dsh-completion-guard 0.7.1 → 0.8.1

package/dist/index.d.ts

@@ -1,11 +1,23 @@
-import { $ as PROOF_CAPABILITY_MATRIX, $a as proposeRebind, $i as qualifyBoundary, $n as extractTextContent, $o as itemHoldsExecutionAuthority, $r as bindLiveGoalCapability, $t as previewFirstStepInjection, A as snapshotSessionEvents, Aa as NeedsReviewReason, Ai as parseConfirmationMessage, An as LinearCommitReadback, Ao as LEGACY_QUALIFICATION, Ar as BASE_HOST_PACKAGES, As as actionCompatible, At as sessionQuery, B as RecoveryOptions, Ba as WaitAuthorization, Bi as extractArtifactPaths, Bn as CanonicalCommandSurface, Bo as governedClauseRestrictsExecution, Br as HostCapabilityId, Bs as canonicalizePath, Bt as CommandSurfaceManifest, C as progressFingerprint, Ca as GuardItemKind, Ci as TaskIntent, Cn as GitCommandParseResult, Co as removalIsPartiallyKnown, Cr as rootLocatorFlavor, Cs as SEMANTIC_ACTIONS, Ct as proofDigestV2, D as SESSION_EVENT_ENVELOPE_INVALID, Da as HostStatus, Di as CONFIRM_LINE_PATTERN, Dn as GitPrestateCheck, Do as ExecutionQualification, Dr as ALPHA2_DSHMARKET_139_HOST_PACKAGES, Ds as SUPPORTED_EVIDENCE_ADAPTERS, Dt as proofV2Rejection, E as SESSION_API_UNSUPPORTED, Ea as GuardProjection, Ei as classifyUserInteraction, En as GitEffectRunner, Eo as Executee, Er as ACTIVE_HOST_LAUNCHER_VERSION, Es as STOP_PROTOCOL_VERSION_V2, Et as proofOperationMatches, F as CLEANUP_CONDITION_RULE_COMPACT, Fa as TargetSource, Fi as ClauseSegment, Fn as gitCommandMatchesTarget, Fo as clarifiedSpanOf, Fr as GOAL_HOST_PACKAGES, Fs as requestedTargetMatchesResolved, Ft as bindingSatisfies, G as cleanupConditionFor, Ga as ReleaseObservedIdentity, Gi as BoundaryEffectuation, Gn as parsePwshCommand, Go as interpretMessage, Gr as HostLockContext, Gs as sha256, Gt as FIRST_STEP_GUIDANCE, H as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ha as createProjection, Hi as extractOperation, Hn as ShellParseStatus, Ho as hasQuestionScope, Hr as HostCohort, Hs as normalizeClause, Ht as OperationVerbEntry, I as CLEANUP_CONDITION_RULE_SHORT, Ia as TargetSourceKind, Ii as captureClause, In as parseGitCommandManifest, Io as clauseAsksOwnQuestion, Ir as HOST_CAPABILITY_PACKAGE_GROUPS, Is as semanticActionFromCommand, It as evidenceCoverage, J as recoveryDigest, Ja as BoundedSource, Ji as GoalActivationState, Jn as hasCurrentCertificate, Jo as isExplanationScope, Jr as HostPlatform, Jt as LifecyclePhase, K as closingHint, Ka as ReleaseOperation, Ki as BoundaryQualification, Kn as parseShellCommand, Ko as introducesActionClause, Kr as HostLockEvaluation, Kt as FirstStepInjection, L as DEFAULT_RECOVERY_CHAR_BUDGET, La as TargetTuple, Li as captureItem, Ln as revalidateGitPrestate, Lo as clauseIsGoverned, Lr as HOST_COHORTS, Ls as semanticActionFromText, Lt as evidenceMatchesItem, M as RC015_HOST_PACKAGES, Ma as SourceSpan, Mi as RejectedBinding, Mn as commitTreeSnapshotDigest, Mo as QualificationStatus, Mr as EXPECTED_HOST_PACKAGES, Ms as isStatefulAction, Mt as validateProofManifest, N as RC1_HOST_PACKAGES, Na as TargetCaptureReasonCode, Ni as certifyCheckpoint, Nn as createGitPrestateEnvelope, No as ScopeInterpretation, Nr as ExecutableIdentity, Ns as requestedIdentityKey, Nt as validateProofManifestV2, O as SessionApiError, Oa as MessageCoverage, Oi as ParsedConfirmation, On as GitPrestateEnvelope, Oo as GRANTED_QUALIFICATION, Or as ALPHA2_HOST_PACKAGES, Os as SemanticAction, Ot as requiredSubjectsOf, P as CLEANUP_CONDITION_RULE, Pa as TargetCaptureStatus, Pi as CaptureScope, Pn as executeRevalidatedGitEffect, Po as actionVerbMatches, Pr as ExecutableIdentityBinding, Ps as requestedTargetAuthorizesMutation, Pt as EvidenceFacetCoverage, Q as ALPHA3_HOST_PACKAGES, Qa as confirmRebind, Qi as isCurrentAcceptedBoundary, Qn as evidenceFromPersistedToolResult, Qo as isRestatement, Qr as bindExecutableIdentity, Qt as lifecyclePhase, R as MIN_RECOVERY_CHAR_BUDGET, Ra as TargetValue, Ri as classifyClause, Rn as verifiedLinearCommitReadback, Ro as clauseIsProtected, Rr as HostAuditProvenance, Rs as validateActionManifest, Rt as isVerifyingCapability, S as observeAssistantOutcome, Sa as GuardItem, Si as segmentAuthorityBlocks, Sn as GitCommandManifest, So as removalIsComplete, Sr as legacyRecordsNeedingReview, Ss as CERTIFICATE_VERSION_V2, St as proofDigest, T as v6TestPredicate, Ta as GuardOperation, Ti as classifyTaskIntent, Tn as GitEffectExecution, To as DirectiveClass, Tr as ACTIVE_HOST_COHORT_IDS, Ts as STOP_PROTOCOL_VERSION, Tt as proofHostSurfacesOf, U as V6_ORDINARY_COMPLETION_RULE_SHORT, Ua as PackageRow, Ui as isInformationalMessage, Un as canonicalArgvFromCommand, Uo as hasWorkPredicate, Ur as HostCohortSelection, Us as sanitizeClauseText, Ut as validateManifest, V as V6_ORDINARY_COMPLETION_RULE, Va as WorkUnit, Vi as extractMethod, Vn as ParsedShell, Vo as hasOrderedCoordination, Vr as HostCapabilityRequest, Vs as digestStrings, Vt as ManifestIssue, W as carriesCleanupCondition, Wa as ReleaseGateDecision, Wi as segmentClauses, Wn as isRunExecutable, Wo as interpretClause, Wr as HostCohortSelectionReason, Ws as sanitizeUrl, Wt as ClaimedMessage, X as renderRecoveryPacket, Xa as RebindArgs, Xi as availableBoundaryQualifications, Xn as ToolResultInput, Xo as isOpenObligation, Xr as HostToolSurface, Xt as firstStepGuidance, Y as recoveryTitle, Ya as ProposeOutcome, Yi as GoalBoundaryAccess, Yn as ToolCallInput, Yo as isInformationalFragment, Yr as HostProfileKind, Yt as claimedBatchHasRealRootInput, Z as v6CurrentRootBoundaries, Za as RebindProposal, Zi as effectuateBoundary, Zn as ToolSubject, Zo as isQuestionScopeNeedingReview, Zr as LEGACY_HOST_COHORTS, Zt as firstStepGuidanceV6, _ as decisionBoundaryKey, _a as GoalRef, _i as currentContractDigest, _n as verifyComposedHostLockDump, _o as actionHasCertificationPath, _r as PROTOCOL_V4_NOTICE, _s as ACTION_MANIFEST_VERSION, _t as bindProofV2ToProjection, a as CONTROL_RECORD_PREFIX, aa as DeferAuthorization, ai as selectHostCohort, an as auditedDefaultWorkdirProvider, ao as CapabilityFact, ar as DiagnosisNextAction, as as opensConditionLead, at as ProofHostSurface, b as latestAssistantText, ba as GuardEvidence, bi as AuthorityKind, bn as GitAdapterAction, bo as capabilityFactOf, br as applyUpgradeEligibility, bs as BOUNDED_ARTIFACT_TYPES, bt as createProofManifestV2, c as NO_PROGRESS_RECORD_PREFIX, ca as DeriveResult, ci as LATEST_SUPPORTED_HOST_VERSION, cn as hostLockContextFromComposedDump, co as DEPENDENCY_FREE_ONLY_CONDITION, cr as UnifiedItemDiagnosis, cs as qualificationOfClause, ct as ProofKindV2, d as assessmentAction, da as EvidenceBinding, di as SUPPORTED_HOST_RANGE, dn as inspectTargetHostGraph, do as DerivedProcessFacts, dr as evidenceAvailabilityReason, ds as restatedContentOf, dt as ProofObligation, ea as AssetInterpretationFact, ei as evaluateExternalWaitCapability, en as ActiveProfileHostLock, eo as proposeRebindOutcome, er as extractToolSubject, es as kindOfScope, et as PROOF_KINDS, f as assessmentOutcomePredicate, fa as EvidenceOutcome, fi as SUPPORTED_HOST_VERSIONS, fn as packageRowsFromActiveGraph, fo as OperationAttribution, fr as itemDiagnosis, fs as semanticActionOfScope, ft as ProofObligationV2, g as decideTurnStopping, ga as ExternalOperation, gi as satisfiesSupportedHostRange, gn as resolveInstalledHostLock, go as RemovalOutcomeReport, gr as PROTOCOL_V3_NOTICE, gs as ACTION_MANIFEST, gt as bindProofToProjection, h as decideTurnBoundary, ha as ExpectedTransition, hi as parseHostVersion, hn as resolveActiveProfileHostLock, ho as ProcessOutcomeReason, hr as DEFAULT_DELEGATION_TOOL_NAMES, hs as verbIsNegated, ht as SessionQueryV2, i as AssistantOutcomeObservation, ia as BoundaryQualificationKind, ii as hostVersionFromPackages, in as auditedDefaultWorkdirHost, io as replayRebindResult, ir as CertificationSupport, is as namedActions, it as PROOF_PROTOCOL_VERSION_V2, j as RC015_RC2_HOST_PACKAGES, ja as PersistenceAuthorization, ji as CheckpointResult, jn as commitIndexSnapshotDigest, jo as QualificationReason, jr as DEFAULT_HOST_LOCK, js as boundedArtifactChoiceMatches, jt as sessionQueryV2, k as V3SessionLike, ka as NeedsReviewFact, ki as isFrozenV042RebindResponse, kn as GitTargetIdentity, ko as InterpretOptions, kr as AuditedExecutable, ks as StatefulAction, kt as scopeCoverageDigest, l as NO_PROGRESS_TURNS_BEFORE_STOP, la as DeriveScope, li as MIN_SUPPORTED_HOST_VERSION, ln as hostLockRowsFromComposedDump, lo as DeclaredOperationResult, lr as capabilityRemedyPhrase, ls as questionHeadsClause, lt as ProofManifest, m as currentActionBases, ma as EvidenceRole, mi as evaluateMinimumHostVersion, mn as readActiveHostGraph, mo as ProcessFactSource, mr as CAPTURE_V042_NOTICE, ms as statefulActionsOfScope, mt as SessionQuery, n as projectCoreV2, na as BindingActionClosure, ni as evaluateHostLock, nn as TargetHostGraph, no as rebindAttemptKey, nr as persistedToolResultStatus, ns as maskCodeSpans, nt as PROOF_MANIFEST_DOMAIN_V2, o as CompletionDisposition, oa as DelegationRef, oi as HostVersionDecision, on as auditedForegroundRenderers, oo as CapabilityGap, or as Repairability, os as opensWithDirective, ot as ProofKind, p as classifyCompletionClaim, pa as EvidenceParseStatus, pi as compareHostVersions, pn as packageRowsFromPnpmLock, po as ProcessExitStatus, pr as relevantEvidence, ps as splitTextFragments, pt as ProofSurface, q as openItems, qa as ReleaseSettlement, qi as BoundaryRequest, qn as goalCompletionDenial, qo as isExecutableItem, qr as HostLockStatus, qt as FirstStepPreviewInput, r as supersedeItem, ra as BoundaryDisposition, ri as evaluateToolSurfaceCapability, rn as activeRendererModule, ro as rebindResponse, rr as withDurability, rs as maskQuotedSpans, rt as PROOF_PROTOCOL_VERSION, s as CurrentActionBasis, sa as DeriveConfig, si as HostVersionStatus, sn as combineHostPolicy, so as CapabilityRemedy, sr as TaskKind, ss as presentExplanationHead, st as ProofKindCapability, t as projectSessionCoreV2, ta as AssetObligation, ti as evaluateHostCapability, tn as HostProfileError, to as proposeRebindV042, tr as isDeterministicCheck, ts as legacyQuestionReadingIsInformational, tt as PROOF_KINDS_V2, u as TurnStoppingDecision, ua as DerivedEnvelope, ui as ParsedHostVersion, un as injectActiveProfileHostLock, uo as DependencyStatus, ur as deriveItemDiagnosis, us as reportingHeadGoverns, ut as ProofManifestV2, v as isRootPauseRequest, va as GuardBoundary, vi as AuthorityBlock, vn as GIT_COMMAND_MANIFEST_IDS, vo as admissibleForRemoval, vr as PROTOCOL_V5_NOTICE, vs as ActionManifest, vt as canonicalProjection, w as testOutcomePredicate, wa as GuardItemStatus, wi as UserInteractionKind, wn as GitCommandRejected, wo as AuthorityDisposition, wr as ACTIVE_HOST_COHORT_ID, ws as STATEFUL_ACTIONS, wt as proofEvidenceConstraints, x as latestRootInstruction, xa as GuardIntegrity, xi as authorityCaptureCounts, xn as GitCommandAccepted, xo as partialFailureOf, xr as deriveProjection, xs as CERTIFICATE_VERSION, xt as proofCapabilityReport, y as isWholeTaskCompletionClaim, ya as GuardCheckpoint, yi as AuthorityBlockKind, yn as GIT_COMMAND_TEMPLATES, yo as capabilityConsequence, yr as PROTOCOL_V6_NOTICE, ys as ActionSpec, yt as createProofManifest, z as RecoveryCause, za as VerificationContract, zi as environmentDefaultRepositoryTarget, zn as CanonicalArgv, zo as explanationHasActionResidue, zr as HostCapabilityEvaluation, zs as validateActionTarget, zt as COMMAND_SURFACE_MANIFEST } from "./index-hiUtfKJa.js";
+import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as TargetValue, $i as environmentDefaultRepositoryTarget, $n as CanonicalCommandSurface, $o as clauseIsProtected, $r as HostCapabilityRequest, $s as validateActionManifest, $t as HostProfileError, A as V4SessionLike, Aa as ExpectedTransition, Ai as currentContractDigest, An as registryArchiveModules, Ao as ProcessOutcomeReason, Ar as PROTOCOL_V3_NOTICE, As as verbIsNegated, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as GuardOperation, Bi as CONFIRM_LINE_PATTERN, Bn as GitPrestateCheck, Bo as DirectiveClass, Br as ACTIVE_HOST_LAUNCHER_VERSION, Bs as STOP_PROTOCOL_VERSION, Bt as validateManifest, C as observeAssistantOutcome, Ca as DeriveResult, Ci as ParsedHostVersion, Cn as HostTrustError, Co as DEPENDENCY_FREE_ONLY_CONDITION, Cr as deriveItemDiagnosis, Cs as qualificationOfClause, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as EvidenceOutcome, Di as evaluateMinimumHostVersion, Dn as parseHostTrust, Do as OperationAttribution, Dr as relevantEvidence, Ds as semanticActionOfScope, Dt as sessionQuery, E as v6TestPredicate, Ea as EvidenceBinding, Ei as compareHostVersions, En as hostTrustDigest, Eo as DerivedProcessFacts, Er as nativeFileTwoRole, Es as restatedContentOf, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as GuardEvidence, Fi as segmentAuthorityBlocks, Fn as GitCommandManifest, Fo as capabilityFactOf, Fr as deriveProjection, Fs as BOUNDED_ARTIFACT_TYPES, Ft as isVerifyingCapability, G as openItems, Ga as NeedsReviewReason, Gi as RejectedBinding, Gn as commitTreeSnapshotDigest, Go as LEGACY_QUALIFICATION, Gr as ExecutableIdentity, Gs as actionCompatible, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as HostStatus, Hi as isFrozenV042RebindResponse, Hn as GitTargetIdentity, Ho as ExecutionQualification, Hr as BASE_HOST_PACKAGES, Hs as SUPPORTED_EVIDENCE_ADAPTERS, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as GuardIntegrity, Ii as TaskIntent, In as GitCommandParseResult, Io as partialFailureOf, Ir as legacyRecordsNeedingReview, Is as CERTIFICATE_VERSION, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as TargetCaptureReasonCode, Ji as CaptureScope, Jn as gitCommandMatchesTarget, Jo as ScopeInterpretation, Jr as HOST_CAPABILITY_PACKAGE_GROUPS, Js as requestedIdentityKey, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as PersistenceAuthorization, Ki as bindingIndividuallyAccepted, Kn as createGitPrestateEnvelope, Ko as QualificationReason, Kr as ExecutableIdentityBinding, Ks as boundedArtifactChoiceMatches, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as GuardItem, Li as UserInteractionKind, Ln as GitCommandRejected, Lo as removalIsComplete, Lr as rootLocatorFlavor, Ls as CERTIFICATE_VERSION_V2, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as GoalRef, Mi as AuthorityBlockKind, Mn as GIT_COMMAND_TEMPLATES, Mo as actionHasCertificationPath, Mr as PROTOCOL_V5_NOTICE, Ms as ACTION_MANIFEST_VERSION, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as GuardBoundary, Ni as AuthorityKind, Nn as GitAdapterAction, No as admissibleForRemoval, Nr as PROTOCOL_V6_NOTICE, Ns as ActionManifest, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as EvidenceParseStatus, Oi as parseHostVersion, On as qualifyHostTrust, Oo as ProcessExitStatus, Or as CAPTURE_V042_NOTICE, Os as splitTextFragments, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as GuardCheckpoint, Pi as authorityCaptureCounts, Pn as GitCommandAccepted, Po as capabilityConsequence, Pr as applyUpgradeEligibility, Ps as ActionSpec, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as TargetTuple, Qi as classifyClause, Qn as CanonicalArgv, Qo as clauseIsGoverned, Qr as HostCapabilityId, Qs as semanticActionFromText, Qt as AuditedPackageExpectation, R as RecoveryOptions, Ra as GuardItemKind, Ri as classifyTaskIntent, Rn as GitEffectExecution, Ro as removalIsPartiallyKnown, Rr as ACTIVE_HOST_COHORT_ID, Rs as SEMANTIC_ACTIONS, Rt as ManifestIssue, S as latestRootInstruction, Sa as DeriveConfig, Si as MIN_SUPPORTED_HOST_VERSION, Sn as HostTrustAcquisitionOptions, So as CapabilityRemedy, Sr as capabilityRemedyPhrase, Ss as presentExplanationHead, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as DerivedEnvelope, Ti as SUPPORTED_HOST_VERSIONS, Tn as acquireHostTrust, To as DependencyStatus, Tr as itemDiagnosis, Ts as reportingHeadGoverns, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as MessageCoverage, Ui as parseConfirmationMessage, Un as LinearCommitReadback, Uo as GRANTED_QUALIFICATION, Ur as DEFAULT_HOST_LOCK, Us as SemanticAction, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as GuardProjection, Vi as ParsedConfirmation, Vn as GitPrestateEnvelope, Vo as Executee, Vr as AuditedExecutable, Vs as STOP_PROTOCOL_VERSION_V2, Vt as ClaimedMessage, W as closingHint, Wa as NeedsReviewFact, Wi as CheckpointResult, Wn as commitIndexSnapshotDigest, Wo as InterpretOptions, Wr as EXPECTED_HOST_PACKAGES, Ws as StatefulAction, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as TargetSource, Xi as captureClause, Xn as revalidateGitPrestate, Xo as clarifiedSpanOf, Xr as HostAuditProvenance, Xs as requestedTargetMatchesResolved, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as TargetCaptureStatus, Yi as ClauseSegment, Yn as parseGitCommandManifest, Yo as actionVerbMatches, Yr as HOST_COHORTS, Ys as requestedTargetAuthorizesMutation, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as TargetSourceKind, Zi as captureItem, Zn as verifiedLinearCommitReadback, Zo as clauseAsksOwnQuestion, Zr as HostCapabilityEvaluation, Zs as semanticActionFromCommand, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as BindingActionClosure, _i as selectHostCohort, _n as readActiveHostGraph, _o as rebindAttemptKey, _r as CertificationSupport, _s as maskCodeSpans, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as BOUNDARY_RECORD_PREFIX, ac as sanitizeUrl, ai as HostLockStatus, an as auditedHostImplementation, ao as ReleaseGateDecision, ar as parseShellCommand, as as interpretClause, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as DeferAuthorization, bi as HostVersionStatus, bn as verifyComposedHostLockDump, bo as CapabilityFact, br as TaskKind, bs as opensConditionLead, bt as proofDigestV2, c as CurrentActionBasis, ca as BoundaryRequest, ci as HostToolSurface, cn as evaluateConfiguredHostLock, co as ReleaseSettlement, cr as ToolCallInput, cs as isExecutableItem, ct as ProofObligation, d as TurnStoppingDecision, da as availableBoundaryQualifications, di as evaluateExternalWaitCapability, dn as injectActiveProfileHostLock, do as RebindArgs, dr as evidenceFromPersistedToolResult, ds as isOpenObligation, dt as SessionQuery, ea as extractArtifactPaths, ec as validateActionTarget, ei as HostCohort, en as TargetHostGraph, eo as VerificationContract, er as ParsedShell, es as explanationHasActionResidue, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as effectuateBoundary, fi as evaluateGraphDerivedHostLock, fn as inspectTargetHostGraph, fo as RebindProposal, fr as extractTextContent, fs as isQuestionScopeNeedingReview, ft as SessionQueryV2, g as decideTurnBoundary, ga as AssetObligation, gi as hostVersionFromPackages, gn as prepareTargetHostTrust, go as proposeRebindV042, gr as withDurability, gs as legacyQuestionReadingIsInformational, gt as createProofManifest, h as currentActionBases, ha as AssetInterpretationFact, hi as evaluateToolSurfaceCapability, hn as prepareActiveHostTrust, ho as proposeRebindOutcome, hr as persistedToolResultStatus, hs as kindOfScope, ht as canonicalProjection, i as supersedeItem, ia as segmentClauses, ic as sanitizeClauseText, ii as HostLockEvaluation, in as auditedForegroundRenderers, io as PackageRow, ir as parsePwshCommand, is as hasWorkPredicate, it as ProofKindCapability, j as snapshotSessionEvents, ja as ExternalOperation, ji as AuthorityBlock, jn as GIT_COMMAND_MANIFEST_IDS, jo as RemovalOutcomeReport, jr as PROTOCOL_V4_NOTICE, js as ACTION_MANIFEST, jt as EvidenceFacetCoverage, k as SessionApiError, ka as EvidenceRole, ki as satisfiesSupportedHostRange, kn as registryArchiveFiles, ko as ProcessFactSource, kr as DEFAULT_DELEGATION_TOOL_NAMES, ks as statefulActionsOfScope, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as GoalActivationState, li as bindExecutableIdentity, ln as hostLockContextFromComposedDump, lo as BoundedSource, lr as ToolResultInput, ls as isExplanationScope, lt as ProofObligationV2, m as classifyCompletionClaim, ma as qualifyBoundary, mi as evaluateHostLock, mn as packageRowsFromPnpmLock, mo as proposeRebind, mr as isDeterministicCheck, ms as itemHoldsExecutionAuthority, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as extractOperation, nc as digestStrings, ni as HostCohortSelectionReason, nn as auditedDefaultWorkdirHost, no as WorkUnit, nr as canonicalArgvFromCommand, ns as hasOrderedCoordination, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as BoundaryEffectuation, oc as sha256, oi as HostPlatform, on as combineHostPolicy, oo as ReleaseObservedIdentity, or as goalCompletionDenial, os as interpretMessage, ot as ProofManifest, p as assessmentOutcomePredicate, pa as isCurrentAcceptedBoundary, pi as evaluateHostCapability, pn as packageRowsFromActiveGraph, po as confirmRebind, pr as extractToolSubject, ps as isRestatement, pt as bindProofToProjection, q as recoveryTitle, qa as SourceSpan, qi as certifyCheckpoint, qn as executeRevalidatedGitEffect, qo as QualificationStatus, qr as GOAL_HOST_PACKAGES, qs as isStatefulAction, qt as firstStepGuidance, r as projectCoreV2, ra as isInformationalMessage, rc as normalizeClause, ri as HostLockContext, rn as auditedDefaultWorkdirProvider, ro as createProjection, rr as isRunExecutable, rs as hasQuestionScope, rt as ProofKind, s as CompletionDisposition, sa as BoundaryQualification, si as HostProfileKind, sn as evaluateActiveHostLock, so as ReleaseOperation, sr as hasCurrentCertificate, ss as introducesActionClause, st as ProofManifestV2, t as RC020_RC1_HOST_PACKAGES, ta as extractMethod, tc as canonicalizePath, ti as HostCohortSelection, tn as activeRendererModule, to as WaitAuthorization, tr as ShellParseStatus, ts as governedClauseRestrictsExecution, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as GoalBoundaryAccess, ui as bindLiveGoalCapability, un as hostLockRowsFromComposedDump, uo as ProposeOutcome, ur as ToolSubject, us as isInformationalFragment, ut as ProofSurface, v as decisionBoundaryKey, va as BoundaryDisposition, vi as HOST_VALIDATED_VERSIONS, vn as resolveActiveProfileHostLock, vo as rebindResponse, vr as DiagnosisNextAction, vs as maskQuotedSpans, vt as proofCapabilityReport, w as progressFingerprint, wa as DeriveScope, wi as SUPPORTED_HOST_RANGE, wn as HostTrustedPackage, wo as DeclaredOperationResult, wr as evidenceAvailabilityReason, ws as questionHeadsClause, wt as proofV2Rejection, x as latestAssistantText, xa as DelegationRef, xi as LATEST_TESTED_HOST_VERSION, xn as HostRebindTrust, xo as CapabilityGap, xr as UnifiedItemDiagnosis, xs as opensWithDirective, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as BoundaryQualificationKind, yi as HostVersionDecision, yn as resolveInstalledHostLock, yo as replayRebindResult, yr as Repairability, ys as namedActions, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as GuardItemStatus, zi as classifyUserInteraction, zn as GitEffectRunner, zo as AuthorityDisposition, zr as ACTIVE_HOST_COHORT_IDS, zs as STATEFUL_ACTIONS, zt as OperationVerbEntry } from "./index-jKw6mANp.js";
+import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
+//#region src/message-source.d.ts
+declare module "@deepseek-ai/dsh-llm" {
+  interface MessageSourceMap {
+    "context-guard": {
+      readonly kind: "context-guard";
+      readonly plugin: "context-guard";
+      readonly form: "notice";
+      readonly summary: string;
+    };
+  }
+}
+//#endregion
 //#region src/tools/evidence.d.ts
-
 /** Trusted embedding evidence, never accepted from a model/tool or HTTP response.
 * The embedding must bind its actual loaded provider to this process/service.
 * Current DSH hosts expose no such verifier, so production restart stays
@@ -62,6 +74,13 @@ interface EvidenceToolRoots {
   * mutation authorization is the whole authority chain.
   */
   releaseGate?: (request: ReleaseGateToolRequest) => Promise<ReleaseGateDecision>;
+  /**
+  * The FINAL fresh host judgment of an action entry. Called after the
+  * effect's own last await and immediately before the effect starts, with no
+  * yield in between; `false` refuses the effect fail-closed. A pre-await
+  * audit can therefore never authorize a post-await effect.
+  */
+  preEffectVeto?: () => boolean;
   /** C10 settlement record, written after the effect from a trusted readback. */
   releaseSettle?: (request: ReleaseSettlementToolRequest) => Promise<void>;
 }
@@ -116,6 +135,7 @@ declare const Config: z<{
   hostLockPolicy?: string;
   hostLockRuntimeRoot?: string;
   hostLockProfileRoot?: string;
+  hostLockTrust?: string;
 }>;
 //#endregion
 //#region src/runtime.d.ts
@@ -131,6 +151,8 @@ declare const inject: readonly ["sessions", "commands", "fs"];
 interface RuntimeExecutorSeams {
   commandRunner?: EvidenceToolRoots["commandRunner"];
   fetcher?: EvidenceToolRoots["fetcher"];
+  /** Isolated acceptance override for the executable-identity reader. */
+  readExecutableIdentity?: EvidenceToolRoots["readExecutableIdentity"];
   allowLoopbackHttpRegistry?: boolean;
   /**
   * Pin the audited host cohort instead of reading a live profile graph. An
@@ -144,6 +166,14 @@ interface RuntimeExecutorSeams {
   hostLock?: HostLockEvaluation;
   /** Isolated acceptance override for the provider-invisible durable ledger. */
   privateLedgerRoot?: string;
+  /**
+  * Invoked once per full host-lock validation the runtime actually performs —
+  * the attach-time validation and every security-sensitive entry's fresh
+  * validation. It observes; it never replaces the audit. Production callers
+  * omit it, so deterministic tests and acceptance harnesses can count full
+  * validations without instrumenting the filesystem.
+  */
+  onHostLockValidation?: () => void;
 }
 declare function apply(ctx: Context, rawConfig?: {
   activation?: unknown;
@@ -153,6 +183,7 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockPolicy?: unknown;
   hostLockRuntimeRoot?: unknown;
   hostLockProfileRoot?: unknown;
+  hostLockTrust?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
 //#region src/raw-replay.d.ts
@@ -170,4 +201,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ALPHA2_DSHMARKET_139_HOST_PACKAGES, ALPHA2_HOST_PACKAGES, ALPHA3_HOST_PACKAGES, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_HOST_COHORTS, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC015_HOST_PACKAGES, RC015_RC2_HOST_PACKAGES, RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V3SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };