dsh-completion-guard 0.8.0 → 0.8.2

package/dist/{index-DMr57AgL.d.ts → index-DqvBEsNc.d.ts}

@@ -1,3 +1,5 @@
+import { Stats } from "node:fs";
+
 //#region src/domain/canonicalize.d.ts
 declare function normalizeClause(text: string): string;
 /**
@@ -1727,11 +1729,26 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Exact host identity; version ordering is diagnostic only. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
-declare const LATEST_SUPPORTED_HOST_VERSION = "0.1.7-rc.2";
-declare const SUPPORTED_HOST_VERSIONS: readonly string[];
+/** Version admission floor. Since 0.8.2 the public DSH support range is
+* `>=0.2.0-rc.2` with NO implied upper bound: every host version at or above
+* this floor (including later RCs on any tuple, stable and future releases)
+* passes VERSION ADMISSION. The floor only rises when a future Guard release
+* actively adopts a newer DSH; the runtime never raises it from a remote
+* `latest`. Ordering is strict SemVer with prerelease comparison and build
+* metadata ignored. Version admission is one gate of several — it never
+* claims native validation of a not-yet-tested host, and the graph/byte/
+* contract audits below still run on every admission. */
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.2";
 declare const SUPPORTED_HOST_RANGE: string;
+/** Versions with recorded first-hand host evidence. This is an EVIDENCE
+* ledger, NOT an admission whitelist: a missing row never refuses a
+* version-above-floor host. rc.1 keeps its historical row after the floor
+* moved to rc.2; the row records past evidence, not current admission. */
+declare const HOST_VALIDATED_VERSIONS: readonly string[];
+/** Historical alias retained for evidence-list readers; the admission rule is
+* the floor above, never this list. */
+declare const SUPPORTED_HOST_VERSIONS: readonly string[];
+declare const LATEST_TESTED_HOST_VERSION: string;
 interface ParsedHostVersion {
   major: number;
   minor: number;
@@ -1746,29 +1763,40 @@ declare function parseHostVersion(value: string): ParsedHostVersion | undefined;
 * unparseable host version fails closed rather than sorting as "newer".
 */
 declare function compareHostVersions(a: string, b: string): number | undefined;
-type HostVersionStatus = "supported" | "below_minimum" | "unparseable" | "unregistered";
+type HostVersionStatus = "supported" | "below_minimum" | "unparseable";
 interface HostVersionDecision {
   status: HostVersionStatus;
   version: string;
   minimum: string;
-  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable" | "host_version_unregistered";
+  reasonCode: "host_version_supported" | "host_version_below_minimum" | "host_version_unparseable";
 }
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
-/** Whether npm's exact public support union admits this host version. */
+/** Version admission: at or above the floor by strict SemVer precedence
+* (prerelease-aware; build metadata ignored). `0.2.0-rc.1` and the whole
+* `0.1.7.x` line stay below the floor; `0.2.0-rc.2`, `0.2.0`,
+* later patch/minor RCs and releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
 //#region src/domain/host-lock.d.ts
 type HostLockStatus = "supported" | "unsupported" | "unavailable";
 type HostPlatform = "posix" | "windows";
-type HostProfileKind = "headless" | "web";
+/**
+* Host profile identity. `headless` and `web` are the explicitly managed CLI
+* runtime profiles. `desktop` is the official Desktop app's own profile
+* (name `dsh-profile-desktop`): its graph lives in the signed app bundle and
+* is evaluated through the dedicated Desktop adapter, never by the Web
+* bundle/market inference — a Desktop profile bundles the Web app too, so
+* bundle presence alone misidentifies it.
+*/
+type HostProfileKind = "headless" | "web" | "desktop";
 /**
 * How a cohort's package rows were established. Bound into every host-lock
 * digest through the `host_audit_provenance` capability row, so a certificate
 * records whether the exact graph it used was loaded on a native host or only
 * resolved from the registry.
 */
-type HostAuditProvenance = "native-audited" | "registry-derived-pending-native-audit";
+type HostAuditProvenance = "native-audited" | "registry-derived-pending-native-audit" | "graph-derived-rebind-pending-native-audit";
 interface HostCohort {
   /** Stable cohort identity; bound into every hostLockDigest via `host_cohort`. */
   id: string;
@@ -1793,7 +1821,7 @@ interface HostCohort {
   capabilities: CapabilityRow[];
 }
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.1.7-rc.2";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.2";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 /** Core-lock/v1 separates optional market identity from the rc.2 critical
 * graph. Historical cohorts live only in test data. Version ordering cannot
@@ -1802,7 +1830,7 @@ declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.1.7-rc.2). The cohort
+* Baseline fixture package identities (DSH 0.2.0-rc.2). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -1830,11 +1858,14 @@ interface HostCapabilityEvaluation {
 interface HostLockEvaluation {
   status: HostLockStatus;
   digest: string;
+  /** Qualified graph descriptor retained by capability consumers. */
+  derivedCohort?: HostCohort;
   /** Read-only byte attestation of the active foreground shell renderer and
   * its shared terminal decoder. Set only by production active-graph readback;
   * the package version/SRI graph alone does not establish renderer behavior. */
   auditedForegroundRenderers?: Array<"bash" | "pwsh">;
   goalAvailable: boolean;
+  goalQualificationFailure?: "host_contract_goal_qualification_required";
   reasonCode?: "host_lock_migration_required" | "host_lock_installed_graph_drift" | "host_lock_missing" | "host_lock_version_mismatch" | "host_lock_version_below_minimum" | "host_lock_version_unparseable" | "host_lock_integrity_mismatch" | "host_lock_unknown_package" | "host_lock_duplicate_package" | "host_lock_goal_graph_incomplete" | "host_lock_goal_capability_mismatch" | "host_lock_cohort_mixed_graph" | "host_lock_cohort_unbound_identity" | "host_lock_cohort_platform_not_audited";
   packages: PackageRow[];
   capabilities: Record<HostCapabilityId, HostCapabilityEvaluation>;
@@ -1870,6 +1901,8 @@ interface HostLockContext {
   * it leaves the version question unanswered rather than assumed supported.
   */
   hostVersion?: string;
+  /** Trusted registry expectations, bound separately from version admission. */
+  trustDigest?: string;
 }
 /**
 * The host version a package graph records, for the version-policy decision.
@@ -1907,6 +1940,10 @@ interface HostCohortSelection {
 * consistently.
 */
 declare function selectHostCohort(rows: readonly PackageRow[], platform?: HostPlatform): HostCohortSelection;
+/** Evaluate a qualified graph against trusted registry identities. The callback
+* must authenticate rows against acquired published identities, not local YAML
+* alone. Production adds the byte/route audit and the adapter qualification. */
+declare function evaluateGraphDerivedHostLock(rows: readonly PackageRow[], context?: HostLockContext, verifyLockfileSri?: (row: PackageRow) => boolean): HostLockEvaluation;
 declare function evaluateHostLock(rows: readonly PackageRow[], context?: HostLockContext): HostLockEvaluation;
 interface HostCapabilityRequest {
   action: SemanticAction;
@@ -2356,6 +2393,232 @@ declare function revalidateGitPrestate(resolved: GitPrestateEnvelope, manifest:
 /** Execute the exact resolved argv only after the mandatory live recheck. */
 declare function executeRevalidatedGitEffect(resolved: GitPrestateEnvelope, manifest: GitCommandManifest, target: GitTargetIdentity, currentStateTuple: Readonly<Record<string, string | Uint8Array>>, runner: GitEffectRunner): Promise<GitEffectExecution>;
 //#endregion
+//#region src/domain/host-audit-session.d.ts
+/**
+* Memo table for ONE bounded host-lock validation operation.
+*
+* A full validation re-reads the same real paths, manifests, search paths and
+* export targets from several cooperating audits. Resolution results are
+* reused strictly inside this operation: the table lives and dies with one
+* audit call, is never shared across entries, and is never a substitute for
+* revalidation — a later entry always performs its own fresh reads. There are
+* deliberately no timestamps, mtimes, sizes or cross-call caches here.
+*
+* Every byte read funnels through ONE memo (`read:`): the raw file bytes are
+* read from disk exactly once per path per operation, and JSON parsing and
+* digesting both consume those shared bytes.
+*/
+interface HostAuditSession {
+  /** Memoized `realpathSync`; identical inputs return the identical result. */
+  realpath(path: string): string;
+  /** Memoized `existsSync`, including the negative result. */
+  exists(path: string): boolean;
+  /** Memoized `statSync`. */
+  stat(path: string): Stats;
+  /** Memoized raw file bytes — the single physical-read channel. */
+  readFile(path: string): Buffer;
+  /** Memoized `JSON.parse` of an object file over the shared bytes; parse errors propagate. */
+  readJson(path: string): Record<string, unknown>;
+  /** Memoized SHA-256 over the shared bytes. */
+  fileDigest(path: string): string;
+  /** Memoized directory listing (names + kinds) for audit enumeration. */
+  listDir?(dir: string): Array<{
+    name: string;
+    isFile: boolean;
+    isDirectory: boolean;
+  }>;
+  /** Memoized `createRequire` for one importer path. */
+  requireFor(importer: string): NodeRequire;
+  /** Memoized `require.resolve.paths(name)` for one importer. */
+  resolvePaths(importer: string, name: string): readonly string[];
+  /** Memoized `require.resolve(request)` for one importer. */
+  requireResolve(importer: string, request: string): string;
+  /** Generic operation-scoped memo for derived structures (parsed graphs, indexes). */
+  memo<T>(key: string, compute: () => T): T;
+}
+//#endregion
+//#region src/domain/host-dependency-audit.d.ts
+interface DependencyAuditGraph {
+  modules: string;
+  records: Record<string, {
+    url?: unknown;
+    dependencies?: unknown;
+  }>;
+  reachable: Set<string>;
+  packages: Map<string, {
+    root: string;
+    manifest: Record<string, unknown>;
+    files: string[];
+    independentLanes?: boolean;
+  }>;
+}
+//#endregion
+//#region src/domain/host-contract-probe.d.ts
+declare const HOST_CONTRACT_SCHEMA: "guard-host-contract/v2";
+//#endregion
+//#region src/domain/host-trust.d.ts
+interface HostTrustedPackage extends PackageRow {
+  version: string;
+  integrity: string;
+  modules: Record<string, string>;
+}
+/** Operator-owned output of registry acquisition, never package self-report. */
+interface HostRebindTrust {
+  schema: "dsh-host-registry-trust/v1";
+  source: "https://registry.npmjs.org/";
+  qualification: "guard-host-contract/v2";
+  packages: HostTrustedPackage[];
+  probeDependencies?: HostTrustedPackage[];
+  contract: {
+    schema: typeof HOST_CONTRACT_SCHEMA;
+    receiptDigest: string;
+    bindingDigest: string;
+    conditionsDigest: string;
+  };
+  /** Recomputed qualification, not caller-reported compatibility. */
+  unqualifiedOptionalPackages?: string[];
+}
+declare class HostTrustError extends Error {
+  readonly code: string;
+  constructor(code: string);
+}
+/** Validate generator-issued operator-owned authority. The descriptor cannot
+* assert compatibility: changed bytes require the independently issued cache
+* receipt, whose complete byte graph and startup conditions are bound. */
+declare function qualifyHostTrust(value: unknown, profileRoot?: string): HostRebindTrust;
+declare function parseHostTrust(text: string, profileRoot?: string): HostRebindTrust;
+declare function hostTrustDigest(trust: HostRebindTrust): string;
+/** Closed-world regular-file tar projection. Never extract or execute archives. */
+declare function registryArchiveFiles(bytes: Buffer, row: PackageRow): Record<string, Buffer>;
+declare function registryArchiveModules(bytes: Buffer, row: PackageRow): Record<string, string>;
+/** Fetch exact public registry identity at trusted inspect/rebind time.
+* Lockfile integrity is compared with HTTPS registry metadata AND archive bytes.
+* The production origin is fixed; tests can inject a fetch transport. */
+interface HostTrustAcquisitionOptions {
+  profileRoot: string;
+  dependencyIdentity?: (name: string, importer: string) => PackageRow;
+}
+declare function acquireHostTrust(rows: readonly PackageRow[], fetcher?: typeof fetch, options?: HostTrustAcquisitionOptions): Promise<HostRebindTrust>;
+//#endregion
+//#region src/domain/host-desktop.d.ts
+/**
+* Official Desktop adapter (CG-RC2-002).
+*
+* The Desktop app is the only authority for the `desktop` profile: its
+* `package.json` is named `dsh-profile-desktop`, its dependency graph lives
+* inside the signed `app.asar` of the installation, and there is no pnpm
+* package map or lockfile to read. This adapter therefore reads the official
+* graph IN PLACE from the asar container — it never unpacks the bundle and
+* never fabricates a map. The identities the manifest declares are qualified
+* through the same registry acquisition and host-contract probe as a CLI
+* graph rebind (`acquireDesktopHostTrust`), and the actually installed bytes
+* are verified file-by-file from the asar against that qualification
+* (`auditDesktopInstalledImplementation`). Every mismatch fails closed.
+*
+* The asar container format is a flat archive: a JSON header (with per-file
+* offsets) followed by the file bytes. Reading a file means header lookup +
+* one bounded positioned read, so an audited file set costs no more I/O than
+* reading the same files from a directory, and a tampered byte changes its
+* digest exactly as on disk.
+*/
+declare const DESKTOP_PROFILE_PACKAGE_NAME = "dsh-profile-desktop";
+declare const DESKTOP_RUNTIME_PACKAGE_NAME = "@deepseek-ai/dsh-desktop-runtime";
+interface AsarNode {
+  files?: Record<string, AsarNode>;
+  size?: number;
+  offset?: string;
+  unpacked?: boolean;
+  integrity?: unknown;
+}
+interface AsarIndex {
+  dataOffset: number;
+  root: AsarNode;
+  headerSha256: string;
+  fileCount: number;
+}
+/** Read the asar header (the JSON index) without extracting any payload. */
+declare function readAsarIndex(archivePath: string): AsarIndex;
+/**
+* Read one file's exact bytes from the asar in place. Unpacked entries are
+* read from the sibling `app.asar.unpacked` tree, which is where the app
+* itself loads them; a path that escapes that tree fails closed.
+*/
+declare function readAsarFile(archivePath: string, index: AsarIndex, entryPath: string): Buffer;
+interface DesktopAppRuntime {
+  /** Absolute path of the app bundle archive the rows were read from. */
+  asarRealpath: string;
+  headerSha256: string;
+  manifestSha256: string;
+  metadataSha256: string;
+  /** DSH host version the official runtime manifest pins for `@deepseek-ai/dsh`. */
+  hostVersion: string;
+  /** Version of the `@deepseek-ai/dsh-desktop-runtime` private manifest. */
+  runtimeVersion: string;
+  metadata: {
+    desktopVersion: string;
+    platform: string;
+    arch: string;
+    node: string;
+    pnpm: string;
+    /** Count of the official per-file digest table entries bound by the metadata hash. */
+    fileTableEntries: number;
+  };
+  /** Version-only rows for the critical names the official manifest declares. */
+  rows: PackageRow[];
+}
+/**
+* Read the official Desktop runtime graph from the app bundle. `appAsarPath`
+* is the absolute path of `app.asar` (a file, not a directory). The runtime
+* identity binds: the asar header itself, the `@deepseek-ai/dsh-desktop-runtime`
+* manifest, the `desktop-runtime.json` metadata block, and the official CLI
+* carrier entry the app installs.
+*/
+declare function readDesktopAppRuntime(appAsarPath: string): DesktopAppRuntime;
+interface DesktopTargetGraph {
+  packages: PackageRow[];
+  profileGraph: {
+    state: "dependency_free_desktop";
+    manifestSha256: string;
+    bundles: string[];
+  };
+  runtime: DesktopAppRuntime;
+}
+/** Importer state selects the active audit; its presence grants no trust. */
+declare function hasDesktopImporterState(profileRoot: string): boolean;
+/**
+* Pre-install inspection of a Desktop target: the profile must be the
+* Desktop-owned dependency-free profile, and the runtime half must come from
+* the official app bundle. Structural discovery grants no authority — the
+* caller must still qualify and byte-audit before any install decision.
+*/
+declare function readDesktopTargetGraph(appAsarPath: string, profileRoot: string): DesktopTargetGraph;
+/**
+* Verify the actually installed app bytes against the acquired qualification.
+* Each critical package's closed module inventory (every `.cm?js|json` file
+* under its asar root plus its manifest) is digested from the asar in place
+* and compared with the trust rows; any extra, missing, or changed file fails
+* closed. A critical package that also appears NESTED anywhere in the app
+* graph is an ambiguity no adapter resolves, so its presence fails closed
+* before any digest is computed.
+*/
+declare function auditDesktopInstalledImplementation(appAsarPath: string, expectations: readonly AuditedPackageExpectation[]): boolean;
+/** Persist the app-bundle identity next to the profile contract receipts so a
+* native annex can bind its readback to the exact inspected bundle. */
+declare function writeDesktopRuntimeReceipt(profileRoot: string, runtime: DesktopAppRuntime): string;
+declare const DESKTOP_IDENTITY_FACTS: Readonly<{
+  profilePackageName: typeof DESKTOP_PROFILE_PACKAGE_NAME;
+  runtimePackageName: typeof DESKTOP_RUNTIME_PACKAGE_NAME;
+  carrierEntry: string;
+}>;
+/**
+* Resolve one dependency's exact installed identity from the official app
+* graph by its top-level manifest. Used by the host-contract probe's
+* dependency acquisition; a name with no top-level manifest is unbound (the
+* installed-byte audit separately refuses nested critical duplicates, so a
+* nested-only dependency can never be silently resolved here).
+*/
+declare function readDesktopDependency(appAsarPath: string, name: string): PackageRow;
+//#endregion
 //#region src/domain/host-resolver.d.ts
 declare class HostProfileError extends Error {
   readonly code: string;
@@ -2386,7 +2649,7 @@ declare function resolveInstalledHostLock(moduleUrl?: string): HostLockEvaluatio
 * two reachable peer variants of a critical package remain a duplicate and
 * are returned twice so evaluateHostLock can fail closed with a bounded code.
 */
-declare function packageRowsFromActiveGraph(packageMapText: string, lockText: string, nodeModulesRoot?: string): PackageRow[];
+declare function packageRowsFromActiveGraph(packageMapText: string, lockText: string, nodeModulesRoot?: string, providedSession?: HostAuditSession): PackageRow[];
 interface ActiveProfileHostLock {
   evaluation: HostLockEvaluation;
   runtimeRoot: string;
@@ -2394,32 +2657,52 @@ interface ActiveProfileHostLock {
   pluginVersion: string;
   platform: HostPlatform;
   profileKind: HostProfileKind;
+  trust?: HostRebindTrust;
 }
 /** Read exact reachable critical rows without requiring Guard installation.
 * Used by target preflight before a legacy profile can be migrated.
 */
-declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string): PackageRow[];
+declare function readActiveHostGraph(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession): PackageRow[];
+/** Version/identity evaluation of operator-owned registry expectations. */
+declare function evaluateConfiguredHostLock(rows: readonly PackageRow[], context: HostLockContext, trustText?: string, profileRoot?: string): HostLockEvaluation;
+/** Complete production composition; no graph-only result grants authority. */
+declare function evaluateActiveHostLock(runtime: string, profile: string, context: HostLockContext, session?: HostAuditSession, trustText?: string): HostLockEvaluation;
+/** Trusted acquisition only; consumers never use local SRI as provenance. */
+declare function prepareActiveHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Verify published executable bytes at the reachable runtime/profile roots.
 * Registry SRI and installed manifests alone cannot authenticate loaded code.
 * Missing, duplicate, escaped or modified modules never pass this audit.
+*
+* All filesystem resolution within one call is memoized through a single
+* {@link HostAuditSession}; callers may thread one in to share the parsed
+* graphs and digests with the other audits of the same validation operation.
 */
-declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string): boolean;
-declare function activeRendererModule(nodeModulesRoot: string, name: string): {
+interface AuditedPackageExpectation {
+  name: string;
+  version?: string;
+  /** Required published per-file digests; absence never authenticates bytes. */
+  modules?: Record<string, string>;
+}
+/** Byte and dual-lane route audit over both graphs. Expectations are either
+* the published baseline or operator-owned, registry-acquired qualified module
+* digests. A missing digest set never authenticates unknown implementation. */
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[], installationGraph?: DependencyAuditGraph, profileInstallationGraph?: DependencyAuditGraph): boolean;
+declare function activeRendererModule(nodeModulesRoot: string, name: string, providedSession?: HostAuditSession): {
   bytes: string;
   path: string;
 } | undefined;
 /** Verify active, reachable producer bytes without reading credentials or
 * accepting historical package-map entries. Missing/ambiguous paths fail
 * closed for the ordinary markerless-test shortcut. */
-declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string): Array<"bash" | "pwsh">;
+declare function auditedForegroundRenderers(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession): Array<"bash" | "pwsh">;
 /** Exact active implementation route for call-time omitted-workdir evidence. */
-declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh"): boolean;
+declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", providedSession?: HostAuditSession): boolean;
 /**
 * The active graph alone does not prove which shell service this Agent uses.
 * Match the scoped service's exact constructor to the audited active module,
 * rejecting another provider with the same public service interface/name.
 */
-declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown): Promise<boolean>;
+declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown, providedSession?: HostAuditSession): Promise<boolean>;
 interface TargetHostGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -2428,14 +2711,37 @@ interface TargetHostGraph {
     bundles?: PackageRow[];
   };
 }
-/**
-* Pre-install inspection only. A fresh rc.1 Headless profile can use its two
-* installation-owned bundles without a private importer. Never extend this
-* absence rule to inject or runtime replay, which still call the strict reader.
-*/
-declare function inspectTargetHostGraph(runtimeRoot: string, profileRoot: string): TargetHostGraph;
+/** The pre-install path consumes the same qualified identities and byte/route
+* audit as active-profile entries; structural discovery grants no authority. */
+declare function inspectTargetHostGraph(runtime: string, profile: string, trust?: HostRebindTrust): TargetHostGraph;
+declare function prepareTargetHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Read and validate the actual runtime graph plus the installed profile plugin. */
-declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string): ActiveProfileHostLock;
+declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
+/** Complete Desktop composition: the official app bundle is the runtime half,
+* the Desktop-managed profile is the profile half. No structural discovery
+* grants authority — the installed asar bytes are verified against the same
+* qualification chain a CLI graph rebind uses. */
+declare function resolveDesktopProfileHostLock(appAsarPath: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
+/** Desktop pre-install inspection: the Desktop-owned dependency-free profile
+* plus the official app bundle, evaluated and byte-audited like any target. */
+declare function inspectDesktopTargetGraph(appAsarPath: string, profileRoot: string, trust?: HostRebindTrust): {
+  packages: PackageRow[];
+  runtime: DesktopAppRuntime;
+  profileGraph: {
+    state: "dependency_free_desktop";
+    manifestSha256: string;
+    bundles: string[];
+  };
+};
+/** Fresh runtime readback for an injected desktop lock: the same evaluation
+* chain the inject path used, so the digest the runtime compares against its
+* injected expectation is computed identically. */
+declare function revalidateDesktopCoreLock(appAsarPath: string, profileRoot: string, expected: HostLockEvaluation, trustText?: string): HostLockEvaluation;
+/** Registry acquisition for the Desktop graph: the app manifest pins exact
+* versions; the INTEGRITY comes from the registry metadata for exactly that
+* name@version, and the archive bytes are verified by the same acquisition
+* and host-contract probe a CLI rebind uses. */
+declare function prepareDesktopHostTrust(appAsarPath: string, profileRoot: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Atomically inject a repeatable managed patch into the selected profile only. */
 declare function injectActiveProfileHostLock(input: ActiveProfileHostLock): string;
 /** Extract the bounded host tuple from DSH's composed YAML dump. */
@@ -3029,9 +3335,19 @@ declare function projectCoreV2(snapshot: Row): Row;
 //#region src/core-v2/session.d.ts
 declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: GuardProjection, displayOrigins?: NonNullable<GuardProjection["coreV2RequirementOrigins"]>): Record<string, unknown> | undefined;
 //#endregion
-//#region src/domain/rc017-rc2-host.d.ts
+//#region src/domain/rc020-rc1-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.0-rc.1 tarballs (upstream
+* 4878cdabd87d4041bdaff61d04c966883b9fd07a). Native platform acceptance
+* remains a separate, currently pending fact. */
+declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
+//#endregion
+//#region src/domain/rc020-rc2-host.d.ts
 /** One source for verified registry identities and published executable bytes.
-* Native platform acceptance remains a separate, currently pending fact. */
-declare const RC017_RC2_HOST_PACKAGES: PackageRow[];
+* Bound to the published dsh-v0.2.0-rc.2 tarballs (upstream
+* 639ed015397290b3745d163aafe02ffee4aa3f84). Native platform acceptance
+* remains a separate, currently pending fact. The rc.1 rows remain available
+* in `rc020-rc1-host.ts` as historical evidence. */
+declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
 //#endregion
-export { PROOF_MANIFEST_DOMAIN_V2 as $, proposeRebindV042 as $a, AssetObligation as $i, isDeterministicCheck as $n, legacyQuestionReadingIsInformational as $o, evaluateToolSurfaceCapability as $r, TargetHostGraph as $t, V4SessionLike as A, SourceSpan as Aa, certifyCheckpoint as Ai, commitTreeSnapshotDigest as An, QualificationStatus as Ao, ExecutableIdentity as Ar, isStatefulAction as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, createProjection as Ba, isInformationalMessage as Bi, ShellParseStatus as Bn, hasQuestionScope as Bo, HostCohortSelection as Br, normalizeClause as Bs, validateManifest as Bt, observeAssistantOutcome as C, GuardOperation as Ca, CONFIRM_LINE_PATTERN as Ci, GitEffectExecution as Cn, DirectiveClass as Co, ACTIVE_HOST_COHORT_ID as Cr, STOP_PROTOCOL_VERSION as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, NeedsReviewFact as Da, CheckpointResult as Di, GitTargetIdentity as Dn, InterpretOptions as Do, BASE_HOST_PACKAGES as Dr, StatefulAction as Ds, sessionQuery as Dt, v6TestPredicate as E, MessageCoverage as Ea, parseConfirmationMessage as Ei, GitPrestateEnvelope as En, GRANTED_QUALIFICATION as Eo, AuditedExecutable as Er, SemanticAction as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, TargetTuple as Fa, classifyClause as Fi, revalidateGitPrestate as Fn, clauseIsGoverned as Fo, HostAuditProvenance as Fr, semanticActionFromText as Fs, isVerifyingCapability as Ft, openItems as G, ReleaseSettlement as Ga, BoundaryRequest as Gi, goalCompletionDenial as Gn, isExecutableItem as Go, HostPlatform as Gr, LifecyclePhase as Gt, carriesCleanupCondition as H, ReleaseGateDecision as Ha, BOUNDARY_RECORD_PREFIX as Hi, isRunExecutable as Hn, interpretClause as Ho, HostLockContext as Hr, sanitizeUrl as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, TargetValue as Ia, environmentDefaultRepositoryTarget as Ii, verifiedLinearCommitReadback as In, clauseIsProtected as Io, HostCapabilityEvaluation as Ir, validateActionManifest as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, RebindArgs as Ja, availableBoundaryQualifications as Ji, ToolResultInput as Jn, isOpenObligation as Jo, bindExecutableIdentity as Jr, firstStepGuidanceV6 as Jt, recoveryDigest as K, BoundedSource as Ka, GoalActivationState as Ki, hasCurrentCertificate as Kn, isExplanationScope as Ko, HostProfileKind as Kr, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, VerificationContract as La, extractArtifactPaths as Li, CanonicalArgv as Ln, explanationHasActionResidue as Lo, HostCapabilityId as Lr, validateActionTarget as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, TargetCaptureStatus as Ma, ClauseSegment as Mi, executeRevalidatedGitEffect as Mn, actionVerbMatches as Mo, GOAL_HOST_PACKAGES as Mr, requestedTargetAuthorizesMutation as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, TargetSource as Na, captureClause as Ni, gitCommandMatchesTarget as Nn, clarifiedSpanOf as No, HOST_CAPABILITY_PACKAGE_GROUPS as Nr, requestedTargetMatchesResolved as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, NeedsReviewReason as Oa, RejectedBinding as Oi, LinearCommitReadback as On, LEGACY_QUALIFICATION as Oo, DEFAULT_HOST_LOCK as Or, actionCompatible as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, TargetSourceKind as Pa, captureItem as Pi, parseGitCommandManifest as Pn, clauseAsksOwnQuestion as Po, HOST_COHORTS as Pr, semanticActionFromCommand as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, proposeRebindOutcome as Qa, AssetInterpretationFact as Qi, extractToolSubject as Qn, kindOfScope as Qo, evaluateHostLock as Qr, HostProfileError as Qt, RecoveryOptions as R, WaitAuthorization as Ra, extractMethod as Ri, CanonicalCommandSurface as Rn, governedClauseRestrictsExecution as Ro, HostCapabilityRequest as Rr, canonicalizePath as Rs, ManifestIssue as Rt, latestRootInstruction as S, GuardItemStatus as Sa, classifyUserInteraction as Si, GitCommandRejected as Sn, AuthorityDisposition as So, rootLocatorFlavor as Sr, STATEFUL_ACTIONS as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, HostStatus as Ta, isFrozenV042RebindResponse as Ti, GitPrestateCheck as Tn, ExecutionQualification as To, ACTIVE_HOST_LAUNCHER_VERSION as Tr, SUPPORTED_EVIDENCE_ADAPTERS as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, ReleaseObservedIdentity as Ua, BoundaryEffectuation as Ui, parsePwshCommand as Un, interpretMessage as Uo, HostLockEvaluation as Ur, sha256 as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, PackageRow as Va, segmentClauses as Vi, canonicalArgvFromCommand as Vn, hasWorkPredicate as Vo, HostCohortSelectionReason as Vr, sanitizeClauseText as Vs, ClaimedMessage as Vt, closingHint as W, ReleaseOperation as Wa, BoundaryQualification as Wi, parseShellCommand as Wn, introducesActionClause as Wo, HostLockStatus as Wr, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, confirmRebind as Xa, isCurrentAcceptedBoundary as Xi, evidenceFromPersistedToolResult as Xn, isRestatement as Xo, evaluateExternalWaitCapability as Xr, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, RebindProposal as Ya, effectuateBoundary as Yi, ToolSubject as Yn, isQuestionScopeNeedingReview as Yo, bindLiveGoalCapability as Yr, lifecyclePhase as Yt, PROOF_KINDS as Z, proposeRebind as Za, qualifyBoundary as Zi, extractTextContent as Zn, itemHoldsExecutionAuthority as Zo, evaluateHostCapability as Zr, ActiveProfileHostLock as Zt, decideTurnStopping as _, GuardCheckpoint as _a, authorityCaptureCounts as _i, GIT_COMMAND_TEMPLATES as _n, capabilityConsequence as _o, PROTOCOL_V5_NOTICE as _r, ActionSpec as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, DeriveConfig as aa, MIN_SUPPORTED_HOST_VERSION as ai, combineHostPolicy as an, CapabilityRemedy as ao, TaskKind as ar, presentExplanationHead as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, GuardItem as ba, UserInteractionKind as bi, GitCommandManifest as bn, removalIsComplete as bo, deriveProjection as br, CERTIFICATE_VERSION_V2 as bs, proofDigestV2 as bt, CurrentActionBasis as c, DerivedEnvelope as ca, SUPPORTED_HOST_VERSIONS as ci, injectActiveProfileHostLock as cn, DependencyStatus as co, deriveItemDiagnosis as cr, reportingHeadGoverns as cs, ProofObligation as ct, TurnStoppingDecision as d, EvidenceParseStatus as da, parseHostVersion as di, packageRowsFromPnpmLock as dn, ProcessExitStatus as do, nativeFileTwoRole as dr, splitTextFragments as ds, SessionQuery as dt, BindingActionClosure as ea, hostVersionFromPackages as ei, activeRendererModule as en, rebindAttemptKey as eo, persistedToolResultStatus as er, maskCodeSpans as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, EvidenceRole as fa, satisfiesSupportedHostRange as fi, readActiveHostGraph as fn, ProcessFactSource as fo, relevantEvidence as fr, statefulActionsOfScope as fs, SessionQueryV2 as ft, decideTurnBoundary as g, GuardBoundary as ga, AuthorityKind as gi, GIT_COMMAND_MANIFEST_IDS as gn, admissibleForRemoval as go, PROTOCOL_V4_NOTICE as gr, ActionManifest as gs, createProofManifest as gt, currentActionBases as h, GoalRef as ha, AuthorityBlockKind as hi, verifyComposedHostLockDump as hn, actionHasCertificationPath as ho, PROTOCOL_V3_NOTICE as hr, ACTION_MANIFEST_VERSION as hs, canonicalProjection as ht, supersedeItem as i, DelegationRef as ia, LATEST_SUPPORTED_HOST_VERSION as ii, auditedHostImplementation as in, CapabilityGap as io, Repairability as ir, opensWithDirective as is, ProofKindCapability as it, snapshotSessionEvents as j, TargetCaptureReasonCode as ja, CaptureScope as ji, createGitPrestateEnvelope as jn, ScopeInterpretation as jo, ExecutableIdentityBinding as jr, requestedIdentityKey as js, EvidenceFacetCoverage as jt, SessionApiError as k, PersistenceAuthorization as ka, bindingIndividuallyAccepted as ki, commitIndexSnapshotDigest as kn, QualificationReason as ko, EXPECTED_HOST_PACKAGES as kr, boundedArtifactChoiceMatches as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, EvidenceBinding as la, compareHostVersions as li, inspectTargetHostGraph as ln, DerivedProcessFacts as lo, evidenceAvailabilityReason as lr, restatedContentOf as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, ExternalOperation as ma, AuthorityBlock as mi, resolveInstalledHostLock as mn, RemovalOutcomeReport as mo, DEFAULT_DELEGATION_TOOL_NAMES as mr, ACTION_MANIFEST as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, BoundaryQualificationKind as na, HostVersionDecision as ni, auditedDefaultWorkdirProvider as nn, replayRebindResult as no, CertificationSupport as nr, namedActions as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, DeriveResult as oa, ParsedHostVersion as oi, hostLockContextFromComposedDump as on, DEPENDENCY_FREE_ONLY_CONDITION as oo, UnifiedItemDiagnosis as or, qualificationOfClause as os, ProofManifest as ot, assessmentOutcomePredicate as p, ExpectedTransition as pa, currentContractDigest as pi, resolveActiveProfileHostLock as pn, ProcessOutcomeReason as po, CAPTURE_V042_NOTICE as pr, verbIsNegated as ps, bindProofToProjection as pt, recoveryTitle as q, ProposeOutcome as qa, GoalBoundaryAccess as qi, ToolCallInput as qn, isInformationalFragment as qo, HostToolSurface as qr, firstStepGuidance as qt, projectCoreV2 as r, DeferAuthorization as ra, HostVersionStatus as ri, auditedForegroundRenderers as rn, CapabilityFact as ro, DiagnosisNextAction as rr, opensConditionLead as rs, ProofKind as rt, CompletionDisposition as s, DeriveScope as sa, SUPPORTED_HOST_RANGE as si, hostLockRowsFromComposedDump as sn, DeclaredOperationResult as so, capabilityRemedyPhrase as sr, questionHeadsClause as ss, ProofManifestV2 as st, RC017_RC2_HOST_PACKAGES as t, BoundaryDisposition as ta, selectHostCohort as ti, auditedDefaultWorkdirHost as tn, rebindResponse as to, withDurability as tr, maskQuotedSpans as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, EvidenceOutcome as ua, evaluateMinimumHostVersion as ui, packageRowsFromActiveGraph as un, OperationAttribution as uo, itemDiagnosis as ur, semanticActionOfScope as us, ProofSurface as ut, decisionBoundaryKey as v, GuardEvidence as va, segmentAuthorityBlocks as vi, GitAdapterAction as vn, capabilityFactOf as vo, PROTOCOL_V6_NOTICE as vr, BOUNDED_ARTIFACT_TYPES as vs, proofCapabilityReport as vt, progressFingerprint as w, GuardProjection as wa, ParsedConfirmation as wi, GitEffectRunner as wn, Executee as wo, ACTIVE_HOST_COHORT_IDS as wr, STOP_PROTOCOL_VERSION_V2 as ws, proofV2Rejection as wt, latestAssistantText as x, GuardItemKind as xa, classifyTaskIntent as xi, GitCommandParseResult as xn, removalIsPartiallyKnown as xo, legacyRecordsNeedingReview as xr, SEMANTIC_ACTIONS as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, GuardIntegrity as ya, TaskIntent as yi, GitCommandAccepted as yn, partialFailureOf as yo, applyUpgradeEligibility as yr, CERTIFICATE_VERSION as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, WorkUnit as za, extractOperation as zi, ParsedShell as zn, hasOrderedCoordination as zo, HostCohort as zr, digestStrings as zs, OperationVerbEntry as zt };
+export { PROOF_KINDS_V2 as $, GuardCheckpoint as $a, authorityCaptureCounts as $i, GitCommandAccepted as $n, capabilityConsequence as $o, applyUpgradeEligibility as $r, ActionSpec as $s, AuditedPackageExpectation as $t, SessionApiError as A, availableBoundaryQualifications as Aa, evaluateExternalWaitCapability as Ai, DesktopAppRuntime as An, RebindArgs as Ao, evidenceFromPersistedToolResult as Ar, isOpenObligation as As, validateProofManifest as At, V6_ORDINARY_COMPLETION_RULE as B, DelegationRef as Ba, LATEST_TESTED_HOST_VERSION as Bi, HostRebindTrust as Bn, CapabilityGap as Bo, UnifiedItemDiagnosis as Br, opensWithDirective as Bs, OperationVerbEntry as Bt, latestRootInstruction as C, segmentClauses as Ca, sanitizeClauseText as Cc, HostLockEvaluation as Ci, resolveInstalledHostLock as Cn, PackageRow as Co, parsePwshCommand as Cr, hasWorkPredicate as Cs, proofHostSurfacesOf as Ct, v6TestPredicate as D, BoundaryRequest as Da, HostToolSurface as Di, DESKTOP_IDENTITY_FACTS as Dn, ReleaseSettlement as Do, ToolCallInput as Dr, isExecutableItem as Ds, scopeCoverageDigest as Dt, testOutcomePredicate as E, BoundaryQualification as Ea, HostProfileKind as Ei, AsarIndex as En, ReleaseOperation as Eo, hasCurrentCertificate as Er, introducesActionClause as Es, requiredSubjectsOf as Et, CLEANUP_CONDITION_RULE_SHORT as F, AssetObligation as Fa, hostVersionFromPackages as Fi, readAsarIndex as Fn, proposeRebindV042 as Fo, withDurability as Fr, legacyQuestionReadingIsInformational as Fs, evidenceMatchesItem as Ft, closingHint as G, EvidenceBinding as Ga, compareHostVersions as Gi, hostTrustDigest as Gn, DerivedProcessFacts as Go, nativeFileTwoRole as Gr, restatedContentOf as Gs, FirstStepPreviewInput as Gt, V6_ORDINARY_COMPLETION_RULE_SHORT as H, DeriveResult as Ha, ParsedHostVersion as Hi, HostTrustError as Hn, DEPENDENCY_FREE_ONLY_CONDITION as Ho, deriveItemDiagnosis as Hr, qualificationOfClause as Hs, ClaimedMessage as Ht, DEFAULT_RECOVERY_CHAR_BUDGET as I, BindingActionClosure as Ia, selectHostCohort as Ii, readDesktopAppRuntime as In, rebindAttemptKey as Io, CertificationSupport as Ir, maskCodeSpans as Is, isVerifyingCapability as It, recoveryTitle as J, EvidenceRole as Ja, satisfiesSupportedHostRange as Ji, registryArchiveFiles as Jn, ProcessFactSource as Jo, DEFAULT_DELEGATION_TOOL_NAMES as Jr, statefulActionsOfScope as Js, firstStepGuidance as Jt, openItems as K, EvidenceOutcome as Ka, evaluateMinimumHostVersion as Ki, parseHostTrust as Kn, OperationAttribution as Ko, relevantEvidence as Kr, semanticActionOfScope as Ks, LifecyclePhase as Kt, MIN_RECOVERY_CHAR_BUDGET as L, BoundaryDisposition as La, HOST_VALIDATED_VERSIONS as Li, readDesktopDependency as Ln, rebindResponse as Lo, DiagnosisNextAction as Lr, maskQuotedSpans as Ls, COMMAND_SURFACE_MANIFEST as Lt, snapshotSessionEvents as M, isCurrentAcceptedBoundary as Ma, evaluateHostCapability as Mi, auditDesktopInstalledImplementation as Mn, confirmRebind as Mo, extractToolSubject as Mr, isRestatement as Ms, EvidenceFacetCoverage as Mt, CLEANUP_CONDITION_RULE as N, qualifyBoundary as Na, evaluateHostLock as Ni, hasDesktopImporterState as Nn, proposeRebind as No, isDeterministicCheck as Nr, itemHoldsExecutionAuthority as Ns, bindingSatisfies as Nt, SESSION_API_UNSUPPORTED as O, GoalActivationState as Oa, bindExecutableIdentity as Oi, DESKTOP_PROFILE_PACKAGE_NAME as On, BoundedSource as Oo, ToolResultInput as Or, isExplanationScope as Os, sessionQuery as Ot, CLEANUP_CONDITION_RULE_COMPACT as P, AssetInterpretationFact as Pa, evaluateToolSurfaceCapability as Pi, readAsarFile as Pn, proposeRebindOutcome as Po, persistedToolResultStatus as Pr, kindOfScope as Ps, evidenceCoverage as Pt, PROOF_KINDS as Q, GuardBoundary as Qa, AuthorityKind as Qi, GitAdapterAction as Qn, admissibleForRemoval as Qo, PROTOCOL_V6_NOTICE as Qr, ActionManifest as Qs, ActiveProfileHostLock as Qt, RecoveryCause as R, BoundaryQualificationKind as Ra, HostVersionDecision as Ri, readDesktopTargetGraph as Rn, replayRebindResult as Ro, Repairability as Rr, namedActions as Rs, CommandSurfaceManifest as Rt, latestAssistantText as S, isInformationalMessage as Sa, normalizeClause as Sc, HostLockContext as Si, resolveDesktopProfileHostLock as Sn, createProjection as So, isRunExecutable as Sr, hasQuestionScope as Ss, proofEvidenceConstraints as St, progressFingerprint as T, BoundaryEffectuation as Ta, sha256 as Tc, HostPlatform as Ti, verifyComposedHostLockDump as Tn, ReleaseObservedIdentity as To, goalCompletionDenial as Tr, interpretMessage as Ts, proofV2Rejection as Tt, carriesCleanupCondition as U, DeriveScope as Ua, SUPPORTED_HOST_RANGE as Ui, HostTrustedPackage as Un, DeclaredOperationResult as Uo, evidenceAvailabilityReason as Ur, questionHeadsClause as Us, FIRST_STEP_GUIDANCE as Ut, V6_ORDINARY_COMPLETION_RULE_COMPACT as V, DeriveConfig as Va, MIN_SUPPORTED_HOST_VERSION as Vi, HostTrustAcquisitionOptions as Vn, CapabilityRemedy as Vo, capabilityRemedyPhrase as Vr, presentExplanationHead as Vs, validateManifest as Vt, cleanupConditionFor as W, DerivedEnvelope as Wa, SUPPORTED_HOST_VERSIONS as Wi, acquireHostTrust as Wn, DependencyStatus as Wo, itemDiagnosis as Wr, reportingHeadGoverns as Ws, FirstStepInjection as Wt, v6CurrentRootBoundaries as X, ExternalOperation as Xa, AuthorityBlock as Xi, GIT_COMMAND_MANIFEST_IDS as Xn, RemovalOutcomeReport as Xo, PROTOCOL_V4_NOTICE as Xr, ACTION_MANIFEST as Xs, lifecyclePhase as Xt, renderRecoveryPacket as Y, ExpectedTransition as Ya, currentContractDigest as Yi, registryArchiveModules as Yn, ProcessOutcomeReason as Yo, PROTOCOL_V3_NOTICE as Yr, verbIsNegated as Ys, firstStepGuidanceV6 as Yt, PROOF_CAPABILITY_MATRIX as Z, GoalRef as Za, AuthorityBlockKind as Zi, GIT_COMMAND_TEMPLATES as Zn, actionHasCertificationPath as Zo, PROTOCOL_V5_NOTICE as Zr, ACTION_MANIFEST_VERSION as Zs, previewFirstStepInjection as Zt, decideTurnBoundary as _, classifyClause as _a, semanticActionFromText as _c, HostCapabilityId as _i, prepareActiveHostTrust as _n, TargetTuple as _o, CanonicalArgv as _r, clauseIsGoverned as _s, createProofManifest as _t, supersedeItem as a, CONFIRM_LINE_PATTERN as aa, STOP_PROTOCOL_VERSION as ac, ACTIVE_HOST_LAUNCHER_VERSION as ai, auditedForegroundRenderers as an, GuardOperation as ao, GitPrestateCheck as ar, DirectiveClass as as, ProofKindCapability as at, isRootPauseRequest as b, extractMethod as ba, canonicalizePath as bc, HostCohortSelection as bi, readActiveHostGraph as bn, WaitAuthorization as bo, ShellParseStatus as br, governedClauseRestrictsExecution as bs, proofDigest as bt, CompletionDisposition as c, parseConfirmationMessage as ca, SemanticAction as cc, DEFAULT_HOST_LOCK as ci, evaluateActiveHostLock as cn, MessageCoverage as co, LinearCommitReadback as cr, GRANTED_QUALIFICATION as cs, ProofManifestV2 as ct, NO_PROGRESS_TURNS_BEFORE_STOP as d, bindingIndividuallyAccepted as da, boundedArtifactChoiceMatches as dc, ExecutableIdentityBinding as di, hostLockRowsFromComposedDump as dn, PersistenceAuthorization as do, createGitPrestateEnvelope as dr, QualificationReason as ds, ProofSurface as dt, segmentAuthorityBlocks as ea, BOUNDED_ARTIFACT_TYPES as ec, deriveProjection as ei, HostProfileError as en, GuardEvidence as eo, GitCommandManifest as er, capabilityFactOf as es, PROOF_MANIFEST_DOMAIN_V2 as et, TurnStoppingDecision as f, certifyCheckpoint as fa, isStatefulAction as fc, GOAL_HOST_PACKAGES as fi, injectActiveProfileHostLock as fn, SourceSpan as fo, executeRevalidatedGitEffect as fr, QualificationStatus as fs, SessionQuery as ft, currentActionBases as g, captureItem as ga, semanticActionFromCommand as gc, HostCapabilityEvaluation as gi, packageRowsFromPnpmLock as gn, TargetSourceKind as go, verifiedLinearCommitReadback as gr, clauseAsksOwnQuestion as gs, canonicalProjection as gt, classifyCompletionClaim as h, captureClause as ha, requestedTargetMatchesResolved as hc, HostAuditProvenance as hi, packageRowsFromActiveGraph as hn, TargetSource as ho, revalidateGitPrestate as hr, clarifiedSpanOf as hs, bindProofV2ToProjection as ht, projectCoreV2 as i, classifyUserInteraction as ia, STATEFUL_ACTIONS as ic, ACTIVE_HOST_COHORT_IDS as ii, auditedDefaultWorkdirProvider as in, GuardItemStatus as io, GitEffectRunner as ir, AuthorityDisposition as is, ProofKind as it, V4SessionLike as j, effectuateBoundary as ja, evaluateGraphDerivedHostLock as ji, DesktopTargetGraph as jn, RebindProposal as jo, extractTextContent as jr, isQuestionScopeNeedingReview as js, validateProofManifestV2 as jt, SESSION_EVENT_ENVELOPE_INVALID as k, GoalBoundaryAccess as ka, bindLiveGoalCapability as ki, DESKTOP_RUNTIME_PACKAGE_NAME as kn, ProposeOutcome as ko, ToolSubject as kr, isInformationalFragment as ks, sessionQueryV2 as kt, CurrentActionBasis as l, CheckpointResult as la, StatefulAction as lc, EXPECTED_HOST_PACKAGES as li, evaluateConfiguredHostLock as ln, NeedsReviewFact as lo, commitIndexSnapshotDigest as lr, InterpretOptions as ls, ProofObligation as lt, assessmentOutcomePredicate as m, ClauseSegment as ma, requestedTargetAuthorizesMutation as mc, HOST_COHORTS as mi, inspectTargetHostGraph as mn, TargetCaptureStatus as mo, parseGitCommandManifest as mr, actionVerbMatches as ms, bindProofToProjection as mt, RC020_RC1_HOST_PACKAGES as n, UserInteractionKind as na, CERTIFICATE_VERSION_V2 as nc, rootLocatorFlavor as ni, activeRendererModule as nn, GuardItem as no, GitCommandRejected as nr, removalIsComplete as ns, PROOF_PROTOCOL_VERSION_V2 as nt, AssistantOutcomeObservation as o, ParsedConfirmation as oa, STOP_PROTOCOL_VERSION_V2 as oc, AuditedExecutable as oi, auditedHostImplementation as on, GuardProjection as oo, GitPrestateEnvelope as or, Executee as os, ProofKindV2 as ot, assessmentAction as p, CaptureScope as pa, requestedIdentityKey as pc, HOST_CAPABILITY_PACKAGE_GROUPS as pi, inspectDesktopTargetGraph as pn, TargetCaptureReasonCode as po, gitCommandMatchesTarget as pr, ScopeInterpretation as ps, SessionQueryV2 as pt, recoveryDigest as q, EvidenceParseStatus as qa, parseHostVersion as qi, qualifyHostTrust as qn, ProcessExitStatus as qo, CAPTURE_V042_NOTICE as qr, splitTextFragments as qs, claimedBatchHasRealRootInput as qt, projectSessionCoreV2 as r, classifyTaskIntent as ra, SEMANTIC_ACTIONS as rc, ACTIVE_HOST_COHORT_ID as ri, auditedDefaultWorkdirHost as rn, GuardItemKind as ro, GitEffectExecution as rr, removalIsPartiallyKnown as rs, ProofHostSurface as rt, CONTROL_RECORD_PREFIX as s, isFrozenV042RebindResponse as sa, SUPPORTED_EVIDENCE_ADAPTERS as sc, BASE_HOST_PACKAGES as si, combineHostPolicy as sn, HostStatus as so, GitTargetIdentity as sr, ExecutionQualification as ss, ProofManifest as st, RC020_RC2_HOST_PACKAGES as t, TaskIntent as ta, CERTIFICATE_VERSION as tc, legacyRecordsNeedingReview as ti, TargetHostGraph as tn, GuardIntegrity as to, GitCommandParseResult as tr, partialFailureOf as ts, PROOF_PROTOCOL_VERSION as tt, NO_PROGRESS_RECORD_PREFIX as u, RejectedBinding as ua, actionCompatible as uc, ExecutableIdentity as ui, hostLockContextFromComposedDump as un, NeedsReviewReason as uo, commitTreeSnapshotDigest as ur, LEGACY_QUALIFICATION as us, ProofObligationV2 as ut, decideTurnStopping as v, environmentDefaultRepositoryTarget as va, validateActionManifest as vc, HostCapabilityRequest as vi, prepareDesktopHostTrust as vn, TargetValue as vo, CanonicalCommandSurface as vr, clauseIsProtected as vs, createProofManifestV2 as vt, observeAssistantOutcome as w, BOUNDARY_RECORD_PREFIX as wa, sanitizeUrl as wc, HostLockStatus as wi, revalidateDesktopCoreLock as wn, ReleaseGateDecision as wo, parseShellCommand as wr, interpretClause as ws, proofOperationMatches as wt, isWholeTaskCompletionClaim as x, extractOperation as xa, digestStrings as xc, HostCohortSelectionReason as xi, resolveActiveProfileHostLock as xn, WorkUnit as xo, canonicalArgvFromCommand as xr, hasOrderedCoordination as xs, proofDigestV2 as xt, decisionBoundaryKey as y, extractArtifactPaths as ya, validateActionTarget as yc, HostCohort as yi, prepareTargetHostTrust as yn, VerificationContract as yo, ParsedShell as yr, explanationHasActionResidue as ys, proofCapabilityReport as yt, RecoveryOptions as z, DeferAuthorization as za, HostVersionStatus as zi, writeDesktopRuntimeReceipt as zn, CapabilityFact as zo, TaskKind as zr, opensConditionLead as zs, ManifestIssue as zt };