dsh-completion-guard 0.8.1 → 0.8.3

package/dist/{index-jKw6mANp.d.ts → index-BmTaAEkJ.d.ts}

@@ -249,7 +249,6 @@ interface ExecutionQualification {
   /** The governing head that restricted the clause, when one exists. */
   governedBy?: string;
 }
-/** Blank out every quoted span of the text. */
 declare function maskQuotedSpans(text: string): string;
 /**
 * Whether the clause's OWN span asks something, even when no governed head was
@@ -1619,6 +1618,15 @@ interface ClauseSegment {
   /** The one interpretation this segment came from; never re-derived downstream. */
   interpretation: ScopeInterpretation;
 }
+/**
+* CG-083-PERF02 (profile-guided): segmentClauses is a pure parse of the text,
+* and the v6 capture path asks the SAME strings many times (splitIndependent
+* re-parses left/right fragments per delimiter, the coordination and
+* explanation paths re-parse prefixes). Cache the parse result by exact input
+* and omitted options — a pure parse cache over immutable strings, not a
+* trust cache. Every explicit options object bypasses storage, including empty,
+* inherited and accessor-bearing objects; no enumeration can prove identity.
+*/
 declare function segmentClauses(text: string, options?: InterpretOptions): ClauseSegment[];
 /**
 * Build a GuardItem from an already-classified clause body and a resolved
@@ -1729,8 +1737,8 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Version admission floor. Since 0.8.1 the public DSH support range is
-* `>=0.2.0-rc.1` with NO implied upper bound: every host version at or above
+/** Version admission floor. Since 0.8.2 the public DSH support range is
+* `>=0.2.0-rc.2` with NO implied upper bound: every host version at or above
 * this floor (including later RCs on any tuple, stable and future releases)
 * passes VERSION ADMISSION. The floor only rises when a future Guard release
 * actively adopts a newer DSH; the runtime never raises it from a remote
@@ -1738,11 +1746,12 @@ declare function currentContractDigest(projection: GuardProjection): string;
 * metadata ignored. Version admission is one gate of several — it never
 * claims native validation of a not-yet-tested host, and the graph/byte/
 * contract audits below still run on every admission. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.1";
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.2";
 declare const SUPPORTED_HOST_RANGE: string;
 /** Versions with recorded first-hand host evidence. This is an EVIDENCE
 * ledger, NOT an admission whitelist: a missing row never refuses a
-* version-above-floor host. */
+* version-above-floor host. rc.1 keeps its historical row after the floor
+* moved to rc.2; the row records past evidence, not current admission. */
 declare const HOST_VALIDATED_VERSIONS: readonly string[];
 /** Historical alias retained for evidence-list readers; the admission rule is
 * the floor above, never this list. */
@@ -1772,15 +1781,23 @@ interface HostVersionDecision {
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
 /** Version admission: at or above the floor by strict SemVer precedence
-* (prerelease-aware; build metadata ignored). `0.2.0-rc.0` and the whole
-* `0.1.7.x` line stay below the floor; `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.0`,
+* (prerelease-aware; build metadata ignored). `0.2.0-rc.1` and the whole
+* `0.1.7.x` line stay below the floor; `0.2.0-rc.2`, `0.2.0`,
 * later patch/minor RCs and releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
 //#region src/domain/host-lock.d.ts
 type HostLockStatus = "supported" | "unsupported" | "unavailable";
 type HostPlatform = "posix" | "windows";
-type HostProfileKind = "headless" | "web";
+/**
+* Host profile identity. `headless` and `web` are the explicitly managed CLI
+* runtime profiles. `desktop` is the official Desktop app's own profile
+* (name `dsh-profile-desktop`): its graph lives in the signed app bundle and
+* is evaluated through the dedicated Desktop adapter, never by the Web
+* bundle/market inference — a Desktop profile bundles the Web app too, so
+* bundle presence alone misidentifies it.
+*/
+type HostProfileKind = "headless" | "web" | "desktop";
 /**
 * How a cohort's package rows were established. Bound into every host-lock
 * digest through the `host_audit_provenance` capability row, so a certificate
@@ -1812,7 +1829,7 @@ interface HostCohort {
   capabilities: CapabilityRow[];
 }
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.1";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.2";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 /** Core-lock/v1 separates optional market identity from the rc.2 critical
 * graph. Historical cohorts live only in test data. Version ordering cannot
@@ -1821,7 +1838,7 @@ declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.2.0-rc.1). The cohort
+* Baseline fixture package identities (DSH 0.2.0-rc.2). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -2149,6 +2166,15 @@ interface ToolResultInput {
   meta?: unknown;
   textContent: string;
 }
+/**
+* CG-083-BUG02: the explicit, VERIFIED no-parent state of a repository's
+* first commit, minted only by the native Git observer after reading the
+* commit object itself. It is distinct from a missing or unknown parent and
+* binds into certificates like any other parent identity.
+*/
+declare const NATIVE_GIT_ROOT_PARENT_OID = "root";
+/** CG-083-BUG02 parent identity accepted for a commit readback. */
+declare function nativeGitParentOidVerified(parentOid: unknown): boolean;
 declare function extractTextContent(content: readonly unknown[]): string;
 /** rc.2 persists a role=tool message with independent source and return IDs.
 * Both must bind the original call. PTC uses its own matched dispatch envelope.
@@ -2159,6 +2185,51 @@ interface ToolOperation {
   op: GuardOperation;
   path?: string;
 }
+/**
+* The layered shell reading (0.6.2 D062-02; source priority fixed by the
+* 0.6.2 review). Every field is derived from the same persisted result the
+* historical `outcome` was derived from, so replay is deterministic and no
+* historical fact is reinterpreted:
+*
+* - `hostToolReturned` is the host's own return, nothing more;
+* - `declaredExitCode` is `'unknown'` unless a real fact declared it, and an
+*   unmarked success is NOT a read exit code of 0;
+* - `operationAttribution` stays `'unknown'` for an opaque compound runner, so
+*   the last command's success can never cover an earlier failure;
+* - `outcome` uses the same evaluator with independently selected facts; a
+*   disagreement with the historical field is explicitly reported.
+*
+* SOURCE PRIORITY for the process terminal facts, highest first:
+*
+*   1. the trusted `contextGuardProcess` namespace — the run's OWN declaration
+*      of what the process did. An explicit `exitCode` here is read as declared
+*      even when the generic `meta.exitCode` says something else; the namespace
+*      is the more specific statement and never loses to the generic one.
+*   2. any other structured terminal fact the renderer put in `meta`
+*      (`meta.exitCode` / `meta.exit_code` / `meta.signal`).
+*   3. the rendered text markers of the audited renderers.
+*
+* A namespace declaration never overrides the frozen `outcome`, because the
+* frozen value is the historical record and this batch must not rewrite it; the
+* derived layer records its source and conflict flag instead of changing history.
+*/
+/**
+* CG-083-BUG03/R4: the ONE terminal verdict a native observer may rely on for
+* a persisted shell call. Reuses the evidence layer's AUTHORITATIVE terminal
+* resolution (the run's own `contextGuardProcess` declaration, then any other
+* structured meta fact, then the audited renderer markers) and cross-checks
+* it against the rendered markers: a declared failure is never upgraded, and
+* a declared verdict that CONTRADICTS the rendered markers is unresolvable
+* and stays `unknown`. A failed hook, a backgrounded or truncated result, or
+* an unclassifiable terminal state is therefore never "success". This reads
+* the CURRENT observation only; the historical frozen `outcome` of
+* already-recorded evidence is not rewritten.
+*/
+declare function shellReadbackOutcome(surface: "bash" | "pwsh" | "shell", args: Record<string, unknown>, result: {
+  error?: unknown;
+  meta?: unknown;
+  textContent: string;
+}): "success" | "failure" | "unknown";
 declare function isDeterministicCheck(command: string): boolean;
 interface ToolSubject {
   capabilities: string[];
@@ -2428,6 +2499,22 @@ interface HostAuditSession {
   memo<T>(key: string, compute: () => T): T;
 }
 //#endregion
+//#region src/domain/host-dependency-audit.d.ts
+interface DependencyAuditGraph {
+  modules: string;
+  records: Record<string, {
+    url?: unknown;
+    dependencies?: unknown;
+  }>;
+  reachable: Set<string>;
+  packages: Map<string, {
+    root: string;
+    manifest: Record<string, unknown>;
+    files: string[];
+    independentLanes?: boolean;
+  }>;
+}
+//#endregion
 //#region src/domain/host-contract-probe.d.ts
 declare const HOST_CONTRACT_SCHEMA: "guard-host-contract/v2";
 //#endregion
@@ -2475,6 +2562,125 @@ interface HostTrustAcquisitionOptions {
 }
 declare function acquireHostTrust(rows: readonly PackageRow[], fetcher?: typeof fetch, options?: HostTrustAcquisitionOptions): Promise<HostRebindTrust>;
 //#endregion
+//#region src/domain/host-desktop.d.ts
+/**
+* Official Desktop adapter (CG-RC2-002).
+*
+* The Desktop app is the only authority for the `desktop` profile: its
+* `package.json` is named `dsh-profile-desktop`, its dependency graph lives
+* inside the signed `app.asar` of the installation, and there is no pnpm
+* package map or lockfile to read. This adapter therefore reads the official
+* graph IN PLACE from the asar container — it never unpacks the bundle and
+* never fabricates a map. The identities the manifest declares are qualified
+* through the same registry acquisition and host-contract probe as a CLI
+* graph rebind (`acquireDesktopHostTrust`), and the actually installed bytes
+* are verified file-by-file from the asar against that qualification
+* (`auditDesktopInstalledImplementation`). Every mismatch fails closed.
+*
+* The asar container format is a flat archive: a JSON header (with per-file
+* offsets) followed by the file bytes. Reading a file means header lookup +
+* one bounded positioned read, so an audited file set costs no more I/O than
+* reading the same files from a directory, and a tampered byte changes its
+* digest exactly as on disk.
+*/
+declare const DESKTOP_PROFILE_PACKAGE_NAME = "dsh-profile-desktop";
+declare const DESKTOP_RUNTIME_PACKAGE_NAME = "@deepseek-ai/dsh-desktop-runtime";
+interface AsarNode {
+  files?: Record<string, AsarNode>;
+  size?: number;
+  offset?: string;
+  unpacked?: boolean;
+  integrity?: unknown;
+}
+interface AsarIndex {
+  dataOffset: number;
+  root: AsarNode;
+  headerSha256: string;
+  fileCount: number;
+}
+/** Read the asar header (the JSON index) without extracting any payload. */
+declare function readAsarIndex(archivePath: string): AsarIndex;
+/**
+* Read one file's exact bytes from the asar in place. Unpacked entries are
+* read from the sibling `app.asar.unpacked` tree, which is where the app
+* itself loads them; a path that escapes that tree fails closed.
+*/
+declare function readAsarFile(archivePath: string, index: AsarIndex, entryPath: string): Buffer;
+interface DesktopAppRuntime {
+  /** Absolute path of the app bundle archive the rows were read from. */
+  asarRealpath: string;
+  headerSha256: string;
+  manifestSha256: string;
+  metadataSha256: string;
+  /** DSH host version the official runtime manifest pins for `@deepseek-ai/dsh`. */
+  hostVersion: string;
+  /** Version of the `@deepseek-ai/dsh-desktop-runtime` private manifest. */
+  runtimeVersion: string;
+  metadata: {
+    desktopVersion: string;
+    platform: string;
+    arch: string;
+    node: string;
+    pnpm: string;
+    /** Count of the official per-file digest table entries bound by the metadata hash. */
+    fileTableEntries: number;
+  };
+  /** Version-only rows for the critical names the official manifest declares. */
+  rows: PackageRow[];
+}
+/**
+* Read the official Desktop runtime graph from the app bundle. `appAsarPath`
+* is the absolute path of `app.asar` (a file, not a directory). The runtime
+* identity binds: the asar header itself, the `@deepseek-ai/dsh-desktop-runtime`
+* manifest, the `desktop-runtime.json` metadata block, and the official CLI
+* carrier entry the app installs.
+*/
+declare function readDesktopAppRuntime(appAsarPath: string, session?: HostAuditSession): DesktopAppRuntime;
+interface DesktopTargetGraph {
+  packages: PackageRow[];
+  profileGraph: {
+    state: "dependency_free_desktop";
+    manifestSha256: string;
+    bundles: string[];
+  };
+  runtime: DesktopAppRuntime;
+}
+/** Importer state selects the active audit; its presence grants no trust. */
+declare function hasDesktopImporterState(profileRoot: string): boolean;
+/**
+* Pre-install inspection of a Desktop target: the profile must be the
+* Desktop-owned dependency-free profile, and the runtime half must come from
+* the official app bundle. Structural discovery grants no authority — the
+* caller must still qualify and byte-audit before any install decision.
+*/
+declare function readDesktopTargetGraph(appAsarPath: string, profileRoot: string): DesktopTargetGraph;
+/**
+* Verify the actually installed app bytes against the acquired qualification.
+* Each critical package's closed module inventory (every `.cm?js|json` file
+* under its asar root plus its manifest) is digested from the asar in place
+* and compared with the trust rows; any extra, missing, or changed file fails
+* closed. A critical package that also appears NESTED anywhere in the app
+* graph is an ambiguity no adapter resolves, so its presence fails closed
+* before any digest is computed.
+*/
+declare function auditDesktopInstalledImplementation(appAsarPath: string, expectations: readonly AuditedPackageExpectation[], session?: HostAuditSession): boolean;
+/** Persist the app-bundle identity next to the profile contract receipts so a
+* native annex can bind its readback to the exact inspected bundle. */
+declare function writeDesktopRuntimeReceipt(profileRoot: string, runtime: DesktopAppRuntime): string;
+declare const DESKTOP_IDENTITY_FACTS: Readonly<{
+  profilePackageName: typeof DESKTOP_PROFILE_PACKAGE_NAME;
+  runtimePackageName: typeof DESKTOP_RUNTIME_PACKAGE_NAME;
+  carrierEntry: string;
+}>;
+/**
+* Resolve one dependency's exact installed identity from the official app
+* graph by its top-level manifest. Used by the host-contract probe's
+* dependency acquisition; a name with no top-level manifest is unbound (the
+* installed-byte audit separately refuses nested critical duplicates, so a
+* nested-only dependency can never be silently resolved here).
+*/
+declare function readDesktopDependency(appAsarPath: string, name: string, session?: HostAuditSession): PackageRow;
+//#endregion
 //#region src/domain/host-resolver.d.ts
 declare class HostProfileError extends Error {
   readonly code: string;
@@ -2542,7 +2748,7 @@ interface AuditedPackageExpectation {
 /** Byte and dual-lane route audit over both graphs. Expectations are either
 * the published baseline or operator-owned, registry-acquired qualified module
 * digests. A missing digest set never authenticates unknown implementation. */
-declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[]): boolean;
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[], installationGraph?: DependencyAuditGraph, profileInstallationGraph?: DependencyAuditGraph): boolean;
 declare function activeRendererModule(nodeModulesRoot: string, name: string, providedSession?: HostAuditSession): {
   bytes: string;
   path: string;
@@ -2573,6 +2779,31 @@ declare function inspectTargetHostGraph(runtime: string, profile: string, trust?
 declare function prepareTargetHostTrust(runtime: string, profile: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Read and validate the actual runtime graph plus the installed profile plugin. */
 declare function resolveActiveProfileHostLock(runtimeRoot: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
+/** Complete Desktop composition: the official app bundle is the runtime half,
+* the Desktop-managed profile is the profile half. No structural discovery
+* grants authority — the installed asar bytes are verified against the same
+* qualification chain a CLI graph rebind uses. */
+declare function resolveDesktopProfileHostLock(appAsarPath: string, profileRoot: string, expectedPluginVersion: string, providedTrust?: HostRebindTrust): ActiveProfileHostLock;
+/** Desktop pre-install inspection: the Desktop-owned dependency-free profile
+* plus the official app bundle, evaluated and byte-audited like any target. */
+declare function inspectDesktopTargetGraph(appAsarPath: string, profileRoot: string, trust?: HostRebindTrust): {
+  packages: PackageRow[];
+  runtime: DesktopAppRuntime;
+  profileGraph: {
+    state: "dependency_free_desktop";
+    manifestSha256: string;
+    bundles: string[];
+  };
+};
+/** Fresh runtime readback for an injected desktop lock: the same evaluation
+* chain the inject path used, so the digest the runtime compares against its
+* injected expectation is computed identically. */
+declare function revalidateDesktopCoreLock(appAsarPath: string, profileRoot: string, expected: HostLockEvaluation, trustText?: string): HostLockEvaluation;
+/** Registry acquisition for the Desktop graph: the app manifest pins exact
+* versions; the INTEGRITY comes from the registry metadata for exactly that
+* name@version, and the archive bytes are verified by the same acquisition
+* and host-contract probe a CLI rebind uses. */
+declare function prepareDesktopHostTrust(appAsarPath: string, profileRoot: string, fetcher?: typeof fetch): Promise<HostRebindTrust>;
 /** Atomically inject a repeatable managed patch into the selected profile only. */
 declare function injectActiveProfileHostLock(input: ActiveProfileHostLock): string;
 /** Extract the bounded host tuple from DSH's composed YAML dump. */
@@ -3173,4 +3404,12 @@ declare function projectSessionCoreV2(events: DerivedEnvelope[], projection: Gua
 * remains a separate, currently pending fact. */
 declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
 //#endregion
-export { PROOF_MANIFEST_DOMAIN_V2 as $, TargetValue as $a, environmentDefaultRepositoryTarget as $i, CanonicalCommandSurface as $n, clauseIsProtected as $o, HostCapabilityRequest as $r, validateActionManifest as $s, HostProfileError as $t, V4SessionLike as A, ExpectedTransition as Aa, currentContractDigest as Ai, registryArchiveModules as An, ProcessOutcomeReason as Ao, PROTOCOL_V3_NOTICE as Ar, verbIsNegated as As, validateProofManifestV2 as At, V6_ORDINARY_COMPLETION_RULE_COMPACT as B, GuardOperation as Ba, CONFIRM_LINE_PATTERN as Bi, GitPrestateCheck as Bn, DirectiveClass as Bo, ACTIVE_HOST_LAUNCHER_VERSION as Br, STOP_PROTOCOL_VERSION as Bs, validateManifest as Bt, observeAssistantOutcome as C, DeriveResult as Ca, ParsedHostVersion as Ci, HostTrustError as Cn, DEPENDENCY_FREE_ONLY_CONDITION as Co, deriveItemDiagnosis as Cr, qualificationOfClause as Cs, proofOperationMatches as Ct, SESSION_API_UNSUPPORTED as D, EvidenceOutcome as Da, evaluateMinimumHostVersion as Di, parseHostTrust as Dn, OperationAttribution as Do, relevantEvidence as Dr, semanticActionOfScope as Ds, sessionQuery as Dt, v6TestPredicate as E, EvidenceBinding as Ea, compareHostVersions as Ei, hostTrustDigest as En, DerivedProcessFacts as Eo, nativeFileTwoRole as Er, restatedContentOf as Es, scopeCoverageDigest as Et, DEFAULT_RECOVERY_CHAR_BUDGET as F, GuardEvidence as Fa, segmentAuthorityBlocks as Fi, GitCommandManifest as Fn, capabilityFactOf as Fo, deriveProjection as Fr, BOUNDED_ARTIFACT_TYPES as Fs, isVerifyingCapability as Ft, openItems as G, NeedsReviewReason as Ga, RejectedBinding as Gi, commitTreeSnapshotDigest as Gn, LEGACY_QUALIFICATION as Go, ExecutableIdentity as Gr, actionCompatible as Gs, LifecyclePhase as Gt, carriesCleanupCondition as H, HostStatus as Ha, isFrozenV042RebindResponse as Hi, GitTargetIdentity as Hn, ExecutionQualification as Ho, BASE_HOST_PACKAGES as Hr, SUPPORTED_EVIDENCE_ADAPTERS as Hs, FIRST_STEP_GUIDANCE as Ht, MIN_RECOVERY_CHAR_BUDGET as I, GuardIntegrity as Ia, TaskIntent as Ii, GitCommandParseResult as In, partialFailureOf as Io, legacyRecordsNeedingReview as Ir, CERTIFICATE_VERSION as Is, COMMAND_SURFACE_MANIFEST as It, renderRecoveryPacket as J, TargetCaptureReasonCode as Ja, CaptureScope as Ji, gitCommandMatchesTarget as Jn, ScopeInterpretation as Jo, HOST_CAPABILITY_PACKAGE_GROUPS as Jr, requestedIdentityKey as Js, firstStepGuidanceV6 as Jt, recoveryDigest as K, PersistenceAuthorization as Ka, bindingIndividuallyAccepted as Ki, createGitPrestateEnvelope as Kn, QualificationReason as Ko, ExecutableIdentityBinding as Kr, boundedArtifactChoiceMatches as Ks, claimedBatchHasRealRootInput as Kt, RecoveryCause as L, GuardItem as La, UserInteractionKind as Li, GitCommandRejected as Ln, removalIsComplete as Lo, rootLocatorFlavor as Lr, CERTIFICATE_VERSION_V2 as Ls, CommandSurfaceManifest as Lt, CLEANUP_CONDITION_RULE as M, GoalRef as Ma, AuthorityBlockKind as Mi, GIT_COMMAND_TEMPLATES as Mn, actionHasCertificationPath as Mo, PROTOCOL_V5_NOTICE as Mr, ACTION_MANIFEST_VERSION as Ms, bindingSatisfies as Mt, CLEANUP_CONDITION_RULE_COMPACT as N, GuardBoundary as Na, AuthorityKind as Ni, GitAdapterAction as Nn, admissibleForRemoval as No, PROTOCOL_V6_NOTICE as Nr, ActionManifest as Ns, evidenceCoverage as Nt, SESSION_EVENT_ENVELOPE_INVALID as O, EvidenceParseStatus as Oa, parseHostVersion as Oi, qualifyHostTrust as On, ProcessExitStatus as Oo, CAPTURE_V042_NOTICE as Or, splitTextFragments as Os, sessionQueryV2 as Ot, CLEANUP_CONDITION_RULE_SHORT as P, GuardCheckpoint as Pa, authorityCaptureCounts as Pi, GitCommandAccepted as Pn, capabilityConsequence as Po, applyUpgradeEligibility as Pr, ActionSpec as Ps, evidenceMatchesItem as Pt, PROOF_KINDS_V2 as Q, TargetTuple as Qa, classifyClause as Qi, CanonicalArgv as Qn, clauseIsGoverned as Qo, HostCapabilityId as Qr, semanticActionFromText as Qs, AuditedPackageExpectation as Qt, RecoveryOptions as R, GuardItemKind as Ra, classifyTaskIntent as Ri, GitEffectExecution as Rn, removalIsPartiallyKnown as Ro, ACTIVE_HOST_COHORT_ID as Rr, SEMANTIC_ACTIONS as Rs, ManifestIssue as Rt, latestRootInstruction as S, DeriveConfig as Sa, MIN_SUPPORTED_HOST_VERSION as Si, HostTrustAcquisitionOptions as Sn, CapabilityRemedy as So, capabilityRemedyPhrase as Sr, presentExplanationHead as Ss, proofHostSurfacesOf as St, testOutcomePredicate as T, DerivedEnvelope as Ta, SUPPORTED_HOST_VERSIONS as Ti, acquireHostTrust as Tn, DependencyStatus as To, itemDiagnosis as Tr, reportingHeadGoverns as Ts, requiredSubjectsOf as Tt, cleanupConditionFor as U, MessageCoverage as Ua, parseConfirmationMessage as Ui, LinearCommitReadback as Un, GRANTED_QUALIFICATION as Uo, DEFAULT_HOST_LOCK as Ur, SemanticAction as Us, FirstStepInjection as Ut, V6_ORDINARY_COMPLETION_RULE_SHORT as V, GuardProjection as Va, ParsedConfirmation as Vi, GitPrestateEnvelope as Vn, Executee as Vo, AuditedExecutable as Vr, STOP_PROTOCOL_VERSION_V2 as Vs, ClaimedMessage as Vt, closingHint as W, NeedsReviewFact as Wa, CheckpointResult as Wi, commitIndexSnapshotDigest as Wn, InterpretOptions as Wo, EXPECTED_HOST_PACKAGES as Wr, StatefulAction as Ws, FirstStepPreviewInput as Wt, PROOF_CAPABILITY_MATRIX as X, TargetSource as Xa, captureClause as Xi, revalidateGitPrestate as Xn, clarifiedSpanOf as Xo, HostAuditProvenance as Xr, requestedTargetMatchesResolved as Xs, previewFirstStepInjection as Xt, v6CurrentRootBoundaries as Y, TargetCaptureStatus as Ya, ClauseSegment as Yi, parseGitCommandManifest as Yn, actionVerbMatches as Yo, HOST_COHORTS as Yr, requestedTargetAuthorizesMutation as Ys, lifecyclePhase as Yt, PROOF_KINDS as Z, TargetSourceKind as Za, captureItem as Zi, verifiedLinearCommitReadback as Zn, clauseAsksOwnQuestion as Zo, HostCapabilityEvaluation as Zr, semanticActionFromCommand as Zs, ActiveProfileHostLock as Zt, decideTurnStopping as _, BindingActionClosure as _a, selectHostCohort as _i, readActiveHostGraph as _n, rebindAttemptKey as _o, CertificationSupport as _r, maskCodeSpans as _s, createProofManifestV2 as _t, AssistantOutcomeObservation as a, BOUNDARY_RECORD_PREFIX as aa, sanitizeUrl as ac, HostLockStatus as ai, auditedHostImplementation as an, ReleaseGateDecision as ao, parseShellCommand as ar, interpretClause as as, ProofKindV2 as at, isWholeTaskCompletionClaim as b, DeferAuthorization as ba, HostVersionStatus as bi, verifyComposedHostLockDump as bn, CapabilityFact as bo, TaskKind as br, opensConditionLead as bs, proofDigestV2 as bt, CurrentActionBasis as c, BoundaryRequest as ca, HostToolSurface as ci, evaluateConfiguredHostLock as cn, ReleaseSettlement as co, ToolCallInput as cr, isExecutableItem as cs, ProofObligation as ct, TurnStoppingDecision as d, availableBoundaryQualifications as da, evaluateExternalWaitCapability as di, injectActiveProfileHostLock as dn, RebindArgs as do, evidenceFromPersistedToolResult as dr, isOpenObligation as ds, SessionQuery as dt, extractArtifactPaths as ea, validateActionTarget as ec, HostCohort as ei, TargetHostGraph as en, VerificationContract as eo, ParsedShell as er, explanationHasActionResidue as es, PROOF_PROTOCOL_VERSION as et, assessmentAction as f, effectuateBoundary as fa, evaluateGraphDerivedHostLock as fi, inspectTargetHostGraph as fn, RebindProposal as fo, extractTextContent as fr, isQuestionScopeNeedingReview as fs, SessionQueryV2 as ft, decideTurnBoundary as g, AssetObligation as ga, hostVersionFromPackages as gi, prepareTargetHostTrust as gn, proposeRebindV042 as go, withDurability as gr, legacyQuestionReadingIsInformational as gs, createProofManifest as gt, currentActionBases as h, AssetInterpretationFact as ha, evaluateToolSurfaceCapability as hi, prepareActiveHostTrust as hn, proposeRebindOutcome as ho, persistedToolResultStatus as hr, kindOfScope as hs, canonicalProjection as ht, supersedeItem as i, segmentClauses as ia, sanitizeClauseText as ic, HostLockEvaluation as ii, auditedForegroundRenderers as in, PackageRow as io, parsePwshCommand as ir, hasWorkPredicate as is, ProofKindCapability as it, snapshotSessionEvents as j, ExternalOperation as ja, AuthorityBlock as ji, GIT_COMMAND_MANIFEST_IDS as jn, RemovalOutcomeReport as jo, PROTOCOL_V4_NOTICE as jr, ACTION_MANIFEST as js, EvidenceFacetCoverage as jt, SessionApiError as k, EvidenceRole as ka, satisfiesSupportedHostRange as ki, registryArchiveFiles as kn, ProcessFactSource as ko, DEFAULT_DELEGATION_TOOL_NAMES as kr, statefulActionsOfScope as ks, validateProofManifest as kt, NO_PROGRESS_RECORD_PREFIX as l, GoalActivationState as la, bindExecutableIdentity as li, hostLockContextFromComposedDump as ln, BoundedSource as lo, ToolResultInput as lr, isExplanationScope as ls, ProofObligationV2 as lt, classifyCompletionClaim as m, qualifyBoundary as ma, evaluateHostLock as mi, packageRowsFromPnpmLock as mn, proposeRebind as mo, isDeterministicCheck as mr, itemHoldsExecutionAuthority as ms, bindProofV2ToProjection as mt, projectSessionCoreV2 as n, extractOperation as na, digestStrings as nc, HostCohortSelectionReason as ni, auditedDefaultWorkdirHost as nn, WorkUnit as no, canonicalArgvFromCommand as nr, hasOrderedCoordination as ns, ProofHostSurface as nt, CONTROL_RECORD_PREFIX as o, BoundaryEffectuation as oa, sha256 as oc, HostPlatform as oi, combineHostPolicy as on, ReleaseObservedIdentity as oo, goalCompletionDenial as or, interpretMessage as os, ProofManifest as ot, assessmentOutcomePredicate as p, isCurrentAcceptedBoundary as pa, evaluateHostCapability as pi, packageRowsFromActiveGraph as pn, confirmRebind as po, extractToolSubject as pr, isRestatement as ps, bindProofToProjection as pt, recoveryTitle as q, SourceSpan as qa, certifyCheckpoint as qi, executeRevalidatedGitEffect as qn, QualificationStatus as qo, GOAL_HOST_PACKAGES as qr, isStatefulAction as qs, firstStepGuidance as qt, projectCoreV2 as r, isInformationalMessage as ra, normalizeClause as rc, HostLockContext as ri, auditedDefaultWorkdirProvider as rn, createProjection as ro, isRunExecutable as rr, hasQuestionScope as rs, ProofKind as rt, CompletionDisposition as s, BoundaryQualification as sa, HostProfileKind as si, evaluateActiveHostLock as sn, ReleaseOperation as so, hasCurrentCertificate as sr, introducesActionClause as ss, ProofManifestV2 as st, RC020_RC1_HOST_PACKAGES as t, extractMethod as ta, canonicalizePath as tc, HostCohortSelection as ti, activeRendererModule as tn, WaitAuthorization as to, ShellParseStatus as tr, governedClauseRestrictsExecution as ts, PROOF_PROTOCOL_VERSION_V2 as tt, NO_PROGRESS_TURNS_BEFORE_STOP as u, GoalBoundaryAccess as ua, bindLiveGoalCapability as ui, hostLockRowsFromComposedDump as un, ProposeOutcome as uo, ToolSubject as ur, isInformationalFragment as us, ProofSurface as ut, decisionBoundaryKey as v, BoundaryDisposition as va, HOST_VALIDATED_VERSIONS as vi, resolveActiveProfileHostLock as vn, rebindResponse as vo, DiagnosisNextAction as vr, maskQuotedSpans as vs, proofCapabilityReport as vt, progressFingerprint as w, DeriveScope as wa, SUPPORTED_HOST_RANGE as wi, HostTrustedPackage as wn, DeclaredOperationResult as wo, evidenceAvailabilityReason as wr, questionHeadsClause as ws, proofV2Rejection as wt, latestAssistantText as x, DelegationRef as xa, LATEST_TESTED_HOST_VERSION as xi, HostRebindTrust as xn, CapabilityGap as xo, UnifiedItemDiagnosis as xr, opensWithDirective as xs, proofEvidenceConstraints as xt, isRootPauseRequest as y, BoundaryQualificationKind as ya, HostVersionDecision as yi, resolveInstalledHostLock as yn, replayRebindResult as yo, Repairability as yr, namedActions as ys, proofDigest as yt, V6_ORDINARY_COMPLETION_RULE as z, GuardItemStatus as za, classifyUserInteraction as zi, GitEffectRunner as zn, AuthorityDisposition as zo, ACTIVE_HOST_COHORT_IDS as zr, STATEFUL_ACTIONS as zs, OperationVerbEntry as zt };
+//#region src/domain/rc020-rc2-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.0-rc.2 tarballs (upstream
+* 639ed015397290b3745d163aafe02ffee4aa3f84). Native platform acceptance
+* remains a separate, currently pending fact. The rc.1 rows remain available
+* in `rc020-rc1-host.ts` as historical evidence. */
+declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
+//#endregion
+export { PROOF_KINDS_V2 as $, ExternalOperation as $a, AuthorityBlock as $i, GitCommandAccepted as $n, RemovalOutcomeReport as $o, PROTOCOL_V4_NOTICE as $r, ACTION_MANIFEST as $s, AuditedPackageExpectation as $t, SessionApiError as A, BoundaryRequest as Aa, HostToolSurface as Ai, DesktopAppRuntime as An, ReleaseSettlement as Ao, ToolSubject as Ar, isExecutableItem as As, validateProofManifest as At, V6_ORDINARY_COMPLETION_RULE as B, BoundaryDisposition as Ba, HOST_VALIDATED_VERSIONS as Bi, HostRebindTrust as Bn, rebindResponse as Bo, DiagnosisNextAction as Br, maskQuotedSpans as Bs, OperationVerbEntry as Bt, latestRootInstruction as C, extractMethod as Ca, canonicalizePath as Cc, HostCohortSelection as Ci, resolveInstalledHostLock as Cn, WaitAuthorization as Co, parsePwshCommand as Cr, governedClauseRestrictsExecution as Cs, proofHostSurfacesOf as Ct, v6TestPredicate as D, BOUNDARY_RECORD_PREFIX as Da, sanitizeUrl as Dc, HostLockStatus as Di, DESKTOP_IDENTITY_FACTS as Dn, ReleaseGateDecision as Do, NATIVE_GIT_ROOT_PARENT_OID as Dr, interpretClause as Ds, scopeCoverageDigest as Dt, testOutcomePredicate as E, segmentClauses as Ea, sanitizeClauseText as Ec, HostLockEvaluation as Ei, AsarIndex as En, PackageRow as Eo, hasCurrentCertificate as Er, hasWorkPredicate as Es, requiredSubjectsOf as Et, CLEANUP_CONDITION_RULE_SHORT as F, isCurrentAcceptedBoundary as Fa, evaluateHostCapability as Fi, readAsarIndex as Fn, confirmRebind as Fo, nativeGitParentOidVerified as Fr, isRestatement as Fs, evidenceMatchesItem as Ft, closingHint as G, DeriveResult as Ga, ParsedHostVersion as Gi, hostTrustDigest as Gn, DEPENDENCY_FREE_ONLY_CONDITION as Go, deriveItemDiagnosis as Gr, qualificationOfClause as Gs, FirstStepPreviewInput as Gt, V6_ORDINARY_COMPLETION_RULE_SHORT as H, DeferAuthorization as Ha, HostVersionStatus as Hi, HostTrustError as Hn, CapabilityFact as Ho, TaskKind as Hr, opensConditionLead as Hs, ClaimedMessage as Ht, DEFAULT_RECOVERY_CHAR_BUDGET as I, qualifyBoundary as Ia, evaluateHostLock as Ii, readDesktopAppRuntime as In, proposeRebind as Io, persistedToolResultStatus as Ir, itemHoldsExecutionAuthority as Is, isVerifyingCapability as It, recoveryTitle as J, EvidenceBinding as Ja, compareHostVersions as Ji, registryArchiveFiles as Jn, DerivedProcessFacts as Jo, nativeFileTwoRole as Jr, restatedContentOf as Js, firstStepGuidance as Jt, openItems as K, DeriveScope as Ka, SUPPORTED_HOST_RANGE as Ki, parseHostTrust as Kn, DeclaredOperationResult as Ko, evidenceAvailabilityReason as Kr, questionHeadsClause as Ks, LifecyclePhase as Kt, MIN_RECOVERY_CHAR_BUDGET as L, AssetInterpretationFact as La, evaluateToolSurfaceCapability as Li, readDesktopDependency as Ln, proposeRebindOutcome as Lo, shellReadbackOutcome as Lr, kindOfScope as Ls, COMMAND_SURFACE_MANIFEST as Lt, snapshotSessionEvents as M, GoalBoundaryAccess as Ma, bindLiveGoalCapability as Mi, auditDesktopInstalledImplementation as Mn, ProposeOutcome as Mo, extractTextContent as Mr, isInformationalFragment as Ms, EvidenceFacetCoverage as Mt, CLEANUP_CONDITION_RULE as N, availableBoundaryQualifications as Na, evaluateExternalWaitCapability as Ni, hasDesktopImporterState as Nn, RebindArgs as No, extractToolSubject as Nr, isOpenObligation as Ns, bindingSatisfies as Nt, SESSION_API_UNSUPPORTED as O, BoundaryEffectuation as Oa, sha256 as Oc, HostPlatform as Oi, DESKTOP_PROFILE_PACKAGE_NAME as On, ReleaseObservedIdentity as Oo, ToolCallInput as Or, interpretMessage as Os, sessionQuery as Ot, CLEANUP_CONDITION_RULE_COMPACT as P, effectuateBoundary as Pa, evaluateGraphDerivedHostLock as Pi, readAsarFile as Pn, RebindProposal as Po, isDeterministicCheck as Pr, isQuestionScopeNeedingReview as Ps, evidenceCoverage as Pt, PROOF_KINDS as Q, ExpectedTransition as Qa, currentContractDigest as Qi, GitAdapterAction as Qn, ProcessOutcomeReason as Qo, PROTOCOL_V3_NOTICE as Qr, verbIsNegated as Qs, ActiveProfileHostLock as Qt, RecoveryCause as R, AssetObligation as Ra, hostVersionFromPackages as Ri, readDesktopTargetGraph as Rn, proposeRebindV042 as Ro, withDurability as Rr, legacyQuestionReadingIsInformational as Rs, CommandSurfaceManifest as Rt, latestAssistantText as S, extractArtifactPaths as Sa, validateActionTarget as Sc, HostCohort as Si, resolveDesktopProfileHostLock as Sn, VerificationContract as So, isRunExecutable as Sr, explanationHasActionResidue as Ss, proofEvidenceConstraints as St, progressFingerprint as T, isInformationalMessage as Ta, normalizeClause as Tc, HostLockContext as Ti, verifyComposedHostLockDump as Tn, createProjection as To, goalCompletionDenial as Tr, hasQuestionScope as Ts, proofV2Rejection as Tt, carriesCleanupCondition as U, DelegationRef as Ua, LATEST_TESTED_HOST_VERSION as Ui, HostTrustedPackage as Un, CapabilityGap as Uo, UnifiedItemDiagnosis as Ur, opensWithDirective as Us, FIRST_STEP_GUIDANCE as Ut, V6_ORDINARY_COMPLETION_RULE_COMPACT as V, BoundaryQualificationKind as Va, HostVersionDecision as Vi, HostTrustAcquisitionOptions as Vn, replayRebindResult as Vo, Repairability as Vr, namedActions as Vs, validateManifest as Vt, cleanupConditionFor as W, DeriveConfig as Wa, MIN_SUPPORTED_HOST_VERSION as Wi, acquireHostTrust as Wn, CapabilityRemedy as Wo, capabilityRemedyPhrase as Wr, presentExplanationHead as Ws, FirstStepInjection as Wt, v6CurrentRootBoundaries as X, EvidenceParseStatus as Xa, parseHostVersion as Xi, GIT_COMMAND_MANIFEST_IDS as Xn, ProcessExitStatus as Xo, CAPTURE_V042_NOTICE as Xr, splitTextFragments as Xs, lifecyclePhase as Xt, renderRecoveryPacket as Y, EvidenceOutcome as Ya, evaluateMinimumHostVersion as Yi, registryArchiveModules as Yn, OperationAttribution as Yo, relevantEvidence as Yr, semanticActionOfScope as Ys, firstStepGuidanceV6 as Yt, PROOF_CAPABILITY_MATRIX as Z, EvidenceRole as Za, satisfiesSupportedHostRange as Zi, GIT_COMMAND_TEMPLATES as Zn, ProcessFactSource as Zo, DEFAULT_DELEGATION_TOOL_NAMES as Zr, statefulActionsOfScope as Zs, previewFirstStepInjection as Zt, decideTurnBoundary as _, ClauseSegment as _a, requestedTargetAuthorizesMutation as _c, HOST_COHORTS as _i, prepareActiveHostTrust as _n, TargetCaptureStatus as _o, CanonicalArgv as _r, actionVerbMatches as _s, createProofManifest as _t, supersedeItem as a, UserInteractionKind as aa, CERTIFICATE_VERSION_V2 as ac, rootLocatorFlavor as ai, auditedForegroundRenderers as an, GuardItem as ao, GitPrestateCheck as ar, removalIsComplete as as, ProofKindCapability as at, isRootPauseRequest as b, classifyClause as ba, semanticActionFromText as bc, HostCapabilityId as bi, readActiveHostGraph as bn, TargetTuple as bo, ShellParseStatus as br, clauseIsGoverned as bs, proofDigest as bt, CompletionDisposition as c, CONFIRM_LINE_PATTERN as ca, STOP_PROTOCOL_VERSION as cc, ACTIVE_HOST_LAUNCHER_VERSION as ci, evaluateActiveHostLock as cn, GuardOperation as co, LinearCommitReadback as cr, DirectiveClass as cs, ProofManifestV2 as ct, NO_PROGRESS_TURNS_BEFORE_STOP as d, parseConfirmationMessage as da, SemanticAction as dc, DEFAULT_HOST_LOCK as di, hostLockRowsFromComposedDump as dn, MessageCoverage as do, createGitPrestateEnvelope as dr, GRANTED_QUALIFICATION as ds, ProofSurface as dt, AuthorityBlockKind as ea, ACTION_MANIFEST_VERSION as ec, PROTOCOL_V5_NOTICE as ei, HostProfileError as en, GoalRef as eo, GitCommandManifest as er, actionHasCertificationPath as es, PROOF_MANIFEST_DOMAIN_V2 as et, TurnStoppingDecision as f, CheckpointResult as fa, StatefulAction as fc, EXPECTED_HOST_PACKAGES as fi, injectActiveProfileHostLock as fn, NeedsReviewFact as fo, executeRevalidatedGitEffect as fr, InterpretOptions as fs, SessionQuery as ft, currentActionBases as g, CaptureScope as ga, requestedIdentityKey as gc, HOST_CAPABILITY_PACKAGE_GROUPS as gi, packageRowsFromPnpmLock as gn, TargetCaptureReasonCode as go, verifiedLinearCommitReadback as gr, ScopeInterpretation as gs, canonicalProjection as gt, classifyCompletionClaim as h, certifyCheckpoint as ha, isStatefulAction as hc, GOAL_HOST_PACKAGES as hi, packageRowsFromActiveGraph as hn, SourceSpan as ho, revalidateGitPrestate as hr, QualificationStatus as hs, bindProofV2ToProjection as ht, projectCoreV2 as i, TaskIntent as ia, CERTIFICATE_VERSION as ic, legacyRecordsNeedingReview as ii, auditedDefaultWorkdirProvider as in, GuardIntegrity as io, GitEffectRunner as ir, partialFailureOf as is, ProofKind as it, V4SessionLike as j, GoalActivationState as ja, bindExecutableIdentity as ji, DesktopTargetGraph as jn, BoundedSource as jo, evidenceFromPersistedToolResult as jr, isExplanationScope as js, validateProofManifestV2 as jt, SESSION_EVENT_ENVELOPE_INVALID as k, BoundaryQualification as ka, HostProfileKind as ki, DESKTOP_RUNTIME_PACKAGE_NAME as kn, ReleaseOperation as ko, ToolResultInput as kr, introducesActionClause as ks, sessionQueryV2 as kt, CurrentActionBasis as l, ParsedConfirmation as la, STOP_PROTOCOL_VERSION_V2 as lc, AuditedExecutable as li, evaluateConfiguredHostLock as ln, GuardProjection as lo, commitIndexSnapshotDigest as lr, Executee as ls, ProofObligation as lt, assessmentOutcomePredicate as m, bindingIndividuallyAccepted as ma, boundedArtifactChoiceMatches as mc, ExecutableIdentityBinding as mi, inspectTargetHostGraph as mn, PersistenceAuthorization as mo, parseGitCommandManifest as mr, QualificationReason as ms, bindProofToProjection as mt, RC020_RC1_HOST_PACKAGES as n, authorityCaptureCounts as na, ActionSpec as nc, applyUpgradeEligibility as ni, activeRendererModule as nn, GuardCheckpoint as no, GitCommandRejected as nr, capabilityConsequence as ns, PROOF_PROTOCOL_VERSION_V2 as nt, AssistantOutcomeObservation as o, classifyTaskIntent as oa, SEMANTIC_ACTIONS as oc, ACTIVE_HOST_COHORT_ID as oi, auditedHostImplementation as on, GuardItemKind as oo, GitPrestateEnvelope as or, removalIsPartiallyKnown as os, ProofKindV2 as ot, assessmentAction as p, RejectedBinding as pa, actionCompatible as pc, ExecutableIdentity as pi, inspectDesktopTargetGraph as pn, NeedsReviewReason as po, gitCommandMatchesTarget as pr, LEGACY_QUALIFICATION as ps, SessionQueryV2 as pt, recoveryDigest as q, DerivedEnvelope as qa, SUPPORTED_HOST_VERSIONS as qi, qualifyHostTrust as qn, DependencyStatus as qo, itemDiagnosis as qr, reportingHeadGoverns as qs, claimedBatchHasRealRootInput as qt, projectSessionCoreV2 as r, segmentAuthorityBlocks as ra, BOUNDED_ARTIFACT_TYPES as rc, deriveProjection as ri, auditedDefaultWorkdirHost as rn, GuardEvidence as ro, GitEffectExecution as rr, capabilityFactOf as rs, ProofHostSurface as rt, CONTROL_RECORD_PREFIX as s, classifyUserInteraction as sa, STATEFUL_ACTIONS as sc, ACTIVE_HOST_COHORT_IDS as si, combineHostPolicy as sn, GuardItemStatus as so, GitTargetIdentity as sr, AuthorityDisposition as ss, ProofManifest as st, RC020_RC2_HOST_PACKAGES as t, AuthorityKind as ta, ActionManifest as tc, PROTOCOL_V6_NOTICE as ti, TargetHostGraph as tn, GuardBoundary as to, GitCommandParseResult as tr, admissibleForRemoval as ts, PROOF_PROTOCOL_VERSION as tt, NO_PROGRESS_RECORD_PREFIX as u, isFrozenV042RebindResponse as ua, SUPPORTED_EVIDENCE_ADAPTERS as uc, BASE_HOST_PACKAGES as ui, hostLockContextFromComposedDump as un, HostStatus as uo, commitTreeSnapshotDigest as ur, ExecutionQualification as us, ProofObligationV2 as ut, decideTurnStopping as v, captureClause as va, requestedTargetMatchesResolved as vc, HostAuditProvenance as vi, prepareDesktopHostTrust as vn, TargetSource as vo, CanonicalCommandSurface as vr, clarifiedSpanOf as vs, createProofManifestV2 as vt, observeAssistantOutcome as w, extractOperation as wa, digestStrings as wc, HostCohortSelectionReason as wi, revalidateDesktopCoreLock as wn, WorkUnit as wo, parseShellCommand as wr, hasOrderedCoordination as ws, proofOperationMatches as wt, isWholeTaskCompletionClaim as x, environmentDefaultRepositoryTarget as xa, validateActionManifest as xc, HostCapabilityRequest as xi, resolveActiveProfileHostLock as xn, TargetValue as xo, canonicalArgvFromCommand as xr, clauseIsProtected as xs, proofDigestV2 as xt, decisionBoundaryKey as y, captureItem as ya, semanticActionFromCommand as yc, HostCapabilityEvaluation as yi, prepareTargetHostTrust as yn, TargetSourceKind as yo, ParsedShell as yr, clauseAsksOwnQuestion as ys, proofCapabilityReport as yt, RecoveryOptions as z, BindingActionClosure as za, selectHostCohort as zi, writeDesktopRuntimeReceipt as zn, rebindAttemptKey as zo, CertificationSupport as zr, maskCodeSpans as zs, ManifestIssue as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as PROOF_MANIFEST_DOMAIN_V2, $a as TargetValue, $i as environmentDefaultRepositoryTarget, $n as CanonicalCommandSurface, $o as clauseIsProtected, $r as HostCapabilityRequest, $s as validateActionManifest, $t as HostProfileError, A as V4SessionLike, Aa as ExpectedTransition, Ai as currentContractDigest, An as registryArchiveModules, Ao as ProcessOutcomeReason, Ar as PROTOCOL_V3_NOTICE, As as verbIsNegated, At as validateProofManifestV2, B as V6_ORDINARY_COMPLETION_RULE_COMPACT, Ba as GuardOperation, Bi as CONFIRM_LINE_PATTERN, Bn as GitPrestateCheck, Bo as DirectiveClass, Br as ACTIVE_HOST_LAUNCHER_VERSION, Bs as STOP_PROTOCOL_VERSION, Bt as validateManifest, C as observeAssistantOutcome, Ca as DeriveResult, Ci as ParsedHostVersion, Cn as HostTrustError, Co as DEPENDENCY_FREE_ONLY_CONDITION, Cr as deriveItemDiagnosis, Cs as qualificationOfClause, Ct as proofOperationMatches, D as SESSION_API_UNSUPPORTED, Da as EvidenceOutcome, Di as evaluateMinimumHostVersion, Dn as parseHostTrust, Do as OperationAttribution, Dr as relevantEvidence, Ds as semanticActionOfScope, Dt as sessionQuery, E as v6TestPredicate, Ea as EvidenceBinding, Ei as compareHostVersions, En as hostTrustDigest, Eo as DerivedProcessFacts, Er as nativeFileTwoRole, Es as restatedContentOf, Et as scopeCoverageDigest, F as DEFAULT_RECOVERY_CHAR_BUDGET, Fa as GuardEvidence, Fi as segmentAuthorityBlocks, Fn as GitCommandManifest, Fo as capabilityFactOf, Fr as deriveProjection, Fs as BOUNDED_ARTIFACT_TYPES, Ft as isVerifyingCapability, G as openItems, Ga as NeedsReviewReason, Gi as RejectedBinding, Gn as commitTreeSnapshotDigest, Go as LEGACY_QUALIFICATION, Gr as ExecutableIdentity, Gs as actionCompatible, Gt as LifecyclePhase, H as carriesCleanupCondition, Ha as HostStatus, Hi as isFrozenV042RebindResponse, Hn as GitTargetIdentity, Ho as ExecutionQualification, Hr as BASE_HOST_PACKAGES, Hs as SUPPORTED_EVIDENCE_ADAPTERS, Ht as FIRST_STEP_GUIDANCE, I as MIN_RECOVERY_CHAR_BUDGET, Ia as GuardIntegrity, Ii as TaskIntent, In as GitCommandParseResult, Io as partialFailureOf, Ir as legacyRecordsNeedingReview, Is as CERTIFICATE_VERSION, It as COMMAND_SURFACE_MANIFEST, J as renderRecoveryPacket, Ja as TargetCaptureReasonCode, Ji as CaptureScope, Jn as gitCommandMatchesTarget, Jo as ScopeInterpretation, Jr as HOST_CAPABILITY_PACKAGE_GROUPS, Js as requestedIdentityKey, Jt as firstStepGuidanceV6, K as recoveryDigest, Ka as PersistenceAuthorization, Ki as bindingIndividuallyAccepted, Kn as createGitPrestateEnvelope, Ko as QualificationReason, Kr as ExecutableIdentityBinding, Ks as boundedArtifactChoiceMatches, Kt as claimedBatchHasRealRootInput, L as RecoveryCause, La as GuardItem, Li as UserInteractionKind, Ln as GitCommandRejected, Lo as removalIsComplete, Lr as rootLocatorFlavor, Ls as CERTIFICATE_VERSION_V2, Lt as CommandSurfaceManifest, M as CLEANUP_CONDITION_RULE, Ma as GoalRef, Mi as AuthorityBlockKind, Mn as GIT_COMMAND_TEMPLATES, Mo as actionHasCertificationPath, Mr as PROTOCOL_V5_NOTICE, Ms as ACTION_MANIFEST_VERSION, Mt as bindingSatisfies, N as CLEANUP_CONDITION_RULE_COMPACT, Na as GuardBoundary, Ni as AuthorityKind, Nn as GitAdapterAction, No as admissibleForRemoval, Nr as PROTOCOL_V6_NOTICE, Ns as ActionManifest, Nt as evidenceCoverage, O as SESSION_EVENT_ENVELOPE_INVALID, Oa as EvidenceParseStatus, Oi as parseHostVersion, On as qualifyHostTrust, Oo as ProcessExitStatus, Or as CAPTURE_V042_NOTICE, Os as splitTextFragments, Ot as sessionQueryV2, P as CLEANUP_CONDITION_RULE_SHORT, Pa as GuardCheckpoint, Pi as authorityCaptureCounts, Pn as GitCommandAccepted, Po as capabilityConsequence, Pr as applyUpgradeEligibility, Ps as ActionSpec, Pt as evidenceMatchesItem, Q as PROOF_KINDS_V2, Qa as TargetTuple, Qi as classifyClause, Qn as CanonicalArgv, Qo as clauseIsGoverned, Qr as HostCapabilityId, Qs as semanticActionFromText, Qt as AuditedPackageExpectation, R as RecoveryOptions, Ra as GuardItemKind, Ri as classifyTaskIntent, Rn as GitEffectExecution, Ro as removalIsPartiallyKnown, Rr as ACTIVE_HOST_COHORT_ID, Rs as SEMANTIC_ACTIONS, Rt as ManifestIssue, S as latestRootInstruction, Sa as DeriveConfig, Si as MIN_SUPPORTED_HOST_VERSION, Sn as HostTrustAcquisitionOptions, So as CapabilityRemedy, Sr as capabilityRemedyPhrase, Ss as presentExplanationHead, St as proofHostSurfacesOf, T as testOutcomePredicate, Ta as DerivedEnvelope, Ti as SUPPORTED_HOST_VERSIONS, Tn as acquireHostTrust, To as DependencyStatus, Tr as itemDiagnosis, Ts as reportingHeadGoverns, Tt as requiredSubjectsOf, U as cleanupConditionFor, Ua as MessageCoverage, Ui as parseConfirmationMessage, Un as LinearCommitReadback, Uo as GRANTED_QUALIFICATION, Ur as DEFAULT_HOST_LOCK, Us as SemanticAction, Ut as FirstStepInjection, V as V6_ORDINARY_COMPLETION_RULE_SHORT, Va as GuardProjection, Vi as ParsedConfirmation, Vn as GitPrestateEnvelope, Vo as Executee, Vr as AuditedExecutable, Vs as STOP_PROTOCOL_VERSION_V2, Vt as ClaimedMessage, W as closingHint, Wa as NeedsReviewFact, Wi as CheckpointResult, Wn as commitIndexSnapshotDigest, Wo as InterpretOptions, Wr as EXPECTED_HOST_PACKAGES, Ws as StatefulAction, Wt as FirstStepPreviewInput, X as PROOF_CAPABILITY_MATRIX, Xa as TargetSource, Xi as captureClause, Xn as revalidateGitPrestate, Xo as clarifiedSpanOf, Xr as HostAuditProvenance, Xs as requestedTargetMatchesResolved, Xt as previewFirstStepInjection, Y as v6CurrentRootBoundaries, Ya as TargetCaptureStatus, Yi as ClauseSegment, Yn as parseGitCommandManifest, Yo as actionVerbMatches, Yr as HOST_COHORTS, Ys as requestedTargetAuthorizesMutation, Yt as lifecyclePhase, Z as PROOF_KINDS, Za as TargetSourceKind, Zi as captureItem, Zn as verifiedLinearCommitReadback, Zo as clauseAsksOwnQuestion, Zr as HostCapabilityEvaluation, Zs as semanticActionFromCommand, Zt as ActiveProfileHostLock, _ as decideTurnStopping, _a as BindingActionClosure, _i as selectHostCohort, _n as readActiveHostGraph, _o as rebindAttemptKey, _r as CertificationSupport, _s as maskCodeSpans, _t as createProofManifestV2, a as AssistantOutcomeObservation, aa as BOUNDARY_RECORD_PREFIX, ac as sanitizeUrl, ai as HostLockStatus, an as auditedHostImplementation, ao as ReleaseGateDecision, ar as parseShellCommand, as as interpretClause, at as ProofKindV2, b as isWholeTaskCompletionClaim, ba as DeferAuthorization, bi as HostVersionStatus, bn as verifyComposedHostLockDump, bo as CapabilityFact, br as TaskKind, bs as opensConditionLead, bt as proofDigestV2, c as CurrentActionBasis, ca as BoundaryRequest, ci as HostToolSurface, cn as evaluateConfiguredHostLock, co as ReleaseSettlement, cr as ToolCallInput, cs as isExecutableItem, ct as ProofObligation, d as TurnStoppingDecision, da as availableBoundaryQualifications, di as evaluateExternalWaitCapability, dn as injectActiveProfileHostLock, do as RebindArgs, dr as evidenceFromPersistedToolResult, ds as isOpenObligation, dt as SessionQuery, ea as extractArtifactPaths, ec as validateActionTarget, ei as HostCohort, en as TargetHostGraph, eo as VerificationContract, er as ParsedShell, es as explanationHasActionResidue, et as PROOF_PROTOCOL_VERSION, f as assessmentAction, fa as effectuateBoundary, fi as evaluateGraphDerivedHostLock, fn as inspectTargetHostGraph, fo as RebindProposal, fr as extractTextContent, fs as isQuestionScopeNeedingReview, ft as SessionQueryV2, g as decideTurnBoundary, ga as AssetObligation, gi as hostVersionFromPackages, gn as prepareTargetHostTrust, go as proposeRebindV042, gr as withDurability, gs as legacyQuestionReadingIsInformational, gt as createProofManifest, h as currentActionBases, ha as AssetInterpretationFact, hi as evaluateToolSurfaceCapability, hn as prepareActiveHostTrust, ho as proposeRebindOutcome, hr as persistedToolResultStatus, hs as kindOfScope, ht as canonicalProjection, i as supersedeItem, ia as segmentClauses, ic as sanitizeClauseText, ii as HostLockEvaluation, in as auditedForegroundRenderers, io as PackageRow, ir as parsePwshCommand, is as hasWorkPredicate, it as ProofKindCapability, j as snapshotSessionEvents, ja as ExternalOperation, ji as AuthorityBlock, jn as GIT_COMMAND_MANIFEST_IDS, jo as RemovalOutcomeReport, jr as PROTOCOL_V4_NOTICE, js as ACTION_MANIFEST, jt as EvidenceFacetCoverage, k as SessionApiError, ka as EvidenceRole, ki as satisfiesSupportedHostRange, kn as registryArchiveFiles, ko as ProcessFactSource, kr as DEFAULT_DELEGATION_TOOL_NAMES, ks as statefulActionsOfScope, kt as validateProofManifest, l as NO_PROGRESS_RECORD_PREFIX, la as GoalActivationState, li as bindExecutableIdentity, ln as hostLockContextFromComposedDump, lo as BoundedSource, lr as ToolResultInput, ls as isExplanationScope, lt as ProofObligationV2, m as classifyCompletionClaim, ma as qualifyBoundary, mi as evaluateHostLock, mn as packageRowsFromPnpmLock, mo as proposeRebind, mr as isDeterministicCheck, ms as itemHoldsExecutionAuthority, mt as bindProofV2ToProjection, n as projectSessionCoreV2, na as extractOperation, nc as digestStrings, ni as HostCohortSelectionReason, nn as auditedDefaultWorkdirHost, no as WorkUnit, nr as canonicalArgvFromCommand, ns as hasOrderedCoordination, nt as ProofHostSurface, o as CONTROL_RECORD_PREFIX, oa as BoundaryEffectuation, oc as sha256, oi as HostPlatform, on as combineHostPolicy, oo as ReleaseObservedIdentity, or as goalCompletionDenial, os as interpretMessage, ot as ProofManifest, p as assessmentOutcomePredicate, pa as isCurrentAcceptedBoundary, pi as evaluateHostCapability, pn as packageRowsFromActiveGraph, po as confirmRebind, pr as extractToolSubject, ps as isRestatement, pt as bindProofToProjection, q as recoveryTitle, qa as SourceSpan, qi as certifyCheckpoint, qn as executeRevalidatedGitEffect, qo as QualificationStatus, qr as GOAL_HOST_PACKAGES, qs as isStatefulAction, qt as firstStepGuidance, r as projectCoreV2, ra as isInformationalMessage, rc as normalizeClause, ri as HostLockContext, rn as auditedDefaultWorkdirProvider, ro as createProjection, rr as isRunExecutable, rs as hasQuestionScope, rt as ProofKind, s as CompletionDisposition, sa as BoundaryQualification, si as HostProfileKind, sn as evaluateActiveHostLock, so as ReleaseOperation, sr as hasCurrentCertificate, ss as introducesActionClause, st as ProofManifestV2, t as RC020_RC1_HOST_PACKAGES, ta as extractMethod, tc as canonicalizePath, ti as HostCohortSelection, tn as activeRendererModule, to as WaitAuthorization, tr as ShellParseStatus, ts as governedClauseRestrictsExecution, tt as PROOF_PROTOCOL_VERSION_V2, u as NO_PROGRESS_TURNS_BEFORE_STOP, ua as GoalBoundaryAccess, ui as bindLiveGoalCapability, un as hostLockRowsFromComposedDump, uo as ProposeOutcome, ur as ToolSubject, us as isInformationalFragment, ut as ProofSurface, v as decisionBoundaryKey, va as BoundaryDisposition, vi as HOST_VALIDATED_VERSIONS, vn as resolveActiveProfileHostLock, vo as rebindResponse, vr as DiagnosisNextAction, vs as maskQuotedSpans, vt as proofCapabilityReport, w as progressFingerprint, wa as DeriveScope, wi as SUPPORTED_HOST_RANGE, wn as HostTrustedPackage, wo as DeclaredOperationResult, wr as evidenceAvailabilityReason, ws as questionHeadsClause, wt as proofV2Rejection, x as latestAssistantText, xa as DelegationRef, xi as LATEST_TESTED_HOST_VERSION, xn as HostRebindTrust, xo as CapabilityGap, xr as UnifiedItemDiagnosis, xs as opensWithDirective, xt as proofEvidenceConstraints, y as isRootPauseRequest, ya as BoundaryQualificationKind, yi as HostVersionDecision, yn as resolveInstalledHostLock, yo as replayRebindResult, yr as Repairability, ys as namedActions, yt as proofDigest, z as V6_ORDINARY_COMPLETION_RULE, za as GuardItemStatus, zi as classifyUserInteraction, zn as GitEffectRunner, zo as AuthorityDisposition, zr as ACTIVE_HOST_COHORT_IDS, zs as STATEFUL_ACTIONS, zt as OperationVerbEntry } from "./index-jKw6mANp.js";
+import { $ as PROOF_KINDS_V2, $a as ExternalOperation, $i as AuthorityBlock, $n as GitCommandAccepted, $o as RemovalOutcomeReport, $r as PROTOCOL_V4_NOTICE, $s as ACTION_MANIFEST, $t as AuditedPackageExpectation, A as SessionApiError, Aa as BoundaryRequest, Ai as HostToolSurface, An as DesktopAppRuntime, Ao as ReleaseSettlement, Ar as ToolSubject, As as isExecutableItem, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as BoundaryDisposition, Bi as HOST_VALIDATED_VERSIONS, Bn as HostRebindTrust, Bo as rebindResponse, Br as DiagnosisNextAction, Bs as maskQuotedSpans, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as extractMethod, Cc as canonicalizePath, Ci as HostCohortSelection, Cn as resolveInstalledHostLock, Co as WaitAuthorization, Cr as parsePwshCommand, Cs as governedClauseRestrictsExecution, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BOUNDARY_RECORD_PREFIX, Dc as sanitizeUrl, Di as HostLockStatus, Dn as DESKTOP_IDENTITY_FACTS, Do as ReleaseGateDecision, Dr as NATIVE_GIT_ROOT_PARENT_OID, Ds as interpretClause, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as segmentClauses, Ec as sanitizeClauseText, Ei as HostLockEvaluation, En as AsarIndex, Eo as PackageRow, Er as hasCurrentCertificate, Es as hasWorkPredicate, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as isCurrentAcceptedBoundary, Fi as evaluateHostCapability, Fn as readAsarIndex, Fo as confirmRebind, Fr as nativeGitParentOidVerified, Fs as isRestatement, Ft as evidenceMatchesItem, G as closingHint, Ga as DeriveResult, Gi as ParsedHostVersion, Gn as hostTrustDigest, Go as DEPENDENCY_FREE_ONLY_CONDITION, Gr as deriveItemDiagnosis, Gs as qualificationOfClause, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeferAuthorization, Hi as HostVersionStatus, Hn as HostTrustError, Ho as CapabilityFact, Hr as TaskKind, Hs as opensConditionLead, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as qualifyBoundary, Ii as evaluateHostLock, In as readDesktopAppRuntime, Io as proposeRebind, Ir as persistedToolResultStatus, Is as itemHoldsExecutionAuthority, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceBinding, Ji as compareHostVersions, Jn as registryArchiveFiles, Jo as DerivedProcessFacts, Jr as nativeFileTwoRole, Js as restatedContentOf, Jt as firstStepGuidance, K as openItems, Ka as DeriveScope, Ki as SUPPORTED_HOST_RANGE, Kn as parseHostTrust, Ko as DeclaredOperationResult, Kr as evidenceAvailabilityReason, Ks as questionHeadsClause, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as AssetInterpretationFact, Li as evaluateToolSurfaceCapability, Ln as readDesktopDependency, Lo as proposeRebindOutcome, Lr as shellReadbackOutcome, Ls as kindOfScope, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as GoalBoundaryAccess, Mi as bindLiveGoalCapability, Mn as auditDesktopInstalledImplementation, Mo as ProposeOutcome, Mr as extractTextContent, Ms as isInformationalFragment, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as availableBoundaryQualifications, Ni as evaluateExternalWaitCapability, Nn as hasDesktopImporterState, No as RebindArgs, Nr as extractToolSubject, Ns as isOpenObligation, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as BoundaryEffectuation, Oc as sha256, Oi as HostPlatform, On as DESKTOP_PROFILE_PACKAGE_NAME, Oo as ReleaseObservedIdentity, Or as ToolCallInput, Os as interpretMessage, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as effectuateBoundary, Pi as evaluateGraphDerivedHostLock, Pn as readAsarFile, Po as RebindProposal, Pr as isDeterministicCheck, Ps as isQuestionScopeNeedingReview, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as ExpectedTransition, Qi as currentContractDigest, Qn as GitAdapterAction, Qo as ProcessOutcomeReason, Qr as PROTOCOL_V3_NOTICE, Qs as verbIsNegated, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as AssetObligation, Ri as hostVersionFromPackages, Rn as readDesktopTargetGraph, Ro as proposeRebindV042, Rr as withDurability, Rs as legacyQuestionReadingIsInformational, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as extractArtifactPaths, Sc as validateActionTarget, Si as HostCohort, Sn as resolveDesktopProfileHostLock, So as VerificationContract, Sr as isRunExecutable, Ss as explanationHasActionResidue, St as proofEvidenceConstraints, T as progressFingerprint, Ta as isInformationalMessage, Tc as normalizeClause, Ti as HostLockContext, Tn as verifyComposedHostLockDump, To as createProjection, Tr as goalCompletionDenial, Ts as hasQuestionScope, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DelegationRef, Ui as LATEST_TESTED_HOST_VERSION, Un as HostTrustedPackage, Uo as CapabilityGap, Ur as UnifiedItemDiagnosis, Us as opensWithDirective, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as BoundaryQualificationKind, Vi as HostVersionDecision, Vn as HostTrustAcquisitionOptions, Vo as replayRebindResult, Vr as Repairability, Vs as namedActions, Vt as validateManifest, W as cleanupConditionFor, Wa as DeriveConfig, Wi as MIN_SUPPORTED_HOST_VERSION, Wn as acquireHostTrust, Wo as CapabilityRemedy, Wr as capabilityRemedyPhrase, Ws as presentExplanationHead, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as EvidenceParseStatus, Xi as parseHostVersion, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as ProcessExitStatus, Xr as CAPTURE_V042_NOTICE, Xs as splitTextFragments, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as EvidenceOutcome, Yi as evaluateMinimumHostVersion, Yn as registryArchiveModules, Yo as OperationAttribution, Yr as relevantEvidence, Ys as semanticActionOfScope, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as EvidenceRole, Zi as satisfiesSupportedHostRange, Zn as GIT_COMMAND_TEMPLATES, Zo as ProcessFactSource, Zr as DEFAULT_DELEGATION_TOOL_NAMES, Zs as statefulActionsOfScope, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as ClauseSegment, _c as requestedTargetAuthorizesMutation, _i as HOST_COHORTS, _n as prepareActiveHostTrust, _o as TargetCaptureStatus, _r as CanonicalArgv, _s as actionVerbMatches, _t as createProofManifest, a as supersedeItem, aa as UserInteractionKind, ac as CERTIFICATE_VERSION_V2, ai as rootLocatorFlavor, an as auditedForegroundRenderers, ao as GuardItem, ar as GitPrestateCheck, as as removalIsComplete, at as ProofKindCapability, b as isRootPauseRequest, ba as classifyClause, bc as semanticActionFromText, bi as HostCapabilityId, bn as readActiveHostGraph, bo as TargetTuple, br as ShellParseStatus, bs as clauseIsGoverned, bt as proofDigest, c as CompletionDisposition, ca as CONFIRM_LINE_PATTERN, cc as STOP_PROTOCOL_VERSION, ci as ACTIVE_HOST_LAUNCHER_VERSION, cn as evaluateActiveHostLock, co as GuardOperation, cr as LinearCommitReadback, cs as DirectiveClass, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as parseConfirmationMessage, dc as SemanticAction, di as DEFAULT_HOST_LOCK, dn as hostLockRowsFromComposedDump, do as MessageCoverage, dr as createGitPrestateEnvelope, ds as GRANTED_QUALIFICATION, dt as ProofSurface, ea as AuthorityBlockKind, ec as ACTION_MANIFEST_VERSION, ei as PROTOCOL_V5_NOTICE, en as HostProfileError, eo as GoalRef, er as GitCommandManifest, es as actionHasCertificationPath, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as CheckpointResult, fc as StatefulAction, fi as EXPECTED_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as NeedsReviewFact, fr as executeRevalidatedGitEffect, fs as InterpretOptions, ft as SessionQuery, g as currentActionBases, ga as CaptureScope, gc as requestedIdentityKey, gi as HOST_CAPABILITY_PACKAGE_GROUPS, gn as packageRowsFromPnpmLock, go as TargetCaptureReasonCode, gr as verifiedLinearCommitReadback, gs as ScopeInterpretation, gt as canonicalProjection, h as classifyCompletionClaim, ha as certifyCheckpoint, hc as isStatefulAction, hi as GOAL_HOST_PACKAGES, hn as packageRowsFromActiveGraph, ho as SourceSpan, hr as revalidateGitPrestate, hs as QualificationStatus, ht as bindProofV2ToProjection, i as projectCoreV2, ia as TaskIntent, ic as CERTIFICATE_VERSION, ii as legacyRecordsNeedingReview, in as auditedDefaultWorkdirProvider, io as GuardIntegrity, ir as GitEffectRunner, is as partialFailureOf, it as ProofKind, j as V4SessionLike, ja as GoalActivationState, ji as bindExecutableIdentity, jn as DesktopTargetGraph, jo as BoundedSource, jr as evidenceFromPersistedToolResult, js as isExplanationScope, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as BoundaryQualification, ki as HostProfileKind, kn as DESKTOP_RUNTIME_PACKAGE_NAME, ko as ReleaseOperation, kr as ToolResultInput, ks as introducesActionClause, kt as sessionQueryV2, l as CurrentActionBasis, la as ParsedConfirmation, lc as STOP_PROTOCOL_VERSION_V2, li as AuditedExecutable, ln as evaluateConfiguredHostLock, lo as GuardProjection, lr as commitIndexSnapshotDigest, ls as Executee, lt as ProofObligation, m as assessmentOutcomePredicate, ma as bindingIndividuallyAccepted, mc as boundedArtifactChoiceMatches, mi as ExecutableIdentityBinding, mn as inspectTargetHostGraph, mo as PersistenceAuthorization, mr as parseGitCommandManifest, ms as QualificationReason, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as authorityCaptureCounts, nc as ActionSpec, ni as applyUpgradeEligibility, nn as activeRendererModule, no as GuardCheckpoint, nr as GitCommandRejected, ns as capabilityConsequence, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as classifyTaskIntent, oc as SEMANTIC_ACTIONS, oi as ACTIVE_HOST_COHORT_ID, on as auditedHostImplementation, oo as GuardItemKind, or as GitPrestateEnvelope, os as removalIsPartiallyKnown, ot as ProofKindV2, p as assessmentAction, pa as RejectedBinding, pc as actionCompatible, pi as ExecutableIdentity, pn as inspectDesktopTargetGraph, po as NeedsReviewReason, pr as gitCommandMatchesTarget, ps as LEGACY_QUALIFICATION, pt as SessionQueryV2, q as recoveryDigest, qa as DerivedEnvelope, qi as SUPPORTED_HOST_VERSIONS, qn as qualifyHostTrust, qo as DependencyStatus, qr as itemDiagnosis, qs as reportingHeadGoverns, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as segmentAuthorityBlocks, rc as BOUNDED_ARTIFACT_TYPES, ri as deriveProjection, rn as auditedDefaultWorkdirHost, ro as GuardEvidence, rr as GitEffectExecution, rs as capabilityFactOf, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as classifyUserInteraction, sc as STATEFUL_ACTIONS, si as ACTIVE_HOST_COHORT_IDS, sn as combineHostPolicy, so as GuardItemStatus, sr as GitTargetIdentity, ss as AuthorityDisposition, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as AuthorityKind, tc as ActionManifest, ti as PROTOCOL_V6_NOTICE, tn as TargetHostGraph, to as GuardBoundary, tr as GitCommandParseResult, ts as admissibleForRemoval, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as isFrozenV042RebindResponse, uc as SUPPORTED_EVIDENCE_ADAPTERS, ui as BASE_HOST_PACKAGES, un as hostLockContextFromComposedDump, uo as HostStatus, ur as commitTreeSnapshotDigest, us as ExecutionQualification, ut as ProofObligationV2, v as decideTurnStopping, va as captureClause, vc as requestedTargetMatchesResolved, vi as HostAuditProvenance, vn as prepareDesktopHostTrust, vo as TargetSource, vr as CanonicalCommandSurface, vs as clarifiedSpanOf, vt as createProofManifestV2, w as observeAssistantOutcome, wa as extractOperation, wc as digestStrings, wi as HostCohortSelectionReason, wn as revalidateDesktopCoreLock, wo as WorkUnit, wr as parseShellCommand, ws as hasOrderedCoordination, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as environmentDefaultRepositoryTarget, xc as validateActionManifest, xi as HostCapabilityRequest, xn as resolveActiveProfileHostLock, xo as TargetValue, xr as canonicalArgvFromCommand, xs as clauseIsProtected, xt as proofDigestV2, y as decisionBoundaryKey, ya as captureItem, yc as semanticActionFromCommand, yi as HostCapabilityEvaluation, yn as prepareTargetHostTrust, yo as TargetSourceKind, yr as ParsedShell, ys as clauseAsksOwnQuestion, yt as proofCapabilityReport, z as RecoveryOptions, za as BindingActionClosure, zi as selectHostCohort, zn as writeDesktopRuntimeReceipt, zo as rebindAttemptKey, zr as CertificationSupport, zs as maskCodeSpans, zt as ManifestIssue } from "./index-BmTaAEkJ.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -136,6 +136,7 @@ declare const Config: z<{
   hostLockRuntimeRoot?: string;
   hostLockProfileRoot?: string;
   hostLockTrust?: string;
+  hostLockDesktopDigest?: string;
 }>;
 //#endregion
 //#region src/runtime.d.ts
@@ -184,6 +185,7 @@ declare function apply(ctx: Context, rawConfig?: {
   hostLockRuntimeRoot?: unknown;
   hostLockProfileRoot?: unknown;
   hostLockTrust?: unknown;
+  hostLockDesktopDigest?: unknown;
 }, seams?: RuntimeExecutorSeams): void;
 //#endregion
 //#region src/raw-replay.d.ts
@@ -201,4 +203,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };