dsh-completion-guard 0.6.1 → 0.6.2

package/dist/{index-C_N6DaSF.d.ts → index-CZSt3D0G.d.ts}

@@ -190,6 +190,147 @@ declare function statefulActionsOfScope(body: string): StatefulAction[];
 /** Actions this interpretation names, in source order (diagnostics only). */
 declare function namedActions(text: string): string[];
 //#endregion
+//#region src/domain/capability-semantics.d.ts
+/**
+* 0.6.2 D062-01/D062-02: the shared, versioned semantics for WHAT the guard
+* knows, WHY it cannot certify, and WHICH remedy is actually reachable.
+*
+* The verdict is deliberately one closed projection instead of a pile of
+* ad-hoc strings, because every consumer (prepare, checkpoint detail, recovery
+* packet, rebind query, status) must render the same answer. Two failure modes
+* are excluded by construction:
+*
+* 1. The guard never turns its own missing adapter into a user-authority gap.
+*    An unsupported capability says "complete the work honestly and do not
+*    claim a certificate"; it never asks the user to restate the request as
+*    install/modify, and it never asks for input the user already gave.
+* 2. The guard never claims a fact it did not read. `declaredExitCode:
+*    'unknown'` stays unknown however successful the host tool call looked,
+*    and an opaque compound runner stays `operationAttribution: 'unknown'`
+*    rather than inheriting the last command's exit status.
+*
+* The taxonomy is written once here and consumed by every lane, so a future
+* capability must declare its own gap kind and remedy instead of drifting into
+* a sentence list. Nothing in this module mutates contract, evidence, digest,
+* certificate, or historical record state.
+*/
+/** Fine-grained, mutually exclusive reasons a contract item is not certified. */
+type CapabilityGap = "none" | "closed" | "constraint" | "interpretation_unknown" | "missing_adapter" | "target_missing" | "input_ambiguous" | "legacy_migration_required" | "host_unavailable" | "historical_preevidence_missing" | "operation_unattributable" | "condition_pending" | "delivery_pending";
+/** The reachable remedy for one gap. `remedy` is the machine-readable form of
+* `next_action`; the two are produced together so they cannot disagree. */
+type CapabilityRemedy = "none" | "collect_evidence" | "supply_target" | "await_root_input" | "deliver_answer" | "record_interpretation" | "report_uncertified" | "report_uncertified_capability_gap" | "restore_host" | "readback_only" | "fresh_root_instruction";
+interface CapabilityFact {
+  /**
+  * Whether this obligation's OWN action belongs to the certification action
+  * set in the installed cohort. It is deliberately independent of
+  * authorization: `false` says the build has no such capability, NEVER that
+  * the user did not authorize the work, and NEVER that the work may not be
+  * done. A `generic_run` obligation has no concrete action to support.
+  */
+  actionSupported: boolean;
+  /** A durable certification path exists for this item's own contract. */
+  certifiable: boolean;
+  gap: CapabilityGap;
+  remedy: CapabilityRemedy;
+  /** Reason codes that describe the evidence chain, never new authority. */
+  blockingReasonCodes: string[];
+}
+/**
+* Whether the item's obligation has a certification path in this cohort at
+* all. A generic_run item names no concrete action: the manifest still has a
+* generic entry (the guard may run and observe ordinary commands) but no
+* user-level completion contract can be certified from it, so the item is
+* uncertifiable while ordinary execution remains entirely permitted.
+*/
+declare function actionHasCertificationPath(action: SemanticAction, legacyMigration: boolean): boolean;
+/** The capability classification of an item's own obligation contract. */
+declare function capabilityFactOf(item: GuardItem): CapabilityFact;
+/**
+* What the console itself declared about the process. `declaredExitCode` is
+* `'unknown'` unless a real marker or a structured host fact said otherwise:
+* a host tool call that was not marked as an error is NOT a read exit code.
+*/
+type ProcessExitStatus = number | "unknown";
+/**
+* Why `outcome` says what it says, so a display or a consumer never reads more
+* than the source supports.
+*/
+type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
+/**
+* How far the console let the guard attribute effects to the obligation's own
+* operation. `unknown` is the honest answer for every opaque compound runner:
+* the last command's success never covers an earlier failure.
+*/
+type OperationAttribution = "single_operation" | "declared_per_operation" | "unknown";
+/** A credible per-operation subset the host itself declared. */
+interface DeclaredOperationResult {
+  action: string;
+  outcome: "success" | "failure" | "unknown";
+}
+/** Which source declared the terminal facts this reading is based on. */
+type ProcessFactSource = "run_declaration" | "structured_meta" | "rendered_markers";
+interface DerivedProcessFacts {
+  /** What the host tool call returned, before any interpretation. */
+  hostToolReturned: "result" | "error";
+  /** The console's own exit status, or `unknown` when never read. */
+  declaredExitCode: ProcessExitStatus;
+  /** Whether an explicit terminal marker (positive or negative) was read. */
+  terminalMarkerRead: boolean;
+  /** The outcome THIS LAYER derives from its own sources. It is deliberately a
+  * separate value from the frozen evidence `outcome`: the frozen field keeps
+  * the historical rule (0.6.1 and earlier read only `meta.exitCode` and the
+  * rendered markers, never the run declaration), while this layer reads the
+  * run declaration first. The two may therefore differ, and when they do the
+  * difference is stated in `frozenOutcomeConflict` rather than hidden by
+  * rewriting the historical field. */
+  outcome: "success" | "failure" | "unknown";
+  /** Why this layer's outcome is what it is. */
+  outcomeReason: ProcessOutcomeReason;
+  /** The highest-priority source that declared the facts used here. */
+  source: ProcessFactSource;
+  /** True when this layer's outcome differs from the frozen evidence
+  * `outcome`. A consumer that needs the historical reading uses the frozen
+  * field; a consumer that needs the run's own declaration uses this layer and
+  * can see that the two disagree. */
+  frozenOutcomeConflict: boolean;
+  /** How far the guard could attribute effects to the operation. */
+  operationAttribution: OperationAttribution;
+  /** Exactly the sub-results a trusted producer declared, if any. */
+  declaredOperationResults?: DeclaredOperationResult[];
+}
+/**
+* `partial_failure` may be reported only from a credible structured
+* per-operation result, and only for the exact declared subset. `unknown`
+* stays unknown: the guard never reconstructs a per-operation verdict from
+* stderr text, and never widens a declared subset into a claim about the rest.
+*/
+declare function partialFailureOf(facts: DerivedProcessFacts): {
+  failed: DeclaredOperationResult[];
+} | undefined;
+/** The one-line consequence of a gap kind, shared so no lane re-invents it. */
+declare function capabilityConsequence(gap: CapabilityGap): string;
+/**
+* D062-03: the applicable condition every removal-like outcome must carry.
+* "Clean" or "no longer listed" never proves "no dependants", so a completed
+* subset stays reported as the subset it is. These are the execution-side
+* facts the guard can name but cannot observe; it states them instead of
+* inventing a generic remover or promising an automatic block.
+*/
+declare const DEPENDENCY_FREE_ONLY_CONDITION: readonly string[];
+/** The per-object dependency status a report must keep separate. */
+type DependencyStatus = "dependency_free" | "in_use" | "unknown";
+/** Whether one candidate object may enter the automatic removal set. */
+declare function admissibleForRemoval(status: DependencyStatus): boolean;
+interface RemovalOutcomeReport {
+  metadataRemoved: "yes" | "no" | "unknown";
+  contentRemoved: "yes" | "no" | "partial" | "unknown";
+  directoryRemoved: "yes" | "no" | "unknown";
+}
+/** Only an object proven dependency-free AND fully removed may read as done. */
+declare function removalIsComplete(report: RemovalOutcomeReport, status: DependencyStatus): boolean;
+/** A partially removed object or an unknown dependant is never "no impact". */
+declare function removalIsPartiallyKnown(report: RemovalOutcomeReport, status: DependencyStatus): boolean;
+//#endregion
 //#region src/domain/rebind.d.ts
 interface RebindArgs {
   operation: "propose" | "query" | "withdraw";
@@ -711,6 +852,18 @@ interface GuardEvidence {
   adapterVersion?: string;
   externalOperationRef?: ExternalOperation;
   /**
+  * 0.6.2 D062-02: the LAYERED reading of a shell result, kept beside — never
+  * instead of — the frozen `outcome`/`parseStatus` pair. It separates four
+  * different claims the historical single `outcome` conflated: what the host
+  * tool call returned, what the console actually declared about the process
+  * (an exit code and its signal, or `unknown` when none was read), how far the
+  * effect could be attributed to this obligation's own operation, and the
+  * resulting business outcome. It is derived at replay from the same bytes, is
+  * excluded from every historical digest and certificate domain, and never
+  * rewrites an old `outcome`. Only shell-tool facts carry it.
+  */
+  processFacts?: DerivedProcessFacts;
+  /**
   * 0.6.0 C04: this fact came from a delegated subagent/task round-trip. A
   * delegated result is BOUNDED evidence for the parent unit — it is recorded
   * and visible, and it can never close a parent obligation or a parent unit
@@ -1552,6 +1705,12 @@ type ReasonClass = "parameter_missing" | "source_insufficient" | "condition_unme
 //#region src/domain/diagnostics.d.ts
 type TaskKind = "inquiry" | "action" | "deliverable" | "constraint" | "unresolved";
 type CertificationSupport = "supported" | "unsupported" | "needs_target" | "needs_evidence" | "unavailable";
+/**
+* Whether anything can still be repaired, and by whom (0.5, corrected by 0.6.2
+* D062-01). `user_input_required` means a real root choice was never made
+* (a genuinely absent identity or target selection) — never a capability this
+* build simply does not have, and never a request to re-word an instruction.
+*/
 type Repairability = "agent_repairable" | "user_input_required" | "unsupported" | "historical_gap" | "none";
 interface DiagnosisNextAction {
   kind: "report_only" | "collect_evidence" | "checkpoint" | "clarify_target" | "restore_host" | "none";
@@ -1572,6 +1731,13 @@ interface UnifiedItemDiagnosis {
   /** The seven-class label this fine-grained reason code belongs to (C12). */
   reason_class: ReasonClass;
   repairability: Repairability;
+  /**
+  * 0.6.2 D062-01: WHAT the guard knows and WHICH remedy is reachable, shared
+  * by every consumer. `reason_code` stays the fine display code; the
+  * capability fact explains the remedy, so no lane infers a root cause — or
+  * invents a reachable path — from one enum.
+  */
+  capability: CapabilityFact;
   missing_fields: string[];
   missing_facets: Array<"resolution" | "effect" | "state">;
   next_action: DiagnosisNextAction;
@@ -1600,6 +1766,13 @@ declare function itemDiagnosis(p: GuardProjection, item: GuardItem): {
 declare function evidenceAvailabilityReason(evidence: GuardEvidence): string | undefined;
 /** Shared display filter; certification remains the full domain check. */
 declare function relevantEvidence(p: GuardProjection, item: GuardItem, evidence: GuardEvidence): boolean;
+/**
+* The bounded, one-phrase form of a reachable remedy (0.6.2 D062-01). The
+* capability consequence above is the full explanation; a bounded page lists
+* many items, so it uses this phrase and leaves the prose to the detail and
+* preparation surfaces. Both come from the SAME capability fact.
+*/
+declare function capabilityRemedyPhrase(remedy: CapabilityRemedy): string;
 //#endregion
 //#region src/domain/evidence.d.ts
 interface ToolCallInput {
@@ -1638,6 +1811,8 @@ interface ToolSubject {
   reasonCode?: string;
   adapterId?: string;
   adapterVersion?: string;
+  /** 0.6.2 D062-02: the layered shell reading, present only for shell tools. */
+  processFacts?: DerivedProcessFacts;
   externalOperationRef?: ExternalOperation;
 }
 declare function extractToolSubject(call: ToolCallInput, result: ToolResultInput, defaultCwd?: string, hostLock?: HostLockEvaluation): ToolSubject;
@@ -2229,6 +2404,40 @@ interface RecoveryOptions {
 declare const DEFAULT_RECOVERY_CHAR_BUDGET = 4e3;
 declare const MIN_RECOVERY_CHAR_BUDGET = 512;
 /**
+* 0.6.2 D062-03: the standing condition a removal or cleanup outcome must keep.
+* The guard cannot observe another process's cwd or handles, so it states the
+* condition instead of inferring "no dependants" from a clean tree, an empty
+* `git worktree list`, or a directory that merely looks empty. This is one
+* shared wording, not an incident phrase list, and it never claims the plugin
+* can block a dangerous removal on its own.
+*/
+declare const CLEANUP_CONDITION_RULE: string;
+/**
+* The same condition at a medium budget (0.6.2 review): shorter than the full
+* rule, and still explicit that an unknown dependant forbids the claim.
+*/
+declare const CLEANUP_CONDITION_RULE_SHORT: string;
+/**
+* The same condition at emergency budget (0.6.2 review). A packet with fewer
+* than 1000 characters cannot carry the longer sentences AND its own rules, so
+* the condition is compressed — but it is NEVER omitted: the one thing a compact
+* packet must not lose is that an unknown dependant forbids a removal claim.
+*/
+declare const CLEANUP_CONDITION_RULE_COMPACT: string;
+/**
+* Pick the longest form of the condition the packet's budget can actually
+* afford. The caller reserves this line's length before any optional row, so
+* the condition is never the text that gets clipped.
+*/
+declare function cleanupConditionFor(budget: number): string;
+/**
+* Whether this gap needs the cleanup condition spelled out. The condition
+* belongs to every uncertifiable lane that could describe removal-like work —
+* which the guard cannot identify from text — so it rides the CAPABILITY
+* limitation itself, never a vocabulary of destructive verbs.
+*/
+declare function carriesCleanupCondition(gap: CapabilityGap): boolean;
+/**
 * An actionable one-line hint for how an open item's verification contract can
 * be closed. It never weakens the contract; it only names the missing facet so
 * the agent can produce the right evidence shape instead of reverse-engineering
@@ -2419,4 +2628,4 @@ declare function latestAssistantText(events: readonly {
 //#region src/domain/supersession.d.ts
 declare function supersedeItem(items: Map<string, GuardItem>, oldId: string, replacement: GuardItem): boolean;
 //#endregion
-export { canonicalProjection as $, boundedArtifactChoiceMatches as $a, SourceSpan as $i, AuditedExecutable as $n, isFrozenV042RebindResponse as $r, GitCommandParseResult as $t, openItems as A, interpretMessage as Aa, DeriveConfig as Ai, extractToolSubject as An, HostVersionDecision as Ar, claimedBatchHasRealRootInput as At, ProofHostSurface as B, ActionManifest as Ba, GoalRef as Bi, itemDiagnosis as Bn, satisfiesSupportedHostRange as Br, injectActiveProfileHostLock as Bt, RC015_RC2_HOST_PACKAGES as C, replayRebindResult as Ca, AssetInterpretationFact as Ci, goalCompletionDenial as Cn, bindLiveGoalCapability as Cr, OperationVerbEntry as Ct, MIN_RECOVERY_CHAR_BUDGET as D, InterpretOptions as Da, BoundaryQualificationKind as Di, ToolSubject as Dn, evaluateToolSurfaceCapability as Dr, FirstStepInjection as Dt, DEFAULT_RECOVERY_CHAR_BUDGET as E, Executee as Ea, BoundaryDisposition as Ei, ToolResultInput as En, evaluateHostLock as Er, FIRST_STEP_GUIDANCE as Et, PROOF_KINDS as F, namedActions as Fa, EvidenceOutcome as Fi, Repairability as Fn, SUPPORTED_HOST_RANGE as Fr, HostProfileError as Ft, ProofManifestV2 as G, SEMANTIC_ACTIONS as Ga, GuardItem as Gi, PROTOCOL_V4_NOTICE as Gn, authorityCaptureCounts as Gr, resolveActiveProfileHostLock as Gt, ProofKindCapability as H, BOUNDED_ARTIFACT_TYPES as Ha, GuardCheckpoint as Hi, CAPTURE_V042_NOTICE as Hn, AuthorityBlock as Hr, packageRowsFromActiveGraph as Ht, PROOF_KINDS_V2 as I, semanticActionOfScope as Ia, EvidenceParseStatus as Ii, TaskKind as In, SUPPORTED_HOST_VERSIONS as Ir, TargetHostGraph as It, ProofSurface as J, STOP_PROTOCOL_VERSION_V2 as Ja, GuardOperation as Ji, ACTIVE_HOST_COHORT_ID as Jn, UserInteractionKind as Jr, GIT_COMMAND_MANIFEST_IDS as Jt, ProofObligation as K, STATEFUL_ACTIONS as Ka, GuardItemKind as Ki, PROTOCOL_V5_NOTICE as Kn, segmentAuthorityBlocks as Kr, resolveInstalledHostLock as Kt, PROOF_MANIFEST_DOMAIN_V2 as L, statefulActionsOfScope as La, EvidenceRole as Li, UnifiedItemDiagnosis as Ln, compareHostVersions as Lr, combineHostPolicy as Lt, renderRecoveryPacket as M, isOpenObligation as Ma, DeriveScope as Mi, withDurability as Mn, LATEST_SUPPORTED_HOST_VERSION as Mr, lifecyclePhase as Mt, ALPHA3_HOST_PACKAGES as N, kindOfScope as Na, DerivedEnvelope as Ni, CertificationSupport as Nn, MIN_SUPPORTED_HOST_VERSION as Nr, previewFirstStepInjection as Nt, RecoveryOptions as O, ScopeInterpretation as Oa, DeferAuthorization as Oi, evidenceFromPersistedToolResult as On, hostVersionFromPackages as Or, FirstStepPreviewInput as Ot, PROOF_CAPABILITY_MATRIX as P, maskCodeSpans as Pa, EvidenceBinding as Pi, DiagnosisNextAction as Pn, ParsedHostVersion as Pr, ActiveProfileHostLock as Pt, bindProofV2ToProjection as Q, actionCompatible as Qa, PersistenceAuthorization as Qi, ALPHA2_HOST_PACKAGES as Qn, ParsedConfirmation as Qr, GitCommandManifest as Qt, PROOF_PROTOCOL_VERSION as R, ACTION_MANIFEST as Ra, ExpectedTransition as Ri, deriveItemDiagnosis as Rn, evaluateMinimumHostVersion as Rr, hostLockContextFromComposedDump as Rt, snapshotSessionEvents as S, rebindResponse as Sa, qualifyBoundary as Si, parseShellCommand as Sn, bindExecutableIdentity as Sr, ManifestIssue as St, RC1_HOST_PACKAGES as T, DirectiveClass as Ta, BindingActionClosure as Ti, ToolCallInput as Tn, evaluateHostCapability as Tr, ClaimedMessage as Tt, ProofKindV2 as U, CERTIFICATE_VERSION as Ua, GuardEvidence as Ui, DEFAULT_DELEGATION_TOOL_NAMES as Un, AuthorityBlockKind as Ur, packageRowsFromPnpmLock as Ut, ProofKind as V, ActionSpec as Va, GuardBoundary as Vi, relevantEvidence as Vn, currentContractDigest as Vr, inspectTargetHostGraph as Vt, ProofManifest as W, CERTIFICATE_VERSION_V2 as Wa, GuardIntegrity as Wi, PROTOCOL_V3_NOTICE as Wn, AuthorityKind as Wr, readActiveHostGraph as Wt, SessionQueryV2 as X, SemanticAction as Xa, HostStatus as Xi, ACTIVE_HOST_LAUNCHER_VERSION as Xn, classifyUserInteraction as Xr, GitAdapterAction as Xt, SessionQuery as Y, SUPPORTED_EVIDENCE_ADAPTERS as Ya, GuardProjection as Yi, ACTIVE_HOST_COHORT_IDS as Yn, classifyTaskIntent as Yr, GIT_COMMAND_TEMPLATES as Yt, bindProofToProjection as Z, StatefulAction as Za, MessageCoverage as Zi, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Zn, CONFIRM_LINE_PATTERN as Zr, GitCommandAccepted as Zt, progressFingerprint as _, confirmRebind as _a, GoalActivationState as _i, ParsedShell as _n, HostLockStatus as _r, evidenceCoverage as _t, NO_PROGRESS_RECORD_PREFIX as a, WaitAuthorization as aa, ClauseSegment as ai, GitTargetIdentity as an, semanticActionFromText as ao, GOAL_HOST_PACKAGES as ar, proofEvidenceConstraints as at, SessionApiError as b, proposeRebindV042 as ba, effectuateBoundary as bi, isRunExecutable as bn, HostToolSurface as br, COMMAND_SURFACE_MANIFEST as bt, classifyCompletionClaim as c, PackageRow as ca, classifyClause as ci, commitTreeSnapshotDigest as cn, canonicalizePath as co, HostAuditProvenance as cr, proofV2Rejection as ct, decisionBoundaryKey as d, ReleaseOperation as da, extractOperation as di, gitCommandMatchesTarget as dn, sanitizeClauseText as do, HostCapabilityRequest as dr, sessionQuery as dt, TargetCaptureReasonCode as ea, parseConfirmationMessage as ei, GitCommandRejected as en, isStatefulAction as eo, BASE_HOST_PACKAGES as er, createProofManifest as et, isRootPauseRequest as f, ReleaseSettlement as fa, isInformationalMessage as fi, parseGitCommandManifest as fn, sanitizeUrl as fo, HostCohort as fr, sessionQueryV2 as ft, observeAssistantOutcome as g, RebindProposal as ga, BoundaryRequest as gi, CanonicalCommandSurface as gn, HostLockEvaluation as gr, bindingSatisfies as gt, latestRootInstruction as h, RebindArgs as ha, BoundaryQualification as hi, CanonicalArgv as hn, HostLockContext as hr, EvidenceFacetCoverage as ht, CompletionDisposition as i, VerificationContract as ia, CaptureScope as ii, GitPrestateEnvelope as in, semanticActionFromCommand as io, ExecutableIdentityBinding as ir, proofDigestV2 as it, recoveryDigest as j, isExecutableItem as ja, DeriveResult as ji, isDeterministicCheck as jn, HostVersionStatus as jr, firstStepGuidance as jt, closingHint as k, interpretClause as ka, DelegationRef as ki, extractTextContent as kn, selectHostCohort as kr, LifecyclePhase as kt, decideTurnBoundary as l, ReleaseGateDecision as la, extractArtifactPaths as li, createGitPrestateEnvelope as ln, digestStrings as lo, HostCapabilityEvaluation as lr, requiredSubjectsOf as lt, latestAssistantText as m, ProposeOutcome as ma, BoundaryEffectuation as mi, verifiedLinearCommitReadback as mn, HostCohortSelectionReason as mr, validateProofManifestV2 as mt, AssistantOutcomeObservation as n, TargetTuple as na, RejectedBinding as ni, GitEffectRunner as nn, requestedTargetAuthorizesMutation as no, EXPECTED_HOST_PACKAGES as nr, proofCapabilityReport as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, WorkUnit as oa, captureClause as oi, LinearCommitReadback as on, validateActionManifest as oo, HOST_CAPABILITY_PACKAGE_GROUPS as or, proofHostSurfacesOf as ot, isWholeTaskCompletionClaim as p, BoundedSource as pa, segmentClauses as pi, revalidateGitPrestate as pn, sha256 as po, HostCohortSelection as pr, validateProofManifest as pt, ProofObligationV2 as q, STOP_PROTOCOL_VERSION as qa, GuardItemStatus as qi, deriveProjection as qn, TaskIntent as qr, verifyComposedHostLockDump as qt, CONTROL_RECORD_PREFIX as r, TargetValue as ra, certifyCheckpoint as ri, GitPrestateCheck as rn, requestedTargetMatchesResolved as ro, ExecutableIdentity as rr, proofDigest as rt, TurnStoppingDecision as s, createProjection as sa, captureItem as si, commitIndexSnapshotDigest as sn, validateActionTarget as so, HOST_COHORTS as sr, proofOperationMatches as st, supersedeItem as t, TargetCaptureStatus as ta, CheckpointResult as ti, GitEffectExecution as tn, requestedIdentityKey as to, DEFAULT_HOST_LOCK as tr, createProofManifestV2 as tt, decideTurnStopping as u, ReleaseObservedIdentity as ua, extractMethod as ui, executeRevalidatedGitEffect as un, normalizeClause as uo, HostCapabilityId as ur, scopeCoverageDigest as ut, SESSION_API_UNSUPPORTED as v, proposeRebind as va, GoalBoundaryAccess as vi, ShellParseStatus as vn, HostPlatform as vr, evidenceMatchesItem as vt, RC015_HOST_PACKAGES as w, AuthorityDisposition as wa, AssetObligation as wi, hasCurrentCertificate as wn, evaluateExternalWaitCapability as wr, validateManifest as wt, V3SessionLike as x, rebindAttemptKey as xa, isCurrentAcceptedBoundary as xi, parsePwshCommand as xn, LEGACY_HOST_COHORTS as xr, CommandSurfaceManifest as xt, SESSION_EVENT_ENVELOPE_INVALID as y, proposeRebindOutcome as ya, availableBoundaryQualifications as yi, canonicalArgvFromCommand as yn, HostProfileKind as yr, isVerifyingCapability as yt, PROOF_PROTOCOL_VERSION_V2 as z, ACTION_MANIFEST_VERSION as za, ExternalOperation as zi, evidenceAvailabilityReason as zn, parseHostVersion as zr, hostLockRowsFromComposedDump as zt };
+export { ProofSurface as $, ScopeInterpretation as $a, GuardItemStatus as $i, deriveProjection as $n, TaskIntent as $r, GIT_COMMAND_MANIFEST_IDS as $t, MIN_RECOVERY_CHAR_BUDGET as A, CapabilityFact as Aa, AssetObligation as Ai, ToolCallInput as An, semanticActionFromText as Ao, evaluateExternalWaitCapability as Ar, ClaimedMessage as At, PROOF_KINDS as B, ProcessOutcomeReason as Ba, EvidenceBinding as Bi, Repairability as Bn, ParsedHostVersion as Br, HostProfileError as Bt, RC015_RC2_HOST_PACKAGES as C, confirmRebind as Ca, GoalActivationState as Ci, ShellParseStatus as Cn, actionCompatible as Co, HostLockStatus as Cr, evidenceMatchesItem as Ct, CLEANUP_CONDITION_RULE_COMPACT as D, rebindAttemptKey as Da, isCurrentAcceptedBoundary as Di, parseShellCommand as Dn, requestedTargetAuthorizesMutation as Do, LEGACY_HOST_COHORTS as Dr, ManifestIssue as Dt, CLEANUP_CONDITION_RULE as E, proposeRebindV042 as Ea, effectuateBoundary as Ei, parsePwshCommand as En, requestedIdentityKey as Eo, HostToolSurface as Er, CommandSurfaceManifest as Et, openItems as F, DependencyStatus as Fa, DelegationRef as Fi, extractToolSubject as Fn, normalizeClause as Fo, selectHostCohort as Fr, claimedBatchHasRealRootInput as Ft, ProofHostSurface as G, capabilityFactOf as Ga, ExternalOperation as Gi, evidenceAvailabilityReason as Gn, parseHostVersion as Gr, injectActiveProfileHostLock as Gt, PROOF_MANIFEST_DOMAIN_V2 as H, actionHasCertificationPath as Ha, EvidenceParseStatus as Hi, UnifiedItemDiagnosis as Hn, SUPPORTED_HOST_VERSIONS as Hr, combineHostPolicy as Ht, recoveryDigest as I, DerivedProcessFacts as Ia, DeriveConfig as Ii, isDeterministicCheck as In, sanitizeClauseText as Io, HostVersionDecision as Ir, firstStepGuidance as It, ProofKindV2 as J, removalIsPartiallyKnown as Ja, GuardCheckpoint as Ji, CAPTURE_V042_NOTICE as Jn, AuthorityBlock as Jr, packageRowsFromPnpmLock as Jt, ProofKind as K, partialFailureOf as Ka, GoalRef as Ki, itemDiagnosis as Kn, satisfiesSupportedHostRange as Kr, inspectTargetHostGraph as Kt, renderRecoveryPacket as L, OperationAttribution as La, DeriveResult as Li, withDurability as Ln, sanitizeUrl as Lo, HostVersionStatus as Lr, lifecyclePhase as Lt, carriesCleanupCondition as M, CapabilityRemedy as Ma, BoundaryDisposition as Mi, ToolSubject as Mn, validateActionTarget as Mo, evaluateHostLock as Mr, FirstStepInjection as Mt, cleanupConditionFor as N, DEPENDENCY_FREE_ONLY_CONDITION as Na, BoundaryQualificationKind as Ni, evidenceFromPersistedToolResult as Nn, canonicalizePath as No, evaluateToolSurfaceCapability as Nr, FirstStepPreviewInput as Nt, CLEANUP_CONDITION_RULE_SHORT as O, rebindResponse as Oa, qualifyBoundary as Oi, goalCompletionDenial as On, requestedTargetMatchesResolved as Oo, bindExecutableIdentity as Or, OperationVerbEntry as Ot, closingHint as P, DeclaredOperationResult as Pa, DeferAuthorization as Pi, extractTextContent as Pn, digestStrings as Po, hostVersionFromPackages as Pr, LifecyclePhase as Pt, ProofObligationV2 as Q, InterpretOptions as Qa, GuardItemKind as Qi, PROTOCOL_V5_NOTICE as Qn, segmentAuthorityBlocks as Qr, verifyComposedHostLockDump as Qt, ALPHA3_HOST_PACKAGES as R, ProcessExitStatus as Ra, DeriveScope as Ri, CertificationSupport as Rn, sha256 as Ro, LATEST_SUPPORTED_HOST_VERSION as Rr, previewFirstStepInjection as Rt, snapshotSessionEvents as S, RebindProposal as Sa, BoundaryRequest as Si, ParsedShell as Sn, StatefulAction as So, HostLockEvaluation as Sr, evidenceCoverage as St, RC1_HOST_PACKAGES as T, proposeRebindOutcome as Ta, availableBoundaryQualifications as Ti, isRunExecutable as Tn, isStatefulAction as To, HostProfileKind as Tr, COMMAND_SURFACE_MANIFEST as Tt, PROOF_PROTOCOL_VERSION as U, admissibleForRemoval as Ua, EvidenceRole as Ui, capabilityRemedyPhrase as Un, compareHostVersions as Ur, hostLockContextFromComposedDump as Ut, PROOF_KINDS_V2 as V, RemovalOutcomeReport as Va, EvidenceOutcome as Vi, TaskKind as Vn, SUPPORTED_HOST_RANGE as Vr, TargetHostGraph as Vt, PROOF_PROTOCOL_VERSION_V2 as W, capabilityConsequence as Wa, ExpectedTransition as Wi, deriveItemDiagnosis as Wn, evaluateMinimumHostVersion as Wr, hostLockRowsFromComposedDump as Wt, ProofManifestV2 as X, DirectiveClass as Xa, GuardIntegrity as Xi, PROTOCOL_V3_NOTICE as Xn, AuthorityKind as Xr, resolveActiveProfileHostLock as Xt, ProofManifest as Y, AuthorityDisposition as Ya, GuardEvidence as Yi, DEFAULT_DELEGATION_TOOL_NAMES as Yn, AuthorityBlockKind as Yr, readActiveHostGraph as Yt, ProofObligation as Z, Executee as Za, GuardItem as Zi, PROTOCOL_V4_NOTICE as Zn, authorityCaptureCounts as Zr, resolveInstalledHostLock as Zt, progressFingerprint as _, ReleaseOperation as _a, extractOperation as _i, parseGitCommandManifest as _n, STATEFUL_ACTIONS as _o, HostCapabilityRequest as _r, sessionQueryV2 as _t, NO_PROGRESS_RECORD_PREFIX as a, SourceSpan as aa, isFrozenV042RebindResponse as ai, GitCommandRejected as an, maskCodeSpans as ao, AuditedExecutable as ar, createProofManifest as at, SessionApiError as b, ProposeOutcome as ba, BoundaryEffectuation as bi, CanonicalArgv as bn, SUPPORTED_EVIDENCE_ADAPTERS as bo, HostCohortSelectionReason as br, EvidenceFacetCoverage as bt, classifyCompletionClaim as c, TargetTuple as ca, RejectedBinding as ci, GitPrestateCheck as cn, statefulActionsOfScope as co, EXPECTED_HOST_PACKAGES as cr, proofDigest as ct, decisionBoundaryKey as d, WaitAuthorization as da, ClauseSegment as di, LinearCommitReadback as dn, ActionManifest as do, GOAL_HOST_PACKAGES as dr, proofHostSurfacesOf as dt, GuardOperation as ea, UserInteractionKind as ei, GIT_COMMAND_TEMPLATES as en, interpretClause as eo, ACTIVE_HOST_COHORT_ID as er, SessionQuery as et, isRootPauseRequest as f, WorkUnit as fa, captureClause as fi, commitIndexSnapshotDigest as fn, ActionSpec as fo, HOST_CAPABILITY_PACKAGE_GROUPS as fr, proofOperationMatches as ft, observeAssistantOutcome as g, ReleaseObservedIdentity as ga, extractMethod as gi, gitCommandMatchesTarget as gn, SEMANTIC_ACTIONS as go, HostCapabilityId as gr, sessionQuery as gt, latestRootInstruction as h, ReleaseGateDecision as ha, extractArtifactPaths as hi, executeRevalidatedGitEffect as hn, CERTIFICATE_VERSION_V2 as ho, HostCapabilityEvaluation as hr, scopeCoverageDigest as ht, CompletionDisposition as i, PersistenceAuthorization as ia, ParsedConfirmation as ii, GitCommandParseResult as in, kindOfScope as io, ALPHA2_HOST_PACKAGES as ir, canonicalProjection as it, RecoveryOptions as j, CapabilityGap as ja, BindingActionClosure as ji, ToolResultInput as jn, validateActionManifest as jo, evaluateHostCapability as jr, FIRST_STEP_GUIDANCE as jt, DEFAULT_RECOVERY_CHAR_BUDGET as k, replayRebindResult as ka, AssetInterpretationFact as ki, hasCurrentCertificate as kn, semanticActionFromCommand as ko, bindLiveGoalCapability as kr, validateManifest as kt, decideTurnBoundary as l, TargetValue as la, certifyCheckpoint as li, GitPrestateEnvelope as ln, ACTION_MANIFEST as lo, ExecutableIdentity as lr, proofDigestV2 as lt, latestAssistantText as m, PackageRow as ma, classifyClause as mi, createGitPrestateEnvelope as mn, CERTIFICATE_VERSION as mo, HostAuditProvenance as mr, requiredSubjectsOf as mt, AssistantOutcomeObservation as n, HostStatus as na, classifyUserInteraction as ni, GitCommandAccepted as nn, isExecutableItem as no, ACTIVE_HOST_LAUNCHER_VERSION as nr, bindProofToProjection as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, TargetCaptureReasonCode as oa, parseConfirmationMessage as oi, GitEffectExecution as on, namedActions as oo, BASE_HOST_PACKAGES as or, createProofManifestV2 as ot, isWholeTaskCompletionClaim as p, createProjection as pa, captureItem as pi, commitTreeSnapshotDigest as pn, BOUNDED_ARTIFACT_TYPES as po, HOST_COHORTS as pr, proofV2Rejection as pt, ProofKindCapability as q, removalIsComplete as qa, GuardBoundary as qi, relevantEvidence as qn, currentContractDigest as qr, packageRowsFromActiveGraph as qt, CONTROL_RECORD_PREFIX as r, MessageCoverage as ra, CONFIRM_LINE_PATTERN as ri, GitCommandManifest as rn, isOpenObligation as ro, ALPHA2_DSHMARKET_139_HOST_PACKAGES as rr, bindProofV2ToProjection as rt, TurnStoppingDecision as s, TargetCaptureStatus as sa, CheckpointResult as si, GitEffectRunner as sn, semanticActionOfScope as so, DEFAULT_HOST_LOCK as sr, proofCapabilityReport as st, supersedeItem as t, GuardProjection as ta, classifyTaskIntent as ti, GitAdapterAction as tn, interpretMessage as to, ACTIVE_HOST_COHORT_IDS as tr, SessionQueryV2 as tt, decideTurnStopping as u, VerificationContract as ua, CaptureScope as ui, GitTargetIdentity as un, ACTION_MANIFEST_VERSION as uo, ExecutableIdentityBinding as ur, proofEvidenceConstraints as ut, SESSION_API_UNSUPPORTED as v, ReleaseSettlement as va, isInformationalMessage as vi, revalidateGitPrestate as vn, STOP_PROTOCOL_VERSION as vo, HostCohort as vr, validateProofManifest as vt, RC015_HOST_PACKAGES as w, proposeRebind as wa, GoalBoundaryAccess as wi, canonicalArgvFromCommand as wn, boundedArtifactChoiceMatches as wo, HostPlatform as wr, isVerifyingCapability as wt, V3SessionLike as x, RebindArgs as xa, BoundaryQualification as xi, CanonicalCommandSurface as xn, SemanticAction as xo, HostLockContext as xr, bindingSatisfies as xt, SESSION_EVENT_ENVELOPE_INVALID as y, BoundedSource as ya, segmentClauses as yi, verifiedLinearCommitReadback as yn, STOP_PROTOCOL_VERSION_V2 as yo, HostCohortSelection as yr, validateProofManifestV2 as yt, PROOF_CAPABILITY_MATRIX as z, ProcessFactSource as za, DerivedEnvelope as zi, DiagnosisNextAction as zn, MIN_SUPPORTED_HOST_VERSION as zr, ActiveProfileHostLock as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as canonicalProjection, $a as boundedArtifactChoiceMatches, $i as SourceSpan, $n as AuditedExecutable, $r as isFrozenV042RebindResponse, $t as GitCommandParseResult, A as openItems, Aa as interpretMessage, Ai as DeriveConfig, An as extractToolSubject, Ar as HostVersionDecision, At as claimedBatchHasRealRootInput, B as ProofHostSurface, Ba as ActionManifest, Bi as GoalRef, Bn as itemDiagnosis, Br as satisfiesSupportedHostRange, Bt as injectActiveProfileHostLock, C as RC015_RC2_HOST_PACKAGES, Ca as replayRebindResult, Ci as AssetInterpretationFact, Cn as goalCompletionDenial, Cr as bindLiveGoalCapability, Ct as OperationVerbEntry, D as MIN_RECOVERY_CHAR_BUDGET, Da as InterpretOptions, Di as BoundaryQualificationKind, Dn as ToolSubject, Dr as evaluateToolSurfaceCapability, Dt as FirstStepInjection, E as DEFAULT_RECOVERY_CHAR_BUDGET, Ea as Executee, Ei as BoundaryDisposition, En as ToolResultInput, Er as evaluateHostLock, Et as FIRST_STEP_GUIDANCE, F as PROOF_KINDS, Fa as namedActions, Fi as EvidenceOutcome, Fn as Repairability, Fr as SUPPORTED_HOST_RANGE, Ft as HostProfileError, G as ProofManifestV2, Ga as SEMANTIC_ACTIONS, Gi as GuardItem, Gn as PROTOCOL_V4_NOTICE, Gr as authorityCaptureCounts, Gt as resolveActiveProfileHostLock, H as ProofKindCapability, Ha as BOUNDED_ARTIFACT_TYPES, Hi as GuardCheckpoint, Hn as CAPTURE_V042_NOTICE, Hr as AuthorityBlock, Ht as packageRowsFromActiveGraph, I as PROOF_KINDS_V2, Ia as semanticActionOfScope, Ii as EvidenceParseStatus, In as TaskKind, Ir as SUPPORTED_HOST_VERSIONS, It as TargetHostGraph, J as ProofSurface, Ja as STOP_PROTOCOL_VERSION_V2, Ji as GuardOperation, Jn as ACTIVE_HOST_COHORT_ID, Jr as UserInteractionKind, Jt as GIT_COMMAND_MANIFEST_IDS, K as ProofObligation, Ka as STATEFUL_ACTIONS, Ki as GuardItemKind, Kn as PROTOCOL_V5_NOTICE, Kr as segmentAuthorityBlocks, Kt as resolveInstalledHostLock, L as PROOF_MANIFEST_DOMAIN_V2, La as statefulActionsOfScope, Li as EvidenceRole, Ln as UnifiedItemDiagnosis, Lr as compareHostVersions, Lt as combineHostPolicy, M as renderRecoveryPacket, Ma as isOpenObligation, Mi as DeriveScope, Mn as withDurability, Mr as LATEST_SUPPORTED_HOST_VERSION, Mt as lifecyclePhase, N as ALPHA3_HOST_PACKAGES, Na as kindOfScope, Ni as DerivedEnvelope, Nn as CertificationSupport, Nr as MIN_SUPPORTED_HOST_VERSION, Nt as previewFirstStepInjection, O as RecoveryOptions, Oa as ScopeInterpretation, Oi as DeferAuthorization, On as evidenceFromPersistedToolResult, Or as hostVersionFromPackages, Ot as FirstStepPreviewInput, P as PROOF_CAPABILITY_MATRIX, Pa as maskCodeSpans, Pi as EvidenceBinding, Pn as DiagnosisNextAction, Pr as ParsedHostVersion, Pt as ActiveProfileHostLock, Q as bindProofV2ToProjection, Qa as actionCompatible, Qi as PersistenceAuthorization, Qn as ALPHA2_HOST_PACKAGES, Qr as ParsedConfirmation, Qt as GitCommandManifest, R as PROOF_PROTOCOL_VERSION, Ra as ACTION_MANIFEST, Ri as ExpectedTransition, Rn as deriveItemDiagnosis, Rr as evaluateMinimumHostVersion, Rt as hostLockContextFromComposedDump, S as snapshotSessionEvents, Sa as rebindResponse, Si as qualifyBoundary, Sn as parseShellCommand, Sr as bindExecutableIdentity, St as ManifestIssue, T as RC1_HOST_PACKAGES, Ta as DirectiveClass, Ti as BindingActionClosure, Tn as ToolCallInput, Tr as evaluateHostCapability, Tt as ClaimedMessage, U as ProofKindV2, Ua as CERTIFICATE_VERSION, Ui as GuardEvidence, Un as DEFAULT_DELEGATION_TOOL_NAMES, Ur as AuthorityBlockKind, Ut as packageRowsFromPnpmLock, V as ProofKind, Va as ActionSpec, Vi as GuardBoundary, Vn as relevantEvidence, Vr as currentContractDigest, Vt as inspectTargetHostGraph, W as ProofManifest, Wa as CERTIFICATE_VERSION_V2, Wi as GuardIntegrity, Wn as PROTOCOL_V3_NOTICE, Wr as AuthorityKind, Wt as readActiveHostGraph, X as SessionQueryV2, Xa as SemanticAction, Xi as HostStatus, Xn as ACTIVE_HOST_LAUNCHER_VERSION, Xr as classifyUserInteraction, Xt as GitAdapterAction, Y as SessionQuery, Ya as SUPPORTED_EVIDENCE_ADAPTERS, Yi as GuardProjection, Yn as ACTIVE_HOST_COHORT_IDS, Yr as classifyTaskIntent, Yt as GIT_COMMAND_TEMPLATES, Z as bindProofToProjection, Za as StatefulAction, Zi as MessageCoverage, Zn as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Zr as CONFIRM_LINE_PATTERN, Zt as GitCommandAccepted, _ as progressFingerprint, _a as confirmRebind, _i as GoalActivationState, _n as ParsedShell, _r as HostLockStatus, _t as evidenceCoverage, a as NO_PROGRESS_RECORD_PREFIX, aa as WaitAuthorization, ai as ClauseSegment, an as GitTargetIdentity, ao as semanticActionFromText, ar as GOAL_HOST_PACKAGES, at as proofEvidenceConstraints, b as SessionApiError, ba as proposeRebindV042, bi as effectuateBoundary, bn as isRunExecutable, br as HostToolSurface, bt as COMMAND_SURFACE_MANIFEST, c as classifyCompletionClaim, ca as PackageRow, ci as classifyClause, cn as commitTreeSnapshotDigest, co as canonicalizePath, cr as HostAuditProvenance, ct as proofV2Rejection, d as decisionBoundaryKey, da as ReleaseOperation, di as extractOperation, dn as gitCommandMatchesTarget, do as sanitizeClauseText, dr as HostCapabilityRequest, dt as sessionQuery, ea as TargetCaptureReasonCode, ei as parseConfirmationMessage, en as GitCommandRejected, eo as isStatefulAction, er as BASE_HOST_PACKAGES, et as createProofManifest, f as isRootPauseRequest, fa as ReleaseSettlement, fi as isInformationalMessage, fn as parseGitCommandManifest, fo as sanitizeUrl, fr as HostCohort, ft as sessionQueryV2, g as observeAssistantOutcome, ga as RebindProposal, gi as BoundaryRequest, gn as CanonicalCommandSurface, gr as HostLockEvaluation, gt as bindingSatisfies, h as latestRootInstruction, ha as RebindArgs, hi as BoundaryQualification, hn as CanonicalArgv, hr as HostLockContext, ht as EvidenceFacetCoverage, i as CompletionDisposition, ia as VerificationContract, ii as CaptureScope, in as GitPrestateEnvelope, io as semanticActionFromCommand, ir as ExecutableIdentityBinding, it as proofDigestV2, j as recoveryDigest, ja as isExecutableItem, ji as DeriveResult, jn as isDeterministicCheck, jr as HostVersionStatus, jt as firstStepGuidance, k as closingHint, ka as interpretClause, ki as DelegationRef, kn as extractTextContent, kr as selectHostCohort, kt as LifecyclePhase, l as decideTurnBoundary, la as ReleaseGateDecision, li as extractArtifactPaths, ln as createGitPrestateEnvelope, lo as digestStrings, lr as HostCapabilityEvaluation, lt as requiredSubjectsOf, m as latestAssistantText, ma as ProposeOutcome, mi as BoundaryEffectuation, mn as verifiedLinearCommitReadback, mr as HostCohortSelectionReason, mt as validateProofManifestV2, n as AssistantOutcomeObservation, na as TargetTuple, ni as RejectedBinding, nn as GitEffectRunner, no as requestedTargetAuthorizesMutation, nr as EXPECTED_HOST_PACKAGES, nt as proofCapabilityReport, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as WorkUnit, oi as captureClause, on as LinearCommitReadback, oo as validateActionManifest, or as HOST_CAPABILITY_PACKAGE_GROUPS, ot as proofHostSurfacesOf, p as isWholeTaskCompletionClaim, pa as BoundedSource, pi as segmentClauses, pn as revalidateGitPrestate, po as sha256, pr as HostCohortSelection, pt as validateProofManifest, q as ProofObligationV2, qa as STOP_PROTOCOL_VERSION, qi as GuardItemStatus, qn as deriveProjection, qr as TaskIntent, qt as verifyComposedHostLockDump, r as CONTROL_RECORD_PREFIX, ra as TargetValue, ri as certifyCheckpoint, rn as GitPrestateCheck, ro as requestedTargetMatchesResolved, rr as ExecutableIdentity, rt as proofDigest, s as TurnStoppingDecision, sa as createProjection, si as captureItem, sn as commitIndexSnapshotDigest, so as validateActionTarget, sr as HOST_COHORTS, st as proofOperationMatches, t as supersedeItem, ta as TargetCaptureStatus, ti as CheckpointResult, tn as GitEffectExecution, to as requestedIdentityKey, tr as DEFAULT_HOST_LOCK, tt as createProofManifestV2, u as decideTurnStopping, ua as ReleaseObservedIdentity, ui as extractMethod, un as executeRevalidatedGitEffect, uo as normalizeClause, ur as HostCapabilityId, ut as scopeCoverageDigest, v as SESSION_API_UNSUPPORTED, va as proposeRebind, vi as GoalBoundaryAccess, vn as ShellParseStatus, vr as HostPlatform, vt as evidenceMatchesItem, w as RC015_HOST_PACKAGES, wa as AuthorityDisposition, wi as AssetObligation, wn as hasCurrentCertificate, wr as evaluateExternalWaitCapability, wt as validateManifest, x as V3SessionLike, xa as rebindAttemptKey, xi as isCurrentAcceptedBoundary, xn as parsePwshCommand, xr as LEGACY_HOST_COHORTS, xt as CommandSurfaceManifest, y as SESSION_EVENT_ENVELOPE_INVALID, ya as proposeRebindOutcome, yi as availableBoundaryQualifications, yn as canonicalArgvFromCommand, yr as HostProfileKind, yt as isVerifyingCapability, z as PROOF_PROTOCOL_VERSION_V2, za as ACTION_MANIFEST_VERSION, zi as ExternalOperation, zn as evidenceAvailabilityReason, zr as parseHostVersion, zt as hostLockRowsFromComposedDump } from "./index-C_N6DaSF.js";
+import { $ as ProofSurface, $a as ScopeInterpretation, $i as GuardItemStatus, $n as deriveProjection, $r as TaskIntent, $t as GIT_COMMAND_MANIFEST_IDS, A as MIN_RECOVERY_CHAR_BUDGET, Aa as CapabilityFact, Ai as AssetObligation, An as ToolCallInput, Ao as semanticActionFromText, Ar as evaluateExternalWaitCapability, At as ClaimedMessage, B as PROOF_KINDS, Ba as ProcessOutcomeReason, Bi as EvidenceBinding, Bn as Repairability, Br as ParsedHostVersion, Bt as HostProfileError, C as RC015_RC2_HOST_PACKAGES, Ca as confirmRebind, Ci as GoalActivationState, Cn as ShellParseStatus, Co as actionCompatible, Cr as HostLockStatus, Ct as evidenceMatchesItem, D as CLEANUP_CONDITION_RULE_COMPACT, Da as rebindAttemptKey, Di as isCurrentAcceptedBoundary, Dn as parseShellCommand, Do as requestedTargetAuthorizesMutation, Dr as LEGACY_HOST_COHORTS, Dt as ManifestIssue, E as CLEANUP_CONDITION_RULE, Ea as proposeRebindV042, Ei as effectuateBoundary, En as parsePwshCommand, Eo as requestedIdentityKey, Er as HostToolSurface, Et as CommandSurfaceManifest, F as openItems, Fa as DependencyStatus, Fi as DelegationRef, Fn as extractToolSubject, Fo as normalizeClause, Fr as selectHostCohort, Ft as claimedBatchHasRealRootInput, G as ProofHostSurface, Ga as capabilityFactOf, Gi as ExternalOperation, Gn as evidenceAvailabilityReason, Gr as parseHostVersion, Gt as injectActiveProfileHostLock, H as PROOF_MANIFEST_DOMAIN_V2, Ha as actionHasCertificationPath, Hi as EvidenceParseStatus, Hn as UnifiedItemDiagnosis, Hr as SUPPORTED_HOST_VERSIONS, Ht as combineHostPolicy, I as recoveryDigest, Ia as DerivedProcessFacts, Ii as DeriveConfig, In as isDeterministicCheck, Io as sanitizeClauseText, Ir as HostVersionDecision, It as firstStepGuidance, J as ProofKindV2, Ja as removalIsPartiallyKnown, Ji as GuardCheckpoint, Jn as CAPTURE_V042_NOTICE, Jr as AuthorityBlock, Jt as packageRowsFromPnpmLock, K as ProofKind, Ka as partialFailureOf, Ki as GoalRef, Kn as itemDiagnosis, Kr as satisfiesSupportedHostRange, Kt as inspectTargetHostGraph, L as renderRecoveryPacket, La as OperationAttribution, Li as DeriveResult, Ln as withDurability, Lo as sanitizeUrl, Lr as HostVersionStatus, Lt as lifecyclePhase, M as carriesCleanupCondition, Ma as CapabilityRemedy, Mi as BoundaryDisposition, Mn as ToolSubject, Mo as validateActionTarget, Mr as evaluateHostLock, Mt as FirstStepInjection, N as cleanupConditionFor, Na as DEPENDENCY_FREE_ONLY_CONDITION, Ni as BoundaryQualificationKind, Nn as evidenceFromPersistedToolResult, No as canonicalizePath, Nr as evaluateToolSurfaceCapability, Nt as FirstStepPreviewInput, O as CLEANUP_CONDITION_RULE_SHORT, Oa as rebindResponse, Oi as qualifyBoundary, On as goalCompletionDenial, Oo as requestedTargetMatchesResolved, Or as bindExecutableIdentity, Ot as OperationVerbEntry, P as closingHint, Pa as DeclaredOperationResult, Pi as DeferAuthorization, Pn as extractTextContent, Po as digestStrings, Pr as hostVersionFromPackages, Pt as LifecyclePhase, Q as ProofObligationV2, Qa as InterpretOptions, Qi as GuardItemKind, Qn as PROTOCOL_V5_NOTICE, Qr as segmentAuthorityBlocks, Qt as verifyComposedHostLockDump, R as ALPHA3_HOST_PACKAGES, Ra as ProcessExitStatus, Ri as DeriveScope, Rn as CertificationSupport, Ro as sha256, Rr as LATEST_SUPPORTED_HOST_VERSION, Rt as previewFirstStepInjection, S as snapshotSessionEvents, Sa as RebindProposal, Si as BoundaryRequest, Sn as ParsedShell, So as StatefulAction, Sr as HostLockEvaluation, St as evidenceCoverage, T as RC1_HOST_PACKAGES, Ta as proposeRebindOutcome, Ti as availableBoundaryQualifications, Tn as isRunExecutable, To as isStatefulAction, Tr as HostProfileKind, Tt as COMMAND_SURFACE_MANIFEST, U as PROOF_PROTOCOL_VERSION, Ua as admissibleForRemoval, Ui as EvidenceRole, Un as capabilityRemedyPhrase, Ur as compareHostVersions, Ut as hostLockContextFromComposedDump, V as PROOF_KINDS_V2, Va as RemovalOutcomeReport, Vi as EvidenceOutcome, Vn as TaskKind, Vr as SUPPORTED_HOST_RANGE, Vt as TargetHostGraph, W as PROOF_PROTOCOL_VERSION_V2, Wa as capabilityConsequence, Wi as ExpectedTransition, Wn as deriveItemDiagnosis, Wr as evaluateMinimumHostVersion, Wt as hostLockRowsFromComposedDump, X as ProofManifestV2, Xa as DirectiveClass, Xi as GuardIntegrity, Xn as PROTOCOL_V3_NOTICE, Xr as AuthorityKind, Xt as resolveActiveProfileHostLock, Y as ProofManifest, Ya as AuthorityDisposition, Yi as GuardEvidence, Yn as DEFAULT_DELEGATION_TOOL_NAMES, Yr as AuthorityBlockKind, Yt as readActiveHostGraph, Z as ProofObligation, Za as Executee, Zi as GuardItem, Zn as PROTOCOL_V4_NOTICE, Zr as authorityCaptureCounts, Zt as resolveInstalledHostLock, _ as progressFingerprint, _a as ReleaseOperation, _i as extractOperation, _n as parseGitCommandManifest, _o as STATEFUL_ACTIONS, _r as HostCapabilityRequest, _t as sessionQueryV2, a as NO_PROGRESS_RECORD_PREFIX, aa as SourceSpan, ai as isFrozenV042RebindResponse, an as GitCommandRejected, ao as maskCodeSpans, ar as AuditedExecutable, at as createProofManifest, b as SessionApiError, ba as ProposeOutcome, bi as BoundaryEffectuation, bn as CanonicalArgv, bo as SUPPORTED_EVIDENCE_ADAPTERS, br as HostCohortSelectionReason, bt as EvidenceFacetCoverage, c as classifyCompletionClaim, ca as TargetTuple, ci as RejectedBinding, cn as GitPrestateCheck, co as statefulActionsOfScope, cr as EXPECTED_HOST_PACKAGES, ct as proofDigest, d as decisionBoundaryKey, da as WaitAuthorization, di as ClauseSegment, dn as LinearCommitReadback, do as ActionManifest, dr as GOAL_HOST_PACKAGES, dt as proofHostSurfacesOf, ea as GuardOperation, ei as UserInteractionKind, en as GIT_COMMAND_TEMPLATES, eo as interpretClause, er as ACTIVE_HOST_COHORT_ID, et as SessionQuery, f as isRootPauseRequest, fa as WorkUnit, fi as captureClause, fn as commitIndexSnapshotDigest, fo as ActionSpec, fr as HOST_CAPABILITY_PACKAGE_GROUPS, ft as proofOperationMatches, g as observeAssistantOutcome, ga as ReleaseObservedIdentity, gi as extractMethod, gn as gitCommandMatchesTarget, go as SEMANTIC_ACTIONS, gr as HostCapabilityId, gt as sessionQuery, h as latestRootInstruction, ha as ReleaseGateDecision, hi as extractArtifactPaths, hn as executeRevalidatedGitEffect, ho as CERTIFICATE_VERSION_V2, hr as HostCapabilityEvaluation, ht as scopeCoverageDigest, i as CompletionDisposition, ia as PersistenceAuthorization, ii as ParsedConfirmation, in as GitCommandParseResult, io as kindOfScope, ir as ALPHA2_HOST_PACKAGES, it as canonicalProjection, j as RecoveryOptions, ja as CapabilityGap, ji as BindingActionClosure, jn as ToolResultInput, jo as validateActionManifest, jr as evaluateHostCapability, jt as FIRST_STEP_GUIDANCE, k as DEFAULT_RECOVERY_CHAR_BUDGET, ka as replayRebindResult, ki as AssetInterpretationFact, kn as hasCurrentCertificate, ko as semanticActionFromCommand, kr as bindLiveGoalCapability, kt as validateManifest, l as decideTurnBoundary, la as TargetValue, li as certifyCheckpoint, ln as GitPrestateEnvelope, lo as ACTION_MANIFEST, lr as ExecutableIdentity, lt as proofDigestV2, m as latestAssistantText, ma as PackageRow, mi as classifyClause, mn as createGitPrestateEnvelope, mo as CERTIFICATE_VERSION, mr as HostAuditProvenance, mt as requiredSubjectsOf, n as AssistantOutcomeObservation, na as HostStatus, ni as classifyUserInteraction, nn as GitCommandAccepted, no as isExecutableItem, nr as ACTIVE_HOST_LAUNCHER_VERSION, nt as bindProofToProjection, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as TargetCaptureReasonCode, oi as parseConfirmationMessage, on as GitEffectExecution, oo as namedActions, or as BASE_HOST_PACKAGES, ot as createProofManifestV2, p as isWholeTaskCompletionClaim, pa as createProjection, pi as captureItem, pn as commitTreeSnapshotDigest, po as BOUNDED_ARTIFACT_TYPES, pr as HOST_COHORTS, pt as proofV2Rejection, q as ProofKindCapability, qa as removalIsComplete, qi as GuardBoundary, qn as relevantEvidence, qr as currentContractDigest, qt as packageRowsFromActiveGraph, r as CONTROL_RECORD_PREFIX, ra as MessageCoverage, ri as CONFIRM_LINE_PATTERN, rn as GitCommandManifest, ro as isOpenObligation, rr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, rt as bindProofV2ToProjection, s as TurnStoppingDecision, sa as TargetCaptureStatus, si as CheckpointResult, sn as GitEffectRunner, so as semanticActionOfScope, sr as DEFAULT_HOST_LOCK, st as proofCapabilityReport, t as supersedeItem, ta as GuardProjection, ti as classifyTaskIntent, tn as GitAdapterAction, to as interpretMessage, tr as ACTIVE_HOST_COHORT_IDS, tt as SessionQueryV2, u as decideTurnStopping, ua as VerificationContract, ui as CaptureScope, un as GitTargetIdentity, uo as ACTION_MANIFEST_VERSION, ur as ExecutableIdentityBinding, ut as proofEvidenceConstraints, v as SESSION_API_UNSUPPORTED, va as ReleaseSettlement, vi as isInformationalMessage, vn as revalidateGitPrestate, vo as STOP_PROTOCOL_VERSION, vr as HostCohort, vt as validateProofManifest, w as RC015_HOST_PACKAGES, wa as proposeRebind, wi as GoalBoundaryAccess, wn as canonicalArgvFromCommand, wo as boundedArtifactChoiceMatches, wr as HostPlatform, wt as isVerifyingCapability, x as V3SessionLike, xa as RebindArgs, xi as BoundaryQualification, xn as CanonicalCommandSurface, xo as SemanticAction, xr as HostLockContext, xt as bindingSatisfies, y as SESSION_EVENT_ENVELOPE_INVALID, ya as BoundedSource, yi as segmentClauses, yn as verifiedLinearCommitReadback, yo as STOP_PROTOCOL_VERSION_V2, yr as HostCohortSelection, yt as validateProofManifestV2, z as PROOF_CAPABILITY_MATRIX, za as ProcessFactSource, zi as DerivedEnvelope, zn as DiagnosisNextAction, zr as MIN_SUPPORTED_HOST_VERSION, zt as ActiveProfileHostLock } from "./index-CZSt3D0G.js";
 import "@deepseek-ai/dsh-tools";
 import "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
@@ -152,4 +152,4 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockProfileRoot?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DelegationRef, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, admissibleForRemoval, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as extractToolSubject, $n as isFrozenV042RebindResponse, $r as sha256, $t as proofDigest, A as lifecyclePhase, An as decisionBoundaryKey, Ar as STATEFUL_ACTIONS, At as compareHostVersions, B as RELEASE_RESERVATION_PREFIX, Bn as effectuateBoundary, Br as semanticActionFromCommand, Bt as certifyCheckpoint, C as gitCommandMatchesTarget, Cn as isVerifyingCapability, Cr as npmEscapedPackageName, Ct as evaluateToolSurfaceCapability, D as FIRST_STEP_GUIDANCE, Dn as classifyCompletionClaim, Dr as CERTIFICATE_VERSION, Dt as MIN_SUPPORTED_HOST_VERSION, E as verifiedLinearCommitReadback, En as NO_PROGRESS_TURNS_BEFORE_STOP, Er as BOUNDED_ARTIFACT_TYPES, Et as LATEST_SUPPORTED_HOST_VERSION, F as PROTOCOL_V4_NOTICE, Fn as observeAssistantOutcome, Fr as boundedArtifactChoiceMatches, Ft as RC015_HOST_PACKAGES, G as readbackSettlesContract, Gn as confirmRebind, Gr as validateManifest, Gt as PROOF_PROTOCOL_VERSION, H as contractById, Hn as qualifyBoundary, Hr as validateActionManifest, Ht as PROOF_KINDS, I as PROTOCOL_V5_NOTICE, In as progressFingerprint, Ir as isStatefulAction, It as RC1_HOST_PACKAGES, J as releasePreEffectDecision, Jn as proposeRebindV042, Jr as canonicalizePath, Jt as bindProofV2ToProjection, K as releaseContractFor, Kn as proposeRebind, Kr as classifyTaskIntent, Kt as PROOF_PROTOCOL_VERSION_V2, L as deriveProjection, Ln as goalCompletionDenial, Lr as requestedIdentityKey, Lt as ALPHA3_HOST_PACKAGES, M as CAPTURE_V042_NOTICE, Mn as isWholeTaskCompletionClaim, Mr as STOP_PROTOCOL_VERSION_V2, Mt as parseHostVersion, N as DEFAULT_DELEGATION_TOOL_NAMES, Nn as latestAssistantText, Nr as SUPPORTED_EVIDENCE_ADAPTERS, Nt as satisfiesSupportedHostRange, O as claimedBatchHasRealRootInput, On as decideTurnBoundary, Or as CERTIFICATE_VERSION_V2, Ot as SUPPORTED_HOST_RANGE, P as PROTOCOL_V3_NOTICE, Pn as latestRootInstruction, Pr as actionCompatible, Pt as RC015_RC2_HOST_PACKAGES, Q as extractTextContent, Qn as CONFIRM_LINE_PATTERN, Qr as sanitizeUrl, Qt as proofCapabilityReport, R as RELEASE_OPERATIONS, Rn as hasCurrentCertificate, Rr as requestedTargetAuthorizesMutation, Rt as authorityCaptureCounts, S as executeRevalidatedGitEffect, Sn as evidenceMatchesItem, Sr as canonicalRegistryBase, St as evaluateHostLock, T as revalidateGitPrestate, Tn as NO_PROGRESS_RECORD_PREFIX, Tr as ACTION_MANIFEST_VERSION, Tt as selectHostCohort, U as inFlightReservation, Un as currentContractDigest, Ur as validateActionTarget, Ut as PROOF_KINDS_V2, V as RELEASE_SETTLEMENT_PREFIX, Vn as isCurrentAcceptedBoundary, Vr as semanticActionFromText, Vt as PROOF_CAPABILITY_MATRIX, W as normalizeReleaseContract, Wn as createProjection, Wr as COMMAND_SURFACE_MANIFEST, Wt as PROOF_MANIFEST_DOMAIN_V2, X as supersedeItem, Xn as rebindResponse, Xr as normalizeClause, Xt as createProofManifest, Y as reservationFor, Yn as rebindAttemptKey, Yr as digestStrings, Yt as canonicalProjection, Z as evidenceFromPersistedToolResult, Zn as replayRebindResult, Zr as sanitizeClauseText, Zt as createProofManifestV2, _ as GIT_COMMAND_MANIFEST_IDS, _n as openItems, _r as kindOfScope, _t as LEGACY_HOST_COHORTS, a as injectActiveProfileHostLock, an as requiredSubjectsOf, ar as captureClause, at as parseShellCommand, b as commitTreeSnapshotDigest, bn as bindingSatisfies, br as semanticActionOfScope, bt as evaluateExternalWaitCapability, c as packageRowsFromPnpmLock, cn as sessionQueryV2, cr as extractArtifactPaths, ct as ACTIVE_HOST_LAUNCHER_VERSION, d as resolveInstalledHostLock, dn as certifiableOpenItems, dr as isInformationalMessage, dt as BASE_HOST_PACKAGES, en as proofDigestV2, er as parseConfirmationMessage, et as isDeterministicCheck, f as verifyComposedHostLockDump, fn as certificateClosure, fr as segmentClauses, ft as DEFAULT_HOST_LOCK, g as snapshotSessionEvents, gn as closingHint, gr as isOpenObligation, gt as HOST_COHORTS, h as SessionApiError, hn as MIN_RECOVERY_CHAR_BUDGET, hr as isExecutableItem, ht as HOST_CAPABILITY_PACKAGE_GROUPS, i as hostLockRowsFromComposedDump, in as proofV2Rejection, ir as relevantEvidence, it as parsePwshCommand, j as previewFirstStepInjection, jn as isRootPauseRequest, jr as STOP_PROTOCOL_VERSION, jt as evaluateMinimumHostVersion, k as firstStepGuidance, kn as decideTurnStopping, kr as SEMANTIC_ACTIONS, kt as SUPPORTED_HOST_VERSIONS, l as readActiveHostGraph, ln as validateProofManifest, lr as extractMethod, lt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, m as SESSION_EVENT_ENVELOPE_INVALID, mn as DEFAULT_RECOVERY_CHAR_BUDGET, mr as interpretMessage, mt as GOAL_HOST_PACKAGES, n as combineHostPolicy, nn as proofHostSurfacesOf, nr as evidenceAvailabilityReason, nt as canonicalArgvFromCommand, o as inspectTargetHostGraph, on as scopeCoverageDigest, or as captureItem, ot as ACTIVE_HOST_COHORT_ID, p as SESSION_API_UNSUPPORTED, pn as unitDescendantIds, pr as interpretClause, pt as EXPECTED_HOST_PACKAGES, q as releaseCoverage, qn as proposeRebindOutcome, qr as classifyUserInteraction, qt as bindProofToProjection, r as hostLockContextFromComposedDump, rn as proofOperationMatches, rr as itemDiagnosis, rt as isRunExecutable, s as packageRowsFromActiveGraph, sn as sessionQuery, sr as classifyClause, st as ACTIVE_HOST_COHORT_IDS, t as HostProfileError, tn as proofEvidenceConstraints, tr as deriveItemDiagnosis, tt as withDurability, u as resolveActiveProfileHostLock, un as validateProofManifestV2, ur as extractOperation, ut as ALPHA2_HOST_PACKAGES, v as GIT_COMMAND_TEMPLATES, vn as recoveryDigest, vr as maskCodeSpans, vt as bindExecutableIdentity, w as parseGitCommandManifest, wn as CONTROL_RECORD_PREFIX, wr as ACTION_MANIFEST, wt as hostVersionFromPackages, x as createGitPrestateEnvelope, xn as evidenceCoverage, xr as statefulActionsOfScope, xt as evaluateHostCapability, y as commitIndexSnapshotDigest, yn as renderRecoveryPacket, yr as namedActions, yt as bindLiveGoalCapability, z as RELEASE_OPERATION_SURFACES, zn as availableBoundaryQualifications, zr as requestedTargetMatchesResolved, zt as segmentAuthorityBlocks } from "./domain-DKr8sLZZ.js";
+import { $ as extractToolSubject, $n as proposeRebindV042, $r as requestedTargetMatchesResolved, $t as proofDigest, A as lifecyclePhase, An as NO_PROGRESS_RECORD_PREFIX, Ar as isOpenObligation, At as compareHostVersions, B as RELEASE_RESERVATION_PREFIX, Bn as observeAssistantOutcome, Br as BOUNDED_ARTIFACT_TYPES, Bt as certifyCheckpoint, C as gitCommandMatchesTarget, Cn as recoveryDigest, Cr as extractMethod, Ct as evaluateToolSurfaceCapability, D as FIRST_STEP_GUIDANCE, Dn as evidenceMatchesItem, Dr as interpretClause, Dt as MIN_SUPPORTED_HOST_VERSION, E as verifiedLinearCommitReadback, En as evidenceCoverage, Er as segmentClauses, Et as LATEST_SUPPORTED_HOST_VERSION, F as PROTOCOL_V4_NOTICE, Fn as decisionBoundaryKey, Fr as statefulActionsOfScope, Ft as RC015_HOST_PACKAGES, G as readbackSettlesContract, Gn as effectuateBoundary, Gr as STOP_PROTOCOL_VERSION, Gt as PROOF_PROTOCOL_VERSION, H as contractById, Hn as goalCompletionDenial, Hr as CERTIFICATE_VERSION_V2, Ht as PROOF_KINDS, I as PROTOCOL_V5_NOTICE, In as isRootPauseRequest, Ir as canonicalRegistryBase, It as RC1_HOST_PACKAGES, J as releasePreEffectDecision, Jn as currentContractDigest, Jr as actionCompatible, Jt as bindProofV2ToProjection, K as releaseContractFor, Kn as isCurrentAcceptedBoundary, Kr as STOP_PROTOCOL_VERSION_V2, Kt as PROOF_PROTOCOL_VERSION_V2, L as deriveProjection, Ln as isWholeTaskCompletionClaim, Lr as npmEscapedPackageName, Lt as ALPHA3_HOST_PACKAGES, M as CAPTURE_V042_NOTICE, Mn as classifyCompletionClaim, Mr as maskCodeSpans, Mt as parseHostVersion, N as DEFAULT_DELEGATION_TOOL_NAMES, Nn as decideTurnBoundary, Nr as namedActions, Nt as satisfiesSupportedHostRange, O as claimedBatchHasRealRootInput, On as isVerifyingCapability, Or as interpretMessage, Ot as SUPPORTED_HOST_RANGE, P as PROTOCOL_V3_NOTICE, Pn as decideTurnStopping, Pr as semanticActionOfScope, Pt as RC015_RC2_HOST_PACKAGES, Q as extractTextContent, Qn as proposeRebindOutcome, Qr as requestedTargetAuthorizesMutation, Qt as proofCapabilityReport, R as RELEASE_OPERATIONS, Rn as latestAssistantText, Rr as ACTION_MANIFEST, Rt as authorityCaptureCounts, S as executeRevalidatedGitEffect, Sn as openItems, Sr as extractArtifactPaths, St as evaluateHostLock, T as revalidateGitPrestate, Tn as bindingSatisfies, Tr as isInformationalMessage, Tt as selectHostCohort, U as inFlightReservation, Un as hasCurrentCertificate, Ur as SEMANTIC_ACTIONS, Ut as PROOF_KINDS_V2, V as RELEASE_SETTLEMENT_PREFIX, Vn as progressFingerprint, Vr as CERTIFICATE_VERSION, Vt as PROOF_CAPABILITY_MATRIX, W as normalizeReleaseContract, Wn as availableBoundaryQualifications, Wr as STATEFUL_ACTIONS, Wt as PROOF_MANIFEST_DOMAIN_V2, X as supersedeItem, Xn as confirmRebind, Xr as isStatefulAction, Xt as createProofManifest, Y as reservationFor, Yn as createProjection, Yr as boundedArtifactChoiceMatches, Yt as canonicalProjection, Z as evidenceFromPersistedToolResult, Zn as proposeRebind, Zr as requestedIdentityKey, Zt as createProofManifestV2, _ as GIT_COMMAND_MANIFEST_IDS, _n as DEFAULT_RECOVERY_CHAR_BUDGET, _r as removalIsComplete, _t as LEGACY_HOST_COHORTS, a as injectActiveProfileHostLock, ai as validateManifest, an as requiredSubjectsOf, ar as parseConfirmationMessage, at as parseShellCommand, b as commitTreeSnapshotDigest, bn as cleanupConditionFor, br as captureItem, bt as evaluateExternalWaitCapability, c as packageRowsFromPnpmLock, ci as canonicalizePath, cn as sessionQueryV2, cr as evidenceAvailabilityReason, ct as ACTIVE_HOST_LAUNCHER_VERSION, d as resolveInstalledHostLock, di as sanitizeClauseText, dn as certifiableOpenItems, dr as DEPENDENCY_FREE_ONLY_CONDITION, dt as BASE_HOST_PACKAGES, ei as semanticActionFromCommand, en as proofDigestV2, er as rebindAttemptKey, et as isDeterministicCheck, f as verifyComposedHostLockDump, fi as sanitizeUrl, fn as certificateClosure, fr as actionHasCertificationPath, ft as DEFAULT_HOST_LOCK, g as snapshotSessionEvents, gn as CLEANUP_CONDITION_RULE_SHORT, gr as partialFailureOf, gt as HOST_COHORTS, h as SessionApiError, hn as CLEANUP_CONDITION_RULE_COMPACT, hr as capabilityFactOf, ht as HOST_CAPABILITY_PACKAGE_GROUPS, i as hostLockRowsFromComposedDump, ii as COMMAND_SURFACE_MANIFEST, in as proofV2Rejection, ir as isFrozenV042RebindResponse, it as parsePwshCommand, j as previewFirstStepInjection, jn as NO_PROGRESS_TURNS_BEFORE_STOP, jr as kindOfScope, jt as evaluateMinimumHostVersion, k as firstStepGuidance, kn as CONTROL_RECORD_PREFIX, kr as isExecutableItem, kt as SUPPORTED_HOST_VERSIONS, l as readActiveHostGraph, li as digestStrings, ln as validateProofManifest, lr as itemDiagnosis, lt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, m as SESSION_EVENT_ENVELOPE_INVALID, mn as CLEANUP_CONDITION_RULE, mr as capabilityConsequence, mt as GOAL_HOST_PACKAGES, n as combineHostPolicy, ni as validateActionManifest, nn as proofHostSurfacesOf, nr as replayRebindResult, nt as canonicalArgvFromCommand, o as inspectTargetHostGraph, oi as classifyTaskIntent, on as scopeCoverageDigest, or as capabilityRemedyPhrase, ot as ACTIVE_HOST_COHORT_ID, p as SESSION_API_UNSUPPORTED, pi as sha256, pn as unitDescendantIds, pr as admissibleForRemoval, pt as EXPECTED_HOST_PACKAGES, q as releaseCoverage, qn as qualifyBoundary, qr as SUPPORTED_EVIDENCE_ADAPTERS, qt as bindProofToProjection, r as hostLockContextFromComposedDump, ri as validateActionTarget, rn as proofOperationMatches, rr as CONFIRM_LINE_PATTERN, rt as isRunExecutable, s as packageRowsFromActiveGraph, si as classifyUserInteraction, sn as sessionQuery, sr as deriveItemDiagnosis, st as ACTIVE_HOST_COHORT_IDS, t as HostProfileError, ti as semanticActionFromText, tn as proofEvidenceConstraints, tr as rebindResponse, tt as withDurability, u as resolveActiveProfileHostLock, ui as normalizeClause, un as validateProofManifestV2, ur as relevantEvidence, ut as ALPHA2_HOST_PACKAGES, v as GIT_COMMAND_TEMPLATES, vn as MIN_RECOVERY_CHAR_BUDGET, vr as removalIsPartiallyKnown, vt as bindExecutableIdentity, w as parseGitCommandManifest, wn as renderRecoveryPacket, wr as extractOperation, wt as hostVersionFromPackages, x as createGitPrestateEnvelope, xn as closingHint, xr as classifyClause, xt as evaluateHostCapability, y as commitIndexSnapshotDigest, yn as carriesCleanupCondition, yr as captureClause, yt as bindLiveGoalCapability, z as RELEASE_OPERATION_SURFACES, zn as latestRootInstruction, zr as ACTION_MANIFEST_VERSION, zt as segmentAuthorityBlocks } from "./domain-BtR3J5aL.js";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { createHash } from "node:crypto";
 import { basename, delimiter, dirname, isAbsolute, join, resolve } from "node:path";
@@ -72,6 +72,8 @@ const LANES = [
 	"available_qualifications"
 ];
 const MAX_BYTES = 12288;
+/** Inline item-row bytes; a larger row is summarized, never silently dropped. */
+const ITEM_ROW_BUDGET = 1850;
 const size = (value) => Buffer.byteLength(JSON.stringify(value), "utf8");
 const digest$1 = (value) => sha256(JSON.stringify(value));
 const lookup = (id) => id.length <= 128 ? id : `sha256:${sha256(id)}`;
@@ -178,13 +180,14 @@ function checkpointPage(p, query, full) {
 		detail_query: "Use detail_id and detail_offset; evidence_scope=history includes non-citable evidence."
 	};
 	const summarize = (row) => {
-		if (size(row) <= 1800) return row;
+		if (size(row) <= ITEM_ROW_BUDGET) return row;
 		return {
 			id: String(row.id ?? row.item_id).slice(0, 128),
 			reason_code: row.reason_code,
 			certifiable: row.certifiable,
 			next_step: typeof row.next_step === "string" ? row.next_step.slice(0, 240) : void 0,
 			adapter_disposition: row.adapter_disposition,
+			...row.binding_template !== void 0 ? { binding_template: row.binding_template } : {},
 			omitted: true,
 			detail_id: lookup(String(row.id ?? row.item_id))
 		};
@@ -310,6 +313,8 @@ function openItemForTool(projection, item) {
 	const action = item.semanticAction ?? "generic_run";
 	const spec = ACTION_MANIFEST.actions[action];
 	const template = bindingTemplate(projection, item);
+	const diagnosis = deriveItemDiagnosis(projection, item);
+	const compact = itemDiagnosis(projection, item);
 	return {
 		id: item.id,
 		revision: item.revision,
@@ -321,9 +326,17 @@ function openItemForTool(projection, item) {
 		kind: item.kind,
 		semantic_action: action,
 		requested_target: targetForTool(item.requestedTarget),
-		...itemDiagnosis(projection, item),
-		producer_disposition: ACTION_MANIFEST.actions[action].evidenceProducer,
+		certifiable: compact.certifiable,
+		reason_code: diagnosis.reason_code,
+		next_step: diagnosis.capability.remedy === "await_root_input" ? (diagnosis.next_action.resume_condition ?? capabilityRemedyPhrase(diagnosis.capability.remedy)).slice(0, 240) : capabilityRemedyPhrase(diagnosis.capability.remedy),
 		...item.targetCaptureStatus ? { target_capture_status: item.targetCaptureStatus } : {},
+		capability: {
+			action_supported: diagnosis.capability.actionSupported,
+			certifiable: diagnosis.capability.certifiable,
+			gap: diagnosis.capability.gap,
+			remedy: diagnosis.capability.remedy
+		},
+		producer_disposition: ACTION_MANIFEST.actions[action].evidenceProducer,
 		...item.targetCaptureReasonCode ? { target_capture_reason_code: item.targetCaptureReasonCode } : {},
 		predicate: {
 			predicate_id: spec.predicateId,
@@ -734,7 +747,21 @@ function createCheckpointTool(getProjection, onRejected, prepare = async () => t
 				...evidence.adapterId ? { adapter_id: evidence.adapterId } : {},
 				...evidence.adapterVersion ? { adapter_version: evidence.adapterVersion } : {},
 				adapter_disposition: evidenceAvailabilityReason(evidence) === void 0 ? "citable" : "unavailable",
-				...evidenceAvailabilityReason(evidence) ? { reason_code: evidenceAvailabilityReason(evidence) } : {}
+				...evidenceAvailabilityReason(evidence) ? { reason_code: evidenceAvailabilityReason(evidence) } : {},
+				...evidence.processFacts ? { process_facts: {
+					host_tool_returned: evidence.processFacts.hostToolReturned,
+					declared_exit_code: evidence.processFacts.declaredExitCode === "unknown" ? "unknown" : evidence.processFacts.declaredExitCode,
+					terminal_marker_read: evidence.processFacts.terminalMarkerRead,
+					process_outcome: evidence.processFacts.outcome,
+					outcome_reason: evidence.processFacts.outcomeReason,
+					source: evidence.processFacts.source,
+					frozen_outcome_conflict: evidence.processFacts.frozenOutcomeConflict,
+					operation_attribution: evidence.processFacts.operationAttribution,
+					...evidence.processFacts.declaredOperationResults ? { declared_operation_results: evidence.processFacts.declaredOperationResults.map((row) => ({
+						action: row.action,
+						outcome: row.outcome
+					})) } : {}
+				} } : {}
 			}));
 			return checkpointPage(projection, args, {
 				status: result.status,
@@ -3518,13 +3545,27 @@ function createContextGuardCommand(projectionFor, setEnabled, clearContract, lif
 			const passed = [...projection.items.values()].filter((item) => item.status === "passed").length;
 			let certifiable_missing_evidence = 0;
 			let unsupported = 0;
+			let input_required = 0;
+			let capability_limited = 0;
 			const reason_classes = {};
 			for (const item of projection.items.values()) {
 				if (item.status !== "pending") continue;
 				const diagnosis = deriveItemDiagnosis(projection, item);
 				reason_classes[diagnosis.reason_class] = (reason_classes[diagnosis.reason_class] ?? 0) + 1;
-				if (diagnosis.repairability === "agent_repairable") certifiable_missing_evidence += 1;
-				else if (diagnosis.certification === "unsupported") unsupported += 1;
+				switch (diagnosis.capability.remedy) {
+					case "collect_evidence":
+						certifiable_missing_evidence += 1;
+						break;
+					case "supply_target":
+					case "await_root_input":
+						input_required += 1;
+						break;
+					case "fresh_root_instruction":
+					case "restore_host":
+						capability_limited += 1;
+						break;
+					default: unsupported += 1;
+				}
 			}
 			const migration = migrationReport(projection);
 			const response = {
@@ -3538,6 +3579,8 @@ function createContextGuardCommand(projectionFor, setEnabled, clearContract, lif
 				diagnosis: {
 					certified: passed,
 					certifiable_missing_evidence,
+					input_required,
+					capability_limited,
 					unsupported,
 					reason_classes
 				},
@@ -5324,4 +5367,4 @@ function normalizeGoalState(value) {
 }
 
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, actionCompatible, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, actionCompatible, actionHasCertificationPath, admissibleForRemoval, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };

package/docs/ARCHITECTURE.md

@@ -43,6 +43,8 @@ Recovery packets keep the existing content-dedup and ride the next entered step.
 
 `deriveItemDiagnosis` is the single pure judge shared by checkpoint, recovery, the rebind item query, `context_guard_prepare`, and `/context-guard status`. Per item it reports a task kind (`inquiry`/`action`/`constraint`/…), certification support (`unsupported`/`needs_target`/`needs_evidence`/`unavailable`/`supported`), repairability (agent-repairable, needs user input, unsupported, historical gap, none), the exact missing target fields and evidence facets, and one concrete next action with a resume condition and a stable attempt fingerprint. Inquiries stay captured obligations whose honest next step is to deliver the answer; they are never prescribed a rebind. An effect recorded without its resolution prestate is a historical gap: read back observed state, never re-execute to mint evidence.
 
+0.6.2 adds the shared capability projection beside that verdict (`src/domain/capability-semantics.ts`). Every lane declares one gap kind — unknown interpretation, missing target, missing adapter, legacy migration, missing historical pre-evidence, unattributable operation, pending condition, pending delivery, unavailable host, or standing constraint — and exactly one reachable remedy. Every consumer reads that projection instead of inferring a root cause from one enum, which is what stops a capability this build lacks from being reported as a user-authorization gap. Shell facts additionally carry a layered reading (`processFacts`): the host tool's own return, the console's declared exit status or `unknown`, how far the effect was attributed to this obligation's operation, and the resulting business outcome. Those fields are derived at replay, are excluded from every digest and certificate domain, and never rewrite a historical `outcome` or `parseStatus`.
+
 `context_guard_prepare` is read-only. Before a stateful action it renders the supported command shape from the same audited parser the executor uses, the required resolution/effect/state order, reusable evidence references, the host capability verdict, and the exact missing target fields. It performs no action and never turns a guessed default into user authority.
 
 A log-derived retry ledger keys each rejected rebind attempt by its stable inputs and outcome. An identical second attempt returns `unchanged` with the resume condition instead of a fresh rejection; new related evidence, a new root instruction, or a changed target produces a new key and re-opens evaluation.