dsh-completion-guard 0.8.4 → 0.10.0

package/dist/{index-BmTaAEkJ.d.ts → index-rCqdIg5B.d.ts}

@@ -1308,6 +1308,48 @@ interface ExternalOperation {
   adapterId: string;
   status: "running" | "pending" | "completed" | "failed" | "unknown";
 }
+/**
+* One durable job lifecycle fact from the 0.2.1 host event pair
+* (`job/registered` + `job/settled`). Audit-only: a settlement records the
+* registry's terminal outcome for the execution, never resource release, a
+* file readback, or the completion of any user obligation. The `owner` is the
+* ORIGINAL owning session; a forked or resumed copy of the history never
+* transfers execution ownership.
+*/
+interface JobLifecycleRecord {
+  jobId: string;
+  owner: string;
+  kind: string;
+  label: string;
+  startedAt: number;
+  /** Absent for a healthy best-effort orphan settlement; audit only. */
+  registeredAtSeq?: number;
+  toolCall?: {
+    callId: string;
+    rootCallId: string;
+  };
+  settled?: {
+    settledAtSeq: number;
+    finishedAt: number;
+    detail?: string;
+    status: "completed" | "killed" | "failed";
+    cause: "producer" | "kill" | "teardown";
+    producerReported: boolean;
+  };
+}
+/**
+* One committed `working-directory/change` epoch. The immutable Session
+* header keeps the original project directory; each event replaces the
+* EFFECTIVE directory for directory-based operations from its sequence on.
+* Captured targets, paths and receipts keep the meaning of the epoch they
+* were bound in — a later change never re-interprets an older relative path.
+*/
+interface CwdEpoch {
+  /** Sequence of the committing `working-directory/change` event. */
+  seq: number;
+  /** Absolute effective directory from this sequence on. */
+  cwd: string;
+}
 interface GuardProjection {
   enabled: boolean;
   /** Explicit root /context-guard on adoption, never inferred from installation or always observation. */
@@ -1321,6 +1363,20 @@ interface GuardProjection {
   boundaries: GuardBoundary[];
   externalOperations: Map<string, ExternalOperation>;
   /**
+  * Durable job lifecycle facts keyed by jobId, present only in logs that
+  * carry 0.2.1 `job/registered`/`job/settled` events. Audit-only; they
+  * refine external-wait status and are never completion evidence.
+  */
+  jobLifecycle?: Map<string, JobLifecycleRecord>;
+  /**
+  * Committed `working-directory/change` epochs, present only in logs that
+  * carry at least one valid change. Absent means the immutable header cwd
+  * governed the whole log, which keeps pre-0.2.1 derivations byte-stable.
+  */
+  cwdEpochs?: CwdEpoch[];
+  /** Immutable scope header cwd for epoch receipt replay; absent in unchanged legacy logs. */
+  cwdOrigin?: string;
+  /**
   * 0.6.0 work units keyed by unit id, and the id of the unit currently
   * receiving captured work. Derived; present only after a v5 boundary.
   */
@@ -1737,8 +1793,8 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Version admission floor. Since 0.8.2 the public DSH support range is
-* `>=0.2.0-rc.2` with NO implied upper bound: every host version at or above
+/** Version admission floor. Since 0.10.0 the public DSH support range is
+* `>=0.2.1-rc.2` with NO implied upper bound: every host version at or above
 * this floor (including later RCs on any tuple, stable and future releases)
 * passes VERSION ADMISSION. The floor only rises when a future Guard release
 * actively adopts a newer DSH; the runtime never raises it from a remote
@@ -1746,12 +1802,13 @@ declare function currentContractDigest(projection: GuardProjection): string;
 * metadata ignored. Version admission is one gate of several — it never
 * claims native validation of a not-yet-tested host, and the graph/byte/
 * contract audits below still run on every admission. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.2";
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.1-rc.2";
 declare const SUPPORTED_HOST_RANGE: string;
 /** Versions with recorded first-hand host evidence. This is an EVIDENCE
 * ledger, NOT an admission whitelist: a missing row never refuses a
-* version-above-floor host. rc.1 keeps its historical row after the floor
-* moved to rc.2; the row records past evidence, not current admission. */
+* version-above-floor host. The 0.2.0 rows keep their historical standing
+* after the floor moved to 0.2.1-rc.2; each row records past evidence, not
+* current admission. */
 declare const HOST_VALIDATED_VERSIONS: readonly string[];
 /** Historical alias retained for evidence-list readers; the admission rule is
 * the floor above, never this list. */
@@ -1781,9 +1838,9 @@ interface HostVersionDecision {
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
 /** Version admission: at or above the floor by strict SemVer precedence
-* (prerelease-aware; build metadata ignored). `0.2.0-rc.1` and the whole
-* `0.1.7.x` line stay below the floor; `0.2.0-rc.2`, `0.2.0`,
-* later patch/minor RCs and releases all admit. */
+* (prerelease-aware; build metadata ignored). `0.2.0-rc.2` and `0.2.1-rc.1`
+* stay below the floor; `0.2.1-rc.2`, `0.2.1`, later patch/minor RCs and
+* releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
 //#region src/domain/host-lock.d.ts
@@ -1829,7 +1886,7 @@ interface HostCohort {
   capabilities: CapabilityRow[];
 }
 /** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.2";
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.1-rc.2";
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 /** Core-lock/v1 separates optional market identity from the rc.2 critical
 * graph. Historical cohorts live only in test data. Version ordering cannot
@@ -1838,7 +1895,7 @@ declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.2.0-rc.2). The cohort
+* Baseline fixture package identities (DSH 0.2.1-rc.2). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -2157,6 +2214,9 @@ interface ToolCallInput {
   arguments: string;
   /** Code-mode dispatch root; falls back to `callId` when the harness does not carry one. */
   rootCallId?: string;
+  /** Internal replay version: selected only from a committed effective cwd epoch.
+  * Never inferred from tool arguments or a future event. Absent preserves legacy bytes. */
+  cwdReadVersion?: "epoch/v1";
 }
 interface ToolResultInput {
   seq: number;
@@ -2585,6 +2645,16 @@ declare function acquireHostTrust(rows: readonly PackageRow[], fetcher?: typeof
 */
 declare const DESKTOP_PROFILE_PACKAGE_NAME = "dsh-profile-desktop";
 declare const DESKTOP_RUNTIME_PACKAGE_NAME = "@deepseek-ai/dsh-desktop-runtime";
+/**
+* CG-083-PERF03: operation-scoped asar reads. Within ONE host-lock
+* validation the same helpers used to re-open the archive and re-read the
+* header, metadata and module bytes several times; with a session, the index
+* and every entry's bytes are memoized on that operation's audit session —
+* they live and die with the validation and are never a cross-entry cache.
+* Without a session the original direct reads run unchanged.
+*/
+declare function memoizedAsarIndex(session: HostAuditSession | undefined, archivePath: string): AsarIndex;
+declare function memoizedAsarFile(session: HostAuditSession | undefined, archivePath: string, index: AsarIndex, entryPath: string): Buffer;
 interface AsarNode {
   files?: Record<string, AsarNode>;
   size?: number;
@@ -2607,6 +2677,8 @@ declare function readAsarIndex(archivePath: string): AsarIndex;
 */
 declare function readAsarFile(archivePath: string, index: AsarIndex, entryPath: string): Buffer;
 interface DesktopAppRuntime {
+  /** Independent Desktop distribution supplement, never registry authority. */
+  distributionQualificationSha256?: string;
   /** Absolute path of the app bundle archive the rows were read from. */
   asarRealpath: string;
   headerSha256: string;
@@ -2764,7 +2836,7 @@ declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: str
 * Match the scoped service's exact constructor to the audited active module,
 * rejecting another provider with the same public service interface/name.
 */
-declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown, providedSession?: HostAuditSession): Promise<boolean>;
+declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown, providedSession?: HostAuditSession, workingDirectoryProvider?: unknown): Promise<boolean>;
 interface TargetHostGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -3406,10 +3478,180 @@ declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
 //#endregion
 //#region src/domain/rc020-rc2-host.d.ts
 /** One source for verified registry identities and published executable bytes.
-* Bound to the published dsh-v0.2.0-rc.2 tarballs (upstream
-* 639ed015397290b3745d163aafe02ffee4aa3f84). Native platform acceptance
-* remains a separate, currently pending fact. The rc.1 rows remain available
-* in `rc020-rc1-host.ts` as historical evidence. */
+* Historical evidence for the 0.2.0-rc.2 floor era: bound to the published
+* dsh-v0.2.0-rc.2 tarballs (upstream 639ed015397290b3745d163aafe02ffee4aa3f84).
+* The active cohort reads `rc021-rc2-host.ts`; these rows back the
+* below-floor refusal tests and prior-certificate history only. */
 declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
 //#endregion
-export { PROOF_KINDS_V2 as $, ExternalOperation as $a, AuthorityBlock as $i, GitCommandAccepted as $n, RemovalOutcomeReport as $o, PROTOCOL_V4_NOTICE as $r, ACTION_MANIFEST as $s, AuditedPackageExpectation as $t, SessionApiError as A, BoundaryRequest as Aa, HostToolSurface as Ai, DesktopAppRuntime as An, ReleaseSettlement as Ao, ToolSubject as Ar, isExecutableItem as As, validateProofManifest as At, V6_ORDINARY_COMPLETION_RULE as B, BoundaryDisposition as Ba, HOST_VALIDATED_VERSIONS as Bi, HostRebindTrust as Bn, rebindResponse as Bo, DiagnosisNextAction as Br, maskQuotedSpans as Bs, OperationVerbEntry as Bt, latestRootInstruction as C, extractMethod as Ca, canonicalizePath as Cc, HostCohortSelection as Ci, resolveInstalledHostLock as Cn, WaitAuthorization as Co, parsePwshCommand as Cr, governedClauseRestrictsExecution as Cs, proofHostSurfacesOf as Ct, v6TestPredicate as D, BOUNDARY_RECORD_PREFIX as Da, sanitizeUrl as Dc, HostLockStatus as Di, DESKTOP_IDENTITY_FACTS as Dn, ReleaseGateDecision as Do, NATIVE_GIT_ROOT_PARENT_OID as Dr, interpretClause as Ds, scopeCoverageDigest as Dt, testOutcomePredicate as E, segmentClauses as Ea, sanitizeClauseText as Ec, HostLockEvaluation as Ei, AsarIndex as En, PackageRow as Eo, hasCurrentCertificate as Er, hasWorkPredicate as Es, requiredSubjectsOf as Et, CLEANUP_CONDITION_RULE_SHORT as F, isCurrentAcceptedBoundary as Fa, evaluateHostCapability as Fi, readAsarIndex as Fn, confirmRebind as Fo, nativeGitParentOidVerified as Fr, isRestatement as Fs, evidenceMatchesItem as Ft, closingHint as G, DeriveResult as Ga, ParsedHostVersion as Gi, hostTrustDigest as Gn, DEPENDENCY_FREE_ONLY_CONDITION as Go, deriveItemDiagnosis as Gr, qualificationOfClause as Gs, FirstStepPreviewInput as Gt, V6_ORDINARY_COMPLETION_RULE_SHORT as H, DeferAuthorization as Ha, HostVersionStatus as Hi, HostTrustError as Hn, CapabilityFact as Ho, TaskKind as Hr, opensConditionLead as Hs, ClaimedMessage as Ht, DEFAULT_RECOVERY_CHAR_BUDGET as I, qualifyBoundary as Ia, evaluateHostLock as Ii, readDesktopAppRuntime as In, proposeRebind as Io, persistedToolResultStatus as Ir, itemHoldsExecutionAuthority as Is, isVerifyingCapability as It, recoveryTitle as J, EvidenceBinding as Ja, compareHostVersions as Ji, registryArchiveFiles as Jn, DerivedProcessFacts as Jo, nativeFileTwoRole as Jr, restatedContentOf as Js, firstStepGuidance as Jt, openItems as K, DeriveScope as Ka, SUPPORTED_HOST_RANGE as Ki, parseHostTrust as Kn, DeclaredOperationResult as Ko, evidenceAvailabilityReason as Kr, questionHeadsClause as Ks, LifecyclePhase as Kt, MIN_RECOVERY_CHAR_BUDGET as L, AssetInterpretationFact as La, evaluateToolSurfaceCapability as Li, readDesktopDependency as Ln, proposeRebindOutcome as Lo, shellReadbackOutcome as Lr, kindOfScope as Ls, COMMAND_SURFACE_MANIFEST as Lt, snapshotSessionEvents as M, GoalBoundaryAccess as Ma, bindLiveGoalCapability as Mi, auditDesktopInstalledImplementation as Mn, ProposeOutcome as Mo, extractTextContent as Mr, isInformationalFragment as Ms, EvidenceFacetCoverage as Mt, CLEANUP_CONDITION_RULE as N, availableBoundaryQualifications as Na, evaluateExternalWaitCapability as Ni, hasDesktopImporterState as Nn, RebindArgs as No, extractToolSubject as Nr, isOpenObligation as Ns, bindingSatisfies as Nt, SESSION_API_UNSUPPORTED as O, BoundaryEffectuation as Oa, sha256 as Oc, HostPlatform as Oi, DESKTOP_PROFILE_PACKAGE_NAME as On, ReleaseObservedIdentity as Oo, ToolCallInput as Or, interpretMessage as Os, sessionQuery as Ot, CLEANUP_CONDITION_RULE_COMPACT as P, effectuateBoundary as Pa, evaluateGraphDerivedHostLock as Pi, readAsarFile as Pn, RebindProposal as Po, isDeterministicCheck as Pr, isQuestionScopeNeedingReview as Ps, evidenceCoverage as Pt, PROOF_KINDS as Q, ExpectedTransition as Qa, currentContractDigest as Qi, GitAdapterAction as Qn, ProcessOutcomeReason as Qo, PROTOCOL_V3_NOTICE as Qr, verbIsNegated as Qs, ActiveProfileHostLock as Qt, RecoveryCause as R, AssetObligation as Ra, hostVersionFromPackages as Ri, readDesktopTargetGraph as Rn, proposeRebindV042 as Ro, withDurability as Rr, legacyQuestionReadingIsInformational as Rs, CommandSurfaceManifest as Rt, latestAssistantText as S, extractArtifactPaths as Sa, validateActionTarget as Sc, HostCohort as Si, resolveDesktopProfileHostLock as Sn, VerificationContract as So, isRunExecutable as Sr, explanationHasActionResidue as Ss, proofEvidenceConstraints as St, progressFingerprint as T, isInformationalMessage as Ta, normalizeClause as Tc, HostLockContext as Ti, verifyComposedHostLockDump as Tn, createProjection as To, goalCompletionDenial as Tr, hasQuestionScope as Ts, proofV2Rejection as Tt, carriesCleanupCondition as U, DelegationRef as Ua, LATEST_TESTED_HOST_VERSION as Ui, HostTrustedPackage as Un, CapabilityGap as Uo, UnifiedItemDiagnosis as Ur, opensWithDirective as Us, FIRST_STEP_GUIDANCE as Ut, V6_ORDINARY_COMPLETION_RULE_COMPACT as V, BoundaryQualificationKind as Va, HostVersionDecision as Vi, HostTrustAcquisitionOptions as Vn, replayRebindResult as Vo, Repairability as Vr, namedActions as Vs, validateManifest as Vt, cleanupConditionFor as W, DeriveConfig as Wa, MIN_SUPPORTED_HOST_VERSION as Wi, acquireHostTrust as Wn, CapabilityRemedy as Wo, capabilityRemedyPhrase as Wr, presentExplanationHead as Ws, FirstStepInjection as Wt, v6CurrentRootBoundaries as X, EvidenceParseStatus as Xa, parseHostVersion as Xi, GIT_COMMAND_MANIFEST_IDS as Xn, ProcessExitStatus as Xo, CAPTURE_V042_NOTICE as Xr, splitTextFragments as Xs, lifecyclePhase as Xt, renderRecoveryPacket as Y, EvidenceOutcome as Ya, evaluateMinimumHostVersion as Yi, registryArchiveModules as Yn, OperationAttribution as Yo, relevantEvidence as Yr, semanticActionOfScope as Ys, firstStepGuidanceV6 as Yt, PROOF_CAPABILITY_MATRIX as Z, EvidenceRole as Za, satisfiesSupportedHostRange as Zi, GIT_COMMAND_TEMPLATES as Zn, ProcessFactSource as Zo, DEFAULT_DELEGATION_TOOL_NAMES as Zr, statefulActionsOfScope as Zs, previewFirstStepInjection as Zt, decideTurnBoundary as _, ClauseSegment as _a, requestedTargetAuthorizesMutation as _c, HOST_COHORTS as _i, prepareActiveHostTrust as _n, TargetCaptureStatus as _o, CanonicalArgv as _r, actionVerbMatches as _s, createProofManifest as _t, supersedeItem as a, UserInteractionKind as aa, CERTIFICATE_VERSION_V2 as ac, rootLocatorFlavor as ai, auditedForegroundRenderers as an, GuardItem as ao, GitPrestateCheck as ar, removalIsComplete as as, ProofKindCapability as at, isRootPauseRequest as b, classifyClause as ba, semanticActionFromText as bc, HostCapabilityId as bi, readActiveHostGraph as bn, TargetTuple as bo, ShellParseStatus as br, clauseIsGoverned as bs, proofDigest as bt, CompletionDisposition as c, CONFIRM_LINE_PATTERN as ca, STOP_PROTOCOL_VERSION as cc, ACTIVE_HOST_LAUNCHER_VERSION as ci, evaluateActiveHostLock as cn, GuardOperation as co, LinearCommitReadback as cr, DirectiveClass as cs, ProofManifestV2 as ct, NO_PROGRESS_TURNS_BEFORE_STOP as d, parseConfirmationMessage as da, SemanticAction as dc, DEFAULT_HOST_LOCK as di, hostLockRowsFromComposedDump as dn, MessageCoverage as do, createGitPrestateEnvelope as dr, GRANTED_QUALIFICATION as ds, ProofSurface as dt, AuthorityBlockKind as ea, ACTION_MANIFEST_VERSION as ec, PROTOCOL_V5_NOTICE as ei, HostProfileError as en, GoalRef as eo, GitCommandManifest as er, actionHasCertificationPath as es, PROOF_MANIFEST_DOMAIN_V2 as et, TurnStoppingDecision as f, CheckpointResult as fa, StatefulAction as fc, EXPECTED_HOST_PACKAGES as fi, injectActiveProfileHostLock as fn, NeedsReviewFact as fo, executeRevalidatedGitEffect as fr, InterpretOptions as fs, SessionQuery as ft, currentActionBases as g, CaptureScope as ga, requestedIdentityKey as gc, HOST_CAPABILITY_PACKAGE_GROUPS as gi, packageRowsFromPnpmLock as gn, TargetCaptureReasonCode as go, verifiedLinearCommitReadback as gr, ScopeInterpretation as gs, canonicalProjection as gt, classifyCompletionClaim as h, certifyCheckpoint as ha, isStatefulAction as hc, GOAL_HOST_PACKAGES as hi, packageRowsFromActiveGraph as hn, SourceSpan as ho, revalidateGitPrestate as hr, QualificationStatus as hs, bindProofV2ToProjection as ht, projectCoreV2 as i, TaskIntent as ia, CERTIFICATE_VERSION as ic, legacyRecordsNeedingReview as ii, auditedDefaultWorkdirProvider as in, GuardIntegrity as io, GitEffectRunner as ir, partialFailureOf as is, ProofKind as it, V4SessionLike as j, GoalActivationState as ja, bindExecutableIdentity as ji, DesktopTargetGraph as jn, BoundedSource as jo, evidenceFromPersistedToolResult as jr, isExplanationScope as js, validateProofManifestV2 as jt, SESSION_EVENT_ENVELOPE_INVALID as k, BoundaryQualification as ka, HostProfileKind as ki, DESKTOP_RUNTIME_PACKAGE_NAME as kn, ReleaseOperation as ko, ToolResultInput as kr, introducesActionClause as ks, sessionQueryV2 as kt, CurrentActionBasis as l, ParsedConfirmation as la, STOP_PROTOCOL_VERSION_V2 as lc, AuditedExecutable as li, evaluateConfiguredHostLock as ln, GuardProjection as lo, commitIndexSnapshotDigest as lr, Executee as ls, ProofObligation as lt, assessmentOutcomePredicate as m, bindingIndividuallyAccepted as ma, boundedArtifactChoiceMatches as mc, ExecutableIdentityBinding as mi, inspectTargetHostGraph as mn, PersistenceAuthorization as mo, parseGitCommandManifest as mr, QualificationReason as ms, bindProofToProjection as mt, RC020_RC1_HOST_PACKAGES as n, authorityCaptureCounts as na, ActionSpec as nc, applyUpgradeEligibility as ni, activeRendererModule as nn, GuardCheckpoint as no, GitCommandRejected as nr, capabilityConsequence as ns, PROOF_PROTOCOL_VERSION_V2 as nt, AssistantOutcomeObservation as o, classifyTaskIntent as oa, SEMANTIC_ACTIONS as oc, ACTIVE_HOST_COHORT_ID as oi, auditedHostImplementation as on, GuardItemKind as oo, GitPrestateEnvelope as or, removalIsPartiallyKnown as os, ProofKindV2 as ot, assessmentAction as p, RejectedBinding as pa, actionCompatible as pc, ExecutableIdentity as pi, inspectDesktopTargetGraph as pn, NeedsReviewReason as po, gitCommandMatchesTarget as pr, LEGACY_QUALIFICATION as ps, SessionQueryV2 as pt, recoveryDigest as q, DerivedEnvelope as qa, SUPPORTED_HOST_VERSIONS as qi, qualifyHostTrust as qn, DependencyStatus as qo, itemDiagnosis as qr, reportingHeadGoverns as qs, claimedBatchHasRealRootInput as qt, projectSessionCoreV2 as r, segmentAuthorityBlocks as ra, BOUNDED_ARTIFACT_TYPES as rc, deriveProjection as ri, auditedDefaultWorkdirHost as rn, GuardEvidence as ro, GitEffectExecution as rr, capabilityFactOf as rs, ProofHostSurface as rt, CONTROL_RECORD_PREFIX as s, classifyUserInteraction as sa, STATEFUL_ACTIONS as sc, ACTIVE_HOST_COHORT_IDS as si, combineHostPolicy as sn, GuardItemStatus as so, GitTargetIdentity as sr, AuthorityDisposition as ss, ProofManifest as st, RC020_RC2_HOST_PACKAGES as t, AuthorityKind as ta, ActionManifest as tc, PROTOCOL_V6_NOTICE as ti, TargetHostGraph as tn, GuardBoundary as to, GitCommandParseResult as tr, admissibleForRemoval as ts, PROOF_PROTOCOL_VERSION as tt, NO_PROGRESS_RECORD_PREFIX as u, isFrozenV042RebindResponse as ua, SUPPORTED_EVIDENCE_ADAPTERS as uc, BASE_HOST_PACKAGES as ui, hostLockContextFromComposedDump as un, HostStatus as uo, commitTreeSnapshotDigest as ur, ExecutionQualification as us, ProofObligationV2 as ut, decideTurnStopping as v, captureClause as va, requestedTargetMatchesResolved as vc, HostAuditProvenance as vi, prepareDesktopHostTrust as vn, TargetSource as vo, CanonicalCommandSurface as vr, clarifiedSpanOf as vs, createProofManifestV2 as vt, observeAssistantOutcome as w, extractOperation as wa, digestStrings as wc, HostCohortSelectionReason as wi, revalidateDesktopCoreLock as wn, WorkUnit as wo, parseShellCommand as wr, hasOrderedCoordination as ws, proofOperationMatches as wt, isWholeTaskCompletionClaim as x, environmentDefaultRepositoryTarget as xa, validateActionManifest as xc, HostCapabilityRequest as xi, resolveActiveProfileHostLock as xn, TargetValue as xo, canonicalArgvFromCommand as xr, clauseIsProtected as xs, proofDigestV2 as xt, decisionBoundaryKey as y, captureItem as ya, semanticActionFromCommand as yc, HostCapabilityEvaluation as yi, prepareTargetHostTrust as yn, TargetSourceKind as yo, ParsedShell as yr, clauseAsksOwnQuestion as ys, proofCapabilityReport as yt, RecoveryOptions as z, BindingActionClosure as za, selectHostCohort as zi, writeDesktopRuntimeReceipt as zn, rebindAttemptKey as zo, CertificationSupport as zr, maskCodeSpans as zs, ManifestIssue as zt };
+//#region src/domain/rc021-rc2-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.1-rc.2 tarballs (upstream
+* 687f282e8625c6b8d11ff58211a90524be2e4317; Cordis moved to 4.0.5 in the same
+* graph). Native platform acceptance remains a separate, currently pending
+* fact. The 0.2.0-rc.2 rows remain available in `rc020-rc2-host.ts` as
+* historical evidence. */
+declare const RC021_RC2_HOST_PACKAGES: PackageRow[];
+//#endregion
+//#region src/domain/session-activation.d.ts
+type InitialActivation = "opt-in" | "always";
+interface SessionBirthIdentity {
+  id: string;
+  createdAt: number;
+  parentSession?: string;
+  isSeeded: boolean;
+  inheritedEventCount: number;
+  origin?: "subagent";
+  delegationDepth: number;
+}
+interface SessionActivationBinding {
+  schema: "dsh-session-activation/v1";
+  identity: SessionBirthIdentity;
+  initialMode: InitialActivation;
+  source: "fresh_creation" | "legacy_adoption" | "fork_inheritance";
+  provenanceSha256: string;
+  sha256: string;
+}
+type SessionActivationRead = {
+  status: "bound";
+  mode: InitialActivation;
+  binding: SessionActivationBinding;
+  key: string;
+} | {
+  status: "unavailable";
+  reasonCode: string;
+  key: string;
+};
+declare function activationCanonical(value: unknown): string;
+declare const activationDigest: (value: unknown) => string;
+/** Birth identity excludes preset, cwd, profile and host authority. */
+declare function sessionBirthIdentity(header: unknown, inheritedEventCount: unknown): SessionBirthIdentity;
+/** Parse JSON while rejecting duplicate keys, including escaped aliases. */
+declare function activationJson(text: string): unknown;
+declare function validateActivationBinding(value: unknown): SessionActivationBinding;
+//#endregion
+//#region src/domain/activation-bindings.d.ts
+declare function resolveActivationBindingsRoot(dshHome: string | undefined, osHome?: string): string;
+declare const activationBindingPath: (root: string, id: string) => string;
+declare function readActivationBinding(root: string, identity: SessionBirthIdentity, explicit?: InitialActivation): SessionActivationRead;
+declare function publicationBarrier(root: string, path: string, expected: SessionActivationBinding, platform?: NodeJS.Platform): string;
+declare function writeActivationBinding(root: string, identity: SessionBirthIdentity, mode: InitialActivation, source: SessionActivationBinding["source"], provenanceSha256: string): SessionActivationRead & {
+  created?: boolean;
+};
+interface ActivationMigrationEntry {
+  identity: SessionBirthIdentity;
+  mode: InitialActivation;
+  cohort: string;
+}
+interface ActivationMigrationReceipt {
+  schema: "dsh-activation-migration/v1";
+  entries: ActivationMigrationEntry[];
+  inputs: Record<string, string>;
+  sha256: string;
+}
+declare function createActivationMigrationReceipt(entries: ActivationMigrationEntry[], inputs: Record<string, string>): ActivationMigrationReceipt;
+declare function validateActivationMigrationReceipt(value: unknown): ActivationMigrationReceipt;
+declare function readActivationMigrationReceipt(path: string): ActivationMigrationReceipt;
+declare function adoptActivationReceipt(root: string, receipt: ActivationMigrationReceipt, verifyOnly?: boolean): {
+  status: "complete" | "partial";
+  entries: Array<{
+    id: string;
+    status: string;
+    reasonCode?: string;
+    created?: boolean;
+  }>;
+};
+/** Fresh creation is a qualified public lifecycle contract, not an issuer token. */
+declare function resolveSessionActivation(root: string, identity: SessionBirthIdentity, requested: {
+  activation: InitialActivation;
+  activationSource?: "default" | "explicit";
+}, source: string | undefined, qualifiedPublicIdentity: boolean): SessionActivationRead;
+/** Portable owning tests exercise the platform branch; not host qualification. */
+declare const __activationBindingInternals: {
+  publicationBarrier: typeof publicationBarrier;
+};
+//#endregion
+//#region src/domain/activation-migration.d.ts
+/** Only the public persistence service is consumed. No event bodies are emitted. */
+interface ActivationInventoryPersistence {
+  list(): Promise<readonly {
+    header: unknown;
+    revision: unknown;
+  }[]>;
+  open(id: never, access: "read"): Promise<{
+    header: unknown;
+    inheritedEventCount: unknown;
+    close(): Promise<void>;
+  }>;
+  stat(id: never): Promise<{
+    header: unknown;
+    revision: unknown;
+  } | undefined>;
+}
+declare function inspectActivationInventory(persistence: ActivationInventoryPersistence): Promise<SessionBirthIdentity[]>;
+interface ActivationPriorModes {
+  schema: "dsh-activation-prior-modes/v1";
+  previousPackage: {
+    name: "dsh-completion-guard";
+    version: string;
+    sha256: string;
+  };
+  /** Exact source readback digest. An operator must establish these old modes before upgrade. */
+  sourceSha256: string;
+  cohorts: Array<{
+    name: string;
+    mode: InitialActivation;
+    sessionIds?: string[];
+  }>;
+}
+declare function prepareActivationMigration(inventory: SessionBirthIdentity[], prior: ActivationPriorModes, universeIds?: string[]): {
+  status: "ready" | "pending";
+  missing: string[];
+  receipt?: ActivationMigrationReceipt;
+};
+declare function verifyMigrationInventory(receipt: ActivationMigrationReceipt, inventory: SessionBirthIdentity[]): void;
+//#endregion
+//#region src/domain/private-storage-guard.d.ts
+/** Bounded protection for the official file/shell tool surface. This is not
+* a sandbox for arbitrary executables or hostile same-owner plugins. */
+declare function privateStorageToolDenial(name: string, args: unknown, cwd: string, roots: readonly string[]): string | undefined;
+//#endregion
+//#region src/domain/activation-selection.d.ts
+type InventoryRow = {
+  id: string;
+  headerSha256: string;
+  revisionSha256: string;
+} & ({
+  status: "readable";
+  identity: SessionBirthIdentity;
+} | {
+  status: "unsupported";
+  reason: "session_format_unsupported";
+});
+interface ActivationInventorySnapshot {
+  schema: "dsh-activation-inventory/v1";
+  rows: InventoryRow[];
+  sha256: string;
+}
+interface ActivationMigrationSelection {
+  schema: "dsh-activation-selection/v1";
+  inventorySha256: string;
+  include: string[];
+  sha256: string;
+}
+/** Only a physical runtime's official error-class predicate may classify open
+* refusals. Unknown errors/list/stat failures abort; they are never exclusions. */
+declare function scanActivationInventory(persistence: ActivationInventoryPersistence, isFormatUnsupported: (error: unknown) => boolean): Promise<ActivationInventorySnapshot>;
+declare function validateActivationInventorySnapshot(value: unknown): ActivationInventorySnapshot;
+declare function validateActivationSelection(value: unknown): ActivationMigrationSelection;
+declare function selectedActivationInventory(snapshotValue: unknown, selectionValue: unknown): SessionBirthIdentity[];
+declare function createActivationSelection(snapshotValue: unknown, include: unknown): ActivationMigrationSelection;
+declare function activationSelectionPending(snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection): Array<{
+  id: string;
+  reason: "session_format_unsupported" | "not_selected";
+}>;
+declare function prepareSelectedActivationMigration(snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection, prior: ActivationPriorModes): ReturnType<typeof prepareActivationMigration>;
+declare function isSelectedActivationReceipt(receipt: ActivationMigrationReceipt): boolean;
+declare function verifySelectedMigrationInventory(receipt: ActivationMigrationReceipt, snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection): void;
+//#endregion
+export { assessmentOutcomePredicate as $, CheckpointResult as $a, SUPPORTED_EVIDENCE_ADAPTERS as $c, EXPECTED_HOST_PACKAGES as $i, inspectTargetHostGraph as $n, JobLifecycleRecord as $o, executeRevalidatedGitEffect as $r, ExecutionQualification as $s, bindProofToProjection as $t, InitialActivation as A, LATEST_TESTED_HOST_VERSION as Aa, namedActions as Ac, UnifiedItemDiagnosis as Ai, FirstStepPreviewInput as An, DeferAuthorization as Ao, HostTrustedPackage as Ar, replayRebindResult as As, closingHint as At, RC020_RC2_HOST_PACKAGES as B, AuthorityBlock as Ba, statefulActionsOfScope as Bc, PROTOCOL_V4_NOTICE as Bi, TargetHostGraph as Bn, ExpectedTransition as Bo, GitCommandAccepted as Br, ProcessFactSource as Bs, PROOF_PROTOCOL_VERSION as Bt, createActivationMigrationReceipt as C, evaluateHostLock as Ca, isQuestionScopeNeedingReview as Cc, persistedToolResultStatus as Ci, CommandSurfaceManifest as Cn, qualifyBoundary as Co, readDesktopAppRuntime as Cr, RebindProposal as Cs, RecoveryCause as Ct, resolveSessionActivation as D, HOST_VALIDATED_VERSIONS as Da, legacyQuestionReadingIsInformational as Dc, DiagnosisNextAction as Di, ClaimedMessage as Dn, BoundaryDisposition as Do, HostRebindTrust as Dr, proposeRebindV042 as Ds, V6_ORDINARY_COMPLETION_RULE_SHORT as Dt, resolveActivationBindingsRoot as E, selectHostCohort as Ea, kindOfScope as Ec, CertificationSupport as Ei, validateManifest as En, BindingActionClosure as Eo, writeDesktopRuntimeReceipt as Er, proposeRebindOutcome as Es, V6_ORDINARY_COMPLETION_RULE_COMPACT as Et, activationDigest as F, compareHostVersions as Fa, questionHeadsClause as Fc, nativeFileTwoRole as Fi, lifecyclePhase as Fn, DerivedEnvelope as Fo, registryArchiveFiles as Fr, DeclaredOperationResult as Fs, v6CurrentRootBoundaries as Ft, AssistantOutcomeObservation as G, TaskIntent as Ga, ActionSpec as Gc, legacyRecordsNeedingReview as Gi, auditedHostImplementation as Gn, GuardEvidence as Go, GitEffectRunner as Gr, capabilityConsequence as Gs, ProofKindV2 as Gt, projectSessionCoreV2 as H, AuthorityKind as Ha, ACTION_MANIFEST as Hc, PROTOCOL_V6_NOTICE as Hi, auditedDefaultWorkdirHost as Hn, GoalRef as Ho, GitCommandParseResult as Hr, RemovalOutcomeReport as Hs, ProofHostSurface as Ht, activationJson as I, evaluateMinimumHostVersion as Ia, reportingHeadGoverns as Ic, relevantEvidence as Ii, previewFirstStepInjection as In, EvidenceBinding as Io, registryArchiveModules as Ir, DependencyStatus as Is, PROOF_CAPABILITY_MATRIX as It, CurrentActionBasis as J, classifyUserInteraction as Ja, CERTIFICATE_VERSION_V2 as Jc, ACTIVE_HOST_COHORT_IDS as Ji, evaluateConfiguredHostLock as Jn, GuardItemKind as Jo, GitTargetIdentity as Jr, removalIsComplete as Js, ProofObligation as Jt, CONTROL_RECORD_PREFIX as K, UserInteractionKind as Ka, BOUNDED_ARTIFACT_TYPES as Kc, rootLocatorFlavor as Ki, combineHostPolicy as Kn, GuardIntegrity as Ko, GitPrestateCheck as Kr, capabilityFactOf as Ks, ProofManifest as Kt, sessionBirthIdentity as L, parseHostVersion as La, restatedContentOf as Lc, CAPTURE_V042_NOTICE as Li, ActiveProfileHostLock as Ln, EvidenceOutcome as Lo, GIT_COMMAND_MANIFEST_IDS as Lr, DerivedProcessFacts as Ls, PROOF_KINDS as Lt, SessionActivationRead as M, ParsedHostVersion as Ma, opensWithDirective as Mc, deriveItemDiagnosis as Mi, claimedBatchHasRealRootInput as Mn, DeriveConfig as Mo, hostTrustDigest as Mr, CapabilityGap as Ms, recoveryDigest as Mt, SessionBirthIdentity as N, SUPPORTED_HOST_RANGE as Na, presentExplanationHead as Nc, evidenceAvailabilityReason as Ni, firstStepGuidance as Nn, DeriveResult as No, parseHostTrust as Nr, CapabilityRemedy as Ns, recoveryTitle as Nt, validateActivationMigrationReceipt as O, HostVersionDecision as Oa, maskCodeSpans as Oc, Repairability as Oi, FIRST_STEP_GUIDANCE as On, BoundaryQualificationKind as Oo, HostTrustAcquisitionOptions as Or, rebindAttemptKey as Os, carriesCleanupCondition as Ot, activationCanonical as P, SUPPORTED_HOST_VERSIONS as Pa, qualificationOfClause as Pc, itemDiagnosis as Pi, firstStepGuidanceV6 as Pn, DeriveScope as Po, qualifyHostTrust as Pr, DEPENDENCY_FREE_ONLY_CONDITION as Ps, renderRecoveryPacket as Pt, assessmentAction as Q, parseConfirmationMessage as Qa, STOP_PROTOCOL_VERSION_V2 as Qc, DEFAULT_HOST_LOCK as Qi, inspectDesktopTargetGraph as Qn, HostStatus as Qo, createGitPrestateEnvelope as Qr, Executee as Qs, SessionQueryV2 as Qt, validateActivationBinding as R, satisfiesSupportedHostRange as Ra, semanticActionOfScope as Rc, DEFAULT_DELEGATION_TOOL_NAMES as Ri, AuditedPackageExpectation as Rn, EvidenceParseStatus as Ro, GIT_COMMAND_TEMPLATES as Rr, OperationAttribution as Rs, PROOF_KINDS_V2 as Rt, adoptActivationReceipt as S, evaluateHostCapability as Sa, isOpenObligation as Sc, nativeGitParentOidVerified as Si, COMMAND_SURFACE_MANIFEST as Sn, isCurrentAcceptedBoundary as So, readAsarIndex as Sr, RebindArgs as Ss, MIN_RECOVERY_CHAR_BUDGET as St, readActivationMigrationReceipt as T, hostVersionFromPackages as Ta, itemHoldsExecutionAuthority as Tc, withDurability as Ti, OperationVerbEntry as Tn, AssetObligation as To, readDesktopTargetGraph as Tr, proposeRebind as Ts, V6_ORDINARY_COMPLETION_RULE as Tt, projectCoreV2 as U, authorityCaptureCounts as Ua, ACTION_MANIFEST_VERSION as Uc, applyUpgradeEligibility as Ui, auditedDefaultWorkdirProvider as Un, GuardBoundary as Uo, GitCommandRejected as Ur, actionHasCertificationPath as Us, ProofKind as Ut, RC020_RC1_HOST_PACKAGES as V, AuthorityBlockKind as Va, verbIsNegated as Vc, PROTOCOL_V5_NOTICE as Vi, activeRendererModule as Vn, ExternalOperation as Vo, GitCommandManifest as Vr, ProcessOutcomeReason as Vs, PROOF_PROTOCOL_VERSION_V2 as Vt, supersedeItem as W, segmentAuthorityBlocks as Wa, ActionManifest as Wc, deriveProjection as Wi, auditedForegroundRenderers as Wn, GuardCheckpoint as Wo, GitEffectExecution as Wr, admissibleForRemoval as Ws, ProofKindCapability as Wt, NO_PROGRESS_TURNS_BEFORE_STOP as X, ParsedConfirmation as Xa, STATEFUL_ACTIONS as Xc, AuditedExecutable as Xi, hostLockRowsFromComposedDump as Xn, GuardOperation as Xo, commitIndexSnapshotDigest as Xr, AuthorityDisposition as Xs, ProofSurface as Xt, NO_PROGRESS_RECORD_PREFIX as Y, CONFIRM_LINE_PATTERN as Ya, SEMANTIC_ACTIONS as Yc, ACTIVE_HOST_LAUNCHER_VERSION as Yi, hostLockContextFromComposedDump as Yn, GuardItemStatus as Yo, LinearCommitReadback as Yr, removalIsPartiallyKnown as Ys, ProofObligationV2 as Yt, TurnStoppingDecision as Z, isFrozenV042RebindResponse as Za, STOP_PROTOCOL_VERSION as Zc, BASE_HOST_PACKAGES as Zi, injectActiveProfileHostLock as Zn, GuardProjection as Zo, commitTreeSnapshotDigest as Zr, DirectiveClass as Zs, SessionQuery as Zt, verifyMigrationInventory as _, HostToolSurface as _a, interpretMessage as _c, ToolSubject as _i, sha256 as _l, EvidenceFacetCoverage as _n, BoundaryRequest as _o, auditDesktopInstalledImplementation as _r, ReleaseObservedIdentity as _s, snapshotSessionEvents as _t, isSelectedActivationReceipt as a, HostAuditProvenance as aa, ScopeInterpretation as ac, CanonicalCommandSurface as ai, requestedIdentityKey as al, proofDigest as an, captureClause as ao, readActiveHostGraph as ar, TargetCaptureReasonCode as as, isRootPauseRequest as at, __activationBindingInternals as b, evaluateExternalWaitCapability as ba, isExplanationScope as bc, extractToolSubject as bi, evidenceMatchesItem as bn, availableBoundaryQualifications as bo, memoizedAsarIndex as br, BoundedSource as bs, CLEANUP_CONDITION_RULE_SHORT as bt, selectedActivationInventory as c, HostCapabilityRequest as ca, clauseAsksOwnQuestion as cc, canonicalArgvFromCommand as ci, semanticActionFromCommand as cl, proofHostSurfacesOf as cn, environmentDefaultRepositoryTarget as co, resolveInstalledHostLock as cr, TargetSourceKind as cs, latestRootInstruction as ct, verifySelectedMigrationInventory as d, HostCohortSelectionReason as da, explanationHasActionResidue as dc, parseShellCommand as di, validateActionTarget as dl, requiredSubjectsOf as dn, extractOperation as do, AsarIndex as dr, VerificationContract as ds, testOutcomePredicate as dt, ExecutableIdentity as ea, GRANTED_QUALIFICATION as ec, gitCommandMatchesTarget as ei, SemanticAction as el, bindProofV2ToProjection as en, RejectedBinding as eo, packageRowsFromActiveGraph as er, MessageCoverage as es, classifyCompletionClaim as et, privateStorageToolDenial as f, HostLockContext as fa, governedClauseRestrictsExecution as fc, goalCompletionDenial as fi, canonicalizePath as fl, scopeCoverageDigest as fn, isInformationalMessage as fo, DESKTOP_IDENTITY_FACTS as fr, WaitAuthorization as fs, v6TestPredicate as ft, prepareActivationMigration as g, HostProfileKind as ga, interpretClause as gc, ToolResultInput as gi, sanitizeUrl as gl, validateProofManifestV2 as gn, BoundaryQualification as go, DesktopTargetGraph as gr, ReleaseGateDecision as gs, V4SessionLike as gt, inspectActivationInventory as h, HostPlatform as ha, hasWorkPredicate as hc, ToolCallInput as hi, sanitizeClauseText as hl, validateProofManifest as hn, BoundaryEffectuation as ho, DesktopAppRuntime as hr, PackageRow as hs, SessionApiError as ht, createActivationSelection as i, HOST_COHORTS as ia, QualificationStatus as ic, CanonicalArgv as ii, isStatefulAction as il, proofCapabilityReport as in, ClauseSegment as io, prepareTargetHostTrust as ir, SourceSpan as is, decisionBoundaryKey as it, SessionActivationBinding as j, MIN_SUPPORTED_HOST_VERSION as ja, opensConditionLead as jc, capabilityRemedyPhrase as ji, LifecyclePhase as jn, DelegationRef as jo, acquireHostTrust as jr, CapabilityFact as js, openItems as jt, writeActivationBinding as k, HostVersionStatus as ka, maskQuotedSpans as kc, TaskKind as ki, FirstStepInjection as kn, CwdEpoch as ko, HostTrustError as kr, rebindResponse as ks, cleanupConditionFor as kt, validateActivationInventorySnapshot as l, HostCohort as la, clauseIsGoverned as lc, isRunExecutable as li, semanticActionFromText as ll, proofOperationMatches as ln, extractArtifactPaths as lo, revalidateDesktopCoreLock as lr, TargetTuple as ls, observeAssistantOutcome as lt, ActivationPriorModes as m, HostLockStatus as ma, hasQuestionScope as mc, NATIVE_GIT_ROOT_PARENT_OID as mi, normalizeClause as ml, sessionQueryV2 as mn, BOUNDARY_RECORD_PREFIX as mo, DESKTOP_RUNTIME_PACKAGE_NAME as mr, createProjection as ms, SESSION_EVENT_ENVELOPE_INVALID as mt, ActivationMigrationSelection as n, GOAL_HOST_PACKAGES as na, LEGACY_QUALIFICATION as nc, revalidateGitPrestate as ni, actionCompatible as nl, createProofManifest as nn, certifyCheckpoint as no, prepareActiveHostTrust as nr, NeedsReviewReason as ns, decideTurnBoundary as nt, prepareSelectedActivationMigration as o, HostCapabilityEvaluation as oa, actionVerbMatches as oc, ParsedShell as oi, requestedTargetAuthorizesMutation as ol, proofDigestV2 as on, captureItem as oo, resolveActiveProfileHostLock as or, TargetCaptureStatus as os, isWholeTaskCompletionClaim as ot, ActivationInventoryPersistence as p, HostLockEvaluation as pa, hasOrderedCoordination as pc, hasCurrentCertificate as pi, digestStrings as pl, sessionQuery as pn, segmentClauses as po, DESKTOP_PROFILE_PACKAGE_NAME as pr, WorkUnit as ps, SESSION_API_UNSUPPORTED as pt, CompletionDisposition as q, classifyTaskIntent as qa, CERTIFICATE_VERSION as qc, ACTIVE_HOST_COHORT_ID as qi, evaluateActiveHostLock as qn, GuardItem as qo, GitPrestateEnvelope as qr, partialFailureOf as qs, ProofManifestV2 as qt, activationSelectionPending as r, HOST_CAPABILITY_PACKAGE_GROUPS as ra, QualificationReason as rc, verifiedLinearCommitReadback as ri, boundedArtifactChoiceMatches as rl, createProofManifestV2 as rn, CaptureScope as ro, prepareDesktopHostTrust as rr, PersistenceAuthorization as rs, decideTurnStopping as rt, scanActivationInventory as s, HostCapabilityId as sa, clarifiedSpanOf as sc, ShellParseStatus as si, requestedTargetMatchesResolved as sl, proofEvidenceConstraints as sn, classifyClause as so, resolveDesktopProfileHostLock as sr, TargetSource as ss, latestAssistantText as st, ActivationInventorySnapshot as t, ExecutableIdentityBinding as ta, InterpretOptions as tc, parseGitCommandManifest as ti, StatefulAction as tl, canonicalProjection as tn, bindingIndividuallyAccepted as to, packageRowsFromPnpmLock as tr, NeedsReviewFact as ts, currentActionBases as tt, validateActivationSelection as u, HostCohortSelection as ua, clauseIsProtected as uc, parsePwshCommand as ui, validateActionManifest as ul, proofV2Rejection as un, extractMethod as uo, verifyComposedHostLockDump as ur, TargetValue as us, progressFingerprint as ut, ActivationMigrationEntry as v, bindExecutableIdentity as va, introducesActionClause as vc, evidenceFromPersistedToolResult as vi, bindingSatisfies as vn, GoalActivationState as vo, hasDesktopImporterState as vr, ReleaseOperation as vs, CLEANUP_CONDITION_RULE as vt, readActivationBinding as w, evaluateToolSurfaceCapability as wa, isRestatement as wc, shellReadbackOutcome as wi, ManifestIssue as wn, AssetInterpretationFact as wo, readDesktopDependency as wr, confirmRebind as ws, RecoveryOptions as wt, activationBindingPath as x, evaluateGraphDerivedHostLock as xa, isInformationalFragment as xc, isDeterministicCheck as xi, isVerifyingCapability as xn, effectuateBoundary as xo, readAsarFile as xr, ProposeOutcome as xs, DEFAULT_RECOVERY_CHAR_BUDGET as xt, ActivationMigrationReceipt as y, bindLiveGoalCapability as ya, isExecutableItem as yc, extractTextContent as yi, evidenceCoverage as yn, GoalBoundaryAccess as yo, memoizedAsarFile as yr, ReleaseSettlement as ys, CLEANUP_CONDITION_RULE_COMPACT as yt, RC021_RC2_HOST_PACKAGES as z, currentContractDigest as za, splitTextFragments as zc, PROTOCOL_V3_NOTICE as zi, HostProfileError as zn, EvidenceRole as zo, GitAdapterAction as zr, ProcessExitStatus as zs, PROOF_MANIFEST_DOMAIN_V2 as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as PROOF_KINDS_V2, $a as ExternalOperation, $i as AuthorityBlock, $n as GitCommandAccepted, $o as RemovalOutcomeReport, $r as PROTOCOL_V4_NOTICE, $s as ACTION_MANIFEST, $t as AuditedPackageExpectation, A as SessionApiError, Aa as BoundaryRequest, Ai as HostToolSurface, An as DesktopAppRuntime, Ao as ReleaseSettlement, Ar as ToolSubject, As as isExecutableItem, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as BoundaryDisposition, Bi as HOST_VALIDATED_VERSIONS, Bn as HostRebindTrust, Bo as rebindResponse, Br as DiagnosisNextAction, Bs as maskQuotedSpans, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as extractMethod, Cc as canonicalizePath, Ci as HostCohortSelection, Cn as resolveInstalledHostLock, Co as WaitAuthorization, Cr as parsePwshCommand, Cs as governedClauseRestrictsExecution, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BOUNDARY_RECORD_PREFIX, Dc as sanitizeUrl, Di as HostLockStatus, Dn as DESKTOP_IDENTITY_FACTS, Do as ReleaseGateDecision, Dr as NATIVE_GIT_ROOT_PARENT_OID, Ds as interpretClause, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as segmentClauses, Ec as sanitizeClauseText, Ei as HostLockEvaluation, En as AsarIndex, Eo as PackageRow, Er as hasCurrentCertificate, Es as hasWorkPredicate, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as isCurrentAcceptedBoundary, Fi as evaluateHostCapability, Fn as readAsarIndex, Fo as confirmRebind, Fr as nativeGitParentOidVerified, Fs as isRestatement, Ft as evidenceMatchesItem, G as closingHint, Ga as DeriveResult, Gi as ParsedHostVersion, Gn as hostTrustDigest, Go as DEPENDENCY_FREE_ONLY_CONDITION, Gr as deriveItemDiagnosis, Gs as qualificationOfClause, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeferAuthorization, Hi as HostVersionStatus, Hn as HostTrustError, Ho as CapabilityFact, Hr as TaskKind, Hs as opensConditionLead, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as qualifyBoundary, Ii as evaluateHostLock, In as readDesktopAppRuntime, Io as proposeRebind, Ir as persistedToolResultStatus, Is as itemHoldsExecutionAuthority, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceBinding, Ji as compareHostVersions, Jn as registryArchiveFiles, Jo as DerivedProcessFacts, Jr as nativeFileTwoRole, Js as restatedContentOf, Jt as firstStepGuidance, K as openItems, Ka as DeriveScope, Ki as SUPPORTED_HOST_RANGE, Kn as parseHostTrust, Ko as DeclaredOperationResult, Kr as evidenceAvailabilityReason, Ks as questionHeadsClause, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as AssetInterpretationFact, Li as evaluateToolSurfaceCapability, Ln as readDesktopDependency, Lo as proposeRebindOutcome, Lr as shellReadbackOutcome, Ls as kindOfScope, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as GoalBoundaryAccess, Mi as bindLiveGoalCapability, Mn as auditDesktopInstalledImplementation, Mo as ProposeOutcome, Mr as extractTextContent, Ms as isInformationalFragment, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as availableBoundaryQualifications, Ni as evaluateExternalWaitCapability, Nn as hasDesktopImporterState, No as RebindArgs, Nr as extractToolSubject, Ns as isOpenObligation, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as BoundaryEffectuation, Oc as sha256, Oi as HostPlatform, On as DESKTOP_PROFILE_PACKAGE_NAME, Oo as ReleaseObservedIdentity, Or as ToolCallInput, Os as interpretMessage, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as effectuateBoundary, Pi as evaluateGraphDerivedHostLock, Pn as readAsarFile, Po as RebindProposal, Pr as isDeterministicCheck, Ps as isQuestionScopeNeedingReview, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as ExpectedTransition, Qi as currentContractDigest, Qn as GitAdapterAction, Qo as ProcessOutcomeReason, Qr as PROTOCOL_V3_NOTICE, Qs as verbIsNegated, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as AssetObligation, Ri as hostVersionFromPackages, Rn as readDesktopTargetGraph, Ro as proposeRebindV042, Rr as withDurability, Rs as legacyQuestionReadingIsInformational, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as extractArtifactPaths, Sc as validateActionTarget, Si as HostCohort, Sn as resolveDesktopProfileHostLock, So as VerificationContract, Sr as isRunExecutable, Ss as explanationHasActionResidue, St as proofEvidenceConstraints, T as progressFingerprint, Ta as isInformationalMessage, Tc as normalizeClause, Ti as HostLockContext, Tn as verifyComposedHostLockDump, To as createProjection, Tr as goalCompletionDenial, Ts as hasQuestionScope, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DelegationRef, Ui as LATEST_TESTED_HOST_VERSION, Un as HostTrustedPackage, Uo as CapabilityGap, Ur as UnifiedItemDiagnosis, Us as opensWithDirective, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as BoundaryQualificationKind, Vi as HostVersionDecision, Vn as HostTrustAcquisitionOptions, Vo as replayRebindResult, Vr as Repairability, Vs as namedActions, Vt as validateManifest, W as cleanupConditionFor, Wa as DeriveConfig, Wi as MIN_SUPPORTED_HOST_VERSION, Wn as acquireHostTrust, Wo as CapabilityRemedy, Wr as capabilityRemedyPhrase, Ws as presentExplanationHead, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as EvidenceParseStatus, Xi as parseHostVersion, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as ProcessExitStatus, Xr as CAPTURE_V042_NOTICE, Xs as splitTextFragments, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as EvidenceOutcome, Yi as evaluateMinimumHostVersion, Yn as registryArchiveModules, Yo as OperationAttribution, Yr as relevantEvidence, Ys as semanticActionOfScope, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as EvidenceRole, Zi as satisfiesSupportedHostRange, Zn as GIT_COMMAND_TEMPLATES, Zo as ProcessFactSource, Zr as DEFAULT_DELEGATION_TOOL_NAMES, Zs as statefulActionsOfScope, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as ClauseSegment, _c as requestedTargetAuthorizesMutation, _i as HOST_COHORTS, _n as prepareActiveHostTrust, _o as TargetCaptureStatus, _r as CanonicalArgv, _s as actionVerbMatches, _t as createProofManifest, a as supersedeItem, aa as UserInteractionKind, ac as CERTIFICATE_VERSION_V2, ai as rootLocatorFlavor, an as auditedForegroundRenderers, ao as GuardItem, ar as GitPrestateCheck, as as removalIsComplete, at as ProofKindCapability, b as isRootPauseRequest, ba as classifyClause, bc as semanticActionFromText, bi as HostCapabilityId, bn as readActiveHostGraph, bo as TargetTuple, br as ShellParseStatus, bs as clauseIsGoverned, bt as proofDigest, c as CompletionDisposition, ca as CONFIRM_LINE_PATTERN, cc as STOP_PROTOCOL_VERSION, ci as ACTIVE_HOST_LAUNCHER_VERSION, cn as evaluateActiveHostLock, co as GuardOperation, cr as LinearCommitReadback, cs as DirectiveClass, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as parseConfirmationMessage, dc as SemanticAction, di as DEFAULT_HOST_LOCK, dn as hostLockRowsFromComposedDump, do as MessageCoverage, dr as createGitPrestateEnvelope, ds as GRANTED_QUALIFICATION, dt as ProofSurface, ea as AuthorityBlockKind, ec as ACTION_MANIFEST_VERSION, ei as PROTOCOL_V5_NOTICE, en as HostProfileError, eo as GoalRef, er as GitCommandManifest, es as actionHasCertificationPath, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as CheckpointResult, fc as StatefulAction, fi as EXPECTED_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as NeedsReviewFact, fr as executeRevalidatedGitEffect, fs as InterpretOptions, ft as SessionQuery, g as currentActionBases, ga as CaptureScope, gc as requestedIdentityKey, gi as HOST_CAPABILITY_PACKAGE_GROUPS, gn as packageRowsFromPnpmLock, go as TargetCaptureReasonCode, gr as verifiedLinearCommitReadback, gs as ScopeInterpretation, gt as canonicalProjection, h as classifyCompletionClaim, ha as certifyCheckpoint, hc as isStatefulAction, hi as GOAL_HOST_PACKAGES, hn as packageRowsFromActiveGraph, ho as SourceSpan, hr as revalidateGitPrestate, hs as QualificationStatus, ht as bindProofV2ToProjection, i as projectCoreV2, ia as TaskIntent, ic as CERTIFICATE_VERSION, ii as legacyRecordsNeedingReview, in as auditedDefaultWorkdirProvider, io as GuardIntegrity, ir as GitEffectRunner, is as partialFailureOf, it as ProofKind, j as V4SessionLike, ja as GoalActivationState, ji as bindExecutableIdentity, jn as DesktopTargetGraph, jo as BoundedSource, jr as evidenceFromPersistedToolResult, js as isExplanationScope, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as BoundaryQualification, ki as HostProfileKind, kn as DESKTOP_RUNTIME_PACKAGE_NAME, ko as ReleaseOperation, kr as ToolResultInput, ks as introducesActionClause, kt as sessionQueryV2, l as CurrentActionBasis, la as ParsedConfirmation, lc as STOP_PROTOCOL_VERSION_V2, li as AuditedExecutable, ln as evaluateConfiguredHostLock, lo as GuardProjection, lr as commitIndexSnapshotDigest, ls as Executee, lt as ProofObligation, m as assessmentOutcomePredicate, ma as bindingIndividuallyAccepted, mc as boundedArtifactChoiceMatches, mi as ExecutableIdentityBinding, mn as inspectTargetHostGraph, mo as PersistenceAuthorization, mr as parseGitCommandManifest, ms as QualificationReason, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as authorityCaptureCounts, nc as ActionSpec, ni as applyUpgradeEligibility, nn as activeRendererModule, no as GuardCheckpoint, nr as GitCommandRejected, ns as capabilityConsequence, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as classifyTaskIntent, oc as SEMANTIC_ACTIONS, oi as ACTIVE_HOST_COHORT_ID, on as auditedHostImplementation, oo as GuardItemKind, or as GitPrestateEnvelope, os as removalIsPartiallyKnown, ot as ProofKindV2, p as assessmentAction, pa as RejectedBinding, pc as actionCompatible, pi as ExecutableIdentity, pn as inspectDesktopTargetGraph, po as NeedsReviewReason, pr as gitCommandMatchesTarget, ps as LEGACY_QUALIFICATION, pt as SessionQueryV2, q as recoveryDigest, qa as DerivedEnvelope, qi as SUPPORTED_HOST_VERSIONS, qn as qualifyHostTrust, qo as DependencyStatus, qr as itemDiagnosis, qs as reportingHeadGoverns, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as segmentAuthorityBlocks, rc as BOUNDED_ARTIFACT_TYPES, ri as deriveProjection, rn as auditedDefaultWorkdirHost, ro as GuardEvidence, rr as GitEffectExecution, rs as capabilityFactOf, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as classifyUserInteraction, sc as STATEFUL_ACTIONS, si as ACTIVE_HOST_COHORT_IDS, sn as combineHostPolicy, so as GuardItemStatus, sr as GitTargetIdentity, ss as AuthorityDisposition, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as AuthorityKind, tc as ActionManifest, ti as PROTOCOL_V6_NOTICE, tn as TargetHostGraph, to as GuardBoundary, tr as GitCommandParseResult, ts as admissibleForRemoval, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as isFrozenV042RebindResponse, uc as SUPPORTED_EVIDENCE_ADAPTERS, ui as BASE_HOST_PACKAGES, un as hostLockContextFromComposedDump, uo as HostStatus, ur as commitTreeSnapshotDigest, us as ExecutionQualification, ut as ProofObligationV2, v as decideTurnStopping, va as captureClause, vc as requestedTargetMatchesResolved, vi as HostAuditProvenance, vn as prepareDesktopHostTrust, vo as TargetSource, vr as CanonicalCommandSurface, vs as clarifiedSpanOf, vt as createProofManifestV2, w as observeAssistantOutcome, wa as extractOperation, wc as digestStrings, wi as HostCohortSelectionReason, wn as revalidateDesktopCoreLock, wo as WorkUnit, wr as parseShellCommand, ws as hasOrderedCoordination, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as environmentDefaultRepositoryTarget, xc as validateActionManifest, xi as HostCapabilityRequest, xn as resolveActiveProfileHostLock, xo as TargetValue, xr as canonicalArgvFromCommand, xs as clauseIsProtected, xt as proofDigestV2, y as decisionBoundaryKey, ya as captureItem, yc as semanticActionFromCommand, yi as HostCapabilityEvaluation, yn as prepareTargetHostTrust, yo as TargetSourceKind, yr as ParsedShell, ys as clauseAsksOwnQuestion, yt as proofCapabilityReport, z as RecoveryOptions, za as BindingActionClosure, zi as selectHostCohort, zn as writeDesktopRuntimeReceipt, zo as rebindAttemptKey, zr as CertificationSupport, zs as maskCodeSpans, zt as ManifestIssue } from "./index-BmTaAEkJ.js";
+import { $ as assessmentOutcomePredicate, $a as CheckpointResult, $c as SUPPORTED_EVIDENCE_ADAPTERS, $i as EXPECTED_HOST_PACKAGES, $n as inspectTargetHostGraph, $o as JobLifecycleRecord, $r as executeRevalidatedGitEffect, $s as ExecutionQualification, $t as bindProofToProjection, A as InitialActivation, Aa as LATEST_TESTED_HOST_VERSION, Ac as namedActions, Ai as UnifiedItemDiagnosis, An as FirstStepPreviewInput, Ao as DeferAuthorization, Ar as HostTrustedPackage, As as replayRebindResult, At as closingHint, B as RC020_RC2_HOST_PACKAGES, Ba as AuthorityBlock, Bc as statefulActionsOfScope, Bi as PROTOCOL_V4_NOTICE, Bn as TargetHostGraph, Bo as ExpectedTransition, Br as GitCommandAccepted, Bs as ProcessFactSource, Bt as PROOF_PROTOCOL_VERSION, C as createActivationMigrationReceipt, Ca as evaluateHostLock, Cc as isQuestionScopeNeedingReview, Ci as persistedToolResultStatus, Cn as CommandSurfaceManifest, Co as qualifyBoundary, Cr as readDesktopAppRuntime, Cs as RebindProposal, Ct as RecoveryCause, D as resolveSessionActivation, Da as HOST_VALIDATED_VERSIONS, Dc as legacyQuestionReadingIsInformational, Di as DiagnosisNextAction, Dn as ClaimedMessage, Do as BoundaryDisposition, Dr as HostRebindTrust, Ds as proposeRebindV042, Dt as V6_ORDINARY_COMPLETION_RULE_SHORT, E as resolveActivationBindingsRoot, Ea as selectHostCohort, Ec as kindOfScope, Ei as CertificationSupport, En as validateManifest, Eo as BindingActionClosure, Er as writeDesktopRuntimeReceipt, Es as proposeRebindOutcome, Et as V6_ORDINARY_COMPLETION_RULE_COMPACT, F as activationDigest, Fa as compareHostVersions, Fc as questionHeadsClause, Fi as nativeFileTwoRole, Fn as lifecyclePhase, Fo as DerivedEnvelope, Fr as registryArchiveFiles, Fs as DeclaredOperationResult, Ft as v6CurrentRootBoundaries, G as AssistantOutcomeObservation, Ga as TaskIntent, Gc as ActionSpec, Gi as legacyRecordsNeedingReview, Gn as auditedHostImplementation, Go as GuardEvidence, Gr as GitEffectRunner, Gs as capabilityConsequence, Gt as ProofKindV2, H as projectSessionCoreV2, Ha as AuthorityKind, Hc as ACTION_MANIFEST, Hi as PROTOCOL_V6_NOTICE, Hn as auditedDefaultWorkdirHost, Ho as GoalRef, Hr as GitCommandParseResult, Hs as RemovalOutcomeReport, Ht as ProofHostSurface, I as activationJson, Ia as evaluateMinimumHostVersion, Ic as reportingHeadGoverns, Ii as relevantEvidence, In as previewFirstStepInjection, Io as EvidenceBinding, Ir as registryArchiveModules, Is as DependencyStatus, It as PROOF_CAPABILITY_MATRIX, J as CurrentActionBasis, Ja as classifyUserInteraction, Jc as CERTIFICATE_VERSION_V2, Ji as ACTIVE_HOST_COHORT_IDS, Jn as evaluateConfiguredHostLock, Jo as GuardItemKind, Jr as GitTargetIdentity, Js as removalIsComplete, Jt as ProofObligation, K as CONTROL_RECORD_PREFIX, Ka as UserInteractionKind, Kc as BOUNDED_ARTIFACT_TYPES, Ki as rootLocatorFlavor, Kn as combineHostPolicy, Ko as GuardIntegrity, Kr as GitPrestateCheck, Ks as capabilityFactOf, Kt as ProofManifest, L as sessionBirthIdentity, La as parseHostVersion, Lc as restatedContentOf, Li as CAPTURE_V042_NOTICE, Ln as ActiveProfileHostLock, Lo as EvidenceOutcome, Lr as GIT_COMMAND_MANIFEST_IDS, Ls as DerivedProcessFacts, Lt as PROOF_KINDS, M as SessionActivationRead, Ma as ParsedHostVersion, Mc as opensWithDirective, Mi as deriveItemDiagnosis, Mn as claimedBatchHasRealRootInput, Mo as DeriveConfig, Mr as hostTrustDigest, Ms as CapabilityGap, Mt as recoveryDigest, N as SessionBirthIdentity, Na as SUPPORTED_HOST_RANGE, Nc as presentExplanationHead, Ni as evidenceAvailabilityReason, Nn as firstStepGuidance, No as DeriveResult, Nr as parseHostTrust, Ns as CapabilityRemedy, Nt as recoveryTitle, O as validateActivationMigrationReceipt, Oa as HostVersionDecision, Oc as maskCodeSpans, Oi as Repairability, On as FIRST_STEP_GUIDANCE, Oo as BoundaryQualificationKind, Or as HostTrustAcquisitionOptions, Os as rebindAttemptKey, Ot as carriesCleanupCondition, P as activationCanonical, Pa as SUPPORTED_HOST_VERSIONS, Pc as qualificationOfClause, Pi as itemDiagnosis, Pn as firstStepGuidanceV6, Po as DeriveScope, Pr as qualifyHostTrust, Ps as DEPENDENCY_FREE_ONLY_CONDITION, Pt as renderRecoveryPacket, Q as assessmentAction, Qa as parseConfirmationMessage, Qc as STOP_PROTOCOL_VERSION_V2, Qi as DEFAULT_HOST_LOCK, Qn as inspectDesktopTargetGraph, Qo as HostStatus, Qr as createGitPrestateEnvelope, Qs as Executee, Qt as SessionQueryV2, R as validateActivationBinding, Ra as satisfiesSupportedHostRange, Rc as semanticActionOfScope, Ri as DEFAULT_DELEGATION_TOOL_NAMES, Rn as AuditedPackageExpectation, Ro as EvidenceParseStatus, Rr as GIT_COMMAND_TEMPLATES, Rs as OperationAttribution, Rt as PROOF_KINDS_V2, S as adoptActivationReceipt, Sa as evaluateHostCapability, Sc as isOpenObligation, Si as nativeGitParentOidVerified, Sn as COMMAND_SURFACE_MANIFEST, So as isCurrentAcceptedBoundary, Sr as readAsarIndex, Ss as RebindArgs, St as MIN_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as hostVersionFromPackages, Tc as itemHoldsExecutionAuthority, Ti as withDurability, Tn as OperationVerbEntry, To as AssetObligation, Tr as readDesktopTargetGraph, Ts as proposeRebind, Tt as V6_ORDINARY_COMPLETION_RULE, U as projectCoreV2, Ua as authorityCaptureCounts, Uc as ACTION_MANIFEST_VERSION, Ui as applyUpgradeEligibility, Un as auditedDefaultWorkdirProvider, Uo as GuardBoundary, Ur as GitCommandRejected, Us as actionHasCertificationPath, Ut as ProofKind, V as RC020_RC1_HOST_PACKAGES, Va as AuthorityBlockKind, Vc as verbIsNegated, Vi as PROTOCOL_V5_NOTICE, Vn as activeRendererModule, Vo as ExternalOperation, Vr as GitCommandManifest, Vs as ProcessOutcomeReason, Vt as PROOF_PROTOCOL_VERSION_V2, W as supersedeItem, Wa as segmentAuthorityBlocks, Wc as ActionManifest, Wi as deriveProjection, Wn as auditedForegroundRenderers, Wo as GuardCheckpoint, Wr as GitEffectExecution, Ws as admissibleForRemoval, Wt as ProofKindCapability, X as NO_PROGRESS_TURNS_BEFORE_STOP, Xa as ParsedConfirmation, Xc as STATEFUL_ACTIONS, Xi as AuditedExecutable, Xn as hostLockRowsFromComposedDump, Xo as GuardOperation, Xr as commitIndexSnapshotDigest, Xs as AuthorityDisposition, Xt as ProofSurface, Y as NO_PROGRESS_RECORD_PREFIX, Ya as CONFIRM_LINE_PATTERN, Yc as SEMANTIC_ACTIONS, Yi as ACTIVE_HOST_LAUNCHER_VERSION, Yn as hostLockContextFromComposedDump, Yo as GuardItemStatus, Yr as LinearCommitReadback, Ys as removalIsPartiallyKnown, Yt as ProofObligationV2, Z as TurnStoppingDecision, Za as isFrozenV042RebindResponse, Zc as STOP_PROTOCOL_VERSION, Zi as BASE_HOST_PACKAGES, Zn as injectActiveProfileHostLock, Zo as GuardProjection, Zr as commitTreeSnapshotDigest, Zs as DirectiveClass, Zt as SessionQuery, _ as verifyMigrationInventory, _a as HostToolSurface, _c as interpretMessage, _i as ToolSubject, _l as sha256, _n as EvidenceFacetCoverage, _o as BoundaryRequest, _r as auditDesktopInstalledImplementation, _s as ReleaseObservedIdentity, _t as snapshotSessionEvents, a as isSelectedActivationReceipt, aa as HostAuditProvenance, ac as ScopeInterpretation, ai as CanonicalCommandSurface, al as requestedIdentityKey, an as proofDigest, ao as captureClause, ar as readActiveHostGraph, as as TargetCaptureReasonCode, at as isRootPauseRequest, b as __activationBindingInternals, ba as evaluateExternalWaitCapability, bc as isExplanationScope, bi as extractToolSubject, bn as evidenceMatchesItem, bo as availableBoundaryQualifications, br as memoizedAsarIndex, bs as BoundedSource, bt as CLEANUP_CONDITION_RULE_SHORT, c as selectedActivationInventory, ca as HostCapabilityRequest, cc as clauseAsksOwnQuestion, ci as canonicalArgvFromCommand, cl as semanticActionFromCommand, cn as proofHostSurfacesOf, co as environmentDefaultRepositoryTarget, cr as resolveInstalledHostLock, cs as TargetSourceKind, ct as latestRootInstruction, d as verifySelectedMigrationInventory, da as HostCohortSelectionReason, dc as explanationHasActionResidue, di as parseShellCommand, dl as validateActionTarget, dn as requiredSubjectsOf, do as extractOperation, dr as AsarIndex, ds as VerificationContract, dt as testOutcomePredicate, ea as ExecutableIdentity, ec as GRANTED_QUALIFICATION, ei as gitCommandMatchesTarget, el as SemanticAction, en as bindProofV2ToProjection, eo as RejectedBinding, er as packageRowsFromActiveGraph, es as MessageCoverage, et as classifyCompletionClaim, f as privateStorageToolDenial, fa as HostLockContext, fc as governedClauseRestrictsExecution, fi as goalCompletionDenial, fl as canonicalizePath, fn as scopeCoverageDigest, fo as isInformationalMessage, fr as DESKTOP_IDENTITY_FACTS, fs as WaitAuthorization, ft as v6TestPredicate, g as prepareActivationMigration, ga as HostProfileKind, gc as interpretClause, gi as ToolResultInput, gl as sanitizeUrl, gn as validateProofManifestV2, go as BoundaryQualification, gr as DesktopTargetGraph, gs as ReleaseGateDecision, gt as V4SessionLike, h as inspectActivationInventory, ha as HostPlatform, hc as hasWorkPredicate, hi as ToolCallInput, hl as sanitizeClauseText, hn as validateProofManifest, ho as BoundaryEffectuation, hr as DesktopAppRuntime, hs as PackageRow, ht as SessionApiError, i as createActivationSelection, ia as HOST_COHORTS, ic as QualificationStatus, ii as CanonicalArgv, il as isStatefulAction, in as proofCapabilityReport, io as ClauseSegment, ir as prepareTargetHostTrust, is as SourceSpan, it as decisionBoundaryKey, j as SessionActivationBinding, ja as MIN_SUPPORTED_HOST_VERSION, jc as opensConditionLead, ji as capabilityRemedyPhrase, jn as LifecyclePhase, jo as DelegationRef, jr as acquireHostTrust, js as CapabilityFact, jt as openItems, k as writeActivationBinding, ka as HostVersionStatus, kc as maskQuotedSpans, ki as TaskKind, kn as FirstStepInjection, ko as CwdEpoch, kr as HostTrustError, ks as rebindResponse, kt as cleanupConditionFor, l as validateActivationInventorySnapshot, la as HostCohort, lc as clauseIsGoverned, li as isRunExecutable, ll as semanticActionFromText, ln as proofOperationMatches, lo as extractArtifactPaths, lr as revalidateDesktopCoreLock, ls as TargetTuple, lt as observeAssistantOutcome, m as ActivationPriorModes, ma as HostLockStatus, mc as hasQuestionScope, mi as NATIVE_GIT_ROOT_PARENT_OID, ml as normalizeClause, mn as sessionQueryV2, mo as BOUNDARY_RECORD_PREFIX, mr as DESKTOP_RUNTIME_PACKAGE_NAME, ms as createProjection, mt as SESSION_EVENT_ENVELOPE_INVALID, n as ActivationMigrationSelection, na as GOAL_HOST_PACKAGES, nc as LEGACY_QUALIFICATION, ni as revalidateGitPrestate, nl as actionCompatible, nn as createProofManifest, no as certifyCheckpoint, nr as prepareActiveHostTrust, ns as NeedsReviewReason, nt as decideTurnBoundary, o as prepareSelectedActivationMigration, oa as HostCapabilityEvaluation, oc as actionVerbMatches, oi as ParsedShell, ol as requestedTargetAuthorizesMutation, on as proofDigestV2, oo as captureItem, or as resolveActiveProfileHostLock, os as TargetCaptureStatus, ot as isWholeTaskCompletionClaim, p as ActivationInventoryPersistence, pa as HostLockEvaluation, pc as hasOrderedCoordination, pi as hasCurrentCertificate, pl as digestStrings, pn as sessionQuery, po as segmentClauses, pr as DESKTOP_PROFILE_PACKAGE_NAME, ps as WorkUnit, pt as SESSION_API_UNSUPPORTED, q as CompletionDisposition, qa as classifyTaskIntent, qc as CERTIFICATE_VERSION, qi as ACTIVE_HOST_COHORT_ID, qn as evaluateActiveHostLock, qo as GuardItem, qr as GitPrestateEnvelope, qs as partialFailureOf, qt as ProofManifestV2, r as activationSelectionPending, ra as HOST_CAPABILITY_PACKAGE_GROUPS, rc as QualificationReason, ri as verifiedLinearCommitReadback, rl as boundedArtifactChoiceMatches, rn as createProofManifestV2, ro as CaptureScope, rr as prepareDesktopHostTrust, rs as PersistenceAuthorization, rt as decideTurnStopping, s as scanActivationInventory, sa as HostCapabilityId, sc as clarifiedSpanOf, si as ShellParseStatus, sl as requestedTargetMatchesResolved, sn as proofEvidenceConstraints, so as classifyClause, sr as resolveDesktopProfileHostLock, ss as TargetSource, st as latestAssistantText, t as ActivationInventorySnapshot, ta as ExecutableIdentityBinding, tc as InterpretOptions, ti as parseGitCommandManifest, tl as StatefulAction, tn as canonicalProjection, to as bindingIndividuallyAccepted, tr as packageRowsFromPnpmLock, ts as NeedsReviewFact, tt as currentActionBases, u as validateActivationSelection, ua as HostCohortSelection, uc as clauseIsProtected, ui as parsePwshCommand, ul as validateActionManifest, un as proofV2Rejection, uo as extractMethod, ur as verifyComposedHostLockDump, us as TargetValue, ut as progressFingerprint, v as ActivationMigrationEntry, va as bindExecutableIdentity, vc as introducesActionClause, vi as evidenceFromPersistedToolResult, vn as bindingSatisfies, vo as GoalActivationState, vr as hasDesktopImporterState, vs as ReleaseOperation, vt as CLEANUP_CONDITION_RULE, w as readActivationBinding, wa as evaluateToolSurfaceCapability, wc as isRestatement, wi as shellReadbackOutcome, wn as ManifestIssue, wo as AssetInterpretationFact, wr as readDesktopDependency, ws as confirmRebind, wt as RecoveryOptions, x as activationBindingPath, xa as evaluateGraphDerivedHostLock, xc as isInformationalFragment, xi as isDeterministicCheck, xn as isVerifyingCapability, xo as effectuateBoundary, xr as readAsarFile, xs as ProposeOutcome, xt as DEFAULT_RECOVERY_CHAR_BUDGET, y as ActivationMigrationReceipt, ya as bindLiveGoalCapability, yc as isExecutableItem, yi as extractTextContent, yn as evidenceCoverage, yo as GoalBoundaryAccess, yr as memoizedAsarFile, ys as ReleaseSettlement, yt as CLEANUP_CONDITION_RULE_COMPACT, z as RC021_RC2_HOST_PACKAGES, za as currentContractDigest, zc as splitTextFragments, zi as PROTOCOL_V3_NOTICE, zn as HostProfileError, zo as EvidenceRole, zr as GitAdapterAction, zs as ProcessExitStatus, zt as PROOF_MANIFEST_DOMAIN_V2 } from "./index-rCqdIg5B.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -127,7 +127,7 @@ interface MutationAuthorizationDecision {
 //#endregion
 //#region src/config.d.ts
 declare const Config: z<{
-  activation: string;
+  activation?: string;
   policy?: string;
   hostLockPackages?: PackageRow[];
   hostLockPlatform?: HostPlatform;
@@ -167,6 +167,8 @@ interface RuntimeExecutorSeams {
   hostLock?: HostLockEvaluation;
   /** Isolated acceptance override for the provider-invisible durable ledger. */
   privateLedgerRoot?: string;
+  /** Isolated storage location only; never bypasses mode resolution. */
+  activationBindingsRoot?: string;
   /**
   * Invoked once per full host-lock validation the runtime actually performs —
   * the attach-time validation and every security-sensitive entry's fresh
@@ -203,4 +205,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };