dsh-completion-guard 0.7.0 → 0.8.0

package/dist/{index-D45jgmPx.d.ts → index-DMr57AgL.d.ts}

@@ -475,7 +475,7 @@ type ProcessExitStatus = number | "unknown";
 * Why `outcome` says what it says, so a display or a consumer never reads more
 * than the source supports.
 */
-type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
+type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "output_incomplete" | "text_scan_inconclusive";
 /**
 * How far the console let the guard attribute effects to the obligation's own
 * operation. `unknown` is the honest answer for every opaque compound runner:
@@ -1509,6 +1509,7 @@ interface DerivedEnvelope {
 }
 //#endregion
 //#region src/domain/boundary.d.ts
+declare const BOUNDARY_RECORD_PREFIX = "[context-guard boundary/v1] ";
 interface BoundaryRequest {
   disposition: BoundaryDisposition;
   qualificationKind: BoundaryQualificationKind;
@@ -1648,6 +1649,9 @@ interface CheckpointResult {
   rejectedBindings: RejectedBinding[];
   checkpoint?: GuardCheckpoint;
 }
+/** Preview one evidence binding through the same per-item acceptance checks as
+* certificate construction. This does not decide whole-contract closure. */
+declare function bindingIndividuallyAccepted(projection: GuardProjection, item: GuardItem, binding: EvidenceBinding): boolean;
 declare function certifyCheckpoint(projection: GuardProjection, bindings: EvidenceBinding[], id: string, commit?: boolean): CheckpointResult;
 //#endregion
 //#region src/domain/confirm-parse.d.ts
@@ -1723,26 +1727,10 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/**
-* DSH host version support policy.
-*
-* Context Guard 0.5.2 supports exactly the two registered DSH host releases:
-* `0.1.5-rc.2` (latest) and `0.1.5-rc.1` (verified minimum). Package discovery,
-* npm installation, and the exported support range use the same newest-first
-* exact union, so an unregistered stable or future prerelease is never advertised
-* merely because it sorts above the minimum.
-*
-* The minimum comparison remains a diagnostic layer for distinguishing an old
-* host from an at-or-above-floor but unregistered host. It never substitutes for
-* the exact support set or the complete 33-package host graph.
-*/
-/** Lowest supported DSH host version. DSH packages version independently of Cordis. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.1.5-rc.1";
-/** Latest DSH release with a registered complete host graph. */
-declare const LATEST_SUPPORTED_HOST_VERSION = "0.1.5-rc.2";
-/** Exact endpoints supported by the current release, newest first. */
+/** Exact host identity; version ordering is diagnostic only. */
+declare const MIN_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
+declare const LATEST_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
 declare const SUPPORTED_HOST_VERSIONS: readonly string[];
-/** Exact npm range shared by package discovery and peer dependency declarations. */
 declare const SUPPORTED_HOST_RANGE: string;
 interface ParsedHostVersion {
   major: number;
@@ -1758,12 +1746,12 @@ declare function parseHostVersion(value: string): ParsedHostVersion | undefined;
 * unparseable host version fails closed rather than sorting as "newer".
 */
 declare function compareHostVersions(a: string, b: string): number | undefined;
-type HostVersionStatus = "supported" | "below_minimum" | "unparseable";
+type HostVersionStatus = "supported" | "below_minimum" | "unparseable" | "unregistered";
 interface HostVersionDecision {
   status: HostVersionStatus;
   version: string;
   minimum: string;
-  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable";
+  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable" | "host_version_unregistered";
 }
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
@@ -1804,45 +1792,17 @@ interface HostCohort {
   packages: PackageRow[];
   capabilities: CapabilityRow[];
 }
-/**
-* alpha.2 audited package identities (second registry cohort), hoisted so the
-* alpha.2 + dshmarket 1.39.0 cohort can reuse the exact natively audited rows
-* with only the dshmarket identity substituted.
-*/
-declare const ALPHA2_HOST_PACKAGES: PackageRow[];
-/**
-* The exact graph the Windows daily runtime realized when it upgraded
-* dshmarket to 1.39.0 on an otherwise alpha.2 install — the combination whose
-* rejection was Guard 0.3.2's real web_control failure. It is one audited
-* whole-graph cohort: alpha.2 rows keep their native macOS/Windows audit
-* identities and the dshmarket 1.39.0 identity is the authoritative row from
-* the 2026-09-01 alpha.3 annex audit. Guard 0.4.0 supports this combination.
-*/
-declare const ALPHA2_DSHMARKET_139_HOST_PACKAGES: PackageRow[];
-/**
-* Historical audited host cohort registry. Every entry keeps the exact package
-* identities audited natively for a past Guard release (CG-DSH-001 whole-graph
-* contracts). These are historical verification facts only: since 0.5.1 the
-* active support targets are `0.1.5-rc.1` and `0.1.5-rc.2`, so an installed graph from any of
-* these cohorts — including previous RCs and alphas — is no longer an active
-* support entry and fails closed in `evaluateHostLock`.
-*/
-declare const LEGACY_HOST_COHORTS: readonly HostCohort[];
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.1.5-rc.1";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.1.7-rc.2";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
-/** Core-lock/v1 separates optional market identity from the audited DSH graph.
-* The active support targets are the exact registered rc.1 and rc.2 graphs:
-* historical cohorts stay in `LEGACY_HOST_COHORTS` as verification data but are
-* never silently re-labelled as accepted active locks, and an installed
-* historical graph fails closed under `evaluateHostLock`. The version policy
-* (the exact rc.2-or-rc.1 public set) and the graph lock are separate
-* judgments: a host that has not been registered here is "unverified / pending
-* audit", never supported by version order alone.
+/** Core-lock/v1 separates optional market identity from the rc.2 critical
+* graph. Historical cohorts live only in test data. Version ordering cannot
+* authorize an unregistered graph, and graph identity is separate from native
+* acceptance of a Guard artifact.
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.1.5-rc.1). The cohort
+* Baseline fixture package identities (DSH 0.1.7-rc.2). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -2105,6 +2065,17 @@ interface UnifiedItemDiagnosis {
   attempt_fingerprint: string;
 }
 /**
+* The evidence roles the item's OWN obligation contract requires (0.6.1,
+* W060-04). A stateful change needs the full resolution/effect/state chain; a
+* read-only verification (inspect, test, verify, generic readback) needs ONE
+* matching fact in the `effect` role — exactly the manifest `simpleRecord`
+* accepts. Asking every obligation for all three roles made prepare and
+* diagnosis demand a change chain a read-only verification can never produce.
+*/
+/** Current v6 native edit has a persisted effect plus its own readback.
+* Prestate-constrained and legacy stateful work keeps the historical chain. */
+declare function nativeFileTwoRole(p: GuardProjection, item: GuardItem): boolean;
+/**
 * The pure repair judge. It decides between: fixable from existing evidence,
 * missing pre-evidence, missing a user target choice, not supported by any
 * adapter, an executed-without-evidence historical gap, or nothing to do —
@@ -2151,12 +2122,9 @@ interface ToolResultInput {
   textContent: string;
 }
 declare function extractTextContent(content: readonly unknown[]): string;
-/**
-* DSH persists the host return flag on a nested `tool-result` block. The
-* surrounding message or event need not carry an `error` field (approval and
-* sandbox denials are examples). Never let a renderer's missing exit marker
-* override that structured return, or accept an ambiguous nested return as
-* a clean result for another call.
+/** rc.2 persists a role=tool message with independent source and return IDs.
+* Both must bind the original call. PTC uses its own matched dispatch envelope.
+* Historical nested return records are not current rc.2 execution evidence.
 */
 declare function persistedToolResultStatus(data: unknown, callId: string, kind?: "tool/result" | "tool/ptc-dispatch", matchedStart?: boolean): "clean" | "failure" | "unknown";
 interface ToolOperation {
@@ -2431,6 +2399,11 @@ interface ActiveProfileHostLock {
 * Used by target preflight before a legacy profile can be migrated.
 */
 declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
+/** Verify published executable bytes at the reachable runtime/profile roots.
+* Registry SRI and installed manifests alone cannot authenticate loaded code.
+* Missing, duplicate, escaped or modified modules never pass this audit.
+*/
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string): boolean;
 declare function activeRendererModule(nodeModulesRoot: string, name: string): {
   bytes: string;
   path: string;
@@ -2788,10 +2761,6 @@ declare function proofCapabilityReport(kind: ProofKindV2, facts: Iterable<GuardE
   reasonCode?: string;
 };
 //#endregion
-//#region src/domain/alpha3-host.d.ts
-/** Exact 34-row alpha.3 runtime/web graph from the 2026-09-01 annex audit. */
-declare const ALPHA3_HOST_PACKAGES: PackageRow[];
-//#endregion
 //#region src/domain/recovery.d.ts
 interface RecoveryOptions {
   rejectedBindings?: Array<{
@@ -2848,62 +2817,66 @@ declare function carriesCleanupCondition(gap: CapabilityGap): boolean;
 declare function closingHint(projection: GuardProjection, item: GuardItem, evidenceIds?: string[]): string;
 declare function openItems(projection: GuardProjection): GuardItem[];
 /**
+* Why recovery is armed, recorded where the arm happens so the injected title
+* can name the real trigger instead of guessing one. An arm without an
+* auditable cause renders a neutral title, never a fabricated compaction or
+* resume (DSH-RF-02).
+*/
+type RecoveryCause = "compaction" | "resume" | "guard_reenabled" | "contract_updated" | "checkpoint_followup" | "boundary_update" | "explicit";
+/** The accurate injection title for one armed recovery (DSH-RF-02). */
+declare function recoveryTitle(causes: readonly string[]): string;
+/**
+* The v6 ordinary completion rule. The legacy rule states the pre-v6 protocol's
+* checkpoint gate; repeating it in the ordinary lane taught models that a
+* Guard checkpoint is a prerequisite for ordinary completion (DSH-RF-01), so
+* this lane states its own rule: completion is READ from persisted host facts,
+* uncertified work is still delivered honestly, and no Guard step authorizes
+* ordinary execution.
+*/
+declare const V6_ORDINARY_COMPLETION_RULE = "Ordinary completion is read from persisted host tool results and independent readback; uncertified work is delivered honestly and stays uncertified. No Guard checkpoint, binding, or target re-authorization is a prerequisite for ordinary work.";
+/** The same rule at a medium budget. */
+declare const V6_ORDINARY_COMPLETION_RULE_SHORT = "Ordinary completion is read from persisted host results; uncertified work is delivered honestly and needs no Guard checkpoint or re-authorization.";
+/** The same rule at emergency budget — still never a checkpoint prerequisite. */
+declare const V6_ORDINARY_COMPLETION_RULE_COMPACT = "Ordinary completion is read from persisted host results; no Guard checkpoint or re-authorization is required.";
+/**
+* The durable root authorization boundaries applicable to the CURRENT work:
+* pending prohibitions and root waits whose release is not verified, scoped to
+* the current unit's lineage. Historical sibling units and superseded records
+* stay auditable but never re-enter current guidance (RF08, review R2F2). One
+* selector, shared by both renderer lanes and the recovery digest, so no
+* surface can disagree about which boundaries are in force. Prohibitions are
+* selected from the DURABLE RECORD's kind, never from the core predicate: a
+* prohibition the core cannot verify (legacy_review) is still a prohibition
+* and still renders as DO NOT (coverage audit H1).
+*/
+declare function v6CurrentRootBoundaries(projection: GuardProjection): {
+  prohibitions: GuardItem[];
+  waits: GuardItem[];
+};
+/**
 * Content identity of a rendered recovery packet, bound to the contract
 * revision and epoch it was rendered from. The runtime compares digests before
 * re-injecting, so a repeatedly re-armed recovery with unchanged content is
 * injected once instead of looping (v0.2.1).
+*
+* In the default v6 ordinary lane the identity binds to the DISPLAYED current
+* feedback (status, predicates, open requirements, wait conditions) instead of
+* the legacy pending/evidence inventory: unrelated historical evidence changes
+* no predicate, so it must not re-arm the reminder, while a new requirement, a
+* failed result, a released wait, or an integrity change must (DSH-RF-01).
+* The core waterline (`as_of`) is deliberately excluded — it moves on every
+* event, which is exactly the noise the old digest turned into reminders.
 */
 declare function recoveryDigest(packet: string, projection: GuardProjection): string;
 declare function renderRecoveryPacket(projection: GuardProjection, options?: RecoveryOptions): string;
 //#endregion
-//#region src/domain/rc1-host.d.ts
-/** Exact 34-row rc.1 runtime/web graph from the 2026-09-03 native macOS audit. */
-declare const RC1_HOST_PACKAGES: PackageRow[];
-//#endregion
-//#region src/domain/rc015-host.d.ts
-/**
-* Exact 33-row DSH 0.1.5-rc.1 core graph.
-*
-* Provenance: every row is the npm registry `dist.integrity` of the exact
-* published tarball for the named version, read from
-* `https://registry.npmjs.org/<name>/0.1.5-rc.1` (and `4.0.2` for
-* `@deepseek-ai/cordis`, which is versioned independently of DSH). The single
-* resolver for this graph is an isolated DSH installation plus the repository
-* worktree lockfile, both installed from the public registry.
-*
-* This is a REGISTRY-DERIVED graph, not a natively audited one: the cohort
-* carries `auditedPlatforms: []` until a native macOS/Windows host audit runs,
-* and `auditProvenance: 'registry-derived-pending-native-audit'` is bound into
-* the host-lock digest so a certificate can never claim a native pass this round
-* did not produce. (`acceptedPlatforms` is the separate, wider gate: this cohort
-* accepts evaluation on both platforms while claiming an audit on neither.)
-* `dshmarket` is deliberately absent: market identity is verified independently
-* by the action adapter and never participates in the core lock.
-*
-* The row-name set is unchanged from the historical 0.1.2-rc.1 cohort's 33
-* core rows: no package entered or left the audited core graph, so a future
-* reader must not infer a graph change from the version bump alone. The count
-* is asserted from this list, never assumed.
-*/
-declare const RC015_HOST_PACKAGES: PackageRow[];
-//#endregion
-//#region src/domain/rc015-rc2-host.d.ts
-/** Exact npm registry identities for DSH 0.1.5-rc.2 (Cordis 4.0.2).
-* Native acceptance is recorded separately; these rows are registry-derived.
-*/
-declare const RC015_RC2_HOST_PACKAGES: PackageRow[];
-//#endregion
 //#region src/domain/session-events.d.ts
 /**
-* Read a validated, stable event snapshot from the DSH Session V3 API.
+* Read a validated, stable event snapshot from the DSH Session V4 API.
 *
-* Session V3 replaced the V2 `events` getter with `snapshotEvents()`. Context
-* Guard supports only the V3 API: a session object that does not expose that
-* method is an unsupported host, never a reason to fall back to a legacy
-* accessor. Failing loud here keeps a V2-shaped object from being projected as
-* if its events had V3 semantics — the two vocabularies differ (surfaces,
-* `assistant/chunk` vs embedded streams, `session/end-seed` payload), so a
-* silent fallback would derive contract state from a log it cannot read.
+* Exact rc.2 still exposes the deprecated synchronous snapshotEvents() API.
+* This adapter retains that existing dependency; it does not promise support
+* for remote history or add a fallback to a legacy events getter.
 *
 * Guard is a READER of the durable log, so the envelope check below is the one
 * part of log validation it owns itself. The host validates a session it
@@ -2912,7 +2885,7 @@ declare const RC015_RC2_HOST_PACKAGES: PackageRow[];
 * mis-numbered an event would fabricate contract state rather than report a
 * damaged log.
 *
-* The V3 contract also asks a reader to refuse an unrecognized event type that
+* The V4 contract also asks a reader to refuse an unrecognized event type that
 * is not marked `ignorable`. Guard does NOT implement that half, deliberately:
 * the host's persistence reader already refuses such a log before publishing a
 * Session, and a whitelist of event types Guard happens to know would
@@ -2926,8 +2899,8 @@ declare class SessionApiError extends Error {
   readonly code: string;
   constructor(message: string, code?: string);
 }
-/** The V3 session surface Guard reads: one bounded, immutable event snapshot. */
-interface V3SessionLike {
+/** The V4 session surface Guard reads: one bounded, immutable event snapshot. */
+interface V4SessionLike {
   snapshotEvents(fromSeq?: number, toSeqExclusive?: number): readonly unknown[];
 }
 declare function snapshotSessionEvents(session: unknown): readonly unknown[];
@@ -3056,4 +3029,9 @@ declare function projectCoreV2(snapshot: Row): Row;
 //#region src/core-v2/session.d.ts
 declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: GuardProjection, displayOrigins?: NonNullable<GuardProjection["coreV2RequirementOrigins"]>): Record<string, unknown> | undefined;
 //#endregion
-export { ProofHostSurface as $, CapabilityFact as $a, DeferAuthorization as $i, DiagnosisNextAction as $n, opensConditionLead as $o, selectHostCohort as $r, auditedDefaultWorkdirProvider as $t, snapshotSessionEvents as A, TargetSourceKind as Aa, captureClause as Ai, parseGitCommandManifest as An, clauseAsksOwnQuestion as Ao, HOST_CAPABILITY_PACKAGE_GROUPS as Ar, semanticActionFromCommand as As, evidenceCoverage as At, carriesCleanupCondition as B, ReleaseOperation as Ba, BoundaryQualification as Bi, parseShellCommand as Bn, introducesActionClause as Bo, HostLockEvaluation as Br, FirstStepInjection as Bt, progressFingerprint as C, NeedsReviewFact as Ca, isFrozenV042RebindResponse as Ci, GitTargetIdentity as Cn, InterpretOptions as Co, AuditedExecutable as Cr, StatefulAction as Cs, scopeCoverageDigest as Ct, SESSION_EVENT_ENVELOPE_INVALID as D, TargetCaptureReasonCode as Da, certifyCheckpoint as Di, createGitPrestateEnvelope as Dn, ScopeInterpretation as Do, ExecutableIdentity as Dr, requestedIdentityKey as Ds, validateProofManifestV2 as Dt, SESSION_API_UNSUPPORTED as E, SourceSpan as Ea, RejectedBinding as Ei, commitTreeSnapshotDigest as En, QualificationStatus as Eo, EXPECTED_HOST_PACKAGES as Er, isStatefulAction as Es, validateProofManifest as Et, CLEANUP_CONDITION_RULE_COMPACT as F, WorkUnit as Fa, extractMethod as Fi, ParsedShell as Fn, hasOrderedCoordination as Fo, HostCapabilityRequest as Fr, digestStrings as Fs, ManifestIssue as Ft, renderRecoveryPacket as G, RebindProposal as Ga, effectuateBoundary as Gi, ToolSubject as Gn, isQuestionScopeNeedingReview as Go, LEGACY_HOST_COHORTS as Gr, firstStepGuidanceV6 as Gt, closingHint as H, BoundedSource as Ha, GoalActivationState as Hi, hasCurrentCertificate as Hn, isExplanationScope as Ho, HostPlatform as Hr, LifecyclePhase as Ht, CLEANUP_CONDITION_RULE_SHORT as I, createProjection as Ia, extractOperation as Ii, ShellParseStatus as In, hasQuestionScope as Io, HostCohort as Ir, normalizeClause as Is, OperationVerbEntry as It, PROOF_KINDS as J, proposeRebindOutcome as Ja, AssetInterpretationFact as Ji, extractToolSubject as Jn, kindOfScope as Jo, evaluateExternalWaitCapability as Jr, ActiveProfileHostLock as Jt, ALPHA3_HOST_PACKAGES as K, confirmRebind as Ka, isCurrentAcceptedBoundary as Ki, evidenceFromPersistedToolResult as Kn, isRestatement as Ko, bindExecutableIdentity as Kr, lifecyclePhase as Kt, DEFAULT_RECOVERY_CHAR_BUDGET as L, PackageRow as La, isInformationalMessage as Li, canonicalArgvFromCommand as Ln, hasWorkPredicate as Lo, HostCohortSelection as Lr, sanitizeClauseText as Ls, validateManifest as Lt, RC015_HOST_PACKAGES as M, TargetValue as Ma, classifyClause as Mi, verifiedLinearCommitReadback as Mn, clauseIsProtected as Mo, HostAuditProvenance as Mr, validateActionManifest as Ms, isVerifyingCapability as Mt, RC1_HOST_PACKAGES as N, VerificationContract as Na, environmentDefaultRepositoryTarget as Ni, CanonicalArgv as Nn, explanationHasActionResidue as No, HostCapabilityEvaluation as Nr, validateActionTarget as Ns, COMMAND_SURFACE_MANIFEST as Nt, SessionApiError as O, TargetCaptureStatus as Oa, CaptureScope as Oi, executeRevalidatedGitEffect as On, actionVerbMatches as Oo, ExecutableIdentityBinding as Or, requestedTargetAuthorizesMutation as Os, EvidenceFacetCoverage as Ot, CLEANUP_CONDITION_RULE as P, WaitAuthorization as Pa, extractArtifactPaths as Pi, CanonicalCommandSurface as Pn, governedClauseRestrictsExecution as Po, HostCapabilityId as Pr, canonicalizePath as Ps, CommandSurfaceManifest as Pt, PROOF_PROTOCOL_VERSION_V2 as Q, replayRebindResult as Qa, BoundaryQualificationKind as Qi, CertificationSupport as Qn, namedActions as Qo, hostVersionFromPackages as Qr, auditedDefaultWorkdirHost as Qt, MIN_RECOVERY_CHAR_BUDGET as R, ReleaseGateDecision as Ra, segmentClauses as Ri, isRunExecutable as Rn, interpretClause as Ro, HostCohortSelectionReason as Rr, sanitizeUrl as Rs, ClaimedMessage as Rt, observeAssistantOutcome as S, MessageCoverage as Sa, ParsedConfirmation as Si, GitPrestateEnvelope as Sn, GRANTED_QUALIFICATION as So, ALPHA2_HOST_PACKAGES as Sr, SemanticAction as Ss, requiredSubjectsOf as St, v6TestPredicate as T, PersistenceAuthorization as Ta, CheckpointResult as Ti, commitIndexSnapshotDigest as Tn, QualificationReason as To, DEFAULT_HOST_LOCK as Tr, boundedArtifactChoiceMatches as Ts, sessionQueryV2 as Tt, openItems as U, ProposeOutcome as Ua, GoalBoundaryAccess as Ui, ToolCallInput as Un, isInformationalFragment as Uo, HostProfileKind as Ur, claimedBatchHasRealRootInput as Ut, cleanupConditionFor as V, ReleaseSettlement as Va, BoundaryRequest as Vi, goalCompletionDenial as Vn, isExecutableItem as Vo, HostLockStatus as Vr, FirstStepPreviewInput as Vt, recoveryDigest as W, RebindArgs as Wa, availableBoundaryQualifications as Wi, ToolResultInput as Wn, isOpenObligation as Wo, HostToolSurface as Wr, firstStepGuidance as Wt, PROOF_MANIFEST_DOMAIN_V2 as X, rebindAttemptKey as Xa, BindingActionClosure as Xi, persistedToolResultStatus as Xn, maskCodeSpans as Xo, evaluateHostLock as Xr, TargetHostGraph as Xt, PROOF_KINDS_V2 as Y, proposeRebindV042 as Ya, AssetObligation as Yi, isDeterministicCheck as Yn, legacyQuestionReadingIsInformational as Yo, evaluateHostCapability as Yr, HostProfileError as Yt, PROOF_PROTOCOL_VERSION as Z, rebindResponse as Za, BoundaryDisposition as Zi, withDurability as Zn, maskQuotedSpans as Zo, evaluateToolSurfaceCapability as Zr, activeRendererModule as Zt, decisionBoundaryKey as _, GuardItemKind as _a, TaskIntent as _i, GitCommandParseResult as _n, removalIsPartiallyKnown as _o, rootLocatorFlavor as _r, SEMANTIC_ACTIONS as _s, proofDigestV2 as _t, CONTROL_RECORD_PREFIX as a, EvidenceBinding as aa, SUPPORTED_HOST_RANGE as ai, inspectTargetHostGraph as an, DerivedProcessFacts as ao, evidenceAvailabilityReason as ar, restatedContentOf as as, ProofObligation as at, latestAssistantText as b, GuardProjection as ba, classifyUserInteraction as bi, GitEffectRunner as bn, Executee as bo, ACTIVE_HOST_LAUNCHER_VERSION as br, STOP_PROTOCOL_VERSION_V2 as bs, proofOperationMatches as bt, NO_PROGRESS_RECORD_PREFIX as c, EvidenceRole as ca, evaluateMinimumHostVersion as ci, readActiveHostGraph as cn, ProcessFactSource as co, CAPTURE_V042_NOTICE as cr, statefulActionsOfScope as cs, SessionQuery as ct, assessmentAction as d, GoalRef as da, currentContractDigest as di, verifyComposedHostLockDump as dn, actionHasCertificationPath as do, PROTOCOL_V4_NOTICE as dr, ACTION_MANIFEST_VERSION as ds, bindProofV2ToProjection as dt, DelegationRef as ea, HostVersionDecision as ei, auditedForegroundRenderers as en, CapabilityGap as eo, Repairability as er, opensWithDirective as es, ProofKind as et, assessmentOutcomePredicate as f, GuardBoundary as fa, AuthorityBlock as fi, GIT_COMMAND_MANIFEST_IDS as fn, admissibleForRemoval as fo, PROTOCOL_V5_NOTICE as fr, ActionManifest as fs, canonicalProjection as ft, decideTurnStopping as g, GuardItem as ga, segmentAuthorityBlocks as gi, GitCommandManifest as gn, removalIsComplete as go, legacyRecordsNeedingReview as gr, CERTIFICATE_VERSION_V2 as gs, proofDigest as gt, decideTurnBoundary as h, GuardIntegrity as ha, authorityCaptureCounts as hi, GitCommandAccepted as hn, partialFailureOf as ho, deriveProjection as hr, CERTIFICATE_VERSION as hs, proofCapabilityReport as ht, AssistantOutcomeObservation as i, DerivedEnvelope as ia, ParsedHostVersion as ii, injectActiveProfileHostLock as in, DependencyStatus as io, deriveItemDiagnosis as ir, reportingHeadGoverns as is, ProofManifestV2 as it, RC015_RC2_HOST_PACKAGES as j, TargetTuple as ja, captureItem as ji, revalidateGitPrestate as jn, clauseIsGoverned as jo, HOST_COHORTS as jr, semanticActionFromText as js, evidenceMatchesItem as jt, V3SessionLike as k, TargetSource as ka, ClauseSegment as ki, gitCommandMatchesTarget as kn, clarifiedSpanOf as ko, GOAL_HOST_PACKAGES as kr, requestedTargetMatchesResolved as ks, bindingSatisfies as kt, NO_PROGRESS_TURNS_BEFORE_STOP as l, ExpectedTransition as la, parseHostVersion as li, resolveActiveProfileHostLock as ln, ProcessOutcomeReason as lo, DEFAULT_DELEGATION_TOOL_NAMES as lr, verbIsNegated as ls, SessionQueryV2 as lt, currentActionBases as m, GuardEvidence as ma, AuthorityKind as mi, GitAdapterAction as mn, capabilityFactOf as mo, applyUpgradeEligibility as mr, BOUNDED_ARTIFACT_TYPES as ms, createProofManifestV2 as mt, projectCoreV2 as n, DeriveResult as na, LATEST_SUPPORTED_HOST_VERSION as ni, hostLockContextFromComposedDump as nn, DEPENDENCY_FREE_ONLY_CONDITION as no, UnifiedItemDiagnosis as nr, qualificationOfClause as ns, ProofKindV2 as nt, CompletionDisposition as o, EvidenceOutcome as oa, SUPPORTED_HOST_VERSIONS as oi, packageRowsFromActiveGraph as on, OperationAttribution as oo, itemDiagnosis as or, semanticActionOfScope as os, ProofObligationV2 as ot, classifyCompletionClaim as p, GuardCheckpoint as pa, AuthorityBlockKind as pi, GIT_COMMAND_TEMPLATES as pn, capabilityConsequence as po, PROTOCOL_V6_NOTICE as pr, ActionSpec as ps, createProofManifest as pt, PROOF_CAPABILITY_MATRIX as q, proposeRebind as qa, qualifyBoundary as qi, extractTextContent as qn, itemHoldsExecutionAuthority as qo, bindLiveGoalCapability as qr, previewFirstStepInjection as qt, supersedeItem as r, DeriveScope as ra, MIN_SUPPORTED_HOST_VERSION as ri, hostLockRowsFromComposedDump as rn, DeclaredOperationResult as ro, capabilityRemedyPhrase as rr, questionHeadsClause as rs, ProofManifest as rt, CurrentActionBasis as s, EvidenceParseStatus as sa, compareHostVersions as si, packageRowsFromPnpmLock as sn, ProcessExitStatus as so, relevantEvidence as sr, splitTextFragments as ss, ProofSurface as st, projectSessionCoreV2 as t, DeriveConfig as ta, HostVersionStatus as ti, combineHostPolicy as tn, CapabilityRemedy as to, TaskKind as tr, presentExplanationHead as ts, ProofKindCapability as tt, TurnStoppingDecision as u, ExternalOperation as ua, satisfiesSupportedHostRange as ui, resolveInstalledHostLock as un, RemovalOutcomeReport as uo, PROTOCOL_V3_NOTICE as ur, ACTION_MANIFEST as us, bindProofToProjection as ut, isRootPauseRequest as v, GuardItemStatus as va, UserInteractionKind as vi, GitCommandRejected as vn, AuthorityDisposition as vo, ACTIVE_HOST_COHORT_ID as vr, STATEFUL_ACTIONS as vs, proofEvidenceConstraints as vt, testOutcomePredicate as w, NeedsReviewReason as wa, parseConfirmationMessage as wi, LinearCommitReadback as wn, LEGACY_QUALIFICATION as wo, BASE_HOST_PACKAGES as wr, actionCompatible as ws, sessionQuery as wt, latestRootInstruction as x, HostStatus as xa, CONFIRM_LINE_PATTERN as xi, GitPrestateCheck as xn, ExecutionQualification as xo, ALPHA2_DSHMARKET_139_HOST_PACKAGES as xr, SUPPORTED_EVIDENCE_ADAPTERS as xs, proofV2Rejection as xt, isWholeTaskCompletionClaim as y, GuardOperation as ya, classifyTaskIntent as yi, GitEffectExecution as yn, DirectiveClass as yo, ACTIVE_HOST_COHORT_IDS as yr, STOP_PROTOCOL_VERSION as ys, proofHostSurfacesOf as yt, RecoveryOptions as z, ReleaseObservedIdentity as za, BoundaryEffectuation as zi, parsePwshCommand as zn, interpretMessage as zo, HostLockContext as zr, sha256 as zs, FIRST_STEP_GUIDANCE as zt };
+//#region src/domain/rc017-rc2-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Native platform acceptance remains a separate, currently pending fact. */
+declare const RC017_RC2_HOST_PACKAGES: PackageRow[];
+//#endregion
+export { PROOF_MANIFEST_DOMAIN_V2 as $, proposeRebindV042 as $a, AssetObligation as $i, isDeterministicCheck as $n, legacyQuestionReadingIsInformational as $o, evaluateToolSurfaceCapability as $r, TargetHostGraph as $t, V4SessionLike as A, SourceSpan as Aa, certifyCheckpoint as Ai, commitTreeSnapshotDigest as An, QualificationStatus as Ao, ExecutableIdentity as Ar, isStatefulAction as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, createProjection as Ba, isInformationalMessage as Bi, ShellParseStatus as Bn, hasQuestionScope as Bo, HostCohortSelection as Br, normalizeClause as Bs, validateManifest as Bt, observeAssistantOutcome as C, GuardOperation as Ca, CONFIRM_LINE_PATTERN as Ci, GitEffectExecution as Cn, DirectiveClass as Co, ACTIVE_HOST_COHORT_ID as Cr, STOP_PROTOCOL_VERSION as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, NeedsReviewFact as Da, CheckpointResult as Di, GitTargetIdentity as Dn, InterpretOptions as Do, BASE_HOST_PACKAGES as Dr, StatefulAction as Ds, sessionQuery as Dt, v6TestPredicate as E, MessageCoverage as Ea, parseConfirmationMessage as Ei, GitPrestateEnvelope as En, GRANTED_QUALIFICATION as Eo, AuditedExecutable as Er, SemanticAction as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, TargetTuple as Fa, classifyClause as Fi, revalidateGitPrestate as Fn, clauseIsGoverned as Fo, HostAuditProvenance as Fr, semanticActionFromText as Fs, isVerifyingCapability as Ft, openItems as G, ReleaseSettlement as Ga, BoundaryRequest as Gi, goalCompletionDenial as Gn, isExecutableItem as Go, HostPlatform as Gr, LifecyclePhase as Gt, carriesCleanupCondition as H, ReleaseGateDecision as Ha, BOUNDARY_RECORD_PREFIX as Hi, isRunExecutable as Hn, interpretClause as Ho, HostLockContext as Hr, sanitizeUrl as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, TargetValue as Ia, environmentDefaultRepositoryTarget as Ii, verifiedLinearCommitReadback as In, clauseIsProtected as Io, HostCapabilityEvaluation as Ir, validateActionManifest as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, RebindArgs as Ja, availableBoundaryQualifications as Ji, ToolResultInput as Jn, isOpenObligation as Jo, bindExecutableIdentity as Jr, firstStepGuidanceV6 as Jt, recoveryDigest as K, BoundedSource as Ka, GoalActivationState as Ki, hasCurrentCertificate as Kn, isExplanationScope as Ko, HostProfileKind as Kr, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, VerificationContract as La, extractArtifactPaths as Li, CanonicalArgv as Ln, explanationHasActionResidue as Lo, HostCapabilityId as Lr, validateActionTarget as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, TargetCaptureStatus as Ma, ClauseSegment as Mi, executeRevalidatedGitEffect as Mn, actionVerbMatches as Mo, GOAL_HOST_PACKAGES as Mr, requestedTargetAuthorizesMutation as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, TargetSource as Na, captureClause as Ni, gitCommandMatchesTarget as Nn, clarifiedSpanOf as No, HOST_CAPABILITY_PACKAGE_GROUPS as Nr, requestedTargetMatchesResolved as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, NeedsReviewReason as Oa, RejectedBinding as Oi, LinearCommitReadback as On, LEGACY_QUALIFICATION as Oo, DEFAULT_HOST_LOCK as Or, actionCompatible as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, TargetSourceKind as Pa, captureItem as Pi, parseGitCommandManifest as Pn, clauseAsksOwnQuestion as Po, HOST_COHORTS as Pr, semanticActionFromCommand as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, proposeRebindOutcome as Qa, AssetInterpretationFact as Qi, extractToolSubject as Qn, kindOfScope as Qo, evaluateHostLock as Qr, HostProfileError as Qt, RecoveryOptions as R, WaitAuthorization as Ra, extractMethod as Ri, CanonicalCommandSurface as Rn, governedClauseRestrictsExecution as Ro, HostCapabilityRequest as Rr, canonicalizePath as Rs, ManifestIssue as Rt, latestRootInstruction as S, GuardItemStatus as Sa, classifyUserInteraction as Si, GitCommandRejected as Sn, AuthorityDisposition as So, rootLocatorFlavor as Sr, STATEFUL_ACTIONS as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, HostStatus as Ta, isFrozenV042RebindResponse as Ti, GitPrestateCheck as Tn, ExecutionQualification as To, ACTIVE_HOST_LAUNCHER_VERSION as Tr, SUPPORTED_EVIDENCE_ADAPTERS as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, ReleaseObservedIdentity as Ua, BoundaryEffectuation as Ui, parsePwshCommand as Un, interpretMessage as Uo, HostLockEvaluation as Ur, sha256 as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, PackageRow as Va, segmentClauses as Vi, canonicalArgvFromCommand as Vn, hasWorkPredicate as Vo, HostCohortSelectionReason as Vr, sanitizeClauseText as Vs, ClaimedMessage as Vt, closingHint as W, ReleaseOperation as Wa, BoundaryQualification as Wi, parseShellCommand as Wn, introducesActionClause as Wo, HostLockStatus as Wr, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, confirmRebind as Xa, isCurrentAcceptedBoundary as Xi, evidenceFromPersistedToolResult as Xn, isRestatement as Xo, evaluateExternalWaitCapability as Xr, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, RebindProposal as Ya, effectuateBoundary as Yi, ToolSubject as Yn, isQuestionScopeNeedingReview as Yo, bindLiveGoalCapability as Yr, lifecyclePhase as Yt, PROOF_KINDS as Z, proposeRebind as Za, qualifyBoundary as Zi, extractTextContent as Zn, itemHoldsExecutionAuthority as Zo, evaluateHostCapability as Zr, ActiveProfileHostLock as Zt, decideTurnStopping as _, GuardCheckpoint as _a, authorityCaptureCounts as _i, GIT_COMMAND_TEMPLATES as _n, capabilityConsequence as _o, PROTOCOL_V5_NOTICE as _r, ActionSpec as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, DeriveConfig as aa, MIN_SUPPORTED_HOST_VERSION as ai, combineHostPolicy as an, CapabilityRemedy as ao, TaskKind as ar, presentExplanationHead as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, GuardItem as ba, UserInteractionKind as bi, GitCommandManifest as bn, removalIsComplete as bo, deriveProjection as br, CERTIFICATE_VERSION_V2 as bs, proofDigestV2 as bt, CurrentActionBasis as c, DerivedEnvelope as ca, SUPPORTED_HOST_VERSIONS as ci, injectActiveProfileHostLock as cn, DependencyStatus as co, deriveItemDiagnosis as cr, reportingHeadGoverns as cs, ProofObligation as ct, TurnStoppingDecision as d, EvidenceParseStatus as da, parseHostVersion as di, packageRowsFromPnpmLock as dn, ProcessExitStatus as do, nativeFileTwoRole as dr, splitTextFragments as ds, SessionQuery as dt, BindingActionClosure as ea, hostVersionFromPackages as ei, activeRendererModule as en, rebindAttemptKey as eo, persistedToolResultStatus as er, maskCodeSpans as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, EvidenceRole as fa, satisfiesSupportedHostRange as fi, readActiveHostGraph as fn, ProcessFactSource as fo, relevantEvidence as fr, statefulActionsOfScope as fs, SessionQueryV2 as ft, decideTurnBoundary as g, GuardBoundary as ga, AuthorityKind as gi, GIT_COMMAND_MANIFEST_IDS as gn, admissibleForRemoval as go, PROTOCOL_V4_NOTICE as gr, ActionManifest as gs, createProofManifest as gt, currentActionBases as h, GoalRef as ha, AuthorityBlockKind as hi, verifyComposedHostLockDump as hn, actionHasCertificationPath as ho, PROTOCOL_V3_NOTICE as hr, ACTION_MANIFEST_VERSION as hs, canonicalProjection as ht, supersedeItem as i, DelegationRef as ia, LATEST_SUPPORTED_HOST_VERSION as ii, auditedHostImplementation as in, CapabilityGap as io, Repairability as ir, opensWithDirective as is, ProofKindCapability as it, snapshotSessionEvents as j, TargetCaptureReasonCode as ja, CaptureScope as ji, createGitPrestateEnvelope as jn, ScopeInterpretation as jo, ExecutableIdentityBinding as jr, requestedIdentityKey as js, EvidenceFacetCoverage as jt, SessionApiError as k, PersistenceAuthorization as ka, bindingIndividuallyAccepted as ki, commitIndexSnapshotDigest as kn, QualificationReason as ko, EXPECTED_HOST_PACKAGES as kr, boundedArtifactChoiceMatches as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, EvidenceBinding as la, compareHostVersions as li, inspectTargetHostGraph as ln, DerivedProcessFacts as lo, evidenceAvailabilityReason as lr, restatedContentOf as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, ExternalOperation as ma, AuthorityBlock as mi, resolveInstalledHostLock as mn, RemovalOutcomeReport as mo, DEFAULT_DELEGATION_TOOL_NAMES as mr, ACTION_MANIFEST as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, BoundaryQualificationKind as na, HostVersionDecision as ni, auditedDefaultWorkdirProvider as nn, replayRebindResult as no, CertificationSupport as nr, namedActions as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, DeriveResult as oa, ParsedHostVersion as oi, hostLockContextFromComposedDump as on, DEPENDENCY_FREE_ONLY_CONDITION as oo, UnifiedItemDiagnosis as or, qualificationOfClause as os, ProofManifest as ot, assessmentOutcomePredicate as p, ExpectedTransition as pa, currentContractDigest as pi, resolveActiveProfileHostLock as pn, ProcessOutcomeReason as po, CAPTURE_V042_NOTICE as pr, verbIsNegated as ps, bindProofToProjection as pt, recoveryTitle as q, ProposeOutcome as qa, GoalBoundaryAccess as qi, ToolCallInput as qn, isInformationalFragment as qo, HostToolSurface as qr, firstStepGuidance as qt, projectCoreV2 as r, DeferAuthorization as ra, HostVersionStatus as ri, auditedForegroundRenderers as rn, CapabilityFact as ro, DiagnosisNextAction as rr, opensConditionLead as rs, ProofKind as rt, CompletionDisposition as s, DeriveScope as sa, SUPPORTED_HOST_RANGE as si, hostLockRowsFromComposedDump as sn, DeclaredOperationResult as so, capabilityRemedyPhrase as sr, questionHeadsClause as ss, ProofManifestV2 as st, RC017_RC2_HOST_PACKAGES as t, BoundaryDisposition as ta, selectHostCohort as ti, auditedDefaultWorkdirHost as tn, rebindResponse as to, withDurability as tr, maskQuotedSpans as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, EvidenceOutcome as ua, evaluateMinimumHostVersion as ui, packageRowsFromActiveGraph as un, OperationAttribution as uo, itemDiagnosis as ur, semanticActionOfScope as us, ProofSurface as ut, decisionBoundaryKey as v, GuardEvidence as va, segmentAuthorityBlocks as vi, GitAdapterAction as vn, capabilityFactOf as vo, PROTOCOL_V6_NOTICE as vr, BOUNDED_ARTIFACT_TYPES as vs, proofCapabilityReport as vt, progressFingerprint as w, GuardProjection as wa, ParsedConfirmation as wi, GitEffectRunner as wn, Executee as wo, ACTIVE_HOST_COHORT_IDS as wr, STOP_PROTOCOL_VERSION_V2 as ws, proofV2Rejection as wt, latestAssistantText as x, GuardItemKind as xa, classifyTaskIntent as xi, GitCommandParseResult as xn, removalIsPartiallyKnown as xo, legacyRecordsNeedingReview as xr, SEMANTIC_ACTIONS as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, GuardIntegrity as ya, TaskIntent as yi, GitCommandAccepted as yn, partialFailureOf as yo, applyUpgradeEligibility as yr, CERTIFICATE_VERSION as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, WorkUnit as za, extractOperation as zi, ParsedShell as zn, hasOrderedCoordination as zo, HostCohort as zr, digestStrings as zs, OperationVerbEntry as zt };

package/dist/index.d.ts

@@ -1,11 +1,23 @@
-import { $ as ProofHostSurface, $a as CapabilityFact, $i as DeferAuthorization, $n as DiagnosisNextAction, $o as opensConditionLead, $r as selectHostCohort, $t as auditedDefaultWorkdirProvider, A as snapshotSessionEvents, Aa as TargetSourceKind, Ai as captureClause, An as parseGitCommandManifest, Ao as clauseAsksOwnQuestion, Ar as HOST_CAPABILITY_PACKAGE_GROUPS, As as semanticActionFromCommand, At as evidenceCoverage, B as carriesCleanupCondition, Ba as ReleaseOperation, Bi as BoundaryQualification, Bn as parseShellCommand, Bo as introducesActionClause, Br as HostLockEvaluation, Bt as FirstStepInjection, C as progressFingerprint, Ca as NeedsReviewFact, Ci as isFrozenV042RebindResponse, Cn as GitTargetIdentity, Co as InterpretOptions, Cr as AuditedExecutable, Cs as StatefulAction, Ct as scopeCoverageDigest, D as SESSION_EVENT_ENVELOPE_INVALID, Da as TargetCaptureReasonCode, Di as certifyCheckpoint, Dn as createGitPrestateEnvelope, Do as ScopeInterpretation, Dr as ExecutableIdentity, Ds as requestedIdentityKey, Dt as validateProofManifestV2, E as SESSION_API_UNSUPPORTED, Ea as SourceSpan, Ei as RejectedBinding, En as commitTreeSnapshotDigest, Eo as QualificationStatus, Er as EXPECTED_HOST_PACKAGES, Es as isStatefulAction, Et as validateProofManifest, F as CLEANUP_CONDITION_RULE_COMPACT, Fa as WorkUnit, Fi as extractMethod, Fn as ParsedShell, Fo as hasOrderedCoordination, Fr as HostCapabilityRequest, Fs as digestStrings, Ft as ManifestIssue, G as renderRecoveryPacket, Ga as RebindProposal, Gi as effectuateBoundary, Gn as ToolSubject, Go as isQuestionScopeNeedingReview, Gr as LEGACY_HOST_COHORTS, Gt as firstStepGuidanceV6, H as closingHint, Ha as BoundedSource, Hi as GoalActivationState, Hn as hasCurrentCertificate, Ho as isExplanationScope, Hr as HostPlatform, Ht as LifecyclePhase, I as CLEANUP_CONDITION_RULE_SHORT, Ia as createProjection, Ii as extractOperation, In as ShellParseStatus, Io as hasQuestionScope, Ir as HostCohort, Is as normalizeClause, It as OperationVerbEntry, J as PROOF_KINDS, Ja as proposeRebindOutcome, Ji as AssetInterpretationFact, Jn as extractToolSubject, Jo as kindOfScope, Jr as evaluateExternalWaitCapability, Jt as ActiveProfileHostLock, K as ALPHA3_HOST_PACKAGES, Ka as confirmRebind, Ki as isCurrentAcceptedBoundary, Kn as evidenceFromPersistedToolResult, Ko as isRestatement, Kr as bindExecutableIdentity, Kt as lifecyclePhase, L as DEFAULT_RECOVERY_CHAR_BUDGET, La as PackageRow, Li as isInformationalMessage, Ln as canonicalArgvFromCommand, Lo as hasWorkPredicate, Lr as HostCohortSelection, Ls as sanitizeClauseText, Lt as validateManifest, M as RC015_HOST_PACKAGES, Ma as TargetValue, Mi as classifyClause, Mn as verifiedLinearCommitReadback, Mo as clauseIsProtected, Mr as HostAuditProvenance, Ms as validateActionManifest, Mt as isVerifyingCapability, N as RC1_HOST_PACKAGES, Na as VerificationContract, Ni as environmentDefaultRepositoryTarget, Nn as CanonicalArgv, No as explanationHasActionResidue, Nr as HostCapabilityEvaluation, Ns as validateActionTarget, Nt as COMMAND_SURFACE_MANIFEST, O as SessionApiError, Oa as TargetCaptureStatus, Oi as CaptureScope, On as executeRevalidatedGitEffect, Oo as actionVerbMatches, Or as ExecutableIdentityBinding, Os as requestedTargetAuthorizesMutation, Ot as EvidenceFacetCoverage, P as CLEANUP_CONDITION_RULE, Pa as WaitAuthorization, Pi as extractArtifactPaths, Pn as CanonicalCommandSurface, Po as governedClauseRestrictsExecution, Pr as HostCapabilityId, Ps as canonicalizePath, Pt as CommandSurfaceManifest, Q as PROOF_PROTOCOL_VERSION_V2, Qa as replayRebindResult, Qi as BoundaryQualificationKind, Qn as CertificationSupport, Qo as namedActions, Qr as hostVersionFromPackages, Qt as auditedDefaultWorkdirHost, R as MIN_RECOVERY_CHAR_BUDGET, Ra as ReleaseGateDecision, Ri as segmentClauses, Rn as isRunExecutable, Ro as interpretClause, Rr as HostCohortSelectionReason, Rs as sanitizeUrl, Rt as ClaimedMessage, S as observeAssistantOutcome, Sa as MessageCoverage, Si as ParsedConfirmation, Sn as GitPrestateEnvelope, So as GRANTED_QUALIFICATION, Sr as ALPHA2_HOST_PACKAGES, Ss as SemanticAction, St as requiredSubjectsOf, T as v6TestPredicate, Ta as PersistenceAuthorization, Ti as CheckpointResult, Tn as commitIndexSnapshotDigest, To as QualificationReason, Tr as DEFAULT_HOST_LOCK, Ts as boundedArtifactChoiceMatches, Tt as sessionQueryV2, U as openItems, Ua as ProposeOutcome, Ui as GoalBoundaryAccess, Un as ToolCallInput, Uo as isInformationalFragment, Ur as HostProfileKind, Ut as claimedBatchHasRealRootInput, V as cleanupConditionFor, Va as ReleaseSettlement, Vi as BoundaryRequest, Vn as goalCompletionDenial, Vo as isExecutableItem, Vr as HostLockStatus, Vt as FirstStepPreviewInput, W as recoveryDigest, Wa as RebindArgs, Wi as availableBoundaryQualifications, Wn as ToolResultInput, Wo as isOpenObligation, Wr as HostToolSurface, Wt as firstStepGuidance, X as PROOF_MANIFEST_DOMAIN_V2, Xa as rebindAttemptKey, Xi as BindingActionClosure, Xn as persistedToolResultStatus, Xo as maskCodeSpans, Xr as evaluateHostLock, Xt as TargetHostGraph, Y as PROOF_KINDS_V2, Ya as proposeRebindV042, Yi as AssetObligation, Yn as isDeterministicCheck, Yo as legacyQuestionReadingIsInformational, Yr as evaluateHostCapability, Yt as HostProfileError, Z as PROOF_PROTOCOL_VERSION, Za as rebindResponse, Zi as BoundaryDisposition, Zn as withDurability, Zo as maskQuotedSpans, Zr as evaluateToolSurfaceCapability, Zt as activeRendererModule, _ as decisionBoundaryKey, _a as GuardItemKind, _i as TaskIntent, _n as GitCommandParseResult, _o as removalIsPartiallyKnown, _r as rootLocatorFlavor, _s as SEMANTIC_ACTIONS, _t as proofDigestV2, a as CONTROL_RECORD_PREFIX, aa as EvidenceBinding, ai as SUPPORTED_HOST_RANGE, an as inspectTargetHostGraph, ao as DerivedProcessFacts, ar as evidenceAvailabilityReason, as as restatedContentOf, at as ProofObligation, b as latestAssistantText, ba as GuardProjection, bi as classifyUserInteraction, bn as GitEffectRunner, bo as Executee, br as ACTIVE_HOST_LAUNCHER_VERSION, bs as STOP_PROTOCOL_VERSION_V2, bt as proofOperationMatches, c as NO_PROGRESS_RECORD_PREFIX, ca as EvidenceRole, ci as evaluateMinimumHostVersion, cn as readActiveHostGraph, co as ProcessFactSource, cr as CAPTURE_V042_NOTICE, cs as statefulActionsOfScope, ct as SessionQuery, d as assessmentAction, da as GoalRef, di as currentContractDigest, dn as verifyComposedHostLockDump, do as actionHasCertificationPath, dr as PROTOCOL_V4_NOTICE, ds as ACTION_MANIFEST_VERSION, dt as bindProofV2ToProjection, ea as DelegationRef, ei as HostVersionDecision, en as auditedForegroundRenderers, eo as CapabilityGap, er as Repairability, es as opensWithDirective, et as ProofKind, f as assessmentOutcomePredicate, fa as GuardBoundary, fi as AuthorityBlock, fn as GIT_COMMAND_MANIFEST_IDS, fo as admissibleForRemoval, fr as PROTOCOL_V5_NOTICE, fs as ActionManifest, ft as canonicalProjection, g as decideTurnStopping, ga as GuardItem, gi as segmentAuthorityBlocks, gn as GitCommandManifest, go as removalIsComplete, gr as legacyRecordsNeedingReview, gs as CERTIFICATE_VERSION_V2, gt as proofDigest, h as decideTurnBoundary, ha as GuardIntegrity, hi as authorityCaptureCounts, hn as GitCommandAccepted, ho as partialFailureOf, hr as deriveProjection, hs as CERTIFICATE_VERSION, ht as proofCapabilityReport, i as AssistantOutcomeObservation, ia as DerivedEnvelope, ii as ParsedHostVersion, in as injectActiveProfileHostLock, io as DependencyStatus, ir as deriveItemDiagnosis, is as reportingHeadGoverns, it as ProofManifestV2, j as RC015_RC2_HOST_PACKAGES, ja as TargetTuple, ji as captureItem, jn as revalidateGitPrestate, jo as clauseIsGoverned, jr as HOST_COHORTS, js as semanticActionFromText, jt as evidenceMatchesItem, k as V3SessionLike, ka as TargetSource, ki as ClauseSegment, kn as gitCommandMatchesTarget, ko as clarifiedSpanOf, kr as GOAL_HOST_PACKAGES, ks as requestedTargetMatchesResolved, kt as bindingSatisfies, l as NO_PROGRESS_TURNS_BEFORE_STOP, la as ExpectedTransition, li as parseHostVersion, ln as resolveActiveProfileHostLock, lo as ProcessOutcomeReason, lr as DEFAULT_DELEGATION_TOOL_NAMES, ls as verbIsNegated, lt as SessionQueryV2, m as currentActionBases, ma as GuardEvidence, mi as AuthorityKind, mn as GitAdapterAction, mo as capabilityFactOf, mr as applyUpgradeEligibility, ms as BOUNDED_ARTIFACT_TYPES, mt as createProofManifestV2, n as projectCoreV2, na as DeriveResult, ni as LATEST_SUPPORTED_HOST_VERSION, nn as hostLockContextFromComposedDump, no as DEPENDENCY_FREE_ONLY_CONDITION, nr as UnifiedItemDiagnosis, ns as qualificationOfClause, nt as ProofKindV2, o as CompletionDisposition, oa as EvidenceOutcome, oi as SUPPORTED_HOST_VERSIONS, on as packageRowsFromActiveGraph, oo as OperationAttribution, or as itemDiagnosis, os as semanticActionOfScope, ot as ProofObligationV2, p as classifyCompletionClaim, pa as GuardCheckpoint, pi as AuthorityBlockKind, pn as GIT_COMMAND_TEMPLATES, po as capabilityConsequence, pr as PROTOCOL_V6_NOTICE, ps as ActionSpec, pt as createProofManifest, q as PROOF_CAPABILITY_MATRIX, qa as proposeRebind, qi as qualifyBoundary, qn as extractTextContent, qo as itemHoldsExecutionAuthority, qr as bindLiveGoalCapability, qt as previewFirstStepInjection, r as supersedeItem, ra as DeriveScope, ri as MIN_SUPPORTED_HOST_VERSION, rn as hostLockRowsFromComposedDump, ro as DeclaredOperationResult, rr as capabilityRemedyPhrase, rs as questionHeadsClause, rt as ProofManifest, s as CurrentActionBasis, sa as EvidenceParseStatus, si as compareHostVersions, sn as packageRowsFromPnpmLock, so as ProcessExitStatus, sr as relevantEvidence, ss as splitTextFragments, st as ProofSurface, t as projectSessionCoreV2, ta as DeriveConfig, ti as HostVersionStatus, tn as combineHostPolicy, to as CapabilityRemedy, tr as TaskKind, ts as presentExplanationHead, tt as ProofKindCapability, u as TurnStoppingDecision, ua as ExternalOperation, ui as satisfiesSupportedHostRange, un as resolveInstalledHostLock, uo as RemovalOutcomeReport, ur as PROTOCOL_V3_NOTICE, us as ACTION_MANIFEST, ut as bindProofToProjection, v as isRootPauseRequest, va as GuardItemStatus, vi as UserInteractionKind, vn as GitCommandRejected, vo as AuthorityDisposition, vr as ACTIVE_HOST_COHORT_ID, vs as STATEFUL_ACTIONS, vt as proofEvidenceConstraints, w as testOutcomePredicate, wa as NeedsReviewReason, wi as parseConfirmationMessage, wn as LinearCommitReadback, wo as LEGACY_QUALIFICATION, wr as BASE_HOST_PACKAGES, ws as actionCompatible, wt as sessionQuery, x as latestRootInstruction, xa as HostStatus, xi as CONFIRM_LINE_PATTERN, xn as GitPrestateCheck, xo as ExecutionQualification, xr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, xs as SUPPORTED_EVIDENCE_ADAPTERS, xt as proofV2Rejection, y as isWholeTaskCompletionClaim, ya as GuardOperation, yi as classifyTaskIntent, yn as GitEffectExecution, yo as DirectiveClass, yr as ACTIVE_HOST_COHORT_IDS, ys as STOP_PROTOCOL_VERSION, yt as proofHostSurfacesOf, z as RecoveryOptions, za as ReleaseObservedIdentity, zi as BoundaryEffectuation, zn as parsePwshCommand, zo as interpretMessage, zr as HostLockContext, zs as sha256, zt as FIRST_STEP_GUIDANCE } from "./index-D45jgmPx.js";
+import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as proposeRebindV042, $i as AssetObligation, $n as isDeterministicCheck, $o as legacyQuestionReadingIsInformational, $r as evaluateToolSurfaceCapability, $t as TargetHostGraph, A as V4SessionLike, Aa as SourceSpan, Ai as certifyCheckpoint, An as commitTreeSnapshotDigest, Ao as QualificationStatus, Ar as ExecutableIdentity, As as isStatefulAction, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as createProjection, Bi as isInformationalMessage, Bn as ShellParseStatus, Bo as hasQuestionScope, Br as HostCohortSelection, Bs as normalizeClause, Bt as validateManifest, C as observeAssistantOutcome, Ca as GuardOperation, Ci as CONFIRM_LINE_PATTERN, Cn as GitEffectExecution, Co as DirectiveClass, Cr as ACTIVE_HOST_COHORT_ID, Cs as STOP_PROTOCOL_VERSION, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as NeedsReviewFact, Di as CheckpointResult, Dn as GitTargetIdentity, Do as InterpretOptions, Dr as BASE_HOST_PACKAGES, Ds as StatefulAction, Dt as sessionQuery, E as v6TestPredicate, Ea as MessageCoverage, Ei as parseConfirmationMessage, En as GitPrestateEnvelope, Eo as GRANTED_QUALIFICATION, Er as AuditedExecutable, Es as SemanticAction, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as TargetTuple, Fi as classifyClause, Fn as revalidateGitPrestate, Fo as clauseIsGoverned, Fr as HostAuditProvenance, Fs as semanticActionFromText, Ft as isVerifyingCapability, G as openItems, Ga as ReleaseSettlement, Gi as BoundaryRequest, Gn as goalCompletionDenial, Go as isExecutableItem, Gr as HostPlatform, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as ReleaseGateDecision, Hi as BOUNDARY_RECORD_PREFIX, Hn as isRunExecutable, Ho as interpretClause, Hr as HostLockContext, Hs as sanitizeUrl, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as TargetValue, Ii as environmentDefaultRepositoryTarget, In as verifiedLinearCommitReadback, Io as clauseIsProtected, Ir as HostCapabilityEvaluation, Is as validateActionManifest, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as RebindArgs, Ji as availableBoundaryQualifications, Jn as ToolResultInput, Jo as isOpenObligation, Jr as bindExecutableIdentity, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as BoundedSource, Ki as GoalActivationState, Kn as hasCurrentCertificate, Ko as isExplanationScope, Kr as HostProfileKind, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as VerificationContract, Li as extractArtifactPaths, Ln as CanonicalArgv, Lo as explanationHasActionResidue, Lr as HostCapabilityId, Ls as validateActionTarget, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as TargetCaptureStatus, Mi as ClauseSegment, Mn as executeRevalidatedGitEffect, Mo as actionVerbMatches, Mr as GOAL_HOST_PACKAGES, Ms as requestedTargetAuthorizesMutation, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as TargetSource, Ni as captureClause, Nn as gitCommandMatchesTarget, No as clarifiedSpanOf, Nr as HOST_CAPABILITY_PACKAGE_GROUPS, Ns as requestedTargetMatchesResolved, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as NeedsReviewReason, Oi as RejectedBinding, On as LinearCommitReadback, Oo as LEGACY_QUALIFICATION, Or as DEFAULT_HOST_LOCK, Os as actionCompatible, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as TargetSourceKind, Pi as captureItem, Pn as parseGitCommandManifest, Po as clauseAsksOwnQuestion, Pr as HOST_COHORTS, Ps as semanticActionFromCommand, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as proposeRebindOutcome, Qi as AssetInterpretationFact, Qn as extractToolSubject, Qo as kindOfScope, Qr as evaluateHostLock, Qt as HostProfileError, R as RecoveryOptions, Ra as WaitAuthorization, Ri as extractMethod, Rn as CanonicalCommandSurface, Ro as governedClauseRestrictsExecution, Rr as HostCapabilityRequest, Rs as canonicalizePath, Rt as ManifestIssue, S as latestRootInstruction, Sa as GuardItemStatus, Si as classifyUserInteraction, Sn as GitCommandRejected, So as AuthorityDisposition, Sr as rootLocatorFlavor, Ss as STATEFUL_ACTIONS, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as HostStatus, Ti as isFrozenV042RebindResponse, Tn as GitPrestateCheck, To as ExecutionQualification, Tr as ACTIVE_HOST_LAUNCHER_VERSION, Ts as SUPPORTED_EVIDENCE_ADAPTERS, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as ReleaseObservedIdentity, Ui as BoundaryEffectuation, Un as parsePwshCommand, Uo as interpretMessage, Ur as HostLockEvaluation, Us as sha256, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as PackageRow, Vi as segmentClauses, Vn as canonicalArgvFromCommand, Vo as hasWorkPredicate, Vr as HostCohortSelectionReason, Vs as sanitizeClauseText, Vt as ClaimedMessage, W as closingHint, Wa as ReleaseOperation, Wi as BoundaryQualification, Wn as parseShellCommand, Wo as introducesActionClause, Wr as HostLockStatus, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as confirmRebind, Xi as isCurrentAcceptedBoundary, Xn as evidenceFromPersistedToolResult, Xo as isRestatement, Xr as evaluateExternalWaitCapability, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as RebindProposal, Yi as effectuateBoundary, Yn as ToolSubject, Yo as isQuestionScopeNeedingReview, Yr as bindLiveGoalCapability, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as proposeRebind, Zi as qualifyBoundary, Zn as extractTextContent, Zo as itemHoldsExecutionAuthority, Zr as evaluateHostCapability, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as GuardCheckpoint, _i as authorityCaptureCounts, _n as GIT_COMMAND_TEMPLATES, _o as capabilityConsequence, _r as PROTOCOL_V5_NOTICE, _s as ActionSpec, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as DeriveConfig, ai as MIN_SUPPORTED_HOST_VERSION, an as combineHostPolicy, ao as CapabilityRemedy, ar as TaskKind, as as presentExplanationHead, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as GuardItem, bi as UserInteractionKind, bn as GitCommandManifest, bo as removalIsComplete, br as deriveProjection, bs as CERTIFICATE_VERSION_V2, bt as proofDigestV2, c as CurrentActionBasis, ca as DerivedEnvelope, ci as SUPPORTED_HOST_VERSIONS, cn as injectActiveProfileHostLock, co as DependencyStatus, cr as deriveItemDiagnosis, cs as reportingHeadGoverns, ct as ProofObligation, d as TurnStoppingDecision, da as EvidenceParseStatus, di as parseHostVersion, dn as packageRowsFromPnpmLock, do as ProcessExitStatus, dr as nativeFileTwoRole, ds as splitTextFragments, dt as SessionQuery, ea as BindingActionClosure, ei as hostVersionFromPackages, en as activeRendererModule, eo as rebindAttemptKey, er as persistedToolResultStatus, es as maskCodeSpans, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as EvidenceRole, fi as satisfiesSupportedHostRange, fn as readActiveHostGraph, fo as ProcessFactSource, fr as relevantEvidence, fs as statefulActionsOfScope, ft as SessionQueryV2, g as decideTurnBoundary, ga as GuardBoundary, gi as AuthorityKind, gn as GIT_COMMAND_MANIFEST_IDS, go as admissibleForRemoval, gr as PROTOCOL_V4_NOTICE, gs as ActionManifest, gt as createProofManifest, h as currentActionBases, ha as GoalRef, hi as AuthorityBlockKind, hn as verifyComposedHostLockDump, ho as actionHasCertificationPath, hr as PROTOCOL_V3_NOTICE, hs as ACTION_MANIFEST_VERSION, ht as canonicalProjection, i as supersedeItem, ia as DelegationRef, ii as LATEST_SUPPORTED_HOST_VERSION, in as auditedHostImplementation, io as CapabilityGap, ir as Repairability, is as opensWithDirective, it as ProofKindCapability, j as snapshotSessionEvents, ja as TargetCaptureReasonCode, ji as CaptureScope, jn as createGitPrestateEnvelope, jo as ScopeInterpretation, jr as ExecutableIdentityBinding, js as requestedIdentityKey, jt as EvidenceFacetCoverage, k as SessionApiError, ka as PersistenceAuthorization, ki as bindingIndividuallyAccepted, kn as commitIndexSnapshotDigest, ko as QualificationReason, kr as EXPECTED_HOST_PACKAGES, ks as boundedArtifactChoiceMatches, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as EvidenceBinding, li as compareHostVersions, ln as inspectTargetHostGraph, lo as DerivedProcessFacts, lr as evidenceAvailabilityReason, ls as restatedContentOf, lt as ProofObligationV2, m as classifyCompletionClaim, ma as ExternalOperation, mi as AuthorityBlock, mn as resolveInstalledHostLock, mo as RemovalOutcomeReport, mr as DEFAULT_DELEGATION_TOOL_NAMES, ms as ACTION_MANIFEST, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as BoundaryQualificationKind, ni as HostVersionDecision, nn as auditedDefaultWorkdirProvider, no as replayRebindResult, nr as CertificationSupport, ns as namedActions, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as DeriveResult, oi as ParsedHostVersion, on as hostLockContextFromComposedDump, oo as DEPENDENCY_FREE_ONLY_CONDITION, or as UnifiedItemDiagnosis, os as qualificationOfClause, ot as ProofManifest, p as assessmentOutcomePredicate, pa as ExpectedTransition, pi as currentContractDigest, pn as resolveActiveProfileHostLock, po as ProcessOutcomeReason, pr as CAPTURE_V042_NOTICE, ps as verbIsNegated, pt as bindProofToProjection, q as recoveryTitle, qa as ProposeOutcome, qi as GoalBoundaryAccess, qn as ToolCallInput, qo as isInformationalFragment, qr as HostToolSurface, qt as firstStepGuidance, r as projectCoreV2, ra as DeferAuthorization, ri as HostVersionStatus, rn as auditedForegroundRenderers, ro as CapabilityFact, rr as DiagnosisNextAction, rs as opensConditionLead, rt as ProofKind, s as CompletionDisposition, sa as DeriveScope, si as SUPPORTED_HOST_RANGE, sn as hostLockRowsFromComposedDump, so as DeclaredOperationResult, sr as capabilityRemedyPhrase, ss as questionHeadsClause, st as ProofManifestV2, t as RC017_RC2_HOST_PACKAGES, ta as BoundaryDisposition, ti as selectHostCohort, tn as auditedDefaultWorkdirHost, to as rebindResponse, tr as withDurability, ts as maskQuotedSpans, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as EvidenceOutcome, ui as evaluateMinimumHostVersion, un as packageRowsFromActiveGraph, uo as OperationAttribution, ur as itemDiagnosis, us as semanticActionOfScope, ut as ProofSurface, v as decisionBoundaryKey, va as GuardEvidence, vi as segmentAuthorityBlocks, vn as GitAdapterAction, vo as capabilityFactOf, vr as PROTOCOL_V6_NOTICE, vs as BOUNDED_ARTIFACT_TYPES, vt as proofCapabilityReport, w as progressFingerprint, wa as GuardProjection, wi as ParsedConfirmation, wn as GitEffectRunner, wo as Executee, wr as ACTIVE_HOST_COHORT_IDS, ws as STOP_PROTOCOL_VERSION_V2, wt as proofV2Rejection, x as latestAssistantText, xa as GuardItemKind, xi as classifyTaskIntent, xn as GitCommandParseResult, xo as removalIsPartiallyKnown, xr as legacyRecordsNeedingReview, xs as SEMANTIC_ACTIONS, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as GuardIntegrity, yi as TaskIntent, yn as GitCommandAccepted, yo as partialFailureOf, yr as applyUpgradeEligibility, ys as CERTIFICATE_VERSION, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as WorkUnit, zi as extractOperation, zn as ParsedShell, zo as hasOrderedCoordination, zr as HostCohort, zs as digestStrings, zt as OperationVerbEntry } from "./index-DMr57AgL.js";
+import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
+//#region src/message-source.d.ts
+declare module "@deepseek-ai/dsh-llm" {
+  interface MessageSourceMap {
+    "context-guard": {
+      readonly kind: "context-guard";
+      readonly plugin: "context-guard";
+      readonly form: "notice";
+      readonly summary: string;
+    };
+  }
+}
+//#endregion
 //#region src/tools/evidence.d.ts
-
 /** Trusted embedding evidence, never accepted from a model/tool or HTTP response.
 * The embedding must bind its actual loaded provider to this process/service.
 * Current DSH hosts expose no such verifier, so production restart stays
@@ -170,4 +182,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC017_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };