dsh-completion-guard 0.6.0 → 0.6.2

package/dist/{index-BJPVGdg9.d.ts → index-CZSt3D0G.d.ts}

@@ -121,7 +121,7 @@ interface InterpretOptions {
   coordinationSplit?: boolean;
 }
 /** What one scope does with the action it names. */
-type DirectiveClass = "directive" | "prohibition" | "conditional" | "informational" | "narrative";
+type DirectiveClass = "directive" | "prohibition" | "conditional" | "informational" | "narrative" | "unresolved";
 /** Who is expected to perform the action. */
 type Executee = "agent" | "user" | "unresolved";
 /** How the scope's authority reads. */
@@ -190,6 +190,147 @@ declare function statefulActionsOfScope(body: string): StatefulAction[];
 /** Actions this interpretation names, in source order (diagnostics only). */
 declare function namedActions(text: string): string[];
 //#endregion
+//#region src/domain/capability-semantics.d.ts
+/**
+* 0.6.2 D062-01/D062-02: the shared, versioned semantics for WHAT the guard
+* knows, WHY it cannot certify, and WHICH remedy is actually reachable.
+*
+* The verdict is deliberately one closed projection instead of a pile of
+* ad-hoc strings, because every consumer (prepare, checkpoint detail, recovery
+* packet, rebind query, status) must render the same answer. Two failure modes
+* are excluded by construction:
+*
+* 1. The guard never turns its own missing adapter into a user-authority gap.
+*    An unsupported capability says "complete the work honestly and do not
+*    claim a certificate"; it never asks the user to restate the request as
+*    install/modify, and it never asks for input the user already gave.
+* 2. The guard never claims a fact it did not read. `declaredExitCode:
+*    'unknown'` stays unknown however successful the host tool call looked,
+*    and an opaque compound runner stays `operationAttribution: 'unknown'`
+*    rather than inheriting the last command's exit status.
+*
+* The taxonomy is written once here and consumed by every lane, so a future
+* capability must declare its own gap kind and remedy instead of drifting into
+* a sentence list. Nothing in this module mutates contract, evidence, digest,
+* certificate, or historical record state.
+*/
+/** Fine-grained, mutually exclusive reasons a contract item is not certified. */
+type CapabilityGap = "none" | "closed" | "constraint" | "interpretation_unknown" | "missing_adapter" | "target_missing" | "input_ambiguous" | "legacy_migration_required" | "host_unavailable" | "historical_preevidence_missing" | "operation_unattributable" | "condition_pending" | "delivery_pending";
+/** The reachable remedy for one gap. `remedy` is the machine-readable form of
+* `next_action`; the two are produced together so they cannot disagree. */
+type CapabilityRemedy = "none" | "collect_evidence" | "supply_target" | "await_root_input" | "deliver_answer" | "record_interpretation" | "report_uncertified" | "report_uncertified_capability_gap" | "restore_host" | "readback_only" | "fresh_root_instruction";
+interface CapabilityFact {
+  /**
+  * Whether this obligation's OWN action belongs to the certification action
+  * set in the installed cohort. It is deliberately independent of
+  * authorization: `false` says the build has no such capability, NEVER that
+  * the user did not authorize the work, and NEVER that the work may not be
+  * done. A `generic_run` obligation has no concrete action to support.
+  */
+  actionSupported: boolean;
+  /** A durable certification path exists for this item's own contract. */
+  certifiable: boolean;
+  gap: CapabilityGap;
+  remedy: CapabilityRemedy;
+  /** Reason codes that describe the evidence chain, never new authority. */
+  blockingReasonCodes: string[];
+}
+/**
+* Whether the item's obligation has a certification path in this cohort at
+* all. A generic_run item names no concrete action: the manifest still has a
+* generic entry (the guard may run and observe ordinary commands) but no
+* user-level completion contract can be certified from it, so the item is
+* uncertifiable while ordinary execution remains entirely permitted.
+*/
+declare function actionHasCertificationPath(action: SemanticAction, legacyMigration: boolean): boolean;
+/** The capability classification of an item's own obligation contract. */
+declare function capabilityFactOf(item: GuardItem): CapabilityFact;
+/**
+* What the console itself declared about the process. `declaredExitCode` is
+* `'unknown'` unless a real marker or a structured host fact said otherwise:
+* a host tool call that was not marked as an error is NOT a read exit code.
+*/
+type ProcessExitStatus = number | "unknown";
+/**
+* Why `outcome` says what it says, so a display or a consumer never reads more
+* than the source supports.
+*/
+type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
+/**
+* How far the console let the guard attribute effects to the obligation's own
+* operation. `unknown` is the honest answer for every opaque compound runner:
+* the last command's success never covers an earlier failure.
+*/
+type OperationAttribution = "single_operation" | "declared_per_operation" | "unknown";
+/** A credible per-operation subset the host itself declared. */
+interface DeclaredOperationResult {
+  action: string;
+  outcome: "success" | "failure" | "unknown";
+}
+/** Which source declared the terminal facts this reading is based on. */
+type ProcessFactSource = "run_declaration" | "structured_meta" | "rendered_markers";
+interface DerivedProcessFacts {
+  /** What the host tool call returned, before any interpretation. */
+  hostToolReturned: "result" | "error";
+  /** The console's own exit status, or `unknown` when never read. */
+  declaredExitCode: ProcessExitStatus;
+  /** Whether an explicit terminal marker (positive or negative) was read. */
+  terminalMarkerRead: boolean;
+  /** The outcome THIS LAYER derives from its own sources. It is deliberately a
+  * separate value from the frozen evidence `outcome`: the frozen field keeps
+  * the historical rule (0.6.1 and earlier read only `meta.exitCode` and the
+  * rendered markers, never the run declaration), while this layer reads the
+  * run declaration first. The two may therefore differ, and when they do the
+  * difference is stated in `frozenOutcomeConflict` rather than hidden by
+  * rewriting the historical field. */
+  outcome: "success" | "failure" | "unknown";
+  /** Why this layer's outcome is what it is. */
+  outcomeReason: ProcessOutcomeReason;
+  /** The highest-priority source that declared the facts used here. */
+  source: ProcessFactSource;
+  /** True when this layer's outcome differs from the frozen evidence
+  * `outcome`. A consumer that needs the historical reading uses the frozen
+  * field; a consumer that needs the run's own declaration uses this layer and
+  * can see that the two disagree. */
+  frozenOutcomeConflict: boolean;
+  /** How far the guard could attribute effects to the operation. */
+  operationAttribution: OperationAttribution;
+  /** Exactly the sub-results a trusted producer declared, if any. */
+  declaredOperationResults?: DeclaredOperationResult[];
+}
+/**
+* `partial_failure` may be reported only from a credible structured
+* per-operation result, and only for the exact declared subset. `unknown`
+* stays unknown: the guard never reconstructs a per-operation verdict from
+* stderr text, and never widens a declared subset into a claim about the rest.
+*/
+declare function partialFailureOf(facts: DerivedProcessFacts): {
+  failed: DeclaredOperationResult[];
+} | undefined;
+/** The one-line consequence of a gap kind, shared so no lane re-invents it. */
+declare function capabilityConsequence(gap: CapabilityGap): string;
+/**
+* D062-03: the applicable condition every removal-like outcome must carry.
+* "Clean" or "no longer listed" never proves "no dependants", so a completed
+* subset stays reported as the subset it is. These are the execution-side
+* facts the guard can name but cannot observe; it states them instead of
+* inventing a generic remover or promising an automatic block.
+*/
+declare const DEPENDENCY_FREE_ONLY_CONDITION: readonly string[];
+/** The per-object dependency status a report must keep separate. */
+type DependencyStatus = "dependency_free" | "in_use" | "unknown";
+/** Whether one candidate object may enter the automatic removal set. */
+declare function admissibleForRemoval(status: DependencyStatus): boolean;
+interface RemovalOutcomeReport {
+  metadataRemoved: "yes" | "no" | "unknown";
+  contentRemoved: "yes" | "no" | "partial" | "unknown";
+  directoryRemoved: "yes" | "no" | "unknown";
+}
+/** Only an object proven dependency-free AND fully removed may read as done. */
+declare function removalIsComplete(report: RemovalOutcomeReport, status: DependencyStatus): boolean;
+/** A partially removed object or an unknown dependant is never "no impact". */
+declare function removalIsPartiallyKnown(report: RemovalOutcomeReport, status: DependencyStatus): boolean;
+//#endregion
 //#region src/domain/rebind.d.ts
 interface RebindArgs {
   operation: "propose" | "query" | "withdraw";
@@ -541,6 +682,37 @@ interface VerificationContract {
   * on the same canonical subject — mentioning the file is not enough. */
   operation?: GuardOperation;
 }
+/**
+* 0.6.1 (W060-01): the durable identity of one non-text root input part. The
+* asset obligation binds the exact message sequence, part index and content
+* digest of the ORIGINAL input — never a model description of it — so an
+* interpretation can only ever be recorded against the asset it interpreted.
+*/
+interface AssetObligation {
+  /** Sequence of the root message that carried the part. */
+  messageSeq: number;
+  /** Index of the non-text part inside that message. */
+  partIndex: number;
+  /** sha256 of the canonical JSON of the part: the media identity. */
+  mediaSha256: string;
+}
+/**
+* 0.6.1 (W060-01): one durable per-asset interpretation record, derived from a
+* confirmed `context_guard_interpret` result that replay re-validated against
+* the contract (call arguments, item, revision, asset identity). It is the
+* model's explicit declaration that it read THAT obligation's asset in THAT
+* host turn; it never proves the interpretation is correct, and it closes
+* nothing by itself — an asset obligation closes only when a delivery of the
+* interpretation's own turn exists. Absent from logs written before this
+* entrypoint existed, which is what keeps upgrade replays from retroactively
+* interpreting old assets.
+*/
+interface AssetInterpretationFact {
+  itemId: string;
+  resultSeq: number;
+  /** The host turn the interpretation happened in. */
+  turn: number;
+}
 interface GuardItem {
   id: string;
   revision: number;
@@ -625,6 +797,23 @@ interface GuardItem {
   * keeps its own history.
   */
   clarifiesItemId?: string;
+  /**
+  * 0.6.1 (W060-01 review round 10): set on the sub-items created when an
+  * unresolved clause is superseded by its recorded interpretation
+  * partition. Names the superseded unresolved obligation; the information
+  * sub-items close through the interpreting turn's delivery, while unknown
+  * and undeclared sub-spans stay pending.
+  */
+  interpretedFromUnresolved?: string;
+  /**
+  * 0.6.1 (W060-01): present only on an asset-interpretation obligation. The
+  * item's information slot closes through the SAME trusted-delivery fact as
+  * any inquiry of its turn; the closing answers the request that carried the
+  * asset, never the correctness of the interpretation, and visual-comparison
+  * proof (strict surface 'visual') stays a separate obligation. Absent on
+  * every other item, so legacy and ordinary text items are unchanged.
+  */
+  asset?: AssetObligation;
 }
 interface GuardEvidence {
   id: string;
@@ -663,6 +852,18 @@ interface GuardEvidence {
   adapterVersion?: string;
   externalOperationRef?: ExternalOperation;
   /**
+  * 0.6.2 D062-02: the LAYERED reading of a shell result, kept beside — never
+  * instead of — the frozen `outcome`/`parseStatus` pair. It separates four
+  * different claims the historical single `outcome` conflated: what the host
+  * tool call returned, what the console actually declared about the process
+  * (an exit code and its signal, or `unknown` when none was read), how far the
+  * effect could be attributed to this obligation's own operation, and the
+  * resulting business outcome. It is derived at replay from the same bytes, is
+  * excluded from every historical digest and certificate domain, and never
+  * rewrites an old `outcome`. Only shell-tool facts carry it.
+  */
+  processFacts?: DerivedProcessFacts;
+  /**
   * 0.6.0 C04: this fact came from a delegated subagent/task round-trip. A
   * delegated result is BOUNDED evidence for the parent unit — it is recorded
   * and visible, and it can never close a parent obligation or a parent unit
@@ -850,6 +1051,12 @@ interface GuardProjection {
   */
   trustedSelections: TrustedSelection[];
   /**
+  * 0.6.1 (W060-01): the derived per-asset interpretation records (bounded to
+  * the last 64), one per confirmed `context_guard_interpret` result. Derived,
+  * never written by a caller.
+  */
+  interpretationFacts: AssetInterpretationFact[];
+  /**
   * 0.6.0 C07 sandbox approvals, derived from the host's own
   * `approval/asked` + `approval/decided` audit pair (last 16). Recorded for
   * provenance only: an approval is never a target authority.
@@ -1498,6 +1705,12 @@ type ReasonClass = "parameter_missing" | "source_insufficient" | "condition_unme
 //#region src/domain/diagnostics.d.ts
 type TaskKind = "inquiry" | "action" | "deliverable" | "constraint" | "unresolved";
 type CertificationSupport = "supported" | "unsupported" | "needs_target" | "needs_evidence" | "unavailable";
+/**
+* Whether anything can still be repaired, and by whom (0.5, corrected by 0.6.2
+* D062-01). `user_input_required` means a real root choice was never made
+* (a genuinely absent identity or target selection) — never a capability this
+* build simply does not have, and never a request to re-word an instruction.
+*/
 type Repairability = "agent_repairable" | "user_input_required" | "unsupported" | "historical_gap" | "none";
 interface DiagnosisNextAction {
   kind: "report_only" | "collect_evidence" | "checkpoint" | "clarify_target" | "restore_host" | "none";
@@ -1518,6 +1731,13 @@ interface UnifiedItemDiagnosis {
   /** The seven-class label this fine-grained reason code belongs to (C12). */
   reason_class: ReasonClass;
   repairability: Repairability;
+  /**
+  * 0.6.2 D062-01: WHAT the guard knows and WHICH remedy is reachable, shared
+  * by every consumer. `reason_code` stays the fine display code; the
+  * capability fact explains the remedy, so no lane infers a root cause — or
+  * invents a reachable path — from one enum.
+  */
+  capability: CapabilityFact;
   missing_fields: string[];
   missing_facets: Array<"resolution" | "effect" | "state">;
   next_action: DiagnosisNextAction;
@@ -1546,6 +1766,13 @@ declare function itemDiagnosis(p: GuardProjection, item: GuardItem): {
 declare function evidenceAvailabilityReason(evidence: GuardEvidence): string | undefined;
 /** Shared display filter; certification remains the full domain check. */
 declare function relevantEvidence(p: GuardProjection, item: GuardItem, evidence: GuardEvidence): boolean;
+/**
+* The bounded, one-phrase form of a reachable remedy (0.6.2 D062-01). The
+* capability consequence above is the full explanation; a bounded page lists
+* many items, so it uses this phrase and leaves the prose to the detail and
+* preparation surfaces. Both come from the SAME capability fact.
+*/
+declare function capabilityRemedyPhrase(remedy: CapabilityRemedy): string;
 //#endregion
 //#region src/domain/evidence.d.ts
 interface ToolCallInput {
@@ -1584,6 +1811,8 @@ interface ToolSubject {
   reasonCode?: string;
   adapterId?: string;
   adapterVersion?: string;
+  /** 0.6.2 D062-02: the layered shell reading, present only for shell tools. */
+  processFacts?: DerivedProcessFacts;
   externalOperationRef?: ExternalOperation;
 }
 declare function extractToolSubject(call: ToolCallInput, result: ToolResultInput, defaultCwd?: string, hostLock?: HostLockEvaluation): ToolSubject;
@@ -1728,7 +1957,7 @@ interface GitEffectRunner {
 }
 interface GitEffectExecution {
   status: "executed" | "rejected";
-  reasonCode?: GitPrestateCheck["reasonCode"] | "repository_missing";
+  reasonCode?: GitPrestateCheck["reasonCode"] | "repository_missing" | "effect_already_applied";
 }
 interface LinearCommitReadback {
   /** Commit reached after the guarded effect. */
@@ -1890,6 +2119,8 @@ interface FirstStepPreviewInput {
   boundaryPresent: boolean;
   /** The session is a delegated/subagent session, never a root conversation. */
   delegated: boolean;
+  /** 0.6.1 (W060-05): the effective responsibility tier shapes the guidance. */
+  policy?: "standard" | "strict" | "release";
 }
 /**
 * Pure decision for the first-step activation injection when protection is enabled. The
@@ -1905,10 +2136,16 @@ interface FirstStepPreviewInput {
 declare function previewFirstStepInjection(input: FirstStepPreviewInput, claimedRealInput: boolean): FirstStepInjection | undefined;
 /**
 * Compact first-step guidance: protection has started, what it protects, and
-* the working order for stateful actions. It is not a task, asks no question,
-* and contains no recovery wording.
+* when the guarded producer path is needed. 0.6.1 (W060-05): the stateful
+* workflow is stated CONDITIONALLY — only an obligation whose own clause
+* demands a certified stateful action runs through prepare/producer/checkpoint.
+* The 0.6.0 text demanded that order for every stateful action unconditionally,
+* which ordinary business work correctly read as a Guard approval gate.
+* Ordinary answers, investigations, and ordinary tool work are never gated, and
+* missing Guard evidence is never a reason to repeat a completed action.
 */
-declare const FIRST_STEP_GUIDANCE = "Context Guard is now protecting this session: requirements from your messages stay open until they are certified with matching durable evidence. Before a stateful action (write, install, commit, push, publish, restart), call context_guard_prepare to see the supported command shape and required resolution/effect/state order; collect evidence with the guarded tools, then close items with context_guard_checkpoint. Ordinary answers and investigations need no certification.";
+declare function firstStepGuidance(policy?: "standard" | "strict" | "release"): string;
+declare const FIRST_STEP_GUIDANCE: string;
 /**
 * Lifecycle phase derived from durable facts. `enabled` is the log-derived
 * enablement (`always`, or the explicit `on`/`off` command sequence), and
@@ -2167,6 +2404,40 @@ interface RecoveryOptions {
 declare const DEFAULT_RECOVERY_CHAR_BUDGET = 4e3;
 declare const MIN_RECOVERY_CHAR_BUDGET = 512;
 /**
+* 0.6.2 D062-03: the standing condition a removal or cleanup outcome must keep.
+* The guard cannot observe another process's cwd or handles, so it states the
+* condition instead of inferring "no dependants" from a clean tree, an empty
+* `git worktree list`, or a directory that merely looks empty. This is one
+* shared wording, not an incident phrase list, and it never claims the plugin
+* can block a dangerous removal on its own.
+*/
+declare const CLEANUP_CONDITION_RULE: string;
+/**
+* The same condition at a medium budget (0.6.2 review): shorter than the full
+* rule, and still explicit that an unknown dependant forbids the claim.
+*/
+declare const CLEANUP_CONDITION_RULE_SHORT: string;
+/**
+* The same condition at emergency budget (0.6.2 review). A packet with fewer
+* than 1000 characters cannot carry the longer sentences AND its own rules, so
+* the condition is compressed — but it is NEVER omitted: the one thing a compact
+* packet must not lose is that an unknown dependant forbids a removal claim.
+*/
+declare const CLEANUP_CONDITION_RULE_COMPACT: string;
+/**
+* Pick the longest form of the condition the packet's budget can actually
+* afford. The caller reserves this line's length before any optional row, so
+* the condition is never the text that gets clipped.
+*/
+declare function cleanupConditionFor(budget: number): string;
+/**
+* Whether this gap needs the cleanup condition spelled out. The condition
+* belongs to every uncertifiable lane that could describe removal-like work —
+* which the guard cannot identify from text — so it rides the CAPABILITY
+* limitation itself, never a vocabulary of destructive verbs.
+*/
+declare function carriesCleanupCondition(gap: CapabilityGap): boolean;
+/**
 * An actionable one-line hint for how an open item's verification contract can
 * be closed. It never weakens the contract; it only names the missing facet so
 * the agent can produce the right evidence shape instead of reverse-engineering
@@ -2357,4 +2628,4 @@ declare function latestAssistantText(events: readonly {
 //#region src/domain/supersession.d.ts
 declare function supersedeItem(items: Map<string, GuardItem>, oldId: string, replacement: GuardItem): boolean;
 //#endregion
-export { canonicalProjection as $, requestedTargetAuthorizesMutation as $a, TargetTuple as $i, BASE_HOST_PACKAGES as $n, parseConfirmationMessage as $r, GitCommandRejected as $t, openItems as A, kindOfScope as Aa, DerivedEnvelope as Ai, isDeterministicCheck as An, HostVersionStatus as Ar, claimedBatchHasRealRootInput as At, ProofHostSurface as B, CERTIFICATE_VERSION as Ba, GuardEvidence as Bi, relevantEvidence as Bn, currentContractDigest as Br, inspectTargetHostGraph as Bt, RC015_RC2_HOST_PACKAGES as C, Executee as Ca, BoundaryDisposition as Ci, hasCurrentCertificate as Cn, evaluateExternalWaitCapability as Cr, OperationVerbEntry as Ct, MIN_RECOVERY_CHAR_BUDGET as D, interpretMessage as Da, DeriveConfig as Di, evidenceFromPersistedToolResult as Dn, hostVersionFromPackages as Dr, FirstStepInjection as Dt, DEFAULT_RECOVERY_CHAR_BUDGET as E, interpretClause as Ea, DelegationRef as Ei, ToolSubject as En, evaluateToolSurfaceCapability as Er, FIRST_STEP_GUIDANCE as Et, PROOF_KINDS as F, ACTION_MANIFEST as Fa, ExpectedTransition as Fi, TaskKind as Fn, SUPPORTED_HOST_VERSIONS as Fr, TargetHostGraph as Ft, ProofManifestV2 as G, STOP_PROTOCOL_VERSION_V2 as Ga, GuardOperation as Gi, PROTOCOL_V5_NOTICE as Gn, segmentAuthorityBlocks as Gr, resolveInstalledHostLock as Gt, ProofKindCapability as H, SEMANTIC_ACTIONS as Ha, GuardItem as Hi, DEFAULT_DELEGATION_TOOL_NAMES as Hn, AuthorityBlockKind as Hr, packageRowsFromPnpmLock as Ht, PROOF_KINDS_V2 as I, ACTION_MANIFEST_VERSION as Ia, ExternalOperation as Ii, UnifiedItemDiagnosis as In, compareHostVersions as Ir, combineHostPolicy as It, ProofSurface as J, StatefulAction as Ja, MessageCoverage as Ji, ACTIVE_HOST_COHORT_IDS as Jn, classifyTaskIntent as Jr, GIT_COMMAND_TEMPLATES as Jt, ProofObligation as K, SUPPORTED_EVIDENCE_ADAPTERS as Ka, GuardProjection as Ki, deriveProjection as Kn, TaskIntent as Kr, verifyComposedHostLockDump as Kt, PROOF_MANIFEST_DOMAIN_V2 as L, ActionManifest as La, GoalRef as Li, deriveItemDiagnosis as Ln, evaluateMinimumHostVersion as Lr, hostLockContextFromComposedDump as Lt, renderRecoveryPacket as M, namedActions as Ma, EvidenceOutcome as Mi, CertificationSupport as Mn, MIN_SUPPORTED_HOST_VERSION as Mr, previewFirstStepInjection as Mt, ALPHA3_HOST_PACKAGES as N, semanticActionOfScope as Na, EvidenceParseStatus as Ni, DiagnosisNextAction as Nn, ParsedHostVersion as Nr, ActiveProfileHostLock as Nt, RecoveryOptions as O, isExecutableItem as Oa, DeriveResult as Oi, extractTextContent as On, selectHostCohort as Or, FirstStepPreviewInput as Ot, PROOF_CAPABILITY_MATRIX as P, statefulActionsOfScope as Pa, EvidenceRole as Pi, Repairability as Pn, SUPPORTED_HOST_RANGE as Pr, HostProfileError as Pt, bindProofV2ToProjection as Q, requestedIdentityKey as Qa, TargetCaptureStatus as Qi, AuditedExecutable as Qn, isFrozenV042RebindResponse as Qr, GitCommandParseResult as Qt, PROOF_PROTOCOL_VERSION as R, ActionSpec as Ra, GuardBoundary as Ri, evidenceAvailabilityReason as Rn, parseHostVersion as Rr, hostLockRowsFromComposedDump as Rt, snapshotSessionEvents as S, DirectiveClass as Sa, BindingActionClosure as Si, goalCompletionDenial as Sn, bindLiveGoalCapability as Sr, ManifestIssue as St, RC1_HOST_PACKAGES as T, ScopeInterpretation as Ta, DeferAuthorization as Ti, ToolResultInput as Tn, evaluateHostLock as Tr, ClaimedMessage as Tt, ProofKindV2 as U, STATEFUL_ACTIONS as Ua, GuardItemKind as Ui, PROTOCOL_V3_NOTICE as Un, AuthorityKind as Ur, readActiveHostGraph as Ut, ProofKind as V, CERTIFICATE_VERSION_V2 as Va, GuardIntegrity as Vi, CAPTURE_V042_NOTICE as Vn, AuthorityBlock as Vr, packageRowsFromActiveGraph as Vt, ProofManifest as W, STOP_PROTOCOL_VERSION as Wa, GuardItemStatus as Wi, PROTOCOL_V4_NOTICE as Wn, authorityCaptureCounts as Wr, resolveActiveProfileHostLock as Wt, SessionQueryV2 as X, boundedArtifactChoiceMatches as Xa, SourceSpan as Xi, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Xn, CONFIRM_LINE_PATTERN as Xr, GitCommandAccepted as Xt, SessionQuery as Y, actionCompatible as Ya, PersistenceAuthorization as Yi, ACTIVE_HOST_LAUNCHER_VERSION as Yn, classifyUserInteraction as Yr, GitAdapterAction as Yt, bindProofToProjection as Z, isStatefulAction as Za, TargetCaptureReasonCode as Zi, ALPHA2_HOST_PACKAGES as Zn, ParsedConfirmation as Zr, GitCommandManifest as Zt, progressFingerprint as _, proposeRebindV042 as _a, GoalBoundaryAccess as _i, ShellParseStatus as _n, HostPlatform as _r, evidenceCoverage as _t, NO_PROGRESS_RECORD_PREFIX as a, PackageRow as aa, captureClause as ai, LinearCommitReadback as an, canonicalizePath as ao, HOST_CAPABILITY_PACKAGE_GROUPS as ar, proofEvidenceConstraints as at, SessionApiError as b, replayRebindResult as ba, isCurrentAcceptedBoundary as bi, parsePwshCommand as bn, LEGACY_HOST_COHORTS as br, COMMAND_SURFACE_MANIFEST as bt, classifyCompletionClaim as c, ReleaseOperation as ca, extractArtifactPaths as ci, createGitPrestateEnvelope as cn, sanitizeClauseText as co, HostCapabilityEvaluation as cr, proofV2Rejection as ct, decisionBoundaryKey as d, ProposeOutcome as da, isInformationalMessage as di, parseGitCommandManifest as dn, HostCohort as dr, sessionQuery as dt, TargetValue as ea, CheckpointResult as ei, GitEffectExecution as en, requestedTargetMatchesResolved as eo, DEFAULT_HOST_LOCK as er, createProofManifest as et, isRootPauseRequest as f, RebindArgs as fa, segmentClauses as fi, revalidateGitPrestate as fn, HostCohortSelection as fr, sessionQueryV2 as ft, observeAssistantOutcome as g, proposeRebindOutcome as ga, GoalActivationState as gi, ParsedShell as gn, HostLockStatus as gr, bindingSatisfies as gt, latestRootInstruction as h, proposeRebind as ha, BoundaryRequest as hi, CanonicalCommandSurface as hn, HostLockEvaluation as hr, EvidenceFacetCoverage as ht, CompletionDisposition as i, createProjection as ia, ClauseSegment as ii, GitTargetIdentity as in, validateActionTarget as io, GOAL_HOST_PACKAGES as ir, proofDigestV2 as it, recoveryDigest as j, maskCodeSpans as ja, EvidenceBinding as ji, withDurability as jn, LATEST_SUPPORTED_HOST_VERSION as jr, lifecyclePhase as jt, closingHint as k, isOpenObligation as ka, DeriveScope as ki, extractToolSubject as kn, HostVersionDecision as kr, LifecyclePhase as kt, decideTurnBoundary as l, ReleaseSettlement as la, extractMethod as li, executeRevalidatedGitEffect as ln, sanitizeUrl as lo, HostCapabilityId as lr, requiredSubjectsOf as lt, latestAssistantText as m, confirmRebind as ma, BoundaryQualification as mi, CanonicalArgv as mn, HostLockContext as mr, validateProofManifestV2 as mt, AssistantOutcomeObservation as n, WaitAuthorization as na, certifyCheckpoint as ni, GitPrestateCheck as nn, semanticActionFromText as no, ExecutableIdentity as nr, proofCapabilityReport as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, ReleaseGateDecision as oa, captureItem as oi, commitIndexSnapshotDigest as on, digestStrings as oo, HOST_COHORTS as or, proofHostSurfacesOf as ot, isWholeTaskCompletionClaim as p, RebindProposal as pa, BoundaryEffectuation as pi, verifiedLinearCommitReadback as pn, HostCohortSelectionReason as pr, validateProofManifest as pt, ProofObligationV2 as q, SemanticAction as qa, HostStatus as qi, ACTIVE_HOST_COHORT_ID as qn, UserInteractionKind as qr, GIT_COMMAND_MANIFEST_IDS as qt, CONTROL_RECORD_PREFIX as r, WorkUnit as ra, CaptureScope as ri, GitPrestateEnvelope as rn, validateActionManifest as ro, ExecutableIdentityBinding as rr, proofDigest as rt, TurnStoppingDecision as s, ReleaseObservedIdentity as sa, classifyClause as si, commitTreeSnapshotDigest as sn, normalizeClause as so, HostAuditProvenance as sr, proofOperationMatches as st, supersedeItem as t, VerificationContract as ta, RejectedBinding as ti, GitEffectRunner as tn, semanticActionFromCommand as to, EXPECTED_HOST_PACKAGES as tr, createProofManifestV2 as tt, decideTurnStopping as u, BoundedSource as ua, extractOperation as ui, gitCommandMatchesTarget as un, sha256 as uo, HostCapabilityRequest as ur, scopeCoverageDigest as ut, SESSION_API_UNSUPPORTED as v, rebindAttemptKey as va, availableBoundaryQualifications as vi, canonicalArgvFromCommand as vn, HostProfileKind as vr, evidenceMatchesItem as vt, RC015_HOST_PACKAGES as w, InterpretOptions as wa, BoundaryQualificationKind as wi, ToolCallInput as wn, evaluateHostCapability as wr, validateManifest as wt, V3SessionLike as x, AuthorityDisposition as xa, qualifyBoundary as xi, parseShellCommand as xn, bindExecutableIdentity as xr, CommandSurfaceManifest as xt, SESSION_EVENT_ENVELOPE_INVALID as y, rebindResponse as ya, effectuateBoundary as yi, isRunExecutable as yn, HostToolSurface as yr, isVerifyingCapability as yt, PROOF_PROTOCOL_VERSION_V2 as z, BOUNDED_ARTIFACT_TYPES as za, GuardCheckpoint as zi, itemDiagnosis as zn, satisfiesSupportedHostRange as zr, injectActiveProfileHostLock as zt };
+export { ProofSurface as $, ScopeInterpretation as $a, GuardItemStatus as $i, deriveProjection as $n, TaskIntent as $r, GIT_COMMAND_MANIFEST_IDS as $t, MIN_RECOVERY_CHAR_BUDGET as A, CapabilityFact as Aa, AssetObligation as Ai, ToolCallInput as An, semanticActionFromText as Ao, evaluateExternalWaitCapability as Ar, ClaimedMessage as At, PROOF_KINDS as B, ProcessOutcomeReason as Ba, EvidenceBinding as Bi, Repairability as Bn, ParsedHostVersion as Br, HostProfileError as Bt, RC015_RC2_HOST_PACKAGES as C, confirmRebind as Ca, GoalActivationState as Ci, ShellParseStatus as Cn, actionCompatible as Co, HostLockStatus as Cr, evidenceMatchesItem as Ct, CLEANUP_CONDITION_RULE_COMPACT as D, rebindAttemptKey as Da, isCurrentAcceptedBoundary as Di, parseShellCommand as Dn, requestedTargetAuthorizesMutation as Do, LEGACY_HOST_COHORTS as Dr, ManifestIssue as Dt, CLEANUP_CONDITION_RULE as E, proposeRebindV042 as Ea, effectuateBoundary as Ei, parsePwshCommand as En, requestedIdentityKey as Eo, HostToolSurface as Er, CommandSurfaceManifest as Et, openItems as F, DependencyStatus as Fa, DelegationRef as Fi, extractToolSubject as Fn, normalizeClause as Fo, selectHostCohort as Fr, claimedBatchHasRealRootInput as Ft, ProofHostSurface as G, capabilityFactOf as Ga, ExternalOperation as Gi, evidenceAvailabilityReason as Gn, parseHostVersion as Gr, injectActiveProfileHostLock as Gt, PROOF_MANIFEST_DOMAIN_V2 as H, actionHasCertificationPath as Ha, EvidenceParseStatus as Hi, UnifiedItemDiagnosis as Hn, SUPPORTED_HOST_VERSIONS as Hr, combineHostPolicy as Ht, recoveryDigest as I, DerivedProcessFacts as Ia, DeriveConfig as Ii, isDeterministicCheck as In, sanitizeClauseText as Io, HostVersionDecision as Ir, firstStepGuidance as It, ProofKindV2 as J, removalIsPartiallyKnown as Ja, GuardCheckpoint as Ji, CAPTURE_V042_NOTICE as Jn, AuthorityBlock as Jr, packageRowsFromPnpmLock as Jt, ProofKind as K, partialFailureOf as Ka, GoalRef as Ki, itemDiagnosis as Kn, satisfiesSupportedHostRange as Kr, inspectTargetHostGraph as Kt, renderRecoveryPacket as L, OperationAttribution as La, DeriveResult as Li, withDurability as Ln, sanitizeUrl as Lo, HostVersionStatus as Lr, lifecyclePhase as Lt, carriesCleanupCondition as M, CapabilityRemedy as Ma, BoundaryDisposition as Mi, ToolSubject as Mn, validateActionTarget as Mo, evaluateHostLock as Mr, FirstStepInjection as Mt, cleanupConditionFor as N, DEPENDENCY_FREE_ONLY_CONDITION as Na, BoundaryQualificationKind as Ni, evidenceFromPersistedToolResult as Nn, canonicalizePath as No, evaluateToolSurfaceCapability as Nr, FirstStepPreviewInput as Nt, CLEANUP_CONDITION_RULE_SHORT as O, rebindResponse as Oa, qualifyBoundary as Oi, goalCompletionDenial as On, requestedTargetMatchesResolved as Oo, bindExecutableIdentity as Or, OperationVerbEntry as Ot, closingHint as P, DeclaredOperationResult as Pa, DeferAuthorization as Pi, extractTextContent as Pn, digestStrings as Po, hostVersionFromPackages as Pr, LifecyclePhase as Pt, ProofObligationV2 as Q, InterpretOptions as Qa, GuardItemKind as Qi, PROTOCOL_V5_NOTICE as Qn, segmentAuthorityBlocks as Qr, verifyComposedHostLockDump as Qt, ALPHA3_HOST_PACKAGES as R, ProcessExitStatus as Ra, DeriveScope as Ri, CertificationSupport as Rn, sha256 as Ro, LATEST_SUPPORTED_HOST_VERSION as Rr, previewFirstStepInjection as Rt, snapshotSessionEvents as S, RebindProposal as Sa, BoundaryRequest as Si, ParsedShell as Sn, StatefulAction as So, HostLockEvaluation as Sr, evidenceCoverage as St, RC1_HOST_PACKAGES as T, proposeRebindOutcome as Ta, availableBoundaryQualifications as Ti, isRunExecutable as Tn, isStatefulAction as To, HostProfileKind as Tr, COMMAND_SURFACE_MANIFEST as Tt, PROOF_PROTOCOL_VERSION as U, admissibleForRemoval as Ua, EvidenceRole as Ui, capabilityRemedyPhrase as Un, compareHostVersions as Ur, hostLockContextFromComposedDump as Ut, PROOF_KINDS_V2 as V, RemovalOutcomeReport as Va, EvidenceOutcome as Vi, TaskKind as Vn, SUPPORTED_HOST_RANGE as Vr, TargetHostGraph as Vt, PROOF_PROTOCOL_VERSION_V2 as W, capabilityConsequence as Wa, ExpectedTransition as Wi, deriveItemDiagnosis as Wn, evaluateMinimumHostVersion as Wr, hostLockRowsFromComposedDump as Wt, ProofManifestV2 as X, DirectiveClass as Xa, GuardIntegrity as Xi, PROTOCOL_V3_NOTICE as Xn, AuthorityKind as Xr, resolveActiveProfileHostLock as Xt, ProofManifest as Y, AuthorityDisposition as Ya, GuardEvidence as Yi, DEFAULT_DELEGATION_TOOL_NAMES as Yn, AuthorityBlockKind as Yr, readActiveHostGraph as Yt, ProofObligation as Z, Executee as Za, GuardItem as Zi, PROTOCOL_V4_NOTICE as Zn, authorityCaptureCounts as Zr, resolveInstalledHostLock as Zt, progressFingerprint as _, ReleaseOperation as _a, extractOperation as _i, parseGitCommandManifest as _n, STATEFUL_ACTIONS as _o, HostCapabilityRequest as _r, sessionQueryV2 as _t, NO_PROGRESS_RECORD_PREFIX as a, SourceSpan as aa, isFrozenV042RebindResponse as ai, GitCommandRejected as an, maskCodeSpans as ao, AuditedExecutable as ar, createProofManifest as at, SessionApiError as b, ProposeOutcome as ba, BoundaryEffectuation as bi, CanonicalArgv as bn, SUPPORTED_EVIDENCE_ADAPTERS as bo, HostCohortSelectionReason as br, EvidenceFacetCoverage as bt, classifyCompletionClaim as c, TargetTuple as ca, RejectedBinding as ci, GitPrestateCheck as cn, statefulActionsOfScope as co, EXPECTED_HOST_PACKAGES as cr, proofDigest as ct, decisionBoundaryKey as d, WaitAuthorization as da, ClauseSegment as di, LinearCommitReadback as dn, ActionManifest as do, GOAL_HOST_PACKAGES as dr, proofHostSurfacesOf as dt, GuardOperation as ea, UserInteractionKind as ei, GIT_COMMAND_TEMPLATES as en, interpretClause as eo, ACTIVE_HOST_COHORT_ID as er, SessionQuery as et, isRootPauseRequest as f, WorkUnit as fa, captureClause as fi, commitIndexSnapshotDigest as fn, ActionSpec as fo, HOST_CAPABILITY_PACKAGE_GROUPS as fr, proofOperationMatches as ft, observeAssistantOutcome as g, ReleaseObservedIdentity as ga, extractMethod as gi, gitCommandMatchesTarget as gn, SEMANTIC_ACTIONS as go, HostCapabilityId as gr, sessionQuery as gt, latestRootInstruction as h, ReleaseGateDecision as ha, extractArtifactPaths as hi, executeRevalidatedGitEffect as hn, CERTIFICATE_VERSION_V2 as ho, HostCapabilityEvaluation as hr, scopeCoverageDigest as ht, CompletionDisposition as i, PersistenceAuthorization as ia, ParsedConfirmation as ii, GitCommandParseResult as in, kindOfScope as io, ALPHA2_HOST_PACKAGES as ir, canonicalProjection as it, RecoveryOptions as j, CapabilityGap as ja, BindingActionClosure as ji, ToolResultInput as jn, validateActionManifest as jo, evaluateHostCapability as jr, FIRST_STEP_GUIDANCE as jt, DEFAULT_RECOVERY_CHAR_BUDGET as k, replayRebindResult as ka, AssetInterpretationFact as ki, hasCurrentCertificate as kn, semanticActionFromCommand as ko, bindLiveGoalCapability as kr, validateManifest as kt, decideTurnBoundary as l, TargetValue as la, certifyCheckpoint as li, GitPrestateEnvelope as ln, ACTION_MANIFEST as lo, ExecutableIdentity as lr, proofDigestV2 as lt, latestAssistantText as m, PackageRow as ma, classifyClause as mi, createGitPrestateEnvelope as mn, CERTIFICATE_VERSION as mo, HostAuditProvenance as mr, requiredSubjectsOf as mt, AssistantOutcomeObservation as n, HostStatus as na, classifyUserInteraction as ni, GitCommandAccepted as nn, isExecutableItem as no, ACTIVE_HOST_LAUNCHER_VERSION as nr, bindProofToProjection as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, TargetCaptureReasonCode as oa, parseConfirmationMessage as oi, GitEffectExecution as on, namedActions as oo, BASE_HOST_PACKAGES as or, createProofManifestV2 as ot, isWholeTaskCompletionClaim as p, createProjection as pa, captureItem as pi, commitTreeSnapshotDigest as pn, BOUNDED_ARTIFACT_TYPES as po, HOST_COHORTS as pr, proofV2Rejection as pt, ProofKindCapability as q, removalIsComplete as qa, GuardBoundary as qi, relevantEvidence as qn, currentContractDigest as qr, packageRowsFromActiveGraph as qt, CONTROL_RECORD_PREFIX as r, MessageCoverage as ra, CONFIRM_LINE_PATTERN as ri, GitCommandManifest as rn, isOpenObligation as ro, ALPHA2_DSHMARKET_139_HOST_PACKAGES as rr, bindProofV2ToProjection as rt, TurnStoppingDecision as s, TargetCaptureStatus as sa, CheckpointResult as si, GitEffectRunner as sn, semanticActionOfScope as so, DEFAULT_HOST_LOCK as sr, proofCapabilityReport as st, supersedeItem as t, GuardProjection as ta, classifyTaskIntent as ti, GitAdapterAction as tn, interpretMessage as to, ACTIVE_HOST_COHORT_IDS as tr, SessionQueryV2 as tt, decideTurnStopping as u, VerificationContract as ua, CaptureScope as ui, GitTargetIdentity as un, ACTION_MANIFEST_VERSION as uo, ExecutableIdentityBinding as ur, proofEvidenceConstraints as ut, SESSION_API_UNSUPPORTED as v, ReleaseSettlement as va, isInformationalMessage as vi, revalidateGitPrestate as vn, STOP_PROTOCOL_VERSION as vo, HostCohort as vr, validateProofManifest as vt, RC015_HOST_PACKAGES as w, proposeRebind as wa, GoalBoundaryAccess as wi, canonicalArgvFromCommand as wn, boundedArtifactChoiceMatches as wo, HostPlatform as wr, isVerifyingCapability as wt, V3SessionLike as x, RebindArgs as xa, BoundaryQualification as xi, CanonicalCommandSurface as xn, SemanticAction as xo, HostLockContext as xr, bindingSatisfies as xt, SESSION_EVENT_ENVELOPE_INVALID as y, BoundedSource as ya, segmentClauses as yi, verifiedLinearCommitReadback as yn, STOP_PROTOCOL_VERSION_V2 as yo, HostCohortSelection as yr, validateProofManifestV2 as yt, PROOF_CAPABILITY_MATRIX as z, ProcessFactSource as za, DerivedEnvelope as zi, DiagnosisNextAction as zn, MIN_SUPPORTED_HOST_VERSION as zr, ActiveProfileHostLock as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as canonicalProjection, $a as requestedTargetAuthorizesMutation, $i as TargetTuple, $n as BASE_HOST_PACKAGES, $r as parseConfirmationMessage, $t as GitCommandRejected, A as openItems, Aa as kindOfScope, Ai as DerivedEnvelope, An as isDeterministicCheck, Ar as HostVersionStatus, At as claimedBatchHasRealRootInput, B as ProofHostSurface, Ba as CERTIFICATE_VERSION, Bi as GuardEvidence, Bn as relevantEvidence, Br as currentContractDigest, Bt as inspectTargetHostGraph, C as RC015_RC2_HOST_PACKAGES, Ca as Executee, Ci as BoundaryDisposition, Cn as hasCurrentCertificate, Cr as evaluateExternalWaitCapability, Ct as OperationVerbEntry, D as MIN_RECOVERY_CHAR_BUDGET, Da as interpretMessage, Di as DeriveConfig, Dn as evidenceFromPersistedToolResult, Dr as hostVersionFromPackages, Dt as FirstStepInjection, E as DEFAULT_RECOVERY_CHAR_BUDGET, Ea as interpretClause, Ei as DelegationRef, En as ToolSubject, Er as evaluateToolSurfaceCapability, Et as FIRST_STEP_GUIDANCE, F as PROOF_KINDS, Fa as ACTION_MANIFEST, Fi as ExpectedTransition, Fn as TaskKind, Fr as SUPPORTED_HOST_VERSIONS, Ft as TargetHostGraph, G as ProofManifestV2, Ga as STOP_PROTOCOL_VERSION_V2, Gi as GuardOperation, Gn as PROTOCOL_V5_NOTICE, Gr as segmentAuthorityBlocks, Gt as resolveInstalledHostLock, H as ProofKindCapability, Ha as SEMANTIC_ACTIONS, Hi as GuardItem, Hn as DEFAULT_DELEGATION_TOOL_NAMES, Hr as AuthorityBlockKind, Ht as packageRowsFromPnpmLock, I as PROOF_KINDS_V2, Ia as ACTION_MANIFEST_VERSION, Ii as ExternalOperation, In as UnifiedItemDiagnosis, Ir as compareHostVersions, It as combineHostPolicy, J as ProofSurface, Ja as StatefulAction, Ji as MessageCoverage, Jn as ACTIVE_HOST_COHORT_IDS, Jr as classifyTaskIntent, Jt as GIT_COMMAND_TEMPLATES, K as ProofObligation, Ka as SUPPORTED_EVIDENCE_ADAPTERS, Ki as GuardProjection, Kn as deriveProjection, Kr as TaskIntent, Kt as verifyComposedHostLockDump, L as PROOF_MANIFEST_DOMAIN_V2, La as ActionManifest, Li as GoalRef, Ln as deriveItemDiagnosis, Lr as evaluateMinimumHostVersion, Lt as hostLockContextFromComposedDump, M as renderRecoveryPacket, Ma as namedActions, Mi as EvidenceOutcome, Mn as CertificationSupport, Mr as MIN_SUPPORTED_HOST_VERSION, Mt as previewFirstStepInjection, N as ALPHA3_HOST_PACKAGES, Na as semanticActionOfScope, Ni as EvidenceParseStatus, Nn as DiagnosisNextAction, Nr as ParsedHostVersion, Nt as ActiveProfileHostLock, O as RecoveryOptions, Oa as isExecutableItem, Oi as DeriveResult, On as extractTextContent, Or as selectHostCohort, Ot as FirstStepPreviewInput, P as PROOF_CAPABILITY_MATRIX, Pa as statefulActionsOfScope, Pi as EvidenceRole, Pn as Repairability, Pr as SUPPORTED_HOST_RANGE, Pt as HostProfileError, Q as bindProofV2ToProjection, Qa as requestedIdentityKey, Qi as TargetCaptureStatus, Qn as AuditedExecutable, Qr as isFrozenV042RebindResponse, Qt as GitCommandParseResult, R as PROOF_PROTOCOL_VERSION, Ra as ActionSpec, Ri as GuardBoundary, Rn as evidenceAvailabilityReason, Rr as parseHostVersion, Rt as hostLockRowsFromComposedDump, S as snapshotSessionEvents, Sa as DirectiveClass, Si as BindingActionClosure, Sn as goalCompletionDenial, Sr as bindLiveGoalCapability, St as ManifestIssue, T as RC1_HOST_PACKAGES, Ta as ScopeInterpretation, Ti as DeferAuthorization, Tn as ToolResultInput, Tr as evaluateHostLock, Tt as ClaimedMessage, U as ProofKindV2, Ua as STATEFUL_ACTIONS, Ui as GuardItemKind, Un as PROTOCOL_V3_NOTICE, Ur as AuthorityKind, Ut as readActiveHostGraph, V as ProofKind, Va as CERTIFICATE_VERSION_V2, Vi as GuardIntegrity, Vn as CAPTURE_V042_NOTICE, Vr as AuthorityBlock, Vt as packageRowsFromActiveGraph, W as ProofManifest, Wa as STOP_PROTOCOL_VERSION, Wi as GuardItemStatus, Wn as PROTOCOL_V4_NOTICE, Wr as authorityCaptureCounts, Wt as resolveActiveProfileHostLock, X as SessionQueryV2, Xa as boundedArtifactChoiceMatches, Xi as SourceSpan, Xn as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Xr as CONFIRM_LINE_PATTERN, Xt as GitCommandAccepted, Y as SessionQuery, Ya as actionCompatible, Yi as PersistenceAuthorization, Yn as ACTIVE_HOST_LAUNCHER_VERSION, Yr as classifyUserInteraction, Yt as GitAdapterAction, Z as bindProofToProjection, Za as isStatefulAction, Zi as TargetCaptureReasonCode, Zn as ALPHA2_HOST_PACKAGES, Zr as ParsedConfirmation, Zt as GitCommandManifest, _ as progressFingerprint, _a as proposeRebindV042, _i as GoalBoundaryAccess, _n as ShellParseStatus, _r as HostPlatform, _t as evidenceCoverage, a as NO_PROGRESS_RECORD_PREFIX, aa as PackageRow, ai as captureClause, an as LinearCommitReadback, ao as canonicalizePath, ar as HOST_CAPABILITY_PACKAGE_GROUPS, at as proofEvidenceConstraints, b as SessionApiError, ba as replayRebindResult, bi as isCurrentAcceptedBoundary, bn as parsePwshCommand, br as LEGACY_HOST_COHORTS, bt as COMMAND_SURFACE_MANIFEST, c as classifyCompletionClaim, ca as ReleaseOperation, ci as extractArtifactPaths, cn as createGitPrestateEnvelope, co as sanitizeClauseText, cr as HostCapabilityEvaluation, ct as proofV2Rejection, d as decisionBoundaryKey, da as ProposeOutcome, di as isInformationalMessage, dn as parseGitCommandManifest, dr as HostCohort, dt as sessionQuery, ea as TargetValue, ei as CheckpointResult, en as GitEffectExecution, eo as requestedTargetMatchesResolved, er as DEFAULT_HOST_LOCK, et as createProofManifest, f as isRootPauseRequest, fa as RebindArgs, fi as segmentClauses, fn as revalidateGitPrestate, fr as HostCohortSelection, ft as sessionQueryV2, g as observeAssistantOutcome, ga as proposeRebindOutcome, gi as GoalActivationState, gn as ParsedShell, gr as HostLockStatus, gt as bindingSatisfies, h as latestRootInstruction, ha as proposeRebind, hi as BoundaryRequest, hn as CanonicalCommandSurface, hr as HostLockEvaluation, ht as EvidenceFacetCoverage, i as CompletionDisposition, ia as createProjection, ii as ClauseSegment, in as GitTargetIdentity, io as validateActionTarget, ir as GOAL_HOST_PACKAGES, it as proofDigestV2, j as recoveryDigest, ja as maskCodeSpans, ji as EvidenceBinding, jn as withDurability, jr as LATEST_SUPPORTED_HOST_VERSION, jt as lifecyclePhase, k as closingHint, ka as isOpenObligation, ki as DeriveScope, kn as extractToolSubject, kr as HostVersionDecision, kt as LifecyclePhase, l as decideTurnBoundary, la as ReleaseSettlement, li as extractMethod, ln as executeRevalidatedGitEffect, lo as sanitizeUrl, lr as HostCapabilityId, lt as requiredSubjectsOf, m as latestAssistantText, ma as confirmRebind, mi as BoundaryQualification, mn as CanonicalArgv, mr as HostLockContext, mt as validateProofManifestV2, n as AssistantOutcomeObservation, na as WaitAuthorization, ni as certifyCheckpoint, nn as GitPrestateCheck, no as semanticActionFromText, nr as ExecutableIdentity, nt as proofCapabilityReport, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as ReleaseGateDecision, oi as captureItem, on as commitIndexSnapshotDigest, oo as digestStrings, or as HOST_COHORTS, ot as proofHostSurfacesOf, p as isWholeTaskCompletionClaim, pa as RebindProposal, pi as BoundaryEffectuation, pn as verifiedLinearCommitReadback, pr as HostCohortSelectionReason, pt as validateProofManifest, q as ProofObligationV2, qa as SemanticAction, qi as HostStatus, qn as ACTIVE_HOST_COHORT_ID, qr as UserInteractionKind, qt as GIT_COMMAND_MANIFEST_IDS, r as CONTROL_RECORD_PREFIX, ra as WorkUnit, ri as CaptureScope, rn as GitPrestateEnvelope, ro as validateActionManifest, rr as ExecutableIdentityBinding, rt as proofDigest, s as TurnStoppingDecision, sa as ReleaseObservedIdentity, si as classifyClause, sn as commitTreeSnapshotDigest, so as normalizeClause, sr as HostAuditProvenance, st as proofOperationMatches, t as supersedeItem, ta as VerificationContract, ti as RejectedBinding, tn as GitEffectRunner, to as semanticActionFromCommand, tr as EXPECTED_HOST_PACKAGES, tt as createProofManifestV2, u as decideTurnStopping, ua as BoundedSource, ui as extractOperation, un as gitCommandMatchesTarget, uo as sha256, ur as HostCapabilityRequest, ut as scopeCoverageDigest, v as SESSION_API_UNSUPPORTED, va as rebindAttemptKey, vi as availableBoundaryQualifications, vn as canonicalArgvFromCommand, vr as HostProfileKind, vt as evidenceMatchesItem, w as RC015_HOST_PACKAGES, wa as InterpretOptions, wi as BoundaryQualificationKind, wn as ToolCallInput, wr as evaluateHostCapability, wt as validateManifest, x as V3SessionLike, xa as AuthorityDisposition, xi as qualifyBoundary, xn as parseShellCommand, xr as bindExecutableIdentity, xt as CommandSurfaceManifest, y as SESSION_EVENT_ENVELOPE_INVALID, ya as rebindResponse, yi as effectuateBoundary, yn as isRunExecutable, yr as HostToolSurface, yt as isVerifyingCapability, z as PROOF_PROTOCOL_VERSION_V2, za as BOUNDED_ARTIFACT_TYPES, zi as GuardCheckpoint, zn as itemDiagnosis, zr as satisfiesSupportedHostRange, zt as injectActiveProfileHostLock } from "./index-BJPVGdg9.js";
+import { $ as ProofSurface, $a as ScopeInterpretation, $i as GuardItemStatus, $n as deriveProjection, $r as TaskIntent, $t as GIT_COMMAND_MANIFEST_IDS, A as MIN_RECOVERY_CHAR_BUDGET, Aa as CapabilityFact, Ai as AssetObligation, An as ToolCallInput, Ao as semanticActionFromText, Ar as evaluateExternalWaitCapability, At as ClaimedMessage, B as PROOF_KINDS, Ba as ProcessOutcomeReason, Bi as EvidenceBinding, Bn as Repairability, Br as ParsedHostVersion, Bt as HostProfileError, C as RC015_RC2_HOST_PACKAGES, Ca as confirmRebind, Ci as GoalActivationState, Cn as ShellParseStatus, Co as actionCompatible, Cr as HostLockStatus, Ct as evidenceMatchesItem, D as CLEANUP_CONDITION_RULE_COMPACT, Da as rebindAttemptKey, Di as isCurrentAcceptedBoundary, Dn as parseShellCommand, Do as requestedTargetAuthorizesMutation, Dr as LEGACY_HOST_COHORTS, Dt as ManifestIssue, E as CLEANUP_CONDITION_RULE, Ea as proposeRebindV042, Ei as effectuateBoundary, En as parsePwshCommand, Eo as requestedIdentityKey, Er as HostToolSurface, Et as CommandSurfaceManifest, F as openItems, Fa as DependencyStatus, Fi as DelegationRef, Fn as extractToolSubject, Fo as normalizeClause, Fr as selectHostCohort, Ft as claimedBatchHasRealRootInput, G as ProofHostSurface, Ga as capabilityFactOf, Gi as ExternalOperation, Gn as evidenceAvailabilityReason, Gr as parseHostVersion, Gt as injectActiveProfileHostLock, H as PROOF_MANIFEST_DOMAIN_V2, Ha as actionHasCertificationPath, Hi as EvidenceParseStatus, Hn as UnifiedItemDiagnosis, Hr as SUPPORTED_HOST_VERSIONS, Ht as combineHostPolicy, I as recoveryDigest, Ia as DerivedProcessFacts, Ii as DeriveConfig, In as isDeterministicCheck, Io as sanitizeClauseText, Ir as HostVersionDecision, It as firstStepGuidance, J as ProofKindV2, Ja as removalIsPartiallyKnown, Ji as GuardCheckpoint, Jn as CAPTURE_V042_NOTICE, Jr as AuthorityBlock, Jt as packageRowsFromPnpmLock, K as ProofKind, Ka as partialFailureOf, Ki as GoalRef, Kn as itemDiagnosis, Kr as satisfiesSupportedHostRange, Kt as inspectTargetHostGraph, L as renderRecoveryPacket, La as OperationAttribution, Li as DeriveResult, Ln as withDurability, Lo as sanitizeUrl, Lr as HostVersionStatus, Lt as lifecyclePhase, M as carriesCleanupCondition, Ma as CapabilityRemedy, Mi as BoundaryDisposition, Mn as ToolSubject, Mo as validateActionTarget, Mr as evaluateHostLock, Mt as FirstStepInjection, N as cleanupConditionFor, Na as DEPENDENCY_FREE_ONLY_CONDITION, Ni as BoundaryQualificationKind, Nn as evidenceFromPersistedToolResult, No as canonicalizePath, Nr as evaluateToolSurfaceCapability, Nt as FirstStepPreviewInput, O as CLEANUP_CONDITION_RULE_SHORT, Oa as rebindResponse, Oi as qualifyBoundary, On as goalCompletionDenial, Oo as requestedTargetMatchesResolved, Or as bindExecutableIdentity, Ot as OperationVerbEntry, P as closingHint, Pa as DeclaredOperationResult, Pi as DeferAuthorization, Pn as extractTextContent, Po as digestStrings, Pr as hostVersionFromPackages, Pt as LifecyclePhase, Q as ProofObligationV2, Qa as InterpretOptions, Qi as GuardItemKind, Qn as PROTOCOL_V5_NOTICE, Qr as segmentAuthorityBlocks, Qt as verifyComposedHostLockDump, R as ALPHA3_HOST_PACKAGES, Ra as ProcessExitStatus, Ri as DeriveScope, Rn as CertificationSupport, Ro as sha256, Rr as LATEST_SUPPORTED_HOST_VERSION, Rt as previewFirstStepInjection, S as snapshotSessionEvents, Sa as RebindProposal, Si as BoundaryRequest, Sn as ParsedShell, So as StatefulAction, Sr as HostLockEvaluation, St as evidenceCoverage, T as RC1_HOST_PACKAGES, Ta as proposeRebindOutcome, Ti as availableBoundaryQualifications, Tn as isRunExecutable, To as isStatefulAction, Tr as HostProfileKind, Tt as COMMAND_SURFACE_MANIFEST, U as PROOF_PROTOCOL_VERSION, Ua as admissibleForRemoval, Ui as EvidenceRole, Un as capabilityRemedyPhrase, Ur as compareHostVersions, Ut as hostLockContextFromComposedDump, V as PROOF_KINDS_V2, Va as RemovalOutcomeReport, Vi as EvidenceOutcome, Vn as TaskKind, Vr as SUPPORTED_HOST_RANGE, Vt as TargetHostGraph, W as PROOF_PROTOCOL_VERSION_V2, Wa as capabilityConsequence, Wi as ExpectedTransition, Wn as deriveItemDiagnosis, Wr as evaluateMinimumHostVersion, Wt as hostLockRowsFromComposedDump, X as ProofManifestV2, Xa as DirectiveClass, Xi as GuardIntegrity, Xn as PROTOCOL_V3_NOTICE, Xr as AuthorityKind, Xt as resolveActiveProfileHostLock, Y as ProofManifest, Ya as AuthorityDisposition, Yi as GuardEvidence, Yn as DEFAULT_DELEGATION_TOOL_NAMES, Yr as AuthorityBlockKind, Yt as readActiveHostGraph, Z as ProofObligation, Za as Executee, Zi as GuardItem, Zn as PROTOCOL_V4_NOTICE, Zr as authorityCaptureCounts, Zt as resolveInstalledHostLock, _ as progressFingerprint, _a as ReleaseOperation, _i as extractOperation, _n as parseGitCommandManifest, _o as STATEFUL_ACTIONS, _r as HostCapabilityRequest, _t as sessionQueryV2, a as NO_PROGRESS_RECORD_PREFIX, aa as SourceSpan, ai as isFrozenV042RebindResponse, an as GitCommandRejected, ao as maskCodeSpans, ar as AuditedExecutable, at as createProofManifest, b as SessionApiError, ba as ProposeOutcome, bi as BoundaryEffectuation, bn as CanonicalArgv, bo as SUPPORTED_EVIDENCE_ADAPTERS, br as HostCohortSelectionReason, bt as EvidenceFacetCoverage, c as classifyCompletionClaim, ca as TargetTuple, ci as RejectedBinding, cn as GitPrestateCheck, co as statefulActionsOfScope, cr as EXPECTED_HOST_PACKAGES, ct as proofDigest, d as decisionBoundaryKey, da as WaitAuthorization, di as ClauseSegment, dn as LinearCommitReadback, do as ActionManifest, dr as GOAL_HOST_PACKAGES, dt as proofHostSurfacesOf, ea as GuardOperation, ei as UserInteractionKind, en as GIT_COMMAND_TEMPLATES, eo as interpretClause, er as ACTIVE_HOST_COHORT_ID, et as SessionQuery, f as isRootPauseRequest, fa as WorkUnit, fi as captureClause, fn as commitIndexSnapshotDigest, fo as ActionSpec, fr as HOST_CAPABILITY_PACKAGE_GROUPS, ft as proofOperationMatches, g as observeAssistantOutcome, ga as ReleaseObservedIdentity, gi as extractMethod, gn as gitCommandMatchesTarget, go as SEMANTIC_ACTIONS, gr as HostCapabilityId, gt as sessionQuery, h as latestRootInstruction, ha as ReleaseGateDecision, hi as extractArtifactPaths, hn as executeRevalidatedGitEffect, ho as CERTIFICATE_VERSION_V2, hr as HostCapabilityEvaluation, ht as scopeCoverageDigest, i as CompletionDisposition, ia as PersistenceAuthorization, ii as ParsedConfirmation, in as GitCommandParseResult, io as kindOfScope, ir as ALPHA2_HOST_PACKAGES, it as canonicalProjection, j as RecoveryOptions, ja as CapabilityGap, ji as BindingActionClosure, jn as ToolResultInput, jo as validateActionManifest, jr as evaluateHostCapability, jt as FIRST_STEP_GUIDANCE, k as DEFAULT_RECOVERY_CHAR_BUDGET, ka as replayRebindResult, ki as AssetInterpretationFact, kn as hasCurrentCertificate, ko as semanticActionFromCommand, kr as bindLiveGoalCapability, kt as validateManifest, l as decideTurnBoundary, la as TargetValue, li as certifyCheckpoint, ln as GitPrestateEnvelope, lo as ACTION_MANIFEST, lr as ExecutableIdentity, lt as proofDigestV2, m as latestAssistantText, ma as PackageRow, mi as classifyClause, mn as createGitPrestateEnvelope, mo as CERTIFICATE_VERSION, mr as HostAuditProvenance, mt as requiredSubjectsOf, n as AssistantOutcomeObservation, na as HostStatus, ni as classifyUserInteraction, nn as GitCommandAccepted, no as isExecutableItem, nr as ACTIVE_HOST_LAUNCHER_VERSION, nt as bindProofToProjection, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as TargetCaptureReasonCode, oi as parseConfirmationMessage, on as GitEffectExecution, oo as namedActions, or as BASE_HOST_PACKAGES, ot as createProofManifestV2, p as isWholeTaskCompletionClaim, pa as createProjection, pi as captureItem, pn as commitTreeSnapshotDigest, po as BOUNDED_ARTIFACT_TYPES, pr as HOST_COHORTS, pt as proofV2Rejection, q as ProofKindCapability, qa as removalIsComplete, qi as GuardBoundary, qn as relevantEvidence, qr as currentContractDigest, qt as packageRowsFromActiveGraph, r as CONTROL_RECORD_PREFIX, ra as MessageCoverage, ri as CONFIRM_LINE_PATTERN, rn as GitCommandManifest, ro as isOpenObligation, rr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, rt as bindProofV2ToProjection, s as TurnStoppingDecision, sa as TargetCaptureStatus, si as CheckpointResult, sn as GitEffectRunner, so as semanticActionOfScope, sr as DEFAULT_HOST_LOCK, st as proofCapabilityReport, t as supersedeItem, ta as GuardProjection, ti as classifyTaskIntent, tn as GitAdapterAction, to as interpretMessage, tr as ACTIVE_HOST_COHORT_IDS, tt as SessionQueryV2, u as decideTurnStopping, ua as VerificationContract, ui as CaptureScope, un as GitTargetIdentity, uo as ACTION_MANIFEST_VERSION, ur as ExecutableIdentityBinding, ut as proofEvidenceConstraints, v as SESSION_API_UNSUPPORTED, va as ReleaseSettlement, vi as isInformationalMessage, vn as revalidateGitPrestate, vo as STOP_PROTOCOL_VERSION, vr as HostCohort, vt as validateProofManifest, w as RC015_HOST_PACKAGES, wa as proposeRebind, wi as GoalBoundaryAccess, wn as canonicalArgvFromCommand, wo as boundedArtifactChoiceMatches, wr as HostPlatform, wt as isVerifyingCapability, x as V3SessionLike, xa as RebindArgs, xi as BoundaryQualification, xn as CanonicalCommandSurface, xo as SemanticAction, xr as HostLockContext, xt as bindingSatisfies, y as SESSION_EVENT_ENVELOPE_INVALID, ya as BoundedSource, yi as segmentClauses, yn as verifiedLinearCommitReadback, yo as STOP_PROTOCOL_VERSION_V2, yr as HostCohortSelection, yt as validateProofManifestV2, z as PROOF_CAPABILITY_MATRIX, za as ProcessFactSource, zi as DerivedEnvelope, zn as DiagnosisNextAction, zr as MIN_SUPPORTED_HOST_VERSION, zt as ActiveProfileHostLock } from "./index-CZSt3D0G.js";
 import "@deepseek-ai/dsh-tools";
 import "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
@@ -152,4 +152,4 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockProfileRoot?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DelegationRef, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, admissibleForRemoval, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };