openmeld 0.3.155 → 0.3.157

package/dist/openmeld.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
 import { $ as resolveOpenMeldOrphanedLockIssue, $t as systemDir, A as toSpaceContractUrl, Bt as organizationSkillReleaseDir, Ct as accountProfileViewPath, D as normalizeBaseUrl, E as updateConfiguredStartV1OnboardingState, F as toSpaceDispatchTraceUrl, Ft as openMeldManagedBinaryPath, G as acquireLock, Gt as resolveOpenMeldCliEntryNameFromArgv, Ht as profileViewPath, It as openMeldManagedVersionBinaryPath, J as isOpenMeldOrphanedLockError, Jt as resolveOpenMeldRootDir, K as buildOpenMeldOrphanedLockAction, Kt as resolveOpenMeldEnvPreset, Nt as openMeldBackupsDir, P as toSpaceDispatchLookupUrl, Q as repairOrphanedLegacyLocks, Qt as spacesDir, Rt as openMeldRootDir, S as setConfiguredSkillsConfig, St as accountProfileSpaceCacheDir, Tt as accountsDir, V as toSpaceResultUrl, Vt as profileDir, Z as releaseLockSync, Zt as skillsDir, _t as toRecognizedLocalMachineFailureError, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, dt as LocalMachineFailureError, en as formatLocalMachineIssueMessage, et as runWithHeldLock, g as getConfiguredSkillsConfig, gt as isLocalMachineFailureError, ht as createOrphanedSetupConcurrencyIssue, jt as normalizeAccountKey, k as toSpaceBoardUrl, lt as formatLaneScopeSentence, m as getConfiguredOnboardingDisclaimerAcceptedAt, nt as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, o as resolveBaseUrlOrNull, ot as resolveCliContext, pt as createActiveSetupConcurrencyIssue, q as isOpenMeldLockError, rt as OPENMELD_CLI_CONTEXT_ENV_KEY, sn as agentControllerConversationRefSchema, u as alignRuntimeConfigStorage, ut as resolveOpenMeldLaneDescriptor, w as updateConfiguredOnboardingConfig } from "./base-url-CY_j4bLH.js";
-import { $ as runAgentsManage, $a as resolveAuthenticationGuidanceFromMessage, $i as getCurrentCommandCheckState, $n as assessCliUpdate, $o as outJsonLine, $r as resolveDaemonDeviceId, $t as runSkillsUpdate, A as parseEnvelope, Aa as formatMessage, Ai as createAgentExecutionStatusDisplayRows, An as computeRetryDelayMs, Ao as resolveObservedAgentActivityBinding, Ar as getCommandHintsFromContract, At as emitDaemonAgentOverview, B as resolveHumanControllerDisplayName, Ba as listOpenMeldProfiles, Bn as assertNoRemovedCcSpaceAddressingSyntax, Bo as migrateProjectBindingStore, Br as formatDualViewGuideForDisplay, Bt as readGatewayTextResponse, C as toSpaceMetaUpsertInput, Ca as toStartBackgroundHelperExecutionCompatibility, Ci as resolveAgentProfilePrimaryAgentControllerReport, Cn as resolveCreateProfileKind, Co as resolveUserFacingCliEntryCommand, Cr as createSpaceSubcommandTargetGuideError, Ct as runDaemonStatusFlow, D as formatHumanReadTargetList, Da as renderHumanErrorCard, Di as notifyDaemonRouteCatalogChanged, Dn as formatServiceParticipationReadinessLabel, Do as readAgentActivityContextForPath, Dr as createStartAuthenticationGuideError, Dt as buildProfileWorkspacePresentation, E as buildHumanReplyContextSummary, Ea as buildHumanErrorCopy, Ei as listBuiltinAgentsRegistryEntries, En as ensureAgentProfileRuntimeBinding, Eo as upsertDaemonServiceContract, Er as createStartAgentIdentityGuideError, Et as runDaemonUninstall, F as resolveOpenMeldProfileForSpaceCommand, Fa as requireOpenMeldProfile, Fi as resolveAgentControllerPermissionModeForController, Fn as resolveLocalAgentControllerBlockerReasonCodes, Fo as readAgentActivityOutboxHealth, Fr as registerDaemonControlTargetOptions, Ft as fetchSpaceUpdates, G as runAgentsCustomAdd, Ga as clearSelectedOpenMeldProfileId, Gi as resolveDaemonServiceAlignmentDecision, Gn as buildSpaceRoundReadProjection, Go as canonicalizeLocalProjectPath, Gr as areAllowedActionsEquivalent, Gt as resolveDaemonServiceParticipationStatus, H as resolveAgentProfileSetup, Ha as resolveOpenMeldProfile, Hi as buildOnboardingPlan, Hn as buildDispatchResultReplyWorkflowProjection, Ho as runIfAgentActivityBindingGenerationIsCurrent, Hr as formatAgentOverviewPayload, Ht as parseJsonResponse, I as emitSpaceAgentOverview, Ia as resolveOpenMeldProfileOrNull, Ii as resolveAgentExecutionStatus, In as resolveLocalAgentControllerLaunchability, Io as removeProjectOutbox, Ir as registerAuthLoginRequestOptions, It as createCliSpaceApi, J as runAgentsCustomUpdate, Ja as buildAgentAuthenticationGuide, Ji as resolveServiceUpdateUrgency, Jn as formatRemovedCcRelationMessage, Jo as renderInfoCard, Jr as readPendingOpenMeldToolsUpdateAttempt, Jt as collectSkillsReadinessSnapshot, K as runAgentsCustomList, Ka as getSelectedOpenMeldProfileId, Ki as classifyDaemonServiceRunStartability, Kn as buildUpdatesReplyWorkflowProjection, Ko as enqueueControllerTaskLifecycleEventWhileLocked, Kr as buildAgentFacingPublicationModeGuideLines, Kt as runDaemonServiceParticipationGate, L as emitSpaceCliAgentOverview, La as createOpenMeldAgentProfile, Li as resolveAgentProfileEditCapabilities, Ln as resolveLocalAgentControllerReportDecision, Lo as bindProject, Lr as registerBuiltinAgentSelectionOptions, Lt as fetchSpaceMeta, M as assertFullSignalIdArgument, Ma as resolveRuntimeContext, Mi as getAgentControllerPermissionModeFieldLabel, Mn as submitRuntimeAgentControllerReport, Mo as readCodexSessionTitles, Mr as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, Mt as shouldEmitAgentOverview, N as assertValidSpaceIdTarget, Na as resolveViewProfileKey, Ni as listAgentControllerPermissionModeOptions, Nn as submitRuntimeAgentControllerReports, No as enqueueAgentActivityHookEvent, Nr as registerSkillsTargetSelectionOptions, Nt as runDaemonStartupPreflight, O as resolveLinkAccessLabel, Oa as renderHumanTextErrorCard, Oi as resolveLocalRegistryAgentIdFromAgentControllerRef, On as resolveServiceParticipationReadiness, Oo as removeAgentActivityContextCache, Or as createUpgradeConfirmationGuideError, Ot as buildProfileWorkspaceRows, P as prepareAuthenticatedSpaceCommandContext, Pa as isSelectedOpenMeldProfileRequiredError, Pi as parseAgentControllerRef, Pn as collectLocalAgentControllerInventory, Po as removeProjectInbox, Pr as getCliVersionInfo, Pt as readDaemonStartFailureLogTailLines, Q as runAgentsList, Qa as resolveAuthenticationGuidanceFromError, Qi as finishCurrentCommandCheckScope, Qn as runInteractivePrompt, Qo as errLine, Qr as ensureDaemonRuntimePaths, Qt as runSkillsUninstall, R as prepareLocalAgentReadiness, Ra as createOpenMeldHumanProfile, Ri as resolveEvidenceSyncHealth, Rn as inspectSpaceCacheFile, Ro as listProjectBindings, Rr as buildAgentOverviewFromContract, Rt as updateSpaceMeta, S as loadSpaceSignalIndexOrNull, Sa as resolveDaemonRuntimeContractCompatibility, Si as createPrimaryBindingReadSession, Sn as createProfileByKind, So as resolveSetupFollowUpCliEntryCommand, Sr as createSpaceResultGuideError, St as runDaemonSnapshot, T as buildFormalSignalReadPayload, Ta as OPENMELD_VERSION, Ti as reconcileNewRunnableBuiltinAgentsForSetup, Tn as promptTextEntry, To as readDaemonServiceContract, Tr as createSpaceUpdatesGuideError, Tt as runDaemonTeardownStrict, U as runAgents, Ua as updateOpenMeldProfile, Ui as getSetupFlowCopy, Un as buildSignalIndex, Uo as setDefaultProjectConnection, Ur as OPENMELD_AGENT_MENTAL_MODEL_LINES, Ut as resolveLocalComponentsStatus, V as persistAgentTransportSelection, Va as primeOpenMeldProfilesSessionCache, Vi as buildDaemonRouteObservationPresentation$1, Vn as buildDispatchResultMessageReadProjection, Vo as removeProjectConnection, Vr as buildDualViewGuideMessage, Vt as toStructuredGatewayFailure, W as runAgentsConfig, Wa as alignSelectedOpenMeldProfileStorage, Wi as buildDaemonServiceTargetSpec, Wn as buildSignalMessageReadProjection, Wo as unbindProject, Wr as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, Wt as writeInstalledLocalComponentsSnapshot, X as runAgentsDisable, Xa as createAuthenticationError, Xi as resolveOpenMeldEnvironmentTarget, Xn as promptSearchSelect, Xo as sanitizeTerminalDisplayText, Xr as runPendingDaemonServiceUpdate, Xt as runSkillsEnsure, Y as runAgentsDetect, Ya as buildHumanAuthenticationCard, Yi as assessServerRequiredVersion, Yn as promptSearchMultiselect, Yo as renderTextInfoCard, Yr as readOpenMeldToolsUpdateContextFromEnv, Yt as runSkillsCheck$1, Z as runAgentsEnable, Za as resolveAuthenticationGuidance, Zi as resolveAuthBaseUrl, Zn as isReturnKeypress, Zo as emitCliJsonEnvelope, Zr as scheduleDaemonServiceUpdate, Zt as runSkillsInstall, _ as runSpaceWriteWithPasswordRetry, _a as ensureVersionStateReady, _i as setCustomProfileWorkspace, _n as fetchAuthUserSnapshot, _o as formatOpenMeldCliCommand, _r as createSpaceContractSetGuideError, _t as runDaemonCancel, a as runSpaceDelete, aa as readCurrentDaemonRuntimeContext, ai as formatDeviceReplyReadinessLabel, an as buildCommandAuthenticationPromptMessage, ao as requestLocalAgentActivitySync, ar as formatElapsedTime, as as cliJsonSkillsShowEnvelopeSchema, at as printOpenMeldBanner, b as buildIdentityOnlyMembersSnapshotForReadProjection, ba as readVersionState, bi as describeProfileWorkspacePathValidationFailure, bn as resolveDeviceTokenExpiresAt, bo as formatOpenMeldCliTextBlock, br as createSpacePublicationSetGuideError, bt as runDaemonReinstall, c as runSpaceLeave, ca as isDaemonServiceJobNeverSpawned, ci as resolveGatewayChainReadiness, cn as runAuthLogin, co as resolveAgentActivityRouteForPath, cr as formatDaemonServiceMissingRecommendation, cs as revokeOrganizationJoinLinkResponseSchema, ct as renderOpenMeldLogo, d as runSpaceRemoveMembers, da as readRecentDaemonLifecycleEvents, di as createModelCatalogReadSession, dn as runAuthStatus, do as defaultManagedIntegrationPaths, dr as createProfileActionGuideError, dt as resolveSpaceWebGatewayOrigin, ea as isCurrentCommandCheckScopeActive, ei as formatDaemonFailureContextText, en as ensureLocalSkills, eo as getProfileDefaultView, er as isCliUpdateCheckApplicable, es as outLine, et as runAgentsRepair, f as runSpaceSend, fa as buildInstallSelfJsonPayload, fi as resolveProfileWorkspaceRuntime, fn as exchangeOneTimeTokenAuthSession, fo as installAgentActivityIntegrations, fr as createProfileCreateGuideError, ft as resolveSpaceSendText, g as runSpaceReadWithPasswordRetry, ga as compareSemver, gi as resolveConfiguredProfileWorkspacePath, gn as extractAuthApiErrorMessage, go as formatInlineOpenMeldCliCommands, gr as createSpaceAliasTargetGuideError, gt as runDaemonBackgroundStartForDecision, h as uploadPreparedSpaceFiles, ha as buildNextVersionState, hi as readProfileWorkspaceConfig, hn as formatActiveOrganizationLabel, ho as uninstallAgentActivityIntegrations, hr as createSpaceAddMembersGuideError, ht as runDaemonAutostart, i as runSpaceCreate, ia as resolveVersionChangeDirection, ii as formatAgentReplyReadinessLabel, in as connectWebSocket, io as LocalDaemonControlPlaneClientError, ir as writeDispatchSpaceActionRecord, is as cliJsonSkillsLoadEnvelopeSchema, it as colorizeDisplayProfileLabel, j as isSpaceCommandOutputHandledError, ja as parseCliViewMode, ji as getAgentControllerPermissionModeDisplayMetadata, jn as submitProfileRuntimeAgentControllerReport, jo as normalizeSharedSessionTitle, jr as registerSpaceMemberSelectionOptions, jt as createDelayedSpinner, k as resolveOrganizationVisibilityLabel, ka as createPresenter, ki as buildAgentControllerRef, kn as assessActionParticipationCandidate, ko as buildAgentActivityEvent, kr as getCommandEntryContract, kt as reconcileCliVersionView, l as runSpaceList, la as readDaemonServiceJobCrashExitCode, li as resolveOpenClawLocalDiagnosticsValue, ln as runAuthLogout, lo as unregisterAgentActivityRoute, lr as canUseInteractivePrompts, ls as compareAgentControllerRefsForDisplay, lt as renderOpenMeldTagline, m as prepareRequestedSpaceSendFiles, ma as readPendingDaemonServiceUpdate, mi as normalizeCustomProfileWorkspacePath, mn as buildAuthStatusSnapshot, mo as resolveAgentActivityDispatcherCommand, mr as createResetConfirmationGuideError, mt as runDaemon, n as promptAndConfirmSpacePassword, na as startCurrentCommandCheckScope, ni as resolveDaemonServiceFreshnessWarning, nn as readRuntimeReportingHealthState, no as LocalProjectConnectionError, nr as readDispatchOwnedRuntimeGuard, ns as cliJsonOutputEnvelopeSchema, nt as formatTransportModeDisplay, o as runSpaceHistory, oa as readCurrentObservedDaemonRuntimeStatus, oi as formatHumanReplyReadinessReason$1, on as ensureCommandAuthenticationOrCancel, oo as isAgentActivityRouteRegistered, or as resolveElapsedTimeMs, os as getOrganizationJoinLinkResponseSchema, ot as renderOpenMeldBrandBlockLines, p as runSpaceWatch, pa as performManagedInstall, pi as ensureOpenMeldManagedProfileWorkspace, pn as buildAuthStatusRows, po as readAgentActivityIntegrationStatus, pr as createProfileMenuGuideError, pt as bestEffortStopCurrentLaneDaemonService, q as runAgentsCustomRemove, qa as setSelectedOpenMeldProfileId, qi as classifyDaemonServiceWakeability, qn as createSpaceMemberIdentityIndex, qo as readControllerTaskLifecycleOutboxHealth, qr as canonicalizeAllowedActions, qt as runDaemonStartDecisionPrompt, r as runSpaceAddMembers, ra as inspectDaemonServiceInventory, ri as resolveCurrentReplyReadinessSnapshot, rn as readRecentDaemonDispatchJournalEvents, ro as validateLocalProjectConnectionPath, rr as readDispatchSpaceActionContextFromEnv, rs as cliJsonSkillsListEnvelopeSchema, rt as colorizeAgentLabel, s as runSpaceJoin, sa as getDaemonSystemServiceLogPath, si as mapAgentReplyReadinessToLegacyAutoReply, sn as evaluateCommandAuthentication, so as registerAgentActivityRoute, sr as formatDaemonServiceDowngradeBlockedRecommendation, ss as organizationJoinLinkErrorResponseSchema, st as renderOpenMeldHeader, t as buildCreateSpacePasswordPromptConfig, ta as resetCurrentCommandCheckState, ti as resolveServiceReadinessFromServiceStatus, tn as readBundledOpenMeldCliSkillDocumentByPath, to as setProfileDefaultView, tr as assertDispatchOwnedRuntimePublicWriteAllowed, ts as cliBinaryDeltaPatchSchema, tt as runAgentsShow, u as runSpacePassword, ua as resolveDaemonServiceManager, ui as syncProfileWorkspaceState, un as runAuthMenu, ur as createDoctorFailedGuideError, ut as resolveGatewayWebOrigin, v as buildHumanReadSignalsTranscriptItems, va as fetchLatestCliBinaryRelease, vi as setOpenMeldManagedProfileWorkspace, vn as requestDeviceToken, vo as formatOpenMeldCliCommands, vr as createSpaceLeaveGuideError, vt as runDaemonInstall, w as buildFormalDispatchResultReadPayload, wa as resolveCurrentDaemonExpectedVersion, wi as listAgentTargetStates, wn as resolveCreateProfileName, wo as syncLocalAgentActivity, wr as createSpaceTargetGuideError, wt as runDaemonStop, x as loadSpaceIdentityDirectoryOrNull, xa as writeVersionState, xi as syncDeviceRuntimeStateProjection, xn as revokeAuthAccessToken, xo as formatProfileAwareOpenMeldCliCommands, xr as createSpaceRemoveMembersGuideError, xt as runDaemonRunAfterEntryChecks, y as emitHumanReadSignalsTextProjection, ya as fetchLatestPackageInfo, yi as validateCustomProfileWorkspacePath, yn as resolveDeviceAuthClientId, yo as formatOpenMeldCliLine, yr as createSpaceMenuGuideError, yt as runDaemonInterrupt, z as buildReplyReadinessGuidance, za as deleteOpenMeldProfile, zi as resolveNativeAgentControllerPermissionModeForController, zn as upsertSpaceConfig, zo as listProjectConnectionsWithStatus, zr as DualViewGuideError, zt as readGatewayJsonResponse } from "./command-DXNpV3oZ.js";
-import { At as submitFeedbackIssueRequestSchema, D as toStructuredApiClientFailure, Et as authProfileManagedRoleSchema, F as OPENMELD_HEADER_PROFILE_ID, G as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Ht as agentActivityProviderSchema, J as spaceDispatchTraceAttemptStatusSchema, K as projectSpaceDispatchTraceFinalVisibleOutcome, Q as projectObservabilityWakeCorrelation, R as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Tt as authProfileKindSchema, Ut as agentActivitySessionStatusSchema, V as sleep, Wt as agentActivitySnapshotQuerySchema, X as spaceDispatchTraceResponseSchema, Y as spaceDispatchTraceDispatchStatusSchema, Z as observabilityWakeTraceSelectorSchema, _ as createOrganizationSkillsApi, _n as START_BOUNDED_VERSION_SCHEMA, an as agentActivitySessionInventoryQuerySchema, b as createProjectsApi, bn as startReplyReadinessSummarySchema, c as createAgentProfileBindingApi, d as createCurrentDeviceApi, et as ownerComputerDiagnosticsSchema, f as createFeedbackApi, g as createOrganizationApi, gn as START_BOUNDED_ID_SCHEMA, in as agentActivityInventorySessionStatusSchema, it as agentProfileCreationConfigurationSchema, l as createCenterAgentApi, nt as summarizeComputerFileAccessPolicy, q as resolveSpaceDispatchTraceRootCause, rn as agentActivityInventorySessionOriginSchema, rt as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, s as createAgentActivityApi, sn as localAgentSessionProviderSchema, tt as projectOwnerComputerLocalRuntimes, u as createComputerFileAccessApi, v as createPrepareReadinessApi, vn as START_ISO_DATE_TIME_SCHEMA, vt as organizationSkillBundleSchema, x as createRoutinesApi, xn as localAgentCatalogSchema, xt as stringifyOrganizationSkillBundleCanonicalJson, yn as START_TRIMMED_NON_EMPTY_STRING_SCHEMA } from "./dist-CUeqTNJi.js";
+import { $ as runAgentsManage, $a as createAuthenticationError, $i as resolveAuthBaseUrl, $n as isReturnKeypress, $o as sanitizeTerminalDisplayText, $r as scheduleDaemonServiceUpdate, $t as runSkillsUninstall, A as parseEnvelope, Aa as renderHumanErrorCard, Ai as resolveLocalRegistryAgentIdFromAgentControllerRef, An as assessActionParticipationCandidate, Ao as readAgentActivityContextForPath, Ar as createUpgradeConfirmationGuideError, At as reconcileCliVersionView, B as resolveHumanControllerDisplayName, Ba as createOpenMeldAgentProfile, Bi as resolveEvidenceSyncHealth, Bn as upsertSpaceConfig, Bo as bindProject, Br as buildAgentOverviewFromContract, Bt as readGatewayJsonResponse, C as toSpaceMetaUpsertInput, Ca as readVersionState, Ci as syncDeviceRuntimeStateProjection, Cn as createProfileByKind, Co as formatOpenMeldCliTextBlock, Cr as createSpaceRemoveMembersGuideError, Ct as runDaemonSnapshot, D as formatHumanReadTargetList, Da as resolveCurrentDaemonExpectedVersion, Di as reconcileNewRunnableBuiltinAgentsForSetup, Dn as ensureAgentProfileRuntimeBinding, Do as syncLocalAgentActivity, Dr as createSpaceUpdatesGuideError, Dt as runDaemonUninstall, E as buildHumanReplyContextSummary, Ea as toStartBackgroundHelperExecutionCompatibility, Ei as listAgentTargetStates, En as promptTextEntry, Eo as resolveUserFacingCliEntryCommand, Er as createSpaceTargetGuideError, Et as runDaemonTeardownStrict, F as resolveOpenMeldProfileForSpaceCommand, Fa as resolveRuntimeContext, Fi as listAgentControllerPermissionModeOptions, Fn as collectLocalAgentControllerInventory, Fo as readCodexSessionTitles, Fr as registerSkillsTargetSelectionOptions, Ft as readDaemonStartFailureLogTailLines, G as runAgentsCustomAdd, Ga as resolveOpenMeldProfile, Gi as getSetupFlowCopy, Gn as buildSignalIndex, Go as runIfAgentActivityBindingGenerationIsCurrent, Gr as OPENMELD_AGENT_MENTAL_MODEL_LINES, Gt as writeInstalledLocalComponentsSnapshot, H as resolveAgentProfileSetup, Ha as deleteOpenMeldProfile, Hn as buildDispatchResultMessageReadProjection, Ho as listProjectConnectionsWithStatus, Hr as formatDualViewGuideForDisplay, Ht as toStructuredGatewayFailure, I as emitSpaceAgentOverview, Ia as resolveViewProfileKey, Ii as parseAgentControllerRef, In as resolveLocalAgentControllerBlockerReasonCodes, Io as enqueueAgentActivityHookEvent, Ir as getCliVersionInfo, It as fetchSpaceUpdates, J as runAgentsCustomUpdate, Ja as clearSelectedOpenMeldProfileId, Ji as classifyDaemonServiceRunStartability, Jn as buildUpdatesReplyWorkflowProjection, Jo as canonicalizeLocalProjectPath, Jr as buildAgentFacingPublicationModeGuideLines, Jt as runDaemonStartDecisionPrompt, K as runAgentsCustomList, Ka as updateOpenMeldProfile, Ki as buildDaemonServiceTargetSpec, Kn as buildSignalMessageReadProjection, Ko as setDefaultProjectConnection, Kr as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, Kt as resolveDaemonServiceParticipationStatus, L as emitSpaceCliAgentOverview, La as isSelectedOpenMeldProfileRequiredError, Li as resolveAgentControllerPermissionModeForController, Ln as resolveLocalAgentControllerLaunchability, Lo as removeProjectInbox, Lr as registerDaemonControlTargetOptions, Lt as createCliSpaceApi, M as assertFullSignalIdArgument, Ma as createPresenter, Mi as createAgentExecutionStatusDisplayRows, Mn as submitProfileRuntimeAgentControllerReport, Mo as buildAgentActivityEvent, Mr as getCommandHintsFromContract, Mt as createDelayedSpinner, N as assertValidSpaceIdTarget, Na as formatMessage, Ni as getAgentControllerPermissionModeDisplayMetadata, Nn as submitRuntimeAgentControllerReport, No as resolveObservedAgentActivityBinding, Nr as registerSpaceMemberSelectionOptions, Nt as shouldEmitAgentOverview, O as resolveLinkAccessLabel, Oa as OPENMELD_VERSION, Oi as listBuiltinAgentsRegistryEntries, On as formatServiceParticipationReadinessLabel, Oo as readDaemonServiceContract, Or as createStartAgentIdentityGuideError, Ot as buildProfileWorkspacePresentation, P as prepareAuthenticatedSpaceCommandContext, Pa as parseCliViewMode, Pi as getAgentControllerPermissionModeFieldLabel, Pn as submitRuntimeAgentControllerReports, Po as normalizeSharedSessionTitle, Pr as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, Pt as runDaemonStartupPreflight, Q as runAgentsList, Qa as buildHumanAuthenticationCard, Qi as resolveOpenMeldEnvironmentTarget, Qn as promptSearchSelect, Qo as renderTextInfoCard, Qr as runPendingDaemonServiceUpdate, Qt as runSkillsInstall, R as prepareLocalAgentReadiness, Ra as requireOpenMeldProfile, Ri as resolveAgentExecutionStatus, Rn as resolveLocalAgentControllerReportDecision, Ro as readAgentActivityOutboxHealth, Rr as registerAuthLoginRequestOptions, Rt as fetchSpaceMeta, S as loadSpaceSignalIndexOrNull, Sa as fetchLatestPackageInfo, Si as describeProfileWorkspacePathValidationFailure, Sn as revokeAuthAccessToken, So as formatOpenMeldCliLine, Sr as createSpacePublicationSetGuideError, St as runDaemonRunAfterEntryChecks, T as buildFormalSignalReadPayload, Ta as resolveDaemonRuntimeContractCompatibility, Ti as resolveAgentProfilePrimaryAgentControllerReport, Tn as resolveCreateProfileName, To as resolveSetupFollowUpCliEntryCommand, Tr as createSpaceSubcommandTargetGuideError, Tt as runDaemonStop, U as runAgents, Ua as listOpenMeldProfiles, Ui as buildDaemonRouteObservationPresentation$1, Un as buildDispatchResultReplyWorkflowProjection, Uo as migrateProjectBindingStore, Ur as buildDualViewGuideMessage, Ut as parseJsonResponse, V as persistAgentTransportSelection, Va as createOpenMeldHumanProfile, Vi as resolveNativeAgentControllerPermissionModeForController, Vn as assertNoRemovedCcSpaceAddressingSyntax, Vo as listProjectBindings, Vr as DualViewGuideError, Vt as readGatewayTextResponse, W as runAgentsConfig, Wa as primeOpenMeldProfilesSessionCache, Wi as buildOnboardingPlan, Wn as buildPublicSpaceEntryUrl, Wo as removeProjectConnection, Wr as formatAgentOverviewPayload, Wt as resolveLocalComponentsStatus, X as runAgentsDisable, Xa as setSelectedOpenMeldProfileId, Xi as resolveServiceUpdateUrgency, Xn as formatRemovedCcRelationMessage, Xo as readControllerTaskLifecycleOutboxHealth, Xr as readPendingOpenMeldToolsUpdateAttempt, Xt as runSkillsCheck$1, Y as runAgentsDetect, Ya as getSelectedOpenMeldProfileId, Yi as classifyDaemonServiceWakeability, Yn as createSpaceMemberIdentityIndex, Yo as enqueueControllerTaskLifecycleEventWhileLocked, Yr as canonicalizeAllowedActions, Yt as collectSkillsReadinessSnapshot, Z as runAgentsEnable, Za as buildAgentAuthenticationGuide, Zi as assessServerRequiredVersion, Zn as promptSearchMultiselect, Zo as renderInfoCard, Zr as readOpenMeldToolsUpdateContextFromEnv, Zt as runSkillsEnsure, _ as runSpaceWriteWithPasswordRetry, _a as resolveDaemonServiceUpdateOperation, _i as readProfileWorkspaceConfig, _n as extractAuthApiErrorMessage, _o as resolveAgentActivityDispatcherCommand, _r as createSpaceAddMembersGuideError, _t as runDaemonBackgroundStartForDecision, a as runSpaceDelete, aa as inspectDaemonServiceInventory, ai as resolveCurrentReplyReadinessSnapshot, an as connectWebSocket, ao as LocalProjectConnectionError, ar as readDispatchSpaceActionContextFromEnv, as as cliJsonOutputEnvelopeSchema, at as printOpenMeldBanner, b as buildIdentityOnlyMembersSnapshotForReadProjection, ba as ensureVersionStateReady, bi as setOpenMeldManagedProfileWorkspace, bn as resolveDeviceAuthClientId, bo as formatOpenMeldCliCommand, br as createSpaceLeaveGuideError, bt as runDaemonInterrupt, c as runSpaceLeave, ca as readCurrentObservedDaemonRuntimeStatus, ci as formatHumanReplyReadinessReason$1, cn as evaluateCommandAuthentication, co as requestLocalAgentActivitySync, cr as resolveElapsedTimeMs, cs as cliJsonSkillsShowEnvelopeSchema, ct as renderOpenMeldLogo, d as runSpaceRemoveMembers, da as readDaemonServiceJobCrashExitCode, di as resolveOpenClawLocalDiagnosticsValue, dn as runAuthMenu, do as resolveAgentActivityRouteForPath, dr as canUseInteractivePrompts, ds as revokeOrganizationJoinLinkResponseSchema, dt as resolveSpaceWebGatewayOrigin, ea as finishCurrentCommandCheckScope, ei as ensureDaemonRuntimePaths, en as runSkillsUpdate, eo as resolveAuthenticationGuidance, er as runInteractivePrompt, es as emitCliJsonEnvelope, et as runAgentsRepair, f as runSpaceSend, fa as resolveDaemonServiceManager, fi as syncProfileWorkspaceState, fn as runAuthStatus, fo as unregisterAgentActivityRoute, fr as createDoctorFailedGuideError, fs as compareAgentControllerRefsForDisplay, ft as resolveSpaceSendText, g as runSpaceReadWithPasswordRetry, ga as readPendingDaemonServiceUpdate, gi as normalizeCustomProfileWorkspacePath, gn as formatActiveOrganizationLabel, go as readAgentActivityIntegrationStatus, gr as createResetConfirmationGuideError, gt as runDaemonAutostart, h as uploadPreparedSpaceFiles, ha as performManagedInstall, hi as ensureOpenMeldManagedProfileWorkspace, hn as buildAuthStatusSnapshot, ho as installAgentActivityIntegrations, hr as createProfileMenuGuideError, ht as runDaemon, i as runSpaceCreate, ia as startCurrentCommandCheckScope, ii as resolveDaemonServiceFreshnessWarning, in as readRecentDaemonDispatchJournalEvents, io as setProfileDefaultView, ir as readDispatchOwnedRuntimeGuard, is as cliBinaryDeltaPatchSchema, it as colorizeDisplayProfileLabel, j as isSpaceCommandOutputHandledError, ja as renderHumanTextErrorCard, ji as buildAgentControllerRef, jn as computeRetryDelayMs, jo as removeAgentActivityContextCache, jr as getCommandEntryContract, jt as emitDaemonAgentOverview, k as resolveOrganizationVisibilityLabel, ka as buildHumanErrorCopy, ki as notifyDaemonRouteCatalogChanged, kn as resolveServiceParticipationReadiness, ko as upsertDaemonServiceContract, kr as createStartAuthenticationGuideError, kt as buildProfileWorkspaceRows, l as runSpaceList, la as getDaemonSystemServiceLogPath, li as mapAgentReplyReadinessToLegacyAutoReply, ln as runAuthLogin, lo as isAgentActivityRouteRegistered, lr as formatDaemonServiceDowngradeBlockedRecommendation, ls as getOrganizationJoinLinkResponseSchema, lt as renderOpenMeldTagline, m as prepareRequestedSpaceSendFiles, ma as buildInstallSelfJsonPayload, mi as resolveProfileWorkspaceRuntime, mn as buildAuthStatusRows, mo as defaultManagedIntegrationPaths, mr as createProfileCreateGuideError, mt as isManagedSystemServiceBootstrapRun, n as promptAndConfirmSpacePassword, na as isCurrentCommandCheckScopeActive, ni as formatDaemonFailureContextText, nn as readBundledOpenMeldCliSkillDocumentByPath, no as resolveAuthenticationGuidanceFromMessage, nr as isCliUpdateCheckApplicable, ns as outJsonLine, nt as formatTransportModeDisplay, o as runSpaceHistory, oa as resolveVersionChangeDirection, oi as formatAgentReplyReadinessLabel, on as buildCommandAuthenticationPromptMessage, oo as validateLocalProjectConnectionPath, or as writeDispatchSpaceActionRecord, os as cliJsonSkillsListEnvelopeSchema, ot as renderOpenMeldBrandBlockLines, p as runSpaceWatch, pa as readRecentDaemonLifecycleEvents, pi as createModelCatalogReadSession, pn as exchangeOneTimeTokenAuthSession, pr as createProfileActionGuideError, pt as bestEffortStopCurrentLaneDaemonService, q as runAgentsCustomRemove, qa as alignSelectedOpenMeldProfileStorage, qi as resolveDaemonServiceAlignmentDecision, qn as buildSpaceRoundReadProjection, qo as unbindProject, qr as areAllowedActionsEquivalent, qt as runDaemonServiceParticipationGate, r as runSpaceAddMembers, ra as resetCurrentCommandCheckState, ri as resolveServiceReadinessFromServiceStatus, rn as readRuntimeReportingHealthState, ro as getProfileDefaultView, rr as assertDispatchOwnedRuntimePublicWriteAllowed, rs as outLine, rt as colorizeAgentLabel, s as runSpaceJoin, sa as readCurrentDaemonRuntimeContext, si as formatDeviceReplyReadinessLabel, sn as ensureCommandAuthenticationOrCancel, so as LocalDaemonControlPlaneClientError, sr as formatElapsedTime, ss as cliJsonSkillsLoadEnvelopeSchema, st as renderOpenMeldHeader, t as buildCreateSpacePasswordPromptConfig, ta as getCurrentCommandCheckState, ti as resolveDaemonDeviceId, tn as ensureLocalSkills, to as resolveAuthenticationGuidanceFromError, tr as assessCliUpdate, ts as errLine, tt as runAgentsShow, u as runSpacePassword, ua as isDaemonServiceJobNeverSpawned, ui as resolveGatewayChainReadiness, un as runAuthLogout, uo as registerAgentActivityRoute, ur as formatDaemonServiceMissingRecommendation, us as organizationJoinLinkErrorResponseSchema, ut as resolveGatewayWebOrigin, v as buildHumanReadSignalsTranscriptItems, va as buildNextVersionState, vi as resolveConfiguredProfileWorkspacePath, vn as fetchAuthUserSnapshot, vo as uninstallAgentActivityIntegrations, vr as createSpaceAliasTargetGuideError, vt as runDaemonCancel, w as buildFormalDispatchResultReadPayload, wa as writeVersionState, wi as createPrimaryBindingReadSession, wn as resolveCreateProfileKind, wo as formatProfileAwareOpenMeldCliCommands, wr as createSpaceResultGuideError, wt as runDaemonStatusFlow, x as loadSpaceIdentityDirectoryOrNull, xa as fetchLatestCliBinaryRelease, xi as validateCustomProfileWorkspacePath, xn as resolveDeviceTokenExpiresAt, xo as formatOpenMeldCliCommands, xr as createSpaceMenuGuideError, xt as runDaemonReinstall, y as emitHumanReadSignalsTextProjection, ya as compareSemver, yi as setCustomProfileWorkspace, yn as requestDeviceToken, yo as formatInlineOpenMeldCliCommands, yr as createSpaceContractSetGuideError, yt as runDaemonInstall, z as buildReplyReadinessGuidance, za as resolveOpenMeldProfileOrNull, zi as resolveAgentProfileEditCapabilities, zn as inspectSpaceCacheFile, zo as removeProjectOutbox, zr as registerBuiltinAgentSelectionOptions, zt as updateSpaceMeta } from "./command-DOkt_9l0.js";
+import { $ as projectObservabilityWakeCorrelation, D as toStructuredApiClientFailure, Dt as authProfileManagedRoleSchema, Et as authProfileKindSchema, F as OPENMELD_HEADER_PROFILE_ID, Gt as agentActivitySnapshotQuerySchema, J as resolveSpaceDispatchTraceRootCause, K as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Q as observabilityWakeTraceSelectorSchema, R as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Sn as localAgentCatalogSchema, St as stringifyOrganizationSkillBundleCanonicalJson, Ut as agentActivityProviderSchema, V as sleep, W as spaceEntryTargetSchema, Wt as agentActivitySessionStatusSchema, X as spaceDispatchTraceDispatchStatusSchema, Y as spaceDispatchTraceAttemptStatusSchema, Z as spaceDispatchTraceResponseSchema, _ as createOrganizationSkillsApi, _n as START_BOUNDED_ID_SCHEMA, an as agentActivityInventorySessionStatusSchema, at as agentProfileCreationConfigurationSchema, b as createProjectsApi, bn as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, c as createAgentProfileBindingApi, cn as localAgentSessionProviderSchema, d as createCurrentDeviceApi, f as createFeedbackApi, g as createOrganizationApi, in as agentActivityInventorySessionOriginSchema, it as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, jt as submitFeedbackIssueRequestSchema, l as createCenterAgentApi, nt as projectOwnerComputerLocalRuntimes, on as agentActivitySessionInventoryQuerySchema, q as projectSpaceDispatchTraceFinalVisibleOutcome, rt as summarizeComputerFileAccessPolicy, s as createAgentActivityApi, tt as ownerComputerDiagnosticsSchema, u as createComputerFileAccessApi, v as createPrepareReadinessApi, vn as START_BOUNDED_VERSION_SCHEMA, x as createRoutinesApi, xn as startReplyReadinessSummarySchema, yn as START_ISO_DATE_TIME_SCHEMA, yt as organizationSkillBundleSchema } from "./dist-D9pWrVPX.js";
 import { Cr as string, Dr as unknown, Er as union, It as spaceStatusSchema, Lt as centerAgentInteractionSourceSchema, On as messageEnvelopeSchema, Qr as openMeldProfileIdSchema, Sr as strictObject, Ut as isSpaceFileTextEditable, _r as nullFactory, cr as boolean, dn as spaceThreadContextSchema, fi as trimmedStringFromUnknown, fr as enumFactory, gn as spaceContractSchema, hn as spaceContractFieldsSchema, hr as literal, jr as clientMessageIdSchema, mr as iso, pr as int, qt as resolveSpaceFileMimeType, ri as openMeldRuntimeProfileIdSchema, sr as array, ui as nonEmptyTrimmedStringFromUnknown, un as dispatchExecutionSchema, ur as discriminatedUnion, xr as record, yr as object } from "./runtime-transport-21JL5nu5.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
 import { N as getDaemonStatus } from "./daemon-runtime-lease-Dqmxqrzi.js";
 import { _ as runMacOsNativeKeychainHelperIfRequested, a as beginAuthSessionTransition, c as getAuthSessionMetadata, d as getInterruptedComputerAuthSessionRecovery, f as markInterruptedComputerAuthSessionRecovery, g as updateAuthSessionActiveOrganization, l as getAuthSessionState, m as recordInterruptedComputerAuthSessionRecoveryFailure, n as AuthSessionRecoveryInProgressError, o as clearAuthSession, p as normalizeStoredActiveOrganization, s as completeInterruptedComputerAuthSessionRecovery, t as AuthSessionChangedBeforeTransitionError, u as getCurrentAuthOwnerUserId, v as isBinaryDistribution, y as resolveOpenMeldDistribution } from "./auth-session-Bg4ATgGF.js";
-import { c as buildOpenMeldRequestContextHeadersWithAuth, d as buildOpenMeldRequestContextFromProfile, l as buildRequestAuthHeaders, n as createCliApiClientFoundation, p as deriveAuthBaseUrlFromGatewayUrl, r as fetchSpaceRequestWithTimeout } from "./api-client-foundation-BoHvMp-l.js";
+import { c as buildOpenMeldRequestContextHeadersWithAuth, d as buildOpenMeldRequestContextFromProfile, l as buildRequestAuthHeaders, n as createCliApiClientFoundation, p as deriveAuthBaseUrlFromGatewayUrl, r as fetchSpaceRequestWithTimeout } from "./api-client-foundation-CW0S-K-m.js";
 import { Command, Option } from "commander";
 import os, { homedir, hostname, release, tmpdir } from "node:os";
 import * as z$1 from "zod/v4";
@@ -2301,6 +2301,7 @@ const COMMAND_CHECK_REQUIREMENTS = Object.freeze({
 	"space.contract": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN, CONFIRM_SELECTED_PROFILE),
 	"space.contract.set": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN, CONFIRM_SELECTED_PROFILE),
 	"space.publication.set": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN, CONFIRM_SELECTED_PROFILE),
+	"space.access": buildCommandChecks(OPTIONAL_CLI_UPDATE),
 	"space.status": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN, CONFIRM_SELECTED_PROFILE),
 	"space.updates": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN, CONFIRM_SELECTED_PROFILE),
 	"space.result": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN, CONFIRM_SELECTED_PROFILE),
@@ -2516,6 +2517,8 @@ const COMMAND_ENTRY_NAME_BY_ROUTE = {
 	"spaces contract set": "space.contract.set",
 	"space publication set": "space.publication.set",
 	"spaces publication set": "space.publication.set",
+	"space access": "space.access",
+	"spaces access": "space.access",
 	"space status": "space.status",
 	"spaces status": "space.status",
 	"space updates": "space.updates",
@@ -4566,6 +4569,12 @@ const COMMAND_ENTRY_COPY_BY_NAME = Object.freeze({
 		cliUpdateAction: "updating Space publication mode",
 		serviceAction: null
 	},
+	"space.access": {
+		...DEFAULT_COPY,
+		signInAction: null,
+		profileAction: null,
+		cliUpdateAction: "checking Space access"
+	},
 	"space.status": {
 		signInAction: "reading space status",
 		profileAction: "reading space status",
@@ -6321,6 +6330,8 @@ const PASSIVE_CLI_QUERY_COMMANDS = /* @__PURE__ */ new Set([
 	"service snapshot",
 	"service status",
 	"service trace",
+	"space link",
+	"spaces link",
 	"whoami"
 ]);
 const COMMAND_ROUTE_OPTIONS_WITH_VALUES = /* @__PURE__ */ new Set([
@@ -16242,10 +16253,6 @@ async function runSetupFirstBootstrapOrThrow(input) {
 		text: "Preparing your OpenMeld profile..."
 	});
 	const humanProfile = await runBootstrapStep("human_profile", input.progress, "Checking your OpenMeld profile", async () => await resolveOpenMeldProfile({ profileKind: "human" }));
-	emitSetupBootstrapLine(input.line, {
-		code: "setup.bootstrap.stage.center_agent",
-		text: "Center Agent will guide your next setup steps from OpenMeld Home."
-	});
 	return {
 		status: "completed",
 		assistantProfile: null,
@@ -16936,6 +16943,39 @@ function finalizePrepareStepDiagnosticsSerialization(bundle) {
 	return JSON.stringify(parsed.data);
 }
 //#endregion
+//#region src/commands/setup-service-update-truth.ts
+function resolveSetupServiceUpdateTruth(input) {
+	const operation = input.operation;
+	if (!operation) return { status: "ready" };
+	if (compareSemver(input.currentCliVersion, operation.targetVersion) > 0) return { status: "ready" };
+	if (operation.phase === "restored" || operation.phase === "needs_help") return {
+		message: "OpenMeld Service update failed. Run `openmeld service update`.",
+		status: "failed"
+	};
+	if (operation.phase === "waiting_for_work" || operation.phase === "updating") return {
+		message: "OpenMeld Service update started in the background. Run `openmeld setup` again after it finishes.",
+		status: "updating"
+	};
+	if (input.currentCliVersion === operation.targetVersion && input.installedServiceVersion === operation.targetVersion) return { status: "ready" };
+	return {
+		message: "OpenMeld Service update could not be verified. Run `openmeld service update`.",
+		status: "verifying"
+	};
+}
+async function assertSetupServiceUpdateComplete() {
+	const operation = await resolveDaemonServiceUpdateOperation();
+	if (!operation) return;
+	const truth = resolveSetupServiceUpdateTruth({
+		currentCliVersion: OPENMELD_VERSION,
+		installedServiceVersion: (await inspectDaemonServiceInventory({
+			expectedVersion: OPENMELD_VERSION,
+			intent: "status_cleanup"
+		})).installStatus.state?.daemonVersion ?? null,
+		operation
+	});
+	if (truth.status !== "ready") throw new Error(truth.message);
+}
+//#endregion
 //#region src/commands/prepare-session-executor.ts
 const PREPARE_TOKEN_HEADER = "x-openmeld-prepare-token";
 const REPORT_RUNTIME_CONNECTION_MAX_ATTEMPTS = 9;
@@ -17554,6 +17594,7 @@ async function runRefreshServiceTerminalStep(input, progress) {
 		if (gate.localMachineIssue) throw new LocalMachineFailureError({ issue: gate.localMachineIssue });
 		throw new Error(gate.errorMessage ?? "OpenMeld Service is not connected yet.");
 	}
+	await assertSetupServiceUpdateComplete();
 	progress?.detail({
 		code: "prepare.session.progress.refresh_service.identity",
 		text: "Saving this computer's OpenMeld Service identity..."
@@ -18753,7 +18794,10 @@ async function runSetupLocalAgentConnectionServiceGate(input) {
 		...expectedOwnerUserId ? { expectedOwnerUserId } : {},
 		view: input.view
 	});
-	if (gateResult.status === "aligned") return "continue";
+	if (gateResult.status === "aligned") {
+		await assertSetupServiceUpdateComplete();
+		return "continue";
+	}
 	if (gateResult.status === "cancelled") return "cancelled";
 	if (gateResult.errorMessage) throw new Error(gateResult.errorMessage);
 	throw new Error("OpenMeld Service is still reconnecting. Run `openmeld setup` again after OpenMeld Service finishes refreshing.");
@@ -18795,7 +18839,10 @@ async function maybeCompleteServiceReadinessAfterPreparation(input) {
 		ownerUserId: input.profile.ownerUserId,
 		profile: input.profile
 	}));
-	if (reasonCodes.length === 0) return "completed";
+	if (reasonCodes.length === 0) {
+		await assertSetupServiceUpdateComplete();
+		return "completed";
+	}
 	const inventory = await inspectDaemonServiceInventory({
 		expectedVersion: resolveCurrentDaemonExpectedVersion(),
 		intent: "status_cleanup"
@@ -18823,6 +18870,8 @@ async function maybeCompleteServiceReadinessAfterPreparation(input) {
 		});
 		if (!refreshOutcome.ok && refreshOutcome.result === "cancelled") return "cancelled";
 		if (!refreshOutcome.ok) throw new Error(`OpenMeld Service refresh did not complete: ${refreshOutcome.result}`);
+		if (refreshOutcome.result === "scheduled") throw new Error("OpenMeld Service update started in the background. Run `openmeld setup` again after it finishes.");
+		await assertSetupServiceUpdateComplete();
 		return "completed";
 	}
 	if (reasonCodes.includes("service.not_installed")) {
@@ -19768,21 +19817,19 @@ function emitSetupComplete(input) {
 	});
 }
 function emitSetupHumanCompletion(input) {
-	const openMeldWebUrl = new URL(resolveGatewayWebOrigin(input.gatewayUrl)).toString();
-	const returnLine = `Return to OpenMeld Web: ${formatTerminalHyperlink({
-		label: openMeldWebUrl,
-		url: openMeldWebUrl
-	})}`;
+	const returnLine = `Open OpenMeld Web: ${formatTerminalHyperlink({
+		label: "OpenMeld Web",
+		url: new URL(resolveGatewayWebOrigin(input.gatewayUrl)).toString()
+	})}.`;
 	const sections = input.bootstrap.status === "completed" ? [
-		"🎉 Computer connected",
-		"Your computer is connected.",
+		"🎉 Your computer is connected.",
 		...buildSetupHumanLocalAgentSections(input),
 		returnLine
 	] : [
-		"OpenMeld needs one more step",
+		"⚠️ OpenMeld needs one more step.",
 		"Your computer is connected, but OpenMeld could not finish preparing it.",
-		`Reason: ${formatSetupHumanLine(input.bootstrap.message)}`,
-		`Next: Run ${formatOpenMeldCliCommand(input.bootstrap.retryCommand)}`,
+		`Reason: ${formatSetupHumanLine(input.bootstrap.message)}.`,
+		`Next: Run ${formatOpenMeldCliCommand(input.bootstrap.retryCommand)}.`,
 		returnLine
 	];
 	for (const [index, text] of joinSetupHumanCompletionSections(sections).entries()) input.presenter.line({
@@ -19806,7 +19853,7 @@ function buildSetupHumanLocalAgentSections(input) {
 	return [...readyNames.length > 0 ? [`Local agents connected: ${readyNames.join(", ")}.`] : [], ...attentionNames.length > 0 ? [`Local agents need attention: ${attentionNames.join(", ")}.`] : []];
 }
 function joinSetupHumanCompletionSections(sections) {
-	return sections.flatMap((section, index) => index === 0 ? [section] : ["", section]);
+	return sections.flatMap((section) => ["", section]);
 }
 function formatSetupHumanLine(value) {
 	return sanitizeTerminalDisplayText(value, "single-line").replaceAll(/\s+/g, " ").trim();
@@ -26969,6 +27016,138 @@ function resolveRetiredCliCommandMessage(argv) {
 	return RETIRED_CLI_COMMANDS.find((command) => command.tokens.every((token, index) => leadingTokens[index] === token))?.message ?? null;
 }
 //#endregion
+//#region src/space/access-output.ts
+function emitSpaceAccessAgentOutput(input) {
+	input.presenter.data({
+		code: "space.access.resolved",
+		payload: {
+			resolution: input.resolution,
+			viewAction: resolveAgentViewAction(input.resolution)
+		}
+	});
+}
+function emitSpaceAccessHumanOutput(input) {
+	const { resolution } = input;
+	const spaceLabel = resolution.safeContext.spaceName ?? "this Space";
+	if (resolution.view.state === "allowed") {
+		input.presenter.line({
+			code: "space.access.allowed",
+			text: resolution.view.experience === "public" ? `${spaceLabel} is available to read publicly.` : `You can open ${spaceLabel}.`
+		});
+		if (resolution.participation.state === "self_join_available") input.presenter.line({
+			code: "space.access.join_available",
+			text: "You can read it now and join when you want to participate."
+		});
+		return;
+	}
+	if (resolution.view.state === "sign_in_required") {
+		input.presenter.line({
+			code: "space.access.sign_in_required",
+			text: "Sign in to check access to this Space."
+		});
+		input.presenter.line({
+			code: "space.access.next",
+			text: "Next: openmeld auth login"
+		});
+		return;
+	}
+	if (resolution.view.state === "password_required") {
+		input.presenter.line({
+			code: "space.access.password_required",
+			text: "This Space requires a password."
+		});
+		input.presenter.line({
+			code: "space.access.next",
+			text: "Rerun this command with --password <space-password>."
+		});
+		return;
+	}
+	if (resolution.view.state === "membership_required") {
+		input.presenter.line({
+			code: "space.access.membership_required",
+			text: `You don't have access to ${spaceLabel}.`
+		});
+		const ownerName = resolution.safeContext.owner?.displayName;
+		input.presenter.line({
+			code: "space.access.next",
+			text: ownerName ? `Ask ${ownerName} to add you to this Space.` : "Ask a Space owner to add you."
+		});
+		return;
+	}
+	input.presenter.line({
+		code: "space.access.unavailable",
+		text: "This Space isn't available to this account."
+	});
+}
+function resolveAgentViewAction(resolution) {
+	switch (resolution.view.state) {
+		case "allowed": return {
+			kind: "continue_to_target",
+			target: resolution.target
+		};
+		case "sign_in_required": return {
+			kind: "sign_in",
+			command: "openmeld auth login --view agent"
+		};
+		case "password_required": return {
+			kind: "provide_password",
+			command: "openmeld space access <space-url-or-id> --password <space-password> --view agent"
+		};
+		case "membership_required": return {
+			kind: "contact_space_owner",
+			...resolution.safeContext.owner ? { owner: resolution.safeContext.owner } : {}
+		};
+		case "unavailable": return { kind: "unavailable" };
+		default: return assertUnreachable(resolution.view);
+	}
+}
+function assertUnreachable(value) {
+	throw new Error(`unsupported Space entry view: ${JSON.stringify(value)}`);
+}
+//#endregion
+//#region src/space/access-command.ts
+async function runSpaceAccess(input) {
+	const runtime = await resolveRuntimeContext({
+		profile: input.profile,
+		view: input.view
+	});
+	const presenter = createPresenter(runtime);
+	assertValidSpaceIdTarget({
+		space: input.space,
+		resolvedView: runtime.resolvedView
+	});
+	const baseUrl = await resolveBaseUrl(input.baseUrl);
+	const openMeldProfile = await resolveOpenMeldProfileOrNull({
+		openMeldProfileId: input.profile,
+		allowUnauthenticated: true,
+		persistSelection: false,
+		allowDefaultFallback: false
+	});
+	const requestContext = openMeldProfile ? buildOpenMeldRequestContextFromProfile({ openMeldProfile }) : void 0;
+	const resolution = await createCliSpaceApi(baseUrl).resolveEntry({
+		spaceId: input.space,
+		...input.signalId ? { signalId: input.signalId } : {},
+		...input.threadRootSignalId ? { threadRootSignalId: input.threadRootSignalId } : {},
+		...requestContext ? { requestContext } : {},
+		...input.password ? { spacePassword: input.password } : {}
+	});
+	if (input.json) {
+		outJsonLine(resolution);
+		return;
+	}
+	if (runtime.resolvedView === "agent") {
+		emitSpaceAccessAgentOutput({
+			presenter,
+			resolution
+		});
+		return;
+	}
+	emitSpaceAccessHumanOutput({
+		presenter,
+		resolution
+	});
+}
+//#endregion
 //#region src/space/action-command.ts
 const FINAL_SAFE_STATUSES = /* @__PURE__ */ new Set([
 	"blocked",
@@ -27443,14 +27622,32 @@ function parseSpaceTargetValue(value, deriveBaseUrl) {
 	}
 	const spacesIndex = segments.indexOf("spaces");
 	const spaceId = spacesIndex >= 0 ? segments[spacesIndex + 1] : void 0;
-	if (!(spaceId && SPACE_ID_HEX_REGEX.test(spaceId))) throw new Error("Space URL must include /o/<org-slug>/spaces/<space-id> with a full 64-character Space ID. Legacy /spaces/<space-id> and /app/spaces/<space-id> inputs are still accepted.");
+	if (!(spaceId && SPACE_ID_HEX_REGEX.test(spaceId))) throw new Error("Space URL must include /spaces/<space-id> with a full 64-character Space ID. Organization-scoped /o/<org-slug>/spaces/<space-id> and legacy /app/spaces/<space-id> inputs are also accepted.");
 	const profileId = normalizeOptionalString$1(url.searchParams.get("profileId"));
+	const focusInteractionId = normalizeOptionalString$1(url.searchParams.get("focusInteractionId"));
+	const focusSignalId = normalizeOptionalString$1(url.searchParams.get("focusSignalId")) ?? normalizeOptionalString$1(url.searchParams.get("signalId"));
+	const focusThreadRootSignalId = normalizeOptionalString$1(url.searchParams.get("focusThreadRootSignalId")) ?? normalizeOptionalString$1(url.searchParams.get("threadRootSignalId"));
 	return {
 		spaceId,
 		...profileId ? { profileId } : {},
+		...focusInteractionId ? { focusInteractionId } : {},
+		...focusSignalId ? { focusSignalId } : {},
+		...focusThreadRootSignalId ? { focusThreadRootSignalId } : {},
 		...isPathOnly || !deriveBaseUrl ? {} : { baseUrl: resolveSpaceWebGatewayOrigin(url) }
 	};
 }
+function resolveSpaceEntryCommandTarget(input) {
+	const target = parseSpaceTarget(input.space, { baseUrl: input.baseUrl });
+	const profile = normalizeOptionalString$1(input.profile) ?? target.profileId;
+	return {
+		space: target.spaceId,
+		...target.baseUrl ? { baseUrl: target.baseUrl } : {},
+		...target.focusInteractionId ? { focusInteractionId: target.focusInteractionId } : {},
+		...target.focusSignalId ? { signalId: target.focusSignalId } : {},
+		...target.focusThreadRootSignalId ? { threadRootSignalId: target.focusThreadRootSignalId } : {},
+		...profile ? { profile } : {}
+	};
+}
 function resolveSpaceReadCommandTarget(input) {
 	const target = parseSpaceTarget(input.space, { baseUrl: input.baseUrl });
 	const profile = normalizeOptionalString$1(input.profile) ?? target.profileId;
@@ -28021,7 +28218,7 @@ function normalizeOptionalString(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 async function runDefaultSpaceAddMeMembership(input) {
-	const { runSpaceAddMeMembership } = await import("./add-me-membership-X4ybgoL6.js");
+	const { runSpaceAddMeMembership } = await import("./add-me-membership-TdfL6bv0.js");
 	return await runSpaceAddMeMembership(input);
 }
 //#endregion
@@ -29420,6 +29617,61 @@ async function syncSpaceGuideCache(input) {
 	});
 }
 //#endregion
+//#region src/space/link-command.ts
+async function runSpaceLink(input) {
+	const runtime = await resolveRuntimeContext({ view: input.view });
+	const presenter = createPresenter(runtime);
+	assertValidSpaceIdTarget({
+		space: input.space,
+		resolvedView: runtime.resolvedView
+	});
+	assertFullSignalIdArgument({
+		value: input.signalId,
+		flag: "--signal",
+		resolvedView: runtime.resolvedView
+	});
+	assertFullSignalIdArgument({
+		value: input.threadRootSignalId,
+		flag: "--thread-root-signal",
+		resolvedView: runtime.resolvedView
+	});
+	const target = spaceEntryTargetSchema.parse({
+		spaceId: input.space,
+		signalId: input.signalId,
+		threadRootSignalId: input.threadRootSignalId
+	});
+	emitSpaceLinkOutput({
+		presenter,
+		target,
+		url: buildPublicSpaceEntryUrl({
+			origin: resolveGatewayWebOrigin(await resolveBaseUrl(input.baseUrl)),
+			target
+		})
+	});
+}
+function emitSpaceLinkOutput(input) {
+	if (input.presenter.view === "agent") {
+		input.presenter.data({
+			code: "space.link",
+			payload: {
+				accessCommand: formatOpenMeldCliCommand(`openmeld space access ${JSON.stringify(input.url)} --view agent`),
+				grantsAccess: false,
+				target: input.target,
+				url: input.url
+			}
+		});
+		return;
+	}
+	input.presenter.line({
+		code: "space.link",
+		text: `Space link: ${input.url}`
+	});
+	input.presenter.line({
+		code: "space.link.access_note",
+		text: "Access is still checked when someone opens it."
+	});
+}
+//#endregion
 //#region src/space/members-output.ts
 function emitSpaceMembersHumanOutput(input) {
 	input.presenter.line({
@@ -33085,30 +33337,35 @@ async function runServiceStartCliAction(opts) {
 		presenter: createPresenter(await resolveRuntimeContext({ view })),
 		command: "run"
 	});
+	const run = async () => {
+		const result = await runDaemonRunAfterEntryChecks({
+			deviceId: opts.deviceId,
+			gatewayUrl: opts.gatewayUrl,
+			heartbeatMs: parseNonNegativeIntegerOption(opts.heartbeatMs, "--heartbeat-ms"),
+			profile: opts.profile,
+			mode: opts.mode,
+			view,
+			agentOverviewHandled: view === "agent",
+			outputMode: json ? "silent" : "normal"
+		});
+		if (json) emitCliJsonEnvelope({
+			schemaVersion: 1,
+			type: "daemon.run",
+			ok: result.ok,
+			reason: result.reason
+		});
+		else await maybeRunAgentViewRecoveryAfterSuccess({ view });
+	};
+	if (isManagedSystemServiceBootstrapRun()) {
+		await run();
+		return;
+	}
 	await runCommandWithEntryChecks({
 		routeTokens: ["service", "run"],
 		view,
 		profile: opts.profile,
 		gatewayUrl: opts.gatewayUrl,
-		run: async () => {
-			const result = await runDaemonRunAfterEntryChecks({
-				deviceId: opts.deviceId,
-				gatewayUrl: opts.gatewayUrl,
-				heartbeatMs: parseNonNegativeIntegerOption(opts.heartbeatMs, "--heartbeat-ms"),
-				profile: opts.profile,
-				mode: opts.mode,
-				view,
-				agentOverviewHandled: view === "agent",
-				outputMode: json ? "silent" : "normal"
-			});
-			if (json) emitCliJsonEnvelope({
-				schemaVersion: 1,
-				type: "daemon.run",
-				ok: result.ok,
-				reason: result.reason
-			});
-			else await maybeRunAgentViewRecoveryAfterSuccess({ view });
-		}
+		run
 	});
 }
 async function runServiceMaintenanceCliAction(opts, displayAction) {
@@ -33155,6 +33412,18 @@ spaceCmd.option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPEN
 	});
 });
 registerSpaceFilesCommands(spaceCmd);
+spaceCmd.command("link").description("Create a Web link to a Space, message, or thread message.").argument("[space]", "Space ID (64-character hex)").option("--signal <id>", "Message signal ID").option("--thread-root-signal <id>", "Thread root signal ID").action(async (space, opts, command) => {
+	const cliOptions = resolveSpaceCommandCliOptions(command, opts);
+	const spaceValue = String(space ?? "").trim();
+	if (!spaceValue) throw new Error("missing required argument for openmeld space link: <space-id>");
+	await runSpaceLink({
+		baseUrl: cliOptions.gatewayUrl,
+		signalId: typeof opts.signal === "string" ? opts.signal.trim() : void 0,
+		space: spaceValue,
+		threadRootSignalId: typeof opts.threadRootSignal === "string" ? opts.threadRootSignal.trim() : void 0,
+		view: getGlobalViewOption()
+	});
+});
 const spaceActionCmd = spaceCmd.command("action").description("Record a dispatch-scoped OpenMeld Space Action.").action(async () => {
 	await runSpaceActionHelp();
 });
@@ -33826,6 +34095,38 @@ withSpaceProfileOption(spaceCmd.command("publication").description("Manage how a
 		}
 	});
 });
+withSpaceProfileOption(spaceCmd.command("access").description("Resolve whether this profile can view and participate in a Space.").argument("[space]", "Space URL or 64-character Space ID").option("--json", "Print canonical JSON", false).option("--password <value>", "Space password for protected access")).action(async (space, opts, command) => {
+	const cliOptions = resolveSpaceCommandCliOptions(command, opts);
+	const spaceValue = String(space ?? "").trim();
+	const outputView = await resolveEffectiveViewForOutput();
+	if (!spaceValue && outputView === "agent") throw createSpaceTargetGuideError("access");
+	if (!spaceValue) throw new Error("missing required argument for openmeld space access: <space-url-or-id>");
+	const target = resolveSpaceEntryCommandTarget({
+		baseUrl: cliOptions.gatewayUrl,
+		profile: cliOptions.profile,
+		space: spaceValue
+	});
+	const view = getGlobalViewOption();
+	await runCommandWithEntryChecks({
+		routeTokens: ["space", "access"],
+		view,
+		profile: target.profile,
+		gatewayUrl: target.baseUrl,
+		jsonOutput: cliOptions.json === true,
+		run: async () => {
+			await runSpaceAccess({
+				profile: target.profile,
+				baseUrl: target.baseUrl,
+				space: target.space,
+				signalId: target.signalId,
+				threadRootSignalId: target.threadRootSignalId,
+				password: cliOptions.password,
+				json: cliOptions.json === true,
+				view
+			});
+		}
+	});
+});
 withSpaceProfileOption(spaceCmd.command("status").description("Read Organization visibility, link access, and current Space status.").argument("[space]", "Space URL or 64-character Space ID").option("--json", "Print canonical JSON", false).option("--password <value>", "Space password for protected access")).action(async (space, opts, command) => {
 	const cliOptions = resolveSpaceCommandCliOptions(command, opts);
 	const spaceValue = String(space ?? "").trim();