dsh-completion-guard 0.8.4 → 0.9.0

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to this project are documented here. The project is pre-1.0; release versions track the plugin lifecycle, not stabilised API promises.
 
+## 0.9.0
+
+- Explicit readable-subset migration: read-only `inventory` distinguishes the official old-format refusal from errors, and `select` freezes user-chosen IDs. Selected inspect/adopt/verify checks the entire inventory for drift, preserves original logs/old-mode sources and reports selected completion with excluded rows pending. The whole-inventory default stays fail-closed; see the bilingual command and AI-prompt guide.
+
+- **Major default-mode change:** new root sessions default to `always`, with no Guard T0 log writes and protection from the first real input. Existing sessions retain their pre-upgrade effective mode via verified write-once bindings. Prepare old-mode inventory before upgrade and use the packaged inspect/adopt/verify migration flow; mixed cohorts need exact mappings. Unknown, damaged or conflicting bindings refuse certification. Explicit configuration selects new root sessions; persisted off/on stays effective. Policy remains `standard`, with no automatic authority or certificate grant.
+- Per-session adoption preserves the old replay epoch and valid certificates without rewriting history or re-signing. Fresh restore reads the binding on every sync; deletion or replacement invalidates cached certification. Forks inherit the verified parent mode and the official host's exact inherited cut. See [migration and rollback](docs/ACTIVATION_MIGRATION.md) for partial recovery and storage capability limits.
+- Repeated session syncs reuse proofs of fully frozen event subtrees, avoiding another recursive walk of unchanged history after an append. Mutable, accessor-backed, cyclic and unfinished graphs stay ineligible for reuse; Goal, private-ledger and host-sensitive decisions retain their fresh checks. Desktop audits share ASAR indexes and verified bytes only within one audit operation. These reduce component work; they do not establish faster history-window opening or UI end-to-end latency.
+- Adds a read-only local-history measurement script that reports anonymous per-session read, decompression, JSON parsing and pure Guard-fold timings. It inventories historical log generations without migrating or certifying them and excludes runtime migration, private-ledger, host audits, IPC and rendering.
+
 ## 0.8.4
 
 - The official Desktop app can now coexist with the official plugin market (`dshmarket`). Earlier versions refused any Desktop profile whose bundle list carried the market — the pre-install check rejected it as a bundle conflict and the installed/runtime check misreported it as an unbound plugin. The market is now treated like any other third-party profile plugin on Desktop. Official profile identity, Guard binding, the Headless bundle conflict, implementation byte and route audits, and host-lock digests are unchanged and keep failing closed.

package/CHANGELOG.zh-CN.md

@@ -2,6 +2,15 @@
 
 本项目的重要变化记录在这里。项目仍处于 1.0 之前；版本号跟踪插件生命周期，不代表 API 已稳定。
 
+## 0.9.0
+
+- 新增显式可读子集迁移：只读 inventory 区分官方旧格式拒绝与其他异常，select 冻结用户选择的 ID。子集 inspect/adopt/verify 核对全库变化，保留原日志/旧模式来源，分别报告选中行完成及排除行 pending。整库默认仍 fail-closed；中英说明提供命令、恢复方案和 AI 提示词。
+
+- **重大默认模式变化：**新建根会话默认 `always`，首条真实输入前 Guard 不追加事件，从该输入开始保护。旧会话通过核验后的不可覆盖绑定保留升级前有效模式。升级前准备旧模式清点，再使用随包提供的 inspect/adopt/verify 迁移入口；混合来源需要精确会话映射。未知、损坏或冲突的绑定不能认证。显式配置选择新建根会话的初始模式，持久化 off/on 继续有效。策略仍为 `standard`，不自动授予权限或签发证书。
+- 逐会话 adoption 保留旧重放 epoch 和有效证书，不改写历史或重签。每次 sync 新鲜读取绑定；删除或替换使缓存认证失效。fork 保留核验过的父模式及官方宿主提供的精确继承 cut。[迁移与回退说明](docs/ACTIVATION_MIGRATION.md)列出部分恢复及存储能力边界。
+- 重复同步会话时复用已完整证明冻结的事件子树，追加事件后不再递归检查未变的旧历史。可变、访问器、循环及未完成证明的图仍不能复用；Goal、私有账本和宿主敏感决策继续读取所需的新鲜状态。Desktop 审计只在单次操作内共享 ASAR 索引和已验证字节。这些改动减少组件工作量，尚不能证明历史窗口打开更快或界面端到端延迟下降。
+- 新增只读本地历史测量脚本，以匿名会话报告读取、解压、JSON 解析和纯 Guard 重放耗时。历史日志代际只做清点，不迁移或认证；计时不含运行时迁移、私有账本、宿主审计、IPC 或界面渲染。
+
 ## 0.8.4
 
 - 官方 Desktop 应用现在可以与官方插件市场（`dshmarket`）共存。更早的版本会拒绝 bundles 中带有市场的任何 Desktop profile——预安装检查将其报为 bundle 冲突，已安装/运行时检查则误报为插件未绑定。现在市场在 Desktop 上与其他普通第三方 profile 插件同等对待。官方 profile 身份、Guard 绑定、Headless bundle 冲突、实现字节与路由审计以及宿主锁摘要全部保持不变并继续 fail closed。

package/README.md

@@ -4,16 +4,21 @@
 
 An add-on for DeepSeek Harness (DSH) that keeps a task's requirements and checks them before the task is marked complete. It restores the same checklist after a resumed session and accepts only matching saved tool results as evidence.
 
-> **0.8.4 requires DSH `>=0.2.0-rc.2` and supports the official Desktop app.** Stop the host, upgrade DSH and install Guard, then run the host-lock tool's `inspect`, `inject` and `verify-dump` commands for each profile before starting it when needed. For the Desktop app, pass `--profile desktop` with the app archive as the runtime root. These commands bind the installed packages and their verified routes; installing Guard does not rebuild the lock. The tested host baseline is DSH `0.2.0-rc.2` with Cordis `4.0.4`; later versions must pass the same identity and adapter checks. See [compatibility](docs/COMPATIBILITY.md) for version admission, rebinding and native-evidence limits.
+> **0.9.0 requires DSH `>=0.2.0-rc.2` and supports the official Desktop app.** For an existing installation, stop the relevant writers and preserve the old installed package, effective modes and frozen session inventory **before replacing DSH or Guard**; use the [prepared-candidate migration toolkit](docs/ACTIVATION_MIGRATION.md). Then upgrade/install, rebuild each profile's host lock, and complete old-session `adopt` and `verify` **before starting the host**. A fresh installation with no old Guard sessions needs installation and host-lock checks, with no old-mode adoption. Desktop uses `--profile desktop` with the app archive as runtime root. Installing does not rebuild the lock. The tested host baseline is DSH `0.2.0-rc.2` with Cordis `4.0.4`; later versions must pass the same identity and adapter checks. See [compatibility](docs/COMPATIBILITY.md) for qualification and native-evidence limits.
 
 ![Task-contract clauses and bounded evidence pass through a checkpoint before a completion certificate is issued](assets/social/completion-guard-hero.png)
 
 ## Quick start
 
-Stop the host, upgrade to DSH `0.2.0-rc.2` or later, then install Guard in the profile you want to protect:
+Choose the applicable path before running an installation command:
+
+- **Fresh installation, no old Guard sessions:** stop the host, upgrade to DSH `0.2.0-rc.2` or later, install Guard below, and rebuild the host lock before starting.
+- **Existing installation:** first stop the relevant writers and preserve the old installed package and effective mode sources; prepare and freeze the old-session inventory/receipt using the [migration guide](docs/ACTIVATION_MIGRATION.md). Do this before replacing DSH or Guard. Then install below and rebuild the host lock. Adopt and verify the frozen old-session receipt while the host is still stopped, before starting it. Unknown sources remain pending; do not substitute the upgraded default for an old mode.
+
+Install in the profile you want to protect after completing the applicable preparation:
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.8.4
+dsh plugin --profile web add dsh-completion-guard@0.9.0
 ```
 
 **Keep the host stopped while upgrading and checking the installed graph below.** The lock records the package versions and installation directories DSH actually uses. A lock generated before an upgrade describes the old packages and will fail against the new runtime. `inject` writes to `<profile>/cordis.patch.yml`, so back up that file first.
@@ -34,14 +39,13 @@ On Windows, run the same three subcommands through `dsh-completion-guard-host-lo
 
 For Desktop, install through the app's bundled CLI and bind `--profile desktop` to its `app.asar` and actual profile directory. Its CLI does not offer `--dump-config`; use Guard's `dump-desktop` to compose the configuration before readback. Follow the [Desktop upgrade steps](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile). The official plugin market (`dshmarket`) can be installed alongside Guard in the Desktop profile; after installing or removing it, rebuild the Desktop lock with the full four-step flow (`inspect`, `inject`, a newly generated `dump-desktop` output, and `verify-dump` on that new output).
 
-When ready to use Guard, start DSH Web, open a session, and enable it:
+For an existing installation, complete the migration guide’s `adopt` and `verify` using the frozen old receipt now, while writers remain stopped. Host-lock verification does not perform mode adoption. After both checks pass—or after the installation/lock checks for a fresh installation—start DSH Web, open a session, and check its status:
 
 ```text
-/context-guard on
 /context-guard status
 ```
 
-Activation is opt-in by default. `status` shows whether the Guard is on, its startup phase (`armed` means waiting for your first message), the active policy tier, how many checks remain, and a summary of why the rest are open. `off` stops protection for the current session without deleting its history. `clear` closes the current checklist while keeping prohibitions. `diagnose` explains why a completion check passed or failed. `migration` reports which rule set the session is under and what an upgrade or rollback would mean. `release` reports an explicitly adopted release contract, its coverage, and anything in flight.
+New root sessions default to `always`: protection starts with the first real user message. `status` shows whether the Guard is on, its startup phase (`armed` means waiting for your first message), the active policy tier, how many checks remain, and a summary of why the rest are open. `off` stops protection for the current session without deleting its history. `clear` closes the current checklist while keeping prohibitions. `diagnose` explains why a completion check passed or failed. `migration` reports which rule set the session is under and what an upgrade or rollback would mean. `release` reports an explicitly adopted release contract, its coverage, and anything in flight.
 
 ### Ordinary work
 
@@ -59,7 +63,7 @@ The ordinary `context_guard_action` and `context_guard_evidence` tools from 0.6.
 
 ## Status and compatibility
 
-Version 0.8.4 admits **DSH `>=0.2.0-rc.2`** without an upper version limit, and supports the official Desktop app as an independent profile (`desktop`): the app-owned `dsh-profile-desktop` profile is identified by its own name, its bundled graph is read in place from the signed `app.asar`, and its installed bytes are verified against the published tarballs. Cordis has an independent `>=4.0.4` peer range and must pass its adapter qualification. The published `0.2.0-rc.2` 46-package graph is the reviewed baseline (the rc.1 graph remains historical evidence); a newer mixed-version graph can receive its own registry-backed lock when the consumed implementations qualify. Changed Session/API implementations run a finite contract probe; incompatible behavior reports a qualification failure, and an old certificate cannot transfer to the new lock. Exact-artifact macOS/Windows native acceptance and future-version native evidence remain separate; Desktop backend, graphical-shell and real-model results are recorded separately for each exact artifact.
+Version 0.9.0 admits **DSH `>=0.2.0-rc.2`** without an upper version limit, and supports the official Desktop app as an independent profile (`desktop`): the app-owned `dsh-profile-desktop` profile is identified by its own name, its bundled graph is read in place from the signed `app.asar`, and its installed bytes are verified against the published tarballs. Cordis has an independent `>=4.0.4` peer range and must pass its adapter qualification. The published `0.2.0-rc.2` 46-package graph is the reviewed baseline (the rc.1 graph remains historical evidence); a newer mixed-version graph can receive its own registry-backed lock when the consumed implementations qualify. Changed Session/API implementations run a finite contract probe; incompatible behavior reports a qualification failure, and an old certificate cannot transfer to the new lock. Exact-artifact macOS/Windows native acceptance and future-version native evidence remain separate; Desktop backend, graphical-shell and real-model results are recorded separately for each exact artifact.
 
 After upgrading, inspect, inject and verify the new host lock, then start the profile when needed; follow the [host-lock upgrade guide](docs/HOST_LOCK_UPGRADE.md). DSH migrates old sessions to V4. Guard retains old ledgers and certificates without re-signing them or promoting their old identity to current authority. Goal remains optional; installing the host does not imply it is enabled.
 
@@ -77,12 +81,18 @@ The project was renamed from `dsh-context-guard` on 2026-08-29; its internal bun
 
 Context Guard has two activation modes:
 
-- `opt-in` (default): protection is off when a session starts. Run `/context-guard on` in that session to turn it on, and `/context-guard off` to turn it off again. This changes only the current session.
-- `always`: DSH sessions are protected automatically from the first real message. A brand-new session stays completely empty — the Guard writes nothing into it — so you can still pick the DSH session mode (standard, minimal, or a custom preset) before sending anything. The moment your first real message enters a step, protection begins in that same step and ahead of your message: the first task, including its first file changes, is covered. A first message that only carries an image or an attachment starts protection too and leaves an unresolved asset item until its meaning is clarified; a blank message starts nothing. Running `/context-guard off` turns protection off for that session until you run `on` again.
+- `always` (default and recommended for new root sessions): Newly created root DSH sessions are protected automatically from the first real message. Before the first real input, Guard adds no events to the session; DSH may write its own initialization events. You can still pick the DSH session mode (standard, minimal, or a custom preset) before sending anything. The moment your first real message enters a step, protection begins in that same step and ahead of your message: the first task, including its first file changes, is covered. A first message that only carries an image or an attachment starts protection too and leaves an unresolved asset item until its meaning is clarified; a blank message starts nothing. Running `/context-guard off` turns protection off for that session until you run `on` again.
+- `opt-in` (explicit choice): protection is off when a session starts. Run `/context-guard on` in that session to turn it on, and `/context-guard off` to turn it off again. This changes only the current session.
+
+**0.9.0 changes the default for new sessions to `always`. Existing sessions retain their pre-upgrade effective mode through a verified, immutable per-session binding.** Before upgrading, stop the relevant session writers and prepare the old-mode inventory and receipt using the [inspect/adopt/verify migration flow](docs/ACTIVATION_MIGRATION.md). This includes empty old sessions. Shared inventories with conflicting profile modes require an exact per-session mapping; Guard does not guess from message count, timestamps or a recorded `on`.
+
+If the official reader refuses an old format, preserve the raw log and old-mode source. The [explicit readable-subset flow](docs/ACTIVATION_MIGRATION.md) adds `inventory` and `select`, then carries `--selection` through inspect/adopt/verify. It binds the entire inventory while migrating only user-chosen readable IDs; `selected_complete` leaves every exclusion visibly pending and never means whole-inventory completion. The guide includes commands, recovery steps and copyable AI prompts.
+
+Restoring a bound session uses that mode even when a profile's default changes. A contradictory explicit `activation` setting reports `activation_mode_conflict`; missing or damaged bindings prevent certification and provide a named diagnosis. Restore does not create a replacement. A verified migration receipt can adopt a missing old binding without changing the saved log or re-signing certificates. `/context-guard off` and `on` retain their persisted meaning; `standard` policy and execution/publication authority are unchanged. To choose another initial mode, create a new root session; to roll back, preserve the bindings and old receipt and follow the migration guide.
 
 These modes only control Guard protection. They are not the DSH session mode (for example, the standard or minimal mode) that a session starts with. Because the Guard no longer writes into sessions before the first message, a session's DSH mode can be selected while the session is still new. `/context-guard on` and `/context-guard off` turn Guard protection on or off; they never change the DSH session mode.
 
-To make DSH sessions start with protection on, set `activation: always` on the existing `context-guard` entry in your profile’s `cordis.patch.yml`. Preserve its injected host-lock fields; the snippet below shows the field to change, not a replacement for the complete configuration:
+New root sessions in profiles that omit `activation` use `always`. Existing bindings remain authoritative. To change a profile that explicitly selects `opt-in`, set `activation: always` on the existing `context-guard` entry in your profile’s `cordis.patch.yml`. Preserve its injected host-lock fields; the snippet below shows the field to change, not a replacement for the complete configuration:
 
 ```yaml
 - id: context-guard
@@ -106,7 +116,7 @@ If you set a custom `DSH_HOME`, use that directory instead of `$HOME/.dsh` or `%
 
 You can also paste this prompt into DSH and let it make the change:
 
-> Set `dsh-completion-guard` to `always` mode. Find the `cordis.patch.yml` used by the way I am currently running DSH (Web, Headless or Desktop), back it up first, and only set `activation: always` on the entry with `id: context-guard`. Do not change any other settings or restart DSH. When finished, show me the file path and the exact diff.
+> Set the default for new root sessions in `dsh-completion-guard` to `always` mode. Preserve existing session bindings. Find the `cordis.patch.yml` used by the way I am currently running DSH (Web, Headless or Desktop), back it up first, and only set `activation: always` on the entry with `id: context-guard`. Do not change any other settings or restart DSH. When finished, show me the file path and the exact diff.
 
 After the change, restart DSH.
 

package/README.zh-CN.md

@@ -4,16 +4,23 @@
 
 面向 DeepSeek Harness（DSH）的任务保护插件。它保存任务要求，并在任务标记完成前逐项核对；会话恢复后仍使用同一份检查表，只有匹配的已保存工具结果才能作为证据。
 
-> **0.8.4 要求 DSH `>=0.2.0-rc.2`，并支持官方 Desktop 应用。** 请先停止宿主、升级 DSH 并安装 Guard，再为每个 Profile 执行宿主锁工具的 `inspect`、`inject` 和 `verify-dump`，最后按需启动该 Profile。对 Desktop 应用请传入 `--profile desktop`，并以应用归档作为 runtime root。这些命令绑定实际安装包及其经过验证的路由；安装 Guard 本身不会重建锁。已测试的宿主基线是 DSH `0.2.0-rc.2`、Cordis `4.0.4`；较新版本仍需通过身份和适配契约检查。版本准入、重绑及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
+> **0.9.0 要求 DSH `>=0.2.0-rc.2`，并支持官方 Desktop 应用。** 已有安装须先停止相关写者，在**更换 DSH 或 Guard 前**保存旧安装包、有效模式来源及冻结会话清点，使用[独立准备的候选迁移工具](docs/ACTIVATION_MIGRATION.md)。随后升级安装、重建各 profile 宿主锁，并在**启动宿主前**完成旧会话的 `adopt` 和 `verify`。没有旧 Guard 会话的全新安装只需安装及宿主锁检查，不需旧模式 adoption。Desktop 使用 `--profile desktop`，以应用归档为 runtime root；安装本身不重建锁。已测试的宿主基线是 DSH `0.2.0-rc.2`、Cordis `4.0.4`；较新版本仍须通过身份和适配契约检查。资格及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
+
+官方读取器拒绝旧格式时，保留原日志和旧模式来源，按[显式可读子集方案](docs/ACTIVATION_MIGRATION.md)先 inventory、再由用户选择 ID 并 select，让 --selection 贯穿 inspect/adopt/verify。工具核对全库变化，只迁移用户选中的可读项；selected_complete 保留全部排除项为 pending，不代表整库完成。说明中提供真实命令、恢复步骤和可复制 AI 提示词。
 
 ![任务合同条款与有界证据通过 checkpoint 匹配后签发完成证书](assets/social/completion-guard-hero.png)
 
 ## 快速开始
 
-先停止宿主并升级到 DSH `0.2.0-rc.2` 或更高版本，再把 Guard 安装到需要保护的 Profile：
+执行安装命令前，先选择对应流程：
+
+- **全新安装，没有旧 Guard 会话：**停止宿主，升级到 DSH `0.2.0-rc.2` 或更高版本，按下方安装 Guard，再重建宿主锁，最后启动。
+- **已有安装：**先停止相关写者，保存旧安装包及有效模式来源，按[迁移说明](docs/ACTIVATION_MIGRATION.md)准备并冻结旧会话清点与收据。这一步必须在更换 DSH 或 Guard 前完成。随后按下方安装、重建宿主锁；保持宿主停止，用冻结旧收据完成 `adopt` 和 `verify`，再启动。未知来源保持 pending，不能用升级后的新缺省替代旧模式。
+
+完成对应准备后，再把 Guard 安装到需要保护的 Profile：
 
 ```sh
-dsh plugin --profile web add dsh-completion-guard@0.8.4
+dsh plugin --profile web add dsh-completion-guard@0.9.0
 ```
 
 **升级和执行下面的安装图检查时，保持宿主停止。** 宿主锁记录 DSH 实际使用的包版本和安装目录；如果升级前就生成锁，新运行时会因包版本不匹配而拒绝它。`inject` 会修改 `<profile>/cordis.patch.yml`，请先备份该文件。
@@ -34,14 +41,13 @@ Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard
 
 Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应用 `app.asar` 和实际 profile 路径建立宿主锁。它的 CLI 不提供 `--dump-config`，请用 Guard 的 `dump-desktop` 生成组合配置再回读；见[Desktop 升级步骤](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile)。官方插件市场（`dshmarket`）现在可以在 Desktop profile 中与 Guard 共存；安装或移除市场后，请按完整四步流程重建 Desktop 锁（`inspect`、`inject`、用 `dump-desktop` 新生成的组合配置、以及对新配置执行的 `verify-dump`）。
 
-需要使用时，再启动 DSH Web，打开会话并启用 Guard：
+已有安装请先按迁移说明，用冻结旧收据完成 `adopt` 和 `verify`，期间保持写者停止；宿主锁核验不执行模式 adoption。两项核验通过后（全新安装则在安装及宿主锁核验通过后），再启动 DSH Web，打开会话并查看 Guard 状态：
 
 ```text
-/context-guard on
 /context-guard status
 ```
 
-默认采用 opt-in。`status` 显示 Guard 是否开启、启动阶段（`armed` 表示已就绪、等待你的第一条消息）以及还有多少检查项。`off` 停止保护当前会话，但不删除历史。`clear` 关闭当前待办，同时保留禁止项。`diagnose` 说明完成检查为什么通过或失败；`migration` 报告当前会话适用哪套规则、升级与回滚分别意味着什么；`release` 报告显式发布契约、其覆盖范围以及仍在执行中的操作。
+新建根会话默认采用 `always`，从第一条真实用户消息开始保护。`status` 显示 Guard 是否开启、启动阶段（`armed` 表示已就绪、等待你的第一条消息）以及还有多少检查项。`off` 停止保护当前会话，但不删除历史。`clear` 关闭当前待办，同时保留禁止项。`diagnose` 说明完成检查为什么通过或失败；`migration` 报告当前会话适用哪套规则、升级与回滚分别意味着什么；`release` 报告显式发布契约、其覆盖范围以及仍在执行中的操作。
 
 ### 普通工作
 
@@ -59,7 +65,7 @@ Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应
 
 ## 状态与兼容性
 
-0.8.4 的版本准入范围是 **DSH `>=0.2.0-rc.2`**，没有版本上限，并支持官方 Desktop 应用的独立 profile（`desktop`）：应用自有的 `dsh-profile-desktop` 按名称识别，其内置依赖图从已签名的 `app.asar` 原位读取，安装字节按发布 tarball 逐文件核验。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.2` 46 包依赖图为已审查基线（rc.1 图保留为历史证据）；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。最终制品的 macOS/Windows 原生验收、未来版本原生证据与 Desktop 原生验收仍须分别建立。
+0.9.0 的版本准入范围是 **DSH `>=0.2.0-rc.2`**，没有版本上限，并支持官方 Desktop 应用的独立 profile（`desktop`）：应用自有的 `dsh-profile-desktop` 按名称识别，其内置依赖图从已签名的 `app.asar` 原位读取，安装字节按发布 tarball 逐文件核验。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.2` 46 包依赖图为已审查基线（rc.1 图保留为历史证据）；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。最终制品的 macOS/Windows 原生验收、未来版本原生证据与 Desktop 原生验收仍须分别建立。
 
 升级后重新检查、注入并验证 host-lock，再按需启动对应 Profile，步骤见[宿主锁升级](docs/HOST_LOCK_UPGRADE.md)。旧会话由 DSH 迁移为 V4；Guard 保留旧 ledger 和证书，但不会重签或把旧身份升级为当前权限。Goal 为可选能力，宿主安装不代表它已启用。
 
@@ -77,12 +83,16 @@ Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应
 
 Context Guard 有两种启用模式：
 
-- `opt-in`（默认）：打开会话时不会自动保护。你需要在这个会话中执行 `/context-guard on` 才会启用；执行 `/context-guard off` 可以再次关闭。开关只影响当前会话。
-- `always`：DSH 会话从第一条真实消息开始自动保护。全新会话保持完全空白——Guard 不写入任何内容——因此你仍然可以在发送任何内容之前选择 DSH 会话模式（standard、minimal 或自定义 preset）。第一条真实消息进入执行步骤的那一刻，保护在同一步骤内、且位于该消息之前开始：第一个任务连同它的第一次文件修改都在覆盖范围内。首条消息只有图片或附件时同样开始保护，并保留待解释的资产项；纯空白消息不启动任何内容。在某个会话中执行 `/context-guard off` 后，该会话关闭保护，直到再次执行 `on`。
+- `always`（新建根会话默认，推荐）：新建 DSH 根会话从第一条真实消息开始自动保护。首条真实输入前，Guard 不向会话追加事件；DSH 仍可能写入自身的初始化事件。你仍然可以在发送任何内容之前选择 DSH 会话模式（standard、minimal 或自定义 preset）。第一条真实消息进入执行步骤的那一刻，保护在同一步骤内、且位于该消息之前开始：第一个任务连同它的第一次文件修改都在覆盖范围内。首条消息只有图片或附件时同样开始保护，并保留待解释的资产项；纯空白消息不启动任何内容。在某个会话中执行 `/context-guard off` 后，该会话关闭保护，直到再次执行 `on`。
+- `opt-in`（显式选择）：打开会话时不会自动保护。你需要在这个会话中执行 `/context-guard on` 才会启用；执行 `/context-guard off` 可以再次关闭。开关只影响当前会话。
+
+**0.9.0 将新会话的默认模式改为 `always`；旧会话通过核验后的不可覆盖绑定保留升级前有效模式。** 升级前请停止相关会话写者，按[inspect/adopt/verify 迁移说明](docs/ACTIVATION_MIGRATION.md)准备旧模式清点与冻结收据，旧空会话也要包含。共享库存中不同 profile 的旧模式有冲突时，需要精确到会话的映射；Guard 不依据消息数量、时间戳或记录过的 `on` 猜测。
+
+恢复已有绑定的会话时，profile 缺省变化不改变它的模式。显式 `activation` 与绑定矛盾会报告 `activation_mode_conflict`；缺失或损坏的绑定不能认证，并给出具名诊断。恢复不会自行创建替代绑定；核验过的迁移收据可以受控补建同一旧模式，不修改已保存日志，也不重签证书。持久化的 `/context-guard off` 和 `on` 继续有效，`standard` 策略及执行、发布权限保持原合同。选择另一初始模式请新建根会话；回退时保留绑定和旧收据，按迁移说明操作。
 
 启用模式只控制 Guard 是否保护会话，不是 DSH 的会话模式（例如会话开始时所选的标准模式、极简模式）。Guard 不再在第一条消息之前写入任何内容，因此 DSH 会话模式可以在会话尚为新会话时选择。`/context-guard on` 和 `/context-guard off` 只负责开启或关闭 Guard 保护，不会改变 DSH 会话模式。
 
-如果希望 DSH 会话自动启用保护，请把实际 profile 的 `cordis.patch.yml` 中已有 `context-guard` 项设为 `activation: always`，保留已注入的宿主锁字段。下面的片段只显示要修改的字段，不用于替换整份配置：
+省略 `activation` 的 profile 新建根会话时采用 `always`；已有会话绑定仍具有优先权。若现有 profile 显式选择了 `opt-in`，请把实际 profile 的 `cordis.patch.yml` 中已有 `context-guard` 项设为 `activation: always`，保留已注入的宿主锁字段。下面的片段只显示要修改的字段，不用于替换整份配置：
 
 ```yaml
 - id: context-guard
@@ -106,7 +116,7 @@ DSH 的 Web 网页、Headless 终端和 Desktop 桌面应用使用独立配置
 
 不想手动改文件，也可以把下面这段话直接发给 DSH：
 
-> 请把 `dsh-completion-guard` 设为 `always` 模式。根据我当前使用 DSH 的方式（Web、Headless 或 Desktop），自动找到对应的 `cordis.patch.yml`，先备份该文件，只把 `id: context-guard` 这一项的 `activation` 设为 `always`，不要修改其他配置，也不要替我重启 DSH。完成后告诉我文件的绝对路径，并显示准确的修改内容。
+> 请把 `dsh-completion-guard` 新建根会话的默认模式设为 `always`，保留已有会话绑定。根据我当前使用 DSH 的方式（Web、Headless 或 Desktop），自动找到对应的 `cordis.patch.yml`，先备份该文件，只把 `id: context-guard` 这一项的 `activation` 设为 `always`，不要修改其他配置，也不要替我重启 DSH。完成后告诉我文件的绝对路径，并显示准确的修改内容。
 
 修改完成后，重启 DSH。
 

package/bin/dsh-completion-guard-activation.mjs

@@ -0,0 +1,95 @@
+#!/usr/bin/env node
+import { readFileSync, writeFileSync, realpathSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { pathToFileURL } from 'node:url'
+import { resolve } from 'node:path'
+import { homedir } from 'node:os'
+import { activationJson, activationCanonical, inspectActivationInventory, prepareActivationMigration,
+  readActivationMigrationReceipt, verifyMigrationInventory, adoptActivationReceipt, resolveActivationBindingsRoot,
+  scanActivationInventory, createActivationSelection, validateActivationSelection, activationSelectionPending,
+  prepareSelectedActivationMigration, verifySelectedMigrationInventory, isSelectedActivationReceipt } from '../dist/domain/index.js'
+
+const operation = process.argv[2]
+const common = ['--runtime-anchor', '--persistence-root', '--compression']
+const allowed = {
+  inventory: [...common, '--output'],
+  select: ['--inventory', '--include-file', '--output'],
+  inspect: [...common, '--prior-modes', '--output', '--selection'],
+  adopt: [...common, '--receipt', '--dsh-home', '--selection'],
+  verify: [...common, '--receipt', '--dsh-home', '--selection'],
+}
+const options = new Map()
+function option(name, optional = false) {
+  if (!options.has(name) && !optional) throw new Error(`missing ${name}`)
+  return options.get(name)
+}
+const readJson = path => activationJson(readFileSync(resolve(path), 'utf8'))
+function save(path, value) {
+  try { writeFileSync(resolve(path), activationCanonical(value) + '\n', { flag: 'wx', mode: 0o600 }) }
+  catch (error) { if (error?.code === 'EEXIST') throw new Error('activation_output_exists'); throw error }
+}
+const print = value => process.stdout.write(JSON.stringify(value) + '\n')
+async function main() {
+  if (!Object.hasOwn(allowed, operation)) throw new Error('activation_cli_usage')
+  for (let i = 3; i < process.argv.length; i += 2) {
+    const key = process.argv[i], value = process.argv[i + 1]
+    if (!allowed[operation].includes(key) || options.has(key) || !value || value.startsWith('--')) throw new Error('activation_cli_options_invalid')
+    options.set(key, value)
+  }
+  if (operation === 'select') {
+    const selection = createActivationSelection(readJson(option('--inventory')), readJson(option('--include-file')))
+    save(option('--output'), selection)
+    print({ status: 'selection_ready', includedCount: selection.include.length, selectionSha256: selection.sha256 })
+    return
+  }
+  const selection = option('--selection', true) ? validateActivationSelection(readJson(option('--selection'))) : undefined
+  const receipt = ['adopt', 'verify'].includes(operation) ? readActivationMigrationReceipt(resolve(option('--receipt'))) : undefined
+  if (receipt && !selection && isSelectedActivationReceipt(receipt)) throw new Error('activation_selection_required')
+  const anchor = realpathSync(option('--runtime-anchor'))
+  const require = createRequire(anchor)
+  const { Context } = await import(pathToFileURL(require.resolve('@deepseek-ai/cordis')).href)
+  const backendPath = require.resolve('@deepseek-ai/dsh-session-persistence-jsonl')
+  const { default: Jsonl } = await import(pathToFileURL(backendPath).href)
+  // Resolve the same dependency instance used by this physical JSONL backend.
+  const { SessionFormatUnsupportedError } = await import(pathToFileURL(createRequire(backendPath).resolve('@deepseek-ai/dsh-session-persistence')).href)
+  const ctx = new Context()
+  const compression = option('--compression', true)
+  if (compression && !['none', 'zstd'].includes(compression)) throw new Error('invalid compression')
+  const backend = ctx.plugin(Jsonl, { root: resolve(option('--persistence-root')), ...(compression ? { compression } : {}) })
+  try {
+    await backend.await()
+    const snapshot = operation === 'inventory' || selection
+      ? await scanActivationInventory(ctx.sessionPersistence, error => error instanceof SessionFormatUnsupportedError) : undefined
+    if (operation === 'inventory') {
+      save(option('--output'), snapshot)
+      print({ status: 'inventory_scanned', totalCount: snapshot.rows.length,
+        readableCount: snapshot.rows.filter(row => row.status === 'readable').length,
+        unsupportedCount: snapshot.rows.filter(row => row.status === 'unsupported').length, inventorySha256: snapshot.sha256 })
+      return
+    }
+    const inventory = selection ? undefined : await inspectActivationInventory(ctx.sessionPersistence)
+    const scope = selection ? { scope: 'receipt_selected', wholeInventoryStatus: 'not_claimed',
+      includedCount: selection.include.length, inventoryCount: snapshot.rows.length,
+      pending: activationSelectionPending(snapshot, selection) } : {}
+    if (operation === 'inspect') {
+      const prior = readJson(option('--prior-modes'))
+      const result = selection ? prepareSelectedActivationMigration(snapshot, selection, prior) : prepareActivationMigration(inventory, prior)
+      if (result.receipt) save(option('--output'), result.receipt)
+      print({ ...result, receipt: undefined, ...scope, count: selection ? selection.include.length : inventory.length,
+        ...(result.receipt ? { receiptSha256: result.receipt.sha256 } : {}) })
+      if (result.status !== 'ready') process.exitCode = 2
+    } else {
+      if (selection) verifySelectedMigrationInventory(receipt, snapshot, selection)
+      else verifyMigrationInventory(receipt, inventory)
+      const root = resolveActivationBindingsRoot(option('--dsh-home', true) ?? process.env.DSH_HOME, homedir())
+      const result = adoptActivationReceipt(root, receipt, operation === 'verify')
+      print({ ...result, ...scope, status: selection ? (result.status === 'complete' ? 'selected_complete' : 'selected_partial') : result.status })
+      if (result.status !== 'complete') process.exitCode = 2
+    }
+  } finally { await ctx.fiber.dispose() }
+}
+main().catch(error => {
+  const message = error instanceof Error && /^(?:activation_[a-z_]+|missing --[a-z-]+|invalid compression)$/u.test(error.message)
+    ? error.message : 'activation_cli_failed'
+  process.stderr.write(JSON.stringify({ status: 'unavailable', reason_code: message }) + '\n'); process.exitCode = 1
+})

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as PROOF_KINDS_V2, $a as ExternalOperation, $i as AuthorityBlock, $n as GitCommandAccepted, $o as RemovalOutcomeReport, $r as PROTOCOL_V4_NOTICE, $s as ACTION_MANIFEST, $t as AuditedPackageExpectation, A as SessionApiError, Aa as BoundaryRequest, Ai as HostToolSurface, An as DesktopAppRuntime, Ar as ToolSubject, As as isExecutableItem, At as validateProofManifest, B as V6_ORDINARY_COMPLETION_RULE, Ba as BoundaryDisposition, Bi as HOST_VALIDATED_VERSIONS, Bn as HostRebindTrust, Bo as rebindResponse, Br as DiagnosisNextAction, Bs as maskQuotedSpans, Bt as OperationVerbEntry, C as latestRootInstruction, Ca as extractMethod, Cc as canonicalizePath, Ci as HostCohortSelection, Cn as resolveInstalledHostLock, Co as WaitAuthorization, Cr as parsePwshCommand, Cs as governedClauseRestrictsExecution, Ct as proofHostSurfacesOf, D as v6TestPredicate, Da as BOUNDARY_RECORD_PREFIX, Dc as sanitizeUrl, Di as HostLockStatus, Dn as DESKTOP_IDENTITY_FACTS, Dr as NATIVE_GIT_ROOT_PARENT_OID, Ds as interpretClause, Dt as scopeCoverageDigest, E as testOutcomePredicate, Ea as segmentClauses, Ec as sanitizeClauseText, Ei as HostLockEvaluation, En as AsarIndex, Er as hasCurrentCertificate, Es as hasWorkPredicate, Et as requiredSubjectsOf, F as CLEANUP_CONDITION_RULE_SHORT, Fa as isCurrentAcceptedBoundary, Fi as evaluateHostCapability, Fn as readAsarIndex, Fo as confirmRebind, Fr as nativeGitParentOidVerified, Fs as isRestatement, Ft as evidenceMatchesItem, G as closingHint, Ga as DeriveResult, Gi as ParsedHostVersion, Gn as hostTrustDigest, Go as DEPENDENCY_FREE_ONLY_CONDITION, Gr as deriveItemDiagnosis, Gs as qualificationOfClause, Gt as FirstStepPreviewInput, H as V6_ORDINARY_COMPLETION_RULE_SHORT, Ha as DeferAuthorization, Hi as HostVersionStatus, Hn as HostTrustError, Ho as CapabilityFact, Hr as TaskKind, Hs as opensConditionLead, Ht as ClaimedMessage, I as DEFAULT_RECOVERY_CHAR_BUDGET, Ia as qualifyBoundary, Ii as evaluateHostLock, In as readDesktopAppRuntime, Io as proposeRebind, Ir as persistedToolResultStatus, Is as itemHoldsExecutionAuthority, It as isVerifyingCapability, J as recoveryTitle, Ja as EvidenceBinding, Ji as compareHostVersions, Jn as registryArchiveFiles, Jo as DerivedProcessFacts, Jr as nativeFileTwoRole, Js as restatedContentOf, Jt as firstStepGuidance, K as openItems, Ka as DeriveScope, Ki as SUPPORTED_HOST_RANGE, Kn as parseHostTrust, Ko as DeclaredOperationResult, Kr as evidenceAvailabilityReason, Ks as questionHeadsClause, Kt as LifecyclePhase, L as MIN_RECOVERY_CHAR_BUDGET, La as AssetInterpretationFact, Li as evaluateToolSurfaceCapability, Ln as readDesktopDependency, Lo as proposeRebindOutcome, Lr as shellReadbackOutcome, Ls as kindOfScope, Lt as COMMAND_SURFACE_MANIFEST, M as snapshotSessionEvents, Ma as GoalBoundaryAccess, Mi as bindLiveGoalCapability, Mn as auditDesktopInstalledImplementation, Mo as ProposeOutcome, Mr as extractTextContent, Ms as isInformationalFragment, Mt as EvidenceFacetCoverage, N as CLEANUP_CONDITION_RULE, Na as availableBoundaryQualifications, Ni as evaluateExternalWaitCapability, Nn as hasDesktopImporterState, No as RebindArgs, Nr as extractToolSubject, Ns as isOpenObligation, Nt as bindingSatisfies, O as SESSION_API_UNSUPPORTED, Oa as BoundaryEffectuation, Oc as sha256, Oi as HostPlatform, On as DESKTOP_PROFILE_PACKAGE_NAME, Or as ToolCallInput, Os as interpretMessage, Ot as sessionQuery, P as CLEANUP_CONDITION_RULE_COMPACT, Pa as effectuateBoundary, Pi as evaluateGraphDerivedHostLock, Pn as readAsarFile, Po as RebindProposal, Pr as isDeterministicCheck, Ps as isQuestionScopeNeedingReview, Pt as evidenceCoverage, Q as PROOF_KINDS, Qa as ExpectedTransition, Qi as currentContractDigest, Qn as GitAdapterAction, Qo as ProcessOutcomeReason, Qr as PROTOCOL_V3_NOTICE, Qs as verbIsNegated, Qt as ActiveProfileHostLock, R as RecoveryCause, Ra as AssetObligation, Ri as hostVersionFromPackages, Rn as readDesktopTargetGraph, Ro as proposeRebindV042, Rr as withDurability, Rs as legacyQuestionReadingIsInformational, Rt as CommandSurfaceManifest, S as latestAssistantText, Sa as extractArtifactPaths, Sc as validateActionTarget, Si as HostCohort, Sn as resolveDesktopProfileHostLock, So as VerificationContract, Sr as isRunExecutable, Ss as explanationHasActionResidue, St as proofEvidenceConstraints, T as progressFingerprint, Ta as isInformationalMessage, Tc as normalizeClause, Ti as HostLockContext, Tn as verifyComposedHostLockDump, To as createProjection, Tr as goalCompletionDenial, Ts as hasQuestionScope, Tt as proofV2Rejection, U as carriesCleanupCondition, Ua as DelegationRef, Ui as LATEST_TESTED_HOST_VERSION, Un as HostTrustedPackage, Uo as CapabilityGap, Ur as UnifiedItemDiagnosis, Us as opensWithDirective, Ut as FIRST_STEP_GUIDANCE, V as V6_ORDINARY_COMPLETION_RULE_COMPACT, Va as BoundaryQualificationKind, Vi as HostVersionDecision, Vn as HostTrustAcquisitionOptions, Vo as replayRebindResult, Vr as Repairability, Vs as namedActions, Vt as validateManifest, W as cleanupConditionFor, Wa as DeriveConfig, Wi as MIN_SUPPORTED_HOST_VERSION, Wn as acquireHostTrust, Wo as CapabilityRemedy, Wr as capabilityRemedyPhrase, Ws as presentExplanationHead, Wt as FirstStepInjection, X as v6CurrentRootBoundaries, Xa as EvidenceParseStatus, Xi as parseHostVersion, Xn as GIT_COMMAND_MANIFEST_IDS, Xo as ProcessExitStatus, Xr as CAPTURE_V042_NOTICE, Xs as splitTextFragments, Xt as lifecyclePhase, Y as renderRecoveryPacket, Ya as EvidenceOutcome, Yi as evaluateMinimumHostVersion, Yn as registryArchiveModules, Yo as OperationAttribution, Yr as relevantEvidence, Ys as semanticActionOfScope, Yt as firstStepGuidanceV6, Z as PROOF_CAPABILITY_MATRIX, Za as EvidenceRole, Zi as satisfiesSupportedHostRange, Zn as GIT_COMMAND_TEMPLATES, Zo as ProcessFactSource, Zr as DEFAULT_DELEGATION_TOOL_NAMES, Zs as statefulActionsOfScope, Zt as previewFirstStepInjection, _ as decideTurnBoundary, _a as ClauseSegment, _c as requestedTargetAuthorizesMutation, _i as HOST_COHORTS, _n as prepareActiveHostTrust, _o as TargetCaptureStatus, _r as CanonicalArgv, _s as actionVerbMatches, _t as createProofManifest, a as supersedeItem, aa as UserInteractionKind, ac as CERTIFICATE_VERSION_V2, ai as rootLocatorFlavor, an as auditedForegroundRenderers, ao as GuardItem, ar as GitPrestateCheck, as as removalIsComplete, at as ProofKindCapability, b as isRootPauseRequest, ba as classifyClause, bc as semanticActionFromText, bi as HostCapabilityId, bn as readActiveHostGraph, bo as TargetTuple, br as ShellParseStatus, bs as clauseIsGoverned, bt as proofDigest, c as CompletionDisposition, ca as CONFIRM_LINE_PATTERN, cc as STOP_PROTOCOL_VERSION, ci as ACTIVE_HOST_LAUNCHER_VERSION, cn as evaluateActiveHostLock, co as GuardOperation, cr as LinearCommitReadback, cs as DirectiveClass, ct as ProofManifestV2, d as NO_PROGRESS_TURNS_BEFORE_STOP, da as parseConfirmationMessage, dc as SemanticAction, di as DEFAULT_HOST_LOCK, dn as hostLockRowsFromComposedDump, do as MessageCoverage, dr as createGitPrestateEnvelope, ds as GRANTED_QUALIFICATION, dt as ProofSurface, ea as AuthorityBlockKind, ec as ACTION_MANIFEST_VERSION, ei as PROTOCOL_V5_NOTICE, en as HostProfileError, eo as GoalRef, er as GitCommandManifest, es as actionHasCertificationPath, et as PROOF_MANIFEST_DOMAIN_V2, f as TurnStoppingDecision, fa as CheckpointResult, fc as StatefulAction, fi as EXPECTED_HOST_PACKAGES, fn as injectActiveProfileHostLock, fo as NeedsReviewFact, fr as executeRevalidatedGitEffect, fs as InterpretOptions, ft as SessionQuery, g as currentActionBases, ga as CaptureScope, gc as requestedIdentityKey, gi as HOST_CAPABILITY_PACKAGE_GROUPS, gn as packageRowsFromPnpmLock, go as TargetCaptureReasonCode, gr as verifiedLinearCommitReadback, gs as ScopeInterpretation, gt as canonicalProjection, h as classifyCompletionClaim, ha as certifyCheckpoint, hc as isStatefulAction, hi as GOAL_HOST_PACKAGES, hn as packageRowsFromActiveGraph, ho as SourceSpan, hr as revalidateGitPrestate, hs as QualificationStatus, ht as bindProofV2ToProjection, i as projectCoreV2, ia as TaskIntent, ic as CERTIFICATE_VERSION, ii as legacyRecordsNeedingReview, in as auditedDefaultWorkdirProvider, io as GuardIntegrity, ir as GitEffectRunner, is as partialFailureOf, it as ProofKind, j as V4SessionLike, ja as GoalActivationState, ji as bindExecutableIdentity, jn as DesktopTargetGraph, jo as BoundedSource, jr as evidenceFromPersistedToolResult, js as isExplanationScope, jt as validateProofManifestV2, k as SESSION_EVENT_ENVELOPE_INVALID, ka as BoundaryQualification, ki as HostProfileKind, kn as DESKTOP_RUNTIME_PACKAGE_NAME, kr as ToolResultInput, ks as introducesActionClause, kt as sessionQueryV2, l as CurrentActionBasis, la as ParsedConfirmation, lc as STOP_PROTOCOL_VERSION_V2, li as AuditedExecutable, ln as evaluateConfiguredHostLock, lo as GuardProjection, lr as commitIndexSnapshotDigest, ls as Executee, lt as ProofObligation, m as assessmentOutcomePredicate, ma as bindingIndividuallyAccepted, mc as boundedArtifactChoiceMatches, mi as ExecutableIdentityBinding, mn as inspectTargetHostGraph, mo as PersistenceAuthorization, mr as parseGitCommandManifest, ms as QualificationReason, mt as bindProofToProjection, n as RC020_RC1_HOST_PACKAGES, na as authorityCaptureCounts, nc as ActionSpec, ni as applyUpgradeEligibility, nn as activeRendererModule, no as GuardCheckpoint, nr as GitCommandRejected, ns as capabilityConsequence, nt as PROOF_PROTOCOL_VERSION_V2, o as AssistantOutcomeObservation, oa as classifyTaskIntent, oc as SEMANTIC_ACTIONS, oi as ACTIVE_HOST_COHORT_ID, on as auditedHostImplementation, oo as GuardItemKind, or as GitPrestateEnvelope, os as removalIsPartiallyKnown, ot as ProofKindV2, p as assessmentAction, pa as RejectedBinding, pc as actionCompatible, pi as ExecutableIdentity, pn as inspectDesktopTargetGraph, po as NeedsReviewReason, pr as gitCommandMatchesTarget, ps as LEGACY_QUALIFICATION, pt as SessionQueryV2, q as recoveryDigest, qa as DerivedEnvelope, qi as SUPPORTED_HOST_VERSIONS, qn as qualifyHostTrust, qo as DependencyStatus, qr as itemDiagnosis, qs as reportingHeadGoverns, qt as claimedBatchHasRealRootInput, r as projectSessionCoreV2, ra as segmentAuthorityBlocks, rc as BOUNDED_ARTIFACT_TYPES, ri as deriveProjection, rn as auditedDefaultWorkdirHost, ro as GuardEvidence, rr as GitEffectExecution, rs as capabilityFactOf, rt as ProofHostSurface, s as CONTROL_RECORD_PREFIX, sa as classifyUserInteraction, sc as STATEFUL_ACTIONS, si as ACTIVE_HOST_COHORT_IDS, sn as combineHostPolicy, so as GuardItemStatus, sr as GitTargetIdentity, ss as AuthorityDisposition, st as ProofManifest, t as RC020_RC2_HOST_PACKAGES, ta as AuthorityKind, tc as ActionManifest, ti as PROTOCOL_V6_NOTICE, tn as TargetHostGraph, to as GuardBoundary, tr as GitCommandParseResult, ts as admissibleForRemoval, tt as PROOF_PROTOCOL_VERSION, u as NO_PROGRESS_RECORD_PREFIX, ua as isFrozenV042RebindResponse, uc as SUPPORTED_EVIDENCE_ADAPTERS, ui as BASE_HOST_PACKAGES, un as hostLockContextFromComposedDump, uo as HostStatus, ur as commitTreeSnapshotDigest, us as ExecutionQualification, ut as ProofObligationV2, v as decideTurnStopping, va as captureClause, vc as requestedTargetMatchesResolved, vi as HostAuditProvenance, vn as prepareDesktopHostTrust, vo as TargetSource, vr as CanonicalCommandSurface, vs as clarifiedSpanOf, vt as createProofManifestV2, w as observeAssistantOutcome, wa as extractOperation, wc as digestStrings, wi as HostCohortSelectionReason, wn as revalidateDesktopCoreLock, wo as WorkUnit, wr as parseShellCommand, ws as hasOrderedCoordination, wt as proofOperationMatches, x as isWholeTaskCompletionClaim, xa as environmentDefaultRepositoryTarget, xc as validateActionManifest, xi as HostCapabilityRequest, xn as resolveActiveProfileHostLock, xo as TargetValue, xr as canonicalArgvFromCommand, xs as clauseIsProtected, xt as proofDigestV2, y as decisionBoundaryKey, ya as captureItem, yc as semanticActionFromCommand, yi as HostCapabilityEvaluation, yn as prepareTargetHostTrust, yo as TargetSourceKind, yr as ParsedShell, ys as clauseAsksOwnQuestion, yt as proofCapabilityReport, z as RecoveryOptions, za as BindingActionClosure, zi as selectHostCohort, zn as writeDesktopRuntimeReceipt, zo as rebindAttemptKey, zr as CertificationSupport, zs as maskCodeSpans, zt as ManifestIssue } from "../index-BmTaAEkJ.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionApiError, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };
+import { $ as classifyCompletionClaim, $a as RejectedBinding, $c as actionCompatible, $i as ExecutableIdentity, $n as packageRowsFromActiveGraph, $o as NeedsReviewReason, $r as gitCommandMatchesTarget, $s as LEGACY_QUALIFICATION, $t as bindProofV2ToProjection, A as InitialActivation, Aa as MIN_SUPPORTED_HOST_VERSION, Ac as presentExplanationHead, Ai as capabilityRemedyPhrase, An as LifecyclePhase, Ao as DeriveConfig, Ar as acquireHostTrust, As as CapabilityRemedy, At as openItems, B as RC020_RC1_HOST_PACKAGES, Ba as AuthorityBlockKind, Bc as ACTION_MANIFEST_VERSION, Bi as PROTOCOL_V5_NOTICE, Bn as activeRendererModule, Bo as GoalRef, Br as GitCommandManifest, Bs as actionHasCertificationPath, Bt as PROOF_PROTOCOL_VERSION_V2, C as createActivationMigrationReceipt, Ca as evaluateToolSurfaceCapability, Cc as kindOfScope, Ci as shellReadbackOutcome, Cn as ManifestIssue, Co as AssetInterpretationFact, Cr as readDesktopDependency, Cs as proposeRebindOutcome, Ct as RecoveryOptions, D as resolveSessionActivation, Da as HostVersionDecision, Dc as namedActions, Di as Repairability, Dn as FIRST_STEP_GUIDANCE, Do as BoundaryQualificationKind, Dr as HostTrustAcquisitionOptions, Ds as replayRebindResult, Dt as carriesCleanupCondition, E as resolveActivationBindingsRoot, Ea as HOST_VALIDATED_VERSIONS, Ec as maskQuotedSpans, Ei as DiagnosisNextAction, En as ClaimedMessage, Eo as BoundaryDisposition, Er as HostRebindTrust, Es as rebindResponse, Et as V6_ORDINARY_COMPLETION_RULE_SHORT, F as activationDigest, Fa as evaluateMinimumHostVersion, Fc as semanticActionOfScope, Fi as relevantEvidence, Fn as previewFirstStepInjection, Fo as EvidenceOutcome, Fr as registryArchiveModules, Fs as OperationAttribution, Ft as PROOF_CAPABILITY_MATRIX, G as CONTROL_RECORD_PREFIX, Ga as UserInteractionKind, Gc as CERTIFICATE_VERSION_V2, Gi as rootLocatorFlavor, Gn as combineHostPolicy, Go as GuardItem, Gr as GitPrestateCheck, Gs as removalIsComplete, Gt as ProofManifest, H as projectCoreV2, Ha as authorityCaptureCounts, Hc as ActionSpec, Hi as applyUpgradeEligibility, Hn as auditedDefaultWorkdirProvider, Ho as GuardCheckpoint, Hr as GitCommandRejected, Hs as capabilityConsequence, Ht as ProofKind, I as activationJson, Ia as parseHostVersion, Ic as splitTextFragments, Ii as CAPTURE_V042_NOTICE, In as ActiveProfileHostLock, Io as EvidenceParseStatus, Ir as GIT_COMMAND_MANIFEST_IDS, Is as ProcessExitStatus, It as PROOF_KINDS, J as NO_PROGRESS_RECORD_PREFIX, Ja as CONFIRM_LINE_PATTERN, Jc as STOP_PROTOCOL_VERSION, Ji as ACTIVE_HOST_LAUNCHER_VERSION, Jn as hostLockContextFromComposedDump, Jo as GuardOperation, Jr as LinearCommitReadback, Js as DirectiveClass, Jt as ProofObligationV2, K as CompletionDisposition, Ka as classifyTaskIntent, Kc as SEMANTIC_ACTIONS, Ki as ACTIVE_HOST_COHORT_ID, Kn as evaluateActiveHostLock, Ko as GuardItemKind, Kr as GitPrestateEnvelope, Ks as removalIsPartiallyKnown, Kt as ProofManifestV2, L as sessionBirthIdentity, La as satisfiesSupportedHostRange, Lc as statefulActionsOfScope, Li as DEFAULT_DELEGATION_TOOL_NAMES, Ln as AuditedPackageExpectation, Lo as EvidenceRole, Lr as GIT_COMMAND_TEMPLATES, Ls as ProcessFactSource, Lt as PROOF_KINDS_V2, M as SessionActivationRead, Ma as SUPPORTED_HOST_RANGE, Mc as questionHeadsClause, Mi as evidenceAvailabilityReason, Mn as firstStepGuidance, Mo as DeriveScope, Mr as parseHostTrust, Ms as DeclaredOperationResult, Mt as recoveryTitle, N as SessionBirthIdentity, Na as SUPPORTED_HOST_VERSIONS, Nc as reportingHeadGoverns, Ni as itemDiagnosis, Nn as firstStepGuidanceV6, No as DerivedEnvelope, Nr as qualifyHostTrust, Ns as DependencyStatus, Nt as renderRecoveryPacket, O as validateActivationMigrationReceipt, Oa as HostVersionStatus, Oc as opensConditionLead, Oi as TaskKind, On as FirstStepInjection, Oo as DeferAuthorization, Or as HostTrustError, Os as CapabilityFact, Ot as cleanupConditionFor, P as activationCanonical, Pa as compareHostVersions, Pc as restatedContentOf, Pi as nativeFileTwoRole, Pn as lifecyclePhase, Po as EvidenceBinding, Pr as registryArchiveFiles, Ps as DerivedProcessFacts, Pt as v6CurrentRootBoundaries, Q as assessmentOutcomePredicate, Qa as CheckpointResult, Qc as StatefulAction, Qi as EXPECTED_HOST_PACKAGES, Qn as inspectTargetHostGraph, Qo as NeedsReviewFact, Qr as executeRevalidatedGitEffect, Qs as InterpretOptions, Qt as bindProofToProjection, R as validateActivationBinding, Ra as currentContractDigest, Rc as verbIsNegated, Ri as PROTOCOL_V3_NOTICE, Rn as HostProfileError, Ro as ExpectedTransition, Rr as GitAdapterAction, Rs as ProcessOutcomeReason, Rt as PROOF_MANIFEST_DOMAIN_V2, S as adoptActivationReceipt, Sa as evaluateHostLock, Sc as itemHoldsExecutionAuthority, Si as persistedToolResultStatus, Sn as CommandSurfaceManifest, So as qualifyBoundary, Sr as readDesktopAppRuntime, Ss as proposeRebind, St as RecoveryCause, T as readActivationMigrationReceipt, Ta as selectHostCohort, Tc as maskCodeSpans, Ti as CertificationSupport, Tn as validateManifest, To as BindingActionClosure, Tr as writeDesktopRuntimeReceipt, Ts as rebindAttemptKey, Tt as V6_ORDINARY_COMPLETION_RULE_COMPACT, U as supersedeItem, Ua as segmentAuthorityBlocks, Uc as BOUNDED_ARTIFACT_TYPES, Ui as deriveProjection, Un as auditedForegroundRenderers, Uo as GuardEvidence, Ur as GitEffectExecution, Us as capabilityFactOf, Ut as ProofKindCapability, V as projectSessionCoreV2, Va as AuthorityKind, Vc as ActionManifest, Vi as PROTOCOL_V6_NOTICE, Vn as auditedDefaultWorkdirHost, Vo as GuardBoundary, Vr as GitCommandParseResult, Vs as admissibleForRemoval, Vt as ProofHostSurface, W as AssistantOutcomeObservation, Wa as TaskIntent, Wc as CERTIFICATE_VERSION, Wi as legacyRecordsNeedingReview, Wn as auditedHostImplementation, Wo as GuardIntegrity, Wr as GitEffectRunner, Ws as partialFailureOf, Wt as ProofKindV2, X as TurnStoppingDecision, Xa as isFrozenV042RebindResponse, Xc as SUPPORTED_EVIDENCE_ADAPTERS, Xi as BASE_HOST_PACKAGES, Xn as injectActiveProfileHostLock, Xo as HostStatus, Xr as commitTreeSnapshotDigest, Xs as ExecutionQualification, Xt as SessionQuery, Y as NO_PROGRESS_TURNS_BEFORE_STOP, Ya as ParsedConfirmation, Yc as STOP_PROTOCOL_VERSION_V2, Yi as AuditedExecutable, Yn as hostLockRowsFromComposedDump, Yo as GuardProjection, Yr as commitIndexSnapshotDigest, Ys as Executee, Yt as ProofSurface, Z as assessmentAction, Za as parseConfirmationMessage, Zc as SemanticAction, Zi as DEFAULT_HOST_LOCK, Zn as inspectDesktopTargetGraph, Zo as MessageCoverage, Zr as createGitPrestateEnvelope, Zs as GRANTED_QUALIFICATION, Zt as SessionQueryV2, _ as verifyMigrationInventory, _a as bindExecutableIdentity, _c as isExplanationScope, _i as evidenceFromPersistedToolResult, _n as bindingSatisfies, _o as GoalActivationState, _r as hasDesktopImporterState, _s as BoundedSource, _t as CLEANUP_CONDITION_RULE, a as isSelectedActivationReceipt, aa as HostCapabilityEvaluation, ac as clauseAsksOwnQuestion, ai as ParsedShell, al as semanticActionFromCommand, an as proofDigestV2, ao as captureItem, ar as resolveActiveProfileHostLock, as as TargetSourceKind, at as isWholeTaskCompletionClaim, b as __activationBindingInternals, ba as evaluateGraphDerivedHostLock, bc as isQuestionScopeNeedingReview, bi as isDeterministicCheck, bn as isVerifyingCapability, bo as effectuateBoundary, br as readAsarFile, bs as RebindProposal, bt as DEFAULT_RECOVERY_CHAR_BUDGET, c as selectedActivationInventory, ca as HostCohort, cc as explanationHasActionResidue, ci as isRunExecutable, cl as validateActionTarget, cn as proofOperationMatches, co as extractArtifactPaths, cr as revalidateDesktopCoreLock, cs as VerificationContract, ct as observeAssistantOutcome, d as verifySelectedMigrationInventory, da as HostLockContext, dc as hasQuestionScope, di as goalCompletionDenial, dl as normalizeClause, dn as scopeCoverageDigest, do as isInformationalMessage, dr as DESKTOP_IDENTITY_FACTS, ds as createProjection, dt as v6TestPredicate, ea as ExecutableIdentityBinding, ec as QualificationReason, ei as parseGitCommandManifest, el as boundedArtifactChoiceMatches, en as canonicalProjection, eo as bindingIndividuallyAccepted, er as packageRowsFromPnpmLock, es as PersistenceAuthorization, et as currentActionBases, f as privateStorageToolDenial, fa as HostLockEvaluation, fc as hasWorkPredicate, fi as hasCurrentCertificate, fl as sanitizeClauseText, fn as sessionQuery, fo as segmentClauses, fr as DESKTOP_PROFILE_PACKAGE_NAME, ft as SESSION_API_UNSUPPORTED, g as prepareActivationMigration, ga as HostToolSurface, gc as isExecutableItem, gi as ToolSubject, gn as EvidenceFacetCoverage, go as BoundaryRequest, gr as auditDesktopInstalledImplementation, gt as snapshotSessionEvents, h as inspectActivationInventory, ha as HostProfileKind, hc as introducesActionClause, hi as ToolResultInput, hn as validateProofManifestV2, ho as BoundaryQualification, hr as DesktopTargetGraph, ht as V4SessionLike, i as createActivationSelection, ia as HostAuditProvenance, ic as clarifiedSpanOf, ii as CanonicalCommandSurface, il as requestedTargetMatchesResolved, in as proofDigest, io as captureClause, ir as readActiveHostGraph, is as TargetSource, it as isRootPauseRequest, j as SessionActivationBinding, ja as ParsedHostVersion, jc as qualificationOfClause, ji as deriveItemDiagnosis, jn as claimedBatchHasRealRootInput, jo as DeriveResult, jr as hostTrustDigest, js as DEPENDENCY_FREE_ONLY_CONDITION, jt as recoveryDigest, k as writeActivationBinding, ka as LATEST_TESTED_HOST_VERSION, kc as opensWithDirective, ki as UnifiedItemDiagnosis, kn as FirstStepPreviewInput, ko as DelegationRef, kr as HostTrustedPackage, ks as CapabilityGap, kt as closingHint, l as validateActivationInventorySnapshot, la as HostCohortSelection, lc as governedClauseRestrictsExecution, li as parsePwshCommand, ll as canonicalizePath, ln as proofV2Rejection, lo as extractMethod, lr as verifyComposedHostLockDump, ls as WaitAuthorization, lt as progressFingerprint, m as ActivationPriorModes, ma as HostPlatform, mc as interpretMessage, mi as ToolCallInput, ml as sha256, mn as validateProofManifest, mo as BoundaryEffectuation, mr as DesktopAppRuntime, mt as SessionApiError, n as ActivationMigrationSelection, na as HOST_CAPABILITY_PACKAGE_GROUPS, nc as ScopeInterpretation, ni as verifiedLinearCommitReadback, nl as requestedIdentityKey, nn as createProofManifestV2, no as CaptureScope, nr as prepareDesktopHostTrust, ns as TargetCaptureReasonCode, nt as decideTurnStopping, o as prepareSelectedActivationMigration, oa as HostCapabilityId, oc as clauseIsGoverned, oi as ShellParseStatus, ol as semanticActionFromText, on as proofEvidenceConstraints, oo as classifyClause, or as resolveDesktopProfileHostLock, os as TargetTuple, ot as latestAssistantText, p as ActivationInventoryPersistence, pa as HostLockStatus, pc as interpretClause, pi as NATIVE_GIT_ROOT_PARENT_OID, pl as sanitizeUrl, pn as sessionQueryV2, po as BOUNDARY_RECORD_PREFIX, pr as DESKTOP_RUNTIME_PACKAGE_NAME, pt as SESSION_EVENT_ENVELOPE_INVALID, q as CurrentActionBasis, qa as classifyUserInteraction, qc as STATEFUL_ACTIONS, qi as ACTIVE_HOST_COHORT_IDS, qn as evaluateConfiguredHostLock, qo as GuardItemStatus, qr as GitTargetIdentity, qs as AuthorityDisposition, qt as ProofObligation, r as activationSelectionPending, ra as HOST_COHORTS, rc as actionVerbMatches, ri as CanonicalArgv, rl as requestedTargetAuthorizesMutation, rn as proofCapabilityReport, ro as ClauseSegment, rr as prepareTargetHostTrust, rs as TargetCaptureStatus, rt as decisionBoundaryKey, s as scanActivationInventory, sa as HostCapabilityRequest, sc as clauseIsProtected, si as canonicalArgvFromCommand, sl as validateActionManifest, sn as proofHostSurfacesOf, so as environmentDefaultRepositoryTarget, sr as resolveInstalledHostLock, ss as TargetValue, st as latestRootInstruction, t as ActivationInventorySnapshot, ta as GOAL_HOST_PACKAGES, tc as QualificationStatus, ti as revalidateGitPrestate, tl as isStatefulAction, tn as createProofManifest, to as certifyCheckpoint, tr as prepareActiveHostTrust, ts as SourceSpan, tt as decideTurnBoundary, u as validateActivationSelection, ua as HostCohortSelectionReason, uc as hasOrderedCoordination, ui as parseShellCommand, ul as digestStrings, un as requiredSubjectsOf, uo as extractOperation, ur as AsarIndex, us as WorkUnit, ut as testOutcomePredicate, v as ActivationMigrationEntry, va as bindLiveGoalCapability, vc as isInformationalFragment, vi as extractTextContent, vn as evidenceCoverage, vo as GoalBoundaryAccess, vr as memoizedAsarFile, vs as ProposeOutcome, vt as CLEANUP_CONDITION_RULE_COMPACT, w as readActivationBinding, wa as hostVersionFromPackages, wc as legacyQuestionReadingIsInformational, wi as withDurability, wn as OperationVerbEntry, wo as AssetObligation, wr as readDesktopTargetGraph, ws as proposeRebindV042, wt as V6_ORDINARY_COMPLETION_RULE, x as activationBindingPath, xa as evaluateHostCapability, xc as isRestatement, xi as nativeGitParentOidVerified, xn as COMMAND_SURFACE_MANIFEST, xo as isCurrentAcceptedBoundary, xr as readAsarIndex, xs as confirmRebind, xt as MIN_RECOVERY_CHAR_BUDGET, y as ActivationMigrationReceipt, ya as evaluateExternalWaitCapability, yc as isOpenObligation, yi as extractToolSubject, yn as evidenceMatchesItem, yo as availableBoundaryQualifications, yr as memoizedAsarIndex, ys as RebindArgs, yt as CLEANUP_CONDITION_RULE_SHORT, z as RC020_RC2_HOST_PACKAGES, za as AuthorityBlock, zc as ACTION_MANIFEST, zi as PROTOCOL_V4_NOTICE, zn as TargetHostGraph, zo as ExternalOperation, zr as GitCommandAccepted, zs as RemovalOutcomeReport, zt as PROOF_PROTOCOL_VERSION } from "../index-qKK3BJW1.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as segmentAuthorityBlocks, $i as acquireHostTrust, $n as evidenceAvailabilityReason, $r as presentExplanationHead, A as PROTOCOL_V3_NOTICE, Aa as parseHostVersion, Ai as packageRowsFromActiveGraph, Ar as clauseIsProtected, At as MIN_RECOVERY_CHAR_BUDGET, B as evidenceFromPersistedToolResult, Ba as STOP_PROTOCOL_VERSION_V2, Bi as verifyComposedHostLockDump, Bn as createProjection, Br as isExplanationScope, Bt as renderRecoveryPacket, C as SESSION_API_UNSUPPORTED, Ca as HOST_VALIDATED_VERSIONS, Ci as evaluateActiveHostLock, Cn as observeAssistantOutcome, Cr as classifyUserInteraction, Ct as sessionQueryV2, D as projectCoreV2, Da as SUPPORTED_HOST_VERSIONS, Di as injectActiveProfileHostLock, Dn as goalCompletionDenial, Dr as clarifiedSpanOf, Dt as CLEANUP_CONDITION_RULE_COMPACT, E as snapshotSessionEvents, Ea as SUPPORTED_HOST_RANGE, Ei as hostLockRowsFromComposedDump, En as v6TestPredicate, Er as actionVerbMatches, Et as CLEANUP_CONDITION_RULE, F as deriveProjection, Fa as CERTIFICATE_VERSION, Fi as readActiveHostGraph, Fn as availableBoundaryQualifications, Fr as hasWorkPredicate, Ft as cleanupConditionFor, G as persistedToolResultStatus, Ga as requestedIdentityKey, Gi as hasDesktopImporterState, Gn as rebindAttemptKey, Gr as itemHoldsExecutionAuthority, H as extractToolSubject, Ha as actionCompatible, Hi as DESKTOP_PROFILE_PACKAGE_NAME, Hn as proposeRebind, Hr as isOpenObligation, I as legacyRecordsNeedingReview, Ia as CERTIFICATE_VERSION_V2, Ii as resolveActiveProfileHostLock, In as effectuateBoundary, Ir as interpretClause, It as closingHint, J as canonicalArgvFromCommand, Ja as semanticActionFromCommand, Ji as readDesktopAppRuntime, Jn as CONFIRM_LINE_PATTERN, Jr as maskCodeSpans, K as shellReadbackOutcome, Ka as requestedTargetAuthorizesMutation, Ki as readAsarFile, Kn as rebindResponse, Kr as kindOfScope, L as rootLocatorFlavor, La as SEMANTIC_ACTIONS, Li as resolveDesktopProfileHostLock, Ln as isCurrentAcceptedBoundary, Lr as interpretMessage, Lt as openItems, M as PROTOCOL_V5_NOTICE, Ma as ACTION_MANIFEST, Mi as prepareActiveHostTrust, Mr as governedClauseRestrictsExecution, Mt as V6_ORDINARY_COMPLETION_RULE_COMPACT, N as PROTOCOL_V6_NOTICE, Na as ACTION_MANIFEST_VERSION, Ni as prepareDesktopHostTrust, Nr as hasOrderedCoordination, Nt as V6_ORDINARY_COMPLETION_RULE_SHORT, O as CAPTURE_V042_NOTICE, Oa as compareHostVersions, Oi as inspectDesktopTargetGraph, On as hasCurrentCertificate, Or as clauseAsksOwnQuestion, Ot as CLEANUP_CONDITION_RULE_SHORT, P as applyUpgradeEligibility, Pa as BOUNDED_ARTIFACT_TYPES, Pi as prepareTargetHostTrust, Pn as BOUNDARY_RECORD_PREFIX, Pr as hasQuestionScope, Pt as carriesCleanupCondition, Q as authorityCaptureCounts, Qa as RC020_RC2_HOST_PACKAGES, Qi as HostTrustError, Qn as deriveItemDiagnosis, Qr as opensWithDirective, R as supersedeItem, Ra as STATEFUL_ACTIONS, Ri as resolveInstalledHostLock, Rn as qualifyBoundary, Rr as introducesActionClause, Rt as recoveryDigest, Sa as selectHostCohort, Si as combineHostPolicy, Sn as latestRootInstruction, Sr as classifyTaskIntent, St as sessionQuery, T as SessionApiError, Ta as MIN_SUPPORTED_HOST_VERSION, Ti as hostLockContextFromComposedDump, Tn as testOutcomePredicate, Tr as LEGACY_QUALIFICATION, Tt as validateProofManifestV2, U as isDeterministicCheck, Ua as boundedArtifactChoiceMatches, Ui as DESKTOP_RUNTIME_PACKAGE_NAME, Un as proposeRebindOutcome, Ur as isQuestionScopeNeedingReview, V as extractTextContent, Va as SUPPORTED_EVIDENCE_ADAPTERS, Vi as DESKTOP_IDENTITY_FACTS, Vn as confirmRebind, Vr as isInformationalFragment, Vt as v6CurrentRootBoundaries, W as nativeGitParentOidVerified, Wa as isStatefulAction, Wi as auditDesktopInstalledImplementation, Wn as proposeRebindV042, Wr as isRestatement, X as parsePwshCommand, Xa as validateActionManifest, Xi as readDesktopTargetGraph, Xn as parseConfirmationMessage, Xr as namedActions, Y as isRunExecutable, Ya as semanticActionFromText, Yi as readDesktopDependency, Yn as isFrozenV042RebindResponse, Yr as maskQuotedSpans, Z as parseShellCommand, Za as validateActionTarget, Zi as writeDesktopRuntimeReceipt, Zn as capabilityRemedyPhrase, Zr as opensConditionLead, _ as previewFirstStepInjection, _a as evaluateGraphDerivedHostLock, _i as activeRendererModule, _n as decideTurnStopping, _r as extractOperation, _t as proofHostSurfacesOf, a as commitTreeSnapshotDigest, aa as ACTIVE_HOST_COHORT_ID, ai as splitTextFragments, an as bindingSatisfies, ar as admissibleForRemoval, at as PROOF_MANIFEST_DOMAIN_V2, ba as evaluateToolSurfaceCapability, bi as auditedForegroundRenderers, bn as isWholeTaskCompletionClaim, bt as requiredSubjectsOf, c as gitCommandMatchesTarget, ca as BASE_HOST_PACKAGES, ci as COMMAND_SURFACE_MANIFEST, cn as isVerifyingCapability, cr as partialFailureOf, ct as bindProofToProjection, d as verifiedLinearCommitReadback, da as GOAL_HOST_PACKAGES, di as digestStrings, dn as NO_PROGRESS_TURNS_BEFORE_STOP, dr as captureClause, dt as createProofManifest, ea as hostTrustDigest, ei as qualificationOfClause, er as itemDiagnosis, et as bindingIndividuallyAccepted, f as FIRST_STEP_GUIDANCE, fa as HOST_CAPABILITY_PACKAGE_GROUPS, fi as normalizeClause, fn as assessmentAction, fr as captureItem, ft as createProofManifestV2, g as lifecyclePhase, ga as evaluateExternalWaitCapability, gi as HostProfileError, gn as decideTurnBoundary, gr as extractMethod, gt as proofEvidenceConstraints, h as firstStepGuidanceV6, ha as bindLiveGoalCapability, hi as sha256, hn as currentActionBases, hr as extractArtifactPaths, ht as proofDigestV2, i as commitIndexSnapshotDigest, ia as registryArchiveModules, ii as semanticActionOfScope, ir as actionHasCertificationPath, it as PROOF_KINDS_V2, j as PROTOCOL_V4_NOTICE, ja as satisfiesSupportedHostRange, ji as packageRowsFromPnpmLock, jr as explanationHasActionResidue, jt as V6_ORDINARY_COMPLETION_RULE, k as DEFAULT_DELEGATION_TOOL_NAMES, ka as evaluateMinimumHostVersion, ki as inspectTargetHostGraph, kr as clauseIsGoverned, kt as DEFAULT_RECOVERY_CHAR_BUDGET, l as parseGitCommandManifest, la as DEFAULT_HOST_LOCK, li as validateManifest, ln as CONTROL_RECORD_PREFIX, lr as removalIsComplete, lt as bindProofV2ToProjection, m as firstStepGuidance, ma as bindExecutableIdentity, mi as sanitizeUrl, mn as classifyCompletionClaim, mr as environmentDefaultRepositoryTarget, mt as proofDigest, n as GIT_COMMAND_MANIFEST_IDS, na as qualifyHostTrust, ni as reportingHeadGoverns, nr as relevantEvidence, nt as PROOF_CAPABILITY_MATRIX, o as createGitPrestateEnvelope, oa as ACTIVE_HOST_COHORT_IDS, oi as statefulActionsOfScope, on as evidenceCoverage, or as capabilityConsequence, ot as PROOF_PROTOCOL_VERSION, p as claimedBatchHasRealRootInput, pa as HOST_COHORTS, pi as sanitizeClauseText, pn as assessmentOutcomePredicate, pr as classifyClause, pt as proofCapabilityReport, q as withDurability, qa as requestedTargetMatchesResolved, qi as readAsarIndex, qn as replayRebindResult, qr as legacyQuestionReadingIsInformational, r as GIT_COMMAND_TEMPLATES, ra as registryArchiveFiles, ri as restatedContentOf, rr as DEPENDENCY_FREE_ONLY_CONDITION, rt as PROOF_KINDS, s as executeRevalidatedGitEffect, sa as ACTIVE_HOST_LAUNCHER_VERSION, si as verbIsNegated, sn as evidenceMatchesItem, sr as capabilityFactOf, st as PROOF_PROTOCOL_VERSION_V2, t as RC020_RC1_HOST_PACKAGES, ta as parseHostTrust, ti as questionHeadsClause, tr as nativeFileTwoRole, tt as certifyCheckpoint, u as revalidateGitPrestate, ua as EXPECTED_HOST_PACKAGES, ui as canonicalizePath, un as NO_PROGRESS_RECORD_PREFIX, ur as removalIsPartiallyKnown, ut as canonicalProjection, v as projectSessionCoreV2, va as evaluateHostCapability, vi as auditedDefaultWorkdirHost, vn as decisionBoundaryKey, vr as isInformationalMessage, vt as proofOperationMatches, w as SESSION_EVENT_ENVELOPE_INVALID, wa as LATEST_TESTED_HOST_VERSION, wi as evaluateConfiguredHostLock, wn as progressFingerprint, wr as GRANTED_QUALIFICATION, wt as validateProofManifest, xa as hostVersionFromPackages, xi as auditedHostImplementation, xn as latestAssistantText, xt as scopeCoverageDigest, ya as evaluateHostLock, yi as auditedDefaultWorkdirProvider, yn as isRootPauseRequest, yr as segmentClauses, yt as proofV2Rejection, z as NATIVE_GIT_ROOT_PARENT_OID, za as STOP_PROTOCOL_VERSION, zi as revalidateDesktopCoreLock, zn as currentContractDigest, zr as isExecutableItem, zt as recoveryTitle } from "../domain-DZTbCIYn.js";
+import { $ as extractTextContent, $a as readActivationBinding, $i as registryArchiveModules, $n as itemDiagnosis, $r as qualificationOfClause, $t as v6CurrentRootBoundaries, A as projectSessionCoreV2, Aa as CERTIFICATE_VERSION, Ai as resolveDesktopProfileHostLock, Ao as normalizeClause, Ar as explanationHasActionResidue, At as proofOperationMatches, B as CAPTURE_V042_NOTICE, Ba as requestedIdentityKey, Bi as memoizedAsarIndex, Bn as confirmRebind, Br as isInformationalFragment, Bt as CLEANUP_CONDITION_RULE_SHORT, C as verifiedLinearCommitReadback, Ca as compareHostVersions, Ci as packageRowsFromActiveGraph, Cn as progressFingerprint, Cr as GRANTED_QUALIFICATION, Ct as createProofManifest, D as firstStepGuidanceV6, Da as ACTION_MANIFEST, Di as prepareTargetHostTrust, Dn as hasCurrentCertificate, Dr as clauseAsksOwnQuestion, Dt as proofDigestV2, E as firstStepGuidance, Ea as satisfiesSupportedHostRange, Ei as prepareDesktopHostTrust, En as goalCompletionDenial, Er as clarifiedSpanOf, Et as proofDigest, F as SESSION_API_UNSUPPORTED, Fa as STOP_PROTOCOL_VERSION_V2, Fi as DESKTOP_PROFILE_PACKAGE_NAME, Fn as effectuateBoundary, Fr as interpretClause, Ft as sessionQueryV2, G as PROTOCOL_V6_NOTICE, Ga as validateActionManifest, Gi as readDesktopTargetGraph, Gn as rebindResponse, Gr as kindOfScope, Gt as V6_ORDINARY_COMPLETION_RULE_SHORT, H as PROTOCOL_V3_NOTICE, Ha as requestedTargetMatchesResolved, Hi as readAsarIndex, Hn as proposeRebindOutcome, Hr as isQuestionScopeNeedingReview, Ht as MIN_RECOVERY_CHAR_BUDGET, I as SESSION_EVENT_ENVELOPE_INVALID, Ia as SUPPORTED_EVIDENCE_ADAPTERS, Ii as DESKTOP_RUNTIME_PACKAGE_NAME, In as isCurrentAcceptedBoundary, Ir as interpretMessage, It as validateProofManifest, J as legacyRecordsNeedingReview, Ji as acquireHostTrust, Jn as isFrozenV042RebindResponse, Jr as maskQuotedSpans, Jt as closingHint, K as applyUpgradeEligibility, Ka as validateActionTarget, Ki as writeDesktopRuntimeReceipt, Kn as replayRebindResult, Kr as legacyQuestionReadingIsInformational, Kt as carriesCleanupCondition, L as SessionApiError, La as actionCompatible, Li as auditDesktopInstalledImplementation, Ln as qualifyBoundary, Lr as introducesActionClause, Lt as validateProofManifestV2, Ma as SEMANTIC_ACTIONS, Mi as revalidateDesktopCoreLock, Mo as sanitizeUrl, Mr as hasOrderedCoordination, Mt as requiredSubjectsOf, Na as STATEFUL_ACTIONS, Ni as verifyComposedHostLockDump, Nn as BOUNDARY_RECORD_PREFIX, No as sha256, Nr as hasQuestionScope, Nt as scopeCoverageDigest, O as lifecyclePhase, Oa as ACTION_MANIFEST_VERSION, Oi as readActiveHostGraph, Oo as canonicalizePath, Or as clauseIsGoverned, Ot as proofEvidenceConstraints, Pa as STOP_PROTOCOL_VERSION, Pi as DESKTOP_IDENTITY_FACTS, Pn as availableBoundaryQualifications, Po as privateStorageToolDenial, Pr as hasWorkPredicate, Pt as sessionQuery, Q as evidenceFromPersistedToolResult, Qa as createActivationMigrationReceipt, Qi as registryArchiveFiles, Qn as evidenceAvailabilityReason, Qr as presentExplanationHead, Qt as renderRecoveryPacket, R as snapshotSessionEvents, Ra as boundedArtifactChoiceMatches, Ri as hasDesktopImporterState, Rn as currentContractDigest, Rr as isExecutableItem, Rt as CLEANUP_CONDITION_RULE, S as revalidateGitPrestate, Sa as SUPPORTED_HOST_VERSIONS, Si as inspectTargetHostGraph, Sn as observeAssistantOutcome, Sr as classifyUserInteraction, St as canonicalProjection, T as claimedBatchHasRealRootInput, Ta as parseHostVersion, Ti as prepareActiveHostTrust, Tn as v6TestPredicate, Tr as actionVerbMatches, Tt as proofCapabilityReport, U as PROTOCOL_V4_NOTICE, Ua as semanticActionFromCommand, Ui as readDesktopAppRuntime, Un as proposeRebindV042, Ur as isRestatement, Ut as V6_ORDINARY_COMPLETION_RULE, V as DEFAULT_DELEGATION_TOOL_NAMES, Va as requestedTargetAuthorizesMutation, Vi as readAsarFile, Vn as proposeRebind, Vr as isOpenObligation, Vt as DEFAULT_RECOVERY_CHAR_BUDGET, W as PROTOCOL_V5_NOTICE, Wa as semanticActionFromText, Wi as readDesktopDependency, Wn as rebindAttemptKey, Wr as itemHoldsExecutionAuthority, Wt as V6_ORDINARY_COMPLETION_RULE_COMPACT, X as supersedeItem, Xa as activationBindingPath, Xi as parseHostTrust, Xn as capabilityRemedyPhrase, Xr as opensConditionLead, Xt as recoveryDigest, Y as rootLocatorFlavor, Ya as __activationBindingInternals, Yi as hostTrustDigest, Yn as parseConfirmationMessage, Yr as namedActions, Yt as openItems, Z as NATIVE_GIT_ROOT_PARENT_OID, Za as adoptActivationReceipt, Zi as qualifyHostTrust, Zn as deriveItemDiagnosis, Zr as opensWithDirective, Zt as recoveryTitle, _ as commitTreeSnapshotDigest, _a as selectHostCohort, _i as evaluateConfiguredHostLock, _n as decisionBoundaryKey, _r as isInformationalMessage, _t as PROOF_MANIFEST_DOMAIN_V2, a as scanActivationInventory, aa as EXPECTED_HOST_PACKAGES, ai as statefulActionsOfScope, an as evidenceCoverage, ao as activationCanonical, ar as capabilityConsequence, at as withDurability, b as gitCommandMatchesTarget, ba as MIN_SUPPORTED_HOST_VERSION, bi as injectActiveProfileHostLock, bn as latestAssistantText, bt as bindProofToProjection, c as validateActivationSelection, ca as HOST_COHORTS, ci as validateManifest, cn as CONTROL_RECORD_PREFIX, co as sessionBirthIdentity, cr as removalIsComplete, ct as parsePwshCommand, d as prepareActivationMigration, da as evaluateExternalWaitCapability, di as auditedDefaultWorkdirHost, dn as assessmentAction, dr as captureItem, dt as segmentAuthorityBlocks, ea as ACTIVE_HOST_COHORT_ID, ei as questionHeadsClause, eo as readActivationMigrationReceipt, er as nativeFileTwoRole, et as extractToolSubject, f as verifyMigrationInventory, fa as evaluateGraphDerivedHostLock, fi as auditedDefaultWorkdirProvider, fn as assessmentOutcomePredicate, fr as classifyClause, ft as bindingIndividuallyAccepted, g as commitIndexSnapshotDigest, ga as hostVersionFromPackages, gi as evaluateActiveHostLock, gn as decideTurnStopping, gr as extractOperation, gt as PROOF_KINDS_V2, h as GIT_COMMAND_TEMPLATES, ha as evaluateToolSurfaceCapability, hi as combineHostPolicy, hn as decideTurnBoundary, hr as extractMethod, ht as PROOF_KINDS, i as prepareSelectedActivationMigration, ia as DEFAULT_HOST_LOCK, ii as splitTextFragments, in as bindingSatisfies, io as writeActivationBinding, ir as admissibleForRemoval, it as shellReadbackOutcome, ja as CERTIFICATE_VERSION_V2, ji as resolveInstalledHostLock, jo as sanitizeClauseText, jr as governedClauseRestrictsExecution, jt as proofV2Rejection, k as previewFirstStepInjection, ka as BOUNDED_ARTIFACT_TYPES, ki as resolveActiveProfileHostLock, ko as digestStrings, kr as clauseIsProtected, kt as proofHostSurfacesOf, l as verifySelectedMigrationInventory, la as bindExecutableIdentity, li as HostProfileError, ln as NO_PROGRESS_RECORD_PREFIX, lo as validateActivationBinding, lr as removalIsPartiallyKnown, lt as parseShellCommand, m as GIT_COMMAND_MANIFEST_IDS, ma as evaluateHostLock, mi as auditedHostImplementation, mn as currentActionBases, mr as extractArtifactPaths, mt as PROOF_CAPABILITY_MATRIX, n as createActivationSelection, na as ACTIVE_HOST_LAUNCHER_VERSION, ni as restatedContentOf, no as resolveSessionActivation, nr as DEPENDENCY_FREE_ONLY_CONDITION, nt as nativeGitParentOidVerified, o as selectedActivationInventory, oa as GOAL_HOST_PACKAGES, oi as verbIsNegated, on as evidenceMatchesItem, oo as activationDigest, or as capabilityFactOf, ot as canonicalArgvFromCommand, p as RC020_RC1_HOST_PACKAGES, pa as evaluateHostCapability, pi as auditedForegroundRenderers, pn as classifyCompletionClaim, pr as environmentDefaultRepositoryTarget, pt as certifyCheckpoint, q as deriveProjection, qa as RC020_RC2_HOST_PACKAGES, qi as HostTrustError, qn as CONFIRM_LINE_PATTERN, qr as maskCodeSpans, qt as cleanupConditionFor, r as isSelectedActivationReceipt, ra as BASE_HOST_PACKAGES, ri as semanticActionOfScope, ro as validateActivationMigrationReceipt, rr as actionHasCertificationPath, rt as persistedToolResultStatus, s as validateActivationInventorySnapshot, sa as HOST_CAPABILITY_PACKAGE_GROUPS, si as COMMAND_SURFACE_MANIFEST, sn as isVerifyingCapability, so as activationJson, sr as partialFailureOf, st as isRunExecutable, t as activationSelectionPending, ta as ACTIVE_HOST_COHORT_IDS, ti as reportingHeadGoverns, to as resolveActivationBindingsRoot, tr as relevantEvidence, tt as isDeterministicCheck, u as inspectActivationInventory, ua as bindLiveGoalCapability, ui as activeRendererModule, un as NO_PROGRESS_TURNS_BEFORE_STOP, ur as captureClause, ut as authorityCaptureCounts, v as createGitPrestateEnvelope, va as HOST_VALIDATED_VERSIONS, vi as hostLockContextFromComposedDump, vn as isRootPauseRequest, vr as segmentClauses, vt as PROOF_PROTOCOL_VERSION, w as FIRST_STEP_GUIDANCE, wa as evaluateMinimumHostVersion, wi as packageRowsFromPnpmLock, wn as testOutcomePredicate, wr as LEGACY_QUALIFICATION, wt as createProofManifestV2, x as parseGitCommandManifest, xa as SUPPORTED_HOST_RANGE, xi as inspectDesktopTargetGraph, xn as latestRootInstruction, xr as classifyTaskIntent, xt as bindProofV2ToProjection, y as executeRevalidatedGitEffect, ya as LATEST_TESTED_HOST_VERSION, yi as hostLockRowsFromComposedDump, yn as isWholeTaskCompletionClaim, yt as PROOF_PROTOCOL_VERSION_V2, z as projectCoreV2, za as isStatefulAction, zi as memoizedAsarFile, zn as createProjection, zr as isExplanationScope, zt as CLEANUP_CONDITION_RULE_COMPACT } from "../domain-CE_dWoec.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activeRendererModule, admissibleForRemoval, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActiveHostTrust, prepareDesktopHostTrust, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, withDurability, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };