dsh-completion-guard 0.8.2 → 0.8.4

package/dist/{index-DqvBEsNc.d.ts → index-BmTaAEkJ.d.ts}

@@ -249,7 +249,6 @@ interface ExecutionQualification {
   /** The governing head that restricted the clause, when one exists. */
   governedBy?: string;
 }
-/** Blank out every quoted span of the text. */
 declare function maskQuotedSpans(text: string): string;
 /**
 * Whether the clause's OWN span asks something, even when no governed head was
@@ -1619,6 +1618,15 @@ interface ClauseSegment {
   /** The one interpretation this segment came from; never re-derived downstream. */
   interpretation: ScopeInterpretation;
 }
+/**
+* CG-083-PERF02 (profile-guided): segmentClauses is a pure parse of the text,
+* and the v6 capture path asks the SAME strings many times (splitIndependent
+* re-parses left/right fragments per delimiter, the coordination and
+* explanation paths re-parse prefixes). Cache the parse result by exact input
+* and omitted options — a pure parse cache over immutable strings, not a
+* trust cache. Every explicit options object bypasses storage, including empty,
+* inherited and accessor-bearing objects; no enumeration can prove identity.
+*/
 declare function segmentClauses(text: string, options?: InterpretOptions): ClauseSegment[];
 /**
 * Build a GuardItem from an already-classified clause body and a resolved
@@ -2158,6 +2166,15 @@ interface ToolResultInput {
   meta?: unknown;
   textContent: string;
 }
+/**
+* CG-083-BUG02: the explicit, VERIFIED no-parent state of a repository's
+* first commit, minted only by the native Git observer after reading the
+* commit object itself. It is distinct from a missing or unknown parent and
+* binds into certificates like any other parent identity.
+*/
+declare const NATIVE_GIT_ROOT_PARENT_OID = "root";
+/** CG-083-BUG02 parent identity accepted for a commit readback. */
+declare function nativeGitParentOidVerified(parentOid: unknown): boolean;
 declare function extractTextContent(content: readonly unknown[]): string;
 /** rc.2 persists a role=tool message with independent source and return IDs.
 * Both must bind the original call. PTC uses its own matched dispatch envelope.
@@ -2168,6 +2185,51 @@ interface ToolOperation {
   op: GuardOperation;
   path?: string;
 }
+/**
+* The layered shell reading (0.6.2 D062-02; source priority fixed by the
+* 0.6.2 review). Every field is derived from the same persisted result the
+* historical `outcome` was derived from, so replay is deterministic and no
+* historical fact is reinterpreted:
+*
+* - `hostToolReturned` is the host's own return, nothing more;
+* - `declaredExitCode` is `'unknown'` unless a real fact declared it, and an
+*   unmarked success is NOT a read exit code of 0;
+* - `operationAttribution` stays `'unknown'` for an opaque compound runner, so
+*   the last command's success can never cover an earlier failure;
+* - `outcome` uses the same evaluator with independently selected facts; a
+*   disagreement with the historical field is explicitly reported.
+*
+* SOURCE PRIORITY for the process terminal facts, highest first:
+*
+*   1. the trusted `contextGuardProcess` namespace — the run's OWN declaration
+*      of what the process did. An explicit `exitCode` here is read as declared
+*      even when the generic `meta.exitCode` says something else; the namespace
+*      is the more specific statement and never loses to the generic one.
+*   2. any other structured terminal fact the renderer put in `meta`
+*      (`meta.exitCode` / `meta.exit_code` / `meta.signal`).
+*   3. the rendered text markers of the audited renderers.
+*
+* A namespace declaration never overrides the frozen `outcome`, because the
+* frozen value is the historical record and this batch must not rewrite it; the
+* derived layer records its source and conflict flag instead of changing history.
+*/
+/**
+* CG-083-BUG03/R4: the ONE terminal verdict a native observer may rely on for
+* a persisted shell call. Reuses the evidence layer's AUTHORITATIVE terminal
+* resolution (the run's own `contextGuardProcess` declaration, then any other
+* structured meta fact, then the audited renderer markers) and cross-checks
+* it against the rendered markers: a declared failure is never upgraded, and
+* a declared verdict that CONTRADICTS the rendered markers is unresolvable
+* and stays `unknown`. A failed hook, a backgrounded or truncated result, or
+* an unclassifiable terminal state is therefore never "success". This reads
+* the CURRENT observation only; the historical frozen `outcome` of
+* already-recorded evidence is not rewritten.
+*/
+declare function shellReadbackOutcome(surface: "bash" | "pwsh" | "shell", args: Record<string, unknown>, result: {
+  error?: unknown;
+  meta?: unknown;
+  textContent: string;
+}): "success" | "failure" | "unknown";
 declare function isDeterministicCheck(command: string): boolean;
 interface ToolSubject {
   capabilities: string[];
@@ -2573,7 +2635,7 @@ interface DesktopAppRuntime {
 * manifest, the `desktop-runtime.json` metadata block, and the official CLI
 * carrier entry the app installs.
 */
-declare function readDesktopAppRuntime(appAsarPath: string): DesktopAppRuntime;
+declare function readDesktopAppRuntime(appAsarPath: string, session?: HostAuditSession): DesktopAppRuntime;
 interface DesktopTargetGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -2601,7 +2663,7 @@ declare function readDesktopTargetGraph(appAsarPath: string, profileRoot: string
 * graph is an ambiguity no adapter resolves, so its presence fails closed
 * before any digest is computed.
 */
-declare function auditDesktopInstalledImplementation(appAsarPath: string, expectations: readonly AuditedPackageExpectation[]): boolean;
+declare function auditDesktopInstalledImplementation(appAsarPath: string, expectations: readonly AuditedPackageExpectation[], session?: HostAuditSession): boolean;
 /** Persist the app-bundle identity next to the profile contract receipts so a
 * native annex can bind its readback to the exact inspected bundle. */
 declare function writeDesktopRuntimeReceipt(profileRoot: string, runtime: DesktopAppRuntime): string;
@@ -2617,7 +2679,7 @@ declare const DESKTOP_IDENTITY_FACTS: Readonly<{
 * installed-byte audit separately refuses nested critical duplicates, so a
 * nested-only dependency can never be silently resolved here).
 */
-declare function readDesktopDependency(appAsarPath: string, name: string): PackageRow;
+declare function readDesktopDependency(appAsarPath: string, name: string, session?: HostAuditSession): PackageRow;
 //#endregion
 //#region src/domain/host-resolver.d.ts
 declare class HostProfileError extends Error {
@@ -3350,4 +3412,4 @@ declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
 * in `rc020-rc1-host.ts` as historical evidence. */
 declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
 //#endregion
-export { PROOF_KINDS_V2 as $, GuardCheckpoint as $a, authorityCaptureCounts as $i, GitCommandAccepted as $n, capabilityConsequence as $o, applyUpgradeEligibility as $r, ActionSpec as $s, AuditedPackageExpectation as $t, SessionApiError as A, availableBoundaryQualifications as Aa, evaluateExternalWaitCapability as Ai, DesktopAppRuntime as An, RebindArgs as Ao, evidenceFromPersistedToolResult as Ar, isOpenObligation as As, validateProofManifest as At, V6_ORDINARY_COMPLETION_RULE as B, DelegationRef as Ba, LATEST_TESTED_HOST_VERSION as Bi, HostRebindTrust as Bn, CapabilityGap as Bo, UnifiedItemDiagnosis as Br, opensWithDirective as Bs, OperationVerbEntry as Bt, latestRootInstruction as C, segmentClauses as Ca, sanitizeClauseText as Cc, HostLockEvaluation as Ci, resolveInstalledHostLock as Cn, PackageRow as Co, parsePwshCommand as Cr, hasWorkPredicate as Cs, proofHostSurfacesOf as Ct, v6TestPredicate as D, BoundaryRequest as Da, HostToolSurface as Di, DESKTOP_IDENTITY_FACTS as Dn, ReleaseSettlement as Do, ToolCallInput as Dr, isExecutableItem as Ds, scopeCoverageDigest as Dt, testOutcomePredicate as E, BoundaryQualification as Ea, HostProfileKind as Ei, AsarIndex as En, ReleaseOperation as Eo, hasCurrentCertificate as Er, introducesActionClause as Es, requiredSubjectsOf as Et, CLEANUP_CONDITION_RULE_SHORT as F, AssetObligation as Fa, hostVersionFromPackages as Fi, readAsarIndex as Fn, proposeRebindV042 as Fo, withDurability as Fr, legacyQuestionReadingIsInformational as Fs, evidenceMatchesItem as Ft, closingHint as G, EvidenceBinding as Ga, compareHostVersions as Gi, hostTrustDigest as Gn, DerivedProcessFacts as Go, nativeFileTwoRole as Gr, restatedContentOf as Gs, FirstStepPreviewInput as Gt, V6_ORDINARY_COMPLETION_RULE_SHORT as H, DeriveResult as Ha, ParsedHostVersion as Hi, HostTrustError as Hn, DEPENDENCY_FREE_ONLY_CONDITION as Ho, deriveItemDiagnosis as Hr, qualificationOfClause as Hs, ClaimedMessage as Ht, DEFAULT_RECOVERY_CHAR_BUDGET as I, BindingActionClosure as Ia, selectHostCohort as Ii, readDesktopAppRuntime as In, rebindAttemptKey as Io, CertificationSupport as Ir, maskCodeSpans as Is, isVerifyingCapability as It, recoveryTitle as J, EvidenceRole as Ja, satisfiesSupportedHostRange as Ji, registryArchiveFiles as Jn, ProcessFactSource as Jo, DEFAULT_DELEGATION_TOOL_NAMES as Jr, statefulActionsOfScope as Js, firstStepGuidance as Jt, openItems as K, EvidenceOutcome as Ka, evaluateMinimumHostVersion as Ki, parseHostTrust as Kn, OperationAttribution as Ko, relevantEvidence as Kr, semanticActionOfScope as Ks, LifecyclePhase as Kt, MIN_RECOVERY_CHAR_BUDGET as L, BoundaryDisposition as La, HOST_VALIDATED_VERSIONS as Li, readDesktopDependency as Ln, rebindResponse as Lo, DiagnosisNextAction as Lr, maskQuotedSpans as Ls, COMMAND_SURFACE_MANIFEST as Lt, snapshotSessionEvents as M, isCurrentAcceptedBoundary as Ma, evaluateHostCapability as Mi, auditDesktopInstalledImplementation as Mn, confirmRebind as Mo, extractToolSubject as Mr, isRestatement as Ms, EvidenceFacetCoverage as Mt, CLEANUP_CONDITION_RULE as N, qualifyBoundary as Na, evaluateHostLock as Ni, hasDesktopImporterState as Nn, proposeRebind as No, isDeterministicCheck as Nr, itemHoldsExecutionAuthority as Ns, bindingSatisfies as Nt, SESSION_API_UNSUPPORTED as O, GoalActivationState as Oa, bindExecutableIdentity as Oi, DESKTOP_PROFILE_PACKAGE_NAME as On, BoundedSource as Oo, ToolResultInput as Or, isExplanationScope as Os, sessionQuery as Ot, CLEANUP_CONDITION_RULE_COMPACT as P, AssetInterpretationFact as Pa, evaluateToolSurfaceCapability as Pi, readAsarFile as Pn, proposeRebindOutcome as Po, persistedToolResultStatus as Pr, kindOfScope as Ps, evidenceCoverage as Pt, PROOF_KINDS as Q, GuardBoundary as Qa, AuthorityKind as Qi, GitAdapterAction as Qn, admissibleForRemoval as Qo, PROTOCOL_V6_NOTICE as Qr, ActionManifest as Qs, ActiveProfileHostLock as Qt, RecoveryCause as R, BoundaryQualificationKind as Ra, HostVersionDecision as Ri, readDesktopTargetGraph as Rn, replayRebindResult as Ro, Repairability as Rr, namedActions as Rs, CommandSurfaceManifest as Rt, latestAssistantText as S, isInformationalMessage as Sa, normalizeClause as Sc, HostLockContext as Si, resolveDesktopProfileHostLock as Sn, createProjection as So, isRunExecutable as Sr, hasQuestionScope as Ss, proofEvidenceConstraints as St, progressFingerprint as T, BoundaryEffectuation as Ta, sha256 as Tc, HostPlatform as Ti, verifyComposedHostLockDump as Tn, ReleaseObservedIdentity as To, goalCompletionDenial as Tr, interpretMessage as Ts, proofV2Rejection as Tt, carriesCleanupCondition as U, DeriveScope as Ua, SUPPORTED_HOST_RANGE as Ui, HostTrustedPackage as Un, DeclaredOperationResult as Uo, evidenceAvailabilityReason as Ur, questionHeadsClause as Us, FIRST_STEP_GUIDANCE as Ut, V6_ORDINARY_COMPLETION_RULE_COMPACT as V, DeriveConfig as Va, MIN_SUPPORTED_HOST_VERSION as Vi, HostTrustAcquisitionOptions as Vn, CapabilityRemedy as Vo, capabilityRemedyPhrase as Vr, presentExplanationHead as Vs, validateManifest as Vt, cleanupConditionFor as W, DerivedEnvelope as Wa, SUPPORTED_HOST_VERSIONS as Wi, acquireHostTrust as Wn, DependencyStatus as Wo, itemDiagnosis as Wr, reportingHeadGoverns as Ws, FirstStepInjection as Wt, v6CurrentRootBoundaries as X, ExternalOperation as Xa, AuthorityBlock as Xi, GIT_COMMAND_MANIFEST_IDS as Xn, RemovalOutcomeReport as Xo, PROTOCOL_V4_NOTICE as Xr, ACTION_MANIFEST as Xs, lifecyclePhase as Xt, renderRecoveryPacket as Y, ExpectedTransition as Ya, currentContractDigest as Yi, registryArchiveModules as Yn, ProcessOutcomeReason as Yo, PROTOCOL_V3_NOTICE as Yr, verbIsNegated as Ys, firstStepGuidanceV6 as Yt, PROOF_CAPABILITY_MATRIX as Z, GoalRef as Za, AuthorityBlockKind as Zi, GIT_COMMAND_TEMPLATES as Zn, actionHasCertificationPath as Zo, PROTOCOL_V5_NOTICE as Zr, ACTION_MANIFEST_VERSION as Zs, previewFirstStepInjection as Zt, decideTurnBoundary as _, classifyClause as _a, semanticActionFromText as _c, HostCapabilityId as _i, prepareActiveHostTrust as _n, TargetTuple as _o, CanonicalArgv as _r, clauseIsGoverned as _s, createProofManifest as _t, supersedeItem as a, CONFIRM_LINE_PATTERN as aa, STOP_PROTOCOL_VERSION as ac, ACTIVE_HOST_LAUNCHER_VERSION as ai, auditedForegroundRenderers as an, GuardOperation as ao, GitPrestateCheck as ar, DirectiveClass as as, ProofKindCapability as at, isRootPauseRequest as b, extractMethod as ba, canonicalizePath as bc, HostCohortSelection as bi, readActiveHostGraph as bn, WaitAuthorization as bo, ShellParseStatus as br, governedClauseRestrictsExecution as bs, proofDigest as bt, CompletionDisposition as c, parseConfirmationMessage as ca, SemanticAction as cc, DEFAULT_HOST_LOCK as ci, evaluateActiveHostLock as cn, MessageCoverage as co, LinearCommitReadback as cr, GRANTED_QUALIFICATION as cs, ProofManifestV2 as ct, NO_PROGRESS_TURNS_BEFORE_STOP as d, bindingIndividuallyAccepted as da, boundedArtifactChoiceMatches as dc, ExecutableIdentityBinding as di, hostLockRowsFromComposedDump as dn, PersistenceAuthorization as do, createGitPrestateEnvelope as dr, QualificationReason as ds, ProofSurface as dt, segmentAuthorityBlocks as ea, BOUNDED_ARTIFACT_TYPES as ec, deriveProjection as ei, HostProfileError as en, GuardEvidence as eo, GitCommandManifest as er, capabilityFactOf as es, PROOF_MANIFEST_DOMAIN_V2 as et, TurnStoppingDecision as f, certifyCheckpoint as fa, isStatefulAction as fc, GOAL_HOST_PACKAGES as fi, injectActiveProfileHostLock as fn, SourceSpan as fo, executeRevalidatedGitEffect as fr, QualificationStatus as fs, SessionQuery as ft, currentActionBases as g, captureItem as ga, semanticActionFromCommand as gc, HostCapabilityEvaluation as gi, packageRowsFromPnpmLock as gn, TargetSourceKind as go, verifiedLinearCommitReadback as gr, clauseAsksOwnQuestion as gs, canonicalProjection as gt, classifyCompletionClaim as h, captureClause as ha, requestedTargetMatchesResolved as hc, HostAuditProvenance as hi, packageRowsFromActiveGraph as hn, TargetSource as ho, revalidateGitPrestate as hr, clarifiedSpanOf as hs, bindProofV2ToProjection as ht, projectCoreV2 as i, classifyUserInteraction as ia, STATEFUL_ACTIONS as ic, ACTIVE_HOST_COHORT_IDS as ii, auditedDefaultWorkdirProvider as in, GuardItemStatus as io, GitEffectRunner as ir, AuthorityDisposition as is, ProofKind as it, V4SessionLike as j, effectuateBoundary as ja, evaluateGraphDerivedHostLock as ji, DesktopTargetGraph as jn, RebindProposal as jo, extractTextContent as jr, isQuestionScopeNeedingReview as js, validateProofManifestV2 as jt, SESSION_EVENT_ENVELOPE_INVALID as k, GoalBoundaryAccess as ka, bindLiveGoalCapability as ki, DESKTOP_RUNTIME_PACKAGE_NAME as kn, ProposeOutcome as ko, ToolSubject as kr, isInformationalFragment as ks, sessionQueryV2 as kt, CurrentActionBasis as l, CheckpointResult as la, StatefulAction as lc, EXPECTED_HOST_PACKAGES as li, evaluateConfiguredHostLock as ln, NeedsReviewFact as lo, commitIndexSnapshotDigest as lr, InterpretOptions as ls, ProofObligation as lt, assessmentOutcomePredicate as m, ClauseSegment as ma, requestedTargetAuthorizesMutation as mc, HOST_COHORTS as mi, inspectTargetHostGraph as mn, TargetCaptureStatus as mo, parseGitCommandManifest as mr, actionVerbMatches as ms, bindProofToProjection as mt, RC020_RC1_HOST_PACKAGES as n, UserInteractionKind as na, CERTIFICATE_VERSION_V2 as nc, rootLocatorFlavor as ni, activeRendererModule as nn, GuardItem as no, GitCommandRejected as nr, removalIsComplete as ns, PROOF_PROTOCOL_VERSION_V2 as nt, AssistantOutcomeObservation as o, ParsedConfirmation as oa, STOP_PROTOCOL_VERSION_V2 as oc, AuditedExecutable as oi, auditedHostImplementation as on, GuardProjection as oo, GitPrestateEnvelope as or, Executee as os, ProofKindV2 as ot, assessmentAction as p, CaptureScope as pa, requestedIdentityKey as pc, HOST_CAPABILITY_PACKAGE_GROUPS as pi, inspectDesktopTargetGraph as pn, TargetCaptureReasonCode as po, gitCommandMatchesTarget as pr, ScopeInterpretation as ps, SessionQueryV2 as pt, recoveryDigest as q, EvidenceParseStatus as qa, parseHostVersion as qi, qualifyHostTrust as qn, ProcessExitStatus as qo, CAPTURE_V042_NOTICE as qr, splitTextFragments as qs, claimedBatchHasRealRootInput as qt, projectSessionCoreV2 as r, classifyTaskIntent as ra, SEMANTIC_ACTIONS as rc, ACTIVE_HOST_COHORT_ID as ri, auditedDefaultWorkdirHost as rn, GuardItemKind as ro, GitEffectExecution as rr, removalIsPartiallyKnown as rs, ProofHostSurface as rt, CONTROL_RECORD_PREFIX as s, isFrozenV042RebindResponse as sa, SUPPORTED_EVIDENCE_ADAPTERS as sc, BASE_HOST_PACKAGES as si, combineHostPolicy as sn, HostStatus as so, GitTargetIdentity as sr, ExecutionQualification as ss, ProofManifest as st, RC020_RC2_HOST_PACKAGES as t, TaskIntent as ta, CERTIFICATE_VERSION as tc, legacyRecordsNeedingReview as ti, TargetHostGraph as tn, GuardIntegrity as to, GitCommandParseResult as tr, partialFailureOf as ts, PROOF_PROTOCOL_VERSION as tt, NO_PROGRESS_RECORD_PREFIX as u, RejectedBinding as ua, actionCompatible as uc, ExecutableIdentity as ui, hostLockContextFromComposedDump as un, NeedsReviewReason as uo, commitTreeSnapshotDigest as ur, LEGACY_QUALIFICATION as us, ProofObligationV2 as ut, decideTurnStopping as v, environmentDefaultRepositoryTarget as va, validateActionManifest as vc, HostCapabilityRequest as vi, prepareDesktopHostTrust as vn, TargetValue as vo, CanonicalCommandSurface as vr, clauseIsProtected as vs, createProofManifestV2 as vt, observeAssistantOutcome as w, BOUNDARY_RECORD_PREFIX as wa, sanitizeUrl as wc, HostLockStatus as wi, revalidateDesktopCoreLock as wn, ReleaseGateDecision as wo, parseShellCommand as wr, interpretClause as ws, proofOperationMatches as wt, isWholeTaskCompletionClaim as x, extractOperation as xa, digestStrings as xc, HostCohortSelectionReason as xi, resolveActiveProfileHostLock as xn, WorkUnit as xo, canonicalArgvFromCommand as xr, hasOrderedCoordination as xs, proofDigestV2 as xt, decisionBoundaryKey as y, extractArtifactPaths as ya, validateActionTarget as yc, HostCohort as yi, prepareTargetHostTrust as yn, VerificationContract as yo, ParsedShell as yr, explanationHasActionResidue as ys, proofCapabilityReport as yt, RecoveryOptions as z, DeferAuthorization as za, HostVersionStatus as zi, writeDesktopRuntimeReceipt as zn, CapabilityFact as zo, TaskKind as zr, opensConditionLead as zs, ManifestIssue as zt };
+export { PROOF_KINDS_V2 as $, ExternalOperation as $a, AuthorityBlock as $i, GitCommandAccepted as $n, RemovalOutcomeReport as $o, PROTOCOL_V4_NOTICE as $r, ACTION_MANIFEST as $s, AuditedPackageExpectation as $t, SessionApiError as A, BoundaryRequest as Aa, HostToolSurface as Ai, DesktopAppRuntime as An, ReleaseSettlement as Ao, ToolSubject as Ar, isExecutableItem as As, validateProofManifest as At, V6_ORDINARY_COMPLETION_RULE as B, BoundaryDisposition as Ba, HOST_VALIDATED_VERSIONS as Bi, HostRebindTrust as Bn, rebindResponse as Bo, DiagnosisNextAction as Br, maskQuotedSpans as Bs, OperationVerbEntry as Bt, latestRootInstruction as C, extractMethod as Ca, canonicalizePath as Cc, HostCohortSelection as Ci, resolveInstalledHostLock as Cn, WaitAuthorization as Co, parsePwshCommand as Cr, governedClauseRestrictsExecution as Cs, proofHostSurfacesOf as Ct, v6TestPredicate as D, BOUNDARY_RECORD_PREFIX as Da, sanitizeUrl as Dc, HostLockStatus as Di, DESKTOP_IDENTITY_FACTS as Dn, ReleaseGateDecision as Do, NATIVE_GIT_ROOT_PARENT_OID as Dr, interpretClause as Ds, scopeCoverageDigest as Dt, testOutcomePredicate as E, segmentClauses as Ea, sanitizeClauseText as Ec, HostLockEvaluation as Ei, AsarIndex as En, PackageRow as Eo, hasCurrentCertificate as Er, hasWorkPredicate as Es, requiredSubjectsOf as Et, CLEANUP_CONDITION_RULE_SHORT as F, isCurrentAcceptedBoundary as Fa, evaluateHostCapability as Fi, readAsarIndex as Fn, confirmRebind as Fo, nativeGitParentOidVerified as Fr, isRestatement as Fs, evidenceMatchesItem as Ft, closingHint as G, DeriveResult as Ga, ParsedHostVersion as Gi, hostTrustDigest as Gn, DEPENDENCY_FREE_ONLY_CONDITION as Go, deriveItemDiagnosis as Gr, qualificationOfClause as Gs, FirstStepPreviewInput as Gt, V6_ORDINARY_COMPLETION_RULE_SHORT as H, DeferAuthorization as Ha, HostVersionStatus as Hi, HostTrustError as Hn, CapabilityFact as Ho, TaskKind as Hr, opensConditionLead as Hs, ClaimedMessage as Ht, DEFAULT_RECOVERY_CHAR_BUDGET as I, qualifyBoundary as Ia, evaluateHostLock as Ii, readDesktopAppRuntime as In, proposeRebind as Io, persistedToolResultStatus as Ir, itemHoldsExecutionAuthority as Is, isVerifyingCapability as It, recoveryTitle as J, EvidenceBinding as Ja, compareHostVersions as Ji, registryArchiveFiles as Jn, DerivedProcessFacts as Jo, nativeFileTwoRole as Jr, restatedContentOf as Js, firstStepGuidance as Jt, openItems as K, DeriveScope as Ka, SUPPORTED_HOST_RANGE as Ki, parseHostTrust as Kn, DeclaredOperationResult as Ko, evidenceAvailabilityReason as Kr, questionHeadsClause as Ks, LifecyclePhase as Kt, MIN_RECOVERY_CHAR_BUDGET as L, AssetInterpretationFact as La, evaluateToolSurfaceCapability as Li, readDesktopDependency as Ln, proposeRebindOutcome as Lo, shellReadbackOutcome as Lr, kindOfScope as Ls, COMMAND_SURFACE_MANIFEST as Lt, snapshotSessionEvents as M, GoalBoundaryAccess as Ma, bindLiveGoalCapability as Mi, auditDesktopInstalledImplementation as Mn, ProposeOutcome as Mo, extractTextContent as Mr, isInformationalFragment as Ms, EvidenceFacetCoverage as Mt, CLEANUP_CONDITION_RULE as N, availableBoundaryQualifications as Na, evaluateExternalWaitCapability as Ni, hasDesktopImporterState as Nn, RebindArgs as No, extractToolSubject as Nr, isOpenObligation as Ns, bindingSatisfies as Nt, SESSION_API_UNSUPPORTED as O, BoundaryEffectuation as Oa, sha256 as Oc, HostPlatform as Oi, DESKTOP_PROFILE_PACKAGE_NAME as On, ReleaseObservedIdentity as Oo, ToolCallInput as Or, interpretMessage as Os, sessionQuery as Ot, CLEANUP_CONDITION_RULE_COMPACT as P, effectuateBoundary as Pa, evaluateGraphDerivedHostLock as Pi, readAsarFile as Pn, RebindProposal as Po, isDeterministicCheck as Pr, isQuestionScopeNeedingReview as Ps, evidenceCoverage as Pt, PROOF_KINDS as Q, ExpectedTransition as Qa, currentContractDigest as Qi, GitAdapterAction as Qn, ProcessOutcomeReason as Qo, PROTOCOL_V3_NOTICE as Qr, verbIsNegated as Qs, ActiveProfileHostLock as Qt, RecoveryCause as R, AssetObligation as Ra, hostVersionFromPackages as Ri, readDesktopTargetGraph as Rn, proposeRebindV042 as Ro, withDurability as Rr, legacyQuestionReadingIsInformational as Rs, CommandSurfaceManifest as Rt, latestAssistantText as S, extractArtifactPaths as Sa, validateActionTarget as Sc, HostCohort as Si, resolveDesktopProfileHostLock as Sn, VerificationContract as So, isRunExecutable as Sr, explanationHasActionResidue as Ss, proofEvidenceConstraints as St, progressFingerprint as T, isInformationalMessage as Ta, normalizeClause as Tc, HostLockContext as Ti, verifyComposedHostLockDump as Tn, createProjection as To, goalCompletionDenial as Tr, hasQuestionScope as Ts, proofV2Rejection as Tt, carriesCleanupCondition as U, DelegationRef as Ua, LATEST_TESTED_HOST_VERSION as Ui, HostTrustedPackage as Un, CapabilityGap as Uo, UnifiedItemDiagnosis as Ur, opensWithDirective as Us, FIRST_STEP_GUIDANCE as Ut, V6_ORDINARY_COMPLETION_RULE_COMPACT as V, BoundaryQualificationKind as Va, HostVersionDecision as Vi, HostTrustAcquisitionOptions as Vn, replayRebindResult as Vo, Repairability as Vr, namedActions as Vs, validateManifest as Vt, cleanupConditionFor as W, DeriveConfig as Wa, MIN_SUPPORTED_HOST_VERSION as Wi, acquireHostTrust as Wn, CapabilityRemedy as Wo, capabilityRemedyPhrase as Wr, presentExplanationHead as Ws, FirstStepInjection as Wt, v6CurrentRootBoundaries as X, EvidenceParseStatus as Xa, parseHostVersion as Xi, GIT_COMMAND_MANIFEST_IDS as Xn, ProcessExitStatus as Xo, CAPTURE_V042_NOTICE as Xr, splitTextFragments as Xs, lifecyclePhase as Xt, renderRecoveryPacket as Y, EvidenceOutcome as Ya, evaluateMinimumHostVersion as Yi, registryArchiveModules as Yn, OperationAttribution as Yo, relevantEvidence as Yr, semanticActionOfScope as Ys, firstStepGuidanceV6 as Yt, PROOF_CAPABILITY_MATRIX as Z, EvidenceRole as Za, satisfiesSupportedHostRange as Zi, GIT_COMMAND_TEMPLATES as Zn, ProcessFactSource as Zo, DEFAULT_DELEGATION_TOOL_NAMES as Zr, statefulActionsOfScope as Zs, previewFirstStepInjection as Zt, decideTurnBoundary as _, ClauseSegment as _a, requestedTargetAuthorizesMutation as _c, HOST_COHORTS as _i, prepareActiveHostTrust as _n, TargetCaptureStatus as _o, CanonicalArgv as _r, actionVerbMatches as _s, createProofManifest as _t, supersedeItem as a, UserInteractionKind as aa, CERTIFICATE_VERSION_V2 as ac, rootLocatorFlavor as ai, auditedForegroundRenderers as an, GuardItem as ao, GitPrestateCheck as ar, removalIsComplete as as, ProofKindCapability as at, isRootPauseRequest as b, classifyClause as ba, semanticActionFromText as bc, HostCapabilityId as bi, readActiveHostGraph as bn, TargetTuple as bo, ShellParseStatus as br, clauseIsGoverned as bs, proofDigest as bt, CompletionDisposition as c, CONFIRM_LINE_PATTERN as ca, STOP_PROTOCOL_VERSION as cc, ACTIVE_HOST_LAUNCHER_VERSION as ci, evaluateActiveHostLock as cn, GuardOperation as co, LinearCommitReadback as cr, DirectiveClass as cs, ProofManifestV2 as ct, NO_PROGRESS_TURNS_BEFORE_STOP as d, parseConfirmationMessage as da, SemanticAction as dc, DEFAULT_HOST_LOCK as di, hostLockRowsFromComposedDump as dn, MessageCoverage as do, createGitPrestateEnvelope as dr, GRANTED_QUALIFICATION as ds, ProofSurface as dt, AuthorityBlockKind as ea, ACTION_MANIFEST_VERSION as ec, PROTOCOL_V5_NOTICE as ei, HostProfileError as en, GoalRef as eo, GitCommandManifest as er, actionHasCertificationPath as es, PROOF_MANIFEST_DOMAIN_V2 as et, TurnStoppingDecision as f, CheckpointResult as fa, StatefulAction as fc, EXPECTED_HOST_PACKAGES as fi, injectActiveProfileHostLock as fn, NeedsReviewFact as fo, executeRevalidatedGitEffect as fr, InterpretOptions as fs, SessionQuery as ft, currentActionBases as g, CaptureScope as ga, requestedIdentityKey as gc, HOST_CAPABILITY_PACKAGE_GROUPS as gi, packageRowsFromPnpmLock as gn, TargetCaptureReasonCode as go, verifiedLinearCommitReadback as gr, ScopeInterpretation as gs, canonicalProjection as gt, classifyCompletionClaim as h, certifyCheckpoint as ha, isStatefulAction as hc, GOAL_HOST_PACKAGES as hi, packageRowsFromActiveGraph as hn, SourceSpan as ho, revalidateGitPrestate as hr, QualificationStatus as hs, bindProofV2ToProjection as ht, projectCoreV2 as i, TaskIntent as ia, CERTIFICATE_VERSION as ic, legacyRecordsNeedingReview as ii, auditedDefaultWorkdirProvider as in, GuardIntegrity as io, GitEffectRunner as ir, partialFailureOf as is, ProofKind as it, V4SessionLike as j, GoalActivationState as ja, bindExecutableIdentity as ji, DesktopTargetGraph as jn, BoundedSource as jo, evidenceFromPersistedToolResult as jr, isExplanationScope as js, validateProofManifestV2 as jt, SESSION_EVENT_ENVELOPE_INVALID as k, BoundaryQualification as ka, HostProfileKind as ki, DESKTOP_RUNTIME_PACKAGE_NAME as kn, ReleaseOperation as ko, ToolResultInput as kr, introducesActionClause as ks, sessionQueryV2 as kt, CurrentActionBasis as l, ParsedConfirmation as la, STOP_PROTOCOL_VERSION_V2 as lc, AuditedExecutable as li, evaluateConfiguredHostLock as ln, GuardProjection as lo, commitIndexSnapshotDigest as lr, Executee as ls, ProofObligation as lt, assessmentOutcomePredicate as m, bindingIndividuallyAccepted as ma, boundedArtifactChoiceMatches as mc, ExecutableIdentityBinding as mi, inspectTargetHostGraph as mn, PersistenceAuthorization as mo, parseGitCommandManifest as mr, QualificationReason as ms, bindProofToProjection as mt, RC020_RC1_HOST_PACKAGES as n, authorityCaptureCounts as na, ActionSpec as nc, applyUpgradeEligibility as ni, activeRendererModule as nn, GuardCheckpoint as no, GitCommandRejected as nr, capabilityConsequence as ns, PROOF_PROTOCOL_VERSION_V2 as nt, AssistantOutcomeObservation as o, classifyTaskIntent as oa, SEMANTIC_ACTIONS as oc, ACTIVE_HOST_COHORT_ID as oi, auditedHostImplementation as on, GuardItemKind as oo, GitPrestateEnvelope as or, removalIsPartiallyKnown as os, ProofKindV2 as ot, assessmentAction as p, RejectedBinding as pa, actionCompatible as pc, ExecutableIdentity as pi, inspectDesktopTargetGraph as pn, NeedsReviewReason as po, gitCommandMatchesTarget as pr, LEGACY_QUALIFICATION as ps, SessionQueryV2 as pt, recoveryDigest as q, DerivedEnvelope as qa, SUPPORTED_HOST_VERSIONS as qi, qualifyHostTrust as qn, DependencyStatus as qo, itemDiagnosis as qr, reportingHeadGoverns as qs, claimedBatchHasRealRootInput as qt, projectSessionCoreV2 as r, segmentAuthorityBlocks as ra, BOUNDED_ARTIFACT_TYPES as rc, deriveProjection as ri, auditedDefaultWorkdirHost as rn, GuardEvidence as ro, GitEffectExecution as rr, capabilityFactOf as rs, ProofHostSurface as rt, CONTROL_RECORD_PREFIX as s, classifyUserInteraction as sa, STATEFUL_ACTIONS as sc, ACTIVE_HOST_COHORT_IDS as si, combineHostPolicy as sn, GuardItemStatus as so, GitTargetIdentity as sr, AuthorityDisposition as ss, ProofManifest as st, RC020_RC2_HOST_PACKAGES as t, AuthorityKind as ta, ActionManifest as tc, PROTOCOL_V6_NOTICE as ti, TargetHostGraph as tn, GuardBoundary as to, GitCommandParseResult as tr, admissibleForRemoval as ts, PROOF_PROTOCOL_VERSION as tt, NO_PROGRESS_RECORD_PREFIX as u, isFrozenV042RebindResponse as ua, SUPPORTED_EVIDENCE_ADAPTERS as uc, BASE_HOST_PACKAGES as ui, hostLockContextFromComposedDump as un, HostStatus as uo, commitTreeSnapshotDigest as ur, ExecutionQualification as us, ProofObligationV2 as ut, decideTurnStopping as v, captureClause as va, requestedTargetMatchesResolved as vc, HostAuditProvenance as vi, prepareDesktopHostTrust as vn, TargetSource as vo, CanonicalCommandSurface as vr, clarifiedSpanOf as vs, createProofManifestV2 as vt, observeAssistantOutcome as w, extractOperation as wa, digestStrings as wc, HostCohortSelectionReason as wi, revalidateDesktopCoreLock as wn, WorkUnit as wo, parseShellCommand as wr, hasOrderedCoordination as ws, proofOperationMatches as wt, isWholeTaskCompletionClaim as x, environmentDefaultRepositoryTarget as xa, validateActionManifest as xc, HostCapabilityRequest as xi, resolveActiveProfileHostLock as xn, TargetValue as xo, canonicalArgvFromCommand as xr, clauseIsProtected as xs, proofDigestV2 as xt, decisionBoundaryKey as y, captureItem as ya, semanticActionFromCommand as yc, HostCapabilityEvaluation as yi, prepareTargetHostTrust as yn, TargetSourceKind as yo, ParsedShell as yr, clauseAsksOwnQuestion as ys, proofCapabilityReport as yt, RecoveryOptions as z, BindingActionClosure as za, selectHostCohort as zi, writeDesktopRuntimeReceipt as zn, rebindAttemptKey as zo, CertificationSupport as zr, maskCodeSpans as zs, ManifestIssue as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as PROOF_KINDS_V2, $a as GuardCheckpoint, $i as authorityCaptureCounts, $n as GitCommandAccepted, $o as capabilityConsequence, $r as applyUpgradeEligibility, $s as ActionSpec, $t as AuditedPackageExpectation, A as SessionApiError, Aa as availableBoundaryQualifications, Ai as evaluateExternalWaitCapability, An as DesktopAppRuntime, Ao as RebindArgs, Ar as evidenceFromPersistedToolResult, As as isOpenObligation, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as DelegationRef, Bi as LATEST_TESTED_HOST_VERSION, Bn as HostRebindTrust, Bo as CapabilityGap, Br as UnifiedItemDiagnosis, Bs as opensWithDirective, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as segmentClauses, Cc as sanitizeClauseText, Ci as HostLockEvaluation, Cn as resolveInstalledHostLock, Co as PackageRow, Cr as parsePwshCommand, Cs as hasWorkPredicate, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BoundaryRequest, Di as HostToolSurface, Dn as DESKTOP_IDENTITY_FACTS, Do as ReleaseSettlement, Dr as ToolCallInput, Ds as isExecutableItem, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as BoundaryQualification, Ei as HostProfileKind, En as AsarIndex, Eo as ReleaseOperation, Er as hasCurrentCertificate, Es as introducesActionClause, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as AssetObligation, Fi as hostVersionFromPackages, Fn as readAsarIndex, Fo as proposeRebindV042, Fr as withDurability, Fs as legacyQuestionReadingIsInformational, Ft as evidenceMatchesItem, G as closingHint, Ga as EvidenceBinding, Gi as compareHostVersions, Gn as hostTrustDigest, Go as DerivedProcessFacts, Gr as nativeFileTwoRole, Gs as restatedContentOf, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeriveResult, Hi as ParsedHostVersion, Hn as HostTrustError, Ho as DEPENDENCY_FREE_ONLY_CONDITION, Hr as deriveItemDiagnosis, Hs as qualificationOfClause, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as BindingActionClosure, Ii as selectHostCohort, In as readDesktopAppRuntime, Io as rebindAttemptKey, Ir as CertificationSupport, Is as maskCodeSpans, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceRole, Ji as satisfiesSupportedHostRange, Jn as registryArchiveFiles, Jo as ProcessFactSource, Jr as DEFAULT_DELEGATION_TOOL_NAMES, Js as statefulActionsOfScope, Jt as firstStepGuidance, K as openItems, Ka as EvidenceOutcome, Ki as evaluateMinimumHostVersion, Kn as parseHostTrust, Ko as OperationAttribution, Kr as relevantEvidence, Ks as semanticActionOfScope, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as BoundaryDisposition, Li as HOST_VALIDATED_VERSIONS, Ln as readDesktopDependency, Lo as rebindResponse, Lr as DiagnosisNextAction, Ls as maskQuotedSpans, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as isCurrentAcceptedBoundary, Mi as evaluateHostCapability, Mn as auditDesktopInstalledImplementation, Mo as confirmRebind, Mr as extractToolSubject, Ms as isRestatement, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as qualifyBoundary, Ni as evaluateHostLock, Nn as hasDesktopImporterState, No as proposeRebind, Nr as isDeterministicCheck, Ns as itemHoldsExecutionAuthority, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as GoalActivationState, Oi as bindExecutableIdentity, On as DESKTOP_PROFILE_PACKAGE_NAME, Oo as BoundedSource, Or as ToolResultInput, Os as isExplanationScope, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as AssetInterpretationFact, Pi as evaluateToolSurfaceCapability, Pn as readAsarFile, Po as proposeRebindOutcome, Pr as persistedToolResultStatus, Ps as kindOfScope, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as GuardBoundary, Qi as AuthorityKind, Qn as GitAdapterAction, Qo as admissibleForRemoval, Qr as PROTOCOL_V6_NOTICE, Qs as ActionManifest, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as BoundaryQualificationKind, Ri as HostVersionDecision, Rn as readDesktopTargetGraph, Ro as replayRebindResult, Rr as Repairability, Rs as namedActions, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as isInformationalMessage, Sc as normalizeClause, Si as HostLockContext, Sn as resolveDesktopProfileHostLock, So as createProjection, Sr as isRunExecutable, Ss as hasQuestionScope, St as proofEvidenceConstraints, T as progressFingerprint, Ta as BoundaryEffectuation, Tc as sha256, Ti as HostPlatform, Tn as verifyComposedHostLockDump, To as ReleaseObservedIdentity, Tr as goalCompletionDenial, Ts as interpretMessage, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DeriveScope, Ui as SUPPORTED_HOST_RANGE, Un as HostTrustedPackage, Uo as DeclaredOperationResult, Ur as evidenceAvailabilityReason, Us as questionHeadsClause, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as DeriveConfig, Vi as MIN_SUPPORTED_HOST_VERSION, Vn as HostTrustAcquisitionOptions, Vo as CapabilityRemedy, Vr as capabilityRemedyPhrase, Vs as presentExplanationHead, Vt as validateManifest, W as cleanupConditionFor, Wa as DerivedEnvelope, Wi as SUPPORTED_HOST_VERSIONS, Wn as acquireHostTrust, Wo as DependencyStatus, Wr as itemDiagnosis, Ws as reportingHeadGoverns, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as ExternalOperation, Xi as AuthorityBlock, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as RemovalOutcomeReport, Xr as PROTOCOL_V4_NOTICE, Xs as ACTION_MANIFEST, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as ExpectedTransition, Yi as currentContractDigest, Yn as registryArchiveModules, Yo as ProcessOutcomeReason, Yr as PROTOCOL_V3_NOTICE, Ys as verbIsNegated, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as GoalRef, Zi as AuthorityBlockKind, Zn as GIT_COMMAND_TEMPLATES, Zo as actionHasCertificationPath, Zr as PROTOCOL_V5_NOTICE, Zs as ACTION_MANIFEST_VERSION, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as classifyClause, _c as semanticActionFromText, _i as HostCapabilityId, _n as prepareActiveHostTrust, _o as TargetTuple, _r as CanonicalArgv, _s as clauseIsGoverned, _t as createProofManifest, a as supersedeItem, aa as CONFIRM_LINE_PATTERN, ac as STOP_PROTOCOL_VERSION, ai as ACTIVE_HOST_LAUNCHER_VERSION, an as auditedForegroundRenderers, ao as GuardOperation, ar as GitPrestateCheck, as as DirectiveClass, at as ProofKindCapability, b as isRootPauseRequest, ba as extractMethod, bc as canonicalizePath, bi as HostCohortSelection, bn as readActiveHostGraph, bo as WaitAuthorization, br as ShellParseStatus, bs as governedClauseRestrictsExecution, bt as proofDigest, c as CompletionDisposition, ca as parseConfirmationMessage, cc as SemanticAction, ci as DEFAULT_HOST_LOCK, cn as evaluateActiveHostLock, co as MessageCoverage, cr as LinearCommitReadback, cs as GRANTED_QUALIFICATION, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as bindingIndividuallyAccepted, dc as boundedArtifactChoiceMatches, di as ExecutableIdentityBinding, dn as hostLockRowsFromComposedDump, do as PersistenceAuthorization, dr as createGitPrestateEnvelope, ds as QualificationReason, dt as ProofSurface, ea as segmentAuthorityBlocks, ec as BOUNDED_ARTIFACT_TYPES, ei as deriveProjection, en as HostProfileError, eo as GuardEvidence, er as GitCommandManifest, es as capabilityFactOf, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as certifyCheckpoint, fc as isStatefulAction, fi as GOAL_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as SourceSpan, fr as executeRevalidatedGitEffect, fs as QualificationStatus, ft as SessionQuery, g as currentActionBases, ga as captureItem, gc as semanticActionFromCommand, gi as HostCapabilityEvaluation, gn as packageRowsFromPnpmLock, go as TargetSourceKind, gr as verifiedLinearCommitReadback, gs as clauseAsksOwnQuestion, gt as canonicalProjection, h as classifyCompletionClaim, ha as captureClause, hc as requestedTargetMatchesResolved, hi as HostAuditProvenance, hn as packageRowsFromActiveGraph, ho as TargetSource, hr as revalidateGitPrestate, hs as clarifiedSpanOf, ht as bindProofV2ToProjection, i as projectCoreV2, ia as classifyUserInteraction, ic as STATEFUL_ACTIONS, ii as ACTIVE_HOST_COHORT_IDS, in as auditedDefaultWorkdirProvider, io as GuardItemStatus, ir as GitEffectRunner, is as AuthorityDisposition, it as ProofKind, j as V4SessionLike, ja as effectuateBoundary, ji as evaluateGraphDerivedHostLock, jn as DesktopTargetGraph, jo as RebindProposal, jr as extractTextContent, js as isQuestionScopeNeedingReview, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as GoalBoundaryAccess, ki as bindLiveGoalCapability, kn as DESKTOP_RUNTIME_PACKAGE_NAME, ko as ProposeOutcome, kr as ToolSubject, ks as isInformationalFragment, kt as sessionQueryV2, l as CurrentActionBasis, la as CheckpointResult, lc as StatefulAction, li as EXPECTED_HOST_PACKAGES, ln as evaluateConfiguredHostLock, lo as NeedsReviewFact, lr as commitIndexSnapshotDigest, ls as InterpretOptions, lt as ProofObligation, m as assessmentOutcomePredicate, ma as ClauseSegment, mc as requestedTargetAuthorizesMutation, mi as HOST_COHORTS, mn as inspectTargetHostGraph, mo as TargetCaptureStatus, mr as parseGitCommandManifest, ms as actionVerbMatches, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as UserInteractionKind, nc as CERTIFICATE_VERSION_V2, ni as rootLocatorFlavor, nn as activeRendererModule, no as GuardItem, nr as GitCommandRejected, ns as removalIsComplete, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as ParsedConfirmation, oc as STOP_PROTOCOL_VERSION_V2, oi as AuditedExecutable, on as auditedHostImplementation, oo as GuardProjection, or as GitPrestateEnvelope, os as Executee, ot as ProofKindV2, p as assessmentAction, pa as CaptureScope, pc as requestedIdentityKey, pi as HOST_CAPABILITY_PACKAGE_GROUPS, pn as inspectDesktopTargetGraph, po as TargetCaptureReasonCode, pr as gitCommandMatchesTarget, ps as ScopeInterpretation, pt as SessionQueryV2, q as recoveryDigest, qa as EvidenceParseStatus, qi as parseHostVersion, qn as qualifyHostTrust, qo as ProcessExitStatus, qr as CAPTURE_V042_NOTICE, qs as splitTextFragments, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as classifyTaskIntent, rc as SEMANTIC_ACTIONS, ri as ACTIVE_HOST_COHORT_ID, rn as auditedDefaultWorkdirHost, ro as GuardItemKind, rr as GitEffectExecution, rs as removalIsPartiallyKnown, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as isFrozenV042RebindResponse, sc as SUPPORTED_EVIDENCE_ADAPTERS, si as BASE_HOST_PACKAGES, sn as combineHostPolicy, so as HostStatus, sr as GitTargetIdentity, ss as ExecutionQualification, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as TaskIntent, tc as CERTIFICATE_VERSION, ti as legacyRecordsNeedingReview, tn as TargetHostGraph, to as GuardIntegrity, tr as GitCommandParseResult, ts as partialFailureOf, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as RejectedBinding, uc as actionCompatible, ui as ExecutableIdentity, un as hostLockContextFromComposedDump, uo as NeedsReviewReason, ur as commitTreeSnapshotDigest, us as LEGACY_QUALIFICATION, ut as ProofObligationV2, v as decideTurnStopping, va as environmentDefaultRepositoryTarget, vc as validateActionManifest, vi as HostCapabilityRequest, vn as prepareDesktopHostTrust, vo as TargetValue, vr as CanonicalCommandSurface, vs as clauseIsProtected, vt as createProofManifestV2, w as observeAssistantOutcome, wa as BOUNDARY_RECORD_PREFIX, wc as sanitizeUrl, wi as HostLockStatus, wn as revalidateDesktopCoreLock, wo as ReleaseGateDecision, wr as parseShellCommand, ws as interpretClause, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as extractOperation, xc as digestStrings, xi as HostCohortSelectionReason, xn as resolveActiveProfileHostLock, xo as WorkUnit, xr as canonicalArgvFromCommand, xs as hasOrderedCoordination, xt as proofDigestV2, y as decisionBoundaryKey, ya as extractArtifactPaths, yc as validateActionTarget, yi as HostCohort, yn as prepareTargetHostTrust, yo as VerificationContract, yr as ParsedShell, ys as explanationHasActionResidue, yt as proofCapabilityReport, z as RecoveryOptions, za as DeferAuthorization, zi as HostVersionStatus, zn as writeDesktopRuntimeReceipt, zo as CapabilityFact, zr as TaskKind, zs as opensConditionLead, zt as ManifestIssue } from "./index-DqvBEsNc.js";
+import { $ as PROOF_KINDS_V2, $a as ExternalOperation, $i as AuthorityBlock, $n as GitCommandAccepted, $o as RemovalOutcomeReport, $r as PROTOCOL_V4_NOTICE, $s as ACTION_MANIFEST, $t as AuditedPackageExpectation, A as SessionApiError, Aa as BoundaryRequest, Ai as HostToolSurface, An as DesktopAppRuntime, Ao as ReleaseSettlement, Ar as ToolSubject, As as isExecutableItem, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as BoundaryDisposition, Bi as HOST_VALIDATED_VERSIONS, Bn as HostRebindTrust, Bo as rebindResponse, Br as DiagnosisNextAction, Bs as maskQuotedSpans, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as extractMethod, Cc as canonicalizePath, Ci as HostCohortSelection, Cn as resolveInstalledHostLock, Co as WaitAuthorization, Cr as parsePwshCommand, Cs as governedClauseRestrictsExecution, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BOUNDARY_RECORD_PREFIX, Dc as sanitizeUrl, Di as HostLockStatus, Dn as DESKTOP_IDENTITY_FACTS, Do as ReleaseGateDecision, Dr as NATIVE_GIT_ROOT_PARENT_OID, Ds as interpretClause, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as segmentClauses, Ec as sanitizeClauseText, Ei as HostLockEvaluation, En as AsarIndex, Eo as PackageRow, Er as hasCurrentCertificate, Es as hasWorkPredicate, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as isCurrentAcceptedBoundary, Fi as evaluateHostCapability, Fn as readAsarIndex, Fo as confirmRebind, Fr as nativeGitParentOidVerified, Fs as isRestatement, Ft as evidenceMatchesItem, G as closingHint, Ga as DeriveResult, Gi as ParsedHostVersion, Gn as hostTrustDigest, Go as DEPENDENCY_FREE_ONLY_CONDITION, Gr as deriveItemDiagnosis, Gs as qualificationOfClause, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeferAuthorization, Hi as HostVersionStatus, Hn as HostTrustError, Ho as CapabilityFact, Hr as TaskKind, Hs as opensConditionLead, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as qualifyBoundary, Ii as evaluateHostLock, In as readDesktopAppRuntime, Io as proposeRebind, Ir as persistedToolResultStatus, Is as itemHoldsExecutionAuthority, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceBinding, Ji as compareHostVersions, Jn as registryArchiveFiles, Jo as DerivedProcessFacts, Jr as nativeFileTwoRole, Js as restatedContentOf, Jt as firstStepGuidance, K as openItems, Ka as DeriveScope, Ki as SUPPORTED_HOST_RANGE, Kn as parseHostTrust, Ko as DeclaredOperationResult, Kr as evidenceAvailabilityReason, Ks as questionHeadsClause, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as AssetInterpretationFact, Li as evaluateToolSurfaceCapability, Ln as readDesktopDependency, Lo as proposeRebindOutcome, Lr as shellReadbackOutcome, Ls as kindOfScope, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as GoalBoundaryAccess, Mi as bindLiveGoalCapability, Mn as auditDesktopInstalledImplementation, Mo as ProposeOutcome, Mr as extractTextContent, Ms as isInformationalFragment, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as availableBoundaryQualifications, Ni as evaluateExternalWaitCapability, Nn as hasDesktopImporterState, No as RebindArgs, Nr as extractToolSubject, Ns as isOpenObligation, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as BoundaryEffectuation, Oc as sha256, Oi as HostPlatform, On as DESKTOP_PROFILE_PACKAGE_NAME, Oo as ReleaseObservedIdentity, Or as ToolCallInput, Os as interpretMessage, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as effectuateBoundary, Pi as evaluateGraphDerivedHostLock, Pn as readAsarFile, Po as RebindProposal, Pr as isDeterministicCheck, Ps as isQuestionScopeNeedingReview, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as ExpectedTransition, Qi as currentContractDigest, Qn as GitAdapterAction, Qo as ProcessOutcomeReason, Qr as PROTOCOL_V3_NOTICE, Qs as verbIsNegated, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as AssetObligation, Ri as hostVersionFromPackages, Rn as readDesktopTargetGraph, Ro as proposeRebindV042, Rr as withDurability, Rs as legacyQuestionReadingIsInformational, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as extractArtifactPaths, Sc as validateActionTarget, Si as HostCohort, Sn as resolveDesktopProfileHostLock, So as VerificationContract, Sr as isRunExecutable, Ss as explanationHasActionResidue, St as proofEvidenceConstraints, T as progressFingerprint, Ta as isInformationalMessage, Tc as normalizeClause, Ti as HostLockContext, Tn as verifyComposedHostLockDump, To as createProjection, Tr as goalCompletionDenial, Ts as hasQuestionScope, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DelegationRef, Ui as LATEST_TESTED_HOST_VERSION, Un as HostTrustedPackage, Uo as CapabilityGap, Ur as UnifiedItemDiagnosis, Us as opensWithDirective, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as BoundaryQualificationKind, Vi as HostVersionDecision, Vn as HostTrustAcquisitionOptions, Vo as replayRebindResult, Vr as Repairability, Vs as namedActions, Vt as validateManifest, W as cleanupConditionFor, Wa as DeriveConfig, Wi as MIN_SUPPORTED_HOST_VERSION, Wn as acquireHostTrust, Wo as CapabilityRemedy, Wr as capabilityRemedyPhrase, Ws as presentExplanationHead, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as EvidenceParseStatus, Xi as parseHostVersion, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as ProcessExitStatus, Xr as CAPTURE_V042_NOTICE, Xs as splitTextFragments, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as EvidenceOutcome, Yi as evaluateMinimumHostVersion, Yn as registryArchiveModules, Yo as OperationAttribution, Yr as relevantEvidence, Ys as semanticActionOfScope, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as EvidenceRole, Zi as satisfiesSupportedHostRange, Zn as GIT_COMMAND_TEMPLATES, Zo as ProcessFactSource, Zr as DEFAULT_DELEGATION_TOOL_NAMES, Zs as statefulActionsOfScope, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as ClauseSegment, _c as requestedTargetAuthorizesMutation, _i as HOST_COHORTS, _n as prepareActiveHostTrust, _o as TargetCaptureStatus, _r as CanonicalArgv, _s as actionVerbMatches, _t as createProofManifest, a as supersedeItem, aa as UserInteractionKind, ac as CERTIFICATE_VERSION_V2, ai as rootLocatorFlavor, an as auditedForegroundRenderers, ao as GuardItem, ar as GitPrestateCheck, as as removalIsComplete, at as ProofKindCapability, b as isRootPauseRequest, ba as classifyClause, bc as semanticActionFromText, bi as HostCapabilityId, bn as readActiveHostGraph, bo as TargetTuple, br as ShellParseStatus, bs as clauseIsGoverned, bt as proofDigest, c as CompletionDisposition, ca as CONFIRM_LINE_PATTERN, cc as STOP_PROTOCOL_VERSION, ci as ACTIVE_HOST_LAUNCHER_VERSION, cn as evaluateActiveHostLock, co as GuardOperation, cr as LinearCommitReadback, cs as DirectiveClass, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as parseConfirmationMessage, dc as SemanticAction, di as DEFAULT_HOST_LOCK, dn as hostLockRowsFromComposedDump, do as MessageCoverage, dr as createGitPrestateEnvelope, ds as GRANTED_QUALIFICATION, dt as ProofSurface, ea as AuthorityBlockKind, ec as ACTION_MANIFEST_VERSION, ei as PROTOCOL_V5_NOTICE, en as HostProfileError, eo as GoalRef, er as GitCommandManifest, es as actionHasCertificationPath, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as CheckpointResult, fc as StatefulAction, fi as EXPECTED_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as NeedsReviewFact, fr as executeRevalidatedGitEffect, fs as InterpretOptions, ft as SessionQuery, g as currentActionBases, ga as CaptureScope, gc as requestedIdentityKey, gi as HOST_CAPABILITY_PACKAGE_GROUPS, gn as packageRowsFromPnpmLock, go as TargetCaptureReasonCode, gr as verifiedLinearCommitReadback, gs as ScopeInterpretation, gt as canonicalProjection, h as classifyCompletionClaim, ha as certifyCheckpoint, hc as isStatefulAction, hi as GOAL_HOST_PACKAGES, hn as packageRowsFromActiveGraph, ho as SourceSpan, hr as revalidateGitPrestate, hs as QualificationStatus, ht as bindProofV2ToProjection, i as projectCoreV2, ia as TaskIntent, ic as CERTIFICATE_VERSION, ii as legacyRecordsNeedingReview, in as auditedDefaultWorkdirProvider, io as GuardIntegrity, ir as GitEffectRunner, is as partialFailureOf, it as ProofKind, j as V4SessionLike, ja as GoalActivationState, ji as bindExecutableIdentity, jn as DesktopTargetGraph, jo as BoundedSource, jr as evidenceFromPersistedToolResult, js as isExplanationScope, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as BoundaryQualification, ki as HostProfileKind, kn as DESKTOP_RUNTIME_PACKAGE_NAME, ko as ReleaseOperation, kr as ToolResultInput, ks as introducesActionClause, kt as sessionQueryV2, l as CurrentActionBasis, la as ParsedConfirmation, lc as STOP_PROTOCOL_VERSION_V2, li as AuditedExecutable, ln as evaluateConfiguredHostLock, lo as GuardProjection, lr as commitIndexSnapshotDigest, ls as Executee, lt as ProofObligation, m as assessmentOutcomePredicate, ma as bindingIndividuallyAccepted, mc as boundedArtifactChoiceMatches, mi as ExecutableIdentityBinding, mn as inspectTargetHostGraph, mo as PersistenceAuthorization, mr as parseGitCommandManifest, ms as QualificationReason, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as authorityCaptureCounts, nc as ActionSpec, ni as applyUpgradeEligibility, nn as activeRendererModule, no as GuardCheckpoint, nr as GitCommandRejected, ns as capabilityConsequence, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as classifyTaskIntent, oc as SEMANTIC_ACTIONS, oi as ACTIVE_HOST_COHORT_ID, on as auditedHostImplementation, oo as GuardItemKind, or as GitPrestateEnvelope, os as removalIsPartiallyKnown, ot as ProofKindV2, p as assessmentAction, pa as RejectedBinding, pc as actionCompatible, pi as ExecutableIdentity, pn as inspectDesktopTargetGraph, po as NeedsReviewReason, pr as gitCommandMatchesTarget, ps as LEGACY_QUALIFICATION, pt as SessionQueryV2, q as recoveryDigest, qa as DerivedEnvelope, qi as SUPPORTED_HOST_VERSIONS, qn as qualifyHostTrust, qo as DependencyStatus, qr as itemDiagnosis, qs as reportingHeadGoverns, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as segmentAuthorityBlocks, rc as BOUNDED_ARTIFACT_TYPES, ri as deriveProjection, rn as auditedDefaultWorkdirHost, ro as GuardEvidence, rr as GitEffectExecution, rs as capabilityFactOf, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as classifyUserInteraction, sc as STATEFUL_ACTIONS, si as ACTIVE_HOST_COHORT_IDS, sn as combineHostPolicy, so as GuardItemStatus, sr as GitTargetIdentity, ss as AuthorityDisposition, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as AuthorityKind, tc as ActionManifest, ti as PROTOCOL_V6_NOTICE, tn as TargetHostGraph, to as GuardBoundary, tr as GitCommandParseResult, ts as admissibleForRemoval, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as isFrozenV042RebindResponse, uc as SUPPORTED_EVIDENCE_ADAPTERS, ui as BASE_HOST_PACKAGES, un as hostLockContextFromComposedDump, uo as HostStatus, ur as commitTreeSnapshotDigest, us as ExecutionQualification, ut as ProofObligationV2, v as decideTurnStopping, va as captureClause, vc as requestedTargetMatchesResolved, vi as HostAuditProvenance, vn as prepareDesktopHostTrust, vo as TargetSource, vr as CanonicalCommandSurface, vs as clarifiedSpanOf, vt as createProofManifestV2, w as observeAssistantOutcome, wa as extractOperation, wc as digestStrings, wi as HostCohortSelectionReason, wn as revalidateDesktopCoreLock, wo as WorkUnit, wr as parseShellCommand, ws as hasOrderedCoordination, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as environmentDefaultRepositoryTarget, xc as validateActionManifest, xi as HostCapabilityRequest, xn as resolveActiveProfileHostLock, xo as TargetValue, xr as canonicalArgvFromCommand, xs as clauseIsProtected, xt as proofDigestV2, y as decisionBoundaryKey, ya as captureItem, yc as semanticActionFromCommand, yi as HostCapabilityEvaluation, yn as prepareTargetHostTrust, yo as TargetSourceKind, yr as ParsedShell, ys as clauseAsksOwnQuestion, yt as proofCapabilityReport, z as RecoveryOptions, za as BindingActionClosure, zi as selectHostCohort, zn as writeDesktopRuntimeReceipt, zo as rebindAttemptKey, zr as CertificationSupport, zs as maskCodeSpans, zt as ManifestIssue } from "./index-BmTaAEkJ.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -203,4 +203,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };