openmeld 0.3.206 → 0.3.208

package/dist/{agents-BOTlKiwS.js → agents-pHCyQoFw.js}

@@ -2,35 +2,41 @@
 
 import { f as toSpaceMetaUrl, g as toSpaceUpdatesUrl } from "./urls-CY2uzH2-.js";
 import { t as isLoopbackHostname } from "./loopback-hostname-DHQPKq8N.js";
-import { A as formatLocalMachineIssueMessage, D as createServiceSpawnPendingIssue, G as isPublishedOpenMeldHome, I as accountsDir, J as normalizeAccountKey, K as legacyAccountProfileSpacesDir, N as accountProfileSpaceCacheDir, Q as openMeldManagedBinaryPath, Y as normalizeOpenMeldProfileId, _ as resolveCliContextId, b as resolveOpenMeldLaneDescriptor, dt as resolveOpenMeldServiceOwnedPathInput, j as OPENMELD_HOME_ENV_KEY, l as resolveOpenMeldOrphanedLockIssue, lt as resolveOpenMeldEnvPreset, r as isOpenMeldLockError, tt as openMeldRootDir, ut as resolveOpenMeldRootDir, w as assessLocalMachineFailure } from "./lock-CvBnBcFK.js";
+import { E as assessLocalMachineFailure, F as accountProfileSpaceCacheDir, J as legacyAccountProfileSpacesDir, M as formatLocalMachineIssueMessage, N as OPENMELD_HOME_ENV_KEY, R as accountsDir, X as normalizeAccountKey, Z as normalizeOpenMeldProfileId, d as runWithHeldLock, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, k as createServiceSpawnPendingIssue, pt as resolveOpenMeldServiceOwnedPathInput, q as isPublishedOpenMeldHome, rt as openMeldRootDir, s as releaseLock, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue, v as resolveCliContextId, x as resolveOpenMeldLaneDescriptor } from "./lock-Dxp6o_t_.js";
+import { $r as spaceMemberDirectoryEntrySchema, Ar as organizationComputersResponseSchema, Bn as OPENMELD_HEADER_REQUEST_ID, Ci as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Cr as getOrganizationSkillResponseSchema, Dr as organizationSkillSummarySchema, Ei as computerFileAccessPolicySchema, Er as organizationSkillReleaseSummarySchema, Fr as listCenterAgentRoutineRunsResponseSchema, Gn as spaceEntryTargetSchema, Hr as agentActivityEventSchema, Ir as listCenterAgentRoutinesResponseSchema, Kr as agentActivitySnapshotResponseSchema, Lr as pauseCenterAgentRoutineResponseSchema, Mr as submitFeedbackIssueResponseSchema, Nr as createCenterAgentRoutineResponseSchema, Oi as toCompatibleSpaceAddressingRequestWireValue, Pr as deleteCenterAgentRoutineResponseSchema, Qr as spaceMemberDirectoryAllowedRelationsSchema, Rr as resumeCenterAgentRoutineResponseSchema, Si as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Sr as spaceMetaSchema, Ti as computerFileAccessPolicyInputSchema, Tt as buildSpaceAttachmentDownloadPath, Vn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Vr as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, Wn as getSpaceUpdatesResponseSchema, Zr as spaceMemberAgentWakeAvailabilitySchema, _i as archiveProjectResponseSchema, _r as gatewayErrorEnvelopeSchema, ai as agentActivitySessionInventoryResponseSchema, an as createRuntimeReportingApi, bi as projectSchema, ci as centerAgentToolSpeakerSchema, cr as betterAuthDeviceAuthorizationCodeRequestSchema, dr as betterAuthDeviceAuthorizationTokenRequestSchema, ei as spaceMemberDirectorySchema, fi as serviceConnectionEvidenceEventSchema, fr as betterAuthDeviceAuthorizationTokenResponseSchema, gi as localProjectControlDiscoverProjectsResponseSchema, hi as localProjectControlDaemonFrameSchema, jn as DAEMON_STREAM_KEEPALIVE_PING, jr as submitFeedbackIssueRequestSchema, jt as createAgentActivityApi, kr as organizationDirectoryResponseSchema, lr as betterAuthDeviceAuthorizationCodeResponseSchema, mi as localProjectControlConnectionSchema, on as createServiceConnectionEvidenceApi, pi as serviceConnectionEvidenceJournalSchema, pr as betterAuthSessionSnapshotResponseSchema, qn as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, rr as submitAgentControllerTaskLifecycleEventItemSchema, si as observedLocalAgentSessionSchema, sn as createSpaceApi, sr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, t as OpenMeldApiClientHttpError, ti as spaceMemberKindSchema, ur as betterAuthDeviceAuthorizationErrorResponseSchema, vi as createProjectResponseSchema, wi as computerFileAccessDaemonFrameSchema, wn as toStructuredApiClientFailure, wr as listOrganizationSkillsResponseSchema, xi as updateProjectResponseSchema, xr as spaceCreatorSchema, yi as listProjectsResponseSchema, yr as organizationSpaceDirectoryWithMemberCountsResponseSchema, zr as updateCenterAgentRoutineResponseSchema } from "./dist-B8I8inkY.js";
 import { b as normalizeKnownBuiltinAgentControllerId, d as resolveBuiltinAgentControllerConversationKind, l as buildAgentControllerConversationRef } from "./controller-contract-pe3_Re-c.js";
-import { $a as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, $n as resolveRouteRegistrationReconcileDecision, $t as resolveProjectBindingForPath, A as resolveDaemonStatusSnapshot, Aa as normalizeNonNegativeInteger$1, Ai as readCurrentDaemonOwnerSnapshot, An as resolveSkillsAgentRegistry, Ar as seedLegacyAgentContext, B as formatDaemonServiceRefreshReliabilityMessage, Ba as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, Bi as waitForDaemonSystemServiceToStop, Bn as repairBuiltinControllerInstall, Br as buildWorkingLanguagePromptPlan, C as isSystemServiceStartupTimeoutError, Ca as ensureDaemonRuntimePaths, Ci as buildCliLaunchInvocation, Cn as removeAgentCustomTarget, Cr as buildRuntimeWorkspaceFingerprint, Ct as summarizeSkippedDaemonProfiles, D as captureDaemonServiceEvidence, Da as dirnamePath, Di as buildDaemonOwnerSnapshotFromObservedState, Dn as updateAgentRegistrations, Do as formatDaemonLifecycleOriginSummary, Dr as loadLedgerState, Ds as compareAgentControllerRefsForDisplay, Dt as resolveLocalController, E as startDaemonSystemServiceWithAutoRepair, Ea as asRecord, Ei as inspectDaemonServiceInventory, En as updateAgentCustomTarget, Eo as emitDaemonLifecycleEvent, Er as commitResolvedAgentContext, Es as resolveUserFacingCliEntryCommand, Et as readLocalEnabledControllers, F as buildDaemonServiceRefreshNextStep, Fa as warnDaemonEvent, Fi as getEffectiveDaemonRuntimeStatus, Fr as buildAgentContextLookupKey, G as buildDaemonServiceDependencyDetails, Ga as DEFAULT_RECONNECT_DELAY_MS, Gn as isNpmGlobalCommandPath, Gt as bindProject, Ha as DAEMON_STREAM_CONNECT_TIMEOUT_MS, Hi as listDaemonOwnedProcesses, Hn as resolveBuiltinAgentControllerDefinition, Ho as isDaemonServiceContractIdentityReusable, I as buildDaemonServiceRefreshPromptMessage, Ia as CATALOG_SYNC_RETRY_INTERVAL_MS, Ii as readCurrentDaemonRuntimeContext, In as normalizeAgentId, Ir as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, It as readProfileWorkspaceConfigForAccount, J as buildDaemonServiceDependencySummary, Ja as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Ji as DaemonServiceRunError, Jn as normalizeDispatchThreadAction, Jr as parseAgentControllerRef, Jt as listProjectConnectionsWithStatus, K as buildDaemonServiceDependencyMeaning, Ka as HEARTBEAT_RESPONSE_TIMEOUT_MS, Ki as ensureDaemonRuntimeContractState, Kn as isPnpmGlobalCommandPath, Ko as compareSemver, Kt as isProjectBound, La as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, Li as readCurrentObservedDaemonRuntimeStatus, Ln as normalizeAgentIds, Lr as areAgentControllerInterfaceAccountsSame, M as resolveDaemonStatusAuthenticationAttention, Ma as normalizeText$2, Mi as resolveStoppedContractWriteBlockedReason, Mo as runDaemonServiceManagerAction, Mr as upsertConversationExecutionState, Mt as resolveProfileWorkspaceRuntime, N as resolveServiceReadiness, Na as nowIsoString, Ni as summarizeDaemonOwnerSnapshot, Nn as resolveRegistryRuntimeAdapterCapabilitySnapshot, No as runWithDaemonLifecycleCommandJournal, Nr as withLedgerStateTransaction, Nt as ensureOpenMeldManagedProfileWorkspace, O as captureDaemonServiceEvidenceBestEffort, Oa as emitRunLine, Oi as formatDaemonOwnerSummaryLabel, On as canManageRegistryAgentSkillTargets, Oo as readLatestDaemonLifecycleConnectionStateEvent, Or as removeConversationExecutionState, Ot as resolveLocalRuntimeControllerSupport, Pa as toErrorMessage$10, Pi as clearDaemonRuntimeStateIfDefinitelyStopped, Pn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Pr as buildAuthenticatedControlPlaneResponse, Qa as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, Qn as isDaemonReconcileInProgressError, Qr as renderWorkingLanguagePrompt, Qt as removeProjectConnection, R as buildDaemonServiceStatusReadOnlyDetail, Ra as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Ri as resolveDaemonRuntimeState, Rn as parseAgentEnabledOption, Rr as buildAgentControllerRef, Rt as resolveConfiguredProfileWorkspacePathForAccount, S as isDaemonInventoryRunningAndStartReady$1, Sa as buildLedgerPaths, So as resolveDaemonBundleEntryPathFromState, Sr as runRuntimeTask, Ss as formatOpenMeldCliTextBlock, St as loadDaemonRouteCatalog, T as waitForSystemServiceStartup$1, Ta as resolvePreferredDaemonDeviceId, Ti as createProviderOriginalError, Tn as setAgentRegistrationEnabled, Tr as appendLedgerHistoryEntry, Tt as buildRuntimeRouteTargets, U as clearDaemonStartFailureState, Ua as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Un as isBunGlobalCommandPath, Uo as readDaemonServiceContract, Ut as ProjectBindingOperationError, V as formatDaemonServiceUpdateRequiredMessage, Va as DAEMON_RUNTIME_CONTRACT_EPOCH, Vi as cleanupLegacySharedDaemonServiceState, Vn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Vo as clearDaemonServiceContract, Vr as createAgentControllerInterfaceDisplayRows, W as writeDaemonStartFailureState, Wa as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, Wn as isHomebrewCommandPath, Wo as upsertDaemonServiceContract, Wt as ProjectBindingStoreUpdateRequiredError, X as resolveDaemonServiceDependencyDiagnostics, Xa as REGISTER_RESPONSE_TIMEOUT_MS, Xn as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Xt as removeAgentActivityBindingsWhileDeliveryLocked, Y as buildDaemonServiceDependencyTitle, Ya as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Yi as resolveCurrentDaemonExpectedVersion, Yn as syncRuntimeEventToInflightTaskControlRegistry, Za as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Zn as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zr as renderInformationProtectionPrompt, Zt as removeMissingProjectConnections, _ as DaemonServiceLifecycleDrainTimeoutError, _a as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, _i as forkCodexAppServerThread, _n as listAgentRegistrations, _o as OPENMELD_VERSION, _r as resolveDispatchQueueLogMeta, _s as resolveAuthenticationReasonFromState, _t as readDaemonRouteCatalogCache, a as resolveServiceUpdateUrgency, aa as resolveCurrentOpenMeldAccountContext, ai as resolveCatalogSyncSkippedProfilesLogState, an as withAgentActivityDeliveryLock, ar as createLocalTaskInterruptSender, ba as classifyDaemonServiceRunStartability, bi as createUnavailableProviderUsageLimits, bn as readAgentRuntimeConfigHealth, bo as readDaemonActiveBundleState, br as resolveCompatibleConversationExecutionState, bs as formatOpenMeldCliCommands, bt as createMutableRouteCatalogState, ca as ensureDaemonSystemServiceCommandFiles, ci as parseOpenCodeGoUsageResponse, cn as syncDeviceRuntimeStateProjection, co as resolveOpenMeldEnvironmentTarget, cr as createInflightTaskControlRegistry, da as isOpenMeldManagedBinaryPath, di as GrokBuildAcpTransportError, dn as emitReconcileStartedEvidence, dr as MIN_HEARTBEAT_INTERVAL_MS, ds as buildHumanAuthenticationCard, er as createSerialAgentInteractionCallback, fa as buildDaemonServiceTargetSpec, fi as probeGrokBuildAcpInterface, fo as requestLocalDaemonShutdown, fr as applyAcceptedLeases, fs as createAuthenticationError, g as scheduleDaemonServiceUpdate, ga as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, gi as resolveInstalledCodexLaunchCandidates, gn as listAgentCustomTargets, go as readManagedCliInstallation, gr as resolveCatalogSyncIntervalMs, gt as slugifyOpenClawNamePart, hi as resolveCodexTimeoutMs, hn as createRegistrationFromCatalogTarget, hr as resolveAdaptiveHeartbeatIntervalMs, ht as normalizeOpenClawSpaceIdPrefix, i as writeOpenMeldToolsMaintenancePolicy, in as resolveLocalProjectConnectionForPath, io as clearAllSelectedOpenMeldProfileIds, ir as mergeOpenClawGatewayVisibility, j as resolveDaemonStatusAttention, ja as normalizeOptionalText$13, ji as resolveDaemonStopStrategy, jo as resolveRecentDaemonSignalStopCause, jr as settleInflightTask, jt as resolveCurrentEffectiveProfileWorkingFolderRuntime, k as formatDaemonFailureContextText, ka as normalizeHeartbeatIntervalMs, ki as hasActiveDaemonOwners, ko as readLatestDaemonLifecycleOriginEvent, kr as resolveConversationExecutionStateByLookupKey, la as extractDaemonCommandEntryPath, li as forkOpenCodeServerSession, ln as emitDriftDetectedEvidence, lo as resolveAuthBaseUrl, lr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ls as buildAuthenticationStatusLabel, ma as isVersionDowngrade, mi as projectCodexUsageLimits, mn as addAgentCustomTarget, mr as pruneStaleLeases, ms as resolveAuthenticationGuidance, mt as buildOpenClawSpaceSessionKey, n as readOpenMeldToolsMaintenancePolicy, no as resolveOpenMeldProfileOrNull, nr as normalizeDispatchPostMessageAction, o as assessServerRequiredVersion, oa as writeDaemonServiceContract, oi as createLocalAdapterContainer, on as withAgentActivityLocalStateLock, or as buildLocalServiceDiagnosticsPayload, pa as resolveDaemonServiceAlignmentDecision, pi as resolveInstalledGrokBuildLaunchCandidates, pn as resolveAgentProfilePrimaryAgentControllerReport, po as sendLocalDaemonControlPlaneRequest, pr as applyIntervalJitterMs$1, ps as extractAuthenticationPromptAction, pt as prepareProviderRuntime, q as buildDaemonServiceDependencyNextStep, qa as MAX_RECONNECT_DELAY_MS, qi as readDaemonRuntimeContractRepairReport, qt as listProjectBindings, r as resolveOpenMeldToolsMaintenanceProjection, rr as createPendingAgentInteractionRegistry, s as describeServerRequiredVersionUnavailableReason, sa as buildDaemonSystemServiceCommandSpec, si as createLocalAdapterEntries, sr as createLocalExecutionSlots, ss as readDaemonCatalogSyncSignal, t as createOpenMeldToolsUpdateCoordinator, ta as resolveRuntimeContext, tn as setDefaultProjectConnection, to as requireOpenMeldProfile, tr as buildDispatchReplyContextSummary, u as assessCliUpdate, ua as resolveDaemonBundleIdFromEntryPath, ui as resolveInstalledOpenCodeLaunchCandidates, un as emitReconcileCompletedEvidence, uo as LocalDaemonControlPlaneClientError, ur as MAX_HEARTBEAT_INTERVAL_MS, us as buildCommandAuthenticationPromptMessage$1, v as runDaemonServiceLifecycle, va as DAEMON_SERVICE_REPAIR_ANOMALIES, vi as verifyCodexAppServerThread, vn as listAgentTargetStates, vo as cleanupInactiveDaemonServiceBundles, vr as resolveDispatchContinuityObservation, vs as formatInlineOpenMeldCliCommands, vt as writeDaemonRouteCatalogCache, w as resolveSystemServiceStartupWaitMs, wa as resolveDaemonDeviceId, wi as materializeCliLaunchCommand, wn as resolveAgentTargetState, wr as buildTaskResultEnvelope, wt as syncDaemonRouteCatalogState, x as uninstallDaemonServiceUpdateWorker, xa as classifyDaemonServiceWakeability, xi as createUnsupportedProviderUsageLimits, xn as reconcileNewRunnableBuiltinAgentRegistrations, xo as resolveAlignedDaemonActiveBundleEntryPath, xr as resolveLatestScopedConversationExecutionState, xt as createRouteCatalogFromMutableState, y as ensureDaemonServiceMaintenanceInstalled, ya as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES, yi as resolveInstalledClaudeCodeLaunchCandidates, yn as manageAgentRegistrationInstallation, yo as prepareDaemonServiceBundle, yr as resolveCompatibleAgentContextMatch, ys as formatOpenMeldCliCommand, yt as resolveLocalServiceDemand, z as buildDaemonServiceUpdateRequiredNextStep, za as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, zi as resolveDaemonServiceManagerForRuntimeState, zn as sortAgentRegistrations, zr as buildInformationProtectionPromptPlan, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-BBZhGo1A.js";
-import { $r as serviceConnectionEvidenceEventSchema, Bn as spaceEntryTargetSchema, Br as spaceMemberDirectoryEntrySchema, Cr as listCenterAgentRoutinesResponseSchema, En as DAEMON_STREAM_KEEPALIVE_PING, Er as updateCenterAgentRoutineResponseSchema, Fn as OPENMELD_HEADER_REQUEST_ID, Hn as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Hr as spaceMemberKindSchema, In as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Jr as observedLocalAgentSessionSchema, Kr as agentActivitySessionInventoryResponseSchema, Nr as agentActivitySnapshotResponseSchema, Or as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, Rr as spaceMemberAgentWakeAvailabilitySchema, Sr as listCenterAgentRoutineRunsResponseSchema, Tr as resumeCenterAgentRoutineResponseSchema, Tt as buildSpaceAttachmentDownloadPath, Vr as spaceMemberDirectorySchema, Yr as centerAgentToolSpeakerSchema, Zn as submitAgentControllerTaskLifecycleEventItemSchema, _r as organizationComputersResponseSchema, ai as createProjectResponseSchema, an as createSpaceApi, br as createCenterAgentRoutineResponseSchema, ci as updateProjectResponseSchema, cr as spaceCreatorSchema, di as computerFileAccessDaemonFrameSchema, dr as listOrganizationSkillsResponseSchema, ei as serviceConnectionEvidenceJournalSchema, fi as computerFileAccessPolicyInputSchema, gr as organizationDirectoryResponseSchema, ii as archiveProjectResponseSchema, in as createServiceConnectionEvidenceApi, ir as gatewayErrorEnvelopeSchema, jt as createAgentActivityApi, kr as agentActivityEventSchema, li as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, lr as spaceMetaSchema, mi as toCompatibleSpaceAddressingRequestWireValue, mr as organizationSkillSummarySchema, ni as localProjectControlDaemonFrameSchema, oi as listProjectsResponseSchema, or as organizationSpaceDirectoryWithMemberCountsResponseSchema, pi as computerFileAccessPolicySchema, pr as organizationSkillReleaseSummarySchema, ri as localProjectControlDiscoverProjectsResponseSchema, rn as createRuntimeReportingApi, si as projectSchema, t as OpenMeldApiClientHttpError, ti as localProjectControlConnectionSchema, ui as OPENMELD_RUNTIME_CAPABILITIES_HEADER, ur as getOrganizationSkillResponseSchema, vr as submitFeedbackIssueRequestSchema, wr as pauseCenterAgentRoutineResponseSchema, xr as deleteCenterAgentRoutineResponseSchema, yn as toStructuredApiClientFailure, yr as submitFeedbackIssueResponseSchema, zn as getSpaceUpdatesResponseSchema, zr as spaceMemberDirectoryAllowedRelationsSchema } from "./dist-CxadJClH.js";
-import { $ as runtimeTransportResumeControllerConversationResultFramePayloadSchema, A as runtimeTransportDispatchPreviewEndRequestSchema, An as localFolderPickerHelperResultSchema, B as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Bt as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, C as localWakeRouteWorkingFolderObservationSchema, D as runtimeTransportDispatchInteractionRequestSchema, Di as localAgentReasoningPreferencesSchema, Dn as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, E as runtimeTransportDispatchInteractionDeliveredRequestSchema, Ei as OPENMELD_REASONING_STREAM_HEADER, En as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, G as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Gn as sanitizeSignalTextPreview, Gt as formatLocalComponentsSummaryDescription, H as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, Ht as agentInteractionRequestSchema, I as runtimeTransportForkAgentSessionResultSchema, Ii as normalizeOptionalWorkingDirectory, J as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Jr as boolean, Jt as formatLocalSetupActionLabel, Kt as formatLocalComponentsSummaryLabel, L as runtimeTransportHeartbeatRequestSchema, Li as openMeldRuntimeProfileIdSchema, M as runtimeTransportDispatchReasoningRequestSchema, N as runtimeTransportDispatchRuntimeEvidenceRequestSchema, O as runtimeTransportDispatchInteractionResponseFramePayloadSchema, On as localFolderPickerDaemonFrameSchema, P as runtimeTransportDispatchToolActivityRequestSchema, Q as runtimeTransportResumeControllerConversationFramePayloadSchema, Qr as enumFactory, R as runtimeTransportHeartbeatResponseSchema, T as runtimeTransportDeliverDispatchRequestSchema, Ti as LOCAL_AGENT_REASONING_MAX_CHARS, Tt as openMeldDaemonControlPlaneResponseSchema, U as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, V as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, W as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, X as runtimeTransportRegisterSessionResponseSchema, Xr as discriminatedUnion, Xt as localCliComponentUpdateProjectionSchema, Y as runtimeTransportRegisterSessionRequestSchema, Yi as resolvePublicAgentAvailabilityCopy, Yt as installedLocalComponentsSnapshotSchema, Zi as sanitizeDispatchErrorSummary, _n as normalizeSpacePasswordText, ar as collectCanonicalMentionTextFragments, ei as iso, en as localServiceComponentUpdateProjectionSchema, et as runtimeTransportRouteCatalogChangedFramePayloadSchema, ft as openMeldSpaceEgressActionSchema, hi as url, hr as resolveSpaceMentionLabels, ir as MESSAGE_MENTION_TYPE_VALUES, j as runtimeTransportDispatchPreviewRequestSchema, k as runtimeTransportDispatchLifecycleRequestSchema, ki as openMeldRequestContextSchema, kn as localFolderPickerHelperProtocolResultSchema, li as strictObject, lr as normalizeMessageEnvelope, mn as runtimeTransportDeliveryExecutionIdentitySchema, mr as resolveSingleSpaceMentionLabels, ni as literal, nt as runtimeTransportSubmitTaskResultRequestSchema, pn as runtimeCoordinatorExecutionTokenEnvelopeSchema, q as runtimeTransportOpenMeldToolsControlFramePayloadSchema, qt as formatLocalSetupActionDescription, sr as getSpaceMessageAddressingRelationSupportForTargetKind, ui as string, ur as resolveMessageEnvelopeTargetField, ut as openMeldDaemonTaskResultPayloadSchema, x as daemonStreamFrameSchema, y as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, z as runtimeTransportLocalAgentControlCancelFramePayloadSchema } from "./profiles-BCecj4Pj.js";
-import { b as withSkillsInstallLock, f as ensureLocalSkills, g as loadSelectedSkillAssets, l as installSkillsToTargets, n as collectSkillsReadinessSnapshot, u as resolveSkillInstallStateForTarget, v as hashBundledSkillAssets, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installation-inventory-P49sTjhe.js";
+import { $i as buildDaemonSystemServiceCommandSpec, $n as resolveRouteRegistrationReconcileDecision, $r as renderWorkingLanguagePrompt, $t as resolveProjectBindingForPath, A as resolveDaemonStatusSnapshot, Aa as DAEMON_RUNTIME_CONTRACT_EPOCH, Ai as formatDaemonOwnerSummaryLabel, An as resolveSkillsAgentRegistry, Ar as seedLegacyAgentContext, B as formatDaemonServiceRefreshReliabilityMessage, Ba as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Bi as DaemonServiceRunError, Bn as repairBuiltinControllerInstall, Br as buildInformationProtectionPromptPlan, C as isSystemServiceStartupTimeoutError, Ca as toErrorMessage$10, Cn as removeAgentCustomTarget, Cr as buildRuntimeWorkspaceFingerprint, Ct as summarizeSkippedDaemonProfiles, D as captureDaemonServiceEvidence, Da as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Di as createProviderOriginalError, Dn as updateAgentRegistrations, Dr as loadLedgerState, Dt as resolveLocalController, E as startDaemonSystemServiceWithAutoRepair, Ea as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, Ei as listAgentControllerSupervisedProcessIds, En as updateAgentCustomTarget, Er as commitResolvedAgentContext, Et as readLocalEnabledControllers, F as buildDaemonServiceRefreshNextStep, Fa as HEARTBEAT_RESPONSE_TIMEOUT_MS, Fi as summarizeDaemonOwnerSnapshot, Fr as assertLegacyAgentContextAssociation, G as buildDaemonServiceDependencyDetails, Ga as resolveOpenMeldProfileOrNull, Gn as isNpmGlobalCommandPath, Gt as bindProject, Ha as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Hn as resolveBuiltinAgentControllerDefinition, Hr as createAgentControllerInterfaceDisplayRows, I as buildDaemonServiceRefreshPromptMessage, Ia as MAX_RECONNECT_DELAY_MS, In as normalizeAgentId, Ir as buildAgentContextLookupKey, It as readProfileWorkspaceConfigForAccount, J as buildDaemonServiceDependencySummary, Jn as normalizeDispatchThreadAction, Jt as listProjectConnectionsWithStatus, K as buildDaemonServiceDependencyMeaning, Kn as isPnpmGlobalCommandPath, Kt as isProjectBound, La as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Ln as normalizeAgentIds, Lr as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, M as resolveDaemonStatusAuthenticationAttention, Ma as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Mi as readCurrentDaemonOwnerSnapshot, Mr as upsertConversationExecutionState, Mt as resolveProfileWorkspaceRuntime, N as resolveServiceReadiness, Na as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, Ni as resolveDaemonStopStrategy, Nn as resolveRegistryRuntimeAdapterCapabilitySnapshot, Nr as withLedgerStateTransaction, Nt as ensureOpenMeldManagedProfileWorkspace, O as captureDaemonServiceEvidenceBestEffort, Oa as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, Oi as inspectDaemonServiceInventory, On as canManageRegistryAgentSkillTargets, Or as removeConversationExecutionState, Ot as resolveLocalRuntimeControllerSupport, Pa as DEFAULT_RECONNECT_DELAY_MS, Pi as resolveStoppedContractWriteBlockedReason, Pn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Pr as buildAuthenticatedControlPlaneResponse, Qi as writeDaemonServiceContract, Qn as isDaemonReconcileInProgressError, Qr as renderInformationProtectionPrompt, Qt as removeProjectConnection, R as buildDaemonServiceStatusReadOnlyDetail, Ra as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Ri as ensureDaemonRuntimeContractState, Rn as parseAgentEnabledOption, Rr as areAgentControllerInterfaceAccountsSame, Rt as resolveConfiguredProfileWorkspacePathForAccount, S as isDaemonInventoryRunningAndStartReady$1, Sa as nowIsoString, Si as createUnsupportedProviderUsageLimits, Sr as runRuntimeTask, St as loadDaemonRouteCatalog, T as waitForSystemServiceStartup$1, Ta as CATALOG_SYNC_RETRY_INTERVAL_MS, Ti as materializeCliLaunchCommand, Tn as setAgentRegistrationEnabled, Tr as appendLedgerHistoryEntry, Tt as buildRuntimeRouteTargets, U as clearDaemonStartFailureState, Un as isBunGlobalCommandPath, Ut as ProjectBindingOperationError, V as formatDaemonServiceUpdateRequiredMessage, Va as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, Vi as resolveCurrentDaemonExpectedVersion, Vn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Vr as buildWorkingLanguagePromptPlan, W as writeDaemonStartFailureState, Wa as requireOpenMeldProfile, Wn as isHomebrewCommandPath, Wt as ProjectBindingStoreUpdateRequiredError, X as resolveDaemonServiceDependencyDiagnostics, Xn as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Xt as removeAgentActivityBindingsWhileDeliveryLocked, Y as buildDaemonServiceDependencyTitle, Yn as syncRuntimeEventToInflightTaskControlRegistry, Yr as parseAgentControllerRef, Zi as resolveCurrentOpenMeldAccountContext, Zn as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zt as removeMissingProjectConnections, _ as DaemonServiceLifecycleDrainTimeoutError, _a as emitRunLine, _i as resolveInstalledCodexLaunchCandidates, _n as listAgentRegistrations, _o as compareAgentControllerRefsForDisplay, _r as resolveDispatchQueueLogMeta, _t as readDaemonRouteCatalogCache, a as resolveServiceUpdateUrgency, aa as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, an as withAgentActivityDeliveryLock, ar as createLocalTaskInterruptSender, ba as normalizeOptionalText$13, bi as resolveInstalledClaudeCodeLaunchCandidates, bn as readAgentRuntimeConfigHealth, br as resolveCompatibleConversationExecutionState, bt as createMutableRouteCatalogState, ca as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES, ci as createLocalAdapterEntries, cn as syncDeviceRuntimeStateProjection, co as buildAuthenticationStatusLabel, cr as createInflightTaskControlRegistry, da as buildLedgerPaths, di as resolveInstalledOpenCodeLaunchCandidates, dn as emitReconcileStartedEvidence, do as createAuthenticationError, dr as MIN_HEARTBEAT_INTERVAL_MS, ea as ensureDaemonSystemServiceCommandFiles, er as createSerialAgentInteractionCallback, fa as ensureDaemonRuntimePaths, fi as GrokBuildAcpTransportError, fo as extractAuthenticationPromptAction, fr as applyAcceptedLeases, g as scheduleDaemonServiceUpdate, ga as dirnamePath, gi as resolveCodexTimeoutMs, gn as listAgentCustomTargets, go as resolveAuthenticationReasonFromState, gr as resolveCatalogSyncIntervalMs, gt as slugifyOpenClawNamePart, ha as asRecord, hi as projectCodexUsageLimits, hn as createRegistrationFromCatalogTarget, hr as resolveAdaptiveHeartbeatIntervalMs, ht as normalizeOpenClawSpaceIdPrefix, i as writeOpenMeldToolsMaintenancePolicy, in as resolveLocalProjectConnectionForPath, ir as mergeOpenClawGatewayVisibility, j as resolveDaemonStatusAttention, ja as DAEMON_STREAM_CONNECT_TIMEOUT_MS, ji as hasActiveDaemonOwners, jr as settleInflightTask, jt as resolveCurrentEffectiveProfileWorkingFolderRuntime, k as formatDaemonFailureContextText, ka as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, ki as buildDaemonOwnerSnapshotFromObservedState, kr as resolveConversationExecutionStateByLookupKey, la as classifyDaemonServiceRunStartability, li as parseOpenCodeGoUsageResponse, ln as emitDriftDetectedEvidence, lo as buildCommandAuthenticationPromptMessage$1, lr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ma as resolvePreferredDaemonDeviceId, mi as resolveInstalledGrokBuildLaunchCandidates, mn as addAgentCustomTarget, mr as pruneStaleLeases, mt as buildOpenClawSpaceSessionKey, n as readOpenMeldToolsMaintenancePolicy, na as resolveDaemonServiceAlignmentDecision, nr as normalizeDispatchPostMessageAction, o as assessServerRequiredVersion, oa as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, oi as resolveCatalogSyncSkippedProfilesLogState, on as withAgentActivityLocalStateLock, oo as readDaemonCatalogSyncSignal, or as buildLocalServiceDiagnosticsPayload, pa as resolveDaemonDeviceId, pi as probeGrokBuildAcpInterface, pn as resolveAgentProfilePrimaryAgentControllerReport, po as resolveAuthenticationGuidance, pr as applyIntervalJitterMs$1, pt as prepareProviderRuntime, q as buildDaemonServiceDependencyNextStep, qa as clearAllSelectedOpenMeldProfileIds, qi as resolveRuntimeContext, qt as listProjectBindings, r as resolveOpenMeldToolsMaintenanceProjection, ra as isVersionDowngrade, rr as createPendingAgentInteractionRegistry, s as describeServerRequiredVersionUnavailableReason, sa as DAEMON_SERVICE_REPAIR_ANOMALIES, si as createLocalAdapterContainer, sr as createLocalExecutionSlots, t as createOpenMeldToolsUpdateCoordinator, ta as buildDaemonServiceTargetSpec, tn as setDefaultProjectConnection, tr as buildDispatchReplyContextSummary, u as assessCliUpdate, ua as classifyDaemonServiceWakeability, ui as forkOpenCodeServerSession, un as emitReconcileCompletedEvidence, uo as buildHumanAuthenticationCard, ur as MAX_HEARTBEAT_INTERVAL_MS, v as runDaemonServiceLifecycle, va as normalizeHeartbeatIntervalMs, vi as forkCodexAppServerThread, vn as listAgentTargetStates, vr as resolveDispatchContinuityObservation, vt as writeDaemonRouteCatalogCache, w as resolveSystemServiceStartupWaitMs, wa as warnDaemonEvent, wi as buildCliLaunchInvocation, wn as resolveAgentTargetState, wr as buildTaskResultEnvelope, wt as syncDaemonRouteCatalogState, x as uninstallDaemonServiceUpdateWorker, xa as normalizeText$2, xi as createUnavailableProviderUsageLimits, xn as reconcileNewRunnableBuiltinAgentRegistrations, xr as resolveLatestScopedConversationExecutionState, xt as createRouteCatalogFromMutableState, y as ensureDaemonServiceMaintenanceInstalled, ya as normalizeNonNegativeInteger$1, yi as verifyCodexAppServerThread, yn as manageAgentRegistrationInstallation, yr as resolveCompatibleAgentContextMatch, yt as resolveLocalServiceDemand, z as buildDaemonServiceUpdateRequiredNextStep, za as REGISTER_RESPONSE_TIMEOUT_MS, zi as readDaemonRuntimeContractRepairReport, zn as sortAgentRegistrations, zr as buildAgentControllerRef, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-D6uuBitR.js";
+import { A as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, An as resolveSpaceMentionLabels, Bt as localFolderPickerDaemonFrameSchema, C as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, Cn as executionContextAssignmentSchema, D as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, E as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, Er as sanitizeDispatchErrorSummary, Et as runtimeTransportDeliveryExecutionIdentitySchema, F as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Ht as localFolderPickerHelperResultSchema, I as runtimeTransportRouteCatalogChangedFramePayloadSchema, J as openMeldSpaceEgressActionSchema, K as openMeldDaemonTaskResultPayloadSchema, M as runtimeTransportRegisterSessionResponseSchema, P as runtimeTransportResumeControllerConversationFramePayloadSchema, R as runtimeTransportSubmitTaskResultRequestSchema, Rt as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, S as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Sn as resolveMessageEnvelopeTargetField, T as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Tn as executionContextTaskSchema, Tt as runtimeCoordinatorExecutionTokenEnvelopeSchema, Vt as localFolderPickerHelperProtocolResultSchema, Xr as openMeldRequestContextSchema, _n as collectCanonicalMentionTextFragments, _r as OPENMELD_REASONING_STREAM_HEADER, _t as agentInteractionRequestSchema, a as localWakeRouteWorkingFolderObservationSchema, b as runtimeTransportHeartbeatResponseSchema, c as runtimeTransportDispatchInteractionDeliveredRequestSchema, d as runtimeTransportDispatchLifecycleRequestSchema, f as runtimeTransportDispatchPreviewEndRequestSchema, g as runtimeTransportDispatchToolActivityRequestSchema, gn as MESSAGE_MENTION_TYPE_VALUES, gr as LOCAL_AGENT_REASONING_MAX_CHARS, h as runtimeTransportDispatchRuntimeEvidenceRequestSchema, ht as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, j as runtimeTransportRegisterSessionRequestSchema, k as runtimeTransportOpenMeldToolsControlFramePayloadSchema, kn as resolveSingleSpaceMentionLabels, kt as normalizeSpacePasswordText, l as runtimeTransportDispatchInteractionRequestSchema, m as runtimeTransportDispatchReasoningRequestSchema, p as runtimeTransportDispatchPreviewRequestSchema, r as daemonStreamFrameSchema, rn as sanitizeSignalTextPreview, s as runtimeTransportDeliverDispatchRequestSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, u as runtimeTransportDispatchInteractionResponseFramePayloadSchema, v as runtimeTransportForkAgentSessionResultSchema, vr as localAgentReasoningPreferencesSchema, w as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, wr as resolvePublicAgentAvailabilityCopy, x as runtimeTransportLocalAgentControlCancelFramePayloadSchema, xn as normalizeMessageEnvelope, y as runtimeTransportHeartbeatRequestSchema, yn as getSpaceMessageAddressingRelationSupportForTargetKind, zt as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER } from "./runtime-transport-DryoU4rm.js";
+import { $ as literal, C as formatLocalSetupActionDescription, E as localCliComponentUpdateProjectionSchema, G as boolean, S as formatLocalComponentsSummaryLabel, T as installedLocalComponentsSnapshotSchema, Y as enumFactory, Z as iso, a as openMeldDaemonControlPlaneResponseSchema, ft as url, gt as openMeldRuntimeProfileIdSchema, ht as normalizeOptionalWorkingDirectory, j as localServiceComponentUpdateProjectionSchema, ot as strictObject, q as discriminatedUnion, st as string, w as formatLocalSetupActionLabel, x as formatLocalComponentsSummaryDescription } from "./control-plane-D9jDcbMZ.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { C as resolveOpenMeldDistribution, S as isBinaryDistribution, a as beginAuthSessionTransition, g as onAuthSessionCredentialObservation, h as onAuthSessionCredentialAvailable, i as assertAuthSessionMutationAvailable, l as getAuthSessionState, o as clearAuthSession, y as setAuthSession } from "./auth-session-BjSqMLTz.js";
-import { a as readDaemonLocalStateFile, i as writeDaemonRuntimeLease, o as writeDaemonLocalStateFile } from "./daemon-runtime-lease-CXlGR-iA.js";
-import { $ as buildAgentFacingMentalModelLines, At as validateDaemonControlTargetInput, Ft as getBuiltinAgentSelectionRequiredArguments, Gt as waitForOpenMeldToolsUpdateCompletion, Ht as formatAgentOverviewPayload, Jt as sanitizeTerminalDisplayText, Kt as resolveOpenMeldToolsUpdateOperation, Lt as validateBuiltinAgentSelectionInput, Mt as buildBuiltinAgentSelectionCommand, Nt as buildBuiltinAgentSelectionExamples, Pt as getBuiltinAgentSelectionOptionalArguments, Qt as outLine, Rt as buildAgentOverviewFromContract, Y as SPACE_COLLABORATION_CONTEXT_RULE, Z as SPACE_PERSONAL_CONTRIBUTION_RULE, Zt as outJsonLine, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceWakeParticipantLines, ct as deriveContinuity, d as formatDaemonServiceMissingStatus, dt as resolvePublicAgentFailureReason, f as getDaemonDowngradeBlockedTitle, ft as resolveSpacePublicationRequirement, h as createAuthLoginGuideError, i as formatDaemonInstallFailedMessage, it as buildSpaceEntryBriefNeedMoreLine, l as formatDaemonServiceMissingRunStepOne, lt as isSelfWakeSpaceAction, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, nt as buildCompactDispatchActionGuidanceLines, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, pt as getCommandEntryContract, qt as createPresenter, r as formatDaemonDowngradeBlockedNextStep, rt as buildSpaceAgentIdentityLine, s as formatDaemonServiceMissingMeaning, st as composeDispatchBrief, t as formatElapsedTime, tt as buildCenterAgentRoleTemplateText, u as formatDaemonServiceMissingRunStepTwo, ut as renderSpaceEntryBrief } from "./elapsed-time-C7P-nWIO.js";
-import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-9A557X2K.js";
+import { C as withAdmittedServiceSession, T as ServiceAccountAdmissionError, _ as onAuthSessionCredentialObservation, a as beginAuthSessionTransition, g as onAuthSessionCredentialAvailable, i as assertAuthSessionMutationAvailable, s as clearAuthSession, u as getAuthSessionState, x as setAuthSession } from "./auth-session-ijcuaSsZ.js";
+import { b as withSkillsInstallLock, f as ensureLocalSkills, g as loadSelectedSkillAssets, l as installSkillsToTargets, n as collectSkillsReadinessSnapshot, u as resolveSkillInstallStateForTarget, v as hashBundledSkillAssets, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installation-inventory-_fMZas6v.js";
+import { n as resolveOpenMeldDistribution, o as serviceControlCapabilitiesSchema, t as isBinaryDistribution } from "./distribution-DY2fBeSW.js";
+import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-Dd4hdHNo.js";
+import { $ as readManagedCliInstallation, A as prepareDaemonServiceBundle, Bt as readDaemonServiceContract, H as formatDaemonLifecycleOriginSummary, It as sendLocalDaemonControlPlaneRequest, J as runWithDaemonLifecycleCommandJournal, K as resolveRecentDaemonSignalStopCause, Lt as clearDaemonServiceContract, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, Pt as requestLocalDaemonShutdown, Rt as isDaemonServiceContractIdentityReusable, U as readLatestDaemonLifecycleConnectionStateEvent, V as emitDaemonLifecycleEvent, Vt as upsertDaemonServiceContract, W as readLatestDaemonLifecycleOriginEvent, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, jt as LocalDaemonControlPlaneClientError, lt as compareSemver, n as getEffectiveDaemonRuntimeStatus, nt as OPENMELD_VERSION, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, q as runDaemonServiceManagerAction, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-D0LhAIGx.js";
+import { $ as buildAgentFacingMentalModelLines, At as validateDaemonControlTargetInput, Ft as getBuiltinAgentSelectionRequiredArguments, Gt as waitForOpenMeldToolsUpdateCompletion, Ht as formatAgentOverviewPayload, Jt as sanitizeTerminalDisplayText, Kt as resolveOpenMeldToolsUpdateOperation, Lt as validateBuiltinAgentSelectionInput, Mt as buildBuiltinAgentSelectionCommand, Nt as buildBuiltinAgentSelectionExamples, Pt as getBuiltinAgentSelectionOptionalArguments, Qt as outLine, Rt as buildAgentOverviewFromContract, Y as SPACE_COLLABORATION_CONTEXT_RULE, Z as SPACE_PERSONAL_CONTRIBUTION_RULE, Zt as outJsonLine, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceWakeParticipantLines, ct as deriveContinuity, d as formatDaemonServiceMissingStatus, dt as resolvePublicAgentFailureReason, f as getDaemonDowngradeBlockedTitle, ft as resolveSpacePublicationRequirement, h as createAuthLoginGuideError, i as formatDaemonInstallFailedMessage, it as buildSpaceEntryBriefNeedMoreLine, l as formatDaemonServiceMissingRunStepOne, lt as isSelfWakeSpaceAction, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, nt as buildCompactDispatchActionGuidanceLines, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, pt as getCommandEntryContract, qt as createPresenter, r as formatDaemonDowngradeBlockedNextStep, rt as buildSpaceAgentIdentityLine, s as formatDaemonServiceMissingMeaning, st as composeDispatchBrief, t as formatElapsedTime, tt as buildCenterAgentRoleTemplateText, u as formatDaemonServiceMissingRunStepTwo, ut as renderSpaceEntryBrief } from "./elapsed-time-DZLKdEno.js";
+import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-C6sHRNGu.js";
+import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
+import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, d as daemonDispatchJournalPath, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-C37ZtIZK.js";
+import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-GiMCiTmu.js";
+import { a as formatOpenMeldCliCommand, c as formatOpenMeldCliTextBlock, f as resolveUserFacingCliEntryCommand, i as formatInlineOpenMeldCliCommands, o as formatOpenMeldCliCommands, r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-NtJYJe1D.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-BN2F75_x.js";
 import { n as toErrorMessage$11, t as sleep } from "./dist-o3UL1EGQ.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, f as buildOpenMeldRequestContextFromProfileIdentity, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-DpgDs0rw.js";
-import { A as installDaemon, D as ensureDaemonControlPlaneToken, F as readDaemonServiceRuntimeSnapshot, G as withDaemonServiceRunLock, H as uninstallDaemon, I as releaseDaemonServiceLifecycleLock, K as withDaemonServiceStopLock, L as resolveDaemonControlPlaneEndpoint, R as resolveDaemonServiceRuntimeMetadata, U as withDaemonServiceReconcileLock, V as setDaemonServiceRuntimeState, W as withDaemonServiceRegistrationMutationLock, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, d as daemonLifecycleJournalPath, g as daemonRuntimeStateRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as isDaemonServiceRuntimeHeartbeatStale, k as getDaemonStatus, l as clearDaemonServiceRuntimeState, m as daemonRuntimeRootPath, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, u as daemonDispatchJournalPath, x as daemonServiceRepairJournalPath } from "./daemon-state-BwIoDq7_.js";
-import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-BVipiZwK.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, f as buildOpenMeldRequestContextFromProfileIdentity, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-BdBSoby4.js";
 import { createHash, randomUUID } from "node:crypto";
-import { homedir, loadavg } from "node:os";
+import { homedir, loadavg, tmpdir } from "node:os";
 import { basename, delimiter, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { access, appendFile, chmod, link, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { access, appendFile, chmod, copyFile, link, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
 import { z } from "zod/v4";
 import { accessSync, appendFileSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, readFileSync, readSync, renameSync, watch, writeFileSync } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import pc from "picocolors";
-import { isDeepStrictEqual } from "node:util";
+import { isDeepStrictEqual, promisify } from "node:util";
 import { createServer } from "node:net";
-import { forkSession } from "@anthropic-ai/claude-agent-sdk";
+import pc from "picocolors";
+import { forkSession, getSessionInfo, getSessionMessages } from "@anthropic-ai/claude-agent-sdk";
 import { createOpencodeClient } from "@opencode-ai/sdk/v2";
 import { cancel, confirm, isCancel, select } from "@clack/prompts";
 import stringWidth from "string-width";
@@ -276,6 +282,7 @@ const cliJsonDaemonStatusEnvelopeSchema = defineSuccessEnvelope("daemon.status",
 	runtimeFlavor: z$1.enum(["binary", "node-bundle"]).optional(),
 	serverRequirement: daemonStatusServerRequirementSchema.optional()
 });
+const cliJsonServiceControlCapabilitiesEnvelopeSchema = defineSuccessEnvelope("service.control_capabilities", serviceControlCapabilitiesSchema.shape);
 const cliJsonDaemonStopEnvelopeSchema = defineSuccessEnvelope("daemon.stop", {});
 const cliJsonDaemonAutostartEnvelopeSchema = defineSuccessEnvelope("daemon.autostart", {
 	action: z$1.enum(["enable", "disable"]),
@@ -497,6 +504,7 @@ const cliJsonOutputEnvelopeSchema = z$1.discriminatedUnion("type", [
 	cliJsonDaemonUninstallEnvelopeSchema,
 	cliJsonDaemonReinstallEnvelopeSchema,
 	cliJsonDaemonStatusEnvelopeSchema,
+	cliJsonServiceControlCapabilitiesEnvelopeSchema,
 	cliJsonDaemonStopEnvelopeSchema,
 	cliJsonDaemonAutostartEnvelopeSchema,
 	cliJsonAgentsDetectEnvelopeSchema,
@@ -594,59 +602,6 @@ const runtimeReportingHealthStateSchema = z$1.strictObject({
 	providerConversationProof: runtimeReportingChannelHealthSchema
 });
 //#endregion
-//#region ../../packages/schemas/dist/schemas/http/auth-device-authorization.js
-const BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
-const betterAuthDeviceAuthorizationCodeRequestSchema = z$1.object({
-	client_id: z$1.string().min(1),
-	scope: z$1.string().optional(),
-	user_id: z$1.string().optional()
-});
-const betterAuthDeviceAuthorizationCodeResponseSchema = z$1.object({
-	device_code: z$1.string().min(1),
-	user_code: z$1.string().min(1),
-	verification_uri: z$1.string().min(1),
-	verification_uri_complete: z$1.string().min(1),
-	expires_in: z$1.number().finite().positive(),
-	interval: z$1.number().finite().positive()
-});
-const betterAuthDeviceAuthorizationStatusSchema = z$1.enum([
-	"pending",
-	"approved",
-	"denied"
-]);
-z$1.object({
-	user_code: z$1.string().min(1),
-	status: betterAuthDeviceAuthorizationStatusSchema
-});
-z$1.object({ userCode: z$1.string().min(1) });
-z$1.object({ success: z$1.boolean() });
-const betterAuthDeviceAuthorizationTokenRequestSchema = z$1.object({
-	grant_type: z$1.literal(BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE),
-	device_code: z$1.string().min(1),
-	client_id: z$1.string().min(1)
-});
-const betterAuthDeviceAuthorizationTokenResponseSchema = z$1.object({
-	access_token: z$1.string().min(1),
-	token_type: z$1.string().min(1),
-	expires_in: z$1.number().finite().positive(),
-	scope: z$1.string()
-});
-const betterAuthDeviceAuthorizationErrorResponseSchema = z$1.object({
-	error: z$1.string().optional(),
-	error_description: z$1.string().optional(),
-	message: z$1.string().optional(),
-	detail: z$1.string().optional()
-});
-const betterAuthSessionUserSnapshotSchema = z$1.object({
-	id: z$1.string().optional(),
-	email: z$1.string().optional(),
-	name: z$1.string().optional()
-});
-const betterAuthSessionSnapshotResponseSchema = z$1.nullable(z$1.object({
-	session: z$1.unknown().optional(),
-	user: betterAuthSessionUserSnapshotSchema.nullable()
-}));
-//#endregion
 //#region ../../packages/schemas/dist/schemas/runtime/agent-controller-session.js
 const agentControllerSessionTitleSchema = z$1.string().trim().min(1).max(120);
 //#endregion
@@ -7349,9 +7304,8 @@ function createLedgerIo() {
 			await appendFile(filePath, content, { encoding });
 		},
 		copyFile: async (fromPath, toPath) => {
-			const raw = await readFile(fromPath, "utf8");
 			await mkdir(dirnamePath(toPath), { recursive: true });
-			await writeFile(toPath, raw, "utf8");
+			await copyFile(fromPath, toPath);
 		},
 		mkdir: async (dirPath, options) => {
 			await mkdir(dirPath, options);
@@ -7363,6 +7317,16 @@ function createLedgerIo() {
 			await mkdir(dirnamePath(toPath), { recursive: true });
 			await rename(fromPath, toPath);
 		},
+		syncPath: async (fileOrDirectoryPath) => {
+			const isWindows = process.platform === "win32";
+			if (isWindows && (await stat(fileOrDirectoryPath)).isDirectory()) return;
+			const handle = await open(fileOrDirectoryPath, isWindows ? "r+" : "r");
+			try {
+				await handle.sync();
+			} finally {
+				await handle.close();
+			}
+		},
 		rm: async (filePath, options) => {
 			await rm(filePath, options);
 		},
@@ -11266,7 +11230,8 @@ function parseDispatchTask(input) {
 	});
 	if (!(prompt && controllerSelection)) return null;
 	const fallbackControllerSettings = createDefaultRuntimeAgentControllerSettings(controllerSelection.agentControllerRef);
-	const agentControllerConversationId = normalizeOptionalText$13(payload.agentControllerConversationId) ?? null;
+	const agentControllerConversationId = resolveDispatchNativeConversationId(payload);
+	if (!hasMatchingExecutionContextScope(payload, requiredFields)) return null;
 	const deliveryRecoveryReason = resolveDeliveryRecoveryReason(payload);
 	const executionTokenEcho = resolveExecutionTokenEcho(payload);
 	if (!executionTokenEcho) return null;
@@ -11275,6 +11240,7 @@ function parseDispatchTask(input) {
 	const contextIdMappingSpec = payload.contextIdMappingSpec ?? input.fallbackRouteConfig?.contextIdMappingSpec ?? fallbackControllerSettings.contextIdMappingSpec;
 	return {
 		...requiredFields,
+		executionContext: payload.executionContext,
 		agentControllerConversationId,
 		...resolveDispatchSourceFiles(payload),
 		...controllerSelection,
@@ -11311,6 +11277,14 @@ function parseDispatchTask(input) {
 		contextIdMappingSpec
 	};
 }
+function hasMatchingExecutionContextScope(payload, required) {
+	const context = payload.executionContext;
+	return !context || context.scope.targetProfileId === required.targetProfileId && context.scope.spaceId === required.spaceId && context.scope.threadId === (payload.threadContext?.threadId ?? null);
+}
+function resolveDispatchNativeConversationId(payload) {
+	if (payload.executionContext) return payload.executionContext.nativeConversationId;
+	return normalizeOptionalText$13(payload.agentControllerConversationId) ?? null;
+}
 function resolveDispatchSourceFiles(payload) {
 	return {
 		attachments: payload.sourceSignalSnapshot?.attachments ?? [],
@@ -11560,7 +11534,7 @@ function renderMandatoryCompletionSection(input) {
 	return [
 		"Mandatory completion:",
 		"- Plain text is not a Space reply.",
-		"- For shared text attachments, discover and use the dispatch tool read_file with the file ID and revision. It reads the current Space as you without requiring terminal access to local login files. A file read is not a final action.",
+		"- Use supplied context first. Discover read_history for this Wake's bounded Space text, or read_file with a file ID and revision. Both dispatch tools read as you without local login files; neither completes the Wake.",
 		buildMandatoryCompletionActionLine(publicationRequirement),
 		"- Use the Space Action tool first. If your harness offers tool search or discovery, look up the required action before declaring it unavailable. A tool missing from the initial list is not proof of unavailability. Do not read setup or onboarding guides merely to submit this result.",
 		...publicationRequirement.allowedActions.includes("post_message") ? ["- For a plain reply, omit wakeTargets and referenceTargets. Add targets only for an intentional handoff or reference to another Agent; never copy incoming activation targets or wake yourself."] : [],
@@ -11660,14 +11634,14 @@ function renderContinuityLine(input) {
 	if (input.higherAuthorityUpdates) parts.push("higher-authority updates: yes");
 	if (parts.length === 0) return null;
 	const sourceSignalId = normalizeOptionalText$13(input.sourceSignalId);
-	if (!sourceSignalId) return `- Since your last public reply: ${parts.join("; ")} (run \`${buildSpaceHistoryCommand(input)}\` for content)`;
+	if (!sourceSignalId) return `- Since your last public reply: ${parts.join("; ")} (use dispatch tool \`read_history\` for bounded context; only if unavailable and terminal access is permitted, run \`${buildSpaceHistoryCommand(input)}\`)`;
 	const readCommand = buildSpaceContextWindowCommand({
 		cliEntry: input.cliEntry,
 		sourceSignalId,
 		spaceId: input.spaceId,
 		targetProfileId: input.targetProfileId
 	});
-	return `- Since your last public reply: ${parts.join("; ")} (run \`${readCommand}\` for bounded context)`;
+	return `- Since your last public reply: ${parts.join("; ")} (use dispatch tool \`read_history\` for bounded context; only if unavailable and terminal access is permitted, run \`${readCommand}\`)`;
 }
 function shouldRenderReplyTargetLine(replyTarget) {
 	return normalizeOptionalText$13(replyTarget) !== "the current source message";
@@ -13700,12 +13674,13 @@ async function probeOpenCodeReadiness(input) {
 	let server = null;
 	try {
 		server = await startOpenCodeProbeServer({
+			workingDirectory: input.workingDirectory,
 			launchContract: input.launchContract,
 			timeoutMs: input.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS
 		});
 		const providerListResult = await rejectAfterTimeout(createOpencodeClient({
 			baseUrl: server.url,
-			directory: process.cwd(),
+			directory: input.workingDirectory,
 			throwOnError: true
 		}).provider.list(), SDK_READ_TIMEOUT_MS, `Timed out while reading OpenCode provider status after ${SDK_READ_TIMEOUT_MS}ms.`);
 		const readiness = resolveOpenCodeReadinessFromProviderList(providerListResult.data);
@@ -13795,7 +13770,7 @@ async function startOpenCodeProbeServer(input) {
 	});
 	return new Promise((resolve, reject) => {
 		const child = spawn(invocation.bin, invocation.args, {
-			cwd: process.cwd(),
+			cwd: input.workingDirectory,
 			detached: process.platform !== "win32",
 			env: process.env,
 			shell: invocation.shell ?? false,
@@ -14043,6 +14018,19 @@ function toErrorMessage$5(error) {
 	return message.length > 0 ? message : "unknown error";
 }
 //#endregion
+//#region src/local-service/inventory/probe-working-directory.ts
+async function withProbeWorkingDirectory(probe) {
+	const workingDirectory = await mkdtemp(join(tmpdir(), "openmeld-inventory-"));
+	try {
+		return await probe(await realpath(workingDirectory));
+	} finally {
+		await rm(workingDirectory, {
+			force: true,
+			recursive: true
+		});
+	}
+}
+//#endregion
 //#region src/local-service/inventory/runtime-provider-usage-limits.ts
 async function recordRuntimeProviderUsageLimits(input) {
 	const commandPath = resolveLaunchContractCommandPath(input.launchContract);
@@ -14083,11 +14071,12 @@ const CONTROLLER_INTERFACE_SNAPSHOT_RESOLVERS = {
 };
 async function probeAgentControllerUsageObservationAuth(input) {
 	if (input.agentId !== "claude-code") return { status: "unknown" };
-	return resolveClaudeAuthSnapshot(await runLaunchContractCommand({
+	return resolveClaudeAuthSnapshot(await withProbeWorkingDirectory((workingDirectory) => runLaunchContractCommand({
+		workingDirectory,
 		allowNonZeroExit: true,
 		args: ["auth", "status"],
 		launchContract: input.launchContract
-	}));
+	})));
 }
 async function resolveAgentControllerInterfaceSnapshot(input) {
 	const checkedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -14151,10 +14140,12 @@ async function resolveAgentControllerInterfaceSnapshot(input) {
 		});
 		if (reusableSnapshot) return reusableSnapshot;
 	}
-	const outcome = await snapshotResolver({
+	const launchContract = input.state.launchContract;
+	const outcome = await withProbeWorkingDirectory((workingDirectory) => snapshotResolver({
 		baseSnapshot,
-		launchContract: input.state.launchContract
-	});
+		launchContract,
+		workingDirectory
+	}));
 	const commandFingerprintAfterProbe = await resolveAgentControllerCommandFingerprint({
 		commandPath,
 		launchContractKind
@@ -14362,7 +14353,7 @@ function parseSemverCore(value) {
 	];
 }
 async function resolveCodexInterfaceSnapshot(input) {
-	const appServerProbe = await probeCodexAppServer(input.launchContract);
+	const appServerProbe = await probeCodexAppServer(input.launchContract, input.workingDirectory);
 	if (appServerProbe.ok) {
 		const version = appServerProbe.version ?? input.baseSnapshot.version;
 		return {
@@ -14386,6 +14377,7 @@ async function resolveCodexInterfaceSnapshot(input) {
 		};
 	}
 	const versionProbe = await runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	});
@@ -14408,9 +14400,11 @@ async function resolveCodexInterfaceSnapshot(input) {
 }
 async function resolveClaudeCodeInterfaceSnapshot(input) {
 	const [versionProbe, authProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: true,
 		args: [
 			"auth",
@@ -14449,9 +14443,11 @@ async function resolveClaudeCodeInterfaceSnapshot(input) {
 }
 async function resolveCursorInterfaceSnapshot(input) {
 	const [versionProbe, authProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: true,
 		args: [
 			"status",
@@ -14490,11 +14486,12 @@ async function resolveCursorInterfaceSnapshot(input) {
 }
 async function resolveGrokBuildInterfaceSnapshot(input) {
 	const [versionProbe, interfaceProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--no-auto-update", "version"],
 		launchContract: input.launchContract
 	}), probeGrokBuildAcpInterface({
 		grokBuildTimeoutMs: PROBE_TIMEOUT_MS,
-		grokBuildWorkdir: process.cwd(),
+		grokBuildWorkdir: input.workingDirectory,
 		launchContract: input.launchContract
 	}).then((result) => ({
 		ok: true,
@@ -14546,9 +14543,11 @@ async function resolveGrokBuildInterfaceSnapshot(input) {
 }
 async function resolveOpenClawInterfaceSnapshot(input) {
 	const [versionProbe, authProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: true,
 		args: [
 			"models",
@@ -14579,9 +14578,11 @@ async function resolveOpenClawInterfaceSnapshot(input) {
 }
 async function resolveOpenCodeInterfaceSnapshot(input) {
 	const [versionProbe, readinessProbe] = await Promise.all([runLaunchContractCommand({
+		workingDirectory: input.workingDirectory,
 		args: ["--version"],
 		launchContract: input.launchContract
 	}), probeOpenCodeReadiness({
+		workingDirectory: input.workingDirectory,
 		launchContract: input.launchContract,
 		timeoutMs: PROBE_TIMEOUT_MS
 	})]);
@@ -14611,6 +14612,7 @@ function runLaunchContractCommand(input) {
 		launchContract: input.launchContract
 	});
 	return runCommand({
+		workingDirectory: input.workingDirectory,
 		allowNonZeroExit: input.allowNonZeroExit,
 		args: invocation.args,
 		bin: invocation.bin,
@@ -14621,7 +14623,7 @@ function runLaunchContractCommand(input) {
 function runCommand(input) {
 	return new Promise((resolve) => {
 		const child = spawn(input.bin, input.args, {
-			cwd: process.cwd(),
+			cwd: input.workingDirectory,
 			env: process.env,
 			shell: input.shell ?? false,
 			stdio: [
@@ -14687,7 +14689,7 @@ function runCommand(input) {
 		});
 	});
 }
-function probeCodexAppServer(launchContract) {
+function probeCodexAppServer(launchContract, workingDirectory) {
 	const invocation = buildCliLaunchInvocation({
 		args: [
 			"app-server",
@@ -14698,7 +14700,7 @@ function probeCodexAppServer(launchContract) {
 	});
 	return new Promise((resolve) => {
 		const child = spawn(invocation.bin, invocation.args, {
-			cwd: process.cwd(),
+			cwd: workingDirectory,
 			env: process.env,
 			shell: invocation.shell ?? false,
 			stdio: [
@@ -14789,6 +14791,7 @@ function probeCodexAppServer(launchContract) {
 			});
 		});
 		runCodexAppServerProbeRequests({
+			workingDirectory,
 			clearProbeTimeout: () => {
 				clearTimeout(timeout);
 			},
@@ -14813,7 +14816,7 @@ async function runCodexAppServerProbeRequests(input) {
 		}
 	});
 	input.notify("initialized", {});
-	const skillsPromise = input.request("skills/list", { cwds: [process.cwd()] }).catch(() => null);
+	const skillsPromise = input.request("skills/list", { cwds: [input.workingDirectory] }).catch(() => null);
 	const modelsPromise = requestAllCodexModels(input.request).catch(() => []);
 	const usageLimitsPromise = input.request("account/rateLimits/read", null).then((response) => projectCodexUsageLimits({
 		observedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -16584,7 +16587,10 @@ function resolveAdapterInterruptNote(input) {
 //#region src/local-service/carrier/local-execution-slots.ts
 function createDaemonLocalExecutionSlots(input) {
 	return createLocalExecutionSlots({
-		limits: input.limits,
+		limits: {
+			...input.limits,
+			contextConcurrency: 5
+		},
 		onTaskDropped: (event) => {
 			emitRunLine({
 				presenter: input.presenter,
@@ -18520,11 +18526,27 @@ function buildForkedSessionTitle(profileName) {
 }
 //#endregion
 //#region src/local-service/session-control/session-fork-operation-store.ts
-const STORE_SCHEMA = "openmeld-agent-session-fork-operation-store-v1";
+const STORE_SCHEMA = "openmeld-agent-session-fork-operation-store-v2";
+const LEGACY_STORE_SCHEMA = "openmeld-agent-session-fork-operation-store-v1";
 const RECORD_SCHEMA = "openmeld-agent-session-fork-operation-record-v1";
 const STORE_FILE_NAME = "agent-session-fork-operations.json";
 const STORE_TEMP_FILE_NAME = "agent-session-fork-operations.tmp";
 const MAX_RETAINED_RECORDS = 256;
+const contextForkRequestSchema = z.strictObject({
+	kind: z.literal("execution_context"),
+	operationId: z.string().uuid(),
+	sourceNativeSessionId: z.string().min(1),
+	completedHistoryId: z.string().min(1),
+	workingDirectory: z.string().min(1)
+});
+const contextForkResultSchema = z.discriminatedUnion("status", [contextForkRequestSchema.extend({
+	status: z.literal("completed"),
+	childNativeSessionId: z.string().min(1)
+}), contextForkRequestSchema.extend({
+	status: z.enum(["rejected", "outcome_unknown"]),
+	reasonCode: z.string().min(1),
+	message: z.string().min(1)
+})]);
 const storeTails = /* @__PURE__ */ new Map();
 async function runAgentSessionForkOperation(input) {
 	const previous = storeTails.get(input.ledgerRootPath) ?? Promise.resolve();
@@ -18552,6 +18574,7 @@ async function runSerialized(input) {
 		if (existing.requestFingerprint !== fingerprint) return rejected(input.request, "agent_session_fork.operation_identity_conflict", "This Fork operation id was already used for a different Session.");
 		return existing.result ?? outcomeUnknown(input.request, "The provider Fork started, but no authoritative child Session id was recorded.");
 	}
+	if (records.filter((record) => record.result === null || record.result.status === "outcome_unknown").length >= MAX_RETAINED_RECORDS) return rejected(input.request, "agent_session_fork.unresolved_operation_limit", "Resolve uncertain fork operations before starting another fork.");
 	const started = {
 		operationId: input.request.operationId,
 		requestFingerprint: fingerprint,
@@ -18567,7 +18590,7 @@ async function runSerialized(input) {
 	let result;
 	try {
 		const forked = await input.execute();
-		result = runtimeTransportForkAgentSessionResultSchema.parse({
+		result = parseForkOperationResult({
 			...input.request,
 			childNativeSessionId: forked.childNativeSessionId,
 			status: "completed"
@@ -18615,8 +18638,13 @@ async function readRecords(ledgerRootPath) {
 		ok: false,
 		reasonCode: "agent_session_fork.operation_store_invalid"
 	};
+	if ("schema" in parsed && parsed.schema === LEGACY_STORE_SCHEMA && "v" in parsed && parsed.v === 1) parsed = {
+		...parsed,
+		schema: STORE_SCHEMA,
+		v: 2
+	};
 	const candidate = parsed;
-	if (candidate.schema !== STORE_SCHEMA || candidate.v !== 1) return {
+	if (candidate.schema !== STORE_SCHEMA || candidate.v !== 2) return {
 		ok: false,
 		reasonCode: "agent_session_fork.operation_store_update_required"
 	};
@@ -18636,12 +18664,14 @@ async function writeRecords(ledgerRootPath, records) {
 		mode: 448,
 		recursive: true
 	});
-	const retained = [...records].sort((left, right) => right.updatedAtMs - left.updatedAtMs).slice(0, MAX_RETAINED_RECORDS);
+	const ordered = [...records].sort((left, right) => right.updatedAtMs - left.updatedAtMs);
+	const unresolved = ordered.filter((record) => record.result === null || record.result.status === "outcome_unknown");
+	const retained = [...unresolved, ...ordered.filter((record) => !unresolved.includes(record)).slice(0, Math.max(0, MAX_RETAINED_RECORDS - unresolved.length))];
 	await writeFile(tempPath, `${JSON.stringify({
 		records: retained,
 		schema: STORE_SCHEMA,
 		updatedAtMs: Date.now(),
-		v: 1
+		v: 2
 	}, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
@@ -18651,15 +18681,15 @@ async function writeRecords(ledgerRootPath, records) {
 function isOperationStore(value) {
 	if (!(value && typeof value === "object")) return false;
 	const candidate = value;
-	return candidate.schema === STORE_SCHEMA && candidate.v === 1 && Array.isArray(candidate.records) && candidate.records.every(isStoredOperation);
+	return candidate.schema === STORE_SCHEMA && candidate.v === 2 && Array.isArray(candidate.records) && candidate.records.every(isStoredOperation);
 }
 function isStoredOperation(value) {
 	if (!(value && typeof value === "object")) return false;
 	const candidate = value;
-	return candidate.schema === RECORD_SCHEMA && typeof candidate.operationId === "string" && typeof candidate.requestFingerprint === "string" && typeof candidate.updatedAtMs === "number" && (candidate.result === null || runtimeTransportForkAgentSessionResultSchema.safeParse(candidate.result).success);
+	return candidate.schema === RECORD_SCHEMA && typeof candidate.operationId === "string" && typeof candidate.requestFingerprint === "string" && typeof candidate.updatedAtMs === "number" && (candidate.result === null || runtimeTransportForkAgentSessionResultSchema.safeParse(candidate.result).success || contextForkResultSchema.safeParse(candidate.result).success);
 }
 function rejected(request, reasonCode, message) {
-	return runtimeTransportForkAgentSessionResultSchema.parse({
+	return parseForkOperationResult({
 		...request,
 		message,
 		reasonCode,
@@ -18667,7 +18697,7 @@ function rejected(request, reasonCode, message) {
 	});
 }
 function outcomeUnknown(request, message) {
-	return runtimeTransportForkAgentSessionResultSchema.parse({
+	return parseForkOperationResult({
 		...request,
 		message,
 		reasonCode: "agent_session_fork.provider_outcome_unknown",
@@ -18677,6 +18707,9 @@ function outcomeUnknown(request, message) {
 function readErrorCode(error) {
 	return error && typeof error === "object" && "code" in error ? String(error.code).trim() || null : null;
 }
+function parseForkOperationResult(value) {
+	return value.kind === "execution_context" ? contextForkResultSchema.parse(value) : runtimeTransportForkAgentSessionResultSchema.parse(value);
+}
 function toErrorMessage$2(error) {
 	return error instanceof Error ? error.message : String(error);
 }
@@ -18783,6 +18816,7 @@ async function prepareDispatchRuntimeExecution(input) {
 }
 //#endregion
 //#region src/local-service/execution/task-execution-error.ts
+const EXECUTION_CONTEXT_ERROR_PATTERN = /^execution_context\.[a-z_]+$/u;
 function toTaskExecutionError(error) {
 	if (error instanceof DaemonServiceRunError) return {
 		errorCode: error.code,
@@ -18791,6 +18825,11 @@ function toTaskExecutionError(error) {
 		openClawGatewayVisibility: error.openClawGatewayVisibility,
 		projectFailureContext: error.projectFailureContext
 	};
+	if (error instanceof Error && EXECUTION_CONTEXT_ERROR_PATTERN.test(error.message)) return {
+		errorCode: error.message,
+		errorType: "config",
+		message: error.message
+	};
 	return {
 		errorCode: "dispatch.execution_failed",
 		errorType: "internal",
@@ -18800,6 +18839,16 @@ function toTaskExecutionError(error) {
 //#endregion
 //#region src/runtime/dispatch-space-action-context.ts
 const OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV = "OPENMELD_SPACE_ACTION_CONTEXT_PATH";
+/** The local action context is known expired/closed/mismatched: a new ordinary action must be rejected, never recorded. */
+var DispatchSpaceActionClosedError = class extends Error {
+	receipt = "rejected_closed";
+	reasonCode;
+	constructor(reasonCode, message) {
+		super(message);
+		this.name = "DispatchSpaceActionClosedError";
+		this.reasonCode = reasonCode;
+	}
+};
 const DISPATCH_SPACE_ACTION_CONTEXT_VERSION = 1;
 const DISPATCH_SPACE_ACTION_RECORD_VERSION = 1;
 const DEFAULT_CONTEXT_TTL_MS = 720 * 60 * 1e3;
@@ -18840,6 +18889,11 @@ function createDispatchSpaceActionContext(input) {
 	};
 }
 function readDispatchSpaceActionContextFromEnv(env = process.env) {
+	const context = readDispatchSpaceActionContextForReceiptFromEnv(env);
+	assertContextActive(context, Date.now());
+	return context;
+}
+function readDispatchSpaceActionContextForReceiptFromEnv(env = process.env) {
 	const contextPath = normalizeOptionalText$7(env[OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]);
 	if (!contextPath) throw new Error("No active OpenMeld Space Action dispatch context was found. Use this command inside an OpenMeld Space Wake dispatch.");
 	const context = readDispatchSpaceActionContext(contextPath);
@@ -18847,17 +18901,19 @@ function readDispatchSpaceActionContextFromEnv(env = process.env) {
 		context,
 		env
 	});
-	assertContextActive(context, Date.now());
 	return context;
 }
 function readDispatchSpaceActionContext(contextPath) {
 	return parseDispatchSpaceActionContext(readJsonFile(contextPath));
 }
 function writeDispatchSpaceActionRecord(input) {
-	assertContextActive(input.context, input.nowMs ?? Date.now());
 	const parsedAction = openMeldSpaceEgressActionSchema.safeParse(input.action);
 	if (!parsedAction.success) throw parsedAction.error;
 	if (isSelfWakeSpaceAction(parsedAction.data, input.context.targetProfileId)) throw new Error("An Agent cannot Wake itself. To reply to the current message, omit wakeTargets (CLI: --wake) and submit the reply again. No action was recorded.");
+	const existing = readDispatchSpaceActionRecord({ context: input.context });
+	if (existing.status === "invalid") throw new Error(existing.errorMessage);
+	if (existing.status === "loaded" && isDeepStrictEqual(existing.record.action, parsedAction.data)) return existing.record;
+	assertContextActive(input.context, input.nowMs ?? Date.now());
 	const record = {
 		version: DISPATCH_SPACE_ACTION_RECORD_VERSION,
 		action: parsedAction.data,
@@ -18938,10 +18994,10 @@ function assertDispatchRuntimeEnvMatchesContext(input) {
 	if (normalizeOptionalText$7(input.env["OPENMELD_DISPATCH_RUNTIME_MODE"]) !== "dispatch-owned-runtime") return;
 	const envDispatchId = normalizeOptionalText$7(input.env[OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]);
 	if (!envDispatchId) throw new Error("OpenMeld Space Action dispatch runtime is missing the active dispatch ID.");
-	if (envDispatchId !== input.context.dispatchId) throw new Error("OpenMeld Space Action dispatch context does not match the active dispatch runtime.");
+	if (envDispatchId !== input.context.dispatchId) throw new DispatchSpaceActionClosedError("space_action.context_mismatch", "OpenMeld Space Action dispatch context does not match the active dispatch runtime.");
 	const envTargetProfileId = normalizeOptionalText$7(input.env[OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]);
 	if (!envTargetProfileId) throw new Error("OpenMeld Space Action dispatch runtime is missing the active target profile ID.");
-	if (envTargetProfileId !== input.context.targetProfileId) throw new Error("OpenMeld Space Action target profile does not match the active dispatch runtime.");
+	if (envTargetProfileId !== input.context.targetProfileId) throw new DispatchSpaceActionClosedError("space_action.context_mismatch", "OpenMeld Space Action target profile does not match the active dispatch runtime.");
 }
 function parseDispatchSpaceActionRecord(value) {
 	const record = toRecord$1(value, "OpenMeld Space Action record");
@@ -18990,7 +19046,7 @@ function parseSpaceContractSnapshot(value) {
 	};
 }
 function assertContextActive(context, nowMs) {
-	if (nowMs > context.expiresAtMs) throw new Error("The OpenMeld Space Action dispatch context has expired.");
+	if (nowMs > context.expiresAtMs) throw new DispatchSpaceActionClosedError("space_action.context_expired", "The OpenMeld Space Action dispatch context has expired.");
 }
 function readJsonFile(path) {
 	return JSON.parse(readFileSync(path, "utf8"));
@@ -20638,6 +20694,710 @@ function coerceRuntimeResultToStructuredActionFailure$1(input) {
 	};
 }
 //#endregion
+//#region src/local-service/dispatch/execution-context-workspace.ts
+const execFileAsync = promisify(execFile);
+const syncDirectory = createLedgerIo().syncPath;
+const COMMIT_PATTERN = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u;
+const manifestSchema = z.strictObject({
+	version: z.union([z.literal(1), z.literal(2)]),
+	identity: executionContextAssignmentSchema,
+	sourceWorkingDirectory: z.string().nullable(),
+	baseCommit: z.string().regex(COMMIT_PATTERN).nullable(),
+	boundaryRoot: z.string(),
+	workingDirectory: z.string(),
+	status: z.enum([
+		"preparing",
+		"restoring",
+		"completed",
+		"in_use",
+		"retiring",
+		"released"
+	]),
+	pristineFingerprint: z.string().regex(/^[a-f0-9]{64}$/u).optional(),
+	copiedUncommittedFiles: z.literal(false),
+	processSupervisionId: z.uuid().optional(),
+	retirement: z.strictObject({
+		path: z.string(),
+		pristineFingerprint: z.string().regex(/^[a-f0-9]{64}$/u)
+	}).optional()
+}).refine((manifest) => manifest.version === 2 || (manifest.status === "preparing" || manifest.status === "completed") && !manifest.pristineFingerprint && !manifest.processSupervisionId && !manifest.retirement).refine((manifest) => manifest.identity.access === "space_context" ? manifest.sourceWorkingDirectory === null && manifest.baseCommit === null : manifest.sourceWorkingDirectory !== null && isAbsolute(manifest.sourceWorkingDirectory) && manifest.baseCommit !== null && manifest.identity.workspace === "isolated");
+async function prepareExecutionContextWorkspace(input) {
+	const parsed = executionContextTaskSchema.safeParse(input.context);
+	if (!parsed.success) throw failure("invalid_workspace_context");
+	const { nativeConversationId, runtimeWorkspaceFingerprint } = parsed.data;
+	const identity = executionContextAssignmentSchema.strip().parse(parsed.data);
+	const source = identity.access !== "space_context" ? await canonicalDirectory(input.currentWorkingDirectory) : null;
+	if (source) {
+		assertSourceAllowed(source, input.policy);
+		if (identity.workspace === "current") return {
+			workingDirectory: source,
+			boundaryRoot: source
+		};
+	}
+	const ledgerRoot = await ensureDirectory(input.ledgerRootPath, true);
+	const workspaceRoot = await ensureDirectory(join(ledgerRoot, "execution-context-workspaces"));
+	const recordsRoot = await ensureDirectory(join(ledgerRoot, "execution-context-workspace-records"));
+	const boundaryRoot = join(workspaceRoot, identity.id);
+	const workingDirectory = source ? join(boundaryRoot, "worktree") : boundaryRoot;
+	const recordPath = join(recordsRoot, `${identity.id}.json`);
+	return await withWorkspaceLock(ledgerRoot, identity.id, async () => {
+		const stored = await readManifest(recordPath);
+		if (stored) {
+			if (JSON.stringify(stored.identity) !== JSON.stringify(identity) || stored.sourceWorkingDirectory !== source || stored.boundaryRoot !== boundaryRoot || stored.workingDirectory !== workingDirectory) throw failure("workspace_identity_mismatch");
+			await reconcileRetainedWorkspace(stored, recordPath, Boolean(runtimeWorkspaceFingerprint || nativeConversationId), ledgerRoot);
+			return await verifyRetainedWorkspace(stored);
+		}
+		if (runtimeWorkspaceFingerprint || nativeConversationId) throw failure("workspace_record_missing");
+		if (await inspectPath(boundaryRoot)) throw failure("workspace_already_exists");
+		const baseCommit = source ? await resolveSourceCommit(source) : null;
+		const manifest = {
+			version: 2,
+			identity,
+			sourceWorkingDirectory: source,
+			baseCommit,
+			boundaryRoot,
+			workingDirectory,
+			status: "preparing",
+			copiedUncommittedFiles: false,
+			processSupervisionId: randomUUID()
+		};
+		await writeManifest(recordPath, manifest, "wx");
+		await finishWorkspacePreparation(manifest, recordPath, true);
+		return workspaceResult(manifest);
+	});
+}
+async function reconcileRetainedWorkspace(record, path, hasNativeIdentity, ledgerRoot) {
+	if (record.status === "retiring") await runWithHeldLock({
+		lock: await acquireWorkspaceExecutionLock(ledgerRoot, record.identity.id),
+		run: async () => {
+			if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
+				fresh: true,
+				processId: null,
+				supervisionId: record.processSupervisionId
+			})).length > 0) throw failure("workspace_execution_quiescence_unconfirmed");
+			const reconciled = await finishWorkspaceRetirement(record, path);
+			if (reconciled.status === "released") await restoreReleasedWorkspace(reconciled, path);
+		}
+	});
+	else if (record.status === "released") await restoreReleasedWorkspace(record, path);
+	else if (record.status === "preparing" || record.status === "restoring") {
+		if (record.status === "preparing" && hasNativeIdentity) throw failure("workspace_creation_incomplete");
+		if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
+			fresh: true,
+			processId: null,
+			supervisionId: record.processSupervisionId
+		})).length > 0) throw failure("workspace_preparation_quiescence_unconfirmed");
+		await finishWorkspacePreparation(record, path);
+	} else if (record.status === "in_use") await runWithHeldLock({
+		lock: await acquireWorkspaceExecutionLock(ledgerRoot, record.identity.id),
+		run: async () => {
+			if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
+				fresh: true,
+				processId: null,
+				supervisionId: record.processSupervisionId
+			})).length > 0) throw failure("workspace_execution_quiescence_unconfirmed");
+			await verifyRetainedWorkspace(record);
+			await writeManifest(path, {
+				...record,
+				status: "completed"
+			}, "r+");
+		}
+	});
+}
+async function finishWorkspacePreparation(manifest, recordPath, pristineCreation = false) {
+	const { boundaryRoot, workingDirectory, sourceWorkingDirectory: source, baseCommit } = manifest;
+	await ensureDirectory(boundaryRoot);
+	const repository = join(boundaryRoot, "repository.git");
+	if (source && baseCommit) {
+		if (!await inspectPath(repository)) {
+			if ((await readdir(boundaryRoot)).length > 0) throw failure("workspace_creation_incomplete");
+			await git(boundaryRoot, [
+				"init",
+				"--bare",
+				"--template=",
+				`--object-format=${baseCommit.length === 64 ? "sha256" : "sha1"}`,
+				repository
+			], manifest.processSupervisionId);
+		}
+		await canonicalDirectory(repository);
+		await assertPrivateMetadata(repository);
+		if ((await readdir(boundaryRoot)).some((name) => name !== "repository.git" && name !== "worktree")) throw failure("workspace_creation_incomplete");
+		if (await inspectPath(join(repository, "objects", "info", "alternates"))) throw failure("workspace_git_metadata_changed");
+		if (!await inspectPath(workingDirectory)) {
+			await git(boundaryRoot, [
+				`--git-dir=${repository}`,
+				"fetch",
+				"--no-tags",
+				"--no-recurse-submodules",
+				"--depth=1",
+				"--no-write-fetch-head",
+				source,
+				`${baseCommit}:refs/openmeld/base`
+			], manifest.processSupervisionId);
+			await git(boundaryRoot, [
+				`--git-dir=${repository}`,
+				"worktree",
+				"add",
+				"--detach",
+				workingDirectory,
+				baseCommit
+			], manifest.processSupervisionId);
+		}
+		await verifyOwnedRepository(manifest);
+		await finishMissingCheckoutFiles(manifest);
+		if (!await isUnchangedCheckout(manifest)) throw failure("workspace_creation_incomplete");
+	} else if ((await readdir(boundaryRoot)).length > 0) throw failure("workspace_creation_incomplete");
+	await writeManifest(recordPath, {
+		...manifest,
+		status: "completed",
+		pristineFingerprint: pristineCreation ? await fingerprintDirectory(boundaryRoot) : void 0
+	}, "r+");
+}
+async function readExecutionContextWorkspace(input) {
+	if (!executionContextAssignmentSchema.shape.id.safeParse(input.contextId).success) throw failure("invalid_workspace_context");
+	if (!await inspectPath(input.ledgerRootPath)) return null;
+	const ledgerRoot = await canonicalDirectory(input.ledgerRootPath);
+	const recordsRoot = join(ledgerRoot, "execution-context-workspace-records");
+	if (!await inspectPath(recordsRoot)) return null;
+	await canonicalDirectory(recordsRoot);
+	const manifest = await readManifest(join(recordsRoot, `${input.contextId}.json`));
+	if (!manifest) return null;
+	const boundaryRoot = join(await canonicalDirectory(join(ledgerRoot, "execution-context-workspaces")), input.contextId);
+	const workingDirectory = manifest.identity.access !== "space_context" ? join(boundaryRoot, "worktree") : boundaryRoot;
+	if (manifest.identity.id !== input.contextId || manifest.boundaryRoot !== boundaryRoot || manifest.workingDirectory !== workingDirectory) throw failure("workspace_identity_mismatch");
+	if (manifest.status === "released" || manifest.status === "retiring") return workspaceResult(manifest);
+	if (manifest.status === "preparing" || manifest.status === "restoring") throw failure("workspace_creation_incomplete");
+	return await verifyRetainedWorkspace(manifest);
+}
+async function markExecutionContextWorkspaceInUse(input) {
+	const context = input.context;
+	if (!context || context.workspace !== "isolated" || context.access === "space_context") return null;
+	const root = await canonicalDirectory(input.ledgerRootPath);
+	const lock = await acquireWorkspaceExecutionLock(root, context.id);
+	const processSupervisionId = randomUUID();
+	try {
+		await withWorkspaceLock(root, context.id, async () => {
+			await readExecutionContextWorkspace({
+				ledgerRootPath: root,
+				contextId: context.id
+			});
+			const path = join(root, "execution-context-workspace-records", `${context.id}.json`);
+			const record = await readManifest(path);
+			if (record?.status !== "completed") throw failure("workspace_execution_quiescence_unconfirmed");
+			await writeManifest(path, {
+				...record,
+				status: "in_use",
+				processSupervisionId
+			}, "r+");
+		});
+		return {
+			lock,
+			processSupervisionId
+		};
+	} catch (error) {
+		await releaseLock(lock);
+		throw error;
+	}
+}
+async function releaseExecutionContextWorkspace(input) {
+	const root = await canonicalDirectory(input.ledgerRootPath);
+	try {
+		return await withWorkspaceLock(root, input.context.id, async () => {
+			await readExecutionContextWorkspace({
+				ledgerRootPath: root,
+				contextId: input.context.id
+			});
+			const path = join(root, "execution-context-workspace-records", `${input.context.id}.json`);
+			let record = await readManifest(path);
+			if (!(record && ["completed", "in_use"].includes(record.status))) throw failure("workspace_creation_incomplete");
+			if (!input.ownedProcessesQuiescent) return {
+				status: "retained",
+				reason: "execution_quiescence_unconfirmed"
+			};
+			const completed = {
+				...record,
+				status: "completed"
+			};
+			await writeManifest(path, completed, "r+");
+			record = await removePristineRetirement(completed, path);
+			if (record.retirement) return {
+				status: "retained",
+				reason: "cleanup_incomplete"
+			};
+			if (!record.pristineFingerprint) return {
+				status: "retained",
+				reason: "baseline_unverified"
+			};
+			await verifyRetainedWorkspace(record);
+			if (await fingerprintDirectory(record.boundaryRoot) !== record.pristineFingerprint) return {
+				status: "retained",
+				reason: "workspace_changed"
+			};
+			if (record.sourceWorkingDirectory && !await sourceHasCommit(record)) return {
+				status: "retained",
+				reason: "source_commit_unavailable"
+			};
+			return (await retirePristineWorkspace(record, path)).status === "released" ? { status: "released" } : {
+				status: "retained",
+				reason: "workspace_changed"
+			};
+		});
+	} finally {
+		if (input.use) await releaseLock(input.use.lock);
+	}
+}
+async function retirePristineWorkspace(record, recordPath) {
+	if (!record.pristineFingerprint || await fingerprintDirectory(record.boundaryRoot) !== record.pristineFingerprint) throw failure("workspace_release_incomplete");
+	const retiring = {
+		...record,
+		status: "retiring",
+		retirement: {
+			path: `${recordPath}.retired-${randomUUID()}`,
+			pristineFingerprint: record.pristineFingerprint
+		}
+	};
+	await writeManifest(recordPath, retiring, "r+");
+	return await finishWorkspaceRetirement(retiring, recordPath);
+}
+async function finishWorkspaceRetirement(record, recordPath) {
+	const retirement = record.retirement;
+	if (!retirement) throw failure("workspace_release_incomplete");
+	const live = await inspectPath(record.boundaryRoot);
+	const retired = await inspectPath(retirement.path);
+	if (live && retired || !(live || retired)) throw failure("workspace_release_incomplete");
+	if (live) await moveWorkspace(record.boundaryRoot, retirement.path);
+	if (await fingerprintDirectory(retirement.path) !== retirement.pristineFingerprint) {
+		if (await inspectPath(record.boundaryRoot)) throw failure("workspace_release_incomplete");
+		await moveWorkspace(retirement.path, record.boundaryRoot);
+		const retained = {
+			...record,
+			retirement: void 0,
+			status: "completed"
+		};
+		await writeManifest(recordPath, retained, "r+");
+		return retained;
+	}
+	const released = {
+		...record,
+		status: "released"
+	};
+	await writeManifest(recordPath, released, "r+");
+	return await removePristineRetirement(released, recordPath);
+}
+async function removePristineRetirement(record, recordPath) {
+	const retirement = record.retirement;
+	if (!retirement) return record;
+	if (await inspectPath(retirement.path)) {
+		if (await fingerprintDirectory(retirement.path) !== retirement.pristineFingerprint) return record;
+		await rm(retirement.path, { recursive: true });
+	}
+	const removed = {
+		...record,
+		retirement: void 0
+	};
+	await writeManifest(recordPath, removed, "r+");
+	return removed;
+}
+async function restoreReleasedWorkspace(record, recordPath) {
+	if (record.sourceWorkingDirectory && !await sourceHasCommit(record)) throw failure("workspace_base_commit_unavailable");
+	if (await inspectPath(record.boundaryRoot)) throw failure("workspace_already_exists");
+	const restoring = {
+		...record,
+		status: "restoring",
+		processSupervisionId: randomUUID()
+	};
+	await writeManifest(recordPath, restoring, "r+");
+	await finishWorkspacePreparation(restoring, recordPath, true);
+}
+async function sourceHasCommit(record) {
+	if (!(record.sourceWorkingDirectory && record.baseCommit)) return false;
+	try {
+		await git(record.sourceWorkingDirectory, [
+			"cat-file",
+			"-e",
+			`${record.baseCommit}^{commit}`
+		]);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function isUnchangedCheckout(record) {
+	return await git(record.workingDirectory, ["rev-parse", "HEAD"]) === record.baseCommit && await git(record.workingDirectory, [
+		"status",
+		"--porcelain",
+		"--untracked-files=all",
+		"--ignored"
+	]) === "";
+}
+async function finishMissingCheckoutFiles(record) {
+	if (await git(record.workingDirectory, ["rev-parse", "HEAD"]) !== record.baseCommit) throw failure("workspace_creation_incomplete");
+	if ((await git(record.workingDirectory, [
+		"ls-files",
+		"-v",
+		"-z"
+	])).split("\0").some((entry) => entry && !entry.startsWith("H "))) throw failure("workspace_creation_incomplete");
+	const status = await git(record.workingDirectory, [
+		"status",
+		"--porcelain",
+		"-z",
+		"--untracked-files=all",
+		"--ignored"
+	]);
+	if (!status) return;
+	const changes = status.split("\0").filter(Boolean);
+	if (changes.some((entry) => !entry.startsWith(" D "))) throw failure("workspace_creation_incomplete");
+	const paths = changes.map((entry) => entry.slice(3));
+	for (let offset = 0; offset < paths.length; offset += 100) await git(record.workingDirectory, [
+		"checkout-index",
+		"--",
+		...paths.slice(offset, offset + 100)
+	], record.processSupervisionId);
+}
+async function fingerprintDirectory(root) {
+	const hash = createHash("sha256");
+	const visit = async (directory) => {
+		for (const name of (await readdir(directory)).sort()) {
+			const path = join(directory, name);
+			const info = await lstat(path);
+			hash.update(JSON.stringify([
+				relative(root, path),
+				info.mode,
+				info.nlink
+			]));
+			if (info.isSymbolicLink()) hash.update(JSON.stringify(await readlink(path)));
+			else if (info.isDirectory()) await visit(path);
+			else if (info.isFile() && info.nlink === 1) {
+				hash.update(String(info.size));
+				hash.update(await fingerprintFile(path));
+			} else throw failure("workspace_git_metadata_changed");
+		}
+	};
+	await visit(root);
+	return hash.digest("hex");
+}
+async function fingerprintFile(path) {
+	const hash = createHash("sha256");
+	const file = await open(path, "r");
+	try {
+		const buffer = Buffer.alloc(64 * 1024);
+		for (;;) {
+			const { bytesRead } = await file.read(buffer);
+			if (!bytesRead) break;
+			hash.update(buffer.subarray(0, bytesRead));
+		}
+	} finally {
+		await file.close();
+	}
+	return hash.digest("hex");
+}
+async function withWorkspaceLock(root, contextId, run) {
+	if (!executionContextAssignmentSchema.shape.id.safeParse(contextId).success) throw failure("invalid_workspace_context");
+	return await runWithHeldLock({
+		lock: await acquireLock({
+			openMeldProfileId: "execution-context-workspaces",
+			key: contextId,
+			pathResolution: { env: { OPENMELD_HOME: root } }
+		}),
+		run
+	});
+}
+async function verifyRetainedWorkspace(manifest) {
+	await canonicalDirectory(manifest.boundaryRoot);
+	await canonicalDirectory(manifest.workingDirectory);
+	if (manifest.sourceWorkingDirectory) await verifyOwnedRepository(manifest);
+	return workspaceResult(manifest);
+}
+async function acquireWorkspaceExecutionLock(root, contextId) {
+	return await acquireLock({
+		openMeldProfileId: "execution-context-workspaces",
+		key: `${contextId}-execution`,
+		pathResolution: { env: { OPENMELD_HOME: root } }
+	});
+}
+function workspaceResult(manifest) {
+	return {
+		workingDirectory: manifest.workingDirectory,
+		boundaryRoot: manifest.boundaryRoot,
+		...manifest.sourceWorkingDirectory ? { sourceWorkingDirectory: manifest.sourceWorkingDirectory } : {},
+		...manifest.baseCommit ? { baseCommit: manifest.baseCommit } : {}
+	};
+}
+function assertSourceAllowed(source, policy) {
+	if (policy.mode === "only_selected_folders" && !policy.folders.some((folder) => within(source, folder))) throw failure("workspace_outside_computer_policy");
+	if (policy.mode === "block_selected_folders" && policy.folders.some((folder) => within(source, folder) || within(folder, source))) throw failure("workspace_overlaps_blocked_folder");
+}
+async function resolveSourceCommit(source) {
+	if (!await inspectPath(join(source, ".git"))) throw failure("project_repository_required");
+	if (await realpath(await git(source, ["rev-parse", "--show-toplevel"])) !== source) throw failure("project_repository_root_required");
+	const commit = await git(source, [
+		"rev-parse",
+		"--verify",
+		"HEAD^{commit}"
+	]).catch((cause) => {
+		throw new Error("execution_context.project_commit_required", { cause });
+	});
+	if (!COMMIT_PATTERN.test(commit)) throw failure("project_commit_required");
+	return commit;
+}
+async function verifyOwnedRepository(manifest) {
+	const repository = join(manifest.boundaryRoot, "repository.git");
+	await canonicalDirectory(repository);
+	await assertPrivateMetadata(repository);
+	if (await inspectPath(join(repository, "objects", "info", "alternates"))) throw failure("workspace_git_metadata_changed");
+	const gitFile = join(manifest.workingDirectory, ".git");
+	const gitFileInfo = await inspectPath(gitFile);
+	if (!gitFileInfo?.isFile() || gitFileInfo.size > 4096) throw failure("workspace_git_metadata_changed");
+	const expectedGitDir = join(repository, "worktrees", "worktree");
+	if ((await readFile(gitFile, "utf8")).trim() !== `gitdir: ${expectedGitDir}`) throw failure("workspace_git_metadata_changed");
+	if (await realpath(join(expectedGitDir, (await readFile(join(expectedGitDir, "commondir"), "utf8")).trim())) !== repository) throw failure("workspace_git_metadata_changed");
+	if (await git(manifest.boundaryRoot, [
+		`--git-dir=${repository}`,
+		"rev-parse",
+		"--verify",
+		"refs/openmeld/base^{commit}"
+	]) !== manifest.baseCommit) throw failure("workspace_base_commit_changed");
+}
+async function assertPrivateMetadata(path) {
+	for (const entry of await readdir(path, { withFileTypes: true })) {
+		if (entry.isSymbolicLink()) throw failure("workspace_is_symlink");
+		if (entry.isDirectory()) await assertPrivateMetadata(join(path, entry.name));
+		else if ((await lstat(join(path, entry.name))).nlink !== 1) throw failure("workspace_git_metadata_changed");
+	}
+}
+async function readManifest(path) {
+	const info = await inspectPath(path);
+	if (!info) return null;
+	if (!info.isFile() || info.size > 32768) throw failure("workspace_record_invalid");
+	let content;
+	try {
+		content = JSON.parse(await readFile(path, "utf8"));
+	} catch {
+		throw failure("workspace_record_invalid");
+	}
+	const parsed = manifestSchema.safeParse(content);
+	if (!parsed.success) throw failure("workspace_record_invalid");
+	const retirement = parsed.data.retirement;
+	const prefix = `${path}.retired-`;
+	if (parsed.data.status === "retiring" && !retirement || retirement && !(retirement.path.startsWith(prefix) && z.uuid().safeParse(retirement.path.slice(prefix.length)).success)) throw failure("workspace_record_invalid");
+	return parsed.data;
+}
+async function writeManifest(path, manifest, flags) {
+	const temporaryPath = flags === "wx" ? path : `${path}.${randomUUID()}.tmp`;
+	const file = await open(temporaryPath, "wx", 384);
+	try {
+		await file.writeFile(`${JSON.stringify({
+			...manifest,
+			version: 2
+		})}\n`, "utf8");
+		await file.sync();
+	} finally {
+		await file.close();
+	}
+	if (flags !== "wx") await rename(temporaryPath, path);
+	await syncDirectory(dirname(path));
+}
+async function moveWorkspace(from, to) {
+	await rename(from, to);
+	await syncDirectory(dirname(from));
+	await syncDirectory(dirname(to));
+}
+async function inspectPath(path) {
+	const info = await lstat(path).catch((error) => {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	});
+	if (info?.isSymbolicLink()) throw failure("workspace_is_symlink");
+	return info;
+}
+async function canonicalDirectory(path) {
+	if (!(await inspectPath(path))?.isDirectory()) throw failure("workspace_directory_unavailable");
+	return await realpath(path);
+}
+async function ensureDirectory(path, recursive = false) {
+	await inspectPath(path);
+	await mkdir(path, {
+		recursive,
+		mode: 448
+	}).catch((error) => {
+		if (error.code !== "EEXIST") throw error;
+	});
+	return await canonicalDirectory(path);
+}
+function within(child, parent) {
+	const path = relative(resolve(parent), child);
+	return path === "" || path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path);
+}
+const GIT_SETTINGS = {
+	"core.hooksPath": "/dev/null",
+	"core.attributesFile": "/dev/null",
+	"core.fsmonitor": "false",
+	"credential.helper": "",
+	"protocol.allow": "never",
+	"protocol.file.allow": "always",
+	"fetch.recurseSubmodules": "false",
+	"submodule.recurse": "false",
+	"uploadpack.packObjectsHook": "",
+	"gc.auto": "0",
+	"maintenance.auto": "false"
+};
+async function git(cwd, args, processSupervisionId) {
+	const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_")));
+	Object.assign(env, {
+		...processSupervisionId ? { OPENMELD_PROCESS_SUPERVISION_ID: processSupervisionId } : {},
+		GIT_CONFIG_NOSYSTEM: "1",
+		GIT_CONFIG_SYSTEM: "/dev/null",
+		GIT_CONFIG_GLOBAL: "/dev/null",
+		GIT_ATTR_NOSYSTEM: "1",
+		GIT_NO_REPLACE_OBJECTS: "1",
+		GIT_NO_LAZY_FETCH: "1",
+		GIT_ALLOW_PROTOCOL: "file",
+		GIT_TERMINAL_PROMPT: "0",
+		GIT_CONFIG_COUNT: String(Object.keys(GIT_SETTINGS).length)
+	});
+	for (const [index, [key, value]] of Object.entries(GIT_SETTINGS).entries()) {
+		env[`GIT_CONFIG_KEY_${index}`] = key;
+		env[`GIT_CONFIG_VALUE_${index}`] = value;
+	}
+	return (await execFileAsync("git", args, {
+		cwd,
+		env,
+		encoding: "utf8",
+		timeout: 3e4,
+		maxBuffer: 1024 * 1024
+	})).stdout.trimEnd();
+}
+function failure(code) {
+	return /* @__PURE__ */ new Error(`execution_context.${code}`);
+}
+//#endregion
+//#region src/local-service/dispatch/execution-context-session.ts
+function executionContextLedgerPolicy(context) {
+	return context ? "throw" : "backup_and_reset";
+}
+function executionContextResourceScope(context) {
+	if (!context) return;
+	if (context.access === "space_context") return "none";
+	if (context.workspace === "isolated") return context.access === "workspace" ? "isolated" : "isolated_read";
+	return context.access === "workspace" ? "exclusive" : "read_only";
+}
+function executionContextFileAccessBoundary(input) {
+	const within = (child, parent) => {
+		const path = relative(parent, child);
+		return path === "" || path !== ".." && !path.startsWith("../") && !isAbsolute(path);
+	};
+	const policy = input.policy;
+	if (input.context.access !== "space_context") {
+		const policySource = input.taskWorkspace?.sourceWorkingDirectory ?? input.workingDirectory;
+		if (policy.mode === "only_selected_folders" && !policy.folders.some((folder) => within(policySource, folder))) throw new Error("execution_context.workspace_outside_computer_policy");
+		if (policy.mode === "block_selected_folders" && policy.folders.some((folder) => within(policySource, folder) || within(folder, policySource))) throw new Error("execution_context.workspace_overlaps_blocked_folder");
+	}
+	return {
+		mode: "only_selected_folders",
+		folders: [input.taskWorkspace?.boundaryRoot ?? input.workingDirectory],
+		revision: policy.revision,
+		updatedAtMs: policy.updatedAtMs,
+		executionContextAccess: input.context.access
+	};
+}
+async function executionContextWorkingDirectory(input) {
+	if (!input.context) return input.currentWorkingDirectory;
+	if (input.context.workspace === "current") return await realpath(input.currentWorkingDirectory);
+	await mkdir(input.ledgerRootPath, {
+		recursive: true,
+		mode: 448
+	});
+	const root = join(await realpath(input.ledgerRootPath), "execution-context-workspaces");
+	await mkdir(root, {
+		recursive: true,
+		mode: 448
+	});
+	if ((await lstat(root)).isSymbolicLink()) throw new Error("execution_context.workspace_is_symlink");
+	const path = join(root, input.context.id);
+	await mkdir(path, {
+		recursive: true,
+		mode: 448
+	});
+	if ((await lstat(path)).isSymbolicLink()) throw new Error("execution_context.workspace_is_symlink");
+	return await realpath(path);
+}
+async function prepareExecutionContextConversation(input) {
+	if (!input.context) return input.unscopedNativeConversationId;
+	const nativeId = input.context.nativeConversationId;
+	if (input.context.runtimeWorkspaceFingerprint && input.context.runtimeWorkspaceFingerprint !== buildRuntimeWorkspaceFingerprint(input.workingDirectory)) throw new Error("execution_context.workspace_changed");
+	if (nativeId && input.existingNativeConversationId && nativeId !== input.existingNativeConversationId) throw new Error("execution_context.native_identity_mismatch");
+	if (nativeId || input.existingNativeConversationId) return nativeId ?? input.existingNativeConversationId;
+	const source = input.context.forkSource;
+	if (!source) return null;
+	const sourceWorkspace = source.workspace === "isolated" ? await readExecutionContextWorkspace({
+		ledgerRootPath: input.ledgerRootPath,
+		contextId: source.contextId
+	}) : null;
+	const sourceDirectory = sourceWorkspace?.workingDirectory ?? await realpath(source.workspace === "current" ? input.currentWorkingDirectory : sourceWorkspace?.workingDirectory ?? join(input.ledgerRootPath, "execution-context-workspaces", source.contextId));
+	if (buildRuntimeWorkspaceFingerprint(sourceDirectory) !== source.runtimeWorkspaceFingerprint) throw new Error("execution_context.fork_source_workspace_changed");
+	const result = await runAgentSessionForkOperation({
+		ledgerRootPath: input.ledgerRootPath,
+		request: {
+			kind: "execution_context",
+			operationId: input.context.id,
+			sourceNativeSessionId: source.nativeConversationId,
+			completedHistoryId: source.completedHistoryId,
+			workingDirectory: input.workingDirectory
+		},
+		execute: async () => {
+			if (input.agentControllerRef === "builtin:claude-code") {
+				if (!(await readBoundedClaudeHistory(source.nativeConversationId)).find((message) => message.uuid === source.completedHistoryId && isCompletedAssistantMessage(message))) throw new Error("execution_context.fork_checkpoint_unavailable");
+				return { childNativeSessionId: (await forkSession(source.nativeConversationId, { upToMessageId: source.completedHistoryId })).sessionId };
+			}
+			if (input.agentControllerRef === "builtin:codex" && input.launchContract) return { childNativeSessionId: (await forkCodexAppServerThread({
+				computerFileAccessBoundary: input.computerFileAccessBoundary ?? void 0,
+				codexTimeoutMs: 3e4,
+				codexWorkdir: sourceDirectory,
+				launchContract: input.launchContract,
+				sourceThreadId: source.nativeConversationId,
+				sourceCompletedTurnId: source.completedHistoryId,
+				targetWorkingDirectory: input.workingDirectory,
+				onRuntimeEvent: input.onRuntimeEvent,
+				env: { OPENMELD_PROCESS_SUPERVISION_ID: input.processSupervisionId }
+			})).threadId };
+			throw new Error("execution_context.fork_unsupported");
+		}
+	});
+	if (result.status !== "completed") throw new Error(`${result.reasonCode}: ${result.message}`);
+	return result.childNativeSessionId;
+}
+async function captureExecutionContextCompletion(input) {
+	if (!(input.context && input.nativeConversationId)) return;
+	const completion = {
+		contextId: input.context.id,
+		nativeConversationId: input.nativeConversationId,
+		runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(input.workingDirectory)
+	};
+	if (!input.providerSucceeded) return completion;
+	if (input.agentControllerRef === "builtin:codex") return {
+		...completion,
+		...input.completedTurnId ? { completedHistoryId: input.completedTurnId } : {}
+	};
+	if (input.agentControllerRef === "builtin:claude-code") try {
+		const completed = (await readBoundedClaudeHistory(input.nativeConversationId)).findLast(isCompletedAssistantMessage);
+		if (completed) return {
+			...completion,
+			completedHistoryId: completed.uuid
+		};
+	} catch {
+		console.warn("[execution_context.checkpoint_unavailable]", { contextId: input.context.id });
+	}
+	return completion;
+}
+async function readBoundedClaudeHistory(sessionId) {
+	const info = await getSessionInfo(sessionId);
+	if (!info || info.fileSize === void 0 || info.fileSize > 8 * 1024 * 1024) throw new Error("execution_context.history_unavailable_or_too_large");
+	return await getSessionMessages(sessionId);
+}
+function isCompletedAssistantMessage(value) {
+	return value.type === "assistant" && typeof value.message === "object" && value.message !== null && "stop_reason" in value.message && value.message.stop_reason === "end_turn";
+}
+//#endregion
 //#region src/local-service/dispatch/prompt-trace.ts
 const OMITTED_ORGANIZATION_POLICY = "[organization-protected information policy omitted]";
 function buildDispatchPromptTrace(input) {
@@ -20877,6 +21637,7 @@ function enqueueDispatchDeliverFrame(input) {
 		presenter: input.presenter
 	});
 	const enqueueResult = input.localExecutionSlots.request({
+		resourceScope: executionContextResourceScope(deliverRequest.payload.executionContext),
 		adapterId: queueLogMeta.adapterId,
 		attemptId: correlation.attemptId,
 		controllerKey: queueLogMeta.controllerKey,
@@ -21446,6 +22207,15 @@ async function handleDispatchDeliverFrame(input) {
 	let runtimeOpenClawBinding;
 	let agentControllerConversationOverride = null;
 	let dispatchSpaceActionContext = null;
+	let nativeQuiescence;
+	let workspaceUse = null;
+	const workspaceProcesses = /* @__PURE__ */ new Map();
+	const observeWorkspaceProcess = (event) => observeExecutionContextWorkspaceProcess(workspaceProcesses, event);
+	let completedTurnId = null;
+	let completedTurnConversationId = null;
+	let completedNativeResult = null;
+	let executionContextCompletion;
+	const invalidStateStrategy = executionContextLedgerPolicy(parsedTask.executionContext);
 	try {
 		dispatchRuntimeContext = await resolveDispatchWorkingFolderRuntimeContext({
 			controllerSnapshot: input.deliverRequest.payload.controllerSnapshot,
@@ -21475,6 +22245,20 @@ async function handleDispatchDeliverFrame(input) {
 			targetProfileId: parsedTask.targetProfileId
 		});
 		effectiveRuntimeContext = runtimePreparation.effectiveRuntimeContext;
+		const originalWorkingDirectory = effectiveRuntimeContext.providerRuntimeWorkingDirectory;
+		await verifyDispatchLegacyContextAssociation({
+			parsedTask,
+			ledgerPaths: input.ledgerPaths,
+			originalWorkingDirectory
+		});
+		const taskWorkspace = await prepareDispatchTaskWorkspace({
+			parsedTask,
+			ledgerRootPath: input.ledgerPaths.rootDirPath,
+			currentWorkingDirectory: originalWorkingDirectory,
+			computerFileAccessStorePath: input.computerFileAccessStorePath
+		});
+		effectiveRuntimeContext = { providerRuntimeWorkingDirectory: taskWorkspace.workingDirectory };
+		runtimePreparation.effectiveRuntimeContext = effectiveRuntimeContext;
 		computerFileAccessBoundary = await resolveDispatchComputerFileAccess({
 			computerFileAccessStorePath: input.computerFileAccessStorePath,
 			onInteractionRequest,
@@ -21482,7 +22266,8 @@ async function handleDispatchDeliverFrame(input) {
 			presenter: input.presenter,
 			routeConfig,
 			runtimeControllerSupport,
-			runtimePreparation
+			runtimePreparation,
+			taskWorkspace
 		});
 		const [sendTargetReference, imageAttachmentPreparation] = await Promise.all([bootstrapContext.sendTargetReferencePromise, materializeDispatchImageAttachments({
 			agentControllerRef: parsedTask.agentControllerRef,
@@ -21536,6 +22321,7 @@ async function handleDispatchDeliverFrame(input) {
 			contextStore: input.contextStore,
 			ledgerPaths: input.ledgerPaths,
 			parsedTask,
+			originalWorkingDirectory,
 			runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(activeRuntimeContext.providerRuntimeWorkingDirectory)
 		});
 		contextLookupKey = dispatchLedgerContext.contextLookupKey;
@@ -21545,6 +22331,27 @@ async function handleDispatchDeliverFrame(input) {
 			agentControllerConversationId: parsedTask.agentControllerConversationId,
 			existingContextId
 		});
+		workspaceUse = await markExecutionContextWorkspaceInUse({
+			context: parsedTask.executionContext,
+			ledgerRootPath: input.ledgerPaths.rootDirPath
+		});
+		runtimeEnvOverrides = {
+			...runtimeEnvOverrides,
+			OPENMELD_PROCESS_SUPERVISION_ID: workspaceUse?.processSupervisionId
+		};
+		effectiveAgentControllerConversationId = await prepareExecutionContextConversation({
+			computerFileAccessBoundary,
+			unscopedNativeConversationId: effectiveAgentControllerConversationId,
+			context: parsedTask.executionContext,
+			currentWorkingDirectory: originalWorkingDirectory,
+			workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
+			existingNativeConversationId: existingContextId,
+			ledgerRootPath: input.ledgerPaths.rootDirPath,
+			agentControllerRef: parsedTask.agentControllerRef,
+			launchContract: routeConfig?.launchContract,
+			onRuntimeEvent: observeWorkspaceProcess,
+			processSupervisionId: workspaceUse?.processSupervisionId
+		});
 		latestScopedExecutionState = dispatchLedgerContext.latestScopedExecutionState;
 		ledgerIo = dispatchLedgerContext.ledgerIo;
 		input.inflightDispatchMetaByTaskId.set(parsedTask.taskId, { agentContextLookupKey: contextLookupKey });
@@ -21602,7 +22409,8 @@ async function handleDispatchDeliverFrame(input) {
 			profileOwnerName: input.profileOwnerName,
 			profileOwnerUserId: input.profileOwnerUserId,
 			sendTargetReference,
-			shouldInjectBootstrap: bootstrapPlan.shouldInject
+			shouldInjectBootstrap: bootstrapPlan.shouldInject,
+			taskWorkspace
 		}), skillPreflight);
 		runtimePromptPlan = computerFileAccessBoundary ? applyComputerFileAccessAwareness({
 			policy: computerFileAccessBoundary,
@@ -21751,7 +22559,7 @@ async function handleDispatchDeliverFrame(input) {
 				});
 			}
 			withLedgerStateTransaction({
-				invalidStateStrategy: "backup_and_reset",
+				invalidStateStrategy,
 				io: providerConversationLedgerIo,
 				mutate: (state) => ({
 					nextState: commitResolvedAgentContext({
@@ -21800,6 +22608,8 @@ async function handleDispatchDeliverFrame(input) {
 		};
 		const syncProviderTurnAcceptedLifecycle = (event) => {
 			if (event.phase !== "provider_turn_accepted") return;
+			completedTurnId = event.turnId;
+			completedTurnConversationId = event.agentControllerConversationId;
 			if (providerAdmissionOwnsRunningLifecycle && runtimeLifecyclePhase !== "running") transitionDispatchLifecycle({ phase: "running" });
 			emitDispatchLocalPhaseJournalEvent({
 				deliverRequest: input.deliverRequest,
@@ -21812,6 +22622,129 @@ async function handleDispatchDeliverFrame(input) {
 				result: "accepted"
 			});
 		};
+		const onNativeTurnStarted = () => {
+			completedTurnId = null;
+			completedTurnConversationId = null;
+			executionContextCompletion = void 0;
+			completedNativeResult = null;
+		};
+		const onNativeTurnCompleted = (result) => {
+			completedNativeResult = result;
+		};
+		const onRuntimeEvent = routeReasoningEvents(observeReasoning, (event) => {
+			observeWorkspaceProcess(event);
+			syncAgentControllerConversationOccupancyLifecycle(event);
+			syncProviderTurnAcceptedLifecycle(event);
+			if (event.phase === "tool_activity") {
+				agentToolActivitySequence += 1;
+				emitDispatchAgentToolActivityFrame({
+					currentSocketRef,
+					daemonSessionId: input.daemonSessionId,
+					deliverRequest: input.deliverRequest,
+					event,
+					parsedTask,
+					presenter: input.presenter,
+					sequence: agentToolActivitySequence
+				});
+			}
+			if (event.phase === "provider_conversation_observed") recordProviderConversationObservation({
+				agentControllerConversation: event.agentControllerConversation ?? null,
+				agentControllerConversationId: event.agentControllerConversationId,
+				source: "runtime_event"
+			});
+			if (event.phase === "provider_usage_limits_observed" && routeConfig?.launchContract) {
+				const agentId = runtimeControllerSupport.runtimeAdapterMatch.adapterId;
+				const launchContract = routeConfig.launchContract;
+				usageObservationAuthPromise ??= probeAgentControllerUsageObservationAuth({
+					agentId,
+					launchContract
+				});
+				usageObservationAuthPromise.then((authSnapshot) => recordRuntimeProviderUsageLimits({
+					agentId,
+					authSnapshot,
+					launchContract,
+					usageLimits: event.usageLimits
+				})).then((retained) => {
+					if (retained) return;
+					emitRunLine({
+						presenter: input.presenter,
+						code: "daemon.run.provider_usage_limits_observation_ignored",
+						text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
+						payload: {
+							agentControllerRef: parsedTask.agentControllerRef,
+							dispatchId: parsedTask.dispatchId,
+							observedLimitKeys: event.usageLimits.map((limit) => limit.key),
+							reasonCode: "provider_account_unconfirmed",
+							targetProfileId: parsedTask.targetProfileId,
+							taskId: parsedTask.taskId
+						}
+					});
+				}).catch((error) => {
+					emitRunLine({
+						presenter: input.presenter,
+						code: "daemon.run.provider_usage_limits_observation_ignored",
+						text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
+						payload: {
+							agentControllerRef: parsedTask.agentControllerRef,
+							dispatchId: parsedTask.dispatchId,
+							errorMessage: toErrorMessage$10(error),
+							observedLimitKeys: event.usageLimits.map((limit) => limit.key),
+							targetProfileId: parsedTask.targetProfileId,
+							taskId: parsedTask.taskId
+						}
+					});
+				});
+			}
+			if (!firstOutputEvidenceSent && (event.phase === "first_stdout" || event.phase === "first_stderr")) {
+				firstOutputEvidenceSent = true;
+				emitDispatchRuntimeEvidenceTransition({
+					currentSocketRef,
+					daemonSessionId: input.daemonSessionId,
+					deliverRequest: input.deliverRequest,
+					durationMs: Math.max(0, event.tsMs - runtimeStartedAtMs),
+					parsedTask,
+					phase: "first_output",
+					presenter: input.presenter
+				});
+			}
+			const controlRegistrySyncResult = syncRuntimeEventToInflightTaskControlRegistry({
+				event,
+				registry: input.inflightTaskControlRegistry,
+				taskId: parsedTask.taskId
+			});
+			if (controlRegistrySyncResult.updated) emitRunLine({
+				presenter: input.presenter,
+				code: "daemon.run.control_registry_synced",
+				text: `control registry synced for task ${parsedTask.taskId}`,
+				payload: {
+					dispatchId: parsedTask.dispatchId,
+					phase: event.phase,
+					processId: controlRegistrySyncResult.processId,
+					targetProfileId: parsedTask.targetProfileId,
+					taskId: parsedTask.taskId
+				}
+			});
+			if (event.phase === "process_spawned" || event.phase === "process_exit") emitDispatchLocalPhaseJournalEvent({
+				deliverRequest: input.deliverRequest,
+				metadata: buildProviderProcessJournalMetadata({
+					agentControllerRef: parsedTask.agentControllerRef,
+					event,
+					runtimeStartedAtMs
+				}),
+				parsedTask,
+				phase: event.phase,
+				result: event.phase === "process_exit" ? "exited" : "spawned"
+			});
+			emitProviderRuntimePhaseLine({
+				agentControllerRef: parsedTask.agentControllerRef,
+				dispatchId: parsedTask.dispatchId,
+				event,
+				presenter: input.presenter,
+				runtimeStartedAtMs,
+				targetProfileId: parsedTask.targetProfileId,
+				taskId: parsedTask.taskId
+			});
+		});
 		clearReasoning();
 		const runtimeExecutionPromise = Promise.resolve(runDispatchRuntimeExecution({
 			computerFileAccessBoundary,
@@ -21820,6 +22753,9 @@ async function handleDispatchDeliverFrame(input) {
 			io: ledgerIo,
 			ledgerPaths: input.ledgerPaths,
 			onInteractionRequest,
+			onNativeTurnStarted,
+			onNativeTurnCompleted,
+			onRuntimeEvent,
 			onPreview: (preview) => {
 				emitDispatchPreviewFrame({
 					attemptId: parsedTask.attemptId,
@@ -21833,119 +22769,6 @@ async function handleDispatchDeliverFrame(input) {
 					taskId: parsedTask.taskId
 				});
 			},
-			onRuntimeEvent: routeReasoningEvents(observeReasoning, (event) => {
-				syncAgentControllerConversationOccupancyLifecycle(event);
-				syncProviderTurnAcceptedLifecycle(event);
-				if (event.phase === "tool_activity") {
-					agentToolActivitySequence += 1;
-					emitDispatchAgentToolActivityFrame({
-						currentSocketRef,
-						daemonSessionId: input.daemonSessionId,
-						deliverRequest: input.deliverRequest,
-						event,
-						parsedTask,
-						presenter: input.presenter,
-						sequence: agentToolActivitySequence
-					});
-				}
-				if (event.phase === "provider_conversation_observed") recordProviderConversationObservation({
-					agentControllerConversation: event.agentControllerConversation ?? null,
-					agentControllerConversationId: event.agentControllerConversationId,
-					source: "runtime_event"
-				});
-				if (event.phase === "provider_usage_limits_observed" && routeConfig?.launchContract) {
-					const agentId = runtimeControllerSupport.runtimeAdapterMatch.adapterId;
-					const launchContract = routeConfig.launchContract;
-					usageObservationAuthPromise ??= probeAgentControllerUsageObservationAuth({
-						agentId,
-						launchContract
-					});
-					usageObservationAuthPromise.then((authSnapshot) => recordRuntimeProviderUsageLimits({
-						agentId,
-						authSnapshot,
-						launchContract,
-						usageLimits: event.usageLimits
-					})).then((retained) => {
-						if (retained) return;
-						emitRunLine({
-							presenter: input.presenter,
-							code: "daemon.run.provider_usage_limits_observation_ignored",
-							text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
-							payload: {
-								agentControllerRef: parsedTask.agentControllerRef,
-								dispatchId: parsedTask.dispatchId,
-								observedLimitKeys: event.usageLimits.map((limit) => limit.key),
-								reasonCode: "provider_account_unconfirmed",
-								targetProfileId: parsedTask.targetProfileId,
-								taskId: parsedTask.taskId
-							}
-						});
-					}).catch((error) => {
-						emitRunLine({
-							presenter: input.presenter,
-							code: "daemon.run.provider_usage_limits_observation_ignored",
-							text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
-							payload: {
-								agentControllerRef: parsedTask.agentControllerRef,
-								dispatchId: parsedTask.dispatchId,
-								errorMessage: toErrorMessage$10(error),
-								observedLimitKeys: event.usageLimits.map((limit) => limit.key),
-								targetProfileId: parsedTask.targetProfileId,
-								taskId: parsedTask.taskId
-							}
-						});
-					});
-				}
-				if (!firstOutputEvidenceSent && (event.phase === "first_stdout" || event.phase === "first_stderr")) {
-					firstOutputEvidenceSent = true;
-					emitDispatchRuntimeEvidenceTransition({
-						currentSocketRef,
-						daemonSessionId: input.daemonSessionId,
-						deliverRequest: input.deliverRequest,
-						durationMs: Math.max(0, event.tsMs - runtimeStartedAtMs),
-						parsedTask,
-						phase: "first_output",
-						presenter: input.presenter
-					});
-				}
-				const controlRegistrySyncResult = syncRuntimeEventToInflightTaskControlRegistry({
-					event,
-					registry: input.inflightTaskControlRegistry,
-					taskId: parsedTask.taskId
-				});
-				if (controlRegistrySyncResult.updated) emitRunLine({
-					presenter: input.presenter,
-					code: "daemon.run.control_registry_synced",
-					text: `control registry synced for task ${parsedTask.taskId}`,
-					payload: {
-						dispatchId: parsedTask.dispatchId,
-						phase: event.phase,
-						processId: controlRegistrySyncResult.processId,
-						targetProfileId: parsedTask.targetProfileId,
-						taskId: parsedTask.taskId
-					}
-				});
-				if (event.phase === "process_spawned" || event.phase === "process_exit") emitDispatchLocalPhaseJournalEvent({
-					deliverRequest: input.deliverRequest,
-					metadata: buildProviderProcessJournalMetadata({
-						agentControllerRef: parsedTask.agentControllerRef,
-						event,
-						runtimeStartedAtMs
-					}),
-					parsedTask,
-					phase: event.phase,
-					result: event.phase === "process_exit" ? "exited" : "spawned"
-				});
-				emitProviderRuntimePhaseLine({
-					agentControllerRef: parsedTask.agentControllerRef,
-					dispatchId: parsedTask.dispatchId,
-					event,
-					presenter: input.presenter,
-					runtimeStartedAtMs,
-					targetProfileId: parsedTask.targetProfileId,
-					taskId: parsedTask.taskId
-				});
-			}),
 			parsedTask,
 			instructionPrompt: runtimePromptPlan,
 			prompt: runtimePromptPlan.fallbackPrompt,
@@ -21956,6 +22779,7 @@ async function handleDispatchDeliverFrame(input) {
 			agentControllerConversationOverride
 		}));
 		const controllerTurnCompletion = runtimeExecutionPromise.then(() => void 0, () => void 0);
+		nativeQuiescence = controllerTurnCompletion;
 		let runtimeResult = await resolveRuntimeResultFromRuntimeOrCliSpaceAction({
 			contextIdForDispatch,
 			dispatchSpaceActionContext,
@@ -21976,6 +22800,10 @@ async function handleDispatchDeliverFrame(input) {
 			runtimeExecutionPromise
 		});
 		const structuredSpaceActionOutcome = await resolveRuntimeResultStructuredSpaceAction({
+			onInteractionRequest,
+			onNativeTurnStarted,
+			onNativeTurnCompleted,
+			onRuntimeEvent,
 			computerFileAccessBoundary,
 			controllerTurnCompletion,
 			inflightTaskControlRegistry: input.inflightTaskControlRegistry,
@@ -22015,7 +22843,7 @@ async function handleDispatchDeliverFrame(input) {
 			resolvedContextId: normalizeOptionalContextId(runtimeResult.contextResolution?.agentControllerConversationId ?? contextDelta?.agentControllerConversationId ?? null) ?? null
 		});
 		await withLedgerStateTransaction({
-			invalidStateStrategy: "backup_and_reset",
+			invalidStateStrategy,
 			io: ledgerIo,
 			mutate: (state) => {
 				let nextState = state;
@@ -22070,7 +22898,8 @@ async function handleDispatchDeliverFrame(input) {
 			runtimePromptPlan
 		});
 		const completedAgentControllerConversationOverride = agentControllerConversationOverride ?? null;
-		const buildCurrentResultPayload = () => {
+		const buildCurrentResultPayload = async () => {
+			if (parsedTask.executionContext) await controllerTurnCompletion;
 			const currentContextDelta = resolveDispatchContextDeltaFromRuntimeResult(runtimeResult.dispatchResult);
 			const observedAgentControllerConversation = resolveObservedDispatchAgentControllerConversation({
 				plannedAgentControllerConversation,
@@ -22078,6 +22907,16 @@ async function handleDispatchDeliverFrame(input) {
 				contextResolution: runtimeResult.contextResolution ?? null,
 				agentControllerConversationOverride: completedAgentControllerConversationOverride
 			});
+			const finalNativeResult = completedNativeResult;
+			const nativeConversationId = (finalNativeResult ? resolveDispatchContextDeltaFromRuntimeResult(finalNativeResult.dispatchResult)?.agentControllerConversationId : null) ?? finalNativeResult?.contextResolution?.agentControllerConversationId ?? currentContextDelta?.agentControllerConversationId ?? runtimeResult.contextResolution?.agentControllerConversationId ?? observedAgentControllerConversation?.agentControllerConversationId ?? observedProviderConversationId;
+			executionContextCompletion = await captureExecutionContextCompletion({
+				context: parsedTask.executionContext,
+				nativeConversationId,
+				agentControllerRef: parsedTask.agentControllerRef,
+				workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
+				completedTurnId: completedTurnConversationId === nativeConversationId ? completedTurnId : null,
+				providerSucceeded: finalNativeResult?.resultPayload.status === "success" || finalNativeResult?.resultPayload.status === "partial_success"
+			});
 			dispatchExecution = buildDispatchExecution({
 				bootstrapPlan: completedBootstrapPlan,
 				agentControllerConversationId: effectiveAgentControllerConversationId,
@@ -22085,32 +22924,40 @@ async function handleDispatchDeliverFrame(input) {
 				observedAgentControllerConversation,
 				plannedAgentControllerConversation
 			});
-			return resolveDispatchResultPayload({
-				attemptId: parsedTask.attemptId,
-				contextDelta: currentContextDelta,
-				contextResolution: runtimeResult.contextResolution ?? null,
-				basePayload: runtimeResult.resultPayload,
-				bootstrapTemplateFacts: bootstrapContext.bootstrapTemplateFacts,
-				agentControllerRef: parsedTask.agentControllerRef,
-				dispatchExecution,
-				existingContextId: contextIdForDispatch,
-				openClawBinding: runtimeOpenClawBinding,
-				openClawGatewayVisibility: runtimeOpenClawGatewayVisibility,
-				promptTrace: runtimePromptTrace,
-				agentControllerConversationForDispatch: observedAgentControllerConversation ?? plannedAgentControllerConversation,
-				workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
-				spaceAction: resolvedSpaceAction,
-				spaceActionProvenance: resolvedSpaceActionProvenance,
-				sourceEventId: parsedTask.sourceEventId,
-				targetProfileId: parsedTask.targetProfileId,
-				taskId: parsedTask.taskId
-			});
+			return {
+				...resolveDispatchResultPayload({
+					attemptId: parsedTask.attemptId,
+					contextDelta: currentContextDelta,
+					contextResolution: runtimeResult.contextResolution ?? null,
+					basePayload: runtimeResult.resultPayload,
+					bootstrapTemplateFacts: bootstrapContext.bootstrapTemplateFacts,
+					agentControllerRef: parsedTask.agentControllerRef,
+					dispatchExecution,
+					existingContextId: contextIdForDispatch,
+					openClawBinding: runtimeOpenClawBinding,
+					openClawGatewayVisibility: runtimeOpenClawGatewayVisibility,
+					promptTrace: runtimePromptTrace,
+					agentControllerConversationForDispatch: observedAgentControllerConversation ?? plannedAgentControllerConversation,
+					workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
+					spaceAction: resolvedSpaceAction,
+					spaceActionProvenance: resolvedSpaceActionProvenance,
+					sourceEventId: parsedTask.sourceEventId,
+					targetProfileId: parsedTask.targetProfileId,
+					taskId: parsedTask.taskId
+				}),
+				executionContextId: parsedTask.executionContext?.id,
+				executionContextCompletion
+			};
 		};
-		resultPayload = buildCurrentResultPayload();
+		resultPayload = await buildCurrentResultPayload();
 		const replySettlement = await settleAgentReplyProposals({
 			initialResultPayload: resultPayload,
 			reconsider: async (agentReplyObservationCursor) => {
 				const reconsidered = await resolveRuntimeResultStructuredSpaceAction({
+					onInteractionRequest,
+					onNativeTurnStarted,
+					onNativeTurnCompleted,
+					onRuntimeEvent,
 					agentReplyObservationCursor,
 					computerFileAccessBoundary,
 					controllerTurnCompletion,
@@ -22135,7 +22982,7 @@ async function handleDispatchDeliverFrame(input) {
 				runtimeResult = reconsidered.runtimeResult;
 				resolvedSpaceAction = reconsidered.resolvedSpaceAction;
 				resolvedSpaceActionProvenance = reconsidered.resolvedSpaceActionProvenance;
-				return buildCurrentResultPayload();
+				return await buildCurrentResultPayload();
 			},
 			submit: (payload) => sendResultAndSummarize({
 				attemptId: parsedTask.attemptId,
@@ -22233,6 +23080,14 @@ async function handleDispatchDeliverFrame(input) {
 			}
 		});
 	} finally {
+		await nativeQuiescence;
+		await releaseDispatchTaskWorkspace({
+			workspaceUse,
+			parsedTask,
+			ledgerRootPath: input.ledgerPaths.rootDirPath,
+			workspaceProcesses,
+			presenter: input.presenter
+		});
 		reasoningStream.dispose();
 		currentSocketRef.reasoningPreferenceListeners?.delete(clearReasoning);
 		lifecycleKeepalive.stop?.();
@@ -22241,6 +23096,11 @@ async function handleDispatchDeliverFrame(input) {
 		input.inflightTaskControlRegistry.removeTask(parsedTask.taskId);
 		pendingAgentInteractionRegistry.removeTask(parsedTask.taskId);
 	}
+	resultPayload = {
+		...resultPayload,
+		executionContextId: parsedTask.executionContext?.id,
+		executionContextCompletion
+	};
 	emitDispatchRuntimeEvidenceTransition({
 		currentSocketRef,
 		daemonSessionId: input.daemonSessionId,
@@ -22401,8 +23261,28 @@ async function rollbackBootstrapExecutionStateAfterFailureIfNeeded(input) {
 		paths: input.ledgerPaths
 	});
 }
+async function verifyDispatchLegacyContextAssociation(input) {
+	const association = input.parsedTask.executionContext?.legacyAssociation;
+	if (!association) return;
+	assertLegacyAgentContextAssociation({
+		state: await loadLedgerState({
+			invalidStateStrategy: "throw",
+			io: createLedgerIo(),
+			paths: input.ledgerPaths
+		}),
+		legacyNativeConversationId: association.nativeConversationId,
+		key: {
+			spaceId: input.parsedTask.spaceId,
+			targetProfileId: input.parsedTask.targetProfileId,
+			agentControllerRef: input.parsedTask.agentControllerRef,
+			transportMode: input.parsedTask.transportMode,
+			runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(input.originalWorkingDirectory)
+		}
+	});
+}
 async function loadDispatchLedgerContext(input) {
 	const keyInput = {
+		executionContextId: input.parsedTask.executionContext?.id,
 		spaceId: input.parsedTask.spaceId,
 		targetProfileId: input.parsedTask.targetProfileId,
 		agentControllerRef: input.parsedTask.agentControllerRef,
@@ -22413,7 +23293,7 @@ async function loadDispatchLedgerContext(input) {
 	const ledgerIo = createLedgerIo();
 	const legacyContextId = input.contextStore.get(contextLookupKey) ?? null;
 	const { currentExecutionState, existingContextId, latestScopedExecutionState } = await withLedgerStateTransaction({
-		invalidStateStrategy: "backup_and_reset",
+		invalidStateStrategy: executionContextLedgerPolicy(input.parsedTask.executionContext),
 		io: ledgerIo,
 		mutate: (state) => {
 			const scopeInput = {
@@ -22422,6 +23302,14 @@ async function loadDispatchLedgerContext(input) {
 				targetProfileId: input.parsedTask.targetProfileId,
 				transportMode: input.parsedTask.transportMode
 			};
+			assertLegacyAgentContextAssociation({
+				state,
+				legacyNativeConversationId: input.parsedTask.executionContext?.legacyAssociation?.nativeConversationId,
+				key: {
+					...scopeInput,
+					runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(input.originalWorkingDirectory)
+				}
+			});
 			const seededLedgerState = resolveCompatibleAgentContextMatch({
 				key: keyInput,
 				state
@@ -22442,16 +23330,17 @@ async function loadDispatchLedgerContext(input) {
 				state: seededLedgerState
 			});
 			const existingContextId = nextAgentContextMatch?.agentContext.agentControllerConversationId ?? null;
+			const currentExecutionState = resolveCompatibleConversationExecutionState({
+				key: keyInput,
+				preferredLookupKey: nextAgentContextMatch?.agentContextLookupKey ?? null,
+				state: seededLedgerState
+			});
 			return {
 				nextState: seededLedgerState,
 				value: {
-					currentExecutionState: resolveCompatibleConversationExecutionState({
-						key: keyInput,
-						preferredLookupKey: nextAgentContextMatch?.agentContextLookupKey ?? null,
-						state: seededLedgerState
-					}),
+					currentExecutionState,
 					existingContextId,
-					latestScopedExecutionState: resolveLatestScopedConversationExecutionState({
+					latestScopedExecutionState: input.parsedTask.executionContext ? currentExecutionState : resolveLatestScopedConversationExecutionState({
 						scope: scopeInput,
 						state: seededLedgerState
 					})?.executionState ?? null
@@ -22595,7 +23484,12 @@ function buildDispatchRuntimePrompt(input) {
 		profileOwnerUserId: input.profileOwnerUserId,
 		organizationProtectedInformation: input.parsedTask.organizationProtectedInformation,
 		workingLanguage: input.parsedTask.workingLanguage,
-		prompt: input.parsedTask.prompt,
+		prompt: input.taskWorkspace?.baseCommit ? `${input.parsedTask.prompt}\n\nOpenMeld task workspace: ${JSON.stringify({
+			projectId: input.parsedTask.defaultProjectId,
+			repositoryName: input.taskWorkspace.sourceWorkingDirectory ? basename(input.taskWorkspace.sourceWorkingDirectory) : null,
+			workingDirectory: input.taskWorkspace.workingDirectory,
+			baseCommit: input.taskWorkspace.baseCommit
+		})}\nThis task uses an independent Git worktree with private Git metadata. The starting commit is frozen. Uncommitted and ignored source files were not copied. Make changes in this task worktree; the original checkout is not the task's working directory. Refer to the task and commit in public replies without disclosing private local paths.` : input.parsedTask.prompt,
 		recipientExplicitlyAddressedByActivationTargets: input.parsedTask.recipientExplicitlyAddressedByActivationTargets,
 		sourceSignalId: input.parsedTask.sourceEventId,
 		sourceMessageEnvelope: input.parsedTask.sourceMessageEnvelope,
@@ -22616,9 +23510,83 @@ function buildDispatchRuntimePrompt(input) {
 		targetProfileId: input.parsedTask.targetProfileId
 	});
 }
+async function prepareDispatchTaskWorkspace(input) {
+	const context = input.parsedTask.executionContext;
+	if (context && context.access !== "space_context") return await prepareExecutionContextWorkspace({
+		context,
+		ledgerRootPath: input.ledgerRootPath,
+		currentWorkingDirectory: input.currentWorkingDirectory,
+		policy: await readComputerFileAccessPolicy(input.computerFileAccessStorePath)
+	});
+	const workingDirectory = await executionContextWorkingDirectory({
+		context,
+		ledgerRootPath: input.ledgerRootPath,
+		currentWorkingDirectory: input.currentWorkingDirectory
+	});
+	return {
+		workingDirectory,
+		boundaryRoot: workingDirectory
+	};
+}
+async function releaseDispatchTaskWorkspace(input) {
+	const context = input.parsedTask.executionContext;
+	if (!(input.workspaceUse && context)) return;
+	try {
+		const released = await releaseExecutionContextWorkspace({
+			ledgerRootPath: input.ledgerRootPath,
+			context,
+			use: input.workspaceUse,
+			ownedProcessesQuiescent: [...input.workspaceProcesses.values()].every(Boolean)
+		});
+		emitRunLine({
+			presenter: input.presenter,
+			code: `daemon.run.workspace_${released.status}`,
+			text: released.status === "released" ? "Reclaimed the unchanged task workspace." : "Retained the task workspace.",
+			payload: {
+				contextId: context.id,
+				...released
+			}
+		});
+	} catch (error) {
+		emitRunLine({
+			presenter: input.presenter,
+			code: "daemon.run.workspace_retained",
+			text: "Task workspace cleanup needs reconciliation.",
+			payload: {
+				contextId: context.id,
+				errorMessage: toErrorMessage$10(error)
+			}
+		});
+	}
+}
+function observeExecutionContextWorkspaceProcess(processes, event) {
+	if (event.phase === "process_spawned") processes.set(event.processId, false);
+	else if (event.phase === "process_exit") processes.set(event.processId, event.ownedProcessesQuiescent === true);
+}
 async function resolveDispatchComputerFileAccess(input) {
 	const policy = await readComputerFileAccessPolicy(input.computerFileAccessStorePath);
 	const verifier = input.runtimeControllerSupport.localAdapterEntry.adapter.verifyComputerFileAccessBoundary;
+	if (input.parsedTask.executionContext) {
+		const context = input.parsedTask.executionContext;
+		if (input.parsedTask.agentControllerRef === "builtin:claude-code" && context.access === "space_context") return null;
+		if (input.parsedTask.agentControllerRef !== "builtin:codex" || input.parsedTask.transportMode !== "codex-app-server" || !verifier) throw new Error("execution_context.file_access_unsupported");
+		const workingDirectory = input.runtimePreparation.effectiveRuntimeContext.providerRuntimeWorkingDirectory;
+		const boundary = executionContextFileAccessBoundary({
+			context,
+			workingDirectory,
+			policy,
+			taskWorkspace: input.taskWorkspace
+		});
+		if (!(await verifier({
+			boundary,
+			workingDirectory,
+			executionMode: "normal",
+			agentControllerPermissionMode: input.routeConfig?.agentControllerPermissionMode,
+			launchContract: input.routeConfig?.launchContract ?? null,
+			transportMode: input.parsedTask.transportMode
+		})).supported) throw new Error("execution_context.file_access_unverified");
+		return boundary;
+	}
 	const admission = await resolveComputerFileAccessAdmission({
 		agentControllerPermissionMode: input.routeConfig?.agentControllerPermissionMode,
 		agentControllerRef: input.parsedTask.agentControllerRef,
@@ -22675,6 +23643,12 @@ function createDispatchSpaceActionRuntimeContext(input) {
 }
 async function resolveRuntimeResultFromRuntimeOrCliSpaceAction(input) {
 	if (!input.dispatchSpaceActionContext) return await input.runtimeExecutionPromise;
+	if (input.parsedTask.executionContext) return await applyCliSpaceActionRecordIfPresent({
+		dispatchSpaceActionContext: input.dispatchSpaceActionContext,
+		parsedTask: input.parsedTask,
+		presenter: input.presenter,
+		runtimeResult: await input.runtimeExecutionPromise
+	});
 	const cliSpaceActionAbortController = new AbortController();
 	let completion;
 	try {
@@ -23059,6 +24033,10 @@ async function resolveRuntimeResultStructuredSpaceAction(input) {
 					agentControllerConversationOverride: input.agentControllerConversationOverride
 				});
 				return runDispatchRuntimeExecution({
+					onInteractionRequest: input.onInteractionRequest,
+					onNativeTurnStarted: input.onNativeTurnStarted,
+					onNativeTurnCompleted: input.onNativeTurnCompleted,
+					onRuntimeEvent: input.onRuntimeEvent,
 					computerFileAccessBoundary: input.computerFileAccessBoundary,
 					contextId: repairContinuation.contextId,
 					executionMode: "repair",
@@ -23298,6 +24276,10 @@ async function coordinateConcurrentAgentReply(input) {
 					}
 				});
 				let runtimeResult = await runDispatchRuntimeExecution({
+					onInteractionRequest: input.onInteractionRequest,
+					onNativeTurnStarted: input.onNativeTurnStarted,
+					onNativeTurnCompleted: input.onNativeTurnCompleted,
+					onRuntimeEvent: input.onRuntimeEvent,
 					agentControllerConversationOverride: continuation.agentControllerConversationOverride,
 					computerFileAccessBoundary: input.computerFileAccessBoundary,
 					contextId: continuation.contextId,
@@ -23739,11 +24721,12 @@ function resolveStructuredSpaceActionProvenance(input) {
 	if (!input.resolvedSpaceAction) return;
 	return input.runtimeResult.resultPayload.spaceActionProvenance ?? "direct";
 }
-function runDispatchRuntimeExecution(input) {
-	return runRuntimeTask({
-		...input.agentControllerConversationOverride ? { agentContextOverride: {
+async function runDispatchRuntimeExecution(input) {
+	input.onNativeTurnStarted();
+	const result = await runRuntimeTask({
+		...input.parsedTask.executionContext || input.agentControllerConversationOverride ? { agentContextOverride: {
 			agentControllerConversationId: input.contextId,
-			agentControllerConversationOverride: input.agentControllerConversationOverride
+			agentControllerConversationOverride: input.agentControllerConversationOverride ?? null
 		} } : {},
 		io: input.io,
 		...input.onInteractionRequest ? { onInteractionRequest: input.onInteractionRequest } : {},
@@ -23767,6 +24750,8 @@ function runDispatchRuntimeExecution(input) {
 			runtimeContext: input.runtimeContext
 		})
 	});
+	input.onNativeTurnCompleted(result);
+	return result;
 }
 function buildDispatchRuntimeRoute(input) {
 	const runtimeEnv = input.contextId ? {
@@ -23800,6 +24785,7 @@ function buildDispatchRuntimeRoute(input) {
 }
 function buildDispatchRuntimeTask(input) {
 	return {
+		executionContext: input.parsedTask.executionContext,
 		agentId: input.parsedTask.targetProfileId,
 		attemptId: input.parsedTask.attemptId,
 		bindingKey: `${input.parsedTask.spaceId}|${input.parsedTask.targetProfileId}`,
@@ -27421,32 +28407,67 @@ function createControlledShutdownCoordinator(input) {
 		},
 		requestServiceStop,
 		async request(payload) {
-			const stopCause = await resolveRecentDaemonSignalStopCause();
-			if (shutdownAttempt) await shutdownAttempt.promise;
-			else if (activeSessionShutdownResolver) {
-				const currentAttempt = Promise.withResolvers();
-				shutdownAttempt = currentAttempt;
-				activeSessionShutdownResolver(stopCause);
-				try {
-					await currentAttempt.promise;
-				} finally {
-					if (shutdownAttempt === currentAttempt) shutdownAttempt = null;
+			return await withControlledStopRefusalProof({
+				guarded: payload.onAdmission !== void 0,
+				isStopping: () => shutdownAttempt !== null || input.isStopRequested(),
+				run: async (markCommitted) => {
+					const stopCause = await resolveRecentDaemonSignalStopCause();
+					if (shutdownAttempt) {
+						markCommitted();
+						const existingAttempt = shutdownAttempt;
+						await payload.onAdmission?.(() => void 0);
+						await existingAttempt.promise;
+					} else if (activeSessionShutdownResolver) {
+						const currentAttempt = Promise.withResolvers();
+						const clearAttempt = () => {
+							if (shutdownAttempt === currentAttempt) shutdownAttempt = null;
+						};
+						currentAttempt.promise.then(clearAttempt, clearAttempt);
+						const resolver = activeSessionShutdownResolver;
+						const commit = () => {
+							if (shutdownAttempt || activeSessionShutdownResolver !== resolver) throw new Error("Service session changed before Stop admission.");
+							markCommitted();
+							shutdownAttempt = currentAttempt;
+							resolver(stopCause);
+						};
+						await (payload.onAdmission ?? commitControlledStop)(commit);
+						await currentAttempt.promise;
+					} else {
+						if (input.hasUndrainedWork()) throw new DaemonServiceRunError({
+							code: "daemon.control.shutdown_drain_unavailable",
+							message: "controlled shutdown cannot verify active local work without a connected runtime session"
+						});
+						const commit = () => {
+							if (activeSessionShutdownResolver || input.hasUndrainedWork()) throw new Error("Service work changed before Stop admission.");
+							markCommitted();
+							requestServiceStop(stopCause);
+						};
+						await (payload.onAdmission ?? commitControlledStop)(commit);
+					}
+					return {
+						accepted: true,
+						gracePeriodMs: payload.gracePeriodMs,
+						mode: payload.mode
+					};
 				}
-			} else {
-				if (input.hasUndrainedWork()) throw new DaemonServiceRunError({
-					code: "daemon.control.shutdown_drain_unavailable",
-					message: "controlled shutdown cannot verify active local work without a connected runtime session"
-				});
-				requestServiceStop(stopCause);
-			}
-			return {
-				accepted: true,
-				gracePeriodMs: payload.gracePeriodMs,
-				mode: payload.mode
-			};
+			});
 		}
 	};
 }
+function commitControlledStop(commit) {
+	commit();
+}
+async function withControlledStopRefusalProof(input) {
+	let committed = input.isStopping();
+	try {
+		return await input.run(() => {
+			committed = true;
+		});
+	} catch (error) {
+		if (input.guarded && !committed && !input.isStopping()) throw new ServiceAccountAdmissionError("stop_refused", error instanceof Error ? error.message : String(error));
+		throw error;
+	}
+}
 function hasUndrainedLocalWork(input) {
 	return input.inflightDispatchMetaByTaskId.size > 0 || listDispatchResultOutboxPendingAcknowledgementKeys({ ledgerPaths: input.ledgerPaths }).length > 0;
 }
@@ -27467,6 +28488,11 @@ async function runSocketSessionWithControlledShutdown(input) {
 	input.controlledShutdown.handleSessionCompleted();
 }
 const runDaemonServiceLoop = async (input) => {
+	const auth = await getAuthSessionState({ refreshExpired: true });
+	if (auth.state !== "valid" || !auth.session?.user?.id) throw new Error("A valid CLI account is required to start this Service.");
+	return await withAdmittedServiceSession(auth.session, async () => await runAccountBoundDaemonServiceLoop(input));
+};
+const runAccountBoundDaemonServiceLoop = async (input) => {
 	await assertDaemonServiceLaunchScope();
 	const baseUrl = await resolveBaseUrl(input.baseUrl);
 	const ownerContext = await resolveDaemonServiceOwnerContext({ openMeldProfileId: input.profile });
@@ -27652,6 +28678,7 @@ const runDaemonServiceLoop = async (input) => {
 	const controlPlaneServer = await startLocalDaemonControlPlaneServer({
 		resolveExpectedToken: async () => await ensureDaemonControlPlaneToken(),
 		getContext: async () => ({
+			accountCheckedServiceControl: process.platform !== "win32",
 			healthPayload: {
 				checkedAt: nowIsoString(),
 				...toHealthProjection(stopRequested ? {
@@ -27706,7 +28733,19 @@ const runDaemonServiceLoop = async (input) => {
 					requestActiveRouteCatalogSync
 				});
 			},
-			shutdownHandler: controlledShutdown.request,
+			shutdownHandler: async (payload) => {
+				const admissionId = payload.accountAdmissionId;
+				return await controlledShutdown.request({
+					...payload,
+					...admissionId ? { onAdmission: async (commit) => await admitServiceAccountStop({
+						id: admissionId,
+						ownerUserId,
+						deviceId,
+						contractGeneration: daemonServiceContract?.generation ?? 0,
+						commit
+					}) } : {}
+				});
+			},
 			serviceUpdateReadinessHandler: () => {
 				const unacknowledgedResultCount = listDispatchResultOutboxPendingAcknowledgementKeys({ ledgerPaths }).length;
 				return {
@@ -31857,6 +32896,7 @@ function summarizeDaemonStopJournalResult(stopResult) {
 }
 async function stopCurrentLaneDaemonService(input) {
 	const context = await loadCurrentLaneDaemonStopContext();
+	if (input.completedControlledShutdownOwnerPid !== void 0 && (context.ownerSnapshot.runtimeStatus.pid !== null && context.ownerSnapshot.runtimeStatus.pid !== input.completedControlledShutdownOwnerPid || context.ownerSnapshot.ownedProcesses.some((process) => process.pid !== input.completedControlledShutdownOwnerPid))) throw new Error("The Service owner changed after controlled shutdown. Check its status before trying again.");
 	await emitDaemonLifecycleEvent({
 		type: "owner.snapshot",
 		result: "observed",
@@ -31876,6 +32916,7 @@ async function stopCurrentLaneDaemonService(input) {
 	});
 	if (context.stopStrategy.kind === "not_running") return await buildDaemonStopNotRunningResult(context.ownerSnapshot.runtimeStatus);
 	if (context.stopStrategy.kind === "manager_first") return await stopManagedCurrentLaneDaemonService({
+		controlledShutdownComplete: input.completedControlledShutdownOwnerPid !== void 0,
 		force: input.force,
 		mode: input.mode,
 		ownerSnapshot: context.ownerSnapshot,
@@ -31956,7 +32997,7 @@ async function stopManagedCurrentLaneDaemonService(input) {
 	if (input.mode === "interactive") {
 		if (!await confirmStopServiceManager(input.runtime, input.ownerSnapshot.runtimeStatus)) return { status: "cancelled" };
 	}
-	const drainPreparationResult = await prepareManagedDaemonServiceForStop({
+	const drainPreparationResult = input.controlledShutdownComplete ? null : await prepareManagedDaemonServiceForStop({
 		force: input.force,
 		mode: input.mode,
 		ownerSnapshot: input.ownerSnapshot
@@ -33820,7 +34861,7 @@ async function runDaemonRunInteractivePreflightBeforeModePrompt(input) {
 	}
 	return null;
 }
-async function runDaemonStop(input) {
+async function runDaemonStop(input, internal = {}) {
 	const runtime = await resolveRuntimeContext({ view: input.view });
 	const presenter = input.json === true ? createQuietPresenter(runtime) : createPresenter(runtime);
 	emitDaemonOverviewIfAgent({
@@ -33840,6 +34881,7 @@ async function runDaemonStop(input) {
 		run: async () => {
 			if (resolveOpenMeldEnvPreset() === "dev-local") await uninstallDaemonServiceUpdateWorker();
 			const stopped = await executeDaemonStopCommand({
+				completedControlledShutdownOwnerPid: internal.completedControlledShutdownOwnerPid,
 				force: input.force,
 				presenter,
 				profile: input.profile,
@@ -33921,6 +34963,7 @@ async function runDaemonAutostart(input, options = {}) {
 }
 async function executeDaemonStopCommand(input) {
 	const stopResult = await stopCurrentLaneDaemonService({
+		completedControlledShutdownOwnerPid: input.completedControlledShutdownOwnerPid,
 		force: input.force,
 		mode: "interactive",
 		runtime: input.runtime
@@ -35399,6 +36442,7 @@ async function resolveDetachedDaemonServiceLaunchTarget() {
 function buildDetachedDaemonLaunchSpec(input) {
 	const detachedMode = input.mode === "background" ? "foreground" : input.mode;
 	const sharedArgs = [
+		...input.accountAdmissionId ? ["--account-admission-id", input.accountAdmissionId] : [],
 		...input.openMeldProfileId ? ["--profile", input.openMeldProfileId] : [],
 		...input.deviceId ? ["--device-id", input.deviceId] : [],
 		...typeof input.heartbeatMs === "number" ? ["--heartbeat-ms", String(input.heartbeatMs)] : [],
@@ -39929,6 +40973,6 @@ async function emitAgentsConfigParseFallbackSignal(input) {
 	});
 }
 //#endregion
-export { renderHumanTextErrorCard as $, ensureCommandAuthenticationOrCancel as $n, buildSignalMessageReadProjection as $t, runDaemonBackgroundStartForDecision as A, buildAgentActivityEvent as An, cliJsonSkillsShowEnvelopeSchema as Ar, resolveLocalAgentControllerLaunchability as At, runDaemonUninstall as B, enqueueControllerTaskLifecycleEventWhileLocked as Bn, readSpaceRecentMentionProfileIds as Bt, resolveGatewayWebOrigin as C, returnToTargetPickerState as Cn, isCurrentCommandCheckScopeActive as Cr, validateLocalProjectConnectionPath as Ct, isManagedSystemServiceBootstrapRun as D, readRecentDaemonDispatchJournalEvents as Dn, cliJsonOutputEnvelopeSchema as Dr, submitRuntimeAgentControllerReports as Dt, bestEffortStopCurrentLaneDaemonService as E, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as En, cliJsonErrorEnvelopeSchema as Er, submitRuntimeAgentControllerReport as Et, runDaemonRunAfterEntryChecks as F, removeAgentActivityContextCache as Fn, revokeOrganizationJoinLinkResponseSchema as Fr, isLocalSpaceStateCorruptResult as Ft, buildProfileWorkspaceRows as G, unregisterAgentActivityRoute as Gn, upsertSpaceConfig as Gt, formatServiceRuntimeHeadline as H, isAgentActivityRouteRegistered as Hn, toLocalSpaceStateIntegrityError as Ht, runDaemonSnapshot as I, enqueueAgentActivityHookEvent as In, listSpaceConfigs as It, createDelayedSpinner as J, installAgentActivityIntegrations as Jn, SpaceComposerSubmissionError as Jt, reconcileCliVersionView as K, AGENT_ACTIVITY_INTEGRATION_OWNER as Kn, writeSpaceCacheDeletionNoticeState as Kt, runDaemonStatusFlow as L, removeProjectInbox as Ln, readSpaceCacheDeletionNoticeState as Lt, runDaemonInstall as M, normalizeSharedSessionTitle as Mn, getOrganizationJoinLinkResponseSchema as Mr, projectSpaceProfileCache as Mt, runDaemonInterrupt as N, readCodexSessionTitles as Nn, organizationJoinLinkErrorResponseSchema as Nr, LocalSpaceStateIntegrityError as Nt, runDaemon as O, connectWebSocket as On, cliJsonSkillsListEnvelopeSchema as Or, collectLocalAgentControllerInventory as Ot, runDaemonReinstall as P, readAgentActivityContextForPath as Pn, organizationJoinLinkManagementQuerySchema as Pr, inspectSpaceCacheFile as Pt, renderHumanErrorCard as Q, buildCommandAuthenticationPromptMessage as Qn, buildSignalIndex as Qt, runDaemonStop as R, readAgentActivityOutboxHealth as Rn, readSpaceConfig as Rt, buildSpaceWebUrl as S, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as Sn, getCurrentCommandCheckState as Sr, LocalProjectConnectionError as St, runDaemonServiceParticipationGate as T, DISPATCH_OWNED_RUNTIME_MODE as Tn, startCurrentCommandCheckScope as Tr, submitProfileRuntimeAgentControllerReport as Tt, resolveServiceParticipationReadiness as U, registerAgentActivityRoute as Un, toSpaceConfigListIntegrityError as Ut, formatServiceParticipationReadinessLabel as V, readControllerTaskLifecycleOutboxHealth as Vn, removeSpaceConfig as Vt, buildProfileWorkspacePresentation as W, resolveAgentActivityRouteForPath as Wn, updateSpaceLastSeenTs as Wt, runDaemonStartDecisionPrompt as X, resolveAgentActivityDispatcherCommand as Xn, buildDispatchResultReplyWorkflowProjection as Xt, shouldEmitAgentOverview as Y, readAgentActivityIntegrationStatus as Yn, buildDispatchResultMessageReadProjection as Yt, buildHumanErrorCopy as Z, uninstallAgentActivityIntegrations as Zn, buildPublicSpaceEntryUrl as Zt, promptSearchSelect as _, listSpaceMentionSuggestions as _n, revokeAuthAccessToken as _r, assertDispatchOwnedRuntimePublicWriteAllowed as _t, runAgentsCustomRemove as a, buildSpaceRoundReadProjection as an, exchangeOneTimeTokenAuthSession as ar, resolveDaemonServiceParticipationStatus as at, resolveOffsetVisibleWindow as b, prepareSpaceFileOnlySubmission as bn, runInteractivePrompt as br, readDispatchSpaceActionContextFromEnv as bt, runAgentsDisable as c, collectResolvedSpaceMentions as cn, formatActiveOrganizationLabel as cr, fetchSpaceMeta as ct, runAgentsManage as d, enterRelationPickerState as dn, buildUnifiedCardFrame as dr, parseSpaceMetaResponse as dt, buildSignalReplyWorkflowProjection as en, evaluateCommandAuthentication as er, emitCliJsonEnvelope as et, runAgentsRepair as f, extractMentionAuthoringPrefix as fn, extractAuthApiErrorMessage as fr, GatewayHttpError as ft, promptSearchMultiselectWorkbench as g, listSpaceMentionRelationChoices as gn, resolveDeviceTokenExpiresAt as gr, parseJsonResponse as gt, promptSearchMultiselect as h, isTargetPickerState as hn, resolveDeviceAuthClientId as hr, toStructuredGatewayFailure as ht, runAgentsCustomList as i, buildSpaceProfileAddPlan as in, runAuthStatus as ir, writeInstalledLocalComponentsSnapshot as it, runDaemonCancel as j, resolveObservedAgentActivityBinding as jn, acceptOrganizationJoinLinkBodySchema as jr, resolveLocalAgentControllerReportDecision as jt, runDaemonAutostart as k, syncLocalAgentActivity as kn, cliJsonSkillsLoadEnvelopeSchema as kr, resolveLocalAgentControllerBlockerReasonCodes as kt, runAgentsEnable as l, createSpaceMemberIdentityIndex as ln, renderInfoCard as lr, updateSpaceMeta as lt, formatTransportModeDisplay as m, isRelationPickerState as mn, requestDeviceToken as mr, readGatewayTextResponse as mt, runAgentsConfig as n, buildSpaceMentionProfileIndex as nn, runAuthLogout as nr, readDaemonIncidentLogTail as nt, runAgentsCustomUpdate as o, buildUpdatesReplyWorkflowProjection as on, buildAuthStatusRows as or, fetchSpaceUpdates as ot, runAgentsShow as p, formatRemovedCcRelationMessage as pn, fetchAuthUserSnapshot as pr, readGatewayJsonResponse as pt, emitDaemonAgentOverview as q, defaultManagedIntegrationPaths as qn, writeSpaceRecentMentionProfileIds as qt, runAgentsCustomAdd as r, buildSpaceMessageReadRelationSummary as rn, runAuthMenu as rr, resolveLocalComponentsStatus as rt, runAgentsDetect as s, closeMentionPickerState as sn, buildAuthStatusSnapshot as sr, createCliSpaceApi as st, runAgents as t, buildSpaceMemberAgentPresencePresentation as tn, runAuthLogin as tr, runDaemonStartupPreflight as tt, runAgentsList as u, createSpaceTargetCatalog as un, renderTextInfoCard as ur, parseSpaceMetaPayload as ut, clampNumber as v, openTargetPickerState as vn, promptTextEntry as vr, readDispatchOwnedRuntimeGuard as vt, resolveSpaceWebGatewayOrigin as w, updateAuthoredMentionRanges as wn, resetCurrentCommandCheckState as wr, readRuntimeReportingHealthState as wt, computeRetryDelayMs as x, resolveNextRecentMentionProfileIdsForQueuedText as xn, finishCurrentCommandCheckScope as xr, writeDispatchSpaceActionRecord as xt, resolveAnchoredVisibleWindow as y, prepareSpaceComposerSubmission as yn, isReturnKeypress as yr, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as yt, runDaemonTeardownStrict as z, removeProjectOutbox as zn, readSpaceLastSeenTs as zt };
+export { buildHumanErrorCopy as $, readAgentActivityIntegrationStatus as $n, buildDispatchResultMessageReadProjection as $t, runDaemonBackgroundStartForDecision as A, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as An, cliJsonErrorEnvelopeSchema as Ar, submitRuntimeAgentControllerReport as At, runDaemonTeardownStrict as B, enqueueAgentActivityHookEvent as Bn, listSpaceConfigs as Bt, resolveGatewayWebOrigin as C, prepareSpaceComposerSubmission as Cn, isReturnKeypress as Cr, readDispatchSpaceActionContextForReceiptFromEnv as Ct, isManagedSystemServiceBootstrapRun as D, returnToTargetPickerState as Dn, isCurrentCommandCheckScopeActive as Dr, validateLocalProjectConnectionPath as Dt, bestEffortStopCurrentLaneDaemonService as E, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as En, getCurrentCommandCheckState as Er, LocalProjectConnectionError as Et, runDaemonRunAfterEntryChecks as F, resolveObservedAgentActivityBinding as Fn, acceptOrganizationJoinLinkBodySchema as Fr, resolveLocalAgentControllerReportDecision as Ft, buildProfileWorkspacePresentation as G, readControllerTaskLifecycleOutboxHealth as Gn, removeSpaceConfig as Gt, formatServiceParticipationReadinessLabel as H, readAgentActivityOutboxHealth as Hn, readSpaceConfig as Ht, runDaemonServiceDetached as I, normalizeSharedSessionTitle as In, getOrganizationJoinLinkResponseSchema as Ir, projectSpaceProfileCache as It, createQuietPresenter as J, resolveAgentActivityRouteForPath as Jn, updateSpaceLastSeenTs as Jt, buildProfileWorkspaceRows as K, isAgentActivityRouteRegistered as Kn, toLocalSpaceStateIntegrityError as Kt, runDaemonSnapshot as L, readCodexSessionTitles as Ln, organizationJoinLinkErrorResponseSchema as Lr, LocalSpaceStateIntegrityError as Lt, runDaemonInstall as M, connectWebSocket as Mn, cliJsonSkillsListEnvelopeSchema as Mr, collectLocalAgentControllerInventory as Mt, runDaemonInterrupt as N, syncLocalAgentActivity as Nn, cliJsonSkillsLoadEnvelopeSchema as Nr, resolveLocalAgentControllerBlockerReasonCodes as Nt, runDaemon as O, updateAuthoredMentionRanges as On, resetCurrentCommandCheckState as Or, readRuntimeReportingHealthState as Ot, runDaemonReinstall as P, buildAgentActivityEvent as Pn, cliJsonSkillsShowEnvelopeSchema as Pr, resolveLocalAgentControllerLaunchability as Pt, runDaemonStartDecisionPrompt as Q, installAgentActivityIntegrations as Qn, SpaceComposerSubmissionError as Qt, runDaemonStatusFlow as R, readAgentActivityContextForPath as Rn, organizationJoinLinkManagementQuerySchema as Rr, inspectSpaceCacheFile as Rt, buildSpaceWebUrl as S, openTargetPickerState as Sn, promptTextEntry as Sr, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as St, runDaemonServiceParticipationGate as T, resolveNextRecentMentionProfileIdsForQueuedText as Tn, finishCurrentCommandCheckScope as Tr, writeDispatchSpaceActionRecord as Tt, formatServiceRuntimeHeadline as U, removeProjectOutbox as Un, readSpaceLastSeenTs as Ut, runDaemonUninstall as V, removeProjectInbox as Vn, readSpaceCacheDeletionNoticeState as Vt, resolveServiceParticipationReadiness as W, enqueueControllerTaskLifecycleEventWhileLocked as Wn, readSpaceRecentMentionProfileIds as Wt, createDelayedSpinner as X, AGENT_ACTIVITY_INTEGRATION_OWNER as Xn, writeSpaceCacheDeletionNoticeState as Xt, emitDaemonAgentOverview as Y, unregisterAgentActivityRoute as Yn, upsertSpaceConfig as Yt, shouldEmitAgentOverview as Z, defaultManagedIntegrationPaths as Zn, writeSpaceRecentMentionProfileIds as Zt, promptSearchSelect as _, formatRemovedCcRelationMessage as _n, fetchAuthUserSnapshot as _r, toStructuredGatewayFailure as _t, runAgentsCustomRemove as a, buildSpaceMemberAgentPresencePresentation as an, runAuthLogin as ar, resolveLocalComponentsStatus as at, resolveOffsetVisibleWindow as b, listSpaceMentionRelationChoices as bn, resolveDeviceTokenExpiresAt as br, readDispatchOwnedRuntimeGuard as bt, runAgentsDisable as c, buildSpaceProfileAddPlan as cn, runAuthStatus as cr, fetchSpaceUpdates as ct, runAgentsManage as d, closeMentionPickerState as dn, buildAuthStatusSnapshot as dr, updateSpaceMeta as dt, buildDispatchResultReplyWorkflowProjection as en, resolveAgentActivityDispatcherCommand as er, renderHumanErrorCard as et, runAgentsRepair as f, collectResolvedSpaceMentions as fn, formatActiveOrganizationLabel as fr, parseSpaceMetaPayload as ft, promptSearchMultiselectWorkbench as g, extractMentionAuthoringPrefix as gn, extractAuthApiErrorMessage as gr, readGatewayTextResponse as gt, promptSearchMultiselect as h, enterRelationPickerState as hn, buildUnifiedCardFrame as hr, readGatewayJsonResponse as ht, runAgentsCustomList as i, buildSignalReplyWorkflowProjection as in, evaluateCommandAuthentication as ir, readDaemonIncidentLogTail as it, runDaemonCancel as j, readRecentDaemonDispatchJournalEvents as jn, cliJsonOutputEnvelopeSchema as jr, submitRuntimeAgentControllerReports as jt, runDaemonAutostart as k, DISPATCH_OWNED_RUNTIME_MODE as kn, startCurrentCommandCheckScope as kr, submitProfileRuntimeAgentControllerReport as kt, runAgentsEnable as l, buildSpaceRoundReadProjection as ln, exchangeOneTimeTokenAuthSession as lr, createCliSpaceApi as lt, formatTransportModeDisplay as m, createSpaceTargetCatalog as mn, renderTextInfoCard as mr, GatewayHttpError as mt, runAgentsConfig as n, buildSignalIndex as nn, buildCommandAuthenticationPromptMessage as nr, emitCliJsonEnvelope as nt, runAgentsCustomUpdate as o, buildSpaceMentionProfileIndex as on, runAuthLogout as or, writeInstalledLocalComponentsSnapshot as ot, runAgentsShow as p, createSpaceMemberIdentityIndex as pn, renderInfoCard as pr, parseSpaceMetaResponse as pt, reconcileCliVersionView as q, registerAgentActivityRoute as qn, toSpaceConfigListIntegrityError as qt, runAgentsCustomAdd as r, buildSignalMessageReadProjection as rn, ensureCommandAuthenticationOrCancel as rr, runDaemonStartupPreflight as rt, runAgentsDetect as s, buildSpaceMessageReadRelationSummary as sn, runAuthMenu as sr, resolveDaemonServiceParticipationStatus as st, runAgents as t, buildPublicSpaceEntryUrl as tn, uninstallAgentActivityIntegrations as tr, renderHumanTextErrorCard as tt, runAgentsList as u, buildUpdatesReplyWorkflowProjection as un, buildAuthStatusRows as ur, fetchSpaceMeta as ut, clampNumber as v, isRelationPickerState as vn, requestDeviceToken as vr, parseJsonResponse as vt, resolveSpaceWebGatewayOrigin as w, prepareSpaceFileOnlySubmission as wn, runInteractivePrompt as wr, readDispatchSpaceActionContextFromEnv as wt, computeRetryDelayMs as x, listSpaceMentionSuggestions as xn, revokeAuthAccessToken as xr, DispatchSpaceActionClosedError as xt, resolveAnchoredVisibleWindow as y, isTargetPickerState as yn, resolveDeviceAuthClientId as yr, assertDispatchOwnedRuntimePublicWriteAllowed as yt, runDaemonStop as z, removeAgentActivityContextCache as zn, revokeOrganizationJoinLinkResponseSchema as zr, isLocalSpaceStateCorruptResult as zt };
 
-//# sourceMappingURL=agents-BOTlKiwS.js.map
+//# sourceMappingURL=agents-pHCyQoFw.js.map