0sec-cli 0.22.0 → 0.22.4

package/chunks/{chunk-RE5EZDG2.js → chunk-2WWAPKAW.js}

@@ -5,9 +5,11 @@ import {
   redactAuthHeaders
 } from "./chunk-UELXHK2Y.js";
 import {
-  ScopePolicy,
-  isScopeEnforcementEnabled
-} from "./chunk-7DEHG7YT.js";
+  eventBus
+} from "./chunk-4ZYYX5GY.js";
+import {
+  ScopePolicy
+} from "./chunk-C6JPA32H.js";
 import {
   allowlistedChildEnv,
   sanitizedEnv
@@ -15,172 +17,12 @@ import {
 import {
   VERSION,
   cloudStateDir,
-  createPresentationEvent,
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-6KFB6AYN.js";
 import {
   external_exports
 } from "./chunk-VIT5ALXF.js";
 
-// packages/core/dist/bench/improvement-promotion.js
-import { createHash } from "node:crypto";
-var DEFAULT_IMPROVEMENT_PROMOTION_POLICY = Object.freeze({
-  minimumCases: 10,
-  minimumDevelopmentLift: 0.05,
-  minimumHeldOutLift: 0.03,
-  maximumNegativeControlFpDelta: 0.02,
-  maximumCostMultiplier: 1.5
-});
-function canonicalJson(value) {
-  if (value === null || typeof value !== "object")
-    return JSON.stringify(value);
-  if (Array.isArray(value))
-    return `[${value.map(canonicalJson).join(",")}]`;
-  const record = value;
-  return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(",")}}`;
-}
-function digest(value) {
-  return `sha256:${createHash("sha256").update(canonicalJson(value)).digest("hex")}`;
-}
-function isSha256(value) {
-  return /^sha256:[a-f0-9]{64}$/i.test(value);
-}
-function metricSampleIsSufficient(result, minimumCases) {
-  return result.development.champion.cases >= minimumCases && result.development.challenger.cases >= minimumCases && result.heldOut.champion.cases >= minimumCases && result.heldOut.challenger.cases >= minimumCases && result.negativeControls.champion.cases >= minimumCases && result.negativeControls.challenger.cases >= minimumCases;
-}
-function resultRatesAreFinite(result) {
-  return [
-    result.development.champion.successRate,
-    result.development.challenger.successRate,
-    result.heldOut.champion.successRate,
-    result.heldOut.challenger.successRate,
-    result.negativeControls.champion.falsePositiveRate,
-    result.negativeControls.challenger.falsePositiveRate
-  ].every((value) => Number.isFinite(value) && value >= 0 && value <= 1);
-}
-function makeDecision(candidateId, status, checks) {
-  const unsigned = {
-    schemaVersion: 1,
-    candidateId,
-    status,
-    checks
-  };
-  return {
-    ...unsigned,
-    decisionDigest: digest(unsigned)
-  };
-}
-function evaluateImprovementPromotion(candidate, policy = DEFAULT_IMPROVEMENT_PROMOTION_POLICY) {
-  const result = candidate.result;
-  const checks = [];
-  checks.push({
-    id: "candidate_identity",
-    passed: candidate.candidateId.length > 0 && candidate.candidateId === result.candidateId,
-    detail: "candidate id must be non-empty and match the sealed research result"
-  });
-  checks.push({
-    id: "artifact_digests",
-    passed: isSha256(candidate.baseArtifactDigest) && isSha256(candidate.candidateArtifactDigest) && candidate.baseArtifactDigest !== candidate.candidateArtifactDigest,
-    detail: "base and candidate artifacts must be distinct sha256 digests"
-  });
-  checks.push({
-    id: "ci",
-    passed: result.ciPassed,
-    detail: "candidate evaluation must carry a passing CI attestation"
-  });
-  checks.push({
-    id: "evaluator_stability",
-    passed: isSha256(result.evaluatorDigestBefore) && result.evaluatorDigestBefore === result.evaluatorDigestAfter,
-    detail: "the evaluator digest must remain stable across the candidate evaluation"
-  });
-  checks.push({
-    id: "evidence",
-    passed: result.evidenceRefs.length > 0,
-    detail: "candidate evaluation must retain at least one evidence reference"
-  });
-  checks.push({
-    id: "sample_size",
-    passed: resultRatesAreFinite(result) && metricSampleIsSufficient(result, policy.minimumCases),
-    detail: `every sealed lane must contain at least ${policy.minimumCases} finite observations`
-  });
-  const developmentLift = result.development.challenger.successRate - result.development.champion.successRate;
-  checks.push({
-    id: "development_lift",
-    passed: developmentLift >= policy.minimumDevelopmentLift,
-    detail: `development success lift ${developmentLift.toFixed(4)} must be at least ${policy.minimumDevelopmentLift.toFixed(4)}`
-  });
-  const heldOutLift = result.heldOut.challenger.successRate - result.heldOut.champion.successRate;
-  checks.push({
-    id: "held_out_lift",
-    passed: heldOutLift >= policy.minimumHeldOutLift,
-    detail: `held-out success lift ${heldOutLift.toFixed(4)} must be at least ${policy.minimumHeldOutLift.toFixed(4)}`
-  });
-  const fpDelta = result.negativeControls.challenger.falsePositiveRate - result.negativeControls.champion.falsePositiveRate;
-  checks.push({
-    id: "negative_control_precision",
-    passed: fpDelta <= policy.maximumNegativeControlFpDelta,
-    detail: `negative-control FP delta ${fpDelta.toFixed(4)} must not exceed ${policy.maximumNegativeControlFpDelta.toFixed(4)}`
-  });
-  const championCost = result.heldOut.champion.costPerSuccessUsd;
-  const challengerCost = result.heldOut.challenger.costPerSuccessUsd;
-  const zeroSuccessBaseline = championCost === null && result.heldOut.champion.successRate === 0 && result.heldOut.champion.inconclusiveRate === 0;
-  const costPasses = challengerCost !== null && Number.isFinite(challengerCost) && challengerCost >= 0 && (zeroSuccessBaseline || championCost !== null && Number.isFinite(championCost) && championCost >= 0 && challengerCost <= championCost * policy.maximumCostMultiplier);
-  checks.push({
-    id: "cost_discipline",
-    passed: costPasses,
-    detail: `held-out challenger cost must be finite and nonnegative; at most ${policy.maximumCostMultiplier.toFixed(2)}x champion cost unless the fully observed champion has zero successes`
-  });
-  if (checks.some((check) => !check.passed)) {
-    return makeDecision(candidate.candidateId, "rejected", checks);
-  }
-  return makeDecision(candidate.candidateId, candidate.kind === "source" ? "requires_human_approval" : "eligible_for_canary", checks);
-}
-function appendImprovementLedgerEntry(entries, event) {
-  const verification = verifyImprovementLedger(entries);
-  if (!verification.valid)
-    throw new Error(`cannot append to invalid improvement ledger: ${verification.reason}`);
-  if (!isSha256(event.payloadDigest))
-    throw new Error("ledger payloadDigest must be a sha256 digest");
-  const previousDigest = entries.length === 0 ? null : entries[entries.length - 1].entryDigest;
-  const unsigned = {
-    schemaVersion: 1,
-    sequence: entries.length,
-    occurredAt: event.occurredAt,
-    type: event.type,
-    candidateId: event.candidateId,
-    payloadDigest: event.payloadDigest,
-    previousDigest
-  };
-  return {
-    ...unsigned,
-    entryDigest: digest(unsigned)
-  };
-}
-function verifyImprovementLedger(entries) {
-  let previousDigest = null;
-  for (const [sequence, entry] of entries.entries()) {
-    if (entry.sequence !== sequence)
-      return { valid: false, reason: `unexpected sequence at ${sequence}` };
-    if (entry.previousDigest !== previousDigest)
-      return { valid: false, reason: `broken predecessor at ${sequence}` };
-    if (!isSha256(entry.payloadDigest))
-      return { valid: false, reason: `invalid payload digest at ${sequence}` };
-    const unsigned = {
-      schemaVersion: entry.schemaVersion,
-      sequence: entry.sequence,
-      occurredAt: entry.occurredAt,
-      type: entry.type,
-      candidateId: entry.candidateId,
-      payloadDigest: entry.payloadDigest,
-      previousDigest: entry.previousDigest
-    };
-    if (entry.entryDigest !== digest(unsigned))
-      return { valid: false, reason: `invalid entry digest at ${sequence}` };
-    previousDigest = entry.entryDigest;
-  }
-  return { valid: true };
-}
-
 // packages/core/dist/telemetry/analytics-level.js
 var LEVEL_ORDER = {
   off: 0,
@@ -217,69 +59,6 @@ function resolveAnalyticsLevel(env = process.env) {
   return isAnalyticsLevel(normalized) ? normalized : "off";
 }
 
-// packages/core/dist/events/bus.js
-function presentationEventSink(sink, options = {}) {
-  let sequence = 0;
-  const source = options.source ?? "core";
-  const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  return {
-    emit(type, payload) {
-      const scanId = typeof payload["scan_id"] === "string" ? payload["scan_id"] : typeof payload["scanId"] === "string" ? payload["scanId"] : void 0;
-      const sessionId = typeof payload["session_id"] === "string" ? payload["session_id"] : typeof payload["sessionId"] === "string" ? payload["sessionId"] : void 0;
-      sink.emit(createPresentationEvent({
-        source,
-        sequence: ++sequence,
-        at: now(),
-        eventType: type,
-        payload,
-        ...scanId ? { scanId } : {},
-        ...sessionId ? { sessionId } : {}
-      }));
-    }
-  };
-}
-var EventBus = class {
-  sinks = [];
-  /** Subscribe a sink. Returns an unsubscribe function. */
-  subscribe(sink) {
-    this.sinks.push(sink);
-    return () => {
-      const idx = this.sinks.indexOf(sink);
-      if (idx >= 0)
-        this.sinks.splice(idx, 1);
-    };
-  }
-  /** Remove every subscriber — primarily useful in tests. */
-  clear() {
-    this.sinks = [];
-  }
-  /** Returns a read-only snapshot of the current sinks (for tests). */
-  get size() {
-    return this.sinks.length;
-  }
-  /**
-   * Fan out a single event to every subscribed sink. Exceptions thrown by
-   * any sink are swallowed — one misbehaving consumer must never abort a
-   * scan. Diagnostic is written to stderr so the failure is visible.
-   */
-  emit(type, payload) {
-    const snapshot2 = this.sinks.slice();
-    for (const sink of snapshot2) {
-      try {
-        sink.emit(type, payload);
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        try {
-          process.stderr.write(`[0 event-bus] sink threw on ${type}: ${msg}
-`);
-        } catch {
-        }
-      }
-    }
-  }
-};
-var eventBus = new EventBus();
-
 // packages/core/dist/cloud/credentials.js
 import { readFileSync, statSync } from "node:fs";
 import { join } from "node:path";
@@ -1205,7 +984,7 @@ function maybeSubscribeAnalyticsPipeline() {
 
 // packages/core/dist/telemetry/run-contribution.js
 import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash as createHash2, randomUUID as randomUUID2 } from "node:crypto";
+import { createHash, randomUUID as randomUUID2 } from "node:crypto";
 import { appendFileSync as appendFileSync2, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync3, readdirSync, renameSync, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { isAbsolute, join as join4 } from "node:path";
 var CONTRIBUTION_ENDPOINT = "/api/run-contributions";
@@ -1280,7 +1059,7 @@ var contributionClientPolicySchema = external_exports.object({
 }).strict();
 var PROCESS_INSTANCE = randomUUID2();
 var context = new AsyncLocalStorage();
-var hash = (value) => createHash2("sha256").update(value).digest("hex");
+var hash = (value) => createHash("sha256").update(value).digest("hex");
 function syncDirectory(path) {
   const fd = openSync(path, "r");
   try {
@@ -1957,7 +1736,7 @@ function reportUnsupportedContributionMode(mode) {
 
 // packages/core/dist/runtime/smolvm-provision.js
 import { execFile } from "node:child_process";
-import { createHash as createHash3, randomBytes } from "node:crypto";
+import { createHash as createHash2, randomBytes } from "node:crypto";
 import { constants, createWriteStream } from "node:fs";
 import { chmod, copyFile, lstat, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
@@ -2287,13 +2066,13 @@ async function privateSmolvmDirectory(path) {
     throw new Error(`SmolVM state must be a private operator-owned directory: ${path}`);
   }
 }
-function smolvmExec(binary, argv2, options = {}) {
-  const { promise, resolve: resolve7, reject } = Promise.withResolvers();
-  execFile(binary, argv2, { env: { PATH: "/usr/bin:/bin:/usr/sbin:/sbin" }, ...options, timeout: 12e4, maxBuffer: 4 * 1024 * 1024 }, (error, stdout, stderr) => {
+function smolvmExec(binary, argv, options = {}) {
+  const { promise, resolve: resolve3, reject } = Promise.withResolvers();
+  execFile(binary, argv, { env: { PATH: "/usr/bin:/bin:/usr/sbin:/sbin" }, ...options, timeout: 12e4, maxBuffer: 4 * 1024 * 1024 }, (error, stdout, stderr) => {
     if (error)
       reject(new Error(`${binary} failed: ${stderr.trim() || error.message}`));
     else
-      resolve7({ stdout, stderr });
+      resolve3({ stdout, stderr });
   });
   return promise;
 }
@@ -2301,9 +2080,9 @@ async function smolvmArchiveDigest(path, signal) {
   const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
   try {
     const info = await file.stat();
-    if (!info.isFile() || info.size <= 0 || info.size > 16 * 1024 ** 3)
-      throw new Error("SmolVM image must be a regular nonempty archive no larger than 16 GiB");
-    const hash3 = createHash3("sha256");
+    if (!info.isFile() || info.size <= 0 || info.size > 8 * 1024 ** 3)
+      throw new Error("SmolVM image must be a regular nonempty archive no larger than 8 GiB");
+    const hash3 = createHash2("sha256");
     for await (const chunk of file.createReadStream({ autoClose: false, signal }))
       hash3.update(chunk);
     return `sha256:${hash3.digest("hex")}`;
@@ -2313,7 +2092,7 @@ async function smolvmArchiveDigest(path, signal) {
 }
 function runtimePaths(root) {
   const bundleRoot = join5(root, "runtime", BUNDLE_NAME);
-  const sourceDigest = createHash3("sha256").update(SMOLVM_DARWIN_SUPERVISOR_SOURCE).digest("hex").slice(0, 16);
+  const sourceDigest = createHash2("sha256").update(SMOLVM_DARWIN_SUPERVISOR_SOURCE).digest("hex").slice(0, 16);
   return { version: VERSION2, binary: join5(bundleRoot, "smolvm"), bundleRoot, supervisor: join5(root, "runtime", `supervisor-${sourceDigest}`) };
 }
 async function verifyBundle(runtime, signal) {
@@ -2349,7 +2128,7 @@ async function resolveSmolvmRuntime(options = {}) {
         throw new Error(`Pinned SmolVM download failed (HTTP ${response.status})`);
       const archive = join5(staging, "bundle.tar.gz");
       let bytes = 0;
-      const hash3 = createHash3("sha256");
+      const hash3 = createHash2("sha256");
       const source = Readable.fromWeb(response.body);
       source.on("data", (chunk) => {
         bytes += chunk.length;
@@ -2396,21 +2175,21 @@ async function approveSmolvmWorkbenchImage(options) {
   await privateSmolvmDirectory(options.stateRoot);
   const images = join5(options.stateRoot, "images");
   await privateSmolvmDirectory(images);
-  const digest2 = await smolvmArchiveDigest(options.imageArchive, options.signal);
-  const destination = join5(images, `${digest2.slice(7)}.tar`);
+  const digest = await smolvmArchiveDigest(options.imageArchive, options.signal);
+  const destination = join5(images, `${digest.slice(7)}.tar`);
   if (options.imageArchive !== destination) {
     const staging = join5(images, `.approve-${randomBytes(8).toString("hex")}.tar`);
     try {
       await copyFile(options.imageArchive, staging, constants.COPYFILE_EXCL | constants.COPYFILE_FICLONE);
       await chmod(staging, 384);
-      if (await smolvmArchiveDigest(staging, options.signal) !== digest2)
+      if (await smolvmArchiveDigest(staging, options.signal) !== digest)
         throw new Error("Image changed during approval");
       await rename(staging, destination);
     } finally {
       await rm(staging, { force: true });
     }
   }
-  const image = { path: destination, digest: digest2 };
+  const image = { path: destination, digest };
   await writeFile(`${destination}.json`, JSON.stringify({ schemaVersion: 1, ...image }), { flag: "w", mode: 384 });
   return image;
 }
@@ -2456,7 +2235,7 @@ async function getSmolvmWorkbenchStatus(options) {
 }
 
 // packages/core/dist/runtime/smolvm-broker.js
-import { createHash as createHash5, randomBytes as randomBytes3 } from "node:crypto";
+import { createHash as createHash4, randomBytes as randomBytes3 } from "node:crypto";
 import { lookup as lookup2 } from "node:dns/promises";
 import { constants as constants4, closeSync as closeSync2, fstatSync, lstatSync as lstatSync2, openSync as openSync2, readFileSync as readFileSync4 } from "node:fs";
 import { chmod as chmod2, copyFile as copyFile3, lstat as lstat3, mkdir as mkdir4, mkdtemp as mkdtemp4, open as open3, readdir as readdir2, realpath as realpath3, rename as rename2, rm as rm5, writeFile as writeFile2 } from "node:fs/promises";
@@ -2484,7 +2263,7 @@ var ALLOWED_SCANNER_BINARIES = /* @__PURE__ */ new Set([
   "ffuf",
   "nuclei"
 ]);
-function launchAllowlistedScanner(bin, argv2, env) {
+function launchAllowlistedScanner(bin, argv, env) {
   const spawnOpts = {
     env,
     stdio: ["ignore", "pipe", "pipe"],
@@ -2493,13 +2272,13 @@ function launchAllowlistedScanner(bin, argv2, env) {
   };
   switch (bin) {
     case "sqlmap":
-      return spawn("sqlmap", argv2, spawnOpts);
+      return spawn("sqlmap", argv, spawnOpts);
     case "nmap":
-      return spawn("nmap", argv2, spawnOpts);
+      return spawn("nmap", argv, spawnOpts);
     case "ffuf":
-      return spawn("ffuf", argv2, spawnOpts);
+      return spawn("ffuf", argv, spawnOpts);
     case "nuclei":
-      return spawn("nuclei", argv2, spawnOpts);
+      return spawn("nuclei", argv, spawnOpts);
     default:
       return null;
   }
@@ -2574,7 +2353,7 @@ function superviseChild(child, effectiveTimeoutMs, startedAt) {
     });
   });
 }
-async function runScannerProcess(bin, argv2, opts) {
+async function runScannerProcess(bin, argv, opts) {
   const startedAt = Date.now();
   const effectiveTimeout = Math.min(Math.max(1, opts.timeoutMs), Math.max(1, opts.ceilingMs));
   if (!ALLOWED_SCANNER_BINARIES.has(bin)) {
@@ -2586,7 +2365,7 @@ async function runScannerProcess(bin, argv2, opts) {
   }
   let child;
   try {
-    child = launchAllowlistedScanner(bin, argv2, opts.env);
+    child = launchAllowlistedScanner(bin, argv, opts.env);
   } catch (err) {
     return {
       kind: "error",
@@ -2613,68 +2392,68 @@ function sanitizeToken(value, allowed) {
   return allowed.test(value) ? value : null;
 }
 function buildSqlmapArgv(opts) {
-  const argv2 = ["-u", opts.url, "--batch", "--disable-coloring"];
+  const argv = ["-u", opts.url, "--batch", "--disable-coloring"];
   if (typeof opts.data === "string" && opts.data.length > 0) {
-    argv2.push("--data", opts.data);
+    argv.push("--data", opts.data);
   }
-  argv2.push("--level", String(clampInt(opts.level, 1, 5, 1)));
-  argv2.push("--risk", String(clampInt(opts.risk, 1, 3, 1)));
+  argv.push("--level", String(clampInt(opts.level, 1, 5, 1)));
+  argv.push("--risk", String(clampInt(opts.risk, 1, 3, 1)));
   if (opts.technique) {
     const t = sanitizeToken(opts.technique.toUpperCase(), /^[BEUSTQ]{1,6}$/);
     if (t)
-      argv2.push("--technique", t);
+      argv.push("--technique", t);
   }
   if (opts.dbms) {
     const d = sanitizeToken(opts.dbms, /^[A-Za-z0-9 _.-]{1,32}$/);
     if (d)
-      argv2.push("--dbms", d);
+      argv.push("--dbms", d);
   }
-  argv2.push("--threads", String(clampInt(opts.threads, 1, 10, 1)));
+  argv.push("--threads", String(clampInt(opts.threads, 1, 10, 1)));
   if (opts.enumerateDbs)
-    argv2.push("--dbs");
+    argv.push("--dbs");
   if (opts.dump)
-    argv2.push("--dump");
-  return argv2;
+    argv.push("--dump");
+  return argv;
 }
 function buildNmapArgv(opts) {
-  const argv2 = [];
+  const argv = [];
   if (opts.skipPing !== false)
-    argv2.push("-Pn");
+    argv.push("-Pn");
   if (opts.serviceDetection)
-    argv2.push("-sV");
+    argv.push("-sV");
   if (opts.ports) {
     const p = sanitizeToken(opts.ports, /^[0-9,\-]{1,64}$/);
     if (p)
-      argv2.push("-p", p);
+      argv.push("-p", p);
   } else if (opts.topPorts) {
-    argv2.push("--top-ports", String(clampInt(opts.topPorts, 1, 65535, 100)));
+    argv.push("--top-ports", String(clampInt(opts.topPorts, 1, 65535, 100)));
   }
-  argv2.push(opts.target);
-  return argv2;
+  argv.push(opts.target);
+  return argv;
 }
 function buildFfufArgv(opts) {
-  const argv2 = ["-u", opts.url, "-w", opts.wordlist, "-of", "json", "-o", "/dev/stdout", "-s"];
+  const argv = ["-u", opts.url, "-w", opts.wordlist, "-of", "json", "-o", "/dev/stdout", "-s"];
   if (opts.matchStatus) {
     const m = sanitizeToken(opts.matchStatus, /^[0-9,\-]{1,64}$/);
     if (m)
-      argv2.push("-mc", m);
+      argv.push("-mc", m);
   }
-  argv2.push("-t", String(clampInt(opts.threads, 1, 50, 10)));
-  return argv2;
+  argv.push("-t", String(clampInt(opts.threads, 1, 50, 10)));
+  return argv;
 }
 function buildNucleiArgv(opts) {
-  const argv2 = ["-u", opts.target, "-jsonl", "-silent"];
+  const argv = ["-u", opts.target, "-jsonl", "-silent"];
   if (opts.severity) {
     const s = sanitizeToken(opts.severity.toLowerCase(), /^[a-z,]{1,40}$/);
     if (s)
-      argv2.push("-severity", s);
+      argv.push("-severity", s);
   }
   if (opts.tags) {
     const t = sanitizeToken(opts.tags.toLowerCase(), /^[a-z0-9,_-]{1,60}$/);
     if (t)
-      argv2.push("-tags", t);
+      argv.push("-tags", t);
   }
-  return argv2;
+  return argv;
 }
 function tail(text, n = 1200) {
   return text.length > n ? text.slice(text.length - n) : text;
@@ -3155,6 +2934,30 @@ function parseRepositoryAcquisition(command) {
     return null;
   }
 }
+function normalizeRepositoryIdentity(value) {
+  try {
+    const url = new URL(value.trim());
+    if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash || url.port && url.port !== "443" || url.pathname === "/")
+      return null;
+    url.hostname = url.hostname.replace(/\.+$/, "").toLowerCase();
+    let pathname = url.pathname;
+    if (pathname.endsWith("/"))
+      pathname = pathname.slice(0, -1);
+    if (pathname.endsWith(".git"))
+      pathname = pathname.slice(0, -4);
+    if (!pathname || pathname === "/")
+      return null;
+    url.pathname = pathname;
+    return url.href;
+  } catch {
+    return null;
+  }
+}
+function repositoryIdentityMatchesTarget(target, cloneUrl) {
+  const targetIdentity = normalizeRepositoryIdentity(target);
+  const cloneIdentity = normalizeRepositoryIdentity(cloneUrl);
+  return targetIdentity !== null && targetIdentity === cloneIdentity;
+}
 function repositoryAcquisitionAllowed(plan, scope) {
   if (!scope)
     return true;
@@ -3242,7 +3045,7 @@ async function runRepositoryAcquisition(plan, command, timeoutMs, ceilingMs, sco
     const address = proxy.address();
     if (!address || typeof address === "string")
       throw new Error("Cannot open source acquisition tunnel");
-    const argv2 = [
+    const argv = [
       "-C",
       plan.cwd,
       "-c",
@@ -3265,7 +3068,7 @@ async function runRepositoryAcquisition(plan, command, timeoutMs, ceilingMs, sco
       ...plan.cloneArgs
     ];
     const startedAt = Date.now();
-    const child = spawn2("git", argv2, {
+    const child = spawn2("git", argv, {
       shell: false,
       detached: true,
       stdio: ["ignore", "pipe", "pipe"],
@@ -3308,7 +3111,7 @@ async function runRepositoryAcquisition(plan, command, timeoutMs, ceilingMs, sco
 
 // packages/core/dist/runtime/smolvm.js
 import { execFile as execFile2, spawn as spawn4 } from "node:child_process";
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { constants as constants3, createWriteStream as createWriteStream2 } from "node:fs";
 import { mkdir as mkdir3, mkdtemp as mkdtemp3, open as open2, readdir, readFile as readFile2, readlink, realpath as realpath2, rm as rm4 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
@@ -3372,8 +3175,8 @@ async function runSmolvmDarwinProgram(options, network, ownership) {
       throw new Error("SmolVM image requires a nonempty regular archive no larger than 8 GiB");
     const archive = join7(root, "image.tar");
     await copyFile2(options.imageArchive, archive, constants2.COPYFILE_EXCL | constants2.COPYFILE_FICLONE);
-    const digest2 = await smolvmArchiveDigest(archive, lifetime.signal);
-    if (options.imageDigest && digest2 !== options.imageDigest)
+    const digest = await smolvmArchiveDigest(archive, lifetime.signal);
+    if (options.imageDigest && digest !== options.imageDigest)
       throw new Error("SmolVM archive identity mismatch");
     const args = [
       "machine",
@@ -3559,7 +3362,7 @@ async function hashArchive(path, destination, signal) {
     if (!stat2.isFile() || stat2.size === 0 || stat2.size > MAX_IMAGE_BYTES) {
       throw new Error("smolvm image must be a nonempty regular archive no larger than 8 GiB");
     }
-    const hash3 = createHash4("sha256");
+    const hash3 = createHash3("sha256");
     const source = file.createReadStream({ autoClose: false, signal });
     if (destination) {
       source.on("data", (chunk) => hash3.update(chunk));
@@ -3618,14 +3421,14 @@ function launcherEnvironment(root) {
   return env;
 }
 function version(binary, cwd, env, signal) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve3, reject) => {
     execFile2(binary, ["--version"], { cwd, env, signal, timeout: 5e3, killSignal: "SIGKILL", maxBuffer: 4096 }, (error, stdout, stderr) => {
       if (error)
         reject(new Error(`smolvm runtime unavailable: ${stderr.trim() || error.message}`));
       else if (stdout.trim() !== "smolvm 1.14.6")
         reject(new Error("smolvm 1.14.6 is required; other versions need lifecycle qualification"));
       else
-        resolve7();
+        resolve3();
     });
   });
 }
@@ -3691,8 +3494,8 @@ async function runSmolvm(options) {
     const binary = options.binary ?? "smolvm";
     await version(binary, root, env, controller.signal);
     const archive = join8(root, "image.tar");
-    const digest2 = await hashArchive(options.imageArchive, archive, controller.signal);
-    if (options.imageDigest && digest2 !== options.imageDigest)
+    const digest = await hashArchive(options.imageArchive, archive, controller.signal);
+    if (options.imageDigest && digest !== options.imageDigest)
       throw new Error("smolvm archive identity mismatch");
     const args = [
       "--pdeathsig",
@@ -3726,7 +3529,7 @@ async function runSmolvm(options) {
     }
     args.push("--", ...options.command);
     controller.signal.throwIfAborted();
-    await new Promise((resolve7) => {
+    await new Promise((resolve3) => {
       const child = spawn4("setpriv", args, { cwd: root, env, stdio: ["pipe", "pipe", "pipe"], detached: true });
       const stdout = [], stderr = [];
       let stdoutBytes = 0, stderrBytes = 0;
@@ -3799,7 +3602,7 @@ async function runSmolvm(options) {
         result.stderr = Buffer.concat(stderr, stderrBytes).toString("utf8");
         if (!banner || signal)
           result.error ??= `smolvm launcher failed${signal ? ` (${signal})` : " before guest execution"}`;
-        resolve7();
+        resolve3();
       });
       controller.signal.addEventListener("abort", abort, { once: true });
       if (controller.signal.aborted)
@@ -3841,6 +3644,7 @@ async function runSmolvm(options) {
 // packages/core/dist/runtime/smolvm-broker.js
 var ADMISSION = "/run/0-workbench/admission.json";
 var GUEST_ROOT = "/run/0-workbench/broker";
+var WORKBENCH_BROKER_WORKSPACE = "/tmp/0-workspace";
 var DIGEST = /^sha256:[a-f0-9]{64}$/;
 var REFERENCE = /^(?:sha256:[a-f0-9]{64}|[a-zA-Z0-9][a-zA-Z0-9_.:/-]*@sha256:[a-f0-9]{64})$/;
 var POLL_MS = 15;
@@ -3860,7 +3664,7 @@ var DEFAULT_WORKBENCH_BROKER_LIMITS = Object.freeze({
   maxInputBytes: 1024 * 1024
 });
 function hash2(data) {
-  return `sha256:${createHash5("sha256").update(data).digest("hex")}`;
+  return `sha256:${createHash4("sha256").update(data).digest("hex")}`;
 }
 function problem(error) {
   return error instanceof Error ? error.message : String(error);
@@ -3905,8 +3709,8 @@ function admission() {
     if (marker.schemaVersion !== 1 || marker.profile !== "smolvm-workbench" || !broker || broker.protocol !== 1 || broker.root !== GUEST_ROOT || typeof marker.runtimeId !== "string" || !/^[a-f0-9]{64}$/.test(marker.runtimeId) || broker.runtimeId !== marker.runtimeId || !DIGEST.test(broker.imageDigest) || typeof broker.allowHttp !== "boolean" || !broker.approvedImages || typeof broker.approvedImages !== "object")
       throw new Error("Workbench broker admission identity mismatch");
     broker.limits = Object.freeze(checkedLimits(broker.limits));
-    for (const [reference, digest2] of Object.entries(broker.approvedImages))
-      if (!REFERENCE.test(reference) || !DIGEST.test(digest2))
+    for (const [reference, digest] of Object.entries(broker.approvedImages))
+      if (!REFERENCE.test(reference) || !DIGEST.test(digest))
         throw new Error("Invalid admitted image catalog");
     return immutableAdmission = broker;
   } finally {
@@ -3935,10 +3739,10 @@ function resolveWorkbenchBrokerImage(reference) {
   const grant = admission();
   if (reference === void 0 || reference === grant.imageDigest)
     return grant.imageDigest;
-  const digest2 = Object.hasOwn(grant.approvedImages, reference) ? grant.approvedImages[reference] : void 0;
-  if (!digest2)
+  const digest = Object.hasOwn(grant.approvedImages, reference) ? grant.approvedImages[reference] : void 0;
+  if (!digest)
     throw new Error(`Sandbox image is not explicitly approved: ${reference}`);
-  return digest2;
+  return digest;
 }
 async function regularBytes(path, maximum) {
   const file = await open3(path, constants4.O_RDONLY | constants4.O_NOFOLLOW | constants4.O_NONBLOCK);
@@ -3987,8 +3791,8 @@ async function snapshot(root, limits) {
     if ((entries += names.length) > limits.maxFiles * 4)
       throw new Error("Broker workspace has too many filesystem entries");
     for (const name of names.sort()) {
-      const path = join9(directory, name), relativePath2 = relative(root, path).split(sep).join("/");
-      if (!safePath(relativePath2))
+      const path = join9(directory, name), relativePath = relative(root, path).split(sep).join("/");
+      if (!safePath(relativePath))
         throw new Error("Invalid broker workspace path");
       const info = await lstat3(path);
       if (info.isDirectory()) {
@@ -4001,7 +3805,7 @@ async function snapshot(root, limits) {
         throw new Error("Broker workspace exceeds its file/byte limits");
       const content = await regularBytes(path, limits.maxWorkspaceBytes - bytes);
       bytes += content.length;
-      files.push({ path: relativePath2, digest: hash2(content), data: content.toString("base64"), mode: info.mode & 73 ? 448 : 384 });
+      files.push({ path: relativePath, digest: hash2(content), data: content.toString("base64"), mode: info.mode & 73 ? 448 : 384 });
     }
   }
   await walk(root);
@@ -4083,25 +3887,25 @@ async function httpCommand(request, signal) {
   const host = url.hostname.replace(/^\[|\]$/g, "");
   if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || !host || /^(?:localhost|.*\.localhost)$/i.test(host))
     throw new Error("HTTP broker requires a public HTTP(S) URL without userinfo");
-  const argv2 = request.command;
+  const argv = request.command;
   const prefix = ["curl", "--disable", "--globoff", "--silent", "--show-error", "--request"];
-  if (!prefix.every((arg, index2) => argv2[index2] === arg) || !/^[A-Za-z]{1,32}$/.test(argv2[6] ?? ""))
+  if (!prefix.every((arg, index2) => argv[index2] === arg) || !/^[A-Za-z]{1,32}$/.test(argv[6] ?? ""))
     throw new Error("HTTP broker permits only declarative curl requests");
-  const fixed = ["--max-time", argv2[8], "--proto", "=http,https", "--proto-redir", "=http,https", "--max-redirs", "0", "--noproxy", "*", "--output", "-", "--write-out", "%{stderr}\n__ZERO_HTTP_STATUS__:%{http_code}\n"];
-  if (!fixed.every((arg, index2) => argv2[index2 + 7] === arg) || !/^[0-9]+(?:\.[0-9]+)?$/.test(argv2[8] ?? "") || Number(argv2[8]) <= 0 || Number(argv2[8]) > request.timeoutMs / 1e3)
+  const fixed = ["--max-time", argv[8], "--proto", "=http,https", "--proto-redir", "=http,https", "--max-redirs", "0", "--noproxy", "*", "--output", "-", "--write-out", "%{stderr}\n__ZERO_HTTP_STATUS__:%{http_code}\n"];
+  if (!fixed.every((arg, index2) => argv[index2 + 7] === arg) || !/^[0-9]+(?:\.[0-9]+)?$/.test(argv[8] ?? "") || Number(argv[8]) <= 0 || Number(argv[8]) > request.timeoutMs / 1e3)
     throw new Error("HTTP broker curl policy mismatch");
   let index = 21, headerBytes = 0, headers = 0;
-  while (argv2[index] === "--header") {
-    const header = argv2[index + 1];
+  while (argv[index] === "--header") {
+    const header = argv[index + 1];
     if (typeof header !== "string" || !/^[!#$%&'*+.^_`|~0-9A-Za-z-]+:[^\r\n\0]*$/.test(header) || ++headers > 64 || (headerBytes += Buffer.byteLength(header)) > 65536)
       throw new Error("Invalid bounded HTTP header");
     index += 2;
   }
-  if (argv2[index] === "--data-binary" && argv2[index + 1] === "@-")
+  if (argv[index] === "--data-binary" && argv[index + 1] === "@-")
     index += 2;
-  if (argv2[index] !== "--" || argv2[index + 1] !== request.httpTarget || argv2.length !== index + 2)
+  if (argv[index] !== "--" || argv[index + 1] !== request.httpTarget || argv.length !== index + 2)
     throw new Error("HTTP broker rejects additional curl flags, files, redirects or destinations");
-  const addresses = isIP2(host) ? [{ address: host, family: isIP2(host) }] : await new Promise((resolve7, reject) => {
+  const addresses = isIP2(host) ? [{ address: host, family: isIP2(host) }] : await new Promise((resolve3, reject) => {
     let settled = false;
     const finish = (error, result) => {
       if (settled)
@@ -4112,7 +3916,7 @@ async function httpCommand(request, signal) {
       if (error)
         reject(error);
       else
-        resolve7(result);
+        resolve3(result);
     };
     const timer = setTimeout(() => finish(new Error("HTTP broker DNS resolution exceeded its deadline")), Math.min(5e3, request.timeoutMs));
     const abort = () => finish(new Error("HTTP broker DNS resolution cancelled"));
@@ -4125,18 +3929,21 @@ async function httpCommand(request, signal) {
   if (!addresses.length || addresses.some(({ address: address2 }) => !isPublicRepositoryAddress(address2)))
     throw new Error("HTTP broker refuses private, loopback, reserved or mixed DNS destinations");
   if (isIP2(host))
-    return [...argv2];
+    return [...argv];
   const address = addresses[0];
   const port = url.port || (url.protocol === "https:" ? "443" : "80");
   const pinned = address.family === 6 ? `[${address.address}]` : address.address;
-  return [...argv2.slice(0, index), "--resolve", `${host}:${port}:${pinned}`, ...argv2.slice(index)];
+  return [...argv.slice(0, index), "--resolve", `${host}:${port}:${pinned}`, ...argv.slice(index)];
 }
 var SIBLING_TRANSPORT = String.raw`
 const fs = require('node:fs'), p = require('node:path'), crypto = require('node:crypto'), cp = require('node:child_process');
 const cfg = JSON.parse(fs.readFileSync('/control/program.json', 'utf8'));
 const send = value => process.stdout.write(JSON.stringify(value) + '\n');
 const digest = b => 'sha256:' + crypto.createHash('sha256').update(b).digest('hex');
-const workspace = fs.mkdtempSync('/tmp/0-workspace-');
+const workspace = ${JSON.stringify(WORKBENCH_BROKER_WORKSPACE)};
+// A fresh guest must not contain this path, including a dangling symlink.
+fs.mkdirSync(workspace,{mode:0o700});
+const workspaceInfo = fs.lstatSync(workspace);
 for (const file of cfg.files) {
  const destination = p.join(workspace,file.path);
  fs.mkdirSync(p.dirname(destination),{recursive:true,mode:0o700});
@@ -4155,6 +3962,8 @@ child.on('spawn',()=>send({type:'ready'}));
 child.on('close',(code,signal)=>{
  let bytes=0,files=0,entries=0;
  try {
+  const current = fs.lstatSync(workspace);
+  if(!current.isDirectory()||current.dev!==workspaceInfo.dev||current.ino!==workspaceInfo.ino)throw Error('sandbox workspace was replaced');
   const walk=dir=>{const names=fs.readdirSync(dir).sort();entries+=names.length;if(entries>cfg.maxFiles*4)throw Error('sandbox artifact entry limit');for(const name of names){const path=p.join(dir,name), rel=p.relative(workspace,path),st=fs.lstatSync(path);if(st.isDirectory()){walk(path);continue;}if(!st.isFile()||st.nlink!==1)throw Error('sandbox artifact is not a regular unlinked file');if(++files>cfg.maxFiles||bytes+st.size>cfg.maxWorkspaceBytes)throw Error('sandbox artifact limit');const fd=fs.openSync(path,fs.constants.O_RDONLY|fs.constants.O_NOFOLLOW|fs.constants.O_NONBLOCK);let b;try{const a=fs.fstatSync(fd);b=fs.readFileSync(fd);const z=fs.fstatSync(fd);if(!a.isFile()||a.nlink!==1||a.size!==z.size||a.mtimeMs!==z.mtimeMs||b.length!==a.size)throw Error('sandbox artifact changed');}finally{fs.closeSync(fd);}bytes+=b.length;send({type:'file',file:{path:rel,digest:digest(b),data:b.toString('base64'),mode:st.mode&0o111?448:384}});}};
   walk(workspace); send({type:'done',exitCode:code,error:failed?'sandbox transport failed':signal?'sandbox process signalled '+signal:undefined});
  } catch(e) { send({type:'done',exitCode:code,error:e.message}); }
@@ -4188,8 +3997,8 @@ async function startWorkbenchBroker(options) {
   let polling;
   try {
     await mkdir4(guestRoot, { mode: 448 });
-    async function approve(archive, digest2, index) {
-      if (!DIGEST.test(digest2) || !isAbsolute5(archive) || resolve2(archive) !== await realpath3(archive))
+    async function approve(archive, digest, index) {
+      if (!DIGEST.test(digest) || !isAbsolute5(archive) || resolve2(archive) !== await realpath3(archive))
         throw new Error("Invalid trusted broker image archive");
       const file = join9(privateRoot, `image-${index}.tar`);
       const info = await lstat3(archive);
@@ -4197,7 +4006,7 @@ async function startWorkbenchBroker(options) {
         throw new Error("Invalid approved broker archive file");
       await copyFile3(archive, file, constants4.COPYFILE_EXCL | constants4.COPYFILE_FICLONE);
       await chmod2(file, 256);
-      if (await resolveSmolvmImage(file) !== digest2)
+      if (await resolveSmolvmImage(file) !== digest)
         throw new Error("Approved broker archive copy identity mismatch");
       return file;
     }
@@ -4678,770 +4487,7 @@ async function runWorkbenchBrokerProgram(options, signal, channel) {
   }
 }
 
-// packages/core/dist/improvement/config.js
-import { existsSync as existsSync2, readFileSync as readFileSync5, realpathSync } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { isAbsolute as isAbsolute6, resolve as resolve3, sep as sep2 } from "node:path";
-var relativePath = external_exports.string().min(1).max(512).refine((value) => !isAbsolute6(value) && !value.includes("\\") && !value.includes("\0") && value !== "." && value.split("/").every((part) => part !== ".." && part !== "" && part !== "."), "must be a normalized relative file or directory path (not the entire workspace)");
-var argv = external_exports.array(external_exports.string().max(8192).refine((value) => !value.includes("\0"))).min(1).max(128).refine((value) => value[0].length > 0, "executable must not be empty");
-var finitePositive = external_exports.number().finite().positive();
-var schema = external_exports.object({
-  schemaVersion: external_exports.literal(1),
-  sourceRoot: external_exports.string().min(1),
-  storePath: external_exports.string().min(1),
-  image: external_exports.string().min(1).max(512).regex(/^[a-zA-Z0-9][a-zA-Z0-9_./:@-]*$/),
-  backend: external_exports.enum(["docker", "smolvm"]).optional(),
-  imageArchive: external_exports.string().min(1).max(4096).refine((value) => !value.includes("\0")).optional(),
-  sourcePaths: external_exports.array(relativePath).min(1).max(256),
-  editablePaths: external_exports.array(relativePath).min(1).max(256),
-  kind: external_exports.enum(["source", "skill", "router", "lens"]).default("source"),
-  command: argv,
-  buildCommand: argv.optional(),
-  cases: external_exports.array(external_exports.object({
-    id: external_exports.string().min(1).max(128),
-    lane: external_exports.enum(["development", "held-out", "negative-control"]),
-    input: external_exports.unknown(),
-    expected: external_exports.unknown()
-  }).strict()).min(3).max(1e3),
-  repeats: external_exports.number().int().min(2).max(20).default(3),
-  maxIterations: external_exports.number().int().min(1).max(100).default(3),
-  maxModelTurns: external_exports.number().int().min(1).max(64).default(12),
-  maxModelCostUsd: finitePositive.max(1e3).default(5),
-  maxEvaluationCostUsd: finitePositive.max(1e3).default(5),
-  computeUsdPerSecond: finitePositive.max(10),
-  timeoutMs: external_exports.number().int().min(100).max(6e5).default(6e4),
-  memoryMb: external_exports.number().int().min(32).max(16384).default(1024),
-  cpus: finitePositive.max(16).default(1),
-  maxOutputBytes: external_exports.number().int().min(256).max(16 * 1024 * 1024).default(64 * 1024),
-  maxSourceBytes: external_exports.number().int().min(1024).max(512 * 1024 * 1024).default(64 * 1024 * 1024),
-  maxChangedBytes: external_exports.number().int().min(128).max(4 * 1024 * 1024).default(256 * 1024),
-  model: external_exports.string().min(1).optional(),
-  objective: external_exports.string().min(1).max(16e3),
-  allowModelSourceAccess: external_exports.boolean().default(false),
-  autoPromote: external_exports.boolean().default(false),
-  canaryTrials: external_exports.number().int().min(1).max(20).default(2),
-  promotionPolicy: external_exports.object({
-    minimumCases: external_exports.number().int().min(3).max(1e3).default(DEFAULT_IMPROVEMENT_PROMOTION_POLICY.minimumCases),
-    minimumDevelopmentLift: finitePositive.max(1).default(DEFAULT_IMPROVEMENT_PROMOTION_POLICY.minimumDevelopmentLift),
-    minimumHeldOutLift: finitePositive.max(1).default(DEFAULT_IMPROVEMENT_PROMOTION_POLICY.minimumHeldOutLift),
-    maximumNegativeControlFpDelta: external_exports.literal(0).default(0),
-    maximumCostMultiplier: finitePositive.max(10).default(DEFAULT_IMPROVEMENT_PROMOTION_POLICY.maximumCostMultiplier)
-  }).strict().default({}),
-  maxAlternativeParents: external_exports.number().int().min(0).max(10).optional()
-}).strict();
-function canonicalEvolutionJson(value) {
-  if (value === null || typeof value === "string" || typeof value === "boolean")
-    return JSON.stringify(value);
-  if (typeof value === "number" && Number.isFinite(value))
-    return JSON.stringify(value);
-  if (Array.isArray(value))
-    return `[${Array.from(value, canonicalEvolutionJson).join(",")}]`;
-  if (typeof value === "object" && value !== null && Object.getPrototypeOf(value) === Object.prototype) {
-    return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalEvolutionJson(value[key])}`).join(",")}}`;
-  }
-  throw new Error("evolution cases must contain finite JSON values only");
-}
-function parseEvolutionConfig(raw, baseDir = process.cwd()) {
-  const parsed = schema.parse(raw);
-  const admitted = isAdmittedSmolvmWorkbench();
-  if (admitted) {
-    if (parsed.imageArchive)
-      throw new Error("Admitted workbench images must use the host-approved catalog, not guest archive paths");
-    parsed.backend = "smolvm";
-  }
-  if (parsed.backend === "smolvm") {
-    if (!parsed.imageArchive && !admitted)
-      throw new Error("smolvm requires a local imageArchive");
-    if (!Number.isInteger(parsed.cpus))
-      throw new Error("smolvm cpus must be an integer");
-    if (parsed.imageArchive)
-      parsed.imageArchive = resolve3(baseDir, parsed.imageArchive);
-  } else if (parsed.imageArchive !== void 0) {
-    throw new Error("imageArchive is only valid with backend smolvm");
-  }
-  if (parsed.cases.length * parsed.repeats * 4 * parsed.maxOutputBytes > 64 * 1024 * 1024) {
-    throw new Error("evaluation stream retention exceeds 64 MiB; reduce cases, repeats or maxOutputBytes");
-  }
-  const seenIds = /* @__PURE__ */ new Set();
-  const inputs = /* @__PURE__ */ new Map();
-  for (const entry of parsed.cases) {
-    if (seenIds.has(entry.id))
-      throw new Error(`duplicate evolution case id: ${entry.id}`);
-    seenIds.add(entry.id);
-    const input = canonicalEvolutionJson(entry.input);
-    canonicalEvolutionJson(entry.expected);
-    if (inputs.has(input))
-      throw new Error(`duplicate evaluation input: ${entry.id}; cases and lanes must be independent`);
-    inputs.set(input, entry.lane);
-  }
-  for (const lane of ["development", "held-out", "negative-control"]) {
-    if (parsed.cases.filter((entry) => entry.lane === lane).length < parsed.promotionPolicy.minimumCases) {
-      throw new Error(`${lane} requires at least ${parsed.promotionPolicy.minimumCases} distinct cases`);
-    }
-  }
-  for (const edit of parsed.editablePaths) {
-    if (!parsed.sourcePaths.some((source) => edit === source || edit.startsWith(`${source}/`))) {
-      throw new Error(`editable path ${edit} is not inside a selected source path`);
-    }
-  }
-  const sourceRoot = resolve3(baseDir, parsed.sourceRoot === "~" ? homedir3() : parsed.sourceRoot.startsWith("~/") ? resolve3(homedir3(), parsed.sourceRoot.slice(2)) : parsed.sourceRoot);
-  const storePath = resolve3(baseDir, parsed.storePath === "~" ? homedir3() : parsed.storePath.startsWith("~/") ? resolve3(homedir3(), parsed.storePath.slice(2)) : parsed.storePath);
-  if (sourceRoot === storePath)
-    throw new Error("evolution store cannot be the source workspace");
-  for (const selected of parsed.sourcePaths) {
-    const source = resolve3(sourceRoot, selected);
-    if (storePath === source || storePath.startsWith(`${source}/`) || source.startsWith(`${storePath}/`)) {
-      throw new Error("evolution store and selected source paths must not overlap");
-    }
-  }
-  return JSON.parse(JSON.stringify({ ...parsed, sourceRoot, storePath }));
-}
-function loadEvolutionConfigFile(path) {
-  const absPath = resolve3(path);
-  if (!existsSync2(absPath))
-    throw new Error(`config file not found: ${absPath}`);
-  const configFile = realpathSync(absPath);
-  const raw = JSON.parse(readFileSync5(absPath, "utf8"));
-  const config = parseEvolutionConfig(raw, resolve3(path, ".."));
-  for (const source of config.sourcePaths) {
-    const sourcePath = resolve3(config.sourceRoot, source);
-    const selected = existsSync2(sourcePath) ? realpathSync(sourcePath) : sourcePath;
-    if (configFile === selected || configFile.startsWith(`${selected}${sep2}`)) {
-      throw new Error("evolution config contains private answers and must be outside selected source paths");
-    }
-  }
-  return config;
-}
-
-// packages/core/dist/verification-spec/spec.js
-import { execFile as execFile3 } from "node:child_process";
-import { promises as fs } from "node:fs";
-import { tmpdir as tmpdir3 } from "node:os";
-import { join as join10, resolve as resolve4, isAbsolute as isAbsolute7, normalize, sep as sep3 } from "node:path";
-import { promisify } from "node:util";
-var execFileAsync = promisify(execFile3);
-var MAX_GIT_DIFF_BYTES = 1e6;
-var GIT_CHECK_TIMEOUT_MS = 5e3;
-var FULL_GIT_OBJECT_ID_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i;
-var MAX_PATTERN_LENGTH = 512;
-var MAX_FILE_BYTES = 1e6;
-function resolveRepoPath(repoRoot, file) {
-  if (typeof file !== "string" || file.length === 0)
-    return null;
-  if (isAbsolute7(file))
-    return null;
-  const root = resolve4(repoRoot);
-  const candidate = resolve4(root, file);
-  const normalized = normalize(candidate);
-  if (normalized !== root && !normalized.startsWith(root + sep3)) {
-    return null;
-  }
-  return normalized;
-}
-async function checkRepoBoundary(repoRoot, absPath) {
-  try {
-    await fs.lstat(absPath);
-  } catch {
-    return "missing";
-  }
-  try {
-    const [realRoot, realTarget] = await Promise.all([
-      fs.realpath(repoRoot),
-      fs.realpath(absPath)
-    ]);
-    if (realTarget === realRoot || realTarget.startsWith(realRoot + sep3)) {
-      return "inside";
-    }
-    return "outside";
-  } catch {
-    return "outside";
-  }
-}
-function safeRegex(pattern, flags) {
-  if (typeof pattern !== "string")
-    return null;
-  if (pattern.length > MAX_PATTERN_LENGTH)
-    return null;
-  try {
-    return new RegExp(pattern, flags);
-  } catch {
-    return null;
-  }
-}
-async function readFileSafe(absPath) {
-  try {
-    const stat2 = await fs.stat(absPath);
-    if (!stat2.isFile())
-      return null;
-    if (stat2.size > MAX_FILE_BYTES)
-      return null;
-    return await fs.readFile(absPath, "utf8");
-  } catch {
-    return null;
-  }
-}
-async function evaluateGitDiffApplies(predicate, repoRoot) {
-  if (predicate.diff.trim().length === 0) {
-    return { predicate, passed: false, reason: "git diff is empty" };
-  }
-  if (Buffer.byteLength(predicate.diff, "utf8") > MAX_GIT_DIFF_BYTES) {
-    return {
-      predicate,
-      passed: false,
-      reason: `git diff exceeds ${MAX_GIT_DIFF_BYTES} bytes`
-    };
-  }
-  if (!FULL_GIT_OBJECT_ID_RE.test(predicate.baseCommit)) {
-    return { predicate, passed: false, reason: "invalid git base commit" };
-  }
-  let head;
-  try {
-    const result = await execFileAsync("git", ["rev-parse", "--verify", "HEAD"], {
-      cwd: repoRoot,
-      timeout: GIT_CHECK_TIMEOUT_MS,
-      maxBuffer: 4096
-    });
-    head = result.stdout.trim();
-  } catch {
-    return {
-      predicate,
-      passed: false,
-      reason: "git repository HEAD unavailable"
-    };
-  }
-  if (head.toLowerCase() !== predicate.baseCommit.toLowerCase()) {
-    return {
-      predicate,
-      passed: false,
-      reason: "git HEAD does not match diff base commit"
-    };
-  }
-  let tempDir;
-  try {
-    tempDir = await fs.mkdtemp(join10(tmpdir3(), "0-verify-diff-"));
-    const patchPath = join10(tempDir, "evidence.patch");
-    await fs.writeFile(patchPath, predicate.diff, { encoding: "utf8", mode: 384 });
-    await execFileAsync("git", ["apply", "--check", "--whitespace=nowarn", "--", patchPath], {
-      cwd: repoRoot,
-      timeout: GIT_CHECK_TIMEOUT_MS,
-      maxBuffer: 65536
-    });
-    return {
-      predicate,
-      passed: true,
-      reason: "git diff applies cleanly"
-    };
-  } catch {
-    return {
-      predicate,
-      passed: false,
-      reason: "git diff does not apply cleanly"
-    };
-  } finally {
-    if (tempDir) {
-      try {
-        await fs.rm(tempDir, { recursive: true, force: true });
-      } catch {
-      }
-    }
-  }
-}
-async function evaluateOne(predicate, repoRoot) {
-  switch (predicate.kind) {
-    case "file-exists": {
-      const abs = resolveRepoPath(repoRoot, predicate.file);
-      if (!abs) {
-        return {
-          predicate,
-          passed: false,
-          reason: `path escapes repo root or is invalid: ${predicate.file}`
-        };
-      }
-      const outcome = await checkRepoBoundary(repoRoot, abs);
-      if (outcome === "outside") {
-        return {
-          predicate,
-          passed: false,
-          reason: `path resolves outside repo root: ${predicate.file}`
-        };
-      }
-      const ok = outcome === "inside";
-      return {
-        predicate,
-        passed: ok,
-        reason: ok ? "file exists" : `file not found: ${predicate.file}`
-      };
-    }
-    case "file-contains": {
-      const abs = resolveRepoPath(repoRoot, predicate.file);
-      if (!abs) {
-        return {
-          predicate,
-          passed: false,
-          reason: `path escapes repo root or is invalid: ${predicate.file}`
-        };
-      }
-      const outcome = await checkRepoBoundary(repoRoot, abs);
-      if (outcome === "outside") {
-        return {
-          predicate,
-          passed: false,
-          reason: `path resolves outside repo root: ${predicate.file}`
-        };
-      }
-      if (outcome === "missing") {
-        return {
-          predicate,
-          passed: false,
-          reason: `file not found or unreadable: ${predicate.file}`
-        };
-      }
-      const content = await readFileSafe(abs);
-      if (content === null) {
-        return {
-          predicate,
-          passed: false,
-          reason: `file not found or unreadable: ${predicate.file}`
-        };
-      }
-      const re = safeRegex(predicate.pattern, predicate.flags);
-      if (!re) {
-        return {
-          predicate,
-          passed: false,
-          reason: `invalid regex: /${predicate.pattern}/${predicate.flags ?? ""}`
-        };
-      }
-      const matched = re.test(content);
-      return {
-        predicate,
-        passed: matched,
-        reason: matched ? `pattern matched in ${predicate.file}` : `pattern not found in ${predicate.file}`
-      };
-    }
-    case "file-missing-pattern": {
-      const abs = resolveRepoPath(repoRoot, predicate.file);
-      if (!abs) {
-        return {
-          predicate,
-          passed: false,
-          reason: `path escapes repo root or is invalid: ${predicate.file}`
-        };
-      }
-      const outcome = await checkRepoBoundary(repoRoot, abs);
-      if (outcome === "outside") {
-        return {
-          predicate,
-          passed: false,
-          reason: `path resolves outside repo root: ${predicate.file}`
-        };
-      }
-      if (outcome === "missing") {
-        return {
-          predicate,
-          passed: false,
-          reason: `file not found or unreadable: ${predicate.file}`
-        };
-      }
-      const content = await readFileSafe(abs);
-      if (content === null) {
-        return {
-          predicate,
-          passed: false,
-          reason: `file not found or unreadable: ${predicate.file}`
-        };
-      }
-      const re = safeRegex(predicate.pattern, predicate.flags);
-      if (!re) {
-        return {
-          predicate,
-          passed: false,
-          reason: `invalid regex: /${predicate.pattern}/${predicate.flags ?? ""}`
-        };
-      }
-      const matched = re.test(content);
-      return {
-        predicate,
-        passed: !matched,
-        reason: matched ? `pattern unexpectedly present in ${predicate.file}` : `pattern absent in ${predicate.file}`
-      };
-    }
-    case "git-diff-applies":
-      return evaluateGitDiffApplies(predicate, repoRoot);
-    case "ast-shape": {
-      return {
-        predicate,
-        passed: false,
-        reason: "ast-shape predicates are not yet implemented in the OSS verifier"
-      };
-    }
-    default: {
-      const _exhaustive = predicate;
-      void _exhaustive;
-      return {
-        predicate,
-        passed: false,
-        reason: "unknown predicate kind"
-      };
-    }
-  }
-}
-async function evaluateVerificationSpec(spec, repoRoot) {
-  const results = [];
-  for (const predicate of spec.code) {
-    results.push(await evaluateOne(predicate, repoRoot));
-  }
-  const failedPredicates = results.filter((r) => !r.passed);
-  const hasVulnerabilityPredicate = spec.code.some((predicate) => predicate.kind !== "git-diff-applies");
-  if (!hasVulnerabilityPredicate && !spec.behavior) {
-    return {
-      passed: false,
-      failedPredicates,
-      reason: spec.code.length === 0 ? "no predicates" : "no vulnerability predicates"
-    };
-  }
-  const codePassed = failedPredicates.length === 0 && hasVulnerabilityPredicate;
-  if (spec.behavior) {
-    return {
-      passed: codePassed,
-      failedPredicates,
-      reason: "behavior eval not yet supported"
-    };
-  }
-  return {
-    passed: codePassed,
-    failedPredicates
-  };
-}
-
-// packages/core/dist/improvement/artifacts.js
-import { randomUUID as randomUUID3 } from "node:crypto";
-import { closeSync as closeSync3, constants as constants5, fchmodSync, fstatSync as fstatSync2, fsyncSync as fsyncSync2, linkSync, lstatSync as lstatSync3, mkdirSync as mkdirSync4, openSync as openSync3, readFileSync as readFileSync6, unlinkSync, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname4, isAbsolute as isAbsolute8, join as join11, parse, resolve as resolve5, sep as sep4 } from "node:path";
-var MAX_ARTIFACT_BYTES = 128 * 1024 * 1024;
-function hasCode(error, code) {
-  return error instanceof Error && "code" in error && error.code === code;
-}
-function inspectDirectories(path, create) {
-  if (!isAbsolute8(path))
-    throw new Error("evolution storage paths must be absolute");
-  const absolute = resolve5(path);
-  const root = parse(absolute).root;
-  let cursor = root;
-  for (const component of absolute.slice(root.length).split(sep4).filter(Boolean)) {
-    cursor = join11(cursor, component);
-    if (create) {
-      try {
-        mkdirSync4(cursor, { mode: 448 });
-      } catch (error) {
-        if (!hasCode(error, "EEXIST"))
-          throw error;
-      }
-    }
-    const stat2 = lstatSync3(cursor);
-    if (!stat2.isDirectory() || stat2.isSymbolicLink())
-      throw new Error(`unsafe evolution directory: ${cursor}`);
-  }
-  const leaf = lstatSync3(absolute);
-  if (typeof process.getuid === "function" && leaf.uid !== process.getuid() || (leaf.mode & 63) !== 0) {
-    throw new Error(`evolution storage directory must be owner-only: ${absolute}`);
-  }
-  return absolute;
-}
-function ensureEvolutionDirectory(path) {
-  return inspectDirectories(path, true);
-}
-function readEvolutionArtifact(path) {
-  inspectDirectories(dirname4(path), false);
-  const fd = openSync3(path, constants5.O_RDONLY | constants5.O_NOFOLLOW);
-  try {
-    const stat2 = fstatSync2(fd);
-    if (!stat2.isFile() || stat2.size > MAX_ARTIFACT_BYTES || (stat2.mode & 63) !== 0 || typeof process.getuid === "function" && stat2.uid !== process.getuid()) {
-      throw new Error(`unsafe evolution artifact: ${path}`);
-    }
-    const value = JSON.parse(readFileSync6(fd, "utf8"));
-    canonicalEvolutionJson(value);
-    return value;
-  } finally {
-    closeSync3(fd);
-  }
-}
-function publishEvolutionArtifact(path, value) {
-  const content = canonicalEvolutionJson(value);
-  if (Buffer.byteLength(content) > MAX_ARTIFACT_BYTES)
-    throw new Error("evolution artifact exceeds retention limit");
-  const directory = ensureEvolutionDirectory(dirname4(path));
-  const temporary = join11(directory, `.artifact-${randomUUID3()}.tmp`);
-  const fd = openSync3(temporary, constants5.O_WRONLY | constants5.O_CREAT | constants5.O_EXCL | constants5.O_NOFOLLOW, 384);
-  try {
-    try {
-      writeFileSync3(fd, content, "utf8");
-      fchmodSync(fd, 256);
-      fsyncSync2(fd);
-    } finally {
-      closeSync3(fd);
-    }
-    try {
-      linkSync(temporary, path);
-    } catch (error) {
-      if (!hasCode(error, "EEXIST"))
-        throw error;
-      if (canonicalEvolutionJson(readEvolutionArtifact(path)) !== content) {
-        throw new Error(`immutable evolution artifact collision: ${path}`);
-      }
-    }
-    const directoryFd = openSync3(directory, constants5.O_RDONLY | constants5.O_DIRECTORY | constants5.O_NOFOLLOW);
-    try {
-      fsyncSync2(directoryFd);
-    } finally {
-      closeSync3(directoryFd);
-    }
-  } finally {
-    unlinkSync(temporary);
-  }
-}
-
-// packages/core/dist/agent/apply-patch.js
-import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync7, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname5 } from "node:path";
-var BEGIN = "*** Begin Patch";
-var END = "*** End Patch";
-function parsePatch(input) {
-  const text = input.replace(/\r\n/g, "\n");
-  const lines = text.split("\n");
-  if (lines.length > 0 && lines[lines.length - 1] === "") {
-    lines.pop();
-  }
-  if (lines.length === 0 || lines[0].trim() !== BEGIN) {
-    throw new Error(`apply_patch: envelope must start with "${BEGIN}" (got: ${lines[0] ?? "<empty>"})`);
-  }
-  if (lines[lines.length - 1].trim() !== END) {
-    throw new Error(`apply_patch: envelope must end with "${END}"`);
-  }
-  const body = lines.slice(1, -1);
-  const ops = [];
-  let i = 0;
-  while (i < body.length) {
-    const line = body[i];
-    const trimmed = line.trim();
-    if (trimmed === "") {
-      i += 1;
-      continue;
-    }
-    const addMatch = /^\*\*\* Add File: (.+)$/.exec(trimmed);
-    const replaceMatch = /^\*\*\* Replace File: (.+)$/.exec(trimmed);
-    const updateMatch = /^\*\*\* Update File: (.+)$/.exec(trimmed);
-    const deleteMatch = /^\*\*\* Delete File: (.+)$/.exec(trimmed);
-    if (addMatch || replaceMatch) {
-      const path = (addMatch?.[1] ?? replaceMatch[1]).trim();
-      const overwrite = replaceMatch !== null;
-      i += 1;
-      const contentLines = [];
-      while (i < body.length && !isOpHeader(body[i])) {
-        const ln = body[i];
-        if (ln.length === 0) {
-          contentLines.push("");
-        } else if (ln[0] === "+") {
-          contentLines.push(ln.slice(1));
-        } else {
-          throw new Error(`apply_patch: Add/Replace body lines must start with "+" (got: ${JSON.stringify(ln)})`);
-        }
-        i += 1;
-      }
-      ops.push({
-        kind: "add",
-        path,
-        contents: contentLines.join("\n"),
-        overwrite
-      });
-      continue;
-    }
-    if (deleteMatch) {
-      ops.push({ kind: "delete", path: deleteMatch[1].trim() });
-      i += 1;
-      continue;
-    }
-    if (updateMatch) {
-      const path = updateMatch[1].trim();
-      i += 1;
-      const hunks = [];
-      while (i < body.length && !isOpHeader(body[i])) {
-        const hunkLine = body[i];
-        if (!hunkLine.startsWith("@@")) {
-          throw new Error(`apply_patch: Update File body must begin with "@@ <anchor>" hunk header (got: ${JSON.stringify(hunkLine)})`);
-        }
-        const anchor = hunkLine.slice(2).trim();
-        i += 1;
-        const hunkBody = [];
-        while (i < body.length && !isOpHeader(body[i]) && !body[i].startsWith("@@")) {
-          const ln = body[i];
-          if (ln === "") {
-            hunkBody.push({ kind: "context", text: "" });
-          } else if (ln[0] === " ") {
-            hunkBody.push({ kind: "context", text: ln.slice(1) });
-          } else if (ln[0] === "+") {
-            hunkBody.push({ kind: "add", text: ln.slice(1) });
-          } else if (ln[0] === "-") {
-            hunkBody.push({ kind: "del", text: ln.slice(1) });
-          } else {
-            throw new Error(`apply_patch: Update hunk body lines must start with " ", "+", or "-" (got: ${JSON.stringify(ln)})`);
-          }
-          i += 1;
-        }
-        hunks.push({ anchor, body: hunkBody });
-      }
-      if (hunks.length === 0) {
-        throw new Error(`apply_patch: "Update File: ${path}" requires at least one "@@" hunk`);
-      }
-      ops.push({ kind: "update", path, hunks });
-      continue;
-    }
-    throw new Error(`apply_patch: unknown directive (got: ${JSON.stringify(trimmed)})`);
-  }
-  if (ops.length === 0) {
-    throw new Error("apply_patch: envelope contains no operations");
-  }
-  return ops;
-}
-function isOpHeader(line) {
-  return line.startsWith("*** Add File:") || line.startsWith("*** Replace File:") || line.startsWith("*** Update File:") || line.startsWith("*** Delete File:");
-}
-function applyPatchOps(ops, pathResolver) {
-  const applied = [];
-  for (const op of ops) {
-    const abs = pathResolver(op.path);
-    if (op.kind === "add") {
-      if (!op.overwrite && existsSync3(abs)) {
-        throw new Error(`apply_patch: Add File "${op.path}" failed \u2014 file already exists. Use "*** Replace File: ${op.path}" to overwrite.`);
-      }
-      mkdirSync5(dirname5(abs), { recursive: true });
-      writeFileSync4(abs, op.contents, "utf-8");
-      applied.push({ kind: "add", path: op.path });
-      continue;
-    }
-    if (op.kind === "delete") {
-      if (!existsSync3(abs)) {
-        throw new Error(`apply_patch: Delete File "${op.path}" failed \u2014 file does not exist`);
-      }
-      unlinkSync2(abs);
-      applied.push({ kind: "delete", path: op.path });
-      continue;
-    }
-    if (!existsSync3(abs)) {
-      throw new Error(`apply_patch: Update File "${op.path}" failed \u2014 file does not exist`);
-    }
-    const original = readFileSync7(abs, "utf-8");
-    const updated = applyUpdateHunks(original, op.path, op.hunks);
-    writeFileSync4(abs, updated, "utf-8");
-    applied.push({ kind: "update", path: op.path });
-  }
-  return { applied };
-}
-function applyUpdateHunks(source, logicalPath, hunks) {
-  const hadTrailingNewline = source.endsWith("\n");
-  const sourceBody = hadTrailingNewline ? source.slice(0, -1) : source;
-  let lines = sourceBody.split("\n");
-  for (const hunk of hunks) {
-    const anchorIdx = locateAnchor(lines, hunk.anchor, logicalPath);
-    const { newLines, consumed } = applyOneHunk(lines, anchorIdx, hunk, logicalPath);
-    lines = [
-      ...lines.slice(0, anchorIdx),
-      ...newLines,
-      ...lines.slice(anchorIdx + consumed)
-    ];
-  }
-  return lines.join("\n") + (hadTrailingNewline ? "\n" : "");
-}
-function locateAnchor(lines, anchor, logicalPath) {
-  if (anchor === "") {
-    return 0;
-  }
-  const matches = [];
-  for (let i = 0; i < lines.length; i++) {
-    if (lines[i].includes(anchor)) {
-      matches.push(i);
-    }
-  }
-  if (matches.length === 0) {
-    throw new Error(`apply_patch: anchor "${anchor}" not found in ${logicalPath}; refine the @@ anchor to a line that exists in the file`);
-  }
-  if (matches.length > 1) {
-    throw new Error(`apply_patch: context "${anchor}" matches ${matches.length} locations in ${logicalPath}; refine the @@ anchor to be unique`);
-  }
-  return matches[0];
-}
-function applyOneHunk(lines, anchorIdx, hunk, logicalPath) {
-  const newLines = [];
-  let cursor = anchorIdx;
-  for (const entry of hunk.body) {
-    if (entry.kind === "context") {
-      const observed = lines[cursor];
-      if (observed === void 0 || observed !== entry.text) {
-        throw new Error(`apply_patch: context mismatch in ${logicalPath} at line ${cursor + 1}: expected ${JSON.stringify(entry.text)}, got ${JSON.stringify(observed ?? "<eof>")}`);
-      }
-      newLines.push(entry.text);
-      cursor += 1;
-      continue;
-    }
-    if (entry.kind === "del") {
-      const observed = lines[cursor];
-      if (observed === void 0 || observed !== entry.text) {
-        throw new Error(`apply_patch: removed line mismatch in ${logicalPath} at line ${cursor + 1}: expected ${JSON.stringify(entry.text)}, got ${JSON.stringify(observed ?? "<eof>")}`);
-      }
-      cursor += 1;
-      continue;
-    }
-    newLines.push(entry.text);
-  }
-  return { newLines, consumed: cursor - anchorIdx };
-}
-
-// packages/core/dist/agent/tools/scope-path.js
-import { lstatSync as lstatSync4, realpathSync as realpathSync2 } from "node:fs";
-import { basename, dirname as dirname6, isAbsolute as isAbsolute9, resolve as resolve6, sep as sep5 } from "node:path";
-function pathEntryExists(path) {
-  try {
-    lstatSync4(path);
-    return true;
-  } catch (error) {
-    if (error.code === "ENOENT")
-      return false;
-    throw error;
-  }
-}
-function canonicalizePath(path) {
-  const missingSegments = [];
-  let existingPath = path;
-  while (!pathEntryExists(existingPath)) {
-    const parent = dirname6(existingPath);
-    if (parent === existingPath) {
-      throw new Error(`Path does not have an existing parent: ${path}`);
-    }
-    missingSegments.unshift(basename(existingPath));
-    existingPath = parent;
-  }
-  return resolve6(realpathSync2(existingPath), ...missingSegments);
-}
-function isScopedPath(scopePath, inputPath) {
-  const root = realpathSync2(scopePath);
-  const logicalCandidate = isAbsolute9(inputPath) ? resolve6(inputPath) : resolve6(root, inputPath);
-  const candidate = canonicalizePath(logicalCandidate);
-  return candidate === root || candidate.startsWith(root + sep5);
-}
-function resolveScopedPath(scopePath, inputPath) {
-  if (isScopeEnforcementEnabled() && (!scopePath || !isScopedPath(scopePath, inputPath))) {
-    throw new Error(`Path escapes the allowed scope: ${inputPath}`);
-  }
-  const root = scopePath ? realpathSync2(scopePath) : process.cwd();
-  const logicalCandidate = isAbsolute9(inputPath) ? resolve6(inputPath) : resolve6(root, inputPath);
-  return canonicalizePath(logicalCandidate);
-}
-
 export {
-  DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
-  evaluateImprovementPromotion,
-  appendImprovementLedgerEntry,
-  verifyImprovementLedger,
   superviseChild,
   runScannerProcess,
   buildSqlmapArgv,
@@ -5457,9 +4503,8 @@ export {
   shellTokens,
   ANALYTICS_LEVEL_ENV,
   levelAtLeast,
+  analyticsOptedOut,
   resolveAnalyticsLevel,
-  presentationEventSink,
-  eventBus,
   DEFAULT_CLOUD_HOST,
   CloudAuthMissingError,
   CloudAuthError,
@@ -5493,6 +4538,7 @@ export {
   truncateMiddle,
   formatTruncated,
   parseRepositoryAcquisition,
+  repositoryIdentityMatchesTarget,
   repositoryAcquisitionAllowed,
   runRepositoryAcquisition,
   assertSmolvmWorkbenchPlatform,
@@ -5504,20 +4550,11 @@ export {
   getSmolvmWorkbenchStatus,
   resolveSmolvmImage,
   runSmolvm,
+  WORKBENCH_BROKER_WORKSPACE,
   DEFAULT_WORKBENCH_BROKER_LIMITS,
   isAdmittedSmolvmWorkbench,
   getWorkbenchBrokerLimits,
   resolveWorkbenchBrokerImage,
   startWorkbenchBroker,
-  runWorkbenchBrokerProgram,
-  canonicalEvolutionJson,
-  parseEvolutionConfig,
-  loadEvolutionConfigFile,
-  ensureEvolutionDirectory,
-  readEvolutionArtifact,
-  publishEvolutionArtifact,
-  evaluateVerificationSpec,
-  parsePatch,
-  applyPatchOps,
-  resolveScopedPath
+  runWorkbenchBrokerProgram
 };