dsh-completion-guard 0.8.1 → 0.8.2

package/dist/{index-jKw6mANp.d.ts → index-DqvBEsNc.d.ts}

@@ -1729,8 +1729,8 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Version admission floor. Since 0.8.1 the public DSH support range is
-* `>=0.2.0-rc.1` with NO implied upper bound: every host version at or above
+/** Version admission floor. Since 0.8.2 the public DSH support range is
+* `>=0.2.0-rc.2` with NO implied upper bound: every host version at or above
 * this floor (including later RCs on any tuple, stable and future releases)
 * passes VERSION ADMISSION. The floor only rises when a future Guard release
 * actively adopts a newer DSH; the runtime never raises it from a remote
@@ -1738,11 +1738,12 @@ declare function currentContractDigest(projection: GuardProjection): string;
 * metadata ignored. Version admission is one gate of several — it never
 * claims native validation of a not-yet-tested host, and the graph/byte/
 * contract audits below still run on every admission. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.1";
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.2";
 declare const SUPPORTED_HOST_RANGE: string;
 /** Versions with recorded first-hand host evidence. This is an EVIDENCE
 * ledger, NOT an admission whitelist: a missing row never refuses a
-* version-above-floor host. */
+* version-above-floor host. rc.1 keeps its historical row after the floor
+* moved to rc.2; the row records past evidence, not current admission. */
 declare const HOST_VALIDATED_VERSIONS: readonly string[];
 /** Historical alias retained for evidence-list readers; the admission rule is
 * the floor above, never this list. */
@@ -1772,15 +1773,23 @@ interface HostVersionDecision {
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
 /** Version admission: at or above the floor by strict SemVer precedence
-* (prerelease-aware; build metadata ignored). `0.2.0-rc.0` and the whole
-* `0.1.7.x` line stay below the floor; `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.0`,
+* (prerelease-aware; build metadata ignored). `0.2.0-rc.1` and the whole
+* `0.1.7.x` line stay below the floor; `0.2.0-rc.2`, `0.2.0`,
 * later patch/minor RCs and releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
 //#region src/domain/host-lock.d.ts
 type HostLockStatus = "supported" | "unsupported" | "unavailable";
 type HostPlatform = "posix" | "windows";
-type HostProfileKind = "headless" | "web";
+/**
+* Host profile identity. `headless` and `web` are the explicitly managed CLI
+* runtime profiles. `desktop` is the official Desktop app's own profile
+* (name `dsh-profile-desktop`): its graph lives in the signed app bundle and
+* is evaluated through the dedicated Desktop adapter, never by the Web
+* bundle/market inference — a Desktop profile bundles the Web app too, so
+* bundle presence alone misidentifies it.
+*/
+type HostProfileKind = "headless" | "web" | "desktop";
 /**
 * How a cohort's package rows were established. Bound into every host-lock
 * digest through the `host_audit_provenance` capability row, so a certificate
@@ -1812,7 +1821,7 @@ interface HostCohort {
   capabilities: CapabilityRow[];
 }
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.1";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.2";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 /** Core-lock/v1 separates optional market identity from the rc.2 critical
 * graph. Historical cohorts live only in test data. Version ordering cannot
@@ -1821,7 +1830,7 @@ declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.2.0-rc.1). The cohort
+* Baseline fixture package identities (DSH 0.2.0-rc.2). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -2428,6 +2437,22 @@ interface HostAuditSession {
   memo<T>(key: string, compute: () => T): T;
 }
 //#endregion
+//#region src/domain/host-dependency-audit.d.ts
+interface DependencyAuditGraph {
+  modules: string;
+  records: Record<string, {
+    url?: unknown;
+    dependencies?: unknown;
+  }>;
+  reachable: Set<string>;
+  packages: Map<string, {
+    root: string;
+    manifest: Record<string, unknown>;
+    files: string[];
+    independentLanes?: boolean;
+  }>;
+}
+//#endregion
 //#region src/domain/host-contract-probe.d.ts
 declare const HOST_CONTRACT_SCHEMA: "guard-host-contract/v2";
 //#endregion
@@ -2475,6 +2500,125 @@ interface HostTrustAcquisitionOptions {
 }
 declare function acquireHostTrust(rows: readonly PackageRow[], fetcher?: typeof fetch, options?: HostTrustAcquisitionOptions): Promise<HostRebindTrust>;
 //#endregion
+//#region src/domain/host-desktop.d.ts
+/**
+* Official Desktop adapter (CG-RC2-002).
+*
+* The Desktop app is the only authority for the `desktop` profile: its
+* `package.json` is named `dsh-profile-desktop`, its dependency graph lives
+* inside the signed `app.asar` of the installation, and there is no pnpm
+* package map or lockfile to read. This adapter therefore reads the official
+* graph IN PLACE from the asar container — it never unpacks the bundle and
+* never fabricates a map. The identities the manifest declares are qualified
+* through the same registry acquisition and host-contract probe as a CLI
+* graph rebind (`acquireDesktopHostTrust`), and the actually installed bytes
+* are verified file-by-file from the asar against that qualification
+* (`auditDesktopInstalledImplementation`). Every mismatch fails closed.
+*
+* The asar container format is a flat archive: a JSON header (with per-file
+* offsets) followed by the file bytes. Reading a file means header lookup +
+* one bounded positioned read, so an audited file set costs no more I/O than
+* reading the same files from a directory, and a tampered byte changes its
+* digest exactly as on disk.
+*/
+declare const DESKTOP_PROFILE_PACKAGE_NAME = "dsh-profile-desktop";
+declare const DESKTOP_RUNTIME_PACKAGE_NAME = "@deepseek-ai/dsh-desktop-runtime";
+interface AsarNode {
+  files?: Record<string, AsarNode>;
+  size?: number;
+  offset?: string;
+  unpacked?: boolean;
+  integrity?: unknown;
+}
+interface AsarIndex {
+  dataOffset: number;
+  root: AsarNode;
+  headerSha256: string;
+  fileCount: number;
+}
+/** Read the asar header (the JSON index) without extracting any payload. */
+declare function readAsarIndex(archivePath: string): AsarIndex;
+/**
+* Read one file's exact bytes from the asar in place. Unpacked entries are
+* read from the sibling `app.asar.unpacked` tree, which is where the app
+* itself loads them; a path that escapes that tree fails closed.
+*/
+declare function readAsarFile(archivePath: string, index: AsarIndex, entryPath: string): Buffer;
+interface DesktopAppRuntime {
+  /** Absolute path of the app bundle archive the rows were read from. */
+  asarRealpath: string;
+  headerSha256: string;
+  manifestSha256: string;
+  metadataSha256: string;
+  /** DSH host version the official runtime manifest pins for `@deepseek-ai/dsh`. */
+  hostVersion: string;
+  /** Version of the `@deepseek-ai/dsh-desktop-runtime` private manifest. */
+  runtimeVersion: string;
+  metadata: {
+    desktopVersion: string;
+    platform: string;
+    arch: string;
+    node: string;
+    pnpm: string;
+    /** Count of the official per-file digest table entries bound by the metadata hash. */
+    fileTableEntries: number;
+  };
+  /** Version-only rows for the critical names the official manifest declares. */
+  rows: PackageRow[];
+}
+/**
+* Read the official Desktop runtime graph from the app bundle. `appAsarPath`
+* is the absolute path of `app.asar` (a file, not a directory). The runtime
+* identity binds: the asar header itself, the `@deepseek-ai/dsh-desktop-runtime`
+* manifest, the `desktop-runtime.json` metadata block, and the official CLI
+* carrier entry the app installs.
+*/
+declare function readDesktopAppRuntime(appAsarPath: string): DesktopAppRuntime;
+interface DesktopTargetGraph {
+  packages: PackageRow[];
+  profileGraph: {
+    state: "dependency_free_desktop";
+    manifestSha256: string;
+    bundles: string[];
+  };
+  runtime: DesktopAppRuntime;
+}
+/** Importer state selects the active audit; its presence grants no trust. */
+declare function hasDesktopImporterState(profileRoot: string): boolean;
+/**
+* Pre-install inspection of a Desktop target: the profile must be the
+* Desktop-owned dependency-free profile, and the runtime half must come from
+* the official app bundle. Structural discovery grants no authority — the
+* caller must still qualify and byte-audit before any install decision.
+*/
+declare function readDesktopTargetGraph(appAsarPath: string, profileRoot: string): DesktopTargetGraph;
+/**
+* Verify the actually installed app bytes against the acquired qualification.
+* Each critical package's closed module inventory (every `.cm?js|json` file
+* under its asar root plus its manifest) is digested from the asar in place
+* and compared with the trust rows; any extra, missing, or changed file fails
+* closed. A critical package that also appears NESTED anywhere in the app
+* graph is an ambiguity no adapter resolves, so its presence fails closed
+* before any digest is computed.
+*/
+declare function auditDesktopInstalledImplementation(appAsarPath: string, expectations: readonly AuditedPackageExpectation[]): boolean;
+/** Persist the app-bundle identity next to the profile contract receipts so a
+* native annex can bind its readback to the exact inspected bundle. */
+declare function writeDesktopRuntimeReceipt(profileRoot: string, runtime: DesktopAppRuntime): string;
+declare const DESKTOP_IDENTITY_FACTS: Readonly<{
+  profilePackageName: typeof DESKTOP_PROFILE_PACKAGE_NAME;
+  runtimePackageName: typeof DESKTOP_RUNTIME_PACKAGE_NAME;
+  carrierEntry: string;
+}>;
+/**
+* Resolve one dependency's exact installed identity from the official app
+* graph by its top-level manifest. Used by the host-contract probe's
+* dependency acquisition; a name with no top-level manifest is unbound (the
+* installed-byte audit separately refuses nested critical duplicates, so a
+* nested-only dependency can never be silently resolved here).
+*/
+declare function readDesktopDependency(appAsarPath: string, name: string): PackageRow;
+//#endregion
 //#region src/domain/host-resolver.d.ts
 declare class HostProfileError extends Error {
   readonly code: string;
@@ -2542,7 +2686,7 @@ interface AuditedPackageExpectation {
 /** Byte and dual-lane route audit over both graphs. Expectations are either
 * the published baseline or operator-owned, registry-acquired qualified module
 * digests. A missing digest set never authenticates unknown implementation. */
-declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[]): boolean;
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[], installationGraph?: DependencyAuditGraph, profileInstallationGraph?: DependencyAuditGraph): boolean;
 declare function activeRendererModule(nodeModulesRoot: string, name: string, providedSession?: HostAuditSession): {
   bytes: string;
   path: string;
@@ -2573,6 +2717,31 @@ declare function inspectTargetHostGraph(runtime: string, profile: string, trust?
 declare function prepareTargetHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Read and validate the actual runtime graph plus the installed profile plugin. */
 declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
+/** Complete Desktop composition: the official app bundle is the runtime half,
+* the Desktop-managed profile is the profile half. No structural discovery
+* grants authority — the installed asar bytes are verified against the same
+* qualification chain a CLI graph rebind uses. */
+declare function resolveDesktopProfileHostLock(appAsarPath: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
+/** Desktop pre-install inspection: the Desktop-owned dependency-free profile
+* plus the official app bundle, evaluated and byte-audited like any target. */
+declare function inspectDesktopTargetGraph(appAsarPath: string, profileRoot: string, trust?: HostRebindTrust): {
+  packages: PackageRow[];
+  runtime: DesktopAppRuntime;
+  profileGraph: {
+    state: "dependency_free_desktop";
+    manifestSha256: string;
+    bundles: string[];
+  };
+};
+/** Fresh runtime readback for an injected desktop lock: the same evaluation
+* chain the inject path used, so the digest the runtime compares against its
+* injected expectation is computed identically. */
+declare function revalidateDesktopCoreLock(appAsarPath: string, profileRoot: string, expected: HostLockEvaluation, trustText?: string): HostLockEvaluation;
+/** Registry acquisition for the Desktop graph: the app manifest pins exact
+* versions; the INTEGRITY comes from the registry metadata for exactly that
+* name@version, and the archive bytes are verified by the same acquisition
+* and host-contract probe a CLI rebind uses. */
+declare function prepareDesktopHostTrust(appAsarPath: string, profileRoot: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Atomically inject a repeatable managed patch into the selected profile only. */
 declare function injectActiveProfileHostLock(input: ActiveProfileHostLock): string;
 /** Extract the bounded host tuple from DSH's composed YAML dump. */
@@ -3173,4 +3342,12 @@ declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: Gua
 * remains a separate, currently pending fact. */
 declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
 //#endregion
-export { PROOF_MANIFEST_DOMAIN_V2 as $, TargetValue as $a, environmentDefaultRepositoryTarget as $i, CanonicalCommandSurface as $n, clauseIsProtected as $o, HostCapabilityRequest as $r, validateActionManifest as $s, HostProfileError as $t, V4SessionLike as A, ExpectedTransition as Aa, currentContractDigest as Ai, registryArchiveModules as An, ProcessOutcomeReason as Ao, PROTOCOL_V3_NOTICE as Ar, verbIsNegated as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, GuardOperation as Ba, CONFIRM_LINE_PATTERN as Bi, GitPrestateCheck as Bn, DirectiveClass as Bo, ACTIVE_HOST_LAUNCHER_VERSION as Br, STOP_PROTOCOL_VERSION as Bs, validateManifest as Bt, observeAssistantOutcome as C, DeriveResult as Ca, ParsedHostVersion as Ci, HostTrustError as Cn, DEPENDENCY_FREE_ONLY_CONDITION as Co, deriveItemDiagnosis as Cr, qualificationOfClause as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, EvidenceOutcome as Da, evaluateMinimumHostVersion as Di, parseHostTrust as Dn, OperationAttribution as Do, relevantEvidence as Dr, semanticActionOfScope as Ds, sessionQuery as Dt, v6TestPredicate as E, EvidenceBinding as Ea, compareHostVersions as Ei, hostTrustDigest as En, DerivedProcessFacts as Eo, nativeFileTwoRole as Er, restatedContentOf as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, GuardEvidence as Fa, segmentAuthorityBlocks as Fi, GitCommandManifest as Fn, capabilityFactOf as Fo, deriveProjection as Fr, BOUNDED_ARTIFACT_TYPES as Fs, isVerifyingCapability as Ft, openItems as G, NeedsReviewReason as Ga, RejectedBinding as Gi, commitTreeSnapshotDigest as Gn, LEGACY_QUALIFICATION as Go, ExecutableIdentity as Gr, actionCompatible as Gs, LifecyclePhase as Gt, carriesCleanupCondition as H, HostStatus as Ha, isFrozenV042RebindResponse as Hi, GitTargetIdentity as Hn, ExecutionQualification as Ho, BASE_HOST_PACKAGES as Hr, SUPPORTED_EVIDENCE_ADAPTERS as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, GuardIntegrity as Ia, TaskIntent as Ii, GitCommandParseResult as In, partialFailureOf as Io, legacyRecordsNeedingReview as Ir, CERTIFICATE_VERSION as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, TargetCaptureReasonCode as Ja, CaptureScope as Ji, gitCommandMatchesTarget as Jn, ScopeInterpretation as Jo, HOST_CAPABILITY_PACKAGE_GROUPS as Jr, requestedIdentityKey as Js, firstStepGuidanceV6 as Jt, recoveryDigest as K, PersistenceAuthorization as Ka, bindingIndividuallyAccepted as Ki, createGitPrestateEnvelope as Kn, QualificationReason as Ko, ExecutableIdentityBinding as Kr, boundedArtifactChoiceMatches as Ks, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, GuardItem as La, UserInteractionKind as Li, GitCommandRejected as Ln, removalIsComplete as Lo, rootLocatorFlavor as Lr, CERTIFICATE_VERSION_V2 as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, GoalRef as Ma, AuthorityBlockKind as Mi, GIT_COMMAND_TEMPLATES as Mn, actionHasCertificationPath as Mo, PROTOCOL_V5_NOTICE as Mr, ACTION_MANIFEST_VERSION as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, GuardBoundary as Na, AuthorityKind as Ni, GitAdapterAction as Nn, admissibleForRemoval as No, PROTOCOL_V6_NOTICE as Nr, ActionManifest as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, EvidenceParseStatus as Oa, parseHostVersion as Oi, qualifyHostTrust as On, ProcessExitStatus as Oo, CAPTURE_V042_NOTICE as Or, splitTextFragments as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, GuardCheckpoint as Pa, authorityCaptureCounts as Pi, GitCommandAccepted as Pn, capabilityConsequence as Po, applyUpgradeEligibility as Pr, ActionSpec as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, TargetTuple as Qa, classifyClause as Qi, CanonicalArgv as Qn, clauseIsGoverned as Qo, HostCapabilityId as Qr, semanticActionFromText as Qs, AuditedPackageExpectation as Qt, RecoveryOptions as R, GuardItemKind as Ra, classifyTaskIntent as Ri, GitEffectExecution as Rn, removalIsPartiallyKnown as Ro, ACTIVE_HOST_COHORT_ID as Rr, SEMANTIC_ACTIONS as Rs, ManifestIssue as Rt, latestRootInstruction as S, DeriveConfig as Sa, MIN_SUPPORTED_HOST_VERSION as Si, HostTrustAcquisitionOptions as Sn, CapabilityRemedy as So, capabilityRemedyPhrase as Sr, presentExplanationHead as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, DerivedEnvelope as Ta, SUPPORTED_HOST_VERSIONS as Ti, acquireHostTrust as Tn, DependencyStatus as To, itemDiagnosis as Tr, reportingHeadGoverns as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, MessageCoverage as Ua, parseConfirmationMessage as Ui, LinearCommitReadback as Un, GRANTED_QUALIFICATION as Uo, DEFAULT_HOST_LOCK as Ur, SemanticAction as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, GuardProjection as Va, ParsedConfirmation as Vi, GitPrestateEnvelope as Vn, Executee as Vo, AuditedExecutable as Vr, STOP_PROTOCOL_VERSION_V2 as Vs, ClaimedMessage as Vt, closingHint as W, NeedsReviewFact as Wa, CheckpointResult as Wi, commitIndexSnapshotDigest as Wn, InterpretOptions as Wo, EXPECTED_HOST_PACKAGES as Wr, StatefulAction as Ws, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, TargetSource as Xa, captureClause as Xi, revalidateGitPrestate as Xn, clarifiedSpanOf as Xo, HostAuditProvenance as Xr, requestedTargetMatchesResolved as Xs, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, TargetCaptureStatus as Ya, ClauseSegment as Yi, parseGitCommandManifest as Yn, actionVerbMatches as Yo, HOST_COHORTS as Yr, requestedTargetAuthorizesMutation as Ys, lifecyclePhase as Yt, PROOF_KINDS as Z, TargetSourceKind as Za, captureItem as Zi, verifiedLinearCommitReadback as Zn, clauseAsksOwnQuestion as Zo, HostCapabilityEvaluation as Zr, semanticActionFromCommand as Zs, ActiveProfileHostLock as Zt, decideTurnStopping as _, BindingActionClosure as _a, selectHostCohort as _i, readActiveHostGraph as _n, rebindAttemptKey as _o, CertificationSupport as _r, maskCodeSpans as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, BOUNDARY_RECORD_PREFIX as aa, sanitizeUrl as ac, HostLockStatus as ai, auditedHostImplementation as an, ReleaseGateDecision as ao, parseShellCommand as ar, interpretClause as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, DeferAuthorization as ba, HostVersionStatus as bi, verifyComposedHostLockDump as bn, CapabilityFact as bo, TaskKind as br, opensConditionLead as bs, proofDigestV2 as bt, CurrentActionBasis as c, BoundaryRequest as ca, HostToolSurface as ci, evaluateConfiguredHostLock as cn, ReleaseSettlement as co, ToolCallInput as cr, isExecutableItem as cs, ProofObligation as ct, TurnStoppingDecision as d, availableBoundaryQualifications as da, evaluateExternalWaitCapability as di, injectActiveProfileHostLock as dn, RebindArgs as do, evidenceFromPersistedToolResult as dr, isOpenObligation as ds, SessionQuery as dt, extractArtifactPaths as ea, validateActionTarget as ec, HostCohort as ei, TargetHostGraph as en, VerificationContract as eo, ParsedShell as er, explanationHasActionResidue as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, effectuateBoundary as fa, evaluateGraphDerivedHostLock as fi, inspectTargetHostGraph as fn, RebindProposal as fo, extractTextContent as fr, isQuestionScopeNeedingReview as fs, SessionQueryV2 as ft, decideTurnBoundary as g, AssetObligation as ga, hostVersionFromPackages as gi, prepareTargetHostTrust as gn, proposeRebindV042 as go, withDurability as gr, legacyQuestionReadingIsInformational as gs, createProofManifest as gt, currentActionBases as h, AssetInterpretationFact as ha, evaluateToolSurfaceCapability as hi, prepareActiveHostTrust as hn, proposeRebindOutcome as ho, persistedToolResultStatus as hr, kindOfScope as hs, canonicalProjection as ht, supersedeItem as i, segmentClauses as ia, sanitizeClauseText as ic, HostLockEvaluation as ii, auditedForegroundRenderers as in, PackageRow as io, parsePwshCommand as ir, hasWorkPredicate as is, ProofKindCapability as it, snapshotSessionEvents as j, ExternalOperation as ja, AuthorityBlock as ji, GIT_COMMAND_MANIFEST_IDS as jn, RemovalOutcomeReport as jo, PROTOCOL_V4_NOTICE as jr, ACTION_MANIFEST as js, EvidenceFacetCoverage as jt, SessionApiError as k, EvidenceRole as ka, satisfiesSupportedHostRange as ki, registryArchiveFiles as kn, ProcessFactSource as ko, DEFAULT_DELEGATION_TOOL_NAMES as kr, statefulActionsOfScope as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, GoalActivationState as la, bindExecutableIdentity as li, hostLockContextFromComposedDump as ln, BoundedSource as lo, ToolResultInput as lr, isExplanationScope as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, qualifyBoundary as ma, evaluateHostLock as mi, packageRowsFromPnpmLock as mn, proposeRebind as mo, isDeterministicCheck as mr, itemHoldsExecutionAuthority as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, extractOperation as na, digestStrings as nc, HostCohortSelectionReason as ni, auditedDefaultWorkdirHost as nn, WorkUnit as no, canonicalArgvFromCommand as nr, hasOrderedCoordination as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, BoundaryEffectuation as oa, sha256 as oc, HostPlatform as oi, combineHostPolicy as on, ReleaseObservedIdentity as oo, goalCompletionDenial as or, interpretMessage as os, ProofManifest as ot, assessmentOutcomePredicate as p, isCurrentAcceptedBoundary as pa, evaluateHostCapability as pi, packageRowsFromActiveGraph as pn, confirmRebind as po, extractToolSubject as pr, isRestatement as ps, bindProofToProjection as pt, recoveryTitle as q, SourceSpan as qa, certifyCheckpoint as qi, executeRevalidatedGitEffect as qn, QualificationStatus as qo, GOAL_HOST_PACKAGES as qr, isStatefulAction as qs, firstStepGuidance as qt, projectCoreV2 as r, isInformationalMessage as ra, normalizeClause as rc, HostLockContext as ri, auditedDefaultWorkdirProvider as rn, createProjection as ro, isRunExecutable as rr, hasQuestionScope as rs, ProofKind as rt, CompletionDisposition as s, BoundaryQualification as sa, HostProfileKind as si, evaluateActiveHostLock as sn, ReleaseOperation as so, hasCurrentCertificate as sr, introducesActionClause as ss, ProofManifestV2 as st, RC020_RC1_HOST_PACKAGES as t, extractMethod as ta, canonicalizePath as tc, HostCohortSelection as ti, activeRendererModule as tn, WaitAuthorization as to, ShellParseStatus as tr, governedClauseRestrictsExecution as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, GoalBoundaryAccess as ua, bindLiveGoalCapability as ui, hostLockRowsFromComposedDump as un, ProposeOutcome as uo, ToolSubject as ur, isInformationalFragment as us, ProofSurface as ut, decisionBoundaryKey as v, BoundaryDisposition as va, HOST_VALIDATED_VERSIONS as vi, resolveActiveProfileHostLock as vn, rebindResponse as vo, DiagnosisNextAction as vr, maskQuotedSpans as vs, proofCapabilityReport as vt, progressFingerprint as w, DeriveScope as wa, SUPPORTED_HOST_RANGE as wi, HostTrustedPackage as wn, DeclaredOperationResult as wo, evidenceAvailabilityReason as wr, questionHeadsClause as ws, proofV2Rejection as wt, latestAssistantText as x, DelegationRef as xa, LATEST_TESTED_HOST_VERSION as xi, HostRebindTrust as xn, CapabilityGap as xo, UnifiedItemDiagnosis as xr, opensWithDirective as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, BoundaryQualificationKind as ya, HostVersionDecision as yi, resolveInstalledHostLock as yn, replayRebindResult as yo, Repairability as yr, namedActions as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, GuardItemStatus as za, classifyUserInteraction as zi, GitEffectRunner as zn, AuthorityDisposition as zo, ACTIVE_HOST_COHORT_IDS as zr, STATEFUL_ACTIONS as zs, OperationVerbEntry as zt };
+//#region src/domain/rc020-rc2-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.0-rc.2 tarballs (upstream
+* 639ed015397290b3745d163aafe02ffee4aa3f84). Native platform acceptance
+* remains a separate, currently pending fact. The rc.1 rows remain available
+* in `rc020-rc1-host.ts` as historical evidence. */
+declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
+//#endregion
+export { PROOF_KINDS_V2 as $, GuardCheckpoint as $a, authorityCaptureCounts as $i, GitCommandAccepted as $n, capabilityConsequence as $o, applyUpgradeEligibility as $r, ActionSpec as $s, AuditedPackageExpectation as $t, SessionApiError as A, availableBoundaryQualifications as Aa, evaluateExternalWaitCapability as Ai, DesktopAppRuntime as An, RebindArgs as Ao, evidenceFromPersistedToolResult as Ar, isOpenObligation as As, validateProofManifest as At, V6_ORDINARY_COMPLETION_RULE as B, DelegationRef as Ba, LATEST_TESTED_HOST_VERSION as Bi, HostRebindTrust as Bn, CapabilityGap as Bo, UnifiedItemDiagnosis as Br, opensWithDirective as Bs, OperationVerbEntry as Bt, latestRootInstruction as C, segmentClauses as Ca, sanitizeClauseText as Cc, HostLockEvaluation as Ci, resolveInstalledHostLock as Cn, PackageRow as Co, parsePwshCommand as Cr, hasWorkPredicate as Cs, proofHostSurfacesOf as Ct, v6TestPredicate as D, BoundaryRequest as Da, HostToolSurface as Di, DESKTOP_IDENTITY_FACTS as Dn, ReleaseSettlement as Do, ToolCallInput as Dr, isExecutableItem as Ds, scopeCoverageDigest as Dt, testOutcomePredicate as E, BoundaryQualification as Ea, HostProfileKind as Ei, AsarIndex as En, ReleaseOperation as Eo, hasCurrentCertificate as Er, introducesActionClause as Es, requiredSubjectsOf as Et, CLEANUP_CONDITION_RULE_SHORT as F, AssetObligation as Fa, hostVersionFromPackages as Fi, readAsarIndex as Fn, proposeRebindV042 as Fo, withDurability as Fr, legacyQuestionReadingIsInformational as Fs, evidenceMatchesItem as Ft, closingHint as G, EvidenceBinding as Ga, compareHostVersions as Gi, hostTrustDigest as Gn, DerivedProcessFacts as Go, nativeFileTwoRole as Gr, restatedContentOf as Gs, FirstStepPreviewInput as Gt, V6_ORDINARY_COMPLETION_RULE_SHORT as H, DeriveResult as Ha, ParsedHostVersion as Hi, HostTrustError as Hn, DEPENDENCY_FREE_ONLY_CONDITION as Ho, deriveItemDiagnosis as Hr, qualificationOfClause as Hs, ClaimedMessage as Ht, DEFAULT_RECOVERY_CHAR_BUDGET as I, BindingActionClosure as Ia, selectHostCohort as Ii, readDesktopAppRuntime as In, rebindAttemptKey as Io, CertificationSupport as Ir, maskCodeSpans as Is, isVerifyingCapability as It, recoveryTitle as J, EvidenceRole as Ja, satisfiesSupportedHostRange as Ji, registryArchiveFiles as Jn, ProcessFactSource as Jo, DEFAULT_DELEGATION_TOOL_NAMES as Jr, statefulActionsOfScope as Js, firstStepGuidance as Jt, openItems as K, EvidenceOutcome as Ka, evaluateMinimumHostVersion as Ki, parseHostTrust as Kn, OperationAttribution as Ko, relevantEvidence as Kr, semanticActionOfScope as Ks, LifecyclePhase as Kt, MIN_RECOVERY_CHAR_BUDGET as L, BoundaryDisposition as La, HOST_VALIDATED_VERSIONS as Li, readDesktopDependency as Ln, rebindResponse as Lo, DiagnosisNextAction as Lr, maskQuotedSpans as Ls, COMMAND_SURFACE_MANIFEST as Lt, snapshotSessionEvents as M, isCurrentAcceptedBoundary as Ma, evaluateHostCapability as Mi, auditDesktopInstalledImplementation as Mn, confirmRebind as Mo, extractToolSubject as Mr, isRestatement as Ms, EvidenceFacetCoverage as Mt, CLEANUP_CONDITION_RULE as N, qualifyBoundary as Na, evaluateHostLock as Ni, hasDesktopImporterState as Nn, proposeRebind as No, isDeterministicCheck as Nr, itemHoldsExecutionAuthority as Ns, bindingSatisfies as Nt, SESSION_API_UNSUPPORTED as O, GoalActivationState as Oa, bindExecutableIdentity as Oi, DESKTOP_PROFILE_PACKAGE_NAME as On, BoundedSource as Oo, ToolResultInput as Or, isExplanationScope as Os, sessionQuery as Ot, CLEANUP_CONDITION_RULE_COMPACT as P, AssetInterpretationFact as Pa, evaluateToolSurfaceCapability as Pi, readAsarFile as Pn, proposeRebindOutcome as Po, persistedToolResultStatus as Pr, kindOfScope as Ps, evidenceCoverage as Pt, PROOF_KINDS as Q, GuardBoundary as Qa, AuthorityKind as Qi, GitAdapterAction as Qn, admissibleForRemoval as Qo, PROTOCOL_V6_NOTICE as Qr, ActionManifest as Qs, ActiveProfileHostLock as Qt, RecoveryCause as R, BoundaryQualificationKind as Ra, HostVersionDecision as Ri, readDesktopTargetGraph as Rn, replayRebindResult as Ro, Repairability as Rr, namedActions as Rs, CommandSurfaceManifest as Rt, latestAssistantText as S, isInformationalMessage as Sa, normalizeClause as Sc, HostLockContext as Si, resolveDesktopProfileHostLock as Sn, createProjection as So, isRunExecutable as Sr, hasQuestionScope as Ss, proofEvidenceConstraints as St, progressFingerprint as T, BoundaryEffectuation as Ta, sha256 as Tc, HostPlatform as Ti, verifyComposedHostLockDump as Tn, ReleaseObservedIdentity as To, goalCompletionDenial as Tr, interpretMessage as Ts, proofV2Rejection as Tt, carriesCleanupCondition as U, DeriveScope as Ua, SUPPORTED_HOST_RANGE as Ui, HostTrustedPackage as Un, DeclaredOperationResult as Uo, evidenceAvailabilityReason as Ur, questionHeadsClause as Us, FIRST_STEP_GUIDANCE as Ut, V6_ORDINARY_COMPLETION_RULE_COMPACT as V, DeriveConfig as Va, MIN_SUPPORTED_HOST_VERSION as Vi, HostTrustAcquisitionOptions as Vn, CapabilityRemedy as Vo, capabilityRemedyPhrase as Vr, presentExplanationHead as Vs, validateManifest as Vt, cleanupConditionFor as W, DerivedEnvelope as Wa, SUPPORTED_HOST_VERSIONS as Wi, acquireHostTrust as Wn, DependencyStatus as Wo, itemDiagnosis as Wr, reportingHeadGoverns as Ws, FirstStepInjection as Wt, v6CurrentRootBoundaries as X, ExternalOperation as Xa, AuthorityBlock as Xi, GIT_COMMAND_MANIFEST_IDS as Xn, RemovalOutcomeReport as Xo, PROTOCOL_V4_NOTICE as Xr, ACTION_MANIFEST as Xs, lifecyclePhase as Xt, renderRecoveryPacket as Y, ExpectedTransition as Ya, currentContractDigest as Yi, registryArchiveModules as Yn, ProcessOutcomeReason as Yo, PROTOCOL_V3_NOTICE as Yr, verbIsNegated as Ys, firstStepGuidanceV6 as Yt, PROOF_CAPABILITY_MATRIX as Z, GoalRef as Za, AuthorityBlockKind as Zi, GIT_COMMAND_TEMPLATES as Zn, actionHasCertificationPath as Zo, PROTOCOL_V5_NOTICE as Zr, ACTION_MANIFEST_VERSION as Zs, previewFirstStepInjection as Zt, decideTurnBoundary as _, classifyClause as _a, semanticActionFromText as _c, HostCapabilityId as _i, prepareActiveHostTrust as _n, TargetTuple as _o, CanonicalArgv as _r, clauseIsGoverned as _s, createProofManifest as _t, supersedeItem as a, CONFIRM_LINE_PATTERN as aa, STOP_PROTOCOL_VERSION as ac, ACTIVE_HOST_LAUNCHER_VERSION as ai, auditedForegroundRenderers as an, GuardOperation as ao, GitPrestateCheck as ar, DirectiveClass as as, ProofKindCapability as at, isRootPauseRequest as b, extractMethod as ba, canonicalizePath as bc, HostCohortSelection as bi, readActiveHostGraph as bn, WaitAuthorization as bo, ShellParseStatus as br, governedClauseRestrictsExecution as bs, proofDigest as bt, CompletionDisposition as c, parseConfirmationMessage as ca, SemanticAction as cc, DEFAULT_HOST_LOCK as ci, evaluateActiveHostLock as cn, MessageCoverage as co, LinearCommitReadback as cr, GRANTED_QUALIFICATION as cs, ProofManifestV2 as ct, NO_PROGRESS_TURNS_BEFORE_STOP as d, bindingIndividuallyAccepted as da, boundedArtifactChoiceMatches as dc, ExecutableIdentityBinding as di, hostLockRowsFromComposedDump as dn, PersistenceAuthorization as do, createGitPrestateEnvelope as dr, QualificationReason as ds, ProofSurface as dt, segmentAuthorityBlocks as ea, BOUNDED_ARTIFACT_TYPES as ec, deriveProjection as ei, HostProfileError as en, GuardEvidence as eo, GitCommandManifest as er, capabilityFactOf as es, PROOF_MANIFEST_DOMAIN_V2 as et, TurnStoppingDecision as f, certifyCheckpoint as fa, isStatefulAction as fc, GOAL_HOST_PACKAGES as fi, injectActiveProfileHostLock as fn, SourceSpan as fo, executeRevalidatedGitEffect as fr, QualificationStatus as fs, SessionQuery as ft, currentActionBases as g, captureItem as ga, semanticActionFromCommand as gc, HostCapabilityEvaluation as gi, packageRowsFromPnpmLock as gn, TargetSourceKind as go, verifiedLinearCommitReadback as gr, clauseAsksOwnQuestion as gs, canonicalProjection as gt, classifyCompletionClaim as h, captureClause as ha, requestedTargetMatchesResolved as hc, HostAuditProvenance as hi, packageRowsFromActiveGraph as hn, TargetSource as ho, revalidateGitPrestate as hr, clarifiedSpanOf as hs, bindProofV2ToProjection as ht, projectCoreV2 as i, classifyUserInteraction as ia, STATEFUL_ACTIONS as ic, ACTIVE_HOST_COHORT_IDS as ii, auditedDefaultWorkdirProvider as in, GuardItemStatus as io, GitEffectRunner as ir, AuthorityDisposition as is, ProofKind as it, V4SessionLike as j, effectuateBoundary as ja, evaluateGraphDerivedHostLock as ji, DesktopTargetGraph as jn, RebindProposal as jo, extractTextContent as jr, isQuestionScopeNeedingReview as js, validateProofManifestV2 as jt, SESSION_EVENT_ENVELOPE_INVALID as k, GoalBoundaryAccess as ka, bindLiveGoalCapability as ki, DESKTOP_RUNTIME_PACKAGE_NAME as kn, ProposeOutcome as ko, ToolSubject as kr, isInformationalFragment as ks, sessionQueryV2 as kt, CurrentActionBasis as l, CheckpointResult as la, StatefulAction as lc, EXPECTED_HOST_PACKAGES as li, evaluateConfiguredHostLock as ln, NeedsReviewFact as lo, commitIndexSnapshotDigest as lr, InterpretOptions as ls, ProofObligation as lt, assessmentOutcomePredicate as m, ClauseSegment as ma, requestedTargetAuthorizesMutation as mc, HOST_COHORTS as mi, inspectTargetHostGraph as mn, TargetCaptureStatus as mo, parseGitCommandManifest as mr, actionVerbMatches as ms, bindProofToProjection as mt, RC020_RC1_HOST_PACKAGES as n, UserInteractionKind as na, CERTIFICATE_VERSION_V2 as nc, rootLocatorFlavor as ni, activeRendererModule as nn, GuardItem as no, GitCommandRejected as nr, removalIsComplete as ns, PROOF_PROTOCOL_VERSION_V2 as nt, AssistantOutcomeObservation as o, ParsedConfirmation as oa, STOP_PROTOCOL_VERSION_V2 as oc, AuditedExecutable as oi, auditedHostImplementation as on, GuardProjection as oo, GitPrestateEnvelope as or, Executee as os, ProofKindV2 as ot, assessmentAction as p, CaptureScope as pa, requestedIdentityKey as pc, HOST_CAPABILITY_PACKAGE_GROUPS as pi, inspectDesktopTargetGraph as pn, TargetCaptureReasonCode as po, gitCommandMatchesTarget as pr, ScopeInterpretation as ps, SessionQueryV2 as pt, recoveryDigest as q, EvidenceParseStatus as qa, parseHostVersion as qi, qualifyHostTrust as qn, ProcessExitStatus as qo, CAPTURE_V042_NOTICE as qr, splitTextFragments as qs, claimedBatchHasRealRootInput as qt, projectSessionCoreV2 as r, classifyTaskIntent as ra, SEMANTIC_ACTIONS as rc, ACTIVE_HOST_COHORT_ID as ri, auditedDefaultWorkdirHost as rn, GuardItemKind as ro, GitEffectExecution as rr, removalIsPartiallyKnown as rs, ProofHostSurface as rt, CONTROL_RECORD_PREFIX as s, isFrozenV042RebindResponse as sa, SUPPORTED_EVIDENCE_ADAPTERS as sc, BASE_HOST_PACKAGES as si, combineHostPolicy as sn, HostStatus as so, GitTargetIdentity as sr, ExecutionQualification as ss, ProofManifest as st, RC020_RC2_HOST_PACKAGES as t, TaskIntent as ta, CERTIFICATE_VERSION as tc, legacyRecordsNeedingReview as ti, TargetHostGraph as tn, GuardIntegrity as to, GitCommandParseResult as tr, partialFailureOf as ts, PROOF_PROTOCOL_VERSION as tt, NO_PROGRESS_RECORD_PREFIX as u, RejectedBinding as ua, actionCompatible as uc, ExecutableIdentity as ui, hostLockContextFromComposedDump as un, NeedsReviewReason as uo, commitTreeSnapshotDigest as ur, LEGACY_QUALIFICATION as us, ProofObligationV2 as ut, decideTurnStopping as v, environmentDefaultRepositoryTarget as va, validateActionManifest as vc, HostCapabilityRequest as vi, prepareDesktopHostTrust as vn, TargetValue as vo, CanonicalCommandSurface as vr, clauseIsProtected as vs, createProofManifestV2 as vt, observeAssistantOutcome as w, BOUNDARY_RECORD_PREFIX as wa, sanitizeUrl as wc, HostLockStatus as wi, revalidateDesktopCoreLock as wn, ReleaseGateDecision as wo, parseShellCommand as wr, interpretClause as ws, proofOperationMatches as wt, isWholeTaskCompletionClaim as x, extractOperation as xa, digestStrings as xc, HostCohortSelectionReason as xi, resolveActiveProfileHostLock as xn, WorkUnit as xo, canonicalArgvFromCommand as xr, hasOrderedCoordination as xs, proofDigestV2 as xt, decisionBoundaryKey as y, extractArtifactPaths as ya, validateActionTarget as yc, HostCohort as yi, prepareTargetHostTrust as yn, VerificationContract as yo, ParsedShell as yr, explanationHasActionResidue as ys, proofCapabilityReport as yt, RecoveryOptions as z, DeferAuthorization as za, HostVersionStatus as zi, writeDesktopRuntimeReceipt as zn, CapabilityFact as zo, TaskKind as zr, opensConditionLead as zs, ManifestIssue as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as TargetValue, $i as environmentDefaultRepositoryTarget, $n as CanonicalCommandSurface, $o as clauseIsProtected, $r as HostCapabilityRequest, $s as validateActionManifest, $t as HostProfileError, A as V4SessionLike, Aa as ExpectedTransition, Ai as currentContractDigest, An as registryArchiveModules, Ao as ProcessOutcomeReason, Ar as PROTOCOL_V3_NOTICE, As as verbIsNegated, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as GuardOperation, Bi as CONFIRM_LINE_PATTERN, Bn as GitPrestateCheck, Bo as DirectiveClass, Br as ACTIVE_HOST_LAUNCHER_VERSION, Bs as STOP_PROTOCOL_VERSION, Bt as validateManifest, C as observeAssistantOutcome, Ca as DeriveResult, Ci as ParsedHostVersion, Cn as HostTrustError, Co as DEPENDENCY_FREE_ONLY_CONDITION, Cr as deriveItemDiagnosis, Cs as qualificationOfClause, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as EvidenceOutcome, Di as evaluateMinimumHostVersion, Dn as parseHostTrust, Do as OperationAttribution, Dr as relevantEvidence, Ds as semanticActionOfScope, Dt as sessionQuery, E as v6TestPredicate, Ea as EvidenceBinding, Ei as compareHostVersions, En as hostTrustDigest, Eo as DerivedProcessFacts, Er as nativeFileTwoRole, Es as restatedContentOf, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as GuardEvidence, Fi as segmentAuthorityBlocks, Fn as GitCommandManifest, Fo as capabilityFactOf, Fr as deriveProjection, Fs as BOUNDED_ARTIFACT_TYPES, Ft as isVerifyingCapability, G as openItems, Ga as NeedsReviewReason, Gi as RejectedBinding, Gn as commitTreeSnapshotDigest, Go as LEGACY_QUALIFICATION, Gr as ExecutableIdentity, Gs as actionCompatible, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as HostStatus, Hi as isFrozenV042RebindResponse, Hn as GitTargetIdentity, Ho as ExecutionQualification, Hr as BASE_HOST_PACKAGES, Hs as SUPPORTED_EVIDENCE_ADAPTERS, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as GuardIntegrity, Ii as TaskIntent, In as GitCommandParseResult, Io as partialFailureOf, Ir as legacyRecordsNeedingReview, Is as CERTIFICATE_VERSION, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as TargetCaptureReasonCode, Ji as CaptureScope, Jn as gitCommandMatchesTarget, Jo as ScopeInterpretation, Jr as HOST_CAPABILITY_PACKAGE_GROUPS, Js as requestedIdentityKey, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as PersistenceAuthorization, Ki as bindingIndividuallyAccepted, Kn as createGitPrestateEnvelope, Ko as QualificationReason, Kr as ExecutableIdentityBinding, Ks as boundedArtifactChoiceMatches, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as GuardItem, Li as UserInteractionKind, Ln as GitCommandRejected, Lo as removalIsComplete, Lr as rootLocatorFlavor, Ls as CERTIFICATE_VERSION_V2, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as GoalRef, Mi as AuthorityBlockKind, Mn as GIT_COMMAND_TEMPLATES, Mo as actionHasCertificationPath, Mr as PROTOCOL_V5_NOTICE, Ms as ACTION_MANIFEST_VERSION, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as GuardBoundary, Ni as AuthorityKind, Nn as GitAdapterAction, No as admissibleForRemoval, Nr as PROTOCOL_V6_NOTICE, Ns as ActionManifest, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as EvidenceParseStatus, Oi as parseHostVersion, On as qualifyHostTrust, Oo as ProcessExitStatus, Or as CAPTURE_V042_NOTICE, Os as splitTextFragments, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as GuardCheckpoint, Pi as authorityCaptureCounts, Pn as GitCommandAccepted, Po as capabilityConsequence, Pr as applyUpgradeEligibility, Ps as ActionSpec, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as TargetTuple, Qi as classifyClause, Qn as CanonicalArgv, Qo as clauseIsGoverned, Qr as HostCapabilityId, Qs as semanticActionFromText, Qt as AuditedPackageExpectation, R as RecoveryOptions, Ra as GuardItemKind, Ri as classifyTaskIntent, Rn as GitEffectExecution, Ro as removalIsPartiallyKnown, Rr as ACTIVE_HOST_COHORT_ID, Rs as SEMANTIC_ACTIONS, Rt as ManifestIssue, S as latestRootInstruction, Sa as DeriveConfig, Si as MIN_SUPPORTED_HOST_VERSION, Sn as HostTrustAcquisitionOptions, So as CapabilityRemedy, Sr as capabilityRemedyPhrase, Ss as presentExplanationHead, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as DerivedEnvelope, Ti as SUPPORTED_HOST_VERSIONS, Tn as acquireHostTrust, To as DependencyStatus, Tr as itemDiagnosis, Ts as reportingHeadGoverns, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as MessageCoverage, Ui as parseConfirmationMessage, Un as LinearCommitReadback, Uo as GRANTED_QUALIFICATION, Ur as DEFAULT_HOST_LOCK, Us as SemanticAction, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as GuardProjection, Vi as ParsedConfirmation, Vn as GitPrestateEnvelope, Vo as Executee, Vr as AuditedExecutable, Vs as STOP_PROTOCOL_VERSION_V2, Vt as ClaimedMessage, W as closingHint, Wa as NeedsReviewFact, Wi as CheckpointResult, Wn as commitIndexSnapshotDigest, Wo as InterpretOptions, Wr as EXPECTED_HOST_PACKAGES, Ws as StatefulAction, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as TargetSource, Xi as captureClause, Xn as revalidateGitPrestate, Xo as clarifiedSpanOf, Xr as HostAuditProvenance, Xs as requestedTargetMatchesResolved, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as TargetCaptureStatus, Yi as ClauseSegment, Yn as parseGitCommandManifest, Yo as actionVerbMatches, Yr as HOST_COHORTS, Ys as requestedTargetAuthorizesMutation, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as TargetSourceKind, Zi as captureItem, Zn as verifiedLinearCommitReadback, Zo as clauseAsksOwnQuestion, Zr as HostCapabilityEvaluation, Zs as semanticActionFromCommand, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as BindingActionClosure, _i as selectHostCohort, _n as readActiveHostGraph, _o as rebindAttemptKey, _r as CertificationSupport, _s as maskCodeSpans, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as BOUNDARY_RECORD_PREFIX, ac as sanitizeUrl, ai as HostLockStatus, an as auditedHostImplementation, ao as ReleaseGateDecision, ar as parseShellCommand, as as interpretClause, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as DeferAuthorization, bi as HostVersionStatus, bn as verifyComposedHostLockDump, bo as CapabilityFact, br as TaskKind, bs as opensConditionLead, bt as proofDigestV2, c as CurrentActionBasis, ca as BoundaryRequest, ci as HostToolSurface, cn as evaluateConfiguredHostLock, co as ReleaseSettlement, cr as ToolCallInput, cs as isExecutableItem, ct as ProofObligation, d as TurnStoppingDecision, da as availableBoundaryQualifications, di as evaluateExternalWaitCapability, dn as injectActiveProfileHostLock, do as RebindArgs, dr as evidenceFromPersistedToolResult, ds as isOpenObligation, dt as SessionQuery, ea as extractArtifactPaths, ec as validateActionTarget, ei as HostCohort, en as TargetHostGraph, eo as VerificationContract, er as ParsedShell, es as explanationHasActionResidue, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as effectuateBoundary, fi as evaluateGraphDerivedHostLock, fn as inspectTargetHostGraph, fo as RebindProposal, fr as extractTextContent, fs as isQuestionScopeNeedingReview, ft as SessionQueryV2, g as decideTurnBoundary, ga as AssetObligation, gi as hostVersionFromPackages, gn as prepareTargetHostTrust, go as proposeRebindV042, gr as withDurability, gs as legacyQuestionReadingIsInformational, gt as createProofManifest, h as currentActionBases, ha as AssetInterpretationFact, hi as evaluateToolSurfaceCapability, hn as prepareActiveHostTrust, ho as proposeRebindOutcome, hr as persistedToolResultStatus, hs as kindOfScope, ht as canonicalProjection, i as supersedeItem, ia as segmentClauses, ic as sanitizeClauseText, ii as HostLockEvaluation, in as auditedForegroundRenderers, io as PackageRow, ir as parsePwshCommand, is as hasWorkPredicate, it as ProofKindCapability, j as snapshotSessionEvents, ja as ExternalOperation, ji as AuthorityBlock, jn as GIT_COMMAND_MANIFEST_IDS, jo as RemovalOutcomeReport, jr as PROTOCOL_V4_NOTICE, js as ACTION_MANIFEST, jt as EvidenceFacetCoverage, k as SessionApiError, ka as EvidenceRole, ki as satisfiesSupportedHostRange, kn as registryArchiveFiles, ko as ProcessFactSource, kr as DEFAULT_DELEGATION_TOOL_NAMES, ks as statefulActionsOfScope, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as GoalActivationState, li as bindExecutableIdentity, ln as hostLockContextFromComposedDump, lo as BoundedSource, lr as ToolResultInput, ls as isExplanationScope, lt as ProofObligationV2, m as classifyCompletionClaim, ma as qualifyBoundary, mi as evaluateHostLock, mn as packageRowsFromPnpmLock, mo as proposeRebind, mr as isDeterministicCheck, ms as itemHoldsExecutionAuthority, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as extractOperation, nc as digestStrings, ni as HostCohortSelectionReason, nn as auditedDefaultWorkdirHost, no as WorkUnit, nr as canonicalArgvFromCommand, ns as hasOrderedCoordination, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as BoundaryEffectuation, oc as sha256, oi as HostPlatform, on as combineHostPolicy, oo as ReleaseObservedIdentity, or as goalCompletionDenial, os as interpretMessage, ot as ProofManifest, p as assessmentOutcomePredicate, pa as isCurrentAcceptedBoundary, pi as evaluateHostCapability, pn as packageRowsFromActiveGraph, po as confirmRebind, pr as extractToolSubject, ps as isRestatement, pt as bindProofToProjection, q as recoveryTitle, qa as SourceSpan, qi as certifyCheckpoint, qn as executeRevalidatedGitEffect, qo as QualificationStatus, qr as GOAL_HOST_PACKAGES, qs as isStatefulAction, qt as firstStepGuidance, r as projectCoreV2, ra as isInformationalMessage, rc as normalizeClause, ri as HostLockContext, rn as auditedDefaultWorkdirProvider, ro as createProjection, rr as isRunExecutable, rs as hasQuestionScope, rt as ProofKind, s as CompletionDisposition, sa as BoundaryQualification, si as HostProfileKind, sn as evaluateActiveHostLock, so as ReleaseOperation, sr as hasCurrentCertificate, ss as introducesActionClause, st as ProofManifestV2, t as RC020_RC1_HOST_PACKAGES, ta as extractMethod, tc as canonicalizePath, ti as HostCohortSelection, tn as activeRendererModule, to as WaitAuthorization, tr as ShellParseStatus, ts as governedClauseRestrictsExecution, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as GoalBoundaryAccess, ui as bindLiveGoalCapability, un as hostLockRowsFromComposedDump, uo as ProposeOutcome, ur as ToolSubject, us as isInformationalFragment, ut as ProofSurface, v as decisionBoundaryKey, va as BoundaryDisposition, vi as HOST_VALIDATED_VERSIONS, vn as resolveActiveProfileHostLock, vo as rebindResponse, vr as DiagnosisNextAction, vs as maskQuotedSpans, vt as proofCapabilityReport, w as progressFingerprint, wa as DeriveScope, wi as SUPPORTED_HOST_RANGE, wn as HostTrustedPackage, wo as DeclaredOperationResult, wr as evidenceAvailabilityReason, ws as questionHeadsClause, wt as proofV2Rejection, x as latestAssistantText, xa as DelegationRef, xi as LATEST_TESTED_HOST_VERSION, xn as HostRebindTrust, xo as CapabilityGap, xr as UnifiedItemDiagnosis, xs as opensWithDirective, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as BoundaryQualificationKind, yi as HostVersionDecision, yn as resolveInstalledHostLock, yo as replayRebindResult, yr as Repairability, ys as namedActions, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as GuardItemStatus, zi as classifyUserInteraction, zn as GitEffectRunner, zo as AuthorityDisposition, zr as ACTIVE_HOST_COHORT_IDS, zs as STATEFUL_ACTIONS, zt as OperationVerbEntry } from "./index-jKw6mANp.js";
+import { $ as PROOF_KINDS_V2, $a as GuardCheckpoint, $i as authorityCaptureCounts, $n as GitCommandAccepted, $o as capabilityConsequence, $r as applyUpgradeEligibility, $s as ActionSpec, $t as AuditedPackageExpectation, A as SessionApiError, Aa as availableBoundaryQualifications, Ai as evaluateExternalWaitCapability, An as DesktopAppRuntime, Ao as RebindArgs, Ar as evidenceFromPersistedToolResult, As as isOpenObligation, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as DelegationRef, Bi as LATEST_TESTED_HOST_VERSION, Bn as HostRebindTrust, Bo as CapabilityGap, Br as UnifiedItemDiagnosis, Bs as opensWithDirective, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as segmentClauses, Cc as sanitizeClauseText, Ci as HostLockEvaluation, Cn as resolveInstalledHostLock, Co as PackageRow, Cr as parsePwshCommand, Cs as hasWorkPredicate, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BoundaryRequest, Di as HostToolSurface, Dn as DESKTOP_IDENTITY_FACTS, Do as ReleaseSettlement, Dr as ToolCallInput, Ds as isExecutableItem, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as BoundaryQualification, Ei as HostProfileKind, En as AsarIndex, Eo as ReleaseOperation, Er as hasCurrentCertificate, Es as introducesActionClause, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as AssetObligation, Fi as hostVersionFromPackages, Fn as readAsarIndex, Fo as proposeRebindV042, Fr as withDurability, Fs as legacyQuestionReadingIsInformational, Ft as evidenceMatchesItem, G as closingHint, Ga as EvidenceBinding, Gi as compareHostVersions, Gn as hostTrustDigest, Go as DerivedProcessFacts, Gr as nativeFileTwoRole, Gs as restatedContentOf, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeriveResult, Hi as ParsedHostVersion, Hn as HostTrustError, Ho as DEPENDENCY_FREE_ONLY_CONDITION, Hr as deriveItemDiagnosis, Hs as qualificationOfClause, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as BindingActionClosure, Ii as selectHostCohort, In as readDesktopAppRuntime, Io as rebindAttemptKey, Ir as CertificationSupport, Is as maskCodeSpans, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceRole, Ji as satisfiesSupportedHostRange, Jn as registryArchiveFiles, Jo as ProcessFactSource, Jr as DEFAULT_DELEGATION_TOOL_NAMES, Js as statefulActionsOfScope, Jt as firstStepGuidance, K as openItems, Ka as EvidenceOutcome, Ki as evaluateMinimumHostVersion, Kn as parseHostTrust, Ko as OperationAttribution, Kr as relevantEvidence, Ks as semanticActionOfScope, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as BoundaryDisposition, Li as HOST_VALIDATED_VERSIONS, Ln as readDesktopDependency, Lo as rebindResponse, Lr as DiagnosisNextAction, Ls as maskQuotedSpans, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as isCurrentAcceptedBoundary, Mi as evaluateHostCapability, Mn as auditDesktopInstalledImplementation, Mo as confirmRebind, Mr as extractToolSubject, Ms as isRestatement, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as qualifyBoundary, Ni as evaluateHostLock, Nn as hasDesktopImporterState, No as proposeRebind, Nr as isDeterministicCheck, Ns as itemHoldsExecutionAuthority, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as GoalActivationState, Oi as bindExecutableIdentity, On as DESKTOP_PROFILE_PACKAGE_NAME, Oo as BoundedSource, Or as ToolResultInput, Os as isExplanationScope, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as AssetInterpretationFact, Pi as evaluateToolSurfaceCapability, Pn as readAsarFile, Po as proposeRebindOutcome, Pr as persistedToolResultStatus, Ps as kindOfScope, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as GuardBoundary, Qi as AuthorityKind, Qn as GitAdapterAction, Qo as admissibleForRemoval, Qr as PROTOCOL_V6_NOTICE, Qs as ActionManifest, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as BoundaryQualificationKind, Ri as HostVersionDecision, Rn as readDesktopTargetGraph, Ro as replayRebindResult, Rr as Repairability, Rs as namedActions, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as isInformationalMessage, Sc as normalizeClause, Si as HostLockContext, Sn as resolveDesktopProfileHostLock, So as createProjection, Sr as isRunExecutable, Ss as hasQuestionScope, St as proofEvidenceConstraints, T as progressFingerprint, Ta as BoundaryEffectuation, Tc as sha256, Ti as HostPlatform, Tn as verifyComposedHostLockDump, To as ReleaseObservedIdentity, Tr as goalCompletionDenial, Ts as interpretMessage, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DeriveScope, Ui as SUPPORTED_HOST_RANGE, Un as HostTrustedPackage, Uo as DeclaredOperationResult, Ur as evidenceAvailabilityReason, Us as questionHeadsClause, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as DeriveConfig, Vi as MIN_SUPPORTED_HOST_VERSION, Vn as HostTrustAcquisitionOptions, Vo as CapabilityRemedy, Vr as capabilityRemedyPhrase, Vs as presentExplanationHead, Vt as validateManifest, W as cleanupConditionFor, Wa as DerivedEnvelope, Wi as SUPPORTED_HOST_VERSIONS, Wn as acquireHostTrust, Wo as DependencyStatus, Wr as itemDiagnosis, Ws as reportingHeadGoverns, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as ExternalOperation, Xi as AuthorityBlock, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as RemovalOutcomeReport, Xr as PROTOCOL_V4_NOTICE, Xs as ACTION_MANIFEST, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as ExpectedTransition, Yi as currentContractDigest, Yn as registryArchiveModules, Yo as ProcessOutcomeReason, Yr as PROTOCOL_V3_NOTICE, Ys as verbIsNegated, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as GoalRef, Zi as AuthorityBlockKind, Zn as GIT_COMMAND_TEMPLATES, Zo as actionHasCertificationPath, Zr as PROTOCOL_V5_NOTICE, Zs as ACTION_MANIFEST_VERSION, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as classifyClause, _c as semanticActionFromText, _i as HostCapabilityId, _n as prepareActiveHostTrust, _o as TargetTuple, _r as CanonicalArgv, _s as clauseIsGoverned, _t as createProofManifest, a as supersedeItem, aa as CONFIRM_LINE_PATTERN, ac as STOP_PROTOCOL_VERSION, ai as ACTIVE_HOST_LAUNCHER_VERSION, an as auditedForegroundRenderers, ao as GuardOperation, ar as GitPrestateCheck, as as DirectiveClass, at as ProofKindCapability, b as isRootPauseRequest, ba as extractMethod, bc as canonicalizePath, bi as HostCohortSelection, bn as readActiveHostGraph, bo as WaitAuthorization, br as ShellParseStatus, bs as governedClauseRestrictsExecution, bt as proofDigest, c as CompletionDisposition, ca as parseConfirmationMessage, cc as SemanticAction, ci as DEFAULT_HOST_LOCK, cn as evaluateActiveHostLock, co as MessageCoverage, cr as LinearCommitReadback, cs as GRANTED_QUALIFICATION, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as bindingIndividuallyAccepted, dc as boundedArtifactChoiceMatches, di as ExecutableIdentityBinding, dn as hostLockRowsFromComposedDump, do as PersistenceAuthorization, dr as createGitPrestateEnvelope, ds as QualificationReason, dt as ProofSurface, ea as segmentAuthorityBlocks, ec as BOUNDED_ARTIFACT_TYPES, ei as deriveProjection, en as HostProfileError, eo as GuardEvidence, er as GitCommandManifest, es as capabilityFactOf, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as certifyCheckpoint, fc as isStatefulAction, fi as GOAL_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as SourceSpan, fr as executeRevalidatedGitEffect, fs as QualificationStatus, ft as SessionQuery, g as currentActionBases, ga as captureItem, gc as semanticActionFromCommand, gi as HostCapabilityEvaluation, gn as packageRowsFromPnpmLock, go as TargetSourceKind, gr as verifiedLinearCommitReadback, gs as clauseAsksOwnQuestion, gt as canonicalProjection, h as classifyCompletionClaim, ha as captureClause, hc as requestedTargetMatchesResolved, hi as HostAuditProvenance, hn as packageRowsFromActiveGraph, ho as TargetSource, hr as revalidateGitPrestate, hs as clarifiedSpanOf, ht as bindProofV2ToProjection, i as projectCoreV2, ia as classifyUserInteraction, ic as STATEFUL_ACTIONS, ii as ACTIVE_HOST_COHORT_IDS, in as auditedDefaultWorkdirProvider, io as GuardItemStatus, ir as GitEffectRunner, is as AuthorityDisposition, it as ProofKind, j as V4SessionLike, ja as effectuateBoundary, ji as evaluateGraphDerivedHostLock, jn as DesktopTargetGraph, jo as RebindProposal, jr as extractTextContent, js as isQuestionScopeNeedingReview, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as GoalBoundaryAccess, ki as bindLiveGoalCapability, kn as DESKTOP_RUNTIME_PACKAGE_NAME, ko as ProposeOutcome, kr as ToolSubject, ks as isInformationalFragment, kt as sessionQueryV2, l as CurrentActionBasis, la as CheckpointResult, lc as StatefulAction, li as EXPECTED_HOST_PACKAGES, ln as evaluateConfiguredHostLock, lo as NeedsReviewFact, lr as commitIndexSnapshotDigest, ls as InterpretOptions, lt as ProofObligation, m as assessmentOutcomePredicate, ma as ClauseSegment, mc as requestedTargetAuthorizesMutation, mi as HOST_COHORTS, mn as inspectTargetHostGraph, mo as TargetCaptureStatus, mr as parseGitCommandManifest, ms as actionVerbMatches, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as UserInteractionKind, nc as CERTIFICATE_VERSION_V2, ni as rootLocatorFlavor, nn as activeRendererModule, no as GuardItem, nr as GitCommandRejected, ns as removalIsComplete, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as ParsedConfirmation, oc as STOP_PROTOCOL_VERSION_V2, oi as AuditedExecutable, on as auditedHostImplementation, oo as GuardProjection, or as GitPrestateEnvelope, os as Executee, ot as ProofKindV2, p as assessmentAction, pa as CaptureScope, pc as requestedIdentityKey, pi as HOST_CAPABILITY_PACKAGE_GROUPS, pn as inspectDesktopTargetGraph, po as TargetCaptureReasonCode, pr as gitCommandMatchesTarget, ps as ScopeInterpretation, pt as SessionQueryV2, q as recoveryDigest, qa as EvidenceParseStatus, qi as parseHostVersion, qn as qualifyHostTrust, qo as ProcessExitStatus, qr as CAPTURE_V042_NOTICE, qs as splitTextFragments, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as classifyTaskIntent, rc as SEMANTIC_ACTIONS, ri as ACTIVE_HOST_COHORT_ID, rn as auditedDefaultWorkdirHost, ro as GuardItemKind, rr as GitEffectExecution, rs as removalIsPartiallyKnown, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as isFrozenV042RebindResponse, sc as SUPPORTED_EVIDENCE_ADAPTERS, si as BASE_HOST_PACKAGES, sn as combineHostPolicy, so as HostStatus, sr as GitTargetIdentity, ss as ExecutionQualification, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as TaskIntent, tc as CERTIFICATE_VERSION, ti as legacyRecordsNeedingReview, tn as TargetHostGraph, to as GuardIntegrity, tr as GitCommandParseResult, ts as partialFailureOf, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as RejectedBinding, uc as actionCompatible, ui as ExecutableIdentity, un as hostLockContextFromComposedDump, uo as NeedsReviewReason, ur as commitTreeSnapshotDigest, us as LEGACY_QUALIFICATION, ut as ProofObligationV2, v as decideTurnStopping, va as environmentDefaultRepositoryTarget, vc as validateActionManifest, vi as HostCapabilityRequest, vn as prepareDesktopHostTrust, vo as TargetValue, vr as CanonicalCommandSurface, vs as clauseIsProtected, vt as createProofManifestV2, w as observeAssistantOutcome, wa as BOUNDARY_RECORD_PREFIX, wc as sanitizeUrl, wi as HostLockStatus, wn as revalidateDesktopCoreLock, wo as ReleaseGateDecision, wr as parseShellCommand, ws as interpretClause, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as extractOperation, xc as digestStrings, xi as HostCohortSelectionReason, xn as resolveActiveProfileHostLock, xo as WorkUnit, xr as canonicalArgvFromCommand, xs as hasOrderedCoordination, xt as proofDigestV2, y as decisionBoundaryKey, ya as extractArtifactPaths, yc as validateActionTarget, yi as HostCohort, yn as prepareTargetHostTrust, yo as VerificationContract, yr as ParsedShell, ys as explanationHasActionResidue, yt as proofCapabilityReport, z as RecoveryOptions, za as DeferAuthorization, zi as HostVersionStatus, zn as writeDesktopRuntimeReceipt, zo as CapabilityFact, zr as TaskKind, zs as opensConditionLead, zt as ManifestIssue } from "./index-DqvBEsNc.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -136,6 +136,7 @@ declare const Config: z<{
   hostLockRuntimeRoot?: string;
   hostLockProfileRoot?: string;
   hostLockTrust?: string;
+  hostLockDesktopDigest?: string;
 }>;
 //#endregion
 //#region src/runtime.d.ts
@@ -184,6 +185,7 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockRuntimeRoot?: unknown;
   hostLockProfileRoot?: unknown;
   hostLockTrust?: unknown;
+  hostLockDesktopDigest?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
 //#region src/raw-replay.d.ts
@@ -201,4 +203,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as PROOF_KINDS, $i as hostVersionFromPackages, $n as capabilityConsequence, $r as statefulActionsOfScope, $t as reservationFor, A as PROTOCOL_V4_NOTICE, Aa as RC020_RC1_HOST_PACKAGES, Ai as HostTrustError, An as isCurrentAcceptedBoundary, Ar as interpretMessage, At as carriesCleanupCondition, B as extractToolSubject, Bi as BASE_HOST_PACKAGES, Bn as replayRebindResult, Br as legacyQuestionReadingIsInformational, Bt as sourceItemForCoreRequirement, C as SESSION_EVENT_ENVELOPE_INVALID, Ca as requestedIdentityKey, Ci as packageRowsFromPnpmLock, Cn as hasCurrentCertificate, Cr as clauseIsProtected, Ct as CLEANUP_CONDITION_RULE_COMPACT, D as CAPTURE_V042_NOTICE, Da as semanticActionFromText, Di as resolveActiveProfileHostLock, Dn as BOUNDARY_RECORD_PREFIX, Dr as hasQuestionScope, Dt as V6_ORDINARY_COMPLETION_RULE, E as projectCoreV2, Ea as semanticActionFromCommand, Ei as readActiveHostGraph, En as unitDescendantIds, Er as hasOrderedCoordination, Et as MIN_RECOVERY_CHAR_BUDGET, F as legacyRecordsNeedingReview, Fi as registryArchiveFiles, Fn as proposeRebind, Fr as isOpenObligation, Ft as recoveryTitle, G as isRunExecutable, Gi as HOST_COHORTS, Gn as deriveItemDiagnosis, Gr as opensWithDirective, Gt as inFlightReservation, H as persistedToolResultStatus, Hi as EXPECTED_HOST_PACKAGES, Hn as isFrozenV042RebindResponse, Hr as maskQuotedSpans, Ht as RELEASE_OPERATIONS, I as rootLocatorFlavor, Ii as registryArchiveModules, In as proposeRebindOutcome, Ir as isQuestionScopeNeedingReview, It as renderRecoveryPacket, J as authorityCaptureCounts, Ji as evaluateExternalWaitCapability, Jn as nativeFileTwoRole, Jr as questionHeadsClause, Jt as normalizeSettlement, K as parsePwshCommand, Ki as bindExecutableIdentity, Kn as evidenceAvailabilityReason, Kr as presentExplanationHead, Kt as normalizeReleaseContract, L as supersedeItem, Li as ACTIVE_HOST_COHORT_ID, Ln as proposeRebindV042, Lr as isRestatement, Lt as v6CurrentRootBoundaries, M as PROTOCOL_V6_NOTICE, Mi as hostTrustDigest, Mn as currentContractDigest, Mr as isExecutableItem, Mt as closingHint, N as applyUpgradeEligibility, Ni as parseHostTrust, Nn as createProjection, Nr as isExplanationScope, Nt as openItems, O as DEFAULT_DELEGATION_TOOL_NAMES, Oa as validateActionManifest, Oi as resolveInstalledHostLock, On as availableBoundaryQualifications, Or as hasWorkPredicate, Ot as V6_ORDINARY_COMPLETION_RULE_COMPACT, P as deriveProjection, Pi as qualifyHostTrust, Pn as confirmRebind, Pr as isInformationalFragment, Pt as recoveryDigest, Q as PROOF_CAPABILITY_MATRIX, Qi as evaluateToolSurfaceCapability, Qn as admissibleForRemoval, Qr as splitTextFragments, Qt as releasePreEffectDecision, R as evidenceFromPersistedToolResult, Ri as ACTIVE_HOST_COHORT_IDS, Rn as rebindAttemptKey, Rr as itemHoldsExecutionAuthority, Rt as currentV6Feedback, S as SESSION_API_UNSUPPORTED, Sa as isStatefulAction, Si as packageRowsFromActiveGraph, Sn as goalCompletionDenial, Sr as clauseIsGoverned, St as CLEANUP_CONDITION_RULE, T as snapshotSessionEvents, Ta as requestedTargetMatchesResolved, Ti as prepareTargetHostTrust, Tn as certificateClosure, Tr as governedClauseRestrictsExecution, Tt as DEFAULT_RECOVERY_CHAR_BUDGET, U as withDurability, Ui as GOAL_HOST_PACKAGES, Un as parseConfirmationMessage, Ur as namedActions, Ut as RELEASE_OPERATION_SURFACES, V as isDeterministicCheck, Vi as DEFAULT_HOST_LOCK, Vn as CONFIRM_LINE_PATTERN, Vr as maskCodeSpans, Vt as OUTCOME_STRENGTH, W as canonicalArgvFromCommand, Wi as HOST_CAPABILITY_PACKAGE_GROUPS, Wn as capabilityRemedyPhrase, Wr as opensConditionLead, Wt as contractById, X as bindingIndividuallyAccepted, Xi as evaluateHostCapability, Xn as DEPENDENCY_FREE_ONLY_CONDITION, Xr as restatedContentOf, Xt as releaseContractFor, Y as segmentAuthorityBlocks, Yi as evaluateGraphDerivedHostLock, Yn as relevantEvidence, Yr as reportingHeadGoverns, Yt as readbackSettlesContract, Z as certifyCheckpoint, Zi as evaluateHostLock, Zn as actionHasCertificationPath, Zr as semanticActionOfScope, Zt as releaseCoverage, _ as projectSessionCoreV2, _a as STOP_PROTOCOL_VERSION, _i as evaluateConfiguredHostLock, _n as latestRootInstruction, _r as GRANTED_QUALIFICATION, _t as scopeCoverageDigest, a as createGitPrestateEnvelope, aa as SUPPORTED_HOST_VERSIONS, ai as normalizeClause, an as NO_PROGRESS_RECORD_PREFIX, ar as captureItem, at as bindProofV2ToProjection, b as captureHostWorkdir, ba as actionCompatible, bi as injectActiveProfileHostLock, bn as testOutcomePredicate, br as clarifiedSpanOf, bt as validateProofManifest, c as parseGitCommandManifest, ca as parseHostVersion, ci as sha256, cn as assessmentOutcomePredicate, cr as extractArtifactPaths, ct as createProofManifestV2, d as FIRST_STEP_GUIDANCE, da as ACTION_MANIFEST_VERSION, di as auditedDefaultWorkdirHost, dn as decideTurnBoundary, dr as isInformationalMessage, dt as proofDigestV2, ea as selectHostCohort, ei as verbIsNegated, en as bindingSatisfies, er as capabilityFactOf, et as PROOF_KINDS_V2, f as claimedBatchHasRealRootInput, fa as BOUNDED_ARTIFACT_TYPES, fi as auditedDefaultWorkdirProvider, fn as decideTurnStopping, fr as segmentClauses, ft as proofEvidenceConstraints, g as previewFirstStepInjection, ga as STATEFUL_ACTIONS, gi as evaluateActiveHostLock, gn as latestAssistantText, gr as classifyUserInteraction, gt as requiredSubjectsOf, h as lifecyclePhase, ha as SEMANTIC_ACTIONS, hi as combineHostPolicy, hn as isWholeTaskCompletionClaim, hr as classifyTaskIntent, ht as proofV2Rejection, i as commitTreeSnapshotDigest, ia as SUPPORTED_HOST_RANGE, ii as digestStrings, in as CONTROL_RECORD_PREFIX, ir as captureClause, it as bindProofToProjection, j as PROTOCOL_V5_NOTICE, ja as createHostAuditSession, ji as acquireHostTrust, jn as qualifyBoundary, jr as introducesActionClause, jt as cleanupConditionFor, k as PROTOCOL_V3_NOTICE, ka as validateActionTarget, ki as verifyComposedHostLockDump, kn as effectuateBoundary, kr as interpretClause, kt as V6_ORDINARY_COMPLETION_RULE_SHORT, l as revalidateGitPrestate, la as satisfiesSupportedHostRange, li as HostProfileError, ln as classifyCompletionClaim, lr as extractMethod, lt as proofCapabilityReport, m as firstStepGuidanceV6, ma as CERTIFICATE_VERSION_V2, mi as auditedHostImplementation, mn as isRootPauseRequest, mr as npmEscapedPackageName, mt as proofOperationMatches, n as GIT_COMMAND_TEMPLATES, na as LATEST_TESTED_HOST_VERSION, ni as validateManifest, nn as evidenceMatchesItem, nr as removalIsComplete, nt as PROOF_PROTOCOL_VERSION, o as executeRevalidatedGitEffect, oa as compareHostVersions, oi as sanitizeClauseText, on as NO_PROGRESS_TURNS_BEFORE_STOP, or as classifyClause, ot as canonicalProjection, p as firstStepGuidance, pa as CERTIFICATE_VERSION, pi as auditedForegroundRenderers, pn as decisionBoundaryKey, pr as canonicalRegistryBase, pt as proofHostSurfacesOf, q as parseShellCommand, qi as bindLiveGoalCapability, qn as itemDiagnosis, qr as qualificationOfClause, qt as normalizeReservation, r as commitIndexSnapshotDigest, ra as MIN_SUPPORTED_HOST_VERSION, ri as canonicalizePath, rn as isVerifyingCapability, rr as removalIsPartiallyKnown, rt as PROOF_PROTOCOL_VERSION_V2, s as gitCommandMatchesTarget, sa as evaluateMinimumHostVersion, si as sanitizeUrl, sn as assessmentAction, sr as environmentDefaultRepositoryTarget, st as createProofManifest, t as GIT_COMMAND_MANIFEST_IDS, ta as HOST_VALIDATED_VERSIONS, ti as COMMAND_SURFACE_MANIFEST, tn as evidenceCoverage, tr as partialFailureOf, tt as PROOF_MANIFEST_DOMAIN_V2, u as verifiedLinearCommitReadback, ua as ACTION_MANIFEST, ui as activeRendererModule, un as currentActionBases, ur as extractOperation, ut as proofDigest, v as sessionCoreSnapshot, va as STOP_PROTOCOL_VERSION_V2, vi as hostLockContextFromComposedDump, vn as observeAssistantOutcome, vr as LEGACY_QUALIFICATION, vt as sessionQuery, w as SessionApiError, wa as requestedTargetAuthorizesMutation, wi as prepareActiveHostTrust, wn as certifiableOpenItems, wr as explanationHasActionResidue, wt as CLEANUP_CONDITION_RULE_SHORT, x as sourcedNamedTestRoot, xa as boundedArtifactChoiceMatches, xi as inspectTargetHostGraph, xn as v6TestPredicate, xr as clauseAsksOwnQuestion, xt as validateProofManifestV2, y as HOST_WORKDIR_PREFIX, ya as SUPPORTED_EVIDENCE_ADAPTERS, yi as hostLockRowsFromComposedDump, yn as progressFingerprint, yr as actionVerbMatches, yt as sessionQueryV2, z as extractTextContent, zi as ACTIVE_HOST_LAUNCHER_VERSION, zn as rebindResponse, zr as kindOfScope, zt as isV6PendingRootWait } from "./domain-Jo13xgPJ.js";
+import { $ as PROOF_CAPABILITY_MATRIX, $i as ACTIVE_HOST_COHORT_ID, $n as admissibleForRemoval, $r as splitTextFragments, $t as releasePreEffectDecision, A as PROTOCOL_V3_NOTICE, Aa as CERTIFICATE_VERSION_V2, Ai as resolveActiveProfileHostLock, An as effectuateBoundary, Ar as interpretClause, At as V6_ORDINARY_COMPLETION_RULE_SHORT, B as extractTextContent, Ba as requestedTargetAuthorizesMutation, Bi as readAsarFile, Bn as rebindResponse, Br as kindOfScope, Bt as isV6PendingRootWait, C as SESSION_API_UNSUPPORTED, Ca as evaluateMinimumHostVersion, Ci as inspectTargetHostGraph, Cn as goalCompletionDenial, Cr as clauseIsGoverned, Ct as CLEANUP_CONDITION_RULE, D as projectCoreV2, Da as ACTION_MANIFEST_VERSION, Di as prepareDesktopHostTrust, Dn as unitDescendantIds, Dr as hasOrderedCoordination, Dt as MIN_RECOVERY_CHAR_BUDGET, E as snapshotSessionEvents, Ea as ACTION_MANIFEST, Ei as prepareActiveHostTrust, En as certificateClosure, Er as governedClauseRestrictsExecution, Et as DEFAULT_RECOVERY_CHAR_BUDGET, F as deriveProjection, Fa as SUPPORTED_EVIDENCE_ADAPTERS, Fi as DESKTOP_IDENTITY_FACTS, Fn as confirmRebind, Fr as isInformationalFragment, Ft as recoveryDigest, G as canonicalArgvFromCommand, Ga as validateActionTarget, Gi as writeDesktopRuntimeReceipt, Gn as capabilityRemedyPhrase, Gr as opensConditionLead, Gt as contractById, H as isDeterministicCheck, Ha as semanticActionFromCommand, Hi as readDesktopAppRuntime, Hn as CONFIRM_LINE_PATTERN, Hr as maskCodeSpans, Ht as OUTCOME_STRENGTH, I as legacyRecordsNeedingReview, Ia as actionCompatible, Ii as DESKTOP_PROFILE_PACKAGE_NAME, In as proposeRebind, Ir as isOpenObligation, It as recoveryTitle, J as parseShellCommand, Ji as hostTrustDigest, Jn as itemDiagnosis, Jr as qualificationOfClause, Jt as normalizeReservation, K as isRunExecutable, Ka as RC020_RC2_HOST_PACKAGES, Ki as HostTrustError, Kn as deriveItemDiagnosis, Kr as opensWithDirective, Kt as inFlightReservation, L as rootLocatorFlavor, La as boundedArtifactChoiceMatches, Li as DESKTOP_RUNTIME_PACKAGE_NAME, Ln as proposeRebindOutcome, Lr as isQuestionScopeNeedingReview, Lt as renderRecoveryPacket, M as PROTOCOL_V5_NOTICE, Ma as STATEFUL_ACTIONS, Mi as resolveInstalledHostLock, Mn as qualifyBoundary, Mr as introducesActionClause, Mt as cleanupConditionFor, N as PROTOCOL_V6_NOTICE, Na as STOP_PROTOCOL_VERSION, Ni as revalidateDesktopCoreLock, Nn as currentContractDigest, Nr as isExecutableItem, Nt as closingHint, O as CAPTURE_V042_NOTICE, Oa as BOUNDED_ARTIFACT_TYPES, Oi as prepareTargetHostTrust, On as BOUNDARY_RECORD_PREFIX, Or as hasQuestionScope, Ot as V6_ORDINARY_COMPLETION_RULE, P as applyUpgradeEligibility, Pa as STOP_PROTOCOL_VERSION_V2, Pi as verifyComposedHostLockDump, Pn as createProjection, Pr as isExplanationScope, Pt as openItems, Q as certifyCheckpoint, Qi as registryArchiveModules, Qn as actionHasCertificationPath, Qr as semanticActionOfScope, Qt as releaseCoverage, R as supersedeItem, Ra as isStatefulAction, Ri as auditDesktopInstalledImplementation, Rn as proposeRebindV042, Rr as isRestatement, Rt as v6CurrentRootBoundaries, S as sourcedNamedTestRoot, Sa as compareHostVersions, Si as inspectDesktopTargetGraph, Sn as v6TestPredicate, Sr as clauseAsksOwnQuestion, St as validateProofManifestV2, T as SessionApiError, Ta as satisfiesSupportedHostRange, Ti as packageRowsFromPnpmLock, Tn as certifiableOpenItems, Tr as explanationHasActionResidue, Tt as CLEANUP_CONDITION_RULE_SHORT, U as persistedToolResultStatus, Ua as semanticActionFromText, Ui as readDesktopDependency, Un as isFrozenV042RebindResponse, Ur as maskQuotedSpans, Ut as RELEASE_OPERATIONS, V as extractToolSubject, Va as requestedTargetMatchesResolved, Vi as readAsarIndex, Vn as replayRebindResult, Vr as legacyQuestionReadingIsInformational, Vt as sourceItemForCoreRequirement, W as withDurability, Wa as validateActionManifest, Wi as readDesktopTargetGraph, Wn as parseConfirmationMessage, Wr as namedActions, Wt as RELEASE_OPERATION_SURFACES, X as segmentAuthorityBlocks, Xi as qualifyHostTrust, Xn as relevantEvidence, Xr as reportingHeadGoverns, Xt as readbackSettlesContract, Y as authorityCaptureCounts, Yi as parseHostTrust, Yn as nativeFileTwoRole, Yr as questionHeadsClause, Yt as normalizeSettlement, Z as bindingIndividuallyAccepted, Zi as registryArchiveFiles, Zn as DEPENDENCY_FREE_ONLY_CONDITION, Zr as restatedContentOf, Zt as releaseContractFor, _ as previewFirstStepInjection, _a as HOST_VALIDATED_VERSIONS, _i as evaluateActiveHostLock, _n as latestAssistantText, _r as classifyUserInteraction, _t as requiredSubjectsOf, a as commitTreeSnapshotDigest, aa as GOAL_HOST_PACKAGES, ai as digestStrings, an as CONTROL_RECORD_PREFIX, ar as captureClause, at as bindProofToProjection, b as HOST_WORKDIR_PREFIX, ba as SUPPORTED_HOST_RANGE, bi as hostLockRowsFromComposedDump, bn as progressFingerprint, br as actionVerbMatches, bt as sessionQueryV2, c as gitCommandMatchesTarget, ca as bindExecutableIdentity, ci as sanitizeUrl, cn as assessmentAction, cr as environmentDefaultRepositoryTarget, ct as createProofManifest, d as verifiedLinearCommitReadback, da as evaluateGraphDerivedHostLock, di as activeRendererModule, dn as currentActionBases, dr as extractOperation, dt as proofDigest, ea as ACTIVE_HOST_COHORT_IDS, ei as statefulActionsOfScope, en as reservationFor, er as capabilityConsequence, et as PROOF_KINDS, f as FIRST_STEP_GUIDANCE, fa as evaluateHostCapability, fi as auditedDefaultWorkdirHost, fn as decideTurnBoundary, fr as isInformationalMessage, ft as proofDigestV2, g as lifecyclePhase, ga as selectHostCohort, gi as combineHostPolicy, gn as isWholeTaskCompletionClaim, gr as classifyTaskIntent, gt as proofV2Rejection, h as firstStepGuidanceV6, ha as hostVersionFromPackages, hi as auditedHostImplementation, hn as isRootPauseRequest, hr as npmEscapedPackageName, ht as proofOperationMatches, i as commitIndexSnapshotDigest, ia as EXPECTED_HOST_PACKAGES, ii as canonicalizePath, in as isVerifyingCapability, ir as removalIsPartiallyKnown, it as PROOF_PROTOCOL_VERSION_V2, j as PROTOCOL_V4_NOTICE, ja as SEMANTIC_ACTIONS, ji as resolveDesktopProfileHostLock, jn as isCurrentAcceptedBoundary, jr as interpretMessage, jt as carriesCleanupCondition, k as DEFAULT_DELEGATION_TOOL_NAMES, ka as CERTIFICATE_VERSION, ki as readActiveHostGraph, kn as availableBoundaryQualifications, kr as hasWorkPredicate, kt as V6_ORDINARY_COMPLETION_RULE_COMPACT, l as parseGitCommandManifest, la as bindLiveGoalCapability, li as sha256, ln as assessmentOutcomePredicate, lr as extractArtifactPaths, lt as createProofManifestV2, m as firstStepGuidance, ma as evaluateToolSurfaceCapability, mi as auditedForegroundRenderers, mn as decisionBoundaryKey, mr as canonicalRegistryBase, mt as proofHostSurfacesOf, n as GIT_COMMAND_MANIFEST_IDS, na as BASE_HOST_PACKAGES, ni as COMMAND_SURFACE_MANIFEST, nn as evidenceCoverage, nr as partialFailureOf, nt as PROOF_MANIFEST_DOMAIN_V2, o as createGitPrestateEnvelope, oa as HOST_CAPABILITY_PACKAGE_GROUPS, oi as normalizeClause, on as NO_PROGRESS_RECORD_PREFIX, or as captureItem, ot as bindProofV2ToProjection, p as claimedBatchHasRealRootInput, pa as evaluateHostLock, pi as auditedDefaultWorkdirProvider, pn as decideTurnStopping, pr as segmentClauses, pt as proofEvidenceConstraints, q as parsePwshCommand, qa as createHostAuditSession, qi as acquireHostTrust, qn as evidenceAvailabilityReason, qr as presentExplanationHead, qt as normalizeReleaseContract, r as GIT_COMMAND_TEMPLATES, ra as DEFAULT_HOST_LOCK, ri as validateManifest, rn as evidenceMatchesItem, rr as removalIsComplete, rt as PROOF_PROTOCOL_VERSION, s as executeRevalidatedGitEffect, sa as HOST_COHORTS, si as sanitizeClauseText, sn as NO_PROGRESS_TURNS_BEFORE_STOP, sr as classifyClause, st as canonicalProjection, t as RC020_RC1_HOST_PACKAGES, ta as ACTIVE_HOST_LAUNCHER_VERSION, ti as verbIsNegated, tn as bindingSatisfies, tr as capabilityFactOf, tt as PROOF_KINDS_V2, u as revalidateGitPrestate, ua as evaluateExternalWaitCapability, ui as HostProfileError, un as classifyCompletionClaim, ur as extractMethod, ut as proofCapabilityReport, v as projectSessionCoreV2, va as LATEST_TESTED_HOST_VERSION, vi as evaluateConfiguredHostLock, vn as latestRootInstruction, vr as GRANTED_QUALIFICATION, vt as scopeCoverageDigest, w as SESSION_EVENT_ENVELOPE_INVALID, wa as parseHostVersion, wi as packageRowsFromActiveGraph, wn as hasCurrentCertificate, wr as clauseIsProtected, wt as CLEANUP_CONDITION_RULE_COMPACT, x as captureHostWorkdir, xa as SUPPORTED_HOST_VERSIONS, xi as injectActiveProfileHostLock, xn as testOutcomePredicate, xr as clarifiedSpanOf, xt as validateProofManifest, y as sessionCoreSnapshot, ya as MIN_SUPPORTED_HOST_VERSION, yi as hostLockContextFromComposedDump, yn as observeAssistantOutcome, yr as LEGACY_QUALIFICATION, yt as sessionQuery, z as evidenceFromPersistedToolResult, za as requestedIdentityKey, zi as hasDesktopImporterState, zn as rebindAttemptKey, zr as itemHoldsExecutionAuthority, zt as currentV6Feedback } from "./domain-B-2fya9P.js";
 import { boundContextSummary, createUserMessage } from "@deepseek-ai/dsh-llm";
 import { basename, delimiter, dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -5501,6 +5501,7 @@ const Config = Schema.object({
 	hostLockRuntimeRoot: Schema.string(),
 	hostLockProfileRoot: Schema.string(),
 	hostLockTrust: Schema.string(),
+	hostLockDesktopDigest: Schema.string(),
 	hostLockPackages: Schema.array(Schema.object({
 		name: Schema.string().required(),
 		version: Schema.string(),
@@ -5529,7 +5530,7 @@ function resolveConfig(config) {
 		});
 	}
 	if (config.hostLockPlatform !== void 0 && config.hostLockPlatform !== "posix" && config.hostLockPlatform !== "windows") throw new TypeError("hostLockPlatform must be \"posix\" or \"windows\"");
-	if (config.hostLockProfile !== void 0 && config.hostLockProfile !== "headless" && config.hostLockProfile !== "web") throw new TypeError("hostLockProfile must be \"headless\" or \"web\"");
+	if (config.hostLockProfile !== void 0 && config.hostLockProfile !== "headless" && config.hostLockProfile !== "web" && config.hostLockProfile !== "desktop") throw new TypeError("hostLockProfile must be \"headless\", \"web\", or \"desktop\"");
 	const hasHostRows = hostLockPackages !== void 0;
 	if (hasHostRows !== (config.hostLockPlatform !== void 0) || hasHostRows !== (config.hostLockProfile !== void 0)) throw new TypeError("hostLockPackages, hostLockPlatform, and hostLockProfile must be injected together");
 	for (const key of [
@@ -5538,7 +5539,9 @@ function resolveConfig(config) {
 		"hostLockProfileRoot",
 		"hostLockTrust"
 	]) if (config[key] !== void 0 && (typeof config[key] !== "string" || !config[key])) throw new TypeError(`${key} must be a non-empty string`);
+	if (config.hostLockDesktopDigest !== void 0 && (config.hostLockProfile !== "desktop" || typeof config.hostLockDesktopDigest !== "string" || !/^[a-f0-9]{64}$/.test(config.hostLockDesktopDigest))) throw new TypeError("hostLockDesktopDigest must be an injected Desktop SHA-256");
 	return {
+		...typeof config.hostLockDesktopDigest === "string" ? { hostLockDesktopDigest: config.hostLockDesktopDigest } : {},
 		...typeof config.hostLockTrust === "string" ? { hostLockTrust: config.hostLockTrust } : {},
 		...typeof config.hostLockPolicy === "string" ? { hostLockPolicy: config.hostLockPolicy } : {},
 		...typeof config.hostLockRuntimeRoot === "string" ? { hostLockRuntimeRoot: config.hostLockRuntimeRoot } : {},
@@ -6483,6 +6486,41 @@ function revalidateCoreLock(config, expected, providedSession) {
 		goalAvailable: false,
 		reasonCode: "host_lock_migration_required"
 	};
+	if (config.hostLockProfile === "desktop") {
+		if (!config.hostLockDesktopDigest) return {
+			...expected,
+			status: "unavailable",
+			goalAvailable: false,
+			reasonCode: "host_lock_migration_required"
+		};
+		try {
+			const configured = evaluateConfiguredHostLock(config.hostLockPackages ?? [], {
+				platform: config.hostLockPlatform,
+				profileKind: "desktop"
+			}, config.hostLockTrust, config.hostLockProfileRoot);
+			if (configured.status !== "supported") return configured;
+			const actual = revalidateDesktopCoreLock(config.hostLockRuntimeRoot, config.hostLockProfileRoot, expected, config.hostLockTrust);
+			if (actual.status !== "supported") return actual;
+			const currentRows = evaluateConfiguredHostLock(actual.packages, {
+				platform: config.hostLockPlatform,
+				profileKind: "desktop"
+			}, config.hostLockTrust, config.hostLockProfileRoot);
+			if (actual.digest !== config.hostLockDesktopDigest || currentRows.digest !== configured.digest) return {
+				...actual,
+				status: "unsupported",
+				goalAvailable: false,
+				reasonCode: "host_lock_installed_graph_drift"
+			};
+			return actual;
+		} catch {
+			return {
+				...expected,
+				status: "unavailable",
+				goalAvailable: false,
+				reasonCode: "host_lock_missing"
+			};
+		}
+	}
 	const session = providedSession ?? createHostAuditSession();
 	try {
 		const runtimeRoot = session.realpath(config.hostLockRuntimeRoot);
@@ -6555,10 +6593,14 @@ function registerPassiveHostWorkdirObserver(agent, hostLockAtCall, attestedRoute
 }
 function apply(ctx, rawConfig = {}, seams = {}) {
 	const config = resolveConfig(rawConfig);
-	const installedHostLock = seams.hostLock ?? evaluateConfiguredHostLock(config.hostLockPackages ?? [], {
+	const configuredHostLock = seams.hostLock ?? evaluateConfiguredHostLock(config.hostLockPackages ?? [], {
 		platform: config.hostLockPlatform,
 		profileKind: config.hostLockProfile
 	}, config.hostLockTrust, config.hostLockProfileRoot);
+	const installedHostLock = seams.hostLock ?? (config.hostLockProfile === "desktop" && config.hostLockDesktopDigest ? {
+		...configuredHostLock,
+		digest: config.hostLockDesktopDigest
+	} : configuredHostLock);
 	const runtimes = /* @__PURE__ */ new Map();
 	const privateLedgerRoot = seams.privateLedgerRoot ?? resolvePrivateLedgerRoot(void 0, process.env.DSH_HOME, homedir());
 	const hostLocks = /* @__PURE__ */ new Map();
@@ -7141,4 +7183,4 @@ async function replayRawV2(input) {
 }
 
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, Config, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };