dsh-completion-guard 0.7.1 → 0.8.0

package/dist/{index-hiUtfKJa.d.ts → index-DMr57AgL.d.ts}

@@ -475,7 +475,7 @@ type ProcessExitStatus = number | "unknown";
 * Why `outcome` says what it says, so a display or a consumer never reads more
 * than the source supports.
 */
-type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
+type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "output_incomplete" | "text_scan_inconclusive";
 /**
 * How far the console let the guard attribute effects to the obligation's own
 * operation. `unknown` is the honest answer for every opaque compound runner:
@@ -1509,6 +1509,7 @@ interface DerivedEnvelope {
 }
 //#endregion
 //#region src/domain/boundary.d.ts
+declare const BOUNDARY_RECORD_PREFIX = "[context-guard boundary/v1] ";
 interface BoundaryRequest {
   disposition: BoundaryDisposition;
   qualificationKind: BoundaryQualificationKind;
@@ -1648,6 +1649,9 @@ interface CheckpointResult {
   rejectedBindings: RejectedBinding[];
   checkpoint?: GuardCheckpoint;
 }
+/** Preview one evidence binding through the same per-item acceptance checks as
+* certificate construction. This does not decide whole-contract closure. */
+declare function bindingIndividuallyAccepted(projection: GuardProjection, item: GuardItem, binding: EvidenceBinding): boolean;
 declare function certifyCheckpoint(projection: GuardProjection, bindings: EvidenceBinding[], id: string, commit?: boolean): CheckpointResult;
 //#endregion
 //#region src/domain/confirm-parse.d.ts
@@ -1723,26 +1727,10 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/**
-* DSH host version support policy.
-*
-* Context Guard 0.5.2 supports exactly the two registered DSH host releases:
-* `0.1.5-rc.2` (latest) and `0.1.5-rc.1` (verified minimum). Package discovery,
-* npm installation, and the exported support range use the same newest-first
-* exact union, so an unregistered stable or future prerelease is never advertised
-* merely because it sorts above the minimum.
-*
-* The minimum comparison remains a diagnostic layer for distinguishing an old
-* host from an at-or-above-floor but unregistered host. It never substitutes for
-* the exact support set or the complete 33-package host graph.
-*/
-/** Lowest supported DSH host version. DSH packages version independently of Cordis. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.1.5-rc.1";
-/** Latest DSH release with a registered complete host graph. */
-declare const LATEST_SUPPORTED_HOST_VERSION = "0.1.5-rc.2";
-/** Exact endpoints supported by the current release, newest first. */
+/** Exact host identity; version ordering is diagnostic only. */
+declare const MIN_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
+declare const LATEST_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
 declare const SUPPORTED_HOST_VERSIONS: readonly string[];
-/** Exact npm range shared by package discovery and peer dependency declarations. */
 declare const SUPPORTED_HOST_RANGE: string;
 interface ParsedHostVersion {
   major: number;
@@ -1758,12 +1746,12 @@ declare function parseHostVersion(value: string): ParsedHostVersion | undefined;
 * unparseable host version fails closed rather than sorting as "newer".
 */
 declare function compareHostVersions(a: string, b: string): number | undefined;
-type HostVersionStatus = "supported" | "below_minimum" | "unparseable";
+type HostVersionStatus = "supported" | "below_minimum" | "unparseable" | "unregistered";
 interface HostVersionDecision {
   status: HostVersionStatus;
   version: string;
   minimum: string;
-  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable";
+  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable" | "host_version_unregistered";
 }
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
@@ -1804,45 +1792,17 @@ interface HostCohort {
   packages: PackageRow[];
   capabilities: CapabilityRow[];
 }
-/**
-* alpha.2 audited package identities (second registry cohort), hoisted so the
-* alpha.2 + dshmarket 1.39.0 cohort can reuse the exact natively audited rows
-* with only the dshmarket identity substituted.
-*/
-declare const ALPHA2_HOST_PACKAGES: PackageRow[];
-/**
-* The exact graph the Windows daily runtime realized when it upgraded
-* dshmarket to 1.39.0 on an otherwise alpha.2 install — the combination whose
-* rejection was Guard 0.3.2's real web_control failure. It is one audited
-* whole-graph cohort: alpha.2 rows keep their native macOS/Windows audit
-* identities and the dshmarket 1.39.0 identity is the authoritative row from
-* the 2026-09-01 alpha.3 annex audit. Guard 0.4.0 supports this combination.
-*/
-declare const ALPHA2_DSHMARKET_139_HOST_PACKAGES: PackageRow[];
-/**
-* Historical audited host cohort registry. Every entry keeps the exact package
-* identities audited natively for a past Guard release (CG-DSH-001 whole-graph
-* contracts). These are historical verification facts only: since 0.5.1 the
-* active support targets are `0.1.5-rc.1` and `0.1.5-rc.2`, so an installed graph from any of
-* these cohorts — including previous RCs and alphas — is no longer an active
-* support entry and fails closed in `evaluateHostLock`.
-*/
-declare const LEGACY_HOST_COHORTS: readonly HostCohort[];
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.1.5-rc.1";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.1.7-rc.2";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
-/** Core-lock/v1 separates optional market identity from the audited DSH graph.
-* The active support targets are the exact registered rc.1 and rc.2 graphs:
-* historical cohorts stay in `LEGACY_HOST_COHORTS` as verification data but are
-* never silently re-labelled as accepted active locks, and an installed
-* historical graph fails closed under `evaluateHostLock`. The version policy
-* (the exact rc.2-or-rc.1 public set) and the graph lock are separate
-* judgments: a host that has not been registered here is "unverified / pending
-* audit", never supported by version order alone.
+/** Core-lock/v1 separates optional market identity from the rc.2 critical
+* graph. Historical cohorts live only in test data. Version ordering cannot
+* authorize an unregistered graph, and graph identity is separate from native
+* acceptance of a Guard artifact.
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.1.5-rc.1). The cohort
+* Baseline fixture package identities (DSH 0.1.7-rc.2). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -2105,6 +2065,17 @@ interface UnifiedItemDiagnosis {
   attempt_fingerprint: string;
 }
 /**
+* The evidence roles the item's OWN obligation contract requires (0.6.1,
+* W060-04). A stateful change needs the full resolution/effect/state chain; a
+* read-only verification (inspect, test, verify, generic readback) needs ONE
+* matching fact in the `effect` role — exactly the manifest `simpleRecord`
+* accepts. Asking every obligation for all three roles made prepare and
+* diagnosis demand a change chain a read-only verification can never produce.
+*/
+/** Current v6 native edit has a persisted effect plus its own readback.
+* Prestate-constrained and legacy stateful work keeps the historical chain. */
+declare function nativeFileTwoRole(p: GuardProjection, item: GuardItem): boolean;
+/**
 * The pure repair judge. It decides between: fixable from existing evidence,
 * missing pre-evidence, missing a user target choice, not supported by any
 * adapter, an executed-without-evidence historical gap, or nothing to do —
@@ -2151,12 +2122,9 @@ interface ToolResultInput {
   textContent: string;
 }
 declare function extractTextContent(content: readonly unknown[]): string;
-/**
-* DSH persists the host return flag on a nested `tool-result` block. The
-* surrounding message or event need not carry an `error` field (approval and
-* sandbox denials are examples). Never let a renderer's missing exit marker
-* override that structured return, or accept an ambiguous nested return as
-* a clean result for another call.
+/** rc.2 persists a role=tool message with independent source and return IDs.
+* Both must bind the original call. PTC uses its own matched dispatch envelope.
+* Historical nested return records are not current rc.2 execution evidence.
 */
 declare function persistedToolResultStatus(data: unknown, callId: string, kind?: "tool/result" | "tool/ptc-dispatch", matchedStart?: boolean): "clean" | "failure" | "unknown";
 interface ToolOperation {
@@ -2431,6 +2399,11 @@ interface ActiveProfileHostLock {
 * Used by target preflight before a legacy profile can be migrated.
 */
 declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
+/** Verify published executable bytes at the reachable runtime/profile roots.
+* Registry SRI and installed manifests alone cannot authenticate loaded code.
+* Missing, duplicate, escaped or modified modules never pass this audit.
+*/
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string): boolean;
 declare function activeRendererModule(nodeModulesRoot: string, name: string): {
   bytes: string;
   path: string;
@@ -2788,10 +2761,6 @@ declare function proofCapabilityReport(kind: ProofKindV2, facts: Iterable<GuardE
   reasonCode?: string;
 };
 //#endregion
-//#region src/domain/alpha3-host.d.ts
-/** Exact 34-row alpha.3 runtime/web graph from the 2026-09-01 annex audit. */
-declare const ALPHA3_HOST_PACKAGES: PackageRow[];
-//#endregion
 //#region src/domain/recovery.d.ts
 interface RecoveryOptions {
   rejectedBindings?: Array<{
@@ -2901,54 +2870,13 @@ declare function v6CurrentRootBoundaries(projection: GuardProjection): {
 declare function recoveryDigest(packet: string, projection: GuardProjection): string;
 declare function renderRecoveryPacket(projection: GuardProjection, options?: RecoveryOptions): string;
 //#endregion
-//#region src/domain/rc1-host.d.ts
-/** Exact 34-row rc.1 runtime/web graph from the 2026-09-03 native macOS audit. */
-declare const RC1_HOST_PACKAGES: PackageRow[];
-//#endregion
-//#region src/domain/rc015-host.d.ts
-/**
-* Exact 33-row DSH 0.1.5-rc.1 core graph.
-*
-* Provenance: every row is the npm registry `dist.integrity` of the exact
-* published tarball for the named version, read from
-* `https://registry.npmjs.org/<name>/0.1.5-rc.1` (and `4.0.2` for
-* `@deepseek-ai/cordis`, which is versioned independently of DSH). The single
-* resolver for this graph is an isolated DSH installation plus the repository
-* worktree lockfile, both installed from the public registry.
-*
-* This is a REGISTRY-DERIVED graph, not a natively audited one: the cohort
-* carries `auditedPlatforms: []` until a native macOS/Windows host audit runs,
-* and `auditProvenance: 'registry-derived-pending-native-audit'` is bound into
-* the host-lock digest so a certificate can never claim a native pass this round
-* did not produce. (`acceptedPlatforms` is the separate, wider gate: this cohort
-* accepts evaluation on both platforms while claiming an audit on neither.)
-* `dshmarket` is deliberately absent: market identity is verified independently
-* by the action adapter and never participates in the core lock.
-*
-* The row-name set is unchanged from the historical 0.1.2-rc.1 cohort's 33
-* core rows: no package entered or left the audited core graph, so a future
-* reader must not infer a graph change from the version bump alone. The count
-* is asserted from this list, never assumed.
-*/
-declare const RC015_HOST_PACKAGES: PackageRow[];
-//#endregion
-//#region src/domain/rc015-rc2-host.d.ts
-/** Exact npm registry identities for DSH 0.1.5-rc.2 (Cordis 4.0.2).
-* Native acceptance is recorded separately; these rows are registry-derived.
-*/
-declare const RC015_RC2_HOST_PACKAGES: PackageRow[];
-//#endregion
 //#region src/domain/session-events.d.ts
 /**
-* Read a validated, stable event snapshot from the DSH Session V3 API.
+* Read a validated, stable event snapshot from the DSH Session V4 API.
 *
-* Session V3 replaced the V2 `events` getter with `snapshotEvents()`. Context
-* Guard supports only the V3 API: a session object that does not expose that
-* method is an unsupported host, never a reason to fall back to a legacy
-* accessor. Failing loud here keeps a V2-shaped object from being projected as
-* if its events had V3 semantics — the two vocabularies differ (surfaces,
-* `assistant/chunk` vs embedded streams, `session/end-seed` payload), so a
-* silent fallback would derive contract state from a log it cannot read.
+* Exact rc.2 still exposes the deprecated synchronous snapshotEvents() API.
+* This adapter retains that existing dependency; it does not promise support
+* for remote history or add a fallback to a legacy events getter.
 *
 * Guard is a READER of the durable log, so the envelope check below is the one
 * part of log validation it owns itself. The host validates a session it
@@ -2957,7 +2885,7 @@ declare const RC015_RC2_HOST_PACKAGES: PackageRow[];
 * mis-numbered an event would fabricate contract state rather than report a
 * damaged log.
 *
-* The V3 contract also asks a reader to refuse an unrecognized event type that
+* The V4 contract also asks a reader to refuse an unrecognized event type that
 * is not marked `ignorable`. Guard does NOT implement that half, deliberately:
 * the host's persistence reader already refuses such a log before publishing a
 * Session, and a whitelist of event types Guard happens to know would
@@ -2971,8 +2899,8 @@ declare class SessionApiError extends Error {
   readonly code: string;
   constructor(message: string, code?: string);
 }
-/** The V3 session surface Guard reads: one bounded, immutable event snapshot. */
-interface V3SessionLike {
+/** The V4 session surface Guard reads: one bounded, immutable event snapshot. */
+interface V4SessionLike {
   snapshotEvents(fromSeq?: number, toSeqExclusive?: number): readonly unknown[];
 }
 declare function snapshotSessionEvents(session: unknown): readonly unknown[];
@@ -3101,4 +3029,9 @@ declare function projectCoreV2(snapshot: Row): Row;
 //#region src/core-v2/session.d.ts
 declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: GuardProjection, displayOrigins?: NonNullable<GuardProjection["coreV2RequirementOrigins"]>): Record<string, unknown> | undefined;
 //#endregion
-export { PROOF_CAPABILITY_MATRIX as $, proposeRebind as $a, qualifyBoundary as $i, extractTextContent as $n, itemHoldsExecutionAuthority as $o, bindLiveGoalCapability as $r, previewFirstStepInjection as $t, snapshotSessionEvents as A, NeedsReviewReason as Aa, parseConfirmationMessage as Ai, LinearCommitReadback as An, LEGACY_QUALIFICATION as Ao, BASE_HOST_PACKAGES as Ar, actionCompatible as As, sessionQuery as At, RecoveryOptions as B, WaitAuthorization as Ba, extractArtifactPaths as Bi, CanonicalCommandSurface as Bn, governedClauseRestrictsExecution as Bo, HostCapabilityId as Br, canonicalizePath as Bs, CommandSurfaceManifest as Bt, progressFingerprint as C, GuardItemKind as Ca, TaskIntent as Ci, GitCommandParseResult as Cn, removalIsPartiallyKnown as Co, rootLocatorFlavor as Cr, SEMANTIC_ACTIONS as Cs, proofDigestV2 as Ct, SESSION_EVENT_ENVELOPE_INVALID as D, HostStatus as Da, CONFIRM_LINE_PATTERN as Di, GitPrestateCheck as Dn, ExecutionQualification as Do, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Dr, SUPPORTED_EVIDENCE_ADAPTERS as Ds, proofV2Rejection as Dt, SESSION_API_UNSUPPORTED as E, GuardProjection as Ea, classifyUserInteraction as Ei, GitEffectRunner as En, Executee as Eo, ACTIVE_HOST_LAUNCHER_VERSION as Er, STOP_PROTOCOL_VERSION_V2 as Es, proofOperationMatches as Et, CLEANUP_CONDITION_RULE_COMPACT as F, TargetSource as Fa, ClauseSegment as Fi, gitCommandMatchesTarget as Fn, clarifiedSpanOf as Fo, GOAL_HOST_PACKAGES as Fr, requestedTargetMatchesResolved as Fs, bindingSatisfies as Ft, cleanupConditionFor as G, ReleaseObservedIdentity as Ga, BoundaryEffectuation as Gi, parsePwshCommand as Gn, interpretMessage as Go, HostLockContext as Gr, sha256 as Gs, FIRST_STEP_GUIDANCE as Gt, V6_ORDINARY_COMPLETION_RULE_COMPACT as H, createProjection as Ha, extractOperation as Hi, ShellParseStatus as Hn, hasQuestionScope as Ho, HostCohort as Hr, normalizeClause as Hs, OperationVerbEntry as Ht, CLEANUP_CONDITION_RULE_SHORT as I, TargetSourceKind as Ia, captureClause as Ii, parseGitCommandManifest as In, clauseAsksOwnQuestion as Io, HOST_CAPABILITY_PACKAGE_GROUPS as Ir, semanticActionFromCommand as Is, evidenceCoverage as It, recoveryDigest as J, BoundedSource as Ja, GoalActivationState as Ji, hasCurrentCertificate as Jn, isExplanationScope as Jo, HostPlatform as Jr, LifecyclePhase as Jt, closingHint as K, ReleaseOperation as Ka, BoundaryQualification as Ki, parseShellCommand as Kn, introducesActionClause as Ko, HostLockEvaluation as Kr, FirstStepInjection as Kt, DEFAULT_RECOVERY_CHAR_BUDGET as L, TargetTuple as La, captureItem as Li, revalidateGitPrestate as Ln, clauseIsGoverned as Lo, HOST_COHORTS as Lr, semanticActionFromText as Ls, evidenceMatchesItem as Lt, RC015_HOST_PACKAGES as M, SourceSpan as Ma, RejectedBinding as Mi, commitTreeSnapshotDigest as Mn, QualificationStatus as Mo, EXPECTED_HOST_PACKAGES as Mr, isStatefulAction as Ms, validateProofManifest as Mt, RC1_HOST_PACKAGES as N, TargetCaptureReasonCode as Na, certifyCheckpoint as Ni, createGitPrestateEnvelope as Nn, ScopeInterpretation as No, ExecutableIdentity as Nr, requestedIdentityKey as Ns, validateProofManifestV2 as Nt, SessionApiError as O, MessageCoverage as Oa, ParsedConfirmation as Oi, GitPrestateEnvelope as On, GRANTED_QUALIFICATION as Oo, ALPHA2_HOST_PACKAGES as Or, SemanticAction as Os, requiredSubjectsOf as Ot, CLEANUP_CONDITION_RULE as P, TargetCaptureStatus as Pa, CaptureScope as Pi, executeRevalidatedGitEffect as Pn, actionVerbMatches as Po, ExecutableIdentityBinding as Pr, requestedTargetAuthorizesMutation as Ps, EvidenceFacetCoverage as Pt, ALPHA3_HOST_PACKAGES as Q, confirmRebind as Qa, isCurrentAcceptedBoundary as Qi, evidenceFromPersistedToolResult as Qn, isRestatement as Qo, bindExecutableIdentity as Qr, lifecyclePhase as Qt, MIN_RECOVERY_CHAR_BUDGET as R, TargetValue as Ra, classifyClause as Ri, verifiedLinearCommitReadback as Rn, clauseIsProtected as Ro, HostAuditProvenance as Rr, validateActionManifest as Rs, isVerifyingCapability as Rt, observeAssistantOutcome as S, GuardItem as Sa, segmentAuthorityBlocks as Si, GitCommandManifest as Sn, removalIsComplete as So, legacyRecordsNeedingReview as Sr, CERTIFICATE_VERSION_V2 as Ss, proofDigest as St, v6TestPredicate as T, GuardOperation as Ta, classifyTaskIntent as Ti, GitEffectExecution as Tn, DirectiveClass as To, ACTIVE_HOST_COHORT_IDS as Tr, STOP_PROTOCOL_VERSION as Ts, proofHostSurfacesOf as Tt, V6_ORDINARY_COMPLETION_RULE_SHORT as U, PackageRow as Ua, isInformationalMessage as Ui, canonicalArgvFromCommand as Un, hasWorkPredicate as Uo, HostCohortSelection as Ur, sanitizeClauseText as Us, validateManifest as Ut, V6_ORDINARY_COMPLETION_RULE as V, WorkUnit as Va, extractMethod as Vi, ParsedShell as Vn, hasOrderedCoordination as Vo, HostCapabilityRequest as Vr, digestStrings as Vs, ManifestIssue as Vt, carriesCleanupCondition as W, ReleaseGateDecision as Wa, segmentClauses as Wi, isRunExecutable as Wn, interpretClause as Wo, HostCohortSelectionReason as Wr, sanitizeUrl as Ws, ClaimedMessage as Wt, renderRecoveryPacket as X, RebindArgs as Xa, availableBoundaryQualifications as Xi, ToolResultInput as Xn, isOpenObligation as Xo, HostToolSurface as Xr, firstStepGuidance as Xt, recoveryTitle as Y, ProposeOutcome as Ya, GoalBoundaryAccess as Yi, ToolCallInput as Yn, isInformationalFragment as Yo, HostProfileKind as Yr, claimedBatchHasRealRootInput as Yt, v6CurrentRootBoundaries as Z, RebindProposal as Za, effectuateBoundary as Zi, ToolSubject as Zn, isQuestionScopeNeedingReview as Zo, LEGACY_HOST_COHORTS as Zr, firstStepGuidanceV6 as Zt, decisionBoundaryKey as _, GoalRef as _a, currentContractDigest as _i, verifyComposedHostLockDump as _n, actionHasCertificationPath as _o, PROTOCOL_V4_NOTICE as _r, ACTION_MANIFEST_VERSION as _s, bindProofV2ToProjection as _t, CONTROL_RECORD_PREFIX as a, DeferAuthorization as aa, selectHostCohort as ai, auditedDefaultWorkdirProvider as an, CapabilityFact as ao, DiagnosisNextAction as ar, opensConditionLead as as, ProofHostSurface as at, latestAssistantText as b, GuardEvidence as ba, AuthorityKind as bi, GitAdapterAction as bn, capabilityFactOf as bo, applyUpgradeEligibility as br, BOUNDED_ARTIFACT_TYPES as bs, createProofManifestV2 as bt, NO_PROGRESS_RECORD_PREFIX as c, DeriveResult as ca, LATEST_SUPPORTED_HOST_VERSION as ci, hostLockContextFromComposedDump as cn, DEPENDENCY_FREE_ONLY_CONDITION as co, UnifiedItemDiagnosis as cr, qualificationOfClause as cs, ProofKindV2 as ct, assessmentAction as d, EvidenceBinding as da, SUPPORTED_HOST_RANGE as di, inspectTargetHostGraph as dn, DerivedProcessFacts as do, evidenceAvailabilityReason as dr, restatedContentOf as ds, ProofObligation as dt, AssetInterpretationFact as ea, evaluateExternalWaitCapability as ei, ActiveProfileHostLock as en, proposeRebindOutcome as eo, extractToolSubject as er, kindOfScope as es, PROOF_KINDS as et, assessmentOutcomePredicate as f, EvidenceOutcome as fa, SUPPORTED_HOST_VERSIONS as fi, packageRowsFromActiveGraph as fn, OperationAttribution as fo, itemDiagnosis as fr, semanticActionOfScope as fs, ProofObligationV2 as ft, decideTurnStopping as g, ExternalOperation as ga, satisfiesSupportedHostRange as gi, resolveInstalledHostLock as gn, RemovalOutcomeReport as go, PROTOCOL_V3_NOTICE as gr, ACTION_MANIFEST as gs, bindProofToProjection as gt, decideTurnBoundary as h, ExpectedTransition as ha, parseHostVersion as hi, resolveActiveProfileHostLock as hn, ProcessOutcomeReason as ho, DEFAULT_DELEGATION_TOOL_NAMES as hr, verbIsNegated as hs, SessionQueryV2 as ht, AssistantOutcomeObservation as i, BoundaryQualificationKind as ia, hostVersionFromPackages as ii, auditedDefaultWorkdirHost as in, replayRebindResult as io, CertificationSupport as ir, namedActions as is, PROOF_PROTOCOL_VERSION_V2 as it, RC015_RC2_HOST_PACKAGES as j, PersistenceAuthorization as ja, CheckpointResult as ji, commitIndexSnapshotDigest as jn, QualificationReason as jo, DEFAULT_HOST_LOCK as jr, boundedArtifactChoiceMatches as js, sessionQueryV2 as jt, V3SessionLike as k, NeedsReviewFact as ka, isFrozenV042RebindResponse as ki, GitTargetIdentity as kn, InterpretOptions as ko, AuditedExecutable as kr, StatefulAction as ks, scopeCoverageDigest as kt, NO_PROGRESS_TURNS_BEFORE_STOP as l, DeriveScope as la, MIN_SUPPORTED_HOST_VERSION as li, hostLockRowsFromComposedDump as ln, DeclaredOperationResult as lo, capabilityRemedyPhrase as lr, questionHeadsClause as ls, ProofManifest as lt, currentActionBases as m, EvidenceRole as ma, evaluateMinimumHostVersion as mi, readActiveHostGraph as mn, ProcessFactSource as mo, CAPTURE_V042_NOTICE as mr, statefulActionsOfScope as ms, SessionQuery as mt, projectCoreV2 as n, BindingActionClosure as na, evaluateHostLock as ni, TargetHostGraph as nn, rebindAttemptKey as no, persistedToolResultStatus as nr, maskCodeSpans as ns, PROOF_MANIFEST_DOMAIN_V2 as nt, CompletionDisposition as o, DelegationRef as oa, HostVersionDecision as oi, auditedForegroundRenderers as on, CapabilityGap as oo, Repairability as or, opensWithDirective as os, ProofKind as ot, classifyCompletionClaim as p, EvidenceParseStatus as pa, compareHostVersions as pi, packageRowsFromPnpmLock as pn, ProcessExitStatus as po, relevantEvidence as pr, splitTextFragments as ps, ProofSurface as pt, openItems as q, ReleaseSettlement as qa, BoundaryRequest as qi, goalCompletionDenial as qn, isExecutableItem as qo, HostLockStatus as qr, FirstStepPreviewInput as qt, supersedeItem as r, BoundaryDisposition as ra, evaluateToolSurfaceCapability as ri, activeRendererModule as rn, rebindResponse as ro, withDurability as rr, maskQuotedSpans as rs, PROOF_PROTOCOL_VERSION as rt, CurrentActionBasis as s, DeriveConfig as sa, HostVersionStatus as si, combineHostPolicy as sn, CapabilityRemedy as so, TaskKind as sr, presentExplanationHead as ss, ProofKindCapability as st, projectSessionCoreV2 as t, AssetObligation as ta, evaluateHostCapability as ti, HostProfileError as tn, proposeRebindV042 as to, isDeterministicCheck as tr, legacyQuestionReadingIsInformational as ts, PROOF_KINDS_V2 as tt, TurnStoppingDecision as u, DerivedEnvelope as ua, ParsedHostVersion as ui, injectActiveProfileHostLock as un, DependencyStatus as uo, deriveItemDiagnosis as ur, reportingHeadGoverns as us, ProofManifestV2 as ut, isRootPauseRequest as v, GuardBoundary as va, AuthorityBlock as vi, GIT_COMMAND_MANIFEST_IDS as vn, admissibleForRemoval as vo, PROTOCOL_V5_NOTICE as vr, ActionManifest as vs, canonicalProjection as vt, testOutcomePredicate as w, GuardItemStatus as wa, UserInteractionKind as wi, GitCommandRejected as wn, AuthorityDisposition as wo, ACTIVE_HOST_COHORT_ID as wr, STATEFUL_ACTIONS as ws, proofEvidenceConstraints as wt, latestRootInstruction as x, GuardIntegrity as xa, authorityCaptureCounts as xi, GitCommandAccepted as xn, partialFailureOf as xo, deriveProjection as xr, CERTIFICATE_VERSION as xs, proofCapabilityReport as xt, isWholeTaskCompletionClaim as y, GuardCheckpoint as ya, AuthorityBlockKind as yi, GIT_COMMAND_TEMPLATES as yn, capabilityConsequence as yo, PROTOCOL_V6_NOTICE as yr, ActionSpec as ys, createProofManifest as yt, RecoveryCause as z, VerificationContract as za, environmentDefaultRepositoryTarget as zi, CanonicalArgv as zn, explanationHasActionResidue as zo, HostCapabilityEvaluation as zr, validateActionTarget as zs, COMMAND_SURFACE_MANIFEST as zt };
+//#region src/domain/rc017-rc2-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Native platform acceptance remains a separate, currently pending fact. */
+declare const RC017_RC2_HOST_PACKAGES: PackageRow[];
+//#endregion
+export { PROOF_MANIFEST_DOMAIN_V2 as $, proposeRebindV042 as $a, AssetObligation as $i, isDeterministicCheck as $n, legacyQuestionReadingIsInformational as $o, evaluateToolSurfaceCapability as $r, TargetHostGraph as $t, V4SessionLike as A, SourceSpan as Aa, certifyCheckpoint as Ai, commitTreeSnapshotDigest as An, QualificationStatus as Ao, ExecutableIdentity as Ar, isStatefulAction as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, createProjection as Ba, isInformationalMessage as Bi, ShellParseStatus as Bn, hasQuestionScope as Bo, HostCohortSelection as Br, normalizeClause as Bs, validateManifest as Bt, observeAssistantOutcome as C, GuardOperation as Ca, CONFIRM_LINE_PATTERN as Ci, GitEffectExecution as Cn, DirectiveClass as Co, ACTIVE_HOST_COHORT_ID as Cr, STOP_PROTOCOL_VERSION as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, NeedsReviewFact as Da, CheckpointResult as Di, GitTargetIdentity as Dn, InterpretOptions as Do, BASE_HOST_PACKAGES as Dr, StatefulAction as Ds, sessionQuery as Dt, v6TestPredicate as E, MessageCoverage as Ea, parseConfirmationMessage as Ei, GitPrestateEnvelope as En, GRANTED_QUALIFICATION as Eo, AuditedExecutable as Er, SemanticAction as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, TargetTuple as Fa, classifyClause as Fi, revalidateGitPrestate as Fn, clauseIsGoverned as Fo, HostAuditProvenance as Fr, semanticActionFromText as Fs, isVerifyingCapability as Ft, openItems as G, ReleaseSettlement as Ga, BoundaryRequest as Gi, goalCompletionDenial as Gn, isExecutableItem as Go, HostPlatform as Gr, LifecyclePhase as Gt, carriesCleanupCondition as H, ReleaseGateDecision as Ha, BOUNDARY_RECORD_PREFIX as Hi, isRunExecutable as Hn, interpretClause as Ho, HostLockContext as Hr, sanitizeUrl as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, TargetValue as Ia, environmentDefaultRepositoryTarget as Ii, verifiedLinearCommitReadback as In, clauseIsProtected as Io, HostCapabilityEvaluation as Ir, validateActionManifest as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, RebindArgs as Ja, availableBoundaryQualifications as Ji, ToolResultInput as Jn, isOpenObligation as Jo, bindExecutableIdentity as Jr, firstStepGuidanceV6 as Jt, recoveryDigest as K, BoundedSource as Ka, GoalActivationState as Ki, hasCurrentCertificate as Kn, isExplanationScope as Ko, HostProfileKind as Kr, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, VerificationContract as La, extractArtifactPaths as Li, CanonicalArgv as Ln, explanationHasActionResidue as Lo, HostCapabilityId as Lr, validateActionTarget as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, TargetCaptureStatus as Ma, ClauseSegment as Mi, executeRevalidatedGitEffect as Mn, actionVerbMatches as Mo, GOAL_HOST_PACKAGES as Mr, requestedTargetAuthorizesMutation as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, TargetSource as Na, captureClause as Ni, gitCommandMatchesTarget as Nn, clarifiedSpanOf as No, HOST_CAPABILITY_PACKAGE_GROUPS as Nr, requestedTargetMatchesResolved as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, NeedsReviewReason as Oa, RejectedBinding as Oi, LinearCommitReadback as On, LEGACY_QUALIFICATION as Oo, DEFAULT_HOST_LOCK as Or, actionCompatible as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, TargetSourceKind as Pa, captureItem as Pi, parseGitCommandManifest as Pn, clauseAsksOwnQuestion as Po, HOST_COHORTS as Pr, semanticActionFromCommand as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, proposeRebindOutcome as Qa, AssetInterpretationFact as Qi, extractToolSubject as Qn, kindOfScope as Qo, evaluateHostLock as Qr, HostProfileError as Qt, RecoveryOptions as R, WaitAuthorization as Ra, extractMethod as Ri, CanonicalCommandSurface as Rn, governedClauseRestrictsExecution as Ro, HostCapabilityRequest as Rr, canonicalizePath as Rs, ManifestIssue as Rt, latestRootInstruction as S, GuardItemStatus as Sa, classifyUserInteraction as Si, GitCommandRejected as Sn, AuthorityDisposition as So, rootLocatorFlavor as Sr, STATEFUL_ACTIONS as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, HostStatus as Ta, isFrozenV042RebindResponse as Ti, GitPrestateCheck as Tn, ExecutionQualification as To, ACTIVE_HOST_LAUNCHER_VERSION as Tr, SUPPORTED_EVIDENCE_ADAPTERS as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, ReleaseObservedIdentity as Ua, BoundaryEffectuation as Ui, parsePwshCommand as Un, interpretMessage as Uo, HostLockEvaluation as Ur, sha256 as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, PackageRow as Va, segmentClauses as Vi, canonicalArgvFromCommand as Vn, hasWorkPredicate as Vo, HostCohortSelectionReason as Vr, sanitizeClauseText as Vs, ClaimedMessage as Vt, closingHint as W, ReleaseOperation as Wa, BoundaryQualification as Wi, parseShellCommand as Wn, introducesActionClause as Wo, HostLockStatus as Wr, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, confirmRebind as Xa, isCurrentAcceptedBoundary as Xi, evidenceFromPersistedToolResult as Xn, isRestatement as Xo, evaluateExternalWaitCapability as Xr, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, RebindProposal as Ya, effectuateBoundary as Yi, ToolSubject as Yn, isQuestionScopeNeedingReview as Yo, bindLiveGoalCapability as Yr, lifecyclePhase as Yt, PROOF_KINDS as Z, proposeRebind as Za, qualifyBoundary as Zi, extractTextContent as Zn, itemHoldsExecutionAuthority as Zo, evaluateHostCapability as Zr, ActiveProfileHostLock as Zt, decideTurnStopping as _, GuardCheckpoint as _a, authorityCaptureCounts as _i, GIT_COMMAND_TEMPLATES as _n, capabilityConsequence as _o, PROTOCOL_V5_NOTICE as _r, ActionSpec as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, DeriveConfig as aa, MIN_SUPPORTED_HOST_VERSION as ai, combineHostPolicy as an, CapabilityRemedy as ao, TaskKind as ar, presentExplanationHead as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, GuardItem as ba, UserInteractionKind as bi, GitCommandManifest as bn, removalIsComplete as bo, deriveProjection as br, CERTIFICATE_VERSION_V2 as bs, proofDigestV2 as bt, CurrentActionBasis as c, DerivedEnvelope as ca, SUPPORTED_HOST_VERSIONS as ci, injectActiveProfileHostLock as cn, DependencyStatus as co, deriveItemDiagnosis as cr, reportingHeadGoverns as cs, ProofObligation as ct, TurnStoppingDecision as d, EvidenceParseStatus as da, parseHostVersion as di, packageRowsFromPnpmLock as dn, ProcessExitStatus as do, nativeFileTwoRole as dr, splitTextFragments as ds, SessionQuery as dt, BindingActionClosure as ea, hostVersionFromPackages as ei, activeRendererModule as en, rebindAttemptKey as eo, persistedToolResultStatus as er, maskCodeSpans as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, EvidenceRole as fa, satisfiesSupportedHostRange as fi, readActiveHostGraph as fn, ProcessFactSource as fo, relevantEvidence as fr, statefulActionsOfScope as fs, SessionQueryV2 as ft, decideTurnBoundary as g, GuardBoundary as ga, AuthorityKind as gi, GIT_COMMAND_MANIFEST_IDS as gn, admissibleForRemoval as go, PROTOCOL_V4_NOTICE as gr, ActionManifest as gs, createProofManifest as gt, currentActionBases as h, GoalRef as ha, AuthorityBlockKind as hi, verifyComposedHostLockDump as hn, actionHasCertificationPath as ho, PROTOCOL_V3_NOTICE as hr, ACTION_MANIFEST_VERSION as hs, canonicalProjection as ht, supersedeItem as i, DelegationRef as ia, LATEST_SUPPORTED_HOST_VERSION as ii, auditedHostImplementation as in, CapabilityGap as io, Repairability as ir, opensWithDirective as is, ProofKindCapability as it, snapshotSessionEvents as j, TargetCaptureReasonCode as ja, CaptureScope as ji, createGitPrestateEnvelope as jn, ScopeInterpretation as jo, ExecutableIdentityBinding as jr, requestedIdentityKey as js, EvidenceFacetCoverage as jt, SessionApiError as k, PersistenceAuthorization as ka, bindingIndividuallyAccepted as ki, commitIndexSnapshotDigest as kn, QualificationReason as ko, EXPECTED_HOST_PACKAGES as kr, boundedArtifactChoiceMatches as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, EvidenceBinding as la, compareHostVersions as li, inspectTargetHostGraph as ln, DerivedProcessFacts as lo, evidenceAvailabilityReason as lr, restatedContentOf as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, ExternalOperation as ma, AuthorityBlock as mi, resolveInstalledHostLock as mn, RemovalOutcomeReport as mo, DEFAULT_DELEGATION_TOOL_NAMES as mr, ACTION_MANIFEST as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, BoundaryQualificationKind as na, HostVersionDecision as ni, auditedDefaultWorkdirProvider as nn, replayRebindResult as no, CertificationSupport as nr, namedActions as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, DeriveResult as oa, ParsedHostVersion as oi, hostLockContextFromComposedDump as on, DEPENDENCY_FREE_ONLY_CONDITION as oo, UnifiedItemDiagnosis as or, qualificationOfClause as os, ProofManifest as ot, assessmentOutcomePredicate as p, ExpectedTransition as pa, currentContractDigest as pi, resolveActiveProfileHostLock as pn, ProcessOutcomeReason as po, CAPTURE_V042_NOTICE as pr, verbIsNegated as ps, bindProofToProjection as pt, recoveryTitle as q, ProposeOutcome as qa, GoalBoundaryAccess as qi, ToolCallInput as qn, isInformationalFragment as qo, HostToolSurface as qr, firstStepGuidance as qt, projectCoreV2 as r, DeferAuthorization as ra, HostVersionStatus as ri, auditedForegroundRenderers as rn, CapabilityFact as ro, DiagnosisNextAction as rr, opensConditionLead as rs, ProofKind as rt, CompletionDisposition as s, DeriveScope as sa, SUPPORTED_HOST_RANGE as si, hostLockRowsFromComposedDump as sn, DeclaredOperationResult as so, capabilityRemedyPhrase as sr, questionHeadsClause as ss, ProofManifestV2 as st, RC017_RC2_HOST_PACKAGES as t, BoundaryDisposition as ta, selectHostCohort as ti, auditedDefaultWorkdirHost as tn, rebindResponse as to, withDurability as tr, maskQuotedSpans as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, EvidenceOutcome as ua, evaluateMinimumHostVersion as ui, packageRowsFromActiveGraph as un, OperationAttribution as uo, itemDiagnosis as ur, semanticActionOfScope as us, ProofSurface as ut, decisionBoundaryKey as v, GuardEvidence as va, segmentAuthorityBlocks as vi, GitAdapterAction as vn, capabilityFactOf as vo, PROTOCOL_V6_NOTICE as vr, BOUNDED_ARTIFACT_TYPES as vs, proofCapabilityReport as vt, progressFingerprint as w, GuardProjection as wa, ParsedConfirmation as wi, GitEffectRunner as wn, Executee as wo, ACTIVE_HOST_COHORT_IDS as wr, STOP_PROTOCOL_VERSION_V2 as ws, proofV2Rejection as wt, latestAssistantText as x, GuardItemKind as xa, classifyTaskIntent as xi, GitCommandParseResult as xn, removalIsPartiallyKnown as xo, legacyRecordsNeedingReview as xr, SEMANTIC_ACTIONS as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, GuardIntegrity as ya, TaskIntent as yi, GitCommandAccepted as yn, partialFailureOf as yo, applyUpgradeEligibility as yr, CERTIFICATE_VERSION as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, WorkUnit as za, extractOperation as zi, ParsedShell as zn, hasOrderedCoordination as zo, HostCohort as zr, digestStrings as zs, OperationVerbEntry as zt };

package/dist/index.d.ts

@@ -1,11 +1,23 @@
-import { $ as PROOF_CAPABILITY_MATRIX, $a as proposeRebind, $i as qualifyBoundary, $n as extractTextContent, $o as itemHoldsExecutionAuthority, $r as bindLiveGoalCapability, $t as previewFirstStepInjection, A as snapshotSessionEvents, Aa as NeedsReviewReason, Ai as parseConfirmationMessage, An as LinearCommitReadback, Ao as LEGACY_QUALIFICATION, Ar as BASE_HOST_PACKAGES, As as actionCompatible, At as sessionQuery, B as RecoveryOptions, Ba as WaitAuthorization, Bi as extractArtifactPaths, Bn as CanonicalCommandSurface, Bo as governedClauseRestrictsExecution, Br as HostCapabilityId, Bs as canonicalizePath, Bt as CommandSurfaceManifest, C as progressFingerprint, Ca as GuardItemKind, Ci as TaskIntent, Cn as GitCommandParseResult, Co as removalIsPartiallyKnown, Cr as rootLocatorFlavor, Cs as SEMANTIC_ACTIONS, Ct as proofDigestV2, D as SESSION_EVENT_ENVELOPE_INVALID, Da as HostStatus, Di as CONFIRM_LINE_PATTERN, Dn as GitPrestateCheck, Do as ExecutionQualification, Dr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Ds as SUPPORTED_EVIDENCE_ADAPTERS, Dt as proofV2Rejection, E as SESSION_API_UNSUPPORTED, Ea as GuardProjection, Ei as classifyUserInteraction, En as GitEffectRunner, Eo as Executee, Er as ACTIVE_HOST_LAUNCHER_VERSION, Es as STOP_PROTOCOL_VERSION_V2, Et as proofOperationMatches, F as CLEANUP_CONDITION_RULE_COMPACT, Fa as TargetSource, Fi as ClauseSegment, Fn as gitCommandMatchesTarget, Fo as clarifiedSpanOf, Fr as GOAL_HOST_PACKAGES, Fs as requestedTargetMatchesResolved, Ft as bindingSatisfies, G as cleanupConditionFor, Ga as ReleaseObservedIdentity, Gi as BoundaryEffectuation, Gn as parsePwshCommand, Go as interpretMessage, Gr as HostLockContext, Gs as sha256, Gt as FIRST_STEP_GUIDANCE, H as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ha as createProjection, Hi as extractOperation, Hn as ShellParseStatus, Ho as hasQuestionScope, Hr as HostCohort, Hs as normalizeClause, Ht as OperationVerbEntry, I as CLEANUP_CONDITION_RULE_SHORT, Ia as TargetSourceKind, Ii as captureClause, In as parseGitCommandManifest, Io as clauseAsksOwnQuestion, Ir as HOST_CAPABILITY_PACKAGE_GROUPS, Is as semanticActionFromCommand, It as evidenceCoverage, J as recoveryDigest, Ja as BoundedSource, Ji as GoalActivationState, Jn as hasCurrentCertificate, Jo as isExplanationScope, Jr as HostPlatform, Jt as LifecyclePhase, K as closingHint, Ka as ReleaseOperation, Ki as BoundaryQualification, Kn as parseShellCommand, Ko as introducesActionClause, Kr as HostLockEvaluation, Kt as FirstStepInjection, L as DEFAULT_RECOVERY_CHAR_BUDGET, La as TargetTuple, Li as captureItem, Ln as revalidateGitPrestate, Lo as clauseIsGoverned, Lr as HOST_COHORTS, Ls as semanticActionFromText, Lt as evidenceMatchesItem, M as RC015_HOST_PACKAGES, Ma as SourceSpan, Mi as RejectedBinding, Mn as commitTreeSnapshotDigest, Mo as QualificationStatus, Mr as EXPECTED_HOST_PACKAGES, Ms as isStatefulAction, Mt as validateProofManifest, N as RC1_HOST_PACKAGES, Na as TargetCaptureReasonCode, Ni as certifyCheckpoint, Nn as createGitPrestateEnvelope, No as ScopeInterpretation, Nr as ExecutableIdentity, Ns as requestedIdentityKey, Nt as validateProofManifestV2, O as SessionApiError, Oa as MessageCoverage, Oi as ParsedConfirmation, On as GitPrestateEnvelope, Oo as GRANTED_QUALIFICATION, Or as ALPHA2_HOST_PACKAGES, Os as SemanticAction, Ot as requiredSubjectsOf, P as CLEANUP_CONDITION_RULE, Pa as TargetCaptureStatus, Pi as CaptureScope, Pn as executeRevalidatedGitEffect, Po as actionVerbMatches, Pr as ExecutableIdentityBinding, Ps as requestedTargetAuthorizesMutation, Pt as EvidenceFacetCoverage, Q as ALPHA3_HOST_PACKAGES, Qa as confirmRebind, Qi as isCurrentAcceptedBoundary, Qn as evidenceFromPersistedToolResult, Qo as isRestatement, Qr as bindExecutableIdentity, Qt as lifecyclePhase, R as MIN_RECOVERY_CHAR_BUDGET, Ra as TargetValue, Ri as classifyClause, Rn as verifiedLinearCommitReadback, Ro as clauseIsProtected, Rr as HostAuditProvenance, Rs as validateActionManifest, Rt as isVerifyingCapability, S as observeAssistantOutcome, Sa as GuardItem, Si as segmentAuthorityBlocks, Sn as GitCommandManifest, So as removalIsComplete, Sr as legacyRecordsNeedingReview, Ss as CERTIFICATE_VERSION_V2, St as proofDigest, T as v6TestPredicate, Ta as GuardOperation, Ti as classifyTaskIntent, Tn as GitEffectExecution, To as DirectiveClass, Tr as ACTIVE_HOST_COHORT_IDS, Ts as STOP_PROTOCOL_VERSION, Tt as proofHostSurfacesOf, U as V6_ORDINARY_COMPLETION_RULE_SHORT, Ua as PackageRow, Ui as isInformationalMessage, Un as canonicalArgvFromCommand, Uo as hasWorkPredicate, Ur as HostCohortSelection, Us as sanitizeClauseText, Ut as validateManifest, V as V6_ORDINARY_COMPLETION_RULE, Va as WorkUnit, Vi as extractMethod, Vn as ParsedShell, Vo as hasOrderedCoordination, Vr as HostCapabilityRequest, Vs as digestStrings, Vt as ManifestIssue, W as carriesCleanupCondition, Wa as ReleaseGateDecision, Wi as segmentClauses, Wn as isRunExecutable, Wo as interpretClause, Wr as HostCohortSelectionReason, Ws as sanitizeUrl, Wt as ClaimedMessage, X as renderRecoveryPacket, Xa as RebindArgs, Xi as availableBoundaryQualifications, Xn as ToolResultInput, Xo as isOpenObligation, Xr as HostToolSurface, Xt as firstStepGuidance, Y as recoveryTitle, Ya as ProposeOutcome, Yi as GoalBoundaryAccess, Yn as ToolCallInput, Yo as isInformationalFragment, Yr as HostProfileKind, Yt as claimedBatchHasRealRootInput, Z as v6CurrentRootBoundaries, Za as RebindProposal, Zi as effectuateBoundary, Zn as ToolSubject, Zo as isQuestionScopeNeedingReview, Zr as LEGACY_HOST_COHORTS, Zt as firstStepGuidanceV6, _ as decisionBoundaryKey, _a as GoalRef, _i as currentContractDigest, _n as verifyComposedHostLockDump, _o as actionHasCertificationPath, _r as PROTOCOL_V4_NOTICE, _s as ACTION_MANIFEST_VERSION, _t as bindProofV2ToProjection, a as CONTROL_RECORD_PREFIX, aa as DeferAuthorization, ai as selectHostCohort, an as auditedDefaultWorkdirProvider, ao as CapabilityFact, ar as DiagnosisNextAction, as as opensConditionLead, at as ProofHostSurface, b as latestAssistantText, ba as GuardEvidence, bi as AuthorityKind, bn as GitAdapterAction, bo as capabilityFactOf, br as applyUpgradeEligibility, bs as BOUNDED_ARTIFACT_TYPES, bt as createProofManifestV2, c as NO_PROGRESS_RECORD_PREFIX, ca as DeriveResult, ci as LATEST_SUPPORTED_HOST_VERSION, cn as hostLockContextFromComposedDump, co as DEPENDENCY_FREE_ONLY_CONDITION, cr as UnifiedItemDiagnosis, cs as qualificationOfClause, ct as ProofKindV2, d as assessmentAction, da as EvidenceBinding, di as SUPPORTED_HOST_RANGE, dn as inspectTargetHostGraph, do as DerivedProcessFacts, dr as evidenceAvailabilityReason, ds as restatedContentOf, dt as ProofObligation, ea as AssetInterpretationFact, ei as evaluateExternalWaitCapability, en as ActiveProfileHostLock, eo as proposeRebindOutcome, er as extractToolSubject, es as kindOfScope, et as PROOF_KINDS, f as assessmentOutcomePredicate, fa as EvidenceOutcome, fi as SUPPORTED_HOST_VERSIONS, fn as packageRowsFromActiveGraph, fo as OperationAttribution, fr as itemDiagnosis, fs as semanticActionOfScope, ft as ProofObligationV2, g as decideTurnStopping, ga as ExternalOperation, gi as satisfiesSupportedHostRange, gn as resolveInstalledHostLock, go as RemovalOutcomeReport, gr as PROTOCOL_V3_NOTICE, gs as ACTION_MANIFEST, gt as bindProofToProjection, h as decideTurnBoundary, ha as ExpectedTransition, hi as parseHostVersion, hn as resolveActiveProfileHostLock, ho as ProcessOutcomeReason, hr as DEFAULT_DELEGATION_TOOL_NAMES, hs as verbIsNegated, ht as SessionQueryV2, i as AssistantOutcomeObservation, ia as BoundaryQualificationKind, ii as hostVersionFromPackages, in as auditedDefaultWorkdirHost, io as replayRebindResult, ir as CertificationSupport, is as namedActions, it as PROOF_PROTOCOL_VERSION_V2, j as RC015_RC2_HOST_PACKAGES, ja as PersistenceAuthorization, ji as CheckpointResult, jn as commitIndexSnapshotDigest, jo as QualificationReason, jr as DEFAULT_HOST_LOCK, js as boundedArtifactChoiceMatches, jt as sessionQueryV2, k as V3SessionLike, ka as NeedsReviewFact, ki as isFrozenV042RebindResponse, kn as GitTargetIdentity, ko as InterpretOptions, kr as AuditedExecutable, ks as StatefulAction, kt as scopeCoverageDigest, l as NO_PROGRESS_TURNS_BEFORE_STOP, la as DeriveScope, li as MIN_SUPPORTED_HOST_VERSION, ln as hostLockRowsFromComposedDump, lo as DeclaredOperationResult, lr as capabilityRemedyPhrase, ls as questionHeadsClause, lt as ProofManifest, m as currentActionBases, ma as EvidenceRole, mi as evaluateMinimumHostVersion, mn as readActiveHostGraph, mo as ProcessFactSource, mr as CAPTURE_V042_NOTICE, ms as statefulActionsOfScope, mt as SessionQuery, n as projectCoreV2, na as BindingActionClosure, ni as evaluateHostLock, nn as TargetHostGraph, no as rebindAttemptKey, nr as persistedToolResultStatus, ns as maskCodeSpans, nt as PROOF_MANIFEST_DOMAIN_V2, o as CompletionDisposition, oa as DelegationRef, oi as HostVersionDecision, on as auditedForegroundRenderers, oo as CapabilityGap, or as Repairability, os as opensWithDirective, ot as ProofKind, p as classifyCompletionClaim, pa as EvidenceParseStatus, pi as compareHostVersions, pn as packageRowsFromPnpmLock, po as ProcessExitStatus, pr as relevantEvidence, ps as splitTextFragments, pt as ProofSurface, q as openItems, qa as ReleaseSettlement, qi as BoundaryRequest, qn as goalCompletionDenial, qo as isExecutableItem, qr as HostLockStatus, qt as FirstStepPreviewInput, r as supersedeItem, ra as BoundaryDisposition, ri as evaluateToolSurfaceCapability, rn as activeRendererModule, ro as rebindResponse, rr as withDurability, rs as maskQuotedSpans, rt as PROOF_PROTOCOL_VERSION, s as CurrentActionBasis, sa as DeriveConfig, si as HostVersionStatus, sn as combineHostPolicy, so as CapabilityRemedy, sr as TaskKind, ss as presentExplanationHead, st as ProofKindCapability, t as projectSessionCoreV2, ta as AssetObligation, ti as evaluateHostCapability, tn as HostProfileError, to as proposeRebindV042, tr as isDeterministicCheck, ts as legacyQuestionReadingIsInformational, tt as PROOF_KINDS_V2, u as TurnStoppingDecision, ua as DerivedEnvelope, ui as ParsedHostVersion, un as injectActiveProfileHostLock, uo as DependencyStatus, ur as deriveItemDiagnosis, us as reportingHeadGoverns, ut as ProofManifestV2, v as isRootPauseRequest, va as GuardBoundary, vi as AuthorityBlock, vn as GIT_COMMAND_MANIFEST_IDS, vo as admissibleForRemoval, vr as PROTOCOL_V5_NOTICE, vs as ActionManifest, vt as canonicalProjection, w as testOutcomePredicate, wa as GuardItemStatus, wi as UserInteractionKind, wn as GitCommandRejected, wo as AuthorityDisposition, wr as ACTIVE_HOST_COHORT_ID, ws as STATEFUL_ACTIONS, wt as proofEvidenceConstraints, x as latestRootInstruction, xa as GuardIntegrity, xi as authorityCaptureCounts, xn as GitCommandAccepted, xo as partialFailureOf, xr as deriveProjection, xs as CERTIFICATE_VERSION, xt as proofCapabilityReport, y as isWholeTaskCompletionClaim, ya as GuardCheckpoint, yi as AuthorityBlockKind, yn as GIT_COMMAND_TEMPLATES, yo as capabilityConsequence, yr as PROTOCOL_V6_NOTICE, ys as ActionSpec, yt as createProofManifest, z as RecoveryCause, za as VerificationContract, zi as environmentDefaultRepositoryTarget, zn as CanonicalArgv, zo as explanationHasActionResidue, zr as HostCapabilityEvaluation, zs as validateActionTarget, zt as COMMAND_SURFACE_MANIFEST } from "./index-hiUtfKJa.js";
+import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as proposeRebindV042, $i as AssetObligation, $n as isDeterministicCheck, $o as legacyQuestionReadingIsInformational, $r as evaluateToolSurfaceCapability, $t as TargetHostGraph, A as V4SessionLike, Aa as SourceSpan, Ai as certifyCheckpoint, An as commitTreeSnapshotDigest, Ao as QualificationStatus, Ar as ExecutableIdentity, As as isStatefulAction, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as createProjection, Bi as isInformationalMessage, Bn as ShellParseStatus, Bo as hasQuestionScope, Br as HostCohortSelection, Bs as normalizeClause, Bt as validateManifest, C as observeAssistantOutcome, Ca as GuardOperation, Ci as CONFIRM_LINE_PATTERN, Cn as GitEffectExecution, Co as DirectiveClass, Cr as ACTIVE_HOST_COHORT_ID, Cs as STOP_PROTOCOL_VERSION, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as NeedsReviewFact, Di as CheckpointResult, Dn as GitTargetIdentity, Do as InterpretOptions, Dr as BASE_HOST_PACKAGES, Ds as StatefulAction, Dt as sessionQuery, E as v6TestPredicate, Ea as MessageCoverage, Ei as parseConfirmationMessage, En as GitPrestateEnvelope, Eo as GRANTED_QUALIFICATION, Er as AuditedExecutable, Es as SemanticAction, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as TargetTuple, Fi as classifyClause, Fn as revalidateGitPrestate, Fo as clauseIsGoverned, Fr as HostAuditProvenance, Fs as semanticActionFromText, Ft as isVerifyingCapability, G as openItems, Ga as ReleaseSettlement, Gi as BoundaryRequest, Gn as goalCompletionDenial, Go as isExecutableItem, Gr as HostPlatform, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as ReleaseGateDecision, Hi as BOUNDARY_RECORD_PREFIX, Hn as isRunExecutable, Ho as interpretClause, Hr as HostLockContext, Hs as sanitizeUrl, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as TargetValue, Ii as environmentDefaultRepositoryTarget, In as verifiedLinearCommitReadback, Io as clauseIsProtected, Ir as HostCapabilityEvaluation, Is as validateActionManifest, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as RebindArgs, Ji as availableBoundaryQualifications, Jn as ToolResultInput, Jo as isOpenObligation, Jr as bindExecutableIdentity, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as BoundedSource, Ki as GoalActivationState, Kn as hasCurrentCertificate, Ko as isExplanationScope, Kr as HostProfileKind, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as VerificationContract, Li as extractArtifactPaths, Ln as CanonicalArgv, Lo as explanationHasActionResidue, Lr as HostCapabilityId, Ls as validateActionTarget, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as TargetCaptureStatus, Mi as ClauseSegment, Mn as executeRevalidatedGitEffect, Mo as actionVerbMatches, Mr as GOAL_HOST_PACKAGES, Ms as requestedTargetAuthorizesMutation, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as TargetSource, Ni as captureClause, Nn as gitCommandMatchesTarget, No as clarifiedSpanOf, Nr as HOST_CAPABILITY_PACKAGE_GROUPS, Ns as requestedTargetMatchesResolved, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as NeedsReviewReason, Oi as RejectedBinding, On as LinearCommitReadback, Oo as LEGACY_QUALIFICATION, Or as DEFAULT_HOST_LOCK, Os as actionCompatible, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as TargetSourceKind, Pi as captureItem, Pn as parseGitCommandManifest, Po as clauseAsksOwnQuestion, Pr as HOST_COHORTS, Ps as semanticActionFromCommand, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as proposeRebindOutcome, Qi as AssetInterpretationFact, Qn as extractToolSubject, Qo as kindOfScope, Qr as evaluateHostLock, Qt as HostProfileError, R as RecoveryOptions, Ra as WaitAuthorization, Ri as extractMethod, Rn as CanonicalCommandSurface, Ro as governedClauseRestrictsExecution, Rr as HostCapabilityRequest, Rs as canonicalizePath, Rt as ManifestIssue, S as latestRootInstruction, Sa as GuardItemStatus, Si as classifyUserInteraction, Sn as GitCommandRejected, So as AuthorityDisposition, Sr as rootLocatorFlavor, Ss as STATEFUL_ACTIONS, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as HostStatus, Ti as isFrozenV042RebindResponse, Tn as GitPrestateCheck, To as ExecutionQualification, Tr as ACTIVE_HOST_LAUNCHER_VERSION, Ts as SUPPORTED_EVIDENCE_ADAPTERS, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as ReleaseObservedIdentity, Ui as BoundaryEffectuation, Un as parsePwshCommand, Uo as interpretMessage, Ur as HostLockEvaluation, Us as sha256, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as PackageRow, Vi as segmentClauses, Vn as canonicalArgvFromCommand, Vo as hasWorkPredicate, Vr as HostCohortSelectionReason, Vs as sanitizeClauseText, Vt as ClaimedMessage, W as closingHint, Wa as ReleaseOperation, Wi as BoundaryQualification, Wn as parseShellCommand, Wo as introducesActionClause, Wr as HostLockStatus, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as confirmRebind, Xi as isCurrentAcceptedBoundary, Xn as evidenceFromPersistedToolResult, Xo as isRestatement, Xr as evaluateExternalWaitCapability, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as RebindProposal, Yi as effectuateBoundary, Yn as ToolSubject, Yo as isQuestionScopeNeedingReview, Yr as bindLiveGoalCapability, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as proposeRebind, Zi as qualifyBoundary, Zn as extractTextContent, Zo as itemHoldsExecutionAuthority, Zr as evaluateHostCapability, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as GuardCheckpoint, _i as authorityCaptureCounts, _n as GIT_COMMAND_TEMPLATES, _o as capabilityConsequence, _r as PROTOCOL_V5_NOTICE, _s as ActionSpec, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as DeriveConfig, ai as MIN_SUPPORTED_HOST_VERSION, an as combineHostPolicy, ao as CapabilityRemedy, ar as TaskKind, as as presentExplanationHead, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as GuardItem, bi as UserInteractionKind, bn as GitCommandManifest, bo as removalIsComplete, br as deriveProjection, bs as CERTIFICATE_VERSION_V2, bt as proofDigestV2, c as CurrentActionBasis, ca as DerivedEnvelope, ci as SUPPORTED_HOST_VERSIONS, cn as injectActiveProfileHostLock, co as DependencyStatus, cr as deriveItemDiagnosis, cs as reportingHeadGoverns, ct as ProofObligation, d as TurnStoppingDecision, da as EvidenceParseStatus, di as parseHostVersion, dn as packageRowsFromPnpmLock, do as ProcessExitStatus, dr as nativeFileTwoRole, ds as splitTextFragments, dt as SessionQuery, ea as BindingActionClosure, ei as hostVersionFromPackages, en as activeRendererModule, eo as rebindAttemptKey, er as persistedToolResultStatus, es as maskCodeSpans, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as EvidenceRole, fi as satisfiesSupportedHostRange, fn as readActiveHostGraph, fo as ProcessFactSource, fr as relevantEvidence, fs as statefulActionsOfScope, ft as SessionQueryV2, g as decideTurnBoundary, ga as GuardBoundary, gi as AuthorityKind, gn as GIT_COMMAND_MANIFEST_IDS, go as admissibleForRemoval, gr as PROTOCOL_V4_NOTICE, gs as ActionManifest, gt as createProofManifest, h as currentActionBases, ha as GoalRef, hi as AuthorityBlockKind, hn as verifyComposedHostLockDump, ho as actionHasCertificationPath, hr as PROTOCOL_V3_NOTICE, hs as ACTION_MANIFEST_VERSION, ht as canonicalProjection, i as supersedeItem, ia as DelegationRef, ii as LATEST_SUPPORTED_HOST_VERSION, in as auditedHostImplementation, io as CapabilityGap, ir as Repairability, is as opensWithDirective, it as ProofKindCapability, j as snapshotSessionEvents, ja as TargetCaptureReasonCode, ji as CaptureScope, jn as createGitPrestateEnvelope, jo as ScopeInterpretation, jr as ExecutableIdentityBinding, js as requestedIdentityKey, jt as EvidenceFacetCoverage, k as SessionApiError, ka as PersistenceAuthorization, ki as bindingIndividuallyAccepted, kn as commitIndexSnapshotDigest, ko as QualificationReason, kr as EXPECTED_HOST_PACKAGES, ks as boundedArtifactChoiceMatches, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as EvidenceBinding, li as compareHostVersions, ln as inspectTargetHostGraph, lo as DerivedProcessFacts, lr as evidenceAvailabilityReason, ls as restatedContentOf, lt as ProofObligationV2, m as classifyCompletionClaim, ma as ExternalOperation, mi as AuthorityBlock, mn as resolveInstalledHostLock, mo as RemovalOutcomeReport, mr as DEFAULT_DELEGATION_TOOL_NAMES, ms as ACTION_MANIFEST, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as BoundaryQualificationKind, ni as HostVersionDecision, nn as auditedDefaultWorkdirProvider, no as replayRebindResult, nr as CertificationSupport, ns as namedActions, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as DeriveResult, oi as ParsedHostVersion, on as hostLockContextFromComposedDump, oo as DEPENDENCY_FREE_ONLY_CONDITION, or as UnifiedItemDiagnosis, os as qualificationOfClause, ot as ProofManifest, p as assessmentOutcomePredicate, pa as ExpectedTransition, pi as currentContractDigest, pn as resolveActiveProfileHostLock, po as ProcessOutcomeReason, pr as CAPTURE_V042_NOTICE, ps as verbIsNegated, pt as bindProofToProjection, q as recoveryTitle, qa as ProposeOutcome, qi as GoalBoundaryAccess, qn as ToolCallInput, qo as isInformationalFragment, qr as HostToolSurface, qt as firstStepGuidance, r as projectCoreV2, ra as DeferAuthorization, ri as HostVersionStatus, rn as auditedForegroundRenderers, ro as CapabilityFact, rr as DiagnosisNextAction, rs as opensConditionLead, rt as ProofKind, s as CompletionDisposition, sa as DeriveScope, si as SUPPORTED_HOST_RANGE, sn as hostLockRowsFromComposedDump, so as DeclaredOperationResult, sr as capabilityRemedyPhrase, ss as questionHeadsClause, st as ProofManifestV2, t as RC017_RC2_HOST_PACKAGES, ta as BoundaryDisposition, ti as selectHostCohort, tn as auditedDefaultWorkdirHost, to as rebindResponse, tr as withDurability, ts as maskQuotedSpans, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as EvidenceOutcome, ui as evaluateMinimumHostVersion, un as packageRowsFromActiveGraph, uo as OperationAttribution, ur as itemDiagnosis, us as semanticActionOfScope, ut as ProofSurface, v as decisionBoundaryKey, va as GuardEvidence, vi as segmentAuthorityBlocks, vn as GitAdapterAction, vo as capabilityFactOf, vr as PROTOCOL_V6_NOTICE, vs as BOUNDED_ARTIFACT_TYPES, vt as proofCapabilityReport, w as progressFingerprint, wa as GuardProjection, wi as ParsedConfirmation, wn as GitEffectRunner, wo as Executee, wr as ACTIVE_HOST_COHORT_IDS, ws as STOP_PROTOCOL_VERSION_V2, wt as proofV2Rejection, x as latestAssistantText, xa as GuardItemKind, xi as classifyTaskIntent, xn as GitCommandParseResult, xo as removalIsPartiallyKnown, xr as legacyRecordsNeedingReview, xs as SEMANTIC_ACTIONS, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as GuardIntegrity, yi as TaskIntent, yn as GitCommandAccepted, yo as partialFailureOf, yr as applyUpgradeEligibility, ys as CERTIFICATE_VERSION, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as WorkUnit, zi as extractOperation, zn as ParsedShell, zo as hasOrderedCoordination, zr as HostCohort, zs as digestStrings, zt as OperationVerbEntry } from "./index-DMr57AgL.js";
+import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
+//#region src/message-source.d.ts
+declare module "@deepseek-ai/dsh-llm" {
+  interface MessageSourceMap {
+    "context-guard": {
+      readonly kind: "context-guard";
+      readonly plugin: "context-guard";
+      readonly form: "notice";
+      readonly summary: string;
+    };
+  }
+}
+//#endregion
 //#region src/tools/evidence.d.ts
-
 /** Trusted embedding evidence, never accepted from a model/tool or HTTP response.
 * The embedding must bind its actual loaded provider to this process/service.
 * Current DSH hosts expose no such verifier, so production restart stays
@@ -170,4 +182,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC017_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };