dsh-completion-guard 0.3.2 → 0.4.1-rc.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. package/CHANGELOG.md +26 -3
  2. package/CHANGELOG.zh-CN.md +26 -3
  3. package/README.md +53 -12
  4. package/README.zh-CN.md +53 -12
  5. package/dist/domain/index.d.ts +2 -2
  6. package/dist/domain/index.js +2 -2
  7. package/dist/{domain-DPPFAcbF.js → domain-B7TsszvX.js} +839 -218
  8. package/dist/{index-CTFLYvNL.d.ts → index-B5hdmCRn.d.ts} +94 -4
  9. package/dist/index.d.ts +2 -2
  10. package/dist/index.js +12 -11
  11. package/docs/COMPATIBILITY.md +155 -11
  12. package/docs/LOCAL_ACCEPTANCE.md +109 -5
  13. package/docs/PORTING_NOTES.md +13 -3
  14. package/docs/SEMANTIC_COMPATIBILITY.md +39 -16
  15. package/docs/UPSTREAM_BASE.md +8 -1
  16. package/docs/distribution.md +36 -5
  17. package/docs/upstream-deltas.json +81 -180
  18. package/manifests/supported-host.v1.json +627 -0
  19. package/package.json +9 -9
package/CHANGELOG.md CHANGED
@@ -2,7 +2,30 @@
2
2
 
3
3
  All notable changes to this project are documented here. The project is pre-1.0; release versions track the plugin lifecycle, not stabilised API promises.
4
4
 
5
- ## 0.3.2 - Unreleased (source candidate)
5
+ ## 0.4.1-rc.1 - 2026-09-04
6
+
7
+ - Add the exact DSH `0.1.2-rc.1` + dshmarket `1.41.0` host cohort for macOS/posix and Windows. The Windows host graph was audited on the native Windows rc.1 runtime; host-graph audits do not replace the cross-platform exact-artifact acceptance of one frozen package.
8
+ - Read session history through the rc.1 `snapshotEvents()` API while retaining the legacy `events` path for previously audited DSH cohorts.
9
+
10
+ ## 0.4.0 - 2026-09-02
11
+
12
+ ### Added
13
+
14
+ - **DSH alpha.3 is the 0.4.0 implementation baseline.** Version 0.4.0 targets DSH `0.1.2-alpha.3` with dshmarket `1.39.0` and Cordis `4.0.2`.
15
+ - **Evidence must prove the unfinished work the user actually requested.** Reading or checking another target cannot close the item. Evidence from another session, evidence for the wrong action or target, and evidence that does not show the required result are rejected.
16
+ - **Changed or damaged proof records cannot be reused.** If the recorded files, task scope, or saved state no longer match, the proof becomes invalid and the work stays open. The Guard keeps only the bounded facts needed for this check, not raw private logs or file contents.
17
+ - **Stage disposition.** The stopped 0.3.3 compatibility candidate is recorded as `superseded_before_candidate`; no 0.3.3 source, artifact, installation, native acceptance, commit, tag, or release existed.
18
+
19
+ ### Changed
20
+
21
+ - **Compatibility adaptation pauses after alpha.3.** Version 0.4.0 stays frozen on the DSH alpha.3 setup. Alpha.4 and later alpha releases are not new adaptation targets; work resumes with the first upstream RC published after alpha.3. Upstream milestones are listed on the [DeepSeek Harness tags page](https://github.com/deepseek-ai/deepseek-harness/tags).
22
+
23
+ ### Validation
24
+
25
+ - The release commit passes the repository matrix and CI on Ubuntu, macOS, and Windows with Node.js 22 and 24. One frozen 26-file tgz is used for native macOS and Windows acceptance and npm publication; the GitHub Release carries its checksum and platform annexes.
26
+ - Earlier 0.4.0 candidate packages remain historical evidence only. Results never transfer to changed package bytes; see [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md).
27
+
28
+ ## 0.3.2 - 2026-09-01
6
29
 
7
30
  ### Added
8
31
 
@@ -19,8 +42,8 @@ All notable changes to this project are documented here. The project is pre-1.0;
19
42
 
20
43
  ### Validation
21
44
 
22
- - The complete 20-file suite passes 359 tests with one Windows-only skip on macOS. Native Windows matched all 34 alpha.2 package rows with no missing, extra, or duplicate entries. The packaging portability fix at `a3e77de` passed the six-job Ubuntu, macOS, and Windows CI matrix on Node.js 22 and 24.
23
- - Still pending: a clean committed candidate containing the Windows registration and final documentation, isolated Web and Headless installation, native macOS and Windows checks of those exact package bytes, final candidate CI, tag, npm publication, GitHub Release, and public readback.
45
+ - Candidate commit `22cde610` passed the six-job Ubuntu, macOS, and Windows CI matrix on Node.js 22 and 24. The complete 20-file suite passes 359 tests with one Windows-only skip on macOS, and native Windows matched all 34 alpha.2 package rows with no missing, extra, or duplicate entries.
46
+ - The frozen 26-file package (181157 bytes, SHA-256 `feb7fc29799820e08dfe6d2bdb94823e745df9b5aa7c34d46262e5df30dabac4`) passed the same-byte isolated Web and Headless lifecycle on native macOS and Windows. The annotated tag, npm package, GitHub Release, and downloaded public bytes all resolve to the same commit and artifact; see [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md).
24
47
 
25
48
  ## 0.3.1 - 2026-08-31
26
49
 
package/CHANGELOG.zh-CN.md CHANGED
@@ -2,7 +2,30 @@
2
2
 
3
3
  本项目的重要变化记录在这里。项目仍处于 1.0 之前；版本号跟踪插件生命周期，不代表 API 已稳定。
4
4
 
5
- ## 0.3.2 - 未发布（源码候选）
5
+ ## 0.4.1-rc.1 - 2026-09-04
6
+
7
+ - 新增精确的 DSH `0.1.2-rc.1` + dshmarket `1.41.0` 宿主队列，覆盖 macOS/posix 与 Windows。Windows 宿主图谱已在原生 Windows rc.1 运行时上审计；宿主图谱审计不能替代同一冻结包的跨平台 exact-artifact acceptance。
8
+ - 通过 rc.1 的 `snapshotEvents()` API 读取会话历史，同时保留此前已审计 DSH 队列使用的旧版 `events` 路径。
9
+
10
+ ## 0.4.0 - 2026-09-02
11
+
12
+ ### 新增
13
+
14
+ - **DSH alpha.3 成为 0.4.0 的实现基线。** 0.4.0 面向 DSH `0.1.2-alpha.3`、dshmarket `1.39.0` 和 Cordis `4.0.2`。
15
+ - **证据必须证明用户实际要求、而且仍未完成的工作。** 读取或检查另一个目标不能关闭当前事项；来自其他会话、动作或目标不匹配、没有显示所需结果的证据都会被拒绝。
16
+ - **变化或损坏的证明记录不能继续复用。** 一旦已记录文件、任务范围或保存状态不再匹配，证明就会失效，工作继续保持未完成。Guard 只保留完成核对所需的有限事实，不保存原始私有日志或文件内容。
17
+ - **阶段处置记录。** 已停止的 0.3.3 兼容候选明确记为 `superseded_before_candidate`；该阶段不存在 0.3.3 源码、工件、安装、原生验收、提交、tag 或 release。
18
+
19
+ ### 变更
20
+
21
+ - **alpha.3 之后暂停兼容性适配。** 0.4.0 继续冻结在 DSH alpha.3 环境。alpha.4 及此后的 alpha 版本不作为新的适配目标；上游发布 alpha.3 之后的第一版 RC 时再恢复适配。上游版本进度见 [DeepSeek Harness 标签页](https://github.com/deepseek-ai/deepseek-harness/tags)。
22
+
23
+ ### 验证
24
+
25
+ - 发布提交通过仓库矩阵，以及 Ubuntu、macOS、Windows 上的 Node.js 22/24 CI。同一份 26 文件 tgz 用于 macOS、Windows 原生验收和 npm 发布；GitHub Release 附带校验和与平台验收记录。
26
+ - 更早的 0.4.0 候选包只保留为历史证据。包字节变化后，旧结果不会迁移到新包；详见 [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md)。
27
+
28
+ ## 0.3.2 - 2026-09-01
6
29
 
7
30
  ### 新增
8
31
 
@@ -19,8 +42,8 @@
19
42
 
20
43
  ### 验证
21
44
 
22
- - 20 个测试文件全量通过 359 项，macOS 跳过 1 项仅适用于 Windows 的测试。Windows 原生核对 alpha.2 的 34 行包清单全部匹配，没有缺失、额外或重复项。打包兼容性修复提交 `a3e77de` 已通过 Ubuntu、macOS、Windows 和 Node.js 22/24 的六项 CI 矩阵。
23
- - 尚待完成：提交包含 Windows 注册和最终文档的干净候选、隔离 Web/Headless 安装、对该同一包的原生 macOS/Windows 验收、最终候选 CI、tag、npm 发布、GitHub Release 和公开读回。
45
+ - 候选提交 `22cde610` 已通过 Ubuntu、macOS、Windows 和 Node.js 22/24 的六项 CI 矩阵。20 个测试文件全量通过 359 项，macOS 跳过 1 项仅适用于 Windows 的测试；Windows 原生核对 alpha.2 的 34 行包清单全部匹配，没有缺失、额外或重复项。
46
+ - 冻结的 26 文件包（181157 字节，SHA-256 `feb7fc29799820e08dfe6d2bdb94823e745df9b5aa7c34d46262e5df30dabac4`）已用同一份字节在原生 macOS 和 Windows 完成隔离 Web 与 Headless 生命周期验收。annotated tag、npm 包、GitHub Release 和重新下载的公开文件均指向同一提交与工件；详见 [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md)。
24
47
 
25
48
  ## 0.3.1 - 2026-08-31
26
49
 
package/README.md CHANGED
@@ -8,13 +8,13 @@ An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks
8
8
 
9
9
  ## Quick start
10
10
 
11
- Install the published plugin into a DSH Web profile:
11
+ Install the published plugin into the DSH Web environment:
12
12
 
13
13
  ```sh
14
- dsh plugin --profile web add dsh-completion-guard@0.3.1
14
+ dsh plugin --profile web add dsh-completion-guard@0.4.0
15
15
  ```
16
16
 
17
- Before restarting DSH, record and verify the active runtime and profile. Replace the example paths with the absolute paths on your machine:
17
+ Before restarting DSH, record and verify the DSH program directory and the Web settings directory. Replace the example paths with the absolute paths on your machine:
18
18
 
19
19
  ```sh
20
20
  DSH_RUNTIME_ROOT=/absolute/path/to/.dsh-runtime
@@ -28,7 +28,7 @@ dsh --profile web --dump-config > "$DSH_COMPOSED_DUMP"
28
28
  "$GUARD_HOST_LOCK" verify-dump --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT" --dump-config "$DSH_COMPOSED_DUMP"
29
29
  ```
30
30
 
31
- On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the profile's `node_modules\.bin` directory and use Windows absolute paths. Repeat this check after a DSH, profile, or package upgrade. The Guard stays unavailable if the active package set is missing, mixed, duplicated, or different from a checked setup.
31
+ On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the Web settings directory's `node_modules\.bin` directory and use Windows absolute paths. Repeat this check after upgrading DSH, its Web or Headless settings, or the package. The Guard stays unavailable if the active package set is missing, mixed, duplicated, or different from a checked setup.
32
32
 
33
33
  Restart DSH Web, open a session, and enable the Guard:
34
34
 
@@ -49,17 +49,30 @@ Activation is opt-in by default. `status` shows whether the Guard is on and how
49
49
 
50
50
  ## Status and compatibility
51
51
 
52
- Version 0.3.1 is the current published release. Install it from [npm](https://www.npmjs.com/package/dsh-completion-guard); its [GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.3.1) and exact public checks are recorded in [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md).
52
+ Version 0.4.0 is the current release. Install it from [npm](https://www.npmjs.com/package/dsh-completion-guard); its [GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.4.0) carries the exact package checksum and native macOS and Windows acceptance records. It targets DSH `0.1.2-alpha.3` with dshmarket `1.39.0` and Cordis `4.0.2`.
53
53
 
54
- Version 0.3.2 is an unreleased source candidate. It recognizes the exact DSH `0.1.1-rc.2` and `0.1.2-alpha.2` package sets checked on macOS and Windows. See [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md) for the package sets and [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md) for the remaining release checks.
54
+ Version `0.4.1-rc.1` is a prerelease candidate for DSH `0.1.2-rc.1` with dshmarket `1.41.0`. Its host cohort is audited on native macOS/posix and against the native Windows rc.1 host graph; host-graph audits do not replace the cross-platform exact-artifact acceptance of one frozen package. See [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md).
55
55
 
56
- Version 0.3.0 is not recommended. Its package passed native checks, but npm did not record the required source commit, so the version cannot be repaired in place and has no GitHub Release. Use 0.3.1, which keeps the same runtime behavior and fixes that release record.
56
+ Version 0.3.2 remains available for the checked DSH `0.1.1-rc.2` and `0.1.2-alpha.2` setups. Do not combine packages from different checked setups; the Guard fails closed when the active package set does not match one complete cohort in [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md).
57
+
58
+ Version 0.4.0 remains frozen on this alpha.3 setup. Alpha.4 and later alpha releases are not new adaptation targets; compatibility work resumes with the first upstream RC published after alpha.3. Track that milestone on the [DeepSeek Harness tags page](https://github.com/deepseek-ai/deepseek-harness/tags).
59
+
60
+ Release packages are built once from a clean commit and published only after those exact bytes pass native macOS and Windows Web and Headless checks. CI, native lifecycle checks, package publication, and public readback remain separate evidence scopes; see [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md).
61
+
62
+ Version 0.3.0 is not recommended. Its package passed native checks, but npm did not record the required source commit, so the version cannot be repaired in place and has no GitHub Release. Use 0.3.2.
57
63
 
58
64
  > The project was renamed from `dsh-context-guard` to `dsh-completion-guard` on 2026-08-29 because an unrelated plugin already used the old name. The internal bundle id remains `context-guard`, and the old npm package points users to this one. Supported DSH setups are listed in [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md); Node.js `>=22` and pnpm `>=11` are required.
59
65
 
60
66
  ## Activation modes
61
67
 
62
- The default `opt-in` mode protects a session only after `/context-guard on`. To enable the Guard automatically for a DSH profile, add this override to that profile's `cordis.patch.yml`:
68
+ Context Guard has two activation modes:
69
+
70
+ - `opt-in` (default): protection is off when a session starts. Run `/context-guard on` in that session to turn it on, and `/context-guard off` to turn it off again. This changes only the current session.
71
+ - `always`: DSH sessions are protected automatically. Running `/context-guard off` turns protection off only for that session; other sessions start with protection on.
72
+
73
+ These modes only control Guard protection. They are not the DSH session mode (for example, the standard or minimal mode) that a session starts with. With `always`, the Guard loads before each DSH session starts. DSH currently cannot switch a session's mode after the session has started, so a session protected this way keeps the DSH session mode it started with. `/context-guard on` and `/context-guard off` turn Guard protection on or off; they never change the DSH session mode.
74
+
75
+ To make DSH sessions start with protection on, add this entry to the `cordis.patch.yml` used by the way you start DSH:
63
76
 
64
77
  ```yaml
65
78
  - id: context-guard
@@ -68,7 +81,22 @@ The default `opt-in` mode protects a session only after `/context-guard on`. To
68
81
  activation: always
69
82
  ```
70
83
 
71
- Restart the profile, then run `/context-guard status`. In `always` mode, rebuilding an existing session can also capture earlier user messages from its saved log. Keep `opt-in` if protection should start only after an explicit command.
84
+ DSH can run with a **Web** interface in a browser, or **Headless** without a browser interface from a terminal or an automated task. These two ways of running DSH use separate settings files. Edit the file for the one you use, or edit both if you use both:
85
+
86
+ | System | How you use DSH | Default path |
87
+ | --- | --- | --- |
88
+ | macOS / Linux | Web | `$HOME/.dsh/profiles/web/cordis.patch.yml` |
89
+ | macOS / Linux | Headless | `$HOME/.dsh/profiles/headless/cordis.patch.yml` |
90
+ | Windows | Web | `%USERPROFILE%\.dsh\profiles\web\cordis.patch.yml` |
91
+ | Windows | Headless | `%USERPROFILE%\.dsh\profiles\headless\cordis.patch.yml` |
92
+
93
+ If you set a custom `DSH_HOME`, use that directory instead of `$HOME/.dsh` or `%USERPROFILE%\.dsh`.
94
+
95
+ You can also paste this prompt into DSH and let it make the change:
96
+
97
+ > Set `dsh-completion-guard` to `always` mode. Find the `cordis.patch.yml` used by the way I am currently running DSH (Web interface or Headless), back it up first, and only set `activation: always` on the entry with `id: context-guard`. Do not change any other settings or restart DSH. When finished, show me the file path and the exact diff.
98
+
99
+ After the change, restart DSH.
72
100
 
73
101
  ## How completion is checked
74
102
 
@@ -84,13 +112,25 @@ Evidence is bounded and redacted. Complete prompts, stdout, file contents, crede
84
112
 
85
113
  ## Relationship to Codex Context Guard
86
114
 
87
- This project ports deterministic behavior from [`GreenLv/codex-context-guard`](https://github.com/GreenLv/codex-context-guard), with v0.8.8 as its semantic baseline. The two repositories serve different runtimes:
115
+ This project began as a DSH port of deterministic behavior from [`GreenLv/codex-context-guard`](https://github.com/GreenLv/codex-context-guard) v0.8.8. That version is the historical starting point, not the current compatibility level.
116
+
117
+ Version 0.4.0 was deliberately aligned with the shared evidence rules in Codex Context Guard 0.10.0: proof must belong to work that is still open and must show the operation, target, and result the user actually requested. This is a limited behavior-level alignment, not a claim that the two products have the same features.
118
+
119
+ Codex Context Guard 0.11.0 was released afterward. DSH 0.4.0 already has native checks for exact mutation targets, typed waits, and quoted text, but it does not yet include the full 0.11.0 authorization-ticket, work-unit, supersession, or incident-benchmark changes. The plain-language comparison and current delta ledger are in [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md).
120
+
121
+ The two repositories serve different runtimes:
88
122
 
89
123
  - `codex-context-guard` is the Codex Hook/Python implementation with Codex plugin-cache and Hook lifecycle integration.
90
124
  - `dsh-completion-guard` is an independent TypeScript implementation over native DSH Session events, commands, tools, and agent lifecycle.
91
125
 
92
126
  They do not share runtime state, installers, caches, or release histories. Fixes are contributed to the repository that owns the affected runtime and are ported deliberately when the same behavior belongs in both products. See [`docs/UPSTREAM_BASE.md`](docs/UPSTREAM_BASE.md) and [`docs/PORTING_NOTES.md`](docs/PORTING_NOTES.md) for the exact reused and replaced boundaries.
93
127
 
128
+ ## npm download history
129
+
130
+ ![Combined cumulative npm download growth across dsh-context-guard and dsh-completion-guard](https://raw.githubusercontent.com/GreenLv/dsh-completion-guard/stats/npm-downloads.svg)
131
+
132
+ The cumulative chart keeps the old and new npm package totals visibly separate, marks the 2026-08-29 rename, and combines them only for the project growth line. npm download counts measure registry requests; they are not counts of unique users or confirmed installations. The workflow updates the chart daily and can also be triggered manually.
133
+
94
134
  ## Documentation
95
135
 
96
136
  - [`CHANGELOG.md`](CHANGELOG.md) — versioned user-visible changes.
@@ -99,7 +139,8 @@ They do not share runtime state, installers, caches, or release histories. Fixes
99
139
  - [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md) — deterministic, isolated, native, and public-package validation scopes.
100
140
  - [`docs/distribution.md`](docs/distribution.md) — verified public distribution destinations and the rename note.
101
141
  - [`docs/PRIVACY.md`](docs/PRIVACY.md) — stored facts, prohibited data, and failure behavior.
102
- - [`docs/UPSTREAM_BASE.md`](docs/UPSTREAM_BASE.md) — semantic baseline and repository authority boundary.
142
+ - [`docs/UPSTREAM_BASE.md`](docs/UPSTREAM_BASE.md) — historical starting point and repository authority boundary.
143
+ - [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md) — current shared behavior and known gaps.
103
144
  - [`docs/PORTING_NOTES.md`](docs/PORTING_NOTES.md) — behavior retained from Codex and DSH-specific replacements.
104
145
 
105
146
  ## Development
@@ -114,4 +155,4 @@ pnpm run build
114
155
  pnpm run pack:check
115
156
  ```
116
157
 
117
- These commands validate a local source tree and package. CI, native-platform acceptance, npm publication, GitHub release identity, and runtime-profile installation remain separate evidence scopes.
158
+ These commands validate a local source tree and package. CI, native-platform acceptance, npm publication, GitHub release identity, and installation in a live DSH environment remain separate evidence scopes.
package/README.zh-CN.md CHANGED
@@ -8,13 +8,13 @@
8
8
 
9
9
  ## 快速开始
10
10
 
11
- 将已发布插件安装到 DSH Web profile：
11
+ 将已发布插件安装到 DSH 的 Web 运行环境：
12
12
 
13
13
  ```sh
14
- dsh plugin --profile web add dsh-completion-guard@0.3.1
14
+ dsh plugin --profile web add dsh-completion-guard@0.4.0
15
15
  ```
16
16
 
17
- 重启 DSH 前，先记录并验证当前 runtime 和 profile。请把示例路径替换为本机绝对路径：
17
+ 重启 DSH 前，先记录并验证 DSH 程序目录和 Web 配置目录。请把示例路径替换为本机绝对路径：
18
18
 
19
19
  ```sh
20
20
  DSH_RUNTIME_ROOT=/absolute/path/to/.dsh-runtime
@@ -28,7 +28,7 @@ dsh --profile web --dump-config > "$DSH_COMPOSED_DUMP"
28
28
  "$GUARD_HOST_LOCK" verify-dump --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT" --dump-config "$DSH_COMPOSED_DUMP"
29
29
  ```
30
30
 
31
- Windows 请通过 profile 的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。DSH、profile 或包升级后需要重新检查。如果当前包集合缺失、混装、重复或不属于已检查环境，Guard 会保持不可用。
31
+ Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。DSH、Web/Headless 配置或包升级后需要重新检查。如果当前包集合缺失、混装、重复或不属于已检查环境，Guard 会保持不可用。
32
32
 
33
33
  然后重启 DSH Web，打开会话并启用 Guard：
34
34
 
@@ -49,17 +49,30 @@ Windows 请通过 profile 的 `node_modules\.bin\dsh-completion-guard-host-lock.
49
49
 
50
50
  ## 状态与兼容性
51
51
 
52
- 0.3.1 是当前已发布版本，可从 [npm](https://www.npmjs.com/package/dsh-completion-guard) 安装。[GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.3.1) 和精确的公开检查记录见 [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md)。
52
+ 0.4.0 是当前版本，可从 [npm](https://www.npmjs.com/package/dsh-completion-guard) 安装。[GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.4.0) 附有精确的包校验和，以及 macOS、Windows 原生验收记录。它面向 DSH `0.1.2-alpha.3`、dshmarket `1.39.0` 和 Cordis `4.0.2`。
53
53
 
54
- 0.3.2 是未发布的源码候选，可识别已在 macOS 和 Windows 检查过的 DSH `0.1.1-rc.2` 与 `0.1.2-alpha.2` 精确包集合。包集合见 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md)，剩余发布检查见 [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md)。
54
+ 版本 `0.4.1-rc.1` 是面向 DSH `0.1.2-rc.1` 与 dshmarket `1.41.0` 的预发布候选。其宿主队列已在原生 macOS/posix 上审计，并核对过原生 Windows rc.1 运行时的宿主图谱；宿主图谱审计不能替代同一冻结包的跨平台 exact-artifact acceptance。详见 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md)。
55
55
 
56
- 不建议使用 0.3.0。它的包通过了原生检查，但 npm 没有记录所需的源码提交，因此不能原地修复，也没有 GitHub Release。请使用 0.3.1；运行行为不变，发布记录已修复。
56
+ 0.3.2 继续支持已经检查过的 DSH `0.1.1-rc.2` 和 `0.1.2-alpha.2` 环境。不要混用不同环境的包；只有当前包集合完整匹配 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md) 中的一套记录时，Guard 才会启用。
57
+
58
+ 0.4.0 的兼容基线继续冻结在这套 alpha.3 环境。alpha.4 及此后的 alpha 版本不作为新的适配目标；兼容性适配将在上游发布 alpha.3 之后的第一版 RC 时恢复。上游版本进度见 [DeepSeek Harness 标签页](https://github.com/deepseek-ai/deepseek-harness/tags)。
59
+
60
+ 发布包只从干净提交生成一次；同一份包在 macOS 和 Windows 上完成 Web、Headless 原生检查后才会发布。CI、原生生命周期、包发布和公开读回是四类独立证据，详见 [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md)。
61
+
62
+ 不建议使用 0.3.0。它的包通过了原生检查，但 npm 没有记录所需的源码提交，因此不能原地修复，也没有 GitHub Release。请使用 0.3.2。
57
63
 
58
64
  > 本项目于 2026-08-29 由 `dsh-context-guard` 更名为 `dsh-completion-guard`，因为另一个无关插件已经使用旧名称。内部 bundle id 仍为 `context-guard`，旧 npm 包会引导用户使用本包。支持的 DSH 环境见 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md)；需要 Node.js `>=22` 和 pnpm `>=11`。
59
65
 
60
66
  ## 启用模式
61
67
 
62
- 默认 `opt-in` 模式只在会话执行 `/context-guard on` 后开始保护。如需让某个 DSH profile 自动启用 Guard，请在该 profile 的 `cordis.patch.yml` 中增加：
68
+ Context Guard 有两种启用模式：
69
+
70
+ - `opt-in`（默认）：打开会话时不会自动保护。你需要在这个会话中执行 `/context-guard on` 才会启用；执行 `/context-guard off` 可以再次关闭。开关只影响当前会话。
71
+ - `always`：DSH 会话会自动启用保护。如果你在某个会话中执行 `/context-guard off`，只会关闭这个会话；其他会话会自动开启保护。
72
+
73
+ 启用模式只控制 Guard 是否保护会话，不是 DSH 的会话模式（例如会话开始时所选的标准模式、极简模式）。选择 `always` 后，Guard 会在每个 DSH 会话开始前自动加载。DSH 当前不支持在会话开始后切换会话模式，因此受这样保护的会话会一直使用它开始时的 DSH 会话模式。`/context-guard on` 和 `/context-guard off` 只负责开启或关闭 Guard 保护，不会改变 DSH 会话模式。
74
+
75
+ 如果希望 DSH 会话自动启用保护，请在当前 DSH 启动方式使用的 `cordis.patch.yml` 中增加：
63
76
 
64
77
  ```yaml
65
78
  - id: context-guard
@@ -68,7 +81,22 @@ Windows 请通过 profile 的 `node_modules\.bin\dsh-completion-guard-host-lock.
68
81
  activation: always
69
82
  ```
70
83
 
71
- 重启 profile 后执行 `/context-guard status`。`always` 会在日志重放前启用 Guard，因此重建已有会话时也可能捕获日志中的早期用户消息。如果只希望从显式命令开始保护，请保留 `opt-in`。
84
+ DSH 有两种运行方式：**Web** 是在浏览器的网页界面里使用 DSH；**Headless** 是不打开网页界面，通常从终端或自动化任务运行 DSH。两种方式使用不同的配置文件。你用哪一种就修改哪一个；两种都用时需要分别修改：
85
+
86
+ | 系统 | 你怎么使用 DSH | 默认路径 |
87
+ | --- | --- | --- |
88
+ | macOS / Linux | Web | `$HOME/.dsh/profiles/web/cordis.patch.yml` |
89
+ | macOS / Linux | Headless | `$HOME/.dsh/profiles/headless/cordis.patch.yml` |
90
+ | Windows | Web | `%USERPROFILE%\.dsh\profiles\web\cordis.patch.yml` |
91
+ | Windows | Headless | `%USERPROFILE%\.dsh\profiles\headless\cordis.patch.yml` |
92
+
93
+ 如果你设置过自定义 `DSH_HOME`，请用该目录替换路径开头的 `$HOME/.dsh` 或 `%USERPROFILE%\.dsh`。
94
+
95
+ 不想手动改文件，也可以把下面这段话直接发给 DSH：
96
+
97
+ > 请把 `dsh-completion-guard` 设为 `always` 模式。根据我当前使用 DSH 的方式（网页界面或无网页界面），自动找到对应的 `cordis.patch.yml`，先备份该文件，只把 `id: context-guard` 这一项的 `activation` 设为 `always`，不要修改其他配置，也不要替我重启 DSH。完成后告诉我文件的绝对路径，并显示准确的修改内容。
98
+
99
+ 修改完成后，重启 DSH。
72
100
 
73
101
  ## 如何检查完成状态
74
102
 
@@ -84,13 +112,25 @@ Context Guard 负责完成认证；Goal、Todo、Compaction、continuation、权
84
112
 
85
113
  ## 与 Codex Context Guard 的关系
86
114
 
87
- 本项目从 [`GreenLv/codex-context-guard`](https://github.com/GreenLv/codex-context-guard) 迁移确定性行为，以 v0.8.8 作为语义基线，但两者服务于不同运行时：
115
+ 本项目最初从 [`GreenLv/codex-context-guard`](https://github.com/GreenLv/codex-context-guard) v0.8.8 移植确定性行为。这个版本只是历史起点，不代表当前兼容程度。
116
+
117
+ 0.4.0 明确对齐了 Codex Context Guard 0.10.0 的共享证据规则：证据必须对应仍未完成的工作，并证明用户实际要求的操作、目标和结果。这只是有边界的行为对齐，不表示两个产品拥有相同功能。
118
+
119
+ Codex Context Guard 0.11.0 在此后发布。DSH 0.4.0 已经能按自己的宿主机制核对精确变更目标、等待状态和引用文字，但还没有完整同步 0.11.0 的一次性授权票据、工作单元、需求替代归因和事故 benchmark。通俗对照表与当前差异台账见 [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md)。
120
+
121
+ 两个项目服务于不同运行时：
88
122
 
89
123
  - `codex-context-guard` 是面向 Codex Hook 的 Python 实现，负责 Codex 插件缓存和 Hook 生命周期接入。
90
124
  - `dsh-completion-guard` 是独立的 TypeScript 实现，基于 DSH 原生 Session 事件、命令、工具和 Agent 生命周期工作。
91
125
 
92
126
  两个项目不共享运行时状态、安装器、缓存或发布历史。修复应先进入拥有对应运行时的仓库；只有同一行为确实适用于两侧时，才显式迁移。具体复用与替换边界见 [`docs/UPSTREAM_BASE.md`](docs/UPSTREAM_BASE.md) 和 [`docs/PORTING_NOTES.md`](docs/PORTING_NOTES.md)。
93
127
 
128
+ ## npm 下载量历史
129
+
130
+ ![dsh-context-guard 与 dsh-completion-guard 的 npm 累计下载增长](https://raw.githubusercontent.com/GreenLv/dsh-completion-guard/stats/npm-downloads.zh-CN.svg)
131
+
132
+ 累计图分别显示更名前后的 npm 包下载总量，标记 2026-08-29 的更名，并仅在项目增长曲线中合并两者。npm 下载量统计的是 registry 请求，不等于独立用户数或已确认的真实安装人数。工作流每天自动更新，也可以手动触发。
133
+
94
134
  ## 文档
95
135
 
96
136
  - [`CHANGELOG.zh-CN.md`](CHANGELOG.zh-CN.md) — 面向使用者的版本变化。
@@ -99,7 +139,8 @@ Context Guard 负责完成认证；Goal、Todo、Compaction、continuation、权
99
139
  - [`docs/LOCAL_ACCEPTANCE.md`](docs/LOCAL_ACCEPTANCE.md) — 确定性、隔离环境、原生平台和公开包验证范围。
100
140
  - [`docs/distribution.md`](docs/distribution.md) — 已验证的公开分发去向与更名说明。
101
141
  - [`docs/PRIVACY.md`](docs/PRIVACY.md) — 保存的事实、禁止数据和失败行为。
102
- - [`docs/UPSTREAM_BASE.md`](docs/UPSTREAM_BASE.md) — 语义基线与仓库权威边界。
142
+ - [`docs/UPSTREAM_BASE.md`](docs/UPSTREAM_BASE.md) — 历史起点与仓库权威边界。
143
+ - [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md) — 当前共享行为和已知差异。
103
144
  - [`docs/PORTING_NOTES.md`](docs/PORTING_NOTES.md) — 从 Codex 保留的行为和 DSH 专属替换。
104
145
 
105
146
  ## 开发
@@ -114,4 +155,4 @@ pnpm run build
114
155
  pnpm run pack:check
115
156
  ```
116
157
 
117
- 这些命令验证本地源码树与包。CI、原生平台验收、npm 发布、GitHub Release 身份和真实 profile 安装仍是相互独立的证据范围。
158
+ 这些命令验证本地源码树与包。CI、原生平台验收、npm 发布、GitHub Release 身份和真实 DSH 环境安装仍是相互独立的证据范围。
package/dist/domain/index.d.ts CHANGED
@@ -1,2 +1,2 @@
1
- import { $ as gitCommandMatchesTarget, $n as TargetCaptureReasonCode, $t as AuthorityBlockKind, A as hostLockRowsFromComposedDump, An as DeferAuthorization, Ar as sanitizeUrl, At as HOST_CAPABILITY_PACKAGE_GROUPS, B as GitCommandManifest, Bn as ExternalOperation, Bt as HostLockStatus, C as CommandSurfaceManifest, Cn as GoalBoundaryAccess, Cr as semanticActionFromText, Ct as AuditedExecutable, D as ActiveProfileHostLock, Dn as qualifyBoundary, Dr as digestStrings, Dt as ExecutableIdentity, E as validateManifest, En as isCurrentAcceptedBoundary, Er as canonicalizePath, Et as EXPECTED_HOST_PACKAGES, F as resolveInstalledHostLock, Fn as EvidenceBinding, Ft as HostCohort, G as GitPrestateCheck, Gn as GuardIntegrity, Gt as bindLiveGoalCapability, H as GitCommandRejected, Hn as GuardBoundary, Ht as HostProfileKind, I as verifyComposedHostLockDump, In as EvidenceOutcome, It as HostCohortSelection, J as LinearCommitReadback, Jn as GuardItemStatus, Jt as evaluateHostLock, K as GitPrestateEnvelope, Kn as GuardItem, Kt as evaluateExternalWaitCapability, L as GIT_COMMAND_MANIFEST_IDS, Ln as EvidenceParseStatus, Lt as HostCohortSelectionReason, M as packageRowsFromActiveGraph, Mn as DeriveResult, Mt as HostCapabilityEvaluation, N as packageRowsFromPnpmLock, Nn as DeriveScope, Nt as HostCapabilityId, O as HostProfileError, On as BoundaryDisposition, Or as normalizeClause, Ot as ExecutableIdentityBinding, P as resolveActiveProfileHostLock, Pn as DerivedEnvelope, Pt as HostCapabilityRequest, Q as executeRevalidatedGitEffect, Qn as PersistenceAuthorization, Qt as AuthorityBlock, R as GitAdapterAction, Rn as EvidenceRole, Rt as HostLockContext, S as COMMAND_SURFACE_MANIFEST, Sn as GoalActivationState, Sr as semanticActionFromCommand, St as deriveProjection, T as OperationVerbEntry, Tn as effectuateBoundary, Tr as validateActionTarget, Tt as DEFAULT_HOST_LOCK, U as GitEffectExecution, Un as GuardCheckpoint, Ut as HostToolSurface, V as GitCommandParseResult, Vn as GoalRef, Vt as HostPlatform, W as GitEffectRunner, Wn as GuardEvidence, Wt as bindExecutableIdentity, X as commitTreeSnapshotDigest, Xn as GuardProjection, Xt as selectHostCohort, Y as commitIndexSnapshotDigest, Yn as GuardOperation, Yt as evaluateToolSurfaceCapability, Z as createGitPrestateEnvelope, Zn as HostStatus, Zt as currentContractDigest, _ as EvidenceFacetCoverage, _n as isInformationalMessage, _r as StatefulAction, _t as extractTextContent, a as classifyCompletionClaim, an as CheckpointResult, ar as createProjection, at as ParsedShell, b as evidenceMatchesItem, bn as BoundaryQualification, br as requestedTargetAuthorizesMutation, bt as withDurability, c as isWholeTaskCompletionClaim, cn as CaptureScope, cr as ACTION_MANIFEST_VERSION, ct as isRunExecutable, d as DEFAULT_RECOVERY_CHAR_BUDGET, dn as captureClause, dr as CERTIFICATE_VERSION, dt as goalCompletionDenial, en as AuthorityKind, er as TargetCaptureStatus, et as parseGitCommandManifest, f as RecoveryOptions, fn as captureItem, fr as SEMANTIC_ACTIONS, ft as hasCurrentCertificate, g as renderRecoveryPacket, gn as extractOperation, gr as SemanticAction, gt as evidenceFromPersistedToolResult, h as recoveryDigest, hn as extractMethod, hr as SUPPORTED_EVIDENCE_ADAPTERS, ht as ToolSubject, i as TurnStoppingDecision, in as classifyUserInteraction, ir as WaitAuthorization, it as CanonicalCommandSurface, j as injectActiveProfileHostLock, jn as DeriveConfig, jr as sha256, jt as HOST_COHORTS, k as hostLockContextFromComposedDump, kn as BoundaryQualificationKind, kr as sanitizeClauseText, kt as GOAL_HOST_PACKAGES, l as latestAssistantText, ln as ClassifiedClause, lr as ActionManifest, lt as parsePwshCommand, m as openItems, mn as extractArtifactPaths, mr as STOP_PROTOCOL_VERSION, mt as ToolResultInput, n as AssistantOutcomeObservation, nn as segmentAuthorityBlocks, nr as TargetValue, nt as verifiedLinearCommitReadback, o as decideTurnBoundary, on as RejectedBinding, ot as ShellParseStatus, p as closingHint, pn as classifyClause, pr as STATEFUL_ACTIONS, pt as ToolCallInput, q as GitTargetIdentity, qn as GuardItemKind, qt as evaluateHostCapability, r as CompletionDisposition, rn as UserInteractionKind, rr as VerificationContract, rt as CanonicalArgv, s as decideTurnStopping, sn as certifyCheckpoint, sr as ACTION_MANIFEST, st as canonicalArgvFromCommand, t as supersedeItem, tn as authorityCaptureCounts, tr as TargetTuple, tt as revalidateGitPrestate, u as observeAssistantOutcome, un as ClauseSegment, ur as ActionSpec, ut as parseShellCommand, v as bindingSatisfies, vn as segmentClauses, vr as actionCompatible, vt as extractToolSubject, w as ManifestIssue, wn as availableBoundaryQualifications, wr as validateActionManifest, wt as BASE_HOST_PACKAGES, x as isVerifyingCapability, xn as BoundaryRequest, xr as requestedTargetMatchesResolved, xt as PROTOCOL_V3_NOTICE, y as evidenceCoverage, yn as BoundaryEffectuation, yr as isStatefulAction, yt as isDeterministicCheck, z as GitCommandAccepted, zn as ExpectedTransition, zt as HostLockEvaluation } from "../index-CTFLYvNL.js";
2
- export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityKind, BASE_HOST_PACKAGES, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CheckpointResult, ClassifiedClause, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, ExpectedTransition, ExternalOperation, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, LinearCommitReadback, ManifestIssue, OperationVerbEntry, PROTOCOL_V3_NOTICE, ParsedShell, PersistenceAuthorization, RecoveryOptions, RejectedBinding, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, SemanticAction, ShellParseStatus, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetTuple, TargetValue, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UserInteractionKind, VerificationContract, WaitAuthorization, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindingSatisfies, canonicalArgvFromCommand, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sha256, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
1
+ import { $ as verifyComposedHostLockDump, $n as DerivedEnvelope, $t as HostCapabilityRequest, A as proofDigest, An as captureClause, Ar as CERTIFICATE_VERSION, At as ToolCallInput, B as CommandSurfaceManifest, Bn as BoundaryRequest, Br as requestedTargetMatchesResolved, Bt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, C as ProofManifest, Cn as classifyUserInteraction, Cr as WaitAuthorization, Ct as ShellParseStatus, D as bindProofToProjection, Dn as CaptureScope, Dr as ACTION_MANIFEST_VERSION, Dt as parseShellCommand, E as SessionQuery, En as certifyCheckpoint, Er as ACTION_MANIFEST, Et as parsePwshCommand, F as bindingSatisfies, Fn as extractOperation, Fr as SemanticAction, Ft as extractToolSubject, G as HostProfileError, Gn as isCurrentAcceptedBoundary, Gr as canonicalizePath, Gt as EXPECTED_HOST_PACKAGES, H as OperationVerbEntry, Hn as GoalBoundaryAccess, Hr as semanticActionFromText, Ht as AuditedExecutable, I as evidenceCoverage, In as isInformationalMessage, Ir as StatefulAction, It as isDeterministicCheck, J as injectActiveProfileHostLock, Jn as BoundaryQualificationKind, Jr as sanitizeClauseText, Jt as GOAL_HOST_PACKAGES, K as hostLockContextFromComposedDump, Kn as qualifyBoundary, Kr as digestStrings, Kt as ExecutableIdentity, L as evidenceMatchesItem, Ln as segmentClauses, Lr as actionCompatible, Lt as withDurability, M as sessionQuery, Mn as classifyClause, Mr as STATEFUL_ACTIONS, Mt as ToolSubject, N as validateProofManifest, Nn as extractArtifactPaths, Nr as STOP_PROTOCOL_VERSION, Nt as evidenceFromPersistedToolResult, O as canonicalProjection, On as ClassifiedClause, Or as ActionManifest, Ot as goalCompletionDenial, P as EvidenceFacetCoverage, Pn as extractMethod, Pr as SUPPORTED_EVIDENCE_ADAPTERS, Pt as extractTextContent, Q as resolveInstalledHostLock, Qn as DeriveScope, Qt as HostCapabilityId, R as isVerifyingCapability, Rn as BoundaryEffectuation, Rr as isStatefulAction, Rt as PROTOCOL_V3_NOTICE, S as ProofKind, Sn as UserInteractionKind, Sr as VerificationContract, St as ParsedShell, T as ProofSurface, Tn as RejectedBinding, Tt as isRunExecutable, U as validateManifest, Un as availableBoundaryQualifications, Ur as validateActionManifest, Ut as BASE_HOST_PACKAGES, V as ManifestIssue, Vn as GoalActivationState, Vr as semanticActionFromCommand, Vt as ALPHA2_HOST_PACKAGES, W as ActiveProfileHostLock, Wn as effectuateBoundary, Wr as validateActionTarget, Wt as DEFAULT_HOST_LOCK, X as packageRowsFromPnpmLock, Xn as DeriveConfig, Xr as sha256, Xt as HOST_COHORTS, Y as packageRowsFromActiveGraph, Yn as DeferAuthorization, Yr as sanitizeUrl, Yt as HOST_CAPABILITY_PACKAGE_GROUPS, Z as resolveActiveProfileHostLock, Zn as DeriveResult, Zt as HostCapabilityEvaluation, _ as recoveryDigest, _n as AuthorityBlock, _r as PersistenceAuthorization, _t as parseGitCommandManifest, a as classifyCompletionClaim, an as HostLockStatus, ar as ExternalOperation, at as GitCommandRejected, b as PROOF_KINDS, bn as authorityCaptureCounts, br as TargetTuple, bt as CanonicalArgv, c as isWholeTaskCompletionClaim, cn as HostToolSurface, cr as GuardCheckpoint, ct as GitPrestateCheck, d as snapshotSessionEvents, dn as evaluateExternalWaitCapability, dr as GuardItem, dt as LinearCommitReadback, en as HostCohort, er as EvidenceBinding, et as GIT_COMMAND_MANIFEST_IDS, f as RC1_HOST_PACKAGES, fn as evaluateHostCapability, fr as GuardItemKind, ft as commitIndexSnapshotDigest, g as openItems, gn as currentContractDigest, gr as HostStatus, gt as gitCommandMatchesTarget, h as closingHint, hn as selectHostCohort, hr as GuardProjection, ht as executeRevalidatedGitEffect, i as TurnStoppingDecision, in as HostLockEvaluation, ir as ExpectedTransition, it as GitCommandParseResult, j as proofEvidenceConstraints, jn as captureItem, jr as SEMANTIC_ACTIONS, jt as ToolResultInput, k as createProofManifest, kn as ClauseSegment, kr as ActionSpec, kt as hasCurrentCertificate, l as latestAssistantText, ln as bindExecutableIdentity, lr as GuardEvidence, lt as GitPrestateEnvelope, m as RecoveryOptions, mn as evaluateToolSurfaceCapability, mr as GuardOperation, mt as createGitPrestateEnvelope, n as AssistantOutcomeObservation, nn as HostCohortSelectionReason, nr as EvidenceParseStatus, nt as GitCommandAccepted, o as decideTurnBoundary, on as HostPlatform, or as GoalRef, ot as GitEffectExecution, p as DEFAULT_RECOVERY_CHAR_BUDGET, pn as evaluateHostLock, pr as GuardItemStatus, pt as commitTreeSnapshotDigest, q as hostLockRowsFromComposedDump, qn as BoundaryDisposition, qr as normalizeClause, qt as ExecutableIdentityBinding, r as CompletionDisposition, rn as HostLockContext, rr as EvidenceRole, rt as GitCommandManifest, s as decideTurnStopping, sn as HostProfileKind, sr as GuardBoundary, st as GitEffectRunner, t as supersedeItem, tn as HostCohortSelection, tr as EvidenceOutcome, tt as GitAdapterAction, u as observeAssistantOutcome, un as bindLiveGoalCapability, ur as GuardIntegrity, ut as GitTargetIdentity, v as renderRecoveryPacket, vn as AuthorityBlockKind, vr as TargetCaptureReasonCode, vt as revalidateGitPrestate, w as ProofObligation, wn as CheckpointResult, wr as createProjection, wt as canonicalArgvFromCommand, x as PROOF_PROTOCOL_VERSION, xn as segmentAuthorityBlocks, xr as TargetValue, xt as CanonicalCommandSurface, y as ALPHA3_HOST_PACKAGES, yn as AuthorityKind, yr as TargetCaptureStatus, yt as verifiedLinearCommitReadback, z as COMMAND_SURFACE_MANIFEST, zn as BoundaryQualification, zr as requestedTargetAuthorizesMutation, zt as deriveProjection } from "../index-B5hdmCRn.js";
2
+ export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityKind, BASE_HOST_PACKAGES, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CheckpointResult, ClassifiedClause, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, ExpectedTransition, ExternalOperation, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, LinearCommitReadback, ManifestIssue, OperationVerbEntry, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, ParsedShell, PersistenceAuthorization, ProofKind, ProofManifest, ProofObligation, ProofSurface, RC1_HOST_PACKAGES, RecoveryOptions, RejectedBinding, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, SemanticAction, SessionQuery, ShellParseStatus, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetTuple, TargetValue, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UserInteractionKind, VerificationContract, WaitAuthorization, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, snapshotSessionEvents, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
package/dist/domain/index.js CHANGED
@@ -1,3 +1,3 @@
1
- import { $ as segmentAuthorityBlocks, A as extractToolSubject, At as STATEFUL_ACTIONS, B as DEFAULT_HOST_LOCK, Bt as validateActionTarget, C as latestAssistantText, Ct as segmentClauses, D as supersedeItem, Dt as ACTION_MANIFEST_VERSION, E as deriveProjection, Et as ACTION_MANIFEST, F as parsePwshCommand, Ft as requestedTargetAuthorizesMutation, G as bindExecutableIdentity, Gt as normalizeClause, H as GOAL_HOST_PACKAGES, Ht as validateManifest, I as parseShellCommand, It as requestedTargetMatchesResolved, J as evaluateHostCapability, Jt as sha256, K as bindLiveGoalCapability, Kt as sanitizeClauseText, L as goalCompletionDenial, Lt as semanticActionFromCommand, M as withDurability, Mt as SUPPORTED_EVIDENCE_ADAPTERS, N as canonicalArgvFromCommand, Nt as actionCompatible, O as evidenceFromPersistedToolResult, Ot as CERTIFICATE_VERSION, P as isRunExecutable, Pt as isStatefulAction, Q as authorityCaptureCounts, R as hasCurrentCertificate, Rt as semanticActionFromText, S as isWholeTaskCompletionClaim, St as isInformationalMessage, T as PROTOCOL_V3_NOTICE, U as HOST_CAPABILITY_PACKAGE_GROUPS, Ut as canonicalizePath, V as EXPECTED_HOST_PACKAGES, Vt as COMMAND_SURFACE_MANIFEST, W as HOST_COHORTS, Wt as digestStrings, X as evaluateToolSurfaceCapability, Y as evaluateHostLock, Yt as createProjection, Z as selectHostCohort, _ as revalidateGitPrestate, _t as captureItem, a as packageRowsFromActiveGraph, at as certifyCheckpoint, b as decideTurnBoundary, bt as extractMethod, c as resolveInstalledHostLock, ct as openItems, d as commitIndexSnapshotDigest, dt as bindingSatisfies, et as classifyUserInteraction, f as commitTreeSnapshotDigest, ft as evidenceCoverage, g as parseGitCommandManifest, gt as captureClause, h as gitCommandMatchesTarget, ht as currentContractDigest, i as injectActiveProfileHostLock, it as qualifyBoundary, j as isDeterministicCheck, jt as STOP_PROTOCOL_VERSION, k as extractTextContent, kt as SEMANTIC_ACTIONS, l as verifyComposedHostLockDump, lt as recoveryDigest, m as executeRevalidatedGitEffect, mt as isVerifyingCapability, n as hostLockContextFromComposedDump, nt as effectuateBoundary, o as packageRowsFromPnpmLock, ot as DEFAULT_RECOVERY_CHAR_BUDGET, p as createGitPrestateEnvelope, pt as evidenceMatchesItem, q as evaluateExternalWaitCapability, qt as sanitizeUrl, r as hostLockRowsFromComposedDump, rt as isCurrentAcceptedBoundary, s as resolveActiveProfileHostLock, st as closingHint, t as HostProfileError, tt as availableBoundaryQualifications, u as GIT_COMMAND_MANIFEST_IDS, ut as renderRecoveryPacket, v as verifiedLinearCommitReadback, vt as classifyClause, w as observeAssistantOutcome, x as decideTurnStopping, xt as extractOperation, y as classifyCompletionClaim, yt as extractArtifactPaths, z as BASE_HOST_PACKAGES, zt as validateActionManifest } from "../domain-DPPFAcbF.js";
1
+ import { $ as EXPECTED_HOST_PACKAGES, $t as validateActionManifest, A as decideTurnBoundary, At as captureClause, B as extractToolSubject, Bt as ACTION_MANIFEST, C as createGitPrestateEnvelope, Ct as recoveryDigest, D as revalidateGitPrestate, Dt as evidenceMatchesItem, E as parseGitCommandManifest, Et as evidenceCoverage, F as PROTOCOL_V3_NOTICE, Ft as extractOperation, G as parsePwshCommand, Gt as STOP_PROTOCOL_VERSION, H as withDurability, Ht as CERTIFICATE_VERSION, I as deriveProjection, It as isInformationalMessage, J as hasCurrentCertificate, Jt as isStatefulAction, K as parseShellCommand, Kt as SUPPORTED_EVIDENCE_ADAPTERS, L as supersedeItem, Lt as segmentClauses, M as isWholeTaskCompletionClaim, Mt as classifyClause, N as latestAssistantText, Nt as extractArtifactPaths, O as verifiedLinearCommitReadback, Ot as isVerifyingCapability, P as observeAssistantOutcome, Pt as extractMethod, Q as DEFAULT_HOST_LOCK, Qt as semanticActionFromText, R as evidenceFromPersistedToolResult, S as commitTreeSnapshotDigest, St as openItems, T as gitCommandMatchesTarget, Tt as bindingSatisfies, U as canonicalArgvFromCommand, Ut as SEMANTIC_ACTIONS, V as isDeterministicCheck, Vt as ACTION_MANIFEST_VERSION, W as isRunExecutable, Wt as STATEFUL_ACTIONS, X as ALPHA2_HOST_PACKAGES, Xt as requestedTargetMatchesResolved, Y as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Yt as requestedTargetAuthorizesMutation, Z as BASE_HOST_PACKAGES, Zt as semanticActionFromCommand, _ as resolveInstalledHostLock, _t as isCurrentAcceptedBoundary, a as createProofManifest, an as normalizeClause, at as evaluateExternalWaitCapability, b as GIT_COMMAND_MANIFEST_IDS, bt as DEFAULT_RECOVERY_CHAR_BUDGET, c as sessionQuery, cn as sha256, ct as evaluateToolSurfaceCapability, d as hostLockContextFromComposedDump, dt as ALPHA3_HOST_PACKAGES, en as validateActionTarget, et as GOAL_HOST_PACKAGES, f as hostLockRowsFromComposedDump, ft as authorityCaptureCounts, g as resolveActiveProfileHostLock, gt as effectuateBoundary, h as packageRowsFromPnpmLock, ht as availableBoundaryQualifications, i as canonicalProjection, in as digestStrings, it as bindLiveGoalCapability, j as decideTurnStopping, jt as captureItem, k as classifyCompletionClaim, kt as currentContractDigest, l as validateProofManifest, ln as createProjection, lt as selectHostCohort, m as packageRowsFromActiveGraph, mt as classifyUserInteraction, n as PROOF_PROTOCOL_VERSION, nn as validateManifest, nt as HOST_COHORTS, o as proofDigest, on as sanitizeClauseText, ot as evaluateHostCapability, p as injectActiveProfileHostLock, pt as segmentAuthorityBlocks, q as goalCompletionDenial, qt as actionCompatible, r as bindProofToProjection, rn as canonicalizePath, rt as bindExecutableIdentity, s as proofEvidenceConstraints, sn as sanitizeUrl, st as evaluateHostLock, t as PROOF_KINDS, tn as COMMAND_SURFACE_MANIFEST, tt as HOST_CAPABILITY_PACKAGE_GROUPS, u as HostProfileError, ut as RC1_HOST_PACKAGES, v as verifyComposedHostLockDump, vt as qualifyBoundary, w as executeRevalidatedGitEffect, wt as renderRecoveryPacket, x as commitIndexSnapshotDigest, xt as closingHint, y as snapshotSessionEvents, yt as certifyCheckpoint, z as extractTextContent } from "../domain-B7TsszvX.js";
2
2
 
3
- export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, BASE_HOST_PACKAGES, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, EXPECTED_HOST_PACKAGES, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, PROTOCOL_V3_NOTICE, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindingSatisfies, canonicalArgvFromCommand, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sha256, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
3
+ export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, EXPECTED_HOST_PACKAGES, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, snapshotSessionEvents, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };