--- @smthrs/cli/CloudSandbox.d.ts baseline

+++ candidate

@@ -19,4 +19,12 @@

     sshPrefix(reference: string, signal: AbortSignal): Promise<ReadonlyArray<string>>;
 }
+/**
+ * The ordinary workspace transport: the CLI's authenticated control client and
+ * pinned SSH prefix, resolved from `environment`.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const workspaceApi: (environment: Readonly<Record<string, string | undefined>>) => WorkspaceApi;
 /**
  * One repository and machine shape, shared by independently named sessions.

--- @smthrs/cli/NodeControl.d.ts baseline

+++ candidate

@@ -4,5 +4,5 @@

  * @since 0.1.0
  */
-import { NodeServices } from "@effect/platform-node";
+import { NodeServices } from "../vendor/platform-node.js";
 import { Control, ControlRpcs, type ControlRuntime } from "@smthrs/control";
 import type * as Journal from "@smthrs/journal/Journal";
@@ -72,5 +72,5 @@

 export declare const config: Effect.Effect<Application.Config, CliError.UsageError>;
 export type { EngineDurable, ModuleRegistration } from "./internal/NativeControl.ts";
-export { checkpointStore, layerSeatCatalog, layerSeatEvaluator, layerSeatResolver, seatCandidates, seatResolver, testFlows, testRunner } from "./internal/NativeEquipment.ts";
+export { accountPoolDefaultModel, checkpointStore, layerSeatCatalog, layerSeatEvaluator, layerSeatResolver, seatCandidates, seatResolver, testFlows, testRunner } from "./internal/NativeEquipment.ts";
 export { environmentDispatcher, layerEgressHttpClient, layerRebuildableRequestExecutor, rebuildableTransport } from "./internal/NodeControlHost.ts";
 /**
@@ -242,5 +242,5 @@

  * @since 0.1.0
  */
-export declare const engineDurable: (root: string, registry?: Layer.Layer<Registry.Registry> | undefined, authority?: Pick<Application.Config, "approvalAuthority" | "credential" | "principal" | "stateRoot">) => EngineDurable;
+export declare const engineDurable: (root: string, registry?: Layer.Layer<Registry.Registry> | undefined, authority?: Pick<Application.Config, "approvalAuthority" | "credential" | "databases" | "principal" | "stateRoot">) => EngineDurable;
 /**
  * Builds the executor over one captured control-store graph. Materializing

--- @smthrs/cli/cli/Argv.d.ts baseline

+++ candidate

@@ -36,4 +36,11 @@

     readonly first: number;
 }
+/** Parser output adds transport metadata without narrowing the existing Globals input contract. */
+interface ParsedGlobals extends Globals {
+    /** Equivalent options with opaque values protected from Incur built-in extraction. */
+    readonly incurArgv: ReadonlyArray<string>;
+    /** Actual stdio transport selection, excluding opaque option values and literal tails. */
+    readonly mcp: boolean;
+}
 /**
  * Parses the shared globals out of raw argv.
@@ -48,5 +55,5 @@

  * @since 1.0.0
  */
-export declare const parse: (args: Globals | ReadonlyArray<string>) => Globals;
+export declare const parse: (args: Globals | ReadonlyArray<string>, cli?: object) => ParsedGlobals;
 /**
  * The words one command line offers a verb lookup, in order.
@@ -62,2 +69,3 @@

  */
 export declare const words: (args: Globals | ReadonlyArray<string>) => ReadonlyArray<string>;
+export {};

--- @smthrs/cli/cli/Entry.d.ts baseline

+++ candidate

@@ -14,4 +14,5 @@

 /**
  * Runs one invocation; help and validation do not construct a durable runtime.
+ * Relative `PATH` entries are fixed to the launch directory first.
  * @category constructors
  * @since 1.0.0

--- @smthrs/cli/cli/HistoryCommands.d.ts baseline

+++ candidate

@@ -10,5 +10,5 @@

  * @category constructors
  */
-export declare const appendHistoryCommands: (cli: Cli.Cli, runtime?: Bridge.Runtime) => Cli.Cli<{ inspect: { args: { run: string; }; options: { at?: number | undefined; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; quiet: boolean; remote?: string | undefined; root?: string | undefined; }; }; } & { replay: { args: { run: string; }; options: { at?: number | undefined; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; quiet: boolean; remote?: string | undefined; root?: string | undefined; }; }; } & { fork: { args: { run: string; }; options: { at: number; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; quiet: boolean; remote?: string | undefined; root?: string | undefined; }; }; } & { rewind: { args: { run: string; }; options: { at: number; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; preview: boolean; quiet: boolean; remote?: string | undefined; root?: string | undefined; wholeRepo: boolean; yes: boolean; }; }; }, undefined, undefined, undefined, string>;
+export declare const appendHistoryCommands: (cli: Cli.Cli, runtime?: Bridge.Runtime) => Cli.Cli<{ inspect: { args: { run: string; }; options: { at?: number | undefined; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; quiet: boolean; remote?: string | undefined; root?: string | undefined; }; }; } & { replay: { args: { run: string; }; options: { at?: number | undefined; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; quiet: boolean; remote?: string | undefined; root?: string | undefined; }; }; } & { verify: { args: { run?: string | undefined; }; options: { against?: string | undefined; mcpConfig?: string | undefined; quiet: boolean; remote?: string | undefined; root?: string | undefined; }; }; } & { fork: { args: { run: string; }; options: { at: number; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; quiet: boolean; remote?: string | undefined; result?: string | undefined; root?: string | undefined; step?: string | undefined; }; }; } & { rewind: { args: { run: string; }; options: { at: number; limit: number; lineage?: string | undefined; mcpConfig?: string | undefined; preview: boolean; quiet: boolean; remote?: string | undefined; root?: string | undefined; wholeRepo: boolean; yes: boolean; }; }; }, undefined, undefined, undefined, string>;
 /**
  * Reconciles local history before a normal runs list/show query.

--- @smthrs/cli/history/History.d.ts baseline

+++ candidate

@@ -4,4 +4,7 @@

  */
 import type { Entry } from "@smthrs/journal/JournalEvent";
+import type { StepOverride } from "@smthrs/time-travel/TimeTravelStore";
+import { type Schema } from "effect";
+import type * as NativeControl from "../internal/NativeControl.ts";
 /**
  * Local history address and resource limits.
@@ -17,4 +20,14 @@

     /** Rewind only: restore the frame's jj operation instead of only its tree. */
     readonly wholeRepo?: boolean | undefined;
+    /** Fork only: the step result the child replays in place of the parent's. */
+    readonly override?: StepOverride | undefined;
+    /**
+     * Fork only: the root input the child runs with in place of the parent's.
+     * It is planned and approved as a plan of its own, which the child is bound
+     * to; every recorded step whose key it leaves unchanged still replays.
+     */
+    readonly input?: Schema.Json | undefined;
+    /** The flow modules a host would load, for planning an edited input; tests supply them. */
+    readonly modules?: NativeControl.ModuleRegistration | undefined;
 }
 /**

--- @smthrs/cli/internal/BunControl.d.ts baseline

+++ candidate

@@ -13,3 +13,3 @@

  * @private
  */
-export declare const native: { databasePath: (root: string) => string; engineDurable: (root: string, registry?: Layer.Layer<import("@smthrs/registry/Registry").Registry> | undefined, authority?: Pick<import("../Application.ts").Config, "approvalAuthority" | "credential" | "principal" | "stateRoot">) => NativeControl.EngineDurable; evaluatorFor: (environment: Readonly<Record<string, string | undefined>>, supplied?: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>, startsRuns?: boolean) => Layer.Layer<import("@smthrs/model/Evaluator").Evaluator, never, never>; executionDatabasePath: (root: string) => string; gatewayApprovalAuthority: import("@smthrs/control/ApprovalAuthority").Service; layerControl: (config: import("../Application.ts").Config, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>, suppliedEngine?: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerControlFromEngine: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision" | "plansFlows">, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerExecutor: (registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions) => ReturnType<(registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions, evaluator: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>) => Layer.Layer<import("@smthrs/control/ControlExecutor").ControlExecutor, never, import("@smthrs/control/ControlRuntime").ControlRuntime | import("@smthrs/journal/Journal").Journal | import("@smthrs/notifications/NotificationQueue").NotificationQueue | import("@smthrs/registry/Registry").Registry>>; layerGateway: (health: import("@smthrs/gateway/GatewayServer").Health, options: import("@smthrs/gateway/node/NodeGateway").ServerOptions | undefined, root: string, engine?: NativeControl.EngineDurable, journal?: Layer.Layer<import("@smthrs/journal/Journal").Journal>) => Layer.Layer<import("effect/unstable/http/HttpServer").HttpServer, import("@smthrs/gateway/GatewayError").GatewayError, import("@smthrs/control/Control").Control>; layerGatewayHost: (engine: NativeControl.EngineDurable, control: Layer.Layer<import("@smthrs/control/Control").Control>) => Layer.Layer<import("../Serve.ts").GatewayHost, never, never>; layerGrantStore: (root: string) => Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>; layerGuardedPlatform: (root: string, grants?: Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>) => Layer.Layer<import("@effect/platform-node/NodeServices").NodeServices, never, never>; layerHost: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision">, modules?: NativeControl.ModuleRegistration, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<import("../Serve.ts").GatewayHost | import("@effect/platform-node/NodeServices").NodeServices | import("@smthrs/control/Control").Control | import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerHostPlatform: Layer.Layer<import("@effect/platform-node/NodeServices").NodeServices, never, never>; layerMemory: (root: string, engine?: NativeControl.EngineDurable) => Layer.Layer<import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerObserve: (config: import("../Application.ts").Config, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerObserver: (root: string, options?: import("@smthrs/agent/WorkspaceObservation").Options) => Layer.Layer<import("@smthrs/agent/WorkspaceObservation").Observer>; layerRegistry: (root: string) => Layer.Layer<import("@smthrs/registry/Registry").Registry>; materializeEngine: (engine: NativeControl.EngineDurable) => import("effect/Effect").Effect<NativeControl.EngineDurable, never, import("effect/Scope").Scope>; projectSources: (root: string) => ReadonlyArray<import("@smthrs/registry/Descriptor").Source>; };
+export declare const native: { databasePath: (root: string) => string; engineDurable: (root: string, registry?: Layer.Layer<import("@smthrs/registry/Registry").Registry> | undefined, authority?: Pick<import("../Application.ts").Config, "approvalAuthority" | "credential" | "databases" | "principal" | "stateRoot">) => NativeControl.EngineDurable; evaluatorFor: (environment: Readonly<Record<string, string | undefined>>, supplied?: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>, startsRuns?: boolean) => Layer.Layer<import("@smthrs/model/Evaluator").Evaluator, never, never>; executionDatabasePath: (root: string) => string; gatewayApprovalAuthority: import("@smthrs/control/ApprovalAuthority").Service; layerControl: (config: import("../Application.ts").Config, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>, suppliedEngine?: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerControlFromEngine: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision" | "plansFlows">, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerExecutor: (registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions) => ReturnType<(registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions, evaluator: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>) => Layer.Layer<import("@smthrs/control/ControlExecutor").ControlExecutor, never, import("@smthrs/control/ControlRuntime").ControlRuntime | import("@smthrs/journal/Journal").Journal | import("@smthrs/notifications/NotificationQueue").NotificationQueue | import("@smthrs/registry/Registry").Registry>>; layerGateway: (health: import("@smthrs/gateway/GatewayServer").Health, options: import("@smthrs/gateway/node/NodeGateway").ServerOptions | undefined, root: string, engine?: NativeControl.EngineDurable, journal?: Layer.Layer<import("@smthrs/journal/Journal").Journal>) => Layer.Layer<import("effect/unstable/http/HttpServer").HttpServer, import("@smthrs/gateway/GatewayError").GatewayError, import("@smthrs/control/Control").Control>; layerGatewayHost: (engine: NativeControl.EngineDurable, control: Layer.Layer<import("@smthrs/control/Control").Control>) => Layer.Layer<import("../Serve.ts").GatewayHost, never, never>; layerGrantStore: (root: string) => Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>; layerGuardedPlatform: (root: string, grants?: Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>) => Layer.Layer<import("../../vendor/node/NodeServices.js").NodeServices, never, never>; layerHost: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision">, modules?: NativeControl.ModuleRegistration, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<import("../../vendor/node/NodeServices.js").NodeServices | import("../Serve.ts").GatewayHost | import("@smthrs/control/Control").Control | import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerHostPlatform: Layer.Layer<import("../../vendor/node/NodeServices.js").NodeServices, never, never>; layerMemory: (root: string, engine?: NativeControl.EngineDurable) => Layer.Layer<import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerObserve: (config: import("../Application.ts").Config, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerObserver: (root: string, options?: import("@smthrs/agent/WorkspaceObservation").Options) => Layer.Layer<import("@smthrs/agent/WorkspaceObservation").Observer>; layerRegistry: (root: string) => Layer.Layer<import("@smthrs/registry/Registry").Registry>; materializeEngine: (engine: NativeControl.EngineDurable) => import("effect/Effect").Effect<NativeControl.EngineDurable, never, import("effect/Scope").Scope>; projectSources: (root: string) => ReadonlyArray<import("@smthrs/registry/Descriptor").Source>; };

--- @smthrs/cli/internal/CodexCode.d.ts baseline

+++ candidate

@@ -18,4 +18,10 @@

     readonly timeoutMs?: number | undefined;
     readonly maxBytes?: number | undefined;
+    /**
+     * Whether the vendor loads the Smithers MCP server, the seat's only tools.
+     * Defaults to true; false makes a tool-free seat for untrusted input, such
+     * as a security review of source.
+     */
+    readonly mcp?: boolean | undefined;
 }
 /**

--- @smthrs/cli/internal/DatabaseLocation.d.ts baseline

+++ candidate

@@ -2,4 +2,9 @@

  * @since 1.0.0
  */
+/** Whether the native database adapter opens `filename` as a PostgreSQL schema.
+ * @category predicates
+ * @since 1.0.0
+ */
+export declare const postgres: (filename: string) => boolean;
 /** Configuration follows the native database adapter's explicit-URL precedence.
  * @category predicates

--- @smthrs/cli/internal/Failure.d.ts baseline

+++ candidate

@@ -35,4 +35,11 @@

  */
 export declare const terminalSafeLines: (text: string) => string;
+/**
+ * Escape terminal controls JSON permits literally, preserving decoded data
+ * and structural whitespace in JSON and JSONL documents.
+ * @category formatting
+ * @since 1.0.0
+ */
+export declare const terminalSafeJson: (text: string) => string;
 /**
  * A structured value with every string made inert as `terminalSafeLines`
@@ -96,4 +103,10 @@

 export declare const isTagged: (error: unknown) => error is Error & { readonly _tag: string; };
 /**
+ * A usable own data tag, without invoking accessors on a thrown value.
+ * @category getters
+ * @since 1.0.0
+ */
+export declare const tagOf: (error: unknown) => string | undefined;
+/**
  * Whether a thrown value carries a sentence someone wrote for an operator: a
  * tagged failure, or a plain `Error` this CLI threw on purpose. A runtime bug
@@ -135,4 +148,12 @@

 export declare const operatorLine: (error: unknown, verbose: boolean) => string;
 /**
+ * The stderr text for a failure that ends the process: its operator sentence,
+ * and for an undesigned failure under `verbose`, the redacted raw detail.
+ *
+ * @category getters
+ * @since 1.0.0
+ */
+export declare const operatorReport: (error: unknown, verbose: boolean) => string;
+/**
  * The raw text behind a failure, for `--verbose` only: its stack and cause
  * chain, redacted and made inert for a terminal. Never throws.

--- @smthrs/cli/internal/NativeControl.d.ts baseline

+++ candidate

@@ -2,5 +2,5 @@

  * @since 1.0.0
  */
-import type * as NodeServices from "@effect/platform-node/NodeServices";
+import type * as NodeServices from "../../vendor/node/NodeServices.js";
 import * as Agent from "@smthrs/agent/Agent";
 import * as AgentAction from "@smthrs/agent/AgentAction";
@@ -12,4 +12,5 @@

 import { ApprovalAuthority, Control, ControlExecutor, ControlRuntime } from "@smthrs/control";
 import * as DurableWriter from "@smthrs/database/DurableWriter";
+import type * as ReplayOnly from "@smthrs/engine-store/ReplayOnly";
 import type * as NodeFlowsRuntime from "@smthrs/flows/NodeRuntime";
 import type * as GatewayServer from "@smthrs/gateway/GatewayServer";
@@ -137,4 +138,8 @@

     /** Where `engine.db` lives, when that is not the project root. */
     readonly stateRoot?: string | undefined;
+    /** The database files, when they are not under `stateRoot`; see `Application.Config.databases`. */
+    readonly databases?: Application.Databases | undefined;
+    /** Replays recorded steps and executes none; see `Application.Config.replayOnly`. */
+    readonly replayOnly?: Layer.Layer<ReplayOnly.ReplayOnly> | undefined;
     /**
      * Whether this executor may drive a run. `false` builds the observing
@@ -159,4 +164,6 @@

      */
     readonly rebuildAuthoredFlows?: boolean | undefined;
+    /** The machines a flow's `sandbox:` may select; see `Application.Config.sandboxProviders`. */
+    readonly sandboxProviders?: Application.SandboxProviders | undefined;
 }
 /** Existing service implementations selected by the executable boundary.
@@ -195,3 +202,3 @@

  * @private
  */
-export declare const make: (native: Platform, seats?: (environment: Readonly<Record<string, string | undefined>>) => Layer.Layer<SeatResolver.SeatResolver, never, RequestExecutor.RequestExecutor>, decorateNotifications?: LocalControl.NotificationDecorator) => { databasePath: (root: string) => string; engineDurable: (root: string, registry?: Layer.Layer<Registry.Registry> | undefined, authority?: Pick<Application.Config, "approvalAuthority" | "credential" | "principal" | "stateRoot">) => EngineDurable; evaluatorFor: (environment: Readonly<Record<string, string | undefined>>, supplied?: Layer.Layer<Evaluator.Evaluator>, startsRuns?: boolean) => Layer.Layer<Evaluator.Evaluator, never, never>; executionDatabasePath: (root: string) => string; gatewayApprovalAuthority: ApprovalAuthority.Service; layerControl: (config: Application.Config, suppliedRegistry?: Layer.Layer<Registry.Registry>, suppliedEngine?: EngineDurable, modules?: ModuleRegistration) => Layer.Layer<Control.Control, never, never>; layerControlFromEngine: (config: Application.Config & Pick<ExecutorOptions, "approvalChannel" | "expectedSourceRevision" | "plansFlows">, registry: Layer.Layer<Registry.Registry>, engine: EngineDurable, modules?: ModuleRegistration) => Layer.Layer<Control.Control, never, never>; layerExecutor: (registry: Layer.Layer<Registry.Registry>, engine: EngineDurable, root: string, options: ExecutorOptions) => ReturnType<(registry: Layer.Layer<Registry.Registry>, engine: EngineDurable, root: string, options: ExecutorOptions, evaluator: Layer.Layer<Evaluator.Evaluator>) => Layer.Layer<ControlExecutor.ControlExecutor, never, ControlRuntime.ControlRuntime | Journal.Journal | NotificationQueue.NotificationQueue | Registry.Registry>>; layerGateway: (health: GatewayServer.Health, options: NodeGateway.ServerOptions | undefined, root: string, engine?: EngineDurable, journal?: Layer.Layer<Journal.Journal>) => Layer.Layer<import("effect/unstable/http/HttpServer").HttpServer, import("@smthrs/gateway/GatewayError").GatewayError, Control.Control>; layerGatewayHost: (engine: EngineDurable, control: Layer.Layer<Control.Control>) => Layer.Layer<Serve.GatewayHost, never, never>; layerGrantStore: (root: string) => Layer.Layer<GrantStore.GrantStore>; layerGuardedPlatform: (root: string, grants?: Layer.Layer<GrantStore.GrantStore>) => Layer.Layer<NodeServices.NodeServices, never, never>; layerHost: (config: Application.Config & Pick<ExecutorOptions, "approvalChannel" | "expectedSourceRevision">, modules?: ModuleRegistration, suppliedRegistry?: Layer.Layer<Registry.Registry>) => Layer.Layer<Control.Control | MemoryStore.MemoryStore | NodeServices.NodeServices | Serve.GatewayHost, never, never>; layerHostPlatform: Layer.Layer<NodeServices.NodeServices, never, never>; layerMemory: (root: string, engine?: EngineDurable) => Layer.Layer<MemoryStore.MemoryStore, never, never>; layerObserve: (config: Application.Config, registry: Layer.Layer<Registry.Registry>) => Layer.Layer<Control.Control, never, never>; layerObserver: (root: string, options?: WorkspaceObservation.Options) => Layer.Layer<WorkspaceObservation.Observer>; layerRegistry: (root: string) => Layer.Layer<Registry.Registry>; materializeEngine: (engine: EngineDurable) => Effect.Effect<EngineDurable, never, Scope.Scope>; projectSources: (root: string) => ReadonlyArray<Descriptor.Source>; };
+export declare const make: (native: Platform, seats?: (environment: Readonly<Record<string, string | undefined>>) => Layer.Layer<SeatResolver.SeatResolver, never, RequestExecutor.RequestExecutor>, decorateNotifications?: LocalControl.NotificationDecorator) => { databasePath: (root: string) => string; engineDurable: (root: string, registry?: Layer.Layer<Registry.Registry> | undefined, authority?: Pick<Application.Config, "approvalAuthority" | "credential" | "databases" | "principal" | "stateRoot">) => EngineDurable; evaluatorFor: (environment: Readonly<Record<string, string | undefined>>, supplied?: Layer.Layer<Evaluator.Evaluator>, startsRuns?: boolean) => Layer.Layer<Evaluator.Evaluator, never, never>; executionDatabasePath: (root: string) => string; gatewayApprovalAuthority: ApprovalAuthority.Service; layerControl: (config: Application.Config, suppliedRegistry?: Layer.Layer<Registry.Registry>, suppliedEngine?: EngineDurable, modules?: ModuleRegistration) => Layer.Layer<Control.Control, never, never>; layerControlFromEngine: (config: Application.Config & Pick<ExecutorOptions, "approvalChannel" | "expectedSourceRevision" | "plansFlows">, registry: Layer.Layer<Registry.Registry>, engine: EngineDurable, modules?: ModuleRegistration) => Layer.Layer<Control.Control, never, never>; layerExecutor: (registry: Layer.Layer<Registry.Registry>, engine: EngineDurable, root: string, options: ExecutorOptions) => ReturnType<(registry: Layer.Layer<Registry.Registry>, engine: EngineDurable, root: string, options: ExecutorOptions, evaluator: Layer.Layer<Evaluator.Evaluator>) => Layer.Layer<ControlExecutor.ControlExecutor, never, ControlRuntime.ControlRuntime | Journal.Journal | NotificationQueue.NotificationQueue | Registry.Registry>>; layerGateway: (health: GatewayServer.Health, options: NodeGateway.ServerOptions | undefined, root: string, engine?: EngineDurable, journal?: Layer.Layer<Journal.Journal>) => Layer.Layer<import("effect/unstable/http/HttpServer").HttpServer, import("@smthrs/gateway/GatewayError").GatewayError, Control.Control>; layerGatewayHost: (engine: EngineDurable, control: Layer.Layer<Control.Control>) => Layer.Layer<Serve.GatewayHost, never, never>; layerGrantStore: (root: string) => Layer.Layer<GrantStore.GrantStore>; layerGuardedPlatform: (root: string, grants?: Layer.Layer<GrantStore.GrantStore>) => Layer.Layer<NodeServices.NodeServices, never, never>; layerHost: (config: Application.Config & Pick<ExecutorOptions, "approvalChannel" | "expectedSourceRevision">, modules?: ModuleRegistration, suppliedRegistry?: Layer.Layer<Registry.Registry>) => Layer.Layer<Control.Control | MemoryStore.MemoryStore | NodeServices.NodeServices | Serve.GatewayHost, never, never>; layerHostPlatform: Layer.Layer<NodeServices.NodeServices, never, never>; layerMemory: (root: string, engine?: EngineDurable) => Layer.Layer<MemoryStore.MemoryStore, never, never>; layerObserve: (config: Application.Config, registry: Layer.Layer<Registry.Registry>) => Layer.Layer<Control.Control, never, never>; layerObserver: (root: string, options?: WorkspaceObservation.Options) => Layer.Layer<WorkspaceObservation.Observer>; layerRegistry: (root: string) => Layer.Layer<Registry.Registry>; materializeEngine: (engine: EngineDurable) => Effect.Effect<EngineDurable, never, Scope.Scope>; projectSources: (root: string) => ReadonlyArray<Descriptor.Source>; };

--- @smthrs/cli/internal/NativeEquipment.d.ts baseline

+++ candidate

@@ -14,4 +14,5 @@

 import { Context, Effect, FileSystem, Layer, Path } from "effect";
 import type * as HttpClient from "effect/unstable/http/HttpClient";
+import type * as Application from "../Application.ts";
 import * as Providers from "../Providers.ts";
 /**
@@ -134,4 +135,16 @@

 export declare const sealedContainer: (environment: Readonly<Record<string, string | undefined>>) => string | undefined;
 /**
+ * The sandbox providers the CLI host offers a flow's `sandbox:` selection.
+ *
+ * `SMITHERS_SANDBOX_IMAGE` names the image `provider: container` runs in,
+ * through the `docker` CLI, with the selection's network and limits. No other
+ * provider is configured from the environment, and without the image a
+ * container-sandboxed flow is refused rather than run on this host.
+ *
+ * @since 1.0.0
+ * @private
+ */
+export declare const sandboxProvidersFrom: (environment: Readonly<Record<string, string | undefined>>) => Application.SandboxProviders;
+/**
  * What an in-run `ask` does on this host.
  *

--- @smthrs/cli/internal/NodeControlHost.d.ts baseline

+++ candidate

@@ -2,6 +2,6 @@

  * @since 1.0.0
  */
-import { NodeServices } from "@effect/platform-node";
-import type * as Undici from "@effect/platform-node/Undici";
+import { NodeServices } from "../../vendor/platform-node.js";
+import type * as Undici from "../../vendor/node/Undici.js";
 import * as NodeGateway from "@smthrs/gateway/node/NodeGateway";
 import * as RequestExecutor from "@smthrs/model/RequestExecutor";
@@ -85,3 +85,3 @@

  * @private
  */
-export declare const native: { databasePath: (root: string) => string; engineDurable: (root: string, registry?: Layer.Layer<import("@smthrs/registry/Registry").Registry> | undefined, authority?: Pick<import("../Application.ts").Config, "approvalAuthority" | "credential" | "principal" | "stateRoot">) => NativeControl.EngineDurable; evaluatorFor: (environment: Readonly<Record<string, string | undefined>>, supplied?: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>, startsRuns?: boolean) => Layer.Layer<import("@smthrs/model/Evaluator").Evaluator, never, never>; executionDatabasePath: (root: string) => string; gatewayApprovalAuthority: import("@smthrs/control/ApprovalAuthority").Service; layerControl: (config: import("../Application.ts").Config, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>, suppliedEngine?: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerControlFromEngine: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision" | "plansFlows">, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerExecutor: (registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions) => ReturnType<(registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions, evaluator: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>) => Layer.Layer<import("@smthrs/control/ControlExecutor").ControlExecutor, never, import("@smthrs/control/ControlRuntime").ControlRuntime | import("@smthrs/journal/Journal").Journal | import("@smthrs/notifications/NotificationQueue").NotificationQueue | import("@smthrs/registry/Registry").Registry>>; layerGateway: (health: import("@smthrs/gateway/GatewayServer").Health, options: NodeGateway.ServerOptions | undefined, root: string, engine?: NativeControl.EngineDurable, journal?: Layer.Layer<import("@smthrs/journal/Journal").Journal>) => Layer.Layer<import("effect/unstable/http/HttpServer").HttpServer, import("@smthrs/gateway/GatewayError").GatewayError, import("@smthrs/control/Control").Control>; layerGatewayHost: (engine: NativeControl.EngineDurable, control: Layer.Layer<import("@smthrs/control/Control").Control>) => Layer.Layer<import("../Serve.ts").GatewayHost, never, never>; layerGrantStore: (root: string) => Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>; layerGuardedPlatform: (root: string, grants?: Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>) => Layer.Layer<NodeServices.NodeServices, never, never>; layerHost: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision">, modules?: NativeControl.ModuleRegistration, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<NodeServices.NodeServices | import("../Serve.ts").GatewayHost | import("@smthrs/control/Control").Control | import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerHostPlatform: Layer.Layer<NodeServices.NodeServices, never, never>; layerMemory: (root: string, engine?: NativeControl.EngineDurable) => Layer.Layer<import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerObserve: (config: import("../Application.ts").Config, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerObserver: (root: string, options?: import("@smthrs/agent/WorkspaceObservation").Options) => Layer.Layer<import("@smthrs/agent/WorkspaceObservation").Observer>; layerRegistry: (root: string) => Layer.Layer<import("@smthrs/registry/Registry").Registry>; materializeEngine: (engine: NativeControl.EngineDurable) => Effect.Effect<NativeControl.EngineDurable, never, Scope.Scope>; projectSources: (root: string) => ReadonlyArray<import("@smthrs/registry/Descriptor").Source>; };
+export declare const native: { databasePath: (root: string) => string; engineDurable: (root: string, registry?: Layer.Layer<import("@smthrs/registry/Registry").Registry> | undefined, authority?: Pick<import("../Application.ts").Config, "approvalAuthority" | "credential" | "databases" | "principal" | "stateRoot">) => NativeControl.EngineDurable; evaluatorFor: (environment: Readonly<Record<string, string | undefined>>, supplied?: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>, startsRuns?: boolean) => Layer.Layer<import("@smthrs/model/Evaluator").Evaluator, never, never>; executionDatabasePath: (root: string) => string; gatewayApprovalAuthority: import("@smthrs/control/ApprovalAuthority").Service; layerControl: (config: import("../Application.ts").Config, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>, suppliedEngine?: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerControlFromEngine: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision" | "plansFlows">, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, modules?: NativeControl.ModuleRegistration) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerExecutor: (registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions) => ReturnType<(registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>, engine: NativeControl.EngineDurable, root: string, options: NativeControl.ExecutorOptions, evaluator: Layer.Layer<import("@smthrs/model/Evaluator").Evaluator>) => Layer.Layer<import("@smthrs/control/ControlExecutor").ControlExecutor, never, import("@smthrs/control/ControlRuntime").ControlRuntime | import("@smthrs/journal/Journal").Journal | import("@smthrs/notifications/NotificationQueue").NotificationQueue | import("@smthrs/registry/Registry").Registry>>; layerGateway: (health: import("@smthrs/gateway/GatewayServer").Health, options: NodeGateway.ServerOptions | undefined, root: string, engine?: NativeControl.EngineDurable, journal?: Layer.Layer<import("@smthrs/journal/Journal").Journal>) => Layer.Layer<import("effect/unstable/http/HttpServer").HttpServer, import("@smthrs/gateway/GatewayError").GatewayError, import("@smthrs/control/Control").Control>; layerGatewayHost: (engine: NativeControl.EngineDurable, control: Layer.Layer<import("@smthrs/control/Control").Control>) => Layer.Layer<import("../Serve.ts").GatewayHost, never, never>; layerGrantStore: (root: string) => Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>; layerGuardedPlatform: (root: string, grants?: Layer.Layer<import("@smthrs/kernel/GrantStore").GrantStore>) => Layer.Layer<NodeServices.NodeServices, never, never>; layerHost: (config: import("../Application.ts").Config & Pick<NativeControl.ExecutorOptions, "approvalChannel" | "expectedSourceRevision">, modules?: NativeControl.ModuleRegistration, suppliedRegistry?: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<NodeServices.NodeServices | import("../Serve.ts").GatewayHost | import("@smthrs/control/Control").Control | import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerHostPlatform: Layer.Layer<NodeServices.NodeServices, never, never>; layerMemory: (root: string, engine?: NativeControl.EngineDurable) => Layer.Layer<import("@smthrs/memory/MemoryStore").MemoryStore, never, never>; layerObserve: (config: import("../Application.ts").Config, registry: Layer.Layer<import("@smthrs/registry/Registry").Registry>) => Layer.Layer<import("@smthrs/control/Control").Control, never, never>; layerObserver: (root: string, options?: import("@smthrs/agent/WorkspaceObservation").Options) => Layer.Layer<import("@smthrs/agent/WorkspaceObservation").Observer>; layerRegistry: (root: string) => Layer.Layer<import("@smthrs/registry/Registry").Registry>; materializeEngine: (engine: NativeControl.EngineDurable) => Effect.Effect<NativeControl.EngineDurable, never, Scope.Scope>; projectSources: (root: string) => ReadonlyArray<import("@smthrs/registry/Descriptor").Source>; };

--- @smthrs/cli/internal/backend/Commands.d.ts baseline

+++ candidate

@@ -11,4 +11,9 @@

 export declare const handlers: Record<string, Handler>;
 /** @private
+ * Help summaries for the command groups the backend commands create.
+ * @since 1.0.0
+ */
+export declare const groups: Record<string, string>;
+/** @private
  * @since 1.0.0
  */
