnabled,
+  hypothesisOnly,
+  jaccard,
+  judgeHuntCandidatesWithLlm,
+  kernelArchetypesPath,
+  liveGit,
+  loadChromiumArchetypes,
+  loadFreebsdArchetypes,
+  loadHuntCorpusRows,
+  loadHuntLedger,
+  loadKernelArchetypes,
+  loadKnownNegatives,
+  loadKnownNegativesFromEnv,
+  loadKnownNegativesFromLedger,
+  localMirrors,
+  makeLloreJudge,
+  makeMultiLensVerifier,
+  makeSkepticVerifier,
+  matchNegative,
+  memoryTokens,
+  needsKernelVerify,
+  negativeContext,
+  normalizeProposalPath,
+  planArchetypeSweep,
+  primedOrderKey,
+  proposalDigest,
+  provePriming,
+  readHuntLedger,
+  refuterFamily,
+  resolveHuntLedger,
+  reviewAgentPrompt,
+  runAgentLoop,
+  runAnalysisAgent,
+  runHuntScan,
+  selectCrossFamilyRefuter,
+  staleHuntClaims,
+  stampDeploymentContext,
+  symbolsFromDetectionSignature,
+  syncLoreMirror,
+  unresolvedHuntClaims,
+  validateHuntClaimRecord,
+  validateResearchProposal
+} from "./chunk-BFR2CDV5.js";
+import {
+  ESCALATION_LADDER,
+  ladderUpTo,
+  maxRung,
+  ratchet,
+  rungAtLeast,
+  rungRank
+} from "./chunk-RJWOYEOG.js";
+import {
+  ACTION_LOG_ARGS_MAX,
+  ACTION_LOG_ARG_VALUE_MAX,
+  ANALYTICS_ENDPOINT,
+  ANALYTICS_LEVEL_ENV,
+  ANALYTICS_SCHEMA_VERSION,
+  ANALYTICS_SENT_LOG_FILENAME,
+  BROADCAST_ID,
+  BUILTIN_GUARDS,
+  CONSERVATIVE_JITTER_MS,
+  CONSERVATIVE_RPS,
+  DEFAULT_CONCURRENCY,
+  DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
+  DEFAULT_MAX_DURATION_MS,
+  DEFAULT_MCP_PATHS,
+  DEFAULT_SPEC_PATHS,
+  DEFAULT_SUBDOMAIN_WORDLIST,
+  ENGAGEMENT_PROFILE_NAMES,
+  ExecutablePluginManager,
+  FrameReader,
+  HUNT_MEMORY_SCHEMA_VERSION,
+  HUNT_REDACTED,
+  HuntMemoryStore,
+  LiveHarnessHost,
+  MAX_BODY_CHARS,
+  MAX_CANDIDATES,
+  MAX_EXTENSIONS_PER_SESSION,
+  MAX_FRAME_CHARS,
+  MAX_GUARDS_PER_EXTENSION,
+  MAX_INBOX_MESSAGES,
+  MAX_JS_FILES,
+  MAX_MANIFEST_BYTES,
+  MAX_RESULT_CHARS,
+  MAX_TOOLS_IN_LIST,
+  MAX_TOOLS_PER_EXTENSION,
+  MAX_TOOLS_PER_SESSION,
+  PLUGIN_CAPABILITIES,
+  PROTOCOL_VERSION,
+  RESULT_TRUNCATION_MARKER,
+  SCOPE_DEPENDENT_BASH_GUARDS,
+  SCOPE_GUARDS_INERT_EVENT,
+  SELF_EXTENSION_SETTING_DEF,
+  STANDARD_RPS,
+  SelfExtensionRegistry,
+  TOOL_DEFINITIONS,
+  TodoTracker,
+  ToolExecutor,
+  ToolHealthTracker,
+  aggregateScorecard,
+  analyticsPipeline,
+  apiSpecToAssets,
+  appendImprovementLedgerEntry,
+  applyAttribution,
+  approveEvolutionCandidate,
+  assertReadOnlyAction,
+  attackPrompt,
+  authorizeEvolutionArtifact,
+  blindVerifyPrompt,
+  bucketEndpoint,
+  bucketInScope,
+  buildCandidateHosts,
+  buildTodosPayload,
+  buildToolCallLogEntry,
+  buildToolCallsPayload,
+  canonicalEvolutionJson,
+  clampOutboundBody,
+  clampResultContent,
+  classifyTakeover,
+  clearSkillRegistry,
+  composeGuards,
+  createDockerEvolutionSandbox,
+  createEvolutionCandidate,
+  createEvolutionSandbox,
+  createSmolvmEvolutionSandbox,
+  decideAddressing,
+  decodeHostMessage,
+  decodeMessage,
+  decodePluginMessage,
+  dedupeAssets,
+  describeEngagementPosture,
+  describeScopeGuards,
+  discoveryPrompt,
+  drainInbox,
+  effectiveFallbackRps,
+  encodeHostMessage,
+  encodeMessage,
+  encodePluginMessage,
+  enumerateSubdomains,
+  enumerateSubdomainsActive,
+  evaluateEvolutionCandidate,
+  evaluateGate,
+  evaluateGuards,
+  evaluateImprovementPromotion,
+  evolutionDigest,
+  executeEvolutionVersion,
+  extractAttributionFromScopeJson,
+  extractEngagementFromScopeJson,
+  extractResponseText,
+  fetchScoped,
+  formatJitSkillsInstruction,
+  formatScorecardSummary,
+  formatUserAgent,
+  gateFlagsFor,
+  getCloudSinkConfig,
+  getSkillById,
+  getToolsForRole,
+  getWorkspaceHarnessTrust,
+  guardApprovalUnavailable,
+  guardNetworkRequiresScope,
+  guardUnresolvedCapabilities,
+  harvestMissesFromLedgerEntry,
+  harvestMissesFromScorecard,
+  harvestMissesFromTournament,
+  harvestedMissesToMissInput,
+  hubDir,
+  huntMemoryPath,
+  isMcpTarget,
+  isScopeRequired,
+  isValidPeerId,
+  isWafEvasionLadderEnabled,
+  levelAtLeast,
+  listSkillSummaries,
+  loadEvolutionConfigFile,
+  loadEvolutionRegistry,
+  loadSkillRegistry,
+  matchTriggers,
+  maybeSubscribeAnalyticsPipeline,
+  mergeHarvestedMisses,
+  networkScopeRequiredRefusal,
+  newCorrelationId,
+  newMessageId,
+  normalizeDomain,
+  parseApiSpec,
+  parseEngagementProfileName,
+  parseEvolutionConfig,
+  parseHarnessGenerationSpec,
+  peekInbox,
+  pinEvolutionVersion,
+  postFinding,
+  probeS3Bucket,
+  promoteEvolutionVersion,
+  proposeEvolutionEdits,
+  readToolCallNames,
+  recordEvolutionVersion,
+  redactRecordStrings,
+  redactSecrets,
+  redactedArgsPreview,
+  renderInboundMessage,
+  reportPrompt,
+  researchPrompt,
+  resolveAnalyticsLevel,
+  resolveAttribution,
+  resolveEngagementProfile,
+  resolveEvolutionConfigImage,
+  resolveEvolutionImage,
+  rollbackEvolutionVersion,
+  runEvolution,
+  runJsRecon,
+  runNativeAgentLoop,
+  runRecon,
+  sanitizeReason,
+  scopeRequiredRefusal,
+  selectEvolutionAlternativeParent,
+  sendMessage,
+  sendOperatorMessage,
+  sendPrompt,
+  setWorkspaceHarnessTrust,
+  snapshotEvolutionSource,
+  sourceVerifyPrompt,
+  startEvolutionCanary,
+  stripUnsafeText,
+  summariseTurnToolCalls,
+  targetRequiresScope,
+  toolCallPreview,
+  tryRecoverPreviousFeedback,
+  validateAwsCredentials,
+  validatePluginManifest,
+  validateUpdateTodosArgs,
+  verifyEvolutionSnapshot,
+  verifyImprovementLedger,
+  verifyPrompt,
+  wilson95
+} from "./chunk-BZNEY2ZS.js";
+import {
+  IntelCache,
+  advisorySweep,
+  buildIntelDossier,
+  buildPriorVulnerabilityAuditGraph,
+  buildPublicReportQuery,
+  defaultIntelCacheDir,
+  formatTargetHistoryForPrompt,
+  inferTargetHistoryInputFromRepo,
+  lookupAdvisory,
+  lookupCve,
+  lookupGitHubAdvisory,
+  lookupKev,
+  lookupNvdCve,
+  mergeIntel,
+  normalizeGhsaId,
+  parseGitHubAdvisories,
+  parseNvdResponse,
+  parseOsvResponse,
+  queryGitHubAdvisories,
+  queryOsvAdvisories,
+  resolveTargetHistoryInput,
+  searchAdvisories,
+  searchGitHubIssues,
+  searchNvdSimilar,
+  searchNvdTargetHistory,
+  searchPublicReports,
+  searchSimilar,
+  searchTargetHistory,
+  toGraphSnapshot,
+  toOsvEcosystem
+} from "./chunk-YYRBQVFE.js";
+import "./chunk-3MOLBTLS.js";
+import {
+  parseSanitizerLog,
+  renderSanitizerVerdict
+} from "./chunk-P6WKNFWX.js";
+import {
+  DEFAULT_JOURNAL_SIDECAR_THRESHOLD_BYTES,
+  JOURNAL_SCHEMA_VERSION,
+  branchJournal,
+  createJournalWriter,
+  defaultJournalRootDir,
+  loadJournal,
+  migrateJournalEntry,
+  rehydrateContext,
+  resolveJournalPaths,
+  streamJournal
+} from "./chunk-UCYRA73C.js";
+import "./chunk-LP3HHYQU.js";
+import "./chunk-KLTNTE2Z.js";
+import "./chunk-72CISA2D.js";
+import {
+  activeAppsecLensRegistryPath,
+  appsecArchetypeDigest,
+  appsecArchetypeToFinderLens,
+  appsecArchetypesPath,
+  appsecLensLedgerEntryDigest,
+  appsecUserArchetypesPath,
+  loadAppsecArchetypes,
+  loadAppsecFinderLenses
+} from "./chunk-QI233I24.js";
+import {
+  ScanCostLedger
+} from "./chunk-242TMK6G.js";
+import {
+  CORE_REVIEW_PROMPT,
+  DEFAULT_IGNORE_DIR_GLOBS,
+  DEFAULT_IGNORE_FILE_GLOBS,
+  DEFAULT_REVIEW_COVERAGE_POLICY,
+  DEFAULT_REVIEW_MATCHERS,
+  REFUSAL_FOLLOWUP_PROMPT,
+  ReviewLimitError,
+  ReviewStore,
+  SLUG_NOTES,
+  STALE_LOCK_MS,
+  TECH_HIGHLIGHTS,
+  appendAnalysis,
+  assembleReviewPrompt,
+  atomicWriteFile,
+  atomicWriteFileSync,
+  batchCandidates,
+  buildInvestigatePrompt,
+  candidateSignature,
+  collectScannableFiles,
+  compileMatchers,
+  computeReviewFindingId,
+  ensureReviewFindingIds,
+  evaluateReviewCoverage,
+  expandSurfaceInventory,
+  expectedFindingsForBatch,
+  extractFencedJson,
+  findingSignature,
+  generateSurfaceInventory,
+  globToRegex,
+  groundSurfaceInventory,
+  matchAnyGlob,
+  matchFileContent,
+  matchGlob,
+  mergeCandidates,
+  mergeFindings,
+  newRunId,
+  normalizeRelPath,
+  normalizeTitle,
+  parseInvestigateResults,
+  parseRefusalReport,
+  parseRevalidateVerdicts,
+  reconcileVerdicts,
+  runFileReviewPipeline,
+  runReviewProcess,
+  runReviewRevalidate,
+  runReviewScan,
+  validateSurfaceInventory
+} from "./chunk-Z5FA2XOX.js";
+import "./chunk-RRMJC3ZE.js";
+import "./chunk-H2FFLZNK.js";
+import {
+  DEFAULT_STEP_TIMEOUT_MS,
+  DISCLOSURE_STATUSES,
+  IllegalTransitionError,
+  IncompleteEvidenceError,
+  MAX_CAPTURE_BYTES,
+  PUBLIC_STATUSES,
+  TERMINAL_STATUSES,
+  UnreproducedFindingError,
+  UnverifiedFindingError,
+  allowedNextStatuses,
+  assembleBundleIndex,
+  assembleEvidencePack,
+  assembleReproducibilityManifest,
+  canTransition,
+  composeExploitSession,
+  composeStepSession,
+  createDisclosureRecord,
+  decideFilingState,
+  dropSlug,
+  droppedFilename,
+  evidenceKindForFinding,
+  executePocSteps,
+  extractSiblingFix,
+  formatDroppedReason,
+  isDisclosureWorthy,
+  isFreezeAvailable,
+  isPubliclyDisclosed,
+  renderExploitScreenshot,
+  renderReproducibilityManifest,
+  renderVendorNotificationMarkdown,
+  setRuntimeDeps,
+  transition
+} from "./chunk-U5FLXGHT.js";
+import {
+  Cvss4ParseError,
+  EmptyPocError,
+  REPORT_PLATFORMS,
+  computeCvss4BaseScore,
+  cvss4Severity,
+  detectVersionRange,
+  extractFileRefs,
+  formatCvss4Vector,
+  formatCweSection,
+  formatPatchStatusSection,
+  formatVersionRangeLine,
+  parseCvss4Vector,
+  redactSensitiveHeaders,
+  renderAdvisoryMarkdown,
+  renderCvssSection,
+  renderPlatformReport,
+  reportTemplate,
+  scoreCvss4Vector,
+  suggestCvss,
+  suggestCvss4,
+  suggestCwesForCategory,
+  verifyAgainstRef
+} from "./chunk-WEBMRWEG.js";
+import {
+  classifyReferences,
+  findCveArtifacts,
+  findRedHatTrackerUrls,
+  findUbuntuTrackerUrls,
+  normaliseCveId,
+  parseGhsaResponse,
+  parseNvdResponse as parseNvdResponse2,
+  parseOsvResponse as parseOsvResponse2,
+  parseRedHatTracker,
+  parseUbuntuTracker,
+  scoreCodeCandidate,
+  scoreRepoCandidate
+} from "./chunk-SVJEDVYK.js";
+import {
+  ScopePolicy,
+  extractUrls,
+  loadScope,
+  matchUrl
+} from "./chunk-57ZENEX2.js";
+import {
+  DEFAULT_ENSEMBLE_MODELS,
+  OpenRouterRuntime,
+  RUNTIME_REGISTRY,
+  createRuntime,
+  detectAvailableRuntimes,
+  getRuntimeInfo,
+  pickRuntimeForStage
+} from "./chunk-N7BOUYEV.js";
+import {
+  CloudAuthError,
+  CloudAuthMissingError,
+  CloudClient,
+  CloudError,
+  CloudForbiddenError,
+  CloudNetworkError,
+  CloudUnauthorizedError,
+  DEFAULT_CLOUD_HOST,
+  FEATURE_PRESETS,
+  LlmApiRuntime,
+  MAX_BUFFERED,
+  MAX_CODE_LENGTH,
+  MAX_FIELDS,
+  MAX_FIELD_VALUE_LENGTH,
+  MAX_MESSAGE_LENGTH,
+  OperatorAbortError,
+  QuotaExhaustedError,
+  _resetDiagnosticsForTests,
+  applyFeaturePreset,
+  applyFeaturePresetFromEnv,
+  claimDiagnostics,
+  diag,
+  features,
+  formatDiagnosticLine,
+  isDiagnosticsClaimed,
+  loadCloudCredentials,
+  parseUsageLimitReached,
+  recentDiagnostics,
+  resolveFeaturePreset,
+  stderrDiagnosticSink,
+  subscribeDiagnostics
+} from "./chunk-UR4ELX2Y.js";
+import {
+  ProcessRuntime
+} from "./chunk-ATATQACO.js";
+import {
+  cloudEventSink,
+  eventBus,
+  isCloudEventSinkActive,
+  maybeSubscribeCloudEventSink,
+  presentationEventSink
+} from "./chunk-ADOLI6DT.js";
+import {
+  estimateCost
+} from "./chunk-6L26OBWI.js";
+import "./chunk-YLMN3N25.js";
+import {
+  AD_ANALYZERS_BY_ID,
+  buildAdGraph,
+  ingestBloodHoundFiles,
+  ingestBloodHoundJson,
+  parseBloodHoundFile,
+  runAdGraphAnalysis
+} from "./chunk-6LKRLK2R.js";
+import {
+  AZ_EDGE_TECHNIQUES,
+  ENTRA_PATH_ANALYZERS,
+  ENTRA_PATH_ANALYZERS_BY_ID,
+  GRAPH_APP_ROLE_CATALOG,
+  GraphAuthError,
+  GraphClient,
+  GraphError,
+  GraphForbiddenError,
+  GraphNetworkError,
+  GraphRateLimitError,
+  GraphScopeError,
+  HIGH_IMPACT_GRAPH_PERMISSIONS,
+  HYBRID_EDGE_TECHNIQUES,
+  HYBRID_PATH_ANALYZERS,
+  HYBRID_PATH_ANALYZERS_BY_ID,
+  IDENTITY_CHECKS,
+  MICROSOFT_GRAPH_APP_ID,
+  MSA_TENANT_ID,
+  PRIVILEGED_ROLE_TEMPLATE_IDS,
+  PUBLIC_CLIENT_APP_IDS,
+  ROLE_TEMPLATE_IDS,
+  TIER0_GRAPH_PERMISSIONS,
+  TIER0_ROLE_TEMPLATE_IDS,
+  TOKEN_CHECKS,
+  adAnchors,
+  adNodeId,
+  analyzeAppRegistrations,
+  analyzeConditionalAccess,
+  analyzeFederation,
+  analyzeJwt,
+  analyzePrivilegedRoles,
+  analyzeSamlAssertion,
+  analyzeServicePrincipals,
+  analyzeToken,
+  boundaryCrossings,
+  buildEntraGraph,
+  buildEntraGraphFromAzureHound,
+  buildHybridGraph,
+  classifyEntraToken,
+  collectTenantSnapshot,
+  decodeImmutableId,
+  decodeJwtUnverified,
+  describeEntraEdge,
+  describeEntraEdgeTechnique,
+  describeHybridEdge,
+  describeHybridEdgeTechnique,
+  detectWriteback,
+  entraAnchors,
+  entraNodeId,
+  findCloudSyncAccounts,
+  findEntraConsentGrantEscalation,
+  findEntraGuestEscalation,
+  findEntraOwnerChainAbuse,
+  findEntraPathsToGlobalAdmin,
+  findEntraServicePrincipalEscalation,
+  findHybridCloudToOnPremWriteback,
+  findHybridCorrespondenceGaps,
+  findHybridMultiBoundaryCrossings,
+  findHybridOnPremToCloudAdmin,
+  findHybridSyncAccountCompromise,
+  findOnPremSyncAccounts,
+  grantedPermissionNames,
+  holdsHighImpactPermission,
+  holdsTier0Permission,
+  hybridCloudPrivilegedRoleIds,
+  hybridCloudTier0Ids,
+  hybridOnPremHighValueIds,
+  hybridPrincipalOf,
+  indexGraph,
+  indexHybridGraph,
+  ingestAzureHound,
+  joinDirectories,
+  normalizeGuid,
+  normalizeId,
+  pathJoinConfidence,
+  principalOf,
+  privilegedPrincipalIds,
+  privilegedRoleIds,
+  redactTokenValue,
+  roleNodeId,
+  runAllAnalyzers,
+  runEntraPathAnalysis,
+  runHybridPathAnalysis,
+  runIdentityAssessment,
+  sortFindings,
+  splitHybridId,
+  summarizeFindings,
+  tenantNodeId,
+  tier0TargetIds,
+  tokenFingerprint,
+  writebackEnabled
+} from "./chunk-SAFFWQW4.js";
+import {
+  AD_ANALYZERS,
+  AD_EDGE_TECHNIQUES,
+  buildAttackPath,
+  describeEdgeTechnique,
+  domainAdminGroupIds,
+  findAclAbuseChains,
+  findAdcsEscalation,
+  findDcsyncPrincipals,
+  findKerberoastablePaths,
+  findPathsToDomainAdmin,
+  findUnconstrainedDelegation,
+  highValueTargetIds,
+  nodeOrStub,
+  reachableFrom,
+  reachableTo,
+  shortestPaths
+} from "./chunk-VQG4FT5D.js";
+import {
+  detectTargetType,
+  expandHomePath,
+  isExistingLocalTargetPath,
+  isExplicitLocalTargetPath,
+  prepare,
+  resolveLocalTargetPath
+} from "./chunk-WU6AFRAZ.js";
+import "./chunk-DW5UWPFY.js";
+import "./chunk-IR537GON.js";
+export {
+  ACTION_LOG_ARGS_MAX,
+  ACTION_LOG_ARG_VALUE_MAX,
+  AD_ANALYZERS,
+  AD_ANALYZERS_BY_ID,
+  AD_EDGE_TECHNIQUES,
+  ANALYTICS_ENDPOINT,
+  ANALYTICS_LEVEL_ENV,
+  ANALYTICS_SCHEMA_VERSION,
+  ANALYTICS_SENT_LOG_FILENAME,
+  ASSUMPTION_MODEL_VERSION,
+  AZ_EDGE_TECHNIQUES,
+  BENIGN_MAX_CLASS,
+  BROADCAST_ID,
+  BUILTIN_GUARDS,
+  BenchCaseSchema,
+  BenchIntegrationRegistry,
+  BenchManifestSchema,
+  BenchObjectiveSchema,
+  BenchTargetSchema,
+  CANONICAL_WEB_CHAINS,
+  CHAIN_AUTHBYPASS_SQLI_EXFIL,
+  CHAIN_IDOR_PRIVESC_ATO,
+  CHAIN_SSRF_METADATA_RCE,
+  CHAIN_SSTI_RCE,
+  CHROMIUM_BARE_WORDS,
+  COMPACT_ACTIONS_RENDER_CAP,
+  COMPACT_ACTION_CHARS,
+  COMPACT_DETAIL_CHARS,
+  CONSERVATIVE_JITTER_MS,
+  CONSERVATIVE_RPS,
+  CORE_REVIEW_PROMPT,
+  CloudAuthError,
+  CloudAuthMissingError,
+  CloudClient,
+  CloudError,
+  CloudForbiddenError,
+  CloudNetworkError,
+  CloudUnauthorizedError,
+  Cpg,
+  CraftMemoryStore,
+  CraftStagedOrchestrator,
+  Cvss4ParseError,
+  DEFAULT_CALL_TIMEOUT_MS,
+  DEFAULT_CLOUD_HOST,
+  DEFAULT_CONCURRENCY,
+  DEFAULT_ENSEMBLE_MODELS,
+  DEFAULT_HANDSHAKE_TIMEOUT_MS,
+  DEFAULT_IGNORE_DIR_GLOBS,
+  DEFAULT_IGNORE_FILE_GLOBS,
+  DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
+  DEFAULT_JOURNAL_SIDECAR_THRESHOLD_BYTES,
+  DEFAULT_MAX_DURATION_MS,
+  DEFAULT_MCP_PATHS,
+  DEFAULT_RACE_WIDEN_DELAY_MS,
+  DEFAULT_REGISTRY_URL,
+  DEFAULT_REVIEW_COVERAGE_POLICY,
+  DEFAULT_REVIEW_MATCHERS,
+  DEFAULT_SEED_DIRS,
+  DEFAULT_SPEC_PATHS,
+  DEFAULT_STEP_TIMEOUT_MS,
+  DEFAULT_STRATEGIES,
+  DEFAULT_SUBDOMAIN_WORDLIST,
+  DEFAULT_TARGET_SUBSYSTEMS,
+  DETECTOR_REGISTRY,
+  DETECTOR_REGISTRY_BY_ID,
+  DISCLOSURE_STATUSES,
+  DISPATCH2022,
+  DISTRO_DEFAULTS,
+  DockerRunner,
+  ENABLEMENT_DIR_MODE,
+  ENABLEMENT_DIR_NAME,
+  ENABLEMENT_FILE_MODE,
+  ENABLEMENT_SCHEMA_VERSION,
+  ENGAGEMENT_PROFILE_NAMES,
+  ENTRA_PATH_ANALYZERS,
+  ENTRA_PATH_ANALYZERS_BY_ID,
+  ESCALATION_LADDER,
+  EmptyPocError,
+  EnforcementTracker,
+  ExecutablePluginManager,
+  FEATURE_NAMES,
+  FEATURE_PRESETS,
+  FREEBSD_BARE_KERNEL_WORDS,
+  FindingMatchObjectiveSchema,
+  FixTemplateRegistry,
+  FlagCaptureObjectiveSchema,
+  FrameReader,
+  GADGET_FACTORIES,
+  GADGET_KINDS,
+  GADGET_SETUP_MARKER,
+  GEMMAFORGE_LEADS_SCHEMA,
+  GOAL_WEB_ACCOUNT_TAKEOVER,
+  GOAL_WEB_DATA_EXFIL,
+  GOAL_WEB_RCE,
+  GOAL_WEB_SSRF_INTERNAL,
+  GRAPH_APP_ROLE_CATALOG,
+  GraphAuthError,
+  GraphClient,
+  GraphError,
+  GraphForbiddenError,
+  GraphNetworkError,
+  GraphRateLimitError,
+  GraphScopeError,
+  H1AuthError,
+  H1AuthMissingError,
+  H1Client,
+  H1Error,
+  H1ForbiddenError,
+  H1NetworkError,
+  H1RateLimitError,
+  HARD_TO_FUZZ_PATH_PREFIXES,
+  HIGH_IMPACT_GRAPH_PERMISSIONS,
+  HUNT_CLAIM_SCHEMA_VERSION,
+  HUNT_MEMORY_LAYERS,
+  HUNT_MEMORY_SCHEMA_VERSION,
+  HUNT_REDACTED,
+  HYBRID_EDGE_TECHNIQUES,
+  HYBRID_PATH_ANALYZERS,
+  HYBRID_PATH_ANALYZERS_BY_ID,
+  HerdrEventSink,
+  HuntMemory,
+  HuntMemoryStore,
+  HuntResearchAdapter,
+  IDENTITY_CHECKS,
+  INVARIANT_MODEL_VERSION,
+  IllegalTransitionError,
+  IncompleteEvidenceError,
+  IntelCache,
+  JOURNAL_SCHEMA_VERSION,
+  KERNELCTF_TIER1_RACE_GRID,
+  KERNEL_RUN_PROGRAM_MAX_BYTES,
+  KERNEL_RUN_TOOL_DEFINITION,
+  KNOWN_ATTACK_SURFACES,
+  LIFETIME_SINKS,
+  LinuxBootMatrixImportAdapter,
+  LinuxKernelResearchAdapter,
+  LiveAgenticScanResearchAdapter,
+  LiveHarnessHost,
+  LlmApiRuntime,
+  LocalShellRunner,
+  MAX_BODY_CHARS,
+  MAX_BUFFERED,
+  MAX_CANDIDATES,
+  MAX_CAPTURE_BYTES,
+  MAX_CLAIM_STATEMENT_CHARS,
+  MAX_CODE_LENGTH,
+  MAX_EVIDENCE_PER_CLAIM,
+  MAX_EXTENSIONS_PER_SESSION,
+  MAX_FIELDS,
+  MAX_FIELD_VALUE_LENGTH,
+  MAX_FRAME_CHARS,
+  MAX_GUARDS_PER_EXTENSION,
+  MAX_INBOX_MESSAGES,
+  MAX_INFLIGHT_CALLS,
+  MAX_JS_FILES,
+  MAX_KNOWN_NEGATIVES,
+  MAX_MANIFEST_BYTES,
+  MAX_MESSAGE_LENGTH,
+  MAX_NEGATIVE_REASON_CHARS,
+  MAX_OBJECTIVE_CHARS,
+  MAX_OBJECTIVE_WORDS,
+  MAX_POC_BYTES,
+  MAX_PROTOCOL_ERRORS,
+  MAX_RESULT_CHARS,
+  MAX_TOOLS_IN_LIST,
+  MAX_TOOLS_PER_EXTENSION,
+  MAX_TOOLS_PER_SESSION,
+  MICROSOFT_GRAPH_APP_ID,
+  MSA_TENANT_ID,
+  McpHost,
+  MemoryStore,
+  MobileStaticResearchAdapter,
+  NEGATIVE_MIN,
+  OPT_IN_MOAT_LAYERS,
+  OWN_FROM_MARKERS,
+  ObjectiveOracle,
+  OpenRouterRuntime,
+  OperatorAbortError,
+  OsvLookupError,
+  PLUGINS_ROOT_NAME,
+  PLUGIN_CAPABILITIES,
+  PLUGIN_DIR_MODE,
+  PLUGIN_ENTRY_FILE,
+  PLUGIN_FILE_MODE,
+  PLUGIN_MANIFEST_FILE,
+  PRIME_MIN,
+  PRIMITIVE_LIBRARY,
+  PRIVILEGED_ROLE_TEMPLATE_IDS,
+  PROGRAM_MAGIC,
+  PROGRAM_VERSION,
+  PROTOCOL_VERSION,
+  PUBLIC_CLIENT_APP_IDS,
+  PUBLIC_STATUSES,
+  PathPolicy,
+  PluginHost,
+  PocFetchError,
+  ProcessRuntime,
+  ProtocolHttpResearchAdapter,
+  QemuRunner,
+  QuotaExhaustedError,
+  RECENCY_DENYLIST,
+  RECENCY_DETECTORS_ALL,
+  RECENCY_DETECTORS_FULL,
+  RECENCY_REACHABLE_ALLOWLIST,
+  REFUSAL_FOLLOWUP_PROMPT,
+  REPORT_PLATFORMS,
+  RESULT_TRUNCATION_MARKER,
+  ROLE_TEMPLATE_IDS,
+  RUNG_MARKER_TAG,
+  RUNTIME_REGISTRY,
+  RateLimiter,
+  ResearchAdapterRegistry,
+  ReviewLimitError,
+  ReviewStore,
+  SCOPE_DEPENDENT_BASH_GUARDS,
+  SCOPE_GUARDS_INERT_EVENT,
+  SELF_EXTENSION_SETTING_DEF,
+  SEMANTIC_COSMETIC_RUBRIC,
+  SLUG_NOTES,
+  STAGE_ACTION_HISTORY_CAP,
+  STALE_LOCK_MS,
+  STANDARD_RPS,
+  SYNTH_TOOL,
+  SYNTH_TOOL_NAME,
+  ScanCostLedger,
+  ScopePolicy,
+  SelfExtensionRegistry,
+  SourceAuditTargetSchema,
+  SuiteOracleObjectiveSchema,
+  SuiteTaskTargetSchema,
+  TECHNIQUE_LIBRARY,
+  TECH_HIGHLIGHTS,
+  TERMINAL_STATUSES,
+  TIER0_GRAPH_PERMISSIONS,
+  TIER0_ROLE_TEMPLATE_IDS,
+  TOKEN_CHECKS,
+  TOOL_DEFINITIONS,
+  TartVmLane,
+  TodoTracker,
+  TokenBucket,
+  ToolExecutor,
+  ToolHealthTracker,
+  UNINSTRUMENTED_LAYERS,
+  UPGRADE_MIN_CLASS,
+  UnifiedPipelineResearchAdapter,
+  UnreproducedFindingError,
+  UnverifiedFindingError,
+  UserspaceMemSafetyResearchAdapter,
+  VARIABLE_SIZE,
+  VERBOSE_ACTIONS_RENDER_CAP,
+  VERBOSE_ACTION_CHARS,
+  DEFAULT_STEP_TIMEOUT_MS2 as VERIFY_DEFAULT_STEP_TIMEOUT_MS,
+  MAX_STREAM_CAPTURE_BYTES as VERIFY_MAX_STREAM_CAPTURE_BYTES,
+  STREAM_EXCERPT_BYTES as VERIFY_STREAM_EXCERPT_BYTES,
+  WEAPONIZATION_PROVEN_BAR,
+  WEB_GOALS,
+  WindowsEvidenceWorkerClient,
+  WindowsEvidenceWorkerTransportError,
+  WindowsHyperVImportAdapter,
+  WindowsVariantResearchAdapter,
+  XNU_RECEIPT_SCHEMA_VERSION,
+  XnuIokitResearchAdapter,
+  XnuReceiptReplayer,
+  _resetDiagnosticsForTests,
+  activeAppsecLensRegistryPath,
+  adAnchors,
+  adNodeId,
+  adaptAndVerify,
+  addAttackResult,
+  addFinding,
+  adjudicate,
+  advisorySweep,
+  agenticScan,
+  aggregateCapabilities,
+  aggregateScorecard,
+  allocateCandidatesAcrossLanes,
+  allowedNextStatuses,
+  alreadyFixedInTarget,
+  analyticsPipeline,
+  analyzeAppRegistrations,
+  analyzeConditionalAccess,
+  analyzeFederation,
+  analyzeJwt,
+  analyzePrivilegedRoles,
+  analyzeSamlAssertion,
+  analyzeServicePrincipals,
+  analyzeToken,
+  apiSpecToAssets,
+  appFixVariantsToSeedFindings,
+  appendAnalysis,
+  appendHuntClaim,
+  appendImprovementLedgerEntry,
+  appendLedgerEntry,
+  appendProposalAttempt,
+  appendStageAction,
+  applyAttribution,
+  applyDeploymentContextCap,
+  applyFeaturePreset,
+  applyFeaturePresetFromEnv,
+  applyReachabilityGate,
+  applySurfaceRanking,
+  applyUnifiedDiff,
+  applyVerificationToFinding,
+  approveEvolutionCandidate,
+  approveObservation,
+  appsecArchetypeDigest,
+  appsecArchetypeToFinderLens,
+  appsecArchetypesPath,
+  appsecLensLedgerEntryDigest,
+  appsecUserArchetypesPath,
+  arbReadValueWitnessed,
+  arbWriteFaultWitnessed,
+  arbWriteTargetV,
+  archetypeSweepEnabled,
+  archetypeToHuntBrief,
+  assembleBundleIndex,
+  assembleEvidencePack,
+  assembleReproducibilityManifest,
+  assembleReviewPrompt,
+  assertReadOnlyAction,
+  assertionFromStepExpect,
+  assessEscalation,
+  assumptionsToHuntPlan,
+  atlasTechniquesForCategory,
+  atlasTechniquesForEvent,
+  atomicWriteFile,
+  atomicWriteFileSync,
+  attackPrompt,
+  attemptExploitabilityUpgrade,
+  attemptWinRace,
+  auditAgentPrompt,
+  auditReportToBenchResult,
+  authorizeEvolutionArtifact,
+  autoTriage,
+  automationVerdict,
+  autonomousClimb,
+  availableRefuterCandidates,
+  batchCandidates,
+  blindVerifyPrompt,
+  bootedCacheKey,
+  boundaryCrossings,
+  branchJournal,
+  breakRecordToFinding,
+  bucketEndpoint,
+  bucketInScope,
+  buildAdGraph,
+  buildAttackPath,
+  buildBranchName,
+  buildCandidateHosts,
+  buildCandidateJudgePrompt,
+  buildCompositionGraph,
+  buildConsoleSystemPrompt,
+  buildCraftCpgContext,
+  buildCraftTargetSpec,
+  buildDeepScanPrompt,
+  buildEntraGraph,
+  buildEntraGraphFromAzureHound,
+  buildFocusedCandidates,
+  buildFunctionBodyIndex,
+  buildGraphSliceHuntContext,
+  buildHybridGraph,
+  buildHypothesesMarkdown,
+  buildIntelDossier,
+  buildInvariantHuntContext,
+  buildInvariantModel,
+  buildInvestigatePrompt,
+  buildKernelPromotionEnvelope,
+  buildKernelVerifyInitialPrompt,
+  buildKernelVerifySystemPrompt,
+  buildMcpAuditPrompt,
+  buildPluginEnv,
+  buildPrBody,
+  buildPrTitle,
+  buildPriorVulnerabilityAuditGraph,
+  buildPublicReportQuery,
+  buildRegistryEntry,
+  buildReproReadme,
+  buildSlice,
+  buildSourceAnalysisPrompt,
+  buildSynthesisPrompt,
+  buildTier1Harness,
+  buildTier2Harness,
+  buildTodosPayload,
+  buildToolCallLogEntry,
+  buildToolCallsPayload,
+  buildCompositionGraph as buildWebCompositionGraph,
+  buildWebPrimitiveNode,
+  buildWidenEnv,
+  cacheMissStallGadget,
+  cairoFinderLenses,
+  cairoVerifyLenses,
+  callMcpTool,
+  canTransition,
+  candidateGrepPatterns,
+  candidateReferenceTokens,
+  candidateSignature,
+  canonicalEntryPayload,
+  canonicalEvolutionJson,
+  canonicalProposalJson,
+  captureLensCandidates,
+  captureObservation,
+  cardanoFinderLenses,
+  cardanoVerifyLenses,
+  categoryToWebKind,
+  shouldWeaponize as ceilingClearsWeaponizeBar,
+  changedFilesInRange,
+  checkFixPresentInTarget,
+  checkNotYetIntroduced,
+  checkNovelty,
+  checkResearchNovelty,
+  checkWitness,
+  chromiumArchetypesPath,
+  claimDiagnostics,
+  claimForProcessing,
+  clampOutboundBody,
+  clampResultContent,
+  classTokens,
+  classifyBashCommand,
+  classifyDeploymentContext,
+  classifyDmesgDanger,
+  classifyEntraToken,
+  classifyKernelPrimitive,
+  classifyPatchGapReachability,
+  classifyPathReachability,
+  classifyPrimitiveFromDmesg,
+  classifyReferences,
+  classifySemanticVsCosmetic,
+  classifyTakeover,
+  classifyToolRisk,
+  classifyUserspacePrimitive,
+  classifyVerifyOutcome,
+  clearSkillRegistry,
+  cloudEventSink,
+  clusterCandidates,
+  coerceEnablementRecord,
+  collectScannableFiles,
+  collectScopeFiles,
+  collectTenantSnapshot,
+  compareScorecards,
+  compileAndRunReproducer,
+  compileMatchers,
+  composeExploitSession,
+  composeGadgetSetup,
+  composeGate,
+  composeGuards,
+  composeStepSession,
+  computeCvss4BaseScore,
+  computeEstablisherSets,
+  computeEstablisherWrappers,
+  computePriorityScore,
+  computeReviewFindingId,
+  computeSurfaceScore,
+  confirmedMissToCandidate,
+  connectMcpServers,
+  consolidateMemory,
+  controlRungForDemo,
+  corpusV1Path,
+  countCommits,
+  countScopeFilesUpTo,
+  coverageGapToCandidate,
+  craftedPocToFinding,
+  crashArtifactToFinding,
+  crashSeverity,
+  crashSignatureFromReport,
+  crashSignatureFromText,
+  crashToFinding,
+  crashTypeToCategory,
+  createAgenticScanAdapter,
+  createBenchIntegrationRegistry,
+  createConsoleRuntime,
+  createConsoleSession,
+  createCoreBenchIntegration,
+  createDefaultFixTemplateRegistry,
+  createDefaultResearchRegistry,
+  createDefaultVariantScan,
+  createDisclosureRecord,
+  createDockerEvolutionSandbox,
+  createDockerWebProvisioner,
+  createEvolutionCandidate,
+  createEvolutionSandbox,
+  createEvolvedFinder,
+  createHerdrEventSink,
+  createHuntClaim,
+  createJournalWriter,
+  createLiveHttpSender,
+  createOperationalEventSink,
+  createOsvAdvisoryLookup,
+  createPackageAuditScanAdapter,
+  createProposalAttempt,
+  createR2Backend,
+  createReproductionBundle,
+  createResearchProposal,
+  createRuntime,
+  createSandboxPackageRunner,
+  createScanContext,
+  createSessionObjectiveService,
+  createSmolvmEvolutionSandbox,
+  createStubSignatureVerifier,
+  createVariantExecutionFactory,
+  createXnuFuzzReceipt,
+  crossCheckAssumptions,
+  crossFamilyRefuteEnabled,
+  cvss4Severity,
+  decideAddressing,
+  decideFilingState,
+  decodeHostMessage,
+  decodeImmutableId,
+  decodeJwtUnverified,
+  decodeMessage,
+  decodePluginMessage,
+  decodeProgram,
+  dedupByCrashSignature,
+  dedupConfirmation,
+  dedupFindingsByCrashSignature,
+  dedupeAssets,
+  defaultBootPoc,
+  defaultComposerModel,
+  defaultCraftCandidateReviewer,
+  defaultDifferentialRootDetector,
+  defaultDmesgFor,
+  defaultDmesgOutPath,
+  defaultGadgetsFor,
+  defaultIntelCacheDir,
+  defaultJournalRootDir,
+  defaultKernelVerifyRunner,
+  defaultNeeds,
+  defaultGitExec as defaultPatchGapGitExec,
+  defaultProvides,
+  defaultReproducerFor,
+  defaultSecondAuditModel,
+  defaultSyzbotFetcher,
+  defaultVulnsFeedIo,
+  deriveForkSiblings,
+  deriveObjectiveHeuristic,
+  deriveSearchTerms,
+  deriveSubsystemScope,
+  describeDestructiveCategory,
+  describeEdgeTechnique,
+  describeEngagementPosture,
+  describeEntraEdge,
+  describeEntraEdgeTechnique,
+  describeEscalation,
+  describeExploitabilityVerdict,
+  describeHybridEdge,
+  describeHybridEdgeTechnique,
+  describeKernelPrimitive,
+  describeRefuterChoice,
+  describeScopeGuards,
+  detectAvailableRuntimes,
+  detectBuildSystem,
+  detectKasanSplat,
+  detectOutOfBandModuleLoad,
+  detectTargetType,
+  detectVersionRange,
+  detectWriteback,
+  diag,
+  digestBenchManifest,
+  digestTargetSnapshot,
+  disable,
+  discoverEpochs,
+  discoverMcpTarget,
+  discoverObjectSubset,
+  discoveryPrompt,
+  dispatchTableByteLength,
+  disprovenHuntClaims,
+  domainAdminGroupIds,
+  drainInbox,
+  dropSlug,
+  droppedFilename,
+  dualViewCandidateFromContext,
+  effectiveFallbackRps,
+  emitFindingsAsPRs,
+  emitMarkerHelper,
+  emitWeaponizationC,
+  emptyEnablement,
+  emptyLedger,
+  enable,
+  enablementDir,
+  enablementFilePath,
+  encodeHostMessage,
+  encodeMessage,
+  encodePluginMessage,
+  encodeProgram,
+  ensurePluginsRoot,
+  ensureReviewFindingIds,
+  entraAnchors,
+  entraNodeId,
+  enumerateAttackSurfaces,
+  enumerateJsChunkUrls,
+  enumerateSubdomains,
+  enumerateSubdomainsActive,
+  enumerateTargetModel,
+  enumerateTargetModelFromKext,
+  epollWaitqueueFloodGadget,
+  rungRank as escalationRungRank,
+  estimateCost,
+  evaluateAssertion,
+  evaluateEvolutionCandidate,
+  evaluateGate,
+  evaluateGuards,
+  evaluateImprovementPromotion,
+  evaluateRegression,
+  evaluateReviewCoverage,
+  evaluateSignature,
+  evaluateVerificationSpec,
+  eventBus,
+  evidenceKindForFinding,
+  evmFinderLenses,
+  evmVerifyLenses,
+  evolutionDigest,
+  exampleManifestPath,
+  executeEvolutionVersion,
+  executeKernelRun,
+  executePocSteps,
+  expandHomePath,
+  expandSurfaceInventory,
+  expectedFindingsForBatch,
+  extractAttributionFromScopeJson,
+  extractCFromLlmOutput,
+  extractCorpus,
+  extractCraftCpgTargets,
+  extractDupeSignature,
+  extractEngagementFromScopeJson,
+  extractFeatures,
+  extractFencedJson,
+  extractFileRefs,
+  extractInlineCodeBlock,
+  extractKernelFindingMetadata,
+  extractResponseText,
+  extractSiblingFix,
+  extractSpecInvariants,
+  extractSplatRegion,
+  extractTouchedFunctions,
+  extractUrls,
+  features,
+  fetchPoc,
+  fetchRegistryIndex,
+  fetchScoped,
+  fileDiff,
+  filterArchetypes,
+  finalize,
+  findAclAbuseChains,
+  findAdcsEscalation,
+  findCloudSyncAccounts,
+  findCraftFuzzerEntrypoints,
+  findCveArtifacts,
+  findDcsyncPrincipals,
+  findEntraConsentGrantEscalation,
+  findEntraGuestEscalation,
+  findEntraOwnerChainAbuse,
+  findEntraPathsToGlobalAdmin,
+  findEntraServicePrincipalEscalation,
+  findHybridCloudToOnPremWriteback,
+  findHybridCorrespondenceGaps,
+  findHybridMultiBoundaryCrossings,
+  findHybridOnPremToCloudAdmin,
+  findHybridSyncAccountCompromise,
+  findInstallable,
+  findInvariantViolations,
+  findInvariantViolationsTokenLevel,
+  findKerberoastablePaths,
+  findOnPremSyncAccounts,
+  findPathsToDomainAdmin,
+  findRedHatTrackerUrls,
+  findTargets,
+  findUbuntuTrackerUrls,
+  findUnconstrainedDelegation,
+  findViolationsDataflow,
+  findingSignature,
+  findingToQuery,
+  findingTokens,
+  fnv1a64,
+  foldExploitabilityIntoSeverity,
+  foldWeaponizationIntoVerdict,
+  formatAttackSurfaceForPrompt,
+  formatCvss4Vector,
+  formatCweSection,
+  formatDiagnosticLine,
+  formatDroppedReason,
+  formatGraphSlicePromptBlock,
+  formatInvariantPromptBlock,
+  formatJitSkillsInstruction,
+  formatPatchStatusSection,
+  formatScorecardSummary,
+  formatStageDetail,
+  formatTargetHistoryForPrompt,
+  formatTournamentSummary,
+  formatTriageProvenance,
+  formatUserAgent,
+  formatVersionRangeLine,
+  foxguardFindingToKernelVariantFinding,
+  foxguardLeadSource,
+  freebsdArchetypesPath,
+  futexHoldGadget,
+  gateFlagsFor,
+  gatherSurfaceSignals,
+  generateArchetypeCandidates,
+  generateBaseInput,
+  generateConformanceModel,
+  generateInputsForSelector,
+  generateInvariantCandidates,
+  generatePov,
+  generateRaceSmellCandidates,
+  generateRemediation,
+  generateRemediationWithLLM,
+  generateSurfaceInventory,
+  generateSyzChoiceWeights,
+  generateVariantCandidates,
+  getCloudSinkConfig,
+  getDetectorById,
+  getEvalCategories,
+  getObservation,
+  getProgram,
+  getRuntimeInfo,
+  getSkillById,
+  getStrategy,
+  getStructuredScopes,
+  getTechnique,
+  getToolsForRole,
+  getWorkspaceHarnessTrust,
+  globToRegex,
+  grantedPermissionNames,
+  groundSurfaceInventory,
+  guardApprovalUnavailable,
+  guardNetworkRequiresScope,
+  guardPackage,
+  guardUnresolvedCapabilities,
+  hardCodedSecretTemplate,
+  harvestEvidenceText,
+  harvestMissesFromLedgerEntry,
+  harvestMissesFromScorecard,
+  harvestMissesFromTournament,
+  harvestedMissesToMissInput,
+  hasLiveAgentState,
+  hasTrustBoundaryBypass,
+  hasValidValidation,
+  havoc,
+  heuristicCandidateScore,
+  heuristicCraftCandidateScore,
+  hex64,
+  highValueTargetIds,
+  holdsHighImpactPermission,
+  holdsTier0Permission,
+  hubDir,
+  huntAppFixVariants,
+  huntFlywheelEnabled,
+  huntMemoryPath,
+  huntNegativesEnabled,
+  hybridCloudPrivilegedRoleIds,
+  hybridCloudTier0Ids,
+  hybridOnPremHighValueIds,
+  hybridPrincipalOf,
+  hypothesisOnly,
+  inProcessProbe,
+  indexGraph,
+  indexHybridGraph,
+  inferPackage,
+  inferTargetHistoryInputFromRepo,
+  ingestArtifactsFromDirectory,
+  ingestArtifactsFromFile,
+  ingestAzureHound,
+  ingestBloodHoundFiles,
+  ingestBloodHoundJson,
+  ingestDirectory,
+  ingestFile,
+  injectOps,
+  inspectLensRegistry,
+  installableFromEntry,
+  instantiateGadget,
+  integerTruncationGuardTemplate,
+  introspectExploitConfig,
+  isCloudEventSinkActive,
+  isConfirmed,
+  isCrossApiAssumption,
+  isCrossLanguageHint,
+  isDangerUpgrade,
+  isDiagnosticsClaimed,
+  isDisclosureWorthy,
+  isDispatchTableSymbol,
+  isEnabled,
+  isExistingLocalTargetPath,
+  isExplicitLocalTargetPath,
+  isFreezeAvailable,
+  isHardToFuzzSurface,
+  isHypothesisOnly,
+  isMcpTarget,
+  isMechanizableEstablisher,
+  isPlannable,
+  isPubliclyDisclosed,
+  isReachablePath,
+  isReproduced,
+  isReproducedMemCorruption,
+  isSafePluginId,
+  isScopeRequired,
+  isValidPeerId,
+  isVariable,
+  isWafEvasionLadderEnabled,
+  jaccard,
+  joinDirectories,
+  judgeCraftCandidatesWithLlm,
+  judgeHttpDivergence,
+  judgeHuntCandidatesWithLlm,
+  judgePovEvidence,
+  kcsanRaceToBrief,
+  kcsanRaceToFinding,
+  kernelArchetypesPath,
+  kernelVmArtifactsReady,
+  knownDupe,
+  ladderUpTo,
+  lastGreen,
+  leadToFinding,
+  lengthBoundaryValues,
+  levelAtLeast,
+  lifetimeTokenSignal,
+  listDetectorIds,
+  listInstalledPluginIds,
+  listMcpTools,
+  listObservations,
+  listPrograms,
+  listSkillSummaries,
+  liveGit,
+  loadAppsecArchetypes,
+  loadAppsecFinderLenses,
+  loadAssumptionModel,
+  loadChromiumArchetypes,
+  loadCloudCredentials,
+  loadCpg,
+  loadEvolutionConfigFile,
+  loadEvolutionRegistry,
+  loadFreebsdArchetypes,
+  loadH1Credentials,
+  loadHuntCorpusRows,
+  loadHuntLedger,
+  loadInvariantModel,
+  loadJournal,
+  loadKernelArchetypes,
+  loadKernelVmConfigFromEnv,
+  loadKnownNegatives,
+  loadKnownNegativesFromEnv,
+  loadKnownNegativesFromLedger,
+  loadLedger,
+  loadManifest,
+  loadScope,
+  loadSkillRegistry,
+  loadVulnsFeedFromDir,
+  loadableIds,
+  localMirrors,
+  localSandboxProvider,
+  lookupAdvisory,
+  lookupCve,
+  lookupGitHubAdvisory,
+  lookupKev,
+  lookupNvdCve,
+  makeDefaultLensSynthesisModel,
+  makeDefaultSynthesizePoc,
+  makeDifferentialGate,
+  makeDifferentialOracle,
+  makeDiversifyOracle,
+  makeExploitabilityGate,
+  makeFinderLensProbe,
+  makeHuntProveStage,
+  makeKernelVmDifferentialRunner,
+  makeKernelVmDiversifyRunner,
+  makeKernelVmExploitabilityGate,
+  makeKernelVmOracles,
+  makeKernelVmProbe,
+  makeKernelVmRaceProver,
+  makeKernelVmRungAdjudicator,
+  makeLloreJudge,
+  makeMultiLensVerifier,
+  makeRaceWidenProver,
+  makeRng,
+  makeRungRankingGate,
+  makeSecondAuditRefiner,
+  makeSkepticVerifier,
+  makeTargetTreeLookup,
+  makeTemplateRacePocSynth,
+  makeWeaponizeHook,
+  manifestDrift,
+  mapInvariantsToImplementation,
+  mapVerificationToOutcome,
+  markProcessed,
+  markerFired,
+  markerLine,
+  matchAnyGlob,
+  matchCrashSignature,
+  matchFileContent,
+  matchGlob,
+  matchNegative,
+  matchTriggers,
+  matchUrl,
+  matchesLane,
+  maxCeiling,
+  maxDangerClass,
+  maxMemSeverity,
+  maxRung,
+  maybeSubscribeAnalyticsPipeline,
+  maybeSubscribeCloudEventSink,
+  maybeSubscribeOperationalEventSink,
+  memCorruptionVerdict,
+  memPrimitiveToCategory,
+  memoryTokens,
+  mergeCandidates,
+  mergeCraftEvidence,
+  mergeFindings,
+  mergeHarvestedMisses,
+  mergeIntel,
+  migrateJournalEntry,
+  mineAssumptions,
+  mineSyzbotQueue,
+  mintCanary,
+  mintRootProofChallenge,
+  missingInputValidationTemplate,
+  moveFinderLenses,
+  moveVerifyLenses,
+  mutantBudget,
+  mutateStructured,
+  mutexSleepWidenGadget,
+  needsKernelVerify,
+  negativeContext,
+  networkScopeRequiredRefusal,
+  newCorrelationId,
+  newMessageId,
+  newRunId,
+  nodeChildSpawner,
+  nodeOrStub,
+  normaliseCveId,
+  normalizeAssumptions,
+  normalizeDomain,
+  normalizeFrame,
+  normalizeGhsaId,
+  normalizeGuid,
+  normalizeId,
+  normalizeProposalPath,
+  normalizeRelPath,
+  normalizeStageAction,
+  normalizeStageEndDetail,
+  normalizeTitle,
+  objectTypeToken,
+  objectiveOracle,
+  objectiveOracleEvaluatorAttestation,
+  objectiveOracleEvaluatorCodeBytes,
+  objectiveOracleEvaluatorConfigJson,
+  observationDigest,
+  observationQueueSummary,
+  oracleForCategory,
+  packageAudit,
+  pairwiseDeltas,
+  parseApiSpec,
+  parseApprovedObservationShape,
+  parseAutoconfHeader,
+  parseBloodHoundFile,
+  parseBugDetailKernelVersion,
+  parseC,
+  parseCraftCandidateReview,
+  parseJudgeJson as parseCraftJudgeJson,
+  parseCraftStageCitations,
+  parseCrashOutput,
+  parseCrashReport,
+  parseCvss4Vector,
+  parseDispatchTable,
+  parseEngagementProfileName,
+  parseEnsembleModels,
+  parseEvolutionConfig,
+  parseGhsaResponse,
+  parseGitHubAdvisories,
+  parseHarnessGenerationSpec,
+  parseNvdResponse as parseIntelNvdResponse,
+  parseOsvResponse as parseIntelOsvResponse,
+  parseInvestigateResults,
+  parseKcsanReport,
+  parseKernelConfig,
+  parseListing,
+  parseListingRow,
+  parseLlmEscalation,
+  parseManifest,
+  parseMcpConfig,
+  parseNameStatus,
+  parseNestedName,
+  parseNvdResponse2 as parseNvdResponse,
+  parseObservationInput,
+  parseOsvResponse2 as parseOsvResponse,
+  parseRateLimitFlag,
+  parseRedHatTracker,
+  parseRefusalReport,
+  parseRegistryIndex,
+  parseRetryAfter,
+  parseRevalidateVerdicts,
+  parseSanitizerLog,
+  parseSeedFindings,
+  parseSelectorMapText,
+  parseSubsystems,
+  parseSynthesizedContent,
+  parseThreatLaneJson,
+  parseUbuntuTracker,
+  parseUsageLimitReached,
+  parseVulnsCveRecord,
+  parseWidenTarget,
+  parserDiffDetector,
+  partitionCases,
+  pathJoinConfidence,
+  peekInbox,
+  persistMisses,
+  pickChampion,
+  pickRuntimeForStage,
+  pinEvolutionVersion,
+  planArchetypeSweep,
+  planChains,
+  planSingleShardRun,
+  planSpecdriftHypotheses,
+  planChains as planWebChains,
+  pluginsRootDir,
+  pocFabricatesSplat,
+  postFinding,
+  prepare,
+  prepareKernelVmArtifacts,
+  prepareValidationCorpus,
+  preseedMemory,
+  presentationEventSink,
+  primedOrderKey,
+  primitiveBaselineClass,
+  principalOf,
+  privilegedPrincipalIds,
+  privilegedRoleIds,
+  probeS3Bucket,
+  projectResearchExecutionEvidence,
+  projectResearchImprovementResult,
+  promoteEvolutionVersion,
+  promoteFindingsWithTier3Result,
+  proposalDigest,
+  proposalReplayDigest,
+  proposalTrainingExamples,
+  proposalsFromInvariantViolations,
+  proposeEvolutionEdits,
+  provePriming,
+  provenExploitabilityScore,
+  queryGitHubAdvisories,
+  queryOsvAdvisories,
+  raceStrategies,
+  raceWidenEnv,
+  raceWithDefaults,
+  rankAndDedupeFoxguardLeads,
+  rankBugsByProvenRung,
+  rankCandidates,
+  rankDanger,
+  rankResearchProposals,
+  ratchet,
+  reachabilityGate,
+  reachableFrom,
+  reachableTargets,
+  reachableTo,
+  readEnablement,
+  readHuntLedger,
+  readInstalledPlugin,
+  readProposalReplay,
+  readSeedFindings,
+  readToolCallNames,
+  readUnstableDetector,
+  recentDiagnostics,
+  reconcile,
+  reconcileVerdicts,
+  recordEvolutionVersion,
+  redactRecordStrings,
+  redactSecrets,
+  redactSensitiveHeaders,
+  redactTokenValue,
+  redactedArgsPreview,
+  reduceLiveAgentState,
+  refuterFamily,
+  registerArchetype,
+  rehydrateContext,
+  rejectObservation,
+  releaseClaim,
+  releaseStaleClaims,
+  renderAdaptationPrompt,
+  renderAdvisoryMarkdown,
+  renderCraftTargetSpec,
+  renderCvssSection,
+  renderEmptyScoreboard,
+  renderExploitScreenshot,
+  renderInboundMessage,
+  renderLibraryBrief,
+  renderPlatformReport,
+  renderRaceHarness,
+  renderRecencyReportMarkdown,
+  renderReproducibilityManifest,
+  renderRungReliabilitySeeds,
+  renderSanitizerVerdict,
+  renderScoreboard,
+  renderSlice,
+  renderTriggerSeed,
+  renderUnifiedDiff,
+  renderVendorNotificationMarkdown,
+  reportPrompt,
+  reportTemplate,
+  researchCandidateChangeDigest,
+  researchExecutionEvidenceDigest,
+  researchExecutionEvidenceRef,
+  researchPrompt,
+  researchVariantDescriptor,
+  researchVariantDescriptorDigest,
+  resolveAnalyticsLevel,
+  resolveAttribution,
+  resolveDetectors,
+  resolveEngagementProfile,
+  resolveEnsembleModels,
+  resolveEvolutionConfigImage,
+  resolveEvolutionImage,
+  resolveFeaturePreset,
+  resolveHuntLedger,
+  resolveJournalPaths,
+  resolveLocalTargetPath,
+  resolveMcpEndpoint,
+  resolveNovelty,
+  resolveRange,
+  resolveTargetHistoryInput,
+  retireArchetype,
+  reviewAgentPrompt,
+  reviewKernelCrashSubsystems,
+  roleNodeId,
+  rollbackEvolutionVersion,
+  rootProofInstructions,
+  runAdGraphAnalysis,
+  runAgentLoop,
+  runAllAnalyzers,
+  runAnalysisAgent,
+  runAssumptionHunt,
+  runBehavioralRepair,
+  runBenchCase,
+  runBenchSuite,
+  runCliPathTraversalReplayFixture,
+  runCraftScan,
+  runDetectorOnPackage,
+  runDeterministicReplay,
+  runDifferential,
+  runEGATS,
+  runEGATSWithDefaults,
+  runEnsembleCraft,
+  runEntraPathAnalysis,
+  runEval,
+  runEvolution,
+  runExploitScan,
+  runFileReviewPipeline,
+  runHttpConformanceCheck,
+  runHuntScan,
+  runHybridPathAnalysis,
+  runIdentityAssessment,
+  runJsRecon,
+  runKernelExploitChain,
+  runKernelVariantHunt,
+  runLensSynthesisLoop,
+  runLlmIpiAudit,
+  runMcpSecurityChecks,
+  runMemSafetyScan,
+  runMobileStaticIntake,
+  runNativeAgentLoop,
+  runNpmDynamicDiscovery,
+  runPipeline,
+  runProposalLearningLoop,
+  runRecencyDualViewDetector,
+  runRecencyExtraDetectors,
+  runRecencyHunt,
+  runRecon,
+  runReproductionBundle,
+  runResearch,
+  runReviewProcess,
+  runReviewRevalidate,
+  runReviewScan,
+  runSecondAudit,
+  runSecureProject,
+  runSelfConsistencyVerify,
+  runSourceFix,
+  runSpecdriftPlan,
+  runSpecdriftScan,
+  runStaticAnalysis,
+  runStrategy,
+  runStructuredVerify,
+  runSubsystemInvariantHunt,
+  runThreatModelPlanner,
+  runTier3Validation,
+  runTournament,
+  runUserspaceFuzzLoop,
+  runWeaponization,
+  rungAtLeast,
+  rungRankingEnabled,
+  sameCrash,
+  sanitizeReason,
+  sanitizerOutputFromCraftResult,
+  satisfiesMinVersion,
+  saveLedger,
+  scaffoldTier1Harness,
+  scaffoldTier2Harness,
+  scan,
+  scanDualViewContexts,
+  scanForModuleInit,
+  scanForPatchGapCandidates,
+  scanReportToBenchResult,
+  scanViolatingContexts,
+  scopeRequiredRefusal,
+  scoreCodeCandidate,
+  scoreCvss4Vector,
+  scoreEvidence,
+  scoreMemory,
+  scoreRepoCandidate,
+  scoreResearchProposal,
+  scoreSurfaceDesirability,
+  searchAdvisories,
+  searchGitHubIssues,
+  searchInstallable,
+  searchNvdSimilar,
+  searchNvdTargetHistory,
+  searchPublicReports,
+  searchSimilar,
+  searchTargetHistory,
+  selectCiCases,
+  selectCrossFamilyRefuter,
+  selectEvolutionAlternativeParent,
+  selectRaceGadgets,
+  selectSprayPlans,
+  selectStrategies,
+  selectSubsystemSourceSlice,
+  selectVisibleActions,
+  selectorModelToLine,
+  sendMessage,
+  sendOperatorMessage,
+  sendPrompt,
+  serializeProposalReplay,
+  setEnv,
+  setRuntimeDeps,
+  setWorkspaceHarnessTrust,
+  shortestPaths,
+  shouldWeaponize2 as shouldWeaponize,
+  signatureKey,
+  sliceAroundTargets,
+  snapshotBenchVariant,
+  snapshotEvolutionSource,
+  sniffMemPrimitive,
+  solanaFinderLenses,
+  solanaVerifyLenses,
+  sortFindings,
+  sourceReview,
+  sourceVerifyPrompt,
+  spliceGadgetSetup,
+  splitHybridId,
+  ssppFuzzDetector,
+  staleHuntClaims,
+  stampDeploymentContext,
+  startEvolutionCanary,
+  staticProbe,
+  stderrDiagnosticSink,
+  storeAssumptionModel,
+  storeInvariantModel,
+  streamJournal,
+  stripUnsafeText,
+  structurallyValidateConformanceModel,
+  subjectSelfEnforces,
+  subscribeDiagnostics,
+  subsetManifest,
+  suggestCvss,
+  suggestCvss4,
+  suggestCwesForCategory,
+  summariseScopes,
+  summariseTree,
+  summariseTurnToolCalls,
+  summarizeFindings,
+  summarizeTriageProvenance,
+  symbolsFromDetectionSignature,
+  syncLoreMirror,
+  synthesizeArchetypes,
+  syzChoiceWeightsFromPlan,
+  syzbotQueueBrief,
+  tableMetrics,
+  tallyConsensus,
+  targetRequiresScope,
+  techniquesForBug,
+  techniquesForCategory,
+  techniquesForEvent,
+  templateIdForCategory,
+  tenantNodeId,
+  tier0TargetIds,
+  timerfdInterruptGadget,
+  toCrossValidatedLeads,
+  toGraphSnapshot,
+  toHuntCandidate,
+  toHuntCandidates,
+  toOsvEcosystem,
+  toScopeFile,
+  toScopeJson,
+  toVerifyVerdict,
+  tokenFingerprint,
+  toolCallPreview,
+  trainProposalRanker,
+  transition,
+  triageKcsanRace,
+  triggerSplatWitnessed,
+  triggerTechniquesForFamily,
+  truncateStageAction,
+  tryRecoverPreviousFeedback,
+  unconfiguredVerifier,
+  unresolvedHuntClaims,
+  validateAwsCredentials,
+  validateBundlePlan,
+  validateCandidateLens,
+  validateCrashReportConsistency,
+  validateHuntClaimRecord,
+  validateKernelRunArgs,
+  validatePluginManifest,
+  validateProposalAttempt,
+  validateProposalReplay,
+  validateResearchProposal,
+  validateSurfaceInventory,
+  validateUpdateTodosArgs,
+  validateXnuFuzzReceipt,
+  variableLengthSchedule,
+  verify,
+  verifyAgainstRef,
+  argvForStep as verifyArgvForStep,
+  verifyEvolutionSnapshot,
+  excerpt as verifyExcerpt,
+  verifyImprovementLedger,
+  verifyKernelCrash,
+  verifyKernelFinding,
+  persistArtifact as verifyPersistArtifact,
+  verifyPrompt,
+  verifyRootProof,
+  verifyStandaloneKernelReproducer,
+  verifyStaticKernelFinding,
+  verifyStatusFromOutcome,
+  violationsToHuntPlan,
+  weaponizationProven,
+  webFindingToPrimitiveNode,
+  widenEnvFor,
+  wilson95,
+  withEnvOverrides,
+  withVariantFeatureFlags,
+  witnessAssumptionViolation,
+  witnessDualViewContexts,
+  writeEnablement,
+  writeProofFileReadOnly,
+  writebackEnabled,
+  xnuArtifactDigest
+};