dsh-completion-guard 0.9.0 → 0.11.0

package/dist/{index-qKK3BJW1.d.ts → index-ClmcMWbM.d.ts}

@@ -14,6 +14,8 @@ declare function normalizeClause(text: string): string;
 declare function canonicalizePath(value: string): string;
 declare function sha256(text: string): string;
 declare function digestStrings(values: readonly string[]): string;
+/** Structurally remove `user:password@` from a URL; other bytes unchanged. */
+declare function stripUrlCredentials(value: string): string;
 declare function sanitizeClauseText(text: string): string;
 declare function sanitizeUrl(value: string): string;
 //#endregion
@@ -1308,6 +1310,48 @@ interface ExternalOperation {
   adapterId: string;
   status: "running" | "pending" | "completed" | "failed" | "unknown";
 }
+/**
+* One durable job lifecycle fact from the 0.2.1 host event pair
+* (`job/registered` + `job/settled`). Audit-only: a settlement records the
+* registry's terminal outcome for the execution, never resource release, a
+* file readback, or the completion of any user obligation. The `owner` is the
+* ORIGINAL owning session; a forked or resumed copy of the history never
+* transfers execution ownership.
+*/
+interface JobLifecycleRecord {
+  jobId: string;
+  owner: string;
+  kind: string;
+  label: string;
+  startedAt: number;
+  /** Absent for a healthy best-effort orphan settlement; audit only. */
+  registeredAtSeq?: number;
+  toolCall?: {
+    callId: string;
+    rootCallId: string;
+  };
+  settled?: {
+    settledAtSeq: number;
+    finishedAt: number;
+    detail?: string;
+    status: "completed" | "killed" | "failed";
+    cause: "producer" | "kill" | "teardown";
+    producerReported: boolean;
+  };
+}
+/**
+* One committed `working-directory/change` epoch. The immutable Session
+* header keeps the original project directory; each event replaces the
+* EFFECTIVE directory for directory-based operations from its sequence on.
+* Captured targets, paths and receipts keep the meaning of the epoch they
+* were bound in — a later change never re-interprets an older relative path.
+*/
+interface CwdEpoch {
+  /** Sequence of the committing `working-directory/change` event. */
+  seq: number;
+  /** Absolute effective directory from this sequence on. */
+  cwd: string;
+}
 interface GuardProjection {
   enabled: boolean;
   /** Explicit root /context-guard on adoption, never inferred from installation or always observation. */
@@ -1321,6 +1365,20 @@ interface GuardProjection {
   boundaries: GuardBoundary[];
   externalOperations: Map<string, ExternalOperation>;
   /**
+  * Durable job lifecycle facts keyed by jobId, present only in logs that
+  * carry 0.2.1 `job/registered`/`job/settled` events. Audit-only; they
+  * refine external-wait status and are never completion evidence.
+  */
+  jobLifecycle?: Map<string, JobLifecycleRecord>;
+  /**
+  * Committed `working-directory/change` epochs, present only in logs that
+  * carry at least one valid change. Absent means the immutable header cwd
+  * governed the whole log, which keeps pre-0.2.1 derivations byte-stable.
+  */
+  cwdEpochs?: CwdEpoch[];
+  /** Immutable scope header cwd for epoch receipt replay; absent in unchanged legacy logs. */
+  cwdOrigin?: string;
+  /**
   * 0.6.0 work units keyed by unit id, and the id of the unit currently
   * receiving captured work. Derived; present only after a v5 boundary.
   */
@@ -1737,8 +1795,8 @@ declare function authorityCaptureCounts(blocks: readonly AuthorityBlock[]): Reco
 declare function currentContractDigest(projection: GuardProjection): string;
 //#endregion
 //#region src/domain/host-version.d.ts
-/** Version admission floor. Since 0.8.2 the public DSH support range is
-* `>=0.2.0-rc.2` with NO implied upper bound: every host version at or above
+/** Version admission floor. Since 0.11.0 the public DSH support range is
+* `>=0.2.1-rc.3` with NO implied upper bound: every host version at or above
 * this floor (including later RCs on any tuple, stable and future releases)
 * passes VERSION ADMISSION. The floor only rises when a future Guard release
 * actively adopts a newer DSH; the runtime never raises it from a remote
@@ -1746,12 +1804,13 @@ declare function currentContractDigest(projection: GuardProjection): string;
 * metadata ignored. Version admission is one gate of several — it never
 * claims native validation of a not-yet-tested host, and the graph/byte/
 * contract audits below still run on every admission. */
-declare const MIN_SUPPORTED_HOST_VERSION = "0.2.0-rc.2";
+declare const MIN_SUPPORTED_HOST_VERSION = "0.2.1-rc.3";
 declare const SUPPORTED_HOST_RANGE: string;
 /** Versions with recorded first-hand host evidence. This is an EVIDENCE
 * ledger, NOT an admission whitelist: a missing row never refuses a
-* version-above-floor host. rc.1 keeps its historical row after the floor
-* moved to rc.2; the row records past evidence, not current admission. */
+* version-above-floor host. The 0.2.0 rows keep their historical standing
+* after the floor moved to 0.2.1-rc.3; each row records past evidence, not
+* current admission. */
 declare const HOST_VALIDATED_VERSIONS: readonly string[];
 /** Historical alias retained for evidence-list readers; the admission rule is
 * the floor above, never this list. */
@@ -1781,9 +1840,9 @@ interface HostVersionDecision {
 /** Decide the version-policy half of host support. Never a substitute for the graph lock. */
 declare function evaluateMinimumHostVersion(version: string, minimum?: string): HostVersionDecision;
 /** Version admission: at or above the floor by strict SemVer precedence
-* (prerelease-aware; build metadata ignored). `0.2.0-rc.1` and the whole
-* `0.1.7.x` line stay below the floor; `0.2.0-rc.2`, `0.2.0`,
-* later patch/minor RCs and releases all admit. */
+* (prerelease-aware; build metadata ignored). `0.2.1-rc.2` and earlier
+* stay below the floor; `0.2.1-rc.3`, `0.2.1`, later patch/minor RCs and
+* releases all admit. */
 declare function satisfiesSupportedHostRange(version: string): boolean;
 //#endregion
 //#region src/domain/host-lock.d.ts
@@ -1828,17 +1887,19 @@ interface HostCohort {
   packages: PackageRow[];
   capabilities: CapabilityRow[];
 }
-/** Baseline cohort retained for callers that need a default fixture. */
-declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.0-rc.2";
+/** Current baseline for new installations and default fixtures. */
+declare const ACTIVE_HOST_COHORT_ID = "dsh-0.2.1-rc.3";
+/** The release floor is rc.3. Older package identities remain historical
+* evidence; retaining their audit files does not admit a below-floor host. */
 declare const ACTIVE_HOST_COHORT_IDS: readonly string[];
-/** Core-lock/v1 separates optional market identity from the rc.2 critical
+/** Core-lock/v1 separates optional market identity from the rc.3 critical
 * graph. Historical cohorts live only in test data. Version ordering cannot
 * authorize an unregistered graph, and graph identity is separate from native
 * acceptance of a Guard artifact.
 */
 declare const HOST_COHORTS: readonly HostCohort[];
 /**
-* Baseline fixture package identities (DSH 0.2.0-rc.2). The cohort
+* Baseline fixture package identities (DSH 0.2.1-rc.3). The cohort
 * is an atomic whole-graph contract (CG-DSH-001): any drifted, duplicated,
 * unknown-version, unbound, OR MISSING row fails the whole lock closed
 * (`host_lock_missing`); no capability inherits independence from a partially
@@ -2157,6 +2218,9 @@ interface ToolCallInput {
   arguments: string;
   /** Code-mode dispatch root; falls back to `callId` when the harness does not carry one. */
   rootCallId?: string;
+  /** Internal replay version: selected only from a committed effective cwd epoch.
+  * Never inferred from tool arguments or a future event. Absent preserves legacy bytes. */
+  cwdReadVersion?: "epoch/v1";
 }
 interface ToolResultInput {
   seq: number;
@@ -2617,6 +2681,8 @@ declare function readAsarIndex(archivePath: string): AsarIndex;
 */
 declare function readAsarFile(archivePath: string, index: AsarIndex, entryPath: string): Buffer;
 interface DesktopAppRuntime {
+  /** Independent Desktop distribution supplement, never registry authority. */
+  distributionQualificationSha256?: string;
   /** Absolute path of the app bundle archive the rows were read from. */
   asarRealpath: string;
   headerSha256: string;
@@ -2758,7 +2824,7 @@ interface AuditedPackageExpectation {
 /** Byte and dual-lane route audit over both graphs. Expectations are either
 * the published baseline or operator-owned, registry-acquired qualified module
 * digests. A missing digest set never authenticates unknown implementation. */
-declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[], installationGraph?: DependencyAuditGraph, profileInstallationGraph?: DependencyAuditGraph): boolean;
+declare function auditedHostImplementation(runtimeRoot: string, profileRoot: string, providedSession?: HostAuditSession, expectations?: readonly AuditedPackageExpectation[], installationGraph?: DependencyAuditGraph, profileInstallationGraph?: DependencyAuditGraph, expectationsProvided?: boolean): boolean;
 declare function activeRendererModule(nodeModulesRoot: string, name: string, providedSession?: HostAuditSession): {
   bytes: string;
   path: string;
@@ -2774,7 +2840,7 @@ declare function auditedDefaultWorkdirHost(runtimeRoot: string, profileRoot: str
 * Match the scoped service's exact constructor to the audited active module,
 * rejecting another provider with the same public service interface/name.
 */
-declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown, providedSession?: HostAuditSession): Promise<boolean>;
+declare function auditedDefaultWorkdirProvider(runtimeRoot: string, profileRoot: string, tool: "bash" | "pwsh", provider: unknown, policyProvider?: unknown, providedSession?: HostAuditSession, workingDirectoryProvider?: unknown): Promise<boolean>;
 interface TargetHostGraph {
   packages: PackageRow[];
   profileGraph: {
@@ -3416,12 +3482,33 @@ declare const RC020_RC1_HOST_PACKAGES: PackageRow[];
 //#endregion
 //#region src/domain/rc020-rc2-host.d.ts
 /** One source for verified registry identities and published executable bytes.
-* Bound to the published dsh-v0.2.0-rc.2 tarballs (upstream
-* 639ed015397290b3745d163aafe02ffee4aa3f84). Native platform acceptance
-* remains a separate, currently pending fact. The rc.1 rows remain available
-* in `rc020-rc1-host.ts` as historical evidence. */
+* Historical evidence for the 0.2.0-rc.2 floor era: bound to the published
+* dsh-v0.2.0-rc.2 tarballs (upstream 639ed015397290b3745d163aafe02ffee4aa3f84).
+* The active cohort reads `rc021-rc2-host.ts`; these rows back the
+* below-floor refusal tests and prior-certificate history only. */
 declare const RC020_RC2_HOST_PACKAGES: PackageRow[];
 //#endregion
+//#region src/domain/rc021-rc2-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.1-rc.2 tarballs (upstream
+* 687f282e8625c6b8d11ff58211a90524be2e4317; Cordis moved to 4.0.5 in the same
+* graph). Native platform acceptance remains a separate, currently pending
+* fact. The 0.2.0-rc.2 rows remain available in `rc020-rc2-host.ts` as
+* historical evidence. */
+declare const RC021_RC2_HOST_PACKAGES: PackageRow[];
+//#endregion
+//#region src/domain/rc021-rc3-host.d.ts
+/** One source for verified registry identities and published executable bytes.
+* Bound to the published dsh-v0.2.1-rc.3 tarballs (upstream
+* 1f81c047fc48fa190a683e469daa699857e9afe8). The rc.2→rc.3 study verified that
+* every core-cohort package's executable bytes are UNCHANGED (the four rc.3
+* functional commits touch only UI/llm-route packages outside this cohort) and
+* that only manifest version/dependency fields were rewritten; Cordis remains
+* the shared 4.0.5 release in both graphs. Cohort admission is separate from
+* native platform acceptance, which remains pending for rc.3. The rc.2 rows
+* stay available in `rc021-rc2-host.ts` as a supported path. */
+declare const RC021_RC3_HOST_PACKAGES: PackageRow[];
+//#endregion
 //#region src/domain/session-activation.d.ts
 type InitialActivation = "opt-in" | "always";
 interface SessionBirthIdentity {
@@ -3543,7 +3630,7 @@ declare function verifyMigrationInventory(receipt: ActivationMigrationReceipt, i
 //#region src/domain/private-storage-guard.d.ts
 /** Bounded protection for the official file/shell tool surface. This is not
 * a sandbox for arbitrary executables or hostile same-owner plugins. */
-declare function privateStorageToolDenial(name: string, args: unknown, cwd: string, roots: readonly string[]): string | undefined;
+declare function privateStorageToolDenial(name: string, args: unknown, cwd: string | undefined, roots: readonly string[]): string | undefined;
 //#endregion
 //#region src/domain/activation-selection.d.ts
 type InventoryRow = {
@@ -3583,4 +3670,4 @@ declare function prepareSelectedActivationMigration(snapshot: ActivationInventor
 declare function isSelectedActivationReceipt(receipt: ActivationMigrationReceipt): boolean;
 declare function verifySelectedMigrationInventory(receipt: ActivationMigrationReceipt, snapshot: ActivationInventorySnapshot, selection: ActivationMigrationSelection): void;
 //#endregion
-export { classifyCompletionClaim as $, RejectedBinding as $a, actionCompatible as $c, ExecutableIdentity as $i, packageRowsFromActiveGraph as $n, NeedsReviewReason as $o, gitCommandMatchesTarget as $r, LEGACY_QUALIFICATION as $s, bindProofV2ToProjection as $t, InitialActivation as A, MIN_SUPPORTED_HOST_VERSION as Aa, presentExplanationHead as Ac, capabilityRemedyPhrase as Ai, LifecyclePhase as An, DeriveConfig as Ao, acquireHostTrust as Ar, CapabilityRemedy as As, openItems as At, RC020_RC1_HOST_PACKAGES as B, AuthorityBlockKind as Ba, ACTION_MANIFEST_VERSION as Bc, PROTOCOL_V5_NOTICE as Bi, activeRendererModule as Bn, GoalRef as Bo, GitCommandManifest as Br, actionHasCertificationPath as Bs, PROOF_PROTOCOL_VERSION_V2 as Bt, createActivationMigrationReceipt as C, evaluateToolSurfaceCapability as Ca, kindOfScope as Cc, shellReadbackOutcome as Ci, ManifestIssue as Cn, AssetInterpretationFact as Co, readDesktopDependency as Cr, proposeRebindOutcome as Cs, RecoveryOptions as Ct, resolveSessionActivation as D, HostVersionDecision as Da, namedActions as Dc, Repairability as Di, FIRST_STEP_GUIDANCE as Dn, BoundaryQualificationKind as Do, HostTrustAcquisitionOptions as Dr, replayRebindResult as Ds, carriesCleanupCondition as Dt, resolveActivationBindingsRoot as E, HOST_VALIDATED_VERSIONS as Ea, maskQuotedSpans as Ec, DiagnosisNextAction as Ei, ClaimedMessage as En, BoundaryDisposition as Eo, HostRebindTrust as Er, rebindResponse as Es, V6_ORDINARY_COMPLETION_RULE_SHORT as Et, activationDigest as F, evaluateMinimumHostVersion as Fa, semanticActionOfScope as Fc, relevantEvidence as Fi, previewFirstStepInjection as Fn, EvidenceOutcome as Fo, registryArchiveModules as Fr, OperationAttribution as Fs, PROOF_CAPABILITY_MATRIX as Ft, CONTROL_RECORD_PREFIX as G, UserInteractionKind as Ga, CERTIFICATE_VERSION_V2 as Gc, rootLocatorFlavor as Gi, combineHostPolicy as Gn, GuardItem as Go, GitPrestateCheck as Gr, removalIsComplete as Gs, ProofManifest as Gt, projectCoreV2 as H, authorityCaptureCounts as Ha, ActionSpec as Hc, applyUpgradeEligibility as Hi, auditedDefaultWorkdirProvider as Hn, GuardCheckpoint as Ho, GitCommandRejected as Hr, capabilityConsequence as Hs, ProofKind as Ht, activationJson as I, parseHostVersion as Ia, splitTextFragments as Ic, CAPTURE_V042_NOTICE as Ii, ActiveProfileHostLock as In, EvidenceParseStatus as Io, GIT_COMMAND_MANIFEST_IDS as Ir, ProcessExitStatus as Is, PROOF_KINDS as It, NO_PROGRESS_RECORD_PREFIX as J, CONFIRM_LINE_PATTERN as Ja, STOP_PROTOCOL_VERSION as Jc, ACTIVE_HOST_LAUNCHER_VERSION as Ji, hostLockContextFromComposedDump as Jn, GuardOperation as Jo, LinearCommitReadback as Jr, DirectiveClass as Js, ProofObligationV2 as Jt, CompletionDisposition as K, classifyTaskIntent as Ka, SEMANTIC_ACTIONS as Kc, ACTIVE_HOST_COHORT_ID as Ki, evaluateActiveHostLock as Kn, GuardItemKind as Ko, GitPrestateEnvelope as Kr, removalIsPartiallyKnown as Ks, ProofManifestV2 as Kt, sessionBirthIdentity as L, satisfiesSupportedHostRange as La, statefulActionsOfScope as Lc, DEFAULT_DELEGATION_TOOL_NAMES as Li, AuditedPackageExpectation as Ln, EvidenceRole as Lo, GIT_COMMAND_TEMPLATES as Lr, ProcessFactSource as Ls, PROOF_KINDS_V2 as Lt, SessionActivationRead as M, SUPPORTED_HOST_RANGE as Ma, questionHeadsClause as Mc, evidenceAvailabilityReason as Mi, firstStepGuidance as Mn, DeriveScope as Mo, parseHostTrust as Mr, DeclaredOperationResult as Ms, recoveryTitle as Mt, SessionBirthIdentity as N, SUPPORTED_HOST_VERSIONS as Na, reportingHeadGoverns as Nc, itemDiagnosis as Ni, firstStepGuidanceV6 as Nn, DerivedEnvelope as No, qualifyHostTrust as Nr, DependencyStatus as Ns, renderRecoveryPacket as Nt, validateActivationMigrationReceipt as O, HostVersionStatus as Oa, opensConditionLead as Oc, TaskKind as Oi, FirstStepInjection as On, DeferAuthorization as Oo, HostTrustError as Or, CapabilityFact as Os, cleanupConditionFor as Ot, activationCanonical as P, compareHostVersions as Pa, restatedContentOf as Pc, nativeFileTwoRole as Pi, lifecyclePhase as Pn, EvidenceBinding as Po, registryArchiveFiles as Pr, DerivedProcessFacts as Ps, v6CurrentRootBoundaries as Pt, assessmentOutcomePredicate as Q, CheckpointResult as Qa, StatefulAction as Qc, EXPECTED_HOST_PACKAGES as Qi, inspectTargetHostGraph as Qn, NeedsReviewFact as Qo, executeRevalidatedGitEffect as Qr, InterpretOptions as Qs, bindProofToProjection as Qt, validateActivationBinding as R, currentContractDigest as Ra, verbIsNegated as Rc, PROTOCOL_V3_NOTICE as Ri, HostProfileError as Rn, ExpectedTransition as Ro, GitAdapterAction as Rr, ProcessOutcomeReason as Rs, PROOF_MANIFEST_DOMAIN_V2 as Rt, adoptActivationReceipt as S, evaluateHostLock as Sa, itemHoldsExecutionAuthority as Sc, persistedToolResultStatus as Si, CommandSurfaceManifest as Sn, qualifyBoundary as So, readDesktopAppRuntime as Sr, proposeRebind as Ss, RecoveryCause as St, readActivationMigrationReceipt as T, selectHostCohort as Ta, maskCodeSpans as Tc, CertificationSupport as Ti, validateManifest as Tn, BindingActionClosure as To, writeDesktopRuntimeReceipt as Tr, rebindAttemptKey as Ts, V6_ORDINARY_COMPLETION_RULE_COMPACT as Tt, supersedeItem as U, segmentAuthorityBlocks as Ua, BOUNDED_ARTIFACT_TYPES as Uc, deriveProjection as Ui, auditedForegroundRenderers as Un, GuardEvidence as Uo, GitEffectExecution as Ur, capabilityFactOf as Us, ProofKindCapability as Ut, projectSessionCoreV2 as V, AuthorityKind as Va, ActionManifest as Vc, PROTOCOL_V6_NOTICE as Vi, auditedDefaultWorkdirHost as Vn, GuardBoundary as Vo, GitCommandParseResult as Vr, admissibleForRemoval as Vs, ProofHostSurface as Vt, AssistantOutcomeObservation as W, TaskIntent as Wa, CERTIFICATE_VERSION as Wc, legacyRecordsNeedingReview as Wi, auditedHostImplementation as Wn, GuardIntegrity as Wo, GitEffectRunner as Wr, partialFailureOf as Ws, ProofKindV2 as Wt, TurnStoppingDecision as X, isFrozenV042RebindResponse as Xa, SUPPORTED_EVIDENCE_ADAPTERS as Xc, BASE_HOST_PACKAGES as Xi, injectActiveProfileHostLock as Xn, HostStatus as Xo, commitTreeSnapshotDigest as Xr, ExecutionQualification as Xs, SessionQuery as Xt, NO_PROGRESS_TURNS_BEFORE_STOP as Y, ParsedConfirmation as Ya, STOP_PROTOCOL_VERSION_V2 as Yc, AuditedExecutable as Yi, hostLockRowsFromComposedDump as Yn, GuardProjection as Yo, commitIndexSnapshotDigest as Yr, Executee as Ys, ProofSurface as Yt, assessmentAction as Z, parseConfirmationMessage as Za, SemanticAction as Zc, DEFAULT_HOST_LOCK as Zi, inspectDesktopTargetGraph as Zn, MessageCoverage as Zo, createGitPrestateEnvelope as Zr, GRANTED_QUALIFICATION as Zs, SessionQueryV2 as Zt, verifyMigrationInventory as _, bindExecutableIdentity as _a, isExplanationScope as _c, evidenceFromPersistedToolResult as _i, bindingSatisfies as _n, GoalActivationState as _o, hasDesktopImporterState as _r, BoundedSource as _s, CLEANUP_CONDITION_RULE as _t, isSelectedActivationReceipt as a, HostCapabilityEvaluation as aa, clauseAsksOwnQuestion as ac, ParsedShell as ai, semanticActionFromCommand as al, proofDigestV2 as an, captureItem as ao, resolveActiveProfileHostLock as ar, TargetSourceKind as as, isWholeTaskCompletionClaim as at, __activationBindingInternals as b, evaluateGraphDerivedHostLock as ba, isQuestionScopeNeedingReview as bc, isDeterministicCheck as bi, isVerifyingCapability as bn, effectuateBoundary as bo, readAsarFile as br, RebindProposal as bs, DEFAULT_RECOVERY_CHAR_BUDGET as bt, selectedActivationInventory as c, HostCohort as ca, explanationHasActionResidue as cc, isRunExecutable as ci, validateActionTarget as cl, proofOperationMatches as cn, extractArtifactPaths as co, revalidateDesktopCoreLock as cr, VerificationContract as cs, observeAssistantOutcome as ct, verifySelectedMigrationInventory as d, HostLockContext as da, hasQuestionScope as dc, goalCompletionDenial as di, normalizeClause as dl, scopeCoverageDigest as dn, isInformationalMessage as do, DESKTOP_IDENTITY_FACTS as dr, createProjection as ds, v6TestPredicate as dt, ExecutableIdentityBinding as ea, QualificationReason as ec, parseGitCommandManifest as ei, boundedArtifactChoiceMatches as el, canonicalProjection as en, bindingIndividuallyAccepted as eo, packageRowsFromPnpmLock as er, PersistenceAuthorization as es, currentActionBases as et, privateStorageToolDenial as f, HostLockEvaluation as fa, hasWorkPredicate as fc, hasCurrentCertificate as fi, sanitizeClauseText as fl, sessionQuery as fn, segmentClauses as fo, DESKTOP_PROFILE_PACKAGE_NAME as fr, PackageRow as fs, SESSION_API_UNSUPPORTED as ft, prepareActivationMigration as g, HostToolSurface as ga, isExecutableItem as gc, ToolSubject as gi, EvidenceFacetCoverage as gn, BoundaryRequest as go, auditDesktopInstalledImplementation as gr, ReleaseSettlement as gs, snapshotSessionEvents as gt, inspectActivationInventory as h, HostProfileKind as ha, introducesActionClause as hc, ToolResultInput as hi, validateProofManifestV2 as hn, BoundaryQualification as ho, DesktopTargetGraph as hr, ReleaseOperation as hs, V4SessionLike as ht, createActivationSelection as i, HostAuditProvenance as ia, clarifiedSpanOf as ic, CanonicalCommandSurface as ii, requestedTargetMatchesResolved as il, proofDigest as in, captureClause as io, readActiveHostGraph as ir, TargetSource as is, isRootPauseRequest as it, SessionActivationBinding as j, ParsedHostVersion as ja, qualificationOfClause as jc, deriveItemDiagnosis as ji, claimedBatchHasRealRootInput as jn, DeriveResult as jo, hostTrustDigest as jr, DEPENDENCY_FREE_ONLY_CONDITION as js, recoveryDigest as jt, writeActivationBinding as k, LATEST_TESTED_HOST_VERSION as ka, opensWithDirective as kc, UnifiedItemDiagnosis as ki, FirstStepPreviewInput as kn, DelegationRef as ko, HostTrustedPackage as kr, CapabilityGap as ks, closingHint as kt, validateActivationInventorySnapshot as l, HostCohortSelection as la, governedClauseRestrictsExecution as lc, parsePwshCommand as li, canonicalizePath as ll, proofV2Rejection as ln, extractMethod as lo, verifyComposedHostLockDump as lr, WaitAuthorization as ls, progressFingerprint as lt, ActivationPriorModes as m, HostPlatform as ma, interpretMessage as mc, ToolCallInput as mi, sha256 as ml, validateProofManifest as mn, BoundaryEffectuation as mo, DesktopAppRuntime as mr, ReleaseObservedIdentity as ms, SessionApiError as mt, ActivationMigrationSelection as n, HOST_CAPABILITY_PACKAGE_GROUPS as na, ScopeInterpretation as nc, verifiedLinearCommitReadback as ni, requestedIdentityKey as nl, createProofManifestV2 as nn, CaptureScope as no, prepareDesktopHostTrust as nr, TargetCaptureReasonCode as ns, decideTurnStopping as nt, prepareSelectedActivationMigration as o, HostCapabilityId as oa, clauseIsGoverned as oc, ShellParseStatus as oi, semanticActionFromText as ol, proofEvidenceConstraints as on, classifyClause as oo, resolveDesktopProfileHostLock as or, TargetTuple as os, latestAssistantText as ot, ActivationInventoryPersistence as p, HostLockStatus as pa, interpretClause as pc, NATIVE_GIT_ROOT_PARENT_OID as pi, sanitizeUrl as pl, sessionQueryV2 as pn, BOUNDARY_RECORD_PREFIX as po, DESKTOP_RUNTIME_PACKAGE_NAME as pr, ReleaseGateDecision as ps, SESSION_EVENT_ENVELOPE_INVALID as pt, CurrentActionBasis as q, classifyUserInteraction as qa, STATEFUL_ACTIONS as qc, ACTIVE_HOST_COHORT_IDS as qi, evaluateConfiguredHostLock as qn, GuardItemStatus as qo, GitTargetIdentity as qr, AuthorityDisposition as qs, ProofObligation as qt, activationSelectionPending as r, HOST_COHORTS as ra, actionVerbMatches as rc, CanonicalArgv as ri, requestedTargetAuthorizesMutation as rl, proofCapabilityReport as rn, ClauseSegment as ro, prepareTargetHostTrust as rr, TargetCaptureStatus as rs, decisionBoundaryKey as rt, scanActivationInventory as s, HostCapabilityRequest as sa, clauseIsProtected as sc, canonicalArgvFromCommand as si, validateActionManifest as sl, proofHostSurfacesOf as sn, environmentDefaultRepositoryTarget as so, resolveInstalledHostLock as sr, TargetValue as ss, latestRootInstruction as st, ActivationInventorySnapshot as t, GOAL_HOST_PACKAGES as ta, QualificationStatus as tc, revalidateGitPrestate as ti, isStatefulAction as tl, createProofManifest as tn, certifyCheckpoint as to, prepareActiveHostTrust as tr, SourceSpan as ts, decideTurnBoundary as tt, validateActivationSelection as u, HostCohortSelectionReason as ua, hasOrderedCoordination as uc, parseShellCommand as ui, digestStrings as ul, requiredSubjectsOf as un, extractOperation as uo, AsarIndex as ur, WorkUnit as us, testOutcomePredicate as ut, ActivationMigrationEntry as v, bindLiveGoalCapability as va, isInformationalFragment as vc, extractTextContent as vi, evidenceCoverage as vn, GoalBoundaryAccess as vo, memoizedAsarFile as vr, ProposeOutcome as vs, CLEANUP_CONDITION_RULE_COMPACT as vt, readActivationBinding as w, hostVersionFromPackages as wa, legacyQuestionReadingIsInformational as wc, withDurability as wi, OperationVerbEntry as wn, AssetObligation as wo, readDesktopTargetGraph as wr, proposeRebindV042 as ws, V6_ORDINARY_COMPLETION_RULE as wt, activationBindingPath as x, evaluateHostCapability as xa, isRestatement as xc, nativeGitParentOidVerified as xi, COMMAND_SURFACE_MANIFEST as xn, isCurrentAcceptedBoundary as xo, readAsarIndex as xr, confirmRebind as xs, MIN_RECOVERY_CHAR_BUDGET as xt, ActivationMigrationReceipt as y, evaluateExternalWaitCapability as ya, isOpenObligation as yc, extractToolSubject as yi, evidenceMatchesItem as yn, availableBoundaryQualifications as yo, memoizedAsarIndex as yr, RebindArgs as ys, CLEANUP_CONDITION_RULE_SHORT as yt, RC020_RC2_HOST_PACKAGES as z, AuthorityBlock as za, ACTION_MANIFEST as zc, PROTOCOL_V4_NOTICE as zi, TargetHostGraph as zn, ExternalOperation as zo, GitCommandAccepted as zr, RemovalOutcomeReport as zs, PROOF_PROTOCOL_VERSION as zt };
+export { assessmentAction as $, parseConfirmationMessage as $a, STOP_PROTOCOL_VERSION_V2 as $c, DEFAULT_HOST_LOCK as $i, inspectDesktopTargetGraph as $n, HostStatus as $o, createGitPrestateEnvelope as $r, Executee as $s, SessionQueryV2 as $t, InitialActivation as A, HostVersionStatus as Aa, maskQuotedSpans as Ac, TaskKind as Ai, FirstStepInjection as An, CwdEpoch as Ao, HostTrustError as Ar, rebindResponse as As, cleanupConditionFor as At, RC021_RC2_HOST_PACKAGES as B, currentContractDigest as Ba, splitTextFragments as Bc, PROTOCOL_V3_NOTICE as Bi, HostProfileError as Bn, EvidenceRole as Bo, GitAdapterAction as Br, ProcessExitStatus as Bs, PROOF_MANIFEST_DOMAIN_V2 as Bt, createActivationMigrationReceipt as C, evaluateHostCapability as Ca, isOpenObligation as Cc, nativeGitParentOidVerified as Ci, COMMAND_SURFACE_MANIFEST as Cn, isCurrentAcceptedBoundary as Co, readAsarIndex as Cr, RebindArgs as Cs, MIN_RECOVERY_CHAR_BUDGET as Ct, resolveSessionActivation as D, selectHostCohort as Da, kindOfScope as Dc, CertificationSupport as Di, validateManifest as Dn, BindingActionClosure as Do, writeDesktopRuntimeReceipt as Dr, proposeRebindOutcome as Ds, V6_ORDINARY_COMPLETION_RULE_COMPACT as Dt, resolveActivationBindingsRoot as E, hostVersionFromPackages as Ea, itemHoldsExecutionAuthority as Ec, withDurability as Ei, OperationVerbEntry as En, AssetObligation as Eo, readDesktopTargetGraph as Er, proposeRebind as Es, V6_ORDINARY_COMPLETION_RULE as Et, activationDigest as F, SUPPORTED_HOST_VERSIONS as Fa, qualificationOfClause as Fc, itemDiagnosis as Fi, firstStepGuidanceV6 as Fn, DeriveScope as Fo, qualifyHostTrust as Fr, DEPENDENCY_FREE_ONLY_CONDITION as Fs, renderRecoveryPacket as Ft, supersedeItem as G, segmentAuthorityBlocks as Ga, ActionManifest as Gc, deriveProjection as Gi, auditedForegroundRenderers as Gn, GuardCheckpoint as Go, GitEffectExecution as Gr, admissibleForRemoval as Gs, ProofKindCapability as Gt, RC020_RC1_HOST_PACKAGES as H, AuthorityBlockKind as Ha, verbIsNegated as Hc, PROTOCOL_V5_NOTICE as Hi, activeRendererModule as Hn, ExternalOperation as Ho, GitCommandManifest as Hr, ProcessOutcomeReason as Hs, PROOF_PROTOCOL_VERSION_V2 as Ht, activationJson as I, compareHostVersions as Ia, questionHeadsClause as Ic, nativeFileTwoRole as Ii, lifecyclePhase as In, DerivedEnvelope as Io, registryArchiveFiles as Ir, DeclaredOperationResult as Is, v6CurrentRootBoundaries as It, CompletionDisposition as J, classifyTaskIntent as Ja, CERTIFICATE_VERSION as Jc, ACTIVE_HOST_COHORT_ID as Ji, evaluateActiveHostLock as Jn, GuardItem as Jo, GitPrestateEnvelope as Jr, partialFailureOf as Js, ProofManifestV2 as Jt, AssistantOutcomeObservation as K, TaskIntent as Ka, ActionSpec as Kc, legacyRecordsNeedingReview as Ki, auditedHostImplementation as Kn, GuardEvidence as Ko, GitEffectRunner as Kr, capabilityConsequence as Ks, ProofKindV2 as Kt, sessionBirthIdentity as L, evaluateMinimumHostVersion as La, reportingHeadGoverns as Lc, relevantEvidence as Li, previewFirstStepInjection as Ln, EvidenceBinding as Lo, registryArchiveModules as Lr, DependencyStatus as Ls, PROOF_CAPABILITY_MATRIX as Lt, SessionActivationRead as M, MIN_SUPPORTED_HOST_VERSION as Ma, opensConditionLead as Mc, capabilityRemedyPhrase as Mi, LifecyclePhase as Mn, DelegationRef as Mo, acquireHostTrust as Mr, CapabilityFact as Ms, openItems as Mt, SessionBirthIdentity as N, ParsedHostVersion as Na, opensWithDirective as Nc, deriveItemDiagnosis as Ni, claimedBatchHasRealRootInput as Nn, DeriveConfig as No, hostTrustDigest as Nr, CapabilityGap as Ns, recoveryDigest as Nt, validateActivationMigrationReceipt as O, HOST_VALIDATED_VERSIONS as Oa, legacyQuestionReadingIsInformational as Oc, DiagnosisNextAction as Oi, ClaimedMessage as On, BoundaryDisposition as Oo, HostRebindTrust as Or, proposeRebindV042 as Os, V6_ORDINARY_COMPLETION_RULE_SHORT as Ot, activationCanonical as P, SUPPORTED_HOST_RANGE as Pa, presentExplanationHead as Pc, evidenceAvailabilityReason as Pi, firstStepGuidance as Pn, DeriveResult as Po, parseHostTrust as Pr, CapabilityRemedy as Ps, recoveryTitle as Pt, TurnStoppingDecision as Q, isFrozenV042RebindResponse as Qa, STOP_PROTOCOL_VERSION as Qc, BASE_HOST_PACKAGES as Qi, injectActiveProfileHostLock as Qn, GuardProjection as Qo, commitTreeSnapshotDigest as Qr, DirectiveClass as Qs, SessionQuery as Qt, validateActivationBinding as R, parseHostVersion as Ra, restatedContentOf as Rc, CAPTURE_V042_NOTICE as Ri, ActiveProfileHostLock as Rn, EvidenceOutcome as Ro, GIT_COMMAND_MANIFEST_IDS as Rr, DerivedProcessFacts as Rs, PROOF_KINDS as Rt, adoptActivationReceipt as S, evaluateGraphDerivedHostLock as Sa, isInformationalFragment as Sc, isDeterministicCheck as Si, isVerifyingCapability as Sn, effectuateBoundary as So, readAsarFile as Sr, ProposeOutcome as Ss, DEFAULT_RECOVERY_CHAR_BUDGET as St, readActivationMigrationReceipt as T, evaluateToolSurfaceCapability as Ta, isRestatement as Tc, shellReadbackOutcome as Ti, ManifestIssue as Tn, AssetInterpretationFact as To, readDesktopDependency as Tr, confirmRebind as Ts, RecoveryOptions as Tt, projectSessionCoreV2 as U, AuthorityKind as Ua, ACTION_MANIFEST as Uc, PROTOCOL_V6_NOTICE as Ui, auditedDefaultWorkdirHost as Un, GoalRef as Uo, GitCommandParseResult as Ur, RemovalOutcomeReport as Us, ProofHostSurface as Ut, RC020_RC2_HOST_PACKAGES as V, AuthorityBlock as Va, statefulActionsOfScope as Vc, PROTOCOL_V4_NOTICE as Vi, TargetHostGraph as Vn, ExpectedTransition as Vo, GitCommandAccepted as Vr, ProcessFactSource as Vs, PROOF_PROTOCOL_VERSION as Vt, projectCoreV2 as W, authorityCaptureCounts as Wa, ACTION_MANIFEST_VERSION as Wc, applyUpgradeEligibility as Wi, auditedDefaultWorkdirProvider as Wn, GuardBoundary as Wo, GitCommandRejected as Wr, actionHasCertificationPath as Ws, ProofKind as Wt, NO_PROGRESS_RECORD_PREFIX as X, CONFIRM_LINE_PATTERN as Xa, SEMANTIC_ACTIONS as Xc, ACTIVE_HOST_LAUNCHER_VERSION as Xi, hostLockContextFromComposedDump as Xn, GuardItemStatus as Xo, LinearCommitReadback as Xr, removalIsPartiallyKnown as Xs, ProofObligationV2 as Xt, CurrentActionBasis as Y, classifyUserInteraction as Ya, CERTIFICATE_VERSION_V2 as Yc, ACTIVE_HOST_COHORT_IDS as Yi, evaluateConfiguredHostLock as Yn, GuardItemKind as Yo, GitTargetIdentity as Yr, removalIsComplete as Ys, ProofObligation as Yt, NO_PROGRESS_TURNS_BEFORE_STOP as Z, ParsedConfirmation as Za, STATEFUL_ACTIONS as Zc, AuditedExecutable as Zi, hostLockRowsFromComposedDump as Zn, GuardOperation as Zo, commitIndexSnapshotDigest as Zr, AuthorityDisposition as Zs, ProofSurface as Zt, verifyMigrationInventory as _, HostProfileKind as _a, interpretClause as _c, ToolResultInput as _i, sanitizeUrl as _l, validateProofManifestV2 as _n, BoundaryQualification as _o, DesktopTargetGraph as _r, ReleaseGateDecision as _s, V4SessionLike as _t, isSelectedActivationReceipt as a, HOST_COHORTS as aa, QualificationStatus as ac, CanonicalArgv as ai, isStatefulAction as al, proofCapabilityReport as an, ClauseSegment as ao, prepareTargetHostTrust as ar, SourceSpan as as, decisionBoundaryKey as at, __activationBindingInternals as b, bindLiveGoalCapability as ba, isExecutableItem as bc, extractTextContent as bi, evidenceCoverage as bn, GoalBoundaryAccess as bo, memoizedAsarFile as br, ReleaseSettlement as bs, CLEANUP_CONDITION_RULE_COMPACT as bt, selectedActivationInventory as c, HostCapabilityId as ca, clarifiedSpanOf as cc, ShellParseStatus as ci, requestedTargetMatchesResolved as cl, proofEvidenceConstraints as cn, classifyClause as co, resolveDesktopProfileHostLock as cr, TargetSource as cs, latestAssistantText as ct, verifySelectedMigrationInventory as d, HostCohortSelection as da, clauseIsProtected as dc, parsePwshCommand as di, validateActionManifest as dl, proofV2Rejection as dn, extractMethod as do, verifyComposedHostLockDump as dr, TargetValue as ds, progressFingerprint as dt, EXPECTED_HOST_PACKAGES as ea, ExecutionQualification as ec, executeRevalidatedGitEffect as ei, SUPPORTED_EVIDENCE_ADAPTERS as el, bindProofToProjection as en, CheckpointResult as eo, inspectTargetHostGraph as er, JobLifecycleRecord as es, assessmentOutcomePredicate as et, privateStorageToolDenial as f, HostCohortSelectionReason as fa, explanationHasActionResidue as fc, parseShellCommand as fi, validateActionTarget as fl, requiredSubjectsOf as fn, extractOperation as fo, AsarIndex as fr, VerificationContract as fs, testOutcomePredicate as ft, prepareActivationMigration as g, HostPlatform as ga, hasWorkPredicate as gc, ToolCallInput as gi, sanitizeClauseText as gl, validateProofManifest as gn, BoundaryEffectuation as go, DesktopAppRuntime as gr, PackageRow as gs, SessionApiError as gt, inspectActivationInventory as h, HostLockStatus as ha, hasQuestionScope as hc, NATIVE_GIT_ROOT_PARENT_OID as hi, normalizeClause as hl, sessionQueryV2 as hn, BOUNDARY_RECORD_PREFIX as ho, DESKTOP_RUNTIME_PACKAGE_NAME as hr, createProjection as hs, SESSION_EVENT_ENVELOPE_INVALID as ht, createActivationSelection as i, HOST_CAPABILITY_PACKAGE_GROUPS as ia, QualificationReason as ic, verifiedLinearCommitReadback as ii, boundedArtifactChoiceMatches as il, createProofManifestV2 as in, CaptureScope as io, prepareDesktopHostTrust as ir, PersistenceAuthorization as is, decideTurnStopping as it, SessionActivationBinding as j, LATEST_TESTED_HOST_VERSION as ja, namedActions as jc, UnifiedItemDiagnosis as ji, FirstStepPreviewInput as jn, DeferAuthorization as jo, HostTrustedPackage as jr, replayRebindResult as js, closingHint as jt, writeActivationBinding as k, HostVersionDecision as ka, maskCodeSpans as kc, Repairability as ki, FIRST_STEP_GUIDANCE as kn, BoundaryQualificationKind as ko, HostTrustAcquisitionOptions as kr, rebindAttemptKey as ks, carriesCleanupCondition as kt, validateActivationInventorySnapshot as l, HostCapabilityRequest as la, clauseAsksOwnQuestion as lc, canonicalArgvFromCommand as li, semanticActionFromCommand as ll, proofHostSurfacesOf as ln, environmentDefaultRepositoryTarget as lo, resolveInstalledHostLock as lr, TargetSourceKind as ls, latestRootInstruction as lt, ActivationPriorModes as m, HostLockEvaluation as ma, hasOrderedCoordination as mc, hasCurrentCertificate as mi, digestStrings as ml, sessionQuery as mn, segmentClauses as mo, DESKTOP_PROFILE_PACKAGE_NAME as mr, WorkUnit as ms, SESSION_API_UNSUPPORTED as mt, ActivationMigrationSelection as n, ExecutableIdentityBinding as na, InterpretOptions as nc, parseGitCommandManifest as ni, StatefulAction as nl, canonicalProjection as nn, bindingIndividuallyAccepted as no, packageRowsFromPnpmLock as nr, NeedsReviewFact as ns, currentActionBases as nt, prepareSelectedActivationMigration as o, HostAuditProvenance as oa, ScopeInterpretation as oc, CanonicalCommandSurface as oi, requestedIdentityKey as ol, proofDigest as on, captureClause as oo, readActiveHostGraph as or, TargetCaptureReasonCode as os, isRootPauseRequest as ot, ActivationInventoryPersistence as p, HostLockContext as pa, governedClauseRestrictsExecution as pc, goalCompletionDenial as pi, canonicalizePath as pl, scopeCoverageDigest as pn, isInformationalMessage as po, DESKTOP_IDENTITY_FACTS as pr, WaitAuthorization as ps, v6TestPredicate as pt, CONTROL_RECORD_PREFIX as q, UserInteractionKind as qa, BOUNDED_ARTIFACT_TYPES as qc, rootLocatorFlavor as qi, combineHostPolicy as qn, GuardIntegrity as qo, GitPrestateCheck as qr, capabilityFactOf as qs, ProofManifest as qt, activationSelectionPending as r, GOAL_HOST_PACKAGES as ra, LEGACY_QUALIFICATION as rc, revalidateGitPrestate as ri, actionCompatible as rl, createProofManifest as rn, certifyCheckpoint as ro, prepareActiveHostTrust as rr, NeedsReviewReason as rs, decideTurnBoundary as rt, scanActivationInventory as s, HostCapabilityEvaluation as sa, actionVerbMatches as sc, ParsedShell as si, requestedTargetAuthorizesMutation as sl, proofDigestV2 as sn, captureItem as so, resolveActiveProfileHostLock as sr, TargetCaptureStatus as ss, isWholeTaskCompletionClaim as st, ActivationInventorySnapshot as t, ExecutableIdentity as ta, GRANTED_QUALIFICATION as tc, gitCommandMatchesTarget as ti, SemanticAction as tl, bindProofV2ToProjection as tn, RejectedBinding as to, packageRowsFromActiveGraph as tr, MessageCoverage as ts, classifyCompletionClaim as tt, validateActivationSelection as u, HostCohort as ua, clauseIsGoverned as uc, isRunExecutable as ui, semanticActionFromText as ul, proofOperationMatches as un, extractArtifactPaths as uo, revalidateDesktopCoreLock as ur, TargetTuple as us, observeAssistantOutcome as ut, ActivationMigrationEntry as v, HostToolSurface as va, interpretMessage as vc, ToolSubject as vi, sha256 as vl, EvidenceFacetCoverage as vn, BoundaryRequest as vo, auditDesktopInstalledImplementation as vr, ReleaseObservedIdentity as vs, snapshotSessionEvents as vt, readActivationBinding as w, evaluateHostLock as wa, isQuestionScopeNeedingReview as wc, persistedToolResultStatus as wi, CommandSurfaceManifest as wn, qualifyBoundary as wo, readDesktopAppRuntime as wr, RebindProposal as ws, RecoveryCause as wt, activationBindingPath as x, evaluateExternalWaitCapability as xa, isExplanationScope as xc, extractToolSubject as xi, evidenceMatchesItem as xn, availableBoundaryQualifications as xo, memoizedAsarIndex as xr, BoundedSource as xs, CLEANUP_CONDITION_RULE_SHORT as xt, ActivationMigrationReceipt as y, bindExecutableIdentity as ya, introducesActionClause as yc, evidenceFromPersistedToolResult as yi, stripUrlCredentials as yl, bindingSatisfies as yn, GoalActivationState as yo, hasDesktopImporterState as yr, ReleaseOperation as ys, CLEANUP_CONDITION_RULE as yt, RC021_RC3_HOST_PACKAGES as z, satisfiesSupportedHostRange as za, semanticActionOfScope as zc, DEFAULT_DELEGATION_TOOL_NAMES as zi, AuditedPackageExpectation as zn, EvidenceParseStatus as zo, GIT_COMMAND_TEMPLATES as zr, OperationAttribution as zs, PROOF_KINDS_V2 as zt };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as classifyCompletionClaim, $a as RejectedBinding, $c as actionCompatible, $i as ExecutableIdentity, $n as packageRowsFromActiveGraph, $o as NeedsReviewReason, $r as gitCommandMatchesTarget, $s as LEGACY_QUALIFICATION, $t as bindProofV2ToProjection, A as InitialActivation, Aa as MIN_SUPPORTED_HOST_VERSION, Ac as presentExplanationHead, Ai as capabilityRemedyPhrase, An as LifecyclePhase, Ao as DeriveConfig, Ar as acquireHostTrust, As as CapabilityRemedy, At as openItems, B as RC020_RC1_HOST_PACKAGES, Ba as AuthorityBlockKind, Bc as ACTION_MANIFEST_VERSION, Bi as PROTOCOL_V5_NOTICE, Bn as activeRendererModule, Bo as GoalRef, Br as GitCommandManifest, Bs as actionHasCertificationPath, Bt as PROOF_PROTOCOL_VERSION_V2, C as createActivationMigrationReceipt, Ca as evaluateToolSurfaceCapability, Cc as kindOfScope, Ci as shellReadbackOutcome, Cn as ManifestIssue, Co as AssetInterpretationFact, Cr as readDesktopDependency, Cs as proposeRebindOutcome, Ct as RecoveryOptions, D as resolveSessionActivation, Da as HostVersionDecision, Dc as namedActions, Di as Repairability, Dn as FIRST_STEP_GUIDANCE, Do as BoundaryQualificationKind, Dr as HostTrustAcquisitionOptions, Ds as replayRebindResult, Dt as carriesCleanupCondition, E as resolveActivationBindingsRoot, Ea as HOST_VALIDATED_VERSIONS, Ec as maskQuotedSpans, Ei as DiagnosisNextAction, En as ClaimedMessage, Eo as BoundaryDisposition, Er as HostRebindTrust, Es as rebindResponse, Et as V6_ORDINARY_COMPLETION_RULE_SHORT, F as activationDigest, Fa as evaluateMinimumHostVersion, Fc as semanticActionOfScope, Fi as relevantEvidence, Fn as previewFirstStepInjection, Fo as EvidenceOutcome, Fr as registryArchiveModules, Fs as OperationAttribution, Ft as PROOF_CAPABILITY_MATRIX, G as CONTROL_RECORD_PREFIX, Ga as UserInteractionKind, Gc as CERTIFICATE_VERSION_V2, Gi as rootLocatorFlavor, Gn as combineHostPolicy, Go as GuardItem, Gr as GitPrestateCheck, Gs as removalIsComplete, Gt as ProofManifest, H as projectCoreV2, Ha as authorityCaptureCounts, Hc as ActionSpec, Hi as applyUpgradeEligibility, Hn as auditedDefaultWorkdirProvider, Ho as GuardCheckpoint, Hr as GitCommandRejected, Hs as capabilityConsequence, Ht as ProofKind, I as activationJson, Ia as parseHostVersion, Ic as splitTextFragments, Ii as CAPTURE_V042_NOTICE, In as ActiveProfileHostLock, Io as EvidenceParseStatus, Ir as GIT_COMMAND_MANIFEST_IDS, Is as ProcessExitStatus, It as PROOF_KINDS, J as NO_PROGRESS_RECORD_PREFIX, Ja as CONFIRM_LINE_PATTERN, Jc as STOP_PROTOCOL_VERSION, Ji as ACTIVE_HOST_LAUNCHER_VERSION, Jn as hostLockContextFromComposedDump, Jo as GuardOperation, Jr as LinearCommitReadback, Js as DirectiveClass, Jt as ProofObligationV2, K as CompletionDisposition, Ka as classifyTaskIntent, Kc as SEMANTIC_ACTIONS, Ki as ACTIVE_HOST_COHORT_ID, Kn as evaluateActiveHostLock, Ko as GuardItemKind, Kr as GitPrestateEnvelope, Ks as removalIsPartiallyKnown, Kt as ProofManifestV2, L as sessionBirthIdentity, La as satisfiesSupportedHostRange, Lc as statefulActionsOfScope, Li as DEFAULT_DELEGATION_TOOL_NAMES, Ln as AuditedPackageExpectation, Lo as EvidenceRole, Lr as GIT_COMMAND_TEMPLATES, Ls as ProcessFactSource, Lt as PROOF_KINDS_V2, M as SessionActivationRead, Ma as SUPPORTED_HOST_RANGE, Mc as questionHeadsClause, Mi as evidenceAvailabilityReason, Mn as firstStepGuidance, Mo as DeriveScope, Mr as parseHostTrust, Ms as DeclaredOperationResult, Mt as recoveryTitle, N as SessionBirthIdentity, Na as SUPPORTED_HOST_VERSIONS, Nc as reportingHeadGoverns, Ni as itemDiagnosis, Nn as firstStepGuidanceV6, No as DerivedEnvelope, Nr as qualifyHostTrust, Ns as DependencyStatus, Nt as renderRecoveryPacket, O as validateActivationMigrationReceipt, Oa as HostVersionStatus, Oc as opensConditionLead, Oi as TaskKind, On as FirstStepInjection, Oo as DeferAuthorization, Or as HostTrustError, Os as CapabilityFact, Ot as cleanupConditionFor, P as activationCanonical, Pa as compareHostVersions, Pc as restatedContentOf, Pi as nativeFileTwoRole, Pn as lifecyclePhase, Po as EvidenceBinding, Pr as registryArchiveFiles, Ps as DerivedProcessFacts, Pt as v6CurrentRootBoundaries, Q as assessmentOutcomePredicate, Qa as CheckpointResult, Qc as StatefulAction, Qi as EXPECTED_HOST_PACKAGES, Qn as inspectTargetHostGraph, Qo as NeedsReviewFact, Qr as executeRevalidatedGitEffect, Qs as InterpretOptions, Qt as bindProofToProjection, R as validateActivationBinding, Ra as currentContractDigest, Rc as verbIsNegated, Ri as PROTOCOL_V3_NOTICE, Rn as HostProfileError, Ro as ExpectedTransition, Rr as GitAdapterAction, Rs as ProcessOutcomeReason, Rt as PROOF_MANIFEST_DOMAIN_V2, S as adoptActivationReceipt, Sa as evaluateHostLock, Sc as itemHoldsExecutionAuthority, Si as persistedToolResultStatus, Sn as CommandSurfaceManifest, So as qualifyBoundary, Sr as readDesktopAppRuntime, Ss as proposeRebind, St as RecoveryCause, T as readActivationMigrationReceipt, Ta as selectHostCohort, Tc as maskCodeSpans, Ti as CertificationSupport, Tn as validateManifest, To as BindingActionClosure, Tr as writeDesktopRuntimeReceipt, Ts as rebindAttemptKey, Tt as V6_ORDINARY_COMPLETION_RULE_COMPACT, U as supersedeItem, Ua as segmentAuthorityBlocks, Uc as BOUNDED_ARTIFACT_TYPES, Ui as deriveProjection, Un as auditedForegroundRenderers, Uo as GuardEvidence, Ur as GitEffectExecution, Us as capabilityFactOf, Ut as ProofKindCapability, V as projectSessionCoreV2, Va as AuthorityKind, Vc as ActionManifest, Vi as PROTOCOL_V6_NOTICE, Vn as auditedDefaultWorkdirHost, Vo as GuardBoundary, Vr as GitCommandParseResult, Vs as admissibleForRemoval, Vt as ProofHostSurface, W as AssistantOutcomeObservation, Wa as TaskIntent, Wc as CERTIFICATE_VERSION, Wi as legacyRecordsNeedingReview, Wn as auditedHostImplementation, Wo as GuardIntegrity, Wr as GitEffectRunner, Ws as partialFailureOf, Wt as ProofKindV2, X as TurnStoppingDecision, Xa as isFrozenV042RebindResponse, Xc as SUPPORTED_EVIDENCE_ADAPTERS, Xi as BASE_HOST_PACKAGES, Xn as injectActiveProfileHostLock, Xo as HostStatus, Xr as commitTreeSnapshotDigest, Xs as ExecutionQualification, Xt as SessionQuery, Y as NO_PROGRESS_TURNS_BEFORE_STOP, Ya as ParsedConfirmation, Yc as STOP_PROTOCOL_VERSION_V2, Yi as AuditedExecutable, Yn as hostLockRowsFromComposedDump, Yo as GuardProjection, Yr as commitIndexSnapshotDigest, Ys as Executee, Yt as ProofSurface, Z as assessmentAction, Za as parseConfirmationMessage, Zc as SemanticAction, Zi as DEFAULT_HOST_LOCK, Zn as inspectDesktopTargetGraph, Zo as MessageCoverage, Zr as createGitPrestateEnvelope, Zs as GRANTED_QUALIFICATION, Zt as SessionQueryV2, _ as verifyMigrationInventory, _a as bindExecutableIdentity, _c as isExplanationScope, _i as evidenceFromPersistedToolResult, _n as bindingSatisfies, _o as GoalActivationState, _r as hasDesktopImporterState, _s as BoundedSource, _t as CLEANUP_CONDITION_RULE, a as isSelectedActivationReceipt, aa as HostCapabilityEvaluation, ac as clauseAsksOwnQuestion, ai as ParsedShell, al as semanticActionFromCommand, an as proofDigestV2, ao as captureItem, ar as resolveActiveProfileHostLock, as as TargetSourceKind, at as isWholeTaskCompletionClaim, b as __activationBindingInternals, ba as evaluateGraphDerivedHostLock, bc as isQuestionScopeNeedingReview, bi as isDeterministicCheck, bn as isVerifyingCapability, bo as effectuateBoundary, br as readAsarFile, bs as RebindProposal, bt as DEFAULT_RECOVERY_CHAR_BUDGET, c as selectedActivationInventory, ca as HostCohort, cc as explanationHasActionResidue, ci as isRunExecutable, cl as validateActionTarget, cn as proofOperationMatches, co as extractArtifactPaths, cr as revalidateDesktopCoreLock, cs as VerificationContract, ct as observeAssistantOutcome, d as verifySelectedMigrationInventory, da as HostLockContext, dc as hasQuestionScope, di as goalCompletionDenial, dl as normalizeClause, dn as scopeCoverageDigest, do as isInformationalMessage, dr as DESKTOP_IDENTITY_FACTS, ds as createProjection, dt as v6TestPredicate, ea as ExecutableIdentityBinding, ec as QualificationReason, ei as parseGitCommandManifest, el as boundedArtifactChoiceMatches, en as canonicalProjection, eo as bindingIndividuallyAccepted, er as packageRowsFromPnpmLock, es as PersistenceAuthorization, et as currentActionBases, f as privateStorageToolDenial, fa as HostLockEvaluation, fc as hasWorkPredicate, fi as hasCurrentCertificate, fl as sanitizeClauseText, fn as sessionQuery, fo as segmentClauses, fr as DESKTOP_PROFILE_PACKAGE_NAME, fs as PackageRow, ft as SESSION_API_UNSUPPORTED, g as prepareActivationMigration, ga as HostToolSurface, gc as isExecutableItem, gi as ToolSubject, gn as EvidenceFacetCoverage, go as BoundaryRequest, gr as auditDesktopInstalledImplementation, gs as ReleaseSettlement, gt as snapshotSessionEvents, h as inspectActivationInventory, ha as HostProfileKind, hc as introducesActionClause, hi as ToolResultInput, hn as validateProofManifestV2, ho as BoundaryQualification, hr as DesktopTargetGraph, hs as ReleaseOperation, ht as V4SessionLike, i as createActivationSelection, ia as HostAuditProvenance, ic as clarifiedSpanOf, ii as CanonicalCommandSurface, il as requestedTargetMatchesResolved, in as proofDigest, io as captureClause, ir as readActiveHostGraph, is as TargetSource, it as isRootPauseRequest, j as SessionActivationBinding, ja as ParsedHostVersion, jc as qualificationOfClause, ji as deriveItemDiagnosis, jn as claimedBatchHasRealRootInput, jo as DeriveResult, jr as hostTrustDigest, js as DEPENDENCY_FREE_ONLY_CONDITION, jt as recoveryDigest, k as writeActivationBinding, ka as LATEST_TESTED_HOST_VERSION, kc as opensWithDirective, ki as UnifiedItemDiagnosis, kn as FirstStepPreviewInput, ko as DelegationRef, kr as HostTrustedPackage, ks as CapabilityGap, kt as closingHint, l as validateActivationInventorySnapshot, la as HostCohortSelection, lc as governedClauseRestrictsExecution, li as parsePwshCommand, ll as canonicalizePath, ln as proofV2Rejection, lo as extractMethod, lr as verifyComposedHostLockDump, ls as WaitAuthorization, lt as progressFingerprint, m as ActivationPriorModes, ma as HostPlatform, mc as interpretMessage, mi as ToolCallInput, ml as sha256, mn as validateProofManifest, mo as BoundaryEffectuation, mr as DesktopAppRuntime, ms as ReleaseObservedIdentity, mt as SessionApiError, n as ActivationMigrationSelection, na as HOST_CAPABILITY_PACKAGE_GROUPS, nc as ScopeInterpretation, ni as verifiedLinearCommitReadback, nl as requestedIdentityKey, nn as createProofManifestV2, no as CaptureScope, nr as prepareDesktopHostTrust, ns as TargetCaptureReasonCode, nt as decideTurnStopping, o as prepareSelectedActivationMigration, oa as HostCapabilityId, oc as clauseIsGoverned, oi as ShellParseStatus, ol as semanticActionFromText, on as proofEvidenceConstraints, oo as classifyClause, or as resolveDesktopProfileHostLock, os as TargetTuple, ot as latestAssistantText, p as ActivationInventoryPersistence, pa as HostLockStatus, pc as interpretClause, pi as NATIVE_GIT_ROOT_PARENT_OID, pl as sanitizeUrl, pn as sessionQueryV2, po as BOUNDARY_RECORD_PREFIX, pr as DESKTOP_RUNTIME_PACKAGE_NAME, ps as ReleaseGateDecision, pt as SESSION_EVENT_ENVELOPE_INVALID, q as CurrentActionBasis, qa as classifyUserInteraction, qc as STATEFUL_ACTIONS, qi as ACTIVE_HOST_COHORT_IDS, qn as evaluateConfiguredHostLock, qo as GuardItemStatus, qr as GitTargetIdentity, qs as AuthorityDisposition, qt as ProofObligation, r as activationSelectionPending, ra as HOST_COHORTS, rc as actionVerbMatches, ri as CanonicalArgv, rl as requestedTargetAuthorizesMutation, rn as proofCapabilityReport, ro as ClauseSegment, rr as prepareTargetHostTrust, rs as TargetCaptureStatus, rt as decisionBoundaryKey, s as scanActivationInventory, sa as HostCapabilityRequest, sc as clauseIsProtected, si as canonicalArgvFromCommand, sl as validateActionManifest, sn as proofHostSurfacesOf, so as environmentDefaultRepositoryTarget, sr as resolveInstalledHostLock, ss as TargetValue, st as latestRootInstruction, t as ActivationInventorySnapshot, ta as GOAL_HOST_PACKAGES, tc as QualificationStatus, ti as revalidateGitPrestate, tl as isStatefulAction, tn as createProofManifest, to as certifyCheckpoint, tr as prepareActiveHostTrust, ts as SourceSpan, tt as decideTurnBoundary, u as validateActivationSelection, ua as HostCohortSelectionReason, uc as hasOrderedCoordination, ui as parseShellCommand, ul as digestStrings, un as requiredSubjectsOf, uo as extractOperation, ur as AsarIndex, us as WorkUnit, ut as testOutcomePredicate, v as ActivationMigrationEntry, va as bindLiveGoalCapability, vc as isInformationalFragment, vi as extractTextContent, vn as evidenceCoverage, vo as GoalBoundaryAccess, vr as memoizedAsarFile, vs as ProposeOutcome, vt as CLEANUP_CONDITION_RULE_COMPACT, w as readActivationBinding, wa as hostVersionFromPackages, wc as legacyQuestionReadingIsInformational, wi as withDurability, wn as OperationVerbEntry, wo as AssetObligation, wr as readDesktopTargetGraph, ws as proposeRebindV042, wt as V6_ORDINARY_COMPLETION_RULE, x as activationBindingPath, xa as evaluateHostCapability, xc as isRestatement, xi as nativeGitParentOidVerified, xn as COMMAND_SURFACE_MANIFEST, xo as isCurrentAcceptedBoundary, xr as readAsarIndex, xs as confirmRebind, xt as MIN_RECOVERY_CHAR_BUDGET, y as ActivationMigrationReceipt, ya as evaluateExternalWaitCapability, yc as isOpenObligation, yi as extractToolSubject, yn as evidenceMatchesItem, yo as availableBoundaryQualifications, yr as memoizedAsarIndex, ys as RebindArgs, yt as CLEANUP_CONDITION_RULE_SHORT, z as RC020_RC2_HOST_PACKAGES, za as AuthorityBlock, zc as ACTION_MANIFEST, zi as PROTOCOL_V4_NOTICE, zn as TargetHostGraph, zo as ExternalOperation, zr as GitCommandAccepted, zs as RemovalOutcomeReport, zt as PROOF_PROTOCOL_VERSION } from "./index-qKK3BJW1.js";
+import { $ as assessmentAction, $a as parseConfirmationMessage, $c as STOP_PROTOCOL_VERSION_V2, $i as DEFAULT_HOST_LOCK, $n as inspectDesktopTargetGraph, $o as HostStatus, $r as createGitPrestateEnvelope, $s as Executee, $t as SessionQueryV2, A as InitialActivation, Aa as HostVersionStatus, Ac as maskQuotedSpans, Ai as TaskKind, An as FirstStepInjection, Ao as CwdEpoch, Ar as HostTrustError, As as rebindResponse, At as cleanupConditionFor, B as RC021_RC2_HOST_PACKAGES, Ba as currentContractDigest, Bc as splitTextFragments, Bi as PROTOCOL_V3_NOTICE, Bn as HostProfileError, Bo as EvidenceRole, Br as GitAdapterAction, Bs as ProcessExitStatus, Bt as PROOF_MANIFEST_DOMAIN_V2, C as createActivationMigrationReceipt, Ca as evaluateHostCapability, Cc as isOpenObligation, Ci as nativeGitParentOidVerified, Cn as COMMAND_SURFACE_MANIFEST, Co as isCurrentAcceptedBoundary, Cr as readAsarIndex, Cs as RebindArgs, Ct as MIN_RECOVERY_CHAR_BUDGET, D as resolveSessionActivation, Da as selectHostCohort, Dc as kindOfScope, Di as CertificationSupport, Dn as validateManifest, Do as BindingActionClosure, Dr as writeDesktopRuntimeReceipt, Ds as proposeRebindOutcome, Dt as V6_ORDINARY_COMPLETION_RULE_COMPACT, E as resolveActivationBindingsRoot, Ea as hostVersionFromPackages, Ec as itemHoldsExecutionAuthority, Ei as withDurability, En as OperationVerbEntry, Eo as AssetObligation, Er as readDesktopTargetGraph, Es as proposeRebind, Et as V6_ORDINARY_COMPLETION_RULE, F as activationDigest, Fa as SUPPORTED_HOST_VERSIONS, Fc as qualificationOfClause, Fi as itemDiagnosis, Fn as firstStepGuidanceV6, Fo as DeriveScope, Fr as qualifyHostTrust, Fs as DEPENDENCY_FREE_ONLY_CONDITION, Ft as renderRecoveryPacket, G as supersedeItem, Ga as segmentAuthorityBlocks, Gc as ActionManifest, Gi as deriveProjection, Gn as auditedForegroundRenderers, Go as GuardCheckpoint, Gr as GitEffectExecution, Gs as admissibleForRemoval, Gt as ProofKindCapability, H as RC020_RC1_HOST_PACKAGES, Ha as AuthorityBlockKind, Hc as verbIsNegated, Hi as PROTOCOL_V5_NOTICE, Hn as activeRendererModule, Ho as ExternalOperation, Hr as GitCommandManifest, Hs as ProcessOutcomeReason, Ht as PROOF_PROTOCOL_VERSION_V2, I as activationJson, Ia as compareHostVersions, Ic as questionHeadsClause, Ii as nativeFileTwoRole, In as lifecyclePhase, Io as DerivedEnvelope, Ir as registryArchiveFiles, Is as DeclaredOperationResult, It as v6CurrentRootBoundaries, J as CompletionDisposition, Ja as classifyTaskIntent, Jc as CERTIFICATE_VERSION, Ji as ACTIVE_HOST_COHORT_ID, Jn as evaluateActiveHostLock, Jo as GuardItem, Jr as GitPrestateEnvelope, Js as partialFailureOf, Jt as ProofManifestV2, K as AssistantOutcomeObservation, Ka as TaskIntent, Kc as ActionSpec, Ki as legacyRecordsNeedingReview, Kn as auditedHostImplementation, Ko as GuardEvidence, Kr as GitEffectRunner, Ks as capabilityConsequence, Kt as ProofKindV2, L as sessionBirthIdentity, La as evaluateMinimumHostVersion, Lc as reportingHeadGoverns, Li as relevantEvidence, Ln as previewFirstStepInjection, Lo as EvidenceBinding, Lr as registryArchiveModules, Ls as DependencyStatus, Lt as PROOF_CAPABILITY_MATRIX, M as SessionActivationRead, Ma as MIN_SUPPORTED_HOST_VERSION, Mc as opensConditionLead, Mi as capabilityRemedyPhrase, Mn as LifecyclePhase, Mo as DelegationRef, Mr as acquireHostTrust, Ms as CapabilityFact, Mt as openItems, N as SessionBirthIdentity, Na as ParsedHostVersion, Nc as opensWithDirective, Ni as deriveItemDiagnosis, Nn as claimedBatchHasRealRootInput, No as DeriveConfig, Nr as hostTrustDigest, Ns as CapabilityGap, Nt as recoveryDigest, O as validateActivationMigrationReceipt, Oa as HOST_VALIDATED_VERSIONS, Oc as legacyQuestionReadingIsInformational, Oi as DiagnosisNextAction, On as ClaimedMessage, Oo as BoundaryDisposition, Or as HostRebindTrust, Os as proposeRebindV042, Ot as V6_ORDINARY_COMPLETION_RULE_SHORT, P as activationCanonical, Pa as SUPPORTED_HOST_RANGE, Pc as presentExplanationHead, Pi as evidenceAvailabilityReason, Pn as firstStepGuidance, Po as DeriveResult, Pr as parseHostTrust, Ps as CapabilityRemedy, Pt as recoveryTitle, Q as TurnStoppingDecision, Qa as isFrozenV042RebindResponse, Qc as STOP_PROTOCOL_VERSION, Qi as BASE_HOST_PACKAGES, Qn as injectActiveProfileHostLock, Qo as GuardProjection, Qr as commitTreeSnapshotDigest, Qs as DirectiveClass, Qt as SessionQuery, R as validateActivationBinding, Ra as parseHostVersion, Rc as restatedContentOf, Ri as CAPTURE_V042_NOTICE, Rn as ActiveProfileHostLock, Ro as EvidenceOutcome, Rr as GIT_COMMAND_MANIFEST_IDS, Rs as DerivedProcessFacts, Rt as PROOF_KINDS, S as adoptActivationReceipt, Sa as evaluateGraphDerivedHostLock, Sc as isInformationalFragment, Si as isDeterministicCheck, Sn as isVerifyingCapability, So as effectuateBoundary, Sr as readAsarFile, Ss as ProposeOutcome, St as DEFAULT_RECOVERY_CHAR_BUDGET, T as readActivationMigrationReceipt, Ta as evaluateToolSurfaceCapability, Tc as isRestatement, Ti as shellReadbackOutcome, Tn as ManifestIssue, To as AssetInterpretationFact, Tr as readDesktopDependency, Ts as confirmRebind, Tt as RecoveryOptions, U as projectSessionCoreV2, Ua as AuthorityKind, Uc as ACTION_MANIFEST, Ui as PROTOCOL_V6_NOTICE, Un as auditedDefaultWorkdirHost, Uo as GoalRef, Ur as GitCommandParseResult, Us as RemovalOutcomeReport, Ut as ProofHostSurface, V as RC020_RC2_HOST_PACKAGES, Va as AuthorityBlock, Vc as statefulActionsOfScope, Vi as PROTOCOL_V4_NOTICE, Vn as TargetHostGraph, Vo as ExpectedTransition, Vr as GitCommandAccepted, Vs as ProcessFactSource, Vt as PROOF_PROTOCOL_VERSION, W as projectCoreV2, Wa as authorityCaptureCounts, Wc as ACTION_MANIFEST_VERSION, Wi as applyUpgradeEligibility, Wn as auditedDefaultWorkdirProvider, Wo as GuardBoundary, Wr as GitCommandRejected, Ws as actionHasCertificationPath, Wt as ProofKind, X as NO_PROGRESS_RECORD_PREFIX, Xa as CONFIRM_LINE_PATTERN, Xc as SEMANTIC_ACTIONS, Xi as ACTIVE_HOST_LAUNCHER_VERSION, Xn as hostLockContextFromComposedDump, Xo as GuardItemStatus, Xr as LinearCommitReadback, Xs as removalIsPartiallyKnown, Xt as ProofObligationV2, Y as CurrentActionBasis, Ya as classifyUserInteraction, Yc as CERTIFICATE_VERSION_V2, Yi as ACTIVE_HOST_COHORT_IDS, Yn as evaluateConfiguredHostLock, Yo as GuardItemKind, Yr as GitTargetIdentity, Ys as removalIsComplete, Yt as ProofObligation, Z as NO_PROGRESS_TURNS_BEFORE_STOP, Za as ParsedConfirmation, Zc as STATEFUL_ACTIONS, Zi as AuditedExecutable, Zn as hostLockRowsFromComposedDump, Zo as GuardOperation, Zr as commitIndexSnapshotDigest, Zs as AuthorityDisposition, Zt as ProofSurface, _ as verifyMigrationInventory, _a as HostProfileKind, _c as interpretClause, _i as ToolResultInput, _l as sanitizeUrl, _n as validateProofManifestV2, _o as BoundaryQualification, _r as DesktopTargetGraph, _s as ReleaseGateDecision, _t as V4SessionLike, a as isSelectedActivationReceipt, aa as HOST_COHORTS, ac as QualificationStatus, ai as CanonicalArgv, al as isStatefulAction, an as proofCapabilityReport, ao as ClauseSegment, ar as prepareTargetHostTrust, as as SourceSpan, at as decisionBoundaryKey, b as __activationBindingInternals, ba as bindLiveGoalCapability, bc as isExecutableItem, bi as extractTextContent, bn as evidenceCoverage, bo as GoalBoundaryAccess, br as memoizedAsarFile, bs as ReleaseSettlement, bt as CLEANUP_CONDITION_RULE_COMPACT, c as selectedActivationInventory, ca as HostCapabilityId, cc as clarifiedSpanOf, ci as ShellParseStatus, cl as requestedTargetMatchesResolved, cn as proofEvidenceConstraints, co as classifyClause, cr as resolveDesktopProfileHostLock, cs as TargetSource, ct as latestAssistantText, d as verifySelectedMigrationInventory, da as HostCohortSelection, dc as clauseIsProtected, di as parsePwshCommand, dl as validateActionManifest, dn as proofV2Rejection, do as extractMethod, dr as verifyComposedHostLockDump, ds as TargetValue, dt as progressFingerprint, ea as EXPECTED_HOST_PACKAGES, ec as ExecutionQualification, ei as executeRevalidatedGitEffect, el as SUPPORTED_EVIDENCE_ADAPTERS, en as bindProofToProjection, eo as CheckpointResult, er as inspectTargetHostGraph, es as JobLifecycleRecord, et as assessmentOutcomePredicate, f as privateStorageToolDenial, fa as HostCohortSelectionReason, fc as explanationHasActionResidue, fi as parseShellCommand, fl as validateActionTarget, fn as requiredSubjectsOf, fo as extractOperation, fr as AsarIndex, fs as VerificationContract, ft as testOutcomePredicate, g as prepareActivationMigration, ga as HostPlatform, gc as hasWorkPredicate, gi as ToolCallInput, gl as sanitizeClauseText, gn as validateProofManifest, go as BoundaryEffectuation, gr as DesktopAppRuntime, gs as PackageRow, gt as SessionApiError, h as inspectActivationInventory, ha as HostLockStatus, hc as hasQuestionScope, hi as NATIVE_GIT_ROOT_PARENT_OID, hl as normalizeClause, hn as sessionQueryV2, ho as BOUNDARY_RECORD_PREFIX, hr as DESKTOP_RUNTIME_PACKAGE_NAME, hs as createProjection, ht as SESSION_EVENT_ENVELOPE_INVALID, i as createActivationSelection, ia as HOST_CAPABILITY_PACKAGE_GROUPS, ic as QualificationReason, ii as verifiedLinearCommitReadback, il as boundedArtifactChoiceMatches, in as createProofManifestV2, io as CaptureScope, ir as prepareDesktopHostTrust, is as PersistenceAuthorization, it as decideTurnStopping, j as SessionActivationBinding, ja as LATEST_TESTED_HOST_VERSION, jc as namedActions, ji as UnifiedItemDiagnosis, jn as FirstStepPreviewInput, jo as DeferAuthorization, jr as HostTrustedPackage, js as replayRebindResult, jt as closingHint, k as writeActivationBinding, ka as HostVersionDecision, kc as maskCodeSpans, ki as Repairability, kn as FIRST_STEP_GUIDANCE, ko as BoundaryQualificationKind, kr as HostTrustAcquisitionOptions, ks as rebindAttemptKey, kt as carriesCleanupCondition, l as validateActivationInventorySnapshot, la as HostCapabilityRequest, lc as clauseAsksOwnQuestion, li as canonicalArgvFromCommand, ll as semanticActionFromCommand, ln as proofHostSurfacesOf, lo as environmentDefaultRepositoryTarget, lr as resolveInstalledHostLock, ls as TargetSourceKind, lt as latestRootInstruction, m as ActivationPriorModes, ma as HostLockEvaluation, mc as hasOrderedCoordination, mi as hasCurrentCertificate, ml as digestStrings, mn as sessionQuery, mo as segmentClauses, mr as DESKTOP_PROFILE_PACKAGE_NAME, ms as WorkUnit, mt as SESSION_API_UNSUPPORTED, n as ActivationMigrationSelection, na as ExecutableIdentityBinding, nc as InterpretOptions, ni as parseGitCommandManifest, nl as StatefulAction, nn as canonicalProjection, no as bindingIndividuallyAccepted, nr as packageRowsFromPnpmLock, ns as NeedsReviewFact, nt as currentActionBases, o as prepareSelectedActivationMigration, oa as HostAuditProvenance, oc as ScopeInterpretation, oi as CanonicalCommandSurface, ol as requestedIdentityKey, on as proofDigest, oo as captureClause, or as readActiveHostGraph, os as TargetCaptureReasonCode, ot as isRootPauseRequest, p as ActivationInventoryPersistence, pa as HostLockContext, pc as governedClauseRestrictsExecution, pi as goalCompletionDenial, pl as canonicalizePath, pn as scopeCoverageDigest, po as isInformationalMessage, pr as DESKTOP_IDENTITY_FACTS, ps as WaitAuthorization, pt as v6TestPredicate, q as CONTROL_RECORD_PREFIX, qa as UserInteractionKind, qc as BOUNDED_ARTIFACT_TYPES, qi as rootLocatorFlavor, qn as combineHostPolicy, qo as GuardIntegrity, qr as GitPrestateCheck, qs as capabilityFactOf, qt as ProofManifest, r as activationSelectionPending, ra as GOAL_HOST_PACKAGES, rc as LEGACY_QUALIFICATION, ri as revalidateGitPrestate, rl as actionCompatible, rn as createProofManifest, ro as certifyCheckpoint, rr as prepareActiveHostTrust, rs as NeedsReviewReason, rt as decideTurnBoundary, s as scanActivationInventory, sa as HostCapabilityEvaluation, sc as actionVerbMatches, si as ParsedShell, sl as requestedTargetAuthorizesMutation, sn as proofDigestV2, so as captureItem, sr as resolveActiveProfileHostLock, ss as TargetCaptureStatus, st as isWholeTaskCompletionClaim, t as ActivationInventorySnapshot, ta as ExecutableIdentity, tc as GRANTED_QUALIFICATION, ti as gitCommandMatchesTarget, tl as SemanticAction, tn as bindProofV2ToProjection, to as RejectedBinding, tr as packageRowsFromActiveGraph, ts as MessageCoverage, tt as classifyCompletionClaim, u as validateActivationSelection, ua as HostCohort, uc as clauseIsGoverned, ui as isRunExecutable, ul as semanticActionFromText, un as proofOperationMatches, uo as extractArtifactPaths, ur as revalidateDesktopCoreLock, us as TargetTuple, ut as observeAssistantOutcome, v as ActivationMigrationEntry, va as HostToolSurface, vc as interpretMessage, vi as ToolSubject, vl as sha256, vn as EvidenceFacetCoverage, vo as BoundaryRequest, vr as auditDesktopInstalledImplementation, vs as ReleaseObservedIdentity, vt as snapshotSessionEvents, w as readActivationBinding, wa as evaluateHostLock, wc as isQuestionScopeNeedingReview, wi as persistedToolResultStatus, wn as CommandSurfaceManifest, wo as qualifyBoundary, wr as readDesktopAppRuntime, ws as RebindProposal, wt as RecoveryCause, x as activationBindingPath, xa as evaluateExternalWaitCapability, xc as isExplanationScope, xi as extractToolSubject, xn as evidenceMatchesItem, xo as availableBoundaryQualifications, xr as memoizedAsarIndex, xs as BoundedSource, xt as CLEANUP_CONDITION_RULE_SHORT, y as ActivationMigrationReceipt, ya as bindExecutableIdentity, yc as introducesActionClause, yi as evidenceFromPersistedToolResult, yl as stripUrlCredentials, yn as bindingSatisfies, yo as GoalActivationState, yr as hasDesktopImporterState, ys as ReleaseOperation, yt as CLEANUP_CONDITION_RULE, z as RC021_RC3_HOST_PACKAGES, za as satisfiesSupportedHostRange, zc as semanticActionOfScope, zi as DEFAULT_DELEGATION_TOOL_NAMES, zn as AuditedPackageExpectation, zo as EvidenceParseStatus, zr as GIT_COMMAND_TEMPLATES, zs as OperationAttribution, zt as PROOF_KINDS_V2 } from "./index-ClmcMWbM.js";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-tools";
 import { Session } from "@deepseek-ai/dsh-session";
@@ -83,6 +83,14 @@ interface EvidenceToolRoots {
   preEffectVeto?: () => boolean;
   /** C10 settlement record, written after the effect from a trusted readback. */
   releaseSettle?: (request: ReleaseSettlementToolRequest) => Promise<void>;
+  /** F09: total deadline and response-body budget for registry readback. */
+  registryReadBudget?: RegistryReadBudget;
+}
+interface RegistryReadBudget {
+  /** Plugin-owned total deadline for one registry readback, combined with the caller's cancellation. */
+  totalDeadlineMs: number;
+  /** Hard cap on response body bytes actually read (post-decompression). */
+  maxBodyBytes: number;
 }
 interface ReleaseGateToolRequest {
   agent: {
@@ -205,4 +213,4 @@ interface RawReplayInput {
 * Stop handler. It neither executes tools nor asserts a real model outcome. */
 declare function replayRawV2(input: RawReplayInput): Promise<Record<string, unknown>>;
 //#endregion
-export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };
+export { ACTION_MANIFEST, ACTION_MANIFEST_VERSION, ACTIVE_HOST_COHORT_ID, ACTIVE_HOST_COHORT_IDS, ACTIVE_HOST_LAUNCHER_VERSION, ActionManifest, ActionSpec, ActivationInventoryPersistence, ActivationInventorySnapshot, ActivationMigrationEntry, ActivationMigrationReceipt, ActivationMigrationSelection, ActivationPriorModes, ActiveProfileHostLock, AsarIndex, AssetInterpretationFact, AssetObligation, AssistantOutcomeObservation, AuditedExecutable, AuditedPackageExpectation, AuthorityBlock, AuthorityBlockKind, AuthorityDisposition, AuthorityKind, BASE_HOST_PACKAGES, BOUNDARY_RECORD_PREFIX, BOUNDED_ARTIFACT_TYPES, BindingActionClosure, BoundaryDisposition, BoundaryEffectuation, BoundaryQualification, BoundaryQualificationKind, BoundaryRequest, BoundedSource, CAPTURE_V042_NOTICE, CERTIFICATE_VERSION, CERTIFICATE_VERSION_V2, CLEANUP_CONDITION_RULE, CLEANUP_CONDITION_RULE_COMPACT, CLEANUP_CONDITION_RULE_SHORT, COMMAND_SURFACE_MANIFEST, CONFIRM_LINE_PATTERN, CONTROL_RECORD_PREFIX, CanonicalArgv, CanonicalCommandSurface, CapabilityFact, CapabilityGap, CapabilityRemedy, CaptureScope, CertificationSupport, CheckpointResult, ClaimedMessage, ClauseSegment, CommandSurfaceManifest, CompletionDisposition, Config, CurrentActionBasis, CwdEpoch, DEFAULT_DELEGATION_TOOL_NAMES, DEFAULT_HOST_LOCK, DEFAULT_RECOVERY_CHAR_BUDGET, DEPENDENCY_FREE_ONLY_CONDITION, DESKTOP_IDENTITY_FACTS, DESKTOP_PROFILE_PACKAGE_NAME, DESKTOP_RUNTIME_PACKAGE_NAME, DeclaredOperationResult, DeferAuthorization, DelegationRef, DependencyStatus, DeriveConfig, DeriveResult, DeriveScope, DerivedEnvelope, DerivedProcessFacts, DesktopAppRuntime, DesktopTargetGraph, DiagnosisNextAction, DirectiveClass, EXPECTED_HOST_PACKAGES, EvidenceBinding, EvidenceFacetCoverage, EvidenceOutcome, EvidenceParseStatus, EvidenceRole, ExecutableIdentity, ExecutableIdentityBinding, Executee, ExecutionQualification, ExpectedTransition, ExternalOperation, FIRST_STEP_GUIDANCE, FirstStepInjection, FirstStepPreviewInput, GIT_COMMAND_MANIFEST_IDS, GIT_COMMAND_TEMPLATES, GOAL_HOST_PACKAGES, GRANTED_QUALIFICATION, GitAdapterAction, GitCommandAccepted, GitCommandManifest, GitCommandParseResult, GitCommandRejected, GitEffectExecution, GitEffectRunner, GitPrestateCheck, GitPrestateEnvelope, GitTargetIdentity, GoalActivationState, GoalBoundaryAccess, GoalRef, GuardBoundary, GuardCheckpoint, GuardEvidence, GuardIntegrity, GuardItem, GuardItemKind, GuardItemStatus, GuardOperation, GuardProjection, HOST_CAPABILITY_PACKAGE_GROUPS, HOST_COHORTS, HOST_VALIDATED_VERSIONS, HostAuditProvenance, HostCapabilityEvaluation, HostCapabilityId, HostCapabilityRequest, HostCohort, HostCohortSelection, HostCohortSelectionReason, HostLockContext, HostLockEvaluation, HostLockStatus, HostPlatform, HostProfileError, HostProfileKind, HostRebindTrust, HostStatus, HostToolSurface, HostTrustAcquisitionOptions, HostTrustError, HostTrustedPackage, HostVersionDecision, HostVersionStatus, InitialActivation, InterpretOptions, JobLifecycleRecord, LATEST_TESTED_HOST_VERSION, LEGACY_QUALIFICATION, LifecyclePhase, LinearCommitReadback, MIN_RECOVERY_CHAR_BUDGET, MIN_SUPPORTED_HOST_VERSION, ManifestIssue, MessageCoverage, NATIVE_GIT_ROOT_PARENT_OID, NO_PROGRESS_RECORD_PREFIX, NO_PROGRESS_TURNS_BEFORE_STOP, NeedsReviewFact, NeedsReviewReason, OperationAttribution, OperationVerbEntry, PROOF_CAPABILITY_MATRIX, PROOF_KINDS, PROOF_KINDS_V2, PROOF_MANIFEST_DOMAIN_V2, PROOF_PROTOCOL_VERSION, PROOF_PROTOCOL_VERSION_V2, PROTOCOL_V3_NOTICE, PROTOCOL_V4_NOTICE, PROTOCOL_V5_NOTICE, PROTOCOL_V6_NOTICE, ParsedConfirmation, ParsedHostVersion, ParsedShell, PersistenceAuthorization, ProcessExitStatus, ProcessFactSource, ProcessOutcomeReason, ProofHostSurface, ProofKind, ProofKindCapability, ProofKindV2, ProofManifest, ProofManifestV2, ProofObligation, ProofObligationV2, ProofSurface, ProposeOutcome, QualificationReason, QualificationStatus, RC020_RC1_HOST_PACKAGES, RC020_RC2_HOST_PACKAGES, RC021_RC2_HOST_PACKAGES, RC021_RC3_HOST_PACKAGES, RebindArgs, RebindProposal, RecoveryCause, RecoveryOptions, RejectedBinding, RemovalOutcomeReport, Repairability, SEMANTIC_ACTIONS, SESSION_API_UNSUPPORTED, SESSION_EVENT_ENVELOPE_INVALID, STATEFUL_ACTIONS, STOP_PROTOCOL_VERSION, STOP_PROTOCOL_VERSION_V2, SUPPORTED_EVIDENCE_ADAPTERS, SUPPORTED_HOST_RANGE, SUPPORTED_HOST_VERSIONS, ScopeInterpretation, SemanticAction, SessionActivationBinding, SessionActivationRead, SessionApiError, SessionBirthIdentity, SessionQuery, SessionQueryV2, ShellParseStatus, SourceSpan, StatefulAction, TargetCaptureReasonCode, TargetCaptureStatus, TargetHostGraph, TargetSource, TargetSourceKind, TargetTuple, TargetValue, TaskIntent, TaskKind, ToolCallInput, ToolResultInput, ToolSubject, TurnStoppingDecision, UnifiedItemDiagnosis, UserInteractionKind, V4SessionLike, V6_ORDINARY_COMPLETION_RULE, V6_ORDINARY_COMPLETION_RULE_COMPACT, V6_ORDINARY_COMPLETION_RULE_SHORT, VerificationContract, WaitAuthorization, WorkUnit, __activationBindingInternals, acquireHostTrust, actionCompatible, actionHasCertificationPath, actionVerbMatches, activationBindingPath, activationCanonical, activationDigest, activationJson, activationSelectionPending, activeRendererModule, admissibleForRemoval, adoptActivationReceipt, apply, applyUpgradeEligibility, assessmentAction, assessmentOutcomePredicate, auditDesktopInstalledImplementation, auditedDefaultWorkdirHost, auditedDefaultWorkdirProvider, auditedForegroundRenderers, auditedHostImplementation, authorityCaptureCounts, availableBoundaryQualifications, bindExecutableIdentity, bindLiveGoalCapability, bindProofToProjection, bindProofV2ToProjection, bindingIndividuallyAccepted, bindingSatisfies, boundedArtifactChoiceMatches, canonicalArgvFromCommand, canonicalProjection, canonicalizePath, capabilityConsequence, capabilityFactOf, capabilityRemedyPhrase, captureClause, captureItem, carriesCleanupCondition, certifyCheckpoint, claimedBatchHasRealRootInput, clarifiedSpanOf, classifyClause, classifyCompletionClaim, classifyTaskIntent, classifyUserInteraction, clauseAsksOwnQuestion, clauseIsGoverned, clauseIsProtected, cleanupConditionFor, closingHint, combineHostPolicy, commitIndexSnapshotDigest, commitTreeSnapshotDigest, compareHostVersions, confirmRebind, createActivationMigrationReceipt, createActivationSelection, createGitPrestateEnvelope, createProjection, createProofManifest, createProofManifestV2, currentActionBases, currentContractDigest, decideTurnBoundary, decideTurnStopping, decisionBoundaryKey, deriveItemDiagnosis, deriveProjection, digestStrings, effectuateBoundary, environmentDefaultRepositoryTarget, evaluateActiveHostLock, evaluateConfiguredHostLock, evaluateExternalWaitCapability, evaluateGraphDerivedHostLock, evaluateHostCapability, evaluateHostLock, evaluateMinimumHostVersion, evaluateToolSurfaceCapability, evidenceAvailabilityReason, evidenceCoverage, evidenceFromPersistedToolResult, evidenceMatchesItem, executeRevalidatedGitEffect, explanationHasActionResidue, extractArtifactPaths, extractMethod, extractOperation, extractTextContent, extractToolSubject, firstStepGuidance, firstStepGuidanceV6, gitCommandMatchesTarget, goalCompletionDenial, governedClauseRestrictsExecution, hasCurrentCertificate, hasDesktopImporterState, hasOrderedCoordination, hasQuestionScope, hasWorkPredicate, hostLockContextFromComposedDump, hostLockRowsFromComposedDump, hostTrustDigest, hostVersionFromPackages, inject, injectActiveProfileHostLock, inspectActivationInventory, inspectDesktopTargetGraph, inspectTargetHostGraph, interpretClause, interpretMessage, introducesActionClause, isCurrentAcceptedBoundary, isDeterministicCheck, isExecutableItem, isExplanationScope, isFrozenV042RebindResponse, isInformationalFragment, isInformationalMessage, isOpenObligation, isQuestionScopeNeedingReview, isRestatement, isRootPauseRequest, isRunExecutable, isSelectedActivationReceipt, isStatefulAction, isVerifyingCapability, isWholeTaskCompletionClaim, itemDiagnosis, itemHoldsExecutionAuthority, kindOfScope, latestAssistantText, latestRootInstruction, legacyQuestionReadingIsInformational, legacyRecordsNeedingReview, lifecyclePhase, maskCodeSpans, maskQuotedSpans, memoizedAsarFile, memoizedAsarIndex, name, namedActions, nativeFileTwoRole, nativeGitParentOidVerified, normalizeClause, observeAssistantOutcome, openItems, opensConditionLead, opensWithDirective, packageRowsFromActiveGraph, packageRowsFromPnpmLock, parseConfirmationMessage, parseGitCommandManifest, parseHostTrust, parseHostVersion, parsePwshCommand, parseShellCommand, partialFailureOf, persistedToolResultStatus, prepareActivationMigration, prepareActiveHostTrust, prepareDesktopHostTrust, prepareSelectedActivationMigration, prepareTargetHostTrust, presentExplanationHead, previewFirstStepInjection, privateStorageToolDenial, progressFingerprint, projectCoreV2, projectSessionCoreV2, proofCapabilityReport, proofDigest, proofDigestV2, proofEvidenceConstraints, proofHostSurfacesOf, proofOperationMatches, proofV2Rejection, proposeRebind, proposeRebindOutcome, proposeRebindV042, qualificationOfClause, qualifyBoundary, qualifyHostTrust, questionHeadsClause, readActivationBinding, readActivationMigrationReceipt, readActiveHostGraph, readAsarFile, readAsarIndex, readDesktopAppRuntime, readDesktopDependency, readDesktopTargetGraph, rebindAttemptKey, rebindResponse, recoveryDigest, recoveryTitle, registryArchiveFiles, registryArchiveModules, relevantEvidence, removalIsComplete, removalIsPartiallyKnown, renderRecoveryPacket, replayRawV2, replayRebindResult, reportingHeadGoverns, requestedIdentityKey, requestedTargetAuthorizesMutation, requestedTargetMatchesResolved, requiredSubjectsOf, resolveActivationBindingsRoot, resolveActiveProfileHostLock, resolveDesktopProfileHostLock, resolveInstalledHostLock, resolveSessionActivation, restatedContentOf, revalidateDesktopCoreLock, revalidateGitPrestate, rootLocatorFlavor, sanitizeClauseText, sanitizeUrl, satisfiesSupportedHostRange, scanActivationInventory, scopeCoverageDigest, segmentAuthorityBlocks, segmentClauses, selectHostCohort, selectedActivationInventory, semanticActionFromCommand, semanticActionFromText, semanticActionOfScope, sessionBirthIdentity, sessionQuery, sessionQueryV2, sha256, shellReadbackOutcome, snapshotSessionEvents, splitTextFragments, statefulActionsOfScope, stripUrlCredentials, supersedeItem, testOutcomePredicate, v6CurrentRootBoundaries, v6TestPredicate, validateActionManifest, validateActionTarget, validateActivationBinding, validateActivationInventorySnapshot, validateActivationMigrationReceipt, validateActivationSelection, validateManifest, validateProofManifest, validateProofManifestV2, verbIsNegated, verifiedLinearCommitReadback, verifyComposedHostLockDump, verifyMigrationInventory, verifySelectedMigrationInventory, withDurability, writeActivationBinding, writeDesktopRuntimeReceipt };