dsh-completion-guard 0.6.1 → 0.6.3

package/CHANGELOG.md

@@ -2,6 +2,100 @@
 
 All notable changes to this project are documented here. The project is pre-1.0; release versions track the plugin lifecycle, not stabilised API promises.
 
+## 0.6.3 - 2026-09-18
+
+Repairs execution authority, target identity, preparation consistency and legacy
+record eligibility. For publication status and same-artifact native evidence, use
+[the versioned release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.6.3).
+[Local acceptance](docs/LOCAL_ACCEPTANCE.md) records the source checks.
+
+### Changes
+
+- **Execution requires an independently recognized instruction.** Questions,
+  explanations, reported or quoted commands cannot grant execution authority.
+  Mixed requests whose action remains inside that scope stay unresolved and
+  cannot be closed by an ordinary answer. Write an independent instruction as
+  another sentence or semicolon-separated clause. Stored execution qualification
+  is inherited without promotion and consumed by both prepare and execution.
+  See the [contract revision](docs/CONTRACT_REVISION_0_6_3.md) for the intentional
+  compatibility change.
+- **The session working directory is no longer a target selection.** An
+  obligation's target now carries its provenance: an explicit name or path, a
+  phrase that selects the current repository, a trusted host selection, or a
+  unique selection inherited from another obligation of the same work unit. A
+  git action whose clause names no repository keeps that directory as
+  environment context only, so it stays a target clarification instead of
+  authorizing a mutation the root never chose. Several equally sourced
+  candidates stay ambiguous; a different repository is still refused.
+- **Preparation and execution answer the same compatibility question.**
+  `context_guard_prepare` evaluates the current item, action, revision and
+  target through the judgement the mutation gate enforces, reports
+  `incompatible` with the item's own action when the assumption is not what the
+  obligation records, and only ever returns a caller-named recipe labelled
+  `recipe_only`. A caller-supplied target that differs from the item's is
+  reported as a proposal, not as authority.
+- **Records captured under earlier rules are not inherited as passes.** An
+  upgrade eligibility check runs before any terminal filtering and covers
+  records the open-closure computation skips, including ones already
+  `answered`. A record whose own text still orders work, or whose git target has
+  no auditable source, is marked `needs_review`: its historical status is
+  preserved, nothing is re-executed, and the record blocks new certificates and
+  Goal completion instead of producing a warning. Unknown state versions are
+  reported rather than assumed compatible.
+- Codex alignment is restated honestly. A new recording executes the installed
+  Codex module's own reply-only delivery judge on twelve shared inputs
+  (`tests/fixtures/cross-end/codex-0.13.9.shape.json`), and the cross-end ledger
+  records each family's measured disposition. On this batch Codex refuses to
+  close all twelve, so the mixed-request and pure-question families are
+  `not-aligned` in the direction that matters, and the
+  `trusted-answer-delivery` claim is downgraded from `aligned`.
+- **Target uniqueness includes every identity field.** Candidate lists preserve
+  case where identity is case-sensitive, and package specs contribute both name
+  and version. Ordinary capture, restatements and every action-plan entry reject
+  conflicting choices. Restatements bind the new action and target together;
+  only omitted fields with unique sources can be inherited.
+
+### Upgrade and validation
+
+Write an intended action as an independent instruction when it shares a question
+or explanation's scope. Legacy records without execution qualification require
+review; no historical action is replayed. The exact supported DSH versions remain
+`0.1.5-rc.2 || 0.1.5-rc.1`.
+
+The final source suite passed 2140 tests with one skip. Historical repair rounds,
+contract changes and evidence limits are retained in
+[local acceptance](docs/LOCAL_ACCEPTANCE.md). These checks do not replace the
+exact-artifact native annexes attached to the versioned Release.
+
+## 0.6.2 - 2026-09-16
+
+### Changes
+
+- Ordinary tasks without a certification adapter now report the capability
+  limit without asking the user to restate the request or rebind it as another
+  action. Prepare, checkpoint, recovery and status share the same diagnosis.
+- Shell evidence distinguishes the historical outcome from declared process
+  results and operation attribution. Checkpoint exposes the source and conflict
+  flag. Existing outcome rules and digest inputs remain unchanged; opaque
+  compound commands do not gain per-operation success from their final exit.
+- Recovery retains the dependency-free removal condition even at the smallest
+  supported budget. Metadata, content, directory and dependency status remain
+  separate; this adds no removal executor or automatic safety gate.
+- Bounded Codex comparisons now include disposable prompt-ledger lifecycle
+  cases for pending, user wait, missing-proof correction and identical mixed
+  results. These are function-level measurements, not native acceptance or
+  full product parity. See [the result contract](docs/CROSS_END_RESULT_CONTRACT.md).
+- Retired duplicate repair notes and the superseded 0.6.1 planning document;
+  historical citations point to their exact Git snapshot. Current limitations
+  remain in the semantic compatibility document and release plan.
+
+### Validation
+
+This is a source release candidate. Local checks and remaining CI,
+native T06, exact-artifact and publication gates are recorded in
+[local acceptance](docs/LOCAL_ACCEPTANCE.md) and the
+[release plan](docs/RELEASE_PLAN_0_6_2.md).
+
 ## 0.6.1 (2026-09-15)
 
 Repairs attachment handling, conservative request interpretation, discovery pagination and evidence guidance after the Windows 0.6.0 review.
@@ -343,7 +437,7 @@ old meaning; nothing is re-read or re-labelled.
 
 ### Planned
 
-- Track answer delivery separately from execution certification. The design and remaining semantic coverage are recorded in [next-version repair notes](docs/NEXT_VERSION_REPAIR_NOTES.md); question closure is not changed by this patch.
+- Track answer delivery separately from execution certification. The design and remaining semantic coverage are recorded in [next-version repair notes](https://github.com/GreenLv/dsh-completion-guard/blob/d11009d8f755ecee7d288cff18250c7b372cfd2a/docs/NEXT_VERSION_REPAIR_NOTES.md); question closure is not changed by this patch.
 
 ## 0.5.2 - 2026-09-11
 

package/CHANGELOG.zh-CN.md

@@ -2,6 +2,39 @@
 
 本项目的重要变化记录在这里。项目仍处于 1.0 之前；版本号跟踪插件生命周期，不代表 API 已稳定。
 
+## 0.6.3（2026-09-18）
+
+修复执行授权、目标身份、准备/执行判据与旧记录资格。发布状态及同一制品的原生验收证据见[对应 Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.6.3)；[本地验收记录](docs/LOCAL_ACCEPTANCE.md) 保留源码检查。
+
+### 变更
+
+- **只有独立识别出的指令才能获得执行资格。** 疑问、解释、转述与引用命令不授予执行权限；动作仍处于这些范围内的混合请求保持未决，普通回答不能将其关闭。需要执行时，请另起一句或用分号分隔独立指令。资格持久保存，子项只能继承而不能提升，prepare 与执行共用它。此项有意收窄自动授权范围，详见[合同修订说明](docs/CONTRACT_REVISION_0_6_3.md)。
+- **会话工作目录不再等于用户选择的目标。** 义务的目标现在带有来源：显式名称或路径、明确选择当前仓库的表达、受信宿主选择，或来自同一工作单元内另一义务的唯一可审计选择。子句未指明仓库的 Git 动作只把该目录作为环境上下文保留，因此仍是目标待澄清，而不是为根用户未选择的变更放行。多个同源候选保持歧义；指向另一仓库仍被拒绝。
+- **prepare 与执行共用同一兼容判据。** `context_guard_prepare` 用变更门禁所执行的同一判据评估当前条目、动作、修订与目标：假设与义务记载不符时返回 `incompatible` 并指出条目自身的动作，只返回标注 `recipe_only` 的调用者假设手册；调用者提供的目标与条目自身目标不同时按“提议”报告，不作为授权。
+- **按旧规则捕获的记录不再被继承为通过。** 升级资格检查在任何终态过滤之前执行，覆盖开闭包计算会跳过的记录，包括已 `answered` 的记录。自身文本仍包含执行要求、或 Git 目标缺少可审计来源的记录被标记 `needs_review`：历史状态原样保留，不重放任何动作，并阻断新证书与 Goal 完成结论，而不是只给旁路警告。未知状态版本会被报告，不再假定兼容。
+- 如实重述 Codex 对齐范围。新增实测记录执行已安装 Codex 模块自身的纯回答交付判据（12 条共享输入，`tests/fixtures/cross-end/codex-0.13.9.shape.json`），跨端台账逐族记录实测结论。本批 12 条 Codex 全部拒绝以此方式关闭，故混合请求与纯问句两族记为关键方向上的 `not-aligned`，`trusted-answer-delivery` 从 `aligned` 下调。
+- **目标唯一性覆盖全部身份字段。** 候选按各字段的身份规则处理大小写；包规格同时贡献包名和版本。普通捕获、重述及动作计划的每一项都拒绝冲突选择。重述把新动作与新目标一起绑定，仅从唯一来源继承省略的字段。
+
+### 升级与验证
+
+动作仍处于疑问或解释范围时，请将要执行的动作写成独立指令。缺少执行资格的旧记录需要复核，不重放历史动作。支持的 DSH 版本仍为 `0.1.5-rc.2 || 0.1.5-rc.1`。
+
+最终源码测试为 2140 项通过、1 项跳过。历轮修复、合同调整与证据边界保留在[本地验收记录](docs/LOCAL_ACCEPTANCE.md)；源码检查不能代替对应 Release 附带的精确制品原生验收附件。
+
+## 0.6.2（2026-09-16）
+
+### 变更
+
+- 普通任务没有认证适配器时，明确报告能力限制，不再要求用户改说另一动作或重绑定。prepare、checkpoint、恢复包和 status 共用诊断。
+- shell 证据分开报告历史 outcome、明确声明的进程结果与操作归属；checkpoint 同时输出来源和冲突标记。旧 outcome 规则与摘要输入保持不变，不透明复合命令不会因最后退出成功获得逐操作成功结论。
+- 最小预算的恢复包也保留“仅删除已证明无依赖对象”的条件；元数据、内容、目录与依赖状态分别报告。不新增删除执行器或普通工具审批。
+- Codex 有界对照新增隔离合成账本，实测 pending、用户等待、缺证纠正及同一混合结果。它证明函数级行为，不等于原生验收或全功能对齐，详见[结果合同](docs/CROSS_END_RESULT_CONTRACT.md)。
+- 清理重复修复笔记和已被替代的 0.6.1 计划；历史引用保留精确 Git 快照，当前限制集中在语义兼容说明与发版计划。
+
+### 验证范围
+
+当前为源码发布候选。本地结果与尚缺的 CI、T06 原生、精确制品和发布门槛见[验收记录](docs/LOCAL_ACCEPTANCE.md)及[发版计划](docs/RELEASE_PLAN_0_6_2.md)。
+
 ## 0.6.1（2026-09-15）
 
 修复 Windows 0.6.0 复核发现的附件处理、保守解释、发现分页和证据诊断问题。
@@ -127,7 +160,7 @@
 
 ### 后续计划
 
-- 将回答交付与执行认证分开记录。设计及剩余语义覆盖见[下版修复记录](docs/NEXT_VERSION_REPAIR_NOTES.md)；本次补丁未改变问答关闭规则。
+- 将回答交付与执行认证分开记录。设计及剩余语义覆盖见[下版修复记录](https://github.com/GreenLv/dsh-completion-guard/blob/d11009d8f755ecee7d288cff18250c7b372cfd2a/docs/NEXT_VERSION_REPAIR_NOTES.md)；本次补丁未改变问答关闭规则。
 
 ## 0.5.2 - 2026-09-11
 

package/README.md

@@ -8,10 +8,13 @@ An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks
 
 ## Quick start
 
-Once **0.6.1** is available in the registry, install it into the DSH Web environment. Candidate and platform results are recorded in [LOCAL_ACCEPTANCE](docs/LOCAL_ACCEPTANCE.md):
+For version **0.6.3**, use the command below after confirming that its
+[GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.6.3)
+is published. The release contains the exact artifact identity and platform evidence;
+[source acceptance](docs/LOCAL_ACCEPTANCE.md) records the development checks.
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.6.1
+dsh plugin --profile web add dsh-completion-guard@0.6.3
 ```
 
 **Upgrade and restart DSH before running the host-lock checks below.** The lock records the package versions and installation directories DSH actually uses. A lock generated before an upgrade describes the old packages and will fail against the new runtime. `inject` writes to `<profile>/cordis.patch.yml`, so back up that file first.
@@ -49,7 +52,7 @@ Activation is opt-in by default. `status` shows whether the Guard is on, its sta
 
 ## Status and compatibility
 
-Version 0.6.1 supports exactly **DSH `0.1.5-rc.2` or `0.1.5-rc.1`** with Cordis `4.0.2`. These are the latest registered release and the verified minimum. The previous Session API, V2 event vocabulary, and every older host package set remain removed. If you are upgrading from DSH `0.1.2-rc.1`, **start a new session**: Guard does not migrate old logs, proposals or certificates, and it never deletes or reinterprets your old data.
+Version 0.6.3 supports exactly **DSH `0.1.5-rc.2` or `0.1.5-rc.1`** with Cordis `4.0.2`. These are the latest registered release and the verified minimum. The previous Session API, V2 event vocabulary, and every older host package set remain removed. If you are upgrading from DSH `0.1.2-rc.1`, **start a new session**: Guard does not migrate old logs, proposals or certificates, and it never deletes or reinterprets your old data.
 
 Package discovery and npm installation now publish the same newest-first exact union, `0.1.5-rc.2 || 0.1.5-rc.1`. Older versions, unregistered stable `0.1.5`, and future versions are not advertised as supported. Every admitted version must still match its complete 33-package DSH core graph; missing, mixed, or unknown graphs fail closed.
 
@@ -112,6 +115,80 @@ Use `context_guard_rebind` to propose an exact, complete split of the old text.
 
 The default `context_guard_checkpoint` call uses `bindings: []` for diagnosis. It shows at most eight current items/constraints and ten evidence rows, within 12 KiB of plugin JSON. `pagination` reports totals and a separate `next_cursor` for each list; the first page is not the whole contract. Use `item_ids` or `evidence_ids` to focus a query, or `evidence_scope: "history"` for the complete evidence history, including rows marked unavailable. Keep the query unchanged when following a cursor; a changed contract or evidence snapshot requires a fresh query. Large rows expose `detail_id`; retrieve chunks with `detail_offset` and return the first response's `snapshot` as `detail_snapshot` on later chunks. All queries remain read-only and never shrink the certification set.
 
+## What 0.6.3 changes for ordinary work
+
+Four things you will notice, and the one that matters most.
+
+**A question never deletes work beside it — and a mixed clause is no longer
+auto-authorized.** Separate clauses keep their own readings, so
+"更新插件，检查是否存在更新，安装新主题，记录变更。" is still an update, a
+question, an install and a record: the answer closes the question and the other
+three stay open. But when a question, an explanation, an investigation and an
+action share ONE clause, the Guard no longer guesses that the action is a
+separate instruction. It keeps the whole clause as one **undecided** obligation,
+which stays visible, cannot be closed by an ordinary answer, cannot take a
+completion certificate, and authorizes nothing — write the action as its own
+sentence to authorize it ("Check whether the cache is valid. Then install the
+package."). This is the deliberate narrowing recorded in
+[docs/CONTRACT_REVISION_0_6_3.md](docs/CONTRACT_REVISION_0_6_3.md): the earlier
+build tried to prove that such an action had left the question's scope, and every
+proof turned out to be a guess about vocabulary or word position. A purely
+informational request still closes with the answer it receives.
+
+**Where work happens is no longer assumed from where the session started.** When
+an instruction says which repository to change, the Guard records that choice
+and its source. When it does not, the session's working directory is kept as
+context only: a commit or push that never named a repository stays an explicit
+open question instead of being authorized against whichever directory the
+session happened to start in. A short follow-up such as "提交并推送" inherits the
+repository only when the current work unit holds exactly one repository the user
+already named; two candidates stay an explicit choice for you, and a repository
+called `/repo-a.js` is still a repository — a file extension is part of the name
+you gave, not proof of what kind of thing it is.
+
+**`context_guard_prepare` answers about the item you actually asked about.** It
+now reports whether your intended action, revision and target match the current
+obligation, using the same judgement the execution gate applies. If you assume a
+different action, it says so and names the item's own action instead of handing
+you a recipe the gate would refuse; an action manual is labelled `recipe_only`,
+and a target you supply that the obligation did not select is reported as a
+proposal, never as authority.
+
+**An obligation recorded by an earlier version is never inherited as a pass.**
+Upgrading to 0.6.3 re-reads the records that can still affect the current
+conclusion — including ones already marked answered — and flags any whose own
+text still orders work, or whose git target has no auditable source, as needing
+review. Their history is preserved byte for byte and nothing is re-executed, but
+they block a new certificate and a Goal completion until you resolve them, so a
+misreading an earlier version published cannot quietly become current truth.
+
+**The Guard no longer asks you to re-word a request it cannot certify.** When a
+task names a concrete action this build has no certification adapter for — a
+directory cleanup, a rename, a removal — the Guard reports that capability
+limit and leaves the work uncertified. It does not ask you for more input and it
+does not propose a rebind, because neither would change what can be certified.
+Work that the Guard cannot certify is still your work; it is simply reported as
+such. A rebind stays what it always was: a way to replace a recorded obligation
+with a real root instruction that names a supported action and target.
+
+**A successful tool call is no longer read as more than it says.** Every shell
+result now separates what the host returned, what the console actually declared
+about the exit status, whether the effect could be attributed to your task's own
+operation, and the business outcome. If no exit status was read, the Guard says
+`unknown` rather than assuming `0`; a compound script whose last command
+succeeded is not evidence that its earlier commands did.
+
+**A cleanup result keeps its condition.** "Remove it" is only satisfied for the
+objects proven to have no dependants. The recovery guidance states that
+condition, keeps unknown dependants visible, and reports registry removal,
+content removal and directory removal separately instead of summarising a
+partial result as done. This version does not add a remover, kill a process, or
+promise to block a condition the host cannot see.
+
+What does not change: ordinary answers, investigations and ordinary tool work
+still need no Guard approval, and the Guard never turns its own missing
+capability into a claim that you did not authorize the work.
+
 ## What 0.6.1 changes for ordinary work
 
 The following behaviours are what you will actually notice. Everything before

package/README.zh-CN.md

@@ -8,10 +8,10 @@
 
 ## 快速开始
 
-**0.6.1** 在注册表可用后，可安装到 DSH 的 Web 运行环境。候选与平台结果见[验收记录](docs/LOCAL_ACCEPTANCE.md)：
+安装 **0.6.3** 前，请先确认对应的 [GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/tag/v0.6.3) 已发布。Release 提供精确制品身份与平台验收结果；[源码验收记录](docs/LOCAL_ACCEPTANCE.md) 保留开发阶段的检查。
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.6.1
+dsh plugin --profile web add dsh-completion-guard@0.6.3
 ```
 
 **先升级并重启 DSH，再执行下面的宿主锁检查。** 宿主锁记录 DSH 实际使用的包版本和安装目录；如果升级前就生成锁，新运行时会因包版本不匹配而拒绝它。`inject` 会修改 `<profile>/cordis.patch.yml`，请先备份该文件。
@@ -49,7 +49,7 @@ Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard
 
 ## 状态与兼容性
 
-0.6.1 仅支持 **DSH `0.1.5-rc.2` 或 `0.1.5-rc.1`**（配合 Cordis `4.0.2`），两者分别是当前已注册的最新版本和验证过的最低版本。旧 Session API、V2 事件词表和所有更早的宿主包组合仍已删除。如果你从 DSH `0.1.2-rc.1` 升级，请**新建会话**：Guard 不迁移旧日志、提案或证书，也不会删除或重新解释你的旧数据。
+0.6.3 仅支持 **DSH `0.1.5-rc.2` 或 `0.1.5-rc.1`**（配合 Cordis `4.0.2`），两者分别是当前已注册的最新版本和验证过的最低版本。旧 Session API、V2 事件词表和所有更早的宿主包组合仍已删除。如果你从 DSH `0.1.2-rc.1` 升级，请**新建会话**：Guard 不迁移旧日志、提案或证书，也不会删除或重新解释你的旧数据。
 
 插件市场与 npm 安装现在统一发布按新到旧排列的精确并集 `0.1.5-rc.2 || 0.1.5-rc.1`。更早版本、未注册的稳定版 `0.1.5` 以及未来版本都不会被宣称为受支持。进入版本集合后仍必须匹配完整的 33 包 DSH 核心图；缺失、混装或未知图会 fail closed。
 
@@ -112,6 +112,26 @@ DSH 有两种运行方式：**Web** 是在浏览器的网页界面里使用 DSH
 
 用 `bindings: []` 调用 `context_guard_checkpoint` 可查询诊断。默认最多展示八个当前要求/限制和十条证据，插件 JSON 不超过 12 KiB。`pagination` 给出总数及各列表独立的 `next_cursor`，首页不代表完整合同。`item_ids`、`evidence_ids` 可按 ID 查询；`evidence_scope: "history"` 可查看完整证据历史，其中不可引用项会明确标记。翻页时保持查询条件不变，合同或证据快照变化后需重新查询。超长行提供 `detail_id`，用 `detail_offset` 取分片；后续分片需把首次返回的 `snapshot` 作为 `detail_snapshot` 传回。分页只改变展示，不会减少认证时检查的要求。
 
+## 0.6.3 为普通工作带来的变化
+
+你会注意到四件事，以及最重要的那一件。
+
+**疑问不会删掉旁边的指令，但同一子句内的混排不再自动授权。** 分开的子句各自保有自己的判读，因此“更新插件，检查是否存在更新，安装新主题，记录变更。”仍是一次更新、一个问句、一次安装、一次记录：回答只关闭问句，其余三项保持未完成。但当疑问、解释、调查与动作同处**一个子句**时，Guard 不再猜测该动作是独立指令，而是把整句保留为一条**未决**义务：它可见、不能被普通回答关闭、不能取得完成证书、不授予任何执行权限——想授权就把动作另写成一句（“确认缓存是否有效。然后安装依赖。”）。这是[合同修订说明](docs/CONTRACT_REVISION_0_6_3.md)记录的**有意收窄**：此前版本试图证明这类动作已经脱离疑问范围，而每一版证明都只是关于词表或词位的猜测。纯信息请求仍由收到的回答关闭。
+
+**执行位置不再从会话启动目录推断。** 指令写明要改哪个仓库时，Guard 记录该选择及其来源；没有写明时，会话工作目录只作为上下文保留：未指明仓库的提交或推送保持为明确的待澄清问题，而不是按会话碰巧启动的目录放行。简短后续（“提交并推送”）只在当前工作单元中恰有一个用户已指定的仓库时继承它；出现两个候选时保持明确的选择留给用户；名为 `/repo-a.js` 的仓库仍是仓库——扩展名是你给的名字的一部分，不是它是何类文件的证据。
+
+**`context_guard_prepare` 回答的是你真正问的那一项。** 它现在用执行门禁所用的同一判据，报告你打算执行的动作、修订与目标是否与当前义务一致。假设了不同动作时，它会说明并给出条目自身的动作，而不是给出一份门禁会拒绝的手册；动作手册标注为 `recipe_only`；你提供而义务并未选择的目标按“提议”报告，不作为授权。
+
+**旧版本记录的义务不再被继承为通过。** 升级到 0.6.3 会重新检查仍会影响当前结论的记录（包括已标记 answered 的记录），凡自身文本仍包含执行要求、或其 Git 目标缺少可审计来源的，都标记为需要复核。历史按字节保留，不重放任何动作；但在你处理之前，它们会阻断新证书与 Goal 完成结论，使旧版本发布的误读不会悄然成为当前事实。
+
+**守护程序不再要求你改写它无法认证的请求。** 当一个任务写明了本构建没有认证适配器的具体动作（例如清理目录、重命名、移除）时，Guard 报告这一能力限制，并让该工作保持未认证。它不再向你索要输入，也不再建议重绑定，因为这两者都不会改变能认证的范围。Guard 无法认证的工作仍然是你的工作，只是被如实报告为未认证。重绑定保持原义：用真实的根指令替换已记录义务，并且该指令必须写明受支持的动作与目标。
+
+**工具调用成功不再被读成超出其本身的事实。** 每条 shell 结果现在分开表达：宿主返回了什么、控制台实际声明了什么退出状态、效果能否归属到本任务的操作、以及业务结果。如果没有读到退出状态，Guard 说 `unknown` 而不假定为 `0`；复合脚本最后一条命令成功，不构成前面命令也成功的证据。
+
+**清理结果保留其适用条件。** “已删除”只对已证明无依赖的对象成立。恢复指引会陈述该条件、保持未知依赖可见，并分别报告注册信息移除、内容移除与目录移除，而不是把部分结果总结为完成。本版本不新增删除执行器、不杀进程，也不承诺阻止宿主无法观察的条件。
+
+保持不变的部分：普通回答、调查与普通工具工作仍不需要 Guard 审批，Guard 也不会把自己的能力缺口说成你未授权。
+
 ## 0.6.1 为普通工作带来的变化
 
 以下是你实际会注意到的行为。新协议边界之前的一切保持原有含义，不会被重新解释。

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as canonicalProjection, $a as boundedArtifactChoiceMatches, $i as SourceSpan, $n as AuditedExecutable, $r as isFrozenV042RebindResponse, $t as GitCommandParseResult, A as openItems, Aa as interpretMessage, Ai as DeriveConfig, An as extractToolSubject, Ar as HostVersionDecision, At as claimedBatchHasRealRootInput, B as ProofHostSurface, Ba as ActionManifest, Bi as GoalRef, Bn as itemDiagnosis, Br as satisfiesSupportedHostRange, Bt as injectActiveProfileHostLock, C as RC015_RC2_HOST_PACKAGES, Ca as replayRebindResult, Ci as AssetInterpretationFact, Cn as goalCompletionDenial, Cr as bindLiveGoalCapability, Ct as OperationVerbEntry, D as MIN_RECOVERY_CHAR_BUDGET, Da as InterpretOptions, Di as BoundaryQualificationKind, Dn as ToolSubject, Dr as evaluateToolSurfaceCapability, Dt as FirstStepInjection, E as DEFAULT_RECOVERY_CHAR_BUDGET, Ea as Executee, Ei as BoundaryDisposition, En as ToolResultInput, Er as evaluateHostLock, Et as FIRST_STEP_GUIDANCE, F as PROOF_KINDS, Fa as namedActions, Fi as EvidenceOutcome, Fn as Repairability, Fr as SUPPORTED_HOST_RANGE, Ft as HostProfileError, G as ProofManifestV2, Ga as SEMANTIC_ACTIONS, Gi as GuardItem, Gn as PROTOCOL_V4_NOTICE, Gr as authorityCaptureCounts, Gt as resolveActiveProfileHostLock, H as ProofKindCapability, Ha as BOUNDED_ARTIFACT_TYPES, Hi as GuardCheckpoint, Hn as CAPTURE_V042_NOTICE, Hr as AuthorityBlock, Ht as packageRowsFromActiveGraph, I as PROOF_KINDS_V2, Ia as semanticActionOfScope, Ii as EvidenceParseStatus, In as TaskKind, Ir as SUPPORTED_HOST_VERSIONS, It as TargetHostGraph, J as ProofSurface, Ja as STOP_PROTOCOL_VERSION_V2, Ji as GuardOperation, Jn as ACTIVE_HOST_COHORT_ID, Jr as UserInteractionKind, Jt as GIT_COMMAND_MANIFEST_IDS, K as ProofObligation, Ka as STATEFUL_ACTIONS, Ki as GuardItemKind, Kn as PROTOCOL_V5_NOTICE, Kr as segmentAuthorityBlocks, Kt as resolveInstalledHostLock, L as PROOF_MANIFEST_DOMAIN_V2, La as statefulActionsOfScope, Li as EvidenceRole, Ln as UnifiedItemDiagnosis, Lr as compareHostVersions, Lt as combineHostPolicy, M as renderRecoveryPacket, Ma as isOpenObligation, Mi as DeriveScope, Mn as withDurability, Mr as LATEST_SUPPORTED_HOST_VERSION, Mt as lifecyclePhase, N as ALPHA3_HOST_PACKAGES, Na as kindOfScope, Ni as DerivedEnvelope, Nn as CertificationSupport, Nr as MIN_SUPPORTED_HOST_VERSION, Nt as previewFirstStepInjection, O as RecoveryOptions, Oa as ScopeInterpretation, Oi as DeferAuthorization, On as evidenceFromPersistedToolResult, Or as hostVersionFromPackages, Ot as FirstStepPreviewInput, P as PROOF_CAPABILITY_MATRIX, Pa as maskCodeSpans, Pi as EvidenceBinding, Pn as DiagnosisNextAction, Pr as ParsedHostVersion, Pt as ActiveProfileHostLock, Q as bindProofV2ToProjection, Qa as actionCompatible, Qi as PersistenceAuthorization, Qn as ALPHA2_HOST_PACKAGES, Qr as ParsedConfirmation, Qt as GitCommandManifest, R as PROOF_PROTOCOL_VERSION, Ra as ACTION_MANIFEST, Ri as ExpectedTransition, Rn as deriveItemDiagnosis, Rr as evaluateMinimumHostVersion, Rt as hostLockContextFromComposedDump, S as snapshotSessionEvents, Sa as rebindResponse, Si as qualifyBoundary, Sn as parseShellCommand, Sr as bindExecutableIdentity, St as ManifestIssue, T as RC1_HOST_PACKAGES, Ta as DirectiveClass, Ti as BindingActionClosure, Tn as ToolCallInput, Tr as evaluateHostCapability, Tt as ClaimedMessage, U as ProofKindV2, Ua as CERTIFICATE_VERSION, Ui as GuardEvidence, Un as DEFAULT_DELEGATION_TOOL_NAMES, Ur as AuthorityBlockKind, Ut as packageRowsFromPnpmLock, V as ProofKind, Va as ActionSpec, Vi as GuardBoundary, Vn as relevantEvidence, Vr as currentContractDigest, Vt as inspectTargetHostGraph, W as ProofManifest, Wa as CERTIFICATE_VERSION_V2, Wi as GuardIntegrity, Wn as PROTOCOL_V3_NOTICE, Wr as AuthorityKind, Wt as readActiveHostGraph, X as SessionQueryV2, Xa as SemanticAction, Xi as HostStatus, Xn as ACTIVE_HOST_LAUNCHER_VERSION, Xr as classifyUserInteraction, Xt as GitAdapterAction, Y as SessionQuery, Ya as SUPPORTED_EVIDENCE_ADAPTERS, Yi as GuardProjection, Yn as ACTIVE_HOST_COHORT_IDS, Yr as classifyTaskIntent, Yt as GIT_COMMAND_TEMPLATES, Z as bindProofToProjection, Za as StatefulAction, Zi as MessageCoverage, Zn as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Zr as CONFIRM_LINE_PATTERN, Zt as GitCommandAccepted, _ as progressFingerprint, _a as confirmRebind, _i as GoalActivationState, _n as ParsedShell, _r as HostLockStatus, _t as evidenceCoverage, a as NO_PROGRESS_RECORD_PREFIX, aa as WaitAuthorization, ai as ClauseSegment, an as GitTargetIdentity, ao as semanticActionFromText, ar as GOAL_HOST_PACKAGES, at as proofEvidenceConstraints, b as SessionApiError, ba as proposeRebindV042, bi as effectuateBoundary, bn as isRunExecutable, br as HostToolSurface, bt as COMMAND_SURFACE_MANIFEST, c as classifyCompletionClaim, ci as classifyClause, cn as commitTreeSnapshotDigest, co as canonicalizePath, cr as HostAuditProvenance, ct as proofV2Rejection, d as decisionBoundaryKey, di as extractOperation, dn as gitCommandMatchesTarget, do as sanitizeClauseText, dr as HostCapabilityRequest, dt as sessionQuery, ea as TargetCaptureReasonCode, ei as parseConfirmationMessage, en as GitCommandRejected, eo as isStatefulAction, er as BASE_HOST_PACKAGES, et as createProofManifest, f as isRootPauseRequest, fi as isInformationalMessage, fn as parseGitCommandManifest, fo as sanitizeUrl, fr as HostCohort, ft as sessionQueryV2, g as observeAssistantOutcome, ga as RebindProposal, gi as BoundaryRequest, gn as CanonicalCommandSurface, gr as HostLockEvaluation, gt as bindingSatisfies, h as latestRootInstruction, ha as RebindArgs, hi as BoundaryQualification, hn as CanonicalArgv, hr as HostLockContext, ht as EvidenceFacetCoverage, i as CompletionDisposition, ia as VerificationContract, ii as CaptureScope, in as GitPrestateEnvelope, io as semanticActionFromCommand, ir as ExecutableIdentityBinding, it as proofDigestV2, j as recoveryDigest, ja as isExecutableItem, ji as DeriveResult, jn as isDeterministicCheck, jr as HostVersionStatus, jt as firstStepGuidance, k as closingHint, ka as interpretClause, ki as DelegationRef, kn as extractTextContent, kr as selectHostCohort, kt as LifecyclePhase, l as decideTurnBoundary, li as extractArtifactPaths, ln as createGitPrestateEnvelope, lo as digestStrings, lr as HostCapabilityEvaluation, lt as requiredSubjectsOf, m as latestAssistantText, ma as ProposeOutcome, mi as BoundaryEffectuation, mn as verifiedLinearCommitReadback, mr as HostCohortSelectionReason, mt as validateProofManifestV2, n as AssistantOutcomeObservation, na as TargetTuple, ni as RejectedBinding, nn as GitEffectRunner, no as requestedTargetAuthorizesMutation, nr as EXPECTED_HOST_PACKAGES, nt as proofCapabilityReport, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as WorkUnit, oi as captureClause, on as LinearCommitReadback, oo as validateActionManifest, or as HOST_CAPABILITY_PACKAGE_GROUPS, ot as proofHostSurfacesOf, p as isWholeTaskCompletionClaim, pa as BoundedSource, pi as segmentClauses, pn as revalidateGitPrestate, po as sha256, pr as HostCohortSelection, pt as validateProofManifest, q as ProofObligationV2, qa as STOP_PROTOCOL_VERSION, qi as GuardItemStatus, qn as deriveProjection, qr as TaskIntent, qt as verifyComposedHostLockDump, r as CONTROL_RECORD_PREFIX, ra as TargetValue, ri as certifyCheckpoint, rn as GitPrestateCheck, ro as requestedTargetMatchesResolved, rr as ExecutableIdentity, rt as proofDigest, s as TurnStoppingDecision, sa as createProjection, si as captureItem, sn as commitIndexSnapshotDigest, so as validateActionTarget, sr as HOST_COHORTS, st as proofOperationMatches, t as supersedeItem, ta as TargetCaptureStatus, ti as CheckpointResult, tn as GitEffectExecution, to as requestedIdentityKey, tr as DEFAULT_HOST_LOCK, tt as createProofManifestV2, u as decideTurnStopping, ui as extractMethod, un as executeRevalidatedGitEffect, uo as normalizeClause, ur as HostCapabilityId, ut as scopeCoverageDigest, v as SESSION_API_UNSUPPORTED, va as proposeRebind, vi as GoalBoundaryAccess, vn as ShellParseStatus, vr as HostPlatform, vt as evidenceMatchesItem, w as RC015_HOST_PACKAGES, wa as AuthorityDisposition, wi as AssetObligation, wn as hasCurrentCertificate, wr as evaluateExternalWaitCapability, wt as validateManifest, x as V3SessionLike, xa as rebindAttemptKey, xi as isCurrentAcceptedBoundary, xn as parsePwshCommand, xr as LEGACY_HOST_COHORTS, xt as CommandSurfaceManifest, y as SESSION_EVENT_ENVELOPE_INVALID, ya as proposeRebindOutcome, yi as availableBoundaryQualifications, yn as canonicalArgvFromCommand, yr as HostProfileKind, yt as isVerifyingCapability, z as PROOF_PROTOCOL_VERSION_V2, za as ACTION_MANIFEST_VERSION, zi as ExternalOperation, zn as evidenceAvailabilityReason, zr as parseHostVersion, zt as hostLockRowsFromComposedDump } from "../index-C_N6DaSF.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DeferAuthorization, DelegationRef, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+import { $ as ProofSurface, $a as partialFailureOf, $i as GuardIntegrity, $n as applyUpgradeEligibility, $o as STATEFUL_ACTIONS, $r as authorityCaptureCounts, $t as GIT_COMMAND_MANIFEST_IDS, A as MIN_RECOVERY_CHAR_BUDGET, Aa as confirmRebind, Ai as isCurrentAcceptedBoundary, An as ToolCallInput, Ao as itemHoldsExecutionAuthority, Ar as bindExecutableIdentity, At as ClaimedMessage, B as PROOF_KINDS, Ba as DEPENDENCY_FREE_ONLY_CONDITION, Bi as DeriveResult, Bn as Repairability, Bo as restatedContentOf, Br as LATEST_SUPPORTED_HOST_VERSION, Bt as HostProfileError, C as RC015_RC2_HOST_PACKAGES, Ci as BoundaryEffectuation, Cn as ShellParseStatus, Co as introducesActionClause, Cr as HostLockContext, Ct as evidenceMatchesItem, D as CLEANUP_CONDITION_RULE_COMPACT, Da as ProposeOutcome, Di as GoalBoundaryAccess, Dn as parseShellCommand, Do as isOpenObligation, Dr as HostProfileKind, Dt as ManifestIssue, E as CLEANUP_CONDITION_RULE, Ea as BoundedSource, Ei as GoalActivationState, En as parsePwshCommand, Eo as isInformationalFragment, Er as HostPlatform, Et as CommandSurfaceManifest, F as openItems, Fa as rebindResponse, Fi as BoundaryDisposition, Fn as extractToolSubject, Fo as namedActions, Fr as evaluateToolSurfaceCapability, Ft as claimedBatchHasRealRootInput, G as ProofHostSurface, Ga as ProcessExitStatus, Gi as EvidenceParseStatus, Gn as evidenceAvailabilityReason, Go as ACTION_MANIFEST, Gr as compareHostVersions, Gt as injectActiveProfileHostLock, H as PROOF_MANIFEST_DOMAIN_V2, Ha as DependencyStatus, Hi as DerivedEnvelope, Hn as UnifiedItemDiagnosis, Ho as splitTextFragments, Hr as ParsedHostVersion, Ht as combineHostPolicy, I as recoveryDigest, Ia as replayRebindResult, Ii as BoundaryQualificationKind, In as isDeterministicCheck, Io as opensWithDirective, Ir as hostVersionFromPackages, It as firstStepGuidance, J as ProofKindV2, Ja as RemovalOutcomeReport, Ji as ExternalOperation, Jn as CAPTURE_V042_NOTICE, Jo as ActionSpec, Jr as satisfiesSupportedHostRange, Jt as packageRowsFromPnpmLock, K as ProofKind, Ka as ProcessFactSource, Ki as EvidenceRole, Kn as itemDiagnosis, Ko as ACTION_MANIFEST_VERSION, Kr as evaluateMinimumHostVersion, Kt as inspectTargetHostGraph, L as renderRecoveryPacket, La as CapabilityFact, Li as DeferAuthorization, Ln as withDurability, Lo as qualificationOfClause, Lr as selectHostCohort, Lt as lifecyclePhase, M as carriesCleanupCondition, Ma as proposeRebindOutcome, Mi as AssetInterpretationFact, Mn as ToolSubject, Mo as legacyQuestionReadingIsInformational, Mr as evaluateExternalWaitCapability, Mt as FirstStepInjection, N as cleanupConditionFor, Na as proposeRebindV042, Ni as AssetObligation, Nn as evidenceFromPersistedToolResult, No as maskCodeSpans, Nr as evaluateHostCapability, Nt as FirstStepPreviewInput, O as CLEANUP_CONDITION_RULE_SHORT, Oa as RebindArgs, Oi as availableBoundaryQualifications, On as goalCompletionDenial, Oo as isQuestionScopeNeedingReview, Or as HostToolSurface, Ot as OperationVerbEntry, P as closingHint, Pa as rebindAttemptKey, Pi as BindingActionClosure, Pn as extractTextContent, Po as maskQuotedSpans, Pr as evaluateHostLock, Pt as LifecyclePhase, Q as ProofObligationV2, Qa as capabilityFactOf, Qi as GuardEvidence, Qn as PROTOCOL_V5_NOTICE, Qo as SEMANTIC_ACTIONS, Qr as AuthorityKind, Qt as verifyComposedHostLockDump, R as ALPHA3_HOST_PACKAGES, Ra as CapabilityGap, Ri as DelegationRef, Rn as CertificationSupport, Ro as questionHeadsClause, Rr as HostVersionDecision, Rt as previewFirstStepInjection, S as snapshotSessionEvents, Si as segmentClauses, Sn as ParsedShell, So as interpretMessage, Sr as HostCohortSelectionReason, St as evidenceCoverage, T as RC1_HOST_PACKAGES, Ti as BoundaryRequest, Tn as isRunExecutable, To as isExplanationScope, Tr as HostLockStatus, Tt as COMMAND_SURFACE_MANIFEST, U as PROOF_PROTOCOL_VERSION, Ua as DerivedProcessFacts, Ui as EvidenceBinding, Un as capabilityRemedyPhrase, Uo as statefulActionsOfScope, Ur as SUPPORTED_HOST_RANGE, Ut as hostLockContextFromComposedDump, V as PROOF_KINDS_V2, Va as DeclaredOperationResult, Vi as DeriveScope, Vn as TaskKind, Vo as semanticActionOfScope, Vr as MIN_SUPPORTED_HOST_VERSION, Vt as TargetHostGraph, W as PROOF_PROTOCOL_VERSION_V2, Wa as OperationAttribution, Wi as EvidenceOutcome, Wn as deriveItemDiagnosis, Wo as verbIsNegated, Wr as SUPPORTED_HOST_VERSIONS, Wt as hostLockRowsFromComposedDump, X as ProofManifestV2, Xa as admissibleForRemoval, Xi as GuardBoundary, Xn as PROTOCOL_V3_NOTICE, Xo as CERTIFICATE_VERSION, Xr as AuthorityBlock, Xt as resolveActiveProfileHostLock, Y as ProofManifest, Ya as actionHasCertificationPath, Yi as GoalRef, Yn as DEFAULT_DELEGATION_TOOL_NAMES, Yo as BOUNDED_ARTIFACT_TYPES, Yr as currentContractDigest, Yt as readActiveHostGraph, Z as ProofObligation, Za as capabilityConsequence, Zi as GuardCheckpoint, Zn as PROTOCOL_V4_NOTICE, Zo as CERTIFICATE_VERSION_V2, Zr as AuthorityBlockKind, Zt as resolveInstalledHostLock, _ as progressFingerprint, _a as VerificationContract, _i as environmentDefaultRepositoryTarget, _n as parseGitCommandManifest, _o as explanationHasActionResidue, _r as HostCapabilityEvaluation, _s as normalizeClause, _t as sessionQueryV2, a as NO_PROGRESS_RECORD_PREFIX, aa as HostStatus, ai as CONFIRM_LINE_PATTERN, an as GitCommandRejected, ao as ExecutionQualification, ar as ALPHA2_DSHMARKET_139_HOST_PACKAGES, as as actionCompatible, at as createProofManifest, b as SessionApiError, ba as createProjection, bi as extractOperation, bn as CanonicalArgv, bo as hasQuestionScope, br as HostCohort, bs as sha256, bt as EvidenceFacetCoverage, c as classifyCompletionClaim, ca as NeedsReviewReason, ci as parseConfirmationMessage, cn as GitPrestateCheck, co as LEGACY_QUALIFICATION, cr as BASE_HOST_PACKAGES, cs as requestedIdentityKey, ct as proofDigest, d as decisionBoundaryKey, da as TargetCaptureReasonCode, di as certifyCheckpoint, dn as LinearCommitReadback, do as ScopeInterpretation, dr as ExecutableIdentity, ds as semanticActionFromCommand, dt as proofHostSurfacesOf, ea as GuardItem, ei as segmentAuthorityBlocks, en as GIT_COMMAND_TEMPLATES, eo as removalIsComplete, er as deriveProjection, es as STOP_PROTOCOL_VERSION, et as SessionQuery, f as isRootPauseRequest, fa as TargetCaptureStatus, fi as CaptureScope, fn as commitIndexSnapshotDigest, fo as actionVerbMatches, fr as ExecutableIdentityBinding, fs as semanticActionFromText, ft as proofOperationMatches, g as observeAssistantOutcome, ga as TargetValue, gi as classifyClause, gn as gitCommandMatchesTarget, go as clauseIsProtected, gr as HostAuditProvenance, gs as digestStrings, gt as sessionQuery, h as latestRootInstruction, ha as TargetTuple, hi as captureItem, hn as executeRevalidatedGitEffect, ho as clauseIsGoverned, hr as HOST_COHORTS, hs as canonicalizePath, ht as scopeCoverageDigest, i as CompletionDisposition, ia as GuardProjection, ii as classifyUserInteraction, in as GitCommandParseResult, io as Executee, ir as ACTIVE_HOST_LAUNCHER_VERSION, is as StatefulAction, it as canonicalProjection, j as RecoveryOptions, ja as proposeRebind, ji as qualifyBoundary, jn as ToolResultInput, jo as kindOfScope, jr as bindLiveGoalCapability, jt as FIRST_STEP_GUIDANCE, k as DEFAULT_RECOVERY_CHAR_BUDGET, ka as RebindProposal, ki as effectuateBoundary, kn as hasCurrentCertificate, ko as isRestatement, kr as LEGACY_HOST_COHORTS, kt as validateManifest, l as decideTurnBoundary, la as PersistenceAuthorization, li as CheckpointResult, ln as GitPrestateEnvelope, lo as QualificationReason, lr as DEFAULT_HOST_LOCK, ls as requestedTargetAuthorizesMutation, lt as proofDigestV2, m as latestAssistantText, ma as TargetSourceKind, mi as captureClause, mn as createGitPrestateEnvelope, mo as clauseAsksOwnQuestion, mr as HOST_CAPABILITY_PACKAGE_GROUPS, ms as validateActionTarget, mt as requiredSubjectsOf, n as AssistantOutcomeObservation, na as GuardItemStatus, ni as UserInteractionKind, nn as GitCommandAccepted, no as AuthorityDisposition, nr as ACTIVE_HOST_COHORT_ID, ns as SUPPORTED_EVIDENCE_ADAPTERS, nt as bindProofToProjection, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as MessageCoverage, oi as ParsedConfirmation, on as GitEffectExecution, oo as GRANTED_QUALIFICATION, or as ALPHA2_HOST_PACKAGES, os as boundedArtifactChoiceMatches, ot as createProofManifestV2, p as isWholeTaskCompletionClaim, pa as TargetSource, pi as ClauseSegment, pn as commitTreeSnapshotDigest, po as clarifiedSpanOf, pr as GOAL_HOST_PACKAGES, ps as validateActionManifest, pt as proofV2Rejection, q as ProofKindCapability, qa as ProcessOutcomeReason, qi as ExpectedTransition, qn as relevantEvidence, qo as ActionManifest, qr as parseHostVersion, qt as packageRowsFromActiveGraph, r as CONTROL_RECORD_PREFIX, ra as GuardOperation, ri as classifyTaskIntent, rn as GitCommandManifest, ro as DirectiveClass, rr as ACTIVE_HOST_COHORT_IDS, rs as SemanticAction, rt as bindProofV2ToProjection, s as TurnStoppingDecision, sa as NeedsReviewFact, si as isFrozenV042RebindResponse, sn as GitEffectRunner, so as InterpretOptions, sr as AuditedExecutable, ss as isStatefulAction, st as proofCapabilityReport, t as supersedeItem, ta as GuardItemKind, ti as TaskIntent, tn as GitAdapterAction, to as removalIsPartiallyKnown, tr as legacyRecordsNeedingReview, ts as STOP_PROTOCOL_VERSION_V2, tt as SessionQueryV2, u as decideTurnStopping, ua as SourceSpan, ui as RejectedBinding, un as GitTargetIdentity, uo as QualificationStatus, ur as EXPECTED_HOST_PACKAGES, us as requestedTargetMatchesResolved, ut as proofEvidenceConstraints, v as SESSION_API_UNSUPPORTED, va as WaitAuthorization, vi as extractArtifactPaths, vn as revalidateGitPrestate, vo as governedClauseRestrictsExecution, vr as HostCapabilityId, vs as sanitizeClauseText, vt as validateProofManifest, w as RC015_HOST_PACKAGES, wi as BoundaryQualification, wn as canonicalArgvFromCommand, wo as isExecutableItem, wr as HostLockEvaluation, wt as isVerifyingCapability, x as V3SessionLike, xi as isInformationalMessage, xn as CanonicalCommandSurface, xo as interpretClause, xr as HostCohortSelection, xt as bindingSatisfies, y as SESSION_EVENT_ENVELOPE_INVALID, ya as WorkUnit, yi as extractMethod, yn as verifiedLinearCommitReadback, yo as hasOrderedCoordination, yr as HostCapabilityRequest, ys as sanitizeUrl, yt as validateProofManifestV2, z as PROOF_CAPABILITY_MATRIX, za as CapabilityRemedy, zi as DeriveConfig, zn as DiagnosisNextAction, zo as reportingHeadGoverns, zr as HostVersionStatus, zt as ActiveProfileHostLock } from "../index-CfEiC4bb.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, admissibleForRemoval, applyUpgradeEligibility, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as extractToolSubject, $n as isFrozenV042RebindResponse, $r as sha256, $t as proofDigest, A as lifecyclePhase, An as decisionBoundaryKey, Ar as STATEFUL_ACTIONS, At as compareHostVersions, Bn as effectuateBoundary, Br as semanticActionFromCommand, Bt as certifyCheckpoint, C as gitCommandMatchesTarget, Cn as isVerifyingCapability, Ct as evaluateToolSurfaceCapability, D as FIRST_STEP_GUIDANCE, Dn as classifyCompletionClaim, Dr as CERTIFICATE_VERSION, Dt as MIN_SUPPORTED_HOST_VERSION, E as verifiedLinearCommitReadback, En as NO_PROGRESS_TURNS_BEFORE_STOP, Er as BOUNDED_ARTIFACT_TYPES, Et as LATEST_SUPPORTED_HOST_VERSION, F as PROTOCOL_V4_NOTICE, Fn as observeAssistantOutcome, Fr as boundedArtifactChoiceMatches, Ft as RC015_HOST_PACKAGES, Gn as confirmRebind, Gr as validateManifest, Gt as PROOF_PROTOCOL_VERSION, Hn as qualifyBoundary, Hr as validateActionManifest, Ht as PROOF_KINDS, I as PROTOCOL_V5_NOTICE, In as progressFingerprint, Ir as isStatefulAction, It as RC1_HOST_PACKAGES, Jn as proposeRebindV042, Jr as canonicalizePath, Jt as bindProofV2ToProjection, Kn as proposeRebind, Kr as classifyTaskIntent, Kt as PROOF_PROTOCOL_VERSION_V2, L as deriveProjection, Ln as goalCompletionDenial, Lr as requestedIdentityKey, Lt as ALPHA3_HOST_PACKAGES, M as CAPTURE_V042_NOTICE, Mn as isWholeTaskCompletionClaim, Mr as STOP_PROTOCOL_VERSION_V2, Mt as parseHostVersion, N as DEFAULT_DELEGATION_TOOL_NAMES, Nn as latestAssistantText, Nr as SUPPORTED_EVIDENCE_ADAPTERS, Nt as satisfiesSupportedHostRange, O as claimedBatchHasRealRootInput, On as decideTurnBoundary, Or as CERTIFICATE_VERSION_V2, Ot as SUPPORTED_HOST_RANGE, P as PROTOCOL_V3_NOTICE, Pn as latestRootInstruction, Pr as actionCompatible, Pt as RC015_RC2_HOST_PACKAGES, Q as extractTextContent, Qn as CONFIRM_LINE_PATTERN, Qr as sanitizeUrl, Qt as proofCapabilityReport, Rn as hasCurrentCertificate, Rr as requestedTargetAuthorizesMutation, Rt as authorityCaptureCounts, S as executeRevalidatedGitEffect, Sn as evidenceMatchesItem, St as evaluateHostLock, T as revalidateGitPrestate, Tn as NO_PROGRESS_RECORD_PREFIX, Tr as ACTION_MANIFEST_VERSION, Tt as selectHostCohort, Un as currentContractDigest, Ur as validateActionTarget, Ut as PROOF_KINDS_V2, Vn as isCurrentAcceptedBoundary, Vr as semanticActionFromText, Vt as PROOF_CAPABILITY_MATRIX, Wn as createProjection, Wr as COMMAND_SURFACE_MANIFEST, Wt as PROOF_MANIFEST_DOMAIN_V2, X as supersedeItem, Xn as rebindResponse, Xr as normalizeClause, Xt as createProofManifest, Yn as rebindAttemptKey, Yr as digestStrings, Yt as canonicalProjection, Z as evidenceFromPersistedToolResult, Zn as replayRebindResult, Zr as sanitizeClauseText, Zt as createProofManifestV2, _ as GIT_COMMAND_MANIFEST_IDS, _n as openItems, _r as kindOfScope, _t as LEGACY_HOST_COHORTS, a as injectActiveProfileHostLock, an as requiredSubjectsOf, ar as captureClause, at as parseShellCommand, b as commitTreeSnapshotDigest, bn as bindingSatisfies, br as semanticActionOfScope, bt as evaluateExternalWaitCapability, c as packageRowsFromPnpmLock, cn as sessionQueryV2, cr as extractArtifactPaths, ct as ACTIVE_HOST_LAUNCHER_VERSION, d as resolveInstalledHostLock, dr as isInformationalMessage, dt as BASE_HOST_PACKAGES, en as proofDigestV2, er as parseConfirmationMessage, et as isDeterministicCheck, f as verifyComposedHostLockDump, fr as segmentClauses, ft as DEFAULT_HOST_LOCK, g as snapshotSessionEvents, gn as closingHint, gr as isOpenObligation, gt as HOST_COHORTS, h as SessionApiError, hn as MIN_RECOVERY_CHAR_BUDGET, hr as isExecutableItem, ht as HOST_CAPABILITY_PACKAGE_GROUPS, i as hostLockRowsFromComposedDump, in as proofV2Rejection, ir as relevantEvidence, it as parsePwshCommand, j as previewFirstStepInjection, jn as isRootPauseRequest, jr as STOP_PROTOCOL_VERSION, jt as evaluateMinimumHostVersion, k as firstStepGuidance, kn as decideTurnStopping, kr as SEMANTIC_ACTIONS, kt as SUPPORTED_HOST_VERSIONS, l as readActiveHostGraph, ln as validateProofManifest, lr as extractMethod, lt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, m as SESSION_EVENT_ENVELOPE_INVALID, mn as DEFAULT_RECOVERY_CHAR_BUDGET, mr as interpretMessage, mt as GOAL_HOST_PACKAGES, n as combineHostPolicy, nn as proofHostSurfacesOf, nr as evidenceAvailabilityReason, nt as canonicalArgvFromCommand, o as inspectTargetHostGraph, on as scopeCoverageDigest, or as captureItem, ot as ACTIVE_HOST_COHORT_ID, p as SESSION_API_UNSUPPORTED, pr as interpretClause, pt as EXPECTED_HOST_PACKAGES, qn as proposeRebindOutcome, qr as classifyUserInteraction, qt as bindProofToProjection, r as hostLockContextFromComposedDump, rn as proofOperationMatches, rr as itemDiagnosis, rt as isRunExecutable, s as packageRowsFromActiveGraph, sn as sessionQuery, sr as classifyClause, st as ACTIVE_HOST_COHORT_IDS, t as HostProfileError, tn as proofEvidenceConstraints, tr as deriveItemDiagnosis, tt as withDurability, u as resolveActiveProfileHostLock, un as validateProofManifestV2, ur as extractOperation, ut as ALPHA2_HOST_PACKAGES, v as GIT_COMMAND_TEMPLATES, vn as recoveryDigest, vr as maskCodeSpans, vt as bindExecutableIdentity, w as parseGitCommandManifest, wn as CONTROL_RECORD_PREFIX, wr as ACTION_MANIFEST, wt as hostVersionFromPackages, x as createGitPrestateEnvelope, xn as evidenceCoverage, xr as statefulActionsOfScope, xt as evaluateHostCapability, y as commitIndexSnapshotDigest, yn as renderRecoveryPacket, yr as namedActions, yt as bindLiveGoalCapability, zn as availableBoundaryQualifications, zr as requestedTargetMatchesResolved, zt as segmentAuthorityBlocks } from "../domain-DKr8sLZZ.js";
+import { $ as evidenceFromPersistedToolResult, $n as proposeRebind, $r as isRestatement, $t as createProofManifestV2, A as lifecyclePhase, Ai as requestedTargetMatchesResolved, An as NO_PROGRESS_TURNS_BEFORE_STOP, At as SUPPORTED_HOST_RANGE, Bi as sanitizeClauseText, Bn as progressFingerprint, Br as clauseIsProtected, Bt as authorityCaptureCounts, C as gitCommandMatchesTarget, Ci as STOP_PROTOCOL_VERSION_V2, Cn as renderRecoveryPacket, Cr as classifyClause, Ct as evaluateHostCapability, D as FIRST_STEP_GUIDANCE, Di as isStatefulAction, Dn as isVerifyingCapability, Dr as extractOperation, Dt as selectHostCohort, E as verifiedLinearCommitReadback, Ei as boundedArtifactChoiceMatches, En as evidenceMatchesItem, Er as extractMethod, Et as hostVersionFromPackages, F as PROTOCOL_V4_NOTICE, Fi as COMMAND_SURFACE_MANIFEST, Fn as isRootPauseRequest, Fr as LEGACY_QUALIFICATION, Ft as satisfiesSupportedHostRange, Gr as interpretClause, Gt as PROOF_KINDS_V2, Hi as sha256, Hn as hasCurrentCertificate, Hr as governedClauseRestrictsExecution, Ht as certifyCheckpoint, I as PROTOCOL_V5_NOTICE, Ii as validateManifest, In as isWholeTaskCompletionClaim, Ir as actionVerbMatches, It as RC015_RC2_HOST_PACKAGES, Jn as isCurrentAcceptedBoundary, Jr as isExecutableItem, Jt as PROOF_PROTOCOL_VERSION_V2, Kn as availableBoundaryQualifications, Kr as interpretMessage, Kt as PROOF_MANIFEST_DOMAIN_V2, L as applyUpgradeEligibility, Li as canonicalizePath, Ln as latestAssistantText, Lr as clarifiedSpanOf, Lt as RC015_HOST_PACKAGES, M as CAPTURE_V042_NOTICE, Mi as semanticActionFromText, Mn as decideTurnBoundary, Mr as classifyTaskIntent, Mt as compareHostVersions, N as DEFAULT_DELEGATION_TOOL_NAMES, Ni as validateActionManifest, Nn as decideTurnStopping, Nr as classifyUserInteraction, Nt as evaluateMinimumHostVersion, O as claimedBatchHasRealRootInput, Oi as requestedIdentityKey, On as CONTROL_RECORD_PREFIX, Or as isInformationalMessage, Ot as LATEST_SUPPORTED_HOST_VERSION, P as PROTOCOL_V3_NOTICE, Pi as validateActionTarget, Pn as decisionBoundaryKey, Pr as GRANTED_QUALIFICATION, Pt as parseHostVersion, Q as supersedeItem, Qn as confirmRebind, Qr as isQuestionScopeNeedingReview, Qt as createProofManifest, R as deriveProjection, Ri as digestStrings, Rn as latestRootInstruction, Rr as clauseAsksOwnQuestion, Rt as RC1_HOST_PACKAGES, S as executeRevalidatedGitEffect, Si as STOP_PROTOCOL_VERSION, Sn as recoveryDigest, Sr as captureItem, St as evaluateExternalWaitCapability, T as revalidateGitPrestate, Ti as actionCompatible, Tn as evidenceCoverage, Tr as extractArtifactPaths, Tt as evaluateToolSurfaceCapability, Ur as hasOrderedCoordination, Ut as PROOF_CAPABILITY_MATRIX, Vi as sanitizeUrl, Vn as goalCompletionDenial, Vr as explanationHasActionResidue, Vt as segmentAuthorityBlocks, Wr as hasQuestionScope, Wt as PROOF_KINDS, Xn as currentContractDigest, Xr as isInformationalFragment, Xt as bindProofV2ToProjection, Yn as qualifyBoundary, Yr as isExplanationScope, Yt as bindProofToProjection, Zn as createProjection, Zr as isOpenObligation, Zt as canonicalProjection, _ as GIT_COMMAND_MANIFEST_IDS, _i as BOUNDED_ARTIFACT_TYPES, _n as MIN_RECOVERY_CHAR_BUDGET, _r as capabilityFactOf, _t as HOST_CAPABILITY_PACKAGE_GROUPS, a as injectActiveProfileHostLock, ai as namedActions, an as proofOperationMatches, ar as CONFIRM_LINE_PATTERN, at as isRunExecutable, b as commitTreeSnapshotDigest, bi as SEMANTIC_ACTIONS, bn as closingHint, br as removalIsPartiallyKnown, bt as bindExecutableIdentity, c as packageRowsFromPnpmLock, ci as questionHeadsClause, cn as scopeCoverageDigest, cr as capabilityRemedyPhrase, ct as ACTIVE_HOST_COHORT_ID, d as resolveInstalledHostLock, di as semanticActionOfScope, dn as validateProofManifest, dr as itemDiagnosis, dt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, ei as itemHoldsExecutionAuthority, en as proofCapabilityReport, er as proposeRebindOutcome, et as extractTextContent, f as verifyComposedHostLockDump, fi as splitTextFragments, fn as validateProofManifestV2, fr as relevantEvidence, ft as ALPHA2_HOST_PACKAGES, g as snapshotSessionEvents, gi as ACTION_MANIFEST_VERSION, gn as DEFAULT_RECOVERY_CHAR_BUDGET, gr as capabilityConsequence, gt as GOAL_HOST_PACKAGES, h as SessionApiError, hi as ACTION_MANIFEST, hn as CLEANUP_CONDITION_RULE_SHORT, hr as admissibleForRemoval, ht as EXPECTED_HOST_PACKAGES, i as hostLockRowsFromComposedDump, ii as maskQuotedSpans, in as proofHostSurfacesOf, ir as replayRebindResult, it as canonicalArgvFromCommand, j as previewFirstStepInjection, ji as semanticActionFromCommand, jn as classifyCompletionClaim, jt as SUPPORTED_HOST_VERSIONS, k as firstStepGuidance, ki as requestedTargetAuthorizesMutation, kn as NO_PROGRESS_RECORD_PREFIX, kr as segmentClauses, kt as MIN_SUPPORTED_HOST_VERSION, l as readActiveHostGraph, li as reportingHeadGoverns, ln as sessionQuery, lr as deriveItemDiagnosis, lt as ACTIVE_HOST_COHORT_IDS, m as SESSION_EVENT_ENVELOPE_INVALID, mi as verbIsNegated, mn as CLEANUP_CONDITION_RULE_COMPACT, mr as actionHasCertificationPath, mt as DEFAULT_HOST_LOCK, n as combineHostPolicy, ni as legacyQuestionReadingIsInformational, nn as proofDigestV2, nr as rebindAttemptKey, nt as isDeterministicCheck, o as inspectTargetHostGraph, oi as opensWithDirective, on as proofV2Rejection, or as isFrozenV042RebindResponse, ot as parsePwshCommand, p as SESSION_API_UNSUPPORTED, pi as statefulActionsOfScope, pn as CLEANUP_CONDITION_RULE, pr as DEPENDENCY_FREE_ONLY_CONDITION, pt as BASE_HOST_PACKAGES, qn as effectuateBoundary, qr as introducesActionClause, qt as PROOF_PROTOCOL_VERSION, r as hostLockContextFromComposedDump, ri as maskCodeSpans, rn as proofEvidenceConstraints, rr as rebindResponse, rt as withDurability, s as packageRowsFromActiveGraph, si as qualificationOfClause, sn as requiredSubjectsOf, sr as parseConfirmationMessage, st as parseShellCommand, t as HostProfileError, ti as kindOfScope, tn as proofDigest, tr as proposeRebindV042, tt as extractToolSubject, u as resolveActiveProfileHostLock, ui as restatedContentOf, un as sessionQueryV2, ur as evidenceAvailabilityReason, ut as ACTIVE_HOST_LAUNCHER_VERSION, v as GIT_COMMAND_TEMPLATES, vi as CERTIFICATE_VERSION, vn as carriesCleanupCondition, vr as partialFailureOf, vt as HOST_COHORTS, w as parseGitCommandManifest, wi as SUPPORTED_EVIDENCE_ADAPTERS, wn as bindingSatisfies, wr as environmentDefaultRepositoryTarget, wt as evaluateHostLock, x as createGitPrestateEnvelope, xi as STATEFUL_ACTIONS, xn as openItems, xr as captureClause, xt as bindLiveGoalCapability, y as commitIndexSnapshotDigest, yi as CERTIFICATE_VERSION_V2, yn as cleanupConditionFor, yr as removalIsComplete, yt as LEGACY_HOST_COHORTS, z as legacyRecordsNeedingReview, zi as normalizeClause, zn as observeAssistantOutcome, zr as clauseIsGoverned, zt as ALPHA3_HOST_PACKAGES } from "../domain-BUA1lLjs.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, actionCompatible, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, captureClause, captureItem, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, actionCompatible, actionHasCertificationPath, actionVerbMatches, admissibleForRemoval, applyUpgradeEligibility, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };