0sec-cli 0.24.1 → 0.25.0

package/chunks/{dist-TQMHMSBZ.js → dist-6RNAVFAY.js}

@@ -2,11 +2,6 @@
 import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
-  BenchCaseSchema,
-  BenchIntegrationRegistry,
-  BenchManifestSchema,
-  BenchObjectiveSchema,
-  BenchTargetSchema,
   CANONICAL_WEB_CHAINS,
   CHAIN_AUTHBYPASS_SQLI_EXFIL,
   CHAIN_IDOR_PRIVESC_ATO,
@@ -15,27 +10,20 @@ import {
   COMPACT_ACTIONS_RENDER_CAP,
   COMPACT_ACTION_CHARS,
   COMPACT_DETAIL_CHARS,
-  Cpg,
   CraftMemoryStore,
-  CraftStagedOrchestrator,
   DEFAULT_MAX_TOOL_ITERATIONS,
   DEFAULT_RACE_WIDEN_DELAY_MS,
   DEFAULT_REGISTRY_URL,
   DEFAULT_SEED_DIRS,
-  DEFAULT_STRATEGIES,
   DEFAULT_TARGET_SUBSYSTEMS,
   DEFAULT_WORKBENCH_PROVIDER_LIMITS,
   DISPATCH2022,
   DISTRO_DEFAULTS,
   ENGINE_OPERATIONS,
-  EnforcementTracker,
   EngineAssessmentPlanSchema,
   EngineAssessmentSchema,
   EngineService,
   EngineStartRunSchema,
-  FEATURE_NAMES,
-  FindingMatchObjectiveSchema,
-  FlagCaptureObjectiveSchema,
   GADGET_FACTORIES,
   GADGET_KINDS,
   GADGET_SETUP_MARKER,
@@ -60,7 +48,6 @@ import {
   KERNEL_RUN_PROGRAM_MAX_BYTES,
   KERNEL_RUN_TOOL_DEFINITION,
   KNOWN_ATTACK_SURFACES,
-  LIFETIME_SINKS,
   LinuxBootMatrixImportAdapter,
   LinuxKernelResearchAdapter,
   LiveAgenticScanResearchAdapter,
@@ -68,30 +55,25 @@ import {
   MAX_OBJECTIVE_CHARS,
   MAX_OBJECTIVE_WORDS,
   McpHost,
-  MemoryStore,
   MobileStaticResearchAdapter,
-  OPT_IN_MOAT_LAYERS,
-  ObjectiveOracle,
   PROGRAM_MAGIC,
   PROGRAM_VERSION,
-  PathPolicy,
   ProtocolHttpResearchAdapter,
   RECENCY_DENYLIST,
   RECENCY_DETECTORS_ALL,
   RECENCY_DETECTORS_FULL,
   RECENCY_REACHABLE_ALLOWLIST,
   REPORT_EXPORT_FORMATS,
+  ROUTING_ROLES,
   ResearchAdapterRegistry,
   SEMANTIC_COSMETIC_RUBRIC,
   STAGE_ACTION_HISTORY_CAP,
   SYNTH_TOOL,
   SYNTH_TOOL_NAME,
-  SourceAuditTargetSchema,
-  SuiteOracleObjectiveSchema,
-  SuiteTaskTargetSchema,
+  TASK_ROUTING_EVALUATOR_DIGEST,
+  TASK_ROUTING_SUITE_DIGEST,
   TECHNIQUE_LIBRARY,
   TartVmLane,
-  UNINSTRUMENTED_LAYERS,
   UnifiedPipelineResearchAdapter,
   UserspaceCounterexampleResearchAdapter,
   UserspaceMemSafetyResearchAdapter,
@@ -108,51 +90,30 @@ import {
   XNU_RECEIPT_SCHEMA_VERSION,
   XnuIokitResearchAdapter,
   XnuReceiptReplayer,
-  activeAppsecLensRegistryPath,
-  addAttackResult,
-  addFinding,
-  agenticScan,
   allocateCandidatesAcrossLanes,
-  alreadyFixedInTarget,
   appFixVariantsToSeedFindings,
-  appendLedgerEntry,
   appendProposalAttempt,
   appendStageAction,
   applySurfaceRanking,
   applyVerificationToFinding,
-  approveObservation,
-  appsecArchetypeDigest,
-  appsecArchetypeToFinderLens,
-  appsecArchetypesPath,
-  appsecLensLedgerEntryDigest,
-  appsecUserArchetypesPath,
   arbReadValueWitnessed,
   arbWriteFaultWitnessed,
   arbWriteTargetV,
-  assessEscalation,
   atlasTechniquesForCategory,
   atlasTechniquesForEvent,
   attemptExploitabilityUpgrade,
   attemptWinRace,
-  auditReportToBenchResult,
-  autoTriage,
   automationVerdict,
   autonomousClimb,
-  breakRecordToFinding,
-  buildCandidateJudgePrompt,
   buildCompositionGraph,
   buildConsoleSystemPrompt,
-  buildCraftCpgContext,
-  buildCraftTargetSpec,
   buildDeepScanPrompt,
   buildGraphSliceHuntContext,
   buildInvariantHuntContext,
-  buildKernelPromotionEnvelope,
   buildKernelVerifyInitialPrompt,
   buildKernelVerifySystemPrompt,
   buildMcpAuditPrompt,
   buildRegistryEntry,
-  buildSlice,
   buildSourceAnalysisPrompt,
   buildTier1Harness,
   buildTier2Harness,
@@ -161,10 +122,8 @@ import {
   cacheMissStallGadget,
   cairoFinderLenses,
   cairoVerifyLenses,
-  callMcpTool,
   canonicalEntryPayload,
   captureLensCandidates,
-  captureObservation,
   cardanoFinderLenses,
   cardanoVerifyLenses,
   categoryToWebKind,
@@ -173,15 +132,11 @@ import {
   checkFixPresentInTarget,
   checkNotYetIntroduced,
   checkResearchNovelty,
-  claimForProcessing,
   classifyBashCommand,
   classifyPatchGapReachability,
   classifySemanticVsCosmetic,
   classifyToolRisk,
-  classifyVerifyOutcome,
   clusterCandidates,
-  compareScorecards,
-  compileAndRunReproducer,
   composeGadgetSetup,
   computePriorityScore,
   computeSurfaceScore,
@@ -190,36 +145,27 @@ import {
   connectServicePlugins,
   consolidateMemory,
   controlRungForDemo,
-  corpusV1Path,
   countCommits,
   coverageGapToCandidate,
-  craftedPocToFinding,
   crashSeverity,
   crashSignatureFromReport,
   crashSignatureFromText,
   crashSummaryFromTriage,
   crashToFinding,
   crashTypeToCategory,
-  createAgenticScanAdapter,
-  createBenchIntegrationRegistry,
   createConsoleJevRuntime,
   createConsoleRuntime,
   createConsoleSession,
-  createCoreBenchIntegration,
   createDefaultResearchRegistry,
-  createDefaultVariantScan,
-  createDockerWebProvisioner,
   createEvolvedFinder,
   createHerdrEventSink,
+  createLocalOllamaRoutingRuntime,
   createOperationalEventSink,
-  createPackageAuditScanAdapter,
   createProposalAttempt,
   createR2Backend,
   createReproductionBundle,
-  createScanContext,
   createSessionObjectiveService,
   createStubSignatureVerifier,
-  createVariantExecutionFactory,
   createWorkbenchProviderBroker,
   createXnuFuzzReceipt,
   decodeProgram,
@@ -241,43 +187,31 @@ import {
   deriveObjectiveHeuristic,
   deriveSubsystemScope,
   describeDestructiveCategory,
-  describeEscalation,
   detectBuildSystem,
   detectKasanSplat,
-  digestBenchManifest,
-  discoverMcpTarget,
   discoverObjectSubset,
   dispatchTableByteLength,
   emitMarkerHelper,
-  emptyLedger,
   encodeProgram,
   enumerateAttackSurfaces,
   enumerateTargetModel,
   enumerateTargetModelFromKext,
   epollWaitqueueFloodGadget,
-  evaluateRegression,
   evaluateSignature,
   evmFinderLenses,
   evmVerifyLenses,
-  exampleManifestPath,
   executeAssessment,
   executeAssessmentRun,
   executeKernelRun,
   executeWorkflow,
   exportReport,
   extractCorpus,
-  extractCraftCpgTargets,
-  extractDupeSignature,
-  extractFeatures,
   extractKernelFindingMetadata,
   extractKernelFunctions,
   extractTouchedFunctions,
   fetchRegistryIndex,
   fileDiff,
-  finalize,
-  findCraftFuzzerEntrypoints,
   findInstallable,
-  findTargets,
   fnv1a64,
   foldExploitabilityIntoSeverity,
   foldWeaponizationIntoVerdict,
@@ -287,8 +221,6 @@ import {
   formatGraphSlicePromptBlock,
   formatInvariantPromptBlock,
   formatStageDetail,
-  formatTournamentSummary,
-  formatTriageProvenance,
   foxguardFindingToKernelVariantFinding,
   foxguardLeadSource,
   futexHoldGadget,
@@ -297,63 +229,42 @@ import {
   generateInputsForSelector,
   generateInvariantCandidates,
   generateRaceSmellCandidates,
-  generateRemediation,
-  generateRemediationWithLLM,
   generateSyzChoiceWeights,
-  getObservation,
   getProgram,
   getStructuredScopes,
   getTechnique,
-  harvestEvidenceText,
   hasLiveAgentState,
-  hasValidValidation,
   havoc,
-  heuristicCraftCandidateScore,
   hex64,
   huntAppFixVariants,
-  inferPackage,
   ingestArtifactsFromDirectory,
   ingestArtifactsFromFile,
   ingestDirectory,
   ingestFile,
-  injectOps,
   inspectLensRegistry,
   installableFromEntry,
   instantiateGadget,
-  isConfirmed,
   isCrossLanguageHint,
   isDangerousLocalRoot,
   isDispatchTableSymbol,
   isHardToFuzzSurface,
-  isHypothesisOnly,
   isPlannable,
   isReachablePath,
   isReportExportFormat,
   isVariable,
-  judgeCraftCandidatesWithLlm,
   kcsanRaceToBrief,
   kcsanRaceToFinding,
-  knownDupe,
-  lastGreen,
   lengthBoundaryValues,
   lifetimeTokenSignal,
-  listMcpTools,
-  listObservations,
   listPrograms,
   listProjectReviewChecks,
-  loadAppsecArchetypes,
-  loadAppsecFinderLenses,
-  loadCpg,
   loadH1Credentials,
-  loadLedger,
-  loadManifest,
   loadVulnsFeedFromDir,
   makeDefaultLensSynthesisModel,
   makeDifferentialGate,
   makeDifferentialOracle,
   makeDiversifyOracle,
   makeExploitabilityGate,
-  makeFinderLensProbe,
   makeHuntProveStage,
   makeKernelVmDifferentialRunner,
   makeKernelVmDiversifyRunner,
@@ -366,16 +277,11 @@ import {
   makeRng,
   makeRungRankingGate,
   makeSecondAuditRefiner,
-  makeTargetTreeLookup,
   makeTemplateRacePocSynth,
   makeWeaponizeHook,
   mapVerificationToOutcome,
-  markProcessed,
-  matchCrashSignature,
   matchesLane,
-  maxCeiling,
   maybeSubscribeOperationalEventSink,
-  mergeCraftEvidence,
   mineSyzbotQueue,
   mintRootProofChallenge,
   moveFinderLenses,
@@ -386,36 +292,21 @@ import {
   normalizeFrame,
   normalizeStageAction,
   normalizeStageEndDetail,
-  objectiveOracle,
-  objectiveOracleEvaluatorAttestation,
-  objectiveOracleEvaluatorCodeBytes,
-  objectiveOracleEvaluatorConfigJson,
-  observationDigest,
-  observationQueueSummary,
   orderWorkflowNodes,
-  packageAudit,
-  pairwiseDeltas,
-  parseApprovedObservationShape,
   parseAutoconfHeader,
   parseBugDetailKernelVersion,
   parseCraftCandidateReview,
-  parseCraftStageCitations,
   parseCrashReport,
   parseDispatchTable,
-  parseEnsembleModels,
-  parseImpactAssessment,
-  parseJudgeJson,
   parseKcsanReport,
   parseKernelConfig,
   parseListing,
   parseListingRow,
-  parseLlmEscalation,
-  parseManifest,
   parseMcpConfig,
   parseNameStatus,
   parseNestedName,
-  parseObservationInput,
   parseRegistryIndex,
+  parseRoutingQualificationPlan,
   parseSeedFindings,
   parseSelectorMapText,
   parseSubsystems,
@@ -423,24 +314,19 @@ import {
   parseThreatLaneJson,
   parseVulnsCveRecord,
   parseWidenTarget,
-  partitionCases,
   persistMisses,
-  pickChampion,
   planChains,
   planSingleShardRun,
-  prepareValidationCorpus,
+  preflightTaskRouting,
   preseedMemory,
   primitiveBaselineClass,
-  projectResearchExecutionEvidence,
-  projectResearchImprovementResult,
   promoteFindingsWithTier3Result,
   proposalReplayDigest,
   proposalTrainingExamples,
   proposalsFromInvariantViolations,
   provenExploitabilityScore,
-  raceStrategies,
+  qualifyTaskRouting,
   raceWidenEnv,
-  raceWithDefaults,
   radarCandidatesToSeedFindings,
   rankAndDedupeFoxguardLeads,
   rankBugsByProvenRung,
@@ -449,32 +335,17 @@ import {
   rankKernelCommitsWithJev,
   rankKernelHypothesesWithJev,
   rankResearchProposals,
-  reachabilityGate,
   reachableTargets,
   readProposalReplay,
   readSeedFindings,
+  recommendQualifiedRouting,
   reduceLiveAgentState,
   registerArchetype,
-  rejectObservation,
-  releaseClaim,
-  releaseStaleClaims,
-  renderCraftTargetSpec,
-  renderEmptyScoreboard,
   renderLibraryBrief,
   renderRaceHarness,
   renderRecencyReportMarkdown,
   renderRungReliabilitySeeds,
-  renderScoreboard,
-  renderSlice,
   renderTriggerSeed,
-  researchCandidateChangeDigest,
-  researchExecutionEvidenceDigest,
-  researchExecutionEvidenceRef,
-  researchVariantDescriptor,
-  researchVariantDescriptorDigest,
-  resolveEnsembleModels,
-  resolveMcpEndpoint,
-  resolveNovelty,
   resolveRange,
   retireArchetype,
   reviewChecksFilePath,
@@ -482,22 +353,14 @@ import {
   reviewKernelCrashSubsystems,
   rootProofInstructions,
   runBehavioralRepair,
-  runBenchCase,
-  runBenchSuite,
   runCliPathTraversalReplayFixture,
-  runCraftScan,
   runDifferential,
-  runEGATS,
-  runEGATSWithDefaults,
-  runEnsembleCraft,
   runExploitScan,
   runFormalResearchCampaign,
   runKernelExploitChain,
   runKernelSourceJevPrepass,
   runKernelVariantHunt,
   runLensSynthesisLoop,
-  runLlmIpiAudit,
-  runMcpSecurityChecks,
   runMobileStaticIntake,
   runPipeline,
   runProposalLearningLoop,
@@ -508,30 +371,21 @@ import {
   runResearch,
   runSecondAudit,
   runSecureProject,
-  runSelfConsistencyVerify,
   runSmolvmWorkbench,
   runStaticAnalysis,
-  runStructuredVerify,
   runThreatModelPlanner,
   runTier3Validation,
-  runTournament,
   rungRankingEnabled,
   sameCrash,
-  sanitizerOutputFromCraftResult,
-  saveLedger,
   scaffoldTier1Harness,
   scaffoldTier2Harness,
   scan,
   scanForModuleInit,
   scanForPatchGapCandidates,
   scanRepoCommitsWithJev,
-  scanReportToBenchResult,
-  scoreEvidence,
-  scoreMemory,
   scoreResearchProposal,
   scoreSurfaceDesirability,
   searchInstallable,
-  selectCiCases,
   selectRaceGadgets,
   selectSprayPlans,
   selectSubsystemSourceSlice,
@@ -539,27 +393,21 @@ import {
   selectorModelToLine,
   serializeProposalReplay,
   setEnv,
-  shouldWeaponize,
-  shouldWeaponize2,
+  shouldWeaponize as shouldWeaponize2,
   signatureKey,
-  sliceAroundTargets,
-  snapshotBenchVariant,
   snapshotProjectReviewChecks,
   snapshotSmolvmWorkspace,
   solanaFinderLenses,
   solanaVerifyLenses,
   sourceReview,
   spliceGadgetSetup,
-  subsetManifest,
   summariseScopes,
-  summariseTree,
-  summarizeTriageProvenance,
   synthesizeArchetypes,
   syzChoiceWeightsFromPlan,
   syzWeightingContextFromJev,
   syzbotQueueBrief,
   tableMetrics,
-  tallyConsensus,
+  taskRoutingFixtureRuntime,
   techniquesForBug,
   techniquesForCategory,
   techniquesForEvent,
@@ -572,7 +420,6 @@ import {
   toScopeFile,
   toScopeJson,
   toToolContextJevRuntime,
-  toVerifyVerdict,
   trainProposalRanker,
   triageKcsanRace,
   triggerSplatWitnessed,
@@ -581,28 +428,21 @@ import {
   unconfiguredVerifier,
   updateProjectReviewChecks,
   validateBundlePlan,
-  validateCandidateLens,
-  validateCrashReportConsistency,
   validateKernelRunArgs,
   validateProposalAttempt,
   validateProposalReplay,
   validateXnuFuzzReceipt,
   variableLengthSchedule,
-  verify,
   verifyFormalArtifact,
-  verifyKernelCrash,
   verifyRootProof,
-  verifyStandaloneKernelReproducer,
   verifyStaticKernelFinding,
-  verifyStatusFromOutcome,
   weaponizationProven,
   webFindingToPrimitiveNode,
   widenEnvFor,
   withEnvOverrides,
-  withVariantFeatureFlags,
   xnuArtifactDigest
-} from "./chunk-ZM6ANQZJ.js";
-import "./chunk-H5QURBBK.js";
+} from "./chunk-EEP6GBUO.js";
+import "./chunk-AL32F74R.js";
 import {
   MAX_POC_BYTES,
   PocFetchError,
@@ -611,14 +451,10 @@ import {
   extractInlineCodeBlock,
   fetchPoc,
   renderAdaptationPrompt
-} from "./chunk-5NFIY2SJ.js";
+} from "./chunk-FI5YL4R2.js";
 import {
-  RateLimiter,
-  TokenBucket,
-  enumerateJsChunkUrls,
-  parseRateLimitFlag,
-  parseRetryAfter
-} from "./chunk-BOBIAHKA.js";
+  enumerateJsChunkUrls
+} from "./chunk-WK6VUCKK.js";
 import {
   createLiveHttpSender
 } from "./chunk-GVD6SJGH.js";
@@ -632,23 +468,7 @@ import {
 import {
   getEvalCategories,
   runEval
-} from "./chunk-S2GITRD5.js";
-import {
-  classifyUserspacePrimitive,
-  crashArtifactToFinding,
-  describeExploitabilityVerdict,
-  generatePov,
-  isReproducedMemCorruption,
-  judgePovEvidence,
-  maxMemSeverity,
-  memCorruptionVerdict,
-  memPrimitiveToCategory,
-  oracleForCategory,
-  parseCrashOutput,
-  runMemSafetyScan,
-  runUserspaceFuzzLoop,
-  sniffMemPrimitive
-} from "./chunk-IIBNQTOK.js";
+} from "./chunk-PMAKX6KP.js";
 import {
   leadToFinding,
   runNpmDynamicDiscovery
@@ -690,35 +510,16 @@ import {
   runStrategy,
   runWeaponization,
   selectStrategies
-} from "./chunk-3WUPCZGF.js";
-import {
-  BENIGN_MAX_CLASS,
-  UPGRADE_MIN_CLASS,
-  classifyDmesgDanger,
-  classifyKernelPrimitive,
-  classifyPrimitiveFromDmesg,
-  describeKernelPrimitive,
-  isDangerUpgrade,
-  maxDangerClass,
-  rankDanger
-} from "./chunk-UJE4WOQS.js";
+} from "./chunk-FI2H6HV2.js";
 import {
   detectTargetType,
-  expandHomePath,
-  isExistingLocalTargetPath,
-  isExplicitLocalTargetPath,
-  prepare,
-  resolveLocalTargetPath
-} from "./chunk-PJU24AKR.js";
+  prepare
+} from "./chunk-HJKJ4NQP.js";
 import {
   applyReachabilityGate,
   classifyPathReachability,
   generateVariantCandidates
-} from "./chunk-6XMFCVJS.js";
-import {
-  collectScopeFiles,
-  countScopeFilesUpTo
-} from "./chunk-AZ7L3HFD.js";
+} from "./chunk-TFKY6D7O.js";
 import {
   ASSUMPTION_MODEL_VERSION,
   INVARIANT_MODEL_VERSION,
@@ -759,124 +560,68 @@ import {
   violationsToHuntPlan,
   witnessAssumptionViolation,
   witnessDualViewContexts
-} from "./chunk-TVS6WVSK.js";
-import {
-  CHROMIUM_BARE_WORDS,
-  FREEBSD_BARE_KERNEL_WORDS,
-  HUNT_CLAIM_SCHEMA_VERSION,
-  HUNT_MEMORY_LAYERS,
-  HuntMemory,
-  MAX_CLAIM_STATEMENT_CHARS,
-  MAX_EVIDENCE_PER_CLAIM,
-  MAX_KNOWN_NEGATIVES,
-  MAX_NEGATIVE_REASON_CHARS,
-  NEGATIVE_MIN,
-  OWN_FROM_MARKERS,
-  PRIME_MIN,
-  appendHuntClaim,
-  applyDeploymentContextCap,
-  archetypeSweepEnabled,
-  archetypeToHuntBrief,
-  auditAgentPrompt,
-  availableRefuterCandidates,
-  candidateGrepPatterns,
-  canonicalProposalJson,
-  checkNovelty,
-  chromiumArchetypesPath,
-  classTokens,
-  classifyDeploymentContext,
-  composeGate,
-  createHuntClaim,
-  createResearchProposal,
-  crossFamilyRefuteEnabled,
-  deriveSearchTerms,
-  describeRefuterChoice,
-  digestTargetSnapshot,
-  discoverEpochs,
-  disprovenHuntClaims,
-  filterArchetypes,
-  findingToQuery,
-  findingTokens,
-  freebsdArchetypesPath,
-  generateArchetypeCandidates,
-  hasTrustBoundaryBypass,
-  heuristicCandidateScore,
-  huntFlywheelEnabled,
-  huntNegativesEnabled,
-  hypothesisOnly,
-  jaccard,
-  judgeHuntCandidatesWithLlm,
-  kernelArchetypesPath,
-  liveGit,
-  loadChromiumArchetypes,
-  loadFreebsdArchetypes,
-  loadHuntCorpusRows,
-  loadHuntLedger,
-  loadKernelArchetypes,
-  loadKnownNegatives,
-  loadKnownNegativesFromEnv,
-  loadKnownNegativesFromLedger,
-  localMirrors,
-  makeLloreJudge,
-  makeMultiLensVerifier,
-  makeSkepticVerifier,
-  matchNegative,
-  memoryTokens,
-  needsKernelVerify,
-  negativeContext,
-  normalizeProposalPath,
-  planArchetypeSweep,
-  primedOrderKey,
-  proposalDigest,
-  provePriming,
-  readHuntLedger,
-  refuterFamily,
-  resolveHuntLedger,
-  reviewAgentPrompt,
-  runAgentLoop,
-  runAnalysisAgent,
-  runHuntScan,
-  selectCrossFamilyRefuter,
-  staleHuntClaims,
-  stampDeploymentContext,
-  symbolsFromDetectionSignature,
-  syncLoreMirror,
-  unresolvedHuntClaims,
-  validateHuntClaimRecord,
-  validateResearchProposal
-} from "./chunk-YSQWZ67M.js";
+} from "./chunk-76CLUI54.js";
 import {
   ACTION_LOG_ARGS_MAX,
   ACTION_LOG_ARG_VALUE_MAX,
   BROADCAST_ID,
   BUILTIN_GUARDS,
+  BenchCaseSchema,
+  BenchIntegrationRegistry,
+  BenchManifestSchema,
+  BenchObjectiveSchema,
+  BenchTargetSchema,
+  CHROMIUM_BARE_WORDS,
   CONSERVATIVE_JITTER_MS,
   CONSERVATIVE_RPS,
+  Cpg,
+  CraftStagedOrchestrator,
   DEFAULT_CONCURRENCY,
   DEFAULT_MAX_DURATION_MS,
   DEFAULT_MCP_PATHS,
   DEFAULT_SPEC_PATHS,
   DEFAULT_STEP_TIMEOUT_MS as DEFAULT_STEP_TIMEOUT_MS2,
+  DEFAULT_STRATEGIES,
   DEFAULT_SUBDOMAIN_WORDLIST,
   DockerRunner,
   ENGAGEMENT_PROFILE_NAMES,
+  EnforcementTracker,
   ExecutablePluginManager,
+  FEATURE_NAMES,
+  FREEBSD_BARE_KERNEL_WORDS,
+  FindingMatchObjectiveSchema,
+  FlagCaptureObjectiveSchema,
+  HUNT_CLAIM_SCHEMA_VERSION,
+  HUNT_MEMORY_LAYERS,
   HUNT_MEMORY_SCHEMA_VERSION,
   HUNT_REDACTED,
+  HuntMemory,
   HuntMemoryStore,
+  LIFETIME_SINKS,
   LearningService,
   LiveHarnessHost,
   LocalShellRunner,
   MAX_BODY_CHARS,
   MAX_CANDIDATES,
+  MAX_CLAIM_STATEMENT_CHARS,
+  MAX_EVIDENCE_PER_CLAIM,
   MAX_EXTENSIONS_PER_SESSION,
   MAX_GUARDS_PER_EXTENSION,
   MAX_INBOX_MESSAGES,
   MAX_JS_FILES,
+  MAX_KNOWN_NEGATIVES,
   MAX_MANIFEST_BYTES,
+  MAX_NEGATIVE_REASON_CHARS,
   MAX_STREAM_CAPTURE_BYTES,
   MAX_TOOLS_PER_EXTENSION,
   MAX_TOOLS_PER_SESSION,
+  MemoryStore,
+  NEGATIVE_MIN,
+  OPT_IN_MOAT_LAYERS,
+  OWN_FROM_MARKERS,
+  ObjectiveOracle,
+  PRIME_MIN,
+  PathPolicy,
   QemuRunner,
   SCOPE_DEPENDENT_BASH_GUARDS,
   SCOPE_GUARDS_INERT_EVENT,
@@ -885,52 +630,121 @@ import {
   STREAM_EXCERPT_BYTES,
   SelfExtensionRegistry,
   SmolvmRunner,
+  SourceAuditTargetSchema,
+  SuiteOracleObjectiveSchema,
+  SuiteTaskTargetSchema,
   TOOL_DEFINITIONS,
   TodoTracker,
   ToolExecutor,
   ToolHealthTracker,
+  UNINSTRUMENTED_LAYERS,
+  activeAppsecLensRegistryPath,
+  addAttackResult,
+  addFinding,
   agentTaskLabel,
+  agenticScan,
   aggregateScorecard,
+  alreadyFixedInTarget,
+  analyzePairedRetention,
   apiSpecToAssets,
+  appendHuntClaim,
+  appendLedgerEntry,
   applyAttribution,
+  applyDeploymentContextCap,
   approveEvolutionCandidate,
+  approveObservation,
+  appsecArchetypeDigest,
+  appsecArchetypeToFinderLens,
+  appsecArchetypesPath,
+  appsecLensLedgerEntryDigest,
+  appsecUserArchetypesPath,
+  archetypeSweepEnabled,
+  archetypeToHuntBrief,
   argvForStep,
   assertReadOnlyAction,
   assertWorkflowNativeRuntime,
   assertionFromStepExpect,
+  assessEscalation,
   attackPrompt,
+  auditAgentPrompt,
+  auditEvolutionCorpusRotation,
+  auditReportToBenchResult,
   authorizeEvolutionArtifact,
+  autoTriage,
+  availableRefuterCandidates,
   blindVerifyPrompt,
   blockEvolutionCampaign,
+  breakRecordToFinding,
   bucketEndpoint,
   bucketInScope,
   buildCandidateHosts,
+  buildCandidateJudgePrompt,
+  buildCraftCpgContext,
+  buildCraftTargetSpec,
+  buildKernelPromotionEnvelope,
+  buildSlice,
   buildTodosPayload,
   buildToolCallLogEntry,
   buildToolCallsPayload,
+  callMcpTool,
   campaignKey,
   campaignPromotionAllowed,
+  candidateGrepPatterns,
+  canonicalProposalJson,
+  captureObservation,
+  checkNovelty,
+  chromiumArchetypesPath,
+  claimForProcessing,
   clampOutboundBody,
+  classTokens,
+  classifyDeploymentContext,
   classifyTakeover,
+  classifyVerifyOutcome,
   clearSkillRegistry,
   compareEvolutionIdentities,
+  compareScorecards,
+  compileAndRunReproducer,
+  composeGate,
   composeGuards,
+  corpusV1Path,
+  craftedPocToFinding,
+  createAgenticScanAdapter,
+  createBenchIntegrationRegistry,
+  createCoreBenchIntegration,
+  createDefaultVariantScan,
   createDockerEvolutionSandbox,
+  createDockerWebProvisioner,
   createEvolutionCandidate,
   createEvolutionComparisonIdentity,
   createEvolutionSandbox,
+  createHuntClaim,
   createOrLoadEvolutionCampaign,
+  createPackageAuditScanAdapter,
+  createResearchProposal,
+  createScanContext,
   createSmolvmEvolutionSandbox,
   createSmolvmPocTargetRunner,
+  createVariantExecutionFactory,
+  crossFamilyRefuteEnabled,
   decideAddressing,
+  declaredEvolutionRetentionProfileDigest,
   decodeMessage,
   dedupeAssets,
+  deriveSearchTerms,
   describeEngagementPosture,
+  describeEscalation,
+  describeRefuterChoice,
   describeScopeGuards,
+  digestBenchManifest,
+  digestTargetSnapshot,
   discoverAgentSkills,
+  discoverEpochs,
+  discoverMcpTarget,
   discoveryPrompt,
+  disprovenHuntClaims,
   drainInbox,
   effectiveFallbackRps,
+  emptyLedger,
   encodeMessage,
   enumerateSubdomains,
   enumerateSubdomainsActive,
@@ -938,18 +752,40 @@ import {
   evaluateEvolutionCandidate,
   evaluateGate,
   evaluateGuards,
+  evaluateRegression,
+  evolutionCaseContentIdentity,
+  evolutionComparisonIdentity,
   evolutionCorpusIdentity,
   evolutionDigest,
+  evolutionObservationApprovalIdentity,
+  evolutionSourceFixtureCase,
+  exampleManifestPath,
   excerpt,
   executeEvolutionVersion,
   extractAttributionFromScopeJson,
+  extractCraftCpgTargets,
+  extractDupeSignature,
   extractEngagementFromScopeJson,
+  extractFeatures,
   extractResponseText,
   fetchScoped,
+  filterArchetypes,
   filterWorkflowAgentTools,
+  finalize,
+  findCraftFuzzerEntrypoints,
+  findTargets,
+  findingToQuery,
+  findingTokens,
   formatJitSkillsInstruction,
   formatScorecardSummary,
+  formatTournamentSummary,
+  formatTriageProvenance,
   formatUserAgent,
+  freebsdArchetypesPath,
+  generateArchetypeCandidates,
+  generateRemediation,
+  generateRemediationWithLLM,
+  getObservation,
   getSkillById,
   getToolsForRole,
   getWorkflowAuditExecutionPolicy,
@@ -957,85 +793,229 @@ import {
   guardApprovalUnavailable,
   guardNetworkRequiresScope,
   guardUnresolvedCapabilities,
+  harvestEvidenceText,
   harvestMissesFromLedgerEntry,
   harvestMissesFromScorecard,
   harvestMissesFromTournament,
   harvestedMissesToMissInput,
+  hasTrustBoundaryBypass,
+  hasValidValidation,
+  heuristicCandidateScore,
+  heuristicCraftCandidateScore,
   holdoutExposureIdentity,
   hubDir,
+  huntFlywheelEnabled,
   huntMemoryPath,
+  huntNegativesEnabled,
+  hypothesisOnly,
+  inferPackage,
+  injectOps,
+  isConfirmed,
+  isHypothesisOnly,
   isMcpTarget,
   isScopeRequired,
   isValidPeerId,
   isWafEvasionLadderEnabled,
   isWorkflowAgentToolAllowed,
+  jaccard,
+  judgeCraftCandidatesWithLlm,
+  judgeHuntCandidatesWithLlm,
+  kernelArchetypesPath,
+  knownDupe,
+  lastGreen,
+  listBrowserViews,
+  listMcpTools,
+  listObservations,
   listSkillSummaries,
+  liveGit,
   loadAgentSkill,
+  loadAppsecArchetypes,
+  loadAppsecFinderLenses,
+  loadChromiumArchetypes,
+  loadCpg,
   loadEvolutionCampaign,
   loadEvolutionRegistry,
+  loadFreebsdArchetypes,
+  loadHuntCorpusRows,
+  loadHuntLedger,
+  loadKernelArchetypes,
+  loadKnownNegatives,
+  loadKnownNegativesFromEnv,
+  loadKnownNegativesFromLedger,
+  loadLedger,
+  loadManifest,
   loadSkillRegistry,
+  localMirrors,
+  makeFinderLensProbe,
+  makeLloreJudge,
+  makeMultiLensVerifier,
+  makeSkepticVerifier,
+  makeTargetTreeLookup,
+  markProcessed,
+  matchCrashSignature,
+  matchNegative,
   matchTriggers,
+  maxCeiling,
+  memoryTokens,
+  mergeCraftEvidence,
   mergeHarvestedMisses,
+  needsKernelVerify,
+  negativeContext,
   networkScopeRequiredRefusal,
   newCorrelationId,
   newMessageId,
   normalizeDomain,
+  normalizeProposalPath,
+  objectiveOracle,
+  objectiveOracleEvaluatorAttestation,
+  objectiveOracleEvaluatorCodeBytes,
+  objectiveOracleEvaluatorConfigJson,
+  observationDigest,
+  observationQueueSummary,
+  observedEvolutionModelRevision,
+  packageAudit,
+  pairedRetentionComparisonDigest,
+  pairedRetentionObservationsFromReceipt,
+  pairwiseDeltas,
   parseApiSpec,
+  parseApprovedObservationShape,
+  parseCraftStageCitations,
   parseEngagementProfileName,
+  parseEnsembleModels,
   parseHarnessGenerationSpec,
+  parseImpactAssessment,
+  parseJudgeJson,
+  parseLlmEscalation,
+  parseManifest,
+  parseObservationInput,
+  partitionCases,
   peekInbox,
   persistArtifact,
+  pickChampion,
   pinEvolutionVersion,
+  planArchetypeSweep,
+  prepareValidationCorpus,
+  primedOrderKey,
   probeS3Bucket,
+  projectResearchExecutionEvidence,
+  projectResearchImprovementResult,
   promoteEvolutionVersion,
+  proposalDigest,
   proposeEvolutionEdits,
+  provePriming,
+  raceStrategies,
+  raceWithDefaults,
+  reachabilityGate,
+  readHuntLedger,
   readToolCallNames,
   reconcileCampaignDispatch,
   recordEvolutionVersion,
   redactSecrets,
   redactedArgsPreview,
+  refuterFamily,
+  rejectObservation,
+  releaseClaim,
+  releaseStaleClaims,
+  renderCraftTargetSpec,
+  renderEmptyScoreboard,
   renderInboundMessage,
+  renderScoreboard,
+  renderSlice,
   reportPrompt,
+  researchCandidateChangeDigest,
+  researchExecutionEvidenceDigest,
+  researchExecutionEvidenceRef,
   researchPrompt,
+  researchVariantDescriptor,
+  researchVariantDescriptorDigest,
   reserveCampaignDispatch,
   reserveHoldoutExposure,
   resolveAttribution,
   resolveEngagementProfile,
+  resolveEnsembleModels,
   resolveEvolutionConfigImage,
   resolveEvolutionImage,
+  resolveHuntLedger,
+  resolveMcpEndpoint,
+  resolveNovelty,
+  reviewAgentPrompt,
   rollbackEvolutionVersion,
+  runAgentLoop,
+  runAnalysisAgent,
+  runBenchCase,
+  runBenchSuite,
+  runCraftScan,
   runDeterministicReplay,
+  runEGATS,
+  runEGATSWithDefaults,
+  runEnsembleCraft,
   runEvolution,
+  runHuntScan,
   runJsRecon,
+  runLlmIpiAudit,
+  runMcpSecurityChecks,
   runNativeAgentLoop,
   runRecon,
+  runSelfConsistencyVerify,
   runSmolvmPocSteps,
+  runStructuredVerify,
+  runTournament,
   sanitizeReason,
+  sanitizerOutputFromCraftResult,
+  saveLedger,
+  scanReportToBenchResult,
   scopeRequiredRefusal,
+  scoreEvidence,
+  scoreMemory,
+  selectCiCases,
+  selectCrossFamilyRefuter,
   selectEvolutionAlternativeParent,
   sendMessage,
   sendOperatorMessage,
   sendPrompt,
   setWorkspaceHarnessTrust,
   settleCampaignDispatch,
+  shouldWeaponize,
+  sliceAroundTargets,
+  snapshotBenchVariant,
   snapshotEvolutionSource,
   sourceVerifyPrompt,
+  staleHuntClaims,
+  stampDeploymentContext,
   startEvolutionCanary,
   stripUnsafeText,
+  subscribeBrowserView,
+  subsetManifest,
+  summariseTree,
   summariseTurnToolCalls,
+  summarizeTriageProvenance,
+  symbolsFromDetectionSignature,
+  syncLoreMirror,
+  tallyConsensus,
   targetRequiresScope,
+  toVerifyVerdict,
   toolCallPreview,
   tryRecoverPreviousFeedback,
+  unresolvedHuntClaims,
   validateAgentSkillContent,
   validateAwsCredentials,
+  validateCandidateLens,
+  validateCrashReportConsistency,
+  validateHuntClaimRecord,
+  validateResearchProposal,
   validateUpdateTodosArgs,
+  verify,
   verifyEvolutionSnapshot,
+  verifyKernelCrash,
   verifyPrompt,
+  verifyStandaloneKernelReproducer,
+  verifyStatusFromOutcome,
   wilson95,
+  withVariantFeatureFlags,
   withWorkflowAuditExecutionPolicy,
   workflowPhasePrompt,
   workflowPolicyRuntime
-} from "./chunk-5WAHHZBF.js";
+} from "./chunk-HFUOUT2B.js";
 import {
   DEFAULT_JOURNAL_SIDECAR_THRESHOLD_BYTES,
   JOURNAL_SCHEMA_VERSION,
@@ -1047,10 +1027,12 @@ import {
   rehydrateContext,
   resolveJournalPaths,
   streamJournal
-} from "./chunk-3LPBJMHB.js";
+} from "./chunk-ACYZMJHC.js";
 import "./chunk-K2PWUPUI.js";
 import {
   IntelCache,
+  RateLimiter,
+  TokenBucket,
   advisorySweep,
   buildIntelDossier,
   buildPriorVulnerabilityAuditGraph,
@@ -1068,6 +1050,8 @@ import {
   parseGitHubAdvisories,
   parseNvdResponse,
   parseOsvResponse,
+  parseRateLimitFlag,
+  parseRetryAfter,
   queryGitHubAdvisories,
   queryOsvAdvisories,
   resolveTargetHistoryInput,
@@ -1080,11 +1064,25 @@ import {
   searchTargetHistory,
   toGraphSnapshot,
   toOsvEcosystem
-} from "./chunk-X2ZMSRTP.js";
+} from "./chunk-OFPF26WL.js";
 import {
+  classifyUserspacePrimitive,
+  crashArtifactToFinding,
+  describeExploitabilityVerdict,
+  generatePov,
+  isReproducedMemCorruption,
+  judgePovEvidence,
+  maxMemSeverity,
+  memCorruptionVerdict,
+  memPrimitiveToCategory,
+  oracleForCategory,
+  parseCrashOutput,
   parseSanitizerLog,
-  renderSanitizerVerdict
-} from "./chunk-YERUDEXT.js";
+  renderSanitizerVerdict,
+  runMemSafetyScan,
+  runUserspaceFuzzLoop,
+  sniffMemPrimitive
+} from "./chunk-PAE7ZAV6.js";
 import {
   ESCALATION_LADDER,
   ladderUpTo,
@@ -1093,11 +1091,31 @@ import {
   rungAtLeast,
   rungRank
 } from "./chunk-UEX7PFSE.js";
-import "./chunk-4ROZFLSR.js";
+import {
+  BENIGN_MAX_CLASS,
+  UPGRADE_MIN_CLASS,
+  classifyDmesgDanger,
+  classifyKernelPrimitive,
+  classifyPrimitiveFromDmesg,
+  describeKernelPrimitive,
+  isDangerUpgrade,
+  maxDangerClass,
+  rankDanger
+} from "./chunk-I4VIAQHM.js";
+import {
+  expandHomePath,
+  isExistingLocalTargetPath,
+  isExplicitLocalTargetPath,
+  resolveLocalTargetPath
+} from "./chunk-2J3STRJT.js";
 import {
   ScanCostLedger,
   budgetNativeRuntime
-} from "./chunk-BD7WULFS.js";
+} from "./chunk-HDJSHLRM.js";
+import {
+  collectScopeFiles,
+  countScopeFilesUpTo
+} from "./chunk-AZ7L3HFD.js";
 import {
   defaultDmesgOutPath,
   detectOutOfBandModuleLoad,
@@ -1105,7 +1123,7 @@ import {
   prepareKernelVmArtifacts,
   verifyKernelFinding,
   writeProofFileReadOnly
-} from "./chunk-XA2IBHPB.js";
+} from "./chunk-FOLTHXRH.js";
 import {
   FixTemplateRegistry,
   applySourceFixCandidate,
@@ -1129,7 +1147,7 @@ import {
   saveSourceFixProjectInputs,
   templateIdForCategory,
   verifySourceFixCandidate
-} from "./chunk-5ETI27Q3.js";
+} from "./chunk-ITEMDJAB.js";
 import {
   DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
   appendImprovementLedgerEntry,
@@ -1139,13 +1157,13 @@ import {
   loadEvolutionConfigFile,
   parseEvolutionConfig,
   verifyImprovementLedger
-} from "./chunk-YKWARO3T.js";
+} from "./chunk-DJGJECBV.js";
 import {
   generateConformanceModel,
   judgeHttpDivergence,
   runHttpConformanceCheck,
   structurallyValidateConformanceModel
-} from "./chunk-SQCBHFWN.js";
+} from "./chunk-LWMEJYCP.js";
 import {
   DEFAULT_ENSEMBLE_MODELS,
   OpenRouterRuntime,
@@ -1154,7 +1172,7 @@ import {
   detectAvailableRuntimes,
   getRuntimeInfo,
   pickRuntimeForStage
-} from "./chunk-K74DRDC5.js";
+} from "./chunk-DHNYJ2ML.js";
 import {
   ProcessRuntime
 } from "./chunk-O6KPVYOI.js";
@@ -1277,7 +1295,7 @@ import {
   reachableTo,
   shortestPaths
 } from "./chunk-UFHN6RIU.js";
-import "./chunk-BMDG6T7D.js";
+import "./chunk-YXTV2FRE.js";
 import {
   DISCLOSURE_STATUSES,
   IllegalTransitionError,
@@ -1297,23 +1315,23 @@ import {
   decideFilingState,
   dropSlug,
   droppedFilename,
-  evidenceKindForFinding,
   extractSiblingFix,
   formatDroppedReason,
-  isDisclosureWorthy,
   isFreezeAvailable,
   isPubliclyDisclosed,
   renderExploitScreenshot,
   renderReproducibilityManifest,
   renderVendorNotificationMarkdown,
   transition
-} from "./chunk-GTED3FSZ.js";
+} from "./chunk-S2WCYEK2.js";
 import {
   DEFAULT_STEP_TIMEOUT_MS,
   MAX_CAPTURE_BYTES,
+  evidenceKindForFinding,
   executePocSteps,
+  isDisclosureWorthy,
   setRuntimeDeps
-} from "./chunk-IXT64DV5.js";
+} from "./chunk-XPDJE537.js";
 import {
   classifyReferences,
   findCveArtifacts,
@@ -1327,12 +1345,12 @@ import {
   parseUbuntuTracker,
   scoreCodeCandidate,
   scoreRepoCandidate
-} from "./chunk-SU4IHQQI.js";
-import "./chunk-NJLKFC66.js";
+} from "./chunk-5H2PXZ7Q.js";
+import "./chunk-ABKUI3QB.js";
 import {
   CodexCatalogRefreshError,
   loadCodexModelCatalog
-} from "./chunk-NBV4I237.js";
+} from "./chunk-GXSECFUE.js";
 import {
   FEATURE_PRESETS,
   LlmApiRuntime,
@@ -1356,7 +1374,7 @@ import {
   resolveFeaturePreset,
   stderrDiagnosticSink,
   subscribeDiagnostics
-} from "./chunk-IJ6UPW3H.js";
+} from "./chunk-EIONVEFN.js";
 import {
   ANALYTICS_ENDPOINT,
   ANALYTICS_LEVEL_ENV,
@@ -1395,11 +1413,11 @@ import {
   runWorkbenchBrokerProgram,
   startWorkbenchBroker,
   withRunContribution
-} from "./chunk-PVJUPIQG.js";
+} from "./chunk-3T5R7P4T.js";
 import {
   eventBus,
   presentationEventSink
-} from "./chunk-5PFRE522.js";
+} from "./chunk-MY44EZKD.js";
 import "./chunk-RS4MAN3Q.js";
 import {
   Cvss4ParseError,
@@ -1424,7 +1442,7 @@ import {
   suggestCvss4,
   suggestCwesForCategory,
   verifyAgainstRef
-} from "./chunk-CGBDEST2.js";
+} from "./chunk-RFK5F45W.js";
 import {
   BUILTIN_PLUGINS,
   DEFAULT_CALL_TIMEOUT_MS,
@@ -1486,12 +1504,15 @@ import {
   validatePluginManifest,
   withScopeEnforcement,
   writeEnablement
-} from "./chunk-QNRYOJEB.js";
-import "./chunk-5IBCBQEH.js";
+} from "./chunk-27SXCYWH.js";
+import {
+  sanitizedEnv
+} from "./chunk-5IBCBQEH.js";
 import {
   estimateCost
-} from "./chunk-GXXX7AGH.js";
-import "./chunk-VIT5ALXF.js";
+} from "./chunk-S3B6HFSM.js";
+import "./chunk-5XOYTAOK.js";
+import "./chunk-36J5ZLFE.js";
 import "./chunk-VCSFCHAJ.js";
 export {
   ACTION_LOG_ARGS_MAX,
@@ -1707,6 +1728,7 @@ export {
   REPORT_PLATFORMS,
   RESULT_TRUNCATION_MARKER,
   ROLE_TEMPLATE_IDS,
+  ROUTING_ROLES,
   RUNG_MARKER_TAG,
   RUNTIME_REGISTRY,
   RateLimiter,
@@ -1729,6 +1751,8 @@ export {
   SourceAuditTargetSchema,
   SuiteOracleObjectiveSchema,
   SuiteTaskTargetSchema,
+  TASK_ROUTING_EVALUATOR_DIGEST,
+  TASK_ROUTING_SUITE_DIGEST,
   TECHNIQUE_LIBRARY,
   TERMINAL_STATUSES,
   TIER0_GRAPH_PERMISSIONS,
@@ -1786,6 +1810,7 @@ export {
   analyzeConditionalAccess,
   analyzeFederation,
   analyzeJwt,
+  analyzePairedRetention,
   analyzePrivilegedRoles,
   analyzeSamlAssertion,
   analyzeServicePrincipals,
@@ -1833,6 +1858,7 @@ export {
   attemptExploitabilityUpgrade,
   attemptWinRace,
   auditAgentPrompt,
+  auditEvolutionCorpusRotation,
   auditReportToBenchResult,
   authorizeEvolutionArtifact,
   autoTriage,
@@ -1996,6 +2022,7 @@ export {
   createHuntClaim,
   createJournalWriter,
   createLiveHttpSender,
+  createLocalOllamaRoutingRuntime,
   createOperationalEventSink,
   createOrLoadEvolutionCampaign,
   createOsvAdvisoryLookup,
@@ -2020,6 +2047,7 @@ export {
   cvss4Severity,
   decideAddressing,
   decideFilingState,
+  declaredEvolutionRetentionProfileDigest,
   decodeHostMessage,
   decodeImmutableId,
   decodeJwtUnverified,
@@ -2124,8 +2152,12 @@ export {
   evmFinderLenses,
   evmVerifyLenses,
   campaignKey as evolutionCampaignKey,
+  evolutionCaseContentIdentity,
+  evolutionComparisonIdentity,
   evolutionCorpusIdentity,
   evolutionDigest,
+  evolutionObservationApprovalIdentity,
+  evolutionSourceFixtureCase,
   exampleManifestPath,
   executeAssessment,
   executeAssessmentRun,
@@ -2341,6 +2373,7 @@ export {
   lengthBoundaryValues,
   levelAtLeast,
   lifetimeTokenSignal,
+  listBrowserViews,
   listDetectorIds,
   listInstalledPluginIds,
   listMcpTools,
@@ -2469,9 +2502,12 @@ export {
   objectiveOracleEvaluatorConfigJson,
   observationDigest,
   observationQueueSummary,
+  observedEvolutionModelRevision,
   oracleForCategory,
   orderWorkflowNodes,
   packageAudit,
+  pairedRetentionComparisonDigest,
+  pairedRetentionObservationsFromReceipt,
   pairwiseDeltas,
   parseApiSpec,
   parseApprovedObservationShape,
@@ -2511,6 +2547,7 @@ export {
   parseRedHatTracker,
   parseRegistryIndex,
   parseRetryAfter,
+  parseRoutingQualificationPlan,
   parseSanitizerLog,
   parseSeedFindings,
   parseSelectorMapText,
@@ -2537,6 +2574,7 @@ export {
   planChains as planWebChains,
   pluginsRootDir,
   pocFabricatesSplat,
+  preflightTaskRouting,
   prepare,
   prepareKernelVmArtifacts,
   prepareValidationCorpus,
@@ -2560,6 +2598,7 @@ export {
   provePriming,
   provenExploitabilityScore,
   publishSourceFixDraftPR,
+  qualifyTaskRouting,
   queryGitHubAdvisories,
   queryOsvAdvisories,
   raceStrategies,
@@ -2587,6 +2626,7 @@ export {
   readToolCallNames,
   readUnstableDetector,
   recentDiagnostics,
+  recommendQualifiedRouting,
   reconcile,
   reconcileCampaignDispatch,
   recordEvolutionVersion,
@@ -2723,6 +2763,7 @@ export {
   rungRankingEnabled,
   sameCrash,
   sanitizeReason,
+  sanitizedEnv,
   sanitizerOutputFromCraftResult,
   satisfiesMinVersion,
   saveLedger,
@@ -2798,6 +2839,7 @@ export {
   stripUnsafeText,
   structurallyValidateConformanceModel,
   subjectSelfEnforces,
+  subscribeBrowserView,
   subscribeDiagnostics,
   subsetManifest,
   suggestCvss,
@@ -2817,6 +2859,7 @@ export {
   tableMetrics,
   tallyConsensus,
   targetRequiresScope,
+  taskRoutingFixtureRuntime,
   techniquesForBug,
   techniquesForCategory,
   techniquesForEvent,