Apply actual Step JSON to a host-admitted PM document using the maintained owner.

Execute the same maintained steps from a host-admitted canonical AST, preserving its envelope.

Derive exact relocation-copy and human selectors from maintained StepMaps and trusted identity snapshots.

Checkpoint the actual maintained owner after trusted chronological command replay. The host owns scoped checkpoint persistence, coverage and immutable receipt authentication. No raw update archive is returned.

Stateless classification after the host authenticates current original receipts, scope and complete proof. Inputs and results are not credentials.

Fold authenticated current references for only the requested candidate identities; tombstoned ancestors remain exact evidence.

Imports retained inert HTML through the maintained DOM and canonical editor grammar.

Map independently authenticated human archive candidates through recomputed structural recovery regions.

Partition recomputed imported destinations using separately authenticated human/generated subsets. Unproven remainder is unknown; inputs confer no authority.

Allocate colliding imported Anchor names as actual maintained Steps while retaining all target destinations. No donor authority is issued.

Plan original-ordinal imported heading/link repairs as actual maintained Steps. No donor or receipt authority is issued.

Read-only dependency planning across an authenticated complete actor/owner cut. The host authenticates original reviewed associations and the whole checkpoint sidecar; the plan grants no source or erasure authority.

Verifies or derives a finite physical/history cut through the maintained owner.

Supply exactly the conversion update/destination state pair, or writer_client alone. The writer must be a fresh uint32 absent from the complete original client roster; null is allowed only for a proved zero-effect transform. Original basis, receipts and owner/cohort requirements are unchanged. Derivation adds the independently verified conversion_update_base64 to the existing result.

Reviewed cohorts use the same privately recognized aggregate/per-field input and exact Video/Slot plans; the Video array may be empty. Internal conditional field/option relations affect capability closure only, never typed ancestry. Option predecessors validate placement without becoming capability sources.

The host authenticates the complete original inventory and consumes the actual state and manager result. No receipt, source authority, installation permission or live historical codec fallback is supplied. Prior physical-cut/terminal continuity and actual host installation require separate qualification.

Plan one exact authored-text replacement as maintained Steps over canonical rich AST.

Recheck target-only regional allocations for an already authenticated original issued association. The host owns receipt/scope/archive authority and must independently prove complete mutation correspondence.

Prove complete-block reviewed append regions against exact archived structure and actual fresh allocations. The host still authenticates archive hashes, target guard, donor ancestry and complete mutation correspondence.

Prepare exact causal text/copy evidence. The result is not final mutation or history admission.

Produce one actual DOM-free maintained command from host-admitted retained state and trusted server command/manager identities. The host still authorizes and independently admits the original returned update.

Plan a complete canonical authored target through the same maintained command producer.

Produce one actual maintained undo/redo from host-authenticated original owner receipts or checkpoint.

Replay actual maintained PM/Yjs command and compare its complete original mutation footprint. Optional private accepted-owner receipts reconstruct the same maintained UndoManager for inverse correspondence. Hosts still authorize source, scope, receipt membership and accepted undo/redo cycles.

Resolve validated current visible source ranges in document order.

Retire authenticated complete owned groups through the actual reconstructed manager and capture its surviving checkpoint. Source classification and erasure authority remain with the host.

Read original finite archive candidate windows; the host authenticates the file and every source claim.

Resolve only reviewed imported archive candidates; this issues no human or donor authority.

Exact maintained interpreter bytes used to qualify finite conversion receipts.

Read current visible selector windows; no authorship or command admission is inferred.

Start an isolated reusable runtime; the host must stop it when its owner exits.

Subtract authenticated erasure summary intervals from one bounded candidate selector. No admission or ancestry authority is granted.