openmeld 0.3.206 → 0.3.207

package/dist/{openmeld-ChOHuaqH.js → openmeld-CiL4AiB0.js}

@@ -1,21 +1,29 @@
 #!/usr/bin/env node
 
 import { c as toSpaceDispatchLookupUrl, h as toSpaceResultUrl, i as toSpaceContractUrl, l as toSpaceDispatchTraceUrl, r as toSpaceBoardUrl, t as normalizeBaseUrl } from "./urls-CY2uzH2-.js";
-import { $ as openMeldManagedVersionBinaryPath, A as formatLocalMachineIssueMessage, C as LocalMachineFailureError, E as createOrphanedSetupConcurrencyIssue, I as accountsDir, J as normalizeAccountKey, N as accountProfileSpaceCacheDir, O as isLocalMachineFailureError, P as accountProfileViewPath, Q as openMeldManagedBinaryPath, T as createActiveSetupConcurrencyIssue, X as openMeldBackupsDir, _t as systemDir, at as profileViewPath, b as resolveOpenMeldLaneDescriptor, c as repairOrphanedLegacyLocks, ct as resolveOpenMeldCliEntryNameFromArgv, f as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, g as resolveCliContext, gt as spacesDir, ht as skillsDir, i as isOpenMeldOrphanedLockError, it as profileDir, k as toRecognizedLocalMachineFailureError, l as resolveOpenMeldOrphanedLockIssue, lt as resolveOpenMeldEnvPreset, n as buildOpenMeldOrphanedLockAction, p as OPENMELD_CLI_CONTEXT_ENV_KEY, r as isOpenMeldLockError, rt as organizationSkillReleaseDir, s as releaseLockSync, t as acquireLock, tt as openMeldRootDir, u as runWithHeldLock, ut as resolveOpenMeldRootDir, y as formatLaneScopeSentence } from "./lock-CvBnBcFK.js";
+import { A as isLocalMachineFailureError, D as createActiveSetupConcurrencyIssue, F as accountProfileSpaceCacheDir, I as accountProfileViewPath, M as formatLocalMachineIssueMessage, O as createOrphanedSetupConcurrencyIssue, Q as openMeldBackupsDir, R as accountsDir, T as LocalMachineFailureError, X as normalizeAccountKey, _ as resolveCliContext, _t as skillsDir, a as isOpenMeldOrphanedLockError, at as organizationSkillReleaseDir, b as formatLaneScopeSentence, c as releaseLockSync, d as runWithHeldLock, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, j as toRecognizedLocalMachineFailureError, l as repairOrphanedLegacyLocks, m as OPENMELD_CLI_CONTEXT_ENV_KEY, ot as profileDir, p as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, r as buildOpenMeldOrphanedLockAction, rt as openMeldRootDir, st as profileViewPath, t as acquireLock, tt as openMeldManagedVersionBinaryPath, u as resolveOpenMeldOrphanedLockIssue, ut as resolveOpenMeldCliEntryNameFromArgv, vt as spacesDir, w as readProcessStartIdentity, x as resolveOpenMeldLaneDescriptor, yt as systemDir } from "./lock-Dxp6o_t_.js";
+import { $n as observabilityWakeTraceSelectorSchema, Bn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Bt as createFeedbackApi, Cn as toStructuredApiClientFailure, Cr as organizationSkillBundleSchema, Er as stringifyOrganizationSkillBundleCanonicalJson, Gn as pluginActionRequestSchema, Hr as agentActivitySessionStatusSchema, It as createComputerFileAccessApi, Jn as projectSpaceDispatchTraceFinalVisibleOutcome, Jr as resolvedSpaceMemberProfileSchema, Ln as OPENMELD_HEADER_PROFILE_ID, Mt as createAgentProfileBindingApi, Pt as createCenterAgentApi, Qn as spaceDispatchTraceResponseSchema, Qt as createPrepareReadinessApi, Rt as createCurrentDeviceApi, Ur as agentActivitySnapshotQuerySchema, Vr as agentActivityProviderSchema, Wn as spaceEntryTargetSchema, Xn as spaceDispatchTraceAttemptStatusSchema, Yn as resolveSpaceDispatchTraceRootCause, Yt as createOrganizationSkillsApi, Zn as spaceDispatchTraceDispatchStatusSchema, Zt as createPluginsApi, ei as agentActivityInventorySessionOriginSchema, er as projectObservabilityWakeCorrelation, fr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, ii as localAgentSessionProviderSchema, ir as summarizeComputerFileAccessPolicy, jt as createAgentActivityApi, kr as submitFeedbackIssueRequestSchema, mr as createAgentProfileCreationRequestBodySchema, ni as agentActivitySessionInventoryQuerySchema, nr as ownerComputerDiagnosticsSchema, pr as agentProfileCreationConfigurationSchema, qn as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, qt as createOrganizationApi, rn as createRoutinesApi, rr as projectOwnerComputerLocalRuntimes, ti as agentActivityInventorySessionStatusSchema, tn as createProjectsApi } from "./dist-D-kJdWZE.js";
 import { c as agentControllerConversationRefSchema } from "./controller-contract-pe3_Re-c.js";
-import { $ as formatDeviceReplyReadinessLabel, $i as getSetupFlowCopy, $o as createOpenMeldHumanProfile, $r as resolveAgentControllerPermissionModeForController, At as createModelCatalogReadSession, Bt as setOpenMeldManagedProfileWorkspace, Ds as compareAgentControllerRefsForDisplay, Ei as inspectDaemonServiceInventory, Es as resolveUserFacingCliEntryCommand, Fn as notifyDaemonRouteCatalogChanged, Ft as readProfileWorkspaceConfig, Gr as getAgentControllerPermissionModeFieldLabel, Gt as bindProject, H as resolveDaemonServiceFreshnessWarning, Hr as createAgentExecutionStatusDisplayRows, Ht as describeProfileWorkspacePathValidationFailure, Ii as readCurrentDaemonRuntimeContext, Jr as parseAgentControllerRef, Jt as listProjectConnectionsWithStatus, Ko as compareSemver, Lt as resolveConfiguredProfileWorkspacePath, Mt as resolveProfileWorkspaceRuntime, Nt as ensureOpenMeldManagedProfileWorkspace, P as resolveServiceReadinessFromServiceStatus, Pt as normalizeCustomProfileWorkspacePath, Q as formatAgentReplyReadinessLabel, Qi as buildOnboardingPlan, Qo as createOpenMeldAgentProfile, Qt as removeProjectConnection, Si as resolveDispatchSpaceActionMcpServer, Ss as formatOpenMeldCliTextBlock, Ts as resolveSetupFollowUpCliEntryCommand, Uo as readDaemonServiceContract, Vt as validateCustomProfileWorkspacePath, Wr as getAgentControllerPermissionModeDisplayMetadata, Xr as projectPeopleComputersToLegacyLocalRuntimes, Yi as resolveCurrentDaemonExpectedVersion, Yr as peopleComputerContainsDevice, Yt as migrateProjectBindingStore, Z as resolveCurrentReplyReadinessSnapshot, Zi as buildDaemonRouteObservationPresentation$1, _o as OPENMELD_VERSION, ao as clearSelectedOpenMeldProfileId, as as updateOpenMeldProfile, ba as classifyDaemonServiceRunStartability, bs as formatOpenMeldCliCommands, cn as syncDeviceRuntimeStateProjection, co as resolveOpenMeldEnvironmentTarget, cs as buildAgentAuthenticationGuide, d as isCliUpdateCheckApplicable, do as requestLocalAgentActivitySync, ds as buildHumanAuthenticationCard, ea as parseCliViewMode, ei as resolveAgentExecutionStatus, en as runIfAgentActivityBindingGenerationIsCurrent, eo as isSelectedOpenMeldProfileRequiredError, es as deleteOpenMeldProfile, et as formatHumanReplyReadinessReason$1, fn as createPrimaryBindingReadSession, fs as createAuthenticationError, ft as resolveOpenClawLocalDiagnosticsValue, gs as resolveAuthenticationGuidanceFromMessage, h as runPendingDaemonServiceUpdate, ho as performManagedInstall, hs as resolveAuthenticationGuidanceFromError, ia as setProfileDefaultView, is as resolveOpenMeldProfile, jn as listBuiltinAgentsRegistryEntries, kt as syncProfileWorkspaceState, l as readCurrentLocalDeviceId, lo as resolveAuthBaseUrl, lt as resolveGatewayChainReadiness, mo as buildInstallSelfJsonPayload, ms as resolveAuthenticationGuidance, na as resolveViewProfileKey, ni as resolveEvidenceSyncHealth, nn as unbindProject, no as resolveOpenMeldProfileOrNull, ns as listOpenMeldProfiles, nt as mapAgentReplyReadinessToLegacyAutoReply, o as assessServerRequiredVersion, oo as getSelectedOpenMeldProfileId, pn as resolveAgentProfilePrimaryAgentControllerReport, qn as resolveLocalRegistryAgentIdFromAgentControllerRef, qo as ensureVersionStateReady, qr as listAgentControllerPermissionModeOptions, qt as listProjectBindings, ra as getProfileDefaultView, ri as resolveNativeAgentControllerPermissionModeForController, rn as canonicalizeLocalProjectPath, ro as alignSelectedOpenMeldProfileStorage, rs as primeOpenMeldProfilesSessionCache, so as setSelectedOpenMeldProfileId, ta as resolveRuntimeContext, ti as resolveAgentProfileEditCapabilities, tn as setDefaultProjectConnection, to as requireOpenMeldProfile, u as assessCliUpdate, uo as LocalDaemonControlPlaneClientError, vn as listAgentTargetStates, vs as formatInlineOpenMeldCliCommands, ws as formatProfileAwareOpenMeldCliCommands, xa as classifyDaemonServiceWakeability, xs as formatOpenMeldCliLine, ys as formatOpenMeldCliCommand, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-BBZhGo1A.js";
-import { $n as projectOwnerComputerLocalRuntimes, Ar as agentActivityProviderSchema, Bn as spaceEntryTargetSchema, Ft as createComputerFileAccessApi, Gn as resolveSpaceDispatchTraceRootCause, Gr as agentActivitySessionInventoryQuerySchema, In as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Jn as spaceDispatchTraceResponseSchema, Jt as createOrganizationSkillsApi, Kn as spaceDispatchTraceAttemptStatusSchema, Kt as createOrganizationApi, Lr as resolvedSpaceMemberProfileSchema, Lt as createCurrentDeviceApi, Mr as agentActivitySnapshotQuerySchema, Mt as createAgentProfileBindingApi, Nn as OPENMELD_HEADER_PROFILE_ID, Pt as createCenterAgentApi, Qn as ownerComputerDiagnosticsSchema, Un as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Ur as agentActivityInventorySessionOriginSchema, Vn as pluginActionRequestSchema, Wn as projectSpaceDispatchTraceFinalVisibleOutcome, Wr as agentActivityInventorySessionStatusSchema, Xn as projectObservabilityWakeCorrelation, Xt as createPluginsApi, Yn as observabilityWakeTraceSelectorSchema, Zt as createPrepareReadinessApi, en as createProjectsApi, er as summarizeComputerFileAccessPolicy, fr as organizationSkillBundleSchema, hr as stringifyOrganizationSkillBundleCanonicalJson, jr as agentActivitySessionStatusSchema, jt as createAgentActivityApi, nn as createRoutinesApi, nr as agentProfileCreationConfigurationSchema, qn as spaceDispatchTraceDispatchStatusSchema, qr as localAgentSessionProviderSchema, rr as createAgentProfileCreationRequestBodySchema, tr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, vr as submitFeedbackIssueRequestSchema, yn as toStructuredApiClientFailure, zt as createFeedbackApi } from "./dist-CxadJClH.js";
-import { Ai as spaceThreadContextSchema, At as dispatchExecutionSchema, Br as spaceFileRevisionNumberSchema, Ki as trimmedStringFromUnknown, Li as openMeldRuntimeProfileIdSchema, Lr as spaceFileEntryIdSchema, Mt as spaceContractSchema, Oi as openMeldProfileIdSchema, Or as readSpaceFileTextResponseSchema, Wi as nonEmptyTrimmedStringFromUnknown, cr as messageEnvelopeSchema, d as START_BOUNDED_ID_SCHEMA, fr as centerAgentInteractionSourceSchema, gi as clientMessageIdSchema, jt as spaceContractFieldsSchema, ki as openMeldRequestContextSchema, kr as resolveSpaceFileMimeType, m as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, pr as spaceStatusSchema, wr as isSpaceFileTextEditable } from "./profiles-BCecj4Pj.js";
-import { _ as readSelectedSkillDocument, f as ensureLocalSkills, n as collectSkillsReadinessSnapshot } from "./installation-inventory-P49sTjhe.js";
-import { $ as renderHumanTextErrorCard, $n as ensureCommandAuthenticationOrCancel, $t as buildSignalMessageReadProjection, A as runDaemonBackgroundStartForDecision, An as buildAgentActivityEvent, Ar as cliJsonSkillsShowEnvelopeSchema, B as runDaemonUninstall, Bn as enqueueControllerTaskLifecycleEventWhileLocked, C as resolveGatewayWebOrigin, Cr as isCurrentCommandCheckScopeActive, Ct as validateLocalProjectConnectionPath, D as isManagedSystemServiceBootstrapRun, Dn as readRecentDaemonDispatchJournalEvents, Dr as cliJsonOutputEnvelopeSchema, E as bestEffortStopCurrentLaneDaemonService, Er as cliJsonErrorEnvelopeSchema, Et as submitRuntimeAgentControllerReport, F as runDaemonRunAfterEntryChecks, Fn as removeAgentActivityContextCache, Fr as revokeOrganizationJoinLinkResponseSchema, G as buildProfileWorkspaceRows, Gn as unregisterAgentActivityRoute, Gt as upsertSpaceConfig, Hn as isAgentActivityRouteRegistered, I as runDaemonSnapshot, In as enqueueAgentActivityHookEvent, Jn as installAgentActivityIntegrations, K as reconcileCliVersionView, L as runDaemonStatusFlow, Ln as removeProjectInbox, M as runDaemonInstall, Mn as normalizeSharedSessionTitle, Mr as getOrganizationJoinLinkResponseSchema, N as runDaemonInterrupt, Nn as readCodexSessionTitles, Nr as organizationJoinLinkErrorResponseSchema, O as runDaemon, Or as cliJsonSkillsListEnvelopeSchema, P as runDaemonReinstall, Pn as readAgentActivityContextForPath, Pr as organizationJoinLinkManagementQuerySchema, Pt as inspectSpaceCacheFile, Q as renderHumanErrorCard, Qn as buildCommandAuthenticationPromptMessage, Qt as buildSignalIndex, R as runDaemonStop, Rn as readAgentActivityOutboxHealth, Sr as getCurrentCommandCheckState, St as LocalProjectConnectionError, T as runDaemonServiceParticipationGate, Tr as startCurrentCommandCheckScope, Tt as submitProfileRuntimeAgentControllerReport, U as resolveServiceParticipationReadiness, Un as registerAgentActivityRoute, V as formatServiceParticipationReadinessLabel, Vn as readControllerTaskLifecycleOutboxHealth, W as buildProfileWorkspacePresentation, Wn as resolveAgentActivityRouteForPath, X as runDaemonStartDecisionPrompt, Xn as resolveAgentActivityDispatcherCommand, Xt as buildDispatchResultReplyWorkflowProjection, Y as shouldEmitAgentOverview, Yn as readAgentActivityIntegrationStatus, Yt as buildDispatchResultMessageReadProjection, Z as buildHumanErrorCopy, Zn as uninstallAgentActivityIntegrations, Zt as buildPublicSpaceEntryUrl, _ as promptSearchSelect, _t as assertDispatchOwnedRuntimePublicWriteAllowed, a as runAgentsCustomRemove, an as buildSpaceRoundReadProjection, ar as exchangeOneTimeTokenAuthSession, at as resolveDaemonServiceParticipationStatus, br as runInteractivePrompt, bt as readDispatchSpaceActionContextFromEnv, c as runAgentsDisable, cr as formatActiveOrganizationLabel, ct as fetchSpaceMeta, d as runAgentsManage, er as evaluateCommandAuthentication, et as emitCliJsonEnvelope, f as runAgentsRepair, gt as parseJsonResponse, h as promptSearchMultiselect, ht as toStructuredGatewayFailure, i as runAgentsCustomList, ir as runAuthStatus, it as writeInstalledLocalComponentsSnapshot, j as runDaemonCancel, jn as resolveObservedAgentActivityBinding, jr as acceptOrganizationJoinLinkBodySchema, k as runDaemonAutostart, kn as syncLocalAgentActivity, kr as cliJsonSkillsLoadEnvelopeSchema, l as runAgentsEnable, ln as createSpaceMemberIdentityIndex, lr as renderInfoCard, lt as updateSpaceMeta, m as formatTransportModeDisplay, mt as readGatewayTextResponse, n as runAgentsConfig, nr as runAuthLogout, o as runAgentsCustomUpdate, on as buildUpdatesReplyWorkflowProjection, or as buildAuthStatusRows, ot as fetchSpaceUpdates, p as runAgentsShow, pn as formatRemovedCcRelationMessage, pt as readGatewayJsonResponse, q as emitDaemonAgentOverview, qn as defaultManagedIntegrationPaths, r as runAgentsCustomAdd, rr as runAuthMenu, rt as resolveLocalComponentsStatus, s as runAgentsDetect, sr as buildAuthStatusSnapshot, st as createCliSpaceApi, t as runAgents, tr as runAuthLogin, tt as runDaemonStartupPreflight, u as runAgentsList, ur as renderTextInfoCard, vr as promptTextEntry, vt as readDispatchOwnedRuntimeGuard, w as resolveSpaceWebGatewayOrigin, wr as resetCurrentCommandCheckState, wt as readRuntimeReportingHealthState, xr as finishCurrentCommandCheckScope, xt as writeDispatchSpaceActionRecord, yr as isReturnKeypress, z as runDaemonTeardownStrict, zn as removeProjectOutbox } from "./agents-BOTlKiwS.js";
-import { C as resolveOpenMeldDistribution, S as isBinaryDistribution, a as beginAuthSessionTransition, b as updateAuthSessionActiveOrganization, c as getAuthSessionMetadata, l as getAuthSessionState, m as normalizeStoredActiveOrganization, n as AuthSessionRecoveryInProgressError, o as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getCurrentAuthOwnerUserId, x as runMacOsNativeKeychainHelperIfRequested } from "./auth-session-BjSqMLTz.js";
-import { $ as resolveCreateProfileName, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as resolveCreateProfileKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as createProfileByKind, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as ensureAgentProfileRuntimeBinding, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as assessActionParticipationCandidate, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-CkbzbvXy.js";
-import { A as createSpaceMenuGuideError, Bt as formatDualViewGuideForDisplay, C as createSpaceAddMembersGuideError, F as createSpaceRemoveMembersGuideError, G as createStartAgentIdentityGuideError, H as createSpaceTargetGuideError, Ht as formatAgentOverviewPayload, I as createSpaceResultGuideError, It as registerBuiltinAgentSelectionOptions, J as OPENMELD_AGENT_MENTAL_MODEL_LINES, Jt as sanitizeTerminalDisplayText, K as createStartAuthenticationGuideError, M as createSpacePublicationSetGuideError, Ot as getCliVersionInfo, Q as areAllowedActionsEquivalent, Qt as outLine, T as createSpaceContractSetGuideError, Tt as registerSkillsTargetSelectionOptions, V as createSpaceSubcommandTargetGuideError, Vt as buildDualViewGuideMessage, W as createSpaceUpdatesGuideError, X as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, Xt as errLine, Yt as formatMessage, Zt as outJsonLine, _ as createProfileActionGuideError, _t as registerSpaceMemberSelectionOptions, b as createResetConfirmationGuideError, bt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, et as buildAgentFacingPublicationModeGuideLines, g as createDoctorFailedGuideError, jt as registerAuthLoginRequestOptions, k as createSpaceLeaveGuideError, kt as registerDaemonControlTargetOptions, m as canUseInteractivePrompts, mt as getCommandHintsFromContract, ot as canonicalizeAllowedActions, qt as createPresenter, v as createProfileCreateGuideError, w as createSpaceAliasTargetGuideError, y as createProfileMenuGuideError, zt as DualViewGuideError } from "./elapsed-time-C7P-nWIO.js";
-import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-9A557X2K.js";
-import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-DpgDs0rw.js";
-import { k as getDaemonStatus } from "./daemon-state-BwIoDq7_.js";
-import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-CLmDoHom.js";
-import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-l_5Tge_z.js";
+import { $ as formatDeviceReplyReadinessLabel, $a as listOpenMeldProfiles, $r as resolveAgentControllerPermissionModeForController, At as createModelCatalogReadSession, Bt as setOpenMeldManagedProfileWorkspace, Ei as inspectDaemonServiceInventory, Fn as notifyDaemonRouteCatalogChanged, Ft as readProfileWorkspaceConfig, Gi as resolveRuntimeContext, Gr as getAgentControllerPermissionModeFieldLabel, Gt as bindProject, H as resolveDaemonServiceFreshnessWarning, Ha as requireOpenMeldProfile, Hi as buildOnboardingPlan, Hr as createAgentExecutionStatusDisplayRows, Ht as describeProfileWorkspacePathValidationFailure, Ja as setSelectedOpenMeldProfileId, Ji as setProfileDefaultView, Jr as parseAgentControllerRef, Jt as listProjectConnectionsWithStatus, Ka as clearSelectedOpenMeldProfileId, Ki as resolveViewProfileKey, Lt as resolveConfiguredProfileWorkspacePath, Mt as resolveProfileWorkspaceRuntime, Nt as ensureOpenMeldManagedProfileWorkspace, P as resolveServiceReadinessFromServiceStatus, Pt as normalizeCustomProfileWorkspacePath, Q as formatAgentReplyReadinessLabel, Qt as removeProjectConnection, Si as resolveDispatchSpaceActionMcpServer, Ua as resolveOpenMeldProfileOrNull, Ui as getSetupFlowCopy, Va as isSelectedOpenMeldProfileRequiredError, Vi as buildDaemonRouteObservationPresentation$1, Vt as validateCustomProfileWorkspacePath, Wa as alignSelectedOpenMeldProfileStorage, Wi as parseCliViewMode, Wr as getAgentControllerPermissionModeDisplayMetadata, Xa as createOpenMeldHumanProfile, Xr as projectPeopleComputersToLegacyLocalRuntimes, Ya as createOpenMeldAgentProfile, Yr as peopleComputerContainsDevice, Yt as migrateProjectBindingStore, Z as resolveCurrentReplyReadinessSnapshot, Za as deleteOpenMeldProfile, Zi as buildDaemonSystemServiceCommandSpec, ao as buildAgentAuthenticationGuide, ca as classifyDaemonServiceWakeability, cn as syncDeviceRuntimeStateProjection, co as buildHumanAuthenticationCard, d as isCliUpdateCheckApplicable, do as resolveAuthenticationGuidance, ei as resolveAgentExecutionStatus, en as runIfAgentActivityBindingGenerationIsCurrent, eo as primeOpenMeldProfilesSessionCache, et as formatHumanReplyReadinessReason$1, fn as createPrimaryBindingReadSession, fo as resolveAuthenticationGuidanceFromError, ft as resolveOpenClawLocalDiagnosticsValue, h as runPendingDaemonServiceUpdate, ho as compareAgentControllerRefsForDisplay, jn as listBuiltinAgentsRegistryEntries, kt as syncProfileWorkspaceState, l as readCurrentLocalDeviceId, lo as createAuthenticationError, lt as resolveGatewayChainReadiness, ni as resolveEvidenceSyncHealth, nn as unbindProject, no as updateOpenMeldProfile, nt as mapAgentReplyReadinessToLegacyAutoReply, o as assessServerRequiredVersion, pn as resolveAgentProfilePrimaryAgentControllerReport, po as resolveAuthenticationGuidanceFromMessage, qa as getSelectedOpenMeldProfileId, qi as getProfileDefaultView, qn as resolveLocalRegistryAgentIdFromAgentControllerRef, qr as listAgentControllerPermissionModeOptions, qt as listProjectBindings, ri as resolveNativeAgentControllerPermissionModeForController, rn as canonicalizeLocalProjectPath, sa as classifyDaemonServiceRunStartability, ti as resolveAgentProfileEditCapabilities, tn as setDefaultProjectConnection, to as resolveOpenMeldProfile, u as assessCliUpdate, vn as listAgentTargetStates, zi as resolveCurrentDaemonExpectedVersion, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-D9Skj8IE.js";
+import { Ar as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, Bn as resolveSpaceFileMimeType, Cn as centerAgentInteractionSourceSchema, Dr as START_BOUNDED_ID_SCHEMA, Fn as isSpaceFileTextEditable, Gr as openMeldProfileIdSchema, Jn as spaceFileEntryIdSchema, Kr as openMeldRequestContextSchema, Zn as spaceFileRevisionNumberSchema, at as spaceContractFieldsSchema, hr as spaceThreadContextSchema, ot as spaceContractSchema, rr as clientMessageIdSchema, wn as spaceStatusSchema, yn as messageEnvelopeSchema, zn as readSpaceFileTextResponseSchema } from "./runtime-transport-QIZmAo4-.js";
+import { Dt as trimmedStringFromUnknown, Tt as nonEmptyTrimmedStringFromUnknown, b as dispatchExecutionSchema, gt as openMeldRuntimeProfileIdSchema } from "./control-plane-D9jDcbMZ.js";
+import { A as withAuthSessionTransitionMutationLock, C as withAdmittedServiceSession, D as cancelServiceAccountAdmission, O as readServiceAccountAdmission, S as updateAuthSessionActiveOrganization, T as ServiceAccountAdmissionError, a as beginAuthSessionTransition, d as getCurrentAuthOwnerUserId, h as normalizeStoredActiveOrganization, k as reserveServiceAccountAdmission, l as getAuthSessionMetadata, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, s as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getAuthSessionState, v as readServiceAdmissionSessionWithOwnership, w as runMacOsNativeKeychainHelperIfRequested } from "./auth-session-CO5XtFaq.js";
+import { t as computerConnectionIntentSchema } from "./computer-connection-BOl79Ftf.js";
+import { _ as readSelectedSkillDocument, f as ensureLocalSkills, n as collectSkillsReadinessSnapshot } from "./installation-inventory-DJlwXa1q.js";
+import { $ as buildHumanErrorCopy, $n as uninstallAgentActivityIntegrations, $t as buildPublicSpaceEntryUrl, A as runDaemonBackgroundStartForDecision, Ar as cliJsonSkillsListEnvelopeSchema, B as runDaemonTeardownStrict, Bn as readAgentActivityOutboxHealth, C as resolveGatewayWebOrigin, Cr as finishCurrentCommandCheckScope, Ct as writeDispatchSpaceActionRecord, D as isManagedSystemServiceBootstrapRun, Dr as startCurrentCommandCheckScope, Dt as submitProfileRuntimeAgentControllerReport, E as bestEffortStopCurrentLaneDaemonService, Er as resetCurrentCommandCheckState, Et as readRuntimeReportingHealthState, F as runDaemonRunAfterEntryChecks, Fn as readCodexSessionTitles, Fr as organizationJoinLinkErrorResponseSchema, G as buildProfileWorkspacePresentation, Gn as registerAgentActivityRoute, H as formatServiceParticipationReadinessLabel, Hn as enqueueControllerTaskLifecycleEventWhileLocked, I as runDaemonServiceDetached, In as readAgentActivityContextForPath, Ir as organizationJoinLinkManagementQuerySchema, It as inspectSpaceCacheFile, J as createQuietPresenter, K as buildProfileWorkspaceRows, Kn as resolveAgentActivityRouteForPath, L as runDaemonSnapshot, Ln as removeAgentActivityContextCache, Lr as revokeOrganizationJoinLinkResponseSchema, M as runDaemonInstall, Mn as buildAgentActivityEvent, Mr as cliJsonSkillsShowEnvelopeSchema, N as runDaemonInterrupt, Nn as resolveObservedAgentActivityBinding, Nr as acceptOrganizationJoinLinkBodySchema, O as runDaemon, Or as cliJsonErrorEnvelopeSchema, Ot as submitRuntimeAgentControllerReport, P as runDaemonReinstall, Pn as normalizeSharedSessionTitle, Pr as getOrganizationJoinLinkResponseSchema, Q as runDaemonStartDecisionPrompt, Qn as resolveAgentActivityDispatcherCommand, Qt as buildDispatchResultReplyWorkflowProjection, R as runDaemonStatusFlow, Rn as enqueueAgentActivityHookEvent, Sr as runInteractivePrompt, St as readDispatchSpaceActionContextFromEnv, T as runDaemonServiceParticipationGate, Tr as isCurrentCommandCheckScopeActive, Tt as validateLocalProjectConnectionPath, Un as readControllerTaskLifecycleOutboxHealth, V as runDaemonUninstall, Vn as removeProjectOutbox, W as resolveServiceParticipationReadiness, Wn as isAgentActivityRouteRegistered, Xn as installAgentActivityIntegrations, Y as emitDaemonAgentOverview, Yn as defaultManagedIntegrationPaths, Z as shouldEmitAgentOverview, Zn as readAgentActivityIntegrationStatus, Zt as buildDispatchResultMessageReadProjection, _ as promptSearchSelect, _t as toStructuredGatewayFailure, a as runAgentsCustomRemove, ar as runAuthMenu, at as resolveLocalComponentsStatus, br as promptTextEntry, bt as readDispatchOwnedRuntimeGuard, c as runAgentsDisable, cn as buildUpdatesReplyWorkflowProjection, cr as buildAuthStatusRows, ct as fetchSpaceUpdates, d as runAgentsManage, dn as createSpaceMemberIdentityIndex, dr as renderInfoCard, dt as updateSpaceMeta, en as buildSignalIndex, er as buildCommandAuthenticationPromptMessage, et as renderHumanErrorCard, f as runAgentsRepair, fr as renderTextInfoCard, gt as readGatewayTextResponse, h as promptSearchMultiselect, hn as formatRemovedCcRelationMessage, hr as fetchAuthUserSnapshot, ht as readGatewayJsonResponse, i as runAgentsCustomList, ir as runAuthLogout, j as runDaemonCancel, jn as syncLocalAgentActivity, jr as cliJsonSkillsLoadEnvelopeSchema, k as runDaemonAutostart, kn as readRecentDaemonDispatchJournalEvents, kr as cliJsonOutputEnvelopeSchema, l as runAgentsEnable, lr as buildAuthStatusSnapshot, lt as createCliSpaceApi, m as formatTransportModeDisplay, n as runAgentsConfig, nr as evaluateCommandAuthentication, nt as emitCliJsonEnvelope, o as runAgentsCustomUpdate, or as runAuthStatus, ot as writeInstalledLocalComponentsSnapshot, p as runAgentsShow, q as reconcileCliVersionView, qn as unregisterAgentActivityRoute, qt as upsertSpaceConfig, r as runAgentsCustomAdd, rr as runAuthLogin, rt as runDaemonStartupPreflight, s as runAgentsDetect, sn as buildSpaceRoundReadProjection, sr as exchangeOneTimeTokenAuthSession, st as resolveDaemonServiceParticipationStatus, t as runAgents, tn as buildSignalMessageReadProjection, tr as ensureCommandAuthenticationOrCancel, tt as renderHumanTextErrorCard, u as runAgentsList, ur as formatActiveOrganizationLabel, ut as fetchSpaceMeta, vt as parseJsonResponse, w as resolveSpaceWebGatewayOrigin, wr as getCurrentCommandCheckState, wt as LocalProjectConnectionError, xr as isReturnKeypress, yt as assertDispatchOwnedRuntimePublicWriteAllowed, z as runDaemonStop, zn as removeProjectInbox } from "./agents-CIDsThyG.js";
+import { a as serviceAccountControlRequestSchema, n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-DY2fBeSW.js";
+import { r as readDaemonRuntimeLease } from "./daemon-runtime-lease-Dd4hdHNo.js";
+import { Bt as readDaemonServiceContract, Mt as requestLocalAgentActivitySync, Pt as requestLocalDaemonShutdown, Vt as upsertDaemonServiceContract, X as buildInstallSelfJsonPayload, Z as performManagedInstall, jt as LocalDaemonControlPlaneClientError, lt as compareSemver, nt as OPENMELD_VERSION, r as readCurrentDaemonRuntimeContext, ut as ensureVersionStateReady } from "./daemon-service-runtime-DQW9gSLT.js";
+import { $ as resolveCreateProfileName, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as resolveCreateProfileKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as createProfileByKind, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as ensureAgentProfileRuntimeBinding, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as assessActionParticipationCandidate, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-Bzt9zgnI.js";
+import { A as createSpaceMenuGuideError, Bt as formatDualViewGuideForDisplay, C as createSpaceAddMembersGuideError, F as createSpaceRemoveMembersGuideError, G as createStartAgentIdentityGuideError, H as createSpaceTargetGuideError, Ht as formatAgentOverviewPayload, I as createSpaceResultGuideError, It as registerBuiltinAgentSelectionOptions, J as OPENMELD_AGENT_MENTAL_MODEL_LINES, Jt as sanitizeTerminalDisplayText, K as createStartAuthenticationGuideError, M as createSpacePublicationSetGuideError, Ot as getCliVersionInfo, Q as areAllowedActionsEquivalent, Qt as outLine, T as createSpaceContractSetGuideError, Tt as registerSkillsTargetSelectionOptions, V as createSpaceSubcommandTargetGuideError, Vt as buildDualViewGuideMessage, W as createSpaceUpdatesGuideError, X as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, Xt as errLine, Yt as formatMessage, Zt as outJsonLine, _ as createProfileActionGuideError, _t as registerSpaceMemberSelectionOptions, b as createResetConfirmationGuideError, bt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, et as buildAgentFacingPublicationModeGuideLines, g as createDoctorFailedGuideError, jt as registerAuthLoginRequestOptions, k as createSpaceLeaveGuideError, kt as registerDaemonControlTargetOptions, m as canUseInteractivePrompts, mt as getCommandHintsFromContract, ot as canonicalizeAllowedActions, qt as createPresenter, v as createProfileCreateGuideError, w as createSpaceAliasTargetGuideError, y as createProfileMenuGuideError, zt as DualViewGuideError } from "./elapsed-time-CcoM2R3N.js";
+import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-C6sHRNGu.js";
+import { A as getDaemonStatus, K as withDaemonServiceRunLock } from "./daemon-state-C37ZtIZK.js";
+import { S as resolveDaemonServiceManager } from "./daemon-service-manager-GiMCiTmu.js";
+import { a as formatOpenMeldCliCommand, c as formatOpenMeldCliTextBlock, d as resolveSetupFollowUpCliEntryCommand, f as resolveUserFacingCliEntryCommand, i as formatInlineOpenMeldCliCommands, o as formatOpenMeldCliCommands, r as resolveAuthBaseUrl, s as formatOpenMeldCliLine, t as resolveOpenMeldEnvironmentTarget, u as formatProfileAwareOpenMeldCliCommands } from "./openmeld-environment-target-NtJYJe1D.js";
+import { n as resolveServiceAccountIdentity, r as runServiceAccountCarrier } from "./service-account-authorization-Dt8kGvq8.js";
+import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-DSurenul.js";
+import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-B0NtjHEL.js";
+import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-NxpTydHp.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -26,8 +34,8 @@ import { constants, openAsBlob, readFileSync, realpathSync } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import pc from "picocolors";
 import { promisify } from "node:util";
+import pc from "picocolors";
 import { cancel, confirm, intro, isCancel, multiselect, note, outro, select, spinner, text } from "@clack/prompts";
 import { Command, Option } from "commander";
 import { performance } from "node:perf_hooks";
@@ -11637,6 +11645,135 @@ function resolveRealPathOrNull$1(path) {
 	}
 }
 //#endregion
+//#region src/commands/service-account-control.ts
+function refused(reason, message) {
+	throw new ServiceAccountAdmissionError(reason, message);
+}
+async function runServiceAccountControl(request) {
+	const parsed = serviceAccountControlRequestSchema.safeParse(request);
+	if (!parsed.success) refused("missing_account", "Choose a signed-in account before controlling this Service.");
+	const input = parsed.data;
+	if (process.platform === "win32") refused("unsupported_platform", "Account-checked Service control is not available on Windows yet.");
+	const auth = await getAuthSessionState();
+	if (auth.state !== "valid" || !auth.session) refused("authentication_required", "Sign in to the CLI with the matching account and try again.");
+	const preparedSession = auth.session;
+	if (preparedSession.user?.id !== input.expectedAccount) refused("account_mismatch", "The CLI is signed in to a different account. Sign in with the matching account and try again.");
+	if ((await fetchAuthUserSnapshot({
+		authBaseUrl: preparedSession.authBaseUrl,
+		accessToken: preparedSession.accessToken
+	})).id !== input.expectedAccount) refused("account_mismatch", "The CLI session belongs to a different account. Sign in again and retry.");
+	await withDaemonServiceRunLock(async () => {
+		const contract = await readDaemonServiceContract();
+		if (!contract) refused("ownership_unknown", "Connect this computer through OpenMeld setup before controlling its Service.");
+		const observed = await readCurrentDaemonRuntimeContext();
+		const lease = await readDaemonRuntimeLease();
+		if (input.operation === "start" && observed.effectiveRuntimeStatus !== "not_running") refused("busy", "The Service is already running or its state is uncertain. Check Service status before trying again.");
+		if (input.operation === "stop" && (observed.effectiveRuntimeStatus !== "running" || !lease || lease.generation !== contract.generation)) refused("ownership_unknown", "OpenMeld could not verify the running Service. Check Service status before trying again.");
+		let boundSession = preparedSession;
+		const reservation = await withAuthSessionTransitionMutationLock(async () => {
+			boundSession = await readServiceAdmissionSessionWithOwnership();
+			if (boundSession.accessToken !== preparedSession.accessToken || boundSession.createdAt !== preparedSession.createdAt || boundSession.user?.id !== input.expectedAccount) refused("account_changed", "The CLI sign-in changed before this action was accepted. Check the account and try again.");
+			const current = await readDaemonServiceContract();
+			if (!current || JSON.stringify(current) !== JSON.stringify(contract)) refused("ownership_changed", "The Service changed before this action was accepted. Check its status and try again.");
+			const identity = await resolveServiceAccountIdentity(boundSession, contract);
+			if (input.operation === "start" && contract.desiredState !== "background") identity.contractGeneration += 1;
+			return await reserveServiceAccountAdmission({
+				operation: input.operation,
+				identity,
+				...input.operation === "stop" && lease ? { target: {
+					ownerPid: lease.pid,
+					ownerProcessStartedAt: readProcessStartIdentity(lease.pid) ?? refused("ownership_unknown", "OpenMeld could not identify the Service process. Check its status and try again.")
+				} } : {}
+			});
+		});
+		try {
+			await withAdmittedServiceSession(boundSession, async () => {
+				if (input.operation === "stop") {
+					await stopReservedService(contract, reservation.id, lease?.pid ?? 0);
+					return;
+				}
+				const manager = contract.serviceController === "legacy-detached" ? null : await resolveDaemonServiceManager(contract.serviceController);
+				if (contract.serviceController !== "legacy-detached" && !(manager && (await manager.status()).installed)) refused("installation_required", "This Service needs setup before it can start. Run OpenMeld setup and try again.");
+				await upsertDaemonServiceContract({
+					...contract,
+					desiredState: "background"
+				});
+				if (contract.serviceController === "legacy-detached") {
+					const runtime = await resolveRuntimeContext({ view: "agent" });
+					await runDaemonServiceDetached({
+						accountAdmissionId: reservation.id,
+						deviceId: contract.deviceId,
+						gatewayUrl: contract.gatewayUrl,
+						heartbeatMs: contract.heartbeatMs,
+						runtime,
+						presenter: createQuietPresenter(runtime),
+						mode: "background"
+					});
+				} else if (manager) {
+					await manager.deactivate();
+					await manager.install(buildDaemonSystemServiceCommandSpec({
+						controller: manager.controller,
+						accountAdmissionId: reservation.id
+					}));
+					await manager.start();
+				}
+				await waitForAdmittedService(reservation.id);
+			});
+		} finally {
+			await cancelServiceAccountAdmission(reservation.id);
+		}
+	});
+}
+async function waitForAdmittedService(id) {
+	const deadline = Date.now() + 15e3;
+	while (Date.now() < deadline) {
+		const current = await readServiceAccountAdmission();
+		const runtime = await readCurrentDaemonRuntimeContext();
+		if (current?.id === id && current.state === "admitted" && current.carrier?.ownerPid === runtime.runtimeStatus.pid && runtime.effectiveRuntimeStatus === "running") return;
+		await setTimeout$1(50);
+	}
+	refused("startup_unconfirmed", "OpenMeld could not confirm that this Service started. Check Service status before trying again.");
+}
+async function stopReservedService(contract, id, pid) {
+	await requestAccountCheckedServiceStop({
+		id,
+		manager: contract.serviceController === "legacy-detached" ? null : await resolveDaemonServiceManager(contract.serviceController)
+	});
+	const admitted = await readServiceAccountAdmission();
+	if (admitted?.id !== id || admitted.state !== "admitted" || admitted.carrier?.ownerPid !== pid) refused("admission_unconfirmed", "OpenMeld could not verify that the matching Service accepted Stop. Check Service status before trying again.");
+	const current = await readCurrentDaemonRuntimeContext();
+	if (current.runtimeStatus.pid !== null && current.runtimeStatus.pid !== pid) refused("ownership_changed", "Another Service instance is now running. Its state was left unchanged.");
+	await runDaemonStop({
+		json: true,
+		view: "agent"
+	}, { completedControlledShutdownOwnerPid: pid });
+}
+async function requestAccountCheckedServiceStop({ id, manager }) {
+	const wasEnabled = manager ? (await manager.status()).enabled : false;
+	if (manager) await manager.disableAutostart();
+	try {
+		if (!(await requestLocalDaemonShutdown({
+			payload: {
+				accountAdmissionId: id,
+				mode: "graceful",
+				gracePeriodMs: 2e3
+			},
+			timeoutMs: 15e3
+		})).accepted) throw new Error("The Service did not confirm controlled shutdown.");
+	} catch (error) {
+		if (manager && wasEnabled && error instanceof LocalDaemonControlPlaneClientError && error.code === "service.account_admission.stop_refused") try {
+			await manager.enableAutostart();
+		} catch (restoreError) {
+			throw new AggregateError([error, restoreError], "Stop was refused and its previous autostart setting could not be restored.");
+		}
+		if (!(error instanceof LocalDaemonControlPlaneClientError && error.code === "service.account_admission.stop_refused")) {
+			const detail = error instanceof Error ? error.message : String(error);
+			refused("stop_unconfirmed", `Stop may already be in progress. ${manager ? "Autostart remains disabled. " : ""}Check Service status before trying again. ${detail}`);
+		}
+		throw error;
+	}
+}
+//#endregion
 //#region src/config/space-dispatch-lookup-api.ts
 async function fetchSpaceDispatchLookup(input) {
 	const endpoint = new URL(toSpaceDispatchLookupUrl(input.baseUrl, input.space));
@@ -14168,7 +14305,9 @@ async function runPreparedComputerAuthHandoff(input) {
 			ownerUserId: initialSnapshot.ownerUserId
 		});
 		const currentSession = await resolveCurrentComputerSession(candidate);
+		await assertReviewedComputerConnection(input.connectionIntent, candidate, currentSession);
 		if (!await confirmComputerAccountSwitch({
+			reviewedConnection: Boolean(input.connectionIntent),
 			candidate,
 			currentSession,
 			interactive: input.interactive,
@@ -14247,6 +14386,13 @@ async function runPreparedComputerAuthHandoff(input) {
 		stream.close();
 	}
 }
+async function assertReviewedComputerConnection(review, candidate, currentSession) {
+	if (!review) return;
+	const intent = computerConnectionIntentSchema.safeParse(review);
+	if (intent.success && intent.data.expectedAccount === candidate.user.id && intent.data.previousSessionIdentity === buildStoredAuthSessionIdentity(currentSession)) return;
+	const revoked = await revokePreparedAuthSession(candidate);
+	throw new Error(`The computer sign-in changed. Review the connection again before continuing.${formatComputerAuthCleanupFailureSuffix(revoked)}`);
+}
 async function assertPrepareSessionOwner(input) {
 	if (input.candidate.user.id === input.ownerUserId) return;
 	const revoked = await revokePreparedAuthSession(input.candidate);
@@ -14308,6 +14454,7 @@ async function confirmComputerAccountSwitch(input) {
 		throw new Error(`OpenMeld could not verify the account currently connected to this Computer. The current Computer connection was not changed.${formatComputerAuthCleanupFailureSuffix(revoked)}`);
 	}
 	if (currentUserId === input.candidate.user.id) return true;
+	if (input.reviewedConnection) return true;
 	const currentAccount = normalizeOptionalString$7(input.currentSession?.user?.email) ?? "the current account";
 	const nextAccount = normalizeOptionalString$7(input.candidate.user.email) ?? "another account";
 	if (!input.interactive || input.resolvedView !== "human") {
@@ -14389,6 +14536,7 @@ async function runSetupLocalAgentConnection(input) {
 	if (input.humanProfile) throw new Error(RETIRED_HUMAN_PROFILE_SETUP_MESSAGE);
 	const deviceCode = normalizeOptionalString$6(input.deviceCode);
 	if (input.startSession && deviceCode) return buildPrepareSessionSetupResult(await runComputerAuthorizationHandoff({
+		connectionIntent: input.connectionIntent,
 		deviceCode,
 		interactive,
 		localAgentSelection: resolvePrepareSessionLocalAgentSelection(input),
@@ -24213,7 +24361,7 @@ function normalizeOptionalString(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 async function runDefaultSpaceAddMeMembership(input) {
-	const { runSpaceAddMeMembership } = await import("./add-me-membership-BkHWMxE4.js");
+	const { runSpaceAddMeMembership } = await import("./add-me-membership-1JHMjZoR.js");
 	return await runSpaceAddMeMembership(input);
 }
 //#endregion
@@ -28265,18 +28413,21 @@ withStartOptions(program.command("start").description("Initial onboarding: set u
 		}
 	});
 });
-program.command("setup").description("Set up this computer for OpenMeld Space Wake.").option("--profile <id>", "Existing OpenMeld agent profile ID to connect to this computer").option("--agent <id...>", "Builtin local agent ID to repair directly when you already know the target").option("--human-profile <id>", "Retired OpenMeld Web setup flag; copy a fresh setup command from OpenMeld Web instead").option("--ott <token>", "One-time token to sign in on this device before setup").option("--device-code <code>", "Browser-approved code used to create this computer's independent sign-in session").option("--start-session <opaque-token>", "Continue an OpenMeld Web Prepare setup command on this device").option("--local-agents <mode>", "Select local agents during setup: all or none").option("--local-agent <id...>", "Select specific local agent IDs during setup").option("--reset-this-computer", "Stop stale local OpenMeld Service state before reconnecting this computer").addHelpText("after", buildCommandHelpExamples("Primary entry points", [
+program.command("setup").description("Set up this computer for OpenMeld Space Wake.").option("--connection-intent <json>", "Account and exact previous Computer session explicitly reviewed for this connection").option("--profile <id>", "Existing OpenMeld agent profile ID to connect to this computer").option("--agent <id...>", "Builtin local agent ID to repair directly when you already know the target").option("--human-profile <id>", "Retired OpenMeld Web setup flag; copy a fresh setup command from OpenMeld Web instead").option("--ott <token>", "One-time token to sign in on this device before setup").option("--device-code <code>", "Browser-approved code used to create this computer's independent sign-in session").option("--start-session <opaque-token>", "Continue an OpenMeld Web Prepare setup command on this device").option("--local-agents <mode>", "Select local agents during setup: all or none").option("--local-agent <id...>", "Select specific local agent IDs during setup").option("--reset-this-computer", "Stop stale local OpenMeld Service state before reconnecting this computer").addHelpText("after", buildCommandHelpExamples("Primary entry points", [
 	"openmeld setup",
 	"openmeld setup --start-session <opaque-token> --local-agents all",
 	"openmeld setup --profile <agent-profile-id> --local-agent <local-agent-id>"
 ])).action(async (opts) => {
 	const view = getGlobalViewOption();
+	const connectionIntent = opts.connectionIntent ? computerConnectionIntentSchema.parse(JSON.parse(opts.connectionIntent)) : void 0;
+	if (connectionIntent && !(opts.startSession && opts.deviceCode)) throw new Error("--connection-intent requires --start-session and --device-code.");
 	await runCommandWithEntryChecks({
 		routeTokens: ["setup"],
 		view,
 		profile: opts.profile,
 		run: async () => {
 			await runSetup({
+				connectionIntent,
 				agent: opts.agent,
 				deviceCode: opts.deviceCode,
 				humanProfile: opts.humanProfile,
@@ -29329,8 +29480,8 @@ const serviceCmd = program.command("service").alias("daemon").description("Manag
 		}
 	});
 });
-serviceCmd.command("start").description("Start OpenMeld Service on this device.").option("--mode <mode>", "Start mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").option("--json", "Print machine-readable JSON.", false).action(runServiceStartCliAction);
-serviceCmd.command("run", { hidden: true }).description("Run OpenMeld Service in this process. System service entrypoint (launchd/systemd unit definitions call this); humans should use `openmeld service start`.").option("--mode <mode>", "Run mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").action(runServiceStartCliAction);
+serviceCmd.command("start").description("Start OpenMeld Service on this device.").option("--expected-account <id>", "Require this signed-in account for Service control").option("--mode <mode>", "Start mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").option("--json", "Print machine-readable JSON.", false).action(async (opts) => await runServiceStartCliAction(opts));
+serviceCmd.command("run", { hidden: true }).option("--account-admission-id <id>", "CLI-owned Service startup admission").description("Run OpenMeld Service in this process. System service entrypoint (launchd/systemd unit definitions call this); humans should use `openmeld service start`.").option("--mode <mode>", "Run mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").action(async (opts) => await runServiceStartCliAction(opts));
 serviceCmd.command("update-worker", { hidden: true }).description("Resume one durable OpenMeld Service update in the background.").action(async () => {
 	const result = await runPendingDaemonServiceUpdate();
 	if (result?.phase === "restored" || result?.phase === "needs_help") process.exitCode = 1;
@@ -29512,7 +29663,15 @@ serviceCmd.command("reinstall", { hidden: true }).description("Deprecated alias
 	errLine("hint: `openmeld service reinstall` is a deprecated alias; use `openmeld service repair`.");
 	await runServiceMaintenanceCliAction(opts, "repair");
 });
-serviceCmd.command("stop").description("Stop OpenMeld Service on this device.").option("--force", "Send SIGKILL immediately instead of SIGTERM (human flow defaults to confirmation)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for state sync").option("--json", "Print machine-readable JSON.", false).action(async (opts) => {
+serviceCmd.command("stop").description("Stop OpenMeld Service on this device.").option("--expected-account <id>", "Require this signed-in account for Service control").option("--force", "Send SIGKILL immediately instead of SIGTERM (human flow defaults to confirmation)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for state sync").option("--json", "Print machine-readable JSON.", false).action(async (opts) => {
+	if (opts.expectedAccount !== void 0) {
+		if (!opts.json || opts.force || opts.profile) throw new Error("Account-bound Service control requires --json and does not accept force or profile overrides.");
+		await runServiceAccountControl({
+			operation: "stop",
+			expectedAccount: opts.expectedAccount
+		});
+		return;
+	}
 	const json = opts.json === true;
 	const view = getGlobalViewOption();
 	await runCommandWithEntryChecks({
@@ -29530,6 +29689,25 @@ serviceCmd.command("stop").description("Stop OpenMeld Service on this device.").
 	});
 });
 async function runServiceStartCliAction(opts) {
+	if (opts.expectedAccount !== void 0) {
+		if (!opts.json || opts.profile || opts.deviceId || opts.gatewayUrl || opts.heartbeatMs || opts.mode) throw new Error("Account-bound Service control requires --json and does not accept startup overrides.");
+		await runServiceAccountControl({
+			operation: "start",
+			expectedAccount: opts.expectedAccount
+		});
+		emitCliJsonEnvelope({
+			schemaVersion: 1,
+			type: "daemon.run",
+			ok: true,
+			reason: "started"
+		});
+		return;
+	}
+	if (opts.accountAdmissionId) {
+		const { accountAdmissionId, ...remaining } = opts;
+		await runServiceAccountCarrier(accountAdmissionId, async () => await runServiceStartCliAction(remaining));
+		return;
+	}
 	const json = opts.json === true;
 	const view = getGlobalViewOption();
 	if (!json && shouldEmitAgentOverview({ resolvedView: view === "agent" ? "agent" : "human" })) emitDaemonAgentOverview({
@@ -31043,6 +31221,33 @@ async function handlePreParseStandaloneCommand(argv) {
 async function main() {
 	if (await runMacOsNativeKeychainHelperIfRequested()) return;
 	const argv = process.argv.map((arg) => arg === "--h" ? "--help" : arg);
+	if (argv.length === 5 && argv[2] === "computer" && argv[3] === "connection-review" && argv[4] === "--json") {
+		const { readComputerConnectionReview } = await import("./computer-connection-review-BTOvbJYL.js");
+		outLine(JSON.stringify(await readComputerConnectionReview()));
+		return;
+	}
+	if (argv.length === 5 && argv[2] === "service" && argv[4] === "--json") {
+		if (argv[3] === "control-carrier-capability") {
+			outLine(JSON.stringify({
+				protocol: "account-checked-service-control-v1",
+				executable: process.execPath
+			}));
+			return;
+		}
+		if (argv[3] === "control-capabilities") {
+			const { readServiceControlCapabilities } = await import("./service-control-capabilities-CzUB1ovW.js");
+			emitCliJsonEnvelope({
+				schemaVersion: 1,
+				type: "service.control_capabilities",
+				...await readServiceControlCapabilities().catch(() => ({
+					deviceId: null,
+					start: false,
+					stop: false
+				}))
+			});
+			return;
+		}
+	}
 	if (isDispatchSpaceActionToolServerArgv(argv)) {
 		await runSpaceActionMcpServer();
 		return;
@@ -31213,4 +31418,4 @@ main().catch((error) => {
 //#endregion
 export {};
 
-//# sourceMappingURL=openmeld-ChOHuaqH.js.map
+//# sourceMappingURL=openmeld-CiL4AiB0.js.map