The brambo session: everything `brambo run` does except argv, JSON and exit codes.

Executor detection, projection orchestration, and the diagnosis `brambo doctor` prints.

The `brambo` command-line surface: argv, JSON output and exit codes, and nothing more.

Provider-agnostic delegation lifecycle primitives for brambo.

A WorkspaceProvider over real git worktrees: every workspace is a detached checkout brambo can prove it made.

Transport-injected remote sandbox provider adapter for brambo.

Conservative local operating-system sandbox provider for brambo.

The ports a third party implements to extend brambo, and the published suites that prove an implementation conforms.

Provider-agnostic task orchestration primitives for brambo.

Content-bound provenance and receipt primitives for brambo.

Projects Registry entries into executors' native configuration, and owns the ledger that can take them back.

Every shipped ExecutorAdapter that drives an out-of-process coding CLI.

The local-directory WorkspaceProvider: a workspace is a subdirectory of rootDir.

The plugin kernel: manifests, service graph, typed events and ordered teardown, with zero runtime dependencies.

The portable lockfile protocol: machine-scoped write serialization for any package, with neutral codes owned by no domain.

The embedded-SQLite MemoryProvider, on node:sqlite's DatabaseSync.

The filesystem MemoryProvider: one directory, one format stamp, one append-only log.

Provider-neutral sandbox selection, capability negotiation, and session lifecycle management.

The canonical environment Registry: scoped storage, portable bundles, and ingest from what is already installed.