dsh-completion-guard 0.8.0 → 0.8.1

package/dist/{index-DMr57AgL.d.ts → index-jKw6mANp.d.ts}

@@ -1,3 +1,5 @@
+import { Stats } from "node:fs";
+
 //#region src/domain/canonicalize.d.ts
 declare function normalizeClause(text: string): string;
 /**
@@ -1727,11 +1729,25 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Exact host identity; version ordering is diagnostic only. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
-declare const LATEST_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
-declare const SUPPORTED_HOST_VERSIONS: readonly string[];
+/** Version admission floor. Since 0.8.1 the public DSH support range is
+* `>=0.2.0-rc.1` with NO implied upper bound: every host version at or above
+* this floor (including later RCs on any tuple, stable and future releases)
+* passes VERSION ADMISSION. The floor only rises when a future Guard release
+* actively adopts a newer DSH; the runtime never raises it from a remote
+* `latest`. Ordering is strict SemVer with prerelease comparison and build
+* metadata ignored. Version admission is one gate of several — it never
+* claims native validation of a not-yet-tested host, and the graph/byte/
+* contract audits below still run on every admission. */
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.1";
 declare const SUPPORTED_HOST_RANGE: string;
+/** Versions with recorded first-hand host evidence. This is an EVIDENCE
+* ledger, NOT an admission whitelist: a missing row never refuses a
+* version-above-floor host. */
+declare const HOST_VALIDATED_VERSIONS: readonly string[];
+/** Historical alias retained for evidence-list readers; the admission rule is
+* the floor above, never this list. */
+declare const SUPPORTED_HOST_VERSIONS: readonly string[];
+declare const LATEST_TESTED_HOST_VERSION: string;
 interface ParsedHostVersion {
   major: number;
   minor: number;
@@ -1746,16 +1762,19 @@ declare function parseHostVersion(value: string): ParsedHostVersion | undefined;
 * unparseable host version fails closed rather than sorting as "newer".
 */
 declare function compareHostVersions(a: string, b: string): number | undefined;
-type HostVersionStatus = "supported" | "below_minimum" | "unparseable" | "unregistered";
+type HostVersionStatus = "supported" | "below_minimum" | "unparseable";
 interface HostVersionDecision {
   status: HostVersionStatus;
   version: string;
   minimum: string;
-  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable" | "host_version_unregistered";
+  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable";
 }
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
-/** Whether npm's exact public support union admits this host version. */
+/** Version admission: at or above the floor by strict SemVer precedence
+* (prerelease-aware; build metadata ignored). `0.2.0-rc.0` and the whole
+* `0.1.7.x` line stay below the floor; `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.0`,
+* later patch/minor RCs and releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
 //#region src/domain/host-lock.d.ts
@@ -1768,7 +1787,7 @@ type HostProfileKind = "headless" | "web";
 * records whether the exact graph it used was loaded on a native host or only
 * resolved from the registry.
 */
-type HostAuditProvenance = "native-audited" | "registry-derived-pending-native-audit";
+type HostAuditProvenance = "native-audited" | "registry-derived-pending-native-audit" | "graph-derived-rebind-pending-native-audit";
 interface HostCohort {
   /** Stable cohort identity; bound into every hostLockDigest via `host_cohort`. */
   id: string;
@@ -1793,7 +1812,7 @@ interface HostCohort {
   capabilities: CapabilityRow[];
 }
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.1.7-rc.2";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.1";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 /** Core-lock/v1 separates optional market identity from the rc.2 critical
 * graph. Historical cohorts live only in test data. Version ordering cannot
@@ -1802,7 +1821,7 @@ declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.1.7-rc.2). The cohort
+* Baseline fixture package identities (DSH 0.2.0-rc.1). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -1830,11 +1849,14 @@ interface HostCapabilityEvaluation {
 interface HostLockEvaluation {
   status: HostLockStatus;
   digest: string;
+  /** Qualified graph descriptor retained by capability consumers. */
+  derivedCohort?: HostCohort;
   /** Read-only byte attestation of the active foreground shell renderer and
   * its shared terminal decoder. Set only by production active-graph readback;
   * the package version/SRI graph alone does not establish renderer behavior. */
   auditedForegroundRenderers?: Array<"bash" | "pwsh">;
   goalAvailable: boolean;
+  goalQualificationFailure?: "host_contract_goal_qualification_required";
   reasonCode?: "host_lock_migration_required" | "host_lock_installed_graph_drift" | "host_lock_missing" | "host_lock_version_mismatch" | "host_lock_version_below_minimum" | "host_lock_version_unparseable" | "host_lock_integrity_mismatch" | "host_lock_unknown_package" | "host_lock_duplicate_package" | "host_lock_goal_graph_incomplete" | "host_lock_goal_capability_mismatch" | "host_lock_cohort_mixed_graph" | "host_lock_cohort_unbound_identity" | "host_lock_cohort_platform_not_audited";
   packages: PackageRow[];
   capabilities: Record<HostCapabilityId, HostCapabilityEvaluation>;
@@ -1870,6 +1892,8 @@ interface HostLockContext {
   * it leaves the version question unanswered rather than assumed supported.
   */
   hostVersion?: string;
+  /** Trusted registry expectations, bound separately from version admission. */
+  trustDigest?: string;
 }
 /**
 * The host version a package graph records, for the version-policy decision.
@@ -1907,6 +1931,10 @@ interface HostCohortSelection {
 * consistently.
 */
 declare function selectHostCohort(rows: readonly PackageRow[], platform?: HostPlatform): HostCohortSelection;
+/** Evaluate a qualified graph against trusted registry identities. The callback
+* must authenticate rows against acquired published identities, not local YAML
+* alone. Production adds the byte/route audit and the adapter qualification. */
+declare function evaluateGraphDerivedHostLock(rows: readonly PackageRow[], context?: HostLockContext, verifyLockfileSri?: (row: PackageRow) => boolean): HostLockEvaluation;
 declare function evaluateHostLock(rows: readonly PackageRow[], context?: HostLockContext): HostLockEvaluation;
 interface HostCapabilityRequest {
   action: SemanticAction;
@@ -2356,6 +2384,97 @@ declare function revalidateGitPrestate(resolved: GitPrestateEnvelope, manifest:
 /** Execute the exact resolved argv only after the mandatory live recheck. */
 declare function executeRevalidatedGitEffect(resolved: GitPrestateEnvelope, manifest: GitCommandManifest, target: GitTargetIdentity, currentStateTuple: Readonly<Record<string, string | Uint8Array>>, runner: GitEffectRunner): Promise<GitEffectExecution>;
 //#endregion
+//#region src/domain/host-audit-session.d.ts
+/**
+* Memo table for ONE bounded host-lock validation operation.
+*
+* A full validation re-reads the same real paths, manifests, search paths and
+* export targets from several cooperating audits. Resolution results are
+* reused strictly inside this operation: the table lives and dies with one
+* audit call, is never shared across entries, and is never a substitute for
+* revalidation — a later entry always performs its own fresh reads. There are
+* deliberately no timestamps, mtimes, sizes or cross-call caches here.
+*
+* Every byte read funnels through ONE memo (`read:`): the raw file bytes are
+* read from disk exactly once per path per operation, and JSON parsing and
+* digesting both consume those shared bytes.
+*/
+interface HostAuditSession {
+  /** Memoized `realpathSync`; identical inputs return the identical result. */
+  realpath(path: string): string;
+  /** Memoized `existsSync`, including the negative result. */
+  exists(path: string): boolean;
+  /** Memoized `statSync`. */
+  stat(path: string): Stats;
+  /** Memoized raw file bytes — the single physical-read channel. */
+  readFile(path: string): Buffer;
+  /** Memoized `JSON.parse` of an object file over the shared bytes; parse errors propagate. */
+  readJson(path: string): Record<string, unknown>;
+  /** Memoized SHA-256 over the shared bytes. */
+  fileDigest(path: string): string;
+  /** Memoized directory listing (names + kinds) for audit enumeration. */
+  listDir?(dir: string): Array<{
+    name: string;
+    isFile: boolean;
+    isDirectory: boolean;
+  }>;
+  /** Memoized `createRequire` for one importer path. */
+  requireFor(importer: string): NodeRequire;
+  /** Memoized `require.resolve.paths(name)` for one importer. */
+  resolvePaths(importer: string, name: string): readonly string[];
+  /** Memoized `require.resolve(request)` for one importer. */
+  requireResolve(importer: string, request: string): string;
+  /** Generic operation-scoped memo for derived structures (parsed graphs, indexes). */
+  memo<T>(key: string, compute: () => T): T;
+}
+//#endregion
+//#region src/domain/host-contract-probe.d.ts
+declare const HOST_CONTRACT_SCHEMA: "guard-host-contract/v2";
+//#endregion
+//#region src/domain/host-trust.d.ts
+interface HostTrustedPackage extends PackageRow {
+  version: string;
+  integrity: string;
+  modules: Record<string, string>;
+}
+/** Operator-owned output of registry acquisition, never package self-report. */
+interface HostRebindTrust {
+  schema: "dsh-host-registry-trust/v1";
+  source: "https://registry.npmjs.org/";
+  qualification: "guard-host-contract/v2";
+  packages: HostTrustedPackage[];
+  probeDependencies?: HostTrustedPackage[];
+  contract: {
+    schema: typeof HOST_CONTRACT_SCHEMA;
+    receiptDigest: string;
+    bindingDigest: string;
+    conditionsDigest: string;
+  };
+  /** Recomputed qualification, not caller-reported compatibility. */
+  unqualifiedOptionalPackages?: string[];
+}
+declare class HostTrustError extends Error {
+  readonly code: string;
+  constructor(code: string);
+}
+/** Validate generator-issued operator-owned authority. The descriptor cannot
+* assert compatibility: changed bytes require the independently issued cache
+* receipt, whose complete byte graph and startup conditions are bound. */
+declare function qualifyHostTrust(value: unknown, profileRoot?: string): HostRebindTrust;
+declare function parseHostTrust(text: string, profileRoot?: string): HostRebindTrust;
+declare function hostTrustDigest(trust: HostRebindTrust): string;
+/** Closed-world regular-file tar projection. Never extract or execute archives. */
+declare function registryArchiveFiles(bytes: Buffer, row: PackageRow): Record<string, Buffer>;
+declare function registryArchiveModules(bytes: Buffer, row: PackageRow): Record<string, string>;
+/** Fetch exact public registry identity at trusted inspect/rebind time.
+* Lockfile integrity is compared with HTTPS registry metadata AND archive bytes.
+* The production origin is fixed; tests can inject a fetch transport. */
+interface HostTrustAcquisitionOptions {
+  profileRoot: string;
+  dependencyIdentity?: (name: string, importer: string) => PackageRow;
+}
+declare function acquireHostTrust(rows: readonly PackageRow[], fetcher?: typeof fetch, options?: HostTrustAcquisitionOptions): Promise<HostRebindTrust>;
+//#endregion
 //#region src/domain/host-resolver.d.ts
 declare class HostProfileError extends Error {
   readonly code: string;
@@ -2386,7 +2505,7 @@ declare function resolveInstalledHostLock(moduleUrl?: string): HostLockEvaluatio
 * two reachable peer variants of a critical package remain a duplicate and
 * are returned twice so evaluateHostLock can fail closed with a bounded code.
 */
-declare function packageRowsFromActiveGraph(packageMapText: string, lockText: string, nodeModulesRoot?: string): PackageRow[];
+declare function packageRowsFromActiveGraph(packageMapText: string, lockText: string, nodeModulesRoot?: string, providedSession?: HostAuditSession): PackageRow[];
 interface ActiveProfileHostLock {
   evaluation: HostLockEvaluation;
   runtimeRoot: string;
@@ -2394,32 +2513,52 @@ interface ActiveProfileHostLock {
   pluginVersion: string;
   platform: HostPlatform;
   profileKind: HostProfileKind;
+  trust?: HostRebindTrust;
 }
 /** Read exact reachable critical rows without requiring Guard installation.
 * Used by target preflight before a legacy profile can be migrated.
 */
-declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
+declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession): PackageRow[];
+/** Version/identity evaluation of operator-owned registry expectations. */
+declare function evaluateConfiguredHostLock(rows: readonly PackageRow[], context: HostLockContext, trustText?: string, profileRoot?: string): HostLockEvaluation;
+/** Complete production composition; no graph-only result grants authority. */
+declare function evaluateActiveHostLock(runtime: string, profile: string, context: HostLockContext, session?: HostAuditSession, trustText?: string): HostLockEvaluation;
+/** Trusted acquisition only; consumers never use local SRI as provenance. */
+declare function prepareActiveHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Verify published executable bytes at the reachable runtime/profile roots.
 * Registry SRI and installed manifests alone cannot authenticate loaded code.
 * Missing, duplicate, escaped or modified modules never pass this audit.
+*
+* All filesystem resolution within one call is memoized through a single
+* {@link HostAuditSession}; callers may thread one in to share the parsed
+* graphs and digests with the other audits of the same validation operation.
 */
-declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string): boolean;
-declare function activeRendererModule(nodeModulesRoot: string, name: string): {
+interface AuditedPackageExpectation {
+  name: string;
+  version?: string;
+  /** Required published per-file digests; absence never authenticates bytes. */
+  modules?: Record<string, string>;
+}
+/** Byte and dual-lane route audit over both graphs. Expectations are either
+* the published baseline or operator-owned, registry-acquired qualified module
+* digests. A missing digest set never authenticates unknown implementation. */
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[]): boolean;
+declare function activeRendererModule(nodeModulesRoot: string, name: string, providedSession?: HostAuditSession): {
   bytes: string;
   path: string;
 } | undefined;
 /** Verify active, reachable producer bytes without reading credentials or
 * accepting historical package-map entries. Missing/ambiguous paths fail
 * closed for the ordinary markerless-test shortcut. */
-declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string): Array<"bash" | "pwsh">;
+declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession): Array<"bash" | "pwsh">;
 /** Exact active implementation route for call-time omitted-workdir evidence. */
-declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh"): boolean;
+declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", providedSession?: HostAuditSession): boolean;
 /**
 * The active graph alone does not prove which shell service this Agent uses.
 * Match the scoped service's exact constructor to the audited active module,
 * rejecting another provider with the same public service interface/name.
 */
-declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown): Promise<boolean>;
+declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown, providedSession?: HostAuditSession): Promise<boolean>;
 interface TargetHostGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -2428,14 +2567,12 @@ interface TargetHostGraph {
     bundles?: PackageRow[];
   };
 }
-/**
-* Pre-install inspection only. A fresh rc.1 Headless profile can use its two
-* installation-owned bundles without a private importer. Never extend this
-* absence rule to inject or runtime replay, which still call the strict reader.
-*/
-declare function inspectTargetHostGraph(runtimeRoot: string, profileRoot: string): TargetHostGraph;
+/** The pre-install path consumes the same qualified identities and byte/route
+* audit as active-profile entries; structural discovery grants no authority. */
+declare function inspectTargetHostGraph(runtime: string, profile: string, trust?: HostRebindTrust): TargetHostGraph;
+declare function prepareTargetHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Read and validate the actual runtime graph plus the installed profile plugin. */
-declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string): ActiveProfileHostLock;
+declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
 /** Atomically inject a repeatable managed patch into the selected profile only. */
 declare function injectActiveProfileHostLock(input: ActiveProfileHostLock): string;
 /** Extract the bounded host tuple from DSH's composed YAML dump. */
@@ -3029,9 +3166,11 @@ declare function projectCoreV2(snapshot: Row): Row;
 //#region src/core-v2/session.d.ts
 declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: GuardProjection, displayOrigins?: NonNullable<GuardProjection["coreV2RequirementOrigins"]>): Record<string, unknown> | undefined;
 //#endregion
-//#region src/domain/rc017-rc2-host.d.ts
+//#region src/domain/rc020-rc1-host.d.ts
 /** One source for verified registry identities and published executable bytes.
-* Native platform acceptance remains a separate, currently pending fact. */
-declare const RC017_RC2_HOST_PACKAGES: PackageRow[];
+* Bound to the published dsh-v0.2.0-rc.1 tarballs (upstream
+* 4878cdabd87d4041bdaff61d04c966883b9fd07a). Native platform acceptance
+* remains a separate, currently pending fact. */
+declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
 //#endregion
-export { PROOF_MANIFEST_DOMAIN_V2 as $, proposeRebindV042 as $a, AssetObligation as $i, isDeterministicCheck as $n, legacyQuestionReadingIsInformational as $o, evaluateToolSurfaceCapability as $r, TargetHostGraph as $t, V4SessionLike as A, SourceSpan as Aa, certifyCheckpoint as Ai, commitTreeSnapshotDigest as An, QualificationStatus as Ao, ExecutableIdentity as Ar, isStatefulAction as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, createProjection as Ba, isInformationalMessage as Bi, ShellParseStatus as Bn, hasQuestionScope as Bo, HostCohortSelection as Br, normalizeClause as Bs, validateManifest as Bt, observeAssistantOutcome as C, GuardOperation as Ca, CONFIRM_LINE_PATTERN as Ci, GitEffectExecution as Cn, DirectiveClass as Co, ACTIVE_HOST_COHORT_ID as Cr, STOP_PROTOCOL_VERSION as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, NeedsReviewFact as Da, CheckpointResult as Di, GitTargetIdentity as Dn, InterpretOptions as Do, BASE_HOST_PACKAGES as Dr, StatefulAction as Ds, sessionQuery as Dt, v6TestPredicate as E, MessageCoverage as Ea, parseConfirmationMessage as Ei, GitPrestateEnvelope as En, GRANTED_QUALIFICATION as Eo, AuditedExecutable as Er, SemanticAction as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, TargetTuple as Fa, classifyClause as Fi, revalidateGitPrestate as Fn, clauseIsGoverned as Fo, HostAuditProvenance as Fr, semanticActionFromText as Fs, isVerifyingCapability as Ft, openItems as G, ReleaseSettlement as Ga, BoundaryRequest as Gi, goalCompletionDenial as Gn, isExecutableItem as Go, HostPlatform as Gr, LifecyclePhase as Gt, carriesCleanupCondition as H, ReleaseGateDecision as Ha, BOUNDARY_RECORD_PREFIX as Hi, isRunExecutable as Hn, interpretClause as Ho, HostLockContext as Hr, sanitizeUrl as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, TargetValue as Ia, environmentDefaultRepositoryTarget as Ii, verifiedLinearCommitReadback as In, clauseIsProtected as Io, HostCapabilityEvaluation as Ir, validateActionManifest as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, RebindArgs as Ja, availableBoundaryQualifications as Ji, ToolResultInput as Jn, isOpenObligation as Jo, bindExecutableIdentity as Jr, firstStepGuidanceV6 as Jt, recoveryDigest as K, BoundedSource as Ka, GoalActivationState as Ki, hasCurrentCertificate as Kn, isExplanationScope as Ko, HostProfileKind as Kr, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, VerificationContract as La, extractArtifactPaths as Li, CanonicalArgv as Ln, explanationHasActionResidue as Lo, HostCapabilityId as Lr, validateActionTarget as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, TargetCaptureStatus as Ma, ClauseSegment as Mi, executeRevalidatedGitEffect as Mn, actionVerbMatches as Mo, GOAL_HOST_PACKAGES as Mr, requestedTargetAuthorizesMutation as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, TargetSource as Na, captureClause as Ni, gitCommandMatchesTarget as Nn, clarifiedSpanOf as No, HOST_CAPABILITY_PACKAGE_GROUPS as Nr, requestedTargetMatchesResolved as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, NeedsReviewReason as Oa, RejectedBinding as Oi, LinearCommitReadback as On, LEGACY_QUALIFICATION as Oo, DEFAULT_HOST_LOCK as Or, actionCompatible as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, TargetSourceKind as Pa, captureItem as Pi, parseGitCommandManifest as Pn, clauseAsksOwnQuestion as Po, HOST_COHORTS as Pr, semanticActionFromCommand as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, proposeRebindOutcome as Qa, AssetInterpretationFact as Qi, extractToolSubject as Qn, kindOfScope as Qo, evaluateHostLock as Qr, HostProfileError as Qt, RecoveryOptions as R, WaitAuthorization as Ra, extractMethod as Ri, CanonicalCommandSurface as Rn, governedClauseRestrictsExecution as Ro, HostCapabilityRequest as Rr, canonicalizePath as Rs, ManifestIssue as Rt, latestRootInstruction as S, GuardItemStatus as Sa, classifyUserInteraction as Si, GitCommandRejected as Sn, AuthorityDisposition as So, rootLocatorFlavor as Sr, STATEFUL_ACTIONS as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, HostStatus as Ta, isFrozenV042RebindResponse as Ti, GitPrestateCheck as Tn, ExecutionQualification as To, ACTIVE_HOST_LAUNCHER_VERSION as Tr, SUPPORTED_EVIDENCE_ADAPTERS as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, ReleaseObservedIdentity as Ua, BoundaryEffectuation as Ui, parsePwshCommand as Un, interpretMessage as Uo, HostLockEvaluation as Ur, sha256 as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, PackageRow as Va, segmentClauses as Vi, canonicalArgvFromCommand as Vn, hasWorkPredicate as Vo, HostCohortSelectionReason as Vr, sanitizeClauseText as Vs, ClaimedMessage as Vt, closingHint as W, ReleaseOperation as Wa, BoundaryQualification as Wi, parseShellCommand as Wn, introducesActionClause as Wo, HostLockStatus as Wr, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, confirmRebind as Xa, isCurrentAcceptedBoundary as Xi, evidenceFromPersistedToolResult as Xn, isRestatement as Xo, evaluateExternalWaitCapability as Xr, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, RebindProposal as Ya, effectuateBoundary as Yi, ToolSubject as Yn, isQuestionScopeNeedingReview as Yo, bindLiveGoalCapability as Yr, lifecyclePhase as Yt, PROOF_KINDS as Z, proposeRebind as Za, qualifyBoundary as Zi, extractTextContent as Zn, itemHoldsExecutionAuthority as Zo, evaluateHostCapability as Zr, ActiveProfileHostLock as Zt, decideTurnStopping as _, GuardCheckpoint as _a, authorityCaptureCounts as _i, GIT_COMMAND_TEMPLATES as _n, capabilityConsequence as _o, PROTOCOL_V5_NOTICE as _r, ActionSpec as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, DeriveConfig as aa, MIN_SUPPORTED_HOST_VERSION as ai, combineHostPolicy as an, CapabilityRemedy as ao, TaskKind as ar, presentExplanationHead as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, GuardItem as ba, UserInteractionKind as bi, GitCommandManifest as bn, removalIsComplete as bo, deriveProjection as br, CERTIFICATE_VERSION_V2 as bs, proofDigestV2 as bt, CurrentActionBasis as c, DerivedEnvelope as ca, SUPPORTED_HOST_VERSIONS as ci, injectActiveProfileHostLock as cn, DependencyStatus as co, deriveItemDiagnosis as cr, reportingHeadGoverns as cs, ProofObligation as ct, TurnStoppingDecision as d, EvidenceParseStatus as da, parseHostVersion as di, packageRowsFromPnpmLock as dn, ProcessExitStatus as do, nativeFileTwoRole as dr, splitTextFragments as ds, SessionQuery as dt, BindingActionClosure as ea, hostVersionFromPackages as ei, activeRendererModule as en, rebindAttemptKey as eo, persistedToolResultStatus as er, maskCodeSpans as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, EvidenceRole as fa, satisfiesSupportedHostRange as fi, readActiveHostGraph as fn, ProcessFactSource as fo, relevantEvidence as fr, statefulActionsOfScope as fs, SessionQueryV2 as ft, decideTurnBoundary as g, GuardBoundary as ga, AuthorityKind as gi, GIT_COMMAND_MANIFEST_IDS as gn, admissibleForRemoval as go, PROTOCOL_V4_NOTICE as gr, ActionManifest as gs, createProofManifest as gt, currentActionBases as h, GoalRef as ha, AuthorityBlockKind as hi, verifyComposedHostLockDump as hn, actionHasCertificationPath as ho, PROTOCOL_V3_NOTICE as hr, ACTION_MANIFEST_VERSION as hs, canonicalProjection as ht, supersedeItem as i, DelegationRef as ia, LATEST_SUPPORTED_HOST_VERSION as ii, auditedHostImplementation as in, CapabilityGap as io, Repairability as ir, opensWithDirective as is, ProofKindCapability as it, snapshotSessionEvents as j, TargetCaptureReasonCode as ja, CaptureScope as ji, createGitPrestateEnvelope as jn, ScopeInterpretation as jo, ExecutableIdentityBinding as jr, requestedIdentityKey as js, EvidenceFacetCoverage as jt, SessionApiError as k, PersistenceAuthorization as ka, bindingIndividuallyAccepted as ki, commitIndexSnapshotDigest as kn, QualificationReason as ko, EXPECTED_HOST_PACKAGES as kr, boundedArtifactChoiceMatches as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, EvidenceBinding as la, compareHostVersions as li, inspectTargetHostGraph as ln, DerivedProcessFacts as lo, evidenceAvailabilityReason as lr, restatedContentOf as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, ExternalOperation as ma, AuthorityBlock as mi, resolveInstalledHostLock as mn, RemovalOutcomeReport as mo, DEFAULT_DELEGATION_TOOL_NAMES as mr, ACTION_MANIFEST as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, BoundaryQualificationKind as na, HostVersionDecision as ni, auditedDefaultWorkdirProvider as nn, replayRebindResult as no, CertificationSupport as nr, namedActions as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, DeriveResult as oa, ParsedHostVersion as oi, hostLockContextFromComposedDump as on, DEPENDENCY_FREE_ONLY_CONDITION as oo, UnifiedItemDiagnosis as or, qualificationOfClause as os, ProofManifest as ot, assessmentOutcomePredicate as p, ExpectedTransition as pa, currentContractDigest as pi, resolveActiveProfileHostLock as pn, ProcessOutcomeReason as po, CAPTURE_V042_NOTICE as pr, verbIsNegated as ps, bindProofToProjection as pt, recoveryTitle as q, ProposeOutcome as qa, GoalBoundaryAccess as qi, ToolCallInput as qn, isInformationalFragment as qo, HostToolSurface as qr, firstStepGuidance as qt, projectCoreV2 as r, DeferAuthorization as ra, HostVersionStatus as ri, auditedForegroundRenderers as rn, CapabilityFact as ro, DiagnosisNextAction as rr, opensConditionLead as rs, ProofKind as rt, CompletionDisposition as s, DeriveScope as sa, SUPPORTED_HOST_RANGE as si, hostLockRowsFromComposedDump as sn, DeclaredOperationResult as so, capabilityRemedyPhrase as sr, questionHeadsClause as ss, ProofManifestV2 as st, RC017_RC2_HOST_PACKAGES as t, BoundaryDisposition as ta, selectHostCohort as ti, auditedDefaultWorkdirHost as tn, rebindResponse as to, withDurability as tr, maskQuotedSpans as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, EvidenceOutcome as ua, evaluateMinimumHostVersion as ui, packageRowsFromActiveGraph as un, OperationAttribution as uo, itemDiagnosis as ur, semanticActionOfScope as us, ProofSurface as ut, decisionBoundaryKey as v, GuardEvidence as va, segmentAuthorityBlocks as vi, GitAdapterAction as vn, capabilityFactOf as vo, PROTOCOL_V6_NOTICE as vr, BOUNDED_ARTIFACT_TYPES as vs, proofCapabilityReport as vt, progressFingerprint as w, GuardProjection as wa, ParsedConfirmation as wi, GitEffectRunner as wn, Executee as wo, ACTIVE_HOST_COHORT_IDS as wr, STOP_PROTOCOL_VERSION_V2 as ws, proofV2Rejection as wt, latestAssistantText as x, GuardItemKind as xa, classifyTaskIntent as xi, GitCommandParseResult as xn, removalIsPartiallyKnown as xo, legacyRecordsNeedingReview as xr, SEMANTIC_ACTIONS as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, GuardIntegrity as ya, TaskIntent as yi, GitCommandAccepted as yn, partialFailureOf as yo, applyUpgradeEligibility as yr, CERTIFICATE_VERSION as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, WorkUnit as za, extractOperation as zi, ParsedShell as zn, hasOrderedCoordination as zo, HostCohort as zr, digestStrings as zs, OperationVerbEntry as zt };
+export { PROOF_MANIFEST_DOMAIN_V2 as $, TargetValue as $a, environmentDefaultRepositoryTarget as $i, CanonicalCommandSurface as $n, clauseIsProtected as $o, HostCapabilityRequest as $r, validateActionManifest as $s, HostProfileError as $t, V4SessionLike as A, ExpectedTransition as Aa, currentContractDigest as Ai, registryArchiveModules as An, ProcessOutcomeReason as Ao, PROTOCOL_V3_NOTICE as Ar, verbIsNegated as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, GuardOperation as Ba, CONFIRM_LINE_PATTERN as Bi, GitPrestateCheck as Bn, DirectiveClass as Bo, ACTIVE_HOST_LAUNCHER_VERSION as Br, STOP_PROTOCOL_VERSION as Bs, validateManifest as Bt, observeAssistantOutcome as C, DeriveResult as Ca, ParsedHostVersion as Ci, HostTrustError as Cn, DEPENDENCY_FREE_ONLY_CONDITION as Co, deriveItemDiagnosis as Cr, qualificationOfClause as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, EvidenceOutcome as Da, evaluateMinimumHostVersion as Di, parseHostTrust as Dn, OperationAttribution as Do, relevantEvidence as Dr, semanticActionOfScope as Ds, sessionQuery as Dt, v6TestPredicate as E, EvidenceBinding as Ea, compareHostVersions as Ei, hostTrustDigest as En, DerivedProcessFacts as Eo, nativeFileTwoRole as Er, restatedContentOf as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, GuardEvidence as Fa, segmentAuthorityBlocks as Fi, GitCommandManifest as Fn, capabilityFactOf as Fo, deriveProjection as Fr, BOUNDED_ARTIFACT_TYPES as Fs, isVerifyingCapability as Ft, openItems as G, NeedsReviewReason as Ga, RejectedBinding as Gi, commitTreeSnapshotDigest as Gn, LEGACY_QUALIFICATION as Go, ExecutableIdentity as Gr, actionCompatible as Gs, LifecyclePhase as Gt, carriesCleanupCondition as H, HostStatus as Ha, isFrozenV042RebindResponse as Hi, GitTargetIdentity as Hn, ExecutionQualification as Ho, BASE_HOST_PACKAGES as Hr, SUPPORTED_EVIDENCE_ADAPTERS as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, GuardIntegrity as Ia, TaskIntent as Ii, GitCommandParseResult as In, partialFailureOf as Io, legacyRecordsNeedingReview as Ir, CERTIFICATE_VERSION as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, TargetCaptureReasonCode as Ja, CaptureScope as Ji, gitCommandMatchesTarget as Jn, ScopeInterpretation as Jo, HOST_CAPABILITY_PACKAGE_GROUPS as Jr, requestedIdentityKey as Js, firstStepGuidanceV6 as Jt, recoveryDigest as K, PersistenceAuthorization as Ka, bindingIndividuallyAccepted as Ki, createGitPrestateEnvelope as Kn, QualificationReason as Ko, ExecutableIdentityBinding as Kr, boundedArtifactChoiceMatches as Ks, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, GuardItem as La, UserInteractionKind as Li, GitCommandRejected as Ln, removalIsComplete as Lo, rootLocatorFlavor as Lr, CERTIFICATE_VERSION_V2 as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, GoalRef as Ma, AuthorityBlockKind as Mi, GIT_COMMAND_TEMPLATES as Mn, actionHasCertificationPath as Mo, PROTOCOL_V5_NOTICE as Mr, ACTION_MANIFEST_VERSION as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, GuardBoundary as Na, AuthorityKind as Ni, GitAdapterAction as Nn, admissibleForRemoval as No, PROTOCOL_V6_NOTICE as Nr, ActionManifest as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, EvidenceParseStatus as Oa, parseHostVersion as Oi, qualifyHostTrust as On, ProcessExitStatus as Oo, CAPTURE_V042_NOTICE as Or, splitTextFragments as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, GuardCheckpoint as Pa, authorityCaptureCounts as Pi, GitCommandAccepted as Pn, capabilityConsequence as Po, applyUpgradeEligibility as Pr, ActionSpec as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, TargetTuple as Qa, classifyClause as Qi, CanonicalArgv as Qn, clauseIsGoverned as Qo, HostCapabilityId as Qr, semanticActionFromText as Qs, AuditedPackageExpectation as Qt, RecoveryOptions as R, GuardItemKind as Ra, classifyTaskIntent as Ri, GitEffectExecution as Rn, removalIsPartiallyKnown as Ro, ACTIVE_HOST_COHORT_ID as Rr, SEMANTIC_ACTIONS as Rs, ManifestIssue as Rt, latestRootInstruction as S, DeriveConfig as Sa, MIN_SUPPORTED_HOST_VERSION as Si, HostTrustAcquisitionOptions as Sn, CapabilityRemedy as So, capabilityRemedyPhrase as Sr, presentExplanationHead as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, DerivedEnvelope as Ta, SUPPORTED_HOST_VERSIONS as Ti, acquireHostTrust as Tn, DependencyStatus as To, itemDiagnosis as Tr, reportingHeadGoverns as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, MessageCoverage as Ua, parseConfirmationMessage as Ui, LinearCommitReadback as Un, GRANTED_QUALIFICATION as Uo, DEFAULT_HOST_LOCK as Ur, SemanticAction as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, GuardProjection as Va, ParsedConfirmation as Vi, GitPrestateEnvelope as Vn, Executee as Vo, AuditedExecutable as Vr, STOP_PROTOCOL_VERSION_V2 as Vs, ClaimedMessage as Vt, closingHint as W, NeedsReviewFact as Wa, CheckpointResult as Wi, commitIndexSnapshotDigest as Wn, InterpretOptions as Wo, EXPECTED_HOST_PACKAGES as Wr, StatefulAction as Ws, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, TargetSource as Xa, captureClause as Xi, revalidateGitPrestate as Xn, clarifiedSpanOf as Xo, HostAuditProvenance as Xr, requestedTargetMatchesResolved as Xs, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, TargetCaptureStatus as Ya, ClauseSegment as Yi, parseGitCommandManifest as Yn, actionVerbMatches as Yo, HOST_COHORTS as Yr, requestedTargetAuthorizesMutation as Ys, lifecyclePhase as Yt, PROOF_KINDS as Z, TargetSourceKind as Za, captureItem as Zi, verifiedLinearCommitReadback as Zn, clauseAsksOwnQuestion as Zo, HostCapabilityEvaluation as Zr, semanticActionFromCommand as Zs, ActiveProfileHostLock as Zt, decideTurnStopping as _, BindingActionClosure as _a, selectHostCohort as _i, readActiveHostGraph as _n, rebindAttemptKey as _o, CertificationSupport as _r, maskCodeSpans as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, BOUNDARY_RECORD_PREFIX as aa, sanitizeUrl as ac, HostLockStatus as ai, auditedHostImplementation as an, ReleaseGateDecision as ao, parseShellCommand as ar, interpretClause as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, DeferAuthorization as ba, HostVersionStatus as bi, verifyComposedHostLockDump as bn, CapabilityFact as bo, TaskKind as br, opensConditionLead as bs, proofDigestV2 as bt, CurrentActionBasis as c, BoundaryRequest as ca, HostToolSurface as ci, evaluateConfiguredHostLock as cn, ReleaseSettlement as co, ToolCallInput as cr, isExecutableItem as cs, ProofObligation as ct, TurnStoppingDecision as d, availableBoundaryQualifications as da, evaluateExternalWaitCapability as di, injectActiveProfileHostLock as dn, RebindArgs as do, evidenceFromPersistedToolResult as dr, isOpenObligation as ds, SessionQuery as dt, extractArtifactPaths as ea, validateActionTarget as ec, HostCohort as ei, TargetHostGraph as en, VerificationContract as eo, ParsedShell as er, explanationHasActionResidue as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, effectuateBoundary as fa, evaluateGraphDerivedHostLock as fi, inspectTargetHostGraph as fn, RebindProposal as fo, extractTextContent as fr, isQuestionScopeNeedingReview as fs, SessionQueryV2 as ft, decideTurnBoundary as g, AssetObligation as ga, hostVersionFromPackages as gi, prepareTargetHostTrust as gn, proposeRebindV042 as go, withDurability as gr, legacyQuestionReadingIsInformational as gs, createProofManifest as gt, currentActionBases as h, AssetInterpretationFact as ha, evaluateToolSurfaceCapability as hi, prepareActiveHostTrust as hn, proposeRebindOutcome as ho, persistedToolResultStatus as hr, kindOfScope as hs, canonicalProjection as ht, supersedeItem as i, segmentClauses as ia, sanitizeClauseText as ic, HostLockEvaluation as ii, auditedForegroundRenderers as in, PackageRow as io, parsePwshCommand as ir, hasWorkPredicate as is, ProofKindCapability as it, snapshotSessionEvents as j, ExternalOperation as ja, AuthorityBlock as ji, GIT_COMMAND_MANIFEST_IDS as jn, RemovalOutcomeReport as jo, PROTOCOL_V4_NOTICE as jr, ACTION_MANIFEST as js, EvidenceFacetCoverage as jt, SessionApiError as k, EvidenceRole as ka, satisfiesSupportedHostRange as ki, registryArchiveFiles as kn, ProcessFactSource as ko, DEFAULT_DELEGATION_TOOL_NAMES as kr, statefulActionsOfScope as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, GoalActivationState as la, bindExecutableIdentity as li, hostLockContextFromComposedDump as ln, BoundedSource as lo, ToolResultInput as lr, isExplanationScope as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, qualifyBoundary as ma, evaluateHostLock as mi, packageRowsFromPnpmLock as mn, proposeRebind as mo, isDeterministicCheck as mr, itemHoldsExecutionAuthority as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, extractOperation as na, digestStrings as nc, HostCohortSelectionReason as ni, auditedDefaultWorkdirHost as nn, WorkUnit as no, canonicalArgvFromCommand as nr, hasOrderedCoordination as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, BoundaryEffectuation as oa, sha256 as oc, HostPlatform as oi, combineHostPolicy as on, ReleaseObservedIdentity as oo, goalCompletionDenial as or, interpretMessage as os, ProofManifest as ot, assessmentOutcomePredicate as p, isCurrentAcceptedBoundary as pa, evaluateHostCapability as pi, packageRowsFromActiveGraph as pn, confirmRebind as po, extractToolSubject as pr, isRestatement as ps, bindProofToProjection as pt, recoveryTitle as q, SourceSpan as qa, certifyCheckpoint as qi, executeRevalidatedGitEffect as qn, QualificationStatus as qo, GOAL_HOST_PACKAGES as qr, isStatefulAction as qs, firstStepGuidance as qt, projectCoreV2 as r, isInformationalMessage as ra, normalizeClause as rc, HostLockContext as ri, auditedDefaultWorkdirProvider as rn, createProjection as ro, isRunExecutable as rr, hasQuestionScope as rs, ProofKind as rt, CompletionDisposition as s, BoundaryQualification as sa, HostProfileKind as si, evaluateActiveHostLock as sn, ReleaseOperation as so, hasCurrentCertificate as sr, introducesActionClause as ss, ProofManifestV2 as st, RC020_RC1_HOST_PACKAGES as t, extractMethod as ta, canonicalizePath as tc, HostCohortSelection as ti, activeRendererModule as tn, WaitAuthorization as to, ShellParseStatus as tr, governedClauseRestrictsExecution as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, GoalBoundaryAccess as ua, bindLiveGoalCapability as ui, hostLockRowsFromComposedDump as un, ProposeOutcome as uo, ToolSubject as ur, isInformationalFragment as us, ProofSurface as ut, decisionBoundaryKey as v, BoundaryDisposition as va, HOST_VALIDATED_VERSIONS as vi, resolveActiveProfileHostLock as vn, rebindResponse as vo, DiagnosisNextAction as vr, maskQuotedSpans as vs, proofCapabilityReport as vt, progressFingerprint as w, DeriveScope as wa, SUPPORTED_HOST_RANGE as wi, HostTrustedPackage as wn, DeclaredOperationResult as wo, evidenceAvailabilityReason as wr, questionHeadsClause as ws, proofV2Rejection as wt, latestAssistantText as x, DelegationRef as xa, LATEST_TESTED_HOST_VERSION as xi, HostRebindTrust as xn, CapabilityGap as xo, UnifiedItemDiagnosis as xr, opensWithDirective as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, BoundaryQualificationKind as ya, HostVersionDecision as yi, resolveInstalledHostLock as yn, replayRebindResult as yo, Repairability as yr, namedActions as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, GuardItemStatus as za, classifyUserInteraction as zi, GitEffectRunner as zn, AuthorityDisposition as zo, ACTIVE_HOST_COHORT_IDS as zr, STATEFUL_ACTIONS as zs, OperationVerbEntry as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as proposeRebindV042, $i as AssetObligation, $n as isDeterministicCheck, $o as legacyQuestionReadingIsInformational, $r as evaluateToolSurfaceCapability, $t as TargetHostGraph, A as V4SessionLike, Aa as SourceSpan, Ai as certifyCheckpoint, An as commitTreeSnapshotDigest, Ao as QualificationStatus, Ar as ExecutableIdentity, As as isStatefulAction, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as createProjection, Bi as isInformationalMessage, Bn as ShellParseStatus, Bo as hasQuestionScope, Br as HostCohortSelection, Bs as normalizeClause, Bt as validateManifest, C as observeAssistantOutcome, Ca as GuardOperation, Ci as CONFIRM_LINE_PATTERN, Cn as GitEffectExecution, Co as DirectiveClass, Cr as ACTIVE_HOST_COHORT_ID, Cs as STOP_PROTOCOL_VERSION, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as NeedsReviewFact, Di as CheckpointResult, Dn as GitTargetIdentity, Do as InterpretOptions, Dr as BASE_HOST_PACKAGES, Ds as StatefulAction, Dt as sessionQuery, E as v6TestPredicate, Ea as MessageCoverage, Ei as parseConfirmationMessage, En as GitPrestateEnvelope, Eo as GRANTED_QUALIFICATION, Er as AuditedExecutable, Es as SemanticAction, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as TargetTuple, Fi as classifyClause, Fn as revalidateGitPrestate, Fo as clauseIsGoverned, Fr as HostAuditProvenance, Fs as semanticActionFromText, Ft as isVerifyingCapability, G as openItems, Ga as ReleaseSettlement, Gi as BoundaryRequest, Gn as goalCompletionDenial, Go as isExecutableItem, Gr as HostPlatform, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as ReleaseGateDecision, Hi as BOUNDARY_RECORD_PREFIX, Hn as isRunExecutable, Ho as interpretClause, Hr as HostLockContext, Hs as sanitizeUrl, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as TargetValue, Ii as environmentDefaultRepositoryTarget, In as verifiedLinearCommitReadback, Io as clauseIsProtected, Ir as HostCapabilityEvaluation, Is as validateActionManifest, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as RebindArgs, Ji as availableBoundaryQualifications, Jn as ToolResultInput, Jo as isOpenObligation, Jr as bindExecutableIdentity, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as BoundedSource, Ki as GoalActivationState, Kn as hasCurrentCertificate, Ko as isExplanationScope, Kr as HostProfileKind, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as VerificationContract, Li as extractArtifactPaths, Ln as CanonicalArgv, Lo as explanationHasActionResidue, Lr as HostCapabilityId, Ls as validateActionTarget, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as TargetCaptureStatus, Mi as ClauseSegment, Mn as executeRevalidatedGitEffect, Mo as actionVerbMatches, Mr as GOAL_HOST_PACKAGES, Ms as requestedTargetAuthorizesMutation, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as TargetSource, Ni as captureClause, Nn as gitCommandMatchesTarget, No as clarifiedSpanOf, Nr as HOST_CAPABILITY_PACKAGE_GROUPS, Ns as requestedTargetMatchesResolved, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as NeedsReviewReason, Oi as RejectedBinding, On as LinearCommitReadback, Oo as LEGACY_QUALIFICATION, Or as DEFAULT_HOST_LOCK, Os as actionCompatible, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as TargetSourceKind, Pi as captureItem, Pn as parseGitCommandManifest, Po as clauseAsksOwnQuestion, Pr as HOST_COHORTS, Ps as semanticActionFromCommand, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as proposeRebindOutcome, Qi as AssetInterpretationFact, Qn as extractToolSubject, Qo as kindOfScope, Qr as evaluateHostLock, Qt as HostProfileError, R as RecoveryOptions, Ra as WaitAuthorization, Ri as extractMethod, Rn as CanonicalCommandSurface, Ro as governedClauseRestrictsExecution, Rr as HostCapabilityRequest, Rs as canonicalizePath, Rt as ManifestIssue, S as latestRootInstruction, Sa as GuardItemStatus, Si as classifyUserInteraction, Sn as GitCommandRejected, So as AuthorityDisposition, Sr as rootLocatorFlavor, Ss as STATEFUL_ACTIONS, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as HostStatus, Ti as isFrozenV042RebindResponse, Tn as GitPrestateCheck, To as ExecutionQualification, Tr as ACTIVE_HOST_LAUNCHER_VERSION, Ts as SUPPORTED_EVIDENCE_ADAPTERS, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as ReleaseObservedIdentity, Ui as BoundaryEffectuation, Un as parsePwshCommand, Uo as interpretMessage, Ur as HostLockEvaluation, Us as sha256, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as PackageRow, Vi as segmentClauses, Vn as canonicalArgvFromCommand, Vo as hasWorkPredicate, Vr as HostCohortSelectionReason, Vs as sanitizeClauseText, Vt as ClaimedMessage, W as closingHint, Wa as ReleaseOperation, Wi as BoundaryQualification, Wn as parseShellCommand, Wo as introducesActionClause, Wr as HostLockStatus, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as confirmRebind, Xi as isCurrentAcceptedBoundary, Xn as evidenceFromPersistedToolResult, Xo as isRestatement, Xr as evaluateExternalWaitCapability, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as RebindProposal, Yi as effectuateBoundary, Yn as ToolSubject, Yo as isQuestionScopeNeedingReview, Yr as bindLiveGoalCapability, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as proposeRebind, Zi as qualifyBoundary, Zn as extractTextContent, Zo as itemHoldsExecutionAuthority, Zr as evaluateHostCapability, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as GuardCheckpoint, _i as authorityCaptureCounts, _n as GIT_COMMAND_TEMPLATES, _o as capabilityConsequence, _r as PROTOCOL_V5_NOTICE, _s as ActionSpec, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as DeriveConfig, ai as MIN_SUPPORTED_HOST_VERSION, an as combineHostPolicy, ao as CapabilityRemedy, ar as TaskKind, as as presentExplanationHead, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as GuardItem, bi as UserInteractionKind, bn as GitCommandManifest, bo as removalIsComplete, br as deriveProjection, bs as CERTIFICATE_VERSION_V2, bt as proofDigestV2, c as CurrentActionBasis, ca as DerivedEnvelope, ci as SUPPORTED_HOST_VERSIONS, cn as injectActiveProfileHostLock, co as DependencyStatus, cr as deriveItemDiagnosis, cs as reportingHeadGoverns, ct as ProofObligation, d as TurnStoppingDecision, da as EvidenceParseStatus, di as parseHostVersion, dn as packageRowsFromPnpmLock, do as ProcessExitStatus, dr as nativeFileTwoRole, ds as splitTextFragments, dt as SessionQuery, ea as BindingActionClosure, ei as hostVersionFromPackages, en as activeRendererModule, eo as rebindAttemptKey, er as persistedToolResultStatus, es as maskCodeSpans, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as EvidenceRole, fi as satisfiesSupportedHostRange, fn as readActiveHostGraph, fo as ProcessFactSource, fr as relevantEvidence, fs as statefulActionsOfScope, ft as SessionQueryV2, g as decideTurnBoundary, ga as GuardBoundary, gi as AuthorityKind, gn as GIT_COMMAND_MANIFEST_IDS, go as admissibleForRemoval, gr as PROTOCOL_V4_NOTICE, gs as ActionManifest, gt as createProofManifest, h as currentActionBases, ha as GoalRef, hi as AuthorityBlockKind, hn as verifyComposedHostLockDump, ho as actionHasCertificationPath, hr as PROTOCOL_V3_NOTICE, hs as ACTION_MANIFEST_VERSION, ht as canonicalProjection, i as supersedeItem, ia as DelegationRef, ii as LATEST_SUPPORTED_HOST_VERSION, in as auditedHostImplementation, io as CapabilityGap, ir as Repairability, is as opensWithDirective, it as ProofKindCapability, j as snapshotSessionEvents, ja as TargetCaptureReasonCode, ji as CaptureScope, jn as createGitPrestateEnvelope, jo as ScopeInterpretation, jr as ExecutableIdentityBinding, js as requestedIdentityKey, jt as EvidenceFacetCoverage, k as SessionApiError, ka as PersistenceAuthorization, ki as bindingIndividuallyAccepted, kn as commitIndexSnapshotDigest, ko as QualificationReason, kr as EXPECTED_HOST_PACKAGES, ks as boundedArtifactChoiceMatches, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as EvidenceBinding, li as compareHostVersions, ln as inspectTargetHostGraph, lo as DerivedProcessFacts, lr as evidenceAvailabilityReason, ls as restatedContentOf, lt as ProofObligationV2, m as classifyCompletionClaim, ma as ExternalOperation, mi as AuthorityBlock, mn as resolveInstalledHostLock, mo as RemovalOutcomeReport, mr as DEFAULT_DELEGATION_TOOL_NAMES, ms as ACTION_MANIFEST, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as BoundaryQualificationKind, ni as HostVersionDecision, nn as auditedDefaultWorkdirProvider, no as replayRebindResult, nr as CertificationSupport, ns as namedActions, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as DeriveResult, oi as ParsedHostVersion, on as hostLockContextFromComposedDump, oo as DEPENDENCY_FREE_ONLY_CONDITION, or as UnifiedItemDiagnosis, os as qualificationOfClause, ot as ProofManifest, p as assessmentOutcomePredicate, pa as ExpectedTransition, pi as currentContractDigest, pn as resolveActiveProfileHostLock, po as ProcessOutcomeReason, pr as CAPTURE_V042_NOTICE, ps as verbIsNegated, pt as bindProofToProjection, q as recoveryTitle, qa as ProposeOutcome, qi as GoalBoundaryAccess, qn as ToolCallInput, qo as isInformationalFragment, qr as HostToolSurface, qt as firstStepGuidance, r as projectCoreV2, ra as DeferAuthorization, ri as HostVersionStatus, rn as auditedForegroundRenderers, ro as CapabilityFact, rr as DiagnosisNextAction, rs as opensConditionLead, rt as ProofKind, s as CompletionDisposition, sa as DeriveScope, si as SUPPORTED_HOST_RANGE, sn as hostLockRowsFromComposedDump, so as DeclaredOperationResult, sr as capabilityRemedyPhrase, ss as questionHeadsClause, st as ProofManifestV2, t as RC017_RC2_HOST_PACKAGES, ta as BoundaryDisposition, ti as selectHostCohort, tn as auditedDefaultWorkdirHost, to as rebindResponse, tr as withDurability, ts as maskQuotedSpans, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as EvidenceOutcome, ui as evaluateMinimumHostVersion, un as packageRowsFromActiveGraph, uo as OperationAttribution, ur as itemDiagnosis, us as semanticActionOfScope, ut as ProofSurface, v as decisionBoundaryKey, va as GuardEvidence, vi as segmentAuthorityBlocks, vn as GitAdapterAction, vo as capabilityFactOf, vr as PROTOCOL_V6_NOTICE, vs as BOUNDED_ARTIFACT_TYPES, vt as proofCapabilityReport, w as progressFingerprint, wa as GuardProjection, wi as ParsedConfirmation, wn as GitEffectRunner, wo as Executee, wr as ACTIVE_HOST_COHORT_IDS, ws as STOP_PROTOCOL_VERSION_V2, wt as proofV2Rejection, x as latestAssistantText, xa as GuardItemKind, xi as classifyTaskIntent, xn as GitCommandParseResult, xo as removalIsPartiallyKnown, xr as legacyRecordsNeedingReview, xs as SEMANTIC_ACTIONS, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as GuardIntegrity, yi as TaskIntent, yn as GitCommandAccepted, yo as partialFailureOf, yr as applyUpgradeEligibility, ys as CERTIFICATE_VERSION, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as WorkUnit, zi as extractOperation, zn as ParsedShell, zo as hasOrderedCoordination, zr as HostCohort, zs as digestStrings, zt as OperationVerbEntry } from "./index-DMr57AgL.js";
+import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as TargetValue, $i as environmentDefaultRepositoryTarget, $n as CanonicalCommandSurface, $o as clauseIsProtected, $r as HostCapabilityRequest, $s as validateActionManifest, $t as HostProfileError, A as V4SessionLike, Aa as ExpectedTransition, Ai as currentContractDigest, An as registryArchiveModules, Ao as ProcessOutcomeReason, Ar as PROTOCOL_V3_NOTICE, As as verbIsNegated, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as GuardOperation, Bi as CONFIRM_LINE_PATTERN, Bn as GitPrestateCheck, Bo as DirectiveClass, Br as ACTIVE_HOST_LAUNCHER_VERSION, Bs as STOP_PROTOCOL_VERSION, Bt as validateManifest, C as observeAssistantOutcome, Ca as DeriveResult, Ci as ParsedHostVersion, Cn as HostTrustError, Co as DEPENDENCY_FREE_ONLY_CONDITION, Cr as deriveItemDiagnosis, Cs as qualificationOfClause, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as EvidenceOutcome, Di as evaluateMinimumHostVersion, Dn as parseHostTrust, Do as OperationAttribution, Dr as relevantEvidence, Ds as semanticActionOfScope, Dt as sessionQuery, E as v6TestPredicate, Ea as EvidenceBinding, Ei as compareHostVersions, En as hostTrustDigest, Eo as DerivedProcessFacts, Er as nativeFileTwoRole, Es as restatedContentOf, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as GuardEvidence, Fi as segmentAuthorityBlocks, Fn as GitCommandManifest, Fo as capabilityFactOf, Fr as deriveProjection, Fs as BOUNDED_ARTIFACT_TYPES, Ft as isVerifyingCapability, G as openItems, Ga as NeedsReviewReason, Gi as RejectedBinding, Gn as commitTreeSnapshotDigest, Go as LEGACY_QUALIFICATION, Gr as ExecutableIdentity, Gs as actionCompatible, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as HostStatus, Hi as isFrozenV042RebindResponse, Hn as GitTargetIdentity, Ho as ExecutionQualification, Hr as BASE_HOST_PACKAGES, Hs as SUPPORTED_EVIDENCE_ADAPTERS, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as GuardIntegrity, Ii as TaskIntent, In as GitCommandParseResult, Io as partialFailureOf, Ir as legacyRecordsNeedingReview, Is as CERTIFICATE_VERSION, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as TargetCaptureReasonCode, Ji as CaptureScope, Jn as gitCommandMatchesTarget, Jo as ScopeInterpretation, Jr as HOST_CAPABILITY_PACKAGE_GROUPS, Js as requestedIdentityKey, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as PersistenceAuthorization, Ki as bindingIndividuallyAccepted, Kn as createGitPrestateEnvelope, Ko as QualificationReason, Kr as ExecutableIdentityBinding, Ks as boundedArtifactChoiceMatches, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as GuardItem, Li as UserInteractionKind, Ln as GitCommandRejected, Lo as removalIsComplete, Lr as rootLocatorFlavor, Ls as CERTIFICATE_VERSION_V2, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as GoalRef, Mi as AuthorityBlockKind, Mn as GIT_COMMAND_TEMPLATES, Mo as actionHasCertificationPath, Mr as PROTOCOL_V5_NOTICE, Ms as ACTION_MANIFEST_VERSION, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as GuardBoundary, Ni as AuthorityKind, Nn as GitAdapterAction, No as admissibleForRemoval, Nr as PROTOCOL_V6_NOTICE, Ns as ActionManifest, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as EvidenceParseStatus, Oi as parseHostVersion, On as qualifyHostTrust, Oo as ProcessExitStatus, Or as CAPTURE_V042_NOTICE, Os as splitTextFragments, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as GuardCheckpoint, Pi as authorityCaptureCounts, Pn as GitCommandAccepted, Po as capabilityConsequence, Pr as applyUpgradeEligibility, Ps as ActionSpec, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as TargetTuple, Qi as classifyClause, Qn as CanonicalArgv, Qo as clauseIsGoverned, Qr as HostCapabilityId, Qs as semanticActionFromText, Qt as AuditedPackageExpectation, R as RecoveryOptions, Ra as GuardItemKind, Ri as classifyTaskIntent, Rn as GitEffectExecution, Ro as removalIsPartiallyKnown, Rr as ACTIVE_HOST_COHORT_ID, Rs as SEMANTIC_ACTIONS, Rt as ManifestIssue, S as latestRootInstruction, Sa as DeriveConfig, Si as MIN_SUPPORTED_HOST_VERSION, Sn as HostTrustAcquisitionOptions, So as CapabilityRemedy, Sr as capabilityRemedyPhrase, Ss as presentExplanationHead, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as DerivedEnvelope, Ti as SUPPORTED_HOST_VERSIONS, Tn as acquireHostTrust, To as DependencyStatus, Tr as itemDiagnosis, Ts as reportingHeadGoverns, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as MessageCoverage, Ui as parseConfirmationMessage, Un as LinearCommitReadback, Uo as GRANTED_QUALIFICATION, Ur as DEFAULT_HOST_LOCK, Us as SemanticAction, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as GuardProjection, Vi as ParsedConfirmation, Vn as GitPrestateEnvelope, Vo as Executee, Vr as AuditedExecutable, Vs as STOP_PROTOCOL_VERSION_V2, Vt as ClaimedMessage, W as closingHint, Wa as NeedsReviewFact, Wi as CheckpointResult, Wn as commitIndexSnapshotDigest, Wo as InterpretOptions, Wr as EXPECTED_HOST_PACKAGES, Ws as StatefulAction, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as TargetSource, Xi as captureClause, Xn as revalidateGitPrestate, Xo as clarifiedSpanOf, Xr as HostAuditProvenance, Xs as requestedTargetMatchesResolved, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as TargetCaptureStatus, Yi as ClauseSegment, Yn as parseGitCommandManifest, Yo as actionVerbMatches, Yr as HOST_COHORTS, Ys as requestedTargetAuthorizesMutation, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as TargetSourceKind, Zi as captureItem, Zn as verifiedLinearCommitReadback, Zo as clauseAsksOwnQuestion, Zr as HostCapabilityEvaluation, Zs as semanticActionFromCommand, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as BindingActionClosure, _i as selectHostCohort, _n as readActiveHostGraph, _o as rebindAttemptKey, _r as CertificationSupport, _s as maskCodeSpans, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as BOUNDARY_RECORD_PREFIX, ac as sanitizeUrl, ai as HostLockStatus, an as auditedHostImplementation, ao as ReleaseGateDecision, ar as parseShellCommand, as as interpretClause, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as DeferAuthorization, bi as HostVersionStatus, bn as verifyComposedHostLockDump, bo as CapabilityFact, br as TaskKind, bs as opensConditionLead, bt as proofDigestV2, c as CurrentActionBasis, ca as BoundaryRequest, ci as HostToolSurface, cn as evaluateConfiguredHostLock, co as ReleaseSettlement, cr as ToolCallInput, cs as isExecutableItem, ct as ProofObligation, d as TurnStoppingDecision, da as availableBoundaryQualifications, di as evaluateExternalWaitCapability, dn as injectActiveProfileHostLock, do as RebindArgs, dr as evidenceFromPersistedToolResult, ds as isOpenObligation, dt as SessionQuery, ea as extractArtifactPaths, ec as validateActionTarget, ei as HostCohort, en as TargetHostGraph, eo as VerificationContract, er as ParsedShell, es as explanationHasActionResidue, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as effectuateBoundary, fi as evaluateGraphDerivedHostLock, fn as inspectTargetHostGraph, fo as RebindProposal, fr as extractTextContent, fs as isQuestionScopeNeedingReview, ft as SessionQueryV2, g as decideTurnBoundary, ga as AssetObligation, gi as hostVersionFromPackages, gn as prepareTargetHostTrust, go as proposeRebindV042, gr as withDurability, gs as legacyQuestionReadingIsInformational, gt as createProofManifest, h as currentActionBases, ha as AssetInterpretationFact, hi as evaluateToolSurfaceCapability, hn as prepareActiveHostTrust, ho as proposeRebindOutcome, hr as persistedToolResultStatus, hs as kindOfScope, ht as canonicalProjection, i as supersedeItem, ia as segmentClauses, ic as sanitizeClauseText, ii as HostLockEvaluation, in as auditedForegroundRenderers, io as PackageRow, ir as parsePwshCommand, is as hasWorkPredicate, it as ProofKindCapability, j as snapshotSessionEvents, ja as ExternalOperation, ji as AuthorityBlock, jn as GIT_COMMAND_MANIFEST_IDS, jo as RemovalOutcomeReport, jr as PROTOCOL_V4_NOTICE, js as ACTION_MANIFEST, jt as EvidenceFacetCoverage, k as SessionApiError, ka as EvidenceRole, ki as satisfiesSupportedHostRange, kn as registryArchiveFiles, ko as ProcessFactSource, kr as DEFAULT_DELEGATION_TOOL_NAMES, ks as statefulActionsOfScope, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as GoalActivationState, li as bindExecutableIdentity, ln as hostLockContextFromComposedDump, lo as BoundedSource, lr as ToolResultInput, ls as isExplanationScope, lt as ProofObligationV2, m as classifyCompletionClaim, ma as qualifyBoundary, mi as evaluateHostLock, mn as packageRowsFromPnpmLock, mo as proposeRebind, mr as isDeterministicCheck, ms as itemHoldsExecutionAuthority, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as extractOperation, nc as digestStrings, ni as HostCohortSelectionReason, nn as auditedDefaultWorkdirHost, no as WorkUnit, nr as canonicalArgvFromCommand, ns as hasOrderedCoordination, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as BoundaryEffectuation, oc as sha256, oi as HostPlatform, on as combineHostPolicy, oo as ReleaseObservedIdentity, or as goalCompletionDenial, os as interpretMessage, ot as ProofManifest, p as assessmentOutcomePredicate, pa as isCurrentAcceptedBoundary, pi as evaluateHostCapability, pn as packageRowsFromActiveGraph, po as confirmRebind, pr as extractToolSubject, ps as isRestatement, pt as bindProofToProjection, q as recoveryTitle, qa as SourceSpan, qi as certifyCheckpoint, qn as executeRevalidatedGitEffect, qo as QualificationStatus, qr as GOAL_HOST_PACKAGES, qs as isStatefulAction, qt as firstStepGuidance, r as projectCoreV2, ra as isInformationalMessage, rc as normalizeClause, ri as HostLockContext, rn as auditedDefaultWorkdirProvider, ro as createProjection, rr as isRunExecutable, rs as hasQuestionScope, rt as ProofKind, s as CompletionDisposition, sa as BoundaryQualification, si as HostProfileKind, sn as evaluateActiveHostLock, so as ReleaseOperation, sr as hasCurrentCertificate, ss as introducesActionClause, st as ProofManifestV2, t as RC020_RC1_HOST_PACKAGES, ta as extractMethod, tc as canonicalizePath, ti as HostCohortSelection, tn as activeRendererModule, to as WaitAuthorization, tr as ShellParseStatus, ts as governedClauseRestrictsExecution, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as GoalBoundaryAccess, ui as bindLiveGoalCapability, un as hostLockRowsFromComposedDump, uo as ProposeOutcome, ur as ToolSubject, us as isInformationalFragment, ut as ProofSurface, v as decisionBoundaryKey, va as BoundaryDisposition, vi as HOST_VALIDATED_VERSIONS, vn as resolveActiveProfileHostLock, vo as rebindResponse, vr as DiagnosisNextAction, vs as maskQuotedSpans, vt as proofCapabilityReport, w as progressFingerprint, wa as DeriveScope, wi as SUPPORTED_HOST_RANGE, wn as HostTrustedPackage, wo as DeclaredOperationResult, wr as evidenceAvailabilityReason, ws as questionHeadsClause, wt as proofV2Rejection, x as latestAssistantText, xa as DelegationRef, xi as LATEST_TESTED_HOST_VERSION, xn as HostRebindTrust, xo as CapabilityGap, xr as UnifiedItemDiagnosis, xs as opensWithDirective, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as BoundaryQualificationKind, yi as HostVersionDecision, yn as resolveInstalledHostLock, yo as replayRebindResult, yr as Repairability, ys as namedActions, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as GuardItemStatus, zi as classifyUserInteraction, zn as GitEffectRunner, zo as AuthorityDisposition, zr as ACTIVE_HOST_COHORT_IDS, zs as STATEFUL_ACTIONS, zt as OperationVerbEntry } from "./index-jKw6mANp.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -74,6 +74,13 @@ interface EvidenceToolRoots {
   * mutation authorization is the whole authority chain.
   */
   releaseGate?: (request: ReleaseGateToolRequest) => Promise<ReleaseGateDecision>;
+  /**
+  * The FINAL fresh host judgment of an action entry. Called after the
+  * effect's own last await and immediately before the effect starts, with no
+  * yield in between; `false` refuses the effect fail-closed. A pre-await
+  * audit can therefore never authorize a post-await effect.
+  */
+  preEffectVeto?: () => boolean;
   /** C10 settlement record, written after the effect from a trusted readback. */
   releaseSettle?: (request: ReleaseSettlementToolRequest) => Promise<void>;
 }
@@ -128,6 +135,7 @@ declare const Config: z<{
   hostLockPolicy?: string;
   hostLockRuntimeRoot?: string;
   hostLockProfileRoot?: string;
+  hostLockTrust?: string;
 }>;
 //#endregion
 //#region src/runtime.d.ts
@@ -143,6 +151,8 @@ declare const inject: readonly ["sessions", "commands", "fs"];
 interface RuntimeExecutorSeams {
   commandRunner?: EvidenceToolRoots["commandRunner"];
   fetcher?: EvidenceToolRoots["fetcher"];
+  /** Isolated acceptance override for the executable-identity reader. */
+  readExecutableIdentity?: EvidenceToolRoots["readExecutableIdentity"];
   allowLoopbackHttpRegistry?: boolean;
   /**
   * Pin the audited host cohort instead of reading a live profile graph. An
@@ -156,6 +166,14 @@ interface RuntimeExecutorSeams {
   hostLock?: HostLockEvaluation;
   /** Isolated acceptance override for the provider-invisible durable ledger. */
   privateLedgerRoot?: string;
+  /**
+  * Invoked once per full host-lock validation the runtime actually performs —
+  * the attach-time validation and every security-sensitive entry's fresh
+  * validation. It observes; it never replaces the audit. Production callers
+  * omit it, so deterministic tests and acceptance harnesses can count full
+  * validations without instrumenting the filesystem.
+  */
+  onHostLockValidation?: () => void;
 }
 declare function apply(ctx: Context, rawConfig?: {
   activation?: unknown;
@@ -165,6 +183,7 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockPolicy?: unknown;
   hostLockRuntimeRoot?: unknown;
   hostLockProfileRoot?: unknown;
+  hostLockTrust?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
 //#region src/raw-replay.d.ts
@@ -182,4 +201,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostStatus, HostToolSurface, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_SUPPORTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC017_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateExternalWaitCapability, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };