dsh-completion-guard 0.8.1 → 0.8.3

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 All notable changes to this project are documented here. The project is pre-1.0; release versions track the plugin lifecycle, not stabilised API promises.
 
+## 0.8.3
+
+- Rejects invalid checkpoint predicate parameters as structured binding errors during live calls and persisted replay, while retaining the whole-contract signing gate. Filtered feedback exposes target/transition errors and provides exact predicate parameters instead of sending callers back to a successful test.
+- Desktop acceptance now checks Guard alone for byte-identical second installation, then checks the multi-package fixture separately. Only JSON object-key order in `.modules.yaml` may differ in the latter check; values, array order, types, other files and Guard bytes remain strict. This versioned contract records pnpm 11.7.0’s ordering limit and preserves historical strict failures.
+- A checkpoint with a correctly matched binding now explains that certification is still pending and reports remaining work across the whole contract, even when the request filters the item list. It no longer asks for the same evidence again; completion still requires the full signing checks. Dots inside filenames stay inside prohibition clauses instead of creating false requirements.
+- Failed Desktop second-install checks now retain bounded field and byte-offset differences, with redacted file snapshots stored only in a private local diagnostic directory. The two no-op checks follow the versioned layered contract above.
+- Avoids repeated full-table scans when capturing new requirements and checking coverage. Pure parsing uses bounded storage that retains reused entries and returns independent results to callers. Shorter tool descriptions and first-step guidance reduce repeated context text while preserving authority checks, recovery reminders and existing tool result fields.
+- Preserves an explicitly named absolute test directory instead of silently using the session's working directory. Unresolved location clauses require clarification; passing tests in the parent directory cannot satisfy the child-directory requirement.
+- Reduces repeated work when mounting and updating a session. Unchanged, provably immutable event snapshots reuse the existing projection; mutable or accessor-backed inputs rebuild it. Per-derivation indexes speed up long histories. Regression fixtures compare event prefixes with an independently frozen 0.8.2 implementation; this does not promise a fixed loading time for every history or host.
+- Shares archive and module reads within each Desktop host validation. Each new validation still checks the current installed bytes. Ordinary shell calls that cannot produce a trusted workdir receipt avoid the full host audit; eligible root test obligations retain it.
+- Reads private-ledger anchors and records once per append. Writer admission publishes a complete owner record atomically, and a provably dead same-host writer can be recovered without deleting another writer's lock. Unknown and live owners are refused. An adopted stale barrier continues to block older writers; downgrading requires the controlled maintenance procedure in the [writer-lock reference](docs/WRITER_LOCK_PROTOCOL.md).
+- Makes Git observation agree with the evidence layer's terminal verdict. Failed, backgrounded, truncated or unclassifiable results cannot establish an observed commit or push. Parent and tree identities come from the original commit object, including first commits, shallow repositories and replacement refs. Git readback supports cancellation and an overall deadline.
+- Adds independent baseline comparisons, session disposal checks and process-tree memory measurements. Performance fixtures separate long-history distributions and distinguish a first mount in a warm process from a cold process start. Native Web/Desktop behavior and exact-artifact platform acceptance are recorded separately.
+
+## 0.8.2
+
+- Adds a separate host lock for the official Desktop app. Guard reads the application archive in place, checks its vendor signature and signed archive header, and verifies installed modules and dependency routes. Web and Headless keep their existing paths; Desktop application restart remains unavailable through Guard.
+- Requires DSH `>=0.2.0-rc.2`. The current 46-package baseline and development dependencies now bind RC.2. Upgrade DSH first, install Guard, then rebuild the lock for each profile; old locks and completion certificates cannot transfer to the new installation.
+- Refuses to certify a shell result when its terminal exit marker is obscured by later prose or a malformed marker. Clean success and failure tails retain their existing meaning. Scheduled reminders and late answers to timed questions remain outside root instruction authority.
+- Fixes Desktop command selection, archive identity drift, locally modified critical peers, and receipt-directory symlink escape. The `inspect`, `inject` and `verify-dump` commands accept explicit `--profile desktop`; the archive, carrier and installed profile are bound to the same freshly checked identity.
+- Adds `dump-desktop` for boot-free configuration readback through the app's bundled APIs, and stores the full Desktop identity for runtime comparison. The versioned native entrypoint now has a separate Desktop backend profile; graphical-shell and real-model acceptance remain separate.
+- Supports the physical hoisted plugin tree produced by Desktop's bundled pnpm 11.7, which has no package map. Guard cross-checks its installation index against disk, authenticates selected critical peers and routes, and binds the index into fresh runtime validation. After installation, `inspect` audits that active tree; partial importer state cannot fall back to pre-install inspection.
+- Uses Electron's original filesystem for physical host-identity reads, so Desktop revalidation reads the same archive bytes as the system-Node CLI while normal application archive loading stays enabled.
+- Adds measurements for 0/100/1000/10000-event projections and short/long private ledgers. The observed full-log cost is recorded without adding a persistent trust cache. See [compatibility and evidence scope](docs/COMPATIBILITY.md) for native-platform and model acceptance limits.
+
 ## 0.8.1
 
 - DSH version admission now starts at `0.2.0-rc.1`, with no upper limit; Cordis uses an independent qualified `>=4.0.4` range. Upgrade DSH, install Guard, explicitly run `inspect`/`inject`/`verify-dump`, then restart each protected profile. Compatible later package versions can bind a registry-verified lock with `--rebind-registry`; changed consumed programs pass a versioned API/Session probe with an exact-byte receipt. Old certificates remain historical. The tested baseline is `0.2.0-rc.1` / Cordis `4.0.4`; final-artifact and future-version native acceptance are separate.
@@ -18,7 +43,7 @@ All notable changes to this project are documented here. The project is pre-1.0;
 - Goal feedback now offers only individually certifiable native edit/readback and foreground test bindings, and guides native edits to their readback without demanding a historical resolution chain.
 - Preserve 0.7.1 recovery feedback and independent proof, Goal and release gates. Upgrade requires a new host lock and restart; old certificates are not re-signed.
 
-Upgrade DSH before installing 0.8.0, then regenerate the host lock for each profile. Follow the [upgrade guide](docs/HOST_LOCK_UPGRADE.md). The [source-stage evidence snapshot](docs/DSH_0_1_7_RC2_ACCEPTANCE.md) records development checks and their limits; exact-artifact acceptance is recorded separately in Release attachments.
+Upgrade DSH before installing 0.8.0, then regenerate the host lock for each profile. Follow the [upgrade guide](docs/HOST_LOCK_UPGRADE.md). The [source-stage evidence snapshot](https://github.com/GreenLv/dsh-completion-guard/blob/563f144bf8568793da5017b9ff71395a33dcd265/docs/DSH_0_1_7_RC2_ACCEPTANCE.md) records development checks and their limits; exact-artifact acceptance is recorded separately in Release attachments.
 
 ## 0.7.1 - 2026-09-22
 

package/CHANGELOG.zh-CN.md

@@ -2,6 +2,31 @@
 
 本项目的重要变化记录在这里。项目仍处于 1.0 之前；版本号跟踪插件生命周期，不代表 API 已稳定。
 
+## 0.8.3
+
+- checkpoint 的非法 predicate 参数在实时调用和持久化重放中均返回结构化绑定错误，不再抛错终止宿主轮次；全局签署检查保留。筛选后的反馈会明确目标与转换参数错误，给出准确参数，避免用重复执行成功测试来修补绑定。
+- Desktop 验收先单独安装 Guard 并要求二次安装字节完全一致，再独立核对多包 fixture。后者仅允许 `.modules.yaml` 的 JSON 对象键序变化，完整值、数组顺序、类型、其他文件和 Guard 字节仍须一致。新版本合同明确记录 pnpm 11.7.0 的排序限制，历史严格失败继续保留。
+- checkpoint 已匹配单项证据但尚未签署时，会说明整个合同还剩哪些工作；筛选条目也不会隐藏这份全局诊断。不再要求重复收集同一份证据，完成仍须通过完整签署检查。文件名内部的点号保留在禁止语句内，不再拆成伪要求。
+- Desktop 二次安装未通过严格 no-op 检查时，保留有界字段变化与字节偏移诊断；脱敏文件快照仅存于本机私有诊断目录。两项检查按上述版本化分层合同分别判定。
+- 捕获新增要求与核对覆盖范围时，避免重复扫描全部历史条目。纯解析结果采用有界存储，保留重复使用的条目，并向调用方返回独立副本。精简工具说明与首步提示，减少重复上下文文本，并保留权限核验、恢复提示与原有工具结果字段。
+- 保留测试要求中明确指定的绝对目录，不再静默改用会话工作目录。无法确定的位置要求澄清；父目录中的通过结果不能满足子目录的测试要求。
+- 减少会话挂载和更新时的重复计算。事件快照未变且能证明不可变时复用已有投影；可变输入或含访问器的输入仍完整重建。单次推导内的索引加快长历史处理。回归夹具逐事件前缀对照独立冻结的 0.8.2 实现；这不代表所有历史和宿主都能达到固定的载入时间。
+- 在单次 Desktop 宿主校验中共享归档和模块读取；每次新校验仍核对当前安装字节。无法产生可信工作目录回执的普通 shell 调用省去完整宿主审计，符合条件的根测试义务保留审计。
+- 私有账本每次追加只读取一次共享锚点和记录链。写入准入先准备完整所有者记录，再原子发布；可证实已死亡的同机 writer 可恢复，无需删除其他 writer 的锁。未知或存活所有者仍被拒绝。采纳的遗留屏障会继续阻止旧版 writer；降级须遵循[写入锁说明](docs/WRITER_LOCK_PROTOCOL.md)中的独占维护步骤。
+- Git 观察结果与证据层使用相同的终态判定。失败、后台执行、输出截断或无法归类的结果不能证明 commit 或 push 已完成。父提交和树身份从原始提交对象读取，覆盖首次提交、浅仓库及替换引用；回读支持取消和总体截止时间。
+- 增加独立基线对照、会话释放检查及进程树内存测量。性能夹具区分长历史分布，并将已启动进程中的首次挂载与进程冷启动分别命名。原生 Web/Desktop 行为及精确制品的跨平台验收单独记录。
+
+## 0.8.2
+
+- 新增官方 Desktop 应用的独立宿主锁。Guard 原位读取应用归档，核对厂商签名、签名绑定的归档头、安装模块与实际依赖路由。Web、Headless 沿用各自的入口；Guard 暂不提供 Desktop 应用重启。
+- DSH 最低版本提高到 `0.2.0-rc.2`，46 包基线和开发依赖统一绑定 RC.2。先升级 DSH、安装 Guard，再为各 Profile 重建锁；旧锁和完成证书不能转用于新安装。
+- shell 退出标记被后续文字遮挡或标记行损坏时，结果保持未知，不再误报成功；清晰的成功／失败尾部判定不变。定时提醒和限时问答的晚到答案仍不能成为根指令。
+- 修复 Desktop 命令选择、归档身份漂移、本地关键 peer 改写和回执目录符号链接逃逸。`inspect`、`inject`、`verify-dump` 均接受显式 `--profile desktop`，归档、载体与安装 Profile 绑定同一份重新核验的身份。
+- 新增 `dump-desktop`，通过应用内配置 API 在不启动宿主的情况下回读配置，并保存完整 Desktop 身份供运行时比较。版本化原生入口新增独立的 Desktop 后端验收；图形界面与真实模型验收仍分别记录。
+- 支持 Desktop 自带 pnpm 11.7 生成的平铺插件目录，该布局不含 package-map。Guard 将安装索引与实际目录交叉核对，认证本地关键 peer 的字节与依赖路由，并将索引绑定到运行时重新核验。安装后，`inspect` 审计实际插件目录；残缺的 importer 状态不能退回安装前检查。
+- 宿主身份核验在 Electron 中使用原始文件接口，确保 Desktop 运行时与系统 Node CLI 读取相同的归档字节，同时保留应用正常的归档加载能力。
+- 新增 0/100/1000/10000 事件投影及短／长私有账本测量，记录全日志开销，不引入跨入口持久信任缓存。原生平台与模型验收范围见[兼容性指南](docs/COMPATIBILITY.md)。
+
 ## 0.8.1
 
 - DSH 版本准入下限改为 `0.2.0-rc.1`，不设上限；Cordis 使用独立且须经资格验证的 `>=4.0.4` 范围。先升级 DSH、安装 Guard，再明确执行 `inspect`／`inject`／`verify-dump`，最后重启各受保护 Profile。较新兼容包可用 `--rebind-registry` 建立经过 registry 验证的新锁；变化的所消费程序须通过版本化 API／Session 探针，并绑定精确字节回执。旧证书保留为历史。已测试基线是 `0.2.0-rc.1`／Cordis `4.0.4`，最终制品及未来版本原生验收分别建立。
@@ -18,7 +43,7 @@
 - Goal 反馈只提供可逐项认证的原生编辑／回读和前台测试绑定，并引导原生编辑完成回读，不再误要求历史 resolution 链。
 - 保留 0.7.1 恢复反馈与现有 proof、Goal、release 边界。升级需重建 host-lock 并重启；旧证书不会重新签发。
 
-安装 0.8.0 前先升级 DSH，再为各 Profile 重新生成宿主锁。步骤见[升级指南](docs/HOST_LOCK_UPGRADE.md)。[源码阶段证据快照](docs/DSH_0_1_7_RC2_ACCEPTANCE.md)保留开发检查及其限制；精确制品验收另记于 Release 附件。
+安装 0.8.0 前先升级 DSH，再为各 Profile 重新生成宿主锁。步骤见[升级指南](docs/HOST_LOCK_UPGRADE.md)。[源码阶段证据快照](https://github.com/GreenLv/dsh-completion-guard/blob/563f144bf8568793da5017b9ff71395a33dcd265/docs/DSH_0_1_7_RC2_ACCEPTANCE.md)保留开发检查及其限制；精确制品验收另记于 Release 附件。
 
 ## 0.7.1（2026-09-22）
 

package/README.md

@@ -4,16 +4,16 @@
 
 An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks them before the task is marked complete. It restores the same checklist after a resumed session and accepts only matching saved tool results as evidence.
 
-> **0.8.1 requires DSH `>=0.2.0-rc.1`.** Stop the host, upgrade DSH and install Guard, then run the host-lock tool's `inspect`, `inject` and `verify-dump` commands for each profile before starting it when needed. These commands bind the installed packages and their verified routes; installing Guard does not rebuild the lock. The tested host baseline is DSH `0.2.0-rc.1` with Cordis `4.0.4`; later versions must pass the same identity and adapter checks. See [compatibility](docs/COMPATIBILITY.md) for version admission, rebinding and native-evidence limits.
+> **0.8.3 requires DSH `>=0.2.0-rc.2` and supports the official Desktop app.** Stop the host, upgrade DSH and install Guard, then run the host-lock tool's `inspect`, `inject` and `verify-dump` commands for each profile before starting it when needed. For the Desktop app, pass `--profile desktop` with the app archive as the runtime root. These commands bind the installed packages and their verified routes; installing Guard does not rebuild the lock. The tested host baseline is DSH `0.2.0-rc.2` with Cordis `4.0.4`; later versions must pass the same identity and adapter checks. See [compatibility](docs/COMPATIBILITY.md) for version admission, rebinding and native-evidence limits.
 
 ![Task-contract clauses and bounded evidence pass through a checkpoint before a completion certificate is issued](assets/social/completion-guard-hero.png)
 
 ## Quick start
 
-Stop the host, upgrade to DSH `0.2.0-rc.1` or later, then install Guard in the profile you want to protect:
+Stop the host, upgrade to DSH `0.2.0-rc.2` or later, then install Guard in the profile you want to protect:
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.8.1
+dsh plugin --profile web add dsh-completion-guard@0.8.3
 ```
 
 **Keep the host stopped while upgrading and checking the installed graph below.** The lock records the package versions and installation directories DSH actually uses. A lock generated before an upgrade describes the old packages and will fail against the new runtime. `inject` writes to `<profile>/cordis.patch.yml`, so back up that file first.
@@ -32,6 +32,8 @@ dsh --profile web --dump-config | "$GUARD_HOST_LOCK" verify-dump --runtime-root
 
 On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the Web settings directory's `node_modules\.bin` directory and use Windows absolute paths. Native acceptance and publication evidence is recorded per version, bound to that version's exact bytes, in the [acceptance record](docs/LOCAL_ACCEPTANCE.md); a version's source and deterministic evidence never substitutes for its own installed-artifact claim. Other host versions and artifacts need their own native evidence. Repeat this check after changing DSH, Guard or the profile location; an ordinary market-only update does not require reinjection. The Guard stays unavailable if the active package set is missing, duplicated, untrusted, or different from the bound setup.
 
+For Desktop, install through the app's bundled CLI and bind `--profile desktop` to its `app.asar` and actual profile directory. Its CLI does not offer `--dump-config`; use Guard's `dump-desktop` to compose the configuration before readback. Follow the [Desktop upgrade steps](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile).
+
 When ready to use Guard, start DSH Web, open a session, and enable it:
 
 ```text
@@ -57,7 +59,7 @@ The ordinary `context_guard_action` and `context_guard_evidence` tools from 0.6.
 
 ## Status and compatibility
 
-Version 0.8.1 admits **DSH `>=0.2.0-rc.1`** without an upper version limit. Cordis has an independent `>=4.0.4` peer range and must pass its adapter qualification. The published `0.2.0-rc.1` 46-package graph remains the reviewed baseline; a newer mixed-version graph can receive its own registry-backed lock when the consumed implementations qualify. Changed Session/API implementations run a finite contract probe; incompatible behavior reports a qualification failure, and an old certificate cannot transfer to the new lock. The real installed-graph source harness has been exercised on `0.2.0-rc.1`; exact-artifact macOS/Windows native acceptance and future-version native evidence remain separate.
+Version 0.8.3 admits **DSH `>=0.2.0-rc.2`** without an upper version limit, and supports the official Desktop app as an independent profile (`desktop`): the app-owned `dsh-profile-desktop` profile is identified by its own name, its bundled graph is read in place from the signed `app.asar`, and its installed bytes are verified against the published tarballs. Cordis has an independent `>=4.0.4` peer range and must pass its adapter qualification. The published `0.2.0-rc.2` 46-package graph is the reviewed baseline (the rc.1 graph remains historical evidence); a newer mixed-version graph can receive its own registry-backed lock when the consumed implementations qualify. Changed Session/API implementations run a finite contract probe; incompatible behavior reports a qualification failure, and an old certificate cannot transfer to the new lock. Exact-artifact macOS/Windows native acceptance and future-version native evidence remain separate; Desktop backend, graphical-shell and real-model results are recorded separately for each exact artifact.
 
 After upgrading, inspect, inject and verify the new host lock, then start the profile when needed; follow the [host-lock upgrade guide](docs/HOST_LOCK_UPGRADE.md). DSH migrates old sessions to V4. Guard retains old ledgers and certificates without re-signing them or promoting their old identity to current authority. Goal remains optional; installing the host does not imply it is enabled.
 
@@ -80,7 +82,7 @@ Context Guard has two activation modes:
 
 These modes only control Guard protection. They are not the DSH session mode (for example, the standard or minimal mode) that a session starts with. Because the Guard no longer writes into sessions before the first message, a session's DSH mode can be selected while the session is still new. `/context-guard on` and `/context-guard off` turn Guard protection on or off; they never change the DSH session mode.
 
-To make DSH sessions start with protection on, add this entry to the `cordis.patch.yml` used by the way you start DSH:
+To make DSH sessions start with protection on, set `activation: always` on the existing `context-guard` entry in your profile’s `cordis.patch.yml`. Preserve its injected host-lock fields; the snippet below shows the field to change, not a replacement for the complete configuration:
 
 ```yaml
 - id: context-guard
@@ -89,12 +91,14 @@ To make DSH sessions start with protection on, add this entry to the `cordis.pat
     activation: always
 ```
 
-DSH can run with a **Web** interface in a browser, or **Headless** without a browser interface from a terminal or an automated task. These two ways of running DSH use separate settings files. Edit the file for the one you use, or edit both if you use both:
+DSH Web in a browser, Headless in a terminal, and the Desktop app use separate settings files. Edit the profile you use; check each one separately when you use more than one:
 
 | System | How you use DSH | Default path |
 | --- | --- | --- |
 | macOS / Linux | Web | `$HOME/.dsh/profiles/web/cordis.patch.yml` |
 | macOS / Linux | Headless | `$HOME/.dsh/profiles/headless/cordis.patch.yml` |
+| macOS | Desktop | `$HOME/.dsh/profiles/desktop/cordis.patch.yml` |
+| Windows | Desktop | `%USERPROFILE%\.dsh\profiles\desktop\cordis.patch.yml` |
 | Windows | Web | `%USERPROFILE%\.dsh\profiles\web\cordis.patch.yml` |
 | Windows | Headless | `%USERPROFILE%\.dsh\profiles\headless\cordis.patch.yml` |
 
@@ -102,7 +106,7 @@ If you set a custom `DSH_HOME`, use that directory instead of `$HOME/.dsh` or `%
 
 You can also paste this prompt into DSH and let it make the change:
 
-> Set `dsh-completion-guard` to `always` mode. Find the `cordis.patch.yml` used by the way I am currently running DSH (Web interface or Headless), back it up first, and only set `activation: always` on the entry with `id: context-guard`. Do not change any other settings or restart DSH. When finished, show me the file path and the exact diff.
+> Set `dsh-completion-guard` to `always` mode. Find the `cordis.patch.yml` used by the way I am currently running DSH (Web, Headless or Desktop), back it up first, and only set `activation: always` on the entry with `id: context-guard`. Do not change any other settings or restart DSH. When finished, show me the file path and the exact diff.
 
 After the change, restart DSH.
 
@@ -210,6 +214,7 @@ The daily workflow publishes through the last day whose counts are unchanged in
 
 ```sh
 pnpm install --frozen-lockfile
+pnpm --dir tests/fixtures/host-composition install --frozen-lockfile
 pnpm run test:stats
 pnpm run typecheck
 pnpm test

package/README.zh-CN.md

@@ -4,16 +4,16 @@
 
 面向 DeepSeek Harness（DSH）的任务保护插件。它保存任务要求，并在任务标记完成前逐项核对；会话恢复后仍使用同一份检查表，只有匹配的已保存工具结果才能作为证据。
 
-> **0.8.1 要求 DSH `>=0.2.0-rc.1`。** 请先停止宿主、升级 DSH 并安装 Guard，再为每个 Profile 执行宿主锁工具的 `inspect`、`inject` 和 `verify-dump`，最后按需启动该 Profile。这些命令绑定实际安装包及其经过验证的路由；安装 Guard 本身不会重建锁。已测试的宿主基线是 DSH `0.2.0-rc.1`、Cordis `4.0.4`；较新版本仍需通过身份和适配契约检查。版本准入、重绑及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
+> **0.8.3 要求 DSH `>=0.2.0-rc.2`，并支持官方 Desktop 应用。** 请先停止宿主、升级 DSH 并安装 Guard，再为每个 Profile 执行宿主锁工具的 `inspect`、`inject` 和 `verify-dump`，最后按需启动该 Profile。对 Desktop 应用请传入 `--profile desktop`，并以应用归档作为 runtime root。这些命令绑定实际安装包及其经过验证的路由；安装 Guard 本身不会重建锁。已测试的宿主基线是 DSH `0.2.0-rc.2`、Cordis `4.0.4`；较新版本仍需通过身份和适配契约检查。版本准入、重绑及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
 
 ![任务合同条款与有界证据通过 checkpoint 匹配后签发完成证书](assets/social/completion-guard-hero.png)
 
 ## 快速开始
 
-先停止宿主并升级到 DSH `0.2.0-rc.1` 或更高版本，再把 Guard 安装到需要保护的 Profile：
+先停止宿主并升级到 DSH `0.2.0-rc.2` 或更高版本，再把 Guard 安装到需要保护的 Profile：
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.8.1
+dsh plugin --profile web add dsh-completion-guard@0.8.3
 ```
 
 **升级和执行下面的安装图检查时，保持宿主停止。** 宿主锁记录 DSH 实际使用的包版本和安装目录；如果升级前就生成锁，新运行时会因包版本不匹配而拒绝它。`inject` 会修改 `<profile>/cordis.patch.yml`，请先备份该文件。
@@ -32,6 +32,8 @@ dsh --profile web --dump-config | "$GUARD_HOST_LOCK" verify-dump --runtime-root
 
 Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。各版本的原生验收与发布证据在[验收记录](docs/LOCAL_ACCEPTANCE.md)中按版本绑定其精确制品字节单独记录；任何版本的源码与确定性证据都不能等同于该版本已安装制品的结论。其他宿主版本和制品仍需各自的原生证据。DSH、Guard 或 profile 路径变化后需要重新检查；仅 market 普通升级不需要重新注入。如果当前包集合缺失、重复、不可信或不同于已绑定环境，Guard 会保持不可用。
 
+Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应用 `app.asar` 和实际 profile 路径建立宿主锁。它的 CLI 不提供 `--dump-config`，请用 Guard 的 `dump-desktop` 生成组合配置再回读；见[Desktop 升级步骤](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile)。
+
 需要使用时，再启动 DSH Web，打开会话并启用 Guard：
 
 ```text
@@ -57,7 +59,7 @@ Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard
 
 ## 状态与兼容性
 
-0.8.1 的版本准入范围是 **DSH `>=0.2.0-rc.1`**，没有版本上限。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.1` 46 包依赖图保留为已审查基线；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。已在 `0.2.0-rc.1` 的真实安装图上执行源码入口测量；最终制品的 macOS/Windows 原生验收和未来版本原生证据仍须分别建立。
+0.8.3 的版本准入范围是 **DSH `>=0.2.0-rc.2`**，没有版本上限，并支持官方 Desktop 应用的独立 profile（`desktop`）：应用自有的 `dsh-profile-desktop` 按名称识别，其内置依赖图从已签名的 `app.asar` 原位读取，安装字节按发布 tarball 逐文件核验。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.2` 46 包依赖图为已审查基线（rc.1 图保留为历史证据）；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。最终制品的 macOS/Windows 原生验收、未来版本原生证据与 Desktop 原生验收仍须分别建立。
 
 升级后重新检查、注入并验证 host-lock，再按需启动对应 Profile，步骤见[宿主锁升级](docs/HOST_LOCK_UPGRADE.md)。旧会话由 DSH 迁移为 V4；Guard 保留旧 ledger 和证书，但不会重签或把旧身份升级为当前权限。Goal 为可选能力，宿主安装不代表它已启用。
 
@@ -80,7 +82,7 @@ Context Guard 有两种启用模式：
 
 启用模式只控制 Guard 是否保护会话，不是 DSH 的会话模式（例如会话开始时所选的标准模式、极简模式）。Guard 不再在第一条消息之前写入任何内容，因此 DSH 会话模式可以在会话尚为新会话时选择。`/context-guard on` 和 `/context-guard off` 只负责开启或关闭 Guard 保护，不会改变 DSH 会话模式。
 
-如果希望 DSH 会话自动启用保护，请在当前 DSH 启动方式使用的 `cordis.patch.yml` 中增加：
+如果希望 DSH 会话自动启用保护，请把实际 profile 的 `cordis.patch.yml` 中已有 `context-guard` 项设为 `activation: always`，保留已注入的宿主锁字段。下面的片段只显示要修改的字段，不用于替换整份配置：
 
 ```yaml
 - id: context-guard
@@ -89,12 +91,14 @@ Context Guard 有两种启用模式：
     activation: always
 ```
 
-DSH 有两种运行方式：**Web** 是在浏览器的网页界面里使用 DSH；**Headless** 是不打开网页界面，通常从终端或自动化任务运行 DSH。两种方式使用不同的配置文件。你用哪一种就修改哪一个；两种都用时需要分别修改：
+DSH 的 Web 网页、Headless 终端和 Desktop 桌面应用使用独立配置。请修改实际使用的 profile；多种方式都用时分别修改：
 
 | 系统 | 你怎么使用 DSH | 默认路径 |
 | --- | --- | --- |
 | macOS / Linux | Web | `$HOME/.dsh/profiles/web/cordis.patch.yml` |
 | macOS / Linux | Headless | `$HOME/.dsh/profiles/headless/cordis.patch.yml` |
+| macOS | Desktop | `$HOME/.dsh/profiles/desktop/cordis.patch.yml` |
+| Windows | Desktop | `%USERPROFILE%\.dsh\profiles\desktop\cordis.patch.yml` |
 | Windows | Web | `%USERPROFILE%\.dsh\profiles\web\cordis.patch.yml` |
 | Windows | Headless | `%USERPROFILE%\.dsh\profiles\headless\cordis.patch.yml` |
 
@@ -102,7 +106,7 @@ DSH 有两种运行方式：**Web** 是在浏览器的网页界面里使用 DSH
 
 不想手动改文件，也可以把下面这段话直接发给 DSH：
 
-> 请把 `dsh-completion-guard` 设为 `always` 模式。根据我当前使用 DSH 的方式（网页界面或无网页界面），自动找到对应的 `cordis.patch.yml`，先备份该文件，只把 `id: context-guard` 这一项的 `activation` 设为 `always`，不要修改其他配置，也不要替我重启 DSH。完成后告诉我文件的绝对路径，并显示准确的修改内容。
+> 请把 `dsh-completion-guard` 设为 `always` 模式。根据我当前使用 DSH 的方式（Web、Headless 或 Desktop），自动找到对应的 `cordis.patch.yml`，先备份该文件，只把 `id: context-guard` 这一项的 `activation` 设为 `always`，不要修改其他配置，也不要替我重启 DSH。完成后告诉我文件的绝对路径，并显示准确的修改内容。
 
 修改完成后，重启 DSH。
 
@@ -205,6 +209,7 @@ Context Guard 负责完成认证；Goal、Todo、Compaction、continuation、权
 
 ```sh
 pnpm install --frozen-lockfile
+pnpm --dir tests/fixtures/host-composition install --frozen-lockfile
 pnpm run test:stats
 pnpm run typecheck
 pnpm test

package/bin/dsh-completion-guard-host-lock.mjs

@@ -1,13 +1,17 @@
 #!/usr/bin/env node
 
 import { readFileSync } from 'node:fs'
+import { execFileSync } from 'node:child_process'
 import { fileURLToPath } from 'node:url'
 import { dirname, join } from 'node:path'
 import {
   injectActiveProfileHostLock,
   prepareActiveHostTrust,
   prepareTargetHostTrust,
+  prepareDesktopHostTrust,
   inspectTargetHostGraph,
+  inspectDesktopTargetGraph,
+  hasDesktopImporterState,
   evaluateConfiguredHostLock,
   resolveActiveProfileHostLock,
   verifyComposedHostLockDump,
@@ -19,6 +23,23 @@ function option(name) {
   return process.argv[index + 1]
 }
 
+function hasFlag(name) {
+  return process.argv.includes(name)
+}
+
+// Explicit profile selection. `--profile desktop` requires the runtime root
+// to be the official app archive (app.asar); the CLI runtime profiles keep
+// their explicit managed roots. Omitting the flag keeps the documented
+// bundle/name inference — desktop identity never comes from a bundle guess.
+function selectedProfile() {
+  if (!hasFlag('--profile')) return undefined
+  const value = option('--profile')
+  if (!['web', 'headless', 'desktop'].includes(value)) {
+    throw new Error('profile must be "web", "headless", or "desktop"')
+  }
+  return value
+}
+
 function summary(evaluation) {
   return {
     status: evaluation.status,
@@ -52,13 +73,41 @@ function summary(evaluation) {
 
 try {
   const command = process.argv[2]
-  if (!['inspect', 'inspect-graph', 'inject', 'verify-dump'].includes(command)) {
-    throw new Error('usage: dsh-completion-guard-host-lock <inspect|inject|verify-dump> --runtime-root PATH --profile-root PATH [--dump-config FILE]')
+  if (!['inspect', 'inspect-graph', 'inject', 'verify-dump', 'dump-desktop'].includes(command)) {
+    throw new Error('usage: dsh-completion-guard-host-lock <inspect|inject|verify-dump|dump-desktop> --runtime-root PATH --profile-root PATH [--profile web|headless|desktop] [--dump-config FILE]')
   }
   const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)))
   const packageManifest = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8'))
+  const profile = selectedProfile()
+  if (profile === 'desktop' && (command === 'inspect-graph'
+    || (command === 'inspect' && !hasDesktopImporterState(option('--profile-root'))))) {
+    const runtimeRoot = option('--runtime-root')
+    const profileRoot = option('--profile-root')
+    const trust = hasFlag('--rebind-registry') ? await prepareDesktopHostTrust(runtimeRoot, profileRoot) : undefined
+    const target = inspectDesktopTargetGraph(runtimeRoot, profileRoot, trust)
+    const evaluation = evaluateConfiguredHostLock(target.packages, {
+      platform: process.platform === 'win32' ? 'windows' : 'posix',
+      profileKind: 'desktop',
+    }, trust ? JSON.stringify(trust) : undefined, profileRoot)
+    process.stdout.write(`${JSON.stringify({
+      ...summary(evaluation),
+      inspection_scope: 'pre_install_target',
+      profile_graph: target.profileGraph,
+      desktop_runtime: {
+        asar_realpath: target.runtime.asarRealpath,
+        manifest_sha256: target.runtime.manifestSha256,
+        header_sha256: target.runtime.headerSha256,
+        metadata_sha256: target.runtime.metadataSha256,
+        host_version: target.runtime.hostVersion,
+        desktop_version: target.runtime.metadata.desktopVersion,
+        payload_file_count: target.runtime.metadata.fileTableEntries,
+      },
+      packages: target.packages,
+    })}\n`)
+    process.exit(evaluation.status === 'supported' ? 0 : 1)
+  }
   if (command === 'inspect-graph') {
-    const trust = process.argv.includes('--rebind-registry')
+    const trust = hasFlag('--rebind-registry')
       ? await prepareTargetHostTrust(option('--runtime-root'), option('--profile-root')) : undefined
     const target = inspectTargetHostGraph(option('--runtime-root'), option('--profile-root'), trust)
     const rows = target.packages
@@ -70,19 +119,57 @@ try {
     process.exit(evaluation.status === 'supported' ? 0 : 1)
   }
   // Explicit registry rebind. Existing baseline inspection stays offline.
-  const trust = process.argv.includes('--rebind-registry')
-    ? await prepareActiveHostTrust(option('--runtime-root'), option('--profile-root')) : undefined
+  const trust = hasFlag('--rebind-registry')
+    ? await (profile === 'desktop' ? prepareDesktopHostTrust : prepareActiveHostTrust)(option('--runtime-root'), option('--profile-root')) : undefined
   const active = resolveActiveProfileHostLock(
     option('--runtime-root'),
     option('--profile-root'),
     packageManifest.version,
     trust,
   )
+  if (profile !== undefined && active.profileKind !== profile) {
+    throw new Error(`profile mismatch: requested ${profile}, resolved ${active.profileKind}`)
+  }
+  if (command === 'dump-desktop') {
+    if (active.profileKind !== 'desktop' || active.evaluation.status !== 'supported') {
+      throw new Error('dump-desktop requires a supported installed Desktop profile')
+    }
+    const archive = active.runtimeRoot, profileRoot = active.profileRoot
+    const executable = process.platform === 'darwin'
+      ? join(dirname(dirname(archive)), 'MacOS', 'DeepSeek Harness')
+      : join(dirname(dirname(archive)), 'DeepSeek Harness.exe')
+    const script = `
+      import { createRequire } from 'node:module';
+      import { join } from 'node:path';
+      import { existsSync } from 'node:fs';
+      import { pathToFileURL } from 'node:url';
+      const [archive, profileRoot] = process.argv.slice(1);
+      const require = createRequire(join(archive, 'dsh', 'node_modules', '@deepseek-ai', 'dsh', 'package.json'));
+      const boot = await import(pathToFileURL(require.resolve('@deepseek-ai/dsh-app-boot')).href);
+      const { prepareProfile, PROFILE_ROOT_FILENAME, homePatchPath } = await import(pathToFileURL(require.resolve('@deepseek-ai/dsh/profile-boot')).href);
+      const loaded = prepareProfile('desktop');
+      if (loaded.dir !== profileRoot) throw Error('Desktop dump profile identity differs');
+      const layers = loaded.layers.map(layer => ({label: layer.packageName, patches: layer.patches}));
+      if (existsSync(loaded.patchPath)) layers.push({label: loaded.patchPath, patches: loaded.patches});
+      const home = homePatchPath(), patches = boot.loadOptionalPatches('dsh', home);
+      if (patches !== undefined) layers.push({label: home, patches});
+      process.stdout.write(boot.renderConfigDump('dsh', join(profileRoot, PROFILE_ROOT_FILENAME), layers));
+    `
+    const output = execFileSync(executable, ['--expose-internals', '--input-type=module', '-e', script, archive, profileRoot], {
+      encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024,
+      env: { ...process.env, ELECTRON_RUN_AS_NODE: '1', DSH_HOME: dirname(dirname(profileRoot)) },
+      stdio: ['ignore', 'pipe', 'pipe'],
+    })
+    process.stdout.write(output)
+    process.exit(0)
+  }
   if (command === 'inject') injectActiveProfileHostLock(active)
   if (command === 'verify-dump') {
     verifyComposedHostLockDump(readFileSync(option('--dump-config') === '-' ? 0 : option('--dump-config'), 'utf8'), active.evaluation, active)
   }
-  process.stdout.write(`${JSON.stringify(summary(active.evaluation))}\n`)
+  process.stdout.write(`${JSON.stringify({ ...summary(active.evaluation),
+    ...(command === 'inspect' ? { inspection_scope: 'active_profile' } : {}),
+  })}\n`)
 } catch (error) {
   const code = error && typeof error === 'object' && 'code' in error ? String(error.code) : 'host_lock_command_failed'
   process.stderr.write(`${JSON.stringify({ status: 'unavailable', reason_code: code })}\n`)

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as TargetValue, $i as environmentDefaultRepositoryTarget, $n as CanonicalCommandSurface, $o as clauseIsProtected, $r as HostCapabilityRequest, $s as validateActionManifest, $t as HostProfileError, A as V4SessionLike, Aa as ExpectedTransition, Ai as currentContractDigest, An as registryArchiveModules, Ao as ProcessOutcomeReason, Ar as PROTOCOL_V3_NOTICE, As as verbIsNegated, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as GuardOperation, Bi as CONFIRM_LINE_PATTERN, Bn as GitPrestateCheck, Bo as DirectiveClass, Br as ACTIVE_HOST_LAUNCHER_VERSION, Bs as STOP_PROTOCOL_VERSION, Bt as validateManifest, C as observeAssistantOutcome, Ca as DeriveResult, Ci as ParsedHostVersion, Cn as HostTrustError, Co as DEPENDENCY_FREE_ONLY_CONDITION, Cr as deriveItemDiagnosis, Cs as qualificationOfClause, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as EvidenceOutcome, Di as evaluateMinimumHostVersion, Dn as parseHostTrust, Do as OperationAttribution, Dr as relevantEvidence, Ds as semanticActionOfScope, Dt as sessionQuery, E as v6TestPredicate, Ea as EvidenceBinding, Ei as compareHostVersions, En as hostTrustDigest, Eo as DerivedProcessFacts, Er as nativeFileTwoRole, Es as restatedContentOf, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as GuardEvidence, Fi as segmentAuthorityBlocks, Fn as GitCommandManifest, Fo as capabilityFactOf, Fr as deriveProjection, Fs as BOUNDED_ARTIFACT_TYPES, Ft as isVerifyingCapability, G as openItems, Ga as NeedsReviewReason, Gi as RejectedBinding, Gn as commitTreeSnapshotDigest, Go as LEGACY_QUALIFICATION, Gr as ExecutableIdentity, Gs as actionCompatible, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as HostStatus, Hi as isFrozenV042RebindResponse, Hn as GitTargetIdentity, Ho as ExecutionQualification, Hr as BASE_HOST_PACKAGES, Hs as SUPPORTED_EVIDENCE_ADAPTERS, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as GuardIntegrity, Ii as TaskIntent, In as GitCommandParseResult, Io as partialFailureOf, Ir as legacyRecordsNeedingReview, Is as CERTIFICATE_VERSION, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as TargetCaptureReasonCode, Ji as CaptureScope, Jn as gitCommandMatchesTarget, Jo as ScopeInterpretation, Jr as HOST_CAPABILITY_PACKAGE_GROUPS, Js as requestedIdentityKey, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as PersistenceAuthorization, Ki as bindingIndividuallyAccepted, Kn as createGitPrestateEnvelope, Ko as QualificationReason, Kr as ExecutableIdentityBinding, Ks as boundedArtifactChoiceMatches, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as GuardItem, Li as UserInteractionKind, Ln as GitCommandRejected, Lo as removalIsComplete, Lr as rootLocatorFlavor, Ls as CERTIFICATE_VERSION_V2, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as GoalRef, Mi as AuthorityBlockKind, Mn as GIT_COMMAND_TEMPLATES, Mo as actionHasCertificationPath, Mr as PROTOCOL_V5_NOTICE, Ms as ACTION_MANIFEST_VERSION, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as GuardBoundary, Ni as AuthorityKind, Nn as GitAdapterAction, No as admissibleForRemoval, Nr as PROTOCOL_V6_NOTICE, Ns as ActionManifest, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as EvidenceParseStatus, Oi as parseHostVersion, On as qualifyHostTrust, Oo as ProcessExitStatus, Or as CAPTURE_V042_NOTICE, Os as splitTextFragments, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as GuardCheckpoint, Pi as authorityCaptureCounts, Pn as GitCommandAccepted, Po as capabilityConsequence, Pr as applyUpgradeEligibility, Ps as ActionSpec, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as TargetTuple, Qi as classifyClause, Qn as CanonicalArgv, Qo as clauseIsGoverned, Qr as HostCapabilityId, Qs as semanticActionFromText, Qt as AuditedPackageExpectation, R as RecoveryOptions, Ra as GuardItemKind, Ri as classifyTaskIntent, Rn as GitEffectExecution, Ro as removalIsPartiallyKnown, Rr as ACTIVE_HOST_COHORT_ID, Rs as SEMANTIC_ACTIONS, Rt as ManifestIssue, S as latestRootInstruction, Sa as DeriveConfig, Si as MIN_SUPPORTED_HOST_VERSION, Sn as HostTrustAcquisitionOptions, So as CapabilityRemedy, Sr as capabilityRemedyPhrase, Ss as presentExplanationHead, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as DerivedEnvelope, Ti as SUPPORTED_HOST_VERSIONS, Tn as acquireHostTrust, To as DependencyStatus, Tr as itemDiagnosis, Ts as reportingHeadGoverns, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as MessageCoverage, Ui as parseConfirmationMessage, Un as LinearCommitReadback, Uo as GRANTED_QUALIFICATION, Ur as DEFAULT_HOST_LOCK, Us as SemanticAction, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as GuardProjection, Vi as ParsedConfirmation, Vn as GitPrestateEnvelope, Vo as Executee, Vr as AuditedExecutable, Vs as STOP_PROTOCOL_VERSION_V2, Vt as ClaimedMessage, W as closingHint, Wa as NeedsReviewFact, Wi as CheckpointResult, Wn as commitIndexSnapshotDigest, Wo as InterpretOptions, Wr as EXPECTED_HOST_PACKAGES, Ws as StatefulAction, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as TargetSource, Xi as captureClause, Xn as revalidateGitPrestate, Xo as clarifiedSpanOf, Xr as HostAuditProvenance, Xs as requestedTargetMatchesResolved, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as TargetCaptureStatus, Yi as ClauseSegment, Yn as parseGitCommandManifest, Yo as actionVerbMatches, Yr as HOST_COHORTS, Ys as requestedTargetAuthorizesMutation, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as TargetSourceKind, Zi as captureItem, Zn as verifiedLinearCommitReadback, Zo as clauseAsksOwnQuestion, Zr as HostCapabilityEvaluation, Zs as semanticActionFromCommand, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as BindingActionClosure, _i as selectHostCohort, _n as readActiveHostGraph, _o as rebindAttemptKey, _r as CertificationSupport, _s as maskCodeSpans, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as BOUNDARY_RECORD_PREFIX, ac as sanitizeUrl, ai as HostLockStatus, an as auditedHostImplementation, ar as parseShellCommand, as as interpretClause, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as DeferAuthorization, bi as HostVersionStatus, bn as verifyComposedHostLockDump, bo as CapabilityFact, br as TaskKind, bs as opensConditionLead, bt as proofDigestV2, c as CurrentActionBasis, ca as BoundaryRequest, ci as HostToolSurface, cn as evaluateConfiguredHostLock, cr as ToolCallInput, cs as isExecutableItem, ct as ProofObligation, d as TurnStoppingDecision, da as availableBoundaryQualifications, di as evaluateExternalWaitCapability, dn as injectActiveProfileHostLock, do as RebindArgs, dr as evidenceFromPersistedToolResult, ds as isOpenObligation, dt as SessionQuery, ea as extractArtifactPaths, ec as validateActionTarget, ei as HostCohort, en as TargetHostGraph, eo as VerificationContract, er as ParsedShell, es as explanationHasActionResidue, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as effectuateBoundary, fi as evaluateGraphDerivedHostLock, fn as inspectTargetHostGraph, fo as RebindProposal, fr as extractTextContent, fs as isQuestionScopeNeedingReview, ft as SessionQueryV2, g as decideTurnBoundary, ga as AssetObligation, gi as hostVersionFromPackages, gn as prepareTargetHostTrust, go as proposeRebindV042, gr as withDurability, gs as legacyQuestionReadingIsInformational, gt as createProofManifest, h as currentActionBases, ha as AssetInterpretationFact, hi as evaluateToolSurfaceCapability, hn as prepareActiveHostTrust, ho as proposeRebindOutcome, hr as persistedToolResultStatus, hs as kindOfScope, ht as canonicalProjection, i as supersedeItem, ia as segmentClauses, ic as sanitizeClauseText, ii as HostLockEvaluation, in as auditedForegroundRenderers, ir as parsePwshCommand, is as hasWorkPredicate, it as ProofKindCapability, j as snapshotSessionEvents, ja as ExternalOperation, ji as AuthorityBlock, jn as GIT_COMMAND_MANIFEST_IDS, jo as RemovalOutcomeReport, jr as PROTOCOL_V4_NOTICE, js as ACTION_MANIFEST, jt as EvidenceFacetCoverage, k as SessionApiError, ka as EvidenceRole, ki as satisfiesSupportedHostRange, kn as registryArchiveFiles, ko as ProcessFactSource, kr as DEFAULT_DELEGATION_TOOL_NAMES, ks as statefulActionsOfScope, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as GoalActivationState, li as bindExecutableIdentity, ln as hostLockContextFromComposedDump, lo as BoundedSource, lr as ToolResultInput, ls as isExplanationScope, lt as ProofObligationV2, m as classifyCompletionClaim, ma as qualifyBoundary, mi as evaluateHostLock, mn as packageRowsFromPnpmLock, mo as proposeRebind, mr as isDeterministicCheck, ms as itemHoldsExecutionAuthority, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as extractOperation, nc as digestStrings, ni as HostCohortSelectionReason, nn as auditedDefaultWorkdirHost, no as WorkUnit, nr as canonicalArgvFromCommand, ns as hasOrderedCoordination, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as BoundaryEffectuation, oc as sha256, oi as HostPlatform, on as combineHostPolicy, or as goalCompletionDenial, os as interpretMessage, ot as ProofManifest, p as assessmentOutcomePredicate, pa as isCurrentAcceptedBoundary, pi as evaluateHostCapability, pn as packageRowsFromActiveGraph, po as confirmRebind, pr as extractToolSubject, ps as isRestatement, pt as bindProofToProjection, q as recoveryTitle, qa as SourceSpan, qi as certifyCheckpoint, qn as executeRevalidatedGitEffect, qo as QualificationStatus, qr as GOAL_HOST_PACKAGES, qs as isStatefulAction, qt as firstStepGuidance, r as projectCoreV2, ra as isInformationalMessage, rc as normalizeClause, ri as HostLockContext, rn as auditedDefaultWorkdirProvider, ro as createProjection, rr as isRunExecutable, rs as hasQuestionScope, rt as ProofKind, s as CompletionDisposition, sa as BoundaryQualification, si as HostProfileKind, sn as evaluateActiveHostLock, sr as hasCurrentCertificate, ss as introducesActionClause, st as ProofManifestV2, t as RC020_RC1_HOST_PACKAGES, ta as extractMethod, tc as canonicalizePath, ti as HostCohortSelection, tn as activeRendererModule, to as WaitAuthorization, tr as ShellParseStatus, ts as governedClauseRestrictsExecution, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as GoalBoundaryAccess, ui as bindLiveGoalCapability, un as hostLockRowsFromComposedDump, uo as ProposeOutcome, ur as ToolSubject, us as isInformationalFragment, ut as ProofSurface, v as decisionBoundaryKey, va as BoundaryDisposition, vi as HOST_VALIDATED_VERSIONS, vn as resolveActiveProfileHostLock, vo as rebindResponse, vr as DiagnosisNextAction, vs as maskQuotedSpans, vt as proofCapabilityReport, w as progressFingerprint, wa as DeriveScope, wi as SUPPORTED_HOST_RANGE, wn as HostTrustedPackage, wo as DeclaredOperationResult, wr as evidenceAvailabilityReason, ws as questionHeadsClause, wt as proofV2Rejection, x as latestAssistantText, xa as DelegationRef, xi as LATEST_TESTED_HOST_VERSION, xn as HostRebindTrust, xo as CapabilityGap, xr as UnifiedItemDiagnosis, xs as opensWithDirective, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as BoundaryQualificationKind, yi as HostVersionDecision, yn as resolveInstalledHostLock, yo as replayRebindResult, yr as Repairability, ys as namedActions, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as GuardItemStatus, zi as classifyUserInteraction, zn as GitEffectRunner, zo as AuthorityDisposition, zr as ACTIVE_HOST_COHORT_IDS, zs as STATEFUL_ACTIONS, zt as OperationVerbEntry } from "../index-jKw6mANp.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+import { $ as PROOF_KINDS_V2, $a as ExternalOperation, $i as AuthorityBlock, $n as GitCommandAccepted, $o as RemovalOutcomeReport, $r as PROTOCOL_V4_NOTICE, $s as ACTION_MANIFEST, $t as AuditedPackageExpectation, A as SessionApiError, Aa as BoundaryRequest, Ai as HostToolSurface, An as DesktopAppRuntime, Ar as ToolSubject, As as isExecutableItem, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as BoundaryDisposition, Bi as HOST_VALIDATED_VERSIONS, Bn as HostRebindTrust, Bo as rebindResponse, Br as DiagnosisNextAction, Bs as maskQuotedSpans, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as extractMethod, Cc as canonicalizePath, Ci as HostCohortSelection, Cn as resolveInstalledHostLock, Co as WaitAuthorization, Cr as parsePwshCommand, Cs as governedClauseRestrictsExecution, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BOUNDARY_RECORD_PREFIX, Dc as sanitizeUrl, Di as HostLockStatus, Dn as DESKTOP_IDENTITY_FACTS, Dr as NATIVE_GIT_ROOT_PARENT_OID, Ds as interpretClause, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as segmentClauses, Ec as sanitizeClauseText, Ei as HostLockEvaluation, En as AsarIndex, Er as hasCurrentCertificate, Es as hasWorkPredicate, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as isCurrentAcceptedBoundary, Fi as evaluateHostCapability, Fn as readAsarIndex, Fo as confirmRebind, Fr as nativeGitParentOidVerified, Fs as isRestatement, Ft as evidenceMatchesItem, G as closingHint, Ga as DeriveResult, Gi as ParsedHostVersion, Gn as hostTrustDigest, Go as DEPENDENCY_FREE_ONLY_CONDITION, Gr as deriveItemDiagnosis, Gs as qualificationOfClause, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeferAuthorization, Hi as HostVersionStatus, Hn as HostTrustError, Ho as CapabilityFact, Hr as TaskKind, Hs as opensConditionLead, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as qualifyBoundary, Ii as evaluateHostLock, In as readDesktopAppRuntime, Io as proposeRebind, Ir as persistedToolResultStatus, Is as itemHoldsExecutionAuthority, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceBinding, Ji as compareHostVersions, Jn as registryArchiveFiles, Jo as DerivedProcessFacts, Jr as nativeFileTwoRole, Js as restatedContentOf, Jt as firstStepGuidance, K as openItems, Ka as DeriveScope, Ki as SUPPORTED_HOST_RANGE, Kn as parseHostTrust, Ko as DeclaredOperationResult, Kr as evidenceAvailabilityReason, Ks as questionHeadsClause, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as AssetInterpretationFact, Li as evaluateToolSurfaceCapability, Ln as readDesktopDependency, Lo as proposeRebindOutcome, Lr as shellReadbackOutcome, Ls as kindOfScope, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as GoalBoundaryAccess, Mi as bindLiveGoalCapability, Mn as auditDesktopInstalledImplementation, Mo as ProposeOutcome, Mr as extractTextContent, Ms as isInformationalFragment, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as availableBoundaryQualifications, Ni as evaluateExternalWaitCapability, Nn as hasDesktopImporterState, No as RebindArgs, Nr as extractToolSubject, Ns as isOpenObligation, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as BoundaryEffectuation, Oc as sha256, Oi as HostPlatform, On as DESKTOP_PROFILE_PACKAGE_NAME, Or as ToolCallInput, Os as interpretMessage, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as effectuateBoundary, Pi as evaluateGraphDerivedHostLock, Pn as readAsarFile, Po as RebindProposal, Pr as isDeterministicCheck, Ps as isQuestionScopeNeedingReview, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as ExpectedTransition, Qi as currentContractDigest, Qn as GitAdapterAction, Qo as ProcessOutcomeReason, Qr as PROTOCOL_V3_NOTICE, Qs as verbIsNegated, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as AssetObligation, Ri as hostVersionFromPackages, Rn as readDesktopTargetGraph, Ro as proposeRebindV042, Rr as withDurability, Rs as legacyQuestionReadingIsInformational, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as extractArtifactPaths, Sc as validateActionTarget, Si as HostCohort, Sn as resolveDesktopProfileHostLock, So as VerificationContract, Sr as isRunExecutable, Ss as explanationHasActionResidue, St as proofEvidenceConstraints, T as progressFingerprint, Ta as isInformationalMessage, Tc as normalizeClause, Ti as HostLockContext, Tn as verifyComposedHostLockDump, To as createProjection, Tr as goalCompletionDenial, Ts as hasQuestionScope, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DelegationRef, Ui as LATEST_TESTED_HOST_VERSION, Un as HostTrustedPackage, Uo as CapabilityGap, Ur as UnifiedItemDiagnosis, Us as opensWithDirective, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as BoundaryQualificationKind, Vi as HostVersionDecision, Vn as HostTrustAcquisitionOptions, Vo as replayRebindResult, Vr as Repairability, Vs as namedActions, Vt as validateManifest, W as cleanupConditionFor, Wa as DeriveConfig, Wi as MIN_SUPPORTED_HOST_VERSION, Wn as acquireHostTrust, Wo as CapabilityRemedy, Wr as capabilityRemedyPhrase, Ws as presentExplanationHead, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as EvidenceParseStatus, Xi as parseHostVersion, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as ProcessExitStatus, Xr as CAPTURE_V042_NOTICE, Xs as splitTextFragments, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as EvidenceOutcome, Yi as evaluateMinimumHostVersion, Yn as registryArchiveModules, Yo as OperationAttribution, Yr as relevantEvidence, Ys as semanticActionOfScope, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as EvidenceRole, Zi as satisfiesSupportedHostRange, Zn as GIT_COMMAND_TEMPLATES, Zo as ProcessFactSource, Zr as DEFAULT_DELEGATION_TOOL_NAMES, Zs as statefulActionsOfScope, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as ClauseSegment, _c as requestedTargetAuthorizesMutation, _i as HOST_COHORTS, _n as prepareActiveHostTrust, _o as TargetCaptureStatus, _r as CanonicalArgv, _s as actionVerbMatches, _t as createProofManifest, a as supersedeItem, aa as UserInteractionKind, ac as CERTIFICATE_VERSION_V2, ai as rootLocatorFlavor, an as auditedForegroundRenderers, ao as GuardItem, ar as GitPrestateCheck, as as removalIsComplete, at as ProofKindCapability, b as isRootPauseRequest, ba as classifyClause, bc as semanticActionFromText, bi as HostCapabilityId, bn as readActiveHostGraph, bo as TargetTuple, br as ShellParseStatus, bs as clauseIsGoverned, bt as proofDigest, c as CompletionDisposition, ca as CONFIRM_LINE_PATTERN, cc as STOP_PROTOCOL_VERSION, ci as ACTIVE_HOST_LAUNCHER_VERSION, cn as evaluateActiveHostLock, co as GuardOperation, cr as LinearCommitReadback, cs as DirectiveClass, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as parseConfirmationMessage, dc as SemanticAction, di as DEFAULT_HOST_LOCK, dn as hostLockRowsFromComposedDump, do as MessageCoverage, dr as createGitPrestateEnvelope, ds as GRANTED_QUALIFICATION, dt as ProofSurface, ea as AuthorityBlockKind, ec as ACTION_MANIFEST_VERSION, ei as PROTOCOL_V5_NOTICE, en as HostProfileError, eo as GoalRef, er as GitCommandManifest, es as actionHasCertificationPath, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as CheckpointResult, fc as StatefulAction, fi as EXPECTED_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as NeedsReviewFact, fr as executeRevalidatedGitEffect, fs as InterpretOptions, ft as SessionQuery, g as currentActionBases, ga as CaptureScope, gc as requestedIdentityKey, gi as HOST_CAPABILITY_PACKAGE_GROUPS, gn as packageRowsFromPnpmLock, go as TargetCaptureReasonCode, gr as verifiedLinearCommitReadback, gs as ScopeInterpretation, gt as canonicalProjection, h as classifyCompletionClaim, ha as certifyCheckpoint, hc as isStatefulAction, hi as GOAL_HOST_PACKAGES, hn as packageRowsFromActiveGraph, ho as SourceSpan, hr as revalidateGitPrestate, hs as QualificationStatus, ht as bindProofV2ToProjection, i as projectCoreV2, ia as TaskIntent, ic as CERTIFICATE_VERSION, ii as legacyRecordsNeedingReview, in as auditedDefaultWorkdirProvider, io as GuardIntegrity, ir as GitEffectRunner, is as partialFailureOf, it as ProofKind, j as V4SessionLike, ja as GoalActivationState, ji as bindExecutableIdentity, jn as DesktopTargetGraph, jo as BoundedSource, jr as evidenceFromPersistedToolResult, js as isExplanationScope, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as BoundaryQualification, ki as HostProfileKind, kn as DESKTOP_RUNTIME_PACKAGE_NAME, kr as ToolResultInput, ks as introducesActionClause, kt as sessionQueryV2, l as CurrentActionBasis, la as ParsedConfirmation, lc as STOP_PROTOCOL_VERSION_V2, li as AuditedExecutable, ln as evaluateConfiguredHostLock, lo as GuardProjection, lr as commitIndexSnapshotDigest, ls as Executee, lt as ProofObligation, m as assessmentOutcomePredicate, ma as bindingIndividuallyAccepted, mc as boundedArtifactChoiceMatches, mi as ExecutableIdentityBinding, mn as inspectTargetHostGraph, mo as PersistenceAuthorization, mr as parseGitCommandManifest, ms as QualificationReason, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as authorityCaptureCounts, nc as ActionSpec, ni as applyUpgradeEligibility, nn as activeRendererModule, no as GuardCheckpoint, nr as GitCommandRejected, ns as capabilityConsequence, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as classifyTaskIntent, oc as SEMANTIC_ACTIONS, oi as ACTIVE_HOST_COHORT_ID, on as auditedHostImplementation, oo as GuardItemKind, or as GitPrestateEnvelope, os as removalIsPartiallyKnown, ot as ProofKindV2, p as assessmentAction, pa as RejectedBinding, pc as actionCompatible, pi as ExecutableIdentity, pn as inspectDesktopTargetGraph, po as NeedsReviewReason, pr as gitCommandMatchesTarget, ps as LEGACY_QUALIFICATION, pt as SessionQueryV2, q as recoveryDigest, qa as DerivedEnvelope, qi as SUPPORTED_HOST_VERSIONS, qn as qualifyHostTrust, qo as DependencyStatus, qr as itemDiagnosis, qs as reportingHeadGoverns, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as segmentAuthorityBlocks, rc as BOUNDED_ARTIFACT_TYPES, ri as deriveProjection, rn as auditedDefaultWorkdirHost, ro as GuardEvidence, rr as GitEffectExecution, rs as capabilityFactOf, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as classifyUserInteraction, sc as STATEFUL_ACTIONS, si as ACTIVE_HOST_COHORT_IDS, sn as combineHostPolicy, so as GuardItemStatus, sr as GitTargetIdentity, ss as AuthorityDisposition, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as AuthorityKind, tc as ActionManifest, ti as PROTOCOL_V6_NOTICE, tn as TargetHostGraph, to as GuardBoundary, tr as GitCommandParseResult, ts as admissibleForRemoval, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as isFrozenV042RebindResponse, uc as SUPPORTED_EVIDENCE_ADAPTERS, ui as BASE_HOST_PACKAGES, un as hostLockContextFromComposedDump, uo as HostStatus, ur as commitTreeSnapshotDigest, us as ExecutionQualification, ut as ProofObligationV2, v as decideTurnStopping, va as captureClause, vc as requestedTargetMatchesResolved, vi as HostAuditProvenance, vn as prepareDesktopHostTrust, vo as TargetSource, vr as CanonicalCommandSurface, vs as clarifiedSpanOf, vt as createProofManifestV2, w as observeAssistantOutcome, wa as extractOperation, wc as digestStrings, wi as HostCohortSelectionReason, wn as revalidateDesktopCoreLock, wo as WorkUnit, wr as parseShellCommand, ws as hasOrderedCoordination, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as environmentDefaultRepositoryTarget, xc as validateActionManifest, xi as HostCapabilityRequest, xn as resolveActiveProfileHostLock, xo as TargetValue, xr as canonicalArgvFromCommand, xs as clauseIsProtected, xt as proofDigestV2, y as decisionBoundaryKey, ya as captureItem, yc as semanticActionFromCommand, yi as HostCapabilityEvaluation, yn as prepareTargetHostTrust, yo as TargetSourceKind, yr as ParsedShell, ys as clauseAsksOwnQuestion, yt as proofCapabilityReport, z as RecoveryOptions, za as BindingActionClosure, zi as selectHostCohort, zn as writeDesktopRuntimeReceipt, zo as rebindAttemptKey, zr as CertificationSupport, zs as maskCodeSpans, zt as ManifestIssue } from "../index-BmTaAEkJ.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as PROOF_KINDS, $i as hostVersionFromPackages, $n as capabilityConsequence, $r as statefulActionsOfScope, A as PROTOCOL_V4_NOTICE, Aa as RC020_RC1_HOST_PACKAGES, Ai as HostTrustError, An as isCurrentAcceptedBoundary, Ar as interpretMessage, At as carriesCleanupCondition, B as extractToolSubject, Bi as BASE_HOST_PACKAGES, Bn as replayRebindResult, Br as legacyQuestionReadingIsInformational, C as SESSION_EVENT_ENVELOPE_INVALID, Ca as requestedIdentityKey, Ci as packageRowsFromPnpmLock, Cn as hasCurrentCertificate, Cr as clauseIsProtected, Ct as CLEANUP_CONDITION_RULE_COMPACT, D as CAPTURE_V042_NOTICE, Da as semanticActionFromText, Di as resolveActiveProfileHostLock, Dn as BOUNDARY_RECORD_PREFIX, Dr as hasQuestionScope, Dt as V6_ORDINARY_COMPLETION_RULE, E as projectCoreV2, Ea as semanticActionFromCommand, Ei as readActiveHostGraph, Er as hasOrderedCoordination, Et as MIN_RECOVERY_CHAR_BUDGET, F as legacyRecordsNeedingReview, Fi as registryArchiveFiles, Fn as proposeRebind, Fr as isOpenObligation, Ft as recoveryTitle, G as isRunExecutable, Gi as HOST_COHORTS, Gn as deriveItemDiagnosis, Gr as opensWithDirective, H as persistedToolResultStatus, Hi as EXPECTED_HOST_PACKAGES, Hn as isFrozenV042RebindResponse, Hr as maskQuotedSpans, I as rootLocatorFlavor, Ii as registryArchiveModules, In as proposeRebindOutcome, Ir as isQuestionScopeNeedingReview, It as renderRecoveryPacket, J as authorityCaptureCounts, Ji as evaluateExternalWaitCapability, Jn as nativeFileTwoRole, Jr as questionHeadsClause, K as parsePwshCommand, Ki as bindExecutableIdentity, Kn as evidenceAvailabilityReason, Kr as presentExplanationHead, L as supersedeItem, Li as ACTIVE_HOST_COHORT_ID, Ln as proposeRebindV042, Lr as isRestatement, Lt as v6CurrentRootBoundaries, M as PROTOCOL_V6_NOTICE, Mi as hostTrustDigest, Mn as currentContractDigest, Mr as isExecutableItem, Mt as closingHint, N as applyUpgradeEligibility, Ni as parseHostTrust, Nn as createProjection, Nr as isExplanationScope, Nt as openItems, O as DEFAULT_DELEGATION_TOOL_NAMES, Oa as validateActionManifest, Oi as resolveInstalledHostLock, On as availableBoundaryQualifications, Or as hasWorkPredicate, Ot as V6_ORDINARY_COMPLETION_RULE_COMPACT, P as deriveProjection, Pi as qualifyHostTrust, Pn as confirmRebind, Pr as isInformationalFragment, Pt as recoveryDigest, Q as PROOF_CAPABILITY_MATRIX, Qi as evaluateToolSurfaceCapability, Qn as admissibleForRemoval, Qr as splitTextFragments, R as evidenceFromPersistedToolResult, Ri as ACTIVE_HOST_COHORT_IDS, Rn as rebindAttemptKey, Rr as itemHoldsExecutionAuthority, S as SESSION_API_UNSUPPORTED, Sa as isStatefulAction, Si as packageRowsFromActiveGraph, Sn as goalCompletionDenial, Sr as clauseIsGoverned, St as CLEANUP_CONDITION_RULE, T as snapshotSessionEvents, Ta as requestedTargetMatchesResolved, Ti as prepareTargetHostTrust, Tr as governedClauseRestrictsExecution, Tt as DEFAULT_RECOVERY_CHAR_BUDGET, U as withDurability, Ui as GOAL_HOST_PACKAGES, Un as parseConfirmationMessage, Ur as namedActions, V as isDeterministicCheck, Vi as DEFAULT_HOST_LOCK, Vn as CONFIRM_LINE_PATTERN, Vr as maskCodeSpans, W as canonicalArgvFromCommand, Wi as HOST_CAPABILITY_PACKAGE_GROUPS, Wn as capabilityRemedyPhrase, Wr as opensConditionLead, X as bindingIndividuallyAccepted, Xi as evaluateHostCapability, Xn as DEPENDENCY_FREE_ONLY_CONDITION, Xr as restatedContentOf, Y as segmentAuthorityBlocks, Yi as evaluateGraphDerivedHostLock, Yn as relevantEvidence, Yr as reportingHeadGoverns, Z as certifyCheckpoint, Zi as evaluateHostLock, Zn as actionHasCertificationPath, Zr as semanticActionOfScope, _ as projectSessionCoreV2, _a as STOP_PROTOCOL_VERSION, _i as evaluateConfiguredHostLock, _n as latestRootInstruction, _r as GRANTED_QUALIFICATION, _t as scopeCoverageDigest, a as createGitPrestateEnvelope, aa as SUPPORTED_HOST_VERSIONS, ai as normalizeClause, an as NO_PROGRESS_RECORD_PREFIX, ar as captureItem, at as bindProofV2ToProjection, ba as actionCompatible, bi as injectActiveProfileHostLock, bn as testOutcomePredicate, br as clarifiedSpanOf, bt as validateProofManifest, c as parseGitCommandManifest, ca as parseHostVersion, ci as sha256, cn as assessmentOutcomePredicate, cr as extractArtifactPaths, ct as createProofManifestV2, d as FIRST_STEP_GUIDANCE, da as ACTION_MANIFEST_VERSION, di as auditedDefaultWorkdirHost, dn as decideTurnBoundary, dr as isInformationalMessage, dt as proofDigestV2, ea as selectHostCohort, ei as verbIsNegated, en as bindingSatisfies, er as capabilityFactOf, et as PROOF_KINDS_V2, f as claimedBatchHasRealRootInput, fa as BOUNDED_ARTIFACT_TYPES, fi as auditedDefaultWorkdirProvider, fn as decideTurnStopping, fr as segmentClauses, ft as proofEvidenceConstraints, g as previewFirstStepInjection, ga as STATEFUL_ACTIONS, gi as evaluateActiveHostLock, gn as latestAssistantText, gr as classifyUserInteraction, gt as requiredSubjectsOf, h as lifecyclePhase, ha as SEMANTIC_ACTIONS, hi as combineHostPolicy, hn as isWholeTaskCompletionClaim, hr as classifyTaskIntent, ht as proofV2Rejection, i as commitTreeSnapshotDigest, ia as SUPPORTED_HOST_RANGE, ii as digestStrings, in as CONTROL_RECORD_PREFIX, ir as captureClause, it as bindProofToProjection, j as PROTOCOL_V5_NOTICE, ji as acquireHostTrust, jn as qualifyBoundary, jr as introducesActionClause, jt as cleanupConditionFor, k as PROTOCOL_V3_NOTICE, ka as validateActionTarget, ki as verifyComposedHostLockDump, kn as effectuateBoundary, kr as interpretClause, kt as V6_ORDINARY_COMPLETION_RULE_SHORT, l as revalidateGitPrestate, la as satisfiesSupportedHostRange, li as HostProfileError, ln as classifyCompletionClaim, lr as extractMethod, lt as proofCapabilityReport, m as firstStepGuidanceV6, ma as CERTIFICATE_VERSION_V2, mi as auditedHostImplementation, mn as isRootPauseRequest, mt as proofOperationMatches, n as GIT_COMMAND_TEMPLATES, na as LATEST_TESTED_HOST_VERSION, ni as validateManifest, nn as evidenceMatchesItem, nr as removalIsComplete, nt as PROOF_PROTOCOL_VERSION, o as executeRevalidatedGitEffect, oa as compareHostVersions, oi as sanitizeClauseText, on as NO_PROGRESS_TURNS_BEFORE_STOP, or as classifyClause, ot as canonicalProjection, p as firstStepGuidance, pa as CERTIFICATE_VERSION, pi as auditedForegroundRenderers, pn as decisionBoundaryKey, pt as proofHostSurfacesOf, q as parseShellCommand, qi as bindLiveGoalCapability, qn as itemDiagnosis, qr as qualificationOfClause, r as commitIndexSnapshotDigest, ra as MIN_SUPPORTED_HOST_VERSION, ri as canonicalizePath, rn as isVerifyingCapability, rr as removalIsPartiallyKnown, rt as PROOF_PROTOCOL_VERSION_V2, s as gitCommandMatchesTarget, sa as evaluateMinimumHostVersion, si as sanitizeUrl, sn as assessmentAction, sr as environmentDefaultRepositoryTarget, st as createProofManifest, t as GIT_COMMAND_MANIFEST_IDS, ta as HOST_VALIDATED_VERSIONS, ti as COMMAND_SURFACE_MANIFEST, tn as evidenceCoverage, tr as partialFailureOf, tt as PROOF_MANIFEST_DOMAIN_V2, u as verifiedLinearCommitReadback, ua as ACTION_MANIFEST, ui as activeRendererModule, un as currentActionBases, ur as extractOperation, ut as proofDigest, va as STOP_PROTOCOL_VERSION_V2, vi as hostLockContextFromComposedDump, vn as observeAssistantOutcome, vr as LEGACY_QUALIFICATION, vt as sessionQuery, w as SessionApiError, wa as requestedTargetAuthorizesMutation, wi as prepareActiveHostTrust, wr as explanationHasActionResidue, wt as CLEANUP_CONDITION_RULE_SHORT, xa as boundedArtifactChoiceMatches, xi as inspectTargetHostGraph, xn as v6TestPredicate, xr as clauseAsksOwnQuestion, xt as validateProofManifestV2, ya as SUPPORTED_EVIDENCE_ADAPTERS, yi as hostLockRowsFromComposedDump, yn as progressFingerprint, yr as actionVerbMatches, yt as sessionQueryV2, z as extractTextContent, zi as ACTIVE_HOST_LAUNCHER_VERSION, zn as rebindResponse, zr as kindOfScope } from "../domain-Jo13xgPJ.js";
+import { $ as segmentAuthorityBlocks, $i as acquireHostTrust, $n as evidenceAvailabilityReason, $r as presentExplanationHead, A as PROTOCOL_V3_NOTICE, Aa as parseHostVersion, Ai as packageRowsFromActiveGraph, Ar as clauseIsProtected, At as MIN_RECOVERY_CHAR_BUDGET, B as evidenceFromPersistedToolResult, Ba as STOP_PROTOCOL_VERSION_V2, Bi as verifyComposedHostLockDump, Bn as createProjection, Br as isExplanationScope, Bt as renderRecoveryPacket, C as SESSION_API_UNSUPPORTED, Ca as HOST_VALIDATED_VERSIONS, Ci as evaluateActiveHostLock, Cn as observeAssistantOutcome, Cr as classifyUserInteraction, Ct as sessionQueryV2, D as projectCoreV2, Da as SUPPORTED_HOST_VERSIONS, Di as injectActiveProfileHostLock, Dn as goalCompletionDenial, Dr as clarifiedSpanOf, Dt as CLEANUP_CONDITION_RULE_COMPACT, E as snapshotSessionEvents, Ea as SUPPORTED_HOST_RANGE, Ei as hostLockRowsFromComposedDump, En as v6TestPredicate, Er as actionVerbMatches, Et as CLEANUP_CONDITION_RULE, F as deriveProjection, Fa as CERTIFICATE_VERSION, Fi as readActiveHostGraph, Fn as availableBoundaryQualifications, Fr as hasWorkPredicate, Ft as cleanupConditionFor, G as persistedToolResultStatus, Ga as requestedIdentityKey, Gi as hasDesktopImporterState, Gn as rebindAttemptKey, Gr as itemHoldsExecutionAuthority, H as extractToolSubject, Ha as actionCompatible, Hi as DESKTOP_PROFILE_PACKAGE_NAME, Hn as proposeRebind, Hr as isOpenObligation, I as legacyRecordsNeedingReview, Ia as CERTIFICATE_VERSION_V2, Ii as resolveActiveProfileHostLock, In as effectuateBoundary, Ir as interpretClause, It as closingHint, J as canonicalArgvFromCommand, Ja as semanticActionFromCommand, Ji as readDesktopAppRuntime, Jn as CONFIRM_LINE_PATTERN, Jr as maskCodeSpans, K as shellReadbackOutcome, Ka as requestedTargetAuthorizesMutation, Ki as readAsarFile, Kn as rebindResponse, Kr as kindOfScope, L as rootLocatorFlavor, La as SEMANTIC_ACTIONS, Li as resolveDesktopProfileHostLock, Ln as isCurrentAcceptedBoundary, Lr as interpretMessage, Lt as openItems, M as PROTOCOL_V5_NOTICE, Ma as ACTION_MANIFEST, Mi as prepareActiveHostTrust, Mr as governedClauseRestrictsExecution, Mt as V6_ORDINARY_COMPLETION_RULE_COMPACT, N as PROTOCOL_V6_NOTICE, Na as ACTION_MANIFEST_VERSION, Ni as prepareDesktopHostTrust, Nr as hasOrderedCoordination, Nt as V6_ORDINARY_COMPLETION_RULE_SHORT, O as CAPTURE_V042_NOTICE, Oa as compareHostVersions, Oi as inspectDesktopTargetGraph, On as hasCurrentCertificate, Or as clauseAsksOwnQuestion, Ot as CLEANUP_CONDITION_RULE_SHORT, P as applyUpgradeEligibility, Pa as BOUNDED_ARTIFACT_TYPES, Pi as prepareTargetHostTrust, Pn as BOUNDARY_RECORD_PREFIX, Pr as hasQuestionScope, Pt as carriesCleanupCondition, Q as authorityCaptureCounts, Qa as RC020_RC2_HOST_PACKAGES, Qi as HostTrustError, Qn as deriveItemDiagnosis, Qr as opensWithDirective, R as supersedeItem, Ra as STATEFUL_ACTIONS, Ri as resolveInstalledHostLock, Rn as qualifyBoundary, Rr as introducesActionClause, Rt as recoveryDigest, Sa as selectHostCohort, Si as combineHostPolicy, Sn as latestRootInstruction, Sr as classifyTaskIntent, St as sessionQuery, T as SessionApiError, Ta as MIN_SUPPORTED_HOST_VERSION, Ti as hostLockContextFromComposedDump, Tn as testOutcomePredicate, Tr as LEGACY_QUALIFICATION, Tt as validateProofManifestV2, U as isDeterministicCheck, Ua as boundedArtifactChoiceMatches, Ui as DESKTOP_RUNTIME_PACKAGE_NAME, Un as proposeRebindOutcome, Ur as isQuestionScopeNeedingReview, V as extractTextContent, Va as SUPPORTED_EVIDENCE_ADAPTERS, Vi as DESKTOP_IDENTITY_FACTS, Vn as confirmRebind, Vr as isInformationalFragment, Vt as v6CurrentRootBoundaries, W as nativeGitParentOidVerified, Wa as isStatefulAction, Wi as auditDesktopInstalledImplementation, Wn as proposeRebindV042, Wr as isRestatement, X as parsePwshCommand, Xa as validateActionManifest, Xi as readDesktopTargetGraph, Xn as parseConfirmationMessage, Xr as namedActions, Y as isRunExecutable, Ya as semanticActionFromText, Yi as readDesktopDependency, Yn as isFrozenV042RebindResponse, Yr as maskQuotedSpans, Z as parseShellCommand, Za as validateActionTarget, Zi as writeDesktopRuntimeReceipt, Zn as capabilityRemedyPhrase, Zr as opensConditionLead, _ as previewFirstStepInjection, _a as evaluateGraphDerivedHostLock, _i as activeRendererModule, _n as decideTurnStopping, _r as extractOperation, _t as proofHostSurfacesOf, a as commitTreeSnapshotDigest, aa as ACTIVE_HOST_COHORT_ID, ai as splitTextFragments, an as bindingSatisfies, ar as admissibleForRemoval, at as PROOF_MANIFEST_DOMAIN_V2, ba as evaluateToolSurfaceCapability, bi as auditedForegroundRenderers, bn as isWholeTaskCompletionClaim, bt as requiredSubjectsOf, c as gitCommandMatchesTarget, ca as BASE_HOST_PACKAGES, ci as COMMAND_SURFACE_MANIFEST, cn as isVerifyingCapability, cr as partialFailureOf, ct as bindProofToProjection, d as verifiedLinearCommitReadback, da as GOAL_HOST_PACKAGES, di as digestStrings, dn as NO_PROGRESS_TURNS_BEFORE_STOP, dr as captureClause, dt as createProofManifest, ea as hostTrustDigest, ei as qualificationOfClause, er as itemDiagnosis, et as bindingIndividuallyAccepted, f as FIRST_STEP_GUIDANCE, fa as HOST_CAPABILITY_PACKAGE_GROUPS, fi as normalizeClause, fn as assessmentAction, fr as captureItem, ft as createProofManifestV2, g as lifecyclePhase, ga as evaluateExternalWaitCapability, gi as HostProfileError, gn as decideTurnBoundary, gr as extractMethod, gt as proofEvidenceConstraints, h as firstStepGuidanceV6, ha as bindLiveGoalCapability, hi as sha256, hn as currentActionBases, hr as extractArtifactPaths, ht as proofDigestV2, i as commitIndexSnapshotDigest, ia as registryArchiveModules, ii as semanticActionOfScope, ir as actionHasCertificationPath, it as PROOF_KINDS_V2, j as PROTOCOL_V4_NOTICE, ja as satisfiesSupportedHostRange, ji as packageRowsFromPnpmLock, jr as explanationHasActionResidue, jt as V6_ORDINARY_COMPLETION_RULE, k as DEFAULT_DELEGATION_TOOL_NAMES, ka as evaluateMinimumHostVersion, ki as inspectTargetHostGraph, kr as clauseIsGoverned, kt as DEFAULT_RECOVERY_CHAR_BUDGET, l as parseGitCommandManifest, la as DEFAULT_HOST_LOCK, li as validateManifest, ln as CONTROL_RECORD_PREFIX, lr as removalIsComplete, lt as bindProofV2ToProjection, m as firstStepGuidance, ma as bindExecutableIdentity, mi as sanitizeUrl, mn as classifyCompletionClaim, mr as environmentDefaultRepositoryTarget, mt as proofDigest, n as GIT_COMMAND_MANIFEST_IDS, na as qualifyHostTrust, ni as reportingHeadGoverns, nr as relevantEvidence, nt as PROOF_CAPABILITY_MATRIX, o as createGitPrestateEnvelope, oa as ACTIVE_HOST_COHORT_IDS, oi as statefulActionsOfScope, on as evidenceCoverage, or as capabilityConsequence, ot as PROOF_PROTOCOL_VERSION, p as claimedBatchHasRealRootInput, pa as HOST_COHORTS, pi as sanitizeClauseText, pn as assessmentOutcomePredicate, pr as classifyClause, pt as proofCapabilityReport, q as withDurability, qa as requestedTargetMatchesResolved, qi as readAsarIndex, qn as replayRebindResult, qr as legacyQuestionReadingIsInformational, r as GIT_COMMAND_TEMPLATES, ra as registryArchiveFiles, ri as restatedContentOf, rr as DEPENDENCY_FREE_ONLY_CONDITION, rt as PROOF_KINDS, s as executeRevalidatedGitEffect, sa as ACTIVE_HOST_LAUNCHER_VERSION, si as verbIsNegated, sn as evidenceMatchesItem, sr as capabilityFactOf, st as PROOF_PROTOCOL_VERSION_V2, t as RC020_RC1_HOST_PACKAGES, ta as parseHostTrust, ti as questionHeadsClause, tr as nativeFileTwoRole, tt as certifyCheckpoint, u as revalidateGitPrestate, ua as EXPECTED_HOST_PACKAGES, ui as canonicalizePath, un as NO_PROGRESS_RECORD_PREFIX, ur as removalIsPartiallyKnown, ut as canonicalProjection, v as projectSessionCoreV2, va as evaluateHostCapability, vi as auditedDefaultWorkdirHost, vn as decisionBoundaryKey, vr as isInformationalMessage, vt as proofOperationMatches, w as SESSION_EVENT_ENVELOPE_INVALID, wa as LATEST_TESTED_HOST_VERSION, wi as evaluateConfiguredHostLock, wn as progressFingerprint, wr as GRANTED_QUALIFICATION, wt as validateProofManifest, xa as hostVersionFromPackages, xi as auditedHostImplementation, xn as latestAssistantText, xt as scopeCoverageDigest, ya as evaluateHostLock, yi as auditedDefaultWorkdirProvider, yn as isRootPauseRequest, yr as segmentClauses, yt as proofV2Rejection, z as NATIVE_GIT_ROOT_PARENT_OID, za as STOP_PROTOCOL_VERSION, zi as revalidateDesktopCoreLock, zn as currentContractDigest, zr as isExecutableItem, zt as recoveryTitle } from "../domain-DKqyOtgY.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };