@oxagen/cli 2.1.5-109 → 2.1.5-114

package/oxagen.mjs

@@ -140,14 +140,14 @@ function deliveredContext(text5, bundleEtag) {
 }
 function readDeliveredContext(value) {
   if (typeof value !== "object" || value === null) return void 0;
-  const { digest: digest6, chars, bundle_etag } = value;
+  const { digest: digest5, chars, bundle_etag } = value;
   if (typeof chars !== "number" || !Number.isSafeInteger(chars) || chars < 0)
     return void 0;
-  if (digest6 !== void 0 && !isSha256Digest(digest6)) return void 0;
+  if (digest5 !== void 0 && !isSha256Digest(digest5)) return void 0;
   if (bundle_etag !== void 0 && (typeof bundle_etag !== "string" || bundle_etag.length === 0 || bundle_etag.length > 128))
     return void 0;
   return {
-    ...digest6 !== void 0 ? { digest: digest6 } : {},
+    ...digest5 !== void 0 ? { digest: digest5 } : {},
     chars,
     ...bundle_etag !== void 0 ? { bundle_etag } : {}
   };
@@ -5271,11 +5271,6 @@ var init_envelope = __esm({
         ...pick(...policyKeys),
         ...pick(...integrityKeys)
       }),
-      // A witness verdict on the worker's run (Mission Control spec §8.5,
-      // ADR-064). The chain carries the body as it was produced; its schema is
-      // `proofObservedBodySchema` in @oxagen/run-evidence, which the control
-      // plane's ingest contract applies, so this leaf package holds no copy.
-      "proof.observed": external_exports.object({}).catchall(json),
       // What the assembler put in front of the agent at a session start and what
       // it cut (ADR-093, ADR-144): the bundle's `context.manifest` plus the
       // steers delivered beside it. The chain carries the body as the host
@@ -5286,7 +5281,7 @@ var init_envelope = __esm({
       // not bound, then `control.interject` when it holds the loop to ask a
       // person, and `control.answer` when the answer or the timeout arrives.
       // `repo.bound` and `workspace.created` record what a link or create
-      // answer did. Each body is opaque on the wire, like `proof.observed`. Its
+      // answer did. Each body is opaque on the wire. Its
       // strict schema is in `interjection.ts`, which the host applies before it
       // seals and the control plane's ingest applies again.
       "repo.unknown": external_exports.object({}).catchall(json),
@@ -5303,8 +5298,8 @@ var init_envelope = __esm({
       "skills.loaded": external_exports.object({}).catchall(json),
       // A connection or DNS query a sandbox's egress proxy refused (agent
       // sandboxes, ADR-289). The sandbox host reports it to the control plane,
-      // which records it on the sandbox's run. The body is opaque on the wire,
-      // like `proof.observed`. Its strict schema is
+      // which records it on the sandbox's run. The body is opaque on the wire.
+      // Its strict schema is
       // `hostEgressRefusedMessageSchema` in `@oxagen/oxagen/sandbox-host/protocol`,
       // which this leaf package cannot import.
       "oxagen:egress_refused": external_exports.object({}).catchall(json),
@@ -5314,7 +5309,7 @@ var init_envelope = __esm({
       // frames: the write-ahead request, durable before the provider or the tool
       // is reached, and the completion. The history summary is the context a
       // turn carried in place of its older messages, and the goal verdict is one
-      // verifier round. Each body is opaque on the wire, like `proof.observed`:
+      // verifier round. Each body is opaque on the wire:
       // its members are the receipt the assistant recorded, and the readers in
       // @oxagen/run-ledger read them by name.
       "model.engine_call_started": external_exports.object({}).catchall(json),
@@ -11359,11 +11354,11 @@ function resolveStellaIdentity(options) {
   return instance === void 0 ? { pid: key } : { pid: key, instance };
 }
 function stellaToolUseId(name, input) {
-  const digest6 = digestJcs({
+  const digest5 = digestJcs({
     name,
     input: input ?? null
   });
-  return `stella_${digest6.slice("sha256:".length, "sha256:".length + 24)}`;
+  return `stella_${digest5.slice("sha256:".length, "sha256:".length + 24)}`;
 }
 function startInstanceToken(started) {
   const text5 = started.trim();
@@ -12145,10 +12140,10 @@ function promptIssueRefs(prompt) {
   }
   found.sort((a, b3) => a.at - b3.at);
   const refs = [];
-  for (const { ref: ref2 } of found) {
+  for (const { ref } of found) {
     if (refs.length === PROMPT_ISSUE_REFS_MAX) break;
-    if (!refs.some((seen) => seen.toLowerCase() === ref2.toLowerCase()))
-      refs.push(ref2);
+    if (!refs.some((seen) => seen.toLowerCase() === ref.toLowerCase()))
+      refs.push(ref);
   }
   return refs;
 }
@@ -14852,12 +14847,12 @@ var init_backfill = __esm({
        * from the same value.
        */
       digestOf(record) {
-        let digest6 = this.recordDigests.get(record);
-        if (digest6 === void 0) {
-          digest6 = digestJcs(record);
-          this.recordDigests.set(record, digest6);
+        let digest5 = this.recordDigests.get(record);
+        if (digest5 === void 0) {
+          digest5 = digestJcs(record);
+          this.recordDigests.set(record, digest5);
         }
-        return digest6;
+        return digest5;
       }
       /** Count what was sealed: frames by kind, and counted tokens by model. */
       collect(events) {
@@ -15417,8 +15412,8 @@ var init_request_prefix = __esm({
           }
         }
         const fields = [];
-        for (const [field, digest6] of shape.fixed) {
-          if (before.fixed.get(field) === digest6) {
+        for (const [field, digest5] of shape.fixed) {
+          if (before.fixed.get(field) === digest5) {
             fields.push(field);
             delete stored[field];
           }
@@ -15727,17 +15722,17 @@ var init_system_context = __esm({
       }
       capacity;
       entries = /* @__PURE__ */ new Map();
-      get(digest6) {
-        const entry2 = this.entries.get(digest6);
+      get(digest5) {
+        const entry2 = this.entries.get(digest5);
         if (entry2 !== void 0) {
-          this.entries.delete(digest6);
-          this.entries.set(digest6, entry2);
+          this.entries.delete(digest5);
+          this.entries.set(digest5, entry2);
         }
         return entry2;
       }
-      set(digest6, context) {
-        this.entries.delete(digest6);
-        this.entries.set(digest6, context);
+      set(digest5, context) {
+        this.entries.delete(digest5);
+        this.entries.set(digest5, context);
         while (this.entries.size > this.capacity) {
           const oldest = this.entries.keys().next().value;
           if (oldest === void 0) break;
@@ -15881,10 +15876,10 @@ var init_system_context = __esm({
         ];
         facts.tool_definition_tokens = sum(resolved.tools);
         facts.tool_definition_tokens_basis = "estimated";
-        const digest6 = systemContextDigest(parts);
-        facts.system_context_digest = digest6;
+        const digest5 = systemContextDigest(parts);
+        facts.system_context_digest = digest5;
         const sameTurn = this.listedTurn === turn;
-        const already = sameTurn && this.listed.includes(digest6);
+        const already = sameTurn && this.listed.includes(digest5);
         const out = {};
         if (!already) {
           if (parts.length > SYSTEM_CONTEXT_PARTS_MAX)
@@ -15897,7 +15892,7 @@ var init_system_context = __esm({
             this.listedTurn = turn;
             this.listed = [];
           }
-          this.listed.push(digest6);
+          this.listed.push(digest5);
           if (this.listed.length > LISTED_PER_TURN) this.listed.shift();
         });
       }
@@ -26722,7 +26717,7 @@ import { readFileSync as readFileSync10 } from "node:fs";
 import { dirname as dirname9, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.5-109";
+  if (true) return "2.1.5-114";
   try {
     const here = dirname9(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -36821,14 +36816,14 @@ function createMemoryReader(deps) {
     const seen = /* @__PURE__ */ new Set();
     async function offer(entry2) {
       const key = keyOf(entry2.harness, entry2.path);
-      const digest6 = sentDigest(entry2);
-      if (sent.get(key) === digest6) return true;
+      const digest5 = sentDigest(entry2);
+      if (sent.get(key) === digest5) return true;
       try {
         await deps.send(entry2);
       } catch {
         return false;
       }
-      sent.set(key, digest6);
+      sent.set(key, digest5);
       count12 += 1;
       return true;
     }
@@ -42415,8 +42410,8 @@ async function launchContainedAgent(options) {
       })).stdout
     )
   );
-  const digest6 = image.success ? image.data[0]?.Id : void 0;
-  if (digest6 === void 0)
+  const digest5 = image.success ? image.data[0]?.Id : void 0;
+  if (digest5 === void 0)
     throw new Error("The operator's contained image is not installed");
   const sessionId = `contained-${randomBytes8(16).toString("hex")}`;
   const directory = mkdtempSync(join31(tmpdir(), "oxagen-contained-"));
@@ -42447,7 +42442,7 @@ async function launchContainedAgent(options) {
     }
     const spec = {
       name,
-      image: digest6,
+      image: digest5,
       workspace,
       sessionDirectory: directory,
       uid: process.getuid?.() ?? 0,
@@ -42537,7 +42532,7 @@ function sandboxMeasurement(placement, guest) {
     guest.baseLayerDigest,
     guest.hookConfigDigest
   ];
-  if (!HOST_ID.test(placement.hostId) || !VM_ID.test(placement.vmId) || digests.some((digest6) => !DIGEST.test(digest6)))
+  if (!HOST_ID.test(placement.hostId) || !VM_ID.test(placement.vmId) || digests.some((digest5) => !DIGEST.test(digest5)))
     throw new Error(
       "The sandbox placement or a measured digest is malformed; the agent was not started"
     );
@@ -42803,12 +42798,12 @@ function readBaseLayerDigest(system) {
     throw new Error(
       "The sandbox has no root-owned base layer digest; the agent was not started"
     );
-  const digest6 = system.readFile(BASE_LAYER_DIGEST_FILE).toString("utf8").trim();
-  if (!/^sha256:[a-f0-9]{64}$/.test(digest6))
+  const digest5 = system.readFile(BASE_LAYER_DIGEST_FILE).toString("utf8").trim();
+  if (!/^sha256:[a-f0-9]{64}$/.test(digest5))
     throw new Error(
       "The sandbox's base layer digest is malformed; the agent was not started"
     );
-  return digest6;
+  return digest5;
 }
 async function agentIsUnprivileged(system) {
   const id2 = async (flag2) => (await system.exec("id", [flag2, SANDBOX_AGENT_USER])).stdout.trim();
@@ -44415,7 +44410,7 @@ async function readWorkingTreeChanges(exec4, cwd, baseline) {
     (out) => out === void 0 ? void 0 : parseNameStatusZ(out)
   );
   if (baseline !== void 0 && tracked === void 0) return void 0;
-  const ref2 = baseline ?? "HEAD";
+  const ref = baseline ?? "HEAD";
   const entries2 = tracked === void 0 ? worktree : [
     ...tracked,
     ...worktree.filter(
@@ -44424,9 +44419,9 @@ async function readWorkingTreeChanges(exec4, cwd, baseline) {
   ];
   if (entries2.length === 0) return [];
   const [numstatOut, root] = await Promise.all([
-    git2(exec4, cwd, ["diff", "--numstat", ref2, "-z"]).then(async (head2) => {
+    git2(exec4, cwd, ["diff", "--numstat", ref, "-z"]).then(async (head2) => {
       if (head2 !== void 0) return head2;
-      if (ref2 !== "HEAD") return void 0;
+      if (ref !== "HEAD") return void 0;
       if (!await provenUnborn(exec4, cwd)) return void 0;
       return git2(exec4, cwd, ["diff", "--numstat", EMPTY_TREE_OBJECT, "-z"]);
     }),
@@ -45174,16 +45169,16 @@ async function contentHash(absolutePath, kind, keep) {
     await drop();
     return void 0;
   }
-  const digest6 = hash3.digest("hex").slice(0, 32);
-  if (copy === null) return { hash: digest6 };
+  const digest5 = hash3.digest("hex").slice(0, 32);
+  if (copy === null) return { hash: digest5 };
   const { temp, handle } = copy;
   try {
     await handle.close();
   } catch {
     await unlink(temp).catch(() => void 0);
-    return { hash: digest6 };
+    return { hash: digest5 };
   }
-  return { hash: digest6, copy: temp };
+  return { hash: digest5, copy: temp };
 }
 async function settleCopy(temp, name) {
   if (temp === void 0) return;
@@ -45353,10 +45348,10 @@ async function committerEmail(exec4, cwd) {
   const email = ident === void 0 ? void 0 : /<([^>]*)>/.exec(ident)?.[1];
   return email === void 0 || email.length === 0 ? void 0 : email.toLowerCase();
 }
-async function diffAgainst(exec4, cwd, ref2) {
+async function diffAgainst(exec4, cwd, ref) {
   const [names2, numstat] = await Promise.all([
-    git2(exec4, cwd, ["diff", "--name-status", "-z", ref2]),
-    git2(exec4, cwd, ["diff", "--numstat", ref2, "-z"])
+    git2(exec4, cwd, ["diff", "--name-status", "-z", ref]),
+    git2(exec4, cwd, ["diff", "--numstat", ref, "-z"])
   ]);
   if (names2 === void 0 || numstat === void 0) return void 0;
   return { entries: parseNameStatusZ(names2), counts: parseNumstat(numstat) };
@@ -46062,14 +46057,14 @@ async function readWorktreeSnapshot(exec4, cwd, baseline, measured) {
     patch += bytes.subarray(0, remaining).toString("utf8");
     remaining = Math.max(0, remaining - bytes.length);
   };
-  const trackedDiff = (ref2, paths) => read2([
+  const trackedDiff = (ref, paths) => read2([
     "diff",
     "--no-ext-diff",
     "--no-textconv",
     "--no-color",
     "--src-prefix=a/",
     "--dst-prefix=b/",
-    ref2,
+    ref,
     "--",
     // `:(literal)`, so a path holding `*` or `?` names itself.
     ...(paths ?? []).map((path2) => `:(literal)${path2}`)
@@ -50645,15 +50640,15 @@ ${lineage}`;
       for (const memory of live.values()) {
         if (!sending) break;
         const key = sentKey(store, memory.lineage);
-        const digest6 = sentDigest2(memory);
-        if (sent.get(key) === digest6) continue;
+        const digest5 = sentDigest2(memory);
+        if (sent.get(key) === digest5) continue;
         try {
           await deps.send(entryOf2(memory, store));
         } catch {
           sending = false;
           break;
         }
-        sent.set(key, digest6);
+        sent.set(key, digest5);
         result2.sent += 1;
       }
       for (const key of [...sent.keys()])
@@ -51292,10 +51287,10 @@ function createPackageDigester(deps) {
       const stamp = deps.stat === void 0 ? void 0 : stampOf(await deps.stat(path2));
       const known = executables.get(path2);
       if (stamp !== void 0 && known?.stamp === stamp) return known.digest;
-      const digest6 = digestBytes(await deps.readFile(path2));
+      const digest5 = digestBytes(await deps.readFile(path2));
       if (stamp !== void 0)
-        rememberBounded(executables, path2, { stamp, digest: digest6 });
-      return digest6;
+        rememberBounded(executables, path2, { stamp, digest: digest5 });
+      return digest5;
     } catch (error) {
       throw new DigestProblem(`${found} could not be read (${String(error)})`, {
         cause: error
@@ -52013,12 +52008,12 @@ function createLocalServers(options) {
   async function launchFor(spec, signal) {
     const prepared = prepareLaunch(spec, options.env);
     if (!prepared.ok) throw new LocalServerError(prepared.refusal);
-    const digest6 = await options.digester.digest(
+    const digest5 = await options.digester.digest(
       prepared.launch.package,
       prepared.launch,
       signal
     );
-    if (digest6 !== prepared.launch.package.digest)
+    if (digest5 !== prepared.launch.package.digest)
       throw new LocalServerError(digestMismatch());
     return prepared.launch;
   }
@@ -52630,8 +52625,8 @@ function skillDigest(skill) {
 }
 function isMarker(value) {
   if (typeof value !== "object" || value === null) return false;
-  const { digest: digest6, lineage, sessions } = value;
-  return typeof digest6 === "string" && (lineage === void 0 || typeof lineage === "string") && typeof sessions === "object" && sessions !== null && Object.values(sessions).every((at2) => typeof at2 === "string");
+  const { digest: digest5, lineage, sessions } = value;
+  return typeof digest5 === "string" && (lineage === void 0 || typeof lineage === "string") && typeof sessions === "object" && sessions !== null && Object.values(sessions).every((at2) => typeof at2 === "string");
 }
 async function readMarker(folder) {
   let entries2;
@@ -52716,7 +52711,7 @@ async function placeSkills(root, sessionId, skills, now = /* @__PURE__ */ new Da
       continue;
     }
     taken.add(skill.name);
-    const digest6 = skillDigest(skill);
+    const digest5 = skillDigest(skill);
     const found = await readMarker(folder);
     if (found.state === "foreign") {
       result2.skipped.push(skill.name);
@@ -52727,7 +52722,7 @@ async function placeSkills(root, sessionId, skills, now = /* @__PURE__ */ new Da
     }
     if (found.state === "absent") {
       await writeSkill(root, skill, {
-        digest: digest6,
+        digest: digest5,
         lineage: skill.lineage,
         sessions: { [sessionId]: now.toISOString() }
       });
@@ -52747,9 +52742,9 @@ async function placeSkills(root, sessionId, skills, now = /* @__PURE__ */ new Da
       continue;
     }
     const joined = { ...live, [sessionId]: now.toISOString() };
-    if (found.marker.digest === digest6 && (held === void 0 || held === skill.lineage)) {
+    if (found.marker.digest === digest5 && (held === void 0 || held === skill.lineage)) {
       await writeMarker(folder, {
-        digest: digest6,
+        digest: digest5,
         lineage: skill.lineage,
         sessions: joined
       });
@@ -52769,7 +52764,7 @@ async function placeSkills(root, sessionId, skills, now = /* @__PURE__ */ new Da
       continue;
     }
     await writeSkill(root, skill, {
-      digest: digest6,
+      digest: digest5,
       lineage: skill.lineage,
       sessions: { [sessionId]: now.toISOString() }
     });
@@ -61574,29 +61569,29 @@ function writeNew(root, relative11, bytes) {
     closeSync8(fd2);
   }
 }
-function blobPath(ref2) {
-  blobRefSchema.parse(ref2);
-  return `blobs/sha256/${ref2.digest.slice(7)}`;
+function blobPath(ref) {
+  blobRefSchema.parse(ref);
+  return `blobs/sha256/${ref.digest.slice(7)}`;
 }
 function storeBlob(root, bytes, mediaType) {
-  const ref2 = blobRefSchema.parse({
+  const ref = blobRefSchema.parse({
     digest: digestBytes(bytes),
     bytes: bytes.byteLength,
     media_type: mediaType
   });
   try {
-    writeNew(root, blobPath(ref2), bytes);
+    writeNew(root, blobPath(ref), bytes);
   } catch (error) {
     if (error.code !== "EEXIST") throw error;
-    readBlob(root, ref2);
+    readBlob(root, ref);
   }
-  return ref2;
+  return ref;
 }
-function readBlob(root, ref2) {
-  const bytes = readBounded(root, blobPath(ref2), ref2.bytes);
-  if (bytes.length !== ref2.bytes || digestBytes(bytes) !== ref2.digest) {
+function readBlob(root, ref) {
+  const bytes = readBounded(root, blobPath(ref), ref.bytes);
+  if (bytes.length !== ref.bytes || digestBytes(bytes) !== ref.digest) {
     arpFail(
-      `Blob ${ref2.digest} failed its integrity check: its bytes do not match its digest and size (${ref2.bytes} bytes).`
+      `Blob ${ref.digest} failed its integrity check: its bytes do not match its digest and size (${ref.bytes} bytes).`
     );
   }
   return bytes;
@@ -61780,26 +61775,26 @@ ${checkpointDigest}`,
   let total2 = 0;
   const seen = /* @__PURE__ */ new Map();
   const blobs = /* @__PURE__ */ new Map();
-  const read2 = (ref2) => {
-    const bytes = seen.get(ref2.digest);
+  const read2 = (ref) => {
+    const bytes = seen.get(ref.digest);
     if (bytes === void 0) {
-      total2 += ref2.bytes;
-      seen.set(ref2.digest, ref2.bytes);
+      total2 += ref.bytes;
+      seen.set(ref.digest, ref.bytes);
       if (total2 > ARP_MAX_TOTAL_BYTES || seen.size > MAX_BUNDLE_BLOBS)
         arpFail(
           `The bundle exceeds transfer limits: it names ${seen.size} blobs and ${total2} bytes, and the limits are ${MAX_BUNDLE_BLOBS} blobs and ${ARP_MAX_TOTAL_BYTES} bytes.`
         );
-    } else if (bytes !== ref2.bytes)
+    } else if (bytes !== ref.bytes)
       arpFail(
-        `Blob ${ref2.digest} is named with two sizes, ${bytes} and ${ref2.bytes} bytes.`
+        `Blob ${ref.digest} is named with two sizes, ${bytes} and ${ref.bytes} bytes.`
       );
-    const held = blobs.get(ref2.digest);
+    const held = blobs.get(ref.digest);
     if (held !== void 0) return held;
-    const loaded = readBlob(root, ref2);
-    blobs.set(ref2.digest, loaded);
+    const loaded = readBlob(root, ref);
+    blobs.set(ref.digest, loaded);
     return loaded;
   };
-  for (const ref2 of [
+  for (const ref of [
     checkpoint.task,
     checkpoint.context,
     checkpoint.environment,
@@ -61807,7 +61802,7 @@ ${checkpointDigest}`,
     checkpoint.authority,
     checkpoint.capture.barrier_evidence
   ])
-    read2(ref2);
+    read2(ref);
   for (const effect of checkpoint.effects)
     if (effect.receipt) read2(effect.receipt);
   const workspace = parseControl(
@@ -62767,7 +62762,7 @@ function prepareCheckpoint(options) {
   const verified = verifyBundle2(options.bundle, options.publicKey);
   const bundle2 = realpathSync7(options.bundle);
   const { checkpoint, workspace, checkpointDigest, events } = verified;
-  const blob = (ref2) => verified.blobs.get(ref2.digest) ?? arpFail(`Blob ${ref2.digest} was not read during verification.`);
+  const blob = (ref) => verified.blobs.get(ref.digest) ?? arpFail(`Blob ${ref.digest} was not read during verification.`);
   const traceReport = runOracles(projectToTrace(events));
   if (traceReport.checks.some((check2) => check2.status === "fail"))
     arpFail("The source failed CGP trace replay checks.");
@@ -63526,7 +63521,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.5-109",
+      version: "2.1.5-114",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -66288,8 +66283,8 @@ function draftGovernanceToml(mode) {
     ""
   ].join("\n");
 }
-function parseRepositoryRef(ref2) {
-  const parts = ref2.trim().split("/");
+function parseRepositoryRef(ref) {
+  const parts = ref.trim().split("/");
   if (parts.length !== 2) return null;
   const [owner, name] = parts;
   if (owner.length === 0 || name.length === 0) return null;
@@ -66334,12 +66329,12 @@ async function repoList(opts = {}, writer = stdoutWriter) {
     );
   }
 }
-async function repoLink(ref2, opts = {}, writer = stdoutWriter) {
-  const parsed2 = parseRepositoryRef(ref2);
+async function repoLink(ref, opts = {}, writer = stdoutWriter) {
+  const parsed2 = parseRepositoryRef(ref);
   if (!parsed2) {
     return usageError(
       writer,
-      `expected <owner/name>, got ${JSON.stringify(ref2)}`,
+      `expected <owner/name>, got ${JSON.stringify(ref)}`,
       "oxagen repo link <owner/name> [--json]"
     );
   }
@@ -66638,12 +66633,12 @@ function countsLine(counts2) {
   const fixtures = counts2.fixtures > 0 ? `, and ${plural2(counts2.fixtures, "file", "files")} under fixture folders` : "";
   return `${found.length > 0 ? found.join(", ") : "No harness files"}${fixtures}.`;
 }
-async function repoScan(ref2, opts = {}, writer = stdoutWriter) {
-  const fullName = ref2.trim().replace(/^\/+|\/+$/g, "");
+async function repoScan(ref, opts = {}, writer = stdoutWriter) {
+  const fullName = ref.trim().replace(/^\/+|\/+$/g, "");
   if (!/^[^/\s]+(\/[^/\s]+)+$/.test(fullName)) {
     usageError(
       writer,
-      `expected <owner/name>, got ${JSON.stringify(ref2)}`,
+      `expected <owner/name>, got ${JSON.stringify(ref)}`,
       USAGE
     );
     return;
@@ -67872,8 +67867,8 @@ async function loadCommittedProjectGates({
   if (!isSafeRefName(remote) || branch !== null && !isSafeRefName(branch)) {
     return { layer: null, warning: null };
   }
-  const ref2 = `refs/remotes/${remote}/${branch ?? "HEAD"}`;
-  const spec = `${ref2}:${PROJECT_DIR_NAME}/${PROJECT_SETTINGS_FILE}`;
+  const ref = `refs/remotes/${remote}/${branch ?? "HEAD"}`;
+  const spec = `${ref}:${PROJECT_DIR_NAME}/${PROJECT_SETTINGS_FILE}`;
   let text5;
   try {
     text5 = await git3({ cwd, run: run3, timeoutMs }, "show", spec);
@@ -69864,9 +69859,9 @@ function toolName2(server, tool) {
   }
   return name;
 }
-function parseToolRef(ref2) {
-  if (!TOOL_REF_PATTERN.test(ref2)) return null;
-  const [name, version2] = ref2.split("@");
+function parseToolRef(ref) {
+  if (!TOOL_REF_PATTERN.test(ref)) return null;
+  const [name, version2] = ref.split("@");
   const at2 = name.indexOf(TOOL_SEPARATOR);
   return {
     server: name.slice(0, at2),
@@ -69880,8 +69875,8 @@ function toolTargetMatches(target2, name) {
   }
   return target2 === name;
 }
-function parseCredentialRef(ref2) {
-  return CREDENTIAL_REF_PATTERN.test(ref2) ? ref2.slice(CREDENTIAL_REF_PREFIX.length) : null;
+function parseCredentialRef(ref) {
+  return CREDENTIAL_REF_PATTERN.test(ref) ? ref.slice(CREDENTIAL_REF_PREFIX.length) : null;
 }
 function findMentions(body2) {
   return [...body2.matchAll(MENTION)].map((match) => ({
@@ -71130,7 +71125,6 @@ var init_spend_shared = __esm({
       cost: costSchema.nullable(),
       calls: external_exports.number().int().nonnegative(),
       runs: external_exports.number().int().nonnegative(),
-      proven: moneySchema.nullable(),
       accepted: moneySchema.nullable(),
       productiveRatio: ratioSchema.nullable()
     }).strict();
@@ -71878,9 +71872,9 @@ var require_anchors = __commonJS({
          */
         setAnchors: () => {
           for (const source of aliasObjects) {
-            const ref2 = sourceObjects.get(source);
-            if (typeof ref2 === "object" && ref2.anchor && (identity.isScalar(ref2.node) || identity.isCollection(ref2.node))) {
-              ref2.node.anchor = ref2.anchor;
+            const ref = sourceObjects.get(source);
+            if (typeof ref === "object" && ref.anchor && (identity.isScalar(ref.node) || identity.isCollection(ref.node))) {
+              ref.node.anchor = ref.anchor;
             } else {
               const error = new Error("Failed to resolve repeated object (this should not happen)");
               error.source = source;
@@ -72199,15 +72193,15 @@ var require_createNode = __commonJS({
         value = value.valueOf();
       }
       const { aliasDuplicateObjects, onAnchor, onTagObj, schema, sourceObjects } = ctx;
-      let ref2 = void 0;
+      let ref = void 0;
       if (aliasDuplicateObjects && value && typeof value === "object") {
-        ref2 = sourceObjects.get(value);
-        if (ref2) {
-          ref2.anchor ?? (ref2.anchor = onAnchor(value));
-          return new Alias.Alias(ref2.anchor);
+        ref = sourceObjects.get(value);
+        if (ref) {
+          ref.anchor ?? (ref.anchor = onAnchor(value));
+          return new Alias.Alias(ref.anchor);
         } else {
-          ref2 = { anchor: null, node: null };
-          sourceObjects.set(value, ref2);
+          ref = { anchor: null, node: null };
+          sourceObjects.set(value, ref);
         }
       }
       if (tagName?.startsWith("!!"))
@@ -72219,8 +72213,8 @@ var require_createNode = __commonJS({
         }
         if (!value || typeof value !== "object") {
           const node3 = new Scalar.Scalar(value);
-          if (ref2)
-            ref2.node = node3;
+          if (ref)
+            ref.node = node3;
           return node3;
         }
         tagObj = value instanceof Map ? schema[identity.MAP] : Symbol.iterator in Object(value) ? schema[identity.SEQ] : schema[identity.MAP];
@@ -72234,8 +72228,8 @@ var require_createNode = __commonJS({
         node2.tag = tagName;
       else if (!tagObj.default)
         node2.tag = tagObj.tag;
-      if (ref2)
-        ref2.node = node2;
+      if (ref)
+        ref.node = node2;
       return node2;
     }
     exports.createNode = createNode;
@@ -79302,13 +79296,12 @@ function sha256Digest(bytes) {
 function digestJcs2(value) {
   return sha256Digest(jcsBytes(value));
 }
-var import_canonicalize, SHA256_DIGEST_PATTERN2, intrinsicArraySort, intrinsicArrayIsArray2, intrinsicRegExpTest, intrinsicTextEncoderConstructor, intrinsicTextEncoderEncode, intrinsicUint8ArrayConstructor, intrinsicHashPrototype, intrinsicHashUpdate, intrinsicHashDigest;
+var import_canonicalize, intrinsicArraySort, intrinsicArrayIsArray2, intrinsicRegExpTest, intrinsicTextEncoderConstructor, intrinsicTextEncoderEncode, intrinsicUint8ArrayConstructor, intrinsicHashPrototype, intrinsicHashUpdate, intrinsicHashDigest;
 var init_digest3 = __esm({
   "../../packages/run-evidence/src/digest.ts"() {
     "use strict";
     import_canonicalize = __toESM(require_canonicalize(), 1);
     init_json_wire();
-    SHA256_DIGEST_PATTERN2 = /^sha256:[0-9a-f]{64}$/;
     intrinsicArraySort = Array.prototype.sort;
     intrinsicArrayIsArray2 = Array.isArray;
     intrinsicRegExpTest = RegExp.prototype.test;
@@ -79361,111 +79354,6 @@ var init_limits = __esm({
   }
 });
 
-// ../../packages/run-evidence/src/proof.ts
-var PROOF_VERDICTS, ORACLE_KINDS, WITNESS_RESULTS, DISCLOSURE_GRAINS, TAMPER_EXCLUSIONS, RUN_PUBLIC_ID_PATTERN, digest4, gitSha, ref, proofObservedBodySchema;
-var init_proof = __esm({
-  "../../packages/run-evidence/src/proof.ts"() {
-    "use strict";
-    init_zod();
-    init_digest3();
-    PROOF_VERDICTS = [
-      "flipped",
-      "failing",
-      "unmoved",
-      "unsatisfied",
-      "tampered",
-      "unverified",
-      "waived"
-    ];
-    ORACLE_KINDS = [
-      "test_flip",
-      "build_or_type",
-      "property",
-      "golden_snapshot",
-      "contract",
-      "metamorphic",
-      "behavioral_probe"
-    ];
-    WITNESS_RESULTS = [
-      "pass",
-      "fail",
-      "excluded",
-      "inconclusive"
-    ];
-    DISCLOSURE_GRAINS = ["L0", "L1", "L2", "L3"];
-    TAMPER_EXCLUSIONS = ["held", "broken"];
-    RUN_PUBLIC_ID_PATTERN = /^(arun|tse)_[0-9a-z]{1,64}$/;
-    digest4 = external_exports.string().regex(SHA256_DIGEST_PATTERN2);
-    gitSha = external_exports.string().regex(/^[0-9a-f]{7,64}$/);
-    ref = external_exports.string().min(1).max(256);
-    proofObservedBodySchema = external_exports.object({
-      witness_id: external_exports.string().regex(/^wit_[0-9A-Za-z]{1,64}$/),
-      oracle: external_exports.enum(ORACLE_KINDS),
-      target_ref: ref,
-      target_sha: gitSha,
-      pr_ref: ref,
-      pr_sha: gitSha,
-      /** The same normalized command runs on both sides; only its digest travels. */
-      command_normalized_digest: digest4,
-      target_result: external_exports.enum(WITNESS_RESULTS),
-      pr_result: external_exports.enum(WITNESS_RESULTS),
-      verdict: external_exports.enum(PROOF_VERDICTS),
-      /** A hash of the failure output; present whenever a side failed. */
-      fail_fingerprint: digest4.nullable().default(null),
-      /** A hash of the passing output; present whenever the head passed. */
-      pass_output_digest: digest4.nullable().default(null),
-      tamper_exclusion: external_exports.enum(TAMPER_EXCLUSIONS),
-      /** The two fingerprints that disagree; present exactly when the exclusion broke. */
-      tamper: external_exports.object({ fingerprint_authored: digest4, fingerprint_at_run: digest4 }).strict().optional(),
-      disclosure_grain: external_exports.enum(DISCLOSURE_GRAINS),
-      /** A held-out witness is reported to the record and never to the worker. */
-      held_out: external_exports.boolean().default(false),
-      /** The witness's own run; null when the producer ran it without recording one. */
-      witness_run_id: external_exports.string().regex(RUN_PUBLIC_ID_PATTERN).nullable(),
-      runner_attestation: external_exports.object({
-        key_id: external_exports.string().min(1).max(256),
-        signature: external_exports.string().min(1).max(1024)
-      }).strict()
-    }).strict().superRefine((body2, ctx) => {
-      const refuse4 = (message, path2) => ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message, path: [path2] });
-      const { verdict, target_result: target2, pr_result: pr } = body2;
-      if (verdict === "flipped" && !(target2 === "fail" && pr === "pass" && body2.tamper_exclusion === "held"))
-        refuse4(
-          "flipped needs a fail on the target, a pass on the head and a held fingerprint",
-          "verdict"
-        );
-      if (verdict === "unmoved" && !(target2 === "pass" && pr === "pass"))
-        refuse4("unmoved needs a pass on both sides", "verdict");
-      if (verdict === "failing" && !(target2 === "fail" && pr === "fail"))
-        refuse4("failing needs a fail on both sides", "verdict");
-      if (body2.tamper_exclusion === "broken" !== (verdict === "tampered"))
-        refuse4(
-          "a broken tamper exclusion is exactly the tampered verdict",
-          "tamper_exclusion"
-        );
-      if (body2.tamper !== void 0 !== (body2.tamper_exclusion === "broken"))
-        refuse4(
-          "tamper names the fingerprints exactly when the exclusion broke",
-          "tamper"
-        );
-      if (target2 === "excluded")
-        refuse4("only the head result can be excluded", "target_result");
-      if (pr === "excluded" !== (verdict === "tampered"))
-        refuse4(
-          "an excluded head result is exactly the tampered verdict",
-          "pr_result"
-        );
-      if ((target2 === "fail" || pr === "fail") && body2.fail_fingerprint === null)
-        refuse4("a failing side carries its fingerprint", "fail_fingerprint");
-      if (pr === "pass" !== (body2.pass_output_digest !== null))
-        refuse4(
-          "the pass output digest is present exactly when the head passed",
-          "pass_output_digest"
-        );
-    });
-  }
-});
-
 // ../../packages/run-evidence/src/record-hash.ts
 var init_record_hash = __esm({
   "../../packages/run-evidence/src/record-hash.ts"() {
@@ -79482,7 +79370,6 @@ var init_src3 = __esm({
     init_contextgraph();
     init_digest3();
     init_limits();
-    init_proof();
     init_record_hash();
   }
 });
@@ -80314,11 +80201,11 @@ var init_columns = __esm({
 
 // ../../packages/tacho/src/evidence/merkle.ts
 import { createHash as createHash15 } from "node:crypto";
-function digestToBytes(digest6) {
-  if (!SHA256_DIGEST_PATTERN.test(digest6)) {
-    throw new TypeError(`not a sha256 digest: ${digest6}`);
+function digestToBytes(digest5) {
+  if (!SHA256_DIGEST_PATTERN.test(digest5)) {
+    throw new TypeError(`not a sha256 digest: ${digest5}`);
   }
-  return Buffer.from(digest6.slice("sha256:".length), "hex");
+  return Buffer.from(digest5.slice("sha256:".length), "hex");
 }
 function hash2(...parts) {
   const h = createHash15("sha256");
@@ -80595,15 +80482,15 @@ function checkWrappedFrame(frame, attemptId) {
 function checkLedgerFrame(frame) {
   const reasons = [];
   const payloadDigest = frame["payload_digest"];
-  let digest6 = "held";
+  let digest5 = "held";
   if (frame["payload_inline"] !== null && frame["payload_inline"] !== void 0) {
     const recomputed2 = safeDigestJcs(frame["payload_inline"]);
     if (recomputed2 !== payloadDigest) {
-      digest6 = "broken";
+      digest5 = "broken";
       reasons.push("payload does not hash to payload_digest");
     }
   } else if (typeof frame["encrypted_payload_ref"] !== "string") {
-    digest6 = "broken";
+    digest5 = "broken";
     reasons.push("frame carries neither a payload nor an encrypted reference");
   }
   const recomputed = safeDigestJcs({
@@ -80615,10 +80502,10 @@ function checkLedgerFrame(frame) {
     observed_at: typeof frame["observed_at"] === "string" ? normalizeInstant(frame["observed_at"]) : frame["observed_at"] ?? null
   });
   if (recomputed !== frame["event_digest"]) {
-    digest6 = "broken";
+    digest5 = "broken";
     reasons.push("identity fields do not hash to event_digest");
   }
-  return { digest: digest6, reasons };
+  return { digest: digest5, reasons };
 }
 function parseJson2(text5, name, checks) {
   try {
@@ -80753,12 +80640,12 @@ function verifyRunExport(files2) {
       if (byLine.has(line)) continue;
       const frame = frames[i2];
       const reasons = [];
-      let digest6;
+      let digest5;
       let link = "held";
       let seq = null;
       if (manifest.source === "ledger") {
         const own = checkLedgerFrame(frame);
-        digest6 = own.digest;
+        digest5 = own.digest;
         reasons.push(...own.reasons);
         const attemptSeq = frame["attempt_seq"];
         seq = typeof attemptSeq === "number" ? attemptSeq : null;
@@ -80779,7 +80666,7 @@ function verifyRunExport(files2) {
         });
       } else {
         const own = checkWrappedFrame(frame, attempt.attempt_id);
-        digest6 = own.digest;
+        digest5 = own.digest;
         reasons.push(...own.reasons);
         const rawSeq = frame["seq"];
         seq = typeof rawSeq === "number" ? rawSeq : null;
@@ -80798,15 +80685,15 @@ function verifyRunExport(files2) {
         prevHash = typeof frame["hash"] === "string" ? frame["hash"] : null;
       }
       if (digestOf2(frame) === null) {
-        digest6 = "broken";
+        digest5 = "broken";
         reasons.push("frame carries no sha256 digest");
       }
       verdicts.push({
         line,
         attempt_id: attempt.attempt_id,
         seq,
-        status: digest6 === "broken" || link === "broken" ? "broken" : "held",
-        digest: digest6,
+        status: digest5 === "broken" || link === "broken" ? "broken" : "held",
+        digest: digest5,
         link,
         reasons
       });
@@ -81375,14 +81262,14 @@ function recordPreimage(frontmatter, body2) {
   );
   return { ...Object.fromEntries(fields), statement: recordStatement(body2) };
 }
-function digest5(value) {
+function digest4(value) {
   return sha256Digest(jcsBytes(value));
 }
 function stampRecord(frontmatter, body2) {
   const preimage = recordPreimage(frontmatter, body2);
-  const seed = digest5(preimage);
+  const seed = digest4(preimage);
   const id2 = `rec_${recordSlug(String(frontmatter.lineage))}_${seed.slice(7, 19)}`;
-  return { id: id2, hash: digest5({ ...preimage, id: id2 }) };
+  return { id: id2, hash: digest4({ ...preimage, id: id2 }) };
 }
 var import_yaml, recordStatusSchema, recordOriginSchema, provenanceMemorySchema, recordProvenanceSchema, recordDateSchema, decisionStatusSchema, decisionSourceSchema, decisionFieldsSchema, declassificationShared, textDeclassificationSchema, standingDeclassificationSchema, declassificationFieldsSchema, recordShape, STEERING_RECORD_FIELDS, steeringRecordSchema;
 var init_record = __esm({
@@ -82569,7 +82456,6 @@ var init_run_list = __esm({
     "use strict";
     init_src4();
     init_zod();
-    init_src3();
     init_registry2();
     init_run_enrichment();
     init_run_fit();
@@ -82874,12 +82760,6 @@ var init_run_list = __esm({
        * predates the recorder. Never computed on read.
        */
       replayGrade: replayGradeSchema.nullable(),
-      /**
-       * The run's witness verdict as the rollup recorded it (spec §8.5, §12.8;
-       * ADR-064); null when no witness reported on the run or the rollup has
-       * not rebuilt it. Only `flipped` marks a run proven.
-       */
-      verdict: external_exports.enum(PROOF_VERDICTS).nullable(),
       /**
        * Where the run's actions were observed from (spec §8.4, §13.3). The tier
        * says how much of a policy verdict Oxagen could enforce. It does not
@@ -84780,8 +84660,8 @@ function universe(tree, files2) {
 }
 function toolResolves(target2, known) {
   if (target2.endsWith("__*")) return known.servers.has(target2.slice(0, -3));
-  const ref2 = parseToolRef(target2);
-  const name = ref2 === null ? target2 : `${ref2.server}__${ref2.tool}`;
+  const ref = parseToolRef(target2);
+  const name = ref === null ? target2 : `${ref.server}__${ref.tool}`;
   return known.tools.some((tool) => toolTargetMatches(name, tool));
 }
 function stringItems(value) {
@@ -93015,7 +92895,7 @@ function lockLimitProblems(type, pkg, version2, launch) {
 function registryLaunch({
   source,
   entry: entry2,
-  digest: digest6,
+  digest: digest5,
   file
 }) {
   const type = source.registry_type;
@@ -93074,7 +92954,7 @@ function registryLaunch({
   const version2 = pkg.version ?? entry2.server.version;
   const pinned = runner.pin === "file" ? file : void 0;
   const reference = pinned !== void 0 ? ["--from", literal2(pinned.url), literal2(pkg.identifier)] : [
-    `${literal2(pkg.identifier)}@${runner.pin === "digest" ? digest6 : literal2(version2)}`
+    `${literal2(pkg.identifier)}@${runner.pin === "digest" ? digest5 : literal2(version2)}`
   ];
   const launch = [
     ...fromPackage(runner.flags),
@@ -93095,7 +92975,7 @@ function registryLaunch({
     package: {
       name: pkg.identifier,
       version: version2,
-      digest: digest6,
+      digest: digest5,
       registry_type: type,
       ...pinned === void 0 ? {} : { file: pinned }
     }
@@ -96973,26 +96853,26 @@ function isUtf8Validated(proto, parent) {
     parent
   });
 }
-function resolveFeature(name, ref2) {
+function resolveFeature(name, ref) {
   var _a2, _b2;
-  const featureSet = (_a2 = ref2.proto.options) === null || _a2 === void 0 ? void 0 : _a2.features;
+  const featureSet = (_a2 = ref.proto.options) === null || _a2 === void 0 ? void 0 : _a2.features;
   if (featureSet) {
     const val = featureSet[name];
     if (val != 0) {
       return val;
     }
   }
-  if ("kind" in ref2) {
-    if (ref2.kind == "message") {
-      return resolveFeature(name, (_b2 = ref2.parent) !== null && _b2 !== void 0 ? _b2 : ref2.file);
+  if ("kind" in ref) {
+    if (ref.kind == "message") {
+      return resolveFeature(name, (_b2 = ref.parent) !== null && _b2 !== void 0 ? _b2 : ref.file);
     }
-    const editionDefaults = featureDefaults[ref2.edition];
+    const editionDefaults = featureDefaults[ref.edition];
     if (!editionDefaults) {
-      throw new Error(`feature default for edition ${ref2.edition} not found`);
+      throw new Error(`feature default for edition ${ref.edition} not found`);
     }
     return editionDefaults[name];
   }
-  return resolveFeature(name, ref2.parent);
+  return resolveFeature(name, ref.parent);
 }
 function assert(condition, msg) {
   if (!condition) {
@@ -102433,10 +102313,10 @@ var require_decoder = __commonJS({
       var i2 = 0;
       for (; i2 < /* initializes */
       mtype.fieldsArray.length; ++i2) {
-        var field = mtype._fieldsArray[i2].resolve(), type = field.resolvedType instanceof Enum ? "int32" : field.type, ref2 = "m" + util2.safeProp(field.name);
+        var field = mtype._fieldsArray[i2].resolve(), type = field.resolvedType instanceof Enum ? "int32" : field.type, ref = "m" + util2.safeProp(field.name);
         gen("case %i: {", field.id);
         if (field.map) {
-          gen("if(%s===util.emptyObject)", ref2)("%s={}", ref2)("var c2 = r.uint32()+r.pos");
+          gen("if(%s===util.emptyObject)", ref)("%s={}", ref)("var c2 = r.uint32()+r.pos");
           if (types.defaults[field.keyType] !== void 0) gen("k=%j", types.defaults[field.keyType]);
           else gen("k=null");
           if (types.defaults[type] !== void 0) gen("value=%j", types.defaults[type]);
@@ -102445,18 +102325,18 @@ var require_decoder = __commonJS({
           if (types.basic[type] === void 0) gen("value=types[%i].decode(r,r.uint32(),undefined,n+1)", i2);
           else gen("value=r.%s()", type);
           gen("break")("default:")("r.skipType(tag2&7,n)")("break")("}")("}");
-          if (types.long[field.keyType] !== void 0) gen('%s[typeof k==="object"?util.longToHash(k):k]=value', ref2);
+          if (types.long[field.keyType] !== void 0) gen('%s[typeof k==="object"?util.longToHash(k):k]=value', ref);
           else {
-            if (field.keyType === "string") gen('if(k==="__proto__")')("util.makeProp(%s,k)", ref2);
-            gen("%s[k]=value", ref2);
+            if (field.keyType === "string") gen('if(k==="__proto__")')("util.makeProp(%s,k)", ref);
+            gen("%s[k]=value", ref);
           }
         } else if (field.repeated) {
-          gen("if(!(%s&&%s.length))", ref2, ref2)("%s=[]", ref2);
-          if (types.packed[type] !== void 0) gen("if((t&7)===2){")("var c2=r.uint32()+r.pos")("while(r.pos<c2)")("%s.push(r.%s())", ref2, type)("}else");
-          if (types.basic[type] === void 0) gen(field.delimited ? "%s.push(types[%i].decode(r,undefined,((t&~7)|4),n+1))" : "%s.push(types[%i].decode(r,r.uint32(),undefined,n+1))", ref2, i2);
-          else gen("%s.push(r.%s())", ref2, type);
-        } else if (types.basic[type] === void 0) gen(field.delimited ? "%s=types[%i].decode(r,undefined,((t&~7)|4),n+1)" : "%s=types[%i].decode(r,r.uint32(),undefined,n+1)", ref2, i2);
-        else gen("%s=r.%s()", ref2, type);
+          gen("if(!(%s&&%s.length))", ref, ref)("%s=[]", ref);
+          if (types.packed[type] !== void 0) gen("if((t&7)===2){")("var c2=r.uint32()+r.pos")("while(r.pos<c2)")("%s.push(r.%s())", ref, type)("}else");
+          if (types.basic[type] === void 0) gen(field.delimited ? "%s.push(types[%i].decode(r,undefined,((t&~7)|4),n+1))" : "%s.push(types[%i].decode(r,r.uint32(),undefined,n+1))", ref, i2);
+          else gen("%s.push(r.%s())", ref, type);
+        } else if (types.basic[type] === void 0) gen(field.delimited ? "%s=types[%i].decode(r,undefined,((t&~7)|4),n+1)" : "%s=types[%i].decode(r,r.uint32(),undefined,n+1)", ref, i2);
+        else gen("%s=r.%s()", ref, type);
         gen("break")("}");
       }
       gen("default:")("r.skipType(t&7,n)")("break")("}")("}");
@@ -102479,14 +102359,14 @@ var require_verifier = __commonJS({
     function invalid(field, expected) {
       return field.name + ": " + expected + (field.repeated && expected !== "array" ? "[]" : field.map && expected !== "object" ? "{k:" + field.keyType + "}" : "") + " expected";
     }
-    function genVerifyValue(gen, field, fieldIndex, ref2) {
+    function genVerifyValue(gen, field, fieldIndex, ref) {
       if (field.resolvedType) {
         if (field.resolvedType instanceof Enum) {
-          gen("switch(%s){", ref2)("default:")("return%j", invalid(field, "enum value"));
+          gen("switch(%s){", ref)("default:")("return%j", invalid(field, "enum value"));
           for (var keys = Object.keys(field.resolvedType.values), j = 0; j < keys.length; ++j) gen("case %i:", field.resolvedType.values[keys[j]]);
           gen("break")("}");
         } else {
-          gen("{")("var e=types[%i].verify(%s,n+1);", fieldIndex, ref2)("if(e)")("return%j+e", field.name + ".")("}");
+          gen("{")("var e=types[%i].verify(%s,n+1);", fieldIndex, ref)("if(e)")("return%j+e", field.name + ".")("}");
         }
       } else {
         switch (field.type) {
@@ -102495,50 +102375,50 @@ var require_verifier = __commonJS({
           case "sint32":
           case "fixed32":
           case "sfixed32":
-            gen("if(!util.isInteger(%s))", ref2)("return%j", invalid(field, "integer"));
+            gen("if(!util.isInteger(%s))", ref)("return%j", invalid(field, "integer"));
             break;
           case "int64":
           case "uint64":
           case "sint64":
           case "fixed64":
           case "sfixed64":
-            gen("if(!util.isInteger(%s)&&!(%s&&util.isInteger(%s.low)&&util.isInteger(%s.high)))", ref2, ref2, ref2, ref2)("return%j", invalid(field, "integer|Long"));
+            gen("if(!util.isInteger(%s)&&!(%s&&util.isInteger(%s.low)&&util.isInteger(%s.high)))", ref, ref, ref, ref)("return%j", invalid(field, "integer|Long"));
             break;
           case "float":
           case "double":
-            gen('if(typeof %s!=="number")', ref2)("return%j", invalid(field, "number"));
+            gen('if(typeof %s!=="number")', ref)("return%j", invalid(field, "number"));
             break;
           case "bool":
-            gen('if(typeof %s!=="boolean")', ref2)("return%j", invalid(field, "boolean"));
+            gen('if(typeof %s!=="boolean")', ref)("return%j", invalid(field, "boolean"));
             break;
           case "string":
-            gen("if(!util.isString(%s))", ref2)("return%j", invalid(field, "string"));
+            gen("if(!util.isString(%s))", ref)("return%j", invalid(field, "string"));
             break;
           case "bytes":
-            gen('if(!(%s&&typeof %s.length==="number"||util.isString(%s)))', ref2, ref2, ref2)("return%j", invalid(field, "buffer"));
+            gen('if(!(%s&&typeof %s.length==="number"||util.isString(%s)))', ref, ref, ref)("return%j", invalid(field, "buffer"));
             break;
         }
       }
       return gen;
     }
-    function genVerifyKey(gen, field, ref2) {
+    function genVerifyKey(gen, field, ref) {
       switch (field.keyType) {
         case "int32":
         case "uint32":
         case "sint32":
         case "fixed32":
         case "sfixed32":
-          gen("if(!util.key32Re.test(%s))", ref2)("return%j", invalid(field, "integer key"));
+          gen("if(!util.key32Re.test(%s))", ref)("return%j", invalid(field, "integer key"));
           break;
         case "int64":
         case "uint64":
         case "sint64":
         case "fixed64":
         case "sfixed64":
-          gen("if(!util.key64Re.test(%s))", ref2)("return%j", invalid(field, "integer|Long key"));
+          gen("if(!util.key64Re.test(%s))", ref)("return%j", invalid(field, "integer|Long key"));
           break;
         case "bool":
-          gen("if(!util.key2Re.test(%s))", ref2)("return%j", invalid(field, "boolean key"));
+          gen("if(!util.key2Re.test(%s))", ref)("return%j", invalid(field, "boolean key"));
           break;
       }
       return gen;
@@ -102549,15 +102429,15 @@ var require_verifier = __commonJS({
       if (oneofs.length) gen("var p={}");
       for (var i2 = 0; i2 < /* initializes */
       mtype.fieldsArray.length; ++i2) {
-        var field = mtype._fieldsArray[i2].resolve(), ref2 = "m" + util2.safeProp(field.name);
-        if (field.optional) gen("if(%s!=null&&Object.hasOwnProperty.call(m,%j)){", ref2, field.name);
+        var field = mtype._fieldsArray[i2].resolve(), ref = "m" + util2.safeProp(field.name);
+        if (field.optional) gen("if(%s!=null&&Object.hasOwnProperty.call(m,%j)){", ref, field.name);
         if (field.map) {
-          gen("if(!util.isObject(%s))", ref2)("return%j", invalid(field, "object"))("var k=Object.keys(%s)", ref2)("for(var i=0;i<k.length;++i){");
+          gen("if(!util.isObject(%s))", ref)("return%j", invalid(field, "object"))("var k=Object.keys(%s)", ref)("for(var i=0;i<k.length;++i){");
           genVerifyKey(gen, field, "k[i]");
-          genVerifyValue(gen, field, i2, ref2 + "[k[i]]")("}");
+          genVerifyValue(gen, field, i2, ref + "[k[i]]")("}");
         } else if (field.repeated) {
-          gen("if(!Array.isArray(%s))", ref2)("return%j", invalid(field, "array"))("for(var i=0;i<%s.length;++i){", ref2);
-          genVerifyValue(gen, field, i2, ref2 + "[i]")("}");
+          gen("if(!Array.isArray(%s))", ref)("return%j", invalid(field, "array"))("for(var i=0;i<%s.length;++i){", ref);
+          genVerifyValue(gen, field, i2, ref + "[i]")("}");
         } else {
           if (field.partOf) {
             var oneofProp = util2.safeProp(field.partOf.name);
@@ -102565,7 +102445,7 @@ var require_verifier = __commonJS({
             seenFirstField[field.partOf.name] = 1;
             gen("p%s=1", oneofProp);
           }
-          genVerifyValue(gen, field, i2, ref2);
+          genVerifyValue(gen, field, i2, ref);
         }
         if (field.optional) gen("}");
       }
@@ -104375,40 +104255,40 @@ var require_encoder = __commonJS({
     var Enum = require_enum();
     var types = require_types();
     var util2 = require_util();
-    function genTypePartial(gen, field, fieldIndex, ref2) {
-      return field.delimited ? gen("types[%i].encode(%s,w.uint32(%i),q+1).uint32(%i)", fieldIndex, ref2, (field.id << 3 | 3) >>> 0, (field.id << 3 | 4) >>> 0) : gen("types[%i].encode(%s,w.uint32(%i).fork(),q+1).ldelim()", fieldIndex, ref2, (field.id << 3 | 2) >>> 0);
+    function genTypePartial(gen, field, fieldIndex, ref) {
+      return field.delimited ? gen("types[%i].encode(%s,w.uint32(%i),q+1).uint32(%i)", fieldIndex, ref, (field.id << 3 | 3) >>> 0, (field.id << 3 | 4) >>> 0) : gen("types[%i].encode(%s,w.uint32(%i).fork(),q+1).ldelim()", fieldIndex, ref, (field.id << 3 | 2) >>> 0);
     }
     function encoder6(mtype) {
       var gen = util2.codegen(["m", "w", "q"], mtype.name + "$encode")("if(!w)")("w=Writer.create()")("if(q===undefined)q=0")("if(q>util.recursionLimit)")('throw Error("max depth exceeded")');
-      var i2, ref2;
+      var i2, ref;
       var fields = (
         /* initializes */
         mtype.fieldsArray.slice().sort(util2.compareFieldsById)
       );
       for (var i2 = 0; i2 < fields.length; ++i2) {
         var field = fields[i2].resolve(), index = mtype._fieldsArray.indexOf(field), type = field.resolvedType instanceof Enum ? "int32" : field.type, wireType = types.basic[type];
-        ref2 = "m" + util2.safeProp(field.name);
+        ref = "m" + util2.safeProp(field.name);
         if (field.map) {
-          gen("if(%s!=null&&Object.hasOwnProperty.call(m,%j)){", ref2, field.name)("for(var ks=Object.keys(%s),i=0;i<ks.length;++i){", ref2)("w.uint32(%i).fork().uint32(%i).%s(ks[i])", (field.id << 3 | 2) >>> 0, 8 | types.mapKey[field.keyType], field.keyType);
-          if (wireType === void 0) gen("types[%i].encode(%s[ks[i]],w.uint32(18).fork(),q+1).ldelim().ldelim()", index, ref2);
-          else gen(".uint32(%i).%s(%s[ks[i]]).ldelim()", 16 | wireType, type, ref2);
+          gen("if(%s!=null&&Object.hasOwnProperty.call(m,%j)){", ref, field.name)("for(var ks=Object.keys(%s),i=0;i<ks.length;++i){", ref)("w.uint32(%i).fork().uint32(%i).%s(ks[i])", (field.id << 3 | 2) >>> 0, 8 | types.mapKey[field.keyType], field.keyType);
+          if (wireType === void 0) gen("types[%i].encode(%s[ks[i]],w.uint32(18).fork(),q+1).ldelim().ldelim()", index, ref);
+          else gen(".uint32(%i).%s(%s[ks[i]]).ldelim()", 16 | wireType, type, ref);
           gen("}")("}");
         } else if (field.repeated) {
-          gen("if(%s!=null&&%s.length){", ref2, ref2);
+          gen("if(%s!=null&&%s.length){", ref, ref);
           if (field.packed && types.packed[type] !== void 0) {
-            gen("w.uint32(%i).fork()", (field.id << 3 | 2) >>> 0)("for(var i=0;i<%s.length;++i)", ref2)("w.%s(%s[i])", type, ref2)("w.ldelim()");
+            gen("w.uint32(%i).fork()", (field.id << 3 | 2) >>> 0)("for(var i=0;i<%s.length;++i)", ref)("w.%s(%s[i])", type, ref)("w.ldelim()");
           } else {
-            gen("for(var i=0;i<%s.length;++i)", ref2);
+            gen("for(var i=0;i<%s.length;++i)", ref);
             if (wireType === void 0)
-              genTypePartial(gen, field, index, ref2 + "[i]");
-            else gen("w.uint32(%i).%s(%s[i])", (field.id << 3 | wireType) >>> 0, type, ref2);
+              genTypePartial(gen, field, index, ref + "[i]");
+            else gen("w.uint32(%i).%s(%s[i])", (field.id << 3 | wireType) >>> 0, type, ref);
           }
           gen("}");
         } else {
-          if (field.optional) gen("if(%s!=null&&Object.hasOwnProperty.call(m,%j))", ref2, field.name);
+          if (field.optional) gen("if(%s!=null&&Object.hasOwnProperty.call(m,%j))", ref, field.name);
           if (wireType === void 0)
-            genTypePartial(gen, field, index, ref2);
-          else gen("w.uint32(%i).%s(%s)", (field.id << 3 | wireType) >>> 0, type, ref2);
+            genTypePartial(gen, field, index, ref);
+          else gen("w.uint32(%i).%s(%s)", (field.id << 3 | wireType) >>> 0, type, ref);
         }
       }
       return gen("return w");
@@ -106357,9 +106237,9 @@ function methodOf(method, service, build) {
   const full = `${service}.${method.name}`;
   keepComment(build, full, method.comment);
   const descriptor = create(MethodDescriptorProtoSchema, { name: method.name });
-  const pend = (ref2, which) => {
+  const pend = (ref, which) => {
     build.pending.push({
-      ref: ref2,
+      ref,
       scope: service,
       holder: `the ${which} type of ${service}/${method.name}`,
       accepts: "message",
@@ -107331,22 +107211,22 @@ var init_print = __esm({
        * The shortest name for `ref` that resolves back to it from `scope`, or
        * the full name with its leading dot when no shorter one does.
        */
-      typeName(ref2, scope, where, accepts) {
-        if (!ref2.startsWith("."))
+      typeName(ref, scope, where, accepts) {
+        if (!ref.startsWith("."))
           this.refuse(
-            `${where} is ${JSON.stringify(ref2)}, which is not a full type name`
+            `${where} is ${JSON.stringify(ref)}, which is not a full type name`
           );
-        const full = ref2.slice(1);
+        const full = ref.slice(1);
         const parts = full.split(".");
         if (!parts.every((part2) => IDENTIFIER.test(part2)))
           this.refuse(
-            `${where} is ${JSON.stringify(ref2)}, which is not a valid type name`
+            `${where} is ${JSON.stringify(ref)}, which is not a valid type name`
           );
         const found = this.symbols.find(full, this.visible);
         const fits = found !== void 0 && (found.kind === "message" ? accepts !== "enum" : found.kind === "enum" ? accepts !== "message" : false);
         if (!fits)
           this.refuse(
-            `${where} is ${ref2}, which is not ${ACCEPTS_TEXT[accepts]} that ${this.file.name} or its imports define`
+            `${where} is ${ref}, which is not ${ACCEPTS_TEXT[accepts]} that ${this.file.name} or its imports define`
           );
         for (let start = parts.length - 1; start >= 0; start -= 1) {
           if (RESERVED.has(parts[start] ?? "")) continue;
@@ -107354,7 +107234,7 @@ var init_print = __esm({
           if (this.symbols.lookup(candidate, scope, this.visible)?.name === full)
             return candidate;
         }
-        return ref2;
+        return ref;
       }
       /** The leading comment for the SourceCodeInfo path, as `//` lines. */
       comment(path2) {
@@ -107558,36 +107438,36 @@ var init_symbols = __esm({
        * from there. When a one-part name finds something that is not a type,
        * the search goes on outward.
        */
-      lookup(ref2, scope, visible) {
-        if (ref2.startsWith(".")) return this.find(ref2.slice(1), visible);
-        const dot = ref2.indexOf(".");
-        const first = dot === -1 ? ref2 : ref2.slice(0, dot);
+      lookup(ref, scope, visible) {
+        if (ref.startsWith(".")) return this.find(ref.slice(1), visible);
+        const dot = ref.indexOf(".");
+        const first = dot === -1 ? ref : ref.slice(0, dot);
         const parts = scope === "" ? [] : scope.split(".");
         for (let end = parts.length; end > 0; end -= 1) {
           const prefix = parts.slice(0, end).join(".");
           const found = this.find(`${prefix}.${first}`, visible);
           if (found === void 0) continue;
-          if (dot !== -1) return this.find(`${prefix}.${ref2}`, visible);
+          if (dot !== -1) return this.find(`${prefix}.${ref}`, visible);
           if (found.kind === "message" || found.kind === "enum") return found;
         }
-        return this.find(ref2, visible);
+        return this.find(ref, visible);
       }
       /**
        * Why lookup found nothing for `ref`, when protoc says more than that
        * nothing defines it, or undefined when nothing more explains it. It walks
        * the scopes as lookup does.
        */
-      explain(ref2, scope, visible) {
-        if (ref2.startsWith(".")) return void 0;
-        const dot = ref2.indexOf(".");
-        const first = dot === -1 ? ref2 : ref2.slice(0, dot);
+      explain(ref, scope, visible) {
+        if (ref.startsWith(".")) return void 0;
+        const dot = ref.indexOf(".");
+        const first = dot === -1 ? ref : ref.slice(0, dot);
         const parts = scope === "" ? [] : scope.split(".");
         for (let end = parts.length; end > 0; end -= 1) {
           const prefix = parts.slice(0, end).join(".");
           const found = this.find(`${prefix}.${first}`, visible);
           if (found === void 0) continue;
           if (dot !== -1)
-            return { reason: "shadowed", first: found, readAs: `${prefix}.${ref2}` };
+            return { reason: "shadowed", first: found, readAs: `${prefix}.${ref}` };
           if (found.kind !== "message" && found.kind !== "enum")
             return { reason: "not_type", found };
         }
@@ -107687,8 +107567,8 @@ function buildSet(input, notes) {
   const customOptions = /* @__PURE__ */ new Set();
   for (const [name, file] of built) {
     const visible = visibility.of(name);
-    for (const ref2 of file.pending)
-      resolve24(ref2, name, visible, everyFile, symbols);
+    for (const ref of file.pending)
+      resolve24(ref, name, visible, everyFile, symbols);
     for (const [key, text5] of file.comments) comments.set(key, text5);
     for (const option of file.customOptions) customOptions.add(option);
   }
@@ -107862,51 +107742,51 @@ function remember(built, name, file) {
   built.set(name, file);
   return file.proto;
 }
-function resolve24(ref2, file, visible, everyFile, symbols) {
-  const found = symbols.lookup(ref2.ref, ref2.scope, visible);
+function resolve24(ref, file, visible, everyFile, symbols) {
+  const found = symbols.lookup(ref.ref, ref.scope, visible);
   if (found === void 0) {
-    const everywhere = symbols.lookup(ref2.ref, ref2.scope, everyFile);
+    const everywhere = symbols.lookup(ref.ref, ref.scope, everyFile);
     const declaredIn = everywhere === void 0 ? void 0 : symbols.declaredIn(everywhere.name);
     if (declaredIn !== void 0) {
       throw new GrpcImportError(
         "unresolved",
-        `In ${file}, ${ref2.holder} names ${ref2.ref}, which ${declaredIn} defines, but ${file} does not import ${declaredIn}. Add import "${declaredIn}"; to ${file}.`,
+        `In ${file}, ${ref.holder} names ${ref.ref}, which ${declaredIn} defines, but ${file} does not import ${declaredIn}. Add import "${declaredIn}"; to ${file}.`,
         file
       );
     }
-    const miss = symbols.explain(ref2.ref, ref2.scope, visible);
+    const miss = symbols.explain(ref.ref, ref.scope, visible);
     if (miss?.reason === "shadowed") {
-      const fromRoot = symbols.find(ref2.ref, visible) === void 0 ? "the full name with a leading dot" : `.${ref2.ref}`;
+      const fromRoot = symbols.find(ref.ref, visible) === void 0 ? "the full name with a leading dot" : `.${ref.ref}`;
       throw new GrpcImportError(
         "unresolved",
-        `In ${file}, ${ref2.holder} names ${ref2.ref}, which protoc reads as ${miss.readAs} because the ${miss.first.kind} ${miss.first.name} is in a nearer scope. Nothing defines ${miss.readAs}. Write ${fromRoot} to start from the outermost scope.`,
+        `In ${file}, ${ref.holder} names ${ref.ref}, which protoc reads as ${miss.readAs} because the ${miss.first.kind} ${miss.first.name} is in a nearer scope. Nothing defines ${miss.readAs}. Write ${fromRoot} to start from the outermost scope.`,
         file
       );
     }
     if (miss?.reason === "not_type") {
       throw new GrpcImportError(
         "unresolved",
-        `In ${file}, ${ref2.holder} names ${ref2.ref}, which is the ${miss.found.kind} ${miss.found.name}. It must name ${wantedBy(ref2)}.`,
+        `In ${file}, ${ref.holder} names ${ref.ref}, which is the ${miss.found.kind} ${miss.found.name}. It must name ${wantedBy(ref)}.`,
         file
       );
     }
     throw new GrpcImportError(
       "unresolved",
-      `In ${file}, ${ref2.holder} names ${ref2.ref}, which none of its imports defines. Define ${ref2.ref}, or import the file that does.`,
+      `In ${file}, ${ref.holder} names ${ref.ref}, which none of its imports defines. Define ${ref.ref}, or import the file that does.`,
       file
     );
   }
-  if (found.kind === "package" || found.kind === "service" || ref2.accepts === "message" && found.kind === "enum") {
+  if (found.kind === "package" || found.kind === "service" || ref.accepts === "message" && found.kind === "enum") {
     throw new GrpcImportError(
       "unresolved",
-      `In ${file}, ${ref2.holder} names ${ref2.ref}, which is the ${found.kind} ${found.name}. It must name ${wantedBy(ref2)}.`,
+      `In ${file}, ${ref.holder} names ${ref.ref}, which is the ${found.kind} ${found.name}. It must name ${wantedBy(ref)}.`,
       file
     );
   }
-  ref2.resolve(found.name, found.kind);
+  ref.resolve(found.name, found.kind);
 }
-function wantedBy(ref2) {
-  return ref2.accepts === "message" ? "a message" : "a message or an enum";
+function wantedBy(ref) {
+  return ref.accepts === "message" ? "a message" : "a message or an enum";
 }
 var PROTO_DIR, Visibility;
 var init_set = __esm({
@@ -109567,13 +109447,13 @@ function lintServer(folder, context, report) {
       fix: "Rename the server to at most 24 lowercase letters, digits, and underscores, starting with a letter."
     });
   }
-  for (const [field, ref2] of credentialFields2(folder)) {
-    if (context.credentials.has(ref2)) continue;
+  for (const [field, ref] of credentialFields2(folder)) {
+    if (context.credentials.has(ref)) continue;
     report("unknown_credential", {
       tool: void 0,
       field,
-      message: `${field} names ${ref2}, and the organization has no credential by that name, so every call would fail.`,
-      fix: `Add ${ref2} in Oxagen, or set ${field} to a credential the organization has.`
+      message: `${field} names ${ref}, and the organization has no credential by that name, so every call would fail.`,
+      fix: `Add ${ref} in Oxagen, or set ${field} to a credential the organization has.`
     });
   }
   const { source } = server;
@@ -113101,11 +112981,11 @@ function compilePattern(pattern) {
     }
   }
 }
-function resolveRef(root, ref2) {
-  if (ref2 === "#") return root;
-  if (!ref2.startsWith("#/")) return void 0;
+function resolveRef(root, ref) {
+  if (ref === "#") return root;
+  if (!ref.startsWith("#/")) return void 0;
   let current = root;
-  for (const raw of ref2.slice(2).split("/")) {
+  for (const raw of ref.slice(2).split("/")) {
     let token;
     try {
       token = decodeURIComponent(raw).replaceAll("~1", "/").replaceAll("~0", "~");
@@ -120992,27 +120872,27 @@ var require_channelz = __commonJS({
     var subchannel_address_1 = require_subchannel_address();
     var admin_1 = require_admin();
     var make_client_1 = require_make_client();
-    function channelRefToMessage(ref2) {
+    function channelRefToMessage(ref) {
       return {
-        channel_id: ref2.id,
-        name: ref2.name
+        channel_id: ref.id,
+        name: ref.name
       };
     }
-    function subchannelRefToMessage(ref2) {
+    function subchannelRefToMessage(ref) {
       return {
-        subchannel_id: ref2.id,
-        name: ref2.name
+        subchannel_id: ref.id,
+        name: ref.name
       };
     }
-    function serverRefToMessage(ref2) {
+    function serverRefToMessage(ref) {
       return {
-        server_id: ref2.id
+        server_id: ref.id
       };
     }
-    function socketRefToMessage(ref2) {
+    function socketRefToMessage(ref) {
       return {
-        socket_id: ref2.id,
-        name: ref2.name
+        socket_id: ref.id,
+        name: ref.name
       };
     }
     var TARGET_RETAINED_TRACES = 32;
@@ -121183,11 +121063,11 @@ var require_channelz = __commonJS({
       const entityMap = entityMaps[kind];
       return (name, getInfo, channelzEnabled) => {
         const id2 = getNextId();
-        const ref2 = { id: id2, name, kind };
+        const ref = { id: id2, name, kind };
         if (channelzEnabled) {
-          entityMap.setElement(id2, { ref: ref2, getInfo });
+          entityMap.setElement(id2, { ref, getInfo });
         }
-        return ref2;
+        return ref;
       };
     };
     exports.registerChannelzChannel = generateRegisterFn(
@@ -121206,8 +121086,8 @@ var require_channelz = __commonJS({
       "socket"
       /* EntityTypes.socket */
     );
-    function unregisterChannelzRef(ref2) {
-      entityMaps[ref2.kind].eraseElementByKey(ref2.id);
+    function unregisterChannelzRef(ref) {
+      entityMaps[ref.kind].eraseElementByKey(ref.id);
     }
     function parseIPv6Section(addressSection) {
       const numberValue = Number.parseInt(addressSection, 16);
@@ -134305,12 +134185,12 @@ function nulSplit(out) {
 function insideWorkTree(root) {
   return git5(root, ["rev-parse", "--is-inside-work-tree"])?.toString("utf8").trim() === "true";
 }
-function commitOf2(root, ref2) {
+function commitOf2(root, ref) {
   const out = git5(root, [
     "rev-parse",
     "--verify",
     "--quiet",
-    `${ref2}^{commit}`
+    `${ref}^{commit}`
   ]);
   const sha2 = out?.toString("utf8").trim() ?? "";
   return sha2.length > 0 ? sha2 : null;
@@ -134382,10 +134262,10 @@ function readBase(root, commit) {
   const sorted = blobs.map((blob, index) => [blob.path, texts[index]]).sort(([a], [b3]) => a < b3 ? -1 : a > b3 ? 1 : 0);
   return new Map(sorted);
 }
-function chooseBase(root, ref2) {
-  if (ref2 !== void 0) {
-    const commit = ref2.startsWith("-") ? null : commitOf2(root, ref2);
-    return commit === null ? { kind: "missing", ref: ref2 } : { kind: "ref", ref: ref2, commit };
+function chooseBase(root, ref) {
+  if (ref !== void 0) {
+    const commit = ref.startsWith("-") ? null : commitOf2(root, ref);
+    return commit === null ? { kind: "missing", ref } : { kind: "ref", ref, commit };
   }
   for (const candidate of DEFAULT_BASES) {
     const commit = commitOf2(root, candidate);
@@ -141081,15 +140961,15 @@ function buildProgram() {
   });
   repoCmd.command("link").description(
     "Open the steering PR that links a GitHub repository the workspace's GitHub App installation reaches. The link follows the merge."
-  ).argument("<owner/name>", "The repository, as GitHub names it").option("--json", "Output JSON").action(async (ref2, opts) => {
+  ).argument("<owner/name>", "The repository, as GitHub names it").option("--json", "Output JSON").action(async (ref, opts) => {
     const { repoLink: repoLink2 } = await Promise.resolve().then(() => (init_repo(), repo_exports));
-    await repoLink2(ref2, opts);
+    await repoLink2(ref, opts);
   });
   repoCmd.command("scan").description(
     "List the agent harness files on a repository's default branch: instruction and rule files, skills, commands, subagent files, settings files and MCP configs. The repository need not be linked."
-  ).argument("<owner/name>", "The repository, or the GitLab project path").option("--gitlab", "Scan a GitLab project the workspace has connected").option("--json", "Output JSON").action(async (ref2, opts) => {
+  ).argument("<owner/name>", "The repository, or the GitLab project path").option("--gitlab", "Scan a GitLab project the workspace has connected").option("--json", "Output JSON").action(async (ref, opts) => {
     const { repoScan: repoScan2 } = await Promise.resolve().then(() => (init_repo_scan(), repo_scan_exports));
-    await repoScan2(ref2, opts);
+    await repoScan2(ref, opts);
   });
   repoCmd.command("unlink").description(
     "Unlink a linked repository by its binding id. A repository workspace.toml lists is removed by a steering PR. The steering repository is refused."