devin-dream 0.1.0__tar.gz

devin_dream-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Icaro0310
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

devin_dream-0.1.0/PKG-INFO

@@ -0,0 +1,186 @@
+Metadata-Version: 2.4
+Name: devin-dream
+Version: 0.1.0
+Summary: Synthetic Devin sessions with known verdicts — regression and adversarial test data for the devin-* catalog.
+Author: Icaro0310
+License: MIT
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: devin-internals-spec<0.4.0,>=0.3.0
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == "dev"
+Dynamic: license-file
+
+<div align="center">
+
+# devin-dream — MOVED
+
+**This repository was absorbed into
+[`devin-evals`](https://github.com/Icaro0310/devin-evals).**
+
+The code now lives at `src/devin_evals/dream/` and the CLI moved to
+`devin-evals dream {unit,inject,fleet}` — same commands, same defect
+catalogue (D01–D09), one package instead of two.
+
+```bash
+# before
+devin-dream unit --out out/ --defect D01 D03
+
+# after
+devin-evals dream unit --out out/ --defect D01 D03
+```
+
+The repository is archived; open issues were migrated to devin-evals.
+History remains readable here for reference.
+
+</div>
+
+---
+
+<details>
+<summary>Original README (pre-archive)</summary>
+
+<div align="center">
+
+<a href="https://github.com/Icaro0310/devin-dream/actions/workflows/ci.yml"><img src="https://github.com/Icaro0310/devin-dream/actions/workflows/ci.yml/badge.svg" alt="ci"/></a>
+
+<a href="https://scorecard.dev/viewer/?uri=github.com/Icaro0310/devin-dream"><img src="https://api.scorecard.dev/projects/github.com/Icaro0310/devin-dream/badge" alt="OpenSSF Scorecard"/></a>
+<a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-green" alt="License: MIT"/></a>
+<a href="https://www.python.org/"><img src="https://img.shields.io/badge/python-3.10%2B-blue" alt="Python 3.10+"/></a>
+<a href="https://github.com/Icaro0310/devin-dream"><img src="https://img.shields.io/github/stars/Icaro0310/devin-dream" alt="GitHub stars"/></a>
+<a href="https://github.com/Icaro0310/devin-dream/commits/main"><img src="https://img.shields.io/github/last-commit/Icaro0310/devin-dream" alt="Last commit"/></a>
+<a href="https://github.com/Icaro0310/awesome-devin"><img src="https://img.shields.io/badge/part%20of-devin--*-ecosystem-7c3aed" alt="devin-* ecosystem"/></a>
+<a href="https://github.com/Icaro0310/devin-dream/issues"><img src="https://img.shields.io/badge/PRs-welcome-brightgreen" alt="PRs welcome"/></a>
+</div>
+
+# devin-dream
+
+Synthetic Devin sessions with a **known verdict** — regression and
+adversarial test data for the `devin-*` catalog.
+
+> Unofficial community project; not affiliated with or endorsed by
+**[Linux](README.linux.md)** · **[Personal Windows](README.windows.md)** · **[Corporate Windows](README.corporate-windows.md)**
+
+Part of the [awesome-devin](https://github.com/Icaro0310/awesome-devin) ecosystem: the curated hub for the devin-* tools.
+
+Every tool in the ecosystem reads Devin's local stores. Testing them needs
+sessions — but real sessions are private. `devin-dream` generates
+`sessions.db` files in the exact real DDL (reusing
+[`devin-internals-spec`](https://github.com/Icaro0310/devin-internals-spec)
+fixtures) with realistic content, labeled defects, and an `expected.json`
+stating what each catalog tool *should* conclude.
+
+## Defects
+
+| ID  | Injected defect                                   | Expected verdict          | Tool under test      |
+|-----|---------------------------------------------------|---------------------------|----------------------|
+| D01 | "I ran the tests" claim with no tool call         | UNVERIFIED                | `devin-qa-pack`      |
+| D02 | claim with incomplete evidence                    | PARTIAL                   | `devin-qa-pack`      |
+| D03 | claim with complete evidence                      | PASS                      | `devin-qa-pack`      |
+| D04 | fake secret inside a tool output                  | masked / BLOCKED          | `devin-redact`       |
+| D05 | fake PII inside a user prompt                     | masked / REVIEW           | `devin-redact`       |
+| D06 | schema drift (version 18)                         | loud drift failure        | `devin-internals-spec` |
+| D07 | malicious instruction inside a tool result        | denied                    | `devin-bridge`       |
+| D08 | agent tries to persist a false "decision"         | quarantined               | `devin-memory`       |
+| D09 | fake secret split across two tool payloads        | masked (cross-chunk)      | `devin-redact`       |
+
+Secrets and PII are always obviously fake public-documentation values —
+nothing real is ever generated or read.
+
+## Install
+
+<!-- DIST-STATUS:BEGIN — generated from devin-powerups/registry.json -->
+> **Source-only distribution.** This tool is not yet published to PyPI.
+> Install from source:
+>
+> ```bash
+> pipx install git+https://github.com/Icaro0310/devin-dream.git
+> # or
+> uv tool install git+https://github.com/Icaro0310/devin-dream.git
+> ```
+<!-- DIST-STATUS:END -->
+
+## Usage
+
+```bash
+devin-dream unit   --out out/                 # one dir per defect, + expected.json
+devin-dream unit   --out out/ --defect D01 D03
+devin-dream inject --out adv/ --n 5           # adversarial (D07/D08) + scorecard
+devin-dream fleet  --out big/ --sessions 2000 --seed 1 --manifest
+devin-dream fleet  --out big/ --sessions 500 --vscdb big/state.vscdb
+```
+
+Each `unit` run writes `<out>/<defect>/sessions.db` — openable by any
+catalog parser — and `expected.json` with the labeled verdicts. `inject`
+adds a top-level scorecard (`expected_blocks` per defect).
+
+## Fleet
+
+`fleet` writes one seeded `sessions.db` holding a population of
+archetype sessions (no labeled defect — `defect_id = "FLEET"`). Every
+archetype is guaranteed to appear within the first 7 sessions; beyond
+that the mix is weighted toward `short-task`:
+
+| Archetype          | Shape                                                     |
+|--------------------|-----------------------------------------------------------|
+| `short-task`       | 2–6 messages, a few read/test tool calls                  |
+| `long-refactor`    | 20–40 messages, 30 min–2 h `last_activity_at` spread      |
+| `failed-attempt`   | repeated `pytest` runs exiting 1, unresolved ending       |
+| `multi-project`    | `workspace_dirs` lists 2–3 dirs, tool calls `cd` between  |
+| `heavy-churn`      | the same file path touched by 8–14 tool calls             |
+| `commit-producing` | git add/commit/rev-parse calls carrying real 40-hex SHAs  |
+| `empty-trivial`    | 1–2 messages, no tool calls                               |
+
+`commit-producing` payloads (40-hex SHAs plus a
+`github.com/dream-org/.../commit/<sha>` URL) are picked up by
+`devin_internals.commits.commit_references`, so graph/janitor
+commit-coverage tests can run against the fleet.
+
+`--manifest` writes `fleet.json` next to `sessions.db` with the seed,
+per-archetype counts, and one entry per session:
+
+```json
+{"session_id": "dream-fleet-00012", "archetype": "commit-producing",
+ "expected": {"produces_commit": true,
+              "commit_shas": ["<40-hex>"]},
+ "gui_slug": "canyon-violin"}
+```
+
+Every `expected` block carries the uniform flags `produces_commit`,
+`heavy_churn`, `failed`, `trivial` plus archetype-specific keys
+(`commit_shas`, `churned_file`, `projects`, `duration_ms`, …) for
+downstream assertions.
+
+`--vscdb PATH` additionally emits a synthetic `state.vscdb`
+(`ItemTable`) binding ~35% of the sessions to a
+`windsurfSpace.sessionWorkspace/<backend>/<slug>` entry — including the
+`resourceToSpace` / `metadata` rollups — so `devin-graph` (GR-1) and
+`devin-history` (HI-1) GUI coverage can be fleet-tested. Bound sessions
+get `gui_slug` in the manifest.
+
+All output is deterministic given `--seed`: same seed, same manifest,
+byte-identical `sessions.db`.
+
+## What it does not do
+
+- It does not run the verdicts — checking that tools actually reach the
+  expected verdict is the catalog's job (e.g. `devin-evals` packs, manual
+  `qa-pack`/`redact` runs against the generated DBs).
+- Fleet content is templated synthetic text, not realistic transcripts;
+  commit SHAs are seeded-`random` hex, never real objects.
+- Fleet sessions populate `sessions` / `message_nodes` /
+  `tool_call_state` only — no `prompt_history`, `rendered_commits`, or
+  `subagent_heads` rows.
+- The emitted `state.vscdb` covers only the
+  `windsurfSpace.sessionWorkspace`/`resourceToSpace`/`metadata` key
+  family — not the full Electron store.
+- GUI `acp-messages` stores are not generated yet (planned after the typed
+  reader lands everywhere).
+- `fleet` volume beyond a few thousand sessions is untested.
+
+Requires Python ≥ 3.10, stdlib only beyond `devin-internals-spec`.
+Read-only w.r.t. real Devin stores: it only writes its own output dir.
+
+
+</details>

devin_dream-0.1.0/README.md

@@ -0,0 +1,172 @@
+<div align="center">
+
+# devin-dream — MOVED
+
+**This repository was absorbed into
+[`devin-evals`](https://github.com/Icaro0310/devin-evals).**
+
+The code now lives at `src/devin_evals/dream/` and the CLI moved to
+`devin-evals dream {unit,inject,fleet}` — same commands, same defect
+catalogue (D01–D09), one package instead of two.
+
+```bash
+# before
+devin-dream unit --out out/ --defect D01 D03
+
+# after
+devin-evals dream unit --out out/ --defect D01 D03
+```
+
+The repository is archived; open issues were migrated to devin-evals.
+History remains readable here for reference.
+
+</div>
+
+---
+
+<details>
+<summary>Original README (pre-archive)</summary>
+
+<div align="center">
+
+<a href="https://github.com/Icaro0310/devin-dream/actions/workflows/ci.yml"><img src="https://github.com/Icaro0310/devin-dream/actions/workflows/ci.yml/badge.svg" alt="ci"/></a>
+
+<a href="https://scorecard.dev/viewer/?uri=github.com/Icaro0310/devin-dream"><img src="https://api.scorecard.dev/projects/github.com/Icaro0310/devin-dream/badge" alt="OpenSSF Scorecard"/></a>
+<a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-green" alt="License: MIT"/></a>
+<a href="https://www.python.org/"><img src="https://img.shields.io/badge/python-3.10%2B-blue" alt="Python 3.10+"/></a>
+<a href="https://github.com/Icaro0310/devin-dream"><img src="https://img.shields.io/github/stars/Icaro0310/devin-dream" alt="GitHub stars"/></a>
+<a href="https://github.com/Icaro0310/devin-dream/commits/main"><img src="https://img.shields.io/github/last-commit/Icaro0310/devin-dream" alt="Last commit"/></a>
+<a href="https://github.com/Icaro0310/awesome-devin"><img src="https://img.shields.io/badge/part%20of-devin--*-ecosystem-7c3aed" alt="devin-* ecosystem"/></a>
+<a href="https://github.com/Icaro0310/devin-dream/issues"><img src="https://img.shields.io/badge/PRs-welcome-brightgreen" alt="PRs welcome"/></a>
+</div>
+
+# devin-dream
+
+Synthetic Devin sessions with a **known verdict** — regression and
+adversarial test data for the `devin-*` catalog.
+
+> Unofficial community project; not affiliated with or endorsed by
+**[Linux](README.linux.md)** · **[Personal Windows](README.windows.md)** · **[Corporate Windows](README.corporate-windows.md)**
+
+Part of the [awesome-devin](https://github.com/Icaro0310/awesome-devin) ecosystem: the curated hub for the devin-* tools.
+
+Every tool in the ecosystem reads Devin's local stores. Testing them needs
+sessions — but real sessions are private. `devin-dream` generates
+`sessions.db` files in the exact real DDL (reusing
+[`devin-internals-spec`](https://github.com/Icaro0310/devin-internals-spec)
+fixtures) with realistic content, labeled defects, and an `expected.json`
+stating what each catalog tool *should* conclude.
+
+## Defects
+
+| ID  | Injected defect                                   | Expected verdict          | Tool under test      |
+|-----|---------------------------------------------------|---------------------------|----------------------|
+| D01 | "I ran the tests" claim with no tool call         | UNVERIFIED                | `devin-qa-pack`      |
+| D02 | claim with incomplete evidence                    | PARTIAL                   | `devin-qa-pack`      |
+| D03 | claim with complete evidence                      | PASS                      | `devin-qa-pack`      |
+| D04 | fake secret inside a tool output                  | masked / BLOCKED          | `devin-redact`       |
+| D05 | fake PII inside a user prompt                     | masked / REVIEW           | `devin-redact`       |
+| D06 | schema drift (version 18)                         | loud drift failure        | `devin-internals-spec` |
+| D07 | malicious instruction inside a tool result        | denied                    | `devin-bridge`       |
+| D08 | agent tries to persist a false "decision"         | quarantined               | `devin-memory`       |
+| D09 | fake secret split across two tool payloads        | masked (cross-chunk)      | `devin-redact`       |
+
+Secrets and PII are always obviously fake public-documentation values —
+nothing real is ever generated or read.
+
+## Install
+
+<!-- DIST-STATUS:BEGIN — generated from devin-powerups/registry.json -->
+> **Source-only distribution.** This tool is not yet published to PyPI.
+> Install from source:
+>
+> ```bash
+> pipx install git+https://github.com/Icaro0310/devin-dream.git
+> # or
+> uv tool install git+https://github.com/Icaro0310/devin-dream.git
+> ```
+<!-- DIST-STATUS:END -->
+
+## Usage
+
+```bash
+devin-dream unit   --out out/                 # one dir per defect, + expected.json
+devin-dream unit   --out out/ --defect D01 D03
+devin-dream inject --out adv/ --n 5           # adversarial (D07/D08) + scorecard
+devin-dream fleet  --out big/ --sessions 2000 --seed 1 --manifest
+devin-dream fleet  --out big/ --sessions 500 --vscdb big/state.vscdb
+```
+
+Each `unit` run writes `<out>/<defect>/sessions.db` — openable by any
+catalog parser — and `expected.json` with the labeled verdicts. `inject`
+adds a top-level scorecard (`expected_blocks` per defect).
+
+## Fleet
+
+`fleet` writes one seeded `sessions.db` holding a population of
+archetype sessions (no labeled defect — `defect_id = "FLEET"`). Every
+archetype is guaranteed to appear within the first 7 sessions; beyond
+that the mix is weighted toward `short-task`:
+
+| Archetype          | Shape                                                     |
+|--------------------|-----------------------------------------------------------|
+| `short-task`       | 2–6 messages, a few read/test tool calls                  |
+| `long-refactor`    | 20–40 messages, 30 min–2 h `last_activity_at` spread      |
+| `failed-attempt`   | repeated `pytest` runs exiting 1, unresolved ending       |
+| `multi-project`    | `workspace_dirs` lists 2–3 dirs, tool calls `cd` between  |
+| `heavy-churn`      | the same file path touched by 8–14 tool calls             |
+| `commit-producing` | git add/commit/rev-parse calls carrying real 40-hex SHAs  |
+| `empty-trivial`    | 1–2 messages, no tool calls                               |
+
+`commit-producing` payloads (40-hex SHAs plus a
+`github.com/dream-org/.../commit/<sha>` URL) are picked up by
+`devin_internals.commits.commit_references`, so graph/janitor
+commit-coverage tests can run against the fleet.
+
+`--manifest` writes `fleet.json` next to `sessions.db` with the seed,
+per-archetype counts, and one entry per session:
+
+```json
+{"session_id": "dream-fleet-00012", "archetype": "commit-producing",
+ "expected": {"produces_commit": true,
+              "commit_shas": ["<40-hex>"]},
+ "gui_slug": "canyon-violin"}
+```
+
+Every `expected` block carries the uniform flags `produces_commit`,
+`heavy_churn`, `failed`, `trivial` plus archetype-specific keys
+(`commit_shas`, `churned_file`, `projects`, `duration_ms`, …) for
+downstream assertions.
+
+`--vscdb PATH` additionally emits a synthetic `state.vscdb`
+(`ItemTable`) binding ~35% of the sessions to a
+`windsurfSpace.sessionWorkspace/<backend>/<slug>` entry — including the
+`resourceToSpace` / `metadata` rollups — so `devin-graph` (GR-1) and
+`devin-history` (HI-1) GUI coverage can be fleet-tested. Bound sessions
+get `gui_slug` in the manifest.
+
+All output is deterministic given `--seed`: same seed, same manifest,
+byte-identical `sessions.db`.
+
+## What it does not do
+
+- It does not run the verdicts — checking that tools actually reach the
+  expected verdict is the catalog's job (e.g. `devin-evals` packs, manual
+  `qa-pack`/`redact` runs against the generated DBs).
+- Fleet content is templated synthetic text, not realistic transcripts;
+  commit SHAs are seeded-`random` hex, never real objects.
+- Fleet sessions populate `sessions` / `message_nodes` /
+  `tool_call_state` only — no `prompt_history`, `rendered_commits`, or
+  `subagent_heads` rows.
+- The emitted `state.vscdb` covers only the
+  `windsurfSpace.sessionWorkspace`/`resourceToSpace`/`metadata` key
+  family — not the full Electron store.
+- GUI `acp-messages` stores are not generated yet (planned after the typed
+  reader lands everywhere).
+- `fleet` volume beyond a few thousand sessions is untested.
+
+Requires Python ≥ 3.10, stdlib only beyond `devin-internals-spec`.
+Read-only w.r.t. real Devin stores: it only writes its own output dir.
+
+
+</details>

devin_dream-0.1.0/pyproject.toml

@@ -0,0 +1,27 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "devin-dream"
+version = "0.1.0"
+description = "Synthetic Devin sessions with known verdicts — regression and adversarial test data for the devin-* catalog."
+readme = "README.md"
+license = { text = "MIT" }
+requires-python = ">=3.10"
+authors = [{ name = "Icaro0310" }]
+dependencies = [
+  "devin-internals-spec>=0.3.0,<0.4.0",
+]
+
+[project.optional-dependencies]
+dev = ["pytest>=8"]
+
+[project.scripts]
+devin-dream = "devin_dream.cli:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

devin_dream-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

devin_dream-0.1.0/src/devin_dream/__init__.py

@@ -0,0 +1,3 @@
+"""devin-dream — synthetic Devin sessions with known verdicts."""
+
+__version__ = "0.1.0"

devin_dream-0.1.0/src/devin_dream/cli.py

@@ -0,0 +1,139 @@
+"""devin-dream CLI: unit | inject | fleet."""
+
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+from devin_dream.defects import ADVERSARIAL, DEFECTS, UNIT_IDS
+from devin_dream.generate import (
+    build_fleet,
+    write_expected,
+    write_fleet_manifest,
+    write_sessions_db,
+    write_state_vscdb,
+)
+
+
+def _cmd_unit(args: argparse.Namespace) -> int:
+    ids = list(UNIT_IDS) if args.defect == ["all"] else args.defect
+    unknown = [d for d in ids if d not in DEFECTS]
+    if unknown:
+        print(f"error: unknown defect(s): {', '.join(unknown)}",
+              file=sys.stderr)
+        return 2
+    out = Path(args.out)
+    for did in ids:
+        spec = DEFECTS[did]()
+        ddir = out / did.lower()
+        write_sessions_db(ddir / "sessions.db", [spec],
+                          schema_version=args.schema_version, seed=args.seed)
+        ep = write_expected(ddir, spec)
+        print(f"{did}: {ddir / 'sessions.db'} (+ {ep.name})")
+    return 0
+
+
+def _cmd_inject(args: argparse.Namespace) -> int:
+    """Adversarial sessions (D07/D08) + the expected block/pass scorecard."""
+    out = Path(args.out)
+    specs = [DEFECTS[d]() for d in ADVERSARIAL for _ in range(args.n)]
+    # unique session ids per copy
+    seen: dict[str, int] = {}
+    final = []
+    for s in specs:
+        seen[s.session_id] = seen.get(s.session_id, 0) + 1
+        suffix = seen[s.session_id]
+        import dataclasses
+        final.append(dataclasses.replace(
+            s, session_id=f"{s.session_id}-{suffix:03d}"))
+    write_sessions_db(out / "sessions.db", final, seed=args.seed)
+    scorecard = {
+        "mode": "inject",
+        "sessions": len(final),
+        "expected_blocks": {d: args.n for d in ADVERSARIAL},
+        "note": "each session must be denied/quarantined by the target "
+                "tool; a pass is a hole in the policy",
+    }
+    (out / "expected.json").write_text(
+        json.dumps(scorecard, indent=2) + "\n", encoding="utf-8")
+    for s in final:
+        write_expected(out / s.session_id, s)
+    print(f"inject: {len(final)} adversarial session(s) -> "
+          f"{out / 'sessions.db'}")
+    return 0
+
+
+def _cmd_fleet(args: argparse.Namespace) -> int:
+    if args.sessions < 1:
+        print("error: --sessions must be >= 1", file=sys.stderr)
+        return 2
+    out = Path(args.out)
+    plan = build_fleet(args.sessions, seed=args.seed)
+    write_sessions_db(out / "sessions.db", plan.specs, seed=args.seed)
+    counts: dict[str, int] = {}
+    for s in plan.specs:
+        arch = next((l.split(":", 1)[1] for l in s.labels
+                     if l.startswith("archetype:")), "unknown")
+        counts[arch] = counts.get(arch, 0) + 1
+    mix = ", ".join(f"{a}={c}" for a, c in sorted(counts.items()))
+    print(f"fleet: {len(plan.specs)} sessions ({mix}) -> "
+          f"{out / 'sessions.db'}")
+    if args.vscdb:
+        vdb = write_state_vscdb(args.vscdb, plan, seed=args.seed)
+        print(f"fleet: {len(plan.gui)} GUI binding(s) -> {vdb}")
+    if args.manifest:
+        mp = write_fleet_manifest(out, plan, seed=args.seed)
+        print(f"fleet: manifest -> {mp}")
+    return 0
+
+
+def build_parser() -> argparse.ArgumentParser:
+    p = argparse.ArgumentParser(
+        prog="devin-dream",
+        description="Synthetic Devin sessions with known verdicts — "
+        "regression and adversarial test data for the catalog.")
+    sub = p.add_subparsers(dest="command", required=True)
+
+    u = sub.add_parser("unit", help="one sessions.db + expected.json per defect")
+    u.add_argument("--out", required=True)
+    u.add_argument("--defect", nargs="+", default=["all"],
+                   help="defect ids or 'all' (unit covers D01-D06 + D09)")
+    u.add_argument("--schema-version", type=int, default=None)
+    u.add_argument("--seed", type=int, default=0xDEE4)
+    u.set_defaults(func=_cmd_unit)
+
+    i = sub.add_parser("inject",
+                       help="adversarial sessions + expected scorecard")
+    i.add_argument("--out", required=True)
+    i.add_argument("--n", type=int, default=1,
+                   help="copies per adversarial defect (D07, D08)")
+    i.add_argument("--seed", type=int, default=0xDEE4)
+    i.set_defaults(func=_cmd_inject)
+
+    f = sub.add_parser("fleet",
+                       help="seeded population of archetype sessions")
+    f.add_argument("--out", required=True)
+    f.add_argument("--sessions", "--n", dest="sessions", type=int,
+                   default=1000,
+                   help="population size (--n kept as an alias)")
+    f.add_argument("--seed", type=int, default=0)
+    f.add_argument("--vscdb", default=None, metavar="PATH",
+                   help="also emit a synthetic state.vscdb at PATH with "
+                        "windsurfSpace.sessionWorkspace bindings for a "
+                        "fraction of sessions")
+    f.add_argument("--manifest", action="store_true",
+                   help="write fleet.json with per-session archetype and "
+                        "expected properties")
+    f.set_defaults(func=_cmd_fleet)
+    return p
+
+
+def main(argv: list[str] | None = None) -> int:
+    args = build_parser().parse_args(argv)
+    return args.func(args)
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())