dsh-completion-guard 0.6.2 → 0.7.0

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { $ as ProofSurface, $a as ScopeInterpretation, $i as GuardItemStatus, $n as deriveProjection, $r as TaskIntent, $t as GIT_COMMAND_MANIFEST_IDS, A as MIN_RECOVERY_CHAR_BUDGET, Aa as CapabilityFact, Ai as AssetObligation, An as ToolCallInput, Ao as semanticActionFromText, Ar as evaluateExternalWaitCapability, At as ClaimedMessage, B as PROOF_KINDS, Ba as ProcessOutcomeReason, Bi as EvidenceBinding, Bn as Repairability, Br as ParsedHostVersion, Bt as HostProfileError, C as RC015_RC2_HOST_PACKAGES, Ca as confirmRebind, Ci as GoalActivationState, Cn as ShellParseStatus, Co as actionCompatible, Cr as HostLockStatus, Ct as evidenceMatchesItem, D as CLEANUP_CONDITION_RULE_COMPACT, Da as rebindAttemptKey, Di as isCurrentAcceptedBoundary, Dn as parseShellCommand, Do as requestedTargetAuthorizesMutation, Dr as LEGACY_HOST_COHORTS, Dt as ManifestIssue, E as CLEANUP_CONDITION_RULE, Ea as proposeRebindV042, Ei as effectuateBoundary, En as parsePwshCommand, Eo as requestedIdentityKey, Er as HostToolSurface, Et as CommandSurfaceManifest, F as openItems, Fa as DependencyStatus, Fi as DelegationRef, Fn as extractToolSubject, Fo as normalizeClause, Fr as selectHostCohort, Ft as claimedBatchHasRealRootInput, G as ProofHostSurface, Ga as capabilityFactOf, Gi as ExternalOperation, Gn as evidenceAvailabilityReason, Gr as parseHostVersion, Gt as injectActiveProfileHostLock, H as PROOF_MANIFEST_DOMAIN_V2, Ha as actionHasCertificationPath, Hi as EvidenceParseStatus, Hn as UnifiedItemDiagnosis, Hr as SUPPORTED_HOST_VERSIONS, Ht as combineHostPolicy, I as recoveryDigest, Ia as DerivedProcessFacts, Ii as DeriveConfig, In as isDeterministicCheck, Io as sanitizeClauseText, Ir as HostVersionDecision, It as firstStepGuidance, J as ProofKindV2, Ja as removalIsPartiallyKnown, Ji as GuardCheckpoint, Jn as CAPTURE_V042_NOTICE, Jr as AuthorityBlock, Jt as packageRowsFromPnpmLock, K as ProofKind, Ka as partialFailureOf, Ki as GoalRef, Kn as itemDiagnosis, Kr as satisfiesSupportedHostRange, Kt as inspectTargetHostGraph, L as renderRecoveryPacket, La as OperationAttribution, Li as DeriveResult, Ln as withDurability, Lo as sanitizeUrl, Lr as HostVersionStatus, Lt as lifecyclePhase, M as carriesCleanupCondition, Ma as CapabilityRemedy, Mi as BoundaryDisposition, Mn as ToolSubject, Mo as validateActionTarget, Mr as evaluateHostLock, Mt as FirstStepInjection, N as cleanupConditionFor, Na as DEPENDENCY_FREE_ONLY_CONDITION, Ni as BoundaryQualificationKind, Nn as evidenceFromPersistedToolResult, No as canonicalizePath, Nr as evaluateToolSurfaceCapability, Nt as FirstStepPreviewInput, O as CLEANUP_CONDITION_RULE_SHORT, Oa as rebindResponse, Oi as qualifyBoundary, On as goalCompletionDenial, Oo as requestedTargetMatchesResolved, Or as bindExecutableIdentity, Ot as OperationVerbEntry, P as closingHint, Pa as DeclaredOperationResult, Pi as DeferAuthorization, Pn as extractTextContent, Po as digestStrings, Pr as hostVersionFromPackages, Pt as LifecyclePhase, Q as ProofObligationV2, Qa as InterpretOptions, Qi as GuardItemKind, Qn as PROTOCOL_V5_NOTICE, Qr as segmentAuthorityBlocks, Qt as verifyComposedHostLockDump, R as ALPHA3_HOST_PACKAGES, Ra as ProcessExitStatus, Ri as DeriveScope, Rn as CertificationSupport, Ro as sha256, Rr as LATEST_SUPPORTED_HOST_VERSION, Rt as previewFirstStepInjection, S as snapshotSessionEvents, Sa as RebindProposal, Si as BoundaryRequest, Sn as ParsedShell, So as StatefulAction, Sr as HostLockEvaluation, St as evidenceCoverage, T as RC1_HOST_PACKAGES, Ta as proposeRebindOutcome, Ti as availableBoundaryQualifications, Tn as isRunExecutable, To as isStatefulAction, Tr as HostProfileKind, Tt as COMMAND_SURFACE_MANIFEST, U as PROOF_PROTOCOL_VERSION, Ua as admissibleForRemoval, Ui as EvidenceRole, Un as capabilityRemedyPhrase, Ur as compareHostVersions, Ut as hostLockContextFromComposedDump, V as PROOF_KINDS_V2, Va as RemovalOutcomeReport, Vi as EvidenceOutcome, Vn as TaskKind, Vr as SUPPORTED_HOST_RANGE, Vt as TargetHostGraph, W as PROOF_PROTOCOL_VERSION_V2, Wa as capabilityConsequence, Wi as ExpectedTransition, Wn as deriveItemDiagnosis, Wr as evaluateMinimumHostVersion, Wt as hostLockRowsFromComposedDump, X as ProofManifestV2, Xa as DirectiveClass, Xi as GuardIntegrity, Xn as PROTOCOL_V3_NOTICE, Xr as AuthorityKind, Xt as resolveActiveProfileHostLock, Y as ProofManifest, Ya as AuthorityDisposition, Yi as GuardEvidence, Yn as DEFAULT_DELEGATION_TOOL_NAMES, Yr as AuthorityBlockKind, Yt as readActiveHostGraph, Z as ProofObligation, Za as Executee, Zi as GuardItem, Zn as PROTOCOL_V4_NOTICE, Zr as authorityCaptureCounts, Zt as resolveInstalledHostLock, _ as progressFingerprint, _a as ReleaseOperation, _i as extractOperation, _n as parseGitCommandManifest, _o as STATEFUL_ACTIONS, _r as HostCapabilityRequest, _t as sessionQueryV2, a as NO_PROGRESS_RECORD_PREFIX, aa as SourceSpan, ai as isFrozenV042RebindResponse, an as GitCommandRejected, ao as maskCodeSpans, ar as AuditedExecutable, at as createProofManifest, b as SessionApiError, ba as ProposeOutcome, bi as BoundaryEffectuation, bn as CanonicalArgv, bo as SUPPORTED_EVIDENCE_ADAPTERS, br as HostCohortSelectionReason, bt as EvidenceFacetCoverage, c as classifyCompletionClaim, ca as TargetTuple, ci as RejectedBinding, cn as GitPrestateCheck, co as statefulActionsOfScope, cr as EXPECTED_HOST_PACKAGES, ct as proofDigest, d as decisionBoundaryKey, da as WaitAuthorization, di as ClauseSegment, dn as LinearCommitReadback, do as ActionManifest, dr as GOAL_HOST_PACKAGES, dt as proofHostSurfacesOf, ea as GuardOperation, ei as UserInteractionKind, en as GIT_COMMAND_TEMPLATES, eo as interpretClause, er as ACTIVE_HOST_COHORT_ID, et as SessionQuery, f as isRootPauseRequest, fa as WorkUnit, fi as captureClause, fn as commitIndexSnapshotDigest, fo as ActionSpec, fr as HOST_CAPABILITY_PACKAGE_GROUPS, ft as proofOperationMatches, g as observeAssistantOutcome, ga as ReleaseObservedIdentity, gi as extractMethod, gn as gitCommandMatchesTarget, go as SEMANTIC_ACTIONS, gr as HostCapabilityId, gt as sessionQuery, h as latestRootInstruction, ha as ReleaseGateDecision, hi as extractArtifactPaths, hn as executeRevalidatedGitEffect, ho as CERTIFICATE_VERSION_V2, hr as HostCapabilityEvaluation, ht as scopeCoverageDigest, i as CompletionDisposition, ia as PersistenceAuthorization, ii as ParsedConfirmation, in as GitCommandParseResult, io as kindOfScope, ir as ALPHA2_HOST_PACKAGES, it as canonicalProjection, j as RecoveryOptions, ja as CapabilityGap, ji as BindingActionClosure, jn as ToolResultInput, jo as validateActionManifest, jr as evaluateHostCapability, jt as FIRST_STEP_GUIDANCE, k as DEFAULT_RECOVERY_CHAR_BUDGET, ka as replayRebindResult, ki as AssetInterpretationFact, kn as hasCurrentCertificate, ko as semanticActionFromCommand, kr as bindLiveGoalCapability, kt as validateManifest, l as decideTurnBoundary, la as TargetValue, li as certifyCheckpoint, ln as GitPrestateEnvelope, lo as ACTION_MANIFEST, lr as ExecutableIdentity, lt as proofDigestV2, m as latestAssistantText, ma as PackageRow, mi as classifyClause, mn as createGitPrestateEnvelope, mo as CERTIFICATE_VERSION, mr as HostAuditProvenance, mt as requiredSubjectsOf, n as AssistantOutcomeObservation, na as HostStatus, ni as classifyUserInteraction, nn as GitCommandAccepted, no as isExecutableItem, nr as ACTIVE_HOST_LAUNCHER_VERSION, nt as bindProofToProjection, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as TargetCaptureReasonCode, oi as parseConfirmationMessage, on as GitEffectExecution, oo as namedActions, or as BASE_HOST_PACKAGES, ot as createProofManifestV2, p as isWholeTaskCompletionClaim, pa as createProjection, pi as captureItem, pn as commitTreeSnapshotDigest, po as BOUNDED_ARTIFACT_TYPES, pr as HOST_COHORTS, pt as proofV2Rejection, q as ProofKindCapability, qa as removalIsComplete, qi as GuardBoundary, qn as relevantEvidence, qr as currentContractDigest, qt as packageRowsFromActiveGraph, r as CONTROL_RECORD_PREFIX, ra as MessageCoverage, ri as CONFIRM_LINE_PATTERN, rn as GitCommandManifest, ro as isOpenObligation, rr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, rt as bindProofV2ToProjection, s as TurnStoppingDecision, sa as TargetCaptureStatus, si as CheckpointResult, sn as GitEffectRunner, so as semanticActionOfScope, sr as DEFAULT_HOST_LOCK, st as proofCapabilityReport, t as supersedeItem, ta as GuardProjection, ti as classifyTaskIntent, tn as GitAdapterAction, to as interpretMessage, tr as ACTIVE_HOST_COHORT_IDS, tt as SessionQueryV2, u as decideTurnStopping, ua as VerificationContract, ui as CaptureScope, un as GitTargetIdentity, uo as ACTION_MANIFEST_VERSION, ur as ExecutableIdentityBinding, ut as proofEvidenceConstraints, v as SESSION_API_UNSUPPORTED, va as ReleaseSettlement, vi as isInformationalMessage, vn as revalidateGitPrestate, vo as STOP_PROTOCOL_VERSION, vr as HostCohort, vt as validateProofManifest, w as RC015_HOST_PACKAGES, wa as proposeRebind, wi as GoalBoundaryAccess, wn as canonicalArgvFromCommand, wo as boundedArtifactChoiceMatches, wr as HostPlatform, wt as isVerifyingCapability, x as V3SessionLike, xa as RebindArgs, xi as BoundaryQualification, xn as CanonicalCommandSurface, xo as SemanticAction, xr as HostLockContext, xt as bindingSatisfies, y as SESSION_EVENT_ENVELOPE_INVALID, ya as BoundedSource, yi as segmentClauses, yn as verifiedLinearCommitReadback, yo as STOP_PROTOCOL_VERSION_V2, yr as HostCohortSelection, yt as validateProofManifestV2, z as PROOF_CAPABILITY_MATRIX, za as ProcessFactSource, zi as DerivedEnvelope, zn as DiagnosisNextAction, zr as MIN_SUPPORTED_HOST_VERSION, zt as ActiveProfileHostLock } from "./index-CZSt3D0G.js";
+import { $ as ProofHostSurface, $a as CapabilityFact, $i as DeferAuthorization, $n as DiagnosisNextAction, $o as opensConditionLead, $r as selectHostCohort, $t as auditedDefaultWorkdirProvider, A as snapshotSessionEvents, Aa as TargetSourceKind, Ai as captureClause, An as parseGitCommandManifest, Ao as clauseAsksOwnQuestion, Ar as HOST_CAPABILITY_PACKAGE_GROUPS, As as semanticActionFromCommand, At as evidenceCoverage, B as carriesCleanupCondition, Ba as ReleaseOperation, Bi as BoundaryQualification, Bn as parseShellCommand, Bo as introducesActionClause, Br as HostLockEvaluation, Bt as FirstStepInjection, C as progressFingerprint, Ca as NeedsReviewFact, Ci as isFrozenV042RebindResponse, Cn as GitTargetIdentity, Co as InterpretOptions, Cr as AuditedExecutable, Cs as StatefulAction, Ct as scopeCoverageDigest, D as SESSION_EVENT_ENVELOPE_INVALID, Da as TargetCaptureReasonCode, Di as certifyCheckpoint, Dn as createGitPrestateEnvelope, Do as ScopeInterpretation, Dr as ExecutableIdentity, Ds as requestedIdentityKey, Dt as validateProofManifestV2, E as SESSION_API_UNSUPPORTED, Ea as SourceSpan, Ei as RejectedBinding, En as commitTreeSnapshotDigest, Eo as QualificationStatus, Er as EXPECTED_HOST_PACKAGES, Es as isStatefulAction, Et as validateProofManifest, F as CLEANUP_CONDITION_RULE_COMPACT, Fa as WorkUnit, Fi as extractMethod, Fn as ParsedShell, Fo as hasOrderedCoordination, Fr as HostCapabilityRequest, Fs as digestStrings, Ft as ManifestIssue, G as renderRecoveryPacket, Ga as RebindProposal, Gi as effectuateBoundary, Gn as ToolSubject, Go as isQuestionScopeNeedingReview, Gr as LEGACY_HOST_COHORTS, Gt as firstStepGuidanceV6, H as closingHint, Ha as BoundedSource, Hi as GoalActivationState, Hn as hasCurrentCertificate, Ho as isExplanationScope, Hr as HostPlatform, Ht as LifecyclePhase, I as CLEANUP_CONDITION_RULE_SHORT, Ia as createProjection, Ii as extractOperation, In as ShellParseStatus, Io as hasQuestionScope, Ir as HostCohort, Is as normalizeClause, It as OperationVerbEntry, J as PROOF_KINDS, Ja as proposeRebindOutcome, Ji as AssetInterpretationFact, Jn as extractToolSubject, Jo as kindOfScope, Jr as evaluateExternalWaitCapability, Jt as ActiveProfileHostLock, K as ALPHA3_HOST_PACKAGES, Ka as confirmRebind, Ki as isCurrentAcceptedBoundary, Kn as evidenceFromPersistedToolResult, Ko as isRestatement, Kr as bindExecutableIdentity, Kt as lifecyclePhase, L as DEFAULT_RECOVERY_CHAR_BUDGET, La as PackageRow, Li as isInformationalMessage, Ln as canonicalArgvFromCommand, Lo as hasWorkPredicate, Lr as HostCohortSelection, Ls as sanitizeClauseText, Lt as validateManifest, M as RC015_HOST_PACKAGES, Ma as TargetValue, Mi as classifyClause, Mn as verifiedLinearCommitReadback, Mo as clauseIsProtected, Mr as HostAuditProvenance, Ms as validateActionManifest, Mt as isVerifyingCapability, N as RC1_HOST_PACKAGES, Na as VerificationContract, Ni as environmentDefaultRepositoryTarget, Nn as CanonicalArgv, No as explanationHasActionResidue, Nr as HostCapabilityEvaluation, Ns as validateActionTarget, Nt as COMMAND_SURFACE_MANIFEST, O as SessionApiError, Oa as TargetCaptureStatus, Oi as CaptureScope, On as executeRevalidatedGitEffect, Oo as actionVerbMatches, Or as ExecutableIdentityBinding, Os as requestedTargetAuthorizesMutation, Ot as EvidenceFacetCoverage, P as CLEANUP_CONDITION_RULE, Pa as WaitAuthorization, Pi as extractArtifactPaths, Pn as CanonicalCommandSurface, Po as governedClauseRestrictsExecution, Pr as HostCapabilityId, Ps as canonicalizePath, Pt as CommandSurfaceManifest, Q as PROOF_PROTOCOL_VERSION_V2, Qa as replayRebindResult, Qi as BoundaryQualificationKind, Qn as CertificationSupport, Qo as namedActions, Qr as hostVersionFromPackages, Qt as auditedDefaultWorkdirHost, R as MIN_RECOVERY_CHAR_BUDGET, Ra as ReleaseGateDecision, Ri as segmentClauses, Rn as isRunExecutable, Ro as interpretClause, Rr as HostCohortSelectionReason, Rs as sanitizeUrl, Rt as ClaimedMessage, S as observeAssistantOutcome, Sa as MessageCoverage, Si as ParsedConfirmation, Sn as GitPrestateEnvelope, So as GRANTED_QUALIFICATION, Sr as ALPHA2_HOST_PACKAGES, Ss as SemanticAction, St as requiredSubjectsOf, T as v6TestPredicate, Ta as PersistenceAuthorization, Ti as CheckpointResult, Tn as commitIndexSnapshotDigest, To as QualificationReason, Tr as DEFAULT_HOST_LOCK, Ts as boundedArtifactChoiceMatches, Tt as sessionQueryV2, U as openItems, Ua as ProposeOutcome, Ui as GoalBoundaryAccess, Un as ToolCallInput, Uo as isInformationalFragment, Ur as HostProfileKind, Ut as claimedBatchHasRealRootInput, V as cleanupConditionFor, Va as ReleaseSettlement, Vi as BoundaryRequest, Vn as goalCompletionDenial, Vo as isExecutableItem, Vr as HostLockStatus, Vt as FirstStepPreviewInput, W as recoveryDigest, Wa as RebindArgs, Wi as availableBoundaryQualifications, Wn as ToolResultInput, Wo as isOpenObligation, Wr as HostToolSurface, Wt as firstStepGuidance, X as PROOF_MANIFEST_DOMAIN_V2, Xa as rebindAttemptKey, Xi as BindingActionClosure, Xn as persistedToolResultStatus, Xo as maskCodeSpans, Xr as evaluateHostLock, Xt as TargetHostGraph, Y as PROOF_KINDS_V2, Ya as proposeRebindV042, Yi as AssetObligation, Yn as isDeterministicCheck, Yo as legacyQuestionReadingIsInformational, Yr as evaluateHostCapability, Yt as HostProfileError, Z as PROOF_PROTOCOL_VERSION, Za as rebindResponse, Zi as BoundaryDisposition, Zn as withDurability, Zo as maskQuotedSpans, Zr as evaluateToolSurfaceCapability, Zt as activeRendererModule, _ as decisionBoundaryKey, _a as GuardItemKind, _i as TaskIntent, _n as GitCommandParseResult, _o as removalIsPartiallyKnown, _r as rootLocatorFlavor, _s as SEMANTIC_ACTIONS, _t as proofDigestV2, a as CONTROL_RECORD_PREFIX, aa as EvidenceBinding, ai as SUPPORTED_HOST_RANGE, an as inspectTargetHostGraph, ao as DerivedProcessFacts, ar as evidenceAvailabilityReason, as as restatedContentOf, at as ProofObligation, b as latestAssistantText, ba as GuardProjection, bi as classifyUserInteraction, bn as GitEffectRunner, bo as Executee, br as ACTIVE_HOST_LAUNCHER_VERSION, bs as STOP_PROTOCOL_VERSION_V2, bt as proofOperationMatches, c as NO_PROGRESS_RECORD_PREFIX, ca as EvidenceRole, ci as evaluateMinimumHostVersion, cn as readActiveHostGraph, co as ProcessFactSource, cr as CAPTURE_V042_NOTICE, cs as statefulActionsOfScope, ct as SessionQuery, d as assessmentAction, da as GoalRef, di as currentContractDigest, dn as verifyComposedHostLockDump, do as actionHasCertificationPath, dr as PROTOCOL_V4_NOTICE, ds as ACTION_MANIFEST_VERSION, dt as bindProofV2ToProjection, ea as DelegationRef, ei as HostVersionDecision, en as auditedForegroundRenderers, eo as CapabilityGap, er as Repairability, es as opensWithDirective, et as ProofKind, f as assessmentOutcomePredicate, fa as GuardBoundary, fi as AuthorityBlock, fn as GIT_COMMAND_MANIFEST_IDS, fo as admissibleForRemoval, fr as PROTOCOL_V5_NOTICE, fs as ActionManifest, ft as canonicalProjection, g as decideTurnStopping, ga as GuardItem, gi as segmentAuthorityBlocks, gn as GitCommandManifest, go as removalIsComplete, gr as legacyRecordsNeedingReview, gs as CERTIFICATE_VERSION_V2, gt as proofDigest, h as decideTurnBoundary, ha as GuardIntegrity, hi as authorityCaptureCounts, hn as GitCommandAccepted, ho as partialFailureOf, hr as deriveProjection, hs as CERTIFICATE_VERSION, ht as proofCapabilityReport, i as AssistantOutcomeObservation, ia as DerivedEnvelope, ii as ParsedHostVersion, in as injectActiveProfileHostLock, io as DependencyStatus, ir as deriveItemDiagnosis, is as reportingHeadGoverns, it as ProofManifestV2, j as RC015_RC2_HOST_PACKAGES, ja as TargetTuple, ji as captureItem, jn as revalidateGitPrestate, jo as clauseIsGoverned, jr as HOST_COHORTS, js as semanticActionFromText, jt as evidenceMatchesItem, k as V3SessionLike, ka as TargetSource, ki as ClauseSegment, kn as gitCommandMatchesTarget, ko as clarifiedSpanOf, kr as GOAL_HOST_PACKAGES, ks as requestedTargetMatchesResolved, kt as bindingSatisfies, l as NO_PROGRESS_TURNS_BEFORE_STOP, la as ExpectedTransition, li as parseHostVersion, ln as resolveActiveProfileHostLock, lo as ProcessOutcomeReason, lr as DEFAULT_DELEGATION_TOOL_NAMES, ls as verbIsNegated, lt as SessionQueryV2, m as currentActionBases, ma as GuardEvidence, mi as AuthorityKind, mn as GitAdapterAction, mo as capabilityFactOf, mr as applyUpgradeEligibility, ms as BOUNDED_ARTIFACT_TYPES, mt as createProofManifestV2, n as projectCoreV2, na as DeriveResult, ni as LATEST_SUPPORTED_HOST_VERSION, nn as hostLockContextFromComposedDump, no as DEPENDENCY_FREE_ONLY_CONDITION, nr as UnifiedItemDiagnosis, ns as qualificationOfClause, nt as ProofKindV2, o as CompletionDisposition, oa as EvidenceOutcome, oi as SUPPORTED_HOST_VERSIONS, on as packageRowsFromActiveGraph, oo as OperationAttribution, or as itemDiagnosis, os as semanticActionOfScope, ot as ProofObligationV2, p as classifyCompletionClaim, pa as GuardCheckpoint, pi as AuthorityBlockKind, pn as GIT_COMMAND_TEMPLATES, po as capabilityConsequence, pr as PROTOCOL_V6_NOTICE, ps as ActionSpec, pt as createProofManifest, q as PROOF_CAPABILITY_MATRIX, qa as proposeRebind, qi as qualifyBoundary, qn as extractTextContent, qo as itemHoldsExecutionAuthority, qr as bindLiveGoalCapability, qt as previewFirstStepInjection, r as supersedeItem, ra as DeriveScope, ri as MIN_SUPPORTED_HOST_VERSION, rn as hostLockRowsFromComposedDump, ro as DeclaredOperationResult, rr as capabilityRemedyPhrase, rs as questionHeadsClause, rt as ProofManifest, s as CurrentActionBasis, sa as EvidenceParseStatus, si as compareHostVersions, sn as packageRowsFromPnpmLock, so as ProcessExitStatus, sr as relevantEvidence, ss as splitTextFragments, st as ProofSurface, t as projectSessionCoreV2, ta as DeriveConfig, ti as HostVersionStatus, tn as combineHostPolicy, to as CapabilityRemedy, tr as TaskKind, ts as presentExplanationHead, tt as ProofKindCapability, u as TurnStoppingDecision, ua as ExternalOperation, ui as satisfiesSupportedHostRange, un as resolveInstalledHostLock, uo as RemovalOutcomeReport, ur as PROTOCOL_V3_NOTICE, us as ACTION_MANIFEST, ut as bindProofToProjection, v as isRootPauseRequest, va as GuardItemStatus, vi as UserInteractionKind, vn as GitCommandRejected, vo as AuthorityDisposition, vr as ACTIVE_HOST_COHORT_ID, vs as STATEFUL_ACTIONS, vt as proofEvidenceConstraints, w as testOutcomePredicate, wa as NeedsReviewReason, wi as parseConfirmationMessage, wn as LinearCommitReadback, wo as LEGACY_QUALIFICATION, wr as BASE_HOST_PACKAGES, ws as actionCompatible, wt as sessionQuery, x as latestRootInstruction, xa as HostStatus, xi as CONFIRM_LINE_PATTERN, xn as GitPrestateCheck, xo as ExecutionQualification, xr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, xs as SUPPORTED_EVIDENCE_ADAPTERS, xt as proofV2Rejection, y as isWholeTaskCompletionClaim, ya as GuardOperation, yi as classifyTaskIntent, yn as GitEffectExecution, yo as DirectiveClass, yr as ACTIVE_HOST_COHORT_IDS, ys as STOP_PROTOCOL_VERSION, yt as proofHostSurfacesOf, z as RecoveryOptions, za as ReleaseObservedIdentity, zi as BoundaryEffectuation, zn as parsePwshCommand, zo as interpretMessage, zr as HostLockContext, zs as sha256, zt as FIRST_STEP_GUIDANCE } from "./index-D45jgmPx.js";
 import "@deepseek-ai/dsh-tools";
-import "@deepseek-ai/dsh-session";
+import { Session } from "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
@@ -40,6 +40,7 @@ interface EvidenceToolRoots {
     serviceId: string;
     preGeneration: string;
   }) => Promise<boolean>;
+  hasRestartIntent?: (resolutionCallId: string, serviceId: string, preGeneration: string) => boolean;
   /** Runtime-supplied, action-scoped host capability decision. */
   hostCapability?: (action: StatefulAction) => {
     status: "supported" | "unsupported" | "unavailable";
@@ -119,7 +120,7 @@ declare const Config: z<{
 //#endregion
 //#region src/runtime.d.ts
 declare const name = "context-guard";
-declare const inject: readonly ["sessions", "commands"];
+declare const inject: readonly ["sessions", "commands", "fs"];
 /**
 * Executor and network seams for acceptance runs. They replace ONLY the two
 * things a deterministic test cannot do for real — spawning the mutation
@@ -141,6 +142,8 @@ interface RuntimeExecutorSeams {
   * acceptance.
   */
   hostLock?: HostLockEvaluation;
+  /** Isolated acceptance override for the provider-invisible durable ledger. */
+  privateLedgerRoot?: string;
 }
 declare function apply(ctx: Context, rawConfig?: {
   activation?: unknown;
@@ -152,4 +155,19 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockProfileRoot?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, admissibleForRemoval, apply, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, hasCurrentCertificate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isFrozenV042RebindResponse, isInformationalMessage, isOpenObligation, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, kindOfScope, latestAssistantText, latestRootInstruction, lifecyclePhase, maskCodeSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualifyBoundary, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+//#region src/raw-replay.d.ts
+interface RawReplayInput {
+  root: string;
+  final: string;
+  cwd?: string;
+  /** Synthetic host events, in persisted order; only for local replay. */
+  events?: Array<{
+    type: string;
+    data: unknown;
+  }>;
+}
+/** Local synthetic replay using the actual Session, derivation and registered
+* Stop handler. It neither executes tools nor asserts a real model outcome. */
+declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
+//#endregion
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };