dsh-completion-guard 0.9.0 → 0.11.0

package/README.zh-CN.md

@@ -2,125 +2,79 @@
 
 [English](README.md)
 
-面向 DeepSeek Harness（DSH）的任务保护插件。它保存任务要求，并在任务标记完成前逐项核对；会话恢复后仍使用同一份检查表，只有匹配的已保存工具结果才能作为证据。
+DSH Completion Guard 是 DeepSeek Harness 插件，负责保存任务要求，并在认证完成前核对已保存的结果。长任务或恢复后的会话中，它帮助助手继续核对文件修改、测试、禁止事项和你后来补充的要求。
 
-> **0.9.0 要求 DSH `>=0.2.0-rc.2`，并支持官方 Desktop 应用。** 已有安装须先停止相关写者，在**更换 DSH 或 Guard 前**保存旧安装包、有效模式来源及冻结会话清点，使用[独立准备的候选迁移工具](docs/ACTIVATION_MIGRATION.md)。随后升级安装、重建各 profile 宿主锁，并在**启动宿主前**完成旧会话的 `adopt` 和 `verify`。没有旧 Guard 会话的全新安装只需安装及宿主锁检查，不需旧模式 adoption。Desktop 使用 `--profile desktop`，以应用归档为 runtime root；安装本身不重建锁。已测试的宿主基线是 DSH `0.2.0-rc.2`、Cordis `4.0.4`；较新版本仍须通过身份和适配契约检查。资格及原生证据范围见[兼容性指南](docs/COMPATIBILITY.md)。
+**首次打开或恢复已有历史的会话，需要等待载入。** DSH 载入历史，Guard 重建会话状态，界面可能显示“载入历史”；请等加载结束再继续。`always` 让新建根会话从首条真实输入开始受到保护，不会让历史载入立即完成；再次打开也不能保证没有等待。
 
-官方读取器拒绝旧格式时，保留原日志和旧模式来源，按[显式可读子集方案](docs/ACTIVATION_MIGRATION.md)先 inventory、再由用户选择 ID 并 select，让 --selection 贯穿 inspect/adopt/verify。工具核对全库变化，只迁移用户选中的可读项；selected_complete 保留全部排除项为 pending，不代表整库完成。说明中提供真实命令、恢复步骤和可复制 AI 提示词。
+![核对任务要求及对应证据后，再认证完成](assets/social/completion-guard-hero.png)
 
-![任务合同条款与有界证据通过 checkpoint 匹配后签发完成证书](assets/social/completion-guard-hero.png)
+## 安装或升级
 
-## 快速开始
+需要 DSH `>=0.2.1-rc.3`、Cordis `>=4.0.4`、Node.js `>=22` 和 pnpm `>=11`。安装 Guard 0.11.0 前请先升级 DSH。Web、Headless 和官方 Desktop 应用使用各自的配置目录。当前已审查基线为 DSH `0.2.1-rc.3`，搭配 Cordis `4.0.5`；更新宿主仍须通过兼容性核验。
 
-执行安装命令前，先选择对应流程：
+**0.11.0 的上游已知风险：**官方 rc.3 宿主仍包含受影响依赖。维护者明确临时接受三条 Undici 8.11.2 高危发现，期限**包含 2026-11-05 当日**；签名宿主并未修复。详见[临时风险接受说明](docs/DEPENDENCY_SCAN.md)。后续上游提供修复链并通过核验后，再继续更新。
 
-- **全新安装，没有旧 Guard 会话：**停止宿主，升级到 DSH `0.2.0-rc.2` 或更高版本，按下方安装 Guard，再重建宿主锁，最后启动。
-- **已有安装：**先停止相关写者，保存旧安装包及有效模式来源，按[迁移说明](docs/ACTIVATION_MIGRATION.md)准备并冻结旧会话清点与收据。这一步必须在更换 DSH 或 Guard 前完成。随后按下方安装、重建宿主锁；保持宿主停止，用冻结旧收据完成 `adopt` 和 `verify`，再启动。未知来源保持 pending，不能用升级后的新缺省替代旧模式。
+先选好路径，再替换任何包：
 
-完成对应准备后，再把 Guard 安装到需要保护的 Profile：
+1. **首次安装，没有旧 Guard 会话**：停止宿主，在使用的 profile 中安装 Guard，核验并绑定本次安装后再启动。
+2. **已有旧会话，需要升级**：先停止相关写者，保留旧安装包及其有效模式来源。**升级前**冻结会话库存并准备迁移收据。安装后重建宿主锁，保持写者停止，完成旧模式的 `adopt` 和 `verify`；目标范围核验通过前不能启动升级后的宿主。无法核实的旧模式保持待处理。
 
-```sh
-dsh plugin --profile web add dsh-completion-guard@0.9.0
-```
-
-**升级和执行下面的安装图检查时，保持宿主停止。** 宿主锁记录 DSH 实际使用的包版本和安装目录；如果升级前就生成锁，新运行时会因包版本不匹配而拒绝它。`inject` 会修改 `<profile>/cordis.patch.yml`，请先备份该文件。
-
-查看每条命令 JSON 输出中的 `status`，确认它为 `supported`。失败会报告具体原因并以非零退出码结束。较新兼容宿主需给三条命令都加上 `--rebind-registry`，先验证官方包归档，并在隔离 Node 进程中检查变化程序的兼容契约，再重建锁；步骤见[升级指南](docs/HOST_LOCK_UPGRADE.md#rebinding-compatible-package-versions)。
+Web 在完成相应准备后安装：
 
 ```sh
-DSH_RUNTIME_ROOT=/absolute/path/to/.dsh-runtime
-DSH_PROFILE_ROOT=/absolute/path/to/.dsh/profiles/web
-GUARD_HOST_LOCK="$DSH_PROFILE_ROOT/node_modules/.bin/dsh-completion-guard-host-lock"
-
-"$GUARD_HOST_LOCK" inspect --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT"
-"$GUARD_HOST_LOCK" inject --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT"
-dsh --profile web --dump-config | "$GUARD_HOST_LOCK" verify-dump --runtime-root "$DSH_RUNTIME_ROOT" --profile-root "$DSH_PROFILE_ROOT" --dump-config -
+dsh plugin --profile web add dsh-completion-guard@0.11.0
 ```
 
-Windows 请通过 Web 配置目录下的 `node_modules\.bin\dsh-completion-guard-host-lock.cmd` 运行相同的三个子命令，并使用 Windows 绝对路径。各版本的原生验收与发布证据在[验收记录](docs/LOCAL_ACCEPTANCE.md)中按版本绑定其精确制品字节单独记录；任何版本的源码与确定性证据都不能等同于该版本已安装制品的结论。其他宿主版本和制品仍需各自的原生证据。DSH、Guard 或 profile 路径变化后需要重新检查；仅 market 普通升级不需要重新注入。如果当前包集合缺失、重复、不可信或不同于已绑定环境，Guard 会保持不可用。
+装好插件还需核验环境。**宿主锁**记录这个 profile 实际加载的包和目录：先用 `inspect` 检查，再用 `inject` 写入，最后以 `verify-dump` 核对组合配置；注入前备份 `cordis.patch.yml`。[安装与首次载入](docs/GETTING_STARTED.md)给出 Web 命令、Windows 和 Desktop 路径及启动前的最后核验。[旧会话迁移指南](docs/ACTIVATION_MIGRATION.md)提供升级准备、完整命令和可复制的 AI 提示词。
 
-Desktop 请使用应用附带的 CLI 安装，再以 `--profile desktop`、应用 `app.asar` 和实际 profile 路径建立宿主锁。它的 CLI 不提供 `--dump-config`，请用 Guard 的 `dump-desktop` 生成组合配置再回读；见[Desktop 升级步骤](docs/HOST_LOCK_UPGRADE.md#official-desktop-profile)。官方插件市场（`dshmarket`）现在可以在 Desktop profile 中与 Guard 共存；安装或移除市场后，请按完整四步流程重建 Desktop 锁（`inspect`、`inject`、用 `dump-desktop` 新生成的组合配置、以及对新配置执行的 `verify-dump`）。
+## 启动后会看到什么
 
-已有安装请先按迁移说明，用冻结旧收据完成 `adopt` 和 `verify`，期间保持写者停止；宿主锁核验不执行模式 adoption。两项核验通过后（全新安装则在安装及宿主锁核验通过后），再启动 DSH Web，打开会话并查看 Guard 状态：
+已有会话请先等历史载入和状态重建结束，再查看：
 
 ```text
 /context-guard status
 ```
 
-新建根会话默认采用 `always`，从第一条真实用户消息开始保护。`status` 显示 Guard 是否开启、启动阶段（`armed` 表示已就绪、等待你的第一条消息）以及还有多少检查项。`off` 停止保护当前会话，但不删除历史。`clear` 关闭当前待办，同时保留禁止项。`diagnose` 说明完成检查为什么通过或失败；`migration` 报告当前会话适用哪套规则、升级与回滚分别意味着什么；`release` 报告显式发布契约、其覆盖范围以及仍在执行中的操作。
-
-### 普通工作
-
-照常让 DSH 修改文件或运行测试，助手通过 DSH 宿主工具执行。Guard 保存要求，观察宿主已持久化的调用与结果；要求的结果需要独立核验时，再使用只读回读。例如，宿主修改配置文件后，另一次精确文件回读可证明新内容；具名测试需要自己的真实运行结果。工具返回成功或助手自述，不能证明无关条件，也不能抹去对禁改文件的真实修改。`context_guard_prepare` 说明缺少什么证据，`context_guard_checkpoint` 只核对证据实际证明的谓词。
-
-0.6.x 的普通 `context_guard_action` 与 `context_guard_evidence` 不再执行编辑、测试或 Git 效果，而是返回迁移说明。新建文件还需可信的写入前不存在证据。包脚本就绪观察可以选择已有测试或评估输入，不强迫再次编辑，但它不证明脚本已经运行，也不认证任意数值输出。后续观察长期收益的要求，要到其时间或审批条件满足后才成为当前工作；简短“继续”只推进有来源且已就绪的具体动作。
-
-## 它保护什么
-
-- 保存需求、验收条件、禁止项和后续修正，不覆盖旧记录。
-- 只使用 DSH 已保存的工具调用和结果，并保存脱敏摘要而不是完整输出。
-- 只有动作和结果对应指定命令、文件或其他目标时，证据才有效。
-- 会话重建或恢复后重新检查完成状态；记录损坏时拒绝签发证书。
-- 当前检查表尚未通过时，阻止 Guard 自己守卫的 Goal 完成路径。DSH 内部仍可能绕过这条路径，因此插件会报告这些情况，不声称能阻止所有写入。
-
-## 状态与兼容性
+**使用默认配置的新建空根会话**采用 `always`，显示 `armed`，表示 Guard 已就绪、等待你的首条真实消息。此前 Guard 不追加会话事件，你仍可选择 DSH 会话 preset；DSH 可能记录自身的初始化事件。首条真实输入进入执行步骤时，保护就在同一步骤内开始，覆盖任务的第一次文件修改。图片或附件也能启动保护，纯空白消息不会。显式配置的 `activation: opt-in` 继续有效，需要执行 `/context-guard on` 才开始保护。
 
-0.9.0 的版本准入范围是 **DSH `>=0.2.0-rc.2`**，没有版本上限，并支持官方 Desktop 应用的独立 profile（`desktop`）：应用自有的 `dsh-profile-desktop` 按名称识别，其内置依赖图从已签名的 `app.asar` 原位读取，安装字节按发布 tarball 逐文件核验。Cordis 使用独立的 `>=4.0.4` peer 范围，仍须通过适配器资格验证。已发布的 `0.2.0-rc.2` 46 包依赖图为已审查基线（rc.1 图保留为历史证据）；较新混合版本图在所消费实现具备资格后，可建立自己的 registry 来源锁。变化的 Session/API 实现须通过有限行为探针，不兼容行为会报告具体资格缺口，旧证书不能转移到新锁。最终制品的 macOS/Windows 原生验收、未来版本原生证据与 Desktop 原生验收仍须分别建立。
+**旧会话**保留已核验的升级前模式，旧空会话也一样。新默认值不会覆盖旧绑定。显式 `activation` 与绑定矛盾时会报告 `activation_mode_conflict`；要采用新默认值并保留旧模式，请按[配置步骤](docs/GETTING_STARTED.md#新会话默认模式)操作。绑定缺失、损坏或冲突时，Guard 报告原因并拒绝认证，不猜测身份或模式。分叉会话继承父会话绑定的初始模式。
 
-升级后重新检查、注入并验证 host-lock，再按需启动对应 Profile，步骤见[宿主锁升级](docs/HOST_LOCK_UPGRADE.md)。旧会话由 DSH 迁移为 V4；Guard 保留旧 ledger 和证书，但不会重签或把旧身份升级为当前权限。Goal 为可选能力，宿主安装不代表它已启用。
+照常让 DSH 改文件、跑测试即可。DSH 执行工具，Guard 保存要求，并核对已记录的结果和必要的回读。例如，“修改配置并让测试通过”需要修改后的文件证据和通过的测试结果，助手说“已完成”还不够。`context_guard_prepare` 说明缺什么证据，`context_guard_checkpoint` 检查能否认证完成。
 
-宿主检查核对包身份、实现字节及实际加载它们的依赖路径。原生与模型验收绑定到每个版本的精确制品；请查看对应 Release 的附件和[兼容性说明](docs/COMPATIBILITY.md)。
+默认策略仍是 `standard`。自动参与保护不会增加修改、执行或发布权限，也不会自动签发完成证书。
 
-重启属于单独能力。当前 DSH 没有提供可独立验证的 market 已加载实例绑定，因此 Guard 的 market 重启适配器返回不可用；已有重启要求仍保持未完成。核心保护和不依赖该接口的操作继续工作。磁盘上的插件安装/应用不等于运行进程或 UI 已生效。
+## 模式和常用命令
 
-升级到新核心锁时，需要从实际运行时与 profile 重新生成并验证锁；旧证书不会被重新标记为新锁证据。详见[升级说明](docs/HOST_LOCK_UPGRADE.md)和[兼容性](docs/COMPATIBILITY.md)。
-
-从 [npm](https://www.npmjs.com/package/dsh-completion-guard) 选择已发布版本，并用 [GitHub Release](https://github.com/GreenLv/dsh-completion-guard/releases/latest) 的提交、校验和和原生 annex 核对制品。0.4.2 的历史发布面向 DSH `0.1.2-rc.1` 与 market 1.41；它不包含上述解耦。源码版本号、CI、同包原生验收和公开发布是不同状态，验收范围见[记录](docs/LOCAL_ACCEPTANCE.md)。
-
-项目在 2026-08-29 从 `dsh-context-guard` 更名为 `dsh-completion-guard`，内部 bundle id 仍为 `context-guard`。迁移保留会话、激活方式和禁用设置；不要在同一 profile 同时加载新旧包。需要 Node.js `>=22` 和 pnpm `>=11`。
-
-## 启用模式
-
-Context Guard 有两种启用模式：
-
-- `always`（新建根会话默认，推荐）：新建 DSH 根会话从第一条真实消息开始自动保护。首条真实输入前，Guard 不向会话追加事件；DSH 仍可能写入自身的初始化事件。你仍然可以在发送任何内容之前选择 DSH 会话模式（standard、minimal 或自定义 preset）。第一条真实消息进入执行步骤的那一刻，保护在同一步骤内、且位于该消息之前开始：第一个任务连同它的第一次文件修改都在覆盖范围内。首条消息只有图片或附件时同样开始保护，并保留待解释的资产项；纯空白消息不启动任何内容。在某个会话中执行 `/context-guard off` 后，该会话关闭保护，直到再次执行 `on`。
-- `opt-in`（显式选择）：打开会话时不会自动保护。你需要在这个会话中执行 `/context-guard on` 才会启用；执行 `/context-guard off` 可以再次关闭。开关只影响当前会话。
-
-**0.9.0 将新会话的默认模式改为 `always`；旧会话通过核验后的不可覆盖绑定保留升级前有效模式。** 升级前请停止相关会话写者，按[inspect/adopt/verify 迁移说明](docs/ACTIVATION_MIGRATION.md)准备旧模式清点与冻结收据，旧空会话也要包含。共享库存中不同 profile 的旧模式有冲突时，需要精确到会话的映射；Guard 不依据消息数量、时间戳或记录过的 `on` 猜测。
+| 命令或模式 | 作用 |
+| --- | --- |
+| `always` | 新建根会话从首条真实输入开始自动保护。 |
+| `opt-in` | 在会话中执行 `/context-guard on` 后开始保护。 |
+| `/context-guard status` | 查看启用状态、未完成检查及其原因。 |
+| `/context-guard off` / `on` | 关闭或开启当前会话的保护，保留历史。 |
+| `/context-guard diagnose` | 解释完成检查的结论。 |
+| `/context-guard clear` | 撤下当前检查表，保留禁止项；不表示其中的工作已执行完成。 |
+| `/context-guard migration` | 查看会话适用规则及升级、回退的影响。 |
+| `/context-guard release` | 查看显式采用的发布合同及剩余工作。 |
 
-恢复已有绑定的会话时，profile 缺省变化不改变它的模式。显式 `activation` 与绑定矛盾会报告 `activation_mode_conflict`；缺失或损坏的绑定不能认证，并给出具名诊断。恢复不会自行创建替代绑定；核验过的迁移收据可以受控补建同一旧模式，不修改已保存日志，也不重签证书。持久化的 `/context-guard off` 和 `on` 继续有效，`standard` 策略及执行、发布权限保持原合同。选择另一初始模式请新建根会话；回退时保留绑定和旧收据，按迁移说明操作。
+Guard 启用模式与 DSH 的标准、极简或自定义会话 preset 分开。已保存的 `off`、`on` 继续有效。如需修改后续新根会话的初始默认值，按[配置步骤](docs/GETTING_STARTED.md#新会话默认模式)操作，保留已有宿主锁字段和旧会话绑定。
 
-启用模式只控制 Guard 是否保护会话，不是 DSH 的会话模式（例如会话开始时所选的标准模式、极简模式）。Guard 不再在第一条消息之前写入任何内容，因此 DSH 会话模式可以在会话尚为新会话时选择。`/context-guard on` 和 `/context-guard off` 只负责开启或关闭 Guard 保护，不会改变 DSH 会话模式。
+## 历史载入与 0.9.0 缓存
 
-省略 `activation` 的 profile 新建根会话时采用 `always`；已有会话绑定仍具有优先权。若现有 profile 显式选择了 `opt-in`，请把实际 profile 的 `cordis.patch.yml` 中已有 `context-guard` 项设为 `activation: always`，保留已注入的宿主锁字段。下面的片段只显示要修改的字段，不用于替换整份配置：
+首次打开或恢复已有会话时，需要载入历史并重建 Guard 状态；再次进入也可能等待。这与新空会话的 `armed` 不同，后者是在等待你输入。
 
-```yaml
-- id: context-guard
-  name: dsh-completion-guard
-  config:
-    activation: always
-```
+0.9.0 只在确认历史未变、检查结果可安全复用时，复用旧历史已经通过的检查。同一次 Desktop 安装检查中，也会复用已读取并核验的应用文件。每次操作仍核对当前模式，并按需要重新核验 Goal 状态、私有记录和宿主环境。**本版没有修改官方宿主的历史视图生命周期或解码缓存，不能保证消除所有界面载入等待**。详见[本版性能边界](CHANGELOG.zh-CN.md#090)和[验收记录](docs/LOCAL_ACCEPTANCE.md)。
 
-DSH 的 Web 网页、Headless 终端和 Desktop 桌面应用使用独立配置。请修改实际使用的 profile；多种方式都用时分别修改：
+官方读取器若拒绝旧格式，先保留原日志和旧模式来源。可以用 `inventory`、`select` 明确选择可读会话，并在 `inspect/adopt/verify` 三步使用同一 `--selection`。排除的会话继续待处理：`selected_complete` 只表示选中行完成，不等于整库完成。损坏、权限问题及其他异常不会自动跳过。[迁移指南](docs/ACTIVATION_MIGRATION.md)提供命令、恢复方案及 AI 提示词。
 
-| 系统 | 你怎么使用 DSH | 默认路径 |
-| --- | --- | --- |
-| macOS / Linux | Web | `$HOME/.dsh/profiles/web/cordis.patch.yml` |
-| macOS / Linux | Headless | `$HOME/.dsh/profiles/headless/cordis.patch.yml` |
-| macOS | Desktop | `$HOME/.dsh/profiles/desktop/cordis.patch.yml` |
-| Windows | Desktop | `%USERPROFILE%\.dsh\profiles\desktop\cordis.patch.yml` |
-| Windows | Web | `%USERPROFILE%\.dsh\profiles\web\cordis.patch.yml` |
-| Windows | Headless | `%USERPROFILE%\.dsh\profiles\headless\cordis.patch.yml` |
+## 限制与隐私
 
-如果你设置过自定义 `DSH_HOME`，请用该目录替换路径开头的 `$HOME/.dsh` 或 `%USERPROFILE%\.dsh`。
+Guard 保存要求、核对相符的已持久化结果，并在恢复时重新检查。证据不足或状态损坏时，它拒绝认证完成。它能守卫自身接入的 Goal 完成路径，不能控制 DSH 所有内部写入，也不替代 DSH 的权限、工具、Goal 或压缩机制。普通调查可以如实回答，并不总能获得机器完成证书。
 
-不想手动改文件，也可以把下面这段话直接发给 DSH：
+Guard 保存有界、脱敏的证据摘要，不保存完整提示词、stdout、文件、凭据、图片或原始会话正文，详见[隐私说明](docs/PRIVACY.md)。磁盘安装不证明运行进程或界面已经加载；Guard 的市场重启适配器仍不可用。[兼容性说明](docs/COMPATIBILITY.md)列出可认证命令和平台边界。
 
-> 请把 `dsh-completion-guard` 新建根会话的默认模式设为 `always`，保留已有会话绑定。根据我当前使用 DSH 的方式（Web、Headless 或 Desktop），自动找到对应的 `cordis.patch.yml`，先备份该文件，只把 `id: context-guard` 这一项的 `activation` 设为 `always`，不要修改其他配置，也不要替我重启 DSH。完成后告诉我文件的绝对路径，并显示准确的修改内容。
+<details>
+<summary>高级完成检查、恢复行为与上游关系</summary>
 
-修改完成后，重启 DSH。
-
-## 如何检查完成状态
 
 启用后，Guard 会保存用户直接给出的要求和验收条件。只有已保存的工具结果与指定命令、文件或其他目标一致时，才能作为证据。取得机器完成认证需要通过 Guard 检查；证据缺失、过期或对象不一致时，任务保持未认证。当前证据规则未覆盖的调查或解释仍可如实回答并结束，但不会取得完成证书。
 
@@ -154,14 +108,10 @@ Guard 按原始范围保留每项要求、禁止项和答复义务。宿主记
 | `strict` | 在 standard 之上，你明确要求的视觉或完整范围验证必须由真实回读事实兑现，而不是一次"只是成功"的工具调用。 |
 | `release` | 显式采用的发布契约按精确候选和一次性预约核验受覆盖的发布操作。契约本身不提供用户授权或宿主权限。 |
 
-在 `cordis.patch.yml` 的同一项里与 `activation` 一起设置：
+若要使用 `strict`，先备份 `cordis.patch.yml`，再仅修改或添加原 `context-guard` 条目 `config` 下的 `policy`。保留启用模式、注入的宿主锁字段和其他配置。下方只展示要改的字段，不能替换完整条目：
 
 ```yaml
-- id: context-guard
-  name: dsh-completion-guard
-  config:
-    activation: always
-    policy: strict
+policy: strict
 ```
 
 ### 显式发布契约
@@ -193,6 +143,8 @@ Context Guard 负责完成认证；Goal、Todo、Compaction、continuation、权
 
 两个项目不共享运行时状态、安装器、缓存或发布历史。修复应先进入拥有对应运行时的仓库；只有同一行为确实适用于两侧时，才显式迁移。具体复用与替换边界见 [`docs/UPSTREAM_BASE.md`](docs/UPSTREAM_BASE.md) 和 [`docs/PORTING_NOTES.md`](docs/PORTING_NOTES.md)。
 
+</details>
+
 ## npm 下载量历史
 
 ![dsh-context-guard 与 dsh-completion-guard 的 npm 累计下载增长](https://raw.githubusercontent.com/GreenLv/dsh-completion-guard/stats/npm-downloads.zh-CN.svg)
@@ -201,10 +153,11 @@ Context Guard 负责完成认证；Goal、Todo、Compaction、continuation、权
 
 历史从首次公开发布 npm 的 2026-08-26 开始，保留首日真实下载数，不强行归零；纵轴从零起算。日期标签统一居中，按固定天数间隔显示，图注始终保留精确截止日。
 
-每日工作流仅发布至少相隔 12 小时复查一致、且距离当日已有两个 UTC 日历日的数据，另行标明 API 数据可用日期。这是项目的观测规则，不代表 npm 保证数值永不修订。详见[源数据](https://raw.githubusercontent.com/GreenLv/dsh-completion-guard/stats/npm-downloads.json)。
+工作流每天计划采集两次，仅发布至少相隔 12 小时复查一致、且距离当日已有两个 UTC 日历日的数据。图中分别显示历史截止日、API 数据可用日期和最近检查时间。npm 数据延迟或数值变化时，保留此前已复查的曲线，并显示等待复查；采集失败时保留上一份图。这是项目的观测规则，不代表 npm 保证数值永不修订。详见[源数据](https://raw.githubusercontent.com/GreenLv/dsh-completion-guard/stats/npm-downloads.json)和[最近采集状态](https://raw.githubusercontent.com/GreenLv/dsh-completion-guard/stats/refresh-status.json)。
 
 ## 文档
 
+- [安装与首次载入](docs/GETTING_STARTED.md) — 安全安装、首次等待及会话模式。
 - [`CHANGELOG.zh-CN.md`](CHANGELOG.zh-CN.md) — 面向使用者的版本变化。
 - [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) — 所有权、持久状态和认证管线。
 - [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md) — 支持的 DSH 版本和可认证命令子集。

package/bin/dsh-completion-guard-activation.mjs

@@ -49,7 +49,9 @@ async function main() {
   const require = createRequire(anchor)
   const { Context } = await import(pathToFileURL(require.resolve('@deepseek-ai/cordis')).href)
   const backendPath = require.resolve('@deepseek-ai/dsh-session-persistence-jsonl')
-  const { default: Jsonl } = await import(pathToFileURL(backendPath).href)
+  const jsonlModule = await import(pathToFileURL(backendPath).href)
+  const Jsonl = jsonlModule.default ?? jsonlModule
+  if (typeof Jsonl !== 'function' && (!Jsonl || typeof Jsonl !== 'object' || typeof Jsonl.apply !== 'function')) throw new Error('activation_backend_module_invalid')
   // Resolve the same dependency instance used by this physical JSONL backend.
   const { SessionFormatUnsupportedError } = await import(pathToFileURL(createRequire(backendPath).resolve('@deepseek-ai/dsh-session-persistence')).href)
   const ctx = new Context()

package/bin/dsh-completion-guard-host-lock.mjs

@@ -71,6 +71,21 @@ function summary(evaluation) {
   }
 }
 
+async function writeOutput(stream, text) {
+  await new Promise((resolve, reject) => {
+    const onError = error => reject(error)
+    stream.once('error', onError)
+    try {
+      stream.write(text, error => {
+        if (error) { reject(error); return } // The error event is consumed by onError.
+        stream.removeListener('error', onError)
+        resolve()
+      })
+    } catch (error) { stream.removeListener('error', onError); reject(error) }
+  })
+}
+
+async function main() {
 try {
   const command = process.argv[2]
   if (!['inspect', 'inspect-graph', 'inject', 'verify-dump', 'dump-desktop'].includes(command)) {
@@ -89,7 +104,7 @@ try {
       platform: process.platform === 'win32' ? 'windows' : 'posix',
       profileKind: 'desktop',
     }, trust ? JSON.stringify(trust) : undefined, profileRoot)
-    process.stdout.write(`${JSON.stringify({
+    await writeOutput(process.stdout, `${JSON.stringify({
       ...summary(evaluation),
       inspection_scope: 'pre_install_target',
       profile_graph: target.profileGraph,
@@ -104,7 +119,8 @@ try {
       },
       packages: target.packages,
     })}\n`)
-    process.exit(evaluation.status === 'supported' ? 0 : 1)
+    process.exitCode = evaluation.status === 'supported' ? 0 : 1
+    return
   }
   if (command === 'inspect-graph') {
     const trust = hasFlag('--rebind-registry')
@@ -115,8 +131,9 @@ try {
       platform: process.platform === 'win32' ? 'windows' : 'posix',
       ...(target.profileGraph.state === 'dependency_free_headless' ? { profileKind: 'headless' } : {}),
     }, trust ? JSON.stringify(trust) : undefined, option('--profile-root'))
-    process.stdout.write(`${JSON.stringify({ ...summary(evaluation), inspection_scope: 'pre_install_target', profile_graph: target.profileGraph, packages: rows })}\n`)
-    process.exit(evaluation.status === 'supported' ? 0 : 1)
+    await writeOutput(process.stdout, `${JSON.stringify({ ...summary(evaluation), inspection_scope: 'pre_install_target', profile_graph: target.profileGraph, packages: rows })}\n`)
+    process.exitCode = evaluation.status === 'supported' ? 0 : 1
+    return
   }
   // Explicit registry rebind. Existing baseline inspection stays offline.
   const trust = hasFlag('--rebind-registry')
@@ -160,18 +177,22 @@ try {
       env: { ...process.env, ELECTRON_RUN_AS_NODE: '1', DSH_HOME: dirname(dirname(profileRoot)) },
       stdio: ['ignore', 'pipe', 'pipe'],
     })
-    process.stdout.write(output)
-    process.exit(0)
+    await writeOutput(process.stdout, output)
+    return
   }
   if (command === 'inject') injectActiveProfileHostLock(active)
   if (command === 'verify-dump') {
     verifyComposedHostLockDump(readFileSync(option('--dump-config') === '-' ? 0 : option('--dump-config'), 'utf8'), active.evaluation, active)
   }
-  process.stdout.write(`${JSON.stringify({ ...summary(active.evaluation),
+  await writeOutput(process.stdout, `${JSON.stringify({ ...summary(active.evaluation),
     ...(command === 'inspect' ? { inspection_scope: 'active_profile' } : {}),
+    ...(command === 'verify-dump' ? { verification_scope: 'guard_host_lock_fields', configuration_syntax: 'not_checked' } : {}),
   })}\n`)
 } catch (error) {
   const code = error && typeof error === 'object' && 'code' in error ? String(error.code) : 'host_lock_command_failed'
-  process.stderr.write(`${JSON.stringify({ status: 'unavailable', reason_code: code })}\n`)
   process.exitCode = 1
+  try { await writeOutput(process.stderr, `${JSON.stringify({ status: 'unavailable', reason_code: code })}\n`) } catch { /* A closed diagnostic pipe still fails. */ }
+}
+
 }
+await main()

package/dist/domain/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as classifyCompletionClaim, $a as RejectedBinding, $c as actionCompatible, $i as ExecutableIdentity, $n as packageRowsFromActiveGraph, $o as NeedsReviewReason, $r as gitCommandMatchesTarget, $s as LEGACY_QUALIFICATION, $t as bindProofV2ToProjection, A as InitialActivation, Aa as MIN_SUPPORTED_HOST_VERSION, Ac as presentExplanationHead, Ai as capabilityRemedyPhrase, An as LifecyclePhase, Ao as DeriveConfig, Ar as acquireHostTrust, As as CapabilityRemedy, At as openItems, B as RC020_RC1_HOST_PACKAGES, Ba as AuthorityBlockKind, Bc as ACTION_MANIFEST_VERSION, Bi as PROTOCOL_V5_NOTICE, Bn as activeRendererModule, Bo as GoalRef, Br as GitCommandManifest, Bs as actionHasCertificationPath, Bt as PROOF_PROTOCOL_VERSION_V2, C as createActivationMigrationReceipt, Ca as evaluateToolSurfaceCapability, Cc as kindOfScope, Ci as shellReadbackOutcome, Cn as ManifestIssue, Co as AssetInterpretationFact, Cr as readDesktopDependency, Cs as proposeRebindOutcome, Ct as RecoveryOptions, D as resolveSessionActivation, Da as HostVersionDecision, Dc as namedActions, Di as Repairability, Dn as FIRST_STEP_GUIDANCE, Do as BoundaryQualificationKind, Dr as HostTrustAcquisitionOptions, Ds as replayRebindResult, Dt as carriesCleanupCondition, E as resolveActivationBindingsRoot, Ea as HOST_VALIDATED_VERSIONS, Ec as maskQuotedSpans, Ei as DiagnosisNextAction, En as ClaimedMessage, Eo as BoundaryDisposition, Er as HostRebindTrust, Es as rebindResponse, Et as V6_ORDINARY_COMPLETION_RULE_SHORT, F as activationDigest, Fa as evaluateMinimumHostVersion, Fc as semanticActionOfScope, Fi as relevantEvidence, Fn as previewFirstStepInjection, Fo as EvidenceOutcome, Fr as registryArchiveModules, Fs as OperationAttribution, Ft as PROOF_CAPABILITY_MATRIX, G as CONTROL_RECORD_PREFIX, Ga as UserInteractionKind, Gc as CERTIFICATE_VERSION_V2, Gi as rootLocatorFlavor, Gn as combineHostPolicy, Go as GuardItem, Gr as GitPrestateCheck, Gs as removalIsComplete, Gt as ProofManifest, H as projectCoreV2, Ha as authorityCaptureCounts, Hc as ActionSpec, Hi as applyUpgradeEligibility, Hn as auditedDefaultWorkdirProvider, Ho as GuardCheckpoint, Hr as GitCommandRejected, Hs as capabilityConsequence, Ht as ProofKind, I as activationJson, Ia as parseHostVersion, Ic as splitTextFragments, Ii as CAPTURE_V042_NOTICE, In as ActiveProfileHostLock, Io as EvidenceParseStatus, Ir as GIT_COMMAND_MANIFEST_IDS, Is as ProcessExitStatus, It as PROOF_KINDS, J as NO_PROGRESS_RECORD_PREFIX, Ja as CONFIRM_LINE_PATTERN, Jc as STOP_PROTOCOL_VERSION, Ji as ACTIVE_HOST_LAUNCHER_VERSION, Jn as hostLockContextFromComposedDump, Jo as GuardOperation, Jr as LinearCommitReadback, Js as DirectiveClass, Jt as ProofObligationV2, K as CompletionDisposition, Ka as classifyTaskIntent, Kc as SEMANTIC_ACTIONS, Ki as ACTIVE_HOST_COHORT_ID, Kn as evaluateActiveHostLock, Ko as GuardItemKind, Kr as GitPrestateEnvelope, Ks as removalIsPartiallyKnown, Kt as ProofManifestV2, L as sessionBirthIdentity, La as satisfiesSupportedHostRange, Lc as statefulActionsOfScope, Li as DEFAULT_DELEGATION_TOOL_NAMES, Ln as AuditedPackageExpectation, Lo as EvidenceRole, Lr as GIT_COMMAND_TEMPLATES, Ls as ProcessFactSource, Lt as PROOF_KINDS_V2, M as SessionActivationRead, Ma as SUPPORTED_HOST_RANGE, Mc as questionHeadsClause, Mi as evidenceAvailabilityReason, Mn as firstStepGuidance, Mo as DeriveScope, Mr as parseHostTrust, Ms as DeclaredOperationResult, Mt as recoveryTitle, N as SessionBirthIdentity, Na as SUPPORTED_HOST_VERSIONS, Nc as reportingHeadGoverns, Ni as itemDiagnosis, Nn as firstStepGuidanceV6, No as DerivedEnvelope, Nr as qualifyHostTrust, Ns as DependencyStatus, Nt as renderRecoveryPacket, O as validateActivationMigrationReceipt, Oa as HostVersionStatus, Oc as opensConditionLead, Oi as TaskKind, On as FirstStepInjection, Oo as DeferAuthorization, Or as HostTrustError, Os as CapabilityFact, Ot as cleanupConditionFor, P as activationCanonical, Pa as compareHostVersions, Pc as restatedContentOf, Pi as nativeFileTwoRole, Pn as lifecyclePhase, Po as EvidenceBinding, Pr as registryArchiveFiles, Ps as DerivedProcessFacts, Pt as v6CurrentRootBoundaries, Q as assessmentOutcomePredicate, Qa as CheckpointResult, Qc as StatefulAction, Qi as EXPECTED_HOST_PACKAGES, Qn as inspectTargetHostGraph, Qo as NeedsReviewFact, Qr as executeRevalidatedGitEffect, Qs as InterpretOptions, Qt as bindProofToProjection, R as validateActivationBinding, Ra as currentContractDigest, Rc as verbIsNegated, Ri as PROTOCOL_V3_NOTICE, Rn as HostProfileError, Ro as ExpectedTransition, Rr as GitAdapterAction, Rs as ProcessOutcomeReason, Rt as PROOF_MANIFEST_DOMAIN_V2, S as adoptActivationReceipt, Sa as evaluateHostLock, Sc as itemHoldsExecutionAuthority, Si as persistedToolResultStatus, Sn as CommandSurfaceManifest, So as qualifyBoundary, Sr as readDesktopAppRuntime, Ss as proposeRebind, St as RecoveryCause, T as readActivationMigrationReceipt, Ta as selectHostCohort, Tc as maskCodeSpans, Ti as CertificationSupport, Tn as validateManifest, To as BindingActionClosure, Tr as writeDesktopRuntimeReceipt, Ts as rebindAttemptKey, Tt as V6_ORDINARY_COMPLETION_RULE_COMPACT, U as supersedeItem, Ua as segmentAuthorityBlocks, Uc as BOUNDED_ARTIFACT_TYPES, Ui as deriveProjection, Un as auditedForegroundRenderers, Uo as GuardEvidence, Ur as GitEffectExecution, Us as capabilityFactOf, Ut as ProofKindCapability, V as projectSessionCoreV2, Va as AuthorityKind, Vc as ActionManifest, Vi as PROTOCOL_V6_NOTICE, Vn as auditedDefaultWorkdirHost, Vo as GuardBoundary, Vr as GitCommandParseResult, Vs as admissibleForRemoval, Vt as ProofHostSurface, W as AssistantOutcomeObservation, Wa as TaskIntent, Wc as CERTIFICATE_VERSION, Wi as legacyRecordsNeedingReview, Wn as auditedHostImplementation, Wo as GuardIntegrity, Wr as GitEffectRunner, Ws as partialFailureOf, Wt as ProofKindV2, X as TurnStoppingDecision, Xa as isFrozenV042RebindResponse, Xc as SUPPORTED_EVIDENCE_ADAPTERS, Xi as BASE_HOST_PACKAGES, Xn as injectActiveProfileHostLock, Xo as HostStatus, Xr as commitTreeSnapshotDigest, Xs as ExecutionQualification, Xt as SessionQuery, Y as NO_PROGRESS_TURNS_BEFORE_STOP, Ya as ParsedConfirmation, Yc as STOP_PROTOCOL_VERSION_V2, Yi as AuditedExecutable, Yn as hostLockRowsFromComposedDump, Yo as GuardProjection, Yr as commitIndexSnapshotDigest, Ys as Executee, Yt as ProofSurface, Z as assessmentAction, Za as parseConfirmationMessage, Zc as SemanticAction, Zi as DEFAULT_HOST_LOCK, Zn as inspectDesktopTargetGraph, Zo as MessageCoverage, Zr as createGitPrestateEnvelope, Zs as GRANTED_QUALIFICATION, Zt as SessionQueryV2, _ as verifyMigrationInventory, _a as bindExecutableIdentity, _c as isExplanationScope, _i as evidenceFromPersistedToolResult, _n as bindingSatisfies, _o as GoalActivationState, _r as hasDesktopImporterState, _s as BoundedSource, _t as CLEANUP_CONDITION_RULE, a as isSelectedActivationReceipt, aa as HostCapabilityEvaluation, ac as clauseAsksOwnQuestion, ai as ParsedShell, al as semanticActionFromCommand, an as proofDigestV2, ao as captureItem, ar as resolveActiveProfileHostLock, as as TargetSourceKind, at as isWholeTaskCompletionClaim, b as __activationBindingInternals, ba as evaluateGraphDerivedHostLock, bc as isQuestionScopeNeedingReview, bi as isDeterministicCheck, bn as isVerifyingCapability, bo as effectuateBoundary, br as readAsarFile, bs as RebindProposal, bt as DEFAULT_RECOVERY_CHAR_BUDGET, c as selectedActivationInventory, ca as HostCohort, cc as explanationHasActionResidue, ci as isRunExecutable, cl as validateActionTarget, cn as proofOperationMatches, co as extractArtifactPaths, cr as revalidateDesktopCoreLock, cs as VerificationContract, ct as observeAssistantOutcome, d as verifySelectedMigrationInventory, da as HostLockContext, dc as hasQuestionScope, di as goalCompletionDenial, dl as normalizeClause, dn as scopeCoverageDigest, do as isInformationalMessage, dr as DESKTOP_IDENTITY_FACTS, ds as createProjection, dt as v6TestPredicate, ea as ExecutableIdentityBinding, ec as QualificationReason, ei as parseGitCommandManifest, el as boundedArtifactChoiceMatches, en as canonicalProjection, eo as bindingIndividuallyAccepted, er as packageRowsFromPnpmLock, es as PersistenceAuthorization, et as currentActionBases, f as privateStorageToolDenial, fa as HostLockEvaluation, fc as hasWorkPredicate, fi as hasCurrentCertificate, fl as sanitizeClauseText, fn as sessionQuery, fo as segmentClauses, fr as DESKTOP_PROFILE_PACKAGE_NAME, ft as SESSION_API_UNSUPPORTED, g as prepareActivationMigration, ga as HostToolSurface, gc as isExecutableItem, gi as ToolSubject, gn as EvidenceFacetCoverage, go as BoundaryRequest, gr as auditDesktopInstalledImplementation, gt as snapshotSessionEvents, h as inspectActivationInventory, ha as HostProfileKind, hc as introducesActionClause, hi as ToolResultInput, hn as validateProofManifestV2, ho as BoundaryQualification, hr as DesktopTargetGraph, ht as V4SessionLike, i as createActivationSelection, ia as HostAuditProvenance, ic as clarifiedSpanOf, ii as CanonicalCommandSurface, il as requestedTargetMatchesResolved, in as proofDigest, io as captureClause, ir as readActiveHostGraph, is as TargetSource, it as isRootPauseRequest, j as SessionActivationBinding, ja as ParsedHostVersion, jc as qualificationOfClause, ji as deriveItemDiagnosis, jn as claimedBatchHasRealRootInput, jo as DeriveResult, jr as hostTrustDigest, js as DEPENDENCY_FREE_ONLY_CONDITION, jt as recoveryDigest, k as writeActivationBinding, ka as LATEST_TESTED_HOST_VERSION, kc as opensWithDirective, ki as UnifiedItemDiagnosis, kn as FirstStepPreviewInput, ko as DelegationRef, kr as HostTrustedPackage, ks as CapabilityGap, kt as closingHint, l as validateActivationInventorySnapshot, la as HostCohortSelection, lc as governedClauseRestrictsExecution, li as parsePwshCommand, ll as canonicalizePath, ln as proofV2Rejection, lo as extractMethod, lr as verifyComposedHostLockDump, ls as WaitAuthorization, lt as progressFingerprint, m as ActivationPriorModes, ma as HostPlatform, mc as interpretMessage, mi as ToolCallInput, ml as sha256, mn as validateProofManifest, mo as BoundaryEffectuation, mr as DesktopAppRuntime, mt as SessionApiError, n as ActivationMigrationSelection, na as HOST_CAPABILITY_PACKAGE_GROUPS, nc as ScopeInterpretation, ni as verifiedLinearCommitReadback, nl as requestedIdentityKey, nn as createProofManifestV2, no as CaptureScope, nr as prepareDesktopHostTrust, ns as TargetCaptureReasonCode, nt as decideTurnStopping, o as prepareSelectedActivationMigration, oa as HostCapabilityId, oc as clauseIsGoverned, oi as ShellParseStatus, ol as semanticActionFromText, on as proofEvidenceConstraints, oo as classifyClause, or as resolveDesktopProfileHostLock, os as TargetTuple, ot as latestAssistantText, p as ActivationInventoryPersistence, pa as HostLockStatus, pc as interpretClause, pi as NATIVE_GIT_ROOT_PARENT_OID, pl as sanitizeUrl, pn as sessionQueryV2, po as BOUNDARY_RECORD_PREFIX, pr as DESKTOP_RUNTIME_PACKAGE_NAME, pt as SESSION_EVENT_ENVELOPE_INVALID, q as CurrentActionBasis, qa as classifyUserInteraction, qc as STATEFUL_ACTIONS, qi as ACTIVE_HOST_COHORT_IDS, qn as evaluateConfiguredHostLock, qo as GuardItemStatus, qr as GitTargetIdentity, qs as AuthorityDisposition, qt as ProofObligation, r as activationSelectionPending, ra as HOST_COHORTS, rc as actionVerbMatches, ri as CanonicalArgv, rl as requestedTargetAuthorizesMutation, rn as proofCapabilityReport, ro as ClauseSegment, rr as prepareTargetHostTrust, rs as TargetCaptureStatus, rt as decisionBoundaryKey, s as scanActivationInventory, sa as HostCapabilityRequest, sc as clauseIsProtected, si as canonicalArgvFromCommand, sl as validateActionManifest, sn as proofHostSurfacesOf, so as environmentDefaultRepositoryTarget, sr as resolveInstalledHostLock, ss as TargetValue, st as latestRootInstruction, t as ActivationInventorySnapshot, ta as GOAL_HOST_PACKAGES, tc as QualificationStatus, ti as revalidateGitPrestate, tl as isStatefulAction, tn as createProofManifest, to as certifyCheckpoint, tr as prepareActiveHostTrust, ts as SourceSpan, tt as decideTurnBoundary, u as validateActivationSelection, ua as HostCohortSelectionReason, uc as hasOrderedCoordination, ui as parseShellCommand, ul as digestStrings, un as requiredSubjectsOf, uo as extractOperation, ur as AsarIndex, us as WorkUnit, ut as testOutcomePredicate, v as ActivationMigrationEntry, va as bindLiveGoalCapability, vc as isInformationalFragment, vi as extractTextContent, vn as evidenceCoverage, vo as GoalBoundaryAccess, vr as memoizedAsarFile, vs as ProposeOutcome, vt as CLEANUP_CONDITION_RULE_COMPACT, w as readActivationBinding, wa as hostVersionFromPackages, wc as legacyQuestionReadingIsInformational, wi as withDurability, wn as OperationVerbEntry, wo as AssetObligation, wr as readDesktopTargetGraph, ws as proposeRebindV042, wt as V6_ORDINARY_COMPLETION_RULE, x as activationBindingPath, xa as evaluateHostCapability, xc as isRestatement, xi as nativeGitParentOidVerified, xn as COMMAND_SURFACE_MANIFEST, xo as isCurrentAcceptedBoundary, xr as readAsarIndex, xs as confirmRebind, xt as MIN_RECOVERY_CHAR_BUDGET, y as ActivationMigrationReceipt, ya as evaluateExternalWaitCapability, yc as isOpenObligation, yi as extractToolSubject, yn as evidenceMatchesItem, yo as availableBoundaryQualifications, yr as memoizedAsarIndex, ys as RebindArgs, yt as CLEANUP_CONDITION_RULE_SHORT, z as RC020_RC2_HOST_PACKAGES, za as AuthorityBlock, zc as ACTION_MANIFEST, zi as PROTOCOL_V4_NOTICE, zn as TargetHostGraph, zo as ExternalOperation, zr as GitCommandAccepted, zs as RemovalOutcomeReport, zt as PROOF_PROTOCOL_VERSION } from "../index-qKK3BJW1.js";
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+import { $ as assessmentAction, $a as parseConfirmationMessage, $c as STOP_PROTOCOL_VERSION_V2, $i as DEFAULT_HOST_LOCK, $n as inspectDesktopTargetGraph, $o as HostStatus, $r as createGitPrestateEnvelope, $s as Executee, $t as SessionQueryV2, A as InitialActivation, Aa as HostVersionStatus, Ac as maskQuotedSpans, Ai as TaskKind, An as FirstStepInjection, Ao as CwdEpoch, Ar as HostTrustError, As as rebindResponse, At as cleanupConditionFor, B as RC021_RC2_HOST_PACKAGES, Ba as currentContractDigest, Bc as splitTextFragments, Bi as PROTOCOL_V3_NOTICE, Bn as HostProfileError, Bo as EvidenceRole, Br as GitAdapterAction, Bs as ProcessExitStatus, Bt as PROOF_MANIFEST_DOMAIN_V2, C as createActivationMigrationReceipt, Ca as evaluateHostCapability, Cc as isOpenObligation, Ci as nativeGitParentOidVerified, Cn as COMMAND_SURFACE_MANIFEST, Co as isCurrentAcceptedBoundary, Cr as readAsarIndex, Cs as RebindArgs, Ct as MIN_RECOVERY_CHAR_BUDGET, D as resolveSessionActivation, Da as selectHostCohort, Dc as kindOfScope, Di as CertificationSupport, Dn as validateManifest, Do as BindingActionClosure, Dr as writeDesktopRuntimeReceipt, Ds as proposeRebindOutcome, Dt as V6_ORDINARY_COMPLETION_RULE_COMPACT, E as resolveActivationBindingsRoot, Ea as hostVersionFromPackages, Ec as itemHoldsExecutionAuthority, Ei as withDurability, En as OperationVerbEntry, Eo as AssetObligation, Er as readDesktopTargetGraph, Es as proposeRebind, Et as V6_ORDINARY_COMPLETION_RULE, F as activationDigest, Fa as SUPPORTED_HOST_VERSIONS, Fc as qualificationOfClause, Fi as itemDiagnosis, Fn as firstStepGuidanceV6, Fo as DeriveScope, Fr as qualifyHostTrust, Fs as DEPENDENCY_FREE_ONLY_CONDITION, Ft as renderRecoveryPacket, G as supersedeItem, Ga as segmentAuthorityBlocks, Gc as ActionManifest, Gi as deriveProjection, Gn as auditedForegroundRenderers, Go as GuardCheckpoint, Gr as GitEffectExecution, Gs as admissibleForRemoval, Gt as ProofKindCapability, H as RC020_RC1_HOST_PACKAGES, Ha as AuthorityBlockKind, Hc as verbIsNegated, Hi as PROTOCOL_V5_NOTICE, Hn as activeRendererModule, Ho as ExternalOperation, Hr as GitCommandManifest, Hs as ProcessOutcomeReason, Ht as PROOF_PROTOCOL_VERSION_V2, I as activationJson, Ia as compareHostVersions, Ic as questionHeadsClause, Ii as nativeFileTwoRole, In as lifecyclePhase, Io as DerivedEnvelope, Ir as registryArchiveFiles, Is as DeclaredOperationResult, It as v6CurrentRootBoundaries, J as CompletionDisposition, Ja as classifyTaskIntent, Jc as CERTIFICATE_VERSION, Ji as ACTIVE_HOST_COHORT_ID, Jn as evaluateActiveHostLock, Jo as GuardItem, Jr as GitPrestateEnvelope, Js as partialFailureOf, Jt as ProofManifestV2, K as AssistantOutcomeObservation, Ka as TaskIntent, Kc as ActionSpec, Ki as legacyRecordsNeedingReview, Kn as auditedHostImplementation, Ko as GuardEvidence, Kr as GitEffectRunner, Ks as capabilityConsequence, Kt as ProofKindV2, L as sessionBirthIdentity, La as evaluateMinimumHostVersion, Lc as reportingHeadGoverns, Li as relevantEvidence, Ln as previewFirstStepInjection, Lo as EvidenceBinding, Lr as registryArchiveModules, Ls as DependencyStatus, Lt as PROOF_CAPABILITY_MATRIX, M as SessionActivationRead, Ma as MIN_SUPPORTED_HOST_VERSION, Mc as opensConditionLead, Mi as capabilityRemedyPhrase, Mn as LifecyclePhase, Mo as DelegationRef, Mr as acquireHostTrust, Ms as CapabilityFact, Mt as openItems, N as SessionBirthIdentity, Na as ParsedHostVersion, Nc as opensWithDirective, Ni as deriveItemDiagnosis, Nn as claimedBatchHasRealRootInput, No as DeriveConfig, Nr as hostTrustDigest, Ns as CapabilityGap, Nt as recoveryDigest, O as validateActivationMigrationReceipt, Oa as HOST_VALIDATED_VERSIONS, Oc as legacyQuestionReadingIsInformational, Oi as DiagnosisNextAction, On as ClaimedMessage, Oo as BoundaryDisposition, Or as HostRebindTrust, Os as proposeRebindV042, Ot as V6_ORDINARY_COMPLETION_RULE_SHORT, P as activationCanonical, Pa as SUPPORTED_HOST_RANGE, Pc as presentExplanationHead, Pi as evidenceAvailabilityReason, Pn as firstStepGuidance, Po as DeriveResult, Pr as parseHostTrust, Ps as CapabilityRemedy, Pt as recoveryTitle, Q as TurnStoppingDecision, Qa as isFrozenV042RebindResponse, Qc as STOP_PROTOCOL_VERSION, Qi as BASE_HOST_PACKAGES, Qn as injectActiveProfileHostLock, Qo as GuardProjection, Qr as commitTreeSnapshotDigest, Qs as DirectiveClass, Qt as SessionQuery, R as validateActivationBinding, Ra as parseHostVersion, Rc as restatedContentOf, Ri as CAPTURE_V042_NOTICE, Rn as ActiveProfileHostLock, Ro as EvidenceOutcome, Rr as GIT_COMMAND_MANIFEST_IDS, Rs as DerivedProcessFacts, Rt as PROOF_KINDS, S as adoptActivationReceipt, Sa as evaluateGraphDerivedHostLock, Sc as isInformationalFragment, Si as isDeterministicCheck, Sn as isVerifyingCapability, So as effectuateBoundary, Sr as readAsarFile, Ss as ProposeOutcome, St as DEFAULT_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as evaluateToolSurfaceCapability, Tc as isRestatement, Ti as shellReadbackOutcome, Tn as ManifestIssue, To as AssetInterpretationFact, Tr as readDesktopDependency, Ts as confirmRebind, Tt as RecoveryOptions, U as projectSessionCoreV2, Ua as AuthorityKind, Uc as ACTION_MANIFEST, Ui as PROTOCOL_V6_NOTICE, Un as auditedDefaultWorkdirHost, Uo as GoalRef, Ur as GitCommandParseResult, Us as RemovalOutcomeReport, Ut as ProofHostSurface, V as RC020_RC2_HOST_PACKAGES, Va as AuthorityBlock, Vc as statefulActionsOfScope, Vi as PROTOCOL_V4_NOTICE, Vn as TargetHostGraph, Vo as ExpectedTransition, Vr as GitCommandAccepted, Vs as ProcessFactSource, Vt as PROOF_PROTOCOL_VERSION, W as projectCoreV2, Wa as authorityCaptureCounts, Wc as ACTION_MANIFEST_VERSION, Wi as applyUpgradeEligibility, Wn as auditedDefaultWorkdirProvider, Wo as GuardBoundary, Wr as GitCommandRejected, Ws as actionHasCertificationPath, Wt as ProofKind, X as NO_PROGRESS_RECORD_PREFIX, Xa as CONFIRM_LINE_PATTERN, Xc as SEMANTIC_ACTIONS, Xi as ACTIVE_HOST_LAUNCHER_VERSION, Xn as hostLockContextFromComposedDump, Xo as GuardItemStatus, Xr as LinearCommitReadback, Xs as removalIsPartiallyKnown, Xt as ProofObligationV2, Y as CurrentActionBasis, Ya as classifyUserInteraction, Yc as CERTIFICATE_VERSION_V2, Yi as ACTIVE_HOST_COHORT_IDS, Yn as evaluateConfiguredHostLock, Yo as GuardItemKind, Yr as GitTargetIdentity, Ys as removalIsComplete, Yt as ProofObligation, Z as NO_PROGRESS_TURNS_BEFORE_STOP, Za as ParsedConfirmation, Zc as STATEFUL_ACTIONS, Zi as AuditedExecutable, Zn as hostLockRowsFromComposedDump, Zo as GuardOperation, Zr as commitIndexSnapshotDigest, Zs as AuthorityDisposition, Zt as ProofSurface, _ as verifyMigrationInventory, _a as HostProfileKind, _c as interpretClause, _i as ToolResultInput, _l as sanitizeUrl, _n as validateProofManifestV2, _o as BoundaryQualification, _r as DesktopTargetGraph, _t as V4SessionLike, a as isSelectedActivationReceipt, aa as HOST_COHORTS, ac as QualificationStatus, ai as CanonicalArgv, al as isStatefulAction, an as proofCapabilityReport, ao as ClauseSegment, ar as prepareTargetHostTrust, as as SourceSpan, at as decisionBoundaryKey, b as __activationBindingInternals, ba as bindLiveGoalCapability, bc as isExecutableItem, bi as extractTextContent, bn as evidenceCoverage, bo as GoalBoundaryAccess, br as memoizedAsarFile, bt as CLEANUP_CONDITION_RULE_COMPACT, c as selectedActivationInventory, ca as HostCapabilityId, cc as clarifiedSpanOf, ci as ShellParseStatus, cl as requestedTargetMatchesResolved, cn as proofEvidenceConstraints, co as classifyClause, cr as resolveDesktopProfileHostLock, cs as TargetSource, ct as latestAssistantText, d as verifySelectedMigrationInventory, da as HostCohortSelection, dc as clauseIsProtected, di as parsePwshCommand, dl as validateActionManifest, dn as proofV2Rejection, do as extractMethod, dr as verifyComposedHostLockDump, ds as TargetValue, dt as progressFingerprint, ea as EXPECTED_HOST_PACKAGES, ec as ExecutionQualification, ei as executeRevalidatedGitEffect, el as SUPPORTED_EVIDENCE_ADAPTERS, en as bindProofToProjection, eo as CheckpointResult, er as inspectTargetHostGraph, es as JobLifecycleRecord, et as assessmentOutcomePredicate, f as privateStorageToolDenial, fa as HostCohortSelectionReason, fc as explanationHasActionResidue, fi as parseShellCommand, fl as validateActionTarget, fn as requiredSubjectsOf, fo as extractOperation, fr as AsarIndex, fs as VerificationContract, ft as testOutcomePredicate, g as prepareActivationMigration, ga as HostPlatform, gc as hasWorkPredicate, gi as ToolCallInput, gl as sanitizeClauseText, gn as validateProofManifest, go as BoundaryEffectuation, gr as DesktopAppRuntime, gt as SessionApiError, h as inspectActivationInventory, ha as HostLockStatus, hc as hasQuestionScope, hi as NATIVE_GIT_ROOT_PARENT_OID, hl as normalizeClause, hn as sessionQueryV2, ho as BOUNDARY_RECORD_PREFIX, hr as DESKTOP_RUNTIME_PACKAGE_NAME, hs as createProjection, ht as SESSION_EVENT_ENVELOPE_INVALID, i as createActivationSelection, ia as HOST_CAPABILITY_PACKAGE_GROUPS, ic as QualificationReason, ii as verifiedLinearCommitReadback, il as boundedArtifactChoiceMatches, in as createProofManifestV2, io as CaptureScope, ir as prepareDesktopHostTrust, is as PersistenceAuthorization, it as decideTurnStopping, j as SessionActivationBinding, ja as LATEST_TESTED_HOST_VERSION, jc as namedActions, ji as UnifiedItemDiagnosis, jn as FirstStepPreviewInput, jo as DeferAuthorization, jr as HostTrustedPackage, js as replayRebindResult, jt as closingHint, k as writeActivationBinding, ka as HostVersionDecision, kc as maskCodeSpans, ki as Repairability, kn as FIRST_STEP_GUIDANCE, ko as BoundaryQualificationKind, kr as HostTrustAcquisitionOptions, ks as rebindAttemptKey, kt as carriesCleanupCondition, l as validateActivationInventorySnapshot, la as HostCapabilityRequest, lc as clauseAsksOwnQuestion, li as canonicalArgvFromCommand, ll as semanticActionFromCommand, ln as proofHostSurfacesOf, lo as environmentDefaultRepositoryTarget, lr as resolveInstalledHostLock, ls as TargetSourceKind, lt as latestRootInstruction, m as ActivationPriorModes, ma as HostLockEvaluation, mc as hasOrderedCoordination, mi as hasCurrentCertificate, ml as digestStrings, mn as sessionQuery, mo as segmentClauses, mr as DESKTOP_PROFILE_PACKAGE_NAME, ms as WorkUnit, mt as SESSION_API_UNSUPPORTED, n as ActivationMigrationSelection, na as ExecutableIdentityBinding, nc as InterpretOptions, ni as parseGitCommandManifest, nl as StatefulAction, nn as canonicalProjection, no as bindingIndividuallyAccepted, nr as packageRowsFromPnpmLock, ns as NeedsReviewFact, nt as currentActionBases, o as prepareSelectedActivationMigration, oa as HostAuditProvenance, oc as ScopeInterpretation, oi as CanonicalCommandSurface, ol as requestedIdentityKey, on as proofDigest, oo as captureClause, or as readActiveHostGraph, os as TargetCaptureReasonCode, ot as isRootPauseRequest, p as ActivationInventoryPersistence, pa as HostLockContext, pc as governedClauseRestrictsExecution, pi as goalCompletionDenial, pl as canonicalizePath, pn as scopeCoverageDigest, po as isInformationalMessage, pr as DESKTOP_IDENTITY_FACTS, ps as WaitAuthorization, pt as v6TestPredicate, q as CONTROL_RECORD_PREFIX, qa as UserInteractionKind, qc as BOUNDED_ARTIFACT_TYPES, qi as rootLocatorFlavor, qn as combineHostPolicy, qo as GuardIntegrity, qr as GitPrestateCheck, qs as capabilityFactOf, qt as ProofManifest, r as activationSelectionPending, ra as GOAL_HOST_PACKAGES, rc as LEGACY_QUALIFICATION, ri as revalidateGitPrestate, rl as actionCompatible, rn as createProofManifest, ro as certifyCheckpoint, rr as prepareActiveHostTrust, rs as NeedsReviewReason, rt as decideTurnBoundary, s as scanActivationInventory, sa as HostCapabilityEvaluation, sc as actionVerbMatches, si as ParsedShell, sl as requestedTargetAuthorizesMutation, sn as proofDigestV2, so as captureItem, sr as resolveActiveProfileHostLock, ss as TargetCaptureStatus, st as isWholeTaskCompletionClaim, t as ActivationInventorySnapshot, ta as ExecutableIdentity, tc as GRANTED_QUALIFICATION, ti as gitCommandMatchesTarget, tl as SemanticAction, tn as bindProofV2ToProjection, to as RejectedBinding, tr as packageRowsFromActiveGraph, ts as MessageCoverage, tt as classifyCompletionClaim, u as validateActivationSelection, ua as HostCohort, uc as clauseIsGoverned, ui as isRunExecutable, ul as semanticActionFromText, un as proofOperationMatches, uo as extractArtifactPaths, ur as revalidateDesktopCoreLock, us as TargetTuple, ut as observeAssistantOutcome, v as ActivationMigrationEntry, va as HostToolSurface, vc as interpretMessage, vi as ToolSubject, vl as sha256, vn as EvidenceFacetCoverage, vo as BoundaryRequest, vr as auditDesktopInstalledImplementation, vt as snapshotSessionEvents, w as readActivationBinding, wa as evaluateHostLock, wc as isQuestionScopeNeedingReview, wi as persistedToolResultStatus, wn as CommandSurfaceManifest, wo as qualifyBoundary, wr as readDesktopAppRuntime, ws as RebindProposal, wt as RecoveryCause, x as activationBindingPath, xa as evaluateExternalWaitCapability, xc as isExplanationScope, xi as extractToolSubject, xn as evidenceMatchesItem, xo as availableBoundaryQualifications, xr as memoizedAsarIndex, xs as BoundedSource, xt as CLEANUP_CONDITION_RULE_SHORT, y as ActivationMigrationReceipt, ya as bindExecutableIdentity, yc as introducesActionClause, yi as evidenceFromPersistedToolResult, yl as stripUrlCredentials, yn as bindingSatisfies, yo as GoalActivationState, yr as hasDesktopImporterState, yt as CLEANUP_CONDITION_RULE, z as RC021_RC3_HOST_PACKAGES, za as satisfiesSupportedHostRange, zc as semanticActionOfScope, zi as DEFAULT_DELEGATION_TOOL_NAMES, zn as AuditedPackageExpectation, zo as EvidenceParseStatus, zr as GIT_COMMAND_TEMPLATES, zs as OperationAttribution, zt as PROOF_KINDS_V2 } from "../index-ClmcMWbM.js";
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };

package/dist/domain/index.js

@@ -1,3 +1,3 @@
-import { $ as extractTextContent, $a as readActivationBinding, $i as registryArchiveModules, $n as itemDiagnosis, $r as qualificationOfClause, $t as v6CurrentRootBoundaries, A as projectSessionCoreV2, Aa as CERTIFICATE_VERSION, Ai as resolveDesktopProfileHostLock, Ao as normalizeClause, Ar as explanationHasActionResidue, At as proofOperationMatches, B as CAPTURE_V042_NOTICE, Ba as requestedIdentityKey, Bi as memoizedAsarIndex, Bn as confirmRebind, Br as isInformationalFragment, Bt as CLEANUP_CONDITION_RULE_SHORT, C as verifiedLinearCommitReadback, Ca as compareHostVersions, Ci as packageRowsFromActiveGraph, Cn as progressFingerprint, Cr as GRANTED_QUALIFICATION, Ct as createProofManifest, D as firstStepGuidanceV6, Da as ACTION_MANIFEST, Di as prepareTargetHostTrust, Dn as hasCurrentCertificate, Dr as clauseAsksOwnQuestion, Dt as proofDigestV2, E as firstStepGuidance, Ea as satisfiesSupportedHostRange, Ei as prepareDesktopHostTrust, En as goalCompletionDenial, Er as clarifiedSpanOf, Et as proofDigest, F as SESSION_API_UNSUPPORTED, Fa as STOP_PROTOCOL_VERSION_V2, Fi as DESKTOP_PROFILE_PACKAGE_NAME, Fn as effectuateBoundary, Fr as interpretClause, Ft as sessionQueryV2, G as PROTOCOL_V6_NOTICE, Ga as validateActionManifest, Gi as readDesktopTargetGraph, Gn as rebindResponse, Gr as kindOfScope, Gt as V6_ORDINARY_COMPLETION_RULE_SHORT, H as PROTOCOL_V3_NOTICE, Ha as requestedTargetMatchesResolved, Hi as readAsarIndex, Hn as proposeRebindOutcome, Hr as isQuestionScopeNeedingReview, Ht as MIN_RECOVERY_CHAR_BUDGET, I as SESSION_EVENT_ENVELOPE_INVALID, Ia as SUPPORTED_EVIDENCE_ADAPTERS, Ii as DESKTOP_RUNTIME_PACKAGE_NAME, In as isCurrentAcceptedBoundary, Ir as interpretMessage, It as validateProofManifest, J as legacyRecordsNeedingReview, Ji as acquireHostTrust, Jn as isFrozenV042RebindResponse, Jr as maskQuotedSpans, Jt as closingHint, K as applyUpgradeEligibility, Ka as validateActionTarget, Ki as writeDesktopRuntimeReceipt, Kn as replayRebindResult, Kr as legacyQuestionReadingIsInformational, Kt as carriesCleanupCondition, L as SessionApiError, La as actionCompatible, Li as auditDesktopInstalledImplementation, Ln as qualifyBoundary, Lr as introducesActionClause, Lt as validateProofManifestV2, Ma as SEMANTIC_ACTIONS, Mi as revalidateDesktopCoreLock, Mo as sanitizeUrl, Mr as hasOrderedCoordination, Mt as requiredSubjectsOf, Na as STATEFUL_ACTIONS, Ni as verifyComposedHostLockDump, Nn as BOUNDARY_RECORD_PREFIX, No as sha256, Nr as hasQuestionScope, Nt as scopeCoverageDigest, O as lifecyclePhase, Oa as ACTION_MANIFEST_VERSION, Oi as readActiveHostGraph, Oo as canonicalizePath, Or as clauseIsGoverned, Ot as proofEvidenceConstraints, Pa as STOP_PROTOCOL_VERSION, Pi as DESKTOP_IDENTITY_FACTS, Pn as availableBoundaryQualifications, Po as privateStorageToolDenial, Pr as hasWorkPredicate, Pt as sessionQuery, Q as evidenceFromPersistedToolResult, Qa as createActivationMigrationReceipt, Qi as registryArchiveFiles, Qn as evidenceAvailabilityReason, Qr as presentExplanationHead, Qt as renderRecoveryPacket, R as snapshotSessionEvents, Ra as boundedArtifactChoiceMatches, Ri as hasDesktopImporterState, Rn as currentContractDigest, Rr as isExecutableItem, Rt as CLEANUP_CONDITION_RULE, S as revalidateGitPrestate, Sa as SUPPORTED_HOST_VERSIONS, Si as inspectTargetHostGraph, Sn as observeAssistantOutcome, Sr as classifyUserInteraction, St as canonicalProjection, T as claimedBatchHasRealRootInput, Ta as parseHostVersion, Ti as prepareActiveHostTrust, Tn as v6TestPredicate, Tr as actionVerbMatches, Tt as proofCapabilityReport, U as PROTOCOL_V4_NOTICE, Ua as semanticActionFromCommand, Ui as readDesktopAppRuntime, Un as proposeRebindV042, Ur as isRestatement, Ut as V6_ORDINARY_COMPLETION_RULE, V as DEFAULT_DELEGATION_TOOL_NAMES, Va as requestedTargetAuthorizesMutation, Vi as readAsarFile, Vn as proposeRebind, Vr as isOpenObligation, Vt as DEFAULT_RECOVERY_CHAR_BUDGET, W as PROTOCOL_V5_NOTICE, Wa as semanticActionFromText, Wi as readDesktopDependency, Wn as rebindAttemptKey, Wr as itemHoldsExecutionAuthority, Wt as V6_ORDINARY_COMPLETION_RULE_COMPACT, X as supersedeItem, Xa as activationBindingPath, Xi as parseHostTrust, Xn as capabilityRemedyPhrase, Xr as opensConditionLead, Xt as recoveryDigest, Y as rootLocatorFlavor, Ya as __activationBindingInternals, Yi as hostTrustDigest, Yn as parseConfirmationMessage, Yr as namedActions, Yt as openItems, Z as NATIVE_GIT_ROOT_PARENT_OID, Za as adoptActivationReceipt, Zi as qualifyHostTrust, Zn as deriveItemDiagnosis, Zr as opensWithDirective, Zt as recoveryTitle, _ as commitTreeSnapshotDigest, _a as selectHostCohort, _i as evaluateConfiguredHostLock, _n as decisionBoundaryKey, _r as isInformationalMessage, _t as PROOF_MANIFEST_DOMAIN_V2, a as scanActivationInventory, aa as EXPECTED_HOST_PACKAGES, ai as statefulActionsOfScope, an as evidenceCoverage, ao as activationCanonical, ar as capabilityConsequence, at as withDurability, b as gitCommandMatchesTarget, ba as MIN_SUPPORTED_HOST_VERSION, bi as injectActiveProfileHostLock, bn as latestAssistantText, bt as bindProofToProjection, c as validateActivationSelection, ca as HOST_COHORTS, ci as validateManifest, cn as CONTROL_RECORD_PREFIX, co as sessionBirthIdentity, cr as removalIsComplete, ct as parsePwshCommand, d as prepareActivationMigration, da as evaluateExternalWaitCapability, di as auditedDefaultWorkdirHost, dn as assessmentAction, dr as captureItem, dt as segmentAuthorityBlocks, ea as ACTIVE_HOST_COHORT_ID, ei as questionHeadsClause, eo as readActivationMigrationReceipt, er as nativeFileTwoRole, et as extractToolSubject, f as verifyMigrationInventory, fa as evaluateGraphDerivedHostLock, fi as auditedDefaultWorkdirProvider, fn as assessmentOutcomePredicate, fr as classifyClause, ft as bindingIndividuallyAccepted, g as commitIndexSnapshotDigest, ga as hostVersionFromPackages, gi as evaluateActiveHostLock, gn as decideTurnStopping, gr as extractOperation, gt as PROOF_KINDS_V2, h as GIT_COMMAND_TEMPLATES, ha as evaluateToolSurfaceCapability, hi as combineHostPolicy, hn as decideTurnBoundary, hr as extractMethod, ht as PROOF_KINDS, i as prepareSelectedActivationMigration, ia as DEFAULT_HOST_LOCK, ii as splitTextFragments, in as bindingSatisfies, io as writeActivationBinding, ir as admissibleForRemoval, it as shellReadbackOutcome, ja as CERTIFICATE_VERSION_V2, ji as resolveInstalledHostLock, jo as sanitizeClauseText, jr as governedClauseRestrictsExecution, jt as proofV2Rejection, k as previewFirstStepInjection, ka as BOUNDED_ARTIFACT_TYPES, ki as resolveActiveProfileHostLock, ko as digestStrings, kr as clauseIsProtected, kt as proofHostSurfacesOf, l as verifySelectedMigrationInventory, la as bindExecutableIdentity, li as HostProfileError, ln as NO_PROGRESS_RECORD_PREFIX, lo as validateActivationBinding, lr as removalIsPartiallyKnown, lt as parseShellCommand, m as GIT_COMMAND_MANIFEST_IDS, ma as evaluateHostLock, mi as auditedHostImplementation, mn as currentActionBases, mr as extractArtifactPaths, mt as PROOF_CAPABILITY_MATRIX, n as createActivationSelection, na as ACTIVE_HOST_LAUNCHER_VERSION, ni as restatedContentOf, no as resolveSessionActivation, nr as DEPENDENCY_FREE_ONLY_CONDITION, nt as nativeGitParentOidVerified, o as selectedActivationInventory, oa as GOAL_HOST_PACKAGES, oi as verbIsNegated, on as evidenceMatchesItem, oo as activationDigest, or as capabilityFactOf, ot as canonicalArgvFromCommand, p as RC020_RC1_HOST_PACKAGES, pa as evaluateHostCapability, pi as auditedForegroundRenderers, pn as classifyCompletionClaim, pr as environmentDefaultRepositoryTarget, pt as certifyCheckpoint, q as deriveProjection, qa as RC020_RC2_HOST_PACKAGES, qi as HostTrustError, qn as CONFIRM_LINE_PATTERN, qr as maskCodeSpans, qt as cleanupConditionFor, r as isSelectedActivationReceipt, ra as BASE_HOST_PACKAGES, ri as semanticActionOfScope, ro as validateActivationMigrationReceipt, rr as actionHasCertificationPath, rt as persistedToolResultStatus, s as validateActivationInventorySnapshot, sa as HOST_CAPABILITY_PACKAGE_GROUPS, si as COMMAND_SURFACE_MANIFEST, sn as isVerifyingCapability, so as activationJson, sr as partialFailureOf, st as isRunExecutable, t as activationSelectionPending, ta as ACTIVE_HOST_COHORT_IDS, ti as reportingHeadGoverns, to as resolveActivationBindingsRoot, tr as relevantEvidence, tt as isDeterministicCheck, u as inspectActivationInventory, ua as bindLiveGoalCapability, ui as activeRendererModule, un as NO_PROGRESS_TURNS_BEFORE_STOP, ur as captureClause, ut as authorityCaptureCounts, v as createGitPrestateEnvelope, va as HOST_VALIDATED_VERSIONS, vi as hostLockContextFromComposedDump, vn as isRootPauseRequest, vr as segmentClauses, vt as PROOF_PROTOCOL_VERSION, w as FIRST_STEP_GUIDANCE, wa as evaluateMinimumHostVersion, wi as packageRowsFromPnpmLock, wn as testOutcomePredicate, wr as LEGACY_QUALIFICATION, wt as createProofManifestV2, x as parseGitCommandManifest, xa as SUPPORTED_HOST_RANGE, xi as inspectDesktopTargetGraph, xn as latestRootInstruction, xr as classifyTaskIntent, xt as bindProofV2ToProjection, y as executeRevalidatedGitEffect, ya as LATEST_TESTED_HOST_VERSION, yi as hostLockRowsFromComposedDump, yn as isWholeTaskCompletionClaim, yt as PROOF_PROTOCOL_VERSION_V2, z as projectCoreV2, za as isStatefulAction, zi as memoizedAsarFile, zn as createProjection, zr as isExplanationScope, zt as CLEANUP_CONDITION_RULE_COMPACT } from "../domain-CE_dWoec.js";
+import { $ as NATIVE_GIT_ROOT_PARENT_OID, $a as __activationBindingInternals, $i as hostTrustDigest, $n as parseConfirmationMessage, $r as namedActions, $t as openItems, A as lifecyclePhase, Aa as satisfiesSupportedHostRange, Ai as prepareDesktopHostTrust, An as goalCompletionDenial, Ar as clarifiedSpanOf, At as proofDigest, B as snapshotSessionEvents, Ba as SUPPORTED_EVIDENCE_ADAPTERS, Bi as DESKTOP_RUNTIME_PACKAGE_NAME, Bn as isCurrentAcceptedBoundary, Br as interpretMessage, Bt as validateProofManifest, C as parseGitCommandManifest, Ca as LATEST_TESTED_HOST_VERSION, Ci as hostLockRowsFromComposedDump, Cn as isWholeTaskCompletionClaim, Ct as PROOF_PROTOCOL_VERSION_V2, D as claimedBatchHasRealRootInput, Da as compareHostVersions, Di as packageRowsFromActiveGraph, Dn as progressFingerprint, Dr as GRANTED_QUALIFICATION, Dt as createProofManifest, E as FIRST_STEP_GUIDANCE, Ea as SUPPORTED_HOST_VERSIONS, Ei as inspectTargetHostGraph, En as observeAssistantOutcome, Er as classifyUserInteraction, Et as canonicalProjection, Fa as CERTIFICATE_VERSION_V2, Fi as resolveInstalledHostLock, Fo as sanitizeClauseText, Fr as governedClauseRestrictsExecution, Ft as proofV2Rejection, G as PROTOCOL_V4_NOTICE, Ga as requestedTargetAuthorizesMutation, Gi as readAsarFile, Gn as proposeRebind, Gr as isOpenObligation, Gt as DEFAULT_RECOVERY_CHAR_BUDGET, H as CAPTURE_V042_NOTICE, Ha as boundedArtifactChoiceMatches, Hi as hasDesktopImporterState, Hn as currentContractDigest, Hr as isExecutableItem, Ht as CLEANUP_CONDITION_RULE, Ia as SEMANTIC_ACTIONS, Ii as revalidateDesktopCoreLock, Io as sanitizeUrl, Ir as hasOrderedCoordination, It as requiredSubjectsOf, J as applyUpgradeEligibility, Ja as semanticActionFromText, Ji as readDesktopDependency, Jn as rebindAttemptKey, Jr as itemHoldsExecutionAuthority, Jt as V6_ORDINARY_COMPLETION_RULE_COMPACT, K as PROTOCOL_V5_NOTICE, Ka as requestedTargetMatchesResolved, Ki as readAsarIndex, Kn as proposeRebindOutcome, Kr as isQuestionScopeNeedingReview, Kt as MIN_RECOVERY_CHAR_BUDGET, L as SESSION_API_UNSUPPORTED, La as STATEFUL_ACTIONS, Li as verifyComposedHostLockDump, Ln as BOUNDARY_RECORD_PREFIX, Lo as sha256, Lr as hasQuestionScope, Lt as scopeCoverageDigest, M as projectSessionCoreV2, Ma as ACTION_MANIFEST_VERSION, Mi as readActiveHostGraph, Mo as canonicalizePath, Mr as clauseIsGoverned, Mt as proofEvidenceConstraints, Na as BOUNDED_ARTIFACT_TYPES, Ni as resolveActiveProfileHostLock, No as digestStrings, Nr as clauseIsProtected, Nt as proofHostSurfacesOf, O as firstStepGuidance, Oa as evaluateMinimumHostVersion, Oi as packageRowsFromPnpmLock, On as testOutcomePredicate, Or as LEGACY_QUALIFICATION, Ot as createProofManifestV2, Pa as CERTIFICATE_VERSION, Pi as resolveDesktopProfileHostLock, Po as normalizeClause, Pr as explanationHasActionResidue, Pt as proofOperationMatches, Q as supersedeItem, Qi as acquireHostTrust, Qn as isFrozenV042RebindResponse, Qr as maskQuotedSpans, Qt as closingHint, R as SESSION_EVENT_ENVELOPE_INVALID, Ra as STOP_PROTOCOL_VERSION, Ri as DESKTOP_IDENTITY_FACTS, Rn as availableBoundaryQualifications, Ro as stripUrlCredentials, Rr as hasWorkPredicate, Rt as sessionQuery, S as gitCommandMatchesTarget, Sa as HOST_VALIDATED_VERSIONS, Si as hostLockContextFromComposedDump, Sn as isRootPauseRequest, Sr as segmentClauses, St as PROOF_PROTOCOL_VERSION, T as verifiedLinearCommitReadback, Ta as SUPPORTED_HOST_RANGE, Ti as inspectDesktopTargetGraph, Tn as latestRootInstruction, Tr as classifyTaskIntent, Tt as bindProofV2ToProjection, U as DEFAULT_DELEGATION_TOOL_NAMES, Ua as isStatefulAction, Ui as memoizedAsarFile, Un as createProjection, Ur as isExplanationScope, Ut as CLEANUP_CONDITION_RULE_COMPACT, V as projectCoreV2, Va as actionCompatible, Vi as auditDesktopInstalledImplementation, Vn as qualifyBoundary, Vr as introducesActionClause, Vt as validateProofManifestV2, W as PROTOCOL_V3_NOTICE, Wa as requestedIdentityKey, Wi as memoizedAsarIndex, Wn as confirmRebind, Wr as isInformationalFragment, Wt as CLEANUP_CONDITION_RULE_SHORT, X as legacyRecordsNeedingReview, Xa as validateActionTarget, Xi as writeDesktopRuntimeReceipt, Xn as replayRebindResult, Xr as legacyQuestionReadingIsInformational, Xt as carriesCleanupCondition, Y as deriveProjection, Ya as validateActionManifest, Yi as readDesktopTargetGraph, Yn as rebindResponse, Yr as kindOfScope, Yt as V6_ORDINARY_COMPLETION_RULE_SHORT, Z as rootLocatorFlavor, Za as RC021_RC3_HOST_PACKAGES, Zi as HostTrustError, Zn as CONFIRM_LINE_PATTERN, Zr as maskCodeSpans, Zt as cleanupConditionFor, _ as GIT_COMMAND_TEMPLATES, _a as evaluateHostCapability, _i as auditedForegroundRenderers, _n as classifyCompletionClaim, _r as environmentDefaultRepositoryTarget, _t as certifyCheckpoint, a as scanActivationInventory, aa as ACTIVE_HOST_COHORT_IDS, ai as reportingHeadGoverns, ao as resolveActivationBindingsRoot, ar as relevantEvidence, at as persistedToolResultStatus, b as createGitPrestateEnvelope, ba as hostVersionFromPackages, bi as evaluateActiveHostLock, bn as decideTurnStopping, br as extractOperation, bt as PROOF_KINDS_V2, c as validateActivationSelection, ca as DEFAULT_HOST_LOCK, ci as splitTextFragments, cn as bindingSatisfies, co as writeActivationBinding, cr as admissibleForRemoval, ct as canonicalArgvFromCommand, d as prepareActivationMigration, da as HOST_CAPABILITY_PACKAGE_GROUPS, di as COMMAND_SURFACE_MANIFEST, dn as isVerifyingCapability, do as activationJson, dr as partialFailureOf, dt as parseShellCommand, ea as parseHostTrust, ei as opensConditionLead, en as recoveryDigest, eo as activationBindingPath, er as capabilityRemedyPhrase, et as evidenceFromPersistedToolResult, f as verifyMigrationInventory, fa as HOST_COHORTS, fi as validateManifest, fn as CONTROL_RECORD_PREFIX, fo as sessionBirthIdentity, fr as removalIsComplete, g as GIT_COMMAND_MANIFEST_IDS, ga as evaluateGraphDerivedHostLock, gi as auditedDefaultWorkdirProvider, gn as assessmentOutcomePredicate, gr as classifyClause, gt as bindingIndividuallyAccepted, h as RC020_RC1_HOST_PACKAGES, ha as evaluateExternalWaitCapability, hi as auditedDefaultWorkdirHost, hn as assessmentAction, hr as captureItem, ht as segmentAuthorityBlocks, i as prepareSelectedActivationMigration, ia as ACTIVE_HOST_COHORT_ID, ii as questionHeadsClause, io as readActivationMigrationReceipt, ir as nativeFileTwoRole, it as nativeGitParentOidVerified, j as previewFirstStepInjection, ja as ACTION_MANIFEST, ji as prepareTargetHostTrust, jn as hasCurrentCertificate, jr as clauseAsksOwnQuestion, jt as proofDigestV2, k as firstStepGuidanceV6, ka as parseHostVersion, ki as prepareActiveHostTrust, kn as v6TestPredicate, kr as actionVerbMatches, kt as proofCapabilityReport, l as verifySelectedMigrationInventory, la as EXPECTED_HOST_PACKAGES, li as statefulActionsOfScope, ln as evidenceCoverage, lo as activationCanonical, lr as capabilityConsequence, lt as isRunExecutable, m as RC020_RC2_HOST_PACKAGES, ma as bindLiveGoalCapability, mi as activeRendererModule, mn as NO_PROGRESS_TURNS_BEFORE_STOP, mr as captureClause, mt as authorityCaptureCounts, n as createActivationSelection, na as registryArchiveFiles, ni as presentExplanationHead, nn as renderRecoveryPacket, no as createActivationMigrationReceipt, nr as evidenceAvailabilityReason, nt as extractToolSubject, o as selectedActivationInventory, oa as ACTIVE_HOST_LAUNCHER_VERSION, oi as restatedContentOf, oo as resolveSessionActivation, or as DEPENDENCY_FREE_ONLY_CONDITION, ot as shellReadbackOutcome, p as RC021_RC2_HOST_PACKAGES, pa as bindExecutableIdentity, pi as HostProfileError, pn as NO_PROGRESS_RECORD_PREFIX, po as validateActivationBinding, pr as removalIsPartiallyKnown, q as PROTOCOL_V6_NOTICE, qa as semanticActionFromCommand, qi as readDesktopAppRuntime, qn as proposeRebindV042, qr as isRestatement, qt as V6_ORDINARY_COMPLETION_RULE, r as isSelectedActivationReceipt, ra as registryArchiveModules, ri as qualificationOfClause, rn as v6CurrentRootBoundaries, ro as readActivationBinding, rr as itemDiagnosis, rt as isDeterministicCheck, s as validateActivationInventorySnapshot, sa as BASE_HOST_PACKAGES, si as semanticActionOfScope, so as validateActivationMigrationReceipt, sr as actionHasCertificationPath, st as withDurability, t as activationSelectionPending, ta as qualifyHostTrust, ti as opensWithDirective, tn as recoveryTitle, to as adoptActivationReceipt, tr as deriveItemDiagnosis, tt as extractTextContent, u as inspectActivationInventory, ua as GOAL_HOST_PACKAGES, ui as verbIsNegated, un as evidenceMatchesItem, uo as activationDigest, ur as capabilityFactOf, ut as parsePwshCommand, v as commitIndexSnapshotDigest, va as evaluateHostLock, vi as auditedHostImplementation, vn as currentActionBases, vr as extractArtifactPaths, vt as PROOF_CAPABILITY_MATRIX, w as revalidateGitPrestate, wa as MIN_SUPPORTED_HOST_VERSION, wi as injectActiveProfileHostLock, wn as latestAssistantText, wt as bindProofToProjection, x as executeRevalidatedGitEffect, xa as selectHostCohort, xi as evaluateConfiguredHostLock, xn as decisionBoundaryKey, xr as isInformationalMessage, xt as PROOF_MANIFEST_DOMAIN_V2, y as commitTreeSnapshotDigest, ya as evaluateToolSurfaceCapability, yi as combineHostPolicy, yn as decideTurnBoundary, yr as extractMethod, yt as PROOF_KINDS, z as SessionApiError, za as STOP_PROTOCOL_VERSION_V2, zi as DESKTOP_PROFILE_PACKAGE_NAME, zn as effectuateBoundary, zo as privateStorageToolDenial, zr as interpretClause, zt as sessionQueryV2 } from "../domain-rozEDKXB.js";
 
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, EXPECTED_HOST_PACKAGES, FIRST_STEP_GUIDANCE, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostProfileError, HostTrustError, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, SessionApiError, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };