dsh-completion-guard 0.4.0 → 0.4.1-rc.1

package/CHANGELOG.md

@@ -2,13 +2,18 @@
 
 All notable changes to this project are documented here. The project is pre-1.0; release versions track the plugin lifecycle, not stabilised API promises.
 
+## 0.4.1-rc.1 - 2026-09-04
+
+- Add the exact DSH `0.1.2-rc.1` + dshmarket `1.41.0` host cohort for macOS/posix and Windows. The Windows host graph was audited on the native Windows rc.1 runtime; host-graph audits do not replace the cross-platform exact-artifact acceptance of one frozen package.
+- Read session history through the rc.1 `snapshotEvents()` API while retaining the legacy `events` path for previously audited DSH cohorts.
+
 ## 0.4.0 - 2026-09-02
 
 ### Added
 
 - **DSH alpha.3 is the 0.4.0 implementation baseline.** Version 0.4.0 targets DSH `0.1.2-alpha.3` with dshmarket `1.39.0` and Cordis `4.0.2`.
-- **A proof must refer to the work that is still pending and to evidence for the action the user actually requested.** A read or verification result for another target cannot close the item. Empty subject sets, evidence imported from another session, and evidence with the wrong kind, surface, subject, or outcome are rejected.
-- **Damaged proof state fails closed.** Changing the recorded asset set or scope digest makes the proof unusable. The technical contract versions canonical projections, bounded subject readback, scope coverage, state verification, and replayable `sessionQuery` state while excluding raw private logs and asset bytes.
+- **Evidence must prove the unfinished work the user actually requested.** Reading or checking another target cannot close the item. Evidence from another session, evidence for the wrong action or target, and evidence that does not show the required result are rejected.
+- **Changed or damaged proof records cannot be reused.** If the recorded files, task scope, or saved state no longer match, the proof becomes invalid and the work stays open. The Guard keeps only the bounded facts needed for this check, not raw private logs or file contents.
 - **Stage disposition.** The stopped 0.3.3 compatibility candidate is recorded as `superseded_before_candidate`; no 0.3.3 source, artifact, installation, native acceptance, commit, tag, or release existed.
 
 ### Changed

package/CHANGELOG.zh-CN.md

@@ -2,13 +2,18 @@
 
 本项目的重要变化记录在这里。项目仍处于 1.0 之前；版本号跟踪插件生命周期，不代表 API 已稳定。
 
+## 0.4.1-rc.1 - 2026-09-04
+
+- 新增精确的 DSH `0.1.2-rc.1` + dshmarket `1.41.0` 宿主队列，覆盖 macOS/posix 与 Windows。Windows 宿主图谱已在原生 Windows rc.1 运行时上审计；宿主图谱审计不能替代同一冻结包的跨平台 exact-artifact acceptance。
+- 通过 rc.1 的 `snapshotEvents()` API 读取会话历史，同时保留此前已审计 DSH 队列使用的旧版 `events` 路径。
+
 ## 0.4.0 - 2026-09-02
 
 ### 新增
 
 - **DSH alpha.3 成为 0.4.0 的实现基线。** 0.4.0 面向 DSH `0.1.2-alpha.3`、dshmarket `1.39.0` 和 Cordis `4.0.2`。
-- **证明必须对应仍在待办中的工作，也必须对应用户实际要求的操作。** 读取或验证了另一个对象，不能关闭当前事项。对象集合为空、从其他会话带入证据，或证据的类型、表面、对象、结果不匹配时，都会被拒绝。
-- **证明状态被篡改时保持失败关闭。** 资产集合或范围摘要一旦被改动，这份证明就不能再使用。技术层面会版本化 canonical projection、有限 subject readback、scope coverage、state verification 和可重放的 `sessionQuery` 状态，但不保存原始私有日志或资产字节。
+- **证据必须证明用户实际要求、而且仍未完成的工作。** 读取或检查另一个目标不能关闭当前事项；来自其他会话、动作或目标不匹配、没有显示所需结果的证据都会被拒绝。
+- **变化或损坏的证明记录不能继续复用。** 一旦已记录文件、任务范围或保存状态不再匹配，证明就会失效，工作继续保持未完成。Guard 只保留完成核对所需的有限事实，不保存原始私有日志或文件内容。
 - **阶段处置记录。** 已停止的 0.3.3 兼容候选明确记为 `superseded_before_candidate`；该阶段不存在 0.3.3 源码、工件、安装、原生验收、提交、tag 或 release。
 
 ### 变更

package/README.md

@@ -8,13 +8,13 @@ An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks
 
 ## Quick start
 
-Install the published plugin into a DSH Web profile:
+Install the published plugin into the DSH Web environment:
 
 ```sh
 dsh plugin --profile web add dsh-completion-guard@0.4.0
 ```
 
-Before restarting DSH, record and verify the active runtime and profile. Replace the example paths with the absolute paths on your machine:
+Before restarting DSH, record and verify the DSH program directory and the Web settings directory. Replace the example paths with the absolute paths on your machine:
 
 ```sh
 DSH_RUNTIME_ROOT=/absolute/path/to/.dsh-runtime
@@ -28,7 +28,7 @@ dsh --profile web --dump-config > "$DSH_COMPOSED_DUMP"
 "$GUARD_HOST_LOCK" verify-dump --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT" --dump-config "$DSH_COMPOSED_DUMP"
 ```
 
-On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the profile's `node_modules\.bin` directory and use Windows absolute paths. Repeat this check after a DSH, profile, or package upgrade. The Guard stays unavailable if the active package set is missing, mixed, duplicated, or different from a checked setup.
+On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the Web settings directory's `node_modules\.bin` directory and use Windows absolute paths. Repeat this check after upgrading DSH, its Web or Headless settings, or the package. The Guard stays unavailable if the active package set is missing, mixed, duplicated, or different from a checked setup.
 
 Restart DSH Web, open a session, and enable the Guard:
 
@@ -51,6 +51,8 @@ Activation is opt-in by default. `status` shows whether the Guard is on and how
 
 Version 0.4.0 is the current release. Install it from [npm](https://www.npmjs.com/package/dsh-completion-guard); its [GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.4.0) carries the exact package checksum and native macOS and Windows acceptance records. It targets DSH `0.1.2-alpha.3` with dshmarket `1.39.0` and Cordis `4.0.2`.
 
+Version `0.4.1-rc.1` is a prerelease candidate for DSH `0.1.2-rc.1` with dshmarket `1.41.0`. Its host cohort is audited on native macOS/posix and against the native Windows rc.1 host graph; host-graph audits do not replace the cross-platform exact-artifact acceptance of one frozen package. See [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md).
+
 Version 0.3.2 remains available for the checked DSH `0.1.1-rc.2` and `0.1.2-alpha.2` setups. Do not combine packages from different checked setups; the Guard fails closed when the active package set does not match one complete cohort in [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md).
 
 Version 0.4.0 remains frozen on this alpha.3 setup. Alpha.4 and later alpha releases are not new adaptation targets; compatibility work resumes with the first upstream RC published after alpha.3. Track that milestone on the [DeepSeek Harness tags page](https://github.com/deepseek-ai/deepseek-harness/tags).
@@ -63,7 +65,14 @@ Version 0.3.0 is not recommended. Its package passed native checks, but npm did
 
 ## Activation modes
 
-The default `opt-in` mode protects a session only after `/context-guard on`. To enable the Guard automatically for a DSH profile, add this override to that profile's `cordis.patch.yml`:
+Context Guard has two activation modes:
+
+- `opt-in` (default): protection is off when a session starts. Run `/context-guard on` in that session to turn it on, and `/context-guard off` to turn it off again. This changes only the current session.
+- `always`: DSH sessions are protected automatically. Running `/context-guard off` turns protection off only for that session; other sessions start with protection on.
+
+These modes only control Guard protection. They are not the DSH session mode (for example, the standard or minimal mode) that a session starts with. With `always`, the Guard loads before each DSH session starts. DSH currently cannot switch a session's mode after the session has started, so a session protected this way keeps the DSH session mode it started with. `/context-guard on` and `/context-guard off` turn Guard protection on or off; they never change the DSH session mode.
+
+To make DSH sessions start with protection on, add this entry to the `cordis.patch.yml` used by the way you start DSH:
 
 ```yaml
 - id: context-guard
@@ -72,7 +81,22 @@ The default `opt-in` mode protects a session only after `/context-guard on`. To
     activation: always
 ```
 
-Restart the profile, then run `/context-guard status`. In `always` mode, rebuilding an existing session can also capture earlier user messages from its saved log. Keep `opt-in` if protection should start only after an explicit command.
+DSH can run with a **Web** interface in a browser, or **Headless** without a browser interface from a terminal or an automated task. These two ways of running DSH use separate settings files. Edit the file for the one you use, or edit both if you use both:
+
+| System | How you use DSH | Default path |
+| --- | --- | --- |
+| macOS / Linux | Web | `$HOME/.dsh/profiles/web/cordis.patch.yml` |
+| macOS / Linux | Headless | `$HOME/.dsh/profiles/headless/cordis.patch.yml` |
+| Windows | Web | `%USERPROFILE%\.dsh\profiles\web\cordis.patch.yml` |
+| Windows | Headless | `%USERPROFILE%\.dsh\profiles\headless\cordis.patch.yml` |
+
+If you set a custom `DSH_HOME`, use that directory instead of `$HOME/.dsh` or `%USERPROFILE%\.dsh`.
+
+You can also paste this prompt into DSH and let it make the change:
+
+> Set `dsh-completion-guard` to `always` mode. Find the `cordis.patch.yml` used by the way I am currently running DSH (Web interface or Headless), back it up first, and only set `activation: always` on the entry with `id: context-guard`. Do not change any other settings or restart DSH. When finished, show me the file path and the exact diff.
+
+After the change, restart DSH.
 
 ## How completion is checked
 
@@ -90,7 +114,9 @@ Evidence is bounded and redacted. Complete prompts, stdout, file contents, crede
 
 This project began as a DSH port of deterministic behavior from [`GreenLv/codex-context-guard`](https://github.com/GreenLv/codex-context-guard) v0.8.8. That version is the historical starting point, not the current compatibility level.
 
-Current shared behavior is tracked by pinned conformance fixtures and an explicit delta ledger. Version 0.3.2 includes the shared Stop 2.0, digest v3, and conformance work from the Codex 0.9.4 line. Version 0.4.0 adds the stricter task, path, capability, and proof bindings documented in [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md); this is a bounded semantic alignment claim, not full product parity.
+Version 0.4.0 was deliberately aligned with the shared evidence rules in Codex Context Guard 0.10.0: proof must belong to work that is still open and must show the operation, target, and result the user actually requested. This is a limited behavior-level alignment, not a claim that the two products have the same features.
+
+Codex Context Guard 0.11.0 was released afterward. DSH 0.4.0 already has native checks for exact mutation targets, typed waits, and quoted text, but it does not yet include the full 0.11.0 authorization-ticket, work-unit, supersession, or incident-benchmark changes. The plain-language comparison and current delta ledger are in [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md).
 
 The two repositories serve different runtimes:
 
@@ -129,4 +155,4 @@ pnpm run build
 pnpm run pack:check
 ```
 
-These commands validate a local source tree and package. CI, native-platform acceptance, npm publication, GitHub release identity, and runtime-profile installation remain separate evidence scopes.
+These commands validate a local source tree and package. CI, native-platform acceptance, npm publication, GitHub release identity, and installation in a live DSH environment remain separate evidence scopes.

package/README.zh-CN.md

@@ -8,13 +8,13 @@
 
 ## 快速开始
 
-将已发布插件安装到 DSH Web profile：
+将已发布插件安装到 DSH 的 Web 运行环境：
 
 ```sh
 dsh plugin --profile web add dsh-completion-guard@0.4.0
 ```
 
-重启 DSH 前，先记录并验证当前 runtime 和 profile。请把示例路径替换为本机绝对路径：
+重启 DSH 前，先记录并验证 DSH 程序目录和 Web 配置目录。请把示例路径替换为本机绝对路径：
 
 ```sh
 DSH_RUNTIME_ROOT=/absolute/path/to/.dsh-runtime
@@ -28,7 +28,7 @@ dsh --profile web --dump-config > "$DSH_COMPOSED_DUMP"
 "$GUARD_HOST_LOCK" verify-dump --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT" --dump-config "$DSH_COMPOSED_DUMP"
 ```
 
-Windows 请通过 profile 的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。DSH、profile 或包升级后需要重新检查。如果当前包集合缺失、混装、重复或不属于已检查环境，Guard 会保持不可用。
+Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。DSH、Web/Headless 配置或包升级后需要重新检查。如果当前包集合缺失、混装、重复或不属于已检查环境，Guard 会保持不可用。
 
 然后重启 DSH Web，打开会话并启用 Guard：
 
@@ -51,6 +51,8 @@ Windows 请通过 profile 的 `node_modules\.bin\dsh-completion-guard-host-lock.
 
 0.4.0 是当前版本，可从 [npm](https://www.npmjs.com/package/dsh-completion-guard) 安装。[GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.4.0) 附有精确的包校验和，以及 macOS、Windows 原生验收记录。它面向 DSH `0.1.2-alpha.3`、dshmarket `1.39.0` 和 Cordis `4.0.2`。
 
+版本 `0.4.1-rc.1` 是面向 DSH `0.1.2-rc.1` 与 dshmarket `1.41.0` 的预发布候选。其宿主队列已在原生 macOS/posix 上审计，并核对过原生 Windows rc.1 运行时的宿主图谱；宿主图谱审计不能替代同一冻结包的跨平台 exact-artifact acceptance。详见 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md)。
+
 0.3.2 继续支持已经检查过的 DSH `0.1.1-rc.2` 和 `0.1.2-alpha.2` 环境。不要混用不同环境的包；只有当前包集合完整匹配 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md) 中的一套记录时，Guard 才会启用。
 
 0.4.0 的兼容基线继续冻结在这套 alpha.3 环境。alpha.4 及此后的 alpha 版本不作为新的适配目标；兼容性适配将在上游发布 alpha.3 之后的第一版 RC 时恢复。上游版本进度见 [DeepSeek Harness 标签页](https://github.com/deepseek-ai/deepseek-harness/tags)。
@@ -63,7 +65,14 @@ Windows 请通过 profile 的 `node_modules\.bin\dsh-completion-guard-host-lock.
 
 ## 启用模式
 
-默认 `opt-in` 模式只在会话执行 `/context-guard on` 后开始保护。如需让某个 DSH profile 自动启用 Guard，请在该 profile 的 `cordis.patch.yml` 中增加：
+Context Guard 有两种启用模式：
+
+- `opt-in`（默认）：打开会话时不会自动保护。你需要在这个会话中执行 `/context-guard on` 才会启用；执行 `/context-guard off` 可以再次关闭。开关只影响当前会话。
+- `always`：DSH 会话会自动启用保护。如果你在某个会话中执行 `/context-guard off`，只会关闭这个会话；其他会话会自动开启保护。
+
+启用模式只控制 Guard 是否保护会话，不是 DSH 的会话模式（例如会话开始时所选的标准模式、极简模式）。选择 `always` 后，Guard 会在每个 DSH 会话开始前自动加载。DSH 当前不支持在会话开始后切换会话模式，因此受这样保护的会话会一直使用它开始时的 DSH 会话模式。`/context-guard on` 和 `/context-guard off` 只负责开启或关闭 Guard 保护，不会改变 DSH 会话模式。
+
+如果希望 DSH 会话自动启用保护，请在当前 DSH 启动方式使用的 `cordis.patch.yml` 中增加：
 
 ```yaml
 - id: context-guard
@@ -72,7 +81,22 @@ Windows 请通过 profile 的 `node_modules\.bin\dsh-completion-guard-host-lock.
     activation: always
 ```
 
-重启 profile 后执行 `/context-guard status`。`always` 会在日志重放前启用 Guard，因此重建已有会话时也可能捕获日志中的早期用户消息。如果只希望从显式命令开始保护，请保留 `opt-in`。
+DSH 有两种运行方式：**Web** 是在浏览器的网页界面里使用 DSH；**Headless** 是不打开网页界面，通常从终端或自动化任务运行 DSH。两种方式使用不同的配置文件。你用哪一种就修改哪一个；两种都用时需要分别修改：
+
+| 系统 | 你怎么使用 DSH | 默认路径 |
+| --- | --- | --- |
+| macOS / Linux | Web | `$HOME/.dsh/profiles/web/cordis.patch.yml` |
+| macOS / Linux | Headless | `$HOME/.dsh/profiles/headless/cordis.patch.yml` |
+| Windows | Web | `%USERPROFILE%\.dsh\profiles\web\cordis.patch.yml` |
+| Windows | Headless | `%USERPROFILE%\.dsh\profiles\headless\cordis.patch.yml` |
+
+如果你设置过自定义 `DSH_HOME`，请用该目录替换路径开头的 `$HOME/.dsh` 或 `%USERPROFILE%\.dsh`。
+
+不想手动改文件，也可以把下面这段话直接发给 DSH：
+
+> 请把 `dsh-completion-guard` 设为 `always` 模式。根据我当前使用 DSH 的方式（网页界面或无网页界面），自动找到对应的 `cordis.patch.yml`，先备份该文件，只把 `id: context-guard` 这一项的 `activation` 设为 `always`，不要修改其他配置，也不要替我重启 DSH。完成后告诉我文件的绝对路径，并显示准确的修改内容。
+
+修改完成后，重启 DSH。
 
 ## 如何检查完成状态
 
@@ -90,7 +114,9 @@ Context Guard 负责完成认证；Goal、Todo、Compaction、continuation、权
 
 本项目最初从 [`GreenLv/codex-context-guard`](https://github.com/GreenLv/codex-context-guard) v0.8.8 移植确定性行为。这个版本只是历史起点，不代表当前兼容程度。
 
-双方当前共享到哪里，由固定的兼容性测试数据和差异台账记录。0.3.2 已包含 Codex 0.9.4 系列的 Stop 2.0、digest v3 和共享兼容性测试。0.4.0 又加入了更严格的任务、路径、能力和证明绑定，具体范围见 [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md)；这里描述的是有明确边界的语义对齐，不代表两个产品完全一致。
+0.4.0 明确对齐了 Codex Context Guard 0.10.0 的共享证据规则：证据必须对应仍未完成的工作，并证明用户实际要求的操作、目标和结果。这只是有边界的行为对齐，不表示两个产品拥有相同功能。
+
+Codex Context Guard 0.11.0 在此后发布。DSH 0.4.0 已经能按自己的宿主机制核对精确变更目标、等待状态和引用文字，但还没有完整同步 0.11.0 的一次性授权票据、工作单元、需求替代归因和事故 benchmark。通俗对照表与当前差异台账见 [`docs/SEMANTIC_COMPATIBILITY.md`](docs/SEMANTIC_COMPATIBILITY.md)。
 
 两个项目服务于不同运行时：
 
@@ -129,4 +155,4 @@ pnpm run build
 pnpm run pack:check
 ```
 
-这些命令验证本地源码树与包。CI、原生平台验收、npm 发布、GitHub Release 身份和真实 profile 安装仍是相互独立的证据范围。
+这些命令验证本地源码树与包。CI、原生平台验收、npm 发布、GitHub Release 身份和真实 DSH 环境安装仍是相互独立的证据范围。

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as GitAdapterAction, $n as EvidenceOutcome, $t as HostCohortSelection, A as sessionQuery, An as classifyClause, Ar as STATEFUL_ACTIONS, At as ToolSubject, B as OperationVerbEntry, Bn as GoalBoundaryAccess, Br as semanticActionFromText, Bt as AuditedExecutable, C as ProofSurface, Cn as RejectedBinding, Ct as isRunExecutable, D as createProofManifest, Dn as ClauseSegment, Dr as ActionSpec, Dt as hasCurrentCertificate, E as canonicalProjection, En as ClassifiedClause, Er as ActionManifest, Et as goalCompletionDenial, F as evidenceMatchesItem, Fn as segmentClauses, Fr as actionCompatible, Ft as withDurability, G as hostLockRowsFromComposedDump, Gn as BoundaryDisposition, Gr as normalizeClause, Gt as ExecutableIdentityBinding, H as ActiveProfileHostLock, Hn as effectuateBoundary, Hr as validateActionTarget, Ht as DEFAULT_HOST_LOCK, I as isVerifyingCapability, In as BoundaryEffectuation, Ir as isStatefulAction, It as PROTOCOL_V3_NOTICE, J as packageRowsFromPnpmLock, Jn as DeriveConfig, Jr as sha256, Jt as HOST_COHORTS, K as injectActiveProfileHostLock, Kn as BoundaryQualificationKind, Kr as sanitizeClauseText, Kt as GOAL_HOST_PACKAGES, L as COMMAND_SURFACE_MANIFEST, Ln as BoundaryQualification, Lr as requestedTargetAuthorizesMutation, Lt as deriveProjection, M as EvidenceFacetCoverage, Mn as extractMethod, Mr as SUPPORTED_EVIDENCE_ADAPTERS, Mt as extractTextContent, N as bindingSatisfies, Nn as extractOperation, Nr as SemanticAction, Nt as extractToolSubject, O as proofDigest, On as captureClause, Or as CERTIFICATE_VERSION, Ot as ToolCallInput, P as evidenceCoverage, Pn as isInformationalMessage, Pr as StatefulAction, Pt as isDeterministicCheck, Q as GIT_COMMAND_MANIFEST_IDS, Qn as EvidenceBinding, Qt as HostCohort, R as CommandSurfaceManifest, Rn as BoundaryRequest, Rr as requestedTargetMatchesResolved, Rt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, S as ProofObligation, Sn as CheckpointResult, Sr as createProjection, St as canonicalArgvFromCommand, T as bindProofToProjection, Tn as CaptureScope, Tr as ACTION_MANIFEST_VERSION, Tt as parseShellCommand, U as HostProfileError, Un as isCurrentAcceptedBoundary, Ur as canonicalizePath, Ut as EXPECTED_HOST_PACKAGES, V as validateManifest, Vn as availableBoundaryQualifications, Vr as validateActionManifest, Vt as BASE_HOST_PACKAGES, W as hostLockContextFromComposedDump, Wn as qualifyBoundary, Wr as digestStrings, Wt as ExecutableIdentity, X as resolveInstalledHostLock, Xn as DeriveScope, Xt as HostCapabilityId, Y as resolveActiveProfileHostLock, Yn as DeriveResult, Yt as HostCapabilityEvaluation, Z as verifyComposedHostLockDump, Zn as DerivedEnvelope, Zt as HostCapabilityRequest, _ as ALPHA3_HOST_PACKAGES, _n as AuthorityKind, _r as TargetCaptureStatus, _t as verifiedLinearCommitReadback, a as classifyCompletionClaim, an as HostProfileKind, ar as GuardBoundary, at as GitEffectRunner, b as ProofKind, bn as UserInteractionKind, br as VerificationContract, bt as ParsedShell, c as isWholeTaskCompletionClaim, cn as bindLiveGoalCapability, cr as GuardIntegrity, ct as GitTargetIdentity, d as DEFAULT_RECOVERY_CHAR_BUDGET, dn as evaluateHostLock, dr as GuardItemStatus, dt as commitTreeSnapshotDigest, en as HostCohortSelectionReason, er as EvidenceParseStatus, et as GitCommandAccepted, f as RecoveryOptions, fn as evaluateToolSurfaceCapability, fr as GuardOperation, ft as createGitPrestateEnvelope, g as renderRecoveryPacket, gn as AuthorityBlockKind, gr as TargetCaptureReasonCode, gt as revalidateGitPrestate, h as recoveryDigest, hn as AuthorityBlock, hr as PersistenceAuthorization, ht as parseGitCommandManifest, i as TurnStoppingDecision, in as HostPlatform, ir as GoalRef, it as GitEffectExecution, j as validateProofManifest, jn as extractArtifactPaths, jr as STOP_PROTOCOL_VERSION, jt as evidenceFromPersistedToolResult, k as proofEvidenceConstraints, kn as captureItem, kr as SEMANTIC_ACTIONS, kt as ToolResultInput, l as latestAssistantText, ln as evaluateExternalWaitCapability, lr as GuardItem, lt as LinearCommitReadback, m as openItems, mn as currentContractDigest, mr as HostStatus, mt as gitCommandMatchesTarget, n as AssistantOutcomeObservation, nn as HostLockEvaluation, nr as ExpectedTransition, nt as GitCommandParseResult, o as decideTurnBoundary, on as HostToolSurface, or as GuardCheckpoint, ot as GitPrestateCheck, p as closingHint, pn as selectHostCohort, pr as GuardProjection, pt as executeRevalidatedGitEffect, q as packageRowsFromActiveGraph, qn as DeferAuthorization, qr as sanitizeUrl, qt as HOST_CAPABILITY_PACKAGE_GROUPS, r as CompletionDisposition, rn as HostLockStatus, rr as ExternalOperation, rt as GitCommandRejected, s as decideTurnStopping, sn as bindExecutableIdentity, sr as GuardEvidence, st as GitPrestateEnvelope, t as supersedeItem, tn as HostLockContext, tr as EvidenceRole, tt as GitCommandManifest, u as observeAssistantOutcome, un as evaluateHostCapability, ur as GuardItemKind, ut as commitIndexSnapshotDigest, v as PROOF_KINDS, vn as authorityCaptureCounts, vr as TargetTuple, vt as CanonicalArgv, w as SessionQuery, wn as certifyCheckpoint, wr as ACTION_MANIFEST, wt as parsePwshCommand, x as ProofManifest, xn as classifyUserInteraction, xr as WaitAuthorization, xt as ShellParseStatus, y as PROOF_PROTOCOL_VERSION, yn as segmentAuthorityBlocks, yr as TargetValue, yt as CanonicalCommandSurface, z as ManifestIssue, zn as GoalActivationState, zr as semanticActionFromCommand, zt as ALPHA2_HOST_PACKAGES } from "../index-AtjJOrK8.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityKind, BASE_HOST_PACKAGES, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CheckpointResult, ClassifiedClause, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, ExpectedTransition, ExternalOperation, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, LinearCommitReadback, ManifestIssue, OperationVerbEntry, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, ParsedShell, PersistenceAuthorization, ProofKind, ProofManifest, ProofObligation, ProofSurface, RecoveryOptions, RejectedBinding, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, SemanticAction, SessionQuery, ShellParseStatus, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetTuple, TargetValue, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UserInteractionKind, VerificationContract, WaitAuthorization, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+import { $ as verifyComposedHostLockDump, $n as DerivedEnvelope, $t as HostCapabilityRequest, A as proofDigest, An as captureClause, Ar as CERTIFICATE_VERSION, At as ToolCallInput, B as CommandSurfaceManifest, Bn as BoundaryRequest, Br as requestedTargetMatchesResolved, Bt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, C as ProofManifest, Cn as classifyUserInteraction, Cr as WaitAuthorization, Ct as ShellParseStatus, D as bindProofToProjection, Dn as CaptureScope, Dr as ACTION_MANIFEST_VERSION, Dt as parseShellCommand, E as SessionQuery, En as certifyCheckpoint, Er as ACTION_MANIFEST, Et as parsePwshCommand, F as bindingSatisfies, Fn as extractOperation, Fr as SemanticAction, Ft as extractToolSubject, G as HostProfileError, Gn as isCurrentAcceptedBoundary, Gr as canonicalizePath, Gt as EXPECTED_HOST_PACKAGES, H as OperationVerbEntry, Hn as GoalBoundaryAccess, Hr as semanticActionFromText, Ht as AuditedExecutable, I as evidenceCoverage, In as isInformationalMessage, Ir as StatefulAction, It as isDeterministicCheck, J as injectActiveProfileHostLock, Jn as BoundaryQualificationKind, Jr as sanitizeClauseText, Jt as GOAL_HOST_PACKAGES, K as hostLockContextFromComposedDump, Kn as qualifyBoundary, Kr as digestStrings, Kt as ExecutableIdentity, L as evidenceMatchesItem, Ln as segmentClauses, Lr as actionCompatible, Lt as withDurability, M as sessionQuery, Mn as classifyClause, Mr as STATEFUL_ACTIONS, Mt as ToolSubject, N as validateProofManifest, Nn as extractArtifactPaths, Nr as STOP_PROTOCOL_VERSION, Nt as evidenceFromPersistedToolResult, O as canonicalProjection, On as ClassifiedClause, Or as ActionManifest, Ot as goalCompletionDenial, P as EvidenceFacetCoverage, Pn as extractMethod, Pr as SUPPORTED_EVIDENCE_ADAPTERS, Pt as extractTextContent, Q as resolveInstalledHostLock, Qn as DeriveScope, Qt as HostCapabilityId, R as isVerifyingCapability, Rn as BoundaryEffectuation, Rr as isStatefulAction, Rt as PROTOCOL_V3_NOTICE, S as ProofKind, Sn as UserInteractionKind, Sr as VerificationContract, St as ParsedShell, T as ProofSurface, Tn as RejectedBinding, Tt as isRunExecutable, U as validateManifest, Un as availableBoundaryQualifications, Ur as validateActionManifest, Ut as BASE_HOST_PACKAGES, V as ManifestIssue, Vn as GoalActivationState, Vr as semanticActionFromCommand, Vt as ALPHA2_HOST_PACKAGES, W as ActiveProfileHostLock, Wn as effectuateBoundary, Wr as validateActionTarget, Wt as DEFAULT_HOST_LOCK, X as packageRowsFromPnpmLock, Xn as DeriveConfig, Xr as sha256, Xt as HOST_COHORTS, Y as packageRowsFromActiveGraph, Yn as DeferAuthorization, Yr as sanitizeUrl, Yt as HOST_CAPABILITY_PACKAGE_GROUPS, Z as resolveActiveProfileHostLock, Zn as DeriveResult, Zt as HostCapabilityEvaluation, _ as recoveryDigest, _n as AuthorityBlock, _r as PersistenceAuthorization, _t as parseGitCommandManifest, a as classifyCompletionClaim, an as HostLockStatus, ar as ExternalOperation, at as GitCommandRejected, b as PROOF_KINDS, bn as authorityCaptureCounts, br as TargetTuple, bt as CanonicalArgv, c as isWholeTaskCompletionClaim, cn as HostToolSurface, cr as GuardCheckpoint, ct as GitPrestateCheck, d as snapshotSessionEvents, dn as evaluateExternalWaitCapability, dr as GuardItem, dt as LinearCommitReadback, en as HostCohort, er as EvidenceBinding, et as GIT_COMMAND_MANIFEST_IDS, f as RC1_HOST_PACKAGES, fn as evaluateHostCapability, fr as GuardItemKind, ft as commitIndexSnapshotDigest, g as openItems, gn as currentContractDigest, gr as HostStatus, gt as gitCommandMatchesTarget, h as closingHint, hn as selectHostCohort, hr as GuardProjection, ht as executeRevalidatedGitEffect, i as TurnStoppingDecision, in as HostLockEvaluation, ir as ExpectedTransition, it as GitCommandParseResult, j as proofEvidenceConstraints, jn as captureItem, jr as SEMANTIC_ACTIONS, jt as ToolResultInput, k as createProofManifest, kn as ClauseSegment, kr as ActionSpec, kt as hasCurrentCertificate, l as latestAssistantText, ln as bindExecutableIdentity, lr as GuardEvidence, lt as GitPrestateEnvelope, m as RecoveryOptions, mn as evaluateToolSurfaceCapability, mr as GuardOperation, mt as createGitPrestateEnvelope, n as AssistantOutcomeObservation, nn as HostCohortSelectionReason, nr as EvidenceParseStatus, nt as GitCommandAccepted, o as decideTurnBoundary, on as HostPlatform, or as GoalRef, ot as GitEffectExecution, p as DEFAULT_RECOVERY_CHAR_BUDGET, pn as evaluateHostLock, pr as GuardItemStatus, pt as commitTreeSnapshotDigest, q as hostLockRowsFromComposedDump, qn as BoundaryDisposition, qr as normalizeClause, qt as ExecutableIdentityBinding, r as CompletionDisposition, rn as HostLockContext, rr as EvidenceRole, rt as GitCommandManifest, s as decideTurnStopping, sn as HostProfileKind, sr as GuardBoundary, st as GitEffectRunner, t as supersedeItem, tn as HostCohortSelection, tr as EvidenceOutcome, tt as GitAdapterAction, u as observeAssistantOutcome, un as bindLiveGoalCapability, ur as GuardIntegrity, ut as GitTargetIdentity, v as renderRecoveryPacket, vn as AuthorityBlockKind, vr as TargetCaptureReasonCode, vt as revalidateGitPrestate, w as ProofObligation, wn as CheckpointResult, wr as createProjection, wt as canonicalArgvFromCommand, x as PROOF_PROTOCOL_VERSION, xn as segmentAuthorityBlocks, xr as TargetValue, xt as CanonicalCommandSurface, y as ALPHA3_HOST_PACKAGES, yn as AuthorityKind, yr as TargetCaptureStatus, yt as verifiedLinearCommitReadback, z as COMMAND_SURFACE_MANIFEST, zn as BoundaryQualification, zr as requestedTargetAuthorizesMutation, zt as deriveProjection } from "../index-B5hdmCRn.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityKind, BASE_HOST_PACKAGES, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CheckpointResult, ClassifiedClause, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, ExpectedTransition, ExternalOperation, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, LinearCommitReadback, ManifestIssue, OperationVerbEntry, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, ParsedShell, PersistenceAuthorization, ProofKind, ProofManifest, ProofObligation, ProofSurface, RC1_HOST_PACKAGES, RecoveryOptions, RejectedBinding, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, SemanticAction, SessionQuery, ShellParseStatus, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetTuple, TargetValue, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UserInteractionKind, VerificationContract, WaitAuthorization, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, snapshotSessionEvents, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as GOAL_HOST_PACKAGES, $t as COMMAND_SURFACE_MANIFEST, A as decideTurnStopping, At as classifyClause, B as isDeterministicCheck, Bt as CERTIFICATE_VERSION, C as executeRevalidatedGitEffect, Ct as bindingSatisfies, D as verifiedLinearCommitReadback, Dt as currentContractDigest, E as revalidateGitPrestate, Et as isVerifyingCapability, F as deriveProjection, Ft as segmentClauses, G as parseShellCommand, Gt as actionCompatible, H as canonicalArgvFromCommand, Ht as STATEFUL_ACTIONS, I as supersedeItem, J as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Jt as requestedTargetMatchesResolved, K as goalCompletionDenial, Kt as isStatefulAction, L as evidenceFromPersistedToolResult, M as latestAssistantText, Mt as extractMethod, N as observeAssistantOutcome, Nt as extractOperation, O as classifyCompletionClaim, Ot as captureClause, P as PROTOCOL_V3_NOTICE, Pt as isInformationalMessage, Q as EXPECTED_HOST_PACKAGES, Qt as validateActionTarget, R as extractTextContent, Rt as ACTION_MANIFEST, S as createGitPrestateEnvelope, St as renderRecoveryPacket, T as parseGitCommandManifest, Tt as evidenceMatchesItem, U as isRunExecutable, Ut as STOP_PROTOCOL_VERSION, V as withDurability, Vt as SEMANTIC_ACTIONS, W as parsePwshCommand, Wt as SUPPORTED_EVIDENCE_ADAPTERS, X as BASE_HOST_PACKAGES, Xt as semanticActionFromText, Y as ALPHA2_HOST_PACKAGES, Yt as semanticActionFromCommand, Z as DEFAULT_HOST_LOCK, Zt as validateActionManifest, _ as resolveInstalledHostLock, _t as certifyCheckpoint, a as createProofManifest, an as sanitizeUrl, at as evaluateHostCapability, b as commitIndexSnapshotDigest, bt as openItems, c as sessionQuery, ct as selectHostCohort, d as hostLockContextFromComposedDump, dt as segmentAuthorityBlocks, en as validateManifest, et as HOST_CAPABILITY_PACKAGE_GROUPS, f as hostLockRowsFromComposedDump, ft as classifyUserInteraction, g as resolveActiveProfileHostLock, gt as qualifyBoundary, h as packageRowsFromPnpmLock, ht as isCurrentAcceptedBoundary, i as canonicalProjection, in as sanitizeClauseText, it as evaluateExternalWaitCapability, j as isWholeTaskCompletionClaim, jt as extractArtifactPaths, k as decideTurnBoundary, kt as captureItem, l as validateProofManifest, lt as ALPHA3_HOST_PACKAGES, m as packageRowsFromActiveGraph, mt as effectuateBoundary, n as PROOF_PROTOCOL_VERSION, nn as digestStrings, nt as bindExecutableIdentity, o as proofDigest, on as sha256, ot as evaluateHostLock, p as injectActiveProfileHostLock, pt as availableBoundaryQualifications, q as hasCurrentCertificate, qt as requestedTargetAuthorizesMutation, r as bindProofToProjection, rn as normalizeClause, rt as bindLiveGoalCapability, s as proofEvidenceConstraints, sn as createProjection, st as evaluateToolSurfaceCapability, t as PROOF_KINDS, tn as canonicalizePath, tt as HOST_COHORTS, u as HostProfileError, ut as authorityCaptureCounts, v as verifyComposedHostLockDump, vt as DEFAULT_RECOVERY_CHAR_BUDGET, w as gitCommandMatchesTarget, wt as evidenceCoverage, x as commitTreeSnapshotDigest, xt as recoveryDigest, y as GIT_COMMAND_MANIFEST_IDS, yt as closingHint, z as extractToolSubject, zt as ACTION_MANIFEST_VERSION } from "../domain-CHTQFIT8.js";
+import { $ as EXPECTED_HOST_PACKAGES, $t as validateActionManifest, A as decideTurnBoundary, At as captureClause, B as extractToolSubject, Bt as ACTION_MANIFEST, C as createGitPrestateEnvelope, Ct as recoveryDigest, D as revalidateGitPrestate, Dt as evidenceMatchesItem, E as parseGitCommandManifest, Et as evidenceCoverage, F as PROTOCOL_V3_NOTICE, Ft as extractOperation, G as parsePwshCommand, Gt as STOP_PROTOCOL_VERSION, H as withDurability, Ht as CERTIFICATE_VERSION, I as deriveProjection, It as isInformationalMessage, J as hasCurrentCertificate, Jt as isStatefulAction, K as parseShellCommand, Kt as SUPPORTED_EVIDENCE_ADAPTERS, L as supersedeItem, Lt as segmentClauses, M as isWholeTaskCompletionClaim, Mt as classifyClause, N as latestAssistantText, Nt as extractArtifactPaths, O as verifiedLinearCommitReadback, Ot as isVerifyingCapability, P as observeAssistantOutcome, Pt as extractMethod, Q as DEFAULT_HOST_LOCK, Qt as semanticActionFromText, R as evidenceFromPersistedToolResult, S as commitTreeSnapshotDigest, St as openItems, T as gitCommandMatchesTarget, Tt as bindingSatisfies, U as canonicalArgvFromCommand, Ut as SEMANTIC_ACTIONS, V as isDeterministicCheck, Vt as ACTION_MANIFEST_VERSION, W as isRunExecutable, Wt as STATEFUL_ACTIONS, X as ALPHA2_HOST_PACKAGES, Xt as requestedTargetMatchesResolved, Y as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Yt as requestedTargetAuthorizesMutation, Z as BASE_HOST_PACKAGES, Zt as semanticActionFromCommand, _ as resolveInstalledHostLock, _t as isCurrentAcceptedBoundary, a as createProofManifest, an as normalizeClause, at as evaluateExternalWaitCapability, b as GIT_COMMAND_MANIFEST_IDS, bt as DEFAULT_RECOVERY_CHAR_BUDGET, c as sessionQuery, cn as sha256, ct as evaluateToolSurfaceCapability, d as hostLockContextFromComposedDump, dt as ALPHA3_HOST_PACKAGES, en as validateActionTarget, et as GOAL_HOST_PACKAGES, f as hostLockRowsFromComposedDump, ft as authorityCaptureCounts, g as resolveActiveProfileHostLock, gt as effectuateBoundary, h as packageRowsFromPnpmLock, ht as availableBoundaryQualifications, i as canonicalProjection, in as digestStrings, it as bindLiveGoalCapability, j as decideTurnStopping, jt as captureItem, k as classifyCompletionClaim, kt as currentContractDigest, l as validateProofManifest, ln as createProjection, lt as selectHostCohort, m as packageRowsFromActiveGraph, mt as classifyUserInteraction, n as PROOF_PROTOCOL_VERSION, nn as validateManifest, nt as HOST_COHORTS, o as proofDigest, on as sanitizeClauseText, ot as evaluateHostCapability, p as injectActiveProfileHostLock, pt as segmentAuthorityBlocks, q as goalCompletionDenial, qt as actionCompatible, r as bindProofToProjection, rn as canonicalizePath, rt as bindExecutableIdentity, s as proofEvidenceConstraints, sn as sanitizeUrl, st as evaluateHostLock, t as PROOF_KINDS, tn as COMMAND_SURFACE_MANIFEST, tt as HOST_CAPABILITY_PACKAGE_GROUPS, u as HostProfileError, ut as RC1_HOST_PACKAGES, v as verifyComposedHostLockDump, vt as qualifyBoundary, w as executeRevalidatedGitEffect, wt as renderRecoveryPacket, x as commitIndexSnapshotDigest, xt as closingHint, y as snapshotSessionEvents, yt as certifyCheckpoint, z as extractTextContent } from "../domain-B7TsszvX.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, EXPECTED_HOST_PACKAGES, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, EXPECTED_HOST_PACKAGES, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, snapshotSessionEvents, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };

package/dist/{domain-CHTQFIT8.js → domain-B7TsszvX.js}

@@ -3109,14 +3109,194 @@ const ALPHA3_HOST_PACKAGES = [
 	integrity
 }));
 
+//#endregion
+//#region src/domain/rc1-host.ts
+/** Exact 34-row rc.1 runtime/web graph from the 2026-09-03 native macOS audit. */
+const RC1_HOST_PACKAGES = [
+	[
+		"@deepseek-ai/cordis",
+		"4.0.2",
+		"sha512-asOnXP1TzFSFQlHb1iegDZp0z/8WD1c7YNrwJR/Tx2bzNuMXfcekE/I67Iv6SQXeLB4csxqCngzQKANP7gdw0g=="
+	],
+	[
+		"@deepseek-ai/dsh-agent",
+		"0.1.2-rc.1",
+		"sha512-lfaqN34vUCWvbn1kJVHrhfJ6Dvt1HDHCm33ZCpmKkl07/5q6FxWqVv6rOdVX5QnM/9xz/uYiN0nQwUtBg4+Skg=="
+	],
+	[
+		"@deepseek-ai/dsh-commands",
+		"0.1.2-rc.1",
+		"sha512-uBh4JTX7pOkFhmbWjXjVLnOQOawyccC7+DazbHrLRN6/wy4OgTRH+DaW0+ibLq+XRAO19OvBTtuoh3x/KkJx1Q=="
+	],
+	[
+		"@deepseek-ai/dsh-goal",
+		"0.1.2-rc.1",
+		"sha512-djzY1oNZV5RwnOFXmDeWFbyswInV9RVWAD0qryxMznQtEDF31PUJ8BQfqs9tVrTV36V3a0neYrZP0DDvRP8ZCA=="
+	],
+	[
+		"@deepseek-ai/dsh-llm",
+		"0.1.2-rc.1",
+		"sha512-7VYsha5AXsVLnsAwYJffWXz9bwUbElw8i5N8tlTSdai9Bupk3sMbsotzPf8ZbsuGAxQYErahMwQwgGEu4qZO6g=="
+	],
+	[
+		"@deepseek-ai/dsh-session",
+		"0.1.2-rc.1",
+		"sha512-jRGNPTbQcvIx1F2MVmmkoiHLgpC3Btqo1wkl/3JDLlOWRVWKOuaC+5fQiMrFPOYfno6YiX/c2UvmA0td8qB92w=="
+	],
+	[
+		"@deepseek-ai/dsh-tools",
+		"0.1.2-rc.1",
+		"sha512-W9kUio00s7WbM8kEwniyd4hfb3CeUxVczsjXbOcKtakfiTywNLeyRWkpx2fvwRAH2rBfg3qCgczVfS0DOw1csg=="
+	],
+	[
+		"@deepseek-ai/dsh-tool-goal",
+		"0.1.2-rc.1",
+		"sha512-ooHKN6Eqy3owNS/oCDO7mR+UalEE4AxJMXou29waahIdSQsFAlk4pPApvhrwg1lpchF5CKwBPOtsVmjq2HfBKQ=="
+	],
+	[
+		"@deepseek-ai/dsh-agent-loop",
+		"0.1.2-rc.1",
+		"sha512-4h16Gn/5oXLTFeorehdlKe5xmDKscR/eRsUu3cs6clKgaTrn6YvnWNB0XkYEg+AXiXbsyfl5MW5Bs4576t7vZw=="
+	],
+	[
+		"@deepseek-ai/dsh-tool-bash",
+		"0.1.2-rc.1",
+		"sha512-xKc4oXVDBwM/PaicpjGdWEaJ1N14B7KPmOzdpQ7ynE4gKUnvGU/eTg18EHamdyDOidh5ox0fNUnxk0rQjVo2+Q=="
+	],
+	[
+		"@deepseek-ai/dsh-tool-pwsh",
+		"0.1.2-rc.1",
+		"sha512-LaImOCdizIGkQnxzzkoaqzRWGZLsuDuqqF2adgJ3zeG0nDwan4Sz+1wYz4YSp0Gg6mJ79CYacsbYmGhYYyKY/g=="
+	],
+	[
+		"@deepseek-ai/dsh-shell",
+		"0.1.2-rc.1",
+		"sha512-uFrSY0nNKzh5orGl2B0B4RfK7wTdIlwhPQc7aLA44jyjioLlqhF7PUek/NWtye2scwp3YHOw158XeOQUD8qTFg=="
+	],
+	[
+		"@deepseek-ai/dsh-subprocess-local",
+		"0.1.2-rc.1",
+		"sha512-Spc/IXWvjEteGysifGr6JvCokcH8T88z0mdxIGcu9SFdgDyY8HKR+h5yq73+rbo4RYzT7+TBE43TIZy5LfmzgQ=="
+	],
+	[
+		"@deepseek-ai/dsh-bash-sandbox",
+		"0.1.2-rc.1",
+		"sha512-dF9PfBWus80Juj3VjUmndbGw1/6cT1BY7BLFuXUi7SDMV1fA4iwA2c7HuvezYFGvpE/8QRZ+c5ZiRfxbWGYktw=="
+	],
+	[
+		"@deepseek-ai/dsh-pwsh-sandbox",
+		"0.1.2-rc.1",
+		"sha512-QjJzrM/tJDkgvtVzYz2bmCxBzdSUo/YwI/rPBJeTwLbWBuehyhX6BueCwU6Ja1Bsdm9crz2D7rVc/DU/xrFttw=="
+	],
+	[
+		"@deepseek-ai/dsh-shell-env",
+		"0.1.2-rc.1",
+		"sha512-o1VqxyHp1OrMB8aHnzYAPwuU4giUErCxBg0yr035r6f3Le36viS0sUHsnjcAsMdbaQJf/XvzbaokYDVrdVHE4A=="
+	],
+	[
+		"@deepseek-ai/dsh",
+		"0.1.2-rc.1",
+		"sha512-RPq48TzxvwpdT9/7W1tbhZDBMmeK+bxDrX9cqQC27Wx/LqtgJF8PSa3b3xriU8oxtvhwYmk21w2cej3uMQrnVA=="
+	],
+	[
+		"@deepseek-ai/dsh-host-plugin-inventory",
+		"0.1.2-rc.1",
+		"sha512-MyLA5XncFdfk9btv29FZSg+ojFOOsHEiPkGWAQiRw+EG/2HlVUEm/9KqPxh2jxB5eFge9GahTg2e7x3Veziadw=="
+	],
+	[
+		"@deepseek-ai/dsh-host-webserver",
+		"0.1.2-rc.1",
+		"sha512-QVcaf4qnIa1t215Y8TRiRhqkEz4Lu5/F+KqvWT+4sHOiyWmZr8g1JndqlwP6MBnMQEPmp0I/EKYJ7PWMV32gkA=="
+	],
+	[
+		"@deepseek-ai/dsh-web-app",
+		"0.1.2-rc.1",
+		"sha512-QGh+XWRgrsVktKD3YHw+cY/knwBESq+2TtyOGNc+V7GU3LG9qL6EPB0M8pIDjxF1jLls+M71LIVbevuFx3oZ6Q=="
+	],
+	[
+		"@deepseek-ai/dsh-jobs",
+		"0.1.2-rc.1",
+		"sha512-VuNPXosjgRbEg0tp+GXsdAqkicwSk5Ynl2AezUQheJgpmw5cvWy3rLEg79B686xGc72tIA6pCW6eBbZGnKOmIg=="
+	],
+	[
+		"@deepseek-ai/dsh-jobs-local",
+		"0.1.2-rc.1",
+		"sha512-bfNV6IJRG7vPWg+Rp3siRCA0BVK8rB1aqn0BG2nPKzCIA2coKqeJ8uPbEm+GuyW/naMR4uCOrrCVLyrwBuMwzg=="
+	],
+	[
+		"@deepseek-ai/dsh-tool-jobs",
+		"0.1.2-rc.1",
+		"sha512-ya7E6zToAdJ+GvNeZFPx8jNx0CfI52tlp0NCGzXHeB0S74haGWCV0iFe1nyoDJg7SDiN1xc1d2nV9klOqWtd5g=="
+	],
+	[
+		"@deepseek-ai/dsh-tool-fs",
+		"0.1.2-rc.1",
+		"sha512-9a1lcPGD4Z3p7OLTMkkCdwN0w7Gl96Jlypq6qopUA0WMkKai83VfeLZvramPnTJo6ezpuPXcLFWGm/2UDSlbcA=="
+	],
+	[
+		"@deepseek-ai/dsh-fs",
+		"0.1.2-rc.1",
+		"sha512-BSIB2j8WvATQ1mf7wUIpHPftDwbzz246qp6aUpLGSzBWGmLBdX3O1oDhyNV1YhgPmDQlwovac2odcAb62tuDdw=="
+	],
+	[
+		"@deepseek-ai/dsh-fs-local",
+		"0.1.2-rc.1",
+		"sha512-tFHHKtD11tIk3FpkWF0vBKdX05zKbwqXQW9LhreA5hErCKEsulUsQLamf+kF1D8fuKqa8Yb+yWQIfYS93cy39w=="
+	],
+	[
+		"@deepseek-ai/dsh-fs-sandbox",
+		"0.1.2-rc.1",
+		"sha512-nnZnsOYLWrN2AnoB0qvQBLhh2VdU4A39AqOgWwsxnT3JrScGpvBcBMCt4fpLP9l5VjOY1qhIbLf6xd5p93C/6Q=="
+	],
+	[
+		"@deepseek-ai/dsh-fs-observation-policy",
+		"0.1.2-rc.1",
+		"sha512-Uw3ErcPwQZUvXylLSf+CDjzfAza5ZVNOMkG4hIJjvgG4WBg3tqoCOY2OQk4O1DGTie4EzL4mHpAe5auwoV4JTw=="
+	],
+	[
+		"@deepseek-ai/dsh-sandbox",
+		"0.1.2-rc.1",
+		"sha512-nTO350NlVo9cvKzbeILcPIRIk9ijidrv29snRjTOx7kP5aO/BI2b4KxsRCYoXg8WGAMbIkGbsmZKUD4qz7hyXQ=="
+	],
+	[
+		"@deepseek-ai/dsh-sandbox-policy",
+		"0.1.2-rc.1",
+		"sha512-nLARL84X6K4DCUJsqRWINg3+1EVxsw70hbP+Yl92W/PsquQVs/UJQc55gnhYGmIMf6eJ0vQv39fziNSnAxdx5A=="
+	],
+	[
+		"@deepseek-ai/dsh-user-approval",
+		"0.1.2-rc.1",
+		"sha512-oYkLE4a/TwqVNi299pUf/QP1Yku6KScdUCTUyYbjaRBcN+/pXPpHikl2aoE2thH9D0uT/Kj6T2kz+wDDcFd9Xg=="
+	],
+	[
+		"@deepseek-ai/dsh-attachment",
+		"0.1.2-rc.1",
+		"sha512-QISKUjEITusLvAkqPLRn70xDUt+GjjY41pISjtPKYcZ4EGmayzhgZ3VJNYEcC+rbaF44hs2o/0VhOwHA7lyxjw=="
+	],
+	[
+		"@deepseek-ai/dsh-system-prompt",
+		"0.1.2-rc.1",
+		"sha512-7W93PZKIk4CHvjZGgLIxrrEKpk+6t8nQXje1vKR5vG73dfXH0t1MJ5WWH/fngadYc7c6KzM84ihQ66tJqJqyNQ=="
+	],
+	[
+		"dshmarket",
+		"1.41.0",
+		"sha512-uGhNo85g7i/+kVuFybPMjCOD1nn2ssATDSktm9Zd851qgRv39Gz8l+smpDtpBcfhlobAD3CG6l9caYkLHu4BFw=="
+	]
+].map(([name, version, integrity]) => ({
+	name,
+	version,
+	integrity
+}));
+
 //#endregion
 //#region src/domain/host-lock.ts
 /**
-* Capability expectations shared by every audited host cohort. The rc.2 ->
-* alpha.2 source audit found no Guard-consumed contract change (session event
-* vocabulary, flush contract, Goal disarm, `update_goal` gating, tool
-* definition, renderer terminal markers), so the rows are identical; a future
-* cohort that changes any of them must declare its own rows instead.
+* Capability expectations shared by every audited host cohort. The rc.1 audit
+* found one host API change: Session event reads moved from `events` to
+* `snapshotEvents()`. Guard adapts that API locally while the event vocabulary,
+* flush contract, Goal disarm, `update_goal` gating, tool definition, and
+* renderer terminal markers remain compatible.
 */
 const AUDITED_CAPABILITY_ROWS = [
 	{
@@ -3388,7 +3568,12 @@ const ALPHA2_DSHMARKET_139_HOST_PACKAGES = ALPHA2_HOST_PACKAGES.map((row) => row
 * exact package graph extracted from native macOS and Windows DSH
 * `0.1.2-alpha.2` / dshmarket `1.38.1` runtimes. The alpha.2+dshmarket-1.39.0
 * cohort carries the exact upgraded-Windows graph. The alpha.3 cohort carries
-* the graph audited in the 2026-09-01 annex. Graphs that mix cohorts, lack
+* the graph audited in the 2026-09-01 annex. The rc.1 cohort carries the exact
+* runtime plus dshmarket 1.41.0 graph audited natively on macOS, then confirmed
+* on Windows: the 2026-09-04 native Windows rc.1 runtime graph (dshmarket
+* 1.41.0) was extracted from the runtime lockfile and verified row-for-row
+* identical (name, version, registry integrity) to the posix extraction before
+* this cohort was widened. Graphs that mix cohorts, lack
 * rows, duplicate rows, or use identities outside every registered cohort
 * fail closed.
 */
@@ -3567,7 +3752,8 @@ const HOST_COHORTS = [
 	]),
 	defineCohort("dsh-0.1.2-alpha.2", ["0.1.2-alpha.2"], ["posix", "windows"], ALPHA2_HOST_PACKAGES),
 	defineCohort("dsh-0.1.2-alpha.2-dshmarket-1.39.0", ["0.1.2-alpha.2"], ["posix", "windows"], ALPHA2_DSHMARKET_139_HOST_PACKAGES),
-	defineCohort("dsh-0.1.2-alpha.3", ["0.1.2-alpha.3"], ["posix", "windows"], ALPHA3_HOST_PACKAGES)
+	defineCohort("dsh-0.1.2-alpha.3", ["0.1.2-alpha.3"], ["posix", "windows"], ALPHA3_HOST_PACKAGES),
+	defineCohort("dsh-0.1.2-rc.1", ["0.1.2-rc.1"], ["posix", "windows"], RC1_HOST_PACKAGES)
 ];
 /**
 * rc.2 audited package identities (first registry cohort). The audited
@@ -5970,6 +6156,24 @@ async function executeRevalidatedGitEffect(resolved, manifest, target, currentSt
 	return { status: "executed" };
 }
 
+//#endregion
+//#region src/domain/session-events.ts
+/**
+* Read a stable snapshot from both legacy DSH Sessions and the rc.1 Session
+* API. rc.1 replaced the public `events` getter with `snapshotEvents()`; the
+* structural adapter keeps older audited cohorts working without widening the
+* accepted event contract.
+*/
+function snapshotSessionEvents(session) {
+	if (!session || typeof session !== "object") return [];
+	const source = session;
+	if (typeof source.snapshotEvents === "function") {
+		const events = source.snapshotEvents.call(session);
+		return Array.isArray(events) ? events : [];
+	}
+	return Array.isArray(source.events) ? source.events : [];
+}
+
 //#endregion
 //#region src/domain/host-resolver.ts
 /** Names audited in any registered cohort; rows outside the union are unknown. */
@@ -6549,4 +6753,4 @@ function proofEvidenceConstraints(evidence, obligation) {
 }
 
 //#endregion
-export { GOAL_HOST_PACKAGES as $, COMMAND_SURFACE_MANIFEST as $t, decideTurnStopping as A, classifyClause as At, isDeterministicCheck as B, CERTIFICATE_VERSION as Bt, executeRevalidatedGitEffect as C, bindingSatisfies as Ct, verifiedLinearCommitReadback as D, currentContractDigest as Dt, revalidateGitPrestate as E, isVerifyingCapability as Et, deriveProjection as F, segmentClauses as Ft, parseShellCommand as G, actionCompatible as Gt, canonicalArgvFromCommand as H, STATEFUL_ACTIONS as Ht, supersedeItem as I, canonicalRegistryBase as It, ALPHA2_DSHMARKET_139_HOST_PACKAGES as J, requestedTargetMatchesResolved as Jt, goalCompletionDenial as K, isStatefulAction as Kt, evidenceFromPersistedToolResult as L, npmEscapedPackageName as Lt, latestAssistantText as M, extractMethod as Mt, observeAssistantOutcome as N, extractOperation as Nt, classifyCompletionClaim as O, captureClause as Ot, PROTOCOL_V3_NOTICE as P, isInformationalMessage as Pt, EXPECTED_HOST_PACKAGES as Q, validateActionTarget as Qt, extractTextContent as R, ACTION_MANIFEST as Rt, createGitPrestateEnvelope as S, renderRecoveryPacket as St, parseGitCommandManifest as T, evidenceMatchesItem as Tt, isRunExecutable as U, STOP_PROTOCOL_VERSION as Ut, withDurability as V, SEMANTIC_ACTIONS as Vt, parsePwshCommand as W, SUPPORTED_EVIDENCE_ADAPTERS as Wt, BASE_HOST_PACKAGES as X, semanticActionFromText as Xt, ALPHA2_HOST_PACKAGES as Y, semanticActionFromCommand as Yt, DEFAULT_HOST_LOCK as Z, validateActionManifest as Zt, resolveInstalledHostLock as _, certifyCheckpoint as _t, createProofManifest as a, sanitizeUrl as an, evaluateHostCapability as at, commitIndexSnapshotDigest as b, openItems$1 as bt, sessionQuery as c, selectHostCohort as ct, hostLockContextFromComposedDump as d, segmentAuthorityBlocks as dt, validateManifest as en, HOST_CAPABILITY_PACKAGE_GROUPS as et, hostLockRowsFromComposedDump as f, classifyUserInteraction as ft, resolveActiveProfileHostLock as g, qualifyBoundary as gt, packageRowsFromPnpmLock as h, isCurrentAcceptedBoundary as ht, canonicalProjection as i, sanitizeClauseText as in, evaluateExternalWaitCapability as it, isWholeTaskCompletionClaim as j, extractArtifactPaths as jt, decideTurnBoundary as k, captureItem as kt, validateProofManifest as l, ALPHA3_HOST_PACKAGES as lt, packageRowsFromActiveGraph as m, effectuateBoundary as mt, PROOF_PROTOCOL_VERSION as n, digestStrings as nn, bindExecutableIdentity as nt, proofDigest as o, sha256 as on, evaluateHostLock as ot, injectActiveProfileHostLock as p, availableBoundaryQualifications as pt, hasCurrentCertificate as q, requestedTargetAuthorizesMutation as qt, bindProofToProjection as r, normalizeClause as rn, bindLiveGoalCapability as rt, proofEvidenceConstraints as s, createProjection as sn, evaluateToolSurfaceCapability as st, PROOF_KINDS as t, canonicalizePath as tn, HOST_COHORTS as tt, HostProfileError as u, authorityCaptureCounts as ut, verifyComposedHostLockDump as v, DEFAULT_RECOVERY_CHAR_BUDGET as vt, gitCommandMatchesTarget as w, evidenceCoverage as wt, commitTreeSnapshotDigest as x, recoveryDigest as xt, GIT_COMMAND_MANIFEST_IDS as y, closingHint as yt, extractToolSubject as z, ACTION_MANIFEST_VERSION as zt };
+export { EXPECTED_HOST_PACKAGES as $, validateActionManifest as $t, decideTurnBoundary as A, captureClause as At, extractToolSubject as B, ACTION_MANIFEST as Bt, createGitPrestateEnvelope as C, recoveryDigest as Ct, revalidateGitPrestate as D, evidenceMatchesItem as Dt, parseGitCommandManifest as E, evidenceCoverage as Et, PROTOCOL_V3_NOTICE as F, extractOperation as Ft, parsePwshCommand as G, STOP_PROTOCOL_VERSION as Gt, withDurability as H, CERTIFICATE_VERSION as Ht, deriveProjection as I, isInformationalMessage as It, hasCurrentCertificate as J, isStatefulAction as Jt, parseShellCommand as K, SUPPORTED_EVIDENCE_ADAPTERS as Kt, supersedeItem as L, segmentClauses as Lt, isWholeTaskCompletionClaim as M, classifyClause as Mt, latestAssistantText as N, extractArtifactPaths as Nt, verifiedLinearCommitReadback as O, isVerifyingCapability as Ot, observeAssistantOutcome as P, extractMethod as Pt, DEFAULT_HOST_LOCK as Q, semanticActionFromText as Qt, evidenceFromPersistedToolResult as R, canonicalRegistryBase as Rt, commitTreeSnapshotDigest as S, openItems$1 as St, gitCommandMatchesTarget as T, bindingSatisfies as Tt, canonicalArgvFromCommand as U, SEMANTIC_ACTIONS as Ut, isDeterministicCheck as V, ACTION_MANIFEST_VERSION as Vt, isRunExecutable as W, STATEFUL_ACTIONS as Wt, ALPHA2_HOST_PACKAGES as X, requestedTargetMatchesResolved as Xt, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Y, requestedTargetAuthorizesMutation as Yt, BASE_HOST_PACKAGES as Z, semanticActionFromCommand as Zt, resolveInstalledHostLock as _, isCurrentAcceptedBoundary as _t, createProofManifest as a, normalizeClause as an, evaluateExternalWaitCapability as at, GIT_COMMAND_MANIFEST_IDS as b, DEFAULT_RECOVERY_CHAR_BUDGET as bt, sessionQuery as c, sha256 as cn, evaluateToolSurfaceCapability as ct, hostLockContextFromComposedDump as d, ALPHA3_HOST_PACKAGES as dt, validateActionTarget as en, GOAL_HOST_PACKAGES as et, hostLockRowsFromComposedDump as f, authorityCaptureCounts as ft, resolveActiveProfileHostLock as g, effectuateBoundary as gt, packageRowsFromPnpmLock as h, availableBoundaryQualifications as ht, canonicalProjection as i, digestStrings as in, bindLiveGoalCapability as it, decideTurnStopping as j, captureItem as jt, classifyCompletionClaim as k, currentContractDigest as kt, validateProofManifest as l, createProjection as ln, selectHostCohort as lt, packageRowsFromActiveGraph as m, classifyUserInteraction as mt, PROOF_PROTOCOL_VERSION as n, validateManifest as nn, HOST_COHORTS as nt, proofDigest as o, sanitizeClauseText as on, evaluateHostCapability as ot, injectActiveProfileHostLock as p, segmentAuthorityBlocks as pt, goalCompletionDenial as q, actionCompatible as qt, bindProofToProjection as r, canonicalizePath as rn, bindExecutableIdentity as rt, proofEvidenceConstraints as s, sanitizeUrl as sn, evaluateHostLock as st, PROOF_KINDS as t, COMMAND_SURFACE_MANIFEST as tn, HOST_CAPABILITY_PACKAGE_GROUPS as tt, HostProfileError as u, RC1_HOST_PACKAGES as ut, verifyComposedHostLockDump as v, qualifyBoundary as vt, executeRevalidatedGitEffect as w, renderRecoveryPacket as wt, commitIndexSnapshotDigest as x, closingHint as xt, snapshotSessionEvents as y, certifyCheckpoint as yt, extractTextContent as z, npmEscapedPackageName as zt };