dsh-completion-guard 0.10.0 → 0.12.0

package/dist/{index-rCqdIg5B.d.ts → index-B1AGTJF6.d.ts}

@@ -14,6 +14,8 @@ declare function normalizeClause(text: string): string;
 declare function canonicalizePath(value: string): string;
 declare function sha256(text: string): string;
 declare function digestStrings(values: readonly string[]): string;
+/** Structurally remove `user:password@` from a URL; other bytes unchanged. */
+declare function stripUrlCredentials(value: string): string;
 declare function sanitizeClauseText(text: string): string;
 declare function sanitizeUrl(value: string): string;
 //#endregion
@@ -1793,8 +1795,8 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Version admission floor. Since 0.10.0 the public DSH support range is
-* `>=0.2.1-rc.2` with NO implied upper bound: every host version at or above
+/** Version admission floor. The public DSH support range is
+* `>=0.2.1-rc.3` with NO implied upper bound: every host version at or above
 * this floor (including later RCs on any tuple, stable and future releases)
 * passes VERSION ADMISSION. The floor only rises when a future Guard release
 * actively adopts a newer DSH; the runtime never raises it from a remote
@@ -1802,13 +1804,12 @@ declare function currentContractDigest(projection: GuardProjection): string;
 * metadata ignored. Version admission is one gate of several — it never
 * claims native validation of a not-yet-tested host, and the graph/byte/
 * contract audits below still run on every admission. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.2.1-rc.2";
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.1-rc.3";
 declare const SUPPORTED_HOST_RANGE: string;
 /** Versions with recorded first-hand host evidence. This is an EVIDENCE
 * ledger, NOT an admission whitelist: a missing row never refuses a
-* version-above-floor host. The 0.2.0 rows keep their historical standing
-* after the floor moved to 0.2.1-rc.2; each row records past evidence, not
-* current admission. */
+* version-above-floor host. Each row records past evidence, not current
+* artifact acceptance. */
 declare const HOST_VALIDATED_VERSIONS: readonly string[];
 /** Historical alias retained for evidence-list readers; the admission rule is
 * the floor above, never this list. */
@@ -1838,8 +1839,8 @@ interface HostVersionDecision {
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
 /** Version admission: at or above the floor by strict SemVer precedence
-* (prerelease-aware; build metadata ignored). `0.2.0-rc.2` and `0.2.1-rc.1`
-* stay below the floor; `0.2.1-rc.2`, `0.2.1`, later patch/minor RCs and
+* (prerelease-aware; build metadata ignored). `0.2.1-rc.2` and earlier
+* stay below the floor; `0.2.1-rc.3`, `0.2.1`, later patch/minor RCs and
 * releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
@@ -1885,17 +1886,18 @@ interface HostCohort {
   packages: PackageRow[];
   capabilities: CapabilityRow[];
 }
-/** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.1-rc.2";
+/** Current baseline for new installations and default fixtures. */
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.1-rc.5";
+/** rc.5 remains the default; rc.3 is also an admitted exact audited cohort. */
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
-/** Core-lock/v1 separates optional market identity from the rc.2 critical
-* graph. Historical cohorts live only in test data. Version ordering cannot
+/** Core-lock/v1 separates optional market identity from the rc.5 critical
+* graph. The rc.3 core is also admitted under its own audited identity. Version ordering cannot
 * authorize an unregistered graph, and graph identity is separate from native
 * acceptance of a Guard artifact.
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.2.1-rc.2). The cohort
+* Baseline fixture package identities (DSH 0.2.1-rc.5). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -2820,7 +2822,7 @@ interface AuditedPackageExpectation {
 /** Byte and dual-lane route audit over both graphs. Expectations are either
 * the published baseline or operator-owned, registry-acquired qualified module
 * digests. A missing digest set never authenticates unknown implementation. */
-declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[], installationGraph?: DependencyAuditGraph, profileInstallationGraph?: DependencyAuditGraph): boolean;
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[], installationGraph?: DependencyAuditGraph, profileInstallationGraph?: DependencyAuditGraph, expectationsProvided?: boolean): boolean;
 declare function activeRendererModule(nodeModulesRoot: string, name: string, providedSession?: HostAuditSession): {
   bytes: string;
   path: string;
@@ -3493,6 +3495,31 @@ declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
 * historical evidence. */
 declare const RC021_RC2_HOST_PACKAGES: PackageRow[];
 //#endregion
+//#region src/domain/rc021-rc3-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.1-rc.3 tarballs (upstream
+* 1f81c047fc48fa190a683e469daa699857e9afe8). The rc.2→rc.3 study verified that
+* every core-cohort package's executable bytes are UNCHANGED (the four rc.3
+* functional commits touch only UI/llm-route packages outside this cohort) and
+* that only manifest version/dependency fields were rewritten; Cordis remains
+* the shared 4.0.5 release in both graphs. Cohort admission is separate from
+* native platform acceptance, which remains pending for rc.3. The rc.2 rows
+* stay available in `rc021-rc2-host.ts` as a supported path. */
+declare const RC021_RC3_HOST_PACKAGES: PackageRow[];
+//#endregion
+//#region src/domain/rc021-rc5-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.1-rc.5 tarballs (upstream
+* b830ec950faba0a46dda564be3e2d854afed94f1). The rc.3→rc.5 study verified that
+* every core-cohort package's executable bytes are UNCHANGED (the rc.4/rc.5
+* functional commits touch only client-UI rendering, MCP resource gating and
+* LLM account diagnostics outside this cohort) and that only manifest
+* version/dependency fields were rewritten; dependency routing is unchanged
+* and Cordis remains the shared 4.0.5 release. Cohort admission is separate
+* from native platform acceptance. The rc.3 rows stay available in
+* `rc021-rc3-host.ts` as historical evidence. */
+declare const RC021_RC5_HOST_PACKAGES: PackageRow[];
+//#endregion
 //#region src/domain/session-activation.d.ts
 type InitialActivation = "opt-in" | "always";
 interface SessionBirthIdentity {
@@ -3614,7 +3641,7 @@ declare function verifyMigrationInventory(receipt: ActivationMigrationReceipt, i
 //#region src/domain/private-storage-guard.d.ts
 /** Bounded protection for the official file/shell tool surface. This is not
 * a sandbox for arbitrary executables or hostile same-owner plugins. */
-declare function privateStorageToolDenial(name: string, args: unknown, cwd: string, roots: readonly string[]): string | undefined;
+declare function privateStorageToolDenial(name: string, args: unknown, cwd: string | undefined, roots: readonly string[]): string | undefined;
 //#endregion
 //#region src/domain/activation-selection.d.ts
 type InventoryRow = {
@@ -3631,6 +3658,7 @@ type InventoryRow = {
 interface ActivationInventorySnapshot {
   schema: "dsh-activation-inventory/v1";
   rows: InventoryRow[];
+  physicalSha256?: string;
   sha256: string;
 }
 interface ActivationMigrationSelection {
@@ -3643,6 +3671,8 @@ interface ActivationMigrationSelection {
 * refusals. Unknown errors/list/stat failures abort; they are never exclusions. */
 declare function scanActivationInventory(persistence: ActivationInventoryPersistence, isFormatUnsupported: (error: unknown) => boolean): Promise<ActivationInventorySnapshot>;
 declare function validateActivationInventorySnapshot(value: unknown): ActivationInventorySnapshot;
+/** Bind an SDK snapshot to an independently established physical census. */
+declare function bindActivationInventoryPhysical(snapshotValue: unknown, physicalSha256: string): ActivationInventorySnapshot;
 declare function validateActivationSelection(value: unknown): ActivationMigrationSelection;
 declare function selectedActivationInventory(snapshotValue: unknown, selectionValue: unknown): SessionBirthIdentity[];
 declare function createActivationSelection(snapshotValue: unknown, include: unknown): ActivationMigrationSelection;
@@ -3654,4 +3684,36 @@ declare function prepareSelectedActivationMigration(snapshot: ActivationInventor
 declare function isSelectedActivationReceipt(receipt: ActivationMigrationReceipt): boolean;
 declare function verifySelectedMigrationInventory(receipt: ActivationMigrationReceipt, snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection): void;
 //#endregion
-export { assessmentOutcomePredicate as $, CheckpointResult as $a, SUPPORTED_EVIDENCE_ADAPTERS as $c, EXPECTED_HOST_PACKAGES as $i, inspectTargetHostGraph as $n, JobLifecycleRecord as $o, executeRevalidatedGitEffect as $r, ExecutionQualification as $s, bindProofToProjection as $t, InitialActivation as A, LATEST_TESTED_HOST_VERSION as Aa, namedActions as Ac, UnifiedItemDiagnosis as Ai, FirstStepPreviewInput as An, DeferAuthorization as Ao, HostTrustedPackage as Ar, replayRebindResult as As, closingHint as At, RC020_RC2_HOST_PACKAGES as B, AuthorityBlock as Ba, statefulActionsOfScope as Bc, PROTOCOL_V4_NOTICE as Bi, TargetHostGraph as Bn, ExpectedTransition as Bo, GitCommandAccepted as Br, ProcessFactSource as Bs, PROOF_PROTOCOL_VERSION as Bt, createActivationMigrationReceipt as C, evaluateHostLock as Ca, isQuestionScopeNeedingReview as Cc, persistedToolResultStatus as Ci, CommandSurfaceManifest as Cn, qualifyBoundary as Co, readDesktopAppRuntime as Cr, RebindProposal as Cs, RecoveryCause as Ct, resolveSessionActivation as D, HOST_VALIDATED_VERSIONS as Da, legacyQuestionReadingIsInformational as Dc, DiagnosisNextAction as Di, ClaimedMessage as Dn, BoundaryDisposition as Do, HostRebindTrust as Dr, proposeRebindV042 as Ds, V6_ORDINARY_COMPLETION_RULE_SHORT as Dt, resolveActivationBindingsRoot as E, selectHostCohort as Ea, kindOfScope as Ec, CertificationSupport as Ei, validateManifest as En, BindingActionClosure as Eo, writeDesktopRuntimeReceipt as Er, proposeRebindOutcome as Es, V6_ORDINARY_COMPLETION_RULE_COMPACT as Et, activationDigest as F, compareHostVersions as Fa, questionHeadsClause as Fc, nativeFileTwoRole as Fi, lifecyclePhase as Fn, DerivedEnvelope as Fo, registryArchiveFiles as Fr, DeclaredOperationResult as Fs, v6CurrentRootBoundaries as Ft, AssistantOutcomeObservation as G, TaskIntent as Ga, ActionSpec as Gc, legacyRecordsNeedingReview as Gi, auditedHostImplementation as Gn, GuardEvidence as Go, GitEffectRunner as Gr, capabilityConsequence as Gs, ProofKindV2 as Gt, projectSessionCoreV2 as H, AuthorityKind as Ha, ACTION_MANIFEST as Hc, PROTOCOL_V6_NOTICE as Hi, auditedDefaultWorkdirHost as Hn, GoalRef as Ho, GitCommandParseResult as Hr, RemovalOutcomeReport as Hs, ProofHostSurface as Ht, activationJson as I, evaluateMinimumHostVersion as Ia, reportingHeadGoverns as Ic, relevantEvidence as Ii, previewFirstStepInjection as In, EvidenceBinding as Io, registryArchiveModules as Ir, DependencyStatus as Is, PROOF_CAPABILITY_MATRIX as It, CurrentActionBasis as J, classifyUserInteraction as Ja, CERTIFICATE_VERSION_V2 as Jc, ACTIVE_HOST_COHORT_IDS as Ji, evaluateConfiguredHostLock as Jn, GuardItemKind as Jo, GitTargetIdentity as Jr, removalIsComplete as Js, ProofObligation as Jt, CONTROL_RECORD_PREFIX as K, UserInteractionKind as Ka, BOUNDED_ARTIFACT_TYPES as Kc, rootLocatorFlavor as Ki, combineHostPolicy as Kn, GuardIntegrity as Ko, GitPrestateCheck as Kr, capabilityFactOf as Ks, ProofManifest as Kt, sessionBirthIdentity as L, parseHostVersion as La, restatedContentOf as Lc, CAPTURE_V042_NOTICE as Li, ActiveProfileHostLock as Ln, EvidenceOutcome as Lo, GIT_COMMAND_MANIFEST_IDS as Lr, DerivedProcessFacts as Ls, PROOF_KINDS as Lt, SessionActivationRead as M, ParsedHostVersion as Ma, opensWithDirective as Mc, deriveItemDiagnosis as Mi, claimedBatchHasRealRootInput as Mn, DeriveConfig as Mo, hostTrustDigest as Mr, CapabilityGap as Ms, recoveryDigest as Mt, SessionBirthIdentity as N, SUPPORTED_HOST_RANGE as Na, presentExplanationHead as Nc, evidenceAvailabilityReason as Ni, firstStepGuidance as Nn, DeriveResult as No, parseHostTrust as Nr, CapabilityRemedy as Ns, recoveryTitle as Nt, validateActivationMigrationReceipt as O, HostVersionDecision as Oa, maskCodeSpans as Oc, Repairability as Oi, FIRST_STEP_GUIDANCE as On, BoundaryQualificationKind as Oo, HostTrustAcquisitionOptions as Or, rebindAttemptKey as Os, carriesCleanupCondition as Ot, activationCanonical as P, SUPPORTED_HOST_VERSIONS as Pa, qualificationOfClause as Pc, itemDiagnosis as Pi, firstStepGuidanceV6 as Pn, DeriveScope as Po, qualifyHostTrust as Pr, DEPENDENCY_FREE_ONLY_CONDITION as Ps, renderRecoveryPacket as Pt, assessmentAction as Q, parseConfirmationMessage as Qa, STOP_PROTOCOL_VERSION_V2 as Qc, DEFAULT_HOST_LOCK as Qi, inspectDesktopTargetGraph as Qn, HostStatus as Qo, createGitPrestateEnvelope as Qr, Executee as Qs, SessionQueryV2 as Qt, validateActivationBinding as R, satisfiesSupportedHostRange as Ra, semanticActionOfScope as Rc, DEFAULT_DELEGATION_TOOL_NAMES as Ri, AuditedPackageExpectation as Rn, EvidenceParseStatus as Ro, GIT_COMMAND_TEMPLATES as Rr, OperationAttribution as Rs, PROOF_KINDS_V2 as Rt, adoptActivationReceipt as S, evaluateHostCapability as Sa, isOpenObligation as Sc, nativeGitParentOidVerified as Si, COMMAND_SURFACE_MANIFEST as Sn, isCurrentAcceptedBoundary as So, readAsarIndex as Sr, RebindArgs as Ss, MIN_RECOVERY_CHAR_BUDGET as St, readActivationMigrationReceipt as T, hostVersionFromPackages as Ta, itemHoldsExecutionAuthority as Tc, withDurability as Ti, OperationVerbEntry as Tn, AssetObligation as To, readDesktopTargetGraph as Tr, proposeRebind as Ts, V6_ORDINARY_COMPLETION_RULE as Tt, projectCoreV2 as U, authorityCaptureCounts as Ua, ACTION_MANIFEST_VERSION as Uc, applyUpgradeEligibility as Ui, auditedDefaultWorkdirProvider as Un, GuardBoundary as Uo, GitCommandRejected as Ur, actionHasCertificationPath as Us, ProofKind as Ut, RC020_RC1_HOST_PACKAGES as V, AuthorityBlockKind as Va, verbIsNegated as Vc, PROTOCOL_V5_NOTICE as Vi, activeRendererModule as Vn, ExternalOperation as Vo, GitCommandManifest as Vr, ProcessOutcomeReason as Vs, PROOF_PROTOCOL_VERSION_V2 as Vt, supersedeItem as W, segmentAuthorityBlocks as Wa, ActionManifest as Wc, deriveProjection as Wi, auditedForegroundRenderers as Wn, GuardCheckpoint as Wo, GitEffectExecution as Wr, admissibleForRemoval as Ws, ProofKindCapability as Wt, NO_PROGRESS_TURNS_BEFORE_STOP as X, ParsedConfirmation as Xa, STATEFUL_ACTIONS as Xc, AuditedExecutable as Xi, hostLockRowsFromComposedDump as Xn, GuardOperation as Xo, commitIndexSnapshotDigest as Xr, AuthorityDisposition as Xs, ProofSurface as Xt, NO_PROGRESS_RECORD_PREFIX as Y, CONFIRM_LINE_PATTERN as Ya, SEMANTIC_ACTIONS as Yc, ACTIVE_HOST_LAUNCHER_VERSION as Yi, hostLockContextFromComposedDump as Yn, GuardItemStatus as Yo, LinearCommitReadback as Yr, removalIsPartiallyKnown as Ys, ProofObligationV2 as Yt, TurnStoppingDecision as Z, isFrozenV042RebindResponse as Za, STOP_PROTOCOL_VERSION as Zc, BASE_HOST_PACKAGES as Zi, injectActiveProfileHostLock as Zn, GuardProjection as Zo, commitTreeSnapshotDigest as Zr, DirectiveClass as Zs, SessionQuery as Zt, verifyMigrationInventory as _, HostToolSurface as _a, interpretMessage as _c, ToolSubject as _i, sha256 as _l, EvidenceFacetCoverage as _n, BoundaryRequest as _o, auditDesktopInstalledImplementation as _r, ReleaseObservedIdentity as _s, snapshotSessionEvents as _t, isSelectedActivationReceipt as a, HostAuditProvenance as aa, ScopeInterpretation as ac, CanonicalCommandSurface as ai, requestedIdentityKey as al, proofDigest as an, captureClause as ao, readActiveHostGraph as ar, TargetCaptureReasonCode as as, isRootPauseRequest as at, __activationBindingInternals as b, evaluateExternalWaitCapability as ba, isExplanationScope as bc, extractToolSubject as bi, evidenceMatchesItem as bn, availableBoundaryQualifications as bo, memoizedAsarIndex as br, BoundedSource as bs, CLEANUP_CONDITION_RULE_SHORT as bt, selectedActivationInventory as c, HostCapabilityRequest as ca, clauseAsksOwnQuestion as cc, canonicalArgvFromCommand as ci, semanticActionFromCommand as cl, proofHostSurfacesOf as cn, environmentDefaultRepositoryTarget as co, resolveInstalledHostLock as cr, TargetSourceKind as cs, latestRootInstruction as ct, verifySelectedMigrationInventory as d, HostCohortSelectionReason as da, explanationHasActionResidue as dc, parseShellCommand as di, validateActionTarget as dl, requiredSubjectsOf as dn, extractOperation as do, AsarIndex as dr, VerificationContract as ds, testOutcomePredicate as dt, ExecutableIdentity as ea, GRANTED_QUALIFICATION as ec, gitCommandMatchesTarget as ei, SemanticAction as el, bindProofV2ToProjection as en, RejectedBinding as eo, packageRowsFromActiveGraph as er, MessageCoverage as es, classifyCompletionClaim as et, privateStorageToolDenial as f, HostLockContext as fa, governedClauseRestrictsExecution as fc, goalCompletionDenial as fi, canonicalizePath as fl, scopeCoverageDigest as fn, isInformationalMessage as fo, DESKTOP_IDENTITY_FACTS as fr, WaitAuthorization as fs, v6TestPredicate as ft, prepareActivationMigration as g, HostProfileKind as ga, interpretClause as gc, ToolResultInput as gi, sanitizeUrl as gl, validateProofManifestV2 as gn, BoundaryQualification as go, DesktopTargetGraph as gr, ReleaseGateDecision as gs, V4SessionLike as gt, inspectActivationInventory as h, HostPlatform as ha, hasWorkPredicate as hc, ToolCallInput as hi, sanitizeClauseText as hl, validateProofManifest as hn, BoundaryEffectuation as ho, DesktopAppRuntime as hr, PackageRow as hs, SessionApiError as ht, createActivationSelection as i, HOST_COHORTS as ia, QualificationStatus as ic, CanonicalArgv as ii, isStatefulAction as il, proofCapabilityReport as in, ClauseSegment as io, prepareTargetHostTrust as ir, SourceSpan as is, decisionBoundaryKey as it, SessionActivationBinding as j, MIN_SUPPORTED_HOST_VERSION as ja, opensConditionLead as jc, capabilityRemedyPhrase as ji, LifecyclePhase as jn, DelegationRef as jo, acquireHostTrust as jr, CapabilityFact as js, openItems as jt, writeActivationBinding as k, HostVersionStatus as ka, maskQuotedSpans as kc, TaskKind as ki, FirstStepInjection as kn, CwdEpoch as ko, HostTrustError as kr, rebindResponse as ks, cleanupConditionFor as kt, validateActivationInventorySnapshot as l, HostCohort as la, clauseIsGoverned as lc, isRunExecutable as li, semanticActionFromText as ll, proofOperationMatches as ln, extractArtifactPaths as lo, revalidateDesktopCoreLock as lr, TargetTuple as ls, observeAssistantOutcome as lt, ActivationPriorModes as m, HostLockStatus as ma, hasQuestionScope as mc, NATIVE_GIT_ROOT_PARENT_OID as mi, normalizeClause as ml, sessionQueryV2 as mn, BOUNDARY_RECORD_PREFIX as mo, DESKTOP_RUNTIME_PACKAGE_NAME as mr, createProjection as ms, SESSION_EVENT_ENVELOPE_INVALID as mt, ActivationMigrationSelection as n, GOAL_HOST_PACKAGES as na, LEGACY_QUALIFICATION as nc, revalidateGitPrestate as ni, actionCompatible as nl, createProofManifest as nn, certifyCheckpoint as no, prepareActiveHostTrust as nr, NeedsReviewReason as ns, decideTurnBoundary as nt, prepareSelectedActivationMigration as o, HostCapabilityEvaluation as oa, actionVerbMatches as oc, ParsedShell as oi, requestedTargetAuthorizesMutation as ol, proofDigestV2 as on, captureItem as oo, resolveActiveProfileHostLock as or, TargetCaptureStatus as os, isWholeTaskCompletionClaim as ot, ActivationInventoryPersistence as p, HostLockEvaluation as pa, hasOrderedCoordination as pc, hasCurrentCertificate as pi, digestStrings as pl, sessionQuery as pn, segmentClauses as po, DESKTOP_PROFILE_PACKAGE_NAME as pr, WorkUnit as ps, SESSION_API_UNSUPPORTED as pt, CompletionDisposition as q, classifyTaskIntent as qa, CERTIFICATE_VERSION as qc, ACTIVE_HOST_COHORT_ID as qi, evaluateActiveHostLock as qn, GuardItem as qo, GitPrestateEnvelope as qr, partialFailureOf as qs, ProofManifestV2 as qt, activationSelectionPending as r, HOST_CAPABILITY_PACKAGE_GROUPS as ra, QualificationReason as rc, verifiedLinearCommitReadback as ri, boundedArtifactChoiceMatches as rl, createProofManifestV2 as rn, CaptureScope as ro, prepareDesktopHostTrust as rr, PersistenceAuthorization as rs, decideTurnStopping as rt, scanActivationInventory as s, HostCapabilityId as sa, clarifiedSpanOf as sc, ShellParseStatus as si, requestedTargetMatchesResolved as sl, proofEvidenceConstraints as sn, classifyClause as so, resolveDesktopProfileHostLock as sr, TargetSource as ss, latestAssistantText as st, ActivationInventorySnapshot as t, ExecutableIdentityBinding as ta, InterpretOptions as tc, parseGitCommandManifest as ti, StatefulAction as tl, canonicalProjection as tn, bindingIndividuallyAccepted as to, packageRowsFromPnpmLock as tr, NeedsReviewFact as ts, currentActionBases as tt, validateActivationSelection as u, HostCohortSelection as ua, clauseIsProtected as uc, parsePwshCommand as ui, validateActionManifest as ul, proofV2Rejection as un, extractMethod as uo, verifyComposedHostLockDump as ur, TargetValue as us, progressFingerprint as ut, ActivationMigrationEntry as v, bindExecutableIdentity as va, introducesActionClause as vc, evidenceFromPersistedToolResult as vi, bindingSatisfies as vn, GoalActivationState as vo, hasDesktopImporterState as vr, ReleaseOperation as vs, CLEANUP_CONDITION_RULE as vt, readActivationBinding as w, evaluateToolSurfaceCapability as wa, isRestatement as wc, shellReadbackOutcome as wi, ManifestIssue as wn, AssetInterpretationFact as wo, readDesktopDependency as wr, confirmRebind as ws, RecoveryOptions as wt, activationBindingPath as x, evaluateGraphDerivedHostLock as xa, isInformationalFragment as xc, isDeterministicCheck as xi, isVerifyingCapability as xn, effectuateBoundary as xo, readAsarFile as xr, ProposeOutcome as xs, DEFAULT_RECOVERY_CHAR_BUDGET as xt, ActivationMigrationReceipt as y, bindLiveGoalCapability as ya, isExecutableItem as yc, extractTextContent as yi, evidenceCoverage as yn, GoalBoundaryAccess as yo, memoizedAsarFile as yr, ReleaseSettlement as ys, CLEANUP_CONDITION_RULE_COMPACT as yt, RC021_RC2_HOST_PACKAGES as z, currentContractDigest as za, splitTextFragments as zc, PROTOCOL_V3_NOTICE as zi, HostProfileError as zn, EvidenceRole as zo, GitAdapterAction as zr, ProcessExitStatus as zs, PROOF_MANIFEST_DOMAIN_V2 as zt };
+//#region src/domain/activation-physical-inventory.d.ts
+/** Read-only byte fingerprints; log headers and bodies are never parsed or emitted. */
+interface ActivationPhysicalInventory {
+  sha256: string;
+  sessionSegments: string[];
+}
+type Compression = "none" | "zstd";
+/** Bound to the actual root, encoding and independently identified backend.
+* Unknown layouts and links fail closed; all generations are fingerprinted. */
+declare function captureActivationPhysicalInventory(root: string, compression: Compression, backendSha256: string): ActivationPhysicalInventory;
+declare function assertActivationPhysicalRows(physical: ActivationPhysicalInventory, rows: readonly {
+  header: unknown;
+}[]): void;
+/** Wrap the SDK seam without treating the seam itself as a physical census. */
+declare function guardActivationInventory<T extends {
+  list(): Promise<readonly {
+    header: unknown;
+  }[]>;
+}>(persistence: T, capture: () => ActivationPhysicalInventory): {
+  initial: ActivationPhysicalInventory;
+  check: () => ActivationPhysicalInventory;
+  list: () => ReturnType<T["list"]>;
+};
+/** Resolve the two official plugin export forms without trusting their shape. */
+declare function resolveActivationPersistencePlugin(module: {
+  default?: unknown;
+  apply?: unknown;
+}): unknown;
+/** Qualify the JSONL implementation by its reviewed module bytes and loader
+* shape; the release version itself is recorded, not an allowlist. */
+declare function assertActivationBackendIdentity(manifestValue: unknown, actualModules: Record<string, string>, reviewedModules: Record<string, string>): void;
+//#endregion
+export { supersedeItem as $, segmentAuthorityBlocks as $a, ActionManifest as $c, deriveProjection as $i, auditedForegroundRenderers as $n, GuardCheckpoint as $o, GitEffectExecution as $r, admissibleForRemoval as $s, ProofKindCapability as $t, createActivationMigrationReceipt as A, evaluateGraphDerivedHostLock as Aa, isInformationalFragment as Ac, isDeterministicCheck as Ai, isVerifyingCapability as An, effectuateBoundary as Ao, readAsarFile as Ar, ProposeOutcome as As, DEFAULT_RECOVERY_CHAR_BUDGET as At, SessionBirthIdentity as B, MIN_SUPPORTED_HOST_VERSION as Ba, opensConditionLead as Bc, capabilityRemedyPhrase as Bi, LifecyclePhase as Bn, DelegationRef as Bo, acquireHostTrust as Br, CapabilityFact as Bs, openItems as Bt, prepareActivationMigration as C, HostLockStatus as Ca, hasQuestionScope as Cc, NATIVE_GIT_ROOT_PARENT_OID as Ci, normalizeClause as Cl, sessionQueryV2 as Cn, BOUNDARY_RECORD_PREFIX as Co, DESKTOP_RUNTIME_PACKAGE_NAME as Cr, createProjection as Cs, SESSION_EVENT_ENVELOPE_INVALID as Ct, __activationBindingInternals as D, bindExecutableIdentity as Da, introducesActionClause as Dc, evidenceFromPersistedToolResult as Di, stripUrlCredentials as Dl, bindingSatisfies as Dn, GoalActivationState as Do, hasDesktopImporterState as Dr, ReleaseOperation as Ds, CLEANUP_CONDITION_RULE as Dt, ActivationMigrationReceipt as E, HostToolSurface as Ea, interpretMessage as Ec, ToolSubject as Ei, sha256 as El, EvidenceFacetCoverage as En, BoundaryRequest as Eo, auditDesktopInstalledImplementation as Er, ReleaseObservedIdentity as Es, snapshotSessionEvents as Et, validateActivationMigrationReceipt as F, selectHostCohort as Fa, kindOfScope as Fc, CertificationSupport as Fi, validateManifest as Fn, BindingActionClosure as Fo, writeDesktopRuntimeReceipt as Fr, proposeRebindOutcome as Fs, V6_ORDINARY_COMPLETION_RULE_COMPACT as Ft, validateActivationBinding as G, evaluateMinimumHostVersion as Ga, reportingHeadGoverns as Gc, relevantEvidence as Gi, previewFirstStepInjection as Gn, EvidenceBinding as Go, registryArchiveModules as Gr, DependencyStatus as Gs, PROOF_CAPABILITY_MATRIX as Gt, activationDigest as H, SUPPORTED_HOST_RANGE as Ha, presentExplanationHead as Hc, evidenceAvailabilityReason as Hi, firstStepGuidance as Hn, DeriveResult as Ho, parseHostTrust as Hr, CapabilityRemedy as Hs, recoveryTitle as Ht, writeActivationBinding as I, HOST_VALIDATED_VERSIONS as Ia, legacyQuestionReadingIsInformational as Ic, DiagnosisNextAction as Ii, ClaimedMessage as In, BoundaryDisposition as Io, HostRebindTrust as Ir, proposeRebindV042 as Is, V6_ORDINARY_COMPLETION_RULE_SHORT as It, RC021_RC2_HOST_PACKAGES as J, currentContractDigest as Ja, splitTextFragments as Jc, PROTOCOL_V3_NOTICE as Ji, HostProfileError as Jn, EvidenceRole as Jo, GitAdapterAction as Jr, ProcessExitStatus as Js, PROOF_MANIFEST_DOMAIN_V2 as Jt, RC021_RC5_HOST_PACKAGES as K, parseHostVersion as Ka, restatedContentOf as Kc, CAPTURE_V042_NOTICE as Ki, ActiveProfileHostLock as Kn, EvidenceOutcome as Ko, GIT_COMMAND_MANIFEST_IDS as Kr, DerivedProcessFacts as Ks, PROOF_KINDS as Kt, InitialActivation as L, HostVersionDecision as La, maskCodeSpans as Lc, Repairability as Li, FIRST_STEP_GUIDANCE as Ln, BoundaryQualificationKind as Lo, HostTrustAcquisitionOptions as Lr, rebindAttemptKey as Ls, carriesCleanupCondition as Lt, readActivationMigrationReceipt as M, evaluateHostLock as Ma, isQuestionScopeNeedingReview as Mc, persistedToolResultStatus as Mi, CommandSurfaceManifest as Mn, qualifyBoundary as Mo, readDesktopAppRuntime as Mr, RebindProposal as Ms, RecoveryCause as Mt, resolveActivationBindingsRoot as N, evaluateToolSurfaceCapability as Na, isRestatement as Nc, shellReadbackOutcome as Ni, ManifestIssue as Nn, AssetInterpretationFact as No, readDesktopDependency as Nr, confirmRebind as Ns, RecoveryOptions as Nt, activationBindingPath as O, bindLiveGoalCapability as Oa, isExecutableItem as Oc, extractTextContent as Oi, evidenceCoverage as On, GoalBoundaryAccess as Oo, memoizedAsarFile as Or, ReleaseSettlement as Os, CLEANUP_CONDITION_RULE_COMPACT as Ot, resolveSessionActivation as P, hostVersionFromPackages as Pa, itemHoldsExecutionAuthority as Pc, withDurability as Pi, OperationVerbEntry as Pn, AssetObligation as Po, readDesktopTargetGraph as Pr, proposeRebind as Ps, V6_ORDINARY_COMPLETION_RULE as Pt, projectCoreV2 as Q, authorityCaptureCounts as Qa, ACTION_MANIFEST_VERSION as Qc, applyUpgradeEligibility as Qi, auditedDefaultWorkdirProvider as Qn, GuardBoundary as Qo, GitCommandRejected as Qr, actionHasCertificationPath as Qs, ProofKind as Qt, SessionActivationBinding as R, HostVersionStatus as Ra, maskQuotedSpans as Rc, TaskKind as Ri, FirstStepInjection as Rn, CwdEpoch as Ro, HostTrustError as Rr, rebindResponse as Rs, cleanupConditionFor as Rt, inspectActivationInventory as S, HostLockEvaluation as Sa, hasOrderedCoordination as Sc, hasCurrentCertificate as Si, digestStrings as Sl, sessionQuery as Sn, segmentClauses as So, DESKTOP_PROFILE_PACKAGE_NAME as Sr, WorkUnit as Ss, SESSION_API_UNSUPPORTED as St, ActivationMigrationEntry as T, HostProfileKind as Ta, interpretClause as Tc, ToolResultInput as Ti, sanitizeUrl as Tl, validateProofManifestV2 as Tn, BoundaryQualification as To, DesktopTargetGraph as Tr, ReleaseGateDecision as Ts, V4SessionLike as Tt, activationJson as U, SUPPORTED_HOST_VERSIONS as Ua, qualificationOfClause as Uc, itemDiagnosis as Ui, firstStepGuidanceV6 as Un, DeriveScope as Uo, qualifyHostTrust as Ur, DEPENDENCY_FREE_ONLY_CONDITION as Us, renderRecoveryPacket as Ut, activationCanonical as V, ParsedHostVersion as Va, opensWithDirective as Vc, deriveItemDiagnosis as Vi, claimedBatchHasRealRootInput as Vn, DeriveConfig as Vo, hostTrustDigest as Vr, CapabilityGap as Vs, recoveryDigest as Vt, sessionBirthIdentity as W, compareHostVersions as Wa, questionHeadsClause as Wc, nativeFileTwoRole as Wi, lifecyclePhase as Wn, DerivedEnvelope as Wo, registryArchiveFiles as Wr, DeclaredOperationResult as Ws, v6CurrentRootBoundaries as Wt, RC020_RC1_HOST_PACKAGES as X, AuthorityBlockKind as Xa, verbIsNegated as Xc, PROTOCOL_V5_NOTICE as Xi, activeRendererModule as Xn, ExternalOperation as Xo, GitCommandManifest as Xr, ProcessOutcomeReason as Xs, PROOF_PROTOCOL_VERSION_V2 as Xt, RC020_RC2_HOST_PACKAGES as Y, AuthorityBlock as Ya, statefulActionsOfScope as Yc, PROTOCOL_V4_NOTICE as Yi, TargetHostGraph as Yn, ExpectedTransition as Yo, GitCommandAccepted as Yr, ProcessFactSource as Ys, PROOF_PROTOCOL_VERSION as Yt, projectSessionCoreV2 as Z, AuthorityKind as Za, ACTION_MANIFEST as Zc, PROTOCOL_V6_NOTICE as Zi, auditedDefaultWorkdirHost as Zn, GoalRef as Zo, GitCommandParseResult as Zr, RemovalOutcomeReport as Zs, ProofHostSurface as Zt, validateActivationSelection as _, HostCapabilityRequest as _a, clauseAsksOwnQuestion as _c, canonicalArgvFromCommand as _i, semanticActionFromCommand as _l, proofHostSurfacesOf as _n, environmentDefaultRepositoryTarget as _o, resolveInstalledHostLock as _r, TargetSourceKind as _s, latestRootInstruction as _t, guardActivationInventory as a, AuditedExecutable as aa, AuthorityDisposition as ac, commitIndexSnapshotDigest as ai, STATEFUL_ACTIONS as al, ProofSurface as an, ParsedConfirmation as ao, hostLockRowsFromComposedDump as ar, GuardOperation as as, NO_PROGRESS_TURNS_BEFORE_STOP as at, ActivationInventoryPersistence as b, HostCohortSelectionReason as ba, explanationHasActionResidue as bc, parseShellCommand as bi, validateActionTarget as bl, requiredSubjectsOf as bn, extractOperation as bo, AsarIndex as br, VerificationContract as bs, testOutcomePredicate as bt, ActivationMigrationSelection as c, EXPECTED_HOST_PACKAGES as ca, ExecutionQualification as cc, executeRevalidatedGitEffect as ci, SUPPORTED_EVIDENCE_ADAPTERS as cl, bindProofToProjection as cn, CheckpointResult as co, inspectTargetHostGraph as cr, JobLifecycleRecord as cs, assessmentOutcomePredicate as ct, createActivationSelection as d, GOAL_HOST_PACKAGES as da, LEGACY_QUALIFICATION as dc, revalidateGitPrestate as di, actionCompatible as dl, createProofManifest as dn, certifyCheckpoint as do, prepareActiveHostTrust as dr, NeedsReviewReason as ds, decideTurnBoundary as dt, legacyRecordsNeedingReview as ea, capabilityConsequence as ec, GitEffectRunner as ei, ActionSpec as el, ProofKindV2 as en, TaskIntent as eo, auditedHostImplementation as er, GuardEvidence as es, AssistantOutcomeObservation as et, isSelectedActivationReceipt as f, HOST_CAPABILITY_PACKAGE_GROUPS as fa, QualificationReason as fc, verifiedLinearCommitReadback as fi, boundedArtifactChoiceMatches as fl, createProofManifestV2 as fn, CaptureScope as fo, prepareDesktopHostTrust as fr, PersistenceAuthorization as fs, decideTurnStopping as ft, validateActivationInventorySnapshot as g, HostCapabilityId as ga, clarifiedSpanOf as gc, ShellParseStatus as gi, requestedTargetMatchesResolved as gl, proofEvidenceConstraints as gn, classifyClause as go, resolveDesktopProfileHostLock as gr, TargetSource as gs, latestAssistantText as gt, selectedActivationInventory as h, HostCapabilityEvaluation as ha, actionVerbMatches as hc, ParsedShell as hi, requestedTargetAuthorizesMutation as hl, proofDigestV2 as hn, captureItem as ho, resolveActiveProfileHostLock as hr, TargetCaptureStatus as hs, isWholeTaskCompletionClaim as ht, captureActivationPhysicalInventory as i, ACTIVE_HOST_LAUNCHER_VERSION as ia, removalIsPartiallyKnown as ic, LinearCommitReadback as ii, SEMANTIC_ACTIONS as il, ProofObligationV2 as in, CONFIRM_LINE_PATTERN as io, hostLockContextFromComposedDump as ir, GuardItemStatus as is, NO_PROGRESS_RECORD_PREFIX as it, readActivationBinding as j, evaluateHostCapability as ja, isOpenObligation as jc, nativeGitParentOidVerified as ji, COMMAND_SURFACE_MANIFEST as jn, isCurrentAcceptedBoundary as jo, readAsarIndex as jr, RebindArgs as js, MIN_RECOVERY_CHAR_BUDGET as jt, adoptActivationReceipt as k, evaluateExternalWaitCapability as ka, isExplanationScope as kc, extractToolSubject as ki, evidenceMatchesItem as kn, availableBoundaryQualifications as ko, memoizedAsarIndex as kr, BoundedSource as ks, CLEANUP_CONDITION_RULE_SHORT as kt, activationSelectionPending as l, ExecutableIdentity as la, GRANTED_QUALIFICATION as lc, gitCommandMatchesTarget as li, SemanticAction as ll, bindProofV2ToProjection as ln, RejectedBinding as lo, packageRowsFromActiveGraph as lr, MessageCoverage as ls, classifyCompletionClaim as lt, scanActivationInventory as m, HostAuditProvenance as ma, ScopeInterpretation as mc, CanonicalCommandSurface as mi, requestedIdentityKey as ml, proofDigest as mn, captureClause as mo, readActiveHostGraph as mr, TargetCaptureReasonCode as ms, isRootPauseRequest as mt, assertActivationBackendIdentity as n, ACTIVE_HOST_COHORT_ID as na, partialFailureOf as nc, GitPrestateEnvelope as ni, CERTIFICATE_VERSION as nl, ProofManifestV2 as nn, classifyTaskIntent as no, evaluateActiveHostLock as nr, GuardItem as ns, CompletionDisposition as nt, resolveActivationPersistencePlugin as o, BASE_HOST_PACKAGES as oa, DirectiveClass as oc, commitTreeSnapshotDigest as oi, STOP_PROTOCOL_VERSION as ol, SessionQuery as on, isFrozenV042RebindResponse as oo, injectActiveProfileHostLock as or, GuardProjection as os, TurnStoppingDecision as ot, prepareSelectedActivationMigration as p, HOST_COHORTS as pa, QualificationStatus as pc, CanonicalArgv as pi, isStatefulAction as pl, proofCapabilityReport as pn, ClauseSegment as po, prepareTargetHostTrust as pr, SourceSpan as ps, decisionBoundaryKey as pt, RC021_RC3_HOST_PACKAGES as q, satisfiesSupportedHostRange as qa, semanticActionOfScope as qc, DEFAULT_DELEGATION_TOOL_NAMES as qi, AuditedPackageExpectation as qn, EvidenceParseStatus as qo, GIT_COMMAND_TEMPLATES as qr, OperationAttribution as qs, PROOF_KINDS_V2 as qt, assertActivationPhysicalRows as r, ACTIVE_HOST_COHORT_IDS as ra, removalIsComplete as rc, GitTargetIdentity as ri, CERTIFICATE_VERSION_V2 as rl, ProofObligation as rn, classifyUserInteraction as ro, evaluateConfiguredHostLock as rr, GuardItemKind as rs, CurrentActionBasis as rt, ActivationInventorySnapshot as s, DEFAULT_HOST_LOCK as sa, Executee as sc, createGitPrestateEnvelope as si, STOP_PROTOCOL_VERSION_V2 as sl, SessionQueryV2 as sn, parseConfirmationMessage as so, inspectDesktopTargetGraph as sr, HostStatus as ss, assessmentAction as st, ActivationPhysicalInventory as t, rootLocatorFlavor as ta, capabilityFactOf as tc, GitPrestateCheck as ti, BOUNDED_ARTIFACT_TYPES as tl, ProofManifest as tn, UserInteractionKind as to, combineHostPolicy as tr, GuardIntegrity as ts, CONTROL_RECORD_PREFIX as tt, bindActivationInventoryPhysical as u, ExecutableIdentityBinding as ua, InterpretOptions as uc, parseGitCommandManifest as ui, StatefulAction as ul, canonicalProjection as un, bindingIndividuallyAccepted as uo, packageRowsFromPnpmLock as ur, NeedsReviewFact as us, currentActionBases as ut, verifySelectedMigrationInventory as v, HostCohort as va, clauseIsGoverned as vc, isRunExecutable as vi, semanticActionFromText as vl, proofOperationMatches as vn, extractArtifactPaths as vo, revalidateDesktopCoreLock as vr, TargetTuple as vs, observeAssistantOutcome as vt, verifyMigrationInventory as w, HostPlatform as wa, hasWorkPredicate as wc, ToolCallInput as wi, sanitizeClauseText as wl, validateProofManifest as wn, BoundaryEffectuation as wo, DesktopAppRuntime as wr, PackageRow as ws, SessionApiError as wt, ActivationPriorModes as x, HostLockContext as xa, governedClauseRestrictsExecution as xc, goalCompletionDenial as xi, canonicalizePath as xl, scopeCoverageDigest as xn, isInformationalMessage as xo, DESKTOP_IDENTITY_FACTS as xr, WaitAuthorization as xs, v6TestPredicate as xt, privateStorageToolDenial as y, HostCohortSelection as ya, clauseIsProtected as yc, parsePwshCommand as yi, validateActionManifest as yl, proofV2Rejection as yn, extractMethod as yo, verifyComposedHostLockDump as yr, TargetValue as ys, progressFingerprint as yt, SessionActivationRead as z, LATEST_TESTED_HOST_VERSION as za, namedActions as zc, UnifiedItemDiagnosis as zi, FirstStepPreviewInput as zn, DeferAuthorization as zo, HostTrustedPackage as zr, replayRebindResult as zs, closingHint as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as assessmentOutcomePredicate, $a as CheckpointResult, $c as SUPPORTED_EVIDENCE_ADAPTERS, $i as EXPECTED_HOST_PACKAGES, $n as inspectTargetHostGraph, $o as JobLifecycleRecord, $r as executeRevalidatedGitEffect, $s as ExecutionQualification, $t as bindProofToProjection, A as InitialActivation, Aa as LATEST_TESTED_HOST_VERSION, Ac as namedActions, Ai as UnifiedItemDiagnosis, An as FirstStepPreviewInput, Ao as DeferAuthorization, Ar as HostTrustedPackage, As as replayRebindResult, At as closingHint, B as RC020_RC2_HOST_PACKAGES, Ba as AuthorityBlock, Bc as statefulActionsOfScope, Bi as PROTOCOL_V4_NOTICE, Bn as TargetHostGraph, Bo as ExpectedTransition, Br as GitCommandAccepted, Bs as ProcessFactSource, Bt as PROOF_PROTOCOL_VERSION, C as createActivationMigrationReceipt, Ca as evaluateHostLock, Cc as isQuestionScopeNeedingReview, Ci as persistedToolResultStatus, Cn as CommandSurfaceManifest, Co as qualifyBoundary, Cr as readDesktopAppRuntime, Cs as RebindProposal, Ct as RecoveryCause, D as resolveSessionActivation, Da as HOST_VALIDATED_VERSIONS, Dc as legacyQuestionReadingIsInformational, Di as DiagnosisNextAction, Dn as ClaimedMessage, Do as BoundaryDisposition, Dr as HostRebindTrust, Ds as proposeRebindV042, Dt as V6_ORDINARY_COMPLETION_RULE_SHORT, E as resolveActivationBindingsRoot, Ea as selectHostCohort, Ec as kindOfScope, Ei as CertificationSupport, En as validateManifest, Eo as BindingActionClosure, Er as writeDesktopRuntimeReceipt, Es as proposeRebindOutcome, Et as V6_ORDINARY_COMPLETION_RULE_COMPACT, F as activationDigest, Fa as compareHostVersions, Fc as questionHeadsClause, Fi as nativeFileTwoRole, Fn as lifecyclePhase, Fo as DerivedEnvelope, Fr as registryArchiveFiles, Fs as DeclaredOperationResult, Ft as v6CurrentRootBoundaries, G as AssistantOutcomeObservation, Ga as TaskIntent, Gc as ActionSpec, Gi as legacyRecordsNeedingReview, Gn as auditedHostImplementation, Go as GuardEvidence, Gr as GitEffectRunner, Gs as capabilityConsequence, Gt as ProofKindV2, H as projectSessionCoreV2, Ha as AuthorityKind, Hc as ACTION_MANIFEST, Hi as PROTOCOL_V6_NOTICE, Hn as auditedDefaultWorkdirHost, Ho as GoalRef, Hr as GitCommandParseResult, Hs as RemovalOutcomeReport, Ht as ProofHostSurface, I as activationJson, Ia as evaluateMinimumHostVersion, Ic as reportingHeadGoverns, Ii as relevantEvidence, In as previewFirstStepInjection, Io as EvidenceBinding, Ir as registryArchiveModules, Is as DependencyStatus, It as PROOF_CAPABILITY_MATRIX, J as CurrentActionBasis, Ja as classifyUserInteraction, Jc as CERTIFICATE_VERSION_V2, Ji as ACTIVE_HOST_COHORT_IDS, Jn as evaluateConfiguredHostLock, Jo as GuardItemKind, Jr as GitTargetIdentity, Js as removalIsComplete, Jt as ProofObligation, K as CONTROL_RECORD_PREFIX, Ka as UserInteractionKind, Kc as BOUNDED_ARTIFACT_TYPES, Ki as rootLocatorFlavor, Kn as combineHostPolicy, Ko as GuardIntegrity, Kr as GitPrestateCheck, Ks as capabilityFactOf, Kt as ProofManifest, L as sessionBirthIdentity, La as parseHostVersion, Lc as restatedContentOf, Li as CAPTURE_V042_NOTICE, Ln as ActiveProfileHostLock, Lo as EvidenceOutcome, Lr as GIT_COMMAND_MANIFEST_IDS, Ls as DerivedProcessFacts, Lt as PROOF_KINDS, M as SessionActivationRead, Ma as ParsedHostVersion, Mc as opensWithDirective, Mi as deriveItemDiagnosis, Mn as claimedBatchHasRealRootInput, Mo as DeriveConfig, Mr as hostTrustDigest, Ms as CapabilityGap, Mt as recoveryDigest, N as SessionBirthIdentity, Na as SUPPORTED_HOST_RANGE, Nc as presentExplanationHead, Ni as evidenceAvailabilityReason, Nn as firstStepGuidance, No as DeriveResult, Nr as parseHostTrust, Ns as CapabilityRemedy, Nt as recoveryTitle, O as validateActivationMigrationReceipt, Oa as HostVersionDecision, Oc as maskCodeSpans, Oi as Repairability, On as FIRST_STEP_GUIDANCE, Oo as BoundaryQualificationKind, Or as HostTrustAcquisitionOptions, Os as rebindAttemptKey, Ot as carriesCleanupCondition, P as activationCanonical, Pa as SUPPORTED_HOST_VERSIONS, Pc as qualificationOfClause, Pi as itemDiagnosis, Pn as firstStepGuidanceV6, Po as DeriveScope, Pr as qualifyHostTrust, Ps as DEPENDENCY_FREE_ONLY_CONDITION, Pt as renderRecoveryPacket, Q as assessmentAction, Qa as parseConfirmationMessage, Qc as STOP_PROTOCOL_VERSION_V2, Qi as DEFAULT_HOST_LOCK, Qn as inspectDesktopTargetGraph, Qo as HostStatus, Qr as createGitPrestateEnvelope, Qs as Executee, Qt as SessionQueryV2, R as validateActivationBinding, Ra as satisfiesSupportedHostRange, Rc as semanticActionOfScope, Ri as DEFAULT_DELEGATION_TOOL_NAMES, Rn as AuditedPackageExpectation, Ro as EvidenceParseStatus, Rr as GIT_COMMAND_TEMPLATES, Rs as OperationAttribution, Rt as PROOF_KINDS_V2, S as adoptActivationReceipt, Sa as evaluateHostCapability, Sc as isOpenObligation, Si as nativeGitParentOidVerified, Sn as COMMAND_SURFACE_MANIFEST, So as isCurrentAcceptedBoundary, Sr as readAsarIndex, Ss as RebindArgs, St as MIN_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as hostVersionFromPackages, Tc as itemHoldsExecutionAuthority, Ti as withDurability, Tn as OperationVerbEntry, To as AssetObligation, Tr as readDesktopTargetGraph, Ts as proposeRebind, Tt as V6_ORDINARY_COMPLETION_RULE, U as projectCoreV2, Ua as authorityCaptureCounts, Uc as ACTION_MANIFEST_VERSION, Ui as applyUpgradeEligibility, Un as auditedDefaultWorkdirProvider, Uo as GuardBoundary, Ur as GitCommandRejected, Us as actionHasCertificationPath, Ut as ProofKind, V as RC020_RC1_HOST_PACKAGES, Va as AuthorityBlockKind, Vc as verbIsNegated, Vi as PROTOCOL_V5_NOTICE, Vn as activeRendererModule, Vo as ExternalOperation, Vr as GitCommandManifest, Vs as ProcessOutcomeReason, Vt as PROOF_PROTOCOL_VERSION_V2, W as supersedeItem, Wa as segmentAuthorityBlocks, Wc as ActionManifest, Wi as deriveProjection, Wn as auditedForegroundRenderers, Wo as GuardCheckpoint, Wr as GitEffectExecution, Ws as admissibleForRemoval, Wt as ProofKindCapability, X as NO_PROGRESS_TURNS_BEFORE_STOP, Xa as ParsedConfirmation, Xc as STATEFUL_ACTIONS, Xi as AuditedExecutable, Xn as hostLockRowsFromComposedDump, Xo as GuardOperation, Xr as commitIndexSnapshotDigest, Xs as AuthorityDisposition, Xt as ProofSurface, Y as NO_PROGRESS_RECORD_PREFIX, Ya as CONFIRM_LINE_PATTERN, Yc as SEMANTIC_ACTIONS, Yi as ACTIVE_HOST_LAUNCHER_VERSION, Yn as hostLockContextFromComposedDump, Yo as GuardItemStatus, Yr as LinearCommitReadback, Ys as removalIsPartiallyKnown, Yt as ProofObligationV2, Z as TurnStoppingDecision, Za as isFrozenV042RebindResponse, Zc as STOP_PROTOCOL_VERSION, Zi as BASE_HOST_PACKAGES, Zn as injectActiveProfileHostLock, Zo as GuardProjection, Zr as commitTreeSnapshotDigest, Zs as DirectiveClass, Zt as SessionQuery, _ as verifyMigrationInventory, _a as HostToolSurface, _c as interpretMessage, _i as ToolSubject, _l as sha256, _n as EvidenceFacetCoverage, _o as BoundaryRequest, _r as auditDesktopInstalledImplementation, _s as ReleaseObservedIdentity, _t as snapshotSessionEvents, a as isSelectedActivationReceipt, aa as HostAuditProvenance, ac as ScopeInterpretation, ai as CanonicalCommandSurface, al as requestedIdentityKey, an as proofDigest, ao as captureClause, ar as readActiveHostGraph, as as TargetCaptureReasonCode, at as isRootPauseRequest, b as __activationBindingInternals, ba as evaluateExternalWaitCapability, bc as isExplanationScope, bi as extractToolSubject, bn as evidenceMatchesItem, bo as availableBoundaryQualifications, br as memoizedAsarIndex, bs as BoundedSource, bt as CLEANUP_CONDITION_RULE_SHORT, c as selectedActivationInventory, ca as HostCapabilityRequest, cc as clauseAsksOwnQuestion, ci as canonicalArgvFromCommand, cl as semanticActionFromCommand, cn as proofHostSurfacesOf, co as environmentDefaultRepositoryTarget, cr as resolveInstalledHostLock, cs as TargetSourceKind, ct as latestRootInstruction, d as verifySelectedMigrationInventory, da as HostCohortSelectionReason, dc as explanationHasActionResidue, di as parseShellCommand, dl as validateActionTarget, dn as requiredSubjectsOf, do as extractOperation, dr as AsarIndex, ds as VerificationContract, dt as testOutcomePredicate, ea as ExecutableIdentity, ec as GRANTED_QUALIFICATION, ei as gitCommandMatchesTarget, el as SemanticAction, en as bindProofV2ToProjection, eo as RejectedBinding, er as packageRowsFromActiveGraph, es as MessageCoverage, et as classifyCompletionClaim, f as privateStorageToolDenial, fa as HostLockContext, fc as governedClauseRestrictsExecution, fi as goalCompletionDenial, fl as canonicalizePath, fn as scopeCoverageDigest, fo as isInformationalMessage, fr as DESKTOP_IDENTITY_FACTS, fs as WaitAuthorization, ft as v6TestPredicate, g as prepareActivationMigration, ga as HostProfileKind, gc as interpretClause, gi as ToolResultInput, gl as sanitizeUrl, gn as validateProofManifestV2, go as BoundaryQualification, gr as DesktopTargetGraph, gs as ReleaseGateDecision, gt as V4SessionLike, h as inspectActivationInventory, ha as HostPlatform, hc as hasWorkPredicate, hi as ToolCallInput, hl as sanitizeClauseText, hn as validateProofManifest, ho as BoundaryEffectuation, hr as DesktopAppRuntime, hs as PackageRow, ht as SessionApiError, i as createActivationSelection, ia as HOST_COHORTS, ic as QualificationStatus, ii as CanonicalArgv, il as isStatefulAction, in as proofCapabilityReport, io as ClauseSegment, ir as prepareTargetHostTrust, is as SourceSpan, it as decisionBoundaryKey, j as SessionActivationBinding, ja as MIN_SUPPORTED_HOST_VERSION, jc as opensConditionLead, ji as capabilityRemedyPhrase, jn as LifecyclePhase, jo as DelegationRef, jr as acquireHostTrust, js as CapabilityFact, jt as openItems, k as writeActivationBinding, ka as HostVersionStatus, kc as maskQuotedSpans, ki as TaskKind, kn as FirstStepInjection, ko as CwdEpoch, kr as HostTrustError, ks as rebindResponse, kt as cleanupConditionFor, l as validateActivationInventorySnapshot, la as HostCohort, lc as clauseIsGoverned, li as isRunExecutable, ll as semanticActionFromText, ln as proofOperationMatches, lo as extractArtifactPaths, lr as revalidateDesktopCoreLock, ls as TargetTuple, lt as observeAssistantOutcome, m as ActivationPriorModes, ma as HostLockStatus, mc as hasQuestionScope, mi as NATIVE_GIT_ROOT_PARENT_OID, ml as normalizeClause, mn as sessionQueryV2, mo as BOUNDARY_RECORD_PREFIX, mr as DESKTOP_RUNTIME_PACKAGE_NAME, ms as createProjection, mt as SESSION_EVENT_ENVELOPE_INVALID, n as ActivationMigrationSelection, na as GOAL_HOST_PACKAGES, nc as LEGACY_QUALIFICATION, ni as revalidateGitPrestate, nl as actionCompatible, nn as createProofManifest, no as certifyCheckpoint, nr as prepareActiveHostTrust, ns as NeedsReviewReason, nt as decideTurnBoundary, o as prepareSelectedActivationMigration, oa as HostCapabilityEvaluation, oc as actionVerbMatches, oi as ParsedShell, ol as requestedTargetAuthorizesMutation, on as proofDigestV2, oo as captureItem, or as resolveActiveProfileHostLock, os as TargetCaptureStatus, ot as isWholeTaskCompletionClaim, p as ActivationInventoryPersistence, pa as HostLockEvaluation, pc as hasOrderedCoordination, pi as hasCurrentCertificate, pl as digestStrings, pn as sessionQuery, po as segmentClauses, pr as DESKTOP_PROFILE_PACKAGE_NAME, ps as WorkUnit, pt as SESSION_API_UNSUPPORTED, q as CompletionDisposition, qa as classifyTaskIntent, qc as CERTIFICATE_VERSION, qi as ACTIVE_HOST_COHORT_ID, qn as evaluateActiveHostLock, qo as GuardItem, qr as GitPrestateEnvelope, qs as partialFailureOf, qt as ProofManifestV2, r as activationSelectionPending, ra as HOST_CAPABILITY_PACKAGE_GROUPS, rc as QualificationReason, ri as verifiedLinearCommitReadback, rl as boundedArtifactChoiceMatches, rn as createProofManifestV2, ro as CaptureScope, rr as prepareDesktopHostTrust, rs as PersistenceAuthorization, rt as decideTurnStopping, s as scanActivationInventory, sa as HostCapabilityId, sc as clarifiedSpanOf, si as ShellParseStatus, sl as requestedTargetMatchesResolved, sn as proofEvidenceConstraints, so as classifyClause, sr as resolveDesktopProfileHostLock, ss as TargetSource, st as latestAssistantText, t as ActivationInventorySnapshot, ta as ExecutableIdentityBinding, tc as InterpretOptions, ti as parseGitCommandManifest, tl as StatefulAction, tn as canonicalProjection, to as bindingIndividuallyAccepted, tr as packageRowsFromPnpmLock, ts as NeedsReviewFact, tt as currentActionBases, u as validateActivationSelection, ua as HostCohortSelection, uc as clauseIsProtected, ui as parsePwshCommand, ul as validateActionManifest, un as proofV2Rejection, uo as extractMethod, ur as verifyComposedHostLockDump, us as TargetValue, ut as progressFingerprint, v as ActivationMigrationEntry, va as bindExecutableIdentity, vc as introducesActionClause, vi as evidenceFromPersistedToolResult, vn as bindingSatisfies, vo as GoalActivationState, vr as hasDesktopImporterState, vs as ReleaseOperation, vt as CLEANUP_CONDITION_RULE, w as readActivationBinding, wa as evaluateToolSurfaceCapability, wc as isRestatement, wi as shellReadbackOutcome, wn as ManifestIssue, wo as AssetInterpretationFact, wr as readDesktopDependency, ws as confirmRebind, wt as RecoveryOptions, x as activationBindingPath, xa as evaluateGraphDerivedHostLock, xc as isInformationalFragment, xi as isDeterministicCheck, xn as isVerifyingCapability, xo as effectuateBoundary, xr as readAsarFile, xs as ProposeOutcome, xt as DEFAULT_RECOVERY_CHAR_BUDGET, y as ActivationMigrationReceipt, ya as bindLiveGoalCapability, yc as isExecutableItem, yi as extractTextContent, yn as evidenceCoverage, yo as GoalBoundaryAccess, yr as memoizedAsarFile, ys as ReleaseSettlement, yt as CLEANUP_CONDITION_RULE_COMPACT, z as RC021_RC2_HOST_PACKAGES, za as currentContractDigest, zc as splitTextFragments, zi as PROTOCOL_V3_NOTICE, zn as HostProfileError, zo as EvidenceRole, zr as GitAdapterAction, zs as ProcessExitStatus, zt as PROOF_MANIFEST_DOMAIN_V2 } from "./index-rCqdIg5B.js";
+import { $ as supersedeItem, $a as segmentAuthorityBlocks, $c as ActionManifest, $i as deriveProjection, $n as auditedForegroundRenderers, $o as GuardCheckpoint, $r as GitEffectExecution, $s as admissibleForRemoval, $t as ProofKindCapability, A as createActivationMigrationReceipt, Aa as evaluateGraphDerivedHostLock, Ac as isInformationalFragment, Ai as isDeterministicCheck, An as isVerifyingCapability, Ao as effectuateBoundary, Ar as readAsarFile, As as ProposeOutcome, At as DEFAULT_RECOVERY_CHAR_BUDGET, B as SessionBirthIdentity, Ba as MIN_SUPPORTED_HOST_VERSION, Bc as opensConditionLead, Bi as capabilityRemedyPhrase, Bn as LifecyclePhase, Bo as DelegationRef, Br as acquireHostTrust, Bs as CapabilityFact, Bt as openItems, C as prepareActivationMigration, Ca as HostLockStatus, Cc as hasQuestionScope, Ci as NATIVE_GIT_ROOT_PARENT_OID, Cl as normalizeClause, Cn as sessionQueryV2, Co as BOUNDARY_RECORD_PREFIX, Cr as DESKTOP_RUNTIME_PACKAGE_NAME, Cs as createProjection, Ct as SESSION_EVENT_ENVELOPE_INVALID, D as __activationBindingInternals, Da as bindExecutableIdentity, Dc as introducesActionClause, Di as evidenceFromPersistedToolResult, Dl as stripUrlCredentials, Dn as bindingSatisfies, Do as GoalActivationState, Dr as hasDesktopImporterState, Ds as ReleaseOperation, Dt as CLEANUP_CONDITION_RULE, E as ActivationMigrationReceipt, Ea as HostToolSurface, Ec as interpretMessage, Ei as ToolSubject, El as sha256, En as EvidenceFacetCoverage, Eo as BoundaryRequest, Er as auditDesktopInstalledImplementation, Es as ReleaseObservedIdentity, Et as snapshotSessionEvents, F as validateActivationMigrationReceipt, Fa as selectHostCohort, Fc as kindOfScope, Fi as CertificationSupport, Fn as validateManifest, Fo as BindingActionClosure, Fr as writeDesktopRuntimeReceipt, Fs as proposeRebindOutcome, Ft as V6_ORDINARY_COMPLETION_RULE_COMPACT, G as validateActivationBinding, Ga as evaluateMinimumHostVersion, Gc as reportingHeadGoverns, Gi as relevantEvidence, Gn as previewFirstStepInjection, Go as EvidenceBinding, Gr as registryArchiveModules, Gs as DependencyStatus, Gt as PROOF_CAPABILITY_MATRIX, H as activationDigest, Ha as SUPPORTED_HOST_RANGE, Hc as presentExplanationHead, Hi as evidenceAvailabilityReason, Hn as firstStepGuidance, Ho as DeriveResult, Hr as parseHostTrust, Hs as CapabilityRemedy, Ht as recoveryTitle, I as writeActivationBinding, Ia as HOST_VALIDATED_VERSIONS, Ic as legacyQuestionReadingIsInformational, Ii as DiagnosisNextAction, In as ClaimedMessage, Io as BoundaryDisposition, Ir as HostRebindTrust, Is as proposeRebindV042, It as V6_ORDINARY_COMPLETION_RULE_SHORT, J as RC021_RC2_HOST_PACKAGES, Ja as currentContractDigest, Jc as splitTextFragments, Ji as PROTOCOL_V3_NOTICE, Jn as HostProfileError, Jo as EvidenceRole, Jr as GitAdapterAction, Js as ProcessExitStatus, Jt as PROOF_MANIFEST_DOMAIN_V2, K as RC021_RC5_HOST_PACKAGES, Ka as parseHostVersion, Kc as restatedContentOf, Ki as CAPTURE_V042_NOTICE, Kn as ActiveProfileHostLock, Ko as EvidenceOutcome, Kr as GIT_COMMAND_MANIFEST_IDS, Ks as DerivedProcessFacts, Kt as PROOF_KINDS, L as InitialActivation, La as HostVersionDecision, Lc as maskCodeSpans, Li as Repairability, Ln as FIRST_STEP_GUIDANCE, Lo as BoundaryQualificationKind, Lr as HostTrustAcquisitionOptions, Ls as rebindAttemptKey, Lt as carriesCleanupCondition, M as readActivationMigrationReceipt, Ma as evaluateHostLock, Mc as isQuestionScopeNeedingReview, Mi as persistedToolResultStatus, Mn as CommandSurfaceManifest, Mo as qualifyBoundary, Mr as readDesktopAppRuntime, Ms as RebindProposal, Mt as RecoveryCause, N as resolveActivationBindingsRoot, Na as evaluateToolSurfaceCapability, Nc as isRestatement, Ni as shellReadbackOutcome, Nn as ManifestIssue, No as AssetInterpretationFact, Nr as readDesktopDependency, Ns as confirmRebind, Nt as RecoveryOptions, O as activationBindingPath, Oa as bindLiveGoalCapability, Oc as isExecutableItem, Oi as extractTextContent, On as evidenceCoverage, Oo as GoalBoundaryAccess, Or as memoizedAsarFile, Os as ReleaseSettlement, Ot as CLEANUP_CONDITION_RULE_COMPACT, P as resolveSessionActivation, Pa as hostVersionFromPackages, Pc as itemHoldsExecutionAuthority, Pi as withDurability, Pn as OperationVerbEntry, Po as AssetObligation, Pr as readDesktopTargetGraph, Ps as proposeRebind, Pt as V6_ORDINARY_COMPLETION_RULE, Q as projectCoreV2, Qa as authorityCaptureCounts, Qc as ACTION_MANIFEST_VERSION, Qi as applyUpgradeEligibility, Qn as auditedDefaultWorkdirProvider, Qo as GuardBoundary, Qr as GitCommandRejected, Qs as actionHasCertificationPath, Qt as ProofKind, R as SessionActivationBinding, Ra as HostVersionStatus, Rc as maskQuotedSpans, Ri as TaskKind, Rn as FirstStepInjection, Ro as CwdEpoch, Rr as HostTrustError, Rs as rebindResponse, Rt as cleanupConditionFor, S as inspectActivationInventory, Sa as HostLockEvaluation, Sc as hasOrderedCoordination, Si as hasCurrentCertificate, Sl as digestStrings, Sn as sessionQuery, So as segmentClauses, Sr as DESKTOP_PROFILE_PACKAGE_NAME, Ss as WorkUnit, St as SESSION_API_UNSUPPORTED, T as ActivationMigrationEntry, Ta as HostProfileKind, Tc as interpretClause, Ti as ToolResultInput, Tl as sanitizeUrl, Tn as validateProofManifestV2, To as BoundaryQualification, Tr as DesktopTargetGraph, Ts as ReleaseGateDecision, Tt as V4SessionLike, U as activationJson, Ua as SUPPORTED_HOST_VERSIONS, Uc as qualificationOfClause, Ui as itemDiagnosis, Un as firstStepGuidanceV6, Uo as DeriveScope, Ur as qualifyHostTrust, Us as DEPENDENCY_FREE_ONLY_CONDITION, Ut as renderRecoveryPacket, V as activationCanonical, Va as ParsedHostVersion, Vc as opensWithDirective, Vi as deriveItemDiagnosis, Vn as claimedBatchHasRealRootInput, Vo as DeriveConfig, Vr as hostTrustDigest, Vs as CapabilityGap, Vt as recoveryDigest, W as sessionBirthIdentity, Wa as compareHostVersions, Wc as questionHeadsClause, Wi as nativeFileTwoRole, Wn as lifecyclePhase, Wo as DerivedEnvelope, Wr as registryArchiveFiles, Ws as DeclaredOperationResult, Wt as v6CurrentRootBoundaries, X as RC020_RC1_HOST_PACKAGES, Xa as AuthorityBlockKind, Xc as verbIsNegated, Xi as PROTOCOL_V5_NOTICE, Xn as activeRendererModule, Xo as ExternalOperation, Xr as GitCommandManifest, Xs as ProcessOutcomeReason, Xt as PROOF_PROTOCOL_VERSION_V2, Y as RC020_RC2_HOST_PACKAGES, Ya as AuthorityBlock, Yc as statefulActionsOfScope, Yi as PROTOCOL_V4_NOTICE, Yn as TargetHostGraph, Yo as ExpectedTransition, Yr as GitCommandAccepted, Ys as ProcessFactSource, Yt as PROOF_PROTOCOL_VERSION, Z as projectSessionCoreV2, Za as AuthorityKind, Zc as ACTION_MANIFEST, Zi as PROTOCOL_V6_NOTICE, Zn as auditedDefaultWorkdirHost, Zo as GoalRef, Zr as GitCommandParseResult, Zs as RemovalOutcomeReport, Zt as ProofHostSurface, _ as validateActivationSelection, _a as HostCapabilityRequest, _c as clauseAsksOwnQuestion, _i as canonicalArgvFromCommand, _l as semanticActionFromCommand, _n as proofHostSurfacesOf, _o as environmentDefaultRepositoryTarget, _r as resolveInstalledHostLock, _s as TargetSourceKind, _t as latestRootInstruction, a as guardActivationInventory, aa as AuditedExecutable, ac as AuthorityDisposition, ai as commitIndexSnapshotDigest, al as STATEFUL_ACTIONS, an as ProofSurface, ao as ParsedConfirmation, ar as hostLockRowsFromComposedDump, as as GuardOperation, at as NO_PROGRESS_TURNS_BEFORE_STOP, b as ActivationInventoryPersistence, ba as HostCohortSelectionReason, bc as explanationHasActionResidue, bi as parseShellCommand, bl as validateActionTarget, bn as requiredSubjectsOf, bo as extractOperation, br as AsarIndex, bs as VerificationContract, bt as testOutcomePredicate, c as ActivationMigrationSelection, ca as EXPECTED_HOST_PACKAGES, cc as ExecutionQualification, ci as executeRevalidatedGitEffect, cl as SUPPORTED_EVIDENCE_ADAPTERS, cn as bindProofToProjection, co as CheckpointResult, cr as inspectTargetHostGraph, cs as JobLifecycleRecord, ct as assessmentOutcomePredicate, d as createActivationSelection, da as GOAL_HOST_PACKAGES, dc as LEGACY_QUALIFICATION, di as revalidateGitPrestate, dl as actionCompatible, dn as createProofManifest, do as certifyCheckpoint, dr as prepareActiveHostTrust, ds as NeedsReviewReason, dt as decideTurnBoundary, ea as legacyRecordsNeedingReview, ec as capabilityConsequence, ei as GitEffectRunner, el as ActionSpec, en as ProofKindV2, eo as TaskIntent, er as auditedHostImplementation, es as GuardEvidence, et as AssistantOutcomeObservation, f as isSelectedActivationReceipt, fa as HOST_CAPABILITY_PACKAGE_GROUPS, fc as QualificationReason, fi as verifiedLinearCommitReadback, fl as boundedArtifactChoiceMatches, fn as createProofManifestV2, fo as CaptureScope, fr as prepareDesktopHostTrust, fs as PersistenceAuthorization, ft as decideTurnStopping, g as validateActivationInventorySnapshot, ga as HostCapabilityId, gc as clarifiedSpanOf, gi as ShellParseStatus, gl as requestedTargetMatchesResolved, gn as proofEvidenceConstraints, go as classifyClause, gr as resolveDesktopProfileHostLock, gs as TargetSource, gt as latestAssistantText, h as selectedActivationInventory, ha as HostCapabilityEvaluation, hc as actionVerbMatches, hi as ParsedShell, hl as requestedTargetAuthorizesMutation, hn as proofDigestV2, ho as captureItem, hr as resolveActiveProfileHostLock, hs as TargetCaptureStatus, ht as isWholeTaskCompletionClaim, i as captureActivationPhysicalInventory, ia as ACTIVE_HOST_LAUNCHER_VERSION, ic as removalIsPartiallyKnown, ii as LinearCommitReadback, il as SEMANTIC_ACTIONS, in as ProofObligationV2, io as CONFIRM_LINE_PATTERN, ir as hostLockContextFromComposedDump, is as GuardItemStatus, it as NO_PROGRESS_RECORD_PREFIX, j as readActivationBinding, ja as evaluateHostCapability, jc as isOpenObligation, ji as nativeGitParentOidVerified, jn as COMMAND_SURFACE_MANIFEST, jo as isCurrentAcceptedBoundary, jr as readAsarIndex, js as RebindArgs, jt as MIN_RECOVERY_CHAR_BUDGET, k as adoptActivationReceipt, ka as evaluateExternalWaitCapability, kc as isExplanationScope, ki as extractToolSubject, kn as evidenceMatchesItem, ko as availableBoundaryQualifications, kr as memoizedAsarIndex, ks as BoundedSource, kt as CLEANUP_CONDITION_RULE_SHORT, l as activationSelectionPending, la as ExecutableIdentity, lc as GRANTED_QUALIFICATION, li as gitCommandMatchesTarget, ll as SemanticAction, ln as bindProofV2ToProjection, lo as RejectedBinding, lr as packageRowsFromActiveGraph, ls as MessageCoverage, lt as classifyCompletionClaim, m as scanActivationInventory, ma as HostAuditProvenance, mc as ScopeInterpretation, mi as CanonicalCommandSurface, ml as requestedIdentityKey, mn as proofDigest, mo as captureClause, mr as readActiveHostGraph, ms as TargetCaptureReasonCode, mt as isRootPauseRequest, n as assertActivationBackendIdentity, na as ACTIVE_HOST_COHORT_ID, nc as partialFailureOf, ni as GitPrestateEnvelope, nl as CERTIFICATE_VERSION, nn as ProofManifestV2, no as classifyTaskIntent, nr as evaluateActiveHostLock, ns as GuardItem, nt as CompletionDisposition, o as resolveActivationPersistencePlugin, oa as BASE_HOST_PACKAGES, oc as DirectiveClass, oi as commitTreeSnapshotDigest, ol as STOP_PROTOCOL_VERSION, on as SessionQuery, oo as isFrozenV042RebindResponse, or as injectActiveProfileHostLock, os as GuardProjection, ot as TurnStoppingDecision, p as prepareSelectedActivationMigration, pa as HOST_COHORTS, pc as QualificationStatus, pi as CanonicalArgv, pl as isStatefulAction, pn as proofCapabilityReport, po as ClauseSegment, pr as prepareTargetHostTrust, ps as SourceSpan, pt as decisionBoundaryKey, q as RC021_RC3_HOST_PACKAGES, qa as satisfiesSupportedHostRange, qc as semanticActionOfScope, qi as DEFAULT_DELEGATION_TOOL_NAMES, qn as AuditedPackageExpectation, qo as EvidenceParseStatus, qr as GIT_COMMAND_TEMPLATES, qs as OperationAttribution, qt as PROOF_KINDS_V2, r as assertActivationPhysicalRows, ra as ACTIVE_HOST_COHORT_IDS, rc as removalIsComplete, ri as GitTargetIdentity, rl as CERTIFICATE_VERSION_V2, rn as ProofObligation, ro as classifyUserInteraction, rr as evaluateConfiguredHostLock, rs as GuardItemKind, rt as CurrentActionBasis, s as ActivationInventorySnapshot, sa as DEFAULT_HOST_LOCK, sc as Executee, si as createGitPrestateEnvelope, sl as STOP_PROTOCOL_VERSION_V2, sn as SessionQueryV2, so as parseConfirmationMessage, sr as inspectDesktopTargetGraph, ss as HostStatus, st as assessmentAction, t as ActivationPhysicalInventory, ta as rootLocatorFlavor, tc as capabilityFactOf, ti as GitPrestateCheck, tl as BOUNDED_ARTIFACT_TYPES, tn as ProofManifest, to as UserInteractionKind, tr as combineHostPolicy, ts as GuardIntegrity, tt as CONTROL_RECORD_PREFIX, u as bindActivationInventoryPhysical, ua as ExecutableIdentityBinding, uc as InterpretOptions, ui as parseGitCommandManifest, ul as StatefulAction, un as canonicalProjection, uo as bindingIndividuallyAccepted, ur as packageRowsFromPnpmLock, us as NeedsReviewFact, ut as currentActionBases, v as verifySelectedMigrationInventory, va as HostCohort, vc as clauseIsGoverned, vi as isRunExecutable, vl as semanticActionFromText, vn as proofOperationMatches, vo as extractArtifactPaths, vr as revalidateDesktopCoreLock, vs as TargetTuple, vt as observeAssistantOutcome, w as verifyMigrationInventory, wa as HostPlatform, wc as hasWorkPredicate, wi as ToolCallInput, wl as sanitizeClauseText, wn as validateProofManifest, wo as BoundaryEffectuation, wr as DesktopAppRuntime, ws as PackageRow, wt as SessionApiError, x as ActivationPriorModes, xa as HostLockContext, xc as governedClauseRestrictsExecution, xi as goalCompletionDenial, xl as canonicalizePath, xn as scopeCoverageDigest, xo as isInformationalMessage, xr as DESKTOP_IDENTITY_FACTS, xs as WaitAuthorization, xt as v6TestPredicate, y as privateStorageToolDenial, ya as HostCohortSelection, yc as clauseIsProtected, yi as parsePwshCommand, yl as validateActionManifest, yn as proofV2Rejection, yo as extractMethod, yr as verifyComposedHostLockDump, ys as TargetValue, yt as progressFingerprint, z as SessionActivationRead, za as LATEST_TESTED_HOST_VERSION, zc as namedActions, zi as UnifiedItemDiagnosis, zn as FirstStepPreviewInput, zo as DeferAuthorization, zr as HostTrustedPackage, zs as replayRebindResult, zt as closingHint } from "./index-B1AGTJF6.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -83,6 +83,14 @@ interface EvidenceToolRoots {
   preEffectVeto?: () => boolean;
   /** C10 settlement record, written after the effect from a trusted readback. */
   releaseSettle?: (request: ReleaseSettlementToolRequest) => Promise<void>;
+  /** F09: total deadline and response-body budget for registry readback. */
+  registryReadBudget?: RegistryReadBudget;
+}
+interface RegistryReadBudget {
+  /** Plugin-owned total deadline for one registry readback, combined with the caller's cancellation. */
+  totalDeadlineMs: number;
+  /** Hard cap on response body bytes actually read (post-decompression). */
+  maxBodyBytes: number;
 }
 interface ReleaseGateToolRequest {
   agent: {
@@ -205,4 +213,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPhysicalInventory, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RC021_RC5_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assertActivationBackendIdentity, assertActivationPhysicalRows, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindActivationInventoryPhysical, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureActivationPhysicalInventory, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, guardActivationInventory, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActivationPersistencePlugin, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };