dsh-completion-guard 0.6.3 → 0.7.0

package/dist/{index-CfEiC4bb.d.ts → index-D45jgmPx.d.ts}

@@ -167,6 +167,20 @@ declare function legacyQuestionReadingIsInformational(masked: string): boolean;
 declare function kindOfScope(directive: DirectiveClass, body?: string): GuardItemKind;
 declare function maskCodeSpans(text: string): string;
 /**
+* A present explanation speech act can have a time/scope frame before its
+* matrix verb. This only identifies the head; the v6 capture path still checks
+* the complete complement and keeps an independent action or unknown residue.
+* In particular, a quoted or reported head and a future-time frame do not
+* match, so this predicate never grants execution authority.
+*/
+declare function presentExplanationHead(text: string): {
+  end: number;
+} | undefined;
+/** A sourced clause-level condition can govern the next comma-linked matrix. */
+declare function opensConditionLead(text: string): boolean;
+/** Work named inside a governed explanation complement needs its own reading. */
+declare function hasWorkPredicate(text: string): boolean;
+/**
 * Whether a clause asks for information rather than ordering work (0.6.3 K1).
 *
 * 0.6.2 treated the mere presence of a question marker anywhere in a clause as
@@ -461,7 +475,7 @@ type ProcessExitStatus = number | "unknown";
 * Why `outcome` says what it says, so a display or a consumer never reads more
 * than the source supports.
 */
-type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
+type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
 /**
 * How far the console let the guard attribute effects to the obligation's own
 * operation. `unknown` is the honest answer for every opaque compound runner:
@@ -690,6 +704,8 @@ interface ReleaseReservation {
   operation: ReleaseOperation;
   callId: string;
   startedAtSeq: number;
+  /** Present instead of a Session sequence for provider-invisible sidecar records. */
+  ledgerPosition?: number;
   status: "in_flight";
   /**
   * The npm SRI the trusted producer read when the reservation was written.
@@ -705,6 +721,8 @@ interface ReleaseSettlement {
   operation: ReleaseOperation;
   callId: string;
   settledAtSeq: number;
+  /** Present instead of a Session sequence for provider-invisible sidecar records. */
+  ledgerPosition?: number;
   /** A trusted readback identity, or the reason no producer exists. */
   readback: {
     kind: "npm_integrity" | "git_ref" | "github_release";
@@ -861,7 +879,7 @@ type TargetCaptureStatus = "resolved" | "clarification_required";
 * a mixed request as answered, and a warning would have left exactly that
 * misreading in force.
 */
-type NeedsReviewReason = "legacy_mixed_information_scope" | "legacy_environment_default_target" | "unknown_state_version" | "legacy_missing_execution_qualification";
+type NeedsReviewReason = "legacy_mixed_information_scope" | "legacy_environment_default_target" | "unknown_state_version" | "legacy_missing_execution_qualification" | "legacy_v6_generic_action" | "legacy_v6_ordinary_certification" | "legacy_v6_text_wait";
 interface NeedsReviewFact {
   reason: NeedsReviewReason;
   /** Stable identity of the eligibility check that raised it. */
@@ -869,7 +887,7 @@ interface NeedsReviewFact {
   /** When the check was applied: this is an upgrade fact, not a birth fact. */
   recordedAtRevision: number;
 }
-type TargetCaptureReasonCode = "requested_target_package_id_missing" | "requested_target_artifact_id_missing" | "requested_target_repository_missing" | "requested_target_repository_ambiguous" | "requested_target_field_ambiguous" | "requested_target_service_id_missing" | "requested_target_registry_missing_or_invalid";
+type TargetCaptureReasonCode = "requested_target_package_id_missing" | "requested_target_artifact_id_missing" | "requested_target_repository_missing" | "requested_target_repository_invalid" | "requested_target_repository_ambiguous" | "requested_target_field_ambiguous" | "requested_target_service_id_missing" | "requested_target_registry_missing_or_invalid";
 interface GoalRef {
   id: string;
   revision: number;
@@ -986,7 +1004,13 @@ interface GuardItem {
   authority?: "root_instruction" | "root_adoption" | "legacy_authority_unclassified";
   legacyFlags?: Array<"legacy_generic_run" | "legacy_authority_unclassified">;
   /** v0.5 intent layer: inquiries keep the obligation but are not machine certifiable. */
-  taskKind?: "inquiry" | "action";
+  taskKind?: "inquiry" | "action" | "context";
+  /** V6 root-sourced read-only method, bound to the unique earlier obligation
+  * in this same root. A tool name alone is never an execution authority. */
+  observerMethod?: {
+    tools: Array<"context_guard_observe_file" | "context_guard_observe_test_readiness">;
+    targetItemIds: string[];
+  };
   /**
   * v0.5.1 interpretation layer, derived from the same source bytes as
   * {@link normalizedText} by `domain/semantics.ts`. These fields record what
@@ -1033,6 +1057,13 @@ interface GuardItem {
   */
   rawTextSha256?: string;
   spans?: SourceSpan[];
+  /** V6 only: a required child relation captured from direct coordination in
+  * the original root, never inferred from a later control or old state. */
+  rootDependency?: {
+    parentItemId: string;
+    rawTextSha256: string;
+    sourceSpan: SourceSpan;
+  };
   /**
   * 0.6.0 work-unit assignment (C04), present only for obligations captured
   * after a v5 protocol boundary in a non-delegated session. Legacy items keep
@@ -1108,6 +1139,19 @@ interface GuardEvidence {
   reasonCode?: string;
   adapterId?: string;
   adapterVersion?: string;
+  /** Current-version native readback is causally tied to a persisted host effect call. */
+  causedByCallId?: string;
+  nativeCanonicalPath?: string;
+  nativeCanonicalBase?: string;
+  nativeGitTreeOid?: string;
+  nativeGitParentOid?: string;
+  readinessForItemId?: string;
+  readinessPredicate?: string;
+  readinessManifestSha256?: string;
+  readinessEffectCallId?: string;
+  readinessSelectedPath?: string;
+  readinessScriptName?: string;
+  readinessInputSha256?: string;
   externalOperationRef?: ExternalOperation;
   /**
   * 0.6.2 D062-02: the LAYERED reading of a shell result, kept beside — never
@@ -1174,10 +1218,19 @@ interface GuardCheckpoint {
   openDigest: string;
   evidenceSha256: string;
   bindingDigest: string;
+  /** v3 DSH-native certificate extension; older certificate bytes stay intact. */
+  nativeObservations?: {
+    schema: "dsh.native-observation/v1" | "dsh.native-observation/v2";
+    digests: string[];
+  };
+  /** V6-only, root-time Session locator identity; outside historical digest_v3. */
+  rootLocatorIdentity?: string;
   bindings: EvidenceBinding[];
   goalRef?: GoalRef;
   certificationDigest: string;
   result: "certified" | "incomplete" | "unknown";
+  /** Derived persisted result watermark; excluded from historical certificate bytes. */
+  recordedAtSeq?: number;
   /**
   * 0.6.0 v2 certificate (v5 sessions only): the unit whose closure was
   * certified. Version-1 certificates keep the whole-session contract and
@@ -1256,6 +1309,8 @@ interface ExternalOperation {
 }
 interface GuardProjection {
   enabled: boolean;
+  /** Explicit root /context-guard on adoption, never inferred from installation or always observation. */
+  goalCompletionAdopted: boolean;
   epoch: number;
   contractRevision: number;
   rebindProposals: Map<string, RebindProposal>;
@@ -1275,7 +1330,29 @@ interface GuardProjection {
   * `undefined` (legacy) before it. Determines certificate version, closure
   * scope, and whether delivery/unit semantics are active.
   */
-  boundaryProtocol?: 5;
+  boundaryProtocol?: 5 | 6;
+  v6BoundarySeq?: number;
+  /** Root-time locator bases from the durable Session header, never a later tool cwd. Windows relative resolution remains unavailable. */
+  rootLocatorContexts: Map<number, {
+    base: string;
+    flavor: "posix" | "windows";
+    sha256: string;
+  }>;
+  /** V6 identity domain binds root bytes, original locator base and Session identity. */
+  rootLocatorIdentity?: string;
+  /** Shared core/v2 projection from confirmed Session sources; absent when the adapter lacks exact source coverage. */
+  coreV2?: Record<string, unknown>;
+  /** Display-only producer relation for derived core requirements (for example
+  * one observer method split into separately sourced tool predicates). It is
+  * rebuilt with coreV2 from the same Session snapshot and is never authority. */
+  coreV2RequirementOrigins?: Map<string, {
+    itemId: string;
+    action: string;
+    target: string;
+    sourceStart: number;
+    sourceEnd: number;
+  }>;
+  coreV2Reason?: "source_not_projectable" | "projection_failed";
   /** 0.6.0 responsibility tier (C06), from the effective configuration. */
   policy: "standard" | "strict" | "release";
   /** 0.6.0 C01 coverage summaries, one per captured root message (last 16). */
@@ -1327,6 +1404,9 @@ interface GuardProjection {
   }>;
   sessionRefDigest: string;
   hostLockDigest: string;
+  /** Runtime-only active renderer byte attestation. Never inferred from text
+  * or a package version, and rebound on every projection/reload. */
+  auditedForegroundRenderers?: Array<"bash" | "pwsh">;
   hostStatus: HostStatus;
   hostReasonCode?: string;
   /** Readback of the audited cohort bound into `hostLockDigest`. */
@@ -1420,6 +1500,7 @@ interface DeriveResult {
   protocolV4Present: boolean;
   /** True when the durable log carries the 0.6 first-step protocol boundary. */
   boundaryV5: boolean;
+  boundaryV6: boolean;
 }
 interface DerivedEnvelope {
   seq: number;
@@ -1789,6 +1870,10 @@ interface HostCapabilityEvaluation {
 interface HostLockEvaluation {
   status: HostLockStatus;
   digest: string;
+  /** Read-only byte attestation of the active foreground shell renderer and
+  * its shared terminal decoder. Set only by production active-graph readback;
+  * the package version/SRI graph alone does not establish renderer behavior. */
+  auditedForegroundRenderers?: Array<"bash" | "pwsh">;
   goalAvailable: boolean;
   reasonCode?: "host_lock_migration_required" | "host_lock_installed_graph_drift" | "host_lock_missing" | "host_lock_version_mismatch" | "host_lock_version_below_minimum" | "host_lock_version_unparseable" | "host_lock_integrity_mismatch" | "host_lock_unknown_package" | "host_lock_duplicate_package" | "host_lock_goal_graph_incomplete" | "host_lock_goal_capability_mismatch" | "host_lock_cohort_mixed_graph" | "host_lock_cohort_unbound_identity" | "host_lock_cohort_platform_not_audited";
   packages: PackageRow[];
@@ -1934,6 +2019,7 @@ declare const PROTOCOL_V4_NOTICE = "Context Guard protocol boundary: v4.0.0";
 * fail direction on rollback is closed, never a misread.
 */
 declare const PROTOCOL_V5_NOTICE = "Context Guard protocol boundary: v5.0.0";
+declare const PROTOCOL_V6_NOTICE = "Context Guard protocol boundary: v6.0.0";
 /**
 * The pure upgrade-eligibility predicate: the records in the current closure
 * scope that may NOT be inherited as a current pass, with the reason that
@@ -1961,6 +2047,7 @@ declare function applyUpgradeEligibility(projection: GuardProjection): void;
 * `tool/result`, `tool/ptc-dispatch-start`, `tool/ptc-dispatch`, and
 * `compaction/summary`.
 */
+declare function rootLocatorFlavor(cwd: string): "posix" | "windows" | undefined;
 declare function deriveProjection(sourceEvents: readonly DerivedEnvelope[], config: DeriveConfig, scope: DeriveScope, durableConfirmed: boolean, hostLock?: HostLockEvaluation): DeriveResult;
 //#endregion
 //#region src/domain/reason-class.d.ts
@@ -2058,10 +2145,20 @@ interface ToolCallInput {
 interface ToolResultInput {
   seq: number;
   error?: unknown;
+  /** A persisted return exists but its tool-result identity or status is not trustworthy. */
+  untrusted?: boolean;
   meta?: unknown;
   textContent: string;
 }
 declare function extractTextContent(content: readonly unknown[]): string;
+/**
+* DSH persists the host return flag on a nested `tool-result` block. The
+* surrounding message or event need not carry an `error` field (approval and
+* sandbox denials are examples). Never let a renderer's missing exit marker
+* override that structured return, or accept an ambiguous nested return as
+* a clean result for another call.
+*/
+declare function persistedToolResultStatus(data: unknown, callId: string, kind?: "tool/result" | "tool/ptc-dispatch", matchedStart?: boolean): "clean" | "failure" | "unknown";
 interface ToolOperation {
   op: GuardOperation;
   path?: string;
@@ -2084,6 +2181,18 @@ interface ToolSubject {
   reasonCode?: string;
   adapterId?: string;
   adapterVersion?: string;
+  causedByCallId?: string;
+  nativeCanonicalPath?: string;
+  nativeCanonicalBase?: string;
+  nativeGitTreeOid?: string;
+  nativeGitParentOid?: string;
+  readinessForItemId?: string;
+  readinessPredicate?: string;
+  readinessManifestSha256?: string;
+  readinessEffectCallId?: string;
+  readinessSelectedPath?: string;
+  readinessScriptName?: string;
+  readinessInputSha256?: string;
   /** 0.6.2 D062-02: the layered shell reading, present only for shell tools. */
   processFacts?: DerivedProcessFacts;
   externalOperationRef?: ExternalOperation;
@@ -2093,7 +2202,7 @@ declare function evidenceFromPersistedToolResult(call: ToolCallInput, result: To
 declare function withDurability(evidence: GuardEvidence, confirmed: boolean): GuardEvidence;
 //#endregion
 //#region src/domain/goal-gate.d.ts
-declare function hasCurrentCertificate(projection: GuardProjection): boolean;
+declare function hasCurrentCertificate(projection: GuardProjection, historicalReplay?: boolean): boolean;
 /**
 * Denies `update_goal(action=complete)` while the guard is enabled and no
 * current completion certificate exists. The gate itself has no bypass; a
@@ -2322,6 +2431,22 @@ interface ActiveProfileHostLock {
 * Used by target preflight before a legacy profile can be migrated.
 */
 declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
+declare function activeRendererModule(nodeModulesRoot: string, name: string): {
+  bytes: string;
+  path: string;
+} | undefined;
+/** Verify active, reachable producer bytes without reading credentials or
+* accepting historical package-map entries. Missing/ambiguous paths fail
+* closed for the ordinary markerless-test shortcut. */
+declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string): Array<"bash" | "pwsh">;
+/** Exact active implementation route for call-time omitted-workdir evidence. */
+declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh"): boolean;
+/**
+* The active graph alone does not prove which shell service this Agent uses.
+* Match the scoped service's exact constructor to the audited active module,
+* rejecting another provider with the same public service interface/name.
+*/
+declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown): Promise<boolean>;
 interface TargetHostGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -2388,6 +2513,8 @@ interface FirstStepPreviewInput {
   enabled: boolean;
   /** The durable log already contains a v5 (0.6) Guard boundary. */
   boundaryV5Present?: boolean;
+  boundaryV6Present?: boolean;
+  targetProtocol?: 5 | 6;
   /** The durable log already contains a v4 (or newer) Guard boundary. */
   boundaryPresent: boolean;
   /** The session is a delegated/subagent session, never a root conversation. */
@@ -2419,6 +2546,7 @@ declare function previewFirstStepInjection(input: FirstStepPreviewInput, claimed
 */
 declare function firstStepGuidance(policy?: "standard" | "strict" | "release"): string;
 declare const FIRST_STEP_GUIDANCE: string;
+declare function firstStepGuidanceV6(policy?: "standard" | "strict" | "release"): string;
 /**
 * Lifecycle phase derived from durable facts. `enabled` is the log-derived
 * enablement (`always`, or the explicit `on`/`off` command sequence), and
@@ -2861,6 +2989,25 @@ interface AssistantOutcomeObservation {
   kind: "completion_claim" | "user_wait_claim" | "external_wait_claim" | "report";
   reasonCode: string;
 }
+interface CurrentActionBasis {
+  itemId: string;
+  action: string;
+  sourceMessageId: string;
+  unmetPredicate: string;
+  owner: "assistant";
+  readiness: "ready";
+  asOf: number;
+}
+/** A concrete, current root-owned action, with host capability and no pending
+* condition. Historical generic text and old qualifications are not upgraded. */
+declare function testOutcomePredicate(text: string): string;
+/** v6 root outcome intent: running and reporting a named test is distinct
+* from an explicit request to make it pass. A failed run can finish the first
+* duty, while the second remains unmet; neither reading grants repair scope. */
+declare function v6TestPredicate(text: string): "test_run_completed" | "test_passed";
+declare function assessmentOutcomePredicate(text: string): string;
+declare function assessmentAction(text: string): string;
+declare function currentActionBases(projection: GuardProjection, enforceCore?: boolean): CurrentActionBasis[];
 /** Assistant prose is retained only as a bounded diagnostic observation. */
 declare function observeAssistantOutcome(text: string): AssistantOutcomeObservation;
 /**
@@ -2870,7 +3017,7 @@ declare function observeAssistantOutcome(text: string): AssistantOutcomeObservat
 * one fallback correction; subsequent attempts safe-yield. An active, armed
 * Goal remains exclusively owned by the host Goal Round Driver.
 */
-declare function decideTurnBoundary(projection: GuardProjection): TurnStoppingDecision;
+declare function decideTurnBoundary(projection: GuardProjection, latestRootText?: string): TurnStoppingDecision;
 declare function decideTurnStopping(projection: GuardProjection, _assistantText: string, _turn: number, _maxAttempts: number): TurnStoppingDecision;
 /**
 * Whether the last trusted ROOT instruction asked to pause.
@@ -2901,4 +3048,12 @@ declare function latestAssistantText(events: readonly {
 //#region src/domain/supersession.d.ts
 declare function supersedeItem(items: Map<string, GuardItem>, oldId: string, replacement: GuardItem): boolean;
 //#endregion
-export { ProofSurface as $, partialFailureOf as $a, GuardIntegrity as $i, applyUpgradeEligibility as $n, STATEFUL_ACTIONS as $o, authorityCaptureCounts as $r, GIT_COMMAND_MANIFEST_IDS as $t, MIN_RECOVERY_CHAR_BUDGET as A, confirmRebind as Aa, isCurrentAcceptedBoundary as Ai, ToolCallInput as An, itemHoldsExecutionAuthority as Ao, bindExecutableIdentity as Ar, ClaimedMessage as At, PROOF_KINDS as B, DEPENDENCY_FREE_ONLY_CONDITION as Ba, DeriveResult as Bi, Repairability as Bn, restatedContentOf as Bo, LATEST_SUPPORTED_HOST_VERSION as Br, HostProfileError as Bt, RC015_RC2_HOST_PACKAGES as C, ReleaseObservedIdentity as Ca, BoundaryEffectuation as Ci, ShellParseStatus as Cn, introducesActionClause as Co, HostLockContext as Cr, evidenceMatchesItem as Ct, CLEANUP_CONDITION_RULE_COMPACT as D, ProposeOutcome as Da, GoalBoundaryAccess as Di, parseShellCommand as Dn, isOpenObligation as Do, HostProfileKind as Dr, ManifestIssue as Dt, CLEANUP_CONDITION_RULE as E, BoundedSource as Ea, GoalActivationState as Ei, parsePwshCommand as En, isInformationalFragment as Eo, HostPlatform as Er, CommandSurfaceManifest as Et, openItems as F, rebindResponse as Fa, BoundaryDisposition as Fi, extractToolSubject as Fn, namedActions as Fo, evaluateToolSurfaceCapability as Fr, claimedBatchHasRealRootInput as Ft, ProofHostSurface as G, ProcessExitStatus as Ga, EvidenceParseStatus as Gi, evidenceAvailabilityReason as Gn, ACTION_MANIFEST as Go, compareHostVersions as Gr, injectActiveProfileHostLock as Gt, PROOF_MANIFEST_DOMAIN_V2 as H, DependencyStatus as Ha, DerivedEnvelope as Hi, UnifiedItemDiagnosis as Hn, splitTextFragments as Ho, ParsedHostVersion as Hr, combineHostPolicy as Ht, recoveryDigest as I, replayRebindResult as Ia, BoundaryQualificationKind as Ii, isDeterministicCheck as In, opensWithDirective as Io, hostVersionFromPackages as Ir, firstStepGuidance as It, ProofKindV2 as J, RemovalOutcomeReport as Ja, ExternalOperation as Ji, CAPTURE_V042_NOTICE as Jn, ActionSpec as Jo, satisfiesSupportedHostRange as Jr, packageRowsFromPnpmLock as Jt, ProofKind as K, ProcessFactSource as Ka, EvidenceRole as Ki, itemDiagnosis as Kn, ACTION_MANIFEST_VERSION as Ko, evaluateMinimumHostVersion as Kr, inspectTargetHostGraph as Kt, renderRecoveryPacket as L, CapabilityFact as La, DeferAuthorization as Li, withDurability as Ln, qualificationOfClause as Lo, selectHostCohort as Lr, lifecyclePhase as Lt, carriesCleanupCondition as M, proposeRebindOutcome as Ma, AssetInterpretationFact as Mi, ToolSubject as Mn, legacyQuestionReadingIsInformational as Mo, evaluateExternalWaitCapability as Mr, FirstStepInjection as Mt, cleanupConditionFor as N, proposeRebindV042 as Na, AssetObligation as Ni, evidenceFromPersistedToolResult as Nn, maskCodeSpans as No, evaluateHostCapability as Nr, FirstStepPreviewInput as Nt, CLEANUP_CONDITION_RULE_SHORT as O, RebindArgs as Oa, availableBoundaryQualifications as Oi, goalCompletionDenial as On, isQuestionScopeNeedingReview as Oo, HostToolSurface as Or, OperationVerbEntry as Ot, closingHint as P, rebindAttemptKey as Pa, BindingActionClosure as Pi, extractTextContent as Pn, maskQuotedSpans as Po, evaluateHostLock as Pr, LifecyclePhase as Pt, ProofObligationV2 as Q, capabilityFactOf as Qa, GuardEvidence as Qi, PROTOCOL_V5_NOTICE as Qn, SEMANTIC_ACTIONS as Qo, AuthorityKind as Qr, verifyComposedHostLockDump as Qt, ALPHA3_HOST_PACKAGES as R, CapabilityGap as Ra, DelegationRef as Ri, CertificationSupport as Rn, questionHeadsClause as Ro, HostVersionDecision as Rr, previewFirstStepInjection as Rt, snapshotSessionEvents as S, ReleaseGateDecision as Sa, segmentClauses as Si, ParsedShell as Sn, interpretMessage as So, HostCohortSelectionReason as Sr, evidenceCoverage as St, RC1_HOST_PACKAGES as T, ReleaseSettlement as Ta, BoundaryRequest as Ti, isRunExecutable as Tn, isExplanationScope as To, HostLockStatus as Tr, COMMAND_SURFACE_MANIFEST as Tt, PROOF_PROTOCOL_VERSION as U, DerivedProcessFacts as Ua, EvidenceBinding as Ui, capabilityRemedyPhrase as Un, statefulActionsOfScope as Uo, SUPPORTED_HOST_RANGE as Ur, hostLockContextFromComposedDump as Ut, PROOF_KINDS_V2 as V, DeclaredOperationResult as Va, DeriveScope as Vi, TaskKind as Vn, semanticActionOfScope as Vo, MIN_SUPPORTED_HOST_VERSION as Vr, TargetHostGraph as Vt, PROOF_PROTOCOL_VERSION_V2 as W, OperationAttribution as Wa, EvidenceOutcome as Wi, deriveItemDiagnosis as Wn, verbIsNegated as Wo, SUPPORTED_HOST_VERSIONS as Wr, hostLockRowsFromComposedDump as Wt, ProofManifestV2 as X, admissibleForRemoval as Xa, GuardBoundary as Xi, PROTOCOL_V3_NOTICE as Xn, CERTIFICATE_VERSION as Xo, AuthorityBlock as Xr, resolveActiveProfileHostLock as Xt, ProofManifest as Y, actionHasCertificationPath as Ya, GoalRef as Yi, DEFAULT_DELEGATION_TOOL_NAMES as Yn, BOUNDED_ARTIFACT_TYPES as Yo, currentContractDigest as Yr, readActiveHostGraph as Yt, ProofObligation as Z, capabilityConsequence as Za, GuardCheckpoint as Zi, PROTOCOL_V4_NOTICE as Zn, CERTIFICATE_VERSION_V2 as Zo, AuthorityBlockKind as Zr, resolveInstalledHostLock as Zt, progressFingerprint as _, VerificationContract as _a, environmentDefaultRepositoryTarget as _i, parseGitCommandManifest as _n, explanationHasActionResidue as _o, HostCapabilityEvaluation as _r, normalizeClause as _s, sessionQueryV2 as _t, NO_PROGRESS_RECORD_PREFIX as a, HostStatus as aa, CONFIRM_LINE_PATTERN as ai, GitCommandRejected as an, ExecutionQualification as ao, ALPHA2_DSHMARKET_139_HOST_PACKAGES as ar, actionCompatible as as, createProofManifest as at, SessionApiError as b, createProjection as ba, extractOperation as bi, CanonicalArgv as bn, hasQuestionScope as bo, HostCohort as br, sha256 as bs, EvidenceFacetCoverage as bt, classifyCompletionClaim as c, NeedsReviewReason as ca, parseConfirmationMessage as ci, GitPrestateCheck as cn, LEGACY_QUALIFICATION as co, BASE_HOST_PACKAGES as cr, requestedIdentityKey as cs, proofDigest as ct, decisionBoundaryKey as d, TargetCaptureReasonCode as da, certifyCheckpoint as di, LinearCommitReadback as dn, ScopeInterpretation as do, ExecutableIdentity as dr, semanticActionFromCommand as ds, proofHostSurfacesOf as dt, GuardItem as ea, segmentAuthorityBlocks as ei, GIT_COMMAND_TEMPLATES as en, removalIsComplete as eo, deriveProjection as er, STOP_PROTOCOL_VERSION as es, SessionQuery as et, isRootPauseRequest as f, TargetCaptureStatus as fa, CaptureScope as fi, commitIndexSnapshotDigest as fn, actionVerbMatches as fo, ExecutableIdentityBinding as fr, semanticActionFromText as fs, proofOperationMatches as ft, observeAssistantOutcome as g, TargetValue as ga, classifyClause as gi, gitCommandMatchesTarget as gn, clauseIsProtected as go, HostAuditProvenance as gr, digestStrings as gs, sessionQuery as gt, latestRootInstruction as h, TargetTuple as ha, captureItem as hi, executeRevalidatedGitEffect as hn, clauseIsGoverned as ho, HOST_COHORTS as hr, canonicalizePath as hs, scopeCoverageDigest as ht, CompletionDisposition as i, GuardProjection as ia, classifyUserInteraction as ii, GitCommandParseResult as in, Executee as io, ACTIVE_HOST_LAUNCHER_VERSION as ir, StatefulAction as is, canonicalProjection as it, RecoveryOptions as j, proposeRebind as ja, qualifyBoundary as ji, ToolResultInput as jn, kindOfScope as jo, bindLiveGoalCapability as jr, FIRST_STEP_GUIDANCE as jt, DEFAULT_RECOVERY_CHAR_BUDGET as k, RebindProposal as ka, effectuateBoundary as ki, hasCurrentCertificate as kn, isRestatement as ko, LEGACY_HOST_COHORTS as kr, validateManifest as kt, decideTurnBoundary as l, PersistenceAuthorization as la, CheckpointResult as li, GitPrestateEnvelope as ln, QualificationReason as lo, DEFAULT_HOST_LOCK as lr, requestedTargetAuthorizesMutation as ls, proofDigestV2 as lt, latestAssistantText as m, TargetSourceKind as ma, captureClause as mi, createGitPrestateEnvelope as mn, clauseAsksOwnQuestion as mo, HOST_CAPABILITY_PACKAGE_GROUPS as mr, validateActionTarget as ms, requiredSubjectsOf as mt, AssistantOutcomeObservation as n, GuardItemStatus as na, UserInteractionKind as ni, GitCommandAccepted as nn, AuthorityDisposition as no, ACTIVE_HOST_COHORT_ID as nr, SUPPORTED_EVIDENCE_ADAPTERS as ns, bindProofToProjection as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, MessageCoverage as oa, ParsedConfirmation as oi, GitEffectExecution as on, GRANTED_QUALIFICATION as oo, ALPHA2_HOST_PACKAGES as or, boundedArtifactChoiceMatches as os, createProofManifestV2 as ot, isWholeTaskCompletionClaim as p, TargetSource as pa, ClauseSegment as pi, commitTreeSnapshotDigest as pn, clarifiedSpanOf as po, GOAL_HOST_PACKAGES as pr, validateActionManifest as ps, proofV2Rejection as pt, ProofKindCapability as q, ProcessOutcomeReason as qa, ExpectedTransition as qi, relevantEvidence as qn, ActionManifest as qo, parseHostVersion as qr, packageRowsFromActiveGraph as qt, CONTROL_RECORD_PREFIX as r, GuardOperation as ra, classifyTaskIntent as ri, GitCommandManifest as rn, DirectiveClass as ro, ACTIVE_HOST_COHORT_IDS as rr, SemanticAction as rs, bindProofV2ToProjection as rt, TurnStoppingDecision as s, NeedsReviewFact as sa, isFrozenV042RebindResponse as si, GitEffectRunner as sn, InterpretOptions as so, AuditedExecutable as sr, isStatefulAction as ss, proofCapabilityReport as st, supersedeItem as t, GuardItemKind as ta, TaskIntent as ti, GitAdapterAction as tn, removalIsPartiallyKnown as to, legacyRecordsNeedingReview as tr, STOP_PROTOCOL_VERSION_V2 as ts, SessionQueryV2 as tt, decideTurnStopping as u, SourceSpan as ua, RejectedBinding as ui, GitTargetIdentity as un, QualificationStatus as uo, EXPECTED_HOST_PACKAGES as ur, requestedTargetMatchesResolved as us, proofEvidenceConstraints as ut, SESSION_API_UNSUPPORTED as v, WaitAuthorization as va, extractArtifactPaths as vi, revalidateGitPrestate as vn, governedClauseRestrictsExecution as vo, HostCapabilityId as vr, sanitizeClauseText as vs, validateProofManifest as vt, RC015_HOST_PACKAGES as w, ReleaseOperation as wa, BoundaryQualification as wi, canonicalArgvFromCommand as wn, isExecutableItem as wo, HostLockEvaluation as wr, isVerifyingCapability as wt, V3SessionLike as x, PackageRow as xa, isInformationalMessage as xi, CanonicalCommandSurface as xn, interpretClause as xo, HostCohortSelection as xr, bindingSatisfies as xt, SESSION_EVENT_ENVELOPE_INVALID as y, WorkUnit as ya, extractMethod as yi, verifiedLinearCommitReadback as yn, hasOrderedCoordination as yo, HostCapabilityRequest as yr, sanitizeUrl as ys, validateProofManifestV2 as yt, PROOF_CAPABILITY_MATRIX as z, CapabilityRemedy as za, DeriveConfig as zi, DiagnosisNextAction as zn, reportingHeadGoverns as zo, HostVersionStatus as zr, ActiveProfileHostLock as zt };
+//#region src/core-v2/project.d.ts
+type Row = Record<string, any>;
+/** Pure, host-neutral core/v2 projection. The adapter owns event trust and durability. */
+declare function projectCoreV2(snapshot: Row): Row;
+//#endregion
+//#region src/core-v2/session.d.ts
+declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: GuardProjection, displayOrigins?: NonNullable<GuardProjection["coreV2RequirementOrigins"]>): Record<string, unknown> | undefined;
+//#endregion
+export { ProofHostSurface as $, CapabilityFact as $a, DeferAuthorization as $i, DiagnosisNextAction as $n, opensConditionLead as $o, selectHostCohort as $r, auditedDefaultWorkdirProvider as $t, snapshotSessionEvents as A, TargetSourceKind as Aa, captureClause as Ai, parseGitCommandManifest as An, clauseAsksOwnQuestion as Ao, HOST_CAPABILITY_PACKAGE_GROUPS as Ar, semanticActionFromCommand as As, evidenceCoverage as At, carriesCleanupCondition as B, ReleaseOperation as Ba, BoundaryQualification as Bi, parseShellCommand as Bn, introducesActionClause as Bo, HostLockEvaluation as Br, FirstStepInjection as Bt, progressFingerprint as C, NeedsReviewFact as Ca, isFrozenV042RebindResponse as Ci, GitTargetIdentity as Cn, InterpretOptions as Co, AuditedExecutable as Cr, StatefulAction as Cs, scopeCoverageDigest as Ct, SESSION_EVENT_ENVELOPE_INVALID as D, TargetCaptureReasonCode as Da, certifyCheckpoint as Di, createGitPrestateEnvelope as Dn, ScopeInterpretation as Do, ExecutableIdentity as Dr, requestedIdentityKey as Ds, validateProofManifestV2 as Dt, SESSION_API_UNSUPPORTED as E, SourceSpan as Ea, RejectedBinding as Ei, commitTreeSnapshotDigest as En, QualificationStatus as Eo, EXPECTED_HOST_PACKAGES as Er, isStatefulAction as Es, validateProofManifest as Et, CLEANUP_CONDITION_RULE_COMPACT as F, WorkUnit as Fa, extractMethod as Fi, ParsedShell as Fn, hasOrderedCoordination as Fo, HostCapabilityRequest as Fr, digestStrings as Fs, ManifestIssue as Ft, renderRecoveryPacket as G, RebindProposal as Ga, effectuateBoundary as Gi, ToolSubject as Gn, isQuestionScopeNeedingReview as Go, LEGACY_HOST_COHORTS as Gr, firstStepGuidanceV6 as Gt, closingHint as H, BoundedSource as Ha, GoalActivationState as Hi, hasCurrentCertificate as Hn, isExplanationScope as Ho, HostPlatform as Hr, LifecyclePhase as Ht, CLEANUP_CONDITION_RULE_SHORT as I, createProjection as Ia, extractOperation as Ii, ShellParseStatus as In, hasQuestionScope as Io, HostCohort as Ir, normalizeClause as Is, OperationVerbEntry as It, PROOF_KINDS as J, proposeRebindOutcome as Ja, AssetInterpretationFact as Ji, extractToolSubject as Jn, kindOfScope as Jo, evaluateExternalWaitCapability as Jr, ActiveProfileHostLock as Jt, ALPHA3_HOST_PACKAGES as K, confirmRebind as Ka, isCurrentAcceptedBoundary as Ki, evidenceFromPersistedToolResult as Kn, isRestatement as Ko, bindExecutableIdentity as Kr, lifecyclePhase as Kt, DEFAULT_RECOVERY_CHAR_BUDGET as L, PackageRow as La, isInformationalMessage as Li, canonicalArgvFromCommand as Ln, hasWorkPredicate as Lo, HostCohortSelection as Lr, sanitizeClauseText as Ls, validateManifest as Lt, RC015_HOST_PACKAGES as M, TargetValue as Ma, classifyClause as Mi, verifiedLinearCommitReadback as Mn, clauseIsProtected as Mo, HostAuditProvenance as Mr, validateActionManifest as Ms, isVerifyingCapability as Mt, RC1_HOST_PACKAGES as N, VerificationContract as Na, environmentDefaultRepositoryTarget as Ni, CanonicalArgv as Nn, explanationHasActionResidue as No, HostCapabilityEvaluation as Nr, validateActionTarget as Ns, COMMAND_SURFACE_MANIFEST as Nt, SessionApiError as O, TargetCaptureStatus as Oa, CaptureScope as Oi, executeRevalidatedGitEffect as On, actionVerbMatches as Oo, ExecutableIdentityBinding as Or, requestedTargetAuthorizesMutation as Os, EvidenceFacetCoverage as Ot, CLEANUP_CONDITION_RULE as P, WaitAuthorization as Pa, extractArtifactPaths as Pi, CanonicalCommandSurface as Pn, governedClauseRestrictsExecution as Po, HostCapabilityId as Pr, canonicalizePath as Ps, CommandSurfaceManifest as Pt, PROOF_PROTOCOL_VERSION_V2 as Q, replayRebindResult as Qa, BoundaryQualificationKind as Qi, CertificationSupport as Qn, namedActions as Qo, hostVersionFromPackages as Qr, auditedDefaultWorkdirHost as Qt, MIN_RECOVERY_CHAR_BUDGET as R, ReleaseGateDecision as Ra, segmentClauses as Ri, isRunExecutable as Rn, interpretClause as Ro, HostCohortSelectionReason as Rr, sanitizeUrl as Rs, ClaimedMessage as Rt, observeAssistantOutcome as S, MessageCoverage as Sa, ParsedConfirmation as Si, GitPrestateEnvelope as Sn, GRANTED_QUALIFICATION as So, ALPHA2_HOST_PACKAGES as Sr, SemanticAction as Ss, requiredSubjectsOf as St, v6TestPredicate as T, PersistenceAuthorization as Ta, CheckpointResult as Ti, commitIndexSnapshotDigest as Tn, QualificationReason as To, DEFAULT_HOST_LOCK as Tr, boundedArtifactChoiceMatches as Ts, sessionQueryV2 as Tt, openItems as U, ProposeOutcome as Ua, GoalBoundaryAccess as Ui, ToolCallInput as Un, isInformationalFragment as Uo, HostProfileKind as Ur, claimedBatchHasRealRootInput as Ut, cleanupConditionFor as V, ReleaseSettlement as Va, BoundaryRequest as Vi, goalCompletionDenial as Vn, isExecutableItem as Vo, HostLockStatus as Vr, FirstStepPreviewInput as Vt, recoveryDigest as W, RebindArgs as Wa, availableBoundaryQualifications as Wi, ToolResultInput as Wn, isOpenObligation as Wo, HostToolSurface as Wr, firstStepGuidance as Wt, PROOF_MANIFEST_DOMAIN_V2 as X, rebindAttemptKey as Xa, BindingActionClosure as Xi, persistedToolResultStatus as Xn, maskCodeSpans as Xo, evaluateHostLock as Xr, TargetHostGraph as Xt, PROOF_KINDS_V2 as Y, proposeRebindV042 as Ya, AssetObligation as Yi, isDeterministicCheck as Yn, legacyQuestionReadingIsInformational as Yo, evaluateHostCapability as Yr, HostProfileError as Yt, PROOF_PROTOCOL_VERSION as Z, rebindResponse as Za, BoundaryDisposition as Zi, withDurability as Zn, maskQuotedSpans as Zo, evaluateToolSurfaceCapability as Zr, activeRendererModule as Zt, decisionBoundaryKey as _, GuardItemKind as _a, TaskIntent as _i, GitCommandParseResult as _n, removalIsPartiallyKnown as _o, rootLocatorFlavor as _r, SEMANTIC_ACTIONS as _s, proofDigestV2 as _t, CONTROL_RECORD_PREFIX as a, EvidenceBinding as aa, SUPPORTED_HOST_RANGE as ai, inspectTargetHostGraph as an, DerivedProcessFacts as ao, evidenceAvailabilityReason as ar, restatedContentOf as as, ProofObligation as at, latestAssistantText as b, GuardProjection as ba, classifyUserInteraction as bi, GitEffectRunner as bn, Executee as bo, ACTIVE_HOST_LAUNCHER_VERSION as br, STOP_PROTOCOL_VERSION_V2 as bs, proofOperationMatches as bt, NO_PROGRESS_RECORD_PREFIX as c, EvidenceRole as ca, evaluateMinimumHostVersion as ci, readActiveHostGraph as cn, ProcessFactSource as co, CAPTURE_V042_NOTICE as cr, statefulActionsOfScope as cs, SessionQuery as ct, assessmentAction as d, GoalRef as da, currentContractDigest as di, verifyComposedHostLockDump as dn, actionHasCertificationPath as do, PROTOCOL_V4_NOTICE as dr, ACTION_MANIFEST_VERSION as ds, bindProofV2ToProjection as dt, DelegationRef as ea, HostVersionDecision as ei, auditedForegroundRenderers as en, CapabilityGap as eo, Repairability as er, opensWithDirective as es, ProofKind as et, assessmentOutcomePredicate as f, GuardBoundary as fa, AuthorityBlock as fi, GIT_COMMAND_MANIFEST_IDS as fn, admissibleForRemoval as fo, PROTOCOL_V5_NOTICE as fr, ActionManifest as fs, canonicalProjection as ft, decideTurnStopping as g, GuardItem as ga, segmentAuthorityBlocks as gi, GitCommandManifest as gn, removalIsComplete as go, legacyRecordsNeedingReview as gr, CERTIFICATE_VERSION_V2 as gs, proofDigest as gt, decideTurnBoundary as h, GuardIntegrity as ha, authorityCaptureCounts as hi, GitCommandAccepted as hn, partialFailureOf as ho, deriveProjection as hr, CERTIFICATE_VERSION as hs, proofCapabilityReport as ht, AssistantOutcomeObservation as i, DerivedEnvelope as ia, ParsedHostVersion as ii, injectActiveProfileHostLock as in, DependencyStatus as io, deriveItemDiagnosis as ir, reportingHeadGoverns as is, ProofManifestV2 as it, RC015_RC2_HOST_PACKAGES as j, TargetTuple as ja, captureItem as ji, revalidateGitPrestate as jn, clauseIsGoverned as jo, HOST_COHORTS as jr, semanticActionFromText as js, evidenceMatchesItem as jt, V3SessionLike as k, TargetSource as ka, ClauseSegment as ki, gitCommandMatchesTarget as kn, clarifiedSpanOf as ko, GOAL_HOST_PACKAGES as kr, requestedTargetMatchesResolved as ks, bindingSatisfies as kt, NO_PROGRESS_TURNS_BEFORE_STOP as l, ExpectedTransition as la, parseHostVersion as li, resolveActiveProfileHostLock as ln, ProcessOutcomeReason as lo, DEFAULT_DELEGATION_TOOL_NAMES as lr, verbIsNegated as ls, SessionQueryV2 as lt, currentActionBases as m, GuardEvidence as ma, AuthorityKind as mi, GitAdapterAction as mn, capabilityFactOf as mo, applyUpgradeEligibility as mr, BOUNDED_ARTIFACT_TYPES as ms, createProofManifestV2 as mt, projectCoreV2 as n, DeriveResult as na, LATEST_SUPPORTED_HOST_VERSION as ni, hostLockContextFromComposedDump as nn, DEPENDENCY_FREE_ONLY_CONDITION as no, UnifiedItemDiagnosis as nr, qualificationOfClause as ns, ProofKindV2 as nt, CompletionDisposition as o, EvidenceOutcome as oa, SUPPORTED_HOST_VERSIONS as oi, packageRowsFromActiveGraph as on, OperationAttribution as oo, itemDiagnosis as or, semanticActionOfScope as os, ProofObligationV2 as ot, classifyCompletionClaim as p, GuardCheckpoint as pa, AuthorityBlockKind as pi, GIT_COMMAND_TEMPLATES as pn, capabilityConsequence as po, PROTOCOL_V6_NOTICE as pr, ActionSpec as ps, createProofManifest as pt, PROOF_CAPABILITY_MATRIX as q, proposeRebind as qa, qualifyBoundary as qi, extractTextContent as qn, itemHoldsExecutionAuthority as qo, bindLiveGoalCapability as qr, previewFirstStepInjection as qt, supersedeItem as r, DeriveScope as ra, MIN_SUPPORTED_HOST_VERSION as ri, hostLockRowsFromComposedDump as rn, DeclaredOperationResult as ro, capabilityRemedyPhrase as rr, questionHeadsClause as rs, ProofManifest as rt, CurrentActionBasis as s, EvidenceParseStatus as sa, compareHostVersions as si, packageRowsFromPnpmLock as sn, ProcessExitStatus as so, relevantEvidence as sr, splitTextFragments as ss, ProofSurface as st, projectSessionCoreV2 as t, DeriveConfig as ta, HostVersionStatus as ti, combineHostPolicy as tn, CapabilityRemedy as to, TaskKind as tr, presentExplanationHead as ts, ProofKindCapability as tt, TurnStoppingDecision as u, ExternalOperation as ua, satisfiesSupportedHostRange as ui, resolveInstalledHostLock as un, RemovalOutcomeReport as uo, PROTOCOL_V3_NOTICE as ur, ACTION_MANIFEST as us, bindProofToProjection as ut, isRootPauseRequest as v, GuardItemStatus as va, UserInteractionKind as vi, GitCommandRejected as vn, AuthorityDisposition as vo, ACTIVE_HOST_COHORT_ID as vr, STATEFUL_ACTIONS as vs, proofEvidenceConstraints as vt, testOutcomePredicate as w, NeedsReviewReason as wa, parseConfirmationMessage as wi, LinearCommitReadback as wn, LEGACY_QUALIFICATION as wo, BASE_HOST_PACKAGES as wr, actionCompatible as ws, sessionQuery as wt, latestRootInstruction as x, HostStatus as xa, CONFIRM_LINE_PATTERN as xi, GitPrestateCheck as xn, ExecutionQualification as xo, ALPHA2_DSHMARKET_139_HOST_PACKAGES as xr, SUPPORTED_EVIDENCE_ADAPTERS as xs, proofV2Rejection as xt, isWholeTaskCompletionClaim as y, GuardOperation as ya, classifyTaskIntent as yi, GitEffectExecution as yn, DirectiveClass as yo, ACTIVE_HOST_COHORT_IDS as yr, STOP_PROTOCOL_VERSION as ys, proofHostSurfacesOf as yt, RecoveryOptions as z, ReleaseObservedIdentity as za, BoundaryEffectuation as zi, parsePwshCommand as zn, interpretMessage as zo, HostLockContext as zr, sha256 as zs, FIRST_STEP_GUIDANCE as zt };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { $ as ProofSurface, $a as partialFailureOf, $i as GuardIntegrity, $n as applyUpgradeEligibility, $o as STATEFUL_ACTIONS, $r as authorityCaptureCounts, $t as GIT_COMMAND_MANIFEST_IDS, A as MIN_RECOVERY_CHAR_BUDGET, Aa as confirmRebind, Ai as isCurrentAcceptedBoundary, An as ToolCallInput, Ao as itemHoldsExecutionAuthority, Ar as bindExecutableIdentity, At as ClaimedMessage, B as PROOF_KINDS, Ba as DEPENDENCY_FREE_ONLY_CONDITION, Bi as DeriveResult, Bn as Repairability, Bo as restatedContentOf, Br as LATEST_SUPPORTED_HOST_VERSION, Bt as HostProfileError, C as RC015_RC2_HOST_PACKAGES, Ca as ReleaseObservedIdentity, Ci as BoundaryEffectuation, Cn as ShellParseStatus, Co as introducesActionClause, Cr as HostLockContext, Ct as evidenceMatchesItem, D as CLEANUP_CONDITION_RULE_COMPACT, Da as ProposeOutcome, Di as GoalBoundaryAccess, Dn as parseShellCommand, Do as isOpenObligation, Dr as HostProfileKind, Dt as ManifestIssue, E as CLEANUP_CONDITION_RULE, Ea as BoundedSource, Ei as GoalActivationState, En as parsePwshCommand, Eo as isInformationalFragment, Er as HostPlatform, Et as CommandSurfaceManifest, F as openItems, Fa as rebindResponse, Fi as BoundaryDisposition, Fn as extractToolSubject, Fo as namedActions, Fr as evaluateToolSurfaceCapability, Ft as claimedBatchHasRealRootInput, G as ProofHostSurface, Ga as ProcessExitStatus, Gi as EvidenceParseStatus, Gn as evidenceAvailabilityReason, Go as ACTION_MANIFEST, Gr as compareHostVersions, Gt as injectActiveProfileHostLock, H as PROOF_MANIFEST_DOMAIN_V2, Ha as DependencyStatus, Hi as DerivedEnvelope, Hn as UnifiedItemDiagnosis, Ho as splitTextFragments, Hr as ParsedHostVersion, Ht as combineHostPolicy, I as recoveryDigest, Ia as replayRebindResult, Ii as BoundaryQualificationKind, In as isDeterministicCheck, Io as opensWithDirective, Ir as hostVersionFromPackages, It as firstStepGuidance, J as ProofKindV2, Ja as RemovalOutcomeReport, Ji as ExternalOperation, Jn as CAPTURE_V042_NOTICE, Jo as ActionSpec, Jr as satisfiesSupportedHostRange, Jt as packageRowsFromPnpmLock, K as ProofKind, Ka as ProcessFactSource, Ki as EvidenceRole, Kn as itemDiagnosis, Ko as ACTION_MANIFEST_VERSION, Kr as evaluateMinimumHostVersion, Kt as inspectTargetHostGraph, L as renderRecoveryPacket, La as CapabilityFact, Li as DeferAuthorization, Ln as withDurability, Lo as qualificationOfClause, Lr as selectHostCohort, Lt as lifecyclePhase, M as carriesCleanupCondition, Ma as proposeRebindOutcome, Mi as AssetInterpretationFact, Mn as ToolSubject, Mo as legacyQuestionReadingIsInformational, Mr as evaluateExternalWaitCapability, Mt as FirstStepInjection, N as cleanupConditionFor, Na as proposeRebindV042, Ni as AssetObligation, Nn as evidenceFromPersistedToolResult, No as maskCodeSpans, Nr as evaluateHostCapability, Nt as FirstStepPreviewInput, O as CLEANUP_CONDITION_RULE_SHORT, Oa as RebindArgs, Oi as availableBoundaryQualifications, On as goalCompletionDenial, Oo as isQuestionScopeNeedingReview, Or as HostToolSurface, Ot as OperationVerbEntry, P as closingHint, Pa as rebindAttemptKey, Pi as BindingActionClosure, Pn as extractTextContent, Po as maskQuotedSpans, Pr as evaluateHostLock, Pt as LifecyclePhase, Q as ProofObligationV2, Qa as capabilityFactOf, Qi as GuardEvidence, Qn as PROTOCOL_V5_NOTICE, Qo as SEMANTIC_ACTIONS, Qr as AuthorityKind, Qt as verifyComposedHostLockDump, R as ALPHA3_HOST_PACKAGES, Ra as CapabilityGap, Ri as DelegationRef, Rn as CertificationSupport, Ro as questionHeadsClause, Rr as HostVersionDecision, Rt as previewFirstStepInjection, S as snapshotSessionEvents, Sa as ReleaseGateDecision, Si as segmentClauses, Sn as ParsedShell, So as interpretMessage, Sr as HostCohortSelectionReason, St as evidenceCoverage, T as RC1_HOST_PACKAGES, Ta as ReleaseSettlement, Ti as BoundaryRequest, Tn as isRunExecutable, To as isExplanationScope, Tr as HostLockStatus, Tt as COMMAND_SURFACE_MANIFEST, U as PROOF_PROTOCOL_VERSION, Ua as DerivedProcessFacts, Ui as EvidenceBinding, Un as capabilityRemedyPhrase, Uo as statefulActionsOfScope, Ur as SUPPORTED_HOST_RANGE, Ut as hostLockContextFromComposedDump, V as PROOF_KINDS_V2, Va as DeclaredOperationResult, Vi as DeriveScope, Vn as TaskKind, Vo as semanticActionOfScope, Vr as MIN_SUPPORTED_HOST_VERSION, Vt as TargetHostGraph, W as PROOF_PROTOCOL_VERSION_V2, Wa as OperationAttribution, Wi as EvidenceOutcome, Wn as deriveItemDiagnosis, Wo as verbIsNegated, Wr as SUPPORTED_HOST_VERSIONS, Wt as hostLockRowsFromComposedDump, X as ProofManifestV2, Xa as admissibleForRemoval, Xi as GuardBoundary, Xn as PROTOCOL_V3_NOTICE, Xo as CERTIFICATE_VERSION, Xr as AuthorityBlock, Xt as resolveActiveProfileHostLock, Y as ProofManifest, Ya as actionHasCertificationPath, Yi as GoalRef, Yn as DEFAULT_DELEGATION_TOOL_NAMES, Yo as BOUNDED_ARTIFACT_TYPES, Yr as currentContractDigest, Yt as readActiveHostGraph, Z as ProofObligation, Za as capabilityConsequence, Zi as GuardCheckpoint, Zn as PROTOCOL_V4_NOTICE, Zo as CERTIFICATE_VERSION_V2, Zr as AuthorityBlockKind, Zt as resolveInstalledHostLock, _ as progressFingerprint, _a as VerificationContract, _i as environmentDefaultRepositoryTarget, _n as parseGitCommandManifest, _o as explanationHasActionResidue, _r as HostCapabilityEvaluation, _s as normalizeClause, _t as sessionQueryV2, a as NO_PROGRESS_RECORD_PREFIX, aa as HostStatus, ai as CONFIRM_LINE_PATTERN, an as GitCommandRejected, ao as ExecutionQualification, ar as ALPHA2_DSHMARKET_139_HOST_PACKAGES, as as actionCompatible, at as createProofManifest, b as SessionApiError, ba as createProjection, bi as extractOperation, bn as CanonicalArgv, bo as hasQuestionScope, br as HostCohort, bs as sha256, bt as EvidenceFacetCoverage, c as classifyCompletionClaim, ca as NeedsReviewReason, ci as parseConfirmationMessage, cn as GitPrestateCheck, co as LEGACY_QUALIFICATION, cr as BASE_HOST_PACKAGES, cs as requestedIdentityKey, ct as proofDigest, d as decisionBoundaryKey, da as TargetCaptureReasonCode, di as certifyCheckpoint, dn as LinearCommitReadback, do as ScopeInterpretation, dr as ExecutableIdentity, ds as semanticActionFromCommand, dt as proofHostSurfacesOf, ea as GuardItem, ei as segmentAuthorityBlocks, en as GIT_COMMAND_TEMPLATES, eo as removalIsComplete, er as deriveProjection, es as STOP_PROTOCOL_VERSION, et as SessionQuery, f as isRootPauseRequest, fa as TargetCaptureStatus, fi as CaptureScope, fn as commitIndexSnapshotDigest, fo as actionVerbMatches, fr as ExecutableIdentityBinding, fs as semanticActionFromText, ft as proofOperationMatches, g as observeAssistantOutcome, ga as TargetValue, gi as classifyClause, gn as gitCommandMatchesTarget, go as clauseIsProtected, gr as HostAuditProvenance, gs as digestStrings, gt as sessionQuery, h as latestRootInstruction, ha as TargetTuple, hi as captureItem, hn as executeRevalidatedGitEffect, ho as clauseIsGoverned, hr as HOST_COHORTS, hs as canonicalizePath, ht as scopeCoverageDigest, i as CompletionDisposition, ia as GuardProjection, ii as classifyUserInteraction, in as GitCommandParseResult, io as Executee, ir as ACTIVE_HOST_LAUNCHER_VERSION, is as StatefulAction, it as canonicalProjection, j as RecoveryOptions, ja as proposeRebind, ji as qualifyBoundary, jn as ToolResultInput, jo as kindOfScope, jr as bindLiveGoalCapability, jt as FIRST_STEP_GUIDANCE, k as DEFAULT_RECOVERY_CHAR_BUDGET, ka as RebindProposal, ki as effectuateBoundary, kn as hasCurrentCertificate, ko as isRestatement, kr as LEGACY_HOST_COHORTS, kt as validateManifest, l as decideTurnBoundary, la as PersistenceAuthorization, li as CheckpointResult, ln as GitPrestateEnvelope, lo as QualificationReason, lr as DEFAULT_HOST_LOCK, ls as requestedTargetAuthorizesMutation, lt as proofDigestV2, m as latestAssistantText, ma as TargetSourceKind, mi as captureClause, mn as createGitPrestateEnvelope, mo as clauseAsksOwnQuestion, mr as HOST_CAPABILITY_PACKAGE_GROUPS, ms as validateActionTarget, mt as requiredSubjectsOf, n as AssistantOutcomeObservation, na as GuardItemStatus, ni as UserInteractionKind, nn as GitCommandAccepted, no as AuthorityDisposition, nr as ACTIVE_HOST_COHORT_ID, ns as SUPPORTED_EVIDENCE_ADAPTERS, nt as bindProofToProjection, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as MessageCoverage, oi as ParsedConfirmation, on as GitEffectExecution, oo as GRANTED_QUALIFICATION, or as ALPHA2_HOST_PACKAGES, os as boundedArtifactChoiceMatches, ot as createProofManifestV2, p as isWholeTaskCompletionClaim, pa as TargetSource, pi as ClauseSegment, pn as commitTreeSnapshotDigest, po as clarifiedSpanOf, pr as GOAL_HOST_PACKAGES, ps as validateActionManifest, pt as proofV2Rejection, q as ProofKindCapability, qa as ProcessOutcomeReason, qi as ExpectedTransition, qn as relevantEvidence, qo as ActionManifest, qr as parseHostVersion, qt as packageRowsFromActiveGraph, r as CONTROL_RECORD_PREFIX, ra as GuardOperation, ri as classifyTaskIntent, rn as GitCommandManifest, ro as DirectiveClass, rr as ACTIVE_HOST_COHORT_IDS, rs as SemanticAction, rt as bindProofV2ToProjection, s as TurnStoppingDecision, sa as NeedsReviewFact, si as isFrozenV042RebindResponse, sn as GitEffectRunner, so as InterpretOptions, sr as AuditedExecutable, ss as isStatefulAction, st as proofCapabilityReport, t as supersedeItem, ta as GuardItemKind, ti as TaskIntent, tn as GitAdapterAction, to as removalIsPartiallyKnown, tr as legacyRecordsNeedingReview, ts as STOP_PROTOCOL_VERSION_V2, tt as SessionQueryV2, u as decideTurnStopping, ua as SourceSpan, ui as RejectedBinding, un as GitTargetIdentity, uo as QualificationStatus, ur as EXPECTED_HOST_PACKAGES, us as requestedTargetMatchesResolved, ut as proofEvidenceConstraints, v as SESSION_API_UNSUPPORTED, va as WaitAuthorization, vi as extractArtifactPaths, vn as revalidateGitPrestate, vo as governedClauseRestrictsExecution, vr as HostCapabilityId, vs as sanitizeClauseText, vt as validateProofManifest, w as RC015_HOST_PACKAGES, wa as ReleaseOperation, wi as BoundaryQualification, wn as canonicalArgvFromCommand, wo as isExecutableItem, wr as HostLockEvaluation, wt as isVerifyingCapability, x as V3SessionLike, xa as PackageRow, xi as isInformationalMessage, xn as CanonicalCommandSurface, xo as interpretClause, xr as HostCohortSelection, xt as bindingSatisfies, y as SESSION_EVENT_ENVELOPE_INVALID, ya as WorkUnit, yi as extractMethod, yn as verifiedLinearCommitReadback, yo as hasOrderedCoordination, yr as HostCapabilityRequest, ys as sanitizeUrl, yt as validateProofManifestV2, z as PROOF_CAPABILITY_MATRIX, za as CapabilityRemedy, zi as DeriveConfig, zn as DiagnosisNextAction, zo as reportingHeadGoverns, zr as HostVersionStatus, zt as ActiveProfileHostLock } from "./index-CfEiC4bb.js";
+import { $ as ProofHostSurface, $a as CapabilityFact, $i as DeferAuthorization, $n as DiagnosisNextAction, $o as opensConditionLead, $r as selectHostCohort, $t as auditedDefaultWorkdirProvider, A as snapshotSessionEvents, Aa as TargetSourceKind, Ai as captureClause, An as parseGitCommandManifest, Ao as clauseAsksOwnQuestion, Ar as HOST_CAPABILITY_PACKAGE_GROUPS, As as semanticActionFromCommand, At as evidenceCoverage, B as carriesCleanupCondition, Ba as ReleaseOperation, Bi as BoundaryQualification, Bn as parseShellCommand, Bo as introducesActionClause, Br as HostLockEvaluation, Bt as FirstStepInjection, C as progressFingerprint, Ca as NeedsReviewFact, Ci as isFrozenV042RebindResponse, Cn as GitTargetIdentity, Co as InterpretOptions, Cr as AuditedExecutable, Cs as StatefulAction, Ct as scopeCoverageDigest, D as SESSION_EVENT_ENVELOPE_INVALID, Da as TargetCaptureReasonCode, Di as certifyCheckpoint, Dn as createGitPrestateEnvelope, Do as ScopeInterpretation, Dr as ExecutableIdentity, Ds as requestedIdentityKey, Dt as validateProofManifestV2, E as SESSION_API_UNSUPPORTED, Ea as SourceSpan, Ei as RejectedBinding, En as commitTreeSnapshotDigest, Eo as QualificationStatus, Er as EXPECTED_HOST_PACKAGES, Es as isStatefulAction, Et as validateProofManifest, F as CLEANUP_CONDITION_RULE_COMPACT, Fa as WorkUnit, Fi as extractMethod, Fn as ParsedShell, Fo as hasOrderedCoordination, Fr as HostCapabilityRequest, Fs as digestStrings, Ft as ManifestIssue, G as renderRecoveryPacket, Ga as RebindProposal, Gi as effectuateBoundary, Gn as ToolSubject, Go as isQuestionScopeNeedingReview, Gr as LEGACY_HOST_COHORTS, Gt as firstStepGuidanceV6, H as closingHint, Ha as BoundedSource, Hi as GoalActivationState, Hn as hasCurrentCertificate, Ho as isExplanationScope, Hr as HostPlatform, Ht as LifecyclePhase, I as CLEANUP_CONDITION_RULE_SHORT, Ia as createProjection, Ii as extractOperation, In as ShellParseStatus, Io as hasQuestionScope, Ir as HostCohort, Is as normalizeClause, It as OperationVerbEntry, J as PROOF_KINDS, Ja as proposeRebindOutcome, Ji as AssetInterpretationFact, Jn as extractToolSubject, Jo as kindOfScope, Jr as evaluateExternalWaitCapability, Jt as ActiveProfileHostLock, K as ALPHA3_HOST_PACKAGES, Ka as confirmRebind, Ki as isCurrentAcceptedBoundary, Kn as evidenceFromPersistedToolResult, Ko as isRestatement, Kr as bindExecutableIdentity, Kt as lifecyclePhase, L as DEFAULT_RECOVERY_CHAR_BUDGET, La as PackageRow, Li as isInformationalMessage, Ln as canonicalArgvFromCommand, Lo as hasWorkPredicate, Lr as HostCohortSelection, Ls as sanitizeClauseText, Lt as validateManifest, M as RC015_HOST_PACKAGES, Ma as TargetValue, Mi as classifyClause, Mn as verifiedLinearCommitReadback, Mo as clauseIsProtected, Mr as HostAuditProvenance, Ms as validateActionManifest, Mt as isVerifyingCapability, N as RC1_HOST_PACKAGES, Na as VerificationContract, Ni as environmentDefaultRepositoryTarget, Nn as CanonicalArgv, No as explanationHasActionResidue, Nr as HostCapabilityEvaluation, Ns as validateActionTarget, Nt as COMMAND_SURFACE_MANIFEST, O as SessionApiError, Oa as TargetCaptureStatus, Oi as CaptureScope, On as executeRevalidatedGitEffect, Oo as actionVerbMatches, Or as ExecutableIdentityBinding, Os as requestedTargetAuthorizesMutation, Ot as EvidenceFacetCoverage, P as CLEANUP_CONDITION_RULE, Pa as WaitAuthorization, Pi as extractArtifactPaths, Pn as CanonicalCommandSurface, Po as governedClauseRestrictsExecution, Pr as HostCapabilityId, Ps as canonicalizePath, Pt as CommandSurfaceManifest, Q as PROOF_PROTOCOL_VERSION_V2, Qa as replayRebindResult, Qi as BoundaryQualificationKind, Qn as CertificationSupport, Qo as namedActions, Qr as hostVersionFromPackages, Qt as auditedDefaultWorkdirHost, R as MIN_RECOVERY_CHAR_BUDGET, Ra as ReleaseGateDecision, Ri as segmentClauses, Rn as isRunExecutable, Ro as interpretClause, Rr as HostCohortSelectionReason, Rs as sanitizeUrl, Rt as ClaimedMessage, S as observeAssistantOutcome, Sa as MessageCoverage, Si as ParsedConfirmation, Sn as GitPrestateEnvelope, So as GRANTED_QUALIFICATION, Sr as ALPHA2_HOST_PACKAGES, Ss as SemanticAction, St as requiredSubjectsOf, T as v6TestPredicate, Ta as PersistenceAuthorization, Ti as CheckpointResult, Tn as commitIndexSnapshotDigest, To as QualificationReason, Tr as DEFAULT_HOST_LOCK, Ts as boundedArtifactChoiceMatches, Tt as sessionQueryV2, U as openItems, Ua as ProposeOutcome, Ui as GoalBoundaryAccess, Un as ToolCallInput, Uo as isInformationalFragment, Ur as HostProfileKind, Ut as claimedBatchHasRealRootInput, V as cleanupConditionFor, Va as ReleaseSettlement, Vi as BoundaryRequest, Vn as goalCompletionDenial, Vo as isExecutableItem, Vr as HostLockStatus, Vt as FirstStepPreviewInput, W as recoveryDigest, Wa as RebindArgs, Wi as availableBoundaryQualifications, Wn as ToolResultInput, Wo as isOpenObligation, Wr as HostToolSurface, Wt as firstStepGuidance, X as PROOF_MANIFEST_DOMAIN_V2, Xa as rebindAttemptKey, Xi as BindingActionClosure, Xn as persistedToolResultStatus, Xo as maskCodeSpans, Xr as evaluateHostLock, Xt as TargetHostGraph, Y as PROOF_KINDS_V2, Ya as proposeRebindV042, Yi as AssetObligation, Yn as isDeterministicCheck, Yo as legacyQuestionReadingIsInformational, Yr as evaluateHostCapability, Yt as HostProfileError, Z as PROOF_PROTOCOL_VERSION, Za as rebindResponse, Zi as BoundaryDisposition, Zn as withDurability, Zo as maskQuotedSpans, Zr as evaluateToolSurfaceCapability, Zt as activeRendererModule, _ as decisionBoundaryKey, _a as GuardItemKind, _i as TaskIntent, _n as GitCommandParseResult, _o as removalIsPartiallyKnown, _r as rootLocatorFlavor, _s as SEMANTIC_ACTIONS, _t as proofDigestV2, a as CONTROL_RECORD_PREFIX, aa as EvidenceBinding, ai as SUPPORTED_HOST_RANGE, an as inspectTargetHostGraph, ao as DerivedProcessFacts, ar as evidenceAvailabilityReason, as as restatedContentOf, at as ProofObligation, b as latestAssistantText, ba as GuardProjection, bi as classifyUserInteraction, bn as GitEffectRunner, bo as Executee, br as ACTIVE_HOST_LAUNCHER_VERSION, bs as STOP_PROTOCOL_VERSION_V2, bt as proofOperationMatches, c as NO_PROGRESS_RECORD_PREFIX, ca as EvidenceRole, ci as evaluateMinimumHostVersion, cn as readActiveHostGraph, co as ProcessFactSource, cr as CAPTURE_V042_NOTICE, cs as statefulActionsOfScope, ct as SessionQuery, d as assessmentAction, da as GoalRef, di as currentContractDigest, dn as verifyComposedHostLockDump, do as actionHasCertificationPath, dr as PROTOCOL_V4_NOTICE, ds as ACTION_MANIFEST_VERSION, dt as bindProofV2ToProjection, ea as DelegationRef, ei as HostVersionDecision, en as auditedForegroundRenderers, eo as CapabilityGap, er as Repairability, es as opensWithDirective, et as ProofKind, f as assessmentOutcomePredicate, fa as GuardBoundary, fi as AuthorityBlock, fn as GIT_COMMAND_MANIFEST_IDS, fo as admissibleForRemoval, fr as PROTOCOL_V5_NOTICE, fs as ActionManifest, ft as canonicalProjection, g as decideTurnStopping, ga as GuardItem, gi as segmentAuthorityBlocks, gn as GitCommandManifest, go as removalIsComplete, gr as legacyRecordsNeedingReview, gs as CERTIFICATE_VERSION_V2, gt as proofDigest, h as decideTurnBoundary, ha as GuardIntegrity, hi as authorityCaptureCounts, hn as GitCommandAccepted, ho as partialFailureOf, hr as deriveProjection, hs as CERTIFICATE_VERSION, ht as proofCapabilityReport, i as AssistantOutcomeObservation, ia as DerivedEnvelope, ii as ParsedHostVersion, in as injectActiveProfileHostLock, io as DependencyStatus, ir as deriveItemDiagnosis, is as reportingHeadGoverns, it as ProofManifestV2, j as RC015_RC2_HOST_PACKAGES, ja as TargetTuple, ji as captureItem, jn as revalidateGitPrestate, jo as clauseIsGoverned, jr as HOST_COHORTS, js as semanticActionFromText, jt as evidenceMatchesItem, k as V3SessionLike, ka as TargetSource, ki as ClauseSegment, kn as gitCommandMatchesTarget, ko as clarifiedSpanOf, kr as GOAL_HOST_PACKAGES, ks as requestedTargetMatchesResolved, kt as bindingSatisfies, l as NO_PROGRESS_TURNS_BEFORE_STOP, la as ExpectedTransition, li as parseHostVersion, ln as resolveActiveProfileHostLock, lo as ProcessOutcomeReason, lr as DEFAULT_DELEGATION_TOOL_NAMES, ls as verbIsNegated, lt as SessionQueryV2, m as currentActionBases, ma as GuardEvidence, mi as AuthorityKind, mn as GitAdapterAction, mo as capabilityFactOf, mr as applyUpgradeEligibility, ms as BOUNDED_ARTIFACT_TYPES, mt as createProofManifestV2, n as projectCoreV2, na as DeriveResult, ni as LATEST_SUPPORTED_HOST_VERSION, nn as hostLockContextFromComposedDump, no as DEPENDENCY_FREE_ONLY_CONDITION, nr as UnifiedItemDiagnosis, ns as qualificationOfClause, nt as ProofKindV2, o as CompletionDisposition, oa as EvidenceOutcome, oi as SUPPORTED_HOST_VERSIONS, on as packageRowsFromActiveGraph, oo as OperationAttribution, or as itemDiagnosis, os as semanticActionOfScope, ot as ProofObligationV2, p as classifyCompletionClaim, pa as GuardCheckpoint, pi as AuthorityBlockKind, pn as GIT_COMMAND_TEMPLATES, po as capabilityConsequence, pr as PROTOCOL_V6_NOTICE, ps as ActionSpec, pt as createProofManifest, q as PROOF_CAPABILITY_MATRIX, qa as proposeRebind, qi as qualifyBoundary, qn as extractTextContent, qo as itemHoldsExecutionAuthority, qr as bindLiveGoalCapability, qt as previewFirstStepInjection, r as supersedeItem, ra as DeriveScope, ri as MIN_SUPPORTED_HOST_VERSION, rn as hostLockRowsFromComposedDump, ro as DeclaredOperationResult, rr as capabilityRemedyPhrase, rs as questionHeadsClause, rt as ProofManifest, s as CurrentActionBasis, sa as EvidenceParseStatus, si as compareHostVersions, sn as packageRowsFromPnpmLock, so as ProcessExitStatus, sr as relevantEvidence, ss as splitTextFragments, st as ProofSurface, t as projectSessionCoreV2, ta as DeriveConfig, ti as HostVersionStatus, tn as combineHostPolicy, to as CapabilityRemedy, tr as TaskKind, ts as presentExplanationHead, tt as ProofKindCapability, u as TurnStoppingDecision, ua as ExternalOperation, ui as satisfiesSupportedHostRange, un as resolveInstalledHostLock, uo as RemovalOutcomeReport, ur as PROTOCOL_V3_NOTICE, us as ACTION_MANIFEST, ut as bindProofToProjection, v as isRootPauseRequest, va as GuardItemStatus, vi as UserInteractionKind, vn as GitCommandRejected, vo as AuthorityDisposition, vr as ACTIVE_HOST_COHORT_ID, vs as STATEFUL_ACTIONS, vt as proofEvidenceConstraints, w as testOutcomePredicate, wa as NeedsReviewReason, wi as parseConfirmationMessage, wn as LinearCommitReadback, wo as LEGACY_QUALIFICATION, wr as BASE_HOST_PACKAGES, ws as actionCompatible, wt as sessionQuery, x as latestRootInstruction, xa as HostStatus, xi as CONFIRM_LINE_PATTERN, xn as GitPrestateCheck, xo as ExecutionQualification, xr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, xs as SUPPORTED_EVIDENCE_ADAPTERS, xt as proofV2Rejection, y as isWholeTaskCompletionClaim, ya as GuardOperation, yi as classifyTaskIntent, yn as GitEffectExecution, yo as DirectiveClass, yr as ACTIVE_HOST_COHORT_IDS, ys as STOP_PROTOCOL_VERSION, yt as proofHostSurfacesOf, z as RecoveryOptions, za as ReleaseObservedIdentity, zi as BoundaryEffectuation, zn as parsePwshCommand, zo as interpretMessage, zr as HostLockContext, zs as sha256, zt as FIRST_STEP_GUIDANCE } from "./index-D45jgmPx.js";
 import "@deepseek-ai/dsh-tools";
-import "@deepseek-ai/dsh-session";
+import { Session } from "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
@@ -40,6 +40,7 @@ interface EvidenceToolRoots {
     serviceId: string;
     preGeneration: string;
   }) => Promise<boolean>;
+  hasRestartIntent?: (resolutionCallId: string, serviceId: string, preGeneration: string) => boolean;
   /** Runtime-supplied, action-scoped host capability decision. */
   hostCapability?: (action: StatefulAction) => {
     status: "supported" | "unsupported" | "unavailable";
@@ -119,7 +120,7 @@ declare const Config: z<{
 //#endregion
 //#region src/runtime.d.ts
 declare const name = "context-guard";
-declare const inject: readonly ["sessions", "commands"];
+declare const inject: readonly ["sessions", "commands", "fs"];
 /**
 * Executor and network seams for acceptance runs. They replace ONLY the two
 * things a deterministic test cannot do for real — spawning the mutation
@@ -141,6 +142,8 @@ interface RuntimeExecutorSeams {
   * acceptance.
   */
   hostLock?: HostLockEvaluation;
+  /** Isolated acceptance override for the provider-invisible durable ledger. */
+  privateLedgerRoot?: string;
 }
 declare function apply(ctx: Context, rawConfig?: {
   activation?: unknown;
@@ -152,4 +155,19 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockProfileRoot?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, admissibleForRemoval, apply, applyUpgradeEligibility, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+//#region src/raw-replay.d.ts
+interface RawReplayInput {
+  root: string;
+  final: string;
+  cwd?: string;
+  /** Synthetic host events, in persisted order; only for local replay. */
+  events?: Array<{
+    type: string;
+    data: unknown;
+  }>;
+}
+/** Local synthetic replay using the actual Session, derivation and registered
+* Stop handler. It neither executes tools nor asserts a real model outcome. */
+declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
+//#endregion
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };