dsh-completion-guard 0.4.0 → 0.4.2

package/dist/{index-AtjJOrK8.d.ts → index-DNF0OTi-.d.ts}

@@ -53,6 +53,33 @@ declare function requestedTargetMatchesResolved(action: StatefulAction, requeste
 declare function requestedTargetAuthorizesMutation(action: StatefulAction, requested: TargetTuple | undefined, resolved: TargetTuple | undefined): boolean;
 declare function validateActionManifest(): string[];
 //#endregion
+//#region src/domain/rebind.d.ts
+interface RebindProposal {
+  id: string;
+  digest: string;
+  session: string;
+  epoch: number;
+  contractRevision: number;
+  itemId: string;
+  itemRevision: number;
+  sourceMessageId: string;
+  originalText: string;
+  clauses: string[];
+  clarificationItemIds: string[];
+  candidates: Array<{
+    sourceText: string;
+    action: GuardItem["semanticAction"];
+    requestedTarget: GuardItem["requestedTarget"];
+    acceptance: GuardItem["verification"];
+    sourceMessageId: string;
+    rootItemId: string | null;
+    rootRevision: number | null;
+  }>;
+  status: "pending" | "confirmed" | "withdrawn" | "stale";
+  confirmationEvent?: string;
+  replacementIds?: string[];
+}
+//#endregion
 //#region src/domain/digest.d.ts
 type TypedObject = {
   k: "b" | "i" | "s" | "e" | "x";
@@ -133,6 +160,12 @@ interface GuardItem {
   textSha256: string;
   status: GuardItemStatus;
   supersededBy?: string;
+  supersededByItems?: string[];
+  reboundFrom?: {
+    itemId: string;
+    proposalId: string;
+    confirmationEvent: string;
+  };
   verification: VerificationContract;
   semanticAction?: SemanticAction;
   requestedTarget?: TargetTuple;
@@ -244,6 +277,7 @@ interface GuardProjection {
   enabled: boolean;
   epoch: number;
   contractRevision: number;
+  rebindProposals: Map<string, RebindProposal>;
   items: Map<string, GuardItem>;
   evidence: Map<string, GuardEvidence>;
   checkpoints: GuardCheckpoint[];
@@ -263,6 +297,13 @@ interface GuardProjection {
   lastObservedSourceSeq: number;
   lastGuardEventSeq: number;
   lastRecoveryDigest?: string;
+  lastCheckpointRejections?: Array<{
+    itemId: string;
+    reason: string;
+    reasonCode?: string;
+    offendingEvidenceIds?: string[];
+  }>;
+  lastCheckpointRejectionRevision?: number;
   continuationAttempts: Map<number, number>;
   /** Process-local one-shot fallback counters keyed by epoch + contract revision. */
   persistenceCorrectionAttempts: Map<string, number>;
@@ -383,12 +424,12 @@ interface ClauseSegment {
   body: string;
   paths: string[];
 }
-declare function segmentClauses(text: string): ClauseSegment[];
+declare function segmentClauses(text: string, captureVersion?: "v041" | "v042"): ClauseSegment[];
 /**
 * Build a GuardItem from an already-classified clause body and a resolved
 * verification subject/surface.
 */
-declare function captureItem(kind: GuardItemKind, body: string, sourceMessageId: string, id: string, revision: number, subject: string, surface: "artifact" | "scope", method?: string, operation?: GuardOperation): GuardItem;
+declare function captureItem(kind: GuardItemKind, body: string, sourceMessageId: string, id: string, revision: number, subject: string, surface: "artifact" | "scope", method?: string, operation?: GuardOperation, captureVersion?: "v041" | "v042"): GuardItem;
 /**
 * Capture one contract clause. Every captured item receives a concrete
 * verification contract: a named artifact path (artifact surface) or the
@@ -492,7 +533,12 @@ declare const ALPHA2_DSHMARKET_139_HOST_PACKAGES: PackageRow[];
 * exact package graph extracted from native macOS and Windows DSH
 * `0.1.2-alpha.2` / dshmarket `1.38.1` runtimes. The alpha.2+dshmarket-1.39.0
 * cohort carries the exact upgraded-Windows graph. The alpha.3 cohort carries
-* the graph audited in the 2026-09-01 annex. Graphs that mix cohorts, lack
+* the graph audited in the 2026-09-01 annex. The rc.1 cohort carries the exact
+* runtime plus dshmarket 1.41.0 graph audited natively on macOS, then confirmed
+* on Windows: the 2026-09-04 native Windows rc.1 runtime graph (dshmarket
+* 1.41.0) was extracted from the runtime lockfile and verified row-for-row
+* identical (name, version, registry integrity) to the posix extraction before
+* this cohort was widened. Graphs that mix cohorts, lack
 * rows, duplicate rows, or use identities outside every registered cohort
 * fail closed.
 */
@@ -609,6 +655,7 @@ declare function bindExecutableIdentity(resolution: ExecutableIdentity | undefin
 declare const DEFAULT_HOST_LOCK: HostLockEvaluation;
 //#endregion
 //#region src/domain/derive.d.ts
+declare const CAPTURE_V042_NOTICE = "Context Guard capture boundary: v0.4.2";
 declare const PROTOCOL_V3_NOTICE = "Context Guard protocol boundary: v3.0.0";
 /**
 * Pure, deterministic re-derivation of the guard projection from the DSH
@@ -1027,6 +1074,7 @@ interface RecoveryOptions {
   charBudget?: number;
 }
 declare const DEFAULT_RECOVERY_CHAR_BUDGET = 4e3;
+declare const MIN_RECOVERY_CHAR_BUDGET = 512;
 /**
 * An actionable one-line hint for how an open item's verification contract can
 * be closed. It never weakens the contract; it only names the missing facet so
@@ -1045,6 +1093,19 @@ declare function openItems(projection: GuardProjection): GuardItem[];
 declare function recoveryDigest(packet: string, projection: GuardProjection): string;
 declare function renderRecoveryPacket(projection: GuardProjection, options?: RecoveryOptions): string;
 //#endregion
+//#region src/domain/rc1-host.d.ts
+/** Exact 34-row rc.1 runtime/web graph from the 2026-09-03 native macOS audit. */
+declare const RC1_HOST_PACKAGES: PackageRow[];
+//#endregion
+//#region src/domain/session-events.d.ts
+/**
+* Read a stable snapshot from both legacy DSH Sessions and the rc.1 Session
+* API. rc.1 replaced the public `events` getter with `snapshotEvents()`; the
+* structural adapter keeps older audited cohorts working without widening the
+* accepted event contract.
+*/
+declare function snapshotSessionEvents(session: unknown): readonly unknown[];
+//#endregion
 //#region src/domain/stop-policy.d.ts
 type CompletionDisposition = "complete" | "user_wait" | "external_wait" | "report";
 declare function isWholeTaskCompletionClaim(text: string): boolean;
@@ -1076,4 +1137,4 @@ declare function latestAssistantText(events: readonly {
 //#region src/domain/supersession.d.ts
 declare function supersedeItem(items: Map<string, GuardItem>, oldId: string, replacement: GuardItem): boolean;
 //#endregion
-export { GitAdapterAction as $, EvidenceOutcome as $n, HostCohortSelection as $t, sessionQuery as A, classifyClause as An, STATEFUL_ACTIONS as Ar, ToolSubject as At, OperationVerbEntry as B, GoalBoundaryAccess as Bn, semanticActionFromText as Br, AuditedExecutable as Bt, ProofSurface as C, RejectedBinding as Cn, PackageRow as Cr, isRunExecutable as Ct, createProofManifest as D, ClauseSegment as Dn, ActionSpec as Dr, hasCurrentCertificate as Dt, canonicalProjection as E, ClassifiedClause as En, ActionManifest as Er, goalCompletionDenial as Et, evidenceMatchesItem as F, segmentClauses as Fn, actionCompatible as Fr, withDurability as Ft, hostLockRowsFromComposedDump as G, BoundaryDisposition as Gn, normalizeClause as Gr, ExecutableIdentityBinding as Gt, ActiveProfileHostLock as H, effectuateBoundary as Hn, validateActionTarget as Hr, DEFAULT_HOST_LOCK as Ht, isVerifyingCapability as I, BoundaryEffectuation as In, isStatefulAction as Ir, PROTOCOL_V3_NOTICE as It, packageRowsFromPnpmLock as J, DeriveConfig as Jn, sha256 as Jr, HOST_COHORTS as Jt, injectActiveProfileHostLock as K, BoundaryQualificationKind as Kn, sanitizeClauseText as Kr, GOAL_HOST_PACKAGES as Kt, COMMAND_SURFACE_MANIFEST as L, BoundaryQualification as Ln, requestedTargetAuthorizesMutation as Lr, deriveProjection as Lt, EvidenceFacetCoverage as M, extractMethod as Mn, SUPPORTED_EVIDENCE_ADAPTERS as Mr, extractTextContent as Mt, bindingSatisfies as N, extractOperation as Nn, SemanticAction as Nr, extractToolSubject as Nt, proofDigest as O, captureClause as On, CERTIFICATE_VERSION as Or, ToolCallInput as Ot, evidenceCoverage as P, isInformationalMessage as Pn, StatefulAction as Pr, isDeterministicCheck as Pt, GIT_COMMAND_MANIFEST_IDS as Q, EvidenceBinding as Qn, HostCohort as Qt, CommandSurfaceManifest as R, BoundaryRequest as Rn, requestedTargetMatchesResolved as Rr, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Rt, ProofObligation as S, CheckpointResult as Sn, createProjection as Sr, canonicalArgvFromCommand as St, bindProofToProjection as T, CaptureScope as Tn, ACTION_MANIFEST_VERSION as Tr, parseShellCommand as Tt, HostProfileError as U, isCurrentAcceptedBoundary as Un, canonicalizePath as Ur, EXPECTED_HOST_PACKAGES as Ut, validateManifest as V, availableBoundaryQualifications as Vn, validateActionManifest as Vr, BASE_HOST_PACKAGES as Vt, hostLockContextFromComposedDump as W, qualifyBoundary as Wn, digestStrings as Wr, ExecutableIdentity as Wt, resolveInstalledHostLock as X, DeriveScope as Xn, HostCapabilityId as Xt, resolveActiveProfileHostLock as Y, DeriveResult as Yn, HostCapabilityEvaluation as Yt, verifyComposedHostLockDump as Z, DerivedEnvelope as Zn, HostCapabilityRequest as Zt, ALPHA3_HOST_PACKAGES as _, AuthorityKind as _n, TargetCaptureStatus as _r, verifiedLinearCommitReadback as _t, classifyCompletionClaim as a, HostProfileKind as an, GuardBoundary as ar, GitEffectRunner as at, ProofKind as b, UserInteractionKind as bn, VerificationContract as br, ParsedShell as bt, isWholeTaskCompletionClaim as c, bindLiveGoalCapability as cn, GuardIntegrity as cr, GitTargetIdentity as ct, DEFAULT_RECOVERY_CHAR_BUDGET as d, evaluateHostLock as dn, GuardItemStatus as dr, commitTreeSnapshotDigest as dt, HostCohortSelectionReason as en, EvidenceParseStatus as er, GitCommandAccepted as et, RecoveryOptions as f, evaluateToolSurfaceCapability as fn, GuardOperation as fr, createGitPrestateEnvelope as ft, renderRecoveryPacket as g, AuthorityBlockKind as gn, TargetCaptureReasonCode as gr, revalidateGitPrestate as gt, recoveryDigest as h, AuthorityBlock as hn, PersistenceAuthorization as hr, parseGitCommandManifest as ht, TurnStoppingDecision as i, HostPlatform as in, GoalRef as ir, GitEffectExecution as it, validateProofManifest as j, extractArtifactPaths as jn, STOP_PROTOCOL_VERSION as jr, evidenceFromPersistedToolResult as jt, proofEvidenceConstraints as k, captureItem as kn, SEMANTIC_ACTIONS as kr, ToolResultInput as kt, latestAssistantText as l, evaluateExternalWaitCapability as ln, GuardItem as lr, LinearCommitReadback as lt, openItems as m, currentContractDigest as mn, HostStatus as mr, gitCommandMatchesTarget as mt, AssistantOutcomeObservation as n, HostLockEvaluation as nn, ExpectedTransition as nr, GitCommandParseResult as nt, decideTurnBoundary as o, HostToolSurface as on, GuardCheckpoint as or, GitPrestateCheck as ot, closingHint as p, selectHostCohort as pn, GuardProjection as pr, executeRevalidatedGitEffect as pt, packageRowsFromActiveGraph as q, DeferAuthorization as qn, sanitizeUrl as qr, HOST_CAPABILITY_PACKAGE_GROUPS as qt, CompletionDisposition as r, HostLockStatus as rn, ExternalOperation as rr, GitCommandRejected as rt, decideTurnStopping as s, bindExecutableIdentity as sn, GuardEvidence as sr, GitPrestateEnvelope as st, supersedeItem as t, HostLockContext as tn, EvidenceRole as tr, GitCommandManifest as tt, observeAssistantOutcome as u, evaluateHostCapability as un, GuardItemKind as ur, commitIndexSnapshotDigest as ut, PROOF_KINDS as v, authorityCaptureCounts as vn, TargetTuple as vr, CanonicalArgv as vt, SessionQuery as w, certifyCheckpoint as wn, ACTION_MANIFEST as wr, parsePwshCommand as wt, ProofManifest as x, classifyUserInteraction as xn, WaitAuthorization as xr, ShellParseStatus as xt, PROOF_PROTOCOL_VERSION as y, segmentAuthorityBlocks as yn, TargetValue as yr, CanonicalCommandSurface as yt, ManifestIssue as z, GoalActivationState as zn, semanticActionFromCommand as zr, ALPHA2_HOST_PACKAGES as zt };
+export { resolveInstalledHostLock as $, DeriveResult as $n, HostCapabilityEvaluation as $t, createProofManifest as A, ClassifiedClause as An, ActionManifest as Ar, hasCurrentCertificate as At, COMMAND_SURFACE_MANIFEST as B, BoundaryEffectuation as Bn, isStatefulAction as Br, PROTOCOL_V3_NOTICE as Bt, ProofKind as C, segmentAuthorityBlocks as Cn, TargetValue as Cr, ParsedShell as Ct, SessionQuery as D, RejectedBinding as Dn, PackageRow as Dr, parsePwshCommand as Dt, ProofSurface as E, CheckpointResult as En, createProjection as Er, isRunExecutable as Et, EvidenceFacetCoverage as F, extractArtifactPaths as Fn, STOP_PROTOCOL_VERSION as Fr, extractTextContent as Ft, ActiveProfileHostLock as G, availableBoundaryQualifications as Gn, validateActionManifest as Gr, BASE_HOST_PACKAGES as Gt, ManifestIssue as H, BoundaryRequest as Hn, requestedTargetMatchesResolved as Hr, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Ht, bindingSatisfies as I, extractMethod as In, SUPPORTED_EVIDENCE_ADAPTERS as Ir, extractToolSubject as It, hostLockRowsFromComposedDump as J, qualifyBoundary as Jn, digestStrings as Jr, ExecutableIdentity as Jt, HostProfileError as K, effectuateBoundary as Kn, validateActionTarget as Kr, DEFAULT_HOST_LOCK as Kt, evidenceCoverage as L, extractOperation as Ln, SemanticAction as Lr, isDeterministicCheck as Lt, proofEvidenceConstraints as M, captureClause as Mn, CERTIFICATE_VERSION as Mr, ToolResultInput as Mt, sessionQuery as N, captureItem as Nn, SEMANTIC_ACTIONS as Nr, ToolSubject as Nt, bindProofToProjection as O, certifyCheckpoint as On, ACTION_MANIFEST as Or, parseShellCommand as Ot, validateProofManifest as P, classifyClause as Pn, STATEFUL_ACTIONS as Pr, evidenceFromPersistedToolResult as Pt, resolveActiveProfileHostLock as Q, DeriveConfig as Qn, sha256 as Qr, HOST_COHORTS as Qt, evidenceMatchesItem as R, isInformationalMessage as Rn, StatefulAction as Rr, withDurability as Rt, PROOF_PROTOCOL_VERSION as S, authorityCaptureCounts as Sn, TargetTuple as Sr, CanonicalCommandSurface as St, ProofObligation as T, classifyUserInteraction as Tn, WaitAuthorization as Tr, canonicalArgvFromCommand as Tt, OperationVerbEntry as U, GoalActivationState as Un, semanticActionFromCommand as Ur, ALPHA2_HOST_PACKAGES as Ut, CommandSurfaceManifest as V, BoundaryQualification as Vn, requestedTargetAuthorizesMutation as Vr, deriveProjection as Vt, validateManifest as W, GoalBoundaryAccess as Wn, semanticActionFromText as Wr, AuditedExecutable as Wt, packageRowsFromActiveGraph as X, BoundaryQualificationKind as Xn, sanitizeClauseText as Xr, GOAL_HOST_PACKAGES as Xt, injectActiveProfileHostLock as Y, BoundaryDisposition as Yn, normalizeClause as Yr, ExecutableIdentityBinding as Yt, packageRowsFromPnpmLock as Z, DeferAuthorization as Zn, sanitizeUrl as Zr, HOST_CAPABILITY_PACKAGE_GROUPS as Zt, openItems as _, selectHostCohort as _n, GuardProjection as _r, gitCommandMatchesTarget as _t, classifyCompletionClaim as a, HostLockContext as an, EvidenceRole as ar, GitCommandParseResult as at, ALPHA3_HOST_PACKAGES as b, AuthorityBlockKind as bn, TargetCaptureReasonCode as br, verifiedLinearCommitReadback as bt, isWholeTaskCompletionClaim as c, HostPlatform as cn, GoalRef as cr, GitEffectRunner as ct, snapshotSessionEvents as d, bindExecutableIdentity as dn, GuardEvidence as dr, GitTargetIdentity as dt, HostCapabilityId as en, DeriveScope as er, verifyComposedHostLockDump as et, RC1_HOST_PACKAGES as f, bindLiveGoalCapability as fn, GuardIntegrity as fr, LinearCommitReadback as ft, closingHint as g, evaluateToolSurfaceCapability as gn, GuardOperation as gr, executeRevalidatedGitEffect as gt, RecoveryOptions as h, evaluateHostLock as hn, GuardItemStatus as hr, createGitPrestateEnvelope as ht, TurnStoppingDecision as i, HostCohortSelectionReason as in, EvidenceParseStatus as ir, GitCommandManifest as it, proofDigest as j, ClauseSegment as jn, ActionSpec as jr, ToolCallInput as jt, canonicalProjection as k, CaptureScope as kn, ACTION_MANIFEST_VERSION as kr, goalCompletionDenial as kt, latestAssistantText as l, HostProfileKind as ln, GuardBoundary as lr, GitPrestateCheck as lt, MIN_RECOVERY_CHAR_BUDGET as m, evaluateHostCapability as mn, GuardItemKind as mr, commitTreeSnapshotDigest as mt, AssistantOutcomeObservation as n, HostCohort as nn, EvidenceBinding as nr, GitAdapterAction as nt, decideTurnBoundary as o, HostLockEvaluation as on, ExpectedTransition as or, GitCommandRejected as ot, DEFAULT_RECOVERY_CHAR_BUDGET as p, evaluateExternalWaitCapability as pn, GuardItem as pr, commitIndexSnapshotDigest as pt, hostLockContextFromComposedDump as q, isCurrentAcceptedBoundary as qn, canonicalizePath as qr, EXPECTED_HOST_PACKAGES as qt, CompletionDisposition as r, HostCohortSelection as rn, EvidenceOutcome as rr, GitCommandAccepted as rt, decideTurnStopping as s, HostLockStatus as sn, ExternalOperation as sr, GitEffectExecution as st, supersedeItem as t, HostCapabilityRequest as tn, DerivedEnvelope as tr, GIT_COMMAND_MANIFEST_IDS as tt, observeAssistantOutcome as u, HostToolSurface as un, GuardCheckpoint as ur, GitPrestateEnvelope as ut, recoveryDigest as v, currentContractDigest as vn, HostStatus as vr, parseGitCommandManifest as vt, ProofManifest as w, UserInteractionKind as wn, VerificationContract as wr, ShellParseStatus as wt, PROOF_KINDS as x, AuthorityKind as xn, TargetCaptureStatus as xr, CanonicalArgv as xt, renderRecoveryPacket as y, AuthorityBlock as yn, PersistenceAuthorization as yr, revalidateGitPrestate as yt, isVerifyingCapability as z, segmentClauses as zn, actionCompatible as zr, CAPTURE_V042_NOTICE as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as GitAdapterAction, $n as EvidenceOutcome, $t as HostCohortSelection, A as sessionQuery, An as classifyClause, Ar as STATEFUL_ACTIONS, At as ToolSubject, B as OperationVerbEntry, Bn as GoalBoundaryAccess, Br as semanticActionFromText, Bt as AuditedExecutable, C as ProofSurface, Cn as RejectedBinding, Cr as PackageRow, Ct as isRunExecutable, D as createProofManifest, Dn as ClauseSegment, Dr as ActionSpec, Dt as hasCurrentCertificate, E as canonicalProjection, En as ClassifiedClause, Er as ActionManifest, Et as goalCompletionDenial, F as evidenceMatchesItem, Fn as segmentClauses, Fr as actionCompatible, Ft as withDurability, G as hostLockRowsFromComposedDump, Gn as BoundaryDisposition, Gr as normalizeClause, Gt as ExecutableIdentityBinding, H as ActiveProfileHostLock, Hn as effectuateBoundary, Hr as validateActionTarget, Ht as DEFAULT_HOST_LOCK, I as isVerifyingCapability, In as BoundaryEffectuation, Ir as isStatefulAction, It as PROTOCOL_V3_NOTICE, J as packageRowsFromPnpmLock, Jn as DeriveConfig, Jr as sha256, Jt as HOST_COHORTS, K as injectActiveProfileHostLock, Kn as BoundaryQualificationKind, Kr as sanitizeClauseText, Kt as GOAL_HOST_PACKAGES, L as COMMAND_SURFACE_MANIFEST, Ln as BoundaryQualification, Lr as requestedTargetAuthorizesMutation, Lt as deriveProjection, M as EvidenceFacetCoverage, Mn as extractMethod, Mr as SUPPORTED_EVIDENCE_ADAPTERS, Mt as extractTextContent, N as bindingSatisfies, Nn as extractOperation, Nr as SemanticAction, Nt as extractToolSubject, O as proofDigest, On as captureClause, Or as CERTIFICATE_VERSION, Ot as ToolCallInput, P as evidenceCoverage, Pn as isInformationalMessage, Pr as StatefulAction, Pt as isDeterministicCheck, Q as GIT_COMMAND_MANIFEST_IDS, Qn as EvidenceBinding, Qt as HostCohort, R as CommandSurfaceManifest, Rn as BoundaryRequest, Rr as requestedTargetMatchesResolved, Rt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, S as ProofObligation, Sn as CheckpointResult, Sr as createProjection, St as canonicalArgvFromCommand, T as bindProofToProjection, Tn as CaptureScope, Tr as ACTION_MANIFEST_VERSION, Tt as parseShellCommand, U as HostProfileError, Un as isCurrentAcceptedBoundary, Ur as canonicalizePath, Ut as EXPECTED_HOST_PACKAGES, V as validateManifest, Vn as availableBoundaryQualifications, Vr as validateActionManifest, Vt as BASE_HOST_PACKAGES, W as hostLockContextFromComposedDump, Wn as qualifyBoundary, Wr as digestStrings, Wt as ExecutableIdentity, X as resolveInstalledHostLock, Xn as DeriveScope, Xt as HostCapabilityId, Y as resolveActiveProfileHostLock, Yn as DeriveResult, Yt as HostCapabilityEvaluation, Z as verifyComposedHostLockDump, Zn as DerivedEnvelope, Zt as HostCapabilityRequest, _ as ALPHA3_HOST_PACKAGES, _n as AuthorityKind, _r as TargetCaptureStatus, _t as verifiedLinearCommitReadback, a as classifyCompletionClaim, an as HostProfileKind, ar as GuardBoundary, at as GitEffectRunner, b as ProofKind, bn as UserInteractionKind, br as VerificationContract, bt as ParsedShell, c as isWholeTaskCompletionClaim, cn as bindLiveGoalCapability, cr as GuardIntegrity, ct as GitTargetIdentity, d as DEFAULT_RECOVERY_CHAR_BUDGET, dn as evaluateHostLock, dr as GuardItemStatus, dt as commitTreeSnapshotDigest, en as HostCohortSelectionReason, er as EvidenceParseStatus, et as GitCommandAccepted, f as RecoveryOptions, fn as evaluateToolSurfaceCapability, fr as GuardOperation, ft as createGitPrestateEnvelope, g as renderRecoveryPacket, gn as AuthorityBlockKind, gr as TargetCaptureReasonCode, gt as revalidateGitPrestate, h as recoveryDigest, hn as AuthorityBlock, hr as PersistenceAuthorization, ht as parseGitCommandManifest, i as TurnStoppingDecision, in as HostPlatform, ir as GoalRef, it as GitEffectExecution, j as validateProofManifest, jn as extractArtifactPaths, jr as STOP_PROTOCOL_VERSION, jt as evidenceFromPersistedToolResult, k as proofEvidenceConstraints, kn as captureItem, kr as SEMANTIC_ACTIONS, kt as ToolResultInput, l as latestAssistantText, ln as evaluateExternalWaitCapability, lr as GuardItem, lt as LinearCommitReadback, m as openItems, mn as currentContractDigest, mr as HostStatus, mt as gitCommandMatchesTarget, n as AssistantOutcomeObservation, nn as HostLockEvaluation, nr as ExpectedTransition, nt as GitCommandParseResult, o as decideTurnBoundary, on as HostToolSurface, or as GuardCheckpoint, ot as GitPrestateCheck, p as closingHint, pn as selectHostCohort, pr as GuardProjection, pt as executeRevalidatedGitEffect, q as packageRowsFromActiveGraph, qn as DeferAuthorization, qr as sanitizeUrl, qt as HOST_CAPABILITY_PACKAGE_GROUPS, r as CompletionDisposition, rn as HostLockStatus, rr as ExternalOperation, rt as GitCommandRejected, s as decideTurnStopping, sn as bindExecutableIdentity, sr as GuardEvidence, st as GitPrestateEnvelope, t as supersedeItem, tn as HostLockContext, tr as EvidenceRole, tt as GitCommandManifest, u as observeAssistantOutcome, un as evaluateHostCapability, ur as GuardItemKind, ut as commitIndexSnapshotDigest, v as PROOF_KINDS, vn as authorityCaptureCounts, vr as TargetTuple, vt as CanonicalArgv, w as SessionQuery, wn as certifyCheckpoint, wr as ACTION_MANIFEST, wt as parsePwshCommand, x as ProofManifest, xn as classifyUserInteraction, xr as WaitAuthorization, xt as ShellParseStatus, y as PROOF_PROTOCOL_VERSION, yn as segmentAuthorityBlocks, yr as TargetValue, yt as CanonicalCommandSurface, z as ManifestIssue, zn as GoalActivationState, zr as semanticActionFromCommand, zt as ALPHA2_HOST_PACKAGES } from "./index-AtjJOrK8.js";
+import { $ as resolveInstalledHostLock, $n as DeriveResult, $t as HostCapabilityEvaluation, A as createProofManifest, An as ClassifiedClause, Ar as ActionManifest, At as hasCurrentCertificate, B as COMMAND_SURFACE_MANIFEST, Bn as BoundaryEffectuation, Br as isStatefulAction, Bt as PROTOCOL_V3_NOTICE, C as ProofKind, Cn as segmentAuthorityBlocks, Cr as TargetValue, Ct as ParsedShell, D as SessionQuery, Dn as RejectedBinding, Dr as PackageRow, Dt as parsePwshCommand, E as ProofSurface, En as CheckpointResult, Er as createProjection, Et as isRunExecutable, F as EvidenceFacetCoverage, Fn as extractArtifactPaths, Fr as STOP_PROTOCOL_VERSION, Ft as extractTextContent, G as ActiveProfileHostLock, Gn as availableBoundaryQualifications, Gr as validateActionManifest, Gt as BASE_HOST_PACKAGES, H as ManifestIssue, Hn as BoundaryRequest, Hr as requestedTargetMatchesResolved, Ht as ALPHA2_DSHMARKET_139_HOST_PACKAGES, I as bindingSatisfies, In as extractMethod, Ir as SUPPORTED_EVIDENCE_ADAPTERS, It as extractToolSubject, J as hostLockRowsFromComposedDump, Jn as qualifyBoundary, Jr as digestStrings, Jt as ExecutableIdentity, K as HostProfileError, Kn as effectuateBoundary, Kr as validateActionTarget, Kt as DEFAULT_HOST_LOCK, L as evidenceCoverage, Ln as extractOperation, Lr as SemanticAction, Lt as isDeterministicCheck, M as proofEvidenceConstraints, Mn as captureClause, Mr as CERTIFICATE_VERSION, Mt as ToolResultInput, N as sessionQuery, Nn as captureItem, Nr as SEMANTIC_ACTIONS, Nt as ToolSubject, O as bindProofToProjection, On as certifyCheckpoint, Or as ACTION_MANIFEST, Ot as parseShellCommand, P as validateProofManifest, Pn as classifyClause, Pr as STATEFUL_ACTIONS, Pt as evidenceFromPersistedToolResult, Q as resolveActiveProfileHostLock, Qn as DeriveConfig, Qr as sha256, Qt as HOST_COHORTS, R as evidenceMatchesItem, Rn as isInformationalMessage, Rr as StatefulAction, Rt as withDurability, S as PROOF_PROTOCOL_VERSION, Sn as authorityCaptureCounts, Sr as TargetTuple, St as CanonicalCommandSurface, T as ProofObligation, Tn as classifyUserInteraction, Tr as WaitAuthorization, Tt as canonicalArgvFromCommand, U as OperationVerbEntry, Un as GoalActivationState, Ur as semanticActionFromCommand, Ut as ALPHA2_HOST_PACKAGES, V as CommandSurfaceManifest, Vn as BoundaryQualification, Vr as requestedTargetAuthorizesMutation, Vt as deriveProjection, W as validateManifest, Wn as GoalBoundaryAccess, Wr as semanticActionFromText, Wt as AuditedExecutable, X as packageRowsFromActiveGraph, Xn as BoundaryQualificationKind, Xr as sanitizeClauseText, Xt as GOAL_HOST_PACKAGES, Y as injectActiveProfileHostLock, Yn as BoundaryDisposition, Yr as normalizeClause, Yt as ExecutableIdentityBinding, Z as packageRowsFromPnpmLock, Zn as DeferAuthorization, Zr as sanitizeUrl, Zt as HOST_CAPABILITY_PACKAGE_GROUPS, _ as openItems, _n as selectHostCohort, _r as GuardProjection, _t as gitCommandMatchesTarget, a as classifyCompletionClaim, an as HostLockContext, ar as EvidenceRole, at as GitCommandParseResult, b as ALPHA3_HOST_PACKAGES, bn as AuthorityBlockKind, br as TargetCaptureReasonCode, bt as verifiedLinearCommitReadback, c as isWholeTaskCompletionClaim, cn as HostPlatform, cr as GoalRef, ct as GitEffectRunner, d as snapshotSessionEvents, dn as bindExecutableIdentity, dr as GuardEvidence, dt as GitTargetIdentity, en as HostCapabilityId, er as DeriveScope, et as verifyComposedHostLockDump, f as RC1_HOST_PACKAGES, fn as bindLiveGoalCapability, fr as GuardIntegrity, ft as LinearCommitReadback, g as closingHint, gn as evaluateToolSurfaceCapability, gr as GuardOperation, gt as executeRevalidatedGitEffect, h as RecoveryOptions, hn as evaluateHostLock, hr as GuardItemStatus, ht as createGitPrestateEnvelope, i as TurnStoppingDecision, in as HostCohortSelectionReason, ir as EvidenceParseStatus, it as GitCommandManifest, j as proofDigest, jn as ClauseSegment, jr as ActionSpec, jt as ToolCallInput, k as canonicalProjection, kn as CaptureScope, kr as ACTION_MANIFEST_VERSION, kt as goalCompletionDenial, l as latestAssistantText, ln as HostProfileKind, lr as GuardBoundary, lt as GitPrestateCheck, m as MIN_RECOVERY_CHAR_BUDGET, mn as evaluateHostCapability, mr as GuardItemKind, mt as commitTreeSnapshotDigest, n as AssistantOutcomeObservation, nn as HostCohort, nr as EvidenceBinding, nt as GitAdapterAction, o as decideTurnBoundary, on as HostLockEvaluation, or as ExpectedTransition, ot as GitCommandRejected, p as DEFAULT_RECOVERY_CHAR_BUDGET, pn as evaluateExternalWaitCapability, pr as GuardItem, pt as commitIndexSnapshotDigest, q as hostLockContextFromComposedDump, qn as isCurrentAcceptedBoundary, qr as canonicalizePath, qt as EXPECTED_HOST_PACKAGES, r as CompletionDisposition, rn as HostCohortSelection, rr as EvidenceOutcome, rt as GitCommandAccepted, s as decideTurnStopping, sn as HostLockStatus, sr as ExternalOperation, st as GitEffectExecution, t as supersedeItem, tn as HostCapabilityRequest, tr as DerivedEnvelope, tt as GIT_COMMAND_MANIFEST_IDS, u as observeAssistantOutcome, un as HostToolSurface, ur as GuardCheckpoint, ut as GitPrestateEnvelope, v as recoveryDigest, vn as currentContractDigest, vr as HostStatus, vt as parseGitCommandManifest, w as ProofManifest, wn as UserInteractionKind, wr as VerificationContract, wt as ShellParseStatus, x as PROOF_KINDS, xn as AuthorityKind, xr as TargetCaptureStatus, xt as CanonicalArgv, y as renderRecoveryPacket, yn as AuthorityBlock, yr as PersistenceAuthorization, yt as revalidateGitPrestate, z as isVerifyingCapability, zn as segmentClauses, zr as actionCompatible, zt as CAPTURE_V042_NOTICE } from "./index-DNF0OTi-.js";
 import "@deepseek-ai/dsh-tools";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
@@ -21,4 +21,4 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockProfile?: unknown;
 }): void;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityKind, BASE_HOST_PACKAGES, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CheckpointResult, ClassifiedClause, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, ExpectedTransition, ExternalOperation, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, LinearCommitReadback, ManifestIssue, OperationVerbEntry, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, ParsedShell, PersistenceAuthorization, ProofKind, ProofManifest, ProofObligation, ProofSurface, RecoveryOptions, RejectedBinding, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, SemanticAction, SessionQuery, ShellParseStatus, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetTuple, TargetValue, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UserInteractionKind, VerificationContract, WaitAuthorization, actionCompatible, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, inject, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, name, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityKind, BASE_HOST_PACKAGES, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, COMMAND_SURFACE_MANIFEST, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CheckpointResult, ClassifiedClause, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, ExpectedTransition, ExternalOperation, GIT_COMMAND_MANIFEST_IDS, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, ManifestIssue, OperationVerbEntry, PROOF_KINDS, PROOF_PROTOCOL_VERSION, PROTOCOL_V3_NOTICE, ParsedShell, PersistenceAuthorization, ProofKind, ProofManifest, ProofObligation, ProofSurface, RC1_HOST_PACKAGES, RecoveryOptions, RejectedBinding, SEMANTIC_ACTIONS, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, SUPPORTED_EVIDENCE_ADAPTERS, SemanticAction, SessionQuery, ShellParseStatus, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetTuple, TargetValue, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UserInteractionKind, VerificationContract, WaitAuthorization, actionCompatible, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindingSatisfies, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, classifyClause, classifyCompletionClaim, classifyUserInteraction, closingHint, commitIndexSnapshotDigest, commitTreeSnapshotDigest, createGitPrestateEnvelope, createProjection, createProofManifest, currentContractDigest, decideTurnBoundary, decideTurnStopping, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateToolSurfaceCapability, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, inject, injectActiveProfileHostLock, isCurrentAcceptedBoundary, isDeterministicCheck, isInformationalMessage, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, latestAssistantText, name, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseGitCommandManifest, parsePwshCommand, parseShellCommand, proofDigest, proofEvidenceConstraints, qualifyBoundary, recoveryDigest, renderRecoveryPacket, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, sessionQuery, sha256, snapshotSessionEvents, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };