openmeld 0.3.206 → 0.3.208

package/dist/{openmeld-ChOHuaqH.js → openmeld-DQNVH1jx.js}

@@ -1,21 +1,29 @@
 #!/usr/bin/env node
 
 import { c as toSpaceDispatchLookupUrl, h as toSpaceResultUrl, i as toSpaceContractUrl, l as toSpaceDispatchTraceUrl, r as toSpaceBoardUrl, t as normalizeBaseUrl } from "./urls-CY2uzH2-.js";
-import { $ as openMeldManagedVersionBinaryPath, A as formatLocalMachineIssueMessage, C as LocalMachineFailureError, E as createOrphanedSetupConcurrencyIssue, I as accountsDir, J as normalizeAccountKey, N as accountProfileSpaceCacheDir, O as isLocalMachineFailureError, P as accountProfileViewPath, Q as openMeldManagedBinaryPath, T as createActiveSetupConcurrencyIssue, X as openMeldBackupsDir, _t as systemDir, at as profileViewPath, b as resolveOpenMeldLaneDescriptor, c as repairOrphanedLegacyLocks, ct as resolveOpenMeldCliEntryNameFromArgv, f as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, g as resolveCliContext, gt as spacesDir, ht as skillsDir, i as isOpenMeldOrphanedLockError, it as profileDir, k as toRecognizedLocalMachineFailureError, l as resolveOpenMeldOrphanedLockIssue, lt as resolveOpenMeldEnvPreset, n as buildOpenMeldOrphanedLockAction, p as OPENMELD_CLI_CONTEXT_ENV_KEY, r as isOpenMeldLockError, rt as organizationSkillReleaseDir, s as releaseLockSync, t as acquireLock, tt as openMeldRootDir, u as runWithHeldLock, ut as resolveOpenMeldRootDir, y as formatLaneScopeSentence } from "./lock-CvBnBcFK.js";
+import { A as isLocalMachineFailureError, D as createActiveSetupConcurrencyIssue, F as accountProfileSpaceCacheDir, I as accountProfileViewPath, M as formatLocalMachineIssueMessage, O as createOrphanedSetupConcurrencyIssue, Q as openMeldBackupsDir, R as accountsDir, T as LocalMachineFailureError, X as normalizeAccountKey, _ as resolveCliContext, _t as skillsDir, a as isOpenMeldOrphanedLockError, at as organizationSkillReleaseDir, b as formatLaneScopeSentence, c as releaseLockSync, d as runWithHeldLock, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, j as toRecognizedLocalMachineFailureError, l as repairOrphanedLegacyLocks, m as OPENMELD_CLI_CONTEXT_ENV_KEY, ot as profileDir, p as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, r as buildOpenMeldOrphanedLockAction, rt as openMeldRootDir, st as profileViewPath, t as acquireLock, tt as openMeldManagedVersionBinaryPath, u as resolveOpenMeldOrphanedLockIssue, ut as resolveOpenMeldCliEntryNameFromArgv, vt as spacesDir, w as readProcessStartIdentity, x as resolveOpenMeldLaneDescriptor, yt as systemDir } from "./lock-Dxp6o_t_.js";
+import { $n as spaceDispatchTraceDispatchStatusSchema, $t as createPrepareReadinessApi, Di as signalTextEnvelopeSchema, Ft as createCenterAgentApi, Gn as spaceEntryTargetSchema, Gr as agentActivitySnapshotQuerySchema, Jn as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Jt as createOrganizationApi, Kn as pluginActionRequestSchema, Lt as createComputerFileAccessApi, Mt as createAgentProfileBindingApi, Nt as createAgentProfileExecutionModeApi, Or as stringifyOrganizationSkillBundleCanonicalJson, Qn as spaceDispatchTraceAttemptStatusSchema, Qt as createPluginsApi, Rn as OPENMELD_HEADER_PROFILE_ID, Tr as organizationSkillBundleSchema, Ur as agentActivityProviderSchema, Vn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Vt as createFeedbackApi, Wr as agentActivitySessionStatusSchema, Xn as resolveRuntimeCoordinatorHeadStatusRootCause, Xr as resolvedSpaceMemberProfileSchema, Xt as createOrganizationSkillsApi, Yn as projectSpaceDispatchTraceFinalVisibleOutcome, Zn as resolveSpaceDispatchTraceRootCause, ar as projectOwnerComputerLocalRuntimes, er as spaceDispatchTraceResponseSchema, gr as createAgentProfileCreationRequestBodySchema, hr as agentProfileCreationConfigurationSchema, ii as agentActivitySessionInventoryQuerySchema, in as createRoutinesApi, ir as ownerComputerDiagnosticsSchema, jr as submitFeedbackIssueRequestSchema, jt as createAgentActivityApi, mr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, ni as agentActivityInventorySessionOriginSchema, nn as createProjectsApi, nr as projectObservabilityWakeCorrelation, oi as localAgentSessionProviderSchema, or as summarizeComputerFileAccessPolicy, ri as agentActivityInventorySessionStatusSchema, tr as observabilityWakeTraceSelectorSchema, wn as toStructuredApiClientFailure, zt as createCurrentDeviceApi } from "./dist-B8I8inkY.js";
 import { c as agentControllerConversationRefSchema } from "./controller-contract-pe3_Re-c.js";
-import { $ as formatDeviceReplyReadinessLabel, $i as getSetupFlowCopy, $o as createOpenMeldHumanProfile, $r as resolveAgentControllerPermissionModeForController, At as createModelCatalogReadSession, Bt as setOpenMeldManagedProfileWorkspace, Ds as compareAgentControllerRefsForDisplay, Ei as inspectDaemonServiceInventory, Es as resolveUserFacingCliEntryCommand, Fn as notifyDaemonRouteCatalogChanged, Ft as readProfileWorkspaceConfig, Gr as getAgentControllerPermissionModeFieldLabel, Gt as bindProject, H as resolveDaemonServiceFreshnessWarning, Hr as createAgentExecutionStatusDisplayRows, Ht as describeProfileWorkspacePathValidationFailure, Ii as readCurrentDaemonRuntimeContext, Jr as parseAgentControllerRef, Jt as listProjectConnectionsWithStatus, Ko as compareSemver, Lt as resolveConfiguredProfileWorkspacePath, Mt as resolveProfileWorkspaceRuntime, Nt as ensureOpenMeldManagedProfileWorkspace, P as resolveServiceReadinessFromServiceStatus, Pt as normalizeCustomProfileWorkspacePath, Q as formatAgentReplyReadinessLabel, Qi as buildOnboardingPlan, Qo as createOpenMeldAgentProfile, Qt as removeProjectConnection, Si as resolveDispatchSpaceActionMcpServer, Ss as formatOpenMeldCliTextBlock, Ts as resolveSetupFollowUpCliEntryCommand, Uo as readDaemonServiceContract, Vt as validateCustomProfileWorkspacePath, Wr as getAgentControllerPermissionModeDisplayMetadata, Xr as projectPeopleComputersToLegacyLocalRuntimes, Yi as resolveCurrentDaemonExpectedVersion, Yr as peopleComputerContainsDevice, Yt as migrateProjectBindingStore, Z as resolveCurrentReplyReadinessSnapshot, Zi as buildDaemonRouteObservationPresentation$1, _o as OPENMELD_VERSION, ao as clearSelectedOpenMeldProfileId, as as updateOpenMeldProfile, ba as classifyDaemonServiceRunStartability, bs as formatOpenMeldCliCommands, cn as syncDeviceRuntimeStateProjection, co as resolveOpenMeldEnvironmentTarget, cs as buildAgentAuthenticationGuide, d as isCliUpdateCheckApplicable, do as requestLocalAgentActivitySync, ds as buildHumanAuthenticationCard, ea as parseCliViewMode, ei as resolveAgentExecutionStatus, en as runIfAgentActivityBindingGenerationIsCurrent, eo as isSelectedOpenMeldProfileRequiredError, es as deleteOpenMeldProfile, et as formatHumanReplyReadinessReason$1, fn as createPrimaryBindingReadSession, fs as createAuthenticationError, ft as resolveOpenClawLocalDiagnosticsValue, gs as resolveAuthenticationGuidanceFromMessage, h as runPendingDaemonServiceUpdate, ho as performManagedInstall, hs as resolveAuthenticationGuidanceFromError, ia as setProfileDefaultView, is as resolveOpenMeldProfile, jn as listBuiltinAgentsRegistryEntries, kt as syncProfileWorkspaceState, l as readCurrentLocalDeviceId, lo as resolveAuthBaseUrl, lt as resolveGatewayChainReadiness, mo as buildInstallSelfJsonPayload, ms as resolveAuthenticationGuidance, na as resolveViewProfileKey, ni as resolveEvidenceSyncHealth, nn as unbindProject, no as resolveOpenMeldProfileOrNull, ns as listOpenMeldProfiles, nt as mapAgentReplyReadinessToLegacyAutoReply, o as assessServerRequiredVersion, oo as getSelectedOpenMeldProfileId, pn as resolveAgentProfilePrimaryAgentControllerReport, qn as resolveLocalRegistryAgentIdFromAgentControllerRef, qo as ensureVersionStateReady, qr as listAgentControllerPermissionModeOptions, qt as listProjectBindings, ra as getProfileDefaultView, ri as resolveNativeAgentControllerPermissionModeForController, rn as canonicalizeLocalProjectPath, ro as alignSelectedOpenMeldProfileStorage, rs as primeOpenMeldProfilesSessionCache, so as setSelectedOpenMeldProfileId, ta as resolveRuntimeContext, ti as resolveAgentProfileEditCapabilities, tn as setDefaultProjectConnection, to as requireOpenMeldProfile, u as assessCliUpdate, uo as LocalDaemonControlPlaneClientError, vn as listAgentTargetStates, vs as formatInlineOpenMeldCliCommands, ws as formatProfileAwareOpenMeldCliCommands, xa as classifyDaemonServiceWakeability, xs as formatOpenMeldCliLine, ys as formatOpenMeldCliCommand, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-BBZhGo1A.js";
-import { $n as projectOwnerComputerLocalRuntimes, Ar as agentActivityProviderSchema, Bn as spaceEntryTargetSchema, Ft as createComputerFileAccessApi, Gn as resolveSpaceDispatchTraceRootCause, Gr as agentActivitySessionInventoryQuerySchema, In as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Jn as spaceDispatchTraceResponseSchema, Jt as createOrganizationSkillsApi, Kn as spaceDispatchTraceAttemptStatusSchema, Kt as createOrganizationApi, Lr as resolvedSpaceMemberProfileSchema, Lt as createCurrentDeviceApi, Mr as agentActivitySnapshotQuerySchema, Mt as createAgentProfileBindingApi, Nn as OPENMELD_HEADER_PROFILE_ID, Pt as createCenterAgentApi, Qn as ownerComputerDiagnosticsSchema, Un as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Ur as agentActivityInventorySessionOriginSchema, Vn as pluginActionRequestSchema, Wn as projectSpaceDispatchTraceFinalVisibleOutcome, Wr as agentActivityInventorySessionStatusSchema, Xn as projectObservabilityWakeCorrelation, Xt as createPluginsApi, Yn as observabilityWakeTraceSelectorSchema, Zt as createPrepareReadinessApi, en as createProjectsApi, er as summarizeComputerFileAccessPolicy, fr as organizationSkillBundleSchema, hr as stringifyOrganizationSkillBundleCanonicalJson, jr as agentActivitySessionStatusSchema, jt as createAgentActivityApi, nn as createRoutinesApi, nr as agentProfileCreationConfigurationSchema, qn as spaceDispatchTraceDispatchStatusSchema, qr as localAgentSessionProviderSchema, rr as createAgentProfileCreationRequestBodySchema, tr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, vr as submitFeedbackIssueRequestSchema, yn as toStructuredApiClientFailure, zt as createFeedbackApi } from "./dist-CxadJClH.js";
-import { Ai as spaceThreadContextSchema, At as dispatchExecutionSchema, Br as spaceFileRevisionNumberSchema, Ki as trimmedStringFromUnknown, Li as openMeldRuntimeProfileIdSchema, Lr as spaceFileEntryIdSchema, Mt as spaceContractSchema, Oi as openMeldProfileIdSchema, Or as readSpaceFileTextResponseSchema, Wi as nonEmptyTrimmedStringFromUnknown, cr as messageEnvelopeSchema, d as START_BOUNDED_ID_SCHEMA, fr as centerAgentInteractionSourceSchema, gi as clientMessageIdSchema, jt as spaceContractFieldsSchema, ki as openMeldRequestContextSchema, kr as resolveSpaceFileMimeType, m as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, pr as spaceStatusSchema, wr as isSpaceFileTextEditable } from "./profiles-BCecj4Pj.js";
-import { _ as readSelectedSkillDocument, f as ensureLocalSkills, n as collectSkillsReadinessSnapshot } from "./installation-inventory-P49sTjhe.js";
-import { $ as renderHumanTextErrorCard, $n as ensureCommandAuthenticationOrCancel, $t as buildSignalMessageReadProjection, A as runDaemonBackgroundStartForDecision, An as buildAgentActivityEvent, Ar as cliJsonSkillsShowEnvelopeSchema, B as runDaemonUninstall, Bn as enqueueControllerTaskLifecycleEventWhileLocked, C as resolveGatewayWebOrigin, Cr as isCurrentCommandCheckScopeActive, Ct as validateLocalProjectConnectionPath, D as isManagedSystemServiceBootstrapRun, Dn as readRecentDaemonDispatchJournalEvents, Dr as cliJsonOutputEnvelopeSchema, E as bestEffortStopCurrentLaneDaemonService, Er as cliJsonErrorEnvelopeSchema, Et as submitRuntimeAgentControllerReport, F as runDaemonRunAfterEntryChecks, Fn as removeAgentActivityContextCache, Fr as revokeOrganizationJoinLinkResponseSchema, G as buildProfileWorkspaceRows, Gn as unregisterAgentActivityRoute, Gt as upsertSpaceConfig, Hn as isAgentActivityRouteRegistered, I as runDaemonSnapshot, In as enqueueAgentActivityHookEvent, Jn as installAgentActivityIntegrations, K as reconcileCliVersionView, L as runDaemonStatusFlow, Ln as removeProjectInbox, M as runDaemonInstall, Mn as normalizeSharedSessionTitle, Mr as getOrganizationJoinLinkResponseSchema, N as runDaemonInterrupt, Nn as readCodexSessionTitles, Nr as organizationJoinLinkErrorResponseSchema, O as runDaemon, Or as cliJsonSkillsListEnvelopeSchema, P as runDaemonReinstall, Pn as readAgentActivityContextForPath, Pr as organizationJoinLinkManagementQuerySchema, Pt as inspectSpaceCacheFile, Q as renderHumanErrorCard, Qn as buildCommandAuthenticationPromptMessage, Qt as buildSignalIndex, R as runDaemonStop, Rn as readAgentActivityOutboxHealth, Sr as getCurrentCommandCheckState, St as LocalProjectConnectionError, T as runDaemonServiceParticipationGate, Tr as startCurrentCommandCheckScope, Tt as submitProfileRuntimeAgentControllerReport, U as resolveServiceParticipationReadiness, Un as registerAgentActivityRoute, V as formatServiceParticipationReadinessLabel, Vn as readControllerTaskLifecycleOutboxHealth, W as buildProfileWorkspacePresentation, Wn as resolveAgentActivityRouteForPath, X as runDaemonStartDecisionPrompt, Xn as resolveAgentActivityDispatcherCommand, Xt as buildDispatchResultReplyWorkflowProjection, Y as shouldEmitAgentOverview, Yn as readAgentActivityIntegrationStatus, Yt as buildDispatchResultMessageReadProjection, Z as buildHumanErrorCopy, Zn as uninstallAgentActivityIntegrations, Zt as buildPublicSpaceEntryUrl, _ as promptSearchSelect, _t as assertDispatchOwnedRuntimePublicWriteAllowed, a as runAgentsCustomRemove, an as buildSpaceRoundReadProjection, ar as exchangeOneTimeTokenAuthSession, at as resolveDaemonServiceParticipationStatus, br as runInteractivePrompt, bt as readDispatchSpaceActionContextFromEnv, c as runAgentsDisable, cr as formatActiveOrganizationLabel, ct as fetchSpaceMeta, d as runAgentsManage, er as evaluateCommandAuthentication, et as emitCliJsonEnvelope, f as runAgentsRepair, gt as parseJsonResponse, h as promptSearchMultiselect, ht as toStructuredGatewayFailure, i as runAgentsCustomList, ir as runAuthStatus, it as writeInstalledLocalComponentsSnapshot, j as runDaemonCancel, jn as resolveObservedAgentActivityBinding, jr as acceptOrganizationJoinLinkBodySchema, k as runDaemonAutostart, kn as syncLocalAgentActivity, kr as cliJsonSkillsLoadEnvelopeSchema, l as runAgentsEnable, ln as createSpaceMemberIdentityIndex, lr as renderInfoCard, lt as updateSpaceMeta, m as formatTransportModeDisplay, mt as readGatewayTextResponse, n as runAgentsConfig, nr as runAuthLogout, o as runAgentsCustomUpdate, on as buildUpdatesReplyWorkflowProjection, or as buildAuthStatusRows, ot as fetchSpaceUpdates, p as runAgentsShow, pn as formatRemovedCcRelationMessage, pt as readGatewayJsonResponse, q as emitDaemonAgentOverview, qn as defaultManagedIntegrationPaths, r as runAgentsCustomAdd, rr as runAuthMenu, rt as resolveLocalComponentsStatus, s as runAgentsDetect, sr as buildAuthStatusSnapshot, st as createCliSpaceApi, t as runAgents, tr as runAuthLogin, tt as runDaemonStartupPreflight, u as runAgentsList, ur as renderTextInfoCard, vr as promptTextEntry, vt as readDispatchOwnedRuntimeGuard, w as resolveSpaceWebGatewayOrigin, wr as resetCurrentCommandCheckState, wt as readRuntimeReportingHealthState, xr as finishCurrentCommandCheckScope, xt as writeDispatchSpaceActionRecord, yr as isReturnKeypress, z as runDaemonTeardownStrict, zn as removeProjectOutbox } from "./agents-BOTlKiwS.js";
-import { C as resolveOpenMeldDistribution, S as isBinaryDistribution, a as beginAuthSessionTransition, b as updateAuthSessionActiveOrganization, c as getAuthSessionMetadata, l as getAuthSessionState, m as normalizeStoredActiveOrganization, n as AuthSessionRecoveryInProgressError, o as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getCurrentAuthOwnerUserId, x as runMacOsNativeKeychainHelperIfRequested } from "./auth-session-BjSqMLTz.js";
-import { $ as resolveCreateProfileName, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as resolveCreateProfileKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as createProfileByKind, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as ensureAgentProfileRuntimeBinding, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as assessActionParticipationCandidate, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-CkbzbvXy.js";
-import { A as createSpaceMenuGuideError, Bt as formatDualViewGuideForDisplay, C as createSpaceAddMembersGuideError, F as createSpaceRemoveMembersGuideError, G as createStartAgentIdentityGuideError, H as createSpaceTargetGuideError, Ht as formatAgentOverviewPayload, I as createSpaceResultGuideError, It as registerBuiltinAgentSelectionOptions, J as OPENMELD_AGENT_MENTAL_MODEL_LINES, Jt as sanitizeTerminalDisplayText, K as createStartAuthenticationGuideError, M as createSpacePublicationSetGuideError, Ot as getCliVersionInfo, Q as areAllowedActionsEquivalent, Qt as outLine, T as createSpaceContractSetGuideError, Tt as registerSkillsTargetSelectionOptions, V as createSpaceSubcommandTargetGuideError, Vt as buildDualViewGuideMessage, W as createSpaceUpdatesGuideError, X as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, Xt as errLine, Yt as formatMessage, Zt as outJsonLine, _ as createProfileActionGuideError, _t as registerSpaceMemberSelectionOptions, b as createResetConfirmationGuideError, bt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, et as buildAgentFacingPublicationModeGuideLines, g as createDoctorFailedGuideError, jt as registerAuthLoginRequestOptions, k as createSpaceLeaveGuideError, kt as registerDaemonControlTargetOptions, m as canUseInteractivePrompts, mt as getCommandHintsFromContract, ot as canonicalizeAllowedActions, qt as createPresenter, v as createProfileCreateGuideError, w as createSpaceAliasTargetGuideError, y as createProfileMenuGuideError, zt as DualViewGuideError } from "./elapsed-time-C7P-nWIO.js";
-import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-9A557X2K.js";
-import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-DpgDs0rw.js";
-import { k as getDaemonStatus } from "./daemon-state-BwIoDq7_.js";
-import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-CLmDoHom.js";
-import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-l_5Tge_z.js";
+import { $ as formatDeviceReplyReadinessLabel, $a as deleteOpenMeldProfile, $i as buildDaemonSystemServiceCommandSpec, At as createModelCatalogReadSession, Bt as setOpenMeldManagedProfileWorkspace, Ci as resolveDispatchSpaceActionMcpServer, Fn as notifyDaemonRouteCatalogChanged, Ft as readProfileWorkspaceConfig, Ga as resolveOpenMeldProfileOrNull, Gi as getSetupFlowCopy, Gr as getAgentControllerPermissionModeDisplayMetadata, Gt as bindProject, H as resolveDaemonServiceFreshnessWarning, Ht as describeProfileWorkspacePathValidationFailure, Ja as clearSelectedOpenMeldProfileId, Ji as resolveViewProfileKey, Jr as listAgentControllerPermissionModeOptions, Jt as listProjectConnectionsWithStatus, Ka as alignSelectedOpenMeldProfileStorage, Ki as parseCliViewMode, Kr as getAgentControllerPermissionModeFieldLabel, Lt as resolveConfiguredProfileWorkspacePath, Mt as resolveProfileWorkspaceRuntime, Nt as ensureOpenMeldManagedProfileWorkspace, Oi as inspectDaemonServiceInventory, P as resolveServiceReadinessFromServiceStatus, Pt as normalizeCustomProfileWorkspacePath, Q as formatAgentReplyReadinessLabel, Qa as createOpenMeldHumanProfile, Qt as removeProjectConnection, Ua as isSelectedOpenMeldProfileRequiredError, Ui as buildDaemonRouteObservationPresentation$1, Ur as createAgentExecutionStatusDisplayRows, Vi as resolveCurrentDaemonExpectedVersion, Vt as validateCustomProfileWorkspacePath, Wa as requireOpenMeldProfile, Wi as buildOnboardingPlan, Xa as setSelectedOpenMeldProfileId, Xi as setProfileDefaultView, Xr as peopleComputerContainsDevice, Ya as getSelectedOpenMeldProfileId, Yi as getProfileDefaultView, Yr as parseAgentControllerRef, Yt as migrateProjectBindingStore, Z as resolveCurrentReplyReadinessSnapshot, Za as createOpenMeldAgentProfile, Zr as projectPeopleComputersToLegacyLocalRuntimes, _o as compareAgentControllerRefsForDisplay, cn as syncDeviceRuntimeStateProjection, d as isCliUpdateCheckApplicable, do as createAuthenticationError, ei as resolveAgentControllerPermissionModeForController, en as runIfAgentActivityBindingGenerationIsCurrent, et as formatHumanReplyReadinessReason$1, fn as createPrimaryBindingReadSession, ft as resolveOpenClawLocalDiagnosticsValue, h as runPendingDaemonServiceUpdate, ho as resolveAuthenticationGuidanceFromMessage, ii as resolveNativeAgentControllerPermissionModeForController, io as updateOpenMeldProfile, jn as listBuiltinAgentsRegistryEntries, kt as syncProfileWorkspaceState, l as readCurrentLocalDeviceId, la as classifyDaemonServiceRunStartability, lt as resolveGatewayChainReadiness, mo as resolveAuthenticationGuidanceFromError, ni as resolveAgentProfileEditCapabilities, nn as unbindProject, no as primeOpenMeldProfilesSessionCache, nt as mapAgentReplyReadinessToLegacyAutoReply, o as assessServerRequiredVersion, pn as resolveAgentProfilePrimaryAgentControllerReport, po as resolveAuthenticationGuidance, qi as resolveRuntimeContext, qn as resolveLocalRegistryAgentIdFromAgentControllerRef, qt as listProjectBindings, ri as resolveEvidenceSyncHealth, rn as canonicalizeLocalProjectPath, ro as resolveOpenMeldProfile, so as buildAgentAuthenticationGuide, ti as resolveAgentExecutionStatus, tn as setDefaultProjectConnection, to as listOpenMeldProfiles, u as assessCliUpdate, ua as classifyDaemonServiceWakeability, uo as buildHumanAuthenticationCard, vn as listAgentTargetStates, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-D6uuBitR.js";
+import { Dn as centerAgentInteractionSourceSchema, On as spaceStatusSchema, Pr as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, Qn as spaceFileEntryIdSchema, Un as readSpaceFileTextResponseSchema, Wn as resolveSpaceFileMimeType, Xr as openMeldRequestContextSchema, Yr as openMeldProfileIdSchema, at as spaceContractFieldsSchema, bn as messageEnvelopeSchema, jr as START_BOUNDED_ID_SCHEMA, ot as spaceContractSchema, sr as clientMessageIdSchema, tr as spaceFileRevisionNumberSchema, yr as spaceThreadContextSchema, zn as isSpaceFileTextEditable } from "./runtime-transport-DryoU4rm.js";
+import { Dt as trimmedStringFromUnknown, Tt as nonEmptyTrimmedStringFromUnknown, b as dispatchExecutionSchema, gt as openMeldRuntimeProfileIdSchema } from "./control-plane-D9jDcbMZ.js";
+import { A as withAuthSessionTransitionMutationLock, C as withAdmittedServiceSession, D as cancelServiceAccountAdmission, O as readServiceAccountAdmission, S as updateAuthSessionActiveOrganization, T as ServiceAccountAdmissionError, a as beginAuthSessionTransition, d as getCurrentAuthOwnerUserId, h as normalizeStoredActiveOrganization, k as reserveServiceAccountAdmission, l as getAuthSessionMetadata, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, s as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getAuthSessionState, v as readServiceAdmissionSessionWithOwnership, w as runMacOsNativeKeychainHelperIfRequested } from "./auth-session-ijcuaSsZ.js";
+import { t as computerConnectionIntentSchema } from "./computer-connection-DK6L1_LF.js";
+import { _ as readSelectedSkillDocument, f as ensureLocalSkills, n as collectSkillsReadinessSnapshot } from "./installation-inventory-_fMZas6v.js";
+import { $ as buildHumanErrorCopy, $n as readAgentActivityIntegrationStatus, $t as buildDispatchResultMessageReadProjection, A as runDaemonBackgroundStartForDecision, Ar as cliJsonErrorEnvelopeSchema, At as submitRuntimeAgentControllerReport, B as runDaemonTeardownStrict, Bn as enqueueAgentActivityHookEvent, C as resolveGatewayWebOrigin, Cr as isReturnKeypress, Ct as readDispatchSpaceActionContextForReceiptFromEnv, D as isManagedSystemServiceBootstrapRun, Dr as isCurrentCommandCheckScopeActive, Dt as validateLocalProjectConnectionPath, E as bestEffortStopCurrentLaneDaemonService, Er as getCurrentCommandCheckState, Et as LocalProjectConnectionError, F as runDaemonRunAfterEntryChecks, Fn as resolveObservedAgentActivityBinding, Fr as acceptOrganizationJoinLinkBodySchema, G as buildProfileWorkspacePresentation, Gn as readControllerTaskLifecycleOutboxHealth, H as formatServiceParticipationReadinessLabel, Hn as readAgentActivityOutboxHealth, I as runDaemonServiceDetached, In as normalizeSharedSessionTitle, Ir as getOrganizationJoinLinkResponseSchema, J as createQuietPresenter, Jn as resolveAgentActivityRouteForPath, K as buildProfileWorkspaceRows, Kn as isAgentActivityRouteRegistered, L as runDaemonSnapshot, Ln as readCodexSessionTitles, Lr as organizationJoinLinkErrorResponseSchema, M as runDaemonInstall, Mr as cliJsonSkillsListEnvelopeSchema, N as runDaemonInterrupt, Nn as syncLocalAgentActivity, Nr as cliJsonSkillsLoadEnvelopeSchema, O as runDaemon, Or as resetCurrentCommandCheckState, Ot as readRuntimeReportingHealthState, P as runDaemonReinstall, Pn as buildAgentActivityEvent, Pr as cliJsonSkillsShowEnvelopeSchema, Q as runDaemonStartDecisionPrompt, Qn as installAgentActivityIntegrations, R as runDaemonStatusFlow, Rn as readAgentActivityContextForPath, Rr as organizationJoinLinkManagementQuerySchema, Rt as inspectSpaceCacheFile, Sr as promptTextEntry, T as runDaemonServiceParticipationGate, Tr as finishCurrentCommandCheckScope, Tt as writeDispatchSpaceActionRecord, Un as removeProjectOutbox, V as runDaemonUninstall, Vn as removeProjectInbox, W as resolveServiceParticipationReadiness, Wn as enqueueControllerTaskLifecycleEventWhileLocked, Y as emitDaemonAgentOverview, Yn as unregisterAgentActivityRoute, Yt as upsertSpaceConfig, Z as shouldEmitAgentOverview, Zn as defaultManagedIntegrationPaths, _ as promptSearchSelect, _n as formatRemovedCcRelationMessage, _r as fetchAuthUserSnapshot, _t as toStructuredGatewayFailure, a as runAgentsCustomRemove, ar as runAuthLogin, at as resolveLocalComponentsStatus, bt as readDispatchOwnedRuntimeGuard, c as runAgentsDisable, cr as runAuthStatus, ct as fetchSpaceUpdates, d as runAgentsManage, dr as buildAuthStatusSnapshot, dt as updateSpaceMeta, en as buildDispatchResultReplyWorkflowProjection, er as resolveAgentActivityDispatcherCommand, et as renderHumanErrorCard, f as runAgentsRepair, fr as formatActiveOrganizationLabel, gt as readGatewayTextResponse, h as promptSearchMultiselect, ht as readGatewayJsonResponse, i as runAgentsCustomList, ir as evaluateCommandAuthentication, j as runDaemonCancel, jn as readRecentDaemonDispatchJournalEvents, jr as cliJsonOutputEnvelopeSchema, k as runDaemonAutostart, kr as startCurrentCommandCheckScope, kt as submitProfileRuntimeAgentControllerReport, l as runAgentsEnable, ln as buildSpaceRoundReadProjection, lr as exchangeOneTimeTokenAuthSession, lt as createCliSpaceApi, m as formatTransportModeDisplay, mr as renderTextInfoCard, n as runAgentsConfig, nn as buildSignalIndex, nr as buildCommandAuthenticationPromptMessage, nt as emitCliJsonEnvelope, o as runAgentsCustomUpdate, or as runAuthLogout, ot as writeInstalledLocalComponentsSnapshot, p as runAgentsShow, pn as createSpaceMemberIdentityIndex, pr as renderInfoCard, q as reconcileCliVersionView, qn as registerAgentActivityRoute, r as runAgentsCustomAdd, rn as buildSignalMessageReadProjection, rr as ensureCommandAuthenticationOrCancel, rt as runDaemonStartupPreflight, s as runAgentsDetect, sr as runAuthMenu, st as resolveDaemonServiceParticipationStatus, t as runAgents, tn as buildPublicSpaceEntryUrl, tr as uninstallAgentActivityIntegrations, tt as renderHumanTextErrorCard, u as runAgentsList, un as buildUpdatesReplyWorkflowProjection, ur as buildAuthStatusRows, ut as fetchSpaceMeta, vt as parseJsonResponse, w as resolveSpaceWebGatewayOrigin, wr as runInteractivePrompt, wt as readDispatchSpaceActionContextFromEnv, xt as DispatchSpaceActionClosedError, yt as assertDispatchOwnedRuntimePublicWriteAllowed, z as runDaemonStop, zn as removeAgentActivityContextCache, zr as revokeOrganizationJoinLinkResponseSchema } from "./agents-pHCyQoFw.js";
+import { a as serviceAccountControlRequestSchema, n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-DY2fBeSW.js";
+import { r as readDaemonRuntimeLease } from "./daemon-runtime-lease-Dd4hdHNo.js";
+import { Bt as readDaemonServiceContract, Mt as requestLocalAgentActivitySync, Pt as requestLocalDaemonShutdown, Vt as upsertDaemonServiceContract, X as buildInstallSelfJsonPayload, Z as performManagedInstall, jt as LocalDaemonControlPlaneClientError, lt as compareSemver, nt as OPENMELD_VERSION, r as readCurrentDaemonRuntimeContext, ut as ensureVersionStateReady } from "./daemon-service-runtime-D0LhAIGx.js";
+import { $ as resolveCreateProfileKind, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as createProfileByKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as resolveSpaceTaskSelection, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as resolveCreateProfileName, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, nt as assessActionParticipationCandidate, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as ensureAgentProfileRuntimeBinding, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-CewWTp57.js";
+import { A as createSpaceMenuGuideError, Bt as formatDualViewGuideForDisplay, C as createSpaceAddMembersGuideError, F as createSpaceRemoveMembersGuideError, G as createStartAgentIdentityGuideError, H as createSpaceTargetGuideError, Ht as formatAgentOverviewPayload, I as createSpaceResultGuideError, It as registerBuiltinAgentSelectionOptions, J as OPENMELD_AGENT_MENTAL_MODEL_LINES, Jt as sanitizeTerminalDisplayText, K as createStartAuthenticationGuideError, M as createSpacePublicationSetGuideError, Ot as getCliVersionInfo, Q as areAllowedActionsEquivalent, Qt as outLine, T as createSpaceContractSetGuideError, Tt as registerSkillsTargetSelectionOptions, V as createSpaceSubcommandTargetGuideError, Vt as buildDualViewGuideMessage, W as createSpaceUpdatesGuideError, X as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, Xt as errLine, Yt as formatMessage, Zt as outJsonLine, _ as createProfileActionGuideError, _t as registerSpaceMemberSelectionOptions, b as createResetConfirmationGuideError, bt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, et as buildAgentFacingPublicationModeGuideLines, g as createDoctorFailedGuideError, jt as registerAuthLoginRequestOptions, k as createSpaceLeaveGuideError, kt as registerDaemonControlTargetOptions, m as canUseInteractivePrompts, mt as getCommandHintsFromContract, ot as canonicalizeAllowedActions, qt as createPresenter, v as createProfileCreateGuideError, w as createSpaceAliasTargetGuideError, y as createProfileMenuGuideError, zt as DualViewGuideError } from "./elapsed-time-DZLKdEno.js";
+import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-C6sHRNGu.js";
+import { A as getDaemonStatus, K as withDaemonServiceRunLock } from "./daemon-state-C37ZtIZK.js";
+import { S as resolveDaemonServiceManager } from "./daemon-service-manager-GiMCiTmu.js";
+import { a as formatOpenMeldCliCommand, c as formatOpenMeldCliTextBlock, d as resolveSetupFollowUpCliEntryCommand, f as resolveUserFacingCliEntryCommand, i as formatInlineOpenMeldCliCommands, o as formatOpenMeldCliCommands, r as resolveAuthBaseUrl, s as formatOpenMeldCliLine, t as resolveOpenMeldEnvironmentTarget, u as formatProfileAwareOpenMeldCliCommands } from "./openmeld-environment-target-NtJYJe1D.js";
+import { n as resolveServiceAccountIdentity, r as runServiceAccountCarrier } from "./service-account-authorization-BN2F75_x.js";
+import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-BdBSoby4.js";
+import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-DQqmhjGj.js";
+import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-CNeTiYSS.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -26,8 +34,8 @@ import { constants, openAsBlob, readFileSync, realpathSync } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import pc from "picocolors";
 import { promisify } from "node:util";
+import pc from "picocolors";
 import { cancel, confirm, intro, isCancel, multiselect, note, outro, select, spinner, text } from "@clack/prompts";
 import { Command, Option } from "commander";
 import { performance } from "node:perf_hooks";
@@ -482,6 +490,50 @@ z$1.strictObject({
 });
 const getSpaceDispatchResultResponseSchema = dispatchResultSchema;
 //#endregion
+//#region ../../packages/schemas/dist/schemas/space-mesh/dispatch-space-action-receipt.js
+const dispatchSpaceActionClosedReasonCodeSchema = z$1.enum(["space_action.context_expired", "space_action.context_mismatch"]);
+const dispatchSpaceActionReceiptSchema = z$1.discriminatedUnion("status", [
+	z$1.strictObject({
+		status: z$1.literal("proposal_saved_locally"),
+		actionType: z$1.enum([
+			"post_message",
+			"post_status",
+			"stay_silent"
+		]),
+		attemptId: z$1.string().min(1),
+		contextId: z$1.string().min(1),
+		dispatchId: z$1.string().min(1),
+		recordedAtMs: z$1.number().int().nonnegative(),
+		contextState: z$1.enum(["active", "expired"]),
+		coordinatorAcceptance: z$1.literal("unconfirmed"),
+		publication: z$1.literal("unconfirmed")
+	}),
+	z$1.strictObject({
+		status: z$1.literal("rejected_closed"),
+		reasonCode: dispatchSpaceActionClosedReasonCodeSchema,
+		coordinatorAcceptance: z$1.literal("unconfirmed"),
+		publication: z$1.literal("unconfirmed")
+	}),
+	z$1.strictObject({
+		status: z$1.literal("outcome_unknown"),
+		reasonCode: z$1.literal("space_action.recording_outcome_unknown"),
+		coordinatorAcceptance: z$1.literal("unconfirmed"),
+		publication: z$1.literal("unconfirmed")
+	})
+]);
+const dispatchSpaceActionToolResultSchema = z$1.strictObject({ receipt: dispatchSpaceActionReceiptSchema });
+//#endregion
+//#region ../../packages/schemas/dist/schemas/space-mesh/dispatch-space-history.js
+const dispatchSpaceHistoryRequestSchema = z$1.strictObject({});
+const dispatchSpaceHistoryResultSchema = z$1.strictObject({
+	spaceId: z$1.string().min(1),
+	sourceSignalId: z$1.string().min(1),
+	beforeCount: z$1.literal(20),
+	afterCount: z$1.literal(0),
+	signals: z$1.array(z$1.record(z$1.string(), z$1.unknown())).max(21),
+	nextCursor: z$1.string().min(1).nullable()
+});
+//#endregion
 //#region ../../packages/schemas/dist/space-invitation.js
 const id = z$1.string().trim().min(1).max(200);
 const spaceInvitationRequestSchema = z$1.discriminatedUnion("action", [
@@ -1943,6 +1995,7 @@ const COMMAND_CHECK_REQUIREMENTS = Object.freeze({
 	"profile.list": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, REQUIRED_SIGN_IN),
 	"profile.set": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN),
 	"profile.show": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN),
+	"profile.execution-mode": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, REQUIRED_SIGN_IN),
 	"profile.update": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN),
 	"profile.delete": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, AUTO_FIX_LOCAL_RUNTIME, REQUIRED_SIGN_IN),
 	"profile.requests.create": buildCommandChecks(REQUIRED_DISCLAIMER, OPTIONAL_CLI_UPDATE, REQUIRED_SIGN_IN),
@@ -2188,6 +2241,8 @@ const COMMAND_ENTRY_NAME_BY_ROUTE = {
 	"profile show": "profile.show",
 	"profiles update": "profile.update",
 	"profile update": "profile.update",
+	"profile execution-mode": "profile.execution-mode",
+	"profiles execution-mode": "profile.execution-mode",
 	"profiles delete": "profile.delete",
 	"profile delete": "profile.delete",
 	"profile requests create": "profile.requests.create",
@@ -3084,6 +3139,12 @@ const COMMAND_ENTRY_COPY_BY_NAME = Object.freeze({
 		cliUpdateAction: "updating a profile",
 		serviceAction: null
 	},
+	"profile.execution-mode": {
+		signInAction: "managing independent-task admission",
+		profileAction: null,
+		cliUpdateAction: "managing independent-task admission",
+		serviceAction: null
+	},
 	"profile.delete": {
 		signInAction: "deleting a profile",
 		profileAction: null,
@@ -11637,6 +11698,135 @@ function resolveRealPathOrNull$1(path) {
 	}
 }
 //#endregion
+//#region src/commands/service-account-control.ts
+function refused(reason, message) {
+	throw new ServiceAccountAdmissionError(reason, message);
+}
+async function runServiceAccountControl(request) {
+	const parsed = serviceAccountControlRequestSchema.safeParse(request);
+	if (!parsed.success) refused("missing_account", "Choose a signed-in account before controlling this Service.");
+	const input = parsed.data;
+	if (process.platform === "win32") refused("unsupported_platform", "Account-checked Service control is not available on Windows yet.");
+	const auth = await getAuthSessionState();
+	if (auth.state !== "valid" || !auth.session) refused("authentication_required", "Sign in to the CLI with the matching account and try again.");
+	const preparedSession = auth.session;
+	if (preparedSession.user?.id !== input.expectedAccount) refused("account_mismatch", "The CLI is signed in to a different account. Sign in with the matching account and try again.");
+	if ((await fetchAuthUserSnapshot({
+		authBaseUrl: preparedSession.authBaseUrl,
+		accessToken: preparedSession.accessToken
+	})).id !== input.expectedAccount) refused("account_mismatch", "The CLI session belongs to a different account. Sign in again and retry.");
+	await withDaemonServiceRunLock(async () => {
+		const contract = await readDaemonServiceContract();
+		if (!contract) refused("ownership_unknown", "Connect this computer through OpenMeld setup before controlling its Service.");
+		const observed = await readCurrentDaemonRuntimeContext();
+		const lease = await readDaemonRuntimeLease();
+		if (input.operation === "start" && observed.effectiveRuntimeStatus !== "not_running") refused("busy", "The Service is already running or its state is uncertain. Check Service status before trying again.");
+		if (input.operation === "stop" && (observed.effectiveRuntimeStatus !== "running" || !lease || lease.generation !== contract.generation)) refused("ownership_unknown", "OpenMeld could not verify the running Service. Check Service status before trying again.");
+		let boundSession = preparedSession;
+		const reservation = await withAuthSessionTransitionMutationLock(async () => {
+			boundSession = await readServiceAdmissionSessionWithOwnership();
+			if (boundSession.accessToken !== preparedSession.accessToken || boundSession.createdAt !== preparedSession.createdAt || boundSession.user?.id !== input.expectedAccount) refused("account_changed", "The CLI sign-in changed before this action was accepted. Check the account and try again.");
+			const current = await readDaemonServiceContract();
+			if (!current || JSON.stringify(current) !== JSON.stringify(contract)) refused("ownership_changed", "The Service changed before this action was accepted. Check its status and try again.");
+			const identity = await resolveServiceAccountIdentity(boundSession, contract);
+			if (input.operation === "start" && contract.desiredState !== "background") identity.contractGeneration += 1;
+			return await reserveServiceAccountAdmission({
+				operation: input.operation,
+				identity,
+				...input.operation === "stop" && lease ? { target: {
+					ownerPid: lease.pid,
+					ownerProcessStartedAt: readProcessStartIdentity(lease.pid) ?? refused("ownership_unknown", "OpenMeld could not identify the Service process. Check its status and try again.")
+				} } : {}
+			});
+		});
+		try {
+			await withAdmittedServiceSession(boundSession, async () => {
+				if (input.operation === "stop") {
+					await stopReservedService(contract, reservation.id, lease?.pid ?? 0);
+					return;
+				}
+				const manager = contract.serviceController === "legacy-detached" ? null : await resolveDaemonServiceManager(contract.serviceController);
+				if (contract.serviceController !== "legacy-detached" && !(manager && (await manager.status()).installed)) refused("installation_required", "This Service needs setup before it can start. Run OpenMeld setup and try again.");
+				await upsertDaemonServiceContract({
+					...contract,
+					desiredState: "background"
+				});
+				if (contract.serviceController === "legacy-detached") {
+					const runtime = await resolveRuntimeContext({ view: "agent" });
+					await runDaemonServiceDetached({
+						accountAdmissionId: reservation.id,
+						deviceId: contract.deviceId,
+						gatewayUrl: contract.gatewayUrl,
+						heartbeatMs: contract.heartbeatMs,
+						runtime,
+						presenter: createQuietPresenter(runtime),
+						mode: "background"
+					});
+				} else if (manager) {
+					await manager.deactivate();
+					await manager.install(buildDaemonSystemServiceCommandSpec({
+						controller: manager.controller,
+						accountAdmissionId: reservation.id
+					}));
+					await manager.start();
+				}
+				await waitForAdmittedService(reservation.id);
+			});
+		} finally {
+			await cancelServiceAccountAdmission(reservation.id);
+		}
+	});
+}
+async function waitForAdmittedService(id) {
+	const deadline = Date.now() + 15e3;
+	while (Date.now() < deadline) {
+		const current = await readServiceAccountAdmission();
+		const runtime = await readCurrentDaemonRuntimeContext();
+		if (current?.id === id && current.state === "admitted" && current.carrier?.ownerPid === runtime.runtimeStatus.pid && runtime.effectiveRuntimeStatus === "running") return;
+		await setTimeout$1(50);
+	}
+	refused("startup_unconfirmed", "OpenMeld could not confirm that this Service started. Check Service status before trying again.");
+}
+async function stopReservedService(contract, id, pid) {
+	await requestAccountCheckedServiceStop({
+		id,
+		manager: contract.serviceController === "legacy-detached" ? null : await resolveDaemonServiceManager(contract.serviceController)
+	});
+	const admitted = await readServiceAccountAdmission();
+	if (admitted?.id !== id || admitted.state !== "admitted" || admitted.carrier?.ownerPid !== pid) refused("admission_unconfirmed", "OpenMeld could not verify that the matching Service accepted Stop. Check Service status before trying again.");
+	const current = await readCurrentDaemonRuntimeContext();
+	if (current.runtimeStatus.pid !== null && current.runtimeStatus.pid !== pid) refused("ownership_changed", "Another Service instance is now running. Its state was left unchanged.");
+	await runDaemonStop({
+		json: true,
+		view: "agent"
+	}, { completedControlledShutdownOwnerPid: pid });
+}
+async function requestAccountCheckedServiceStop({ id, manager }) {
+	const wasEnabled = manager ? (await manager.status()).enabled : false;
+	if (manager) await manager.disableAutostart();
+	try {
+		if (!(await requestLocalDaemonShutdown({
+			payload: {
+				accountAdmissionId: id,
+				mode: "graceful",
+				gracePeriodMs: 2e3
+			},
+			timeoutMs: 15e3
+		})).accepted) throw new Error("The Service did not confirm controlled shutdown.");
+	} catch (error) {
+		if (manager && wasEnabled && error instanceof LocalDaemonControlPlaneClientError && error.code === "service.account_admission.stop_refused") try {
+			await manager.enableAutostart();
+		} catch (restoreError) {
+			throw new AggregateError([error, restoreError], "Stop was refused and its previous autostart setting could not be restored.");
+		}
+		if (!(error instanceof LocalDaemonControlPlaneClientError && error.code === "service.account_admission.stop_refused")) {
+			const detail = error instanceof Error ? error.message : String(error);
+			refused("stop_unconfirmed", `Stop may already be in progress. ${manager ? "Autostart remains disabled. " : ""}Check Service status before trying again. ${detail}`);
+		}
+		throw error;
+	}
+}
+//#endregion
 //#region src/config/space-dispatch-lookup-api.ts
 async function fetchSpaceDispatchLookup(input) {
 	const endpoint = new URL(toSpaceDispatchLookupUrl(input.baseUrl, input.space));
@@ -13376,6 +13566,14 @@ function buildAgentTraceCompactSummary(input) {
 		reasonCode: resolveTraceRootCause(trace),
 		visibleOutcome: finalVisibleOutcome.status
 	};
+	if (finalVisibleOutcome.status === "not_applicable" && !trace.runtimeCoordinatorExecution && headLifecycle?.readStatus === "found" && headLifecycle.status === "queued" && !headLifecycle.runtimeCoordinatorExecutionId) return {
+		...nativeDeliveryEvidence,
+		currentState: headLifecycle.status,
+		delivered: false,
+		nextAction: "wait for the Agent's execution slot, then rerun trace with the same selector",
+		reasonCode: resolveTraceRootCause(trace),
+		visibleOutcome: finalVisibleOutcome.status
+	};
 	if (finalVisibleOutcome.status === "not_applicable" && trace.finalVisibleMessageLinkage?.status === "projection_pending") return {
 		...nativeDeliveryEvidence,
 		currentState: "final_projection_pending",
@@ -13428,12 +13626,6 @@ function formatRuntimeCoordinatorHeadLifecycleSummary(headLifecycle) {
 function resolveTraceRootCause(trace) {
 	return resolveSpaceDispatchTraceRootCause(trace);
 }
-function resolveRuntimeCoordinatorHeadStatusRootCause(status) {
-	if (status === "accepted") return "runtime_coordinator.head_accepted";
-	if (status === "execution_linked") return "runtime_coordinator.head_execution_linked";
-	if (status === "waiting") return "runtime_coordinator.head_waiting";
-	return "runtime_coordinator.head_publication_intent_ready";
-}
 const PRE_EXECUTION_NO_EXECUTION_EVIDENCE_REASON_CODES = /* @__PURE__ */ new Set(["local_service.identity_mismatch"]);
 function resolvePreExecutionNoExecutionEvidenceRootCause(trace) {
 	const headLifecycle = trace?.runtimeCoordinatorHeadLifecycle;
@@ -14168,7 +14360,9 @@ async function runPreparedComputerAuthHandoff(input) {
 			ownerUserId: initialSnapshot.ownerUserId
 		});
 		const currentSession = await resolveCurrentComputerSession(candidate);
+		await assertReviewedComputerConnection(input.connectionIntent, candidate, currentSession);
 		if (!await confirmComputerAccountSwitch({
+			reviewedConnection: Boolean(input.connectionIntent),
 			candidate,
 			currentSession,
 			interactive: input.interactive,
@@ -14247,6 +14441,13 @@ async function runPreparedComputerAuthHandoff(input) {
 		stream.close();
 	}
 }
+async function assertReviewedComputerConnection(review, candidate, currentSession) {
+	if (!review) return;
+	const intent = computerConnectionIntentSchema.safeParse(review);
+	if (intent.success && intent.data.expectedAccount === candidate.user.id && intent.data.previousSessionIdentity === buildStoredAuthSessionIdentity(currentSession)) return;
+	const revoked = await revokePreparedAuthSession(candidate);
+	throw new Error(`The computer sign-in changed. Review the connection again before continuing.${formatComputerAuthCleanupFailureSuffix(revoked)}`);
+}
 async function assertPrepareSessionOwner(input) {
 	if (input.candidate.user.id === input.ownerUserId) return;
 	const revoked = await revokePreparedAuthSession(input.candidate);
@@ -14308,6 +14509,7 @@ async function confirmComputerAccountSwitch(input) {
 		throw new Error(`OpenMeld could not verify the account currently connected to this Computer. The current Computer connection was not changed.${formatComputerAuthCleanupFailureSuffix(revoked)}`);
 	}
 	if (currentUserId === input.candidate.user.id) return true;
+	if (input.reviewedConnection) return true;
 	const currentAccount = normalizeOptionalString$7(input.currentSession?.user?.email) ?? "the current account";
 	const nextAccount = normalizeOptionalString$7(input.candidate.user.email) ?? "another account";
 	if (!input.interactive || input.resolvedView !== "human") {
@@ -14389,6 +14591,7 @@ async function runSetupLocalAgentConnection(input) {
 	if (input.humanProfile) throw new Error(RETIRED_HUMAN_PROFILE_SETUP_MESSAGE);
 	const deviceCode = normalizeOptionalString$6(input.deviceCode);
 	if (input.startSession && deviceCode) return buildPrepareSessionSetupResult(await runComputerAuthorizationHandoff({
+		connectionIntent: input.connectionIntent,
 		deviceCode,
 		interactive,
 		localAgentSelection: resolvePrepareSessionLocalAgentSelection(input),
@@ -20457,6 +20660,34 @@ function normalizeOptionalString$2(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 //#endregion
+//#region src/profile/execution-mode-command.ts
+async function runProfileExecutionMode(input) {
+	if (input.mode !== void 0 && input.mode !== "parallel" && input.mode !== "serial") throw new Error("--mode must be parallel or serial.");
+	const profile = await resolveOpenMeldProfile({
+		openMeldProfileId: input.profile,
+		profileKind: "agent"
+	});
+	if (!profile || profile.profileKind !== "agent") throw new Error("Choose an Agent Profile you own.");
+	const runtime = await resolveRuntimeContext({ view: input.view });
+	const presenter = createPresenter(runtime);
+	const result = await createAgentProfileExecutionModeApi(createCliApiClientFoundation(await resolveBaseUrl())).readOrUpdate({
+		agentProfileId: profile.openMeldProfileId,
+		mode: input.mode,
+		requestContext: buildOpenMeldRequestContextFromProfile({ openMeldProfile: profile })
+	});
+	if (runtime.resolvedView === "agent") {
+		presenter.data({
+			code: "profile.execution_mode",
+			payload: result
+		});
+		return;
+	}
+	presenter.line({
+		code: "profile.execution_mode",
+		text: `${profile.profileName}: ${result.mode} admission; Context migration ${result.migration}. Existing tasks retain their execution and conversation identity.`
+	});
+}
+//#endregion
 //#region src/profile/profile-update-cli-options.ts
 function hasExplicitProfileUpdateField(input) {
 	return typeof input.name === "string" || typeof input.agentController === "string" || typeof input.agentControllerConversationId === "string" || typeof input.agentControllerPermissionMode === "string" || typeof input.model === "string" || typeof input.reasoningEffort === "string" || typeof input.workspaceMode === "string" || typeof input.workspacePath === "string";
@@ -23123,7 +23354,8 @@ function recordDispatchSpaceReply(input) {
 		referenceTargetCount: input.referenceTargets?.length ?? 0,
 		wakeTargetCount: input.wakeTargets?.length ?? 0
 	});
-	const context = readDispatchSpaceActionContextFromEnv();
+	const filePaths = input.filePaths ?? [];
+	const context = filePaths.length > 0 ? readDispatchSpaceActionContextFromEnv() : readDispatchSpaceActionContextForReceiptFromEnv();
 	timing.emit("context_ready", context);
 	assertAllowedAction(context, "post_message");
 	const text = normalizeRequiredText(input.text, "Reply message is required.");
@@ -23139,7 +23371,6 @@ function recordDispatchSpaceReply(input) {
 		mentionTargetCount: targetIds.mentionTargets.length,
 		referenceTargetCount: targetIds.referenceTargets.length
 	});
-	const filePaths = input.filePaths ?? [];
 	if (filePaths.length === 0) return writeSpaceActionReplyRecord({
 		context,
 		files: [],
@@ -23207,7 +23438,7 @@ async function uploadSpaceActionReplyFiles(input) {
 	});
 }
 function runSpaceActionWake(input) {
-	const context = readDispatchSpaceActionContextFromEnv();
+	const context = readDispatchSpaceActionContextForReceiptFromEnv();
 	assertAllowedAction(context, "post_message");
 	const text = normalizeRequiredJoinedText(input.messageParts, "Wake handoff message is required.");
 	recordAction({
@@ -23236,7 +23467,7 @@ function runSpaceActionStatus(input) {
 	}));
 }
 function recordDispatchSpaceStatus(input) {
-	const context = readDispatchSpaceActionContextFromEnv();
+	const context = readDispatchSpaceActionContextForReceiptFromEnv();
 	assertAllowedAction(context, "post_status");
 	return recordAction({
 		action: {
@@ -23252,7 +23483,7 @@ function runSpaceActionSilent(input) {
 	emitActionRecorded(recordDispatchSpaceSilent(input));
 }
 function recordDispatchSpaceSilent(input) {
-	const context = readDispatchSpaceActionContextFromEnv();
+	const context = readDispatchSpaceActionContextForReceiptFromEnv();
 	assertAllowedAction(context, "stay_silent");
 	return recordAction({
 		action: {
@@ -23478,6 +23709,45 @@ async function readDispatchSpaceFile(input) {
 	return result;
 }
 //#endregion
+//#region src/space/dispatch-history-read.ts
+/** Read the current Wake's bounded Space history through the existing member API. */
+async function readDispatchSpaceHistory() {
+	if (process.env["OPENMELD_DISPATCH_RUNTIME_MODE"] !== "dispatch-owned-runtime") throw new Error("Space history tools require an active OpenMeld dispatch runtime.");
+	const context = readDispatchSpaceActionContextFromEnv();
+	const profile = await requireOpenMeldProfile({
+		openMeldProfileId: context.targetProfileId,
+		persistSelection: false,
+		authAction: "reading the current Wake's Space history"
+	});
+	if (profile.openMeldProfileId !== context.targetProfileId || profile.profileKind !== "agent") throw new Error("The Space history reader does not match the current Agent.");
+	const result = await createCliSpaceApi(await resolveBaseUrl()).listSignals({
+		spaceId: context.spaceId,
+		requestContext: buildOpenMeldRequestContextFromProfile({ openMeldProfile: profile }),
+		query: {
+			aroundSignalId: context.sourceEventId,
+			beforeCount: 20,
+			afterCount: 0,
+			kinds: ["text"]
+		}
+	});
+	const current = readDispatchSpaceActionContextFromEnv();
+	if (current.contextId !== context.contextId || current.nonce !== context.nonce || current.spaceId !== context.spaceId || current.sourceEventId !== context.sourceEventId || current.targetProfileId !== context.targetProfileId) throw new Error("The dispatch context changed during the Space history read.");
+	const output = dispatchSpaceHistoryResultSchema.parse({
+		spaceId: context.spaceId,
+		sourceSignalId: context.sourceEventId,
+		beforeCount: 20,
+		afterCount: 0,
+		signals: result.signals,
+		nextCursor: result.nextCursor
+	});
+	const signals = output.signals.map((signal) => signalTextEnvelopeSchema.parse(signal));
+	if (signals.some((signal) => signal.spaceId !== context.spaceId)) throw new Error("The Space history response does not match the current Space.");
+	return {
+		...output,
+		signals
+	};
+}
+//#endregion
 //#region src/space/action-mcp-server.ts
 const FINAL_STATUS_SCHEMA = z.enum([
 	"done",
@@ -23489,7 +23759,38 @@ function createSpaceActionMcpServer() {
 	const server = new McpServer({
 		name: "openmeld-dispatch-space-action",
 		version: "1.0.0"
-	}, { instructions: "Use read_file to read shared text files in the current Space. Then choose exactly one final OpenMeld Space Action for the current Wake: reply for the exact public message, status for a final visible status, or stay_silent when no public message is needed. Private assistant output is not posted to the Space." });
+	}, { instructions: "Use read_history for the bounded text history around the current Wake, and read_file for shared text files in the current Space. Then choose exactly one final OpenMeld Space Action: reply for the exact public message, status for a final visible status, or stay_silent when no public message is needed. Private assistant output is not posted to the Space." });
+	server.registerTool("read_history", {
+		title: "Read the current Wake's Space history",
+		description: "Read up to 20 text messages before the current Wake, plus its source message. Space, Agent identity and source are fixed by the active dispatch. Use this instead of terminal CLI history. This read does not submit a reply or close the Wake.",
+		inputSchema: dispatchSpaceHistoryRequestSchema,
+		outputSchema: dispatchSpaceHistoryResultSchema,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false
+		}
+	}, async () => {
+		try {
+			const result = await readDispatchSpaceHistory();
+			return {
+				structuredContent: result,
+				content: [{
+					type: "text",
+					text: JSON.stringify(result)
+				}]
+			};
+		} catch (error) {
+			return {
+				isError: true,
+				content: [{
+					type: "text",
+					text: error instanceof Error ? error.message : String(error)
+				}]
+			};
+		}
+	});
 	server.registerTool("read_file", {
 		title: "Read a file in the current OpenMeld Space",
 		description: "Read a shared text file as the Agent in the current Wake. Use this for attached CSV, text, Markdown, or JSON files instead of running the CLI in a terminal. Pass the attachment's file ID and revision. This is a context read; it does not submit a reply or close the Wake.",
@@ -23529,6 +23830,7 @@ function createSpaceActionMcpServer() {
 			referenceTargets: z.array(z.string().min(1)).optional(),
 			wakeTargets: z.array(z.string().min(1)).optional()
 		},
+		outputSchema: dispatchSpaceActionToolResultSchema,
 		annotations: {
 			destructiveHint: false,
 			idempotentHint: false,
@@ -23548,6 +23850,7 @@ function createSpaceActionMcpServer() {
 			status: FINAL_STATUS_SCHEMA,
 			text: z.string().min(1)
 		},
+		outputSchema: dispatchSpaceActionToolResultSchema,
 		annotations: {
 			destructiveHint: false,
 			idempotentHint: false,
@@ -23562,6 +23865,7 @@ function createSpaceActionMcpServer() {
 		title: "Stay silent in the current OpenMeld Space",
 		description: "Record that the active OpenMeld Wake intentionally needs no public reply. Use this only after deciding that silence is the correct final outcome.",
 		inputSchema: { reason: z.string().min(1) },
+		outputSchema: dispatchSpaceActionToolResultSchema,
 		annotations: {
 			destructiveHint: false,
 			idempotentHint: false,
@@ -23572,20 +23876,56 @@ function createSpaceActionMcpServer() {
 	return server;
 }
 async function runSpaceActionMcpServer() {
-	readDispatchSpaceActionContextFromEnv();
+	readDispatchSpaceActionContextForReceiptFromEnv();
 	await createSpaceActionMcpServer().connect(new StdioServerTransport());
 }
 async function executeSpaceAction(action) {
 	try {
-		return { content: [{
-			type: "text",
-			text: `Action recorded: OpenMeld saved this unpublished Space action proposal (${(await action()).action.type}) for the current Wake.`
-		}] };
+		const context = readDispatchSpaceActionContextForReceiptFromEnv();
+		const record = await action();
+		if (record.contextId !== context.contextId || record.nonce !== context.nonce) throw new DispatchSpaceActionClosedError("space_action.context_mismatch", "The saved action does not match the current dispatch context.");
+		const contextState = Date.now() > context.expiresAtMs ? "expired" : "active";
+		return {
+			structuredContent: dispatchSpaceActionToolResultSchema.parse({ receipt: {
+				status: "proposal_saved_locally",
+				actionType: record.action.type,
+				attemptId: context.attemptId,
+				contextId: context.contextId,
+				dispatchId: context.dispatchId,
+				recordedAtMs: record.createdAtMs,
+				contextState,
+				coordinatorAcceptance: "unconfirmed",
+				publication: "unconfirmed"
+			} }),
+			content: [{
+				type: "text",
+				text: `Local proposal saved (receipt: proposal_saved_locally, action: ${record.action.type}). OpenMeld has recorded this unpublished Space action proposal on this computer. ${contextState === "expired" ? "The local context has expired. This receipt identifies the existing record and does not extend action authority. " : ""}Coordinator acceptance and Space publication are NOT yet confirmed; do not report it as posted.`
+			}]
+		};
 	} catch (error) {
+		if (error instanceof DispatchSpaceActionClosedError) return {
+			structuredContent: dispatchSpaceActionToolResultSchema.parse({ receipt: {
+				status: "rejected_closed",
+				reasonCode: error.reasonCode,
+				coordinatorAcceptance: "unconfirmed",
+				publication: "unconfirmed"
+			} }),
+			content: [{
+				type: "text",
+				text: `Action rejected (receipt: rejected_closed, reason: ${error.reasonCode}). ${error.message} New actions are not permitted in this context. Existing records are preserved; Coordinator acceptance and Space publication are unconfirmed.`
+			}],
+			isError: true
+		};
 		return {
+			structuredContent: dispatchSpaceActionToolResultSchema.parse({ receipt: {
+				status: "outcome_unknown",
+				reasonCode: "space_action.recording_outcome_unknown",
+				coordinatorAcceptance: "unconfirmed",
+				publication: "unconfirmed"
+			} }),
 			content: [{
 				type: "text",
-				text: error instanceof Error ? error.message : String(error)
+				text: `Action receipt unavailable (receipt: outcome_unknown). ${error instanceof Error ? error.message : String(error)} Existing records are preserved; Coordinator acceptance and Space publication are unconfirmed.`
 			}],
 			isError: true
 		};
@@ -24213,7 +24553,7 @@ function normalizeOptionalString(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 async function runDefaultSpaceAddMeMembership(input) {
-	const { runSpaceAddMeMembership } = await import("./add-me-membership-BkHWMxE4.js");
+	const { runSpaceAddMeMembership } = await import("./add-me-membership-CZS8PbYL.js");
 	return await runSpaceAddMeMembership(input);
 }
 //#endregion
@@ -28265,18 +28605,21 @@ withStartOptions(program.command("start").description("Initial onboarding: set u
 		}
 	});
 });
-program.command("setup").description("Set up this computer for OpenMeld Space Wake.").option("--profile <id>", "Existing OpenMeld agent profile ID to connect to this computer").option("--agent <id...>", "Builtin local agent ID to repair directly when you already know the target").option("--human-profile <id>", "Retired OpenMeld Web setup flag; copy a fresh setup command from OpenMeld Web instead").option("--ott <token>", "One-time token to sign in on this device before setup").option("--device-code <code>", "Browser-approved code used to create this computer's independent sign-in session").option("--start-session <opaque-token>", "Continue an OpenMeld Web Prepare setup command on this device").option("--local-agents <mode>", "Select local agents during setup: all or none").option("--local-agent <id...>", "Select specific local agent IDs during setup").option("--reset-this-computer", "Stop stale local OpenMeld Service state before reconnecting this computer").addHelpText("after", buildCommandHelpExamples("Primary entry points", [
+program.command("setup").description("Set up this computer for OpenMeld Space Wake.").option("--connection-intent <json>", "Account and exact previous Computer session explicitly reviewed for this connection").option("--profile <id>", "Existing OpenMeld agent profile ID to connect to this computer").option("--agent <id...>", "Builtin local agent ID to repair directly when you already know the target").option("--human-profile <id>", "Retired OpenMeld Web setup flag; copy a fresh setup command from OpenMeld Web instead").option("--ott <token>", "One-time token to sign in on this device before setup").option("--device-code <code>", "Browser-approved code used to create this computer's independent sign-in session").option("--start-session <opaque-token>", "Continue an OpenMeld Web Prepare setup command on this device").option("--local-agents <mode>", "Select local agents during setup: all or none").option("--local-agent <id...>", "Select specific local agent IDs during setup").option("--reset-this-computer", "Stop stale local OpenMeld Service state before reconnecting this computer").addHelpText("after", buildCommandHelpExamples("Primary entry points", [
 	"openmeld setup",
 	"openmeld setup --start-session <opaque-token> --local-agents all",
 	"openmeld setup --profile <agent-profile-id> --local-agent <local-agent-id>"
 ])).action(async (opts) => {
 	const view = getGlobalViewOption();
+	const connectionIntent = opts.connectionIntent ? computerConnectionIntentSchema.parse(JSON.parse(opts.connectionIntent)) : void 0;
+	if (connectionIntent && !(opts.startSession && opts.deviceCode)) throw new Error("--connection-intent requires --start-session and --device-code.");
 	await runCommandWithEntryChecks({
 		routeTokens: ["setup"],
 		view,
 		profile: opts.profile,
 		run: async () => {
 			await runSetup({
+				connectionIntent,
 				agent: opts.agent,
 				deviceCode: opts.deviceCode,
 				humanProfile: opts.humanProfile,
@@ -29329,8 +29672,8 @@ const serviceCmd = program.command("service").alias("daemon").description("Manag
 		}
 	});
 });
-serviceCmd.command("start").description("Start OpenMeld Service on this device.").option("--mode <mode>", "Start mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").option("--json", "Print machine-readable JSON.", false).action(runServiceStartCliAction);
-serviceCmd.command("run", { hidden: true }).description("Run OpenMeld Service in this process. System service entrypoint (launchd/systemd unit definitions call this); humans should use `openmeld service start`.").option("--mode <mode>", "Run mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").action(runServiceStartCliAction);
+serviceCmd.command("start").description("Start OpenMeld Service on this device.").option("--expected-account <id>", "Require this signed-in account for Service control").option("--mode <mode>", "Start mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").option("--json", "Print machine-readable JSON.", false).action(async (opts) => await runServiceStartCliAction(opts));
+serviceCmd.command("run", { hidden: true }).option("--account-admission-id <id>", "CLI-owned Service startup admission").description("Run OpenMeld Service in this process. System service entrypoint (launchd/systemd unit definitions call this); humans should use `openmeld service start`.").option("--mode <mode>", "Run mode: background (default) or foreground").option("--gateway-url <url>", "OpenMeld gateway URL (command line, OPENMELD_GATEWAY_URL, or saved OpenMeld settings)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for owner resolution").option("--device-id <id>", "Override daemon device id for this run").option("--heartbeat-ms <n>", "Heartbeat interval in milliseconds (default: 25000)").action(async (opts) => await runServiceStartCliAction(opts));
 serviceCmd.command("update-worker", { hidden: true }).description("Resume one durable OpenMeld Service update in the background.").action(async () => {
 	const result = await runPendingDaemonServiceUpdate();
 	if (result?.phase === "restored" || result?.phase === "needs_help") process.exitCode = 1;
@@ -29512,7 +29855,15 @@ serviceCmd.command("reinstall", { hidden: true }).description("Deprecated alias
 	errLine("hint: `openmeld service reinstall` is a deprecated alias; use `openmeld service repair`.");
 	await runServiceMaintenanceCliAction(opts, "repair");
 });
-serviceCmd.command("stop").description("Stop OpenMeld Service on this device.").option("--force", "Send SIGKILL immediately instead of SIGTERM (human flow defaults to confirmation)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for state sync").option("--json", "Print machine-readable JSON.", false).action(async (opts) => {
+serviceCmd.command("stop").description("Stop OpenMeld Service on this device.").option("--expected-account <id>", "Require this signed-in account for Service control").option("--force", "Send SIGKILL immediately instead of SIGTERM (human flow defaults to confirmation)").option("--profile <id-or-name>", "Optional OpenMeld profile override used for state sync").option("--json", "Print machine-readable JSON.", false).action(async (opts) => {
+	if (opts.expectedAccount !== void 0) {
+		if (!opts.json || opts.force || opts.profile) throw new Error("Account-bound Service control requires --json and does not accept force or profile overrides.");
+		await runServiceAccountControl({
+			operation: "stop",
+			expectedAccount: opts.expectedAccount
+		});
+		return;
+	}
 	const json = opts.json === true;
 	const view = getGlobalViewOption();
 	await runCommandWithEntryChecks({
@@ -29530,6 +29881,25 @@ serviceCmd.command("stop").description("Stop OpenMeld Service on this device.").
 	});
 });
 async function runServiceStartCliAction(opts) {
+	if (opts.expectedAccount !== void 0) {
+		if (!opts.json || opts.profile || opts.deviceId || opts.gatewayUrl || opts.heartbeatMs || opts.mode) throw new Error("Account-bound Service control requires --json and does not accept startup overrides.");
+		await runServiceAccountControl({
+			operation: "start",
+			expectedAccount: opts.expectedAccount
+		});
+		emitCliJsonEnvelope({
+			schemaVersion: 1,
+			type: "daemon.run",
+			ok: true,
+			reason: "started"
+		});
+		return;
+	}
+	if (opts.accountAdmissionId) {
+		const { accountAdmissionId, ...remaining } = opts;
+		await runServiceAccountCarrier(accountAdmissionId, async () => await runServiceStartCliAction(remaining));
+		return;
+	}
 	const json = opts.json === true;
 	const view = getGlobalViewOption();
 	if (!json && shouldEmitAgentOverview({ resolvedView: view === "agent" ? "agent" : "human" })) emitDaemonAgentOverview({
@@ -30052,7 +30422,7 @@ withSpaceProfileOption(spaceCmd.command("watch").description("Watch a space in r
 		}
 	});
 });
-withSpaceProfileOption(spaceCmd.command("send").description("Send one message to a Space.").argument("[space]", "Space ID (64-character hex)").argument("[text...]", "Text to send").option("--file <path>", "Share a local file in this Space message (repeatable, max 10)", collectRepeatedOptionValue, []).option("--stdin", "Read message text from stdin (EOF to finish)", false).option("--text-file <path>", "Read message text from a UTF-8 file").option("--wake <profile-id>", "Wake an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--reference <profile-id>", "Reference an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--mention <profile-id>", "Mention a Human Profile (repeatable)", collectRepeatedOptionValue, []).option("--plain", "Assert that this message has no recipients; text is always literal", false).option("--reply-to <signal-id>", "Reply into the thread of a message (creates the thread if it does not exist yet)").option("--password <value>", "Space password for protected access")).action(async (space, textParts, opts, command) => {
+withSpaceProfileOption(spaceCmd.command("send").description("Send one message to a Space.").option("--new-task", `Start an independent task (up to 5 per Agent)`).option("--fork-from <signal-id>", "Fork the selected Agent's completed task at this message").option("--continue-from <signal-id>", "Continue the selected Agent's task from this message").option("--task-access <mode>", "File access: space_context, read_only, or workspace (local files require Codex)").option("--task-workspace <mode>", "Task folder: isolated (private project worktree for local work) or current").argument("[space]", "Space ID (64-character hex)").argument("[text...]", "Text to send").option("--file <path>", "Share a local file in this Space message (repeatable, max 10)", collectRepeatedOptionValue, []).option("--stdin", "Read message text from stdin (EOF to finish)", false).option("--text-file <path>", "Read message text from a UTF-8 file").option("--wake <profile-id>", "Wake an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--reference <profile-id>", "Reference an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--mention <profile-id>", "Mention a Human Profile (repeatable)", collectRepeatedOptionValue, []).option("--plain", "Assert that this message has no recipients; text is always literal", false).option("--reply-to <signal-id>", "Reply into the thread of a message (creates the thread if it does not exist yet)").option("--password <value>", "Space password for protected access")).action(async (space, textParts, opts, command) => {
 	const cliOptions = resolveSpaceCommandCliOptions(command, opts);
 	const spaceValue = String(space ?? "").trim();
 	const outputView = await resolveEffectiveViewForOutput();
@@ -30073,6 +30443,15 @@ withSpaceProfileOption(spaceCmd.command("send").description("Send one message to
 				baseUrl: cliOptions.gatewayUrl,
 				space: spaceValue,
 				filePaths: Array.isArray(opts.file) ? opts.file.map(String) : [],
+				contextSelection: resolveSpaceTaskSelection({
+					space: spaceValue,
+					wakeTargets: opts.wake,
+					newTask: opts.newTask,
+					forkFrom: opts.forkFrom,
+					continueFrom: opts.continueFrom,
+					taskAccess: opts.taskAccess,
+					taskWorkspace: opts.taskWorkspace
+				}),
 				password: cliOptions.password,
 				text: textValue,
 				stdin: Boolean(opts.stdin),
@@ -30495,7 +30874,7 @@ withSpaceProfileOption(spaceCmd.command("password").description("Set, change, or
 		}
 	});
 });
-program.command("send").description("Alias for `openmeld space send`.").argument("[text...]", "Text to send").option("--profile <id>", "OpenMeld profile ID").option("--base-url <url>", "OpenMeld gateway URL").option("--space <space>", "Space ID (64-character hex)").option("--stdin", "Read message text from stdin (EOF to finish)", false).option("--file <path>", "Share a local file in this Space message (repeatable, max 10)", collectRepeatedOptionValue, []).option("--text-file <path>", "Read message text from a UTF-8 file").option("--wake <profile-id>", "Wake an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--reference <profile-id>", "Reference an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--mention <profile-id>", "Mention a Human Profile (repeatable)", collectRepeatedOptionValue, []).option("--plain", "Assert that this message has no recipients; text is always literal", false).option("--password <value>", "Space password for protected access").action(async (textParts, opts) => {
+program.command("send").description("Alias for `openmeld space send`.").option("--new-task", `Start an independent task (up to 5 per Agent)`).option("--fork-from <signal-id>", "Fork the selected Agent's completed task at this message").option("--continue-from <signal-id>", "Continue the selected Agent's task from this message").option("--task-access <mode>", "File access: space_context, read_only, or workspace (local files require Codex)").option("--task-workspace <mode>", "Task folder: isolated (private project worktree for local work) or current").argument("[text...]", "Text to send").option("--profile <id>", "OpenMeld profile ID").option("--base-url <url>", "OpenMeld gateway URL").option("--space <space>", "Space ID (64-character hex)").option("--stdin", "Read message text from stdin (EOF to finish)", false).option("--file <path>", "Share a local file in this Space message (repeatable, max 10)", collectRepeatedOptionValue, []).option("--text-file <path>", "Read message text from a UTF-8 file").option("--wake <profile-id>", "Wake an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--reference <profile-id>", "Reference an Agent Profile (repeatable)", collectRepeatedOptionValue, []).option("--mention <profile-id>", "Mention a Human Profile (repeatable)", collectRepeatedOptionValue, []).option("--plain", "Assert that this message has no recipients; text is always literal", false).option("--password <value>", "Space password for protected access").action(async (textParts, opts) => {
 	const space = String(opts.space ?? "").trim();
 	if (!space) throw createSpaceAliasTargetGuideError("send");
 	const view = getGlobalViewOption();
@@ -30507,6 +30886,15 @@ program.command("send").description("Alias for `openmeld space send`.").argument
 		run: async () => {
 			await runSpaceSend({
 				profile: opts.profile,
+				contextSelection: resolveSpaceTaskSelection({
+					space,
+					wakeTargets: opts.wake,
+					newTask: opts.newTask,
+					forkFrom: opts.forkFrom,
+					continueFrom: opts.continueFrom,
+					taskAccess: opts.taskAccess,
+					taskWorkspace: opts.taskWorkspace
+				}),
 				baseUrl: opts.baseUrl,
 				space,
 				password: opts.password,
@@ -30682,6 +31070,18 @@ program.command("whoami").description("Show your sign-in and selected profile.")
 	});
 });
 const profileCmd = program.command("profiles").alias("profile").description("Manage OpenMeld profiles.");
+profileCmd.command("execution-mode").description("Read or change independent-task admission for an Agent Profile.").argument("<profile>", "Agent Profile ID").option("--mode <mode>", "parallel or serial; serial lets existing tasks finish").action(async (profile, options) => {
+	const view = getGlobalViewOption();
+	await runCommandWithEntryChecks({
+		routeTokens: ["profile", "execution-mode"],
+		view,
+		run: () => runProfileExecutionMode({
+			profile,
+			mode: options.mode,
+			view
+		})
+	});
+});
 profileCmd.action(async () => {
 	const view = getGlobalViewOption();
 	await runCommandWithEntryChecks({
@@ -31043,6 +31443,33 @@ async function handlePreParseStandaloneCommand(argv) {
 async function main() {
 	if (await runMacOsNativeKeychainHelperIfRequested()) return;
 	const argv = process.argv.map((arg) => arg === "--h" ? "--help" : arg);
+	if (argv.length === 5 && argv[2] === "computer" && argv[3] === "connection-review" && argv[4] === "--json") {
+		const { readComputerConnectionReview } = await import("./computer-connection-review-Dx4svB-T.js");
+		outLine(JSON.stringify(await readComputerConnectionReview()));
+		return;
+	}
+	if (argv.length === 5 && argv[2] === "service" && argv[4] === "--json") {
+		if (argv[3] === "control-carrier-capability") {
+			outLine(JSON.stringify({
+				protocol: "account-checked-service-control-v1",
+				executable: process.execPath
+			}));
+			return;
+		}
+		if (argv[3] === "control-capabilities") {
+			const { readServiceControlCapabilities } = await import("./service-control-capabilities-BqEr7J9H.js");
+			emitCliJsonEnvelope({
+				schemaVersion: 1,
+				type: "service.control_capabilities",
+				...await readServiceControlCapabilities().catch(() => ({
+					deviceId: null,
+					start: false,
+					stop: false
+				}))
+			});
+			return;
+		}
+	}
 	if (isDispatchSpaceActionToolServerArgv(argv)) {
 		await runSpaceActionMcpServer();
 		return;
@@ -31213,4 +31640,4 @@ main().catch((error) => {
 //#endregion
 export {};
 
-//# sourceMappingURL=openmeld-ChOHuaqH.js.map
+//# sourceMappingURL=openmeld-DQNVH1jx.js.map