openmeld 0.3.131 → 0.3.133

package/dist/{command-CBkGZaPc.js → command-DaGkOPI0.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
 import { $ as runWithHeldLock, $t as formatLocalMachineIssueMessage, At as normalizeAccountKey, B as toSpaceRemoveMembersUrl, C as updateConfiguredDeviceRuntimeState, Ct as accountProfileWorkspacePath, D as normalizeBaseUrl, Dt as deviceOpenClawProfileWorkspaceDir, Et as deviceOpenClawProfileDir, Ft as openMeldManagedVersionBinaryPath, Gt as resolveOpenMeldEnvPreset, H as toSpaceUpdatesUrl, Ht as resolveDefaultOpenMeldHomeDirname, I as toSpaceLeaveUrl, It as openMeldManagedVersionDir, Jt as runtimeDir, K as isOpenMeldLockError, Kt as resolveOpenMeldPresetOwnedPathInput, L as toSpaceMembersUrl, Lt as openMeldRootDir, M as toSpaceCursorUrl, Mt as openMeldBackupsDir, N as toSpaceDeleteUrl, Nt as openMeldBinDir, O as toDaemonRouteObservationUrl, Ot as isPublishedOpenMeldHome, Pt as openMeldManagedBinaryPath, Q as resolveOpenMeldOrphanedLockIssue, Qt as systemDir, R as toSpaceMetaUrl, Rt as openMeldVersionsDir, S as setConfiguredSkillsConfig, St as accountProfileViewPath, T as updateConfiguredSkillsConfig, Tt as deviceOpenClawProfileBootstrapPath, U as toSpaceWsUrl, Ut as resolveExplicitOpenMeldEnvPreset, W as acquireLock, Xt as skillsDir, Yt as runtimeLogsDir, _ as getConfiguredViewCustomization, _n as normalizeKnownBuiltinAgentControllerId, _t as CURRENT_PROCESS_START_IDENTITY, a as resolveBaseUrl, an as runtimeTransportModeSchema, at as resolveCliContext, bt as accountProfileLocalMetaPath, c as resolveExplicitGatewayUrlOrThrow, cn as conversationPolicySchema, d as createDefaultRuntimeAgentControllerSettings, dn as HOSTED_CENTER_AGENT_CONTROLLER_REF_ID, dt as assessLocalMachineFailure, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, gn as normalizeBuiltinAgentControllerId, h as getConfiguredOpenMeldToolsMaintenance, hn as canonicalizeBuiltinAgentControllerRef, i as normalizeGatewayBaseUrlOrNull, in as runtimeStreamingModeSchema, it as readCliContextState, j as toSpaceCreateUrl, jt as normalizeOpenMeldProfileId, kt as legacyAccountProfileSpacesDir, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, ln as resolveBuiltinAgentControllerConversationKind, lt as resolveOpenMeldLaneDescriptor, mn as canonicalizeAgentControllerRef, nn as runtimeAgentControllerLaunchContractSchema, o as resolveBaseUrlOrNull, ot as resolveCliContextId, p as getConfiguredDeviceRuntimeState, pn as buildAgentControllerRoutingKey, pt as createBackgroundExecutionBlockedIssue, q as isOpenMeldOrphanedLockError, qt as resolveOpenMeldRootDir, r as normalizeGatewayBaseUrl, rt as listCliContextStates, s as resolveDefaultGatewayBaseUrl, sn as buildAgentControllerConversationRef, st as writeCliContextState, tn as runtimeAgentControllerConversationIdMappingSpecSchema, un as HOSTED_CENTER_AGENT_CONTROLLER_REF, v as getRuntimeConfigReadHealth, vn as parseAgentControllerRef$1, vt as isProcessIdentityAlive, wt as accountsDir, x as setConfiguredOpenMeldToolsMaintenance, xt as accountProfileSpaceCacheDir, y as resolveRuntimeSkillsCustomTargetId, yt as OPENMELD_HOME_ENV_KEY, z as toSpacePasswordUrl } from "./base-url-BtqW4aLS.js";
-import { A as MAX_TEXT_LENGTH, At as createCenterAgentRoutineResponseSchema, B as sleep, C as createSpaceApi, D as toStructuredApiClientFailure, Dt as organizationComputersResponseSchema, E as resolveProfileSpaceHistoryGatewayHost, Et as profileErrorResponseSchema, F as OPENMELD_HEADER_PROFILE_ID, Ft as resumeCenterAgentRoutineResponseSchema, Gt as localProjectControlDaemonFrameSchema, H as getSpaceUpdatesResponseSchema, It as updateCenterAgentRoutineResponseSchema, Jt as postSpaceMembersResponseSchema, Kt as localProjectControlDiscoverProjectsResponseSchema, L as OPENMELD_HEADER_REQUEST_ID, M as parseIncoming$1, Mt as listCenterAgentRoutineRunsResponseSchema, N as parseServerErrorFrame$1, Nt as listCenterAgentRoutinesResponseSchema, O as DAEMON_STREAM_KEEPALIVE_PING, Ot as submitFeedbackIssueRequestSchema, P as resolveCustomMentionAliasOverride, Pt as pauseCenterAgentRoutineResponseSchema, Q as submitAgentControllerTaskLifecycleEventItemSchema, Rt as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, S as createRuntimeReportingApi, St as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, T as resolveAccountSpaceIndexGatewayHost, Tt as profileCapabilitiesResponseSchema, U as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Ut as agentActivitySnapshotResponseSchema, V as toErrorMessage$43, Wt as localProjectControlConnectionSchema, Xt as spaceMemberDirectoryEntrySchema, Yt as removeSpaceMembersResponseSchema, Zt as spaceMemberDirectorySchema, _n as agentControllerPermissionModeSchema, _t as organizationSkillReleaseSummarySchema, a as buildSpaceAttachmentDownloadPath, an as createProjectResponseSchema, at as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, bt as organizationDirectoryResponseSchema, c as createAgentProfileBindingApi, cn as updateProjectResponseSchema, ct as computerFileAccessPolicyInputSchema, d as createCurrentDeviceApi, dt as organizationSpaceDirectoryWithMemberCountsResponseSchema, ft as spaceCreatorSchema, g as createOrganizationApi, h as createOpenMeldApiClient, ht as listOrganizationSkillsResponseSchema, i as buildProfileSpaceHistoryUpsertPath, in as archiveProjectResponseSchema, it as gatewayErrorEnvelopeSchema, j as parseEnvelope$1, jt as deleteCenterAgentRoutineResponseSchema, kt as submitFeedbackIssueResponseSchema, ln as centerAgentToolSpeakerSchema, lt as computerFileAccessPolicySchema, m as createLocalRuntimeExpectedRoutesApi, mt as getOrganizationSkillResponseSchema, n as OpenMeldApiClientInvalidResponseError, o as createAccountSpaceIndexApi, on as listProjectsResponseSchema, ot as OPENMELD_RUNTIME_CAPABILITIES_HEADER, p as createFetchTransport, pt as spaceMetaSchema, qt as leaveSpaceResponseSchema, r as buildProfileSpaceHistoryStatusPath, rn as observedLocalAgentSessionSchema, s as createAgentActivityApi, sn as projectSchema, st as computerFileAccessDaemonFrameSchema, t as OpenMeldApiClientHttpError, tn as agentActivitySessionInventoryResponseSchema, un as openCodePermissionConfigSchema, ut as modelCatalogSchema, vn as agentControllerCollaborationModeSchema, vt as organizationSkillSummarySchema, wt as authProfileManagedRoleSchema, xt as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE, y as createProfileSpaceHistoryApi, yn as toLegacySpaceAddressingWireValue, z as toErrorMessage$44, zt as agentActivityEventSchema } from "./dist-BnHChh7U.js";
-import { $r as profileWorkspaceModeSchema, $t as skippedDaemonProfileSchema, A as runtimeTransportRegisterSessionResponseSchema, An as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, B as openMeldDaemonTaskResultPayloadSchema, Bn as localCliComponentUpdateProjectionSchema, Bt as resolveSpaceFileMimeType, C as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, D as runtimeTransportOpenMeldToolsControlFramePayloadSchema, E as runtimeTransportLookupRouteOwnerServiceEvidenceSchema, Fn as formatLocalComponentsSummaryDescription, Fr as resolveSpaceMentionLabels, G as localFolderPickerDaemonFrameSchema, Gr as openMeldRequestContextSchema, H as openMeldSpaceEgressActionSchema, I as runtimeTransportSubmitTaskResultRequestSchema, In as formatLocalComponentsSummaryLabel, Jn as openMeldToolsUpdateOperationPhaseSchema, Jr as normalizeOptionalWorkingDirectory, K as localFolderPickerHelperProtocolResultSchema, Kr as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, Ln as formatLocalSetupActionDescription, M as runtimeTransportResumeControllerConversationFramePayloadSchema, Mn as agentInteractionRequestSchema, Mr as normalizeSpacePasswordText, N as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Nn as agentInteractionResolutionSchema, O as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Or as runtimeCoordinatorExecutionTokenEnvelopeSchema, P as runtimeTransportRouteCatalogChangedFramePayloadSchema, Pr as resolveSingleSpaceMentionLabels, Pt as SPACE_FILE_MAX_SIZE_BYTES, R as openMeldDaemonTaskResultEnvelopeWriteSchema, Rn as formatLocalSetupActionLabel, S as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, Sn as resolveMessageEnvelopeTargetField, T as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, U as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, W as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Wn as localServiceComponentUpdateProjectionSchema, Wt as spaceFileNameSchema, Xt as openMeldDaemonControlPlaneRequestSchema, Yr as openMeldRuntimeProfileIdSchema, Zn as openMeldToolsUpdateRequestSourceSchema, Zt as openMeldDaemonControlPlaneResponseSchema, _ as runtimeTransportHeartbeatRequestSchema, _n as collectCanonicalMentionTextFragments, a as runtimeTransportCapabilitiesSchema, ai as MAX_TEXT_LENGTH$1, b as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, br as url, c as runtimeTransportDispatchInteractionRequestSchema, ci as resolvePublicAgentAvailabilityCopy, d as runtimeTransportDispatchPreviewEndRequestSchema, di as shouldPreferMappedPublicAgentFailureReason, en as providerDispatchRuntimeContextSchema, er as boolean, f as runtimeTransportDispatchPreviewRequestSchema, g as runtimeTransportForkAgentSessionResultSchema, gn as MESSAGE_MENTION_TYPE_VALUES, gt as SPACE_MENTION_REJECT_NOTICE_PURPOSE, h as runtimeTransportErrorCodeSchema, hi as resolveCommandAgentWorkActivity, hr as string, ht as SPACE_MEMBER_REMOVE_NOTICE_PURPOSE, i as localWakeRouteReportSchema, ii as trimmedStringFromUnknown, ir as enumFactory, j as runtimeTransportRejectedProfileRegistrationSchema, k as runtimeTransportRegisterSessionRequestSchema, kr as runtimeTransportDeliveryExecutionIdentitySchema, l as runtimeTransportDispatchInteractionResponseFramePayloadSchema, li as resolvePublicAgentFailureRecovery, m as runtimeTransportDispatchToolActivityRequestSchema, mr as strictObject, mt as SPACE_MEMBER_JOIN_NOTICE_PURPOSE, n as daemonExecutionCompatibilitySchema, nr as discriminatedUnion, o as runtimeTransportDeliverDispatchRequestSchema, oi as resolveDetailedPublicAgentFailureReason$1, or as iso, p as runtimeTransportDispatchRuntimeEvidenceRequestSchema, q as localFolderPickerHelperResultSchema, qn as openMeldToolsUpdateAttemptSchema, qr as agentProfileIdSchema, r as daemonStreamFrameSchema, s as runtimeTransportDispatchInteractionDeliveredRequestSchema, si as resolveMappedPublicAgentFailureReason, sr as literal, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, tn as conversationExecutionStateSchema, u as runtimeTransportDispatchLifecycleRequestSchema, ui as sanitizeDispatchErrorSummary, ut as CONVERSATION_CONTINUITY_WARNING_PURPOSE, v as runtimeTransportHeartbeatResponseSchema, vn as formatCanonicalMentionLiteral, vt as sanitizeSignalTextPreview, w as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, wr as parseOptionalClientMessageId, x as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, xn as normalizeMessageEnvelope, y as runtimeTransportLocalAgentControlCancelFramePayloadSchema, yn as getSpaceMessageAddressingRelationSupportForTargetKind, z as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, zn as installedLocalComponentsSnapshotSchema } from "./runtime-transport-CHbXitKu.js";
+import { A as MAX_TEXT_LENGTH, At as createCenterAgentRoutineResponseSchema, B as sleep, C as createSpaceApi, D as toStructuredApiClientFailure, Dt as organizationComputersResponseSchema, E as resolveProfileSpaceHistoryGatewayHost, Et as profileErrorResponseSchema, F as OPENMELD_HEADER_PROFILE_ID, Ft as resumeCenterAgentRoutineResponseSchema, Gt as localProjectControlDaemonFrameSchema, H as getSpaceUpdatesResponseSchema, It as updateCenterAgentRoutineResponseSchema, Jt as postSpaceMembersResponseSchema, Kt as localProjectControlDiscoverProjectsResponseSchema, L as OPENMELD_HEADER_REQUEST_ID, M as parseIncoming$1, Mt as listCenterAgentRoutineRunsResponseSchema, N as parseServerErrorFrame$1, Nt as listCenterAgentRoutinesResponseSchema, O as DAEMON_STREAM_KEEPALIVE_PING, Ot as submitFeedbackIssueRequestSchema, P as resolveCustomMentionAliasOverride, Pt as pauseCenterAgentRoutineResponseSchema, Q as submitAgentControllerTaskLifecycleEventItemSchema, Rt as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, S as createRuntimeReportingApi, St as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, T as resolveAccountSpaceIndexGatewayHost, Tt as profileCapabilitiesResponseSchema, U as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Ut as agentActivitySnapshotResponseSchema, V as toErrorMessage$43, Wt as localProjectControlConnectionSchema, Xt as spaceMemberDirectoryEntrySchema, Yt as removeSpaceMembersResponseSchema, Zt as spaceMemberDirectorySchema, _n as agentControllerPermissionModeSchema, _t as organizationSkillReleaseSummarySchema, a as buildSpaceAttachmentDownloadPath, an as createProjectResponseSchema, at as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, bt as organizationDirectoryResponseSchema, c as createAgentProfileBindingApi, cn as updateProjectResponseSchema, ct as computerFileAccessPolicyInputSchema, d as createCurrentDeviceApi, dt as organizationSpaceDirectoryWithMemberCountsResponseSchema, ft as spaceCreatorSchema, g as createOrganizationApi, h as createOpenMeldApiClient, ht as listOrganizationSkillsResponseSchema, i as buildProfileSpaceHistoryUpsertPath, in as archiveProjectResponseSchema, it as gatewayErrorEnvelopeSchema, j as parseEnvelope$1, jt as deleteCenterAgentRoutineResponseSchema, kt as submitFeedbackIssueResponseSchema, ln as centerAgentToolSpeakerSchema, lt as computerFileAccessPolicySchema, m as createLocalRuntimeExpectedRoutesApi, mt as getOrganizationSkillResponseSchema, n as OpenMeldApiClientInvalidResponseError, o as createAccountSpaceIndexApi, on as listProjectsResponseSchema, ot as OPENMELD_RUNTIME_CAPABILITIES_HEADER, p as createFetchTransport, pt as spaceMetaSchema, qt as leaveSpaceResponseSchema, r as buildProfileSpaceHistoryStatusPath, rn as observedLocalAgentSessionSchema, s as createAgentActivityApi, sn as projectSchema, st as computerFileAccessDaemonFrameSchema, t as OpenMeldApiClientHttpError, tn as agentActivitySessionInventoryResponseSchema, un as openCodePermissionConfigSchema, ut as modelCatalogSchema, vn as agentControllerCollaborationModeSchema, vt as organizationSkillSummarySchema, wt as authProfileManagedRoleSchema, xt as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE, y as createProfileSpaceHistoryApi, yn as toLegacySpaceAddressingWireValue, z as toErrorMessage$44, zt as agentActivityEventSchema } from "./dist-xeL9hjwh.js";
+import { $r as openMeldRuntimeProfileIdSchema, A as runtimeTransportRegisterSessionResponseSchema, B as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, Bn as formatLocalComponentsSummaryLabel, C as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Cn as getSpaceMessageAddressingRelationSupportForTargetKind, D as runtimeTransportOpenMeldToolsControlFramePayloadSchema, E as runtimeTransportLookupRouteOwnerServiceEvidenceSchema, En as resolveMessageEnvelopeTargetField, Ft as SPACE_FILE_MAX_SIZE_BYTES, G as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Hn as formatLocalSetupActionLabel, I as runtimeTransportSubmitTaskResultRequestSchema, In as agentInteractionRequestSchema, Ir as normalizeSpacePasswordText, J as localFolderPickerHelperResultSchema, Jn as localServiceComponentUpdateProjectionSchema, K as localFolderPickerDaemonFrameSchema, Ln as agentInteractionResolutionSchema, M as runtimeTransportResumeControllerConversationFramePayloadSchema, Mr as runtimeCoordinatorExecutionTokenEnvelopeSchema, N as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Nr as runtimeTransportDeliveryExecutionIdentitySchema, O as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Or as parseOptionalClientMessageId, P as runtimeTransportRouteCatalogChangedFramePayloadSchema, Pn as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, Qn as openMeldToolsUpdateOperationPhaseSchema, Qr as normalizeOptionalWorkingDirectory, R as openMeldDaemonProviderAccessEvidenceSchema, Rr as resolveSingleSpaceMentionLabels, S as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, Sn as formatCanonicalMentionLiteral, T as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Tn as normalizeMessageEnvelope, U as openMeldSpaceEgressActionSchema, Un as installedLocalComponentsSnapshotSchema, Ut as resolveSpaceFileMimeType, V as openMeldDaemonTaskResultPayloadSchema, Vn as formatLocalSetupActionDescription, W as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Wn as localCliComponentUpdateProjectionSchema, Xr as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, Yr as openMeldRequestContextSchema, Zn as openMeldToolsUpdateAttemptSchema, Zr as agentProfileIdSchema, _ as runtimeTransportHeartbeatRequestSchema, _t as SPACE_MENTION_REJECT_NOTICE_PURPOSE, a as runtimeTransportCapabilitiesSchema, an as conversationExecutionStateSchema, b as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, bn as MESSAGE_MENTION_TYPE_VALUES, c as runtimeTransportDispatchInteractionRequestSchema, ci as trimmedStringFromUnknown, cr as enumFactory, d as runtimeTransportDispatchPreviewEndRequestSchema, di as resolveMappedPublicAgentFailureReason, dr as literal, dt as CONVERSATION_CONTINUITY_WARNING_PURPOSE, en as openMeldDaemonControlPlaneRequestSchema, f as runtimeTransportDispatchPreviewRequestSchema, fi as resolvePublicAgentAvailabilityCopy, g as runtimeTransportForkAgentSessionResultSchema, gt as SPACE_MEMBER_REMOVE_NOTICE_PURPOSE, h as runtimeTransportErrorCodeSchema, hi as shouldPreferMappedPublicAgentFailureReason, ht as SPACE_MEMBER_JOIN_NOTICE_PURPOSE, i as localWakeRouteReportSchema, in as providerDispatchRuntimeContextSchema, ir as boolean, j as runtimeTransportRejectedProfileRegistrationSchema, k as runtimeTransportRegisterSessionRequestSchema, l as runtimeTransportDispatchInteractionResponseFramePayloadSchema, li as MAX_TEXT_LENGTH$1, m as runtimeTransportDispatchToolActivityRequestSchema, mi as sanitizeDispatchErrorSummary, n as daemonExecutionCompatibilitySchema, o as runtimeTransportDeliverDispatchRequestSchema, or as discriminatedUnion, p as runtimeTransportDispatchRuntimeEvidenceRequestSchema, pi as resolvePublicAgentFailureRecovery, q as localFolderPickerHelperProtocolResultSchema, qt as spaceFileNameSchema, r as daemonStreamFrameSchema, ri as profileWorkspaceModeSchema, rn as skippedDaemonProfileSchema, s as runtimeTransportDispatchInteractionDeliveredRequestSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, tn as openMeldDaemonControlPlaneResponseSchema, tr as openMeldToolsUpdateRequestSourceSchema, u as runtimeTransportDispatchLifecycleRequestSchema, ui as resolveDetailedPublicAgentFailureReason$1, ur as iso, v as runtimeTransportHeartbeatResponseSchema, vr as strictObject, w as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, wr as url, x as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, xn as collectCanonicalMentionTextFragments, y as runtimeTransportLocalAgentControlCancelFramePayloadSchema, yi as resolveCommandAgentWorkActivity, yr as string, yt as sanitizeSignalTextPreview, z as openMeldDaemonTaskResultEnvelopeWriteSchema, zn as formatLocalComponentsSummaryDescription, zr as resolveSpaceMentionLabels } from "./runtime-transport-C_9yu9UB.js";
 import { r as daemonServiceLaneSchema, t as daemonServiceContractSchema } from "./service-contract-CRyDcIIf.js";
 import { A as getDaemonRuntimeStatus, B as resolveDaemonServiceRuntimeMetadata, C as daemonServiceRepairJournalPath, D as daemonServiceUpdateWorkerBinaryExecutablePath, E as daemonServiceStableLauncherPath, F as readDaemonServiceLifecycleLockMeta, G as withDaemonServiceReconcileLock, H as rotateDaemonControlPlaneTokenIfExpired, I as readDaemonServiceLifecycleLockMetaWithCleanup, J as withDaemonServiceStopLock, K as withDaemonServiceRegistrationMutationLock, L as readDaemonServiceRuntimeSnapshot, M as installDaemon, N as isDaemonServiceRuntimeHeartbeatStale, O as daemonStatePath, P as readDaemonControlPlaneToken, R as releaseDaemonServiceLifecycleLock, S as daemonServiceRecognizedExecutablePaths$1, T as daemonServiceStableExecutableWrapperPath, U as setDaemonServiceRuntimeState, V as restoreDaemonInstallStateSnapshot, W as uninstallDaemon, X as writeDaemonLocalStateFile, Y as readDaemonLocalStateFile, _ as daemonRuntimeServiceManagerPath, a as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, b as daemonServiceExecutableWrapperPaths$1, c as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, d as clearDaemonServiceRuntimeState, f as daemonDispatchJournalPath, g as daemonRuntimeRootPath, h as daemonRuntimeDataPath, i as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, j as getDaemonStatus, k as ensureDaemonControlPlaneToken, l as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV, m as daemonRuntimeBundlesPath, n as writeDaemonRuntimeLease, o as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, p as daemonLifecycleJournalPath, q as withDaemonServiceRunLock, r as DAEMON_HEARTBEAT_STALE_MS, s as DAEMON_SERVICE_RUNTIME_MODE_ENV, t as readDaemonRuntimeLease, u as acquireDaemonServiceLifecycleLock, v as daemonRuntimeStateRootPath, w as daemonServiceStableBinaryExecutablePath, x as daemonServiceLegacyExecutableWrapperPath, y as daemonServiceActiveBundleStatePath, z as resolveDaemonControlPlaneEndpoint } from "./daemon-runtime-lease-D82uDZ5s.js";
-import { A as MAX_HEARTBEAT_INTERVAL_MS$2, B as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS$1, C as DAEMON_STREAM_CONNECT_TIMEOUT_MS$1, D as DEFAULT_HEARTBEAT_INTERVAL_MS$1, E as DEFAULT_GATEWAY_CHAIN_TIMEOUT_MS$1, F as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS$1, I as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS$1, L as REGISTER_RESPONSE_TIMEOUT_MS$1, M as MIN_HEARTBEAT_INTERVAL_MS$2, P as OPENCLAW_CLI_TIMEOUT_MS$1, S as DAEMON_RUNTIME_CONTRACT_EPOCH$1, T as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1, V as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS$1, _ as isBinaryDistribution, a as clearAuthSession, b as CATALOG_SYNC_RETRY_INTERVAL_MS$1, c as getAuthSessionState, i as beginAuthSessionTransition, k as HEARTBEAT_RESPONSE_TIMEOUT_MS$1, m as setAuthSession, n as assertAuthSessionMutationAvailable, v as resolveOpenMeldDistribution, w as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1, x as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1, z as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS$1 } from "./auth-session-BDvmoUjQ.js";
-import { a as AuthRequestCredentialError, c as buildOpenMeldRequestContextHeadersWithAuth, d as buildOpenMeldRequestContextFromProfile, f as buildOpenMeldRequestContextFromProfileIdentity, i as resolveSpaceRequestTimeoutMsForDiagnostics, l as buildRequestAuthHeaders, m as resolveAuthRequestCompatibility, n as createCliApiClientFoundation, o as buildOpenMeldProfileIdentityRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, r as fetchSpaceRequestWithTimeout, s as buildOpenMeldProfileRequestHeadersWithAuth, u as canAttachAuthTokenToRequest } from "./api-client-foundation-DD1YOgfr.js";
+import { A as HEARTBEAT_RESPONSE_TIMEOUT_MS$1, B as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS$1, C as DAEMON_RUNTIME_CONTRACT_EPOCH$1, D as DEFAULT_GATEWAY_CHAIN_TIMEOUT_MS$1, E as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1, F as OPENCLAW_CLI_TIMEOUT_MS$1, H as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS$1, I as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS$1, L as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS$1, N as MIN_HEARTBEAT_INTERVAL_MS$2, O as DEFAULT_HEARTBEAT_INTERVAL_MS$1, R as REGISTER_RESPONSE_TIMEOUT_MS$1, S as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1, T as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1, V as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS$1, a as beginAuthSessionTransition, h as setAuthSession, j as MAX_HEARTBEAT_INTERVAL_MS$2, l as getAuthSessionState, o as clearAuthSession, r as assertAuthSessionMutationAvailable, v as isBinaryDistribution, w as DAEMON_STREAM_CONNECT_TIMEOUT_MS$1, x as CATALOG_SYNC_RETRY_INTERVAL_MS$1, y as resolveOpenMeldDistribution } from "./auth-session-JRLGSU3U.js";
+import { a as AuthRequestCredentialError, c as buildOpenMeldRequestContextHeadersWithAuth, d as buildOpenMeldRequestContextFromProfile, f as buildOpenMeldRequestContextFromProfileIdentity, i as resolveSpaceRequestTimeoutMsForDiagnostics, l as buildRequestAuthHeaders, m as resolveAuthRequestCompatibility, n as createCliApiClientFoundation, o as buildOpenMeldProfileIdentityRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, r as fetchSpaceRequestWithTimeout, s as buildOpenMeldProfileRequestHeadersWithAuth, u as canAttachAuthTokenToRequest } from "./api-client-foundation-DAqpgdEd.js";
 import { createRequire } from "node:module";
 import { homedir, tmpdir, userInfo } from "node:os";
 import * as z$1 from "zod/v4";
@@ -6669,17 +6669,8 @@ const extractProviderAccessEvidence = (error) => {
 	if (!error || typeof error !== "object") return null;
 	const evidence = error.providerAccessEvidence;
 	if (!evidence || typeof evidence !== "object") return null;
-	const candidate = evidence;
-	if (candidate.provider !== "claude-code" || candidate.source !== "wake_failure") return null;
-	if (candidate.reasonCode !== "provider_account.organization_access_disabled" && candidate.reasonCode !== "provider_account.subscription_access_unavailable") return null;
-	const observedAtMs = candidate.observedAtMs;
-	if (typeof observedAtMs !== "number" || !Number.isInteger(observedAtMs) || observedAtMs < 0) return null;
-	return {
-		observedAtMs,
-		provider: candidate.provider,
-		reasonCode: candidate.reasonCode,
-		source: candidate.source
-	};
+	const parsed = openMeldDaemonProviderAccessEvidenceSchema.safeParse(evidence);
+	return parsed.success ? parsed.data : null;
 };
 const normalizeControlReason = (reason, fallback) => {
 	if (typeof reason !== "string") return fallback;
@@ -8785,12 +8776,18 @@ const normalizeOptionalText$62 = (value) => {
 function isCodexQuotaFailure(value) {
 	return value.includes("usage limit") || value.includes("purchase more credits") || value.includes("insufficient_quota") || value.includes("insufficient balance") || value.includes("insufficient_balance") || value.includes("quota exceeded") || value.includes("exceeded your current quota") || value.includes("not enough credits") || value.includes("out of credits") || value.includes("credits exhausted") || value.includes("balance is too low") || value.includes("payment required") || value.includes("billing");
 }
+function isDefinitiveCodexCapacityFailure(value) {
+	return value.includes("purchase more credits") || value.includes("insufficient_quota") || value.includes("insufficient balance") || value.includes("insufficient_balance") || value.includes("quota exceeded") || value.includes("exceeded your current quota") || value.includes("not enough credits") || value.includes("out of credits") || value.includes("credits exhausted") || value.includes("balance is too low") || value.includes("payment required");
+}
 function isCodexRateLimitFailure(value) {
 	return value.includes("429") || value.includes("rate limit") || value.includes("too many requests");
 }
 function isCodexAuthFailure(value) {
 	return value.includes("401") || value.includes("unauthorized") || value.includes("missing bearer") || value.includes("not logged in") || value.includes("authentication");
 }
+function isCodexSubscriptionAccessFailure(value) {
+	return value.includes("not included in your subscription") || value.includes("not available on your plan") || value.includes("subscription does not include") || value.includes("subscription access") || value.includes("upgrade your plan");
+}
 /**
 * Classify a Codex provider-account failure from the failure message and, when
 * available, the app-server structured `codexErrorInfo` enum. Only enum values
@@ -8799,25 +8796,45 @@ function isCodexAuthFailure(value) {
 * changes behavior.
 */
 function classifyCodexProviderAccountFailure(input) {
-	if (normalizeOptionalText$61(input.codexErrorInfo)?.toLowerCase() === "usagelimitexceeded") return {
+	if (normalizeOptionalText$61(input.codexErrorInfo)?.toLowerCase() === "usagelimitexceeded") return buildHardProviderFailure({
 		code: "quota.exceeded",
-		errorType: "adapter"
-	};
+		reasonCode: "provider_account.capacity_exhausted"
+	});
 	const lowered = input.message.toLowerCase();
-	if (isCodexQuotaFailure(lowered)) return {
+	if (isDefinitiveCodexCapacityFailure(lowered)) return buildHardProviderFailure({
 		code: "quota.exceeded",
+		reasonCode: "provider_account.capacity_exhausted"
+	});
+	if (isCodexRateLimitFailure(lowered)) return {
+		code: "rate_limited",
 		errorType: "adapter"
 	};
+	if (isCodexSubscriptionAccessFailure(lowered)) return buildHardProviderFailure({
+		code: "provider.subscription_access_unavailable",
+		reasonCode: "provider_account.subscription_access_unavailable"
+	});
+	if (isCodexQuotaFailure(lowered)) return buildHardProviderFailure({
+		code: "quota.exceeded",
+		reasonCode: "provider_account.capacity_exhausted"
+	});
 	if (isCodexAuthFailure(lowered)) return {
 		code: "auth.required",
 		errorType: "auth"
 	};
-	if (isCodexRateLimitFailure(lowered)) return {
-		code: "rate_limited",
-		errorType: "adapter"
-	};
 	return null;
 }
+function buildHardProviderFailure(input) {
+	return {
+		code: input.code,
+		errorType: "adapter",
+		providerAccessEvidence: {
+			observedAtMs: Date.now(),
+			provider: "codex",
+			reasonCode: input.reasonCode,
+			source: "wake_failure"
+		}
+	};
+}
 function normalizeOptionalText$61(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
@@ -9179,11 +9196,13 @@ const DEFAULT_APP_SERVER_STARTUP_TIMEOUT_MS = 15e3;
 var CodexAppServerTransportError = class extends Error {
 	code;
 	errorType;
+	providerAccessEvidence;
 	constructor(input) {
 		super(input.message);
 		this.name = "CodexAppServerTransportError";
 		this.code = input.code;
 		this.errorType = input.errorType;
+		this.providerAccessEvidence = input.providerAccessEvidence;
 	}
 };
 async function probeCodexAppServerAccount(input) {
@@ -9327,7 +9346,8 @@ function requireSuccessfulCodexTurn(turn) {
 	if (providerFailure) throw new CodexAppServerTransportError({
 		code: providerFailure.code,
 		errorType: providerFailure.errorType,
-		message: failureMessage
+		message: failureMessage,
+		providerAccessEvidence: providerFailure.providerAccessEvidence
 	});
 	throw new CodexAppServerTransportError({
 		code: "runtime.turn.failed",
@@ -10648,7 +10668,8 @@ function toJsonRpcTransportError$1(error) {
 	if (providerFailure) return new CodexAppServerTransportError({
 		code: providerFailure.code,
 		errorType: providerFailure.errorType,
-		message
+		message,
+		providerAccessEvidence: providerFailure.providerAccessEvidence
 	});
 	const lowered = message.toLowerCase();
 	if (lowered.includes("not logged in") || lowered.includes("unauthorized") || lowered.includes("authentication") || lowered.includes("401")) return new CodexAppServerTransportError({
@@ -10972,11 +10993,13 @@ function normalizeOptionalText$57(value) {
 var CodexCliTransportError = class extends Error {
 	code;
 	errorType;
+	providerAccessEvidence;
 	constructor(input) {
 		super(input.message);
 		this.name = "CodexCliTransportError";
 		this.code = input.code;
 		this.errorType = input.errorType;
+		this.providerAccessEvidence = input.providerAccessEvidence;
 	}
 };
 async function invokeCodexCliTransport(input) {
@@ -11068,7 +11091,8 @@ async function invokeCodexCliTransport(input) {
 		throw new CodexCliTransportError({
 			code: classifiedFailure.code,
 			errorType: classifiedFailure.errorType,
-			message: classifiedFailure.message
+			message: classifiedFailure.message,
+			providerAccessEvidence: classifiedFailure.providerAccessEvidence
 		});
 	}
 	const output = normalizeOptionalText$56(latestOutput);
@@ -11082,7 +11106,8 @@ async function invokeCodexCliTransport(input) {
 			throw new CodexCliTransportError({
 				code: classifiedFailure.code,
 				errorType: classifiedFailure.errorType,
-				message: classifiedFailure.message
+				message: classifiedFailure.message,
+				providerAccessEvidence: classifiedFailure.providerAccessEvidence
 			});
 		}
 		throw new CodexCliTransportError({
@@ -11288,7 +11313,8 @@ const toCodexCliTransportError = (error, timeoutMs) => {
 			return new CodexCliTransportError({
 				code: classifiedFailure.code,
 				errorType: classifiedFailure.errorType,
-				message: classifiedFailure.message
+				message: classifiedFailure.message,
+				providerAccessEvidence: classifiedFailure.providerAccessEvidence
 			});
 		}
 	}
@@ -11337,19 +11363,9 @@ const classifyCodexFailure = (input) => {
 			errorType: "config",
 			message: toControllerClientUpgradeRequiredMessage(providerMessage)
 		};
-		if (isCodexQuotaFailure(lowered)) return {
-			code: "quota.exceeded",
-			errorType: "adapter",
-			message: providerMessage
-		};
-		if (isCodexAuthFailure(lowered)) return {
-			code: "auth.required",
-			errorType: "auth",
-			message: providerMessage
-		};
-		if (isCodexRateLimitFailure(lowered)) return {
-			code: "rate_limited",
-			errorType: "adapter",
+		const providerFailure = classifyCodexProviderAccountFailure({ message: providerMessage });
+		if (providerFailure) return {
+			...providerFailure,
 			message: providerMessage
 		};
 		if (isConfigFailure(lowered)) return {
@@ -11377,7 +11393,7 @@ const resolveProviderFailureMessage$2 = (input) => {
 };
 const looksLikeProviderFailure$2 = (value) => {
 	const normalized = value.toLowerCase();
-	return looksLikeRuntimePermissionDenialMessage(value) || isCodexAuthFailure(normalized) || isCodexQuotaFailure(normalized) || isCodexRateLimitFailure(normalized);
+	return looksLikeRuntimePermissionDenialMessage(value) || classifyCodexProviderAccountFailure({ message: normalized }) !== null;
 };
 const isConfigFailure = (value) => {
 	return value.includes("model_not_found") || value.includes("requested model") || value.includes("unknown model") || value.includes("invalid model") || value.includes("does not exist") && value.includes("model") || value.includes("invalid_request_error") && value.includes("model") || value.includes("\"param\": \"model\"");
@@ -11403,11 +11419,13 @@ function normalizeOptionalText$56(value) {
 var CodexRuntimeError = class extends Error {
 	code;
 	errorType;
+	providerAccessEvidence;
 	constructor(input) {
 		super(input.message);
 		this.name = "CodexRuntimeError";
 		this.code = input.code;
 		this.errorType = input.errorType;
+		this.providerAccessEvidence = input.providerAccessEvidence;
 	}
 };
 async function invokeCodexWithSingleContextHeal(input) {
@@ -11515,7 +11533,8 @@ function toCodexRuntimeError(error) {
 	if (error && typeof error === "object" && "code" in error && typeof error.code === "string" && "errorType" in error && typeof error.errorType === "string" && error instanceof Error) return new CodexRuntimeError({
 		code: error.code,
 		errorType: error.errorType,
-		message: error.message
+		message: error.message,
+		providerAccessEvidence: error.providerAccessEvidence
 	});
 	return new CodexRuntimeError({
 		code: "upstream_unreachable",
@@ -13332,17 +13351,36 @@ function classifyOpenCodeFailureMessage(input) {
 	if (isInsufficientBalanceFailure(lowered)) return {
 		code: "provider.insufficient_balance",
 		errorType: "adapter",
-		message: `provider.insufficient_balance: ${normalized}`
+		message: `provider.insufficient_balance: ${normalized}`,
+		providerAccessEvidence: buildProviderAccessEvidence("provider_account.capacity_exhausted")
+	};
+	if (isDefinitiveHardQuotaFailure(lowered)) return {
+		code: "quota.exceeded",
+		errorType: "adapter",
+		message: `quota.exceeded: ${normalized}`,
+		providerAccessEvidence: buildProviderAccessEvidence("provider_account.capacity_exhausted")
+	};
+	if (isTransientRateLimitFailure(lowered)) return {
+		code: "provider.rate_limited",
+		errorType: "network",
+		message: `provider.rate_limited: ${normalized}`
+	};
+	if (isSubscriptionAccessFailure(lowered)) return {
+		code: "provider.subscription_access_unavailable",
+		errorType: "adapter",
+		message: `provider.subscription_access_unavailable: ${normalized}`,
+		providerAccessEvidence: buildProviderAccessEvidence("provider_account.subscription_access_unavailable")
 	};
 	if (isProviderUnavailableFailure(lowered)) return {
 		code: "provider.unavailable",
 		errorType: "network",
 		message: `provider.unavailable: ${normalized}`
 	};
-	if (lowered.includes("rate") || lowered.includes("quota")) return {
-		code: "provider.rate_limited",
-		errorType: "network",
-		message: `provider.rate_limited: ${normalized}`
+	if (isHardQuotaFailure(lowered)) return {
+		code: "quota.exceeded",
+		errorType: "adapter",
+		message: `quota.exceeded: ${normalized}`,
+		providerAccessEvidence: buildProviderAccessEvidence("provider_account.capacity_exhausted")
 	};
 	return {
 		code: "upstream_unreachable",
@@ -13350,6 +13388,26 @@ function classifyOpenCodeFailureMessage(input) {
 		message: `upstream_unreachable: ${normalized}`
 	};
 }
+function buildProviderAccessEvidence(reasonCode) {
+	return {
+		observedAtMs: Date.now(),
+		provider: "opencode",
+		reasonCode,
+		source: "wake_failure"
+	};
+}
+function isHardQuotaFailure(value) {
+	return isDefinitiveHardQuotaFailure(value) || value.includes("usage limit") || value.includes("usage_limit");
+}
+function isDefinitiveHardQuotaFailure(value) {
+	return value.includes("insufficient quota") || value.includes("insufficient_quota") || value.includes("quota exceeded") || value.includes("exceeded your current quota");
+}
+function isSubscriptionAccessFailure(value) {
+	return value.includes("not included in your subscription") || value.includes("not available on your plan") || value.includes("subscription does not include") || value.includes("subscription access") || value.includes("upgrade your plan");
+}
+function isTransientRateLimitFailure(value) {
+	return value.includes("429") || value.includes("rate limit") || value.includes("too many requests");
+}
 function isInsufficientBalanceFailure(value) {
 	return value.includes("insufficient balance") || value.includes("insufficient_balance") || value.includes("not enough credits") || value.includes("out of credits") || value.includes("credits exhausted") || value.includes("credit balance") || value.includes("account balance") || value.includes("balance is too low") || value.includes("payment required");
 }
@@ -13361,11 +13419,13 @@ function isProviderUnavailableFailure(value) {
 var OpenCodeCliTransportError = class extends Error {
 	code;
 	errorType;
+	providerAccessEvidence;
 	constructor(input) {
 		super(input.message);
 		this.name = "OpenCodeCliTransportError";
 		this.code = input.code;
 		this.errorType = input.errorType;
+		this.providerAccessEvidence = input.providerAccessEvidence;
 	}
 };
 const STREAMING_PROVIDER_FAILURE_THRESHOLD = 3;
@@ -13453,7 +13513,8 @@ async function invokeOpenCodeCliTransport(input) {
 		throw new OpenCodeCliTransportError({
 			code: classifiedFailure.code,
 			errorType: classifiedFailure.errorType,
-			message: classifiedFailure.message
+			message: classifiedFailure.message,
+			providerAccessEvidence: classifiedFailure.providerAccessEvidence
 		});
 	}
 	if (driverResult.exitCode !== 0 || latestResultIsError) {
@@ -13465,7 +13526,8 @@ async function invokeOpenCodeCliTransport(input) {
 		throw new OpenCodeCliTransportError({
 			code: classifiedFailure.code,
 			errorType: classifiedFailure.errorType,
-			message: classifiedFailure.message
+			message: classifiedFailure.message,
+			providerAccessEvidence: classifiedFailure.providerAccessEvidence
 		});
 	}
 	const documentParsed = parseOpenCodeOutputDocument(driverResult.stdoutText);
@@ -13482,7 +13544,8 @@ async function invokeOpenCodeCliTransport(input) {
 			throw new OpenCodeCliTransportError({
 				code: classifiedFailure.code,
 				errorType: classifiedFailure.errorType,
-				message: classifiedFailure.message
+				message: classifiedFailure.message,
+				providerAccessEvidence: classifiedFailure.providerAccessEvidence
 			});
 		}
 	}
@@ -13497,7 +13560,8 @@ async function invokeOpenCodeCliTransport(input) {
 			throw new OpenCodeCliTransportError({
 				code: classifiedFailure.code,
 				errorType: classifiedFailure.errorType,
-				message: classifiedFailure.message
+				message: classifiedFailure.message,
+				providerAccessEvidence: classifiedFailure.providerAccessEvidence
 			});
 		}
 		throw new OpenCodeCliTransportError({
@@ -13571,7 +13635,8 @@ const toOpenCodeCliTransportError = (error, timeoutMs) => {
 			return new OpenCodeCliTransportError({
 				code: classifiedFailure.code,
 				errorType: classifiedFailure.errorType,
-				message: classifiedFailure.message
+				message: classifiedFailure.message,
+				providerAccessEvidence: classifiedFailure.providerAccessEvidence
 			});
 		}
 	}
@@ -13824,11 +13889,13 @@ const SERVER_READY_LINE_PATTERN = /^opencode server listening on (https?:\/\/[^\
 var OpenCodeServerTransportError = class extends Error {
 	code;
 	errorType;
+	providerAccessEvidence;
 	constructor(input) {
 		super(input.message);
 		this.name = "OpenCodeServerTransportError";
 		this.code = input.code;
 		this.errorType = input.errorType;
+		this.providerAccessEvidence = input.providerAccessEvidence;
 	}
 };
 async function invokeOpenCodeServerTransport(input) {
@@ -14778,11 +14845,13 @@ function formatStderrSuffix(stderr) {
 var OpenCodeRuntimeError = class extends Error {
 	code;
 	errorType;
+	providerAccessEvidence;
 	constructor(input) {
 		super(input.message);
 		this.name = "OpenCodeRuntimeError";
 		this.code = input.code;
 		this.errorType = input.errorType;
+		this.providerAccessEvidence = input.providerAccessEvidence;
 	}
 };
 async function invokeOpenCodeWithSingleContextHeal(input) {
@@ -14858,7 +14927,8 @@ async function invokeOpenCodeOnce(input) {
 		if (error && typeof error === "object" && "code" in error && typeof error.code === "string" && "errorType" in error && typeof error.errorType === "string" && error instanceof Error) throw new OpenCodeRuntimeError({
 			code: error.code,
 			errorType: error.errorType,
-			message: error.message
+			message: error.message,
+			providerAccessEvidence: error.providerAccessEvidence
 		});
 		throw new OpenCodeRuntimeError({
 			code: "upstream_unreachable",
@@ -17977,7 +18047,7 @@ function resolveOpenMeldAccountContext(input) {
 	};
 }
 async function resolveCurrentOpenMeldAccountContext() {
-	const { getAuthSessionMetadata } = await import("./auth-session-BDvmoUjQ.js").then((n) => n.r);
+	const { getAuthSessionMetadata } = await import("./auth-session-JRLGSU3U.js").then((n) => n.i);
 	return resolveOpenMeldAccountContext({ session: await getAuthSessionMetadata().catch(() => null) });
 }
 function resolveHostKey(baseUrl) {
@@ -19518,7 +19588,7 @@ function splitSentences(message) {
 var package_default = {
 	$schema: "https://www.schemastore.org/package.json",
 	name: "openmeld",
-	version: "0.3.131",
+	version: "0.3.133",
 	openMeldReleaseDate: "2026-08-29",
 	description: "OpenMeld CLI - https://openmeld.ai",
 	license: "MIT",
@@ -20050,6 +20120,7 @@ function toStartBackgroundHelperExecutionCompatibility(input) {
 //#endregion
 //#region src/config/daemon-service-update-worker-registration.ts
 const MANAGED_VERSION_FROM_EXECUTABLE_PATTERN = /[\\/]versions[\\/](v?(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?)[\\/]openmeld(?:\.exe)?/gu;
+const SELF_CONTAINED_BUNDLE_FROM_EXECUTABLE_PATTERN = /[\\/]runtime[\\/]daemon[\\/]bundles[\\/]([0-9A-Za-z._-]+)[\\/]/gu;
 function resolveDaemonServiceUpdateWorkerIdentity(pathInput = {}) {
 	const preset = resolveOpenMeldEnvPreset(pathInput);
 	const suffix = preset === "prod" ? "" : `-${preset}`;
@@ -20073,14 +20144,13 @@ function resolveDaemonServiceUpdateWorkerWindowsScriptPath(pathInput = {}) {
 	return join(daemonRuntimeRootPath(pathInput), "service-update-worker.bat");
 }
 async function readDaemonServiceUpdateWorkerProtectedManagedVersions(pathInput = {}, platform = process$1.platform) {
-	const registrationPath = resolveDaemonServiceUpdateWorkerRegistrationPath(pathInput, platform);
-	if (registrationPath === null) return /* @__PURE__ */ new Set();
-	const contents = await readFile(registrationPath, "utf8").catch((error) => {
-		if (getErrorCode$5(error) === "ENOENT") return null;
-		throw error;
-	});
+	const contents = await readDaemonServiceUpdateWorkerRegistration(pathInput, platform);
 	return contents === null ? /* @__PURE__ */ new Set() : readManagedVersionsFromUpdateWorkerRegistration(contents);
 }
+async function readDaemonServiceUpdateWorkerProtectedBundleIds(pathInput = {}, platform = process$1.platform) {
+	const contents = await readDaemonServiceUpdateWorkerRegistration(pathInput, platform);
+	return contents === null ? /* @__PURE__ */ new Set() : readBundleIdsFromUpdateWorkerRegistration(contents);
+}
 function readManagedVersionsFromUpdateWorkerRegistration(contents) {
 	const versions = /* @__PURE__ */ new Set();
 	for (const match of contents.matchAll(MANAGED_VERSION_FROM_EXECUTABLE_PATTERN)) {
@@ -20089,12 +20159,28 @@ function readManagedVersionsFromUpdateWorkerRegistration(contents) {
 	}
 	return versions;
 }
+function readBundleIdsFromUpdateWorkerRegistration(contents) {
+	const bundleIds = /* @__PURE__ */ new Set();
+	for (const match of contents.matchAll(SELF_CONTAINED_BUNDLE_FROM_EXECUTABLE_PATTERN)) {
+		const bundleId = match[1];
+		if (bundleId) bundleIds.add(bundleId);
+	}
+	return bundleIds;
+}
 function resolveDaemonServiceUpdateWorkerRegistrationPath(pathInput, platform) {
 	if (platform === "darwin") return resolveDaemonServiceUpdateWorkerLaunchdPlistPath(pathInput);
 	if (platform === "linux") return resolveDaemonServiceUpdateWorkerSystemdUnitPath(pathInput);
 	if (platform === "win32") return resolveDaemonServiceUpdateWorkerWindowsScriptPath(pathInput);
 	return null;
 }
+async function readDaemonServiceUpdateWorkerRegistration(pathInput, platform) {
+	const registrationPath = resolveDaemonServiceUpdateWorkerRegistrationPath(pathInput, platform);
+	if (registrationPath === null) return null;
+	return await readFile(registrationPath, "utf8").catch((error) => {
+		if (getErrorCode$5(error) === "ENOENT") return null;
+		throw error;
+	});
+}
 function getErrorCode$5(error) {
 	return error && typeof error === "object" && "code" in error ? String(error.code) : null;
 }
@@ -20348,6 +20434,70 @@ function toErrorMessage$31(error) {
 	return String(error);
 }
 //#endregion
+//#region src/local-service/lifecycle/daemon-service-update-state.ts
+const DAEMON_SERVICE_UPDATE_JOB_SCHEMA = OPENMELD_DAEMON_SERVICE_UPDATE_JOB_SCHEMA;
+function daemonServicePendingUpdatePath(pathInput = {}) {
+	return join(daemonRuntimeStateRootPath(pathInput), "service-update.json");
+}
+function daemonServiceLastUpdatePath(pathInput = {}) {
+	return join(daemonRuntimeStateRootPath(pathInput), "service-update-last.json");
+}
+async function readPendingDaemonServiceUpdate(pathInput = {}) {
+	return await readDaemonServiceUpdateJob(daemonServicePendingUpdatePath(pathInput));
+}
+async function readLastDaemonServiceUpdate(pathInput = {}) {
+	return await readDaemonServiceUpdateJob(daemonServiceLastUpdatePath(pathInput));
+}
+async function persistPendingDaemonServiceUpdate(job, pathInput = {}) {
+	await writeUpdateJobAtomically({
+		job,
+		path: daemonServicePendingUpdatePath(pathInput)
+	});
+}
+async function completePendingDaemonServiceUpdate(job, pathInput = {}) {
+	await writeUpdateJobAtomically({
+		job,
+		path: daemonServiceLastUpdatePath(pathInput)
+	});
+	await rm(daemonServicePendingUpdatePath(pathInput), { force: true });
+}
+async function readDaemonServiceUpdateJob(path) {
+	const raw = await readFile(path, "utf8").catch((error) => {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	});
+	if (raw === null) return null;
+	const parsed = storedDaemonServiceUpdateJobSchema.safeParse(JSON.parse(raw));
+	if (!parsed.success) throw new Error("OpenMeld Service update state is invalid.");
+	if (parsed.data.v === 2) return parsed.data;
+	const { status, ...legacyJob } = parsed.data;
+	return daemonServiceUpdateJobSchema.parse({
+		...legacyJob,
+		v: 2,
+		schema: DAEMON_SERVICE_UPDATE_JOB_SCHEMA,
+		phase: migrateLegacyPhase(status),
+		requestSource: "cli"
+	});
+}
+function migrateLegacyPhase(status) {
+	switch (status) {
+		case "scheduled": return "waiting_for_work";
+		case "running": return "updating";
+		case "completed": return "updated";
+		case "failed": return "needs_help";
+		default: return status;
+	}
+}
+async function writeUpdateJobAtomically(input) {
+	const temporaryPath = `${input.path}.${String(process.pid)}.tmp`;
+	await mkdir(dirname(input.path), { recursive: true });
+	await writeFile(temporaryPath, `${JSON.stringify(input.job, null, 2)}\n`, {
+		encoding: "utf8",
+		mode: 384
+	});
+	await rename(temporaryPath, input.path);
+}
+//#endregion
 //#region src/local-components/managed-version-pruning.ts
 const MANAGED_VERSION_DIRECTORY_PATTERN = /^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 async function pruneManagedVersions(input) {
@@ -20401,9 +20551,12 @@ async function isUsableManagedBinary(target) {
 		throw error;
 	});
 }
-async function readCurrentPointerVersion() {
-	const pointerPath = openMeldManagedBinaryPath();
-	const target = await readlink(pointerPath).catch(() => null);
+async function readCurrentPointerVersion(pathInput = {}) {
+	const pointerPath = openMeldManagedBinaryPath(pathInput);
+	const target = await readlink(pointerPath).catch((error) => {
+		if (isErrorWithCode(error, "ENOENT") || isErrorWithCode(error, "EINVAL")) return null;
+		throw error;
+	});
 	if (!target) return null;
 	const resolved = path.isAbsolute(target) ? target : path.resolve(path.dirname(pointerPath), target);
 	const version = path.basename(path.dirname(resolved));
@@ -20417,7 +20570,49 @@ async function readCurrentPointerVersion() {
 * atomically via a temp name + rename.
 */
 async function performManagedInstall(input) {
-	return await withManagedInstallLock(async () => performManagedInstallLocked(input));
+	return await withManagedInstallTransaction(async () => performManagedInstallLocked(input));
+}
+async function withManagedInstallTransaction(run, pathInput = {}) {
+	const startedAtMs = Date.now();
+	for (;;) try {
+		return await runWithHeldLock({
+			lock: await acquireLock({
+				openMeldProfileId: MANAGED_INSTALL_LOCK_PROFILE,
+				key: MANAGED_INSTALL_LOCK_KEY,
+				meta: { component: "managed_cli.install" },
+				pathResolution: pathInput
+			}),
+			run,
+			releaseContext: {
+				component: "managed_cli.install",
+				lockKey: MANAGED_INSTALL_LOCK_KEY,
+				openMeldProfileId: MANAGED_INSTALL_LOCK_PROFILE
+			}
+		});
+	} catch (error) {
+		if (!isOpenMeldLockError(error) || isOpenMeldOrphanedLockError(error) || Date.now() - startedAtMs >= MANAGED_INSTALL_LOCK_TIMEOUT_MS) throw error;
+		await setTimeout$1(MANAGED_INSTALL_LOCK_RETRY_DELAY_MS);
+	}
+}
+/**
+* Prune managed CLI versions only while holding the install transaction lock.
+* The current pointer and every durable Service update target are re-read in
+* the lock, so cleanup cannot race an install or use a stale pending snapshot.
+*/
+async function pruneManagedInstallVersions(input) {
+	const pathInput = input.pathInput;
+	assertNoPublishedProductionMutationDuringTests(pathInput, "managed CLI versions");
+	await withManagedInstallTransaction(async () => {
+		const currentVersion = await readCurrentPointerVersion(pathInput);
+		if (currentVersion === null) return;
+		const protectedVersions = await readManagedInstallProtectedVersions(pathInput);
+		await pruneManagedVersions({
+			currentVersion,
+			pathInput,
+			preferredRollbackVersion: input.preferredRollbackVersion,
+			protectedVersions
+		});
+	}, pathInput);
 }
 async function performManagedInstallLocked(input) {
 	const force = input?.force ?? false;
@@ -20426,7 +20621,7 @@ async function performManagedInstallLocked(input) {
 	const currentPointerPath = openMeldManagedBinaryPath();
 	const managedBinaryPath = openMeldManagedVersionBinaryPath(version);
 	const previousVersion = await readCurrentPointerVersion();
-	const protectedVersions = await readDaemonServiceUpdateWorkerProtectedManagedVersions();
+	const protectedVersions = await readManagedInstallProtectedVersions();
 	const baseOutcome = {
 		version,
 		platform,
@@ -20472,26 +20667,10 @@ async function performManagedInstallLocked(input) {
 		result: "installed"
 	};
 }
-async function withManagedInstallLock(run) {
-	const startedAtMs = Date.now();
-	for (;;) try {
-		return await runWithHeldLock({
-			lock: await acquireLock({
-				openMeldProfileId: MANAGED_INSTALL_LOCK_PROFILE,
-				key: MANAGED_INSTALL_LOCK_KEY,
-				meta: { component: "managed_cli.install" }
-			}),
-			run,
-			releaseContext: {
-				component: "managed_cli.install",
-				lockKey: MANAGED_INSTALL_LOCK_KEY,
-				openMeldProfileId: MANAGED_INSTALL_LOCK_PROFILE
-			}
-		});
-	} catch (error) {
-		if (!isOpenMeldLockError(error) || isOpenMeldOrphanedLockError(error) || Date.now() - startedAtMs >= MANAGED_INSTALL_LOCK_TIMEOUT_MS) throw error;
-		await setTimeout$1(MANAGED_INSTALL_LOCK_RETRY_DELAY_MS);
-	}
+async function readManagedInstallProtectedVersions(pathInput = {}) {
+	const [protectedVersions, pendingServiceUpdate] = await Promise.all([readDaemonServiceUpdateWorkerProtectedManagedVersions(pathInput), readPendingDaemonServiceUpdate(pathInput)]);
+	if (pendingServiceUpdate?.preparedBundle.bundleFormat === "binary_v1") protectedVersions.add(pendingServiceUpdate.preparedBundle.daemonVersion);
+	return protectedVersions;
 }
 async function placeVersionedBinary(sourceBinary, version, managedBinaryPath) {
 	await mkdir(openMeldManagedVersionDir(version), { recursive: true });
@@ -20825,8 +21004,8 @@ function isDaemonBundleSourceAllowedForLane(input) {
 	if (input.sourceKind !== DAEMON_BUNDLE_SOURCE_KIND_WORKSPACE) return true;
 	return resolveOpenMeldEnvPreset(input.pathInput) === "dev-local";
 }
-async function readDaemonActiveBundleState() {
-	const raw = await readFile(daemonServiceActiveBundlePath(), "utf8").catch((error) => {
+async function readDaemonActiveBundleState(pathInput = {}) {
+	const raw = await readFile(daemonServiceActiveBundlePath(pathInput), "utf8").catch((error) => {
 		if (getErrorCode$3(error) === "ENOENT") return null;
 		throw error;
 	});
@@ -21247,15 +21426,19 @@ async function restoreDaemonActiveBundleStateSnapshot(snapshot, pathInput = {})
 	});
 }
 async function cleanupInactiveDaemonServiceBundles(input = {}) {
-	const [active, serviceContract, runtimeLease] = await Promise.all([
+	const [active, serviceContract, runtimeLease, registeredWorkerBundleIds, pendingUpdate] = await Promise.all([
 		readDaemonActiveBundleState(),
 		readDaemonServiceContract().catch(() => null),
-		readDaemonRuntimeLease().catch(() => null)
+		readDaemonRuntimeLease().catch(() => null),
+		readDaemonServiceUpdateWorkerProtectedBundleIds(),
+		readPendingDaemonServiceUpdate()
 	]);
 	const retain = /* @__PURE__ */ new Set([
 		...active ? [active.bundleId] : [],
 		...serviceContract?.bundleId ? [serviceContract.bundleId] : [],
 		...runtimeLease?.bundleId ? [runtimeLease.bundleId] : [],
+		...registeredWorkerBundleIds,
+		...pendingUpdate?.preparedBundle.bundleFormat === "self_contained_v1" ? [pendingUpdate.preparedBundle.bundleId] : [],
 		...input.retainBundleIds ?? []
 	]);
 	const bundleEntries = await readDirectoryNames(daemonRuntimeBundlesPath());
@@ -38592,9 +38775,9 @@ function createModelCatalogReadSession(input) {
 async function readModelCatalogOnce(baseUrl) {
 	try {
 		const [apiClient, baseUrlModule, clientFoundationModule] = await Promise.all([
-			import("./dist-BnHChh7U.js").then((n) => n.w),
+			import("./dist-xeL9hjwh.js").then((n) => n.w),
 			import("./base-url-BtqW4aLS.js").then((n) => n.n),
-			import("./api-client-foundation-DD1YOgfr.js").then((n) => n.t)
+			import("./api-client-foundation-DAqpgdEd.js").then((n) => n.t)
 		]);
 		if (typeof apiClient.createConfigApi !== "function") throw new Error("config api client is unavailable");
 		const resolvedBaseUrl = baseUrl ?? await baseUrlModule.resolveBaseUrl();
@@ -45250,78 +45433,16 @@ async function writeLifecycleEvidenceEvent(input) {
 	}, null, 2)}\n`, "utf8").catch(() => void 0);
 }
 //#endregion
-//#region src/local-service/lifecycle/daemon-service-update-state.ts
-const DAEMON_SERVICE_UPDATE_JOB_SCHEMA = OPENMELD_DAEMON_SERVICE_UPDATE_JOB_SCHEMA;
-function daemonServicePendingUpdatePath(pathInput = {}) {
-	return join(daemonRuntimeStateRootPath(pathInput), "service-update.json");
-}
-function daemonServiceLastUpdatePath(pathInput = {}) {
-	return join(daemonRuntimeStateRootPath(pathInput), "service-update-last.json");
-}
-async function readPendingDaemonServiceUpdate(pathInput = {}) {
-	return await readDaemonServiceUpdateJob(daemonServicePendingUpdatePath(pathInput));
-}
-async function readLastDaemonServiceUpdate(pathInput = {}) {
-	return await readDaemonServiceUpdateJob(daemonServiceLastUpdatePath(pathInput));
-}
-async function persistPendingDaemonServiceUpdate(job, pathInput = {}) {
-	await writeUpdateJobAtomically({
-		job,
-		path: daemonServicePendingUpdatePath(pathInput)
-	});
-}
-async function completePendingDaemonServiceUpdate(job, pathInput = {}) {
-	await writeUpdateJobAtomically({
-		job,
-		path: daemonServiceLastUpdatePath(pathInput)
-	});
-	await rm(daemonServicePendingUpdatePath(pathInput), { force: true });
-}
-async function readDaemonServiceUpdateJob(path) {
-	const raw = await readFile(path, "utf8").catch((error) => {
-		if (error.code === "ENOENT") return null;
-		throw error;
-	});
-	if (raw === null) return null;
-	const parsed = storedDaemonServiceUpdateJobSchema.safeParse(JSON.parse(raw));
-	if (!parsed.success) throw new Error("OpenMeld Service update state is invalid.");
-	if (parsed.data.v === 2) return parsed.data;
-	const { status, ...legacyJob } = parsed.data;
-	return daemonServiceUpdateJobSchema.parse({
-		...legacyJob,
-		v: 2,
-		schema: DAEMON_SERVICE_UPDATE_JOB_SCHEMA,
-		phase: migrateLegacyPhase(status),
-		requestSource: "cli"
-	});
-}
-function migrateLegacyPhase(status) {
-	switch (status) {
-		case "scheduled": return "waiting_for_work";
-		case "running": return "updating";
-		case "completed": return "updated";
-		case "failed": return "needs_help";
-		default: return status;
-	}
-}
-async function writeUpdateJobAtomically(input) {
-	const temporaryPath = `${input.path}.${String(process.pid)}.tmp`;
-	await mkdir(dirname(input.path), { recursive: true });
-	await writeFile(temporaryPath, `${JSON.stringify(input.job, null, 2)}\n`, {
-		encoding: "utf8",
-		mode: 384
-	});
-	await rename(temporaryPath, input.path);
-}
-//#endregion
 //#region src/local-service/lifecycle/daemon-service-update-worker-manager.ts
 const UPDATE_WORKER_RESTART_BACKOFF_SECONDS = 30;
 const WINDOWS_SERVICE_ALREADY_RUNNING_PATTERN = /already running|1056/i;
 const SYSTEMD_QUOTING_PATTERN = /[\s"\\]/u;
 async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
+	await prepareDaemonServiceUpdateWorkerCarrier(job, pathInput);
+	await registerDaemonServiceUpdateWorker(job, pathInput);
+}
+async function registerDaemonServiceUpdateWorker(job, pathInput = {}) {
 	assertSafePublishedProductionServiceRegistrationMutation("install the OpenMeld Service update worker for", pathInput);
-	const previousActiveBundle = job.preparedBundle.bundleFormat === "binary_v1" ? await readDaemonActiveBundleState().catch(() => null) : null;
-	if (job.preparedBundle.bundleFormat === "binary_v1") await ensureDaemonServiceUpdateWorkerBinaryExecutable(job.preparedBundle, pathInput);
 	const spec = await buildDaemonServiceUpdateWorkerSpec(job, pathInput);
 	const identity = resolveDaemonServiceUpdateWorkerIdentity(pathInput);
 	if (process$1.platform === "darwin") {
@@ -45354,11 +45475,6 @@ async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
 			command: "launchctl",
 			args: ["enable", serviceKey]
 		});
-		await pruneVersionsAfterStableWorkerRegistration({
-			job,
-			pathInput,
-			previousActiveVersion: previousActiveBundle?.daemonVersion ?? null
-		});
 		return;
 	}
 	if (process$1.platform === "linux") {
@@ -45388,11 +45504,6 @@ async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
 				`${identity.serviceName}.path`
 			]
 		});
-		await pruneVersionsAfterStableWorkerRegistration({
-			job,
-			pathInput,
-			previousActiveVersion: previousActiveBundle?.daemonVersion ?? null
-		});
 		return;
 	}
 	if (process$1.platform === "win32") {
@@ -45429,15 +45540,20 @@ async function installDaemonServiceUpdateWorker(job, pathInput = {}) {
 				"restart/30000/restart/30000/restart/30000"
 			]
 		});
-		await pruneVersionsAfterStableWorkerRegistration({
-			job,
-			pathInput,
-			previousActiveVersion: previousActiveBundle?.daemonVersion ?? null
-		});
 		return;
 	}
 	throw new Error(`OpenMeld cannot install its background update worker on ${process$1.platform}.`);
 }
+async function prepareDaemonServiceUpdateWorkerCarrier(job, pathInput = {}) {
+	if (job.preparedBundle.bundleFormat === "binary_v1") await ensureDaemonServiceUpdateWorkerBinaryExecutable(job.preparedBundle, pathInput);
+}
+async function pruneDaemonServiceUpdateWorkerManagedVersions(job, pathInput = {}) {
+	if (job.preparedBundle.bundleFormat !== "binary_v1") return;
+	await pruneManagedInstallVersions({
+		pathInput,
+		preferredRollbackVersion: (await readDaemonActiveBundleState(pathInput))?.daemonVersion ?? null
+	});
+}
 async function startDaemonServiceUpdateWorker(_job, pathInput = {}) {
 	assertSafePublishedProductionServiceRegistrationMutation("start the OpenMeld Service update worker for", pathInput);
 	const identity = resolveDaemonServiceUpdateWorkerIdentity(pathInput);
@@ -45613,14 +45729,6 @@ WantedBy=default.target
 function resolveUpdateWorkerLogPath(pathInput) {
 	return join(daemonRuntimeRootPath(pathInput), "logs", "service-update-worker.log");
 }
-async function pruneVersionsAfterStableWorkerRegistration(input) {
-	if (input.job.preparedBundle.bundleFormat !== "binary_v1") return;
-	await pruneManagedVersions({
-		currentVersion: input.job.targetVersion,
-		pathInput: input.pathInput,
-		preferredRollbackVersion: input.previousActiveVersion
-	});
-}
 function buildWindowsUpdateWorkerScript(spec) {
 	const env = Object.entries(spec.env).map(([key, value]) => `set "${key}=${value.replaceAll("\"", "\\\"")}"`);
 	const command = [spec.executable, ...spec.args].map(quoteWindowsArg).join(" ");
@@ -45686,11 +45794,10 @@ async function runCommand$1(input) {
 //#region src/local-service/lifecycle/daemon-service-update-coordinator.ts
 const MAX_BACKGROUND_UPDATE_ATTEMPTS = 5;
 async function scheduleDaemonServiceUpdate(input, overrides = {}) {
-	if (Object.keys(overrides).length === 0) return await withDaemonServiceReconcileLock(async () => await scheduleDaemonServiceUpdate(input, defaultScheduleOverrides()), {
-		command: "openmeld service update",
-		intent: "upgrade_reconcile"
-	});
-	const deps = resolveScheduleDependencies(overrides);
+	const deps = resolveScheduleDependencies(overrides, { useDefaultLock: Object.keys(overrides).length === 0 });
+	return await deps.withReconcileLock(async () => await scheduleDaemonServiceUpdateLocked(input, deps));
+}
+async function scheduleDaemonServiceUpdateLocked(input, deps) {
 	const pending = await deps.readPendingJob();
 	if (pending) return await reschedulePendingDaemonServiceUpdate({
 		dependencies: deps,
@@ -45718,9 +45825,16 @@ async function scheduleDaemonServiceUpdate(input, overrides = {}) {
 		updatedAt: now,
 		urgency: input.urgency
 	};
-	await deps.installWorker(job);
-	await deps.persistPendingJob(job);
+	await deps.withManagedInstallTransaction(async () => {
+		await deps.prepareWorkerCarrier(job);
+		await deps.installWorker(job);
+		await deps.persistPendingJob(job);
+	});
 	await deps.startWorker(job);
+	await pruneWorkerVersionsBestEffort({
+		dependencies: deps,
+		job
+	});
 	return {
 		job,
 		status: "scheduled"
@@ -45746,39 +45860,44 @@ async function reschedulePendingDaemonServiceUpdate(input) {
 		updatedAt: input.dependencies.now(),
 		urgency: escalateUrgency ? "required" : input.pending.urgency
 	} : input.pending;
-	await input.dependencies.installWorker(retained);
-	if (retained !== input.pending) await input.dependencies.persistPendingJob(retained);
+	if (retained !== input.pending) await input.dependencies.withManagedInstallTransaction(async () => {
+		await input.dependencies.prepareWorkerCarrier(retained);
+		await input.dependencies.persistPendingJob(retained);
+	});
 	await input.dependencies.startWorker(retained);
-	if (replaceTarget) await discardReplacedBundleBestEffort({
+	if (retained !== input.pending) await pruneWorkerVersionsBestEffort({
 		dependencies: input.dependencies,
-		pending: input.pending
+		job: retained
 	});
 	return {
 		job: retained,
 		status: "already_scheduled"
 	};
 }
-async function discardReplacedBundleBestEffort(input) {
-	await input.dependencies.discardBundle(input.pending.preparedBundle).catch((error) => {
-		console.warn("[openmeld.daemon_service.update_bundle_cleanup_failed]", {
-			bundleId: input.pending.preparedBundle.bundleId,
+async function pruneWorkerVersionsBestEffort(input) {
+	await input.dependencies.pruneWorkerVersions(input.job).catch((error) => {
+		console.warn("[openmeld.daemon_service.update_worker_prune_failed]", {
 			errorMessage: toErrorMessage$43(error),
-			operationId: input.pending.jobId
+			operationId: input.job.jobId,
+			targetVersion: input.job.targetVersion
 		});
 	});
 }
 async function runPendingDaemonServiceUpdate(overrides = {}) {
-	if (Object.keys(overrides).length === 0) {
-		const deps = resolveRunDependencies(defaultRunOverrides());
-		if (!await preparePendingUpdateForSwitch(deps)) return null;
-		return await withDaemonServiceReconcileLock(async () => await runPreparedPendingUpdate(deps), {
-			command: "openmeld service update-worker",
-			intent: "upgrade_reconcile"
-		});
+	const deps = resolveRunDependencies(overrides, { useDefaultLock: Object.keys(overrides).length === 0 });
+	const pending = await deps.withReconcileLock(async () => await preparePendingUpdateForSwitch(deps));
+	if (!pending) return null;
+	if (pending.urgency === "available") try {
+		await deps.waitUntilSafeToSwitch(pending);
+	} catch (waitError) {
+		try {
+			await deps.withReconcileLock(async () => await recordSafeSwitchWaitFailure(deps, pending, waitError));
+		} catch (recordError) {
+			throw new AggregateError([waitError, recordError], "OpenMeld could not safely switch the Service or record the failure.");
+		}
+		throw waitError;
 	}
-	const deps = resolveRunDependencies(overrides);
-	if (!await preparePendingUpdateForSwitch(deps)) return null;
-	return await runPreparedPendingUpdate(deps);
+	return await deps.withReconcileLock(async () => await runPreparedPendingUpdate(deps));
 }
 async function preparePendingUpdateForSwitch(deps) {
 	const pending = await deps.readPendingJob();
@@ -45791,20 +45910,22 @@ async function preparePendingUpdateForSwitch(deps) {
 			updatedAt: deps.now()
 		};
 		await deps.persistPendingJob(waiting);
-		try {
-			await deps.waitUntilSafeToSwitch(waiting);
-		} catch (error) {
-			await deps.persistPendingJob({
-				...waiting,
-				errorMessage: toErrorMessage$43(error),
-				updatedAt: deps.now()
-			});
-			throw error;
-		}
 		return waiting;
 	}
 	return pending;
 }
+async function recordSafeSwitchWaitFailure(deps, waiting, error) {
+	const current = await deps.readPendingJob();
+	if (!(current && isSameWaitingUpdate(current, waiting))) return;
+	await deps.persistPendingJob({
+		...current,
+		errorMessage: toErrorMessage$43(error),
+		updatedAt: deps.now()
+	});
+}
+function isSameWaitingUpdate(current, waiting) {
+	return current.jobId === waiting.jobId && current.targetVersion === waiting.targetVersion && current.preparedBundle.bundleId === waiting.preparedBundle.bundleId && current.urgency === waiting.urgency && current.phase === "waiting_for_work" && current.attempts === waiting.attempts;
+}
 async function runPreparedPendingUpdate(deps) {
 	const pending = await deps.readPendingJob();
 	if (!pending) return null;
@@ -45864,52 +45985,48 @@ async function runPreparedPendingUpdate(deps) {
 		return failed;
 	}
 }
-function defaultScheduleOverrides() {
-	return {
-		createJobId: randomUUID,
-		discardBundle: discardPreparedDaemonServiceBundle,
-		installWorker: installDaemonServiceUpdateWorker,
-		now: () => (/* @__PURE__ */ new Date()).toISOString(),
-		persistPendingJob: persistPendingDaemonServiceUpdate,
-		prepareBundle: prepareDaemonServiceBundle,
-		readPendingJob: readPendingDaemonServiceUpdate,
-		resolveDesiredState: resolveCurrentDaemonDesiredState,
-		startWorker: startDaemonServiceUpdateWorker
-	};
-}
-function defaultRunOverrides() {
-	return {
-		completePendingJob: completePendingDaemonServiceUpdate,
-		now: () => (/* @__PURE__ */ new Date()).toISOString(),
-		persistPendingJob: persistPendingDaemonServiceUpdate,
-		readPendingJob: readPendingDaemonServiceUpdate,
-		runLifecycle: runDaemonServiceLifecycle,
-		waitUntilSafeToSwitch: waitUntilDaemonServiceSafeSwitch
-	};
-}
-function resolveScheduleDependencies(overrides) {
+function resolveScheduleDependencies(overrides, options) {
 	return {
 		createJobId: overrides.createJobId ?? randomUUID,
-		discardBundle: overrides.discardBundle ?? discardPreparedDaemonServiceBundle,
-		installWorker: overrides.installWorker ?? installDaemonServiceUpdateWorker,
+		installWorker: overrides.installWorker ?? (options.useDefaultLock ? registerDaemonServiceUpdateWorker : installDaemonServiceUpdateWorker),
 		now: overrides.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()),
 		persistPendingJob: overrides.persistPendingJob ?? persistPendingDaemonServiceUpdate,
 		prepareBundle: overrides.prepareBundle ?? prepareDaemonServiceBundle,
+		prepareWorkerCarrier: overrides.prepareWorkerCarrier ?? (options.useDefaultLock ? prepareDaemonServiceUpdateWorkerCarrier : async () => void 0),
+		pruneWorkerVersions: overrides.pruneWorkerVersions ?? pruneDaemonServiceUpdateWorkerManagedVersions,
 		readPendingJob: overrides.readPendingJob ?? readPendingDaemonServiceUpdate,
 		resolveDesiredState: overrides.resolveDesiredState ?? resolveCurrentDaemonDesiredState,
-		startWorker: overrides.startWorker ?? startDaemonServiceUpdateWorker
+		startWorker: overrides.startWorker ?? startDaemonServiceUpdateWorker,
+		withReconcileLock: overrides.withReconcileLock ?? (options.useDefaultLock ? withDaemonServiceUpdateScheduleLock : runWithoutReconcileLock),
+		withManagedInstallTransaction: overrides.withManagedInstallTransaction ?? (options.useDefaultLock ? withManagedInstallTransaction : runWithoutReconcileLock)
 	};
 }
-function resolveRunDependencies(overrides) {
+function resolveRunDependencies(overrides, options) {
 	return {
 		completePendingJob: overrides.completePendingJob ?? completePendingDaemonServiceUpdate,
 		now: overrides.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()),
 		persistPendingJob: overrides.persistPendingJob ?? persistPendingDaemonServiceUpdate,
 		readPendingJob: overrides.readPendingJob ?? readPendingDaemonServiceUpdate,
 		runLifecycle: overrides.runLifecycle ?? runDaemonServiceLifecycle,
-		waitUntilSafeToSwitch: overrides.waitUntilSafeToSwitch ?? waitUntilDaemonServiceSafeSwitch
+		waitUntilSafeToSwitch: overrides.waitUntilSafeToSwitch ?? waitUntilDaemonServiceSafeSwitch,
+		withReconcileLock: overrides.withReconcileLock ?? (options.useDefaultLock ? withDaemonServiceUpdateWorkerLock : runWithoutReconcileLock)
 	};
 }
+async function withDaemonServiceUpdateScheduleLock(run) {
+	return await withDaemonServiceReconcileLock(run, {
+		command: "openmeld service update",
+		intent: "upgrade_reconcile"
+	});
+}
+async function withDaemonServiceUpdateWorkerLock(run) {
+	return await withDaemonServiceReconcileLock(run, {
+		command: "openmeld service update-worker",
+		intent: "upgrade_reconcile"
+	});
+}
+async function runWithoutReconcileLock(run) {
+	return await run();
+}
 async function waitUntilDaemonServiceSafeSwitch(job) {
 	while (true) {
 		const pending = await readPendingDaemonServiceUpdate();
@@ -50556,7 +50673,7 @@ function prepareSpaceComposerSubmission(input) {
 	});
 	const replyToSignalId = normalizeReplyToSignalId(input.replyTo);
 	const replyTo = replyToSignalId ? { signalId: replyToSignalId } : null;
-	if (canonicalFragments.length === 0 && authoredMentionsInTextOrder.length === 0) {
+	if (hasNoAuthoredMentions(canonicalFragments, authoredMentionsInTextOrder)) {
 		const normalizedText = normalizePlainTextOrThrow(input.text);
 		return {
 			authoredMentionsInTextOrder: [],
@@ -50580,6 +50697,8 @@ function prepareSpaceComposerSubmission(input) {
 	const envelopeInput = createEnvelopeInput(input.text, replyToSignalId);
 	const canonicalMentionsInTextOrder = [];
 	const profileIdsInTextOrder = [];
+	const structuredTargetProfileIds = /* @__PURE__ */ new Set();
+	const structuredMentionCandidates = [];
 	for (const fragment of canonicalFragments) {
 		const parsedLiteral = fragment.parsedLiteral;
 		if (!parsedLiteral) throw createSubmissionError("addressing.invalid_canonical_mention_syntax", buildInvalidCanonicalMentionSyntaxMessage(fragment.text));
@@ -50589,12 +50708,19 @@ function prepareSpaceComposerSubmission(input) {
 			mentionText: fragment.text,
 			relation: parsedLiteral.type
 		}));
-		envelopeInput[resolveMessageEnvelopeTargetField(parsedLiteral.type)].push(target.profileId);
-		profileIdsInTextOrder.push(target.profileId);
-		canonicalMentionsInTextOrder.push({
+		const canonicalMention = {
 			profileId: target.profileId,
 			text: fragment.text,
 			type: parsedLiteral.type
+		};
+		canonicalMentionsInTextOrder.push(canonicalMention);
+		structuredMentionCandidates.push({
+			canonicalMention,
+			profileId: target.profileId,
+			relation: parsedLiteral.type,
+			sequence: structuredMentionCandidates.length,
+			sourcePriority: 0,
+			start: fragment.start
 		});
 	}
 	for (const authoredMention of authoredMentionsInTextOrder) {
@@ -50604,9 +50730,20 @@ function prepareSpaceComposerSubmission(input) {
 			mentionText: authoredMention.text,
 			relation: authoredMention.relation
 		}));
-		envelopeInput[resolveMessageEnvelopeTargetField(authoredMention.relation)].push(target.profileId);
-		profileIdsInTextOrder.push(target.profileId);
+		structuredMentionCandidates.push({
+			profileId: target.profileId,
+			relation: authoredMention.relation,
+			sequence: structuredMentionCandidates.length,
+			sourcePriority: 1,
+			start: authoredMention.start
+		});
 	}
+	const resolvedCanonicalMentionsInTextOrder = appendStructuredMentionCandidates({
+		candidates: structuredMentionCandidates,
+		envelopeInput,
+		profileIdsInTextOrder,
+		structuredTargetProfileIds
+	});
 	const messageEnvelope = createMessageEnvelopeOrNull(envelopeInput);
 	return {
 		authoredMentionsInTextOrder,
@@ -50615,25 +50752,56 @@ function prepareSpaceComposerSubmission(input) {
 		messageEnvelope,
 		replyTo,
 		resolvedStructuredTargets: {
-			canonicalMentionsInTextOrder,
+			canonicalMentionsInTextOrder: resolvedCanonicalMentionsInTextOrder,
 			profileIdsInTextOrder
 		},
 		text: messageEnvelope?.text ?? normalizePlainTextOrThrow(input.text)
 	};
 }
+function hasNoAuthoredMentions(canonicalFragments, authoredMentions) {
+	return canonicalFragments.length === 0 && authoredMentions.length === 0;
+}
+function appendStructuredTarget(input) {
+	if (input.structuredTargetProfileIds.has(input.profileId)) return false;
+	input.structuredTargetProfileIds.add(input.profileId);
+	const fieldName = resolveMessageEnvelopeTargetField(input.relation);
+	input.envelopeInput[fieldName].push(input.profileId);
+	input.profileIdsInTextOrder.push(input.profileId);
+	return true;
+}
+function compareStructuredMentionCandidates(left, right) {
+	return left.start - right.start || left.sourcePriority - right.sourcePriority || left.sequence - right.sequence;
+}
+function appendStructuredMentionCandidates(input) {
+	const resolvedCanonicalMentionsInTextOrder = [];
+	input.candidates.sort(compareStructuredMentionCandidates);
+	for (const candidate of input.candidates) if (appendStructuredTarget({
+		envelopeInput: input.envelopeInput,
+		profileId: candidate.profileId,
+		profileIdsInTextOrder: input.profileIdsInTextOrder,
+		relation: candidate.relation,
+		structuredTargetProfileIds: input.structuredTargetProfileIds
+	}) && candidate.canonicalMention) resolvedCanonicalMentionsInTextOrder.push(candidate.canonicalMention);
+	return resolvedCanonicalMentionsInTextOrder;
+}
 function normalizeAuthoredMentionsInTextOrder(input) {
 	const normalizedMentions = [];
+	let searchStart = 0;
 	for (const mention of input.mentions ?? []) {
 		const profileId = normalizeOptionalText$6$1(mention.profileId);
 		const text = normalizeOptionalText$6$1(mention.text);
 		if (!(profileId && text)) throw createSubmissionError("addressing.invalid_message_envelope", "Authored mention target must include a profile and visible mention text.");
 		if (!CANONICAL_MENTION_TYPES.has(mention.relation)) throw createSubmissionError("addressing.invalid_message_envelope", INVALID_MENTION_ACTION_GUIDANCE);
-		if (!input.text.includes(text)) continue;
+		const declaredStart = mention.start;
+		const start = Number.isInteger(declaredStart) && (declaredStart ?? -1) >= searchStart && input.text.slice(declaredStart, (declaredStart ?? 0) + text.length) === text ? declaredStart : input.text.indexOf(text, searchStart);
+		if (start < 0) continue;
 		normalizedMentions.push({
 			profileId,
 			relation: mention.relation,
+			start,
 			text
 		});
+		searchStart = start + text.length;
 	}
 	return normalizedMentions;
 }
@@ -53453,7 +53621,7 @@ async function probeOpenCodeReadiness(input) {
 			message: `OpenCode is installed, but OpenMeld could not confirm a connected OpenCode provider: ${toErrorMessage$18(error)}`,
 			models: [],
 			probeCompleted: auth.status === "unauthenticated",
-			status: "error"
+			status: auth.status === "unauthenticated" ? "unavailable" : "unknown"
 		};
 	} finally {
 		if (server) await stopOpenCodeProbeServer(server.child);
@@ -53607,11 +53775,14 @@ function resolveOpenCodeReadinessFromProviderList(providerList) {
 	};
 	const connectedProviders = new Set(providerList.connected.map((providerId) => normalizeOptionalText$16(providerId)).filter((providerId) => Boolean(providerId)));
 	if (connectedProviders.size === 0) return {
-		auth: { status: "unknown" },
+		auth: {
+			status: "unauthenticated",
+			type: "opencode"
+		},
 		message: "OpenCode is installed, but no connected provider was reported. Open OpenCode and sign in to a provider before OpenMeld can launch it.",
 		models: [],
 		probeCompleted: true,
-		status: "error"
+		status: "unavailable"
 	};
 	const models = parseOpenCodeProviderModels({
 		connectedProviders,
@@ -54084,7 +54255,7 @@ async function resolveClaudeCodeInterfaceSnapshot(input) {
 	let status = input.baseSnapshot.status;
 	if (auth.status === "unauthenticated") {
 		message = "Claude Code is installed, but this computer is not signed in to Claude Code.";
-		status = "error";
+		status = "unavailable";
 	} else if (auth.status === "unknown") {
 		message = "OpenMeld could not read Claude Code authentication status.";
 		status = "warning";
@@ -54125,7 +54296,7 @@ async function resolveCursorInterfaceSnapshot(input) {
 	let status = input.baseSnapshot.status;
 	if (auth.status === "unauthenticated") {
 		message = requireControllerSignInInterfaceDescription("cursor");
-		status = "error";
+		status = "unavailable";
 	} else if (auth.status === "unknown") {
 		message = "OpenMeld could not read Cursor CLI authentication status.";
 		status = "warning";
@@ -54192,7 +54363,7 @@ async function resolveGrokBuildInterfaceSnapshot(input) {
 			...input.baseSnapshot,
 			auth: { status: unauthenticated ? "unauthenticated" : "unknown" },
 			message: unauthenticated ? requireControllerSignInInterfaceDescription("grok-build") : `OpenMeld could not read Grok Build's ACP status: ${toErrorMessage$17(interfaceProbe.error)}`,
-			status: unauthenticated ? "error" : "warning",
+			status: unauthenticated ? "unavailable" : "warning",
 			version,
 			versionAdvisory: await resolveControllerVersionAdvisory({
 				checkedAt: input.baseSnapshot.checkedAt,
@@ -54222,13 +54393,16 @@ async function resolveOpenClawInterfaceSnapshot(input) {
 	let message = input.baseSnapshot.message;
 	if (!authResult.probeCompleted) message = "OpenMeld could not read OpenClaw model provider authentication status. Check OpenClaw configuration and update OpenClaw if this command is unavailable.";
 	if (authResult.auth.status === "unauthenticated") message = "OpenClaw is installed, but its model provider credentials are missing or expired. Re-authenticate the model provider in OpenClaw before OpenMeld can launch it.";
+	let status = input.baseSnapshot.status;
+	if (!authResult.probeCompleted) status = "unknown";
+	if (authResult.auth.status === "unauthenticated") status = "unavailable";
 	return {
 		probeCompleted: authResult.probeCompleted,
 		snapshot: {
 			...input.baseSnapshot,
 			auth: authResult.auth,
 			message,
-			status: authResult.auth.status === "unauthenticated" || !authResult.probeCompleted ? "error" : input.baseSnapshot.status,
+			status,
 			version
 		}
 	};
@@ -54488,7 +54662,7 @@ async function runCodexAppServerProbeRequests(input) {
 		models: parseCodexModels(models),
 		ok: true,
 		skills: parseCodexSkills(skills),
-		status: auth.status === "unauthenticated" ? "error" : "ready",
+		status: auth.status === "unauthenticated" ? "unavailable" : "ready",
 		usageLimits,
 		version: parseCodexUserAgentVersion(initialized)
 	});
@@ -88270,18 +88444,6 @@ function resolvePublicSpaceExposure(input) {
 function buildPublicSpaceWarningLines(exposure) {
 	return [exposure === "anyone_can_join" ? "Anyone with this Space link can read what is shared here and join." : "Anyone with this Space link can read what is shared here. A password is required to join.", "Only bring an agent if you're comfortable sharing anything it posts with people who have the link."];
 }
-function resolveSpaceAccessLabel(input) {
-	switch (input.accessMode) {
-		case "members_only": return "members only";
-		case "public": return "anyone with the link";
-		case "public_view_join_password": return "anyone can view; password required to join";
-		case "protected": return "password required to view and join";
-		default:
-			if (input.passwordProtected === true) return "password required";
-			if (input.passwordProtected === false) return "anyone with the link";
-			return "unknown";
-	}
-}
 function buildPublicSpaceJoinConfirmPromptConfig(input) {
 	return {
 		active: "Yes, join this Space",
@@ -90578,6 +90740,23 @@ function isCliIgnoredIncomingFrame(parsed) {
 	return "error" in parsed || parsed.type === "space.agent_stream_delta" || parsed.type === "space.agent_stream_part" || parsed.type === "space.agent_stream_terminal" || parsed.type === "space.signal" || parsed.type === "space.members.changed" || parsed.type === "space.meta.changed" || parsed.type === "agent.readiness.invalidated";
 }
 //#endregion
+//#region src/space/access-presentation.ts
+function resolveOrganizationVisibilityLabel(visibility) {
+	return visibility === "public" ? "discoverable; Organization members can join" : "invite only";
+}
+function resolveLinkAccessLabel(input) {
+	switch (input.accessMode) {
+		case "members_only": return "members only";
+		case "public": return "anyone with the link";
+		case "public_view_join_password": return "anyone can view; password required to join";
+		case "protected": return "password required to view and join";
+		default:
+			if (input.passwordProtected === true) return "password required";
+			if (input.passwordProtected === false) return "anyone with the link";
+			return "unknown";
+	}
+}
+//#endregion
 //#region src/space/agent-output-contract.ts
 function normalizeOptionalText$1(value) {
 	if (typeof value !== "string") return null;
@@ -90649,7 +90828,7 @@ function normalizeAgentOutputMembersSnapshot(snapshot) {
 	};
 }
 function buildAgentSessionMetaPayload(input) {
-	const access = resolveSpaceAccessLabel(input);
+	const access = resolveLinkAccessLabel(input);
 	let security = "Unknown";
 	if (input.passwordProtected === true) security = "Secure";
 	else if (input.passwordProtected === false) security = "Public";
@@ -90958,8 +91137,8 @@ function buildSpaceInfoData(input) {
 			},
 			...metadataFacts,
 			{
-				label: "Access",
-				value: resolveSpaceAccessLabel(accessFacts)
+				label: "Link access",
+				value: resolveLinkAccessLabel(accessFacts)
 			},
 			{
 				label: "Gateway URL",
@@ -97151,7 +97330,7 @@ function selectSpaceSummarySegments(input) {
 	return segments;
 }
 function resolveSpaceSummaryAccessLabel(session) {
-	const label = resolveSpaceAccessLabel({
+	const label = resolveLinkAccessLabel({
 		accessMode: session.accessMode ?? void 0,
 		passwordProtected: session.passwordProtected ?? void 0,
 		visibility: session.visibility ?? void 0
@@ -104733,9 +104912,23 @@ async function uploadPreparedSpaceFiles(input) {
 		});
 	} catch (error) {
 		const failure = toStructuredApiClientFailure(error);
+		const cleanupFailures = await moveUploadedFilesToTrash({
+			files: uploaded,
+			password: input.password,
+			requestContext: input.requestContext,
+			spaceApi: input.spaceApi,
+			spaceId: input.spaceId
+		});
+		let cleanupMessage = "";
+		if (uploaded.length > 0) cleanupMessage = cleanupFailures.length === 0 ? " Files added earlier in this send were moved to Trash." : ` ${formatCleanupFailures({
+			failures: cleanupFailures,
+			passwordProtected: input.password !== void 0,
+			profileId: input.requestContext.actorContext.openMeldProfileId,
+			spaceId: input.spaceId
+		})}`;
 		throw new SpaceSendFileError({
 			code: failure.code ?? "space.file.upload_failed",
-			message: `Could not add file "${file.name}" to this Space. The message was not sent. ${failure.message}`,
+			message: `Could not add file "${file.name}" to this Space. The message was not sent. ${failure.message}${cleanupMessage}`,
 			cause: error,
 			requestId: failure.requestId,
 			status: failure.status,
@@ -104744,6 +104937,30 @@ async function uploadPreparedSpaceFiles(input) {
 	}
 	return uploaded;
 }
+async function moveUploadedFilesToTrash(input) {
+	const failures = [];
+	for (const file of input.files) try {
+		await input.spaceApi.trashFileEntry({
+			clientMutationId: crypto.randomUUID(),
+			entryId: file.fileId,
+			requestContext: input.requestContext,
+			spaceId: input.spaceId,
+			...input.password === void 0 ? {} : { spacePassword: input.password }
+		});
+	} catch (error) {
+		failures.push({
+			failure: toStructuredApiClientFailure(error),
+			fileId: file.fileId
+		});
+	}
+	return failures;
+}
+function formatCleanupFailures(input) {
+	return `${input.failures.map(({ failure, fileId }) => {
+		const evidence = [failure.code ? `code ${failure.code}` : null, failure.requestId ? `request ${failure.requestId}` : null].filter((value) => value !== null).join(", ");
+		return `Could not move file ${fileId} to Trash${evidence ? ` (${evidence})` : ""}: ${failure.message} Run \`openmeld space files trash ${input.spaceId} ${fileId} --profile ${input.profileId}\` to finish cleanup.`;
+	}).join(" ")}${input.passwordProtected ? " This Space is password protected. Add `--password` with the same Space password you used for this send; OpenMeld does not include the password in this message." : ""}`;
+}
 async function prepareSpaceSendFile(sourcePath) {
 	let bytes;
 	try {
@@ -110019,6 +110236,6 @@ function isHumanInteractiveSpaceRuntime(runtime) {
 	return runtime.resolvedView === "human" && canUseInteractivePrompts(runtime);
 }
 //#endregion
-export { runAgentsRepair as $, validateLocalProjectConnectionPath as $a, startCurrentCommandCheckScope as $i, assertDispatchOwnedRuntimePublicWriteAllowed as $n, cliJsonSkillsListEnvelopeSchema as $o, resolveDaemonServiceFreshnessWarning as $r, readBundledOpenMeldCliSkillDocumentByPath as $t, assertFullSignalIdArgument as A, isSelectedOpenMeldProfileRequiredError as Aa, listAgentControllerPermissionModeOptions as Ai, submitRuntimeAgentControllerReport as An, removeProjectInbox as Ao, SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS as Ar, shouldEmitAgentOverview as At, persistAgentTransportSelection as B, alignSelectedOpenMeldProfileStorage as Ba, getSetupFlowCopy as Bi, buildDispatchResultReplyWorkflowProjection as Bn, unbindProject as Bo, formatAgentOverviewPayload as Br, parseJsonResponse$1 as Bt, toSpaceMetaUpsertInput as C, renderHumanErrorCard as Ca, listBuiltinAgentsRegistryEntries as Ci, promptTextEntry as Cn, readAgentActivityContextForPath as Co, createSpaceUpdatesGuideError as Cr, runDaemonTeardownStrict as Ct, formatHumanReadTargetList as D, parseCliViewMode as Da, createAgentExecutionStatusDisplayRows as Di, assessActionParticipationCandidate as Dn, normalizeSharedSessionTitle as Do, getCommandEntryContract as Dr, reconcileCliVersionView as Dt, buildHumanReplyContextSummary as E, formatMessage as Ea, buildAgentControllerRef as Ei, resolveServiceParticipationReadiness as En, resolveObservedAgentActivityBinding as Eo, createUpgradeConfirmationGuideError as Er, buildProfileWorkspaceRows as Et, emitSpaceAgentOverview as F, deleteOpenMeldProfile as Fa, resolveEvidenceSyncHealth as Fi, resolveLocalAgentControllerReportDecision as Fn, listProjectConnectionsWithStatus as Fo, registerBuiltinAgentSelectionOptions as Fr, fetchSpaceMeta as Ft, runAgentsCustomList as G, buildHumanAuthenticationCard as Ga, resolveServiceUpdateUrgency as Gi, createSpaceMemberIdentityIndex as Gn, renderTextInfoCard as Go, canonicalizeAllowedActions as Gr, runDaemonStartDecisionPrompt as Gt, runAgents as H, getSelectedOpenMeldProfileId as Ha, resolveDaemonServiceAlignmentDecision as Hi, buildSignalMessageReadProjection as Hn, enqueueControllerTaskLifecycleEventWhileLocked as Ho, SPACE_CONTRACT_ALLOWED_ACTION_ORDER as Hr, writeInstalledLocalComponentsSnapshot as Ht, emitSpaceCliAgentOverview as I, listOpenMeldProfiles as Ia, resolveNativeAgentControllerPermissionModeForController as Ii, inspectSpaceCacheFile as In, migrateProjectBindingStore as Io, buildAgentOverviewFromContract as Ir, updateSpaceMeta as It, runAgentsDetect as J, resolveAuthenticationGuidanceFromError as Ja, resolveAuthBaseUrl as Ji, promptSearchSelect as Jn, errLine as Jo, scheduleDaemonServiceUpdate as Jr, runSkillsEnsure as Jt, runAgentsCustomRemove as K, createAuthenticationError as Ka, assessServerRequiredVersion as Ki, formatRemovedCcRelationMessage as Kn, sanitizeTerminalDisplayText as Ko, readOpenMeldToolsUpdateContextFromEnv as Kr, collectSkillsReadinessSnapshot as Kt, prepareLocalAgentReadiness as L, primeOpenMeldProfilesSessionCache as La, PREPARE_SESSION_RECONNECT_GRACE_MS as Li, upsertSpaceConfig as Ln, removeProjectConnection as Lo, DualViewGuideError as Lr, readGatewayJsonResponse as Lt, prepareAuthenticatedSpaceCommandContext as M, resolveOpenMeldProfileOrNull as Ma, resolveAgentControllerPermissionModeForController as Mi, collectLocalAgentControllerInventory as Mn, removeProjectOutbox as Mo, getCliVersionInfo as Mr, readDaemonStartFailureLogTailLines as Mt, resolveOpenMeldProfileForSpaceCommand as N, createOpenMeldAgentProfile as Na, resolveAgentExecutionStatus as Ni, resolveLocalAgentControllerBlockerReasonCodes as Nn, bindProject as No, registerDaemonControlTargetOptions as Nr, fetchSpaceUpdates as Nt, parseEnvelope as O, resolveRuntimeContext as Oa, getAgentControllerPermissionModeDisplayMetadata as Oi, computeRetryDelayMs as On, readCodexSessionTitles as Oo, getCommandHintsFromContract as Or, emitDaemonAgentOverview as Ot, resolveSpaceAccessLabel as P, createOpenMeldHumanProfile as Pa, resolveAgentProfileEditCapabilities as Pi, resolveLocalAgentControllerLaunchability as Pn, listProjectBindings as Po, registerAuthLoginRequestOptions as Pr, createCliSpaceApi as Pt, runAgentsManage as Q, LocalProjectConnectionError as Qa, resetCurrentCommandCheckState as Qi, isCliUpdateCheckApplicable as Qn, cliJsonOutputEnvelopeSchema as Qo, resolveServiceReadinessFromServiceStatus as Qr, ensureLocalSkills as Qt, buildReplyReadinessGuidance as R, resolveOpenMeldProfile as Ra, buildDaemonRouteObservationPresentation as Ri, assertNoRemovedCcSpaceAddressingSyntax as Rn, runIfAgentActivityBindingGenerationIsCurrent as Ro, formatDualViewGuideForDisplay as Rr, readGatewayTextResponse as Rt, loadSpaceSignalIndexOrNull as S, buildHumanErrorCopy as Sa, reconcileNewRunnableBuiltinAgentsForSetup as Si, resolveCreateProfileName as Sn, upsertDaemonServiceContract as So, createSpaceTargetGuideError as Sr, runDaemonStop as St, buildFormalSignalReadPayload as T, createPresenter as Ta, resolveLocalRegistryAgentIdFromAgentControllerRef as Ti, formatServiceParticipationReadinessLabel as Tn, buildAgentActivityEvent as To, createStartAuthenticationGuideError as Tr, buildProfileWorkspacePresentation as Tt, runAgentsConfig as U, setSelectedOpenMeldProfileId as Ua, classifyDaemonServiceRunStartability as Ui, buildSpaceRoundReadProjection as Un, readControllerTaskLifecycleOutboxHealth as Uo, areAllowedActionsEquivalent as Ur, resolveDaemonServiceParticipationStatus as Ut, resolveAgentProfileSetup as V, clearSelectedOpenMeldProfileId as Va, buildDaemonServiceTargetSpec as Vi, buildSignalIndex as Vn, canonicalizeLocalProjectPath as Vo, OPENMELD_AGENT_MENTAL_MODEL_LINES as Vr, resolveLocalComponentsStatus as Vt, runAgentsCustomAdd as W, buildAgentAuthenticationGuide as Wa, classifyDaemonServiceWakeability as Wi, buildUpdatesReplyWorkflowProjection as Wn, renderInfoCard as Wo, buildAgentFacingPublicationModeGuideLines as Wr, runDaemonServiceParticipationGate as Wt, runAgentsEnable as X, getProfileDefaultView as Xa, getCurrentCommandCheckState as Xi, runInteractivePrompt as Xn, outLine as Xo, resolveDaemonDeviceId as Xr, runSkillsUninstall as Xt, runAgentsDisable as Y, resolveAuthenticationGuidanceFromMessage as Ya, finishCurrentCommandCheckScope as Yi, isReturnKeypress as Yn, outJsonLine as Yo, ensureDaemonRuntimePaths as Yr, runSkillsInstall as Yt, runAgentsList as Z, setProfileDefaultView as Za, isCurrentCommandCheckScopeActive as Zi, assessCliUpdate as Zn, cliBinaryDeltaPatchSchema as Zo, formatDaemonFailureContextText as Zr, runSkillsUpdate as Zt, runSpaceWriteWithPasswordRetry as _, writeVersionState as _a, describeProfileWorkspacePathValidationFailure as _i, resolveDeviceAuthClientId as _n, formatProfileAwareOpenMeldCliCommands as _o, createSpaceMenuGuideError as _r, runDaemonInterrupt as _t, runSpaceDelete as a, isDaemonServiceJobNeverSpawned as aa, resolveGatewayChainReadiness as ai, evaluateCommandAuthentication as an, unregisterAgentActivityRoute as ao, formatDaemonServiceDowngradeBlockedRecommendation as ar, compareAgentControllerRefsForDisplay as as, renderOpenMeldBrandBlockLines as at, buildIdentityOnlyMembersSnapshotForReadProjection as b, resolveCurrentDaemonExpectedVersion as ba, resolveAgentProfilePrimaryAgentControllerReport as bi, createProfileByKind as bn, syncLocalAgentActivity as bo, createSpaceResultGuideError as br, runDaemonSnapshot as bt, runSpaceLeave as c, readRecentDaemonLifecycleEvents as ca, createModelCatalogReadSession as ci, runAuthMenu as cn, installAgentActivityIntegrations as co, createDoctorFailedGuideError as cr, renderOpenMeldTagline as ct, runSpaceRemoveMembers as d, buildNextVersionState as da, normalizeCustomProfileWorkspacePath as di, buildAuthStatusRows as dn, uninstallAgentActivityIntegrations as do, createProfileMenuGuideError as dr, bestEffortStopCurrentLaneDaemonService as dt, inspectDaemonServiceInventory as ea, resolveCurrentReplyReadinessSnapshot as ei, readRuntimeReportingHealthState as en, LocalDaemonControlPlaneClientError as eo, readDispatchOwnedRuntimeGuard as er, cliJsonSkillsLoadEnvelopeSchema as es, runAgentsShow as et, runSpaceSend as f, compareSemver as fa, readProfileWorkspaceConfig as fi, buildAuthStatusSnapshot as fn, formatInlineOpenMeldCliCommands as fo, createResetConfirmationGuideError as fr, runDaemon as ft, runSpaceReadWithPasswordRetry as g, readVersionState as ga, validateCustomProfileWorkspacePath as gi, requestDeviceToken as gn, formatOpenMeldCliTextBlock as go, createSpaceLeaveGuideError as gr, runDaemonInstall as gt, uploadPreparedSpaceFiles as h, fetchLatestPackageInfo as ha, setOpenMeldManagedProfileWorkspace as hi, fetchAuthUserSnapshot as hn, formatOpenMeldCliLine as ho, createSpaceContractSetGuideError as hr, runDaemonCancel as ht, runSpaceCreate as i, getDaemonSystemServiceLogPath as ia, mapAgentReplyReadinessToLegacyAutoReply as ii, ensureCommandAuthenticationOrCancel as in, resolveAgentActivityRouteForPath as io, resolveElapsedTimeMs as ir, revokeOrganizationJoinLinkResponseSchema as is, printOpenMeldBanner as it, assertValidSpaceIdTarget as j, requireOpenMeldProfile as ja, parseAgentControllerRef as ji, submitRuntimeAgentControllerReports as jn, readAgentActivityOutboxHealth as jo, registerSkillsTargetSelectionOptions as jr, runDaemonStartupPreflight as jt, isSpaceCommandOutputHandledError as k, resolveViewProfileKey as ka, getAgentControllerPermissionModeFieldLabel as ki, submitProfileRuntimeAgentControllerReport as kn, enqueueAgentActivityHookEvent as ko, registerSpaceMemberSelectionOptions as kr, createDelayedSpinner as kt, runSpaceList as l, buildInstallSelfJsonPayload as la, resolveProfileWorkspaceRuntime as li, runAuthStatus as ln, readAgentActivityIntegrationStatus as lo, createProfileActionGuideError as lr, resolveGatewayWebOrigin as lt, prepareRequestedSpaceSendFiles as m, fetchLatestCliBinaryRelease as ma, setCustomProfileWorkspace as mi, extractAuthApiErrorMessage as mn, formatOpenMeldCliCommands as mo, createSpaceAliasTargetGuideError as mr, runDaemonBackgroundStartForDecision as mt, promptAndConfirmSpacePassword as n, readCurrentDaemonRuntimeContext as na, formatDeviceReplyReadinessLabel as ni, connectWebSocket as nn, isAgentActivityRouteRegistered as no, writeDispatchSpaceActionRecord as nr, getOrganizationJoinLinkResponseSchema as ns, colorizeAgentLabel as nt, runSpaceHistory as o, readDaemonServiceJobCrashExitCode as oa, resolveOpenClawLocalDiagnosticsValue as oi, runAuthLogin as on, AGENT_ACTIVITY_INTEGRATION_OWNER as oo, formatDaemonServiceMissingRecommendation as or, renderOpenMeldHeader as ot, runSpaceWatch as p, ensureVersionStateReady as pa, resolveConfiguredProfileWorkspacePath as pi, formatActiveOrganizationLabel as pn, formatOpenMeldCliCommand as po, createSpaceAddMembersGuideError as pr, runDaemonAutostart as pt, runAgentsCustomUpdate as q, resolveAuthenticationGuidance as qa, resolveOpenMeldEnvironmentTarget as qi, promptSearchMultiselect as qn, emitCliJsonEnvelope as qo, runPendingDaemonServiceUpdate as qr, runSkillsCheck as qt, runSpaceAddMembers as r, readCurrentObservedDaemonRuntimeStatus as ra, formatHumanReplyReadinessReason as ri, buildCommandAuthenticationPromptMessage as rn, registerAgentActivityRoute as ro, formatElapsedTime as rr, organizationJoinLinkErrorResponseSchema as rs, colorizeDisplayProfileLabel as rt, runSpaceJoin as s, resolveDaemonServiceManager as sa, syncProfileWorkspaceState as si, runAuthLogout as sn, defaultManagedIntegrationPaths as so, canUseInteractivePrompts as sr, renderOpenMeldLogo as st, buildCreateSpacePasswordPromptConfig as t, resolveVersionChangeDirection as ta, formatAgentReplyReadinessLabel as ti, readRecentDaemonDispatchJournalEvents as tn, requestLocalAgentActivitySync as to, readDispatchSpaceActionContextFromEnv as tr, cliJsonSkillsShowEnvelopeSchema as ts, formatTransportModeDisplay as tt, runSpacePassword as u, performManagedInstall as ua, ensureOpenMeldManagedProfileWorkspace as ui, exchangeOneTimeTokenAuthSession as un, resolveAgentActivityDispatcherCommand as uo, createProfileCreateGuideError as ur, resolveSpaceSendText as ut, buildHumanReadSignalsTranscriptItems as v, resolveDaemonRuntimeContractCompatibility as va, syncDeviceRuntimeStateProjection as vi, resolveDeviceTokenExpiresAt as vn, resolveSetupFollowUpCliEntryCommand as vo, createSpacePublicationSetGuideError as vr, runDaemonReinstall as vt, buildFormalDispatchResultReadPayload as w, renderHumanTextErrorCard as wa, notifyDaemonRouteCatalogChanged as wi, ensureAgentProfileRuntimeBinding as wn, removeAgentActivityContextCache as wo, createStartAgentIdentityGuideError as wr, runDaemonUninstall as wt, loadSpaceIdentityDirectoryOrNull as x, OPENMELD_VERSION as xa, listAgentTargetStates as xi, resolveCreateProfileKind as xn, readDaemonServiceContract as xo, createSpaceSubcommandTargetGuideError as xr, runDaemonStatusFlow as xt, emitHumanReadSignalsTextProjection as y, toStartBackgroundHelperExecutionCompatibility as ya, createPrimaryBindingReadSession as yi, revokeAuthAccessToken as yn, resolveUserFacingCliEntryCommand as yo, createSpaceRemoveMembersGuideError as yr, runDaemonRunAfterEntryChecks as yt, resolveHumanControllerDisplayName as z, updateOpenMeldProfile as za, buildOnboardingPlan as zi, buildDispatchResultMessageReadProjection as zn, setDefaultProjectConnection as zo, buildDualViewGuideMessage as zr, toStructuredGatewayFailure as zt };
+export { runAgentsManage as $, LocalProjectConnectionError as $a, resetCurrentCommandCheckState as $i, isCliUpdateCheckApplicable as $n, cliJsonOutputEnvelopeSchema as $o, resolveServiceReadinessFromServiceStatus as $r, ensureLocalSkills as $t, parseEnvelope as A, resolveViewProfileKey as Aa, getAgentControllerPermissionModeFieldLabel as Ai, submitProfileRuntimeAgentControllerReport as An, enqueueAgentActivityHookEvent as Ao, registerSpaceMemberSelectionOptions as Ar, createDelayedSpinner as At, resolveHumanControllerDisplayName as B, updateOpenMeldProfile as Ba, buildOnboardingPlan as Bi, buildDispatchResultMessageReadProjection as Bn, setDefaultProjectConnection as Bo, buildDualViewGuideMessage as Br, toStructuredGatewayFailure as Bt, toSpaceMetaUpsertInput as C, buildHumanErrorCopy as Ca, reconcileNewRunnableBuiltinAgentsForSetup as Ci, resolveCreateProfileName as Cn, upsertDaemonServiceContract as Co, createSpaceTargetGuideError as Cr, runDaemonStop as Ct, formatHumanReadTargetList as D, formatMessage as Da, buildAgentControllerRef as Di, resolveServiceParticipationReadiness as Dn, resolveObservedAgentActivityBinding as Do, createUpgradeConfirmationGuideError as Dr, buildProfileWorkspaceRows as Dt, buildHumanReplyContextSummary as E, createPresenter as Ea, resolveLocalRegistryAgentIdFromAgentControllerRef as Ei, formatServiceParticipationReadinessLabel as En, buildAgentActivityEvent as Eo, createStartAuthenticationGuideError as Er, buildProfileWorkspacePresentation as Et, resolveOpenMeldProfileForSpaceCommand as F, createOpenMeldHumanProfile as Fa, resolveAgentProfileEditCapabilities as Fi, resolveLocalAgentControllerLaunchability as Fn, listProjectBindings as Fo, registerAuthLoginRequestOptions as Fr, createCliSpaceApi as Ft, runAgentsCustomAdd as G, buildAgentAuthenticationGuide as Ga, classifyDaemonServiceWakeability as Gi, buildUpdatesReplyWorkflowProjection as Gn, renderInfoCard as Go, buildAgentFacingPublicationModeGuideLines as Gr, runDaemonServiceParticipationGate as Gt, resolveAgentProfileSetup as H, clearSelectedOpenMeldProfileId as Ha, buildDaemonServiceTargetSpec as Hi, buildSignalIndex as Hn, canonicalizeLocalProjectPath as Ho, OPENMELD_AGENT_MENTAL_MODEL_LINES as Hr, resolveLocalComponentsStatus as Ht, emitSpaceAgentOverview as I, deleteOpenMeldProfile as Ia, resolveEvidenceSyncHealth as Ii, resolveLocalAgentControllerReportDecision as In, listProjectConnectionsWithStatus as Io, registerBuiltinAgentSelectionOptions as Ir, fetchSpaceMeta as It, runAgentsCustomUpdate as J, resolveAuthenticationGuidance as Ja, resolveOpenMeldEnvironmentTarget as Ji, promptSearchMultiselect as Jn, emitCliJsonEnvelope as Jo, runPendingDaemonServiceUpdate as Jr, runSkillsCheck as Jt, runAgentsCustomList as K, buildHumanAuthenticationCard as Ka, resolveServiceUpdateUrgency as Ki, createSpaceMemberIdentityIndex as Kn, renderTextInfoCard as Ko, canonicalizeAllowedActions as Kr, runDaemonStartDecisionPrompt as Kt, emitSpaceCliAgentOverview as L, listOpenMeldProfiles as La, resolveNativeAgentControllerPermissionModeForController as Li, inspectSpaceCacheFile as Ln, migrateProjectBindingStore as Lo, buildAgentOverviewFromContract as Lr, updateSpaceMeta as Lt, assertFullSignalIdArgument as M, requireOpenMeldProfile as Ma, parseAgentControllerRef as Mi, submitRuntimeAgentControllerReports as Mn, readAgentActivityOutboxHealth as Mo, registerSkillsTargetSelectionOptions as Mr, runDaemonStartupPreflight as Mt, assertValidSpaceIdTarget as N, resolveOpenMeldProfileOrNull as Na, resolveAgentControllerPermissionModeForController as Ni, collectLocalAgentControllerInventory as Nn, removeProjectOutbox as No, getCliVersionInfo as Nr, readDaemonStartFailureLogTailLines as Nt, resolveLinkAccessLabel as O, parseCliViewMode as Oa, createAgentExecutionStatusDisplayRows as Oi, assessActionParticipationCandidate as On, normalizeSharedSessionTitle as Oo, getCommandEntryContract as Or, reconcileCliVersionView as Ot, prepareAuthenticatedSpaceCommandContext as P, createOpenMeldAgentProfile as Pa, resolveAgentExecutionStatus as Pi, resolveLocalAgentControllerBlockerReasonCodes as Pn, bindProject as Po, registerDaemonControlTargetOptions as Pr, fetchSpaceUpdates as Pt, runAgentsList as Q, setProfileDefaultView as Qa, isCurrentCommandCheckScopeActive as Qi, assessCliUpdate as Qn, cliBinaryDeltaPatchSchema as Qo, formatDaemonFailureContextText as Qr, runSkillsUpdate as Qt, prepareLocalAgentReadiness as R, primeOpenMeldProfilesSessionCache as Ra, PREPARE_SESSION_RECONNECT_GRACE_MS as Ri, upsertSpaceConfig as Rn, removeProjectConnection as Ro, DualViewGuideError as Rr, readGatewayJsonResponse as Rt, loadSpaceSignalIndexOrNull as S, OPENMELD_VERSION as Sa, listAgentTargetStates as Si, resolveCreateProfileKind as Sn, readDaemonServiceContract as So, createSpaceSubcommandTargetGuideError as Sr, runDaemonStatusFlow as St, buildFormalSignalReadPayload as T, renderHumanTextErrorCard as Ta, notifyDaemonRouteCatalogChanged as Ti, ensureAgentProfileRuntimeBinding as Tn, removeAgentActivityContextCache as To, createStartAgentIdentityGuideError as Tr, runDaemonUninstall as Tt, runAgents as U, getSelectedOpenMeldProfileId as Ua, resolveDaemonServiceAlignmentDecision as Ui, buildSignalMessageReadProjection as Un, enqueueControllerTaskLifecycleEventWhileLocked as Uo, SPACE_CONTRACT_ALLOWED_ACTION_ORDER as Ur, writeInstalledLocalComponentsSnapshot as Ut, persistAgentTransportSelection as V, alignSelectedOpenMeldProfileStorage as Va, getSetupFlowCopy as Vi, buildDispatchResultReplyWorkflowProjection as Vn, unbindProject as Vo, formatAgentOverviewPayload as Vr, parseJsonResponse$1 as Vt, runAgentsConfig as W, setSelectedOpenMeldProfileId as Wa, classifyDaemonServiceRunStartability as Wi, buildSpaceRoundReadProjection as Wn, readControllerTaskLifecycleOutboxHealth as Wo, areAllowedActionsEquivalent as Wr, resolveDaemonServiceParticipationStatus as Wt, runAgentsDisable as X, resolveAuthenticationGuidanceFromMessage as Xa, finishCurrentCommandCheckScope as Xi, isReturnKeypress as Xn, outJsonLine as Xo, ensureDaemonRuntimePaths as Xr, runSkillsInstall as Xt, runAgentsDetect as Y, resolveAuthenticationGuidanceFromError as Ya, resolveAuthBaseUrl as Yi, promptSearchSelect as Yn, errLine as Yo, scheduleDaemonServiceUpdate as Yr, runSkillsEnsure as Yt, runAgentsEnable as Z, getProfileDefaultView as Za, getCurrentCommandCheckState as Zi, runInteractivePrompt as Zn, outLine as Zo, resolveDaemonDeviceId as Zr, runSkillsUninstall as Zt, runSpaceWriteWithPasswordRetry as _, readVersionState as _a, validateCustomProfileWorkspacePath as _i, requestDeviceToken as _n, formatOpenMeldCliTextBlock as _o, createSpaceLeaveGuideError as _r, runDaemonInstall as _t, runSpaceDelete as a, getDaemonSystemServiceLogPath as aa, mapAgentReplyReadinessToLegacyAutoReply as ai, ensureCommandAuthenticationOrCancel as an, resolveAgentActivityRouteForPath as ao, resolveElapsedTimeMs as ar, revokeOrganizationJoinLinkResponseSchema as as, printOpenMeldBanner as at, buildIdentityOnlyMembersSnapshotForReadProjection as b, toStartBackgroundHelperExecutionCompatibility as ba, createPrimaryBindingReadSession as bi, revokeAuthAccessToken as bn, resolveUserFacingCliEntryCommand as bo, createSpaceRemoveMembersGuideError as br, runDaemonRunAfterEntryChecks as bt, runSpaceLeave as c, resolveDaemonServiceManager as ca, syncProfileWorkspaceState as ci, runAuthLogout as cn, defaultManagedIntegrationPaths as co, canUseInteractivePrompts as cr, renderOpenMeldLogo as ct, runSpaceRemoveMembers as d, performManagedInstall as da, ensureOpenMeldManagedProfileWorkspace as di, exchangeOneTimeTokenAuthSession as dn, resolveAgentActivityDispatcherCommand as do, createProfileCreateGuideError as dr, resolveSpaceSendText as dt, startCurrentCommandCheckScope as ea, resolveDaemonServiceFreshnessWarning as ei, readBundledOpenMeldCliSkillDocumentByPath as en, validateLocalProjectConnectionPath as eo, assertDispatchOwnedRuntimePublicWriteAllowed as er, cliJsonSkillsListEnvelopeSchema as es, runAgentsRepair as et, runSpaceSend as f, buildNextVersionState as fa, normalizeCustomProfileWorkspacePath as fi, buildAuthStatusRows as fn, uninstallAgentActivityIntegrations as fo, createProfileMenuGuideError as fr, bestEffortStopCurrentLaneDaemonService as ft, runSpaceReadWithPasswordRetry as g, fetchLatestPackageInfo as ga, setOpenMeldManagedProfileWorkspace as gi, fetchAuthUserSnapshot as gn, formatOpenMeldCliLine as go, createSpaceContractSetGuideError as gr, runDaemonCancel as gt, uploadPreparedSpaceFiles as h, fetchLatestCliBinaryRelease as ha, setCustomProfileWorkspace as hi, extractAuthApiErrorMessage as hn, formatOpenMeldCliCommands as ho, createSpaceAliasTargetGuideError as hr, runDaemonBackgroundStartForDecision as ht, runSpaceCreate as i, readCurrentObservedDaemonRuntimeStatus as ia, formatHumanReplyReadinessReason as ii, buildCommandAuthenticationPromptMessage as in, registerAgentActivityRoute as io, formatElapsedTime as ir, organizationJoinLinkErrorResponseSchema as is, colorizeDisplayProfileLabel as it, isSpaceCommandOutputHandledError as j, isSelectedOpenMeldProfileRequiredError as ja, listAgentControllerPermissionModeOptions as ji, submitRuntimeAgentControllerReport as jn, removeProjectInbox as jo, SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS as jr, shouldEmitAgentOverview as jt, resolveOrganizationVisibilityLabel as k, resolveRuntimeContext as ka, getAgentControllerPermissionModeDisplayMetadata as ki, computeRetryDelayMs as kn, readCodexSessionTitles as ko, getCommandHintsFromContract as kr, emitDaemonAgentOverview as kt, runSpaceList as l, readRecentDaemonLifecycleEvents as la, createModelCatalogReadSession as li, runAuthMenu as ln, installAgentActivityIntegrations as lo, createDoctorFailedGuideError as lr, renderOpenMeldTagline as lt, prepareRequestedSpaceSendFiles as m, ensureVersionStateReady as ma, resolveConfiguredProfileWorkspacePath as mi, formatActiveOrganizationLabel as mn, formatOpenMeldCliCommand as mo, createSpaceAddMembersGuideError as mr, runDaemonAutostart as mt, promptAndConfirmSpacePassword as n, resolveVersionChangeDirection as na, formatAgentReplyReadinessLabel as ni, readRecentDaemonDispatchJournalEvents as nn, requestLocalAgentActivitySync as no, readDispatchSpaceActionContextFromEnv as nr, cliJsonSkillsShowEnvelopeSchema as ns, formatTransportModeDisplay as nt, runSpaceHistory as o, isDaemonServiceJobNeverSpawned as oa, resolveGatewayChainReadiness as oi, evaluateCommandAuthentication as on, unregisterAgentActivityRoute as oo, formatDaemonServiceDowngradeBlockedRecommendation as or, compareAgentControllerRefsForDisplay as os, renderOpenMeldBrandBlockLines as ot, runSpaceWatch as p, compareSemver as pa, readProfileWorkspaceConfig as pi, buildAuthStatusSnapshot as pn, formatInlineOpenMeldCliCommands as po, createResetConfirmationGuideError as pr, runDaemon as pt, runAgentsCustomRemove as q, createAuthenticationError as qa, assessServerRequiredVersion as qi, formatRemovedCcRelationMessage as qn, sanitizeTerminalDisplayText as qo, readOpenMeldToolsUpdateContextFromEnv as qr, collectSkillsReadinessSnapshot as qt, runSpaceAddMembers as r, readCurrentDaemonRuntimeContext as ra, formatDeviceReplyReadinessLabel as ri, connectWebSocket as rn, isAgentActivityRouteRegistered as ro, writeDispatchSpaceActionRecord as rr, getOrganizationJoinLinkResponseSchema as rs, colorizeAgentLabel as rt, runSpaceJoin as s, readDaemonServiceJobCrashExitCode as sa, resolveOpenClawLocalDiagnosticsValue as si, runAuthLogin as sn, AGENT_ACTIVITY_INTEGRATION_OWNER as so, formatDaemonServiceMissingRecommendation as sr, renderOpenMeldHeader as st, buildCreateSpacePasswordPromptConfig as t, inspectDaemonServiceInventory as ta, resolveCurrentReplyReadinessSnapshot as ti, readRuntimeReportingHealthState as tn, LocalDaemonControlPlaneClientError as to, readDispatchOwnedRuntimeGuard as tr, cliJsonSkillsLoadEnvelopeSchema as ts, runAgentsShow as tt, runSpacePassword as u, buildInstallSelfJsonPayload as ua, resolveProfileWorkspaceRuntime as ui, runAuthStatus as un, readAgentActivityIntegrationStatus as uo, createProfileActionGuideError as ur, resolveGatewayWebOrigin as ut, buildHumanReadSignalsTranscriptItems as v, writeVersionState as va, describeProfileWorkspacePathValidationFailure as vi, resolveDeviceAuthClientId as vn, formatProfileAwareOpenMeldCliCommands as vo, createSpaceMenuGuideError as vr, runDaemonInterrupt as vt, buildFormalDispatchResultReadPayload as w, renderHumanErrorCard as wa, listBuiltinAgentsRegistryEntries as wi, promptTextEntry as wn, readAgentActivityContextForPath as wo, createSpaceUpdatesGuideError as wr, runDaemonTeardownStrict as wt, loadSpaceIdentityDirectoryOrNull as x, resolveCurrentDaemonExpectedVersion as xa, resolveAgentProfilePrimaryAgentControllerReport as xi, createProfileByKind as xn, syncLocalAgentActivity as xo, createSpaceResultGuideError as xr, runDaemonSnapshot as xt, emitHumanReadSignalsTextProjection as y, resolveDaemonRuntimeContractCompatibility as ya, syncDeviceRuntimeStateProjection as yi, resolveDeviceTokenExpiresAt as yn, resolveSetupFollowUpCliEntryCommand as yo, createSpacePublicationSetGuideError as yr, runDaemonReinstall as yt, buildReplyReadinessGuidance as z, resolveOpenMeldProfile as za, buildDaemonRouteObservationPresentation as zi, assertNoRemovedCcSpaceAddressingSyntax as zn, runIfAgentActivityBindingGenerationIsCurrent as zo, formatDualViewGuideForDisplay as zr, readGatewayTextResponse as zt };
 
-//# sourceMappingURL=command-CBkGZaPc.js.map
+//# sourceMappingURL=command-DaGkOPI0.js.map