dsh-completion-guard 0.6.3 → 0.7.1

package/dist/{index-CfEiC4bb.d.ts → index-hiUtfKJa.d.ts}

@@ -167,6 +167,20 @@ declare function legacyQuestionReadingIsInformational(masked: string): boolean;
 declare function kindOfScope(directive: DirectiveClass, body?: string): GuardItemKind;
 declare function maskCodeSpans(text: string): string;
 /**
+* A present explanation speech act can have a time/scope frame before its
+* matrix verb. This only identifies the head; the v6 capture path still checks
+* the complete complement and keeps an independent action or unknown residue.
+* In particular, a quoted or reported head and a future-time frame do not
+* match, so this predicate never grants execution authority.
+*/
+declare function presentExplanationHead(text: string): {
+  end: number;
+} | undefined;
+/** A sourced clause-level condition can govern the next comma-linked matrix. */
+declare function opensConditionLead(text: string): boolean;
+/** Work named inside a governed explanation complement needs its own reading. */
+declare function hasWorkPredicate(text: string): boolean;
+/**
 * Whether a clause asks for information rather than ordering work (0.6.3 K1).
 *
 * 0.6.2 treated the mere presence of a question marker anywhere in a clause as
@@ -461,7 +475,7 @@ type ProcessExitStatus = number | "unknown";
 * Why `outcome` says what it says, so a display or a consumer never reads more
 * than the source supports.
 */
-type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
+type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
 /**
 * How far the console let the guard attribute effects to the obligation's own
 * operation. `unknown` is the honest answer for every opaque compound runner:
@@ -690,6 +704,8 @@ interface ReleaseReservation {
   operation: ReleaseOperation;
   callId: string;
   startedAtSeq: number;
+  /** Present instead of a Session sequence for provider-invisible sidecar records. */
+  ledgerPosition?: number;
   status: "in_flight";
   /**
   * The npm SRI the trusted producer read when the reservation was written.
@@ -705,6 +721,8 @@ interface ReleaseSettlement {
   operation: ReleaseOperation;
   callId: string;
   settledAtSeq: number;
+  /** Present instead of a Session sequence for provider-invisible sidecar records. */
+  ledgerPosition?: number;
   /** A trusted readback identity, or the reason no producer exists. */
   readback: {
     kind: "npm_integrity" | "git_ref" | "github_release";
@@ -861,7 +879,7 @@ type TargetCaptureStatus = "resolved" | "clarification_required";
 * a mixed request as answered, and a warning would have left exactly that
 * misreading in force.
 */
-type NeedsReviewReason = "legacy_mixed_information_scope" | "legacy_environment_default_target" | "unknown_state_version" | "legacy_missing_execution_qualification";
+type NeedsReviewReason = "legacy_mixed_information_scope" | "legacy_environment_default_target" | "unknown_state_version" | "legacy_missing_execution_qualification" | "legacy_v6_generic_action" | "legacy_v6_ordinary_certification" | "legacy_v6_text_wait";
 interface NeedsReviewFact {
   reason: NeedsReviewReason;
   /** Stable identity of the eligibility check that raised it. */
@@ -869,7 +887,7 @@ interface NeedsReviewFact {
   /** When the check was applied: this is an upgrade fact, not a birth fact. */
   recordedAtRevision: number;
 }
-type TargetCaptureReasonCode = "requested_target_package_id_missing" | "requested_target_artifact_id_missing" | "requested_target_repository_missing" | "requested_target_repository_ambiguous" | "requested_target_field_ambiguous" | "requested_target_service_id_missing" | "requested_target_registry_missing_or_invalid";
+type TargetCaptureReasonCode = "requested_target_package_id_missing" | "requested_target_artifact_id_missing" | "requested_target_repository_missing" | "requested_target_repository_invalid" | "requested_target_repository_ambiguous" | "requested_target_field_ambiguous" | "requested_target_service_id_missing" | "requested_target_registry_missing_or_invalid";
 interface GoalRef {
   id: string;
   revision: number;
@@ -986,7 +1004,13 @@ interface GuardItem {
   authority?: "root_instruction" | "root_adoption" | "legacy_authority_unclassified";
   legacyFlags?: Array<"legacy_generic_run" | "legacy_authority_unclassified">;
   /** v0.5 intent layer: inquiries keep the obligation but are not machine certifiable. */
-  taskKind?: "inquiry" | "action";
+  taskKind?: "inquiry" | "action" | "context";
+  /** V6 root-sourced read-only method, bound to the unique earlier obligation
+  * in this same root. A tool name alone is never an execution authority. */
+  observerMethod?: {
+    tools: Array<"context_guard_observe_file" | "context_guard_observe_test_readiness">;
+    targetItemIds: string[];
+  };
   /**
   * v0.5.1 interpretation layer, derived from the same source bytes as
   * {@link normalizedText} by `domain/semantics.ts`. These fields record what
@@ -1033,6 +1057,13 @@ interface GuardItem {
   */
   rawTextSha256?: string;
   spans?: SourceSpan[];
+  /** V6 only: a required child relation captured from direct coordination in
+  * the original root, never inferred from a later control or old state. */
+  rootDependency?: {
+    parentItemId: string;
+    rawTextSha256: string;
+    sourceSpan: SourceSpan;
+  };
   /**
   * 0.6.0 work-unit assignment (C04), present only for obligations captured
   * after a v5 protocol boundary in a non-delegated session. Legacy items keep
@@ -1108,6 +1139,19 @@ interface GuardEvidence {
   reasonCode?: string;
   adapterId?: string;
   adapterVersion?: string;
+  /** Current-version native readback is causally tied to a persisted host effect call. */
+  causedByCallId?: string;
+  nativeCanonicalPath?: string;
+  nativeCanonicalBase?: string;
+  nativeGitTreeOid?: string;
+  nativeGitParentOid?: string;
+  readinessForItemId?: string;
+  readinessPredicate?: string;
+  readinessManifestSha256?: string;
+  readinessEffectCallId?: string;
+  readinessSelectedPath?: string;
+  readinessScriptName?: string;
+  readinessInputSha256?: string;
   externalOperationRef?: ExternalOperation;
   /**
   * 0.6.2 D062-02: the LAYERED reading of a shell result, kept beside — never
@@ -1174,10 +1218,19 @@ interface GuardCheckpoint {
   openDigest: string;
   evidenceSha256: string;
   bindingDigest: string;
+  /** v3 DSH-native certificate extension; older certificate bytes stay intact. */
+  nativeObservations?: {
+    schema: "dsh.native-observation/v1" | "dsh.native-observation/v2";
+    digests: string[];
+  };
+  /** V6-only, root-time Session locator identity; outside historical digest_v3. */
+  rootLocatorIdentity?: string;
   bindings: EvidenceBinding[];
   goalRef?: GoalRef;
   certificationDigest: string;
   result: "certified" | "incomplete" | "unknown";
+  /** Derived persisted result watermark; excluded from historical certificate bytes. */
+  recordedAtSeq?: number;
   /**
   * 0.6.0 v2 certificate (v5 sessions only): the unit whose closure was
   * certified. Version-1 certificates keep the whole-session contract and
@@ -1256,6 +1309,8 @@ interface ExternalOperation {
 }
 interface GuardProjection {
   enabled: boolean;
+  /** Explicit root /context-guard on adoption, never inferred from installation or always observation. */
+  goalCompletionAdopted: boolean;
   epoch: number;
   contractRevision: number;
   rebindProposals: Map<string, RebindProposal>;
@@ -1275,7 +1330,29 @@ interface GuardProjection {
   * `undefined` (legacy) before it. Determines certificate version, closure
   * scope, and whether delivery/unit semantics are active.
   */
-  boundaryProtocol?: 5;
+  boundaryProtocol?: 5 | 6;
+  v6BoundarySeq?: number;
+  /** Root-time locator bases from the durable Session header, never a later tool cwd. Windows relative resolution remains unavailable. */
+  rootLocatorContexts: Map<number, {
+    base: string;
+    flavor: "posix" | "windows";
+    sha256: string;
+  }>;
+  /** V6 identity domain binds root bytes, original locator base and Session identity. */
+  rootLocatorIdentity?: string;
+  /** Shared core/v2 projection from confirmed Session sources; absent when the adapter lacks exact source coverage. */
+  coreV2?: Record<string, unknown>;
+  /** Display-only producer relation for derived core requirements (for example
+  * one observer method split into separately sourced tool predicates). It is
+  * rebuilt with coreV2 from the same Session snapshot and is never authority. */
+  coreV2RequirementOrigins?: Map<string, {
+    itemId: string;
+    action: string;
+    target: string;
+    sourceStart: number;
+    sourceEnd: number;
+  }>;
+  coreV2Reason?: "source_not_projectable" | "projection_failed";
   /** 0.6.0 responsibility tier (C06), from the effective configuration. */
   policy: "standard" | "strict" | "release";
   /** 0.6.0 C01 coverage summaries, one per captured root message (last 16). */
@@ -1327,6 +1404,9 @@ interface GuardProjection {
   }>;
   sessionRefDigest: string;
   hostLockDigest: string;
+  /** Runtime-only active renderer byte attestation. Never inferred from text
+  * or a package version, and rebound on every projection/reload. */
+  auditedForegroundRenderers?: Array<"bash" | "pwsh">;
   hostStatus: HostStatus;
   hostReasonCode?: string;
   /** Readback of the audited cohort bound into `hostLockDigest`. */
@@ -1420,6 +1500,7 @@ interface DeriveResult {
   protocolV4Present: boolean;
   /** True when the durable log carries the 0.6 first-step protocol boundary. */
   boundaryV5: boolean;
+  boundaryV6: boolean;
 }
 interface DerivedEnvelope {
   seq: number;
@@ -1789,6 +1870,10 @@ interface HostCapabilityEvaluation {
 interface HostLockEvaluation {
   status: HostLockStatus;
   digest: string;
+  /** Read-only byte attestation of the active foreground shell renderer and
+  * its shared terminal decoder. Set only by production active-graph readback;
+  * the package version/SRI graph alone does not establish renderer behavior. */
+  auditedForegroundRenderers?: Array<"bash" | "pwsh">;
   goalAvailable: boolean;
   reasonCode?: "host_lock_migration_required" | "host_lock_installed_graph_drift" | "host_lock_missing" | "host_lock_version_mismatch" | "host_lock_version_below_minimum" | "host_lock_version_unparseable" | "host_lock_integrity_mismatch" | "host_lock_unknown_package" | "host_lock_duplicate_package" | "host_lock_goal_graph_incomplete" | "host_lock_goal_capability_mismatch" | "host_lock_cohort_mixed_graph" | "host_lock_cohort_unbound_identity" | "host_lock_cohort_platform_not_audited";
   packages: PackageRow[];
@@ -1934,6 +2019,7 @@ declare const PROTOCOL_V4_NOTICE = "Context Guard protocol boundary: v4.0.0";
 * fail direction on rollback is closed, never a misread.
 */
 declare const PROTOCOL_V5_NOTICE = "Context Guard protocol boundary: v5.0.0";
+declare const PROTOCOL_V6_NOTICE = "Context Guard protocol boundary: v6.0.0";
 /**
 * The pure upgrade-eligibility predicate: the records in the current closure
 * scope that may NOT be inherited as a current pass, with the reason that
@@ -1961,6 +2047,7 @@ declare function applyUpgradeEligibility(projection: GuardProjection): void;
 * `tool/result`, `tool/ptc-dispatch-start`, `tool/ptc-dispatch`, and
 * `compaction/summary`.
 */
+declare function rootLocatorFlavor(cwd: string): "posix" | "windows" | undefined;
 declare function deriveProjection(sourceEvents: readonly DerivedEnvelope[], config: DeriveConfig, scope: DeriveScope, durableConfirmed: boolean, hostLock?: HostLockEvaluation): DeriveResult;
 //#endregion
 //#region src/domain/reason-class.d.ts
@@ -2058,10 +2145,20 @@ interface ToolCallInput {
 interface ToolResultInput {
   seq: number;
   error?: unknown;
+  /** A persisted return exists but its tool-result identity or status is not trustworthy. */
+  untrusted?: boolean;
   meta?: unknown;
   textContent: string;
 }
 declare function extractTextContent(content: readonly unknown[]): string;
+/**
+* DSH persists the host return flag on a nested `tool-result` block. The
+* surrounding message or event need not carry an `error` field (approval and
+* sandbox denials are examples). Never let a renderer's missing exit marker
+* override that structured return, or accept an ambiguous nested return as
+* a clean result for another call.
+*/
+declare function persistedToolResultStatus(data: unknown, callId: string, kind?: "tool/result" | "tool/ptc-dispatch", matchedStart?: boolean): "clean" | "failure" | "unknown";
 interface ToolOperation {
   op: GuardOperation;
   path?: string;
@@ -2084,6 +2181,18 @@ interface ToolSubject {
   reasonCode?: string;
   adapterId?: string;
   adapterVersion?: string;
+  causedByCallId?: string;
+  nativeCanonicalPath?: string;
+  nativeCanonicalBase?: string;
+  nativeGitTreeOid?: string;
+  nativeGitParentOid?: string;
+  readinessForItemId?: string;
+  readinessPredicate?: string;
+  readinessManifestSha256?: string;
+  readinessEffectCallId?: string;
+  readinessSelectedPath?: string;
+  readinessScriptName?: string;
+  readinessInputSha256?: string;
   /** 0.6.2 D062-02: the layered shell reading, present only for shell tools. */
   processFacts?: DerivedProcessFacts;
   externalOperationRef?: ExternalOperation;
@@ -2093,7 +2202,7 @@ declare function evidenceFromPersistedToolResult(call: ToolCallInput, result: To
 declare function withDurability(evidence: GuardEvidence, confirmed: boolean): GuardEvidence;
 //#endregion
 //#region src/domain/goal-gate.d.ts
-declare function hasCurrentCertificate(projection: GuardProjection): boolean;
+declare function hasCurrentCertificate(projection: GuardProjection, historicalReplay?: boolean): boolean;
 /**
 * Denies `update_goal(action=complete)` while the guard is enabled and no
 * current completion certificate exists. The gate itself has no bypass; a
@@ -2322,6 +2431,22 @@ interface ActiveProfileHostLock {
 * Used by target preflight before a legacy profile can be migrated.
 */
 declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
+declare function activeRendererModule(nodeModulesRoot: string, name: string): {
+  bytes: string;
+  path: string;
+} | undefined;
+/** Verify active, reachable producer bytes without reading credentials or
+* accepting historical package-map entries. Missing/ambiguous paths fail
+* closed for the ordinary markerless-test shortcut. */
+declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string): Array<"bash" | "pwsh">;
+/** Exact active implementation route for call-time omitted-workdir evidence. */
+declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh"): boolean;
+/**
+* The active graph alone does not prove which shell service this Agent uses.
+* Match the scoped service's exact constructor to the audited active module,
+* rejecting another provider with the same public service interface/name.
+*/
+declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown): Promise<boolean>;
 interface TargetHostGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -2388,6 +2513,8 @@ interface FirstStepPreviewInput {
   enabled: boolean;
   /** The durable log already contains a v5 (0.6) Guard boundary. */
   boundaryV5Present?: boolean;
+  boundaryV6Present?: boolean;
+  targetProtocol?: 5 | 6;
   /** The durable log already contains a v4 (or newer) Guard boundary. */
   boundaryPresent: boolean;
   /** The session is a delegated/subagent session, never a root conversation. */
@@ -2419,6 +2546,7 @@ declare function previewFirstStepInjection(input: FirstStepPreviewInput, claimed
 */
 declare function firstStepGuidance(policy?: "standard" | "strict" | "release"): string;
 declare const FIRST_STEP_GUIDANCE: string;
+declare function firstStepGuidanceV6(policy?: "standard" | "strict" | "release"): string;
 /**
 * Lifecycle phase derived from durable facts. `enabled` is the log-derived
 * enablement (`always`, or the explicit `on`/`off` command sequence), and
@@ -2720,10 +2848,55 @@ declare function carriesCleanupCondition(gap: CapabilityGap): boolean;
 declare function closingHint(projection: GuardProjection, item: GuardItem, evidenceIds?: string[]): string;
 declare function openItems(projection: GuardProjection): GuardItem[];
 /**
+* Why recovery is armed, recorded where the arm happens so the injected title
+* can name the real trigger instead of guessing one. An arm without an
+* auditable cause renders a neutral title, never a fabricated compaction or
+* resume (DSH-RF-02).
+*/
+type RecoveryCause = "compaction" | "resume" | "guard_reenabled" | "contract_updated" | "checkpoint_followup" | "boundary_update" | "explicit";
+/** The accurate injection title for one armed recovery (DSH-RF-02). */
+declare function recoveryTitle(causes: readonly string[]): string;
+/**
+* The v6 ordinary completion rule. The legacy rule states the pre-v6 protocol's
+* checkpoint gate; repeating it in the ordinary lane taught models that a
+* Guard checkpoint is a prerequisite for ordinary completion (DSH-RF-01), so
+* this lane states its own rule: completion is READ from persisted host facts,
+* uncertified work is still delivered honestly, and no Guard step authorizes
+* ordinary execution.
+*/
+declare const V6_ORDINARY_COMPLETION_RULE = "Ordinary completion is read from persisted host tool results and independent readback; uncertified work is delivered honestly and stays uncertified. No Guard checkpoint, binding, or target re-authorization is a prerequisite for ordinary work.";
+/** The same rule at a medium budget. */
+declare const V6_ORDINARY_COMPLETION_RULE_SHORT = "Ordinary completion is read from persisted host results; uncertified work is delivered honestly and needs no Guard checkpoint or re-authorization.";
+/** The same rule at emergency budget — still never a checkpoint prerequisite. */
+declare const V6_ORDINARY_COMPLETION_RULE_COMPACT = "Ordinary completion is read from persisted host results; no Guard checkpoint or re-authorization is required.";
+/**
+* The durable root authorization boundaries applicable to the CURRENT work:
+* pending prohibitions and root waits whose release is not verified, scoped to
+* the current unit's lineage. Historical sibling units and superseded records
+* stay auditable but never re-enter current guidance (RF08, review R2F2). One
+* selector, shared by both renderer lanes and the recovery digest, so no
+* surface can disagree about which boundaries are in force. Prohibitions are
+* selected from the DURABLE RECORD's kind, never from the core predicate: a
+* prohibition the core cannot verify (legacy_review) is still a prohibition
+* and still renders as DO NOT (coverage audit H1).
+*/
+declare function v6CurrentRootBoundaries(projection: GuardProjection): {
+  prohibitions: GuardItem[];
+  waits: GuardItem[];
+};
+/**
 * Content identity of a rendered recovery packet, bound to the contract
 * revision and epoch it was rendered from. The runtime compares digests before
 * re-injecting, so a repeatedly re-armed recovery with unchanged content is
 * injected once instead of looping (v0.2.1).
+*
+* In the default v6 ordinary lane the identity binds to the DISPLAYED current
+* feedback (status, predicates, open requirements, wait conditions) instead of
+* the legacy pending/evidence inventory: unrelated historical evidence changes
+* no predicate, so it must not re-arm the reminder, while a new requirement, a
+* failed result, a released wait, or an integrity change must (DSH-RF-01).
+* The core waterline (`as_of`) is deliberately excluded — it moves on every
+* event, which is exactly the noise the old digest turned into reminders.
 */
 declare function recoveryDigest(packet: string, projection: GuardProjection): string;
 declare function renderRecoveryPacket(projection: GuardProjection, options?: RecoveryOptions): string;
@@ -2861,6 +3034,25 @@ interface AssistantOutcomeObservation {
   kind: "completion_claim" | "user_wait_claim" | "external_wait_claim" | "report";
   reasonCode: string;
 }
+interface CurrentActionBasis {
+  itemId: string;
+  action: string;
+  sourceMessageId: string;
+  unmetPredicate: string;
+  owner: "assistant";
+  readiness: "ready";
+  asOf: number;
+}
+/** A concrete, current root-owned action, with host capability and no pending
+* condition. Historical generic text and old qualifications are not upgraded. */
+declare function testOutcomePredicate(text: string): string;
+/** v6 root outcome intent: running and reporting a named test is distinct
+* from an explicit request to make it pass. A failed run can finish the first
+* duty, while the second remains unmet; neither reading grants repair scope. */
+declare function v6TestPredicate(text: string): "test_run_completed" | "test_passed";
+declare function assessmentOutcomePredicate(text: string): string;
+declare function assessmentAction(text: string): string;
+declare function currentActionBases(projection: GuardProjection, enforceCore?: boolean): CurrentActionBasis[];
 /** Assistant prose is retained only as a bounded diagnostic observation. */
 declare function observeAssistantOutcome(text: string): AssistantOutcomeObservation;
 /**
@@ -2870,7 +3062,7 @@ declare function observeAssistantOutcome(text: string): AssistantOutcomeObservat
 * one fallback correction; subsequent attempts safe-yield. An active, armed
 * Goal remains exclusively owned by the host Goal Round Driver.
 */
-declare function decideTurnBoundary(projection: GuardProjection): TurnStoppingDecision;
+declare function decideTurnBoundary(projection: GuardProjection, latestRootText?: string): TurnStoppingDecision;
 declare function decideTurnStopping(projection: GuardProjection, _assistantText: string, _turn: number, _maxAttempts: number): TurnStoppingDecision;
 /**
 * Whether the last trusted ROOT instruction asked to pause.
@@ -2901,4 +3093,12 @@ declare function latestAssistantText(events: readonly {
 //#region src/domain/supersession.d.ts
 declare function supersedeItem(items: Map<string, GuardItem>, oldId: string, replacement: GuardItem): boolean;
 //#endregion
-export { ProofSurface as $, partialFailureOf as $a, GuardIntegrity as $i, applyUpgradeEligibility as $n, STATEFUL_ACTIONS as $o, authorityCaptureCounts as $r, GIT_COMMAND_MANIFEST_IDS as $t, MIN_RECOVERY_CHAR_BUDGET as A, confirmRebind as Aa, isCurrentAcceptedBoundary as Ai, ToolCallInput as An, itemHoldsExecutionAuthority as Ao, bindExecutableIdentity as Ar, ClaimedMessage as At, PROOF_KINDS as B, DEPENDENCY_FREE_ONLY_CONDITION as Ba, DeriveResult as Bi, Repairability as Bn, restatedContentOf as Bo, LATEST_SUPPORTED_HOST_VERSION as Br, HostProfileError as Bt, RC015_RC2_HOST_PACKAGES as C, ReleaseObservedIdentity as Ca, BoundaryEffectuation as Ci, ShellParseStatus as Cn, introducesActionClause as Co, HostLockContext as Cr, evidenceMatchesItem as Ct, CLEANUP_CONDITION_RULE_COMPACT as D, ProposeOutcome as Da, GoalBoundaryAccess as Di, parseShellCommand as Dn, isOpenObligation as Do, HostProfileKind as Dr, ManifestIssue as Dt, CLEANUP_CONDITION_RULE as E, BoundedSource as Ea, GoalActivationState as Ei, parsePwshCommand as En, isInformationalFragment as Eo, HostPlatform as Er, CommandSurfaceManifest as Et, openItems as F, rebindResponse as Fa, BoundaryDisposition as Fi, extractToolSubject as Fn, namedActions as Fo, evaluateToolSurfaceCapability as Fr, claimedBatchHasRealRootInput as Ft, ProofHostSurface as G, ProcessExitStatus as Ga, EvidenceParseStatus as Gi, evidenceAvailabilityReason as Gn, ACTION_MANIFEST as Go, compareHostVersions as Gr, injectActiveProfileHostLock as Gt, PROOF_MANIFEST_DOMAIN_V2 as H, DependencyStatus as Ha, DerivedEnvelope as Hi, UnifiedItemDiagnosis as Hn, splitTextFragments as Ho, ParsedHostVersion as Hr, combineHostPolicy as Ht, recoveryDigest as I, replayRebindResult as Ia, BoundaryQualificationKind as Ii, isDeterministicCheck as In, opensWithDirective as Io, hostVersionFromPackages as Ir, firstStepGuidance as It, ProofKindV2 as J, RemovalOutcomeReport as Ja, ExternalOperation as Ji, CAPTURE_V042_NOTICE as Jn, ActionSpec as Jo, satisfiesSupportedHostRange as Jr, packageRowsFromPnpmLock as Jt, ProofKind as K, ProcessFactSource as Ka, EvidenceRole as Ki, itemDiagnosis as Kn, ACTION_MANIFEST_VERSION as Ko, evaluateMinimumHostVersion as Kr, inspectTargetHostGraph as Kt, renderRecoveryPacket as L, CapabilityFact as La, DeferAuthorization as Li, withDurability as Ln, qualificationOfClause as Lo, selectHostCohort as Lr, lifecyclePhase as Lt, carriesCleanupCondition as M, proposeRebindOutcome as Ma, AssetInterpretationFact as Mi, ToolSubject as Mn, legacyQuestionReadingIsInformational as Mo, evaluateExternalWaitCapability as Mr, FirstStepInjection as Mt, cleanupConditionFor as N, proposeRebindV042 as Na, AssetObligation as Ni, evidenceFromPersistedToolResult as Nn, maskCodeSpans as No, evaluateHostCapability as Nr, FirstStepPreviewInput as Nt, CLEANUP_CONDITION_RULE_SHORT as O, RebindArgs as Oa, availableBoundaryQualifications as Oi, goalCompletionDenial as On, isQuestionScopeNeedingReview as Oo, HostToolSurface as Or, OperationVerbEntry as Ot, closingHint as P, rebindAttemptKey as Pa, BindingActionClosure as Pi, extractTextContent as Pn, maskQuotedSpans as Po, evaluateHostLock as Pr, LifecyclePhase as Pt, ProofObligationV2 as Q, capabilityFactOf as Qa, GuardEvidence as Qi, PROTOCOL_V5_NOTICE as Qn, SEMANTIC_ACTIONS as Qo, AuthorityKind as Qr, verifyComposedHostLockDump as Qt, ALPHA3_HOST_PACKAGES as R, CapabilityGap as Ra, DelegationRef as Ri, CertificationSupport as Rn, questionHeadsClause as Ro, HostVersionDecision as Rr, previewFirstStepInjection as Rt, snapshotSessionEvents as S, ReleaseGateDecision as Sa, segmentClauses as Si, ParsedShell as Sn, interpretMessage as So, HostCohortSelectionReason as Sr, evidenceCoverage as St, RC1_HOST_PACKAGES as T, ReleaseSettlement as Ta, BoundaryRequest as Ti, isRunExecutable as Tn, isExplanationScope as To, HostLockStatus as Tr, COMMAND_SURFACE_MANIFEST as Tt, PROOF_PROTOCOL_VERSION as U, DerivedProcessFacts as Ua, EvidenceBinding as Ui, capabilityRemedyPhrase as Un, statefulActionsOfScope as Uo, SUPPORTED_HOST_RANGE as Ur, hostLockContextFromComposedDump as Ut, PROOF_KINDS_V2 as V, DeclaredOperationResult as Va, DeriveScope as Vi, TaskKind as Vn, semanticActionOfScope as Vo, MIN_SUPPORTED_HOST_VERSION as Vr, TargetHostGraph as Vt, PROOF_PROTOCOL_VERSION_V2 as W, OperationAttribution as Wa, EvidenceOutcome as Wi, deriveItemDiagnosis as Wn, verbIsNegated as Wo, SUPPORTED_HOST_VERSIONS as Wr, hostLockRowsFromComposedDump as Wt, ProofManifestV2 as X, admissibleForRemoval as Xa, GuardBoundary as Xi, PROTOCOL_V3_NOTICE as Xn, CERTIFICATE_VERSION as Xo, AuthorityBlock as Xr, resolveActiveProfileHostLock as Xt, ProofManifest as Y, actionHasCertificationPath as Ya, GoalRef as Yi, DEFAULT_DELEGATION_TOOL_NAMES as Yn, BOUNDED_ARTIFACT_TYPES as Yo, currentContractDigest as Yr, readActiveHostGraph as Yt, ProofObligation as Z, capabilityConsequence as Za, GuardCheckpoint as Zi, PROTOCOL_V4_NOTICE as Zn, CERTIFICATE_VERSION_V2 as Zo, AuthorityBlockKind as Zr, resolveInstalledHostLock as Zt, progressFingerprint as _, VerificationContract as _a, environmentDefaultRepositoryTarget as _i, parseGitCommandManifest as _n, explanationHasActionResidue as _o, HostCapabilityEvaluation as _r, normalizeClause as _s, sessionQueryV2 as _t, NO_PROGRESS_RECORD_PREFIX as a, HostStatus as aa, CONFIRM_LINE_PATTERN as ai, GitCommandRejected as an, ExecutionQualification as ao, ALPHA2_DSHMARKET_139_HOST_PACKAGES as ar, actionCompatible as as, createProofManifest as at, SessionApiError as b, createProjection as ba, extractOperation as bi, CanonicalArgv as bn, hasQuestionScope as bo, HostCohort as br, sha256 as bs, EvidenceFacetCoverage as bt, classifyCompletionClaim as c, NeedsReviewReason as ca, parseConfirmationMessage as ci, GitPrestateCheck as cn, LEGACY_QUALIFICATION as co, BASE_HOST_PACKAGES as cr, requestedIdentityKey as cs, proofDigest as ct, decisionBoundaryKey as d, TargetCaptureReasonCode as da, certifyCheckpoint as di, LinearCommitReadback as dn, ScopeInterpretation as do, ExecutableIdentity as dr, semanticActionFromCommand as ds, proofHostSurfacesOf as dt, GuardItem as ea, segmentAuthorityBlocks as ei, GIT_COMMAND_TEMPLATES as en, removalIsComplete as eo, deriveProjection as er, STOP_PROTOCOL_VERSION as es, SessionQuery as et, isRootPauseRequest as f, TargetCaptureStatus as fa, CaptureScope as fi, commitIndexSnapshotDigest as fn, actionVerbMatches as fo, ExecutableIdentityBinding as fr, semanticActionFromText as fs, proofOperationMatches as ft, observeAssistantOutcome as g, TargetValue as ga, classifyClause as gi, gitCommandMatchesTarget as gn, clauseIsProtected as go, HostAuditProvenance as gr, digestStrings as gs, sessionQuery as gt, latestRootInstruction as h, TargetTuple as ha, captureItem as hi, executeRevalidatedGitEffect as hn, clauseIsGoverned as ho, HOST_COHORTS as hr, canonicalizePath as hs, scopeCoverageDigest as ht, CompletionDisposition as i, GuardProjection as ia, classifyUserInteraction as ii, GitCommandParseResult as in, Executee as io, ACTIVE_HOST_LAUNCHER_VERSION as ir, StatefulAction as is, canonicalProjection as it, RecoveryOptions as j, proposeRebind as ja, qualifyBoundary as ji, ToolResultInput as jn, kindOfScope as jo, bindLiveGoalCapability as jr, FIRST_STEP_GUIDANCE as jt, DEFAULT_RECOVERY_CHAR_BUDGET as k, RebindProposal as ka, effectuateBoundary as ki, hasCurrentCertificate as kn, isRestatement as ko, LEGACY_HOST_COHORTS as kr, validateManifest as kt, decideTurnBoundary as l, PersistenceAuthorization as la, CheckpointResult as li, GitPrestateEnvelope as ln, QualificationReason as lo, DEFAULT_HOST_LOCK as lr, requestedTargetAuthorizesMutation as ls, proofDigestV2 as lt, latestAssistantText as m, TargetSourceKind as ma, captureClause as mi, createGitPrestateEnvelope as mn, clauseAsksOwnQuestion as mo, HOST_CAPABILITY_PACKAGE_GROUPS as mr, validateActionTarget as ms, requiredSubjectsOf as mt, AssistantOutcomeObservation as n, GuardItemStatus as na, UserInteractionKind as ni, GitCommandAccepted as nn, AuthorityDisposition as no, ACTIVE_HOST_COHORT_ID as nr, SUPPORTED_EVIDENCE_ADAPTERS as ns, bindProofToProjection as nt, NO_PROGRESS_TURNS_BEFORE_STOP as o, MessageCoverage as oa, ParsedConfirmation as oi, GitEffectExecution as on, GRANTED_QUALIFICATION as oo, ALPHA2_HOST_PACKAGES as or, boundedArtifactChoiceMatches as os, createProofManifestV2 as ot, isWholeTaskCompletionClaim as p, TargetSource as pa, ClauseSegment as pi, commitTreeSnapshotDigest as pn, clarifiedSpanOf as po, GOAL_HOST_PACKAGES as pr, validateActionManifest as ps, proofV2Rejection as pt, ProofKindCapability as q, ProcessOutcomeReason as qa, ExpectedTransition as qi, relevantEvidence as qn, ActionManifest as qo, parseHostVersion as qr, packageRowsFromActiveGraph as qt, CONTROL_RECORD_PREFIX as r, GuardOperation as ra, classifyTaskIntent as ri, GitCommandManifest as rn, DirectiveClass as ro, ACTIVE_HOST_COHORT_IDS as rr, SemanticAction as rs, bindProofV2ToProjection as rt, TurnStoppingDecision as s, NeedsReviewFact as sa, isFrozenV042RebindResponse as si, GitEffectRunner as sn, InterpretOptions as so, AuditedExecutable as sr, isStatefulAction as ss, proofCapabilityReport as st, supersedeItem as t, GuardItemKind as ta, TaskIntent as ti, GitAdapterAction as tn, removalIsPartiallyKnown as to, legacyRecordsNeedingReview as tr, STOP_PROTOCOL_VERSION_V2 as ts, SessionQueryV2 as tt, decideTurnStopping as u, SourceSpan as ua, RejectedBinding as ui, GitTargetIdentity as un, QualificationStatus as uo, EXPECTED_HOST_PACKAGES as ur, requestedTargetMatchesResolved as us, proofEvidenceConstraints as ut, SESSION_API_UNSUPPORTED as v, WaitAuthorization as va, extractArtifactPaths as vi, revalidateGitPrestate as vn, governedClauseRestrictsExecution as vo, HostCapabilityId as vr, sanitizeClauseText as vs, validateProofManifest as vt, RC015_HOST_PACKAGES as w, ReleaseOperation as wa, BoundaryQualification as wi, canonicalArgvFromCommand as wn, isExecutableItem as wo, HostLockEvaluation as wr, isVerifyingCapability as wt, V3SessionLike as x, PackageRow as xa, isInformationalMessage as xi, CanonicalCommandSurface as xn, interpretClause as xo, HostCohortSelection as xr, bindingSatisfies as xt, SESSION_EVENT_ENVELOPE_INVALID as y, WorkUnit as ya, extractMethod as yi, verifiedLinearCommitReadback as yn, hasOrderedCoordination as yo, HostCapabilityRequest as yr, sanitizeUrl as ys, validateProofManifestV2 as yt, PROOF_CAPABILITY_MATRIX as z, CapabilityRemedy as za, DeriveConfig as zi, DiagnosisNextAction as zn, reportingHeadGoverns as zo, HostVersionStatus as zr, ActiveProfileHostLock as zt };
+//#region src/core-v2/project.d.ts
+type Row = Record<string, any>;
+/** Pure, host-neutral core/v2 projection. The adapter owns event trust and durability. */
+declare function projectCoreV2(snapshot: Row): Row;
+//#endregion
+//#region src/core-v2/session.d.ts
+declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: GuardProjection, displayOrigins?: NonNullable<GuardProjection["coreV2RequirementOrigins"]>): Record<string, unknown> | undefined;
+//#endregion
+export { PROOF_CAPABILITY_MATRIX as $, proposeRebind as $a, qualifyBoundary as $i, extractTextContent as $n, itemHoldsExecutionAuthority as $o, bindLiveGoalCapability as $r, previewFirstStepInjection as $t, snapshotSessionEvents as A, NeedsReviewReason as Aa, parseConfirmationMessage as Ai, LinearCommitReadback as An, LEGACY_QUALIFICATION as Ao, BASE_HOST_PACKAGES as Ar, actionCompatible as As, sessionQuery as At, RecoveryOptions as B, WaitAuthorization as Ba, extractArtifactPaths as Bi, CanonicalCommandSurface as Bn, governedClauseRestrictsExecution as Bo, HostCapabilityId as Br, canonicalizePath as Bs, CommandSurfaceManifest as Bt, progressFingerprint as C, GuardItemKind as Ca, TaskIntent as Ci, GitCommandParseResult as Cn, removalIsPartiallyKnown as Co, rootLocatorFlavor as Cr, SEMANTIC_ACTIONS as Cs, proofDigestV2 as Ct, SESSION_EVENT_ENVELOPE_INVALID as D, HostStatus as Da, CONFIRM_LINE_PATTERN as Di, GitPrestateCheck as Dn, ExecutionQualification as Do, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Dr, SUPPORTED_EVIDENCE_ADAPTERS as Ds, proofV2Rejection as Dt, SESSION_API_UNSUPPORTED as E, GuardProjection as Ea, classifyUserInteraction as Ei, GitEffectRunner as En, Executee as Eo, ACTIVE_HOST_LAUNCHER_VERSION as Er, STOP_PROTOCOL_VERSION_V2 as Es, proofOperationMatches as Et, CLEANUP_CONDITION_RULE_COMPACT as F, TargetSource as Fa, ClauseSegment as Fi, gitCommandMatchesTarget as Fn, clarifiedSpanOf as Fo, GOAL_HOST_PACKAGES as Fr, requestedTargetMatchesResolved as Fs, bindingSatisfies as Ft, cleanupConditionFor as G, ReleaseObservedIdentity as Ga, BoundaryEffectuation as Gi, parsePwshCommand as Gn, interpretMessage as Go, HostLockContext as Gr, sha256 as Gs, FIRST_STEP_GUIDANCE as Gt, V6_ORDINARY_COMPLETION_RULE_COMPACT as H, createProjection as Ha, extractOperation as Hi, ShellParseStatus as Hn, hasQuestionScope as Ho, HostCohort as Hr, normalizeClause as Hs, OperationVerbEntry as Ht, CLEANUP_CONDITION_RULE_SHORT as I, TargetSourceKind as Ia, captureClause as Ii, parseGitCommandManifest as In, clauseAsksOwnQuestion as Io, HOST_CAPABILITY_PACKAGE_GROUPS as Ir, semanticActionFromCommand as Is, evidenceCoverage as It, recoveryDigest as J, BoundedSource as Ja, GoalActivationState as Ji, hasCurrentCertificate as Jn, isExplanationScope as Jo, HostPlatform as Jr, LifecyclePhase as Jt, closingHint as K, ReleaseOperation as Ka, BoundaryQualification as Ki, parseShellCommand as Kn, introducesActionClause as Ko, HostLockEvaluation as Kr, FirstStepInjection as Kt, DEFAULT_RECOVERY_CHAR_BUDGET as L, TargetTuple as La, captureItem as Li, revalidateGitPrestate as Ln, clauseIsGoverned as Lo, HOST_COHORTS as Lr, semanticActionFromText as Ls, evidenceMatchesItem as Lt, RC015_HOST_PACKAGES as M, SourceSpan as Ma, RejectedBinding as Mi, commitTreeSnapshotDigest as Mn, QualificationStatus as Mo, EXPECTED_HOST_PACKAGES as Mr, isStatefulAction as Ms, validateProofManifest as Mt, RC1_HOST_PACKAGES as N, TargetCaptureReasonCode as Na, certifyCheckpoint as Ni, createGitPrestateEnvelope as Nn, ScopeInterpretation as No, ExecutableIdentity as Nr, requestedIdentityKey as Ns, validateProofManifestV2 as Nt, SessionApiError as O, MessageCoverage as Oa, ParsedConfirmation as Oi, GitPrestateEnvelope as On, GRANTED_QUALIFICATION as Oo, ALPHA2_HOST_PACKAGES as Or, SemanticAction as Os, requiredSubjectsOf as Ot, CLEANUP_CONDITION_RULE as P, TargetCaptureStatus as Pa, CaptureScope as Pi, executeRevalidatedGitEffect as Pn, actionVerbMatches as Po, ExecutableIdentityBinding as Pr, requestedTargetAuthorizesMutation as Ps, EvidenceFacetCoverage as Pt, ALPHA3_HOST_PACKAGES as Q, confirmRebind as Qa, isCurrentAcceptedBoundary as Qi, evidenceFromPersistedToolResult as Qn, isRestatement as Qo, bindExecutableIdentity as Qr, lifecyclePhase as Qt, MIN_RECOVERY_CHAR_BUDGET as R, TargetValue as Ra, classifyClause as Ri, verifiedLinearCommitReadback as Rn, clauseIsProtected as Ro, HostAuditProvenance as Rr, validateActionManifest as Rs, isVerifyingCapability as Rt, observeAssistantOutcome as S, GuardItem as Sa, segmentAuthorityBlocks as Si, GitCommandManifest as Sn, removalIsComplete as So, legacyRecordsNeedingReview as Sr, CERTIFICATE_VERSION_V2 as Ss, proofDigest as St, v6TestPredicate as T, GuardOperation as Ta, classifyTaskIntent as Ti, GitEffectExecution as Tn, DirectiveClass as To, ACTIVE_HOST_COHORT_IDS as Tr, STOP_PROTOCOL_VERSION as Ts, proofHostSurfacesOf as Tt, V6_ORDINARY_COMPLETION_RULE_SHORT as U, PackageRow as Ua, isInformationalMessage as Ui, canonicalArgvFromCommand as Un, hasWorkPredicate as Uo, HostCohortSelection as Ur, sanitizeClauseText as Us, validateManifest as Ut, V6_ORDINARY_COMPLETION_RULE as V, WorkUnit as Va, extractMethod as Vi, ParsedShell as Vn, hasOrderedCoordination as Vo, HostCapabilityRequest as Vr, digestStrings as Vs, ManifestIssue as Vt, carriesCleanupCondition as W, ReleaseGateDecision as Wa, segmentClauses as Wi, isRunExecutable as Wn, interpretClause as Wo, HostCohortSelectionReason as Wr, sanitizeUrl as Ws, ClaimedMessage as Wt, renderRecoveryPacket as X, RebindArgs as Xa, availableBoundaryQualifications as Xi, ToolResultInput as Xn, isOpenObligation as Xo, HostToolSurface as Xr, firstStepGuidance as Xt, recoveryTitle as Y, ProposeOutcome as Ya, GoalBoundaryAccess as Yi, ToolCallInput as Yn, isInformationalFragment as Yo, HostProfileKind as Yr, claimedBatchHasRealRootInput as Yt, v6CurrentRootBoundaries as Z, RebindProposal as Za, effectuateBoundary as Zi, ToolSubject as Zn, isQuestionScopeNeedingReview as Zo, LEGACY_HOST_COHORTS as Zr, firstStepGuidanceV6 as Zt, decisionBoundaryKey as _, GoalRef as _a, currentContractDigest as _i, verifyComposedHostLockDump as _n, actionHasCertificationPath as _o, PROTOCOL_V4_NOTICE as _r, ACTION_MANIFEST_VERSION as _s, bindProofV2ToProjection as _t, CONTROL_RECORD_PREFIX as a, DeferAuthorization as aa, selectHostCohort as ai, auditedDefaultWorkdirProvider as an, CapabilityFact as ao, DiagnosisNextAction as ar, opensConditionLead as as, ProofHostSurface as at, latestAssistantText as b, GuardEvidence as ba, AuthorityKind as bi, GitAdapterAction as bn, capabilityFactOf as bo, applyUpgradeEligibility as br, BOUNDED_ARTIFACT_TYPES as bs, createProofManifestV2 as bt, NO_PROGRESS_RECORD_PREFIX as c, DeriveResult as ca, LATEST_SUPPORTED_HOST_VERSION as ci, hostLockContextFromComposedDump as cn, DEPENDENCY_FREE_ONLY_CONDITION as co, UnifiedItemDiagnosis as cr, qualificationOfClause as cs, ProofKindV2 as ct, assessmentAction as d, EvidenceBinding as da, SUPPORTED_HOST_RANGE as di, inspectTargetHostGraph as dn, DerivedProcessFacts as do, evidenceAvailabilityReason as dr, restatedContentOf as ds, ProofObligation as dt, AssetInterpretationFact as ea, evaluateExternalWaitCapability as ei, ActiveProfileHostLock as en, proposeRebindOutcome as eo, extractToolSubject as er, kindOfScope as es, PROOF_KINDS as et, assessmentOutcomePredicate as f, EvidenceOutcome as fa, SUPPORTED_HOST_VERSIONS as fi, packageRowsFromActiveGraph as fn, OperationAttribution as fo, itemDiagnosis as fr, semanticActionOfScope as fs, ProofObligationV2 as ft, decideTurnStopping as g, ExternalOperation as ga, satisfiesSupportedHostRange as gi, resolveInstalledHostLock as gn, RemovalOutcomeReport as go, PROTOCOL_V3_NOTICE as gr, ACTION_MANIFEST as gs, bindProofToProjection as gt, decideTurnBoundary as h, ExpectedTransition as ha, parseHostVersion as hi, resolveActiveProfileHostLock as hn, ProcessOutcomeReason as ho, DEFAULT_DELEGATION_TOOL_NAMES as hr, verbIsNegated as hs, SessionQueryV2 as ht, AssistantOutcomeObservation as i, BoundaryQualificationKind as ia, hostVersionFromPackages as ii, auditedDefaultWorkdirHost as in, replayRebindResult as io, CertificationSupport as ir, namedActions as is, PROOF_PROTOCOL_VERSION_V2 as it, RC015_RC2_HOST_PACKAGES as j, PersistenceAuthorization as ja, CheckpointResult as ji, commitIndexSnapshotDigest as jn, QualificationReason as jo, DEFAULT_HOST_LOCK as jr, boundedArtifactChoiceMatches as js, sessionQueryV2 as jt, V3SessionLike as k, NeedsReviewFact as ka, isFrozenV042RebindResponse as ki, GitTargetIdentity as kn, InterpretOptions as ko, AuditedExecutable as kr, StatefulAction as ks, scopeCoverageDigest as kt, NO_PROGRESS_TURNS_BEFORE_STOP as l, DeriveScope as la, MIN_SUPPORTED_HOST_VERSION as li, hostLockRowsFromComposedDump as ln, DeclaredOperationResult as lo, capabilityRemedyPhrase as lr, questionHeadsClause as ls, ProofManifest as lt, currentActionBases as m, EvidenceRole as ma, evaluateMinimumHostVersion as mi, readActiveHostGraph as mn, ProcessFactSource as mo, CAPTURE_V042_NOTICE as mr, statefulActionsOfScope as ms, SessionQuery as mt, projectCoreV2 as n, BindingActionClosure as na, evaluateHostLock as ni, TargetHostGraph as nn, rebindAttemptKey as no, persistedToolResultStatus as nr, maskCodeSpans as ns, PROOF_MANIFEST_DOMAIN_V2 as nt, CompletionDisposition as o, DelegationRef as oa, HostVersionDecision as oi, auditedForegroundRenderers as on, CapabilityGap as oo, Repairability as or, opensWithDirective as os, ProofKind as ot, classifyCompletionClaim as p, EvidenceParseStatus as pa, compareHostVersions as pi, packageRowsFromPnpmLock as pn, ProcessExitStatus as po, relevantEvidence as pr, splitTextFragments as ps, ProofSurface as pt, openItems as q, ReleaseSettlement as qa, BoundaryRequest as qi, goalCompletionDenial as qn, isExecutableItem as qo, HostLockStatus as qr, FirstStepPreviewInput as qt, supersedeItem as r, BoundaryDisposition as ra, evaluateToolSurfaceCapability as ri, activeRendererModule as rn, rebindResponse as ro, withDurability as rr, maskQuotedSpans as rs, PROOF_PROTOCOL_VERSION as rt, CurrentActionBasis as s, DeriveConfig as sa, HostVersionStatus as si, combineHostPolicy as sn, CapabilityRemedy as so, TaskKind as sr, presentExplanationHead as ss, ProofKindCapability as st, projectSessionCoreV2 as t, AssetObligation as ta, evaluateHostCapability as ti, HostProfileError as tn, proposeRebindV042 as to, isDeterministicCheck as tr, legacyQuestionReadingIsInformational as ts, PROOF_KINDS_V2 as tt, TurnStoppingDecision as u, DerivedEnvelope as ua, ParsedHostVersion as ui, injectActiveProfileHostLock as un, DependencyStatus as uo, deriveItemDiagnosis as ur, reportingHeadGoverns as us, ProofManifestV2 as ut, isRootPauseRequest as v, GuardBoundary as va, AuthorityBlock as vi, GIT_COMMAND_MANIFEST_IDS as vn, admissibleForRemoval as vo, PROTOCOL_V5_NOTICE as vr, ActionManifest as vs, canonicalProjection as vt, testOutcomePredicate as w, GuardItemStatus as wa, UserInteractionKind as wi, GitCommandRejected as wn, AuthorityDisposition as wo, ACTIVE_HOST_COHORT_ID as wr, STATEFUL_ACTIONS as ws, proofEvidenceConstraints as wt, latestRootInstruction as x, GuardIntegrity as xa, authorityCaptureCounts as xi, GitCommandAccepted as xn, partialFailureOf as xo, deriveProjection as xr, CERTIFICATE_VERSION as xs, proofCapabilityReport as xt, isWholeTaskCompletionClaim as y, GuardCheckpoint as ya, AuthorityBlockKind as yi, GIT_COMMAND_TEMPLATES as yn, capabilityConsequence as yo, PROTOCOL_V6_NOTICE as yr, ActionSpec as ys, createProofManifest as yt, RecoveryCause as z, VerificationContract as za, environmentDefaultRepositoryTarget as zi, CanonicalArgv as zn, explanationHasActionResidue as zo, HostCapabilityEvaluation as zr, validateActionTarget as zs, COMMAND_SURFACE_MANIFEST as zt };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { $ as ProofSurface, $a as partialFailureOf, $i as GuardIntegrity, $n as applyUpgradeEligibility, $o as STATEFUL_ACTIONS, $r as authorityCaptureCounts, $t as GIT_COMMAND_MANIFEST_IDS, A as MIN_RECOVERY_CHAR_BUDGET, Aa as confirmRebind, Ai as isCurrentAcceptedBoundary, An as ToolCallInput, Ao as itemHoldsExecutionAuthority, Ar as bindExecutableIdentity, At as ClaimedMessage, B as PROOF_KINDS, Ba as DEPENDENCY_FREE_ONLY_CONDITION, Bi as DeriveResult, Bn as Repairability, Bo as restatedContentOf, Br as LATEST_SUPPORTED_HOST_VERSION, Bt as HostProfileError, C as RC015_RC2_HOST_PACKAGES, Ca as ReleaseObservedIdentity, Ci as BoundaryEffectuation, Cn as ShellParseStatus, Co as introducesActionClause, Cr as HostLockContext, Ct as evidenceMatchesItem, D as CLEANUP_CONDITION_RULE_COMPACT, Da as ProposeOutcome, Di as GoalBoundaryAccess, Dn as parseShellCommand, Do as isOpenObligation, Dr as HostProfileKind, Dt as ManifestIssue, E as CLEANUP_CONDITION_RULE, Ea as BoundedSource, Ei as GoalActivationState, En as parsePwshCommand, Eo as isInformationalFragment, Er as HostPlatform, Et as CommandSurfaceManifest, F as openItems, Fa as rebindResponse, Fi as BoundaryDisposition, Fn as extractToolSubject, Fo as namedActions, Fr as evaluateToolSurfaceCapability, Ft as claimedBatchHasRealRootInput, G as ProofHostSurface, Ga as ProcessExitStatus, Gi as EvidenceParseStatus, Gn as evidenceAvailabilityReason, Go as ACTION_MANIFEST, Gr as compareHostVersions, Gt as injectActiveProfileHostLock, H as PROOF_MANIFEST_DOMAIN_V2, Ha as DependencyStatus, Hi as DerivedEnvelope, Hn as UnifiedItemDiagnosis, Ho as splitTextFragments, Hr as ParsedHostVersion, Ht as combineHostPolicy, I as recoveryDigest, Ia as replayRebindResult, Ii as BoundaryQualificationKind, In as isDeterministicCheck, Io as opensWithDirective, Ir as hostVersionFromPackages, It as firstStepGuidance, J as ProofKindV2, Ja as RemovalOutcomeReport, Ji as ExternalOperation, Jn as CAPTURE_V042_NOTICE, Jo as ActionSpec, Jr as satisfiesSupportedHostRange, Jt as packageRowsFromPnpmLock, K as ProofKind, Ka as ProcessFactSource, Ki as EvidenceRole, Kn as itemDiagnosis, Ko as ACTION_MANIFEST_VERSION, Kr as evaluateMinimumHostVersion, Kt as inspectTargetHostGraph, L as renderRecoveryPacket, La as CapabilityFact, Li as DeferAuthorization, Ln as withDurability, Lo as qualificationOfClause, Lr as selectHostCohort, Lt as lifecyclePhase, M as carriesCleanupCondition, Ma as proposeRebindOutcome, Mi as AssetInterpretationFact, Mn as ToolSubject, Mo as legacyQuestionReadingIsInformational, Mr as evaluateExternalWaitCapability, Mt as FirstStepInjection, N as cleanupConditionFor, Na as proposeRebindV042, Ni as AssetObligation, Nn as evidenceFromPersistedToolResult, No as maskCodeSpans, Nr as evaluateHostCapability, Nt as FirstStepPreviewInput, O as CLEANUP_CONDITION_RULE_SHORT, Oa as RebindArgs, Oi as availableBoundaryQualifications, On as goalCompletionDenial, Oo as isQuestionScopeNeedingReview, Or as HostToolSurface, Ot as OperationVerbEntry, P as closingHint, Pa as rebindAttemptKey, Pi as BindingActionClosure, Pn as extractTextContent, Po as maskQuotedSpans, Pr as evaluateHostLock, Pt as LifecyclePhase, Q as ProofObligationV2, Qa as capabilityFactOf, Qi as GuardEvidence, Qn as PROTOCOL_V5_NOTICE, Qo as SEMANTIC_ACTIONS, Qr as AuthorityKind, Qt as verifyComposedHostLockDump, R as ALPHA3_HOST_PACKAGES, Ra as CapabilityGap, Ri as DelegationRef, Rn as CertificationSupport, Ro as questionHeadsClause, Rr as HostVersionDecision, Rt as previewFirstStepInjection, S as snapshotSessionEvents, Sa as ReleaseGateDecision, Si as segmentClauses, Sn as ParsedShell, So as interpretMessage, Sr as HostCohortSelectionReason, St as evidenceCoverage, T as RC1_HOST_PACKAGES, Ta as ReleaseSettlement, Ti as BoundaryRequest, Tn as isRunExecutable, To as isExplanationScope, Tr as HostLockStatus, Tt as COMMAND_SURFACE_MANIFEST, U as PROOF_PROTOCOL_VERSION, Ua as DerivedProcessFacts, Ui as EvidenceBinding, Un as capabilityRemedyPhrase, Uo as statefulActionsOfScope, Ur as SUPPORTED_HOST_RANGE, Ut as hostLockContextFromComposedDump, V as PROOF_KINDS_V2, Va as DeclaredOperationResult, Vi as DeriveScope, Vn as TaskKind, Vo as semanticActionOfScope, Vr as MIN_SUPPORTED_HOST_VERSION, Vt as TargetHostGraph, W as PROOF_PROTOCOL_VERSION_V2, Wa as OperationAttribution, Wi as EvidenceOutcome, Wn as deriveItemDiagnosis, Wo as verbIsNegated, Wr as SUPPORTED_HOST_VERSIONS, Wt as hostLockRowsFromComposedDump, X as ProofManifestV2, Xa as admissibleForRemoval, Xi as GuardBoundary, Xn as PROTOCOL_V3_NOTICE, Xo as CERTIFICATE_VERSION, Xr as AuthorityBlock, Xt as resolveActiveProfileHostLock, Y as ProofManifest, Ya as actionHasCertificationPath, Yi as GoalRef, Yn as DEFAULT_DELEGATION_TOOL_NAMES, Yo as BOUNDED_ARTIFACT_TYPES, Yr as currentContractDigest, Yt as readActiveHostGraph, Z as ProofObligation, Za as capabilityConsequence, Zi as GuardCheckpoint, Zn as PROTOCOL_V4_NOTICE, Zo as CERTIFICATE_VERSION_V2, Zr as AuthorityBlockKind, Zt as resolveInstalledHostLock, _ as progressFingerprint, _a as VerificationContract, _i as environmentDefaultRepositoryTarget, _n as parseGitCommandManifest, _o as explanationHasActionResidue, _r as HostCapabilityEvaluation, _s as normalizeClause, _t as sessionQueryV2, a as NO_PROGRESS_RECORD_PREFIX, aa as HostStatus, ai as CONFIRM_LINE_PATTERN, an as GitCommandRejected, ao as ExecutionQualification, ar as ALPHA2_DSHMARKET_139_HOST_PACKAGES, as as actionCompatible, at as createProofManifest, b as SessionApiError, ba as createProjection, bi as extractOperation, bn as CanonicalArgv, bo as hasQuestionScope, br as HostCohort, bs as sha256, bt as EvidenceFacetCoverage, c as classifyCompletionClaim, ca as NeedsReviewReason, ci as parseConfirmationMessage, cn as GitPrestateCheck, co as LEGACY_QUALIFICATION, cr as BASE_HOST_PACKAGES, cs as requestedIdentityKey, ct as proofDigest, d as decisionBoundaryKey, da as TargetCaptureReasonCode, di as certifyCheckpoint, dn as LinearCommitReadback, do as ScopeInterpretation, dr as ExecutableIdentity, ds as semanticActionFromCommand, dt as proofHostSurfacesOf, ea as GuardItem, ei as segmentAuthorityBlocks, en as GIT_COMMAND_TEMPLATES, eo as removalIsComplete, er as deriveProjection, es as STOP_PROTOCOL_VERSION, et as SessionQuery, f as isRootPauseRequest, fa as TargetCaptureStatus, fi as CaptureScope, fn as commitIndexSnapshotDigest, fo as actionVerbMatches, fr as ExecutableIdentityBinding, fs as semanticActionFromText, ft as proofOperationMatches, g as observeAssistantOutcome, ga as TargetValue, gi as classifyClause, gn as gitCommandMatchesTarget, go as clauseIsProtected, gr as HostAuditProvenance, gs as digestStrings, gt as sessionQuery, h as latestRootInstruction, ha as TargetTuple, hi as captureItem, hn as executeRevalidatedGitEffect, ho as clauseIsGoverned, hr as HOST_COHORTS, hs as canonicalizePath, ht as scopeCoverageDigest, i as CompletionDisposition, ia as GuardProjection, ii as classifyUserInteraction, in as GitCommandParseResult, io as Executee, ir as ACTIVE_HOST_LAUNCHER_VERSION, is as StatefulAction, it as canonicalProjection, j as RecoveryOptions, ja as proposeRebind, ji as qualifyBoundary, jn as ToolResultInput, jo as kindOfScope, jr as bindLiveGoalCapability, jt as FIRST_STEP_GUIDANCE, k as DEFAULT_RECOVERY_CHAR_BUDGET, ka as RebindProposal, ki as effectuateBoundary, kn as hasCurrentCertificate, ko as isRestatement, kr as LEGACY_HOST_COHORTS, kt as validateManifest, l as decideTurnBoundary, la as PersistenceAuthorization, li as CheckpointResult, ln as GitPrestateEnvelope, lo as QualificationReason, lr as DEFAULT_HOST_LOCK, ls as requestedTargetAuthorizesMutation, lt as proofDigestV2, m as latestAssistantText, ma as TargetSourceKind, mi as captureClause, mn as createGitPrestateEnvelope, mo as clauseAsksOwnQuestion, mr as HOST_CAPABILITY_PACKAGE_GROUPS, ms as validateActionTarget, mt as requiredSubjectsOf, n as AssistantOutcomeObservation, na as GuardItemStatus, ni as UserInteractionKind, nn as GitCommandAccepted, no as AuthorityDisposition, nr as ACTIVE_HOST_COHORT_ID, ns as SUPPORTED_EVIDENCE_ADAPTERS, nt as bindProofToProjection, o as NO_PROGRESS_TURNS_BEFORE_STOP, oa as MessageCoverage, oi as ParsedConfirmation, on as GitEffectExecution, oo as GRANTED_QUALIFICATION, or as ALPHA2_HOST_PACKAGES, os as boundedArtifactChoiceMatches, ot as createProofManifestV2, p as isWholeTaskCompletionClaim, pa as TargetSource, pi as ClauseSegment, pn as commitTreeSnapshotDigest, po as clarifiedSpanOf, pr as GOAL_HOST_PACKAGES, ps as validateActionManifest, pt as proofV2Rejection, q as ProofKindCapability, qa as ProcessOutcomeReason, qi as ExpectedTransition, qn as relevantEvidence, qo as ActionManifest, qr as parseHostVersion, qt as packageRowsFromActiveGraph, r as CONTROL_RECORD_PREFIX, ra as GuardOperation, ri as classifyTaskIntent, rn as GitCommandManifest, ro as DirectiveClass, rr as ACTIVE_HOST_COHORT_IDS, rs as SemanticAction, rt as bindProofV2ToProjection, s as TurnStoppingDecision, sa as NeedsReviewFact, si as isFrozenV042RebindResponse, sn as GitEffectRunner, so as InterpretOptions, sr as AuditedExecutable, ss as isStatefulAction, st as proofCapabilityReport, t as supersedeItem, ta as GuardItemKind, ti as TaskIntent, tn as GitAdapterAction, to as removalIsPartiallyKnown, tr as legacyRecordsNeedingReview, ts as STOP_PROTOCOL_VERSION_V2, tt as SessionQueryV2, u as decideTurnStopping, ua as SourceSpan, ui as RejectedBinding, un as GitTargetIdentity, uo as QualificationStatus, ur as EXPECTED_HOST_PACKAGES, us as requestedTargetMatchesResolved, ut as proofEvidenceConstraints, v as SESSION_API_UNSUPPORTED, va as WaitAuthorization, vi as extractArtifactPaths, vn as revalidateGitPrestate, vo as governedClauseRestrictsExecution, vr as HostCapabilityId, vs as sanitizeClauseText, vt as validateProofManifest, w as RC015_HOST_PACKAGES, wa as ReleaseOperation, wi as BoundaryQualification, wn as canonicalArgvFromCommand, wo as isExecutableItem, wr as HostLockEvaluation, wt as isVerifyingCapability, x as V3SessionLike, xa as PackageRow, xi as isInformationalMessage, xn as CanonicalCommandSurface, xo as interpretClause, xr as HostCohortSelection, xt as bindingSatisfies, y as SESSION_EVENT_ENVELOPE_INVALID, ya as WorkUnit, yi as extractMethod, yn as verifiedLinearCommitReadback, yo as hasOrderedCoordination, yr as HostCapabilityRequest, ys as sanitizeUrl, yt as validateProofManifestV2, z as PROOF_CAPABILITY_MATRIX, za as CapabilityRemedy, zi as DeriveConfig, zn as DiagnosisNextAction, zo as reportingHeadGoverns, zr as HostVersionStatus, zt as ActiveProfileHostLock } from "./index-CfEiC4bb.js";
+import { $ as PROOF_CAPABILITY_MATRIX, $a as proposeRebind, $i as qualifyBoundary, $n as extractTextContent, $o as itemHoldsExecutionAuthority, $r as bindLiveGoalCapability, $t as previewFirstStepInjection, A as snapshotSessionEvents, Aa as NeedsReviewReason, Ai as parseConfirmationMessage, An as LinearCommitReadback, Ao as LEGACY_QUALIFICATION, Ar as BASE_HOST_PACKAGES, As as actionCompatible, At as sessionQuery, B as RecoveryOptions, Ba as WaitAuthorization, Bi as extractArtifactPaths, Bn as CanonicalCommandSurface, Bo as governedClauseRestrictsExecution, Br as HostCapabilityId, Bs as canonicalizePath, Bt as CommandSurfaceManifest, C as progressFingerprint, Ca as GuardItemKind, Ci as TaskIntent, Cn as GitCommandParseResult, Co as removalIsPartiallyKnown, Cr as rootLocatorFlavor, Cs as SEMANTIC_ACTIONS, Ct as proofDigestV2, D as SESSION_EVENT_ENVELOPE_INVALID, Da as HostStatus, Di as CONFIRM_LINE_PATTERN, Dn as GitPrestateCheck, Do as ExecutionQualification, Dr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Ds as SUPPORTED_EVIDENCE_ADAPTERS, Dt as proofV2Rejection, E as SESSION_API_UNSUPPORTED, Ea as GuardProjection, Ei as classifyUserInteraction, En as GitEffectRunner, Eo as Executee, Er as ACTIVE_HOST_LAUNCHER_VERSION, Es as STOP_PROTOCOL_VERSION_V2, Et as proofOperationMatches, F as CLEANUP_CONDITION_RULE_COMPACT, Fa as TargetSource, Fi as ClauseSegment, Fn as gitCommandMatchesTarget, Fo as clarifiedSpanOf, Fr as GOAL_HOST_PACKAGES, Fs as requestedTargetMatchesResolved, Ft as bindingSatisfies, G as cleanupConditionFor, Ga as ReleaseObservedIdentity, Gi as BoundaryEffectuation, Gn as parsePwshCommand, Go as interpretMessage, Gr as HostLockContext, Gs as sha256, Gt as FIRST_STEP_GUIDANCE, H as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ha as createProjection, Hi as extractOperation, Hn as ShellParseStatus, Ho as hasQuestionScope, Hr as HostCohort, Hs as normalizeClause, Ht as OperationVerbEntry, I as CLEANUP_CONDITION_RULE_SHORT, Ia as TargetSourceKind, Ii as captureClause, In as parseGitCommandManifest, Io as clauseAsksOwnQuestion, Ir as HOST_CAPABILITY_PACKAGE_GROUPS, Is as semanticActionFromCommand, It as evidenceCoverage, J as recoveryDigest, Ja as BoundedSource, Ji as GoalActivationState, Jn as hasCurrentCertificate, Jo as isExplanationScope, Jr as HostPlatform, Jt as LifecyclePhase, K as closingHint, Ka as ReleaseOperation, Ki as BoundaryQualification, Kn as parseShellCommand, Ko as introducesActionClause, Kr as HostLockEvaluation, Kt as FirstStepInjection, L as DEFAULT_RECOVERY_CHAR_BUDGET, La as TargetTuple, Li as captureItem, Ln as revalidateGitPrestate, Lo as clauseIsGoverned, Lr as HOST_COHORTS, Ls as semanticActionFromText, Lt as evidenceMatchesItem, M as RC015_HOST_PACKAGES, Ma as SourceSpan, Mi as RejectedBinding, Mn as commitTreeSnapshotDigest, Mo as QualificationStatus, Mr as EXPECTED_HOST_PACKAGES, Ms as isStatefulAction, Mt as validateProofManifest, N as RC1_HOST_PACKAGES, Na as TargetCaptureReasonCode, Ni as certifyCheckpoint, Nn as createGitPrestateEnvelope, No as ScopeInterpretation, Nr as ExecutableIdentity, Ns as requestedIdentityKey, Nt as validateProofManifestV2, O as SessionApiError, Oa as MessageCoverage, Oi as ParsedConfirmation, On as GitPrestateEnvelope, Oo as GRANTED_QUALIFICATION, Or as ALPHA2_HOST_PACKAGES, Os as SemanticAction, Ot as requiredSubjectsOf, P as CLEANUP_CONDITION_RULE, Pa as TargetCaptureStatus, Pi as CaptureScope, Pn as executeRevalidatedGitEffect, Po as actionVerbMatches, Pr as ExecutableIdentityBinding, Ps as requestedTargetAuthorizesMutation, Pt as EvidenceFacetCoverage, Q as ALPHA3_HOST_PACKAGES, Qa as confirmRebind, Qi as isCurrentAcceptedBoundary, Qn as evidenceFromPersistedToolResult, Qo as isRestatement, Qr as bindExecutableIdentity, Qt as lifecyclePhase, R as MIN_RECOVERY_CHAR_BUDGET, Ra as TargetValue, Ri as classifyClause, Rn as verifiedLinearCommitReadback, Ro as clauseIsProtected, Rr as HostAuditProvenance, Rs as validateActionManifest, Rt as isVerifyingCapability, S as observeAssistantOutcome, Sa as GuardItem, Si as segmentAuthorityBlocks, Sn as GitCommandManifest, So as removalIsComplete, Sr as legacyRecordsNeedingReview, Ss as CERTIFICATE_VERSION_V2, St as proofDigest, T as v6TestPredicate, Ta as GuardOperation, Ti as classifyTaskIntent, Tn as GitEffectExecution, To as DirectiveClass, Tr as ACTIVE_HOST_COHORT_IDS, Ts as STOP_PROTOCOL_VERSION, Tt as proofHostSurfacesOf, U as V6_ORDINARY_COMPLETION_RULE_SHORT, Ua as PackageRow, Ui as isInformationalMessage, Un as canonicalArgvFromCommand, Uo as hasWorkPredicate, Ur as HostCohortSelection, Us as sanitizeClauseText, Ut as validateManifest, V as V6_ORDINARY_COMPLETION_RULE, Va as WorkUnit, Vi as extractMethod, Vn as ParsedShell, Vo as hasOrderedCoordination, Vr as HostCapabilityRequest, Vs as digestStrings, Vt as ManifestIssue, W as carriesCleanupCondition, Wa as ReleaseGateDecision, Wi as segmentClauses, Wn as isRunExecutable, Wo as interpretClause, Wr as HostCohortSelectionReason, Ws as sanitizeUrl, Wt as ClaimedMessage, X as renderRecoveryPacket, Xa as RebindArgs, Xi as availableBoundaryQualifications, Xn as ToolResultInput, Xo as isOpenObligation, Xr as HostToolSurface, Xt as firstStepGuidance, Y as recoveryTitle, Ya as ProposeOutcome, Yi as GoalBoundaryAccess, Yn as ToolCallInput, Yo as isInformationalFragment, Yr as HostProfileKind, Yt as claimedBatchHasRealRootInput, Z as v6CurrentRootBoundaries, Za as RebindProposal, Zi as effectuateBoundary, Zn as ToolSubject, Zo as isQuestionScopeNeedingReview, Zr as LEGACY_HOST_COHORTS, Zt as firstStepGuidanceV6, _ as decisionBoundaryKey, _a as GoalRef, _i as currentContractDigest, _n as verifyComposedHostLockDump, _o as actionHasCertificationPath, _r as PROTOCOL_V4_NOTICE, _s as ACTION_MANIFEST_VERSION, _t as bindProofV2ToProjection, a as CONTROL_RECORD_PREFIX, aa as DeferAuthorization, ai as selectHostCohort, an as auditedDefaultWorkdirProvider, ao as CapabilityFact, ar as DiagnosisNextAction, as as opensConditionLead, at as ProofHostSurface, b as latestAssistantText, ba as GuardEvidence, bi as AuthorityKind, bn as GitAdapterAction, bo as capabilityFactOf, br as applyUpgradeEligibility, bs as BOUNDED_ARTIFACT_TYPES, bt as createProofManifestV2, c as NO_PROGRESS_RECORD_PREFIX, ca as DeriveResult, ci as LATEST_SUPPORTED_HOST_VERSION, cn as hostLockContextFromComposedDump, co as DEPENDENCY_FREE_ONLY_CONDITION, cr as UnifiedItemDiagnosis, cs as qualificationOfClause, ct as ProofKindV2, d as assessmentAction, da as EvidenceBinding, di as SUPPORTED_HOST_RANGE, dn as inspectTargetHostGraph, do as DerivedProcessFacts, dr as evidenceAvailabilityReason, ds as restatedContentOf, dt as ProofObligation, ea as AssetInterpretationFact, ei as evaluateExternalWaitCapability, en as ActiveProfileHostLock, eo as proposeRebindOutcome, er as extractToolSubject, es as kindOfScope, et as PROOF_KINDS, f as assessmentOutcomePredicate, fa as EvidenceOutcome, fi as SUPPORTED_HOST_VERSIONS, fn as packageRowsFromActiveGraph, fo as OperationAttribution, fr as itemDiagnosis, fs as semanticActionOfScope, ft as ProofObligationV2, g as decideTurnStopping, ga as ExternalOperation, gi as satisfiesSupportedHostRange, gn as resolveInstalledHostLock, go as RemovalOutcomeReport, gr as PROTOCOL_V3_NOTICE, gs as ACTION_MANIFEST, gt as bindProofToProjection, h as decideTurnBoundary, ha as ExpectedTransition, hi as parseHostVersion, hn as resolveActiveProfileHostLock, ho as ProcessOutcomeReason, hr as DEFAULT_DELEGATION_TOOL_NAMES, hs as verbIsNegated, ht as SessionQueryV2, i as AssistantOutcomeObservation, ia as BoundaryQualificationKind, ii as hostVersionFromPackages, in as auditedDefaultWorkdirHost, io as replayRebindResult, ir as CertificationSupport, is as namedActions, it as PROOF_PROTOCOL_VERSION_V2, j as RC015_RC2_HOST_PACKAGES, ja as PersistenceAuthorization, ji as CheckpointResult, jn as commitIndexSnapshotDigest, jo as QualificationReason, jr as DEFAULT_HOST_LOCK, js as boundedArtifactChoiceMatches, jt as sessionQueryV2, k as V3SessionLike, ka as NeedsReviewFact, ki as isFrozenV042RebindResponse, kn as GitTargetIdentity, ko as InterpretOptions, kr as AuditedExecutable, ks as StatefulAction, kt as scopeCoverageDigest, l as NO_PROGRESS_TURNS_BEFORE_STOP, la as DeriveScope, li as MIN_SUPPORTED_HOST_VERSION, ln as hostLockRowsFromComposedDump, lo as DeclaredOperationResult, lr as capabilityRemedyPhrase, ls as questionHeadsClause, lt as ProofManifest, m as currentActionBases, ma as EvidenceRole, mi as evaluateMinimumHostVersion, mn as readActiveHostGraph, mo as ProcessFactSource, mr as CAPTURE_V042_NOTICE, ms as statefulActionsOfScope, mt as SessionQuery, n as projectCoreV2, na as BindingActionClosure, ni as evaluateHostLock, nn as TargetHostGraph, no as rebindAttemptKey, nr as persistedToolResultStatus, ns as maskCodeSpans, nt as PROOF_MANIFEST_DOMAIN_V2, o as CompletionDisposition, oa as DelegationRef, oi as HostVersionDecision, on as auditedForegroundRenderers, oo as CapabilityGap, or as Repairability, os as opensWithDirective, ot as ProofKind, p as classifyCompletionClaim, pa as EvidenceParseStatus, pi as compareHostVersions, pn as packageRowsFromPnpmLock, po as ProcessExitStatus, pr as relevantEvidence, ps as splitTextFragments, pt as ProofSurface, q as openItems, qa as ReleaseSettlement, qi as BoundaryRequest, qn as goalCompletionDenial, qo as isExecutableItem, qr as HostLockStatus, qt as FirstStepPreviewInput, r as supersedeItem, ra as BoundaryDisposition, ri as evaluateToolSurfaceCapability, rn as activeRendererModule, ro as rebindResponse, rr as withDurability, rs as maskQuotedSpans, rt as PROOF_PROTOCOL_VERSION, s as CurrentActionBasis, sa as DeriveConfig, si as HostVersionStatus, sn as combineHostPolicy, so as CapabilityRemedy, sr as TaskKind, ss as presentExplanationHead, st as ProofKindCapability, t as projectSessionCoreV2, ta as AssetObligation, ti as evaluateHostCapability, tn as HostProfileError, to as proposeRebindV042, tr as isDeterministicCheck, ts as legacyQuestionReadingIsInformational, tt as PROOF_KINDS_V2, u as TurnStoppingDecision, ua as DerivedEnvelope, ui as ParsedHostVersion, un as injectActiveProfileHostLock, uo as DependencyStatus, ur as deriveItemDiagnosis, us as reportingHeadGoverns, ut as ProofManifestV2, v as isRootPauseRequest, va as GuardBoundary, vi as AuthorityBlock, vn as GIT_COMMAND_MANIFEST_IDS, vo as admissibleForRemoval, vr as PROTOCOL_V5_NOTICE, vs as ActionManifest, vt as canonicalProjection, w as testOutcomePredicate, wa as GuardItemStatus, wi as UserInteractionKind, wn as GitCommandRejected, wo as AuthorityDisposition, wr as ACTIVE_HOST_COHORT_ID, ws as STATEFUL_ACTIONS, wt as proofEvidenceConstraints, x as latestRootInstruction, xa as GuardIntegrity, xi as authorityCaptureCounts, xn as GitCommandAccepted, xo as partialFailureOf, xr as deriveProjection, xs as CERTIFICATE_VERSION, xt as proofCapabilityReport, y as isWholeTaskCompletionClaim, ya as GuardCheckpoint, yi as AuthorityBlockKind, yn as GIT_COMMAND_TEMPLATES, yo as capabilityConsequence, yr as PROTOCOL_V6_NOTICE, ys as ActionSpec, yt as createProofManifest, z as RecoveryCause, za as VerificationContract, zi as environmentDefaultRepositoryTarget, zn as CanonicalArgv, zo as explanationHasActionResidue, zr as HostCapabilityEvaluation, zs as validateActionTarget, zt as COMMAND_SURFACE_MANIFEST } from "./index-hiUtfKJa.js";
 import "@deepseek-ai/dsh-tools";
-import "@deepseek-ai/dsh-session";
+import { Session } from "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
@@ -40,6 +40,7 @@ interface EvidenceToolRoots {
     serviceId: string;
     preGeneration: string;
   }) => Promise<boolean>;
+  hasRestartIntent?: (resolutionCallId: string, serviceId: string, preGeneration: string) => boolean;
   /** Runtime-supplied, action-scoped host capability decision. */
   hostCapability?: (action: StatefulAction) => {
     status: "supported" | "unsupported" | "unavailable";
@@ -119,7 +120,7 @@ declare const Config: z<{
 //#endregion
 //#region src/runtime.d.ts
 declare const name = "context-guard";
-declare const inject: readonly ["sessions", "commands"];
+declare const inject: readonly ["sessions", "commands", "fs"];
 /**
 * Executor and network seams for acceptance runs. They replace ONLY the two
 * things a deterministic test cannot do for real — spawning the mutation
@@ -141,6 +142,8 @@ interface RuntimeExecutorSeams {
   * acceptance.
   */
   hostLock?: HostLockEvaluation;
+  /** Isolated acceptance override for the provider-invisible durable ledger. */
+  privateLedgerRoot?: string;
 }
 declare function apply(ctx: Context, rawConfig?: {
   activation?: unknown;
@@ -152,4 +155,19 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockProfileRoot?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, admissibleForRemoval, apply, applyUpgradeEligibility, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, previewFirstStepInjection, progressFingerprint, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+//#region src/raw-replay.d.ts
+interface RawReplayInput {
+  root: string;
+  final: string;
+  cwd?: string;
+  /** Synthetic host events, in persisted order; only for local replay. */
+  events?: Array<{
+    type: string;
+    data: unknown;
+  }>;
+}
+/** Local synthetic replay using the actual Session, derivation and registered
+* Stop handler. It neither executes tools nor asserts a real model outcome. */
+declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
+//#endregion
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };