dsh-completion-guard 0.8.3 → 0.9.0

package/dist/{index-BmTaAEkJ.d.ts → index-qKK3BJW1.d.ts}

@@ -2585,6 +2585,16 @@ declare function acquireHostTrust(rows: readonly PackageRow[], fetcher?: typeof
 */
 declare const DESKTOP_PROFILE_PACKAGE_NAME = "dsh-profile-desktop";
 declare const DESKTOP_RUNTIME_PACKAGE_NAME = "@deepseek-ai/dsh-desktop-runtime";
+/**
+* CG-083-PERF03: operation-scoped asar reads. Within ONE host-lock
+* validation the same helpers used to re-open the archive and re-read the
+* header, metadata and module bytes several times; with a session, the index
+* and every entry's bytes are memoized on that operation's audit session —
+* they live and die with the validation and are never a cross-entry cache.
+* Without a session the original direct reads run unchanged.
+*/
+declare function memoizedAsarIndex(session: HostAuditSession | undefined, archivePath: string): AsarIndex;
+declare function memoizedAsarFile(session: HostAuditSession | undefined, archivePath: string, index: AsarIndex, entryPath: string): Buffer;
 interface AsarNode {
   files?: Record<string, AsarNode>;
   size?: number;
@@ -3412,4 +3422,165 @@ declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
 * in `rc020-rc1-host.ts` as historical evidence. */
 declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
 //#endregion
-export { PROOF_KINDS_V2 as $, ExternalOperation as $a, AuthorityBlock as $i, GitCommandAccepted as $n, RemovalOutcomeReport as $o, PROTOCOL_V4_NOTICE as $r, ACTION_MANIFEST as $s, AuditedPackageExpectation as $t, SessionApiError as A, BoundaryRequest as Aa, HostToolSurface as Ai, DesktopAppRuntime as An, ReleaseSettlement as Ao, ToolSubject as Ar, isExecutableItem as As, validateProofManifest as At, V6_ORDINARY_COMPLETION_RULE as B, BoundaryDisposition as Ba, HOST_VALIDATED_VERSIONS as Bi, HostRebindTrust as Bn, rebindResponse as Bo, DiagnosisNextAction as Br, maskQuotedSpans as Bs, OperationVerbEntry as Bt, latestRootInstruction as C, extractMethod as Ca, canonicalizePath as Cc, HostCohortSelection as Ci, resolveInstalledHostLock as Cn, WaitAuthorization as Co, parsePwshCommand as Cr, governedClauseRestrictsExecution as Cs, proofHostSurfacesOf as Ct, v6TestPredicate as D, BOUNDARY_RECORD_PREFIX as Da, sanitizeUrl as Dc, HostLockStatus as Di, DESKTOP_IDENTITY_FACTS as Dn, ReleaseGateDecision as Do, NATIVE_GIT_ROOT_PARENT_OID as Dr, interpretClause as Ds, scopeCoverageDigest as Dt, testOutcomePredicate as E, segmentClauses as Ea, sanitizeClauseText as Ec, HostLockEvaluation as Ei, AsarIndex as En, PackageRow as Eo, hasCurrentCertificate as Er, hasWorkPredicate as Es, requiredSubjectsOf as Et, CLEANUP_CONDITION_RULE_SHORT as F, isCurrentAcceptedBoundary as Fa, evaluateHostCapability as Fi, readAsarIndex as Fn, confirmRebind as Fo, nativeGitParentOidVerified as Fr, isRestatement as Fs, evidenceMatchesItem as Ft, closingHint as G, DeriveResult as Ga, ParsedHostVersion as Gi, hostTrustDigest as Gn, DEPENDENCY_FREE_ONLY_CONDITION as Go, deriveItemDiagnosis as Gr, qualificationOfClause as Gs, FirstStepPreviewInput as Gt, V6_ORDINARY_COMPLETION_RULE_SHORT as H, DeferAuthorization as Ha, HostVersionStatus as Hi, HostTrustError as Hn, CapabilityFact as Ho, TaskKind as Hr, opensConditionLead as Hs, ClaimedMessage as Ht, DEFAULT_RECOVERY_CHAR_BUDGET as I, qualifyBoundary as Ia, evaluateHostLock as Ii, readDesktopAppRuntime as In, proposeRebind as Io, persistedToolResultStatus as Ir, itemHoldsExecutionAuthority as Is, isVerifyingCapability as It, recoveryTitle as J, EvidenceBinding as Ja, compareHostVersions as Ji, registryArchiveFiles as Jn, DerivedProcessFacts as Jo, nativeFileTwoRole as Jr, restatedContentOf as Js, firstStepGuidance as Jt, openItems as K, DeriveScope as Ka, SUPPORTED_HOST_RANGE as Ki, parseHostTrust as Kn, DeclaredOperationResult as Ko, evidenceAvailabilityReason as Kr, questionHeadsClause as Ks, LifecyclePhase as Kt, MIN_RECOVERY_CHAR_BUDGET as L, AssetInterpretationFact as La, evaluateToolSurfaceCapability as Li, readDesktopDependency as Ln, proposeRebindOutcome as Lo, shellReadbackOutcome as Lr, kindOfScope as Ls, COMMAND_SURFACE_MANIFEST as Lt, snapshotSessionEvents as M, GoalBoundaryAccess as Ma, bindLiveGoalCapability as Mi, auditDesktopInstalledImplementation as Mn, ProposeOutcome as Mo, extractTextContent as Mr, isInformationalFragment as Ms, EvidenceFacetCoverage as Mt, CLEANUP_CONDITION_RULE as N, availableBoundaryQualifications as Na, evaluateExternalWaitCapability as Ni, hasDesktopImporterState as Nn, RebindArgs as No, extractToolSubject as Nr, isOpenObligation as Ns, bindingSatisfies as Nt, SESSION_API_UNSUPPORTED as O, BoundaryEffectuation as Oa, sha256 as Oc, HostPlatform as Oi, DESKTOP_PROFILE_PACKAGE_NAME as On, ReleaseObservedIdentity as Oo, ToolCallInput as Or, interpretMessage as Os, sessionQuery as Ot, CLEANUP_CONDITION_RULE_COMPACT as P, effectuateBoundary as Pa, evaluateGraphDerivedHostLock as Pi, readAsarFile as Pn, RebindProposal as Po, isDeterministicCheck as Pr, isQuestionScopeNeedingReview as Ps, evidenceCoverage as Pt, PROOF_KINDS as Q, ExpectedTransition as Qa, currentContractDigest as Qi, GitAdapterAction as Qn, ProcessOutcomeReason as Qo, PROTOCOL_V3_NOTICE as Qr, verbIsNegated as Qs, ActiveProfileHostLock as Qt, RecoveryCause as R, AssetObligation as Ra, hostVersionFromPackages as Ri, readDesktopTargetGraph as Rn, proposeRebindV042 as Ro, withDurability as Rr, legacyQuestionReadingIsInformational as Rs, CommandSurfaceManifest as Rt, latestAssistantText as S, extractArtifactPaths as Sa, validateActionTarget as Sc, HostCohort as Si, resolveDesktopProfileHostLock as Sn, VerificationContract as So, isRunExecutable as Sr, explanationHasActionResidue as Ss, proofEvidenceConstraints as St, progressFingerprint as T, isInformationalMessage as Ta, normalizeClause as Tc, HostLockContext as Ti, verifyComposedHostLockDump as Tn, createProjection as To, goalCompletionDenial as Tr, hasQuestionScope as Ts, proofV2Rejection as Tt, carriesCleanupCondition as U, DelegationRef as Ua, LATEST_TESTED_HOST_VERSION as Ui, HostTrustedPackage as Un, CapabilityGap as Uo, UnifiedItemDiagnosis as Ur, opensWithDirective as Us, FIRST_STEP_GUIDANCE as Ut, V6_ORDINARY_COMPLETION_RULE_COMPACT as V, BoundaryQualificationKind as Va, HostVersionDecision as Vi, HostTrustAcquisitionOptions as Vn, replayRebindResult as Vo, Repairability as Vr, namedActions as Vs, validateManifest as Vt, cleanupConditionFor as W, DeriveConfig as Wa, MIN_SUPPORTED_HOST_VERSION as Wi, acquireHostTrust as Wn, CapabilityRemedy as Wo, capabilityRemedyPhrase as Wr, presentExplanationHead as Ws, FirstStepInjection as Wt, v6CurrentRootBoundaries as X, EvidenceParseStatus as Xa, parseHostVersion as Xi, GIT_COMMAND_MANIFEST_IDS as Xn, ProcessExitStatus as Xo, CAPTURE_V042_NOTICE as Xr, splitTextFragments as Xs, lifecyclePhase as Xt, renderRecoveryPacket as Y, EvidenceOutcome as Ya, evaluateMinimumHostVersion as Yi, registryArchiveModules as Yn, OperationAttribution as Yo, relevantEvidence as Yr, semanticActionOfScope as Ys, firstStepGuidanceV6 as Yt, PROOF_CAPABILITY_MATRIX as Z, EvidenceRole as Za, satisfiesSupportedHostRange as Zi, GIT_COMMAND_TEMPLATES as Zn, ProcessFactSource as Zo, DEFAULT_DELEGATION_TOOL_NAMES as Zr, statefulActionsOfScope as Zs, previewFirstStepInjection as Zt, decideTurnBoundary as _, ClauseSegment as _a, requestedTargetAuthorizesMutation as _c, HOST_COHORTS as _i, prepareActiveHostTrust as _n, TargetCaptureStatus as _o, CanonicalArgv as _r, actionVerbMatches as _s, createProofManifest as _t, supersedeItem as a, UserInteractionKind as aa, CERTIFICATE_VERSION_V2 as ac, rootLocatorFlavor as ai, auditedForegroundRenderers as an, GuardItem as ao, GitPrestateCheck as ar, removalIsComplete as as, ProofKindCapability as at, isRootPauseRequest as b, classifyClause as ba, semanticActionFromText as bc, HostCapabilityId as bi, readActiveHostGraph as bn, TargetTuple as bo, ShellParseStatus as br, clauseIsGoverned as bs, proofDigest as bt, CompletionDisposition as c, CONFIRM_LINE_PATTERN as ca, STOP_PROTOCOL_VERSION as cc, ACTIVE_HOST_LAUNCHER_VERSION as ci, evaluateActiveHostLock as cn, GuardOperation as co, LinearCommitReadback as cr, DirectiveClass as cs, ProofManifestV2 as ct, NO_PROGRESS_TURNS_BEFORE_STOP as d, parseConfirmationMessage as da, SemanticAction as dc, DEFAULT_HOST_LOCK as di, hostLockRowsFromComposedDump as dn, MessageCoverage as do, createGitPrestateEnvelope as dr, GRANTED_QUALIFICATION as ds, ProofSurface as dt, AuthorityBlockKind as ea, ACTION_MANIFEST_VERSION as ec, PROTOCOL_V5_NOTICE as ei, HostProfileError as en, GoalRef as eo, GitCommandManifest as er, actionHasCertificationPath as es, PROOF_MANIFEST_DOMAIN_V2 as et, TurnStoppingDecision as f, CheckpointResult as fa, StatefulAction as fc, EXPECTED_HOST_PACKAGES as fi, injectActiveProfileHostLock as fn, NeedsReviewFact as fo, executeRevalidatedGitEffect as fr, InterpretOptions as fs, SessionQuery as ft, currentActionBases as g, CaptureScope as ga, requestedIdentityKey as gc, HOST_CAPABILITY_PACKAGE_GROUPS as gi, packageRowsFromPnpmLock as gn, TargetCaptureReasonCode as go, verifiedLinearCommitReadback as gr, ScopeInterpretation as gs, canonicalProjection as gt, classifyCompletionClaim as h, certifyCheckpoint as ha, isStatefulAction as hc, GOAL_HOST_PACKAGES as hi, packageRowsFromActiveGraph as hn, SourceSpan as ho, revalidateGitPrestate as hr, QualificationStatus as hs, bindProofV2ToProjection as ht, projectCoreV2 as i, TaskIntent as ia, CERTIFICATE_VERSION as ic, legacyRecordsNeedingReview as ii, auditedDefaultWorkdirProvider as in, GuardIntegrity as io, GitEffectRunner as ir, partialFailureOf as is, ProofKind as it, V4SessionLike as j, GoalActivationState as ja, bindExecutableIdentity as ji, DesktopTargetGraph as jn, BoundedSource as jo, evidenceFromPersistedToolResult as jr, isExplanationScope as js, validateProofManifestV2 as jt, SESSION_EVENT_ENVELOPE_INVALID as k, BoundaryQualification as ka, HostProfileKind as ki, DESKTOP_RUNTIME_PACKAGE_NAME as kn, ReleaseOperation as ko, ToolResultInput as kr, introducesActionClause as ks, sessionQueryV2 as kt, CurrentActionBasis as l, ParsedConfirmation as la, STOP_PROTOCOL_VERSION_V2 as lc, AuditedExecutable as li, evaluateConfiguredHostLock as ln, GuardProjection as lo, commitIndexSnapshotDigest as lr, Executee as ls, ProofObligation as lt, assessmentOutcomePredicate as m, bindingIndividuallyAccepted as ma, boundedArtifactChoiceMatches as mc, ExecutableIdentityBinding as mi, inspectTargetHostGraph as mn, PersistenceAuthorization as mo, parseGitCommandManifest as mr, QualificationReason as ms, bindProofToProjection as mt, RC020_RC1_HOST_PACKAGES as n, authorityCaptureCounts as na, ActionSpec as nc, applyUpgradeEligibility as ni, activeRendererModule as nn, GuardCheckpoint as no, GitCommandRejected as nr, capabilityConsequence as ns, PROOF_PROTOCOL_VERSION_V2 as nt, AssistantOutcomeObservation as o, classifyTaskIntent as oa, SEMANTIC_ACTIONS as oc, ACTIVE_HOST_COHORT_ID as oi, auditedHostImplementation as on, GuardItemKind as oo, GitPrestateEnvelope as or, removalIsPartiallyKnown as os, ProofKindV2 as ot, assessmentAction as p, RejectedBinding as pa, actionCompatible as pc, ExecutableIdentity as pi, inspectDesktopTargetGraph as pn, NeedsReviewReason as po, gitCommandMatchesTarget as pr, LEGACY_QUALIFICATION as ps, SessionQueryV2 as pt, recoveryDigest as q, DerivedEnvelope as qa, SUPPORTED_HOST_VERSIONS as qi, qualifyHostTrust as qn, DependencyStatus as qo, itemDiagnosis as qr, reportingHeadGoverns as qs, claimedBatchHasRealRootInput as qt, projectSessionCoreV2 as r, segmentAuthorityBlocks as ra, BOUNDED_ARTIFACT_TYPES as rc, deriveProjection as ri, auditedDefaultWorkdirHost as rn, GuardEvidence as ro, GitEffectExecution as rr, capabilityFactOf as rs, ProofHostSurface as rt, CONTROL_RECORD_PREFIX as s, classifyUserInteraction as sa, STATEFUL_ACTIONS as sc, ACTIVE_HOST_COHORT_IDS as si, combineHostPolicy as sn, GuardItemStatus as so, GitTargetIdentity as sr, AuthorityDisposition as ss, ProofManifest as st, RC020_RC2_HOST_PACKAGES as t, AuthorityKind as ta, ActionManifest as tc, PROTOCOL_V6_NOTICE as ti, TargetHostGraph as tn, GuardBoundary as to, GitCommandParseResult as tr, admissibleForRemoval as ts, PROOF_PROTOCOL_VERSION as tt, NO_PROGRESS_RECORD_PREFIX as u, isFrozenV042RebindResponse as ua, SUPPORTED_EVIDENCE_ADAPTERS as uc, BASE_HOST_PACKAGES as ui, hostLockContextFromComposedDump as un, HostStatus as uo, commitTreeSnapshotDigest as ur, ExecutionQualification as us, ProofObligationV2 as ut, decideTurnStopping as v, captureClause as va, requestedTargetMatchesResolved as vc, HostAuditProvenance as vi, prepareDesktopHostTrust as vn, TargetSource as vo, CanonicalCommandSurface as vr, clarifiedSpanOf as vs, createProofManifestV2 as vt, observeAssistantOutcome as w, extractOperation as wa, digestStrings as wc, HostCohortSelectionReason as wi, revalidateDesktopCoreLock as wn, WorkUnit as wo, parseShellCommand as wr, hasOrderedCoordination as ws, proofOperationMatches as wt, isWholeTaskCompletionClaim as x, environmentDefaultRepositoryTarget as xa, validateActionManifest as xc, HostCapabilityRequest as xi, resolveActiveProfileHostLock as xn, TargetValue as xo, canonicalArgvFromCommand as xr, clauseIsProtected as xs, proofDigestV2 as xt, decisionBoundaryKey as y, captureItem as ya, semanticActionFromCommand as yc, HostCapabilityEvaluation as yi, prepareTargetHostTrust as yn, TargetSourceKind as yo, ParsedShell as yr, clauseAsksOwnQuestion as ys, proofCapabilityReport as yt, RecoveryOptions as z, BindingActionClosure as za, selectHostCohort as zi, writeDesktopRuntimeReceipt as zn, rebindAttemptKey as zo, CertificationSupport as zr, maskCodeSpans as zs, ManifestIssue as zt };
+//#region src/domain/session-activation.d.ts
+type InitialActivation = "opt-in" | "always";
+interface SessionBirthIdentity {
+  id: string;
+  createdAt: number;
+  parentSession?: string;
+  isSeeded: boolean;
+  inheritedEventCount: number;
+  origin?: "subagent";
+  delegationDepth: number;
+}
+interface SessionActivationBinding {
+  schema: "dsh-session-activation/v1";
+  identity: SessionBirthIdentity;
+  initialMode: InitialActivation;
+  source: "fresh_creation" | "legacy_adoption" | "fork_inheritance";
+  provenanceSha256: string;
+  sha256: string;
+}
+type SessionActivationRead = {
+  status: "bound";
+  mode: InitialActivation;
+  binding: SessionActivationBinding;
+  key: string;
+} | {
+  status: "unavailable";
+  reasonCode: string;
+  key: string;
+};
+declare function activationCanonical(value: unknown): string;
+declare const activationDigest: (value: unknown) => string;
+/** Birth identity excludes preset, cwd, profile and host authority. */
+declare function sessionBirthIdentity(header: unknown, inheritedEventCount: unknown): SessionBirthIdentity;
+/** Parse JSON while rejecting duplicate keys, including escaped aliases. */
+declare function activationJson(text: string): unknown;
+declare function validateActivationBinding(value: unknown): SessionActivationBinding;
+//#endregion
+//#region src/domain/activation-bindings.d.ts
+declare function resolveActivationBindingsRoot(dshHome: string | undefined, osHome?: string): string;
+declare const activationBindingPath: (root: string, id: string) => string;
+declare function readActivationBinding(root: string, identity: SessionBirthIdentity, explicit?: InitialActivation): SessionActivationRead;
+declare function publicationBarrier(root: string, path: string, expected: SessionActivationBinding, platform?: NodeJS.Platform): string;
+declare function writeActivationBinding(root: string, identity: SessionBirthIdentity, mode: InitialActivation, source: SessionActivationBinding["source"], provenanceSha256: string): SessionActivationRead & {
+  created?: boolean;
+};
+interface ActivationMigrationEntry {
+  identity: SessionBirthIdentity;
+  mode: InitialActivation;
+  cohort: string;
+}
+interface ActivationMigrationReceipt {
+  schema: "dsh-activation-migration/v1";
+  entries: ActivationMigrationEntry[];
+  inputs: Record<string, string>;
+  sha256: string;
+}
+declare function createActivationMigrationReceipt(entries: ActivationMigrationEntry[], inputs: Record<string, string>): ActivationMigrationReceipt;
+declare function validateActivationMigrationReceipt(value: unknown): ActivationMigrationReceipt;
+declare function readActivationMigrationReceipt(path: string): ActivationMigrationReceipt;
+declare function adoptActivationReceipt(root: string, receipt: ActivationMigrationReceipt, verifyOnly?: boolean): {
+  status: "complete" | "partial";
+  entries: Array<{
+    id: string;
+    status: string;
+    reasonCode?: string;
+    created?: boolean;
+  }>;
+};
+/** Fresh creation is a qualified public lifecycle contract, not an issuer token. */
+declare function resolveSessionActivation(root: string, identity: SessionBirthIdentity, requested: {
+  activation: InitialActivation;
+  activationSource?: "default" | "explicit";
+}, source: string | undefined, qualifiedPublicIdentity: boolean): SessionActivationRead;
+/** Portable owning tests exercise the platform branch; not host qualification. */
+declare const __activationBindingInternals: {
+  publicationBarrier: typeof publicationBarrier;
+};
+//#endregion
+//#region src/domain/activation-migration.d.ts
+/** Only the public persistence service is consumed. No event bodies are emitted. */
+interface ActivationInventoryPersistence {
+  list(): Promise<readonly {
+    header: unknown;
+    revision: unknown;
+  }[]>;
+  open(id: never, access: "read"): Promise<{
+    header: unknown;
+    inheritedEventCount: unknown;
+    close(): Promise<void>;
+  }>;
+  stat(id: never): Promise<{
+    header: unknown;
+    revision: unknown;
+  } | undefined>;
+}
+declare function inspectActivationInventory(persistence: ActivationInventoryPersistence): Promise<SessionBirthIdentity[]>;
+interface ActivationPriorModes {
+  schema: "dsh-activation-prior-modes/v1";
+  previousPackage: {
+    name: "dsh-completion-guard";
+    version: string;
+    sha256: string;
+  };
+  /** Exact source readback digest. An operator must establish these old modes before upgrade. */
+  sourceSha256: string;
+  cohorts: Array<{
+    name: string;
+    mode: InitialActivation;
+    sessionIds?: string[];
+  }>;
+}
+declare function prepareActivationMigration(inventory: SessionBirthIdentity[], prior: ActivationPriorModes, universeIds?: string[]): {
+  status: "ready" | "pending";
+  missing: string[];
+  receipt?: ActivationMigrationReceipt;
+};
+declare function verifyMigrationInventory(receipt: ActivationMigrationReceipt, inventory: SessionBirthIdentity[]): void;
+//#endregion
+//#region src/domain/private-storage-guard.d.ts
+/** Bounded protection for the official file/shell tool surface. This is not
+* a sandbox for arbitrary executables or hostile same-owner plugins. */
+declare function privateStorageToolDenial(name: string, args: unknown, cwd: string, roots: readonly string[]): string | undefined;
+//#endregion
+//#region src/domain/activation-selection.d.ts
+type InventoryRow = {
+  id: string;
+  headerSha256: string;
+  revisionSha256: string;
+} & ({
+  status: "readable";
+  identity: SessionBirthIdentity;
+} | {
+  status: "unsupported";
+  reason: "session_format_unsupported";
+});
+interface ActivationInventorySnapshot {
+  schema: "dsh-activation-inventory/v1";
+  rows: InventoryRow[];
+  sha256: string;
+}
+interface ActivationMigrationSelection {
+  schema: "dsh-activation-selection/v1";
+  inventorySha256: string;
+  include: string[];
+  sha256: string;
+}
+/** Only a physical runtime's official error-class predicate may classify open
+* refusals. Unknown errors/list/stat failures abort; they are never exclusions. */
+declare function scanActivationInventory(persistence: ActivationInventoryPersistence, isFormatUnsupported: (error: unknown) => boolean): Promise<ActivationInventorySnapshot>;
+declare function validateActivationInventorySnapshot(value: unknown): ActivationInventorySnapshot;
+declare function validateActivationSelection(value: unknown): ActivationMigrationSelection;
+declare function selectedActivationInventory(snapshotValue: unknown, selectionValue: unknown): SessionBirthIdentity[];
+declare function createActivationSelection(snapshotValue: unknown, include: unknown): ActivationMigrationSelection;
+declare function activationSelectionPending(snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection): Array<{
+  id: string;
+  reason: "session_format_unsupported" | "not_selected";
+}>;
+declare function prepareSelectedActivationMigration(snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection, prior: ActivationPriorModes): ReturnType<typeof prepareActivationMigration>;
+declare function isSelectedActivationReceipt(receipt: ActivationMigrationReceipt): boolean;
+declare function verifySelectedMigrationInventory(receipt: ActivationMigrationReceipt, snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection): void;
+//#endregion
+export { classifyCompletionClaim as $, RejectedBinding as $a, actionCompatible as $c, ExecutableIdentity as $i, packageRowsFromActiveGraph as $n, NeedsReviewReason as $o, gitCommandMatchesTarget as $r, LEGACY_QUALIFICATION as $s, bindProofV2ToProjection as $t, InitialActivation as A, MIN_SUPPORTED_HOST_VERSION as Aa, presentExplanationHead as Ac, capabilityRemedyPhrase as Ai, LifecyclePhase as An, DeriveConfig as Ao, acquireHostTrust as Ar, CapabilityRemedy as As, openItems as At, RC020_RC1_HOST_PACKAGES as B, AuthorityBlockKind as Ba, ACTION_MANIFEST_VERSION as Bc, PROTOCOL_V5_NOTICE as Bi, activeRendererModule as Bn, GoalRef as Bo, GitCommandManifest as Br, actionHasCertificationPath as Bs, PROOF_PROTOCOL_VERSION_V2 as Bt, createActivationMigrationReceipt as C, evaluateToolSurfaceCapability as Ca, kindOfScope as Cc, shellReadbackOutcome as Ci, ManifestIssue as Cn, AssetInterpretationFact as Co, readDesktopDependency as Cr, proposeRebindOutcome as Cs, RecoveryOptions as Ct, resolveSessionActivation as D, HostVersionDecision as Da, namedActions as Dc, Repairability as Di, FIRST_STEP_GUIDANCE as Dn, BoundaryQualificationKind as Do, HostTrustAcquisitionOptions as Dr, replayRebindResult as Ds, carriesCleanupCondition as Dt, resolveActivationBindingsRoot as E, HOST_VALIDATED_VERSIONS as Ea, maskQuotedSpans as Ec, DiagnosisNextAction as Ei, ClaimedMessage as En, BoundaryDisposition as Eo, HostRebindTrust as Er, rebindResponse as Es, V6_ORDINARY_COMPLETION_RULE_SHORT as Et, activationDigest as F, evaluateMinimumHostVersion as Fa, semanticActionOfScope as Fc, relevantEvidence as Fi, previewFirstStepInjection as Fn, EvidenceOutcome as Fo, registryArchiveModules as Fr, OperationAttribution as Fs, PROOF_CAPABILITY_MATRIX as Ft, CONTROL_RECORD_PREFIX as G, UserInteractionKind as Ga, CERTIFICATE_VERSION_V2 as Gc, rootLocatorFlavor as Gi, combineHostPolicy as Gn, GuardItem as Go, GitPrestateCheck as Gr, removalIsComplete as Gs, ProofManifest as Gt, projectCoreV2 as H, authorityCaptureCounts as Ha, ActionSpec as Hc, applyUpgradeEligibility as Hi, auditedDefaultWorkdirProvider as Hn, GuardCheckpoint as Ho, GitCommandRejected as Hr, capabilityConsequence as Hs, ProofKind as Ht, activationJson as I, parseHostVersion as Ia, splitTextFragments as Ic, CAPTURE_V042_NOTICE as Ii, ActiveProfileHostLock as In, EvidenceParseStatus as Io, GIT_COMMAND_MANIFEST_IDS as Ir, ProcessExitStatus as Is, PROOF_KINDS as It, NO_PROGRESS_RECORD_PREFIX as J, CONFIRM_LINE_PATTERN as Ja, STOP_PROTOCOL_VERSION as Jc, ACTIVE_HOST_LAUNCHER_VERSION as Ji, hostLockContextFromComposedDump as Jn, GuardOperation as Jo, LinearCommitReadback as Jr, DirectiveClass as Js, ProofObligationV2 as Jt, CompletionDisposition as K, classifyTaskIntent as Ka, SEMANTIC_ACTIONS as Kc, ACTIVE_HOST_COHORT_ID as Ki, evaluateActiveHostLock as Kn, GuardItemKind as Ko, GitPrestateEnvelope as Kr, removalIsPartiallyKnown as Ks, ProofManifestV2 as Kt, sessionBirthIdentity as L, satisfiesSupportedHostRange as La, statefulActionsOfScope as Lc, DEFAULT_DELEGATION_TOOL_NAMES as Li, AuditedPackageExpectation as Ln, EvidenceRole as Lo, GIT_COMMAND_TEMPLATES as Lr, ProcessFactSource as Ls, PROOF_KINDS_V2 as Lt, SessionActivationRead as M, SUPPORTED_HOST_RANGE as Ma, questionHeadsClause as Mc, evidenceAvailabilityReason as Mi, firstStepGuidance as Mn, DeriveScope as Mo, parseHostTrust as Mr, DeclaredOperationResult as Ms, recoveryTitle as Mt, SessionBirthIdentity as N, SUPPORTED_HOST_VERSIONS as Na, reportingHeadGoverns as Nc, itemDiagnosis as Ni, firstStepGuidanceV6 as Nn, DerivedEnvelope as No, qualifyHostTrust as Nr, DependencyStatus as Ns, renderRecoveryPacket as Nt, validateActivationMigrationReceipt as O, HostVersionStatus as Oa, opensConditionLead as Oc, TaskKind as Oi, FirstStepInjection as On, DeferAuthorization as Oo, HostTrustError as Or, CapabilityFact as Os, cleanupConditionFor as Ot, activationCanonical as P, compareHostVersions as Pa, restatedContentOf as Pc, nativeFileTwoRole as Pi, lifecyclePhase as Pn, EvidenceBinding as Po, registryArchiveFiles as Pr, DerivedProcessFacts as Ps, v6CurrentRootBoundaries as Pt, assessmentOutcomePredicate as Q, CheckpointResult as Qa, StatefulAction as Qc, EXPECTED_HOST_PACKAGES as Qi, inspectTargetHostGraph as Qn, NeedsReviewFact as Qo, executeRevalidatedGitEffect as Qr, InterpretOptions as Qs, bindProofToProjection as Qt, validateActivationBinding as R, currentContractDigest as Ra, verbIsNegated as Rc, PROTOCOL_V3_NOTICE as Ri, HostProfileError as Rn, ExpectedTransition as Ro, GitAdapterAction as Rr, ProcessOutcomeReason as Rs, PROOF_MANIFEST_DOMAIN_V2 as Rt, adoptActivationReceipt as S, evaluateHostLock as Sa, itemHoldsExecutionAuthority as Sc, persistedToolResultStatus as Si, CommandSurfaceManifest as Sn, qualifyBoundary as So, readDesktopAppRuntime as Sr, proposeRebind as Ss, RecoveryCause as St, readActivationMigrationReceipt as T, selectHostCohort as Ta, maskCodeSpans as Tc, CertificationSupport as Ti, validateManifest as Tn, BindingActionClosure as To, writeDesktopRuntimeReceipt as Tr, rebindAttemptKey as Ts, V6_ORDINARY_COMPLETION_RULE_COMPACT as Tt, supersedeItem as U, segmentAuthorityBlocks as Ua, BOUNDED_ARTIFACT_TYPES as Uc, deriveProjection as Ui, auditedForegroundRenderers as Un, GuardEvidence as Uo, GitEffectExecution as Ur, capabilityFactOf as Us, ProofKindCapability as Ut, projectSessionCoreV2 as V, AuthorityKind as Va, ActionManifest as Vc, PROTOCOL_V6_NOTICE as Vi, auditedDefaultWorkdirHost as Vn, GuardBoundary as Vo, GitCommandParseResult as Vr, admissibleForRemoval as Vs, ProofHostSurface as Vt, AssistantOutcomeObservation as W, TaskIntent as Wa, CERTIFICATE_VERSION as Wc, legacyRecordsNeedingReview as Wi, auditedHostImplementation as Wn, GuardIntegrity as Wo, GitEffectRunner as Wr, partialFailureOf as Ws, ProofKindV2 as Wt, TurnStoppingDecision as X, isFrozenV042RebindResponse as Xa, SUPPORTED_EVIDENCE_ADAPTERS as Xc, BASE_HOST_PACKAGES as Xi, injectActiveProfileHostLock as Xn, HostStatus as Xo, commitTreeSnapshotDigest as Xr, ExecutionQualification as Xs, SessionQuery as Xt, NO_PROGRESS_TURNS_BEFORE_STOP as Y, ParsedConfirmation as Ya, STOP_PROTOCOL_VERSION_V2 as Yc, AuditedExecutable as Yi, hostLockRowsFromComposedDump as Yn, GuardProjection as Yo, commitIndexSnapshotDigest as Yr, Executee as Ys, ProofSurface as Yt, assessmentAction as Z, parseConfirmationMessage as Za, SemanticAction as Zc, DEFAULT_HOST_LOCK as Zi, inspectDesktopTargetGraph as Zn, MessageCoverage as Zo, createGitPrestateEnvelope as Zr, GRANTED_QUALIFICATION as Zs, SessionQueryV2 as Zt, verifyMigrationInventory as _, bindExecutableIdentity as _a, isExplanationScope as _c, evidenceFromPersistedToolResult as _i, bindingSatisfies as _n, GoalActivationState as _o, hasDesktopImporterState as _r, BoundedSource as _s, CLEANUP_CONDITION_RULE as _t, isSelectedActivationReceipt as a, HostCapabilityEvaluation as aa, clauseAsksOwnQuestion as ac, ParsedShell as ai, semanticActionFromCommand as al, proofDigestV2 as an, captureItem as ao, resolveActiveProfileHostLock as ar, TargetSourceKind as as, isWholeTaskCompletionClaim as at, __activationBindingInternals as b, evaluateGraphDerivedHostLock as ba, isQuestionScopeNeedingReview as bc, isDeterministicCheck as bi, isVerifyingCapability as bn, effectuateBoundary as bo, readAsarFile as br, RebindProposal as bs, DEFAULT_RECOVERY_CHAR_BUDGET as bt, selectedActivationInventory as c, HostCohort as ca, explanationHasActionResidue as cc, isRunExecutable as ci, validateActionTarget as cl, proofOperationMatches as cn, extractArtifactPaths as co, revalidateDesktopCoreLock as cr, VerificationContract as cs, observeAssistantOutcome as ct, verifySelectedMigrationInventory as d, HostLockContext as da, hasQuestionScope as dc, goalCompletionDenial as di, normalizeClause as dl, scopeCoverageDigest as dn, isInformationalMessage as do, DESKTOP_IDENTITY_FACTS as dr, createProjection as ds, v6TestPredicate as dt, ExecutableIdentityBinding as ea, QualificationReason as ec, parseGitCommandManifest as ei, boundedArtifactChoiceMatches as el, canonicalProjection as en, bindingIndividuallyAccepted as eo, packageRowsFromPnpmLock as er, PersistenceAuthorization as es, currentActionBases as et, privateStorageToolDenial as f, HostLockEvaluation as fa, hasWorkPredicate as fc, hasCurrentCertificate as fi, sanitizeClauseText as fl, sessionQuery as fn, segmentClauses as fo, DESKTOP_PROFILE_PACKAGE_NAME as fr, PackageRow as fs, SESSION_API_UNSUPPORTED as ft, prepareActivationMigration as g, HostToolSurface as ga, isExecutableItem as gc, ToolSubject as gi, EvidenceFacetCoverage as gn, BoundaryRequest as go, auditDesktopInstalledImplementation as gr, ReleaseSettlement as gs, snapshotSessionEvents as gt, inspectActivationInventory as h, HostProfileKind as ha, introducesActionClause as hc, ToolResultInput as hi, validateProofManifestV2 as hn, BoundaryQualification as ho, DesktopTargetGraph as hr, ReleaseOperation as hs, V4SessionLike as ht, createActivationSelection as i, HostAuditProvenance as ia, clarifiedSpanOf as ic, CanonicalCommandSurface as ii, requestedTargetMatchesResolved as il, proofDigest as in, captureClause as io, readActiveHostGraph as ir, TargetSource as is, isRootPauseRequest as it, SessionActivationBinding as j, ParsedHostVersion as ja, qualificationOfClause as jc, deriveItemDiagnosis as ji, claimedBatchHasRealRootInput as jn, DeriveResult as jo, hostTrustDigest as jr, DEPENDENCY_FREE_ONLY_CONDITION as js, recoveryDigest as jt, writeActivationBinding as k, LATEST_TESTED_HOST_VERSION as ka, opensWithDirective as kc, UnifiedItemDiagnosis as ki, FirstStepPreviewInput as kn, DelegationRef as ko, HostTrustedPackage as kr, CapabilityGap as ks, closingHint as kt, validateActivationInventorySnapshot as l, HostCohortSelection as la, governedClauseRestrictsExecution as lc, parsePwshCommand as li, canonicalizePath as ll, proofV2Rejection as ln, extractMethod as lo, verifyComposedHostLockDump as lr, WaitAuthorization as ls, progressFingerprint as lt, ActivationPriorModes as m, HostPlatform as ma, interpretMessage as mc, ToolCallInput as mi, sha256 as ml, validateProofManifest as mn, BoundaryEffectuation as mo, DesktopAppRuntime as mr, ReleaseObservedIdentity as ms, SessionApiError as mt, ActivationMigrationSelection as n, HOST_CAPABILITY_PACKAGE_GROUPS as na, ScopeInterpretation as nc, verifiedLinearCommitReadback as ni, requestedIdentityKey as nl, createProofManifestV2 as nn, CaptureScope as no, prepareDesktopHostTrust as nr, TargetCaptureReasonCode as ns, decideTurnStopping as nt, prepareSelectedActivationMigration as o, HostCapabilityId as oa, clauseIsGoverned as oc, ShellParseStatus as oi, semanticActionFromText as ol, proofEvidenceConstraints as on, classifyClause as oo, resolveDesktopProfileHostLock as or, TargetTuple as os, latestAssistantText as ot, ActivationInventoryPersistence as p, HostLockStatus as pa, interpretClause as pc, NATIVE_GIT_ROOT_PARENT_OID as pi, sanitizeUrl as pl, sessionQueryV2 as pn, BOUNDARY_RECORD_PREFIX as po, DESKTOP_RUNTIME_PACKAGE_NAME as pr, ReleaseGateDecision as ps, SESSION_EVENT_ENVELOPE_INVALID as pt, CurrentActionBasis as q, classifyUserInteraction as qa, STATEFUL_ACTIONS as qc, ACTIVE_HOST_COHORT_IDS as qi, evaluateConfiguredHostLock as qn, GuardItemStatus as qo, GitTargetIdentity as qr, AuthorityDisposition as qs, ProofObligation as qt, activationSelectionPending as r, HOST_COHORTS as ra, actionVerbMatches as rc, CanonicalArgv as ri, requestedTargetAuthorizesMutation as rl, proofCapabilityReport as rn, ClauseSegment as ro, prepareTargetHostTrust as rr, TargetCaptureStatus as rs, decisionBoundaryKey as rt, scanActivationInventory as s, HostCapabilityRequest as sa, clauseIsProtected as sc, canonicalArgvFromCommand as si, validateActionManifest as sl, proofHostSurfacesOf as sn, environmentDefaultRepositoryTarget as so, resolveInstalledHostLock as sr, TargetValue as ss, latestRootInstruction as st, ActivationInventorySnapshot as t, GOAL_HOST_PACKAGES as ta, QualificationStatus as tc, revalidateGitPrestate as ti, isStatefulAction as tl, createProofManifest as tn, certifyCheckpoint as to, prepareActiveHostTrust as tr, SourceSpan as ts, decideTurnBoundary as tt, validateActivationSelection as u, HostCohortSelectionReason as ua, hasOrderedCoordination as uc, parseShellCommand as ui, digestStrings as ul, requiredSubjectsOf as un, extractOperation as uo, AsarIndex as ur, WorkUnit as us, testOutcomePredicate as ut, ActivationMigrationEntry as v, bindLiveGoalCapability as va, isInformationalFragment as vc, extractTextContent as vi, evidenceCoverage as vn, GoalBoundaryAccess as vo, memoizedAsarFile as vr, ProposeOutcome as vs, CLEANUP_CONDITION_RULE_COMPACT as vt, readActivationBinding as w, hostVersionFromPackages as wa, legacyQuestionReadingIsInformational as wc, withDurability as wi, OperationVerbEntry as wn, AssetObligation as wo, readDesktopTargetGraph as wr, proposeRebindV042 as ws, V6_ORDINARY_COMPLETION_RULE as wt, activationBindingPath as x, evaluateHostCapability as xa, isRestatement as xc, nativeGitParentOidVerified as xi, COMMAND_SURFACE_MANIFEST as xn, isCurrentAcceptedBoundary as xo, readAsarIndex as xr, confirmRebind as xs, MIN_RECOVERY_CHAR_BUDGET as xt, ActivationMigrationReceipt as y, evaluateExternalWaitCapability as ya, isOpenObligation as yc, extractToolSubject as yi, evidenceMatchesItem as yn, availableBoundaryQualifications as yo, memoizedAsarIndex as yr, RebindArgs as ys, CLEANUP_CONDITION_RULE_SHORT as yt, RC020_RC2_HOST_PACKAGES as z, AuthorityBlock as za, ACTION_MANIFEST as zc, PROTOCOL_V4_NOTICE as zi, TargetHostGraph as zn, ExternalOperation as zo, GitCommandAccepted as zr, RemovalOutcomeReport as zs, PROOF_PROTOCOL_VERSION as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as PROOF_KINDS_V2, $a as ExternalOperation, $i as AuthorityBlock, $n as GitCommandAccepted, $o as RemovalOutcomeReport, $r as PROTOCOL_V4_NOTICE, $s as ACTION_MANIFEST, $t as AuditedPackageExpectation, A as SessionApiError, Aa as BoundaryRequest, Ai as HostToolSurface, An as DesktopAppRuntime, Ao as ReleaseSettlement, Ar as ToolSubject, As as isExecutableItem, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as BoundaryDisposition, Bi as HOST_VALIDATED_VERSIONS, Bn as HostRebindTrust, Bo as rebindResponse, Br as DiagnosisNextAction, Bs as maskQuotedSpans, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as extractMethod, Cc as canonicalizePath, Ci as HostCohortSelection, Cn as resolveInstalledHostLock, Co as WaitAuthorization, Cr as parsePwshCommand, Cs as governedClauseRestrictsExecution, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BOUNDARY_RECORD_PREFIX, Dc as sanitizeUrl, Di as HostLockStatus, Dn as DESKTOP_IDENTITY_FACTS, Do as ReleaseGateDecision, Dr as NATIVE_GIT_ROOT_PARENT_OID, Ds as interpretClause, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as segmentClauses, Ec as sanitizeClauseText, Ei as HostLockEvaluation, En as AsarIndex, Eo as PackageRow, Er as hasCurrentCertificate, Es as hasWorkPredicate, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as isCurrentAcceptedBoundary, Fi as evaluateHostCapability, Fn as readAsarIndex, Fo as confirmRebind, Fr as nativeGitParentOidVerified, Fs as isRestatement, Ft as evidenceMatchesItem, G as closingHint, Ga as DeriveResult, Gi as ParsedHostVersion, Gn as hostTrustDigest, Go as DEPENDENCY_FREE_ONLY_CONDITION, Gr as deriveItemDiagnosis, Gs as qualificationOfClause, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeferAuthorization, Hi as HostVersionStatus, Hn as HostTrustError, Ho as CapabilityFact, Hr as TaskKind, Hs as opensConditionLead, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as qualifyBoundary, Ii as evaluateHostLock, In as readDesktopAppRuntime, Io as proposeRebind, Ir as persistedToolResultStatus, Is as itemHoldsExecutionAuthority, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceBinding, Ji as compareHostVersions, Jn as registryArchiveFiles, Jo as DerivedProcessFacts, Jr as nativeFileTwoRole, Js as restatedContentOf, Jt as firstStepGuidance, K as openItems, Ka as DeriveScope, Ki as SUPPORTED_HOST_RANGE, Kn as parseHostTrust, Ko as DeclaredOperationResult, Kr as evidenceAvailabilityReason, Ks as questionHeadsClause, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as AssetInterpretationFact, Li as evaluateToolSurfaceCapability, Ln as readDesktopDependency, Lo as proposeRebindOutcome, Lr as shellReadbackOutcome, Ls as kindOfScope, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as GoalBoundaryAccess, Mi as bindLiveGoalCapability, Mn as auditDesktopInstalledImplementation, Mo as ProposeOutcome, Mr as extractTextContent, Ms as isInformationalFragment, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as availableBoundaryQualifications, Ni as evaluateExternalWaitCapability, Nn as hasDesktopImporterState, No as RebindArgs, Nr as extractToolSubject, Ns as isOpenObligation, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as BoundaryEffectuation, Oc as sha256, Oi as HostPlatform, On as DESKTOP_PROFILE_PACKAGE_NAME, Oo as ReleaseObservedIdentity, Or as ToolCallInput, Os as interpretMessage, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as effectuateBoundary, Pi as evaluateGraphDerivedHostLock, Pn as readAsarFile, Po as RebindProposal, Pr as isDeterministicCheck, Ps as isQuestionScopeNeedingReview, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as ExpectedTransition, Qi as currentContractDigest, Qn as GitAdapterAction, Qo as ProcessOutcomeReason, Qr as PROTOCOL_V3_NOTICE, Qs as verbIsNegated, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as AssetObligation, Ri as hostVersionFromPackages, Rn as readDesktopTargetGraph, Ro as proposeRebindV042, Rr as withDurability, Rs as legacyQuestionReadingIsInformational, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as extractArtifactPaths, Sc as validateActionTarget, Si as HostCohort, Sn as resolveDesktopProfileHostLock, So as VerificationContract, Sr as isRunExecutable, Ss as explanationHasActionResidue, St as proofEvidenceConstraints, T as progressFingerprint, Ta as isInformationalMessage, Tc as normalizeClause, Ti as HostLockContext, Tn as verifyComposedHostLockDump, To as createProjection, Tr as goalCompletionDenial, Ts as hasQuestionScope, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DelegationRef, Ui as LATEST_TESTED_HOST_VERSION, Un as HostTrustedPackage, Uo as CapabilityGap, Ur as UnifiedItemDiagnosis, Us as opensWithDirective, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as BoundaryQualificationKind, Vi as HostVersionDecision, Vn as HostTrustAcquisitionOptions, Vo as replayRebindResult, Vr as Repairability, Vs as namedActions, Vt as validateManifest, W as cleanupConditionFor, Wa as DeriveConfig, Wi as MIN_SUPPORTED_HOST_VERSION, Wn as acquireHostTrust, Wo as CapabilityRemedy, Wr as capabilityRemedyPhrase, Ws as presentExplanationHead, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as EvidenceParseStatus, Xi as parseHostVersion, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as ProcessExitStatus, Xr as CAPTURE_V042_NOTICE, Xs as splitTextFragments, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as EvidenceOutcome, Yi as evaluateMinimumHostVersion, Yn as registryArchiveModules, Yo as OperationAttribution, Yr as relevantEvidence, Ys as semanticActionOfScope, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as EvidenceRole, Zi as satisfiesSupportedHostRange, Zn as GIT_COMMAND_TEMPLATES, Zo as ProcessFactSource, Zr as DEFAULT_DELEGATION_TOOL_NAMES, Zs as statefulActionsOfScope, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as ClauseSegment, _c as requestedTargetAuthorizesMutation, _i as HOST_COHORTS, _n as prepareActiveHostTrust, _o as TargetCaptureStatus, _r as CanonicalArgv, _s as actionVerbMatches, _t as createProofManifest, a as supersedeItem, aa as UserInteractionKind, ac as CERTIFICATE_VERSION_V2, ai as rootLocatorFlavor, an as auditedForegroundRenderers, ao as GuardItem, ar as GitPrestateCheck, as as removalIsComplete, at as ProofKindCapability, b as isRootPauseRequest, ba as classifyClause, bc as semanticActionFromText, bi as HostCapabilityId, bn as readActiveHostGraph, bo as TargetTuple, br as ShellParseStatus, bs as clauseIsGoverned, bt as proofDigest, c as CompletionDisposition, ca as CONFIRM_LINE_PATTERN, cc as STOP_PROTOCOL_VERSION, ci as ACTIVE_HOST_LAUNCHER_VERSION, cn as evaluateActiveHostLock, co as GuardOperation, cr as LinearCommitReadback, cs as DirectiveClass, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as parseConfirmationMessage, dc as SemanticAction, di as DEFAULT_HOST_LOCK, dn as hostLockRowsFromComposedDump, do as MessageCoverage, dr as createGitPrestateEnvelope, ds as GRANTED_QUALIFICATION, dt as ProofSurface, ea as AuthorityBlockKind, ec as ACTION_MANIFEST_VERSION, ei as PROTOCOL_V5_NOTICE, en as HostProfileError, eo as GoalRef, er as GitCommandManifest, es as actionHasCertificationPath, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as CheckpointResult, fc as StatefulAction, fi as EXPECTED_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as NeedsReviewFact, fr as executeRevalidatedGitEffect, fs as InterpretOptions, ft as SessionQuery, g as currentActionBases, ga as CaptureScope, gc as requestedIdentityKey, gi as HOST_CAPABILITY_PACKAGE_GROUPS, gn as packageRowsFromPnpmLock, go as TargetCaptureReasonCode, gr as verifiedLinearCommitReadback, gs as ScopeInterpretation, gt as canonicalProjection, h as classifyCompletionClaim, ha as certifyCheckpoint, hc as isStatefulAction, hi as GOAL_HOST_PACKAGES, hn as packageRowsFromActiveGraph, ho as SourceSpan, hr as revalidateGitPrestate, hs as QualificationStatus, ht as bindProofV2ToProjection, i as projectCoreV2, ia as TaskIntent, ic as CERTIFICATE_VERSION, ii as legacyRecordsNeedingReview, in as auditedDefaultWorkdirProvider, io as GuardIntegrity, ir as GitEffectRunner, is as partialFailureOf, it as ProofKind, j as V4SessionLike, ja as GoalActivationState, ji as bindExecutableIdentity, jn as DesktopTargetGraph, jo as BoundedSource, jr as evidenceFromPersistedToolResult, js as isExplanationScope, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as BoundaryQualification, ki as HostProfileKind, kn as DESKTOP_RUNTIME_PACKAGE_NAME, ko as ReleaseOperation, kr as ToolResultInput, ks as introducesActionClause, kt as sessionQueryV2, l as CurrentActionBasis, la as ParsedConfirmation, lc as STOP_PROTOCOL_VERSION_V2, li as AuditedExecutable, ln as evaluateConfiguredHostLock, lo as GuardProjection, lr as commitIndexSnapshotDigest, ls as Executee, lt as ProofObligation, m as assessmentOutcomePredicate, ma as bindingIndividuallyAccepted, mc as boundedArtifactChoiceMatches, mi as ExecutableIdentityBinding, mn as inspectTargetHostGraph, mo as PersistenceAuthorization, mr as parseGitCommandManifest, ms as QualificationReason, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as authorityCaptureCounts, nc as ActionSpec, ni as applyUpgradeEligibility, nn as activeRendererModule, no as GuardCheckpoint, nr as GitCommandRejected, ns as capabilityConsequence, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as classifyTaskIntent, oc as SEMANTIC_ACTIONS, oi as ACTIVE_HOST_COHORT_ID, on as auditedHostImplementation, oo as GuardItemKind, or as GitPrestateEnvelope, os as removalIsPartiallyKnown, ot as ProofKindV2, p as assessmentAction, pa as RejectedBinding, pc as actionCompatible, pi as ExecutableIdentity, pn as inspectDesktopTargetGraph, po as NeedsReviewReason, pr as gitCommandMatchesTarget, ps as LEGACY_QUALIFICATION, pt as SessionQueryV2, q as recoveryDigest, qa as DerivedEnvelope, qi as SUPPORTED_HOST_VERSIONS, qn as qualifyHostTrust, qo as DependencyStatus, qr as itemDiagnosis, qs as reportingHeadGoverns, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as segmentAuthorityBlocks, rc as BOUNDED_ARTIFACT_TYPES, ri as deriveProjection, rn as auditedDefaultWorkdirHost, ro as GuardEvidence, rr as GitEffectExecution, rs as capabilityFactOf, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as classifyUserInteraction, sc as STATEFUL_ACTIONS, si as ACTIVE_HOST_COHORT_IDS, sn as combineHostPolicy, so as GuardItemStatus, sr as GitTargetIdentity, ss as AuthorityDisposition, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as AuthorityKind, tc as ActionManifest, ti as PROTOCOL_V6_NOTICE, tn as TargetHostGraph, to as GuardBoundary, tr as GitCommandParseResult, ts as admissibleForRemoval, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as isFrozenV042RebindResponse, uc as SUPPORTED_EVIDENCE_ADAPTERS, ui as BASE_HOST_PACKAGES, un as hostLockContextFromComposedDump, uo as HostStatus, ur as commitTreeSnapshotDigest, us as ExecutionQualification, ut as ProofObligationV2, v as decideTurnStopping, va as captureClause, vc as requestedTargetMatchesResolved, vi as HostAuditProvenance, vn as prepareDesktopHostTrust, vo as TargetSource, vr as CanonicalCommandSurface, vs as clarifiedSpanOf, vt as createProofManifestV2, w as observeAssistantOutcome, wa as extractOperation, wc as digestStrings, wi as HostCohortSelectionReason, wn as revalidateDesktopCoreLock, wo as WorkUnit, wr as parseShellCommand, ws as hasOrderedCoordination, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as environmentDefaultRepositoryTarget, xc as validateActionManifest, xi as HostCapabilityRequest, xn as resolveActiveProfileHostLock, xo as TargetValue, xr as canonicalArgvFromCommand, xs as clauseIsProtected, xt as proofDigestV2, y as decisionBoundaryKey, ya as captureItem, yc as semanticActionFromCommand, yi as HostCapabilityEvaluation, yn as prepareTargetHostTrust, yo as TargetSourceKind, yr as ParsedShell, ys as clauseAsksOwnQuestion, yt as proofCapabilityReport, z as RecoveryOptions, za as BindingActionClosure, zi as selectHostCohort, zn as writeDesktopRuntimeReceipt, zo as rebindAttemptKey, zr as CertificationSupport, zs as maskCodeSpans, zt as ManifestIssue } from "./index-BmTaAEkJ.js";
+import { $ as classifyCompletionClaim, $a as RejectedBinding, $c as actionCompatible, $i as ExecutableIdentity, $n as packageRowsFromActiveGraph, $o as NeedsReviewReason, $r as gitCommandMatchesTarget, $s as LEGACY_QUALIFICATION, $t as bindProofV2ToProjection, A as InitialActivation, Aa as MIN_SUPPORTED_HOST_VERSION, Ac as presentExplanationHead, Ai as capabilityRemedyPhrase, An as LifecyclePhase, Ao as DeriveConfig, Ar as acquireHostTrust, As as CapabilityRemedy, At as openItems, B as RC020_RC1_HOST_PACKAGES, Ba as AuthorityBlockKind, Bc as ACTION_MANIFEST_VERSION, Bi as PROTOCOL_V5_NOTICE, Bn as activeRendererModule, Bo as GoalRef, Br as GitCommandManifest, Bs as actionHasCertificationPath, Bt as PROOF_PROTOCOL_VERSION_V2, C as createActivationMigrationReceipt, Ca as evaluateToolSurfaceCapability, Cc as kindOfScope, Ci as shellReadbackOutcome, Cn as ManifestIssue, Co as AssetInterpretationFact, Cr as readDesktopDependency, Cs as proposeRebindOutcome, Ct as RecoveryOptions, D as resolveSessionActivation, Da as HostVersionDecision, Dc as namedActions, Di as Repairability, Dn as FIRST_STEP_GUIDANCE, Do as BoundaryQualificationKind, Dr as HostTrustAcquisitionOptions, Ds as replayRebindResult, Dt as carriesCleanupCondition, E as resolveActivationBindingsRoot, Ea as HOST_VALIDATED_VERSIONS, Ec as maskQuotedSpans, Ei as DiagnosisNextAction, En as ClaimedMessage, Eo as BoundaryDisposition, Er as HostRebindTrust, Es as rebindResponse, Et as V6_ORDINARY_COMPLETION_RULE_SHORT, F as activationDigest, Fa as evaluateMinimumHostVersion, Fc as semanticActionOfScope, Fi as relevantEvidence, Fn as previewFirstStepInjection, Fo as EvidenceOutcome, Fr as registryArchiveModules, Fs as OperationAttribution, Ft as PROOF_CAPABILITY_MATRIX, G as CONTROL_RECORD_PREFIX, Ga as UserInteractionKind, Gc as CERTIFICATE_VERSION_V2, Gi as rootLocatorFlavor, Gn as combineHostPolicy, Go as GuardItem, Gr as GitPrestateCheck, Gs as removalIsComplete, Gt as ProofManifest, H as projectCoreV2, Ha as authorityCaptureCounts, Hc as ActionSpec, Hi as applyUpgradeEligibility, Hn as auditedDefaultWorkdirProvider, Ho as GuardCheckpoint, Hr as GitCommandRejected, Hs as capabilityConsequence, Ht as ProofKind, I as activationJson, Ia as parseHostVersion, Ic as splitTextFragments, Ii as CAPTURE_V042_NOTICE, In as ActiveProfileHostLock, Io as EvidenceParseStatus, Ir as GIT_COMMAND_MANIFEST_IDS, Is as ProcessExitStatus, It as PROOF_KINDS, J as NO_PROGRESS_RECORD_PREFIX, Ja as CONFIRM_LINE_PATTERN, Jc as STOP_PROTOCOL_VERSION, Ji as ACTIVE_HOST_LAUNCHER_VERSION, Jn as hostLockContextFromComposedDump, Jo as GuardOperation, Jr as LinearCommitReadback, Js as DirectiveClass, Jt as ProofObligationV2, K as CompletionDisposition, Ka as classifyTaskIntent, Kc as SEMANTIC_ACTIONS, Ki as ACTIVE_HOST_COHORT_ID, Kn as evaluateActiveHostLock, Ko as GuardItemKind, Kr as GitPrestateEnvelope, Ks as removalIsPartiallyKnown, Kt as ProofManifestV2, L as sessionBirthIdentity, La as satisfiesSupportedHostRange, Lc as statefulActionsOfScope, Li as DEFAULT_DELEGATION_TOOL_NAMES, Ln as AuditedPackageExpectation, Lo as EvidenceRole, Lr as GIT_COMMAND_TEMPLATES, Ls as ProcessFactSource, Lt as PROOF_KINDS_V2, M as SessionActivationRead, Ma as SUPPORTED_HOST_RANGE, Mc as questionHeadsClause, Mi as evidenceAvailabilityReason, Mn as firstStepGuidance, Mo as DeriveScope, Mr as parseHostTrust, Ms as DeclaredOperationResult, Mt as recoveryTitle, N as SessionBirthIdentity, Na as SUPPORTED_HOST_VERSIONS, Nc as reportingHeadGoverns, Ni as itemDiagnosis, Nn as firstStepGuidanceV6, No as DerivedEnvelope, Nr as qualifyHostTrust, Ns as DependencyStatus, Nt as renderRecoveryPacket, O as validateActivationMigrationReceipt, Oa as HostVersionStatus, Oc as opensConditionLead, Oi as TaskKind, On as FirstStepInjection, Oo as DeferAuthorization, Or as HostTrustError, Os as CapabilityFact, Ot as cleanupConditionFor, P as activationCanonical, Pa as compareHostVersions, Pc as restatedContentOf, Pi as nativeFileTwoRole, Pn as lifecyclePhase, Po as EvidenceBinding, Pr as registryArchiveFiles, Ps as DerivedProcessFacts, Pt as v6CurrentRootBoundaries, Q as assessmentOutcomePredicate, Qa as CheckpointResult, Qc as StatefulAction, Qi as EXPECTED_HOST_PACKAGES, Qn as inspectTargetHostGraph, Qo as NeedsReviewFact, Qr as executeRevalidatedGitEffect, Qs as InterpretOptions, Qt as bindProofToProjection, R as validateActivationBinding, Ra as currentContractDigest, Rc as verbIsNegated, Ri as PROTOCOL_V3_NOTICE, Rn as HostProfileError, Ro as ExpectedTransition, Rr as GitAdapterAction, Rs as ProcessOutcomeReason, Rt as PROOF_MANIFEST_DOMAIN_V2, S as adoptActivationReceipt, Sa as evaluateHostLock, Sc as itemHoldsExecutionAuthority, Si as persistedToolResultStatus, Sn as CommandSurfaceManifest, So as qualifyBoundary, Sr as readDesktopAppRuntime, Ss as proposeRebind, St as RecoveryCause, T as readActivationMigrationReceipt, Ta as selectHostCohort, Tc as maskCodeSpans, Ti as CertificationSupport, Tn as validateManifest, To as BindingActionClosure, Tr as writeDesktopRuntimeReceipt, Ts as rebindAttemptKey, Tt as V6_ORDINARY_COMPLETION_RULE_COMPACT, U as supersedeItem, Ua as segmentAuthorityBlocks, Uc as BOUNDED_ARTIFACT_TYPES, Ui as deriveProjection, Un as auditedForegroundRenderers, Uo as GuardEvidence, Ur as GitEffectExecution, Us as capabilityFactOf, Ut as ProofKindCapability, V as projectSessionCoreV2, Va as AuthorityKind, Vc as ActionManifest, Vi as PROTOCOL_V6_NOTICE, Vn as auditedDefaultWorkdirHost, Vo as GuardBoundary, Vr as GitCommandParseResult, Vs as admissibleForRemoval, Vt as ProofHostSurface, W as AssistantOutcomeObservation, Wa as TaskIntent, Wc as CERTIFICATE_VERSION, Wi as legacyRecordsNeedingReview, Wn as auditedHostImplementation, Wo as GuardIntegrity, Wr as GitEffectRunner, Ws as partialFailureOf, Wt as ProofKindV2, X as TurnStoppingDecision, Xa as isFrozenV042RebindResponse, Xc as SUPPORTED_EVIDENCE_ADAPTERS, Xi as BASE_HOST_PACKAGES, Xn as injectActiveProfileHostLock, Xo as HostStatus, Xr as commitTreeSnapshotDigest, Xs as ExecutionQualification, Xt as SessionQuery, Y as NO_PROGRESS_TURNS_BEFORE_STOP, Ya as ParsedConfirmation, Yc as STOP_PROTOCOL_VERSION_V2, Yi as AuditedExecutable, Yn as hostLockRowsFromComposedDump, Yo as GuardProjection, Yr as commitIndexSnapshotDigest, Ys as Executee, Yt as ProofSurface, Z as assessmentAction, Za as parseConfirmationMessage, Zc as SemanticAction, Zi as DEFAULT_HOST_LOCK, Zn as inspectDesktopTargetGraph, Zo as MessageCoverage, Zr as createGitPrestateEnvelope, Zs as GRANTED_QUALIFICATION, Zt as SessionQueryV2, _ as verifyMigrationInventory, _a as bindExecutableIdentity, _c as isExplanationScope, _i as evidenceFromPersistedToolResult, _n as bindingSatisfies, _o as GoalActivationState, _r as hasDesktopImporterState, _s as BoundedSource, _t as CLEANUP_CONDITION_RULE, a as isSelectedActivationReceipt, aa as HostCapabilityEvaluation, ac as clauseAsksOwnQuestion, ai as ParsedShell, al as semanticActionFromCommand, an as proofDigestV2, ao as captureItem, ar as resolveActiveProfileHostLock, as as TargetSourceKind, at as isWholeTaskCompletionClaim, b as __activationBindingInternals, ba as evaluateGraphDerivedHostLock, bc as isQuestionScopeNeedingReview, bi as isDeterministicCheck, bn as isVerifyingCapability, bo as effectuateBoundary, br as readAsarFile, bs as RebindProposal, bt as DEFAULT_RECOVERY_CHAR_BUDGET, c as selectedActivationInventory, ca as HostCohort, cc as explanationHasActionResidue, ci as isRunExecutable, cl as validateActionTarget, cn as proofOperationMatches, co as extractArtifactPaths, cr as revalidateDesktopCoreLock, cs as VerificationContract, ct as observeAssistantOutcome, d as verifySelectedMigrationInventory, da as HostLockContext, dc as hasQuestionScope, di as goalCompletionDenial, dl as normalizeClause, dn as scopeCoverageDigest, do as isInformationalMessage, dr as DESKTOP_IDENTITY_FACTS, ds as createProjection, dt as v6TestPredicate, ea as ExecutableIdentityBinding, ec as QualificationReason, ei as parseGitCommandManifest, el as boundedArtifactChoiceMatches, en as canonicalProjection, eo as bindingIndividuallyAccepted, er as packageRowsFromPnpmLock, es as PersistenceAuthorization, et as currentActionBases, f as privateStorageToolDenial, fa as HostLockEvaluation, fc as hasWorkPredicate, fi as hasCurrentCertificate, fl as sanitizeClauseText, fn as sessionQuery, fo as segmentClauses, fr as DESKTOP_PROFILE_PACKAGE_NAME, fs as PackageRow, ft as SESSION_API_UNSUPPORTED, g as prepareActivationMigration, ga as HostToolSurface, gc as isExecutableItem, gi as ToolSubject, gn as EvidenceFacetCoverage, go as BoundaryRequest, gr as auditDesktopInstalledImplementation, gs as ReleaseSettlement, gt as snapshotSessionEvents, h as inspectActivationInventory, ha as HostProfileKind, hc as introducesActionClause, hi as ToolResultInput, hn as validateProofManifestV2, ho as BoundaryQualification, hr as DesktopTargetGraph, hs as ReleaseOperation, ht as V4SessionLike, i as createActivationSelection, ia as HostAuditProvenance, ic as clarifiedSpanOf, ii as CanonicalCommandSurface, il as requestedTargetMatchesResolved, in as proofDigest, io as captureClause, ir as readActiveHostGraph, is as TargetSource, it as isRootPauseRequest, j as SessionActivationBinding, ja as ParsedHostVersion, jc as qualificationOfClause, ji as deriveItemDiagnosis, jn as claimedBatchHasRealRootInput, jo as DeriveResult, jr as hostTrustDigest, js as DEPENDENCY_FREE_ONLY_CONDITION, jt as recoveryDigest, k as writeActivationBinding, ka as LATEST_TESTED_HOST_VERSION, kc as opensWithDirective, ki as UnifiedItemDiagnosis, kn as FirstStepPreviewInput, ko as DelegationRef, kr as HostTrustedPackage, ks as CapabilityGap, kt as closingHint, l as validateActivationInventorySnapshot, la as HostCohortSelection, lc as governedClauseRestrictsExecution, li as parsePwshCommand, ll as canonicalizePath, ln as proofV2Rejection, lo as extractMethod, lr as verifyComposedHostLockDump, ls as WaitAuthorization, lt as progressFingerprint, m as ActivationPriorModes, ma as HostPlatform, mc as interpretMessage, mi as ToolCallInput, ml as sha256, mn as validateProofManifest, mo as BoundaryEffectuation, mr as DesktopAppRuntime, ms as ReleaseObservedIdentity, mt as SessionApiError, n as ActivationMigrationSelection, na as HOST_CAPABILITY_PACKAGE_GROUPS, nc as ScopeInterpretation, ni as verifiedLinearCommitReadback, nl as requestedIdentityKey, nn as createProofManifestV2, no as CaptureScope, nr as prepareDesktopHostTrust, ns as TargetCaptureReasonCode, nt as decideTurnStopping, o as prepareSelectedActivationMigration, oa as HostCapabilityId, oc as clauseIsGoverned, oi as ShellParseStatus, ol as semanticActionFromText, on as proofEvidenceConstraints, oo as classifyClause, or as resolveDesktopProfileHostLock, os as TargetTuple, ot as latestAssistantText, p as ActivationInventoryPersistence, pa as HostLockStatus, pc as interpretClause, pi as NATIVE_GIT_ROOT_PARENT_OID, pl as sanitizeUrl, pn as sessionQueryV2, po as BOUNDARY_RECORD_PREFIX, pr as DESKTOP_RUNTIME_PACKAGE_NAME, ps as ReleaseGateDecision, pt as SESSION_EVENT_ENVELOPE_INVALID, q as CurrentActionBasis, qa as classifyUserInteraction, qc as STATEFUL_ACTIONS, qi as ACTIVE_HOST_COHORT_IDS, qn as evaluateConfiguredHostLock, qo as GuardItemStatus, qr as GitTargetIdentity, qs as AuthorityDisposition, qt as ProofObligation, r as activationSelectionPending, ra as HOST_COHORTS, rc as actionVerbMatches, ri as CanonicalArgv, rl as requestedTargetAuthorizesMutation, rn as proofCapabilityReport, ro as ClauseSegment, rr as prepareTargetHostTrust, rs as TargetCaptureStatus, rt as decisionBoundaryKey, s as scanActivationInventory, sa as HostCapabilityRequest, sc as clauseIsProtected, si as canonicalArgvFromCommand, sl as validateActionManifest, sn as proofHostSurfacesOf, so as environmentDefaultRepositoryTarget, sr as resolveInstalledHostLock, ss as TargetValue, st as latestRootInstruction, t as ActivationInventorySnapshot, ta as GOAL_HOST_PACKAGES, tc as QualificationStatus, ti as revalidateGitPrestate, tl as isStatefulAction, tn as createProofManifest, to as certifyCheckpoint, tr as prepareActiveHostTrust, ts as SourceSpan, tt as decideTurnBoundary, u as validateActivationSelection, ua as HostCohortSelectionReason, uc as hasOrderedCoordination, ui as parseShellCommand, ul as digestStrings, un as requiredSubjectsOf, uo as extractOperation, ur as AsarIndex, us as WorkUnit, ut as testOutcomePredicate, v as ActivationMigrationEntry, va as bindLiveGoalCapability, vc as isInformationalFragment, vi as extractTextContent, vn as evidenceCoverage, vo as GoalBoundaryAccess, vr as memoizedAsarFile, vs as ProposeOutcome, vt as CLEANUP_CONDITION_RULE_COMPACT, w as readActivationBinding, wa as hostVersionFromPackages, wc as legacyQuestionReadingIsInformational, wi as withDurability, wn as OperationVerbEntry, wo as AssetObligation, wr as readDesktopTargetGraph, ws as proposeRebindV042, wt as V6_ORDINARY_COMPLETION_RULE, x as activationBindingPath, xa as evaluateHostCapability, xc as isRestatement, xi as nativeGitParentOidVerified, xn as COMMAND_SURFACE_MANIFEST, xo as isCurrentAcceptedBoundary, xr as readAsarIndex, xs as confirmRebind, xt as MIN_RECOVERY_CHAR_BUDGET, y as ActivationMigrationReceipt, ya as evaluateExternalWaitCapability, yc as isOpenObligation, yi as extractToolSubject, yn as evidenceMatchesItem, yo as availableBoundaryQualifications, yr as memoizedAsarIndex, ys as RebindArgs, yt as CLEANUP_CONDITION_RULE_SHORT, z as RC020_RC2_HOST_PACKAGES, za as AuthorityBlock, zc as ACTION_MANIFEST, zi as PROTOCOL_V4_NOTICE, zn as TargetHostGraph, zo as ExternalOperation, zr as GitCommandAccepted, zs as RemovalOutcomeReport, zt as PROOF_PROTOCOL_VERSION } from "./index-qKK3BJW1.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -127,7 +127,7 @@ interface MutationAuthorizationDecision {
 //#endregion
 //#region src/config.d.ts
 declare const Config: z<{
-  activation: string;
+  activation?: string;
   policy?: string;
   hostLockPackages?: PackageRow[];
   hostLockPlatform?: HostPlatform;
@@ -167,6 +167,8 @@ interface RuntimeExecutorSeams {
   hostLock?: HostLockEvaluation;
   /** Isolated acceptance override for the provider-invisible durable ledger. */
   privateLedgerRoot?: string;
+  /** Isolated storage location only; never bypasses mode resolution. */
+  activationBindingsRoot?: string;
   /**
   * Invoked once per full host-lock validation the runtime actually performs —
   * the attach-time validation and every security-sensitive entry's fresh
@@ -203,4 +205,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };