0sec-cli 0.22.0 → 0.22.1

package/chunks/{chunk-SJBCK2EI.js → chunk-HHPWRY2M.js}

@@ -19,7 +19,7 @@ import {
   searchPublicReports,
   searchSimilar,
   searchTargetHistory
-} from "./chunk-TZFIAMWZ.js";
+} from "./chunk-YL6YAGLL.js";
 import {
   buildPlaybookInjection,
   classifyPromptLayerImpact,
@@ -34,7 +34,7 @@ import {
   loadJournal,
   rehydrateContext,
   renderSeedMessages
-} from "./chunk-OAYUPGF6.js";
+} from "./chunk-NLH4LMWH.js";
 import {
   DEFAULT_WORKBENCH_BROKER_LIMITS,
   analyticsPipeline,
@@ -81,7 +81,7 @@ import {
   summarizeScannerResult,
   superviseChild,
   withRunContribution
-} from "./chunk-RE5EZDG2.js";
+} from "./chunk-OHHCGDJ2.js";
 import {
   acquireHostToken,
   aggregateVerdict,
@@ -112,7 +112,7 @@ import {
   sanitizeUntrustedToolResult,
   validatePluginManifest,
   withScopeEnforcement
-} from "./chunk-7DEHG7YT.js";
+} from "./chunk-X7LAEEUW.js";
 import {
   allowlistedChildEnv,
   sanitizedEnv
@@ -121,7 +121,7 @@ import {
   LlmApiRuntime,
   diag,
   features
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 import {
   DEFAULT_ALLOW_MODEL_SELF_EXTENSION,
   DEFAULT_AUTONOMY_MODE,
@@ -134,7 +134,7 @@ import {
   homeStateDir,
   jevConfigFromEnvironment,
   resolveIdentities
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 import {
   external_exports
 } from "./chunk-VIT5ALXF.js";
@@ -11945,7 +11945,7 @@ async function executeEntraPosture(ctx, args) {
   const { runIdentityAssessment } = await import("./identity-62SVRW4H.js");
   let scope;
   if (typeof args.scope === "string" && args.scope.trim()) {
-    const { ScopePolicy: ScopePolicy2 } = await import("./scope-WXI46UHJ.js");
+    const { ScopePolicy: ScopePolicy2 } = await import("./scope-QWY4VQZ7.js");
     try {
       scope = ScopePolicy2.fromJsonFile(scopedPath(ctx, args.scope.trim()));
     } catch (error) {
@@ -11991,7 +11991,7 @@ async function executeEntraPosture(ctx, args) {
   };
 }
 async function executeAssembleAdvisory(_ctx, args) {
-  const { osecDB } = await import("./dist-5YHYNLI3.js");
+  const { osecDB } = await import("./dist-FSS7MBDF.js");
   const { renderAdvisoryMarkdown, assembleEvidencePack, decideFilingState, renderVendorNotificationMarkdown, EmptyPocError, UnreproducedFindingError } = await import("./disclose-LDNKAVRH.js");
   const dbPath = typeof args.db_path === "string" && args.db_path.trim() ? args.db_path.trim() : void 0;
   const scanId = typeof args.scan_id === "string" && args.scan_id.trim() ? args.scan_id.trim() : void 0;
@@ -12098,7 +12098,7 @@ function rowToAdvisoryFinding(row) {
   return finding;
 }
 async function executeCveLookup(_ctx, args) {
-  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-PYZ3RU3O.js");
+  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-MFKT6OI4.js");
   const rawCve = String(args.cve ?? args.cve_id ?? "").trim();
   if (!rawCve)
     return errResult("`cve` is required, e.g. CVE-2024-1086");
@@ -13620,8 +13620,8 @@ function refuseOutOfScope(ctx, url) {
   return null;
 }
 async function loadPersistedFinding(findingId, dbPathArg) {
-  const { osecDB, resolveOsecDbPath, listOsecRunDatabasePaths } = await import("./dist-5YHYNLI3.js");
-  const { findingSchema, formatZodError } = await import("./dist-DD4H6HMQ.js");
+  const { osecDB, resolveOsecDbPath, listOsecRunDatabasePaths } = await import("./dist-FSS7MBDF.js");
+  const { findingSchema, formatZodError } = await import("./dist-BS4CY4RG.js");
   const { resolve: resolve14 } = await import("node:path");
   const { existsSync: existsSync9 } = await import("node:fs");
   const requestedId = findingId.trim();
@@ -13746,8 +13746,8 @@ async function executeVariantHunt(ctx, args) {
     return errResult2("`source` is required (a source tree path or git URL)");
   const { resolve: resolve14, join: join17 } = await import("node:path");
   const { prepare } = await import("./prepare-KYHGFWCJ.js");
-  const { generateVariantCandidates } = await import("./variant-candidates-YWZORZMK.js");
-  const { runHuntScan, makeSkepticVerifier } = await import("./hunt-scan-K6D2V3PX.js");
+  const { generateVariantCandidates } = await import("./variant-candidates-7D4F5E4H.js");
+  const { runHuntScan, makeSkepticVerifier } = await import("./hunt-scan-KZZ444V2.js");
   let resolvedTarget;
   try {
     resolvedTarget = scopedPath2(ctx, target);
@@ -13813,8 +13813,8 @@ async function executeAssumptionHunt(ctx, args) {
   const { tmpdir: tmpdir5 } = await import("node:os");
   const { prepare } = await import("./prepare-KYHGFWCJ.js");
   const { collectScopeFiles } = await import("./source-files-REHOM44I.js");
-  const { runAssumptionHunt } = await import("./assumption-mining-MFLF43IR.js");
-  const { makeSkepticVerifier } = await import("./hunt-scan-K6D2V3PX.js");
+  const { runAssumptionHunt } = await import("./assumption-mining-646LYSJY.js");
+  const { makeSkepticVerifier } = await import("./hunt-scan-KZZ444V2.js");
   let resolvedTarget;
   try {
     resolvedTarget = scopedPath2(ctx, target);
@@ -13893,8 +13893,8 @@ async function executeGenerateFix(ctx, args) {
   if (!repoArg)
     return errResult2("`repo` is required (the repo root the patch applies to) \u2014 no scoped source path is set to default to.");
   const { resolve: resolve14 } = await import("node:path");
-  const { runSourceFix } = await import("./fix-Z452M4EC.js");
-  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-G75TEWQY.js");
+  const { runSourceFix } = await import("./fix-UUKPXCFB.js");
+  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-H7YBR5IZ.js");
   const loaded = await loadPersistedFinding(findingId, typeof args.db_path === "string" ? args.db_path : void 0);
   if ("error" in loaded)
     return errResult2(loaded.error);
@@ -13995,7 +13995,7 @@ async function executeProtocolConformance(ctx, args) {
     return errResult2(denial);
   const { runHttpConformanceCheck } = await import("./http-conformance-U5F6GKYG.js");
   const { createLiveHttpSender } = await import("./http-sender-I5XFFY35.js");
-  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-G75TEWQY.js");
+  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-H7YBR5IZ.js");
   const llm = new LlmApiRuntime2({ type: "api", timeout: 6e4 });
   const send = createLiveHttpSender();
   const protocol = {
@@ -14134,7 +14134,7 @@ async function executeSafetyEval(ctx, args) {
   const denial = refuseOutOfScope(ctx, target);
   if (denial)
     return errResult2(denial);
-  const { runEval } = await import("./eval-runner-43BO2C4T.js");
+  const { runEval } = await import("./eval-runner-EMEGF24P.js");
   const categories = Array.isArray(args.categories) ? args.categories.map((c) => String(c)).filter(Boolean) : void 0;
   const timeout = typeof args.timeout_ms === "number" && args.timeout_ms > 0 ? args.timeout_ms : void 0;
   let scorecard;
@@ -14313,14 +14313,14 @@ async function executeWeaponizeKernel(ctx, args) {
   if (!hasEngagementScope(ctx)) {
     return errResult2("weaponize_kernel requires an active engagement scope. It is not available for a no-scope session.");
   }
-  const { runWeaponization, kernelVmArtifactsReady } = await import("./harness-QJJJVSG4.js");
+  const { runWeaponization, kernelVmArtifactsReady } = await import("./harness-C5HOKIEV.js");
   if (!kernelVmArtifactsReady()) {
     return errResult2("weaponize_kernel is denied: kernel-VM artifacts are not present. It only ever runs inside a DISPOSABLE kernel VM \u2014 set ZERO_KERNEL_QEMU_KERNEL and ZERO_KERNEL_QEMU_DISK to existing image paths. Refusing to run without the VM.");
   }
   const dmesg = typeof args.dmesg === "string" ? args.dmesg : "";
   if (!dmesg.trim())
     return errResult2("`dmesg` is required (the kernel crash log / KASAN splat to weaponize).");
-  const { classifyPrimitiveFromDmesg } = await import("./kernel-primitive-TKUACPKD.js");
+  const { classifyPrimitiveFromDmesg } = await import("./kernel-primitive-Z77IR7YS.js");
   const crashType = typeof args.crash_type === "string" && args.crash_type.trim() ? args.crash_type.trim() : void 0;
   const primitive = classifyPrimitiveFromDmesg(dmesg, crashType);
   const reproducer = typeof args.reproducer === "string" && args.reproducer.trim() ? args.reproducer : void 0;
@@ -14355,12 +14355,12 @@ async function executeCveAdapt(ctx, args) {
   if (!hasEngagementScope(ctx)) {
     return errResult2("cve_adapt requires an active engagement scope. It is not available for a no-scope session.");
   }
-  const { kernelVmArtifactsReady } = await import("./harness-QJJJVSG4.js");
+  const { kernelVmArtifactsReady } = await import("./harness-C5HOKIEV.js");
   if (!kernelVmArtifactsReady()) {
     return errResult2("cve_adapt is denied: its default verification boots a kernel VM and kernel-VM artifacts are not present. Set ZERO_KERNEL_QEMU_KERNEL and ZERO_KERNEL_QEMU_DISK to existing image paths. Refusing to run without the VM.");
   }
-  const { adaptAndVerify } = await import("./adapt-loop-7I57LXXR.js");
-  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-PYZ3RU3O.js");
+  const { adaptAndVerify } = await import("./adapt-loop-J6QCZZTB.js");
+  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-MFKT6OI4.js");
   const rawCve = String(args.cve ?? "").trim();
   if (!rawCve)
     return errResult2("`cve` is required, e.g. CVE-2024-1086.");
@@ -22152,7 +22152,7 @@ var ToolExecutor = class _ToolExecutor {
    * inside `runNativeAgentLoop`), so this is effectively free.
    */
   async loadSubagentDeps() {
-    const { runNativeAgentLoop: runNativeAgentLoop2 } = await import("./native-loop-2ZRJENZ3.js");
+    const { runNativeAgentLoop: runNativeAgentLoop2 } = await import("./native-loop-P6P5GYVJ.js");
     return { runNativeAgentLoop: runNativeAgentLoop2 };
   }
   subagentTools(messaging) {

package/chunks/{chunk-5MWAG3FT.js → chunk-IFME676H.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-W6UWZFKL.js";
 import {
   LlmApiRuntime
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 
 // packages/core/dist/runtime/cli-native.js
 import { spawn } from "node:child_process";

package/chunks/{chunk-LCRTAQN2.js → chunk-IVQV574Y.js}

@@ -8,7 +8,7 @@ import {
   osecDB,
   repairOsecDatabase,
   resetOsecDatabase
-} from "./chunk-VNRY6AWF.js";
+} from "./chunk-VWITLWXB.js";
 
 // packages/cli/src/commands/db.ts
 import { randomUUID } from "node:crypto";

package/chunks/{chunk-76KSBWOQ.js → chunk-KAU6NLGP.js}

@@ -45,7 +45,7 @@ import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
 function loadVersion() {
   if (true) {
-    return "0.22.0";
+    return "0.22.1";
   }
   try {
     const here = dirname(fileURLToPath(import.meta.url));

package/chunks/{chunk-EGZGZFAH.js → chunk-LGCASF2C.js}

@@ -6,7 +6,7 @@ import {
   parseRateLimitFlag,
   runBaselineWebChecks,
   runWebDiscoveryProbe
-} from "./chunk-LYUAM3TG.js";
+} from "./chunk-XCISCI4T.js";
 import {
   generatePov,
   oastConfirmedPayload,
@@ -32,7 +32,7 @@ import {
   resolveSymbol,
   runWeaponization,
   structLayout
-} from "./chunk-VMRRNRMR.js";
+} from "./chunk-7XCKYNLO.js";
 import {
   BENIGN_MAX_CLASS,
   classifyDmesgDanger,
@@ -47,7 +47,7 @@ import {
   parseSlabCache,
   rankDanger,
   sniffCrashType
-} from "./chunk-DM5C5L5D.js";
+} from "./chunk-ZKQ2I3S2.js";
 import {
   collectScopeFiles,
   countScopeFilesUpTo
@@ -66,7 +66,7 @@ import {
   resolveContainedSourcePath,
   runAssumptionHunt,
   runSubsystemInvariantHunt
-} from "./chunk-UU7PQP6N.js";
+} from "./chunk-OSBPGWTE.js";
 import {
   PROJECT_OBSERVATION_PROMPT,
   PROPOSAL_FEATURE_NAMES,
@@ -85,7 +85,7 @@ import {
   runAnalysisAgent,
   runHuntScan,
   validateResearchProposal
-} from "./chunk-UV5QWZGE.js";
+} from "./chunk-5BTJMINS.js";
 import {
   BUILTIN_GUARDS,
   DEFERRED_CONTROL_TOOL_NAMES,
@@ -170,7 +170,7 @@ import {
   webPentestAttackPrompt,
   webPentestDiscoveryPrompt,
   webPentestPrompt
-} from "./chunk-SJBCK2EI.js";
+} from "./chunk-HHPWRY2M.js";
 import {
   formatTargetHistoryForPrompt,
   normalizeRepositoryHint,
@@ -178,7 +178,7 @@ import {
   searchAdvisories,
   searchTargetHistory,
   toOsvEcosystem
-} from "./chunk-TZFIAMWZ.js";
+} from "./chunk-YL6YAGLL.js";
 import {
   parseSanitizerLog,
   verifyOracleByCategory
@@ -193,7 +193,7 @@ import {
 } from "./chunk-UEX7PFSE.js";
 import {
   resolveJournalPaths
-} from "./chunk-OAYUPGF6.js";
+} from "./chunk-NLH4LMWH.js";
 import {
   buildKernelAppend,
   buildQemuCommand,
@@ -204,7 +204,7 @@ import {
   runReproducerInKernelVm,
   verifyAcrossBoots,
   verifyKernelFinding
-} from "./chunk-XFCTUKXR.js";
+} from "./chunk-WZRVS7SB.js";
 import {
   analyticsPipeline,
   applyPatchOps,
@@ -233,7 +233,7 @@ import {
   startWorkbenchBroker,
   truncateMiddle,
   withRunContribution
-} from "./chunk-RE5EZDG2.js";
+} from "./chunk-OHHCGDJ2.js";
 import {
   runHttpConformanceCheck
 } from "./chunk-SQCBHFWN.js";
@@ -242,10 +242,10 @@ import {
   createRuntime,
   detectAvailableRuntimes,
   pickRuntimeForStage
-} from "./chunk-5MWAG3FT.js";
+} from "./chunk-IFME676H.js";
 import {
   restoreFindingReviewFields
-} from "./chunk-VNRY6AWF.js";
+} from "./chunk-VWITLWXB.js";
 import {
   canAutoSuppressDetailed,
   evidenceKindForFinding,
@@ -318,7 +318,7 @@ import {
   validatePluginManifest,
   validateThemeArtifact,
   withScopeEnforcement
-} from "./chunk-7DEHG7YT.js";
+} from "./chunk-X7LAEEUW.js";
 import {
   allowlistedChildEnv,
   sanitizedEnv
@@ -328,7 +328,7 @@ import {
   LlmApiRuntime,
   diag,
   features
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 import {
   AGENT_ACTION_ASSURANCE_SCHEMA_VERSION,
   AgentActionEvidenceManifestSchema,
@@ -351,7 +351,7 @@ import {
   resolveIdentities,
   severityRank,
   splitCost
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 import {
   ZodFirstPartyTypeKind,
   external_exports,
@@ -9750,7 +9750,7 @@ function isRepairableDbError(error2) {
 }
 async function openRunDatabase(dbPath) {
   try {
-    const { osecDB, repairOsecDatabase, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-5YHYNLI3.js");
+    const { osecDB, repairOsecDatabase, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-FSS7MBDF.js");
     const storage = resolveOsecRunStorage({ dbPath });
     try {
       return {
@@ -15780,7 +15780,7 @@ var MemoryStore = class {
   async db() {
     if (this.dbHandle)
       return this.dbHandle;
-    const mod = await import("./dist-5YHYNLI3.js");
+    const mod = await import("./dist-FSS7MBDF.js");
     const instance = new mod.osecDB(this.dbPath);
     this.dbHandle = instance;
     return this.dbHandle;
@@ -24187,7 +24187,7 @@ async function agenticScanInternal(opts) {
   }
   const runState = await (async () => {
     try {
-      const { osecDB, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-5YHYNLI3.js");
+      const { osecDB, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-FSS7MBDF.js");
       const storage2 = resolveOsecRunStorage({
         dbPath,
         runId: resumeScanId ?? runId,
@@ -24599,7 +24599,7 @@ async function agenticScanInternal(opts) {
     const isWebPrepass = config2.mode === "web" || config2.mode === "http_audit";
     if (isWebPrepass && features.webRecon) {
       try {
-        const { runWebReconPrePass } = await import("./web-recon-prepass-YVMFXCIK.js");
+        const { runWebReconPrePass } = await import("./web-recon-prepass-VXXBPDAV.js");
         const prepassPosture = resolveEngagementForConfig(config2);
         const { findings: rf, promptBlock } = await runWebReconPrePass(config2, {
           posture: prepassPosture,
@@ -28152,7 +28152,7 @@ async function packageAudit(opts) {
   const pkg = installPackageForEcosystem(ecosystem, config2.package, config2.version, emit);
   const runState = await (async () => {
     try {
-      const { osecDB, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-5YHYNLI3.js");
+      const { osecDB, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-FSS7MBDF.js");
       const storage = resolveOsecRunStorage({ dbPath: config2.dbPath });
       return {
         db: new osecDB(storage.dbPath),
@@ -37013,7 +37013,7 @@ async function sourceReview(opts) {
   const { repoPath, cloned, tempDir } = resolveRepo(config2.repo, emit);
   const runState = await (async () => {
     try {
-      const { osecDB, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-5YHYNLI3.js");
+      const { osecDB, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-FSS7MBDF.js");
       const storage = resolveOsecRunStorage({ dbPath: config2.dbPath });
       return {
         db: new osecDB(storage.dbPath),
@@ -39705,7 +39705,7 @@ function setEnv(env) {
   };
 }
 async function defaultVerify(opts) {
-  const mod = await import("./kernel-vm-runner-RAAO2PGT.js");
+  const mod = await import("./kernel-vm-runner-JW77P276.js");
   return mod.verifyKernelFinding(opts);
 }
 
@@ -51448,7 +51448,7 @@ async function runPipeline(opts) {
   };
   const runState = await (async () => {
     try {
-      const { osecDB, repairOsecDatabase, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-5YHYNLI3.js");
+      const { osecDB, repairOsecDatabase, resolveOsecRunStorage, writeOsecRunReport } = await import("./dist-FSS7MBDF.js");
       const storage = resolveOsecRunStorage({
         dbPath: opts.dbPath,
         runId: opts.resumeScanId ?? opts.runId,
@@ -70779,6 +70779,7 @@ export {
   assessEscalation,
   shouldWeaponize,
   describeEscalation,
+  parseImpactAssessment,
   buildKernelPromotionEnvelope,
   isConfirmed,
   isHypothesisOnly,

package/chunks/{chunk-OAYUPGF6.js → chunk-NLH4LMWH.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/agent/journal/types.js
 var JOURNAL_SCHEMA_VERSION = 1;

package/chunks/{chunk-RE5EZDG2.js → chunk-OHHCGDJ2.js}

@@ -7,7 +7,7 @@ import {
 import {
   ScopePolicy,
   isScopeEnforcementEnabled
-} from "./chunk-7DEHG7YT.js";
+} from "./chunk-X7LAEEUW.js";
 import {
   allowlistedChildEnv,
   sanitizedEnv
@@ -17,7 +17,7 @@ import {
   cloudStateDir,
   createPresentationEvent,
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 import {
   external_exports
 } from "./chunk-VIT5ALXF.js";

package/chunks/{chunk-UU7PQP6N.js → chunk-OSBPGWTE.js}

@@ -5,13 +5,13 @@ import {
   makeSkepticVerifier,
   runHuntScan,
   scoreGeometry
-} from "./chunk-UV5QWZGE.js";
+} from "./chunk-5BTJMINS.js";
 import {
   runReproducerInKernelVm
-} from "./chunk-XFCTUKXR.js";
+} from "./chunk-WZRVS7SB.js";
 import {
   LlmApiRuntime
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 import {
   __commonJS,
   __require,

package/chunks/{chunk-OWLJYJ5O.js → chunk-TV27OWIW.js}

@@ -3,25 +3,25 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   agenticScan
-} from "./chunk-EGZGZFAH.js";
+} from "./chunk-LGCASF2C.js";
 import {
   source_default
 } from "./chunk-HLFS6WV2.js";
 import {
   runAgentLoop
-} from "./chunk-UV5QWZGE.js";
+} from "./chunk-5BTJMINS.js";
 import {
   getToolsForRole
-} from "./chunk-SJBCK2EI.js";
+} from "./chunk-HHPWRY2M.js";
 import {
   createRuntime
-} from "./chunk-5MWAG3FT.js";
+} from "./chunk-IFME676H.js";
 import {
   osecDB
-} from "./chunk-VNRY6AWF.js";
+} from "./chunk-VWITLWXB.js";
 import {
   LlmApiRuntime
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 
 // packages/cli/src/commands/orchestrate.ts
 import { randomUUID } from "node:crypto";

package/chunks/{chunk-7UFUALR2.js → chunk-V6GHX34G.js}

@@ -12,20 +12,20 @@ import {
   normalizeSettings,
   saveSettings,
   submissionBlockedReason
-} from "./chunk-YIQSGNAA.js";
+} from "./chunk-GOEA3NW6.js";
 import {
   runSmolvmWorkbench
-} from "./chunk-EGZGZFAH.js";
+} from "./chunk-LGCASF2C.js";
 import {
   ANALYTICS_LEVEL_ENV,
   getSmolvmWorkbenchStatus,
   isAdmittedSmolvmWorkbench,
   levelAtLeast,
   resolveAnalyticsLevel
-} from "./chunk-RE5EZDG2.js";
+} from "./chunk-OHHCGDJ2.js";
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 import {
   __commonJS,
   __require,

package/chunks/{chunk-VNRY6AWF.js → chunk-VWITLWXB.js}

@@ -4,7 +4,7 @@ const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir,
   runStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 import {
   __export
 } from "./chunk-VCSFCHAJ.js";

package/chunks/{chunk-IO7R7WBM.js → chunk-WSDDGFA6.js}

@@ -5,7 +5,7 @@ import {
   CODEX_CLIENT_VERSION,
   CODEX_PROTOCOL_HEADERS,
   getChatGptCodexAccessToken
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 
 // packages/core/dist/runtime/codex-models.js
 import { createHash } from "node:crypto";

package/chunks/{chunk-XFCTUKXR.js → chunk-WZRVS7SB.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/triage/kernel-vm-runner.js
 import { execFileSync, spawn } from "node:child_process";

package/chunks/{chunk-7DEHG7YT.js → chunk-X7LAEEUW.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-5IBCBQEH.js";
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/scope/scope.js
 import { readFileSync as readFileSync3 } from "node:fs";

package/chunks/{chunk-HR2TU42B.js → chunk-XA2O4WXA.js}

@@ -8,10 +8,10 @@ import {
   parsePatch,
   readEvolutionArtifact,
   resolveScopedPath
-} from "./chunk-RE5EZDG2.js";
+} from "./chunk-OHHCGDJ2.js";
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 import {
   external_exports
 } from "./chunk-VIT5ALXF.js";

package/chunks/{chunk-LYUAM3TG.js → chunk-XCISCI4T.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   jitterFor
-} from "./chunk-TZFIAMWZ.js";
+} from "./chunk-YL6YAGLL.js";
 
 // packages/core/dist/scope/rate-limit.js
 var TokenBucket = class {

package/chunks/{chunk-LPTRPRZR.js → chunk-XDKB2P5X.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/cve/artifact-scraper.js
 import { createHash } from "node:crypto";

package/chunks/{chunk-TZFIAMWZ.js → chunk-YL6YAGLL.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/scope/waf-detect.js
 function readHeader(headers, name) {

package/chunks/{chunk-DM5C5L5D.js → chunk-ZKQ2I3S2.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   severityRank
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/triage/kernel-primitive.js
 function maxSeverity(a, b) {

package/chunks/{codex-models-7TLJSY3L.js → codex-models-NHQW45SO.js}

@@ -5,9 +5,9 @@ import {
   CodexCatalogRefreshError,
   loadCodexModelCatalog,
   parseCodexModels
-} from "./chunk-IO7R7WBM.js";
-import "./chunk-2GV4HQKE.js";
-import "./chunk-76KSBWOQ.js";
+} from "./chunk-WSDDGFA6.js";
+import "./chunk-AV2LG2L7.js";
+import "./chunk-KAU6NLGP.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {