dsh-completion-guard 0.11.0 → 0.12.0

package/dist/{index-ClmcMWbM.d.ts → index-B1AGTJF6.d.ts}

@@ -1795,7 +1795,7 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Version admission floor. Since 0.11.0 the public DSH support range is
+/** Version admission floor. The public DSH support range is
 * `>=0.2.1-rc.3` with NO implied upper bound: every host version at or above
 * this floor (including later RCs on any tuple, stable and future releases)
 * passes VERSION ADMISSION. The floor only rises when a future Guard release
@@ -1808,9 +1808,8 @@ declare const MIN_SUPPORTED_HOST_VERSION = "0.2.1-rc.3";
 declare const SUPPORTED_HOST_RANGE: string;
 /** Versions with recorded first-hand host evidence. This is an EVIDENCE
 * ledger, NOT an admission whitelist: a missing row never refuses a
-* version-above-floor host. The 0.2.0 rows keep their historical standing
-* after the floor moved to 0.2.1-rc.3; each row records past evidence, not
-* current admission. */
+* version-above-floor host. Each row records past evidence, not current
+* artifact acceptance. */
 declare const HOST_VALIDATED_VERSIONS: readonly string[];
 /** Historical alias retained for evidence-list readers; the admission rule is
 * the floor above, never this list. */
@@ -1888,18 +1887,17 @@ interface HostCohort {
   capabilities: CapabilityRow[];
 }
 /** Current baseline for new installations and default fixtures. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.1-rc.3";
-/** The release floor is rc.3. Older package identities remain historical
-* evidence; retaining their audit files does not admit a below-floor host. */
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.1-rc.5";
+/** rc.5 remains the default; rc.3 is also an admitted exact audited cohort. */
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
-/** Core-lock/v1 separates optional market identity from the rc.3 critical
-* graph. Historical cohorts live only in test data. Version ordering cannot
+/** Core-lock/v1 separates optional market identity from the rc.5 critical
+* graph. The rc.3 core is also admitted under its own audited identity. Version ordering cannot
 * authorize an unregistered graph, and graph identity is separate from native
 * acceptance of a Guard artifact.
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.2.1-rc.3). The cohort
+* Baseline fixture package identities (DSH 0.2.1-rc.5). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -3509,6 +3507,19 @@ declare const RC021_RC2_HOST_PACKAGES: PackageRow[];
 * stay available in `rc021-rc2-host.ts` as a supported path. */
 declare const RC021_RC3_HOST_PACKAGES: PackageRow[];
 //#endregion
+//#region src/domain/rc021-rc5-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.1-rc.5 tarballs (upstream
+* b830ec950faba0a46dda564be3e2d854afed94f1). The rc.3→rc.5 study verified that
+* every core-cohort package's executable bytes are UNCHANGED (the rc.4/rc.5
+* functional commits touch only client-UI rendering, MCP resource gating and
+* LLM account diagnostics outside this cohort) and that only manifest
+* version/dependency fields were rewritten; dependency routing is unchanged
+* and Cordis remains the shared 4.0.5 release. Cohort admission is separate
+* from native platform acceptance. The rc.3 rows stay available in
+* `rc021-rc3-host.ts` as historical evidence. */
+declare const RC021_RC5_HOST_PACKAGES: PackageRow[];
+//#endregion
 //#region src/domain/session-activation.d.ts
 type InitialActivation = "opt-in" | "always";
 interface SessionBirthIdentity {
@@ -3647,6 +3658,7 @@ type InventoryRow = {
 interface ActivationInventorySnapshot {
   schema: "dsh-activation-inventory/v1";
   rows: InventoryRow[];
+  physicalSha256?: string;
   sha256: string;
 }
 interface ActivationMigrationSelection {
@@ -3659,6 +3671,8 @@ interface ActivationMigrationSelection {
 * refusals. Unknown errors/list/stat failures abort; they are never exclusions. */
 declare function scanActivationInventory(persistence: ActivationInventoryPersistence, isFormatUnsupported: (error: unknown) => boolean): Promise<ActivationInventorySnapshot>;
 declare function validateActivationInventorySnapshot(value: unknown): ActivationInventorySnapshot;
+/** Bind an SDK snapshot to an independently established physical census. */
+declare function bindActivationInventoryPhysical(snapshotValue: unknown, physicalSha256: string): ActivationInventorySnapshot;
 declare function validateActivationSelection(value: unknown): ActivationMigrationSelection;
 declare function selectedActivationInventory(snapshotValue: unknown, selectionValue: unknown): SessionBirthIdentity[];
 declare function createActivationSelection(snapshotValue: unknown, include: unknown): ActivationMigrationSelection;
@@ -3670,4 +3684,36 @@ declare function prepareSelectedActivationMigration(snapshot: ActivationInventor
 declare function isSelectedActivationReceipt(receipt: ActivationMigrationReceipt): boolean;
 declare function verifySelectedMigrationInventory(receipt: ActivationMigrationReceipt, snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection): void;
 //#endregion
-export { assessmentAction as $, parseConfirmationMessage as $a, STOP_PROTOCOL_VERSION_V2 as $c, DEFAULT_HOST_LOCK as $i, inspectDesktopTargetGraph as $n, HostStatus as $o, createGitPrestateEnvelope as $r, Executee as $s, SessionQueryV2 as $t, InitialActivation as A, HostVersionStatus as Aa, maskQuotedSpans as Ac, TaskKind as Ai, FirstStepInjection as An, CwdEpoch as Ao, HostTrustError as Ar, rebindResponse as As, cleanupConditionFor as At, RC021_RC2_HOST_PACKAGES as B, currentContractDigest as Ba, splitTextFragments as Bc, PROTOCOL_V3_NOTICE as Bi, HostProfileError as Bn, EvidenceRole as Bo, GitAdapterAction as Br, ProcessExitStatus as Bs, PROOF_MANIFEST_DOMAIN_V2 as Bt, createActivationMigrationReceipt as C, evaluateHostCapability as Ca, isOpenObligation as Cc, nativeGitParentOidVerified as Ci, COMMAND_SURFACE_MANIFEST as Cn, isCurrentAcceptedBoundary as Co, readAsarIndex as Cr, RebindArgs as Cs, MIN_RECOVERY_CHAR_BUDGET as Ct, resolveSessionActivation as D, selectHostCohort as Da, kindOfScope as Dc, CertificationSupport as Di, validateManifest as Dn, BindingActionClosure as Do, writeDesktopRuntimeReceipt as Dr, proposeRebindOutcome as Ds, V6_ORDINARY_COMPLETION_RULE_COMPACT as Dt, resolveActivationBindingsRoot as E, hostVersionFromPackages as Ea, itemHoldsExecutionAuthority as Ec, withDurability as Ei, OperationVerbEntry as En, AssetObligation as Eo, readDesktopTargetGraph as Er, proposeRebind as Es, V6_ORDINARY_COMPLETION_RULE as Et, activationDigest as F, SUPPORTED_HOST_VERSIONS as Fa, qualificationOfClause as Fc, itemDiagnosis as Fi, firstStepGuidanceV6 as Fn, DeriveScope as Fo, qualifyHostTrust as Fr, DEPENDENCY_FREE_ONLY_CONDITION as Fs, renderRecoveryPacket as Ft, supersedeItem as G, segmentAuthorityBlocks as Ga, ActionManifest as Gc, deriveProjection as Gi, auditedForegroundRenderers as Gn, GuardCheckpoint as Go, GitEffectExecution as Gr, admissibleForRemoval as Gs, ProofKindCapability as Gt, RC020_RC1_HOST_PACKAGES as H, AuthorityBlockKind as Ha, verbIsNegated as Hc, PROTOCOL_V5_NOTICE as Hi, activeRendererModule as Hn, ExternalOperation as Ho, GitCommandManifest as Hr, ProcessOutcomeReason as Hs, PROOF_PROTOCOL_VERSION_V2 as Ht, activationJson as I, compareHostVersions as Ia, questionHeadsClause as Ic, nativeFileTwoRole as Ii, lifecyclePhase as In, DerivedEnvelope as Io, registryArchiveFiles as Ir, DeclaredOperationResult as Is, v6CurrentRootBoundaries as It, CompletionDisposition as J, classifyTaskIntent as Ja, CERTIFICATE_VERSION as Jc, ACTIVE_HOST_COHORT_ID as Ji, evaluateActiveHostLock as Jn, GuardItem as Jo, GitPrestateEnvelope as Jr, partialFailureOf as Js, ProofManifestV2 as Jt, AssistantOutcomeObservation as K, TaskIntent as Ka, ActionSpec as Kc, legacyRecordsNeedingReview as Ki, auditedHostImplementation as Kn, GuardEvidence as Ko, GitEffectRunner as Kr, capabilityConsequence as Ks, ProofKindV2 as Kt, sessionBirthIdentity as L, evaluateMinimumHostVersion as La, reportingHeadGoverns as Lc, relevantEvidence as Li, previewFirstStepInjection as Ln, EvidenceBinding as Lo, registryArchiveModules as Lr, DependencyStatus as Ls, PROOF_CAPABILITY_MATRIX as Lt, SessionActivationRead as M, MIN_SUPPORTED_HOST_VERSION as Ma, opensConditionLead as Mc, capabilityRemedyPhrase as Mi, LifecyclePhase as Mn, DelegationRef as Mo, acquireHostTrust as Mr, CapabilityFact as Ms, openItems as Mt, SessionBirthIdentity as N, ParsedHostVersion as Na, opensWithDirective as Nc, deriveItemDiagnosis as Ni, claimedBatchHasRealRootInput as Nn, DeriveConfig as No, hostTrustDigest as Nr, CapabilityGap as Ns, recoveryDigest as Nt, validateActivationMigrationReceipt as O, HOST_VALIDATED_VERSIONS as Oa, legacyQuestionReadingIsInformational as Oc, DiagnosisNextAction as Oi, ClaimedMessage as On, BoundaryDisposition as Oo, HostRebindTrust as Or, proposeRebindV042 as Os, V6_ORDINARY_COMPLETION_RULE_SHORT as Ot, activationCanonical as P, SUPPORTED_HOST_RANGE as Pa, presentExplanationHead as Pc, evidenceAvailabilityReason as Pi, firstStepGuidance as Pn, DeriveResult as Po, parseHostTrust as Pr, CapabilityRemedy as Ps, recoveryTitle as Pt, TurnStoppingDecision as Q, isFrozenV042RebindResponse as Qa, STOP_PROTOCOL_VERSION as Qc, BASE_HOST_PACKAGES as Qi, injectActiveProfileHostLock as Qn, GuardProjection as Qo, commitTreeSnapshotDigest as Qr, DirectiveClass as Qs, SessionQuery as Qt, validateActivationBinding as R, parseHostVersion as Ra, restatedContentOf as Rc, CAPTURE_V042_NOTICE as Ri, ActiveProfileHostLock as Rn, EvidenceOutcome as Ro, GIT_COMMAND_MANIFEST_IDS as Rr, DerivedProcessFacts as Rs, PROOF_KINDS as Rt, adoptActivationReceipt as S, evaluateGraphDerivedHostLock as Sa, isInformationalFragment as Sc, isDeterministicCheck as Si, isVerifyingCapability as Sn, effectuateBoundary as So, readAsarFile as Sr, ProposeOutcome as Ss, DEFAULT_RECOVERY_CHAR_BUDGET as St, readActivationMigrationReceipt as T, evaluateToolSurfaceCapability as Ta, isRestatement as Tc, shellReadbackOutcome as Ti, ManifestIssue as Tn, AssetInterpretationFact as To, readDesktopDependency as Tr, confirmRebind as Ts, RecoveryOptions as Tt, projectSessionCoreV2 as U, AuthorityKind as Ua, ACTION_MANIFEST as Uc, PROTOCOL_V6_NOTICE as Ui, auditedDefaultWorkdirHost as Un, GoalRef as Uo, GitCommandParseResult as Ur, RemovalOutcomeReport as Us, ProofHostSurface as Ut, RC020_RC2_HOST_PACKAGES as V, AuthorityBlock as Va, statefulActionsOfScope as Vc, PROTOCOL_V4_NOTICE as Vi, TargetHostGraph as Vn, ExpectedTransition as Vo, GitCommandAccepted as Vr, ProcessFactSource as Vs, PROOF_PROTOCOL_VERSION as Vt, projectCoreV2 as W, authorityCaptureCounts as Wa, ACTION_MANIFEST_VERSION as Wc, applyUpgradeEligibility as Wi, auditedDefaultWorkdirProvider as Wn, GuardBoundary as Wo, GitCommandRejected as Wr, actionHasCertificationPath as Ws, ProofKind as Wt, NO_PROGRESS_RECORD_PREFIX as X, CONFIRM_LINE_PATTERN as Xa, SEMANTIC_ACTIONS as Xc, ACTIVE_HOST_LAUNCHER_VERSION as Xi, hostLockContextFromComposedDump as Xn, GuardItemStatus as Xo, LinearCommitReadback as Xr, removalIsPartiallyKnown as Xs, ProofObligationV2 as Xt, CurrentActionBasis as Y, classifyUserInteraction as Ya, CERTIFICATE_VERSION_V2 as Yc, ACTIVE_HOST_COHORT_IDS as Yi, evaluateConfiguredHostLock as Yn, GuardItemKind as Yo, GitTargetIdentity as Yr, removalIsComplete as Ys, ProofObligation as Yt, NO_PROGRESS_TURNS_BEFORE_STOP as Z, ParsedConfirmation as Za, STATEFUL_ACTIONS as Zc, AuditedExecutable as Zi, hostLockRowsFromComposedDump as Zn, GuardOperation as Zo, commitIndexSnapshotDigest as Zr, AuthorityDisposition as Zs, ProofSurface as Zt, verifyMigrationInventory as _, HostProfileKind as _a, interpretClause as _c, ToolResultInput as _i, sanitizeUrl as _l, validateProofManifestV2 as _n, BoundaryQualification as _o, DesktopTargetGraph as _r, ReleaseGateDecision as _s, V4SessionLike as _t, isSelectedActivationReceipt as a, HOST_COHORTS as aa, QualificationStatus as ac, CanonicalArgv as ai, isStatefulAction as al, proofCapabilityReport as an, ClauseSegment as ao, prepareTargetHostTrust as ar, SourceSpan as as, decisionBoundaryKey as at, __activationBindingInternals as b, bindLiveGoalCapability as ba, isExecutableItem as bc, extractTextContent as bi, evidenceCoverage as bn, GoalBoundaryAccess as bo, memoizedAsarFile as br, ReleaseSettlement as bs, CLEANUP_CONDITION_RULE_COMPACT as bt, selectedActivationInventory as c, HostCapabilityId as ca, clarifiedSpanOf as cc, ShellParseStatus as ci, requestedTargetMatchesResolved as cl, proofEvidenceConstraints as cn, classifyClause as co, resolveDesktopProfileHostLock as cr, TargetSource as cs, latestAssistantText as ct, verifySelectedMigrationInventory as d, HostCohortSelection as da, clauseIsProtected as dc, parsePwshCommand as di, validateActionManifest as dl, proofV2Rejection as dn, extractMethod as do, verifyComposedHostLockDump as dr, TargetValue as ds, progressFingerprint as dt, EXPECTED_HOST_PACKAGES as ea, ExecutionQualification as ec, executeRevalidatedGitEffect as ei, SUPPORTED_EVIDENCE_ADAPTERS as el, bindProofToProjection as en, CheckpointResult as eo, inspectTargetHostGraph as er, JobLifecycleRecord as es, assessmentOutcomePredicate as et, privateStorageToolDenial as f, HostCohortSelectionReason as fa, explanationHasActionResidue as fc, parseShellCommand as fi, validateActionTarget as fl, requiredSubjectsOf as fn, extractOperation as fo, AsarIndex as fr, VerificationContract as fs, testOutcomePredicate as ft, prepareActivationMigration as g, HostPlatform as ga, hasWorkPredicate as gc, ToolCallInput as gi, sanitizeClauseText as gl, validateProofManifest as gn, BoundaryEffectuation as go, DesktopAppRuntime as gr, PackageRow as gs, SessionApiError as gt, inspectActivationInventory as h, HostLockStatus as ha, hasQuestionScope as hc, NATIVE_GIT_ROOT_PARENT_OID as hi, normalizeClause as hl, sessionQueryV2 as hn, BOUNDARY_RECORD_PREFIX as ho, DESKTOP_RUNTIME_PACKAGE_NAME as hr, createProjection as hs, SESSION_EVENT_ENVELOPE_INVALID as ht, createActivationSelection as i, HOST_CAPABILITY_PACKAGE_GROUPS as ia, QualificationReason as ic, verifiedLinearCommitReadback as ii, boundedArtifactChoiceMatches as il, createProofManifestV2 as in, CaptureScope as io, prepareDesktopHostTrust as ir, PersistenceAuthorization as is, decideTurnStopping as it, SessionActivationBinding as j, LATEST_TESTED_HOST_VERSION as ja, namedActions as jc, UnifiedItemDiagnosis as ji, FirstStepPreviewInput as jn, DeferAuthorization as jo, HostTrustedPackage as jr, replayRebindResult as js, closingHint as jt, writeActivationBinding as k, HostVersionDecision as ka, maskCodeSpans as kc, Repairability as ki, FIRST_STEP_GUIDANCE as kn, BoundaryQualificationKind as ko, HostTrustAcquisitionOptions as kr, rebindAttemptKey as ks, carriesCleanupCondition as kt, validateActivationInventorySnapshot as l, HostCapabilityRequest as la, clauseAsksOwnQuestion as lc, canonicalArgvFromCommand as li, semanticActionFromCommand as ll, proofHostSurfacesOf as ln, environmentDefaultRepositoryTarget as lo, resolveInstalledHostLock as lr, TargetSourceKind as ls, latestRootInstruction as lt, ActivationPriorModes as m, HostLockEvaluation as ma, hasOrderedCoordination as mc, hasCurrentCertificate as mi, digestStrings as ml, sessionQuery as mn, segmentClauses as mo, DESKTOP_PROFILE_PACKAGE_NAME as mr, WorkUnit as ms, SESSION_API_UNSUPPORTED as mt, ActivationMigrationSelection as n, ExecutableIdentityBinding as na, InterpretOptions as nc, parseGitCommandManifest as ni, StatefulAction as nl, canonicalProjection as nn, bindingIndividuallyAccepted as no, packageRowsFromPnpmLock as nr, NeedsReviewFact as ns, currentActionBases as nt, prepareSelectedActivationMigration as o, HostAuditProvenance as oa, ScopeInterpretation as oc, CanonicalCommandSurface as oi, requestedIdentityKey as ol, proofDigest as on, captureClause as oo, readActiveHostGraph as or, TargetCaptureReasonCode as os, isRootPauseRequest as ot, ActivationInventoryPersistence as p, HostLockContext as pa, governedClauseRestrictsExecution as pc, goalCompletionDenial as pi, canonicalizePath as pl, scopeCoverageDigest as pn, isInformationalMessage as po, DESKTOP_IDENTITY_FACTS as pr, WaitAuthorization as ps, v6TestPredicate as pt, CONTROL_RECORD_PREFIX as q, UserInteractionKind as qa, BOUNDED_ARTIFACT_TYPES as qc, rootLocatorFlavor as qi, combineHostPolicy as qn, GuardIntegrity as qo, GitPrestateCheck as qr, capabilityFactOf as qs, ProofManifest as qt, activationSelectionPending as r, GOAL_HOST_PACKAGES as ra, LEGACY_QUALIFICATION as rc, revalidateGitPrestate as ri, actionCompatible as rl, createProofManifest as rn, certifyCheckpoint as ro, prepareActiveHostTrust as rr, NeedsReviewReason as rs, decideTurnBoundary as rt, scanActivationInventory as s, HostCapabilityEvaluation as sa, actionVerbMatches as sc, ParsedShell as si, requestedTargetAuthorizesMutation as sl, proofDigestV2 as sn, captureItem as so, resolveActiveProfileHostLock as sr, TargetCaptureStatus as ss, isWholeTaskCompletionClaim as st, ActivationInventorySnapshot as t, ExecutableIdentity as ta, GRANTED_QUALIFICATION as tc, gitCommandMatchesTarget as ti, SemanticAction as tl, bindProofV2ToProjection as tn, RejectedBinding as to, packageRowsFromActiveGraph as tr, MessageCoverage as ts, classifyCompletionClaim as tt, validateActivationSelection as u, HostCohort as ua, clauseIsGoverned as uc, isRunExecutable as ui, semanticActionFromText as ul, proofOperationMatches as un, extractArtifactPaths as uo, revalidateDesktopCoreLock as ur, TargetTuple as us, observeAssistantOutcome as ut, ActivationMigrationEntry as v, HostToolSurface as va, interpretMessage as vc, ToolSubject as vi, sha256 as vl, EvidenceFacetCoverage as vn, BoundaryRequest as vo, auditDesktopInstalledImplementation as vr, ReleaseObservedIdentity as vs, snapshotSessionEvents as vt, readActivationBinding as w, evaluateHostLock as wa, isQuestionScopeNeedingReview as wc, persistedToolResultStatus as wi, CommandSurfaceManifest as wn, qualifyBoundary as wo, readDesktopAppRuntime as wr, RebindProposal as ws, RecoveryCause as wt, activationBindingPath as x, evaluateExternalWaitCapability as xa, isExplanationScope as xc, extractToolSubject as xi, evidenceMatchesItem as xn, availableBoundaryQualifications as xo, memoizedAsarIndex as xr, BoundedSource as xs, CLEANUP_CONDITION_RULE_SHORT as xt, ActivationMigrationReceipt as y, bindExecutableIdentity as ya, introducesActionClause as yc, evidenceFromPersistedToolResult as yi, stripUrlCredentials as yl, bindingSatisfies as yn, GoalActivationState as yo, hasDesktopImporterState as yr, ReleaseOperation as ys, CLEANUP_CONDITION_RULE as yt, RC021_RC3_HOST_PACKAGES as z, satisfiesSupportedHostRange as za, semanticActionOfScope as zc, DEFAULT_DELEGATION_TOOL_NAMES as zi, AuditedPackageExpectation as zn, EvidenceParseStatus as zo, GIT_COMMAND_TEMPLATES as zr, OperationAttribution as zs, PROOF_KINDS_V2 as zt };
+//#region src/domain/activation-physical-inventory.d.ts
+/** Read-only byte fingerprints; log headers and bodies are never parsed or emitted. */
+interface ActivationPhysicalInventory {
+  sha256: string;
+  sessionSegments: string[];
+}
+type Compression = "none" | "zstd";
+/** Bound to the actual root, encoding and independently identified backend.
+* Unknown layouts and links fail closed; all generations are fingerprinted. */
+declare function captureActivationPhysicalInventory(root: string, compression: Compression, backendSha256: string): ActivationPhysicalInventory;
+declare function assertActivationPhysicalRows(physical: ActivationPhysicalInventory, rows: readonly {
+  header: unknown;
+}[]): void;
+/** Wrap the SDK seam without treating the seam itself as a physical census. */
+declare function guardActivationInventory<T extends {
+  list(): Promise<readonly {
+    header: unknown;
+  }[]>;
+}>(persistence: T, capture: () => ActivationPhysicalInventory): {
+  initial: ActivationPhysicalInventory;
+  check: () => ActivationPhysicalInventory;
+  list: () => ReturnType<T["list"]>;
+};
+/** Resolve the two official plugin export forms without trusting their shape. */
+declare function resolveActivationPersistencePlugin(module: {
+  default?: unknown;
+  apply?: unknown;
+}): unknown;
+/** Qualify the JSONL implementation by its reviewed module bytes and loader
+* shape; the release version itself is recorded, not an allowlist. */
+declare function assertActivationBackendIdentity(manifestValue: unknown, actualModules: Record<string, string>, reviewedModules: Record<string, string>): void;
+//#endregion
+export { supersedeItem as $, segmentAuthorityBlocks as $a, ActionManifest as $c, deriveProjection as $i, auditedForegroundRenderers as $n, GuardCheckpoint as $o, GitEffectExecution as $r, admissibleForRemoval as $s, ProofKindCapability as $t, createActivationMigrationReceipt as A, evaluateGraphDerivedHostLock as Aa, isInformationalFragment as Ac, isDeterministicCheck as Ai, isVerifyingCapability as An, effectuateBoundary as Ao, readAsarFile as Ar, ProposeOutcome as As, DEFAULT_RECOVERY_CHAR_BUDGET as At, SessionBirthIdentity as B, MIN_SUPPORTED_HOST_VERSION as Ba, opensConditionLead as Bc, capabilityRemedyPhrase as Bi, LifecyclePhase as Bn, DelegationRef as Bo, acquireHostTrust as Br, CapabilityFact as Bs, openItems as Bt, prepareActivationMigration as C, HostLockStatus as Ca, hasQuestionScope as Cc, NATIVE_GIT_ROOT_PARENT_OID as Ci, normalizeClause as Cl, sessionQueryV2 as Cn, BOUNDARY_RECORD_PREFIX as Co, DESKTOP_RUNTIME_PACKAGE_NAME as Cr, createProjection as Cs, SESSION_EVENT_ENVELOPE_INVALID as Ct, __activationBindingInternals as D, bindExecutableIdentity as Da, introducesActionClause as Dc, evidenceFromPersistedToolResult as Di, stripUrlCredentials as Dl, bindingSatisfies as Dn, GoalActivationState as Do, hasDesktopImporterState as Dr, ReleaseOperation as Ds, CLEANUP_CONDITION_RULE as Dt, ActivationMigrationReceipt as E, HostToolSurface as Ea, interpretMessage as Ec, ToolSubject as Ei, sha256 as El, EvidenceFacetCoverage as En, BoundaryRequest as Eo, auditDesktopInstalledImplementation as Er, ReleaseObservedIdentity as Es, snapshotSessionEvents as Et, validateActivationMigrationReceipt as F, selectHostCohort as Fa, kindOfScope as Fc, CertificationSupport as Fi, validateManifest as Fn, BindingActionClosure as Fo, writeDesktopRuntimeReceipt as Fr, proposeRebindOutcome as Fs, V6_ORDINARY_COMPLETION_RULE_COMPACT as Ft, validateActivationBinding as G, evaluateMinimumHostVersion as Ga, reportingHeadGoverns as Gc, relevantEvidence as Gi, previewFirstStepInjection as Gn, EvidenceBinding as Go, registryArchiveModules as Gr, DependencyStatus as Gs, PROOF_CAPABILITY_MATRIX as Gt, activationDigest as H, SUPPORTED_HOST_RANGE as Ha, presentExplanationHead as Hc, evidenceAvailabilityReason as Hi, firstStepGuidance as Hn, DeriveResult as Ho, parseHostTrust as Hr, CapabilityRemedy as Hs, recoveryTitle as Ht, writeActivationBinding as I, HOST_VALIDATED_VERSIONS as Ia, legacyQuestionReadingIsInformational as Ic, DiagnosisNextAction as Ii, ClaimedMessage as In, BoundaryDisposition as Io, HostRebindTrust as Ir, proposeRebindV042 as Is, V6_ORDINARY_COMPLETION_RULE_SHORT as It, RC021_RC2_HOST_PACKAGES as J, currentContractDigest as Ja, splitTextFragments as Jc, PROTOCOL_V3_NOTICE as Ji, HostProfileError as Jn, EvidenceRole as Jo, GitAdapterAction as Jr, ProcessExitStatus as Js, PROOF_MANIFEST_DOMAIN_V2 as Jt, RC021_RC5_HOST_PACKAGES as K, parseHostVersion as Ka, restatedContentOf as Kc, CAPTURE_V042_NOTICE as Ki, ActiveProfileHostLock as Kn, EvidenceOutcome as Ko, GIT_COMMAND_MANIFEST_IDS as Kr, DerivedProcessFacts as Ks, PROOF_KINDS as Kt, InitialActivation as L, HostVersionDecision as La, maskCodeSpans as Lc, Repairability as Li, FIRST_STEP_GUIDANCE as Ln, BoundaryQualificationKind as Lo, HostTrustAcquisitionOptions as Lr, rebindAttemptKey as Ls, carriesCleanupCondition as Lt, readActivationMigrationReceipt as M, evaluateHostLock as Ma, isQuestionScopeNeedingReview as Mc, persistedToolResultStatus as Mi, CommandSurfaceManifest as Mn, qualifyBoundary as Mo, readDesktopAppRuntime as Mr, RebindProposal as Ms, RecoveryCause as Mt, resolveActivationBindingsRoot as N, evaluateToolSurfaceCapability as Na, isRestatement as Nc, shellReadbackOutcome as Ni, ManifestIssue as Nn, AssetInterpretationFact as No, readDesktopDependency as Nr, confirmRebind as Ns, RecoveryOptions as Nt, activationBindingPath as O, bindLiveGoalCapability as Oa, isExecutableItem as Oc, extractTextContent as Oi, evidenceCoverage as On, GoalBoundaryAccess as Oo, memoizedAsarFile as Or, ReleaseSettlement as Os, CLEANUP_CONDITION_RULE_COMPACT as Ot, resolveSessionActivation as P, hostVersionFromPackages as Pa, itemHoldsExecutionAuthority as Pc, withDurability as Pi, OperationVerbEntry as Pn, AssetObligation as Po, readDesktopTargetGraph as Pr, proposeRebind as Ps, V6_ORDINARY_COMPLETION_RULE as Pt, projectCoreV2 as Q, authorityCaptureCounts as Qa, ACTION_MANIFEST_VERSION as Qc, applyUpgradeEligibility as Qi, auditedDefaultWorkdirProvider as Qn, GuardBoundary as Qo, GitCommandRejected as Qr, actionHasCertificationPath as Qs, ProofKind as Qt, SessionActivationBinding as R, HostVersionStatus as Ra, maskQuotedSpans as Rc, TaskKind as Ri, FirstStepInjection as Rn, CwdEpoch as Ro, HostTrustError as Rr, rebindResponse as Rs, cleanupConditionFor as Rt, inspectActivationInventory as S, HostLockEvaluation as Sa, hasOrderedCoordination as Sc, hasCurrentCertificate as Si, digestStrings as Sl, sessionQuery as Sn, segmentClauses as So, DESKTOP_PROFILE_PACKAGE_NAME as Sr, WorkUnit as Ss, SESSION_API_UNSUPPORTED as St, ActivationMigrationEntry as T, HostProfileKind as Ta, interpretClause as Tc, ToolResultInput as Ti, sanitizeUrl as Tl, validateProofManifestV2 as Tn, BoundaryQualification as To, DesktopTargetGraph as Tr, ReleaseGateDecision as Ts, V4SessionLike as Tt, activationJson as U, SUPPORTED_HOST_VERSIONS as Ua, qualificationOfClause as Uc, itemDiagnosis as Ui, firstStepGuidanceV6 as Un, DeriveScope as Uo, qualifyHostTrust as Ur, DEPENDENCY_FREE_ONLY_CONDITION as Us, renderRecoveryPacket as Ut, activationCanonical as V, ParsedHostVersion as Va, opensWithDirective as Vc, deriveItemDiagnosis as Vi, claimedBatchHasRealRootInput as Vn, DeriveConfig as Vo, hostTrustDigest as Vr, CapabilityGap as Vs, recoveryDigest as Vt, sessionBirthIdentity as W, compareHostVersions as Wa, questionHeadsClause as Wc, nativeFileTwoRole as Wi, lifecyclePhase as Wn, DerivedEnvelope as Wo, registryArchiveFiles as Wr, DeclaredOperationResult as Ws, v6CurrentRootBoundaries as Wt, RC020_RC1_HOST_PACKAGES as X, AuthorityBlockKind as Xa, verbIsNegated as Xc, PROTOCOL_V5_NOTICE as Xi, activeRendererModule as Xn, ExternalOperation as Xo, GitCommandManifest as Xr, ProcessOutcomeReason as Xs, PROOF_PROTOCOL_VERSION_V2 as Xt, RC020_RC2_HOST_PACKAGES as Y, AuthorityBlock as Ya, statefulActionsOfScope as Yc, PROTOCOL_V4_NOTICE as Yi, TargetHostGraph as Yn, ExpectedTransition as Yo, GitCommandAccepted as Yr, ProcessFactSource as Ys, PROOF_PROTOCOL_VERSION as Yt, projectSessionCoreV2 as Z, AuthorityKind as Za, ACTION_MANIFEST as Zc, PROTOCOL_V6_NOTICE as Zi, auditedDefaultWorkdirHost as Zn, GoalRef as Zo, GitCommandParseResult as Zr, RemovalOutcomeReport as Zs, ProofHostSurface as Zt, validateActivationSelection as _, HostCapabilityRequest as _a, clauseAsksOwnQuestion as _c, canonicalArgvFromCommand as _i, semanticActionFromCommand as _l, proofHostSurfacesOf as _n, environmentDefaultRepositoryTarget as _o, resolveInstalledHostLock as _r, TargetSourceKind as _s, latestRootInstruction as _t, guardActivationInventory as a, AuditedExecutable as aa, AuthorityDisposition as ac, commitIndexSnapshotDigest as ai, STATEFUL_ACTIONS as al, ProofSurface as an, ParsedConfirmation as ao, hostLockRowsFromComposedDump as ar, GuardOperation as as, NO_PROGRESS_TURNS_BEFORE_STOP as at, ActivationInventoryPersistence as b, HostCohortSelectionReason as ba, explanationHasActionResidue as bc, parseShellCommand as bi, validateActionTarget as bl, requiredSubjectsOf as bn, extractOperation as bo, AsarIndex as br, VerificationContract as bs, testOutcomePredicate as bt, ActivationMigrationSelection as c, EXPECTED_HOST_PACKAGES as ca, ExecutionQualification as cc, executeRevalidatedGitEffect as ci, SUPPORTED_EVIDENCE_ADAPTERS as cl, bindProofToProjection as cn, CheckpointResult as co, inspectTargetHostGraph as cr, JobLifecycleRecord as cs, assessmentOutcomePredicate as ct, createActivationSelection as d, GOAL_HOST_PACKAGES as da, LEGACY_QUALIFICATION as dc, revalidateGitPrestate as di, actionCompatible as dl, createProofManifest as dn, certifyCheckpoint as do, prepareActiveHostTrust as dr, NeedsReviewReason as ds, decideTurnBoundary as dt, legacyRecordsNeedingReview as ea, capabilityConsequence as ec, GitEffectRunner as ei, ActionSpec as el, ProofKindV2 as en, TaskIntent as eo, auditedHostImplementation as er, GuardEvidence as es, AssistantOutcomeObservation as et, isSelectedActivationReceipt as f, HOST_CAPABILITY_PACKAGE_GROUPS as fa, QualificationReason as fc, verifiedLinearCommitReadback as fi, boundedArtifactChoiceMatches as fl, createProofManifestV2 as fn, CaptureScope as fo, prepareDesktopHostTrust as fr, PersistenceAuthorization as fs, decideTurnStopping as ft, validateActivationInventorySnapshot as g, HostCapabilityId as ga, clarifiedSpanOf as gc, ShellParseStatus as gi, requestedTargetMatchesResolved as gl, proofEvidenceConstraints as gn, classifyClause as go, resolveDesktopProfileHostLock as gr, TargetSource as gs, latestAssistantText as gt, selectedActivationInventory as h, HostCapabilityEvaluation as ha, actionVerbMatches as hc, ParsedShell as hi, requestedTargetAuthorizesMutation as hl, proofDigestV2 as hn, captureItem as ho, resolveActiveProfileHostLock as hr, TargetCaptureStatus as hs, isWholeTaskCompletionClaim as ht, captureActivationPhysicalInventory as i, ACTIVE_HOST_LAUNCHER_VERSION as ia, removalIsPartiallyKnown as ic, LinearCommitReadback as ii, SEMANTIC_ACTIONS as il, ProofObligationV2 as in, CONFIRM_LINE_PATTERN as io, hostLockContextFromComposedDump as ir, GuardItemStatus as is, NO_PROGRESS_RECORD_PREFIX as it, readActivationBinding as j, evaluateHostCapability as ja, isOpenObligation as jc, nativeGitParentOidVerified as ji, COMMAND_SURFACE_MANIFEST as jn, isCurrentAcceptedBoundary as jo, readAsarIndex as jr, RebindArgs as js, MIN_RECOVERY_CHAR_BUDGET as jt, adoptActivationReceipt as k, evaluateExternalWaitCapability as ka, isExplanationScope as kc, extractToolSubject as ki, evidenceMatchesItem as kn, availableBoundaryQualifications as ko, memoizedAsarIndex as kr, BoundedSource as ks, CLEANUP_CONDITION_RULE_SHORT as kt, activationSelectionPending as l, ExecutableIdentity as la, GRANTED_QUALIFICATION as lc, gitCommandMatchesTarget as li, SemanticAction as ll, bindProofV2ToProjection as ln, RejectedBinding as lo, packageRowsFromActiveGraph as lr, MessageCoverage as ls, classifyCompletionClaim as lt, scanActivationInventory as m, HostAuditProvenance as ma, ScopeInterpretation as mc, CanonicalCommandSurface as mi, requestedIdentityKey as ml, proofDigest as mn, captureClause as mo, readActiveHostGraph as mr, TargetCaptureReasonCode as ms, isRootPauseRequest as mt, assertActivationBackendIdentity as n, ACTIVE_HOST_COHORT_ID as na, partialFailureOf as nc, GitPrestateEnvelope as ni, CERTIFICATE_VERSION as nl, ProofManifestV2 as nn, classifyTaskIntent as no, evaluateActiveHostLock as nr, GuardItem as ns, CompletionDisposition as nt, resolveActivationPersistencePlugin as o, BASE_HOST_PACKAGES as oa, DirectiveClass as oc, commitTreeSnapshotDigest as oi, STOP_PROTOCOL_VERSION as ol, SessionQuery as on, isFrozenV042RebindResponse as oo, injectActiveProfileHostLock as or, GuardProjection as os, TurnStoppingDecision as ot, prepareSelectedActivationMigration as p, HOST_COHORTS as pa, QualificationStatus as pc, CanonicalArgv as pi, isStatefulAction as pl, proofCapabilityReport as pn, ClauseSegment as po, prepareTargetHostTrust as pr, SourceSpan as ps, decisionBoundaryKey as pt, RC021_RC3_HOST_PACKAGES as q, satisfiesSupportedHostRange as qa, semanticActionOfScope as qc, DEFAULT_DELEGATION_TOOL_NAMES as qi, AuditedPackageExpectation as qn, EvidenceParseStatus as qo, GIT_COMMAND_TEMPLATES as qr, OperationAttribution as qs, PROOF_KINDS_V2 as qt, assertActivationPhysicalRows as r, ACTIVE_HOST_COHORT_IDS as ra, removalIsComplete as rc, GitTargetIdentity as ri, CERTIFICATE_VERSION_V2 as rl, ProofObligation as rn, classifyUserInteraction as ro, evaluateConfiguredHostLock as rr, GuardItemKind as rs, CurrentActionBasis as rt, ActivationInventorySnapshot as s, DEFAULT_HOST_LOCK as sa, Executee as sc, createGitPrestateEnvelope as si, STOP_PROTOCOL_VERSION_V2 as sl, SessionQueryV2 as sn, parseConfirmationMessage as so, inspectDesktopTargetGraph as sr, HostStatus as ss, assessmentAction as st, ActivationPhysicalInventory as t, rootLocatorFlavor as ta, capabilityFactOf as tc, GitPrestateCheck as ti, BOUNDED_ARTIFACT_TYPES as tl, ProofManifest as tn, UserInteractionKind as to, combineHostPolicy as tr, GuardIntegrity as ts, CONTROL_RECORD_PREFIX as tt, bindActivationInventoryPhysical as u, ExecutableIdentityBinding as ua, InterpretOptions as uc, parseGitCommandManifest as ui, StatefulAction as ul, canonicalProjection as un, bindingIndividuallyAccepted as uo, packageRowsFromPnpmLock as ur, NeedsReviewFact as us, currentActionBases as ut, verifySelectedMigrationInventory as v, HostCohort as va, clauseIsGoverned as vc, isRunExecutable as vi, semanticActionFromText as vl, proofOperationMatches as vn, extractArtifactPaths as vo, revalidateDesktopCoreLock as vr, TargetTuple as vs, observeAssistantOutcome as vt, verifyMigrationInventory as w, HostPlatform as wa, hasWorkPredicate as wc, ToolCallInput as wi, sanitizeClauseText as wl, validateProofManifest as wn, BoundaryEffectuation as wo, DesktopAppRuntime as wr, PackageRow as ws, SessionApiError as wt, ActivationPriorModes as x, HostLockContext as xa, governedClauseRestrictsExecution as xc, goalCompletionDenial as xi, canonicalizePath as xl, scopeCoverageDigest as xn, isInformationalMessage as xo, DESKTOP_IDENTITY_FACTS as xr, WaitAuthorization as xs, v6TestPredicate as xt, privateStorageToolDenial as y, HostCohortSelection as ya, clauseIsProtected as yc, parsePwshCommand as yi, validateActionManifest as yl, proofV2Rejection as yn, extractMethod as yo, verifyComposedHostLockDump as yr, TargetValue as ys, progressFingerprint as yt, SessionActivationRead as z, LATEST_TESTED_HOST_VERSION as za, namedActions as zc, UnifiedItemDiagnosis as zi, FirstStepPreviewInput as zn, DeferAuthorization as zo, HostTrustedPackage as zr, replayRebindResult as zs, closingHint as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as assessmentAction, $a as parseConfirmationMessage, $c as STOP_PROTOCOL_VERSION_V2, $i as DEFAULT_HOST_LOCK, $n as inspectDesktopTargetGraph, $o as HostStatus, $r as createGitPrestateEnvelope, $s as Executee, $t as SessionQueryV2, A as InitialActivation, Aa as HostVersionStatus, Ac as maskQuotedSpans, Ai as TaskKind, An as FirstStepInjection, Ao as CwdEpoch, Ar as HostTrustError, As as rebindResponse, At as cleanupConditionFor, B as RC021_RC2_HOST_PACKAGES, Ba as currentContractDigest, Bc as splitTextFragments, Bi as PROTOCOL_V3_NOTICE, Bn as HostProfileError, Bo as EvidenceRole, Br as GitAdapterAction, Bs as ProcessExitStatus, Bt as PROOF_MANIFEST_DOMAIN_V2, C as createActivationMigrationReceipt, Ca as evaluateHostCapability, Cc as isOpenObligation, Ci as nativeGitParentOidVerified, Cn as COMMAND_SURFACE_MANIFEST, Co as isCurrentAcceptedBoundary, Cr as readAsarIndex, Cs as RebindArgs, Ct as MIN_RECOVERY_CHAR_BUDGET, D as resolveSessionActivation, Da as selectHostCohort, Dc as kindOfScope, Di as CertificationSupport, Dn as validateManifest, Do as BindingActionClosure, Dr as writeDesktopRuntimeReceipt, Ds as proposeRebindOutcome, Dt as V6_ORDINARY_COMPLETION_RULE_COMPACT, E as resolveActivationBindingsRoot, Ea as hostVersionFromPackages, Ec as itemHoldsExecutionAuthority, Ei as withDurability, En as OperationVerbEntry, Eo as AssetObligation, Er as readDesktopTargetGraph, Es as proposeRebind, Et as V6_ORDINARY_COMPLETION_RULE, F as activationDigest, Fa as SUPPORTED_HOST_VERSIONS, Fc as qualificationOfClause, Fi as itemDiagnosis, Fn as firstStepGuidanceV6, Fo as DeriveScope, Fr as qualifyHostTrust, Fs as DEPENDENCY_FREE_ONLY_CONDITION, Ft as renderRecoveryPacket, G as supersedeItem, Ga as segmentAuthorityBlocks, Gc as ActionManifest, Gi as deriveProjection, Gn as auditedForegroundRenderers, Go as GuardCheckpoint, Gr as GitEffectExecution, Gs as admissibleForRemoval, Gt as ProofKindCapability, H as RC020_RC1_HOST_PACKAGES, Ha as AuthorityBlockKind, Hc as verbIsNegated, Hi as PROTOCOL_V5_NOTICE, Hn as activeRendererModule, Ho as ExternalOperation, Hr as GitCommandManifest, Hs as ProcessOutcomeReason, Ht as PROOF_PROTOCOL_VERSION_V2, I as activationJson, Ia as compareHostVersions, Ic as questionHeadsClause, Ii as nativeFileTwoRole, In as lifecyclePhase, Io as DerivedEnvelope, Ir as registryArchiveFiles, Is as DeclaredOperationResult, It as v6CurrentRootBoundaries, J as CompletionDisposition, Ja as classifyTaskIntent, Jc as CERTIFICATE_VERSION, Ji as ACTIVE_HOST_COHORT_ID, Jn as evaluateActiveHostLock, Jo as GuardItem, Jr as GitPrestateEnvelope, Js as partialFailureOf, Jt as ProofManifestV2, K as AssistantOutcomeObservation, Ka as TaskIntent, Kc as ActionSpec, Ki as legacyRecordsNeedingReview, Kn as auditedHostImplementation, Ko as GuardEvidence, Kr as GitEffectRunner, Ks as capabilityConsequence, Kt as ProofKindV2, L as sessionBirthIdentity, La as evaluateMinimumHostVersion, Lc as reportingHeadGoverns, Li as relevantEvidence, Ln as previewFirstStepInjection, Lo as EvidenceBinding, Lr as registryArchiveModules, Ls as DependencyStatus, Lt as PROOF_CAPABILITY_MATRIX, M as SessionActivationRead, Ma as MIN_SUPPORTED_HOST_VERSION, Mc as opensConditionLead, Mi as capabilityRemedyPhrase, Mn as LifecyclePhase, Mo as DelegationRef, Mr as acquireHostTrust, Ms as CapabilityFact, Mt as openItems, N as SessionBirthIdentity, Na as ParsedHostVersion, Nc as opensWithDirective, Ni as deriveItemDiagnosis, Nn as claimedBatchHasRealRootInput, No as DeriveConfig, Nr as hostTrustDigest, Ns as CapabilityGap, Nt as recoveryDigest, O as validateActivationMigrationReceipt, Oa as HOST_VALIDATED_VERSIONS, Oc as legacyQuestionReadingIsInformational, Oi as DiagnosisNextAction, On as ClaimedMessage, Oo as BoundaryDisposition, Or as HostRebindTrust, Os as proposeRebindV042, Ot as V6_ORDINARY_COMPLETION_RULE_SHORT, P as activationCanonical, Pa as SUPPORTED_HOST_RANGE, Pc as presentExplanationHead, Pi as evidenceAvailabilityReason, Pn as firstStepGuidance, Po as DeriveResult, Pr as parseHostTrust, Ps as CapabilityRemedy, Pt as recoveryTitle, Q as TurnStoppingDecision, Qa as isFrozenV042RebindResponse, Qc as STOP_PROTOCOL_VERSION, Qi as BASE_HOST_PACKAGES, Qn as injectActiveProfileHostLock, Qo as GuardProjection, Qr as commitTreeSnapshotDigest, Qs as DirectiveClass, Qt as SessionQuery, R as validateActivationBinding, Ra as parseHostVersion, Rc as restatedContentOf, Ri as CAPTURE_V042_NOTICE, Rn as ActiveProfileHostLock, Ro as EvidenceOutcome, Rr as GIT_COMMAND_MANIFEST_IDS, Rs as DerivedProcessFacts, Rt as PROOF_KINDS, S as adoptActivationReceipt, Sa as evaluateGraphDerivedHostLock, Sc as isInformationalFragment, Si as isDeterministicCheck, Sn as isVerifyingCapability, So as effectuateBoundary, Sr as readAsarFile, Ss as ProposeOutcome, St as DEFAULT_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as evaluateToolSurfaceCapability, Tc as isRestatement, Ti as shellReadbackOutcome, Tn as ManifestIssue, To as AssetInterpretationFact, Tr as readDesktopDependency, Ts as confirmRebind, Tt as RecoveryOptions, U as projectSessionCoreV2, Ua as AuthorityKind, Uc as ACTION_MANIFEST, Ui as PROTOCOL_V6_NOTICE, Un as auditedDefaultWorkdirHost, Uo as GoalRef, Ur as GitCommandParseResult, Us as RemovalOutcomeReport, Ut as ProofHostSurface, V as RC020_RC2_HOST_PACKAGES, Va as AuthorityBlock, Vc as statefulActionsOfScope, Vi as PROTOCOL_V4_NOTICE, Vn as TargetHostGraph, Vo as ExpectedTransition, Vr as GitCommandAccepted, Vs as ProcessFactSource, Vt as PROOF_PROTOCOL_VERSION, W as projectCoreV2, Wa as authorityCaptureCounts, Wc as ACTION_MANIFEST_VERSION, Wi as applyUpgradeEligibility, Wn as auditedDefaultWorkdirProvider, Wo as GuardBoundary, Wr as GitCommandRejected, Ws as actionHasCertificationPath, Wt as ProofKind, X as NO_PROGRESS_RECORD_PREFIX, Xa as CONFIRM_LINE_PATTERN, Xc as SEMANTIC_ACTIONS, Xi as ACTIVE_HOST_LAUNCHER_VERSION, Xn as hostLockContextFromComposedDump, Xo as GuardItemStatus, Xr as LinearCommitReadback, Xs as removalIsPartiallyKnown, Xt as ProofObligationV2, Y as CurrentActionBasis, Ya as classifyUserInteraction, Yc as CERTIFICATE_VERSION_V2, Yi as ACTIVE_HOST_COHORT_IDS, Yn as evaluateConfiguredHostLock, Yo as GuardItemKind, Yr as GitTargetIdentity, Ys as removalIsComplete, Yt as ProofObligation, Z as NO_PROGRESS_TURNS_BEFORE_STOP, Za as ParsedConfirmation, Zc as STATEFUL_ACTIONS, Zi as AuditedExecutable, Zn as hostLockRowsFromComposedDump, Zo as GuardOperation, Zr as commitIndexSnapshotDigest, Zs as AuthorityDisposition, Zt as ProofSurface, _ as verifyMigrationInventory, _a as HostProfileKind, _c as interpretClause, _i as ToolResultInput, _l as sanitizeUrl, _n as validateProofManifestV2, _o as BoundaryQualification, _r as DesktopTargetGraph, _s as ReleaseGateDecision, _t as V4SessionLike, a as isSelectedActivationReceipt, aa as HOST_COHORTS, ac as QualificationStatus, ai as CanonicalArgv, al as isStatefulAction, an as proofCapabilityReport, ao as ClauseSegment, ar as prepareTargetHostTrust, as as SourceSpan, at as decisionBoundaryKey, b as __activationBindingInternals, ba as bindLiveGoalCapability, bc as isExecutableItem, bi as extractTextContent, bn as evidenceCoverage, bo as GoalBoundaryAccess, br as memoizedAsarFile, bs as ReleaseSettlement, bt as CLEANUP_CONDITION_RULE_COMPACT, c as selectedActivationInventory, ca as HostCapabilityId, cc as clarifiedSpanOf, ci as ShellParseStatus, cl as requestedTargetMatchesResolved, cn as proofEvidenceConstraints, co as classifyClause, cr as resolveDesktopProfileHostLock, cs as TargetSource, ct as latestAssistantText, d as verifySelectedMigrationInventory, da as HostCohortSelection, dc as clauseIsProtected, di as parsePwshCommand, dl as validateActionManifest, dn as proofV2Rejection, do as extractMethod, dr as verifyComposedHostLockDump, ds as TargetValue, dt as progressFingerprint, ea as EXPECTED_HOST_PACKAGES, ec as ExecutionQualification, ei as executeRevalidatedGitEffect, el as SUPPORTED_EVIDENCE_ADAPTERS, en as bindProofToProjection, eo as CheckpointResult, er as inspectTargetHostGraph, es as JobLifecycleRecord, et as assessmentOutcomePredicate, f as privateStorageToolDenial, fa as HostCohortSelectionReason, fc as explanationHasActionResidue, fi as parseShellCommand, fl as validateActionTarget, fn as requiredSubjectsOf, fo as extractOperation, fr as AsarIndex, fs as VerificationContract, ft as testOutcomePredicate, g as prepareActivationMigration, ga as HostPlatform, gc as hasWorkPredicate, gi as ToolCallInput, gl as sanitizeClauseText, gn as validateProofManifest, go as BoundaryEffectuation, gr as DesktopAppRuntime, gs as PackageRow, gt as SessionApiError, h as inspectActivationInventory, ha as HostLockStatus, hc as hasQuestionScope, hi as NATIVE_GIT_ROOT_PARENT_OID, hl as normalizeClause, hn as sessionQueryV2, ho as BOUNDARY_RECORD_PREFIX, hr as DESKTOP_RUNTIME_PACKAGE_NAME, hs as createProjection, ht as SESSION_EVENT_ENVELOPE_INVALID, i as createActivationSelection, ia as HOST_CAPABILITY_PACKAGE_GROUPS, ic as QualificationReason, ii as verifiedLinearCommitReadback, il as boundedArtifactChoiceMatches, in as createProofManifestV2, io as CaptureScope, ir as prepareDesktopHostTrust, is as PersistenceAuthorization, it as decideTurnStopping, j as SessionActivationBinding, ja as LATEST_TESTED_HOST_VERSION, jc as namedActions, ji as UnifiedItemDiagnosis, jn as FirstStepPreviewInput, jo as DeferAuthorization, jr as HostTrustedPackage, js as replayRebindResult, jt as closingHint, k as writeActivationBinding, ka as HostVersionDecision, kc as maskCodeSpans, ki as Repairability, kn as FIRST_STEP_GUIDANCE, ko as BoundaryQualificationKind, kr as HostTrustAcquisitionOptions, ks as rebindAttemptKey, kt as carriesCleanupCondition, l as validateActivationInventorySnapshot, la as HostCapabilityRequest, lc as clauseAsksOwnQuestion, li as canonicalArgvFromCommand, ll as semanticActionFromCommand, ln as proofHostSurfacesOf, lo as environmentDefaultRepositoryTarget, lr as resolveInstalledHostLock, ls as TargetSourceKind, lt as latestRootInstruction, m as ActivationPriorModes, ma as HostLockEvaluation, mc as hasOrderedCoordination, mi as hasCurrentCertificate, ml as digestStrings, mn as sessionQuery, mo as segmentClauses, mr as DESKTOP_PROFILE_PACKAGE_NAME, ms as WorkUnit, mt as SESSION_API_UNSUPPORTED, n as ActivationMigrationSelection, na as ExecutableIdentityBinding, nc as InterpretOptions, ni as parseGitCommandManifest, nl as StatefulAction, nn as canonicalProjection, no as bindingIndividuallyAccepted, nr as packageRowsFromPnpmLock, ns as NeedsReviewFact, nt as currentActionBases, o as prepareSelectedActivationMigration, oa as HostAuditProvenance, oc as ScopeInterpretation, oi as CanonicalCommandSurface, ol as requestedIdentityKey, on as proofDigest, oo as captureClause, or as readActiveHostGraph, os as TargetCaptureReasonCode, ot as isRootPauseRequest, p as ActivationInventoryPersistence, pa as HostLockContext, pc as governedClauseRestrictsExecution, pi as goalCompletionDenial, pl as canonicalizePath, pn as scopeCoverageDigest, po as isInformationalMessage, pr as DESKTOP_IDENTITY_FACTS, ps as WaitAuthorization, pt as v6TestPredicate, q as CONTROL_RECORD_PREFIX, qa as UserInteractionKind, qc as BOUNDED_ARTIFACT_TYPES, qi as rootLocatorFlavor, qn as combineHostPolicy, qo as GuardIntegrity, qr as GitPrestateCheck, qs as capabilityFactOf, qt as ProofManifest, r as activationSelectionPending, ra as GOAL_HOST_PACKAGES, rc as LEGACY_QUALIFICATION, ri as revalidateGitPrestate, rl as actionCompatible, rn as createProofManifest, ro as certifyCheckpoint, rr as prepareActiveHostTrust, rs as NeedsReviewReason, rt as decideTurnBoundary, s as scanActivationInventory, sa as HostCapabilityEvaluation, sc as actionVerbMatches, si as ParsedShell, sl as requestedTargetAuthorizesMutation, sn as proofDigestV2, so as captureItem, sr as resolveActiveProfileHostLock, ss as TargetCaptureStatus, st as isWholeTaskCompletionClaim, t as ActivationInventorySnapshot, ta as ExecutableIdentity, tc as GRANTED_QUALIFICATION, ti as gitCommandMatchesTarget, tl as SemanticAction, tn as bindProofV2ToProjection, to as RejectedBinding, tr as packageRowsFromActiveGraph, ts as MessageCoverage, tt as classifyCompletionClaim, u as validateActivationSelection, ua as HostCohort, uc as clauseIsGoverned, ui as isRunExecutable, ul as semanticActionFromText, un as proofOperationMatches, uo as extractArtifactPaths, ur as revalidateDesktopCoreLock, us as TargetTuple, ut as observeAssistantOutcome, v as ActivationMigrationEntry, va as HostToolSurface, vc as interpretMessage, vi as ToolSubject, vl as sha256, vn as EvidenceFacetCoverage, vo as BoundaryRequest, vr as auditDesktopInstalledImplementation, vs as ReleaseObservedIdentity, vt as snapshotSessionEvents, w as readActivationBinding, wa as evaluateHostLock, wc as isQuestionScopeNeedingReview, wi as persistedToolResultStatus, wn as CommandSurfaceManifest, wo as qualifyBoundary, wr as readDesktopAppRuntime, ws as RebindProposal, wt as RecoveryCause, x as activationBindingPath, xa as evaluateExternalWaitCapability, xc as isExplanationScope, xi as extractToolSubject, xn as evidenceMatchesItem, xo as availableBoundaryQualifications, xr as memoizedAsarIndex, xs as BoundedSource, xt as CLEANUP_CONDITION_RULE_SHORT, y as ActivationMigrationReceipt, ya as bindExecutableIdentity, yc as introducesActionClause, yi as evidenceFromPersistedToolResult, yl as stripUrlCredentials, yn as bindingSatisfies, yo as GoalActivationState, yr as hasDesktopImporterState, ys as ReleaseOperation, yt as CLEANUP_CONDITION_RULE, z as RC021_RC3_HOST_PACKAGES, za as satisfiesSupportedHostRange, zc as semanticActionOfScope, zi as DEFAULT_DELEGATION_TOOL_NAMES, zn as AuditedPackageExpectation, zo as EvidenceParseStatus, zr as GIT_COMMAND_TEMPLATES, zs as OperationAttribution, zt as PROOF_KINDS_V2 } from "./index-ClmcMWbM.js";
+import { $ as supersedeItem, $a as segmentAuthorityBlocks, $c as ActionManifest, $i as deriveProjection, $n as auditedForegroundRenderers, $o as GuardCheckpoint, $r as GitEffectExecution, $s as admissibleForRemoval, $t as ProofKindCapability, A as createActivationMigrationReceipt, Aa as evaluateGraphDerivedHostLock, Ac as isInformationalFragment, Ai as isDeterministicCheck, An as isVerifyingCapability, Ao as effectuateBoundary, Ar as readAsarFile, As as ProposeOutcome, At as DEFAULT_RECOVERY_CHAR_BUDGET, B as SessionBirthIdentity, Ba as MIN_SUPPORTED_HOST_VERSION, Bc as opensConditionLead, Bi as capabilityRemedyPhrase, Bn as LifecyclePhase, Bo as DelegationRef, Br as acquireHostTrust, Bs as CapabilityFact, Bt as openItems, C as prepareActivationMigration, Ca as HostLockStatus, Cc as hasQuestionScope, Ci as NATIVE_GIT_ROOT_PARENT_OID, Cl as normalizeClause, Cn as sessionQueryV2, Co as BOUNDARY_RECORD_PREFIX, Cr as DESKTOP_RUNTIME_PACKAGE_NAME, Cs as createProjection, Ct as SESSION_EVENT_ENVELOPE_INVALID, D as __activationBindingInternals, Da as bindExecutableIdentity, Dc as introducesActionClause, Di as evidenceFromPersistedToolResult, Dl as stripUrlCredentials, Dn as bindingSatisfies, Do as GoalActivationState, Dr as hasDesktopImporterState, Ds as ReleaseOperation, Dt as CLEANUP_CONDITION_RULE, E as ActivationMigrationReceipt, Ea as HostToolSurface, Ec as interpretMessage, Ei as ToolSubject, El as sha256, En as EvidenceFacetCoverage, Eo as BoundaryRequest, Er as auditDesktopInstalledImplementation, Es as ReleaseObservedIdentity, Et as snapshotSessionEvents, F as validateActivationMigrationReceipt, Fa as selectHostCohort, Fc as kindOfScope, Fi as CertificationSupport, Fn as validateManifest, Fo as BindingActionClosure, Fr as writeDesktopRuntimeReceipt, Fs as proposeRebindOutcome, Ft as V6_ORDINARY_COMPLETION_RULE_COMPACT, G as validateActivationBinding, Ga as evaluateMinimumHostVersion, Gc as reportingHeadGoverns, Gi as relevantEvidence, Gn as previewFirstStepInjection, Go as EvidenceBinding, Gr as registryArchiveModules, Gs as DependencyStatus, Gt as PROOF_CAPABILITY_MATRIX, H as activationDigest, Ha as SUPPORTED_HOST_RANGE, Hc as presentExplanationHead, Hi as evidenceAvailabilityReason, Hn as firstStepGuidance, Ho as DeriveResult, Hr as parseHostTrust, Hs as CapabilityRemedy, Ht as recoveryTitle, I as writeActivationBinding, Ia as HOST_VALIDATED_VERSIONS, Ic as legacyQuestionReadingIsInformational, Ii as DiagnosisNextAction, In as ClaimedMessage, Io as BoundaryDisposition, Ir as HostRebindTrust, Is as proposeRebindV042, It as V6_ORDINARY_COMPLETION_RULE_SHORT, J as RC021_RC2_HOST_PACKAGES, Ja as currentContractDigest, Jc as splitTextFragments, Ji as PROTOCOL_V3_NOTICE, Jn as HostProfileError, Jo as EvidenceRole, Jr as GitAdapterAction, Js as ProcessExitStatus, Jt as PROOF_MANIFEST_DOMAIN_V2, K as RC021_RC5_HOST_PACKAGES, Ka as parseHostVersion, Kc as restatedContentOf, Ki as CAPTURE_V042_NOTICE, Kn as ActiveProfileHostLock, Ko as EvidenceOutcome, Kr as GIT_COMMAND_MANIFEST_IDS, Ks as DerivedProcessFacts, Kt as PROOF_KINDS, L as InitialActivation, La as HostVersionDecision, Lc as maskCodeSpans, Li as Repairability, Ln as FIRST_STEP_GUIDANCE, Lo as BoundaryQualificationKind, Lr as HostTrustAcquisitionOptions, Ls as rebindAttemptKey, Lt as carriesCleanupCondition, M as readActivationMigrationReceipt, Ma as evaluateHostLock, Mc as isQuestionScopeNeedingReview, Mi as persistedToolResultStatus, Mn as CommandSurfaceManifest, Mo as qualifyBoundary, Mr as readDesktopAppRuntime, Ms as RebindProposal, Mt as RecoveryCause, N as resolveActivationBindingsRoot, Na as evaluateToolSurfaceCapability, Nc as isRestatement, Ni as shellReadbackOutcome, Nn as ManifestIssue, No as AssetInterpretationFact, Nr as readDesktopDependency, Ns as confirmRebind, Nt as RecoveryOptions, O as activationBindingPath, Oa as bindLiveGoalCapability, Oc as isExecutableItem, Oi as extractTextContent, On as evidenceCoverage, Oo as GoalBoundaryAccess, Or as memoizedAsarFile, Os as ReleaseSettlement, Ot as CLEANUP_CONDITION_RULE_COMPACT, P as resolveSessionActivation, Pa as hostVersionFromPackages, Pc as itemHoldsExecutionAuthority, Pi as withDurability, Pn as OperationVerbEntry, Po as AssetObligation, Pr as readDesktopTargetGraph, Ps as proposeRebind, Pt as V6_ORDINARY_COMPLETION_RULE, Q as projectCoreV2, Qa as authorityCaptureCounts, Qc as ACTION_MANIFEST_VERSION, Qi as applyUpgradeEligibility, Qn as auditedDefaultWorkdirProvider, Qo as GuardBoundary, Qr as GitCommandRejected, Qs as actionHasCertificationPath, Qt as ProofKind, R as SessionActivationBinding, Ra as HostVersionStatus, Rc as maskQuotedSpans, Ri as TaskKind, Rn as FirstStepInjection, Ro as CwdEpoch, Rr as HostTrustError, Rs as rebindResponse, Rt as cleanupConditionFor, S as inspectActivationInventory, Sa as HostLockEvaluation, Sc as hasOrderedCoordination, Si as hasCurrentCertificate, Sl as digestStrings, Sn as sessionQuery, So as segmentClauses, Sr as DESKTOP_PROFILE_PACKAGE_NAME, Ss as WorkUnit, St as SESSION_API_UNSUPPORTED, T as ActivationMigrationEntry, Ta as HostProfileKind, Tc as interpretClause, Ti as ToolResultInput, Tl as sanitizeUrl, Tn as validateProofManifestV2, To as BoundaryQualification, Tr as DesktopTargetGraph, Ts as ReleaseGateDecision, Tt as V4SessionLike, U as activationJson, Ua as SUPPORTED_HOST_VERSIONS, Uc as qualificationOfClause, Ui as itemDiagnosis, Un as firstStepGuidanceV6, Uo as DeriveScope, Ur as qualifyHostTrust, Us as DEPENDENCY_FREE_ONLY_CONDITION, Ut as renderRecoveryPacket, V as activationCanonical, Va as ParsedHostVersion, Vc as opensWithDirective, Vi as deriveItemDiagnosis, Vn as claimedBatchHasRealRootInput, Vo as DeriveConfig, Vr as hostTrustDigest, Vs as CapabilityGap, Vt as recoveryDigest, W as sessionBirthIdentity, Wa as compareHostVersions, Wc as questionHeadsClause, Wi as nativeFileTwoRole, Wn as lifecyclePhase, Wo as DerivedEnvelope, Wr as registryArchiveFiles, Ws as DeclaredOperationResult, Wt as v6CurrentRootBoundaries, X as RC020_RC1_HOST_PACKAGES, Xa as AuthorityBlockKind, Xc as verbIsNegated, Xi as PROTOCOL_V5_NOTICE, Xn as activeRendererModule, Xo as ExternalOperation, Xr as GitCommandManifest, Xs as ProcessOutcomeReason, Xt as PROOF_PROTOCOL_VERSION_V2, Y as RC020_RC2_HOST_PACKAGES, Ya as AuthorityBlock, Yc as statefulActionsOfScope, Yi as PROTOCOL_V4_NOTICE, Yn as TargetHostGraph, Yo as ExpectedTransition, Yr as GitCommandAccepted, Ys as ProcessFactSource, Yt as PROOF_PROTOCOL_VERSION, Z as projectSessionCoreV2, Za as AuthorityKind, Zc as ACTION_MANIFEST, Zi as PROTOCOL_V6_NOTICE, Zn as auditedDefaultWorkdirHost, Zo as GoalRef, Zr as GitCommandParseResult, Zs as RemovalOutcomeReport, Zt as ProofHostSurface, _ as validateActivationSelection, _a as HostCapabilityRequest, _c as clauseAsksOwnQuestion, _i as canonicalArgvFromCommand, _l as semanticActionFromCommand, _n as proofHostSurfacesOf, _o as environmentDefaultRepositoryTarget, _r as resolveInstalledHostLock, _s as TargetSourceKind, _t as latestRootInstruction, a as guardActivationInventory, aa as AuditedExecutable, ac as AuthorityDisposition, ai as commitIndexSnapshotDigest, al as STATEFUL_ACTIONS, an as ProofSurface, ao as ParsedConfirmation, ar as hostLockRowsFromComposedDump, as as GuardOperation, at as NO_PROGRESS_TURNS_BEFORE_STOP, b as ActivationInventoryPersistence, ba as HostCohortSelectionReason, bc as explanationHasActionResidue, bi as parseShellCommand, bl as validateActionTarget, bn as requiredSubjectsOf, bo as extractOperation, br as AsarIndex, bs as VerificationContract, bt as testOutcomePredicate, c as ActivationMigrationSelection, ca as EXPECTED_HOST_PACKAGES, cc as ExecutionQualification, ci as executeRevalidatedGitEffect, cl as SUPPORTED_EVIDENCE_ADAPTERS, cn as bindProofToProjection, co as CheckpointResult, cr as inspectTargetHostGraph, cs as JobLifecycleRecord, ct as assessmentOutcomePredicate, d as createActivationSelection, da as GOAL_HOST_PACKAGES, dc as LEGACY_QUALIFICATION, di as revalidateGitPrestate, dl as actionCompatible, dn as createProofManifest, do as certifyCheckpoint, dr as prepareActiveHostTrust, ds as NeedsReviewReason, dt as decideTurnBoundary, ea as legacyRecordsNeedingReview, ec as capabilityConsequence, ei as GitEffectRunner, el as ActionSpec, en as ProofKindV2, eo as TaskIntent, er as auditedHostImplementation, es as GuardEvidence, et as AssistantOutcomeObservation, f as isSelectedActivationReceipt, fa as HOST_CAPABILITY_PACKAGE_GROUPS, fc as QualificationReason, fi as verifiedLinearCommitReadback, fl as boundedArtifactChoiceMatches, fn as createProofManifestV2, fo as CaptureScope, fr as prepareDesktopHostTrust, fs as PersistenceAuthorization, ft as decideTurnStopping, g as validateActivationInventorySnapshot, ga as HostCapabilityId, gc as clarifiedSpanOf, gi as ShellParseStatus, gl as requestedTargetMatchesResolved, gn as proofEvidenceConstraints, go as classifyClause, gr as resolveDesktopProfileHostLock, gs as TargetSource, gt as latestAssistantText, h as selectedActivationInventory, ha as HostCapabilityEvaluation, hc as actionVerbMatches, hi as ParsedShell, hl as requestedTargetAuthorizesMutation, hn as proofDigestV2, ho as captureItem, hr as resolveActiveProfileHostLock, hs as TargetCaptureStatus, ht as isWholeTaskCompletionClaim, i as captureActivationPhysicalInventory, ia as ACTIVE_HOST_LAUNCHER_VERSION, ic as removalIsPartiallyKnown, ii as LinearCommitReadback, il as SEMANTIC_ACTIONS, in as ProofObligationV2, io as CONFIRM_LINE_PATTERN, ir as hostLockContextFromComposedDump, is as GuardItemStatus, it as NO_PROGRESS_RECORD_PREFIX, j as readActivationBinding, ja as evaluateHostCapability, jc as isOpenObligation, ji as nativeGitParentOidVerified, jn as COMMAND_SURFACE_MANIFEST, jo as isCurrentAcceptedBoundary, jr as readAsarIndex, js as RebindArgs, jt as MIN_RECOVERY_CHAR_BUDGET, k as adoptActivationReceipt, ka as evaluateExternalWaitCapability, kc as isExplanationScope, ki as extractToolSubject, kn as evidenceMatchesItem, ko as availableBoundaryQualifications, kr as memoizedAsarIndex, ks as BoundedSource, kt as CLEANUP_CONDITION_RULE_SHORT, l as activationSelectionPending, la as ExecutableIdentity, lc as GRANTED_QUALIFICATION, li as gitCommandMatchesTarget, ll as SemanticAction, ln as bindProofV2ToProjection, lo as RejectedBinding, lr as packageRowsFromActiveGraph, ls as MessageCoverage, lt as classifyCompletionClaim, m as scanActivationInventory, ma as HostAuditProvenance, mc as ScopeInterpretation, mi as CanonicalCommandSurface, ml as requestedIdentityKey, mn as proofDigest, mo as captureClause, mr as readActiveHostGraph, ms as TargetCaptureReasonCode, mt as isRootPauseRequest, n as assertActivationBackendIdentity, na as ACTIVE_HOST_COHORT_ID, nc as partialFailureOf, ni as GitPrestateEnvelope, nl as CERTIFICATE_VERSION, nn as ProofManifestV2, no as classifyTaskIntent, nr as evaluateActiveHostLock, ns as GuardItem, nt as CompletionDisposition, o as resolveActivationPersistencePlugin, oa as BASE_HOST_PACKAGES, oc as DirectiveClass, oi as commitTreeSnapshotDigest, ol as STOP_PROTOCOL_VERSION, on as SessionQuery, oo as isFrozenV042RebindResponse, or as injectActiveProfileHostLock, os as GuardProjection, ot as TurnStoppingDecision, p as prepareSelectedActivationMigration, pa as HOST_COHORTS, pc as QualificationStatus, pi as CanonicalArgv, pl as isStatefulAction, pn as proofCapabilityReport, po as ClauseSegment, pr as prepareTargetHostTrust, ps as SourceSpan, pt as decisionBoundaryKey, q as RC021_RC3_HOST_PACKAGES, qa as satisfiesSupportedHostRange, qc as semanticActionOfScope, qi as DEFAULT_DELEGATION_TOOL_NAMES, qn as AuditedPackageExpectation, qo as EvidenceParseStatus, qr as GIT_COMMAND_TEMPLATES, qs as OperationAttribution, qt as PROOF_KINDS_V2, r as assertActivationPhysicalRows, ra as ACTIVE_HOST_COHORT_IDS, rc as removalIsComplete, ri as GitTargetIdentity, rl as CERTIFICATE_VERSION_V2, rn as ProofObligation, ro as classifyUserInteraction, rr as evaluateConfiguredHostLock, rs as GuardItemKind, rt as CurrentActionBasis, s as ActivationInventorySnapshot, sa as DEFAULT_HOST_LOCK, sc as Executee, si as createGitPrestateEnvelope, sl as STOP_PROTOCOL_VERSION_V2, sn as SessionQueryV2, so as parseConfirmationMessage, sr as inspectDesktopTargetGraph, ss as HostStatus, st as assessmentAction, t as ActivationPhysicalInventory, ta as rootLocatorFlavor, tc as capabilityFactOf, ti as GitPrestateCheck, tl as BOUNDED_ARTIFACT_TYPES, tn as ProofManifest, to as UserInteractionKind, tr as combineHostPolicy, ts as GuardIntegrity, tt as CONTROL_RECORD_PREFIX, u as bindActivationInventoryPhysical, ua as ExecutableIdentityBinding, uc as InterpretOptions, ui as parseGitCommandManifest, ul as StatefulAction, un as canonicalProjection, uo as bindingIndividuallyAccepted, ur as packageRowsFromPnpmLock, us as NeedsReviewFact, ut as currentActionBases, v as verifySelectedMigrationInventory, va as HostCohort, vc as clauseIsGoverned, vi as isRunExecutable, vl as semanticActionFromText, vn as proofOperationMatches, vo as extractArtifactPaths, vr as revalidateDesktopCoreLock, vs as TargetTuple, vt as observeAssistantOutcome, w as verifyMigrationInventory, wa as HostPlatform, wc as hasWorkPredicate, wi as ToolCallInput, wl as sanitizeClauseText, wn as validateProofManifest, wo as BoundaryEffectuation, wr as DesktopAppRuntime, ws as PackageRow, wt as SessionApiError, x as ActivationPriorModes, xa as HostLockContext, xc as governedClauseRestrictsExecution, xi as goalCompletionDenial, xl as canonicalizePath, xn as scopeCoverageDigest, xo as isInformationalMessage, xr as DESKTOP_IDENTITY_FACTS, xs as WaitAuthorization, xt as v6TestPredicate, y as privateStorageToolDenial, ya as HostCohortSelection, yc as clauseIsProtected, yi as parsePwshCommand, yl as validateActionManifest, yn as proofV2Rejection, yo as extractMethod, yr as verifyComposedHostLockDump, ys as TargetValue, yt as progressFingerprint, z as SessionActivationRead, za as LATEST_TESTED_HOST_VERSION, zc as namedActions, zi as UnifiedItemDiagnosis, zn as FirstStepPreviewInput, zo as DeferAuthorization, zr as HostTrustedPackage, zs as replayRebindResult, zt as closingHint } from "./index-B1AGTJF6.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -213,4 +213,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPhysicalInventory, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RC021_RC5_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assertActivationBackendIdentity, assertActivationPhysicalRows, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindActivationInventoryPhysical, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureActivationPhysicalInventory, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, guardActivationInventory, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActivationPersistencePlugin, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as NATIVE_GIT_ROOT_PARENT_OID, $a as __activationBindingInternals, $i as hostTrustDigest, $n as parseConfirmationMessage, $r as namedActions, $t as openItems, A as lifecyclePhase, Aa as satisfiesSupportedHostRange, Ai as prepareDesktopHostTrust, An as goalCompletionDenial, Ao as releasePreEffectDecision, Ar as clarifiedSpanOf, At as proofDigest, B as snapshotSessionEvents, Ba as SUPPORTED_EVIDENCE_ADAPTERS, Bi as DESKTOP_RUNTIME_PACKAGE_NAME, Bn as isCurrentAcceptedBoundary, Bo as ownedJobLifecycle, Br as interpretMessage, Bt as validateProofManifest, C as parseGitCommandManifest, Ca as LATEST_TESTED_HOST_VERSION, Ci as hostLockRowsFromComposedDump, Cn as isWholeTaskCompletionClaim, Co as RELEASE_OPERATION_SURFACES, Cr as canonicalRegistryBase, Ct as PROOF_PROTOCOL_VERSION_V2, D as claimedBatchHasRealRootInput, Da as compareHostVersions, Di as packageRowsFromActiveGraph, Dn as progressFingerprint, Do as readbackSettlesContract, Dr as GRANTED_QUALIFICATION, Dt as createProofManifest, E as FIRST_STEP_GUIDANCE, Ea as SUPPORTED_HOST_VERSIONS, Ei as inspectTargetHostGraph, En as observeAssistantOutcome, Eo as normalizeReleaseContract, Er as classifyUserInteraction, Et as canonicalProjection, F as captureHostWorkdir, Fa as CERTIFICATE_VERSION_V2, Fi as resolveInstalledHostLock, Fn as needsReviewObligations, Fo as sanitizeClauseText, Fr as governedClauseRestrictsExecution, Ft as proofV2Rejection, G as PROTOCOL_V4_NOTICE, Ga as requestedTargetAuthorizesMutation, Gi as readAsarFile, Gn as proposeRebind, Gr as isOpenObligation, Gt as DEFAULT_RECOVERY_CHAR_BUDGET, H as CAPTURE_V042_NOTICE, Ha as boundedArtifactChoiceMatches, Hi as hasDesktopImporterState, Hn as currentContractDigest, Hr as isExecutableItem, Ht as CLEANUP_CONDITION_RULE, I as sourcedNamedTestRoot, Ia as SEMANTIC_ACTIONS, Ii as revalidateDesktopCoreLock, In as unitDescendantIds, Io as sanitizeUrl, Ir as hasOrderedCoordination, It as requiredSubjectsOf, J as applyUpgradeEligibility, Ja as semanticActionFromText, Ji as readDesktopDependency, Jn as rebindAttemptKey, Jr as itemHoldsExecutionAuthority, Jt as V6_ORDINARY_COMPLETION_RULE_COMPACT, K as PROTOCOL_V5_NOTICE, Ka as requestedTargetMatchesResolved, Ki as readAsarIndex, Kn as proposeRebindOutcome, Kr as isQuestionScopeNeedingReview, Kt as MIN_RECOVERY_CHAR_BUDGET, L as SESSION_API_UNSUPPORTED, La as STATEFUL_ACTIONS, Li as verifyComposedHostLockDump, Ln as BOUNDARY_RECORD_PREFIX, Lo as sha256, Lr as hasQuestionScope, Lt as scopeCoverageDigest, M as projectSessionCoreV2, Ma as ACTION_MANIFEST_VERSION, Mi as readActiveHostGraph, Mn as ancestorConstraintForBinding, Mo as canonicalizePath, Mr as clauseIsGoverned, Mt as proofEvidenceConstraints, N as sessionCoreSnapshot, Na as BOUNDED_ARTIFACT_TYPES, Ni as resolveActiveProfileHostLock, Nn as certifiableOpenItems, No as digestStrings, Nr as clauseIsProtected, Nt as proofHostSurfacesOf, O as firstStepGuidance, Oa as evaluateMinimumHostVersion, Oi as packageRowsFromPnpmLock, On as testOutcomePredicate, Oo as releaseContractFor, Or as LEGACY_QUALIFICATION, Ot as createProofManifestV2, P as HOST_WORKDIR_PREFIX, Pa as CERTIFICATE_VERSION, Pi as resolveDesktopProfileHostLock, Pn as certificateClosure, Po as normalizeClause, Pr as explanationHasActionResidue, Pt as proofOperationMatches, Q as supersedeItem, Qa as createHostAuditSession, Qi as acquireHostTrust, Qn as isFrozenV042RebindResponse, Qr as maskQuotedSpans, Qt as closingHint, R as SESSION_EVENT_ENVELOPE_INVALID, Ra as STOP_PROTOCOL_VERSION, Ri as DESKTOP_IDENTITY_FACTS, Rn as availableBoundaryQualifications, Ro as stripUrlCredentials, Rr as hasWorkPredicate, Rt as sessionQuery, S as gitCommandMatchesTarget, Sa as HOST_VALIDATED_VERSIONS, Si as hostLockContextFromComposedDump, Sn as isRootPauseRequest, So as RELEASE_OPERATIONS, Sr as segmentClauses, St as PROOF_PROTOCOL_VERSION, T as verifiedLinearCommitReadback, Ta as SUPPORTED_HOST_RANGE, Ti as inspectDesktopTargetGraph, Tn as latestRootInstruction, To as inFlightReservation, Tr as classifyTaskIntent, Tt as bindProofV2ToProjection, U as DEFAULT_DELEGATION_TOOL_NAMES, Ua as isStatefulAction, Ui as memoizedAsarFile, Un as createProjection, Ur as isExplanationScope, Ut as CLEANUP_CONDITION_RULE_COMPACT, V as projectCoreV2, Va as actionCompatible, Vi as auditDesktopInstalledImplementation, Vn as qualifyBoundary, Vr as introducesActionClause, Vt as validateProofManifestV2, W as PROTOCOL_V3_NOTICE, Wa as requestedIdentityKey, Wi as memoizedAsarIndex, Wn as confirmRebind, Wr as isInformationalFragment, Wt as CLEANUP_CONDITION_RULE_SHORT, X as legacyRecordsNeedingReview, Xa as validateActionTarget, Xi as writeDesktopRuntimeReceipt, Xn as replayRebindResult, Xr as legacyQuestionReadingIsInformational, Xt as carriesCleanupCondition, Y as deriveProjection, Ya as validateActionManifest, Yi as readDesktopTargetGraph, Yn as rebindResponse, Yr as kindOfScope, Yt as V6_ORDINARY_COMPLETION_RULE_SHORT, Z as rootLocatorFlavor, Za as RC021_RC3_HOST_PACKAGES, Zi as HostTrustError, Zn as CONFIRM_LINE_PATTERN, Zr as maskCodeSpans, Zt as cleanupConditionFor, _ as GIT_COMMAND_TEMPLATES, _a as evaluateHostCapability, _i as auditedForegroundRenderers, _n as classifyCompletionClaim, _o as initializePrivateLedger, _r as environmentDefaultRepositoryTarget, _t as certifyCheckpoint, a as scanActivationInventory, aa as ACTIVE_HOST_COHORT_IDS, ai as reportingHeadGoverns, an as currentV6Feedback, ao as resolveActivationBindingsRoot, ar as relevantEvidence, at as persistedToolResultStatus, b as createGitPrestateEnvelope, ba as hostVersionFromPackages, bi as evaluateActiveHostLock, bn as decideTurnStopping, bo as readPrivateLedger, br as extractOperation, bt as PROOF_KINDS_V2, c as validateActivationSelection, ca as DEFAULT_HOST_LOCK, ci as splitTextFragments, cn as bindingSatisfies, co as writeActivationBinding, cr as admissibleForRemoval, ct as canonicalArgvFromCommand, d as prepareActivationMigration, da as HOST_CAPABILITY_PACKAGE_GROUPS, di as COMMAND_SURFACE_MANIFEST, dn as isVerifyingCapability, do as activationJson, dr as partialFailureOf, dt as parseShellCommand, ea as parseHostTrust, ei as opensConditionLead, en as recoveryDigest, eo as activationBindingPath, er as capabilityRemedyPhrase, et as evidenceFromPersistedToolResult, f as verifyMigrationInventory, fa as HOST_COHORTS, fi as validateManifest, fn as CONTROL_RECORD_PREFIX, fo as sessionBirthIdentity, fr as removalIsComplete, ft as cwdEpochsFromEvents, g as GIT_COMMAND_MANIFEST_IDS, ga as evaluateGraphDerivedHostLock, gi as auditedDefaultWorkdirProvider, gn as assessmentOutcomePredicate, go as hasPrivateRestartIntent, gr as classifyClause, gt as bindingIndividuallyAccepted, h as RC020_RC1_HOST_PACKAGES, ha as evaluateExternalWaitCapability, hi as auditedDefaultWorkdirHost, hn as assessmentAction, ho as applyPrivateLedger, hr as captureItem, ht as segmentAuthorityBlocks, i as prepareSelectedActivationMigration, ia as ACTIVE_HOST_COHORT_ID, ii as questionHeadsClause, in as confirmedV6CoreDiagnostic, io as readActivationMigrationReceipt, ir as nativeFileTwoRole, it as nativeGitParentOidVerified, j as previewFirstStepInjection, ja as ACTION_MANIFEST, ji as prepareTargetHostTrust, jn as hasCurrentCertificate, jo as reservationFor, jr as clauseAsksOwnQuestion, jt as proofDigestV2, k as firstStepGuidanceV6, ka as parseHostVersion, ki as prepareActiveHostTrust, kn as v6TestPredicate, ko as releaseCoverage, kr as actionVerbMatches, kt as proofCapabilityReport, l as verifySelectedMigrationInventory, la as EXPECTED_HOST_PACKAGES, li as statefulActionsOfScope, ln as evidenceCoverage, lo as activationCanonical, lr as capabilityConsequence, lt as isRunExecutable, m as RC020_RC2_HOST_PACKAGES, ma as bindLiveGoalCapability, mi as activeRendererModule, mn as NO_PROGRESS_TURNS_BEFORE_STOP, mo as appendPrivateLedger, mr as captureClause, mt as authorityCaptureCounts, n as createActivationSelection, na as registryArchiveFiles, ni as presentExplanationHead, nn as renderRecoveryPacket, no as createActivationMigrationReceipt, nr as evidenceAvailabilityReason, nt as extractToolSubject, o as selectedActivationInventory, oa as ACTIVE_HOST_LAUNCHER_VERSION, oi as restatedContentOf, on as isV6PendingRootWait, oo as resolveSessionActivation, or as DEPENDENCY_FREE_ONLY_CONDITION, ot as shellReadbackOutcome, p as RC021_RC2_HOST_PACKAGES, pa as bindExecutableIdentity, pi as HostProfileError, pn as NO_PROGRESS_RECORD_PREFIX, po as validateActivationBinding, pr as removalIsPartiallyKnown, pt as effectiveCwdAt, q as PROTOCOL_V6_NOTICE, qa as semanticActionFromCommand, qi as readDesktopAppRuntime, qn as proposeRebindV042, qr as isRestatement, qt as V6_ORDINARY_COMPLETION_RULE, r as isSelectedActivationReceipt, ra as registryArchiveModules, ri as qualificationOfClause, rn as v6CurrentRootBoundaries, ro as readActivationBinding, rr as itemDiagnosis, rt as isDeterministicCheck, s as validateActivationInventorySnapshot, sa as BASE_HOST_PACKAGES, si as semanticActionOfScope, sn as sourceItemForCoreRequirement, so as validateActivationMigrationReceipt, sr as actionHasCertificationPath, st as withDurability, t as activationSelectionPending, ta as qualifyHostTrust, ti as opensWithDirective, tn as recoveryTitle, to as adoptActivationReceipt, tr as deriveItemDiagnosis, tt as extractTextContent, u as inspectActivationInventory, ua as GOAL_HOST_PACKAGES, ui as verbIsNegated, un as evidenceMatchesItem, uo as activationDigest, ur as capabilityFactOf, ut as parsePwshCommand, v as commitIndexSnapshotDigest, va as evaluateHostLock, vi as auditedHostImplementation, vn as currentActionBases, vo as privateLedgerContractDigest, vr as extractArtifactPaths, vt as PROOF_CAPABILITY_MATRIX, w as revalidateGitPrestate, wa as MIN_SUPPORTED_HOST_VERSION, wi as injectActiveProfileHostLock, wn as latestAssistantText, wo as contractById, wr as npmEscapedPackageName, wt as bindProofToProjection, x as executeRevalidatedGitEffect, xa as selectHostCohort, xi as evaluateConfiguredHostLock, xn as decisionBoundaryKey, xo as resolvePrivateLedgerRoot, xr as isInformationalMessage, xt as PROOF_MANIFEST_DOMAIN_V2, y as commitTreeSnapshotDigest, ya as evaluateToolSurfaceCapability, yi as combineHostPolicy, yn as decideTurnBoundary, yo as privateLedgerTargetDigest, yr as extractMethod, yt as PROOF_KINDS, z as SessionApiError, za as STOP_PROTOCOL_VERSION_V2, zi as DESKTOP_PROFILE_PACKAGE_NAME, zn as effectuateBoundary, zo as privateStorageToolDenial, zr as interpretClause, zt as sessionQueryV2 } from "./domain-rozEDKXB.js";
+import { $ as PROTOCOL_V6_NOTICE, $a as semanticActionFromCommand, $i as readDesktopAppRuntime, $n as proposeRebindV042, $r as isRestatement, $t as V6_ORDINARY_COMPLETION_RULE, A as revalidateGitPrestate, Aa as MIN_SUPPORTED_HOST_VERSION, Ai as injectActiveProfileHostLock, An as latestAssistantText, Ao as RELEASE_OPERATION_SURFACES, Ar as npmEscapedPackageName, At as bindProofToProjection, B as HOST_WORKDIR_PREFIX, Ba as CERTIFICATE_VERSION, Bi as resolveDesktopProfileHostLock, Bn as certificateClosure, Bo as digestStrings, Br as explanationHasActionResidue, Bt as proofOperationMatches, C as GIT_COMMAND_TEMPLATES, Ca as evaluateHostCapability, Ci as auditedForegroundRenderers, Cn as classifyCompletionClaim, Co as hasPrivateRestartIntent, Cr as environmentDefaultRepositoryTarget, Ct as certifyCheckpoint, D as executeRevalidatedGitEffect, Da as selectHostCohort, Di as evaluateConfiguredHostLock, Dn as decisionBoundaryKey, Do as readPrivateLedger, Dr as isInformationalMessage, Dt as PROOF_MANIFEST_DOMAIN_V2, E as createGitPrestateEnvelope, Ea as hostVersionFromPackages, Ei as evaluateActiveHostLock, En as decideTurnStopping, Eo as privateLedgerTargetDigest, Er as extractOperation, Et as PROOF_KINDS_V2, F as firstStepGuidanceV6, Fa as parseHostVersion, Fi as prepareActiveHostTrust, Fn as v6TestPredicate, Fo as releaseContractFor, Fr as actionVerbMatches, Ft as proofCapabilityReport, G as SessionApiError, Ga as STOP_PROTOCOL_VERSION_V2, Gi as DESKTOP_PROFILE_PACKAGE_NAME, Gn as effectuateBoundary, Go as stripUrlCredentials, Gr as interpretClause, Gt as sessionQueryV2, H as sourcedNamedTestRoot, Ha as SEMANTIC_ACTIONS, Hi as revalidateDesktopCoreLock, Hn as unitDescendantIds, Ho as sanitizeClauseText, Hr as hasOrderedCoordination, Ht as requiredSubjectsOf, I as lifecyclePhase, Ia as satisfiesSupportedHostRange, Ii as prepareDesktopHostTrust, In as goalCompletionDenial, Io as releaseCoverage, Ir as clarifiedSpanOf, It as proofDigest, J as CAPTURE_V042_NOTICE, Ja as boundedArtifactChoiceMatches, Ji as hasDesktopImporterState, Jn as currentContractDigest, Jr as isExecutableItem, Jt as CLEANUP_CONDITION_RULE, K as snapshotSessionEvents, Ka as SUPPORTED_EVIDENCE_ADAPTERS, Ki as DESKTOP_RUNTIME_PACKAGE_NAME, Kn as isCurrentAcceptedBoundary, Ko as privateStorageToolDenial, Kr as interpretMessage, Kt as validateProofManifest, L as previewFirstStepInjection, La as ACTION_MANIFEST, Li as prepareTargetHostTrust, Ln as hasCurrentCertificate, Lo as releasePreEffectDecision, Lr as clauseAsksOwnQuestion, Lt as proofDigestV2, M as FIRST_STEP_GUIDANCE, Ma as SUPPORTED_HOST_VERSIONS, Mi as inspectTargetHostGraph, Mn as observeAssistantOutcome, Mo as inFlightReservation, Mr as classifyUserInteraction, Mt as canonicalProjection, N as claimedBatchHasRealRootInput, Na as compareHostVersions, Ni as packageRowsFromActiveGraph, Nn as progressFingerprint, No as normalizeReleaseContract, Nr as GRANTED_QUALIFICATION, Nt as createProofManifest, O as gitCommandMatchesTarget, Oa as HOST_VALIDATED_VERSIONS, Oi as hostLockContextFromComposedDump, On as isRootPauseRequest, Oo as resolvePrivateLedgerRoot, Or as segmentClauses, Ot as PROOF_PROTOCOL_VERSION, P as firstStepGuidance, Pa as evaluateMinimumHostVersion, Pi as packageRowsFromPnpmLock, Pn as testOutcomePredicate, Po as readbackSettlesContract, Pr as LEGACY_QUALIFICATION, Pt as createProofManifestV2, Q as PROTOCOL_V5_NOTICE, Qa as requestedTargetMatchesResolved, Qi as readAsarIndex, Qn as proposeRebindOutcome, Qr as isQuestionScopeNeedingReview, Qt as MIN_RECOVERY_CHAR_BUDGET, R as projectSessionCoreV2, Ra as ACTION_MANIFEST_VERSION, Ri as readActiveHostGraph, Rn as ancestorConstraintForBinding, Ro as reservationFor, Rr as clauseIsGoverned, Rt as proofEvidenceConstraints, S as GIT_COMMAND_MANIFEST_IDS, Sa as evaluateGraphDerivedHostLock, Si as auditedDefaultWorkdirProvider, Sn as assessmentOutcomePredicate, So as applyPrivateLedger, Sr as classifyClause, St as bindingIndividuallyAccepted, T as commitTreeSnapshotDigest, Ta as evaluateToolSurfaceCapability, Ti as combineHostPolicy, Tn as decideTurnBoundary, To as privateLedgerContractDigest, Tr as extractMethod, Tt as PROOF_KINDS, U as SESSION_API_UNSUPPORTED, Ua as STATEFUL_ACTIONS, Ui as verifyComposedHostLockDump, Un as BOUNDARY_RECORD_PREFIX, Uo as sanitizeUrl, Ur as hasQuestionScope, Ut as scopeCoverageDigest, V as captureHostWorkdir, Va as CERTIFICATE_VERSION_V2, Vi as resolveInstalledHostLock, Vn as needsReviewObligations, Vo as normalizeClause, Vr as governedClauseRestrictsExecution, Vt as proofV2Rejection, W as SESSION_EVENT_ENVELOPE_INVALID, Wa as STOP_PROTOCOL_VERSION, Wi as DESKTOP_IDENTITY_FACTS, Wn as availableBoundaryQualifications, Wo as sha256, Wr as hasWorkPredicate, Wt as sessionQuery, X as PROTOCOL_V3_NOTICE, Xa as requestedIdentityKey, Xi as memoizedAsarIndex, Xn as confirmRebind, Xr as isInformationalFragment, Xt as CLEANUP_CONDITION_RULE_SHORT, Y as DEFAULT_DELEGATION_TOOL_NAMES, Ya as isStatefulAction, Yi as memoizedAsarFile, Yn as createProjection, Yr as isExplanationScope, Yt as CLEANUP_CONDITION_RULE_COMPACT, Z as PROTOCOL_V4_NOTICE, Za as requestedTargetAuthorizesMutation, Zi as readAsarFile, Zn as proposeRebind, Zr as isOpenObligation, Zt as DEFAULT_RECOVERY_CHAR_BUDGET, _ as prepareActivationMigration, _a as HOST_CAPABILITY_PACKAGE_GROUPS, _i as COMMAND_SURFACE_MANIFEST, _n as isVerifyingCapability, _o as activationDigest, _r as partialFailureOf, _t as parseShellCommand, a as resolveActivationPersistencePlugin, aa as hostTrustDigest, ai as namedActions, an as openItems, ao as createHostAuditSession, ar as parseConfirmationMessage, at as NATIVE_GIT_ROOT_PARENT_OID, b as RC020_RC2_HOST_PACKAGES, ba as bindLiveGoalCapability, bi as activeRendererModule, bn as NO_PROGRESS_TURNS_BEFORE_STOP, bo as validateActivationBinding, br as captureClause, bt as authorityCaptureCounts, c as createActivationSelection, ca as registryArchiveFiles, ci as presentExplanationHead, cn as renderRecoveryPacket, co as adoptActivationReceipt, cr as evidenceAvailabilityReason, ct as extractToolSubject, d as scanActivationInventory, da as ACTIVE_HOST_COHORT_IDS, di as reportingHeadGoverns, dn as currentV6Feedback, do as readActivationMigrationReceipt, dr as relevantEvidence, dt as persistedToolResultStatus, ea as readDesktopDependency, ei as itemHoldsExecutionAuthority, en as V6_ORDINARY_COMPLETION_RULE_COMPACT, eo as semanticActionFromText, er as rebindAttemptKey, et as applyUpgradeEligibility, f as selectedActivationInventory, fa as ACTIVE_HOST_LAUNCHER_VERSION, fi as restatedContentOf, fn as isV6PendingRootWait, fo as resolveActivationBindingsRoot, fr as DEPENDENCY_FREE_ONLY_CONDITION, ft as shellReadbackOutcome, g as inspectActivationInventory, ga as GOAL_HOST_PACKAGES, gi as verbIsNegated, gn as evidenceMatchesItem, go as activationCanonical, gr as capabilityFactOf, gt as parsePwshCommand, h as verifySelectedMigrationInventory, ha as EXPECTED_HOST_PACKAGES, hi as statefulActionsOfScope, hn as evidenceCoverage, ho as writeActivationBinding, hr as capabilityConsequence, ht as isRunExecutable, i as guardActivationInventory, ia as acquireHostTrust, ii as maskQuotedSpans, in as closingHint, io as RC021_RC3_HOST_PACKAGES, ir as isFrozenV042RebindResponse, it as supersedeItem, j as verifiedLinearCommitReadback, ja as SUPPORTED_HOST_RANGE, ji as inspectDesktopTargetGraph, jn as latestRootInstruction, jo as contractById, jr as classifyTaskIntent, jt as bindProofV2ToProjection, k as parseGitCommandManifest, ka as LATEST_TESTED_HOST_VERSION, ki as hostLockRowsFromComposedDump, kn as isWholeTaskCompletionClaim, ko as RELEASE_OPERATIONS, kr as canonicalRegistryBase, kt as PROOF_PROTOCOL_VERSION_V2, l as isSelectedActivationReceipt, la as registryArchiveModules, li as qualificationOfClause, ln as v6CurrentRootBoundaries, lo as createActivationMigrationReceipt, lr as itemDiagnosis, lt as isDeterministicCheck, m as validateActivationSelection, ma as DEFAULT_HOST_LOCK, mi as splitTextFragments, mn as bindingSatisfies, mo as validateActivationMigrationReceipt, mr as admissibleForRemoval, mt as canonicalArgvFromCommand, n as assertActivationPhysicalRows, na as writeDesktopRuntimeReceipt, ni as legacyQuestionReadingIsInformational, nn as carriesCleanupCondition, no as validateActionTarget, nr as replayRebindResult, nt as legacyRecordsNeedingReview, o as activationSelectionPending, oa as parseHostTrust, oi as opensConditionLead, on as recoveryDigest, oo as __activationBindingInternals, or as capabilityRemedyPhrase, ot as evidenceFromPersistedToolResult, p as validateActivationInventorySnapshot, pa as BASE_HOST_PACKAGES, pi as semanticActionOfScope, pn as sourceItemForCoreRequirement, po as resolveSessionActivation, pr as actionHasCertificationPath, pt as withDurability, q as projectCoreV2, qa as actionCompatible, qi as auditDesktopInstalledImplementation, qn as qualifyBoundary, qo as ownedJobLifecycle, qr as introducesActionClause, qt as validateProofManifestV2, r as captureActivationPhysicalInventory, ra as HostTrustError, ri as maskCodeSpans, rn as cleanupConditionFor, ro as RC021_RC5_HOST_PACKAGES, rr as CONFIRM_LINE_PATTERN, rt as rootLocatorFlavor, s as bindActivationInventoryPhysical, sa as qualifyHostTrust, si as opensWithDirective, sn as recoveryTitle, so as activationBindingPath, sr as deriveItemDiagnosis, st as extractTextContent, t as assertActivationBackendIdentity, ta as readDesktopTargetGraph, ti as kindOfScope, tn as V6_ORDINARY_COMPLETION_RULE_SHORT, to as validateActionManifest, tr as rebindResponse, tt as deriveProjection, u as prepareSelectedActivationMigration, ua as ACTIVE_HOST_COHORT_ID, ui as questionHeadsClause, un as confirmedV6CoreDiagnostic, uo as readActivationBinding, ur as nativeFileTwoRole, ut as nativeGitParentOidVerified, v as verifyMigrationInventory, va as HOST_COHORTS, vi as validateManifest, vn as CONTROL_RECORD_PREFIX, vo as activationJson, vr as removalIsComplete, vt as cwdEpochsFromEvents, w as commitIndexSnapshotDigest, wa as evaluateHostLock, wi as auditedHostImplementation, wn as currentActionBases, wo as initializePrivateLedger, wr as extractArtifactPaths, wt as PROOF_CAPABILITY_MATRIX, x as RC020_RC1_HOST_PACKAGES, xa as evaluateExternalWaitCapability, xi as auditedDefaultWorkdirHost, xn as assessmentAction, xo as appendPrivateLedger, xr as captureItem, xt as segmentAuthorityBlocks, y as RC021_RC2_HOST_PACKAGES, ya as bindExecutableIdentity, yi as HostProfileError, yn as NO_PROGRESS_RECORD_PREFIX, yo as sessionBirthIdentity, yr as removalIsPartiallyKnown, yt as effectiveCwdAt, z as sessionCoreSnapshot, za as BOUNDED_ARTIFACT_TYPES, zi as resolveActiveProfileHostLock, zn as certifiableOpenItems, zo as canonicalizePath, zr as clauseIsProtected, zt as proofHostSurfacesOf } from "./domain-DUS0V_Yv.js";
 import { boundContextSummary, createUserMessage } from "@deepseek-ai/dsh-llm";
 import { constants, existsSync, readFileSync } from "node:fs";
 import { basename, delimiter, dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
@@ -7448,4 +7448,4 @@ async function replayRawV2(input) {
 }
 
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RC021_RC5_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assertActivationBackendIdentity, assertActivationPhysicalRows, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindActivationInventoryPhysical, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureActivationPhysicalInventory, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, guardActivationInventory, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActivationPersistencePlugin, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };

package/docs/ACTIVATION_MIGRATION.md

@@ -1,8 +1,20 @@
 # Session activation migration / 会话启用模式迁移
 
-This guide covers upgrades to **0.11.0**, including upgrades from **0.10.0** and earlier supported lines. Since 0.9.0, `always` has been the default for **new unseeded root sessions**. A write-once private binding preserves each old session's pre-upgrade effective mode. Mode is independent of `standard` policy, execution/publication authority and completion certificates. Empty old sessions belong in the inventory too. Recorded off/on continues to control enablement; neither configuration nor adoption re-signs history.
+A host already at DSH `0.2.1-rc.3` may follow this migration without first upgrading to rc.5, provided its own host graph passes qualification.
 
-本指南用于升级到 **0.11.0**，包括从 **0.10.0** 及更早支持线升级。自 0.9.0 起，**新建无继承根会话**的默认模式为 `always`，旧会话通过不可覆盖私有绑定保留升级前有效模式。模式独立于 `standard` 策略、执行与发布权限及完成证书。旧空会话也必须清点，已记录的 off/on 继续控制启用状态；配置及 adoption 都不重签历史。
+已使用 DSH `0.2.1-rc.3` 的宿主无需先升级到 rc.5，即可按本流程迁移；其宿主图仍须通过相应资格核验。
+
+This guide covers upgrades to **0.12.0**, including upgrades from **0.11.0**, 0.10.0 and earlier supported lines. Since 0.9.0, `always` has been the default for **new unseeded root sessions**. A write-once private binding preserves each old session's pre-upgrade effective mode. Mode is independent of `standard` policy, execution/publication authority and completion certificates. Empty old sessions belong in the inventory too. Recorded off/on continues to control enablement; neither configuration nor adoption re-signs history.
+
+本指南用于升级到 **0.12.0**，包括从 **0.11.0**、0.10.0 及更早支持线升级。自 0.9.0 起，**新建无继承根会话**的默认模式为 `always`，旧会话通过不可覆盖私有绑定保留升级前有效模式。模式独立于 `standard` 策略、执行与发布权限及完成证书。旧空会话也必须清点，已记录的 off/on 继续控制启用状态；配置及 adoption 都不重签历史。
+
+The CLI checks the physical JSONL inventory against the official reader before `inventory`, `inspect`, `adopt` and `verify`. It supports JSONL backends whose executable modules and loader shape match the reviewed rc.3/rc.5 implementation, including byte-equivalent version relabels, with `none` or `zstd` encoding. Changed or unreviewed implementations are refused. The proof binds the actual backend, resolved serialization inputs and Node compression version; it is not independent authentication of every dependency. The physical census streams complete session files to hash their bytes without parsing or emitting their bodies; the official read-only open may parse session data to verify it; runtime and I/O cost grow with total stored bytes. Keep writers stopped. Hidden or corrupt logs, future generations, links, unknown layouts and directories with multiple generations fail closed. A listed older format that the official `open` explicitly rejects can still be left pending in a selected scope; an item hidden by `list` cannot be assigned a fabricated identity.
+
+The proof binds the supplied physical root, compression, reviewed backend and file identities and contents. It does **not** establish that the supplied root is the active configuration: the operator or manager must verify that independently. An existing ordinary empty root can produce a zero-row inventory, but cannot produce a migration receipt. Missing roots fail. Backend, root, encoding or file changes require a fresh inventory and inspection. Receipts created before physical proofs existed are refused with `activation_inventory_proof_required`; preserve them and regenerate `inventory`, any selection, and `inspect` under the matching configuration.
+
+CLI 在 `inventory`、`inspect`、`adopt`、`verify` 前将物理 JSONL 库存与官方读取器逐项核对。目前支持可执行模块和加载结构与已审查 rc.3/rc.5 实现一致的 JSONL 后端（包括字节相同的版本重标）以及 `none`、`zstd` 编码；变化或未经审查的实现会被拒绝。证明绑定实际后端、解析到的序列化输入及 Node 压缩版本，不独立认证所有依赖。物理盘点流式读取完整会话文件计算摘要，不解析或输出正文；官方只读 open 可能解析会话数据以进行核验。耗时和 I/O 随库存总字节数增长。全程停止写者。隐藏或损坏日志、未来代际、链接、未知布局和同一目录多代并存均拒绝；官方 `list` 已列出且 `open` 明确拒绝的旧格式仍可在选择范围中保持 pending，不能为被 `list` 隐藏的项目伪造身份。
+
+证明绑定所传物理根、压缩方式、已审查后端以及文件身份和内容，**不证明所传目录就是当前配置**；操作者或管理器须独立核对。已存在的普通空根可产生零行库存，但不能生成迁移收据；缺失根拒绝。后端、根、编码或文件变化后须重新 inventory 和 inspect。没有物理证明的旧收据会以 `activation_inventory_proof_required` 拒绝；保留原记录，并在匹配配置下重新 inventory、按需选择和 inspect。
 
 ## Prepare before changing the installed version / 升级前准备
 
@@ -27,9 +39,9 @@ Prepare an operator-owned JSON file in the following format. `previousPackage.sh
 }
 ```
 
-The 0.11.0 toolkit accepts verified prior-mode records for predecessor versions `0.0.x`–`0.10.x`, including `0.10.0`. It refuses `0.11.0` as a prior package.
+The 0.12.0 toolkit accepts verified prior-mode records for predecessor versions `0.0.x`–`0.11.x`, including `0.11.0`. It refuses the current version and anything newer as a prior package.
 
-0.11.0 工具接受前驱版本 `0.0.x`–`0.10.x` 的已核验旧模式来源，包括 `0.10.0`；不能把 `0.11.0` 本身作为旧包。
+0.12.0 工具接受前驱版本 `0.0.x`–`0.11.x` 的已核验旧模式来源，包括 `0.11.0`；当前版本及更新的版本不能冒充旧包。
 
 ## Official old-format refusals and an explicit readable subset / 官方旧格式拒绝与显式可读子集
 
@@ -95,16 +107,16 @@ When a later official host supports the pending format, use its **read-only** pe
 
 ### Copyable migration prompts / 可复制迁移提示词
 
-> Help me migrate session activation to DSH Completion Guard 0.11.0. Lifecycle constraint: [fill in which writers may be stopped and whether restart is allowed]. Reuse scope, write and lifecycle authorization already supplied in this conversation; ask only for missing or materially changed decisions. First report the current host/persistence/compression settings, preserved predecessor package identity (for example 0.9.0) and sanitized pre-upgrade effective-mode sources. If they cannot be verified, keep affected sessions pending. Do not replace packages, stop/restart processes or write bindings before that lifecycle and mutation authority is established. Run the packaged read-only inventory command; show total/readable/official-format-refused counts and a local pending report. Use my existing explicit selection, or ask me to choose the included scope if none was supplied; do not silently expand it or treat readability alone as authorization. Bind that explicit selection through inspect/adopt/verify, detect all inventory changes, preserve raw logs and old sources, and never infer modes/origin/cuts from paths, dates or event counts. No log bodies, credentials or private IDs leave my machine. Once the scope and writes are covered by my authorization, adopt, repeat to check no-op, and verify; report selected completion and remaining pending separately. For unsupported rows, give the future official-reader/re-inventory/source-validation route; without a recoverable source, keep pending or use a new session. Do not treat old certificates as new authority.
+> Help me migrate session activation to DSH Completion Guard 0.12.0. Lifecycle constraint: [fill in which writers may be stopped and whether restart is allowed]. Reuse scope, write and lifecycle authorization already supplied in this conversation; ask only for missing or materially changed decisions. First report the current host/persistence/compression settings, preserved predecessor package identity (for example 0.9.0) and sanitized pre-upgrade effective-mode sources. If they cannot be verified, keep affected sessions pending. Do not replace packages, stop/restart processes or write bindings before that lifecycle and mutation authority is established. Run the packaged read-only inventory command; show total/readable/official-format-refused counts and a local pending report. Use my existing explicit selection, or ask me to choose the included scope if none was supplied; do not silently expand it or treat readability alone as authorization. Bind that explicit selection through inspect/adopt/verify, detect all inventory changes, preserve raw logs and old sources, and never infer modes/origin/cuts from paths, dates or event counts. No log bodies, credentials or private IDs leave my machine. Once the scope and writes are covered by my authorization, adopt, repeat to check no-op, and verify; report selected completion and remaining pending separately. For unsupported rows, give the future official-reader/re-inventory/source-validation route; without a recoverable source, keep pending or use a new session. Do not treat old certificates as new authority.
 
-> 帮我迁移到 DSH Completion Guard 0.11.0 的会话启用模式。生命周期约束：[填写允许停止的写者及是否允许重启]。沿用本会话已给出的范围、写入及生命周期授权，仅询问缺失或实质变化的决定。先报告现有宿主、持久化目录/压缩配置、保留的前驱包（如 0.9.0）身份及脱敏的升级前有效模式来源；不能核验就将受影响会话保持 pending。取得明确生命周期和写入权限前，不替换包、不停/重启进程、不写绑定。运行打包工具的只读 inventory，报告总数/可读/官方格式拒绝数量并保存本地 pending 报告；沿用我已明确选择的范围，尚未选择时再请我决定；不静默扩大范围，也不把可读性本身当作授权。让显式 selection 贯穿 inspect/adopt/verify，检测全部库存变化，保留原日志和旧来源，不按路径、日期、事件数猜模式/origin/cut。正文、凭据、私有 ID 不离开本机。范围和写入已有授权覆盖后 adopt、重复检查 no-op，再 verify，分别报告选中行完成及剩余 pending。被拒绝项给出未来官方读取器支持后重盘点、核验身份/旧来源的方案；没有可恢复来源就保留 pending 或改用新会话。旧证书不当作新权限。
+> 帮我迁移到 DSH Completion Guard 0.12.0 的会话启用模式。生命周期约束：[填写允许停止的写者及是否允许重启]。沿用本会话已给出的范围、写入及生命周期授权，仅询问缺失或实质变化的决定。先报告现有宿主、持久化目录/压缩配置、保留的前驱包（如 0.9.0）身份及脱敏的升级前有效模式来源；不能核验就将受影响会话保持 pending。取得明确生命周期和写入权限前，不替换包、不停/重启进程、不写绑定。运行打包工具的只读 inventory，报告总数/可读/官方格式拒绝数量并保存本地 pending 报告；沿用我已明确选择的范围，尚未选择时再请我决定；不静默扩大范围，也不把可读性本身当作授权。让显式 selection 贯穿 inspect/adopt/verify，检测全部库存变化，保留原日志和旧来源，不按路径、日期、事件数猜模式/origin/cut。正文、凭据、私有 ID 不离开本机。范围和写入已有授权覆盖后 adopt、重复检查 no-op，再 verify，分别报告选中行完成及剩余 pending。被拒绝项给出未来官方读取器支持后重盘点、核验身份/旧来源的方案；没有可恢复来源就保留 pending 或改用新会话。旧证书不当作新权限。
 
 
 ## Full-inventory inspect, adopt, verify / 整库清点、采纳、核验
 
-The entry `node /absolute/prepared-package/bin/dsh-completion-guard-activation.mjs` below uses the independently prepared 0.11.0 toolkit; it does not assume a new command is installed on PATH while the old Guard remains installed. The tool mounts only the official JSONL persistence service, without starting the agent loop, UI or model. `--runtime-anchor` is a file in the physical official runtime; the tool resolves its real path before loading dependencies. `--persistence-root` and optional `--compression none|zstd` must match the active persistence configuration. No storage path or encoding is guessed. Inspection uses public `list`, read-only `open`, exact header/inherited-cut metadata and revision readback; it outputs no event bodies. Keep writers stopped through the sequence.
+The entry `node /absolute/prepared-package/bin/dsh-completion-guard-activation.mjs` below uses the independently prepared 0.12.0 toolkit; it does not assume a new command is installed on PATH while the old Guard remains installed. The tool mounts only the official JSONL persistence service, without starting the agent loop, UI or model. `--runtime-anchor` is a file in the physical official runtime; the tool resolves its real path before loading dependencies. `--persistence-root` and optional `--compression none|zstd` must match the active persistence configuration. No storage path or encoding is guessed. Inspection uses public `list`, read-only `open`, exact header/inherited-cut metadata and revision readback; it outputs no event bodies. Keep writers stopped through the sequence.
 
-下方使用独立准备的 0.11.0 工具入口 `node /absolute/prepared-package/bin/dsh-completion-guard-activation.mjs`，不假定旧 Guard 仍安装时新命令已在 PATH。工具只挂载官方 JSONL persistence 服务，不启动 agent loop、界面或模型。runtime anchor 必须是官方 runtime 中的文件，加载依赖前先解析物理路径。持久目录及可选压缩格式必须匹配实际配置，不推测目录或编码。清点使用公开 list、只读 open、精确 header/cut 元数据及 revision 回读，不输出事件正文。整个操作期间保持写者停止。
+下方使用独立准备的 0.12.0 工具入口 `node /absolute/prepared-package/bin/dsh-completion-guard-activation.mjs`，不假定旧 Guard 仍安装时新命令已在 PATH。工具只挂载官方 JSONL persistence 服务，不启动 agent loop、界面或模型。runtime anchor 必须是官方 runtime 中的文件，加载依赖前先解析物理路径。持久目录及可选压缩格式必须匹配实际配置，不推测目录或编码。清点使用公开 list、只读 open、精确 header/cut 元数据及 revision 回读，不输出事件正文。整个操作期间保持写者停止。
 
 The following example is for a POSIX shell. Run `inspect` before replacement; run `adopt` and `verify` before starting the upgraded host. Keep the prepared toolkit path explicit throughout.
 
@@ -146,11 +158,11 @@ Missing/corrupt/changed records invalidate cached projections and certification.
 
 A qualified fresh creation that lost a brief writer-lock race now retries itself: the runtime re-attempts the SAME creation, while the startup intent is still provable, for a bounded budget (at most 8 attempts within 60 seconds of attach), and then reports the explicit `activation_writer_unavailable` status. The retry is idempotent (same-value) and never applies to a session that was ever successfully created, to resume/late attach, or to a deleted binding — those keep the unknown/diagnosis rules below. This automatic retry is not a recovery command and does not need one.
 
-A fresh creation that leaves `.pending`, including a fresh 0.11.0 session, has no general recovery command in this toolkit. `inspect` accepts verified pre-upgrade predecessor sources (`0.0.x`–`0.10.x`, including `0.10.0`), but `adopt` still requires a verified migration receipt for the same old session identity and mode. Predecessor support does not authorize treating a failed fresh creation as a legacy migration or inventing a receipt to repair it. Without an existing trusted legacy receipt, keep the mode unknown, diagnose the retained state, or continue new work in another qualified fresh session. The exported same-value writer is a programmatic controlled recovery primitive, not an operator CLI. Do not delete `.pending` merely to make the final readable.
+A fresh creation that leaves `.pending`, including a fresh 0.12.0 session, has no general recovery command in this toolkit. `inspect` accepts verified pre-upgrade predecessor sources (`0.0.x`–`0.11.x`, including `0.11.0`), but `adopt` still requires a verified migration receipt for the same old session identity and mode. Predecessor support does not authorize treating a failed fresh creation as a legacy migration or inventing a receipt to repair it. Without an existing trusted legacy receipt, keep the mode unknown, diagnose the retained state, or continue new work in another qualified fresh session. The exported same-value writer is a programmatic controlled recovery primitive, not an operator CLI. Do not delete `.pending` merely to make the final readable.
 
 合格新会话因短暂写锁竞争而失败的首次创建会自行重试：运行时在首创意图仍可证明时，按有界预算（attach 后 60 秒内至多 8 次）重试同一创建，随后返回明确的 `activation_writer_unavailable` 状态。重试是同值幂等的，绝不适用于曾成功创建的会话、resume/迟挂载或被删除的绑定——那些仍按下面的 unknown/诊断规则处理。该自动重试不是恢复命令，也不需要恢复命令。
 
-新建会话（包括 0.11.0 新会话）留下 .pending 时，本工具仍没有通用恢复命令。inspect 可使用已核验的旧版本模式来源（`0.0.x`–`0.10.x`，包括 `0.10.0`），但 adopt 仍需针对同一旧会话身份与模式的已核验迁移收据。支持这些前驱版本不意味着可以把失败的新建会话当作旧会话迁移，或编造收据来修复它。没有既有可信旧收据时，保持模式 unknown、诊断保留状态，或在另一合格新会话中继续新工作。导出的同值 writer 是程序受控恢复原语，不是操作者 CLI；不能为了让 final 可读而删除 .pending。
+新建会话（包括 0.12.0 新会话）留下 .pending 时，本工具仍没有通用恢复命令。inspect 可使用已核验的旧版本模式来源（`0.0.x`–`0.11.x`，包括 `0.11.0`），但 adopt 仍需针对同一旧会话身份与模式的已核验迁移收据。支持这些前驱版本不意味着可以把失败的新建会话当作旧会话迁移，或编造收据来修复它。没有既有可信旧收据时，保持模式 unknown、诊断保留状态，或在另一合格新会话中继续新工作。导出的同值 writer 是程序受控恢复原语，不是操作者 CLI；不能为了让 final 可读而删除 .pending。
 
 For rollback, stop writers, retain the receipt and bindings, and select the previous mode explicitly in each old profile before reinstalling the old Guard. A pre-0.9.0 Guard does not read these bindings; mixed-mode inventories need separate correctly mapped profiles or remain unsuitable for rollback. Keep host-lock and certificate identities separate: re-inspect the actual installed host as required, and never re-sign old certificates merely to change mode. Cross-machine transfer includes only verified bindings/receipts, with owner permissions restored; it transfers no host lock, credentials or native authority.
 

package/docs/COMPATIBILITY.md

@@ -2,7 +2,31 @@
 
 Guard binds each accepted installation to its exact package identities, implementation bytes and dependency routes. Version admission and implementation qualification are separate checks; a matching version alone does not establish compatibility.
 
-## 0.11.0: DSH >=0.2.1-rc.3
+## 0.12.0: DSH >=0.2.1-rc.3
+
+Before installing Guard 0.12.0, upgrade DSH if it is older than `0.2.1-rc.3`. The package declares the same minimum in `engines.dsh`, `dsh.engines.dsh` and its DSH peers; Guard enforces that floor independently at runtime. There is no upper version bound, but every later graph must still pass package, byte, route and contract qualification. Cordis keeps its separate `>=4.0.4` range.
+
+The current reviewed baseline and default cohort are DSH `0.2.1-rc.5` / Cordis `4.0.5` (`dsh-0.2.1-rc.5-core-v1`). An rc.3 runtime uses its own reviewed `dsh-0.2.1-rc.3-core-v1` cohort; rc.2 is below the floor. Earlier acceptance records retain their original subjects and do not establish acceptance of this package. Existing session and Guard data protocols are preserved, while changed host locks require fresh checks. The official app-boot admission tests and [`semver-matrix-v120.json`](../benchmarks/incidents/acceptance/semver-matrix-v120.json) bind the declared floor; the 0.11.0 matrix remains unchanged for that release.
+
+The rc.5 registry and Desktop implementation records below describe their own source qualification. A new Guard package still needs its own CI, exact-artifact native, model and UI/performance evidence; the version floor does not transfer an earlier package's acceptance.
+
+安装 Guard 0.12.0 前，低于 `0.2.1-rc.3` 的 DSH 须先升级。包顶层、嵌套 DSH 声明和 DSH peer 范围使用同一下限，Guard 运行时也独立核对；没有版本上限，后续宿主仍须逐项核验包身份、实现字节、依赖路由和接口。Cordis 继续单独要求 `>=4.0.4`。
+
+当前已审查基线及默认 cohort 为 DSH `0.2.1-rc.5` / Cordis `4.0.5`。rc.3 宿主使用自己的 `dsh-0.2.1-rc.3-core-v1` 审查队列；rc.2 仍低于下限。旧验收记录保留原有对象，不能代替本包的验收。旧会话及 Guard 数据协议保持兼容，宿主锁变化后仍须重新核验；新包的 CI、精确制品原生验收、模型及 UI/性能结果分别记录，不从旧包继承。
+
+### The rc.3→rc.5 cumulative study
+
+The rc.5 manifest was regenerated from the published `0.2.1-rc.5` tarballs (upstream `dsh-v0.2.1-rc.5`, commit `b830ec950faba0a46dda564be3e2d854afed94f1`). The cumulative `dsh-v0.2.1-rc.3..dsh-v0.2.1-rc.5` study covered all 13 upstream commits and 388 changed files: the only non-manifest changes are client-UI thinking-block rendering (`ui-chat`, `ui-conversation`, `client-ui-cot-translation`, the `cordis-client-runner` slot-catalog source lines) and two ACP stdout diagnostics reroutes (`dsh-mcp-client` resource gating, `dsh-llm-deepseek-account` info logging to stderr) — none of them Guard-consumed interfaces. Per-file digest comparison found ZERO executable-byte changes across the 47-name core cohort (only rewritten `package.json` manifests), and the registry manifests' dependency routing is structurally unchanged between rc.3 and rc.5; Cordis remains the shared 4.0.5 release. Host trust acquisition selects the equivalence baseline by the acquired graph's version (rc.2, rc.3 or rc.5) and accepts a loading/modules match only from ONE reviewed published state. Native acceptance of the final Guard artifact on each platform remains a separate gate; no native validation of rc.5 is claimed by this study.
+
+rc.3→rc.5 累计研究覆盖全部 13 个上游提交与 388 个变更文件：非 manifest 变更只有客户端 UI 思考块渲染与两处 ACP stdout 诊断改道，均不属于 Guard 消费接口。47 包核心闭包可执行字节逐文件比对为零变化，依赖路由结构不变，Cordis 仍为共享的 4.0.5。宿主信任获取按已获取图的版本（rc.2/rc.3/rc.5）选择等价基线，且 loading 与 modules 必须来自同一已审查发布状态。最终制品的各平台原生验收仍是独立门槛。
+
+### Official rc.5 Desktop distribution bytes
+
+The official `0.2.1-rc.5` Desktop distributions have separately registered `darwin-arm64` and `win32-x64` identities. On macOS, the official CDN package SHA-512 was recorded, `codesign --verify --deep --strict` passed (TeamIdentifier `NAN929V4UM`, identifier `com.deepseek.dsh`), and the recomputed ASAR header matches the independently verified installed app. On Windows, both the installed carrier and retained installer have valid DeepSeek Authenticode signatures; the signed `ElectronAsar/Integrity` resource matches the measured ASAR header, and the retained installer size and SHA-512 match the separately acquired official distribution. Both desktop/runtime manifests report rc.5 with pnpm 11.28.5, and actual ASAR/runtime index scans found no invariant companions. The rc.3/rc.2 pins are not reused. Distribution registration does not establish Guard installation, lifecycle, real-model or UI performance acceptance; those remain separate gates. An unregistered distribution still fails closed.
+
+`0.2.1-rc.5` 的官方 macOS arm64 与 Windows x64 分发行分别登记身份。macOS 侧核对官方 CDN 包 SHA-512，并通过厂商 `codesign --verify --deep --strict`（TeamIdentifier `NAN929V4UM`）；Windows 侧读取已安装载体和保留安装器的有效 DeepSeek Authenticode 签名。两端签名绑定的 ASAR header 均与实测值一致；Windows 安装器的大小、SHA-512 也与独立获取的官方分发包一致。两端 desktop/runtime manifest 均为 rc.5、pnpm 11.28.5，实际索引扫描未发现 invariant 伴随文件。rc.3/rc.2 pin 不复用。分发行登记不代表 Guard 安装、生命周期、真实模型或 UI 性能已验收；未登记的分发行仍按失败关闭拒绝。
+
+## 0.11.0: DSH >=0.2.1-rc.3 (historical for this release)
 
 Upgrade DSH to `0.2.1-rc.3` or later before installing Guard 0.11.0. The package declares the same minimum in `engines.dsh`, `dsh.engines.dsh` and its DSH peers; Guard enforces that floor independently at runtime. There is no upper version bound, but every later graph must still pass package, byte, route and contract qualification. Cordis keeps its separate `>=4.0.4` range.