openmeld 0.3.207 → 0.3.208

package/dist/{agents-CIDsThyG.js → agents-pHCyQoFw.js}

@@ -2,41 +2,41 @@
 
 import { f as toSpaceMetaUrl, g as toSpaceUpdatesUrl } from "./urls-CY2uzH2-.js";
 import { t as isLoopbackHostname } from "./loopback-hostname-DHQPKq8N.js";
-import { E as assessLocalMachineFailure, F as accountProfileSpaceCacheDir, J as legacyAccountProfileSpacesDir, M as formatLocalMachineIssueMessage, N as OPENMELD_HOME_ENV_KEY, R as accountsDir, X as normalizeAccountKey, Z as normalizeOpenMeldProfileId, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, k as createServiceSpawnPendingIssue, pt as resolveOpenMeldServiceOwnedPathInput, q as isPublishedOpenMeldHome, rt as openMeldRootDir, u as resolveOpenMeldOrphanedLockIssue, v as resolveCliContextId, x as resolveOpenMeldLaneDescriptor } from "./lock-Dxp6o_t_.js";
-import { $r as spaceMemberKindSchema, An as DAEMON_STREAM_KEEPALIVE_PING, Ar as submitFeedbackIssueResponseSchema, Bn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Br as agentActivityEventSchema, Ci as computerFileAccessPolicyInputSchema, Cn as toStructuredApiClientFailure, Dr as organizationDirectoryResponseSchema, Fr as pauseCenterAgentRoutineResponseSchema, Ir as resumeCenterAgentRoutineResponseSchema, Kn as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Lr as updateCenterAgentRoutineResponseSchema, Mr as deleteCenterAgentRoutineResponseSchema, Nr as listCenterAgentRoutineRunsResponseSchema, Or as organizationComputersResponseSchema, Pr as listCenterAgentRoutinesResponseSchema, Qr as spaceMemberDirectorySchema, Si as computerFileAccessDaemonFrameSchema, Sr as listOrganizationSkillsResponseSchema, Ti as toCompatibleSpaceAddressingRequestWireValue, Tr as organizationSkillSummarySchema, Tt as buildSpaceAttachmentDownloadPath, Un as getSpaceUpdatesResponseSchema, Wn as spaceEntryTargetSchema, Wr as agentActivitySnapshotResponseSchema, Xr as spaceMemberDirectoryAllowedRelationsSchema, Yr as spaceMemberAgentWakeAvailabilitySchema, Zr as spaceMemberDirectoryEntrySchema, _i as listProjectsResponseSchema, _r as organizationSpaceDirectoryWithMemberCountsResponseSchema, ai as observedLocalAgentSessionSchema, an as createServiceConnectionEvidenceApi, ar as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, bi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, br as spaceMetaSchema, cr as betterAuthDeviceAuthorizationErrorResponseSchema, di as serviceConnectionEvidenceJournalSchema, dr as betterAuthSessionSnapshotResponseSchema, fi as localProjectControlConnectionSchema, gi as createProjectResponseSchema, hi as archiveProjectResponseSchema, hr as gatewayErrorEnvelopeSchema, in as createRuntimeReportingApi, jr as createCenterAgentRoutineResponseSchema, jt as createAgentActivityApi, kr as submitFeedbackIssueRequestSchema, lr as betterAuthDeviceAuthorizationTokenRequestSchema, mi as localProjectControlDiscoverProjectsResponseSchema, oi as centerAgentToolSpeakerSchema, on as createSpaceApi, or as betterAuthDeviceAuthorizationCodeRequestSchema, pi as localProjectControlDaemonFrameSchema, ri as agentActivitySessionInventoryResponseSchema, sr as betterAuthDeviceAuthorizationCodeResponseSchema, t as OpenMeldApiClientHttpError, tr as submitAgentControllerTaskLifecycleEventItemSchema, ui as serviceConnectionEvidenceEventSchema, ur as betterAuthDeviceAuthorizationTokenResponseSchema, vi as projectSchema, wi as computerFileAccessPolicySchema, wr as organizationSkillReleaseSummarySchema, xi as OPENMELD_RUNTIME_CAPABILITIES_HEADER, xr as getOrganizationSkillResponseSchema, yi as updateProjectResponseSchema, yr as spaceCreatorSchema, zn as OPENMELD_HEADER_REQUEST_ID, zr as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS } from "./dist-D-kJdWZE.js";
+import { E as assessLocalMachineFailure, F as accountProfileSpaceCacheDir, J as legacyAccountProfileSpacesDir, M as formatLocalMachineIssueMessage, N as OPENMELD_HOME_ENV_KEY, R as accountsDir, X as normalizeAccountKey, Z as normalizeOpenMeldProfileId, d as runWithHeldLock, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, k as createServiceSpawnPendingIssue, pt as resolveOpenMeldServiceOwnedPathInput, q as isPublishedOpenMeldHome, rt as openMeldRootDir, s as releaseLock, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue, v as resolveCliContextId, x as resolveOpenMeldLaneDescriptor } from "./lock-Dxp6o_t_.js";
+import { $r as spaceMemberDirectoryEntrySchema, Ar as organizationComputersResponseSchema, Bn as OPENMELD_HEADER_REQUEST_ID, Ci as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Cr as getOrganizationSkillResponseSchema, Dr as organizationSkillSummarySchema, Ei as computerFileAccessPolicySchema, Er as organizationSkillReleaseSummarySchema, Fr as listCenterAgentRoutineRunsResponseSchema, Gn as spaceEntryTargetSchema, Hr as agentActivityEventSchema, Ir as listCenterAgentRoutinesResponseSchema, Kr as agentActivitySnapshotResponseSchema, Lr as pauseCenterAgentRoutineResponseSchema, Mr as submitFeedbackIssueResponseSchema, Nr as createCenterAgentRoutineResponseSchema, Oi as toCompatibleSpaceAddressingRequestWireValue, Pr as deleteCenterAgentRoutineResponseSchema, Qr as spaceMemberDirectoryAllowedRelationsSchema, Rr as resumeCenterAgentRoutineResponseSchema, Si as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Sr as spaceMetaSchema, Ti as computerFileAccessPolicyInputSchema, Tt as buildSpaceAttachmentDownloadPath, Vn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Vr as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, Wn as getSpaceUpdatesResponseSchema, Zr as spaceMemberAgentWakeAvailabilitySchema, _i as archiveProjectResponseSchema, _r as gatewayErrorEnvelopeSchema, ai as agentActivitySessionInventoryResponseSchema, an as createRuntimeReportingApi, bi as projectSchema, ci as centerAgentToolSpeakerSchema, cr as betterAuthDeviceAuthorizationCodeRequestSchema, dr as betterAuthDeviceAuthorizationTokenRequestSchema, ei as spaceMemberDirectorySchema, fi as serviceConnectionEvidenceEventSchema, fr as betterAuthDeviceAuthorizationTokenResponseSchema, gi as localProjectControlDiscoverProjectsResponseSchema, hi as localProjectControlDaemonFrameSchema, jn as DAEMON_STREAM_KEEPALIVE_PING, jr as submitFeedbackIssueRequestSchema, jt as createAgentActivityApi, kr as organizationDirectoryResponseSchema, lr as betterAuthDeviceAuthorizationCodeResponseSchema, mi as localProjectControlConnectionSchema, on as createServiceConnectionEvidenceApi, pi as serviceConnectionEvidenceJournalSchema, pr as betterAuthSessionSnapshotResponseSchema, qn as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, rr as submitAgentControllerTaskLifecycleEventItemSchema, si as observedLocalAgentSessionSchema, sn as createSpaceApi, sr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, t as OpenMeldApiClientHttpError, ti as spaceMemberKindSchema, ur as betterAuthDeviceAuthorizationErrorResponseSchema, vi as createProjectResponseSchema, wi as computerFileAccessDaemonFrameSchema, wn as toStructuredApiClientFailure, wr as listOrganizationSkillsResponseSchema, xi as updateProjectResponseSchema, xr as spaceCreatorSchema, yi as listProjectsResponseSchema, yr as organizationSpaceDirectoryWithMemberCountsResponseSchema, zr as updateCenterAgentRoutineResponseSchema } from "./dist-B8I8inkY.js";
 import { b as normalizeKnownBuiltinAgentControllerId, d as resolveBuiltinAgentControllerConversationKind, l as buildAgentControllerConversationRef } from "./controller-contract-pe3_Re-c.js";
-import { $i as buildDaemonServiceTargetSpec, $n as resolveRouteRegistrationReconcileDecision, $t as resolveProjectBindingForPath, A as resolveDaemonStatusSnapshot, Aa as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Ai as readCurrentDaemonOwnerSnapshot, An as resolveSkillsAgentRegistry, Ar as seedLegacyAgentContext, B as formatDaemonServiceRefreshReliabilityMessage, Ba as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Bn as repairBuiltinControllerInstall, Br as buildWorkingLanguagePromptPlan, C as isSystemServiceStartupTimeoutError, Ca as CATALOG_SYNC_RETRY_INTERVAL_MS, Ci as buildCliLaunchInvocation, Cn as removeAgentCustomTarget, Cr as buildRuntimeWorkspaceFingerprint, Ct as summarizeSkippedDaemonProfiles, D as captureDaemonServiceEvidence, Da as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, Di as buildDaemonOwnerSnapshotFromObservedState, Dn as updateAgentRegistrations, Dr as loadLedgerState, Dt as resolveLocalController, E as startDaemonSystemServiceWithAutoRepair, Ea as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, Ei as inspectDaemonServiceInventory, En as updateAgentCustomTarget, Er as commitResolvedAgentContext, Et as readLocalEnabledControllers, F as buildDaemonServiceRefreshNextStep, Fa as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Fr as buildAgentContextLookupKey, G as buildDaemonServiceDependencyDetails, Ga as clearAllSelectedOpenMeldProfileIds, Gi as resolveRuntimeContext, Gn as isNpmGlobalCommandPath, Gt as bindProject, Ha as requireOpenMeldProfile, Hn as resolveBuiltinAgentControllerDefinition, I as buildDaemonServiceRefreshPromptMessage, Ia as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Ii as ensureDaemonRuntimeContractState, In as normalizeAgentId, Ir as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, It as readProfileWorkspaceConfigForAccount, J as buildDaemonServiceDependencySummary, Jn as normalizeDispatchThreadAction, Jr as parseAgentControllerRef, Jt as listProjectConnectionsWithStatus, K as buildDaemonServiceDependencyMeaning, Kn as isPnpmGlobalCommandPath, Kt as isProjectBound, La as REGISTER_RESPONSE_TIMEOUT_MS, Li as readDaemonRuntimeContractRepairReport, Ln as normalizeAgentIds, Lr as areAgentControllerInterfaceAccountsSame, M as resolveDaemonStatusAuthenticationAttention, Ma as DEFAULT_RECONNECT_DELAY_MS, Mi as resolveStoppedContractWriteBlockedReason, Mr as upsertConversationExecutionState, Mt as resolveProfileWorkspaceRuntime, N as resolveServiceReadiness, Na as HEARTBEAT_RESPONSE_TIMEOUT_MS, Ni as summarizeDaemonOwnerSnapshot, Nn as resolveRegistryRuntimeAdapterCapabilitySnapshot, Nr as withLedgerStateTransaction, Nt as ensureOpenMeldManagedProfileWorkspace, O as captureDaemonServiceEvidenceBestEffort, Oa as DAEMON_RUNTIME_CONTRACT_EPOCH, Oi as formatDaemonOwnerSummaryLabel, On as canManageRegistryAgentSkillTargets, Or as removeConversationExecutionState, Ot as resolveLocalRuntimeControllerSupport, Pa as MAX_RECONNECT_DELAY_MS, Pn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Pr as buildAuthenticatedControlPlaneResponse, Qi as ensureDaemonSystemServiceCommandFiles, Qn as isDaemonReconcileInProgressError, Qr as renderWorkingLanguagePrompt, Qt as removeProjectConnection, R as buildDaemonServiceStatusReadOnlyDetail, Ra as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Ri as DaemonServiceRunError, Rn as parseAgentEnabledOption, Rr as buildAgentControllerRef, Rt as resolveConfiguredProfileWorkspacePathForAccount, S as isDaemonInventoryRunningAndStartReady$1, Sa as warnDaemonEvent, Sr as runRuntimeTask, St as loadDaemonRouteCatalog, T as waitForSystemServiceStartup$1, Ta as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Ti as createProviderOriginalError, Tn as setAgentRegistrationEnabled, Tr as appendLedgerHistoryEntry, Tt as buildRuntimeRouteTargets, U as clearDaemonStartFailureState, Ua as resolveOpenMeldProfileOrNull, Un as isBunGlobalCommandPath, Ut as ProjectBindingOperationError, V as formatDaemonServiceUpdateRequiredMessage, Vn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Vr as createAgentControllerInterfaceDisplayRows, W as writeDaemonStartFailureState, Wn as isHomebrewCommandPath, Wt as ProjectBindingStoreUpdateRequiredError, X as resolveDaemonServiceDependencyDiagnostics, Xi as writeDaemonServiceContract, Xn as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Xt as removeAgentActivityBindingsWhileDeliveryLocked, Y as buildDaemonServiceDependencyTitle, Yi as resolveCurrentOpenMeldAccountContext, Yn as syncRuntimeEventToInflightTaskControlRegistry, Zi as buildDaemonSystemServiceCommandSpec, Zn as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zr as renderInformationProtectionPrompt, Zt as removeMissingProjectConnections, _ as DaemonServiceLifecycleDrainTimeoutError, _a as normalizeNonNegativeInteger$1, _i as forkCodexAppServerThread, _n as listAgentRegistrations, _r as resolveDispatchQueueLogMeta, _t as readDaemonRouteCatalogCache, a as resolveServiceUpdateUrgency, aa as DAEMON_SERVICE_REPAIR_ANOMALIES, ai as resolveCatalogSyncSkippedProfilesLogState, an as withAgentActivityDeliveryLock, ar as createLocalTaskInterruptSender, ba as nowIsoString, bi as createUnavailableProviderUsageLimits, bn as readAgentRuntimeConfigHealth, br as resolveCompatibleConversationExecutionState, bt as createMutableRouteCatalogState, ca as classifyDaemonServiceWakeability, ci as parseOpenCodeGoUsageResponse, cn as syncDeviceRuntimeStateProjection, co as buildHumanAuthenticationCard, cr as createInflightTaskControlRegistry, da as resolveDaemonDeviceId, di as GrokBuildAcpTransportError, dn as emitReconcileStartedEvidence, do as resolveAuthenticationGuidance, dr as MIN_HEARTBEAT_INTERVAL_MS, ea as resolveDaemonServiceAlignmentDecision, er as createSerialAgentInteractionCallback, fa as resolvePreferredDaemonDeviceId, fi as probeGrokBuildAcpInterface, fr as applyAcceptedLeases, g as scheduleDaemonServiceUpdate, ga as normalizeHeartbeatIntervalMs, gi as resolveInstalledCodexLaunchCandidates, gn as listAgentCustomTargets, gr as resolveCatalogSyncIntervalMs, gt as slugifyOpenClawNamePart, ha as emitRunLine, hi as resolveCodexTimeoutMs, hn as createRegistrationFromCatalogTarget, ho as compareAgentControllerRefsForDisplay, hr as resolveAdaptiveHeartbeatIntervalMs, ht as normalizeOpenClawSpaceIdPrefix, i as writeOpenMeldToolsMaintenancePolicy, ia as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, in as resolveLocalProjectConnectionForPath, io as readDaemonCatalogSyncSignal, ir as mergeOpenClawGatewayVisibility, j as resolveDaemonStatusAttention, ja as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, ji as resolveDaemonStopStrategy, jr as settleInflightTask, jt as resolveCurrentEffectiveProfileWorkingFolderRuntime, k as formatDaemonFailureContextText, ka as DAEMON_STREAM_CONNECT_TIMEOUT_MS, ki as hasActiveDaemonOwners, kr as resolveConversationExecutionStateByLookupKey, la as buildLedgerPaths, li as forkOpenCodeServerSession, ln as emitDriftDetectedEvidence, lo as createAuthenticationError, lr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ma as dirnamePath, mi as projectCodexUsageLimits, mn as addAgentCustomTarget, mo as resolveAuthenticationReasonFromState, mr as pruneStaleLeases, mt as buildOpenClawSpaceSessionKey, n as readOpenMeldToolsMaintenancePolicy, nr as normalizeDispatchPostMessageAction, o as assessServerRequiredVersion, oa as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES, oi as createLocalAdapterContainer, on as withAgentActivityLocalStateLock, oo as buildAuthenticationStatusLabel, or as buildLocalServiceDiagnosticsPayload, pa as asRecord, pi as resolveInstalledGrokBuildLaunchCandidates, pn as resolveAgentProfilePrimaryAgentControllerReport, pr as applyIntervalJitterMs$1, pt as prepareProviderRuntime, q as buildDaemonServiceDependencyNextStep, qt as listProjectBindings, r as resolveOpenMeldToolsMaintenanceProjection, ra as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, rr as createPendingAgentInteractionRegistry, s as describeServerRequiredVersionUnavailableReason, sa as classifyDaemonServiceRunStartability, si as createLocalAdapterEntries, so as buildCommandAuthenticationPromptMessage$1, sr as createLocalExecutionSlots, t as createOpenMeldToolsUpdateCoordinator, ta as isVersionDowngrade, tn as setDefaultProjectConnection, tr as buildDispatchReplyContextSummary, u as assessCliUpdate, ua as ensureDaemonRuntimePaths, ui as resolveInstalledOpenCodeLaunchCandidates, un as emitReconcileCompletedEvidence, uo as extractAuthenticationPromptAction, ur as MAX_HEARTBEAT_INTERVAL_MS, v as runDaemonServiceLifecycle, va as normalizeOptionalText$13, vi as verifyCodexAppServerThread, vn as listAgentTargetStates, vr as resolveDispatchContinuityObservation, vt as writeDaemonRouteCatalogCache, w as resolveSystemServiceStartupWaitMs, wa as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, wi as materializeCliLaunchCommand, wn as resolveAgentTargetState, wr as buildTaskResultEnvelope, wt as syncDaemonRouteCatalogState, x as uninstallDaemonServiceUpdateWorker, xa as toErrorMessage$10, xi as createUnsupportedProviderUsageLimits, xn as reconcileNewRunnableBuiltinAgentRegistrations, xr as resolveLatestScopedConversationExecutionState, xt as createRouteCatalogFromMutableState, y as ensureDaemonServiceMaintenanceInstalled, ya as normalizeText$2, yi as resolveInstalledClaudeCodeLaunchCandidates, yn as manageAgentRegistrationInstallation, yr as resolveCompatibleAgentContextMatch, yt as resolveLocalServiceDemand, z as buildDaemonServiceUpdateRequiredNextStep, za as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, zi as resolveCurrentDaemonExpectedVersion, zn as sortAgentRegistrations, zr as buildInformationProtectionPromptPlan, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-D9Skj8IE.js";
-import { A as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Bt as localFolderPickerHelperProtocolResultSchema, C as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, D as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, E as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, En as resolveSpaceMentionLabels, F as runtimeTransportResumeControllerConversationResultFramePayloadSchema, I as runtimeTransportRouteCatalogChangedFramePayloadSchema, J as openMeldSpaceEgressActionSchema, K as openMeldDaemonTaskResultPayloadSchema, Kr as openMeldRequestContextSchema, Lt as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, M as runtimeTransportRegisterSessionResponseSchema, Ot as normalizeSpacePasswordText, P as runtimeTransportResumeControllerConversationFramePayloadSchema, R as runtimeTransportSubmitTaskResultRequestSchema, Rt as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, S as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Sr as sanitizeDispatchErrorSummary, T as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Tn as resolveSingleSpaceMentionLabels, Tt as runtimeTransportDeliveryExecutionIdentitySchema, Vt as localFolderPickerHelperResultSchema, a as localWakeRouteWorkingFolderObservationSchema, b as runtimeTransportHeartbeatResponseSchema, bn as normalizeMessageEnvelope, br as resolvePublicAgentAvailabilityCopy, c as runtimeTransportDispatchInteractionDeliveredRequestSchema, d as runtimeTransportDispatchLifecycleRequestSchema, f as runtimeTransportDispatchPreviewEndRequestSchema, fr as LOCAL_AGENT_REASONING_MAX_CHARS, g as runtimeTransportDispatchToolActivityRequestSchema, gn as collectCanonicalMentionTextFragments, gt as agentInteractionRequestSchema, h as runtimeTransportDispatchRuntimeEvidenceRequestSchema, hn as MESSAGE_MENTION_TYPE_VALUES, j as runtimeTransportRegisterSessionRequestSchema, k as runtimeTransportOpenMeldToolsControlFramePayloadSchema, l as runtimeTransportDispatchInteractionRequestSchema, m as runtimeTransportDispatchReasoningRequestSchema, mr as localAgentReasoningPreferencesSchema, mt as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, nn as sanitizeSignalTextPreview, p as runtimeTransportDispatchPreviewRequestSchema, pr as OPENMELD_REASONING_STREAM_HEADER, r as daemonStreamFrameSchema, s as runtimeTransportDeliverDispatchRequestSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, u as runtimeTransportDispatchInteractionResponseFramePayloadSchema, v as runtimeTransportForkAgentSessionResultSchema, vn as getSpaceMessageAddressingRelationSupportForTargetKind, w as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, wt as runtimeCoordinatorExecutionTokenEnvelopeSchema, x as runtimeTransportLocalAgentControlCancelFramePayloadSchema, xn as resolveMessageEnvelopeTargetField, y as runtimeTransportHeartbeatRequestSchema, zt as localFolderPickerDaemonFrameSchema } from "./runtime-transport-QIZmAo4-.js";
+import { $i as buildDaemonSystemServiceCommandSpec, $n as resolveRouteRegistrationReconcileDecision, $r as renderWorkingLanguagePrompt, $t as resolveProjectBindingForPath, A as resolveDaemonStatusSnapshot, Aa as DAEMON_RUNTIME_CONTRACT_EPOCH, Ai as formatDaemonOwnerSummaryLabel, An as resolveSkillsAgentRegistry, Ar as seedLegacyAgentContext, B as formatDaemonServiceRefreshReliabilityMessage, Ba as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Bi as DaemonServiceRunError, Bn as repairBuiltinControllerInstall, Br as buildInformationProtectionPromptPlan, C as isSystemServiceStartupTimeoutError, Ca as toErrorMessage$10, Cn as removeAgentCustomTarget, Cr as buildRuntimeWorkspaceFingerprint, Ct as summarizeSkippedDaemonProfiles, D as captureDaemonServiceEvidence, Da as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Di as createProviderOriginalError, Dn as updateAgentRegistrations, Dr as loadLedgerState, Dt as resolveLocalController, E as startDaemonSystemServiceWithAutoRepair, Ea as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, Ei as listAgentControllerSupervisedProcessIds, En as updateAgentCustomTarget, Er as commitResolvedAgentContext, Et as readLocalEnabledControllers, F as buildDaemonServiceRefreshNextStep, Fa as HEARTBEAT_RESPONSE_TIMEOUT_MS, Fi as summarizeDaemonOwnerSnapshot, Fr as assertLegacyAgentContextAssociation, G as buildDaemonServiceDependencyDetails, Ga as resolveOpenMeldProfileOrNull, Gn as isNpmGlobalCommandPath, Gt as bindProject, Ha as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Hn as resolveBuiltinAgentControllerDefinition, Hr as createAgentControllerInterfaceDisplayRows, I as buildDaemonServiceRefreshPromptMessage, Ia as MAX_RECONNECT_DELAY_MS, In as normalizeAgentId, Ir as buildAgentContextLookupKey, It as readProfileWorkspaceConfigForAccount, J as buildDaemonServiceDependencySummary, Jn as normalizeDispatchThreadAction, Jt as listProjectConnectionsWithStatus, K as buildDaemonServiceDependencyMeaning, Kn as isPnpmGlobalCommandPath, Kt as isProjectBound, La as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Ln as normalizeAgentIds, Lr as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, M as resolveDaemonStatusAuthenticationAttention, Ma as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Mi as readCurrentDaemonOwnerSnapshot, Mr as upsertConversationExecutionState, Mt as resolveProfileWorkspaceRuntime, N as resolveServiceReadiness, Na as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, Ni as resolveDaemonStopStrategy, Nn as resolveRegistryRuntimeAdapterCapabilitySnapshot, Nr as withLedgerStateTransaction, Nt as ensureOpenMeldManagedProfileWorkspace, O as captureDaemonServiceEvidenceBestEffort, Oa as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, Oi as inspectDaemonServiceInventory, On as canManageRegistryAgentSkillTargets, Or as removeConversationExecutionState, Ot as resolveLocalRuntimeControllerSupport, Pa as DEFAULT_RECONNECT_DELAY_MS, Pi as resolveStoppedContractWriteBlockedReason, Pn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Pr as buildAuthenticatedControlPlaneResponse, Qi as writeDaemonServiceContract, Qn as isDaemonReconcileInProgressError, Qr as renderInformationProtectionPrompt, Qt as removeProjectConnection, R as buildDaemonServiceStatusReadOnlyDetail, Ra as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Ri as ensureDaemonRuntimeContractState, Rn as parseAgentEnabledOption, Rr as areAgentControllerInterfaceAccountsSame, Rt as resolveConfiguredProfileWorkspacePathForAccount, S as isDaemonInventoryRunningAndStartReady$1, Sa as nowIsoString, Si as createUnsupportedProviderUsageLimits, Sr as runRuntimeTask, St as loadDaemonRouteCatalog, T as waitForSystemServiceStartup$1, Ta as CATALOG_SYNC_RETRY_INTERVAL_MS, Ti as materializeCliLaunchCommand, Tn as setAgentRegistrationEnabled, Tr as appendLedgerHistoryEntry, Tt as buildRuntimeRouteTargets, U as clearDaemonStartFailureState, Un as isBunGlobalCommandPath, Ut as ProjectBindingOperationError, V as formatDaemonServiceUpdateRequiredMessage, Va as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, Vi as resolveCurrentDaemonExpectedVersion, Vn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Vr as buildWorkingLanguagePromptPlan, W as writeDaemonStartFailureState, Wa as requireOpenMeldProfile, Wn as isHomebrewCommandPath, Wt as ProjectBindingStoreUpdateRequiredError, X as resolveDaemonServiceDependencyDiagnostics, Xn as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Xt as removeAgentActivityBindingsWhileDeliveryLocked, Y as buildDaemonServiceDependencyTitle, Yn as syncRuntimeEventToInflightTaskControlRegistry, Yr as parseAgentControllerRef, Zi as resolveCurrentOpenMeldAccountContext, Zn as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zt as removeMissingProjectConnections, _ as DaemonServiceLifecycleDrainTimeoutError, _a as emitRunLine, _i as resolveInstalledCodexLaunchCandidates, _n as listAgentRegistrations, _o as compareAgentControllerRefsForDisplay, _r as resolveDispatchQueueLogMeta, _t as readDaemonRouteCatalogCache, a as resolveServiceUpdateUrgency, aa as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, an as withAgentActivityDeliveryLock, ar as createLocalTaskInterruptSender, ba as normalizeOptionalText$13, bi as resolveInstalledClaudeCodeLaunchCandidates, bn as readAgentRuntimeConfigHealth, br as resolveCompatibleConversationExecutionState, bt as createMutableRouteCatalogState, ca as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES, ci as createLocalAdapterEntries, cn as syncDeviceRuntimeStateProjection, co as buildAuthenticationStatusLabel, cr as createInflightTaskControlRegistry, da as buildLedgerPaths, di as resolveInstalledOpenCodeLaunchCandidates, dn as emitReconcileStartedEvidence, do as createAuthenticationError, dr as MIN_HEARTBEAT_INTERVAL_MS, ea as ensureDaemonSystemServiceCommandFiles, er as createSerialAgentInteractionCallback, fa as ensureDaemonRuntimePaths, fi as GrokBuildAcpTransportError, fo as extractAuthenticationPromptAction, fr as applyAcceptedLeases, g as scheduleDaemonServiceUpdate, ga as dirnamePath, gi as resolveCodexTimeoutMs, gn as listAgentCustomTargets, go as resolveAuthenticationReasonFromState, gr as resolveCatalogSyncIntervalMs, gt as slugifyOpenClawNamePart, ha as asRecord, hi as projectCodexUsageLimits, hn as createRegistrationFromCatalogTarget, hr as resolveAdaptiveHeartbeatIntervalMs, ht as normalizeOpenClawSpaceIdPrefix, i as writeOpenMeldToolsMaintenancePolicy, in as resolveLocalProjectConnectionForPath, ir as mergeOpenClawGatewayVisibility, j as resolveDaemonStatusAttention, ja as DAEMON_STREAM_CONNECT_TIMEOUT_MS, ji as hasActiveDaemonOwners, jr as settleInflightTask, jt as resolveCurrentEffectiveProfileWorkingFolderRuntime, k as formatDaemonFailureContextText, ka as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, ki as buildDaemonOwnerSnapshotFromObservedState, kr as resolveConversationExecutionStateByLookupKey, la as classifyDaemonServiceRunStartability, li as parseOpenCodeGoUsageResponse, ln as emitDriftDetectedEvidence, lo as buildCommandAuthenticationPromptMessage$1, lr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ma as resolvePreferredDaemonDeviceId, mi as resolveInstalledGrokBuildLaunchCandidates, mn as addAgentCustomTarget, mr as pruneStaleLeases, mt as buildOpenClawSpaceSessionKey, n as readOpenMeldToolsMaintenancePolicy, na as resolveDaemonServiceAlignmentDecision, nr as normalizeDispatchPostMessageAction, o as assessServerRequiredVersion, oa as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, oi as resolveCatalogSyncSkippedProfilesLogState, on as withAgentActivityLocalStateLock, oo as readDaemonCatalogSyncSignal, or as buildLocalServiceDiagnosticsPayload, pa as resolveDaemonDeviceId, pi as probeGrokBuildAcpInterface, pn as resolveAgentProfilePrimaryAgentControllerReport, po as resolveAuthenticationGuidance, pr as applyIntervalJitterMs$1, pt as prepareProviderRuntime, q as buildDaemonServiceDependencyNextStep, qa as clearAllSelectedOpenMeldProfileIds, qi as resolveRuntimeContext, qt as listProjectBindings, r as resolveOpenMeldToolsMaintenanceProjection, ra as isVersionDowngrade, rr as createPendingAgentInteractionRegistry, s as describeServerRequiredVersionUnavailableReason, sa as DAEMON_SERVICE_REPAIR_ANOMALIES, si as createLocalAdapterContainer, sr as createLocalExecutionSlots, t as createOpenMeldToolsUpdateCoordinator, ta as buildDaemonServiceTargetSpec, tn as setDefaultProjectConnection, tr as buildDispatchReplyContextSummary, u as assessCliUpdate, ua as classifyDaemonServiceWakeability, ui as forkOpenCodeServerSession, un as emitReconcileCompletedEvidence, uo as buildHumanAuthenticationCard, ur as MAX_HEARTBEAT_INTERVAL_MS, v as runDaemonServiceLifecycle, va as normalizeHeartbeatIntervalMs, vi as forkCodexAppServerThread, vn as listAgentTargetStates, vr as resolveDispatchContinuityObservation, vt as writeDaemonRouteCatalogCache, w as resolveSystemServiceStartupWaitMs, wa as warnDaemonEvent, wi as buildCliLaunchInvocation, wn as resolveAgentTargetState, wr as buildTaskResultEnvelope, wt as syncDaemonRouteCatalogState, x as uninstallDaemonServiceUpdateWorker, xa as normalizeText$2, xi as createUnavailableProviderUsageLimits, xn as reconcileNewRunnableBuiltinAgentRegistrations, xr as resolveLatestScopedConversationExecutionState, xt as createRouteCatalogFromMutableState, y as ensureDaemonServiceMaintenanceInstalled, ya as normalizeNonNegativeInteger$1, yi as verifyCodexAppServerThread, yn as manageAgentRegistrationInstallation, yr as resolveCompatibleAgentContextMatch, yt as resolveLocalServiceDemand, z as buildDaemonServiceUpdateRequiredNextStep, za as REGISTER_RESPONSE_TIMEOUT_MS, zi as readDaemonRuntimeContractRepairReport, zn as sortAgentRegistrations, zr as buildAgentControllerRef, zt as setCustomProfileWorkspace } from "./openmeld-tools-update-coordinator-D6uuBitR.js";
+import { A as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, An as resolveSpaceMentionLabels, Bt as localFolderPickerDaemonFrameSchema, C as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, Cn as executionContextAssignmentSchema, D as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, E as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, Er as sanitizeDispatchErrorSummary, Et as runtimeTransportDeliveryExecutionIdentitySchema, F as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Ht as localFolderPickerHelperResultSchema, I as runtimeTransportRouteCatalogChangedFramePayloadSchema, J as openMeldSpaceEgressActionSchema, K as openMeldDaemonTaskResultPayloadSchema, M as runtimeTransportRegisterSessionResponseSchema, P as runtimeTransportResumeControllerConversationFramePayloadSchema, R as runtimeTransportSubmitTaskResultRequestSchema, Rt as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, S as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Sn as resolveMessageEnvelopeTargetField, T as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Tn as executionContextTaskSchema, Tt as runtimeCoordinatorExecutionTokenEnvelopeSchema, Vt as localFolderPickerHelperProtocolResultSchema, Xr as openMeldRequestContextSchema, _n as collectCanonicalMentionTextFragments, _r as OPENMELD_REASONING_STREAM_HEADER, _t as agentInteractionRequestSchema, a as localWakeRouteWorkingFolderObservationSchema, b as runtimeTransportHeartbeatResponseSchema, c as runtimeTransportDispatchInteractionDeliveredRequestSchema, d as runtimeTransportDispatchLifecycleRequestSchema, f as runtimeTransportDispatchPreviewEndRequestSchema, g as runtimeTransportDispatchToolActivityRequestSchema, gn as MESSAGE_MENTION_TYPE_VALUES, gr as LOCAL_AGENT_REASONING_MAX_CHARS, h as runtimeTransportDispatchRuntimeEvidenceRequestSchema, ht as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, j as runtimeTransportRegisterSessionRequestSchema, k as runtimeTransportOpenMeldToolsControlFramePayloadSchema, kn as resolveSingleSpaceMentionLabels, kt as normalizeSpacePasswordText, l as runtimeTransportDispatchInteractionRequestSchema, m as runtimeTransportDispatchReasoningRequestSchema, p as runtimeTransportDispatchPreviewRequestSchema, r as daemonStreamFrameSchema, rn as sanitizeSignalTextPreview, s as runtimeTransportDeliverDispatchRequestSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, u as runtimeTransportDispatchInteractionResponseFramePayloadSchema, v as runtimeTransportForkAgentSessionResultSchema, vr as localAgentReasoningPreferencesSchema, w as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, wr as resolvePublicAgentAvailabilityCopy, x as runtimeTransportLocalAgentControlCancelFramePayloadSchema, xn as normalizeMessageEnvelope, y as runtimeTransportHeartbeatRequestSchema, yn as getSpaceMessageAddressingRelationSupportForTargetKind, zt as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER } from "./runtime-transport-DryoU4rm.js";
 import { $ as literal, C as formatLocalSetupActionDescription, E as localCliComponentUpdateProjectionSchema, G as boolean, S as formatLocalComponentsSummaryLabel, T as installedLocalComponentsSnapshotSchema, Y as enumFactory, Z as iso, a as openMeldDaemonControlPlaneResponseSchema, ft as url, gt as openMeldRuntimeProfileIdSchema, ht as normalizeOptionalWorkingDirectory, j as localServiceComponentUpdateProjectionSchema, ot as strictObject, q as discriminatedUnion, st as string, w as formatLocalSetupActionLabel, x as formatLocalComponentsSummaryDescription } from "./control-plane-D9jDcbMZ.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { C as withAdmittedServiceSession, T as ServiceAccountAdmissionError, _ as onAuthSessionCredentialObservation, a as beginAuthSessionTransition, g as onAuthSessionCredentialAvailable, i as assertAuthSessionMutationAvailable, s as clearAuthSession, u as getAuthSessionState, x as setAuthSession } from "./auth-session-CO5XtFaq.js";
-import { b as withSkillsInstallLock, f as ensureLocalSkills, g as loadSelectedSkillAssets, l as installSkillsToTargets, n as collectSkillsReadinessSnapshot, u as resolveSkillInstallStateForTarget, v as hashBundledSkillAssets, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installation-inventory-DJlwXa1q.js";
+import { C as withAdmittedServiceSession, T as ServiceAccountAdmissionError, _ as onAuthSessionCredentialObservation, a as beginAuthSessionTransition, g as onAuthSessionCredentialAvailable, i as assertAuthSessionMutationAvailable, s as clearAuthSession, u as getAuthSessionState, x as setAuthSession } from "./auth-session-ijcuaSsZ.js";
+import { b as withSkillsInstallLock, f as ensureLocalSkills, g as loadSelectedSkillAssets, l as installSkillsToTargets, n as collectSkillsReadinessSnapshot, u as resolveSkillInstallStateForTarget, v as hashBundledSkillAssets, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installation-inventory-_fMZas6v.js";
 import { n as resolveOpenMeldDistribution, o as serviceControlCapabilitiesSchema, t as isBinaryDistribution } from "./distribution-DY2fBeSW.js";
 import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-Dd4hdHNo.js";
-import { $ as readManagedCliInstallation, A as prepareDaemonServiceBundle, Bt as readDaemonServiceContract, H as formatDaemonLifecycleOriginSummary, It as sendLocalDaemonControlPlaneRequest, J as runWithDaemonLifecycleCommandJournal, K as resolveRecentDaemonSignalStopCause, Lt as clearDaemonServiceContract, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, Pt as requestLocalDaemonShutdown, Rt as isDaemonServiceContractIdentityReusable, U as readLatestDaemonLifecycleConnectionStateEvent, V as emitDaemonLifecycleEvent, Vt as upsertDaemonServiceContract, W as readLatestDaemonLifecycleOriginEvent, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, jt as LocalDaemonControlPlaneClientError, lt as compareSemver, n as getEffectiveDaemonRuntimeStatus, nt as OPENMELD_VERSION, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, q as runDaemonServiceManagerAction, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-DQW9gSLT.js";
-import { $ as buildAgentFacingMentalModelLines, At as validateDaemonControlTargetInput, Ft as getBuiltinAgentSelectionRequiredArguments, Gt as waitForOpenMeldToolsUpdateCompletion, Ht as formatAgentOverviewPayload, Jt as sanitizeTerminalDisplayText, Kt as resolveOpenMeldToolsUpdateOperation, Lt as validateBuiltinAgentSelectionInput, Mt as buildBuiltinAgentSelectionCommand, Nt as buildBuiltinAgentSelectionExamples, Pt as getBuiltinAgentSelectionOptionalArguments, Qt as outLine, Rt as buildAgentOverviewFromContract, Y as SPACE_COLLABORATION_CONTEXT_RULE, Z as SPACE_PERSONAL_CONTRIBUTION_RULE, Zt as outJsonLine, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceWakeParticipantLines, ct as deriveContinuity, d as formatDaemonServiceMissingStatus, dt as resolvePublicAgentFailureReason, f as getDaemonDowngradeBlockedTitle, ft as resolveSpacePublicationRequirement, h as createAuthLoginGuideError, i as formatDaemonInstallFailedMessage, it as buildSpaceEntryBriefNeedMoreLine, l as formatDaemonServiceMissingRunStepOne, lt as isSelfWakeSpaceAction, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, nt as buildCompactDispatchActionGuidanceLines, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, pt as getCommandEntryContract, qt as createPresenter, r as formatDaemonDowngradeBlockedNextStep, rt as buildSpaceAgentIdentityLine, s as formatDaemonServiceMissingMeaning, st as composeDispatchBrief, t as formatElapsedTime, tt as buildCenterAgentRoleTemplateText, u as formatDaemonServiceMissingRunStepTwo, ut as renderSpaceEntryBrief } from "./elapsed-time-CcoM2R3N.js";
+import { $ as readManagedCliInstallation, A as prepareDaemonServiceBundle, Bt as readDaemonServiceContract, H as formatDaemonLifecycleOriginSummary, It as sendLocalDaemonControlPlaneRequest, J as runWithDaemonLifecycleCommandJournal, K as resolveRecentDaemonSignalStopCause, Lt as clearDaemonServiceContract, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, Pt as requestLocalDaemonShutdown, Rt as isDaemonServiceContractIdentityReusable, U as readLatestDaemonLifecycleConnectionStateEvent, V as emitDaemonLifecycleEvent, Vt as upsertDaemonServiceContract, W as readLatestDaemonLifecycleOriginEvent, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, jt as LocalDaemonControlPlaneClientError, lt as compareSemver, n as getEffectiveDaemonRuntimeStatus, nt as OPENMELD_VERSION, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, q as runDaemonServiceManagerAction, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-D0LhAIGx.js";
+import { $ as buildAgentFacingMentalModelLines, At as validateDaemonControlTargetInput, Ft as getBuiltinAgentSelectionRequiredArguments, Gt as waitForOpenMeldToolsUpdateCompletion, Ht as formatAgentOverviewPayload, Jt as sanitizeTerminalDisplayText, Kt as resolveOpenMeldToolsUpdateOperation, Lt as validateBuiltinAgentSelectionInput, Mt as buildBuiltinAgentSelectionCommand, Nt as buildBuiltinAgentSelectionExamples, Pt as getBuiltinAgentSelectionOptionalArguments, Qt as outLine, Rt as buildAgentOverviewFromContract, Y as SPACE_COLLABORATION_CONTEXT_RULE, Z as SPACE_PERSONAL_CONTRIBUTION_RULE, Zt as outJsonLine, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceWakeParticipantLines, ct as deriveContinuity, d as formatDaemonServiceMissingStatus, dt as resolvePublicAgentFailureReason, f as getDaemonDowngradeBlockedTitle, ft as resolveSpacePublicationRequirement, h as createAuthLoginGuideError, i as formatDaemonInstallFailedMessage, it as buildSpaceEntryBriefNeedMoreLine, l as formatDaemonServiceMissingRunStepOne, lt as isSelfWakeSpaceAction, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, nt as buildCompactDispatchActionGuidanceLines, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, pt as getCommandEntryContract, qt as createPresenter, r as formatDaemonDowngradeBlockedNextStep, rt as buildSpaceAgentIdentityLine, s as formatDaemonServiceMissingMeaning, st as composeDispatchBrief, t as formatElapsedTime, tt as buildCenterAgentRoleTemplateText, u as formatDaemonServiceMissingRunStepTwo, ut as renderSpaceEntryBrief } from "./elapsed-time-DZLKdEno.js";
 import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-C6sHRNGu.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
 import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, d as daemonDispatchJournalPath, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-C37ZtIZK.js";
 import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-GiMCiTmu.js";
 import { a as formatOpenMeldCliCommand, c as formatOpenMeldCliTextBlock, f as resolveUserFacingCliEntryCommand, i as formatInlineOpenMeldCliCommands, o as formatOpenMeldCliCommands, r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-NtJYJe1D.js";
-import { t as admitServiceAccountStop } from "./service-account-authorization-Dt8kGvq8.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-BN2F75_x.js";
 import { n as toErrorMessage$11, t as sleep } from "./dist-o3UL1EGQ.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, f as buildOpenMeldRequestContextFromProfileIdentity, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-DSurenul.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, f as buildOpenMeldRequestContextFromProfileIdentity, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-BdBSoby4.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, loadavg, tmpdir } from "node:os";
 import { basename, delimiter, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { access, appendFile, chmod, link, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { access, appendFile, chmod, copyFile, link, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
 import { z } from "zod/v4";
 import { accessSync, appendFileSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, readFileSync, readSync, renameSync, watch, writeFileSync } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import { isDeepStrictEqual } from "node:util";
+import { isDeepStrictEqual, promisify } from "node:util";
 import { createServer } from "node:net";
 import pc from "picocolors";
-import { forkSession } from "@anthropic-ai/claude-agent-sdk";
+import { forkSession, getSessionInfo, getSessionMessages } from "@anthropic-ai/claude-agent-sdk";
 import { createOpencodeClient } from "@opencode-ai/sdk/v2";
 import { cancel, confirm, isCancel, select } from "@clack/prompts";
 import stringWidth from "string-width";
@@ -7304,9 +7304,8 @@ function createLedgerIo() {
 			await appendFile(filePath, content, { encoding });
 		},
 		copyFile: async (fromPath, toPath) => {
-			const raw = await readFile(fromPath, "utf8");
 			await mkdir(dirnamePath(toPath), { recursive: true });
-			await writeFile(toPath, raw, "utf8");
+			await copyFile(fromPath, toPath);
 		},
 		mkdir: async (dirPath, options) => {
 			await mkdir(dirPath, options);
@@ -7318,6 +7317,16 @@ function createLedgerIo() {
 			await mkdir(dirnamePath(toPath), { recursive: true });
 			await rename(fromPath, toPath);
 		},
+		syncPath: async (fileOrDirectoryPath) => {
+			const isWindows = process.platform === "win32";
+			if (isWindows && (await stat(fileOrDirectoryPath)).isDirectory()) return;
+			const handle = await open(fileOrDirectoryPath, isWindows ? "r+" : "r");
+			try {
+				await handle.sync();
+			} finally {
+				await handle.close();
+			}
+		},
 		rm: async (filePath, options) => {
 			await rm(filePath, options);
 		},
@@ -11221,7 +11230,8 @@ function parseDispatchTask(input) {
 	});
 	if (!(prompt && controllerSelection)) return null;
 	const fallbackControllerSettings = createDefaultRuntimeAgentControllerSettings(controllerSelection.agentControllerRef);
-	const agentControllerConversationId = normalizeOptionalText$13(payload.agentControllerConversationId) ?? null;
+	const agentControllerConversationId = resolveDispatchNativeConversationId(payload);
+	if (!hasMatchingExecutionContextScope(payload, requiredFields)) return null;
 	const deliveryRecoveryReason = resolveDeliveryRecoveryReason(payload);
 	const executionTokenEcho = resolveExecutionTokenEcho(payload);
 	if (!executionTokenEcho) return null;
@@ -11230,6 +11240,7 @@ function parseDispatchTask(input) {
 	const contextIdMappingSpec = payload.contextIdMappingSpec ?? input.fallbackRouteConfig?.contextIdMappingSpec ?? fallbackControllerSettings.contextIdMappingSpec;
 	return {
 		...requiredFields,
+		executionContext: payload.executionContext,
 		agentControllerConversationId,
 		...resolveDispatchSourceFiles(payload),
 		...controllerSelection,
@@ -11266,6 +11277,14 @@ function parseDispatchTask(input) {
 		contextIdMappingSpec
 	};
 }
+function hasMatchingExecutionContextScope(payload, required) {
+	const context = payload.executionContext;
+	return !context || context.scope.targetProfileId === required.targetProfileId && context.scope.spaceId === required.spaceId && context.scope.threadId === (payload.threadContext?.threadId ?? null);
+}
+function resolveDispatchNativeConversationId(payload) {
+	if (payload.executionContext) return payload.executionContext.nativeConversationId;
+	return normalizeOptionalText$13(payload.agentControllerConversationId) ?? null;
+}
 function resolveDispatchSourceFiles(payload) {
 	return {
 		attachments: payload.sourceSignalSnapshot?.attachments ?? [],
@@ -11515,7 +11534,7 @@ function renderMandatoryCompletionSection(input) {
 	return [
 		"Mandatory completion:",
 		"- Plain text is not a Space reply.",
-		"- For shared text attachments, discover and use the dispatch tool read_file with the file ID and revision. It reads the current Space as you without requiring terminal access to local login files. A file read is not a final action.",
+		"- Use supplied context first. Discover read_history for this Wake's bounded Space text, or read_file with a file ID and revision. Both dispatch tools read as you without local login files; neither completes the Wake.",
 		buildMandatoryCompletionActionLine(publicationRequirement),
 		"- Use the Space Action tool first. If your harness offers tool search or discovery, look up the required action before declaring it unavailable. A tool missing from the initial list is not proof of unavailability. Do not read setup or onboarding guides merely to submit this result.",
 		...publicationRequirement.allowedActions.includes("post_message") ? ["- For a plain reply, omit wakeTargets and referenceTargets. Add targets only for an intentional handoff or reference to another Agent; never copy incoming activation targets or wake yourself."] : [],
@@ -11615,14 +11634,14 @@ function renderContinuityLine(input) {
 	if (input.higherAuthorityUpdates) parts.push("higher-authority updates: yes");
 	if (parts.length === 0) return null;
 	const sourceSignalId = normalizeOptionalText$13(input.sourceSignalId);
-	if (!sourceSignalId) return `- Since your last public reply: ${parts.join("; ")} (run \`${buildSpaceHistoryCommand(input)}\` for content)`;
+	if (!sourceSignalId) return `- Since your last public reply: ${parts.join("; ")} (use dispatch tool \`read_history\` for bounded context; only if unavailable and terminal access is permitted, run \`${buildSpaceHistoryCommand(input)}\`)`;
 	const readCommand = buildSpaceContextWindowCommand({
 		cliEntry: input.cliEntry,
 		sourceSignalId,
 		spaceId: input.spaceId,
 		targetProfileId: input.targetProfileId
 	});
-	return `- Since your last public reply: ${parts.join("; ")} (run \`${readCommand}\` for bounded context)`;
+	return `- Since your last public reply: ${parts.join("; ")} (use dispatch tool \`read_history\` for bounded context; only if unavailable and terminal access is permitted, run \`${readCommand}\`)`;
 }
 function shouldRenderReplyTargetLine(replyTarget) {
 	return normalizeOptionalText$13(replyTarget) !== "the current source message";
@@ -16568,7 +16587,10 @@ function resolveAdapterInterruptNote(input) {
 //#region src/local-service/carrier/local-execution-slots.ts
 function createDaemonLocalExecutionSlots(input) {
 	return createLocalExecutionSlots({
-		limits: input.limits,
+		limits: {
+			...input.limits,
+			contextConcurrency: 5
+		},
 		onTaskDropped: (event) => {
 			emitRunLine({
 				presenter: input.presenter,
@@ -18504,11 +18526,27 @@ function buildForkedSessionTitle(profileName) {
 }
 //#endregion
 //#region src/local-service/session-control/session-fork-operation-store.ts
-const STORE_SCHEMA = "openmeld-agent-session-fork-operation-store-v1";
+const STORE_SCHEMA = "openmeld-agent-session-fork-operation-store-v2";
+const LEGACY_STORE_SCHEMA = "openmeld-agent-session-fork-operation-store-v1";
 const RECORD_SCHEMA = "openmeld-agent-session-fork-operation-record-v1";
 const STORE_FILE_NAME = "agent-session-fork-operations.json";
 const STORE_TEMP_FILE_NAME = "agent-session-fork-operations.tmp";
 const MAX_RETAINED_RECORDS = 256;
+const contextForkRequestSchema = z.strictObject({
+	kind: z.literal("execution_context"),
+	operationId: z.string().uuid(),
+	sourceNativeSessionId: z.string().min(1),
+	completedHistoryId: z.string().min(1),
+	workingDirectory: z.string().min(1)
+});
+const contextForkResultSchema = z.discriminatedUnion("status", [contextForkRequestSchema.extend({
+	status: z.literal("completed"),
+	childNativeSessionId: z.string().min(1)
+}), contextForkRequestSchema.extend({
+	status: z.enum(["rejected", "outcome_unknown"]),
+	reasonCode: z.string().min(1),
+	message: z.string().min(1)
+})]);
 const storeTails = /* @__PURE__ */ new Map();
 async function runAgentSessionForkOperation(input) {
 	const previous = storeTails.get(input.ledgerRootPath) ?? Promise.resolve();
@@ -18536,6 +18574,7 @@ async function runSerialized(input) {
 		if (existing.requestFingerprint !== fingerprint) return rejected(input.request, "agent_session_fork.operation_identity_conflict", "This Fork operation id was already used for a different Session.");
 		return existing.result ?? outcomeUnknown(input.request, "The provider Fork started, but no authoritative child Session id was recorded.");
 	}
+	if (records.filter((record) => record.result === null || record.result.status === "outcome_unknown").length >= MAX_RETAINED_RECORDS) return rejected(input.request, "agent_session_fork.unresolved_operation_limit", "Resolve uncertain fork operations before starting another fork.");
 	const started = {
 		operationId: input.request.operationId,
 		requestFingerprint: fingerprint,
@@ -18551,7 +18590,7 @@ async function runSerialized(input) {
 	let result;
 	try {
 		const forked = await input.execute();
-		result = runtimeTransportForkAgentSessionResultSchema.parse({
+		result = parseForkOperationResult({
 			...input.request,
 			childNativeSessionId: forked.childNativeSessionId,
 			status: "completed"
@@ -18599,8 +18638,13 @@ async function readRecords(ledgerRootPath) {
 		ok: false,
 		reasonCode: "agent_session_fork.operation_store_invalid"
 	};
+	if ("schema" in parsed && parsed.schema === LEGACY_STORE_SCHEMA && "v" in parsed && parsed.v === 1) parsed = {
+		...parsed,
+		schema: STORE_SCHEMA,
+		v: 2
+	};
 	const candidate = parsed;
-	if (candidate.schema !== STORE_SCHEMA || candidate.v !== 1) return {
+	if (candidate.schema !== STORE_SCHEMA || candidate.v !== 2) return {
 		ok: false,
 		reasonCode: "agent_session_fork.operation_store_update_required"
 	};
@@ -18620,12 +18664,14 @@ async function writeRecords(ledgerRootPath, records) {
 		mode: 448,
 		recursive: true
 	});
-	const retained = [...records].sort((left, right) => right.updatedAtMs - left.updatedAtMs).slice(0, MAX_RETAINED_RECORDS);
+	const ordered = [...records].sort((left, right) => right.updatedAtMs - left.updatedAtMs);
+	const unresolved = ordered.filter((record) => record.result === null || record.result.status === "outcome_unknown");
+	const retained = [...unresolved, ...ordered.filter((record) => !unresolved.includes(record)).slice(0, Math.max(0, MAX_RETAINED_RECORDS - unresolved.length))];
 	await writeFile(tempPath, `${JSON.stringify({
 		records: retained,
 		schema: STORE_SCHEMA,
 		updatedAtMs: Date.now(),
-		v: 1
+		v: 2
 	}, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
@@ -18635,15 +18681,15 @@ async function writeRecords(ledgerRootPath, records) {
 function isOperationStore(value) {
 	if (!(value && typeof value === "object")) return false;
 	const candidate = value;
-	return candidate.schema === STORE_SCHEMA && candidate.v === 1 && Array.isArray(candidate.records) && candidate.records.every(isStoredOperation);
+	return candidate.schema === STORE_SCHEMA && candidate.v === 2 && Array.isArray(candidate.records) && candidate.records.every(isStoredOperation);
 }
 function isStoredOperation(value) {
 	if (!(value && typeof value === "object")) return false;
 	const candidate = value;
-	return candidate.schema === RECORD_SCHEMA && typeof candidate.operationId === "string" && typeof candidate.requestFingerprint === "string" && typeof candidate.updatedAtMs === "number" && (candidate.result === null || runtimeTransportForkAgentSessionResultSchema.safeParse(candidate.result).success);
+	return candidate.schema === RECORD_SCHEMA && typeof candidate.operationId === "string" && typeof candidate.requestFingerprint === "string" && typeof candidate.updatedAtMs === "number" && (candidate.result === null || runtimeTransportForkAgentSessionResultSchema.safeParse(candidate.result).success || contextForkResultSchema.safeParse(candidate.result).success);
 }
 function rejected(request, reasonCode, message) {
-	return runtimeTransportForkAgentSessionResultSchema.parse({
+	return parseForkOperationResult({
 		...request,
 		message,
 		reasonCode,
@@ -18651,7 +18697,7 @@ function rejected(request, reasonCode, message) {
 	});
 }
 function outcomeUnknown(request, message) {
-	return runtimeTransportForkAgentSessionResultSchema.parse({
+	return parseForkOperationResult({
 		...request,
 		message,
 		reasonCode: "agent_session_fork.provider_outcome_unknown",
@@ -18661,6 +18707,9 @@ function outcomeUnknown(request, message) {
 function readErrorCode(error) {
 	return error && typeof error === "object" && "code" in error ? String(error.code).trim() || null : null;
 }
+function parseForkOperationResult(value) {
+	return value.kind === "execution_context" ? contextForkResultSchema.parse(value) : runtimeTransportForkAgentSessionResultSchema.parse(value);
+}
 function toErrorMessage$2(error) {
 	return error instanceof Error ? error.message : String(error);
 }
@@ -18767,6 +18816,7 @@ async function prepareDispatchRuntimeExecution(input) {
 }
 //#endregion
 //#region src/local-service/execution/task-execution-error.ts
+const EXECUTION_CONTEXT_ERROR_PATTERN = /^execution_context\.[a-z_]+$/u;
 function toTaskExecutionError(error) {
 	if (error instanceof DaemonServiceRunError) return {
 		errorCode: error.code,
@@ -18775,6 +18825,11 @@ function toTaskExecutionError(error) {
 		openClawGatewayVisibility: error.openClawGatewayVisibility,
 		projectFailureContext: error.projectFailureContext
 	};
+	if (error instanceof Error && EXECUTION_CONTEXT_ERROR_PATTERN.test(error.message)) return {
+		errorCode: error.message,
+		errorType: "config",
+		message: error.message
+	};
 	return {
 		errorCode: "dispatch.execution_failed",
 		errorType: "internal",
@@ -18784,6 +18839,16 @@ function toTaskExecutionError(error) {
 //#endregion
 //#region src/runtime/dispatch-space-action-context.ts
 const OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV = "OPENMELD_SPACE_ACTION_CONTEXT_PATH";
+/** The local action context is known expired/closed/mismatched: a new ordinary action must be rejected, never recorded. */
+var DispatchSpaceActionClosedError = class extends Error {
+	receipt = "rejected_closed";
+	reasonCode;
+	constructor(reasonCode, message) {
+		super(message);
+		this.name = "DispatchSpaceActionClosedError";
+		this.reasonCode = reasonCode;
+	}
+};
 const DISPATCH_SPACE_ACTION_CONTEXT_VERSION = 1;
 const DISPATCH_SPACE_ACTION_RECORD_VERSION = 1;
 const DEFAULT_CONTEXT_TTL_MS = 720 * 60 * 1e3;
@@ -18824,6 +18889,11 @@ function createDispatchSpaceActionContext(input) {
 	};
 }
 function readDispatchSpaceActionContextFromEnv(env = process.env) {
+	const context = readDispatchSpaceActionContextForReceiptFromEnv(env);
+	assertContextActive(context, Date.now());
+	return context;
+}
+function readDispatchSpaceActionContextForReceiptFromEnv(env = process.env) {
 	const contextPath = normalizeOptionalText$7(env[OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]);
 	if (!contextPath) throw new Error("No active OpenMeld Space Action dispatch context was found. Use this command inside an OpenMeld Space Wake dispatch.");
 	const context = readDispatchSpaceActionContext(contextPath);
@@ -18831,17 +18901,19 @@ function readDispatchSpaceActionContextFromEnv(env = process.env) {
 		context,
 		env
 	});
-	assertContextActive(context, Date.now());
 	return context;
 }
 function readDispatchSpaceActionContext(contextPath) {
 	return parseDispatchSpaceActionContext(readJsonFile(contextPath));
 }
 function writeDispatchSpaceActionRecord(input) {
-	assertContextActive(input.context, input.nowMs ?? Date.now());
 	const parsedAction = openMeldSpaceEgressActionSchema.safeParse(input.action);
 	if (!parsedAction.success) throw parsedAction.error;
 	if (isSelfWakeSpaceAction(parsedAction.data, input.context.targetProfileId)) throw new Error("An Agent cannot Wake itself. To reply to the current message, omit wakeTargets (CLI: --wake) and submit the reply again. No action was recorded.");
+	const existing = readDispatchSpaceActionRecord({ context: input.context });
+	if (existing.status === "invalid") throw new Error(existing.errorMessage);
+	if (existing.status === "loaded" && isDeepStrictEqual(existing.record.action, parsedAction.data)) return existing.record;
+	assertContextActive(input.context, input.nowMs ?? Date.now());
 	const record = {
 		version: DISPATCH_SPACE_ACTION_RECORD_VERSION,
 		action: parsedAction.data,
@@ -18922,10 +18994,10 @@ function assertDispatchRuntimeEnvMatchesContext(input) {
 	if (normalizeOptionalText$7(input.env["OPENMELD_DISPATCH_RUNTIME_MODE"]) !== "dispatch-owned-runtime") return;
 	const envDispatchId = normalizeOptionalText$7(input.env[OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]);
 	if (!envDispatchId) throw new Error("OpenMeld Space Action dispatch runtime is missing the active dispatch ID.");
-	if (envDispatchId !== input.context.dispatchId) throw new Error("OpenMeld Space Action dispatch context does not match the active dispatch runtime.");
+	if (envDispatchId !== input.context.dispatchId) throw new DispatchSpaceActionClosedError("space_action.context_mismatch", "OpenMeld Space Action dispatch context does not match the active dispatch runtime.");
 	const envTargetProfileId = normalizeOptionalText$7(input.env[OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]);
 	if (!envTargetProfileId) throw new Error("OpenMeld Space Action dispatch runtime is missing the active target profile ID.");
-	if (envTargetProfileId !== input.context.targetProfileId) throw new Error("OpenMeld Space Action target profile does not match the active dispatch runtime.");
+	if (envTargetProfileId !== input.context.targetProfileId) throw new DispatchSpaceActionClosedError("space_action.context_mismatch", "OpenMeld Space Action target profile does not match the active dispatch runtime.");
 }
 function parseDispatchSpaceActionRecord(value) {
 	const record = toRecord$1(value, "OpenMeld Space Action record");
@@ -18974,7 +19046,7 @@ function parseSpaceContractSnapshot(value) {
 	};
 }
 function assertContextActive(context, nowMs) {
-	if (nowMs > context.expiresAtMs) throw new Error("The OpenMeld Space Action dispatch context has expired.");
+	if (nowMs > context.expiresAtMs) throw new DispatchSpaceActionClosedError("space_action.context_expired", "The OpenMeld Space Action dispatch context has expired.");
 }
 function readJsonFile(path) {
 	return JSON.parse(readFileSync(path, "utf8"));
@@ -20622,6 +20694,710 @@ function coerceRuntimeResultToStructuredActionFailure$1(input) {
 	};
 }
 //#endregion
+//#region src/local-service/dispatch/execution-context-workspace.ts
+const execFileAsync = promisify(execFile);
+const syncDirectory = createLedgerIo().syncPath;
+const COMMIT_PATTERN = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u;
+const manifestSchema = z.strictObject({
+	version: z.union([z.literal(1), z.literal(2)]),
+	identity: executionContextAssignmentSchema,
+	sourceWorkingDirectory: z.string().nullable(),
+	baseCommit: z.string().regex(COMMIT_PATTERN).nullable(),
+	boundaryRoot: z.string(),
+	workingDirectory: z.string(),
+	status: z.enum([
+		"preparing",
+		"restoring",
+		"completed",
+		"in_use",
+		"retiring",
+		"released"
+	]),
+	pristineFingerprint: z.string().regex(/^[a-f0-9]{64}$/u).optional(),
+	copiedUncommittedFiles: z.literal(false),
+	processSupervisionId: z.uuid().optional(),
+	retirement: z.strictObject({
+		path: z.string(),
+		pristineFingerprint: z.string().regex(/^[a-f0-9]{64}$/u)
+	}).optional()
+}).refine((manifest) => manifest.version === 2 || (manifest.status === "preparing" || manifest.status === "completed") && !manifest.pristineFingerprint && !manifest.processSupervisionId && !manifest.retirement).refine((manifest) => manifest.identity.access === "space_context" ? manifest.sourceWorkingDirectory === null && manifest.baseCommit === null : manifest.sourceWorkingDirectory !== null && isAbsolute(manifest.sourceWorkingDirectory) && manifest.baseCommit !== null && manifest.identity.workspace === "isolated");
+async function prepareExecutionContextWorkspace(input) {
+	const parsed = executionContextTaskSchema.safeParse(input.context);
+	if (!parsed.success) throw failure("invalid_workspace_context");
+	const { nativeConversationId, runtimeWorkspaceFingerprint } = parsed.data;
+	const identity = executionContextAssignmentSchema.strip().parse(parsed.data);
+	const source = identity.access !== "space_context" ? await canonicalDirectory(input.currentWorkingDirectory) : null;
+	if (source) {
+		assertSourceAllowed(source, input.policy);
+		if (identity.workspace === "current") return {
+			workingDirectory: source,
+			boundaryRoot: source
+		};
+	}
+	const ledgerRoot = await ensureDirectory(input.ledgerRootPath, true);
+	const workspaceRoot = await ensureDirectory(join(ledgerRoot, "execution-context-workspaces"));
+	const recordsRoot = await ensureDirectory(join(ledgerRoot, "execution-context-workspace-records"));
+	const boundaryRoot = join(workspaceRoot, identity.id);
+	const workingDirectory = source ? join(boundaryRoot, "worktree") : boundaryRoot;
+	const recordPath = join(recordsRoot, `${identity.id}.json`);
+	return await withWorkspaceLock(ledgerRoot, identity.id, async () => {
+		const stored = await readManifest(recordPath);
+		if (stored) {
+			if (JSON.stringify(stored.identity) !== JSON.stringify(identity) || stored.sourceWorkingDirectory !== source || stored.boundaryRoot !== boundaryRoot || stored.workingDirectory !== workingDirectory) throw failure("workspace_identity_mismatch");
+			await reconcileRetainedWorkspace(stored, recordPath, Boolean(runtimeWorkspaceFingerprint || nativeConversationId), ledgerRoot);
+			return await verifyRetainedWorkspace(stored);
+		}
+		if (runtimeWorkspaceFingerprint || nativeConversationId) throw failure("workspace_record_missing");
+		if (await inspectPath(boundaryRoot)) throw failure("workspace_already_exists");
+		const baseCommit = source ? await resolveSourceCommit(source) : null;
+		const manifest = {
+			version: 2,
+			identity,
+			sourceWorkingDirectory: source,
+			baseCommit,
+			boundaryRoot,
+			workingDirectory,
+			status: "preparing",
+			copiedUncommittedFiles: false,
+			processSupervisionId: randomUUID()
+		};
+		await writeManifest(recordPath, manifest, "wx");
+		await finishWorkspacePreparation(manifest, recordPath, true);
+		return workspaceResult(manifest);
+	});
+}
+async function reconcileRetainedWorkspace(record, path, hasNativeIdentity, ledgerRoot) {
+	if (record.status === "retiring") await runWithHeldLock({
+		lock: await acquireWorkspaceExecutionLock(ledgerRoot, record.identity.id),
+		run: async () => {
+			if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
+				fresh: true,
+				processId: null,
+				supervisionId: record.processSupervisionId
+			})).length > 0) throw failure("workspace_execution_quiescence_unconfirmed");
+			const reconciled = await finishWorkspaceRetirement(record, path);
+			if (reconciled.status === "released") await restoreReleasedWorkspace(reconciled, path);
+		}
+	});
+	else if (record.status === "released") await restoreReleasedWorkspace(record, path);
+	else if (record.status === "preparing" || record.status === "restoring") {
+		if (record.status === "preparing" && hasNativeIdentity) throw failure("workspace_creation_incomplete");
+		if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
+			fresh: true,
+			processId: null,
+			supervisionId: record.processSupervisionId
+		})).length > 0) throw failure("workspace_preparation_quiescence_unconfirmed");
+		await finishWorkspacePreparation(record, path);
+	} else if (record.status === "in_use") await runWithHeldLock({
+		lock: await acquireWorkspaceExecutionLock(ledgerRoot, record.identity.id),
+		run: async () => {
+			if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
+				fresh: true,
+				processId: null,
+				supervisionId: record.processSupervisionId
+			})).length > 0) throw failure("workspace_execution_quiescence_unconfirmed");
+			await verifyRetainedWorkspace(record);
+			await writeManifest(path, {
+				...record,
+				status: "completed"
+			}, "r+");
+		}
+	});
+}
+async function finishWorkspacePreparation(manifest, recordPath, pristineCreation = false) {
+	const { boundaryRoot, workingDirectory, sourceWorkingDirectory: source, baseCommit } = manifest;
+	await ensureDirectory(boundaryRoot);
+	const repository = join(boundaryRoot, "repository.git");
+	if (source && baseCommit) {
+		if (!await inspectPath(repository)) {
+			if ((await readdir(boundaryRoot)).length > 0) throw failure("workspace_creation_incomplete");
+			await git(boundaryRoot, [
+				"init",
+				"--bare",
+				"--template=",
+				`--object-format=${baseCommit.length === 64 ? "sha256" : "sha1"}`,
+				repository
+			], manifest.processSupervisionId);
+		}
+		await canonicalDirectory(repository);
+		await assertPrivateMetadata(repository);
+		if ((await readdir(boundaryRoot)).some((name) => name !== "repository.git" && name !== "worktree")) throw failure("workspace_creation_incomplete");
+		if (await inspectPath(join(repository, "objects", "info", "alternates"))) throw failure("workspace_git_metadata_changed");
+		if (!await inspectPath(workingDirectory)) {
+			await git(boundaryRoot, [
+				`--git-dir=${repository}`,
+				"fetch",
+				"--no-tags",
+				"--no-recurse-submodules",
+				"--depth=1",
+				"--no-write-fetch-head",
+				source,
+				`${baseCommit}:refs/openmeld/base`
+			], manifest.processSupervisionId);
+			await git(boundaryRoot, [
+				`--git-dir=${repository}`,
+				"worktree",
+				"add",
+				"--detach",
+				workingDirectory,
+				baseCommit
+			], manifest.processSupervisionId);
+		}
+		await verifyOwnedRepository(manifest);
+		await finishMissingCheckoutFiles(manifest);
+		if (!await isUnchangedCheckout(manifest)) throw failure("workspace_creation_incomplete");
+	} else if ((await readdir(boundaryRoot)).length > 0) throw failure("workspace_creation_incomplete");
+	await writeManifest(recordPath, {
+		...manifest,
+		status: "completed",
+		pristineFingerprint: pristineCreation ? await fingerprintDirectory(boundaryRoot) : void 0
+	}, "r+");
+}
+async function readExecutionContextWorkspace(input) {
+	if (!executionContextAssignmentSchema.shape.id.safeParse(input.contextId).success) throw failure("invalid_workspace_context");
+	if (!await inspectPath(input.ledgerRootPath)) return null;
+	const ledgerRoot = await canonicalDirectory(input.ledgerRootPath);
+	const recordsRoot = join(ledgerRoot, "execution-context-workspace-records");
+	if (!await inspectPath(recordsRoot)) return null;
+	await canonicalDirectory(recordsRoot);
+	const manifest = await readManifest(join(recordsRoot, `${input.contextId}.json`));
+	if (!manifest) return null;
+	const boundaryRoot = join(await canonicalDirectory(join(ledgerRoot, "execution-context-workspaces")), input.contextId);
+	const workingDirectory = manifest.identity.access !== "space_context" ? join(boundaryRoot, "worktree") : boundaryRoot;
+	if (manifest.identity.id !== input.contextId || manifest.boundaryRoot !== boundaryRoot || manifest.workingDirectory !== workingDirectory) throw failure("workspace_identity_mismatch");
+	if (manifest.status === "released" || manifest.status === "retiring") return workspaceResult(manifest);
+	if (manifest.status === "preparing" || manifest.status === "restoring") throw failure("workspace_creation_incomplete");
+	return await verifyRetainedWorkspace(manifest);
+}
+async function markExecutionContextWorkspaceInUse(input) {
+	const context = input.context;
+	if (!context || context.workspace !== "isolated" || context.access === "space_context") return null;
+	const root = await canonicalDirectory(input.ledgerRootPath);
+	const lock = await acquireWorkspaceExecutionLock(root, context.id);
+	const processSupervisionId = randomUUID();
+	try {
+		await withWorkspaceLock(root, context.id, async () => {
+			await readExecutionContextWorkspace({
+				ledgerRootPath: root,
+				contextId: context.id
+			});
+			const path = join(root, "execution-context-workspace-records", `${context.id}.json`);
+			const record = await readManifest(path);
+			if (record?.status !== "completed") throw failure("workspace_execution_quiescence_unconfirmed");
+			await writeManifest(path, {
+				...record,
+				status: "in_use",
+				processSupervisionId
+			}, "r+");
+		});
+		return {
+			lock,
+			processSupervisionId
+		};
+	} catch (error) {
+		await releaseLock(lock);
+		throw error;
+	}
+}
+async function releaseExecutionContextWorkspace(input) {
+	const root = await canonicalDirectory(input.ledgerRootPath);
+	try {
+		return await withWorkspaceLock(root, input.context.id, async () => {
+			await readExecutionContextWorkspace({
+				ledgerRootPath: root,
+				contextId: input.context.id
+			});
+			const path = join(root, "execution-context-workspace-records", `${input.context.id}.json`);
+			let record = await readManifest(path);
+			if (!(record && ["completed", "in_use"].includes(record.status))) throw failure("workspace_creation_incomplete");
+			if (!input.ownedProcessesQuiescent) return {
+				status: "retained",
+				reason: "execution_quiescence_unconfirmed"
+			};
+			const completed = {
+				...record,
+				status: "completed"
+			};
+			await writeManifest(path, completed, "r+");
+			record = await removePristineRetirement(completed, path);
+			if (record.retirement) return {
+				status: "retained",
+				reason: "cleanup_incomplete"
+			};
+			if (!record.pristineFingerprint) return {
+				status: "retained",
+				reason: "baseline_unverified"
+			};
+			await verifyRetainedWorkspace(record);
+			if (await fingerprintDirectory(record.boundaryRoot) !== record.pristineFingerprint) return {
+				status: "retained",
+				reason: "workspace_changed"
+			};
+			if (record.sourceWorkingDirectory && !await sourceHasCommit(record)) return {
+				status: "retained",
+				reason: "source_commit_unavailable"
+			};
+			return (await retirePristineWorkspace(record, path)).status === "released" ? { status: "released" } : {
+				status: "retained",
+				reason: "workspace_changed"
+			};
+		});
+	} finally {
+		if (input.use) await releaseLock(input.use.lock);
+	}
+}
+async function retirePristineWorkspace(record, recordPath) {
+	if (!record.pristineFingerprint || await fingerprintDirectory(record.boundaryRoot) !== record.pristineFingerprint) throw failure("workspace_release_incomplete");
+	const retiring = {
+		...record,
+		status: "retiring",
+		retirement: {
+			path: `${recordPath}.retired-${randomUUID()}`,
+			pristineFingerprint: record.pristineFingerprint
+		}
+	};
+	await writeManifest(recordPath, retiring, "r+");
+	return await finishWorkspaceRetirement(retiring, recordPath);
+}
+async function finishWorkspaceRetirement(record, recordPath) {
+	const retirement = record.retirement;
+	if (!retirement) throw failure("workspace_release_incomplete");
+	const live = await inspectPath(record.boundaryRoot);
+	const retired = await inspectPath(retirement.path);
+	if (live && retired || !(live || retired)) throw failure("workspace_release_incomplete");
+	if (live) await moveWorkspace(record.boundaryRoot, retirement.path);
+	if (await fingerprintDirectory(retirement.path) !== retirement.pristineFingerprint) {
+		if (await inspectPath(record.boundaryRoot)) throw failure("workspace_release_incomplete");
+		await moveWorkspace(retirement.path, record.boundaryRoot);
+		const retained = {
+			...record,
+			retirement: void 0,
+			status: "completed"
+		};
+		await writeManifest(recordPath, retained, "r+");
+		return retained;
+	}
+	const released = {
+		...record,
+		status: "released"
+	};
+	await writeManifest(recordPath, released, "r+");
+	return await removePristineRetirement(released, recordPath);
+}
+async function removePristineRetirement(record, recordPath) {
+	const retirement = record.retirement;
+	if (!retirement) return record;
+	if (await inspectPath(retirement.path)) {
+		if (await fingerprintDirectory(retirement.path) !== retirement.pristineFingerprint) return record;
+		await rm(retirement.path, { recursive: true });
+	}
+	const removed = {
+		...record,
+		retirement: void 0
+	};
+	await writeManifest(recordPath, removed, "r+");
+	return removed;
+}
+async function restoreReleasedWorkspace(record, recordPath) {
+	if (record.sourceWorkingDirectory && !await sourceHasCommit(record)) throw failure("workspace_base_commit_unavailable");
+	if (await inspectPath(record.boundaryRoot)) throw failure("workspace_already_exists");
+	const restoring = {
+		...record,
+		status: "restoring",
+		processSupervisionId: randomUUID()
+	};
+	await writeManifest(recordPath, restoring, "r+");
+	await finishWorkspacePreparation(restoring, recordPath, true);
+}
+async function sourceHasCommit(record) {
+	if (!(record.sourceWorkingDirectory && record.baseCommit)) return false;
+	try {
+		await git(record.sourceWorkingDirectory, [
+			"cat-file",
+			"-e",
+			`${record.baseCommit}^{commit}`
+		]);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function isUnchangedCheckout(record) {
+	return await git(record.workingDirectory, ["rev-parse", "HEAD"]) === record.baseCommit && await git(record.workingDirectory, [
+		"status",
+		"--porcelain",
+		"--untracked-files=all",
+		"--ignored"
+	]) === "";
+}
+async function finishMissingCheckoutFiles(record) {
+	if (await git(record.workingDirectory, ["rev-parse", "HEAD"]) !== record.baseCommit) throw failure("workspace_creation_incomplete");
+	if ((await git(record.workingDirectory, [
+		"ls-files",
+		"-v",
+		"-z"
+	])).split("\0").some((entry) => entry && !entry.startsWith("H "))) throw failure("workspace_creation_incomplete");
+	const status = await git(record.workingDirectory, [
+		"status",
+		"--porcelain",
+		"-z",
+		"--untracked-files=all",
+		"--ignored"
+	]);
+	if (!status) return;
+	const changes = status.split("\0").filter(Boolean);
+	if (changes.some((entry) => !entry.startsWith(" D "))) throw failure("workspace_creation_incomplete");
+	const paths = changes.map((entry) => entry.slice(3));
+	for (let offset = 0; offset < paths.length; offset += 100) await git(record.workingDirectory, [
+		"checkout-index",
+		"--",
+		...paths.slice(offset, offset + 100)
+	], record.processSupervisionId);
+}
+async function fingerprintDirectory(root) {
+	const hash = createHash("sha256");
+	const visit = async (directory) => {
+		for (const name of (await readdir(directory)).sort()) {
+			const path = join(directory, name);
+			const info = await lstat(path);
+			hash.update(JSON.stringify([
+				relative(root, path),
+				info.mode,
+				info.nlink
+			]));
+			if (info.isSymbolicLink()) hash.update(JSON.stringify(await readlink(path)));
+			else if (info.isDirectory()) await visit(path);
+			else if (info.isFile() && info.nlink === 1) {
+				hash.update(String(info.size));
+				hash.update(await fingerprintFile(path));
+			} else throw failure("workspace_git_metadata_changed");
+		}
+	};
+	await visit(root);
+	return hash.digest("hex");
+}
+async function fingerprintFile(path) {
+	const hash = createHash("sha256");
+	const file = await open(path, "r");
+	try {
+		const buffer = Buffer.alloc(64 * 1024);
+		for (;;) {
+			const { bytesRead } = await file.read(buffer);
+			if (!bytesRead) break;
+			hash.update(buffer.subarray(0, bytesRead));
+		}
+	} finally {
+		await file.close();
+	}
+	return hash.digest("hex");
+}
+async function withWorkspaceLock(root, contextId, run) {
+	if (!executionContextAssignmentSchema.shape.id.safeParse(contextId).success) throw failure("invalid_workspace_context");
+	return await runWithHeldLock({
+		lock: await acquireLock({
+			openMeldProfileId: "execution-context-workspaces",
+			key: contextId,
+			pathResolution: { env: { OPENMELD_HOME: root } }
+		}),
+		run
+	});
+}
+async function verifyRetainedWorkspace(manifest) {
+	await canonicalDirectory(manifest.boundaryRoot);
+	await canonicalDirectory(manifest.workingDirectory);
+	if (manifest.sourceWorkingDirectory) await verifyOwnedRepository(manifest);
+	return workspaceResult(manifest);
+}
+async function acquireWorkspaceExecutionLock(root, contextId) {
+	return await acquireLock({
+		openMeldProfileId: "execution-context-workspaces",
+		key: `${contextId}-execution`,
+		pathResolution: { env: { OPENMELD_HOME: root } }
+	});
+}
+function workspaceResult(manifest) {
+	return {
+		workingDirectory: manifest.workingDirectory,
+		boundaryRoot: manifest.boundaryRoot,
+		...manifest.sourceWorkingDirectory ? { sourceWorkingDirectory: manifest.sourceWorkingDirectory } : {},
+		...manifest.baseCommit ? { baseCommit: manifest.baseCommit } : {}
+	};
+}
+function assertSourceAllowed(source, policy) {
+	if (policy.mode === "only_selected_folders" && !policy.folders.some((folder) => within(source, folder))) throw failure("workspace_outside_computer_policy");
+	if (policy.mode === "block_selected_folders" && policy.folders.some((folder) => within(source, folder) || within(folder, source))) throw failure("workspace_overlaps_blocked_folder");
+}
+async function resolveSourceCommit(source) {
+	if (!await inspectPath(join(source, ".git"))) throw failure("project_repository_required");
+	if (await realpath(await git(source, ["rev-parse", "--show-toplevel"])) !== source) throw failure("project_repository_root_required");
+	const commit = await git(source, [
+		"rev-parse",
+		"--verify",
+		"HEAD^{commit}"
+	]).catch((cause) => {
+		throw new Error("execution_context.project_commit_required", { cause });
+	});
+	if (!COMMIT_PATTERN.test(commit)) throw failure("project_commit_required");
+	return commit;
+}
+async function verifyOwnedRepository(manifest) {
+	const repository = join(manifest.boundaryRoot, "repository.git");
+	await canonicalDirectory(repository);
+	await assertPrivateMetadata(repository);
+	if (await inspectPath(join(repository, "objects", "info", "alternates"))) throw failure("workspace_git_metadata_changed");
+	const gitFile = join(manifest.workingDirectory, ".git");
+	const gitFileInfo = await inspectPath(gitFile);
+	if (!gitFileInfo?.isFile() || gitFileInfo.size > 4096) throw failure("workspace_git_metadata_changed");
+	const expectedGitDir = join(repository, "worktrees", "worktree");
+	if ((await readFile(gitFile, "utf8")).trim() !== `gitdir: ${expectedGitDir}`) throw failure("workspace_git_metadata_changed");
+	if (await realpath(join(expectedGitDir, (await readFile(join(expectedGitDir, "commondir"), "utf8")).trim())) !== repository) throw failure("workspace_git_metadata_changed");
+	if (await git(manifest.boundaryRoot, [
+		`--git-dir=${repository}`,
+		"rev-parse",
+		"--verify",
+		"refs/openmeld/base^{commit}"
+	]) !== manifest.baseCommit) throw failure("workspace_base_commit_changed");
+}
+async function assertPrivateMetadata(path) {
+	for (const entry of await readdir(path, { withFileTypes: true })) {
+		if (entry.isSymbolicLink()) throw failure("workspace_is_symlink");
+		if (entry.isDirectory()) await assertPrivateMetadata(join(path, entry.name));
+		else if ((await lstat(join(path, entry.name))).nlink !== 1) throw failure("workspace_git_metadata_changed");
+	}
+}
+async function readManifest(path) {
+	const info = await inspectPath(path);
+	if (!info) return null;
+	if (!info.isFile() || info.size > 32768) throw failure("workspace_record_invalid");
+	let content;
+	try {
+		content = JSON.parse(await readFile(path, "utf8"));
+	} catch {
+		throw failure("workspace_record_invalid");
+	}
+	const parsed = manifestSchema.safeParse(content);
+	if (!parsed.success) throw failure("workspace_record_invalid");
+	const retirement = parsed.data.retirement;
+	const prefix = `${path}.retired-`;
+	if (parsed.data.status === "retiring" && !retirement || retirement && !(retirement.path.startsWith(prefix) && z.uuid().safeParse(retirement.path.slice(prefix.length)).success)) throw failure("workspace_record_invalid");
+	return parsed.data;
+}
+async function writeManifest(path, manifest, flags) {
+	const temporaryPath = flags === "wx" ? path : `${path}.${randomUUID()}.tmp`;
+	const file = await open(temporaryPath, "wx", 384);
+	try {
+		await file.writeFile(`${JSON.stringify({
+			...manifest,
+			version: 2
+		})}\n`, "utf8");
+		await file.sync();
+	} finally {
+		await file.close();
+	}
+	if (flags !== "wx") await rename(temporaryPath, path);
+	await syncDirectory(dirname(path));
+}
+async function moveWorkspace(from, to) {
+	await rename(from, to);
+	await syncDirectory(dirname(from));
+	await syncDirectory(dirname(to));
+}
+async function inspectPath(path) {
+	const info = await lstat(path).catch((error) => {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	});
+	if (info?.isSymbolicLink()) throw failure("workspace_is_symlink");
+	return info;
+}
+async function canonicalDirectory(path) {
+	if (!(await inspectPath(path))?.isDirectory()) throw failure("workspace_directory_unavailable");
+	return await realpath(path);
+}
+async function ensureDirectory(path, recursive = false) {
+	await inspectPath(path);
+	await mkdir(path, {
+		recursive,
+		mode: 448
+	}).catch((error) => {
+		if (error.code !== "EEXIST") throw error;
+	});
+	return await canonicalDirectory(path);
+}
+function within(child, parent) {
+	const path = relative(resolve(parent), child);
+	return path === "" || path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path);
+}
+const GIT_SETTINGS = {
+	"core.hooksPath": "/dev/null",
+	"core.attributesFile": "/dev/null",
+	"core.fsmonitor": "false",
+	"credential.helper": "",
+	"protocol.allow": "never",
+	"protocol.file.allow": "always",
+	"fetch.recurseSubmodules": "false",
+	"submodule.recurse": "false",
+	"uploadpack.packObjectsHook": "",
+	"gc.auto": "0",
+	"maintenance.auto": "false"
+};
+async function git(cwd, args, processSupervisionId) {
+	const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_")));
+	Object.assign(env, {
+		...processSupervisionId ? { OPENMELD_PROCESS_SUPERVISION_ID: processSupervisionId } : {},
+		GIT_CONFIG_NOSYSTEM: "1",
+		GIT_CONFIG_SYSTEM: "/dev/null",
+		GIT_CONFIG_GLOBAL: "/dev/null",
+		GIT_ATTR_NOSYSTEM: "1",
+		GIT_NO_REPLACE_OBJECTS: "1",
+		GIT_NO_LAZY_FETCH: "1",
+		GIT_ALLOW_PROTOCOL: "file",
+		GIT_TERMINAL_PROMPT: "0",
+		GIT_CONFIG_COUNT: String(Object.keys(GIT_SETTINGS).length)
+	});
+	for (const [index, [key, value]] of Object.entries(GIT_SETTINGS).entries()) {
+		env[`GIT_CONFIG_KEY_${index}`] = key;
+		env[`GIT_CONFIG_VALUE_${index}`] = value;
+	}
+	return (await execFileAsync("git", args, {
+		cwd,
+		env,
+		encoding: "utf8",
+		timeout: 3e4,
+		maxBuffer: 1024 * 1024
+	})).stdout.trimEnd();
+}
+function failure(code) {
+	return /* @__PURE__ */ new Error(`execution_context.${code}`);
+}
+//#endregion
+//#region src/local-service/dispatch/execution-context-session.ts
+function executionContextLedgerPolicy(context) {
+	return context ? "throw" : "backup_and_reset";
+}
+function executionContextResourceScope(context) {
+	if (!context) return;
+	if (context.access === "space_context") return "none";
+	if (context.workspace === "isolated") return context.access === "workspace" ? "isolated" : "isolated_read";
+	return context.access === "workspace" ? "exclusive" : "read_only";
+}
+function executionContextFileAccessBoundary(input) {
+	const within = (child, parent) => {
+		const path = relative(parent, child);
+		return path === "" || path !== ".." && !path.startsWith("../") && !isAbsolute(path);
+	};
+	const policy = input.policy;
+	if (input.context.access !== "space_context") {
+		const policySource = input.taskWorkspace?.sourceWorkingDirectory ?? input.workingDirectory;
+		if (policy.mode === "only_selected_folders" && !policy.folders.some((folder) => within(policySource, folder))) throw new Error("execution_context.workspace_outside_computer_policy");
+		if (policy.mode === "block_selected_folders" && policy.folders.some((folder) => within(policySource, folder) || within(folder, policySource))) throw new Error("execution_context.workspace_overlaps_blocked_folder");
+	}
+	return {
+		mode: "only_selected_folders",
+		folders: [input.taskWorkspace?.boundaryRoot ?? input.workingDirectory],
+		revision: policy.revision,
+		updatedAtMs: policy.updatedAtMs,
+		executionContextAccess: input.context.access
+	};
+}
+async function executionContextWorkingDirectory(input) {
+	if (!input.context) return input.currentWorkingDirectory;
+	if (input.context.workspace === "current") return await realpath(input.currentWorkingDirectory);
+	await mkdir(input.ledgerRootPath, {
+		recursive: true,
+		mode: 448
+	});
+	const root = join(await realpath(input.ledgerRootPath), "execution-context-workspaces");
+	await mkdir(root, {
+		recursive: true,
+		mode: 448
+	});
+	if ((await lstat(root)).isSymbolicLink()) throw new Error("execution_context.workspace_is_symlink");
+	const path = join(root, input.context.id);
+	await mkdir(path, {
+		recursive: true,
+		mode: 448
+	});
+	if ((await lstat(path)).isSymbolicLink()) throw new Error("execution_context.workspace_is_symlink");
+	return await realpath(path);
+}
+async function prepareExecutionContextConversation(input) {
+	if (!input.context) return input.unscopedNativeConversationId;
+	const nativeId = input.context.nativeConversationId;
+	if (input.context.runtimeWorkspaceFingerprint && input.context.runtimeWorkspaceFingerprint !== buildRuntimeWorkspaceFingerprint(input.workingDirectory)) throw new Error("execution_context.workspace_changed");
+	if (nativeId && input.existingNativeConversationId && nativeId !== input.existingNativeConversationId) throw new Error("execution_context.native_identity_mismatch");
+	if (nativeId || input.existingNativeConversationId) return nativeId ?? input.existingNativeConversationId;
+	const source = input.context.forkSource;
+	if (!source) return null;
+	const sourceWorkspace = source.workspace === "isolated" ? await readExecutionContextWorkspace({
+		ledgerRootPath: input.ledgerRootPath,
+		contextId: source.contextId
+	}) : null;
+	const sourceDirectory = sourceWorkspace?.workingDirectory ?? await realpath(source.workspace === "current" ? input.currentWorkingDirectory : sourceWorkspace?.workingDirectory ?? join(input.ledgerRootPath, "execution-context-workspaces", source.contextId));
+	if (buildRuntimeWorkspaceFingerprint(sourceDirectory) !== source.runtimeWorkspaceFingerprint) throw new Error("execution_context.fork_source_workspace_changed");
+	const result = await runAgentSessionForkOperation({
+		ledgerRootPath: input.ledgerRootPath,
+		request: {
+			kind: "execution_context",
+			operationId: input.context.id,
+			sourceNativeSessionId: source.nativeConversationId,
+			completedHistoryId: source.completedHistoryId,
+			workingDirectory: input.workingDirectory
+		},
+		execute: async () => {
+			if (input.agentControllerRef === "builtin:claude-code") {
+				if (!(await readBoundedClaudeHistory(source.nativeConversationId)).find((message) => message.uuid === source.completedHistoryId && isCompletedAssistantMessage(message))) throw new Error("execution_context.fork_checkpoint_unavailable");
+				return { childNativeSessionId: (await forkSession(source.nativeConversationId, { upToMessageId: source.completedHistoryId })).sessionId };
+			}
+			if (input.agentControllerRef === "builtin:codex" && input.launchContract) return { childNativeSessionId: (await forkCodexAppServerThread({
+				computerFileAccessBoundary: input.computerFileAccessBoundary ?? void 0,
+				codexTimeoutMs: 3e4,
+				codexWorkdir: sourceDirectory,
+				launchContract: input.launchContract,
+				sourceThreadId: source.nativeConversationId,
+				sourceCompletedTurnId: source.completedHistoryId,
+				targetWorkingDirectory: input.workingDirectory,
+				onRuntimeEvent: input.onRuntimeEvent,
+				env: { OPENMELD_PROCESS_SUPERVISION_ID: input.processSupervisionId }
+			})).threadId };
+			throw new Error("execution_context.fork_unsupported");
+		}
+	});
+	if (result.status !== "completed") throw new Error(`${result.reasonCode}: ${result.message}`);
+	return result.childNativeSessionId;
+}
+async function captureExecutionContextCompletion(input) {
+	if (!(input.context && input.nativeConversationId)) return;
+	const completion = {
+		contextId: input.context.id,
+		nativeConversationId: input.nativeConversationId,
+		runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(input.workingDirectory)
+	};
+	if (!input.providerSucceeded) return completion;
+	if (input.agentControllerRef === "builtin:codex") return {
+		...completion,
+		...input.completedTurnId ? { completedHistoryId: input.completedTurnId } : {}
+	};
+	if (input.agentControllerRef === "builtin:claude-code") try {
+		const completed = (await readBoundedClaudeHistory(input.nativeConversationId)).findLast(isCompletedAssistantMessage);
+		if (completed) return {
+			...completion,
+			completedHistoryId: completed.uuid
+		};
+	} catch {
+		console.warn("[execution_context.checkpoint_unavailable]", { contextId: input.context.id });
+	}
+	return completion;
+}
+async function readBoundedClaudeHistory(sessionId) {
+	const info = await getSessionInfo(sessionId);
+	if (!info || info.fileSize === void 0 || info.fileSize > 8 * 1024 * 1024) throw new Error("execution_context.history_unavailable_or_too_large");
+	return await getSessionMessages(sessionId);
+}
+function isCompletedAssistantMessage(value) {
+	return value.type === "assistant" && typeof value.message === "object" && value.message !== null && "stop_reason" in value.message && value.message.stop_reason === "end_turn";
+}
+//#endregion
 //#region src/local-service/dispatch/prompt-trace.ts
 const OMITTED_ORGANIZATION_POLICY = "[organization-protected information policy omitted]";
 function buildDispatchPromptTrace(input) {
@@ -20861,6 +21637,7 @@ function enqueueDispatchDeliverFrame(input) {
 		presenter: input.presenter
 	});
 	const enqueueResult = input.localExecutionSlots.request({
+		resourceScope: executionContextResourceScope(deliverRequest.payload.executionContext),
 		adapterId: queueLogMeta.adapterId,
 		attemptId: correlation.attemptId,
 		controllerKey: queueLogMeta.controllerKey,
@@ -21430,6 +22207,15 @@ async function handleDispatchDeliverFrame(input) {
 	let runtimeOpenClawBinding;
 	let agentControllerConversationOverride = null;
 	let dispatchSpaceActionContext = null;
+	let nativeQuiescence;
+	let workspaceUse = null;
+	const workspaceProcesses = /* @__PURE__ */ new Map();
+	const observeWorkspaceProcess = (event) => observeExecutionContextWorkspaceProcess(workspaceProcesses, event);
+	let completedTurnId = null;
+	let completedTurnConversationId = null;
+	let completedNativeResult = null;
+	let executionContextCompletion;
+	const invalidStateStrategy = executionContextLedgerPolicy(parsedTask.executionContext);
 	try {
 		dispatchRuntimeContext = await resolveDispatchWorkingFolderRuntimeContext({
 			controllerSnapshot: input.deliverRequest.payload.controllerSnapshot,
@@ -21459,6 +22245,20 @@ async function handleDispatchDeliverFrame(input) {
 			targetProfileId: parsedTask.targetProfileId
 		});
 		effectiveRuntimeContext = runtimePreparation.effectiveRuntimeContext;
+		const originalWorkingDirectory = effectiveRuntimeContext.providerRuntimeWorkingDirectory;
+		await verifyDispatchLegacyContextAssociation({
+			parsedTask,
+			ledgerPaths: input.ledgerPaths,
+			originalWorkingDirectory
+		});
+		const taskWorkspace = await prepareDispatchTaskWorkspace({
+			parsedTask,
+			ledgerRootPath: input.ledgerPaths.rootDirPath,
+			currentWorkingDirectory: originalWorkingDirectory,
+			computerFileAccessStorePath: input.computerFileAccessStorePath
+		});
+		effectiveRuntimeContext = { providerRuntimeWorkingDirectory: taskWorkspace.workingDirectory };
+		runtimePreparation.effectiveRuntimeContext = effectiveRuntimeContext;
 		computerFileAccessBoundary = await resolveDispatchComputerFileAccess({
 			computerFileAccessStorePath: input.computerFileAccessStorePath,
 			onInteractionRequest,
@@ -21466,7 +22266,8 @@ async function handleDispatchDeliverFrame(input) {
 			presenter: input.presenter,
 			routeConfig,
 			runtimeControllerSupport,
-			runtimePreparation
+			runtimePreparation,
+			taskWorkspace
 		});
 		const [sendTargetReference, imageAttachmentPreparation] = await Promise.all([bootstrapContext.sendTargetReferencePromise, materializeDispatchImageAttachments({
 			agentControllerRef: parsedTask.agentControllerRef,
@@ -21520,6 +22321,7 @@ async function handleDispatchDeliverFrame(input) {
 			contextStore: input.contextStore,
 			ledgerPaths: input.ledgerPaths,
 			parsedTask,
+			originalWorkingDirectory,
 			runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(activeRuntimeContext.providerRuntimeWorkingDirectory)
 		});
 		contextLookupKey = dispatchLedgerContext.contextLookupKey;
@@ -21529,6 +22331,27 @@ async function handleDispatchDeliverFrame(input) {
 			agentControllerConversationId: parsedTask.agentControllerConversationId,
 			existingContextId
 		});
+		workspaceUse = await markExecutionContextWorkspaceInUse({
+			context: parsedTask.executionContext,
+			ledgerRootPath: input.ledgerPaths.rootDirPath
+		});
+		runtimeEnvOverrides = {
+			...runtimeEnvOverrides,
+			OPENMELD_PROCESS_SUPERVISION_ID: workspaceUse?.processSupervisionId
+		};
+		effectiveAgentControllerConversationId = await prepareExecutionContextConversation({
+			computerFileAccessBoundary,
+			unscopedNativeConversationId: effectiveAgentControllerConversationId,
+			context: parsedTask.executionContext,
+			currentWorkingDirectory: originalWorkingDirectory,
+			workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
+			existingNativeConversationId: existingContextId,
+			ledgerRootPath: input.ledgerPaths.rootDirPath,
+			agentControllerRef: parsedTask.agentControllerRef,
+			launchContract: routeConfig?.launchContract,
+			onRuntimeEvent: observeWorkspaceProcess,
+			processSupervisionId: workspaceUse?.processSupervisionId
+		});
 		latestScopedExecutionState = dispatchLedgerContext.latestScopedExecutionState;
 		ledgerIo = dispatchLedgerContext.ledgerIo;
 		input.inflightDispatchMetaByTaskId.set(parsedTask.taskId, { agentContextLookupKey: contextLookupKey });
@@ -21586,7 +22409,8 @@ async function handleDispatchDeliverFrame(input) {
 			profileOwnerName: input.profileOwnerName,
 			profileOwnerUserId: input.profileOwnerUserId,
 			sendTargetReference,
-			shouldInjectBootstrap: bootstrapPlan.shouldInject
+			shouldInjectBootstrap: bootstrapPlan.shouldInject,
+			taskWorkspace
 		}), skillPreflight);
 		runtimePromptPlan = computerFileAccessBoundary ? applyComputerFileAccessAwareness({
 			policy: computerFileAccessBoundary,
@@ -21735,7 +22559,7 @@ async function handleDispatchDeliverFrame(input) {
 				});
 			}
 			withLedgerStateTransaction({
-				invalidStateStrategy: "backup_and_reset",
+				invalidStateStrategy,
 				io: providerConversationLedgerIo,
 				mutate: (state) => ({
 					nextState: commitResolvedAgentContext({
@@ -21784,6 +22608,8 @@ async function handleDispatchDeliverFrame(input) {
 		};
 		const syncProviderTurnAcceptedLifecycle = (event) => {
 			if (event.phase !== "provider_turn_accepted") return;
+			completedTurnId = event.turnId;
+			completedTurnConversationId = event.agentControllerConversationId;
 			if (providerAdmissionOwnsRunningLifecycle && runtimeLifecyclePhase !== "running") transitionDispatchLifecycle({ phase: "running" });
 			emitDispatchLocalPhaseJournalEvent({
 				deliverRequest: input.deliverRequest,
@@ -21796,6 +22622,129 @@ async function handleDispatchDeliverFrame(input) {
 				result: "accepted"
 			});
 		};
+		const onNativeTurnStarted = () => {
+			completedTurnId = null;
+			completedTurnConversationId = null;
+			executionContextCompletion = void 0;
+			completedNativeResult = null;
+		};
+		const onNativeTurnCompleted = (result) => {
+			completedNativeResult = result;
+		};
+		const onRuntimeEvent = routeReasoningEvents(observeReasoning, (event) => {
+			observeWorkspaceProcess(event);
+			syncAgentControllerConversationOccupancyLifecycle(event);
+			syncProviderTurnAcceptedLifecycle(event);
+			if (event.phase === "tool_activity") {
+				agentToolActivitySequence += 1;
+				emitDispatchAgentToolActivityFrame({
+					currentSocketRef,
+					daemonSessionId: input.daemonSessionId,
+					deliverRequest: input.deliverRequest,
+					event,
+					parsedTask,
+					presenter: input.presenter,
+					sequence: agentToolActivitySequence
+				});
+			}
+			if (event.phase === "provider_conversation_observed") recordProviderConversationObservation({
+				agentControllerConversation: event.agentControllerConversation ?? null,
+				agentControllerConversationId: event.agentControllerConversationId,
+				source: "runtime_event"
+			});
+			if (event.phase === "provider_usage_limits_observed" && routeConfig?.launchContract) {
+				const agentId = runtimeControllerSupport.runtimeAdapterMatch.adapterId;
+				const launchContract = routeConfig.launchContract;
+				usageObservationAuthPromise ??= probeAgentControllerUsageObservationAuth({
+					agentId,
+					launchContract
+				});
+				usageObservationAuthPromise.then((authSnapshot) => recordRuntimeProviderUsageLimits({
+					agentId,
+					authSnapshot,
+					launchContract,
+					usageLimits: event.usageLimits
+				})).then((retained) => {
+					if (retained) return;
+					emitRunLine({
+						presenter: input.presenter,
+						code: "daemon.run.provider_usage_limits_observation_ignored",
+						text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
+						payload: {
+							agentControllerRef: parsedTask.agentControllerRef,
+							dispatchId: parsedTask.dispatchId,
+							observedLimitKeys: event.usageLimits.map((limit) => limit.key),
+							reasonCode: "provider_account_unconfirmed",
+							targetProfileId: parsedTask.targetProfileId,
+							taskId: parsedTask.taskId
+						}
+					});
+				}).catch((error) => {
+					emitRunLine({
+						presenter: input.presenter,
+						code: "daemon.run.provider_usage_limits_observation_ignored",
+						text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
+						payload: {
+							agentControllerRef: parsedTask.agentControllerRef,
+							dispatchId: parsedTask.dispatchId,
+							errorMessage: toErrorMessage$10(error),
+							observedLimitKeys: event.usageLimits.map((limit) => limit.key),
+							targetProfileId: parsedTask.targetProfileId,
+							taskId: parsedTask.taskId
+						}
+					});
+				});
+			}
+			if (!firstOutputEvidenceSent && (event.phase === "first_stdout" || event.phase === "first_stderr")) {
+				firstOutputEvidenceSent = true;
+				emitDispatchRuntimeEvidenceTransition({
+					currentSocketRef,
+					daemonSessionId: input.daemonSessionId,
+					deliverRequest: input.deliverRequest,
+					durationMs: Math.max(0, event.tsMs - runtimeStartedAtMs),
+					parsedTask,
+					phase: "first_output",
+					presenter: input.presenter
+				});
+			}
+			const controlRegistrySyncResult = syncRuntimeEventToInflightTaskControlRegistry({
+				event,
+				registry: input.inflightTaskControlRegistry,
+				taskId: parsedTask.taskId
+			});
+			if (controlRegistrySyncResult.updated) emitRunLine({
+				presenter: input.presenter,
+				code: "daemon.run.control_registry_synced",
+				text: `control registry synced for task ${parsedTask.taskId}`,
+				payload: {
+					dispatchId: parsedTask.dispatchId,
+					phase: event.phase,
+					processId: controlRegistrySyncResult.processId,
+					targetProfileId: parsedTask.targetProfileId,
+					taskId: parsedTask.taskId
+				}
+			});
+			if (event.phase === "process_spawned" || event.phase === "process_exit") emitDispatchLocalPhaseJournalEvent({
+				deliverRequest: input.deliverRequest,
+				metadata: buildProviderProcessJournalMetadata({
+					agentControllerRef: parsedTask.agentControllerRef,
+					event,
+					runtimeStartedAtMs
+				}),
+				parsedTask,
+				phase: event.phase,
+				result: event.phase === "process_exit" ? "exited" : "spawned"
+			});
+			emitProviderRuntimePhaseLine({
+				agentControllerRef: parsedTask.agentControllerRef,
+				dispatchId: parsedTask.dispatchId,
+				event,
+				presenter: input.presenter,
+				runtimeStartedAtMs,
+				targetProfileId: parsedTask.targetProfileId,
+				taskId: parsedTask.taskId
+			});
+		});
 		clearReasoning();
 		const runtimeExecutionPromise = Promise.resolve(runDispatchRuntimeExecution({
 			computerFileAccessBoundary,
@@ -21804,6 +22753,9 @@ async function handleDispatchDeliverFrame(input) {
 			io: ledgerIo,
 			ledgerPaths: input.ledgerPaths,
 			onInteractionRequest,
+			onNativeTurnStarted,
+			onNativeTurnCompleted,
+			onRuntimeEvent,
 			onPreview: (preview) => {
 				emitDispatchPreviewFrame({
 					attemptId: parsedTask.attemptId,
@@ -21817,119 +22769,6 @@ async function handleDispatchDeliverFrame(input) {
 					taskId: parsedTask.taskId
 				});
 			},
-			onRuntimeEvent: routeReasoningEvents(observeReasoning, (event) => {
-				syncAgentControllerConversationOccupancyLifecycle(event);
-				syncProviderTurnAcceptedLifecycle(event);
-				if (event.phase === "tool_activity") {
-					agentToolActivitySequence += 1;
-					emitDispatchAgentToolActivityFrame({
-						currentSocketRef,
-						daemonSessionId: input.daemonSessionId,
-						deliverRequest: input.deliverRequest,
-						event,
-						parsedTask,
-						presenter: input.presenter,
-						sequence: agentToolActivitySequence
-					});
-				}
-				if (event.phase === "provider_conversation_observed") recordProviderConversationObservation({
-					agentControllerConversation: event.agentControllerConversation ?? null,
-					agentControllerConversationId: event.agentControllerConversationId,
-					source: "runtime_event"
-				});
-				if (event.phase === "provider_usage_limits_observed" && routeConfig?.launchContract) {
-					const agentId = runtimeControllerSupport.runtimeAdapterMatch.adapterId;
-					const launchContract = routeConfig.launchContract;
-					usageObservationAuthPromise ??= probeAgentControllerUsageObservationAuth({
-						agentId,
-						launchContract
-					});
-					usageObservationAuthPromise.then((authSnapshot) => recordRuntimeProviderUsageLimits({
-						agentId,
-						authSnapshot,
-						launchContract,
-						usageLimits: event.usageLimits
-					})).then((retained) => {
-						if (retained) return;
-						emitRunLine({
-							presenter: input.presenter,
-							code: "daemon.run.provider_usage_limits_observation_ignored",
-							text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
-							payload: {
-								agentControllerRef: parsedTask.agentControllerRef,
-								dispatchId: parsedTask.dispatchId,
-								observedLimitKeys: event.usageLimits.map((limit) => limit.key),
-								reasonCode: "provider_account_unconfirmed",
-								targetProfileId: parsedTask.targetProfileId,
-								taskId: parsedTask.taskId
-							}
-						});
-					}).catch((error) => {
-						emitRunLine({
-							presenter: input.presenter,
-							code: "daemon.run.provider_usage_limits_observation_ignored",
-							text: `provider usage limit observation could not be retained for task ${parsedTask.taskId}`,
-							payload: {
-								agentControllerRef: parsedTask.agentControllerRef,
-								dispatchId: parsedTask.dispatchId,
-								errorMessage: toErrorMessage$10(error),
-								observedLimitKeys: event.usageLimits.map((limit) => limit.key),
-								targetProfileId: parsedTask.targetProfileId,
-								taskId: parsedTask.taskId
-							}
-						});
-					});
-				}
-				if (!firstOutputEvidenceSent && (event.phase === "first_stdout" || event.phase === "first_stderr")) {
-					firstOutputEvidenceSent = true;
-					emitDispatchRuntimeEvidenceTransition({
-						currentSocketRef,
-						daemonSessionId: input.daemonSessionId,
-						deliverRequest: input.deliverRequest,
-						durationMs: Math.max(0, event.tsMs - runtimeStartedAtMs),
-						parsedTask,
-						phase: "first_output",
-						presenter: input.presenter
-					});
-				}
-				const controlRegistrySyncResult = syncRuntimeEventToInflightTaskControlRegistry({
-					event,
-					registry: input.inflightTaskControlRegistry,
-					taskId: parsedTask.taskId
-				});
-				if (controlRegistrySyncResult.updated) emitRunLine({
-					presenter: input.presenter,
-					code: "daemon.run.control_registry_synced",
-					text: `control registry synced for task ${parsedTask.taskId}`,
-					payload: {
-						dispatchId: parsedTask.dispatchId,
-						phase: event.phase,
-						processId: controlRegistrySyncResult.processId,
-						targetProfileId: parsedTask.targetProfileId,
-						taskId: parsedTask.taskId
-					}
-				});
-				if (event.phase === "process_spawned" || event.phase === "process_exit") emitDispatchLocalPhaseJournalEvent({
-					deliverRequest: input.deliverRequest,
-					metadata: buildProviderProcessJournalMetadata({
-						agentControllerRef: parsedTask.agentControllerRef,
-						event,
-						runtimeStartedAtMs
-					}),
-					parsedTask,
-					phase: event.phase,
-					result: event.phase === "process_exit" ? "exited" : "spawned"
-				});
-				emitProviderRuntimePhaseLine({
-					agentControllerRef: parsedTask.agentControllerRef,
-					dispatchId: parsedTask.dispatchId,
-					event,
-					presenter: input.presenter,
-					runtimeStartedAtMs,
-					targetProfileId: parsedTask.targetProfileId,
-					taskId: parsedTask.taskId
-				});
-			}),
 			parsedTask,
 			instructionPrompt: runtimePromptPlan,
 			prompt: runtimePromptPlan.fallbackPrompt,
@@ -21940,6 +22779,7 @@ async function handleDispatchDeliverFrame(input) {
 			agentControllerConversationOverride
 		}));
 		const controllerTurnCompletion = runtimeExecutionPromise.then(() => void 0, () => void 0);
+		nativeQuiescence = controllerTurnCompletion;
 		let runtimeResult = await resolveRuntimeResultFromRuntimeOrCliSpaceAction({
 			contextIdForDispatch,
 			dispatchSpaceActionContext,
@@ -21960,6 +22800,10 @@ async function handleDispatchDeliverFrame(input) {
 			runtimeExecutionPromise
 		});
 		const structuredSpaceActionOutcome = await resolveRuntimeResultStructuredSpaceAction({
+			onInteractionRequest,
+			onNativeTurnStarted,
+			onNativeTurnCompleted,
+			onRuntimeEvent,
 			computerFileAccessBoundary,
 			controllerTurnCompletion,
 			inflightTaskControlRegistry: input.inflightTaskControlRegistry,
@@ -21999,7 +22843,7 @@ async function handleDispatchDeliverFrame(input) {
 			resolvedContextId: normalizeOptionalContextId(runtimeResult.contextResolution?.agentControllerConversationId ?? contextDelta?.agentControllerConversationId ?? null) ?? null
 		});
 		await withLedgerStateTransaction({
-			invalidStateStrategy: "backup_and_reset",
+			invalidStateStrategy,
 			io: ledgerIo,
 			mutate: (state) => {
 				let nextState = state;
@@ -22054,7 +22898,8 @@ async function handleDispatchDeliverFrame(input) {
 			runtimePromptPlan
 		});
 		const completedAgentControllerConversationOverride = agentControllerConversationOverride ?? null;
-		const buildCurrentResultPayload = () => {
+		const buildCurrentResultPayload = async () => {
+			if (parsedTask.executionContext) await controllerTurnCompletion;
 			const currentContextDelta = resolveDispatchContextDeltaFromRuntimeResult(runtimeResult.dispatchResult);
 			const observedAgentControllerConversation = resolveObservedDispatchAgentControllerConversation({
 				plannedAgentControllerConversation,
@@ -22062,6 +22907,16 @@ async function handleDispatchDeliverFrame(input) {
 				contextResolution: runtimeResult.contextResolution ?? null,
 				agentControllerConversationOverride: completedAgentControllerConversationOverride
 			});
+			const finalNativeResult = completedNativeResult;
+			const nativeConversationId = (finalNativeResult ? resolveDispatchContextDeltaFromRuntimeResult(finalNativeResult.dispatchResult)?.agentControllerConversationId : null) ?? finalNativeResult?.contextResolution?.agentControllerConversationId ?? currentContextDelta?.agentControllerConversationId ?? runtimeResult.contextResolution?.agentControllerConversationId ?? observedAgentControllerConversation?.agentControllerConversationId ?? observedProviderConversationId;
+			executionContextCompletion = await captureExecutionContextCompletion({
+				context: parsedTask.executionContext,
+				nativeConversationId,
+				agentControllerRef: parsedTask.agentControllerRef,
+				workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
+				completedTurnId: completedTurnConversationId === nativeConversationId ? completedTurnId : null,
+				providerSucceeded: finalNativeResult?.resultPayload.status === "success" || finalNativeResult?.resultPayload.status === "partial_success"
+			});
 			dispatchExecution = buildDispatchExecution({
 				bootstrapPlan: completedBootstrapPlan,
 				agentControllerConversationId: effectiveAgentControllerConversationId,
@@ -22069,32 +22924,40 @@ async function handleDispatchDeliverFrame(input) {
 				observedAgentControllerConversation,
 				plannedAgentControllerConversation
 			});
-			return resolveDispatchResultPayload({
-				attemptId: parsedTask.attemptId,
-				contextDelta: currentContextDelta,
-				contextResolution: runtimeResult.contextResolution ?? null,
-				basePayload: runtimeResult.resultPayload,
-				bootstrapTemplateFacts: bootstrapContext.bootstrapTemplateFacts,
-				agentControllerRef: parsedTask.agentControllerRef,
-				dispatchExecution,
-				existingContextId: contextIdForDispatch,
-				openClawBinding: runtimeOpenClawBinding,
-				openClawGatewayVisibility: runtimeOpenClawGatewayVisibility,
-				promptTrace: runtimePromptTrace,
-				agentControllerConversationForDispatch: observedAgentControllerConversation ?? plannedAgentControllerConversation,
-				workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
-				spaceAction: resolvedSpaceAction,
-				spaceActionProvenance: resolvedSpaceActionProvenance,
-				sourceEventId: parsedTask.sourceEventId,
-				targetProfileId: parsedTask.targetProfileId,
-				taskId: parsedTask.taskId
-			});
+			return {
+				...resolveDispatchResultPayload({
+					attemptId: parsedTask.attemptId,
+					contextDelta: currentContextDelta,
+					contextResolution: runtimeResult.contextResolution ?? null,
+					basePayload: runtimeResult.resultPayload,
+					bootstrapTemplateFacts: bootstrapContext.bootstrapTemplateFacts,
+					agentControllerRef: parsedTask.agentControllerRef,
+					dispatchExecution,
+					existingContextId: contextIdForDispatch,
+					openClawBinding: runtimeOpenClawBinding,
+					openClawGatewayVisibility: runtimeOpenClawGatewayVisibility,
+					promptTrace: runtimePromptTrace,
+					agentControllerConversationForDispatch: observedAgentControllerConversation ?? plannedAgentControllerConversation,
+					workingDirectory: activeRuntimeContext.providerRuntimeWorkingDirectory,
+					spaceAction: resolvedSpaceAction,
+					spaceActionProvenance: resolvedSpaceActionProvenance,
+					sourceEventId: parsedTask.sourceEventId,
+					targetProfileId: parsedTask.targetProfileId,
+					taskId: parsedTask.taskId
+				}),
+				executionContextId: parsedTask.executionContext?.id,
+				executionContextCompletion
+			};
 		};
-		resultPayload = buildCurrentResultPayload();
+		resultPayload = await buildCurrentResultPayload();
 		const replySettlement = await settleAgentReplyProposals({
 			initialResultPayload: resultPayload,
 			reconsider: async (agentReplyObservationCursor) => {
 				const reconsidered = await resolveRuntimeResultStructuredSpaceAction({
+					onInteractionRequest,
+					onNativeTurnStarted,
+					onNativeTurnCompleted,
+					onRuntimeEvent,
 					agentReplyObservationCursor,
 					computerFileAccessBoundary,
 					controllerTurnCompletion,
@@ -22119,7 +22982,7 @@ async function handleDispatchDeliverFrame(input) {
 				runtimeResult = reconsidered.runtimeResult;
 				resolvedSpaceAction = reconsidered.resolvedSpaceAction;
 				resolvedSpaceActionProvenance = reconsidered.resolvedSpaceActionProvenance;
-				return buildCurrentResultPayload();
+				return await buildCurrentResultPayload();
 			},
 			submit: (payload) => sendResultAndSummarize({
 				attemptId: parsedTask.attemptId,
@@ -22217,6 +23080,14 @@ async function handleDispatchDeliverFrame(input) {
 			}
 		});
 	} finally {
+		await nativeQuiescence;
+		await releaseDispatchTaskWorkspace({
+			workspaceUse,
+			parsedTask,
+			ledgerRootPath: input.ledgerPaths.rootDirPath,
+			workspaceProcesses,
+			presenter: input.presenter
+		});
 		reasoningStream.dispose();
 		currentSocketRef.reasoningPreferenceListeners?.delete(clearReasoning);
 		lifecycleKeepalive.stop?.();
@@ -22225,6 +23096,11 @@ async function handleDispatchDeliverFrame(input) {
 		input.inflightTaskControlRegistry.removeTask(parsedTask.taskId);
 		pendingAgentInteractionRegistry.removeTask(parsedTask.taskId);
 	}
+	resultPayload = {
+		...resultPayload,
+		executionContextId: parsedTask.executionContext?.id,
+		executionContextCompletion
+	};
 	emitDispatchRuntimeEvidenceTransition({
 		currentSocketRef,
 		daemonSessionId: input.daemonSessionId,
@@ -22385,8 +23261,28 @@ async function rollbackBootstrapExecutionStateAfterFailureIfNeeded(input) {
 		paths: input.ledgerPaths
 	});
 }
+async function verifyDispatchLegacyContextAssociation(input) {
+	const association = input.parsedTask.executionContext?.legacyAssociation;
+	if (!association) return;
+	assertLegacyAgentContextAssociation({
+		state: await loadLedgerState({
+			invalidStateStrategy: "throw",
+			io: createLedgerIo(),
+			paths: input.ledgerPaths
+		}),
+		legacyNativeConversationId: association.nativeConversationId,
+		key: {
+			spaceId: input.parsedTask.spaceId,
+			targetProfileId: input.parsedTask.targetProfileId,
+			agentControllerRef: input.parsedTask.agentControllerRef,
+			transportMode: input.parsedTask.transportMode,
+			runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(input.originalWorkingDirectory)
+		}
+	});
+}
 async function loadDispatchLedgerContext(input) {
 	const keyInput = {
+		executionContextId: input.parsedTask.executionContext?.id,
 		spaceId: input.parsedTask.spaceId,
 		targetProfileId: input.parsedTask.targetProfileId,
 		agentControllerRef: input.parsedTask.agentControllerRef,
@@ -22397,7 +23293,7 @@ async function loadDispatchLedgerContext(input) {
 	const ledgerIo = createLedgerIo();
 	const legacyContextId = input.contextStore.get(contextLookupKey) ?? null;
 	const { currentExecutionState, existingContextId, latestScopedExecutionState } = await withLedgerStateTransaction({
-		invalidStateStrategy: "backup_and_reset",
+		invalidStateStrategy: executionContextLedgerPolicy(input.parsedTask.executionContext),
 		io: ledgerIo,
 		mutate: (state) => {
 			const scopeInput = {
@@ -22406,6 +23302,14 @@ async function loadDispatchLedgerContext(input) {
 				targetProfileId: input.parsedTask.targetProfileId,
 				transportMode: input.parsedTask.transportMode
 			};
+			assertLegacyAgentContextAssociation({
+				state,
+				legacyNativeConversationId: input.parsedTask.executionContext?.legacyAssociation?.nativeConversationId,
+				key: {
+					...scopeInput,
+					runtimeWorkspaceFingerprint: buildRuntimeWorkspaceFingerprint(input.originalWorkingDirectory)
+				}
+			});
 			const seededLedgerState = resolveCompatibleAgentContextMatch({
 				key: keyInput,
 				state
@@ -22426,16 +23330,17 @@ async function loadDispatchLedgerContext(input) {
 				state: seededLedgerState
 			});
 			const existingContextId = nextAgentContextMatch?.agentContext.agentControllerConversationId ?? null;
+			const currentExecutionState = resolveCompatibleConversationExecutionState({
+				key: keyInput,
+				preferredLookupKey: nextAgentContextMatch?.agentContextLookupKey ?? null,
+				state: seededLedgerState
+			});
 			return {
 				nextState: seededLedgerState,
 				value: {
-					currentExecutionState: resolveCompatibleConversationExecutionState({
-						key: keyInput,
-						preferredLookupKey: nextAgentContextMatch?.agentContextLookupKey ?? null,
-						state: seededLedgerState
-					}),
+					currentExecutionState,
 					existingContextId,
-					latestScopedExecutionState: resolveLatestScopedConversationExecutionState({
+					latestScopedExecutionState: input.parsedTask.executionContext ? currentExecutionState : resolveLatestScopedConversationExecutionState({
 						scope: scopeInput,
 						state: seededLedgerState
 					})?.executionState ?? null
@@ -22579,7 +23484,12 @@ function buildDispatchRuntimePrompt(input) {
 		profileOwnerUserId: input.profileOwnerUserId,
 		organizationProtectedInformation: input.parsedTask.organizationProtectedInformation,
 		workingLanguage: input.parsedTask.workingLanguage,
-		prompt: input.parsedTask.prompt,
+		prompt: input.taskWorkspace?.baseCommit ? `${input.parsedTask.prompt}\n\nOpenMeld task workspace: ${JSON.stringify({
+			projectId: input.parsedTask.defaultProjectId,
+			repositoryName: input.taskWorkspace.sourceWorkingDirectory ? basename(input.taskWorkspace.sourceWorkingDirectory) : null,
+			workingDirectory: input.taskWorkspace.workingDirectory,
+			baseCommit: input.taskWorkspace.baseCommit
+		})}\nThis task uses an independent Git worktree with private Git metadata. The starting commit is frozen. Uncommitted and ignored source files were not copied. Make changes in this task worktree; the original checkout is not the task's working directory. Refer to the task and commit in public replies without disclosing private local paths.` : input.parsedTask.prompt,
 		recipientExplicitlyAddressedByActivationTargets: input.parsedTask.recipientExplicitlyAddressedByActivationTargets,
 		sourceSignalId: input.parsedTask.sourceEventId,
 		sourceMessageEnvelope: input.parsedTask.sourceMessageEnvelope,
@@ -22600,9 +23510,83 @@ function buildDispatchRuntimePrompt(input) {
 		targetProfileId: input.parsedTask.targetProfileId
 	});
 }
+async function prepareDispatchTaskWorkspace(input) {
+	const context = input.parsedTask.executionContext;
+	if (context && context.access !== "space_context") return await prepareExecutionContextWorkspace({
+		context,
+		ledgerRootPath: input.ledgerRootPath,
+		currentWorkingDirectory: input.currentWorkingDirectory,
+		policy: await readComputerFileAccessPolicy(input.computerFileAccessStorePath)
+	});
+	const workingDirectory = await executionContextWorkingDirectory({
+		context,
+		ledgerRootPath: input.ledgerRootPath,
+		currentWorkingDirectory: input.currentWorkingDirectory
+	});
+	return {
+		workingDirectory,
+		boundaryRoot: workingDirectory
+	};
+}
+async function releaseDispatchTaskWorkspace(input) {
+	const context = input.parsedTask.executionContext;
+	if (!(input.workspaceUse && context)) return;
+	try {
+		const released = await releaseExecutionContextWorkspace({
+			ledgerRootPath: input.ledgerRootPath,
+			context,
+			use: input.workspaceUse,
+			ownedProcessesQuiescent: [...input.workspaceProcesses.values()].every(Boolean)
+		});
+		emitRunLine({
+			presenter: input.presenter,
+			code: `daemon.run.workspace_${released.status}`,
+			text: released.status === "released" ? "Reclaimed the unchanged task workspace." : "Retained the task workspace.",
+			payload: {
+				contextId: context.id,
+				...released
+			}
+		});
+	} catch (error) {
+		emitRunLine({
+			presenter: input.presenter,
+			code: "daemon.run.workspace_retained",
+			text: "Task workspace cleanup needs reconciliation.",
+			payload: {
+				contextId: context.id,
+				errorMessage: toErrorMessage$10(error)
+			}
+		});
+	}
+}
+function observeExecutionContextWorkspaceProcess(processes, event) {
+	if (event.phase === "process_spawned") processes.set(event.processId, false);
+	else if (event.phase === "process_exit") processes.set(event.processId, event.ownedProcessesQuiescent === true);
+}
 async function resolveDispatchComputerFileAccess(input) {
 	const policy = await readComputerFileAccessPolicy(input.computerFileAccessStorePath);
 	const verifier = input.runtimeControllerSupport.localAdapterEntry.adapter.verifyComputerFileAccessBoundary;
+	if (input.parsedTask.executionContext) {
+		const context = input.parsedTask.executionContext;
+		if (input.parsedTask.agentControllerRef === "builtin:claude-code" && context.access === "space_context") return null;
+		if (input.parsedTask.agentControllerRef !== "builtin:codex" || input.parsedTask.transportMode !== "codex-app-server" || !verifier) throw new Error("execution_context.file_access_unsupported");
+		const workingDirectory = input.runtimePreparation.effectiveRuntimeContext.providerRuntimeWorkingDirectory;
+		const boundary = executionContextFileAccessBoundary({
+			context,
+			workingDirectory,
+			policy,
+			taskWorkspace: input.taskWorkspace
+		});
+		if (!(await verifier({
+			boundary,
+			workingDirectory,
+			executionMode: "normal",
+			agentControllerPermissionMode: input.routeConfig?.agentControllerPermissionMode,
+			launchContract: input.routeConfig?.launchContract ?? null,
+			transportMode: input.parsedTask.transportMode
+		})).supported) throw new Error("execution_context.file_access_unverified");
+		return boundary;
+	}
 	const admission = await resolveComputerFileAccessAdmission({
 		agentControllerPermissionMode: input.routeConfig?.agentControllerPermissionMode,
 		agentControllerRef: input.parsedTask.agentControllerRef,
@@ -22659,6 +23643,12 @@ function createDispatchSpaceActionRuntimeContext(input) {
 }
 async function resolveRuntimeResultFromRuntimeOrCliSpaceAction(input) {
 	if (!input.dispatchSpaceActionContext) return await input.runtimeExecutionPromise;
+	if (input.parsedTask.executionContext) return await applyCliSpaceActionRecordIfPresent({
+		dispatchSpaceActionContext: input.dispatchSpaceActionContext,
+		parsedTask: input.parsedTask,
+		presenter: input.presenter,
+		runtimeResult: await input.runtimeExecutionPromise
+	});
 	const cliSpaceActionAbortController = new AbortController();
 	let completion;
 	try {
@@ -23043,6 +24033,10 @@ async function resolveRuntimeResultStructuredSpaceAction(input) {
 					agentControllerConversationOverride: input.agentControllerConversationOverride
 				});
 				return runDispatchRuntimeExecution({
+					onInteractionRequest: input.onInteractionRequest,
+					onNativeTurnStarted: input.onNativeTurnStarted,
+					onNativeTurnCompleted: input.onNativeTurnCompleted,
+					onRuntimeEvent: input.onRuntimeEvent,
 					computerFileAccessBoundary: input.computerFileAccessBoundary,
 					contextId: repairContinuation.contextId,
 					executionMode: "repair",
@@ -23282,6 +24276,10 @@ async function coordinateConcurrentAgentReply(input) {
 					}
 				});
 				let runtimeResult = await runDispatchRuntimeExecution({
+					onInteractionRequest: input.onInteractionRequest,
+					onNativeTurnStarted: input.onNativeTurnStarted,
+					onNativeTurnCompleted: input.onNativeTurnCompleted,
+					onRuntimeEvent: input.onRuntimeEvent,
 					agentControllerConversationOverride: continuation.agentControllerConversationOverride,
 					computerFileAccessBoundary: input.computerFileAccessBoundary,
 					contextId: continuation.contextId,
@@ -23723,11 +24721,12 @@ function resolveStructuredSpaceActionProvenance(input) {
 	if (!input.resolvedSpaceAction) return;
 	return input.runtimeResult.resultPayload.spaceActionProvenance ?? "direct";
 }
-function runDispatchRuntimeExecution(input) {
-	return runRuntimeTask({
-		...input.agentControllerConversationOverride ? { agentContextOverride: {
+async function runDispatchRuntimeExecution(input) {
+	input.onNativeTurnStarted();
+	const result = await runRuntimeTask({
+		...input.parsedTask.executionContext || input.agentControllerConversationOverride ? { agentContextOverride: {
 			agentControllerConversationId: input.contextId,
-			agentControllerConversationOverride: input.agentControllerConversationOverride
+			agentControllerConversationOverride: input.agentControllerConversationOverride ?? null
 		} } : {},
 		io: input.io,
 		...input.onInteractionRequest ? { onInteractionRequest: input.onInteractionRequest } : {},
@@ -23751,6 +24750,8 @@ function runDispatchRuntimeExecution(input) {
 			runtimeContext: input.runtimeContext
 		})
 	});
+	input.onNativeTurnCompleted(result);
+	return result;
 }
 function buildDispatchRuntimeRoute(input) {
 	const runtimeEnv = input.contextId ? {
@@ -23784,6 +24785,7 @@ function buildDispatchRuntimeRoute(input) {
 }
 function buildDispatchRuntimeTask(input) {
 	return {
+		executionContext: input.parsedTask.executionContext,
 		agentId: input.parsedTask.targetProfileId,
 		attemptId: input.parsedTask.attemptId,
 		bindingKey: `${input.parsedTask.spaceId}|${input.parsedTask.targetProfileId}`,
@@ -39971,6 +40973,6 @@ async function emitAgentsConfigParseFallbackSignal(input) {
 	});
 }
 //#endregion
-export { buildHumanErrorCopy as $, uninstallAgentActivityIntegrations as $n, buildPublicSpaceEntryUrl as $t, runDaemonBackgroundStartForDecision as A, connectWebSocket as An, cliJsonSkillsListEnvelopeSchema as Ar, collectLocalAgentControllerInventory as At, runDaemonTeardownStrict as B, readAgentActivityOutboxHealth as Bn, readSpaceConfig as Bt, resolveGatewayWebOrigin as C, resolveNextRecentMentionProfileIdsForQueuedText as Cn, finishCurrentCommandCheckScope as Cr, writeDispatchSpaceActionRecord as Ct, isManagedSystemServiceBootstrapRun as D, DISPATCH_OWNED_RUNTIME_MODE as Dn, startCurrentCommandCheckScope as Dr, submitProfileRuntimeAgentControllerReport as Dt, bestEffortStopCurrentLaneDaemonService as E, updateAuthoredMentionRanges as En, resetCurrentCommandCheckState as Er, readRuntimeReportingHealthState as Et, runDaemonRunAfterEntryChecks as F, readCodexSessionTitles as Fn, organizationJoinLinkErrorResponseSchema as Fr, LocalSpaceStateIntegrityError as Ft, buildProfileWorkspacePresentation as G, registerAgentActivityRoute as Gn, toSpaceConfigListIntegrityError as Gt, formatServiceParticipationReadinessLabel as H, enqueueControllerTaskLifecycleEventWhileLocked as Hn, readSpaceRecentMentionProfileIds as Ht, runDaemonServiceDetached as I, readAgentActivityContextForPath as In, organizationJoinLinkManagementQuerySchema as Ir, inspectSpaceCacheFile as It, createQuietPresenter as J, AGENT_ACTIVITY_INTEGRATION_OWNER as Jn, writeSpaceCacheDeletionNoticeState as Jt, buildProfileWorkspaceRows as K, resolveAgentActivityRouteForPath as Kn, updateSpaceLastSeenTs as Kt, runDaemonSnapshot as L, removeAgentActivityContextCache as Ln, revokeOrganizationJoinLinkResponseSchema as Lr, isLocalSpaceStateCorruptResult as Lt, runDaemonInstall as M, buildAgentActivityEvent as Mn, cliJsonSkillsShowEnvelopeSchema as Mr, resolveLocalAgentControllerLaunchability as Mt, runDaemonInterrupt as N, resolveObservedAgentActivityBinding as Nn, acceptOrganizationJoinLinkBodySchema as Nr, resolveLocalAgentControllerReportDecision as Nt, runDaemon as O, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as On, cliJsonErrorEnvelopeSchema as Or, submitRuntimeAgentControllerReport as Ot, runDaemonReinstall as P, normalizeSharedSessionTitle as Pn, getOrganizationJoinLinkResponseSchema as Pr, projectSpaceProfileCache as Pt, runDaemonStartDecisionPrompt as Q, resolveAgentActivityDispatcherCommand as Qn, buildDispatchResultReplyWorkflowProjection as Qt, runDaemonStatusFlow as R, enqueueAgentActivityHookEvent as Rn, listSpaceConfigs as Rt, buildSpaceWebUrl as S, prepareSpaceFileOnlySubmission as Sn, runInteractivePrompt as Sr, readDispatchSpaceActionContextFromEnv as St, runDaemonServiceParticipationGate as T, returnToTargetPickerState as Tn, isCurrentCommandCheckScopeActive as Tr, validateLocalProjectConnectionPath as Tt, formatServiceRuntimeHeadline as U, readControllerTaskLifecycleOutboxHealth as Un, removeSpaceConfig as Ut, runDaemonUninstall as V, removeProjectOutbox as Vn, readSpaceLastSeenTs as Vt, resolveServiceParticipationReadiness as W, isAgentActivityRouteRegistered as Wn, toLocalSpaceStateIntegrityError as Wt, createDelayedSpinner as X, installAgentActivityIntegrations as Xn, SpaceComposerSubmissionError as Xt, emitDaemonAgentOverview as Y, defaultManagedIntegrationPaths as Yn, writeSpaceRecentMentionProfileIds as Yt, shouldEmitAgentOverview as Z, readAgentActivityIntegrationStatus as Zn, buildDispatchResultMessageReadProjection as Zt, promptSearchSelect as _, isTargetPickerState as _n, resolveDeviceAuthClientId as _r, toStructuredGatewayFailure as _t, runAgentsCustomRemove as a, buildSpaceMessageReadRelationSummary as an, runAuthMenu as ar, resolveLocalComponentsStatus as at, resolveOffsetVisibleWindow as b, openTargetPickerState as bn, promptTextEntry as br, readDispatchOwnedRuntimeGuard as bt, runAgentsDisable as c, buildUpdatesReplyWorkflowProjection as cn, buildAuthStatusRows as cr, fetchSpaceUpdates as ct, runAgentsManage as d, createSpaceMemberIdentityIndex as dn, renderInfoCard as dr, updateSpaceMeta as dt, buildSignalIndex as en, buildCommandAuthenticationPromptMessage as er, renderHumanErrorCard as et, runAgentsRepair as f, createSpaceTargetCatalog as fn, renderTextInfoCard as fr, parseSpaceMetaPayload as ft, promptSearchMultiselectWorkbench as g, isRelationPickerState as gn, requestDeviceToken as gr, readGatewayTextResponse as gt, promptSearchMultiselect as h, formatRemovedCcRelationMessage as hn, fetchAuthUserSnapshot as hr, readGatewayJsonResponse as ht, runAgentsCustomList as i, buildSpaceMentionProfileIndex as in, runAuthLogout as ir, readDaemonIncidentLogTail as it, runDaemonCancel as j, syncLocalAgentActivity as jn, cliJsonSkillsLoadEnvelopeSchema as jr, resolveLocalAgentControllerBlockerReasonCodes as jt, runDaemonAutostart as k, readRecentDaemonDispatchJournalEvents as kn, cliJsonOutputEnvelopeSchema as kr, submitRuntimeAgentControllerReports as kt, runAgentsEnable as l, closeMentionPickerState as ln, buildAuthStatusSnapshot as lr, createCliSpaceApi as lt, formatTransportModeDisplay as m, extractMentionAuthoringPrefix as mn, extractAuthApiErrorMessage as mr, GatewayHttpError as mt, runAgentsConfig as n, buildSignalReplyWorkflowProjection as nn, evaluateCommandAuthentication as nr, emitCliJsonEnvelope as nt, runAgentsCustomUpdate as o, buildSpaceProfileAddPlan as on, runAuthStatus as or, writeInstalledLocalComponentsSnapshot as ot, runAgentsShow as p, enterRelationPickerState as pn, buildUnifiedCardFrame as pr, parseSpaceMetaResponse as pt, reconcileCliVersionView as q, unregisterAgentActivityRoute as qn, upsertSpaceConfig as qt, runAgentsCustomAdd as r, buildSpaceMemberAgentPresencePresentation as rn, runAuthLogin as rr, runDaemonStartupPreflight as rt, runAgentsDetect as s, buildSpaceRoundReadProjection as sn, exchangeOneTimeTokenAuthSession as sr, resolveDaemonServiceParticipationStatus as st, runAgents as t, buildSignalMessageReadProjection as tn, ensureCommandAuthenticationOrCancel as tr, renderHumanTextErrorCard as tt, runAgentsList as u, collectResolvedSpaceMentions as un, formatActiveOrganizationLabel as ur, fetchSpaceMeta as ut, clampNumber as v, listSpaceMentionRelationChoices as vn, resolveDeviceTokenExpiresAt as vr, parseJsonResponse as vt, resolveSpaceWebGatewayOrigin as w, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as wn, getCurrentCommandCheckState as wr, LocalProjectConnectionError as wt, computeRetryDelayMs as x, prepareSpaceComposerSubmission as xn, isReturnKeypress as xr, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as xt, resolveAnchoredVisibleWindow as y, listSpaceMentionSuggestions as yn, revokeAuthAccessToken as yr, assertDispatchOwnedRuntimePublicWriteAllowed as yt, runDaemonStop as z, removeProjectInbox as zn, readSpaceCacheDeletionNoticeState as zt };
+export { buildHumanErrorCopy as $, readAgentActivityIntegrationStatus as $n, buildDispatchResultMessageReadProjection as $t, runDaemonBackgroundStartForDecision as A, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as An, cliJsonErrorEnvelopeSchema as Ar, submitRuntimeAgentControllerReport as At, runDaemonTeardownStrict as B, enqueueAgentActivityHookEvent as Bn, listSpaceConfigs as Bt, resolveGatewayWebOrigin as C, prepareSpaceComposerSubmission as Cn, isReturnKeypress as Cr, readDispatchSpaceActionContextForReceiptFromEnv as Ct, isManagedSystemServiceBootstrapRun as D, returnToTargetPickerState as Dn, isCurrentCommandCheckScopeActive as Dr, validateLocalProjectConnectionPath as Dt, bestEffortStopCurrentLaneDaemonService as E, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as En, getCurrentCommandCheckState as Er, LocalProjectConnectionError as Et, runDaemonRunAfterEntryChecks as F, resolveObservedAgentActivityBinding as Fn, acceptOrganizationJoinLinkBodySchema as Fr, resolveLocalAgentControllerReportDecision as Ft, buildProfileWorkspacePresentation as G, readControllerTaskLifecycleOutboxHealth as Gn, removeSpaceConfig as Gt, formatServiceParticipationReadinessLabel as H, readAgentActivityOutboxHealth as Hn, readSpaceConfig as Ht, runDaemonServiceDetached as I, normalizeSharedSessionTitle as In, getOrganizationJoinLinkResponseSchema as Ir, projectSpaceProfileCache as It, createQuietPresenter as J, resolveAgentActivityRouteForPath as Jn, updateSpaceLastSeenTs as Jt, buildProfileWorkspaceRows as K, isAgentActivityRouteRegistered as Kn, toLocalSpaceStateIntegrityError as Kt, runDaemonSnapshot as L, readCodexSessionTitles as Ln, organizationJoinLinkErrorResponseSchema as Lr, LocalSpaceStateIntegrityError as Lt, runDaemonInstall as M, connectWebSocket as Mn, cliJsonSkillsListEnvelopeSchema as Mr, collectLocalAgentControllerInventory as Mt, runDaemonInterrupt as N, syncLocalAgentActivity as Nn, cliJsonSkillsLoadEnvelopeSchema as Nr, resolveLocalAgentControllerBlockerReasonCodes as Nt, runDaemon as O, updateAuthoredMentionRanges as On, resetCurrentCommandCheckState as Or, readRuntimeReportingHealthState as Ot, runDaemonReinstall as P, buildAgentActivityEvent as Pn, cliJsonSkillsShowEnvelopeSchema as Pr, resolveLocalAgentControllerLaunchability as Pt, runDaemonStartDecisionPrompt as Q, installAgentActivityIntegrations as Qn, SpaceComposerSubmissionError as Qt, runDaemonStatusFlow as R, readAgentActivityContextForPath as Rn, organizationJoinLinkManagementQuerySchema as Rr, inspectSpaceCacheFile as Rt, buildSpaceWebUrl as S, openTargetPickerState as Sn, promptTextEntry as Sr, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as St, runDaemonServiceParticipationGate as T, resolveNextRecentMentionProfileIdsForQueuedText as Tn, finishCurrentCommandCheckScope as Tr, writeDispatchSpaceActionRecord as Tt, formatServiceRuntimeHeadline as U, removeProjectOutbox as Un, readSpaceLastSeenTs as Ut, runDaemonUninstall as V, removeProjectInbox as Vn, readSpaceCacheDeletionNoticeState as Vt, resolveServiceParticipationReadiness as W, enqueueControllerTaskLifecycleEventWhileLocked as Wn, readSpaceRecentMentionProfileIds as Wt, createDelayedSpinner as X, AGENT_ACTIVITY_INTEGRATION_OWNER as Xn, writeSpaceCacheDeletionNoticeState as Xt, emitDaemonAgentOverview as Y, unregisterAgentActivityRoute as Yn, upsertSpaceConfig as Yt, shouldEmitAgentOverview as Z, defaultManagedIntegrationPaths as Zn, writeSpaceRecentMentionProfileIds as Zt, promptSearchSelect as _, formatRemovedCcRelationMessage as _n, fetchAuthUserSnapshot as _r, toStructuredGatewayFailure as _t, runAgentsCustomRemove as a, buildSpaceMemberAgentPresencePresentation as an, runAuthLogin as ar, resolveLocalComponentsStatus as at, resolveOffsetVisibleWindow as b, listSpaceMentionRelationChoices as bn, resolveDeviceTokenExpiresAt as br, readDispatchOwnedRuntimeGuard as bt, runAgentsDisable as c, buildSpaceProfileAddPlan as cn, runAuthStatus as cr, fetchSpaceUpdates as ct, runAgentsManage as d, closeMentionPickerState as dn, buildAuthStatusSnapshot as dr, updateSpaceMeta as dt, buildDispatchResultReplyWorkflowProjection as en, resolveAgentActivityDispatcherCommand as er, renderHumanErrorCard as et, runAgentsRepair as f, collectResolvedSpaceMentions as fn, formatActiveOrganizationLabel as fr, parseSpaceMetaPayload as ft, promptSearchMultiselectWorkbench as g, extractMentionAuthoringPrefix as gn, extractAuthApiErrorMessage as gr, readGatewayTextResponse as gt, promptSearchMultiselect as h, enterRelationPickerState as hn, buildUnifiedCardFrame as hr, readGatewayJsonResponse as ht, runAgentsCustomList as i, buildSignalReplyWorkflowProjection as in, evaluateCommandAuthentication as ir, readDaemonIncidentLogTail as it, runDaemonCancel as j, readRecentDaemonDispatchJournalEvents as jn, cliJsonOutputEnvelopeSchema as jr, submitRuntimeAgentControllerReports as jt, runDaemonAutostart as k, DISPATCH_OWNED_RUNTIME_MODE as kn, startCurrentCommandCheckScope as kr, submitProfileRuntimeAgentControllerReport as kt, runAgentsEnable as l, buildSpaceRoundReadProjection as ln, exchangeOneTimeTokenAuthSession as lr, createCliSpaceApi as lt, formatTransportModeDisplay as m, createSpaceTargetCatalog as mn, renderTextInfoCard as mr, GatewayHttpError as mt, runAgentsConfig as n, buildSignalIndex as nn, buildCommandAuthenticationPromptMessage as nr, emitCliJsonEnvelope as nt, runAgentsCustomUpdate as o, buildSpaceMentionProfileIndex as on, runAuthLogout as or, writeInstalledLocalComponentsSnapshot as ot, runAgentsShow as p, createSpaceMemberIdentityIndex as pn, renderInfoCard as pr, parseSpaceMetaResponse as pt, reconcileCliVersionView as q, registerAgentActivityRoute as qn, toSpaceConfigListIntegrityError as qt, runAgentsCustomAdd as r, buildSignalMessageReadProjection as rn, ensureCommandAuthenticationOrCancel as rr, runDaemonStartupPreflight as rt, runAgentsDetect as s, buildSpaceMessageReadRelationSummary as sn, runAuthMenu as sr, resolveDaemonServiceParticipationStatus as st, runAgents as t, buildPublicSpaceEntryUrl as tn, uninstallAgentActivityIntegrations as tr, renderHumanTextErrorCard as tt, runAgentsList as u, buildUpdatesReplyWorkflowProjection as un, buildAuthStatusRows as ur, fetchSpaceMeta as ut, clampNumber as v, isRelationPickerState as vn, requestDeviceToken as vr, parseJsonResponse as vt, resolveSpaceWebGatewayOrigin as w, prepareSpaceFileOnlySubmission as wn, runInteractivePrompt as wr, readDispatchSpaceActionContextFromEnv as wt, computeRetryDelayMs as x, listSpaceMentionSuggestions as xn, revokeAuthAccessToken as xr, DispatchSpaceActionClosedError as xt, resolveAnchoredVisibleWindow as y, isTargetPickerState as yn, resolveDeviceAuthClientId as yr, assertDispatchOwnedRuntimePublicWriteAllowed as yt, runDaemonStop as z, removeAgentActivityContextCache as zn, revokeOrganizationJoinLinkResponseSchema as zr, isLocalSpaceStateCorruptResult as zt };
 
-//# sourceMappingURL=agents-CIDsThyG.js.map
+//# sourceMappingURL=agents-pHCyQoFw.js.map