dsh-completion-guard 0.11.0 → 0.12.0

package/CHANGELOG.md

@@ -7,10 +7,26 @@ Each entry describes that version. Historical host ranges, defaults, plans and c
 <details>
 <summary>Version index</summary>
 
-[0.11.0](#0110) · [0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#071---2026-09-22) · [0.7.0](#070---2026-09-21) · [0.6.3](#063---2026-09-18) · [0.6.2](#062---2026-09-16) · [0.6.1](#061-2026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
+[0.12.0](#0120) · [0.11.0](#0110) · [0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#071---2026-09-22) · [0.7.0](#070---2026-09-21) · [0.6.3](#063---2026-09-18) · [0.6.2](#062---2026-09-16) · [0.6.1](#061-2026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
 
 </details>
 
+## 0.12.0
+
+- **Complete, unambiguous locator names no longer create verification actions by themselves.** Complete, unambiguous filenames, paths and link destinations are excluded from classification; adjacent instructions and link labels remain visible. Original text, source hashes and spans are preserved, and these names do not grant execution authority.
+- **Guard 0.12.0 requires DSH `0.2.1-rc.3` or later.** Package declarations and runtime admission retain the rc.3 floor. The default reviewed baseline is rc.5 (`dsh-0.2.1-rc.5-core-v1`); an rc.3 host uses its own reviewed cohort, while rc.2 remains below the floor. Existing session and Guard data protocols remain compatible; changed host locks require fresh checks. Migration receipts now bind a physical inventory proof, so older receipts without it must be regenerated.
+- **The rc.3→rc.5 cumulative study found no Guard-consumed interface change.** All 13 upstream commits and 388 changed files between `dsh-v0.2.1-rc.3` and `dsh-v0.2.1-rc.5` were reviewed: the non-manifest changes are client-UI thinking-block rendering and two ACP stdout diagnostics reroutes, none Guard-consumed. All 47 core-cohort packages were re-verified against the registry (SRI + SHA-256): zero executable-byte changes across the cohort, dependency routing structurally unchanged, Cordis shared at 4.0.5. The new `manifests/rc021-rc5-byte-audit.json` binds those verified identities.
+- **Host trust equivalence now spans three reviewed baselines** (rc.2, rc.3, rc.5), selected by the acquired graph's launcher version; a graph qualifies only when its loading digest AND module bytes match ONE reviewed published state.
+- **Activation inventory detects hidden physical sessions.** JSONL backends with reviewed-equivalent executable bytes and loader shape are checked against a read-only physical census and streaming file digests. Hidden, corrupt, future or unknown layouts fail closed; prior proofless receipts require new inventory and inspection. The proof covers the supplied root, not whether it is the active configuration. See [migration limits](docs/ACTIVATION_MIGRATION.md).
+- **Activation migration accepts Guard `0.11.x` as trusted predecessors.** The prior-mode toolkit previously stopped at `0.10.x`, so an upgrade from 0.11.0 had no documented migration path; `0.0.x`–`0.11.x` are now accepted and the current/future versions still refuse to impersonate a predecessor. unknown/off/conflict/pending boundaries are unchanged.
+- **Official rc.5 Desktop distributions are registered separately for macOS arm64 and Windows x64.** Both use the official distribution digest and an independently verified installed carrier. macOS codesign and Windows Authenticode passed; each signed ASAR header matches its measured header, with desktop/runtime metadata and dependency bytes checked separately. These identities do not establish Guard installation or lifecycle acceptance; rc.3/rc.2 pins are not reused.
+- **Known upstream risk, unchanged:** the rc.3 and rc.5 hosts still exact-pin `undici` 8.11.2 (`dsh-http-proxy`) and `zod` 4.4.3 (`dsh-commands`), and the upstream default branch still pins the same Undici — no disclosed gap is closed by this adaptation. On 2026-11-02 the maintainer separately accepted the same three Undici 8.11.2 high-risk findings for this 0.12.0 validation, including their residual risk and exception-eligibility waiver, and extended the expiry to **2026-11-30 inclusive**. From 2026-12-01 the gate blocks those findings again unless re-justified. This acceptance does not repair the signed host or establish whole-host unreachability. The two longer-term exceptions keep their scope and expiry. Four new moderate Undici findings and four fast-uri moderate/low findings on the 0.12.0 dev-chain lockfile are recorded, non-blocking. See [the dependency advisory gate](docs/DEPENDENCY_SCAN.md).
+- **Acceptance-receipt recovery is available without re-running acceptance.** A missing transfer receipt can be recovered from the original transfer intent plus the already-saved acceptance result; recovery never re-executes the run and never turns a failed result into a passing one.
+- **Failed, interrupted and timed-out acceptance initializations keep their evidence.** Init failures, interruptions and timeouts now preserve the owned fixture and record an explicit failed-cleanup state with process-group and child cleanup; an unknown liveness state retains the fixture for ownership diagnosis instead of disposing of it.
+- **Candidate CI selects its coverage by changed risk.** Static, package and documentation contracts run once; the Ubuntu/Node 22 lane runs the full deterministic suite; other platform/Node lanes usually run the smoke set; sensitive or unknown inputs expand all six lanes to the full suite, and manual dispatch always requests the full matrix.
+- **Warm-host route checks have a versioned native supplement.** The same frozen tgz is exercised in real isolated Web and Headless processes: redirect and deny must refuse without a new mock publish effect, and restoring the route must allow the same unconsumed resolution. Results bind source, artifact, driver and platform; this validation tool does not establish a GUI or real-model pass.
+- Development dependencies run on the pinned `0.2.1-rc.5` host cohort, and the shipped floor is pinned against the official app-boot consumer's real admission decisions (`semver-matrix-v120.json`).
+
 ## 0.11.0
 
 - **Upgrade DSH to `0.2.1-rc.3` or later before installing Guard 0.11.0.** Package declarations, runtime admission and the default audited cohort now use rc.3 as the minimum. Existing session and Guard data protocols remain compatible; rc.2 identities are retained as historical evidence.

package/CHANGELOG.zh-CN.md

@@ -7,10 +7,26 @@
 <details>
 <summary>版本索引</summary>
 
-[0.11.0](#0110) · [0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#0712026-09-22) · [0.7.0](#0702026-09-21) · [0.6.3](#0632026-09-18) · [0.6.2](#0622026-09-16) · [0.6.1](#0612026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
+[0.12.0](#0120) · [0.11.0](#0110) · [0.10.0](#0100) · [0.9.0](#090) · [0.8.4](#084) · [0.8.3](#083) · [0.8.2](#082) · [0.8.1](#081) · [0.8.0](#080) · [0.7.1](#0712026-09-22) · [0.7.0](#0702026-09-21) · [0.6.3](#0632026-09-18) · [0.6.2](#0622026-09-16) · [0.6.1](#0612026-09-15) · [0.6.0](#060---2026-09-14) · [0.5.3](#053---2026-09-14) · [0.5.2](#052---2026-09-11) · [0.5.1](#051---2026-09-10) · [0.5.0](#050---2026-09-10) · [0.4.3](#043---2026-09-08) · [0.4.2](#042---2026-09-07) · [0.4.1-rc.1](#041-rc1---2026-09-04) · [0.4.0](#040---2026-09-02) · [0.3.2](#032---2026-09-01) · [0.3.1](#031---2026-08-31) · [0.3.0](#030---2026-08-31) · [0.2.1](#021---2026-08-28) · [0.2.0](#020---2026-08-28) · [0.1.2](#012---2026-08-27) · [0.1.1](#011---2026-08-27) · [0.1.0](#010---2026-08-27)
 
 </details>
 
+## 0.12.0
+
+- **完整且无歧义的定位符名称本身不再生成验证动作。** 分类时排除完整且无歧义的文件名、路径和链接目标，保留相邻指令与链接文字；原文、来源哈希和范围不变，这些名称也不会产生执行权限。
+- **Guard 0.12.0 要求 DSH `0.2.1-rc.3` 或更高版本。** 包声明和运行时准入保留 rc.3 下限；默认审查基线为 rc.5（`dsh-0.2.1-rc.5-core-v1`），rc.3 宿主使用自己的审查队列，rc.2 仍低于下限。旧会话与 Guard 数据协议保持兼容；宿主锁变化后仍须重新核验。迁移收据新增物理库存证明，缺少该证明的旧收据须重新生成。
+- **rc.3→rc.5 累计研究未发现 Guard 消费接口变化。** 已审查 `dsh-v0.2.1-rc.3` 到 `dsh-v0.2.1-rc.5` 之间全部 13 个上游提交与 388 个变更文件：非 manifest 变更只有客户端 UI 思考块渲染与两处 ACP stdout 诊断改道，均与 Guard 无关。47 个核心闭包包全部重新对照官方 registry 核验（SRI + SHA-256）：闭包内可执行字节零变化、依赖路由结构不变、Cordis 保持共享的 4.0.5。新增 `manifests/rc021-rc5-byte-audit.json` 绑定这些已核验身份。
+- **宿主信任等价基线扩展为三个已审查发布状态**（rc.2、rc.3、rc.5），按已获取图的启动器版本选择；只有 loading 摘要与模块字节来自同一已审查状态时才判定等价。
+- **激活库存检测物理隐藏会话。** 对可执行字节及加载结构与已审查基线等价的 JSONL 后端执行只读物理盘点和文件流式摘要；隐藏、损坏、未来格式或未知布局按失败关闭。缺少证明的旧收据须重新 inventory 和 inspect。证明只覆盖所传目录，不能证明其就是当前配置，见[迁移限制](docs/ACTIVATION_MIGRATION.md)。
+- **激活迁移接受 Guard `0.11.x` 作为可信前驱。** 旧模式工具此前仅接受到 `0.10.x`，从 0.11.0 升级没有既定迁移路径；现在接受 `0.0.x`–`0.11.x`，当前及未来版本仍不得冒充前驱。unknown/off/冲突/pending 边界保持不变。
+- **官方 rc.5 Desktop 分发行分别登记 macOS arm64 与 Windows x64 身份。** 两端均核对官方分发包摘要及独立读取的已安装载体；macOS codesign、Windows Authenticode 通过，签名绑定的 ASAR header 与实测值一致，desktop/runtime 元数据及依赖字节分别核验。身份登记不代表 Guard 安装或生命周期验收通过，rc.3/rc.2 pin 不复用。
+- **上游已知风险不变：** rc.3 与 rc.5 宿主仍精确锁定 `undici` 8.11.2（`dsh-http-proxy`）与 `zod` 4.4.3（`dsh-commands`），上游默认分支仍锁定同一 Undici——本次适配没有关闭任何已披露缺口。维护者于 2026-11-02 单独接受本次 0.12.0 验收中相同三条 Undici 8.11.2 高危发现的剩余风险并特批例外准入，期限延至 **2026-11-30（含）**。自 2026-12-01 起，未经重新论证的例外恢复阻断。该接受不修复签名宿主，也不证明整个宿主不可达。原有两条例外保持其范围与到期日。0.12.0 开发链 lockfile 新增四条 moderate Undici 与四条 fast-uri moderate/low 公告，已记录、不阻断。见[依赖告警门禁](docs/DEPENDENCY_SCAN.md)。
+- **验收回执可恢复且无需重跑验收。** 缺失的 transfer receipt 可由原始 transfer intent 与已保存的验收结果恢复；恢复过程不重新执行验收，也不会把失败结果变成通过。
+- **失败、中断与超时的验收初始化保留现场。** 初始化失败、中断与超时会保留自有 fixture 并记录明确的 failed-cleanup 状态，含进程组与子进程清理；存活状态未知时保留 fixture 供归属诊断，不做处置。
+- **候选 CI 按变更风险选择覆盖。** 静态、打包与文档合同单跑一次；Ubuntu/Node 22 lane 跑完整确定性套件；其余平台/Node 组合通常跑 smoke；敏感或未知输入将六个 lane 全部扩展为完整套件，手动 dispatch 始终请求完整矩阵。
+- **暖宿主路由检查增加版本化原生补充入口。** 同一冻结 tgz 分别在真实、隔离的 Web 与 Headless 进程中运行：redirect、deny 必须拒绝且无新增模拟发布效果，恢复路由后同一未消费 resolution 必须成功。结果绑定源码、制品、驱动及平台；该验证工具不代表 GUI 或真实模型已通过。
+- 开发依赖固定在 `0.2.1-rc.5` 宿主闭包上，发布下限由官方 app-boot 消费者的真实准入决策钉住（`semver-matrix-v120.json`）。
+
 ## 0.11.0
 
 - **安装 Guard 0.11.0 前，请先将 DSH 升级到 `0.2.1-rc.3` 或更高版本。** 包声明、运行时准入和默认审查基线统一以 rc.3 为下限。旧会话及 Guard 数据协议保持兼容；rc.2 身份记录作为历史证据保留。

package/README.md

@@ -10,19 +10,19 @@ DSH Completion Guard is a DeepSeek Harness plugin that keeps your task requireme
 
 ## Install or upgrade
 
-Requires DSH `>=0.2.1-rc.3`, Cordis `>=4.0.4`, Node.js `>=22` and pnpm `>=11`. Upgrade DSH before installing Guard 0.11.0. Web, Headless and the official Desktop app have separate profiles. The reviewed host baseline is DSH `0.2.1-rc.3` with Cordis `4.0.5`; later hosts still require compatibility checks.
+Requires DSH `>=0.2.1-rc.3`, Cordis `>=4.0.4`, Node.js `>=22` and pnpm `>=11`. Upgrade DSH if it is below the minimum before installing Guard 0.12.0. Web, Headless and the official Desktop app have separate profiles. DSH `0.2.1-rc.5` with Cordis `4.0.5` is the recommended default reviewed baseline; rc.3 uses its own reviewed cohort, and all hosts require compatibility checks.
 
-**Known upstream risk for 0.11.0:** the official rc.3 host still contains affected dependencies. The maintainer explicitly accepted three Undici 8.11.2 high-risk findings through **2026-11-05 inclusive**; the signed host is not repaired. See the [temporary risk acceptance](docs/DEPENDENCY_SCAN.md). We will update after an upstream fixed chain is available and verified.
+**Known upstream risk:** the official rc.3 and rc.5 hosts still contain affected dependencies — `@deepseek-ai/dsh-http-proxy` exact-pins `undici` 8.11.2 and `@deepseek-ai/dsh-commands` exact-pins `zod` 4.4.3, so the previously disclosed high-risk findings remain present in the signed host. On 2026-11-02 the maintainer separately accepted the three disclosed high-risk Undici findings for 0.12.0 through **2026-11-30 inclusive**. The signed host remains unfixed; whole-host unreachability is not established and the process-crash risk cannot be excluded. See the [dependency advisory policy](docs/DEPENDENCY_SCAN.md) for the recorded findings, their scope and the standing publication gate.
 
 Choose your path before replacing any package:
 
 1. **First installation, no old Guard sessions:** stop the host, install Guard in the intended profile, then check and bind that installation before starting it.
-2. **Upgrading with old sessions:** stop the relevant writers and preserve the old installed package and its effective mode sources. Prepare a frozen session inventory and migration receipt **before upgrading**. After installation, rebuild the host lock and complete mode `adopt` and `verify` while writers remain stopped. Do not start the upgraded host until those checks pass for the intended scope. Unknown old modes stay pending.
+2. **Upgrading with old sessions:** stop the relevant writers and preserve the old installed package and its effective mode sources. First independently verify the persistence root and compression against the active configuration; the inventory proof covers only the supplied root ([migration guide](docs/ACTIVATION_MIGRATION.md)). Prepare a frozen session inventory and migration receipt **before upgrading**. After installation, rebuild the host lock and complete mode `adopt` and `verify` while writers remain stopped. Do not start the upgraded host until those checks pass for the intended scope. Unknown old modes stay pending. Receipts created without the physical inventory proof must be regenerated with `inventory` and `inspect`.
 
 For Web, after the applicable preparation:
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.11.0
+dsh plugin --profile web add dsh-completion-guard@0.12.0
 ```
 
 Installation alone is not enough. The **host lock** records the actual packages and directories this profile loads; check it with `inspect`, write it with `inject`, then check the composed configuration with `verify-dump`. Back up `cordis.patch.yml` before injection. [Installation and first load](docs/GETTING_STARTED.md) provides the Web commands, Windows and Desktop routes, and the final checks before startup. [Old-session migration](docs/ACTIVATION_MIGRATION.md) provides the preparation, commands and copyable AI prompts for an upgrade.
@@ -41,6 +41,8 @@ An **old session** keeps its verified pre-upgrade mode, including an empty old s
 
 Ask DSH to edit a file or run a test as usual. DSH executes the tools; Guard records the request and checks the saved result and any required readback. For example, “edit the configuration and make the tests pass” needs evidence of the changed file and a passing test, not just the assistant saying it is done. `context_guard_prepare` explains missing evidence; `context_guard_checkpoint` checks completion.
 
+Compared with 0.11, Guard also distinguishes complete, unambiguous file names and paths from verification requests: a name such as `verify.pdf` does not by itself create a verification check. Actual instructions beside the name still count.
+
 The default policy is still `standard`. Automatic protection grants no extra editing, execution or publication permission, and does not issue a certificate automatically.
 
 ## Mode and everyday commands

package/README.zh-CN.md

@@ -10,19 +10,19 @@ DSH Completion Guard 是 DeepSeek Harness 插件，负责保存任务要求，
 
 ## 安装或升级
 
-需要 DSH `>=0.2.1-rc.3`、Cordis `>=4.0.4`、Node.js `>=22` 和 pnpm `>=11`。安装 Guard 0.11.0 前请先升级 DSH。Web、Headless 和官方 Desktop 应用使用各自的配置目录。当前已审查基线为 DSH `0.2.1-rc.3`，搭配 Cordis `4.0.5`；更新宿主仍须通过兼容性核验。
+需要 DSH `>=0.2.1-rc.3`、Cordis `>=4.0.4`、Node.js `>=22` 和 pnpm `>=11`。安装 Guard 0.12.0 前，低于下限的 DSH 须先升级。Web、Headless 和官方 Desktop 应用使用各自的配置目录。推荐的默认审查基线为 DSH `0.2.1-rc.5` 和 Cordis `4.0.5`；rc.3 使用自己的审查队列，所有宿主仍须通过兼容性核验。
 
-**0.11.0 的上游已知风险：**官方 rc.3 宿主仍包含受影响依赖。维护者明确临时接受三条 Undici 8.11.2 高危发现，期限**包含 2026-11-05 当日**；签名宿主并未修复。详见[临时风险接受说明](docs/DEPENDENCY_SCAN.md)。后续上游提供修复链并通过核验后，再继续更新。
+**上游已知风险：**官方 rc.3 和 rc.5 宿主仍包含受影响依赖——`@deepseek-ai/dsh-http-proxy` 精确锁定 `undici` 8.11.2，`@deepseek-ai/dsh-commands` 精确锁定 `zod` 4.4.3，此前披露的高危发现仍在签名宿主内。维护者于 2026-11-02 单独接受本次 0.12.0 的三条已披露 Undici 高危剩余风险，并将期限延至 **2026-11-30（含）**。签名宿主未修复，不能证明整个宿主不可达，也不能排除进程崩溃风险。已记录的发现、范围与常设发布门槛见[依赖通告策略](docs/DEPENDENCY_SCAN.md)。
 
 先选好路径，再替换任何包：
 
 1. **首次安装，没有旧 Guard 会话**：停止宿主，在使用的 profile 中安装 Guard，核验并绑定本次安装后再启动。
-2. **已有旧会话，需要升级**：先停止相关写者，保留旧安装包及其有效模式来源。**升级前**冻结会话库存并准备迁移收据。安装后重建宿主锁，保持写者停止，完成旧模式的 `adopt` 和 `verify`；目标范围核验通过前不能启动升级后的宿主。无法核实的旧模式保持待处理。
+2. **已有旧会话，需要升级**：先停止相关写者，保留旧安装包及其有效模式来源。先独立核对实际配置使用的持久化目录及压缩方式；库存证明只覆盖所传目录（见[迁移指南](docs/ACTIVATION_MIGRATION.md)）。**升级前**冻结会话库存并准备迁移收据。安装后重建宿主锁，保持写者停止，完成旧模式的 `adopt` 和 `verify`；目标范围核验通过前不能启动升级后的宿主。无法核实的旧模式保持待处理。没有物理库存完整性证明的旧收据须重新执行 `inventory` 和 `inspect`。
 
 Web 在完成相应准备后安装：
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.11.0
+dsh plugin --profile web add dsh-completion-guard@0.12.0
 ```
 
 装好插件还需核验环境。**宿主锁**记录这个 profile 实际加载的包和目录：先用 `inspect` 检查，再用 `inject` 写入，最后以 `verify-dump` 核对组合配置；注入前备份 `cordis.patch.yml`。[安装与首次载入](docs/GETTING_STARTED.md)给出 Web 命令、Windows 和 Desktop 路径及启动前的最后核验。[旧会话迁移指南](docs/ACTIVATION_MIGRATION.md)提供升级准备、完整命令和可复制的 AI 提示词。
@@ -41,6 +41,8 @@ dsh plugin --profile web add dsh-completion-guard@0.11.0
 
 照常让 DSH 改文件、跑测试即可。DSH 执行工具，Guard 保存要求，并核对已记录的结果和必要的回读。例如，“修改配置并让测试通过”需要修改后的文件证据和通过的测试结果，助手说“已完成”还不够。`context_guard_prepare` 说明缺什么证据，`context_guard_checkpoint` 检查能否认证完成。
 
+相比 0.11，Guard 还会区分完整且无歧义的文件名、路径与验证要求：例如 `verify.pdf` 本身不会生成验证项；文件名旁的真实指令仍会保留。
+
 默认策略仍是 `standard`。自动参与保护不会增加修改、执行或发布权限，也不会自动签发完成证书。
 
 ## 模式和常用命令

package/bin/dsh-completion-guard-activation.mjs

@@ -1,13 +1,16 @@
 #!/usr/bin/env node
-import { readFileSync, writeFileSync, realpathSync } from 'node:fs'
+import { readFileSync, writeFileSync, realpathSync, readdirSync } from 'node:fs'
 import { createRequire } from 'node:module'
-import { pathToFileURL } from 'node:url'
-import { resolve } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import { dirname, join, resolve } from 'node:path'
+import { createHash } from 'node:crypto'
 import { homedir } from 'node:os'
 import { activationJson, activationCanonical, inspectActivationInventory, prepareActivationMigration,
   readActivationMigrationReceipt, verifyMigrationInventory, adoptActivationReceipt, resolveActivationBindingsRoot,
   scanActivationInventory, createActivationSelection, validateActivationSelection, activationSelectionPending,
-  prepareSelectedActivationMigration, verifySelectedMigrationInventory, isSelectedActivationReceipt } from '../dist/domain/index.js'
+  prepareSelectedActivationMigration, verifySelectedMigrationInventory, isSelectedActivationReceipt,
+  validateActivationInventorySnapshot, bindActivationInventoryPhysical, createActivationMigrationReceipt, activationDigest,
+  captureActivationPhysicalInventory, guardActivationInventory, resolveActivationPersistencePlugin, assertActivationBackendIdentity } from '../dist/domain/index.js'
 
 const operation = process.argv[2]
 const common = ['--runtime-anchor', '--persistence-root', '--compression']
@@ -37,31 +40,87 @@ async function main() {
     options.set(key, value)
   }
   if (operation === 'select') {
-    const selection = createActivationSelection(readJson(option('--inventory')), readJson(option('--include-file')))
+    const source = validateActivationInventorySnapshot(readJson(option('--inventory')))
+    if (!source.physicalSha256) throw new Error('activation_inventory_proof_required')
+    const selection = createActivationSelection(source, readJson(option('--include-file')))
     save(option('--output'), selection)
     print({ status: 'selection_ready', includedCount: selection.include.length, selectionSha256: selection.sha256 })
     return
   }
   const selection = option('--selection', true) ? validateActivationSelection(readJson(option('--selection'))) : undefined
   const receipt = ['adopt', 'verify'].includes(operation) ? readActivationMigrationReceipt(resolve(option('--receipt'))) : undefined
+  if (receipt && !receipt.inputs.physical_inventory) throw new Error('activation_inventory_proof_required')
   if (receipt && !selection && isSelectedActivationReceipt(receipt)) throw new Error('activation_selection_required')
   const anchor = realpathSync(option('--runtime-anchor'))
   const require = createRequire(anchor)
-  const { Context } = await import(pathToFileURL(require.resolve('@deepseek-ai/cordis')).href)
   const backendPath = require.resolve('@deepseek-ai/dsh-session-persistence-jsonl')
-  const jsonlModule = await import(pathToFileURL(backendPath).href)
-  const Jsonl = jsonlModule.default ?? jsonlModule
-  if (typeof Jsonl !== 'function' && (!Jsonl || typeof Jsonl !== 'object' || typeof Jsonl.apply !== 'function')) throw new Error('activation_backend_module_invalid')
+  // The physical layout is qualified by reviewed module bytes and loader
+  // shape; a version relabel alone does not change that capability.
+  const backendFile = realpathSync(backendPath)
+  const backendRoot = dirname(dirname(backendFile))
+  const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)))
+  const digest = bytes => createHash('sha256').update(bytes).digest('hex')
+  const checkedBackend = () => {
+    const packageBytes = readFileSync(join(backendRoot, 'package.json'))
+    const manifest = JSON.parse(packageBytes.toString('utf8'))
+    const audit = JSON.parse(readFileSync(join(packageRoot, 'manifests', 'rc021-rc5-byte-audit.json'), 'utf8'))
+    const row = audit.packages.find(row => row.name === '@deepseek-ai/dsh-session-persistence-jsonl')
+    if (!row || backendFile !== realpathSync(join(backendRoot, 'lib/index.js'))) throw new Error('activation_backend_unreviewed')
+    const moduleTree = root => {
+      const files = {}
+      const walk = (directory, prefix = '') => {
+        for (const entry of readdirSync(directory, { withFileTypes: true })) {
+          if (entry.name === 'node_modules') continue
+          const name = prefix + entry.name, path = join(directory, entry.name)
+          if (entry.isSymbolicLink()) throw new Error('activation_backend_unreviewed')
+          if (entry.isDirectory()) walk(path, `${name}/`)
+          else if (entry.isFile() && /\.(?:[cm]?js|json|node)$/u.test(name) && name !== 'package.json') files[name] = digest(readFileSync(path))
+          else if (!entry.isFile()) throw new Error('activation_backend_unreviewed')
+        }
+      }
+      walk(root)
+      return files
+    }
+    const modules = moduleTree(backendRoot)
+    assertActivationBackendIdentity(manifest, modules, row.modules)
+    const backendRequire = createRequire(backendFile)
+    const dependencies = ['@deepseek-ai/dsh-session-format', '@deepseek-ai/dsh-session-format-catalog',
+      '@deepseek-ai/dsh-session-format-catalog/message-projections', '@deepseek-ai/dsh-session-format-v3-to-v4',
+      '@deepseek-ai/dsh-session-persistence', '@deepseek-ai/dsh-session', '@deepseek-ai/cordis',
+      '@deepseek-ai/node-addon-system/flock'].map(specifier => {
+      const file = realpathSync(backendRequire.resolve(specifier))
+      const name = specifier.split('/').slice(0, 2).join('/')
+      const metadata = realpathSync(backendRequire.resolve(`${name}/package.json`))
+      return { specifier, file, sha256: digest(readFileSync(file)), metadata, metadataSha256: digest(readFileSync(metadata)), modules: moduleTree(dirname(metadata)) }
+    })
+    return activationDigest({ name: manifest.name, version: manifest.version, backendFile, packageSha256: digest(packageBytes), modules,
+      dependencies, node: process.versions.node, zstd: process.versions.zstd ?? null })
+  }
+  const backendSha256 = checkedBackend()
+  const jsonlModule = await import(pathToFileURL(backendFile).href)
+  const Jsonl = resolveActivationPersistencePlugin(jsonlModule)
+  const { Context } = await import(pathToFileURL(require.resolve('@deepseek-ai/cordis')).href)
   // Resolve the same dependency instance used by this physical JSONL backend.
   const { SessionFormatUnsupportedError } = await import(pathToFileURL(createRequire(backendPath).resolve('@deepseek-ai/dsh-session-persistence')).href)
   const ctx = new Context()
   const compression = option('--compression', true)
   if (compression && !['none', 'zstd'].includes(compression)) throw new Error('invalid compression')
-  const backend = ctx.plugin(Jsonl, { root: resolve(option('--persistence-root')), ...(compression ? { compression } : {}) })
+  const persistenceRoot = resolve(option('--persistence-root'))
+  const physical = () => {
+    if (checkedBackend() !== backendSha256) throw new Error('activation_inventory_changed')
+    return captureActivationPhysicalInventory(persistenceRoot, compression ?? 'zstd', backendSha256)
+  }
+  const backend = ctx.plugin(Jsonl, { root: persistenceRoot, ...(compression ? { compression } : {}) })
   try {
     await backend.await()
+    const persistence = ctx.sessionPersistence
+    if (!persistence || ['list', 'open', 'stat'].some(name => typeof persistence[name] !== 'function')) throw new Error('activation_backend_unreviewed')
+    const fence = guardActivationInventory(persistence, physical)
+    const initial = fence.initial, checkPhysical = fence.check
+    const guarded = { list: fence.list,
+      open: (...args) => persistence.open(...args), stat: (...args) => persistence.stat(...args) }
     const snapshot = operation === 'inventory' || selection
-      ? await scanActivationInventory(ctx.sessionPersistence, error => error instanceof SessionFormatUnsupportedError) : undefined
+      ? bindActivationInventoryPhysical(await scanActivationInventory(guarded, error => error instanceof SessionFormatUnsupportedError), checkPhysical().sha256) : undefined
     if (operation === 'inventory') {
       save(option('--output'), snapshot)
       print({ status: 'inventory_scanned', totalCount: snapshot.rows.length,
@@ -69,14 +128,19 @@ async function main() {
         unsupportedCount: snapshot.rows.filter(row => row.status === 'unsupported').length, inventorySha256: snapshot.sha256 })
       return
     }
-    const inventory = selection ? undefined : await inspectActivationInventory(ctx.sessionPersistence)
+    const inventory = selection ? undefined : await inspectActivationInventory(guarded)
+    checkPhysical()
+    if (receipt && receipt.inputs.physical_inventory !== initial.sha256) throw new Error('activation_inventory_changed')
     const scope = selection ? { scope: 'receipt_selected', wholeInventoryStatus: 'not_claimed',
       includedCount: selection.include.length, inventoryCount: snapshot.rows.length,
       pending: activationSelectionPending(snapshot, selection) } : {}
     if (operation === 'inspect') {
       const prior = readJson(option('--prior-modes'))
       const result = selection ? prepareSelectedActivationMigration(snapshot, selection, prior) : prepareActivationMigration(inventory, prior)
-      if (result.receipt) save(option('--output'), result.receipt)
+      if (result.receipt) {
+        result.receipt = createActivationMigrationReceipt(result.receipt.entries, { ...result.receipt.inputs, physical_inventory: checkPhysical().sha256 })
+        save(option('--output'), result.receipt)
+      }
       print({ ...result, receipt: undefined, ...scope, count: selection ? selection.include.length : inventory.length,
         ...(result.receipt ? { receiptSha256: result.receipt.sha256 } : {}) })
       if (result.status !== 'ready') process.exitCode = 2
@@ -84,7 +148,9 @@ async function main() {
       if (selection) verifySelectedMigrationInventory(receipt, snapshot, selection)
       else verifyMigrationInventory(receipt, inventory)
       const root = resolveActivationBindingsRoot(option('--dsh-home', true) ?? process.env.DSH_HOME, homedir())
+      checkPhysical()
       const result = adoptActivationReceipt(root, receipt, operation === 'verify')
+      checkPhysical()
       print({ ...result, ...scope, status: selection ? (result.status === 'complete' ? 'selected_complete' : 'selected_partial') : result.status })
       if (result.status !== 'complete') process.exitCode = 2
     }

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as assessmentAction, $a as parseConfirmationMessage, $c as STOP_PROTOCOL_VERSION_V2, $i as DEFAULT_HOST_LOCK, $n as inspectDesktopTargetGraph, $o as HostStatus, $r as createGitPrestateEnvelope, $s as Executee, $t as SessionQueryV2, A as InitialActivation, Aa as HostVersionStatus, Ac as maskQuotedSpans, Ai as TaskKind, An as FirstStepInjection, Ao as CwdEpoch, Ar as HostTrustError, As as rebindResponse, At as cleanupConditionFor, B as RC021_RC2_HOST_PACKAGES, Ba as currentContractDigest, Bc as splitTextFragments, Bi as PROTOCOL_V3_NOTICE, Bn as HostProfileError, Bo as EvidenceRole, Br as GitAdapterAction, Bs as ProcessExitStatus, Bt as PROOF_MANIFEST_DOMAIN_V2, C as createActivationMigrationReceipt, Ca as evaluateHostCapability, Cc as isOpenObligation, Ci as nativeGitParentOidVerified, Cn as COMMAND_SURFACE_MANIFEST, Co as isCurrentAcceptedBoundary, Cr as readAsarIndex, Cs as RebindArgs, Ct as MIN_RECOVERY_CHAR_BUDGET, D as resolveSessionActivation, Da as selectHostCohort, Dc as kindOfScope, Di as CertificationSupport, Dn as validateManifest, Do as BindingActionClosure, Dr as writeDesktopRuntimeReceipt, Ds as proposeRebindOutcome, Dt as V6_ORDINARY_COMPLETION_RULE_COMPACT, E as resolveActivationBindingsRoot, Ea as hostVersionFromPackages, Ec as itemHoldsExecutionAuthority, Ei as withDurability, En as OperationVerbEntry, Eo as AssetObligation, Er as readDesktopTargetGraph, Es as proposeRebind, Et as V6_ORDINARY_COMPLETION_RULE, F as activationDigest, Fa as SUPPORTED_HOST_VERSIONS, Fc as qualificationOfClause, Fi as itemDiagnosis, Fn as firstStepGuidanceV6, Fo as DeriveScope, Fr as qualifyHostTrust, Fs as DEPENDENCY_FREE_ONLY_CONDITION, Ft as renderRecoveryPacket, G as supersedeItem, Ga as segmentAuthorityBlocks, Gc as ActionManifest, Gi as deriveProjection, Gn as auditedForegroundRenderers, Go as GuardCheckpoint, Gr as GitEffectExecution, Gs as admissibleForRemoval, Gt as ProofKindCapability, H as RC020_RC1_HOST_PACKAGES, Ha as AuthorityBlockKind, Hc as verbIsNegated, Hi as PROTOCOL_V5_NOTICE, Hn as activeRendererModule, Ho as ExternalOperation, Hr as GitCommandManifest, Hs as ProcessOutcomeReason, Ht as PROOF_PROTOCOL_VERSION_V2, I as activationJson, Ia as compareHostVersions, Ic as questionHeadsClause, Ii as nativeFileTwoRole, In as lifecyclePhase, Io as DerivedEnvelope, Ir as registryArchiveFiles, Is as DeclaredOperationResult, It as v6CurrentRootBoundaries, J as CompletionDisposition, Ja as classifyTaskIntent, Jc as CERTIFICATE_VERSION, Ji as ACTIVE_HOST_COHORT_ID, Jn as evaluateActiveHostLock, Jo as GuardItem, Jr as GitPrestateEnvelope, Js as partialFailureOf, Jt as ProofManifestV2, K as AssistantOutcomeObservation, Ka as TaskIntent, Kc as ActionSpec, Ki as legacyRecordsNeedingReview, Kn as auditedHostImplementation, Ko as GuardEvidence, Kr as GitEffectRunner, Ks as capabilityConsequence, Kt as ProofKindV2, L as sessionBirthIdentity, La as evaluateMinimumHostVersion, Lc as reportingHeadGoverns, Li as relevantEvidence, Ln as previewFirstStepInjection, Lo as EvidenceBinding, Lr as registryArchiveModules, Ls as DependencyStatus, Lt as PROOF_CAPABILITY_MATRIX, M as SessionActivationRead, Ma as MIN_SUPPORTED_HOST_VERSION, Mc as opensConditionLead, Mi as capabilityRemedyPhrase, Mn as LifecyclePhase, Mo as DelegationRef, Mr as acquireHostTrust, Ms as CapabilityFact, Mt as openItems, N as SessionBirthIdentity, Na as ParsedHostVersion, Nc as opensWithDirective, Ni as deriveItemDiagnosis, Nn as claimedBatchHasRealRootInput, No as DeriveConfig, Nr as hostTrustDigest, Ns as CapabilityGap, Nt as recoveryDigest, O as validateActivationMigrationReceipt, Oa as HOST_VALIDATED_VERSIONS, Oc as legacyQuestionReadingIsInformational, Oi as DiagnosisNextAction, On as ClaimedMessage, Oo as BoundaryDisposition, Or as HostRebindTrust, Os as proposeRebindV042, Ot as V6_ORDINARY_COMPLETION_RULE_SHORT, P as activationCanonical, Pa as SUPPORTED_HOST_RANGE, Pc as presentExplanationHead, Pi as evidenceAvailabilityReason, Pn as firstStepGuidance, Po as DeriveResult, Pr as parseHostTrust, Ps as CapabilityRemedy, Pt as recoveryTitle, Q as TurnStoppingDecision, Qa as isFrozenV042RebindResponse, Qc as STOP_PROTOCOL_VERSION, Qi as BASE_HOST_PACKAGES, Qn as injectActiveProfileHostLock, Qo as GuardProjection, Qr as commitTreeSnapshotDigest, Qs as DirectiveClass, Qt as SessionQuery, R as validateActivationBinding, Ra as parseHostVersion, Rc as restatedContentOf, Ri as CAPTURE_V042_NOTICE, Rn as ActiveProfileHostLock, Ro as EvidenceOutcome, Rr as GIT_COMMAND_MANIFEST_IDS, Rs as DerivedProcessFacts, Rt as PROOF_KINDS, S as adoptActivationReceipt, Sa as evaluateGraphDerivedHostLock, Sc as isInformationalFragment, Si as isDeterministicCheck, Sn as isVerifyingCapability, So as effectuateBoundary, Sr as readAsarFile, Ss as ProposeOutcome, St as DEFAULT_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as evaluateToolSurfaceCapability, Tc as isRestatement, Ti as shellReadbackOutcome, Tn as ManifestIssue, To as AssetInterpretationFact, Tr as readDesktopDependency, Ts as confirmRebind, Tt as RecoveryOptions, U as projectSessionCoreV2, Ua as AuthorityKind, Uc as ACTION_MANIFEST, Ui as PROTOCOL_V6_NOTICE, Un as auditedDefaultWorkdirHost, Uo as GoalRef, Ur as GitCommandParseResult, Us as RemovalOutcomeReport, Ut as ProofHostSurface, V as RC020_RC2_HOST_PACKAGES, Va as AuthorityBlock, Vc as statefulActionsOfScope, Vi as PROTOCOL_V4_NOTICE, Vn as TargetHostGraph, Vo as ExpectedTransition, Vr as GitCommandAccepted, Vs as ProcessFactSource, Vt as PROOF_PROTOCOL_VERSION, W as projectCoreV2, Wa as authorityCaptureCounts, Wc as ACTION_MANIFEST_VERSION, Wi as applyUpgradeEligibility, Wn as auditedDefaultWorkdirProvider, Wo as GuardBoundary, Wr as GitCommandRejected, Ws as actionHasCertificationPath, Wt as ProofKind, X as NO_PROGRESS_RECORD_PREFIX, Xa as CONFIRM_LINE_PATTERN, Xc as SEMANTIC_ACTIONS, Xi as ACTIVE_HOST_LAUNCHER_VERSION, Xn as hostLockContextFromComposedDump, Xo as GuardItemStatus, Xr as LinearCommitReadback, Xs as removalIsPartiallyKnown, Xt as ProofObligationV2, Y as CurrentActionBasis, Ya as classifyUserInteraction, Yc as CERTIFICATE_VERSION_V2, Yi as ACTIVE_HOST_COHORT_IDS, Yn as evaluateConfiguredHostLock, Yo as GuardItemKind, Yr as GitTargetIdentity, Ys as removalIsComplete, Yt as ProofObligation, Z as NO_PROGRESS_TURNS_BEFORE_STOP, Za as ParsedConfirmation, Zc as STATEFUL_ACTIONS, Zi as AuditedExecutable, Zn as hostLockRowsFromComposedDump, Zo as GuardOperation, Zr as commitIndexSnapshotDigest, Zs as AuthorityDisposition, Zt as ProofSurface, _ as verifyMigrationInventory, _a as HostProfileKind, _c as interpretClause, _i as ToolResultInput, _l as sanitizeUrl, _n as validateProofManifestV2, _o as BoundaryQualification, _r as DesktopTargetGraph, _t as V4SessionLike, a as isSelectedActivationReceipt, aa as HOST_COHORTS, ac as QualificationStatus, ai as CanonicalArgv, al as isStatefulAction, an as proofCapabilityReport, ao as ClauseSegment, ar as prepareTargetHostTrust, as as SourceSpan, at as decisionBoundaryKey, b as __activationBindingInternals, ba as bindLiveGoalCapability, bc as isExecutableItem, bi as extractTextContent, bn as evidenceCoverage, bo as GoalBoundaryAccess, br as memoizedAsarFile, bt as CLEANUP_CONDITION_RULE_COMPACT, c as selectedActivationInventory, ca as HostCapabilityId, cc as clarifiedSpanOf, ci as ShellParseStatus, cl as requestedTargetMatchesResolved, cn as proofEvidenceConstraints, co as classifyClause, cr as resolveDesktopProfileHostLock, cs as TargetSource, ct as latestAssistantText, d as verifySelectedMigrationInventory, da as HostCohortSelection, dc as clauseIsProtected, di as parsePwshCommand, dl as validateActionManifest, dn as proofV2Rejection, do as extractMethod, dr as verifyComposedHostLockDump, ds as TargetValue, dt as progressFingerprint, ea as EXPECTED_HOST_PACKAGES, ec as ExecutionQualification, ei as executeRevalidatedGitEffect, el as SUPPORTED_EVIDENCE_ADAPTERS, en as bindProofToProjection, eo as CheckpointResult, er as inspectTargetHostGraph, es as JobLifecycleRecord, et as assessmentOutcomePredicate, f as privateStorageToolDenial, fa as HostCohortSelectionReason, fc as explanationHasActionResidue, fi as parseShellCommand, fl as validateActionTarget, fn as requiredSubjectsOf, fo as extractOperation, fr as AsarIndex, fs as VerificationContract, ft as testOutcomePredicate, g as prepareActivationMigration, ga as HostPlatform, gc as hasWorkPredicate, gi as ToolCallInput, gl as sanitizeClauseText, gn as validateProofManifest, go as BoundaryEffectuation, gr as DesktopAppRuntime, gt as SessionApiError, h as inspectActivationInventory, ha as HostLockStatus, hc as hasQuestionScope, hi as NATIVE_GIT_ROOT_PARENT_OID, hl as normalizeClause, hn as sessionQueryV2, ho as BOUNDARY_RECORD_PREFIX, hr as DESKTOP_RUNTIME_PACKAGE_NAME, hs as createProjection, ht as SESSION_EVENT_ENVELOPE_INVALID, i as createActivationSelection, ia as HOST_CAPABILITY_PACKAGE_GROUPS, ic as QualificationReason, ii as verifiedLinearCommitReadback, il as boundedArtifactChoiceMatches, in as createProofManifestV2, io as CaptureScope, ir as prepareDesktopHostTrust, is as PersistenceAuthorization, it as decideTurnStopping, j as SessionActivationBinding, ja as LATEST_TESTED_HOST_VERSION, jc as namedActions, ji as UnifiedItemDiagnosis, jn as FirstStepPreviewInput, jo as DeferAuthorization, jr as HostTrustedPackage, js as replayRebindResult, jt as closingHint, k as writeActivationBinding, ka as HostVersionDecision, kc as maskCodeSpans, ki as Repairability, kn as FIRST_STEP_GUIDANCE, ko as BoundaryQualificationKind, kr as HostTrustAcquisitionOptions, ks as rebindAttemptKey, kt as carriesCleanupCondition, l as validateActivationInventorySnapshot, la as HostCapabilityRequest, lc as clauseAsksOwnQuestion, li as canonicalArgvFromCommand, ll as semanticActionFromCommand, ln as proofHostSurfacesOf, lo as environmentDefaultRepositoryTarget, lr as resolveInstalledHostLock, ls as TargetSourceKind, lt as latestRootInstruction, m as ActivationPriorModes, ma as HostLockEvaluation, mc as hasOrderedCoordination, mi as hasCurrentCertificate, ml as digestStrings, mn as sessionQuery, mo as segmentClauses, mr as DESKTOP_PROFILE_PACKAGE_NAME, ms as WorkUnit, mt as SESSION_API_UNSUPPORTED, n as ActivationMigrationSelection, na as ExecutableIdentityBinding, nc as InterpretOptions, ni as parseGitCommandManifest, nl as StatefulAction, nn as canonicalProjection, no as bindingIndividuallyAccepted, nr as packageRowsFromPnpmLock, ns as NeedsReviewFact, nt as currentActionBases, o as prepareSelectedActivationMigration, oa as HostAuditProvenance, oc as ScopeInterpretation, oi as CanonicalCommandSurface, ol as requestedIdentityKey, on as proofDigest, oo as captureClause, or as readActiveHostGraph, os as TargetCaptureReasonCode, ot as isRootPauseRequest, p as ActivationInventoryPersistence, pa as HostLockContext, pc as governedClauseRestrictsExecution, pi as goalCompletionDenial, pl as canonicalizePath, pn as scopeCoverageDigest, po as isInformationalMessage, pr as DESKTOP_IDENTITY_FACTS, ps as WaitAuthorization, pt as v6TestPredicate, q as CONTROL_RECORD_PREFIX, qa as UserInteractionKind, qc as BOUNDED_ARTIFACT_TYPES, qi as rootLocatorFlavor, qn as combineHostPolicy, qo as GuardIntegrity, qr as GitPrestateCheck, qs as capabilityFactOf, qt as ProofManifest, r as activationSelectionPending, ra as GOAL_HOST_PACKAGES, rc as LEGACY_QUALIFICATION, ri as revalidateGitPrestate, rl as actionCompatible, rn as createProofManifest, ro as certifyCheckpoint, rr as prepareActiveHostTrust, rs as NeedsReviewReason, rt as decideTurnBoundary, s as scanActivationInventory, sa as HostCapabilityEvaluation, sc as actionVerbMatches, si as ParsedShell, sl as requestedTargetAuthorizesMutation, sn as proofDigestV2, so as captureItem, sr as resolveActiveProfileHostLock, ss as TargetCaptureStatus, st as isWholeTaskCompletionClaim, t as ActivationInventorySnapshot, ta as ExecutableIdentity, tc as GRANTED_QUALIFICATION, ti as gitCommandMatchesTarget, tl as SemanticAction, tn as bindProofV2ToProjection, to as RejectedBinding, tr as packageRowsFromActiveGraph, ts as MessageCoverage, tt as classifyCompletionClaim, u as validateActivationSelection, ua as HostCohort, uc as clauseIsGoverned, ui as isRunExecutable, ul as semanticActionFromText, un as proofOperationMatches, uo as extractArtifactPaths, ur as revalidateDesktopCoreLock, us as TargetTuple, ut as observeAssistantOutcome, v as ActivationMigrationEntry, va as HostToolSurface, vc as interpretMessage, vi as ToolSubject, vl as sha256, vn as EvidenceFacetCoverage, vo as BoundaryRequest, vr as auditDesktopInstalledImplementation, vt as snapshotSessionEvents, w as readActivationBinding, wa as evaluateHostLock, wc as isQuestionScopeNeedingReview, wi as persistedToolResultStatus, wn as CommandSurfaceManifest, wo as qualifyBoundary, wr as readDesktopAppRuntime, ws as RebindProposal, wt as RecoveryCause, x as activationBindingPath, xa as evaluateExternalWaitCapability, xc as isExplanationScope, xi as extractToolSubject, xn as evidenceMatchesItem, xo as availableBoundaryQualifications, xr as memoizedAsarIndex, xs as BoundedSource, xt as CLEANUP_CONDITION_RULE_SHORT, y as ActivationMigrationReceipt, ya as bindExecutableIdentity, yc as introducesActionClause, yi as evidenceFromPersistedToolResult, yl as stripUrlCredentials, yn as bindingSatisfies, yo as GoalActivationState, yr as hasDesktopImporterState, yt as CLEANUP_CONDITION_RULE, z as RC021_RC3_HOST_PACKAGES, za as satisfiesSupportedHostRange, zc as semanticActionOfScope, zi as DEFAULT_DELEGATION_TOOL_NAMES, zn as AuditedPackageExpectation, zo as EvidenceParseStatus, zr as GIT_COMMAND_TEMPLATES, zs as OperationAttribution, zt as PROOF_KINDS_V2 } from "../index-ClmcMWbM.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+import { $ as supersedeItem, $a as segmentAuthorityBlocks, $c as ActionManifest, $i as deriveProjection, $n as auditedForegroundRenderers, $o as GuardCheckpoint, $r as GitEffectExecution, $s as admissibleForRemoval, $t as ProofKindCapability, A as createActivationMigrationReceipt, Aa as evaluateGraphDerivedHostLock, Ac as isInformationalFragment, Ai as isDeterministicCheck, An as isVerifyingCapability, Ao as effectuateBoundary, Ar as readAsarFile, As as ProposeOutcome, At as DEFAULT_RECOVERY_CHAR_BUDGET, B as SessionBirthIdentity, Ba as MIN_SUPPORTED_HOST_VERSION, Bc as opensConditionLead, Bi as capabilityRemedyPhrase, Bn as LifecyclePhase, Bo as DelegationRef, Br as acquireHostTrust, Bs as CapabilityFact, Bt as openItems, C as prepareActivationMigration, Ca as HostLockStatus, Cc as hasQuestionScope, Ci as NATIVE_GIT_ROOT_PARENT_OID, Cl as normalizeClause, Cn as sessionQueryV2, Co as BOUNDARY_RECORD_PREFIX, Cr as DESKTOP_RUNTIME_PACKAGE_NAME, Cs as createProjection, Ct as SESSION_EVENT_ENVELOPE_INVALID, D as __activationBindingInternals, Da as bindExecutableIdentity, Dc as introducesActionClause, Di as evidenceFromPersistedToolResult, Dl as stripUrlCredentials, Dn as bindingSatisfies, Do as GoalActivationState, Dr as hasDesktopImporterState, Dt as CLEANUP_CONDITION_RULE, E as ActivationMigrationReceipt, Ea as HostToolSurface, Ec as interpretMessage, Ei as ToolSubject, El as sha256, En as EvidenceFacetCoverage, Eo as BoundaryRequest, Er as auditDesktopInstalledImplementation, Et as snapshotSessionEvents, F as validateActivationMigrationReceipt, Fa as selectHostCohort, Fc as kindOfScope, Fi as CertificationSupport, Fn as validateManifest, Fo as BindingActionClosure, Fr as writeDesktopRuntimeReceipt, Fs as proposeRebindOutcome, Ft as V6_ORDINARY_COMPLETION_RULE_COMPACT, G as validateActivationBinding, Ga as evaluateMinimumHostVersion, Gc as reportingHeadGoverns, Gi as relevantEvidence, Gn as previewFirstStepInjection, Go as EvidenceBinding, Gr as registryArchiveModules, Gs as DependencyStatus, Gt as PROOF_CAPABILITY_MATRIX, H as activationDigest, Ha as SUPPORTED_HOST_RANGE, Hc as presentExplanationHead, Hi as evidenceAvailabilityReason, Hn as firstStepGuidance, Ho as DeriveResult, Hr as parseHostTrust, Hs as CapabilityRemedy, Ht as recoveryTitle, I as writeActivationBinding, Ia as HOST_VALIDATED_VERSIONS, Ic as legacyQuestionReadingIsInformational, Ii as DiagnosisNextAction, In as ClaimedMessage, Io as BoundaryDisposition, Ir as HostRebindTrust, Is as proposeRebindV042, It as V6_ORDINARY_COMPLETION_RULE_SHORT, J as RC021_RC2_HOST_PACKAGES, Ja as currentContractDigest, Jc as splitTextFragments, Ji as PROTOCOL_V3_NOTICE, Jn as HostProfileError, Jo as EvidenceRole, Jr as GitAdapterAction, Js as ProcessExitStatus, Jt as PROOF_MANIFEST_DOMAIN_V2, K as RC021_RC5_HOST_PACKAGES, Ka as parseHostVersion, Kc as restatedContentOf, Ki as CAPTURE_V042_NOTICE, Kn as ActiveProfileHostLock, Ko as EvidenceOutcome, Kr as GIT_COMMAND_MANIFEST_IDS, Ks as DerivedProcessFacts, Kt as PROOF_KINDS, L as InitialActivation, La as HostVersionDecision, Lc as maskCodeSpans, Li as Repairability, Ln as FIRST_STEP_GUIDANCE, Lo as BoundaryQualificationKind, Lr as HostTrustAcquisitionOptions, Ls as rebindAttemptKey, Lt as carriesCleanupCondition, M as readActivationMigrationReceipt, Ma as evaluateHostLock, Mc as isQuestionScopeNeedingReview, Mi as persistedToolResultStatus, Mn as CommandSurfaceManifest, Mo as qualifyBoundary, Mr as readDesktopAppRuntime, Ms as RebindProposal, Mt as RecoveryCause, N as resolveActivationBindingsRoot, Na as evaluateToolSurfaceCapability, Nc as isRestatement, Ni as shellReadbackOutcome, Nn as ManifestIssue, No as AssetInterpretationFact, Nr as readDesktopDependency, Ns as confirmRebind, Nt as RecoveryOptions, O as activationBindingPath, Oa as bindLiveGoalCapability, Oc as isExecutableItem, Oi as extractTextContent, On as evidenceCoverage, Oo as GoalBoundaryAccess, Or as memoizedAsarFile, Ot as CLEANUP_CONDITION_RULE_COMPACT, P as resolveSessionActivation, Pa as hostVersionFromPackages, Pc as itemHoldsExecutionAuthority, Pi as withDurability, Pn as OperationVerbEntry, Po as AssetObligation, Pr as readDesktopTargetGraph, Ps as proposeRebind, Pt as V6_ORDINARY_COMPLETION_RULE, Q as projectCoreV2, Qa as authorityCaptureCounts, Qc as ACTION_MANIFEST_VERSION, Qi as applyUpgradeEligibility, Qn as auditedDefaultWorkdirProvider, Qo as GuardBoundary, Qr as GitCommandRejected, Qs as actionHasCertificationPath, Qt as ProofKind, R as SessionActivationBinding, Ra as HostVersionStatus, Rc as maskQuotedSpans, Ri as TaskKind, Rn as FirstStepInjection, Ro as CwdEpoch, Rr as HostTrustError, Rs as rebindResponse, Rt as cleanupConditionFor, S as inspectActivationInventory, Sa as HostLockEvaluation, Sc as hasOrderedCoordination, Si as hasCurrentCertificate, Sl as digestStrings, Sn as sessionQuery, So as segmentClauses, Sr as DESKTOP_PROFILE_PACKAGE_NAME, Ss as WorkUnit, St as SESSION_API_UNSUPPORTED, T as ActivationMigrationEntry, Ta as HostProfileKind, Tc as interpretClause, Ti as ToolResultInput, Tl as sanitizeUrl, Tn as validateProofManifestV2, To as BoundaryQualification, Tr as DesktopTargetGraph, Tt as V4SessionLike, U as activationJson, Ua as SUPPORTED_HOST_VERSIONS, Uc as qualificationOfClause, Ui as itemDiagnosis, Un as firstStepGuidanceV6, Uo as DeriveScope, Ur as qualifyHostTrust, Us as DEPENDENCY_FREE_ONLY_CONDITION, Ut as renderRecoveryPacket, V as activationCanonical, Va as ParsedHostVersion, Vc as opensWithDirective, Vi as deriveItemDiagnosis, Vn as claimedBatchHasRealRootInput, Vo as DeriveConfig, Vr as hostTrustDigest, Vs as CapabilityGap, Vt as recoveryDigest, W as sessionBirthIdentity, Wa as compareHostVersions, Wc as questionHeadsClause, Wi as nativeFileTwoRole, Wn as lifecyclePhase, Wo as DerivedEnvelope, Wr as registryArchiveFiles, Ws as DeclaredOperationResult, Wt as v6CurrentRootBoundaries, X as RC020_RC1_HOST_PACKAGES, Xa as AuthorityBlockKind, Xc as verbIsNegated, Xi as PROTOCOL_V5_NOTICE, Xn as activeRendererModule, Xo as ExternalOperation, Xr as GitCommandManifest, Xs as ProcessOutcomeReason, Xt as PROOF_PROTOCOL_VERSION_V2, Y as RC020_RC2_HOST_PACKAGES, Ya as AuthorityBlock, Yc as statefulActionsOfScope, Yi as PROTOCOL_V4_NOTICE, Yn as TargetHostGraph, Yo as ExpectedTransition, Yr as GitCommandAccepted, Ys as ProcessFactSource, Yt as PROOF_PROTOCOL_VERSION, Z as projectSessionCoreV2, Za as AuthorityKind, Zc as ACTION_MANIFEST, Zi as PROTOCOL_V6_NOTICE, Zn as auditedDefaultWorkdirHost, Zo as GoalRef, Zr as GitCommandParseResult, Zs as RemovalOutcomeReport, Zt as ProofHostSurface, _ as validateActivationSelection, _a as HostCapabilityRequest, _c as clauseAsksOwnQuestion, _i as canonicalArgvFromCommand, _l as semanticActionFromCommand, _n as proofHostSurfacesOf, _o as environmentDefaultRepositoryTarget, _r as resolveInstalledHostLock, _s as TargetSourceKind, _t as latestRootInstruction, a as guardActivationInventory, aa as AuditedExecutable, ac as AuthorityDisposition, ai as commitIndexSnapshotDigest, al as STATEFUL_ACTIONS, an as ProofSurface, ao as ParsedConfirmation, ar as hostLockRowsFromComposedDump, as as GuardOperation, at as NO_PROGRESS_TURNS_BEFORE_STOP, b as ActivationInventoryPersistence, ba as HostCohortSelectionReason, bc as explanationHasActionResidue, bi as parseShellCommand, bl as validateActionTarget, bn as requiredSubjectsOf, bo as extractOperation, br as AsarIndex, bs as VerificationContract, bt as testOutcomePredicate, c as ActivationMigrationSelection, ca as EXPECTED_HOST_PACKAGES, cc as ExecutionQualification, ci as executeRevalidatedGitEffect, cl as SUPPORTED_EVIDENCE_ADAPTERS, cn as bindProofToProjection, co as CheckpointResult, cr as inspectTargetHostGraph, cs as JobLifecycleRecord, ct as assessmentOutcomePredicate, d as createActivationSelection, da as GOAL_HOST_PACKAGES, dc as LEGACY_QUALIFICATION, di as revalidateGitPrestate, dl as actionCompatible, dn as createProofManifest, do as certifyCheckpoint, dr as prepareActiveHostTrust, ds as NeedsReviewReason, dt as decideTurnBoundary, ea as legacyRecordsNeedingReview, ec as capabilityConsequence, ei as GitEffectRunner, el as ActionSpec, en as ProofKindV2, eo as TaskIntent, er as auditedHostImplementation, es as GuardEvidence, et as AssistantOutcomeObservation, f as isSelectedActivationReceipt, fa as HOST_CAPABILITY_PACKAGE_GROUPS, fc as QualificationReason, fi as verifiedLinearCommitReadback, fl as boundedArtifactChoiceMatches, fn as createProofManifestV2, fo as CaptureScope, fr as prepareDesktopHostTrust, fs as PersistenceAuthorization, ft as decideTurnStopping, g as validateActivationInventorySnapshot, ga as HostCapabilityId, gc as clarifiedSpanOf, gi as ShellParseStatus, gl as requestedTargetMatchesResolved, gn as proofEvidenceConstraints, go as classifyClause, gr as resolveDesktopProfileHostLock, gs as TargetSource, gt as latestAssistantText, h as selectedActivationInventory, ha as HostCapabilityEvaluation, hc as actionVerbMatches, hi as ParsedShell, hl as requestedTargetAuthorizesMutation, hn as proofDigestV2, ho as captureItem, hr as resolveActiveProfileHostLock, hs as TargetCaptureStatus, ht as isWholeTaskCompletionClaim, i as captureActivationPhysicalInventory, ia as ACTIVE_HOST_LAUNCHER_VERSION, ic as removalIsPartiallyKnown, ii as LinearCommitReadback, il as SEMANTIC_ACTIONS, in as ProofObligationV2, io as CONFIRM_LINE_PATTERN, ir as hostLockContextFromComposedDump, is as GuardItemStatus, it as NO_PROGRESS_RECORD_PREFIX, j as readActivationBinding, ja as evaluateHostCapability, jc as isOpenObligation, ji as nativeGitParentOidVerified, jn as COMMAND_SURFACE_MANIFEST, jo as isCurrentAcceptedBoundary, jr as readAsarIndex, js as RebindArgs, jt as MIN_RECOVERY_CHAR_BUDGET, k as adoptActivationReceipt, ka as evaluateExternalWaitCapability, kc as isExplanationScope, ki as extractToolSubject, kn as evidenceMatchesItem, ko as availableBoundaryQualifications, kr as memoizedAsarIndex, ks as BoundedSource, kt as CLEANUP_CONDITION_RULE_SHORT, l as activationSelectionPending, la as ExecutableIdentity, lc as GRANTED_QUALIFICATION, li as gitCommandMatchesTarget, ll as SemanticAction, ln as bindProofV2ToProjection, lo as RejectedBinding, lr as packageRowsFromActiveGraph, ls as MessageCoverage, lt as classifyCompletionClaim, m as scanActivationInventory, ma as HostAuditProvenance, mc as ScopeInterpretation, mi as CanonicalCommandSurface, ml as requestedIdentityKey, mn as proofDigest, mo as captureClause, mr as readActiveHostGraph, ms as TargetCaptureReasonCode, mt as isRootPauseRequest, n as assertActivationBackendIdentity, na as ACTIVE_HOST_COHORT_ID, nc as partialFailureOf, ni as GitPrestateEnvelope, nl as CERTIFICATE_VERSION, nn as ProofManifestV2, no as classifyTaskIntent, nr as evaluateActiveHostLock, ns as GuardItem, nt as CompletionDisposition, o as resolveActivationPersistencePlugin, oa as BASE_HOST_PACKAGES, oc as DirectiveClass, oi as commitTreeSnapshotDigest, ol as STOP_PROTOCOL_VERSION, on as SessionQuery, oo as isFrozenV042RebindResponse, or as injectActiveProfileHostLock, os as GuardProjection, ot as TurnStoppingDecision, p as prepareSelectedActivationMigration, pa as HOST_COHORTS, pc as QualificationStatus, pi as CanonicalArgv, pl as isStatefulAction, pn as proofCapabilityReport, po as ClauseSegment, pr as prepareTargetHostTrust, ps as SourceSpan, pt as decisionBoundaryKey, q as RC021_RC3_HOST_PACKAGES, qa as satisfiesSupportedHostRange, qc as semanticActionOfScope, qi as DEFAULT_DELEGATION_TOOL_NAMES, qn as AuditedPackageExpectation, qo as EvidenceParseStatus, qr as GIT_COMMAND_TEMPLATES, qs as OperationAttribution, qt as PROOF_KINDS_V2, r as assertActivationPhysicalRows, ra as ACTIVE_HOST_COHORT_IDS, rc as removalIsComplete, ri as GitTargetIdentity, rl as CERTIFICATE_VERSION_V2, rn as ProofObligation, ro as classifyUserInteraction, rr as evaluateConfiguredHostLock, rs as GuardItemKind, rt as CurrentActionBasis, s as ActivationInventorySnapshot, sa as DEFAULT_HOST_LOCK, sc as Executee, si as createGitPrestateEnvelope, sl as STOP_PROTOCOL_VERSION_V2, sn as SessionQueryV2, so as parseConfirmationMessage, sr as inspectDesktopTargetGraph, ss as HostStatus, st as assessmentAction, t as ActivationPhysicalInventory, ta as rootLocatorFlavor, tc as capabilityFactOf, ti as GitPrestateCheck, tl as BOUNDED_ARTIFACT_TYPES, tn as ProofManifest, to as UserInteractionKind, tr as combineHostPolicy, ts as GuardIntegrity, tt as CONTROL_RECORD_PREFIX, u as bindActivationInventoryPhysical, ua as ExecutableIdentityBinding, uc as InterpretOptions, ui as parseGitCommandManifest, ul as StatefulAction, un as canonicalProjection, uo as bindingIndividuallyAccepted, ur as packageRowsFromPnpmLock, us as NeedsReviewFact, ut as currentActionBases, v as verifySelectedMigrationInventory, va as HostCohort, vc as clauseIsGoverned, vi as isRunExecutable, vl as semanticActionFromText, vn as proofOperationMatches, vo as extractArtifactPaths, vr as revalidateDesktopCoreLock, vs as TargetTuple, vt as observeAssistantOutcome, w as verifyMigrationInventory, wa as HostPlatform, wc as hasWorkPredicate, wi as ToolCallInput, wl as sanitizeClauseText, wn as validateProofManifest, wo as BoundaryEffectuation, wr as DesktopAppRuntime, wt as SessionApiError, x as ActivationPriorModes, xa as HostLockContext, xc as governedClauseRestrictsExecution, xi as goalCompletionDenial, xl as canonicalizePath, xn as scopeCoverageDigest, xo as isInformationalMessage, xr as DESKTOP_IDENTITY_FACTS, xs as WaitAuthorization, xt as v6TestPredicate, y as privateStorageToolDenial, ya as HostCohortSelection, yc as clauseIsProtected, yi as parsePwshCommand, yl as validateActionManifest, yn as proofV2Rejection, yo as extractMethod, yr as verifyComposedHostLockDump, ys as TargetValue, yt as progressFingerprint, z as SessionActivationRead, za as LATEST_TESTED_HOST_VERSION, zc as namedActions, zi as UnifiedItemDiagnosis, zn as FirstStepPreviewInput, zo as DeferAuthorization, zr as HostTrustedPackage, zs as replayRebindResult, zt as closingHint } from "../index-B1AGTJF6.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPhysicalInventory, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RC021_RC5_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assertActivationBackendIdentity, assertActivationPhysicalRows, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindActivationInventoryPhysical, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureActivationPhysicalInventory, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, guardActivationInventory, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActivationPersistencePlugin, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as NATIVE_GIT_ROOT_PARENT_OID, $a as __activationBindingInternals, $i as hostTrustDigest, $n as parseConfirmationMessage, $r as namedActions, $t as openItems, A as lifecyclePhase, Aa as satisfiesSupportedHostRange, Ai as prepareDesktopHostTrust, An as goalCompletionDenial, Ar as clarifiedSpanOf, At as proofDigest, B as snapshotSessionEvents, Ba as SUPPORTED_EVIDENCE_ADAPTERS, Bi as DESKTOP_RUNTIME_PACKAGE_NAME, Bn as isCurrentAcceptedBoundary, Br as interpretMessage, Bt as validateProofManifest, C as parseGitCommandManifest, Ca as LATEST_TESTED_HOST_VERSION, Ci as hostLockRowsFromComposedDump, Cn as isWholeTaskCompletionClaim, Ct as PROOF_PROTOCOL_VERSION_V2, D as claimedBatchHasRealRootInput, Da as compareHostVersions, Di as packageRowsFromActiveGraph, Dn as progressFingerprint, Dr as GRANTED_QUALIFICATION, Dt as createProofManifest, E as FIRST_STEP_GUIDANCE, Ea as SUPPORTED_HOST_VERSIONS, Ei as inspectTargetHostGraph, En as observeAssistantOutcome, Er as classifyUserInteraction, Et as canonicalProjection, Fa as CERTIFICATE_VERSION_V2, Fi as resolveInstalledHostLock, Fo as sanitizeClauseText, Fr as governedClauseRestrictsExecution, Ft as proofV2Rejection, G as PROTOCOL_V4_NOTICE, Ga as requestedTargetAuthorizesMutation, Gi as readAsarFile, Gn as proposeRebind, Gr as isOpenObligation, Gt as DEFAULT_RECOVERY_CHAR_BUDGET, H as CAPTURE_V042_NOTICE, Ha as boundedArtifactChoiceMatches, Hi as hasDesktopImporterState, Hn as currentContractDigest, Hr as isExecutableItem, Ht as CLEANUP_CONDITION_RULE, Ia as SEMANTIC_ACTIONS, Ii as revalidateDesktopCoreLock, Io as sanitizeUrl, Ir as hasOrderedCoordination, It as requiredSubjectsOf, J as applyUpgradeEligibility, Ja as semanticActionFromText, Ji as readDesktopDependency, Jn as rebindAttemptKey, Jr as itemHoldsExecutionAuthority, Jt as V6_ORDINARY_COMPLETION_RULE_COMPACT, K as PROTOCOL_V5_NOTICE, Ka as requestedTargetMatchesResolved, Ki as readAsarIndex, Kn as proposeRebindOutcome, Kr as isQuestionScopeNeedingReview, Kt as MIN_RECOVERY_CHAR_BUDGET, L as SESSION_API_UNSUPPORTED, La as STATEFUL_ACTIONS, Li as verifyComposedHostLockDump, Ln as BOUNDARY_RECORD_PREFIX, Lo as sha256, Lr as hasQuestionScope, Lt as scopeCoverageDigest, M as projectSessionCoreV2, Ma as ACTION_MANIFEST_VERSION, Mi as readActiveHostGraph, Mo as canonicalizePath, Mr as clauseIsGoverned, Mt as proofEvidenceConstraints, Na as BOUNDED_ARTIFACT_TYPES, Ni as resolveActiveProfileHostLock, No as digestStrings, Nr as clauseIsProtected, Nt as proofHostSurfacesOf, O as firstStepGuidance, Oa as evaluateMinimumHostVersion, Oi as packageRowsFromPnpmLock, On as testOutcomePredicate, Or as LEGACY_QUALIFICATION, Ot as createProofManifestV2, Pa as CERTIFICATE_VERSION, Pi as resolveDesktopProfileHostLock, Po as normalizeClause, Pr as explanationHasActionResidue, Pt as proofOperationMatches, Q as supersedeItem, Qi as acquireHostTrust, Qn as isFrozenV042RebindResponse, Qr as maskQuotedSpans, Qt as closingHint, R as SESSION_EVENT_ENVELOPE_INVALID, Ra as STOP_PROTOCOL_VERSION, Ri as DESKTOP_IDENTITY_FACTS, Rn as availableBoundaryQualifications, Ro as stripUrlCredentials, Rr as hasWorkPredicate, Rt as sessionQuery, S as gitCommandMatchesTarget, Sa as HOST_VALIDATED_VERSIONS, Si as hostLockContextFromComposedDump, Sn as isRootPauseRequest, Sr as segmentClauses, St as PROOF_PROTOCOL_VERSION, T as verifiedLinearCommitReadback, Ta as SUPPORTED_HOST_RANGE, Ti as inspectDesktopTargetGraph, Tn as latestRootInstruction, Tr as classifyTaskIntent, Tt as bindProofV2ToProjection, U as DEFAULT_DELEGATION_TOOL_NAMES, Ua as isStatefulAction, Ui as memoizedAsarFile, Un as createProjection, Ur as isExplanationScope, Ut as CLEANUP_CONDITION_RULE_COMPACT, V as projectCoreV2, Va as actionCompatible, Vi as auditDesktopInstalledImplementation, Vn as qualifyBoundary, Vr as introducesActionClause, Vt as validateProofManifestV2, W as PROTOCOL_V3_NOTICE, Wa as requestedIdentityKey, Wi as memoizedAsarIndex, Wn as confirmRebind, Wr as isInformationalFragment, Wt as CLEANUP_CONDITION_RULE_SHORT, X as legacyRecordsNeedingReview, Xa as validateActionTarget, Xi as writeDesktopRuntimeReceipt, Xn as replayRebindResult, Xr as legacyQuestionReadingIsInformational, Xt as carriesCleanupCondition, Y as deriveProjection, Ya as validateActionManifest, Yi as readDesktopTargetGraph, Yn as rebindResponse, Yr as kindOfScope, Yt as V6_ORDINARY_COMPLETION_RULE_SHORT, Z as rootLocatorFlavor, Za as RC021_RC3_HOST_PACKAGES, Zi as HostTrustError, Zn as CONFIRM_LINE_PATTERN, Zr as maskCodeSpans, Zt as cleanupConditionFor, _ as GIT_COMMAND_TEMPLATES, _a as evaluateHostCapability, _i as auditedForegroundRenderers, _n as classifyCompletionClaim, _r as environmentDefaultRepositoryTarget, _t as certifyCheckpoint, a as scanActivationInventory, aa as ACTIVE_HOST_COHORT_IDS, ai as reportingHeadGoverns, ao as resolveActivationBindingsRoot, ar as relevantEvidence, at as persistedToolResultStatus, b as createGitPrestateEnvelope, ba as hostVersionFromPackages, bi as evaluateActiveHostLock, bn as decideTurnStopping, br as extractOperation, bt as PROOF_KINDS_V2, c as validateActivationSelection, ca as DEFAULT_HOST_LOCK, ci as splitTextFragments, cn as bindingSatisfies, co as writeActivationBinding, cr as admissibleForRemoval, ct as canonicalArgvFromCommand, d as prepareActivationMigration, da as HOST_CAPABILITY_PACKAGE_GROUPS, di as COMMAND_SURFACE_MANIFEST, dn as isVerifyingCapability, do as activationJson, dr as partialFailureOf, dt as parseShellCommand, ea as parseHostTrust, ei as opensConditionLead, en as recoveryDigest, eo as activationBindingPath, er as capabilityRemedyPhrase, et as evidenceFromPersistedToolResult, f as verifyMigrationInventory, fa as HOST_COHORTS, fi as validateManifest, fn as CONTROL_RECORD_PREFIX, fo as sessionBirthIdentity, fr as removalIsComplete, g as GIT_COMMAND_MANIFEST_IDS, ga as evaluateGraphDerivedHostLock, gi as auditedDefaultWorkdirProvider, gn as assessmentOutcomePredicate, gr as classifyClause, gt as bindingIndividuallyAccepted, h as RC020_RC1_HOST_PACKAGES, ha as evaluateExternalWaitCapability, hi as auditedDefaultWorkdirHost, hn as assessmentAction, hr as captureItem, ht as segmentAuthorityBlocks, i as prepareSelectedActivationMigration, ia as ACTIVE_HOST_COHORT_ID, ii as questionHeadsClause, io as readActivationMigrationReceipt, ir as nativeFileTwoRole, it as nativeGitParentOidVerified, j as previewFirstStepInjection, ja as ACTION_MANIFEST, ji as prepareTargetHostTrust, jn as hasCurrentCertificate, jr as clauseAsksOwnQuestion, jt as proofDigestV2, k as firstStepGuidanceV6, ka as parseHostVersion, ki as prepareActiveHostTrust, kn as v6TestPredicate, kr as actionVerbMatches, kt as proofCapabilityReport, l as verifySelectedMigrationInventory, la as EXPECTED_HOST_PACKAGES, li as statefulActionsOfScope, ln as evidenceCoverage, lo as activationCanonical, lr as capabilityConsequence, lt as isRunExecutable, m as RC020_RC2_HOST_PACKAGES, ma as bindLiveGoalCapability, mi as activeRendererModule, mn as NO_PROGRESS_TURNS_BEFORE_STOP, mr as captureClause, mt as authorityCaptureCounts, n as createActivationSelection, na as registryArchiveFiles, ni as presentExplanationHead, nn as renderRecoveryPacket, no as createActivationMigrationReceipt, nr as evidenceAvailabilityReason, nt as extractToolSubject, o as selectedActivationInventory, oa as ACTIVE_HOST_LAUNCHER_VERSION, oi as restatedContentOf, oo as resolveSessionActivation, or as DEPENDENCY_FREE_ONLY_CONDITION, ot as shellReadbackOutcome, p as RC021_RC2_HOST_PACKAGES, pa as bindExecutableIdentity, pi as HostProfileError, pn as NO_PROGRESS_RECORD_PREFIX, po as validateActivationBinding, pr as removalIsPartiallyKnown, q as PROTOCOL_V6_NOTICE, qa as semanticActionFromCommand, qi as readDesktopAppRuntime, qn as proposeRebindV042, qr as isRestatement, qt as V6_ORDINARY_COMPLETION_RULE, r as isSelectedActivationReceipt, ra as registryArchiveModules, ri as qualificationOfClause, rn as v6CurrentRootBoundaries, ro as readActivationBinding, rr as itemDiagnosis, rt as isDeterministicCheck, s as validateActivationInventorySnapshot, sa as BASE_HOST_PACKAGES, si as semanticActionOfScope, so as validateActivationMigrationReceipt, sr as actionHasCertificationPath, st as withDurability, t as activationSelectionPending, ta as qualifyHostTrust, ti as opensWithDirective, tn as recoveryTitle, to as adoptActivationReceipt, tr as deriveItemDiagnosis, tt as extractTextContent, u as inspectActivationInventory, ua as GOAL_HOST_PACKAGES, ui as verbIsNegated, un as evidenceMatchesItem, uo as activationDigest, ur as capabilityFactOf, ut as parsePwshCommand, v as commitIndexSnapshotDigest, va as evaluateHostLock, vi as auditedHostImplementation, vn as currentActionBases, vr as extractArtifactPaths, vt as PROOF_CAPABILITY_MATRIX, w as revalidateGitPrestate, wa as MIN_SUPPORTED_HOST_VERSION, wi as injectActiveProfileHostLock, wn as latestAssistantText, wt as bindProofToProjection, x as executeRevalidatedGitEffect, xa as selectHostCohort, xi as evaluateConfiguredHostLock, xn as decisionBoundaryKey, xr as isInformationalMessage, xt as PROOF_MANIFEST_DOMAIN_V2, y as commitTreeSnapshotDigest, ya as evaluateToolSurfaceCapability, yi as combineHostPolicy, yn as decideTurnBoundary, yr as extractMethod, yt as PROOF_KINDS, z as SessionApiError, za as STOP_PROTOCOL_VERSION_V2, zi as DESKTOP_PROFILE_PACKAGE_NAME, zn as effectuateBoundary, zo as privateStorageToolDenial, zr as interpretClause, zt as sessionQueryV2 } from "../domain-rozEDKXB.js";
+import { $ as PROTOCOL_V6_NOTICE, $a as semanticActionFromCommand, $i as readDesktopAppRuntime, $n as proposeRebindV042, $r as isRestatement, $t as V6_ORDINARY_COMPLETION_RULE, A as revalidateGitPrestate, Aa as MIN_SUPPORTED_HOST_VERSION, Ai as injectActiveProfileHostLock, An as latestAssistantText, At as bindProofToProjection, Ba as CERTIFICATE_VERSION, Bi as resolveDesktopProfileHostLock, Bo as digestStrings, Br as explanationHasActionResidue, Bt as proofOperationMatches, C as GIT_COMMAND_TEMPLATES, Ca as evaluateHostCapability, Ci as auditedForegroundRenderers, Cn as classifyCompletionClaim, Cr as environmentDefaultRepositoryTarget, Ct as certifyCheckpoint, D as executeRevalidatedGitEffect, Da as selectHostCohort, Di as evaluateConfiguredHostLock, Dn as decisionBoundaryKey, Dr as isInformationalMessage, Dt as PROOF_MANIFEST_DOMAIN_V2, E as createGitPrestateEnvelope, Ea as hostVersionFromPackages, Ei as evaluateActiveHostLock, En as decideTurnStopping, Er as extractOperation, Et as PROOF_KINDS_V2, F as firstStepGuidanceV6, Fa as parseHostVersion, Fi as prepareActiveHostTrust, Fn as v6TestPredicate, Fr as actionVerbMatches, Ft as proofCapabilityReport, G as SessionApiError, Ga as STOP_PROTOCOL_VERSION_V2, Gi as DESKTOP_PROFILE_PACKAGE_NAME, Gn as effectuateBoundary, Go as stripUrlCredentials, Gr as interpretClause, Gt as sessionQueryV2, Ha as SEMANTIC_ACTIONS, Hi as revalidateDesktopCoreLock, Ho as sanitizeClauseText, Hr as hasOrderedCoordination, Ht as requiredSubjectsOf, I as lifecyclePhase, Ia as satisfiesSupportedHostRange, Ii as prepareDesktopHostTrust, In as goalCompletionDenial, Ir as clarifiedSpanOf, It as proofDigest, J as CAPTURE_V042_NOTICE, Ja as boundedArtifactChoiceMatches, Ji as hasDesktopImporterState, Jn as currentContractDigest, Jr as isExecutableItem, Jt as CLEANUP_CONDITION_RULE, K as snapshotSessionEvents, Ka as SUPPORTED_EVIDENCE_ADAPTERS, Ki as DESKTOP_RUNTIME_PACKAGE_NAME, Kn as isCurrentAcceptedBoundary, Ko as privateStorageToolDenial, Kr as interpretMessage, Kt as validateProofManifest, L as previewFirstStepInjection, La as ACTION_MANIFEST, Li as prepareTargetHostTrust, Ln as hasCurrentCertificate, Lr as clauseAsksOwnQuestion, Lt as proofDigestV2, M as FIRST_STEP_GUIDANCE, Ma as SUPPORTED_HOST_VERSIONS, Mi as inspectTargetHostGraph, Mn as observeAssistantOutcome, Mr as classifyUserInteraction, Mt as canonicalProjection, N as claimedBatchHasRealRootInput, Na as compareHostVersions, Ni as packageRowsFromActiveGraph, Nn as progressFingerprint, Nr as GRANTED_QUALIFICATION, Nt as createProofManifest, O as gitCommandMatchesTarget, Oa as HOST_VALIDATED_VERSIONS, Oi as hostLockContextFromComposedDump, On as isRootPauseRequest, Or as segmentClauses, Ot as PROOF_PROTOCOL_VERSION, P as firstStepGuidance, Pa as evaluateMinimumHostVersion, Pi as packageRowsFromPnpmLock, Pn as testOutcomePredicate, Pr as LEGACY_QUALIFICATION, Pt as createProofManifestV2, Q as PROTOCOL_V5_NOTICE, Qa as requestedTargetMatchesResolved, Qi as readAsarIndex, Qn as proposeRebindOutcome, Qr as isQuestionScopeNeedingReview, Qt as MIN_RECOVERY_CHAR_BUDGET, R as projectSessionCoreV2, Ra as ACTION_MANIFEST_VERSION, Ri as readActiveHostGraph, Rr as clauseIsGoverned, Rt as proofEvidenceConstraints, S as GIT_COMMAND_MANIFEST_IDS, Sa as evaluateGraphDerivedHostLock, Si as auditedDefaultWorkdirProvider, Sn as assessmentOutcomePredicate, Sr as classifyClause, St as bindingIndividuallyAccepted, T as commitTreeSnapshotDigest, Ta as evaluateToolSurfaceCapability, Ti as combineHostPolicy, Tn as decideTurnBoundary, Tr as extractMethod, Tt as PROOF_KINDS, U as SESSION_API_UNSUPPORTED, Ua as STATEFUL_ACTIONS, Ui as verifyComposedHostLockDump, Un as BOUNDARY_RECORD_PREFIX, Uo as sanitizeUrl, Ur as hasQuestionScope, Ut as scopeCoverageDigest, Va as CERTIFICATE_VERSION_V2, Vi as resolveInstalledHostLock, Vo as normalizeClause, Vr as governedClauseRestrictsExecution, Vt as proofV2Rejection, W as SESSION_EVENT_ENVELOPE_INVALID, Wa as STOP_PROTOCOL_VERSION, Wi as DESKTOP_IDENTITY_FACTS, Wn as availableBoundaryQualifications, Wo as sha256, Wr as hasWorkPredicate, Wt as sessionQuery, X as PROTOCOL_V3_NOTICE, Xa as requestedIdentityKey, Xi as memoizedAsarIndex, Xn as confirmRebind, Xr as isInformationalFragment, Xt as CLEANUP_CONDITION_RULE_SHORT, Y as DEFAULT_DELEGATION_TOOL_NAMES, Ya as isStatefulAction, Yi as memoizedAsarFile, Yn as createProjection, Yr as isExplanationScope, Yt as CLEANUP_CONDITION_RULE_COMPACT, Z as PROTOCOL_V4_NOTICE, Za as requestedTargetAuthorizesMutation, Zi as readAsarFile, Zn as proposeRebind, Zr as isOpenObligation, Zt as DEFAULT_RECOVERY_CHAR_BUDGET, _ as prepareActivationMigration, _a as HOST_CAPABILITY_PACKAGE_GROUPS, _i as COMMAND_SURFACE_MANIFEST, _n as isVerifyingCapability, _o as activationDigest, _r as partialFailureOf, _t as parseShellCommand, a as resolveActivationPersistencePlugin, aa as hostTrustDigest, ai as namedActions, an as openItems, ar as parseConfirmationMessage, at as NATIVE_GIT_ROOT_PARENT_OID, b as RC020_RC2_HOST_PACKAGES, ba as bindLiveGoalCapability, bi as activeRendererModule, bn as NO_PROGRESS_TURNS_BEFORE_STOP, bo as validateActivationBinding, br as captureClause, bt as authorityCaptureCounts, c as createActivationSelection, ca as registryArchiveFiles, ci as presentExplanationHead, cn as renderRecoveryPacket, co as adoptActivationReceipt, cr as evidenceAvailabilityReason, ct as extractToolSubject, d as scanActivationInventory, da as ACTIVE_HOST_COHORT_IDS, di as reportingHeadGoverns, do as readActivationMigrationReceipt, dr as relevantEvidence, dt as persistedToolResultStatus, ea as readDesktopDependency, ei as itemHoldsExecutionAuthority, en as V6_ORDINARY_COMPLETION_RULE_COMPACT, eo as semanticActionFromText, er as rebindAttemptKey, et as applyUpgradeEligibility, f as selectedActivationInventory, fa as ACTIVE_HOST_LAUNCHER_VERSION, fi as restatedContentOf, fo as resolveActivationBindingsRoot, fr as DEPENDENCY_FREE_ONLY_CONDITION, ft as shellReadbackOutcome, g as inspectActivationInventory, ga as GOAL_HOST_PACKAGES, gi as verbIsNegated, gn as evidenceMatchesItem, go as activationCanonical, gr as capabilityFactOf, gt as parsePwshCommand, h as verifySelectedMigrationInventory, ha as EXPECTED_HOST_PACKAGES, hi as statefulActionsOfScope, hn as evidenceCoverage, ho as writeActivationBinding, hr as capabilityConsequence, ht as isRunExecutable, i as guardActivationInventory, ia as acquireHostTrust, ii as maskQuotedSpans, in as closingHint, io as RC021_RC3_HOST_PACKAGES, ir as isFrozenV042RebindResponse, it as supersedeItem, j as verifiedLinearCommitReadback, ja as SUPPORTED_HOST_RANGE, ji as inspectDesktopTargetGraph, jn as latestRootInstruction, jr as classifyTaskIntent, jt as bindProofV2ToProjection, k as parseGitCommandManifest, ka as LATEST_TESTED_HOST_VERSION, ki as hostLockRowsFromComposedDump, kn as isWholeTaskCompletionClaim, kt as PROOF_PROTOCOL_VERSION_V2, l as isSelectedActivationReceipt, la as registryArchiveModules, li as qualificationOfClause, ln as v6CurrentRootBoundaries, lo as createActivationMigrationReceipt, lr as itemDiagnosis, lt as isDeterministicCheck, m as validateActivationSelection, ma as DEFAULT_HOST_LOCK, mi as splitTextFragments, mn as bindingSatisfies, mo as validateActivationMigrationReceipt, mr as admissibleForRemoval, mt as canonicalArgvFromCommand, n as assertActivationPhysicalRows, na as writeDesktopRuntimeReceipt, ni as legacyQuestionReadingIsInformational, nn as carriesCleanupCondition, no as validateActionTarget, nr as replayRebindResult, nt as legacyRecordsNeedingReview, o as activationSelectionPending, oa as parseHostTrust, oi as opensConditionLead, on as recoveryDigest, oo as __activationBindingInternals, or as capabilityRemedyPhrase, ot as evidenceFromPersistedToolResult, p as validateActivationInventorySnapshot, pa as BASE_HOST_PACKAGES, pi as semanticActionOfScope, po as resolveSessionActivation, pr as actionHasCertificationPath, pt as withDurability, q as projectCoreV2, qa as actionCompatible, qi as auditDesktopInstalledImplementation, qn as qualifyBoundary, qr as introducesActionClause, qt as validateProofManifestV2, r as captureActivationPhysicalInventory, ra as HostTrustError, ri as maskCodeSpans, rn as cleanupConditionFor, ro as RC021_RC5_HOST_PACKAGES, rr as CONFIRM_LINE_PATTERN, rt as rootLocatorFlavor, s as bindActivationInventoryPhysical, sa as qualifyHostTrust, si as opensWithDirective, sn as recoveryTitle, so as activationBindingPath, sr as deriveItemDiagnosis, st as extractTextContent, t as assertActivationBackendIdentity, ta as readDesktopTargetGraph, ti as kindOfScope, tn as V6_ORDINARY_COMPLETION_RULE_SHORT, to as validateActionManifest, tr as rebindResponse, tt as deriveProjection, u as prepareSelectedActivationMigration, ua as ACTIVE_HOST_COHORT_ID, ui as questionHeadsClause, uo as readActivationBinding, ur as nativeFileTwoRole, ut as nativeGitParentOidVerified, v as verifyMigrationInventory, va as HOST_COHORTS, vi as validateManifest, vn as CONTROL_RECORD_PREFIX, vo as activationJson, vr as removalIsComplete, w as commitIndexSnapshotDigest, wa as evaluateHostLock, wi as auditedHostImplementation, wn as currentActionBases, wr as extractArtifactPaths, wt as PROOF_CAPABILITY_MATRIX, x as RC020_RC1_HOST_PACKAGES, xa as evaluateExternalWaitCapability, xi as auditedDefaultWorkdirHost, xn as assessmentAction, xr as captureItem, xt as segmentAuthorityBlocks, y as RC021_RC2_HOST_PACKAGES, ya as bindExecutableIdentity, yi as HostProfileError, yn as NO_PROGRESS_RECORD_PREFIX, yo as sessionBirthIdentity, yr as removalIsPartiallyKnown, za as BOUNDED_ARTIFACT_TYPES, zi as resolveActiveProfileHostLock, zo as canonicalizePath, zr as clauseIsProtected, zt as proofHostSurfacesOf } from "../domain-DUS0V_Yv.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RC021_RC5_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assertActivationBackendIdentity, assertActivationPhysicalRows, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindActivationInventoryPhysical, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureActivationPhysicalInventory, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, guardActivationInventory, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActivationPersistencePlugin, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };