openmeld 0.3.205 → 0.3.207

package/dist/{agents-9krfNX_L.js → agents-CIDsThyG.js}

@@ -1,35 +1,41 @@
 #!/usr/bin/env node
 
-import { f as toSpaceMetaUrl, g as toSpaceUpdatesUrl } from "./urls-4D7CaXe3.js";
+import { f as toSpaceMetaUrl, g as toSpaceUpdatesUrl } from "./urls-CY2uzH2-.js";
 import { t as isLoopbackHostname } from "./loopback-hostname-DHQPKq8N.js";
-import { A as formatLocalMachineIssueMessage, D as createServiceSpawnPendingIssue, G as isPublishedOpenMeldHome, I as accountsDir, J as normalizeAccountKey, K as legacyAccountProfileSpacesDir, N as accountProfileSpaceCacheDir, Q as openMeldManagedBinaryPath, Y as normalizeOpenMeldProfileId, _ as resolveCliContextId, b as resolveOpenMeldLaneDescriptor, dt as resolveOpenMeldServiceOwnedPathInput, j as OPENMELD_HOME_ENV_KEY, l as resolveOpenMeldOrphanedLockIssue, lt as resolveOpenMeldEnvPreset, r as isOpenMeldLockError, tt as openMeldRootDir, ut as resolveOpenMeldRootDir, w as assessLocalMachineFailure } from "./lock-CvBnBcFK.js";
+import { E as assessLocalMachineFailure, F as accountProfileSpaceCacheDir, J as legacyAccountProfileSpacesDir, M as formatLocalMachineIssueMessage, N as OPENMELD_HOME_ENV_KEY, R as accountsDir, X as normalizeAccountKey, Z as normalizeOpenMeldProfileId, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, k as createServiceSpawnPendingIssue, pt as resolveOpenMeldServiceOwnedPathInput, q as isPublishedOpenMeldHome, rt as openMeldRootDir, u as resolveOpenMeldOrphanedLockIssue, v as resolveCliContextId, x as resolveOpenMeldLaneDescriptor } from "./lock-Dxp6o_t_.js";
+import { $r as spaceMemberKindSchema, An as DAEMON_STREAM_KEEPALIVE_PING, Ar as submitFeedbackIssueResponseSchema, Bn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Br as agentActivityEventSchema, Ci as computerFileAccessPolicyInputSchema, Cn as toStructuredApiClientFailure, Dr as organizationDirectoryResponseSchema, Fr as pauseCenterAgentRoutineResponseSchema, Ir as resumeCenterAgentRoutineResponseSchema, Kn as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Lr as updateCenterAgentRoutineResponseSchema, Mr as deleteCenterAgentRoutineResponseSchema, Nr as listCenterAgentRoutineRunsResponseSchema, Or as organizationComputersResponseSchema, Pr as listCenterAgentRoutinesResponseSchema, Qr as spaceMemberDirectorySchema, Si as computerFileAccessDaemonFrameSchema, Sr as listOrganizationSkillsResponseSchema, Ti as toCompatibleSpaceAddressingRequestWireValue, Tr as organizationSkillSummarySchema, Tt as buildSpaceAttachmentDownloadPath, Un as getSpaceUpdatesResponseSchema, Wn as spaceEntryTargetSchema, Wr as agentActivitySnapshotResponseSchema, Xr as spaceMemberDirectoryAllowedRelationsSchema, Yr as spaceMemberAgentWakeAvailabilitySchema, Zr as spaceMemberDirectoryEntrySchema, _i as listProjectsResponseSchema, _r as organizationSpaceDirectoryWithMemberCountsResponseSchema, ai as observedLocalAgentSessionSchema, an as createServiceConnectionEvidenceApi, ar as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, bi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, br as spaceMetaSchema, cr as betterAuthDeviceAuthorizationErrorResponseSchema, di as serviceConnectionEvidenceJournalSchema, dr as betterAuthSessionSnapshotResponseSchema, fi as localProjectControlConnectionSchema, gi as createProjectResponseSchema, hi as archiveProjectResponseSchema, hr as gatewayErrorEnvelopeSchema, in as createRuntimeReportingApi, jr as createCenterAgentRoutineResponseSchema, jt as createAgentActivityApi, kr as submitFeedbackIssueRequestSchema, lr as betterAuthDeviceAuthorizationTokenRequestSchema, mi as localProjectControlDiscoverProjectsResponseSchema, oi as centerAgentToolSpeakerSchema, on as createSpaceApi, or as betterAuthDeviceAuthorizationCodeRequestSchema, pi as localProjectControlDaemonFrameSchema, ri as agentActivitySessionInventoryResponseSchema, sr as betterAuthDeviceAuthorizationCodeResponseSchema, t as OpenMeldApiClientHttpError, tr as submitAgentControllerTaskLifecycleEventItemSchema, ui as serviceConnectionEvidenceEventSchema, ur as betterAuthDeviceAuthorizationTokenResponseSchema, vi as projectSchema, wi as computerFileAccessPolicySchema, wr as organizationSkillReleaseSummarySchema, xi as OPENMELD_RUNTIME_CAPABILITIES_HEADER, xr as getOrganizationSkillResponseSchema, yi as updateProjectResponseSchema, yr as spaceCreatorSchema, zn as OPENMELD_HEADER_REQUEST_ID, zr as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS } from "./dist-D-kJdWZE.js";
 import { b as normalizeKnownBuiltinAgentControllerId, d as resolveBuiltinAgentControllerConversationKind, l as buildAgentControllerConversationRef } from "./controller-contract-pe3_Re-c.js";
-import { $a as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, $n as resolveRouteRegistrationReconcileDecision, $t as resolveProjectBindingForPath, A as resolveDaemonStatusSnapshot, Aa as normalizeNonNegativeInteger$1, Ai as readCurrentDaemonOwnerSnapshot, An as resolveSkillsAgentRegistry, Ar as seedLegacyAgentContext, B as formatDaemonServiceRefreshReliabilityMessage, Ba as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, Bi as waitForDaemonSystemServiceToStop, Bn as repairBuiltinControllerInstall, Br as buildWorkingLanguagePromptPlan, C as isSystemServiceStartupTimeoutError, Ca as ensureDaemonRuntimePaths, Ci as buildCliLaunchInvocation, Cn as removeAgentCustomTarget, Cr as buildRuntimeWorkspaceFingerprint, Ct as summarizeSkippedDaemonProfiles, D as captureDaemonServiceEvidence, Da as dirnamePath, Di as buildDaemonOwnerSnapshotFromObservedState, Dn as updateAgentRegistrations, Do as formatDaemonLifecycleOriginSummary, Dr as loadLedgerState, Ds as compareAgentControllerRefsForDisplay, Dt as resolveLocalController, E as startDaemonSystemServiceWithAutoRepair, Ea as asRecord, Ei as inspectDaemonServiceInventory, En as updateAgentCustomTarget, Eo as emitDaemonLifecycleEvent, Er as commitResolvedAgentContext, Es as resolveUserFacingCliEntryCommand, Et as readLocalEnabledControllers, F as buildDaemonServiceRefreshNextStep, Fa as warnDaemonEvent, Fi as getEffectiveDaemonRuntimeStatus, Fr as buildAgentContextLookupKey, G as buildDaemonServiceDependencyDetails, Ga as DEFAULT_RECONNECT_DELAY_MS, Gn as isNpmGlobalCommandPath, Gt as bindProject, Ha as DAEMON_STREAM_CONNECT_TIMEOUT_MS, Hi as listDaemonOwnedProcesses, Hn as resolveBuiltinAgentControllerDefinition, Ho as isDaemonServiceContractIdentityReusable, I as buildDaemonServiceRefreshPromptMessage, Ia as CATALOG_SYNC_RETRY_INTERVAL_MS, Ii as readCurrentDaemonRuntimeContext, In as normalizeAgentId, Ir as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, It as readProfileWorkspaceConfigForAccount, J as buildDaemonServiceDependencySummary, Ja as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Ji as DaemonServiceRunError, Jn as normalizeDispatchThreadAction, Jr as parseAgentControllerRef, Jt as listProjectConnectionsWithStatus, K as buildDaemonServiceDependencyMeaning, Ka as HEARTBEAT_RESPONSE_TIMEOUT_MS, Ki as ensureDaemonRuntimeContractState, Kn as isPnpmGlobalCommandPath, Ko as compareSemver, Kt as isProjectBound, La as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, Li as readCurrentObservedDaemonRuntimeStatus, Ln as normalizeAgentIds, Lr as areAgentControllerInterfaceAccountsSame, M as resolveDaemonStatusAuthenticationAttention, Ma as normalizeText$2, Mi as resolveStoppedContractWriteBlockedReason, Mo as runDaemonServiceManagerAction, Mr as upsertConversationExecutionState, Mt as resolveProfileWorkspaceRuntime, N as resolveServiceReadiness, Na as nowIsoString, Ni as summarizeDaemonOwnerSnapshot, Nn as resolveRegistryRuntimeAdapterCapabilitySnapshot, No as runWithDaemonLifecycleCommandJournal, Nr as withLedgerStateTransaction, Nt as ensureOpenMeldManagedProfileWorkspace, O as captureDaemonServiceEvidenceBestEffort, Oa as emitRunLine, Oi as formatDaemonOwnerSummaryLabel, On as canManageRegistryAgentSkillTargets, Oo as readLatestDaemonLifecycleConnectionStateEvent, Or as removeConversationExecutionState, Ot as resolveLocalRuntimeControllerSupport, Pa as toErrorMessage$10, Pi as clearDaemonRuntimeStateIfDefinitelyStopped, Pn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Pr as buildAuthenticatedControlPlaneResponse, Qa as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, Qn as isDaemonReconcileInProgressError, Qr as renderWorkingLanguagePrompt, Qt as removeProjectConnection, R as buildDaemonServiceStatusReadOnlyDetail, Ra as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Ri as resolveDaemonRuntimeState, Rn as parseAgentEnabledOption, Rr as buildAgentControllerRef, Rt as resolveConfiguredProfileWorkspacePathForAccount, S as isDaemonInventoryRunningAndStartReady$1, Sa as buildLedgerPaths, So as resolveDaemonBundleEntryPathFromState, Sr as runRuntimeTask, Ss as formatOpenMeldCliTextBlock, St as loadDaemonRouteCatalog, T as waitForSystemServiceStartup$1, Ta as resolvePreferredDaemonDeviceId, Ti as createProviderOriginalError, Tn as setAgentRegistrationEnabled, Tr as appendLedgerHistoryEntry, Tt as buildRuntimeRouteTargets, U as clearDaemonStartFailureState, Ua as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Un as isBunGlobalCommandPath, Uo as readDaemonServiceContract, Ut as ProjectBindingOperationError, V as formatDaemonServiceUpdateRequiredMessage, Va as DAEMON_RUNTIME_CONTRACT_EPOCH, Vi as cleanupLegacySharedDaemonServiceState, Vn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Vo as clearDaemonServiceContract, Vr as createAgentControllerInterfaceDisplayRows, W as writeDaemonStartFailureState, Wa as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, Wn as isHomebrewCommandPath, Wo as upsertDaemonServiceContract, Wt as ProjectBindingStoreUpdateRequiredError, X as resolveDaemonServiceDependencyDiagnostics, Xa as REGISTER_RESPONSE_TIMEOUT_MS, Xn as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Xt as removeAgentActivityBindingsWhileDeliveryLocked, Y as buildDaemonServiceDependencyTitle, Ya as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Yi as resolveCurrentDaemonExpectedVersion, Yn as syncRuntimeEventToInflightTaskControlRegistry, Za as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Zn as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zr as renderInformationProtectionPrompt, Zt as removeMissingProjectConnections, _ as DaemonServiceLifecycleDrainTimeoutError, _a as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, _i as forkCodexAppServerThread, _n as listAgentRegistrations, _o as OPENMELD_VERSION, _r as resolveDispatchQueueLogMeta, _s as resolveAuthenticationReasonFromState, _t as readDaemonRouteCatalogCache, a as resolveServiceUpdateUrgency, aa as resolveCurrentOpenMeldAccountContext, ai as resolveCatalogSyncSkippedProfilesLogState, an as withAgentActivityDeliveryLock, ar as createLocalTaskInterruptSender, ba as classifyDaemonServiceRunStartability, bi as createUnavailableProviderUsageLimits, bn as readAgentRuntimeConfigHealth, bo as readDaemonActiveBundleState, br as resolveCompatibleConversationExecutionState, bs as formatOpenMeldCliCommands, bt as createMutableRouteCatalogState, ca as ensureDaemonSystemServiceCommandFiles, ci as parseOpenCodeGoUsageResponse, cn as syncDeviceRuntimeStateProjection, co as resolveOpenMeldEnvironmentTarget, cr as createInflightTaskControlRegistry, da as isOpenMeldManagedBinaryPath, di as GrokBuildAcpTransportError, dn as emitReconcileStartedEvidence, dr as MIN_HEARTBEAT_INTERVAL_MS, ds as buildHumanAuthenticationCard, er as createSerialAgentInteractionCallback, fa as buildDaemonServiceTargetSpec, fi as probeGrokBuildAcpInterface, fo as requestLocalDaemonShutdown, fr as applyAcceptedLeases, fs as createAuthenticationError, g as scheduleDaemonServiceUpdate, ga as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, gi as resolveInstalledCodexLaunchCandidates, gn as listAgentCustomTargets, go as readManagedCliInstallation, gr as resolveCatalogSyncIntervalMs, gt as slugifyOpenClawNamePart, hi as resolveCodexTimeoutMs, hn as createRegistrationFromCatalogTarget, hr as resolveAdaptiveHeartbeatIntervalMs, ht as normalizeOpenClawSpaceIdPrefix, i as writeOpenMeldToolsMaintenancePolicy, in as resolveLocalProjectConnectionForPath, io as clearAllSelectedOpenMeldProfileIds, ir as mergeOpenClawGatewayVisibility, j as resolveDaemonStatusAttention, ja as normalizeOptionalText$13, ji as resolveDaemonStopStrategy, jo as resolveRecentDaemonSignalStopCause, jr as settleInflightTask, jt as resolveCurrentEffectiveProfileWorkingFolderRuntime, k as formatDaemonFailureContextText, ka as normalizeHeartbeatIntervalMs, ki as hasActiveDaemonOwners, ko as readLatestDaemonLifecycleOriginEvent, kr as resolveConversationExecutionStateByLookupKey, la as extractDaemonCommandEntryPath, li as forkOpenCodeServerSession, ln as emitDriftDetectedEvidence, lo as resolveAuthBaseUrl, lr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ls as buildAuthenticationStatusLabel, ma as isVersionDowngrade, mi as projectCodexUsageLimits, mn as addAgentCustomTarget, mr as pruneStaleLeases, ms as resolveAuthenticationGuidance, mt as buildOpenClawSpaceSessionKey, n as readOpenMeldToolsMaintenancePolicy, no as resolveOpenMeldProfileOrNull, nr as normalizeDispatchPostMessageAction, o as assessServerRequiredVersion, oa as writeDaemonServiceContract, oi as createLocalAdapterContainer, on as withAgentActivityLocalStateLock, or as buildLocalServiceDiagnosticsPayload, pa as resolveDaemonServiceAlignmentDecision, pi as resolveInstalledGrokBuildLaunchCandidates, pn as resolveAgentProfilePrimaryAgentControllerReport, po as sendLocalDaemonControlPlaneRequest, pr as applyIntervalJitterMs, ps as extractAuthenticationPromptAction, pt as prepareProviderRuntime, q as buildDaemonServiceDependencyNextStep, qa as MAX_RECONNECT_DELAY_MS, qi as readDaemonRuntimeContractRepairReport, qt as listProjectBindings, r as resolveOpenMeldToolsMaintenanceProjection, rr as createPendingAgentInteractionRegistry, s as describeServerRequiredVersionUnavailableReason, sa as buildDaemonSystemServiceCommandSpec, si as createLocalAdapterEntries, sr as createLocalExecutionSlots, ss as readDaemonCatalogSyncSignal, t as createOpenMeldToolsUpdateCoordinator, ta as resolveRuntimeContext, tn as setDefaultProjectConnection, to as requireOpenMeldProfile, tr as buildDispatchReplyContextSummary, u as assessCliUpdate, ua as resolveDaemonBundleIdFromEntryPath, ui as resolveInstalledOpenCodeLaunchCandidates, un as emitReconcileCompletedEvidence, uo as LocalDaemonControlPlaneClientError, ur as MAX_HEARTBEAT_INTERVAL_MS, us as buildCommandAuthenticationPromptMessage$1, v as runDaemonServiceLifecycle, va as DAEMON_SERVICE_REPAIR_ANOMALIES, vi as verifyCodexAppServerThread, vn as listAgentTargetStates, vo as cleanupInactiveDaemonServiceBundles, vr as resolveDispatchContinuityObservation, vs as formatInlineOpenMeldCliCommands, vt as writeDaemonRouteCatalogCache, w as resolveSystemServiceStartupWaitMs, wa as resolveDaemonDeviceId, wi as materializeCliLaunchCommand, wn as resolveAgentTargetState, wr as buildTaskResultEnvelope, wt as syncDaemonRouteCatalogState, x as uninstallDaemonServiceUpdateWorker, xa as classifyDaemonServiceWakeability, xi as createUnsupportedProviderUsageLimits, xn as reconcileNewRunnableBuiltinAgentRegistrations, xo as resolveAlignedDaemonActiveBundleEntryPath, xr as resolveLatestScopedConversationExecutionState, xt as createRouteCatalogFromMutableState, y as ensureDaemonServiceMaintenanceInstalled, ya as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES, yi as resolveInstalledClaudeCodeLaunchCandidates, yn as manageAgentRegistrationInstallation, yo as prepareDaemonServiceBundle, yr as resolveCompatibleAgentContextMatch, ys as formatOpenMeldCliCommand, yt as resolveLocalServiceDemand, z as buildDaemonServiceUpdateRequiredNextStep, za as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, zi as resolveDaemonServiceManagerForRuntimeState, zn as sortAgentRegistrations, zr as buildInformationProtectionPromptPlan, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-DJ65uI3O.js";
-import { $r as agentActivitySessionInventoryResponseSchema, Ar as updateCenterAgentRoutineResponseSchema, Br as localProjectControlDiscoverProjectsResponseSchema, Cr as submitFeedbackIssueResponseSchema, Dr as listCenterAgentRoutinesResponseSchema, Er as listCenterAgentRoutineRunsResponseSchema, Fn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Gr as spaceMemberAgentWakeAvailabilitySchema, Jr as spaceMemberDirectorySchema, Kr as spaceMemberDirectoryAllowedRelationsSchema, Lr as agentActivitySnapshotResponseSchema, Mr as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, Nr as agentActivityEventSchema, Or as pauseCenterAgentRoutineResponseSchema, Pn as OPENMELD_HEADER_REQUEST_ID, Rn as getSpaceUpdatesResponseSchema, Rr as localProjectControlConnectionSchema, Sr as submitFeedbackIssueRequestSchema, Tn as DAEMON_STREAM_KEEPALIVE_PING, Tr as deleteCenterAgentRoutineResponseSchema, Tt as buildSpaceAttachmentDownloadPath, Vn as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Xn as submitAgentControllerTaskLifecycleEventItemSchema, Yr as spaceMemberKindSchema, _r as organizationSkillReleaseSummarySchema, ai as projectSchema, ar as OPENMELD_RUNTIME_CAPABILITIES_HEADER, br as organizationDirectoryResponseSchema, cr as computerFileAccessPolicySchema, di as toCompatibleSpaceAddressingRequestWireValue, fr as spaceCreatorSchema, hr as listOrganizationSkillsResponseSchema, ii as listProjectsResponseSchema, in as createSpaceApi, ir as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, jt as createAgentActivityApi, kr as resumeCenterAgentRoutineResponseSchema, mr as getOrganizationSkillResponseSchema, ni as archiveProjectResponseSchema, oi as updateProjectResponseSchema, or as computerFileAccessDaemonFrameSchema, pr as spaceMetaSchema, qr as spaceMemberDirectoryEntrySchema, ri as createProjectResponseSchema, rn as createRuntimeReportingApi, rr as gatewayErrorEnvelopeSchema, si as centerAgentToolSpeakerSchema, sr as computerFileAccessPolicyInputSchema, t as OpenMeldApiClientHttpError, ti as observedLocalAgentSessionSchema, ur as organizationSpaceDirectoryWithMemberCountsResponseSchema, vn as toStructuredApiClientFailure, vr as organizationSkillSummarySchema, wr as createCenterAgentRoutineResponseSchema, xr as organizationComputersResponseSchema, zn as spaceEntryTargetSchema, zr as localProjectControlDaemonFrameSchema } from "./dist-CkixulB-.js";
-import { A as runtimeTransportHeartbeatResponseSchema, B as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Bt as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, C as runtimeTransportDispatchPreviewRequestSchema, Di as localAgentReasoningPreferencesSchema, E as runtimeTransportDispatchToolActivityRequestSchema, Ei as OPENMELD_REASONING_STREAM_HEADER, F as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, G as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Gn as sanitizeSignalTextPreview, Gt as formatLocalComponentsSummaryDescription, H as runtimeTransportRegisterSessionResponseSchema, Ht as agentInteractionRequestSchema, I as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, Ii as normalizeOptionalWorkingDirectory, J as runtimeTransportSubmitTaskResultRequestSchema, Jr as boolean, Jt as formatLocalSetupActionLabel, K as runtimeTransportRouteCatalogChangedFramePayloadSchema, Kt as formatLocalComponentsSummaryLabel, L as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Li as openMeldRuntimeProfileIdSchema, M as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, N as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, O as runtimeTransportForkAgentSessionResultSchema, P as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, Qr as enumFactory, S as runtimeTransportDispatchPreviewEndRequestSchema, T as runtimeTransportDispatchRuntimeEvidenceRequestSchema, Ti as LOCAL_AGENT_REASONING_MAX_CHARS, Tt as openMeldDaemonControlPlaneResponseSchema, V as runtimeTransportRegisterSessionRequestSchema, W as runtimeTransportResumeControllerConversationFramePayloadSchema, Xr as discriminatedUnion, Xt as localCliComponentUpdateProjectionSchema, Yi as resolvePublicAgentAvailabilityCopy, Yt as installedLocalComponentsSnapshotSchema, Zi as sanitizeDispatchErrorSummary, _ as runtimeTransportDeliverDispatchRequestSchema, _n as normalizeSpacePasswordText, ar as collectCanonicalMentionTextFragments, at as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, b as runtimeTransportDispatchInteractionResponseFramePayloadSchema, ct as localFolderPickerHelperProtocolResultSchema, d as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, ei as iso, en as localServiceComponentUpdateProjectionSchema, h as localWakeRouteWorkingFolderObservationSchema, hi as url, hr as resolveSpaceMentionLabels, ir as MESSAGE_MENTION_TYPE_VALUES, it as openMeldSpaceEgressActionSchema, j as runtimeTransportLocalAgentControlCancelFramePayloadSchema, k as runtimeTransportHeartbeatRequestSchema, ki as openMeldRequestContextSchema, li as strictObject, lr as normalizeMessageEnvelope, lt as localFolderPickerHelperResultSchema, mn as runtimeTransportDeliveryExecutionIdentitySchema, mr as resolveSingleSpaceMentionLabels, ni as literal, nt as openMeldDaemonTaskResultPayloadSchema, ot as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, p as daemonStreamFrameSchema, pn as runtimeCoordinatorExecutionTokenEnvelopeSchema, qt as formatLocalSetupActionDescription, sr as getSpaceMessageAddressingRelationSupportForTargetKind, st as localFolderPickerDaemonFrameSchema, ui as string, ur as resolveMessageEnvelopeTargetField, v as runtimeTransportDispatchInteractionDeliveredRequestSchema, w as runtimeTransportDispatchReasoningRequestSchema, x as runtimeTransportDispatchLifecycleRequestSchema, y as runtimeTransportDispatchInteractionRequestSchema, z as runtimeTransportOpenMeldToolsControlFramePayloadSchema } from "./profiles-Dx3gaXgQ.js";
-import { b as hashBundledSkillAssets, f as ensureLocalSkills, g as loadSelectedSkillAssets, r as collectSkillsReadinessSnapshot, t as installSkillsToTargets, u as resolveSkillInstallStateForTarget, v as withSkillsInstallLock, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installer-CZyyvNZr.js";
+import { $i as buildDaemonServiceTargetSpec, $n as resolveRouteRegistrationReconcileDecision, $t as resolveProjectBindingForPath, A as resolveDaemonStatusSnapshot, Aa as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Ai as readCurrentDaemonOwnerSnapshot, An as resolveSkillsAgentRegistry, Ar as seedLegacyAgentContext, B as formatDaemonServiceRefreshReliabilityMessage, Ba as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Bn as repairBuiltinControllerInstall, Br as buildWorkingLanguagePromptPlan, C as isSystemServiceStartupTimeoutError, Ca as CATALOG_SYNC_RETRY_INTERVAL_MS, Ci as buildCliLaunchInvocation, Cn as removeAgentCustomTarget, Cr as buildRuntimeWorkspaceFingerprint, Ct as summarizeSkippedDaemonProfiles, D as captureDaemonServiceEvidence, Da as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, Di as buildDaemonOwnerSnapshotFromObservedState, Dn as updateAgentRegistrations, Dr as loadLedgerState, Dt as resolveLocalController, E as startDaemonSystemServiceWithAutoRepair, Ea as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, Ei as inspectDaemonServiceInventory, En as updateAgentCustomTarget, Er as commitResolvedAgentContext, Et as readLocalEnabledControllers, F as buildDaemonServiceRefreshNextStep, Fa as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Fr as buildAgentContextLookupKey, G as buildDaemonServiceDependencyDetails, Ga as clearAllSelectedOpenMeldProfileIds, Gi as resolveRuntimeContext, Gn as isNpmGlobalCommandPath, Gt as bindProject, Ha as requireOpenMeldProfile, Hn as resolveBuiltinAgentControllerDefinition, I as buildDaemonServiceRefreshPromptMessage, Ia as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Ii as ensureDaemonRuntimeContractState, In as normalizeAgentId, Ir as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, It as readProfileWorkspaceConfigForAccount, J as buildDaemonServiceDependencySummary, Jn as normalizeDispatchThreadAction, Jr as parseAgentControllerRef, Jt as listProjectConnectionsWithStatus, K as buildDaemonServiceDependencyMeaning, Kn as isPnpmGlobalCommandPath, Kt as isProjectBound, La as REGISTER_RESPONSE_TIMEOUT_MS, Li as readDaemonRuntimeContractRepairReport, Ln as normalizeAgentIds, Lr as areAgentControllerInterfaceAccountsSame, M as resolveDaemonStatusAuthenticationAttention, Ma as DEFAULT_RECONNECT_DELAY_MS, Mi as resolveStoppedContractWriteBlockedReason, Mr as upsertConversationExecutionState, Mt as resolveProfileWorkspaceRuntime, N as resolveServiceReadiness, Na as HEARTBEAT_RESPONSE_TIMEOUT_MS, Ni as summarizeDaemonOwnerSnapshot, Nn as resolveRegistryRuntimeAdapterCapabilitySnapshot, Nr as withLedgerStateTransaction, Nt as ensureOpenMeldManagedProfileWorkspace, O as captureDaemonServiceEvidenceBestEffort, Oa as DAEMON_RUNTIME_CONTRACT_EPOCH, Oi as formatDaemonOwnerSummaryLabel, On as canManageRegistryAgentSkillTargets, Or as removeConversationExecutionState, Ot as resolveLocalRuntimeControllerSupport, Pa as MAX_RECONNECT_DELAY_MS, Pn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Pr as buildAuthenticatedControlPlaneResponse, Qi as ensureDaemonSystemServiceCommandFiles, Qn as isDaemonReconcileInProgressError, Qr as renderWorkingLanguagePrompt, Qt as removeProjectConnection, R as buildDaemonServiceStatusReadOnlyDetail, Ra as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Ri as DaemonServiceRunError, Rn as parseAgentEnabledOption, Rr as buildAgentControllerRef, Rt as resolveConfiguredProfileWorkspacePathForAccount, S as isDaemonInventoryRunningAndStartReady$1, Sa as warnDaemonEvent, Sr as runRuntimeTask, St as loadDaemonRouteCatalog, T as waitForSystemServiceStartup$1, Ta as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Ti as createProviderOriginalError, Tn as setAgentRegistrationEnabled, Tr as appendLedgerHistoryEntry, Tt as buildRuntimeRouteTargets, U as clearDaemonStartFailureState, Ua as resolveOpenMeldProfileOrNull, Un as isBunGlobalCommandPath, Ut as ProjectBindingOperationError, V as formatDaemonServiceUpdateRequiredMessage, Vn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Vr as createAgentControllerInterfaceDisplayRows, W as writeDaemonStartFailureState, Wn as isHomebrewCommandPath, Wt as ProjectBindingStoreUpdateRequiredError, X as resolveDaemonServiceDependencyDiagnostics, Xi as writeDaemonServiceContract, Xn as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Xt as removeAgentActivityBindingsWhileDeliveryLocked, Y as buildDaemonServiceDependencyTitle, Yi as resolveCurrentOpenMeldAccountContext, Yn as syncRuntimeEventToInflightTaskControlRegistry, Zi as buildDaemonSystemServiceCommandSpec, Zn as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zr as renderInformationProtectionPrompt, Zt as removeMissingProjectConnections, _ as DaemonServiceLifecycleDrainTimeoutError, _a as normalizeNonNegativeInteger$1, _i as forkCodexAppServerThread, _n as listAgentRegistrations, _r as resolveDispatchQueueLogMeta, _t as readDaemonRouteCatalogCache, a as resolveServiceUpdateUrgency, aa as DAEMON_SERVICE_REPAIR_ANOMALIES, ai as resolveCatalogSyncSkippedProfilesLogState, an as withAgentActivityDeliveryLock, ar as createLocalTaskInterruptSender, ba as nowIsoString, bi as createUnavailableProviderUsageLimits, bn as readAgentRuntimeConfigHealth, br as resolveCompatibleConversationExecutionState, bt as createMutableRouteCatalogState, ca as classifyDaemonServiceWakeability, ci as parseOpenCodeGoUsageResponse, cn as syncDeviceRuntimeStateProjection, co as buildHumanAuthenticationCard, cr as createInflightTaskControlRegistry, da as resolveDaemonDeviceId, di as GrokBuildAcpTransportError, dn as emitReconcileStartedEvidence, do as resolveAuthenticationGuidance, dr as MIN_HEARTBEAT_INTERVAL_MS, ea as resolveDaemonServiceAlignmentDecision, er as createSerialAgentInteractionCallback, fa as resolvePreferredDaemonDeviceId, fi as probeGrokBuildAcpInterface, fr as applyAcceptedLeases, g as scheduleDaemonServiceUpdate, ga as normalizeHeartbeatIntervalMs, gi as resolveInstalledCodexLaunchCandidates, gn as listAgentCustomTargets, gr as resolveCatalogSyncIntervalMs, gt as slugifyOpenClawNamePart, ha as emitRunLine, hi as resolveCodexTimeoutMs, hn as createRegistrationFromCatalogTarget, ho as compareAgentControllerRefsForDisplay, hr as resolveAdaptiveHeartbeatIntervalMs, ht as normalizeOpenClawSpaceIdPrefix, i as writeOpenMeldToolsMaintenancePolicy, ia as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, in as resolveLocalProjectConnectionForPath, io as readDaemonCatalogSyncSignal, ir as mergeOpenClawGatewayVisibility, j as resolveDaemonStatusAttention, ja as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, ji as resolveDaemonStopStrategy, jr as settleInflightTask, jt as resolveCurrentEffectiveProfileWorkingFolderRuntime, k as formatDaemonFailureContextText, ka as DAEMON_STREAM_CONNECT_TIMEOUT_MS, ki as hasActiveDaemonOwners, kr as resolveConversationExecutionStateByLookupKey, la as buildLedgerPaths, li as forkOpenCodeServerSession, ln as emitDriftDetectedEvidence, lo as createAuthenticationError, lr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ma as dirnamePath, mi as projectCodexUsageLimits, mn as addAgentCustomTarget, mo as resolveAuthenticationReasonFromState, mr as pruneStaleLeases, mt as buildOpenClawSpaceSessionKey, n as readOpenMeldToolsMaintenancePolicy, nr as normalizeDispatchPostMessageAction, o as assessServerRequiredVersion, oa as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES, oi as createLocalAdapterContainer, on as withAgentActivityLocalStateLock, oo as buildAuthenticationStatusLabel, or as buildLocalServiceDiagnosticsPayload, pa as asRecord, pi as resolveInstalledGrokBuildLaunchCandidates, pn as resolveAgentProfilePrimaryAgentControllerReport, pr as applyIntervalJitterMs$1, pt as prepareProviderRuntime, q as buildDaemonServiceDependencyNextStep, qt as listProjectBindings, r as resolveOpenMeldToolsMaintenanceProjection, ra as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, rr as createPendingAgentInteractionRegistry, s as describeServerRequiredVersionUnavailableReason, sa as classifyDaemonServiceRunStartability, si as createLocalAdapterEntries, so as buildCommandAuthenticationPromptMessage$1, sr as createLocalExecutionSlots, t as createOpenMeldToolsUpdateCoordinator, ta as isVersionDowngrade, tn as setDefaultProjectConnection, tr as buildDispatchReplyContextSummary, u as assessCliUpdate, ua as ensureDaemonRuntimePaths, ui as resolveInstalledOpenCodeLaunchCandidates, un as emitReconcileCompletedEvidence, uo as extractAuthenticationPromptAction, ur as MAX_HEARTBEAT_INTERVAL_MS, v as runDaemonServiceLifecycle, va as normalizeOptionalText$13, vi as verifyCodexAppServerThread, vn as listAgentTargetStates, vr as resolveDispatchContinuityObservation, vt as writeDaemonRouteCatalogCache, w as resolveSystemServiceStartupWaitMs, wa as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, wi as materializeCliLaunchCommand, wn as resolveAgentTargetState, wr as buildTaskResultEnvelope, wt as syncDaemonRouteCatalogState, x as uninstallDaemonServiceUpdateWorker, xa as toErrorMessage$10, xi as createUnsupportedProviderUsageLimits, xn as reconcileNewRunnableBuiltinAgentRegistrations, xr as resolveLatestScopedConversationExecutionState, xt as createRouteCatalogFromMutableState, y as ensureDaemonServiceMaintenanceInstalled, ya as normalizeText$2, yi as resolveInstalledClaudeCodeLaunchCandidates, yn as manageAgentRegistrationInstallation, yr as resolveCompatibleAgentContextMatch, yt as resolveLocalServiceDemand, z as buildDaemonServiceUpdateRequiredNextStep, za as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, zi as resolveCurrentDaemonExpectedVersion, zn as sortAgentRegistrations, zr as buildInformationProtectionPromptPlan, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-D9Skj8IE.js";
+import { A as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Bt as localFolderPickerHelperProtocolResultSchema, C as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, D as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, E as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, En as resolveSpaceMentionLabels, F as runtimeTransportResumeControllerConversationResultFramePayloadSchema, I as runtimeTransportRouteCatalogChangedFramePayloadSchema, J as openMeldSpaceEgressActionSchema, K as openMeldDaemonTaskResultPayloadSchema, Kr as openMeldRequestContextSchema, Lt as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, M as runtimeTransportRegisterSessionResponseSchema, Ot as normalizeSpacePasswordText, P as runtimeTransportResumeControllerConversationFramePayloadSchema, R as runtimeTransportSubmitTaskResultRequestSchema, Rt as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, S as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Sr as sanitizeDispatchErrorSummary, T as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Tn as resolveSingleSpaceMentionLabels, Tt as runtimeTransportDeliveryExecutionIdentitySchema, Vt as localFolderPickerHelperResultSchema, a as localWakeRouteWorkingFolderObservationSchema, b as runtimeTransportHeartbeatResponseSchema, bn as normalizeMessageEnvelope, br as resolvePublicAgentAvailabilityCopy, c as runtimeTransportDispatchInteractionDeliveredRequestSchema, d as runtimeTransportDispatchLifecycleRequestSchema, f as runtimeTransportDispatchPreviewEndRequestSchema, fr as LOCAL_AGENT_REASONING_MAX_CHARS, g as runtimeTransportDispatchToolActivityRequestSchema, gn as collectCanonicalMentionTextFragments, gt as agentInteractionRequestSchema, h as runtimeTransportDispatchRuntimeEvidenceRequestSchema, hn as MESSAGE_MENTION_TYPE_VALUES, j as runtimeTransportRegisterSessionRequestSchema, k as runtimeTransportOpenMeldToolsControlFramePayloadSchema, l as runtimeTransportDispatchInteractionRequestSchema, m as runtimeTransportDispatchReasoningRequestSchema, mr as localAgentReasoningPreferencesSchema, mt as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, nn as sanitizeSignalTextPreview, p as runtimeTransportDispatchPreviewRequestSchema, pr as OPENMELD_REASONING_STREAM_HEADER, r as daemonStreamFrameSchema, s as runtimeTransportDeliverDispatchRequestSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, u as runtimeTransportDispatchInteractionResponseFramePayloadSchema, v as runtimeTransportForkAgentSessionResultSchema, vn as getSpaceMessageAddressingRelationSupportForTargetKind, w as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, wt as runtimeCoordinatorExecutionTokenEnvelopeSchema, x as runtimeTransportLocalAgentControlCancelFramePayloadSchema, xn as resolveMessageEnvelopeTargetField, y as runtimeTransportHeartbeatRequestSchema, zt as localFolderPickerDaemonFrameSchema } from "./runtime-transport-QIZmAo4-.js";
+import { $ as literal, C as formatLocalSetupActionDescription, E as localCliComponentUpdateProjectionSchema, G as boolean, S as formatLocalComponentsSummaryLabel, T as installedLocalComponentsSnapshotSchema, Y as enumFactory, Z as iso, a as openMeldDaemonControlPlaneResponseSchema, ft as url, gt as openMeldRuntimeProfileIdSchema, ht as normalizeOptionalWorkingDirectory, j as localServiceComponentUpdateProjectionSchema, ot as strictObject, q as discriminatedUnion, st as string, w as formatLocalSetupActionLabel, x as formatLocalComponentsSummaryDescription } from "./control-plane-D9jDcbMZ.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { _ as setAuthSession, a as beginAuthSessionTransition, b as isBinaryDistribution, i as assertAuthSessionMutationAvailable, l as getAuthSessionState, o as clearAuthSession, x as resolveOpenMeldDistribution } from "./auth-session-wmefguut.js";
-import { a as readDaemonLocalStateFile, i as writeDaemonRuntimeLease, o as writeDaemonLocalStateFile } from "./daemon-runtime-lease-CXlGR-iA.js";
-import { $ as buildAgentFacingMentalModelLines, At as validateDaemonControlTargetInput, Ft as getBuiltinAgentSelectionRequiredArguments, Gt as waitForOpenMeldToolsUpdateCompletion, Ht as formatAgentOverviewPayload, Jt as sanitizeTerminalDisplayText, Kt as resolveOpenMeldToolsUpdateOperation, Lt as validateBuiltinAgentSelectionInput, Mt as buildBuiltinAgentSelectionCommand, Nt as buildBuiltinAgentSelectionExamples, Pt as getBuiltinAgentSelectionOptionalArguments, Qt as outLine, Rt as buildAgentOverviewFromContract, Y as SPACE_COLLABORATION_CONTEXT_RULE, Z as SPACE_PERSONAL_CONTRIBUTION_RULE, Zt as outJsonLine, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceWakeParticipantLines, ct as deriveContinuity, d as formatDaemonServiceMissingStatus, dt as resolvePublicAgentFailureReason, f as getDaemonDowngradeBlockedTitle, ft as resolveSpacePublicationRequirement, h as createAuthLoginGuideError, i as formatDaemonInstallFailedMessage, it as buildSpaceEntryBriefNeedMoreLine, l as formatDaemonServiceMissingRunStepOne, lt as isSelfWakeSpaceAction, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, nt as buildCompactDispatchActionGuidanceLines, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, pt as getCommandEntryContract, qt as createPresenter, r as formatDaemonDowngradeBlockedNextStep, rt as buildSpaceAgentIdentityLine, s as formatDaemonServiceMissingMeaning, st as composeDispatchBrief, t as formatElapsedTime, tt as buildCenterAgentRoleTemplateText, u as formatDaemonServiceMissingRunStepTwo, ut as renderSpaceEntryBrief } from "./elapsed-time-CjAPqg-B.js";
-import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-jWXPssF_.js";
+import { C as withAdmittedServiceSession, T as ServiceAccountAdmissionError, _ as onAuthSessionCredentialObservation, a as beginAuthSessionTransition, g as onAuthSessionCredentialAvailable, i as assertAuthSessionMutationAvailable, s as clearAuthSession, u as getAuthSessionState, x as setAuthSession } from "./auth-session-CO5XtFaq.js";
+import { b as withSkillsInstallLock, f as ensureLocalSkills, g as loadSelectedSkillAssets, l as installSkillsToTargets, n as collectSkillsReadinessSnapshot, u as resolveSkillInstallStateForTarget, v as hashBundledSkillAssets, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installation-inventory-DJlwXa1q.js";
+import { n as resolveOpenMeldDistribution, o as serviceControlCapabilitiesSchema, t as isBinaryDistribution } from "./distribution-DY2fBeSW.js";
+import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-Dd4hdHNo.js";
+import { $ as readManagedCliInstallation, A as prepareDaemonServiceBundle, Bt as readDaemonServiceContract, H as formatDaemonLifecycleOriginSummary, It as sendLocalDaemonControlPlaneRequest, J as runWithDaemonLifecycleCommandJournal, K as resolveRecentDaemonSignalStopCause, Lt as clearDaemonServiceContract, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, Pt as requestLocalDaemonShutdown, Rt as isDaemonServiceContractIdentityReusable, U as readLatestDaemonLifecycleConnectionStateEvent, V as emitDaemonLifecycleEvent, Vt as upsertDaemonServiceContract, W as readLatestDaemonLifecycleOriginEvent, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, jt as LocalDaemonControlPlaneClientError, lt as compareSemver, n as getEffectiveDaemonRuntimeStatus, nt as OPENMELD_VERSION, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, q as runDaemonServiceManagerAction, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-DQW9gSLT.js";
+import { $ as buildAgentFacingMentalModelLines, At as validateDaemonControlTargetInput, Ft as getBuiltinAgentSelectionRequiredArguments, Gt as waitForOpenMeldToolsUpdateCompletion, Ht as formatAgentOverviewPayload, Jt as sanitizeTerminalDisplayText, Kt as resolveOpenMeldToolsUpdateOperation, Lt as validateBuiltinAgentSelectionInput, Mt as buildBuiltinAgentSelectionCommand, Nt as buildBuiltinAgentSelectionExamples, Pt as getBuiltinAgentSelectionOptionalArguments, Qt as outLine, Rt as buildAgentOverviewFromContract, Y as SPACE_COLLABORATION_CONTEXT_RULE, Z as SPACE_PERSONAL_CONTRIBUTION_RULE, Zt as outJsonLine, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceWakeParticipantLines, ct as deriveContinuity, d as formatDaemonServiceMissingStatus, dt as resolvePublicAgentFailureReason, f as getDaemonDowngradeBlockedTitle, ft as resolveSpacePublicationRequirement, h as createAuthLoginGuideError, i as formatDaemonInstallFailedMessage, it as buildSpaceEntryBriefNeedMoreLine, l as formatDaemonServiceMissingRunStepOne, lt as isSelfWakeSpaceAction, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, nt as buildCompactDispatchActionGuidanceLines, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, pt as getCommandEntryContract, qt as createPresenter, r as formatDaemonDowngradeBlockedNextStep, rt as buildSpaceAgentIdentityLine, s as formatDaemonServiceMissingMeaning, st as composeDispatchBrief, t as formatElapsedTime, tt as buildCenterAgentRoleTemplateText, u as formatDaemonServiceMissingRunStepTwo, ut as renderSpaceEntryBrief } from "./elapsed-time-CcoM2R3N.js";
+import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-C6sHRNGu.js";
+import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
+import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, d as daemonDispatchJournalPath, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-C37ZtIZK.js";
+import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-GiMCiTmu.js";
+import { a as formatOpenMeldCliCommand, c as formatOpenMeldCliTextBlock, f as resolveUserFacingCliEntryCommand, i as formatInlineOpenMeldCliCommands, o as formatOpenMeldCliCommands, r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-NtJYJe1D.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-Dt8kGvq8.js";
 import { n as toErrorMessage$11, t as sleep } from "./dist-o3UL1EGQ.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfileIdentity, f as deriveAuthBaseUrlFromGatewayUrl, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-BMPOo4bG.js";
-import { A as installDaemon, D as ensureDaemonControlPlaneToken, F as readDaemonServiceRuntimeSnapshot, G as withDaemonServiceRunLock, H as uninstallDaemon, I as releaseDaemonServiceLifecycleLock, K as withDaemonServiceStopLock, L as resolveDaemonControlPlaneEndpoint, R as resolveDaemonServiceRuntimeMetadata, U as withDaemonServiceReconcileLock, V as setDaemonServiceRuntimeState, W as withDaemonServiceRegistrationMutationLock, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, d as daemonLifecycleJournalPath, g as daemonRuntimeStateRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as isDaemonServiceRuntimeHeartbeatStale, k as getDaemonStatus, l as clearDaemonServiceRuntimeState, m as daemonRuntimeRootPath, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, u as daemonDispatchJournalPath, x as daemonServiceRepairJournalPath } from "./daemon-state-BwIoDq7_.js";
-import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-BVipiZwK.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, f as buildOpenMeldRequestContextFromProfileIdentity, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-DSurenul.js";
 import { createHash, randomUUID } from "node:crypto";
-import { homedir, loadavg } from "node:os";
+import { homedir, loadavg, tmpdir } from "node:os";
 import { basename, delimiter, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { access, appendFile, chmod, link, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { access, appendFile, chmod, link, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
 import { z } from "zod/v4";
 import { accessSync, appendFileSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, readFileSync, readSync, renameSync, watch, writeFileSync } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import pc from "picocolors";
 import { isDeepStrictEqual } from "node:util";
 import { createServer } from "node:net";
+import pc from "picocolors";
 import { forkSession } from "@anthropic-ai/claude-agent-sdk";
 import { createOpencodeClient } from "@opencode-ai/sdk/v2";
 import { cancel, confirm, isCancel, select } from "@clack/prompts";
@@ -37,6 +43,10 @@ import stringWidth from "string-width";
 import { Worker } from "node:worker_threads";
 import { createInterface } from "node:readline";
 import WebSocket from "ws";
+//#region ../../packages/schemas/dist/schemas/daemon/service-connection-correlation.js
+const SERVICE_CONNECTION_ID_QUERY_PARAMETER = "connectionId";
+z$1.uuid();
+//#endregion
 //#region ../../packages/schemas/dist/schemas/cli/daemon-status-server-requirement.js
 const cliVersionVerdictKindSchema = z$1.enum([
 	"aligned",
@@ -272,6 +282,7 @@ const cliJsonDaemonStatusEnvelopeSchema = defineSuccessEnvelope("daemon.status",
 	runtimeFlavor: z$1.enum(["binary", "node-bundle"]).optional(),
 	serverRequirement: daemonStatusServerRequirementSchema.optional()
 });
+const cliJsonServiceControlCapabilitiesEnvelopeSchema = defineSuccessEnvelope("service.control_capabilities", serviceControlCapabilitiesSchema.shape);
 const cliJsonDaemonStopEnvelopeSchema = defineSuccessEnvelope("daemon.stop", {});
 const cliJsonDaemonAutostartEnvelopeSchema = defineSuccessEnvelope("daemon.autostart", {
 	action: z$1.enum(["enable", "disable"]),
@@ -493,6 +504,7 @@ const cliJsonOutputEnvelopeSchema = z$1.discriminatedUnion("type", [
 	cliJsonDaemonUninstallEnvelopeSchema,
 	cliJsonDaemonReinstallEnvelopeSchema,
 	cliJsonDaemonStatusEnvelopeSchema,
+	cliJsonServiceControlCapabilitiesEnvelopeSchema,
 	cliJsonDaemonStopEnvelopeSchema,
 	cliJsonDaemonAutostartEnvelopeSchema,
 	cliJsonAgentsDetectEnvelopeSchema,
@@ -590,59 +602,6 @@ const runtimeReportingHealthStateSchema = z$1.strictObject({
 	providerConversationProof: runtimeReportingChannelHealthSchema
 });
 //#endregion
-//#region ../../packages/schemas/dist/schemas/http/auth-device-authorization.js
-const BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
-const betterAuthDeviceAuthorizationCodeRequestSchema = z$1.object({
-	client_id: z$1.string().min(1),
-	scope: z$1.string().optional(),
-	user_id: z$1.string().optional()
-});
-const betterAuthDeviceAuthorizationCodeResponseSchema = z$1.object({
-	device_code: z$1.string().min(1),
-	user_code: z$1.string().min(1),
-	verification_uri: z$1.string().min(1),
-	verification_uri_complete: z$1.string().min(1),
-	expires_in: z$1.number().finite().positive(),
-	interval: z$1.number().finite().positive()
-});
-const betterAuthDeviceAuthorizationStatusSchema = z$1.enum([
-	"pending",
-	"approved",
-	"denied"
-]);
-z$1.object({
-	user_code: z$1.string().min(1),
-	status: betterAuthDeviceAuthorizationStatusSchema
-});
-z$1.object({ userCode: z$1.string().min(1) });
-z$1.object({ success: z$1.boolean() });
-const betterAuthDeviceAuthorizationTokenRequestSchema = z$1.object({
-	grant_type: z$1.literal(BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE),
-	device_code: z$1.string().min(1),
-	client_id: z$1.string().min(1)
-});
-const betterAuthDeviceAuthorizationTokenResponseSchema = z$1.object({
-	access_token: z$1.string().min(1),
-	token_type: z$1.string().min(1),
-	expires_in: z$1.number().finite().positive(),
-	scope: z$1.string()
-});
-const betterAuthDeviceAuthorizationErrorResponseSchema = z$1.object({
-	error: z$1.string().optional(),
-	error_description: z$1.string().optional(),
-	message: z$1.string().optional(),
-	detail: z$1.string().optional()
-});
-const betterAuthSessionUserSnapshotSchema = z$1.object({
-	id: z$1.string().optional(),
-	email: z$1.string().optional(),
-	name: z$1.string().optional()
-});
-const betterAuthSessionSnapshotResponseSchema = z$1.nullable(z$1.object({
-	session: z$1.unknown().optional(),
-	user: betterAuthSessionUserSnapshotSchema.nullable()
-}));
-//#endregion
 //#region ../../packages/schemas/dist/schemas/runtime/agent-controller-session.js
 const agentControllerSessionTitleSchema = z$1.string().trim().min(1).max(120);
 //#endregion
@@ -7171,6 +7130,18 @@ const MAX_UPGRADE_REJECTION_BODY_BYTES = 2048;
 const UPGRADE_REJECTION_BODY_READ_TIMEOUT_MS = 1e3;
 const OPENMELD_REQUEST_ID_HEADER = "x-openmeld-request-id";
 const CLOUDFLARE_RAY_HEADER = "cf-ray";
+var WebSocketConnectionError = class extends Error {
+	kind;
+	status;
+	requestId;
+	constructor(message, kind, status, requestId) {
+		super(message);
+		this.name = "WebSocketConnectionError";
+		this.kind = kind;
+		this.status = status;
+		this.requestId = requestId;
+	}
+};
 async function connectWebSocket(url, input) {
 	return await new Promise((resolve, reject) => {
 		let settled = false;
@@ -7180,7 +7151,7 @@ async function connectWebSocket(url, input) {
 			if (settled) return;
 			settled = true;
 			ws.terminate();
-			reject(/* @__PURE__ */ new Error(`websocket open timeout after ${openTimeoutMs}ms`));
+			reject(new WebSocketConnectionError(`websocket open timeout after ${openTimeoutMs}ms`, "open_timeout"));
 		}, openTimeoutMs);
 		const closePromise = new Promise((r) => {
 			ws.on("close", () => r());
@@ -7190,7 +7161,7 @@ async function connectWebSocket(url, input) {
 			if (settled) return;
 			settled = true;
 			if (openTimeout) clearTimeout(openTimeout);
-			reject(/* @__PURE__ */ new Error(`websocket closed before open (code=${String(code)}, reason=${reason.toString("utf8")})`));
+			reject(new WebSocketConnectionError(`websocket closed before open (code=${String(code)}, reason=${reason.toString("utf8")})`, "closed_before_open"));
 		});
 		if (!isBunRuntime()) ws.on("unexpected-response", (_request, response) => {
 			if (settled) return;
@@ -7244,14 +7215,13 @@ async function buildWebSocketUpgradeRejectedError(response) {
 	const body = await readBodyExcerpt(response);
 	const requestId = readHeaderValue(response, OPENMELD_REQUEST_ID_HEADER) ?? readRequestIdFromJsonBody(body.excerpt);
 	const cfRay = readHeaderValue(response, CLOUDFLARE_RAY_HEADER);
-	const fields = [
+	return new WebSocketConnectionError(`daemon stream upgrade rejected (${[
 		`status=${String(response.statusCode ?? "unknown")}`,
 		...response.statusMessage ? [`statusText=${JSON.stringify(response.statusMessage)}`] : [],
 		...requestId ? [`requestId=${JSON.stringify(requestId)}`] : [],
 		...cfRay ? [`cfRay=${JSON.stringify(cfRay)}`] : [],
 		...body.excerpt ? [`bodyExcerpt=${JSON.stringify(body.excerpt)}${body.truncated ? " bodyTruncated=true" : ""}`] : []
-	];
-	return /* @__PURE__ */ new Error(`daemon stream upgrade rejected (${fields.join(", ")})`);
+	].join(", ")})`, "upgrade_rejected", response.statusCode, requestId ?? void 0);
 }
 function readBodyExcerpt(response) {
 	return new Promise((resolve) => {
@@ -7778,6 +7748,7 @@ function resolveControlPlaneErrorCode(error) {
 const DAEMON_DISPATCH_EVENT_TYPES = [
 	"dispatch.deliver.received",
 	"dispatch.local.phase",
+	"dispatch.reply_reconsideration",
 	"dispatch.lifecycle.sent",
 	"dispatch.lifecycle.send_failed",
 	"dispatch.result.queued",
@@ -12831,6 +12802,275 @@ function collectErrorMessages(error) {
 	return [...new Set(messages)];
 }
 //#endregion
+//#region src/local-service/lifecycle/service-connection-evidence.ts
+const LOCAL_RETENTION_MS = 10080 * 6e4;
+const MAX_JOURNAL_BYTES = 1024 * 1024;
+const MAX_PENDING_EVENT_WRITES = 128;
+function createServiceConnectionEvidenceRecorder(input) {
+	const ownerKey = createHash("sha256").update(input.ownerUserId).digest("hex");
+	const path = join(daemonRuntimeStateRootPath(), `connection-evidence-${ownerKey}.json`);
+	const send = input.sendIncident ?? createServiceConnectionEvidenceApi(createCliApiClientFoundation(input.gatewayUrl, { expectedOwnerUserId: input.ownerUserId })).report;
+	let journal = null;
+	let writes = Promise.resolve();
+	let prelude = [];
+	let online = false;
+	let disposed = false;
+	let uploading = false;
+	let failureCount = 0;
+	let uploadTimer = null;
+	let pendingEventWrites = 0;
+	const truncatedRecoveryIds = /* @__PURE__ */ new Set();
+	let writeFailureReported = false;
+	function mutate(update) {
+		writes = writes.then(async () => {
+			journal ??= await readDaemonLocalStateFile({
+				path,
+				schema: serviceConnectionEvidenceJournalSchema
+			}) ?? {
+				v: 1,
+				entries: []
+			};
+			update(journal);
+			journal.entries = journal.entries.filter((entry) => entry.incident.endedAtMs >= Date.now() - LOCAL_RETENTION_MS);
+			while (journal.entries.length > 32 || Buffer.byteLength(JSON.stringify(journal, null, 2), "utf8") + 1 > MAX_JOURNAL_BYTES) journal.entries.shift();
+			await writeDaemonLocalStateFile({
+				path,
+				value: journal,
+				schema: serviceConnectionEvidenceJournalSchema,
+				mode: 384
+			});
+			writeFailureReported = false;
+		}).catch(() => {
+			if (!writeFailureReported) {
+				writeFailureReported = true;
+				console.warn("[openmeld:connection-evidence] Local connection history could not be saved.");
+			}
+		});
+		return writes;
+	}
+	function scheduleUpload(delayMs = 0) {
+		if (disposed || !online || uploading || uploadTimer) return;
+		uploadTimer = setTimeout(() => {
+			uploadTimer = null;
+			uploadPending().catch(() => void 0);
+		}, delayMs);
+		uploadTimer.unref();
+	}
+	async function uploadPending() {
+		if (!online || disposed || uploading) return;
+		uploading = true;
+		try {
+			await mutate(() => void 0);
+			const entry = journal?.entries.find((item) => item.uploadedAtMs === null && (item.incident.outcome === "recovered" || item.incident.serviceSessionId !== input.identity.serviceSessionId));
+			if (!entry) return;
+			const receipt = await send({
+				uploaderServiceSessionId: input.identity.serviceSessionId,
+				incident: entry.incident
+			});
+			if (receipt.incidentId !== entry.incident.incidentId) throw new Error("connection_incident_receipt_mismatch");
+			await mutate((state) => {
+				const saved = state.entries.find((item) => item.incident.incidentId === receipt.incidentId);
+				if (saved) saved.uploadedAtMs = receipt.receivedAtMs;
+			});
+			failureCount = 0;
+		} catch {
+			failureCount += 1;
+		} finally {
+			uploading = false;
+			if (journal?.entries.some((item) => item.uploadedAtMs === null && (item.incident.outcome === "recovered" || item.incident.serviceSessionId !== input.identity.serviceSessionId))) scheduleUpload(failureCount ? Math.min(15 * 6e4, 3e4 * 2 ** Math.min(failureCount - 1, 5)) : 1e3);
+		}
+	}
+	function record(inputEvent) {
+		if (disposed) return;
+		const parsed = serviceConnectionEvidenceEventSchema.safeParse(inputEvent.event);
+		if (!parsed.success) return;
+		const event = parsed.data;
+		if (!inputEvent.recovery) {
+			prelude = [...prelude, event].filter((item) => item.lastAtMs >= event.lastAtMs - 5 * 6e4).slice(-10);
+			return;
+		}
+		const recovery = inputEvent.recovery;
+		if (pendingEventWrites >= MAX_PENDING_EVENT_WRITES) {
+			if (truncatedRecoveryIds.size < 32) truncatedRecoveryIds.add(recovery.recoveryId);
+			return;
+		}
+		const precedingEvents = prelude;
+		prelude = [];
+		pendingEventWrites += 1;
+		mutate((state) => {
+			let entry = state.entries.find((item) => item.incident.incidentId === recovery.recoveryId);
+			if (!entry) {
+				entry = {
+					uploadedAtMs: null,
+					incident: {
+						v: 1,
+						...input.identity,
+						incidentId: recovery.recoveryId,
+						startedAtMs: recovery.disconnectedAt,
+						endedAtMs: Math.max(recovery.disconnectedAt, event.lastAtMs),
+						outcome: "interrupted",
+						evidenceTruncated: false,
+						events: precedingEvents
+					}
+				};
+				state.entries.push(entry);
+			}
+			const incident = entry.incident;
+			if (truncatedRecoveryIds.delete(recovery.recoveryId)) incident.evidenceTruncated = true;
+			appendEvent(incident, event);
+			incident.endedAtMs = Math.max(incident.endedAtMs, event.lastAtMs);
+			if (event.kind === "registered" && event.reason === "recovered") incident.outcome = "recovered";
+		}).then(() => scheduleUpload()).finally(() => {
+			pendingEventWrites -= 1;
+		}).catch(() => void 0);
+	}
+	return {
+		record,
+		setOnline(value) {
+			if (online === value) return;
+			online = value;
+			if (uploadTimer) {
+				clearTimeout(uploadTimer);
+				uploadTimer = null;
+			}
+			if (value) scheduleUpload();
+		},
+		flush: () => writes,
+		dispose() {
+			disposed = true;
+			online = false;
+			if (uploadTimer) {
+				clearTimeout(uploadTimer);
+				uploadTimer = null;
+			}
+		}
+	};
+}
+function appendEvent(incident, event) {
+	const previous = incident.events.at(-1);
+	if (previous && previous.kind === event.kind && previous.reason === event.reason && previous.phase === event.phase && previous.connectionId === event.connectionId && previous.nativeErrorCode === event.nativeErrorCode && previous.closeCode === event.closeCode) incident.events[incident.events.length - 1] = {
+		...event,
+		firstAtMs: previous.firstAtMs,
+		count: Math.min(1e7, previous.count + event.count)
+	};
+	else incident.events.push(event);
+	if (incident.events.length > 100) {
+		incident.events.splice(10, incident.events.length - 100);
+		incident.evidenceTruncated = true;
+	}
+}
+function readServiceConnectionFailureEvidence(error) {
+	const code = typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
+	const nativeCode = serviceConnectionEvidenceEventSchema.shape.nativeErrorCode.safeParse(code);
+	const requestId = serviceConnectionEvidenceEventSchema.shape.requestId.safeParse(error instanceof WebSocketConnectionError ? error.requestId : void 0);
+	let reason = "unknown";
+	if (error instanceof WebSocketConnectionError) {
+		if (error.kind === "open_timeout") reason = "open_timeout";
+		else if (error.kind === "closed_before_open") reason = "socket_closed";
+		else if (error.status === 401) reason = "auth_rejected";
+	}
+	return {
+		reason,
+		...nativeCode.success && nativeCode.data ? { nativeErrorCode: nativeCode.data } : {},
+		...requestId.success && requestId.data ? { requestId: requestId.data } : {}
+	};
+}
+//#endregion
+//#region src/local-service/lifecycle/service-connection-evidence-observer.ts
+function createServiceConnectionEvidenceObserver(input) {
+	const recorder = createServiceConnectionEvidenceRecorder(input);
+	let connectionId = randomUUID();
+	let phase = "credentials";
+	let lastHeartbeatAckAtMs;
+	let attemptStartedAtMs = Date.now();
+	let retryDueAtMs;
+	const record = (event) => {
+		const atMs = Date.now();
+		recorder.record({
+			recovery: input.getRecovery(),
+			event: {
+				...event,
+				connectionId,
+				phase,
+				firstAtMs: atMs,
+				lastAtMs: atMs,
+				count: 1,
+				...lastHeartbeatAckAtMs === void 0 ? {} : { lastHeartbeatAckAtMs }
+			}
+		});
+	};
+	return {
+		get connectionDiagnosticId() {
+			return connectionId;
+		},
+		beginAttempt() {
+			connectionId = randomUUID();
+			phase = "credentials";
+			attemptStartedAtMs = Date.now();
+			record({
+				kind: "connecting",
+				reason: "unknown",
+				...retryDueAtMs === void 0 ? {} : { eventLoopDelayMs: Math.max(0, attemptStartedAtMs - retryDueAtMs) }
+			});
+			retryDueAtMs = void 0;
+		},
+		opening() {
+			phase = "opening";
+		},
+		opened(socket) {
+			phase = "registering";
+			record({
+				kind: "transport_open",
+				reason: "unknown"
+			});
+			const openedId = connectionId;
+			socket.onClose((closeCode) => {
+				if (openedId === connectionId) record({
+					kind: "disconnected",
+					reason: input.isStopping() ? "stopped" : "socket_closed",
+					closeCode
+				});
+			});
+		},
+		acknowledged(heartbeatAt, transitioned) {
+			const timestamp = Date.parse(heartbeatAt);
+			if (Number.isFinite(timestamp)) lastHeartbeatAckAtMs = timestamp;
+			phase = "online";
+			if (transitioned) record({
+				kind: "registered",
+				reason: "recovered",
+				durationMs: Math.max(0, Date.now() - (input.getRecovery()?.disconnectedAt ?? attemptStartedAtMs))
+			});
+			recorder.setOnline(true);
+		},
+		retry(error, connectionReason, backoffMs) {
+			recorder.setOnline(false);
+			const evidence = readServiceConnectionFailureEvidence(error);
+			const reason = connectionReason === "auth_unavailable" || connectionReason === "auth_rejected" ? connectionReason : evidence.reason;
+			record({
+				kind: "disconnected",
+				...evidence,
+				reason,
+				durationMs: Math.max(0, Date.now() - attemptStartedAtMs)
+			});
+			phase = "waiting";
+			retryDueAtMs = Date.now() + backoffMs;
+			record({
+				kind: "retry_scheduled",
+				reason,
+				retryAtMs: retryDueAtMs
+			});
+		},
+		credential(reason) {
+			record({
+				kind: "credential_cache",
+				reason
+			});
+		},
+		dispose: recorder.dispose
+	};
+}
+//#endregion
 //#region src/agents/controller-version-channel.ts
 const LATEST_VERSION_TIMEOUT_MS = 4e3;
 const LATEST_VERSION_CACHE_TTL_MS = 3600 * 1e3;
@@ -13415,12 +13655,13 @@ async function probeOpenCodeReadiness(input) {
 	let server = null;
 	try {
 		server = await startOpenCodeProbeServer({
+			workingDirectory: input.workingDirectory,
 			launchContract: input.launchContract,
 			timeoutMs: input.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS
 		});
 		const providerListResult = await rejectAfterTimeout(createOpencodeClient({
 			baseUrl: server.url,
-			directory: process.cwd(),
+			directory: input.workingDirectory,
 			throwOnError: true
 		}).provider.list(), SDK_READ_TIMEOUT_MS, `Timed out while reading OpenCode provider status after ${SDK_READ_TIMEOUT_MS}ms.`);
 		const readiness = resolveOpenCodeReadinessFromProviderList(providerListResult.data);
@@ -13510,7 +13751,7 @@ async function startOpenCodeProbeServer(input) {
 	});
 	return new Promise((resolve, reject) => {
 		const child = spawn(invocation.bin, invocation.args, {
-			cwd: process.cwd(),
+			cwd: input.workingDirectory,
 			detached: process.platform !== "win32",
 			env: process.env,
 			shell: invocation.shell ?? false,
@@ -13758,6 +13999,19 @@ function toErrorMessage$5(error) {
 	return message.length > 0 ? message : "unknown error";
 }
 //#endregion
+//#region src/local-service/inventory/probe-working-directory.ts
+async function withProbeWorkingDirectory(probe) {
+	const workingDirectory = await mkdtemp(join(tmpdir(), "openmeld-inventory-"));
+	try {
+		return await probe(await realpath(workingDirectory));
+	} finally {
+		await rm(workingDirectory, {
+			force: true,
+			recursive: true
+		});
+	}
+}
+//#endregion
 //#region src/local-service/inventory/runtime-provider-usage-limits.ts
 async function recordRuntimeProviderUsageLimits(input) {
 	const commandPath = resolveLaunchContractCommandPath(input.launchContract);
@@ -13798,11 +14052,12 @@ const CONTROLLER_INTERFACE_SNAPSHOT_RESOLVERS = {
 };
 async function probeAgentControllerUsageObservationAuth(input) {
 	if (input.agentId !== "claude-code") return { status: "unknown" };
-	return resolveClaudeAuthSnapshot(await runLaunchContractCommand({
+	return resolveClaudeAuthSnapshot(await withProbeWorkingDirectory((workingDirectory) => runLaunchContractCommand({
+		workingDirectory,
 		allowNonZeroExit: true,
 		args: ["auth", "status"],
 		launchContract: input.launchContract
-	}));
+	})));
 }
 async function resolveAgentControllerInterfaceSnapshot(input) {
 	const checkedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -13866,10 +14121,12 @@ async function resolveAgentControllerInterfaceSnapshot(input) {
 		});
 		if (reusableSnapshot) return reusableSnapshot;
 	}
-	const outcome = await snapshotResolver({
+	const launchContract = input.state.launchContract;
+	const outcome = await withProbeWorkingDirectory((workingDirectory) => snapshotResolver({
 		baseSnapshot,
-		launchContract: input.state.launchContract
-	});
+		launchContract,
+		workingDirectory
+	}));
 	const commandFingerprintAfterProbe = await resolveAgentControllerCommandFingerprint({
 		commandPath,
 		launchContractKind
@@ -14077,7 +14334,7 @@ function parseSemverCore(value) {
 	];
 }
 async function resolveCodexInterfaceSnapshot(input) {
-	const appServerProbe = await probeCodexAppServer(input.launchContract);
+	const appServerProbe = await probeCodexAppServer(input.launchContract, input.workingDirectory);
 	if (appServerProbe.ok) {
 		const version = appServerProbe.version ?? input.baseSnapshot.version;
 		return {
@@ -14101,6 +14358,7 @@ async function resolveCodexInterfaceSnapshot(input) {
 		};
 	}
 	const versionProbe = await runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	});
@@ -14123,9 +14381,11 @@ async function resolveCodexInterfaceSnapshot(input) {
 }
 async function resolveClaudeCodeInterfaceSnapshot(input) {
 	const [versionProbe, authProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: true,
 		args: [
 			"auth",
@@ -14164,9 +14424,11 @@ async function resolveClaudeCodeInterfaceSnapshot(input) {
 }
 async function resolveCursorInterfaceSnapshot(input) {
 	const [versionProbe, authProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: true,
 		args: [
 			"status",
@@ -14205,11 +14467,12 @@ async function resolveCursorInterfaceSnapshot(input) {
 }
 async function resolveGrokBuildInterfaceSnapshot(input) {
 	const [versionProbe, interfaceProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--no-auto-update", "version"],
 		launchContract: input.launchContract
 	}), probeGrokBuildAcpInterface({
 		grokBuildTimeoutMs: PROBE_TIMEOUT_MS,
-		grokBuildWorkdir: process.cwd(),
+		grokBuildWorkdir: input.workingDirectory,
 		launchContract: input.launchContract
 	}).then((result) => ({
 		ok: true,
@@ -14261,9 +14524,11 @@ async function resolveGrokBuildInterfaceSnapshot(input) {
 }
 async function resolveOpenClawInterfaceSnapshot(input) {
 	const [versionProbe, authProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: true,
 		args: [
 			"models",
@@ -14294,9 +14559,11 @@ async function resolveOpenClawInterfaceSnapshot(input) {
 }
 async function resolveOpenCodeInterfaceSnapshot(input) {
 	const [versionProbe, readinessProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), probeOpenCodeReadiness({
+		workingDirectory: input.workingDirectory,
 		launchContract: input.launchContract,
 		timeoutMs: PROBE_TIMEOUT_MS
 	})]);
@@ -14326,6 +14593,7 @@ function runLaunchContractCommand(input) {
 		launchContract: input.launchContract
 	});
 	return runCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: input.allowNonZeroExit,
 		args: invocation.args,
 		bin: invocation.bin,
@@ -14336,7 +14604,7 @@ function runLaunchContractCommand(input) {
 function runCommand(input) {
 	return new Promise((resolve) => {
 		const child = spawn(input.bin, input.args, {
-			cwd: process.cwd(),
+			cwd: input.workingDirectory,
 			env: process.env,
 			shell: input.shell ?? false,
 			stdio: [
@@ -14402,7 +14670,7 @@ function runCommand(input) {
 		});
 	});
 }
-function probeCodexAppServer(launchContract) {
+function probeCodexAppServer(launchContract, workingDirectory) {
 	const invocation = buildCliLaunchInvocation({
 		args: [
 			"app-server",
@@ -14413,7 +14681,7 @@ function probeCodexAppServer(launchContract) {
 	});
 	return new Promise((resolve) => {
 		const child = spawn(invocation.bin, invocation.args, {
-			cwd: process.cwd(),
+			cwd: workingDirectory,
 			env: process.env,
 			shell: invocation.shell ?? false,
 			stdio: [
@@ -14504,6 +14772,7 @@ function probeCodexAppServer(launchContract) {
 			});
 		});
 		runCodexAppServerProbeRequests({
+			workingDirectory,
 			clearProbeTimeout: () => {
 				clearTimeout(timeout);
 			},
@@ -14528,7 +14797,7 @@ async function runCodexAppServerProbeRequests(input) {
 		}
 	});
 	input.notify("initialized", {});
-	const skillsPromise = input.request("skills/list", { cwds: [process.cwd()] }).catch(() => null);
+	const skillsPromise = input.request("skills/list", { cwds: [input.workingDirectory] }).catch(() => null);
 	const modelsPromise = requestAllCodexModels(input.request).catch(() => []);
 	const usageLimitsPromise = input.request("account/rateLimits/read", null).then((response) => projectCodexUsageLimits({
 		observedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -14979,8 +15248,7 @@ async function submitRuntimeAgentControllerReports(input) {
 		failure: {
 			authenticationRejected: false,
 			message: "OpenMeld Service contract is unavailable.",
-			reasonCode: "runtime.reporting.service_contract_unavailable",
-			requiresCarrierHandshake: false
+			reasonCode: "runtime.reporting.service_contract_unavailable"
 		},
 		onAttempt: input.onAttempt,
 		submissions: unavailableSubmissions({
@@ -14991,13 +15259,12 @@ async function submitRuntimeAgentControllerReports(input) {
 	});
 	const authCompatibility = await resolveRuntimeReportingAuthCompatibility(serviceContract.gatewayUrl);
 	if (authCompatibility.status === "unavailable") {
-		const reasonCode = `runtime.reporting.auth_${authCompatibility.authState}`;
+		const reasonCode = `runtime.reporting.${authCompatibility.reasonCode ?? `auth_${authCompatibility.authState}`}`;
 		return await finishRuntimeAgentControllerReportingAttempt({
 			failure: {
 				authenticationRejected: false,
 				message: `Local authentication is ${authCompatibility.authState}.`,
-				reasonCode,
-				requiresCarrierHandshake: authCompatibility.authState !== "error"
+				reasonCode
 			},
 			onAttempt: input.onAttempt,
 			submissions: failedSubmissions({
@@ -15012,8 +15279,7 @@ async function submitRuntimeAgentControllerReports(input) {
 		failure: {
 			authenticationRejected: false,
 			message: "The local authentication session does not match the reporting Gateway.",
-			reasonCode: "runtime.reporting.auth_gateway_mismatch",
-			requiresCarrierHandshake: false
+			reasonCode: "runtime.reporting.auth_gateway_mismatch"
 		},
 		onAttempt: input.onAttempt,
 		submissions: failedSubmissions({
@@ -15025,8 +15291,11 @@ async function submitRuntimeAgentControllerReports(input) {
 			reasonCode: "runtime.reporting.auth_gateway_mismatch"
 		})
 	});
+	let credentialFingerprint;
 	try {
-		const api = createRuntimeReportingApi(createCliApiClientFoundation(serviceContract.gatewayUrl));
+		const api = createRuntimeReportingApi(createCliApiClientFoundation(serviceContract.gatewayUrl, { onAuthHeadersResolved: (headers) => {
+			credentialFingerprint = headers.Authorization ? fingerprintRequestAuthorization(headers.Authorization) : void 0;
+		} }));
 		const registration = await api.submitRegistration({
 			deviceId: serviceContract.deviceId,
 			lane: serviceContract.lane
@@ -15037,8 +15306,7 @@ async function submitRuntimeAgentControllerReports(input) {
 				failure: {
 					authenticationRejected: false,
 					message: `Runtime registration was rejected: ${registration.reason ?? "rejected"}.`,
-					reasonCode,
-					requiresCarrierHandshake: false
+					reasonCode
 				},
 				onAttempt: input.onAttempt,
 				submissions: failedSubmissions({
@@ -15075,6 +15343,7 @@ async function submitRuntimeAgentControllerReports(input) {
 		});
 	} catch (error) {
 		const failure = resolveRuntimeReportingWriteFailure({
+			credentialFingerprint,
 			error,
 			reasonCodePrefix: "runtime.reporting"
 		});
@@ -15104,8 +15373,7 @@ async function submitRuntimeProviderConversationProofs(input) {
 			failure: {
 				authenticationRejected: false,
 				message: "OpenMeld Service contract is unavailable.",
-				reasonCode,
-				requiresCarrierHandshake: false
+				reasonCode
 			},
 			onAttempt: input.onAttempt,
 			submissions: unavailableProviderConversationProofSubmissions({
@@ -15117,13 +15385,12 @@ async function submitRuntimeProviderConversationProofs(input) {
 	}
 	const authCompatibility = await resolveRuntimeReportingAuthCompatibility(serviceContract.gatewayUrl);
 	if (authCompatibility.status === "unavailable") {
-		const reasonCode = `provider_conversation.runtime_reporting.auth_${authCompatibility.authState}`;
+		const reasonCode = `provider_conversation.runtime_reporting.${authCompatibility.reasonCode ?? `auth_${authCompatibility.authState}`}`;
 		return await finishProviderConversationProofReportingAttempt({
 			failure: {
 				authenticationRejected: false,
 				message: `Local authentication is ${authCompatibility.authState}.`,
-				reasonCode,
-				requiresCarrierHandshake: authCompatibility.authState !== "error"
+				reasonCode
 			},
 			onAttempt: input.onAttempt,
 			submissions: failedProviderConversationProofSubmissions({
@@ -15140,8 +15407,7 @@ async function submitRuntimeProviderConversationProofs(input) {
 			failure: {
 				authenticationRejected: false,
 				message: "The local authentication session does not match the reporting Gateway.",
-				reasonCode,
-				requiresCarrierHandshake: false
+				reasonCode
 			},
 			onAttempt: input.onAttempt,
 			submissions: failedProviderConversationProofSubmissions({
@@ -15154,8 +15420,11 @@ async function submitRuntimeProviderConversationProofs(input) {
 			})
 		});
 	}
+	let credentialFingerprint;
 	try {
-		const api = createRuntimeReportingApi(createCliApiClientFoundation(serviceContract.gatewayUrl));
+		const api = createRuntimeReportingApi(createCliApiClientFoundation(serviceContract.gatewayUrl, { onAuthHeadersResolved: (headers) => {
+			credentialFingerprint = headers.Authorization ? fingerprintRequestAuthorization(headers.Authorization) : void 0;
+		} }));
 		const registration = await api.submitRegistration({
 			deviceId: serviceContract.deviceId,
 			lane: serviceContract.lane
@@ -15166,8 +15435,7 @@ async function submitRuntimeProviderConversationProofs(input) {
 				failure: {
 					authenticationRejected: false,
 					message: `Runtime registration was rejected: ${registration.reason ?? "rejected"}.`,
-					reasonCode,
-					requiresCarrierHandshake: false
+					reasonCode
 				},
 				onAttempt: input.onAttempt,
 				submissions: failedProviderConversationProofSubmissions({
@@ -15196,6 +15464,7 @@ async function submitRuntimeProviderConversationProofs(input) {
 		});
 	} catch (error) {
 		const failure = resolveRuntimeReportingWriteFailure({
+			credentialFingerprint,
 			error,
 			reasonCodePrefix: "provider_conversation.runtime_reporting"
 		});
@@ -15223,11 +15492,11 @@ async function finishRuntimeAgentControllerReportingAttempt(input) {
 		reasonCodes: failedSubmission.reasonCodes
 	}) : null);
 	await notifyRuntimeReportingAttemptObserver(input.onAttempt, {
+		...failure?.credentialFingerprint ? { credentialFingerprint: failure.credentialFingerprint } : {},
 		authenticationRejected: failure?.authenticationRejected ?? false,
 		family: "runtime_agent_controller",
 		message: failure?.message ?? null,
 		reasonCode: failure?.reasonCode ?? null,
-		requiresCarrierHandshake: failure?.requiresCarrierHandshake ?? false,
 		status: failure ? "failed" : "succeeded"
 	});
 	return input.submissions;
@@ -15239,11 +15508,11 @@ async function finishProviderConversationProofReportingAttempt(input) {
 		reasonCodes: failedSubmission.reasonCodes
 	}) : null);
 	await notifyRuntimeReportingAttemptObserver(input.onAttempt, {
+		...failure?.credentialFingerprint ? { credentialFingerprint: failure.credentialFingerprint } : {},
 		authenticationRejected: failure?.authenticationRejected ?? false,
 		family: "provider_conversation_proof",
 		message: failure?.message ?? null,
 		reasonCode: failure?.reasonCode ?? null,
-		requiresCarrierHandshake: failure?.requiresCarrierHandshake ?? false,
 		status: failure ? "failed" : "succeeded"
 	});
 	return input.submissions;
@@ -15253,22 +15522,21 @@ function buildSubmissionFailure(input) {
 	return {
 		authenticationRejected: false,
 		message: `Runtime reporting failed: ${reasonCode}.`,
-		reasonCode,
-		requiresCarrierHandshake: false
+		reasonCode
 	};
 }
 function resolveRuntimeReportingWriteFailure(input) {
 	const failure = toStructuredApiClientFailure(input.error);
-	const authenticationRejected = failure.status === 401 || failure.code === "auth.unauthenticated" || failure.message.toLowerCase().includes("authentication required");
+	const authenticationRejected = failure.status === 401 || failure.status === null && failure.code === "auth.unauthenticated";
 	return {
+		...authenticationRejected && input.credentialFingerprint ? { credentialFingerprint: input.credentialFingerprint } : {},
 		authenticationRejected,
 		message: resolveSafeRuntimeReportingFailureMessage({
 			authenticationRejected,
 			message: failure.message,
 			status: failure.status
 		}),
-		reasonCode: `${input.reasonCodePrefix}.${authenticationRejected ? "authentication_required" : "write_failed"}`,
-		requiresCarrierHandshake: false
+		reasonCode: `${input.reasonCodePrefix}.${authenticationRejected ? "authentication_required" : "write_failed"}`
 	};
 }
 function resolveSafeRuntimeReportingFailureMessage(input) {
@@ -15290,7 +15558,6 @@ async function notifyRuntimeReportingAttemptObserver(observer, attempt) {
 			event: "cli.runtime_reporting.attempt_observer_failed",
 			family: attempt.family,
 			reasonCode: attempt.reasonCode,
-			requiresCarrierHandshake: attempt.requiresCarrierHandshake,
 			status: attempt.status
 		});
 	}
@@ -15513,12 +15780,13 @@ function failedProviderConversationProofSubmissions(input) {
 	}));
 }
 async function resolveRuntimeReportingAuthCompatibility(gatewayUrl) {
-	const authState = await getAuthSessionState().catch(() => null);
+	const authState = await getAuthSessionState({ refreshExpired: true }).catch(() => null);
 	if (!authState) return {
 		authState: "error",
 		status: "unavailable"
 	};
 	if (!(authState.state === "valid" && authState.session)) return {
+		reasonCode: authState.reasonCode,
 		authState: authState.state === "expired" || authState.state === "invalid" ? authState.state : "missing",
 		status: "unavailable"
 	};
@@ -15599,7 +15867,6 @@ async function syncLocalServiceRuntimeAgentControllerReports(input) {
 			family: "runtime_agent_controller",
 			message: "Local agent inventory collection failed.",
 			reasonCode: "runtime.reporting.inventory_failed",
-			requiresCarrierHandshake: false,
 			status: "failed"
 		});
 		throw error;
@@ -15621,7 +15888,6 @@ async function syncLocalServiceRuntimeAgentControllerReports(input) {
 			family: "runtime_agent_controller",
 			message: "No local controllers are installed on this computer.",
 			reasonCode: "runtime.agent_controller_report.no_local_controllers",
-			requiresCarrierHandshake: false,
 			status: "not_applicable"
 		});
 		return {
@@ -15775,7 +16041,8 @@ function isSameServiceIdentity(left, right) {
 function createRuntimeReportingAttemptObserver(input) {
 	return async (attempt) => {
 		await persistRuntimeReportingAttempt(attempt, input.serviceIdentity);
-		if (attempt.status === "failed" && (attempt.authenticationRejected || attempt.requiresCarrierHandshake) && attempt.reasonCode && attempt.message) await input.onAuthenticationFailure?.({
+		if (attempt.status === "failed" && attempt.authenticationRejected && attempt.reasonCode && attempt.message) await input.onAuthenticationFailure?.({
+			...attempt.credentialFingerprint ? { credentialFingerprint: attempt.credentialFingerprint } : {},
 			message: attempt.message,
 			reasonCode: attempt.reasonCode
 		});
@@ -16019,7 +16286,6 @@ function classifyConnectionFailureReason(message) {
 	const lowered = message.toLowerCase();
 	const upgradeRejectionStatus = readDaemonStreamUpgradeRejectionStatus(lowered);
 	if (upgradeRejectionStatus !== null) return upgradeRejectionStatus === 401 ? "auth_rejected" : "internal";
-	if (lowered.includes("authentication required") || lowered.includes("unauthorized")) return "auth_rejected";
 	if (lowered.includes("fetch failed") || lowered.includes("timed out") || lowered.includes("timeout") || lowered.includes("econn") || lowered.includes("enotfound") || lowered.includes("socket") || lowered.includes("network")) return "network_unreachable";
 	return "internal";
 }
@@ -16398,355 +16664,6 @@ function createDaemonLocalExecutionSlots(input) {
 	});
 }
 //#endregion
-//#region src/local-service/status/service-participation-status.ts
-async function resolveDaemonServiceParticipationStatus(input) {
-	const expectedVersion = input?.expectedVersion ?? await resolveCurrentDaemonExpectedVersion();
-	const inventory = await inspectDaemonServiceInventory({ expectedVersion });
-	if (!(inventory.installStatus.installed && inventory.installStatus.state)) return {
-		kind: "missing",
-		expectedVersion
-	};
-	const installedVersion = inventory.installStatus.state.daemonVersion;
-	const wakeability = classifyDaemonServiceWakeability({ inventory });
-	const blockingServiceDriftCodes = wakeability.blockingCodes;
-	const runBlockingServiceDriftCodes = classifyDaemonServiceRunStartability({ inventory }).blockingCodes;
-	const repairAnomalies = inventory.anomalies.filter((anomaly) => [...blockingServiceDriftCodes, ...runBlockingServiceDriftCodes].includes(anomaly.code));
-	if (repairAnomalies.length > 0) return {
-		kind: "needs_repair",
-		expectedVersion,
-		installedVersion,
-		runtimeStatus: inventory.runtimeStatus.status,
-		detail: repairAnomalies[0]?.message ?? "OpenMeld found conflicting local service state on this device.",
-		anomalyCodes: inventory.anomalies.map((anomaly) => anomaly.code)
-	};
-	if (inventory.runtimeStatus.status !== "running") return {
-		kind: "not_running",
-		expectedVersion,
-		installedVersion,
-		runtimeStatus: inventory.runtimeStatus.status
-	};
-	return {
-		kind: "ready",
-		expectedVersion,
-		installedVersion,
-		runtimeStatus: inventory.runtimeStatus.status,
-		advisoryAnomalyCodes: wakeability.advisoryCodes
-	};
-}
-//#endregion
-//#region src/local-components/manifest.ts
-const OPENMELD_CLI_COMMAND_CONTRACT_VERSION = "openmeld-cli-command-contract-2026-09-large-space-files-v1";
-const OPENMELD_SKILLS_CONTRACT_VERSION = "openmeld-skills-contract-2026-09-explicit-space-recipients-v1";
-const OPENMELD_SERVICE_CONTRACT_VERSION = "openmeld-service-contract-2026-09-space-access-and-large-files-v1";
-const LOCAL_COMPONENTS_SNAPSHOT_FILE = "local-components.json";
-const SERVICE_COMPONENT_UPDATE_CODES = /* @__PURE__ */ new Set([
-	"version_outdated",
-	"downgrade_blocked",
-	"runtime_contract_missing",
-	"runtime_contract_mismatch",
-	"runtime_contract_unavailable",
-	"bundle_missing",
-	"bundle_content_drift",
-	"bundle_id_drift",
-	"bundle_version_drift",
-	"bundle_lane_drift",
-	"bundle_strategy_legacy",
-	"bundle_provenance_drift",
-	"bundle_path_invalid"
-]);
-function localComponentsSnapshotPath() {
-	return join(openMeldRootDir(), LOCAL_COMPONENTS_SNAPSHOT_FILE);
-}
-async function buildExpectedLocalComponentsManifest() {
-	const skills = await resolveExpectedSkillsManifest();
-	return {
-		schemaVersion: 1,
-		openMeldReleaseVersion: OPENMELD_VERSION,
-		cli: {
-			packageVersion: OPENMELD_VERSION,
-			commandContractVersion: OPENMELD_CLI_COMMAND_CONTRACT_VERSION
-		},
-		service: {
-			bundleHash: null,
-			bundleVersion: await resolveCurrentDaemonExpectedVersion(),
-			runtimeContractEpoch: CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH,
-			serviceContractVersion: OPENMELD_SERVICE_CONTRACT_VERSION
-		},
-		skills
-	};
-}
-async function readInstalledLocalComponentsSnapshot() {
-	const raw = await readFile(localComponentsSnapshotPath(), "utf8").catch(() => null);
-	if (!raw) return null;
-	const parsed = JSON.parse(raw);
-	const result = installedLocalComponentsSnapshotSchema.safeParse(parsed);
-	return result.success ? result.data : null;
-}
-async function writeInstalledLocalComponentsSnapshot(input) {
-	const snapshot = {
-		schemaVersion: 1,
-		installedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		source: input.source,
-		manifest: await buildExpectedLocalComponentsManifest()
-	};
-	const installed = isBinaryDistribution() ? await readManagedCliInstallation() : null;
-	if (installed && installed.version !== OPENMELD_VERSION) {
-		const previous = await readInstalledLocalComponentsSnapshot();
-		if (previous?.manifest.cli.packageVersion === installed.version) snapshot.manifest.cli = previous.manifest.cli;
-	}
-	const snapshotPath = localComponentsSnapshotPath();
-	await mkdir(dirname(snapshotPath), { recursive: true });
-	const temporaryPath = `${snapshotPath}.${crypto.randomUUID()}.tmp`;
-	try {
-		await writeFile(temporaryPath, `${JSON.stringify(snapshot, null, 2)}\n`);
-		await rename(temporaryPath, snapshotPath);
-	} finally {
-		await rm(temporaryPath, { force: true });
-	}
-	return snapshot;
-}
-async function resolveLocalComponentsStatus(input = {}) {
-	const [expectedManifest, service, skills, maintenance, updateOperation] = await Promise.all([
-		buildExpectedLocalComponentsManifest(),
-		resolveServiceComponentState(),
-		resolveSkillsComponentState(),
-		resolveOpenMeldToolsMaintenanceProjection(),
-		resolveOpenMeldToolsUpdateOperation()
-	]);
-	const cli = await resolveCliComponentStatus(input);
-	const selectedSkill = await loadSelectedSkillAssets();
-	const setupAction = resolveLocalComponentsSetupAction({
-		cliStatus: cli.status,
-		serviceKind: service.kind,
-		serviceStatus: service.status,
-		skillsStatus: skills.status
-	});
-	return {
-		schemaVersion: 1,
-		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		entrypoint: "setup",
-		summaryLabel: formatLocalComponentsSummaryLabel({
-			cliStatus: cli.status,
-			setupAction
-		}),
-		summaryDescription: formatLocalComponentsSummaryDescription({
-			cliStatus: cli.status,
-			setupAction
-		}),
-		setupAction,
-		setupActionLabel: formatLocalSetupActionLabel(setupAction),
-		setupActionDescription: formatLocalSetupActionDescription(setupAction),
-		maintenance,
-		...updateOperation ? { updateOperation } : {},
-		cli,
-		service: {
-			expectedBundleHash: expectedManifest.service.bundleHash,
-			expectedBundleVersion: expectedManifest.service.bundleVersion,
-			installedBundleHash: service.installedBundleHash,
-			installedBundleVersion: service.installedBundleVersion,
-			reasonCodes: service.reasonCodes,
-			runtimeContractEpoch: expectedManifest.service.runtimeContractEpoch,
-			serviceContractVersion: expectedManifest.service.serviceContractVersion,
-			status: service.status
-		},
-		skills: {
-			...selectedSkill.contentRelease ? { contentRelease: selectedSkill.contentRelease } : {},
-			expectedBundleHash: expectedManifest.skills.bundleHash,
-			installedBundleHash: skills.installedBundleHash,
-			reasonCodes: skills.reasonCodes,
-			skillContractVersion: expectedManifest.skills.skillContractVersion,
-			status: skills.status,
-			targetCount: skills.targetCount
-		}
-	};
-}
-function resolveLocalComponentsSetupAction(input) {
-	if (input.cliStatus === "update_required") return "update_cli";
-	if (input.serviceStatus === "update_required") return "update_service";
-	if (input.skillsStatus === "update_required") return "update_skills";
-	if (input.serviceKind === "missing") return "connect_service";
-	if (input.serviceKind === "not_running" || input.serviceKind === "inspection_failed") return "reconnect_service";
-	return "none";
-}
-async function resolveCliComponentStatus(input) {
-	const installed = isBinaryDistribution() ? await readManagedCliInstallation() : null;
-	const packageVersion = installed?.version ?? OPENMELD_VERSION;
-	const snapshot = installed && installed.version !== OPENMELD_VERSION ? await readInstalledLocalComponentsSnapshot() : null;
-	let commandContractVersion = OPENMELD_CLI_COMMAND_CONTRACT_VERSION;
-	if (packageVersion !== OPENMELD_VERSION) commandContractVersion = snapshot?.manifest.cli.packageVersion === packageVersion ? snapshot.manifest.cli.commandContractVersion : "unknown";
-	const latestPackageVersion = normalizeOptionalString$1(input.latestPackageVersion);
-	const requiredCommandContractVersion = normalizeOptionalString$1(input.requiredCommandContractVersion);
-	const reasonCodes = [];
-	let status = "ok";
-	if (commandContractVersion === "unknown" || requiredCommandContractVersion && requiredCommandContractVersion !== commandContractVersion) {
-		status = "update_required";
-		reasonCodes.push("cli.command_contract_mismatch");
-	} else if (latestPackageVersion && compareSemver(packageVersion, latestPackageVersion) < 0) {
-		status = "update_available";
-		reasonCodes.push("cli.package_update_available");
-	}
-	return {
-		commandContractVersion,
-		latestPackageVersion,
-		packageVersion,
-		reasonCodes,
-		requiredCommandContractVersion,
-		status
-	};
-}
-async function resolveServiceComponentState() {
-	const expectedVersion = await resolveCurrentDaemonExpectedVersion();
-	try {
-		const [participation, inventory, activeBundle] = await Promise.all([
-			resolveDaemonServiceParticipationStatus({ expectedVersion }),
-			inspectDaemonServiceInventory({ expectedVersion }),
-			readDaemonActiveBundleState().catch(() => null)
-		]);
-		const installedBundleVersion = resolveInstalledServiceVersion(participation);
-		const serviceUpdateReasonCodes = collectServiceUpdateReasonCodes({
-			anomalyCodes: inventory.anomalies.map((anomaly) => anomaly.code),
-			participation
-		});
-		if (serviceUpdateReasonCodes.length > 0) return {
-			installedBundleHash: resolveInstalledServiceBundleHash(activeBundle),
-			installedBundleVersion,
-			kind: "update_required",
-			reasonCodes: serviceUpdateReasonCodes,
-			status: "update_required"
-		};
-		if (participation.kind === "missing") return {
-			installedBundleHash: null,
-			installedBundleVersion: null,
-			kind: "missing",
-			reasonCodes: ["service.not_installed"],
-			status: "ok"
-		};
-		if (participation.kind === "not_running") return {
-			installedBundleHash: resolveInstalledServiceBundleHash(activeBundle),
-			installedBundleVersion,
-			kind: "not_running",
-			reasonCodes: ["service.not_running"],
-			status: "ok"
-		};
-		return {
-			installedBundleHash: resolveInstalledServiceBundleHash(activeBundle),
-			installedBundleVersion,
-			kind: "ok",
-			reasonCodes: [],
-			status: "ok"
-		};
-	} catch (error) {
-		return {
-			installedBundleHash: null,
-			installedBundleVersion: null,
-			kind: "inspection_failed",
-			reasonCodes: [`service.inspection_failed:${error instanceof Error ? error.message : "unknown"}`],
-			status: "ok"
-		};
-	}
-}
-function resolveInstalledServiceBundleHash(activeBundle) {
-	if (activeBundle?.bundleFormat === "binary_v1") return null;
-	return activeBundle?.sourceDistFingerprint ?? null;
-}
-async function resolveSkillsComponentState() {
-	const [installed, snapshot] = await Promise.all([resolveInstalledSkillsManifest(), collectSkillsReadinessSnapshot().catch(() => null)]);
-	if (!snapshot) return {
-		installedBundleHash: installed?.bundleHash ?? null,
-		reasonCodes: ["skills.status_unavailable"],
-		status: "update_required",
-		targetCount: 0
-	};
-	if (!installed) return {
-		installedBundleHash: null,
-		reasonCodes: ["skills.bundle_hash_unavailable"],
-		status: "update_required",
-		targetCount: snapshot.targetCount
-	};
-	if (snapshot.status === "action_required") return {
-		installedBundleHash: installed.bundleHash,
-		reasonCodes: ["skills.update_required"],
-		status: "update_required",
-		targetCount: snapshot.targetCount
-	};
-	return {
-		installedBundleHash: installed.bundleHash,
-		reasonCodes: snapshot.status === "no_targets" ? ["skills.no_targets"] : [],
-		status: "ok",
-		targetCount: snapshot.targetCount
-	};
-}
-async function resolveExpectedSkillsManifest() {
-	return await resolveBundledSkillsManifest() ?? buildUnavailableSkillsManifest();
-}
-async function resolveInstalledSkillsManifest() {
-	const bundled = await resolveBundledSkillsManifest();
-	if (bundled) return bundled;
-	const activeBundleSource = await resolveActiveBundleSourceSkillsManifest();
-	if (activeBundleSource) return activeBundleSource;
-	return (await readInstalledLocalComponentsSnapshot())?.manifest.skills ?? null;
-}
-async function resolveBundledSkillsManifest() {
-	const assets = await loadSelectedSkillAssets().then((selected) => selected.assets).catch(() => null);
-	if (!assets || assets.length === 0) return null;
-	return {
-		bundleHash: hashBundledSkillAssets(assets),
-		skillContractVersion: OPENMELD_SKILLS_CONTRACT_VERSION,
-		skillIds: ["openmeld-cli"]
-	};
-}
-async function resolveActiveBundleSourceSkillsManifest() {
-	const sourcePackageRootPath = normalizeOptionalString$1((await readDaemonActiveBundleState().catch(() => null))?.sourcePackageRootPath);
-	if (!sourcePackageRootPath) return null;
-	const skillsRootDir = join(sourcePackageRootPath, "skills");
-	if (!await pathExists(skillsRootDir)) return null;
-	return await buildSkillsManifestFromRoot(skillsRootDir);
-}
-async function buildSkillsManifestFromRoot(skillsRootDir) {
-	return {
-		bundleHash: await computeDirectoryContentHash({
-			rootDir: skillsRootDir,
-			ignoredNames: [".openmeld-skill.json"]
-		}).catch(() => null),
-		skillContractVersion: OPENMELD_SKILLS_CONTRACT_VERSION,
-		skillIds: ["openmeld-cli"]
-	};
-}
-function buildUnavailableSkillsManifest() {
-	return {
-		bundleHash: null,
-		skillContractVersion: OPENMELD_SKILLS_CONTRACT_VERSION,
-		skillIds: []
-	};
-}
-async function pathExists(path) {
-	try {
-		await access(path);
-		return true;
-	} catch {
-		return false;
-	}
-}
-function collectServiceUpdateReasonCodes(input) {
-	const reasonCodes = input.anomalyCodes.filter((code) => SERVICE_COMPONENT_UPDATE_CODES.has(code));
-	if (input.participation.kind === "outdated") reasonCodes.push("version_outdated");
-	if (input.participation.kind === "needs_repair") reasonCodes.push(...input.participation.anomalyCodes.filter((code) => SERVICE_COMPONENT_UPDATE_CODES.has(code)));
-	return [...new Set(reasonCodes.map((code) => `service.${code}`))];
-}
-function resolveInstalledServiceVersion(participation) {
-	switch (participation.kind) {
-		case "ready":
-		case "not_running":
-		case "needs_repair":
-		case "outdated": return participation.installedVersion;
-		default: return null;
-	}
-}
-function normalizeOptionalString$1(value) {
-	const normalized = String(value ?? "").trim();
-	return normalized.length > 0 ? normalized : null;
-}
-//#endregion
 //#region src/local-service/adapters/resolve-daemon-capabilities.ts
 function resolveDaemonCapabilities(input) {
 	const runtimeAdapters = input.localAdapterContainer.listAdapters().map((entry) => resolveRegistryRuntimeAdapterCapabilitySnapshot(entry.adapterId)).filter((entry) => entry !== null).sort((left, right) => left.adapterId.localeCompare(right.adapterId));
@@ -18386,7 +18303,6 @@ async function syncLocalServiceProviderConversationProofs(input) {
 			family: "provider_conversation_proof",
 			message: "Provider conversation proof collection failed.",
 			reasonCode: "provider_conversation.runtime_reporting.collection_failed",
-			requiresCarrierHandshake: false,
 			status: "failed"
 		});
 		throw error;
@@ -18397,7 +18313,6 @@ async function syncLocalServiceProviderConversationProofs(input) {
 			family: "provider_conversation_proof",
 			message: null,
 			reasonCode: "provider_conversation.proof.no_applicable_routes",
-			requiresCarrierHandshake: false,
 			status: "not_applicable"
 		});
 		return {
@@ -23321,95 +23236,116 @@ async function coordinateConcurrentAgentReply(input) {
 		},
 		observation,
 		reconsider: async (prompt, currentObservation) => {
-			const continuation = resolveStructuredActionRepairContinuation({
-				agentControllerConversationOverride: input.agentControllerConversationOverride,
-				runtimeResult: input.runtimeResult
-			});
-			if (!(continuation.contextId || continuation.agentControllerConversationOverride)) throw new DaemonServiceRunError({
-				code: "dispatch.agent_reply_reconsideration.conversation_unavailable",
-				message: "The Space changed, but the exact Agent conversation is unavailable for reply reconsideration."
-			});
-			await input.controllerTurnCompletion;
-			const activeTask = input.inflightTaskControlRegistry.getTask(input.parsedTask.taskId);
-			if (activeTask?.dispatchId !== input.parsedTask.dispatchId || activeTask.runtimeCoordinatorExecutionId !== input.parsedTask.runtimeCoordinatorExecutionId) throw new DaemonServiceRunError({
-				code: "dispatch.agent_reply_reconsideration.execution_inactive",
-				message: "The Wake stopped before the Agent could reconsider its reply."
-			});
-			if (input.dispatchSpaceActionContext) supersedeDispatchSpaceActionRecordForReconsideration({ context: input.dispatchSpaceActionContext });
-			emitRunLine({
-				presenter: input.presenter,
-				code: "daemon.run.agent_reply_reconsideration_started",
-				text: `Agent reply reconsideration started for task ${input.parsedTask.taskId}`,
-				payload: {
-					dispatchId: input.parsedTask.dispatchId,
+			const reconsiderationStartedAtMs = Date.now();
+			const recordReconsideration = (result) => emitDaemonDispatchJournalEvent({
+				type: "dispatch.reply_reconsideration",
+				dispatchId: input.parsedTask.dispatchId,
+				profileId: input.parsedTask.targetProfileId,
+				taskId: input.parsedTask.taskId,
+				result,
+				metadata: {
+					reason: "new_relevant_space_signal",
 					newerSignalCount: currentObservation.relevantSignals.length,
 					observedThroughSignalId: currentObservation.observedThroughSignalId,
-					targetProfileId: input.parsedTask.targetProfileId,
-					taskId: input.parsedTask.taskId
+					triggeringSignalIds: currentObservation.relevantSignals.map((signal) => signal.id),
+					startedAtMs: reconsiderationStartedAtMs,
+					durationMs: Math.max(0, Date.now() - reconsiderationStartedAtMs)
 				}
 			});
-			let runtimeResult = await runDispatchRuntimeExecution({
-				agentControllerConversationOverride: continuation.agentControllerConversationOverride,
-				computerFileAccessBoundary: input.computerFileAccessBoundary,
-				contextId: continuation.contextId,
-				executionMode: "repair",
-				instructionPrompt: input.instructionPrompt ? {
-					...input.instructionPrompt,
-					userPrompt: prompt
-				} : void 0,
-				io: input.ledgerIo,
-				ledgerPaths: input.ledgerPaths,
-				parsedTask: input.parsedTask,
-				prompt,
-				routeConfig: input.routeConfig,
-				runtimeContext: input.runtimeContext,
-				runtimeEnvOverrides: input.runtimeEnvOverrides,
-				runtimeControllerSupport: input.runtimeControllerSupport,
-				streamingModeOverride: "final"
-			});
-			runtimeResult = await applyCliSpaceActionRecordIfPresent({
-				dispatchSpaceActionContext: input.dispatchSpaceActionContext,
-				parsedTask: input.parsedTask,
-				presenter: input.presenter,
-				runtimeResult
-			});
-			const reconsidered = await resolveRuntimeResultStructuredSpaceAction({
-				...input,
-				agentControllerConversationOverride: continuation.agentControllerConversationOverride,
-				allowConcurrentReplyReconsideration: false,
-				runtimeResult
-			});
-			if (!reconsidered.resolvedSpaceAction) {
-				if (reconsidered.runtimeResult.resultPayload.status === "failed") return {
-					action: void 0,
+			recordReconsideration("started");
+			try {
+				const continuation = resolveStructuredActionRepairContinuation({
+					agentControllerConversationOverride: input.agentControllerConversationOverride,
+					runtimeResult: input.runtimeResult
+				});
+				if (!(continuation.contextId || continuation.agentControllerConversationOverride)) throw new DaemonServiceRunError({
+					code: "dispatch.agent_reply_reconsideration.conversation_unavailable",
+					message: "The Space changed, but the exact Agent conversation is unavailable for reply reconsideration."
+				});
+				await input.controllerTurnCompletion;
+				const activeTask = input.inflightTaskControlRegistry.getTask(input.parsedTask.taskId);
+				if (activeTask?.dispatchId !== input.parsedTask.dispatchId || activeTask.runtimeCoordinatorExecutionId !== input.parsedTask.runtimeCoordinatorExecutionId) throw new DaemonServiceRunError({
+					code: "dispatch.agent_reply_reconsideration.execution_inactive",
+					message: "The Wake stopped before the Agent could reconsider its reply."
+				});
+				if (input.dispatchSpaceActionContext) supersedeDispatchSpaceActionRecordForReconsideration({ context: input.dispatchSpaceActionContext });
+				emitRunLine({
+					presenter: input.presenter,
+					code: "daemon.run.agent_reply_reconsideration_started",
+					text: `Agent reply reconsideration started for task ${input.parsedTask.taskId}`,
+					payload: {
+						dispatchId: input.parsedTask.dispatchId,
+						newerSignalCount: currentObservation.relevantSignals.length,
+						observedThroughSignalId: currentObservation.observedThroughSignalId,
+						targetProfileId: input.parsedTask.targetProfileId,
+						taskId: input.parsedTask.taskId
+					}
+				});
+				let runtimeResult = await runDispatchRuntimeExecution({
+					agentControllerConversationOverride: continuation.agentControllerConversationOverride,
+					computerFileAccessBoundary: input.computerFileAccessBoundary,
+					contextId: continuation.contextId,
+					executionMode: "repair",
+					instructionPrompt: input.instructionPrompt ? {
+						...input.instructionPrompt,
+						userPrompt: prompt
+					} : void 0,
+					io: input.ledgerIo,
+					ledgerPaths: input.ledgerPaths,
+					parsedTask: input.parsedTask,
+					prompt,
+					routeConfig: input.routeConfig,
+					runtimeContext: input.runtimeContext,
+					runtimeEnvOverrides: input.runtimeEnvOverrides,
+					runtimeControllerSupport: input.runtimeControllerSupport,
+					streamingModeOverride: "final"
+				});
+				runtimeResult = await applyCliSpaceActionRecordIfPresent({
+					dispatchSpaceActionContext: input.dispatchSpaceActionContext,
+					parsedTask: input.parsedTask,
+					presenter: input.presenter,
+					runtimeResult
+				});
+				const reconsidered = await resolveRuntimeResultStructuredSpaceAction({
+					...input,
+					agentControllerConversationOverride: continuation.agentControllerConversationOverride,
+					allowConcurrentReplyReconsideration: false,
+					runtimeResult
+				});
+				if (!reconsidered.resolvedSpaceAction) {
+					if (reconsidered.runtimeResult.resultPayload.status === "failed") return {
+						action: void 0,
+						value: {
+							provenance: void 0,
+							runtimeResult: reconsidered.runtimeResult
+						}
+					};
+					throw new DaemonServiceRunError({
+						code: "dispatch.agent_reply_reconsideration.action_missing",
+						message: "The Agent did not return a valid Space action after reviewing newer messages."
+					});
+				}
+				emitRunLine({
+					presenter: input.presenter,
+					code: "daemon.run.agent_reply_reconsideration_completed",
+					text: `Agent reply reconsideration completed for task ${input.parsedTask.taskId}`,
+					payload: {
+						dispatchId: input.parsedTask.dispatchId,
+						observedThroughSignalId: currentObservation.observedThroughSignalId,
+						targetProfileId: input.parsedTask.targetProfileId,
+						taskId: input.parsedTask.taskId
+					}
+				});
+				return {
+					action: reconsidered.resolvedSpaceAction,
 					value: {
-						provenance: void 0,
+						provenance: "controller_repair",
 						runtimeResult: reconsidered.runtimeResult
 					}
 				};
-				throw new DaemonServiceRunError({
-					code: "dispatch.agent_reply_reconsideration.action_missing",
-					message: "The Agent did not return a valid Space action after reviewing newer messages."
-				});
+			} finally {
+				recordReconsideration("finished");
 			}
-			emitRunLine({
-				presenter: input.presenter,
-				code: "daemon.run.agent_reply_reconsideration_completed",
-				text: `Agent reply reconsideration completed for task ${input.parsedTask.taskId}`,
-				payload: {
-					dispatchId: input.parsedTask.dispatchId,
-					observedThroughSignalId: currentObservation.observedThroughSignalId,
-					targetProfileId: input.parsedTask.targetProfileId,
-					taskId: input.parsedTask.taskId
-				}
-			});
-			return {
-				action: reconsidered.resolvedSpaceAction,
-				value: {
-					provenance: "controller_repair",
-					runtimeResult: reconsidered.runtimeResult
-				}
-			};
 		},
 		refreshObservation: readObservation,
 		spaceId: input.parsedTask.spaceId
@@ -25443,7 +25379,7 @@ async function runDaemonSocketSession(input) {
 				profileId,
 				leaseEpoch
 			})).sort((left, right) => left.profileId.localeCompare(right.profileId));
-			const localComponentsStatus = await resolveSessionLocalComponentsStatus();
+			const localComponentsStatus = readSessionLocalComponentsStatus();
 			const heartbeatRequest = runtimeTransportHeartbeatRequestSchema.safeParse({
 				v: 1,
 				ownerUserId: input.ownerUserId,
@@ -25511,7 +25447,7 @@ async function runDaemonSocketSession(input) {
 				reason: heartbeatSchedule.reason
 			});
 			scheduleHeartbeat({
-				delayMs: applyIntervalJitterMs({
+				delayMs: applyIntervalJitterMs$1({
 					baseIntervalMs: currentHeartbeatIntervalMs,
 					jitterRatio: ADAPTIVE_HEARTBEAT_JITTER_RATIO,
 					maxIntervalMs: MAX_HEARTBEAT_INTERVAL_MS,
@@ -25637,21 +25573,15 @@ async function runDaemonSocketSession(input) {
 	};
 	let hasLoggedWaitingForProfiles = (input.isRouteCatalogResolved?.() ?? true) && input.routeCatalogState.profileIds.length === 0;
 	const serviceVersion = OPENMELD_VERSION;
-	const resolveSessionLocalComponentsStatus = async () => {
-		try {
-			return await resolveLocalComponentsStatus();
-		} catch (error) {
-			emitRunLine({
-				presenter: input.presenter,
-				code: "daemon.run.local_components_status_failed",
-				text: `local components status unavailable: ${toErrorMessage$10(error)}`
-			});
-			return null;
-		}
-	};
+	const readSessionLocalComponentsStatus = () => input.localComponentsObservation.read(() => {
+		if (lastHeartbeatSentAtMs !== null) scheduleHeartbeat({
+			delayMs: 0,
+			reason: "local_components_refreshed"
+		});
+	});
 	const registerDaemonSession = async (routeCatalog) => {
 		const connectionGeneration = Math.max(1, input.reconnectAttempt + 1);
-		const localComponentsStatus = await resolveSessionLocalComponentsStatus();
+		const localComponentsStatus = readSessionLocalComponentsStatus();
 		const registerPayload = runtimeTransportRegisterSessionRequestSchema.safeParse({
 			v: 1,
 			ownerUserId: input.ownerUserId,
@@ -26909,11 +26839,401 @@ function resolveProfileWorkspaceControlErrorCode(error) {
 	return "profile.workspace.update_failed";
 }
 //#endregion
+//#region src/local-service/status/service-participation-status.ts
+async function resolveDaemonServiceParticipationStatus(input) {
+	const expectedVersion = input?.expectedVersion ?? await resolveCurrentDaemonExpectedVersion();
+	const inventory = await inspectDaemonServiceInventory({ expectedVersion });
+	if (!(inventory.installStatus.installed && inventory.installStatus.state)) return {
+		kind: "missing",
+		expectedVersion
+	};
+	const installedVersion = inventory.installStatus.state.daemonVersion;
+	const wakeability = classifyDaemonServiceWakeability({ inventory });
+	const blockingServiceDriftCodes = wakeability.blockingCodes;
+	const runBlockingServiceDriftCodes = classifyDaemonServiceRunStartability({ inventory }).blockingCodes;
+	const repairAnomalies = inventory.anomalies.filter((anomaly) => [...blockingServiceDriftCodes, ...runBlockingServiceDriftCodes].includes(anomaly.code));
+	if (repairAnomalies.length > 0) return {
+		kind: "needs_repair",
+		expectedVersion,
+		installedVersion,
+		runtimeStatus: inventory.runtimeStatus.status,
+		detail: repairAnomalies[0]?.message ?? "OpenMeld found conflicting local service state on this device.",
+		anomalyCodes: inventory.anomalies.map((anomaly) => anomaly.code)
+	};
+	if (inventory.runtimeStatus.status !== "running") return {
+		kind: "not_running",
+		expectedVersion,
+		installedVersion,
+		runtimeStatus: inventory.runtimeStatus.status
+	};
+	return {
+		kind: "ready",
+		expectedVersion,
+		installedVersion,
+		runtimeStatus: inventory.runtimeStatus.status,
+		advisoryAnomalyCodes: wakeability.advisoryCodes
+	};
+}
+//#endregion
+//#region src/local-components/manifest.ts
+const OPENMELD_CLI_COMMAND_CONTRACT_VERSION = "openmeld-cli-command-contract-2026-09-large-space-files-v1";
+const OPENMELD_SKILLS_CONTRACT_VERSION = "openmeld-skills-contract-2026-09-explicit-space-recipients-v1";
+const OPENMELD_SERVICE_CONTRACT_VERSION = "openmeld-service-contract-2026-09-space-access-and-large-files-v1";
+const LOCAL_COMPONENTS_SNAPSHOT_FILE = "local-components.json";
+const SERVICE_COMPONENT_UPDATE_CODES = /* @__PURE__ */ new Set([
+	"version_outdated",
+	"downgrade_blocked",
+	"runtime_contract_missing",
+	"runtime_contract_mismatch",
+	"runtime_contract_unavailable",
+	"bundle_missing",
+	"bundle_content_drift",
+	"bundle_id_drift",
+	"bundle_version_drift",
+	"bundle_lane_drift",
+	"bundle_strategy_legacy",
+	"bundle_provenance_drift",
+	"bundle_path_invalid"
+]);
+function localComponentsSnapshotPath() {
+	return join(openMeldRootDir(), LOCAL_COMPONENTS_SNAPSHOT_FILE);
+}
+async function buildExpectedLocalComponentsManifest() {
+	const skills = await resolveExpectedSkillsManifest();
+	return {
+		schemaVersion: 1,
+		openMeldReleaseVersion: OPENMELD_VERSION,
+		cli: {
+			packageVersion: OPENMELD_VERSION,
+			commandContractVersion: OPENMELD_CLI_COMMAND_CONTRACT_VERSION
+		},
+		service: {
+			bundleHash: null,
+			bundleVersion: await resolveCurrentDaemonExpectedVersion(),
+			runtimeContractEpoch: CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH,
+			serviceContractVersion: OPENMELD_SERVICE_CONTRACT_VERSION
+		},
+		skills
+	};
+}
+async function readInstalledLocalComponentsSnapshot() {
+	const raw = await readFile(localComponentsSnapshotPath(), "utf8").catch(() => null);
+	if (!raw) return null;
+	const parsed = JSON.parse(raw);
+	const result = installedLocalComponentsSnapshotSchema.safeParse(parsed);
+	return result.success ? result.data : null;
+}
+async function writeInstalledLocalComponentsSnapshot(input) {
+	const snapshot = {
+		schemaVersion: 1,
+		installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		source: input.source,
+		manifest: await buildExpectedLocalComponentsManifest()
+	};
+	const installed = isBinaryDistribution() ? await readManagedCliInstallation() : null;
+	if (installed && installed.version !== OPENMELD_VERSION) {
+		const previous = await readInstalledLocalComponentsSnapshot();
+		if (previous?.manifest.cli.packageVersion === installed.version) snapshot.manifest.cli = previous.manifest.cli;
+	}
+	const snapshotPath = localComponentsSnapshotPath();
+	await mkdir(dirname(snapshotPath), { recursive: true });
+	const temporaryPath = `${snapshotPath}.${crypto.randomUUID()}.tmp`;
+	try {
+		await writeFile(temporaryPath, `${JSON.stringify(snapshot, null, 2)}\n`);
+		await rename(temporaryPath, snapshotPath);
+	} finally {
+		await rm(temporaryPath, { force: true });
+	}
+	return snapshot;
+}
+async function resolveLocalComponentsStatus(input = {}) {
+	const [expectedManifest, service, skills, maintenance, updateOperation] = await Promise.all([
+		buildExpectedLocalComponentsManifest(),
+		resolveServiceComponentState(),
+		resolveSkillsComponentState(),
+		resolveOpenMeldToolsMaintenanceProjection(),
+		resolveOpenMeldToolsUpdateOperation()
+	]);
+	const cli = await resolveCliComponentStatus(input);
+	const selectedSkill = await loadSelectedSkillAssets();
+	const setupAction = resolveLocalComponentsSetupAction({
+		cliStatus: cli.status,
+		serviceKind: service.kind,
+		serviceStatus: service.status,
+		skillsStatus: skills.status
+	});
+	return {
+		schemaVersion: 1,
+		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		entrypoint: "setup",
+		summaryLabel: formatLocalComponentsSummaryLabel({
+			cliStatus: cli.status,
+			setupAction
+		}),
+		summaryDescription: formatLocalComponentsSummaryDescription({
+			cliStatus: cli.status,
+			setupAction
+		}),
+		setupAction,
+		setupActionLabel: formatLocalSetupActionLabel(setupAction),
+		setupActionDescription: formatLocalSetupActionDescription(setupAction),
+		maintenance,
+		...updateOperation ? { updateOperation } : {},
+		cli,
+		service: {
+			expectedBundleHash: expectedManifest.service.bundleHash,
+			expectedBundleVersion: expectedManifest.service.bundleVersion,
+			installedBundleHash: service.installedBundleHash,
+			installedBundleVersion: service.installedBundleVersion,
+			reasonCodes: service.reasonCodes,
+			runtimeContractEpoch: expectedManifest.service.runtimeContractEpoch,
+			serviceContractVersion: expectedManifest.service.serviceContractVersion,
+			status: service.status
+		},
+		skills: {
+			...selectedSkill.contentRelease ? { contentRelease: selectedSkill.contentRelease } : {},
+			expectedBundleHash: expectedManifest.skills.bundleHash,
+			installedBundleHash: skills.installedBundleHash,
+			reasonCodes: skills.reasonCodes,
+			skillContractVersion: expectedManifest.skills.skillContractVersion,
+			status: skills.status,
+			targetCount: skills.targetCount
+		}
+	};
+}
+function resolveLocalComponentsSetupAction(input) {
+	if (input.cliStatus === "update_required") return "update_cli";
+	if (input.serviceStatus === "update_required") return "update_service";
+	if (input.skillsStatus === "update_required") return "update_skills";
+	if (input.serviceKind === "missing") return "connect_service";
+	if (input.serviceKind === "not_running" || input.serviceKind === "inspection_failed") return "reconnect_service";
+	return "none";
+}
+async function resolveCliComponentStatus(input) {
+	const installed = isBinaryDistribution() ? await readManagedCliInstallation() : null;
+	const packageVersion = installed?.version ?? OPENMELD_VERSION;
+	const snapshot = installed && installed.version !== OPENMELD_VERSION ? await readInstalledLocalComponentsSnapshot() : null;
+	let commandContractVersion = OPENMELD_CLI_COMMAND_CONTRACT_VERSION;
+	if (packageVersion !== OPENMELD_VERSION) commandContractVersion = snapshot?.manifest.cli.packageVersion === packageVersion ? snapshot.manifest.cli.commandContractVersion : "unknown";
+	const latestPackageVersion = normalizeOptionalString$1(input.latestPackageVersion);
+	const requiredCommandContractVersion = normalizeOptionalString$1(input.requiredCommandContractVersion);
+	const reasonCodes = [];
+	let status = "ok";
+	if (commandContractVersion === "unknown" || requiredCommandContractVersion && requiredCommandContractVersion !== commandContractVersion) {
+		status = "update_required";
+		reasonCodes.push("cli.command_contract_mismatch");
+	} else if (latestPackageVersion && compareSemver(packageVersion, latestPackageVersion) < 0) {
+		status = "update_available";
+		reasonCodes.push("cli.package_update_available");
+	}
+	return {
+		commandContractVersion,
+		latestPackageVersion,
+		packageVersion,
+		reasonCodes,
+		requiredCommandContractVersion,
+		status
+	};
+}
+async function resolveServiceComponentState() {
+	const expectedVersion = await resolveCurrentDaemonExpectedVersion();
+	try {
+		const [participation, inventory, activeBundle] = await Promise.all([
+			resolveDaemonServiceParticipationStatus({ expectedVersion }),
+			inspectDaemonServiceInventory({ expectedVersion }),
+			readDaemonActiveBundleState().catch(() => null)
+		]);
+		const installedBundleVersion = resolveInstalledServiceVersion(participation);
+		const serviceUpdateReasonCodes = collectServiceUpdateReasonCodes({
+			anomalyCodes: inventory.anomalies.map((anomaly) => anomaly.code),
+			participation
+		});
+		if (serviceUpdateReasonCodes.length > 0) return {
+			installedBundleHash: resolveInstalledServiceBundleHash(activeBundle),
+			installedBundleVersion,
+			kind: "update_required",
+			reasonCodes: serviceUpdateReasonCodes,
+			status: "update_required"
+		};
+		if (participation.kind === "missing") return {
+			installedBundleHash: null,
+			installedBundleVersion: null,
+			kind: "missing",
+			reasonCodes: ["service.not_installed"],
+			status: "ok"
+		};
+		if (participation.kind === "not_running") return {
+			installedBundleHash: resolveInstalledServiceBundleHash(activeBundle),
+			installedBundleVersion,
+			kind: "not_running",
+			reasonCodes: ["service.not_running"],
+			status: "ok"
+		};
+		return {
+			installedBundleHash: resolveInstalledServiceBundleHash(activeBundle),
+			installedBundleVersion,
+			kind: "ok",
+			reasonCodes: [],
+			status: "ok"
+		};
+	} catch (error) {
+		return {
+			installedBundleHash: null,
+			installedBundleVersion: null,
+			kind: "inspection_failed",
+			reasonCodes: [`service.inspection_failed:${error instanceof Error ? error.message : "unknown"}`],
+			status: "ok"
+		};
+	}
+}
+function resolveInstalledServiceBundleHash(activeBundle) {
+	if (activeBundle?.bundleFormat === "binary_v1") return null;
+	return activeBundle?.sourceDistFingerprint ?? null;
+}
+async function resolveSkillsComponentState() {
+	const [installed, snapshot] = await Promise.all([resolveInstalledSkillsManifest(), collectSkillsReadinessSnapshot().catch(() => null)]);
+	if (!snapshot) return {
+		installedBundleHash: installed?.bundleHash ?? null,
+		reasonCodes: ["skills.status_unavailable"],
+		status: "update_required",
+		targetCount: 0
+	};
+	if (!installed) return {
+		installedBundleHash: null,
+		reasonCodes: ["skills.bundle_hash_unavailable"],
+		status: "update_required",
+		targetCount: snapshot.targetCount
+	};
+	if (snapshot.status === "action_required") return {
+		installedBundleHash: installed.bundleHash,
+		reasonCodes: ["skills.update_required"],
+		status: "update_required",
+		targetCount: snapshot.targetCount
+	};
+	return {
+		installedBundleHash: installed.bundleHash,
+		reasonCodes: snapshot.status === "no_targets" ? ["skills.no_targets"] : [],
+		status: "ok",
+		targetCount: snapshot.targetCount
+	};
+}
+async function resolveExpectedSkillsManifest() {
+	return await resolveBundledSkillsManifest() ?? buildUnavailableSkillsManifest();
+}
+async function resolveInstalledSkillsManifest() {
+	const bundled = await resolveBundledSkillsManifest();
+	if (bundled) return bundled;
+	const activeBundleSource = await resolveActiveBundleSourceSkillsManifest();
+	if (activeBundleSource) return activeBundleSource;
+	return (await readInstalledLocalComponentsSnapshot())?.manifest.skills ?? null;
+}
+async function resolveBundledSkillsManifest() {
+	const assets = await loadSelectedSkillAssets().then((selected) => selected.assets).catch(() => null);
+	if (!assets || assets.length === 0) return null;
+	return {
+		bundleHash: hashBundledSkillAssets(assets),
+		skillContractVersion: OPENMELD_SKILLS_CONTRACT_VERSION,
+		skillIds: ["openmeld-cli"]
+	};
+}
+async function resolveActiveBundleSourceSkillsManifest() {
+	const sourcePackageRootPath = normalizeOptionalString$1((await readDaemonActiveBundleState().catch(() => null))?.sourcePackageRootPath);
+	if (!sourcePackageRootPath) return null;
+	const skillsRootDir = join(sourcePackageRootPath, "skills");
+	if (!await pathExists(skillsRootDir)) return null;
+	return await buildSkillsManifestFromRoot(skillsRootDir);
+}
+async function buildSkillsManifestFromRoot(skillsRootDir) {
+	return {
+		bundleHash: await computeDirectoryContentHash({
+			rootDir: skillsRootDir,
+			ignoredNames: [".openmeld-skill.json"]
+		}).catch(() => null),
+		skillContractVersion: OPENMELD_SKILLS_CONTRACT_VERSION,
+		skillIds: ["openmeld-cli"]
+	};
+}
+function buildUnavailableSkillsManifest() {
+	return {
+		bundleHash: null,
+		skillContractVersion: OPENMELD_SKILLS_CONTRACT_VERSION,
+		skillIds: []
+	};
+}
+async function pathExists(path) {
+	try {
+		await access(path);
+		return true;
+	} catch {
+		return false;
+	}
+}
+function collectServiceUpdateReasonCodes(input) {
+	const reasonCodes = input.anomalyCodes.filter((code) => SERVICE_COMPONENT_UPDATE_CODES.has(code));
+	if (input.participation.kind === "outdated") reasonCodes.push("version_outdated");
+	if (input.participation.kind === "needs_repair") reasonCodes.push(...input.participation.anomalyCodes.filter((code) => SERVICE_COMPONENT_UPDATE_CODES.has(code)));
+	return [...new Set(reasonCodes.map((code) => `service.${code}`))];
+}
+function resolveInstalledServiceVersion(participation) {
+	switch (participation.kind) {
+		case "ready":
+		case "not_running":
+		case "needs_repair":
+		case "outdated": return participation.installedVersion;
+		default: return null;
+	}
+}
+function normalizeOptionalString$1(value) {
+	const normalized = String(value ?? "").trim();
+	return normalized.length > 0 ? normalized : null;
+}
+//#endregion
+//#region src/local-service/carrier/service-local-components-observation.ts
+function createServiceLocalComponentsObservation(input) {
+	let observation = null;
+	let pending = null;
+	let onRefresh;
+	let disposed = false;
+	return {
+		read(notify) {
+			if (disposed) return null;
+			onRefresh = notify;
+			if (observation && Date.now() - observation.observedAtMs < 3e4) return observation.value;
+			if (!pending) pending = (input.inspect ?? resolveLocalComponentsStatus)().then((value) => {
+				observation = {
+					value,
+					observedAtMs: Date.now()
+				};
+				if (!disposed) onRefresh?.();
+			}).catch((error) => {
+				observation = {
+					value: null,
+					observedAtMs: Date.now()
+				};
+				if (!disposed) input.onError(error);
+			}).finally(() => {
+				pending = null;
+			});
+			return null;
+		},
+		dispose() {
+			disposed = true;
+			onRefresh = void 0;
+		}
+	};
+}
+//#endregion
 //#region src/local-service/carrier/stop-aware-delay.ts
 function createStopAwareDelay() {
 	let interrupted = false;
+	let wakePending = false;
 	const pendingInterruptNotifiers = /* @__PURE__ */ new Set();
 	return {
+		wake: () => {
+			wakePending = pendingInterruptNotifiers.size === 0;
+			for (const notify of pendingInterruptNotifiers) notify();
+			pendingInterruptNotifiers.clear();
+		},
 		interrupt: () => {
 			if (interrupted) return;
 			interrupted = true;
@@ -26922,6 +27242,10 @@ function createStopAwareDelay() {
 		},
 		wait: (delayMs) => {
 			if (interrupted) return Promise.resolve("interrupted");
+			if (wakePending) {
+				wakePending = false;
+				return Promise.resolve("interrupted");
+			}
 			return new Promise((resolve) => {
 				let timer = null;
 				const notifyInterrupted = () => {
@@ -26959,6 +27283,9 @@ var DaemonStreamAuthenticationRequiredError = class extends Error {
 		this.name = "DaemonStreamAuthenticationRequiredError";
 	}
 };
+function applyIntervalJitterMs(input) {
+	return applyIntervalJitterMs$1(input);
+}
 async function resolveDaemonServiceOwnerContext(input) {
 	const explicitOpenMeldProfileId = normalizeText$2(input.openMeldProfileId);
 	if (explicitOpenMeldProfileId) return resolveDaemonServiceOwnerContextFromProfile(await requireOpenMeldProfile({
@@ -27017,6 +27344,7 @@ async function resolveDaemonStreamAuthContext(input) {
 	};
 	return {
 		authState: "valid",
+		credentialFingerprint: fingerprintRequestAuthorization(headers.Authorization),
 		headers,
 		status: "ready"
 	};
@@ -27028,6 +27356,7 @@ function resolveCredentialFailureAuthState(reason) {
 }
 function toDaemonStreamCredentialFailure(error) {
 	return {
+		...error.retryAfterMs !== void 0 ? { retryAfterMs: error.retryAfterMs } : {},
 		authHost: error.authHost,
 		expectedGatewayHost: error.expectedGatewayHost,
 		reason: error.reason,
@@ -27076,32 +27405,67 @@ function createControlledShutdownCoordinator(input) {
 		},
 		requestServiceStop,
 		async request(payload) {
-			const stopCause = await resolveRecentDaemonSignalStopCause();
-			if (shutdownAttempt) await shutdownAttempt.promise;
-			else if (activeSessionShutdownResolver) {
-				const currentAttempt = Promise.withResolvers();
-				shutdownAttempt = currentAttempt;
-				activeSessionShutdownResolver(stopCause);
-				try {
-					await currentAttempt.promise;
-				} finally {
-					if (shutdownAttempt === currentAttempt) shutdownAttempt = null;
+			return await withControlledStopRefusalProof({
+				guarded: payload.onAdmission !== void 0,
+				isStopping: () => shutdownAttempt !== null || input.isStopRequested(),
+				run: async (markCommitted) => {
+					const stopCause = await resolveRecentDaemonSignalStopCause();
+					if (shutdownAttempt) {
+						markCommitted();
+						const existingAttempt = shutdownAttempt;
+						await payload.onAdmission?.(() => void 0);
+						await existingAttempt.promise;
+					} else if (activeSessionShutdownResolver) {
+						const currentAttempt = Promise.withResolvers();
+						const clearAttempt = () => {
+							if (shutdownAttempt === currentAttempt) shutdownAttempt = null;
+						};
+						currentAttempt.promise.then(clearAttempt, clearAttempt);
+						const resolver = activeSessionShutdownResolver;
+						const commit = () => {
+							if (shutdownAttempt || activeSessionShutdownResolver !== resolver) throw new Error("Service session changed before Stop admission.");
+							markCommitted();
+							shutdownAttempt = currentAttempt;
+							resolver(stopCause);
+						};
+						await (payload.onAdmission ?? commitControlledStop)(commit);
+						await currentAttempt.promise;
+					} else {
+						if (input.hasUndrainedWork()) throw new DaemonServiceRunError({
+							code: "daemon.control.shutdown_drain_unavailable",
+							message: "controlled shutdown cannot verify active local work without a connected runtime session"
+						});
+						const commit = () => {
+							if (activeSessionShutdownResolver || input.hasUndrainedWork()) throw new Error("Service work changed before Stop admission.");
+							markCommitted();
+							requestServiceStop(stopCause);
+						};
+						await (payload.onAdmission ?? commitControlledStop)(commit);
+					}
+					return {
+						accepted: true,
+						gracePeriodMs: payload.gracePeriodMs,
+						mode: payload.mode
+					};
 				}
-			} else {
-				if (input.hasUndrainedWork()) throw new DaemonServiceRunError({
-					code: "daemon.control.shutdown_drain_unavailable",
-					message: "controlled shutdown cannot verify active local work without a connected runtime session"
-				});
-				requestServiceStop(stopCause);
-			}
-			return {
-				accepted: true,
-				gracePeriodMs: payload.gracePeriodMs,
-				mode: payload.mode
-			};
+			});
 		}
 	};
 }
+function commitControlledStop(commit) {
+	commit();
+}
+async function withControlledStopRefusalProof(input) {
+	let committed = input.isStopping();
+	try {
+		return await input.run(() => {
+			committed = true;
+		});
+	} catch (error) {
+		if (input.guarded && !committed && !input.isStopping()) throw new ServiceAccountAdmissionError("stop_refused", error instanceof Error ? error.message : String(error));
+		throw error;
+	}
+}
 function hasUndrainedLocalWork(input) {
 	return input.inflightDispatchMetaByTaskId.size > 0 || listDispatchResultOutboxPendingAcknowledgementKeys({ ledgerPaths: input.ledgerPaths }).length > 0;
 }
@@ -27122,6 +27486,11 @@ async function runSocketSessionWithControlledShutdown(input) {
 	input.controlledShutdown.handleSessionCompleted();
 }
 const runDaemonServiceLoop = async (input) => {
+	const auth = await getAuthSessionState({ refreshExpired: true });
+	if (auth.state !== "valid" || !auth.session?.user?.id) throw new Error("A valid CLI account is required to start this Service.");
+	return await withAdmittedServiceSession(auth.session, async () => await runAccountBoundDaemonServiceLoop(input));
+};
+const runAccountBoundDaemonServiceLoop = async (input) => {
 	await assertDaemonServiceLaunchScope();
 	const baseUrl = await resolveBaseUrl(input.baseUrl);
 	const ownerContext = await resolveDaemonServiceOwnerContext({ openMeldProfileId: input.profile });
@@ -27183,11 +27552,29 @@ const runDaemonServiceLoop = async (input) => {
 		leaseDescriptor: await resolveDaemonRuntimeLeaseDescriptor({ command: daemonRuntimeState.command })
 	});
 	let recovery = null;
+	const connectionEvidence = createServiceConnectionEvidenceObserver({
+		ownerUserId: ownerContext.ownerUserId,
+		gatewayUrl: baseUrl,
+		identity: {
+			deviceId,
+			runtimeLane: daemonServiceLaneSchema.parse(lane),
+			serviceSessionId: daemonSessionId,
+			serviceVersion: OPENMELD_VERSION
+		},
+		getRecovery: () => recovery,
+		isStopping: () => stopRequested
+	});
 	const recoveryMetadata = () => ({
 		...describeConnectionRecovery(recovery),
+		connectionDiagnosticId: connectionEvidence.connectionDiagnosticId,
 		attempt: reconnectAttempt
 	});
 	const connectionState = createRunLoopConnectionStateTracker(input.presenter, recoveryMetadata);
+	const localComponentsObservation = createServiceLocalComponentsObservation({ onError: (error) => emitRunLine({
+		presenter: input.presenter,
+		code: "daemon.run.local_components_status_failed",
+		text: `local components status unavailable: ${toErrorMessage$10(error)}`
+	}) });
 	const localAdapterContainer = createLocalAdapterContainer(createLocalAdapterEntries({
 		registerRuntimeProcess: (event) => {
 			const nextProcessId = event.phase === "process_exit" ? null : event.processId;
@@ -27245,6 +27632,7 @@ const runDaemonServiceLoop = async (input) => {
 	const reconnectBackoffDelay = createStopAwareDelay();
 	let reconnectAttempt = 0;
 	let activeSocket = null;
+	let activeCredentialFingerprint = null;
 	const recoverRuntimeReportingAuthentication = createRuntimeReportingAuthenticationRecovery({ requestCarrierHandshake: () => {
 		activeSocket?.close(1012, "runtime_reporting_auth_recovery");
 	} });
@@ -27257,6 +27645,7 @@ const runDaemonServiceLoop = async (input) => {
 			});
 			return;
 		}
+		if (input.failure.credentialFingerprint !== activeCredentialFingerprint) return;
 		const recovery = await recoverRuntimeReportingAuthentication(input.failure);
 		warnDaemonEvent("[openmeld.runtime_reporting.auth_recovery]", {
 			event: "cli.runtime_reporting.auth_recovery",
@@ -27287,6 +27676,7 @@ const runDaemonServiceLoop = async (input) => {
 	const controlPlaneServer = await startLocalDaemonControlPlaneServer({
 		resolveExpectedToken: async () => await ensureDaemonControlPlaneToken(),
 		getContext: async () => ({
+			accountCheckedServiceControl: process.platform !== "win32",
 			healthPayload: {
 				checkedAt: nowIsoString(),
 				...toHealthProjection(stopRequested ? {
@@ -27341,7 +27731,19 @@ const runDaemonServiceLoop = async (input) => {
 					requestActiveRouteCatalogSync
 				});
 			},
-			shutdownHandler: controlledShutdown.request,
+			shutdownHandler: async (payload) => {
+				const admissionId = payload.accountAdmissionId;
+				return await controlledShutdown.request({
+					...payload,
+					...admissionId ? { onAdmission: async (commit) => await admitServiceAccountStop({
+						id: admissionId,
+						ownerUserId,
+						deviceId,
+						contractGeneration: daemonServiceContract?.generation ?? 0,
+						commit
+					}) } : {}
+				});
+			},
 			serviceUpdateReadinessHandler: () => {
 				const unacknowledgedResultCount = listDispatchResultOutboxPendingAcknowledgementKeys({ ledgerPaths }).length;
 				return {
@@ -27476,6 +27878,10 @@ const runDaemonServiceLoop = async (input) => {
 		});
 		agentActivityIntegrationRefresh.request();
 	};
+	const unsubscribeCredentialAvailability = onAuthSessionCredentialAvailable(() => {
+		if (connectionState.get().reason === "auth_unavailable") reconnectBackoffDelay.wake();
+	});
+	const unsubscribeCredentialObservation = onAuthSessionCredentialObservation((reason) => connectionEvidence.credential(reason));
 	try {
 		emitRunLine({
 			presenter: input.presenter,
@@ -27503,8 +27909,11 @@ const runDaemonServiceLoop = async (input) => {
 			}
 		});
 		while (!stopRequested) try {
+			connectionEvidence.beginAttempt();
 			connectionState.set("connecting", { reason: resolveConnectingReason(reconnectAttempt) });
-			const wsUrl = toDaemonStreamUrl(baseUrl);
+			const connectionUrl = new URL(toDaemonStreamUrl(baseUrl));
+			connectionUrl.searchParams.set(SERVICE_CONNECTION_ID_QUERY_PARAMETER, connectionEvidence.connectionDiagnosticId);
+			const wsUrl = connectionUrl.toString();
 			const authContext = await resolveDaemonStreamAuthContext({
 				requestUrl: wsUrl,
 				selectedOpenMeldProfile
@@ -27514,6 +27923,7 @@ const runDaemonServiceLoop = async (input) => {
 				connectionState,
 				credentialFailure: authContext.credentialFailure ?? null
 			});
+			connectionEvidence.opening();
 			const ws = await connectWebSocket(wsUrl, {
 				headers: {
 					...authContext.headers,
@@ -27526,6 +27936,8 @@ const runDaemonServiceLoop = async (input) => {
 				break;
 			}
 			activeSocket = ws;
+			activeCredentialFingerprint = authContext.credentialFingerprint;
+			connectionEvidence.opened(ws);
 			emitRunLine({
 				presenter: input.presenter,
 				code: "daemon.run.connected",
@@ -27553,6 +27965,7 @@ const runDaemonServiceLoop = async (input) => {
 					ledgerPaths,
 					loadRouteCatalog: routeCatalogLoader.load,
 					localAdapterContainer,
+					localComponentsObservation,
 					localExecutionSlots,
 					onRuntimeReportingAuthenticationFailure: async (failure) => {
 						await requestRuntimeReportingAuthenticationRecovery({
@@ -27581,6 +27994,7 @@ const runDaemonServiceLoop = async (input) => {
 					socket: ws,
 					touchRuntimeState: async (updates) => {
 						if (typeof updates.heartbeatAt === "string") {
+							connectionEvidence.acknowledged(updates.heartbeatAt, connectionState.get().state !== "online");
 							connectionState.set("online");
 							reconnectAttempt = 0;
 							recovery = null;
@@ -27613,9 +28027,14 @@ const runDaemonServiceLoop = async (input) => {
 				presenter: input.presenter,
 				reconnectAttempt
 			});
+			connectionEvidence.retry(error, connectionState.get().reason, backoffMs);
 			await reconnectBackoffDelay.wait(backoffMs);
 		}
 	} finally {
+		connectionEvidence.dispose();
+		localComponentsObservation.dispose();
+		unsubscribeCredentialObservation();
+		unsubscribeCredentialAvailability();
 		controlledShutdown.failOutstanding();
 		process.off("SIGINT", onSigint);
 		process.off("SIGTERM", onSigterm);
@@ -27951,12 +28370,25 @@ function createRunLoopConnectionStateTracker(presenter, recoveryMetadata) {
 }
 function noteRunLoopReconnectScheduled(input) {
 	const errorMessage = toErrorMessage$10(input.error);
-	const failureReason = classifyConnectionFailureReason(errorMessage);
-	const authState = input.error instanceof DaemonStreamAuthenticationRequiredError ? input.error.authState : null;
-	const backoffMs = resolveServiceConnectionReconnectBackoffMs({
+	const credentialFailure = input.error instanceof DaemonStreamAuthenticationRequiredError ? input.error.credentialFailure : null;
+	let failureReason = classifyConnectionFailureReason(errorMessage);
+	if (credentialFailure?.reason === "session_token_unavailable") failureReason = "auth_unavailable";
+	else if (input.error instanceof DaemonStreamAuthenticationRequiredError || input.error instanceof WebSocketConnectionError && input.error.status === 401) failureReason = "auth_rejected";
+	let authState = input.error instanceof DaemonStreamAuthenticationRequiredError ? input.error.authState : null;
+	if (failureReason === "auth_unavailable") authState = null;
+	const policyBackoffMs = resolveServiceConnectionReconnectBackoffMs({
 		attempt: input.reconnectAttempt,
 		reason: failureReason
 	});
+	const credentialRetryAfterMs = credentialFailure?.retryAfterMs ?? 0;
+	let backoffMs = policyBackoffMs;
+	if (failureReason === "auth_unavailable" && credentialRetryAfterMs > 0) backoffMs = credentialRetryAfterMs;
+	else if (failureReason !== "auth_rejected") backoffMs = applyIntervalJitterMs({
+		baseIntervalMs: policyBackoffMs,
+		minIntervalMs: DEFAULT_RECONNECT_DELAY_MS,
+		maxIntervalMs: MAX_RECONNECT_DELAY_MS,
+		jitterRatio: .2
+	});
 	noteReconnectFailureState({
 		authState,
 		connectionState: input.connectionState,
@@ -28045,6 +28477,13 @@ function throwDaemonStreamAuthenticationRequired(input) {
 }
 function noteAuthenticationRequiredState(input) {
 	const detail = input.credentialFailure ? `stored credentials are not attachable to the daemon stream (${input.credentialFailure.reason}: requestHost=${input.credentialFailure.requestHost ?? "unknown"}, authHost=${input.credentialFailure.authHost ?? "unknown"}, expectedGatewayHost=${input.credentialFailure.expectedGatewayHost ?? "unknown"})` : `connecting without credentials, session=${input.authState}`;
+	if (input.credentialFailure?.reason === "session_token_unavailable") {
+		input.connectionState.set("degraded", {
+			detail,
+			reason: "auth_unavailable"
+		});
+		return;
+	}
 	input.connectionState.set("authentication_required", {
 		authState: input.authState,
 		detail,
@@ -31455,6 +31894,7 @@ function summarizeDaemonStopJournalResult(stopResult) {
 }
 async function stopCurrentLaneDaemonService(input) {
 	const context = await loadCurrentLaneDaemonStopContext();
+	if (input.completedControlledShutdownOwnerPid !== void 0 && (context.ownerSnapshot.runtimeStatus.pid !== null && context.ownerSnapshot.runtimeStatus.pid !== input.completedControlledShutdownOwnerPid || context.ownerSnapshot.ownedProcesses.some((process) => process.pid !== input.completedControlledShutdownOwnerPid))) throw new Error("The Service owner changed after controlled shutdown. Check its status before trying again.");
 	await emitDaemonLifecycleEvent({
 		type: "owner.snapshot",
 		result: "observed",
@@ -31474,6 +31914,7 @@ async function stopCurrentLaneDaemonService(input) {
 	});
 	if (context.stopStrategy.kind === "not_running") return await buildDaemonStopNotRunningResult(context.ownerSnapshot.runtimeStatus);
 	if (context.stopStrategy.kind === "manager_first") return await stopManagedCurrentLaneDaemonService({
+		controlledShutdownComplete: input.completedControlledShutdownOwnerPid !== void 0,
 		force: input.force,
 		mode: input.mode,
 		ownerSnapshot: context.ownerSnapshot,
@@ -31554,7 +31995,7 @@ async function stopManagedCurrentLaneDaemonService(input) {
 	if (input.mode === "interactive") {
 		if (!await confirmStopServiceManager(input.runtime, input.ownerSnapshot.runtimeStatus)) return { status: "cancelled" };
 	}
-	const drainPreparationResult = await prepareManagedDaemonServiceForStop({
+	const drainPreparationResult = input.controlledShutdownComplete ? null : await prepareManagedDaemonServiceForStop({
 		force: input.force,
 		mode: input.mode,
 		ownerSnapshot: input.ownerSnapshot
@@ -33418,7 +33859,7 @@ async function runDaemonRunInteractivePreflightBeforeModePrompt(input) {
 	}
 	return null;
 }
-async function runDaemonStop(input) {
+async function runDaemonStop(input, internal = {}) {
 	const runtime = await resolveRuntimeContext({ view: input.view });
 	const presenter = input.json === true ? createQuietPresenter(runtime) : createPresenter(runtime);
 	emitDaemonOverviewIfAgent({
@@ -33438,6 +33879,7 @@ async function runDaemonStop(input) {
 		run: async () => {
 			if (resolveOpenMeldEnvPreset() === "dev-local") await uninstallDaemonServiceUpdateWorker();
 			const stopped = await executeDaemonStopCommand({
+				completedControlledShutdownOwnerPid: internal.completedControlledShutdownOwnerPid,
 				force: input.force,
 				presenter,
 				profile: input.profile,
@@ -33519,6 +33961,7 @@ async function runDaemonAutostart(input, options = {}) {
 }
 async function executeDaemonStopCommand(input) {
 	const stopResult = await stopCurrentLaneDaemonService({
+		completedControlledShutdownOwnerPid: input.completedControlledShutdownOwnerPid,
 		force: input.force,
 		mode: "interactive",
 		runtime: input.runtime
@@ -34997,6 +35440,7 @@ async function resolveDetachedDaemonServiceLaunchTarget() {
 function buildDetachedDaemonLaunchSpec(input) {
 	const detachedMode = input.mode === "background" ? "foreground" : input.mode;
 	const sharedArgs = [
+		...input.accountAdmissionId ? ["--account-admission-id", input.accountAdmissionId] : [],
 		...input.openMeldProfileId ? ["--profile", input.openMeldProfileId] : [],
 		...input.deviceId ? ["--device-id", input.deviceId] : [],
 		...typeof input.heartbeatMs === "number" ? ["--heartbeat-ms", String(input.heartbeatMs)] : [],
@@ -39527,6 +39971,6 @@ async function emitAgentsConfigParseFallbackSignal(input) {
 	});
 }
 //#endregion
-export { renderHumanTextErrorCard as $, ensureCommandAuthenticationOrCancel as $n, buildSignalMessageReadProjection as $t, runDaemonBackgroundStartForDecision as A, buildAgentActivityEvent as An, cliJsonSkillsShowEnvelopeSchema as Ar, resolveLocalAgentControllerLaunchability as At, runDaemonUninstall as B, enqueueControllerTaskLifecycleEventWhileLocked as Bn, readSpaceRecentMentionProfileIds as Bt, resolveGatewayWebOrigin as C, returnToTargetPickerState as Cn, isCurrentCommandCheckScopeActive as Cr, resolveDaemonServiceParticipationStatus as Ct, isManagedSystemServiceBootstrapRun as D, readRecentDaemonDispatchJournalEvents as Dn, cliJsonOutputEnvelopeSchema as Dr, submitRuntimeAgentControllerReports as Dt, bestEffortStopCurrentLaneDaemonService as E, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as En, cliJsonErrorEnvelopeSchema as Er, submitRuntimeAgentControllerReport as Et, runDaemonRunAfterEntryChecks as F, removeAgentActivityContextCache as Fn, revokeOrganizationJoinLinkResponseSchema as Fr, isLocalSpaceStateCorruptResult as Ft, buildProfileWorkspaceRows as G, unregisterAgentActivityRoute as Gn, upsertSpaceConfig as Gt, formatServiceRuntimeHeadline as H, isAgentActivityRouteRegistered as Hn, toLocalSpaceStateIntegrityError as Ht, runDaemonSnapshot as I, enqueueAgentActivityHookEvent as In, listSpaceConfigs as It, createDelayedSpinner as J, installAgentActivityIntegrations as Jn, SpaceComposerSubmissionError as Jt, reconcileCliVersionView as K, AGENT_ACTIVITY_INTEGRATION_OWNER as Kn, writeSpaceCacheDeletionNoticeState as Kt, runDaemonStatusFlow as L, removeProjectInbox as Ln, readSpaceCacheDeletionNoticeState as Lt, runDaemonInstall as M, normalizeSharedSessionTitle as Mn, getOrganizationJoinLinkResponseSchema as Mr, projectSpaceProfileCache as Mt, runDaemonInterrupt as N, readCodexSessionTitles as Nn, organizationJoinLinkErrorResponseSchema as Nr, LocalSpaceStateIntegrityError as Nt, runDaemon as O, connectWebSocket as On, cliJsonSkillsListEnvelopeSchema as Or, collectLocalAgentControllerInventory as Ot, runDaemonReinstall as P, readAgentActivityContextForPath as Pn, organizationJoinLinkManagementQuerySchema as Pr, inspectSpaceCacheFile as Pt, renderHumanErrorCard as Q, buildCommandAuthenticationPromptMessage as Qn, buildSignalIndex as Qt, runDaemonStop as R, readAgentActivityOutboxHealth as Rn, readSpaceConfig as Rt, buildSpaceWebUrl as S, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as Sn, getCurrentCommandCheckState as Sr, writeInstalledLocalComponentsSnapshot as St, runDaemonServiceParticipationGate as T, DISPATCH_OWNED_RUNTIME_MODE as Tn, startCurrentCommandCheckScope as Tr, submitProfileRuntimeAgentControllerReport as Tt, resolveServiceParticipationReadiness as U, registerAgentActivityRoute as Un, toSpaceConfigListIntegrityError as Ut, formatServiceParticipationReadinessLabel as V, readControllerTaskLifecycleOutboxHealth as Vn, removeSpaceConfig as Vt, buildProfileWorkspacePresentation as W, resolveAgentActivityRouteForPath as Wn, updateSpaceLastSeenTs as Wt, runDaemonStartDecisionPrompt as X, resolveAgentActivityDispatcherCommand as Xn, buildDispatchResultReplyWorkflowProjection as Xt, shouldEmitAgentOverview as Y, readAgentActivityIntegrationStatus as Yn, buildDispatchResultMessageReadProjection as Yt, buildHumanErrorCopy as Z, uninstallAgentActivityIntegrations as Zn, buildPublicSpaceEntryUrl as Zt, promptSearchSelect as _, listSpaceMentionSuggestions as _n, revokeAuthAccessToken as _r, readDispatchSpaceActionContextFromEnv as _t, runAgentsCustomRemove as a, buildSpaceRoundReadProjection as an, exchangeOneTimeTokenAuthSession as ar, fetchSpaceMeta as at, resolveOffsetVisibleWindow as b, prepareSpaceFileOnlySubmission as bn, runInteractivePrompt as br, validateLocalProjectConnectionPath as bt, runAgentsDisable as c, collectResolvedSpaceMentions as cn, formatActiveOrganizationLabel as cr, parseSpaceMetaResponse as ct, runAgentsManage as d, enterRelationPickerState as dn, buildUnifiedCardFrame as dr, readGatewayTextResponse as dt, buildSignalReplyWorkflowProjection as en, evaluateCommandAuthentication as er, emitCliJsonEnvelope as et, runAgentsRepair as f, extractMentionAuthoringPrefix as fn, extractAuthApiErrorMessage as fr, toStructuredGatewayFailure as ft, promptSearchMultiselectWorkbench as g, listSpaceMentionRelationChoices as gn, resolveDeviceTokenExpiresAt as gr, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as gt, promptSearchMultiselect as h, isTargetPickerState as hn, resolveDeviceAuthClientId as hr, readDispatchOwnedRuntimeGuard as ht, runAgentsCustomList as i, buildSpaceProfileAddPlan as in, runAuthStatus as ir, createCliSpaceApi as it, runDaemonCancel as j, resolveObservedAgentActivityBinding as jn, acceptOrganizationJoinLinkBodySchema as jr, resolveLocalAgentControllerReportDecision as jt, runDaemonAutostart as k, syncLocalAgentActivity as kn, cliJsonSkillsLoadEnvelopeSchema as kr, resolveLocalAgentControllerBlockerReasonCodes as kt, runAgentsEnable as l, createSpaceMemberIdentityIndex as ln, renderInfoCard as lr, GatewayHttpError as lt, formatTransportModeDisplay as m, isRelationPickerState as mn, requestDeviceToken as mr, assertDispatchOwnedRuntimePublicWriteAllowed as mt, runAgentsConfig as n, buildSpaceMentionProfileIndex as nn, runAuthLogout as nr, readDaemonIncidentLogTail as nt, runAgentsCustomUpdate as o, buildUpdatesReplyWorkflowProjection as on, buildAuthStatusRows as or, updateSpaceMeta as ot, runAgentsShow as p, formatRemovedCcRelationMessage as pn, fetchAuthUserSnapshot as pr, parseJsonResponse as pt, emitDaemonAgentOverview as q, defaultManagedIntegrationPaths as qn, writeSpaceRecentMentionProfileIds as qt, runAgentsCustomAdd as r, buildSpaceMessageReadRelationSummary as rn, runAuthMenu as rr, fetchSpaceUpdates as rt, runAgentsDetect as s, closeMentionPickerState as sn, buildAuthStatusSnapshot as sr, parseSpaceMetaPayload as st, runAgents as t, buildSpaceMemberAgentPresencePresentation as tn, runAuthLogin as tr, runDaemonStartupPreflight as tt, runAgentsList as u, createSpaceTargetCatalog as un, renderTextInfoCard as ur, readGatewayJsonResponse as ut, clampNumber as v, openTargetPickerState as vn, promptTextEntry as vr, writeDispatchSpaceActionRecord as vt, resolveSpaceWebGatewayOrigin as w, updateAuthoredMentionRanges as wn, resetCurrentCommandCheckState as wr, readRuntimeReportingHealthState as wt, computeRetryDelayMs as x, resolveNextRecentMentionProfileIdsForQueuedText as xn, finishCurrentCommandCheckScope as xr, resolveLocalComponentsStatus as xt, resolveAnchoredVisibleWindow as y, prepareSpaceComposerSubmission as yn, isReturnKeypress as yr, LocalProjectConnectionError as yt, runDaemonTeardownStrict as z, removeProjectOutbox as zn, readSpaceLastSeenTs as zt };
+export { buildHumanErrorCopy as $, uninstallAgentActivityIntegrations as $n, buildPublicSpaceEntryUrl as $t, runDaemonBackgroundStartForDecision as A, connectWebSocket as An, cliJsonSkillsListEnvelopeSchema as Ar, collectLocalAgentControllerInventory as At, runDaemonTeardownStrict as B, readAgentActivityOutboxHealth as Bn, readSpaceConfig as Bt, resolveGatewayWebOrigin as C, resolveNextRecentMentionProfileIdsForQueuedText as Cn, finishCurrentCommandCheckScope as Cr, writeDispatchSpaceActionRecord as Ct, isManagedSystemServiceBootstrapRun as D, DISPATCH_OWNED_RUNTIME_MODE as Dn, startCurrentCommandCheckScope as Dr, submitProfileRuntimeAgentControllerReport as Dt, bestEffortStopCurrentLaneDaemonService as E, updateAuthoredMentionRanges as En, resetCurrentCommandCheckState as Er, readRuntimeReportingHealthState as Et, runDaemonRunAfterEntryChecks as F, readCodexSessionTitles as Fn, organizationJoinLinkErrorResponseSchema as Fr, LocalSpaceStateIntegrityError as Ft, buildProfileWorkspacePresentation as G, registerAgentActivityRoute as Gn, toSpaceConfigListIntegrityError as Gt, formatServiceParticipationReadinessLabel as H, enqueueControllerTaskLifecycleEventWhileLocked as Hn, readSpaceRecentMentionProfileIds as Ht, runDaemonServiceDetached as I, readAgentActivityContextForPath as In, organizationJoinLinkManagementQuerySchema as Ir, inspectSpaceCacheFile as It, createQuietPresenter as J, AGENT_ACTIVITY_INTEGRATION_OWNER as Jn, writeSpaceCacheDeletionNoticeState as Jt, buildProfileWorkspaceRows as K, resolveAgentActivityRouteForPath as Kn, updateSpaceLastSeenTs as Kt, runDaemonSnapshot as L, removeAgentActivityContextCache as Ln, revokeOrganizationJoinLinkResponseSchema as Lr, isLocalSpaceStateCorruptResult as Lt, runDaemonInstall as M, buildAgentActivityEvent as Mn, cliJsonSkillsShowEnvelopeSchema as Mr, resolveLocalAgentControllerLaunchability as Mt, runDaemonInterrupt as N, resolveObservedAgentActivityBinding as Nn, acceptOrganizationJoinLinkBodySchema as Nr, resolveLocalAgentControllerReportDecision as Nt, runDaemon as O, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as On, cliJsonErrorEnvelopeSchema as Or, submitRuntimeAgentControllerReport as Ot, runDaemonReinstall as P, normalizeSharedSessionTitle as Pn, getOrganizationJoinLinkResponseSchema as Pr, projectSpaceProfileCache as Pt, runDaemonStartDecisionPrompt as Q, resolveAgentActivityDispatcherCommand as Qn, buildDispatchResultReplyWorkflowProjection as Qt, runDaemonStatusFlow as R, enqueueAgentActivityHookEvent as Rn, listSpaceConfigs as Rt, buildSpaceWebUrl as S, prepareSpaceFileOnlySubmission as Sn, runInteractivePrompt as Sr, readDispatchSpaceActionContextFromEnv as St, runDaemonServiceParticipationGate as T, returnToTargetPickerState as Tn, isCurrentCommandCheckScopeActive as Tr, validateLocalProjectConnectionPath as Tt, formatServiceRuntimeHeadline as U, readControllerTaskLifecycleOutboxHealth as Un, removeSpaceConfig as Ut, runDaemonUninstall as V, removeProjectOutbox as Vn, readSpaceLastSeenTs as Vt, resolveServiceParticipationReadiness as W, isAgentActivityRouteRegistered as Wn, toLocalSpaceStateIntegrityError as Wt, createDelayedSpinner as X, installAgentActivityIntegrations as Xn, SpaceComposerSubmissionError as Xt, emitDaemonAgentOverview as Y, defaultManagedIntegrationPaths as Yn, writeSpaceRecentMentionProfileIds as Yt, shouldEmitAgentOverview as Z, readAgentActivityIntegrationStatus as Zn, buildDispatchResultMessageReadProjection as Zt, promptSearchSelect as _, isTargetPickerState as _n, resolveDeviceAuthClientId as _r, toStructuredGatewayFailure as _t, runAgentsCustomRemove as a, buildSpaceMessageReadRelationSummary as an, runAuthMenu as ar, resolveLocalComponentsStatus as at, resolveOffsetVisibleWindow as b, openTargetPickerState as bn, promptTextEntry as br, readDispatchOwnedRuntimeGuard as bt, runAgentsDisable as c, buildUpdatesReplyWorkflowProjection as cn, buildAuthStatusRows as cr, fetchSpaceUpdates as ct, runAgentsManage as d, createSpaceMemberIdentityIndex as dn, renderInfoCard as dr, updateSpaceMeta as dt, buildSignalIndex as en, buildCommandAuthenticationPromptMessage as er, renderHumanErrorCard as et, runAgentsRepair as f, createSpaceTargetCatalog as fn, renderTextInfoCard as fr, parseSpaceMetaPayload as ft, promptSearchMultiselectWorkbench as g, isRelationPickerState as gn, requestDeviceToken as gr, readGatewayTextResponse as gt, promptSearchMultiselect as h, formatRemovedCcRelationMessage as hn, fetchAuthUserSnapshot as hr, readGatewayJsonResponse as ht, runAgentsCustomList as i, buildSpaceMentionProfileIndex as in, runAuthLogout as ir, readDaemonIncidentLogTail as it, runDaemonCancel as j, syncLocalAgentActivity as jn, cliJsonSkillsLoadEnvelopeSchema as jr, resolveLocalAgentControllerBlockerReasonCodes as jt, runDaemonAutostart as k, readRecentDaemonDispatchJournalEvents as kn, cliJsonOutputEnvelopeSchema as kr, submitRuntimeAgentControllerReports as kt, runAgentsEnable as l, closeMentionPickerState as ln, buildAuthStatusSnapshot as lr, createCliSpaceApi as lt, formatTransportModeDisplay as m, extractMentionAuthoringPrefix as mn, extractAuthApiErrorMessage as mr, GatewayHttpError as mt, runAgentsConfig as n, buildSignalReplyWorkflowProjection as nn, evaluateCommandAuthentication as nr, emitCliJsonEnvelope as nt, runAgentsCustomUpdate as o, buildSpaceProfileAddPlan as on, runAuthStatus as or, writeInstalledLocalComponentsSnapshot as ot, runAgentsShow as p, enterRelationPickerState as pn, buildUnifiedCardFrame as pr, parseSpaceMetaResponse as pt, reconcileCliVersionView as q, unregisterAgentActivityRoute as qn, upsertSpaceConfig as qt, runAgentsCustomAdd as r, buildSpaceMemberAgentPresencePresentation as rn, runAuthLogin as rr, runDaemonStartupPreflight as rt, runAgentsDetect as s, buildSpaceRoundReadProjection as sn, exchangeOneTimeTokenAuthSession as sr, resolveDaemonServiceParticipationStatus as st, runAgents as t, buildSignalMessageReadProjection as tn, ensureCommandAuthenticationOrCancel as tr, renderHumanTextErrorCard as tt, runAgentsList as u, collectResolvedSpaceMentions as un, formatActiveOrganizationLabel as ur, fetchSpaceMeta as ut, clampNumber as v, listSpaceMentionRelationChoices as vn, resolveDeviceTokenExpiresAt as vr, parseJsonResponse as vt, resolveSpaceWebGatewayOrigin as w, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as wn, getCurrentCommandCheckState as wr, LocalProjectConnectionError as wt, computeRetryDelayMs as x, prepareSpaceComposerSubmission as xn, isReturnKeypress as xr, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as xt, resolveAnchoredVisibleWindow as y, listSpaceMentionSuggestions as yn, revokeAuthAccessToken as yr, assertDispatchOwnedRuntimePublicWriteAllowed as yt, runDaemonStop as z, removeProjectInbox as zn, readSpaceCacheDeletionNoticeState as zt };
 
-//# sourceMappingURL=agents-9krfNX_L.js.map
+//# sourceMappingURL=agents-CIDsThyG.js.map