dsh-completion-guard 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -7,10 +7,39 @@ Each entry describes that version. Historical host ranges, defaults, plans and c
 <details>
 <summary>Version index</summary>
 
-[0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#071---2026-09-22) · [0.7.0](#070---2026-09-21) · [0.6.3](#063---2026-09-18) · [0.6.2](#062---2026-09-16) · [0.6.1](#061-2026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
+[0.11.0](#0110) · [0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#071---2026-09-22) · [0.7.0](#070---2026-09-21) · [0.6.3](#063---2026-09-18) · [0.6.2](#062---2026-09-16) · [0.6.1](#061-2026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
 
 </details>
 
+## 0.11.0
+
+- **Upgrade DSH to `0.2.1-rc.3` or later before installing Guard 0.11.0.** Package declarations, runtime admission and the default audited cohort now use rc.3 as the minimum. Existing session and Guard data protocols remain compatible; rc.2 identities are retained as historical evidence.
+
+- **Host-lock injection preserves JSON-shaped patch sequences.** The managed entry stays inside the sequence, with user entries retained. Existing block YAML, inline flow values, activation and disabled-only overrides remain supported. Invalid syntax, duplicate keys, ambiguous Guard fields and malformed managed markers refuse before profile mutation; the bundled YAML reader does not evaluate `!!js` expressions. Full composition and native loading remain separate checks.
+
+- **Known upstream risk:** for this 0.11.0 release, the maintainer explicitly accepted three Undici 8.11.2 high-risk findings through **2026-11-05 inclusive**. The signed host remains unfixed; see the [risk scope and expiry](docs/DEPENDENCY_SCAN.md). We will update after the upstream fixed chain is verified.
+
+- Default host audits check declared files and dependency routes without scanning unrelated directories. Audits backed by a qualification receipt continue to check the complete file inventory.
+
+- **Reviewed Chinese instruction forms such as 请分别执行 no longer create false bans.** Words such as 分别 stay intact in those forms; genuine bans such as 这个别推送 and 完成前别 remain in force.
+
+- **Long host-lock configuration exports now reach pipes in full.** `verify-dump` explicitly reports that it checks only Guard lock fields; complete configuration parsing and host loading remain separate checks.
+
+- **The activation CLI supports official rc.3 persistence exports.** Inventory and explicit mode adoption accept both the default-plugin and namespace-plugin module shapes, and reject invalid modules before persistence access.
+
+- **Release tgz identity is now read through one auditable tar subset.** Guard, npm and every release stage agree on which `package.json` the bytes encode: resolution, the final pre-effect check and post-publish readback all use one strict reader that validates header checksums, models ustar prefixes and npm's path normalization, and refuses links, PAX/GNU extensions, duplicate normalized names and paths outside `package/`. A crafted archive whose two manifests disagree (prefix shadowing plus `./` aliasing) is rejected before any authorization, so a publish can no longer be bound to one package name while npm installs another. Reading is bounded on every axis — compressed bytes actually read, decompressed output, member size, member count and manifest size — so a high-ratio archive can no longer stall the host before authorization completes.
+- **The registry readback owns its deadline and body budget.** Post-publish reconciliation reads the exact-version registry document under a plugin-owned total deadline combined with the caller's cancellation, streams the response under a hard byte budget, and releases the reader on every exit. A slow, hanging or oversized registry ends within the recorded budget with a stable refusal; the attempt stays in flight, no settlement is written from a refused readback, and a publish is never re-sent.
+- **Private storage protection follows the official working directory.** The Bash/Pwsh guard now reads the official `workdir` parameter (absolute, relative or symlink-aliased) instead of a field no host sends, resolves relative file targets against the caller's trusted effective directory — the last committed working-directory epoch — and fails closed when a relative target has no provable base. The same matrix is enforced through the registered production guard, not just the helper.
+- **File readback binds to the directory that governed the call.** After a committed `working-directory/change`, the independent file observer reads a relative edit target against the cwd epoch of the call's own sequence, not the immutable header directory and not the current end-of-log directory. A later directory change can no longer rebind a completed effect to a different same-named file; an unreadable timeline refuses relative targets while absolute targets stay observable.
+- **Sanitization now strips URL credentials and the documented token families.** `user:password@` is removed from URLs by structure, and the bounded GitHub token spellings (`ghp_`/`gho_`/`ghu_`/`ghs_`/`ghr_`/`github_pat_`) are redacted before normalized text, URL subjects or recovery packets are stored. The [privacy note](docs/PRIVACY.md) states the exact pattern set and its limits; capture→replay digests stay deterministic and historical digests are never silently recomputed.
+- **One interrupted anchor write no longer damages other sessions.** A torn final line in the shared session-anchors file is treated as an uncommitted append: every complete line stays authoritative for its session, the next lock holder repairs the tail before appending, and invalid middle lines or conflicting anchors still refuse for every session.
+- **A qualified first creation survives a brief writer-lock race.** When a new startup session's activation write loses a short lock race, the runtime retries the same creation while its intent is still provable — within a bounded budget — and then reports the explicit `activation_writer_unavailable` status. The retry is same-value and idempotent, and never applies to resume, late attach or a deleted binding.
+- **Plain forks are root conversations again.** `parentSession` is fork lineage, not delegation: first-step boundary and guidance, work units and confirmation semantics now apply to ordinary and resumed forks, while the host's explicit subagent markers (`origin=subagent`, positive `delegationDepth`) keep the delegated restrictions. Contradictory markers stay delegated.
+- The rc.3 core graph has registry-verified package identities and implementation digests. Its official macOS arm64 and Windows x64 Desktop distributions have separately registered vendor signatures and signed archive identities. Installation, lifecycle, real-model and UI performance acceptance remain separate gates.
+- **The release tgz identity survives file growth.** The audited tar reader now reads to a confirmed end of file in bounded chunks and binds the identity to the complete bytes actually read, so an artifact that grows after the metadata check can no longer be accepted on its old prefix digest. Private-storage protection refuses a shell or file call whose default directory cannot be proven (no trusted working directory), and URL credential stripping follows URL authority semantics for any scheme, case-insensitively, without treating a legal authority quote as a terminator. Observing an activation binding from any writer permanently retires the new-session first-creation retry, so a later deletion can never recreate the file. Registry reconciliation releases every response body — including error responses and bodies that stall — under the combined deadline. The dependency advisory gate now honors the scanner's exit protocol (a failed scan never reads as clean), matches exceptions against every installed finding version, and records real GitHub advisory identifiers. Anchor writes inject real boundary faults (partial write, failed fsync, failed tail repair) in the regression suite: committed peers stay readable and the next writer repairs an uncommitted tail.
+- **Migration inventories accept `0.10.x` as the previous package version**, so upgrading from 0.10.0 keeps the documented activation-migration path; earlier-version rules are unchanged.
+- **A fail-closed dependency advisory gate is now part of required CI.** The new `dependency-scan` job blocks on any unaccepted high/critical advisory and fails when the scan itself cannot complete; accepted exceptions live in a validated, expiring table documented in [the dependency advisory gate](docs/DEPENDENCY_SCAN.md). The development chain moved to vitest 4.1.12 (dropping the vulnerable tinypool 1.x pool) with compatible vite and source-map-js floors.
+
 ## 0.10.0
 
 - **Upgrade DSH before installing Guard 0.10.0.** The minimum host is `0.2.1-rc.2`, with no implied upper limit. Preserve old-session modes and configuration, upgrade the host, install Guard, then rebuild and read back each profile's host lock before re-enabling it. Old locks and completion certificates do not transfer to a changed graph. See [compatibility and upgrade boundaries](docs/COMPATIBILITY.md#0100-dsh-021-rc2) for the reviewed host identities and the separate market, load and admission checks.

package/CHANGELOG.zh-CN.md

@@ -7,10 +7,39 @@
 <details>
 <summary>版本索引</summary>
 
-[0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#0712026-09-22) · [0.7.0](#0702026-09-21) · [0.6.3](#0632026-09-18) · [0.6.2](#0622026-09-16) · [0.6.1](#0612026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
+[0.11.0](#0110) · [0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#0712026-09-22) · [0.7.0](#0702026-09-21) · [0.6.3](#0632026-09-18) · [0.6.2](#0622026-09-16) · [0.6.1](#0612026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
 
 </details>
 
+## 0.11.0
+
+- **安装 Guard 0.11.0 前，请先将 DSH 升级到 `0.2.1-rc.3` 或更高版本。** 包声明、运行时准入和默认审查基线统一以 rc.3 为下限。旧会话及 Guard 数据协议保持兼容；rc.2 身份记录作为历史证据保留。
+
+- **宿主锁注入不再损坏 JSON 形式的 patch 序列。** 受管条目写入序列内部，用户条目保持原样；原有 block YAML、字段内的 flow 值、activation 和仅 disabled 的覆盖继续受支持。语法错误、重复 key、歧义 Guard 字段及损坏的受管标记会在修改 profile 前拒绝；内置 YAML reader 不执行 `!!js` 表达式。完整配置组合与原生载入仍须分别验收。
+
+- **上游已知风险：**维护者为本次 0.11.0 明确临时接受三条 Undici 8.11.2 高危发现，期限**包含 2026-11-05 当日**。签名宿主仍未修复，详见[风险范围与到期规则](docs/DEPENDENCY_SCAN.md)；上游修复链通过核验后再继续更新。
+
+- 默认宿主审计核对声明文件和依赖路由，跳过无关目录扫描；使用资格回执的审计仍核对完整文件清单。
+
+- **“请分别执行”“依次分别执行”等已核对句式不再产生误读的禁止。** 这些句式中的“分别”等词保持完整；“这个别推送”“完成前别”等真正的禁止仍然有效。
+
+- **较长的宿主锁配置现在能完整输出到管道。** `verify-dump` 明确报告只核验 Guard 锁字段；完整配置解析和宿主载入仍须分别检查。
+
+- **激活 CLI 兼容官方 rc.3 持久化导出。** 清点与显式模式接纳支持 default 和 namespace 两种有效插件形态，无效模块在访问持久化数据前拒绝。
+
+- **发布 tgz 的包身份现在经由同一套可审计 tar 子集读取。** Guard、npm 与发布各阶段对"这些字节编码的是哪个 package.json"达成一致：resolution、执行前最终复核与发布后回读共用一个严格读取器——校验 header 校验和、理解 ustar prefix 与 npm 路径规范化，拒绝链接、PAX/GNU 扩展、规范化后重名及 `package/` 之外的路径。两个 manifest 互相矛盾的伪造档案（prefix 遮蔽加 `./` 别名）会在任何授权前被拒绝，发布授权不再可能绑定一个包名而 npm 实际安装另一个。读取在所有维度有预算——实际读取的压缩字节、解压输出、单成员大小、成员数量与 manifest 大小——高压缩比档案无法再在授权完成前拖垮宿主。
+- **registry 回读拥有自己的总时限与响应体预算。** 发布后的对账在插件自有总期限（与调用方取消组合）内读取精确版本的 registry 文档，按硬性字节预算流式接收响应体，并在每条退出路径释放 reader。缓慢、挂起或超量的 registry 都会在记录的预算内以稳定拒绝结束：尝试保持 in-flight，被拒绝的回读不写任何结算，也绝不重发 publish。
+- **私有存储保护跟随官方工作目录参数。** Bash/Pwsh 防护现在读取官方 `workdir` 参数（绝对、相对或符号链接别名），而不是宿主根本不发送的字段；相对文件目标按调用方可信的有效目录（最近一次提交的工作目录纪元）解析，相对目标无可证明基底时失败关闭。同一矩阵通过生产注册 guard 强制，而不只是 helper。
+- **文件回读绑定调用当时的目录。** 已提交 `working-directory/change` 之后，独立文件观察器按调用自身序号的 cwd 纪元解析相对目标，而不是不可变 header 目录，也不是当前日志末尾目录。后来的目录变化不能再把已完成 effect 重绑定到另一个同名文件；不可读时间线拒绝相对目标，绝对目标仍可观察。
+- **脱敏现在清除 URL 凭据与已记录的令牌族。** URL 中的 `user:password@` 按结构移除，有边界的 GitHub 令牌拼写（`ghp_`/`gho_`/`ghu_`/`ghs_`/`ghr_`/`github_pat_`）在归一化文本、URL 主体或恢复提示被存储前脱敏。[隐私说明](docs/PRIVACY.md)写明精确模式集及其边界；capture→replay 摘要保持确定性，历史摘要绝不静默重算。
+- **一次中断的 anchor 写入不再影响其他会话。** 共享 session-anchors 文件末尾被撕裂的一行按未提交追加处理：每条完整行对其会话保持权威，下一位持锁写者在追加前修复尾字节；中间坏行与冲突 anchor 仍对所有会话拒绝。
+- **合格首次创建可以在短暂写锁竞争后恢复。** 新 startup 会话的激活写入因短暂锁竞争失败时，运行时在其首创意图仍可证明期间按有界预算重试同一创建，随后返回明确的 `activation_writer_unavailable` 状态。重试同值幂等，绝不适用于 resume、迟挂载或已被删除的绑定。
+- **普通 fork 重新成为根会话。** `parentSession` 是分叉谱系而非委派：首次边界与指导、工作单元和确认语义现在适用于普通及恢复的 fork，宿主的显式子代理标记（`origin=subagent`、正 `delegationDepth`）继续保留委派限制。矛盾标记按委派处理。
+- rc.3 核心图已登记经 registry 核验的包身份与实现摘要；macOS arm64、Windows x64 官方 Desktop 分发行分别登记厂商签名及签名绑定的归档身份。安装、生命周期、真实模型和 UI 性能仍须分别验收。
+- **发布 tgz 身份在文件增长后仍然成立。** 可审计 tar 读取器按有界分块读到确认的 EOF，把身份绑定到实际读取的完整字节——元数据检查之后增长的制品不再可能按旧前缀摘要被接受。私有存储防护在默认目录不可证明（无可信工作目录）时拒绝 shell/文件调用；URL 凭据剥离按 URL authority 语义处理任意 scheme、大小写不敏感，合法 authority 引号不再被当作终结符。任何写者写入的激活绑定一旦被观察到，新会话首次创建重试即永久终止，删除后绝不重建文件。registry 对账在组合 deadline 下释放每一条响应体——包括错误响应与停滞的 body。依赖公告门禁现在遵守扫描器退出协议（失败的扫描绝不读作干净）、对每个安装版本逐一匹配例外，并记录真实 GitHub 公告编号。anchor 写入在回归套件中注入真实边界故障（部分写、fsync 失败、尾修复失败）：已提交同伴保持可读，下一位写者修复未提交尾。
+- **迁移库存接受 `0.10.x` 作为旧包版本**，从 0.10.0 升级沿用既有启用模式迁移路径；更早版本的规则不变。
+- **失败关闭的依赖公告门禁成为必需 CI 的一部分。** 新 `dependency-scan` job 对任何未接受的高危/严重公告阻断，扫描本身无法完成时同样失败；已接受例外保存在带校验、带到期日的表中，见[依赖公告门禁](docs/DEPENDENCY_SCAN.md)。开发链升级至 vitest 4.1.12（随之移除带漏洞的 tinypool 1.x pool），并设定兼容的 vite 与 source-map-js 下限。
+
 ## 0.10.0
 
 - **安装 Guard 0.10.0 前先升级 DSH。** 最低宿主为 `0.2.1-rc.2`，没有隐式上限。保留旧会话模式和配置，升级宿主、安装 Guard，再为各 profile 重建并回读宿主锁，核验后恢复启用。旧锁和完成证书不能转移到变化后的包图。[兼容性说明](docs/COMPATIBILITY.md#0100-dsh-021-rc2)保留已审查宿主身份，以及市场卡片、插件加载和 Guard 准入各自的边界。

package/README.md

@@ -10,7 +10,9 @@ DSH Completion Guard is a DeepSeek Harness plugin that keeps your task requireme
 
 ## Install or upgrade
 
-Requires DSH `>=0.2.1-rc.2`, Cordis `>=4.0.4`, Node.js `>=22` and pnpm `>=11`. Web, Headless and the official Desktop app have separate profiles. The reviewed host baseline is DSH `0.2.1-rc.2` / Cordis `4.0.5`; a later host must pass the same compatibility checks.
+Requires DSH `>=0.2.1-rc.3`, Cordis `>=4.0.4`, Node.js `>=22` and pnpm `>=11`. Upgrade DSH before installing Guard 0.11.0. Web, Headless and the official Desktop app have separate profiles. The reviewed host baseline is DSH `0.2.1-rc.3` with Cordis `4.0.5`; later hosts still require compatibility checks.
+
+**Known upstream risk for 0.11.0:** the official rc.3 host still contains affected dependencies. The maintainer explicitly accepted three Undici 8.11.2 high-risk findings through **2026-11-05 inclusive**; the signed host is not repaired. See the [temporary risk acceptance](docs/DEPENDENCY_SCAN.md). We will update after an upstream fixed chain is available and verified.
 
 Choose your path before replacing any package:
 
@@ -20,7 +22,7 @@ Choose your path before replacing any package:
 For Web, after the applicable preparation:
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.10.0
+dsh plugin --profile web add dsh-completion-guard@0.11.0
 ```
 
 Installation alone is not enough. The **host lock** records the actual packages and directories this profile loads; check it with `inspect`, write it with `inject`, then check the composed configuration with `verify-dump`. Back up `cordis.patch.yml` before injection. [Installation and first load](docs/GETTING_STARTED.md) provides the Web commands, Windows and Desktop routes, and the final checks before startup. [Old-session migration](docs/ACTIVATION_MIGRATION.md) provides the preparation, commands and copyable AI prompts for an upgrade.

package/README.zh-CN.md

@@ -10,7 +10,9 @@ DSH Completion Guard 是 DeepSeek Harness 插件，负责保存任务要求，
 
 ## 安装或升级
 
-需要 DSH `>=0.2.1-rc.2`、Cordis `>=4.0.4`、Node.js `>=22` 和 pnpm `>=11`。Web、Headless 和官方 Desktop 应用使用各自的配置目录。已审查的宿主基线是 DSH `0.2.1-rc.2` / Cordis `4.0.5`，更新版本仍须通过兼容性核验。
+需要 DSH `>=0.2.1-rc.3`、Cordis `>=4.0.4`、Node.js `>=22` 和 pnpm `>=11`。安装 Guard 0.11.0 前请先升级 DSH。Web、Headless 和官方 Desktop 应用使用各自的配置目录。当前已审查基线为 DSH `0.2.1-rc.3`，搭配 Cordis `4.0.5`；更新宿主仍须通过兼容性核验。
+
+**0.11.0 的上游已知风险：**官方 rc.3 宿主仍包含受影响依赖。维护者明确临时接受三条 Undici 8.11.2 高危发现，期限**包含 2026-11-05 当日**；签名宿主并未修复。详见[临时风险接受说明](docs/DEPENDENCY_SCAN.md)。后续上游提供修复链并通过核验后，再继续更新。
 
 先选好路径，再替换任何包：
 
@@ -20,7 +22,7 @@ DSH Completion Guard 是 DeepSeek Harness 插件，负责保存任务要求，
 Web 在完成相应准备后安装：
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.10.0
+dsh plugin --profile web add dsh-completion-guard@0.11.0
 ```
 
 装好插件还需核验环境。**宿主锁**记录这个 profile 实际加载的包和目录：先用 `inspect` 检查，再用 `inject` 写入，最后以 `verify-dump` 核对组合配置；注入前备份 `cordis.patch.yml`。[安装与首次载入](docs/GETTING_STARTED.md)给出 Web 命令、Windows 和 Desktop 路径及启动前的最后核验。[旧会话迁移指南](docs/ACTIVATION_MIGRATION.md)提供升级准备、完整命令和可复制的 AI 提示词。

package/bin/dsh-completion-guard-activation.mjs

@@ -49,7 +49,9 @@ async function main() {
   const require = createRequire(anchor)
   const { Context } = await import(pathToFileURL(require.resolve('@deepseek-ai/cordis')).href)
   const backendPath = require.resolve('@deepseek-ai/dsh-session-persistence-jsonl')
-  const { default: Jsonl } = await import(pathToFileURL(backendPath).href)
+  const jsonlModule = await import(pathToFileURL(backendPath).href)
+  const Jsonl = jsonlModule.default ?? jsonlModule
+  if (typeof Jsonl !== 'function' && (!Jsonl || typeof Jsonl !== 'object' || typeof Jsonl.apply !== 'function')) throw new Error('activation_backend_module_invalid')
   // Resolve the same dependency instance used by this physical JSONL backend.
   const { SessionFormatUnsupportedError } = await import(pathToFileURL(createRequire(backendPath).resolve('@deepseek-ai/dsh-session-persistence')).href)
   const ctx = new Context()

package/bin/dsh-completion-guard-host-lock.mjs

@@ -71,6 +71,21 @@ function summary(evaluation) {
   }
 }
 
+async function writeOutput(stream, text) {
+  await new Promise((resolve, reject) => {
+    const onError = error => reject(error)
+    stream.once('error', onError)
+    try {
+      stream.write(text, error => {
+        if (error) { reject(error); return } // The error event is consumed by onError.
+        stream.removeListener('error', onError)
+        resolve()
+      })
+    } catch (error) { stream.removeListener('error', onError); reject(error) }
+  })
+}
+
+async function main() {
 try {
   const command = process.argv[2]
   if (!['inspect', 'inspect-graph', 'inject', 'verify-dump', 'dump-desktop'].includes(command)) {
@@ -89,7 +104,7 @@ try {
       platform: process.platform === 'win32' ? 'windows' : 'posix',
       profileKind: 'desktop',
     }, trust ? JSON.stringify(trust) : undefined, profileRoot)
-    process.stdout.write(`${JSON.stringify({
+    await writeOutput(process.stdout, `${JSON.stringify({
       ...summary(evaluation),
       inspection_scope: 'pre_install_target',
       profile_graph: target.profileGraph,
@@ -104,7 +119,8 @@ try {
       },
       packages: target.packages,
     })}\n`)
-    process.exit(evaluation.status === 'supported' ? 0 : 1)
+    process.exitCode = evaluation.status === 'supported' ? 0 : 1
+    return
   }
   if (command === 'inspect-graph') {
     const trust = hasFlag('--rebind-registry')
@@ -115,8 +131,9 @@ try {
       platform: process.platform === 'win32' ? 'windows' : 'posix',
       ...(target.profileGraph.state === 'dependency_free_headless' ? { profileKind: 'headless' } : {}),
     }, trust ? JSON.stringify(trust) : undefined, option('--profile-root'))
-    process.stdout.write(`${JSON.stringify({ ...summary(evaluation), inspection_scope: 'pre_install_target', profile_graph: target.profileGraph, packages: rows })}\n`)
-    process.exit(evaluation.status === 'supported' ? 0 : 1)
+    await writeOutput(process.stdout, `${JSON.stringify({ ...summary(evaluation), inspection_scope: 'pre_install_target', profile_graph: target.profileGraph, packages: rows })}\n`)
+    process.exitCode = evaluation.status === 'supported' ? 0 : 1
+    return
   }
   // Explicit registry rebind. Existing baseline inspection stays offline.
   const trust = hasFlag('--rebind-registry')
@@ -160,18 +177,22 @@ try {
       env: { ...process.env, ELECTRON_RUN_AS_NODE: '1', DSH_HOME: dirname(dirname(profileRoot)) },
       stdio: ['ignore', 'pipe', 'pipe'],
     })
-    process.stdout.write(output)
-    process.exit(0)
+    await writeOutput(process.stdout, output)
+    return
   }
   if (command === 'inject') injectActiveProfileHostLock(active)
   if (command === 'verify-dump') {
     verifyComposedHostLockDump(readFileSync(option('--dump-config') === '-' ? 0 : option('--dump-config'), 'utf8'), active.evaluation, active)
   }
-  process.stdout.write(`${JSON.stringify({ ...summary(active.evaluation),
+  await writeOutput(process.stdout, `${JSON.stringify({ ...summary(active.evaluation),
     ...(command === 'inspect' ? { inspection_scope: 'active_profile' } : {}),
+    ...(command === 'verify-dump' ? { verification_scope: 'guard_host_lock_fields', configuration_syntax: 'not_checked' } : {}),
   })}\n`)
 } catch (error) {
   const code = error && typeof error === 'object' && 'code' in error ? String(error.code) : 'host_lock_command_failed'
-  process.stderr.write(`${JSON.stringify({ status: 'unavailable', reason_code: code })}\n`)
   process.exitCode = 1
+  try { await writeOutput(process.stderr, `${JSON.stringify({ status: 'unavailable', reason_code: code })}\n`) } catch { /* A closed diagnostic pipe still fails. */ }
+}
+
 }
+await main()

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as assessmentOutcomePredicate, $a as CheckpointResult, $c as SUPPORTED_EVIDENCE_ADAPTERS, $i as EXPECTED_HOST_PACKAGES, $n as inspectTargetHostGraph, $o as JobLifecycleRecord, $r as executeRevalidatedGitEffect, $s as ExecutionQualification, $t as bindProofToProjection, A as InitialActivation, Aa as LATEST_TESTED_HOST_VERSION, Ac as namedActions, Ai as UnifiedItemDiagnosis, An as FirstStepPreviewInput, Ao as DeferAuthorization, Ar as HostTrustedPackage, As as replayRebindResult, At as closingHint, B as RC020_RC2_HOST_PACKAGES, Ba as AuthorityBlock, Bc as statefulActionsOfScope, Bi as PROTOCOL_V4_NOTICE, Bn as TargetHostGraph, Bo as ExpectedTransition, Br as GitCommandAccepted, Bs as ProcessFactSource, Bt as PROOF_PROTOCOL_VERSION, C as createActivationMigrationReceipt, Ca as evaluateHostLock, Cc as isQuestionScopeNeedingReview, Ci as persistedToolResultStatus, Cn as CommandSurfaceManifest, Co as qualifyBoundary, Cr as readDesktopAppRuntime, Cs as RebindProposal, Ct as RecoveryCause, D as resolveSessionActivation, Da as HOST_VALIDATED_VERSIONS, Dc as legacyQuestionReadingIsInformational, Di as DiagnosisNextAction, Dn as ClaimedMessage, Do as BoundaryDisposition, Dr as HostRebindTrust, Ds as proposeRebindV042, Dt as V6_ORDINARY_COMPLETION_RULE_SHORT, E as resolveActivationBindingsRoot, Ea as selectHostCohort, Ec as kindOfScope, Ei as CertificationSupport, En as validateManifest, Eo as BindingActionClosure, Er as writeDesktopRuntimeReceipt, Es as proposeRebindOutcome, Et as V6_ORDINARY_COMPLETION_RULE_COMPACT, F as activationDigest, Fa as compareHostVersions, Fc as questionHeadsClause, Fi as nativeFileTwoRole, Fn as lifecyclePhase, Fo as DerivedEnvelope, Fr as registryArchiveFiles, Fs as DeclaredOperationResult, Ft as v6CurrentRootBoundaries, G as AssistantOutcomeObservation, Ga as TaskIntent, Gc as ActionSpec, Gi as legacyRecordsNeedingReview, Gn as auditedHostImplementation, Go as GuardEvidence, Gr as GitEffectRunner, Gs as capabilityConsequence, Gt as ProofKindV2, H as projectSessionCoreV2, Ha as AuthorityKind, Hc as ACTION_MANIFEST, Hi as PROTOCOL_V6_NOTICE, Hn as auditedDefaultWorkdirHost, Ho as GoalRef, Hr as GitCommandParseResult, Hs as RemovalOutcomeReport, Ht as ProofHostSurface, I as activationJson, Ia as evaluateMinimumHostVersion, Ic as reportingHeadGoverns, Ii as relevantEvidence, In as previewFirstStepInjection, Io as EvidenceBinding, Ir as registryArchiveModules, Is as DependencyStatus, It as PROOF_CAPABILITY_MATRIX, J as CurrentActionBasis, Ja as classifyUserInteraction, Jc as CERTIFICATE_VERSION_V2, Ji as ACTIVE_HOST_COHORT_IDS, Jn as evaluateConfiguredHostLock, Jo as GuardItemKind, Jr as GitTargetIdentity, Js as removalIsComplete, Jt as ProofObligation, K as CONTROL_RECORD_PREFIX, Ka as UserInteractionKind, Kc as BOUNDED_ARTIFACT_TYPES, Ki as rootLocatorFlavor, Kn as combineHostPolicy, Ko as GuardIntegrity, Kr as GitPrestateCheck, Ks as capabilityFactOf, Kt as ProofManifest, L as sessionBirthIdentity, La as parseHostVersion, Lc as restatedContentOf, Li as CAPTURE_V042_NOTICE, Ln as ActiveProfileHostLock, Lo as EvidenceOutcome, Lr as GIT_COMMAND_MANIFEST_IDS, Ls as DerivedProcessFacts, Lt as PROOF_KINDS, M as SessionActivationRead, Ma as ParsedHostVersion, Mc as opensWithDirective, Mi as deriveItemDiagnosis, Mn as claimedBatchHasRealRootInput, Mo as DeriveConfig, Mr as hostTrustDigest, Ms as CapabilityGap, Mt as recoveryDigest, N as SessionBirthIdentity, Na as SUPPORTED_HOST_RANGE, Nc as presentExplanationHead, Ni as evidenceAvailabilityReason, Nn as firstStepGuidance, No as DeriveResult, Nr as parseHostTrust, Ns as CapabilityRemedy, Nt as recoveryTitle, O as validateActivationMigrationReceipt, Oa as HostVersionDecision, Oc as maskCodeSpans, Oi as Repairability, On as FIRST_STEP_GUIDANCE, Oo as BoundaryQualificationKind, Or as HostTrustAcquisitionOptions, Os as rebindAttemptKey, Ot as carriesCleanupCondition, P as activationCanonical, Pa as SUPPORTED_HOST_VERSIONS, Pc as qualificationOfClause, Pi as itemDiagnosis, Pn as firstStepGuidanceV6, Po as DeriveScope, Pr as qualifyHostTrust, Ps as DEPENDENCY_FREE_ONLY_CONDITION, Pt as renderRecoveryPacket, Q as assessmentAction, Qa as parseConfirmationMessage, Qc as STOP_PROTOCOL_VERSION_V2, Qi as DEFAULT_HOST_LOCK, Qn as inspectDesktopTargetGraph, Qo as HostStatus, Qr as createGitPrestateEnvelope, Qs as Executee, Qt as SessionQueryV2, R as validateActivationBinding, Ra as satisfiesSupportedHostRange, Rc as semanticActionOfScope, Ri as DEFAULT_DELEGATION_TOOL_NAMES, Rn as AuditedPackageExpectation, Ro as EvidenceParseStatus, Rr as GIT_COMMAND_TEMPLATES, Rs as OperationAttribution, Rt as PROOF_KINDS_V2, S as adoptActivationReceipt, Sa as evaluateHostCapability, Sc as isOpenObligation, Si as nativeGitParentOidVerified, Sn as COMMAND_SURFACE_MANIFEST, So as isCurrentAcceptedBoundary, Sr as readAsarIndex, Ss as RebindArgs, St as MIN_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as hostVersionFromPackages, Tc as itemHoldsExecutionAuthority, Ti as withDurability, Tn as OperationVerbEntry, To as AssetObligation, Tr as readDesktopTargetGraph, Ts as proposeRebind, Tt as V6_ORDINARY_COMPLETION_RULE, U as projectCoreV2, Ua as authorityCaptureCounts, Uc as ACTION_MANIFEST_VERSION, Ui as applyUpgradeEligibility, Un as auditedDefaultWorkdirProvider, Uo as GuardBoundary, Ur as GitCommandRejected, Us as actionHasCertificationPath, Ut as ProofKind, V as RC020_RC1_HOST_PACKAGES, Va as AuthorityBlockKind, Vc as verbIsNegated, Vi as PROTOCOL_V5_NOTICE, Vn as activeRendererModule, Vo as ExternalOperation, Vr as GitCommandManifest, Vs as ProcessOutcomeReason, Vt as PROOF_PROTOCOL_VERSION_V2, W as supersedeItem, Wa as segmentAuthorityBlocks, Wc as ActionManifest, Wi as deriveProjection, Wn as auditedForegroundRenderers, Wo as GuardCheckpoint, Wr as GitEffectExecution, Ws as admissibleForRemoval, Wt as ProofKindCapability, X as NO_PROGRESS_TURNS_BEFORE_STOP, Xa as ParsedConfirmation, Xc as STATEFUL_ACTIONS, Xi as AuditedExecutable, Xn as hostLockRowsFromComposedDump, Xo as GuardOperation, Xr as commitIndexSnapshotDigest, Xs as AuthorityDisposition, Xt as ProofSurface, Y as NO_PROGRESS_RECORD_PREFIX, Ya as CONFIRM_LINE_PATTERN, Yc as SEMANTIC_ACTIONS, Yi as ACTIVE_HOST_LAUNCHER_VERSION, Yn as hostLockContextFromComposedDump, Yo as GuardItemStatus, Yr as LinearCommitReadback, Ys as removalIsPartiallyKnown, Yt as ProofObligationV2, Z as TurnStoppingDecision, Za as isFrozenV042RebindResponse, Zc as STOP_PROTOCOL_VERSION, Zi as BASE_HOST_PACKAGES, Zn as injectActiveProfileHostLock, Zo as GuardProjection, Zr as commitTreeSnapshotDigest, Zs as DirectiveClass, Zt as SessionQuery, _ as verifyMigrationInventory, _a as HostToolSurface, _c as interpretMessage, _i as ToolSubject, _l as sha256, _n as EvidenceFacetCoverage, _o as BoundaryRequest, _r as auditDesktopInstalledImplementation, _t as snapshotSessionEvents, a as isSelectedActivationReceipt, aa as HostAuditProvenance, ac as ScopeInterpretation, ai as CanonicalCommandSurface, al as requestedIdentityKey, an as proofDigest, ao as captureClause, ar as readActiveHostGraph, as as TargetCaptureReasonCode, at as isRootPauseRequest, b as __activationBindingInternals, ba as evaluateExternalWaitCapability, bc as isExplanationScope, bi as extractToolSubject, bn as evidenceMatchesItem, bo as availableBoundaryQualifications, br as memoizedAsarIndex, bs as BoundedSource, bt as CLEANUP_CONDITION_RULE_SHORT, c as selectedActivationInventory, ca as HostCapabilityRequest, cc as clauseAsksOwnQuestion, ci as canonicalArgvFromCommand, cl as semanticActionFromCommand, cn as proofHostSurfacesOf, co as environmentDefaultRepositoryTarget, cr as resolveInstalledHostLock, cs as TargetSourceKind, ct as latestRootInstruction, d as verifySelectedMigrationInventory, da as HostCohortSelectionReason, dc as explanationHasActionResidue, di as parseShellCommand, dl as validateActionTarget, dn as requiredSubjectsOf, do as extractOperation, dr as AsarIndex, ds as VerificationContract, dt as testOutcomePredicate, ea as ExecutableIdentity, ec as GRANTED_QUALIFICATION, ei as gitCommandMatchesTarget, el as SemanticAction, en as bindProofV2ToProjection, eo as RejectedBinding, er as packageRowsFromActiveGraph, es as MessageCoverage, et as classifyCompletionClaim, f as privateStorageToolDenial, fa as HostLockContext, fc as governedClauseRestrictsExecution, fi as goalCompletionDenial, fl as canonicalizePath, fn as scopeCoverageDigest, fo as isInformationalMessage, fr as DESKTOP_IDENTITY_FACTS, fs as WaitAuthorization, ft as v6TestPredicate, g as prepareActivationMigration, ga as HostProfileKind, gc as interpretClause, gi as ToolResultInput, gl as sanitizeUrl, gn as validateProofManifestV2, go as BoundaryQualification, gr as DesktopTargetGraph, gt as V4SessionLike, h as inspectActivationInventory, ha as HostPlatform, hc as hasWorkPredicate, hi as ToolCallInput, hl as sanitizeClauseText, hn as validateProofManifest, ho as BoundaryEffectuation, hr as DesktopAppRuntime, ht as SessionApiError, i as createActivationSelection, ia as HOST_COHORTS, ic as QualificationStatus, ii as CanonicalArgv, il as isStatefulAction, in as proofCapabilityReport, io as ClauseSegment, ir as prepareTargetHostTrust, is as SourceSpan, it as decisionBoundaryKey, j as SessionActivationBinding, ja as MIN_SUPPORTED_HOST_VERSION, jc as opensConditionLead, ji as capabilityRemedyPhrase, jn as LifecyclePhase, jo as DelegationRef, jr as acquireHostTrust, js as CapabilityFact, jt as openItems, k as writeActivationBinding, ka as HostVersionStatus, kc as maskQuotedSpans, ki as TaskKind, kn as FirstStepInjection, ko as CwdEpoch, kr as HostTrustError, ks as rebindResponse, kt as cleanupConditionFor, l as validateActivationInventorySnapshot, la as HostCohort, lc as clauseIsGoverned, li as isRunExecutable, ll as semanticActionFromText, ln as proofOperationMatches, lo as extractArtifactPaths, lr as revalidateDesktopCoreLock, ls as TargetTuple, lt as observeAssistantOutcome, m as ActivationPriorModes, ma as HostLockStatus, mc as hasQuestionScope, mi as NATIVE_GIT_ROOT_PARENT_OID, ml as normalizeClause, mn as sessionQueryV2, mo as BOUNDARY_RECORD_PREFIX, mr as DESKTOP_RUNTIME_PACKAGE_NAME, ms as createProjection, mt as SESSION_EVENT_ENVELOPE_INVALID, n as ActivationMigrationSelection, na as GOAL_HOST_PACKAGES, nc as LEGACY_QUALIFICATION, ni as revalidateGitPrestate, nl as actionCompatible, nn as createProofManifest, no as certifyCheckpoint, nr as prepareActiveHostTrust, ns as NeedsReviewReason, nt as decideTurnBoundary, o as prepareSelectedActivationMigration, oa as HostCapabilityEvaluation, oc as actionVerbMatches, oi as ParsedShell, ol as requestedTargetAuthorizesMutation, on as proofDigestV2, oo as captureItem, or as resolveActiveProfileHostLock, os as TargetCaptureStatus, ot as isWholeTaskCompletionClaim, p as ActivationInventoryPersistence, pa as HostLockEvaluation, pc as hasOrderedCoordination, pi as hasCurrentCertificate, pl as digestStrings, pn as sessionQuery, po as segmentClauses, pr as DESKTOP_PROFILE_PACKAGE_NAME, ps as WorkUnit, pt as SESSION_API_UNSUPPORTED, q as CompletionDisposition, qa as classifyTaskIntent, qc as CERTIFICATE_VERSION, qi as ACTIVE_HOST_COHORT_ID, qn as evaluateActiveHostLock, qo as GuardItem, qr as GitPrestateEnvelope, qs as partialFailureOf, qt as ProofManifestV2, r as activationSelectionPending, ra as HOST_CAPABILITY_PACKAGE_GROUPS, rc as QualificationReason, ri as verifiedLinearCommitReadback, rl as boundedArtifactChoiceMatches, rn as createProofManifestV2, ro as CaptureScope, rr as prepareDesktopHostTrust, rs as PersistenceAuthorization, rt as decideTurnStopping, s as scanActivationInventory, sa as HostCapabilityId, sc as clarifiedSpanOf, si as ShellParseStatus, sl as requestedTargetMatchesResolved, sn as proofEvidenceConstraints, so as classifyClause, sr as resolveDesktopProfileHostLock, ss as TargetSource, st as latestAssistantText, t as ActivationInventorySnapshot, ta as ExecutableIdentityBinding, tc as InterpretOptions, ti as parseGitCommandManifest, tl as StatefulAction, tn as canonicalProjection, to as bindingIndividuallyAccepted, tr as packageRowsFromPnpmLock, ts as NeedsReviewFact, tt as currentActionBases, u as validateActivationSelection, ua as HostCohortSelection, uc as clauseIsProtected, ui as parsePwshCommand, ul as validateActionManifest, un as proofV2Rejection, uo as extractMethod, ur as verifyComposedHostLockDump, us as TargetValue, ut as progressFingerprint, v as ActivationMigrationEntry, va as bindExecutableIdentity, vc as introducesActionClause, vi as evidenceFromPersistedToolResult, vn as bindingSatisfies, vo as GoalActivationState, vr as hasDesktopImporterState, vt as CLEANUP_CONDITION_RULE, w as readActivationBinding, wa as evaluateToolSurfaceCapability, wc as isRestatement, wi as shellReadbackOutcome, wn as ManifestIssue, wo as AssetInterpretationFact, wr as readDesktopDependency, ws as confirmRebind, wt as RecoveryOptions, x as activationBindingPath, xa as evaluateGraphDerivedHostLock, xc as isInformationalFragment, xi as isDeterministicCheck, xn as isVerifyingCapability, xo as effectuateBoundary, xr as readAsarFile, xs as ProposeOutcome, xt as DEFAULT_RECOVERY_CHAR_BUDGET, y as ActivationMigrationReceipt, ya as bindLiveGoalCapability, yc as isExecutableItem, yi as extractTextContent, yn as evidenceCoverage, yo as GoalBoundaryAccess, yr as memoizedAsarFile, yt as CLEANUP_CONDITION_RULE_COMPACT, z as RC021_RC2_HOST_PACKAGES, za as currentContractDigest, zc as splitTextFragments, zi as PROTOCOL_V3_NOTICE, zn as HostProfileError, zo as EvidenceRole, zr as GitAdapterAction, zs as ProcessExitStatus, zt as PROOF_MANIFEST_DOMAIN_V2 } from "../index-rCqdIg5B.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+import { $ as assessmentAction, $a as parseConfirmationMessage, $c as STOP_PROTOCOL_VERSION_V2, $i as DEFAULT_HOST_LOCK, $n as inspectDesktopTargetGraph, $o as HostStatus, $r as createGitPrestateEnvelope, $s as Executee, $t as SessionQueryV2, A as InitialActivation, Aa as HostVersionStatus, Ac as maskQuotedSpans, Ai as TaskKind, An as FirstStepInjection, Ao as CwdEpoch, Ar as HostTrustError, As as rebindResponse, At as cleanupConditionFor, B as RC021_RC2_HOST_PACKAGES, Ba as currentContractDigest, Bc as splitTextFragments, Bi as PROTOCOL_V3_NOTICE, Bn as HostProfileError, Bo as EvidenceRole, Br as GitAdapterAction, Bs as ProcessExitStatus, Bt as PROOF_MANIFEST_DOMAIN_V2, C as createActivationMigrationReceipt, Ca as evaluateHostCapability, Cc as isOpenObligation, Ci as nativeGitParentOidVerified, Cn as COMMAND_SURFACE_MANIFEST, Co as isCurrentAcceptedBoundary, Cr as readAsarIndex, Cs as RebindArgs, Ct as MIN_RECOVERY_CHAR_BUDGET, D as resolveSessionActivation, Da as selectHostCohort, Dc as kindOfScope, Di as CertificationSupport, Dn as validateManifest, Do as BindingActionClosure, Dr as writeDesktopRuntimeReceipt, Ds as proposeRebindOutcome, Dt as V6_ORDINARY_COMPLETION_RULE_COMPACT, E as resolveActivationBindingsRoot, Ea as hostVersionFromPackages, Ec as itemHoldsExecutionAuthority, Ei as withDurability, En as OperationVerbEntry, Eo as AssetObligation, Er as readDesktopTargetGraph, Es as proposeRebind, Et as V6_ORDINARY_COMPLETION_RULE, F as activationDigest, Fa as SUPPORTED_HOST_VERSIONS, Fc as qualificationOfClause, Fi as itemDiagnosis, Fn as firstStepGuidanceV6, Fo as DeriveScope, Fr as qualifyHostTrust, Fs as DEPENDENCY_FREE_ONLY_CONDITION, Ft as renderRecoveryPacket, G as supersedeItem, Ga as segmentAuthorityBlocks, Gc as ActionManifest, Gi as deriveProjection, Gn as auditedForegroundRenderers, Go as GuardCheckpoint, Gr as GitEffectExecution, Gs as admissibleForRemoval, Gt as ProofKindCapability, H as RC020_RC1_HOST_PACKAGES, Ha as AuthorityBlockKind, Hc as verbIsNegated, Hi as PROTOCOL_V5_NOTICE, Hn as activeRendererModule, Ho as ExternalOperation, Hr as GitCommandManifest, Hs as ProcessOutcomeReason, Ht as PROOF_PROTOCOL_VERSION_V2, I as activationJson, Ia as compareHostVersions, Ic as questionHeadsClause, Ii as nativeFileTwoRole, In as lifecyclePhase, Io as DerivedEnvelope, Ir as registryArchiveFiles, Is as DeclaredOperationResult, It as v6CurrentRootBoundaries, J as CompletionDisposition, Ja as classifyTaskIntent, Jc as CERTIFICATE_VERSION, Ji as ACTIVE_HOST_COHORT_ID, Jn as evaluateActiveHostLock, Jo as GuardItem, Jr as GitPrestateEnvelope, Js as partialFailureOf, Jt as ProofManifestV2, K as AssistantOutcomeObservation, Ka as TaskIntent, Kc as ActionSpec, Ki as legacyRecordsNeedingReview, Kn as auditedHostImplementation, Ko as GuardEvidence, Kr as GitEffectRunner, Ks as capabilityConsequence, Kt as ProofKindV2, L as sessionBirthIdentity, La as evaluateMinimumHostVersion, Lc as reportingHeadGoverns, Li as relevantEvidence, Ln as previewFirstStepInjection, Lo as EvidenceBinding, Lr as registryArchiveModules, Ls as DependencyStatus, Lt as PROOF_CAPABILITY_MATRIX, M as SessionActivationRead, Ma as MIN_SUPPORTED_HOST_VERSION, Mc as opensConditionLead, Mi as capabilityRemedyPhrase, Mn as LifecyclePhase, Mo as DelegationRef, Mr as acquireHostTrust, Ms as CapabilityFact, Mt as openItems, N as SessionBirthIdentity, Na as ParsedHostVersion, Nc as opensWithDirective, Ni as deriveItemDiagnosis, Nn as claimedBatchHasRealRootInput, No as DeriveConfig, Nr as hostTrustDigest, Ns as CapabilityGap, Nt as recoveryDigest, O as validateActivationMigrationReceipt, Oa as HOST_VALIDATED_VERSIONS, Oc as legacyQuestionReadingIsInformational, Oi as DiagnosisNextAction, On as ClaimedMessage, Oo as BoundaryDisposition, Or as HostRebindTrust, Os as proposeRebindV042, Ot as V6_ORDINARY_COMPLETION_RULE_SHORT, P as activationCanonical, Pa as SUPPORTED_HOST_RANGE, Pc as presentExplanationHead, Pi as evidenceAvailabilityReason, Pn as firstStepGuidance, Po as DeriveResult, Pr as parseHostTrust, Ps as CapabilityRemedy, Pt as recoveryTitle, Q as TurnStoppingDecision, Qa as isFrozenV042RebindResponse, Qc as STOP_PROTOCOL_VERSION, Qi as BASE_HOST_PACKAGES, Qn as injectActiveProfileHostLock, Qo as GuardProjection, Qr as commitTreeSnapshotDigest, Qs as DirectiveClass, Qt as SessionQuery, R as validateActivationBinding, Ra as parseHostVersion, Rc as restatedContentOf, Ri as CAPTURE_V042_NOTICE, Rn as ActiveProfileHostLock, Ro as EvidenceOutcome, Rr as GIT_COMMAND_MANIFEST_IDS, Rs as DerivedProcessFacts, Rt as PROOF_KINDS, S as adoptActivationReceipt, Sa as evaluateGraphDerivedHostLock, Sc as isInformationalFragment, Si as isDeterministicCheck, Sn as isVerifyingCapability, So as effectuateBoundary, Sr as readAsarFile, Ss as ProposeOutcome, St as DEFAULT_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as evaluateToolSurfaceCapability, Tc as isRestatement, Ti as shellReadbackOutcome, Tn as ManifestIssue, To as AssetInterpretationFact, Tr as readDesktopDependency, Ts as confirmRebind, Tt as RecoveryOptions, U as projectSessionCoreV2, Ua as AuthorityKind, Uc as ACTION_MANIFEST, Ui as PROTOCOL_V6_NOTICE, Un as auditedDefaultWorkdirHost, Uo as GoalRef, Ur as GitCommandParseResult, Us as RemovalOutcomeReport, Ut as ProofHostSurface, V as RC020_RC2_HOST_PACKAGES, Va as AuthorityBlock, Vc as statefulActionsOfScope, Vi as PROTOCOL_V4_NOTICE, Vn as TargetHostGraph, Vo as ExpectedTransition, Vr as GitCommandAccepted, Vs as ProcessFactSource, Vt as PROOF_PROTOCOL_VERSION, W as projectCoreV2, Wa as authorityCaptureCounts, Wc as ACTION_MANIFEST_VERSION, Wi as applyUpgradeEligibility, Wn as auditedDefaultWorkdirProvider, Wo as GuardBoundary, Wr as GitCommandRejected, Ws as actionHasCertificationPath, Wt as ProofKind, X as NO_PROGRESS_RECORD_PREFIX, Xa as CONFIRM_LINE_PATTERN, Xc as SEMANTIC_ACTIONS, Xi as ACTIVE_HOST_LAUNCHER_VERSION, Xn as hostLockContextFromComposedDump, Xo as GuardItemStatus, Xr as LinearCommitReadback, Xs as removalIsPartiallyKnown, Xt as ProofObligationV2, Y as CurrentActionBasis, Ya as classifyUserInteraction, Yc as CERTIFICATE_VERSION_V2, Yi as ACTIVE_HOST_COHORT_IDS, Yn as evaluateConfiguredHostLock, Yo as GuardItemKind, Yr as GitTargetIdentity, Ys as removalIsComplete, Yt as ProofObligation, Z as NO_PROGRESS_TURNS_BEFORE_STOP, Za as ParsedConfirmation, Zc as STATEFUL_ACTIONS, Zi as AuditedExecutable, Zn as hostLockRowsFromComposedDump, Zo as GuardOperation, Zr as commitIndexSnapshotDigest, Zs as AuthorityDisposition, Zt as ProofSurface, _ as verifyMigrationInventory, _a as HostProfileKind, _c as interpretClause, _i as ToolResultInput, _l as sanitizeUrl, _n as validateProofManifestV2, _o as BoundaryQualification, _r as DesktopTargetGraph, _t as V4SessionLike, a as isSelectedActivationReceipt, aa as HOST_COHORTS, ac as QualificationStatus, ai as CanonicalArgv, al as isStatefulAction, an as proofCapabilityReport, ao as ClauseSegment, ar as prepareTargetHostTrust, as as SourceSpan, at as decisionBoundaryKey, b as __activationBindingInternals, ba as bindLiveGoalCapability, bc as isExecutableItem, bi as extractTextContent, bn as evidenceCoverage, bo as GoalBoundaryAccess, br as memoizedAsarFile, bt as CLEANUP_CONDITION_RULE_COMPACT, c as selectedActivationInventory, ca as HostCapabilityId, cc as clarifiedSpanOf, ci as ShellParseStatus, cl as requestedTargetMatchesResolved, cn as proofEvidenceConstraints, co as classifyClause, cr as resolveDesktopProfileHostLock, cs as TargetSource, ct as latestAssistantText, d as verifySelectedMigrationInventory, da as HostCohortSelection, dc as clauseIsProtected, di as parsePwshCommand, dl as validateActionManifest, dn as proofV2Rejection, do as extractMethod, dr as verifyComposedHostLockDump, ds as TargetValue, dt as progressFingerprint, ea as EXPECTED_HOST_PACKAGES, ec as ExecutionQualification, ei as executeRevalidatedGitEffect, el as SUPPORTED_EVIDENCE_ADAPTERS, en as bindProofToProjection, eo as CheckpointResult, er as inspectTargetHostGraph, es as JobLifecycleRecord, et as assessmentOutcomePredicate, f as privateStorageToolDenial, fa as HostCohortSelectionReason, fc as explanationHasActionResidue, fi as parseShellCommand, fl as validateActionTarget, fn as requiredSubjectsOf, fo as extractOperation, fr as AsarIndex, fs as VerificationContract, ft as testOutcomePredicate, g as prepareActivationMigration, ga as HostPlatform, gc as hasWorkPredicate, gi as ToolCallInput, gl as sanitizeClauseText, gn as validateProofManifest, go as BoundaryEffectuation, gr as DesktopAppRuntime, gt as SessionApiError, h as inspectActivationInventory, ha as HostLockStatus, hc as hasQuestionScope, hi as NATIVE_GIT_ROOT_PARENT_OID, hl as normalizeClause, hn as sessionQueryV2, ho as BOUNDARY_RECORD_PREFIX, hr as DESKTOP_RUNTIME_PACKAGE_NAME, hs as createProjection, ht as SESSION_EVENT_ENVELOPE_INVALID, i as createActivationSelection, ia as HOST_CAPABILITY_PACKAGE_GROUPS, ic as QualificationReason, ii as verifiedLinearCommitReadback, il as boundedArtifactChoiceMatches, in as createProofManifestV2, io as CaptureScope, ir as prepareDesktopHostTrust, is as PersistenceAuthorization, it as decideTurnStopping, j as SessionActivationBinding, ja as LATEST_TESTED_HOST_VERSION, jc as namedActions, ji as UnifiedItemDiagnosis, jn as FirstStepPreviewInput, jo as DeferAuthorization, jr as HostTrustedPackage, js as replayRebindResult, jt as closingHint, k as writeActivationBinding, ka as HostVersionDecision, kc as maskCodeSpans, ki as Repairability, kn as FIRST_STEP_GUIDANCE, ko as BoundaryQualificationKind, kr as HostTrustAcquisitionOptions, ks as rebindAttemptKey, kt as carriesCleanupCondition, l as validateActivationInventorySnapshot, la as HostCapabilityRequest, lc as clauseAsksOwnQuestion, li as canonicalArgvFromCommand, ll as semanticActionFromCommand, ln as proofHostSurfacesOf, lo as environmentDefaultRepositoryTarget, lr as resolveInstalledHostLock, ls as TargetSourceKind, lt as latestRootInstruction, m as ActivationPriorModes, ma as HostLockEvaluation, mc as hasOrderedCoordination, mi as hasCurrentCertificate, ml as digestStrings, mn as sessionQuery, mo as segmentClauses, mr as DESKTOP_PROFILE_PACKAGE_NAME, ms as WorkUnit, mt as SESSION_API_UNSUPPORTED, n as ActivationMigrationSelection, na as ExecutableIdentityBinding, nc as InterpretOptions, ni as parseGitCommandManifest, nl as StatefulAction, nn as canonicalProjection, no as bindingIndividuallyAccepted, nr as packageRowsFromPnpmLock, ns as NeedsReviewFact, nt as currentActionBases, o as prepareSelectedActivationMigration, oa as HostAuditProvenance, oc as ScopeInterpretation, oi as CanonicalCommandSurface, ol as requestedIdentityKey, on as proofDigest, oo as captureClause, or as readActiveHostGraph, os as TargetCaptureReasonCode, ot as isRootPauseRequest, p as ActivationInventoryPersistence, pa as HostLockContext, pc as governedClauseRestrictsExecution, pi as goalCompletionDenial, pl as canonicalizePath, pn as scopeCoverageDigest, po as isInformationalMessage, pr as DESKTOP_IDENTITY_FACTS, ps as WaitAuthorization, pt as v6TestPredicate, q as CONTROL_RECORD_PREFIX, qa as UserInteractionKind, qc as BOUNDED_ARTIFACT_TYPES, qi as rootLocatorFlavor, qn as combineHostPolicy, qo as GuardIntegrity, qr as GitPrestateCheck, qs as capabilityFactOf, qt as ProofManifest, r as activationSelectionPending, ra as GOAL_HOST_PACKAGES, rc as LEGACY_QUALIFICATION, ri as revalidateGitPrestate, rl as actionCompatible, rn as createProofManifest, ro as certifyCheckpoint, rr as prepareActiveHostTrust, rs as NeedsReviewReason, rt as decideTurnBoundary, s as scanActivationInventory, sa as HostCapabilityEvaluation, sc as actionVerbMatches, si as ParsedShell, sl as requestedTargetAuthorizesMutation, sn as proofDigestV2, so as captureItem, sr as resolveActiveProfileHostLock, ss as TargetCaptureStatus, st as isWholeTaskCompletionClaim, t as ActivationInventorySnapshot, ta as ExecutableIdentity, tc as GRANTED_QUALIFICATION, ti as gitCommandMatchesTarget, tl as SemanticAction, tn as bindProofV2ToProjection, to as RejectedBinding, tr as packageRowsFromActiveGraph, ts as MessageCoverage, tt as classifyCompletionClaim, u as validateActivationSelection, ua as HostCohort, uc as clauseIsGoverned, ui as isRunExecutable, ul as semanticActionFromText, un as proofOperationMatches, uo as extractArtifactPaths, ur as revalidateDesktopCoreLock, us as TargetTuple, ut as observeAssistantOutcome, v as ActivationMigrationEntry, va as HostToolSurface, vc as interpretMessage, vi as ToolSubject, vl as sha256, vn as EvidenceFacetCoverage, vo as BoundaryRequest, vr as auditDesktopInstalledImplementation, vt as snapshotSessionEvents, w as readActivationBinding, wa as evaluateHostLock, wc as isQuestionScopeNeedingReview, wi as persistedToolResultStatus, wn as CommandSurfaceManifest, wo as qualifyBoundary, wr as readDesktopAppRuntime, ws as RebindProposal, wt as RecoveryCause, x as activationBindingPath, xa as evaluateExternalWaitCapability, xc as isExplanationScope, xi as extractToolSubject, xn as evidenceMatchesItem, xo as availableBoundaryQualifications, xr as memoizedAsarIndex, xs as BoundedSource, xt as CLEANUP_CONDITION_RULE_SHORT, y as ActivationMigrationReceipt, ya as bindExecutableIdentity, yc as introducesActionClause, yi as evidenceFromPersistedToolResult, yl as stripUrlCredentials, yn as bindingSatisfies, yo as GoalActivationState, yr as hasDesktopImporterState, yt as CLEANUP_CONDITION_RULE, z as RC021_RC3_HOST_PACKAGES, za as satisfiesSupportedHostRange, zc as semanticActionOfScope, zi as DEFAULT_DELEGATION_TOOL_NAMES, zn as AuditedPackageExpectation, zo as EvidenceParseStatus, zr as GIT_COMMAND_TEMPLATES, zs as OperationAttribution, zt as PROOF_KINDS_V2 } from "../index-ClmcMWbM.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as evidenceFromPersistedToolResult, $a as createActivationMigrationReceipt, $i as registryArchiveFiles, $n as evidenceAvailabilityReason, $r as presentExplanationHead, $t as renderRecoveryPacket, A as previewFirstStepInjection, Aa as BOUNDED_ARTIFACT_TYPES, Ai as resolveActiveProfileHostLock, Ao as digestStrings, Ar as clauseIsProtected, At as proofHostSurfacesOf, B as projectCoreV2, Ba as isStatefulAction, Bi as memoizedAsarFile, Bn as createProjection, Br as isExplanationScope, Bt as CLEANUP_CONDITION_RULE_COMPACT, C as revalidateGitPrestate, Ca as SUPPORTED_HOST_VERSIONS, Ci as inspectTargetHostGraph, Cn as observeAssistantOutcome, Cr as classifyUserInteraction, Ct as canonicalProjection, D as firstStepGuidance, Da as satisfiesSupportedHostRange, Di as prepareDesktopHostTrust, Dn as goalCompletionDenial, Dr as clarifiedSpanOf, Dt as proofDigest, E as claimedBatchHasRealRootInput, Ea as parseHostVersion, Ei as prepareActiveHostTrust, En as v6TestPredicate, Er as actionVerbMatches, Et as proofCapabilityReport, Fa as STOP_PROTOCOL_VERSION, Fi as DESKTOP_IDENTITY_FACTS, Fn as availableBoundaryQualifications, Fo as privateStorageToolDenial, Fr as hasWorkPredicate, Ft as sessionQuery, G as PROTOCOL_V5_NOTICE, Ga as semanticActionFromText, Gi as readDesktopDependency, Gn as rebindAttemptKey, Gr as itemHoldsExecutionAuthority, Gt as V6_ORDINARY_COMPLETION_RULE_COMPACT, H as DEFAULT_DELEGATION_TOOL_NAMES, Ha as requestedTargetAuthorizesMutation, Hi as readAsarFile, Hn as proposeRebind, Hr as isOpenObligation, Ht as DEFAULT_RECOVERY_CHAR_BUDGET, I as SESSION_API_UNSUPPORTED, Ia as STOP_PROTOCOL_VERSION_V2, Ii as DESKTOP_PROFILE_PACKAGE_NAME, In as effectuateBoundary, Ir as interpretClause, It as sessionQueryV2, J as deriveProjection, Ja as RC021_RC2_HOST_PACKAGES, Ji as HostTrustError, Jn as CONFIRM_LINE_PATTERN, Jr as maskCodeSpans, Jt as cleanupConditionFor, K as PROTOCOL_V6_NOTICE, Ka as validateActionManifest, Ki as readDesktopTargetGraph, Kn as rebindResponse, Kr as kindOfScope, Kt as V6_ORDINARY_COMPLETION_RULE_SHORT, L as SESSION_EVENT_ENVELOPE_INVALID, La as SUPPORTED_EVIDENCE_ADAPTERS, Li as DESKTOP_RUNTIME_PACKAGE_NAME, Ln as isCurrentAcceptedBoundary, Lr as interpretMessage, Lt as validateProofManifest, Ma as CERTIFICATE_VERSION_V2, Mi as resolveInstalledHostLock, Mo as sanitizeClauseText, Mr as governedClauseRestrictsExecution, Mt as proofV2Rejection, Na as SEMANTIC_ACTIONS, Ni as revalidateDesktopCoreLock, No as sanitizeUrl, Nr as hasOrderedCoordination, Nt as requiredSubjectsOf, O as firstStepGuidanceV6, Oa as ACTION_MANIFEST, Oi as prepareTargetHostTrust, On as hasCurrentCertificate, Or as clauseAsksOwnQuestion, Ot as proofDigestV2, Pa as STATEFUL_ACTIONS, Pi as verifyComposedHostLockDump, Pn as BOUNDARY_RECORD_PREFIX, Po as sha256, Pr as hasQuestionScope, Pt as scopeCoverageDigest, Q as NATIVE_GIT_ROOT_PARENT_OID, Qa as adoptActivationReceipt, Qi as qualifyHostTrust, Qn as deriveItemDiagnosis, Qr as opensWithDirective, Qt as recoveryTitle, R as SessionApiError, Ra as actionCompatible, Ri as auditDesktopInstalledImplementation, Rn as qualifyBoundary, Rr as introducesActionClause, Rt as validateProofManifestV2, S as parseGitCommandManifest, Sa as SUPPORTED_HOST_RANGE, Si as inspectDesktopTargetGraph, Sn as latestRootInstruction, Sr as classifyTaskIntent, St as bindProofV2ToProjection, T as FIRST_STEP_GUIDANCE, Ta as evaluateMinimumHostVersion, Ti as packageRowsFromPnpmLock, Tn as testOutcomePredicate, Tr as LEGACY_QUALIFICATION, Tt as createProofManifestV2, U as PROTOCOL_V3_NOTICE, Ua as requestedTargetMatchesResolved, Ui as readAsarIndex, Un as proposeRebindOutcome, Ur as isQuestionScopeNeedingReview, Ut as MIN_RECOVERY_CHAR_BUDGET, V as CAPTURE_V042_NOTICE, Va as requestedIdentityKey, Vi as memoizedAsarIndex, Vn as confirmRebind, Vr as isInformationalFragment, Vt as CLEANUP_CONDITION_RULE_SHORT, W as PROTOCOL_V4_NOTICE, Wa as semanticActionFromCommand, Wi as readDesktopAppRuntime, Wn as proposeRebindV042, Wr as isRestatement, Wt as V6_ORDINARY_COMPLETION_RULE, X as rootLocatorFlavor, Xa as __activationBindingInternals, Xi as hostTrustDigest, Xn as parseConfirmationMessage, Xr as namedActions, Xt as openItems, Y as legacyRecordsNeedingReview, Yi as acquireHostTrust, Yn as isFrozenV042RebindResponse, Yr as maskQuotedSpans, Yt as closingHint, Z as supersedeItem, Za as activationBindingPath, Zi as parseHostTrust, Zn as capabilityRemedyPhrase, Zr as opensConditionLead, Zt as recoveryDigest, _ as commitIndexSnapshotDigest, _a as hostVersionFromPackages, _i as evaluateActiveHostLock, _n as decideTurnStopping, _r as extractOperation, _t as PROOF_KINDS_V2, a as scanActivationInventory, aa as DEFAULT_HOST_LOCK, ai as splitTextFragments, an as bindingSatisfies, ao as writeActivationBinding, ar as admissibleForRemoval, at as shellReadbackOutcome, b as executeRevalidatedGitEffect, ba as LATEST_TESTED_HOST_VERSION, bi as hostLockRowsFromComposedDump, bn as isWholeTaskCompletionClaim, bt as PROOF_PROTOCOL_VERSION_V2, c as validateActivationSelection, ca as HOST_CAPABILITY_PACKAGE_GROUPS, ci as COMMAND_SURFACE_MANIFEST, cn as isVerifyingCapability, co as activationJson, cr as partialFailureOf, ct as isRunExecutable, d as prepareActivationMigration, da as bindLiveGoalCapability, di as activeRendererModule, dn as NO_PROGRESS_TURNS_BEFORE_STOP, dr as captureClause, dt as authorityCaptureCounts, ea as registryArchiveModules, ei as qualificationOfClause, en as v6CurrentRootBoundaries, eo as readActivationBinding, er as itemDiagnosis, et as extractTextContent, f as verifyMigrationInventory, fa as evaluateExternalWaitCapability, fi as auditedDefaultWorkdirHost, fn as assessmentAction, fr as captureItem, ft as segmentAuthorityBlocks, g as GIT_COMMAND_TEMPLATES, ga as evaluateToolSurfaceCapability, gi as combineHostPolicy, gn as decideTurnBoundary, gr as extractMethod, gt as PROOF_KINDS, h as GIT_COMMAND_MANIFEST_IDS, ha as evaluateHostLock, hi as auditedHostImplementation, hn as currentActionBases, hr as extractArtifactPaths, ht as PROOF_CAPABILITY_MATRIX, i as prepareSelectedActivationMigration, ia as BASE_HOST_PACKAGES, ii as semanticActionOfScope, io as validateActivationMigrationReceipt, ir as actionHasCertificationPath, it as persistedToolResultStatus, j as projectSessionCoreV2, ja as CERTIFICATE_VERSION, ji as resolveDesktopProfileHostLock, jo as normalizeClause, jr as explanationHasActionResidue, jt as proofOperationMatches, k as lifecyclePhase, ka as ACTION_MANIFEST_VERSION, ki as readActiveHostGraph, ko as canonicalizePath, kr as clauseIsGoverned, kt as proofEvidenceConstraints, l as verifySelectedMigrationInventory, la as HOST_COHORTS, li as validateManifest, ln as CONTROL_RECORD_PREFIX, lo as sessionBirthIdentity, lr as removalIsComplete, lt as parsePwshCommand, m as RC020_RC1_HOST_PACKAGES, ma as evaluateHostCapability, mi as auditedForegroundRenderers, mn as classifyCompletionClaim, mr as environmentDefaultRepositoryTarget, mt as certifyCheckpoint, n as createActivationSelection, na as ACTIVE_HOST_COHORT_IDS, ni as reportingHeadGoverns, no as resolveActivationBindingsRoot, nr as relevantEvidence, nt as isDeterministicCheck, o as selectedActivationInventory, oa as EXPECTED_HOST_PACKAGES, oi as statefulActionsOfScope, on as evidenceCoverage, oo as activationCanonical, or as capabilityConsequence, ot as withDurability, p as RC020_RC2_HOST_PACKAGES, pa as evaluateGraphDerivedHostLock, pi as auditedDefaultWorkdirProvider, pn as assessmentOutcomePredicate, pr as classifyClause, pt as bindingIndividuallyAccepted, q as applyUpgradeEligibility, qa as validateActionTarget, qi as writeDesktopRuntimeReceipt, qn as replayRebindResult, qr as legacyQuestionReadingIsInformational, qt as carriesCleanupCondition, r as isSelectedActivationReceipt, ra as ACTIVE_HOST_LAUNCHER_VERSION, ri as restatedContentOf, ro as resolveSessionActivation, rr as DEPENDENCY_FREE_ONLY_CONDITION, rt as nativeGitParentOidVerified, s as validateActivationInventorySnapshot, sa as GOAL_HOST_PACKAGES, si as verbIsNegated, sn as evidenceMatchesItem, so as activationDigest, sr as capabilityFactOf, st as canonicalArgvFromCommand, t as activationSelectionPending, ta as ACTIVE_HOST_COHORT_ID, ti as questionHeadsClause, to as readActivationMigrationReceipt, tr as nativeFileTwoRole, tt as extractToolSubject, u as inspectActivationInventory, ua as bindExecutableIdentity, ui as HostProfileError, un as NO_PROGRESS_RECORD_PREFIX, uo as validateActivationBinding, ur as removalIsPartiallyKnown, ut as parseShellCommand, v as commitTreeSnapshotDigest, va as selectHostCohort, vi as evaluateConfiguredHostLock, vn as decisionBoundaryKey, vr as isInformationalMessage, vt as PROOF_MANIFEST_DOMAIN_V2, w as verifiedLinearCommitReadback, wa as compareHostVersions, wi as packageRowsFromActiveGraph, wn as progressFingerprint, wr as GRANTED_QUALIFICATION, wt as createProofManifest, x as gitCommandMatchesTarget, xa as MIN_SUPPORTED_HOST_VERSION, xi as injectActiveProfileHostLock, xn as latestAssistantText, xt as bindProofToProjection, y as createGitPrestateEnvelope, ya as HOST_VALIDATED_VERSIONS, yi as hostLockContextFromComposedDump, yn as isRootPauseRequest, yr as segmentClauses, yt as PROOF_PROTOCOL_VERSION, z as snapshotSessionEvents, za as boundedArtifactChoiceMatches, zi as hasDesktopImporterState, zn as currentContractDigest, zr as isExecutableItem, zt as CLEANUP_CONDITION_RULE } from "../domain-Dqw5NrT-.js";
+import { $ as NATIVE_GIT_ROOT_PARENT_OID, $a as __activationBindingInternals, $i as hostTrustDigest, $n as parseConfirmationMessage, $r as namedActions, $t as openItems, A as lifecyclePhase, Aa as satisfiesSupportedHostRange, Ai as prepareDesktopHostTrust, An as goalCompletionDenial, Ar as clarifiedSpanOf, At as proofDigest, B as snapshotSessionEvents, Ba as SUPPORTED_EVIDENCE_ADAPTERS, Bi as DESKTOP_RUNTIME_PACKAGE_NAME, Bn as isCurrentAcceptedBoundary, Br as interpretMessage, Bt as validateProofManifest, C as parseGitCommandManifest, Ca as LATEST_TESTED_HOST_VERSION, Ci as hostLockRowsFromComposedDump, Cn as isWholeTaskCompletionClaim, Ct as PROOF_PROTOCOL_VERSION_V2, D as claimedBatchHasRealRootInput, Da as compareHostVersions, Di as packageRowsFromActiveGraph, Dn as progressFingerprint, Dr as GRANTED_QUALIFICATION, Dt as createProofManifest, E as FIRST_STEP_GUIDANCE, Ea as SUPPORTED_HOST_VERSIONS, Ei as inspectTargetHostGraph, En as observeAssistantOutcome, Er as classifyUserInteraction, Et as canonicalProjection, Fa as CERTIFICATE_VERSION_V2, Fi as resolveInstalledHostLock, Fo as sanitizeClauseText, Fr as governedClauseRestrictsExecution, Ft as proofV2Rejection, G as PROTOCOL_V4_NOTICE, Ga as requestedTargetAuthorizesMutation, Gi as readAsarFile, Gn as proposeRebind, Gr as isOpenObligation, Gt as DEFAULT_RECOVERY_CHAR_BUDGET, H as CAPTURE_V042_NOTICE, Ha as boundedArtifactChoiceMatches, Hi as hasDesktopImporterState, Hn as currentContractDigest, Hr as isExecutableItem, Ht as CLEANUP_CONDITION_RULE, Ia as SEMANTIC_ACTIONS, Ii as revalidateDesktopCoreLock, Io as sanitizeUrl, Ir as hasOrderedCoordination, It as requiredSubjectsOf, J as applyUpgradeEligibility, Ja as semanticActionFromText, Ji as readDesktopDependency, Jn as rebindAttemptKey, Jr as itemHoldsExecutionAuthority, Jt as V6_ORDINARY_COMPLETION_RULE_COMPACT, K as PROTOCOL_V5_NOTICE, Ka as requestedTargetMatchesResolved, Ki as readAsarIndex, Kn as proposeRebindOutcome, Kr as isQuestionScopeNeedingReview, Kt as MIN_RECOVERY_CHAR_BUDGET, L as SESSION_API_UNSUPPORTED, La as STATEFUL_ACTIONS, Li as verifyComposedHostLockDump, Ln as BOUNDARY_RECORD_PREFIX, Lo as sha256, Lr as hasQuestionScope, Lt as scopeCoverageDigest, M as projectSessionCoreV2, Ma as ACTION_MANIFEST_VERSION, Mi as readActiveHostGraph, Mo as canonicalizePath, Mr as clauseIsGoverned, Mt as proofEvidenceConstraints, Na as BOUNDED_ARTIFACT_TYPES, Ni as resolveActiveProfileHostLock, No as digestStrings, Nr as clauseIsProtected, Nt as proofHostSurfacesOf, O as firstStepGuidance, Oa as evaluateMinimumHostVersion, Oi as packageRowsFromPnpmLock, On as testOutcomePredicate, Or as LEGACY_QUALIFICATION, Ot as createProofManifestV2, Pa as CERTIFICATE_VERSION, Pi as resolveDesktopProfileHostLock, Po as normalizeClause, Pr as explanationHasActionResidue, Pt as proofOperationMatches, Q as supersedeItem, Qi as acquireHostTrust, Qn as isFrozenV042RebindResponse, Qr as maskQuotedSpans, Qt as closingHint, R as SESSION_EVENT_ENVELOPE_INVALID, Ra as STOP_PROTOCOL_VERSION, Ri as DESKTOP_IDENTITY_FACTS, Rn as availableBoundaryQualifications, Ro as stripUrlCredentials, Rr as hasWorkPredicate, Rt as sessionQuery, S as gitCommandMatchesTarget, Sa as HOST_VALIDATED_VERSIONS, Si as hostLockContextFromComposedDump, Sn as isRootPauseRequest, Sr as segmentClauses, St as PROOF_PROTOCOL_VERSION, T as verifiedLinearCommitReadback, Ta as SUPPORTED_HOST_RANGE, Ti as inspectDesktopTargetGraph, Tn as latestRootInstruction, Tr as classifyTaskIntent, Tt as bindProofV2ToProjection, U as DEFAULT_DELEGATION_TOOL_NAMES, Ua as isStatefulAction, Ui as memoizedAsarFile, Un as createProjection, Ur as isExplanationScope, Ut as CLEANUP_CONDITION_RULE_COMPACT, V as projectCoreV2, Va as actionCompatible, Vi as auditDesktopInstalledImplementation, Vn as qualifyBoundary, Vr as introducesActionClause, Vt as validateProofManifestV2, W as PROTOCOL_V3_NOTICE, Wa as requestedIdentityKey, Wi as memoizedAsarIndex, Wn as confirmRebind, Wr as isInformationalFragment, Wt as CLEANUP_CONDITION_RULE_SHORT, X as legacyRecordsNeedingReview, Xa as validateActionTarget, Xi as writeDesktopRuntimeReceipt, Xn as replayRebindResult, Xr as legacyQuestionReadingIsInformational, Xt as carriesCleanupCondition, Y as deriveProjection, Ya as validateActionManifest, Yi as readDesktopTargetGraph, Yn as rebindResponse, Yr as kindOfScope, Yt as V6_ORDINARY_COMPLETION_RULE_SHORT, Z as rootLocatorFlavor, Za as RC021_RC3_HOST_PACKAGES, Zi as HostTrustError, Zn as CONFIRM_LINE_PATTERN, Zr as maskCodeSpans, Zt as cleanupConditionFor, _ as GIT_COMMAND_TEMPLATES, _a as evaluateHostCapability, _i as auditedForegroundRenderers, _n as classifyCompletionClaim, _r as environmentDefaultRepositoryTarget, _t as certifyCheckpoint, a as scanActivationInventory, aa as ACTIVE_HOST_COHORT_IDS, ai as reportingHeadGoverns, ao as resolveActivationBindingsRoot, ar as relevantEvidence, at as persistedToolResultStatus, b as createGitPrestateEnvelope, ba as hostVersionFromPackages, bi as evaluateActiveHostLock, bn as decideTurnStopping, br as extractOperation, bt as PROOF_KINDS_V2, c as validateActivationSelection, ca as DEFAULT_HOST_LOCK, ci as splitTextFragments, cn as bindingSatisfies, co as writeActivationBinding, cr as admissibleForRemoval, ct as canonicalArgvFromCommand, d as prepareActivationMigration, da as HOST_CAPABILITY_PACKAGE_GROUPS, di as COMMAND_SURFACE_MANIFEST, dn as isVerifyingCapability, do as activationJson, dr as partialFailureOf, dt as parseShellCommand, ea as parseHostTrust, ei as opensConditionLead, en as recoveryDigest, eo as activationBindingPath, er as capabilityRemedyPhrase, et as evidenceFromPersistedToolResult, f as verifyMigrationInventory, fa as HOST_COHORTS, fi as validateManifest, fn as CONTROL_RECORD_PREFIX, fo as sessionBirthIdentity, fr as removalIsComplete, g as GIT_COMMAND_MANIFEST_IDS, ga as evaluateGraphDerivedHostLock, gi as auditedDefaultWorkdirProvider, gn as assessmentOutcomePredicate, gr as classifyClause, gt as bindingIndividuallyAccepted, h as RC020_RC1_HOST_PACKAGES, ha as evaluateExternalWaitCapability, hi as auditedDefaultWorkdirHost, hn as assessmentAction, hr as captureItem, ht as segmentAuthorityBlocks, i as prepareSelectedActivationMigration, ia as ACTIVE_HOST_COHORT_ID, ii as questionHeadsClause, io as readActivationMigrationReceipt, ir as nativeFileTwoRole, it as nativeGitParentOidVerified, j as previewFirstStepInjection, ja as ACTION_MANIFEST, ji as prepareTargetHostTrust, jn as hasCurrentCertificate, jr as clauseAsksOwnQuestion, jt as proofDigestV2, k as firstStepGuidanceV6, ka as parseHostVersion, ki as prepareActiveHostTrust, kn as v6TestPredicate, kr as actionVerbMatches, kt as proofCapabilityReport, l as verifySelectedMigrationInventory, la as EXPECTED_HOST_PACKAGES, li as statefulActionsOfScope, ln as evidenceCoverage, lo as activationCanonical, lr as capabilityConsequence, lt as isRunExecutable, m as RC020_RC2_HOST_PACKAGES, ma as bindLiveGoalCapability, mi as activeRendererModule, mn as NO_PROGRESS_TURNS_BEFORE_STOP, mr as captureClause, mt as authorityCaptureCounts, n as createActivationSelection, na as registryArchiveFiles, ni as presentExplanationHead, nn as renderRecoveryPacket, no as createActivationMigrationReceipt, nr as evidenceAvailabilityReason, nt as extractToolSubject, o as selectedActivationInventory, oa as ACTIVE_HOST_LAUNCHER_VERSION, oi as restatedContentOf, oo as resolveSessionActivation, or as DEPENDENCY_FREE_ONLY_CONDITION, ot as shellReadbackOutcome, p as RC021_RC2_HOST_PACKAGES, pa as bindExecutableIdentity, pi as HostProfileError, pn as NO_PROGRESS_RECORD_PREFIX, po as validateActivationBinding, pr as removalIsPartiallyKnown, q as PROTOCOL_V6_NOTICE, qa as semanticActionFromCommand, qi as readDesktopAppRuntime, qn as proposeRebindV042, qr as isRestatement, qt as V6_ORDINARY_COMPLETION_RULE, r as isSelectedActivationReceipt, ra as registryArchiveModules, ri as qualificationOfClause, rn as v6CurrentRootBoundaries, ro as readActivationBinding, rr as itemDiagnosis, rt as isDeterministicCheck, s as validateActivationInventorySnapshot, sa as BASE_HOST_PACKAGES, si as semanticActionOfScope, so as validateActivationMigrationReceipt, sr as actionHasCertificationPath, st as withDurability, t as activationSelectionPending, ta as qualifyHostTrust, ti as opensWithDirective, tn as recoveryTitle, to as adoptActivationReceipt, tr as deriveItemDiagnosis, tt as extractTextContent, u as inspectActivationInventory, ua as GOAL_HOST_PACKAGES, ui as verbIsNegated, un as evidenceMatchesItem, uo as activationDigest, ur as capabilityFactOf, ut as parsePwshCommand, v as commitIndexSnapshotDigest, va as evaluateHostLock, vi as auditedHostImplementation, vn as currentActionBases, vr as extractArtifactPaths, vt as PROOF_CAPABILITY_MATRIX, w as revalidateGitPrestate, wa as MIN_SUPPORTED_HOST_VERSION, wi as injectActiveProfileHostLock, wn as latestAssistantText, wt as bindProofToProjection, x as executeRevalidatedGitEffect, xa as selectHostCohort, xi as evaluateConfiguredHostLock, xn as decisionBoundaryKey, xr as isInformationalMessage, xt as PROOF_MANIFEST_DOMAIN_V2, y as commitTreeSnapshotDigest, ya as evaluateToolSurfaceCapability, yi as combineHostPolicy, yn as decideTurnBoundary, yr as extractMethod, yt as PROOF_KINDS, z as SessionApiError, za as STOP_PROTOCOL_VERSION_V2, zi as DESKTOP_PROFILE_PACKAGE_NAME, zn as effectuateBoundary, zo as privateStorageToolDenial, zr as interpretClause, zt as sessionQueryV2 } from "../domain-rozEDKXB.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };