dsh-completion-guard 0.6.0 → 0.6.1

package/dist/{index-BJPVGdg9.d.ts → index-C_N6DaSF.d.ts}

@@ -121,7 +121,7 @@ interface InterpretOptions {
   coordinationSplit?: boolean;
 }
 /** What one scope does with the action it names. */
-type DirectiveClass = "directive" | "prohibition" | "conditional" | "informational" | "narrative";
+type DirectiveClass = "directive" | "prohibition" | "conditional" | "informational" | "narrative" | "unresolved";
 /** Who is expected to perform the action. */
 type Executee = "agent" | "user" | "unresolved";
 /** How the scope's authority reads. */
@@ -541,6 +541,37 @@ interface VerificationContract {
   * on the same canonical subject — mentioning the file is not enough. */
   operation?: GuardOperation;
 }
+/**
+* 0.6.1 (W060-01): the durable identity of one non-text root input part. The
+* asset obligation binds the exact message sequence, part index and content
+* digest of the ORIGINAL input — never a model description of it — so an
+* interpretation can only ever be recorded against the asset it interpreted.
+*/
+interface AssetObligation {
+  /** Sequence of the root message that carried the part. */
+  messageSeq: number;
+  /** Index of the non-text part inside that message. */
+  partIndex: number;
+  /** sha256 of the canonical JSON of the part: the media identity. */
+  mediaSha256: string;
+}
+/**
+* 0.6.1 (W060-01): one durable per-asset interpretation record, derived from a
+* confirmed `context_guard_interpret` result that replay re-validated against
+* the contract (call arguments, item, revision, asset identity). It is the
+* model's explicit declaration that it read THAT obligation's asset in THAT
+* host turn; it never proves the interpretation is correct, and it closes
+* nothing by itself — an asset obligation closes only when a delivery of the
+* interpretation's own turn exists. Absent from logs written before this
+* entrypoint existed, which is what keeps upgrade replays from retroactively
+* interpreting old assets.
+*/
+interface AssetInterpretationFact {
+  itemId: string;
+  resultSeq: number;
+  /** The host turn the interpretation happened in. */
+  turn: number;
+}
 interface GuardItem {
   id: string;
   revision: number;
@@ -625,6 +656,23 @@ interface GuardItem {
   * keeps its own history.
   */
   clarifiesItemId?: string;
+  /**
+  * 0.6.1 (W060-01 review round 10): set on the sub-items created when an
+  * unresolved clause is superseded by its recorded interpretation
+  * partition. Names the superseded unresolved obligation; the information
+  * sub-items close through the interpreting turn's delivery, while unknown
+  * and undeclared sub-spans stay pending.
+  */
+  interpretedFromUnresolved?: string;
+  /**
+  * 0.6.1 (W060-01): present only on an asset-interpretation obligation. The
+  * item's information slot closes through the SAME trusted-delivery fact as
+  * any inquiry of its turn; the closing answers the request that carried the
+  * asset, never the correctness of the interpretation, and visual-comparison
+  * proof (strict surface 'visual') stays a separate obligation. Absent on
+  * every other item, so legacy and ordinary text items are unchanged.
+  */
+  asset?: AssetObligation;
 }
 interface GuardEvidence {
   id: string;
@@ -850,6 +898,12 @@ interface GuardProjection {
   */
   trustedSelections: TrustedSelection[];
   /**
+  * 0.6.1 (W060-01): the derived per-asset interpretation records (bounded to
+  * the last 64), one per confirmed `context_guard_interpret` result. Derived,
+  * never written by a caller.
+  */
+  interpretationFacts: AssetInterpretationFact[];
+  /**
   * 0.6.0 C07 sandbox approvals, derived from the host's own
   * `approval/asked` + `approval/decided` audit pair (last 16). Recorded for
   * provenance only: an approval is never a target authority.
@@ -1728,7 +1782,7 @@ interface GitEffectRunner {
 }
 interface GitEffectExecution {
   status: "executed" | "rejected";
-  reasonCode?: GitPrestateCheck["reasonCode"] | "repository_missing";
+  reasonCode?: GitPrestateCheck["reasonCode"] | "repository_missing" | "effect_already_applied";
 }
 interface LinearCommitReadback {
   /** Commit reached after the guarded effect. */
@@ -1890,6 +1944,8 @@ interface FirstStepPreviewInput {
   boundaryPresent: boolean;
   /** The session is a delegated/subagent session, never a root conversation. */
   delegated: boolean;
+  /** 0.6.1 (W060-05): the effective responsibility tier shapes the guidance. */
+  policy?: "standard" | "strict" | "release";
 }
 /**
 * Pure decision for the first-step activation injection when protection is enabled. The
@@ -1905,10 +1961,16 @@ interface FirstStepPreviewInput {
 declare function previewFirstStepInjection(input: FirstStepPreviewInput, claimedRealInput: boolean): FirstStepInjection | undefined;
 /**
 * Compact first-step guidance: protection has started, what it protects, and
-* the working order for stateful actions. It is not a task, asks no question,
-* and contains no recovery wording.
+* when the guarded producer path is needed. 0.6.1 (W060-05): the stateful
+* workflow is stated CONDITIONALLY — only an obligation whose own clause
+* demands a certified stateful action runs through prepare/producer/checkpoint.
+* The 0.6.0 text demanded that order for every stateful action unconditionally,
+* which ordinary business work correctly read as a Guard approval gate.
+* Ordinary answers, investigations, and ordinary tool work are never gated, and
+* missing Guard evidence is never a reason to repeat a completed action.
 */
-declare const FIRST_STEP_GUIDANCE = "Context Guard is now protecting this session: requirements from your messages stay open until they are certified with matching durable evidence. Before a stateful action (write, install, commit, push, publish, restart), call context_guard_prepare to see the supported command shape and required resolution/effect/state order; collect evidence with the guarded tools, then close items with context_guard_checkpoint. Ordinary answers and investigations need no certification.";
+declare function firstStepGuidance(policy?: "standard" | "strict" | "release"): string;
+declare const FIRST_STEP_GUIDANCE: string;
 /**
 * Lifecycle phase derived from durable facts. `enabled` is the log-derived
 * enablement (`always`, or the explicit `on`/`off` command sequence), and
@@ -2357,4 +2419,4 @@ declare function latestAssistantText(events: readonly {
 //#region src/domain/supersession.d.ts
 declare function supersedeItem(items: Map<string, GuardItem>, oldId: string, replacement: GuardItem): boolean;
 //#endregion
-export { canonicalProjection as $, requestedTargetAuthorizesMutation as $a, TargetTuple as $i, BASE_HOST_PACKAGES as $n, parseConfirmationMessage as $r, GitCommandRejected as $t, openItems as A, kindOfScope as Aa, DerivedEnvelope as Ai, isDeterministicCheck as An, HostVersionStatus as Ar, claimedBatchHasRealRootInput as At, ProofHostSurface as B, CERTIFICATE_VERSION as Ba, GuardEvidence as Bi, relevantEvidence as Bn, currentContractDigest as Br, inspectTargetHostGraph as Bt, RC015_RC2_HOST_PACKAGES as C, Executee as Ca, BoundaryDisposition as Ci, hasCurrentCertificate as Cn, evaluateExternalWaitCapability as Cr, OperationVerbEntry as Ct, MIN_RECOVERY_CHAR_BUDGET as D, interpretMessage as Da, DeriveConfig as Di, evidenceFromPersistedToolResult as Dn, hostVersionFromPackages as Dr, FirstStepInjection as Dt, DEFAULT_RECOVERY_CHAR_BUDGET as E, interpretClause as Ea, DelegationRef as Ei, ToolSubject as En, evaluateToolSurfaceCapability as Er, FIRST_STEP_GUIDANCE as Et, PROOF_KINDS as F, ACTION_MANIFEST as Fa, ExpectedTransition as Fi, TaskKind as Fn, SUPPORTED_HOST_VERSIONS as Fr, TargetHostGraph as Ft, ProofManifestV2 as G, STOP_PROTOCOL_VERSION_V2 as Ga, GuardOperation as Gi, PROTOCOL_V5_NOTICE as Gn, segmentAuthorityBlocks as Gr, resolveInstalledHostLock as Gt, ProofKindCapability as H, SEMANTIC_ACTIONS as Ha, GuardItem as Hi, DEFAULT_DELEGATION_TOOL_NAMES as Hn, AuthorityBlockKind as Hr, packageRowsFromPnpmLock as Ht, PROOF_KINDS_V2 as I, ACTION_MANIFEST_VERSION as Ia, ExternalOperation as Ii, UnifiedItemDiagnosis as In, compareHostVersions as Ir, combineHostPolicy as It, ProofSurface as J, StatefulAction as Ja, MessageCoverage as Ji, ACTIVE_HOST_COHORT_IDS as Jn, classifyTaskIntent as Jr, GIT_COMMAND_TEMPLATES as Jt, ProofObligation as K, SUPPORTED_EVIDENCE_ADAPTERS as Ka, GuardProjection as Ki, deriveProjection as Kn, TaskIntent as Kr, verifyComposedHostLockDump as Kt, PROOF_MANIFEST_DOMAIN_V2 as L, ActionManifest as La, GoalRef as Li, deriveItemDiagnosis as Ln, evaluateMinimumHostVersion as Lr, hostLockContextFromComposedDump as Lt, renderRecoveryPacket as M, namedActions as Ma, EvidenceOutcome as Mi, CertificationSupport as Mn, MIN_SUPPORTED_HOST_VERSION as Mr, previewFirstStepInjection as Mt, ALPHA3_HOST_PACKAGES as N, semanticActionOfScope as Na, EvidenceParseStatus as Ni, DiagnosisNextAction as Nn, ParsedHostVersion as Nr, ActiveProfileHostLock as Nt, RecoveryOptions as O, isExecutableItem as Oa, DeriveResult as Oi, extractTextContent as On, selectHostCohort as Or, FirstStepPreviewInput as Ot, PROOF_CAPABILITY_MATRIX as P, statefulActionsOfScope as Pa, EvidenceRole as Pi, Repairability as Pn, SUPPORTED_HOST_RANGE as Pr, HostProfileError as Pt, bindProofV2ToProjection as Q, requestedIdentityKey as Qa, TargetCaptureStatus as Qi, AuditedExecutable as Qn, isFrozenV042RebindResponse as Qr, GitCommandParseResult as Qt, PROOF_PROTOCOL_VERSION as R, ActionSpec as Ra, GuardBoundary as Ri, evidenceAvailabilityReason as Rn, parseHostVersion as Rr, hostLockRowsFromComposedDump as Rt, snapshotSessionEvents as S, DirectiveClass as Sa, BindingActionClosure as Si, goalCompletionDenial as Sn, bindLiveGoalCapability as Sr, ManifestIssue as St, RC1_HOST_PACKAGES as T, ScopeInterpretation as Ta, DeferAuthorization as Ti, ToolResultInput as Tn, evaluateHostLock as Tr, ClaimedMessage as Tt, ProofKindV2 as U, STATEFUL_ACTIONS as Ua, GuardItemKind as Ui, PROTOCOL_V3_NOTICE as Un, AuthorityKind as Ur, readActiveHostGraph as Ut, ProofKind as V, CERTIFICATE_VERSION_V2 as Va, GuardIntegrity as Vi, CAPTURE_V042_NOTICE as Vn, AuthorityBlock as Vr, packageRowsFromActiveGraph as Vt, ProofManifest as W, STOP_PROTOCOL_VERSION as Wa, GuardItemStatus as Wi, PROTOCOL_V4_NOTICE as Wn, authorityCaptureCounts as Wr, resolveActiveProfileHostLock as Wt, SessionQueryV2 as X, boundedArtifactChoiceMatches as Xa, SourceSpan as Xi, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Xn, CONFIRM_LINE_PATTERN as Xr, GitCommandAccepted as Xt, SessionQuery as Y, actionCompatible as Ya, PersistenceAuthorization as Yi, ACTIVE_HOST_LAUNCHER_VERSION as Yn, classifyUserInteraction as Yr, GitAdapterAction as Yt, bindProofToProjection as Z, isStatefulAction as Za, TargetCaptureReasonCode as Zi, ALPHA2_HOST_PACKAGES as Zn, ParsedConfirmation as Zr, GitCommandManifest as Zt, progressFingerprint as _, proposeRebindV042 as _a, GoalBoundaryAccess as _i, ShellParseStatus as _n, HostPlatform as _r, evidenceCoverage as _t, NO_PROGRESS_RECORD_PREFIX as a, PackageRow as aa, captureClause as ai, LinearCommitReadback as an, canonicalizePath as ao, HOST_CAPABILITY_PACKAGE_GROUPS as ar, proofEvidenceConstraints as at, SessionApiError as b, replayRebindResult as ba, isCurrentAcceptedBoundary as bi, parsePwshCommand as bn, LEGACY_HOST_COHORTS as br, COMMAND_SURFACE_MANIFEST as bt, classifyCompletionClaim as c, ReleaseOperation as ca, extractArtifactPaths as ci, createGitPrestateEnvelope as cn, sanitizeClauseText as co, HostCapabilityEvaluation as cr, proofV2Rejection as ct, decisionBoundaryKey as d, ProposeOutcome as da, isInformationalMessage as di, parseGitCommandManifest as dn, HostCohort as dr, sessionQuery as dt, TargetValue as ea, CheckpointResult as ei, GitEffectExecution as en, requestedTargetMatchesResolved as eo, DEFAULT_HOST_LOCK as er, createProofManifest as et, isRootPauseRequest as f, RebindArgs as fa, segmentClauses as fi, revalidateGitPrestate as fn, HostCohortSelection as fr, sessionQueryV2 as ft, observeAssistantOutcome as g, proposeRebindOutcome as ga, GoalActivationState as gi, ParsedShell as gn, HostLockStatus as gr, bindingSatisfies as gt, latestRootInstruction as h, proposeRebind as ha, BoundaryRequest as hi, CanonicalCommandSurface as hn, HostLockEvaluation as hr, EvidenceFacetCoverage as ht, CompletionDisposition as i, createProjection as ia, ClauseSegment as ii, GitTargetIdentity as in, validateActionTarget as io, GOAL_HOST_PACKAGES as ir, proofDigestV2 as it, recoveryDigest as j, maskCodeSpans as ja, EvidenceBinding as ji, withDurability as jn, LATEST_SUPPORTED_HOST_VERSION as jr, lifecyclePhase as jt, closingHint as k, isOpenObligation as ka, DeriveScope as ki, extractToolSubject as kn, HostVersionDecision as kr, LifecyclePhase as kt, decideTurnBoundary as l, ReleaseSettlement as la, extractMethod as li, executeRevalidatedGitEffect as ln, sanitizeUrl as lo, HostCapabilityId as lr, requiredSubjectsOf as lt, latestAssistantText as m, confirmRebind as ma, BoundaryQualification as mi, CanonicalArgv as mn, HostLockContext as mr, validateProofManifestV2 as mt, AssistantOutcomeObservation as n, WaitAuthorization as na, certifyCheckpoint as ni, GitPrestateCheck as nn, semanticActionFromText as no, ExecutableIdentity as nr, proofCapabilityReport as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, ReleaseGateDecision as oa, captureItem as oi, commitIndexSnapshotDigest as on, digestStrings as oo, HOST_COHORTS as or, proofHostSurfacesOf as ot, isWholeTaskCompletionClaim as p, RebindProposal as pa, BoundaryEffectuation as pi, verifiedLinearCommitReadback as pn, HostCohortSelectionReason as pr, validateProofManifest as pt, ProofObligationV2 as q, SemanticAction as qa, HostStatus as qi, ACTIVE_HOST_COHORT_ID as qn, UserInteractionKind as qr, GIT_COMMAND_MANIFEST_IDS as qt, CONTROL_RECORD_PREFIX as r, WorkUnit as ra, CaptureScope as ri, GitPrestateEnvelope as rn, validateActionManifest as ro, ExecutableIdentityBinding as rr, proofDigest as rt, TurnStoppingDecision as s, ReleaseObservedIdentity as sa, classifyClause as si, commitTreeSnapshotDigest as sn, normalizeClause as so, HostAuditProvenance as sr, proofOperationMatches as st, supersedeItem as t, VerificationContract as ta, RejectedBinding as ti, GitEffectRunner as tn, semanticActionFromCommand as to, EXPECTED_HOST_PACKAGES as tr, createProofManifestV2 as tt, decideTurnStopping as u, BoundedSource as ua, extractOperation as ui, gitCommandMatchesTarget as un, sha256 as uo, HostCapabilityRequest as ur, scopeCoverageDigest as ut, SESSION_API_UNSUPPORTED as v, rebindAttemptKey as va, availableBoundaryQualifications as vi, canonicalArgvFromCommand as vn, HostProfileKind as vr, evidenceMatchesItem as vt, RC015_HOST_PACKAGES as w, InterpretOptions as wa, BoundaryQualificationKind as wi, ToolCallInput as wn, evaluateHostCapability as wr, validateManifest as wt, V3SessionLike as x, AuthorityDisposition as xa, qualifyBoundary as xi, parseShellCommand as xn, bindExecutableIdentity as xr, CommandSurfaceManifest as xt, SESSION_EVENT_ENVELOPE_INVALID as y, rebindResponse as ya, effectuateBoundary as yi, isRunExecutable as yn, HostToolSurface as yr, isVerifyingCapability as yt, PROOF_PROTOCOL_VERSION_V2 as z, BOUNDED_ARTIFACT_TYPES as za, GuardCheckpoint as zi, itemDiagnosis as zn, satisfiesSupportedHostRange as zr, injectActiveProfileHostLock as zt };
+export { canonicalProjection as $, boundedArtifactChoiceMatches as $a, SourceSpan as $i, AuditedExecutable as $n, isFrozenV042RebindResponse as $r, GitCommandParseResult as $t, openItems as A, interpretMessage as Aa, DeriveConfig as Ai, extractToolSubject as An, HostVersionDecision as Ar, claimedBatchHasRealRootInput as At, ProofHostSurface as B, ActionManifest as Ba, GoalRef as Bi, itemDiagnosis as Bn, satisfiesSupportedHostRange as Br, injectActiveProfileHostLock as Bt, RC015_RC2_HOST_PACKAGES as C, replayRebindResult as Ca, AssetInterpretationFact as Ci, goalCompletionDenial as Cn, bindLiveGoalCapability as Cr, OperationVerbEntry as Ct, MIN_RECOVERY_CHAR_BUDGET as D, InterpretOptions as Da, BoundaryQualificationKind as Di, ToolSubject as Dn, evaluateToolSurfaceCapability as Dr, FirstStepInjection as Dt, DEFAULT_RECOVERY_CHAR_BUDGET as E, Executee as Ea, BoundaryDisposition as Ei, ToolResultInput as En, evaluateHostLock as Er, FIRST_STEP_GUIDANCE as Et, PROOF_KINDS as F, namedActions as Fa, EvidenceOutcome as Fi, Repairability as Fn, SUPPORTED_HOST_RANGE as Fr, HostProfileError as Ft, ProofManifestV2 as G, SEMANTIC_ACTIONS as Ga, GuardItem as Gi, PROTOCOL_V4_NOTICE as Gn, authorityCaptureCounts as Gr, resolveActiveProfileHostLock as Gt, ProofKindCapability as H, BOUNDED_ARTIFACT_TYPES as Ha, GuardCheckpoint as Hi, CAPTURE_V042_NOTICE as Hn, AuthorityBlock as Hr, packageRowsFromActiveGraph as Ht, PROOF_KINDS_V2 as I, semanticActionOfScope as Ia, EvidenceParseStatus as Ii, TaskKind as In, SUPPORTED_HOST_VERSIONS as Ir, TargetHostGraph as It, ProofSurface as J, STOP_PROTOCOL_VERSION_V2 as Ja, GuardOperation as Ji, ACTIVE_HOST_COHORT_ID as Jn, UserInteractionKind as Jr, GIT_COMMAND_MANIFEST_IDS as Jt, ProofObligation as K, STATEFUL_ACTIONS as Ka, GuardItemKind as Ki, PROTOCOL_V5_NOTICE as Kn, segmentAuthorityBlocks as Kr, resolveInstalledHostLock as Kt, PROOF_MANIFEST_DOMAIN_V2 as L, statefulActionsOfScope as La, EvidenceRole as Li, UnifiedItemDiagnosis as Ln, compareHostVersions as Lr, combineHostPolicy as Lt, renderRecoveryPacket as M, isOpenObligation as Ma, DeriveScope as Mi, withDurability as Mn, LATEST_SUPPORTED_HOST_VERSION as Mr, lifecyclePhase as Mt, ALPHA3_HOST_PACKAGES as N, kindOfScope as Na, DerivedEnvelope as Ni, CertificationSupport as Nn, MIN_SUPPORTED_HOST_VERSION as Nr, previewFirstStepInjection as Nt, RecoveryOptions as O, ScopeInterpretation as Oa, DeferAuthorization as Oi, evidenceFromPersistedToolResult as On, hostVersionFromPackages as Or, FirstStepPreviewInput as Ot, PROOF_CAPABILITY_MATRIX as P, maskCodeSpans as Pa, EvidenceBinding as Pi, DiagnosisNextAction as Pn, ParsedHostVersion as Pr, ActiveProfileHostLock as Pt, bindProofV2ToProjection as Q, actionCompatible as Qa, PersistenceAuthorization as Qi, ALPHA2_HOST_PACKAGES as Qn, ParsedConfirmation as Qr, GitCommandManifest as Qt, PROOF_PROTOCOL_VERSION as R, ACTION_MANIFEST as Ra, ExpectedTransition as Ri, deriveItemDiagnosis as Rn, evaluateMinimumHostVersion as Rr, hostLockContextFromComposedDump as Rt, snapshotSessionEvents as S, rebindResponse as Sa, qualifyBoundary as Si, parseShellCommand as Sn, bindExecutableIdentity as Sr, ManifestIssue as St, RC1_HOST_PACKAGES as T, DirectiveClass as Ta, BindingActionClosure as Ti, ToolCallInput as Tn, evaluateHostCapability as Tr, ClaimedMessage as Tt, ProofKindV2 as U, CERTIFICATE_VERSION as Ua, GuardEvidence as Ui, DEFAULT_DELEGATION_TOOL_NAMES as Un, AuthorityBlockKind as Ur, packageRowsFromPnpmLock as Ut, ProofKind as V, ActionSpec as Va, GuardBoundary as Vi, relevantEvidence as Vn, currentContractDigest as Vr, inspectTargetHostGraph as Vt, ProofManifest as W, CERTIFICATE_VERSION_V2 as Wa, GuardIntegrity as Wi, PROTOCOL_V3_NOTICE as Wn, AuthorityKind as Wr, readActiveHostGraph as Wt, SessionQueryV2 as X, SemanticAction as Xa, HostStatus as Xi, ACTIVE_HOST_LAUNCHER_VERSION as Xn, classifyUserInteraction as Xr, GitAdapterAction as Xt, SessionQuery as Y, SUPPORTED_EVIDENCE_ADAPTERS as Ya, GuardProjection as Yi, ACTIVE_HOST_COHORT_IDS as Yn, classifyTaskIntent as Yr, GIT_COMMAND_TEMPLATES as Yt, bindProofToProjection as Z, StatefulAction as Za, MessageCoverage as Zi, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Zn, CONFIRM_LINE_PATTERN as Zr, GitCommandAccepted as Zt, progressFingerprint as _, confirmRebind as _a, GoalActivationState as _i, ParsedShell as _n, HostLockStatus as _r, evidenceCoverage as _t, NO_PROGRESS_RECORD_PREFIX as a, WaitAuthorization as aa, ClauseSegment as ai, GitTargetIdentity as an, semanticActionFromText as ao, GOAL_HOST_PACKAGES as ar, proofEvidenceConstraints as at, SessionApiError as b, proposeRebindV042 as ba, effectuateBoundary as bi, isRunExecutable as bn, HostToolSurface as br, COMMAND_SURFACE_MANIFEST as bt, classifyCompletionClaim as c, PackageRow as ca, classifyClause as ci, commitTreeSnapshotDigest as cn, canonicalizePath as co, HostAuditProvenance as cr, proofV2Rejection as ct, decisionBoundaryKey as d, ReleaseOperation as da, extractOperation as di, gitCommandMatchesTarget as dn, sanitizeClauseText as do, HostCapabilityRequest as dr, sessionQuery as dt, TargetCaptureReasonCode as ea, parseConfirmationMessage as ei, GitCommandRejected as en, isStatefulAction as eo, BASE_HOST_PACKAGES as er, createProofManifest as et, isRootPauseRequest as f, ReleaseSettlement as fa, isInformationalMessage as fi, parseGitCommandManifest as fn, sanitizeUrl as fo, HostCohort as fr, sessionQueryV2 as ft, observeAssistantOutcome as g, RebindProposal as ga, BoundaryRequest as gi, CanonicalCommandSurface as gn, HostLockEvaluation as gr, bindingSatisfies as gt, latestRootInstruction as h, RebindArgs as ha, BoundaryQualification as hi, CanonicalArgv as hn, HostLockContext as hr, EvidenceFacetCoverage as ht, CompletionDisposition as i, VerificationContract as ia, CaptureScope as ii, GitPrestateEnvelope as in, semanticActionFromCommand as io, ExecutableIdentityBinding as ir, proofDigestV2 as it, recoveryDigest as j, isExecutableItem as ja, DeriveResult as ji, isDeterministicCheck as jn, HostVersionStatus as jr, firstStepGuidance as jt, closingHint as k, interpretClause as ka, DelegationRef as ki, extractTextContent as kn, selectHostCohort as kr, LifecyclePhase as kt, decideTurnBoundary as l, ReleaseGateDecision as la, extractArtifactPaths as li, createGitPrestateEnvelope as ln, digestStrings as lo, HostCapabilityEvaluation as lr, requiredSubjectsOf as lt, latestAssistantText as m, ProposeOutcome as ma, BoundaryEffectuation as mi, verifiedLinearCommitReadback as mn, HostCohortSelectionReason as mr, validateProofManifestV2 as mt, AssistantOutcomeObservation as n, TargetTuple as na, RejectedBinding as ni, GitEffectRunner as nn, requestedTargetAuthorizesMutation as no, EXPECTED_HOST_PACKAGES as nr, proofCapabilityReport as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, WorkUnit as oa, captureClause as oi, LinearCommitReadback as on, validateActionManifest as oo, HOST_CAPABILITY_PACKAGE_GROUPS as or, proofHostSurfacesOf as ot, isWholeTaskCompletionClaim as p, BoundedSource as pa, segmentClauses as pi, revalidateGitPrestate as pn, sha256 as po, HostCohortSelection as pr, validateProofManifest as pt, ProofObligationV2 as q, STOP_PROTOCOL_VERSION as qa, GuardItemStatus as qi, deriveProjection as qn, TaskIntent as qr, verifyComposedHostLockDump as qt, CONTROL_RECORD_PREFIX as r, TargetValue as ra, certifyCheckpoint as ri, GitPrestateCheck as rn, requestedTargetMatchesResolved as ro, ExecutableIdentity as rr, proofDigest as rt, TurnStoppingDecision as s, createProjection as sa, captureItem as si, commitIndexSnapshotDigest as sn, validateActionTarget as so, HOST_COHORTS as sr, proofOperationMatches as st, supersedeItem as t, TargetCaptureStatus as ta, CheckpointResult as ti, GitEffectExecution as tn, requestedIdentityKey as to, DEFAULT_HOST_LOCK as tr, createProofManifestV2 as tt, decideTurnStopping as u, ReleaseObservedIdentity as ua, extractMethod as ui, executeRevalidatedGitEffect as un, normalizeClause as uo, HostCapabilityId as ur, scopeCoverageDigest as ut, SESSION_API_UNSUPPORTED as v, proposeRebind as va, GoalBoundaryAccess as vi, ShellParseStatus as vn, HostPlatform as vr, evidenceMatchesItem as vt, RC015_HOST_PACKAGES as w, AuthorityDisposition as wa, AssetObligation as wi, hasCurrentCertificate as wn, evaluateExternalWaitCapability as wr, validateManifest as wt, V3SessionLike as x, rebindAttemptKey as xa, isCurrentAcceptedBoundary as xi, parsePwshCommand as xn, LEGACY_HOST_COHORTS as xr, CommandSurfaceManifest as xt, SESSION_EVENT_ENVELOPE_INVALID as y, proposeRebindOutcome as ya, availableBoundaryQualifications as yi, canonicalArgvFromCommand as yn, HostProfileKind as yr, isVerifyingCapability as yt, PROOF_PROTOCOL_VERSION_V2 as z, ACTION_MANIFEST_VERSION as za, ExternalOperation as zi, evidenceAvailabilityReason as zn, parseHostVersion as zr, hostLockRowsFromComposedDump as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as canonicalProjection, $a as requestedTargetAuthorizesMutation, $i as TargetTuple, $n as BASE_HOST_PACKAGES, $r as parseConfirmationMessage, $t as GitCommandRejected, A as openItems, Aa as kindOfScope, Ai as DerivedEnvelope, An as isDeterministicCheck, Ar as HostVersionStatus, At as claimedBatchHasRealRootInput, B as ProofHostSurface, Ba as CERTIFICATE_VERSION, Bi as GuardEvidence, Bn as relevantEvidence, Br as currentContractDigest, Bt as inspectTargetHostGraph, C as RC015_RC2_HOST_PACKAGES, Ca as Executee, Ci as BoundaryDisposition, Cn as hasCurrentCertificate, Cr as evaluateExternalWaitCapability, Ct as OperationVerbEntry, D as MIN_RECOVERY_CHAR_BUDGET, Da as interpretMessage, Di as DeriveConfig, Dn as evidenceFromPersistedToolResult, Dr as hostVersionFromPackages, Dt as FirstStepInjection, E as DEFAULT_RECOVERY_CHAR_BUDGET, Ea as interpretClause, Ei as DelegationRef, En as ToolSubject, Er as evaluateToolSurfaceCapability, Et as FIRST_STEP_GUIDANCE, F as PROOF_KINDS, Fa as ACTION_MANIFEST, Fi as ExpectedTransition, Fn as TaskKind, Fr as SUPPORTED_HOST_VERSIONS, Ft as TargetHostGraph, G as ProofManifestV2, Ga as STOP_PROTOCOL_VERSION_V2, Gi as GuardOperation, Gn as PROTOCOL_V5_NOTICE, Gr as segmentAuthorityBlocks, Gt as resolveInstalledHostLock, H as ProofKindCapability, Ha as SEMANTIC_ACTIONS, Hi as GuardItem, Hn as DEFAULT_DELEGATION_TOOL_NAMES, Hr as AuthorityBlockKind, Ht as packageRowsFromPnpmLock, I as PROOF_KINDS_V2, Ia as ACTION_MANIFEST_VERSION, Ii as ExternalOperation, In as UnifiedItemDiagnosis, Ir as compareHostVersions, It as combineHostPolicy, J as ProofSurface, Ja as StatefulAction, Ji as MessageCoverage, Jn as ACTIVE_HOST_COHORT_IDS, Jr as classifyTaskIntent, Jt as GIT_COMMAND_TEMPLATES, K as ProofObligation, Ka as SUPPORTED_EVIDENCE_ADAPTERS, Ki as GuardProjection, Kn as deriveProjection, Kr as TaskIntent, Kt as verifyComposedHostLockDump, L as PROOF_MANIFEST_DOMAIN_V2, La as ActionManifest, Li as GoalRef, Ln as deriveItemDiagnosis, Lr as evaluateMinimumHostVersion, Lt as hostLockContextFromComposedDump, M as renderRecoveryPacket, Ma as namedActions, Mi as EvidenceOutcome, Mn as CertificationSupport, Mr as MIN_SUPPORTED_HOST_VERSION, Mt as previewFirstStepInjection, N as ALPHA3_HOST_PACKAGES, Na as semanticActionOfScope, Ni as EvidenceParseStatus, Nn as DiagnosisNextAction, Nr as ParsedHostVersion, Nt as ActiveProfileHostLock, O as RecoveryOptions, Oa as isExecutableItem, Oi as DeriveResult, On as extractTextContent, Or as selectHostCohort, Ot as FirstStepPreviewInput, P as PROOF_CAPABILITY_MATRIX, Pa as statefulActionsOfScope, Pi as EvidenceRole, Pn as Repairability, Pr as SUPPORTED_HOST_RANGE, Pt as HostProfileError, Q as bindProofV2ToProjection, Qa as requestedIdentityKey, Qi as TargetCaptureStatus, Qn as AuditedExecutable, Qr as isFrozenV042RebindResponse, Qt as GitCommandParseResult, R as PROOF_PROTOCOL_VERSION, Ra as ActionSpec, Ri as GuardBoundary, Rn as evidenceAvailabilityReason, Rr as parseHostVersion, Rt as hostLockRowsFromComposedDump, S as snapshotSessionEvents, Sa as DirectiveClass, Si as BindingActionClosure, Sn as goalCompletionDenial, Sr as bindLiveGoalCapability, St as ManifestIssue, T as RC1_HOST_PACKAGES, Ta as ScopeInterpretation, Ti as DeferAuthorization, Tn as ToolResultInput, Tr as evaluateHostLock, Tt as ClaimedMessage, U as ProofKindV2, Ua as STATEFUL_ACTIONS, Ui as GuardItemKind, Un as PROTOCOL_V3_NOTICE, Ur as AuthorityKind, Ut as readActiveHostGraph, V as ProofKind, Va as CERTIFICATE_VERSION_V2, Vi as GuardIntegrity, Vn as CAPTURE_V042_NOTICE, Vr as AuthorityBlock, Vt as packageRowsFromActiveGraph, W as ProofManifest, Wa as STOP_PROTOCOL_VERSION, Wi as GuardItemStatus, Wn as PROTOCOL_V4_NOTICE, Wr as authorityCaptureCounts, Wt as resolveActiveProfileHostLock, X as SessionQueryV2, Xa as boundedArtifactChoiceMatches, Xi as SourceSpan, Xn as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Xr as CONFIRM_LINE_PATTERN, Xt as GitCommandAccepted, Y as SessionQuery, Ya as actionCompatible, Yi as PersistenceAuthorization, Yn as ACTIVE_HOST_LAUNCHER_VERSION, Yr as classifyUserInteraction, Yt as GitAdapterAction, Z as bindProofToProjection, Za as isStatefulAction, Zi as TargetCaptureReasonCode, Zn as ALPHA2_HOST_PACKAGES, Zr as ParsedConfirmation, Zt as GitCommandManifest, _ as progressFingerprint, _a as proposeRebindV042, _i as GoalBoundaryAccess, _n as ShellParseStatus, _r as HostPlatform, _t as evidenceCoverage, a as NO_PROGRESS_RECORD_PREFIX, aa as PackageRow, ai as captureClause, an as LinearCommitReadback, ao as canonicalizePath, ar as HOST_CAPABILITY_PACKAGE_GROUPS, at as proofEvidenceConstraints, b as SessionApiError, ba as replayRebindResult, bi as isCurrentAcceptedBoundary, bn as parsePwshCommand, br as LEGACY_HOST_COHORTS, bt as COMMAND_SURFACE_MANIFEST, c as classifyCompletionClaim, ca as ReleaseOperation, ci as extractArtifactPaths, cn as createGitPrestateEnvelope, co as sanitizeClauseText, cr as HostCapabilityEvaluation, ct as proofV2Rejection, d as decisionBoundaryKey, da as ProposeOutcome, di as isInformationalMessage, dn as parseGitCommandManifest, dr as HostCohort, dt as sessionQuery, ea as TargetValue, ei as CheckpointResult, en as GitEffectExecution, eo as requestedTargetMatchesResolved, er as DEFAULT_HOST_LOCK, et as createProofManifest, f as isRootPauseRequest, fa as RebindArgs, fi as segmentClauses, fn as revalidateGitPrestate, fr as HostCohortSelection, ft as sessionQueryV2, g as observeAssistantOutcome, ga as proposeRebindOutcome, gi as GoalActivationState, gn as ParsedShell, gr as HostLockStatus, gt as bindingSatisfies, h as latestRootInstruction, ha as proposeRebind, hi as BoundaryRequest, hn as CanonicalCommandSurface, hr as HostLockEvaluation, ht as EvidenceFacetCoverage, i as CompletionDisposition, ia as createProjection, ii as ClauseSegment, in as GitTargetIdentity, io as validateActionTarget, ir as GOAL_HOST_PACKAGES, it as proofDigestV2, j as recoveryDigest, ja as maskCodeSpans, ji as EvidenceBinding, jn as withDurability, jr as LATEST_SUPPORTED_HOST_VERSION, jt as lifecyclePhase, k as closingHint, ka as isOpenObligation, ki as DeriveScope, kn as extractToolSubject, kr as HostVersionDecision, kt as LifecyclePhase, l as decideTurnBoundary, la as ReleaseSettlement, li as extractMethod, ln as executeRevalidatedGitEffect, lo as sanitizeUrl, lr as HostCapabilityId, lt as requiredSubjectsOf, m as latestAssistantText, ma as confirmRebind, mi as BoundaryQualification, mn as CanonicalArgv, mr as HostLockContext, mt as validateProofManifestV2, n as AssistantOutcomeObservation, na as WaitAuthorization, ni as certifyCheckpoint, nn as GitPrestateCheck, no as semanticActionFromText, nr as ExecutableIdentity, nt as proofCapabilityReport, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as ReleaseGateDecision, oi as captureItem, on as commitIndexSnapshotDigest, oo as digestStrings, or as HOST_COHORTS, ot as proofHostSurfacesOf, p as isWholeTaskCompletionClaim, pa as RebindProposal, pi as BoundaryEffectuation, pn as verifiedLinearCommitReadback, pr as HostCohortSelectionReason, pt as validateProofManifest, q as ProofObligationV2, qa as SemanticAction, qi as HostStatus, qn as ACTIVE_HOST_COHORT_ID, qr as UserInteractionKind, qt as GIT_COMMAND_MANIFEST_IDS, r as CONTROL_RECORD_PREFIX, ra as WorkUnit, ri as CaptureScope, rn as GitPrestateEnvelope, ro as validateActionManifest, rr as ExecutableIdentityBinding, rt as proofDigest, s as TurnStoppingDecision, sa as ReleaseObservedIdentity, si as classifyClause, sn as commitTreeSnapshotDigest, so as normalizeClause, sr as HostAuditProvenance, st as proofOperationMatches, t as supersedeItem, ta as VerificationContract, ti as RejectedBinding, tn as GitEffectRunner, to as semanticActionFromCommand, tr as EXPECTED_HOST_PACKAGES, tt as createProofManifestV2, u as decideTurnStopping, ua as BoundedSource, ui as extractOperation, un as gitCommandMatchesTarget, uo as sha256, ur as HostCapabilityRequest, ut as scopeCoverageDigest, v as SESSION_API_UNSUPPORTED, va as rebindAttemptKey, vi as availableBoundaryQualifications, vn as canonicalArgvFromCommand, vr as HostProfileKind, vt as evidenceMatchesItem, w as RC015_HOST_PACKAGES, wa as InterpretOptions, wi as BoundaryQualificationKind, wn as ToolCallInput, wr as evaluateHostCapability, wt as validateManifest, x as V3SessionLike, xa as AuthorityDisposition, xi as qualifyBoundary, xn as parseShellCommand, xr as bindExecutableIdentity, xt as CommandSurfaceManifest, y as SESSION_EVENT_ENVELOPE_INVALID, ya as rebindResponse, yi as effectuateBoundary, yn as isRunExecutable, yr as HostToolSurface, yt as isVerifyingCapability, z as PROOF_PROTOCOL_VERSION_V2, za as BOUNDED_ARTIFACT_TYPES, zi as GuardCheckpoint, zn as itemDiagnosis, zr as satisfiesSupportedHostRange, zt as injectActiveProfileHostLock } from "./index-BJPVGdg9.js";
+import { $ as canonicalProjection, $a as boundedArtifactChoiceMatches, $i as SourceSpan, $n as AuditedExecutable, $r as isFrozenV042RebindResponse, $t as GitCommandParseResult, A as openItems, Aa as interpretMessage, Ai as DeriveConfig, An as extractToolSubject, Ar as HostVersionDecision, At as claimedBatchHasRealRootInput, B as ProofHostSurface, Ba as ActionManifest, Bi as GoalRef, Bn as itemDiagnosis, Br as satisfiesSupportedHostRange, Bt as injectActiveProfileHostLock, C as RC015_RC2_HOST_PACKAGES, Ca as replayRebindResult, Ci as AssetInterpretationFact, Cn as goalCompletionDenial, Cr as bindLiveGoalCapability, Ct as OperationVerbEntry, D as MIN_RECOVERY_CHAR_BUDGET, Da as InterpretOptions, Di as BoundaryQualificationKind, Dn as ToolSubject, Dr as evaluateToolSurfaceCapability, Dt as FirstStepInjection, E as DEFAULT_RECOVERY_CHAR_BUDGET, Ea as Executee, Ei as BoundaryDisposition, En as ToolResultInput, Er as evaluateHostLock, Et as FIRST_STEP_GUIDANCE, F as PROOF_KINDS, Fa as namedActions, Fi as EvidenceOutcome, Fn as Repairability, Fr as SUPPORTED_HOST_RANGE, Ft as HostProfileError, G as ProofManifestV2, Ga as SEMANTIC_ACTIONS, Gi as GuardItem, Gn as PROTOCOL_V4_NOTICE, Gr as authorityCaptureCounts, Gt as resolveActiveProfileHostLock, H as ProofKindCapability, Ha as BOUNDED_ARTIFACT_TYPES, Hi as GuardCheckpoint, Hn as CAPTURE_V042_NOTICE, Hr as AuthorityBlock, Ht as packageRowsFromActiveGraph, I as PROOF_KINDS_V2, Ia as semanticActionOfScope, Ii as EvidenceParseStatus, In as TaskKind, Ir as SUPPORTED_HOST_VERSIONS, It as TargetHostGraph, J as ProofSurface, Ja as STOP_PROTOCOL_VERSION_V2, Ji as GuardOperation, Jn as ACTIVE_HOST_COHORT_ID, Jr as UserInteractionKind, Jt as GIT_COMMAND_MANIFEST_IDS, K as ProofObligation, Ka as STATEFUL_ACTIONS, Ki as GuardItemKind, Kn as PROTOCOL_V5_NOTICE, Kr as segmentAuthorityBlocks, Kt as resolveInstalledHostLock, L as PROOF_MANIFEST_DOMAIN_V2, La as statefulActionsOfScope, Li as EvidenceRole, Ln as UnifiedItemDiagnosis, Lr as compareHostVersions, Lt as combineHostPolicy, M as renderRecoveryPacket, Ma as isOpenObligation, Mi as DeriveScope, Mn as withDurability, Mr as LATEST_SUPPORTED_HOST_VERSION, Mt as lifecyclePhase, N as ALPHA3_HOST_PACKAGES, Na as kindOfScope, Ni as DerivedEnvelope, Nn as CertificationSupport, Nr as MIN_SUPPORTED_HOST_VERSION, Nt as previewFirstStepInjection, O as RecoveryOptions, Oa as ScopeInterpretation, Oi as DeferAuthorization, On as evidenceFromPersistedToolResult, Or as hostVersionFromPackages, Ot as FirstStepPreviewInput, P as PROOF_CAPABILITY_MATRIX, Pa as maskCodeSpans, Pi as EvidenceBinding, Pn as DiagnosisNextAction, Pr as ParsedHostVersion, Pt as ActiveProfileHostLock, Q as bindProofV2ToProjection, Qa as actionCompatible, Qi as PersistenceAuthorization, Qn as ALPHA2_HOST_PACKAGES, Qr as ParsedConfirmation, Qt as GitCommandManifest, R as PROOF_PROTOCOL_VERSION, Ra as ACTION_MANIFEST, Ri as ExpectedTransition, Rn as deriveItemDiagnosis, Rr as evaluateMinimumHostVersion, Rt as hostLockContextFromComposedDump, S as snapshotSessionEvents, Sa as rebindResponse, Si as qualifyBoundary, Sn as parseShellCommand, Sr as bindExecutableIdentity, St as ManifestIssue, T as RC1_HOST_PACKAGES, Ta as DirectiveClass, Ti as BindingActionClosure, Tn as ToolCallInput, Tr as evaluateHostCapability, Tt as ClaimedMessage, U as ProofKindV2, Ua as CERTIFICATE_VERSION, Ui as GuardEvidence, Un as DEFAULT_DELEGATION_TOOL_NAMES, Ur as AuthorityBlockKind, Ut as packageRowsFromPnpmLock, V as ProofKind, Va as ActionSpec, Vi as GuardBoundary, Vn as relevantEvidence, Vr as currentContractDigest, Vt as inspectTargetHostGraph, W as ProofManifest, Wa as CERTIFICATE_VERSION_V2, Wi as GuardIntegrity, Wn as PROTOCOL_V3_NOTICE, Wr as AuthorityKind, Wt as readActiveHostGraph, X as SessionQueryV2, Xa as SemanticAction, Xi as HostStatus, Xn as ACTIVE_HOST_LAUNCHER_VERSION, Xr as classifyUserInteraction, Xt as GitAdapterAction, Y as SessionQuery, Ya as SUPPORTED_EVIDENCE_ADAPTERS, Yi as GuardProjection, Yn as ACTIVE_HOST_COHORT_IDS, Yr as classifyTaskIntent, Yt as GIT_COMMAND_TEMPLATES, Z as bindProofToProjection, Za as StatefulAction, Zi as MessageCoverage, Zn as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Zr as CONFIRM_LINE_PATTERN, Zt as GitCommandAccepted, _ as progressFingerprint, _a as confirmRebind, _i as GoalActivationState, _n as ParsedShell, _r as HostLockStatus, _t as evidenceCoverage, a as NO_PROGRESS_RECORD_PREFIX, aa as WaitAuthorization, ai as ClauseSegment, an as GitTargetIdentity, ao as semanticActionFromText, ar as GOAL_HOST_PACKAGES, at as proofEvidenceConstraints, b as SessionApiError, ba as proposeRebindV042, bi as effectuateBoundary, bn as isRunExecutable, br as HostToolSurface, bt as COMMAND_SURFACE_MANIFEST, c as classifyCompletionClaim, ca as PackageRow, ci as classifyClause, cn as commitTreeSnapshotDigest, co as canonicalizePath, cr as HostAuditProvenance, ct as proofV2Rejection, d as decisionBoundaryKey, da as ReleaseOperation, di as extractOperation, dn as gitCommandMatchesTarget, do as sanitizeClauseText, dr as HostCapabilityRequest, dt as sessionQuery, ea as TargetCaptureReasonCode, ei as parseConfirmationMessage, en as GitCommandRejected, eo as isStatefulAction, er as BASE_HOST_PACKAGES, et as createProofManifest, f as isRootPauseRequest, fa as ReleaseSettlement, fi as isInformationalMessage, fn as parseGitCommandManifest, fo as sanitizeUrl, fr as HostCohort, ft as sessionQueryV2, g as observeAssistantOutcome, ga as RebindProposal, gi as BoundaryRequest, gn as CanonicalCommandSurface, gr as HostLockEvaluation, gt as bindingSatisfies, h as latestRootInstruction, ha as RebindArgs, hi as BoundaryQualification, hn as CanonicalArgv, hr as HostLockContext, ht as EvidenceFacetCoverage, i as CompletionDisposition, ia as VerificationContract, ii as CaptureScope, in as GitPrestateEnvelope, io as semanticActionFromCommand, ir as ExecutableIdentityBinding, it as proofDigestV2, j as recoveryDigest, ja as isExecutableItem, ji as DeriveResult, jn as isDeterministicCheck, jr as HostVersionStatus, jt as firstStepGuidance, k as closingHint, ka as interpretClause, ki as DelegationRef, kn as extractTextContent, kr as selectHostCohort, kt as LifecyclePhase, l as decideTurnBoundary, la as ReleaseGateDecision, li as extractArtifactPaths, ln as createGitPrestateEnvelope, lo as digestStrings, lr as HostCapabilityEvaluation, lt as requiredSubjectsOf, m as latestAssistantText, ma as ProposeOutcome, mi as BoundaryEffectuation, mn as verifiedLinearCommitReadback, mr as HostCohortSelectionReason, mt as validateProofManifestV2, n as AssistantOutcomeObservation, na as TargetTuple, ni as RejectedBinding, nn as GitEffectRunner, no as requestedTargetAuthorizesMutation, nr as EXPECTED_HOST_PACKAGES, nt as proofCapabilityReport, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as WorkUnit, oi as captureClause, on as LinearCommitReadback, oo as validateActionManifest, or as HOST_CAPABILITY_PACKAGE_GROUPS, ot as proofHostSurfacesOf, p as isWholeTaskCompletionClaim, pa as BoundedSource, pi as segmentClauses, pn as revalidateGitPrestate, po as sha256, pr as HostCohortSelection, pt as validateProofManifest, q as ProofObligationV2, qa as STOP_PROTOCOL_VERSION, qi as GuardItemStatus, qn as deriveProjection, qr as TaskIntent, qt as verifyComposedHostLockDump, r as CONTROL_RECORD_PREFIX, ra as TargetValue, ri as certifyCheckpoint, rn as GitPrestateCheck, ro as requestedTargetMatchesResolved, rr as ExecutableIdentity, rt as proofDigest, s as TurnStoppingDecision, sa as createProjection, si as captureItem, sn as commitIndexSnapshotDigest, so as validateActionTarget, sr as HOST_COHORTS, st as proofOperationMatches, t as supersedeItem, ta as TargetCaptureStatus, ti as CheckpointResult, tn as GitEffectExecution, to as requestedIdentityKey, tr as DEFAULT_HOST_LOCK, tt as createProofManifestV2, u as decideTurnStopping, ua as ReleaseObservedIdentity, ui as extractMethod, un as executeRevalidatedGitEffect, uo as normalizeClause, ur as HostCapabilityId, ut as scopeCoverageDigest, v as SESSION_API_UNSUPPORTED, va as proposeRebind, vi as GoalBoundaryAccess, vn as ShellParseStatus, vr as HostPlatform, vt as evidenceMatchesItem, w as RC015_HOST_PACKAGES, wa as AuthorityDisposition, wi as AssetObligation, wn as hasCurrentCertificate, wr as evaluateExternalWaitCapability, wt as validateManifest, x as V3SessionLike, xa as rebindAttemptKey, xi as isCurrentAcceptedBoundary, xn as parsePwshCommand, xr as LEGACY_HOST_COHORTS, xt as CommandSurfaceManifest, y as SESSION_EVENT_ENVELOPE_INVALID, ya as proposeRebindOutcome, yi as availableBoundaryQualifications, yn as canonicalArgvFromCommand, yr as HostProfileKind, yt as isVerifyingCapability, z as PROOF_PROTOCOL_VERSION_V2, za as ACTION_MANIFEST_VERSION, zi as ExternalOperation, zn as evidenceAvailabilityReason, zr as parseHostVersion, zt as hostLockRowsFromComposedDump } from "./index-C_N6DaSF.js";
 import "@deepseek-ai/dsh-tools";
 import "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
@@ -152,4 +152,4 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockProfileRoot?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DelegationRef, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DelegationRef, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };