dsh-completion-guard 0.4.2 → 0.4.3

package/dist/{domain-BXB_BPQg.js → domain-DebMrpyX.js}

@@ -1,7 +1,8 @@
+import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import * as path from "node:path";
-import { dirname, join, resolve, sep } from "node:path";
-import { existsSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join, resolve, sep } from "node:path";
+import { existsSync, lstatSync, readFileSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 
 //#region src/domain/canonicalize.ts
@@ -235,7 +236,7 @@ const SUPPORTED_EVIDENCE_ADAPTERS = {
 	"context-guard.git.v1": "1.0.0",
 	"context-guard.package.v1": "1.0.0",
 	"context-guard.artifact.v1": "1.0.0",
-	"context-guard.service.v1": "1.0.0",
+	"context-guard.service.v2": "2.0.0",
 	"context-guard.registry.v1": "1.0.0"
 };
 const SEMANTIC_ACTIONS = [
@@ -3787,7 +3788,7 @@ const ALPHA2_DSHMARKET_139_HOST_PACKAGES = ALPHA2_HOST_PACKAGES.map((row) => row
 * rows, duplicate rows, or use identities outside every registered cohort
 * fail closed.
 */
-const HOST_COHORTS = [
+const LEGACY_HOST_COHORTS = [
 	defineCohort("dsh-0.1.1-rc.2", ["0.1.1-rc.2"], ["posix", "windows"], [
 		{
 			name: "@deepseek-ai/cordis",
@@ -3965,6 +3966,33 @@ const HOST_COHORTS = [
 	defineCohort("dsh-0.1.2-alpha.3", ["0.1.2-alpha.3"], ["posix", "windows"], ALPHA3_HOST_PACKAGES),
 	defineCohort("dsh-0.1.2-rc.1", ["0.1.2-rc.1"], ["posix", "windows"], RC1_HOST_PACKAGES)
 ];
+/** Core-lock/v1 separates optional market identity from the audited DSH graph.
+* Legacy rows remain available for historical verification; they are never
+* silently re-labelled as a newly accepted core lock.
+*/
+const HOST_COHORTS = LEGACY_HOST_COHORTS.filter((cohort) => !cohort.id.includes("-dshmarket-")).map((cohort) => ({
+	...cohort,
+	id: `${cohort.id}-core-v1`,
+	manifestVersion: 2,
+	packages: cohort.packages.filter((row) => row.name !== "dshmarket"),
+	capabilities: [
+		{
+			name: "host_cohort",
+			value: {
+				k: "s",
+				v: `${cohort.id}-core-v1`
+			}
+		},
+		{
+			name: "host_lock_policy",
+			value: {
+				k: "s",
+				v: "dsh-core/v1"
+			}
+		},
+		...AUDITED_CAPABILITY_ROWS
+	]
+}));
 /**
 * rc.2 audited package identities (first registry cohort). The audited
 * cohort is an atomic whole-graph contract (CG-DSH-001): any drifted,
@@ -3982,7 +4010,7 @@ const HOST_CAPABILITY_PACKAGE_GROUPS = {
 	terminal_windows: packageNames("@deepseek-ai/dsh-tool-pwsh", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-subprocess-local", "@deepseek-ai/dsh-pwsh-sandbox", "@deepseek-ai/dsh-shell-env"),
 	dsh_cli: packageNames("@deepseek-ai/dsh"),
 	plugin_inventory: packageNames("@deepseek-ai/dsh-host-plugin-inventory"),
-	web_control: packageNames("dshmarket", "@deepseek-ai/dsh-host-webserver", "@deepseek-ai/dsh-web-app"),
+	web_control: packageNames("@deepseek-ai/dsh-host-webserver", "@deepseek-ai/dsh-web-app"),
 	jobs: packageNames("@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-tool-jobs"),
 	filesystem: packageNames("@deepseek-ai/dsh-tool-fs", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-fs-local", "@deepseek-ai/dsh-fs-sandbox", "@deepseek-ai/dsh-fs-observation-policy", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-user-approval", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-system-prompt")
 };
@@ -3996,6 +4024,7 @@ const HOST_CAPABILITY_PACKAGE_GROUPS = {
 * consistently.
 */
 function selectHostCohort(rows, platform) {
+	rows = rows.filter((row) => row.name !== "dshmarket");
 	const registryNames = new Set(HOST_COHORTS.flatMap((cohort) => cohort.packages.map((row) => row.name)));
 	if (rows.some((row) => !registryNames.has(row.name))) return {
 		cohort: HOST_COHORTS[0],
@@ -4011,7 +4040,8 @@ function selectHostCohort(rows, platform) {
 	const unboundCount = rows.length - bound.length;
 	const versionMatches = bound.map((row) => HOST_COHORTS.filter((cohort) => cohort.packages.some((p) => p.name === row.name && p.version === row.version)));
 	const identityMatches = bound.map((row, index) => versionMatches[index].filter((cohort) => cohort.packages.some((p) => p.name === row.name && p.version === row.version && p.integrity === row.integrity)));
-	const consistentCohort = HOST_COHORTS.find((cohort) => identityMatches.every((matches) => matches.includes(cohort)));
+	const candidates = HOST_COHORTS.filter((cohort) => identityMatches.every((matches) => matches.includes(cohort)));
+	const consistentCohort = candidates.filter((cohort) => cohort.packages.length === rows.length && cohort.packages.every((expected) => rows.filter((row) => row.name === expected.name).length === 1))[0] ?? candidates[0];
 	if (consistentCohort !== void 0 && unboundCount === 0) {
 		if (platform && !consistentCohort.auditedPlatforms.includes(platform)) return {
 			cohort: consistentCohort,
@@ -4115,7 +4145,7 @@ function cohortForEvaluation(evaluation) {
 	return HOST_COHORTS.find((cohort) => cohort.id === evaluation.cohortId) ?? HOST_COHORTS[0];
 }
 function evaluateHostLock(rows, context = {}) {
-	const supplied = stableRows(rows);
+	const supplied = stableRows(rows.filter((row) => row.name !== "dshmarket"));
 	const selection = selectHostCohort(supplied, context.platform);
 	const cohort = selection.cohort;
 	const capabilities = capabilityEvaluations(supplied, cohort);
@@ -4247,7 +4277,7 @@ function evaluateHostCapability(evaluation, request) {
 	if (request.action === "create" || request.action === "modify") groups.push("filesystem");
 	if (request.action === "install" || request.action === "apply") groups.push("dsh_cli");
 	if (request.action === "apply") groups.push("plugin_inventory");
-	if ((request.action === "apply" || request.action === "restart") && profileKind === "web") groups.push("web_control");
+	if (request.action === "restart" && profileKind === "web") groups.push("web_control");
 	if (request.action === "restart" && profileKind !== "web") return {
 		id: "action.restart",
 		status: "unavailable",
@@ -6426,7 +6456,7 @@ function findUp(start, filename) {
 * v9 lockfile. Multiple resolved versions are preserved as separate rows so
 * callers cannot silently select a nearest instance.
 */
-function packageRowsFromPnpmLock(text) {
+function packageRowsFromPnpmLock(text, names = CRITICAL_NAMES) {
 	const rows = /* @__PURE__ */ new Map();
 	const lines = text.split(/\r?\n/);
 	const packagesStart = lines.findIndex((line) => line === "packages:");
@@ -6435,7 +6465,7 @@ function packageRowsFromPnpmLock(text) {
 	const end = snapshotsStart > packagesStart ? snapshotsStart : lines.length;
 	for (let index = packagesStart + 1; index < end; index += 1) {
 		const match = lines[index].match(/^  '?((?:@[^/'\s]+\/)?[^@'\s]+)@([^':\s]+)'?:\s*$/);
-		if (!match || !CRITICAL_NAMES.includes(match[1])) continue;
+		if (!match || !names.includes(match[1])) continue;
 		let integrity;
 		for (let cursor = index + 1; cursor < lines.length && !/^  \S/.test(lines[cursor]); cursor += 1) {
 			const resolution = lines[cursor].match(/^    resolution: \{[^}]*\bintegrity: ([^,}\s]+)[^}]*\}\s*$/);
@@ -6452,7 +6482,7 @@ function packageRowsFromPnpmLock(text) {
 		});
 		rows.set(match[1], entries);
 	}
-	return CRITICAL_NAMES.flatMap((name) => {
+	return names.flatMap((name) => {
 		const entries = rows.get(name) ?? [];
 		if (entries.length === 0) return [];
 		return entries;
@@ -6467,36 +6497,47 @@ function resolveInstalledHostLock(moduleUrl = import.meta.url) {
 		return evaluateHostLock([]);
 	}
 }
-/**
-* Resolve only package identities reachable from the active pnpm importer.
-* Historical snapshots elsewhere in the lockfile are deliberately ignored;
-* two reachable peer variants of a critical package remain a duplicate and
-* are returned twice so evaluateHostLock can fail closed with a bounded code.
-*/
-function packageRowsFromActiveGraph(packageMapText, lockText, nodeModulesRoot) {
+function activeGraphRecords(packageMapText) {
 	let document;
 	try {
 		document = JSON.parse(packageMapText);
 	} catch {
-		return [];
+		throw new HostProfileError("active_graph_invalid", "invalid package map");
 	}
-	if (!document || typeof document !== "object") return [];
+	if (!document || typeof document !== "object") throw new HostProfileError("active_graph_invalid", "invalid reachable package map");
 	const packages = document.packages;
-	if (!packages || typeof packages !== "object" || Array.isArray(packages)) return [];
+	if (!packages || typeof packages !== "object" || Array.isArray(packages)) throw new HostProfileError("active_graph_invalid", "invalid reachable package map");
 	const records = packages;
-	if (!records["."] || Object.keys(records).length > 2e4) return [];
+	if (!records["."] || Object.keys(records).length > 2e4) throw new HostProfileError("active_graph_invalid", "invalid reachable package map");
 	const reachable = /* @__PURE__ */ new Set();
 	const queue = ["."];
 	while (queue.length > 0 && reachable.size <= 2e4) {
 		const id = queue.shift();
 		if (reachable.has(id)) continue;
 		const record = records[id];
-		if (!record || typeof record !== "object") return [];
+		if (!record || typeof record !== "object") throw new HostProfileError("active_graph_invalid", "invalid reachable package map");
 		reachable.add(id);
-		if (!record.dependencies || typeof record.dependencies !== "object" || Array.isArray(record.dependencies)) continue;
-		for (const target of Object.values(record.dependencies)) if (typeof target === "string" && target !== "." && !reachable.has(target)) queue.push(target);
+		if (!record.dependencies || typeof record.dependencies !== "object" || Array.isArray(record.dependencies)) throw new HostProfileError("active_graph_invalid", "invalid reachable dependencies");
+		for (const target of Object.values(record.dependencies)) {
+			if (typeof target !== "string" || !target) throw new HostProfileError("active_graph_invalid", "invalid dependency target");
+			if (target !== "." && !reachable.has(target)) queue.push(target);
+		}
 	}
-	if (queue.length > 0) return [];
+	if (queue.length > 0) throw new HostProfileError("active_graph_invalid", "invalid reachable package map");
+	return {
+		records,
+		reachable
+	};
+}
+/**
+* Resolve only package identities reachable from the active pnpm importer.
+* Historical snapshots elsewhere in the lockfile are deliberately ignored;
+* two reachable peer variants of a critical package remain a duplicate and
+* are returned twice so evaluateHostLock can fail closed with a bounded code.
+*/
+function packageRowsFromActiveGraph(packageMapText, lockText, nodeModulesRoot) {
+	const { records, reachable } = activeGraphRecords(packageMapText);
+	if (!/^lockfileVersion: ['"]?9\.0['"]?\s*$/m.test(lockText) || !/^packages:(?:\s*\{\})?\s*$/m.test(lockText)) throw new HostProfileError("active_graph_invalid", "invalid pnpm lockfile shape");
 	const locked = packageRowsFromPnpmLock(lockText);
 	const rows = [];
 	for (const name of CRITICAL_NAMES) {
@@ -6511,8 +6552,8 @@ function packageRowsFromActiveGraph(packageMapText, lockText, nodeModulesRoot) {
 					continue;
 				}
 				try {
-					const modules = resolve(nodeModulesRoot);
-					const manifestPath = resolve(modules, record.url, "package.json");
+					const modules = realpathSync(nodeModulesRoot);
+					const manifestPath = realpathSync(resolve(modules, record.url, "package.json"));
 					if (!manifestPath.startsWith(`${modules}${sep}`)) {
 						rows.push({ name });
 						continue;
@@ -6545,6 +6586,117 @@ function packageRowsFromActiveGraph(packageMapText, lockText, nodeModulesRoot) {
 	}
 	return rows;
 }
+/** Read exact reachable critical rows without requiring Guard installation.
+* Used by target preflight before a legacy profile can be migrated.
+*/
+function readActiveHostGraph(runtimeRoot, profileRoot) {
+	const runtime = resolve(runtimeRoot);
+	const profile = resolve(profileRoot);
+	const mapPath = join(runtime, "node_modules", ".package-map.json");
+	const lockPath = join(runtime, "pnpm-lock.yaml");
+	const profileMapPath = join(profile, "node_modules", ".package-map.json");
+	const profileLockPath = join(profile, "pnpm-lock.yaml");
+	const runtimeRows = packageRowsFromActiveGraph(readFileSync(mapPath, "utf8"), readFileSync(lockPath, "utf8"), join(runtime, "node_modules"));
+	const profileRows = packageRowsFromActiveGraph(readFileSync(profileMapPath, "utf8"), readFileSync(profileLockPath, "utf8"), join(profile, "node_modules"));
+	const runtimeKeys = new Set(runtimeRows.map((row) => `${row.name}\u0000${row.version ?? ""}\u0000${row.integrity ?? ""}`));
+	return [...runtimeRows, ...profileRows.filter((row) => !runtimeKeys.has(`${row.name}\u0000${row.version ?? ""}\u0000${row.integrity ?? ""}`))];
+}
+function pathPresent(path$1) {
+	try {
+		lstatSync(path$1);
+		return true;
+	} catch (error) {
+		if (error.code === "ENOENT") return false;
+		throw error;
+	}
+}
+function within(root, path$1) {
+	return path$1.startsWith(`${root}${sep}`);
+}
+/** Same static lookup order as DSH; do not load/normalize/heal a daily profile. */
+function packageFromAnchor(anchor, name) {
+	for (const directory of createRequire(anchor).resolve.paths(name) ?? []) {
+		const candidate = join(directory, name);
+		if (pathPresent(candidate)) {
+			if (!existsSync(join(candidate, "package.json"))) throw new HostProfileError("target_bundle_unresolved", "invalid resolver-visible package");
+			return realpathSync(candidate);
+		}
+	}
+}
+/**
+* Pre-install inspection only. A fresh rc.1 Headless profile can use its two
+* installation-owned bundles without a private importer. Never extend this
+* absence rule to inject or runtime replay, which still call the strict reader.
+*/
+function inspectTargetHostGraph(runtimeRoot, profileRoot) {
+	const runtime = realpathSync(runtimeRoot);
+	const profile = realpathSync(profileRoot);
+	const mapPath = join(profile, "node_modules", ".package-map.json");
+	const lockPath = join(profile, "pnpm-lock.yaml");
+	if (pathPresent(mapPath) && pathPresent(lockPath)) return {
+		packages: readActiveHostGraph(runtime, profile),
+		profileGraph: { state: "active_importer" }
+	};
+	if (pathPresent(mapPath) || pathPresent(lockPath)) throw new HostProfileError("active_graph_missing", "partial profile importer");
+	if (pathPresent(join(profile, "node_modules")) || pathPresent(join(profile, ".dsh-module-fallback"))) throw new HostProfileError("target_profile_unmanaged_modules", "profile modules exist without an importer");
+	const manifestPath = join(profile, "package.json");
+	const manifest = readJsonObject(manifestPath, "profile_manifest_invalid");
+	for (const key of [
+		"dependencies",
+		"devDependencies",
+		"optionalDependencies",
+		"peerDependencies",
+		"bundledDependencies",
+		"bundleDependencies"
+	]) {
+		const value = manifest[key];
+		if (value !== void 0 && (!value || typeof value !== "object" || Object.keys(value).length !== 0 || Array.isArray(value) && !["bundledDependencies", "bundleDependencies"].includes(key))) throw new HostProfileError("target_profile_dependency_uninstalled", "profile declares dependencies without an importer");
+	}
+	const bundles = manifest.dsh?.profile?.bundles;
+	const names = ["@deepseek-ai/dsh-base", "@deepseek-ai/dsh-headless"];
+	if (!Array.isArray(bundles) || bundles.length !== names.length || bundles.some((name, index) => name !== names[index])) throw new HostProfileError("target_profile_bundles_unsupported", "not the installation-owned Headless bundle tuple");
+	const modules = realpathSync(join(runtime, "node_modules"));
+	const mapText = readFileSync(join(modules, ".package-map.json"), "utf8");
+	const lockText = readFileSync(join(runtime, "pnpm-lock.yaml"), "utf8");
+	const rows = packageRowsFromActiveGraph(mapText, lockText, modules);
+	const evaluation = evaluateHostLock(rows, {
+		platform: process.platform === "win32" ? "windows" : "posix",
+		profileKind: "headless"
+	});
+	if (evaluation.status !== "supported" || evaluation.cohortId !== "dsh-0.1.2-rc.1-core-v1") throw new HostProfileError("target_runtime_unsupported", "dependency-free inspection requires the audited rc.1 core");
+	const { records, reachable } = activeGraphRecords(mapText);
+	const launcher = realpathSync(join(modules, "@deepseek-ai", "dsh"));
+	const anchor = join(launcher, "package.json");
+	const host = readJsonObject(anchor, "target_runtime_unsupported");
+	const launcherId = [...reachable].filter((id) => id.startsWith("@deepseek-ai/dsh@"));
+	if (launcherId.length !== 1 || host.name !== "@deepseek-ai/dsh" || host.version !== "0.1.2-rc.1" || typeof records[launcherId[0]].url !== "string" || realpathSync(resolve(modules, records[launcherId[0]].url)) !== launcher || !within(modules, launcher)) throw new HostProfileError("target_runtime_unsupported", "launcher differs from the active runtime importer");
+	const bundleRows = names.map((name) => {
+		const packageRoot = packageFromAnchor(anchor, name);
+		const ids = [...reachable].filter((id) => id === name || id.startsWith(`${name}@`));
+		if (!packageRoot || !within(modules, packageRoot) || ids.length !== 1) throw new HostProfileError("target_bundle_unresolved", "bundle is not uniquely installation-owned");
+		const record = records[ids[0]];
+		if (typeof record.url !== "string" || realpathSync(resolve(modules, record.url)) !== packageRoot) throw new HostProfileError("target_bundle_origin_mismatch", "bundle differs from active runtime mapping");
+		const installed = readJsonObject(join(packageRoot, "package.json"), "target_bundle_invalid");
+		const patch = installed.dsh?.bundle?.patch;
+		const locked = packageRowsFromPnpmLock(lockText, [name]).filter((row) => row.version === host.version && row.integrity);
+		if (installed.name !== name || installed.version !== host.version || locked.length !== 1 || ids[0].split("(", 1)[0] !== `${name}@${host.version}` || typeof patch !== "string" || isAbsolute(patch) || !within(packageRoot, realpathSync(resolve(packageRoot, patch))) || !statSync(resolve(packageRoot, patch)).isFile()) throw new HostProfileError("target_bundle_invalid", "bundle identity or patch is not installation-owned");
+		return locked[0];
+	});
+	for (const name of [...CRITICAL_NAMES, ...names]) {
+		const visible = packageFromAnchor(manifestPath, name);
+		if (!visible) continue;
+		const ids = [...reachable].filter((id) => id === name || id.startsWith(`${name}@`));
+		if (ids.length !== 1 || typeof records[ids[0]].url !== "string" || !within(modules, visible) || realpathSync(resolve(modules, records[ids[0]].url)) !== visible) throw new HostProfileError("target_profile_module_shadow", "profile lookup differs from the audited installation");
+	}
+	return {
+		packages: rows,
+		profileGraph: {
+			state: "dependency_free_headless",
+			manifestSha256: createHash("sha256").update(readFileSync(manifestPath)).digest("hex"),
+			bundles: bundleRows
+		}
+	};
+}
 /** Read and validate the actual runtime graph plus the installed profile plugin. */
 function resolveActiveProfileHostLock(runtimeRoot, profileRoot, expectedPluginVersion) {
 	const runtime = resolve(runtimeRoot);
@@ -6563,8 +6715,7 @@ function resolveActiveProfileHostLock(runtimeRoot, profileRoot, expectedPluginVe
 		profileManifestPath,
 		pluginManifestPath
 	]) if (!existsSync(path$1)) throw new HostProfileError("active_graph_missing", `required active graph file is missing: ${path$1}`);
-	const runtimeRows = packageRowsFromActiveGraph(readFileSync(mapPath, "utf8"), readFileSync(lockPath, "utf8"), join(runtime, "node_modules"));
-	const profileRows = packageRowsFromActiveGraph(readFileSync(profileMapPath, "utf8"), readFileSync(profileLockPath, "utf8"), join(profile, "node_modules"));
+	const rows = readActiveHostGraph(runtime, profile);
 	const profileManifest = readJsonObject(profileManifestPath, "profile_manifest_invalid");
 	const installedPlugin = readJsonObject(pluginManifestPath, "installed_plugin_invalid");
 	const dependencies = profileManifest.dependencies;
@@ -6574,8 +6725,7 @@ function resolveActiveProfileHostLock(runtimeRoot, profileRoot, expectedPluginVe
 	if (installedPlugin.name !== "dsh-completion-guard" || installedPlugin.version !== expectedPluginVersion) throw new HostProfileError("profile_plugin_version_mismatch", "installed profile plugin identity does not match the generator version");
 	const profileKind = bundles.includes("@deepseek-ai/dsh-web-app") || bundles.includes("dshmarket") ? "web" : "headless";
 	const platform = process.platform === "win32" ? "windows" : "posix";
-	const runtimeKeys = new Set(runtimeRows.map((row) => `${row.name}\u0000${row.version ?? ""}\u0000${row.integrity ?? ""}`));
-	const evaluation = evaluateHostLock([...runtimeRows, ...profileRows.filter((row) => !runtimeKeys.has(`${row.name}\u0000${row.version ?? ""}\u0000${row.integrity ?? ""}`))], {
+	const evaluation = evaluateHostLock(rows, {
 		platform,
 		profileKind
 	});
@@ -6599,13 +6749,16 @@ function readJsonObject(path$1, code) {
 function yamlQuote(value) {
 	return JSON.stringify(value);
 }
-function renderManagedPatch(rows, platform, profileKind, activation) {
+function renderManagedPatch(rows, platform, profileKind, activation, runtimeRoot, profileRoot) {
 	const lines = [
 		HOST_LOCK_MARKER_BEGIN,
 		"- id: context-guard",
 		"  name: dsh-completion-guard",
 		"  config:"
 	];
+	lines.push("    hostLockPolicy: \"dsh-core/v1\"");
+	if (runtimeRoot) lines.push(`    hostLockRuntimeRoot: ${yamlQuote(runtimeRoot)}`);
+	if (profileRoot) lines.push(`    hostLockProfileRoot: ${yamlQuote(profileRoot)}`);
 	if (activation) lines.push(`    activation: ${yamlQuote(activation)}`);
 	lines.push(`    hostLockPlatform: ${yamlQuote(platform)}`);
 	lines.push(`    hostLockProfile: ${yamlQuote(profileKind)}`);
@@ -6632,16 +6785,20 @@ function stripManagedPatch(text) {
 }
 function activationFromPatch(text) {
 	const lines = text.split(/\r?\n/);
-	const starts = lines.flatMap((line, index) => /^- id:\s*["']?context-guard["']?\s*$/.test(line) ? [index] : []);
-	if (starts.length > 1) throw new HostProfileError("profile_patch_duplicate_target", "multiple unmanaged context-guard patches are ambiguous");
-	if (starts.length === 0) return void 0;
-	const start = starts[0];
-	let end = lines.length;
-	for (let index = start + 1; index < lines.length; index += 1) if (lines[index].startsWith("- ")) {
-		end = index;
-		break;
-	}
-	const entry = lines.slice(start + 1, end).join("\n");
+	const entries = lines.flatMap((line, index) => /^- id:\s*["']?context-guard["']?\s*$/.test(line) ? [index] : []).map((start) => {
+		let end = lines.length;
+		for (let index = start + 1; index < lines.length; index += 1) if (lines[index].startsWith("- ")) {
+			end = index;
+			break;
+		}
+		return lines.slice(start + 1, end).join("\n");
+	}).filter((entry$1) => {
+		const fields = entry$1.split(/\r?\n/).filter((line) => line.trim() && !line.trimStart().startsWith("#"));
+		return !(fields.length === 1 && /^ {2}disabled:\s*(?:true|false)\s*(?:#.*)?$/.test(fields[0]));
+	});
+	if (entries.length > 1) throw new HostProfileError("profile_patch_duplicate_target", "multiple unmanaged context-guard configurations are ambiguous");
+	if (entries.length === 0) return void 0;
+	const entry = entries[0];
 	const name = entry.match(/^\s{2}name:\s*(.+?)\s*$/m)?.[1]?.replace(/^['"]|['"]$/g, "");
 	if (name && name !== "dsh-completion-guard") throw new HostProfileError("profile_patch_name_mismatch", "context-guard patch targets a different package");
 	if (/^\s{4}hostLockPackages:\s*$/m.test(entry)) throw new HostProfileError("profile_patch_unmanaged_host_lock", "unmanaged hostLockPackages must be removed before managed injection");
@@ -6667,7 +6824,7 @@ function injectActiveProfileHostLock(input) {
 	const stripped = stripManagedPatch(existsSync(patchPath) ? readFileSync(patchPath, "utf8") : "");
 	const base = normalizeEmptyPatchBase(stripped.base);
 	const activation = activationFromPatch(base) ?? (stripped.prior ? activationFromManagedPatch(stripped.prior) : void 0);
-	const managed = renderManagedPatch(input.evaluation.packages.filter((row) => row.version && row.integrity), input.platform, input.profileKind, activation);
+	const managed = renderManagedPatch(input.evaluation.packages.filter((row) => row.version && row.integrity), input.platform, input.profileKind, activation, input.runtimeRoot, input.profileRoot);
 	const next = `${base.trimEnd()}${base.trim() ? "\n\n" : ""}${managed}`;
 	const temporary = `${patchPath}.context-guard-${process.pid}.tmp`;
 	writeFileSync(temporary, next, {
@@ -6699,7 +6856,8 @@ function parseYamlField(entry, index, value) {
 	].includes(indicator)) return parseYamlScalar(value);
 	const parts = [];
 	for (let cursor = index + 1; cursor < entry.length; cursor += 1) {
-		const blockLine = entry[cursor].match(/^\s{10}(.*)$/);
+		const indentation = (entry[index].match(/^\s*/)?.[0].length ?? 8) + 2;
+		const blockLine = entry[cursor].match(/* @__PURE__ */ new RegExp(`^\\s{${indentation}}(.*)$`));
 		if (!blockLine) break;
 		parts.push(blockLine[1]);
 	}
@@ -6759,7 +6917,24 @@ function hostLockContextFromComposedDump(text) {
 		...profileKind === "headless" || profileKind === "web" ? { profileKind } : {}
 	};
 }
-function verifyComposedHostLockDump(text, expected) {
+function verifyComposedHostLockDump(text, expected, roots) {
+	const lines = text.split(/\r?\n/);
+	const start = lines.findIndex((line) => /^- id:\s*["']?context-guard["']?\s*$/.test(line));
+	const tail = lines.slice(start + 1);
+	const end = tail.findIndex((line) => line.startsWith("- "));
+	const entry = end < 0 ? tail : tail.slice(0, end);
+	const settings = {};
+	for (const key of [
+		"hostLockPolicy",
+		"hostLockRuntimeRoot",
+		"hostLockProfileRoot"
+	]) {
+		const matches = entry.flatMap((line, index$1) => line.startsWith(`    ${key}:`) ? [index$1] : []);
+		if (matches.length !== 1) throw new HostProfileError("host_lock_readback_mismatch", "composed config host lock does not match the active graph");
+		const index = matches[0];
+		settings[key] = parseYamlField(entry, index, entry[index].slice(entry[index].indexOf(":") + 1));
+	}
+	if (settings.hostLockPolicy !== "dsh-core/v1" || !isAbsolute(settings.hostLockRuntimeRoot) || !isAbsolute(settings.hostLockProfileRoot) || roots && (resolve(settings.hostLockRuntimeRoot) !== resolve(roots.runtimeRoot) || resolve(settings.hostLockProfileRoot) !== resolve(roots.profileRoot))) throw new HostProfileError("host_lock_readback_mismatch", "composed config host lock does not match the active graph");
 	const context = hostLockContextFromComposedDump(text);
 	const actual = evaluateHostLock(hostLockRowsFromComposedDump(text), context);
 	if (actual.status !== "supported" || actual.digest !== expected.digest) throw new HostProfileError("host_lock_readback_mismatch", "composed config host lock does not match the active graph");
@@ -6977,4 +7152,4 @@ function proofEvidenceConstraints(evidence, obligation) {
 }
 
 //#endregion
-export { DEFAULT_HOST_LOCK as $, SUPPORTED_EVIDENCE_ADAPTERS as $t, decideTurnBoundary as A, bindingSatisfies as At, extractTextContent as B, extractArtifactPaths as Bt, createGitPrestateEnvelope as C, closingHint as Ct, revalidateGitPrestate as D, evidenceAvailabilityReason as Dt, parseGitCommandManifest as E, renderRecoveryPacket as Et, CAPTURE_V042_NOTICE as F, createProjection as Ft, isRunExecutable as G, canonicalRegistryBase as Gt, isDeterministicCheck as H, extractOperation as Ht, PROTOCOL_V3_NOTICE as I, rebindResponse as It, goalCompletionDenial as J, ACTION_MANIFEST_VERSION as Jt, parsePwshCommand as K, npmEscapedPackageName as Kt, deriveProjection as L, captureClause as Lt, isWholeTaskCompletionClaim as M, evidenceMatchesItem as Mt, latestAssistantText as N, isVerifyingCapability as Nt, verifiedLinearCommitReadback as O, itemDiagnosis as Ot, observeAssistantOutcome as P, currentContractDigest as Pt, BASE_HOST_PACKAGES as Q, STOP_PROTOCOL_VERSION as Qt, supersedeItem as R, captureItem as Rt, commitTreeSnapshotDigest as S, MIN_RECOVERY_CHAR_BUDGET as St, gitCommandMatchesTarget as T, recoveryDigest as Tt, withDurability as U, isInformationalMessage as Ut, extractToolSubject as V, extractMethod as Vt, canonicalArgvFromCommand as W, segmentClauses as Wt, ALPHA2_DSHMARKET_139_HOST_PACKAGES as X, SEMANTIC_ACTIONS as Xt, hasCurrentCertificate as Y, CERTIFICATE_VERSION as Yt, ALPHA2_HOST_PACKAGES as Z, STATEFUL_ACTIONS as Zt, resolveInstalledHostLock as _, effectuateBoundary as _t, createProofManifest as a, semanticActionFromText as an, bindLiveGoalCapability as at, GIT_COMMAND_MANIFEST_IDS as b, certifyCheckpoint as bt, sessionQuery as c, COMMAND_SURFACE_MANIFEST as cn, evaluateHostLock as ct, hostLockContextFromComposedDump as d, digestStrings as dn, RC1_HOST_PACKAGES as dt, actionCompatible as en, EXPECTED_HOST_PACKAGES as et, hostLockRowsFromComposedDump as f, normalizeClause as fn, ALPHA3_HOST_PACKAGES as ft, resolveActiveProfileHostLock as g, availableBoundaryQualifications as gt, packageRowsFromPnpmLock as h, sha256 as hn, classifyUserInteraction as ht, canonicalProjection as i, semanticActionFromCommand as in, bindExecutableIdentity as it, decideTurnStopping as j, evidenceCoverage as jt, classifyCompletionClaim as k, relevantEvidence as kt, validateProofManifest as l, validateManifest as ln, evaluateToolSurfaceCapability as lt, packageRowsFromActiveGraph as m, sanitizeUrl as mn, segmentAuthorityBlocks as mt, PROOF_PROTOCOL_VERSION as n, requestedTargetAuthorizesMutation as nn, HOST_CAPABILITY_PACKAGE_GROUPS as nt, proofDigest as o, validateActionManifest as on, evaluateExternalWaitCapability as ot, injectActiveProfileHostLock as p, sanitizeClauseText as pn, authorityCaptureCounts as pt, parseShellCommand as q, ACTION_MANIFEST as qt, bindProofToProjection as r, requestedTargetMatchesResolved as rn, HOST_COHORTS as rt, proofEvidenceConstraints as s, validateActionTarget as sn, evaluateHostCapability as st, PROOF_KINDS as t, isStatefulAction as tn, GOAL_HOST_PACKAGES as tt, HostProfileError as u, canonicalizePath as un, selectHostCohort as ut, verifyComposedHostLockDump as v, isCurrentAcceptedBoundary as vt, executeRevalidatedGitEffect as w, openItems$1 as wt, commitIndexSnapshotDigest as x, DEFAULT_RECOVERY_CHAR_BUDGET as xt, snapshotSessionEvents as y, qualifyBoundary as yt, evidenceFromPersistedToolResult as z, classifyClause as zt };
+export { ALPHA2_HOST_PACKAGES as $, SEMANTIC_ACTIONS as $t, verifiedLinearCommitReadback as A, evidenceAvailabilityReason as At, supersedeItem as B, captureClause as Bt, commitIndexSnapshotDigest as C, certifyCheckpoint as Ct, gitCommandMatchesTarget as D, openItems$1 as Dt, executeRevalidatedGitEffect as E, closingHint as Et, latestAssistantText as F, evidenceMatchesItem as Ft, withDurability as G, extractOperation as Gt, extractTextContent as H, classifyClause as Ht, observeAssistantOutcome as I, isVerifyingCapability as It, parsePwshCommand as J, canonicalRegistryBase as Jt, canonicalArgvFromCommand as K, isInformationalMessage as Kt, CAPTURE_V042_NOTICE as L, currentContractDigest as Lt, decideTurnBoundary as M, relevantEvidence as Mt, decideTurnStopping as N, bindingSatisfies as Nt, parseGitCommandManifest as O, recoveryDigest as Ot, isWholeTaskCompletionClaim as P, evidenceCoverage as Pt, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Q, CERTIFICATE_VERSION as Qt, PROTOCOL_V3_NOTICE as R, createProjection as Rt, GIT_COMMAND_MANIFEST_IDS as S, qualifyBoundary as St, createGitPrestateEnvelope as T, MIN_RECOVERY_CHAR_BUDGET as Tt, extractToolSubject as U, extractArtifactPaths as Ut, evidenceFromPersistedToolResult as V, captureItem as Vt, isDeterministicCheck as W, extractMethod as Wt, goalCompletionDenial as X, ACTION_MANIFEST as Xt, parseShellCommand as Y, npmEscapedPackageName as Yt, hasCurrentCertificate as Z, ACTION_MANIFEST_VERSION as Zt, readActiveHostGraph as _, sanitizeUrl as _n, segmentAuthorityBlocks as _t, createProofManifest as a, requestedTargetAuthorizesMutation as an, HOST_COHORTS as at, verifyComposedHostLockDump as b, effectuateBoundary as bt, sessionQuery as c, semanticActionFromText as cn, bindLiveGoalCapability as ct, hostLockContextFromComposedDump as d, COMMAND_SURFACE_MANIFEST as dn, evaluateHostLock as dt, STATEFUL_ACTIONS as en, BASE_HOST_PACKAGES as et, hostLockRowsFromComposedDump as f, validateManifest as fn, evaluateToolSurfaceCapability as ft, packageRowsFromPnpmLock as g, sanitizeClauseText as gn, authorityCaptureCounts as gt, packageRowsFromActiveGraph as h, normalizeClause as hn, ALPHA3_HOST_PACKAGES as ht, canonicalProjection as i, isStatefulAction as in, HOST_CAPABILITY_PACKAGE_GROUPS as it, classifyCompletionClaim as j, itemDiagnosis as jt, revalidateGitPrestate as k, renderRecoveryPacket as kt, validateProofManifest as l, validateActionManifest as ln, evaluateExternalWaitCapability as lt, inspectTargetHostGraph as m, digestStrings as mn, RC1_HOST_PACKAGES as mt, PROOF_PROTOCOL_VERSION as n, SUPPORTED_EVIDENCE_ADAPTERS as nn, EXPECTED_HOST_PACKAGES as nt, proofDigest as o, requestedTargetMatchesResolved as on, LEGACY_HOST_COHORTS as ot, injectActiveProfileHostLock as p, canonicalizePath as pn, selectHostCohort as pt, isRunExecutable as q, segmentClauses as qt, bindProofToProjection as r, actionCompatible as rn, GOAL_HOST_PACKAGES as rt, proofEvidenceConstraints as s, semanticActionFromCommand as sn, bindExecutableIdentity as st, PROOF_KINDS as t, STOP_PROTOCOL_VERSION as tn, DEFAULT_HOST_LOCK as tt, HostProfileError as u, validateActionTarget as un, evaluateHostCapability as ut, resolveActiveProfileHostLock as v, sha256 as vn, classifyUserInteraction as vt, commitTreeSnapshotDigest as w, DEFAULT_RECOVERY_CHAR_BUDGET as wt, snapshotSessionEvents as x, isCurrentAcceptedBoundary as xt, resolveInstalledHostLock as y, availableBoundaryQualifications as yt, deriveProjection as z, rebindResponse as zt };

package/dist/{index-DNF0OTi-.d.ts → index-BZYtgqlu.d.ts}

@@ -542,6 +542,11 @@ declare const ALPHA2_DSHMARKET_139_HOST_PACKAGES: PackageRow[];
 * rows, duplicate rows, or use identities outside every registered cohort
 * fail closed.
 */
+declare const LEGACY_HOST_COHORTS: readonly HostCohort[];
+/** Core-lock/v1 separates optional market identity from the audited DSH graph.
+* Legacy rows remain available for historical verification; they are never
+* silently re-labelled as a newly accepted core lock.
+*/
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
 * rc.2 audited package identities (first registry cohort). The audited
@@ -567,7 +572,7 @@ interface HostLockEvaluation {
   status: HostLockStatus;
   digest: string;
   goalAvailable: boolean;
-  reasonCode?: "host_lock_missing" | "host_lock_version_mismatch" | "host_lock_integrity_mismatch" | "host_lock_unknown_package" | "host_lock_duplicate_package" | "host_lock_goal_graph_incomplete" | "host_lock_goal_capability_mismatch" | "host_lock_cohort_mixed_graph" | "host_lock_cohort_unbound_identity" | "host_lock_cohort_platform_not_audited";
+  reasonCode?: "host_lock_migration_required" | "host_lock_installed_graph_drift" | "host_lock_missing" | "host_lock_version_mismatch" | "host_lock_integrity_mismatch" | "host_lock_unknown_package" | "host_lock_duplicate_package" | "host_lock_goal_graph_incomplete" | "host_lock_goal_capability_mismatch" | "host_lock_cohort_mixed_graph" | "host_lock_cohort_unbound_identity" | "host_lock_cohort_platform_not_audited";
   packages: PackageRow[];
   capabilities: Record<HostCapabilityId, HostCapabilityEvaluation>;
   platform?: HostPlatform;
@@ -900,7 +905,7 @@ declare class HostProfileError extends Error {
 * v9 lockfile. Multiple resolved versions are preserved as separate rows so
 * callers cannot silently select a nearest instance.
 */
-declare function packageRowsFromPnpmLock(text: string): PackageRow[];
+declare function packageRowsFromPnpmLock(text: string, names?: readonly string[]): PackageRow[];
 declare function resolveInstalledHostLock(moduleUrl?: string): HostLockEvaluation;
 /**
 * Resolve only package identities reachable from the active pnpm importer.
@@ -917,6 +922,24 @@ interface ActiveProfileHostLock {
   platform: HostPlatform;
   profileKind: HostProfileKind;
 }
+/** Read exact reachable critical rows without requiring Guard installation.
+* Used by target preflight before a legacy profile can be migrated.
+*/
+declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
+interface TargetHostGraph {
+  packages: PackageRow[];
+  profileGraph: {
+    state: "active_importer" | "dependency_free_headless";
+    manifestSha256?: string;
+    bundles?: PackageRow[];
+  };
+}
+/**
+* Pre-install inspection only. A fresh rc.1 Headless profile can use its two
+* installation-owned bundles without a private importer. Never extend this
+* absence rule to inject or runtime replay, which still call the strict reader.
+*/
+declare function inspectTargetHostGraph(runtimeRoot: string, profileRoot: string): TargetHostGraph;
 /** Read and validate the actual runtime graph plus the installed profile plugin. */
 declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string): ActiveProfileHostLock;
 /** Atomically inject a repeatable managed patch into the selected profile only. */
@@ -927,7 +950,7 @@ declare function hostLockContextFromComposedDump(text: string): {
   platform?: HostPlatform;
   profileKind?: HostProfileKind;
 };
-declare function verifyComposedHostLockDump(text: string, expected: HostLockEvaluation): HostLockEvaluation;
+declare function verifyComposedHostLockDump(text: string, expected: HostLockEvaluation, roots?: Pick<ActiveProfileHostLock, "runtimeRoot" | "profileRoot">): HostLockEvaluation;
 //#endregion
 //#region src/domain/manifest.d.ts
 /**
@@ -1137,4 +1160,4 @@ declare function latestAssistantText(events: readonly {
 //#region src/domain/supersession.d.ts
 declare function supersedeItem(items: Map<string, GuardItem>, oldId: string, replacement: GuardItem): boolean;
 //#endregion
-export { resolveInstalledHostLock as $, DeriveResult as $n, HostCapabilityEvaluation as $t, createProofManifest as A, ClassifiedClause as An, ActionManifest as Ar, hasCurrentCertificate as At, COMMAND_SURFACE_MANIFEST as B, BoundaryEffectuation as Bn, isStatefulAction as Br, PROTOCOL_V3_NOTICE as Bt, ProofKind as C, segmentAuthorityBlocks as Cn, TargetValue as Cr, ParsedShell as Ct, SessionQuery as D, RejectedBinding as Dn, PackageRow as Dr, parsePwshCommand as Dt, ProofSurface as E, CheckpointResult as En, createProjection as Er, isRunExecutable as Et, EvidenceFacetCoverage as F, extractArtifactPaths as Fn, STOP_PROTOCOL_VERSION as Fr, extractTextContent as Ft, ActiveProfileHostLock as G, availableBoundaryQualifications as Gn, validateActionManifest as Gr, BASE_HOST_PACKAGES as Gt, ManifestIssue as H, BoundaryRequest as Hn, requestedTargetMatchesResolved as Hr, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Ht, bindingSatisfies as I, extractMethod as In, SUPPORTED_EVIDENCE_ADAPTERS as Ir, extractToolSubject as It, hostLockRowsFromComposedDump as J, qualifyBoundary as Jn, digestStrings as Jr, ExecutableIdentity as Jt, HostProfileError as K, effectuateBoundary as Kn, validateActionTarget as Kr, DEFAULT_HOST_LOCK as Kt, evidenceCoverage as L, extractOperation as Ln, SemanticAction as Lr, isDeterministicCheck as Lt, proofEvidenceConstraints as M, captureClause as Mn, CERTIFICATE_VERSION as Mr, ToolResultInput as Mt, sessionQuery as N, captureItem as Nn, SEMANTIC_ACTIONS as Nr, ToolSubject as Nt, bindProofToProjection as O, certifyCheckpoint as On, ACTION_MANIFEST as Or, parseShellCommand as Ot, validateProofManifest as P, classifyClause as Pn, STATEFUL_ACTIONS as Pr, evidenceFromPersistedToolResult as Pt, resolveActiveProfileHostLock as Q, DeriveConfig as Qn, sha256 as Qr, HOST_COHORTS as Qt, evidenceMatchesItem as R, isInformationalMessage as Rn, StatefulAction as Rr, withDurability as Rt, PROOF_PROTOCOL_VERSION as S, authorityCaptureCounts as Sn, TargetTuple as Sr, CanonicalCommandSurface as St, ProofObligation as T, classifyUserInteraction as Tn, WaitAuthorization as Tr, canonicalArgvFromCommand as Tt, OperationVerbEntry as U, GoalActivationState as Un, semanticActionFromCommand as Ur, ALPHA2_HOST_PACKAGES as Ut, CommandSurfaceManifest as V, BoundaryQualification as Vn, requestedTargetAuthorizesMutation as Vr, deriveProjection as Vt, validateManifest as W, GoalBoundaryAccess as Wn, semanticActionFromText as Wr, AuditedExecutable as Wt, packageRowsFromActiveGraph as X, BoundaryQualificationKind as Xn, sanitizeClauseText as Xr, GOAL_HOST_PACKAGES as Xt, injectActiveProfileHostLock as Y, BoundaryDisposition as Yn, normalizeClause as Yr, ExecutableIdentityBinding as Yt, packageRowsFromPnpmLock as Z, DeferAuthorization as Zn, sanitizeUrl as Zr, HOST_CAPABILITY_PACKAGE_GROUPS as Zt, openItems as _, selectHostCohort as _n, GuardProjection as _r, gitCommandMatchesTarget as _t, classifyCompletionClaim as a, HostLockContext as an, EvidenceRole as ar, GitCommandParseResult as at, ALPHA3_HOST_PACKAGES as b, AuthorityBlockKind as bn, TargetCaptureReasonCode as br, verifiedLinearCommitReadback as bt, isWholeTaskCompletionClaim as c, HostPlatform as cn, GoalRef as cr, GitEffectRunner as ct, snapshotSessionEvents as d, bindExecutableIdentity as dn, GuardEvidence as dr, GitTargetIdentity as dt, HostCapabilityId as en, DeriveScope as er, verifyComposedHostLockDump as et, RC1_HOST_PACKAGES as f, bindLiveGoalCapability as fn, GuardIntegrity as fr, LinearCommitReadback as ft, closingHint as g, evaluateToolSurfaceCapability as gn, GuardOperation as gr, executeRevalidatedGitEffect as gt, RecoveryOptions as h, evaluateHostLock as hn, GuardItemStatus as hr, createGitPrestateEnvelope as ht, TurnStoppingDecision as i, HostCohortSelectionReason as in, EvidenceParseStatus as ir, GitCommandManifest as it, proofDigest as j, ClauseSegment as jn, ActionSpec as jr, ToolCallInput as jt, canonicalProjection as k, CaptureScope as kn, ACTION_MANIFEST_VERSION as kr, goalCompletionDenial as kt, latestAssistantText as l, HostProfileKind as ln, GuardBoundary as lr, GitPrestateCheck as lt, MIN_RECOVERY_CHAR_BUDGET as m, evaluateHostCapability as mn, GuardItemKind as mr, commitTreeSnapshotDigest as mt, AssistantOutcomeObservation as n, HostCohort as nn, EvidenceBinding as nr, GitAdapterAction as nt, decideTurnBoundary as o, HostLockEvaluation as on, ExpectedTransition as or, GitCommandRejected as ot, DEFAULT_RECOVERY_CHAR_BUDGET as p, evaluateExternalWaitCapability as pn, GuardItem as pr, commitIndexSnapshotDigest as pt, hostLockContextFromComposedDump as q, isCurrentAcceptedBoundary as qn, canonicalizePath as qr, EXPECTED_HOST_PACKAGES as qt, CompletionDisposition as r, HostCohortSelection as rn, EvidenceOutcome as rr, GitCommandAccepted as rt, decideTurnStopping as s, HostLockStatus as sn, ExternalOperation as sr, GitEffectExecution as st, supersedeItem as t, HostCapabilityRequest as tn, DerivedEnvelope as tr, GIT_COMMAND_MANIFEST_IDS as tt, observeAssistantOutcome as u, HostToolSurface as un, GuardCheckpoint as ur, GitPrestateEnvelope as ut, recoveryDigest as v, currentContractDigest as vn, HostStatus as vr, parseGitCommandManifest as vt, ProofManifest as w, UserInteractionKind as wn, VerificationContract as wr, ShellParseStatus as wt, PROOF_KINDS as x, AuthorityKind as xn, TargetCaptureStatus as xr, CanonicalArgv as xt, renderRecoveryPacket as y, AuthorityBlock as yn, PersistenceAuthorization as yr, revalidateGitPrestate as yt, isVerifyingCapability as z, segmentClauses as zn, actionCompatible as zr, CAPTURE_V042_NOTICE as zt };
+export { packageRowsFromPnpmLock as $, BoundaryDisposition as $n, normalizeClause as $r, GOAL_HOST_PACKAGES as $t, createProofManifest as A, CheckpointResult as An, createProjection as Ar, parsePwshCommand as At, COMMAND_SURFACE_MANIFEST as B, extractMethod as Bn, SUPPORTED_EVIDENCE_ADAPTERS as Br, isDeterministicCheck as Bt, ProofKind as C, AuthorityBlock as Cn, PersistenceAuthorization as Cr, verifiedLinearCommitReadback as Ct, SessionQuery as D, segmentAuthorityBlocks as Dn, TargetValue as Dr, ShellParseStatus as Dt, ProofSurface as E, authorityCaptureCounts as En, TargetTuple as Er, ParsedShell as Et, EvidenceFacetCoverage as F, ClauseSegment as Fn, ActionSpec as Fr, ToolResultInput as Ft, ActiveProfileHostLock as G, BoundaryQualification as Gn, requestedTargetAuthorizesMutation as Gr, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Gt, ManifestIssue as H, isInformationalMessage as Hn, StatefulAction as Hr, CAPTURE_V042_NOTICE as Ht, bindingSatisfies as I, captureClause as In, CERTIFICATE_VERSION as Ir, ToolSubject as It, hostLockContextFromComposedDump as J, GoalBoundaryAccess as Jn, semanticActionFromText as Jr, BASE_HOST_PACKAGES as Jt, HostProfileError as K, BoundaryRequest as Kn, requestedTargetMatchesResolved as Kr, ALPHA2_HOST_PACKAGES as Kt, evidenceCoverage as L, captureItem as Ln, SEMANTIC_ACTIONS as Lr, evidenceFromPersistedToolResult as Lt, proofEvidenceConstraints as M, certifyCheckpoint as Mn, ACTION_MANIFEST as Mr, goalCompletionDenial as Mt, sessionQuery as N, CaptureScope as Nn, ACTION_MANIFEST_VERSION as Nr, hasCurrentCertificate as Nt, bindProofToProjection as O, UserInteractionKind as On, VerificationContract as Or, canonicalArgvFromCommand as Ot, validateProofManifest as P, ClassifiedClause as Pn, ActionManifest as Pr, ToolCallInput as Pt, packageRowsFromActiveGraph as Q, qualifyBoundary as Qn, digestStrings as Qr, ExecutableIdentityBinding as Qt, evidenceMatchesItem as R, classifyClause as Rn, STATEFUL_ACTIONS as Rr, extractTextContent as Rt, PROOF_PROTOCOL_VERSION as S, currentContractDigest as Sn, HostStatus as Sr, revalidateGitPrestate as St, ProofObligation as T, AuthorityKind as Tn, TargetCaptureStatus as Tr, CanonicalCommandSurface as Tt, OperationVerbEntry as U, segmentClauses as Un, actionCompatible as Ur, PROTOCOL_V3_NOTICE as Ut, CommandSurfaceManifest as V, extractOperation as Vn, SemanticAction as Vr, withDurability as Vt, validateManifest as W, BoundaryEffectuation as Wn, isStatefulAction as Wr, deriveProjection as Wt, injectActiveProfileHostLock as X, effectuateBoundary as Xn, validateActionTarget as Xr, EXPECTED_HOST_PACKAGES as Xt, hostLockRowsFromComposedDump as Y, availableBoundaryQualifications as Yn, validateActionManifest as Yr, DEFAULT_HOST_LOCK as Yt, inspectTargetHostGraph as Z, isCurrentAcceptedBoundary as Zn, canonicalizePath as Zr, ExecutableIdentity as Zt, openItems as _, evaluateExternalWaitCapability as _n, GuardItem as _r, commitTreeSnapshotDigest as _t, classifyCompletionClaim as a, HostCohort as an, DerivedEnvelope as ar, GitAdapterAction as at, ALPHA3_HOST_PACKAGES as b, evaluateToolSurfaceCapability as bn, GuardOperation as br, gitCommandMatchesTarget as bt, isWholeTaskCompletionClaim as c, HostLockContext as cn, EvidenceParseStatus as cr, GitCommandParseResult as ct, snapshotSessionEvents as d, HostPlatform as dn, ExternalOperation as dr, GitEffectRunner as dt, sanitizeClauseText as ei, HOST_CAPABILITY_PACKAGE_GROUPS as en, BoundaryQualificationKind as er, readActiveHostGraph as et, RC1_HOST_PACKAGES as f, HostProfileKind as fn, GoalRef as fr, GitPrestateCheck as ft, closingHint as g, bindLiveGoalCapability as gn, GuardIntegrity as gr, commitIndexSnapshotDigest as gt, RecoveryOptions as h, bindExecutableIdentity as hn, GuardEvidence as hr, LinearCommitReadback as ht, TurnStoppingDecision as i, HostCapabilityRequest as in, DeriveScope as ir, GIT_COMMAND_MANIFEST_IDS as it, proofDigest as j, RejectedBinding as jn, PackageRow as jr, parseShellCommand as jt, canonicalProjection as k, classifyUserInteraction as kn, WaitAuthorization as kr, isRunExecutable as kt, latestAssistantText as l, HostLockEvaluation as ln, EvidenceRole as lr, GitCommandRejected as lt, MIN_RECOVERY_CHAR_BUDGET as m, LEGACY_HOST_COHORTS as mn, GuardCheckpoint as mr, GitTargetIdentity as mt, AssistantOutcomeObservation as n, sha256 as ni, HostCapabilityEvaluation as nn, DeriveConfig as nr, resolveInstalledHostLock as nt, decideTurnBoundary as o, HostCohortSelection as on, EvidenceBinding as or, GitCommandAccepted as ot, DEFAULT_RECOVERY_CHAR_BUDGET as p, HostToolSurface as pn, GuardBoundary as pr, GitPrestateEnvelope as pt, TargetHostGraph as q, GoalActivationState as qn, semanticActionFromCommand as qr, AuditedExecutable as qt, CompletionDisposition as r, HostCapabilityId as rn, DeriveResult as rr, verifyComposedHostLockDump as rt, decideTurnStopping as s, HostCohortSelectionReason as sn, EvidenceOutcome as sr, GitCommandManifest as st, supersedeItem as t, sanitizeUrl as ti, HOST_COHORTS as tn, DeferAuthorization as tr, resolveActiveProfileHostLock as tt, observeAssistantOutcome as u, HostLockStatus as un, ExpectedTransition as ur, GitEffectExecution as ut, recoveryDigest as v, evaluateHostCapability as vn, GuardItemKind as vr, createGitPrestateEnvelope as vt, ProofManifest as w, AuthorityBlockKind as wn, TargetCaptureReasonCode as wr, CanonicalArgv as wt, PROOF_KINDS as x, selectHostCohort as xn, GuardProjection as xr, parseGitCommandManifest as xt, renderRecoveryPacket as y, evaluateHostLock as yn, GuardItemStatus as yr, executeRevalidatedGitEffect as yt, isVerifyingCapability as z, extractArtifactPaths as zn, STOP_PROTOCOL_VERSION as zr, extractToolSubject as zt };