dsh-completion-guard 0.8.2 → 0.8.4

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable changes to this project are documented here. The project is pre-1.0; release versions track the plugin lifecycle, not stabilised API promises.
 
+## 0.8.4
+
+- The official Desktop app can now coexist with the official plugin market (`dshmarket`). Earlier versions refused any Desktop profile whose bundle list carried the market — the pre-install check rejected it as a bundle conflict and the installed/runtime check misreported it as an unbound plugin. The market is now treated like any other third-party profile plugin on Desktop. Official profile identity, Guard binding, the Headless bundle conflict, implementation byte and route audits, and host-lock digests are unchanged and keep failing closed.
+- Installing or removing the market changes the Desktop profile's importer, so an existing Desktop lock no longer matches and Guard refuses the stale digest. After any market change, rebuild the machine's lock with `inspect` and `inject`, generate a new composed configuration with `dump-desktop`, then verify that new output with `verify-dump`. Web keeps using the market bundle as a Web identity marker; the market restart adapter remains unavailable, and Desktop restart remains unsupported.
+- Adds a versioned native acceptance entrypoint for real-market Desktop coexistence (`desktop-market-coexistence/v1`) with its schema and validator. It installs the declared market cohort through the official plugin CLI into an owned isolated Desktop profile, verifies lock drift on install and removal, and probes the loaded backend in the final coexistence state. It complements, and does not replace, the existing Desktop layered no-op gate; graphical-shell and real-model observations remain separate gates.
+
+## 0.8.3
+
+- Rejects invalid checkpoint predicate parameters as structured binding errors during live calls and persisted replay, while retaining the whole-contract signing gate. Filtered feedback exposes target/transition errors and provides exact predicate parameters instead of sending callers back to a successful test.
+- Desktop acceptance now checks Guard alone for byte-identical second installation, then checks the multi-package fixture separately. Only JSON object-key order in `.modules.yaml` may differ in the latter check; values, array order, types, other files and Guard bytes remain strict. This versioned contract records pnpm 11.7.0’s ordering limit and preserves historical strict failures.
+- A checkpoint with a correctly matched binding now explains that certification is still pending and reports remaining work across the whole contract, even when the request filters the item list. It no longer asks for the same evidence again; completion still requires the full signing checks. Dots inside filenames stay inside prohibition clauses instead of creating false requirements.
+- Failed Desktop second-install checks now retain bounded field and byte-offset differences, with redacted file snapshots stored only in a private local diagnostic directory. The two no-op checks follow the versioned layered contract above.
+- Avoids repeated full-table scans when capturing new requirements and checking coverage. Pure parsing uses bounded storage that retains reused entries and returns independent results to callers. Shorter tool descriptions and first-step guidance reduce repeated context text while preserving authority checks, recovery reminders and existing tool result fields.
+- Preserves an explicitly named absolute test directory instead of silently using the session's working directory. Unresolved location clauses require clarification; passing tests in the parent directory cannot satisfy the child-directory requirement.
+- Reduces repeated work when mounting and updating a session. Unchanged, provably immutable event snapshots reuse the existing projection; mutable or accessor-backed inputs rebuild it. Per-derivation indexes speed up long histories. Regression fixtures compare event prefixes with an independently frozen 0.8.2 implementation; this does not promise a fixed loading time for every history or host.
+- Shares archive and module reads within each Desktop host validation. Each new validation still checks the current installed bytes. Ordinary shell calls that cannot produce a trusted workdir receipt avoid the full host audit; eligible root test obligations retain it.
+- Reads private-ledger anchors and records once per append. Writer admission publishes a complete owner record atomically, and a provably dead same-host writer can be recovered without deleting another writer's lock. Unknown and live owners are refused. An adopted stale barrier continues to block older writers; downgrading requires the controlled maintenance procedure in the [writer-lock reference](docs/WRITER_LOCK_PROTOCOL.md).
+- Makes Git observation agree with the evidence layer's terminal verdict. Failed, backgrounded, truncated or unclassifiable results cannot establish an observed commit or push. Parent and tree identities come from the original commit object, including first commits, shallow repositories and replacement refs. Git readback supports cancellation and an overall deadline.
+- Adds independent baseline comparisons, session disposal checks and process-tree memory measurements. Performance fixtures separate long-history distributions and distinguish a first mount in a warm process from a cold process start. Native Web/Desktop behavior and exact-artifact platform acceptance are recorded separately.
+
 ## 0.8.2
 
 - Adds a separate host lock for the official Desktop app. Guard reads the application archive in place, checks its vendor signature and signed archive header, and verifies installed modules and dependency routes. Web and Headless keep their existing paths; Desktop application restart remains unavailable through Guard.
@@ -29,7 +49,7 @@ All notable changes to this project are documented here. The project is pre-1.0;
 - Goal feedback now offers only individually certifiable native edit/readback and foreground test bindings, and guides native edits to their readback without demanding a historical resolution chain.
 - Preserve 0.7.1 recovery feedback and independent proof, Goal and release gates. Upgrade requires a new host lock and restart; old certificates are not re-signed.
 
-Upgrade DSH before installing 0.8.0, then regenerate the host lock for each profile. Follow the [upgrade guide](docs/HOST_LOCK_UPGRADE.md). The [source-stage evidence snapshot](docs/DSH_0_1_7_RC2_ACCEPTANCE.md) records development checks and their limits; exact-artifact acceptance is recorded separately in Release attachments.
+Upgrade DSH before installing 0.8.0, then regenerate the host lock for each profile. Follow the [upgrade guide](docs/HOST_LOCK_UPGRADE.md). The [source-stage evidence snapshot](https://github.com/GreenLv/dsh-completion-guard/blob/563f144bf8568793da5017b9ff71395a33dcd265/docs/DSH_0_1_7_RC2_ACCEPTANCE.md) records development checks and their limits; exact-artifact acceptance is recorded separately in Release attachments.
 
 ## 0.7.1 - 2026-09-22
 

package/CHANGELOG.zh-CN.md

@@ -2,6 +2,26 @@
 
 本项目的重要变化记录在这里。项目仍处于 1.0 之前；版本号跟踪插件生命周期，不代表 API 已稳定。
 
+## 0.8.4
+
+- 官方 Desktop 应用现在可以与官方插件市场（`dshmarket`）共存。更早的版本会拒绝 bundles 中带有市场的任何 Desktop profile——预安装检查将其报为 bundle 冲突，已安装/运行时检查则误报为插件未绑定。现在市场在 Desktop 上与其他普通第三方 profile 插件同等对待。官方 profile 身份、Guard 绑定、Headless bundle 冲突、实现字节与路由审计以及宿主锁摘要全部保持不变并继续 fail closed。
+- 安装或移除市场会改变 Desktop profile 的 importer，旧锁因此不再匹配，Guard 会拒绝过期摘要。每次市场变化后，先用 `inspect`、`inject` 重建本机锁，再用 `dump-desktop` 生成新的组合配置，最后用 `verify-dump` 校验这份新配置。Web 继续把市场 bundle 用作 Web 身份线索；market 重启适配器仍不可用，Desktop 重启仍不受支持。
+- 新增真实市场 Desktop 共存的版本化原生验收入口（`desktop-market-coexistence/v1`）及其 schema 和 validator。它通过官方插件 CLI 向受控隔离 Desktop profile 安装声明的市场版本，验证安装与移除时的锁漂移，并在最终共存状态下探测已加载后端。它补充而不取代现有 Desktop 分层 no-op 门槛；图形界面与真实模型观察仍是独立门槛。
+
+## 0.8.3
+
+- checkpoint 的非法 predicate 参数在实时调用和持久化重放中均返回结构化绑定错误，不再抛错终止宿主轮次；全局签署检查保留。筛选后的反馈会明确目标与转换参数错误，给出准确参数，避免用重复执行成功测试来修补绑定。
+- Desktop 验收先单独安装 Guard 并要求二次安装字节完全一致，再独立核对多包 fixture。后者仅允许 `.modules.yaml` 的 JSON 对象键序变化，完整值、数组顺序、类型、其他文件和 Guard 字节仍须一致。新版本合同明确记录 pnpm 11.7.0 的排序限制，历史严格失败继续保留。
+- checkpoint 已匹配单项证据但尚未签署时，会说明整个合同还剩哪些工作；筛选条目也不会隐藏这份全局诊断。不再要求重复收集同一份证据，完成仍须通过完整签署检查。文件名内部的点号保留在禁止语句内，不再拆成伪要求。
+- Desktop 二次安装未通过严格 no-op 检查时，保留有界字段变化与字节偏移诊断；脱敏文件快照仅存于本机私有诊断目录。两项检查按上述版本化分层合同分别判定。
+- 捕获新增要求与核对覆盖范围时，避免重复扫描全部历史条目。纯解析结果采用有界存储，保留重复使用的条目，并向调用方返回独立副本。精简工具说明与首步提示，减少重复上下文文本，并保留权限核验、恢复提示与原有工具结果字段。
+- 保留测试要求中明确指定的绝对目录，不再静默改用会话工作目录。无法确定的位置要求澄清；父目录中的通过结果不能满足子目录的测试要求。
+- 减少会话挂载和更新时的重复计算。事件快照未变且能证明不可变时复用已有投影；可变输入或含访问器的输入仍完整重建。单次推导内的索引加快长历史处理。回归夹具逐事件前缀对照独立冻结的 0.8.2 实现；这不代表所有历史和宿主都能达到固定的载入时间。
+- 在单次 Desktop 宿主校验中共享归档和模块读取；每次新校验仍核对当前安装字节。无法产生可信工作目录回执的普通 shell 调用省去完整宿主审计，符合条件的根测试义务保留审计。
+- 私有账本每次追加只读取一次共享锚点和记录链。写入准入先准备完整所有者记录，再原子发布；可证实已死亡的同机 writer 可恢复，无需删除其他 writer 的锁。未知或存活所有者仍被拒绝。采纳的遗留屏障会继续阻止旧版 writer；降级须遵循[写入锁说明](docs/WRITER_LOCK_PROTOCOL.md)中的独占维护步骤。
+- Git 观察结果与证据层使用相同的终态判定。失败、后台执行、输出截断或无法归类的结果不能证明 commit 或 push 已完成。父提交和树身份从原始提交对象读取，覆盖首次提交、浅仓库及替换引用；回读支持取消和总体截止时间。
+- 增加独立基线对照、会话释放检查及进程树内存测量。性能夹具区分长历史分布，并将已启动进程中的首次挂载与进程冷启动分别命名。原生 Web/Desktop 行为及精确制品的跨平台验收单独记录。
+
 ## 0.8.2
 
 - 新增官方 Desktop 应用的独立宿主锁。Guard 原位读取应用归档，核对厂商签名、签名绑定的归档头、安装模块与实际依赖路由。Web、Headless 沿用各自的入口；Guard 暂不提供 Desktop 应用重启。
@@ -29,7 +49,7 @@
 - Goal 反馈只提供可逐项认证的原生编辑／回读和前台测试绑定，并引导原生编辑完成回读，不再误要求历史 resolution 链。
 - 保留 0.7.1 恢复反馈与现有 proof、Goal、release 边界。升级需重建 host-lock 并重启；旧证书不会重新签发。
 
-安装 0.8.0 前先升级 DSH，再为各 Profile 重新生成宿主锁。步骤见[升级指南](docs/HOST_LOCK_UPGRADE.md)。[源码阶段证据快照](docs/DSH_0_1_7_RC2_ACCEPTANCE.md)保留开发检查及其限制；精确制品验收另记于 Release 附件。
+安装 0.8.0 前先升级 DSH，再为各 Profile 重新生成宿主锁。步骤见[升级指南](docs/HOST_LOCK_UPGRADE.md)。[源码阶段证据快照](https://github.com/GreenLv/dsh-completion-guard/blob/563f144bf8568793da5017b9ff71395a33dcd265/docs/DSH_0_1_7_RC2_ACCEPTANCE.md)保留开发检查及其限制；精确制品验收另记于 Release 附件。
 
 ## 0.7.1（2026-09-22）
 

package/README.md

@@ -4,7 +4,7 @@
 
 An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks them before the task is marked complete. It restores the same checklist after a resumed session and accepts only matching saved tool results as evidence.
 
-> **0.8.2 requires DSH `>=0.2.0-rc.2` and supports the official Desktop app.** Stop the host, upgrade DSH and install Guard, then run the host-lock tool's `inspect`, `inject` and `verify-dump` commands for each profile before starting it when needed. For the Desktop app, pass `--profile desktop` with the app archive as the runtime root. These commands bind the installed packages and their verified routes; installing Guard does not rebuild the lock. The tested host baseline is DSH `0.2.0-rc.2` with Cordis `4.0.4`; later versions must pass the same identity and adapter checks. See [compatibility](docs/COMPATIBILITY.md) for version admission, rebinding and native-evidence limits.
+> **0.8.4 requires DSH `>=0.2.0-rc.2` and supports the official Desktop app.** Stop the host, upgrade DSH and install Guard, then run the host-lock tool's `inspect`, `inject` and `verify-dump` commands for each profile before starting it when needed. For the Desktop app, pass `--profile desktop` with the app archive as the runtime root. These commands bind the installed packages and their verified routes; installing Guard does not rebuild the lock. The tested host baseline is DSH `0.2.0-rc.2` with Cordis `4.0.4`; later versions must pass the same identity and adapter checks. See [compatibility](docs/COMPATIBILITY.md) for version admission, rebinding and native-evidence limits.
 
 ![Task-contract clauses and bounded evidence pass through a checkpoint before a completion certificate is issued](assets/social/completion-guard-hero.png)
 
@@ -13,7 +13,7 @@ An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks
 Stop the host, upgrade to DSH `0.2.0-rc.2` or later, then install Guard in the profile you want to protect:
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.8.2
+dsh plugin --profile web add dsh-completion-guard@0.8.4
 ```
 
 **Keep the host stopped while upgrading and checking the installed graph below.** The lock records the package versions and installation directories DSH actually uses. A lock generated before an upgrade describes the old packages and will fail against the new runtime. `inject` writes to `<profile>/cordis.patch.yml`, so back up that file first.
@@ -32,7 +32,7 @@ dsh --profile web --dump-config | "$GUARD_HOST_LOCK" verify-dump --runtime-root
 
 On Windows, run the same three subcommands through `dsh-completion-guard-host-lock.cmd` in the Web settings directory's `node_modules\.bin` directory and use Windows absolute paths. Native acceptance and publication evidence is recorded per version, bound to that version's exact bytes, in the [acceptance record](docs/LOCAL_ACCEPTANCE.md); a version's source and deterministic evidence never substitutes for its own installed-artifact claim. Other host versions and artifacts need their own native evidence. Repeat this check after changing DSH, Guard or the profile location; an ordinary market-only update does not require reinjection. The Guard stays unavailable if the active package set is missing, duplicated, untrusted, or different from the bound setup.
 
-For Desktop, install through the app's bundled CLI and bind `--profile desktop` to its `app.asar` and actual profile directory. Its CLI does not offer `--dump-config`; use Guard's `dump-desktop` to compose the configuration before readback. Follow the [Desktop upgrade steps](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile).
+For Desktop, install through the app's bundled CLI and bind `--profile desktop` to its `app.asar` and actual profile directory. Its CLI does not offer `--dump-config`; use Guard's `dump-desktop` to compose the configuration before readback. Follow the [Desktop upgrade steps](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile). The official plugin market (`dshmarket`) can be installed alongside Guard in the Desktop profile; after installing or removing it, rebuild the Desktop lock with the full four-step flow (`inspect`, `inject`, a newly generated `dump-desktop` output, and `verify-dump` on that new output).
 
 When ready to use Guard, start DSH Web, open a session, and enable it:
 
@@ -59,7 +59,7 @@ The ordinary `context_guard_action` and `context_guard_evidence` tools from 0.6.
 
 ## Status and compatibility
 
-Version 0.8.2 admits **DSH `>=0.2.0-rc.2`** without an upper version limit, and adds the official Desktop app as an independent profile (`desktop`): the app-owned `dsh-profile-desktop` profile is identified by its own name, its bundled graph is read in place from the signed `app.asar`, and its installed bytes are verified against the published tarballs. Cordis has an independent `>=4.0.4` peer range and must pass its adapter qualification. The published `0.2.0-rc.2` 46-package graph is the reviewed baseline (the rc.1 graph remains historical evidence); a newer mixed-version graph can receive its own registry-backed lock when the consumed implementations qualify. Changed Session/API implementations run a finite contract probe; incompatible behavior reports a qualification failure, and an old certificate cannot transfer to the new lock. Exact-artifact macOS/Windows native acceptance and future-version native evidence remain separate; Desktop backend, graphical-shell and real-model results are recorded separately for each exact artifact.
+Version 0.8.4 admits **DSH `>=0.2.0-rc.2`** without an upper version limit, and supports the official Desktop app as an independent profile (`desktop`): the app-owned `dsh-profile-desktop` profile is identified by its own name, its bundled graph is read in place from the signed `app.asar`, and its installed bytes are verified against the published tarballs. Cordis has an independent `>=4.0.4` peer range and must pass its adapter qualification. The published `0.2.0-rc.2` 46-package graph is the reviewed baseline (the rc.1 graph remains historical evidence); a newer mixed-version graph can receive its own registry-backed lock when the consumed implementations qualify. Changed Session/API implementations run a finite contract probe; incompatible behavior reports a qualification failure, and an old certificate cannot transfer to the new lock. Exact-artifact macOS/Windows native acceptance and future-version native evidence remain separate; Desktop backend, graphical-shell and real-model results are recorded separately for each exact artifact.
 
 After upgrading, inspect, inject and verify the new host lock, then start the profile when needed; follow the [host-lock upgrade guide](docs/HOST_LOCK_UPGRADE.md). DSH migrates old sessions to V4. Guard retains old ledgers and certificates without re-signing them or promoting their old identity to current authority. Goal remains optional; installing the host does not imply it is enabled.
 

package/README.zh-CN.md

@@ -4,7 +4,7 @@
 
 面向 DeepSeek Harness（DSH）的任务保护插件。它保存任务要求，并在任务标记完成前逐项核对；会话恢复后仍使用同一份检查表，只有匹配的已保存工具结果才能作为证据。
 
-> **0.8.2 要求 DSH `>=0.2.0-rc.2`，并支持官方 Desktop 应用。** 请先停止宿主、升级 DSH 并安装 Guard，再为每个 Profile 执行宿主锁工具的 `inspect`、`inject` 和 `verify-dump`，最后按需启动该 Profile。对 Desktop 应用请传入 `--profile desktop`，并以应用归档作为 runtime root。这些命令绑定实际安装包及其经过验证的路由；安装 Guard 本身不会重建锁。已测试的宿主基线是 DSH `0.2.0-rc.2`、Cordis `4.0.4`；较新版本仍需通过身份和适配契约检查。版本准入、重绑及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
+> **0.8.4 要求 DSH `>=0.2.0-rc.2`，并支持官方 Desktop 应用。** 请先停止宿主、升级 DSH 并安装 Guard，再为每个 Profile 执行宿主锁工具的 `inspect`、`inject` 和 `verify-dump`，最后按需启动该 Profile。对 Desktop 应用请传入 `--profile desktop`，并以应用归档作为 runtime root。这些命令绑定实际安装包及其经过验证的路由；安装 Guard 本身不会重建锁。已测试的宿主基线是 DSH `0.2.0-rc.2`、Cordis `4.0.4`；较新版本仍需通过身份和适配契约检查。版本准入、重绑及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
 
 ![任务合同条款与有界证据通过 checkpoint 匹配后签发完成证书](assets/social/completion-guard-hero.png)
 
@@ -13,7 +13,7 @@
 先停止宿主并升级到 DSH `0.2.0-rc.2` 或更高版本，再把 Guard 安装到需要保护的 Profile：
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.8.2
+dsh plugin --profile web add dsh-completion-guard@0.8.4
 ```
 
 **升级和执行下面的安装图检查时，保持宿主停止。** 宿主锁记录 DSH 实际使用的包版本和安装目录；如果升级前就生成锁，新运行时会因包版本不匹配而拒绝它。`inject` 会修改 `<profile>/cordis.patch.yml`，请先备份该文件。
@@ -32,7 +32,7 @@ dsh --profile web --dump-config | "$GUARD_HOST_LOCK" verify-dump --runtime-root
 
 Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。各版本的原生验收与发布证据在[验收记录](docs/LOCAL_ACCEPTANCE.md)中按版本绑定其精确制品字节单独记录；任何版本的源码与确定性证据都不能等同于该版本已安装制品的结论。其他宿主版本和制品仍需各自的原生证据。DSH、Guard 或 profile 路径变化后需要重新检查；仅 market 普通升级不需要重新注入。如果当前包集合缺失、重复、不可信或不同于已绑定环境，Guard 会保持不可用。
 
-Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应用 `app.asar` 和实际 profile 路径建立宿主锁。它的 CLI 不提供 `--dump-config`，请用 Guard 的 `dump-desktop` 生成组合配置再回读；见[Desktop 升级步骤](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile)。
+Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应用 `app.asar` 和实际 profile 路径建立宿主锁。它的 CLI 不提供 `--dump-config`，请用 Guard 的 `dump-desktop` 生成组合配置再回读；见[Desktop 升级步骤](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile)。官方插件市场（`dshmarket`）现在可以在 Desktop profile 中与 Guard 共存；安装或移除市场后，请按完整四步流程重建 Desktop 锁（`inspect`、`inject`、用 `dump-desktop` 新生成的组合配置、以及对新配置执行的 `verify-dump`）。
 
 需要使用时，再启动 DSH Web，打开会话并启用 Guard：
 
@@ -59,7 +59,7 @@ Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应
 
 ## 状态与兼容性
 
-0.8.2 的版本准入范围是 **DSH `>=0.2.0-rc.2`**，没有版本上限，并把官方 Desktop 应用纳为独立 profile（`desktop`）：应用自有的 `dsh-profile-desktop` 按名称识别，其内置依赖图从已签名的 `app.asar` 原位读取，安装字节按发布 tarball 逐文件核验。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.2` 46 包依赖图为已审查基线（rc.1 图保留为历史证据）；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。最终制品的 macOS/Windows 原生验收、未来版本原生证据与 Desktop 原生验收仍须分别建立。
+0.8.4 的版本准入范围是 **DSH `>=0.2.0-rc.2`**，没有版本上限，并支持官方 Desktop 应用的独立 profile（`desktop`）：应用自有的 `dsh-profile-desktop` 按名称识别，其内置依赖图从已签名的 `app.asar` 原位读取，安装字节按发布 tarball 逐文件核验。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.2` 46 包依赖图为已审查基线（rc.1 图保留为历史证据）；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。最终制品的 macOS/Windows 原生验收、未来版本原生证据与 Desktop 原生验收仍须分别建立。
 
 升级后重新检查、注入并验证 host-lock，再按需启动对应 Profile，步骤见[宿主锁升级](docs/HOST_LOCK_UPGRADE.md)。旧会话由 DSH 迁移为 V4；Guard 保留旧 ledger 和证书，但不会重签或把旧身份升级为当前权限。Goal 为可选能力，宿主安装不代表它已启用。
 

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as PROOF_KINDS_V2, $a as GuardCheckpoint, $i as authorityCaptureCounts, $n as GitCommandAccepted, $o as capabilityConsequence, $r as applyUpgradeEligibility, $s as ActionSpec, $t as AuditedPackageExpectation, A as SessionApiError, Aa as availableBoundaryQualifications, Ai as evaluateExternalWaitCapability, An as DesktopAppRuntime, Ao as RebindArgs, Ar as evidenceFromPersistedToolResult, As as isOpenObligation, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as DelegationRef, Bi as LATEST_TESTED_HOST_VERSION, Bn as HostRebindTrust, Bo as CapabilityGap, Br as UnifiedItemDiagnosis, Bs as opensWithDirective, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as segmentClauses, Cc as sanitizeClauseText, Ci as HostLockEvaluation, Cn as resolveInstalledHostLock, Cr as parsePwshCommand, Cs as hasWorkPredicate, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BoundaryRequest, Di as HostToolSurface, Dn as DESKTOP_IDENTITY_FACTS, Dr as ToolCallInput, Ds as isExecutableItem, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as BoundaryQualification, Ei as HostProfileKind, En as AsarIndex, Er as hasCurrentCertificate, Es as introducesActionClause, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as AssetObligation, Fi as hostVersionFromPackages, Fn as readAsarIndex, Fo as proposeRebindV042, Fr as withDurability, Fs as legacyQuestionReadingIsInformational, Ft as evidenceMatchesItem, G as closingHint, Ga as EvidenceBinding, Gi as compareHostVersions, Gn as hostTrustDigest, Go as DerivedProcessFacts, Gr as nativeFileTwoRole, Gs as restatedContentOf, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeriveResult, Hi as ParsedHostVersion, Hn as HostTrustError, Ho as DEPENDENCY_FREE_ONLY_CONDITION, Hr as deriveItemDiagnosis, Hs as qualificationOfClause, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as BindingActionClosure, Ii as selectHostCohort, In as readDesktopAppRuntime, Io as rebindAttemptKey, Ir as CertificationSupport, Is as maskCodeSpans, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceRole, Ji as satisfiesSupportedHostRange, Jn as registryArchiveFiles, Jo as ProcessFactSource, Jr as DEFAULT_DELEGATION_TOOL_NAMES, Js as statefulActionsOfScope, Jt as firstStepGuidance, K as openItems, Ka as EvidenceOutcome, Ki as evaluateMinimumHostVersion, Kn as parseHostTrust, Ko as OperationAttribution, Kr as relevantEvidence, Ks as semanticActionOfScope, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as BoundaryDisposition, Li as HOST_VALIDATED_VERSIONS, Ln as readDesktopDependency, Lo as rebindResponse, Lr as DiagnosisNextAction, Ls as maskQuotedSpans, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as isCurrentAcceptedBoundary, Mi as evaluateHostCapability, Mn as auditDesktopInstalledImplementation, Mo as confirmRebind, Mr as extractToolSubject, Ms as isRestatement, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as qualifyBoundary, Ni as evaluateHostLock, Nn as hasDesktopImporterState, No as proposeRebind, Nr as isDeterministicCheck, Ns as itemHoldsExecutionAuthority, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as GoalActivationState, Oi as bindExecutableIdentity, On as DESKTOP_PROFILE_PACKAGE_NAME, Oo as BoundedSource, Or as ToolResultInput, Os as isExplanationScope, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as AssetInterpretationFact, Pi as evaluateToolSurfaceCapability, Pn as readAsarFile, Po as proposeRebindOutcome, Pr as persistedToolResultStatus, Ps as kindOfScope, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as GuardBoundary, Qi as AuthorityKind, Qn as GitAdapterAction, Qo as admissibleForRemoval, Qr as PROTOCOL_V6_NOTICE, Qs as ActionManifest, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as BoundaryQualificationKind, Ri as HostVersionDecision, Rn as readDesktopTargetGraph, Ro as replayRebindResult, Rr as Repairability, Rs as namedActions, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as isInformationalMessage, Sc as normalizeClause, Si as HostLockContext, Sn as resolveDesktopProfileHostLock, So as createProjection, Sr as isRunExecutable, Ss as hasQuestionScope, St as proofEvidenceConstraints, T as progressFingerprint, Ta as BoundaryEffectuation, Tc as sha256, Ti as HostPlatform, Tn as verifyComposedHostLockDump, Tr as goalCompletionDenial, Ts as interpretMessage, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DeriveScope, Ui as SUPPORTED_HOST_RANGE, Un as HostTrustedPackage, Uo as DeclaredOperationResult, Ur as evidenceAvailabilityReason, Us as questionHeadsClause, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as DeriveConfig, Vi as MIN_SUPPORTED_HOST_VERSION, Vn as HostTrustAcquisitionOptions, Vo as CapabilityRemedy, Vr as capabilityRemedyPhrase, Vs as presentExplanationHead, Vt as validateManifest, W as cleanupConditionFor, Wa as DerivedEnvelope, Wi as SUPPORTED_HOST_VERSIONS, Wn as acquireHostTrust, Wo as DependencyStatus, Wr as itemDiagnosis, Ws as reportingHeadGoverns, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as ExternalOperation, Xi as AuthorityBlock, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as RemovalOutcomeReport, Xr as PROTOCOL_V4_NOTICE, Xs as ACTION_MANIFEST, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as ExpectedTransition, Yi as currentContractDigest, Yn as registryArchiveModules, Yo as ProcessOutcomeReason, Yr as PROTOCOL_V3_NOTICE, Ys as verbIsNegated, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as GoalRef, Zi as AuthorityBlockKind, Zn as GIT_COMMAND_TEMPLATES, Zo as actionHasCertificationPath, Zr as PROTOCOL_V5_NOTICE, Zs as ACTION_MANIFEST_VERSION, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as classifyClause, _c as semanticActionFromText, _i as HostCapabilityId, _n as prepareActiveHostTrust, _o as TargetTuple, _r as CanonicalArgv, _s as clauseIsGoverned, _t as createProofManifest, a as supersedeItem, aa as CONFIRM_LINE_PATTERN, ac as STOP_PROTOCOL_VERSION, ai as ACTIVE_HOST_LAUNCHER_VERSION, an as auditedForegroundRenderers, ao as GuardOperation, ar as GitPrestateCheck, as as DirectiveClass, at as ProofKindCapability, b as isRootPauseRequest, ba as extractMethod, bc as canonicalizePath, bi as HostCohortSelection, bn as readActiveHostGraph, bo as WaitAuthorization, br as ShellParseStatus, bs as governedClauseRestrictsExecution, bt as proofDigest, c as CompletionDisposition, ca as parseConfirmationMessage, cc as SemanticAction, ci as DEFAULT_HOST_LOCK, cn as evaluateActiveHostLock, co as MessageCoverage, cr as LinearCommitReadback, cs as GRANTED_QUALIFICATION, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as bindingIndividuallyAccepted, dc as boundedArtifactChoiceMatches, di as ExecutableIdentityBinding, dn as hostLockRowsFromComposedDump, do as PersistenceAuthorization, dr as createGitPrestateEnvelope, ds as QualificationReason, dt as ProofSurface, ea as segmentAuthorityBlocks, ec as BOUNDED_ARTIFACT_TYPES, ei as deriveProjection, en as HostProfileError, eo as GuardEvidence, er as GitCommandManifest, es as capabilityFactOf, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as certifyCheckpoint, fc as isStatefulAction, fi as GOAL_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as SourceSpan, fr as executeRevalidatedGitEffect, fs as QualificationStatus, ft as SessionQuery, g as currentActionBases, ga as captureItem, gc as semanticActionFromCommand, gi as HostCapabilityEvaluation, gn as packageRowsFromPnpmLock, go as TargetSourceKind, gr as verifiedLinearCommitReadback, gs as clauseAsksOwnQuestion, gt as canonicalProjection, h as classifyCompletionClaim, ha as captureClause, hc as requestedTargetMatchesResolved, hi as HostAuditProvenance, hn as packageRowsFromActiveGraph, ho as TargetSource, hr as revalidateGitPrestate, hs as clarifiedSpanOf, ht as bindProofV2ToProjection, i as projectCoreV2, ia as classifyUserInteraction, ic as STATEFUL_ACTIONS, ii as ACTIVE_HOST_COHORT_IDS, in as auditedDefaultWorkdirProvider, io as GuardItemStatus, ir as GitEffectRunner, is as AuthorityDisposition, it as ProofKind, j as V4SessionLike, ja as effectuateBoundary, ji as evaluateGraphDerivedHostLock, jn as DesktopTargetGraph, jo as RebindProposal, jr as extractTextContent, js as isQuestionScopeNeedingReview, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as GoalBoundaryAccess, ki as bindLiveGoalCapability, kn as DESKTOP_RUNTIME_PACKAGE_NAME, ko as ProposeOutcome, kr as ToolSubject, ks as isInformationalFragment, kt as sessionQueryV2, l as CurrentActionBasis, la as CheckpointResult, lc as StatefulAction, li as EXPECTED_HOST_PACKAGES, ln as evaluateConfiguredHostLock, lo as NeedsReviewFact, lr as commitIndexSnapshotDigest, ls as InterpretOptions, lt as ProofObligation, m as assessmentOutcomePredicate, ma as ClauseSegment, mc as requestedTargetAuthorizesMutation, mi as HOST_COHORTS, mn as inspectTargetHostGraph, mo as TargetCaptureStatus, mr as parseGitCommandManifest, ms as actionVerbMatches, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as UserInteractionKind, nc as CERTIFICATE_VERSION_V2, ni as rootLocatorFlavor, nn as activeRendererModule, no as GuardItem, nr as GitCommandRejected, ns as removalIsComplete, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as ParsedConfirmation, oc as STOP_PROTOCOL_VERSION_V2, oi as AuditedExecutable, on as auditedHostImplementation, oo as GuardProjection, or as GitPrestateEnvelope, os as Executee, ot as ProofKindV2, p as assessmentAction, pa as CaptureScope, pc as requestedIdentityKey, pi as HOST_CAPABILITY_PACKAGE_GROUPS, pn as inspectDesktopTargetGraph, po as TargetCaptureReasonCode, pr as gitCommandMatchesTarget, ps as ScopeInterpretation, pt as SessionQueryV2, q as recoveryDigest, qa as EvidenceParseStatus, qi as parseHostVersion, qn as qualifyHostTrust, qo as ProcessExitStatus, qr as CAPTURE_V042_NOTICE, qs as splitTextFragments, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as classifyTaskIntent, rc as SEMANTIC_ACTIONS, ri as ACTIVE_HOST_COHORT_ID, rn as auditedDefaultWorkdirHost, ro as GuardItemKind, rr as GitEffectExecution, rs as removalIsPartiallyKnown, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as isFrozenV042RebindResponse, sc as SUPPORTED_EVIDENCE_ADAPTERS, si as BASE_HOST_PACKAGES, sn as combineHostPolicy, so as HostStatus, sr as GitTargetIdentity, ss as ExecutionQualification, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as TaskIntent, tc as CERTIFICATE_VERSION, ti as legacyRecordsNeedingReview, tn as TargetHostGraph, to as GuardIntegrity, tr as GitCommandParseResult, ts as partialFailureOf, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as RejectedBinding, uc as actionCompatible, ui as ExecutableIdentity, un as hostLockContextFromComposedDump, uo as NeedsReviewReason, ur as commitTreeSnapshotDigest, us as LEGACY_QUALIFICATION, ut as ProofObligationV2, v as decideTurnStopping, va as environmentDefaultRepositoryTarget, vc as validateActionManifest, vi as HostCapabilityRequest, vn as prepareDesktopHostTrust, vo as TargetValue, vr as CanonicalCommandSurface, vs as clauseIsProtected, vt as createProofManifestV2, w as observeAssistantOutcome, wa as BOUNDARY_RECORD_PREFIX, wc as sanitizeUrl, wi as HostLockStatus, wn as revalidateDesktopCoreLock, wr as parseShellCommand, ws as interpretClause, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as extractOperation, xc as digestStrings, xi as HostCohortSelectionReason, xn as resolveActiveProfileHostLock, xo as WorkUnit, xr as canonicalArgvFromCommand, xs as hasOrderedCoordination, xt as proofDigestV2, y as decisionBoundaryKey, ya as extractArtifactPaths, yc as validateActionTarget, yi as HostCohort, yn as prepareTargetHostTrust, yo as VerificationContract, yr as ParsedShell, ys as explanationHasActionResidue, yt as proofCapabilityReport, z as RecoveryOptions, za as DeferAuthorization, zi as HostVersionStatus, zn as writeDesktopRuntimeReceipt, zo as CapabilityFact, zr as TaskKind, zs as opensConditionLead, zt as ManifestIssue } from "../index-DqvBEsNc.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };
+import { $ as PROOF_KINDS_V2, $a as ExternalOperation, $i as AuthorityBlock, $n as GitCommandAccepted, $o as RemovalOutcomeReport, $r as PROTOCOL_V4_NOTICE, $s as ACTION_MANIFEST, $t as AuditedPackageExpectation, A as SessionApiError, Aa as BoundaryRequest, Ai as HostToolSurface, An as DesktopAppRuntime, Ar as ToolSubject, As as isExecutableItem, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as BoundaryDisposition, Bi as HOST_VALIDATED_VERSIONS, Bn as HostRebindTrust, Bo as rebindResponse, Br as DiagnosisNextAction, Bs as maskQuotedSpans, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as extractMethod, Cc as canonicalizePath, Ci as HostCohortSelection, Cn as resolveInstalledHostLock, Co as WaitAuthorization, Cr as parsePwshCommand, Cs as governedClauseRestrictsExecution, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BOUNDARY_RECORD_PREFIX, Dc as sanitizeUrl, Di as HostLockStatus, Dn as DESKTOP_IDENTITY_FACTS, Dr as NATIVE_GIT_ROOT_PARENT_OID, Ds as interpretClause, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as segmentClauses, Ec as sanitizeClauseText, Ei as HostLockEvaluation, En as AsarIndex, Er as hasCurrentCertificate, Es as hasWorkPredicate, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as isCurrentAcceptedBoundary, Fi as evaluateHostCapability, Fn as readAsarIndex, Fo as confirmRebind, Fr as nativeGitParentOidVerified, Fs as isRestatement, Ft as evidenceMatchesItem, G as closingHint, Ga as DeriveResult, Gi as ParsedHostVersion, Gn as hostTrustDigest, Go as DEPENDENCY_FREE_ONLY_CONDITION, Gr as deriveItemDiagnosis, Gs as qualificationOfClause, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeferAuthorization, Hi as HostVersionStatus, Hn as HostTrustError, Ho as CapabilityFact, Hr as TaskKind, Hs as opensConditionLead, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as qualifyBoundary, Ii as evaluateHostLock, In as readDesktopAppRuntime, Io as proposeRebind, Ir as persistedToolResultStatus, Is as itemHoldsExecutionAuthority, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceBinding, Ji as compareHostVersions, Jn as registryArchiveFiles, Jo as DerivedProcessFacts, Jr as nativeFileTwoRole, Js as restatedContentOf, Jt as firstStepGuidance, K as openItems, Ka as DeriveScope, Ki as SUPPORTED_HOST_RANGE, Kn as parseHostTrust, Ko as DeclaredOperationResult, Kr as evidenceAvailabilityReason, Ks as questionHeadsClause, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as AssetInterpretationFact, Li as evaluateToolSurfaceCapability, Ln as readDesktopDependency, Lo as proposeRebindOutcome, Lr as shellReadbackOutcome, Ls as kindOfScope, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as GoalBoundaryAccess, Mi as bindLiveGoalCapability, Mn as auditDesktopInstalledImplementation, Mo as ProposeOutcome, Mr as extractTextContent, Ms as isInformationalFragment, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as availableBoundaryQualifications, Ni as evaluateExternalWaitCapability, Nn as hasDesktopImporterState, No as RebindArgs, Nr as extractToolSubject, Ns as isOpenObligation, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as BoundaryEffectuation, Oc as sha256, Oi as HostPlatform, On as DESKTOP_PROFILE_PACKAGE_NAME, Or as ToolCallInput, Os as interpretMessage, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as effectuateBoundary, Pi as evaluateGraphDerivedHostLock, Pn as readAsarFile, Po as RebindProposal, Pr as isDeterministicCheck, Ps as isQuestionScopeNeedingReview, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as ExpectedTransition, Qi as currentContractDigest, Qn as GitAdapterAction, Qo as ProcessOutcomeReason, Qr as PROTOCOL_V3_NOTICE, Qs as verbIsNegated, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as AssetObligation, Ri as hostVersionFromPackages, Rn as readDesktopTargetGraph, Ro as proposeRebindV042, Rr as withDurability, Rs as legacyQuestionReadingIsInformational, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as extractArtifactPaths, Sc as validateActionTarget, Si as HostCohort, Sn as resolveDesktopProfileHostLock, So as VerificationContract, Sr as isRunExecutable, Ss as explanationHasActionResidue, St as proofEvidenceConstraints, T as progressFingerprint, Ta as isInformationalMessage, Tc as normalizeClause, Ti as HostLockContext, Tn as verifyComposedHostLockDump, To as createProjection, Tr as goalCompletionDenial, Ts as hasQuestionScope, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DelegationRef, Ui as LATEST_TESTED_HOST_VERSION, Un as HostTrustedPackage, Uo as CapabilityGap, Ur as UnifiedItemDiagnosis, Us as opensWithDirective, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as BoundaryQualificationKind, Vi as HostVersionDecision, Vn as HostTrustAcquisitionOptions, Vo as replayRebindResult, Vr as Repairability, Vs as namedActions, Vt as validateManifest, W as cleanupConditionFor, Wa as DeriveConfig, Wi as MIN_SUPPORTED_HOST_VERSION, Wn as acquireHostTrust, Wo as CapabilityRemedy, Wr as capabilityRemedyPhrase, Ws as presentExplanationHead, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as EvidenceParseStatus, Xi as parseHostVersion, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as ProcessExitStatus, Xr as CAPTURE_V042_NOTICE, Xs as splitTextFragments, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as EvidenceOutcome, Yi as evaluateMinimumHostVersion, Yn as registryArchiveModules, Yo as OperationAttribution, Yr as relevantEvidence, Ys as semanticActionOfScope, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as EvidenceRole, Zi as satisfiesSupportedHostRange, Zn as GIT_COMMAND_TEMPLATES, Zo as ProcessFactSource, Zr as DEFAULT_DELEGATION_TOOL_NAMES, Zs as statefulActionsOfScope, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as ClauseSegment, _c as requestedTargetAuthorizesMutation, _i as HOST_COHORTS, _n as prepareActiveHostTrust, _o as TargetCaptureStatus, _r as CanonicalArgv, _s as actionVerbMatches, _t as createProofManifest, a as supersedeItem, aa as UserInteractionKind, ac as CERTIFICATE_VERSION_V2, ai as rootLocatorFlavor, an as auditedForegroundRenderers, ao as GuardItem, ar as GitPrestateCheck, as as removalIsComplete, at as ProofKindCapability, b as isRootPauseRequest, ba as classifyClause, bc as semanticActionFromText, bi as HostCapabilityId, bn as readActiveHostGraph, bo as TargetTuple, br as ShellParseStatus, bs as clauseIsGoverned, bt as proofDigest, c as CompletionDisposition, ca as CONFIRM_LINE_PATTERN, cc as STOP_PROTOCOL_VERSION, ci as ACTIVE_HOST_LAUNCHER_VERSION, cn as evaluateActiveHostLock, co as GuardOperation, cr as LinearCommitReadback, cs as DirectiveClass, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as parseConfirmationMessage, dc as SemanticAction, di as DEFAULT_HOST_LOCK, dn as hostLockRowsFromComposedDump, do as MessageCoverage, dr as createGitPrestateEnvelope, ds as GRANTED_QUALIFICATION, dt as ProofSurface, ea as AuthorityBlockKind, ec as ACTION_MANIFEST_VERSION, ei as PROTOCOL_V5_NOTICE, en as HostProfileError, eo as GoalRef, er as GitCommandManifest, es as actionHasCertificationPath, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as CheckpointResult, fc as StatefulAction, fi as EXPECTED_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as NeedsReviewFact, fr as executeRevalidatedGitEffect, fs as InterpretOptions, ft as SessionQuery, g as currentActionBases, ga as CaptureScope, gc as requestedIdentityKey, gi as HOST_CAPABILITY_PACKAGE_GROUPS, gn as packageRowsFromPnpmLock, go as TargetCaptureReasonCode, gr as verifiedLinearCommitReadback, gs as ScopeInterpretation, gt as canonicalProjection, h as classifyCompletionClaim, ha as certifyCheckpoint, hc as isStatefulAction, hi as GOAL_HOST_PACKAGES, hn as packageRowsFromActiveGraph, ho as SourceSpan, hr as revalidateGitPrestate, hs as QualificationStatus, ht as bindProofV2ToProjection, i as projectCoreV2, ia as TaskIntent, ic as CERTIFICATE_VERSION, ii as legacyRecordsNeedingReview, in as auditedDefaultWorkdirProvider, io as GuardIntegrity, ir as GitEffectRunner, is as partialFailureOf, it as ProofKind, j as V4SessionLike, ja as GoalActivationState, ji as bindExecutableIdentity, jn as DesktopTargetGraph, jo as BoundedSource, jr as evidenceFromPersistedToolResult, js as isExplanationScope, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as BoundaryQualification, ki as HostProfileKind, kn as DESKTOP_RUNTIME_PACKAGE_NAME, kr as ToolResultInput, ks as introducesActionClause, kt as sessionQueryV2, l as CurrentActionBasis, la as ParsedConfirmation, lc as STOP_PROTOCOL_VERSION_V2, li as AuditedExecutable, ln as evaluateConfiguredHostLock, lo as GuardProjection, lr as commitIndexSnapshotDigest, ls as Executee, lt as ProofObligation, m as assessmentOutcomePredicate, ma as bindingIndividuallyAccepted, mc as boundedArtifactChoiceMatches, mi as ExecutableIdentityBinding, mn as inspectTargetHostGraph, mo as PersistenceAuthorization, mr as parseGitCommandManifest, ms as QualificationReason, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as authorityCaptureCounts, nc as ActionSpec, ni as applyUpgradeEligibility, nn as activeRendererModule, no as GuardCheckpoint, nr as GitCommandRejected, ns as capabilityConsequence, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as classifyTaskIntent, oc as SEMANTIC_ACTIONS, oi as ACTIVE_HOST_COHORT_ID, on as auditedHostImplementation, oo as GuardItemKind, or as GitPrestateEnvelope, os as removalIsPartiallyKnown, ot as ProofKindV2, p as assessmentAction, pa as RejectedBinding, pc as actionCompatible, pi as ExecutableIdentity, pn as inspectDesktopTargetGraph, po as NeedsReviewReason, pr as gitCommandMatchesTarget, ps as LEGACY_QUALIFICATION, pt as SessionQueryV2, q as recoveryDigest, qa as DerivedEnvelope, qi as SUPPORTED_HOST_VERSIONS, qn as qualifyHostTrust, qo as DependencyStatus, qr as itemDiagnosis, qs as reportingHeadGoverns, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as segmentAuthorityBlocks, rc as BOUNDED_ARTIFACT_TYPES, ri as deriveProjection, rn as auditedDefaultWorkdirHost, ro as GuardEvidence, rr as GitEffectExecution, rs as capabilityFactOf, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as classifyUserInteraction, sc as STATEFUL_ACTIONS, si as ACTIVE_HOST_COHORT_IDS, sn as combineHostPolicy, so as GuardItemStatus, sr as GitTargetIdentity, ss as AuthorityDisposition, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as AuthorityKind, tc as ActionManifest, ti as PROTOCOL_V6_NOTICE, tn as TargetHostGraph, to as GuardBoundary, tr as GitCommandParseResult, ts as admissibleForRemoval, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as isFrozenV042RebindResponse, uc as SUPPORTED_EVIDENCE_ADAPTERS, ui as BASE_HOST_PACKAGES, un as hostLockContextFromComposedDump, uo as HostStatus, ur as commitTreeSnapshotDigest, us as ExecutionQualification, ut as ProofObligationV2, v as decideTurnStopping, va as captureClause, vc as requestedTargetMatchesResolved, vi as HostAuditProvenance, vn as prepareDesktopHostTrust, vo as TargetSource, vr as CanonicalCommandSurface, vs as clarifiedSpanOf, vt as createProofManifestV2, w as observeAssistantOutcome, wa as extractOperation, wc as digestStrings, wi as HostCohortSelectionReason, wn as revalidateDesktopCoreLock, wo as WorkUnit, wr as parseShellCommand, ws as hasOrderedCoordination, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as environmentDefaultRepositoryTarget, xc as validateActionManifest, xi as HostCapabilityRequest, xn as resolveActiveProfileHostLock, xo as TargetValue, xr as canonicalArgvFromCommand, xs as clauseIsProtected, xt as proofDigestV2, y as decisionBoundaryKey, ya as captureItem, yc as semanticActionFromCommand, yi as HostCapabilityEvaluation, yn as prepareTargetHostTrust, yo as TargetSourceKind, yr as ParsedShell, ys as clauseAsksOwnQuestion, yt as proofCapabilityReport, z as RecoveryOptions, za as BindingActionClosure, zi as selectHostCohort, zn as writeDesktopRuntimeReceipt, zo as rebindAttemptKey, zr as CertificationSupport, zs as maskCodeSpans, zt as ManifestIssue } from "../index-BmTaAEkJ.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as PROOF_CAPABILITY_MATRIX, $i as ACTIVE_HOST_COHORT_ID, $n as admissibleForRemoval, $r as splitTextFragments, A as PROTOCOL_V3_NOTICE, Aa as CERTIFICATE_VERSION_V2, Ai as resolveActiveProfileHostLock, An as effectuateBoundary, Ar as interpretClause, At as V6_ORDINARY_COMPLETION_RULE_SHORT, B as extractTextContent, Ba as requestedTargetAuthorizesMutation, Bi as readAsarFile, Bn as rebindResponse, Br as kindOfScope, C as SESSION_API_UNSUPPORTED, Ca as evaluateMinimumHostVersion, Ci as inspectTargetHostGraph, Cn as goalCompletionDenial, Cr as clauseIsGoverned, Ct as CLEANUP_CONDITION_RULE, D as projectCoreV2, Da as ACTION_MANIFEST_VERSION, Di as prepareDesktopHostTrust, Dr as hasOrderedCoordination, Dt as MIN_RECOVERY_CHAR_BUDGET, E as snapshotSessionEvents, Ea as ACTION_MANIFEST, Ei as prepareActiveHostTrust, Er as governedClauseRestrictsExecution, Et as DEFAULT_RECOVERY_CHAR_BUDGET, F as deriveProjection, Fa as SUPPORTED_EVIDENCE_ADAPTERS, Fi as DESKTOP_IDENTITY_FACTS, Fn as confirmRebind, Fr as isInformationalFragment, Ft as recoveryDigest, G as canonicalArgvFromCommand, Ga as validateActionTarget, Gi as writeDesktopRuntimeReceipt, Gn as capabilityRemedyPhrase, Gr as opensConditionLead, H as isDeterministicCheck, Ha as semanticActionFromCommand, Hi as readDesktopAppRuntime, Hn as CONFIRM_LINE_PATTERN, Hr as maskCodeSpans, I as legacyRecordsNeedingReview, Ia as actionCompatible, Ii as DESKTOP_PROFILE_PACKAGE_NAME, In as proposeRebind, Ir as isOpenObligation, It as recoveryTitle, J as parseShellCommand, Ji as hostTrustDigest, Jn as itemDiagnosis, Jr as qualificationOfClause, K as isRunExecutable, Ka as RC020_RC2_HOST_PACKAGES, Ki as HostTrustError, Kn as deriveItemDiagnosis, Kr as opensWithDirective, L as rootLocatorFlavor, La as boundedArtifactChoiceMatches, Li as DESKTOP_RUNTIME_PACKAGE_NAME, Ln as proposeRebindOutcome, Lr as isQuestionScopeNeedingReview, Lt as renderRecoveryPacket, M as PROTOCOL_V5_NOTICE, Ma as STATEFUL_ACTIONS, Mi as resolveInstalledHostLock, Mn as qualifyBoundary, Mr as introducesActionClause, Mt as cleanupConditionFor, N as PROTOCOL_V6_NOTICE, Na as STOP_PROTOCOL_VERSION, Ni as revalidateDesktopCoreLock, Nn as currentContractDigest, Nr as isExecutableItem, Nt as closingHint, O as CAPTURE_V042_NOTICE, Oa as BOUNDED_ARTIFACT_TYPES, Oi as prepareTargetHostTrust, On as BOUNDARY_RECORD_PREFIX, Or as hasQuestionScope, Ot as V6_ORDINARY_COMPLETION_RULE, P as applyUpgradeEligibility, Pa as STOP_PROTOCOL_VERSION_V2, Pi as verifyComposedHostLockDump, Pn as createProjection, Pr as isExplanationScope, Pt as openItems, Q as certifyCheckpoint, Qi as registryArchiveModules, Qn as actionHasCertificationPath, Qr as semanticActionOfScope, R as supersedeItem, Ra as isStatefulAction, Ri as auditDesktopInstalledImplementation, Rn as proposeRebindV042, Rr as isRestatement, Rt as v6CurrentRootBoundaries, Sa as compareHostVersions, Si as inspectDesktopTargetGraph, Sn as v6TestPredicate, Sr as clauseAsksOwnQuestion, St as validateProofManifestV2, T as SessionApiError, Ta as satisfiesSupportedHostRange, Ti as packageRowsFromPnpmLock, Tr as explanationHasActionResidue, Tt as CLEANUP_CONDITION_RULE_SHORT, U as persistedToolResultStatus, Ua as semanticActionFromText, Ui as readDesktopDependency, Un as isFrozenV042RebindResponse, Ur as maskQuotedSpans, V as extractToolSubject, Va as requestedTargetMatchesResolved, Vi as readAsarIndex, Vn as replayRebindResult, Vr as legacyQuestionReadingIsInformational, W as withDurability, Wa as validateActionManifest, Wi as readDesktopTargetGraph, Wn as parseConfirmationMessage, Wr as namedActions, X as segmentAuthorityBlocks, Xi as qualifyHostTrust, Xn as relevantEvidence, Xr as reportingHeadGoverns, Y as authorityCaptureCounts, Yi as parseHostTrust, Yn as nativeFileTwoRole, Yr as questionHeadsClause, Z as bindingIndividuallyAccepted, Zi as registryArchiveFiles, Zn as DEPENDENCY_FREE_ONLY_CONDITION, Zr as restatedContentOf, _ as previewFirstStepInjection, _a as HOST_VALIDATED_VERSIONS, _i as evaluateActiveHostLock, _n as latestAssistantText, _r as classifyUserInteraction, _t as requiredSubjectsOf, a as commitTreeSnapshotDigest, aa as GOAL_HOST_PACKAGES, ai as digestStrings, an as CONTROL_RECORD_PREFIX, ar as captureClause, at as bindProofToProjection, ba as SUPPORTED_HOST_RANGE, bi as hostLockRowsFromComposedDump, bn as progressFingerprint, br as actionVerbMatches, bt as sessionQueryV2, c as gitCommandMatchesTarget, ca as bindExecutableIdentity, ci as sanitizeUrl, cn as assessmentAction, cr as environmentDefaultRepositoryTarget, ct as createProofManifest, d as verifiedLinearCommitReadback, da as evaluateGraphDerivedHostLock, di as activeRendererModule, dn as currentActionBases, dr as extractOperation, dt as proofDigest, ea as ACTIVE_HOST_COHORT_IDS, ei as statefulActionsOfScope, er as capabilityConsequence, et as PROOF_KINDS, f as FIRST_STEP_GUIDANCE, fa as evaluateHostCapability, fi as auditedDefaultWorkdirHost, fn as decideTurnBoundary, fr as isInformationalMessage, ft as proofDigestV2, g as lifecyclePhase, ga as selectHostCohort, gi as combineHostPolicy, gn as isWholeTaskCompletionClaim, gr as classifyTaskIntent, gt as proofV2Rejection, h as firstStepGuidanceV6, ha as hostVersionFromPackages, hi as auditedHostImplementation, hn as isRootPauseRequest, ht as proofOperationMatches, i as commitIndexSnapshotDigest, ia as EXPECTED_HOST_PACKAGES, ii as canonicalizePath, in as isVerifyingCapability, ir as removalIsPartiallyKnown, it as PROOF_PROTOCOL_VERSION_V2, j as PROTOCOL_V4_NOTICE, ja as SEMANTIC_ACTIONS, ji as resolveDesktopProfileHostLock, jn as isCurrentAcceptedBoundary, jr as interpretMessage, jt as carriesCleanupCondition, k as DEFAULT_DELEGATION_TOOL_NAMES, ka as CERTIFICATE_VERSION, ki as readActiveHostGraph, kn as availableBoundaryQualifications, kr as hasWorkPredicate, kt as V6_ORDINARY_COMPLETION_RULE_COMPACT, l as parseGitCommandManifest, la as bindLiveGoalCapability, li as sha256, ln as assessmentOutcomePredicate, lr as extractArtifactPaths, lt as createProofManifestV2, m as firstStepGuidance, ma as evaluateToolSurfaceCapability, mi as auditedForegroundRenderers, mn as decisionBoundaryKey, mt as proofHostSurfacesOf, n as GIT_COMMAND_MANIFEST_IDS, na as BASE_HOST_PACKAGES, ni as COMMAND_SURFACE_MANIFEST, nn as evidenceCoverage, nr as partialFailureOf, nt as PROOF_MANIFEST_DOMAIN_V2, o as createGitPrestateEnvelope, oa as HOST_CAPABILITY_PACKAGE_GROUPS, oi as normalizeClause, on as NO_PROGRESS_RECORD_PREFIX, or as captureItem, ot as bindProofV2ToProjection, p as claimedBatchHasRealRootInput, pa as evaluateHostLock, pi as auditedDefaultWorkdirProvider, pn as decideTurnStopping, pr as segmentClauses, pt as proofEvidenceConstraints, q as parsePwshCommand, qi as acquireHostTrust, qn as evidenceAvailabilityReason, qr as presentExplanationHead, r as GIT_COMMAND_TEMPLATES, ra as DEFAULT_HOST_LOCK, ri as validateManifest, rn as evidenceMatchesItem, rr as removalIsComplete, rt as PROOF_PROTOCOL_VERSION, s as executeRevalidatedGitEffect, sa as HOST_COHORTS, si as sanitizeClauseText, sn as NO_PROGRESS_TURNS_BEFORE_STOP, sr as classifyClause, st as canonicalProjection, t as RC020_RC1_HOST_PACKAGES, ta as ACTIVE_HOST_LAUNCHER_VERSION, ti as verbIsNegated, tn as bindingSatisfies, tr as capabilityFactOf, tt as PROOF_KINDS_V2, u as revalidateGitPrestate, ua as evaluateExternalWaitCapability, ui as HostProfileError, un as classifyCompletionClaim, ur as extractMethod, ut as proofCapabilityReport, v as projectSessionCoreV2, va as LATEST_TESTED_HOST_VERSION, vi as evaluateConfiguredHostLock, vn as latestRootInstruction, vr as GRANTED_QUALIFICATION, vt as scopeCoverageDigest, w as SESSION_EVENT_ENVELOPE_INVALID, wa as parseHostVersion, wi as packageRowsFromActiveGraph, wn as hasCurrentCertificate, wr as clauseIsProtected, wt as CLEANUP_CONDITION_RULE_COMPACT, xa as SUPPORTED_HOST_VERSIONS, xi as injectActiveProfileHostLock, xn as testOutcomePredicate, xr as clarifiedSpanOf, xt as validateProofManifest, ya as MIN_SUPPORTED_HOST_VERSION, yi as hostLockContextFromComposedDump, yn as observeAssistantOutcome, yr as LEGACY_QUALIFICATION, yt as sessionQuery, z as evidenceFromPersistedToolResult, za as requestedIdentityKey, zi as hasDesktopImporterState, zn as rebindAttemptKey, zr as itemHoldsExecutionAuthority } from "../domain-B-2fya9P.js";
+import { $ as segmentAuthorityBlocks, $i as acquireHostTrust, $n as evidenceAvailabilityReason, $r as presentExplanationHead, A as PROTOCOL_V3_NOTICE, Aa as parseHostVersion, Ai as packageRowsFromActiveGraph, Ar as clauseIsProtected, At as MIN_RECOVERY_CHAR_BUDGET, B as evidenceFromPersistedToolResult, Ba as STOP_PROTOCOL_VERSION_V2, Bi as verifyComposedHostLockDump, Bn as createProjection, Br as isExplanationScope, Bt as renderRecoveryPacket, C as SESSION_API_UNSUPPORTED, Ca as HOST_VALIDATED_VERSIONS, Ci as evaluateActiveHostLock, Cn as observeAssistantOutcome, Cr as classifyUserInteraction, Ct as sessionQueryV2, D as projectCoreV2, Da as SUPPORTED_HOST_VERSIONS, Di as injectActiveProfileHostLock, Dn as goalCompletionDenial, Dr as clarifiedSpanOf, Dt as CLEANUP_CONDITION_RULE_COMPACT, E as snapshotSessionEvents, Ea as SUPPORTED_HOST_RANGE, Ei as hostLockRowsFromComposedDump, En as v6TestPredicate, Er as actionVerbMatches, Et as CLEANUP_CONDITION_RULE, F as deriveProjection, Fa as CERTIFICATE_VERSION, Fi as readActiveHostGraph, Fn as availableBoundaryQualifications, Fr as hasWorkPredicate, Ft as cleanupConditionFor, G as persistedToolResultStatus, Ga as requestedIdentityKey, Gi as hasDesktopImporterState, Gn as rebindAttemptKey, Gr as itemHoldsExecutionAuthority, H as extractToolSubject, Ha as actionCompatible, Hi as DESKTOP_PROFILE_PACKAGE_NAME, Hn as proposeRebind, Hr as isOpenObligation, I as legacyRecordsNeedingReview, Ia as CERTIFICATE_VERSION_V2, Ii as resolveActiveProfileHostLock, In as effectuateBoundary, Ir as interpretClause, It as closingHint, J as canonicalArgvFromCommand, Ja as semanticActionFromCommand, Ji as readDesktopAppRuntime, Jn as CONFIRM_LINE_PATTERN, Jr as maskCodeSpans, K as shellReadbackOutcome, Ka as requestedTargetAuthorizesMutation, Ki as readAsarFile, Kn as rebindResponse, Kr as kindOfScope, L as rootLocatorFlavor, La as SEMANTIC_ACTIONS, Li as resolveDesktopProfileHostLock, Ln as isCurrentAcceptedBoundary, Lr as interpretMessage, Lt as openItems, M as PROTOCOL_V5_NOTICE, Ma as ACTION_MANIFEST, Mi as prepareActiveHostTrust, Mr as governedClauseRestrictsExecution, Mt as V6_ORDINARY_COMPLETION_RULE_COMPACT, N as PROTOCOL_V6_NOTICE, Na as ACTION_MANIFEST_VERSION, Ni as prepareDesktopHostTrust, Nr as hasOrderedCoordination, Nt as V6_ORDINARY_COMPLETION_RULE_SHORT, O as CAPTURE_V042_NOTICE, Oa as compareHostVersions, Oi as inspectDesktopTargetGraph, On as hasCurrentCertificate, Or as clauseAsksOwnQuestion, Ot as CLEANUP_CONDITION_RULE_SHORT, P as applyUpgradeEligibility, Pa as BOUNDED_ARTIFACT_TYPES, Pi as prepareTargetHostTrust, Pn as BOUNDARY_RECORD_PREFIX, Pr as hasQuestionScope, Pt as carriesCleanupCondition, Q as authorityCaptureCounts, Qa as RC020_RC2_HOST_PACKAGES, Qi as HostTrustError, Qn as deriveItemDiagnosis, Qr as opensWithDirective, R as supersedeItem, Ra as STATEFUL_ACTIONS, Ri as resolveInstalledHostLock, Rn as qualifyBoundary, Rr as introducesActionClause, Rt as recoveryDigest, Sa as selectHostCohort, Si as combineHostPolicy, Sn as latestRootInstruction, Sr as classifyTaskIntent, St as sessionQuery, T as SessionApiError, Ta as MIN_SUPPORTED_HOST_VERSION, Ti as hostLockContextFromComposedDump, Tn as testOutcomePredicate, Tr as LEGACY_QUALIFICATION, Tt as validateProofManifestV2, U as isDeterministicCheck, Ua as boundedArtifactChoiceMatches, Ui as DESKTOP_RUNTIME_PACKAGE_NAME, Un as proposeRebindOutcome, Ur as isQuestionScopeNeedingReview, V as extractTextContent, Va as SUPPORTED_EVIDENCE_ADAPTERS, Vi as DESKTOP_IDENTITY_FACTS, Vn as confirmRebind, Vr as isInformationalFragment, Vt as v6CurrentRootBoundaries, W as nativeGitParentOidVerified, Wa as isStatefulAction, Wi as auditDesktopInstalledImplementation, Wn as proposeRebindV042, Wr as isRestatement, X as parsePwshCommand, Xa as validateActionManifest, Xi as readDesktopTargetGraph, Xn as parseConfirmationMessage, Xr as namedActions, Y as isRunExecutable, Ya as semanticActionFromText, Yi as readDesktopDependency, Yn as isFrozenV042RebindResponse, Yr as maskQuotedSpans, Z as parseShellCommand, Za as validateActionTarget, Zi as writeDesktopRuntimeReceipt, Zn as capabilityRemedyPhrase, Zr as opensConditionLead, _ as previewFirstStepInjection, _a as evaluateGraphDerivedHostLock, _i as activeRendererModule, _n as decideTurnStopping, _r as extractOperation, _t as proofHostSurfacesOf, a as commitTreeSnapshotDigest, aa as ACTIVE_HOST_COHORT_ID, ai as splitTextFragments, an as bindingSatisfies, ar as admissibleForRemoval, at as PROOF_MANIFEST_DOMAIN_V2, ba as evaluateToolSurfaceCapability, bi as auditedForegroundRenderers, bn as isWholeTaskCompletionClaim, bt as requiredSubjectsOf, c as gitCommandMatchesTarget, ca as BASE_HOST_PACKAGES, ci as COMMAND_SURFACE_MANIFEST, cn as isVerifyingCapability, cr as partialFailureOf, ct as bindProofToProjection, d as verifiedLinearCommitReadback, da as GOAL_HOST_PACKAGES, di as digestStrings, dn as NO_PROGRESS_TURNS_BEFORE_STOP, dr as captureClause, dt as createProofManifest, ea as hostTrustDigest, ei as qualificationOfClause, er as itemDiagnosis, et as bindingIndividuallyAccepted, f as FIRST_STEP_GUIDANCE, fa as HOST_CAPABILITY_PACKAGE_GROUPS, fi as normalizeClause, fn as assessmentAction, fr as captureItem, ft as createProofManifestV2, g as lifecyclePhase, ga as evaluateExternalWaitCapability, gi as HostProfileError, gn as decideTurnBoundary, gr as extractMethod, gt as proofEvidenceConstraints, h as firstStepGuidanceV6, ha as bindLiveGoalCapability, hi as sha256, hn as currentActionBases, hr as extractArtifactPaths, ht as proofDigestV2, i as commitIndexSnapshotDigest, ia as registryArchiveModules, ii as semanticActionOfScope, ir as actionHasCertificationPath, it as PROOF_KINDS_V2, j as PROTOCOL_V4_NOTICE, ja as satisfiesSupportedHostRange, ji as packageRowsFromPnpmLock, jr as explanationHasActionResidue, jt as V6_ORDINARY_COMPLETION_RULE, k as DEFAULT_DELEGATION_TOOL_NAMES, ka as evaluateMinimumHostVersion, ki as inspectTargetHostGraph, kr as clauseIsGoverned, kt as DEFAULT_RECOVERY_CHAR_BUDGET, l as parseGitCommandManifest, la as DEFAULT_HOST_LOCK, li as validateManifest, ln as CONTROL_RECORD_PREFIX, lr as removalIsComplete, lt as bindProofV2ToProjection, m as firstStepGuidance, ma as bindExecutableIdentity, mi as sanitizeUrl, mn as classifyCompletionClaim, mr as environmentDefaultRepositoryTarget, mt as proofDigest, n as GIT_COMMAND_MANIFEST_IDS, na as qualifyHostTrust, ni as reportingHeadGoverns, nr as relevantEvidence, nt as PROOF_CAPABILITY_MATRIX, o as createGitPrestateEnvelope, oa as ACTIVE_HOST_COHORT_IDS, oi as statefulActionsOfScope, on as evidenceCoverage, or as capabilityConsequence, ot as PROOF_PROTOCOL_VERSION, p as claimedBatchHasRealRootInput, pa as HOST_COHORTS, pi as sanitizeClauseText, pn as assessmentOutcomePredicate, pr as classifyClause, pt as proofCapabilityReport, q as withDurability, qa as requestedTargetMatchesResolved, qi as readAsarIndex, qn as replayRebindResult, qr as legacyQuestionReadingIsInformational, r as GIT_COMMAND_TEMPLATES, ra as registryArchiveFiles, ri as restatedContentOf, rr as DEPENDENCY_FREE_ONLY_CONDITION, rt as PROOF_KINDS, s as executeRevalidatedGitEffect, sa as ACTIVE_HOST_LAUNCHER_VERSION, si as verbIsNegated, sn as evidenceMatchesItem, sr as capabilityFactOf, st as PROOF_PROTOCOL_VERSION_V2, t as RC020_RC1_HOST_PACKAGES, ta as parseHostTrust, ti as questionHeadsClause, tr as nativeFileTwoRole, tt as certifyCheckpoint, u as revalidateGitPrestate, ua as EXPECTED_HOST_PACKAGES, ui as canonicalizePath, un as NO_PROGRESS_RECORD_PREFIX, ur as removalIsPartiallyKnown, ut as canonicalProjection, v as projectSessionCoreV2, va as evaluateHostCapability, vi as auditedDefaultWorkdirHost, vn as decisionBoundaryKey, vr as isInformationalMessage, vt as proofOperationMatches, w as SESSION_EVENT_ENVELOPE_INVALID, wa as LATEST_TESTED_HOST_VERSION, wi as evaluateConfiguredHostLock, wn as progressFingerprint, wr as GRANTED_QUALIFICATION, wt as validateProofManifest, xa as hostVersionFromPackages, xi as auditedHostImplementation, xn as latestAssistantText, xt as scopeCoverageDigest, ya as evaluateHostLock, yi as auditedDefaultWorkdirProvider, yn as isRootPauseRequest, yr as segmentClauses, yt as proofV2Rejection, z as NATIVE_GIT_ROOT_PARENT_OID, za as STOP_PROTOCOL_VERSION, zi as revalidateDesktopCoreLock, zn as currentContractDigest, zr as isExecutableItem, zt as recoveryTitle } from "../domain-DZTbCIYn.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };