openmeld 0.3.210 → 0.3.211

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (54) hide show
  1. package/dist/{add-me-membership-BgDujS4W.js → add-me-membership-CNgO595N.js} +2 -2
  2. package/dist/{add-me-membership-BgDujS4W.js.map → add-me-membership-CNgO595N.js.map} +1 -1
  3. package/dist/{agents-DdYL--Rj.js → agents-CGBELT4J.js} +10 -10
  4. package/dist/{agents-DdYL--Rj.js.map → agents-CGBELT4J.js.map} +1 -1
  5. package/dist/{api-client-foundation--H_ib5Vh.js → api-client-foundation-CtQTtA4m.js} +1 -1
  6. package/dist/{api-client-foundation-CQsXMqnr.js → api-client-foundation-MJK8vWfn.js} +3 -3
  7. package/dist/{api-client-foundation-CQsXMqnr.js.map → api-client-foundation-MJK8vWfn.js.map} +1 -1
  8. package/dist/{auth-session-CVxflepT.js → auth-session-CB7m-csh.js} +2 -2
  9. package/dist/{auth-session-CVxflepT.js.map → auth-session-CB7m-csh.js.map} +1 -1
  10. package/dist/auth-session-DXJq5arz.js +4 -0
  11. package/dist/{command-DNIZzJuu.js → command-oQK6PG6b.js} +8 -8
  12. package/dist/{command-DNIZzJuu.js.map → command-oQK6PG6b.js.map} +1 -1
  13. package/dist/{computer-connection-TgsnU0K9.js → computer-connection-51dg6Tq0.js} +2 -2
  14. package/dist/{computer-connection-TgsnU0K9.js.map → computer-connection-51dg6Tq0.js.map} +1 -1
  15. package/dist/{computer-connection-review-DqJTijzX.js → computer-connection-review-CiIyTeDw.js} +6 -6
  16. package/dist/{computer-connection-review-DqJTijzX.js.map → computer-connection-review-CiIyTeDw.js.map} +1 -1
  17. package/dist/{computer-setup-continuation-DFUxl9kf.js → computer-setup-continuation-CeFPluYv.js} +4 -4
  18. package/dist/{computer-setup-continuation-DFUxl9kf.js.map → computer-setup-continuation-CeFPluYv.js.map} +1 -1
  19. package/dist/{daemon-service-runtime-D7cb3-Ov.js → daemon-service-runtime-D8KrOfSV.js} +2 -2
  20. package/dist/{daemon-service-runtime-D7cb3-Ov.js.map → daemon-service-runtime-D8KrOfSV.js.map} +1 -1
  21. package/dist/dist-DajKOXDk.js +4 -0
  22. package/dist/{dist-Ccbpt6rT.js → dist-DtykdMlN.js} +238 -12
  23. package/dist/dist-DtykdMlN.js.map +1 -0
  24. package/dist/{elapsed-time-B2UGqUlR.js → elapsed-time-BE9NPM-x.js} +4 -4
  25. package/dist/{elapsed-time-B2UGqUlR.js.map → elapsed-time-BE9NPM-x.js.map} +1 -1
  26. package/dist/{installation-inventory-DJiJh9nP.js → installation-inventory-CLBwkIf6.js} +3 -3
  27. package/dist/{installation-inventory-DJiJh9nP.js.map → installation-inventory-CLBwkIf6.js.map} +1 -1
  28. package/dist/{openmeld-BqTI30JS.js → openmeld-LADiOJ3_.js} +219 -19
  29. package/dist/openmeld-LADiOJ3_.js.map +1 -0
  30. package/dist/{openmeld-maintenance-worker-DeOu5U2Q.js → openmeld-maintenance-worker-B-u1CItK.js} +5 -5
  31. package/dist/{openmeld-maintenance-worker-DeOu5U2Q.js.map → openmeld-maintenance-worker-B-u1CItK.js.map} +1 -1
  32. package/dist/{openmeld-tools-update-coordinator-i1zATb9g.js → openmeld-tools-update-coordinator-qrZLtDMv.js} +15 -9
  33. package/dist/openmeld-tools-update-coordinator-qrZLtDMv.js.map +1 -0
  34. package/dist/openmeld.js +3 -3
  35. package/dist/{prepare-session-executor-BSTToACx.js → prepare-session-executor-B5aD6Fx_.js} +9 -9
  36. package/dist/{prepare-session-executor-BSTToACx.js.map → prepare-session-executor-B5aD6Fx_.js.map} +1 -1
  37. package/dist/{runtime-transport-BrzIQru0.js → runtime-transport-VcPSvVY1.js} +2 -1
  38. package/dist/runtime-transport-VcPSvVY1.js.map +1 -0
  39. package/dist/{service-account-authorization-BM7a5V4I.js → service-account-authorization-D1Wp-91j.js} +3 -3
  40. package/dist/{service-account-authorization-BM7a5V4I.js.map → service-account-authorization-D1Wp-91j.js.map} +1 -1
  41. package/dist/{service-control-capabilities-BL8hTCE6.js → service-control-capabilities-COkZ1Ceh.js} +2 -2
  42. package/dist/{service-control-capabilities-BL8hTCE6.js.map → service-control-capabilities-COkZ1Ceh.js.map} +1 -1
  43. package/dist/{service-control-capabilities--ktpSDhp.js → service-control-capabilities-CP1XCSVm.js} +1 -1
  44. package/dist/upgrade-BMh_CLJL.js +4 -0
  45. package/dist/{upgrade-JMsVlRjL.js → upgrade-DJLqTfBA.js} +4 -4
  46. package/dist/{upgrade-JMsVlRjL.js.map → upgrade-DJLqTfBA.js.map} +1 -1
  47. package/package.json +1 -1
  48. package/dist/auth-session-LTSqq_Tb.js +0 -4
  49. package/dist/dist-Ccbpt6rT.js.map +0 -1
  50. package/dist/dist-Cs3dH2Of.js +0 -4
  51. package/dist/openmeld-BqTI30JS.js.map +0 -1
  52. package/dist/openmeld-tools-update-coordinator-i1zATb9g.js.map +0 -1
  53. package/dist/runtime-transport-BrzIQru0.js.map +0 -1
  54. package/dist/upgrade-C5r5IT_8.js +0 -4
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
2
 
3
- import { rt as prepareSessionSnapshotSchema, tt as createPrepareSessionRequestSchema } from "./auth-session-CVxflepT.js";
3
+ import { rt as prepareSessionSnapshotSchema, tt as createPrepareSessionRequestSchema } from "./auth-session-CB7m-csh.js";
4
4
  import * as z$1 from "zod/v4";
5
5
  //#region ../../packages/schemas/dist/computer-connection.js
6
6
  const computerConnectionIntentSchema = z$1.strictObject({
@@ -51,4 +51,4 @@ z$1.discriminatedUnion("status", [
51
51
  //#endregion
52
52
  export { computerConnectionReviewSchema as n, computerConnectionIntentSchema as t };
53
53
 
54
- //# sourceMappingURL=computer-connection-TgsnU0K9.js.map
54
+ //# sourceMappingURL=computer-connection-51dg6Tq0.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"computer-connection-TgsnU0K9.js","names":[],"sources":["../../../packages/schemas/dist/computer-connection.js"],"sourcesContent":["import { createPrepareSessionRequestSchema, prepareSessionSnapshotSchema } from \"./schemas/prepare/session.js\";\nimport * as z$1 from \"zod/v4\";\n//#region src/computer-connection.ts\nconst computerConnectionIntentSchema = z$1.strictObject({\n\texpectedAccount: z$1.string().trim().min(1).max(256),\n\tpreviousSessionIdentity: z$1.string().min(1).max(128)\n});\nconst computerConnectionReviewSchema = z$1.strictObject({\n\tprotocol: z$1.literal(\"computer-connection-v1\"),\n\tpreviousSessionIdentity: z$1.string().min(1).max(128),\n\taccount: z$1.strictObject({\n\t\tid: z$1.string().min(1).max(256),\n\t\temail: z$1.string().max(512).nullable()\n\t}).nullable(),\n\texistingConnection: z$1.strictObject({\n\t\tdeviceId: z$1.string().min(1),\n\t\truntimeLane: z$1.enum([\n\t\t\t\"prod\",\n\t\t\t\"dev-local\",\n\t\t\t\"canary\"\n\t\t])\n\t}).nullable()\n});\nconst desktopComputerConnectionRequestSchema = createPrepareSessionRequestSchema.pick({\n\thumanProfileId: true,\n\ttargetSpaceId: true,\n\tsourceNavigationAction: true,\n\tconnectedComputerId: true\n}).extend({\n\texpectedAccount: computerConnectionIntentSchema.shape.expectedAccount,\n\tresetThisComputer: z$1.boolean().optional()\n});\nconst desktopComputerConnectionResultSchema = z$1.discriminatedUnion(\"status\", [\n\tz$1.strictObject({\n\t\tstatus: z$1.literal(\"failed\"),\n\t\tmessage: z$1.string().min(1),\n\t\tdiagnosticId: z$1.string().min(1)\n\t}),\n\tz$1.strictObject({\n\t\tstatus: z$1.literal(\"reused\"),\n\t\tconnection: computerConnectionReviewSchema.shape.existingConnection.unwrap()\n\t}),\n\tz$1.strictObject({\n\t\tstatus: z$1.literal(\"completed\"),\n\t\tsnapshot: prepareSessionSnapshotSchema\n\t}),\n\tz$1.strictObject({ status: z$1.literal(\"cancelled\") })\n]);\n//#endregion\nexport { computerConnectionIntentSchema, computerConnectionReviewSchema, desktopComputerConnectionRequestSchema, desktopComputerConnectionResultSchema };\n\n//# sourceMappingURL=computer-connection.js.map"],"mappings":";;;;;AAGA,MAAM,iCAAiC,IAAI,aAAa;CACvD,iBAAiB,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACnD,yBAAyB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AACrD,CAAC;AACD,MAAM,iCAAiC,IAAI,aAAa;CACvD,UAAU,IAAI,QAAQ,wBAAwB;CAC9C,yBAAyB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACpD,SAAS,IAAI,aAAa;EACzB,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;EAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CACvC,CAAC,CAAC,CAAC,SAAS;CACZ,oBAAoB,IAAI,aAAa;EACpC,UAAU,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;EAC5B,aAAa,IAAI,KAAK;GACrB;GACA;GACA;EACD,CAAC;CACF,CAAC,CAAC,CAAC,SAAS;AACb,CAAC;AAC8C,kCAAkC,KAAK;CACrF,gBAAgB;CAChB,eAAe;CACf,wBAAwB;CACxB,qBAAqB;AACtB,CAAC,CAAC,CAAC,OAAO;CACT,iBAAiB,+BAA+B,MAAM;CACtD,mBAAmB,IAAI,QAAQ,CAAC,CAAC,SAAS;AAC3C,CAAC;AAC6C,IAAI,mBAAmB,UAAU;CAC9E,IAAI,aAAa;EAChB,QAAQ,IAAI,QAAQ,QAAQ;EAC5B,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;EAC3B,cAAc,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CACjC,CAAC;CACD,IAAI,aAAa;EAChB,QAAQ,IAAI,QAAQ,QAAQ;EAC5B,YAAY,+BAA+B,MAAM,mBAAmB,OAAO;CAC5E,CAAC;CACD,IAAI,aAAa;EAChB,QAAQ,IAAI,QAAQ,WAAW;EAC/B,UAAU;CACX,CAAC;CACD,IAAI,aAAa,EAAE,QAAQ,IAAI,QAAQ,WAAW,EAAE,CAAC;AACtD,CAAC"}
1
+ {"version":3,"file":"computer-connection-51dg6Tq0.js","names":[],"sources":["../../../packages/schemas/dist/computer-connection.js"],"sourcesContent":["import { createPrepareSessionRequestSchema, prepareSessionSnapshotSchema } from \"./schemas/prepare/session.js\";\nimport * as z$1 from \"zod/v4\";\n//#region src/computer-connection.ts\nconst computerConnectionIntentSchema = z$1.strictObject({\n\texpectedAccount: z$1.string().trim().min(1).max(256),\n\tpreviousSessionIdentity: z$1.string().min(1).max(128)\n});\nconst computerConnectionReviewSchema = z$1.strictObject({\n\tprotocol: z$1.literal(\"computer-connection-v1\"),\n\tpreviousSessionIdentity: z$1.string().min(1).max(128),\n\taccount: z$1.strictObject({\n\t\tid: z$1.string().min(1).max(256),\n\t\temail: z$1.string().max(512).nullable()\n\t}).nullable(),\n\texistingConnection: z$1.strictObject({\n\t\tdeviceId: z$1.string().min(1),\n\t\truntimeLane: z$1.enum([\n\t\t\t\"prod\",\n\t\t\t\"dev-local\",\n\t\t\t\"canary\"\n\t\t])\n\t}).nullable()\n});\nconst desktopComputerConnectionRequestSchema = createPrepareSessionRequestSchema.pick({\n\thumanProfileId: true,\n\ttargetSpaceId: true,\n\tsourceNavigationAction: true,\n\tconnectedComputerId: true\n}).extend({\n\texpectedAccount: computerConnectionIntentSchema.shape.expectedAccount,\n\tresetThisComputer: z$1.boolean().optional()\n});\nconst desktopComputerConnectionResultSchema = z$1.discriminatedUnion(\"status\", [\n\tz$1.strictObject({\n\t\tstatus: z$1.literal(\"failed\"),\n\t\tmessage: z$1.string().min(1),\n\t\tdiagnosticId: z$1.string().min(1)\n\t}),\n\tz$1.strictObject({\n\t\tstatus: z$1.literal(\"reused\"),\n\t\tconnection: computerConnectionReviewSchema.shape.existingConnection.unwrap()\n\t}),\n\tz$1.strictObject({\n\t\tstatus: z$1.literal(\"completed\"),\n\t\tsnapshot: prepareSessionSnapshotSchema\n\t}),\n\tz$1.strictObject({ status: z$1.literal(\"cancelled\") })\n]);\n//#endregion\nexport { computerConnectionIntentSchema, computerConnectionReviewSchema, desktopComputerConnectionRequestSchema, desktopComputerConnectionResultSchema };\n\n//# sourceMappingURL=computer-connection.js.map"],"mappings":";;;;;AAGA,MAAM,iCAAiC,IAAI,aAAa;CACvD,iBAAiB,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACnD,yBAAyB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AACrD,CAAC;AACD,MAAM,iCAAiC,IAAI,aAAa;CACvD,UAAU,IAAI,QAAQ,wBAAwB;CAC9C,yBAAyB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACpD,SAAS,IAAI,aAAa;EACzB,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;EAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CACvC,CAAC,CAAC,CAAC,SAAS;CACZ,oBAAoB,IAAI,aAAa;EACpC,UAAU,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;EAC5B,aAAa,IAAI,KAAK;GACrB;GACA;GACA;EACD,CAAC;CACF,CAAC,CAAC,CAAC,SAAS;AACb,CAAC;AAC8C,kCAAkC,KAAK;CACrF,gBAAgB;CAChB,eAAe;CACf,wBAAwB;CACxB,qBAAqB;AACtB,CAAC,CAAC,CAAC,OAAO;CACT,iBAAiB,+BAA+B,MAAM;CACtD,mBAAmB,IAAI,QAAQ,CAAC,CAAC,SAAS;AAC3C,CAAC;AAC6C,IAAI,mBAAmB,UAAU;CAC9E,IAAI,aAAa;EAChB,QAAQ,IAAI,QAAQ,QAAQ;EAC5B,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;EAC3B,cAAc,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CACjC,CAAC;CACD,IAAI,aAAa;EAChB,QAAQ,IAAI,QAAQ,QAAQ;EAC5B,YAAY,+BAA+B,MAAM,mBAAmB,OAAO;CAC5E,CAAC;CACD,IAAI,aAAa;EAChB,QAAQ,IAAI,QAAQ,WAAW;EAC/B,UAAU;CACX,CAAC;CACD,IAAI,aAAa,EAAE,QAAQ,IAAI,QAAQ,WAAW,EAAE,CAAC;AACtD,CAAC"}
@@ -1,10 +1,10 @@
1
1
  #!/usr/bin/env node
2
2
 
3
- import { l as getAuthSessionMetadata, o as buildStoredAuthSessionIdentity, u as getAuthSessionState } from "./auth-session-CVxflepT.js";
4
- import { n as computerConnectionReviewSchema } from "./computer-connection-TgsnU0K9.js";
5
- import { Bt as readDaemonServiceContract } from "./daemon-service-runtime-D7cb3-Ov.js";
6
- import { n as resolveServiceAccountIdentity } from "./service-account-authorization-BM7a5V4I.js";
7
- import { t as readServiceControlCapabilities } from "./service-control-capabilities-BL8hTCE6.js";
3
+ import { l as getAuthSessionMetadata, o as buildStoredAuthSessionIdentity, u as getAuthSessionState } from "./auth-session-CB7m-csh.js";
4
+ import { n as computerConnectionReviewSchema } from "./computer-connection-51dg6Tq0.js";
5
+ import { Bt as readDaemonServiceContract } from "./daemon-service-runtime-D8KrOfSV.js";
6
+ import { n as resolveServiceAccountIdentity } from "./service-account-authorization-D1Wp-91j.js";
7
+ import { t as readServiceControlCapabilities } from "./service-control-capabilities-COkZ1Ceh.js";
8
8
  //#region src/commands/computer-connection-review.ts
9
9
  /** Display evidence only. Auth and Service owners validate an existing connection. */
10
10
  async function readComputerConnectionReview() {
@@ -36,4 +36,4 @@ async function readComputerConnectionReview() {
36
36
  //#endregion
37
37
  export { readComputerConnectionReview };
38
38
 
39
- //# sourceMappingURL=computer-connection-review-DqJTijzX.js.map
39
+ //# sourceMappingURL=computer-connection-review-CiIyTeDw.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"computer-connection-review-DqJTijzX.js","names":[],"sources":["../src/commands/computer-connection-review.ts"],"sourcesContent":["import { computerConnectionReviewSchema } from \"@openmeld/schemas\";\nimport {\n buildStoredAuthSessionIdentity,\n getAuthSessionMetadata,\n getAuthSessionState,\n} from \"../config/auth-session\";\nimport { readDaemonServiceContract } from \"../config/daemon-service-contract\";\nimport { resolveServiceAccountIdentity } from \"../local-service/lifecycle/service-account-authorization\";\nimport { readServiceControlCapabilities } from \"./service-control-capabilities\";\n\n/** Display evidence only. Auth and Service owners validate an existing connection. */\nexport async function readComputerConnectionReview() {\n const session = await getAuthSessionMetadata();\n if (session && !session.user?.id) {\n throw new Error(\n \"The computer account cannot be identified. Review its sign-in before connecting.\"\n );\n }\n let existingConnection: ReturnType<\n typeof computerConnectionReviewSchema.parse\n >[\"existingConnection\"] = null;\n const contract = await readDaemonServiceContract();\n if (session && contract && contract.ownerUserId === session.user?.id) {\n const auth = await getAuthSessionState({ validateRemote: true });\n if (auth.state === \"valid\" && auth.session) {\n const identity = await resolveServiceAccountIdentity(\n auth.session,\n contract\n );\n const capabilities = await readServiceControlCapabilities();\n if (capabilities.stop && capabilities.deviceId === identity.deviceId) {\n existingConnection = {\n deviceId: identity.deviceId,\n runtimeLane: identity.lane,\n };\n }\n }\n }\n return computerConnectionReviewSchema.parse({\n protocol: \"computer-connection-v1\",\n previousSessionIdentity: buildStoredAuthSessionIdentity(session),\n account: session\n ? { id: session.user?.id, email: session.user?.email ?? null }\n : null,\n existingConnection,\n });\n}\n"],"mappings":";;;;;;;;;AAWA,eAAsB,+BAA+B;CACnD,MAAM,UAAU,MAAM,uBAAuB;CAC7C,IAAI,WAAW,CAAC,QAAQ,MAAM,IAC5B,MAAM,IAAI,MACR,kFACF;CAEF,IAAI,qBAEsB;CAC1B,MAAM,WAAW,MAAM,0BAA0B;CACjD,IAAI,WAAW,YAAY,SAAS,gBAAgB,QAAQ,MAAM,IAAI;EACpE,MAAM,OAAO,MAAM,oBAAoB,EAAE,gBAAgB,KAAK,CAAC;EAC/D,IAAI,KAAK,UAAU,WAAW,KAAK,SAAS;GAC1C,MAAM,WAAW,MAAM,8BACrB,KAAK,SACL,QACF;GACA,MAAM,eAAe,MAAM,+BAA+B;GAC1D,IAAI,aAAa,QAAQ,aAAa,aAAa,SAAS,UAC1D,qBAAqB;IACnB,UAAU,SAAS;IACnB,aAAa,SAAS;GACxB;EAEJ;CACF;CACA,OAAO,+BAA+B,MAAM;EAC1C,UAAU;EACV,yBAAyB,+BAA+B,OAAO;EAC/D,SAAS,UACL;GAAE,IAAI,QAAQ,MAAM;GAAI,OAAO,QAAQ,MAAM,SAAS;EAAK,IAC3D;EACJ;CACF,CAAC;AACH"}
1
+ {"version":3,"file":"computer-connection-review-CiIyTeDw.js","names":[],"sources":["../src/commands/computer-connection-review.ts"],"sourcesContent":["import { computerConnectionReviewSchema } from \"@openmeld/schemas\";\nimport {\n buildStoredAuthSessionIdentity,\n getAuthSessionMetadata,\n getAuthSessionState,\n} from \"../config/auth-session\";\nimport { readDaemonServiceContract } from \"../config/daemon-service-contract\";\nimport { resolveServiceAccountIdentity } from \"../local-service/lifecycle/service-account-authorization\";\nimport { readServiceControlCapabilities } from \"./service-control-capabilities\";\n\n/** Display evidence only. Auth and Service owners validate an existing connection. */\nexport async function readComputerConnectionReview() {\n const session = await getAuthSessionMetadata();\n if (session && !session.user?.id) {\n throw new Error(\n \"The computer account cannot be identified. Review its sign-in before connecting.\"\n );\n }\n let existingConnection: ReturnType<\n typeof computerConnectionReviewSchema.parse\n >[\"existingConnection\"] = null;\n const contract = await readDaemonServiceContract();\n if (session && contract && contract.ownerUserId === session.user?.id) {\n const auth = await getAuthSessionState({ validateRemote: true });\n if (auth.state === \"valid\" && auth.session) {\n const identity = await resolveServiceAccountIdentity(\n auth.session,\n contract\n );\n const capabilities = await readServiceControlCapabilities();\n if (capabilities.stop && capabilities.deviceId === identity.deviceId) {\n existingConnection = {\n deviceId: identity.deviceId,\n runtimeLane: identity.lane,\n };\n }\n }\n }\n return computerConnectionReviewSchema.parse({\n protocol: \"computer-connection-v1\",\n previousSessionIdentity: buildStoredAuthSessionIdentity(session),\n account: session\n ? { id: session.user?.id, email: session.user?.email ?? null }\n : null,\n existingConnection,\n });\n}\n"],"mappings":";;;;;;;;;AAWA,eAAsB,+BAA+B;CACnD,MAAM,UAAU,MAAM,uBAAuB;CAC7C,IAAI,WAAW,CAAC,QAAQ,MAAM,IAC5B,MAAM,IAAI,MACR,kFACF;CAEF,IAAI,qBAEsB;CAC1B,MAAM,WAAW,MAAM,0BAA0B;CACjD,IAAI,WAAW,YAAY,SAAS,gBAAgB,QAAQ,MAAM,IAAI;EACpE,MAAM,OAAO,MAAM,oBAAoB,EAAE,gBAAgB,KAAK,CAAC;EAC/D,IAAI,KAAK,UAAU,WAAW,KAAK,SAAS;GAC1C,MAAM,WAAW,MAAM,8BACrB,KAAK,SACL,QACF;GACA,MAAM,eAAe,MAAM,+BAA+B;GAC1D,IAAI,aAAa,QAAQ,aAAa,aAAa,SAAS,UAC1D,qBAAqB;IACnB,UAAU,SAAS;IACnB,aAAa,SAAS;GACxB;EAEJ;CACF;CACA,OAAO,+BAA+B,MAAM;EAC1C,UAAU;EACV,yBAAyB,+BAA+B,OAAO;EAC/D,SAAS,UACL;GAAE,IAAI,QAAQ,MAAM;GAAI,OAAO,QAAQ,MAAM,SAAS;EAAK,IAC3D;EACJ;CACF,CAAC;AACH"}
@@ -1,8 +1,8 @@
1
1
  #!/usr/bin/env node
2
2
 
3
- import { b as resumeInterruptedComputerSetup, p as hasPendingComputerSetupContinuation } from "./auth-session-CVxflepT.js";
4
- import { qt as createPresenter } from "./elapsed-time-B2UGqUlR.js";
5
- import { A as mintPrepareSessionReconnectToken, D as recoverInterruptedComputerAuthHandoff, i as runPrepareSessionExecutor } from "./prepare-session-executor-BSTToACx.js";
3
+ import { b as resumeInterruptedComputerSetup, p as hasPendingComputerSetupContinuation } from "./auth-session-CB7m-csh.js";
4
+ import { qt as createPresenter } from "./elapsed-time-BE9NPM-x.js";
5
+ import { A as mintPrepareSessionReconnectToken, D as recoverInterruptedComputerAuthHandoff, i as runPrepareSessionExecutor } from "./prepare-session-executor-B5aD6Fx_.js";
6
6
  import { setTimeout } from "node:timers/promises";
7
7
  //#region src/commands/computer-setup-continuation.ts
8
8
  const runtime = {
@@ -39,4 +39,4 @@ async function recoverComputerSetupAfterBackgroundUpdate() {
39
39
  //#endregion
40
40
  export { finishComputerSetupAfterBackgroundUpdate, recoverComputerSetupAfterBackgroundUpdate };
41
41
 
42
- //# sourceMappingURL=computer-setup-continuation-DFUxl9kf.js.map
42
+ //# sourceMappingURL=computer-setup-continuation-CeFPluYv.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"computer-setup-continuation-DFUxl9kf.js","names":["sleep"],"sources":["../src/commands/computer-setup-continuation.ts"],"sourcesContent":["import { setTimeout as sleep } from \"node:timers/promises\";\nimport {\n hasPendingComputerSetupContinuation,\n resumeInterruptedComputerSetup,\n} from \"../config/auth-session\";\nimport { mintPrepareSessionReconnectToken } from \"../config/prepare-session-api\";\nimport { createPresenter } from \"../runtime/presenter/index\";\nimport type { RuntimeContext } from \"../runtime/types\";\nimport { recoverInterruptedComputerAuthHandoff } from \"./computer-auth-handoff-recovery\";\nimport { runPrepareSessionExecutor } from \"./prepare-session-executor\";\n\nconst runtime: RuntimeContext = {\n interactive: false,\n resolvedView: \"agent\",\n viewMode: \"agent\",\n};\n\n// Called only by the existing OS-owned maintenance worker after its update.\n// The live Terminal keeps ownership. If it exits, continue the same Core\n// Prepare session using the existing auth journal, not a second setup plan.\nexport async function finishComputerSetupAfterBackgroundUpdate(): Promise<void> {\n while (await hasPendingComputerSetupContinuation()) {\n const resumed = await resumeInterruptedComputerSetup(\n async (continuation) => {\n const { snapshot, opaqueToken } =\n await mintPrepareSessionReconnectToken({\n baseUrl: continuation.gatewayUrl,\n prepareSessionId: continuation.prepareSessionId,\n });\n if (\n snapshot.lifecycleStatus !== \"active\" &&\n snapshot.lifecycleStatus !== \"completed\"\n ) {\n return \"not_completed\";\n }\n const result = await runPrepareSessionExecutor({\n gatewayUrl: continuation.gatewayUrl,\n initialSnapshot: snapshot,\n interactive: false,\n localAgentSelection: continuation.localAgentSelection,\n presenter: createPresenter(runtime),\n runtime,\n startSession: opaqueToken,\n view: \"agent\",\n });\n return result.status;\n }\n );\n if (!resumed) {\n await sleep(500);\n }\n }\n}\n\n// Run after the completed update has released its pending job. Account rollback\n// uses the existing handoff recovery, which itself waits for active updates.\nexport async function recoverComputerSetupAfterBackgroundUpdate(): Promise<void> {\n await recoverInterruptedComputerAuthHandoff({\n presenter: createPresenter(runtime),\n runtime,\n view: \"agent\",\n });\n}\n"],"mappings":";;;;;;;AAWA,MAAM,UAA0B;CAC9B,aAAa;CACb,cAAc;CACd,UAAU;AACZ;AAKA,eAAsB,2CAA0D;CAC9E,OAAO,MAAM,oCAAoC,GA2B/C,IAAI,CAAC,MA1BiB,+BACpB,OAAO,iBAAiB;EACtB,MAAM,EAAE,UAAU,gBAChB,MAAM,iCAAiC;GACrC,SAAS,aAAa;GACtB,kBAAkB,aAAa;EACjC,CAAC;EACH,IACE,SAAS,oBAAoB,YAC7B,SAAS,oBAAoB,aAE7B,OAAO;EAYT,QAAO,MAVc,0BAA0B;GAC7C,YAAY,aAAa;GACzB,iBAAiB;GACjB,aAAa;GACb,qBAAqB,aAAa;GAClC,WAAW,gBAAgB,OAAO;GAClC;GACA,cAAc;GACd,MAAM;EACR,CAAC,EAAA,CACa;CAChB,CACF,GAEE,MAAMA,WAAM,GAAG;AAGrB;AAIA,eAAsB,4CAA2D;CAC/E,MAAM,sCAAsC;EAC1C,WAAW,gBAAgB,OAAO;EAClC;EACA,MAAM;CACR,CAAC;AACH"}
1
+ {"version":3,"file":"computer-setup-continuation-CeFPluYv.js","names":["sleep"],"sources":["../src/commands/computer-setup-continuation.ts"],"sourcesContent":["import { setTimeout as sleep } from \"node:timers/promises\";\nimport {\n hasPendingComputerSetupContinuation,\n resumeInterruptedComputerSetup,\n} from \"../config/auth-session\";\nimport { mintPrepareSessionReconnectToken } from \"../config/prepare-session-api\";\nimport { createPresenter } from \"../runtime/presenter/index\";\nimport type { RuntimeContext } from \"../runtime/types\";\nimport { recoverInterruptedComputerAuthHandoff } from \"./computer-auth-handoff-recovery\";\nimport { runPrepareSessionExecutor } from \"./prepare-session-executor\";\n\nconst runtime: RuntimeContext = {\n interactive: false,\n resolvedView: \"agent\",\n viewMode: \"agent\",\n};\n\n// Called only by the existing OS-owned maintenance worker after its update.\n// The live Terminal keeps ownership. If it exits, continue the same Core\n// Prepare session using the existing auth journal, not a second setup plan.\nexport async function finishComputerSetupAfterBackgroundUpdate(): Promise<void> {\n while (await hasPendingComputerSetupContinuation()) {\n const resumed = await resumeInterruptedComputerSetup(\n async (continuation) => {\n const { snapshot, opaqueToken } =\n await mintPrepareSessionReconnectToken({\n baseUrl: continuation.gatewayUrl,\n prepareSessionId: continuation.prepareSessionId,\n });\n if (\n snapshot.lifecycleStatus !== \"active\" &&\n snapshot.lifecycleStatus !== \"completed\"\n ) {\n return \"not_completed\";\n }\n const result = await runPrepareSessionExecutor({\n gatewayUrl: continuation.gatewayUrl,\n initialSnapshot: snapshot,\n interactive: false,\n localAgentSelection: continuation.localAgentSelection,\n presenter: createPresenter(runtime),\n runtime,\n startSession: opaqueToken,\n view: \"agent\",\n });\n return result.status;\n }\n );\n if (!resumed) {\n await sleep(500);\n }\n }\n}\n\n// Run after the completed update has released its pending job. Account rollback\n// uses the existing handoff recovery, which itself waits for active updates.\nexport async function recoverComputerSetupAfterBackgroundUpdate(): Promise<void> {\n await recoverInterruptedComputerAuthHandoff({\n presenter: createPresenter(runtime),\n runtime,\n view: \"agent\",\n });\n}\n"],"mappings":";;;;;;;AAWA,MAAM,UAA0B;CAC9B,aAAa;CACb,cAAc;CACd,UAAU;AACZ;AAKA,eAAsB,2CAA0D;CAC9E,OAAO,MAAM,oCAAoC,GA2B/C,IAAI,CAAC,MA1BiB,+BACpB,OAAO,iBAAiB;EACtB,MAAM,EAAE,UAAU,gBAChB,MAAM,iCAAiC;GACrC,SAAS,aAAa;GACtB,kBAAkB,aAAa;EACjC,CAAC;EACH,IACE,SAAS,oBAAoB,YAC7B,SAAS,oBAAoB,aAE7B,OAAO;EAYT,QAAO,MAVc,0BAA0B;GAC7C,YAAY,aAAa;GACzB,iBAAiB;GACjB,aAAa;GACb,qBAAqB,aAAa;GAClC,WAAW,gBAAgB,OAAO;GAClC;GACA,cAAc;GACd,MAAM;EACR,CAAC,EAAA,CACa;CAChB,CACF,GAEE,MAAMA,WAAM,GAAG;AAGrB;AAIA,eAAsB,4CAA2D;CAC/E,MAAM,sCAAsC;EAC1C,WAAW,gBAAgB,OAAO;EAClC;EACA,MAAM;CACR,CAAC;AACH"}
@@ -701,7 +701,7 @@ function getErrorCode$2(error) {
701
701
  var package_default = {
702
702
  $schema: "https://www.schemastore.org/package.json",
703
703
  name: "openmeld",
704
- version: "0.3.210",
704
+ version: "0.3.211",
705
705
  openMeldReleaseDate: "2026-09-16",
706
706
  description: "OpenMeld CLI - https://openmeld.ai",
707
707
  license: "MIT",
@@ -3639,4 +3639,4 @@ async function readObservedRuntimeState() {
3639
3639
  //#endregion
3640
3640
  export { readManagedCliInstallation as $, prepareDaemonServiceBundle as A, verifyCliBinaryCodeSignature as At, resolveDaemonServiceArtifact as B, readDaemonServiceContract as Bt, daemonServiceExecutableWrapperPath as C, resolveDaemonServiceUpdateWorkerLaunchdPlistPath as Ct, ensureDaemonServiceStableBinaryExecutable as D, resolveDaemonServiceUpdateWorkerWindowsScriptPath as Dt, discardPreparedDaemonServiceBundle as E, resolveDaemonServiceUpdateWorkerSystemdUnitPath as Et, restoreDaemonActiveBundleStateSnapshot as F, requestLocalSyncRouteCatalog as Ft, readRecentDaemonLifecycleEvents as G, formatDaemonLifecycleOriginSummary as H, runAuditedServiceManagerCarrierMutation as I, sendLocalDaemonControlPlaneRequest as It, runWithDaemonLifecycleCommandJournal as J, resolveRecentDaemonSignalStopCause as K, verifyDaemonActiveBundleIntegrity as L, clearDaemonServiceContract as Lt, resolveAlignedDaemonActiveBundleEntryPath as M, requestLocalAgentActivitySync as Mt, resolveDaemonBundleEntryPathFromState as N, requestLocalDaemonServiceUpdateReadiness as Nt, ensureDaemonServiceUpdateWorkerBinaryExecutable as O, downloadCliBinaryUpdateArtifact as Ot, resolveInstalledDaemonBundleFingerprint as P, requestLocalDaemonShutdown as Pt, pruneManagedInstallVersions as Q, writeDaemonServiceExecutableWrapper as R, isDaemonServiceContractIdentityReusable as Rt, daemonServiceBinaryExecutablePath as S, resolveDaemonServiceUpdateWorkerIdentity as St, daemonServiceUpdateWorkerBinaryPath as T, resolveDaemonServiceUpdateWorkerSystemdTimerUnitPath as Tt, readLatestDaemonLifecycleConnectionStateEvent as U, emitDaemonLifecycleEvent as V, upsertDaemonServiceContract as Vt, readLatestDaemonLifecycleOriginEvent as W, buildInstallSelfJsonPayload as X, collectLocalOperationFailure as Y, performManagedInstall as Z, matchesExpectedDaemonServiceManagerDefinition as _, package_default as _t, resolveDaemonRuntimeState as a, persistPendingDaemonServiceUpdate as at, cleanupInactiveDaemonServiceBundles as b, daemonServiceUpdateWorkerNpmEntryPath as bt, resolveObservedDaemonRuntimeStatus as c, buildNextVersionState as ct, inspectLegacySharedDaemonService as d, fetchLatestCliBinaryRelease as dt, resolveCliSelfVersion as et, listDaemonOwnedProcesses as f, fetchLatestPackageInfo as ft, assertDaemonMaintenanceInstallationOwnership as g, resolveBundledServiceRelease as gt, resolveDaemonBundleIdFromEntryPath as h, writeVersionState as ht, readCurrentObservedDaemonRuntimeStatus as i, completePendingDaemonServiceUpdate as it, readDaemonActiveBundleState as j, LocalDaemonControlPlaneClientError as jt, isDaemonBundleSourceAllowedForLane as k, resolveCliBinaryUpdatePlan as kt, resolveObservedRuntimeCommandEntryPath as l, compareSemver as lt, normalizeDaemonCommandPath as m, readVersionState as mt, getEffectiveDaemonRuntimeStatus as n, OPENMELD_VERSION as nt, resolveDaemonServiceManagerForRuntimeState as o, readLastDaemonServiceUpdate as ot, extractDaemonCommandEntryPath as p, isPlainReleaseVersion as pt, runDaemonServiceManagerAction as q, readCurrentDaemonRuntimeContext as r, DAEMON_SERVICE_UPDATE_JOB_SCHEMA as rt, waitForDaemonSystemServiceToStop as s, readPendingDaemonServiceUpdate as st, clearDaemonRuntimeStateIfDefinitelyStopped as t, withManagedInstallTransaction as tt, cleanupLegacySharedDaemonServiceState as u, ensureVersionStateReady as ut, isOpenMeldManagedBinaryPath as v, INDEPENDENT_MAINTENANCE_REGISTRATION as vt, daemonServiceLauncherPath as w, resolveDaemonServiceUpdateWorkerSystemdPathUnitPath as wt, clearDaemonServiceUpdateWorkerBinaryExecutable as x, hasIndependentMaintenanceRegistration as xt, activateDaemonServiceBundle as y, configureDaemonMaintenanceEnvironment as yt, writeDaemonServiceLauncher as z, isUnsafeProductionDeviceId as zt };
3641
3641
 
3642
- //# sourceMappingURL=daemon-service-runtime-D7cb3-Ov.js.map
3642
+ //# sourceMappingURL=daemon-service-runtime-D8KrOfSV.js.map