openmeld 0.3.122 → 0.3.123

package/dist/{command-D_BRRxBQ.js → command-Bbe9WSpd.js}

@@ -4,7 +4,7 @@ import { $ as runWithHeldLock, $t as runtimeAgentControllerConversationIdMapping
 import { A as MAX_TEXT_LENGTH, At as createCenterAgentRoutineResponseSchema, B as sleep, C as createSpaceApi, D as toStructuredApiClientFailure, Dt as organizationComputersResponseSchema, E as resolveProfileSpaceHistoryGatewayHost, Et as profileErrorResponseSchema, F as OPENMELD_HEADER_PROFILE_ID, Ft as resumeCenterAgentRoutineResponseSchema, Gt as localProjectControlDaemonFrameSchema, H as getSpaceUpdatesResponseSchema, It as updateCenterAgentRoutineResponseSchema, Jt as postSpaceMembersResponseSchema, Kt as localProjectControlDiscoverProjectsResponseSchema, L as OPENMELD_HEADER_REQUEST_ID, M as parseIncoming$1, Mt as listCenterAgentRoutineRunsResponseSchema, N as parseServerErrorFrame$1, Nt as listCenterAgentRoutinesResponseSchema, O as DAEMON_STREAM_KEEPALIVE_PING, Ot as submitFeedbackIssueRequestSchema, P as resolveCustomMentionAliasOverride, Pt as pauseCenterAgentRoutineResponseSchema, Q as submitAgentControllerTaskLifecycleEventItemSchema, Rt as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, S as createRuntimeReportingApi, St as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, T as resolveAccountSpaceIndexGatewayHost, Tt as profileCapabilitiesResponseSchema, U as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Ut as agentActivitySnapshotResponseSchema, V as toErrorMessage$42, Wt as localProjectControlConnectionSchema, Xt as spaceMemberDirectoryEntrySchema, Yt as removeSpaceMembersResponseSchema, Zt as spaceMemberDirectorySchema, _n as agentControllerPermissionModeSchema, _t as organizationSkillReleaseSummarySchema, a as buildSpaceAttachmentDownloadPath, an as createProjectResponseSchema, at as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, bt as organizationDirectoryResponseSchema, c as createAgentProfileBindingApi, cn as updateProjectResponseSchema, ct as computerFileAccessPolicyInputSchema, d as createCurrentDeviceApi, dt as organizationSpaceDirectoryWithMemberCountsResponseSchema, ft as spaceCreatorSchema, g as createOrganizationApi, h as createOpenMeldApiClient, ht as listOrganizationSkillsResponseSchema, i as buildProfileSpaceHistoryUpsertPath, in as archiveProjectResponseSchema, it as gatewayErrorEnvelopeSchema, j as parseEnvelope$1, jt as deleteCenterAgentRoutineResponseSchema, kt as submitFeedbackIssueResponseSchema, ln as centerAgentToolSpeakerSchema, lt as computerFileAccessPolicySchema, m as createLocalRuntimeExpectedRoutesApi, mt as getOrganizationSkillResponseSchema, n as OpenMeldApiClientInvalidResponseError, o as createAccountSpaceIndexApi, on as listProjectsResponseSchema, ot as OPENMELD_RUNTIME_CAPABILITIES_HEADER, p as createFetchTransport, pt as spaceMetaSchema, qt as leaveSpaceResponseSchema, r as buildProfileSpaceHistoryStatusPath, rn as observedLocalAgentSessionSchema, s as createAgentActivityApi, sn as projectSchema, st as computerFileAccessDaemonFrameSchema, t as OpenMeldApiClientHttpError, tn as agentActivitySessionInventoryResponseSchema, un as openCodePermissionConfigSchema, ut as modelCatalogSchema, vn as agentControllerCollaborationModeSchema, vt as organizationSkillSummarySchema, wt as authProfileManagedRoleSchema, xt as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE, y as createProfileSpaceHistoryApi, yn as toLegacySpaceAddressingWireValue, z as toErrorMessage$43, zt as agentActivityEventSchema } from "./dist-DYE9Q3T4.js";
 import { $r as profileWorkspaceModeSchema, $t as skippedDaemonProfileSchema, A as runtimeTransportRegisterSessionResponseSchema, An as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, B as openMeldDaemonTaskResultPayloadSchema, Bn as localCliComponentUpdateProjectionSchema, Bt as resolveSpaceFileMimeType, C as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, D as runtimeTransportOpenMeldToolsControlFramePayloadSchema, E as runtimeTransportLookupRouteOwnerServiceEvidenceSchema, Fn as formatLocalComponentsSummaryDescription, Fr as resolveSpaceMentionLabels, G as localFolderPickerDaemonFrameSchema, Gr as openMeldRequestContextSchema, H as openMeldSpaceEgressActionSchema, I as runtimeTransportSubmitTaskResultRequestSchema, In as formatLocalComponentsSummaryLabel, Jn as openMeldToolsUpdateOperationPhaseSchema, Jr as normalizeOptionalWorkingDirectory, K as localFolderPickerHelperProtocolResultSchema, Kr as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, Ln as formatLocalSetupActionDescription, M as runtimeTransportResumeControllerConversationFramePayloadSchema, Mn as agentInteractionRequestSchema, Mr as normalizeSpacePasswordText, N as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Nn as agentInteractionResolutionSchema, O as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Or as runtimeCoordinatorExecutionTokenEnvelopeSchema, P as runtimeTransportRouteCatalogChangedFramePayloadSchema, Pr as resolveSingleSpaceMentionLabels, Pt as SPACE_FILE_MAX_SIZE_BYTES, R as openMeldDaemonTaskResultEnvelopeWriteSchema, Rn as formatLocalSetupActionLabel, S as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, Sn as resolveMessageEnvelopeTargetField, T as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, U as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, W as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Wn as localServiceComponentUpdateProjectionSchema, Wt as spaceFileNameSchema, Xt as openMeldDaemonControlPlaneRequestSchema, Yr as openMeldRuntimeProfileIdSchema, Zn as openMeldToolsUpdateRequestSourceSchema, Zt as openMeldDaemonControlPlaneResponseSchema, _ as runtimeTransportHeartbeatRequestSchema, _n as collectCanonicalMentionTextFragments, a as runtimeTransportCapabilitiesSchema, ai as MAX_TEXT_LENGTH$1, b as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, br as url, c as runtimeTransportDispatchInteractionRequestSchema, ci as resolvePublicAgentAvailabilityCopy, d as runtimeTransportDispatchPreviewEndRequestSchema, di as shouldPreferMappedPublicAgentFailureReason, en as providerDispatchRuntimeContextSchema, er as boolean, f as runtimeTransportDispatchPreviewRequestSchema, g as runtimeTransportForkAgentSessionResultSchema, gn as MESSAGE_MENTION_TYPE_VALUES, gt as SPACE_MENTION_REJECT_NOTICE_PURPOSE, h as runtimeTransportErrorCodeSchema, hi as resolveCommandAgentWorkActivity, hr as string, ht as SPACE_MEMBER_REMOVE_NOTICE_PURPOSE, i as localWakeRouteReportSchema, ii as trimmedStringFromUnknown, ir as enumFactory, j as runtimeTransportRejectedProfileRegistrationSchema, k as runtimeTransportRegisterSessionRequestSchema, kr as runtimeTransportDeliveryExecutionIdentitySchema, l as runtimeTransportDispatchInteractionResponseFramePayloadSchema, li as resolvePublicAgentFailureRecovery, m as runtimeTransportDispatchToolActivityRequestSchema, mr as strictObject, mt as SPACE_MEMBER_JOIN_NOTICE_PURPOSE, n as daemonExecutionCompatibilitySchema, nr as discriminatedUnion, o as runtimeTransportDeliverDispatchRequestSchema, oi as resolveDetailedPublicAgentFailureReason$1, or as iso, p as runtimeTransportDispatchRuntimeEvidenceRequestSchema, q as localFolderPickerHelperResultSchema, qn as openMeldToolsUpdateAttemptSchema, qr as agentProfileIdSchema, r as daemonStreamFrameSchema, s as runtimeTransportDispatchInteractionDeliveredRequestSchema, si as resolveMappedPublicAgentFailureReason, sr as literal, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, tn as conversationExecutionStateSchema, u as runtimeTransportDispatchLifecycleRequestSchema, ui as sanitizeDispatchErrorSummary, ut as CONVERSATION_CONTINUITY_WARNING_PURPOSE, v as runtimeTransportHeartbeatResponseSchema, vn as formatCanonicalMentionLiteral, vt as sanitizeSignalTextPreview, w as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, wr as parseOptionalClientMessageId, x as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, xn as normalizeMessageEnvelope, y as runtimeTransportLocalAgentControlCancelFramePayloadSchema, yn as getSpaceMessageAddressingRelationSupportForTargetKind, z as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, zn as installedLocalComponentsSnapshotSchema } from "./runtime-transport-CWWB2Ily.js";
 import { r as daemonServiceLaneSchema, t as daemonServiceContractSchema } from "./service-contract-CRyDcIIf.js";
-import { A as isDaemonServiceRuntimeHeartbeatStale, B as setDaemonServiceRuntimeState, C as daemonServiceStableExecutableWrapperPath, D as getDaemonRuntimeStatus, E as ensureDaemonControlPlaneToken, F as releaseDaemonServiceLifecycleLock, G as withDaemonServiceStopLock, H as withDaemonServiceReconcileLock, I as resolveDaemonControlPlaneEndpoint, K as readDaemonLocalStateFile, L as resolveDaemonServiceRuntimeMetadata, M as readDaemonServiceLifecycleLockMeta, N as readDaemonServiceLifecycleLockMetaWithCleanup, O as getDaemonStatus, P as readDaemonServiceRuntimeSnapshot, R as restoreDaemonInstallStateSnapshot, S as daemonServiceRepairJournalPath, T as daemonStatePath, U as withDaemonServiceRegistrationMutationLock, V as uninstallDaemon, W as withDaemonServiceRunLock, _ as daemonRuntimeServiceManagerPath, a as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, b as daemonServiceLegacyExecutableWrapperPath, c as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, d as clearDaemonServiceRuntimeState, f as daemonDispatchJournalPath, g as daemonRuntimeRootPath, h as daemonRuntimeDataPath, i as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, j as readDaemonControlPlaneToken, k as installDaemon, l as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV, m as daemonRuntimeBundlesPath, n as writeDaemonRuntimeLease, o as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, p as daemonLifecycleJournalPath, q as writeDaemonLocalStateFile, r as DAEMON_HEARTBEAT_STALE_MS, s as DAEMON_SERVICE_RUNTIME_MODE_ENV, t as readDaemonRuntimeLease, u as acquireDaemonServiceLifecycleLock, v as daemonRuntimeStateRootPath, w as daemonServiceStableLauncherPath, x as daemonServiceRecognizedExecutableWrapperPaths, y as daemonServiceActiveBundleStatePath, z as rotateDaemonControlPlaneTokenIfExpired } from "./daemon-runtime-lease-Cath1v3w.js";
+import { A as getDaemonRuntimeStatus, B as resolveDaemonServiceRuntimeMetadata, C as daemonServiceRepairJournalPath, D as daemonServiceUpdateWorkerBinaryExecutablePath, E as daemonServiceStableLauncherPath, F as readDaemonServiceLifecycleLockMeta, G as withDaemonServiceReconcileLock, H as rotateDaemonControlPlaneTokenIfExpired, I as readDaemonServiceLifecycleLockMetaWithCleanup, J as withDaemonServiceStopLock, K as withDaemonServiceRegistrationMutationLock, L as readDaemonServiceRuntimeSnapshot, M as installDaemon, N as isDaemonServiceRuntimeHeartbeatStale, O as daemonStatePath, P as readDaemonControlPlaneToken, R as releaseDaemonServiceLifecycleLock, S as daemonServiceRecognizedExecutablePaths$1, T as daemonServiceStableExecutableWrapperPath, U as setDaemonServiceRuntimeState, V as restoreDaemonInstallStateSnapshot, W as uninstallDaemon, X as writeDaemonLocalStateFile, Y as readDaemonLocalStateFile, _ as daemonRuntimeServiceManagerPath, a as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, b as daemonServiceExecutableWrapperPaths$1, c as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, d as clearDaemonServiceRuntimeState, f as daemonDispatchJournalPath, g as daemonRuntimeRootPath, h as daemonRuntimeDataPath, i as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, j as getDaemonStatus, k as ensureDaemonControlPlaneToken, l as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV, m as daemonRuntimeBundlesPath, n as writeDaemonRuntimeLease, o as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, p as daemonLifecycleJournalPath, q as withDaemonServiceRunLock, r as DAEMON_HEARTBEAT_STALE_MS, s as DAEMON_SERVICE_RUNTIME_MODE_ENV, t as readDaemonRuntimeLease, u as acquireDaemonServiceLifecycleLock, v as daemonRuntimeStateRootPath, w as daemonServiceStableBinaryExecutablePath, x as daemonServiceLegacyExecutableWrapperPath, y as daemonServiceActiveBundleStatePath, z as resolveDaemonControlPlaneEndpoint } from "./daemon-runtime-lease-Cvo63MGd.js";
 import { D as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS$1, E as OPENCLAW_CLI_TIMEOUT_MS$1, M as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS$1, N as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS$1, O as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS$1, S as MAX_HEARTBEAT_INTERVAL_MS$2, _ as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1, d as resolveOpenMeldDistribution, f as CATALOG_SYNC_RETRY_INTERVAL_MS$1, g as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1, h as DAEMON_STREAM_CONNECT_TIMEOUT_MS$1, i as getAuthSessionState, j as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS$1, k as REGISTER_RESPONSE_TIMEOUT_MS$1, m as DAEMON_RUNTIME_CONTRACT_EPOCH$1, n as clearAuthSession, p as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1, s as setAuthSession, u as isBinaryDistribution, v as DEFAULT_GATEWAY_CHAIN_TIMEOUT_MS$1, w as MIN_HEARTBEAT_INTERVAL_MS$2, x as HEARTBEAT_RESPONSE_TIMEOUT_MS$1, y as DEFAULT_HEARTBEAT_INTERVAL_MS$1 } from "./auth-session-qk94UQqs.js";
 import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, f as buildOpenMeldRequestContextFromProfileIdentity, i as resolveSpaceRequestTimeoutMsForDiagnostics, l as canAttachAuthTokenToRequest, m as resolveAuthRequestCompatibility, n as createCliApiClientFoundation, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, r as fetchSpaceRequestWithTimeout, s as buildOpenMeldRequestContextHeadersWithAuth, u as resolveAuthTokenAttachment } from "./api-client-foundation-w4Oa06t4.js";
 import { createRequire } from "node:module";
@@ -19409,7 +19409,7 @@ const TECHNICAL_DETAIL_MARKERS = [
 	/\s+Last network error:/iu,
 	/\s+Support code:/iu
 ];
-const ACTION_SENTENCE_RE = /^(?:After\b|Check\b|Choose\b|Close\b|Connect\b|Contact\b|Continue\b|Copy\b|Finish\b|Free\b|Go\b|Make sure\b|Open\b|Reconnect\b|Remove\b|Restart\b|Run\b|Select\b|Sign in\b|Start\b|Stop\b|Try\b|Turn off\b|Turn on\b|Update\b|Use\b|Wait\b)/iu;
+const ACTION_SENTENCE_RE = /^(?:After\b|Check\b|Choose\b|Close\b|Connect\b|Contact\b|Continue\b|Copy\b|Finish\b|Free\b|Go\b|Make sure\b|Open\b|Reconnect\b|Remove\b|Restart\b|Return\b|Run\b|Select\b|Sign in\b|Start\b|Stop\b|Try\b|Turn off\b|Turn on\b|Update\b|Use\b|Wait\b)/iu;
 const SENTENCE_BOUNDARY_RE = /(?<=[.!?])\s+(?=[A-Z`])/u;
 function buildHumanErrorCopy(message) {
 	const sentences = splitSentences(stripTechnicalErrorDetail(message));
@@ -19470,7 +19470,7 @@ function splitSentences(message) {
 var package_default = {
 	$schema: "https://www.schemastore.org/package.json",
 	name: "openmeld",
-	version: "0.3.122",
+	version: "0.3.123",
 	openMeldReleaseDate: "2026-08-28",
 	description: "OpenMeld CLI - https://openmeld.ai",
 	license: "MIT",
@@ -20000,6 +20000,57 @@ function toStartBackgroundHelperExecutionCompatibility(input) {
 	};
 }
 //#endregion
+//#region src/config/daemon-service-update-worker-registration.ts
+const MANAGED_VERSION_FROM_EXECUTABLE_PATTERN = /[\\/]versions[\\/](v?(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?)[\\/]openmeld(?:\.exe)?/gu;
+function resolveDaemonServiceUpdateWorkerIdentity(pathInput = {}) {
+	const preset = resolveOpenMeldEnvPreset(pathInput);
+	const suffix = preset === "prod" ? "" : `-${preset}`;
+	return {
+		launchdLabel: `com.openmeld.openmeld-service-update${preset === "prod" ? "" : `.${preset}`}`,
+		serviceName: `openmeld-service-update${suffix}`,
+		windowsDisplayName: `OpenMeld Service Update${preset === "prod" ? "" : ` (${preset})`}`,
+		windowsServiceName: `OpenMeld-Service-Update${suffix}`
+	};
+}
+function resolveDaemonServiceUpdateWorkerLaunchdPlistPath(pathInput = {}) {
+	return join(pathInput.homeDir ?? homedir(), "Library", "LaunchAgents", `${resolveDaemonServiceUpdateWorkerIdentity(pathInput).launchdLabel}.plist`);
+}
+function resolveDaemonServiceUpdateWorkerSystemdUnitPath(pathInput = {}) {
+	return join(pathInput.homeDir ?? homedir(), ".config", "systemd", "user", `${resolveDaemonServiceUpdateWorkerIdentity(pathInput).serviceName}.service`);
+}
+function resolveDaemonServiceUpdateWorkerSystemdPathUnitPath(pathInput = {}) {
+	return join(pathInput.homeDir ?? homedir(), ".config", "systemd", "user", `${resolveDaemonServiceUpdateWorkerIdentity(pathInput).serviceName}.path`);
+}
+function resolveDaemonServiceUpdateWorkerWindowsScriptPath(pathInput = {}) {
+	return join(daemonRuntimeRootPath(pathInput), "service-update-worker.bat");
+}
+async function readDaemonServiceUpdateWorkerProtectedManagedVersions(pathInput = {}, platform = process$1.platform) {
+	const registrationPath = resolveDaemonServiceUpdateWorkerRegistrationPath(pathInput, platform);
+	if (registrationPath === null) return /* @__PURE__ */ new Set();
+	const contents = await readFile(registrationPath, "utf8").catch((error) => {
+		if (getErrorCode$5(error) === "ENOENT") return null;
+		throw error;
+	});
+	return contents === null ? /* @__PURE__ */ new Set() : readManagedVersionsFromUpdateWorkerRegistration(contents);
+}
+function readManagedVersionsFromUpdateWorkerRegistration(contents) {
+	const versions = /* @__PURE__ */ new Set();
+	for (const match of contents.matchAll(MANAGED_VERSION_FROM_EXECUTABLE_PATTERN)) {
+		const version = match[1];
+		if (version) versions.add(version);
+	}
+	return versions;
+}
+function resolveDaemonServiceUpdateWorkerRegistrationPath(pathInput, platform) {
+	if (platform === "darwin") return resolveDaemonServiceUpdateWorkerLaunchdPlistPath(pathInput);
+	if (platform === "linux") return resolveDaemonServiceUpdateWorkerSystemdUnitPath(pathInput);
+	if (platform === "win32") return resolveDaemonServiceUpdateWorkerWindowsScriptPath(pathInput);
+	return null;
+}
+function getErrorCode$5(error) {
+	return error && typeof error === "object" && "code" in error ? String(error.code) : null;
+}
+//#endregion
 //#region src/config/version-state.ts
 const VERSION_STATE_FILENAME = "version.json";
 const NPM_REGISTRY_LATEST_TIMEOUT_MS = 5e3;
@@ -20249,8 +20300,39 @@ function toErrorMessage$30(error) {
 	return String(error);
 }
 //#endregion
-//#region src/local-components/managed-install.ts
+//#region src/local-components/managed-version-pruning.ts
 const MANAGED_VERSION_DIRECTORY_PATTERN = /^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+async function pruneManagedVersions(input) {
+	const versionsDir = openMeldVersionsDir(input.pathInput);
+	const managedVersions = (await readdir(versionsDir, { withFileTypes: true })).filter((entry) => entry.isDirectory() && MANAGED_VERSION_DIRECTORY_PATTERN.test(entry.name)).map((entry) => entry.name);
+	const usableManagedVersions = new Set((await Promise.all(managedVersions.map(async (version) => ({
+		usable: await isUsableManagedVersion(version, versionsDir),
+		version
+	})))).filter((entry) => entry.usable).map((entry) => entry.version));
+	const retainedVersions = /* @__PURE__ */ new Set([input.currentVersion]);
+	let rollbackVersion = null;
+	if (input.preferredRollbackVersion && input.preferredRollbackVersion !== input.currentVersion && usableManagedVersions.has(input.preferredRollbackVersion)) rollbackVersion = input.preferredRollbackVersion;
+	rollbackVersion ??= [...usableManagedVersions].filter((version) => compareSemver(version, input.currentVersion) < 0).sort((left, right) => compareSemver(right, left))[0] ?? null;
+	if (rollbackVersion) retainedVersions.add(rollbackVersion);
+	for (const protectedVersion of input.protectedVersions ?? []) if (usableManagedVersions.has(protectedVersion)) retainedVersions.add(protectedVersion);
+	await Promise.all(managedVersions.filter((version) => !retainedVersions.has(version)).map((version) => rm(path.join(versionsDir, version), { recursive: true })));
+}
+async function isUsableManagedVersion(version, versionsDir) {
+	const target = path.join(versionsDir, version, "openmeld");
+	if (!(await stat(target).catch((error) => {
+		if (getErrorCode$4(error) === "ENOENT") return null;
+		throw error;
+	}))?.isFile()) return false;
+	return await access(target, constants.X_OK).then(() => true, (error) => {
+		if (getErrorCode$4(error) === "EACCES" || getErrorCode$4(error) === "ENOENT") return false;
+		throw error;
+	});
+}
+function getErrorCode$4(error) {
+	return error && typeof error === "object" && "code" in error ? String(error.code) : null;
+}
+//#endregion
+//#region src/local-components/managed-install.ts
 const MANAGED_INSTALL_LOCK_PROFILE = "managed-cli";
 const MANAGED_INSTALL_LOCK_KEY = "install";
 const MANAGED_INSTALL_LOCK_RETRY_DELAY_MS = 100;
@@ -20296,6 +20378,7 @@ async function performManagedInstallLocked(input) {
 	const currentPointerPath = openMeldManagedBinaryPath();
 	const managedBinaryPath = openMeldManagedVersionBinaryPath(version);
 	const previousVersion = await readCurrentPointerVersion();
+	const protectedVersions = await readDaemonServiceUpdateWorkerProtectedManagedVersions();
 	const baseOutcome = {
 		version,
 		platform,
@@ -20307,7 +20390,10 @@ async function performManagedInstallLocked(input) {
 	if (previousVersion !== null) {
 		const comparison = compareSemver(version, previousVersion);
 		if (!force && comparison === 0 && await isUsableManagedBinary(managedBinaryPath)) {
-			await pruneManagedVersions({ currentVersion: previousVersion });
+			await pruneManagedVersions({
+				currentVersion: previousVersion,
+				protectedVersions
+			});
 			return {
 				...baseOutcome,
 				result: "noop_same_version"
@@ -20317,7 +20403,8 @@ async function performManagedInstallLocked(input) {
 			if (!await isUsableManagedBinary(managedBinaryPath)) await placeVersionedBinary(input?.sourceBinaryPath ?? process$1.execPath, version, managedBinaryPath);
 			await pruneManagedVersions({
 				currentVersion: previousVersion,
-				preferredRollbackVersion: version
+				preferredRollbackVersion: version,
+				protectedVersions
 			});
 			return {
 				...baseOutcome,
@@ -20328,7 +20415,8 @@ async function performManagedInstallLocked(input) {
 	await placeVersionedBinary(input?.sourceBinaryPath ?? process$1.execPath, version, managedBinaryPath);
 	await pruneManagedVersions({
 		currentVersion: version,
-		preferredRollbackVersion: previousVersion
+		preferredRollbackVersion: previousVersion,
+		protectedVersions
 	});
 	await swapCurrentPointer(currentPointerPath, managedBinaryPath);
 	return {
@@ -20357,24 +20445,6 @@ async function withManagedInstallLock(run) {
 		await setTimeout$1(MANAGED_INSTALL_LOCK_RETRY_DELAY_MS);
 	}
 }
-async function pruneManagedVersions(input) {
-	const versionsDir = openMeldVersionsDir();
-	const managedVersions = (await readdir(versionsDir, { withFileTypes: true })).filter((entry) => entry.isDirectory() && MANAGED_VERSION_DIRECTORY_PATTERN.test(entry.name)).map((entry) => entry.name);
-	const usableManagedVersions = new Set((await Promise.all(managedVersions.map(async (version) => ({
-		usable: await isUsableManagedVersion(version),
-		version
-	})))).filter((entry) => entry.usable).map((entry) => entry.version));
-	const retainedVersions = /* @__PURE__ */ new Set([input.currentVersion]);
-	if (input.preferredRollbackVersion && input.preferredRollbackVersion !== input.currentVersion && usableManagedVersions.has(input.preferredRollbackVersion)) retainedVersions.add(input.preferredRollbackVersion);
-	if (retainedVersions.size === 1) {
-		const rollbackVersion = [...usableManagedVersions].filter((version) => compareSemver(version, input.currentVersion) < 0).sort((left, right) => compareSemver(right, left))[0];
-		if (rollbackVersion) retainedVersions.add(rollbackVersion);
-	}
-	await Promise.all(managedVersions.filter((version) => !retainedVersions.has(version)).map((version) => rm(path.join(versionsDir, version), { recursive: true })));
-}
-async function isUsableManagedVersion(version) {
-	return await isUsableManagedBinary(path.join(openMeldVersionsDir(), version, "openmeld"));
-}
 async function placeVersionedBinary(sourceBinary, version, managedBinaryPath) {
 	await mkdir(openMeldManagedVersionDir(version), { recursive: true });
 	const tmpPath = `${managedBinaryPath}.tmp-${process$1.pid}-${Date.now()}`;
@@ -20412,6 +20482,261 @@ function isErrorWithCode(error, code) {
 	return error instanceof Error && "code" in error && error.code === code;
 }
 //#endregion
+//#region src/local-service/lifecycle/daemon-lifecycle-journal.ts
+const DAEMON_LIFECYCLE_EVENT_TYPES = [
+	"connection.state",
+	"daemon.crash",
+	"lifecycle.command.begin",
+	"lifecycle.command.end",
+	"owner.snapshot",
+	"route_catalog.initial_load",
+	"runtime_state.takeover",
+	"stop.controlled_drain",
+	"stop.strategy.selected",
+	"service_manager.action",
+	"service_manager.registration_reconcile",
+	"process_stop.action",
+	"service_contract.write",
+	"stop.signal.observed"
+];
+const DAEMON_STOP_CAUSES = [
+	"user_stop",
+	"controlled_service_update",
+	"service_crash",
+	"network_disconnect",
+	"unknown"
+];
+function toJournalErrorMessage$1(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+function normalizeSessionId(value) {
+	const normalized = typeof value === "string" ? value.trim() : "";
+	return normalized.length > 0 ? normalized : null;
+}
+function resolveDaemonStopCause(input) {
+	if (input.explicitCause) return input.explicitCause;
+	if (input.type === "daemon.crash") return "service_crash";
+	if (input.intent === "stop") return "user_stop";
+	if (input.intent === "upgrade_reconcile" || input.intent === "reinstall" || input.intent === "startup_check" || input.intent === "status_cleanup") return "controlled_service_update";
+	if (input.type === "connection.state" && input.result !== "connected" && input.result !== "stopping") return "network_disconnect";
+	return "unknown";
+}
+function isDaemonLifecycleEvent(event) {
+	if (typeof event !== "object" || event === null) return false;
+	const candidate = event;
+	return candidate.schema === "openmeld-daemon-lifecycle-event-v1" && candidate.v === 1 && DAEMON_LIFECYCLE_EVENT_TYPES.includes(candidate.type) && typeof candidate.timestamp === "string" && candidate.timestamp.length > 0 && typeof candidate.lane === "string" && candidate.lane.length > 0 && typeof candidate.intent === "string" && candidate.intent.length > 0 && typeof candidate.command === "string" && candidate.command.length > 0 && typeof candidate.pid === "number" && Number.isInteger(candidate.pid) && candidate.pid > 0 && (candidate.sessionId === null || typeof candidate.sessionId === "string" && candidate.sessionId.length > 0) && (candidate.stopCause === void 0 || DAEMON_STOP_CAUSES.includes(candidate.stopCause)) && typeof candidate.result === "string" && candidate.result.length > 0;
+}
+async function resolveDaemonLifecycleAttribution(input) {
+	const lockMeta = await readDaemonServiceLifecycleLockMeta().catch(() => null);
+	return {
+		command: input.command?.trim() || (typeof lockMeta?.command === "string" ? lockMeta.command.trim() : "") || "unknown",
+		intent: input.intent ?? (typeof lockMeta?.intent === "string" ? lockMeta.intent : "unknown"),
+		lane: resolveOpenMeldEnvPreset(input.pathInput),
+		pid: typeof lockMeta?.pid === "number" && lockMeta.pid > 0 ? lockMeta.pid : process$1.pid,
+		sessionId: normalizeSessionId(lockMeta?.sessionId) ?? resolveCliContextId()
+	};
+}
+async function emitDaemonLifecycleEvent(input) {
+	assertNoPublishedProductionMutationDuringTests(input.pathInput ?? {}, "OpenMeld Service lifecycle journal");
+	const journalPath = daemonLifecycleJournalPath(input.pathInput);
+	const attribution = await resolveDaemonLifecycleAttribution(input);
+	const event = {
+		schema: "openmeld-daemon-lifecycle-event-v1",
+		v: 1,
+		type: input.type,
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		lane: attribution.lane,
+		intent: attribution.intent,
+		command: attribution.command,
+		pid: attribution.pid,
+		sessionId: attribution.sessionId,
+		stopCause: resolveDaemonStopCause({
+			explicitCause: input.stopCause,
+			intent: attribution.intent,
+			result: input.result,
+			type: input.type
+		}),
+		result: input.result,
+		...input.metadata ? { metadata: input.metadata } : {}
+	};
+	if (!isDaemonLifecycleEvent(event)) {
+		console.warn(`[openmeld:lifecycle-journal] rejected invalid event ${input.type}`);
+		return;
+	}
+	try {
+		await mkdir(dirname(journalPath), { recursive: true });
+		await appendFile(journalPath, `${JSON.stringify(event)}\n`, "utf8");
+	} catch (error) {
+		console.warn(`[openmeld:lifecycle-journal] failed to append event ${input.type}: ${toJournalErrorMessage$1(error)}`);
+	}
+}
+async function runWithDaemonLifecycleCommandJournal(input) {
+	await emitDaemonLifecycleEvent({
+		type: "lifecycle.command.begin",
+		result: "started",
+		metadata: input.includeProcessUptime ? {
+			...input.metadata,
+			processUptimeMs: Math.round(process$1.uptime() * 1e3)
+		} : input.metadata,
+		pathInput: input.pathInput,
+		command: input.command,
+		intent: input.intent
+	});
+	try {
+		const result = await input.run();
+		const resolvedResult = input.resolveResult?.(result) ?? { result: "completed" };
+		await emitDaemonLifecycleEvent({
+			type: "lifecycle.command.end",
+			result: resolvedResult.result,
+			metadata: resolvedResult.metadata,
+			pathInput: input.pathInput,
+			command: input.command,
+			intent: input.intent
+		});
+		return result;
+	} catch (error) {
+		await emitDaemonLifecycleEvent({
+			type: "lifecycle.command.end",
+			result: "failed",
+			metadata: { errorMessage: toJournalErrorMessage$1(error) },
+			pathInput: input.pathInput,
+			command: input.command,
+			intent: input.intent
+		});
+		throw error;
+	}
+}
+async function runDaemonServiceManagerAction(input) {
+	const startedAtMs = Date.now();
+	try {
+		const result = await input.run();
+		await emitDaemonLifecycleEvent({
+			type: "service_manager.action",
+			result: "completed",
+			metadata: {
+				action: input.action,
+				controller: input.controller,
+				durationMs: Date.now() - startedAtMs,
+				...input.metadata ?? {}
+			},
+			pathInput: input.pathInput,
+			command: input.command,
+			intent: input.intent
+		});
+		return result;
+	} catch (error) {
+		let errorMetadata = null;
+		try {
+			errorMetadata = input.resolveErrorMetadata?.(error) ?? null;
+		} catch {
+			errorMetadata = null;
+		}
+		await emitDaemonLifecycleEvent({
+			type: "service_manager.action",
+			result: "failed",
+			metadata: {
+				action: input.action,
+				controller: input.controller,
+				durationMs: Date.now() - startedAtMs,
+				errorMessage: toJournalErrorMessage$1(error),
+				...errorMetadata ?? {},
+				...input.metadata ?? {}
+			},
+			pathInput: input.pathInput,
+			command: input.command,
+			intent: input.intent
+		});
+		throw error;
+	}
+}
+const DAEMON_LIFECYCLE_ORIGIN_EVENT_TYPES = /* @__PURE__ */ new Set([
+	"daemon.crash",
+	"lifecycle.command.end",
+	"process_stop.action",
+	"runtime_state.takeover",
+	"service_contract.write",
+	"service_manager.action"
+]);
+async function readLatestDaemonLifecycleOriginEvent(input = {}) {
+	return await readLatestDaemonLifecycleEvent({
+		pathInput: input.pathInput,
+		typeFilter: DAEMON_LIFECYCLE_ORIGIN_EVENT_TYPES
+	});
+}
+async function readLatestDaemonLifecycleConnectionStateEvent(input = {}) {
+	return await readLatestDaemonLifecycleEvent({
+		pathInput: input.pathInput,
+		typeFilter: /* @__PURE__ */ new Set(["connection.state"])
+	});
+}
+async function readLatestDaemonLifecycleEvent(input) {
+	const journalPath = daemonLifecycleJournalPath(input.pathInput);
+	let content;
+	try {
+		content = await readFile(journalPath, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	}
+	const lines = content.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+	for (let index = lines.length - 1; index >= 0; index -= 1) {
+		const line = lines[index];
+		if (!line) continue;
+		try {
+			const parsed = JSON.parse(line);
+			if (isDaemonLifecycleEvent(parsed) && input.typeFilter.has(parsed.type)) return parsed;
+		} catch {}
+	}
+	return null;
+}
+async function readRecentDaemonLifecycleEvents(input) {
+	if (input.maxEntries <= 0) return [];
+	const journalPath = daemonLifecycleJournalPath(input.pathInput);
+	let content;
+	try {
+		content = await readFile(journalPath, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return [];
+		throw error;
+	}
+	const lines = content.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+	const recent = [];
+	for (let index = lines.length - 1; index >= 0; index -= 1) {
+		const line = lines[index];
+		if (!line) continue;
+		try {
+			const parsed = JSON.parse(line);
+			if (isDaemonLifecycleEvent(parsed)) {
+				recent.push(parsed);
+				if (recent.length >= input.maxEntries) break;
+			}
+		} catch {}
+	}
+	return recent.reverse();
+}
+async function resolveRecentDaemonSignalStopCause(input = {}) {
+	const nowMs = Date.now();
+	const maxAgeMs = input.maxAgeMs ?? 3e4;
+	const events = await readRecentDaemonLifecycleEvents({
+		maxEntries: 32,
+		pathInput: input.pathInput
+	});
+	for (const event of events.toReversed()) {
+		const eventAtMs = Date.parse(event.timestamp);
+		if (!Number.isFinite(eventAtMs) || nowMs - eventAtMs < 0 || nowMs - eventAtMs > maxAgeMs) continue;
+		if (event.stopCause === "user_stop" || event.stopCause === "controlled_service_update") return event.stopCause;
+	}
+	return "unknown";
+}
+function formatDaemonLifecycleOriginSummary(event) {
+	const intent = formatDaemonLifecycleIntent(event.intent);
+	return `${event.result} ${intent} from ${event.command} at ${event.timestamp} (pid ${event.pid})`;
+}
+function formatDaemonLifecycleIntent(intent) {
+	if (intent === "unknown") return "OpenMeld Service task";
+	return intent.replaceAll("_", " ");
+}
+//#endregion
 //#region src/local-service/lifecycle/daemon-service-bundle.ts
 const DAEMON_ACTIVE_BUNDLE_SCHEMA = "openmeld-daemon-active-bundle-v2";
 const DAEMON_ACTIVE_BUNDLE_LEGACY_SCHEMA = "openmeld-daemon-active-bundle-v1";
@@ -20430,8 +20755,17 @@ function daemonServiceLauncherPath(pathInput = {}) {
 function daemonServiceExecutableWrapperPath(pathInput = {}) {
 	return daemonServiceStableExecutableWrapperPath(pathInput);
 }
+function daemonServiceBinaryExecutablePath(pathInput = {}) {
+	return daemonServiceStableBinaryExecutablePath(pathInput);
+}
+function daemonServiceUpdateWorkerBinaryPath(pathInput = {}) {
+	return daemonServiceUpdateWorkerBinaryExecutablePath(pathInput);
+}
 function daemonServiceExecutableWrapperPaths(pathInput = {}) {
-	return daemonServiceRecognizedExecutableWrapperPaths(pathInput);
+	return daemonServiceExecutableWrapperPaths$1(pathInput);
+}
+function daemonServiceRecognizedExecutablePaths(pathInput = {}) {
+	return daemonServiceRecognizedExecutablePaths$1(pathInput);
 }
 function daemonServiceLegacyWrapperPath(pathInput = {}) {
 	return daemonServiceLegacyExecutableWrapperPath(pathInput);
@@ -20522,7 +20856,7 @@ async function resolveCurrentDaemonFingerprintForState(state) {
 async function resolveDaemonBundleEntryPathFromState(state, pathInput = {}) {
 	if (!state) return null;
 	if (state.bundleFormat === "binary_v1") {
-		const stableExecutablePath = daemonServiceExecutableWrapperPath(pathInput);
+		const stableExecutablePath = daemonServiceBinaryExecutablePath(pathInput);
 		if (await pathExists$5(stableExecutablePath)) return stableExecutablePath;
 		return await pathExists$5(state.sourceEntryScriptPath) ? state.sourceEntryScriptPath : null;
 	}
@@ -20640,28 +20974,130 @@ async function hashDaemonBinaryFile(filePath) {
 	hash.update(await readFile(filePath));
 	return hash.digest("hex");
 }
+async function runAuditedServiceManagerCarrierMutation(input) {
+	const pathInput = input.pathInput ?? {};
+	const metadata = {
+		distribution: input.distribution ?? resolveOpenMeldDistribution(),
+		executable: process$1.execPath,
+		operation: input.operation,
+		preset: resolveOpenMeldEnvPreset(pathInput),
+		targetPath: input.targetPath
+	};
+	await emitDaemonLifecycleEvent({
+		command: "openmeld service carrier mutation",
+		intent: "status_cleanup",
+		metadata,
+		pathInput,
+		result: "attempted",
+		type: "service_manager.registration_reconcile"
+	});
+	try {
+		const result = await input.run();
+		await emitDaemonLifecycleEvent({
+			command: "openmeld service carrier mutation",
+			intent: "status_cleanup",
+			metadata,
+			pathInput,
+			result: "completed",
+			type: "service_manager.registration_reconcile"
+		});
+		return result;
+	} catch (error) {
+		await emitDaemonLifecycleEvent({
+			command: "openmeld service carrier mutation",
+			intent: "status_cleanup",
+			metadata: {
+				...metadata,
+				errorMessage: error instanceof Error ? error.message : String(error)
+			},
+			pathInput,
+			result: "failed",
+			type: "service_manager.registration_reconcile"
+		});
+		throw error;
+	}
+}
 async function ensureDaemonServiceStableBinaryExecutable(pathInput = {}) {
 	const activeBundle = await readDaemonActiveBundleState();
 	if (activeBundle?.bundleFormat !== "binary_v1") throw new Error("OpenMeld cannot prepare the stable macOS Service executable without an active binary bundle.");
-	const sourcePath = activeBundle.sourceEntryScriptPath;
-	const expectedFingerprint = activeBundle.sourceDistFingerprint ?? await hashDaemonBinaryFile(sourcePath);
-	const stableExecutablePath = daemonServiceExecutableWrapperPath(pathInput);
+	return await ensureVerifiedBinaryCarrier({
+		bundle: activeBundle,
+		operationName: "stable_binary",
+		pathInput,
+		targetPath: daemonServiceBinaryExecutablePath(pathInput)
+	});
+}
+async function ensureDaemonServiceUpdateWorkerBinaryExecutable(preparedBundle, pathInput = {}) {
+	if (preparedBundle.bundleFormat !== "binary_v1") throw new Error("OpenMeld cannot prepare the update worker binary without a binary Service bundle.");
+	return await ensureVerifiedBinaryCarrier({
+		bundle: preparedBundle,
+		operationName: "update_worker_binary",
+		pathInput,
+		targetPath: daemonServiceUpdateWorkerBinaryPath(pathInput)
+	});
+}
+async function clearDaemonServiceUpdateWorkerBinaryExecutable(pathInput = {}) {
+	const targetPath = daemonServiceUpdateWorkerBinaryPath(pathInput);
+	await runAuditedServiceManagerCarrierMutation({
+		distribution: "binary",
+		operation: "remove_update_worker_binary",
+		pathInput,
+		targetPath,
+		run: async () => await rm(targetPath, { force: true })
+	});
+}
+async function ensureVerifiedBinaryCarrier(input) {
+	const sourcePath = input.bundle.sourceEntryScriptPath;
+	const expectedFingerprint = input.bundle.sourceDistFingerprint ?? await hashDaemonBinaryFile(sourcePath);
+	const stableExecutablePath = input.targetPath;
 	const stableExecutableStat = await lstat(stableExecutablePath).catch(() => null);
 	if (stableExecutableStat?.isFile() === true && !stableExecutableStat.isSymbolicLink() && await hashDaemonBinaryFile(stableExecutablePath).catch(() => null) === expectedFingerprint) {
-		await chmod(stableExecutablePath, 448);
+		await runAuditedServiceManagerCarrierMutation({
+			distribution: "binary",
+			operation: `refresh_${input.operationName}_permissions`,
+			pathInput: input.pathInput,
+			targetPath: stableExecutablePath,
+			run: async () => await chmod(stableExecutablePath, 448)
+		});
 		return stableExecutablePath;
 	}
 	await mkdir(dirname(stableExecutablePath), { recursive: true });
 	const preparedPath = `${stableExecutablePath}.next-${String(process$1.pid)}`;
-	await rm(preparedPath, { force: true });
+	await runAuditedServiceManagerCarrierMutation({
+		distribution: "binary",
+		operation: `clear_prepared_${input.operationName}`,
+		pathInput: input.pathInput,
+		targetPath: preparedPath,
+		run: async () => await rm(preparedPath, { force: true })
+	});
 	try {
-		await copyFile(sourcePath, preparedPath);
-		await chmod(preparedPath, 448);
-		if (await hashDaemonBinaryFile(preparedPath) !== expectedFingerprint) throw new Error("OpenMeld could not verify the prepared stable macOS Service executable.");
-		await rename(preparedPath, stableExecutablePath);
+		await runAuditedServiceManagerCarrierMutation({
+			distribution: "binary",
+			operation: `prepare_${input.operationName}`,
+			pathInput: input.pathInput,
+			targetPath: preparedPath,
+			run: async () => {
+				await copyFile(sourcePath, preparedPath);
+				await chmod(preparedPath, 448);
+			}
+		});
+		if (await hashDaemonBinaryFile(preparedPath) !== expectedFingerprint) throw new Error("OpenMeld could not verify the prepared Service carrier executable.");
+		await runAuditedServiceManagerCarrierMutation({
+			distribution: "binary",
+			operation: `replace_${input.operationName}`,
+			pathInput: input.pathInput,
+			targetPath: stableExecutablePath,
+			run: async () => await rename(preparedPath, stableExecutablePath)
+		});
 		return stableExecutablePath;
 	} finally {
-		await rm(preparedPath, { force: true }).catch(() => void 0);
+		await runAuditedServiceManagerCarrierMutation({
+			distribution: "binary",
+			operation: `clear_prepared_${input.operationName}`,
+			pathInput: input.pathInput,
+			targetPath: preparedPath,
+			run: async () => await rm(preparedPath, { force: true })
+		}).catch(() => void 0);
 	}
 }
 async function verifyDaemonActiveBundleIntegrity(activeBundle) {
@@ -20717,19 +21153,34 @@ async function copyDaemonBundleDependencyDirectory(input) {
 }
 async function writeDaemonServiceLauncher(pathInput = {}) {
 	await mkdir(daemonRuntimeServiceManagerPath(pathInput), { recursive: true });
-	await writeFile(daemonServiceLauncherPath(pathInput), `${buildDaemonServiceLauncherSource(pathInput)}\n`, {
-		encoding: "utf8",
-		mode: 448
+	const targetPath = daemonServiceLauncherPath(pathInput);
+	await runAuditedServiceManagerCarrierMutation({
+		distribution: "npm",
+		operation: "write_launcher",
+		pathInput,
+		targetPath,
+		run: async () => await writeFile(targetPath, `${buildDaemonServiceLauncherSource(pathInput)}\n`, {
+			encoding: "utf8",
+			mode: 448
+		})
 	});
 }
 async function writeDaemonServiceExecutableWrapper(pathInput = {}) {
 	await mkdir(daemonRuntimeServiceManagerPath(pathInput), { recursive: true });
 	await Promise.all(daemonServiceExecutableWrapperPaths(pathInput).map(async (wrapperPath) => {
-		await writeFile(wrapperPath, `${buildDaemonServiceExecutableWrapperSource(pathInput)}\n`, {
-			encoding: "utf8",
-			mode: 448
+		await runAuditedServiceManagerCarrierMutation({
+			distribution: "npm",
+			operation: "write_executable_wrapper",
+			pathInput,
+			targetPath: wrapperPath,
+			run: async () => {
+				await writeFile(wrapperPath, `${buildDaemonServiceExecutableWrapperSource(pathInput)}\n`, {
+					encoding: "utf8",
+					mode: 448
+				});
+				await chmod(wrapperPath, 448);
+			}
 		});
-		await chmod(wrapperPath, 448);
 	}));
 }
 async function ensureDaemonServiceManagerExecutables(pathInput = {}) {
@@ -21537,7 +21988,7 @@ function resolveDaemonServiceProcessMode(serviceArguments) {
 }
 function isRecognizedDaemonServiceExecutableWrapperPath(token, pathInput) {
 	const normalizedToken = normalizeDaemonCommandPath(token);
-	return daemonServiceRecognizedExecutableWrapperPaths(pathInput).some((wrapperPath) => {
+	return daemonServiceRecognizedExecutablePaths$1(pathInput).some((wrapperPath) => {
 		const normalizedWrapperPath = normalizeDaemonCommandPath(wrapperPath);
 		return normalizedToken === normalizedWrapperPath || normalizedToken.endsWith(`/${normalizeDaemonCommandPath(basename(wrapperPath))}`);
 	});
@@ -21548,7 +21999,7 @@ function extractUnquotedDaemonWrapperPath(command, pathInput) {
 	if (serviceRunIndex <= 0) return null;
 	const commandPrefix = command.slice(0, serviceRunIndex);
 	const normalizedPrefix = normalizedCommand.slice(0, serviceRunIndex);
-	for (const wrapperPath of daemonServiceRecognizedExecutableWrapperPaths(pathInput)) {
+	for (const wrapperPath of daemonServiceRecognizedExecutablePaths$1(pathInput)) {
 		const normalizedWrapperPath = normalizeDaemonCommandPath(wrapperPath);
 		const wrapperPathIndex = normalizedPrefix.lastIndexOf(normalizedWrapperPath);
 		if (wrapperPathIndex >= 0 && daemonCommandContainsExactPath(commandPrefix, wrapperPath)) return commandPrefix.slice(wrapperPathIndex, wrapperPathIndex + normalizedWrapperPath.length);
@@ -22893,7 +23344,7 @@ function matchesExpectedDaemonServiceManagerCommand(input) {
 	if (input.controller === "windows-service") return typeof input.definitionPath === "string" && input.definitionPath.length > 0 && input.commandSummary.includes(input.definitionPath);
 	if ((input.distribution ?? resolveOpenMeldDistribution()) === "binary") {
 		if (input.controller === "launchd") {
-			const stableExecutablePath = daemonServiceExecutableWrapperPath(input.pathInput);
+			const stableExecutablePath = daemonServiceBinaryExecutablePath(input.pathInput);
 			return [
 				`${stableExecutablePath} service run`,
 				`"${stableExecutablePath}" service run`,
@@ -22914,7 +23365,7 @@ async function matchesExpectedDaemonServiceManagerDefinition(input) {
 	if (definition === null) return false;
 	if ((input.distribution ?? resolveOpenMeldDistribution()) === "binary") {
 		if (input.controller === "launchd") {
-			const stableExecutablePath = daemonServiceExecutableWrapperPath(input.pathInput);
+			const stableExecutablePath = daemonServiceBinaryExecutablePath(input.pathInput);
 			return definition.includes(`<string>${stableExecutablePath}</string>`);
 		}
 		return containsOpenMeldManagedBinaryPath(definition, input.pathInput);
@@ -22953,7 +23404,7 @@ function classifyDaemonOwnedProcess(processInfo, ignoredProcessIds, pathInput =
 	if (ignoredProcessIds.has(processInfo.pid)) return null;
 	const normalizedCommand = normalizeProcessCommand(processInfo.command);
 	const launcherPath = normalizeProcessCommand(daemonServiceLauncherPath(pathInput));
-	const wrapperPaths = daemonServiceExecutableWrapperPaths(pathInput).map(normalizeProcessCommand);
+	const wrapperPaths = daemonServiceRecognizedExecutablePaths(pathInput).map(normalizeProcessCommand);
 	if (wrapperPaths.some((wrapperPath) => normalizedCommand.includes(wrapperPath) && !daemonCommandContainsExactPath(normalizedCommand, wrapperPath))) return null;
 	if (!looksLikeCurrentLaneDaemonCandidate({
 		launcherPath,
@@ -23034,7 +23485,7 @@ function resolveManagedDaemonPathLane(input) {
 	for (const preset of ALL_OPENMELD_ENV_PRESETS) {
 		const lanePathInput = resolveLanePathInput(input.pathInput, preset);
 		const laneLauncherPath = normalizeProcessCommand(daemonServiceLauncherPath(lanePathInput));
-		const laneWrapperPaths = daemonServiceExecutableWrapperPaths(lanePathInput).map(normalizeProcessCommand);
+		const laneWrapperPaths = daemonServiceRecognizedExecutablePaths(lanePathInput).map(normalizeProcessCommand);
 		const laneRuntimeRoot = normalizeProcessCommand(daemonRuntimeRootPath(lanePathInput));
 		if (input.normalizedCommand.includes(laneLauncherPath) || laneWrapperPaths.some((wrapperPath) => daemonCommandContainsExactPath(input.normalizedCommand, wrapperPath)) || input.normalizedCommand.includes(laneRuntimeRoot) || containsOpenMeldManagedBinaryPath(input.normalizedCommand, lanePathInput)) return preset;
 	}
@@ -23426,7 +23877,7 @@ async function waitForDaemonSystemServiceToStop(input) {
 	const deadlineMs = Date.now() + waitMs;
 	while (Date.now() < deadlineMs) {
 		const currentRuntime = await readCurrentObservedDaemonRuntimeStatus().catch(() => null);
-		if (!(await input.manager.status().catch(() => null))?.running && currentRuntime?.status !== "running") return true;
+		if ((await input.manager.status().catch(() => null))?.running === false && currentRuntime !== null && currentRuntime.status !== "running") return true;
 		if (currentRuntime?.status === "stale" && !currentRuntime.managedBySystemService) return true;
 		if (currentRuntime?.status === "not_running") return true;
 		await sleep(pollMs);
@@ -23435,11 +23886,12 @@ async function waitForDaemonSystemServiceToStop(input) {
 	if (finalRuntime?.status === "not_running") return true;
 	if (finalRuntime?.status === "stale" && !finalRuntime.managedBySystemService) return true;
 	if (finalRuntime?.status === "running") return false;
-	return (await input.manager.status().catch(() => null))?.running !== true;
+	if (finalRuntime === null) return false;
+	return (await input.manager.status().catch(() => null))?.running === false;
 }
 async function readObservedRuntimeState() {
 	const ignoredProcessIds = [process$1.pid, process$1.ppid].filter((pid) => Number.isInteger(pid) && pid > 0);
-	const [runtimeLease, ownedProcesses] = await Promise.all([readDaemonRuntimeLease().catch(() => null), listDaemonOwnedProcesses({ ignoreProcessIds: ignoredProcessIds }).catch(() => [])]);
+	const [runtimeLease, ownedProcesses] = await Promise.all([readDaemonRuntimeLease().catch(() => null), listDaemonOwnedProcesses({ ignoreProcessIds: ignoredProcessIds })]);
 	return resolveObservedDaemonRuntimeStatus({
 		runtimeLease,
 		ownedProcesses
@@ -23597,7 +24049,7 @@ async function inspectDaemonServiceInventory(input) {
 		inspectLegacySharedDaemonService(),
 		readDaemonActiveBundleState(),
 		readDaemonServiceLifecycleLockMetaWithCleanup(),
-		listOwnedProcesses({ ignoreProcessIds: ignoredInventoryProcessIds }).catch(() => [])
+		listOwnedProcesses({ ignoreProcessIds: ignoredInventoryProcessIds })
 	]);
 	const activeBundleSourceAvailable = await resolveActiveBundleSourceAvailability(activeBundle);
 	const runtimeStatus = resolveObservedDaemonRuntimeStatus({
@@ -24507,23 +24959,23 @@ const SETUP_FLOW_COPY = {
 		verify_setup: "Checking setup."
 	},
 	prepareComputerBlockedSummary: "Setup needs attention.",
-	prepareComputerCompleteSummary: "Computer set up.",
-	prepareComputerDefaultActiveSummary: "Setting up this computer.",
-	prepareComputerNoLocalAgentsSummary: "No local agents selected.",
+	prepareComputerCompleteSummary: "Computer connected.",
+	prepareComputerDefaultActiveSummary: "Connecting this computer.",
+	prepareComputerNoLocalAgentsSummary: "Computer connected. Local agents are syncing in the background.",
 	prepareComputerPendingSummary: "Waiting for Terminal.",
 	prepareComputerTerminalDisconnectedSummary: "Terminal disconnected. Run a fresh setup command.",
 	prepareComputerTitle: "Connect this computer",
-	readyAccountComputerActionSummary: "Setup complete. Back to Computers, or run setup again.",
-	readyCompleteSummary: "Setup complete.",
-	readyDefaultActionSummary: "Continue, or run setup again.",
+	readyAccountComputerActionSummary: "Computer connected. Back to Computers, or reconnect this computer.",
+	readyCompleteSummary: "Computer connected.",
+	readyDefaultActionSummary: "Continue, or reconnect this computer.",
 	readyIncompleteSummary: "Setup not finished yet.",
-	readyNoSelectedLocalAgentsActionSummary: "No local agents selected. Continue, or run setup again.",
-	readyNoSelectedLocalAgentsSummary: "Setup complete. No local agents selected.",
-	readyRefreshPendingActionSummary: "Continue after the check, or run setup again.",
-	readyRefreshErrorSummary: "Setup complete. Wake availability could not refresh.",
-	readyRefreshPendingSummary: "Checking Wake availability.",
-	readySpaceRecoveryActionSummary: "Setup complete. Back to Space, or run setup again.",
-	readyTitle: "Setup complete 🎉",
+	readyNoSelectedLocalAgentsActionSummary: "Computer connected. Local agents will sync in the background. Continue, or reconnect this computer.",
+	readyNoSelectedLocalAgentsSummary: "Computer connected. Local agents will sync in the background.",
+	readyRefreshPendingActionSummary: "Continue after the check, or reconnect this computer.",
+	readyRefreshErrorSummary: "Computer connected. Agent availability could not refresh.",
+	readyRefreshPendingSummary: "Checking agent availability.",
+	readySpaceRecoveryActionSummary: "Computer connected. Back to Space, or reconnect this computer.",
+	readyTitle: "Computer connected",
 	cliAiAgentHintTemplate: "AI setup agents: run {command} for setup.complete.",
 	cliBootstrapRepairStatus: "Preparing OpenMeld...",
 	cliBootstrapRunStatus: "Starting OpenMeld...",
@@ -36476,7 +36928,7 @@ async function resolveAgentTargetState(rawAgentId, states) {
 	if (custom) return await toAgentTargetState(custom, registrationById.get(custom.agentId) ?? null);
 	return null;
 }
-async function updateAgentRegistrations(updater) {
+async function updateAgentRegistrations(updater, options = {}) {
 	let nextRegistrations = [];
 	try {
 		await updateConfiguredDeviceRuntimeState((currentConfig) => {
@@ -36486,10 +36938,10 @@ async function updateAgentRegistrations(updater) {
 	} catch (error) {
 		throw wrapConfigError(error, "agents.config_write_failed");
 	}
-	await notifyDaemonRouteCatalogChanged({ reason: "device_runtime_state_updated" }).catch(() => void 0);
+	if (options.notifyRouteCatalogChanged !== false) await notifyDaemonRouteCatalogChanged({ reason: "device_runtime_state_updated" }).catch(() => void 0);
 	return nextRegistrations;
 }
-async function reconcileNewRunnableBuiltinAgentsForSetup(input = {}) {
+async function reconcileNewRunnableBuiltinAgentRegistrations(input = {}) {
 	const runnableBuiltins = (input.states ?? await listAgentTargetStates()).filter(isRunnableBuiltinForAutomaticSetup).sort((left, right) => compareAgentControllerRefsForDisplay(left.agentId, right.agentId));
 	const result = {
 		registeredAgentIds: [],
@@ -36516,9 +36968,12 @@ async function reconcileNewRunnableBuiltinAgentsForSetup(input = {}) {
 			result.registeredAgentIds.push(state.agentId);
 		}
 		return next;
-	});
+	}, { notifyRouteCatalogChanged: input.notifyRouteCatalogChanged });
 	return result;
 }
+async function reconcileNewRunnableBuiltinAgentsForSetup(input = {}) {
+	return await reconcileNewRunnableBuiltinAgentRegistrations(input);
+}
 async function listAgentCustomTargets() {
 	return normalizeCustomTargets((await getConfiguredSkillsConfig().catch((error) => {
 		throw wrapConfigError(error, "agents.config_read_failed");
@@ -38876,261 +39331,6 @@ function buildRouteCatalogFingerprint(routeCatalog) {
 	});
 }
 //#endregion
-//#region src/local-service/lifecycle/daemon-lifecycle-journal.ts
-const DAEMON_LIFECYCLE_EVENT_TYPES = [
-	"connection.state",
-	"daemon.crash",
-	"lifecycle.command.begin",
-	"lifecycle.command.end",
-	"owner.snapshot",
-	"route_catalog.initial_load",
-	"runtime_state.takeover",
-	"stop.controlled_drain",
-	"stop.strategy.selected",
-	"service_manager.action",
-	"service_manager.registration_reconcile",
-	"process_stop.action",
-	"service_contract.write",
-	"stop.signal.observed"
-];
-const DAEMON_STOP_CAUSES = [
-	"user_stop",
-	"controlled_service_update",
-	"service_crash",
-	"network_disconnect",
-	"unknown"
-];
-function toJournalErrorMessage$1(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-function normalizeSessionId(value) {
-	const normalized = typeof value === "string" ? value.trim() : "";
-	return normalized.length > 0 ? normalized : null;
-}
-function resolveDaemonStopCause(input) {
-	if (input.explicitCause) return input.explicitCause;
-	if (input.type === "daemon.crash") return "service_crash";
-	if (input.intent === "stop") return "user_stop";
-	if (input.intent === "upgrade_reconcile" || input.intent === "reinstall" || input.intent === "startup_check" || input.intent === "status_cleanup") return "controlled_service_update";
-	if (input.type === "connection.state" && input.result !== "connected" && input.result !== "stopping") return "network_disconnect";
-	return "unknown";
-}
-function isDaemonLifecycleEvent(event) {
-	if (typeof event !== "object" || event === null) return false;
-	const candidate = event;
-	return candidate.schema === "openmeld-daemon-lifecycle-event-v1" && candidate.v === 1 && DAEMON_LIFECYCLE_EVENT_TYPES.includes(candidate.type) && typeof candidate.timestamp === "string" && candidate.timestamp.length > 0 && typeof candidate.lane === "string" && candidate.lane.length > 0 && typeof candidate.intent === "string" && candidate.intent.length > 0 && typeof candidate.command === "string" && candidate.command.length > 0 && typeof candidate.pid === "number" && Number.isInteger(candidate.pid) && candidate.pid > 0 && (candidate.sessionId === null || typeof candidate.sessionId === "string" && candidate.sessionId.length > 0) && (candidate.stopCause === void 0 || DAEMON_STOP_CAUSES.includes(candidate.stopCause)) && typeof candidate.result === "string" && candidate.result.length > 0;
-}
-async function resolveDaemonLifecycleAttribution(input) {
-	const lockMeta = await readDaemonServiceLifecycleLockMeta().catch(() => null);
-	return {
-		command: input.command?.trim() || (typeof lockMeta?.command === "string" ? lockMeta.command.trim() : "") || "unknown",
-		intent: input.intent ?? (typeof lockMeta?.intent === "string" ? lockMeta.intent : "unknown"),
-		lane: resolveOpenMeldEnvPreset(input.pathInput),
-		pid: typeof lockMeta?.pid === "number" && lockMeta.pid > 0 ? lockMeta.pid : process$1.pid,
-		sessionId: normalizeSessionId(lockMeta?.sessionId) ?? resolveCliContextId()
-	};
-}
-async function emitDaemonLifecycleEvent(input) {
-	assertNoPublishedProductionMutationDuringTests(input.pathInput ?? {}, "OpenMeld Service lifecycle journal");
-	const journalPath = daemonLifecycleJournalPath(input.pathInput);
-	const attribution = await resolveDaemonLifecycleAttribution(input);
-	const event = {
-		schema: "openmeld-daemon-lifecycle-event-v1",
-		v: 1,
-		type: input.type,
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		lane: attribution.lane,
-		intent: attribution.intent,
-		command: attribution.command,
-		pid: attribution.pid,
-		sessionId: attribution.sessionId,
-		stopCause: resolveDaemonStopCause({
-			explicitCause: input.stopCause,
-			intent: attribution.intent,
-			result: input.result,
-			type: input.type
-		}),
-		result: input.result,
-		...input.metadata ? { metadata: input.metadata } : {}
-	};
-	if (!isDaemonLifecycleEvent(event)) {
-		console.warn(`[openmeld:lifecycle-journal] rejected invalid event ${input.type}`);
-		return;
-	}
-	try {
-		await mkdir(dirname(journalPath), { recursive: true });
-		await appendFile(journalPath, `${JSON.stringify(event)}\n`, "utf8");
-	} catch (error) {
-		console.warn(`[openmeld:lifecycle-journal] failed to append event ${input.type}: ${toJournalErrorMessage$1(error)}`);
-	}
-}
-async function runWithDaemonLifecycleCommandJournal(input) {
-	await emitDaemonLifecycleEvent({
-		type: "lifecycle.command.begin",
-		result: "started",
-		metadata: input.includeProcessUptime ? {
-			...input.metadata,
-			processUptimeMs: Math.round(process$1.uptime() * 1e3)
-		} : input.metadata,
-		pathInput: input.pathInput,
-		command: input.command,
-		intent: input.intent
-	});
-	try {
-		const result = await input.run();
-		const resolvedResult = input.resolveResult?.(result) ?? { result: "completed" };
-		await emitDaemonLifecycleEvent({
-			type: "lifecycle.command.end",
-			result: resolvedResult.result,
-			metadata: resolvedResult.metadata,
-			pathInput: input.pathInput,
-			command: input.command,
-			intent: input.intent
-		});
-		return result;
-	} catch (error) {
-		await emitDaemonLifecycleEvent({
-			type: "lifecycle.command.end",
-			result: "failed",
-			metadata: { errorMessage: toJournalErrorMessage$1(error) },
-			pathInput: input.pathInput,
-			command: input.command,
-			intent: input.intent
-		});
-		throw error;
-	}
-}
-async function runDaemonServiceManagerAction(input) {
-	const startedAtMs = Date.now();
-	try {
-		const result = await input.run();
-		await emitDaemonLifecycleEvent({
-			type: "service_manager.action",
-			result: "completed",
-			metadata: {
-				action: input.action,
-				controller: input.controller,
-				durationMs: Date.now() - startedAtMs,
-				...input.metadata ?? {}
-			},
-			pathInput: input.pathInput,
-			command: input.command,
-			intent: input.intent
-		});
-		return result;
-	} catch (error) {
-		let errorMetadata = null;
-		try {
-			errorMetadata = input.resolveErrorMetadata?.(error) ?? null;
-		} catch {
-			errorMetadata = null;
-		}
-		await emitDaemonLifecycleEvent({
-			type: "service_manager.action",
-			result: "failed",
-			metadata: {
-				action: input.action,
-				controller: input.controller,
-				durationMs: Date.now() - startedAtMs,
-				errorMessage: toJournalErrorMessage$1(error),
-				...errorMetadata ?? {},
-				...input.metadata ?? {}
-			},
-			pathInput: input.pathInput,
-			command: input.command,
-			intent: input.intent
-		});
-		throw error;
-	}
-}
-const DAEMON_LIFECYCLE_ORIGIN_EVENT_TYPES = /* @__PURE__ */ new Set([
-	"daemon.crash",
-	"lifecycle.command.end",
-	"process_stop.action",
-	"runtime_state.takeover",
-	"service_contract.write",
-	"service_manager.action"
-]);
-async function readLatestDaemonLifecycleOriginEvent(input = {}) {
-	return await readLatestDaemonLifecycleEvent({
-		pathInput: input.pathInput,
-		typeFilter: DAEMON_LIFECYCLE_ORIGIN_EVENT_TYPES
-	});
-}
-async function readLatestDaemonLifecycleConnectionStateEvent(input = {}) {
-	return await readLatestDaemonLifecycleEvent({
-		pathInput: input.pathInput,
-		typeFilter: /* @__PURE__ */ new Set(["connection.state"])
-	});
-}
-async function readLatestDaemonLifecycleEvent(input) {
-	const journalPath = daemonLifecycleJournalPath(input.pathInput);
-	let content;
-	try {
-		content = await readFile(journalPath, "utf8");
-	} catch (error) {
-		if (error.code === "ENOENT") return null;
-		throw error;
-	}
-	const lines = content.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
-	for (let index = lines.length - 1; index >= 0; index -= 1) {
-		const line = lines[index];
-		if (!line) continue;
-		try {
-			const parsed = JSON.parse(line);
-			if (isDaemonLifecycleEvent(parsed) && input.typeFilter.has(parsed.type)) return parsed;
-		} catch {}
-	}
-	return null;
-}
-async function readRecentDaemonLifecycleEvents(input) {
-	if (input.maxEntries <= 0) return [];
-	const journalPath = daemonLifecycleJournalPath(input.pathInput);
-	let content;
-	try {
-		content = await readFile(journalPath, "utf8");
-	} catch (error) {
-		if (error.code === "ENOENT") return [];
-		throw error;
-	}
-	const lines = content.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
-	const recent = [];
-	for (let index = lines.length - 1; index >= 0; index -= 1) {
-		const line = lines[index];
-		if (!line) continue;
-		try {
-			const parsed = JSON.parse(line);
-			if (isDaemonLifecycleEvent(parsed)) {
-				recent.push(parsed);
-				if (recent.length >= input.maxEntries) break;
-			}
-		} catch {}
-	}
-	return recent.reverse();
-}
-async function resolveRecentDaemonSignalStopCause(input = {}) {
-	const nowMs = Date.now();
-	const maxAgeMs = input.maxAgeMs ?? 3e4;
-	const events = await readRecentDaemonLifecycleEvents({
-		maxEntries: 32,
-		pathInput: input.pathInput
-	});
-	for (const event of events.toReversed()) {
-		const eventAtMs = Date.parse(event.timestamp);
-		if (!Number.isFinite(eventAtMs) || nowMs - eventAtMs < 0 || nowMs - eventAtMs > maxAgeMs) continue;
-		if (event.stopCause === "user_stop" || event.stopCause === "controlled_service_update") return event.stopCause;
-	}
-	return "unknown";
-}
-function formatDaemonLifecycleOriginSummary(event) {
-	const intent = formatDaemonLifecycleIntent(event.intent);
-	return `${event.result} ${intent} from ${event.command} at ${event.timestamp} (pid ${event.pid})`;
-}
-function formatDaemonLifecycleIntent(intent) {
-	if (intent === "unknown") return "OpenMeld Service task";
-	return intent.replaceAll("_", " ");
-}
-//#endregion
 //#region src/local-service/lifecycle/local-service-demand.ts
 const QUIET_PRESENTER = {
 	view: "agent",
@@ -39138,12 +39338,6 @@ const QUIET_PRESENTER = {
 	line: () => void 0,
 	data: () => void 0
 };
-const AUTO_STOP_WAIT_MS = 3e3;
-const AUTO_STOP_POLL_MS = 200;
-const NOT_INSTALLED_DAEMON_STATUS = {
-	installed: false,
-	state: null
-};
 async function resolveLocalServiceDemand(input) {
 	const projection = input.projection === void 0 ? await syncDeviceRuntimeStateProjection({
 		bindingReads: input.bindingReads,
@@ -39210,7 +39404,7 @@ async function resolveLocalServiceDemand(input) {
 		projection
 	};
 	return {
-		decision: "allow_auto_stop",
+		decision: "keep_running",
 		hasLocalExecutionRoute: false,
 		repairableReplyCandidateCount,
 		reason: resolveZeroLocalValueReason(projection),
@@ -39221,117 +39415,6 @@ async function resolveLocalServiceDemand(input) {
 function isRepairableSkippedDaemonProfile(skipReason) {
 	return skipReason === "projection.missing" || skipReason === "workspace.missing";
 }
-async function maybeAutoStopIdleLocalService(input) {
-	const localDemand = await resolveLocalServiceDemand({
-		ownerUserId: input.ownerUserId,
-		runtimeWorkdir: input.runtimeWorkdir
-	});
-	if (localDemand.decision !== "allow_auto_stop") return {
-		autoStopped: false,
-		effectiveRuntimeStatus: null,
-		localDemand
-	};
-	return await withDaemonServiceRegistrationMutationLock(async () => await stopIdleLocalServiceWithLock(input, localDemand), {
-		intent: "status_cleanup",
-		command: "openmeld service auto-stop"
-	});
-}
-async function stopIdleLocalServiceWithLock(input, localDemand) {
-	const status = await getDaemonStatus().catch(() => NOT_INSTALLED_DAEMON_STATUS);
-	if (!status.installed) return {
-		autoStopped: false,
-		effectiveRuntimeStatus: null,
-		localDemand
-	};
-	const ownerSnapshot = await readCurrentDaemonOwnerSnapshot().catch(() => null);
-	await emitDaemonLifecycleEvent({
-		type: "owner.snapshot",
-		result: "observed",
-		metadata: ownerSnapshot ? summarizeDaemonOwnerSnapshot(ownerSnapshot) : { reason: "owner_snapshot_unavailable" },
-		command: "openmeld service auto-stop",
-		intent: "status_cleanup"
-	});
-	const runtimeState = await resolveDaemonRuntimeState(status);
-	if (!(ownerSnapshot && runtimeState) || runtimeState.status !== "running" || runtimeState.mode !== "background" || !ownerSnapshot.mustStopManagerFirst || !ownerSnapshot.serviceManager) return {
-		autoStopped: false,
-		effectiveRuntimeStatus: runtimeState?.status ?? null,
-		localDemand
-	};
-	const { serviceManager, serviceManagerStatus } = await resolveDaemonServiceManagerForRuntimeState({
-		runtimeState,
-		status
-	});
-	const effectiveRuntimeStatus = getEffectiveDaemonRuntimeStatus({
-		runtimeState,
-		serviceManagerStatus
-	});
-	if (!serviceManager || effectiveRuntimeStatus !== "running") return {
-		autoStopped: false,
-		effectiveRuntimeStatus,
-		localDemand
-	};
-	try {
-		await runDaemonServiceManagerAction({
-			action: "stop",
-			command: "openmeld service auto-stop",
-			controller: serviceManager.controller,
-			intent: "status_cleanup",
-			metadata: { localDemandReason: localDemand.reason },
-			run: async () => await serviceManager.stop()
-		});
-		if (!await waitForDaemonSystemServiceToStop({
-			manager: serviceManager,
-			waitMs: AUTO_STOP_WAIT_MS,
-			pollMs: AUTO_STOP_POLL_MS
-		})) {
-			input.presenter.line({
-				code: `${input.codePrefix}.auto_stop_failed`,
-				text: "OpenMeld could not auto-stop the background service. Run `openmeld service stop` if you want it off right now."
-			});
-			return {
-				autoStopped: false,
-				effectiveRuntimeStatus,
-				localDemand
-			};
-		}
-		const finalOwnerSnapshot = await readCurrentDaemonOwnerSnapshot().catch(() => null);
-		if (finalOwnerSnapshot && hasActiveDaemonOwners(finalOwnerSnapshot)) {
-			input.presenter.line({
-				code: `${input.codePrefix}.auto_stop_failed`,
-				text: "OpenMeld stopped the system service manager, but local service owners are still active on this device."
-			});
-			return {
-				autoStopped: false,
-				effectiveRuntimeStatus,
-				localDemand
-			};
-		}
-		await clearDaemonServiceRuntimeState();
-		input.presenter.line({
-			code: `${input.codePrefix}.auto_stopped`,
-			text: formatLocalServiceAutoStoppedMessage(localDemand)
-		});
-		return {
-			autoStopped: true,
-			effectiveRuntimeStatus: "not_running",
-			localDemand
-		};
-	} catch (error) {
-		input.presenter.line({
-			code: `${input.codePrefix}.auto_stop_failed`,
-			text: `OpenMeld could not auto-stop the background service. ${toErrorMessage$31(error)}`
-		});
-		return {
-			autoStopped: false,
-			effectiveRuntimeStatus,
-			localDemand
-		};
-	}
-}
-function formatLocalServiceAutoStoppedMessage(localDemand) {
-	if (localDemand.projection?.status === "ok" && localDemand.projection.projectedControllerIds.length === 0) return "OpenMeld stopped the background service because this device currently has no projected local agent controllers.";
-	return "OpenMeld stopped the background service because this device currently has no local execution routes.";
-}
 function normalizeOptionalString$9(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
@@ -42134,7 +42217,7 @@ function buildDaemonServiceDependencyMeaning(input) {
 function buildDaemonServiceDependencyNextStep(input) {
 	if (shouldUseDevLocalLaneLabel(input)) return formatInlineOpenMeldCliCommands(`Start the local OpenMeld dev stack with \`pnpm dev\`, then retry \`openmeld service ${input.command}\`.`);
 	if (input.command === "start") return formatInlineOpenMeldCliCommands("Check the configured OpenMeld auth and gateway endpoints for this lane, then retry `openmeld service start`.");
-	return formatInlineOpenMeldCliCommands("Check the configured OpenMeld auth and gateway endpoints for this lane, then retry `openmeld service status` or `openmeld service start --mode foreground`.");
+	return formatInlineOpenMeldCliCommands("Check the configured OpenMeld auth and gateway endpoints for this lane, then retry `openmeld service status`.");
 }
 function buildDependencyProbeTarget(input) {
 	if (!input.baseUrl) return null;
@@ -43511,7 +43594,7 @@ function buildDaemonSystemServiceCommandSpec(input) {
 }
 function resolveDaemonServiceExecutable(input) {
 	if ((input.distribution ?? resolveOpenMeldDistribution()) === "binary") return {
-		executable: input.controller === "launchd" ? daemonServiceExecutableWrapperPath() : input.binaryExecutablePath ?? openMeldManagedVersionBinaryPath(resolveCliSelfVersion()),
+		executable: input.controller === "launchd" ? daemonServiceBinaryExecutablePath() : input.binaryExecutablePath ?? openMeldManagedVersionBinaryPath(resolveCliSelfVersion()),
 		specArgs: input.args
 	};
 	const launcherPath = daemonServiceLauncherPath();
@@ -43529,6 +43612,7 @@ async function ensureDaemonSystemServiceCommandFiles(input) {
 		if (input.controller === "launchd") await ensureDaemonServiceStableBinaryExecutable();
 		return;
 	}
+	if ((await readDaemonActiveBundleState())?.bundleFormat === "binary_v1") throw new Error("Refusing to replace a binary-managed OpenMeld Service with the npm carrier. Run the managed OpenMeld binary for Service repair or update.");
 	await writeDaemonServiceLauncher();
 	if (input.controller === "launchd") await writeDaemonServiceExecutableWrapper();
 }
@@ -44065,12 +44149,15 @@ async function executeDaemonServiceLifecycle(input) {
 		});
 		input.state.failureStage = "register_service";
 		await input.emitPhase("register_service");
+		const serviceDistribution = preparedBundle.bundleFormat === "binary_v1" ? "binary" : "npm";
 		const serviceCommandSpec = buildDaemonSystemServiceCommandSpec({
 			...preparedBundle.bundleFormat === "binary_v1" ? { binaryExecutablePath: preparedBundle.sourceEntryScriptPath } : {},
 			controller: input.context.serviceManager.controller,
+			distribution: serviceDistribution,
 			environmentTarget: input.context.commandOptions.environmentTarget
 		});
 		await installDaemonSystemServiceRegistration({
+			distribution: serviceDistribution,
 			serviceCommandSpec,
 			serviceManager: input.context.serviceManager
 		});
@@ -44091,6 +44178,7 @@ async function executeDaemonServiceLifecycle(input) {
 			input.state.failureStage = "start_if_desired";
 			await input.emitPhase("start_if_desired");
 			await startLifecycleServiceWithRetry({
+				distribution: serviceDistribution,
 				serviceCommandSpec,
 				serviceManager: input.context.serviceManager
 			});
@@ -44242,7 +44330,7 @@ async function recoverLifecycleFailure(input) {
 			evidencePath: input.state.evidencePath,
 			recoveryStatus: "failed_before_safe_state",
 			errorCode: originalErrorCode,
-			errorMessage: recoveryErrorMessage
+			errorMessage: `${recoveryErrorMessage}; stopped-safe recovery failed: ${toErrorMessage$42(stoppedSafe.safeStopError)}`
 		};
 	}
 	input.state.runtimeDataBackup = null;
@@ -44269,16 +44357,23 @@ function isVerifiedRollbackEligibleFailureStage(failureStage) {
 	return failureStage === "install_bundle" || failureStage === "write_contract" || failureStage === "register_service" || failureStage === "restore_runtime_data" || failureStage === "start_if_desired" || failureStage === "wait_running" || failureStage === "verify_final_inventory";
 }
 async function restoreVerifiedPreviousState(input) {
+	const previousVersion = input.restorePoint.previousInstallState?.daemonVersion ?? input.restorePoint.previousContract?.daemonVersion;
+	if (!previousVersion) throw new Error("verified rollback is missing the previous daemon version.");
+	const requiredFloor = (await readVersionState())?.required_floor?.trim();
+	if (requiredFloor && compareSemver(previousVersion, requiredFloor) < 0) throw new Error(`verified rollback version ${previousVersion} is below the required version floor ${requiredFloor}.`);
 	await input.serviceManager.uninstall();
 	await input.serviceManager.waitUntilAbsent();
 	await ensureNoOwnedProcessesRemain();
 	await restoreDaemonInstallStateSnapshot(input.restorePoint.previousInstallState);
 	await restoreDaemonActiveBundleStateSnapshot(input.restorePoint.previousActiveBundle);
 	await restoreLifecycleServiceContractSnapshot(input.restorePoint.previousContract);
+	const previousDistribution = input.restorePoint.previousActiveBundle?.bundleFormat === "binary_v1" ? "binary" : "npm";
 	await installDaemonSystemServiceRegistration({
+		distribution: previousDistribution,
 		serviceCommandSpec: buildDaemonSystemServiceCommandSpec({
 			...input.restorePoint.previousActiveBundle?.bundleFormat === "binary_v1" ? { binaryExecutablePath: input.restorePoint.previousActiveBundle.sourceEntryScriptPath } : {},
 			controller: input.serviceManager.controller,
+			distribution: previousDistribution,
 			environmentTarget: resolveOpenMeldEnvironmentTargetFromEnv()
 		}),
 		serviceManager: input.serviceManager
@@ -44287,8 +44382,6 @@ async function restoreVerifiedPreviousState(input) {
 		await input.serviceManager.start();
 		await input.serviceManager.waitUntilRunning();
 	} else await input.serviceManager.waitUntilStopped();
-	const previousVersion = input.restorePoint.previousInstallState?.daemonVersion ?? input.restorePoint.previousContract?.daemonVersion;
-	if (!previousVersion) throw new Error("verified rollback is missing the previous daemon version.");
 	return await waitForVerifiedLifecycleInventory({
 		desiredState: input.restorePoint.desiredState,
 		expectedVersion: previousVersion,
@@ -44303,7 +44396,7 @@ async function restoreVerifiedPreviousState(input) {
 async function transitionLifecycleToStoppedSafeCurrentVersion(input) {
 	await input.serviceManager.uninstall().catch(() => void 0);
 	await input.serviceManager.waitUntilAbsent().catch(() => void 0);
-	await ensureNoOwnedProcessesRemain().catch(() => void 0);
+	await ensureNoOwnedProcessesRemain();
 	const preparedBundle = await prepareDaemonServiceBundle({
 		daemonVersion: input.expectedVersion,
 		...input.cliScriptPath ? { cliScriptPath: input.cliScriptPath } : {}
@@ -44320,10 +44413,13 @@ async function transitionLifecycleToStoppedSafeCurrentVersion(input) {
 		preparedBundle,
 		serviceController: input.serviceManager.controller
 	});
+	const serviceDistribution = preparedBundle.bundleFormat === "binary_v1" ? "binary" : "npm";
 	await installDaemonSystemServiceRegistration({
+		distribution: serviceDistribution,
 		serviceCommandSpec: buildDaemonSystemServiceCommandSpec({
 			...preparedBundle.bundleFormat === "binary_v1" ? { binaryExecutablePath: preparedBundle.sourceEntryScriptPath } : {},
 			controller: input.serviceManager.controller,
+			distribution: serviceDistribution,
 			environmentTarget: input.commandOptions.environmentTarget
 		}),
 		serviceManager: input.serviceManager
@@ -44350,11 +44446,14 @@ async function recoverBackgroundLifecycleVerificationFailure(input) {
 	await input.serviceManager.stop();
 	await input.serviceManager.waitUntilStopped();
 	await ensureNoOwnedProcessesRemain();
+	const serviceCommandSpec = buildDaemonSystemServiceCommandSpec({
+		controller: input.serviceManager.controller,
+		distribution: input.target.bundleFormat === "binary_v1" ? "binary" : "npm",
+		environmentTarget: input.commandOptions.environmentTarget
+	});
 	await startLifecycleServiceWithRetry({
-		serviceCommandSpec: buildDaemonSystemServiceCommandSpec({
-			controller: input.serviceManager.controller,
-			environmentTarget: input.commandOptions.environmentTarget
-		}),
+		distribution: input.target.bundleFormat === "binary_v1" ? "binary" : "npm",
+		serviceCommandSpec,
 		serviceManager: input.serviceManager
 	});
 	await input.serviceManager.waitUntilRunning();
@@ -44501,11 +44600,12 @@ async function requestControlledSystemServiceDrain(input) {
 		return shutdown.accepted;
 	} catch (error) {
 		const isLegacyShutdownContract = error instanceof LocalDaemonControlPlaneClientError && error.code === "daemon.control.contract_mismatch";
+		const isManagerRunningWithoutRuntime = error instanceof LocalDaemonControlPlaneClientError && error.code === "daemon.control.endpoint_missing" && input.inventory.runtimeStatus.status !== "running" && input.inventory.ownedProcesses.length === 0;
 		const isLegacyMissingCloseReason = isLegacyMissingControlledShutdownCloseReason({
 			error,
 			inventory: input.inventory
 		});
-		const isCompatibilityFallback = isLegacyShutdownContract || isLegacyMissingCloseReason;
+		const isCompatibilityFallback = isLegacyShutdownContract || isLegacyMissingCloseReason || isManagerRunningWithoutRuntime;
 		const observedDaemonVersion = isLegacyMissingCloseReason ? resolveObservedDaemonVersion(input.inventory) : null;
 		await emitDaemonLifecycleEvent({
 			command: `openmeld service ${input.operation.replaceAll("_", "-")}`,
@@ -44516,6 +44616,7 @@ async function requestControlledSystemServiceDrain(input) {
 					compatibilityReason: "legacy_missing_close_reason",
 					observedDaemonVersion
 				} : {},
+				...isManagerRunningWithoutRuntime ? { compatibilityReason: "manager_running_without_runtime" } : {},
 				errorMessage: toErrorMessage$42(error)
 			},
 			result: isCompatibilityFallback ? "fallback" : "failed",
@@ -44884,13 +44985,17 @@ async function startLifecycleServiceWithRetry(input) {
 	await input.serviceManager.uninstall();
 	await input.serviceManager.waitUntilAbsent();
 	await installDaemonSystemServiceRegistration({
+		distribution: input.distribution,
 		serviceCommandSpec: input.serviceCommandSpec,
 		serviceManager: input.serviceManager
 	});
 	await input.serviceManager.start();
 }
 async function installDaemonSystemServiceRegistration(input) {
-	await ensureDaemonSystemServiceCommandFiles({ controller: input.serviceManager.controller });
+	await ensureDaemonSystemServiceCommandFiles({
+		controller: input.serviceManager.controller,
+		distribution: input.distribution
+	});
 	await input.serviceManager.install(input.serviceCommandSpec);
 }
 function verifyLifecycleInventory(input) {
@@ -45113,12 +45218,14 @@ const WINDOWS_SERVICE_ALREADY_RUNNING_PATTERN = /already running|1056/i;
 const SYSTEMD_QUOTING_PATTERN = /[\s"\\]/u;
 async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
 	assertSafePublishedProductionServiceRegistrationMutation("install the OpenMeld Service update worker for", pathInput);
+	const previousActiveBundle = job.preparedBundle.bundleFormat === "binary_v1" ? await readDaemonActiveBundleState().catch(() => null) : null;
+	if (job.preparedBundle.bundleFormat === "binary_v1") await ensureDaemonServiceUpdateWorkerBinaryExecutable(job.preparedBundle, pathInput);
 	const spec = await buildDaemonServiceUpdateWorkerSpec(job, pathInput);
-	const identity = resolveUpdateWorkerIdentity(pathInput);
+	const identity = resolveDaemonServiceUpdateWorkerIdentity(pathInput);
 	if (process$1.platform === "darwin") {
 		const guiDomain = process$1.getuid === void 0 ? "gui/501" : `gui/${process$1.getuid()}`;
 		const serviceKey = `${guiDomain}/${identity.launchdLabel}`;
-		const plistPath = resolveUpdateWorkerLaunchdPlistPath(pathInput);
+		const plistPath = resolveDaemonServiceUpdateWorkerLaunchdPlistPath(pathInput);
 		await Promise.all([mkdir(dirname(plistPath), { recursive: true }), mkdir(dirname(resolveUpdateWorkerLogPath(pathInput)), { recursive: true })]);
 		await writeFile(plistPath, buildLaunchdServiceUpdateWorkerPlist({
 			label: identity.launchdLabel,
@@ -45145,11 +45252,16 @@ async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
 			command: "launchctl",
 			args: ["enable", serviceKey]
 		});
+		await pruneVersionsAfterStableWorkerRegistration({
+			job,
+			pathInput,
+			previousActiveVersion: previousActiveBundle?.daemonVersion ?? null
+		});
 		return;
 	}
 	if (process$1.platform === "linux") {
-		const unitPath = resolveUpdateWorkerSystemdUnitPath(pathInput);
-		const pathUnitPath = resolveUpdateWorkerSystemdPathUnitPath(pathInput);
+		const unitPath = resolveDaemonServiceUpdateWorkerSystemdUnitPath(pathInput);
+		const pathUnitPath = resolveDaemonServiceUpdateWorkerSystemdPathUnitPath(pathInput);
 		await mkdir(dirname(unitPath), { recursive: true });
 		await Promise.all([writeFile(unitPath, buildSystemdServiceUpdateWorkerUnit({ spec }), {
 			encoding: "utf8",
@@ -45174,10 +45286,15 @@ async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
 				`${identity.serviceName}.path`
 			]
 		});
+		await pruneVersionsAfterStableWorkerRegistration({
+			job,
+			pathInput,
+			previousActiveVersion: previousActiveBundle?.daemonVersion ?? null
+		});
 		return;
 	}
 	if (process$1.platform === "win32") {
-		const scriptPath = resolveUpdateWorkerWindowsScriptPath(pathInput);
+		const scriptPath = resolveDaemonServiceUpdateWorkerWindowsScriptPath(pathInput);
 		await mkdir(dirname(scriptPath), { recursive: true });
 		await writeFile(scriptPath, buildWindowsUpdateWorkerScript(spec), {
 			encoding: "utf8",
@@ -45210,13 +45327,18 @@ async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
 				"restart/30000/restart/30000/restart/30000"
 			]
 		});
+		await pruneVersionsAfterStableWorkerRegistration({
+			job,
+			pathInput,
+			previousActiveVersion: previousActiveBundle?.daemonVersion ?? null
+		});
 		return;
 	}
 	throw new Error(`OpenMeld cannot install its background update worker on ${process$1.platform}.`);
 }
 async function startDaemonServiceUpdateWorker(_job, pathInput = {}) {
 	assertSafePublishedProductionServiceRegistrationMutation("start the OpenMeld Service update worker for", pathInput);
-	const identity = resolveUpdateWorkerIdentity(pathInput);
+	const identity = resolveDaemonServiceUpdateWorkerIdentity(pathInput);
 	if (process$1.platform === "darwin") {
 		await requireSuccessfulCommand({
 			command: "launchctl",
@@ -45247,13 +45369,14 @@ async function startDaemonServiceUpdateWorker(_job, pathInput = {}) {
 }
 async function uninstallDaemonServiceUpdateWorker(pathInput = {}) {
 	assertSafePublishedProductionServiceRegistrationMutation("uninstall the OpenMeld Service update worker for", pathInput);
-	const identity = resolveUpdateWorkerIdentity(pathInput);
+	const identity = resolveDaemonServiceUpdateWorkerIdentity(pathInput);
 	if (process$1.platform === "darwin") {
 		await runCommand$1({
 			command: "launchctl",
 			args: ["bootout", `${process$1.getuid === void 0 ? "gui/501" : `gui/${process$1.getuid()}`}/${identity.launchdLabel}`]
 		});
-		await rm(resolveUpdateWorkerLaunchdPlistPath(pathInput), { force: true });
+		await rm(resolveDaemonServiceUpdateWorkerLaunchdPlistPath(pathInput), { force: true });
+		await clearDaemonServiceUpdateWorkerBinaryExecutable(pathInput);
 		return;
 	}
 	if (process$1.platform === "linux") {
@@ -45274,11 +45397,12 @@ async function uninstallDaemonServiceUpdateWorker(pathInput = {}) {
 				`${identity.serviceName}.service`
 			]
 		});
-		await Promise.all([rm(resolveUpdateWorkerSystemdUnitPath(pathInput), { force: true }), rm(resolveUpdateWorkerSystemdPathUnitPath(pathInput), { force: true })]);
+		await Promise.all([rm(resolveDaemonServiceUpdateWorkerSystemdUnitPath(pathInput), { force: true }), rm(resolveDaemonServiceUpdateWorkerSystemdPathUnitPath(pathInput), { force: true })]);
 		await runCommand$1({
 			command: "systemctl",
 			args: ["--user", "daemon-reload"]
 		});
+		await clearDaemonServiceUpdateWorkerBinaryExecutable(pathInput);
 		return;
 	}
 	if (process$1.platform === "win32") {
@@ -45290,6 +45414,7 @@ async function uninstallDaemonServiceUpdateWorker(pathInput = {}) {
 			command: "sc",
 			args: ["delete", identity.windowsServiceName]
 		});
+		await clearDaemonServiceUpdateWorkerBinaryExecutable(pathInput);
 	}
 }
 async function buildDaemonServiceUpdateWorkerSpec(job, pathInput = {}) {
@@ -45297,10 +45422,11 @@ async function buildDaemonServiceUpdateWorkerSpec(job, pathInput = {}) {
 	if (!mainManager) throw new Error("OpenMeld could not find this computer's background service manager.");
 	const baseSpec = buildDaemonSystemServiceCommandSpec({
 		controller: mainManager.controller,
-		...job.preparedBundle.bundleFormat === "binary_v1" ? { binaryExecutablePath: job.preparedBundle.sourceEntryScriptPath } : {}
+		...job.preparedBundle.bundleFormat === "binary_v1" ? { binaryExecutablePath: job.preparedBundle.sourceEntryScriptPath } : {},
+		distribution: job.preparedBundle.bundleFormat === "binary_v1" ? "binary" : "npm"
 	});
 	const binaryDistribution = job.preparedBundle.bundleFormat === "binary_v1";
-	const targetEntryPath = binaryDistribution ? job.preparedBundle.sourceEntryScriptPath : await resolveDaemonBundleEntryPathFromState(job.preparedBundle);
+	const targetEntryPath = binaryDistribution ? daemonServiceUpdateWorkerBinaryPath(pathInput) : await resolveDaemonBundleEntryPathFromState(job.preparedBundle);
 	if (!targetEntryPath) throw new Error("OpenMeld could not resolve the prepared Service update executable.");
 	return {
 		args: binaryDistribution ? ["service", "update-worker"] : [
@@ -45382,30 +45508,16 @@ Unit=${input.serviceName}.service
 WantedBy=default.target
 `;
 }
-function resolveUpdateWorkerIdentity(pathInput) {
-	const preset = resolveOpenMeldEnvPreset(pathInput);
-	const suffix = preset === "prod" ? "" : `-${preset}`;
-	return {
-		launchdLabel: `com.openmeld.openmeld-service-update${preset === "prod" ? "" : `.${preset}`}`,
-		serviceName: `openmeld-service-update${suffix}`,
-		windowsDisplayName: `OpenMeld Service Update${preset === "prod" ? "" : ` (${preset})`}`,
-		windowsServiceName: `OpenMeld-Service-Update${suffix}`
-	};
-}
 function resolveUpdateWorkerLogPath(pathInput) {
 	return join(daemonRuntimeRootPath(pathInput), "logs", "service-update-worker.log");
 }
-function resolveUpdateWorkerLaunchdPlistPath(pathInput) {
-	return join(pathInput.homeDir ?? userInfo().homedir, "Library", "LaunchAgents", `${resolveUpdateWorkerIdentity(pathInput).launchdLabel}.plist`);
-}
-function resolveUpdateWorkerSystemdUnitPath(pathInput) {
-	return join(pathInput.homeDir ?? userInfo().homedir, ".config", "systemd", "user", `${resolveUpdateWorkerIdentity(pathInput).serviceName}.service`);
-}
-function resolveUpdateWorkerSystemdPathUnitPath(pathInput) {
-	return join(pathInput.homeDir ?? userInfo().homedir, ".config", "systemd", "user", `${resolveUpdateWorkerIdentity(pathInput).serviceName}.path`);
-}
-function resolveUpdateWorkerWindowsScriptPath(pathInput) {
-	return join(daemonRuntimeRootPath(pathInput), "service-update-worker.bat");
+async function pruneVersionsAfterStableWorkerRegistration(input) {
+	if (input.job.preparedBundle.bundleFormat !== "binary_v1") return;
+	await pruneManagedVersions({
+		currentVersion: input.job.targetVersion,
+		pathInput: input.pathInput,
+		preferredRollbackVersion: input.previousActiveVersion
+	});
 }
 function buildWindowsUpdateWorkerScript(spec) {
 	const env = Object.entries(spec.env).map(([key, value]) => `set "${key}=${value.replaceAll("\"", "\\\"")}"`);
@@ -57418,7 +57530,7 @@ function buildAgentOttFailureNextSteps(input) {
 	if (input.code === "missing_access_token") return ["Auth worker returned no set-auth-token header; verify bearer plugin is enabled.", "Retry after confirming auth worker deployment includes one-time-token + bearer plugins."];
 	if (input.code === "session_not_saved") return [
 		"Verify the local CLI can persist and reload the bearer session after one-time-token verification.",
-		"Copy a fresh setup command from OpenMeld Web and retry.",
+		"Return to OpenMeld Web to inspect the current connection state and recovery action.",
 		"If it still fails, run `openmeld login --ott <token> --view agent` and inspect the auth worker response."
 	].map((step) => formatInlineOpenMeldCliCommands(step));
 	if (input.code === "expired_token") return [`Open ${input.authBaseUrl}/ and generate a fresh one-time token.`, "Run `openmeld login --view agent --ott <new-token>` immediately."].map((step) => formatInlineOpenMeldCliCommands(step));
@@ -65084,7 +65196,7 @@ function buildSystemServiceStartupFailureReportFromVerdict(verdict, options) {
 		const summary = "OpenMeld Service keeps stopping after it starts.";
 		const card = buildDaemonStartNeedsAttentionCard({
 			summary,
-			nextStep: formatInlineOpenMeldCliCommands("Run `openmeld service start --mode foreground` to see what stopped it."),
+			nextStep: formatInlineOpenMeldCliCommands("Run `openmeld service repair` once. OpenMeld saved the startup evidence for diagnostics."),
 			autoRepairAttempted
 		});
 		return {
@@ -65119,7 +65231,7 @@ function buildSystemServiceStartupFailureReportFromVerdict(verdict, options) {
 	}
 	const card = buildDaemonStartNeedsAttentionCard({
 		summary: "OpenMeld could not finish starting OpenMeld Service.",
-		nextStep: formatInlineOpenMeldCliCommands("Run `openmeld service start --mode foreground` to see what stopped it."),
+		nextStep: formatInlineOpenMeldCliCommands("Run `openmeld service repair` once. OpenMeld saved the startup evidence for diagnostics."),
 		autoRepairAttempted
 	});
 	return {
@@ -65148,7 +65260,7 @@ function buildSystemServiceStartupFailureDiagnostics(input) {
 		launchdLabel: (input.controller ?? null) === "launchd" ? getDaemonServiceLaunchdLabel() : null,
 		lifecycleJournalPath: daemonLifecycleJournalPath(),
 		managerStatus: timeoutError?.managerStatus ?? null,
-		nextSteps: localMachineIssue?.primaryAction ? [localMachineIssue.primaryAction] : [formatOpenMeldCliCommand("openmeld service start --mode foreground"), formatOpenMeldCliCommand("openmeld service repair")],
+		nextSteps: localMachineIssue?.primaryAction ? [localMachineIssue.primaryAction] : [formatOpenMeldCliCommand("openmeld service repair")],
 		recovery: input.recovery,
 		runtimeStatus: timeoutError?.runtimeStatus ?? null,
 		serviceLogPath: getDaemonSystemServiceLogPath()
@@ -75249,14 +75361,17 @@ const runDaemonServiceLoop = async (input) => {
 		skippedProfiles: []
 	});
 	const routeCatalogLoader = createRouteCatalogSyncLoader({
-		loadFresh: async () => await loadDaemonRouteCatalog({
-			allowEmpty: true,
-			localAdapterContainer,
-			localReplyStateMode: "check",
-			ownerUserId,
-			presenter: input.presenter,
-			quiet: true
-		}),
+		loadFresh: async () => {
+			await reconcileNewRunnableBuiltinAgentRegistrations({ notifyRouteCatalogChanged: false });
+			return await loadDaemonRouteCatalog({
+				allowEmpty: true,
+				localAdapterContainer,
+				localReplyStateMode: "check",
+				ownerUserId,
+				presenter: input.presenter,
+				quiet: true
+			});
+		},
 		loadInitial: async () => await loadInitialDaemonRouteCatalog({
 			allowEmpty: true,
 			lane,
@@ -78756,8 +78871,8 @@ function buildDaemonReinstallNextStepText(outcome, action) {
 	switch (outcome.result) {
 		case "already_healthy": return "No action is required.";
 		case "scheduled": return "You can close this window. No action is required.";
-		case "completed": return outcome.serviceState === "running" ? "No action is required." : formatInlineOpenMeldCliCommands(`Run \`${formatOpenMeldCliCommand("openmeld service start")}\` to keep OpenMeld Service running in the background. If you need live logs, run \`${formatOpenMeldCliCommand("openmeld service start --mode foreground")}\`.`);
-		case "stopped_safe": return formatInlineOpenMeldCliCommands(`Run \`${formatOpenMeldCliCommand("openmeld service start --mode foreground")}\` to inspect startup live, or \`${formatOpenMeldCliCommand("openmeld service start")}\` to retry background startup from the current version.`);
+		case "completed": return outcome.serviceState === "running" ? "No action is required." : formatInlineOpenMeldCliCommands(`Run \`${formatOpenMeldCliCommand("openmeld service start")}\` to keep OpenMeld Service running in the background.`);
+		case "stopped_safe": return formatInlineOpenMeldCliCommands(`Run \`${formatOpenMeldCliCommand("openmeld service repair")}\` once. OpenMeld preserved the failed update evidence and kept the current version stopped safely.`);
 		case "in_progress": return formatInlineOpenMeldCliCommands(`Wait a moment. If OpenMeld Service is still not connected, run \`${formatOpenMeldCliCommand(outcome.retryCommand)}\` again.`);
 		case "downgrade_blocked": return `${formatDaemonServiceDowngradeBlockedRecommendation({
 			installedVersion: outcome.installedVersion,
@@ -78938,7 +79053,7 @@ function buildDaemonReinstallUnexpectedStartSummary(_error, action = "repair") {
 	return `OpenMeld Service couldn't start after the ${formatDaemonServiceMaintenanceActionLabel(action)}.`;
 }
 function buildDaemonReinstallUnexpectedStartNextStep(action = "repair") {
-	return formatInlineOpenMeldCliCommands(`Run \`openmeld service start --mode foreground\` to see the live error. The latest local service log is at \`${getDaemonSystemServiceLogPath()}\`. If it still fails, run \`${formatDaemonServiceMaintenanceCommand(action)}\` again.`);
+	return formatInlineOpenMeldCliCommands(`Run \`${formatDaemonServiceMaintenanceCommand(action)}\` once. OpenMeld saved the latest local service log at \`${getDaemonSystemServiceLogPath()}\` for diagnostics.`);
 }
 function buildDaemonReinstallStartBlockedWhyText(outcome, action) {
 	const forcedSuffix = outcome.forceUsed ? " Force continue was used after graceful drain timed out." : "";
@@ -78970,7 +79085,7 @@ function buildDaemonReinstallStartBlockedNextStep(outcome, action) {
 	switch (outcome.blockReason) {
 		case "authentication_required": return formatInlineOpenMeldCliCommands(`Run \`${formatOpenMeldCliCommand("openmeld login")}\` first, then \`${formatOpenMeldCliCommand("openmeld service start")}\` to start OpenMeld Service in the background.`);
 		case "authentication_environment_mismatch": return formatInlineOpenMeldCliCommands(`Run \`${formatOpenMeldCliCommand("openmeld login")}\` for the correct OpenMeld environment, then \`${formatOpenMeldCliCommand("openmeld service start")}\` again.`);
-		case "service_dependencies_unavailable": return formatInlineOpenMeldCliCommands(`Start the required OpenMeld dependencies, then run \`${formatOpenMeldCliCommand("openmeld service start")}\` again. If you need live detail, run \`${formatOpenMeldCliCommand("openmeld service start --mode foreground")}\`.`);
+		case "service_dependencies_unavailable": return formatInlineOpenMeldCliCommands(`Start the required OpenMeld dependencies, then run \`${formatOpenMeldCliCommand("openmeld service start")}\` again.`);
 		case "cleanup_required": return formatInlineOpenMeldCliCommands(`Run \`${formatOpenMeldCliCommand("openmeld service status")}\` to inspect the current cleanup guidance. If OpenMeld still reports a conflict, run \`${formatOpenMeldCliCommand(formatDaemonServiceMaintenanceCommand(action))}\` again.`);
 		default: {
 			const unexpectedBlockReason = outcome.blockReason;
@@ -80847,7 +80962,7 @@ async function handleDaemonRunStartFailure(input) {
 		}) : [
 			"OpenMeld could not finish starting OpenMeld Service.",
 			...failure?.detail ? [`Last local detail: ${failure.detail}`] : [],
-			`Next: ${formatInlineOpenMeldCliCommands("Run `openmeld service start --mode foreground` to see the live error. If it still fails, run `openmeld service repair`.")}`
+			`Next: ${formatInlineOpenMeldCliCommands("Run `openmeld service repair` once. OpenMeld saved the startup evidence for diagnostics.")}`
 		].join("\n");
 		input.presenter.data({
 			code: "daemon.run.start_failed",
@@ -80881,7 +80996,7 @@ async function handleDaemonRunStartFailure(input) {
 		const card = buildDaemonStartNeedsAttentionCard({
 			summary: "OpenMeld could not finish starting OpenMeld Service.",
 			detail: failure?.detail ?? void 0,
-			nextStep: formatInlineOpenMeldCliCommands("Run `openmeld service start --mode foreground` to see the live error. If it still fails, run `openmeld service repair`.")
+			nextStep: formatInlineOpenMeldCliCommands("Run `openmeld service repair` once. OpenMeld saved the startup evidence for diagnostics.")
 		});
 		renderServiceActionCard({
 			presenter: input.presenter,
@@ -83806,17 +83921,6 @@ function assertNever(value) {
 	throw new Error(`unsupported agents agent overview command: ${String(value)}`);
 }
 //#endregion
-//#region src/system/local-participation-mutation-reconcile.ts
-async function postLocalParticipationMutationReconcile(input) {
-	if (!input.shouldReconcile) return;
-	await maybeAutoStopIdleLocalService({
-		codePrefix: input.codePrefix,
-		ownerUserId: input.ownerUserId,
-		presenter: input.presenter,
-		runtimeWorkdir: input.runtimeWorkdir
-	});
-}
-//#endregion
 //#region src/ui/transport-mode-display.ts
 const DISPLAY_NOT_SET_UP = "Not set up";
 function formatTransportModeDisplay(value) {
@@ -86155,12 +86259,6 @@ async function runAgentsDisable(input) {
 		}
 		return sortAgentRegistrations(next);
 	});
-	await postLocalParticipationMutationReconcile({
-		codePrefix: "agents.disable",
-		ownerUserId: (await resolveLocalParticipationOwnerProfile(runtime))?.ownerUserId ?? null,
-		presenter,
-		shouldReconcile: summary.disabled.length > 0
-	});
 	if (input.json === true) {
 		emitCliJsonEnvelope({
 			schemaVersion: 1,
@@ -86218,12 +86316,6 @@ async function runAgentsConfig(input) {
 		return sortAgentRegistrations(next);
 	})).find((item) => item.agentId === agentId) ?? null;
 	if (!effectiveConfig) throw new Error("agents.config_write_failed: config update returned empty");
-	await postLocalParticipationMutationReconcile({
-		codePrefix: "agents.config",
-		ownerUserId: (await resolveLocalParticipationOwnerProfile(runtime))?.ownerUserId ?? null,
-		presenter,
-		shouldReconcile: enabled === false
-	});
 	const payload = {
 		agentId,
 		updatedFields,
@@ -86261,14 +86353,6 @@ async function runAgentsConfig(input) {
 		minContentWidth: 34
 	});
 }
-async function resolveLocalParticipationOwnerProfile(runtime) {
-	return await resolveOpenMeldProfileOrNull({
-		openMeldProfileId: runtime.openMeldProfileId,
-		allowDefaultFallback: true,
-		allowUnauthenticated: true,
-		persistSelection: false
-	}).catch(() => null);
-}
 async function runAgentsCustomList(input) {
 	const runtime = await resolveRuntimeContext({
 		view: input.view,
@@ -109461,6 +109545,6 @@ function isHumanInteractiveSpaceRuntime(runtime) {
 	return runtime.resolvedView === "human" && canUseInteractivePrompts(runtime);
 }
 //#endregion
-export { runAgentsRepair as $, defaultManagedIntegrationPaths as $a, readDaemonServiceJobCrashExitCode as $i, formatDaemonServiceMissingRecommendation as $n, resolveOpenClawLocalDiagnosticsValue as $r, readBundledOpenMeldCliSkillDocumentByPath as $t, assertFullSignalIdArgument as A, resolveOpenMeldProfile as Aa, resolveNativeAgentControllerPermissionModeForController as Ai, upsertSpaceConfig as An, runIfAgentActivityBindingGenerationIsCurrent as Ao, DualViewGuideError as Ar, shouldEmitAgentOverview as At, persistAgentTransportSelection as B, resolveAuthenticationGuidanceFromError as Ba, assessServerRequiredVersion as Bi, promptSearchMultiselect as Bn, errLine as Bo, runPendingDaemonServiceUpdate as Br, parseJsonResponse$1 as Bt, toSpaceMetaUpsertInput as C, requireOpenMeldProfile as Ca, getAgentControllerPermissionModeFieldLabel as Ci, submitRuntimeAgentControllerReport as Cn, readAgentActivityOutboxHealth as Co, SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS as Cr, runDaemonTeardownStrict as Ct, formatHumanReadTargetList as D, deleteOpenMeldProfile as Da, resolveAgentExecutionStatus as Di, resolveLocalAgentControllerLaunchability as Dn, listProjectConnectionsWithStatus as Do, registerAuthLoginRequestOptions as Dr, reconcileCliVersionView as Dt, buildHumanReplyContextSummary as E, createOpenMeldHumanProfile as Ea, resolveAgentControllerPermissionModeForController as Ei, resolveLocalAgentControllerBlockerReasonCodes as En, listProjectBindings as Eo, registerDaemonControlTargetOptions as Er, buildProfileWorkspaceRows as Et, emitSpaceAgentOverview as F, setSelectedOpenMeldProfileId as Fa, buildDaemonServiceTargetSpec as Fi, buildSignalMessageReadProjection as Fn, readControllerTaskLifecycleOutboxHealth as Fo, SPACE_CONTRACT_ALLOWED_ACTION_ORDER as Fr, fetchSpaceMeta as Ft, runAgentsCustomList as G, validateLocalProjectConnectionPath as Ga, resetCurrentCommandCheckState as Gi, isCliUpdateCheckApplicable as Gn, cliJsonSkillsListEnvelopeSchema as Go, resolveServiceReadinessFromServiceStatus as Gr, runDaemonStartDecisionPrompt as Gt, runAgents as H, getProfileDefaultView as Ha, finishCurrentCommandCheckScope as Hi, isReturnKeypress as Hn, outLine as Ho, ensureDaemonRuntimePaths as Hr, writeInstalledLocalComponentsSnapshot as Ht, emitSpaceCliAgentOverview as I, buildAgentAuthenticationGuide as Ia, resolveDaemonServiceAlignmentDecision as Ii, buildSpaceRoundReadProjection as In, renderInfoCard as Io, areAllowedActionsEquivalent as Ir, updateSpaceMeta as It, runAgentsDetect as J, isAgentActivityRouteRegistered as Ja, resolveVersionChangeDirection as Ji, readDispatchSpaceActionContextFromEnv as Jn, getOrganizationJoinLinkResponseSchema as Jo, formatAgentReplyReadinessLabel as Jr, runSkillsEnsure as Jt, runAgentsCustomRemove as K, LocalDaemonControlPlaneClientError as Ka, startCurrentCommandCheckScope as Ki, assertDispatchOwnedRuntimePublicWriteAllowed as Kn, cliJsonSkillsLoadEnvelopeSchema as Ko, resolveDaemonServiceFreshnessWarning as Kr, collectSkillsReadinessSnapshot as Kt, prepareLocalAgentReadiness as L, buildHumanAuthenticationCard as La, classifyDaemonServiceRunStartability as Li, buildUpdatesReplyWorkflowProjection as Ln, renderTextInfoCard as Lo, buildAgentFacingPublicationModeGuideLines as Lr, readGatewayJsonResponse as Lt, prepareAuthenticatedSpaceCommandContext as M, alignSelectedOpenMeldProfileStorage as Ma, buildDaemonRouteObservationPresentation as Mi, buildDispatchResultMessageReadProjection as Mn, unbindProject as Mo, buildDualViewGuideMessage as Mr, readDaemonStartFailureLogTailLines as Mt, resolveOpenMeldProfileForSpaceCommand as N, clearSelectedOpenMeldProfileId as Na, buildOnboardingPlan as Ni, buildDispatchResultReplyWorkflowProjection as Nn, canonicalizeLocalProjectPath as No, formatAgentOverviewPayload as Nr, fetchSpaceUpdates as Nt, parseEnvelope as O, listOpenMeldProfiles as Oa, resolveAgentProfileEditCapabilities as Oi, resolveLocalAgentControllerReportDecision as On, migrateProjectBindingStore as Oo, registerBuiltinAgentSelectionOptions as Or, emitDaemonAgentOverview as Ot, resolveSpaceAccessLabel as P, getSelectedOpenMeldProfileId as Pa, getSetupFlowCopy as Pi, buildSignalIndex as Pn, enqueueControllerTaskLifecycleEventWhileLocked as Po, OPENMELD_AGENT_MENTAL_MODEL_LINES as Pr, createCliSpaceApi as Pt, runAgentsManage as Q, AGENT_ACTIVITY_INTEGRATION_OWNER as Qa, isDaemonServiceJobNeverSpawned as Qi, formatDaemonServiceDowngradeBlockedRecommendation as Qn, resolveGatewayChainReadiness as Qr, ensureLocalSkills as Qt, buildReplyReadinessGuidance as R, createAuthenticationError as Ra, classifyDaemonServiceWakeability as Ri, createSpaceMemberIdentityIndex as Rn, sanitizeTerminalDisplayText as Ro, canonicalizeAllowedActions as Rr, readGatewayTextResponse as Rt, loadSpaceSignalIndexOrNull as S, isSelectedOpenMeldProfileRequiredError as Sa, getAgentControllerPermissionModeDisplayMetadata as Si, submitProfileRuntimeAgentControllerReport as Sn, removeProjectInbox as So, registerSpaceMemberSelectionOptions as Sr, runDaemonStop as St, buildFormalSignalReadPayload as T, createOpenMeldAgentProfile as Ta, parseAgentControllerRef as Ti, collectLocalAgentControllerInventory as Tn, bindProject as To, getCliVersionInfo as Tr, buildProfileWorkspacePresentation as Tt, runAgentsConfig as U, setProfileDefaultView as Ua, getCurrentCommandCheckState as Ui, runInteractivePrompt as Un, cliBinaryDeltaPatchSchema as Uo, resolveDaemonDeviceId as Ur, resolveDaemonServiceParticipationStatus as Ut, resolveAgentProfileSetup as V, resolveAuthenticationGuidanceFromMessage as Va, resolveOpenMeldEnvironmentTarget as Vi, promptSearchSelect as Vn, outJsonLine as Vo, scheduleDaemonServiceUpdate as Vr, resolveLocalComponentsStatus as Vt, runAgentsCustomAdd as W, LocalProjectConnectionError as Wa, isCurrentCommandCheckScopeActive as Wi, assessCliUpdate as Wn, cliJsonOutputEnvelopeSchema as Wo, formatDaemonFailureContextText as Wr, runDaemonServiceParticipationGate as Wt, runAgentsEnable as X, resolveAgentActivityRouteForPath as Xa, readCurrentObservedDaemonRuntimeStatus as Xi, formatElapsedTime as Xn, revokeOrganizationJoinLinkResponseSchema as Xo, formatHumanReplyReadinessReason as Xr, runSkillsUninstall as Xt, runAgentsDisable as Y, registerAgentActivityRoute as Ya, readCurrentDaemonRuntimeContext as Yi, writeDispatchSpaceActionRecord as Yn, organizationJoinLinkErrorResponseSchema as Yo, formatDeviceReplyReadinessLabel as Yr, runSkillsInstall as Yt, runAgentsList as Z, unregisterAgentActivityRoute as Za, getDaemonSystemServiceLogPath as Zi, resolveElapsedTimeMs as Zn, compareAgentControllerRefsForDisplay as Zo, mapAgentReplyReadinessToLegacyAutoReply as Zr, runSkillsUpdate as Zt, runSpaceWriteWithPasswordRetry as _, createPresenter as _a, listBuiltinAgentsRegistryEntries as _i, ensureAgentProfileRuntimeBinding as _n, buildAgentActivityEvent as _o, createStartAgentIdentityGuideError as _r, runDaemonInterrupt as _t, runSpaceDelete as a, ensureVersionStateReady as aa, normalizeCustomProfileWorkspacePath as ai, evaluateCommandAuthentication as an, formatOpenMeldCliCommand as ao, createResetConfirmationGuideError as ar, printOpenMeldBanner as at, buildIdentityOnlyMembersSnapshotForReadProjection as b, resolveRuntimeContext as ba, buildAgentControllerRef as bi, assessActionParticipationCandidate as bn, readCodexSessionTitles as bo, getCommandEntryContract as br, runDaemonSnapshot as bt, runSpaceLeave as c, readVersionState as ca, setCustomProfileWorkspace as ci, runAuthMenu as cn, formatOpenMeldCliTextBlock as co, createSpaceContractSetGuideError as cr, renderOpenMeldLogo as ct, runSpaceRemoveMembers as d, toStartBackgroundHelperExecutionCompatibility as da, describeProfileWorkspacePathValidationFailure as di, buildAuthStatusSnapshot as dn, resolveUserFacingCliEntryCommand as do, createSpacePublicationSetGuideError as dr, resolveSpaceSendText as dt, resolveDaemonServiceManager as ea, readRecentDaemonLifecycleEvents as ei, readRuntimeReportingHealthState as en, installAgentActivityIntegrations as eo, canUseInteractivePrompts as er, runAgentsShow as et, runSpaceSend as f, resolveCurrentDaemonExpectedVersion as fa, syncDeviceRuntimeStateProjection as fi, formatActiveOrganizationLabel as fn, syncLocalAgentActivity as fo, createSpaceRemoveMembersGuideError as fr, runDaemon as ft, runSpaceReadWithPasswordRetry as g, renderHumanTextErrorCard as ga, reconcileNewRunnableBuiltinAgentsForSetup as gi, promptTextEntry as gn, removeAgentActivityContextCache as go, createSpaceUpdatesGuideError as gr, runDaemonInstall as gt, uploadPreparedSpaceFiles as h, renderHumanErrorCard as ha, listAgentTargetStates as hi, resolveCreateProfileName as hn, readAgentActivityContextForPath as ho, createSpaceTargetGuideError as hr, runDaemonCancel as ht, runSpaceCreate as i, compareSemver as ia, ensureOpenMeldManagedProfileWorkspace as ii, ensureCommandAuthenticationOrCancel as in, formatInlineOpenMeldCliCommands as io, createProfileMenuGuideError as ir, colorizeDisplayProfileLabel as it, assertValidSpaceIdTarget as j, updateOpenMeldProfile as ja, PREPARE_SESSION_RECONNECT_GRACE_MS as ji, assertNoRemovedCcSpaceAddressingSyntax as jn, setDefaultProjectConnection as jo, formatDualViewGuideForDisplay as jr, runDaemonStartupPreflight as jt, isSpaceCommandOutputHandledError as k, primeOpenMeldProfilesSessionCache as ka, resolveEvidenceSyncHealth as ki, inspectSpaceCacheFile as kn, removeProjectConnection as ko, buildAgentOverviewFromContract as kr, createDelayedSpinner as kt, runSpaceList as l, writeVersionState as la, setOpenMeldManagedProfileWorkspace as li, runAuthStatus as ln, formatProfileAwareOpenMeldCliCommands as lo, createSpaceLeaveGuideError as lr, renderOpenMeldTagline as lt, prepareRequestedSpaceSendFiles as m, buildHumanErrorCopy as ma, resolveAgentProfilePrimaryAgentControllerReport as mi, resolveCreateProfileKind as mn, upsertDaemonServiceContract as mo, createSpaceSubcommandTargetGuideError as mr, runDaemonBackgroundStartForDecision as mt, promptAndConfirmSpacePassword as n, performManagedInstall as na, createModelCatalogReadSession as ni, connectWebSocket as nn, resolveAgentActivityDispatcherCommand as no, createProfileActionGuideError as nr, postLocalParticipationMutationReconcile as nt, runSpaceHistory as o, fetchLatestCliBinaryRelease as oa, readProfileWorkspaceConfig as oi, runAuthLogin as on, formatOpenMeldCliCommands as oo, createSpaceAddMembersGuideError as or, renderOpenMeldBrandBlockLines as ot, runSpaceWatch as p, OPENMELD_VERSION as pa, createPrimaryBindingReadSession as pi, createProfileByKind as pn, readDaemonServiceContract as po, createSpaceResultGuideError as pr, runDaemonAutostart as pt, runAgentsCustomUpdate as q, requestLocalAgentActivitySync as qa, inspectDaemonServiceInventory as qi, readDispatchOwnedRuntimeGuard as qn, cliJsonSkillsShowEnvelopeSchema as qo, resolveCurrentReplyReadinessSnapshot as qr, runSkillsCheck as qt, runSpaceAddMembers as r, buildNextVersionState as ra, resolveProfileWorkspaceRuntime as ri, buildCommandAuthenticationPromptMessage as rn, uninstallAgentActivityIntegrations as ro, createProfileCreateGuideError as rr, colorizeAgentLabel as rt, runSpaceJoin as s, fetchLatestPackageInfo as sa, resolveConfiguredProfileWorkspacePath as si, runAuthLogout as sn, formatOpenMeldCliLine as so, createSpaceAliasTargetGuideError as sr, renderOpenMeldHeader as st, buildCreateSpacePasswordPromptConfig as t, buildInstallSelfJsonPayload as ta, syncProfileWorkspaceState as ti, readRecentDaemonDispatchJournalEvents as tn, readAgentActivityIntegrationStatus as to, createDoctorFailedGuideError as tr, formatTransportModeDisplay as tt, runSpacePassword as u, resolveDaemonRuntimeContractCompatibility as ua, validateCustomProfileWorkspacePath as ui, buildAuthStatusRows as un, resolveSetupFollowUpCliEntryCommand as uo, createSpaceMenuGuideError as ur, resolveGatewayWebOrigin as ut, buildHumanReadSignalsTranscriptItems as v, formatMessage as va, notifyDaemonRouteCatalogChanged as vi, formatServiceParticipationReadinessLabel as vn, resolveObservedAgentActivityBinding as vo, createStartAuthenticationGuideError as vr, runDaemonReinstall as vt, buildFormalDispatchResultReadPayload as w, resolveOpenMeldProfileOrNull as wa, listAgentControllerPermissionModeOptions as wi, submitRuntimeAgentControllerReports as wn, removeProjectOutbox as wo, registerSkillsTargetSelectionOptions as wr, runDaemonUninstall as wt, loadSpaceIdentityDirectoryOrNull as x, resolveViewProfileKey as xa, createAgentExecutionStatusDisplayRows as xi, computeRetryDelayMs as xn, enqueueAgentActivityHookEvent as xo, getCommandHintsFromContract as xr, runDaemonStatusFlow as xt, emitHumanReadSignalsTextProjection as y, parseCliViewMode as ya, resolveLocalRegistryAgentIdFromAgentControllerRef as yi, resolveServiceParticipationReadiness as yn, normalizeSharedSessionTitle as yo, createUpgradeConfirmationGuideError as yr, runDaemonRunAfterEntryChecks as yt, resolveHumanControllerDisplayName as z, resolveAuthenticationGuidance as za, resolveServiceUpdateUrgency as zi, formatRemovedCcRelationMessage as zn, emitCliJsonEnvelope as zo, readOpenMeldToolsUpdateContextFromEnv as zr, toStructuredGatewayFailure as zt };
+export { runAgentsRepair as $, installAgentActivityIntegrations as $a, readRecentDaemonLifecycleEvents as $i, canUseInteractivePrompts as $n, syncProfileWorkspaceState as $r, readRuntimeReportingHealthState as $t, assertFullSignalIdArgument as A, updateOpenMeldProfile as Aa, buildDaemonRouteObservationPresentation as Ai, assertNoRemovedCcSpaceAddressingSyntax as An, setDefaultProjectConnection as Ao, formatDualViewGuideForDisplay as Ar, runDaemonStartupPreflight as At, persistAgentTransportSelection as B, resolveAuthenticationGuidanceFromMessage as Ba, finishCurrentCommandCheckScope as Bi, promptSearchSelect as Bn, outJsonLine as Bo, scheduleDaemonServiceUpdate as Br, resolveLocalComponentsStatus as Bt, toSpaceMetaUpsertInput as C, resolveOpenMeldProfileOrNull as Ca, parseAgentControllerRef as Ci, submitRuntimeAgentControllerReports as Cn, removeProjectOutbox as Co, registerSkillsTargetSelectionOptions as Cr, runDaemonUninstall as Ct, formatHumanReadTargetList as D, listOpenMeldProfiles as Da, resolveEvidenceSyncHealth as Di, resolveLocalAgentControllerReportDecision as Dn, migrateProjectBindingStore as Do, registerBuiltinAgentSelectionOptions as Dr, emitDaemonAgentOverview as Dt, buildHumanReplyContextSummary as E, deleteOpenMeldProfile as Ea, resolveAgentProfileEditCapabilities as Ei, resolveLocalAgentControllerLaunchability as En, listProjectConnectionsWithStatus as Eo, registerAuthLoginRequestOptions as Er, reconcileCliVersionView as Et, emitSpaceAgentOverview as F, buildAgentAuthenticationGuide as Fa, classifyDaemonServiceRunStartability as Fi, buildSpaceRoundReadProjection as Fn, renderInfoCard as Fo, areAllowedActionsEquivalent as Fr, updateSpaceMeta as Ft, runAgentsCustomList as G, LocalDaemonControlPlaneClientError as Ga, inspectDaemonServiceInventory as Gi, assertDispatchOwnedRuntimePublicWriteAllowed as Gn, cliJsonSkillsLoadEnvelopeSchema as Go, resolveDaemonServiceFreshnessWarning as Gr, collectSkillsReadinessSnapshot as Gt, runAgents as H, setProfileDefaultView as Ha, isCurrentCommandCheckScopeActive as Hi, runInteractivePrompt as Hn, cliBinaryDeltaPatchSchema as Ho, resolveDaemonDeviceId as Hr, resolveDaemonServiceParticipationStatus as Ht, emitSpaceCliAgentOverview as I, buildHumanAuthenticationCard as Ia, classifyDaemonServiceWakeability as Ii, buildUpdatesReplyWorkflowProjection as In, renderTextInfoCard as Io, buildAgentFacingPublicationModeGuideLines as Ir, readGatewayJsonResponse as It, runAgentsDetect as J, registerAgentActivityRoute as Ja, readCurrentObservedDaemonRuntimeStatus as Ji, writeDispatchSpaceActionRecord as Jn, organizationJoinLinkErrorResponseSchema as Jo, formatDeviceReplyReadinessLabel as Jr, runSkillsInstall as Jt, runAgentsCustomRemove as K, requestLocalAgentActivitySync as Ka, resolveVersionChangeDirection as Ki, readDispatchOwnedRuntimeGuard as Kn, cliJsonSkillsShowEnvelopeSchema as Ko, resolveCurrentReplyReadinessSnapshot as Kr, runSkillsCheck as Kt, prepareLocalAgentReadiness as L, createAuthenticationError as La, resolveServiceUpdateUrgency as Li, createSpaceMemberIdentityIndex as Ln, sanitizeTerminalDisplayText as Lo, canonicalizeAllowedActions as Lr, readGatewayTextResponse as Lt, prepareAuthenticatedSpaceCommandContext as M, clearSelectedOpenMeldProfileId as Ma, getSetupFlowCopy as Mi, buildDispatchResultReplyWorkflowProjection as Mn, canonicalizeLocalProjectPath as Mo, formatAgentOverviewPayload as Mr, fetchSpaceUpdates as Mt, resolveOpenMeldProfileForSpaceCommand as N, getSelectedOpenMeldProfileId as Na, buildDaemonServiceTargetSpec as Ni, buildSignalIndex as Nn, enqueueControllerTaskLifecycleEventWhileLocked as No, OPENMELD_AGENT_MENTAL_MODEL_LINES as Nr, createCliSpaceApi as Nt, parseEnvelope as O, primeOpenMeldProfilesSessionCache as Oa, resolveNativeAgentControllerPermissionModeForController as Oi, inspectSpaceCacheFile as On, removeProjectConnection as Oo, buildAgentOverviewFromContract as Or, createDelayedSpinner as Ot, resolveSpaceAccessLabel as P, setSelectedOpenMeldProfileId as Pa, resolveDaemonServiceAlignmentDecision as Pi, buildSignalMessageReadProjection as Pn, readControllerTaskLifecycleOutboxHealth as Po, SPACE_CONTRACT_ALLOWED_ACTION_ORDER as Pr, fetchSpaceMeta as Pt, runAgentsManage as Q, defaultManagedIntegrationPaths as Qa, resolveDaemonServiceManager as Qi, formatDaemonServiceMissingRecommendation as Qn, resolveOpenClawLocalDiagnosticsValue as Qr, readBundledOpenMeldCliSkillDocumentByPath as Qt, buildReplyReadinessGuidance as R, resolveAuthenticationGuidance as Ra, assessServerRequiredVersion as Ri, formatRemovedCcRelationMessage as Rn, emitCliJsonEnvelope as Ro, readOpenMeldToolsUpdateContextFromEnv as Rr, toStructuredGatewayFailure as Rt, loadSpaceSignalIndexOrNull as S, requireOpenMeldProfile as Sa, listAgentControllerPermissionModeOptions as Si, submitRuntimeAgentControllerReport as Sn, readAgentActivityOutboxHealth as So, SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS as Sr, runDaemonTeardownStrict as St, buildFormalSignalReadPayload as T, createOpenMeldHumanProfile as Ta, resolveAgentExecutionStatus as Ti, resolveLocalAgentControllerBlockerReasonCodes as Tn, listProjectBindings as To, registerDaemonControlTargetOptions as Tr, buildProfileWorkspaceRows as Tt, runAgentsConfig as U, LocalProjectConnectionError as Ua, resetCurrentCommandCheckState as Ui, assessCliUpdate as Un, cliJsonOutputEnvelopeSchema as Uo, formatDaemonFailureContextText as Ur, runDaemonServiceParticipationGate as Ut, resolveAgentProfileSetup as V, getProfileDefaultView as Va, getCurrentCommandCheckState as Vi, isReturnKeypress as Vn, outLine as Vo, ensureDaemonRuntimePaths as Vr, writeInstalledLocalComponentsSnapshot as Vt, runAgentsCustomAdd as W, validateLocalProjectConnectionPath as Wa, startCurrentCommandCheckScope as Wi, isCliUpdateCheckApplicable as Wn, cliJsonSkillsListEnvelopeSchema as Wo, resolveServiceReadinessFromServiceStatus as Wr, runDaemonStartDecisionPrompt as Wt, runAgentsEnable as X, unregisterAgentActivityRoute as Xa, isDaemonServiceJobNeverSpawned as Xi, resolveElapsedTimeMs as Xn, compareAgentControllerRefsForDisplay as Xo, mapAgentReplyReadinessToLegacyAutoReply as Xr, runSkillsUpdate as Xt, runAgentsDisable as Y, resolveAgentActivityRouteForPath as Ya, getDaemonSystemServiceLogPath as Yi, formatElapsedTime as Yn, revokeOrganizationJoinLinkResponseSchema as Yo, formatHumanReplyReadinessReason as Yr, runSkillsUninstall as Yt, runAgentsList as Z, AGENT_ACTIVITY_INTEGRATION_OWNER as Za, readDaemonServiceJobCrashExitCode as Zi, formatDaemonServiceDowngradeBlockedRecommendation as Zn, resolveGatewayChainReadiness as Zr, ensureLocalSkills as Zt, runSpaceWriteWithPasswordRetry as _, formatMessage as _a, resolveLocalRegistryAgentIdFromAgentControllerRef as _i, formatServiceParticipationReadinessLabel as _n, resolveObservedAgentActivityBinding as _o, createStartAuthenticationGuideError as _r, runDaemonReinstall as _t, runSpaceDelete as a, fetchLatestCliBinaryRelease as aa, resolveConfiguredProfileWorkspacePath as ai, runAuthLogin as an, formatOpenMeldCliCommands as ao, createSpaceAddMembersGuideError as ar, renderOpenMeldBrandBlockLines as at, buildIdentityOnlyMembersSnapshotForReadProjection as b, resolveViewProfileKey as ba, getAgentControllerPermissionModeDisplayMetadata as bi, computeRetryDelayMs as bn, enqueueAgentActivityHookEvent as bo, getCommandHintsFromContract as br, runDaemonStatusFlow as bt, runSpaceLeave as c, writeVersionState as ca, validateCustomProfileWorkspacePath as ci, runAuthStatus as cn, formatProfileAwareOpenMeldCliCommands as co, createSpaceLeaveGuideError as cr, renderOpenMeldTagline as ct, runSpaceRemoveMembers as d, resolveCurrentDaemonExpectedVersion as da, createPrimaryBindingReadSession as di, formatActiveOrganizationLabel as dn, syncLocalAgentActivity as do, createSpaceRemoveMembersGuideError as dr, runDaemon as dt, buildInstallSelfJsonPayload as ea, createModelCatalogReadSession as ei, readRecentDaemonDispatchJournalEvents as en, readAgentActivityIntegrationStatus as eo, createDoctorFailedGuideError as er, runAgentsShow as et, runSpaceSend as f, OPENMELD_VERSION as fa, resolveAgentProfilePrimaryAgentControllerReport as fi, createProfileByKind as fn, readDaemonServiceContract as fo, createSpaceResultGuideError as fr, runDaemonAutostart as ft, runSpaceReadWithPasswordRetry as g, createPresenter as ga, notifyDaemonRouteCatalogChanged as gi, ensureAgentProfileRuntimeBinding as gn, buildAgentActivityEvent as go, createStartAgentIdentityGuideError as gr, runDaemonInterrupt as gt, uploadPreparedSpaceFiles as h, renderHumanTextErrorCard as ha, listBuiltinAgentsRegistryEntries as hi, promptTextEntry as hn, removeAgentActivityContextCache as ho, createSpaceUpdatesGuideError as hr, runDaemonInstall as ht, runSpaceCreate as i, ensureVersionStateReady as ia, readProfileWorkspaceConfig as ii, evaluateCommandAuthentication as in, formatOpenMeldCliCommand as io, createResetConfirmationGuideError as ir, printOpenMeldBanner as it, assertValidSpaceIdTarget as j, alignSelectedOpenMeldProfileStorage as ja, buildOnboardingPlan as ji, buildDispatchResultMessageReadProjection as jn, unbindProject as jo, buildDualViewGuideMessage as jr, readDaemonStartFailureLogTailLines as jt, isSpaceCommandOutputHandledError as k, resolveOpenMeldProfile as ka, PREPARE_SESSION_RECONNECT_GRACE_MS as ki, upsertSpaceConfig as kn, runIfAgentActivityBindingGenerationIsCurrent as ko, DualViewGuideError as kr, shouldEmitAgentOverview as kt, runSpaceList as l, resolveDaemonRuntimeContractCompatibility as la, describeProfileWorkspacePathValidationFailure as li, buildAuthStatusRows as ln, resolveSetupFollowUpCliEntryCommand as lo, createSpaceMenuGuideError as lr, resolveGatewayWebOrigin as lt, prepareRequestedSpaceSendFiles as m, renderHumanErrorCard as ma, reconcileNewRunnableBuiltinAgentsForSetup as mi, resolveCreateProfileName as mn, readAgentActivityContextForPath as mo, createSpaceTargetGuideError as mr, runDaemonCancel as mt, promptAndConfirmSpacePassword as n, buildNextVersionState as na, ensureOpenMeldManagedProfileWorkspace as ni, buildCommandAuthenticationPromptMessage as nn, uninstallAgentActivityIntegrations as no, createProfileCreateGuideError as nr, colorizeAgentLabel as nt, runSpaceHistory as o, fetchLatestPackageInfo as oa, setCustomProfileWorkspace as oi, runAuthLogout as on, formatOpenMeldCliLine as oo, createSpaceAliasTargetGuideError as or, renderOpenMeldHeader as ot, runSpaceWatch as p, buildHumanErrorCopy as pa, listAgentTargetStates as pi, resolveCreateProfileKind as pn, upsertDaemonServiceContract as po, createSpaceSubcommandTargetGuideError as pr, runDaemonBackgroundStartForDecision as pt, runAgentsCustomUpdate as q, isAgentActivityRouteRegistered as qa, readCurrentDaemonRuntimeContext as qi, readDispatchSpaceActionContextFromEnv as qn, getOrganizationJoinLinkResponseSchema as qo, formatAgentReplyReadinessLabel as qr, runSkillsEnsure as qt, runSpaceAddMembers as r, compareSemver as ra, normalizeCustomProfileWorkspacePath as ri, ensureCommandAuthenticationOrCancel as rn, formatInlineOpenMeldCliCommands as ro, createProfileMenuGuideError as rr, colorizeDisplayProfileLabel as rt, runSpaceJoin as s, readVersionState as sa, setOpenMeldManagedProfileWorkspace as si, runAuthMenu as sn, formatOpenMeldCliTextBlock as so, createSpaceContractSetGuideError as sr, renderOpenMeldLogo as st, buildCreateSpacePasswordPromptConfig as t, performManagedInstall as ta, resolveProfileWorkspaceRuntime as ti, connectWebSocket as tn, resolveAgentActivityDispatcherCommand as to, createProfileActionGuideError as tr, formatTransportModeDisplay as tt, runSpacePassword as u, toStartBackgroundHelperExecutionCompatibility as ua, syncDeviceRuntimeStateProjection as ui, buildAuthStatusSnapshot as un, resolveUserFacingCliEntryCommand as uo, createSpacePublicationSetGuideError as ur, resolveSpaceSendText as ut, buildHumanReadSignalsTranscriptItems as v, parseCliViewMode as va, buildAgentControllerRef as vi, resolveServiceParticipationReadiness as vn, normalizeSharedSessionTitle as vo, createUpgradeConfirmationGuideError as vr, runDaemonRunAfterEntryChecks as vt, buildFormalDispatchResultReadPayload as w, createOpenMeldAgentProfile as wa, resolveAgentControllerPermissionModeForController as wi, collectLocalAgentControllerInventory as wn, bindProject as wo, getCliVersionInfo as wr, buildProfileWorkspacePresentation as wt, loadSpaceIdentityDirectoryOrNull as x, isSelectedOpenMeldProfileRequiredError as xa, getAgentControllerPermissionModeFieldLabel as xi, submitProfileRuntimeAgentControllerReport as xn, removeProjectInbox as xo, registerSpaceMemberSelectionOptions as xr, runDaemonStop as xt, emitHumanReadSignalsTextProjection as y, resolveRuntimeContext as ya, createAgentExecutionStatusDisplayRows as yi, assessActionParticipationCandidate as yn, readCodexSessionTitles as yo, getCommandEntryContract as yr, runDaemonSnapshot as yt, resolveHumanControllerDisplayName as z, resolveAuthenticationGuidanceFromError as za, resolveOpenMeldEnvironmentTarget as zi, promptSearchMultiselect as zn, errLine as zo, runPendingDaemonServiceUpdate as zr, parseJsonResponse$1 as zt };
 
-//# sourceMappingURL=command-D_BRRxBQ.js.map
+//# sourceMappingURL=command-Bbe9WSpd.js.map