0sec-cli 0.18.0 → 0.22.0

package/chunks/{dist-4YICS2J2.js → dist-3FNZIBB4.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   BenchCaseSchema,
   BenchIntegrationRegistry,
@@ -18,8 +18,7 @@ import {
   Cpg,
   CraftMemoryStore,
   CraftStagedOrchestrator,
-  DEFAULT_CALL_TIMEOUT_MS,
-  DEFAULT_HANDSHAKE_TIMEOUT_MS,
+  DEFAULT_MAX_TOOL_ITERATIONS,
   DEFAULT_RACE_WIDEN_DELAY_MS,
   DEFAULT_REGISTRY_URL,
   DEFAULT_SEED_DIRS,
@@ -27,14 +26,9 @@ import {
   DEFAULT_TARGET_SUBSYSTEMS,
   DISPATCH2022,
   DISTRO_DEFAULTS,
-  ENABLEMENT_DIR_MODE,
-  ENABLEMENT_DIR_NAME,
-  ENABLEMENT_FILE_MODE,
-  ENABLEMENT_SCHEMA_VERSION,
   EnforcementTracker,
   FEATURE_NAMES,
   FindingMatchObjectiveSchema,
-  FixTemplateRegistry,
   FlagCaptureObjectiveSchema,
   GADGET_FACTORIES,
   GADGET_KINDS,
@@ -55,6 +49,8 @@ import {
   HerdrEventSink,
   HuntResearchAdapter,
   KERNELCTF_TIER1_RACE_GRID,
+  KERNEL_FUNCTION_BATCH_SIZE,
+  KERNEL_FUNCTION_LABELS,
   KERNEL_RUN_PROGRAM_MAX_BYTES,
   KERNEL_RUN_TOOL_DEFINITION,
   KNOWN_ATTACK_SURFACES,
@@ -62,24 +58,16 @@ import {
   LinuxBootMatrixImportAdapter,
   LinuxKernelResearchAdapter,
   LiveAgenticScanResearchAdapter,
-  MAX_INFLIGHT_CALLS,
   MAX_OBJECTIVE_CHARS,
   MAX_OBJECTIVE_WORDS,
-  MAX_PROTOCOL_ERRORS,
   McpHost,
   MemoryStore,
   MobileStaticResearchAdapter,
   OPT_IN_MOAT_LAYERS,
   ObjectiveOracle,
-  PLUGINS_ROOT_NAME,
-  PLUGIN_DIR_MODE,
-  PLUGIN_ENTRY_FILE,
-  PLUGIN_FILE_MODE,
-  PLUGIN_MANIFEST_FILE,
   PROGRAM_MAGIC,
   PROGRAM_VERSION,
   PathPolicy,
-  PluginHost,
   ProtocolHttpResearchAdapter,
   RECENCY_DENYLIST,
   RECENCY_DETECTORS_ALL,
@@ -90,6 +78,7 @@ import {
   STAGE_ACTION_HISTORY_CAP,
   SYNTH_TOOL,
   SYNTH_TOOL_NAME,
+  ScanCostLedger,
   SourceAuditTargetSchema,
   SuiteOracleObjectiveSchema,
   SuiteTaskTargetSchema,
@@ -110,10 +99,10 @@ import {
   XNU_RECEIPT_SCHEMA_VERSION,
   XnuIokitResearchAdapter,
   XnuReceiptReplayer,
+  activeAppsecLensRegistryPath,
   addAttackResult,
   addFinding,
   agenticScan,
-  aggregateCapabilities,
   allocateCandidatesAcrossLanes,
   alreadyFixedInTarget,
   appFixVariantsToSeedFindings,
@@ -123,6 +112,11 @@ import {
   applySurfaceRanking,
   applyVerificationToFinding,
   approveObservation,
+  appsecArchetypeDigest,
+  appsecArchetypeToFinderLens,
+  appsecArchetypesPath,
+  appsecLensLedgerEntryDigest,
+  appsecUserArchetypesPath,
   arbReadValueWitnessed,
   arbWriteFaultWitnessed,
   arbWriteTargetV,
@@ -136,7 +130,6 @@ import {
   automationVerdict,
   autonomousClimb,
   breakRecordToFinding,
-  buildBranchName,
   buildCandidateJudgePrompt,
   buildCompositionGraph,
   buildConsoleSystemPrompt,
@@ -144,17 +137,12 @@ import {
   buildCraftTargetSpec,
   buildDeepScanPrompt,
   buildGraphSliceHuntContext,
-  buildHypothesesMarkdown,
   buildInvariantHuntContext,
   buildKernelPromotionEnvelope,
   buildKernelVerifyInitialPrompt,
   buildKernelVerifySystemPrompt,
   buildMcpAuditPrompt,
-  buildPluginEnv,
-  buildPrBody,
-  buildPrTitle,
   buildRegistryEntry,
-  buildReproReadme,
   buildSlice,
   buildSourceAnalysisPrompt,
   buildTier1Harness,
@@ -172,6 +160,7 @@ import {
   cardanoVerifyLenses,
   categoryToWebKind,
   changedFilesInRange,
+  checkAlreadyFixed,
   checkFixPresentInTarget,
   checkNotYetIntroduced,
   checkResearchNovelty,
@@ -182,7 +171,6 @@ import {
   classifyToolRisk,
   classifyVerifyOutcome,
   clusterCandidates,
-  coerceEnablementRecord,
   compareScorecards,
   compileAndRunReproducer,
   composeGadgetSetup,
@@ -199,14 +187,15 @@ import {
   crashSeverity,
   crashSignatureFromReport,
   crashSignatureFromText,
+  crashSummaryFromTriage,
   crashToFinding,
   crashTypeToCategory,
   createAgenticScanAdapter,
   createBenchIntegrationRegistry,
+  createConsoleJevRuntime,
   createConsoleRuntime,
   createConsoleSession,
   createCoreBenchIntegration,
-  createDefaultFixTemplateRegistry,
   createDefaultResearchRegistry,
   createDefaultVariantScan,
   createDockerWebProvisioner,
@@ -245,19 +234,12 @@ import {
   detectBuildSystem,
   detectKasanSplat,
   digestBenchManifest,
-  disable,
   discoverMcpTarget,
   discoverObjectSubset,
   dispatchTableByteLength,
-  emitFindingsAsPRs,
   emitMarkerHelper,
-  emptyEnablement,
   emptyLedger,
-  enable,
-  enablementDir,
-  enablementFilePath,
   encodeProgram,
-  ensurePluginsRoot,
   enumerateAttackSurfaces,
   enumerateTargetModel,
   enumerateTargetModelFromKext,
@@ -273,6 +255,7 @@ import {
   extractDupeSignature,
   extractFeatures,
   extractKernelFindingMetadata,
+  extractKernelFunctions,
   extractTouchedFunctions,
   fetchRegistryIndex,
   fileDiff,
@@ -304,7 +287,6 @@ import {
   getProgram,
   getStructuredScopes,
   getTechnique,
-  hardCodedSecretTemplate,
   harvestEvidenceText,
   hasLiveAgentState,
   hasValidValidation,
@@ -321,17 +303,13 @@ import {
   inspectLensRegistry,
   installableFromEntry,
   instantiateGadget,
-  integerTruncationGuardTemplate,
   isConfirmed,
   isCrossLanguageHint,
   isDispatchTableSymbol,
-  isEnabled,
   isHardToFuzzSurface,
   isHypothesisOnly,
   isPlannable,
   isReachablePath,
-  isReproduced,
-  isSafePluginId,
   isVariable,
   judgeCraftCandidatesWithLlm,
   kcsanRaceToBrief,
@@ -340,16 +318,16 @@ import {
   lastGreen,
   lengthBoundaryValues,
   lifetimeTokenSignal,
-  listInstalledPluginIds,
   listMcpTools,
   listObservations,
   listPrograms,
+  loadAppsecArchetypes,
+  loadAppsecFinderLenses,
   loadCpg,
   loadH1Credentials,
   loadLedger,
   loadManifest,
   loadVulnsFeedFromDir,
-  loadableIds,
   makeDefaultLensSynthesisModel,
   makeDifferentialGate,
   makeDifferentialOracle,
@@ -371,7 +349,6 @@ import {
   makeTargetTreeLookup,
   makeTemplateRacePocSynth,
   makeWeaponizeHook,
-  manifestDrift,
   mapVerificationToOutcome,
   markProcessed,
   matchCrashSignature,
@@ -381,13 +358,11 @@ import {
   mergeCraftEvidence,
   mineSyzbotQueue,
   mintRootProofChallenge,
-  missingInputValidationTemplate,
   moveFinderLenses,
   moveVerifyLenses,
   mutantBudget,
   mutateStructured,
   mutexSleepWidenGadget,
-  nodeChildSpawner,
   normalizeFrame,
   normalizeStageAction,
   normalizeStageEndDetail,
@@ -431,7 +406,6 @@ import {
   pickChampion,
   planChains,
   planSingleShardRun,
-  pluginsRootDir,
   prepareValidationCorpus,
   preseedMemory,
   primitiveBaselineClass,
@@ -445,17 +419,18 @@ import {
   raceStrategies,
   raceWidenEnv,
   raceWithDefaults,
+  radarCandidatesToSeedFindings,
   rankAndDedupeFoxguardLeads,
   rankBugsByProvenRung,
   rankCandidates,
+  rankCrashesWithJev,
+  rankKernelCommitsWithJev,
+  rankKernelHypothesesWithJev,
   rankResearchProposals,
   reachabilityGate,
   reachableTargets,
-  readEnablement,
-  readInstalledPlugin,
   readProposalReplay,
   readSeedFindings,
-  reconcile,
   reduceLiveAgentState,
   registerArchetype,
   rejectObservation,
@@ -470,7 +445,6 @@ import {
   renderScoreboard,
   renderSlice,
   renderTriggerSeed,
-  renderUnifiedDiff,
   researchCandidateChangeDigest,
   researchExecutionEvidenceDigest,
   researchExecutionEvidenceRef,
@@ -494,6 +468,7 @@ import {
   runEnsembleCraft,
   runExploitScan,
   runKernelExploitChain,
+  runKernelSourceJevPrepass,
   runKernelVariantHunt,
   runLensSynthesisLoop,
   runLlmIpiAudit,
@@ -509,6 +484,7 @@ import {
   runSecondAudit,
   runSecureProject,
   runSelfConsistencyVerify,
+  runSmolvmWorkbench,
   runStaticAnalysis,
   runStructuredVerify,
   runThreatModelPlanner,
@@ -517,13 +493,13 @@ import {
   rungRankingEnabled,
   sameCrash,
   sanitizerOutputFromCraftResult,
-  satisfiesMinVersion,
   saveLedger,
   scaffoldTier1Harness,
   scaffoldTier2Harness,
   scan,
   scanForModuleInit,
   scanForPatchGapCandidates,
+  scanRepoCommitsWithJev,
   scanReportToBenchResult,
   scoreEvidence,
   scoreMemory,
@@ -553,19 +529,20 @@ import {
   summarizeTriageProvenance,
   synthesizeArchetypes,
   syzChoiceWeightsFromPlan,
+  syzWeightingContextFromJev,
   syzbotQueueBrief,
   tableMetrics,
   tallyConsensus,
   techniquesForBug,
   techniquesForCategory,
   techniquesForEvent,
-  templateIdForCategory,
   timerfdInterruptGadget,
   toCrossValidatedLeads,
   toHuntCandidate,
   toHuntCandidates,
   toScopeFile,
   toScopeJson,
+  toToolContextJevRuntime,
   toVerifyVerdict,
   trainProposalRanker,
   triageKcsanRace,
@@ -592,20 +569,26 @@ import {
   widenEnvFor,
   withEnvOverrides,
   withVariantFeatureFlags,
-  writeEnablement,
   xnuArtifactDigest
-} from "./chunk-5JI7L7KV.js";
+} from "./chunk-EGZGZFAH.js";
 import {
   RateLimiter,
   TokenBucket,
   enumerateJsChunkUrls,
   parseRateLimitFlag,
   parseRetryAfter
-} from "./chunk-CMKXP5RR.js";
+} from "./chunk-LYUAM3TG.js";
+import {
+  extractSpecInvariants,
+  mapInvariantsToImplementation,
+  planSpecdriftHypotheses,
+  runSpecdriftPlan,
+  runSpecdriftScan
+} from "./chunk-QCUFBVIZ.js";
 import {
   getEvalCategories,
   runEval
-} from "./chunk-AHTBZC3E.js";
+} from "./chunk-RSIUX3RW.js";
 import {
   classifyUserspacePrimitive,
   crashArtifactToFinding,
@@ -621,11 +604,11 @@ import {
   runMemSafetyScan,
   runUserspaceFuzzLoop,
   sniffMemPrimitive
-} from "./chunk-WVTBZEQO.js";
+} from "./chunk-TM74SSHC.js";
 import {
   leadToFinding,
   runNpmDynamicDiscovery
-} from "./chunk-5G3ZXFBW.js";
+} from "./chunk-2WNCI664.js";
 import {
   OsvLookupError,
   createOsvAdvisoryLookup,
@@ -634,7 +617,7 @@ import {
   inProcessProbe,
   localSandboxProvider,
   staticProbe
-} from "./chunk-7DQEV5QI.js";
+} from "./chunk-23DG5YKS.js";
 import {
   DETECTOR_REGISTRY,
   DETECTOR_REGISTRY_BY_ID,
@@ -647,7 +630,7 @@ import {
   resolveDetectors,
   runDetectorOnPackage,
   ssppFuzzDetector
-} from "./chunk-RWONANDA.js";
+} from "./chunk-DQTNI3KY.js";
 import {
   PRIMITIVE_LIBRARY,
   RUNG_MARKER_TAG,
@@ -663,7 +646,7 @@ import {
   runStrategy,
   runWeaponization,
   selectStrategies
-} from "./chunk-BATRQBOR.js";
+} from "./chunk-VMRRNRMR.js";
 import {
   BENIGN_MAX_CLASS,
   UPGRADE_MIN_CLASS,
@@ -674,7 +657,7 @@ import {
   isDangerUpgrade,
   maxDangerClass,
   rankDanger
-} from "./chunk-2JCCA2JL.js";
+} from "./chunk-DM5C5L5D.js";
 import {
   MAX_POC_BYTES,
   PocFetchError,
@@ -683,12 +666,16 @@ import {
   extractInlineCodeBlock,
   fetchPoc,
   renderAdaptationPrompt
-} from "./chunk-ASUR522M.js";
+} from "./chunk-RRD4XXPU.js";
 import {
   applyReachabilityGate,
   classifyPathReachability,
   generateVariantCandidates
-} from "./chunk-BFRB6HB2.js";
+} from "./chunk-HUNAPTKV.js";
+import {
+  collectScopeFiles,
+  countScopeFilesUpTo
+} from "./chunk-AZ7L3HFD.js";
 import {
   ASSUMPTION_MODEL_VERSION,
   INVARIANT_MODEL_VERSION,
@@ -729,53 +716,7 @@ import {
   violationsToHuntPlan,
   witnessAssumptionViolation,
   witnessDualViewContexts
-} from "./chunk-JQHOLLTD.js";
-import {
-  defaultDmesgOutPath,
-  detectOutOfBandModuleLoad,
-  loadKernelVmConfigFromEnv,
-  prepareKernelVmArtifacts,
-  verifyKernelFinding,
-  writeProofFileReadOnly
-} from "./chunk-3KPWWJCI.js";
-import {
-  evaluateVerificationSpec,
-  runSourceFix
-} from "./chunk-F3WBKITT.js";
-import {
-  DEFAULT_STEP_TIMEOUT_MS as DEFAULT_STEP_TIMEOUT_MS2,
-  DockerRunner,
-  LocalShellRunner,
-  MAX_STREAM_CAPTURE_BYTES,
-  QemuRunner,
-  STREAM_EXCERPT_BYTES,
-  argvForStep,
-  assertionFromStepExpect,
-  evaluateAssertion,
-  excerpt,
-  persistArtifact,
-  runDeterministicReplay
-} from "./chunk-C2WXWFBB.js";
-import {
-  generateConformanceModel,
-  judgeHttpDivergence,
-  runHttpConformanceCheck,
-  structurallyValidateConformanceModel
-} from "./chunk-IOL7D5YV.js";
-import {
-  createLiveHttpSender
-} from "./chunk-2RMLOJVB.js";
-import {
-  extractSpecInvariants,
-  mapInvariantsToImplementation,
-  planSpecdriftHypotheses,
-  runSpecdriftPlan,
-  runSpecdriftScan
-} from "./chunk-BKZFDZ23.js";
-import {
-  collectScopeFiles,
-  countScopeFilesUpTo
-} from "./chunk-53G27VPS.js";
+} from "./chunk-UU7PQP6N.js";
 import {
   CHROMIUM_BARE_WORDS,
   FREEBSD_BARE_KERNEL_WORDS,
@@ -860,70 +801,58 @@ import {
   unresolvedHuntClaims,
   validateHuntClaimRecord,
   validateResearchProposal
-} from "./chunk-BFR2CDV5.js";
-import {
-  ESCALATION_LADDER,
-  ladderUpTo,
-  maxRung,
-  ratchet,
-  rungAtLeast,
-  rungRank
-} from "./chunk-RJWOYEOG.js";
+} from "./chunk-UV5QWZGE.js";
 import {
   ACTION_LOG_ARGS_MAX,
   ACTION_LOG_ARG_VALUE_MAX,
-  ANALYTICS_ENDPOINT,
-  ANALYTICS_LEVEL_ENV,
-  ANALYTICS_SCHEMA_VERSION,
-  ANALYTICS_SENT_LOG_FILENAME,
   BROADCAST_ID,
   BUILTIN_GUARDS,
   CONSERVATIVE_JITTER_MS,
   CONSERVATIVE_RPS,
   DEFAULT_CONCURRENCY,
-  DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
   DEFAULT_MAX_DURATION_MS,
   DEFAULT_MCP_PATHS,
   DEFAULT_SPEC_PATHS,
+  DEFAULT_STEP_TIMEOUT_MS as DEFAULT_STEP_TIMEOUT_MS2,
   DEFAULT_SUBDOMAIN_WORDLIST,
+  DockerRunner,
   ENGAGEMENT_PROFILE_NAMES,
   ExecutablePluginManager,
-  FrameReader,
   HUNT_MEMORY_SCHEMA_VERSION,
   HUNT_REDACTED,
   HuntMemoryStore,
   LiveHarnessHost,
+  LocalShellRunner,
   MAX_BODY_CHARS,
   MAX_CANDIDATES,
   MAX_EXTENSIONS_PER_SESSION,
-  MAX_FRAME_CHARS,
   MAX_GUARDS_PER_EXTENSION,
   MAX_INBOX_MESSAGES,
   MAX_JS_FILES,
   MAX_MANIFEST_BYTES,
-  MAX_RESULT_CHARS,
-  MAX_TOOLS_IN_LIST,
+  MAX_STREAM_CAPTURE_BYTES,
   MAX_TOOLS_PER_EXTENSION,
   MAX_TOOLS_PER_SESSION,
-  PLUGIN_CAPABILITIES,
-  PROTOCOL_VERSION,
-  RESULT_TRUNCATION_MARKER,
+  QemuRunner,
   SCOPE_DEPENDENT_BASH_GUARDS,
   SCOPE_GUARDS_INERT_EVENT,
   SELF_EXTENSION_SETTING_DEF,
   STANDARD_RPS,
+  STREAM_EXCERPT_BYTES,
   SelfExtensionRegistry,
+  SmolvmRunner,
   TOOL_DEFINITIONS,
   TodoTracker,
   ToolExecutor,
   ToolHealthTracker,
+  agentTaskLabel,
   aggregateScorecard,
-  analyticsPipeline,
   apiSpecToAssets,
-  appendImprovementLedgerEntry,
   applyAttribution,
   approveEvolutionCandidate,
+  argvForStep,
   assertReadOnlyAction,
+  assertionFromStepExpect,
   attackPrompt,
   authorizeEvolutionArtifact,
   blindVerifyPrompt,
@@ -933,9 +862,7 @@ import {
   buildTodosPayload,
   buildToolCallLogEntry,
   buildToolCallsPayload,
-  canonicalEvolutionJson,
   clampOutboundBody,
-  clampResultContent,
   classifyTakeover,
   clearSkillRegistry,
   composeGuards,
@@ -943,26 +870,24 @@ import {
   createEvolutionCandidate,
   createEvolutionSandbox,
   createSmolvmEvolutionSandbox,
+  createSmolvmPocTargetRunner,
   decideAddressing,
-  decodeHostMessage,
   decodeMessage,
-  decodePluginMessage,
   dedupeAssets,
   describeEngagementPosture,
   describeScopeGuards,
   discoveryPrompt,
   drainInbox,
   effectiveFallbackRps,
-  encodeHostMessage,
   encodeMessage,
-  encodePluginMessage,
   enumerateSubdomains,
   enumerateSubdomainsActive,
+  evaluateAssertion,
   evaluateEvolutionCandidate,
   evaluateGate,
   evaluateGuards,
-  evaluateImprovementPromotion,
   evolutionDigest,
+  excerpt,
   executeEvolutionVersion,
   extractAttributionFromScopeJson,
   extractEngagementFromScopeJson,
@@ -971,8 +896,6 @@ import {
   formatJitSkillsInstruction,
   formatScorecardSummary,
   formatUserAgent,
-  gateFlagsFor,
-  getCloudSinkConfig,
   getSkillById,
   getToolsForRole,
   getWorkspaceHarnessTrust,
@@ -989,13 +912,10 @@ import {
   isScopeRequired,
   isValidPeerId,
   isWafEvasionLadderEnabled,
-  levelAtLeast,
   listSkillSummaries,
-  loadEvolutionConfigFile,
   loadEvolutionRegistry,
   loadSkillRegistry,
   matchTriggers,
-  maybeSubscribeAnalyticsPipeline,
   mergeHarvestedMisses,
   networkScopeRequiredRefusal,
   newCorrelationId,
@@ -1003,32 +923,31 @@ import {
   normalizeDomain,
   parseApiSpec,
   parseEngagementProfileName,
-  parseEvolutionConfig,
   parseHarnessGenerationSpec,
   peekInbox,
+  persistArtifact,
   pinEvolutionVersion,
-  postFinding,
   probeS3Bucket,
   promoteEvolutionVersion,
   proposeEvolutionEdits,
   readToolCallNames,
   recordEvolutionVersion,
-  redactRecordStrings,
   redactSecrets,
   redactedArgsPreview,
   renderInboundMessage,
   reportPrompt,
   researchPrompt,
-  resolveAnalyticsLevel,
   resolveAttribution,
   resolveEngagementProfile,
   resolveEvolutionConfigImage,
   resolveEvolutionImage,
   rollbackEvolutionVersion,
+  runDeterministicReplay,
   runEvolution,
   runJsRecon,
   runNativeAgentLoop,
   runRecon,
+  runSmolvmPocSteps,
   sanitizeReason,
   scopeRequiredRefusal,
   selectEvolutionAlternativeParent,
@@ -1045,13 +964,12 @@ import {
   toolCallPreview,
   tryRecoverPreviousFeedback,
   validateAwsCredentials,
-  validatePluginManifest,
   validateUpdateTodosArgs,
   verifyEvolutionSnapshot,
-  verifyImprovementLedger,
   verifyPrompt,
   wilson95
-} from "./chunk-BZNEY2ZS.js";
+} from "./chunk-SJBCK2EI.js";
+import "./chunk-K2PWUPUI.js";
 import {
   IntelCache,
   advisorySweep,
@@ -1083,12 +1001,19 @@ import {
   searchTargetHistory,
   toGraphSnapshot,
   toOsvEcosystem
-} from "./chunk-YYRBQVFE.js";
-import "./chunk-3MOLBTLS.js";
+} from "./chunk-TZFIAMWZ.js";
 import {
   parseSanitizerLog,
   renderSanitizerVerdict
-} from "./chunk-P6WKNFWX.js";
+} from "./chunk-2OQOQ2FZ.js";
+import {
+  ESCALATION_LADDER,
+  ladderUpTo,
+  maxRung,
+  ratchet,
+  rungAtLeast,
+  rungRank
+} from "./chunk-UEX7PFSE.js";
 import {
   DEFAULT_JOURNAL_SIDECAR_THRESHOLD_BYTES,
   JOURNAL_SCHEMA_VERSION,
@@ -1100,152 +1025,93 @@ import {
   rehydrateContext,
   resolveJournalPaths,
   streamJournal
-} from "./chunk-UCYRA73C.js";
-import "./chunk-LP3HHYQU.js";
-import "./chunk-KLTNTE2Z.js";
-import "./chunk-72CISA2D.js";
+} from "./chunk-OAYUPGF6.js";
 import {
-  activeAppsecLensRegistryPath,
-  appsecArchetypeDigest,
-  appsecArchetypeToFinderLens,
-  appsecArchetypesPath,
-  appsecLensLedgerEntryDigest,
-  appsecUserArchetypesPath,
-  loadAppsecArchetypes,
-  loadAppsecFinderLenses
-} from "./chunk-QI233I24.js";
-import {
-  ScanCostLedger
-} from "./chunk-242TMK6G.js";
-import {
-  CORE_REVIEW_PROMPT,
-  DEFAULT_IGNORE_DIR_GLOBS,
-  DEFAULT_IGNORE_FILE_GLOBS,
-  DEFAULT_REVIEW_COVERAGE_POLICY,
-  DEFAULT_REVIEW_MATCHERS,
-  REFUSAL_FOLLOWUP_PROMPT,
-  ReviewLimitError,
-  ReviewStore,
-  SLUG_NOTES,
-  STALE_LOCK_MS,
-  TECH_HIGHLIGHTS,
-  appendAnalysis,
-  assembleReviewPrompt,
-  atomicWriteFile,
-  atomicWriteFileSync,
-  batchCandidates,
-  buildInvestigatePrompt,
-  candidateSignature,
-  collectScannableFiles,
-  compileMatchers,
-  computeReviewFindingId,
-  ensureReviewFindingIds,
-  evaluateReviewCoverage,
-  expandSurfaceInventory,
-  expectedFindingsForBatch,
-  extractFencedJson,
-  findingSignature,
-  generateSurfaceInventory,
-  globToRegex,
-  groundSurfaceInventory,
-  matchAnyGlob,
-  matchFileContent,
-  matchGlob,
-  mergeCandidates,
-  mergeFindings,
-  newRunId,
-  normalizeRelPath,
-  normalizeTitle,
-  parseInvestigateResults,
-  parseRefusalReport,
-  parseRevalidateVerdicts,
-  reconcileVerdicts,
-  runFileReviewPipeline,
-  runReviewProcess,
-  runReviewRevalidate,
-  runReviewScan,
-  validateSurfaceInventory
-} from "./chunk-Z5FA2XOX.js";
-import "./chunk-RRMJC3ZE.js";
-import "./chunk-H2FFLZNK.js";
+  defaultDmesgOutPath,
+  detectOutOfBandModuleLoad,
+  loadKernelVmConfigFromEnv,
+  prepareKernelVmArtifacts,
+  verifyKernelFinding,
+  writeProofFileReadOnly
+} from "./chunk-XFCTUKXR.js";
 import {
-  DEFAULT_STEP_TIMEOUT_MS,
-  DISCLOSURE_STATUSES,
-  IllegalTransitionError,
-  IncompleteEvidenceError,
-  MAX_CAPTURE_BYTES,
-  PUBLIC_STATUSES,
-  TERMINAL_STATUSES,
-  UnreproducedFindingError,
-  UnverifiedFindingError,
-  allowedNextStatuses,
-  assembleBundleIndex,
-  assembleEvidencePack,
-  assembleReproducibilityManifest,
-  canTransition,
-  composeExploitSession,
-  composeStepSession,
-  createDisclosureRecord,
-  decideFilingState,
-  dropSlug,
-  droppedFilename,
-  evidenceKindForFinding,
-  executePocSteps,
-  extractSiblingFix,
-  formatDroppedReason,
-  isDisclosureWorthy,
-  isFreezeAvailable,
-  isPubliclyDisclosed,
-  renderExploitScreenshot,
-  renderReproducibilityManifest,
-  renderVendorNotificationMarkdown,
-  setRuntimeDeps,
-  transition
-} from "./chunk-U5FLXGHT.js";
+  FixTemplateRegistry,
+  buildBranchName,
+  buildHypothesesMarkdown,
+  buildPrBody,
+  buildPrTitle,
+  buildReproReadme,
+  createDefaultFixTemplateRegistry,
+  emitFindingsAsPRs,
+  hardCodedSecretTemplate,
+  integerTruncationGuardTemplate,
+  isReproduced,
+  loadSourceFixProjectInputs,
+  missingInputValidationTemplate,
+  planSourceFixPublication,
+  publishSourceFixDraftPR,
+  renderUnifiedDiff,
+  resolveSourceFixRepository,
+  runSourceFix,
+  saveSourceFixProjectInputs,
+  templateIdForCategory
+} from "./chunk-HR2TU42B.js";
 import {
-  Cvss4ParseError,
-  EmptyPocError,
-  REPORT_PLATFORMS,
-  computeCvss4BaseScore,
-  cvss4Severity,
-  detectVersionRange,
-  extractFileRefs,
-  formatCvss4Vector,
-  formatCweSection,
-  formatPatchStatusSection,
-  formatVersionRangeLine,
-  parseCvss4Vector,
-  redactSensitiveHeaders,
-  renderAdvisoryMarkdown,
-  renderCvssSection,
-  renderPlatformReport,
-  reportTemplate,
-  scoreCvss4Vector,
-  suggestCvss,
-  suggestCvss4,
-  suggestCwesForCategory,
-  verifyAgainstRef
-} from "./chunk-WEBMRWEG.js";
+  ANALYTICS_ENDPOINT,
+  ANALYTICS_LEVEL_ENV,
+  ANALYTICS_SCHEMA_VERSION,
+  ANALYTICS_SENT_LOG_FILENAME,
+  CONTRIBUTION_ENDPOINT,
+  CloudAuthError,
+  CloudAuthMissingError,
+  DEFAULT_CLOUD_HOST,
+  DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
+  DEFAULT_WORKBENCH_BROKER_LIMITS,
+  RunCapture,
+  RunContributionClient,
+  analyticsPipeline,
+  appendImprovementLedgerEntry,
+  approveSmolvmWorkbenchImage,
+  canonicalEvolutionJson,
+  configureRunContributionsFromEnvironment,
+  contributionChunkSchema,
+  contributionClientPolicySchema,
+  contributionManifestSchema,
+  contributionPurposeSchema,
+  contributionReceiptSchema,
+  contributionTransitionSchema,
+  currentRunContribution,
+  evaluateImprovementPromotion,
+  evaluateVerificationSpec,
+  eventBus,
+  getConfiguredRunContributionClient,
+  getSmolvmWorkbenchStatus,
+  getWorkbenchBrokerLimits,
+  isAdmittedSmolvmWorkbench,
+  levelAtLeast,
+  loadCloudCredentials,
+  loadEvolutionConfigFile,
+  maybeSubscribeAnalyticsPipeline,
+  parseEvolutionConfig,
+  presentationEventSink,
+  redactRecordStrings,
+  resolveAnalyticsLevel,
+  resolveSmolvmRuntime,
+  resolveWorkbenchBrokerImage,
+  runWorkbenchBrokerProgram,
+  startWorkbenchBroker,
+  verifyImprovementLedger,
+  withRunContribution
+} from "./chunk-RE5EZDG2.js";
 import {
-  classifyReferences,
-  findCveArtifacts,
-  findRedHatTrackerUrls,
-  findUbuntuTrackerUrls,
-  normaliseCveId,
-  parseGhsaResponse,
-  parseNvdResponse as parseNvdResponse2,
-  parseOsvResponse as parseOsvResponse2,
-  parseRedHatTracker,
-  parseUbuntuTracker,
-  scoreCodeCandidate,
-  scoreRepoCandidate
-} from "./chunk-SVJEDVYK.js";
+  generateConformanceModel,
+  judgeHttpDivergence,
+  runHttpConformanceCheck,
+  structurallyValidateConformanceModel
+} from "./chunk-SQCBHFWN.js";
 import {
-  ScopePolicy,
-  extractUrls,
-  loadScope,
-  matchUrl
-} from "./chunk-57ZENEX2.js";
+  createLiveHttpSender
+} from "./chunk-GVD6SJGH.js";
 import {
   DEFAULT_ENSEMBLE_MODELS,
   OpenRouterRuntime,
@@ -1254,54 +1120,10 @@ import {
   detectAvailableRuntimes,
   getRuntimeInfo,
   pickRuntimeForStage
-} from "./chunk-N7BOUYEV.js";
-import {
-  CloudAuthError,
-  CloudAuthMissingError,
-  CloudClient,
-  CloudError,
-  CloudForbiddenError,
-  CloudNetworkError,
-  CloudUnauthorizedError,
-  DEFAULT_CLOUD_HOST,
-  FEATURE_PRESETS,
-  LlmApiRuntime,
-  MAX_BUFFERED,
-  MAX_CODE_LENGTH,
-  MAX_FIELDS,
-  MAX_FIELD_VALUE_LENGTH,
-  MAX_MESSAGE_LENGTH,
-  OperatorAbortError,
-  QuotaExhaustedError,
-  _resetDiagnosticsForTests,
-  applyFeaturePreset,
-  applyFeaturePresetFromEnv,
-  claimDiagnostics,
-  diag,
-  features,
-  formatDiagnosticLine,
-  isDiagnosticsClaimed,
-  loadCloudCredentials,
-  parseUsageLimitReached,
-  recentDiagnostics,
-  resolveFeaturePreset,
-  stderrDiagnosticSink,
-  subscribeDiagnostics
-} from "./chunk-UR4ELX2Y.js";
+} from "./chunk-5MWAG3FT.js";
 import {
   ProcessRuntime
-} from "./chunk-ATATQACO.js";
-import {
-  cloudEventSink,
-  eventBus,
-  isCloudEventSinkActive,
-  maybeSubscribeCloudEventSink,
-  presentationEventSink
-} from "./chunk-ADOLI6DT.js";
-import {
-  estimateCost
-} from "./chunk-6L26OBWI.js";
-import "./chunk-YLMN3N25.js";
+} from "./chunk-W6UWZFKL.js";
 import {
   AD_ANALYZERS_BY_ID,
   buildAdGraph,
@@ -1309,7 +1131,7 @@ import {
   ingestBloodHoundJson,
   parseBloodHoundFile,
   runAdGraphAnalysis
-} from "./chunk-6LKRLK2R.js";
+} from "./chunk-FHC2B7LN.js";
 import {
   AZ_EDGE_TECHNIQUES,
   ENTRA_PATH_ANALYZERS,
@@ -1402,7 +1224,7 @@ import {
   tier0TargetIds,
   tokenFingerprint,
   writebackEnabled
-} from "./chunk-SAFFWQW4.js";
+} from "./chunk-DKSCN2AB.js";
 import {
   AD_ANALYZERS,
   AD_EDGE_TECHNIQUES,
@@ -1420,7 +1242,82 @@ import {
   reachableFrom,
   reachableTo,
   shortestPaths
-} from "./chunk-VQG4FT5D.js";
+} from "./chunk-UFHN6RIU.js";
+import "./chunk-VNRY6AWF.js";
+import {
+  DISCLOSURE_STATUSES,
+  IllegalTransitionError,
+  IncompleteEvidenceError,
+  PUBLIC_STATUSES,
+  TERMINAL_STATUSES,
+  UnreproducedFindingError,
+  UnverifiedFindingError,
+  allowedNextStatuses,
+  assembleBundleIndex,
+  assembleEvidencePack,
+  assembleReproducibilityManifest,
+  canTransition,
+  composeExploitSession,
+  composeStepSession,
+  createDisclosureRecord,
+  decideFilingState,
+  dropSlug,
+  droppedFilename,
+  evidenceKindForFinding,
+  extractSiblingFix,
+  formatDroppedReason,
+  isDisclosureWorthy,
+  isFreezeAvailable,
+  isPubliclyDisclosed,
+  renderExploitScreenshot,
+  renderReproducibilityManifest,
+  renderVendorNotificationMarkdown,
+  transition
+} from "./chunk-TO35Y326.js";
+import {
+  DEFAULT_STEP_TIMEOUT_MS,
+  MAX_CAPTURE_BYTES,
+  executePocSteps,
+  setRuntimeDeps
+} from "./chunk-IXT64DV5.js";
+import {
+  Cvss4ParseError,
+  EmptyPocError,
+  REPORT_PLATFORMS,
+  computeCvss4BaseScore,
+  cvss4Severity,
+  detectVersionRange,
+  extractFileRefs,
+  formatCvss4Vector,
+  formatCweSection,
+  formatPatchStatusSection,
+  formatVersionRangeLine,
+  parseCvss4Vector,
+  redactSensitiveHeaders,
+  renderAdvisoryMarkdown,
+  renderCvssSection,
+  renderPlatformReport,
+  reportTemplate,
+  scoreCvss4Vector,
+  suggestCvss,
+  suggestCvss4,
+  suggestCwesForCategory,
+  verifyAgainstRef
+} from "./chunk-UELXHK2Y.js";
+import {
+  classifyReferences,
+  findCveArtifacts,
+  findRedHatTrackerUrls,
+  findUbuntuTrackerUrls,
+  normaliseCveId,
+  parseGhsaResponse,
+  parseNvdResponse as parseNvdResponse2,
+  parseOsvResponse as parseOsvResponse2,
+  parseRedHatTracker,
+  parseUbuntuTracker,
+  scoreCodeCandidate,
+  scoreRepoCandidate
+} from "./chunk-LPTRPRZR.js";
 import {
   detectTargetType,
   expandHomePath,
@@ -1428,9 +1325,104 @@ import {
   isExplicitLocalTargetPath,
   prepare,
   resolveLocalTargetPath
-} from "./chunk-WU6AFRAZ.js";
-import "./chunk-DW5UWPFY.js";
-import "./chunk-IR537GON.js";
+} from "./chunk-V36HVTUL.js";
+import "./chunk-4VGLO2YS.js";
+import "./chunk-6YNKRUMC.js";
+import {
+  BUILTIN_PLUGINS,
+  DEFAULT_CALL_TIMEOUT_MS,
+  DEFAULT_HANDSHAKE_TIMEOUT_MS,
+  ENABLEMENT_DIR_MODE,
+  ENABLEMENT_DIR_NAME,
+  ENABLEMENT_FILE_MODE,
+  ENABLEMENT_SCHEMA_VERSION,
+  FrameReader,
+  MAX_FRAME_CHARS,
+  MAX_INFLIGHT_CALLS,
+  MAX_PROTOCOL_ERRORS,
+  MAX_RESULT_CHARS,
+  MAX_TOOLS_IN_LIST,
+  PLUGINS_ROOT_NAME,
+  PLUGIN_CAPABILITIES,
+  PLUGIN_DIR_MODE,
+  PLUGIN_ENTRY_FILE,
+  PLUGIN_FILE_MODE,
+  PLUGIN_MANIFEST_FILE,
+  PROTOCOL_VERSION,
+  PluginHost,
+  RESULT_TRUNCATION_MARKER,
+  SCOPE_PLUGIN_ID,
+  ScopePolicy,
+  aggregateCapabilities,
+  buildPluginEnv,
+  clampResultContent,
+  coerceEnablementRecord,
+  decodeHostMessage,
+  decodePluginMessage,
+  disable,
+  emptyEnablement,
+  enable,
+  enablementDir,
+  enablementFilePath,
+  encodeHostMessage,
+  encodePluginMessage,
+  ensurePluginsRoot,
+  extractUrls,
+  gateFlagsFor,
+  getBuiltinPlugin,
+  getScopeEnforcementState,
+  isEnabled,
+  isSafePluginId,
+  isScopeEnforcementEnabled,
+  listInstalledPluginIds,
+  loadScope,
+  loadableIds,
+  manifestDrift,
+  matchUrl,
+  nodeChildSpawner,
+  pluginsRootDir,
+  readEnablement,
+  readInstalledPlugin,
+  reconcile,
+  satisfiesMinVersion,
+  validatePluginManifest,
+  withScopeEnforcement,
+  writeEnablement
+} from "./chunk-7DEHG7YT.js";
+import "./chunk-5IBCBQEH.js";
+import {
+  CodexCatalogRefreshError,
+  loadCodexModelCatalog
+} from "./chunk-IO7R7WBM.js";
+import {
+  FEATURE_PRESETS,
+  LlmApiRuntime,
+  MAX_BUFFERED,
+  MAX_CODE_LENGTH,
+  MAX_FIELDS,
+  MAX_FIELD_VALUE_LENGTH,
+  MAX_MESSAGE_LENGTH,
+  OperatorAbortError,
+  QuotaExhaustedError,
+  _resetDiagnosticsForTests,
+  applyFeaturePreset,
+  applyFeaturePresetFromEnv,
+  claimDiagnostics,
+  diag,
+  features,
+  formatDiagnosticLine,
+  isDiagnosticsClaimed,
+  parseUsageLimitReached,
+  recentDiagnostics,
+  resolveFeaturePreset,
+  stderrDiagnosticSink,
+  subscribeDiagnostics
+} from "./chunk-2GV4HQKE.js";
+import {
+  estimateCost
+} from "./chunk-76KSBWOQ.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
 export {
   ACTION_LOG_ARGS_MAX,
   ACTION_LOG_ARG_VALUE_MAX,
@@ -1446,6 +1438,7 @@ export {
   BENIGN_MAX_CLASS,
   BROADCAST_ID,
   BUILTIN_GUARDS,
+  BUILTIN_PLUGINS,
   BenchCaseSchema,
   BenchIntegrationRegistry,
   BenchManifestSchema,
@@ -1462,14 +1455,10 @@ export {
   COMPACT_DETAIL_CHARS,
   CONSERVATIVE_JITTER_MS,
   CONSERVATIVE_RPS,
-  CORE_REVIEW_PROMPT,
+  CONTRIBUTION_ENDPOINT,
   CloudAuthError,
   CloudAuthMissingError,
-  CloudClient,
-  CloudError,
-  CloudForbiddenError,
-  CloudNetworkError,
-  CloudUnauthorizedError,
+  CodexCatalogRefreshError,
   Cpg,
   CraftMemoryStore,
   CraftStagedOrchestrator,
@@ -1479,22 +1468,20 @@ export {
   DEFAULT_CONCURRENCY,
   DEFAULT_ENSEMBLE_MODELS,
   DEFAULT_HANDSHAKE_TIMEOUT_MS,
-  DEFAULT_IGNORE_DIR_GLOBS,
-  DEFAULT_IGNORE_FILE_GLOBS,
   DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
   DEFAULT_JOURNAL_SIDECAR_THRESHOLD_BYTES,
   DEFAULT_MAX_DURATION_MS,
+  DEFAULT_MAX_TOOL_ITERATIONS,
   DEFAULT_MCP_PATHS,
   DEFAULT_RACE_WIDEN_DELAY_MS,
   DEFAULT_REGISTRY_URL,
-  DEFAULT_REVIEW_COVERAGE_POLICY,
-  DEFAULT_REVIEW_MATCHERS,
   DEFAULT_SEED_DIRS,
   DEFAULT_SPEC_PATHS,
   DEFAULT_STEP_TIMEOUT_MS,
   DEFAULT_STRATEGIES,
   DEFAULT_SUBDOMAIN_WORDLIST,
   DEFAULT_TARGET_SUBSYSTEMS,
+  DEFAULT_WORKBENCH_BROKER_LIMITS,
   DETECTOR_REGISTRY,
   DETECTOR_REGISTRY_BY_ID,
   DISCLOSURE_STATUSES,
@@ -1562,6 +1549,8 @@ export {
   IntelCache,
   JOURNAL_SCHEMA_VERSION,
   KERNELCTF_TIER1_RACE_GRID,
+  KERNEL_FUNCTION_BATCH_SIZE,
+  KERNEL_FUNCTION_LABELS,
   KERNEL_RUN_PROGRAM_MAX_BYTES,
   KERNEL_RUN_TOOL_DEFINITION,
   KNOWN_ATTACK_SURFACES,
@@ -1636,7 +1625,6 @@ export {
   RECENCY_DETECTORS_ALL,
   RECENCY_DETECTORS_FULL,
   RECENCY_REACHABLE_ALLOWLIST,
-  REFUSAL_FOLLOWUP_PROMPT,
   REPORT_PLATFORMS,
   RESULT_TRUNCATION_MARKER,
   ROLE_TEMPLATE_IDS,
@@ -1644,26 +1632,25 @@ export {
   RUNTIME_REGISTRY,
   RateLimiter,
   ResearchAdapterRegistry,
-  ReviewLimitError,
-  ReviewStore,
+  RunCapture,
+  RunContributionClient,
   SCOPE_DEPENDENT_BASH_GUARDS,
   SCOPE_GUARDS_INERT_EVENT,
+  SCOPE_PLUGIN_ID,
   SELF_EXTENSION_SETTING_DEF,
   SEMANTIC_COSMETIC_RUBRIC,
-  SLUG_NOTES,
   STAGE_ACTION_HISTORY_CAP,
-  STALE_LOCK_MS,
   STANDARD_RPS,
   SYNTH_TOOL,
   SYNTH_TOOL_NAME,
   ScanCostLedger,
   ScopePolicy,
   SelfExtensionRegistry,
+  SmolvmRunner,
   SourceAuditTargetSchema,
   SuiteOracleObjectiveSchema,
   SuiteTaskTargetSchema,
   TECHNIQUE_LIBRARY,
-  TECH_HIGHLIGHTS,
   TERMINAL_STATUSES,
   TIER0_GRAPH_PERMISSIONS,
   TIER0_ROLE_TEMPLATE_IDS,
@@ -1704,6 +1691,7 @@ export {
   addFinding,
   adjudicate,
   advisorySweep,
+  agentTaskLabel,
   agenticScan,
   aggregateCapabilities,
   aggregateScorecard,
@@ -1721,7 +1709,6 @@ export {
   analyzeToken,
   apiSpecToAssets,
   appFixVariantsToSeedFindings,
-  appendAnalysis,
   appendHuntClaim,
   appendImprovementLedgerEntry,
   appendLedgerEntry,
@@ -1737,6 +1724,7 @@ export {
   applyVerificationToFinding,
   approveEvolutionCandidate,
   approveObservation,
+  approveSmolvmWorkbenchImage,
   appsecArchetypeDigest,
   appsecArchetypeToFinderLens,
   appsecArchetypesPath,
@@ -1750,15 +1738,12 @@ export {
   assembleBundleIndex,
   assembleEvidencePack,
   assembleReproducibilityManifest,
-  assembleReviewPrompt,
   assertReadOnlyAction,
   assertionFromStepExpect,
   assessEscalation,
   assumptionsToHuntPlan,
   atlasTechniquesForCategory,
   atlasTechniquesForEvent,
-  atomicWriteFile,
-  atomicWriteFileSync,
   attackPrompt,
   attemptExploitabilityUpgrade,
   attemptWinRace,
@@ -1769,7 +1754,6 @@ export {
   automationVerdict,
   autonomousClimb,
   availableRefuterCandidates,
-  batchCandidates,
   blindVerifyPrompt,
   bootedCacheKey,
   boundaryCrossings,
@@ -1797,7 +1781,6 @@ export {
   buildIntelDossier,
   buildInvariantHuntContext,
   buildInvariantModel,
-  buildInvestigatePrompt,
   buildKernelPromotionEnvelope,
   buildKernelVerifyInitialPrompt,
   buildKernelVerifySystemPrompt,
@@ -1827,7 +1810,6 @@ export {
   canTransition,
   candidateGrepPatterns,
   candidateReferenceTokens,
-  candidateSignature,
   canonicalEntryPayload,
   canonicalEvolutionJson,
   canonicalProposalJson,
@@ -1838,6 +1820,7 @@ export {
   categoryToWebKind,
   shouldWeaponize as ceilingClearsWeaponizeBar,
   changedFilesInRange,
+  checkAlreadyFixed,
   checkFixPresentInTarget,
   checkNotYetIntroduced,
   checkNovelty,
@@ -1864,15 +1847,12 @@ export {
   classifyUserspacePrimitive,
   classifyVerifyOutcome,
   clearSkillRegistry,
-  cloudEventSink,
   clusterCandidates,
   coerceEnablementRecord,
-  collectScannableFiles,
   collectScopeFiles,
   collectTenantSnapshot,
   compareScorecards,
   compileAndRunReproducer,
-  compileMatchers,
   composeExploitSession,
   composeGadgetSetup,
   composeGate,
@@ -1882,11 +1862,17 @@ export {
   computeEstablisherSets,
   computeEstablisherWrappers,
   computePriorityScore,
-  computeReviewFindingId,
   computeSurfaceScore,
+  configureRunContributionsFromEnvironment,
   confirmedMissToCandidate,
   connectMcpServers,
   consolidateMemory,
+  contributionChunkSchema,
+  contributionClientPolicySchema,
+  contributionManifestSchema,
+  contributionPurposeSchema,
+  contributionReceiptSchema,
+  contributionTransitionSchema,
   controlRungForDemo,
   corpusV1Path,
   countCommits,
@@ -1897,10 +1883,12 @@ export {
   crashSeverity,
   crashSignatureFromReport,
   crashSignatureFromText,
+  crashSummaryFromTriage,
   crashToFinding,
   crashTypeToCategory,
   createAgenticScanAdapter,
   createBenchIntegrationRegistry,
+  createConsoleJevRuntime,
   createConsoleRuntime,
   createConsoleSession,
   createCoreBenchIntegration,
@@ -1929,11 +1917,13 @@ export {
   createScanContext,
   createSessionObjectiveService,
   createSmolvmEvolutionSandbox,
+  createSmolvmPocTargetRunner,
   createStubSignatureVerifier,
   createVariantExecutionFactory,
   createXnuFuzzReceipt,
   crossCheckAssumptions,
   crossFamilyRefuteEnabled,
+  currentRunContribution,
   cvss4Severity,
   decideAddressing,
   decideFilingState,
@@ -2016,7 +2006,6 @@ export {
   encodePluginMessage,
   encodeProgram,
   ensurePluginsRoot,
-  ensureReviewFindingIds,
   entraAnchors,
   entraNodeId,
   enumerateAttackSurfaces,
@@ -2034,7 +2023,6 @@ export {
   evaluateGuards,
   evaluateImprovementPromotion,
   evaluateRegression,
-  evaluateReviewCoverage,
   evaluateSignature,
   evaluateVerificationSpec,
   eventBus,
@@ -2047,8 +2035,6 @@ export {
   executeKernelRun,
   executePocSteps,
   expandHomePath,
-  expandSurfaceInventory,
-  expectedFindingsForBatch,
   extractAttributionFromScopeJson,
   extractCFromLlmOutput,
   extractCorpus,
@@ -2056,10 +2042,10 @@ export {
   extractDupeSignature,
   extractEngagementFromScopeJson,
   extractFeatures,
-  extractFencedJson,
   extractFileRefs,
   extractInlineCodeBlock,
   extractKernelFindingMetadata,
+  extractKernelFunctions,
   extractResponseText,
   extractSiblingFix,
   extractSpecInvariants,
@@ -2100,7 +2086,6 @@ export {
   findUbuntuTrackerUrls,
   findUnconstrainedDelegation,
   findViolationsDataflow,
-  findingSignature,
   findingToQuery,
   findingTokens,
   fnv1a64,
@@ -2137,24 +2122,25 @@ export {
   generateRaceSmellCandidates,
   generateRemediation,
   generateRemediationWithLLM,
-  generateSurfaceInventory,
   generateSyzChoiceWeights,
   generateVariantCandidates,
-  getCloudSinkConfig,
+  getBuiltinPlugin,
+  getConfiguredRunContributionClient,
   getDetectorById,
   getEvalCategories,
   getObservation,
   getProgram,
   getRuntimeInfo,
+  getScopeEnforcementState,
   getSkillById,
+  getSmolvmWorkbenchStatus,
   getStrategy,
   getStructuredScopes,
   getTechnique,
   getToolsForRole,
+  getWorkbenchBrokerLimits,
   getWorkspaceHarnessTrust,
-  globToRegex,
   grantedPermissionNames,
-  groundSurfaceInventory,
   guardApprovalUnavailable,
   guardNetworkRequiresScope,
   guardPackage,
@@ -2203,7 +2189,7 @@ export {
   instantiateGadget,
   integerTruncationGuardTemplate,
   introspectExploitConfig,
-  isCloudEventSinkActive,
+  isAdmittedSmolvmWorkbench,
   isConfirmed,
   isCrossApiAssumption,
   isCrossLanguageHint,
@@ -2225,6 +2211,7 @@ export {
   isReproduced,
   isReproducedMemCorruption,
   isSafePluginId,
+  isScopeEnforcementEnabled,
   isScopeRequired,
   isValidPeerId,
   isVariable,
@@ -2258,6 +2245,7 @@ export {
   loadAssumptionModel,
   loadChromiumArchetypes,
   loadCloudCredentials,
+  loadCodexModelCatalog,
   loadCpg,
   loadEvolutionConfigFile,
   loadEvolutionRegistry,
@@ -2276,6 +2264,7 @@ export {
   loadManifest,
   loadScope,
   loadSkillRegistry,
+  loadSourceFixProjectInputs,
   loadVulnsFeedFromDir,
   loadableIds,
   localMirrors,
@@ -2316,10 +2305,7 @@ export {
   markProcessed,
   markerFired,
   markerLine,
-  matchAnyGlob,
   matchCrashSignature,
-  matchFileContent,
-  matchGlob,
   matchNegative,
   matchTriggers,
   matchUrl,
@@ -2329,14 +2315,11 @@ export {
   maxMemSeverity,
   maxRung,
   maybeSubscribeAnalyticsPipeline,
-  maybeSubscribeCloudEventSink,
   maybeSubscribeOperationalEventSink,
   memCorruptionVerdict,
   memPrimitiveToCategory,
   memoryTokens,
-  mergeCandidates,
   mergeCraftEvidence,
-  mergeFindings,
   mergeHarvestedMisses,
   mergeIntel,
   migrateJournalEntry,
@@ -2355,7 +2338,6 @@ export {
   networkScopeRequiredRefusal,
   newCorrelationId,
   newMessageId,
-  newRunId,
   nodeChildSpawner,
   nodeOrStub,
   normaliseCveId,
@@ -2366,10 +2348,8 @@ export {
   normalizeGuid,
   normalizeId,
   normalizeProposalPath,
-  normalizeRelPath,
   normalizeStageAction,
   normalizeStageEndDetail,
-  normalizeTitle,
   objectTypeToken,
   objectiveOracle,
   objectiveOracleEvaluatorAttestation,
@@ -2401,7 +2381,6 @@ export {
   parseHarnessGenerationSpec,
   parseNvdResponse as parseIntelNvdResponse,
   parseOsvResponse as parseIntelOsvResponse,
-  parseInvestigateResults,
   parseKcsanReport,
   parseKernelConfig,
   parseListing,
@@ -2416,10 +2395,8 @@ export {
   parseOsvResponse2 as parseOsvResponse,
   parseRateLimitFlag,
   parseRedHatTracker,
-  parseRefusalReport,
   parseRegistryIndex,
   parseRetryAfter,
-  parseRevalidateVerdicts,
   parseSanitizerLog,
   parseSeedFindings,
   parseSelectorMapText,
@@ -2441,11 +2418,11 @@ export {
   planArchetypeSweep,
   planChains,
   planSingleShardRun,
+  planSourceFixPublication,
   planSpecdriftHypotheses,
   planChains as planWebChains,
   pluginsRootDir,
   pocFabricatesSplat,
-  postFinding,
   prepare,
   prepareKernelVmArtifacts,
   prepareValidationCorpus,
@@ -2468,15 +2445,20 @@ export {
   proposeEvolutionEdits,
   provePriming,
   provenExploitabilityScore,
+  publishSourceFixDraftPR,
   queryGitHubAdvisories,
   queryOsvAdvisories,
   raceStrategies,
   raceWidenEnv,
   raceWithDefaults,
+  radarCandidatesToSeedFindings,
   rankAndDedupeFoxguardLeads,
   rankBugsByProvenRung,
   rankCandidates,
+  rankCrashesWithJev,
   rankDanger,
+  rankKernelCommitsWithJev,
+  rankKernelHypothesesWithJev,
   rankResearchProposals,
   ratchet,
   reachabilityGate,
@@ -2492,7 +2474,6 @@ export {
   readUnstableDetector,
   recentDiagnostics,
   reconcile,
-  reconcileVerdicts,
   recordEvolutionVersion,
   redactRecordStrings,
   redactSecrets,
@@ -2547,7 +2528,10 @@ export {
   resolveMcpEndpoint,
   resolveNovelty,
   resolveRange,
+  resolveSmolvmRuntime,
+  resolveSourceFixRepository,
   resolveTargetHistoryInput,
+  resolveWorkbenchBrokerImage,
   retireArchetype,
   reviewAgentPrompt,
   reviewKernelCrashSubsystems,
@@ -2574,13 +2558,13 @@ export {
   runEval,
   runEvolution,
   runExploitScan,
-  runFileReviewPipeline,
   runHttpConformanceCheck,
   runHuntScan,
   runHybridPathAnalysis,
   runIdentityAssessment,
   runJsRecon,
   runKernelExploitChain,
+  runKernelSourceJevPrepass,
   runKernelVariantHunt,
   runLensSynthesisLoop,
   runLlmIpiAudit,
@@ -2597,12 +2581,11 @@ export {
   runRecon,
   runReproductionBundle,
   runResearch,
-  runReviewProcess,
-  runReviewRevalidate,
-  runReviewScan,
   runSecondAudit,
   runSecureProject,
   runSelfConsistencyVerify,
+  runSmolvmPocSteps,
+  runSmolvmWorkbench,
   runSourceFix,
   runSpecdriftPlan,
   runSpecdriftScan,
@@ -2615,6 +2598,7 @@ export {
   runTournament,
   runUserspaceFuzzLoop,
   runWeaponization,
+  runWorkbenchBrokerProgram,
   rungAtLeast,
   rungRankingEnabled,
   sameCrash,
@@ -2622,12 +2606,14 @@ export {
   sanitizerOutputFromCraftResult,
   satisfiesMinVersion,
   saveLedger,
+  saveSourceFixProjectInputs,
   scaffoldTier1Harness,
   scaffoldTier2Harness,
   scan,
   scanDualViewContexts,
   scanForModuleInit,
   scanForPatchGapCandidates,
+  scanRepoCommitsWithJev,
   scanReportToBenchResult,
   scanViolatingContexts,
   scopeRequiredRefusal,
@@ -2680,6 +2666,7 @@ export {
   staleHuntClaims,
   stampDeploymentContext,
   startEvolutionCanary,
+  startWorkbenchBroker,
   staticProbe,
   stderrDiagnosticSink,
   storeAssumptionModel,
@@ -2702,6 +2689,7 @@ export {
   syncLoreMirror,
   synthesizeArchetypes,
   syzChoiceWeightsFromPlan,
+  syzWeightingContextFromJev,
   syzbotQueueBrief,
   tableMetrics,
   tallyConsensus,
@@ -2720,6 +2708,7 @@ export {
   toOsvEcosystem,
   toScopeFile,
   toScopeJson,
+  toToolContextJevRuntime,
   toVerifyVerdict,
   tokenFingerprint,
   toolCallPreview,
@@ -2742,7 +2731,6 @@ export {
   validateProposalAttempt,
   validateProposalReplay,
   validateResearchProposal,
-  validateSurfaceInventory,
   validateUpdateTodosArgs,
   validateXnuFuzzReceipt,
   variableLengthSchedule,
@@ -2766,6 +2754,8 @@ export {
   widenEnvFor,
   wilson95,
   withEnvOverrides,
+  withRunContribution,
+  withScopeEnforcement,
   withVariantFeatureFlags,
   witnessAssumptionViolation,
   witnessDualViewContexts,