dsh-completion-guard 0.7.1 → 0.8.1

package/dist/{index-hiUtfKJa.d.ts → index-jKw6mANp.d.ts}

@@ -1,3 +1,5 @@
+import { Stats } from "node:fs";
+
 //#region src/domain/canonicalize.d.ts
 declare function normalizeClause(text: string): string;
 /**
@@ -475,7 +477,7 @@ type ProcessExitStatus = number | "unknown";
 * Why `outcome` says what it says, so a display or a consumer never reads more
 * than the source supports.
 */
-type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "text_scan_inconclusive";
+type ProcessOutcomeReason = "declared_exit_code" | "declared_negative_marker" | "host_error_flag" | "host_result_untrusted" | "unmarked_renderer_success" | "marker_unclassified" | "backgrounded" | "output_incomplete" | "text_scan_inconclusive";
 /**
 * How far the console let the guard attribute effects to the obligation's own
 * operation. `unknown` is the honest answer for every opaque compound runner:
@@ -1509,6 +1511,7 @@ interface DerivedEnvelope {
 }
 //#endregion
 //#region src/domain/boundary.d.ts
+declare const BOUNDARY_RECORD_PREFIX = "[context-guard boundary/v1] ";
 interface BoundaryRequest {
   disposition: BoundaryDisposition;
   qualificationKind: BoundaryQualificationKind;
@@ -1648,6 +1651,9 @@ interface CheckpointResult {
   rejectedBindings: RejectedBinding[];
   checkpoint?: GuardCheckpoint;
 }
+/** Preview one evidence binding through the same per-item acceptance checks as
+* certificate construction. This does not decide whole-contract closure. */
+declare function bindingIndividuallyAccepted(projection: GuardProjection, item: GuardItem, binding: EvidenceBinding): boolean;
 declare function certifyCheckpoint(projection: GuardProjection, bindings: EvidenceBinding[], id: string, commit?: boolean): CheckpointResult;
 //#endregion
 //#region src/domain/confirm-parse.d.ts
@@ -1723,27 +1729,25 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/**
-* DSH host version support policy.
-*
-* Context Guard 0.5.2 supports exactly the two registered DSH host releases:
-* `0.1.5-rc.2` (latest) and `0.1.5-rc.1` (verified minimum). Package discovery,
-* npm installation, and the exported support range use the same newest-first
-* exact union, so an unregistered stable or future prerelease is never advertised
-* merely because it sorts above the minimum.
-*
-* The minimum comparison remains a diagnostic layer for distinguishing an old
-* host from an at-or-above-floor but unregistered host. It never substitutes for
-* the exact support set or the complete 33-package host graph.
-*/
-/** Lowest supported DSH host version. DSH packages version independently of Cordis. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.1.5-rc.1";
-/** Latest DSH release with a registered complete host graph. */
-declare const LATEST_SUPPORTED_HOST_VERSION = "0.1.5-rc.2";
-/** Exact endpoints supported by the current release, newest first. */
-declare const SUPPORTED_HOST_VERSIONS: readonly string[];
-/** Exact npm range shared by package discovery and peer dependency declarations. */
+/** Version admission floor. Since 0.8.1 the public DSH support range is
+* `>=0.2.0-rc.1` with NO implied upper bound: every host version at or above
+* this floor (including later RCs on any tuple, stable and future releases)
+* passes VERSION ADMISSION. The floor only rises when a future Guard release
+* actively adopts a newer DSH; the runtime never raises it from a remote
+* `latest`. Ordering is strict SemVer with prerelease comparison and build
+* metadata ignored. Version admission is one gate of several — it never
+* claims native validation of a not-yet-tested host, and the graph/byte/
+* contract audits below still run on every admission. */
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.1";
 declare const SUPPORTED_HOST_RANGE: string;
+/** Versions with recorded first-hand host evidence. This is an EVIDENCE
+* ledger, NOT an admission whitelist: a missing row never refuses a
+* version-above-floor host. */
+declare const HOST_VALIDATED_VERSIONS: readonly string[];
+/** Historical alias retained for evidence-list readers; the admission rule is
+* the floor above, never this list. */
+declare const SUPPORTED_HOST_VERSIONS: readonly string[];
+declare const LATEST_TESTED_HOST_VERSION: string;
 interface ParsedHostVersion {
   major: number;
   minor: number;
@@ -1767,7 +1771,10 @@ interface HostVersionDecision {
 }
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
-/** Whether npm's exact public support union admits this host version. */
+/** Version admission: at or above the floor by strict SemVer precedence
+* (prerelease-aware; build metadata ignored). `0.2.0-rc.0` and the whole
+* `0.1.7.x` line stay below the floor; `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.0`,
+* later patch/minor RCs and releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
 //#region src/domain/host-lock.d.ts
@@ -1780,7 +1787,7 @@ type HostProfileKind = "headless" | "web";
 * records whether the exact graph it used was loaded on a native host or only
 * resolved from the registry.
 */
-type HostAuditProvenance = "native-audited" | "registry-derived-pending-native-audit";
+type HostAuditProvenance = "native-audited" | "registry-derived-pending-native-audit" | "graph-derived-rebind-pending-native-audit";
 interface HostCohort {
   /** Stable cohort identity; bound into every hostLockDigest via `host_cohort`. */
   id: string;
@@ -1804,45 +1811,17 @@ interface HostCohort {
   packages: PackageRow[];
   capabilities: CapabilityRow[];
 }
-/**
-* alpha.2 audited package identities (second registry cohort), hoisted so the
-* alpha.2 + dshmarket 1.39.0 cohort can reuse the exact natively audited rows
-* with only the dshmarket identity substituted.
-*/
-declare const ALPHA2_HOST_PACKAGES: PackageRow[];
-/**
-* The exact graph the Windows daily runtime realized when it upgraded
-* dshmarket to 1.39.0 on an otherwise alpha.2 install — the combination whose
-* rejection was Guard 0.3.2's real web_control failure. It is one audited
-* whole-graph cohort: alpha.2 rows keep their native macOS/Windows audit
-* identities and the dshmarket 1.39.0 identity is the authoritative row from
-* the 2026-09-01 alpha.3 annex audit. Guard 0.4.0 supports this combination.
-*/
-declare const ALPHA2_DSHMARKET_139_HOST_PACKAGES: PackageRow[];
-/**
-* Historical audited host cohort registry. Every entry keeps the exact package
-* identities audited natively for a past Guard release (CG-DSH-001 whole-graph
-* contracts). These are historical verification facts only: since 0.5.1 the
-* active support targets are `0.1.5-rc.1` and `0.1.5-rc.2`, so an installed graph from any of
-* these cohorts — including previous RCs and alphas — is no longer an active
-* support entry and fails closed in `evaluateHostLock`.
-*/
-declare const LEGACY_HOST_COHORTS: readonly HostCohort[];
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.1.5-rc.1";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.1";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
-/** Core-lock/v1 separates optional market identity from the audited DSH graph.
-* The active support targets are the exact registered rc.1 and rc.2 graphs:
-* historical cohorts stay in `LEGACY_HOST_COHORTS` as verification data but are
-* never silently re-labelled as accepted active locks, and an installed
-* historical graph fails closed under `evaluateHostLock`. The version policy
-* (the exact rc.2-or-rc.1 public set) and the graph lock are separate
-* judgments: a host that has not been registered here is "unverified / pending
-* audit", never supported by version order alone.
+/** Core-lock/v1 separates optional market identity from the rc.2 critical
+* graph. Historical cohorts live only in test data. Version ordering cannot
+* authorize an unregistered graph, and graph identity is separate from native
+* acceptance of a Guard artifact.
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.1.5-rc.1). The cohort
+* Baseline fixture package identities (DSH 0.2.0-rc.1). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -1870,11 +1849,14 @@ interface HostCapabilityEvaluation {
 interface HostLockEvaluation {
   status: HostLockStatus;
   digest: string;
+  /** Qualified graph descriptor retained by capability consumers. */
+  derivedCohort?: HostCohort;
   /** Read-only byte attestation of the active foreground shell renderer and
   * its shared terminal decoder. Set only by production active-graph readback;
   * the package version/SRI graph alone does not establish renderer behavior. */
   auditedForegroundRenderers?: Array<"bash" | "pwsh">;
   goalAvailable: boolean;
+  goalQualificationFailure?: "host_contract_goal_qualification_required";
   reasonCode?: "host_lock_migration_required" | "host_lock_installed_graph_drift" | "host_lock_missing" | "host_lock_version_mismatch" | "host_lock_version_below_minimum" | "host_lock_version_unparseable" | "host_lock_integrity_mismatch" | "host_lock_unknown_package" | "host_lock_duplicate_package" | "host_lock_goal_graph_incomplete" | "host_lock_goal_capability_mismatch" | "host_lock_cohort_mixed_graph" | "host_lock_cohort_unbound_identity" | "host_lock_cohort_platform_not_audited";
   packages: PackageRow[];
   capabilities: Record<HostCapabilityId, HostCapabilityEvaluation>;
@@ -1910,6 +1892,8 @@ interface HostLockContext {
   * it leaves the version question unanswered rather than assumed supported.
   */
   hostVersion?: string;
+  /** Trusted registry expectations, bound separately from version admission. */
+  trustDigest?: string;
 }
 /**
 * The host version a package graph records, for the version-policy decision.
@@ -1947,6 +1931,10 @@ interface HostCohortSelection {
 * consistently.
 */
 declare function selectHostCohort(rows: readonly PackageRow[], platform?: HostPlatform): HostCohortSelection;
+/** Evaluate a qualified graph against trusted registry identities. The callback
+* must authenticate rows against acquired published identities, not local YAML
+* alone. Production adds the byte/route audit and the adapter qualification. */
+declare function evaluateGraphDerivedHostLock(rows: readonly PackageRow[], context?: HostLockContext, verifyLockfileSri?: (row: PackageRow) => boolean): HostLockEvaluation;
 declare function evaluateHostLock(rows: readonly PackageRow[], context?: HostLockContext): HostLockEvaluation;
 interface HostCapabilityRequest {
   action: SemanticAction;
@@ -2105,6 +2093,17 @@ interface UnifiedItemDiagnosis {
   attempt_fingerprint: string;
 }
 /**
+* The evidence roles the item's OWN obligation contract requires (0.6.1,
+* W060-04). A stateful change needs the full resolution/effect/state chain; a
+* read-only verification (inspect, test, verify, generic readback) needs ONE
+* matching fact in the `effect` role — exactly the manifest `simpleRecord`
+* accepts. Asking every obligation for all three roles made prepare and
+* diagnosis demand a change chain a read-only verification can never produce.
+*/
+/** Current v6 native edit has a persisted effect plus its own readback.
+* Prestate-constrained and legacy stateful work keeps the historical chain. */
+declare function nativeFileTwoRole(p: GuardProjection, item: GuardItem): boolean;
+/**
 * The pure repair judge. It decides between: fixable from existing evidence,
 * missing pre-evidence, missing a user target choice, not supported by any
 * adapter, an executed-without-evidence historical gap, or nothing to do —
@@ -2151,12 +2150,9 @@ interface ToolResultInput {
   textContent: string;
 }
 declare function extractTextContent(content: readonly unknown[]): string;
-/**
-* DSH persists the host return flag on a nested `tool-result` block. The
-* surrounding message or event need not carry an `error` field (approval and
-* sandbox denials are examples). Never let a renderer's missing exit marker
-* override that structured return, or accept an ambiguous nested return as
-* a clean result for another call.
+/** rc.2 persists a role=tool message with independent source and return IDs.
+* Both must bind the original call. PTC uses its own matched dispatch envelope.
+* Historical nested return records are not current rc.2 execution evidence.
 */
 declare function persistedToolResultStatus(data: unknown, callId: string, kind?: "tool/result" | "tool/ptc-dispatch", matchedStart?: boolean): "clean" | "failure" | "unknown";
 interface ToolOperation {
@@ -2388,6 +2384,97 @@ declare function revalidateGitPrestate(resolved: GitPrestateEnvelope, manifest:
 /** Execute the exact resolved argv only after the mandatory live recheck. */
 declare function executeRevalidatedGitEffect(resolved: GitPrestateEnvelope, manifest: GitCommandManifest, target: GitTargetIdentity, currentStateTuple: Readonly<Record<string, string | Uint8Array>>, runner: GitEffectRunner): Promise<GitEffectExecution>;
 //#endregion
+//#region src/domain/host-audit-session.d.ts
+/**
+* Memo table for ONE bounded host-lock validation operation.
+*
+* A full validation re-reads the same real paths, manifests, search paths and
+* export targets from several cooperating audits. Resolution results are
+* reused strictly inside this operation: the table lives and dies with one
+* audit call, is never shared across entries, and is never a substitute for
+* revalidation — a later entry always performs its own fresh reads. There are
+* deliberately no timestamps, mtimes, sizes or cross-call caches here.
+*
+* Every byte read funnels through ONE memo (`read:`): the raw file bytes are
+* read from disk exactly once per path per operation, and JSON parsing and
+* digesting both consume those shared bytes.
+*/
+interface HostAuditSession {
+  /** Memoized `realpathSync`; identical inputs return the identical result. */
+  realpath(path: string): string;
+  /** Memoized `existsSync`, including the negative result. */
+  exists(path: string): boolean;
+  /** Memoized `statSync`. */
+  stat(path: string): Stats;
+  /** Memoized raw file bytes — the single physical-read channel. */
+  readFile(path: string): Buffer;
+  /** Memoized `JSON.parse` of an object file over the shared bytes; parse errors propagate. */
+  readJson(path: string): Record<string, unknown>;
+  /** Memoized SHA-256 over the shared bytes. */
+  fileDigest(path: string): string;
+  /** Memoized directory listing (names + kinds) for audit enumeration. */
+  listDir?(dir: string): Array<{
+    name: string;
+    isFile: boolean;
+    isDirectory: boolean;
+  }>;
+  /** Memoized `createRequire` for one importer path. */
+  requireFor(importer: string): NodeRequire;
+  /** Memoized `require.resolve.paths(name)` for one importer. */
+  resolvePaths(importer: string, name: string): readonly string[];
+  /** Memoized `require.resolve(request)` for one importer. */
+  requireResolve(importer: string, request: string): string;
+  /** Generic operation-scoped memo for derived structures (parsed graphs, indexes). */
+  memo<T>(key: string, compute: () => T): T;
+}
+//#endregion
+//#region src/domain/host-contract-probe.d.ts
+declare const HOST_CONTRACT_SCHEMA: "guard-host-contract/v2";
+//#endregion
+//#region src/domain/host-trust.d.ts
+interface HostTrustedPackage extends PackageRow {
+  version: string;
+  integrity: string;
+  modules: Record<string, string>;
+}
+/** Operator-owned output of registry acquisition, never package self-report. */
+interface HostRebindTrust {
+  schema: "dsh-host-registry-trust/v1";
+  source: "https://registry.npmjs.org/";
+  qualification: "guard-host-contract/v2";
+  packages: HostTrustedPackage[];
+  probeDependencies?: HostTrustedPackage[];
+  contract: {
+    schema: typeof HOST_CONTRACT_SCHEMA;
+    receiptDigest: string;
+    bindingDigest: string;
+    conditionsDigest: string;
+  };
+  /** Recomputed qualification, not caller-reported compatibility. */
+  unqualifiedOptionalPackages?: string[];
+}
+declare class HostTrustError extends Error {
+  readonly code: string;
+  constructor(code: string);
+}
+/** Validate generator-issued operator-owned authority. The descriptor cannot
+* assert compatibility: changed bytes require the independently issued cache
+* receipt, whose complete byte graph and startup conditions are bound. */
+declare function qualifyHostTrust(value: unknown, profileRoot?: string): HostRebindTrust;
+declare function parseHostTrust(text: string, profileRoot?: string): HostRebindTrust;
+declare function hostTrustDigest(trust: HostRebindTrust): string;
+/** Closed-world regular-file tar projection. Never extract or execute archives. */
+declare function registryArchiveFiles(bytes: Buffer, row: PackageRow): Record<string, Buffer>;
+declare function registryArchiveModules(bytes: Buffer, row: PackageRow): Record<string, string>;
+/** Fetch exact public registry identity at trusted inspect/rebind time.
+* Lockfile integrity is compared with HTTPS registry metadata AND archive bytes.
+* The production origin is fixed; tests can inject a fetch transport. */
+interface HostTrustAcquisitionOptions {
+  profileRoot: string;
+  dependencyIdentity?: (name: string, importer: string) => PackageRow;
+}
+declare function acquireHostTrust(rows: readonly PackageRow[], fetcher?: typeof fetch, options?: HostTrustAcquisitionOptions): Promise<HostRebindTrust>;
+//#endregion
 //#region src/domain/host-resolver.d.ts
 declare class HostProfileError extends Error {
   readonly code: string;
@@ -2418,7 +2505,7 @@ declare function resolveInstalledHostLock(moduleUrl?: string): HostLockEvaluatio
 * two reachable peer variants of a critical package remain a duplicate and
 * are returned twice so evaluateHostLock can fail closed with a bounded code.
 */
-declare function packageRowsFromActiveGraph(packageMapText: string, lockText: string, nodeModulesRoot?: string): PackageRow[];
+declare function packageRowsFromActiveGraph(packageMapText: string, lockText: string, nodeModulesRoot?: string, providedSession?: HostAuditSession): PackageRow[];
 interface ActiveProfileHostLock {
   evaluation: HostLockEvaluation;
   runtimeRoot: string;
@@ -2426,27 +2513,52 @@ interface ActiveProfileHostLock {
   pluginVersion: string;
   platform: HostPlatform;
   profileKind: HostProfileKind;
+  trust?: HostRebindTrust;
 }
 /** Read exact reachable critical rows without requiring Guard installation.
 * Used by target preflight before a legacy profile can be migrated.
 */
-declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
-declare function activeRendererModule(nodeModulesRoot: string, name: string): {
+declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession): PackageRow[];
+/** Version/identity evaluation of operator-owned registry expectations. */
+declare function evaluateConfiguredHostLock(rows: readonly PackageRow[], context: HostLockContext, trustText?: string, profileRoot?: string): HostLockEvaluation;
+/** Complete production composition; no graph-only result grants authority. */
+declare function evaluateActiveHostLock(runtime: string, profile: string, context: HostLockContext, session?: HostAuditSession, trustText?: string): HostLockEvaluation;
+/** Trusted acquisition only; consumers never use local SRI as provenance. */
+declare function prepareActiveHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
+/** Verify published executable bytes at the reachable runtime/profile roots.
+* Registry SRI and installed manifests alone cannot authenticate loaded code.
+* Missing, duplicate, escaped or modified modules never pass this audit.
+*
+* All filesystem resolution within one call is memoized through a single
+* {@link HostAuditSession}; callers may thread one in to share the parsed
+* graphs and digests with the other audits of the same validation operation.
+*/
+interface AuditedPackageExpectation {
+  name: string;
+  version?: string;
+  /** Required published per-file digests; absence never authenticates bytes. */
+  modules?: Record<string, string>;
+}
+/** Byte and dual-lane route audit over both graphs. Expectations are either
+* the published baseline or operator-owned, registry-acquired qualified module
+* digests. A missing digest set never authenticates unknown implementation. */
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[]): boolean;
+declare function activeRendererModule(nodeModulesRoot: string, name: string, providedSession?: HostAuditSession): {
   bytes: string;
   path: string;
 } | undefined;
 /** Verify active, reachable producer bytes without reading credentials or
 * accepting historical package-map entries. Missing/ambiguous paths fail
 * closed for the ordinary markerless-test shortcut. */
-declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string): Array<"bash" | "pwsh">;
+declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession): Array<"bash" | "pwsh">;
 /** Exact active implementation route for call-time omitted-workdir evidence. */
-declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh"): boolean;
+declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", providedSession?: HostAuditSession): boolean;
 /**
 * The active graph alone does not prove which shell service this Agent uses.
 * Match the scoped service's exact constructor to the audited active module,
 * rejecting another provider with the same public service interface/name.
 */
-declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown): Promise<boolean>;
+declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown, providedSession?: HostAuditSession): Promise<boolean>;
 interface TargetHostGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -2455,14 +2567,12 @@ interface TargetHostGraph {
     bundles?: PackageRow[];
   };
 }
-/**
-* Pre-install inspection only. A fresh rc.1 Headless profile can use its two
-* installation-owned bundles without a private importer. Never extend this
-* absence rule to inject or runtime replay, which still call the strict reader.
-*/
-declare function inspectTargetHostGraph(runtimeRoot: string, profileRoot: string): TargetHostGraph;
+/** The pre-install path consumes the same qualified identities and byte/route
+* audit as active-profile entries; structural discovery grants no authority. */
+declare function inspectTargetHostGraph(runtime: string, profile: string, trust?: HostRebindTrust): TargetHostGraph;
+declare function prepareTargetHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Read and validate the actual runtime graph plus the installed profile plugin. */
-declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string): ActiveProfileHostLock;
+declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
 /** Atomically inject a repeatable managed patch into the selected profile only. */
 declare function injectActiveProfileHostLock(input: ActiveProfileHostLock): string;
 /** Extract the bounded host tuple from DSH's composed YAML dump. */
@@ -2788,10 +2898,6 @@ declare function proofCapabilityReport(kind: ProofKindV2, facts: Iterable<GuardE
   reasonCode?: string;
 };
 //#endregion
-//#region src/domain/alpha3-host.d.ts
-/** Exact 34-row alpha.3 runtime/web graph from the 2026-09-01 annex audit. */
-declare const ALPHA3_HOST_PACKAGES: PackageRow[];
-//#endregion
 //#region src/domain/recovery.d.ts
 interface RecoveryOptions {
   rejectedBindings?: Array<{
@@ -2901,54 +3007,13 @@ declare function v6CurrentRootBoundaries(projection: GuardProjection): {
 declare function recoveryDigest(packet: string, projection: GuardProjection): string;
 declare function renderRecoveryPacket(projection: GuardProjection, options?: RecoveryOptions): string;
 //#endregion
-//#region src/domain/rc1-host.d.ts
-/** Exact 34-row rc.1 runtime/web graph from the 2026-09-03 native macOS audit. */
-declare const RC1_HOST_PACKAGES: PackageRow[];
-//#endregion
-//#region src/domain/rc015-host.d.ts
-/**
-* Exact 33-row DSH 0.1.5-rc.1 core graph.
-*
-* Provenance: every row is the npm registry `dist.integrity` of the exact
-* published tarball for the named version, read from
-* `https://registry.npmjs.org/<name>/0.1.5-rc.1` (and `4.0.2` for
-* `@deepseek-ai/cordis`, which is versioned independently of DSH). The single
-* resolver for this graph is an isolated DSH installation plus the repository
-* worktree lockfile, both installed from the public registry.
-*
-* This is a REGISTRY-DERIVED graph, not a natively audited one: the cohort
-* carries `auditedPlatforms: []` until a native macOS/Windows host audit runs,
-* and `auditProvenance: 'registry-derived-pending-native-audit'` is bound into
-* the host-lock digest so a certificate can never claim a native pass this round
-* did not produce. (`acceptedPlatforms` is the separate, wider gate: this cohort
-* accepts evaluation on both platforms while claiming an audit on neither.)
-* `dshmarket` is deliberately absent: market identity is verified independently
-* by the action adapter and never participates in the core lock.
-*
-* The row-name set is unchanged from the historical 0.1.2-rc.1 cohort's 33
-* core rows: no package entered or left the audited core graph, so a future
-* reader must not infer a graph change from the version bump alone. The count
-* is asserted from this list, never assumed.
-*/
-declare const RC015_HOST_PACKAGES: PackageRow[];
-//#endregion
-//#region src/domain/rc015-rc2-host.d.ts
-/** Exact npm registry identities for DSH 0.1.5-rc.2 (Cordis 4.0.2).
-* Native acceptance is recorded separately; these rows are registry-derived.
-*/
-declare const RC015_RC2_HOST_PACKAGES: PackageRow[];
-//#endregion
 //#region src/domain/session-events.d.ts
 /**
-* Read a validated, stable event snapshot from the DSH Session V3 API.
+* Read a validated, stable event snapshot from the DSH Session V4 API.
 *
-* Session V3 replaced the V2 `events` getter with `snapshotEvents()`. Context
-* Guard supports only the V3 API: a session object that does not expose that
-* method is an unsupported host, never a reason to fall back to a legacy
-* accessor. Failing loud here keeps a V2-shaped object from being projected as
-* if its events had V3 semantics — the two vocabularies differ (surfaces,
-* `assistant/chunk` vs embedded streams, `session/end-seed` payload), so a
-* silent fallback would derive contract state from a log it cannot read.
+* Exact rc.2 still exposes the deprecated synchronous snapshotEvents() API.
+* This adapter retains that existing dependency; it does not promise support
+* for remote history or add a fallback to a legacy events getter.
 *
 * Guard is a READER of the durable log, so the envelope check below is the one
 * part of log validation it owns itself. The host validates a session it
@@ -2957,7 +3022,7 @@ declare const RC015_RC2_HOST_PACKAGES: PackageRow[];
 * mis-numbered an event would fabricate contract state rather than report a
 * damaged log.
 *
-* The V3 contract also asks a reader to refuse an unrecognized event type that
+* The V4 contract also asks a reader to refuse an unrecognized event type that
 * is not marked `ignorable`. Guard does NOT implement that half, deliberately:
 * the host's persistence reader already refuses such a log before publishing a
 * Session, and a whitelist of event types Guard happens to know would
@@ -2971,8 +3036,8 @@ declare class SessionApiError extends Error {
   readonly code: string;
   constructor(message: string, code?: string);
 }
-/** The V3 session surface Guard reads: one bounded, immutable event snapshot. */
-interface V3SessionLike {
+/** The V4 session surface Guard reads: one bounded, immutable event snapshot. */
+interface V4SessionLike {
   snapshotEvents(fromSeq?: number, toSeqExclusive?: number): readonly unknown[];
 }
 declare function snapshotSessionEvents(session: unknown): readonly unknown[];
@@ -3101,4 +3166,11 @@ declare function projectCoreV2(snapshot: Row): Row;
 //#region src/core-v2/session.d.ts
 declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: GuardProjection, displayOrigins?: NonNullable<GuardProjection["coreV2RequirementOrigins"]>): Record<string, unknown> | undefined;
 //#endregion
-export { PROOF_CAPABILITY_MATRIX as $, proposeRebind as $a, qualifyBoundary as $i, extractTextContent as $n, itemHoldsExecutionAuthority as $o, bindLiveGoalCapability as $r, previewFirstStepInjection as $t, snapshotSessionEvents as A, NeedsReviewReason as Aa, parseConfirmationMessage as Ai, LinearCommitReadback as An, LEGACY_QUALIFICATION as Ao, BASE_HOST_PACKAGES as Ar, actionCompatible as As, sessionQuery as At, RecoveryOptions as B, WaitAuthorization as Ba, extractArtifactPaths as Bi, CanonicalCommandSurface as Bn, governedClauseRestrictsExecution as Bo, HostCapabilityId as Br, canonicalizePath as Bs, CommandSurfaceManifest as Bt, progressFingerprint as C, GuardItemKind as Ca, TaskIntent as Ci, GitCommandParseResult as Cn, removalIsPartiallyKnown as Co, rootLocatorFlavor as Cr, SEMANTIC_ACTIONS as Cs, proofDigestV2 as Ct, SESSION_EVENT_ENVELOPE_INVALID as D, HostStatus as Da, CONFIRM_LINE_PATTERN as Di, GitPrestateCheck as Dn, ExecutionQualification as Do, ALPHA2_DSHMARKET_139_HOST_PACKAGES as Dr, SUPPORTED_EVIDENCE_ADAPTERS as Ds, proofV2Rejection as Dt, SESSION_API_UNSUPPORTED as E, GuardProjection as Ea, classifyUserInteraction as Ei, GitEffectRunner as En, Executee as Eo, ACTIVE_HOST_LAUNCHER_VERSION as Er, STOP_PROTOCOL_VERSION_V2 as Es, proofOperationMatches as Et, CLEANUP_CONDITION_RULE_COMPACT as F, TargetSource as Fa, ClauseSegment as Fi, gitCommandMatchesTarget as Fn, clarifiedSpanOf as Fo, GOAL_HOST_PACKAGES as Fr, requestedTargetMatchesResolved as Fs, bindingSatisfies as Ft, cleanupConditionFor as G, ReleaseObservedIdentity as Ga, BoundaryEffectuation as Gi, parsePwshCommand as Gn, interpretMessage as Go, HostLockContext as Gr, sha256 as Gs, FIRST_STEP_GUIDANCE as Gt, V6_ORDINARY_COMPLETION_RULE_COMPACT as H, createProjection as Ha, extractOperation as Hi, ShellParseStatus as Hn, hasQuestionScope as Ho, HostCohort as Hr, normalizeClause as Hs, OperationVerbEntry as Ht, CLEANUP_CONDITION_RULE_SHORT as I, TargetSourceKind as Ia, captureClause as Ii, parseGitCommandManifest as In, clauseAsksOwnQuestion as Io, HOST_CAPABILITY_PACKAGE_GROUPS as Ir, semanticActionFromCommand as Is, evidenceCoverage as It, recoveryDigest as J, BoundedSource as Ja, GoalActivationState as Ji, hasCurrentCertificate as Jn, isExplanationScope as Jo, HostPlatform as Jr, LifecyclePhase as Jt, closingHint as K, ReleaseOperation as Ka, BoundaryQualification as Ki, parseShellCommand as Kn, introducesActionClause as Ko, HostLockEvaluation as Kr, FirstStepInjection as Kt, DEFAULT_RECOVERY_CHAR_BUDGET as L, TargetTuple as La, captureItem as Li, revalidateGitPrestate as Ln, clauseIsGoverned as Lo, HOST_COHORTS as Lr, semanticActionFromText as Ls, evidenceMatchesItem as Lt, RC015_HOST_PACKAGES as M, SourceSpan as Ma, RejectedBinding as Mi, commitTreeSnapshotDigest as Mn, QualificationStatus as Mo, EXPECTED_HOST_PACKAGES as Mr, isStatefulAction as Ms, validateProofManifest as Mt, RC1_HOST_PACKAGES as N, TargetCaptureReasonCode as Na, certifyCheckpoint as Ni, createGitPrestateEnvelope as Nn, ScopeInterpretation as No, ExecutableIdentity as Nr, requestedIdentityKey as Ns, validateProofManifestV2 as Nt, SessionApiError as O, MessageCoverage as Oa, ParsedConfirmation as Oi, GitPrestateEnvelope as On, GRANTED_QUALIFICATION as Oo, ALPHA2_HOST_PACKAGES as Or, SemanticAction as Os, requiredSubjectsOf as Ot, CLEANUP_CONDITION_RULE as P, TargetCaptureStatus as Pa, CaptureScope as Pi, executeRevalidatedGitEffect as Pn, actionVerbMatches as Po, ExecutableIdentityBinding as Pr, requestedTargetAuthorizesMutation as Ps, EvidenceFacetCoverage as Pt, ALPHA3_HOST_PACKAGES as Q, confirmRebind as Qa, isCurrentAcceptedBoundary as Qi, evidenceFromPersistedToolResult as Qn, isRestatement as Qo, bindExecutableIdentity as Qr, lifecyclePhase as Qt, MIN_RECOVERY_CHAR_BUDGET as R, TargetValue as Ra, classifyClause as Ri, verifiedLinearCommitReadback as Rn, clauseIsProtected as Ro, HostAuditProvenance as Rr, validateActionManifest as Rs, isVerifyingCapability as Rt, observeAssistantOutcome as S, GuardItem as Sa, segmentAuthorityBlocks as Si, GitCommandManifest as Sn, removalIsComplete as So, legacyRecordsNeedingReview as Sr, CERTIFICATE_VERSION_V2 as Ss, proofDigest as St, v6TestPredicate as T, GuardOperation as Ta, classifyTaskIntent as Ti, GitEffectExecution as Tn, DirectiveClass as To, ACTIVE_HOST_COHORT_IDS as Tr, STOP_PROTOCOL_VERSION as Ts, proofHostSurfacesOf as Tt, V6_ORDINARY_COMPLETION_RULE_SHORT as U, PackageRow as Ua, isInformationalMessage as Ui, canonicalArgvFromCommand as Un, hasWorkPredicate as Uo, HostCohortSelection as Ur, sanitizeClauseText as Us, validateManifest as Ut, V6_ORDINARY_COMPLETION_RULE as V, WorkUnit as Va, extractMethod as Vi, ParsedShell as Vn, hasOrderedCoordination as Vo, HostCapabilityRequest as Vr, digestStrings as Vs, ManifestIssue as Vt, carriesCleanupCondition as W, ReleaseGateDecision as Wa, segmentClauses as Wi, isRunExecutable as Wn, interpretClause as Wo, HostCohortSelectionReason as Wr, sanitizeUrl as Ws, ClaimedMessage as Wt, renderRecoveryPacket as X, RebindArgs as Xa, availableBoundaryQualifications as Xi, ToolResultInput as Xn, isOpenObligation as Xo, HostToolSurface as Xr, firstStepGuidance as Xt, recoveryTitle as Y, ProposeOutcome as Ya, GoalBoundaryAccess as Yi, ToolCallInput as Yn, isInformationalFragment as Yo, HostProfileKind as Yr, claimedBatchHasRealRootInput as Yt, v6CurrentRootBoundaries as Z, RebindProposal as Za, effectuateBoundary as Zi, ToolSubject as Zn, isQuestionScopeNeedingReview as Zo, LEGACY_HOST_COHORTS as Zr, firstStepGuidanceV6 as Zt, decisionBoundaryKey as _, GoalRef as _a, currentContractDigest as _i, verifyComposedHostLockDump as _n, actionHasCertificationPath as _o, PROTOCOL_V4_NOTICE as _r, ACTION_MANIFEST_VERSION as _s, bindProofV2ToProjection as _t, CONTROL_RECORD_PREFIX as a, DeferAuthorization as aa, selectHostCohort as ai, auditedDefaultWorkdirProvider as an, CapabilityFact as ao, DiagnosisNextAction as ar, opensConditionLead as as, ProofHostSurface as at, latestAssistantText as b, GuardEvidence as ba, AuthorityKind as bi, GitAdapterAction as bn, capabilityFactOf as bo, applyUpgradeEligibility as br, BOUNDED_ARTIFACT_TYPES as bs, createProofManifestV2 as bt, NO_PROGRESS_RECORD_PREFIX as c, DeriveResult as ca, LATEST_SUPPORTED_HOST_VERSION as ci, hostLockContextFromComposedDump as cn, DEPENDENCY_FREE_ONLY_CONDITION as co, UnifiedItemDiagnosis as cr, qualificationOfClause as cs, ProofKindV2 as ct, assessmentAction as d, EvidenceBinding as da, SUPPORTED_HOST_RANGE as di, inspectTargetHostGraph as dn, DerivedProcessFacts as do, evidenceAvailabilityReason as dr, restatedContentOf as ds, ProofObligation as dt, AssetInterpretationFact as ea, evaluateExternalWaitCapability as ei, ActiveProfileHostLock as en, proposeRebindOutcome as eo, extractToolSubject as er, kindOfScope as es, PROOF_KINDS as et, assessmentOutcomePredicate as f, EvidenceOutcome as fa, SUPPORTED_HOST_VERSIONS as fi, packageRowsFromActiveGraph as fn, OperationAttribution as fo, itemDiagnosis as fr, semanticActionOfScope as fs, ProofObligationV2 as ft, decideTurnStopping as g, ExternalOperation as ga, satisfiesSupportedHostRange as gi, resolveInstalledHostLock as gn, RemovalOutcomeReport as go, PROTOCOL_V3_NOTICE as gr, ACTION_MANIFEST as gs, bindProofToProjection as gt, decideTurnBoundary as h, ExpectedTransition as ha, parseHostVersion as hi, resolveActiveProfileHostLock as hn, ProcessOutcomeReason as ho, DEFAULT_DELEGATION_TOOL_NAMES as hr, verbIsNegated as hs, SessionQueryV2 as ht, AssistantOutcomeObservation as i, BoundaryQualificationKind as ia, hostVersionFromPackages as ii, auditedDefaultWorkdirHost as in, replayRebindResult as io, CertificationSupport as ir, namedActions as is, PROOF_PROTOCOL_VERSION_V2 as it, RC015_RC2_HOST_PACKAGES as j, PersistenceAuthorization as ja, CheckpointResult as ji, commitIndexSnapshotDigest as jn, QualificationReason as jo, DEFAULT_HOST_LOCK as jr, boundedArtifactChoiceMatches as js, sessionQueryV2 as jt, V3SessionLike as k, NeedsReviewFact as ka, isFrozenV042RebindResponse as ki, GitTargetIdentity as kn, InterpretOptions as ko, AuditedExecutable as kr, StatefulAction as ks, scopeCoverageDigest as kt, NO_PROGRESS_TURNS_BEFORE_STOP as l, DeriveScope as la, MIN_SUPPORTED_HOST_VERSION as li, hostLockRowsFromComposedDump as ln, DeclaredOperationResult as lo, capabilityRemedyPhrase as lr, questionHeadsClause as ls, ProofManifest as lt, currentActionBases as m, EvidenceRole as ma, evaluateMinimumHostVersion as mi, readActiveHostGraph as mn, ProcessFactSource as mo, CAPTURE_V042_NOTICE as mr, statefulActionsOfScope as ms, SessionQuery as mt, projectCoreV2 as n, BindingActionClosure as na, evaluateHostLock as ni, TargetHostGraph as nn, rebindAttemptKey as no, persistedToolResultStatus as nr, maskCodeSpans as ns, PROOF_MANIFEST_DOMAIN_V2 as nt, CompletionDisposition as o, DelegationRef as oa, HostVersionDecision as oi, auditedForegroundRenderers as on, CapabilityGap as oo, Repairability as or, opensWithDirective as os, ProofKind as ot, classifyCompletionClaim as p, EvidenceParseStatus as pa, compareHostVersions as pi, packageRowsFromPnpmLock as pn, ProcessExitStatus as po, relevantEvidence as pr, splitTextFragments as ps, ProofSurface as pt, openItems as q, ReleaseSettlement as qa, BoundaryRequest as qi, goalCompletionDenial as qn, isExecutableItem as qo, HostLockStatus as qr, FirstStepPreviewInput as qt, supersedeItem as r, BoundaryDisposition as ra, evaluateToolSurfaceCapability as ri, activeRendererModule as rn, rebindResponse as ro, withDurability as rr, maskQuotedSpans as rs, PROOF_PROTOCOL_VERSION as rt, CurrentActionBasis as s, DeriveConfig as sa, HostVersionStatus as si, combineHostPolicy as sn, CapabilityRemedy as so, TaskKind as sr, presentExplanationHead as ss, ProofKindCapability as st, projectSessionCoreV2 as t, AssetObligation as ta, evaluateHostCapability as ti, HostProfileError as tn, proposeRebindV042 as to, isDeterministicCheck as tr, legacyQuestionReadingIsInformational as ts, PROOF_KINDS_V2 as tt, TurnStoppingDecision as u, DerivedEnvelope as ua, ParsedHostVersion as ui, injectActiveProfileHostLock as un, DependencyStatus as uo, deriveItemDiagnosis as ur, reportingHeadGoverns as us, ProofManifestV2 as ut, isRootPauseRequest as v, GuardBoundary as va, AuthorityBlock as vi, GIT_COMMAND_MANIFEST_IDS as vn, admissibleForRemoval as vo, PROTOCOL_V5_NOTICE as vr, ActionManifest as vs, canonicalProjection as vt, testOutcomePredicate as w, GuardItemStatus as wa, UserInteractionKind as wi, GitCommandRejected as wn, AuthorityDisposition as wo, ACTIVE_HOST_COHORT_ID as wr, STATEFUL_ACTIONS as ws, proofEvidenceConstraints as wt, latestRootInstruction as x, GuardIntegrity as xa, authorityCaptureCounts as xi, GitCommandAccepted as xn, partialFailureOf as xo, deriveProjection as xr, CERTIFICATE_VERSION as xs, proofCapabilityReport as xt, isWholeTaskCompletionClaim as y, GuardCheckpoint as ya, AuthorityBlockKind as yi, GIT_COMMAND_TEMPLATES as yn, capabilityConsequence as yo, PROTOCOL_V6_NOTICE as yr, ActionSpec as ys, createProofManifest as yt, RecoveryCause as z, VerificationContract as za, environmentDefaultRepositoryTarget as zi, CanonicalArgv as zn, explanationHasActionResidue as zo, HostCapabilityEvaluation as zr, validateActionTarget as zs, COMMAND_SURFACE_MANIFEST as zt };
+//#region src/domain/rc020-rc1-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.0-rc.1 tarballs (upstream
+* 4878cdabd87d4041bdaff61d04c966883b9fd07a). Native platform acceptance
+* remains a separate, currently pending fact. */
+declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
+//#endregion
+export { PROOF_MANIFEST_DOMAIN_V2 as $, TargetValue as $a, environmentDefaultRepositoryTarget as $i, CanonicalCommandSurface as $n, clauseIsProtected as $o, HostCapabilityRequest as $r, validateActionManifest as $s, HostProfileError as $t, V4SessionLike as A, ExpectedTransition as Aa, currentContractDigest as Ai, registryArchiveModules as An, ProcessOutcomeReason as Ao, PROTOCOL_V3_NOTICE as Ar, verbIsNegated as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, GuardOperation as Ba, CONFIRM_LINE_PATTERN as Bi, GitPrestateCheck as Bn, DirectiveClass as Bo, ACTIVE_HOST_LAUNCHER_VERSION as Br, STOP_PROTOCOL_VERSION as Bs, validateManifest as Bt, observeAssistantOutcome as C, DeriveResult as Ca, ParsedHostVersion as Ci, HostTrustError as Cn, DEPENDENCY_FREE_ONLY_CONDITION as Co, deriveItemDiagnosis as Cr, qualificationOfClause as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, EvidenceOutcome as Da, evaluateMinimumHostVersion as Di, parseHostTrust as Dn, OperationAttribution as Do, relevantEvidence as Dr, semanticActionOfScope as Ds, sessionQuery as Dt, v6TestPredicate as E, EvidenceBinding as Ea, compareHostVersions as Ei, hostTrustDigest as En, DerivedProcessFacts as Eo, nativeFileTwoRole as Er, restatedContentOf as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, GuardEvidence as Fa, segmentAuthorityBlocks as Fi, GitCommandManifest as Fn, capabilityFactOf as Fo, deriveProjection as Fr, BOUNDED_ARTIFACT_TYPES as Fs, isVerifyingCapability as Ft, openItems as G, NeedsReviewReason as Ga, RejectedBinding as Gi, commitTreeSnapshotDigest as Gn, LEGACY_QUALIFICATION as Go, ExecutableIdentity as Gr, actionCompatible as Gs, LifecyclePhase as Gt, carriesCleanupCondition as H, HostStatus as Ha, isFrozenV042RebindResponse as Hi, GitTargetIdentity as Hn, ExecutionQualification as Ho, BASE_HOST_PACKAGES as Hr, SUPPORTED_EVIDENCE_ADAPTERS as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, GuardIntegrity as Ia, TaskIntent as Ii, GitCommandParseResult as In, partialFailureOf as Io, legacyRecordsNeedingReview as Ir, CERTIFICATE_VERSION as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, TargetCaptureReasonCode as Ja, CaptureScope as Ji, gitCommandMatchesTarget as Jn, ScopeInterpretation as Jo, HOST_CAPABILITY_PACKAGE_GROUPS as Jr, requestedIdentityKey as Js, firstStepGuidanceV6 as Jt, recoveryDigest as K, PersistenceAuthorization as Ka, bindingIndividuallyAccepted as Ki, createGitPrestateEnvelope as Kn, QualificationReason as Ko, ExecutableIdentityBinding as Kr, boundedArtifactChoiceMatches as Ks, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, GuardItem as La, UserInteractionKind as Li, GitCommandRejected as Ln, removalIsComplete as Lo, rootLocatorFlavor as Lr, CERTIFICATE_VERSION_V2 as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, GoalRef as Ma, AuthorityBlockKind as Mi, GIT_COMMAND_TEMPLATES as Mn, actionHasCertificationPath as Mo, PROTOCOL_V5_NOTICE as Mr, ACTION_MANIFEST_VERSION as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, GuardBoundary as Na, AuthorityKind as Ni, GitAdapterAction as Nn, admissibleForRemoval as No, PROTOCOL_V6_NOTICE as Nr, ActionManifest as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, EvidenceParseStatus as Oa, parseHostVersion as Oi, qualifyHostTrust as On, ProcessExitStatus as Oo, CAPTURE_V042_NOTICE as Or, splitTextFragments as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, GuardCheckpoint as Pa, authorityCaptureCounts as Pi, GitCommandAccepted as Pn, capabilityConsequence as Po, applyUpgradeEligibility as Pr, ActionSpec as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, TargetTuple as Qa, classifyClause as Qi, CanonicalArgv as Qn, clauseIsGoverned as Qo, HostCapabilityId as Qr, semanticActionFromText as Qs, AuditedPackageExpectation as Qt, RecoveryOptions as R, GuardItemKind as Ra, classifyTaskIntent as Ri, GitEffectExecution as Rn, removalIsPartiallyKnown as Ro, ACTIVE_HOST_COHORT_ID as Rr, SEMANTIC_ACTIONS as Rs, ManifestIssue as Rt, latestRootInstruction as S, DeriveConfig as Sa, MIN_SUPPORTED_HOST_VERSION as Si, HostTrustAcquisitionOptions as Sn, CapabilityRemedy as So, capabilityRemedyPhrase as Sr, presentExplanationHead as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, DerivedEnvelope as Ta, SUPPORTED_HOST_VERSIONS as Ti, acquireHostTrust as Tn, DependencyStatus as To, itemDiagnosis as Tr, reportingHeadGoverns as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, MessageCoverage as Ua, parseConfirmationMessage as Ui, LinearCommitReadback as Un, GRANTED_QUALIFICATION as Uo, DEFAULT_HOST_LOCK as Ur, SemanticAction as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, GuardProjection as Va, ParsedConfirmation as Vi, GitPrestateEnvelope as Vn, Executee as Vo, AuditedExecutable as Vr, STOP_PROTOCOL_VERSION_V2 as Vs, ClaimedMessage as Vt, closingHint as W, NeedsReviewFact as Wa, CheckpointResult as Wi, commitIndexSnapshotDigest as Wn, InterpretOptions as Wo, EXPECTED_HOST_PACKAGES as Wr, StatefulAction as Ws, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, TargetSource as Xa, captureClause as Xi, revalidateGitPrestate as Xn, clarifiedSpanOf as Xo, HostAuditProvenance as Xr, requestedTargetMatchesResolved as Xs, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, TargetCaptureStatus as Ya, ClauseSegment as Yi, parseGitCommandManifest as Yn, actionVerbMatches as Yo, HOST_COHORTS as Yr, requestedTargetAuthorizesMutation as Ys, lifecyclePhase as Yt, PROOF_KINDS as Z, TargetSourceKind as Za, captureItem as Zi, verifiedLinearCommitReadback as Zn, clauseAsksOwnQuestion as Zo, HostCapabilityEvaluation as Zr, semanticActionFromCommand as Zs, ActiveProfileHostLock as Zt, decideTurnStopping as _, BindingActionClosure as _a, selectHostCohort as _i, readActiveHostGraph as _n, rebindAttemptKey as _o, CertificationSupport as _r, maskCodeSpans as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, BOUNDARY_RECORD_PREFIX as aa, sanitizeUrl as ac, HostLockStatus as ai, auditedHostImplementation as an, ReleaseGateDecision as ao, parseShellCommand as ar, interpretClause as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, DeferAuthorization as ba, HostVersionStatus as bi, verifyComposedHostLockDump as bn, CapabilityFact as bo, TaskKind as br, opensConditionLead as bs, proofDigestV2 as bt, CurrentActionBasis as c, BoundaryRequest as ca, HostToolSurface as ci, evaluateConfiguredHostLock as cn, ReleaseSettlement as co, ToolCallInput as cr, isExecutableItem as cs, ProofObligation as ct, TurnStoppingDecision as d, availableBoundaryQualifications as da, evaluateExternalWaitCapability as di, injectActiveProfileHostLock as dn, RebindArgs as do, evidenceFromPersistedToolResult as dr, isOpenObligation as ds, SessionQuery as dt, extractArtifactPaths as ea, validateActionTarget as ec, HostCohort as ei, TargetHostGraph as en, VerificationContract as eo, ParsedShell as er, explanationHasActionResidue as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, effectuateBoundary as fa, evaluateGraphDerivedHostLock as fi, inspectTargetHostGraph as fn, RebindProposal as fo, extractTextContent as fr, isQuestionScopeNeedingReview as fs, SessionQueryV2 as ft, decideTurnBoundary as g, AssetObligation as ga, hostVersionFromPackages as gi, prepareTargetHostTrust as gn, proposeRebindV042 as go, withDurability as gr, legacyQuestionReadingIsInformational as gs, createProofManifest as gt, currentActionBases as h, AssetInterpretationFact as ha, evaluateToolSurfaceCapability as hi, prepareActiveHostTrust as hn, proposeRebindOutcome as ho, persistedToolResultStatus as hr, kindOfScope as hs, canonicalProjection as ht, supersedeItem as i, segmentClauses as ia, sanitizeClauseText as ic, HostLockEvaluation as ii, auditedForegroundRenderers as in, PackageRow as io, parsePwshCommand as ir, hasWorkPredicate as is, ProofKindCapability as it, snapshotSessionEvents as j, ExternalOperation as ja, AuthorityBlock as ji, GIT_COMMAND_MANIFEST_IDS as jn, RemovalOutcomeReport as jo, PROTOCOL_V4_NOTICE as jr, ACTION_MANIFEST as js, EvidenceFacetCoverage as jt, SessionApiError as k, EvidenceRole as ka, satisfiesSupportedHostRange as ki, registryArchiveFiles as kn, ProcessFactSource as ko, DEFAULT_DELEGATION_TOOL_NAMES as kr, statefulActionsOfScope as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, GoalActivationState as la, bindExecutableIdentity as li, hostLockContextFromComposedDump as ln, BoundedSource as lo, ToolResultInput as lr, isExplanationScope as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, qualifyBoundary as ma, evaluateHostLock as mi, packageRowsFromPnpmLock as mn, proposeRebind as mo, isDeterministicCheck as mr, itemHoldsExecutionAuthority as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, extractOperation as na, digestStrings as nc, HostCohortSelectionReason as ni, auditedDefaultWorkdirHost as nn, WorkUnit as no, canonicalArgvFromCommand as nr, hasOrderedCoordination as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, BoundaryEffectuation as oa, sha256 as oc, HostPlatform as oi, combineHostPolicy as on, ReleaseObservedIdentity as oo, goalCompletionDenial as or, interpretMessage as os, ProofManifest as ot, assessmentOutcomePredicate as p, isCurrentAcceptedBoundary as pa, evaluateHostCapability as pi, packageRowsFromActiveGraph as pn, confirmRebind as po, extractToolSubject as pr, isRestatement as ps, bindProofToProjection as pt, recoveryTitle as q, SourceSpan as qa, certifyCheckpoint as qi, executeRevalidatedGitEffect as qn, QualificationStatus as qo, GOAL_HOST_PACKAGES as qr, isStatefulAction as qs, firstStepGuidance as qt, projectCoreV2 as r, isInformationalMessage as ra, normalizeClause as rc, HostLockContext as ri, auditedDefaultWorkdirProvider as rn, createProjection as ro, isRunExecutable as rr, hasQuestionScope as rs, ProofKind as rt, CompletionDisposition as s, BoundaryQualification as sa, HostProfileKind as si, evaluateActiveHostLock as sn, ReleaseOperation as so, hasCurrentCertificate as sr, introducesActionClause as ss, ProofManifestV2 as st, RC020_RC1_HOST_PACKAGES as t, extractMethod as ta, canonicalizePath as tc, HostCohortSelection as ti, activeRendererModule as tn, WaitAuthorization as to, ShellParseStatus as tr, governedClauseRestrictsExecution as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, GoalBoundaryAccess as ua, bindLiveGoalCapability as ui, hostLockRowsFromComposedDump as un, ProposeOutcome as uo, ToolSubject as ur, isInformationalFragment as us, ProofSurface as ut, decisionBoundaryKey as v, BoundaryDisposition as va, HOST_VALIDATED_VERSIONS as vi, resolveActiveProfileHostLock as vn, rebindResponse as vo, DiagnosisNextAction as vr, maskQuotedSpans as vs, proofCapabilityReport as vt, progressFingerprint as w, DeriveScope as wa, SUPPORTED_HOST_RANGE as wi, HostTrustedPackage as wn, DeclaredOperationResult as wo, evidenceAvailabilityReason as wr, questionHeadsClause as ws, proofV2Rejection as wt, latestAssistantText as x, DelegationRef as xa, LATEST_TESTED_HOST_VERSION as xi, HostRebindTrust as xn, CapabilityGap as xo, UnifiedItemDiagnosis as xr, opensWithDirective as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, BoundaryQualificationKind as ya, HostVersionDecision as yi, resolveInstalledHostLock as yn, replayRebindResult as yo, Repairability as yr, namedActions as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, GuardItemStatus as za, classifyUserInteraction as zi, GitEffectRunner as zn, AuthorityDisposition as zo, ACTIVE_HOST_COHORT_IDS as zr, STATEFUL_ACTIONS as zs, OperationVerbEntry as zt };