dsh-completion-guard 0.7.1 → 0.8.1

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable changes to this project are documented here. The project is pre-1.0; release versions track the plugin lifecycle, not stabilised API promises.
 
+## 0.8.1
+
+- DSH version admission now starts at `0.2.0-rc.1`, with no upper limit; Cordis uses an independent qualified `>=4.0.4` range. Upgrade DSH, install Guard, explicitly run `inspect`/`inject`/`verify-dump`, then restart each protected profile. Compatible later package versions can bind a registry-verified lock with `--rebind-registry`; changed consumed programs pass a versioned API/Session probe with an exact-byte receipt. Old certificates remain historical. The tested baseline is `0.2.0-rc.1` / Cordis `4.0.4`; final-artifact and future-version native acceptance are separate.
+- A session mount performs one complete host audit. Ordinary replay reuses that result; checkpoint and Goal/Stop decisions each validate freshly. Actual production mock-publish entries observe two full audits without a ref and three with a ref, including the final veto after the last await. Concurrent entries remain isolated and the synchronous decision segment shares one audit.
+- Fresh CJS and ESM export interpretation now authenticate both routes, including nested conditions and nearer package scopes. A changed route or module refuses the effect. Crash recovery uses the registered resume and fork entries; unknown outcomes never become success evidence.
+- Release packaging normalizes Git-index file modes, so identical clean source commits produce identical archives across hosts. Source entry measurements on a real installed graph are kept separate from native application and exact-artifact acceptance.
+
+## 0.8.0
+
+- Target only DSH `0.1.7-rc.2` / Cordis `4.0.4`. Check all 46 critical package identities, published implementation bytes and actual dependency resolution paths; older hosts are removed from production selection.
+- Install and dispose tools, guards and listeners through awaited `agent/created`, including existing Agents on enablement. Use Session V4 and Jobs SessionId ownership.
+- Keep shell promotion and incomplete output uncertified. Persist Stop boundaries as Guard notices instead of fabricating tool events outside a turn.
+- Read-only prepare discovery and checkpoint pagination now continue after their own persisted observations; changed contract items or business state still invalidate old cursors.
+- Goal feedback now offers only individually certifiable native edit/readback and foreground test bindings, and guides native edits to their readback without demanding a historical resolution chain.
+- Preserve 0.7.1 recovery feedback and independent proof, Goal and release gates. Upgrade requires a new host lock and restart; old certificates are not re-signed.
+
+Upgrade DSH before installing 0.8.0, then regenerate the host lock for each profile. Follow the [upgrade guide](docs/HOST_LOCK_UPGRADE.md). The [source-stage evidence snapshot](docs/DSH_0_1_7_RC2_ACCEPTANCE.md) records development checks and their limits; exact-artifact acceptance is recorded separately in Release attachments.
+
 ## 0.7.1 - 2026-09-22
 
 ### Changes

package/CHANGELOG.zh-CN.md

@@ -2,6 +2,24 @@
 
 本项目的重要变化记录在这里。项目仍处于 1.0 之前；版本号跟踪插件生命周期，不代表 API 已稳定。
 
+## 0.8.1
+
+- DSH 版本准入下限改为 `0.2.0-rc.1`，不设上限；Cordis 使用独立且须经资格验证的 `>=4.0.4` 范围。先升级 DSH、安装 Guard，再明确执行 `inspect`／`inject`／`verify-dump`，最后重启各受保护 Profile。较新兼容包可用 `--rebind-registry` 建立经过 registry 验证的新锁；变化的所消费程序须通过版本化 API／Session 探针，并绑定精确字节回执。旧证书保留为历史。已测试基线是 `0.2.0-rc.1`／Cordis `4.0.4`，最终制品及未来版本原生验收分别建立。
+- 一次会话挂载只执行一次完整宿主审计；普通 replay 复用该结果，checkpoint 和 Goal/Stop 判定各自重新验证。真实生产 mock publish 入口观测到无 ref 两次、有 ref 三次完整审计，包括最后一个 await 后的最终否决。并发入口互相隔离，同步判定段共享一次审计。
+- 同时认证新鲜 CJS、ESM 导出路由，覆盖嵌套条件和近端包 scope；路由或模块变化会拒绝效果。崩溃恢复使用真实注册的 resume、fork 入口，未知结果不再被当作成功证据。
+- 发布打包按 Git index 规范化文件权限，同一干净源码提交在各宿主生成相同归档。真实安装图上的源码入口测量与原生应用、精确制品验收分别记录。
+
+## 0.8.0
+
+- 仅适配 DSH `0.1.7-rc.2` / Cordis `4.0.4`；核对 46 个关键包的身份、已发布实现字节和实际依赖解析路径，移除生产历史宿主选择。
+- 按 awaited `agent/created` 安装并清理工具、guard 和监听器，动态启用接入已有 Agent；使用 Session V4 和 Jobs SessionId。
+- 拒绝把 shell 后台 promotion 的部分输出或截断输出认证为成功。Stop 边界使用持久化 Guard notice，避免制造无所属 turn 的工具事件。
+- prepare 发现列表与 checkpoint 翻页不再因自身只读结果入账而使游标失效；条目或业务状态变化仍会使旧游标失效。
+- Goal 反馈只提供可逐项认证的原生编辑／回读和前台测试绑定，并引导原生编辑完成回读，不再误要求历史 resolution 链。
+- 保留 0.7.1 恢复反馈与现有 proof、Goal、release 边界。升级需重建 host-lock 并重启；旧证书不会重新签发。
+
+安装 0.8.0 前先升级 DSH，再为各 Profile 重新生成宿主锁。步骤见[升级指南](docs/HOST_LOCK_UPGRADE.md)。[源码阶段证据快照](docs/DSH_0_1_7_RC2_ACCEPTANCE.md)保留开发检查及其限制；精确制品验收另记于 Release 附件。
+
 ## 0.7.1（2026-09-22）
 
 ### 变更

package/README.md

@@ -4,21 +4,21 @@
 
 An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks them before the task is marked complete. It restores the same checklist after a resumed session and accepts only matching saved tool results as evidence.
 
-> **0.7.1 release line (2026-09-22).** Verify the [published Releases](https://github.com/GreenLv/dsh-completion-guard/releases) and [npm version](https://www.npmjs.com/package/dsh-completion-guard) before installation. This release line’s shared core/v2 source mirror is pinned to an exact Codex Context Guard commit; the two products have separate runtimes and release identities. See [compatibility](docs/COMPATIBILITY.md) and [acceptance record](docs/LOCAL_ACCEPTANCE.md) for its verified scope and open gates.
+> **0.8.1 requires DSH `>=0.2.0-rc.1`.** Stop the host, upgrade DSH and install Guard, then run the host-lock tool's `inspect`, `inject` and `verify-dump` commands for each profile before starting it when needed. These commands bind the installed packages and their verified routes; installing Guard does not rebuild the lock. The tested host baseline is DSH `0.2.0-rc.1` with Cordis `4.0.4`; later versions must pass the same identity and adapter checks. See [compatibility](docs/COMPATIBILITY.md) for version admission, rebinding and native-evidence limits.
 
 ![Task-contract clauses and bounded evidence pass through a checkpoint before a completion certificate is issued](assets/social/completion-guard-hero.png)
 
 ## Quick start
 
-After confirming that npm serves `0.7.1` and the GitHub Release identifies the same accepted artifact and platform annexes, install this version:
+Stop the host, upgrade to DSH `0.2.0-rc.1` or later, then install Guard in the profile you want to protect:
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.7.1
+dsh plugin --profile web add dsh-completion-guard@0.8.1
 ```
 
-**Upgrade and restart DSH before running the host-lock checks below.** The lock records the package versions and installation directories DSH actually uses. A lock generated before an upgrade describes the old packages and will fail against the new runtime. `inject` writes to `<profile>/cordis.patch.yml`, so back up that file first.
+**Keep the host stopped while upgrading and checking the installed graph below.** The lock records the package versions and installation directories DSH actually uses. A lock generated before an upgrade describes the old packages and will fail against the new runtime. `inject` writes to `<profile>/cordis.patch.yml`, so back up that file first.
 
-Check that each command's JSON output says `status: "supported"`. `inspect`, `inject` and `verify-dump` can exit with code `0` even when their verdict is `unsupported`; a successful shell exit alone is insufficient.
+Check that each command's JSON output says `status: "supported"`. A failure reports a specific reason and exits nonzero. For a later compatible host, add `--rebind-registry` to all three commands; it verifies the official archives and qualifies changed programs in an isolated Node probe before rebuilding the lock. See the [upgrade guide](docs/HOST_LOCK_UPGRADE.md#rebinding-compatible-package-versions).
 
 ```sh
 DSH_RUNTIME_ROOT=/absolute/path/to/.dsh-runtime
@@ -30,9 +30,9 @@ GUARD_HOST_LOCK="$DSH_PROFILE_ROOT/node_modules/.bin/dsh-completion-guard-host-l
 dsh --profile web --dump-config | "$GUARD_HOST_LOCK" verify-dump --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT" --dump-config -
 ```
 
-On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the Web settings directory's `node_modules\.bin` directory and use Windows absolute paths. Native acceptance and publication evidence is recorded per version, bound to that version's exact bytes, in the [acceptance record](docs/LOCAL_ACCEPTANCE.md); a version's source and deterministic evidence never substitutes for its own installed-artifact claim. Other host versions and artifacts need their own native evidence. Repeat this check after changing DSH, Guard or the profile location; an ordinary market-only update does not require reinjection. The Guard stays unavailable if the active package set is missing, mixed, duplicated, or different from a checked setup.
+On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the Web settings directory's `node_modules\.bin` directory and use Windows absolute paths. Native acceptance and publication evidence is recorded per version, bound to that version's exact bytes, in the [acceptance record](docs/LOCAL_ACCEPTANCE.md); a version's source and deterministic evidence never substitutes for its own installed-artifact claim. Other host versions and artifacts need their own native evidence. Repeat this check after changing DSH, Guard or the profile location; an ordinary market-only update does not require reinjection. The Guard stays unavailable if the active package set is missing, duplicated, untrusted, or different from the bound setup.
 
-Restart DSH Web, open a session, and enable the Guard:
+When ready to use Guard, start DSH Web, open a session, and enable it:
 
 ```text
 /context-guard on
@@ -41,7 +41,7 @@ Restart DSH Web, open a session, and enable the Guard:
 
 Activation is opt-in by default. `status` shows whether the Guard is on, its startup phase (`armed` means waiting for your first message), the active policy tier, how many checks remain, and a summary of why the rest are open. `off` stops protection for the current session without deleting its history. `clear` closes the current checklist while keeping prohibitions. `diagnose` explains why a completion check passed or failed. `migration` reports which rule set the session is under and what an upgrade or rollback would mean. `release` reports an explicitly adopted release contract, its coverage, and anything in flight.
 
-### Ordinary work in 0.7.1
+### Ordinary work
 
 Ask DSH to edit a file or run a test as usual. The assistant performs that work with the DSH host tools. Guard records the request, observes the host's persisted call and result, and checks independent readback when the requested outcome needs it. For example, after a host edit changes a configuration file, a separate exact file read can establish the new bytes; a named test needs its own observed result. A successful tool return or the assistant's claim alone does not prove an unrelated condition or a forbidden-file constraint. `context_guard_prepare` explains what evidence is missing, and `context_guard_checkpoint` checks only the predicate that evidence establishes.
 
@@ -57,11 +57,11 @@ The ordinary `context_guard_action` and `context_guard_evidence` tools from 0.6.
 
 ## Status and compatibility
 
-Version 0.7.1 retains support for exactly **DSH `0.1.5-rc.2` or `0.1.5-rc.1`** with Cordis `4.0.2`. These are the latest registered release and the verified minimum. The previous Session API, V2 event vocabulary, and every older host package set remain removed. If you are upgrading from DSH `0.1.2-rc.1`, **start a new session**: Guard does not migrate old logs, proposals or certificates, and it never deletes or reinterprets your old data.
+Version 0.8.1 admits **DSH `>=0.2.0-rc.1`** without an upper version limit. Cordis has an independent `>=4.0.4` peer range and must pass its adapter qualification. The published `0.2.0-rc.1` 46-package graph remains the reviewed baseline; a newer mixed-version graph can receive its own registry-backed lock when the consumed implementations qualify. Changed Session/API implementations run a finite contract probe; incompatible behavior reports a qualification failure, and an old certificate cannot transfer to the new lock. The real installed-graph source harness has been exercised on `0.2.0-rc.1`; exact-artifact macOS/Windows native acceptance and future-version native evidence remain separate.
 
-Package discovery and npm metadata use the same newest-first exact union, `0.1.5-rc.2 || 0.1.5-rc.1`. Older versions, unregistered stable `0.1.5`, and future versions are not advertised as supported. Every admitted version must still match its complete 33-package DSH core graph; missing, mixed, or unknown graphs fail closed.
+After upgrading, inspect, inject and verify the new host lock, then start the profile when needed; follow the [host-lock upgrade guide](docs/HOST_LOCK_UPGRADE.md). DSH migrates old sessions to V4. Guard retains old ledgers and certificates without re-signing them or promoting their old identity to current authority. Goal remains optional; installing the host does not imply it is enabled.
 
-The registered host sets are **DSH `0.1.5-rc.1` and `0.1.5-rc.2`**, each with its own exact 33-package graph. Their identities come from published npm tarballs; mixed versions fail the host check. Registry identity and native acceptance are separate: use the annex for the exact Guard artifact, host version and platform to establish a native pass. See the [compatibility guide](docs/COMPATIBILITY.md) for version rules and host-lock provenance.
+Host checks verify package identities, implementation bytes and the dependency paths that load them. Native and model acceptance belong to the exact release artifact; consult its Release attachments and the [compatibility guide](docs/COMPATIBILITY.md).
 
 Restart is a separate capability. Current DSH does not supply independently verified bindings for market's loaded instance, so the Guard market restart adapter is unavailable. A requested restart remains pending; core protection and unrelated operations continue. Installing or applying a package on disk does not prove that a running process or UI has adopted it.
 
@@ -110,17 +110,17 @@ After the change, restart DSH.
 
 Once enabled, the Guard saves direct user requirements and acceptance checks. A saved tool result counts only when it matches the requested command, file, or other target. A machine-certified completion requires the Guard's checkpoint; missing, stale, or mismatched evidence leaves the task uncertified. Investigations and explanations outside the supported evidence rules can still end with an honest answer, without a completion certificate.
 
-Read-only observation and actions that change packages, files, services, or Git state remain separate. In 0.7.1, ordinary actions use Host tools; a successful lookup never grants permission to make a change. Exact command limits and platform evidence are documented in [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md).
+Read-only observation and actions that change packages, files, services, or Git state remain separate. Ordinary actions use Host tools; a successful lookup never grants permission to make a change. Exact command limits and platform evidence are documented in [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md).
 
 ### When a requirement stays incomplete
 
-“Update the plugin and check the GUI” can contain work the Guard cannot certify, and questions such as “是否有更新” are inquiries: they stay recorded with their source, but no checkpoint or rebind can machine-certify an answer — complete the investigation and report the result. The checkpoint reports a reason and one concrete next action per item. In 0.7.1, `context_guard_prepare` diagnoses the requirement and missing evidence; it is not an execution recipe for ordinary Host work.
+“Update the plugin and check the GUI” can contain work the Guard cannot certify, and questions such as “是否有更新” are inquiries: they stay recorded with their source, but no checkpoint or rebind can machine-certify an answer — complete the investigation and report the result. The checkpoint reports a reason and one concrete next action per item. `context_guard_prepare` diagnoses the requirement and missing evidence; it is not an execution recipe for ordinary Host work.
 
 Only use `context_guard_rebind` when the root requirement itself needs an exact, complete split. Ordinary work that lacks certification support does not need rebinding. If the action or target needs clarification, first ask the root user for an explicit instruction that includes the original clause; the proposal can reference that new item's ID. The tool returns a proposal ID and a comparison. The user applies it with the confirmation line `确认重绑定 <proposal ID>` as the first line of a reply; an explanation request or a new task after a blank line keeps its own meaning, and a new task is captured normally. A confirmation buried in a sentence, quotes, or a code block, or followed by a reversal, does nothing. Splitting a requirement into equally uncertifiable pieces returns “no certification gain” instead of asking for a pointless confirmation. Unsupported parts remain pending, and a qualified safe end does not mean all work is complete.
 
 The default `context_guard_checkpoint` call uses `bindings: []` for diagnosis. It shows at most eight current items/constraints and ten evidence rows, within 12 KiB of plugin JSON. `pagination` reports totals and a separate `next_cursor` for each list; the first page is not the whole contract. Use `item_ids` or `evidence_ids` to focus a query, or `evidence_scope: "history"` for the complete evidence history, including rows marked unavailable. Keep the query unchanged when following a cursor; a changed contract or evidence snapshot requires a fresh query. Large rows expose `detail_id`; retrieve chunks with `detail_offset` and return the first response's `snapshot` as `detail_snapshot` on later chunks. All queries remain read-only and never shrink the certification set.
 
-## Completion and recovery in 0.7.1
+## Completion and recovery
 
 The Guard keeps each requirement, prohibition and answer obligation in its original scope. A question closes when the host records delivery of its answer; a file edit, test or readback needs its own observed result. A request to change an image needs evidence about the changed image, not just a successful tool return. An explicit proof request still uses the proof contract, and an adopted Goal-completion path still checks its required results.
 
@@ -128,7 +128,7 @@ The source of an action matters. A future observation, an unmet time or approval
 
 If an obligation is ambiguous, `context_guard_rebind` can propose an exact split, but only an explicit root-user confirmation applies it. Unsupported verification is reported as insufficient; it does not grant an action or force an edit. Use `/context-guard diagnose` and the read-only checkpoint to see the missing predicate, then complete supported work with host tools and report limitations honestly.
 
-The 0.6.3 execution-era behavior is retained in the [0.6.3 changelog](CHANGELOG.md#063---2026-09-18) for existing installations. On 0.7.1, ordinary `context_guard_action` and `context_guard_evidence` calls only return migration guidance.
+The 0.6.3 execution-era behavior is retained in the [0.6.3 changelog](CHANGELOG.md#063---2026-09-18) for existing installations. Current ordinary `context_guard_action` and `context_guard_evidence` calls only return migration guidance.
 
 ## Policy tiers
 

package/README.zh-CN.md

@@ -4,21 +4,21 @@
 
 面向 DeepSeek Harness（DSH）的任务保护插件。它保存任务要求，并在任务标记完成前逐项核对；会话恢复后仍使用同一份检查表，只有匹配的已保存工具结果才能作为证据。
 
-> **0.7.1 发布线（2026-09-22）。** 安装前请读回[已发布 Release](https://github.com/GreenLv/dsh-completion-guard/releases)和 [npm 版本](https://www.npmjs.com/package/dsh-completion-guard)。本发布线的共享 core/v2 源码镜像绑定 Codex Context Guard 的精确提交；两个产品的运行时和发布身份分别管理。已验证范围和未完成门禁见[兼容性](docs/COMPATIBILITY.md)及[验收记录](docs/LOCAL_ACCEPTANCE.md)。
+> **0.8.1 要求 DSH `>=0.2.0-rc.1`。** 请先停止宿主、升级 DSH 并安装 Guard，再为每个 Profile 执行宿主锁工具的 `inspect`、`inject` 和 `verify-dump`，最后按需启动该 Profile。这些命令绑定实际安装包及其经过验证的路由；安装 Guard 本身不会重建锁。已测试的宿主基线是 DSH `0.2.0-rc.1`、Cordis `4.0.4`；较新版本仍需通过身份和适配契约检查。版本准入、重绑及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
 
 ![任务合同条款与有界证据通过 checkpoint 匹配后签发完成证书](assets/social/completion-guard-hero.png)
 
 ## 快速开始
 
-确认 npm 已提供 `0.7.1`、且 GitHub Release 绑定同一已验收制品及平台附件后，再安装：
+先停止宿主并升级到 DSH `0.2.0-rc.1` 或更高版本，再把 Guard 安装到需要保护的 Profile：
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.7.1
+dsh plugin --profile web add dsh-completion-guard@0.8.1
 ```
 
-**先升级并重启 DSH，再执行下面的宿主锁检查。** 宿主锁记录 DSH 实际使用的包版本和安装目录；如果升级前就生成锁，新运行时会因包版本不匹配而拒绝它。`inject` 会修改 `<profile>/cordis.patch.yml`，请先备份该文件。
+**升级和执行下面的安装图检查时，保持宿主停止。** 宿主锁记录 DSH 实际使用的包版本和安装目录；如果升级前就生成锁，新运行时会因包版本不匹配而拒绝它。`inject` 会修改 `<profile>/cordis.patch.yml`，请先备份该文件。
 
-查看每条命令 JSON 输出中的 `status`，确认它为 `supported`。`inspect`、`inject` 和 `verify-dump` 即使报告 `unsupported`，退出码也可能为 `0`，因此不能只看命令是否正常退出。
+查看每条命令 JSON 输出中的 `status`，确认它为 `supported`。失败会报告具体原因并以非零退出码结束。较新兼容宿主需给三条命令都加上 `--rebind-registry`，先验证官方包归档，并在隔离 Node 进程中检查变化程序的兼容契约，再重建锁；步骤见[升级指南](docs/HOST_LOCK_UPGRADE.md#rebinding-compatible-package-versions)。
 
 ```sh
 DSH_RUNTIME_ROOT=/absolute/path/to/.dsh-runtime
@@ -30,9 +30,9 @@ GUARD_HOST_LOCK="$DSH_PROFILE_ROOT/node_modules/.bin/dsh-completion-guard-host-l
 dsh --profile web --dump-config | "$GUARD_HOST_LOCK" verify-dump --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT" --dump-config -
 ```
 
-Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。各版本的原生验收与发布证据在[验收记录](docs/LOCAL_ACCEPTANCE.md)中按版本绑定其精确制品字节单独记录；任何版本的源码与确定性证据都不能等同于该版本已安装制品的结论。其他宿主版本和制品仍需各自的原生证据。DSH、Guard 或 profile 路径变化后需要重新检查；仅 market 普通升级不需要重新注入。如果当前包集合缺失、混装、重复或不属于已检查环境，Guard 会保持不可用。
+Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。各版本的原生验收与发布证据在[验收记录](docs/LOCAL_ACCEPTANCE.md)中按版本绑定其精确制品字节单独记录；任何版本的源码与确定性证据都不能等同于该版本已安装制品的结论。其他宿主版本和制品仍需各自的原生证据。DSH、Guard 或 profile 路径变化后需要重新检查；仅 market 普通升级不需要重新注入。如果当前包集合缺失、重复、不可信或不同于已绑定环境，Guard 会保持不可用。
 
-然后重启 DSH Web，打开会话并启用 Guard：
+需要使用时，再启动 DSH Web，打开会话并启用 Guard：
 
 ```text
 /context-guard on
@@ -41,7 +41,7 @@ Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard
 
 默认采用 opt-in。`status` 显示 Guard 是否开启、启动阶段（`armed` 表示已就绪、等待你的第一条消息）以及还有多少检查项。`off` 停止保护当前会话，但不删除历史。`clear` 关闭当前待办，同时保留禁止项。`diagnose` 说明完成检查为什么通过或失败；`migration` 报告当前会话适用哪套规则、升级与回滚分别意味着什么；`release` 报告显式发布契约、其覆盖范围以及仍在执行中的操作。
 
-### 0.7.1 中的普通工作
+### 普通工作
 
 照常让 DSH 修改文件或运行测试，助手通过 DSH 宿主工具执行。Guard 保存要求，观察宿主已持久化的调用与结果；要求的结果需要独立核验时，再使用只读回读。例如，宿主修改配置文件后，另一次精确文件回读可证明新内容；具名测试需要自己的真实运行结果。工具返回成功或助手自述，不能证明无关条件，也不能抹去对禁改文件的真实修改。`context_guard_prepare` 说明缺少什么证据，`context_guard_checkpoint` 只核对证据实际证明的谓词。
 
@@ -57,11 +57,11 @@ Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard
 
 ## 状态与兼容性
 
-0.7.1 继续仅支持 **DSH `0.1.5-rc.2` 或 `0.1.5-rc.1`**（配合 Cordis `4.0.2`），两者分别是当前已注册的最新版本和验证过的最低版本。旧 Session API、V2 事件词表和所有更早的宿主包组合仍已删除。如果你从 DSH `0.1.2-rc.1` 升级，请**新建会话**：Guard 不迁移旧日志、提案或证书，也不会删除或重新解释你的旧数据。
+0.8.1 的版本准入范围是 **DSH `>=0.2.0-rc.1`**，没有版本上限。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.1` 46 包依赖图保留为已审查基线；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。已在 `0.2.0-rc.1` 的真实安装图上执行源码入口测量；最终制品的 macOS/Windows 原生验收和未来版本原生证据仍须分别建立。
 
-插件市场与 npm 元数据使用同一个按新到旧排列的精确并集 `0.1.5-rc.2 || 0.1.5-rc.1`。更早版本、未注册的稳定版 `0.1.5` 以及未来版本都不会被宣称为受支持。进入版本集合后仍必须匹配完整的 33 包 DSH 核心图；缺失、混装或未知图会 fail closed。
+升级后重新检查、注入并验证 host-lock，再按需启动对应 Profile，步骤见[宿主锁升级](docs/HOST_LOCK_UPGRADE.md)。旧会话由 DSH 迁移为 V4；Guard 保留旧 ledger 和证书，但不会重签或把旧身份升级为当前权限。Goal 为可选能力，宿主安装不代表它已启用。
 
-已注册的宿主组合是 **DSH `0.1.5-rc.1` 和 `0.1.5-rc.2`**，各自绑定完整的 33 个核心包。包身份取自已发布的 npm tarball；两个版本混装会被拒绝。注册表身份和原生验收是不同证据：原生通过需要匹配 Guard 制品、宿主版本和平台的验收附件。版本规则和宿主锁来源详见[兼容性说明](docs/COMPATIBILITY.md)。
+宿主检查核对包身份、实现字节及实际加载它们的依赖路径。原生与模型验收绑定到每个版本的精确制品；请查看对应 Release 的附件和[兼容性说明](docs/COMPATIBILITY.md)。
 
 重启属于单独能力。当前 DSH 没有提供可独立验证的 market 已加载实例绑定，因此 Guard 的 market 重启适配器返回不可用；已有重启要求仍保持未完成。核心保护和不依赖该接口的操作继续工作。磁盘上的插件安装/应用不等于运行进程或 UI 已生效。
 
@@ -110,17 +110,17 @@ DSH 有两种运行方式：**Web** 是在浏览器的网页界面里使用 DSH
 
 启用后，Guard 会保存用户直接给出的要求和验收条件。只有已保存的工具结果与指定命令、文件或其他目标一致时，才能作为证据。取得机器完成认证需要通过 Guard 检查；证据缺失、过期或对象不一致时，任务保持未认证。当前证据规则未覆盖的调查或解释仍可如实回答并结束，但不会取得完成证书。
 
-只读观察与修改包、文件、服务或 Git 状态的操作保持分离。0.7.1 的普通动作由宿主工具执行；查询成功不会自动产生变更权限。精确命令限制和平台证据见 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md)。
+只读观察与修改包、文件、服务或 Git 状态的操作保持分离。普通动作由宿主工具执行；查询成功不会自动产生变更权限。精确命令限制和平台证据见 [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md)。
 
 ### 要求一直未完成时
 
-“更新插件并检查 GUI”可能包含 Guard 尚不能认证的部分；而“是否有更新”这类提问属于调查：Guard 会保留原文和来源，但如实说明无法机器认证——完成调查并如实回答即可。checkpoint 会逐项给出原因和一个具体的下一步。0.7.1 的 `context_guard_prepare` 用于诊断要求和缺失证据，不是普通宿主工作的执行配方。
+“更新插件并检查 GUI”可能包含 Guard 尚不能认证的部分；而“是否有更新”这类提问属于调查：Guard 会保留原文和来源，但如实说明无法机器认证——完成调查并如实回答即可。checkpoint 会逐项给出原因和一个具体的下一步。`context_guard_prepare` 用于诊断要求和缺失证据，不是普通宿主工作的执行配方。
 
 只有根要求本身需要拆分时，才用 `context_guard_rebind` 提出完整的原文拆分方案。普通工作缺少认证支持，不构成重新绑定的理由。动作或对象不明确时，先请根用户给出包含原条款的明确澄清要求，再在提案中引用新要求的 ID。工具会返回提案 ID 和原项/替代项对照；用户把确认行 `确认重绑定 <proposal ID>` 作为回复的第一行即可应用，空行之后的解释请求或新任务保留各自含义，新任务照常采集。嵌在句子、引号或代码块里的确认，以及后面跟反转表述的确认，都无效。把要求拆成同样不可认证的片段会得到“无认证收益”，而不是要求一次无意义的确认。未支持的部分继续保留 pending；按结构化边界安全结束也不表示全部完成。
 
 用 `bindings: []` 调用 `context_guard_checkpoint` 可查询诊断。默认最多展示八个当前要求/限制和十条证据，插件 JSON 不超过 12 KiB。`pagination` 给出总数及各列表独立的 `next_cursor`，首页不代表完整合同。`item_ids`、`evidence_ids` 可按 ID 查询；`evidence_scope: "history"` 可查看完整证据历史，其中不可引用项会明确标记。翻页时保持查询条件不变，合同或证据快照变化后需重新查询。超长行提供 `detail_id`，用 `detail_offset` 取分片；后续分片需把首次返回的 `snapshot` 作为 `detail_snapshot` 传回。分页只改变展示，不会减少认证时检查的要求。
 
-## 0.7.1 中的完成与恢复
+## 完成与恢复
 
 Guard 按原始范围保留每项要求、禁止项和答复义务。宿主记录答复已交付后，问题才可关闭；文件修改、测试或回读仍需各自的真实结果。修改图片的要求要核验修改后的图片，不能只看工具是否成功。显式 proof 要求继续走 proof 契约；已采用的 Goal 完成路径仍核验必需结果。
 
@@ -128,7 +128,7 @@ Guard 按原始范围保留每项要求、禁止项和答复义务。宿主记
 
 义务含糊时，`context_guard_rebind` 可以提出精确拆分，但只有根用户明确确认才会应用。无法支持的核验会如实报告证据不足，不授予动作，也不强迫再次编辑。用 `/context-guard diagnose` 和只读 checkpoint 查看缺失谓词，再通过宿主工具完成可支持的工作，并如实说明边界。
 
-旧安装的 0.6.3 执行流程保留在[对应更新日志](CHANGELOG.zh-CN.md#0632026-09-18)中。0.7.1 的普通 `context_guard_action` 与 `context_guard_evidence` 调用只返回迁移说明。
+旧安装的 0.6.3 执行流程保留在[对应更新日志](CHANGELOG.zh-CN.md#0632026-09-18)中。当前普通 `context_guard_action` 与 `context_guard_evidence` 调用只返回迁移说明。
 
 ## 策略档位
 

package/bin/dsh-completion-guard-host-lock.mjs

@@ -5,8 +5,10 @@ import { fileURLToPath } from 'node:url'
 import { dirname, join } from 'node:path'
 import {
   injectActiveProfileHostLock,
+  prepareActiveHostTrust,
+  prepareTargetHostTrust,
   inspectTargetHostGraph,
-  evaluateHostLock,
+  evaluateConfiguredHostLock,
   resolveActiveProfileHostLock,
   verifyComposedHostLockDump,
 } from '../dist/domain/index.js'
@@ -23,6 +25,7 @@ function summary(evaluation) {
     cohort_id: evaluation.cohortId,
     host_lock_digest: evaluation.digest,
     goal_available: evaluation.goalAvailable,
+    ...(evaluation.goalQualificationFailure ? { goal_qualification_reason: evaluation.goalQualificationFailure } : {}),
     platform: evaluation.platform,
     profile: evaluation.profileKind,
     // How the cohort's rows were established. Without this in the READBACK, an
@@ -55,19 +58,25 @@ try {
   const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)))
   const packageManifest = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8'))
   if (command === 'inspect-graph') {
-    const target = inspectTargetHostGraph(option('--runtime-root'), option('--profile-root'))
+    const trust = process.argv.includes('--rebind-registry')
+      ? await prepareTargetHostTrust(option('--runtime-root'), option('--profile-root')) : undefined
+    const target = inspectTargetHostGraph(option('--runtime-root'), option('--profile-root'), trust)
     const rows = target.packages
-    const evaluation = evaluateHostLock(rows, {
+    const evaluation = evaluateConfiguredHostLock(rows, {
       platform: process.platform === 'win32' ? 'windows' : 'posix',
       ...(target.profileGraph.state === 'dependency_free_headless' ? { profileKind: 'headless' } : {}),
-    })
+    }, trust ? JSON.stringify(trust) : undefined, option('--profile-root'))
     process.stdout.write(`${JSON.stringify({ ...summary(evaluation), inspection_scope: 'pre_install_target', profile_graph: target.profileGraph, packages: rows })}\n`)
     process.exit(evaluation.status === 'supported' ? 0 : 1)
   }
+  // Explicit registry rebind. Existing baseline inspection stays offline.
+  const trust = process.argv.includes('--rebind-registry')
+    ? await prepareActiveHostTrust(option('--runtime-root'), option('--profile-root')) : undefined
   const active = resolveActiveProfileHostLock(
     option('--runtime-root'),
     option('--profile-root'),
     packageManifest.version,
+    trust,
   )
   if (command === 'inject') injectActiveProfileHostLock(active)
   if (command === 'verify-dump') {

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as PROOF_CAPABILITY_MATRIX, $a as proposeRebind, $i as qualifyBoundary, $n as extractTextContent, $o as itemHoldsExecutionAuthority, $r as bindLiveGoalCapability, $t as previewFirstStepInjection, A as snapshotSessionEvents, Aa as NeedsReviewReason, Ai as parseConfirmationMessage, An as LinearCommitReadback, Ao as LEGACY_QUALIFICATION, Ar as BASE_HOST_PACKAGES, As as actionCompatible, At as sessionQuery, B as RecoveryOptions, Ba as WaitAuthorization, Bi as extractArtifactPaths, Bn as CanonicalCommandSurface, Bo as governedClauseRestrictsExecution, Br as HostCapabilityId, Bs as canonicalizePath, Bt as CommandSurfaceManifest, C as progressFingerprint, Ca as GuardItemKind, Ci as TaskIntent, Cn as GitCommandParseResult, Co as removalIsPartiallyKnown, Cr as rootLocatorFlavor, Cs as SEMANTIC_ACTIONS, Ct as proofDigestV2, D as SESSION_EVENT_ENVELOPE_INVALID, Da as HostStatus, Di as CONFIRM_LINE_PATTERN, Dn as GitPrestateCheck, Do as ExecutionQualification, Dr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Ds as SUPPORTED_EVIDENCE_ADAPTERS, Dt as proofV2Rejection, E as SESSION_API_UNSUPPORTED, Ea as GuardProjection, Ei as classifyUserInteraction, En as GitEffectRunner, Eo as Executee, Er as ACTIVE_HOST_LAUNCHER_VERSION, Es as STOP_PROTOCOL_VERSION_V2, Et as proofOperationMatches, F as CLEANUP_CONDITION_RULE_COMPACT, Fa as TargetSource, Fi as ClauseSegment, Fn as gitCommandMatchesTarget, Fo as clarifiedSpanOf, Fr as GOAL_HOST_PACKAGES, Fs as requestedTargetMatchesResolved, Ft as bindingSatisfies, G as cleanupConditionFor, Gi as BoundaryEffectuation, Gn as parsePwshCommand, Go as interpretMessage, Gr as HostLockContext, Gs as sha256, Gt as FIRST_STEP_GUIDANCE, H as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ha as createProjection, Hi as extractOperation, Hn as ShellParseStatus, Ho as hasQuestionScope, Hr as HostCohort, Hs as normalizeClause, Ht as OperationVerbEntry, I as CLEANUP_CONDITION_RULE_SHORT, Ia as TargetSourceKind, Ii as captureClause, In as parseGitCommandManifest, Io as clauseAsksOwnQuestion, Ir as HOST_CAPABILITY_PACKAGE_GROUPS, Is as semanticActionFromCommand, It as evidenceCoverage, J as recoveryDigest, Ja as BoundedSource, Ji as GoalActivationState, Jn as hasCurrentCertificate, Jo as isExplanationScope, Jr as HostPlatform, Jt as LifecyclePhase, K as closingHint, Ki as BoundaryQualification, Kn as parseShellCommand, Ko as introducesActionClause, Kr as HostLockEvaluation, Kt as FirstStepInjection, L as DEFAULT_RECOVERY_CHAR_BUDGET, La as TargetTuple, Li as captureItem, Ln as revalidateGitPrestate, Lo as clauseIsGoverned, Lr as HOST_COHORTS, Ls as semanticActionFromText, Lt as evidenceMatchesItem, M as RC015_HOST_PACKAGES, Ma as SourceSpan, Mi as RejectedBinding, Mn as commitTreeSnapshotDigest, Mo as QualificationStatus, Mr as EXPECTED_HOST_PACKAGES, Ms as isStatefulAction, Mt as validateProofManifest, N as RC1_HOST_PACKAGES, Na as TargetCaptureReasonCode, Ni as certifyCheckpoint, Nn as createGitPrestateEnvelope, No as ScopeInterpretation, Nr as ExecutableIdentity, Ns as requestedIdentityKey, Nt as validateProofManifestV2, O as SessionApiError, Oa as MessageCoverage, Oi as ParsedConfirmation, On as GitPrestateEnvelope, Oo as GRANTED_QUALIFICATION, Or as ALPHA2_HOST_PACKAGES, Os as SemanticAction, Ot as requiredSubjectsOf, P as CLEANUP_CONDITION_RULE, Pa as TargetCaptureStatus, Pi as CaptureScope, Pn as executeRevalidatedGitEffect, Po as actionVerbMatches, Pr as ExecutableIdentityBinding, Ps as requestedTargetAuthorizesMutation, Pt as EvidenceFacetCoverage, Q as ALPHA3_HOST_PACKAGES, Qa as confirmRebind, Qi as isCurrentAcceptedBoundary, Qn as evidenceFromPersistedToolResult, Qo as isRestatement, Qr as bindExecutableIdentity, Qt as lifecyclePhase, R as MIN_RECOVERY_CHAR_BUDGET, Ra as TargetValue, Ri as classifyClause, Rn as verifiedLinearCommitReadback, Ro as clauseIsProtected, Rr as HostAuditProvenance, Rs as validateActionManifest, Rt as isVerifyingCapability, S as observeAssistantOutcome, Sa as GuardItem, Si as segmentAuthorityBlocks, Sn as GitCommandManifest, So as removalIsComplete, Sr as legacyRecordsNeedingReview, Ss as CERTIFICATE_VERSION_V2, St as proofDigest, T as v6TestPredicate, Ta as GuardOperation, Ti as classifyTaskIntent, Tn as GitEffectExecution, To as DirectiveClass, Tr as ACTIVE_HOST_COHORT_IDS, Ts as STOP_PROTOCOL_VERSION, Tt as proofHostSurfacesOf, U as V6_ORDINARY_COMPLETION_RULE_SHORT, Ui as isInformationalMessage, Un as canonicalArgvFromCommand, Uo as hasWorkPredicate, Ur as HostCohortSelection, Us as sanitizeClauseText, Ut as validateManifest, V as V6_ORDINARY_COMPLETION_RULE, Va as WorkUnit, Vi as extractMethod, Vn as ParsedShell, Vo as hasOrderedCoordination, Vr as HostCapabilityRequest, Vs as digestStrings, Vt as ManifestIssue, W as carriesCleanupCondition, Wi as segmentClauses, Wn as isRunExecutable, Wo as interpretClause, Wr as HostCohortSelectionReason, Ws as sanitizeUrl, Wt as ClaimedMessage, X as renderRecoveryPacket, Xa as RebindArgs, Xi as availableBoundaryQualifications, Xn as ToolResultInput, Xo as isOpenObligation, Xr as HostToolSurface, Xt as firstStepGuidance, Y as recoveryTitle, Ya as ProposeOutcome, Yi as GoalBoundaryAccess, Yn as ToolCallInput, Yo as isInformationalFragment, Yr as HostProfileKind, Yt as claimedBatchHasRealRootInput, Z as v6CurrentRootBoundaries, Za as RebindProposal, Zi as effectuateBoundary, Zn as ToolSubject, Zo as isQuestionScopeNeedingReview, Zr as LEGACY_HOST_COHORTS, Zt as firstStepGuidanceV6, _ as decisionBoundaryKey, _a as GoalRef, _i as currentContractDigest, _n as verifyComposedHostLockDump, _o as actionHasCertificationPath, _r as PROTOCOL_V4_NOTICE, _s as ACTION_MANIFEST_VERSION, _t as bindProofV2ToProjection, a as CONTROL_RECORD_PREFIX, aa as DeferAuthorization, ai as selectHostCohort, an as auditedDefaultWorkdirProvider, ao as CapabilityFact, ar as DiagnosisNextAction, as as opensConditionLead, at as ProofHostSurface, b as latestAssistantText, ba as GuardEvidence, bi as AuthorityKind, bn as GitAdapterAction, bo as capabilityFactOf, br as applyUpgradeEligibility, bs as BOUNDED_ARTIFACT_TYPES, bt as createProofManifestV2, c as NO_PROGRESS_RECORD_PREFIX, ca as DeriveResult, ci as LATEST_SUPPORTED_HOST_VERSION, cn as hostLockContextFromComposedDump, co as DEPENDENCY_FREE_ONLY_CONDITION, cr as UnifiedItemDiagnosis, cs as qualificationOfClause, ct as ProofKindV2, d as assessmentAction, da as EvidenceBinding, di as SUPPORTED_HOST_RANGE, dn as inspectTargetHostGraph, do as DerivedProcessFacts, dr as evidenceAvailabilityReason, ds as restatedContentOf, dt as ProofObligation, ea as AssetInterpretationFact, ei as evaluateExternalWaitCapability, en as ActiveProfileHostLock, eo as proposeRebindOutcome, er as extractToolSubject, es as kindOfScope, et as PROOF_KINDS, f as assessmentOutcomePredicate, fa as EvidenceOutcome, fi as SUPPORTED_HOST_VERSIONS, fn as packageRowsFromActiveGraph, fo as OperationAttribution, fr as itemDiagnosis, fs as semanticActionOfScope, ft as ProofObligationV2, g as decideTurnStopping, ga as ExternalOperation, gi as satisfiesSupportedHostRange, gn as resolveInstalledHostLock, go as RemovalOutcomeReport, gr as PROTOCOL_V3_NOTICE, gs as ACTION_MANIFEST, gt as bindProofToProjection, h as decideTurnBoundary, ha as ExpectedTransition, hi as parseHostVersion, hn as resolveActiveProfileHostLock, ho as ProcessOutcomeReason, hr as DEFAULT_DELEGATION_TOOL_NAMES, hs as verbIsNegated, ht as SessionQueryV2, i as AssistantOutcomeObservation, ia as BoundaryQualificationKind, ii as hostVersionFromPackages, in as auditedDefaultWorkdirHost, io as replayRebindResult, ir as CertificationSupport, is as namedActions, it as PROOF_PROTOCOL_VERSION_V2, j as RC015_RC2_HOST_PACKAGES, ja as PersistenceAuthorization, ji as CheckpointResult, jn as commitIndexSnapshotDigest, jo as QualificationReason, jr as DEFAULT_HOST_LOCK, js as boundedArtifactChoiceMatches, jt as sessionQueryV2, k as V3SessionLike, ka as NeedsReviewFact, ki as isFrozenV042RebindResponse, kn as GitTargetIdentity, ko as InterpretOptions, kr as AuditedExecutable, ks as StatefulAction, kt as scopeCoverageDigest, l as NO_PROGRESS_TURNS_BEFORE_STOP, la as DeriveScope, li as MIN_SUPPORTED_HOST_VERSION, ln as hostLockRowsFromComposedDump, lo as DeclaredOperationResult, lr as capabilityRemedyPhrase, ls as questionHeadsClause, lt as ProofManifest, m as currentActionBases, ma as EvidenceRole, mi as evaluateMinimumHostVersion, mn as readActiveHostGraph, mo as ProcessFactSource, mr as CAPTURE_V042_NOTICE, ms as statefulActionsOfScope, mt as SessionQuery, n as projectCoreV2, na as BindingActionClosure, ni as evaluateHostLock, nn as TargetHostGraph, no as rebindAttemptKey, nr as persistedToolResultStatus, ns as maskCodeSpans, nt as PROOF_MANIFEST_DOMAIN_V2, o as CompletionDisposition, oa as DelegationRef, oi as HostVersionDecision, on as auditedForegroundRenderers, oo as CapabilityGap, or as Repairability, os as opensWithDirective, ot as ProofKind, p as classifyCompletionClaim, pa as EvidenceParseStatus, pi as compareHostVersions, pn as packageRowsFromPnpmLock, po as ProcessExitStatus, pr as relevantEvidence, ps as splitTextFragments, pt as ProofSurface, q as openItems, qi as BoundaryRequest, qn as goalCompletionDenial, qo as isExecutableItem, qr as HostLockStatus, qt as FirstStepPreviewInput, r as supersedeItem, ra as BoundaryDisposition, ri as evaluateToolSurfaceCapability, rn as activeRendererModule, ro as rebindResponse, rr as withDurability, rs as maskQuotedSpans, rt as PROOF_PROTOCOL_VERSION, s as CurrentActionBasis, sa as DeriveConfig, si as HostVersionStatus, sn as combineHostPolicy, so as CapabilityRemedy, sr as TaskKind, ss as presentExplanationHead, st as ProofKindCapability, t as projectSessionCoreV2, ta as AssetObligation, ti as evaluateHostCapability, tn as HostProfileError, to as proposeRebindV042, tr as isDeterministicCheck, ts as legacyQuestionReadingIsInformational, tt as PROOF_KINDS_V2, u as TurnStoppingDecision, ua as DerivedEnvelope, ui as ParsedHostVersion, un as injectActiveProfileHostLock, uo as DependencyStatus, ur as deriveItemDiagnosis, us as reportingHeadGoverns, ut as ProofManifestV2, v as isRootPauseRequest, va as GuardBoundary, vi as AuthorityBlock, vn as GIT_COMMAND_MANIFEST_IDS, vo as admissibleForRemoval, vr as PROTOCOL_V5_NOTICE, vs as ActionManifest, vt as canonicalProjection, w as testOutcomePredicate, wa as GuardItemStatus, wi as UserInteractionKind, wn as GitCommandRejected, wo as AuthorityDisposition, wr as ACTIVE_HOST_COHORT_ID, ws as STATEFUL_ACTIONS, wt as proofEvidenceConstraints, x as latestRootInstruction, xa as GuardIntegrity, xi as authorityCaptureCounts, xn as GitCommandAccepted, xo as partialFailureOf, xr as deriveProjection, xs as CERTIFICATE_VERSION, xt as proofCapabilityReport, y as isWholeTaskCompletionClaim, ya as GuardCheckpoint, yi as AuthorityBlockKind, yn as GIT_COMMAND_TEMPLATES, yo as capabilityConsequence, yr as PROTOCOL_V6_NOTICE, ys as ActionSpec, yt as createProofManifest, z as RecoveryCause, za as VerificationContract, zi as environmentDefaultRepositoryTarget, zn as CanonicalArgv, zo as explanationHasActionResidue, zr as HostCapabilityEvaluation, zs as validateActionTarget, zt as COMMAND_SURFACE_MANIFEST } from "../index-hiUtfKJa.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as TargetValue, $i as environmentDefaultRepositoryTarget, $n as CanonicalCommandSurface, $o as clauseIsProtected, $r as HostCapabilityRequest, $s as validateActionManifest, $t as HostProfileError, A as V4SessionLike, Aa as ExpectedTransition, Ai as currentContractDigest, An as registryArchiveModules, Ao as ProcessOutcomeReason, Ar as PROTOCOL_V3_NOTICE, As as verbIsNegated, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as GuardOperation, Bi as CONFIRM_LINE_PATTERN, Bn as GitPrestateCheck, Bo as DirectiveClass, Br as ACTIVE_HOST_LAUNCHER_VERSION, Bs as STOP_PROTOCOL_VERSION, Bt as validateManifest, C as observeAssistantOutcome, Ca as DeriveResult, Ci as ParsedHostVersion, Cn as HostTrustError, Co as DEPENDENCY_FREE_ONLY_CONDITION, Cr as deriveItemDiagnosis, Cs as qualificationOfClause, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as EvidenceOutcome, Di as evaluateMinimumHostVersion, Dn as parseHostTrust, Do as OperationAttribution, Dr as relevantEvidence, Ds as semanticActionOfScope, Dt as sessionQuery, E as v6TestPredicate, Ea as EvidenceBinding, Ei as compareHostVersions, En as hostTrustDigest, Eo as DerivedProcessFacts, Er as nativeFileTwoRole, Es as restatedContentOf, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as GuardEvidence, Fi as segmentAuthorityBlocks, Fn as GitCommandManifest, Fo as capabilityFactOf, Fr as deriveProjection, Fs as BOUNDED_ARTIFACT_TYPES, Ft as isVerifyingCapability, G as openItems, Ga as NeedsReviewReason, Gi as RejectedBinding, Gn as commitTreeSnapshotDigest, Go as LEGACY_QUALIFICATION, Gr as ExecutableIdentity, Gs as actionCompatible, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as HostStatus, Hi as isFrozenV042RebindResponse, Hn as GitTargetIdentity, Ho as ExecutionQualification, Hr as BASE_HOST_PACKAGES, Hs as SUPPORTED_EVIDENCE_ADAPTERS, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as GuardIntegrity, Ii as TaskIntent, In as GitCommandParseResult, Io as partialFailureOf, Ir as legacyRecordsNeedingReview, Is as CERTIFICATE_VERSION, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as TargetCaptureReasonCode, Ji as CaptureScope, Jn as gitCommandMatchesTarget, Jo as ScopeInterpretation, Jr as HOST_CAPABILITY_PACKAGE_GROUPS, Js as requestedIdentityKey, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as PersistenceAuthorization, Ki as bindingIndividuallyAccepted, Kn as createGitPrestateEnvelope, Ko as QualificationReason, Kr as ExecutableIdentityBinding, Ks as boundedArtifactChoiceMatches, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as GuardItem, Li as UserInteractionKind, Ln as GitCommandRejected, Lo as removalIsComplete, Lr as rootLocatorFlavor, Ls as CERTIFICATE_VERSION_V2, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as GoalRef, Mi as AuthorityBlockKind, Mn as GIT_COMMAND_TEMPLATES, Mo as actionHasCertificationPath, Mr as PROTOCOL_V5_NOTICE, Ms as ACTION_MANIFEST_VERSION, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as GuardBoundary, Ni as AuthorityKind, Nn as GitAdapterAction, No as admissibleForRemoval, Nr as PROTOCOL_V6_NOTICE, Ns as ActionManifest, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as EvidenceParseStatus, Oi as parseHostVersion, On as qualifyHostTrust, Oo as ProcessExitStatus, Or as CAPTURE_V042_NOTICE, Os as splitTextFragments, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as GuardCheckpoint, Pi as authorityCaptureCounts, Pn as GitCommandAccepted, Po as capabilityConsequence, Pr as applyUpgradeEligibility, Ps as ActionSpec, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as TargetTuple, Qi as classifyClause, Qn as CanonicalArgv, Qo as clauseIsGoverned, Qr as HostCapabilityId, Qs as semanticActionFromText, Qt as AuditedPackageExpectation, R as RecoveryOptions, Ra as GuardItemKind, Ri as classifyTaskIntent, Rn as GitEffectExecution, Ro as removalIsPartiallyKnown, Rr as ACTIVE_HOST_COHORT_ID, Rs as SEMANTIC_ACTIONS, Rt as ManifestIssue, S as latestRootInstruction, Sa as DeriveConfig, Si as MIN_SUPPORTED_HOST_VERSION, Sn as HostTrustAcquisitionOptions, So as CapabilityRemedy, Sr as capabilityRemedyPhrase, Ss as presentExplanationHead, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as DerivedEnvelope, Ti as SUPPORTED_HOST_VERSIONS, Tn as acquireHostTrust, To as DependencyStatus, Tr as itemDiagnosis, Ts as reportingHeadGoverns, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as MessageCoverage, Ui as parseConfirmationMessage, Un as LinearCommitReadback, Uo as GRANTED_QUALIFICATION, Ur as DEFAULT_HOST_LOCK, Us as SemanticAction, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as GuardProjection, Vi as ParsedConfirmation, Vn as GitPrestateEnvelope, Vo as Executee, Vr as AuditedExecutable, Vs as STOP_PROTOCOL_VERSION_V2, Vt as ClaimedMessage, W as closingHint, Wa as NeedsReviewFact, Wi as CheckpointResult, Wn as commitIndexSnapshotDigest, Wo as InterpretOptions, Wr as EXPECTED_HOST_PACKAGES, Ws as StatefulAction, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as TargetSource, Xi as captureClause, Xn as revalidateGitPrestate, Xo as clarifiedSpanOf, Xr as HostAuditProvenance, Xs as requestedTargetMatchesResolved, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as TargetCaptureStatus, Yi as ClauseSegment, Yn as parseGitCommandManifest, Yo as actionVerbMatches, Yr as HOST_COHORTS, Ys as requestedTargetAuthorizesMutation, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as TargetSourceKind, Zi as captureItem, Zn as verifiedLinearCommitReadback, Zo as clauseAsksOwnQuestion, Zr as HostCapabilityEvaluation, Zs as semanticActionFromCommand, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as BindingActionClosure, _i as selectHostCohort, _n as readActiveHostGraph, _o as rebindAttemptKey, _r as CertificationSupport, _s as maskCodeSpans, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as BOUNDARY_RECORD_PREFIX, ac as sanitizeUrl, ai as HostLockStatus, an as auditedHostImplementation, ar as parseShellCommand, as as interpretClause, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as DeferAuthorization, bi as HostVersionStatus, bn as verifyComposedHostLockDump, bo as CapabilityFact, br as TaskKind, bs as opensConditionLead, bt as proofDigestV2, c as CurrentActionBasis, ca as BoundaryRequest, ci as HostToolSurface, cn as evaluateConfiguredHostLock, cr as ToolCallInput, cs as isExecutableItem, ct as ProofObligation, d as TurnStoppingDecision, da as availableBoundaryQualifications, di as evaluateExternalWaitCapability, dn as injectActiveProfileHostLock, do as RebindArgs, dr as evidenceFromPersistedToolResult, ds as isOpenObligation, dt as SessionQuery, ea as extractArtifactPaths, ec as validateActionTarget, ei as HostCohort, en as TargetHostGraph, eo as VerificationContract, er as ParsedShell, es as explanationHasActionResidue, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as effectuateBoundary, fi as evaluateGraphDerivedHostLock, fn as inspectTargetHostGraph, fo as RebindProposal, fr as extractTextContent, fs as isQuestionScopeNeedingReview, ft as SessionQueryV2, g as decideTurnBoundary, ga as AssetObligation, gi as hostVersionFromPackages, gn as prepareTargetHostTrust, go as proposeRebindV042, gr as withDurability, gs as legacyQuestionReadingIsInformational, gt as createProofManifest, h as currentActionBases, ha as AssetInterpretationFact, hi as evaluateToolSurfaceCapability, hn as prepareActiveHostTrust, ho as proposeRebindOutcome, hr as persistedToolResultStatus, hs as kindOfScope, ht as canonicalProjection, i as supersedeItem, ia as segmentClauses, ic as sanitizeClauseText, ii as HostLockEvaluation, in as auditedForegroundRenderers, ir as parsePwshCommand, is as hasWorkPredicate, it as ProofKindCapability, j as snapshotSessionEvents, ja as ExternalOperation, ji as AuthorityBlock, jn as GIT_COMMAND_MANIFEST_IDS, jo as RemovalOutcomeReport, jr as PROTOCOL_V4_NOTICE, js as ACTION_MANIFEST, jt as EvidenceFacetCoverage, k as SessionApiError, ka as EvidenceRole, ki as satisfiesSupportedHostRange, kn as registryArchiveFiles, ko as ProcessFactSource, kr as DEFAULT_DELEGATION_TOOL_NAMES, ks as statefulActionsOfScope, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as GoalActivationState, li as bindExecutableIdentity, ln as hostLockContextFromComposedDump, lo as BoundedSource, lr as ToolResultInput, ls as isExplanationScope, lt as ProofObligationV2, m as classifyCompletionClaim, ma as qualifyBoundary, mi as evaluateHostLock, mn as packageRowsFromPnpmLock, mo as proposeRebind, mr as isDeterministicCheck, ms as itemHoldsExecutionAuthority, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as extractOperation, nc as digestStrings, ni as HostCohortSelectionReason, nn as auditedDefaultWorkdirHost, no as WorkUnit, nr as canonicalArgvFromCommand, ns as hasOrderedCoordination, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as BoundaryEffectuation, oc as sha256, oi as HostPlatform, on as combineHostPolicy, or as goalCompletionDenial, os as interpretMessage, ot as ProofManifest, p as assessmentOutcomePredicate, pa as isCurrentAcceptedBoundary, pi as evaluateHostCapability, pn as packageRowsFromActiveGraph, po as confirmRebind, pr as extractToolSubject, ps as isRestatement, pt as bindProofToProjection, q as recoveryTitle, qa as SourceSpan, qi as certifyCheckpoint, qn as executeRevalidatedGitEffect, qo as QualificationStatus, qr as GOAL_HOST_PACKAGES, qs as isStatefulAction, qt as firstStepGuidance, r as projectCoreV2, ra as isInformationalMessage, rc as normalizeClause, ri as HostLockContext, rn as auditedDefaultWorkdirProvider, ro as createProjection, rr as isRunExecutable, rs as hasQuestionScope, rt as ProofKind, s as CompletionDisposition, sa as BoundaryQualification, si as HostProfileKind, sn as evaluateActiveHostLock, sr as hasCurrentCertificate, ss as introducesActionClause, st as ProofManifestV2, t as RC020_RC1_HOST_PACKAGES, ta as extractMethod, tc as canonicalizePath, ti as HostCohortSelection, tn as activeRendererModule, to as WaitAuthorization, tr as ShellParseStatus, ts as governedClauseRestrictsExecution, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as GoalBoundaryAccess, ui as bindLiveGoalCapability, un as hostLockRowsFromComposedDump, uo as ProposeOutcome, ur as ToolSubject, us as isInformationalFragment, ut as ProofSurface, v as decisionBoundaryKey, va as BoundaryDisposition, vi as HOST_VALIDATED_VERSIONS, vn as resolveActiveProfileHostLock, vo as rebindResponse, vr as DiagnosisNextAction, vs as maskQuotedSpans, vt as proofCapabilityReport, w as progressFingerprint, wa as DeriveScope, wi as SUPPORTED_HOST_RANGE, wn as HostTrustedPackage, wo as DeclaredOperationResult, wr as evidenceAvailabilityReason, ws as questionHeadsClause, wt as proofV2Rejection, x as latestAssistantText, xa as DelegationRef, xi as LATEST_TESTED_HOST_VERSION, xn as HostRebindTrust, xo as CapabilityGap, xr as UnifiedItemDiagnosis, xs as opensWithDirective, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as BoundaryQualificationKind, yi as HostVersionDecision, yn as resolveInstalledHostLock, yo as replayRebindResult, yr as Repairability, ys as namedActions, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as GuardItemStatus, zi as classifyUserInteraction, zn as GitEffectRunner, zo as AuthorityDisposition, zr as ACTIVE_HOST_COHORT_IDS, zs as STATEFUL_ACTIONS, zt as OperationVerbEntry } from "../index-jKw6mANp.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as supersedeItem, $i as STOP_PROTOCOL_VERSION, $n as NO_PROGRESS_TURNS_BEFORE_STOP, $r as extractArtifactPaths, $t as canonicalProjection, A as firstStepGuidanceV6, Ai as kindOfScope, An as v6CurrentRootBoundaries, Ar as rebindAttemptKey, At as LATEST_SUPPORTED_HOST_VERSION, B as SessionApiError, Bi as reportingHeadGoverns, Br as relevantEvidence, Bt as RC1_HOST_PACKAGES, C as gitCommandMatchesTarget, Ci as isExecutableItem, Cn as carriesCleanupCondition, Cr as qualifyBoundary, Ct as bindLiveGoalCapability, D as FIRST_STEP_GUIDANCE, Di as isQuestionScopeNeedingReview, Dn as recoveryDigest, Dr as proposeRebind, Dt as evaluateToolSurfaceCapability, E as verifiedLinearCommitReadback, Ei as isOpenObligation, En as openItems, Er as confirmRebind, Et as evaluateHostLock, Fi as opensConditionLead, Fr as parseConfirmationMessage, Ft as evaluateMinimumHostVersion, G as PROTOCOL_V3_NOTICE, Gi as verbIsNegated, Gr as capabilityFactOf, Gt as PROOF_CAPABILITY_MATRIX, H as projectCoreV2, Hi as semanticActionOfScope, Hr as actionHasCertificationPath, Ht as authorityCaptureCounts, Ii as opensWithDirective, Ir as capabilityRemedyPhrase, It as parseHostVersion, J as PROTOCOL_V6_NOTICE, Ji as BOUNDED_ARTIFACT_TYPES, Jn as evidenceCoverage, Jr as removalIsPartiallyKnown, Jt as PROOF_MANIFEST_DOMAIN_V2, K as PROTOCOL_V4_NOTICE, Ki as ACTION_MANIFEST, Kr as partialFailureOf, Kt as PROOF_KINDS, Li as presentExplanationHead, Lr as deriveItemDiagnosis, Lt as satisfiesSupportedHostRange, M as previewFirstStepInjection, Mi as maskCodeSpans, Mr as replayRebindResult, Mt as SUPPORTED_HOST_RANGE, N as projectSessionCoreV2, Ni as maskQuotedSpans, Nr as CONFIRM_LINE_PATTERN, Nt as SUPPORTED_HOST_VERSIONS, O as claimedBatchHasRealRootInput, Oi as isRestatement, On as recoveryTitle, Or as proposeRebindOutcome, Ot as hostVersionFromPackages, Pi as namedActions, Pr as isFrozenV042RebindResponse, Pt as compareHostVersions, Q as rootLocatorFlavor, Qi as STATEFUL_ACTIONS, Qn as NO_PROGRESS_RECORD_PREFIX, Qr as environmentDefaultRepositoryTarget, Qt as bindProofV2ToProjection, R as SESSION_API_UNSUPPORTED, Ri as qualificationOfClause, Rr as evidenceAvailabilityReason, Rt as RC015_RC2_HOST_PACKAGES, S as executeRevalidatedGitEffect, Si as introducesActionClause, Sn as V6_ORDINARY_COMPLETION_RULE_SHORT, Sr as isCurrentAcceptedBoundary, St as bindExecutableIdentity, T as revalidateGitPrestate, Ti as isInformationalFragment, Tn as closingHint, Tr as createProjection, Tt as evaluateHostCapability, U as CAPTURE_V042_NOTICE, Ui as splitTextFragments, Ur as admissibleForRemoval, Ut as segmentAuthorityBlocks, V as snapshotSessionEvents, Vi as restatedContentOf, Vr as DEPENDENCY_FREE_ONLY_CONDITION, Vt as ALPHA3_HOST_PACKAGES, W as DEFAULT_DELEGATION_TOOL_NAMES, Wi as statefulActionsOfScope, Wr as capabilityConsequence, Wt as certifyCheckpoint, X as deriveProjection, Xi as CERTIFICATE_VERSION_V2, Xn as isVerifyingCapability, Xr as captureItem, Xt as PROOF_PROTOCOL_VERSION_V2, Y as applyUpgradeEligibility, Yi as CERTIFICATE_VERSION, Yn as evidenceMatchesItem, Yr as captureClause, Yt as PROOF_PROTOCOL_VERSION, Z as legacyRecordsNeedingReview, Zi as SEMANTIC_ACTIONS, Zn as CONTROL_RECORD_PREFIX, Zr as classifyClause, Zt as bindProofToProjection, _ as GIT_COMMAND_MANIFEST_IDS, _a as sanitizeClauseText, _i as hasOrderedCoordination, _n as CLEANUP_CONDITION_RULE_SHORT, _t as EXPECTED_HOST_PACKAGES, a as auditedForegroundRenderers, aa as requestedIdentityKey, an as proofEvidenceConstraints, ar as decideTurnStopping, at as withDurability, b as commitTreeSnapshotDigest, bi as interpretClause, bn as V6_ORDINARY_COMPLETION_RULE, br as availableBoundaryQualifications, bt as HOST_COHORTS, c as hostLockRowsFromComposedDump, ca as semanticActionFromCommand, ci as GRANTED_QUALIFICATION, cn as proofV2Rejection, cr as isWholeTaskCompletionClaim, ct as parsePwshCommand, d as packageRowsFromActiveGraph, da as validateActionTarget, di as clarifiedSpanOf, dn as sessionQuery, dr as observeAssistantOutcome, dt as ACTIVE_HOST_COHORT_IDS, ea as STOP_PROTOCOL_VERSION_V2, ei as extractMethod, en as createProofManifest, er as assessmentAction, et as evidenceFromPersistedToolResult, f as packageRowsFromPnpmLock, fa as COMMAND_SURFACE_MANIFEST, fi as clauseAsksOwnQuestion, fn as sessionQueryV2, fr as progressFingerprint, ft as ACTIVE_HOST_LAUNCHER_VERSION, g as verifyComposedHostLockDump, ga as normalizeClause, gi as governedClauseRestrictsExecution, gn as CLEANUP_CONDITION_RULE_COMPACT, gr as hasCurrentCertificate, gt as DEFAULT_HOST_LOCK, h as resolveInstalledHostLock, ha as digestStrings, hi as explanationHasActionResidue, hn as CLEANUP_CONDITION_RULE, hr as goalCompletionDenial, ht as BASE_HOST_PACKAGES, i as auditedDefaultWorkdirProvider, ia as isStatefulAction, in as proofDigestV2, ir as decideTurnBoundary, it as persistedToolResultStatus, j as lifecyclePhase, ji as legacyQuestionReadingIsInformational, jr as rebindResponse, jt as MIN_SUPPORTED_HOST_VERSION, k as firstStepGuidance, ki as itemHoldsExecutionAuthority, kn as renderRecoveryPacket, kr as proposeRebindV042, kt as selectHostCohort, l as injectActiveProfileHostLock, la as semanticActionFromText, li as LEGACY_QUALIFICATION, ln as requiredSubjectsOf, lr as latestAssistantText, lt as parseShellCommand, m as resolveActiveProfileHostLock, ma as canonicalizePath, mi as clauseIsProtected, mn as validateProofManifestV2, mr as v6TestPredicate, mt as ALPHA2_HOST_PACKAGES, n as activeRendererModule, na as actionCompatible, ni as isInformationalMessage, nn as proofCapabilityReport, nr as classifyCompletionClaim, nt as extractToolSubject, o as combineHostPolicy, oa as requestedTargetAuthorizesMutation, oi as classifyTaskIntent, on as proofHostSurfacesOf, or as decisionBoundaryKey, ot as canonicalArgvFromCommand, p as readActiveHostGraph, pa as validateManifest, pi as clauseIsGoverned, pn as validateProofManifest, pr as testOutcomePredicate, pt as ALPHA2_DSHMARKET_139_HOST_PACKAGES, q as PROTOCOL_V5_NOTICE, qi as ACTION_MANIFEST_VERSION, qn as bindingSatisfies, qr as removalIsComplete, qt as PROOF_KINDS_V2, r as auditedDefaultWorkdirHost, ra as boundedArtifactChoiceMatches, ri as segmentClauses, rn as proofDigest, rr as currentActionBases, rt as isDeterministicCheck, s as hostLockContextFromComposedDump, sa as requestedTargetMatchesResolved, si as classifyUserInteraction, sn as proofOperationMatches, sr as isRootPauseRequest, st as isRunExecutable, t as HostProfileError, ta as SUPPORTED_EVIDENCE_ADAPTERS, ti as extractOperation, tn as createProofManifestV2, tr as assessmentOutcomePredicate, tt as extractTextContent, u as inspectTargetHostGraph, ua as validateActionManifest, ui as actionVerbMatches, un as scopeCoverageDigest, ur as latestRootInstruction, ut as ACTIVE_HOST_COHORT_ID, v as GIT_COMMAND_TEMPLATES, va as sanitizeUrl, vi as hasQuestionScope, vn as DEFAULT_RECOVERY_CHAR_BUDGET, vt as GOAL_HOST_PACKAGES, w as parseGitCommandManifest, wi as isExplanationScope, wn as cleanupConditionFor, wr as currentContractDigest, wt as evaluateExternalWaitCapability, x as createGitPrestateEnvelope, xi as interpretMessage, xn as V6_ORDINARY_COMPLETION_RULE_COMPACT, xr as effectuateBoundary, xt as LEGACY_HOST_COHORTS, y as commitIndexSnapshotDigest, ya as sha256, yi as hasWorkPredicate, yn as MIN_RECOVERY_CHAR_BUDGET, yt as HOST_CAPABILITY_PACKAGE_GROUPS, z as SESSION_EVENT_ENVELOPE_INVALID, zi as questionHeadsClause, zr as itemDiagnosis, zt as RC015_HOST_PACKAGES } from "../domain-DbPbaoXp.js";
+import { $ as PROOF_KINDS, $i as hostVersionFromPackages, $n as capabilityConsequence, $r as statefulActionsOfScope, A as PROTOCOL_V4_NOTICE, Aa as RC020_RC1_HOST_PACKAGES, Ai as HostTrustError, An as isCurrentAcceptedBoundary, Ar as interpretMessage, At as carriesCleanupCondition, B as extractToolSubject, Bi as BASE_HOST_PACKAGES, Bn as replayRebindResult, Br as legacyQuestionReadingIsInformational, C as SESSION_EVENT_ENVELOPE_INVALID, Ca as requestedIdentityKey, Ci as packageRowsFromPnpmLock, Cn as hasCurrentCertificate, Cr as clauseIsProtected, Ct as CLEANUP_CONDITION_RULE_COMPACT, D as CAPTURE_V042_NOTICE, Da as semanticActionFromText, Di as resolveActiveProfileHostLock, Dn as BOUNDARY_RECORD_PREFIX, Dr as hasQuestionScope, Dt as V6_ORDINARY_COMPLETION_RULE, E as projectCoreV2, Ea as semanticActionFromCommand, Ei as readActiveHostGraph, Er as hasOrderedCoordination, Et as MIN_RECOVERY_CHAR_BUDGET, F as legacyRecordsNeedingReview, Fi as registryArchiveFiles, Fn as proposeRebind, Fr as isOpenObligation, Ft as recoveryTitle, G as isRunExecutable, Gi as HOST_COHORTS, Gn as deriveItemDiagnosis, Gr as opensWithDirective, H as persistedToolResultStatus, Hi as EXPECTED_HOST_PACKAGES, Hn as isFrozenV042RebindResponse, Hr as maskQuotedSpans, I as rootLocatorFlavor, Ii as registryArchiveModules, In as proposeRebindOutcome, Ir as isQuestionScopeNeedingReview, It as renderRecoveryPacket, J as authorityCaptureCounts, Ji as evaluateExternalWaitCapability, Jn as nativeFileTwoRole, Jr as questionHeadsClause, K as parsePwshCommand, Ki as bindExecutableIdentity, Kn as evidenceAvailabilityReason, Kr as presentExplanationHead, L as supersedeItem, Li as ACTIVE_HOST_COHORT_ID, Ln as proposeRebindV042, Lr as isRestatement, Lt as v6CurrentRootBoundaries, M as PROTOCOL_V6_NOTICE, Mi as hostTrustDigest, Mn as currentContractDigest, Mr as isExecutableItem, Mt as closingHint, N as applyUpgradeEligibility, Ni as parseHostTrust, Nn as createProjection, Nr as isExplanationScope, Nt as openItems, O as DEFAULT_DELEGATION_TOOL_NAMES, Oa as validateActionManifest, Oi as resolveInstalledHostLock, On as availableBoundaryQualifications, Or as hasWorkPredicate, Ot as V6_ORDINARY_COMPLETION_RULE_COMPACT, P as deriveProjection, Pi as qualifyHostTrust, Pn as confirmRebind, Pr as isInformationalFragment, Pt as recoveryDigest, Q as PROOF_CAPABILITY_MATRIX, Qi as evaluateToolSurfaceCapability, Qn as admissibleForRemoval, Qr as splitTextFragments, R as evidenceFromPersistedToolResult, Ri as ACTIVE_HOST_COHORT_IDS, Rn as rebindAttemptKey, Rr as itemHoldsExecutionAuthority, S as SESSION_API_UNSUPPORTED, Sa as isStatefulAction, Si as packageRowsFromActiveGraph, Sn as goalCompletionDenial, Sr as clauseIsGoverned, St as CLEANUP_CONDITION_RULE, T as snapshotSessionEvents, Ta as requestedTargetMatchesResolved, Ti as prepareTargetHostTrust, Tr as governedClauseRestrictsExecution, Tt as DEFAULT_RECOVERY_CHAR_BUDGET, U as withDurability, Ui as GOAL_HOST_PACKAGES, Un as parseConfirmationMessage, Ur as namedActions, V as isDeterministicCheck, Vi as DEFAULT_HOST_LOCK, Vn as CONFIRM_LINE_PATTERN, Vr as maskCodeSpans, W as canonicalArgvFromCommand, Wi as HOST_CAPABILITY_PACKAGE_GROUPS, Wn as capabilityRemedyPhrase, Wr as opensConditionLead, X as bindingIndividuallyAccepted, Xi as evaluateHostCapability, Xn as DEPENDENCY_FREE_ONLY_CONDITION, Xr as restatedContentOf, Y as segmentAuthorityBlocks, Yi as evaluateGraphDerivedHostLock, Yn as relevantEvidence, Yr as reportingHeadGoverns, Z as certifyCheckpoint, Zi as evaluateHostLock, Zn as actionHasCertificationPath, Zr as semanticActionOfScope, _ as projectSessionCoreV2, _a as STOP_PROTOCOL_VERSION, _i as evaluateConfiguredHostLock, _n as latestRootInstruction, _r as GRANTED_QUALIFICATION, _t as scopeCoverageDigest, a as createGitPrestateEnvelope, aa as SUPPORTED_HOST_VERSIONS, ai as normalizeClause, an as NO_PROGRESS_RECORD_PREFIX, ar as captureItem, at as bindProofV2ToProjection, ba as actionCompatible, bi as injectActiveProfileHostLock, bn as testOutcomePredicate, br as clarifiedSpanOf, bt as validateProofManifest, c as parseGitCommandManifest, ca as parseHostVersion, ci as sha256, cn as assessmentOutcomePredicate, cr as extractArtifactPaths, ct as createProofManifestV2, d as FIRST_STEP_GUIDANCE, da as ACTION_MANIFEST_VERSION, di as auditedDefaultWorkdirHost, dn as decideTurnBoundary, dr as isInformationalMessage, dt as proofDigestV2, ea as selectHostCohort, ei as verbIsNegated, en as bindingSatisfies, er as capabilityFactOf, et as PROOF_KINDS_V2, f as claimedBatchHasRealRootInput, fa as BOUNDED_ARTIFACT_TYPES, fi as auditedDefaultWorkdirProvider, fn as decideTurnStopping, fr as segmentClauses, ft as proofEvidenceConstraints, g as previewFirstStepInjection, ga as STATEFUL_ACTIONS, gi as evaluateActiveHostLock, gn as latestAssistantText, gr as classifyUserInteraction, gt as requiredSubjectsOf, h as lifecyclePhase, ha as SEMANTIC_ACTIONS, hi as combineHostPolicy, hn as isWholeTaskCompletionClaim, hr as classifyTaskIntent, ht as proofV2Rejection, i as commitTreeSnapshotDigest, ia as SUPPORTED_HOST_RANGE, ii as digestStrings, in as CONTROL_RECORD_PREFIX, ir as captureClause, it as bindProofToProjection, j as PROTOCOL_V5_NOTICE, ji as acquireHostTrust, jn as qualifyBoundary, jr as introducesActionClause, jt as cleanupConditionFor, k as PROTOCOL_V3_NOTICE, ka as validateActionTarget, ki as verifyComposedHostLockDump, kn as effectuateBoundary, kr as interpretClause, kt as V6_ORDINARY_COMPLETION_RULE_SHORT, l as revalidateGitPrestate, la as satisfiesSupportedHostRange, li as HostProfileError, ln as classifyCompletionClaim, lr as extractMethod, lt as proofCapabilityReport, m as firstStepGuidanceV6, ma as CERTIFICATE_VERSION_V2, mi as auditedHostImplementation, mn as isRootPauseRequest, mt as proofOperationMatches, n as GIT_COMMAND_TEMPLATES, na as LATEST_TESTED_HOST_VERSION, ni as validateManifest, nn as evidenceMatchesItem, nr as removalIsComplete, nt as PROOF_PROTOCOL_VERSION, o as executeRevalidatedGitEffect, oa as compareHostVersions, oi as sanitizeClauseText, on as NO_PROGRESS_TURNS_BEFORE_STOP, or as classifyClause, ot as canonicalProjection, p as firstStepGuidance, pa as CERTIFICATE_VERSION, pi as auditedForegroundRenderers, pn as decisionBoundaryKey, pt as proofHostSurfacesOf, q as parseShellCommand, qi as bindLiveGoalCapability, qn as itemDiagnosis, qr as qualificationOfClause, r as commitIndexSnapshotDigest, ra as MIN_SUPPORTED_HOST_VERSION, ri as canonicalizePath, rn as isVerifyingCapability, rr as removalIsPartiallyKnown, rt as PROOF_PROTOCOL_VERSION_V2, s as gitCommandMatchesTarget, sa as evaluateMinimumHostVersion, si as sanitizeUrl, sn as assessmentAction, sr as environmentDefaultRepositoryTarget, st as createProofManifest, t as GIT_COMMAND_MANIFEST_IDS, ta as HOST_VALIDATED_VERSIONS, ti as COMMAND_SURFACE_MANIFEST, tn as evidenceCoverage, tr as partialFailureOf, tt as PROOF_MANIFEST_DOMAIN_V2, u as verifiedLinearCommitReadback, ua as ACTION_MANIFEST, ui as activeRendererModule, un as currentActionBases, ur as extractOperation, ut as proofDigest, va as STOP_PROTOCOL_VERSION_V2, vi as hostLockContextFromComposedDump, vn as observeAssistantOutcome, vr as LEGACY_QUALIFICATION, vt as sessionQuery, w as SessionApiError, wa as requestedTargetAuthorizesMutation, wi as prepareActiveHostTrust, wr as explanationHasActionResidue, wt as CLEANUP_CONDITION_RULE_SHORT, xa as boundedArtifactChoiceMatches, xi as inspectTargetHostGraph, xn as v6TestPredicate, xr as clauseAsksOwnQuestion, xt as validateProofManifestV2, ya as SUPPORTED_EVIDENCE_ADAPTERS, yi as hostLockRowsFromComposedDump, yn as progressFingerprint, yr as actionVerbMatches, yt as sessionQueryV2, z as extractTextContent, zi as ACTIVE_HOST_LAUNCHER_VERSION, zn as rebindResponse, zr as kindOfScope } from "../domain-Jo13xgPJ.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostProfileError, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };