agent-transport-system 0.7.97 → 0.7.99

package/dist/ats.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { C as updateConfiguredSkillsConfig, S as updateConfiguredOnboardingConfig, _ as getRuntimeConfigReadHealth, a as resolveBaseUrl, b as setConfiguredSkillsConfig, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredViewCustomization, h as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, p as getConfiguredDeviceRuntimeState, r as normalizeGatewayBaseUrl, s as resolveDefaultGatewayBaseUrl, u as alignRuntimeConfigStorage, v as resolveRuntimeSkillsCustomTargetId, w as updateConfiguredStartV1OnboardingState, x as updateConfiguredDeviceRuntimeState, y as setConfiguredBaseUrl } from "./base-url-SXaImoj4.js";
-import { $ as getSpaceStatusResponseSchema, $n as daemonServiceLaneSchema, $t as spaceMemberDirectorySchema, A as deleteSpaceResponseSchema, An as MAX_SIGNAL_REPLY_TO_PREVIEW_LENGTH, Ar as runtimeTransportDispatchPreviewRequestSchema, At as postSpaceThreadSignalResponseSchema, B as getAgentExecutionReadinessBatchBodySchema, Bn as atsSpaceEgressActionSchema, Br as runtimeTransportRouteCatalogChangedFramePayloadSchema, Bt as setCurrentLocalAgentEnabledBodySchema, C as createSpaceThreadBodySchema, Cn as DISPATCH_ACTIVITY_DISPATCHING_PURPOSE, Ct as patchSpaceContractBodySchema, D as daemonRouteCatalogCacheSchema, Dn as LOCAL_COMPONENTS_SCHEMA_VERSION, Dr as runtimeTransportDeliveryExecutionIdentitySchema, Dt as postSpaceMembersBodySchema, E as currentLocalRuntimeReplyReadinessResponseSchema, En as LEGACY_RUNTIME_DISPATCH_POLICY, Er as runtimeTransportDeliverDispatchRequestSchema, Et as postNormalMessageResponseSchema, F as forgetComputerResponseSchema, Fn as SPACE_MEMBER_REMOVE_NOTICE_PURPOSE, Fr as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, Ft as projectSpaceDispatchTraceFinalVisibleOutcome, G as getLocalRuntimeExpectedRoutesResponseSchema, Gn as atsdTaskResultPayloadSchema, Gt as setupPlanAgentViewPayloadSchema, H as getAgentExecutionReadinessResponseSchema, Hn as atsdControlPlaneResponseSchema, Hr as sanitizeSignalTextPreview, Ht as setLocalRuntimeDisplayNameBodySchema, I as forgetCurrentComputerResponseSchema, In as SPACE_MENTION_REJECT_NOTICE_PURPOSE, Ir as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, It as refreshCurrentLocalAgentCatalogResponseSchema, J as getPrepareReadinessResponseSchema, Jn as canonicalizeAgentControllerRef, Jt as spaceBootstrapResponseSchema, K as getModelCatalogResponseSchema, Kn as buildAgentControllerConversationRef, Kt as signalEnvelopeSchema, L as gatewayErrorCodeSchema, Ln as SPACE_PASSWORD_MIN_LENGTH, Lr as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, Lt as removeSpaceMembersResponseSchema, M as ensureAgentProfilePrimaryBindingBodySchema, Mn as MESSAGE_MENTION_TYPE_VALUES, Mr as runtimeTransportHeartbeatRequestSchema, Mt as prepareSessionStreamServerFrameSchema, N as ensureAgentProfilePrimaryBindingResponseSchema, Nn as RUNTIME_TRANSPORT_SCHEMA_VERSION, Nr as runtimeTransportHeartbeatResponseSchema, Nt as prepareSetupBootstrapWriteSchema, O as daemonRouteObservationResponseSchema, On as MAX_PROFILE_ID_LENGTH, Or as runtimeTransportDispatchLifecycleRequestSchema, Ot as postSpaceMembersResponseSchema, P as entryBriefSchema, Pn as SPACE_MEMBER_JOIN_NOTICE_PURPOSE, Pr as runtimeTransportLocalAgentControlCancelFramePayloadSchema, Pt as projectObservabilityWakeCorrelation, Q as getSpaceMessageDetailsResponseSchema, Qn as daemonServiceContractSchema, Qt as spaceMemberDirectoryEntrySchema, R as gatewayErrorEnvelopeSchema, Rn as SPACE_UPDATES_MAX_LIMIT, Rr as runtimeTransportRegisterSessionRequestSchema, Rt as resolveSpaceDispatchTraceRootCause, S as createSpaceResponseSchema, Sn as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, Sr as resolveSpaceMentionLabels, St as patchProfileSpaceHistoryStatusResponseSchema, T as currentDeviceTargetResponseSchema, Tn as DISPATCH_ACTIVITY_RETRYING_PURPOSE, Tr as runtimeCoordinatorExecutionTokenEnvelopeSchema, Tt as postNormalMessageBodySchema, U as getAgentProfilePrimaryBindingResponseSchema, Un as atsdTaskResultEnvelopeWriteSchema, Ut as setSpaceAccessModeBodySchema, V as getAgentExecutionReadinessBatchResponseSchema, Vn as atsdControlPlaneRequestSchema, Vr as runtimeTransportSubmitTaskResultRequestSchema, Vt as setCurrentLocalAgentEnabledResponseSchema, W as getLocalRuntimeExpectedRoutesQuerySchema, Wn as atsdTaskResultOpenClawGatewayVisibilityStatusSchema, Wt as setupPlanAgentViewEventSchema, X as getSpaceDispatchLookupResponseSchema, Xn as collectCanonicalMentionTextFragments, Xt as spaceDispatchTraceResponseSchema, Y as getSpaceContractResponseSchema, Yn as canonicalizeBuiltinAgentControllerRef, Yt as spaceCreatorSchema, Z as getSpaceDispatchResultResponseSchema, Zn as conversationExecutionStateSchema, Zt as spaceIdentityDirectorySchema, _ as cliJsonOutputEnvelopeSchema, _n as AGENT_REPLY_PREVIEW_END_PURPOSE, _r as profileWorkspaceModeSchema, _t as normalizeSpaceCursorPatch, a as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_VERSION, an as submitRuntimeAgentControllerReportsResponseSchema, ar as formatLocalSetupActionLabel, at as leaveSpaceResponseSchema, b as createSpaceDiagnosticReportBodySchema, bn as ATSD_TASK_RESULT_SCHEMA_VERSION, br as resolveMessageEnvelopeTargetField, bt as notifyAgentProfilesRouteCatalogChangedBodySchema, c as SETUP_PLAN_AGENT_VIEW_CODE, cn as submitRuntimeRegistrationBodySchema, cr as normalizeBuiltinAgentControllerId, ct as listSpaceThreadSignalsResponseSchema, d as accountSpaceIndexResponseSchema, dn as updateAgentProfilePrimaryBindingModelSelectionBodySchema, dr as normalizeOptionalWorkingDirectory, dt as localRuntimeEnrollmentBodySchema, en as spaceMembersSnapshotSchema, er as daemonStreamFrameSchema, et as getSpaceThreadResponseSchema, f as agentControllerPermissionModeSchema, fn as upsertProfileSpaceHistoryResponseSchema, fr as normalizeSpacePasswordText, ft as localRuntimeEnrollmentResponseSchema, g as catchupResponseSchema, gn as AGENT_REPLYING_PURPOSE, gr as postSpaceWakeStopResponseSchema, gt as normalizeListSignalsReadQuerySemantics, h as atsRequestContextSchema, hn as AGENT_REPLYING_END_PURPOSE, hr as postSpaceWakeStopBodySchema, ht as modelCatalogSchema, i as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, in as submitRuntimeAgentControllerReportsBodySchema, ir as formatLocalSetupActionDescription, it as incomingServerMessageSchema, j as dispatchBriefSchema, jn as MAX_VISITED_PROFILE_IDS, jr as runtimeTransportDispatchRuntimeEvidenceRequestSchema, jt as prepareSessionResponseSchema, k as daemonRuntimeLeaseSchema, kn as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, kr as runtimeTransportDispatchPreviewEndRequestSchema, kt as postSpaceThreadSignalBodySchema, l as SETUP_PLAN_AGENT_VIEW_SCHEMA_VERSION, ln as submitRuntimeRegistrationResponseSchema, lr as normalizeKnownBuiltinAgentControllerId, lt as listSpaceThreadsResponseSchema, m as agentProfileBindingRouteParamsSchema, mn as writeCurrentDeviceObservedMetadataResponseSchema, mr as parseOptionalClientMessageId, mt as localRuntimesResponseSchema, n as resolveBuiltinAgentControllerBrand, nn as spaceViewerMembershipResponseSchema, nr as formatLocalComponentsSummaryDescription, nt as getSpaceWakeProgressResponseSchema, o as PREPARE_SESSION_STREAM_PROTOCOL_VERSION, on as submitRuntimeProviderConversationProofsBodySchema, or as getSpaceMessageAddressingRelationSupportForTargetKind, ot as listProfileSpaceHistoryResponseSchema, p as agentExecutionReadinessRouteParamsSchema, pn as writeCurrentDeviceObservedMetadataBodySchema, pr as parseAgentControllerRef$1, pt as localRuntimesQuerySchema, q as getPrepareReadinessQuerySchema, qn as buildAgentControllerRoutingKey, qt as spaceAccessModeStateSchema, r as resolveMappedPublicAgentFailureReason, rn as structuredGuidePayloadFromInputSchema, rr as formatLocalComponentsSummaryLabel, rt as getSpaceWakeTraceWaterfallResponseSchema, s as PREPARE_STEP_DIAGNOSTICS_MAX_CHARS, sn as submitRuntimeProviderConversationProofsResponseSchema, sr as installedLocalComponentsSnapshotSchema, st as listSpaceThreadEventsResponseSchema, t as CODEX_UPGRADE_REQUIRED_REASON, tn as spaceMetaSchema, tr as formatCanonicalMentionLiteral, tt as getSpaceUpdatesResponseSchema, u as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, un as updateAgentProfilePrimaryBindingAgentControllerPermissionModeBodySchema, ur as normalizeMessageEnvelope, ut as localAgentCatalogSchema, v as continuitySchema, vn as AGENT_REPLY_PREVIEW_PURPOSE, vr as providerDispatchRuntimeContextSchema, vt as notifyAgentProfileRouteCatalogChangedBodySchema, w as createSpaceThreadResponseSchema, wn as DISPATCH_ACTIVITY_FAILED_PURPOSE, wt as patchSpaceContractResponseSchema, x as createSpaceDiagnosticReportResponseSchema, xn as CONVERSATION_CONTINUITY_WARNING_PURPOSE, xr as resolveSingleSpaceMentionLabels, xt as observabilityWakeTraceSelectorSchema, y as createSpaceBodySchema, yn as ATSD_CONTROL_PLANE_SCHEMA_VERSION, yr as resolveBuiltinAgentControllerConversationKind, yt as notifyAgentProfileRouteCatalogChangedResponseSchema, z as getActiveSpaceWakeProgressResponseSchema, zn as atsRuntimeProfileIdSchema, zr as runtimeTransportRegisterSessionResponseSchema, zt as serverErrorFrameSchema } from "./dist-CyQTYZTj.js";
+import { C as updateConfiguredSkillsConfig, S as updateConfiguredOnboardingConfig, _ as getRuntimeConfigReadHealth, a as resolveBaseUrl, b as setConfiguredSkillsConfig, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredViewCustomization, h as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, p as getConfiguredDeviceRuntimeState, r as normalizeGatewayBaseUrl, s as resolveDefaultGatewayBaseUrl, u as alignRuntimeConfigStorage, v as resolveRuntimeSkillsCustomTargetId, w as updateConfiguredStartV1OnboardingState, x as updateConfiguredDeviceRuntimeState, y as setConfiguredBaseUrl } from "./base-url-CiDhrDeP.js";
+import { $ as getSpaceStatusResponseSchema, $n as canonicalizeBuiltinAgentControllerRef, $t as spaceCreatorSchema, A as deleteSpaceResponseSchema, An as LEGACY_RUNTIME_DISPATCH_POLICY, Ar as runtimeTransportDeliverDispatchRequestSchema, At as postSpaceThreadSignalResponseSchema, B as getAgentExecutionReadinessBatchBodySchema, Bn as SPACE_MENTION_REJECT_NOTICE_PURPOSE, Br as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Bt as refreshCurrentLocalAgentCatalogResponseSchema, C as createSpaceThreadBodySchema, Cn as ATSD_CONTROL_PLANE_SCHEMA_VERSION, Cr as resolveBuiltinAgentControllerConversationKind, Ct as patchSpaceContractBodySchema, D as daemonRouteCatalogCacheSchema, Dn as DISPATCH_ACTIVITY_DISPATCHING_PURPOSE, Dt as postSpaceMembersBodySchema, E as currentLocalRuntimeReplyReadinessResponseSchema, En as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, Er as resolveSpaceMentionLabels, Et as postNormalMessageResponseSchema, F as forgetComputerResponseSchema, Fn as MAX_VISITED_PROFILE_IDS, Fr as runtimeTransportDispatchRuntimeEvidenceRequestSchema, Ft as projectObservabilityWakeCorrelation, G as getLocalRuntimeExpectedRoutesResponseSchema, Gn as atsdControlPlaneRequestSchema, Gr as runtimeTransportSubmitTaskResultRequestSchema, Gt as setCurrentLocalAgentEnabledResponseSchema, H as getAgentExecutionReadinessResponseSchema, Hn as SPACE_UPDATES_MAX_LIMIT, Hr as runtimeTransportRegisterSessionRequestSchema, Ht as resolveSpaceDispatchTraceRootCause, I as forgetCurrentComputerResponseSchema, In as MESSAGE_MENTION_TYPE_VALUES, Ir as runtimeTransportHeartbeatRequestSchema, It as projectSpaceDispatchTraceFinalVisibleOutcome, J as getPrepareReadinessResponseSchema, Jn as atsdTaskResultOpenClawGatewayVisibilityStatusSchema, Jt as setupPlanAgentViewEventSchema, K as getModelCatalogResponseSchema, Kn as atsdControlPlaneResponseSchema, Kr as sanitizeSignalTextPreview, Kt as setLocalRuntimeDisplayNameBodySchema, L as gatewayErrorCodeSchema, Ln as RUNTIME_TRANSPORT_SCHEMA_VERSION, Lr as runtimeTransportHeartbeatResponseSchema, Lt as redactPrepareStepDiagnosticsBundle, M as ensureAgentProfilePrimaryBindingBodySchema, Mn as MAX_PROFILE_ID_LENGTH, Mr as runtimeTransportDispatchLifecycleRequestSchema, Mt as prepareSessionStreamServerFrameSchema, N as ensureAgentProfilePrimaryBindingResponseSchema, Nn as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, Nr as runtimeTransportDispatchPreviewEndRequestSchema, Nt as prepareSetupBootstrapWriteSchema, O as daemonRouteObservationResponseSchema, On as DISPATCH_ACTIVITY_FAILED_PURPOSE, Ot as postSpaceMembersResponseSchema, P as entryBriefSchema, Pn as MAX_SIGNAL_REPLY_TO_PREVIEW_LENGTH, Pr as runtimeTransportDispatchPreviewRequestSchema, Pt as prepareStepDiagnosticsBundleSchema, Q as getSpaceMessageDetailsResponseSchema, Qn as canonicalizeAgentControllerRef, Qt as spaceBootstrapResponseSchema, R as gatewayErrorEnvelopeSchema, Rn as SPACE_MEMBER_JOIN_NOTICE_PURPOSE, Rr as runtimeTransportLocalAgentControlCancelFramePayloadSchema, Rt as redactPrepareStepDiagnosticsText, S as createSpaceResponseSchema, Sn as AGENT_REPLY_PREVIEW_PURPOSE, Sr as providerDispatchRuntimeContextSchema, St as patchProfileSpaceHistoryStatusResponseSchema, T as currentDeviceTargetResponseSchema, Tn as CONVERSATION_CONTINUITY_WARNING_PURPOSE, Tr as resolveSingleSpaceMentionLabels, Tt as postNormalMessageBodySchema, U as getAgentProfilePrimaryBindingResponseSchema, Un as atsRuntimeProfileIdSchema, Ur as runtimeTransportRegisterSessionResponseSchema, Ut as serverErrorFrameSchema, V as getAgentExecutionReadinessBatchResponseSchema, Vn as SPACE_PASSWORD_MIN_LENGTH, Vr as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, Vt as removeSpaceMembersResponseSchema, W as getLocalRuntimeExpectedRoutesQuerySchema, Wn as atsSpaceEgressActionSchema, Wr as runtimeTransportRouteCatalogChangedFramePayloadSchema, Wt as setCurrentLocalAgentEnabledBodySchema, X as getSpaceDispatchLookupResponseSchema, Xn as buildAgentControllerConversationRef, Xt as signalEnvelopeSchema, Y as getSpaceContractResponseSchema, Yn as atsdTaskResultPayloadSchema, Yt as setupPlanAgentViewPayloadSchema, Z as getSpaceDispatchResultResponseSchema, Zn as buildAgentControllerRoutingKey, Zt as spaceAccessModeStateSchema, _ as cliJsonOutputEnvelopeSchema, _n as writeCurrentDeviceObservedMetadataBodySchema, _r as parseAgentControllerRef$1, _t as normalizeSpaceCursorPatch, a as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_VERSION, an as spaceMetaSchema, ar as formatCanonicalMentionLiteral, at as leaveSpaceResponseSchema, b as createSpaceDiagnosticReportBodySchema, bn as AGENT_REPLYING_PURPOSE, br as postSpaceWakeStopResponseSchema, bt as notifyAgentProfilesRouteCatalogChangedBodySchema, c as SETUP_PLAN_AGENT_VIEW_CODE, cn as submitRuntimeAgentControllerReportsBodySchema, cr as formatLocalSetupActionDescription, ct as listSpaceThreadSignalsResponseSchema, d as accountSpaceIndexResponseSchema, dn as submitRuntimeProviderConversationProofsResponseSchema, dr as installedLocalComponentsSnapshotSchema, dt as localRuntimeEnrollmentBodySchema, en as spaceDispatchTraceResponseSchema, er as collectCanonicalMentionTextFragments, et as getSpaceThreadResponseSchema, f as agentControllerPermissionModeSchema, fn as submitRuntimeRegistrationBodySchema, fr as normalizeBuiltinAgentControllerId, ft as localRuntimeEnrollmentResponseSchema, g as catchupResponseSchema, gn as upsertProfileSpaceHistoryResponseSchema, gr as normalizeSpacePasswordText, gt as normalizeListSignalsReadQuerySemantics, h as atsRequestContextSchema, hn as updateAgentProfilePrimaryBindingModelSelectionBodySchema, hr as normalizeOptionalWorkingDirectory, ht as modelCatalogSchema, i as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, in as spaceMembersSnapshotSchema, ir as daemonStreamFrameSchema, it as incomingServerMessageSchema, j as dispatchBriefSchema, jn as LOCAL_COMPONENTS_SCHEMA_VERSION, jr as runtimeTransportDeliveryExecutionIdentitySchema, jt as prepareSessionResponseSchema, k as daemonRuntimeLeaseSchema, kn as DISPATCH_ACTIVITY_RETRYING_PURPOSE, kr as runtimeCoordinatorExecutionTokenEnvelopeSchema, kt as postSpaceThreadSignalBodySchema, l as SETUP_PLAN_AGENT_VIEW_SCHEMA_VERSION, ln as submitRuntimeAgentControllerReportsResponseSchema, lr as formatLocalSetupActionLabel, lt as listSpaceThreadsResponseSchema, m as agentProfileBindingRouteParamsSchema, mn as updateAgentProfilePrimaryBindingAgentControllerPermissionModeBodySchema, mr as normalizeMessageEnvelope, mt as localRuntimesResponseSchema, n as resolveBuiltinAgentControllerBrand, nn as spaceMemberDirectoryEntrySchema, nr as daemonServiceContractSchema, nt as getSpaceWakeProgressResponseSchema, o as PREPARE_SESSION_STREAM_PROTOCOL_VERSION, on as spaceViewerMembershipResponseSchema, or as formatLocalComponentsSummaryDescription, ot as listProfileSpaceHistoryResponseSchema, p as agentExecutionReadinessRouteParamsSchema, pn as submitRuntimeRegistrationResponseSchema, pr as normalizeKnownBuiltinAgentControllerId, pt as localRuntimesQuerySchema, q as getPrepareReadinessQuerySchema, qn as atsdTaskResultEnvelopeWriteSchema, qt as setSpaceAccessModeBodySchema, r as resolveMappedPublicAgentFailureReason, rn as spaceMemberDirectorySchema, rr as daemonServiceLaneSchema, rt as getSpaceWakeTraceWaterfallResponseSchema, s as PREPARE_STEP_DIAGNOSTICS_MAX_CHARS, sn as structuredGuidePayloadFromInputSchema, sr as formatLocalComponentsSummaryLabel, st as listSpaceThreadEventsResponseSchema, t as CODEX_UPGRADE_REQUIRED_REASON, tn as spaceIdentityDirectorySchema, tr as conversationExecutionStateSchema, tt as getSpaceUpdatesResponseSchema, u as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, un as submitRuntimeProviderConversationProofsBodySchema, ur as getSpaceMessageAddressingRelationSupportForTargetKind, ut as localAgentCatalogSchema, v as continuitySchema, vn as writeCurrentDeviceObservedMetadataResponseSchema, vr as parseOptionalClientMessageId, vt as notifyAgentProfileRouteCatalogChangedBodySchema, w as createSpaceThreadResponseSchema, wn as ATSD_TASK_RESULT_SCHEMA_VERSION, wr as resolveMessageEnvelopeTargetField, wt as patchSpaceContractResponseSchema, x as createSpaceDiagnosticReportResponseSchema, xn as AGENT_REPLY_PREVIEW_END_PURPOSE, xr as profileWorkspaceModeSchema, xt as observabilityWakeTraceSelectorSchema, y as createSpaceBodySchema, yn as AGENT_REPLYING_END_PURPOSE, yr as postSpaceWakeStopBodySchema, yt as notifyAgentProfileRouteCatalogChangedResponseSchema, z as getActiveSpaceWakeProgressResponseSchema, zn as SPACE_MEMBER_REMOVE_NOTICE_PURPOSE, zr as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, zt as redactPrepareStepDiagnosticsValue } from "./dist-DkHDSnUA.js";
 import { A as runtimeDir, C as normalizeAtsProfileId, D as resolveAtsEnvPreset, E as resolveAtsCliEntryNameFromArgv, F as systemDir, N as skillsDir, O as resolveAtsRootDir, P as spacesDir, S as normalizeAccountKey, T as profileViewPath, a as accountProfileWorkspacePath, c as atsRootDir, d as deviceOpenClawProfileBootstrapPath, f as deviceOpenClawProfileDir, i as accountProfileViewPath, j as runtimeLogsDir, k as resolveDefaultAtsHomeDirname, n as accountProfileLocalMetaPath, o as accountsDir, p as deviceOpenClawProfileWorkspaceDir, r as accountProfileSpaceCacheDir, s as atsBackupsDir, t as ATS_HOME_ENV_KEY, w as profileDir, y as legacyAccountProfileSpacesDir } from "./paths-DP4LBid2.js";
 import { a as runWithHeldLock, c as LEGACY_ATS_CLI_CONTEXT_ENV_KEY, d as resolveCliContext, f as resolveCliContextId, i as releaseLock, l as listCliContextStates, n as isAtsLockError, o as tryCleanupStaleLock, p as writeCliContextState, r as readLockMeta, s as ATS_CLI_CONTEXT_ENV_KEY, t as acquireLock, u as readCliContextState } from "./lock-CBIWEyt0.js";
 import { _ as toSpaceWsUrl, a as toSpaceCursorUrl, c as toSpaceDispatchTraceUrl, d as toSpaceMetaUrl, f as toSpacePasswordUrl, g as toSpaceUpdatesUrl, h as toSpaceSignalsUrl, i as toSpaceCreateUrl, l as toSpaceLeaveUrl, m as toSpaceResultUrl, n as toDaemonRouteObservationUrl, o as toSpaceDeleteUrl, p as toSpaceRemoveMembersUrl, r as toSpaceContractUrl, s as toSpaceDispatchLookupUrl, t as normalizeBaseUrl, u as toSpaceMembersUrl } from "./urls-B8ZoQgpS.js";
@@ -20,7 +20,7 @@ import { execFile, spawn } from "node:child_process";
 import { clearLine, createInterface, cursorTo, emitKeypressEvents, moveCursor } from "node:readline";
 import { Writable } from "node:stream";
 import stringWidth from "string-width";
-import { accessSync, appendFileSync, chmodSync, closeSync, constants, existsSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { accessSync, appendFileSync, chmodSync, closeSync, constants, existsSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { query } from "@anthropic-ai/claude-agent-sdk";
 import { createConnection, createServer } from "node:net";
 import { fileURLToPath } from "node:url";
@@ -32,7 +32,7 @@ import { ReadStream, WriteStream } from "node:tty";
 import { performance } from "node:perf_hooks";
 
 //#region package.json
-var version = "0.7.97";
+var version = "0.7.99";
 var package_default = {
 	$schema: "https://www.schemastore.org/package.json",
 	name: "agent-transport-system",
@@ -3898,15 +3898,15 @@ function parseLegacySelectionPayload(raw) {
 	try {
 		const payload = JSON.parse(raw);
 		if (payload.v !== 1) return null;
-		const sessionId = normalizeOptionalString$28(payload.sessionId);
-		const atsProfileId = normalizeOptionalString$28(payload.atsProfileId);
+		const sessionId = normalizeOptionalString$29(payload.sessionId);
+		const atsProfileId = normalizeOptionalString$29(payload.atsProfileId);
 		if (!(sessionId && atsProfileId)) return null;
 		return {
 			v: 1,
 			sessionId,
-			sessionSource: normalizeOptionalString$28(payload.sessionSource) ?? "manual",
+			sessionSource: normalizeOptionalString$29(payload.sessionSource) ?? "manual",
 			atsProfileId,
-			updatedAt: normalizeOptionalString$28(payload.updatedAt) ?? (/* @__PURE__ */ new Date(0)).toISOString()
+			updatedAt: normalizeOptionalString$29(payload.updatedAt) ?? (/* @__PURE__ */ new Date(0)).toISOString()
 		};
 	} catch {
 		return null;
@@ -3936,12 +3936,12 @@ function toSafeSessionFile(value) {
 	const maxBaseLength = Math.max(1, SESSION_FILE_MAX_LENGTH - SESSION_FILE_HASH_LENGTH - 1);
 	return `${safeBase.slice(0, maxBaseLength)}-${hash}`;
 }
-function normalizeOptionalString$28(value) {
+function normalizeOptionalString$29(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
 function normalizeRequiredString$1(value, field) {
-	const normalized = normalizeOptionalString$28(value);
+	const normalized = normalizeOptionalString$29(value);
 	if (!normalized) throw new Error(`${field} is required`);
 	return normalized;
 }
@@ -3967,13 +3967,13 @@ function resolveAtsAccountContext(input) {
 		key: normalizeAccountKey({}),
 		source: "fallback"
 	};
-	const normalizedBaseUrl = normalizeOptionalString$27(session.authBaseUrl);
+	const normalizedBaseUrl = normalizeOptionalString$28(session.authBaseUrl);
 	const hostKey = resolveHostKey(normalizedBaseUrl);
 	const user = normalizeUser(session.user);
 	const userKey = user?.id ?? user?.email ?? buildSessionScopedUserKey({
 		authBaseUrl: normalizedBaseUrl,
-		clientId: normalizeOptionalString$27(session.clientId),
-		createdAt: normalizeOptionalString$27(session.createdAt)
+		clientId: normalizeOptionalString$28(session.clientId),
+		createdAt: normalizeOptionalString$28(session.createdAt)
 	});
 	return {
 		key: normalizeAccountKey({
@@ -3986,7 +3986,7 @@ function resolveAtsAccountContext(input) {
 	};
 }
 async function resolveCurrentAtsAccountContext() {
-	const { getAuthSessionMetadata } = await import("./auth-session-DBnyC4LY.js");
+	const { getAuthSessionMetadata } = await import("./auth-session-DbA1IFeL.js");
 	return resolveAtsAccountContext({ session: await getAuthSessionMetadata().catch(() => null) });
 }
 function resolveHostKey(baseUrl) {
@@ -4009,9 +4009,9 @@ function buildSessionScopedUserKey(input) {
 function normalizeUser(value) {
 	if (!(value && typeof value === "object")) return null;
 	const record = value;
-	const id = normalizeOptionalString$27(record.id);
-	const email = normalizeOptionalString$27(record.email);
-	const name = normalizeOptionalString$27(record.name);
+	const id = normalizeOptionalString$28(record.id);
+	const email = normalizeOptionalString$28(record.email);
+	const name = normalizeOptionalString$28(record.name);
 	if (!(id || email || name)) return null;
 	return {
 		...id ? { id } : {},
@@ -4019,7 +4019,7 @@ function normalizeUser(value) {
 		...name ? { name } : {}
 	};
 }
-function normalizeOptionalString$27(value) {
+function normalizeOptionalString$28(value) {
 	if (typeof value !== "string") return null;
 	const normalized = value.trim();
 	return normalized.length > 0 ? normalized : null;
@@ -4131,9 +4131,9 @@ function createAuthenticationError(input) {
 	return new AtsAuthenticationError(resolveAuthenticationGuidance(input));
 }
 function resolveAuthenticationGuidance(input) {
-	const action = normalizeOptionalString$26(input.action);
-	const authBaseUrl = normalizeOptionalString$26(input.authBaseUrl);
-	const gatewayUrl = normalizeOptionalString$26(input.gatewayUrl);
+	const action = normalizeOptionalString$27(input.action);
+	const authBaseUrl = normalizeOptionalString$27(input.authBaseUrl);
+	const gatewayUrl = normalizeOptionalString$27(input.gatewayUrl);
 	if (input.reason === "mismatch") return {
 		reason: input.reason,
 		action,
@@ -4157,7 +4157,7 @@ function resolveAuthenticationGuidance(input) {
 	};
 }
 function buildCommandAuthenticationPromptMessage$1(action) {
-	const normalizedAction = normalizeOptionalString$26(action);
+	const normalizedAction = normalizeOptionalString$27(action);
 	if (!normalizedAction) return "Sign in is required to continue. What do you want to do?";
 	return `Sign in is required before ${normalizedAction}. What do you want to do?`;
 }
@@ -4246,7 +4246,7 @@ function resolveAuthenticationGuidanceFromMessage(message) {
 function extractAuthenticationPromptAction(promptMessage) {
 	const normalizedMessage = String(promptMessage ?? "").trim();
 	if (normalizedMessage.length === 0) return null;
-	return normalizeOptionalString$26(AUTH_PROMPT_ACTION_RE.exec(normalizedMessage)?.groups?.action);
+	return normalizeOptionalString$27(AUTH_PROMPT_ACTION_RE.exec(normalizedMessage)?.groups?.action);
 }
 function resolveRequiredAuthenticationGuidance(reason) {
 	switch (reason) {
@@ -4316,7 +4316,7 @@ function buildAgentAuthenticationNotes(guidance) {
 	if (guidance.gatewayUrl) notes.push(`Current gateway: ${guidance.gatewayUrl}`);
 	return notes;
 }
-function normalizeOptionalString$26(value) {
+function normalizeOptionalString$27(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -4386,7 +4386,7 @@ async function getDaemonRuntimeStatus(pathInput = {}) {
 		autoStart: state.autoStart,
 		reason: "invalid_pid"
 	};
-	if (!isPidAlive$5(state.pid)) return {
+	if (!isPidAlive$6(state.pid)) return {
 		status: "stale",
 		mode: state.mode,
 		pid: state.pid,
@@ -4437,7 +4437,7 @@ async function setDaemonServiceRuntimeState(state, pathInput = {}) {
 	await writeDaemonServiceRuntimeState(state, pathInput);
 }
 async function clearDaemonServiceRuntimeState(pathInput = {}) {
-	const { clearDaemonRuntimeLease } = await import("./daemon-runtime-lease-DzRz8pH5.js");
+	const { clearDaemonRuntimeLease } = await import("./daemon-runtime-lease-D1x-3a2_.js");
 	await Promise.all([rm(daemonServiceRuntimeStatePath(pathInput), { force: true }), clearDaemonRuntimeLease(pathInput)]);
 }
 async function withDaemonServiceRunLock(callback, meta = {
@@ -4624,7 +4624,7 @@ async function ensureDaemonControlPlaneToken(pathInput = {}) {
 async function readDaemonControlPlaneToken(pathInput = {}) {
 	return (await readDaemonTokenState(pathInput))?.token ?? null;
 }
-function isPidAlive$5(pid) {
+function isPidAlive$6(pid) {
 	try {
 		process.kill(pid, 0);
 		return true;
@@ -4932,6 +4932,7 @@ const DEFAULT_HEARTBEAT_INTERVAL_MS$1 = 25e3;
 const MIN_HEARTBEAT_INTERVAL_MS$2 = 5e3;
 const MAX_HEARTBEAT_INTERVAL_MS$2 = 6e4;
 const DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1 = 2e4;
+const DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1 = 1e4;
 const CATALOG_SYNC_RETRY_INTERVAL_MS$1 = 5e3;
 const CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1 = 1e3;
 const RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS$1 = 5 * 6e4;
@@ -5034,10 +5035,17 @@ async function storeAccessToken(input) {
 	throw new Error(`secure token storage is unavailable on platform "${process.platform}". Use ${INSECURE_FALLBACK_ENV_KEY}=1 only for local testing fallback.`);
 }
 async function readAccessToken(ref) {
-	if (ref.provider === "macos-keychain") return normalizeToken(await getMacOsKeychainToken(ref).catch(() => null));
-	if (ref.provider === "windows-dpapi") return normalizeToken(await getWindowsDpapiToken(ref).catch(() => null));
-	if (ref.provider === "insecure-file") return normalizeToken(await getInsecureFileToken(ref).catch(() => null));
-	return null;
+	try {
+		if (ref.provider === "macos-keychain") return toAccessTokenReadResult(await getMacOsKeychainToken(ref));
+		if (ref.provider === "windows-dpapi") return toAccessTokenReadResult(await getWindowsDpapiToken(ref));
+		if (ref.provider === "insecure-file") return toAccessTokenReadResult(await getInsecureFileToken(ref));
+		return { status: "missing" };
+	} catch (error) {
+		return {
+			errorMessage: toErrorMessage$44(error),
+			status: "unavailable"
+		};
+	}
 }
 async function deleteAccessToken(ref) {
 	if (ref.provider === "macos-keychain") {
@@ -5115,7 +5123,10 @@ async function setWindowsDpapiToken(input) {
 	});
 }
 async function getWindowsDpapiToken(input) {
-	const encrypted = await readFile(windowsDpapiTokenPath(input.key), "utf8").catch(() => null);
+	const encrypted = await readFile(windowsDpapiTokenPath(input.key), "utf8").catch((error) => {
+		if (isFileNotFoundError$4(error)) return null;
+		throw error;
+	});
 	if (!encrypted) return null;
 	return runPowerShellScript(WINDOWS_DPAPI_DECRYPT_SCRIPT, encrypted.trim(), input.key);
 }
@@ -5130,7 +5141,10 @@ async function setInsecureFileToken(input) {
 	});
 }
 async function getInsecureFileToken(input) {
-	const raw = await readFile(insecureTokenPath(input.key), "utf8").catch(() => null);
+	const raw = await readFile(insecureTokenPath(input.key), "utf8").catch((error) => {
+		if (isFileNotFoundError$4(error)) return null;
+		throw error;
+	});
 	return raw ? raw.trim() : null;
 }
 async function deleteInsecureFileToken(input) {
@@ -5271,10 +5285,21 @@ function normalizeToken(value) {
 	const normalized = value.trim();
 	return normalized.length > 0 ? normalized : null;
 }
+function toAccessTokenReadResult(value) {
+	const accessToken = normalizeToken(value);
+	if (!accessToken) return { status: "missing" };
+	return {
+		accessToken,
+		status: "found"
+	};
+}
 function toErrorMessage$44(error) {
 	if (error instanceof Error) return error.message;
 	return String(error);
 }
+function isFileNotFoundError$4(error) {
+	return Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
+}
 const WINDOWS_DPAPI_ENCRYPT_SCRIPT = [
 	"$ErrorActionPreference='Stop'",
 	"$rawInput = [Console]::In.ReadToEnd()",
@@ -5310,8 +5335,8 @@ async function getAuthSessionState(options = {}) {
 	const remoteState = await getRemoteAuthSessionState(localState.session);
 	if (remoteState === "valid") return localState;
 	if (remoteState === "unknown") return localState;
-	await clearAuthSession();
 	return {
+		reasonCode: resolveRemoteAuthSessionReasonCode(remoteState),
 		state: remoteState,
 		session: null
 	};
@@ -5360,9 +5385,9 @@ async function getAuthSession() {
 async function getAuthSessionMetadata() {
 	const payload = await readSessionPayload();
 	if (payload?.v !== 1) return null;
-	const authBaseUrl = normalizeOptionalString$25(payload.authBaseUrl);
-	const clientId = normalizeOptionalString$25(payload.clientId);
-	const createdAt = normalizeOptionalString$25(payload.createdAt);
+	const authBaseUrl = normalizeOptionalString$26(payload.authBaseUrl);
+	const clientId = normalizeOptionalString$26(payload.clientId);
+	const createdAt = normalizeOptionalString$26(payload.createdAt);
 	if (!(authBaseUrl && clientId && createdAt)) return null;
 	return {
 		authBaseUrl,
@@ -5381,39 +5406,40 @@ async function clearAuthSession() {
 async function getLocalAuthSessionState() {
 	const payload = await readSessionPayload();
 	if (payload?.v !== 1) return {
+		reasonCode: "session_missing",
 		state: "missing",
 		session: null
 	};
 	const tokenRef = normalizeTokenRef(payload.tokenRef);
-	if (!tokenRef) {
-		await clearCorruptSession(payload);
-		return {
-			state: "invalid",
-			session: null
-		};
-	}
-	const tokenType = normalizeOptionalString$25(payload.tokenType);
-	const authBaseUrl = normalizeOptionalString$25(payload.authBaseUrl);
-	const clientId = normalizeOptionalString$25(payload.clientId);
-	const createdAt = normalizeOptionalString$25(payload.createdAt);
-	if (!(tokenType && authBaseUrl && clientId && createdAt)) {
-		await clearCorruptSession(payload);
-		return {
-			state: "invalid",
-			session: null
-		};
-	}
-	const accessToken = await readAccessToken(tokenRef).catch(() => null);
-	if (!accessToken) {
-		await clearCorruptSession(payload);
-		return {
-			state: "invalid",
-			session: null
-		};
-	}
+	if (!tokenRef) return {
+		reasonCode: "session_token_ref_invalid",
+		state: "invalid",
+		session: null
+	};
+	const tokenType = normalizeOptionalString$26(payload.tokenType);
+	const authBaseUrl = normalizeOptionalString$26(payload.authBaseUrl);
+	const clientId = normalizeOptionalString$26(payload.clientId);
+	const createdAt = normalizeOptionalString$26(payload.createdAt);
+	if (!(tokenType && authBaseUrl && clientId && createdAt)) return {
+		reasonCode: "session_metadata_invalid",
+		state: "invalid",
+		session: null
+	};
+	const accessToken = await readAccessToken(tokenRef);
+	if (accessToken.status === "missing") return {
+		reasonCode: "session_token_missing",
+		state: "invalid",
+		session: null
+	};
+	if (accessToken.status === "unavailable") return {
+		errorMessage: accessToken.errorMessage,
+		reasonCode: "session_token_unavailable",
+		state: "invalid",
+		session: null
+	};
 	const session = {
 		v: 1,
-		accessToken,
+		accessToken: accessToken.accessToken,
 		tokenType,
 		authBaseUrl,
 		clientId,
@@ -5423,6 +5449,7 @@ async function getLocalAuthSessionState() {
 		...buildAuthUserPayload(payload.user)
 	};
 	if (isExpired(session.expiresAt)) return {
+		reasonCode: "session_expired",
 		state: "expired",
 		session
 	};
@@ -5481,10 +5508,15 @@ function isExpired(expiresAt) {
 	if (Number.isNaN(expiresAtMs)) return false;
 	return expiresAtMs <= Date.now();
 }
-async function clearCorruptSession(payload) {
-	const tokenRef = normalizeTokenRef(payload.tokenRef);
-	if (tokenRef) await deleteAccessToken(tokenRef).catch(() => void 0);
-	await removeSessionFileBestEffort();
+function resolveRemoteAuthSessionReasonCode(state) {
+	switch (state) {
+		case "invalid": return "remote_session_invalid";
+		case "revoked": return "remote_session_revoked";
+		default: {
+			const exhaustiveState = state;
+			throw new Error(`unsupported remote auth session state: ${exhaustiveState}`);
+		}
+	}
 }
 async function readSessionPayload() {
 	const raw = await readFile(authSessionPath(), "utf8").catch(() => null);
@@ -5517,9 +5549,9 @@ async function writeSessionPayloadAtomically(path, payload) {
 function buildAuthUserPayload(value) {
 	if (!(value && typeof value === "object")) return {};
 	const record = value;
-	const id = normalizeOptionalString$25(record.id);
-	const email = normalizeOptionalString$25(record.email);
-	const name = normalizeOptionalString$25(record.name);
+	const id = normalizeOptionalString$26(record.id);
+	const email = normalizeOptionalString$26(record.email);
+	const name = normalizeOptionalString$26(record.name);
 	if (!(id || email || name)) return {};
 	return { user: {
 		...id ? { id } : {},
@@ -5531,7 +5563,7 @@ function normalizeTokenType$2(value) {
 	const normalized = value.trim();
 	return normalized.length > 0 ? normalized : "Bearer";
 }
-function normalizeOptionalString$25(value) {
+function normalizeOptionalString$26(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -5580,7 +5612,7 @@ var AuthProfilesApiError = class extends Error {
 		this.name = "AuthProfilesApiError";
 		this.status = input.status;
 		this.endpoint = input.endpoint;
-		this.code = normalizeOptionalString$24(input.code);
+		this.code = normalizeOptionalString$25(input.code);
 	}
 };
 function isAuthProfilesApiError(error) {
@@ -5597,13 +5629,13 @@ async function resolveAtsProfile(input) {
 		method: "POST",
 		path: "/v1/profiles/resolve",
 		body: {
-			...normalizeOptionalString$24(input.atsProfileId) ? { atsProfileId: normalizeOptionalString$24(input.atsProfileId) } : {},
+			...normalizeOptionalString$25(input.atsProfileId) ? { atsProfileId: normalizeOptionalString$25(input.atsProfileId) } : {},
 			...input.profileKind ? { profileKind: input.profileKind } : {}
 		}
 	}), "profile"));
 }
 async function resolveAtsProfileByIdOrName(input) {
-	const profileIdentifier = normalizeOptionalString$24(input.profileIdentifier);
+	const profileIdentifier = normalizeOptionalString$25(input.profileIdentifier);
 	if (!profileIdentifier) throw new Error("profile identifier is required");
 	try {
 		return await resolveAtsProfile({
@@ -5622,8 +5654,8 @@ async function resolveAtsProfileByIdOrName(input) {
 	}
 }
 function createAtsAgentProfile(input) {
-	const profileName = normalizeOptionalString$24(input.profileName);
-	const creatorProfileId = normalizeOptionalString$24(input.creatorProfileId) ?? void 0;
+	const profileName = normalizeOptionalString$25(input.profileName);
+	const creatorProfileId = normalizeOptionalString$25(input.creatorProfileId) ?? void 0;
 	if (!profileName) throw new Error("profile name is required");
 	return createAtsAgentProfileRequest({
 		profileName,
@@ -5631,8 +5663,8 @@ function createAtsAgentProfile(input) {
 	});
 }
 function ensureAtsManagedAgentProfile(input) {
-	const profileName = normalizeOptionalString$24(input.profileName);
-	const creatorProfileId = normalizeOptionalString$24(input.creatorProfileId) ?? void 0;
+	const profileName = normalizeOptionalString$25(input.profileName);
+	const creatorProfileId = normalizeOptionalString$25(input.creatorProfileId) ?? void 0;
 	if (!profileName) throw new Error("profile name is required");
 	return ensureAtsManagedAgentProfileRequest({
 		profileName,
@@ -5641,8 +5673,8 @@ function ensureAtsManagedAgentProfile(input) {
 	});
 }
 async function createAtsHumanProfile(input) {
-	const profileName = normalizeOptionalString$24(input.profileName);
-	const creatorProfileId = normalizeOptionalString$24(input.creatorProfileId) ?? void 0;
+	const profileName = normalizeOptionalString$25(input.profileName);
+	const creatorProfileId = normalizeOptionalString$25(input.creatorProfileId) ?? void 0;
 	if (!profileName) throw new Error("profile name is required");
 	const created = parseAtsProfileItem(readRecordField(await requestAtsProfilesApi({
 		method: "POST",
@@ -5656,9 +5688,9 @@ async function createAtsHumanProfile(input) {
 	return created;
 }
 async function updateAtsProfile(input) {
-	const atsProfileId = normalizeOptionalString$24(input.atsProfileId);
+	const atsProfileId = normalizeOptionalString$25(input.atsProfileId);
 	if (!atsProfileId) throw new Error("atsProfileId is required");
-	const profileName = normalizeOptionalString$24(input.profileName);
+	const profileName = normalizeOptionalString$25(input.profileName);
 	if (!Boolean(profileName)) throw new Error("profileName is required");
 	const updated = parseAtsProfileItem(readRecordField(await requestAtsProfilesApi({
 		method: "PATCH",
@@ -5669,7 +5701,7 @@ async function updateAtsProfile(input) {
 	return updated;
 }
 async function deleteAtsProfile(input) {
-	const atsProfileId = normalizeOptionalString$24(input.atsProfileId);
+	const atsProfileId = normalizeOptionalString$25(input.atsProfileId);
 	if (!atsProfileId) throw new Error("atsProfileId is required");
 	const deleted = parseAtsProfileItem(readRecordField(await requestAtsProfilesApi({
 		method: "DELETE",
@@ -5866,12 +5898,12 @@ function readArrayField(input, field) {
 	return value.filter(isRecord$4);
 }
 function readRequiredStringField(input, field) {
-	const value = normalizeOptionalString$24(input[field]);
+	const value = normalizeOptionalString$25(input[field]);
 	if (!value) throw new Error(`invalid profile payload: missing ${field}`);
 	return value;
 }
 function readOptionalStringField$1(input, field) {
-	return normalizeOptionalString$24(input[field]);
+	return normalizeOptionalString$25(input[field]);
 }
 function readBooleanField(input, field) {
 	return input[field] === true;
@@ -5881,7 +5913,7 @@ function readOptionalBooleanField(input, field) {
 	if (typeof value === "boolean") return value;
 	return null;
 }
-function normalizeOptionalString$24(value) {
+function normalizeOptionalString$25(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -5907,7 +5939,7 @@ async function parseResponseJson$1(response) {
 }
 function extractApiErrorMessage$1(payload, status) {
 	const record = isRecord$4(payload) ? payload : {};
-	const message = normalizeOptionalString$24(record.message) ?? normalizeOptionalString$24(record.error_description) ?? normalizeOptionalString$24(record.error);
+	const message = normalizeOptionalString$25(record.message) ?? normalizeOptionalString$25(record.error_description) ?? normalizeOptionalString$25(record.error);
 	if (message) return message;
 	return `request failed with status ${status}`;
 }
@@ -5962,7 +5994,7 @@ function isSelectedAtsProfileRequiredError(error) {
 	return error.message.startsWith(PROFILE_REQUIRED_ERROR_PREFIX) && error.message.endsWith(PROFILE_REQUIRED_ERROR_SUFFIX);
 }
 async function resolveAtsProfileOrNull(input = {}) {
-	const explicitAtsProfileId = normalizeOptionalString$23(input.atsProfileId);
+	const explicitAtsProfileId = normalizeOptionalString$24(input.atsProfileId);
 	if (explicitAtsProfileId) return await resolveExplicitAtsProfile(explicitAtsProfileId, {
 		profileKind: input.profileKind,
 		allowUnauthenticated: input.allowUnauthenticated === true,
@@ -6035,7 +6067,7 @@ async function resolveSelectedAtsProfile(selectedAtsProfileId, input) {
 		throw error;
 	}
 }
-function normalizeOptionalString$23(value) {
+function normalizeOptionalString$24(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -6050,13 +6082,13 @@ function isProfileMissingError(error) {
 //#endregion
 //#region src/config/view-profile-key.ts
 async function resolveViewProfileKey(inputProfile) {
-	const explicit = normalizeOptionalString$22(inputProfile);
+	const explicit = normalizeOptionalString$23(inputProfile);
 	if (explicit) return (await resolveAtsProfileByIdOrName({ profileIdentifier: explicit }).catch(() => null))?.atsProfileId ?? explicit;
 	const selected = await getSelectedAtsProfileId();
 	if (selected) return selected;
 	return null;
 }
-function normalizeOptionalString$22(value) {
+function normalizeOptionalString$23(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -6488,7 +6520,7 @@ function buildStartRecapItems() {
 //#endregion
 //#region src/start-shell/notices.ts
 function renderStartWelcome(input) {
-	const email = normalizeOptionalString$21(input.session.user?.email) ?? "(unknown)";
+	const email = normalizeOptionalString$22(input.session.user?.email) ?? "(unknown)";
 	if (input.runtime.resolvedView === "agent") {
 		input.presenter.data({
 			code: "start.welcome",
@@ -6502,10 +6534,10 @@ function renderStartWelcome(input) {
 	note([`Signed In: ${email}`, `Gateway: ${input.gatewayUrl}`].join("\n"), "Welcome");
 }
 function emitStartCompatibilityNotice(input) {
-	const normalizedSkillsMode = normalizeOptionalString$21(input.input.skillsMode)?.toLowerCase();
+	const normalizedSkillsMode = normalizeOptionalString$22(input.input.skillsMode)?.toLowerCase();
 	const ignoredFlags = [
-		normalizeOptionalString$21(input.input.agentModel) ? "--agent-model" : null,
-		normalizeOptionalString$21(input.input.agentOwner) ? "--agent-owner" : null,
+		normalizeOptionalString$22(input.input.agentModel) ? "--agent-model" : null,
+		normalizeOptionalString$22(input.input.agentOwner) ? "--agent-owner" : null,
 		normalizedSkillsMode && normalizedSkillsMode !== "auto" ? "--skills-mode" : null
 	].filter((value) => value !== null);
 	if (ignoredFlags.length === 0) return;
@@ -6556,7 +6588,7 @@ function emitStartSetupHint(input) {
 		text: formatInlineAtsCliCommands("If this computer needs local service or agent setup, run `ats setup`.")
 	});
 }
-function normalizeOptionalString$21(value) {
+function normalizeOptionalString$22(value) {
 	if (typeof value !== "string") return null;
 	const normalized = value.trim();
 	return normalized.length > 0 ? normalized : null;
@@ -6771,7 +6803,7 @@ async function readProfileWorkspaceConfigForAccount(input) {
 		path,
 		status: "missing"
 	};
-	const parsedJson = safeParseJson$1(raw);
+	const parsedJson = safeParseJson$2(raw);
 	if (parsedJson === null) return {
 		path,
 		reason: "invalid_json",
@@ -6967,7 +6999,7 @@ function buildWorkspacePayload(value) {
 async function readExistingEnvelopeDraft(input) {
 	const raw = await readOptionalFile(input.path);
 	if (raw === null) return null;
-	const parsed = safeParseJson$1(raw);
+	const parsed = safeParseJson$2(raw);
 	if (!(parsed && typeof parsed === "object")) return null;
 	const record = parsed;
 	if (record.v !== PROFILE_LOCAL_META_ENVELOPE_VERSION) return null;
@@ -7079,7 +7111,7 @@ function hasOnlyExpectedKeys(record, expectedKeys) {
 	const allowedKeys = new Set(expectedKeys);
 	return Object.keys(record).every((key) => allowedKeys.has(key));
 }
-function safeParseJson$1(raw) {
+function safeParseJson$2(raw) {
 	try {
 		return JSON.parse(raw);
 	} catch {
@@ -7454,7 +7486,7 @@ function resolveDefaultAuthBaseUrl(env) {
 
 //#endregion
 //#region ../../packages/utils/dist/index.js
-function sleep$1(ms) {
+function sleep(ms) {
 	return new Promise((resolve) => {
 		setTimeout(resolve, ms);
 	});
@@ -8239,7 +8271,7 @@ function buildAuthStatusSnapshot(input) {
 		expiresIn: null,
 		expired: false
 	};
-	const expiresAt = normalizeOptionalString$20(session.expiresAt);
+	const expiresAt = normalizeOptionalString$21(session.expiresAt);
 	const expiresAtMs = expiresAt ? Date.parse(expiresAt) : NaN;
 	const hasValidExpiresAt = Number.isFinite(expiresAtMs);
 	const expiresInMs = hasValidExpiresAt ? expiresAtMs - Date.now() : NaN;
@@ -8247,14 +8279,14 @@ function buildAuthStatusSnapshot(input) {
 	return {
 		signedIn: input.state === "valid",
 		state: input.state,
-		userId: normalizeOptionalString$20(session.user?.id),
-		userEmail: normalizeOptionalString$20(session.user?.email),
-		userName: normalizeOptionalString$20(session.user?.name),
-		clientId: normalizeOptionalString$20(session.clientId),
-		authBaseUrl: normalizeOptionalString$20(session.authBaseUrl),
-		tokenType: normalizeOptionalString$20(session.tokenType),
-		scope: normalizeOptionalString$20(session.scope),
-		createdAt: normalizeOptionalString$20(session.createdAt),
+		userId: normalizeOptionalString$21(session.user?.id),
+		userEmail: normalizeOptionalString$21(session.user?.email),
+		userName: normalizeOptionalString$21(session.user?.name),
+		clientId: normalizeOptionalString$21(session.clientId),
+		authBaseUrl: normalizeOptionalString$21(session.authBaseUrl),
+		tokenType: normalizeOptionalString$21(session.tokenType),
+		scope: normalizeOptionalString$21(session.scope),
+		createdAt: normalizeOptionalString$21(session.createdAt),
 		expiresAt,
 		expiresIn: hasValidExpiresAt ? formatRemainingDuration(expiresInMs) : null,
 		expired
@@ -8329,7 +8361,7 @@ function appendRowIfValue(rows, label, value) {
 		value
 	});
 }
-function normalizeOptionalString$20(value) {
+function normalizeOptionalString$21(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -8684,7 +8716,7 @@ async function readDaemonLocalStateFile(input) {
 		throw error;
 	});
 	if (raw === null) return null;
-	const parsedJson = safeParseJson(raw);
+	const parsedJson = safeParseJson$1(raw);
 	if (parsedJson === null) return null;
 	const parsed = input.schema.safeParse(parsedJson);
 	return parsed.success ? parsed.data : null;
@@ -8707,7 +8739,7 @@ async function writeDaemonLocalStateFile(input) {
 		if (shouldCleanupTemp) await rm(tempPath, { force: true }).catch(() => void 0);
 	}
 }
-function safeParseJson(raw) {
+function safeParseJson$1(raw) {
 	try {
 		return JSON.parse(raw);
 	} catch {
@@ -15576,14 +15608,14 @@ const createAuthorityAtsServiceRuntimeId = (input) => {
 		source: RUNTIME_REGISTRY_AUTHORITY_SOURCE
 	};
 };
-const normalizeOptionalString$19 = (value) => {
+const normalizeOptionalString$20 = (value) => {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : void 0;
 };
 const createAgentProfileBindingModelSelection = (input) => {
-	const modelId = normalizeOptionalString$19(input?.modelId);
+	const modelId = normalizeOptionalString$20(input?.modelId);
 	if (!modelId) return;
-	const reasoningLevel = normalizeOptionalString$19(input?.reasoningLevel);
+	const reasoningLevel = normalizeOptionalString$20(input?.reasoningLevel);
 	return {
 		modelId,
 		...reasoningLevel ? { reasoningLevel } : {}
@@ -21327,16 +21359,16 @@ function renderRegistryOriginLaunchCommand(input) {
 function parseAgentsRegistryDocument(value, registryPath) {
 	const objectValue = readObjectValue(value, `agents registry file '${registryPath}'`);
 	return {
-		schemaVersion: readStringValue(objectValue.schemaVersion, "schemaVersion"),
+		schemaVersion: readStringValue$1(objectValue.schemaVersion, "schemaVersion"),
 		agents: readArrayValue(objectValue.agents, "agents").map((agent, index) => parseAgentsRegistryAgent(agent, `agents[${String(index)}]`))
 	};
 }
 function parseAgentsRegistryAgent(value, context) {
 	const objectValue = readObjectValue(value, context);
-	const id = readStringValue(objectValue.id, `${context}.id`);
-	const displayName = readStringValue(objectValue.displayName, `${context}.displayName`);
+	const id = readStringValue$1(objectValue.id, `${context}.id`);
+	const displayName = readStringValue$1(objectValue.displayName, `${context}.displayName`);
 	const category = readEnumValue(objectValue.category, `${context}.category`, ["builtin", "custom"]);
-	const skillsDir = readStringValue(objectValue.skillsDir, `${context}.skillsDir`);
+	const skillsDir = readStringValue$1(objectValue.skillsDir, `${context}.skillsDir`);
 	const globalSkillsDir = readOptionalStringOrStringArray(objectValue.globalSkillsDir, `${context}.globalSkillsDir`);
 	const detection = parseAgentsRegistryDetection(objectValue.detection, `${context}.detection`);
 	const service = parseAgentsRegistryServiceCapability(objectValue.service, `${context}.service`);
@@ -21397,7 +21429,7 @@ function parseAgentsRegistryDetectionCheck(value, context) {
 		"envTruthy"
 	]);
 	if (!SUPPORTED_DETECTION_CHECK_KINDS.has(kind)) throw new Error(`Unsupported detection check kind at ${context}.kind: ${kind}`);
-	const detectionValue = readStringValue(objectValue.value, `${context}.value`);
+	const detectionValue = readStringValue$1(objectValue.value, `${context}.value`);
 	const platform = readOptionalEnumValue(objectValue.platform, `${context}.platform`, [
 		"all",
 		"darwin",
@@ -21427,7 +21459,7 @@ function parseAgentsRegistryRuntimeSupport(value, context) {
 }
 function parseAgentsRegistryAdapterBinding(value, context) {
 	const objectValue = readObjectValue(value, context);
-	const adapterId = readStringValue(objectValue.adapterId, `${context}.adapterId`);
+	const adapterId = readStringValue$1(objectValue.adapterId, `${context}.adapterId`);
 	const controllerRefMatcher = parseAgentsRegistryAgentControllerRefMatcher(objectValue.controllerRefMatcher, `${context}.controllerRefMatcher`);
 	const transportModes = readArrayValue(objectValue.transportModes, `${context}.transportModes`).map((transportMode, index) => parseTransportMode$1(transportMode, `${context}.transportModes[${String(index)}]`));
 	const capabilityDeclaration = parseAgentsRegistryRuntimeCapabilityDeclaration(objectValue.capabilityDeclaration, `${context}.capabilityDeclaration`);
@@ -21471,7 +21503,7 @@ function parseAgentsRegistryAgentControllerRefMatcher(value, context) {
 		"regex"
 	]);
 	if (!SUPPORTED_RUNTIME_MATCHER_KINDS.has(kind)) throw new Error(`Unsupported controller matcher kind at ${context}.kind: ${kind}`);
-	const values = readArrayValue(objectValue.values, `${context}.values`).map((entry, index) => readStringValue(entry, `${context}.values[${String(index)}]`));
+	const values = readArrayValue(objectValue.values, `${context}.values`).map((entry, index) => readStringValue$1(entry, `${context}.values[${String(index)}]`));
 	if (values.length === 0) throw new Error(`Expected non-empty matcher values at ${context}.values`);
 	return {
 		kind,
@@ -21484,7 +21516,7 @@ function parseOptionalTransportModes(value, context) {
 }
 function parseOptionalOriginLaunch(value, context) {
 	if (value === void 0 || value === null) return null;
-	const commandTemplate = readStringValue(readObjectValue(value, context).commandTemplate, `${context}.commandTemplate`);
+	const commandTemplate = readStringValue$1(readObjectValue(value, context).commandTemplate, `${context}.commandTemplate`);
 	const placeholderMatches = [...commandTemplate.matchAll(ANY_BRACE_TOKEN_RE)];
 	if (placeholderMatches.length === 0) throw new Error(`Expected origin launch placeholder token at ${context}.commandTemplate`);
 	for (const match of placeholderMatches) {
@@ -21615,7 +21647,7 @@ function readArrayValue(value, context) {
 	if (!Array.isArray(value)) throw new Error(`Expected array at ${context}`);
 	return value;
 }
-function readStringValue(value, context) {
+function readStringValue$1(value, context) {
 	if (typeof value !== "string") throw new Error(`Expected string at ${context}`);
 	const trimmed = value.trim();
 	if (!trimmed) throw new Error(`Expected non-empty string at ${context}`);
@@ -21636,8 +21668,8 @@ function readOptionalEnumValue(value, context, allowed) {
 }
 function readOptionalStringOrStringArray(value, context) {
 	if (value === void 0 || value === null) return null;
-	if (typeof value === "string") return readStringValue(value, context);
-	if (Array.isArray(value)) return value.map((item, index) => readStringValue(item, `${context}[${String(index)}]`));
+	if (typeof value === "string") return readStringValue$1(value, context);
+	if (Array.isArray(value)) return value.map((item, index) => readStringValue$1(item, `${context}[${String(index)}]`));
 	throw new Error(`Expected string or string[] at ${context}`);
 }
 function isMissingFileError(error) {
@@ -22679,6 +22711,7 @@ const CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS = CATALOG_SYNC_SIGNAL_POLL_INTERVAL_M
 const DAEMON_RUNTIME_CONTRACT_EPOCH = DAEMON_RUNTIME_CONTRACT_EPOCH$1;
 const DAEMON_STREAM_CONNECT_TIMEOUT_MS = DAEMON_STREAM_CONNECT_TIMEOUT_MS$1;
 const DAEMON_STREAM_KEEPALIVE_INTERVAL_MS = DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1;
+const DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS = DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1;
 const DEFAULT_HEARTBEAT_INTERVAL_MS = DEFAULT_HEARTBEAT_INTERVAL_MS$1;
 const HEARTBEAT_RESPONSE_TIMEOUT_MS = HEARTBEAT_RESPONSE_TIMEOUT_MS$1;
 const MAX_HEARTBEAT_INTERVAL_MS = MAX_HEARTBEAT_INTERVAL_MS$2;
@@ -22772,7 +22805,6 @@ function nowIsoString() {
 	return (/* @__PURE__ */ new Date()).toISOString();
 }
 const toErrorMessage$30 = toErrorMessage$43;
-const sleep = sleep$1;
 function dirnamePath(path) {
 	const lastSlash = Math.max(path.lastIndexOf("/"), path.lastIndexOf("\\"));
 	if (lastSlash <= 0) return ".";
@@ -29280,8 +29312,8 @@ function buildSpaceSignalsReadSearchParams(query) {
 	return searchParams;
 }
 function normalizeSpaceSignalsReadQuery(query) {
-	const afterSignalId = normalizeOptionalString$18(query?.afterSignalId);
-	const aroundSignalId = normalizeOptionalString$18(query?.aroundSignalId);
+	const afterSignalId = normalizeOptionalString$19(query?.afterSignalId);
+	const aroundSignalId = normalizeOptionalString$19(query?.aroundSignalId);
 	const beforeCount = normalizeOptionalNonNegativeInteger(query?.beforeCount);
 	const afterCount = normalizeOptionalNonNegativeInteger(query?.afterCount);
 	const limit = normalizeOptionalNonNegativeInteger(query?.limit);
@@ -29309,7 +29341,7 @@ function normalizeSpaceSignalsReadQuery(query) {
 		kinds
 	};
 }
-function normalizeOptionalString$18(value) {
+function normalizeOptionalString$19(value) {
 	if (typeof value !== "string") return null;
 	const normalized = value.trim();
 	return normalized.length > 0 ? normalized : null;
@@ -29322,7 +29354,7 @@ function normalizeOptionalNonNegativeInteger(value) {
 function normalizeUniqueStrings(values) {
 	const deduped = /* @__PURE__ */ new Set();
 	for (const value of values) {
-		const normalized = normalizeOptionalString$18(value);
+		const normalized = normalizeOptionalString$19(value);
 		if (normalized) deduped.add(normalized);
 	}
 	return [...deduped];
@@ -30936,9 +30968,9 @@ function createModelCatalogReadSession(input) {
 async function readModelCatalogOnce(baseUrl) {
 	try {
 		const [apiClient, baseUrlModule, clientFoundationModule] = await Promise.all([
-			import("./dist-zUuzNkK0.js"),
-			import("./base-url-SXaImoj4.js").then((n) => n.n),
-			import("./api-client-foundation-DFdzzDaR.js")
+			import("./dist-DV2pViNq.js"),
+			import("./base-url-CiDhrDeP.js").then((n) => n.n),
+			import("./api-client-foundation-CBoyrvoT.js")
 		]);
 		if (typeof apiClient.createConfigApi !== "function") throw new Error("config api client is unavailable");
 		const resolvedBaseUrl = baseUrl ?? await baseUrlModule.resolveBaseUrl();
@@ -32014,7 +32046,7 @@ function isDaemonBundleSourceAllowedForLane(input) {
 }
 async function readDaemonActiveBundleState() {
 	const raw = await readFile(daemonServiceActiveBundlePath(), "utf8").catch((error) => {
-		if (getErrorCode$3(error) === "ENOENT") return null;
+		if (getErrorCode$4(error) === "ENOENT") return null;
 		throw error;
 	});
 	if (raw === null) return null;
@@ -32290,7 +32322,7 @@ async function listDaemonSourceDistFiles(path) {
 async function collectDaemonBundleRuntimeDependencyClosure(input) {
 	const packageManifestPath = join(input.sourcePackageRootPath, "package.json");
 	const packageManifestRaw = await readFile(packageManifestPath, "utf8").catch((error) => {
-		if (getErrorCode$3(error) === "ENOENT") throw new Error(`ATS could not find the CLI package manifest for background service bundling at ${packageManifestPath}.`);
+		if (getErrorCode$4(error) === "ENOENT") throw new Error(`ATS could not find the CLI package manifest for background service bundling at ${packageManifestPath}.`);
 		throw error;
 	});
 	const packageManifest = JSON.parse(packageManifestRaw);
@@ -32352,7 +32384,7 @@ async function readDaemonBundleDependencyManifest(input) {
 	if (!dependencyPackageRootPath) return null;
 	const dependencyManifestPath = join(dependencyPackageRootPath, "package.json");
 	const dependencyManifestRaw = await readFile(dependencyManifestPath, "utf8").catch((error) => {
-		if (getErrorCode$3(error) === "ENOENT") {
+		if (getErrorCode$4(error) === "ENOENT") {
 			if (!input.required) return null;
 			throw new Error(`ATS could not find runtime dependency ${input.dependencyName} for background service bundling at ${dependencyManifestPath}. Run \`pnpm install\` and retry.`);
 		}
@@ -32707,7 +32739,7 @@ function quoteShellSingle(value) {
 }
 async function readDirectoryNames(path) {
 	return (await readdir(path, { withFileTypes: true }).catch((error) => {
-		if (getErrorCode$3(error) === "ENOENT") return [];
+		if (getErrorCode$4(error) === "ENOENT") return [];
 		throw error;
 	})).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
 }
@@ -32725,7 +32757,7 @@ function isDaemonBundleSourceKind(value) {
 	return value === DAEMON_BUNDLE_SOURCE_KIND_WORKSPACE || value === DAEMON_BUNDLE_SOURCE_KIND_PACKAGE_INSTALL || value === DAEMON_BUNDLE_SOURCE_KIND_NPX_CACHE || value === DAEMON_BUNDLE_SOURCE_KIND_UNKNOWN;
 }
 function isPackageEntryResolutionError(error) {
-	const code = getErrorCode$3(error);
+	const code = getErrorCode$4(error);
 	return code === "MODULE_NOT_FOUND" || code === "ERR_PACKAGE_PATH_NOT_EXPORTED";
 }
 function normalizeOptionalText$27(value) {
@@ -32737,7 +32769,7 @@ async function pathExists$6(path) {
 		await stat(path);
 		return true;
 	} catch (error) {
-		if (getErrorCode$3(error) === "ENOENT") return false;
+		if (getErrorCode$4(error) === "ENOENT") return false;
 		throw error;
 	}
 }
@@ -32765,7 +32797,7 @@ function buildPreferredCliScriptNames(rawPath) {
 function isSupportedDaemonCliEntryName(value) {
 	return DAEMON_CLI_ENTRY_NAMES.includes(value);
 }
-function getErrorCode$3(error) {
+function getErrorCode$4(error) {
 	if (!error || typeof error !== "object") return;
 	const code = error.code;
 	return typeof code === "string" ? code : void 0;
@@ -33417,7 +33449,7 @@ async function computeDirectoryContentHash(input) {
 }
 async function collectFiles(input) {
 	const entries = await readdir(input.dir, { withFileTypes: true }).catch((error) => {
-		if (getErrorCode$2(error) === "ENOENT") return [];
+		if (getErrorCode$3(error) === "ENOENT") return [];
 		warnDirectoryReadError(input.dir, error);
 		throw error;
 	});
@@ -33446,7 +33478,7 @@ async function collectFiles(input) {
 function normalizeRelativePath(value) {
 	return value.split("\\").join("/");
 }
-function getErrorCode$2(error) {
+function getErrorCode$3(error) {
 	if (!error || typeof error !== "object") return;
 	const code = error.code;
 	return typeof code === "string" ? code : void 0;
@@ -33719,7 +33751,7 @@ async function withSkillsInstallLock(run) {
 		acquired = true;
 		break;
 	} catch (error) {
-		if (getErrorCode$1(error) !== "EEXIST") throw error;
+		if (getErrorCode$2(error) !== "EEXIST") throw error;
 		if (!await recoverStaleSkillsInstallLock(lockPath)) throw new Error("another skills installation is already running; retry after it finishes");
 		try {
 			await writeFile(lockPath, lockContents, {
@@ -33729,7 +33761,7 @@ async function withSkillsInstallLock(run) {
 			acquired = true;
 			break;
 		} catch (retryError) {
-			if (getErrorCode$1(retryError) !== "EEXIST") throw retryError;
+			if (getErrorCode$2(retryError) !== "EEXIST") throw retryError;
 		}
 	}
 	if (!acquired) throw new Error("another skills installation is already running; retry after it finishes");
@@ -33741,14 +33773,14 @@ async function withSkillsInstallLock(run) {
 }
 async function recoverStaleSkillsInstallLock(lockPath) {
 	const lockRaw = await readFile(lockPath, "utf8").catch((error) => {
-		if (getErrorCode$1(error) === "ENOENT") return "";
+		if (getErrorCode$2(error) === "ENOENT") return "";
 		throw error;
 	});
 	if (!lockRaw) return true;
 	const pid = resolveLockPid(parseLockMeta(lockRaw));
-	if (pid && isPidAlive$4(pid)) return false;
+	if (pid && isPidAlive$5(pid)) return false;
 	const latestLockRaw = await readFile(lockPath, "utf8").catch((error) => {
-		if (getErrorCode$1(error) === "ENOENT") return "";
+		if (getErrorCode$2(error) === "ENOENT") return "";
 		throw error;
 	});
 	if (!latestLockRaw) return true;
@@ -33759,7 +33791,7 @@ async function recoverStaleSkillsInstallLock(lockPath) {
 		afterPid: resolveLockPid(parseLockMeta(latestLockRaw))
 	})) return false;
 	await rm(lockPath, { force: true }).catch((error) => {
-		if (getErrorCode$1(error) === "ENOENT") return;
+		if (getErrorCode$2(error) === "ENOENT") return;
 		throw error;
 	});
 	return true;
@@ -33776,15 +33808,15 @@ function resolveLockPid(meta) {
 	const pid = meta.pid;
 	return typeof pid === "number" && Number.isInteger(pid) ? pid : null;
 }
-function isPidAlive$4(pid) {
+function isPidAlive$5(pid) {
 	try {
 		process$1.kill(pid, 0);
 		return true;
 	} catch (error) {
-		return getErrorCode$1(error) !== "ESRCH";
+		return getErrorCode$2(error) !== "ESRCH";
 	}
 }
-function getErrorCode$1(error) {
+function getErrorCode$2(error) {
 	if (!error || typeof error !== "object") return;
 	const code = error.code;
 	return typeof code === "string" ? code : void 0;
@@ -37528,16 +37560,30 @@ async function pathExists$5(path) {
 		throw error;
 	}
 }
+var DaemonServiceWaitTimeoutError = class extends Error {
+	jobDiagnostics;
+	constructor(input) {
+		super(input.message);
+		this.name = "DaemonServiceWaitTimeoutError";
+		this.jobDiagnostics = input.jobDiagnostics ?? null;
+	}
+};
+function isDaemonServiceWaitTimeoutError(error) {
+	return error instanceof DaemonServiceWaitTimeoutError;
+}
 function buildSystemServiceWaitTimeoutError(input) {
 	const detailSuffix = input.details && input.details.trim().length > 0 ? ` Last observed state: ${input.details.trim()}` : "";
-	return /* @__PURE__ */ new Error(`timed out waiting for ${input.controller} service to become ${input.action}.${detailSuffix}`);
+	return new DaemonServiceWaitTimeoutError({
+		message: `timed out waiting for ${input.controller} service to become ${input.action}.${detailSuffix}`,
+		jobDiagnostics: input.jobDiagnostics ?? null
+	});
 }
 async function waitForCondition(input) {
 	const deadline = Date.now() + (input.waitMs ?? SYSTEM_SERVICE_WAIT_MS);
 	const pollMs = input.pollMs ?? SYSTEM_SERVICE_POLL_MS;
 	while (Date.now() < deadline) {
 		if (await input.until()) return;
-		await sleep$1(pollMs);
+		await sleep(pollMs);
 	}
 	throw await input.onTimeout();
 }
@@ -38074,10 +38120,14 @@ function buildLaunchdManager(pathInput = {}) {
 			await waitForCondition({
 				until: async () => (await buildLaunchdManager(pathInput).status()).running,
 				onTimeout: async () => {
+					const manager = buildLaunchdManager(pathInput);
+					const status = await manager.status();
+					const jobDiagnostics = manager.readJobDiagnostics ? await manager.readJobDiagnostics().catch(() => null) : null;
 					return buildSystemServiceWaitTimeoutError({
 						action: "running",
 						controller: LAUNCHD_CONTROLLER,
-						details: formatManagerStatusDetails(await buildLaunchdManager(pathInput).status())
+						details: formatManagerStatusDetails(status),
+						jobDiagnostics
 					});
 				}
 			});
@@ -38752,7 +38802,7 @@ function resolveObservedRuntimeCommandEntryPath(input) {
 function resolveRuntimeLeaseIssue(runtimeLease) {
 	if (!runtimeLease) return "runtime_lease_missing";
 	if (!Number.isInteger(runtimeLease.pid) || runtimeLease.pid <= 0) return "invalid_pid";
-	if (!isPidAlive$3(runtimeLease.pid)) return "process_not_alive";
+	if (!isPidAlive$4(runtimeLease.pid)) return "process_not_alive";
 	if (isRuntimeLeaseHeartbeatStale(runtimeLease)) return "heartbeat_stale";
 	return null;
 }
@@ -38780,7 +38830,7 @@ function resolveModePriority(mode) {
 		default: return 2;
 	}
 }
-function isPidAlive$3(pid) {
+function isPidAlive$4(pid) {
 	try {
 		process$1.kill(pid, 0);
 		return true;
@@ -38891,7 +38941,7 @@ async function waitForDaemonSystemServiceToStop(input) {
 		if (!(await input.manager.status().catch(() => null))?.running && currentRuntime?.status !== "running") return true;
 		if (currentRuntime?.status === "stale" && !currentRuntime.managedBySystemService) return true;
 		if (currentRuntime?.status === "not_running") return true;
-		await sleep$1(pollMs);
+		await sleep(pollMs);
 	}
 	const finalRuntime = await readCurrentObservedDaemonRuntimeStatus().catch(() => null);
 	if (finalRuntime?.status === "not_running") return true;
@@ -39413,266 +39463,6 @@ function mergeOwnedProcesses(currentLaneProcesses, legacySharedProcesses) {
 	return merged;
 }
 
-//#endregion
-//#region src/local-service/lifecycle/daemon-service-anomaly-groups.ts
-const DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES = new Set([
-	"legacy_shared_service_present",
-	"version_outdated",
-	"legacy_detached_runtime",
-	"multiple_active_owners",
-	"runtime_bundle_mismatch",
-	"runtime_contract_missing",
-	"runtime_contract_mismatch",
-	"runtime_contract_unavailable",
-	"bundle_missing",
-	"bundle_content_drift",
-	"bundle_id_drift",
-	"bundle_version_drift",
-	"bundle_lane_drift",
-	"bundle_strategy_legacy",
-	"bundle_provenance_drift",
-	"bundle_path_invalid",
-	"duplicate_owned_processes"
-]);
-const DAEMON_SERVICE_AUTO_HEAL_ANOMALIES = new Set([
-	"runtime_stale",
-	"manager_running_without_runtime",
-	"service_manager_path_drift"
-]);
-const DAEMON_SERVICE_REPAIR_ANOMALIES = new Set([
-	"runtime_stale",
-	"manager_running_without_runtime",
-	"legacy_detached_runtime",
-	"multiple_active_owners",
-	"runtime_bundle_mismatch",
-	"runtime_contract_missing",
-	"runtime_contract_mismatch",
-	"runtime_contract_unavailable",
-	"bundle_missing",
-	"bundle_content_drift",
-	"bundle_id_drift",
-	"bundle_version_drift",
-	"bundle_lane_drift",
-	"bundle_strategy_legacy",
-	"bundle_provenance_drift",
-	"bundle_path_invalid",
-	"service_manager_path_drift",
-	"duplicate_owned_processes"
-]);
-const DAEMON_SERVICE_ARTIFACT_DRIFT_ANOMALIES = new Set([
-	"background_foreground_conflict",
-	"bundle_lane_drift",
-	"bundle_missing",
-	"bundle_content_drift",
-	"bundle_id_drift",
-	"bundle_path_invalid",
-	"bundle_provenance_drift",
-	"bundle_strategy_legacy",
-	"bundle_version_drift",
-	"manager_running_without_runtime",
-	"runtime_bundle_mismatch",
-	"runtime_contract_missing",
-	"runtime_contract_mismatch",
-	"runtime_contract_unavailable",
-	"runtime_stale",
-	"service_manager_path_drift",
-	"version_outdated"
-]);
-const DAEMON_SERVICE_RUN_BLOCKING_ANOMALIES = new Set([
-	...[...DAEMON_SERVICE_ARTIFACT_DRIFT_ANOMALIES].filter((code) => code !== "runtime_stale" && code !== "version_outdated" && code !== "bundle_version_drift"),
-	"duplicate_owned_processes",
-	"foreground_background_conflict"
-]);
-const DAEMON_SERVICE_WAKEABILITY_HARD_BLOCKER_ANOMALIES = new Set([
-	"duplicate_owned_processes",
-	"manager_running_without_runtime",
-	"multiple_active_owners",
-	"runtime_bundle_mismatch",
-	"runtime_contract_mismatch"
-]);
-const DAEMON_SERVICE_WAKEABILITY_CONDITIONAL_ANOMALIES = new Set(["bundle_missing", "bundle_path_invalid"]);
-const DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES = new Set([
-	"bundle_content_drift",
-	"bundle_id_drift",
-	"bundle_lane_drift",
-	"bundle_provenance_drift",
-	"bundle_strategy_legacy",
-	"bundle_version_drift",
-	"runtime_contract_missing",
-	"runtime_contract_unavailable",
-	"service_manager_path_drift",
-	"version_outdated"
-]);
-function classifyDaemonServiceWakeability(input) {
-	const anomalyCodes = collectUniqueAnomalyCodes(input.inventory);
-	const executionEvidenceSafe = hasVerifiedRunningDaemonExecutionEvidence({
-		anomalyCodes,
-		inventory: input.inventory
-	});
-	const blockingCodes = [];
-	const advisoryCodes = [];
-	const conditionalCodes = [];
-	for (const code of anomalyCodes) {
-		if (DAEMON_SERVICE_WAKEABILITY_HARD_BLOCKER_ANOMALIES.has(code)) {
-			blockingCodes.push(code);
-			continue;
-		}
-		if (DAEMON_SERVICE_WAKEABILITY_CONDITIONAL_ANOMALIES.has(code)) {
-			conditionalCodes.push(code);
-			if (shouldBlockConditionalWakeabilityAnomaly({
-				code,
-				executionEvidenceSafe
-			})) blockingCodes.push(code);
-			else advisoryCodes.push(code);
-			continue;
-		}
-		if (DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES.has(code)) advisoryCodes.push(code);
-	}
-	return {
-		advisoryCodes,
-		blockingCodes,
-		blocksWake: blockingCodes.length > 0,
-		conditionalCodes,
-		executionEvidenceSafe
-	};
-}
-function classifyDaemonServiceRunStartability(input) {
-	const anomalyCodes = collectUniqueAnomalyCodes(input.inventory);
-	const executionEvidenceSafe = hasVerifiedRunningDaemonExecutionEvidence({
-		anomalyCodes,
-		inventory: input.inventory
-	});
-	const blockingCodes = anomalyCodes.filter((code) => {
-		if (!DAEMON_SERVICE_RUN_BLOCKING_ANOMALIES.has(code)) return false;
-		return !(executionEvidenceSafe && DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES.has(code));
-	});
-	return {
-		blockingCodes,
-		blocksStart: blockingCodes.length > 0
-	};
-}
-function shouldBlockConditionalWakeabilityAnomaly(input) {
-	return !input.executionEvidenceSafe;
-}
-function hasVerifiedRunningDaemonExecutionEvidence(input) {
-	const inventory = input.inventory;
-	if (inventory?.runtimeStatus.status !== "running") return false;
-	if (inventory.runtimeContractCompatibility?.status !== "compatible") return false;
-	if (!hasUsableServiceContract(inventory.serviceContract)) return false;
-	if (!(inventory.activeBundleEntryPath && inventory.runtimeCommandEntryPath && inventory.runtimeCommandPathExists === true)) return false;
-	return !input.anomalyCodes.some((code) => DAEMON_SERVICE_WAKEABILITY_HARD_BLOCKER_ANOMALIES.has(code));
-}
-function hasUsableServiceContract(contract) {
-	return Boolean(contract?.deviceId && contract.gatewayUrl && contract.lane && Number.isFinite(contract.heartbeatMs) && contract.heartbeatMs > 0);
-}
-function collectUniqueAnomalyCodes(inventory) {
-	const codes = [];
-	for (const anomaly of inventory?.anomalies ?? []) if (!codes.includes(anomaly.code)) codes.push(anomaly.code);
-	return codes;
-}
-
-//#endregion
-//#region src/system/local-service-install-attention.ts
-const DAEMON_INSTALL_DECISION_CHOICE = {
-	install: "install",
-	notNow: "not_now"
-};
-const DAEMON_INSTALL_COMMAND = "ats service install";
-const DAEMON_UPGRADE_COMMAND = "ats upgrade";
-const DAEMON_DECISION_RECOMMENDED_HINT = "Recommended";
-const DAEMON_INSTALL_DECISION_COPY = {
-	missing: {
-		question: "ATS Service is missing. Install it now?",
-		explanation: "Without it, this computer can't receive local Wake work.",
-		primaryLabel: "Yes, install it for me",
-		deferred: "ATS Service is still missing. Install it later with `ats service install` so this computer can receive local Wake work.",
-		failed: "ATS Service could not be installed. Run `ats service install` so this computer can receive local Wake work."
-	},
-	outdated: {
-		question: "ATS Service update required. Update it now?",
-		explanation: "This service artifact is not compatible with current local Wake execution.",
-		primaryLabel: "Yes, update it for me",
-		deferred: "ATS Service update skipped. Run `ats service update` before using local Wake work.",
-		failed: "ATS Service was not updated. Run `ats service update`."
-	}
-};
-function buildDaemonInstallDecisionPromptConfig(input) {
-	const copy = DAEMON_INSTALL_DECISION_COPY[input.kind];
-	const detailLine = input.kind === "outdated" && typeof input.installedVersion === "string" && typeof input.expectedVersion === "string" ? `Installed v${input.installedVersion}, expected v${input.expectedVersion}.` : null;
-	return {
-		message: [
-			copy.question,
-			copy.explanation,
-			detailLine
-		].filter((line) => typeof line === "string" && line.length > 0).join("\n"),
-		initialValue: DAEMON_INSTALL_DECISION_CHOICE.install,
-		options: [{
-			value: DAEMON_INSTALL_DECISION_CHOICE.install,
-			label: copy.primaryLabel,
-			hint: DAEMON_DECISION_RECOMMENDED_HINT
-		}, {
-			value: DAEMON_INSTALL_DECISION_CHOICE.notNow,
-			label: "Not now"
-		}]
-	};
-}
-async function promptForDaemonInstallDecision(input) {
-	const choice = await select(buildDaemonInstallDecisionPromptConfig(input));
-	if (isCancel(choice)) return "cancelled";
-	return choice === DAEMON_INSTALL_DECISION_CHOICE.install ? DAEMON_INSTALL_DECISION_CHOICE.install : DAEMON_INSTALL_DECISION_CHOICE.notNow;
-}
-async function runDaemonInstallDecisionPrompt(input) {
-	const decision = await promptForDaemonInstallDecision({
-		kind: input.kind,
-		installedVersion: input.installedVersion,
-		expectedVersion: input.expectedVersion
-	});
-	if (decision === DAEMON_INSTALL_DECISION_CHOICE.install) try {
-		await input.installService();
-		return "install";
-	} catch {
-		await input.emitLine(formatDaemonInstallFailedMessage(input.kind));
-		return "failed";
-	}
-	if (decision === "cancelled") return "cancelled";
-	await input.emitLine(formatDaemonInstallDeferredMessage(input.kind));
-	return decision;
-}
-function formatDaemonInstallDeferredMessage(kind) {
-	return formatInlineAtsCliCommands(DAEMON_INSTALL_DECISION_COPY[kind].deferred);
-}
-function formatDaemonInstallFailedMessage(kind) {
-	return formatInlineAtsCliCommands(DAEMON_INSTALL_DECISION_COPY[kind].failed);
-}
-function formatDaemonServiceMissingRecommendation() {
-	return "ATS Service is not installed yet. Install it so this computer can receive local Wake work.";
-}
-function formatDaemonServiceMissingStatus() {
-	return "Not installed yet.";
-}
-function formatDaemonServiceMissingMeaning() {
-	return "Missing — install ATS Service before this computer can receive local Wake work.";
-}
-function formatDaemonServiceMissingAction() {
-	return `Run \`${formatAtsCliCommand(DAEMON_INSTALL_COMMAND)}\` to set it up.`;
-}
-function formatDaemonServiceMissingRunStepOne() {
-	return `\`${formatAtsCliCommand(DAEMON_INSTALL_COMMAND)}\``;
-}
-function formatDaemonServiceMissingRunStepTwo() {
-	return `\`${formatAtsCliCommand("ats service start")}\``;
-}
-function formatDaemonServiceDowngradeBlockedRecommendation(input) {
-	if (input.installedVersion) return `ATS Service is already newer (installed v${input.installedVersion}, current CLI v${input.expectedVersion}). ATS will not downgrade it automatically. Run \`${formatAtsCliCommand(DAEMON_UPGRADE_COMMAND)}\`.`;
-	return `ATS Service is already newer than this CLI. ATS will not downgrade it automatically. Run \`${formatAtsCliCommand(DAEMON_UPGRADE_COMMAND)}\`.`;
-}
-function getDaemonDowngradeBlockedTitle() {
-	return "⛔ ATS Service Downgrade Blocked";
-}
-function formatDaemonDowngradeBlockedNextStep() {
-	return `Run \`${formatAtsCliCommand(DAEMON_UPGRADE_COMMAND)}\`.`;
-}
-
 //#endregion
 //#region src/local-service/lifecycle/daemon-service-repair-guidance.ts
 const DAEMON_SERVICE_SETUP_COMMAND = "ats setup";
@@ -39878,6 +39668,465 @@ function formatDaemonStartStartedNextStep() {
 	return "Use `ats service status` if you want to check the local service link and cloud connection.";
 }
 
+//#endregion
+//#region src/commands/service-error-text.ts
+const ROOT_ERROR_PATTERN$1 = /\s*Try re-running the command as root for richer errors\.?/i;
+function sanitizeSystemServiceErrorMessage$1(message) {
+	return message.replace(ROOT_ERROR_PATTERN$1, "");
+}
+
+//#endregion
+//#region src/commands/service-start-failure.ts
+const DAEMON_STARTUP_BLOCKING_ANOMALIES = new Set([
+	"duplicate_owned_processes",
+	"multiple_active_owners",
+	"runtime_bundle_mismatch",
+	"runtime_contract_mismatch"
+]);
+var SystemServiceStartupTimeoutError = class extends Error {
+	code = "ats.service.startup_timeout";
+	inventory;
+	managerStatus;
+	runtimeStatus;
+	jobDiagnostics;
+	constructor(input) {
+		super(buildSystemServiceStartupTimeoutMessage(input));
+		this.name = "SystemServiceStartupTimeoutError";
+		this.inventory = input.inventory;
+		this.managerStatus = input.managerStatus;
+		this.runtimeStatus = input.runtimeStatus;
+		this.jobDiagnostics = input.jobDiagnostics ?? null;
+	}
+};
+function resolveSystemServiceStartupFailureVerdict(input) {
+	return {
+		controller: input.controller,
+		jobDiagnostics: isSystemServiceStartupTimeoutError(input.error) ? input.error.jobDiagnostics ?? null : null,
+		message: sanitizeSystemServiceErrorMessage$1(toErrorMessage$43(input.error)),
+		detail: input.detail ?? null
+	};
+}
+function buildSystemServiceStartupFailureReport(input) {
+	return buildSystemServiceStartupFailureReportFromVerdict(resolveSystemServiceStartupFailureVerdict({
+		controller: input.controller,
+		error: input.error,
+		detail: input.detail
+	}), { autoRepairAttempted: input.autoRepairAttempted });
+}
+function buildSystemServiceStartupFailureReportFromVerdict(verdict, options) {
+	const autoRepairAttempted = options?.autoRepairAttempted;
+	const { message, detail, jobDiagnostics } = verdict;
+	const localLogPath = getDaemonSystemServiceLogPath();
+	if (jobDiagnostics && isDaemonServiceJobNeverSpawned(jobDiagnostics)) {
+		const summary = "macOS is blocking the ATS Service background item, so ATS Service never launched.";
+		const card = buildDaemonStartNeedsAttentionCard({
+			summary,
+			nextStep: formatInlineAtsCliCommands("Path A (recommended): open System Settings > General > Login Items & Extensions, enable the ATS background item, then run `ats service start` again. Power users can audit Background Task Management with `sfltool dumpbtm`. Path B: if you would rather not change System Settings, open a separate terminal window, run `ats service start --mode foreground`, and keep that window open — but note ATS Service stops the moment you close that window or restart your Mac, so Wake will not be received."),
+			autoRepairAttempted,
+			detail: detail ?? formatDaemonServiceJobDiagnosticsEvidence(jobDiagnostics)
+		});
+		return {
+			title: card.title,
+			summary,
+			rows: card.rows
+		};
+	}
+	const crashExitCode = jobDiagnostics ? readDaemonServiceJobCrashExitCode(jobDiagnostics) : null;
+	if (jobDiagnostics && crashExitCode !== null) {
+		const summary = `ATS Service launched but keeps exiting (launchd reports ${jobDiagnostics.runs} runs, last exit code ${crashExitCode}).`;
+		const card = buildDaemonStartNeedsAttentionCard({
+			summary,
+			nextStep: formatInlineAtsCliCommands(`Run \`ats service start --mode foreground\` to see the live error. The latest local service log is at \`${localLogPath}\`. If it still fails, run \`ats service repair\`.`),
+			autoRepairAttempted,
+			detail: detail ?? formatDaemonServiceJobDiagnosticsEvidence(jobDiagnostics)
+		});
+		return {
+			title: card.title,
+			summary,
+			rows: card.rows
+		};
+	}
+	if (isLaunchdBootstrapIosError$1(message)) {
+		const card = buildDaemonStartNeedsAttentionCard({
+			summary: "ATS could not finish starting ATS Service on this Mac.",
+			nextStep: formatInlineAtsCliCommands(`Run \`launchctl enable gui/$(id -u)/${getDaemonServiceLaunchdLabel()}\`, then retry with \`ats service start\`. The latest local service log is at \`${localLogPath}\`. If it still fails, run \`ats service repair\`.`),
+			autoRepairAttempted,
+			detail: detail ?? void 0
+		});
+		return {
+			title: card.title,
+			summary: "ATS could not finish starting ATS Service on this Mac.",
+			rows: card.rows
+		};
+	}
+	if (isPermissionOrAuthorizationError(message)) {
+		const card = buildDaemonStartNeedsAttentionCard({
+			summary: "ATS needs local OS permission before it can start ATS Service.",
+			nextStep: formatInlineAtsCliCommands(`Approve the local permission prompt or OS setting, then run \`ats service start\` again. The latest local service log is at \`${localLogPath}\`.`),
+			autoRepairAttempted,
+			detail: detail ?? void 0
+		});
+		return {
+			title: card.title,
+			summary: "ATS needs local OS permission before it can start ATS Service.",
+			rows: card.rows
+		};
+	}
+	const card = buildDaemonStartNeedsAttentionCard({
+		summary: "ATS could not finish starting ATS Service.",
+		nextStep: formatInlineAtsCliCommands(`Run \`ats service start --mode foreground\` to see the live error. The latest local service log is at \`${localLogPath}\`. If it still fails, run \`ats service repair\`.`),
+		autoRepairAttempted,
+		detail: detail ?? void 0
+	});
+	return {
+		title: card.title,
+		summary: `ATS could not finish starting ATS Service (${verdict.controller}).`,
+		rows: card.rows
+	};
+}
+function buildSystemServiceStartupFailureMessage(input) {
+	const report = buildSystemServiceStartupFailureReport(input);
+	const rowLines = report.rows.map((row) => formatSystemServiceFailureRow(row)).filter((line) => line.length > 0);
+	return [report.summary, ...rowLines].join("\n");
+}
+function buildSystemServiceStartupFailureDiagnostics(input) {
+	const timeoutError = isSystemServiceStartupTimeoutError(input.error) ? input.error : null;
+	return {
+		anomalies: timeoutError?.inventory?.anomalies ?? [],
+		autoRepairAttempted: input.autoRepairAttempted === true,
+		controller: input.controller ?? null,
+		jobDiagnostics: timeoutError?.jobDiagnostics ?? null,
+		launchdLabel: (input.controller ?? null) === "launchd" ? getDaemonServiceLaunchdLabel() : null,
+		lifecycleJournalPath: daemonLifecycleJournalPath(),
+		managerStatus: timeoutError?.managerStatus ?? null,
+		nextSteps: [formatAtsCliCommand("ats service start --mode foreground"), formatAtsCliCommand("ats service repair")],
+		recovery: input.recovery,
+		runtimeStatus: timeoutError?.runtimeStatus ?? null,
+		serviceLogPath: getDaemonSystemServiceLogPath()
+	};
+}
+function buildSystemServiceStartupTimeoutMessage(input) {
+	const base = `ATS Service failed to reach a running local service state in time. runtime=${input.runtimeStatus?.status ?? "unknown"}, reason=${input.runtimeStatus?.reason || "unknown"}, managerRunning=${String(input.managerStatus?.running ?? false)}, anomalies=${input.inventory?.anomalies.map((anomaly) => anomaly.code).join(",") || "unknown"}`;
+	if (!input.jobDiagnostics) return base;
+	return `${base}; ${formatDaemonServiceJobDiagnosticsEvidence(input.jobDiagnostics)}`;
+}
+function isSystemServiceStartupTimeoutError(error) {
+	return error instanceof SystemServiceStartupTimeoutError || typeof error === "object" && error !== null && "code" in error && error.code === "ats.service.startup_timeout";
+}
+function formatSystemServiceFailureRow(row) {
+	const label = row.label.trim();
+	const value = formatAtsCliTextBlock(row.value).trim();
+	if (label.length === 0 && value.length === 0) return "";
+	if (value.length === 0) return `${row.label}:`;
+	if (label.length === 0) return row.value;
+	return `${row.label}: ${row.value}`;
+}
+function isLaunchdBootstrapIosError$1(message) {
+	const normalized = message.toLowerCase();
+	return normalized.includes("bootstrap failed") && normalized.includes("input/output error");
+}
+function isPermissionOrAuthorizationError(message) {
+	const normalized = message.toLowerCase();
+	return normalized.includes("permission") || normalized.includes("operation not permitted") || normalized.includes("access is denied") || normalized.includes("requires admin") || normalized.includes("elevation") || normalized.includes("access denied") || normalized.includes("not authorized");
+}
+function isDaemonInventoryRunningAndStartReady(inventory) {
+	if (inventory.runtimeStatus.status !== "running") return false;
+	if (inventory.runtimeStatus.mode !== "background") return false;
+	if (inventory.runtimeStatus.managedBySystemService !== true) return false;
+	return !inventory.anomalies.some((anomaly) => DAEMON_STARTUP_BLOCKING_ANOMALIES.has(anomaly.code));
+}
+async function waitForSystemServiceStartup(input) {
+	const deadlineMs = Date.now() + input.waitMs;
+	while (Date.now() < deadlineMs) {
+		const inventory = await inspectDaemonServiceInventory({
+			expectedVersion: input.expectedVersion,
+			intendedMode: "background",
+			intent: "run_background"
+		}).catch(() => null);
+		if (inventory && isDaemonInventoryRunningAndStartReady(inventory)) return {
+			state: "running",
+			runtimeStatus: inventory.runtimeStatus
+		};
+		await sleep(input.pollMs);
+	}
+	const finalInventory = await inspectDaemonServiceInventory({
+		expectedVersion: input.expectedVersion,
+		intendedMode: "background",
+		intent: "run_background"
+	}).catch(() => null);
+	if (finalInventory && isDaemonInventoryRunningAndStartReady(finalInventory)) return {
+		state: "running",
+		runtimeStatus: finalInventory.runtimeStatus
+	};
+	const finalRuntimeStatus = await readCurrentObservedDaemonRuntimeStatus().catch(() => null);
+	throw new SystemServiceStartupTimeoutError({
+		inventory: finalInventory,
+		managerStatus: await input.manager.status().catch(() => null),
+		runtimeStatus: finalRuntimeStatus,
+		jobDiagnostics: await input.manager.readJobDiagnostics?.().catch(() => null) ?? null
+	});
+}
+
+//#endregion
+//#region src/local-service/lifecycle/daemon-service-anomaly-groups.ts
+const DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES = new Set([
+	"legacy_shared_service_present",
+	"version_outdated",
+	"legacy_detached_runtime",
+	"multiple_active_owners",
+	"runtime_bundle_mismatch",
+	"runtime_contract_missing",
+	"runtime_contract_mismatch",
+	"runtime_contract_unavailable",
+	"bundle_missing",
+	"bundle_content_drift",
+	"bundle_id_drift",
+	"bundle_version_drift",
+	"bundle_lane_drift",
+	"bundle_strategy_legacy",
+	"bundle_provenance_drift",
+	"bundle_path_invalid",
+	"duplicate_owned_processes"
+]);
+const DAEMON_SERVICE_AUTO_HEAL_ANOMALIES = new Set([
+	"runtime_stale",
+	"manager_running_without_runtime",
+	"service_manager_path_drift"
+]);
+const DAEMON_SERVICE_REPAIR_ANOMALIES = new Set([
+	"runtime_stale",
+	"manager_running_without_runtime",
+	"legacy_detached_runtime",
+	"multiple_active_owners",
+	"runtime_bundle_mismatch",
+	"runtime_contract_missing",
+	"runtime_contract_mismatch",
+	"runtime_contract_unavailable",
+	"bundle_missing",
+	"bundle_content_drift",
+	"bundle_id_drift",
+	"bundle_version_drift",
+	"bundle_lane_drift",
+	"bundle_strategy_legacy",
+	"bundle_provenance_drift",
+	"bundle_path_invalid",
+	"service_manager_path_drift",
+	"duplicate_owned_processes"
+]);
+const DAEMON_SERVICE_ARTIFACT_DRIFT_ANOMALIES = new Set([
+	"background_foreground_conflict",
+	"bundle_lane_drift",
+	"bundle_missing",
+	"bundle_content_drift",
+	"bundle_id_drift",
+	"bundle_path_invalid",
+	"bundle_provenance_drift",
+	"bundle_strategy_legacy",
+	"bundle_version_drift",
+	"manager_running_without_runtime",
+	"runtime_bundle_mismatch",
+	"runtime_contract_missing",
+	"runtime_contract_mismatch",
+	"runtime_contract_unavailable",
+	"runtime_stale",
+	"service_manager_path_drift",
+	"version_outdated"
+]);
+const DAEMON_SERVICE_RUN_BLOCKING_ANOMALIES = new Set([
+	...[...DAEMON_SERVICE_ARTIFACT_DRIFT_ANOMALIES].filter((code) => code !== "runtime_stale" && code !== "version_outdated" && code !== "bundle_version_drift"),
+	"duplicate_owned_processes",
+	"foreground_background_conflict"
+]);
+const DAEMON_SERVICE_WAKEABILITY_HARD_BLOCKER_ANOMALIES = new Set([
+	"duplicate_owned_processes",
+	"manager_running_without_runtime",
+	"multiple_active_owners",
+	"runtime_bundle_mismatch",
+	"runtime_contract_mismatch"
+]);
+const DAEMON_SERVICE_WAKEABILITY_CONDITIONAL_ANOMALIES = new Set(["bundle_missing", "bundle_path_invalid"]);
+const DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES = new Set([
+	"bundle_content_drift",
+	"bundle_id_drift",
+	"bundle_lane_drift",
+	"bundle_provenance_drift",
+	"bundle_strategy_legacy",
+	"bundle_version_drift",
+	"runtime_contract_missing",
+	"runtime_contract_unavailable",
+	"service_manager_path_drift",
+	"version_outdated"
+]);
+function classifyDaemonServiceWakeability(input) {
+	const anomalyCodes = collectUniqueAnomalyCodes(input.inventory);
+	const executionEvidenceSafe = hasVerifiedRunningDaemonExecutionEvidence({
+		anomalyCodes,
+		inventory: input.inventory
+	});
+	const blockingCodes = [];
+	const advisoryCodes = [];
+	const conditionalCodes = [];
+	for (const code of anomalyCodes) {
+		if (DAEMON_SERVICE_WAKEABILITY_HARD_BLOCKER_ANOMALIES.has(code)) {
+			blockingCodes.push(code);
+			continue;
+		}
+		if (DAEMON_SERVICE_WAKEABILITY_CONDITIONAL_ANOMALIES.has(code)) {
+			conditionalCodes.push(code);
+			if (shouldBlockConditionalWakeabilityAnomaly({
+				code,
+				executionEvidenceSafe
+			})) blockingCodes.push(code);
+			else advisoryCodes.push(code);
+			continue;
+		}
+		if (DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES.has(code)) advisoryCodes.push(code);
+	}
+	return {
+		advisoryCodes,
+		blockingCodes,
+		blocksWake: blockingCodes.length > 0,
+		conditionalCodes,
+		executionEvidenceSafe
+	};
+}
+function classifyDaemonServiceRunStartability(input) {
+	const anomalyCodes = collectUniqueAnomalyCodes(input.inventory);
+	const executionEvidenceSafe = hasVerifiedRunningDaemonExecutionEvidence({
+		anomalyCodes,
+		inventory: input.inventory
+	});
+	const blockingCodes = anomalyCodes.filter((code) => {
+		if (!DAEMON_SERVICE_RUN_BLOCKING_ANOMALIES.has(code)) return false;
+		return !(executionEvidenceSafe && DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES.has(code));
+	});
+	return {
+		blockingCodes,
+		blocksStart: blockingCodes.length > 0
+	};
+}
+function shouldBlockConditionalWakeabilityAnomaly(input) {
+	return !input.executionEvidenceSafe;
+}
+function hasVerifiedRunningDaemonExecutionEvidence(input) {
+	const inventory = input.inventory;
+	if (inventory?.runtimeStatus.status !== "running") return false;
+	if (inventory.runtimeContractCompatibility?.status !== "compatible") return false;
+	if (!hasUsableServiceContract(inventory.serviceContract)) return false;
+	if (!(inventory.activeBundleEntryPath && inventory.runtimeCommandEntryPath && inventory.runtimeCommandPathExists === true)) return false;
+	return !input.anomalyCodes.some((code) => DAEMON_SERVICE_WAKEABILITY_HARD_BLOCKER_ANOMALIES.has(code));
+}
+function hasUsableServiceContract(contract) {
+	return Boolean(contract?.deviceId && contract.gatewayUrl && contract.lane && Number.isFinite(contract.heartbeatMs) && contract.heartbeatMs > 0);
+}
+function collectUniqueAnomalyCodes(inventory) {
+	const codes = [];
+	for (const anomaly of inventory?.anomalies ?? []) if (!codes.includes(anomaly.code)) codes.push(anomaly.code);
+	return codes;
+}
+
+//#endregion
+//#region src/system/local-service-install-attention.ts
+const DAEMON_INSTALL_DECISION_CHOICE = {
+	install: "install",
+	notNow: "not_now"
+};
+const DAEMON_INSTALL_COMMAND = "ats service install";
+const DAEMON_UPGRADE_COMMAND = "ats upgrade";
+const DAEMON_DECISION_RECOMMENDED_HINT = "Recommended";
+const DAEMON_INSTALL_DECISION_COPY = {
+	missing: {
+		question: "ATS Service is missing. Install it now?",
+		explanation: "Without it, this computer can't receive local Wake work.",
+		primaryLabel: "Yes, install it for me",
+		deferred: "ATS Service is still missing. Install it later with `ats service install` so this computer can receive local Wake work.",
+		failed: "ATS Service could not be installed. Run `ats service install` so this computer can receive local Wake work."
+	},
+	outdated: {
+		question: "ATS Service update required. Update it now?",
+		explanation: "This service artifact is not compatible with current local Wake execution.",
+		primaryLabel: "Yes, update it for me",
+		deferred: "ATS Service update skipped. Run `ats service update` before using local Wake work.",
+		failed: "ATS Service was not updated. Run `ats service update`."
+	}
+};
+function buildDaemonInstallDecisionPromptConfig(input) {
+	const copy = DAEMON_INSTALL_DECISION_COPY[input.kind];
+	const detailLine = input.kind === "outdated" && typeof input.installedVersion === "string" && typeof input.expectedVersion === "string" ? `Installed v${input.installedVersion}, expected v${input.expectedVersion}.` : null;
+	return {
+		message: [
+			copy.question,
+			copy.explanation,
+			detailLine
+		].filter((line) => typeof line === "string" && line.length > 0).join("\n"),
+		initialValue: DAEMON_INSTALL_DECISION_CHOICE.install,
+		options: [{
+			value: DAEMON_INSTALL_DECISION_CHOICE.install,
+			label: copy.primaryLabel,
+			hint: DAEMON_DECISION_RECOMMENDED_HINT
+		}, {
+			value: DAEMON_INSTALL_DECISION_CHOICE.notNow,
+			label: "Not now"
+		}]
+	};
+}
+async function promptForDaemonInstallDecision(input) {
+	const choice = await select(buildDaemonInstallDecisionPromptConfig(input));
+	if (isCancel(choice)) return "cancelled";
+	return choice === DAEMON_INSTALL_DECISION_CHOICE.install ? DAEMON_INSTALL_DECISION_CHOICE.install : DAEMON_INSTALL_DECISION_CHOICE.notNow;
+}
+async function runDaemonInstallDecisionPrompt(input) {
+	const decision = await promptForDaemonInstallDecision({
+		kind: input.kind,
+		installedVersion: input.installedVersion,
+		expectedVersion: input.expectedVersion
+	});
+	if (decision === DAEMON_INSTALL_DECISION_CHOICE.install) try {
+		await input.installService();
+		return "install";
+	} catch {
+		await input.emitLine(formatDaemonInstallFailedMessage(input.kind));
+		return "failed";
+	}
+	if (decision === "cancelled") return "cancelled";
+	await input.emitLine(formatDaemonInstallDeferredMessage(input.kind));
+	return decision;
+}
+function formatDaemonInstallDeferredMessage(kind) {
+	return formatInlineAtsCliCommands(DAEMON_INSTALL_DECISION_COPY[kind].deferred);
+}
+function formatDaemonInstallFailedMessage(kind) {
+	return formatInlineAtsCliCommands(DAEMON_INSTALL_DECISION_COPY[kind].failed);
+}
+function formatDaemonServiceMissingRecommendation() {
+	return "ATS Service is not installed yet. Install it so this computer can receive local Wake work.";
+}
+function formatDaemonServiceMissingStatus() {
+	return "Not installed yet.";
+}
+function formatDaemonServiceMissingMeaning() {
+	return "Missing — install ATS Service before this computer can receive local Wake work.";
+}
+function formatDaemonServiceMissingAction() {
+	return `Run \`${formatAtsCliCommand(DAEMON_INSTALL_COMMAND)}\` to set it up.`;
+}
+function formatDaemonServiceMissingRunStepOne() {
+	return `\`${formatAtsCliCommand(DAEMON_INSTALL_COMMAND)}\``;
+}
+function formatDaemonServiceMissingRunStepTwo() {
+	return `\`${formatAtsCliCommand("ats service start")}\``;
+}
+function formatDaemonServiceDowngradeBlockedRecommendation(input) {
+	if (input.installedVersion) return `ATS Service is already newer (installed v${input.installedVersion}, current CLI v${input.expectedVersion}). ATS will not downgrade it automatically. Run \`${formatAtsCliCommand(DAEMON_UPGRADE_COMMAND)}\`.`;
+	return `ATS Service is already newer than this CLI. ATS will not downgrade it automatically. Run \`${formatAtsCliCommand(DAEMON_UPGRADE_COMMAND)}\`.`;
+}
+function getDaemonDowngradeBlockedTitle() {
+	return "⛔ ATS Service Downgrade Blocked";
+}
+function formatDaemonDowngradeBlockedNextStep() {
+	return `Run \`${formatAtsCliCommand(DAEMON_UPGRADE_COMMAND)}\`.`;
+}
+
 //#endregion
 //#region src/system/local-service-participation-gate.ts
 function shouldRequireDaemonServiceParticipation(localDemand) {
@@ -40195,12 +40444,26 @@ async function runDaemonServiceParticipationRefresh(input) {
 			}
 			return startMapped;
 		}
+		if (!refreshOutcome.ok && (refreshOutcome.result === "start_failed" || refreshOutcome.result === "start_blocked") && refreshOutcome.startFailureVerdict?.jobDiagnostics) {
+			const report = buildSystemServiceStartupFailureReportFromVerdict(refreshOutcome.startFailureVerdict, { autoRepairAttempted: true });
+			renderInfoCard({
+				presenter: input.input.presenter,
+				title: report.title,
+				codePrefix: `${input.codePrefix}.failed`,
+				rows: report.rows
+			});
+			return {
+				errorMessage: report.summary,
+				status: "needs_attention"
+			};
+		}
 		if (!(refreshOutcome.ok && refreshOutcome.result === "completed" && refreshOutcome.serviceState === "running")) throw new Error(`ATS Service refresh did not complete: ${refreshOutcome.result}`);
 	} catch (error) {
 		renderDaemonStartNeedsAttention({
 			presenter: input.input.presenter,
 			codePrefix: input.codePrefix,
-			summary: "ATS Service was repaired, but it is not running yet. Local Wake work will keep waiting until ATS Service starts. Run `ats service start`."
+			summary: "ATS Service was repaired, but it is not running yet. Local Wake work will keep waiting until ATS Service starts. Run `ats service start`.",
+			autoRepairAttempted: true
 		});
 		return {
 			errorMessage: toErrorMessage$30(error),
@@ -40321,7 +40584,12 @@ function renderDaemonStartDeferred(input) {
 	});
 }
 function renderDaemonStartNeedsAttention(input) {
-	const card = buildDaemonStartNeedsAttentionCard({ summary: input.summary });
+	const card = buildDaemonStartNeedsAttentionCard({
+		summary: input.summary,
+		...input.nextStep ? { nextStep: input.nextStep } : {},
+		...input.detail ? { detail: input.detail } : {},
+		...input.autoRepairAttempted ? { autoRepairAttempted: input.autoRepairAttempted } : {}
+	});
 	renderInfoCard({
 		presenter: input.presenter,
 		title: card.title,
@@ -40450,8 +40718,8 @@ function resolveLocalComponentsSetupAction(input) {
 	return "none";
 }
 function resolveCliComponentStatus(input) {
-	const latestPackageVersion = normalizeOptionalString$17(input.latestPackageVersion);
-	const requiredCommandContractVersion = normalizeOptionalString$17(input.requiredCommandContractVersion);
+	const latestPackageVersion = normalizeOptionalString$18(input.latestPackageVersion);
+	const requiredCommandContractVersion = normalizeOptionalString$18(input.requiredCommandContractVersion);
 	const reasonCodes = [];
 	let status = "ok";
 	if (requiredCommandContractVersion && requiredCommandContractVersion !== ATS_CLI_COMMAND_CONTRACT_VERSION) {
@@ -40573,7 +40841,7 @@ function resolveInstalledServiceVersion(participation) {
 		default: return null;
 	}
 }
-function normalizeOptionalString$17(value) {
+function normalizeOptionalString$18(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -40615,14 +40883,14 @@ function emitDaemonDispatchJournalEvent(input) {
 		lane: resolveAtsEnvPreset(input.pathInput),
 		pid: process$1.pid,
 		sessionId: resolveCliContextId(),
-		attemptId: normalizeOptionalString$16(input.attemptId),
+		attemptId: normalizeOptionalString$17(input.attemptId),
 		connectionGeneration: normalizeOptionalInteger(input.connectionGeneration),
-		daemonSessionId: normalizeOptionalString$16(input.daemonSessionId),
+		daemonSessionId: normalizeOptionalString$17(input.daemonSessionId),
 		dispatchId: input.dispatchId,
 		leaseEpoch: normalizeOptionalInteger(input.leaseEpoch),
-		profileId: normalizeOptionalString$16(input.profileId),
-		result: normalizeOptionalString$16(input.result),
-		taskId: normalizeOptionalString$16(input.taskId),
+		profileId: normalizeOptionalString$17(input.profileId),
+		result: normalizeOptionalString$17(input.result),
+		taskId: normalizeOptionalString$17(input.taskId),
 		...input.metadata ? { metadata: input.metadata } : {}
 	};
 	if (!isDaemonDispatchJournalEvent(event)) {
@@ -40638,7 +40906,7 @@ function emitDaemonDispatchJournalEvent(input) {
 	}
 }
 function readRecentDaemonDispatchJournalEvents(input) {
-	const normalizedDispatchId = normalizeOptionalString$16(input.dispatchId);
+	const normalizedDispatchId = normalizeOptionalString$17(input.dispatchId);
 	if (!normalizedDispatchId) return [];
 	const limit = Math.max(1, Math.min(100, input.limit ?? 20));
 	const journalPath = daemonDispatchJournalPath(input.pathInput);
@@ -40663,7 +40931,7 @@ function isDaemonDispatchJournalEvent(value) {
 	const candidate = value;
 	return candidate.schema === "ats-daemon-dispatch-event-v1" && candidate.v === 1 && DAEMON_DISPATCH_EVENT_TYPES.includes(candidate.type) && typeof candidate.timestamp === "string" && candidate.timestamp.length > 0 && typeof candidate.lane === "string" && candidate.lane.length > 0 && typeof candidate.pid === "number" && Number.isInteger(candidate.pid) && candidate.pid > 0 && (candidate.sessionId === null || typeof candidate.sessionId === "string" && candidate.sessionId.length > 0) && (candidate.attemptId === null || typeof candidate.attemptId === "string" && candidate.attemptId.length > 0) && (candidate.connectionGeneration === null || typeof candidate.connectionGeneration === "number" && Number.isInteger(candidate.connectionGeneration)) && (candidate.daemonSessionId === null || typeof candidate.daemonSessionId === "string" && candidate.daemonSessionId.length > 0) && typeof candidate.dispatchId === "string" && candidate.dispatchId.length > 0 && (candidate.leaseEpoch === null || typeof candidate.leaseEpoch === "number" && Number.isInteger(candidate.leaseEpoch)) && (candidate.profileId === null || typeof candidate.profileId === "string" && candidate.profileId.length > 0) && (candidate.result === null || typeof candidate.result === "string" && candidate.result.length > 0) && (candidate.taskId === null || typeof candidate.taskId === "string" && candidate.taskId.length > 0);
 }
-function normalizeOptionalString$16(value) {
+function normalizeOptionalString$17(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -41177,6 +41445,53 @@ function summarizeSubmissions(submissions) {
 	};
 }
 
+//#endregion
+//#region src/local-service/carrier/daemon-stream-keepalive.ts
+function createDaemonStreamKeepalive(input) {
+	const intervalMs = input.intervalMs ?? DAEMON_STREAM_KEEPALIVE_INTERVAL_MS;
+	const pongTimeoutMs = input.pongTimeoutMs ?? DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS;
+	let pingTimer = null;
+	let pongDeadlineTimer = null;
+	const clearPongDeadline = () => {
+		if (!pongDeadlineTimer) return;
+		clearTimeout(pongDeadlineTimer);
+		pongDeadlineTimer = null;
+	};
+	const stop = () => {
+		if (pingTimer) {
+			clearInterval(pingTimer);
+			pingTimer = null;
+		}
+		clearPongDeadline();
+	};
+	const armPongDeadline = () => {
+		clearPongDeadline();
+		pongDeadlineTimer = setTimeout(() => {
+			pongDeadlineTimer = null;
+			stop();
+			input.onPongTimeout();
+		}, pongTimeoutMs);
+	};
+	return {
+		observePong() {
+			clearPongDeadline();
+		},
+		start() {
+			stop();
+			pingTimer = setInterval(() => {
+				let sent = false;
+				try {
+					sent = input.sendPing();
+				} catch {
+					sent = false;
+				}
+				if (sent) armPongDeadline();
+			}, intervalMs);
+		},
+		stop
+	};
+}
+
 //#endregion
 //#region src/provider-hosts/openclaw/bootstrap-lock.ts
 const OPENCLAW_BOOTSTRAP_LOCK_KEY = "openclaw-bootstrap";
@@ -44016,11 +44331,6 @@ async function handleDispatchDeliverFrame(input) {
 		profileOwnerUserId: input.profileOwnerUserId,
 		parsedTask
 	});
-	emitSendTargetReferenceLoadFailureIfNeeded({
-		parsedTask,
-		presenter: input.presenter,
-		sendTargetReference: bootstrapContext.sendTargetReference
-	});
 	let localRuntimeContextPlan = null;
 	let agentControllerConversationResumePlan = null;
 	let contextIdForDispatch = null;
@@ -44058,10 +44368,17 @@ async function handleDispatchDeliverFrame(input) {
 			targetProfileId: parsedTask.targetProfileId
 		});
 		effectiveRuntimeContext = runtimePreparation.effectiveRuntimeContext;
+		const sendTargetReference = await bootstrapContext.sendTargetReferencePromise;
+		emitSendTargetReferenceLoadFailureIfNeeded({
+			parsedTask,
+			presenter: input.presenter,
+			sendTargetReference
+		});
 		const spaceActionRuntimeContext = createDispatchSpaceActionRuntimeContext({
 			bootstrapContext,
 			parsedTask,
-			runtimePreparation
+			runtimePreparation,
+			sendTargetReference
 		});
 		dispatchSpaceActionContext = spaceActionRuntimeContext.dispatchSpaceActionContext;
 		runtimeEnvOverrides = spaceActionRuntimeContext.runtimeEnvOverrides;
@@ -44147,6 +44464,7 @@ async function handleDispatchDeliverFrame(input) {
 			parsedTask,
 			profileOwnerName: input.profileOwnerName,
 			profileOwnerUserId: input.profileOwnerUserId,
+			sendTargetReference,
 			shouldInjectBootstrap: bootstrapPlan.shouldInject
 		});
 		emitRunLine({
@@ -44412,7 +44730,7 @@ async function handleDispatchDeliverFrame(input) {
 			cliEntry: bootstrapContext.cliEntry,
 			dispatchSpaceActionContext,
 			runtimeResult,
-			sendTargetReference: bootstrapContext.sendTargetReference,
+			sendTargetReference,
 			runtimeContext: activeRuntimeContext,
 			runtimeEnvOverrides,
 			runtimeControllerSupport,
@@ -44809,17 +45127,19 @@ async function resolveDispatchBootstrapContext(input) {
 		targetProfileNamePresent: targetProfileContext.targetProfileName !== null,
 		targetProfileRolePresent: targetProfileContext.targetProfileRole !== null
 	});
-	const sendTargetReference = await resolveDispatchSendTargetReference({
+	const sendTargetReferencePromise = resolveDispatchSendTargetReference({
 		agentControllerRef: input.parsedTask.agentControllerRef,
 		dispatchTask: input.parsedTask,
 		profileOwnerName: input.profileOwnerName,
 		profileOwnerUserId: input.profileOwnerUserId,
 		targetProfileName: targetProfileContext.targetProfileName
-	});
-	input.onPhase?.("send_target_reference_ready", {
-		sendTargetReferenceCount: sendTargetReference.status === "loaded" ? sendTargetReference.projection.length : null,
-		sendTargetReferenceStatus: sendTargetReference.status,
-		source: "dispatch_send_target_reference"
+	}).then((sendTargetReference) => {
+		input.onPhase?.("send_target_reference_ready", {
+			sendTargetReferenceCount: sendTargetReference.status === "loaded" ? sendTargetReference.projection.length : null,
+			sendTargetReferenceStatus: sendTargetReference.status,
+			source: "dispatch_send_target_reference"
+		});
+		return sendTargetReference;
 	});
 	const cliEntry = resolveDispatchOwnedRuntimeActionCliEntryCommand();
 	const serviceFreshnessWarningLines = await resolveDispatchServiceFreshnessWarningLines({ cliEntry });
@@ -44840,7 +45160,7 @@ async function resolveDispatchBootstrapContext(input) {
 		cliEntry,
 		mentionSourceMentionLabel: mentionSourceContext.mentionSourceMentionLabel ?? null,
 		mentionSourceProfileName: mentionSourceContext.mentionSourceProfileName,
-		sendTargetReference,
+		sendTargetReferencePromise,
 		serviceFreshnessWarningLines,
 		spaceOwnerProfileId,
 		targetProfileMentionLabel: targetProfileContext.targetProfileMentionLabel,
@@ -44868,7 +45188,7 @@ function buildDispatchRuntimePrompt(input) {
 		prompt: input.parsedTask.prompt,
 		recipientExplicitlyAddressedByActivationTargets: input.parsedTask.recipientExplicitlyAddressedByActivationTargets,
 		sourceMessageEnvelope: input.parsedTask.sourceMessageEnvelope,
-		sendTargetReferenceLines: input.bootstrapContext.sendTargetReference.referenceLines,
+		sendTargetReferenceLines: input.sendTargetReference.referenceLines,
 		serviceFreshnessWarningLines: input.bootstrapContext.serviceFreshnessWarningLines,
 		spaceId: input.parsedTask.spaceId,
 		spaceOwnerProfileId: input.bootstrapContext.spaceOwnerProfileId,
@@ -44897,7 +45217,7 @@ function createDispatchSpaceActionRuntimeContext(input) {
 		dispatchId: input.parsedTask.dispatchId,
 		env: process.env,
 		replyToSignalId: input.parsedTask.replyToSnapshot?.signalId ?? null,
-		sendTargetReference: input.bootstrapContext.sendTargetReference,
+		sendTargetReference: input.sendTargetReference,
 		sourceEventId: input.parsedTask.sourceEventId,
 		spaceContractSnapshot: input.parsedTask.spaceContractSnapshot,
 		spaceId: input.parsedTask.spaceId,
@@ -46838,7 +47158,25 @@ async function runDaemonSocketSession(input) {
 	let routeCatalogSyncInFlight = false;
 	let heartbeatTimer = null;
 	let heartbeatTimerDueAtMs = null;
-	let keepalivePingTimer = null;
+	const keepalive = createDaemonStreamKeepalive({
+		onPongTimeout: () => {
+			emitRunLine({
+				presenter: input.presenter,
+				code: "daemon.run.keepalive_pong_timeout",
+				text: "daemon stream keepalive PONG missing; terminating half-open socket for reconnect",
+				payload: {
+					connectionGeneration: activeConnectionGeneration,
+					daemonSessionId: input.daemonSessionId
+				}
+			});
+			input.socket.terminate();
+		},
+		sendPing: () => {
+			if (closed) return false;
+			input.socket.send(DAEMON_STREAM_KEEPALIVE_PING);
+			return true;
+		}
+	});
 	let lastDispatchActivityAtMs = null;
 	let lastHeartbeatSentAtMs = null;
 	let consecutiveHeartbeatFailures = 0;
@@ -47007,20 +47345,6 @@ async function runDaemonSocketSession(input) {
 		heartbeatTimer = null;
 		heartbeatTimerDueAtMs = null;
 	};
-	const clearKeepalivePingTimer = () => {
-		if (!keepalivePingTimer) return;
-		clearInterval(keepalivePingTimer);
-		keepalivePingTimer = null;
-	};
-	const startKeepalivePing = () => {
-		clearKeepalivePingTimer();
-		keepalivePingTimer = setInterval(() => {
-			if (closed) return;
-			try {
-				input.socket.send(DAEMON_STREAM_KEEPALIVE_PING);
-			} catch {}
-		}, DAEMON_STREAM_KEEPALIVE_INTERVAL_MS);
-	};
 	const resolvePendingRouteCatalogSyncRequests = (result) => {
 		const pending = pendingRouteCatalogSyncRequests.splice(0, pendingRouteCatalogSyncRequests.length);
 		for (const request of pending) request.resolve(result);
@@ -47746,7 +48070,10 @@ async function runDaemonSocketSession(input) {
 		});
 	});
 	input.socket.onMessage((raw) => {
-		if (raw === DAEMON_STREAM_KEEPALIVE_PONG) return;
+		if (raw === DAEMON_STREAM_KEEPALIVE_PONG) {
+			keepalive.observePong();
+			return;
+		}
 		const parsedFrame = parseDaemonFrame(raw);
 		if (!parsedFrame) {
 			emitRunLine({
@@ -47879,7 +48206,7 @@ async function runDaemonSocketSession(input) {
 	latestCatalogSyncSignalUpdatedAtMs = (await readDaemonCatalogSyncSignal().catch(() => null))?.updatedAtMs ?? 0;
 	scheduleCatalogSyncSignalPoll();
 	await sendHeartbeat();
-	startKeepalivePing();
+	keepalive.start();
 	await waitForClose;
 	if (currentSocketRef.socket === input.socket) {
 		currentSocketRef.socket = null;
@@ -47887,7 +48214,7 @@ async function runDaemonSocketSession(input) {
 	}
 	input.attachRouteCatalogSyncInvoker?.(null);
 	clearHeartbeatTimer();
-	clearKeepalivePingTimer();
+	keepalive.stop();
 	clearCatalogSyncSignalTimer();
 	if (closeCode === 1e3 && closeReason === "shutdown") await localExecutionSlots.drain();
 	else {
@@ -48020,6 +48347,39 @@ function resolveLocalAgentEnabledErrorCode$1(error) {
 	return normalized?.includes(".") ? normalized : "agents.unexpected_error";
 }
 
+//#endregion
+//#region src/local-service/carrier/stop-aware-delay.ts
+function createStopAwareDelay() {
+	let interrupted = false;
+	const pendingInterruptNotifiers = /* @__PURE__ */ new Set();
+	return {
+		interrupt: () => {
+			if (interrupted) return;
+			interrupted = true;
+			for (const notifyInterrupted of pendingInterruptNotifiers) notifyInterrupted();
+			pendingInterruptNotifiers.clear();
+		},
+		wait: (delayMs) => {
+			if (interrupted) return Promise.resolve("interrupted");
+			return new Promise((resolve) => {
+				let timer = null;
+				const notifyInterrupted = () => {
+					if (timer) {
+						clearTimeout(timer);
+						timer = null;
+					}
+					resolve("interrupted");
+				};
+				pendingInterruptNotifiers.add(notifyInterrupted);
+				timer = setTimeout(() => {
+					pendingInterruptNotifiers.delete(notifyInterrupted);
+					resolve("elapsed");
+				}, delayMs);
+			});
+		}
+	};
+}
+
 //#endregion
 //#region src/local-service/carrier/service-runner.ts
 var DaemonStreamAuthenticationRequiredError = class extends Error {
@@ -48208,6 +48568,7 @@ const runDaemonServiceLoop = async (input) => {
 		})
 	});
 	let stopRequested = false;
+	const reconnectBackoffDelay = createStopAwareDelay();
 	let reconnectAttempt = 0;
 	let activeSocket = null;
 	const currentSocketRef = {
@@ -48271,6 +48632,7 @@ const runDaemonServiceLoop = async (input) => {
 		if (stopRequested) return;
 		stopRequested = true;
 		connectionState.set("stopping");
+		reconnectBackoffDelay.interrupt();
 		activeSocket?.close(1e3, "shutdown");
 	};
 	const onSigint = () => {
@@ -48323,6 +48685,10 @@ const runDaemonServiceLoop = async (input) => {
 				headers: authContext.headers,
 				openTimeoutMs: DAEMON_STREAM_CONNECT_TIMEOUT_MS
 			});
+			if (stopRequested) {
+				ws.close(1e3, "shutdown");
+				break;
+			}
 			activeSocket = ws;
 			emitRunLine({
 				presenter: input.presenter,
@@ -48381,59 +48747,14 @@ const runDaemonServiceLoop = async (input) => {
 			requestActiveRouteCatalogSync = null;
 			if (stopRequested) break;
 			reconnectAttempt += 1;
-			const errorMessage = toErrorMessage$30(error);
-			const failureReason = classifyConnectionFailureReason(errorMessage);
-			const authState = error instanceof DaemonStreamAuthenticationRequiredError ? error.authState : null;
-			const backoffMs = resolveServiceConnectionReconnectBackoffMs({
-				attempt: reconnectAttempt,
-				reason: failureReason
-			});
-			noteReconnectFailureState({
-				authState,
+			const backoffMs = noteRunLoopReconnectScheduled({
 				connectionState,
-				errorMessage,
-				failureReason,
-				reconnectAttempt
-			});
-			const reconcileDecision = resolveRouteRegistrationReconcileDecision({
-				driftDetected: true,
-				foregroundActive: mode === "foreground"
-			});
-			emitDriftDetectedEvidence({
-				action: reconcileDecision.action,
-				backoffMs,
-				driftClass: reconcileDecision.driftClass,
-				error: errorMessage,
-				foregroundActive: reconcileDecision.foregroundActive,
-				lifecycleLocked: reconcileDecision.lifecycleLocked,
-				owner: reconcileDecision.owner,
-				reconnectAttempt,
-				skipReason: reconcileDecision.skipReason
-			});
-			emitReconcileStartedEvidence({
-				action: reconcileDecision.action,
-				backoffMs,
-				driftClass: reconcileDecision.driftClass,
-				error: errorMessage,
-				foregroundActive: reconcileDecision.foregroundActive,
-				lifecycleLocked: reconcileDecision.lifecycleLocked,
-				owner: reconcileDecision.owner,
-				reconnectAttempt,
-				skipReason: reconcileDecision.skipReason
-			});
-			emitRunLine({
+				error,
+				foregroundActive: mode === "foreground",
 				presenter: input.presenter,
-				code: "daemon.run.reconnect",
-				text: `daemon stream reconnect scheduled in ${String(backoffMs)}ms (${errorMessage})`,
-				payload: {
-					attempt: reconnectAttempt,
-					authState,
-					backoffMs,
-					error: errorMessage,
-					reason: failureReason
-				}
+				reconnectAttempt
 			});
-			await sleep(backoffMs);
+			await reconnectBackoffDelay.wait(backoffMs);
 		}
 	} finally {
 		process.off("SIGINT", onSigint);
@@ -48744,6 +49065,61 @@ function createRunLoopConnectionStateTracker(presenter) {
 		}).catch(() => void 0);
 	} });
 }
+function noteRunLoopReconnectScheduled(input) {
+	const errorMessage = toErrorMessage$30(input.error);
+	const failureReason = classifyConnectionFailureReason(errorMessage);
+	const authState = input.error instanceof DaemonStreamAuthenticationRequiredError ? input.error.authState : null;
+	const backoffMs = resolveServiceConnectionReconnectBackoffMs({
+		attempt: input.reconnectAttempt,
+		reason: failureReason
+	});
+	noteReconnectFailureState({
+		authState,
+		connectionState: input.connectionState,
+		errorMessage,
+		failureReason,
+		reconnectAttempt: input.reconnectAttempt
+	});
+	const reconcileDecision = resolveRouteRegistrationReconcileDecision({
+		driftDetected: true,
+		foregroundActive: input.foregroundActive
+	});
+	emitDriftDetectedEvidence({
+		action: reconcileDecision.action,
+		backoffMs,
+		driftClass: reconcileDecision.driftClass,
+		error: errorMessage,
+		foregroundActive: reconcileDecision.foregroundActive,
+		lifecycleLocked: reconcileDecision.lifecycleLocked,
+		owner: reconcileDecision.owner,
+		reconnectAttempt: input.reconnectAttempt,
+		skipReason: reconcileDecision.skipReason
+	});
+	emitReconcileStartedEvidence({
+		action: reconcileDecision.action,
+		backoffMs,
+		driftClass: reconcileDecision.driftClass,
+		error: errorMessage,
+		foregroundActive: reconcileDecision.foregroundActive,
+		lifecycleLocked: reconcileDecision.lifecycleLocked,
+		owner: reconcileDecision.owner,
+		reconnectAttempt: input.reconnectAttempt,
+		skipReason: reconcileDecision.skipReason
+	});
+	emitRunLine({
+		presenter: input.presenter,
+		code: "daemon.run.reconnect",
+		text: `daemon stream reconnect scheduled in ${String(backoffMs)}ms (${errorMessage})`,
+		payload: {
+			attempt: input.reconnectAttempt,
+			authState,
+			backoffMs,
+			error: errorMessage,
+			reason: failureReason
+		}
+	});
+	return backoffMs;
+}
 function noteReconnectFailureState(input) {
 	if (input.failureReason === "auth_rejected") {
 		input.connectionState.set("authentication_required", {
@@ -49534,7 +49910,7 @@ async function resolveLocalServiceDemand(input) {
 		expectedRoutesRead: input.expectedRoutesRead,
 		mode: "check"
 	}).catch(() => null) : input.projection;
-	const ownerUserId = normalizeOptionalString$15(input.ownerUserId);
+	const ownerUserId = normalizeOptionalString$16(input.ownerUserId);
 	if (!ownerUserId) return {
 		decision: "indeterminate",
 		hasLocalExecutionRoute: false,
@@ -49710,7 +50086,7 @@ function formatLocalServiceAutoStoppedMessage(localDemand) {
 	if (localDemand.projection?.status === "ok" && localDemand.projection.projectedControllerIds.length === 0) return "ATS stopped the background service because this device currently has no projected local agent controllers.";
 	return "ATS stopped the background service because this device currently has no local execution routes.";
 }
-function normalizeOptionalString$15(value) {
+function normalizeOptionalString$16(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -52242,6 +52618,150 @@ async function cleanupStaleDaemonRuntimeDataBackups(input = {}) {
 	}
 }
 
+//#endregion
+//#region src/local-service/lifecycle/daemon-service-stalled-force-kill.ts
+const FORCE_KILL_MIN_HEARTBEAT_STALL_MS = 600 * 1e3;
+const FORCE_KILL_EXIT_WAIT_MS = 2e3;
+const FORCE_KILL_EXIT_POLL_MS = 100;
+function resolveStalledDaemonForceKillVerdict(input) {
+	const lease = input.runtimeLease;
+	if (!lease) return {
+		decision: "skip",
+		reason: "runtime_lease_missing",
+		pid: null,
+		heartbeatStalledMs: null
+	};
+	if (!Number.isInteger(lease.pid) || lease.pid <= 0) return {
+		decision: "skip",
+		reason: "lease_pid_invalid",
+		pid: null,
+		heartbeatStalledMs: null
+	};
+	const ownedProcess = input.ownedProcesses.find((candidate) => candidate.pid === lease.pid && candidate.ownership !== "unknown");
+	if (!ownedProcess) return {
+		decision: "skip",
+		reason: "lease_pid_not_owned",
+		pid: lease.pid,
+		heartbeatStalledMs: null
+	};
+	if (ownedProcess.mode === "foreground") return {
+		decision: "skip",
+		reason: "foreground_process",
+		pid: lease.pid,
+		heartbeatStalledMs: null
+	};
+	const freshnessTimestamp = lease.heartbeatAt ?? lease.updatedAt;
+	const heartbeatMs = Date.parse(freshnessTimestamp);
+	if (Number.isNaN(heartbeatMs)) return {
+		decision: "skip",
+		reason: "heartbeat_unparseable",
+		pid: lease.pid,
+		heartbeatStalledMs: null
+	};
+	const heartbeatStalledMs = input.nowMs - heartbeatMs;
+	if (heartbeatStalledMs < FORCE_KILL_MIN_HEARTBEAT_STALL_MS) return {
+		decision: "skip",
+		reason: "heartbeat_fresh",
+		pid: lease.pid,
+		heartbeatStalledMs
+	};
+	return {
+		decision: "force_kill",
+		pid: lease.pid,
+		heartbeatStalledMs
+	};
+}
+const defaultStalledDaemonForceKillDeps = {
+	emitLifecycleEvent: emitDaemonLifecycleEvent,
+	killProcess: (pid, signal) => process$1.kill(pid, signal),
+	listOwnedProcesses: async () => await listDaemonOwnedProcesses({ ignoreProcessIds: [process$1.pid, process$1.ppid].filter((pid) => Number.isInteger(pid) && pid > 0) }),
+	nowMs: () => Date.now(),
+	readRuntimeLease: async () => await readDaemonRuntimeLease(),
+	waitForProcessExit: async (pid) => {
+		const deadline = Date.now() + FORCE_KILL_EXIT_WAIT_MS;
+		while (Date.now() < deadline) {
+			if (!isPidAlive$3(pid)) return true;
+			await sleep(FORCE_KILL_EXIT_POLL_MS);
+		}
+		return !isPidAlive$3(pid);
+	}
+};
+async function forceKillStalledDaemonAfterStopTimeout(input, deps = defaultStalledDaemonForceKillDeps) {
+	const [runtimeLease, ownedProcesses] = await Promise.all([deps.readRuntimeLease().catch(() => null), deps.listOwnedProcesses().catch(() => [])]);
+	const verdict = resolveStalledDaemonForceKillVerdict({
+		nowMs: deps.nowMs(),
+		ownedProcesses,
+		runtimeLease
+	});
+	if (verdict.decision === "skip") {
+		await deps.emitLifecycleEvent({
+			type: "process_stop.action",
+			result: "force_kill_skipped",
+			metadata: {
+				heartbeatStalledMs: verdict.heartbeatStalledMs,
+				pid: verdict.pid,
+				reason: verdict.reason,
+				signal: "SIGKILL",
+				stage: input.stage
+			}
+		});
+		return {
+			killed: false,
+			verdict
+		};
+	}
+	try {
+		deps.killProcess(verdict.pid, "SIGKILL");
+	} catch (error) {
+		if (!isProcessGoneError(error)) {
+			await deps.emitLifecycleEvent({
+				type: "process_stop.action",
+				result: "force_kill_failed",
+				metadata: {
+					errorMessage: error instanceof Error ? error.message : String(error),
+					heartbeatStalledMs: verdict.heartbeatStalledMs,
+					pid: verdict.pid,
+					reason: "stalled_heartbeat_after_stop_timeout",
+					signal: "SIGKILL",
+					stage: input.stage
+				}
+			});
+			return {
+				killed: false,
+				verdict
+			};
+		}
+	}
+	const exited = await deps.waitForProcessExit(verdict.pid);
+	await deps.emitLifecycleEvent({
+		type: "process_stop.action",
+		result: "force_killed",
+		metadata: {
+			exitObserved: exited,
+			heartbeatStalledMs: verdict.heartbeatStalledMs,
+			pid: verdict.pid,
+			reason: "stalled_heartbeat_after_stop_timeout",
+			signal: "SIGKILL",
+			stage: input.stage
+		}
+	});
+	return {
+		killed: true,
+		verdict
+	};
+}
+function isProcessGoneError(error) {
+	return error instanceof Error && error.code === "ESRCH";
+}
+function isPidAlive$3(pid) {
+	try {
+		process$1.kill(pid, 0);
+		return true;
+	} catch (error) {
+		return !(error instanceof Error && error.code === "ESRCH");
+	}
+}
+
 //#endregion
 //#region src/local-service/lifecycle/daemon-service-lifecycle.ts
 const STRICT_TEARDOWN_VERIFY_WAIT_MS$1 = 15e3;
@@ -52501,7 +53021,15 @@ async function executeDaemonServiceLifecycle(input) {
 			});
 			input.state.failureStage = "wait_running";
 			await input.emitPhase("wait_running");
-			await input.context.serviceManager.waitUntilRunning();
+			await runDaemonServiceManagerAction({
+				action: "wait_running",
+				controller: input.context.serviceManager.controller,
+				intent: toLifecycleIntent(input.operation),
+				resolveErrorMetadata: (error) => isDaemonServiceWaitTimeoutError(error) && error.jobDiagnostics ? { jobDiagnostics: error.jobDiagnostics } : null,
+				run: async () => {
+					await input.context.serviceManager.waitUntilRunning();
+				}
+			});
 		}
 		input.state.failureStage = "verify_final_inventory";
 		await input.emitPhase("verify_final_inventory");
@@ -52790,8 +53318,11 @@ async function stopLifecycleRuntime(input) {
 		stage: "stop_or_drain"
 	});
 	if (await stopDaemonProcessWithTimeout(runtimeStatus.pid, "SIGTERM", input.drainWaitMs)) return;
-	if (!input.forceKillAfterDrainTimeout) throw new DaemonServiceLifecycleDrainTimeoutError(input.drainWaitMs);
-	await stopDaemonProcess$1(runtimeStatus.pid, "SIGKILL");
+	if (input.forceKillAfterDrainTimeout) {
+		await stopDaemonProcess$1(runtimeStatus.pid, "SIGKILL");
+		return;
+	}
+	if (!(await forceKillStalledDaemonAfterStopTimeout({ stage: "stop_or_drain" })).killed) throw new DaemonServiceLifecycleDrainTimeoutError(input.drainWaitMs);
 }
 async function ensureLifecycleRuntimeStopped() {
 	const runtimeAfterStop = await readCurrentObservedDaemonRuntimeStatus();
@@ -52806,11 +53337,15 @@ async function ensureLifecycleRuntimeStopped() {
 }
 async function waitForLifecycleRuntimeStopped(input) {
 	if (input.inventory.runtimeStatus.managedBySystemService || input.inventory.serviceManagerStatus?.installed === true || input.inventory.serviceManagerStatus?.running === true) {
-		if (!await waitForDaemonSystemServiceToStop({
+		if (!(await waitForDaemonSystemServiceToStop({
 			manager: input.serviceManager,
 			waitMs: STRICT_TEARDOWN_VERIFY_WAIT_MS$1,
 			pollMs: STRICT_TEARDOWN_VERIFY_POLL_MS$1
-		})) {
+		}) || (await forceKillStalledDaemonAfterStopTimeout({ stage: "wait_stopped" })).killed && await waitForDaemonSystemServiceToStop({
+			manager: input.serviceManager,
+			waitMs: STRICT_TEARDOWN_VERIFY_WAIT_MS$1,
+			pollMs: STRICT_TEARDOWN_VERIFY_POLL_MS$1
+		}))) {
 			const runtimeAfterWait = await readCurrentObservedDaemonRuntimeStatus();
 			throw new DaemonServiceLifecycleStageError({
 				message: `ATS service is still running after stop phase (pid=${String(runtimeAfterWait.pid)}).`,
@@ -52831,7 +53366,7 @@ async function ensureNoOwnedProcessesRemain() {
 				return;
 			}
 		}
-		await sleep$1(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
+		await sleep(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
 	}
 	const [ownedProcesses, runtimeStatus] = await Promise.all([listDaemonOwnedProcesses({ ignoreProcessIds: [process$1.pid, process$1.ppid].filter((pid) => Number.isInteger(pid) && pid > 0) }), readCurrentObservedDaemonRuntimeStatus()]);
 	if (ownedProcesses.length > 0) throw new DaemonServiceLifecycleStageError({
@@ -52854,7 +53389,7 @@ async function waitForLegacySharedServiceCleanup(input) {
 		});
 		lastInventory = inventory;
 		if (!(inventory.legacySharedService?.present === true || inventory.anomalies.some((anomaly) => anomaly.code === "legacy_shared_service_present"))) return;
-		await sleep$1(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
+		await sleep(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
 	}
 	throw new DaemonServiceLifecycleStageError({
 		message: "ATS Service legacy shared registration is still present after cleanup. reason=legacy_shared_service_present",
@@ -53078,7 +53613,7 @@ async function waitForVerifiedLifecycleInventory(input) {
 		});
 		lastInventory = inventory;
 		lastError = verificationError;
-		await sleep$1(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
+		await sleep(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
 	}
 	throw new DaemonServiceLifecycleStageError({
 		message: lastError ?? "ATS could not verify the final local service inventory state.",
@@ -53217,7 +53752,7 @@ async function waitForProcessToExit$1(pid, timeoutMs) {
 	const deadline = Date.now() + timeoutMs;
 	while (Date.now() < deadline) {
 		if (!isPidAlive$2(pid)) return true;
-		await sleep$1(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
+		await sleep(STRICT_TEARDOWN_VERIFY_POLL_MS$1);
 	}
 	return !isPidAlive$2(pid);
 }
@@ -53240,7 +53775,7 @@ async function writeLifecycleEvidenceEvent(input) {
 
 //#endregion
 //#region src/local-service/lifecycle/daemon-service-start-recovery.ts
-const ROOT_ERROR_PATTERN$1 = /\s*Try re-running the command as root for richer errors\.?/i;
+const ROOT_ERROR_PATTERN = /\s*Try re-running the command as root for richer errors\.?/i;
 async function startDaemonSystemServiceWithAutoRepair(input) {
 	let autoRepairAttempted = false;
 	try {
@@ -53268,16 +53803,16 @@ async function startDaemonSystemServiceWithAutoRepair(input) {
 		}
 	}
 }
-function sanitizeSystemServiceErrorMessage$1(message) {
-	return message.replace(ROOT_ERROR_PATTERN$1, "");
+function sanitizeSystemServiceErrorMessage(message) {
+	return message.replace(ROOT_ERROR_PATTERN, "");
 }
-function isLaunchdBootstrapIosError$1(message) {
+function isLaunchdBootstrapIosError(message) {
 	const normalized = message.toLowerCase();
 	return normalized.includes("bootstrap failed") && normalized.includes("input/output error");
 }
 function shouldAttemptLaunchdAutoRepair(input) {
 	if (input.controller !== "launchd") return false;
-	return isLaunchdBootstrapIosError$1(sanitizeSystemServiceErrorMessage$1(toErrorMessage$17(input.error)));
+	return isLaunchdBootstrapIosError(sanitizeSystemServiceErrorMessage(toErrorMessage$17(input.error)));
 }
 function buildLaunchdAutoRepairFailureError(input) {
 	return new Error([
@@ -53667,7 +54202,7 @@ async function recordDaemonServiceRepairFailure(input) {
 }
 async function readDaemonServiceRepairJournal() {
 	const raw = await readFile(daemonServiceRepairJournalPath(), "utf8").catch((error) => {
-		if (getErrorCode(error) === "ENOENT") return null;
+		if (getErrorCode$1(error) === "ENOENT") return null;
 		throw error;
 	});
 	if (raw === null) return createEmptyDaemonServiceRepairJournalState();
@@ -53704,7 +54239,7 @@ function createEmptyDaemonServiceRepairJournalState() {
 function isDaemonServiceRepairJournalRecord(value) {
 	return !!value && typeof value === "object" && "actionKey" in value && typeof value.actionKey === "string" && "consecutiveFailures" in value && typeof value.consecutiveFailures === "number" && "lastAttemptAt" in value && typeof value.lastAttemptAt === "string" && "lastFailureAt" in value && (typeof value.lastFailureAt === "string" || value.lastFailureAt === null) && "lastSuccessAt" in value && (typeof value.lastSuccessAt === "string" || value.lastSuccessAt === null) && "cooldownUntil" in value && (typeof value.cooldownUntil === "string" || value.cooldownUntil === null) && "lastErrorMessage" in value && (typeof value.lastErrorMessage === "string" || value.lastErrorMessage === null);
 }
-function getErrorCode(error) {
+function getErrorCode$1(error) {
 	if (error && typeof error === "object" && "code" in error) return typeof error.code === "string" ? error.code : null;
 	return null;
 }
@@ -53868,7 +54403,7 @@ async function terminateDaemonOwnedProcess(pid) {
 	const deadline = Date.now() + AUTO_HEAL_DUPLICATE_WAIT_MS;
 	while (Date.now() < deadline) {
 		if (!isPidAlive$1(pid)) return;
-		await sleep$1(AUTO_HEAL_DUPLICATE_POLL_MS);
+		await sleep(AUTO_HEAL_DUPLICATE_POLL_MS);
 	}
 	if (isPidAlive$1(pid)) process$1.kill(pid, "SIGKILL");
 }
@@ -54081,7 +54616,7 @@ async function waitForDaemonStartupAlignmentSettlement(input) {
 			cliScriptPath: input.cliScriptPath
 		}).catch(() => null);
 		if (!inventory) {
-			await sleep$1(input.pollMs);
+			await sleep(input.pollMs);
 			continue;
 		}
 		const decision = resolveDaemonServiceAlignmentDecision({
@@ -54102,7 +54637,7 @@ async function waitForDaemonStartupAlignmentSettlement(input) {
 			cooldownUntil: null,
 			backupDataPath: null
 		};
-		await sleep$1(input.pollMs);
+		await sleep(input.pollMs);
 	}
 	return null;
 }
@@ -54896,6 +55431,11 @@ function buildRuntimeDetailRows(input) {
 		serviceManagerStatus: input.serviceManagerStatus
 	})]);
 }
+function formatDaemonRunModeLabel(mode) {
+	if (mode === "foreground") return "foreground — stops when the terminal closes";
+	if (mode === "background") return "background service";
+	return "unknown";
+}
 function buildCoreRuntimeStateRows(input) {
 	const rows = [{
 		label: "⚙️ Runtime",
@@ -54904,7 +55444,7 @@ function buildCoreRuntimeStateRows(input) {
 	if (input.runtimeState.status === "running") {
 		rows.push({
 			label: "🎚️ Mode",
-			value: input.runtimeState.mode ?? "unknown"
+			value: formatDaemonRunModeLabel(input.runtimeState.mode)
 		}, {
 			label: "🧬 PID",
 			value: input.runtimeState.pid === null ? "not available" : String(input.runtimeState.pid)
@@ -54920,7 +55460,7 @@ function buildCoreRuntimeStateRows(input) {
 	if (input.effectiveStatus === "running") {
 		rows.push({
 			label: "🎚️ Mode",
-			value: input.runtimeState.mode ?? "unknown"
+			value: formatDaemonRunModeLabel(input.runtimeState.mode)
 		}, {
 			label: "🧬 PID",
 			value: input.runtimeState.pid === null ? "being managed by OS service manager" : String(input.runtimeState.pid)
@@ -55029,8 +55569,8 @@ function mapLocalControllerStatusReason(reason) {
 }
 function describeDaemonRuntimeStatus(status) {
 	if (!status) return "No runtime status available.";
-	if (status.status === "running") return `Service is running (mode=${status.mode ?? "unknown"}, pid=${String(status.pid)}, started=${status.startedAt || "unknown"}).`;
-	if (status.status === "stale") return `Service status is stale (mode=${status.mode ?? "unknown"}, pid=${String(status.pid)}, reason=${status.reason || "unknown"}).`;
+	if (status.status === "running") return `Service is running (${formatDaemonRunModeLabel(status.mode)}, pid=${String(status.pid)}, started=${status.startedAt || "unknown"}).`;
+	if (status.status === "stale") return `Service status is stale (${formatDaemonRunModeLabel(status.mode)}, pid=${String(status.pid)}, reason=${status.reason || "unknown"}).`;
 	if (status.status === "not_running") return "Service is not running.";
 	return "Service runtime status is unknown.";
 }
@@ -55263,13 +55803,6 @@ function capitalizeDaemonControlCommand(command) {
 	return command === "cancel" ? "Cancel" : "Interrupt";
 }
 
-//#endregion
-//#region src/commands/service-error-text.ts
-const ROOT_ERROR_PATTERN = /\s*Try re-running the command as root for richer errors\.?/i;
-function sanitizeSystemServiceErrorMessage(message) {
-	return message.replace(ROOT_ERROR_PATTERN, "");
-}
-
 //#endregion
 //#region src/commands/service-reinstall-view.ts
 var DaemonReinstallUnexpectedStartError = class extends Error {
@@ -55388,7 +55921,8 @@ function createDaemonReinstallStartFailedOutcome(input) {
 		forceUsed: input.forceUsed,
 		backupDataPath: input.backupDataPath,
 		...input.failureStage ? { failureStage: input.failureStage } : {},
-		...input.evidencePath ? { evidencePath: input.evidencePath } : {}
+		...input.evidencePath ? { evidencePath: input.evidencePath } : {},
+		...input.startFailureVerdict ? { startFailureVerdict: input.startFailureVerdict } : {}
 	};
 }
 function createDaemonReinstallStartBlockedOutcome(input) {
@@ -55398,7 +55932,8 @@ function createDaemonReinstallStartBlockedOutcome(input) {
 		blockReason: input.blockReason,
 		desiredState: input.desiredState,
 		forceUsed: input.forceUsed,
-		backupDataPath: input.backupDataPath
+		backupDataPath: input.backupDataPath,
+		...input.startFailureVerdict ? { startFailureVerdict: input.startFailureVerdict } : {}
 	};
 }
 async function attachDaemonReinstallEvidence(input) {
@@ -55679,7 +56214,7 @@ function summarizeDaemonReinstallJournalResult(outcome) {
 }
 function buildDaemonReinstallUnexpectedStartSummary(error, action = "repair") {
 	const actionLabel = formatDaemonServiceMaintenanceActionLabel(action);
-	const detail = sanitizeSystemServiceErrorMessage(toErrorMessage$43(error));
+	const detail = sanitizeSystemServiceErrorMessage$1(toErrorMessage$43(error));
 	if (!detail) return `ATS hit a local start error right after service ${actionLabel}.`;
 	return `ATS hit a local start error right after service ${actionLabel}: ${detail}`;
 }
@@ -55753,183 +56288,6 @@ function createDaemonAlreadyRunningResult() {
 	};
 }
 
-//#endregion
-//#region src/commands/service-start-failure.ts
-const DAEMON_STARTUP_BLOCKING_ANOMALIES = new Set([
-	"duplicate_owned_processes",
-	"multiple_active_owners",
-	"runtime_bundle_mismatch",
-	"runtime_contract_mismatch"
-]);
-var SystemServiceStartupTimeoutError = class extends Error {
-	code = "ats.service.startup_timeout";
-	inventory;
-	managerStatus;
-	runtimeStatus;
-	jobDiagnostics;
-	constructor(input) {
-		super(buildSystemServiceStartupTimeoutMessage(input));
-		this.name = "SystemServiceStartupTimeoutError";
-		this.inventory = input.inventory;
-		this.managerStatus = input.managerStatus;
-		this.runtimeStatus = input.runtimeStatus;
-		this.jobDiagnostics = input.jobDiagnostics ?? null;
-	}
-};
-function buildSystemServiceStartupFailureReport(input) {
-	const message = sanitizeSystemServiceErrorMessage(toErrorMessage$43(input.error));
-	const localLogPath = getDaemonSystemServiceLogPath();
-	const jobDiagnostics = isSystemServiceStartupTimeoutError(input.error) ? input.error.jobDiagnostics ?? null : null;
-	if (jobDiagnostics && isDaemonServiceJobNeverSpawned(jobDiagnostics)) {
-		const summary = "macOS is blocking the ATS Service background item, so ATS Service never launched.";
-		const card = buildDaemonStartNeedsAttentionCard({
-			summary,
-			nextStep: formatInlineAtsCliCommands("Open System Settings > General > Login Items & Extensions, enable the ATS background item, then run `ats service start` again. Power users can audit Background Task Management with `sfltool dumpbtm`."),
-			autoRepairAttempted: input.autoRepairAttempted,
-			detail: input.detail ?? formatDaemonServiceJobDiagnosticsEvidence(jobDiagnostics)
-		});
-		return {
-			title: card.title,
-			summary,
-			rows: card.rows
-		};
-	}
-	const crashExitCode = jobDiagnostics ? readDaemonServiceJobCrashExitCode(jobDiagnostics) : null;
-	if (jobDiagnostics && crashExitCode !== null) {
-		const summary = `ATS Service launched but keeps exiting (launchd reports ${jobDiagnostics.runs} runs, last exit code ${crashExitCode}).`;
-		const card = buildDaemonStartNeedsAttentionCard({
-			summary,
-			nextStep: formatInlineAtsCliCommands(`Run \`ats service start --mode foreground\` to see the live error. The latest local service log is at \`${localLogPath}\`. If it still fails, run \`ats service repair\`.`),
-			autoRepairAttempted: input.autoRepairAttempted,
-			detail: input.detail ?? formatDaemonServiceJobDiagnosticsEvidence(jobDiagnostics)
-		});
-		return {
-			title: card.title,
-			summary,
-			rows: card.rows
-		};
-	}
-	if (isLaunchdBootstrapIosError(message)) {
-		const card = buildDaemonStartNeedsAttentionCard({
-			summary: "ATS could not finish starting ATS Service on this Mac.",
-			nextStep: formatInlineAtsCliCommands(`Run \`launchctl enable gui/$(id -u)/${getDaemonServiceLaunchdLabel()}\`, then retry with \`ats service start\`. The latest local service log is at \`${localLogPath}\`. If it still fails, run \`ats service repair\`.`),
-			autoRepairAttempted: input.autoRepairAttempted,
-			detail: input.detail ?? void 0
-		});
-		return {
-			title: card.title,
-			summary: "ATS could not finish starting ATS Service on this Mac.",
-			rows: card.rows
-		};
-	}
-	if (isPermissionOrAuthorizationError(message)) {
-		const card = buildDaemonStartNeedsAttentionCard({
-			summary: "ATS needs local OS permission before it can start ATS Service.",
-			nextStep: formatInlineAtsCliCommands(`Approve the local permission prompt or OS setting, then run \`ats service start\` again. The latest local service log is at \`${localLogPath}\`.`),
-			autoRepairAttempted: input.autoRepairAttempted,
-			detail: input.detail ?? void 0
-		});
-		return {
-			title: card.title,
-			summary: "ATS needs local OS permission before it can start ATS Service.",
-			rows: card.rows
-		};
-	}
-	const card = buildDaemonStartNeedsAttentionCard({
-		summary: "ATS could not finish starting ATS Service.",
-		nextStep: formatInlineAtsCliCommands(`Run \`ats service start --mode foreground\` to see the live error. The latest local service log is at \`${localLogPath}\`. If it still fails, run \`ats service repair\`.`),
-		autoRepairAttempted: input.autoRepairAttempted,
-		detail: input.detail ?? void 0
-	});
-	return {
-		title: card.title,
-		summary: `ATS could not finish starting ATS Service (${input.controller}).`,
-		rows: card.rows
-	};
-}
-function buildSystemServiceStartupFailureMessage(input) {
-	const report = buildSystemServiceStartupFailureReport(input);
-	const rowLines = report.rows.map((row) => formatSystemServiceFailureRow(row)).filter((line) => line.length > 0);
-	return [report.summary, ...rowLines].join("\n");
-}
-function buildSystemServiceStartupFailureDiagnostics(input) {
-	const timeoutError = isSystemServiceStartupTimeoutError(input.error) ? input.error : null;
-	return {
-		anomalies: timeoutError?.inventory?.anomalies ?? [],
-		autoRepairAttempted: input.autoRepairAttempted === true,
-		controller: input.controller ?? null,
-		jobDiagnostics: timeoutError?.jobDiagnostics ?? null,
-		launchdLabel: (input.controller ?? null) === "launchd" ? getDaemonServiceLaunchdLabel() : null,
-		lifecycleJournalPath: daemonLifecycleJournalPath(),
-		managerStatus: timeoutError?.managerStatus ?? null,
-		nextSteps: [formatAtsCliCommand("ats service start --mode foreground"), formatAtsCliCommand("ats service repair")],
-		recovery: input.recovery,
-		runtimeStatus: timeoutError?.runtimeStatus ?? null,
-		serviceLogPath: getDaemonSystemServiceLogPath()
-	};
-}
-function buildSystemServiceStartupTimeoutMessage(input) {
-	const base = `ATS Service failed to reach a running local service state in time. runtime=${input.runtimeStatus?.status ?? "unknown"}, reason=${input.runtimeStatus?.reason || "unknown"}, managerRunning=${String(input.managerStatus?.running ?? false)}, anomalies=${input.inventory?.anomalies.map((anomaly) => anomaly.code).join(",") || "unknown"}`;
-	if (!input.jobDiagnostics) return base;
-	return `${base}; ${formatDaemonServiceJobDiagnosticsEvidence(input.jobDiagnostics)}`;
-}
-function isSystemServiceStartupTimeoutError(error) {
-	return error instanceof SystemServiceStartupTimeoutError || typeof error === "object" && error !== null && "code" in error && error.code === "ats.service.startup_timeout";
-}
-function formatSystemServiceFailureRow(row) {
-	const label = row.label.trim();
-	const value = formatAtsCliTextBlock(row.value).trim();
-	if (label.length === 0 && value.length === 0) return "";
-	if (value.length === 0) return `${row.label}:`;
-	if (label.length === 0) return row.value;
-	return `${row.label}: ${row.value}`;
-}
-function isLaunchdBootstrapIosError(message) {
-	const normalized = message.toLowerCase();
-	return normalized.includes("bootstrap failed") && normalized.includes("input/output error");
-}
-function isPermissionOrAuthorizationError(message) {
-	const normalized = message.toLowerCase();
-	return normalized.includes("permission") || normalized.includes("operation not permitted") || normalized.includes("access is denied") || normalized.includes("requires admin") || normalized.includes("elevation") || normalized.includes("access denied") || normalized.includes("not authorized");
-}
-function isDaemonInventoryRunningAndStartReady(inventory) {
-	if (inventory.runtimeStatus.status !== "running") return false;
-	if (inventory.runtimeStatus.mode !== "background") return false;
-	if (inventory.runtimeStatus.managedBySystemService !== true) return false;
-	return !inventory.anomalies.some((anomaly) => DAEMON_STARTUP_BLOCKING_ANOMALIES.has(anomaly.code));
-}
-async function waitForSystemServiceStartup(input) {
-	const deadlineMs = Date.now() + input.waitMs;
-	while (Date.now() < deadlineMs) {
-		const inventory = await inspectDaemonServiceInventory({
-			expectedVersion: input.expectedVersion,
-			intendedMode: "background",
-			intent: "run_background"
-		}).catch(() => null);
-		if (inventory && isDaemonInventoryRunningAndStartReady(inventory)) return {
-			state: "running",
-			runtimeStatus: inventory.runtimeStatus
-		};
-		await sleep$1(input.pollMs);
-	}
-	const finalInventory = await inspectDaemonServiceInventory({
-		expectedVersion: input.expectedVersion,
-		intendedMode: "background",
-		intent: "run_background"
-	}).catch(() => null);
-	if (finalInventory && isDaemonInventoryRunningAndStartReady(finalInventory)) return {
-		state: "running",
-		runtimeStatus: finalInventory.runtimeStatus
-	};
-	const finalRuntimeStatus = await readCurrentObservedDaemonRuntimeStatus().catch(() => null);
-	throw new SystemServiceStartupTimeoutError({
-		inventory: finalInventory,
-		managerStatus: await input.manager.status().catch(() => null),
-		runtimeStatus: finalRuntimeStatus,
-		jobDiagnostics: await input.manager.readJobDiagnostics?.().catch(() => null) ?? null
-	});
-}
-
 //#endregion
 //#region src/commands/service-stop-command.ts
 const STOP_WAIT_MS = 2e3;
@@ -56481,7 +56839,7 @@ async function verifySystemServiceRemovedAfterStrictTeardown(input) {
 			}
 		}
 		if (allRemoved) return;
-		await sleep$1(STRICT_TEARDOWN_VERIFY_POLL_MS);
+		await sleep(STRICT_TEARDOWN_VERIFY_POLL_MS);
 	}
 	for (const manager of managers) {
 		const finalManagerStatus = await manager.status().catch((error) => {
@@ -56518,7 +56876,7 @@ async function ensureRuntimeCleanAfterStrictTeardown(input) {
 				if ((await input.deps.readCurrentObservedDaemonRuntimeStatus()).status === "not_running") return;
 			}
 		}
-		await sleep$1(STRICT_TEARDOWN_VERIFY_POLL_MS);
+		await sleep(STRICT_TEARDOWN_VERIFY_POLL_MS);
 	}
 	const [ownedProcesses, finalRuntime] = await Promise.all([input.deps.listDaemonOwnedProcesses({ ignoreProcessIds: [process.pid] }), input.deps.readCurrentObservedDaemonRuntimeStatus()]);
 	if (finalRuntime.status === "running") throw createStrictTeardownError({
@@ -57057,7 +57415,7 @@ async function autoStartDaemonAfterReinstall(input) {
 		startRetryDelayMs: input.resolved.startRetryDelayMs,
 		view: input.runtime.resolvedView
 	});
-	if (startOutcome === "cancelled") {
+	if (startOutcome.reason === "cancelled") {
 		await clearDaemonStartFailureStateSafely();
 		return createDaemonReinstallCompletedOutcome({
 			backupDataPath: null,
@@ -57066,7 +57424,7 @@ async function autoStartDaemonAfterReinstall(input) {
 			serviceState: "stopped"
 		});
 	}
-	const blockReason = resolveDaemonReinstallStartBlockedReason(startOutcome);
+	const blockReason = resolveDaemonReinstallStartBlockedReason(startOutcome.reason);
 	if (blockReason) {
 		const recheckedInventory = await inspectDaemonServiceInventory({
 			expectedVersion: input.resolved.daemonVersion,
@@ -57086,13 +57444,15 @@ async function autoStartDaemonAfterReinstall(input) {
 			backupDataPath: null,
 			blockReason,
 			desiredState: input.desiredState,
-			forceUsed: input.forceUsed
+			forceUsed: input.forceUsed,
+			startFailureVerdict: startOutcome.startFailureVerdict
 		});
 	}
-	if (startOutcome === "start_failed") return createDaemonReinstallStartFailedOutcome({
+	if (startOutcome.reason === "start_failed") return createDaemonReinstallStartFailedOutcome({
 		backupDataPath: null,
 		desiredState: input.desiredState,
-		forceUsed: input.forceUsed
+		forceUsed: input.forceUsed,
+		startFailureVerdict: startOutcome.startFailureVerdict
 	});
 	await waitForDaemonHealthyAfterReinstall({
 		expectedVersion: input.resolved.daemonVersion,
@@ -57123,14 +57483,17 @@ async function runDaemonAfterReinstallStartWithRetry(input) {
 			if (result.ok || isDaemonRunAlreadyRunningReason(result.reason) || normalizeDaemonRunReason(result.reason) === "cancelled") process.exitCode = previousExitCode;
 			if (normalizeDaemonRunReason(result.reason) === "start_failed" && attempt < REINSTALL_START_RETRY_ATTEMPTS) {
 				process.exitCode = previousExitCode;
-				await sleep$1(input.startRetryDelayMs);
+				await sleep(input.startRetryDelayMs);
 				continue;
 			}
-			return result.reason;
+			return {
+				reason: result.reason,
+				startFailureVerdict: result.ok === false ? result.startFailureVerdict ?? null : null
+			};
 		} catch (error) {
 			if (attempt < REINSTALL_START_RETRY_ATTEMPTS) {
 				process.exitCode = previousExitCode;
-				await sleep$1(input.startRetryDelayMs);
+				await sleep(input.startRetryDelayMs);
 				continue;
 			}
 			const startupDiagnostic = await readDaemonStartFailureLogDiagnostic({ cursor: startFailureLogCursor });
@@ -57142,7 +57505,10 @@ async function runDaemonAfterReinstallStartWithRetry(input) {
 			});
 		}
 	}
-	return "start_failed";
+	return {
+		reason: "start_failed",
+		startFailureVerdict: null
+	};
 }
 async function resolveDaemonReinstallTargetDesiredState() {
 	const currentContract = await readDaemonServiceContract().catch(() => null);
@@ -57223,7 +57589,7 @@ async function waitForDaemonHealthyAfterReinstall(input) {
 		}).catch(() => null);
 		if (inventory && isDaemonInventoryRunningAndAligned(inventory)) return inventory.runtimeStatus;
 		lastRuntime = inventory?.runtimeStatus ?? await readCurrentObservedDaemonRuntimeStatus();
-		await sleep$1(REINSTALL_VERIFY_POLL_MS);
+		await sleep(REINSTALL_VERIFY_POLL_MS);
 	}
 	const statusText = lastRuntime ? describeDaemonRuntimeStatus(lastRuntime) : "No runtime status available.";
 	throw new Error(`ATS Service repair verification timed out after ${String(input.verifyWaitMs)}ms. ${statusText}`);
@@ -57610,9 +57976,15 @@ async function handleDaemonRunStartFailure(input) {
 		});
 	}
 	process.exitCode = 1;
+	const startFailureVerdict = input.genericErrorPayload.controller ? resolveSystemServiceStartupFailureVerdict({
+		controller: input.genericErrorPayload.controller,
+		error: input.genericErrorPayload.error,
+		detail: failure?.detail ?? null
+	}) : null;
 	return {
 		ok: false,
-		reason: "start_failed"
+		reason: "start_failed",
+		...startFailureVerdict ? { startFailureVerdict } : {}
 	};
 }
 async function runDirectDaemonServiceLoop(input) {
@@ -59292,7 +59664,7 @@ async function waitForDetachedBackgroundProcessStartup(child, startupDelayMs, st
 			reason: startupLifecycle,
 			startupOutput: startupOutput.summary()
 		}));
-		await sleep$1(startupPollMs);
+		await sleep(startupPollMs);
 	}
 	const finalStatus = await readCurrentObservedDaemonRuntimeStatus().catch(() => null);
 	if (finalStatus?.status === "running" && finalStatus.pid === child.pid) return;
@@ -59778,7 +60150,7 @@ async function runAuthMenu(input) {
 }
 async function resolveAuthLoginRequest(input) {
 	const explicitMethod = parseAuthLoginMethod(input.method);
-	const providedToken = normalizeOptionalString$14(input.ott);
+	const providedToken = normalizeOptionalString$15(input.ott);
 	const isInteractiveHuman = input.runtime.resolvedView === "human" && canUseInteractivePrompts(input.runtime);
 	if (providedToken && explicitMethod === LOGIN_METHOD_DEVICE) throw new Error("`--ott` cannot be used with `--method device`");
 	const explicitRequest = await resolveExplicitAuthLoginRequest({
@@ -59960,7 +60332,7 @@ async function runDeviceLoginFlow(input) {
 		authBaseUrl: input.authBaseUrl,
 		clientId: input.clientId,
 		expiresAt: resolveExpiresAt(token.expires_in),
-		scope: normalizeOptionalString$14(token.scope) ?? void 0,
+		scope: normalizeOptionalString$15(token.scope) ?? void 0,
 		user: authUser ?? void 0
 	});
 	emitLineWithHumanSpacer({
@@ -60004,7 +60376,7 @@ async function assertOneTimeTokenAuthSessionSaved(input) {
 	const authState = await getAuthSessionState({ validateRemote: false }).catch(() => null);
 	if (authState?.state !== "valid" || !authState.session) throw new OneTimeTokenAuthError("session_not_saved", `one-time token verified, but ATS could not save a usable local sign-in session (${authState?.state ?? "unknown"}); copy a fresh setup command from ATS Web and retry`);
 	if (authState.session.accessToken !== input.accessToken) throw new OneTimeTokenAuthError("session_not_saved", "one-time token verified, but ATS saved a different local sign-in session; copy a fresh setup command from ATS Web and retry");
-	if (!normalizeOptionalString$14(authState.session.user?.id)) throw new OneTimeTokenAuthError("session_not_saved", "one-time token verified, but the saved local sign-in is missing its ATS account ID; copy a fresh setup command from ATS Web and retry");
+	if (!normalizeOptionalString$15(authState.session.user?.id)) throw new OneTimeTokenAuthError("session_not_saved", "one-time token verified, but the saved local sign-in is missing its ATS account ID; copy a fresh setup command from ATS Web and retry");
 }
 async function promptOneTimeTokenForHuman(input) {
 	const result = await promptTextEntry({
@@ -60013,10 +60385,10 @@ async function promptOneTimeTokenForHuman(input) {
 		allowBack: input.allowBack,
 		backLabel: input.backLabel,
 		requiredMessage: "Enter a one-time sign-in token.",
-		validate: (value) => normalizeOptionalString$14(value) ? null : "Enter a one-time sign-in token."
+		validate: (value) => normalizeOptionalString$15(value) ? null : "Enter a one-time sign-in token."
 	});
 	if (result.status !== "submitted") return result;
-	const token = normalizeOptionalString$14(result.value);
+	const token = normalizeOptionalString$15(result.value);
 	if (!token) throw new OneTimeTokenAuthError("missing_access_token", "one-time token is required");
 	return {
 		status: "submitted",
@@ -60313,7 +60685,7 @@ async function verifyOneTimeToken(input) {
 		if (normalizedMessage.includes("invalid")) throw new OneTimeTokenAuthError("invalid_token", "invalid one-time token; generate a new token and retry");
 		throw new OneTimeTokenAuthError("unknown", `one-time token verification failed: ${message}`);
 	}
-	const accessToken = normalizeOptionalString$14(response.headers.get("set-auth-token"));
+	const accessToken = normalizeOptionalString$15(response.headers.get("set-auth-token"));
 	if (!accessToken) throw new OneTimeTokenAuthError("missing_access_token", "one-time token verified but auth response is missing set-auth-token");
 	return {
 		accessToken,
@@ -60348,8 +60720,8 @@ async function requestDeviceCode(input) {
 	return {
 		device_code: normalizeRequiredString(readStringField$2(payload, "device_code"), "missing device_code in device code response"),
 		user_code: normalizeRequiredString(readStringField$2(payload, "user_code"), "missing user_code in device code response"),
-		verification_uri: normalizeOptionalString$14(readStringField$2(payload, "verification_uri")) ?? void 0,
-		verification_uri_complete: normalizeOptionalString$14(readStringField$2(payload, "verification_uri_complete")) ?? void 0,
+		verification_uri: normalizeOptionalString$15(readStringField$2(payload, "verification_uri")) ?? void 0,
+		verification_uri_complete: normalizeOptionalString$15(readStringField$2(payload, "verification_uri_complete")) ?? void 0,
 		expires_in: readNumberField(payload, "expires_in"),
 		interval: readNumberField(payload, "interval")
 	};
@@ -60371,17 +60743,17 @@ async function requestDeviceToken(input) {
 		ok: true,
 		data: {
 			access_token: normalizeRequiredString(readStringField$2(payload, "access_token"), "missing access_token in device token response"),
-			token_type: normalizeOptionalString$14(readStringField$2(payload, "token_type")) ?? void 0,
+			token_type: normalizeOptionalString$15(readStringField$2(payload, "token_type")) ?? void 0,
 			expires_in: readNumberField(payload, "expires_in"),
-			scope: normalizeOptionalString$14(readStringField$2(payload, "scope")) ?? void 0
+			scope: normalizeOptionalString$15(readStringField$2(payload, "scope")) ?? void 0
 		}
 	};
 	return {
 		ok: false,
 		error: {
-			error: normalizeOptionalString$14(readStringField$2(payload, "error")) ?? void 0,
-			error_description: normalizeOptionalString$14(readStringField$2(payload, "error_description")) ?? void 0,
-			message: normalizeOptionalString$14(readStringField$2(payload, "message")) ?? void 0
+			error: normalizeOptionalString$15(readStringField$2(payload, "error")) ?? void 0,
+			error_description: normalizeOptionalString$15(readStringField$2(payload, "error_description")) ?? void 0,
+			message: normalizeOptionalString$15(readStringField$2(payload, "message")) ?? void 0
 		},
 		status: response.status
 	};
@@ -60398,7 +60770,7 @@ async function pollForDeviceToken(input) {
 			deviceCode: input.deviceCode
 		});
 		if (result.ok) return result.data;
-		const errorCode = normalizeOptionalString$14(result.error.error);
+		const errorCode = normalizeOptionalString$15(result.error.error);
 		if (errorCode === "authorization_pending") {
 			input.onProgress?.({
 				event: "authorization_pending",
@@ -60428,7 +60800,7 @@ async function pollForDeviceToken(input) {
 	throw new DeviceAuthError("expired_token", "browser sign-in timed out; sign in again");
 }
 function resolveVerificationUrl(response, authBaseUrl) {
-	const raw = normalizeOptionalString$14(response.verification_uri_complete) ?? normalizeOptionalString$14(response.verification_uri);
+	const raw = normalizeOptionalString$15(response.verification_uri_complete) ?? normalizeOptionalString$15(response.verification_uri);
 	if (!raw) throw new Error("missing verification_uri in device code response");
 	const url = toAbsoluteUrl(raw, authBaseUrl);
 	if (!url.searchParams.has("user_code")) url.searchParams.set("user_code", response.user_code);
@@ -60469,16 +60841,16 @@ function clampInteger(value, min, max) {
 	return Math.max(min, Math.min(max, Math.floor(value)));
 }
 function resolveClientId(value) {
-	const clientId = normalizeOptionalString$14(value) ?? normalizeOptionalString$14(process.env.ATS_AUTH_CLIENT_ID) ?? DEFAULT_DEVICE_CLIENT_ID;
+	const clientId = normalizeOptionalString$15(value) ?? normalizeOptionalString$15(process.env.ATS_AUTH_CLIENT_ID) ?? DEFAULT_DEVICE_CLIENT_ID;
 	if (!DEVICE_CLIENT_ID_PATTERN.test(clientId)) throw new Error(`invalid client_id "${clientId}" (allowed: letters, numbers, . _ : -)`);
 	return clientId;
 }
 function normalizeRequiredString(value, message) {
-	const normalized = normalizeOptionalString$14(value);
+	const normalized = normalizeOptionalString$15(value);
 	if (!normalized) throw new Error(message);
 	return normalized;
 }
-function normalizeOptionalString$14(value) {
+function normalizeOptionalString$15(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -60506,13 +60878,13 @@ async function parseResponseJson(response) {
 	}
 }
 function extractApiErrorMessage(payload, status) {
-	const errorDescription = normalizeOptionalString$14(readStringField$2(payload, "error_description"));
+	const errorDescription = normalizeOptionalString$15(readStringField$2(payload, "error_description"));
 	if (errorDescription) return errorDescription;
-	const detail = normalizeOptionalString$14(readStringField$2(payload, "detail"));
+	const detail = normalizeOptionalString$15(readStringField$2(payload, "detail"));
 	if (detail) return detail;
-	const message = normalizeOptionalString$14(readStringField$2(payload, "message"));
+	const message = normalizeOptionalString$15(readStringField$2(payload, "message"));
 	if (message) return message;
-	const errorCode = normalizeOptionalString$14(readStringField$2(payload, "error"));
+	const errorCode = normalizeOptionalString$15(readStringField$2(payload, "error"));
 	if (errorCode) return errorCode;
 	return `HTTP ${status}`;
 }
@@ -60586,14 +60958,14 @@ function readAuthUserFromSessionPayload(payload) {
 	};
 }
 function resolveHumanLoginSuccessText(user) {
-	const email = normalizeOptionalString$14(user?.email);
+	const email = normalizeOptionalString$15(user?.email);
 	if (email) return `✅ Welcome ${email}`;
 	return "✅ Signed in.";
 }
 function readOptionalStringField(input, key) {
 	const value = input[key];
 	if (typeof value !== "string") return;
-	return normalizeOptionalString$14(value) ?? void 0;
+	return normalizeOptionalString$15(value) ?? void 0;
 }
 function toDeviceAuthError(error) {
 	if (error instanceof DeviceAuthError) return error;
@@ -60665,8 +61037,8 @@ const COMMAND_AUTH_ACTION_CANCEL = "__command_auth_cancel__";
 async function evaluateCommandAuthentication(input) {
 	const authState = await getAuthSessionState({ validateRemote: true }).catch(() => null);
 	const session = authState?.session ?? null;
-	const authBaseUrl = normalizeOptionalString$13(session?.authBaseUrl);
-	const email = normalizeOptionalString$13(session?.user?.email);
+	const authBaseUrl = normalizeOptionalString$14(session?.authBaseUrl);
+	const email = normalizeOptionalString$14(session?.user?.email);
 	const isCompatibleWithGateway = authState?.state === "valid" && session !== null && (!(input?.gatewayUrl && input.gatewayUrl.trim().length > 0) || canAttachAuthTokenToRequest(session, input.gatewayUrl));
 	return {
 		status: authState?.state === "valid" && session !== null && !isCompatibleWithGateway ? "mismatch" : authState?.state ?? "unknown",
@@ -60677,7 +61049,7 @@ async function evaluateCommandAuthentication(input) {
 }
 async function ensureCommandAuthenticationOrCancel(input) {
 	const currentState = getCurrentCommandCheckState();
-	if (isCurrentCommandCheckScopeActive() && currentState.signIn && currentState.signIn.status === "valid" && currentState.signIn.checkedGatewayUrl === normalizeOptionalString$13(input.gatewayUrl)) return true;
+	if (isCurrentCommandCheckScopeActive() && currentState.signIn && currentState.signIn.status === "valid" && currentState.signIn.checkedGatewayUrl === normalizeOptionalString$14(input.gatewayUrl)) return true;
 	const auth = input.evaluated ?? await evaluateCommandAuthentication({ gatewayUrl: input.gatewayUrl });
 	if (auth.status === "valid" && auth.session) return true;
 	const canPrompt = input.allowPrompt ?? input.runtime.interactive;
@@ -60727,12 +61099,12 @@ async function ensureCommandAuthenticationOrCancel(input) {
 		return false;
 	}
 	if (isCurrentCommandCheckScopeActive()) currentState.signIn = {
-		checkedGatewayUrl: normalizeOptionalString$13(input.gatewayUrl),
+		checkedGatewayUrl: normalizeOptionalString$14(input.gatewayUrl),
 		status: "valid"
 	};
 	return true;
 }
-function normalizeOptionalString$13(value) {
+function normalizeOptionalString$14(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -61029,7 +61401,7 @@ function formatStatusTextForHuman(value) {
 	const normalized = value.replaceAll("_", " ");
 	return normalized[0]?.toUpperCase() + normalized.slice(1);
 }
-function normalizeOptionalString$12(value) {
+function normalizeOptionalString$13(value) {
 	if (typeof value !== "string") return null;
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : null;
@@ -62103,8 +62475,8 @@ async function promptInteractiveCustomAgentAddDetails(input) {
 			status: "submitted",
 			value: {
 				dir: dirResult.value,
-				id: normalizeOptionalString$12(idResult.value) ?? void 0,
-				idInput: normalizeOptionalString$12(idResult.value) ?? void 0
+				id: normalizeOptionalString$13(idResult.value) ?? void 0,
+				idInput: normalizeOptionalString$13(idResult.value) ?? void 0
 			}
 		};
 	}
@@ -62194,7 +62566,7 @@ async function promptRequiredInteractiveText(input) {
 		});
 		if (valueResult.status === "cancelled" || valueResult.status === "back") return valueResult;
 		if (valueResult.status !== "selected") continue;
-		const normalizedValue = normalizeOptionalString$12(valueResult.value);
+		const normalizedValue = normalizeOptionalString$13(valueResult.value);
 		if (!normalizedValue) {
 			process.stderr.write(`${input.requiredMessage}\n`);
 			continue;
@@ -62777,7 +63149,7 @@ async function runAgentsEnable(input) {
 		handled: input.presentation === "handoff"
 	});
 	const explicitIds = normalizeAgentIds(input.agent ?? []);
-	const explicitInstallId = normalizeOptionalString$12(input.install);
+	const explicitInstallId = normalizeOptionalString$13(input.install);
 	validateBuiltinAgentSelectionInput({
 		all: input.all,
 		command: "enable",
@@ -62874,7 +63246,7 @@ async function runAgentsRepair(input) {
 		handled: input.presentation === "handoff"
 	});
 	const explicitIds = normalizeAgentIds(input.agent ?? []);
-	const explicitInstallId = normalizeOptionalString$12(input.install);
+	const explicitInstallId = normalizeOptionalString$13(input.install);
 	validateBuiltinAgentSelectionInput({
 		all: input.all,
 		command: "repair",
@@ -63534,11 +63906,11 @@ async function runAgentsCustomAdd(input) {
 		resolvedView: runtime.resolvedView,
 		command: "custom_add"
 	});
-	const name = normalizeOptionalString$12(input.name);
-	const dir = normalizeOptionalString$12(input.dir);
+	const name = normalizeOptionalString$13(input.name);
+	const dir = normalizeOptionalString$13(input.dir);
 	if (!(name && dir)) throw new Error("agents.custom.invalid_argument: provide --name <name> and --dir <dir>");
 	if (!isAbsolute(dir)) throw new Error("agents.custom.invalid_argument: --dir must be an absolute path");
-	const id = normalizeOptionalString$12(input.id) ?? void 0;
+	const id = normalizeOptionalString$13(input.id) ?? void 0;
 	const target = await addAgentCustomTarget({
 		name,
 		dir,
@@ -63578,8 +63950,8 @@ async function runAgentsCustomUpdate(input) {
 	});
 	const id = normalizeAgentId(input.id ?? "");
 	if (!id) throw new Error("agents.custom.invalid_argument: provide --id <id>");
-	const name = normalizeOptionalString$12(input.name) ?? void 0;
-	const dir = normalizeOptionalString$12(input.dir) ?? void 0;
+	const name = normalizeOptionalString$13(input.name) ?? void 0;
+	const dir = normalizeOptionalString$13(input.dir) ?? void 0;
 	if (name === void 0 && dir === void 0) throw new Error("agents.custom.invalid_argument: provide at least one option (--name/--dir)");
 	if (dir && !isAbsolute(dir)) throw new Error("agents.custom.invalid_argument: --dir must be an absolute path");
 	const updated = await updateAgentCustomTarget({
@@ -64687,7 +65059,7 @@ async function waitForExecutionReadinessAfterBinding(input) {
 			requestContext: input.requestContext
 		});
 		if (isAgentExecutionReadyOrConnecting(latest.agentExecutionReadiness)) return latest;
-		await sleep$1(EXECUTION_READINESS_AFTER_BINDING_RETRY_DELAY_MS);
+		await sleep(EXECUTION_READINESS_AFTER_BINDING_RETRY_DELAY_MS);
 	}
 	return latest;
 }
@@ -65288,9 +65660,9 @@ async function prepareAuthenticatedSpaceCommandContext(input) {
 	};
 }
 async function ensureSpaceCommandGatewayAuthenticationOrCancel(input) {
-	const targetGatewayUrl = normalizeOptionalString$11(input.gatewayUrl);
-	if (!targetGatewayUrl) return normalizeOptionalString$11(input.authenticatedGatewayUrl);
-	const authenticatedGatewayUrl = normalizeOptionalString$11(input.authenticatedGatewayUrl);
+	const targetGatewayUrl = normalizeOptionalString$12(input.gatewayUrl);
+	if (!targetGatewayUrl) return normalizeOptionalString$12(input.authenticatedGatewayUrl);
+	const authenticatedGatewayUrl = normalizeOptionalString$12(input.authenticatedGatewayUrl);
 	if (authenticatedGatewayUrl !== null && authenticatedGatewayUrl === targetGatewayUrl) return authenticatedGatewayUrl;
 	if (!await ensureHumanSpaceCommandAuthenticationOrCancel({
 		runtime: input.runtime,
@@ -65359,7 +65731,7 @@ function isValidSpaceId$1(space) {
 function isProfileKindSupportedForSpaceCommand(profileKind) {
 	return profileKind === "human" || profileKind === "agent";
 }
-function normalizeOptionalString$11(value) {
+function normalizeOptionalString$12(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -65573,7 +65945,7 @@ function toErrorMessage$13(error) {
 //#endregion
 //#region src/space/command-http-errors.ts
 const HTTP_STATUS_IN_TEXT_REGEX = /^HTTP\s+(\d{3}):/i;
-function normalizeOptionalString$10(value) {
+function normalizeOptionalString$11(value) {
 	if (typeof value !== "string") return null;
 	const normalized = value.trim();
 	return normalized.length > 0 ? normalized : null;
@@ -65822,13 +66194,13 @@ function resolveKnownSpaceSortKey(space) {
 	};
 }
 function parseKnownSpaceTimestamp(value) {
-	const normalized = normalizeOptionalString$10(value);
+	const normalized = normalizeOptionalString$11(value);
 	if (!normalized) return null;
 	const timestamp = Date.parse(normalized);
 	return Number.isFinite(timestamp) ? timestamp : null;
 }
 function normalizeKnownSpaceSortName(value) {
-	return normalizeOptionalString$10(value)?.toLowerCase() ?? "untitled-space";
+	return normalizeOptionalString$11(value)?.toLowerCase() ?? "untitled-space";
 }
 function normalizeKnownSpaceVisibilityScope(visibilityScope) {
 	return visibilityScope === "owner" ? "owner" : "profile";
@@ -65975,7 +66347,7 @@ function buildKnownSpaceDisplayProjection(input) {
 	});
 }
 function resolveKnownSpaceJoinedTimestamp(space) {
-	return normalizeOptionalString$10(space.lastJoinedAt) ?? resolveKnownSpaceLastSeenTimestamp(space.lastSeenTs);
+	return normalizeOptionalString$11(space.lastJoinedAt) ?? resolveKnownSpaceLastSeenTimestamp(space.lastSeenTs);
 }
 function resolveKnownSpaceLastSeenTimestamp(value) {
 	if (typeof value !== "number" || !Number.isFinite(value) || value < 0xe8d4a51000) return null;
@@ -66066,7 +66438,7 @@ function resolveSpaceMemberJoinOnlyReason(candidate) {
 	if (candidate.controllerEnabled !== true || typeof candidate.agentControllerRef !== "string" || candidate.agentControllerRef.trim().length === 0) return "Not connected to a local agent on this device yet.";
 	if (candidate.localParticipationReadiness === "not_running") return "ATS Service is not running on this device.";
 	if (candidate.localParticipationReadiness === "not_installed") return "ATS Service is not installed on this device.";
-	const reasonText = normalizeOptionalString$10(candidate.localParticipationReasonText);
+	const reasonText = normalizeOptionalString$11(candidate.localParticipationReasonText);
 	if (reasonText) {
 		const sanitizedReasonText = sanitizeSingleLinePromptText(reasonText);
 		if (sanitizedReasonText) return sanitizedReasonText.endsWith(".") ? sanitizedReasonText : `${sanitizedReasonText}.`;
@@ -66098,7 +66470,7 @@ function formatSpaceMemberRecoveryNextAction(action) {
 	return `Use \`${formatAtsCliCommand(action.command)}\` to check the local reply path.`;
 }
 function resolveSpaceMemberTerminalProfileLabel(profileName) {
-	return sanitizeSingleLinePromptText(normalizeOptionalString$10(profileName)) || "This agent";
+	return sanitizeSingleLinePromptText(normalizeOptionalString$11(profileName)) || "This agent";
 }
 function resolveSpaceMemberTerminalLocalTargetLabel(input) {
 	const displayName = sanitizeSingleLinePromptText(input.displayName);
@@ -66152,8 +66524,8 @@ function formatKnownSpaceDeletedNoticeMessage(deletedNotices) {
 }
 function formatKnownSpaceDeletedNoticeLabel(item, resolvedView) {
 	const name = sanitizeSingleLinePromptText(item.spaceName) || shortenSpaceId(item.spaceId);
-	const deletedByName = normalizeOptionalString$10(item.deletedByProfileName);
-	const deletedById = normalizeOptionalString$10(item.deletedByProfileId);
+	const deletedByName = normalizeOptionalString$11(item.deletedByProfileName);
+	const deletedById = normalizeOptionalString$11(item.deletedByProfileId);
 	if (resolvedView === "human") return deletedByName ? `${name} (deleted by ${sanitizeSingleLinePromptText(deletedByName)})` : `${name} (deleted)`;
 	if (deletedByName && deletedById) return `${name} (deleted by ${sanitizeSingleLinePromptText(deletedByName)} · ${sanitizeSingleLinePromptText(deletedById)})`;
 	if (deletedByName) return `${name} (deleted by ${sanitizeSingleLinePromptText(deletedByName)})`;
@@ -66842,7 +67214,7 @@ function buildHumanKnownSpaceSearchText(input) {
 		formatSpaceDisplayValue(projection.spaceName, ""),
 		formatSpaceDisplayValue(projection.creatorProfileName, ""),
 		formatSpaceDisplayValue(projection.creatorProfileId, ""),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(input.space.creatorOwnerUserId)),
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(input.space.creatorOwnerUserId)),
 		formatSpaceDisplayValue(projection.availableViaProfileName, ""),
 		formatSpaceDisplayValue(projection.availableViaProfileId, ""),
 		formatSpaceDisplayValue(projection.creatorDisplayName, ""),
@@ -67240,15 +67612,15 @@ function requireReadableSpaceConfigList(result, operation) {
 	return result.items;
 }
 function filterKnownSpacesCreatedByProfile(input) {
-	const profileId = normalizeOptionalString$10(input.profileId);
+	const profileId = normalizeOptionalString$11(input.profileId);
 	if (!profileId) return [];
 	return input.known.filter((item) => {
-		return (typeof item.creatorProfileId === "string" ? normalizeOptionalString$10(item.creatorProfileId) : null) === profileId;
+		return (typeof item.creatorProfileId === "string" ? normalizeOptionalString$11(item.creatorProfileId) : null) === profileId;
 	});
 }
 async function resolveOwnedKnownSpacesForDelete(input) {
-	const currentProfileId = normalizeOptionalString$10(input.atsProfileId);
-	const currentOwnerUserId = normalizeOptionalString$10(input.ownerUserId);
+	const currentProfileId = normalizeOptionalString$11(input.atsProfileId);
+	const currentOwnerUserId = normalizeOptionalString$11(input.ownerUserId);
 	if (!currentProfileId) return [];
 	const owned = [];
 	for (const candidate of input.known) {
@@ -67326,21 +67698,21 @@ async function findKnownSpaceForDeleteBySpaceId(input) {
 }
 function classifyKnownSpaceOwnershipForDelete(input) {
 	const creatorKind = resolveMetaCreatorKind(input.item.creatorKind);
-	const creatorProfileId = normalizeOptionalString$10(input.item.creatorProfileId);
+	const creatorProfileId = normalizeOptionalString$11(input.item.creatorProfileId);
 	if (!creatorKind) return "unknown";
 	if (creatorKind === "system") return "foreign";
 	if (creatorKind === "human") {
 		if (!creatorProfileId) return "unknown";
 		return creatorProfileId === input.currentProfileId ? "owned" : "foreign";
 	}
-	const creatorOwnerUserId = normalizeOptionalString$10(input.item.creatorOwnerUserId);
+	const creatorOwnerUserId = normalizeOptionalString$11(input.item.creatorOwnerUserId);
 	if (!(creatorOwnerUserId && input.currentOwnerUserId)) return "unknown";
 	return creatorOwnerUserId === input.currentOwnerUserId ? "owned" : "foreign";
 }
 function shouldHydrateCreatorProfileNameForDelete(input) {
-	if (normalizeOptionalString$10(input.item.creatorProfileName)) return false;
+	if (normalizeOptionalString$11(input.item.creatorProfileName)) return false;
 	const creatorKind = resolveMetaCreatorKind(input.item.creatorKind);
-	const creatorProfileId = normalizeOptionalString$10(input.item.creatorProfileId);
+	const creatorProfileId = normalizeOptionalString$11(input.item.creatorProfileId);
 	if (creatorKind === "human" && creatorProfileId === input.currentProfileId) return false;
 	return true;
 }
@@ -67357,9 +67729,9 @@ async function hydrateKnownSpaceForDeleteFromMeta(input) {
 		const creatorProfileName = resolveMetaCreatorProfileName(meta.creator);
 		const creatorOwnerUserId = resolveMetaCreatorOwnerUserId(meta.creator);
 		const creatorKind = resolveMetaCreatorKind(meta.creator?.kind);
-		const spaceName = typeof meta.name === "string" ? normalizeOptionalString$10(meta.name) : null;
-		const spaceCreatedAt = typeof meta.createdAt === "string" ? normalizeOptionalString$10(meta.createdAt) : null;
-		const spaceUpdatedAt = typeof meta.updatedAt === "string" ? normalizeOptionalString$10(meta.updatedAt) : null;
+		const spaceName = typeof meta.name === "string" ? normalizeOptionalString$11(meta.name) : null;
+		const spaceCreatedAt = typeof meta.createdAt === "string" ? normalizeOptionalString$11(meta.createdAt) : null;
+		const spaceUpdatedAt = typeof meta.updatedAt === "string" ? normalizeOptionalString$11(meta.updatedAt) : null;
 		return {
 			...input.item,
 			...spaceName === null ? {} : { name: spaceName },
@@ -67375,11 +67747,11 @@ async function hydrateKnownSpaceForDeleteFromMeta(input) {
 	}
 }
 function applyKnownSpaceDeleteCreatorFallback(input) {
-	const creatorProfileName = normalizeOptionalString$10(input.item.creatorProfileName);
-	const creatorOwnerUserId = normalizeOptionalString$10(input.item.creatorOwnerUserId);
-	const creatorProfileId = normalizeOptionalString$10(input.item.creatorProfileId);
-	const nextCreatorProfileName = creatorProfileName ?? (creatorProfileId === input.currentProfileId ? normalizeOptionalString$10(input.currentProfileName) : null);
-	const nextCreatorOwnerUserId = creatorOwnerUserId ?? normalizeOptionalString$10(input.currentOwnerUserId);
+	const creatorProfileName = normalizeOptionalString$11(input.item.creatorProfileName);
+	const creatorOwnerUserId = normalizeOptionalString$11(input.item.creatorOwnerUserId);
+	const creatorProfileId = normalizeOptionalString$11(input.item.creatorProfileId);
+	const nextCreatorProfileName = creatorProfileName ?? (creatorProfileId === input.currentProfileId ? normalizeOptionalString$11(input.currentProfileName) : null);
+	const nextCreatorOwnerUserId = creatorOwnerUserId ?? normalizeOptionalString$11(input.currentOwnerUserId);
 	if (nextCreatorProfileName === creatorProfileName && nextCreatorOwnerUserId === creatorOwnerUserId) return input.item;
 	return {
 		...input.item,
@@ -67549,9 +67921,9 @@ function maybeEmitSpaceCacheMaintenanceNotice(input) {
 function normalizeMetaForHistory(meta) {
 	const creatorProfileId = resolveMetaCreatorProfileId(meta.creator);
 	const creatorKind = resolveMetaCreatorKind(meta.creator?.kind);
-	const spaceName = typeof meta.name === "string" ? normalizeOptionalString$10(meta.name) : null;
-	const spaceCreatedAt = typeof meta.createdAt === "string" ? normalizeOptionalString$10(meta.createdAt) : null;
-	const spaceUpdatedAt = typeof meta.updatedAt === "string" ? normalizeOptionalString$10(meta.updatedAt) : null;
+	const spaceName = typeof meta.name === "string" ? normalizeOptionalString$11(meta.name) : null;
+	const spaceCreatedAt = typeof meta.createdAt === "string" ? normalizeOptionalString$11(meta.createdAt) : null;
+	const spaceUpdatedAt = typeof meta.updatedAt === "string" ? normalizeOptionalString$11(meta.updatedAt) : null;
 	if (!(spaceName !== null || creatorProfileId !== null || creatorKind !== null || spaceCreatedAt !== null || spaceUpdatedAt !== null)) return null;
 	return {
 		...spaceName === null ? {} : { spaceName },
@@ -67563,19 +67935,19 @@ function normalizeMetaForHistory(meta) {
 }
 function resolveMetaCreatorProfileId(creator) {
 	if (!creator || typeof creator !== "object") return null;
-	if (typeof creator.profileId === "string") return normalizeOptionalString$10(creator.profileId);
-	if (typeof creator.profile === "string") return normalizeOptionalString$10(creator.profile);
+	if (typeof creator.profileId === "string") return normalizeOptionalString$11(creator.profileId);
+	if (typeof creator.profile === "string") return normalizeOptionalString$11(creator.profile);
 	return null;
 }
 function resolveMetaCreatorProfileName(creator) {
 	if (!creator || typeof creator !== "object") return null;
 	if (typeof creator.profileName !== "string") return null;
-	return normalizeOptionalString$10(creator.profileName);
+	return normalizeOptionalString$11(creator.profileName);
 }
 function resolveMetaCreatorOwnerUserId(creator) {
 	if (!creator || typeof creator !== "object") return null;
 	if (typeof creator.ownerUserId !== "string") return null;
-	return normalizeOptionalString$10(creator.ownerUserId);
+	return normalizeOptionalString$11(creator.ownerUserId);
 }
 function resolveMetaCreatorKind(kind) {
 	if (kind === "human" || kind === "agent" || kind === "system") return kind;
@@ -82055,18 +82427,18 @@ function normalizeSpaceJoinMembershipCandidate(value) {
 		profileKind,
 		alreadyJoined: candidate.alreadyJoined === true,
 		needsActivation: candidate.needsActivation === true,
-		profileHandle: normalizeOptionalString$9(candidate.profileHandle),
-		ownerProfileName: normalizeOptionalString$9(candidate.ownerProfileName),
-		ownerUserId: normalizeOptionalString$9(candidate.ownerUserId),
-		ownerName: normalizeOptionalString$9(candidate.ownerName),
-		agentControllerRef: normalizeOptionalString$9(candidate.agentControllerRef),
+		profileHandle: normalizeOptionalString$10(candidate.profileHandle),
+		ownerProfileName: normalizeOptionalString$10(candidate.ownerProfileName),
+		ownerUserId: normalizeOptionalString$10(candidate.ownerUserId),
+		ownerName: normalizeOptionalString$10(candidate.ownerName),
+		agentControllerRef: normalizeOptionalString$10(candidate.agentControllerRef),
 		controllerEnabled: candidate.controllerEnabled === true
 	};
 }
 function resolveSpaceJoinMembershipProfileKind(value) {
 	return value === "human" || value === "agent" ? value : null;
 }
-function normalizeOptionalString$9(value) {
+function normalizeOptionalString$10(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function buildLocallyCreatedPendingSpaceJoinMembershipCandidate(profile) {
@@ -83209,7 +83581,7 @@ async function syncProfileSpaceHistoryForCreate(input) {
 	const gatewayHost = resolveGatewayHost(input.baseUrl);
 	if (!gatewayHost) return;
 	const normalizedMeta = input.meta ? normalizeMetaForHistory(input.meta) : null;
-	const fallbackSpaceName = normalizeOptionalString$10(input.fallbackSpaceName);
+	const fallbackSpaceName = normalizeOptionalString$11(input.fallbackSpaceName);
 	const historySpaceName = normalizedMeta?.spaceName === void 0 ? fallbackSpaceName : normalizedMeta.spaceName;
 	const requestContext = buildAtsRequestContextFromProfile({ atsProfile: input.atsProfile });
 	await upsertProfileSpaceHistory({
@@ -84032,7 +84404,7 @@ async function runSpaceList(input) {
 	});
 }
 function resolveSpaceListAccountIndexScope(input) {
-	if (normalizeOptionalString$10(input.explicitProfile)) return "profile";
+	if (normalizeOptionalString$11(input.explicitProfile)) return "profile";
 	if (input.atsProfile.profileKind === "human" && input.atsProfile.isDefault === true) return "account";
 	return "profile";
 }
@@ -84072,13 +84444,13 @@ function buildSpaceListProofPayload() {
 }
 async function runSpaceAddMembers(input) {
 	const hasExplicitBaseUrlInput = String(input.baseUrl ?? "").trim().length > 0;
-	const explicitMemberIds = (input.members ?? []).map((memberId) => normalizeOptionalString$10(memberId)).filter((memberId) => Boolean(memberId));
+	const explicitMemberIds = (input.members ?? []).map((memberId) => normalizeOptionalString$11(memberId)).filter((memberId) => Boolean(memberId));
 	if (input.all === true || explicitMemberIds.length > 0) validateSpaceMemberSelectionInput({
 		all: input.all === true,
 		command: resolveSpaceAddMembersSelectionCommand(input.mode ?? "profiles"),
 		explicitMemberIds
 	});
-	const currentProfileId = normalizeOptionalString$10(input.profile) ?? getCurrentCommandCheckState().selectedProfile?.profile?.atsProfileId ?? null;
+	const currentProfileId = normalizeOptionalString$11(input.profile) ?? getCurrentCommandCheckState().selectedProfile?.profile?.atsProfileId ?? null;
 	if (currentProfileId && explicitMemberIds.includes(currentProfileId) && input.allowCurrentProfileMember !== true) throw createSpaceAddMembersCurrentProfileGuideError({ profileId: currentProfileId });
 	const context = await prepareAuthenticatedSpaceCommandContext({
 		profile: input.profile,
@@ -84155,8 +84527,8 @@ async function runSpaceAddMembers(input) {
 }
 async function runSpaceRemoveMembers(input) {
 	const hasExplicitBaseUrlInput = String(input.baseUrl ?? "").trim().length > 0;
-	const explicitMemberIds = (input.members ?? []).map((memberId) => normalizeOptionalString$10(memberId)).filter((memberId) => Boolean(memberId));
-	const currentProfileId = normalizeOptionalString$10(input.profile) ?? getCurrentCommandCheckState().selectedProfile?.profile?.atsProfileId ?? null;
+	const explicitMemberIds = (input.members ?? []).map((memberId) => normalizeOptionalString$11(memberId)).filter((memberId) => Boolean(memberId));
+	const currentProfileId = normalizeOptionalString$11(input.profile) ?? getCurrentCommandCheckState().selectedProfile?.profile?.atsProfileId ?? null;
 	if (currentProfileId && explicitMemberIds.includes(currentProfileId)) throw createSpaceRemoveMembersCurrentProfileGuideError({ profileId: currentProfileId });
 	const context = await prepareAuthenticatedSpaceCommandContext({
 		profile: input.profile,
@@ -85244,7 +85616,7 @@ async function runSpaceDelete(input) {
 	if (atsProfile.profileKind !== "human") throw createSpaceDeleteHumanApprovalGuideError("space delete requires a human ATS profile.");
 	const atsProfileId = atsProfile.atsProfileId;
 	const accountContext = await resolveCurrentAtsAccountContext().catch(() => null);
-	const ownerUserIdForDelete = normalizeOptionalString$10(atsProfile.ownerUserId) ?? normalizeOptionalString$10(accountContext?.user?.id) ?? void 0;
+	const ownerUserIdForDelete = normalizeOptionalString$11(atsProfile.ownerUserId) ?? normalizeOptionalString$11(accountContext?.user?.id) ?? void 0;
 	for (;;) {
 		const targets = await resolveSpaceDeleteTargets({
 			atsProfile: {
@@ -85454,7 +85826,7 @@ async function deleteSpaceTargetWithCleanup(input) {
 	return true;
 }
 async function deleteSpaceWithHumanFallback(input) {
-	const approvedAgentCreatorProfileId = input.target.creatorKind === "agent" ? normalizeOptionalString$10(input.target.creatorProfileId) ?? void 0 : void 0;
+	const approvedAgentCreatorProfileId = input.target.creatorKind === "agent" ? normalizeOptionalString$11(input.target.creatorProfileId) ?? void 0 : void 0;
 	let nextDeletePassword = input.password;
 	let lastPasswordError = null;
 	for (let attempt = 0; attempt < MAX_DELETE_PASSWORD_PROMPT_ATTEMPTS; attempt += 1) try {
@@ -85589,7 +85961,7 @@ function isAuthUpstreamUnavailableError(input) {
 function summarizeFailedDeleteTargets(failures) {
 	const MAX_VISIBLE = 3;
 	const names = failures.slice(0, MAX_VISIBLE).map((item) => {
-		const label = normalizeOptionalString$10(item.target.name);
+		const label = normalizeOptionalString$11(item.target.name);
 		if (label) return label;
 		return item.target.space;
 	});
@@ -86112,7 +86484,7 @@ async function resolveSpaceLeaveTarget(input) {
 async function confirmSpaceLeave(input) {
 	if (!(input.allowPrompt && input.resolvedView === "human")) return "confirmed";
 	const confirmed = await confirm({
-		message: `Leave space ${normalizeOptionalString$10(input.target.name) ?? input.target.space}? You will stop seeing this space in your active list.`,
+		message: `Leave space ${normalizeOptionalString$11(input.target.name) ?? input.target.space}? You will stop seeing this space in your active list.`,
 		initialValue: false
 	});
 	if (isCancel(confirmed)) {
@@ -86314,7 +86686,7 @@ async function resolveSpaceMemberCandidatesForRemove(input) {
 		requestContext: buildAtsRequestContextFromProfile({ atsProfile: input.currentProfile }),
 		...input.password === void 0 ? {} : { spacePassword: input.password }
 	});
-	const currentOwnerUserId = normalizeOptionalString$10(input.currentOwnerUserId);
+	const currentOwnerUserId = normalizeOptionalString$11(input.currentOwnerUserId);
 	const creatorProfileIds = /* @__PURE__ */ new Set();
 	const allProfiles = await listAtsProfiles();
 	const localProfileById = new Map(allProfiles.map((profile) => [profile.atsProfileId, profile]));
@@ -86323,7 +86695,7 @@ async function resolveSpaceMemberCandidatesForRemove(input) {
 	for (const member of snapshotMembers) if (member.memberSource === "space_creator") creatorProfileIds.add(member.profileId);
 	const activeMembers = snapshotMembers.filter((member) => {
 		if (!currentOwnerUserId) return true;
-		return normalizeOptionalString$10(member.ownerUserId) === currentOwnerUserId;
+		return normalizeOptionalString$11(member.ownerUserId) === currentOwnerUserId;
 	}).filter((member) => member.profileId !== input.currentProfile.atsProfileId).filter((member) => member.memberSource !== "space_creator").map((member) => hydrateSpaceRemoveMemberCandidate({
 		candidate: toSpaceRemoveMemberCandidateFromSnapshot({
 			member,
@@ -86340,7 +86712,7 @@ async function resolveSpaceMemberCandidatesForRemove(input) {
 		const { profileKind } = profile;
 		if (profile.status !== "active" || !isSpaceMembershipProfileKind(profileKind)) continue;
 		if (profile.atsProfileId === input.currentProfile.atsProfileId) continue;
-		if (currentOwnerUserId && normalizeOptionalString$10(profile.ownerUserId) !== currentOwnerUserId) continue;
+		if (currentOwnerUserId && normalizeOptionalString$11(profile.ownerUserId) !== currentOwnerUserId) continue;
 		explicitFallbackById.set(profile.atsProfileId, toSpaceRemoveMemberCandidateFromProfile({
 			...profile,
 			profileKind
@@ -86356,8 +86728,8 @@ function buildOwnerProfileNameByOwnerUserId(profiles) {
 	const ownerProfileMap = /* @__PURE__ */ new Map();
 	const activeHumanProfiles = profiles.filter((profile) => profile.status === "active").filter((profile) => profile.profileKind === "human");
 	for (const profile of activeHumanProfiles) {
-		const ownerUserId = normalizeOptionalString$10(profile.ownerUserId);
-		const profileName = normalizeOptionalString$10(profile.profileName);
+		const ownerUserId = normalizeOptionalString$11(profile.ownerUserId);
+		const profileName = normalizeOptionalString$11(profile.profileName);
 		if (!(ownerUserId && profileName)) continue;
 		if (!ownerProfileMap.has(ownerUserId)) {
 			ownerProfileMap.set(ownerUserId, profileName);
@@ -86671,7 +87043,7 @@ async function applySpaceAddMembers(input) {
 	const alreadyMemberProfileIds = new Set(response.alreadyMemberIds);
 	const responseItemByProfileId = new Map(response.items.map((item) => [item.profileId, item]));
 	const lastJoinedAt = (/* @__PURE__ */ new Date()).toISOString();
-	const spaceName = normalizeOptionalString$10(input.spaceName);
+	const spaceName = normalizeOptionalString$11(input.spaceName);
 	for (const candidate of selectedCandidates) {
 		const nextCandidate = hydrateSpaceMemberCandidateFromResponseItem({
 			candidate,
@@ -86714,14 +87086,14 @@ function hydrateSpaceMemberCandidateFromResponseItem(input) {
 		...input.candidate,
 		profileName: input.item.profileName,
 		profileKind: input.item.profileKind,
-		ownerUserId: normalizeOptionalString$10(input.item.ownerUserId) ?? void 0,
-		ownerName: normalizeOptionalString$10(input.item.ownerName) ?? void 0,
+		ownerUserId: normalizeOptionalString$11(input.item.ownerUserId) ?? void 0,
+		ownerName: normalizeOptionalString$11(input.item.ownerName) ?? void 0,
 		targetMentionLabel: resolvePrimaryMentionLabelFromSpaceMemberItem(input.item),
-		...input.item.profileKind === "agent" ? { agentControllerRef: normalizeOptionalString$10(input.item.agentControllerRef) ?? input.candidate.agentControllerRef } : {}
+		...input.item.profileKind === "agent" ? { agentControllerRef: normalizeOptionalString$11(input.item.agentControllerRef) ?? input.candidate.agentControllerRef } : {}
 	};
 }
 function resolvePrimaryMentionLabelFromSpaceMemberItem(item) {
-	const mentionAlias = normalizeOptionalString$10(item.mentionAlias);
+	const mentionAlias = normalizeOptionalString$11(item.mentionAlias);
 	if (mentionAlias) return mentionAlias;
 	return resolveSingleSpaceMentionLabels({
 		mentionAlias,
@@ -87150,7 +87522,7 @@ async function persistSpaceAddMembersJoinNotices(input) {
 function buildKnownMentionLabelByProfileId(members) {
 	const labelsByProfileId = /* @__PURE__ */ new Map();
 	for (const member of members) {
-		const targetMentionLabel = normalizeOptionalString$10(member.targetMentionLabel);
+		const targetMentionLabel = normalizeOptionalString$11(member.targetMentionLabel);
 		if (targetMentionLabel) labelsByProfileId.set(member.profileId, targetMentionLabel);
 	}
 	return labelsByProfileId;
@@ -87290,9 +87662,9 @@ function buildHumanSpaceRemoveMemberCandidateSearchText(candidate) {
 		sanitizeSingleLinePromptText(candidate.profileId),
 		sanitizeSingleLinePromptText(candidate.profileName),
 		sanitizeSingleLinePromptText(candidate.profileKind),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(candidate.profileHandle)),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(candidate.ownerName)),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(candidate.ownerUserId))
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(candidate.profileHandle)),
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(candidate.ownerName)),
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(candidate.ownerUserId))
 	].filter((value) => typeof value === "string").join("\n");
 }
 function formatSpaceMemberCandidateLabel(candidate) {
@@ -87326,10 +87698,10 @@ function buildHumanSpaceMemberCandidateSearchText(candidate) {
 		sanitizeSingleLinePromptText(candidate.profileId),
 		sanitizeSingleLinePromptText(candidate.profileName),
 		sanitizeSingleLinePromptText(candidate.profileKind),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(candidate.ownerProfileName)),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(candidate.ownerName)),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(candidate.ownerUserId)),
-		sanitizeSingleLinePromptText(normalizeOptionalString$10(candidate.agentControllerRef)),
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(candidate.ownerProfileName)),
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(candidate.ownerName)),
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(candidate.ownerUserId)),
+		sanitizeSingleLinePromptText(normalizeOptionalString$11(candidate.agentControllerRef)),
 		...resolveSpaceMemberCandidateStatusBadges(candidate),
 		candidate.alreadyJoined ? "already in this space" : null,
 		candidate.needsActivation ? "needs mention setup" : null
@@ -87350,15 +87722,15 @@ function toSpaceRemoveMemberCandidateFromSnapshot(input) {
 		profileId: input.member.profileId,
 		profileName: input.member.profileName,
 		profileKind: input.member.profileKind,
-		targetMentionLabel: normalizeOptionalString$10(input.targetMentionLabel),
-		ownerUserId: normalizeOptionalString$10(input.member.ownerUserId),
-		ownerName: normalizeOptionalString$10(input.member.ownerName),
-		creatorProfileId: input.member.memberSource === "space_creator" ? normalizeOptionalString$10(input.member.profileId) : null
+		targetMentionLabel: normalizeOptionalString$11(input.targetMentionLabel),
+		ownerUserId: normalizeOptionalString$11(input.member.ownerUserId),
+		ownerName: normalizeOptionalString$11(input.member.ownerName),
+		creatorProfileId: input.member.memberSource === "space_creator" ? normalizeOptionalString$11(input.member.profileId) : null
 	};
 }
 function hydrateSpaceRemoveMemberCandidate(input) {
 	if (input.candidate.profileHandle) return input.candidate;
-	const profileHandle = normalizeOptionalString$10(input.profile?.profileHandle);
+	const profileHandle = normalizeOptionalString$11(input.profile?.profileHandle);
 	if (!profileHandle) return input.candidate;
 	return {
 		...input.candidate,
@@ -87372,8 +87744,8 @@ function toSpaceRemoveMemberCandidateFromProfile(profile) {
 		profileName: profile.profileName,
 		profileKind: profile.profileKind,
 		targetMentionLabel: null,
-		ownerUserId: normalizeOptionalString$10(profile.ownerUserId),
-		ownerName: normalizeOptionalString$10(profile.ownerName),
+		ownerUserId: normalizeOptionalString$11(profile.ownerUserId),
+		ownerName: normalizeOptionalString$11(profile.ownerName),
 		creatorProfileId: null
 	};
 }
@@ -87647,7 +88019,7 @@ async function deleteSpace(input) {
 		atsProfile: input.atsProfile,
 		spacePassword: input.password
 	});
-	const approvedAgentCreatorProfileId = normalizeOptionalString$10(input.approvedAgentCreatorProfileId);
+	const approvedAgentCreatorProfileId = normalizeOptionalString$11(input.approvedAgentCreatorProfileId);
 	if (approvedAgentCreatorProfileId) headers["content-type"] = "application/json";
 	const response = await fetchSpaceRequestWithTimeout({
 		url: endpoint,
@@ -87930,7 +88302,7 @@ function ensureStartAgentIdentityPreflight(input) {
 }
 function shouldEnsureDefaultHumanProfile(input) {
 	if (input.resolvedView !== "human") return false;
-	if (normalizeOptionalString$8(input.profileId) ?? normalizeOptionalString$8(input.profile)) return false;
+	if (normalizeOptionalString$9(input.profileId) ?? normalizeOptionalString$9(input.profile)) return false;
 	return resolveCreateProfileInputFromArgs(input) === null;
 }
 function renderDefaultHumanProfileCard(input) {
@@ -88028,9 +88400,9 @@ async function resolveStartSelectedProfileFromArguments(input) {
 	return { handled: false };
 }
 function resolveExplicitStartProfile(input) {
-	const explicitProfileId = normalizeOptionalString$8(input.profileId);
+	const explicitProfileId = normalizeOptionalString$9(input.profileId);
 	if (explicitProfileId) return resolveAtsProfile({ atsProfileId: explicitProfileId });
-	const explicitProfile = normalizeOptionalString$8(input.profile);
+	const explicitProfile = normalizeOptionalString$9(input.profile);
 	if (!explicitProfile) return Promise.resolve(null);
 	return resolveAtsProfile({ atsProfileId: explicitProfile }).catch(async () => {
 		const matched = (await listAtsProfiles()).find((profile) => profile.profileName.toLowerCase() === explicitProfile.toLowerCase());
@@ -88140,7 +88512,7 @@ async function resolveInteractiveStartProfileSearchSelection(input) {
 }
 function resolveCreateProfileInputFromArgs(input) {
 	const kind = parseStartProfileKind(input.kind);
-	const profileName = normalizeOptionalString$8(input.profileName) ?? (kind === "agent" ? normalizeOptionalString$8(input.agentName) : null);
+	const profileName = normalizeOptionalString$9(input.profileName) ?? (kind === "agent" ? normalizeOptionalString$9(input.agentName) : null);
 	if (!(kind && profileName)) return null;
 	return {
 		kind,
@@ -88148,11 +88520,11 @@ function resolveCreateProfileInputFromArgs(input) {
 	};
 }
 function inspectStartAgentIdentityInput(input) {
-	if (normalizeOptionalString$8(input.profileId) ?? normalizeOptionalString$8(input.profile)) return { status: "valid" };
-	const rawKind = normalizeOptionalString$8(input.kind);
+	if (normalizeOptionalString$9(input.profileId) ?? normalizeOptionalString$9(input.profile)) return { status: "valid" };
+	const rawKind = normalizeOptionalString$9(input.kind);
 	const parsedKind = parseStartProfileKind(input.kind);
-	const rawProfileName = normalizeOptionalString$8(input.profileName);
-	const rawAgentName = normalizeOptionalString$8(input.agentName);
+	const rawProfileName = normalizeOptionalString$9(input.profileName);
+	const rawAgentName = normalizeOptionalString$9(input.agentName);
 	if (parsedKind === "human") return {
 		status: "error",
 		summary: "agent view cannot create human profiles. use --kind agent, or switch to human view."
@@ -88352,7 +88724,7 @@ function throwStartAgentIdentityGuide(input) {
 function formatStartProfileKindLabel(profileKind) {
 	return profileKind === "agent" ? "AI agent" : "human";
 }
-function normalizeOptionalString$8(value) {
+function normalizeOptionalString$9(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -90955,7 +91327,7 @@ const CHOOSE_PROFILE = "__command_entry_choose_profile__";
 const CREATE_PROFILE = "__command_entry_create_profile__";
 const CANCEL_PROFILE = "__command_entry_cancel_profile__";
 async function runSelectedProfileCheck(input) {
-	const explicitProfileArg = normalizeOptionalString$7(input.context.profileArg);
+	const explicitProfileArg = normalizeOptionalString$8(input.context.profileArg);
 	const hasExplicitProfileArg = explicitProfileArg !== null;
 	const requiresConfirmation = input.requirement.mode === "confirm" && input.context.runtime.resolvedView === "human" && input.context.allowPrompt && !hasExplicitProfileArg;
 	const currentState = getCurrentCommandCheckState();
@@ -91128,7 +91500,7 @@ function ensureCurrentProfileIsVisible(input) {
 function resolveProfileConfirmationMessage(entryName) {
 	return entryName === "space.join" ? SPACE_JOIN_PROFILE_SELECTION_MESSAGE : SPACE_COMMAND_PROFILE_SELECTION_MESSAGE;
 }
-function normalizeOptionalString$7(value) {
+function normalizeOptionalString$8(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -91758,7 +92130,7 @@ async function runCommandWithEntryChecks(input) {
 				allowPrompt: runtime.interactive,
 				environmentTarget,
 				gatewayUrl: normalizedGatewayUrl,
-				profileArg: normalizeOptionalString$6(input.profile),
+				profileArg: normalizeOptionalString$7(input.profile),
 				jsonOutput
 			}),
 			jsonOutput
@@ -91767,7 +92139,7 @@ async function runCommandWithEntryChecks(input) {
 		finishCurrentCommandCheckScope();
 	}
 }
-function normalizeOptionalString$6(value) {
+function normalizeOptionalString$7(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -93716,7 +94088,7 @@ async function resolveAgentControllerPermissionModeInput(input) {
 		value: input.agentControllerPermissionModeInput
 	});
 	if (!agentControllerPermissionMode) return { hasAnyAgentControllerPermissionModeInput: false };
-	const agentControllerRef = normalizeOptionalString$5(input.agentControllerRef);
+	const agentControllerRef = normalizeOptionalString$6(input.agentControllerRef);
 	assertAgentControllerPermissionModeSupported({
 		agentControllerPermissionMode,
 		agentControllerRef,
@@ -93737,7 +94109,7 @@ async function resolveAgentControllerPermissionModeInput(input) {
 	};
 }
 function normalizeAgentControllerPermissionModeCliInput(input) {
-	const raw = normalizeOptionalString$5(input.value);
+	const raw = normalizeOptionalString$6(input.value);
 	if (!raw) return null;
 	const options = listAgentControllerPermissionModeOptions(input.agentControllerRef ? { agentControllerRef: input.agentControllerRef } : void 0);
 	for (const option of options) if (raw === option.value) return option.value;
@@ -93795,7 +94167,7 @@ const AGENT_CONTROLLER_PERMISSION_MODE_BY_CLI_VALUE = {
 	custom: "codex:customConfig",
 	customconfig: "codex:customConfig"
 };
-function normalizeOptionalString$5(value) {
+function normalizeOptionalString$6(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -94164,7 +94536,7 @@ async function runProfileShow(input) {
 	}
 	const presenter = createPresenter(runtime);
 	const allowPrompt = canUseInteractivePrompts(runtime);
-	const explicitProfileId = normalizeOptionalString$4(input.profile);
+	const explicitProfileId = normalizeOptionalString$5(input.profile);
 	const visibleProfiles = explicitProfileId ? [] : await listVisibleProfilesForListByView(runtime.resolvedView);
 	const current = explicitProfileId ? null : await resolveCurrentProfileId({
 		profiles: visibleProfiles,
@@ -94646,7 +95018,7 @@ async function runProfileUpdate(input) {
 	}
 	const presenter = createPresenter(runtime);
 	const allowPrompt = canUseInteractivePrompts(runtime);
-	const explicitProfileId = normalizeOptionalString$4(input.profile);
+	const explicitProfileId = normalizeOptionalString$5(input.profile);
 	const visibleProfiles = explicitProfileId ? [] : await listVisibleProfilesForListByView(runtime.resolvedView);
 	const current = explicitProfileId ? null : await resolveCurrentProfileId({
 		profiles: visibleProfiles,
@@ -94880,7 +95252,7 @@ function emitProfileUpdateCandidatesForHuman(input) {
 	}
 }
 async function resolveProfileUpdatePayload(input) {
-	const profileName = normalizeOptionalString$4(input.profileName);
+	const profileName = normalizeOptionalString$5(input.profileName);
 	const explicitAgentController = await resolveExplicitAgentControllerPatchForProfile({
 		agentController: input.agentController,
 		agentControllerConversationId: input.agentControllerConversationId,
@@ -94925,7 +95297,7 @@ async function resolveProfileUpdatePayload(input) {
 }
 function resolveExplicitWorkspacePatchForProfile(input) {
 	const normalizedMode = normalizeWorkspaceModeInput(input.workspaceMode);
-	const normalizedWorkspacePath = normalizeOptionalString$4(input.workspacePath);
+	const normalizedWorkspacePath = normalizeOptionalString$5(input.workspacePath);
 	if (!(normalizedMode || normalizedWorkspacePath)) return null;
 	if (input.profile.profileKind !== "agent") throw new Error("Workspace can only be configured for agent profiles.");
 	if (!normalizedMode) throw new Error("--workspace-path can only be used with --workspace-mode custom.");
@@ -94958,7 +95330,7 @@ function resolveExplicitModelSelectionPatchForProfile(input) {
 	};
 }
 async function resolveExplicitAgentControllerPermissionModePatchForProfile(input) {
-	if (!normalizeOptionalString$4(input.agentControllerPermissionModeInput)) return null;
+	if (!normalizeOptionalString$5(input.agentControllerPermissionModeInput)) return null;
 	if (input.profile.profileKind !== "agent") throw new Error("Agent Controller Permission Mode can only be configured for agent profiles.");
 	const currentBinding = input.agentControllerRef ? null : await resolveAgentProfilePrimaryAgentControllerReport({ profile: input.profile });
 	const agentControllerRef = input.agentControllerRef ?? currentBinding?.agentControllerRef ?? null;
@@ -94977,8 +95349,8 @@ async function resolveExplicitAgentControllerPermissionModePatchForProfile(input
 	};
 }
 async function resolveExplicitAgentControllerPatchForProfile(input) {
-	const agentController = normalizeOptionalString$4(input.agentController);
-	const agentControllerConversationId = normalizeOptionalString$4(input.agentControllerConversationId);
+	const agentController = normalizeOptionalString$5(input.agentController);
+	const agentControllerConversationId = normalizeOptionalString$5(input.agentControllerConversationId);
 	if (!(agentController || agentControllerConversationId)) return null;
 	if (input.profile.profileKind !== "agent") throw new Error("Agent controller can only be configured for agent profiles.");
 	if (!agentController) throw new Error("--agent-controller-conversation-id requires --agent-controller.");
@@ -94992,7 +95364,7 @@ async function resolveExplicitAgentControllerPatchForProfile(input) {
 	};
 }
 async function applyAgentProfileControllerBinding(input) {
-	const agentControllerRef = normalizeOptionalString$4(input.agentControllerRef);
+	const agentControllerRef = normalizeOptionalString$5(input.agentControllerRef);
 	const hasModelSelectionPatch = input.modelId !== void 0;
 	if (!(agentControllerRef || hasModelSelectionPatch)) return;
 	if (input.profile.profileKind !== "agent") throw new Error("Agent controller can only be configured for agent profiles.");
@@ -95125,7 +95497,7 @@ async function promptWorkspacePayload(profile) {
 		});
 		if (workspacePath.status === "cancelled") return { status: "cancelled" };
 		if (workspacePath.status === "back") continue;
-		const customWorkspacePath = normalizeOptionalString$4(workspacePath.value);
+		const customWorkspacePath = normalizeOptionalString$5(workspacePath.value);
 		if (!customWorkspacePath) throw new Error("Custom workspace path is required.");
 		return {
 			status: "submitted",
@@ -95216,7 +95588,7 @@ async function promptProfileNamePayload(currentProfileName) {
 	});
 	if (nextName.status === "cancelled") return { status: "cancelled" };
 	if (nextName.status === "back") return { status: "back" };
-	const profileName = normalizeOptionalString$4(nextName.value);
+	const profileName = normalizeOptionalString$5(nextName.value);
 	if (!profileName) throw new Error("profileName is required");
 	return {
 		status: "submitted",
@@ -95472,11 +95844,11 @@ function buildProfileSearchItem(input) {
 function buildProfileSearchText(profile) {
 	return [
 		profile.atsProfileId,
-		normalizeOptionalString$4(profile.profileName),
+		normalizeOptionalString$5(profile.profileName),
 		profile.profileKind,
-		normalizeOptionalString$4(profile.ownerUserId),
-		normalizeOptionalString$4(profile.ownerName),
-		normalizeOptionalString$4(profile.source)
+		normalizeOptionalString$5(profile.ownerUserId),
+		normalizeOptionalString$5(profile.ownerName),
+		normalizeOptionalString$5(profile.source)
 	].filter((value) => typeof value === "string").join("\n");
 }
 function resolveProfileSelectLabel(input) {
@@ -95527,7 +95899,7 @@ function normalizeProfileDisplayName(profile) {
 }
 function normalizeAgentControllerArgumentInput(input) {
 	const agentController = String(input.agentController ?? "").trim();
-	const agentControllerConversationId = normalizeOptionalString$4(input.agentControllerConversationId);
+	const agentControllerConversationId = normalizeOptionalString$5(input.agentControllerConversationId);
 	const hasControllerEnabled = typeof input.controllerEnabled === "boolean";
 	const hasAnyAgentControllerInput = Boolean(agentController) || Boolean(agentControllerConversationId) || hasControllerEnabled;
 	return {
@@ -95734,7 +96106,7 @@ function resolveProfileUpdateCommandExamples() {
 function toProfileActionGuideExamples(_input) {
 	return {};
 }
-function normalizeOptionalString$4(value) {
+function normalizeOptionalString$5(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -95745,8 +96117,8 @@ function normalizeWorkspaceModeInput(value) {
 	throw new Error("--workspace-mode must be ats-managed|custom");
 }
 function normalizeModelSelectionInput(input) {
-	const modelId = normalizeOptionalString$4(input.model);
-	const reasoningLevel = normalizeOptionalString$4(input.reasoningEffort);
+	const modelId = normalizeOptionalString$5(input.model);
+	const reasoningLevel = normalizeOptionalString$5(input.reasoningEffort);
 	if (!(modelId || reasoningLevel)) return { hasAnyModelSelectionInput: false };
 	if (!modelId) throw new Error("--reasoning-effort requires --model.");
 	return {
@@ -96782,10 +97154,10 @@ function resolveDaemonDispatchJournalEvidence(dispatchId) {
 	};
 }
 async function resolveDispatchTraceSelection(input) {
-	const dispatchSelector = normalizeOptionalString$3(input.dispatchId);
-	const sourceSignalSelector = normalizeOptionalString$3(input.sourceSignalId);
-	const clientMessageSelector = normalizeOptionalString$3(input.clientMessageId);
-	const targetProfileSelector = normalizeOptionalString$3(input.targetProfileId);
+	const dispatchSelector = normalizeOptionalString$4(input.dispatchId);
+	const sourceSignalSelector = normalizeOptionalString$4(input.sourceSignalId);
+	const clientMessageSelector = normalizeOptionalString$4(input.clientMessageId);
+	const targetProfileSelector = normalizeOptionalString$4(input.targetProfileId);
 	if (Number(dispatchSelector !== null) + Number(sourceSignalSelector !== null) + Number(clientMessageSelector !== null) !== 1) throw new Error("exactly one of dispatchId, sourceSignalId, or clientMessageId is required");
 	if (dispatchSelector) return {
 		dispatchId: dispatchSelector,
@@ -97283,7 +97655,7 @@ function parenthesizedDetail(value, label) {
 	return detail.length > 0 ? detail : null;
 }
 async function resolveServiceTraceActorProfile(input) {
-	if (normalizeOptionalString$3(input.explicitProfileId) || !canUseInteractivePrompts(input.runtime)) return input.actingProfile;
+	if (normalizeOptionalString$4(input.explicitProfileId) || !canUseInteractivePrompts(input.runtime)) return input.actingProfile;
 	while (true) {
 		const selectedAction = await select({
 			message: `Use ${input.actingProfile.profileName} (${input.actingProfile.atsProfileId}) to read this dispatch trace?`,
@@ -98107,7 +98479,7 @@ function truncateText(text, maxLength) {
 	if (text.length <= maxLength) return text;
 	return `${text.slice(0, maxLength)}...`;
 }
-function normalizeOptionalString$3(value) {
+function normalizeOptionalString$4(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -98959,6 +99331,289 @@ function readErrorName(error) {
 	return error instanceof Error && error.name.trim().length > 0 ? error.name : null;
 }
 
+//#endregion
+//#region src/commands/setup-command-lock.ts
+const SETUP_COMMAND_LOCK_PROFILE = "setup";
+const SETUP_COMMAND_LOCK_KEY = "setup-command";
+const SETUP_GLOBAL_DEADLINE_MS = 900 * 1e3;
+const SETUP_TAKEOVER_WINDOW_MS = 1e4;
+const SETUP_TAKEOVER_POLL_MS = 250;
+const SETUP_DEADLINE_SUPPORT_CODE = "setup.deadline_exceeded";
+const SETUP_SUPERSEDED_SUPPORT_CODE = "setup.superseded";
+async function withSetupCommandLock(input) {
+	const acquisition = await acquireSetupCommandLockWithTakeover({
+		lockMeta: input.lockMeta,
+		startSession: input.startSession
+	});
+	if (acquisition.status === "contended") throw buildSetupLockContentionError({
+		contention: acquisition,
+		view: input.view
+	});
+	const { lock } = acquisition;
+	const standDown = installSetupStandDownHandler({
+		lock,
+		view: input.view
+	});
+	const deadline = createSetupGlobalDeadline({ onExpire: () => handleSetupGlobalDeadlineExpiry({
+		lock,
+		view: input.view
+	}) });
+	deadline.arm();
+	try {
+		return await runWithHeldLock({
+			lock,
+			run: input.run,
+			releaseContext: {
+				atsProfileId: SETUP_COMMAND_LOCK_PROFILE,
+				component: "setup_command",
+				lockKey: SETUP_COMMAND_LOCK_KEY
+			}
+		});
+	} finally {
+		deadline.disarm();
+		standDown.remove();
+	}
+}
+async function acquireSetupCommandLockWithTakeover(input) {
+	const deps = {
+		...defaultTakeoverDeps(),
+		...input.deps
+	};
+	const first = await deps.tryAcquire(input.lockMeta);
+	if (first.ok) return {
+		lock: first.lock,
+		status: "acquired"
+	};
+	const lockError = first.error;
+	const pid = resolveLockHolderPid(lockError);
+	const startedAtLabel = resolveLockStartedAtLabel(lockError);
+	const contendedBase = {
+		lockError,
+		pid,
+		startedAtLabel
+	};
+	if (!(normalizeOptionalString$3(input.startSession) !== null && pid !== null && pid !== deps.selfPid && deps.probePid(pid) === "alive")) return {
+		status: "contended",
+		...contendedBase,
+		takeoverAttempted: false
+	};
+	if (deps.sendTerm(pid) === "not_permitted") return {
+		status: "contended",
+		...contendedBase,
+		takeoverAttempted: true
+	};
+	let lastError = lockError;
+	const until = deps.now() + deps.takeoverWindowMs;
+	while (deps.now() < until) {
+		const retry = await deps.tryAcquire(input.lockMeta);
+		if (retry.ok) return {
+			lock: retry.lock,
+			status: "acquired"
+		};
+		lastError = retry.error;
+		await deps.sleep(deps.pollIntervalMs);
+	}
+	const finalTry = await deps.tryAcquire(input.lockMeta);
+	if (finalTry.ok) return {
+		lock: finalTry.lock,
+		status: "acquired"
+	};
+	return {
+		status: "contended",
+		lockError: finalTry.ok ? lastError : finalTry.error,
+		pid,
+		startedAtLabel,
+		takeoverAttempted: true
+	};
+}
+function buildSetupLockContentionError(input) {
+	if (input.view === "agent") return input.contention.lockError;
+	return new Error(buildHumanSetupLockLine(input.contention));
+}
+function buildHumanSetupLockLine(contention) {
+	const descriptorParts = [];
+	if (contention.startedAtLabel) descriptorParts.push(`started ${contention.startedAtLabel}`);
+	if (contention.pid !== null) descriptorParts.push(`pid ${contention.pid}`);
+	return `Another ATS setup${descriptorParts.length > 0 ? ` (${descriptorParts.join(", ")})` : ""} ${contention.takeoverAttempted ? "did not stop after ATS asked it to stand down" : "is still running"} on this computer. ${contention.pid === null ? "Close that Terminal window, then run this command again." : `Close that Terminal window, or run \`kill ${contention.pid}\`, then run this command again.`}`;
+}
+function createSetupGlobalDeadline(input) {
+	const clock = input.clock ?? realDeadlineClock;
+	const deadlineMs = input.deadlineMs ?? SETUP_GLOBAL_DEADLINE_MS;
+	let handle = null;
+	return {
+		arm() {
+			if (handle !== null) return;
+			handle = clock.setTimer(() => {
+				handle = null;
+				input.onExpire();
+			}, deadlineMs);
+		},
+		disarm() {
+			if (handle === null) return;
+			clock.clearTimer(handle);
+			handle = null;
+		}
+	};
+}
+function handleSetupGlobalDeadlineExpiry(input) {
+	const deadlineMs = input.deadlineMs ?? SETUP_GLOBAL_DEADLINE_MS;
+	const message = `ATS setup did not finish within ${Math.max(1, Math.round(deadlineMs / 6e4))} minutes on this computer and was stopped. This computer's setup lock has been released. Copy a fresh setup command from ATS Web and run setup again.`;
+	runSafely(() => (input.releaseLockSync ?? defaultReleaseLockSync)(input.lock.path));
+	runSafely(() => {
+		if (input.view === "agent") {
+			(input.emitAgent ?? defaultEmitAgent)({
+				code: SETUP_DEADLINE_SUPPORT_CODE,
+				message,
+				type: "error"
+			});
+			return;
+		}
+		(input.emitHuman ?? defaultEmitErrorLine)(`error: ${message} (support code: ${SETUP_DEADLINE_SUPPORT_CODE})`);
+	});
+	(input.exit ?? defaultExit)(1);
+}
+function installSetupStandDownHandler(input) {
+	const message = "ATS setup was asked to stop and has released this computer's setup lock. You can close this window.";
+	const handler = () => {
+		runSafely(() => (input.releaseLockSync ?? defaultReleaseLockSync)(input.lock.path));
+		runSafely(() => {
+			if (input.view === "agent") {
+				(input.emitAgent ?? defaultEmitAgent)({
+					code: SETUP_SUPERSEDED_SUPPORT_CODE,
+					message,
+					type: "info"
+				});
+				return;
+			}
+			(input.emitHuman ?? defaultEmitOutLine)(message);
+		});
+		(input.exit ?? defaultExit)(0);
+	};
+	const register = input.register ?? ((h) => process$1.once("SIGTERM", h));
+	const unregister = input.unregister ?? ((h) => {
+		process$1.removeListener("SIGTERM", h);
+	});
+	register(handler);
+	return { remove() {
+		unregister(handler);
+	} };
+}
+const realDeadlineClock = {
+	clearTimer: (handle) => {
+		clearTimeout(handle);
+	},
+	setTimer: (callback, ms) => setTimeout(callback, ms)
+};
+function defaultTakeoverDeps() {
+	return {
+		now: () => Date.now(),
+		pollIntervalMs: SETUP_TAKEOVER_POLL_MS,
+		probePid: defaultProbePid,
+		selfPid: process$1.pid,
+		sendTerm: defaultSendTerm,
+		sleep: (ms) => new Promise((resolve) => {
+			setTimeout(resolve, ms);
+		}),
+		takeoverWindowMs: SETUP_TAKEOVER_WINDOW_MS,
+		tryAcquire: defaultTryAcquireSetupLock
+	};
+}
+async function defaultTryAcquireSetupLock(meta) {
+	try {
+		return {
+			lock: await acquireLock({
+				atsProfileId: SETUP_COMMAND_LOCK_PROFILE,
+				key: SETUP_COMMAND_LOCK_KEY,
+				meta
+			}),
+			ok: true
+		};
+	} catch (error) {
+		if (isAtsLockError(error)) return {
+			error,
+			ok: false
+		};
+		throw error;
+	}
+}
+function defaultProbePid(pid) {
+	try {
+		process$1.kill(pid, 0);
+		return "alive";
+	} catch (error) {
+		return getErrorCode(error) === "ESRCH" ? "dead" : "unsignalable";
+	}
+}
+function defaultSendTerm(pid) {
+	try {
+		process$1.kill(pid, "SIGTERM");
+		return "sent";
+	} catch (error) {
+		return getErrorCode(error) === "ESRCH" ? "gone" : "not_permitted";
+	}
+}
+function defaultReleaseLockSync(path) {
+	rmSync(path, { force: true });
+}
+function defaultEmitAgent(payload) {
+	outJsonLine(payload);
+}
+function defaultEmitErrorLine(line) {
+	errLine(line);
+}
+function defaultEmitOutLine(line) {
+	outLine(line);
+}
+function defaultExit(code) {
+	process$1.exit(code);
+}
+function runSafely(action) {
+	try {
+		action();
+	} catch {}
+}
+function resolveLockHolderPid(error) {
+	const fromMeta = readPidValue(error.meta);
+	if (fromMeta !== null) return fromMeta;
+	return readPidValue(safeParseJson(error.metaRaw));
+}
+function resolveLockStartedAtLabel(error) {
+	const at = readStringValue(error.meta, "at") ?? readStringValue(safeParseJson(error.metaRaw), "at");
+	if (!at) return null;
+	const date = new Date(at);
+	if (Number.isNaN(date.getTime())) return null;
+	return `${String(date.getHours()).padStart(2, "0")}:${String(date.getMinutes()).padStart(2, "0")}`;
+}
+function readPidValue(source) {
+	if (!source || typeof source !== "object") return null;
+	const pid = source.pid;
+	return typeof pid === "number" && Number.isInteger(pid) && pid > 0 ? pid : null;
+}
+function readStringValue(source, key) {
+	if (!source || typeof source !== "object") return null;
+	const value = source[key];
+	if (typeof value !== "string") return null;
+	const normalized = value.trim();
+	return normalized.length > 0 ? normalized : null;
+}
+function safeParseJson(value) {
+	if (typeof value !== "string") return null;
+	try {
+		return JSON.parse(value);
+	} catch {
+		return null;
+	}
+}
+function getErrorCode(error) {
+	if (!error || typeof error !== "object") return;
+	const code = error.code;
+	return typeof code === "string" ? code : void 0;
+}
+function normalizeOptionalString$3(value) {
+	const normalized = String(value ?? "").trim();
+	return normalized.length > 0 ? normalized : null;
+}
+
 //#endregion
 //#region src/commands/setup-current-device.ts
 async function syncLocalSetupCurrentDeviceTargetFromServiceContract(input) {
@@ -99005,11 +99660,21 @@ async function writeConnectedComputerEnrollmentToServiceContract(input) {
 //#region src/commands/prepare-step-diagnostics.ts
 const PREPARE_STEP_DIAGNOSTICS_PAYLOAD_MAX_CHARS = Math.min(16e3, PREPARE_STEP_DIAGNOSTICS_MAX_CHARS);
 const ATS_NO_DIAGNOSTICS_ENV = "ATS_NO_DIAGNOSTICS";
+const PREPARE_STEP_DIAGNOSTICS_BUNDLE_VERSION = 2;
 const LIFECYCLE_JOURNAL_TAIL_MAX_ENTRIES = 10;
 const SERVICE_LOG_TAIL_MAX_LINES = 30;
 const SERVICE_LOG_LINE_MAX_CHARS = 320;
 const JOURNAL_ENTRY_MAX_CHARS = 700;
 const SOURCE_TIMEOUT_MS = 2e3;
+const LIFECYCLE_JOURNAL_METADATA_WHITELIST = [
+	"action",
+	"ok",
+	"errorMessage",
+	"jobDiagnostics",
+	"durationMs",
+	"reason"
+];
+const LIFECYCLE_JOURNAL_METADATA_COMPACT_WHITELIST = LIFECYCLE_JOURNAL_METADATA_WHITELIST.filter((key) => key !== "jobDiagnostics");
 function isPrepareStepDiagnosticsOptedOut(env = process$1.env) {
 	return String(env[ATS_NO_DIAGNOSTICS_ENV] ?? "").trim() === "1";
 }
@@ -99018,7 +99683,7 @@ async function collectPrepareStepDiagnostics(input) {
 		if (isPrepareStepDiagnosticsOptedOut(input.env)) return null;
 		const sources = input.sources ?? {};
 		const collectionErrors = [];
-		const [lifecycleJournalTail, serviceLogTail, inventoryAnomalies, serviceJob] = await Promise.all([
+		const [lifecycleJournalTail, serviceLog, inventoryAnomalies, serviceJob, deviceId] = await Promise.all([
 			collectDiagnosticsSource({
 				collectionErrors,
 				sourceName: "lifecycle_journal",
@@ -99027,7 +99692,7 @@ async function collectPrepareStepDiagnostics(input) {
 			collectDiagnosticsSource({
 				collectionErrors,
 				sourceName: "service_log",
-				read: sources.readServiceLogTail ?? (() => readDaemonStartFailureLogTailLines({ maxLines: SERVICE_LOG_TAIL_MAX_LINES }))
+				read: sources.readServiceLogTail ?? readServiceLogTailWithPresence
 			}),
 			collectDiagnosticsSource({
 				collectionErrors,
@@ -99038,14 +99703,22 @@ async function collectPrepareStepDiagnostics(input) {
 				collectionErrors,
 				sourceName: "service_job",
 				read: sources.readServiceJobDiagnostics ?? readServiceJobDiagnostics
+			}),
+			collectDiagnosticsSource({
+				collectionErrors,
+				sourceName: "device_id",
+				read: sources.readDeviceId ?? readDaemonServiceContractDeviceId
 			})
 		]);
+		const serviceLogNote = serviceLog?.note ?? null;
+		const serviceLogTail = serviceLog === null || serviceLogNote !== null ? null : serviceLog.lines.map(boundServiceLogLine);
 		const cliVersion = getCliVersionInfo().version;
 		return serializeBoundedPrepareStepDiagnostics({
-			bundleVersion: 1,
+			bundleVersion: PREPARE_STEP_DIAGNOSTICS_BUNDLE_VERSION,
 			collectedAt: (/* @__PURE__ */ new Date()).toISOString(),
 			supportCode: input.supportCode,
 			stepId: input.stepId,
+			...deviceId ? { deviceId } : {},
 			cliVersion,
 			os: {
 				platform: process$1.platform,
@@ -99054,7 +99727,8 @@ async function collectPrepareStepDiagnostics(input) {
 			inventoryAnomalies,
 			serviceJob,
 			lifecycleJournalTail: lifecycleJournalTail === null ? null : lifecycleJournalTail.map(boundLifecycleJournalEntry),
-			serviceLogTail: serviceLogTail === null ? null : serviceLogTail.map(boundServiceLogLine),
+			serviceLogTail,
+			...serviceLogNote ? { serviceLogNote } : {},
 			collectionErrors,
 			truncated: false
 		});
@@ -99063,9 +99737,17 @@ async function collectPrepareStepDiagnostics(input) {
 	}
 }
 function serializeBoundedPrepareStepDiagnostics(bundle) {
-	let candidate = bundle;
+	const cappedForSchema = (bundle.inventoryAnomalies?.length ?? 0) > 32 || (bundle.lifecycleJournalTail?.length ?? 0) > LIFECYCLE_JOURNAL_TAIL_MAX_ENTRIES || (bundle.serviceLogTail?.length ?? 0) > SERVICE_LOG_TAIL_MAX_LINES || bundle.collectionErrors.length > 8;
+	let candidate = redactPrepareStepDiagnosticsBundle({
+		...bundle,
+		inventoryAnomalies: bundle.inventoryAnomalies === null ? null : bundle.inventoryAnomalies.slice(-32),
+		lifecycleJournalTail: bundle.lifecycleJournalTail === null ? null : bundle.lifecycleJournalTail.slice(-LIFECYCLE_JOURNAL_TAIL_MAX_ENTRIES),
+		serviceLogTail: bundle.serviceLogTail === null ? null : bundle.serviceLogTail.slice(-SERVICE_LOG_TAIL_MAX_LINES).map(boundServiceLogLine),
+		collectionErrors: bundle.collectionErrors.slice(-8),
+		truncated: bundle.truncated || cappedForSchema
+	});
 	let serialized = JSON.stringify(candidate);
-	if (serialized.length <= PREPARE_STEP_DIAGNOSTICS_PAYLOAD_MAX_CHARS) return serialized;
+	if (serialized.length <= PREPARE_STEP_DIAGNOSTICS_PAYLOAD_MAX_CHARS) return finalizePrepareStepDiagnosticsSerialization(candidate);
 	candidate = {
 		...candidate,
 		truncated: true
@@ -99093,7 +99775,7 @@ function serializeBoundedPrepareStepDiagnostics(bundle) {
 		}
 		serialized = JSON.stringify(candidate);
 	}
-	return serialized;
+	return finalizePrepareStepDiagnosticsSerialization(candidate);
 }
 async function collectDiagnosticsSource(input) {
 	let timer = null;
@@ -99114,16 +99796,65 @@ async function readInventoryAnomalyCodes() {
 async function readServiceJobDiagnostics() {
 	return await (await resolveDaemonServiceManager())?.readJobDiagnostics?.() ?? null;
 }
-function boundLifecycleJournalEntry(entry) {
-	if (JSON.stringify(entry).length <= JOURNAL_ENTRY_MAX_CHARS) return entry;
+async function resolvePrepareServiceJobVerdict() {
+	const diagnostics = await readServiceJobDiagnostics().catch(() => null);
+	if (!diagnostics) return null;
+	if (isDaemonServiceJobNeverSpawned(diagnostics)) return "never_spawned";
+	if (readDaemonServiceJobCrashExitCode(diagnostics) !== null) return "crashed";
+	return null;
+}
+async function readDaemonServiceContractDeviceId() {
+	return (await readDaemonServiceContract())?.deviceId ?? null;
+}
+async function readServiceLogTailWithPresence() {
+	const stats = await stat(getDaemonSystemServiceLogPath()).catch(() => null);
+	if (!stats?.isFile()) return {
+		lines: [],
+		note: "file_missing"
+	};
+	if (stats.size === 0) return {
+		lines: [],
+		note: "file_empty"
+	};
 	return {
+		lines: await readDaemonStartFailureLogTailLines({ maxLines: SERVICE_LOG_TAIL_MAX_LINES }),
+		note: null
+	};
+}
+function selectWhitelistedJournalMetadata(metadata, keys) {
+	const selected = {};
+	for (const key of keys) if (Object.hasOwn(metadata, key)) selected[key] = metadata[key];
+	return selected;
+}
+function boundLifecycleJournalEntry(entry) {
+	if (!entry.metadata) return redactPrepareStepDiagnosticsValue(entry);
+	const whitelisted = redactPrepareStepDiagnosticsValue({
 		...entry,
+		metadata: selectWhitelistedJournalMetadata(entry.metadata, LIFECYCLE_JOURNAL_METADATA_WHITELIST)
+	});
+	if (JSON.stringify(whitelisted).length <= JOURNAL_ENTRY_MAX_CHARS) return whitelisted;
+	const compact = redactPrepareStepDiagnosticsValue({
+		...entry,
+		metadata: {
+			...selectWhitelistedJournalMetadata(entry.metadata, LIFECYCLE_JOURNAL_METADATA_COMPACT_WHITELIST),
+			truncated: true
+		}
+	});
+	if (JSON.stringify(compact).length <= JOURNAL_ENTRY_MAX_CHARS) return compact;
+	return {
+		...whitelisted,
 		metadata: { truncated: true }
 	};
 }
 function boundServiceLogLine(line) {
-	if (line.length <= SERVICE_LOG_LINE_MAX_CHARS) return line;
-	return `${line.slice(0, SERVICE_LOG_LINE_MAX_CHARS - 1).trimEnd()}…`;
+	const redactedLine = redactPrepareStepDiagnosticsText(line);
+	if (redactedLine.length <= SERVICE_LOG_LINE_MAX_CHARS) return redactedLine;
+	return `${redactedLine.slice(0, SERVICE_LOG_LINE_MAX_CHARS - 1).trimEnd()}…`;
+}
+function finalizePrepareStepDiagnosticsSerialization(bundle) {
+	const parsed = prepareStepDiagnosticsBundleSchema.safeParse(bundle);
+	if (!parsed.success) return null;
+	return JSON.stringify(parsed.data);
 }
 
 //#endregion
@@ -99173,7 +99904,7 @@ async function runPrepareSessionExecutor(input) {
 		if (error instanceof PrepareSessionConnectionInterruptedError && reconnectAttempts < PREPARE_SESSION_MAX_RECONNECT_ATTEMPTS) {
 			reconnectAttempts += 1;
 			emitHumanStatus(input, "Reconnecting", ["ATS Web connection was interrupted.", "Reconnecting to the setup session..."]);
-			await sleep$1(PREPARE_SESSION_RECONNECT_DELAY_MS);
+			await sleep(PREPARE_SESSION_RECONNECT_DELAY_MS);
 			initial = await resolvePrepareSessionToken({
 				gatewayUrl: input.gatewayUrl,
 				opaqueToken: input.startSession
@@ -99570,13 +100301,19 @@ async function runTerminalStep(input) {
 			throw error;
 		}
 		const rawMessage = error instanceof Error && error.message.trim().length > 0 ? error.message.trim() : "Setup could not continue.";
+		const serviceJobVerdict = await resolveRefreshServiceJobVerdict({
+			stepId: input.stepId,
+			resolveServiceJobVerdict: input.resolveServiceJobVerdict
+		});
 		const message = formatTerminalStepFailureMessage({
 			stepId: input.stepId,
-			rawMessage
+			rawMessage,
+			serviceJobVerdict
 		});
 		const reasonCode = resolveTerminalStepFailureReasonCode({
 			rawMessage,
-			stepId: input.stepId
+			stepId: input.stepId,
+			serviceJobVerdict
 		});
 		const diagnostics = await (input.collectDiagnostics ?? collectPrepareStepDiagnostics)({
 			stepId: input.stepId,
@@ -99945,7 +100682,7 @@ async function connectSelectedLocalAgentsToAts(input) {
 	} catch (error) {
 		if (!isTransientSelectedAgentConnectionError(error) || attempt >= REPORT_RUNTIME_CONNECTION_MAX_ATTEMPTS) throw error;
 		lastTransientError = error;
-		await sleep$1(REPORT_RUNTIME_CONNECTION_RETRY_DELAY_MS);
+		await sleep(REPORT_RUNTIME_CONNECTION_RETRY_DELAY_MS);
 	}
 	throw lastTransientError ?? /* @__PURE__ */ new Error("ATS could not connect local agents.");
 }
@@ -100050,9 +100787,15 @@ function buildPrepareLocalReadinessSnapshot(readiness) {
 		}
 	};
 }
+async function resolveRefreshServiceJobVerdict(input) {
+	if (input.stepId !== "refresh_service") return null;
+	return await (input.resolveServiceJobVerdict ?? resolvePrepareServiceJobVerdict)().catch(() => null);
+}
 function formatTerminalStepFailureMessage(input) {
 	if (input.rawMessage.includes("prepare session revision conflict")) return "This setup changed while Terminal was working. Copy a fresh setup command from ATS Web and run setup again to continue from the latest step.";
 	if (input.stepId === "refresh_service") {
+		if (input.serviceJobVerdict === "never_spawned") return `macOS is blocking the ATS Service background item, so ATS Service never launched. Path A: open System Settings > General > Login Items & Extensions, enable the ATS background item, then copy a fresh setup command from ATS Web and run setup again. Path B: run \`${formatAtsCliCommand("ats service start --mode foreground")}\` in a separate terminal and keep it open (Wake stops when you close that window), then run setup again.`;
+		if (input.serviceJobVerdict === "crashed") return `ATS Service started but keeps exiting on this Mac. Run \`${formatAtsCliCommand("ats service start --mode foreground")}\` to see the live error, fix it, then copy a fresh setup command from ATS Web and run setup again.`;
 		const detail = formatTerminalStepFailureDetail(input.rawMessage);
 		return `ATS Service did not report a running local connection during setup. Copy a fresh setup command from ATS Web and run setup again to continue from this step. If it fails again, run \`${formatAtsCliCommand("ats service start --mode foreground")}\` to see live startup logs, then copy a fresh setup command from ATS Web and run setup again.${detail ? ` Detail: ${detail}` : ""}`;
 	}
@@ -100066,6 +100809,10 @@ function formatTerminalStepFailureDetail(rawMessage) {
 }
 function resolveTerminalStepFailureReasonCode(input) {
 	if (input.rawMessage.includes("runtime.registration.device_forgotten")) return "runtime.registration.device_forgotten";
+	if (input.stepId === "refresh_service") {
+		if (input.serviceJobVerdict === "never_spawned") return "prepare.refresh_service.service_never_spawned";
+		if (input.serviceJobVerdict === "crashed") return "prepare.refresh_service.service_crash_loop";
+	}
 	return `prepare.${input.stepId}.failed`;
 }
 function findStep(snapshot, stepId) {
@@ -101088,11 +101835,18 @@ function isAgentProfile(profile) {
 
 //#endregion
 //#region src/commands/setup.ts
-const SETUP_COMMAND_LOCK_PROFILE = "setup";
-const SETUP_COMMAND_LOCK_KEY = "setup-command";
 async function runSetup(input) {
-	return await withSetupCommandLock(input, async () => {
-		await runSetupUnlocked(input);
+	return await withSetupCommandLock({
+		lockMeta: {
+			command: "ats setup",
+			path: shouldUseSetupLocalAgentConnection(input) ? "delegated_or_profile_setup" : "local_setup",
+			view: input.view ?? null
+		},
+		run: async () => {
+			await runSetupUnlocked(input);
+		},
+		startSession: input.startSession,
+		view: input.view
 	});
 }
 async function runSetupUnlocked(input) {
@@ -101251,33 +102005,6 @@ async function runSetupUnlocked(input) {
 async function runSetupStartupLocalStateRepair() {
 	await runLocalStateAlignment({ mode: "repair" });
 }
-async function withSetupCommandLock(input, run) {
-	try {
-		return await runWithHeldLock({
-			lock: await acquireLock({
-				atsProfileId: SETUP_COMMAND_LOCK_PROFILE,
-				key: SETUP_COMMAND_LOCK_KEY,
-				meta: {
-					command: "ats setup",
-					path: shouldUseSetupLocalAgentConnection(input) ? "delegated_or_profile_setup" : "local_setup",
-					view: input.view ?? null
-				}
-			}),
-			run,
-			releaseContext: {
-				atsProfileId: SETUP_COMMAND_LOCK_PROFILE,
-				component: "setup_command",
-				lockKey: SETUP_COMMAND_LOCK_KEY
-			}
-		});
-	} catch (error) {
-		if (isAtsLockError(error)) throw new Error(buildSetupCommandLockMessage(error));
-		throw error;
-	}
-}
-function buildSetupCommandLockMessage(error) {
-	return `Another ATS setup is already running on this computer. Wait for it to finish, then run setup again.${error.metaRaw ? ` Existing setup: ${error.metaRaw}` : ""}`;
-}
 function shouldUseSetupLocalAgentConnection(input) {
 	return Boolean(normalizeOptionalString$1(input.startSession) ?? normalizeOptionalString$1(input.humanProfile) ?? normalizeOptionalString$1(input.profile) ?? (input.agent && input.agent.length > 0 ? "agent" : null));
 }
@@ -104235,7 +104962,7 @@ function normalizeOptionalString(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 async function runDefaultSpaceAddMeMembership(input) {
-	const { runSpaceAddMeMembership } = await import("./add-me-membership-CT_vAgoU.js");
+	const { runSpaceAddMeMembership } = await import("./add-me-membership-Cfi5fbyb.js");
 	return await runSpaceAddMeMembership(input);
 }
 
@@ -107151,10 +107878,10 @@ serviceCmd.command("trace").description("Read a Space delivery trace for debuggi
 		profile: opts.profile,
 		gatewayUrl: opts.gatewayUrl,
 		run: async () => {
-			const dispatchId = normalizeOptionalString$6(opts.dispatch);
-			const sourceSignalId = normalizeOptionalString$6(opts.sourceSignal);
-			const clientMessageId = normalizeOptionalString$6(opts.clientMessage);
-			const targetProfileId = normalizeOptionalString$6(opts.targetProfile);
+			const dispatchId = normalizeOptionalString$7(opts.dispatch);
+			const sourceSignalId = normalizeOptionalString$7(opts.sourceSignal);
+			const clientMessageId = normalizeOptionalString$7(opts.clientMessage);
+			const targetProfileId = normalizeOptionalString$7(opts.targetProfile);
 			if (Number(dispatchId !== null) + Number(sourceSignalId !== null) + Number(clientMessageId !== null) !== 1) throw new Error("exactly one of --dispatch, --source-signal, or --client-message is required");
 			await runServiceTrace({
 				profile: opts.profile,
@@ -107344,7 +108071,7 @@ spaceActionCmd.command("help").description("Show ATS Space Action help.").action
 withSpaceProfileOption(spaceCmd.command("create").description("Create a new space and print its space ID.").option("--name <name>", "Space name (<=80 chars; prompted in human interactive mode)").option("--guide <text>", "Optional space guide").option("--password <value>", "Optional space password (minimum 6 characters; numbers/letters/symbols accepted)").option("--join", "Join immediately after create").option("--no-join", "Do not ask to join after create").option("--output <mode>", "Output mode when auto-joining: ndjson|text", "text")).action(async (opts, command) => {
 	const cliOptions = resolveSpaceCommandCliOptions(command, opts);
 	const view = getGlobalViewOption();
-	if (view === "agent" && normalizeOptionalString$6(opts.name) === null) {
+	if (view === "agent" && normalizeOptionalString$7(opts.name) === null) {
 		await runSpaceCreate({
 			profile: cliOptions.profile,
 			baseUrl: cliOptions.gatewayUrl,
@@ -107401,7 +108128,7 @@ withSpaceProfileOption(spaceCmd.command("join").description("Join a space and ch
 	const cliOptions = resolveSpaceCommandCliOptions(command, opts);
 	const localEcho = opts.noLocalEcho !== true;
 	const view = getGlobalViewOption();
-	if (view === "agent" && normalizeOptionalString$6(space) === null) {
+	if (view === "agent" && normalizeOptionalString$7(space) === null) {
 		await runSpaceJoin({
 			profile: cliOptions.profile,
 			baseUrl: cliOptions.gatewayUrl,
@@ -107896,8 +108623,8 @@ withSpaceProfileOption(spaceCmd.command("updates").description("Read formal upda
 withSpaceProfileOption(spaceCmd.command("result").description("Read one formal dispatch result scoped to this space.").argument("[space]", "Space ID (64-character hex)").option("--dispatch <dispatch-id>", "Lookup by dispatch ID").option("--result-ref <result-ref>", "Lookup by dispatch result ref").option("--json", "Print canonical JSON", false).option("--password <value>", "Space password for protected access")).action(async (space, opts, command) => {
 	const cliOptions = resolveSpaceCommandCliOptions(command, opts);
 	const spaceValue = String(space ?? "").trim();
-	const dispatchId = normalizeOptionalString$6(opts.dispatch);
-	const resultRef = normalizeOptionalString$6(opts.resultRef);
+	const dispatchId = normalizeOptionalString$7(opts.dispatch);
+	const resultRef = normalizeOptionalString$7(opts.resultRef);
 	const selectorCount = Number(dispatchId !== null) + Number(resultRef !== null);
 	const outputView = await resolveEffectiveViewForOutput();
 	if ((spaceValue.length === 0 || selectorCount !== 1) && outputView === "agent") throw createSpaceResultGuideError();