openmeld 0.3.211 → 0.3.212

package/dist/control-plane-PxntAyDq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-PxntAyDq.js","names":[],"sources":["../../../packages/schemas/dist/schemas/protocol/shared.js","../../../packages/schemas/dist/schemas/protocol/profile.js","../../../packages/schemas/dist/schemas/daemon/conversation-lifecycle.js","../../../packages/schemas/dist/schemas/daemon/conversation-execution-state.js","../../../packages/schemas/dist/schemas/daemon/provider-runtime-context.js","../../../packages/schemas/dist/schemas/daemon/control-plane.js"],"sourcesContent":["import * as z$1 from \"zod/v4\";\n//#region src/schemas/protocol/shared.ts\nconst trimmedStringFromUnknown = (value) => String(value ?? \"\").trim();\nconst nonEmptyTrimmedStringFromUnknown = z$1.preprocess(trimmedStringFromUnknown, z$1.string().min(1));\nconst finiteIntegerNumber = z$1.number().int().finite();\nconst optionalBooleanQuerySchema = z$1.preprocess((value) => {\n\tif (value === void 0 || value === null || value === \"\") return;\n\tif (typeof value === \"boolean\") return value;\n\tconst normalized = String(value).trim().toLowerCase();\n\tif (normalized === \"true\" || normalized === \"1\") return true;\n\tif (normalized === \"false\" || normalized === \"0\") return false;\n\treturn value;\n}, z$1.boolean().optional());\n//#endregion\nexport { finiteIntegerNumber, nonEmptyTrimmedStringFromUnknown, optionalBooleanQuerySchema, trimmedStringFromUnknown };\n\n//# sourceMappingURL=shared.js.map","                        \nimport { trimmedStringFromUnknown } from \"./shared.js\";\nimport * as z$1 from \"zod/v4\";\n//#region src/schemas/protocol/profile.ts\nconst PROFILE_KIND_VALUES = [\n\t\"human\",\n\t\"agent\",\n\t\"system\"\n];\nconst PROFILE_HANDLE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst UUID_PROFILE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;\nconst AGENT_PROFILE_ID_PATTERN = /^agt_[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;\nconst MAX_PROFILE_HANDLE_LENGTH = 128;\nconst normalizeOptionalProfileLabel = (value) => {\n\tconst normalized = trimmedStringFromUnknown(value);\n\tif (normalized.length === 0) return;\n\treturn normalized.slice(0, 64);\n};\nconst normalizeOptionalProfileHandle = (value) => {\n\tconst normalized = trimmedStringFromUnknown(value);\n\tif (normalized.length === 0) return;\n\treturn profileHandleSchema.safeParse(normalized).success ? normalized : void 0;\n};\nconst MAX_PROFILE_WORKING_DIRECTORY_LENGTH = 4096;\nconst profileWorkspaceModeSchema = z$1.enum([\"openmeld_managed\", \"custom\"]);\nconst profileWorkingDirectorySchema = z$1.string().min(1).max(MAX_PROFILE_WORKING_DIRECTORY_LENGTH).refine((value) => !value.includes(\"\\0\"), { message: \"workingDirectory must not contain NUL bytes\" });\nconst normalizeOptionalWorkingDirectory = (value) => {\n\tif (typeof value !== \"string\") return;\n\tconst parsed = profileWorkingDirectorySchema.safeParse(value);\n\treturn parsed.success ? parsed.data : void 0;\n};\nconst MAX_AVATAR_URL_LENGTH = 2048;\nconst HTTPS_URL_PATTERN = /^https?:\\/\\//i;\n/**\n* Avatar URLs are a public identity field that travels with the Profile across\n* domains. Only http(s) URLs are accepted so the value is safe to render as an\n* `<img src>` on web clients (rejects javascript:/data: injection vectors).\n*/\nconst normalizeOptionalAvatarUrl = (value) => {\n\tconst normalized = trimmedStringFromUnknown(value);\n\tif (normalized.length === 0 || normalized.length > 2048) return;\n\treturn HTTPS_URL_PATTERN.test(normalized) ? normalized : void 0;\n};\n/** Unknown or invalid kinds are normalized to \"agent\" for wire compatibility. */\nconst profileKindWithFallbackSchema = z$1.preprocess((value) => {\n\tconst parsed = z$1.enum(PROFILE_KIND_VALUES).safeParse(value);\n\treturn parsed.success ? parsed.data : \"agent\";\n}, z$1.enum(PROFILE_KIND_VALUES));\nconst profileKindSchema = z$1.enum(PROFILE_KIND_VALUES);\nconst profileLabelSchema = z$1.string().min(1).max(64);\nconst profileHandleSchema = z$1.string().min(1).max(128).regex(PROFILE_HANDLE_PATTERN);\nconst genericProfileIdSchema = z$1.preprocess(trimmedStringFromUnknown, z$1.string().min(1).max(64));\nconst uuidProfileIdSchema = z$1.preprocess(trimmedStringFromUnknown, z$1.string().min(1).max(64).regex(UUID_PROFILE_ID_PATTERN));\nconst agentProfileIdSchema = z$1.preprocess(trimmedStringFromUnknown, z$1.string().min(1).max(64).regex(AGENT_PROFILE_ID_PATTERN));\n/**\n* Runtime OpenMeld profile IDs are auth-backed and follow these rules:\n* - human/system profiles use a UUID\n* - agent profiles use agt_<UUID>\n*\n* Generic test fixtures or legacy intermediary strings should not reuse this\n* schema unless they represent a real runtime profile identity.\n*/\nconst openMeldRuntimeProfileIdSchema = z$1.preprocess(trimmedStringFromUnknown, z$1.string().min(1).max(64).refine((value) => UUID_PROFILE_ID_PATTERN.test(value) || AGENT_PROFILE_ID_PATTERN.test(value), \"Invalid OpenMeld runtime profile ID\"));\n/**\n* Generic wire/profile normalization rules:\n* - trims and validates profileId as a non-empty string\n* - defaults missing/invalid kind to \"agent\"\n* - truncates profileName/owner labels to max length\n* - preserves agent workingDirectory verbatim when it is a valid string\n* - keeps owner only for agent profiles\n*\n* This schema intentionally stays broader than auth-backed runtime IDs because\n* protocol/system messages may still use internal synthetic profile IDs such as\n* `openmeld-system`.\n*/\nconst profileSchema = z$1.object({\n\tkind: profileKindWithFallbackSchema.optional(),\n\tprofileId: genericProfileIdSchema,\n\tprofileHandle: z$1.unknown().optional(),\n\tprofileName: z$1.unknown().optional(),\n\towner: z$1.unknown().optional(),\n\townerName: z$1.unknown().optional(),\n\tagentControllerRef: z$1.unknown().optional(),\n\tagentControllerConversationId: z$1.unknown().optional(),\n\tworkingDirectory: z$1.unknown().optional(),\n\tavatarUrl: z$1.unknown().optional()\n}).transform((value) => {\n\tconst kind = value.kind ?? \"agent\";\n\tconst profileHandle = normalizeOptionalProfileHandle(value.profileHandle);\n\tconst profileName = normalizeOptionalProfileLabel(value.profileName);\n\tconst owner = kind === \"agent\" ? normalizeOptionalProfileLabel(value.owner) : void 0;\n\tconst ownerName = kind === \"agent\" ? normalizeOptionalProfileLabel(value.ownerName) : void 0;\n\tconst agentControllerRef = kind === \"agent\" ? normalizeOptionalProfileLabel(value.agentControllerRef) : void 0;\n\tconst agentControllerConversationId = kind === \"agent\" ? normalizeOptionalProfileLabel(value.agentControllerConversationId) : void 0;\n\tconst workingDirectory = kind === \"agent\" ? normalizeOptionalWorkingDirectory(value.workingDirectory) : void 0;\n\tconst avatarUrl = normalizeOptionalAvatarUrl(value.avatarUrl);\n\treturn {\n\t\tkind,\n\t\tprofileId: value.profileId,\n\t\t...profileHandle ? { profileHandle } : {},\n\t\t...profileName ? { profileName } : {},\n\t\t...owner ? { owner } : {},\n\t\t...ownerName ? { ownerName } : {},\n\t\t...agentControllerRef ? { agentControllerRef } : {},\n\t\t...agentControllerConversationId ? { agentControllerConversationId } : {},\n\t\t...workingDirectory ? { workingDirectory } : {},\n\t\t...avatarUrl ? { avatarUrl } : {}\n\t};\n});\n//#endregion\nexport { MAX_AVATAR_URL_LENGTH, MAX_PROFILE_HANDLE_LENGTH, MAX_PROFILE_WORKING_DIRECTORY_LENGTH, agentProfileIdSchema, genericProfileIdSchema, normalizeOptionalWorkingDirectory, openMeldRuntimeProfileIdSchema, profileHandleSchema, profileKindSchema, profileLabelSchema, profileSchema, profileWorkingDirectorySchema, profileWorkspaceModeSchema, uuidProfileIdSchema };\n\n//# sourceMappingURL=profile.js.map","import * as z$1 from \"zod/v4\";\n//#region src/schemas/daemon/conversation-lifecycle.ts\nconst conversationBootstrapReasonSchema = z$1.enum([\n\t\"missing_bootstrap_state\",\n\t\"compatibility_recreate\",\n\t\"template_changed\",\n\t\"idle_stale\",\n\t\"dispatch_count_stale\",\n\t\"context_healed\",\n\t\"context_replaced\"\n]);\nconst localRuntimeContextReasonSchema = z$1.enum([\n\t\"first_local_runtime_context\",\n\t\"workspace_changed\",\n\t\"transport_mode_changed\",\n\t\"policy_changed\",\n\t\"execution_state_missing\",\n\t\"controller_changed\"\n]);\nconst agentControllerConversationResumePlanBlockedReasonSchema = z$1.enum([\"controller_changed\"]);\nconst agentControllerConversationResumePlanSchema = z$1.discriminatedUnion(\"status\", [\n\tz$1.strictObject({ status: z$1.literal(\"not_bound\") }),\n\tz$1.strictObject({ status: z$1.literal(\"continue_existing\") }),\n\tz$1.strictObject({\n\t\tstatus: z$1.literal(\"blocked\"),\n\t\treason: agentControllerConversationResumePlanBlockedReasonSchema\n\t})\n]);\nconst localRuntimeContextPlanSchema = z$1.strictObject({\n\tstatus: z$1.enum([\"reuse\", \"recreate\"]),\n\treason: z$1.union([localRuntimeContextReasonSchema, z$1.null()])\n});\nconst conversationBootstrapSchema = z$1.discriminatedUnion(\"status\", [z$1.strictObject({\n\treason: z$1.null(),\n\tstatus: z$1.literal(\"applied\")\n}), z$1.strictObject({\n\treason: conversationBootstrapReasonSchema,\n\tstatus: z$1.literal(\"pending\")\n})]);\nconst nextDispatchPlanSchema = z$1.strictObject({\n\tagentControllerConversationResume: agentControllerConversationResumePlanSchema,\n\tlocalRuntimeContext: localRuntimeContextPlanSchema,\n\tbootstrap: conversationBootstrapSchema\n});\nconst agentControllerConversationResumeSchema = z$1.discriminatedUnion(\"status\", [\n\tz$1.strictObject({ status: z$1.literal(\"not_bound\") }),\n\tz$1.strictObject({ status: z$1.literal(\"continued\") }),\n\tz$1.strictObject({ status: z$1.literal(\"replaced_by_provider\") })\n]);\nconst localRuntimeContextExecutionSchema = z$1.strictObject({\n\tstatus: z$1.enum([\"reused\", \"recreated\"]),\n\treason: z$1.union([localRuntimeContextReasonSchema, z$1.null()])\n});\nconst dispatchExecutionSchema = z$1.strictObject({\n\tagentControllerConversationResume: agentControllerConversationResumeSchema,\n\tlocalRuntimeContext: localRuntimeContextExecutionSchema,\n\tbootstrap: conversationBootstrapSchema\n});\n//#endregion\nexport { agentControllerConversationResumePlanBlockedReasonSchema, agentControllerConversationResumePlanSchema, agentControllerConversationResumeSchema, conversationBootstrapReasonSchema, conversationBootstrapSchema, dispatchExecutionSchema, localRuntimeContextExecutionSchema, localRuntimeContextPlanSchema, localRuntimeContextReasonSchema, nextDispatchPlanSchema };\n\n//# sourceMappingURL=conversation-lifecycle.js.map","import { profileWorkingDirectorySchema } from \"../protocol/profile.js\";\nimport { agentControllerConversationRefSchema } from \"./conversation-contract.js\";\nimport { conversationBootstrapReasonSchema } from \"./conversation-lifecycle.js\";\nimport * as z$1 from \"zod/v4\";\n//#region src/schemas/daemon/conversation-execution-state.ts\nconst ISO_DATE_TIME_SCHEMA = z$1.iso.datetime({ offset: true });\nconst bootstrapTemplateFactsSchema = z$1.strictObject({\n\ttemplateVersion: z$1.string().min(1),\n\tcontentFingerprint: z$1.string().min(1)\n});\nconst conversationExecutionStateSchema = z$1.strictObject({\n\tagentContextLookupKey: z$1.string().min(1),\n\tactiveContextId: z$1.string().min(1).nullable(),\n\tlastResolvedAgentControllerConversation: agentControllerConversationRefSchema.optional(),\n\tlastRuntimeWorkspacePath: profileWorkingDirectorySchema.optional(),\n\truntimeWorkspaceFingerprint: z$1.string().min(1),\n\tbootstrapLastAppliedAt: ISO_DATE_TIME_SCHEMA.optional(),\n\tbootstrapLastActivatedAt: ISO_DATE_TIME_SCHEMA.optional(),\n\tdispatchesSinceBootstrapApplied: z$1.number().int().min(0),\n\tlastAppliedTemplateVersion: z$1.string().min(1).optional(),\n\tlastAppliedContentFingerprint: z$1.string().min(1).optional(),\n\tpendingBootstrapReason: conversationBootstrapReasonSchema.optional(),\n\tupdatedAt: ISO_DATE_TIME_SCHEMA\n});\n//#endregion\nexport { bootstrapTemplateFactsSchema, conversationExecutionStateSchema };\n\n//# sourceMappingURL=conversation-execution-state.js.map","import { MAX_PROFILE_WORKING_DIRECTORY_LENGTH } from \"../protocol/profile.js\";\nimport * as z$1 from \"zod/v4\";\n//#region src/schemas/daemon/provider-runtime-context.ts\nconst providerDispatchRuntimeContextSchema = z$1.strictObject({ providerRuntimeWorkingDirectory: z$1.string().trim().min(1).max(MAX_PROFILE_WORKING_DIRECTORY_LENGTH).refine((value) => !value.includes(\"\\0\"), { message: \"providerRuntimeWorkingDirectory must not contain NUL bytes\" }) });\n//#endregion\nexport { providerDispatchRuntimeContextSchema };\n\n//# sourceMappingURL=provider-runtime-context.js.map","import { array, boolean, discriminatedUnion, enum as enumFactory, iso, literal, null as nullFactory, number, strictObject, string, union } from \"../../lazy-zod.js\";\nimport { nonEmptyTrimmedStringFromUnknown } from \"../protocol/shared.js\";\nimport { agentProfileIdSchema, profileWorkingDirectorySchema, profileWorkspaceModeSchema } from \"../protocol/profile.js\";\nimport { runtimeTransportModeSchema } from \"./controller-contract.js\";\nimport { conversationExecutionStateSchema } from \"./conversation-execution-state.js\";\nimport { providerDispatchRuntimeContextSchema } from \"./provider-runtime-context.js\";\n//#region src/schemas/daemon/control-plane.ts\nconst OPENMELD_DAEMON_CONTROL_PLANE_SCHEMA_VERSION = 1;\nconst openMeldDaemonControlPlaneCommandSchema = enumFactory([\n\t\"status\",\n\t\"health\",\n\t\"history\",\n\t\"interrupt\",\n\t\"cancel\",\n\t\"conversation_execution_status\",\n\t\"request_agent_activity_sync\",\n\t\"sync_route_catalog\",\n\t\"set_local_agent_enabled\",\n\t\"set_profile_workspace\",\n\t\"service_update_readiness\",\n\t\"account_control_capabilities\",\n\t\"shutdown\"\n]);\nconst openMeldDaemonHealthStateSchema = enumFactory([\n\t\"ok\",\n\t\"degraded\",\n\t\"down\"\n]);\nconst openMeldDaemonRuntimeHealthStateSchema = enumFactory([\n\t\"healthy\",\n\t\"idle\",\n\t\"suspect\",\n\t\"down\"\n]);\nconst openMeldDaemonControlTargetSelectorSchema = discriminatedUnion(\"by\", [strictObject({\n\tby: literal(\"dispatch\"),\n\tdispatchId: string().min(1)\n}), strictObject({\n\tby: literal(\"task\"),\n\ttaskId: string().min(1)\n})]);\nconst openMeldDaemonInterruptRequestPayloadSchema = strictObject({\n\truntimeCoordinatorExecutionId: string().min(1).optional(),\n\ttarget: openMeldDaemonControlTargetSelectorSchema,\n\tmode: enumFactory([\"graceful\", \"force\"]).optional(),\n\treason: string().min(1).optional()\n});\nconst openMeldDaemonCancelRequestPayloadSchema = strictObject({\n\truntimeCoordinatorExecutionId: string().min(1).optional(),\n\ttarget: openMeldDaemonControlTargetSelectorSchema,\n\treason: string().min(1).optional()\n});\nconst openMeldDaemonShutdownRequestPayloadSchema = strictObject({\n\taccountAdmissionId: string().uuid().optional(),\n\tmode: enumFactory([\"graceful\", \"force\"]).default(\"graceful\"),\n\tgracePeriodMs: number().int().nonnegative().default(5e3)\n});\nconst openMeldDaemonServiceUpdateReadinessPayloadSchema = strictObject({\n\tacceptedWakeCount: number().int().nonnegative(),\n\tsafeToSwitch: boolean(),\n\tunacknowledgedResultCount: number().int().nonnegative()\n});\nconst openMeldDaemonConversationExecutionControllerLaunchStatusSchema = enumFactory([\n\t\"missing\",\n\t\"disabled\",\n\t\"repair_required\",\n\t\"ready\"\n]);\nconst nullableAgentControllerRefSchema = union([string().min(1), nullFactory()]);\nconst nullableNonEmptyStringSchema = union([string().min(1), nullFactory()]);\nconst openMeldDaemonConversationExecutionStatusRequestPayloadSchema = strictObject({\n\tboundAgentControllerRef: nullableAgentControllerRefSchema,\n\tagentControllerConversationId: nullableNonEmptyStringSchema,\n\tagentControllerRef: string().min(1),\n\tspaceId: nonEmptyTrimmedStringFromUnknown,\n\ttargetProfileId: agentProfileIdSchema,\n\ttransportMode: runtimeTransportModeSchema,\n\tvalidate: boolean()\n});\nconst openMeldDaemonSyncRouteCatalogRequestPayloadSchema = strictObject({ reason: string().min(1) });\nconst openMeldDaemonRequestAgentActivitySyncRequestPayloadSchema = strictObject({ reason: string().trim().min(1).max(128) });\nconst openMeldDaemonSetLocalAgentEnabledRequestPayloadSchema = strictObject({\n\tagentId: string().trim().min(1).max(256),\n\tenabled: boolean()\n});\nconst localAgentInstallationOptionSchema = strictObject({\n\tinstallationId: string().trim().min(1).max(256),\n\tname: string().trim().min(1).max(256),\n\tdetails: string().trim().min(1).max(256),\n\tselected: boolean()\n});\nconst openMeldDaemonManageLocalAgentInstallationRequestPayloadSchema = discriminatedUnion(\"operation\", [strictObject({\n\tagentId: string().trim().min(1).max(256),\n\toperation: literal(\"list\")\n}), strictObject({\n\tagentId: string().trim().min(1).max(256),\n\tinstallationId: string().trim().min(1).max(256),\n\toperation: literal(\"select\")\n})]);\nconst openMeldDaemonSetProfileWorkspaceRequestPayloadSchema = strictObject({\n\ttargetProfileId: agentProfileIdSchema,\n\tworkspaceMode: profileWorkspaceModeSchema,\n\tworkspacePath: profileWorkingDirectorySchema.optional()\n}).superRefine((value, context) => {\n\tif (value.workspaceMode === \"custom\" && !value.workspacePath) context.addIssue({\n\t\tcode: \"custom\",\n\t\tmessage: \"workspacePath is required for a custom profile workspace\",\n\t\tpath: [\"workspacePath\"]\n\t});\n\tif (value.workspaceMode === \"openmeld_managed\" && value.workspacePath) context.addIssue({\n\t\tcode: \"custom\",\n\t\tmessage: \"workspacePath must be omitted for an OpenMeld-managed profile workspace\",\n\t\tpath: [\"workspacePath\"]\n\t});\n});\nconst openMeldDaemonConversationExecutionRuntimeWorkspaceReadySchema = strictObject({\n\tconfigPath: string().min(1),\n\tconfiguredWorkspacePath: string().min(1),\n\tfingerprint: string().min(1),\n\tpath: string().min(1),\n\treasonCode: nullFactory(),\n\treasonText: nullFactory(),\n\truntimeContext: providerDispatchRuntimeContextSchema,\n\tstatus: literal(\"ready\"),\n\tworkspaceMode: profileWorkspaceModeSchema\n});\nconst openMeldDaemonConversationExecutionRuntimeWorkspaceMissingSchema = strictObject({\n\tconfigPath: string().min(1),\n\tconfiguredWorkspacePath: nullFactory(),\n\tfingerprint: nullFactory(),\n\tpath: nullFactory(),\n\treasonCode: literal(\"workspace.missing\"),\n\treasonText: string().min(1),\n\truntimeContext: nullFactory(),\n\tstatus: literal(\"missing\"),\n\tworkspaceMode: nullFactory()\n});\nconst openMeldDaemonConversationExecutionRuntimeWorkspaceInvalidSchema = strictObject({\n\tconfigPath: string().min(1),\n\tconfiguredWorkspacePath: union([string().min(1), nullFactory()]),\n\tfingerprint: nullFactory(),\n\tpath: nullFactory(),\n\treasonCode: literal(\"workspace.invalid\"),\n\treasonText: string().min(1),\n\truntimeContext: nullFactory(),\n\tstatus: literal(\"invalid\"),\n\tworkspaceMode: union([profileWorkspaceModeSchema, nullFactory()])\n});\nconst openMeldDaemonConversationExecutionRuntimeWorkspaceSchema = discriminatedUnion(\"status\", [\n\topenMeldDaemonConversationExecutionRuntimeWorkspaceReadySchema,\n\topenMeldDaemonConversationExecutionRuntimeWorkspaceMissingSchema,\n\topenMeldDaemonConversationExecutionRuntimeWorkspaceInvalidSchema\n]);\nconst openMeldDaemonConversationExecutionLocalRuntimeContextStatusSchema = enumFactory([\n\t\"missing\",\n\t\"mismatch\",\n\t\"ready\"\n]);\nconst openMeldDaemonProviderConversationProofStatusSchema = enumFactory([\n\t\"failed\",\n\t\"not_applicable\",\n\t\"not_run\",\n\t\"passed\"\n]);\nconst openMeldDaemonProviderConversationProofProviderSchema = enumFactory([\n\t\"codex\",\n\t\"claude-code\",\n\t\"openclaw\"\n]);\nconst openMeldDaemonProviderConversationProofMethodSchema = enumFactory([\"codex_app_server_thread_resume\"]);\nconst openMeldDaemonProviderConversationProofSchema = strictObject({\n\tagentControllerConversationId: nullableNonEmptyStringSchema,\n\tcheckedAt: union([iso.datetime({ offset: true }), nullFactory()]),\n\terrorCode: nullableNonEmptyStringSchema,\n\terrorMessage: nullableNonEmptyStringSchema,\n\terrorType: nullableNonEmptyStringSchema,\n\texpiresAt: union([iso.datetime({ offset: true }), nullFactory()]),\n\tintrusive: literal(false),\n\tmethod: union([openMeldDaemonProviderConversationProofMethodSchema, nullFactory()]),\n\tprovider: union([openMeldDaemonProviderConversationProofProviderSchema, nullFactory()]),\n\tstatus: openMeldDaemonProviderConversationProofStatusSchema,\n\ttransportMode: union([runtimeTransportModeSchema, nullFactory()])\n});\nconst openMeldDaemonConversationExecutionStatusPayloadSchema = strictObject({\n\tagentContextLookupKey: string().min(1),\n\tcontrollerLaunchStatus: openMeldDaemonConversationExecutionControllerLaunchStatusSchema,\n\texecutionState: conversationExecutionStateSchema.nullable(),\n\tlocalRuntimeContext: strictObject({\n\t\tagentContextLookupKey: string().min(1),\n\t\truntimeWorkspaceFingerprint: nullableNonEmptyStringSchema,\n\t\tstatus: openMeldDaemonConversationExecutionLocalRuntimeContextStatusSchema\n\t}),\n\tproviderConversationProof: openMeldDaemonProviderConversationProofSchema,\n\truntimeWorkspace: openMeldDaemonConversationExecutionRuntimeWorkspaceSchema\n});\nconst openMeldDaemonSyncRouteCatalogStatusSchema = enumFactory([\n\t\"changed\",\n\t\"registered\",\n\t\"unchanged\",\n\t\"failed\",\n\t\"deferred\"\n]);\nconst DAEMON_PROFILE_SKIP_REASON_VALUES = [\n\t\"projection.missing\",\n\t\"controller.registry.disabled\",\n\t\"controller.launch.needs_repair\",\n\t\"runtime.adapter.unsupported\",\n\t\"controller.binding.disabled\",\n\t\"controller.binding.incomplete\",\n\t\"profile.status.inactive\",\n\t\"profile.binding.read_unavailable\",\n\t\"profile.binding.unbound\",\n\t\"workspace.missing\",\n\t\"workspace.invalid\"\n];\nconst daemonProfileSkipReasonSchema = enumFactory(DAEMON_PROFILE_SKIP_REASON_VALUES);\nconst skippedDaemonProfileSchema = strictObject({\n\tprofileId: agentProfileIdSchema,\n\tprofileName: nullableNonEmptyStringSchema,\n\tskipReason: daemonProfileSkipReasonSchema\n});\nconst openMeldDaemonSyncRouteCatalogPayloadSchema = strictObject({\n\taccepted: boolean(),\n\tsyncStatus: openMeldDaemonSyncRouteCatalogStatusSchema,\n\tprofileIds: array(agentProfileIdSchema),\n\taddedProfileIds: array(agentProfileIdSchema).optional(),\n\tkeptProfileIds: array(agentProfileIdSchema).optional(),\n\tremovedProfileIds: array(agentProfileIdSchema).optional(),\n\tskippedProfiles: array(skippedDaemonProfileSchema).optional(),\n\tnote: string().min(1).optional(),\n\terrorMessage: string().min(1).optional()\n});\nconst openMeldDaemonRequestAgentActivitySyncPayloadSchema = strictObject({ accepted: boolean() });\nconst openMeldDaemonSetLocalAgentEnabledPayloadSchema = strictObject({\n\taccepted: boolean(),\n\tagentControllerRef: string().min(1).optional(),\n\tagentId: string().trim().min(1).max(256),\n\tchanged: boolean(),\n\tenabled: boolean(),\n\tmessage: string().min(1).optional(),\n\treasonCode: string().min(1).optional(),\n\treportSyncStatus: enumFactory([\n\t\t\"submitted\",\n\t\t\"skipped\",\n\t\t\"failed\"\n\t]),\n\tstatus: enumFactory([\n\t\t\"updated\",\n\t\t\"unchanged\",\n\t\t\"rejected\"\n\t])\n});\nconst openMeldDaemonManageLocalAgentInstallationPayloadSchema = discriminatedUnion(\"accepted\", [strictObject({\n\taccepted: literal(true),\n\tagentControllerRef: string().min(1),\n\tagentId: string().trim().min(1).max(256),\n\tchanged: boolean(),\n\tinstallations: array(localAgentInstallationOptionSchema),\n\treportSyncStatus: enumFactory([\n\t\t\"submitted\",\n\t\t\"skipped\",\n\t\t\"failed\"\n\t]),\n\tselectionStatus: enumFactory([\n\t\t\"available\",\n\t\t\"blocked_by_work\",\n\t\t\"operation_in_progress\"\n\t]).optional(),\n\tselectedInstallationId: string().trim().min(1).max(256).nullable(),\n\tstatus: enumFactory([\n\t\t\"listed\",\n\t\t\"updated\",\n\t\t\"unchanged\"\n\t])\n}), strictObject({\n\taccepted: literal(false),\n\tagentId: string().trim().min(1).max(256),\n\tchanged: literal(false),\n\tinstallations: array(localAgentInstallationOptionSchema),\n\tmessage: string().min(1).optional(),\n\treasonCode: string().min(1).optional(),\n\treportSyncStatus: literal(\"failed\"),\n\tselectionStatus: enumFactory([\n\t\t\"available\",\n\t\t\"blocked_by_work\",\n\t\t\"operation_in_progress\"\n\t]).optional(),\n\tselectedInstallationId: string().trim().min(1).max(256).nullable(),\n\tstatus: literal(\"rejected\")\n})]);\nconst openMeldDaemonSetProfileWorkspacePayloadSchema = discriminatedUnion(\"accepted\", [strictObject({\n\taccepted: literal(true),\n\ttargetProfileId: agentProfileIdSchema,\n\tstatus: literal(\"updated\"),\n\tworkspaceMode: profileWorkspaceModeSchema,\n\tworkspacePath: string().min(1)\n}), strictObject({\n\taccepted: literal(false),\n\ttargetProfileId: agentProfileIdSchema,\n\tmessage: string().min(1).optional(),\n\treasonCode: string().min(1).optional(),\n\tstatus: literal(\"rejected\")\n})]);\nconst openMeldDaemonControlPlaneRequestBaseSchema = strictObject({\n\tv: literal(1),\n\trequestId: string().min(1).optional(),\n\tauthToken: string().min(1).optional()\n});\nconst openMeldDaemonControlPlaneRequestSchema = discriminatedUnion(\"command\", [\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({ command: literal(\"account_control_capabilities\") }),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({ command: literal(\"status\") }),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({ command: literal(\"health\") }),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({ command: literal(\"history\") }),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"interrupt\"),\n\t\tpayload: openMeldDaemonInterruptRequestPayloadSchema\n\t}),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"cancel\"),\n\t\tpayload: openMeldDaemonCancelRequestPayloadSchema\n\t}),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"conversation_execution_status\"),\n\t\tpayload: openMeldDaemonConversationExecutionStatusRequestPayloadSchema\n\t}),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"sync_route_catalog\"),\n\t\tpayload: openMeldDaemonSyncRouteCatalogRequestPayloadSchema\n\t}),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"request_agent_activity_sync\"),\n\t\tpayload: openMeldDaemonRequestAgentActivitySyncRequestPayloadSchema\n\t}),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"set_local_agent_enabled\"),\n\t\tpayload: openMeldDaemonSetLocalAgentEnabledRequestPayloadSchema\n\t}),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"set_profile_workspace\"),\n\t\tpayload: openMeldDaemonSetProfileWorkspaceRequestPayloadSchema\n\t}),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({ command: literal(\"service_update_readiness\") }),\n\topenMeldDaemonControlPlaneRequestBaseSchema.extend({\n\t\tcommand: literal(\"shutdown\"),\n\t\tpayload: openMeldDaemonShutdownRequestPayloadSchema.optional()\n\t})\n]);\nconst openMeldDaemonStatusPayloadSchema = strictObject({\n\tinstalled: boolean(),\n\trunning: boolean(),\n\tdaemonVersion: string().min(1),\n\truntimeRoot: string().min(1),\n\tcheckedAt: string().min(1)\n});\nconst openMeldDaemonHealthPayloadSchema = strictObject({\n\tstate: openMeldDaemonHealthStateSchema,\n\truntimeState: openMeldDaemonRuntimeHealthStateSchema.optional(),\n\treasonCode: string().min(1),\n\tcheckedAt: string().min(1)\n});\nconst openMeldDaemonHistoryEntrySchema = strictObject({\n\tid: string().min(1),\n\tts: string().min(1),\n\tcode: string().min(1),\n\tmessage: string().min(1)\n});\nconst openMeldDaemonHistoryPayloadSchema = strictObject({\n\tentries: array(openMeldDaemonHistoryEntrySchema),\n\tnextCursor: string().min(1).optional()\n});\nconst openMeldDaemonInterruptPayloadSchema = strictObject({\n\taccepted: boolean(),\n\ttarget: openMeldDaemonControlTargetSelectorSchema,\n\tresolvedDispatchId: string().min(1).optional(),\n\tresolvedRuntimeCoordinatorExecutionId: string().min(1).optional(),\n\tresolvedTaskId: string().min(1).optional(),\n\tnote: string().min(1).optional(),\n\treasonCode: string().min(1).optional()\n});\nconst openMeldDaemonCancelPayloadSchema = strictObject({\n\taccepted: boolean(),\n\ttarget: openMeldDaemonControlTargetSelectorSchema,\n\tresolvedDispatchId: string().min(1).optional(),\n\tresolvedRuntimeCoordinatorExecutionId: string().min(1).optional(),\n\tresolvedTaskId: string().min(1).optional(),\n\tnote: string().min(1).optional(),\n\treasonCode: string().min(1).optional()\n});\nconst openMeldDaemonControlPlaneErrorPayloadSchema = strictObject({\n\terrorCode: string().min(1),\n\terrorMessage: string().min(1),\n\tnote: string().min(1).optional()\n});\nconst openMeldDaemonShutdownPayloadSchema = strictObject({\n\taccepted: boolean(),\n\tmode: enumFactory([\"graceful\", \"force\"]),\n\tgracePeriodMs: number().int().nonnegative()\n});\nconst openMeldDaemonControlPlaneResponseBaseSchema = strictObject({\n\tv: literal(1),\n\trequestId: string().min(1).optional()\n});\nconst openMeldDaemonStatusResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.status\"),\n\tpayload: openMeldDaemonStatusPayloadSchema\n});\nconst openMeldDaemonHealthResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.health\"),\n\tpayload: openMeldDaemonHealthPayloadSchema\n});\nconst openMeldDaemonHistoryResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.history\"),\n\tpayload: openMeldDaemonHistoryPayloadSchema\n});\nconst openMeldDaemonInterruptResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.interrupt\"),\n\tpayload: openMeldDaemonInterruptPayloadSchema\n});\nconst openMeldDaemonCancelResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.cancel\"),\n\tpayload: openMeldDaemonCancelPayloadSchema\n});\nconst openMeldDaemonConversationExecutionStatusResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.conversation_execution_status\"),\n\tpayload: openMeldDaemonConversationExecutionStatusPayloadSchema\n});\nconst openMeldDaemonSyncRouteCatalogResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.sync_route_catalog\"),\n\tpayload: openMeldDaemonSyncRouteCatalogPayloadSchema\n});\nconst openMeldDaemonRequestAgentActivitySyncResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.agent_activity_sync_requested\"),\n\tpayload: openMeldDaemonRequestAgentActivitySyncPayloadSchema\n});\nconst openMeldDaemonSetLocalAgentEnabledResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.set_local_agent_enabled\"),\n\tpayload: openMeldDaemonSetLocalAgentEnabledPayloadSchema\n});\nconst openMeldDaemonSetProfileWorkspaceResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.set_profile_workspace\"),\n\tpayload: openMeldDaemonSetProfileWorkspacePayloadSchema\n});\nconst openMeldDaemonShutdownResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.shutdown\"),\n\tpayload: openMeldDaemonShutdownPayloadSchema\n});\nconst openMeldDaemonServiceUpdateReadinessResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.update_readiness\"),\n\tpayload: openMeldDaemonServiceUpdateReadinessPayloadSchema\n});\nconst openMeldDaemonControlPlaneErrorResponseSchema = openMeldDaemonControlPlaneResponseBaseSchema.extend({\n\tcode: literal(\"service.error\"),\n\tpayload: openMeldDaemonControlPlaneErrorPayloadSchema\n});\nconst openMeldDaemonControlPlaneResponseSchema = discriminatedUnion(\"code\", [\n\topenMeldDaemonControlPlaneResponseBaseSchema.extend({\n\t\tcode: literal(\"service.account_control_capabilities\"),\n\t\tpayload: strictObject({ supported: boolean() })\n\t}),\n\topenMeldDaemonStatusResponseSchema,\n\topenMeldDaemonHealthResponseSchema,\n\topenMeldDaemonHistoryResponseSchema,\n\topenMeldDaemonInterruptResponseSchema,\n\topenMeldDaemonCancelResponseSchema,\n\topenMeldDaemonConversationExecutionStatusResponseSchema,\n\topenMeldDaemonSyncRouteCatalogResponseSchema,\n\topenMeldDaemonRequestAgentActivitySyncResponseSchema,\n\topenMeldDaemonSetLocalAgentEnabledResponseSchema,\n\topenMeldDaemonSetProfileWorkspaceResponseSchema,\n\topenMeldDaemonServiceUpdateReadinessResponseSchema,\n\topenMeldDaemonShutdownResponseSchema,\n\topenMeldDaemonControlPlaneErrorResponseSchema\n]);\n//#endregion\nexport { DAEMON_PROFILE_SKIP_REASON_VALUES, OPENMELD_DAEMON_CONTROL_PLANE_SCHEMA_VERSION, daemonProfileSkipReasonSchema, localAgentInstallationOptionSchema, openMeldDaemonCancelPayloadSchema, openMeldDaemonCancelRequestPayloadSchema, openMeldDaemonCancelResponseSchema, openMeldDaemonControlPlaneCommandSchema, openMeldDaemonControlPlaneErrorPayloadSchema, openMeldDaemonControlPlaneErrorResponseSchema, openMeldDaemonControlPlaneRequestSchema, openMeldDaemonControlPlaneResponseSchema, openMeldDaemonControlTargetSelectorSchema, openMeldDaemonConversationExecutionControllerLaunchStatusSchema, openMeldDaemonConversationExecutionLocalRuntimeContextStatusSchema, openMeldDaemonConversationExecutionRuntimeWorkspaceInvalidSchema, openMeldDaemonConversationExecutionRuntimeWorkspaceMissingSchema, openMeldDaemonConversationExecutionRuntimeWorkspaceReadySchema, openMeldDaemonConversationExecutionRuntimeWorkspaceSchema, openMeldDaemonConversationExecutionStatusPayloadSchema, openMeldDaemonConversationExecutionStatusRequestPayloadSchema, openMeldDaemonConversationExecutionStatusResponseSchema, openMeldDaemonHealthPayloadSchema, openMeldDaemonHealthResponseSchema, openMeldDaemonHealthStateSchema, openMeldDaemonHistoryEntrySchema, openMeldDaemonHistoryPayloadSchema, openMeldDaemonHistoryResponseSchema, openMeldDaemonInterruptPayloadSchema, openMeldDaemonInterruptRequestPayloadSchema, openMeldDaemonInterruptResponseSchema, openMeldDaemonManageLocalAgentInstallationPayloadSchema, openMeldDaemonManageLocalAgentInstallationRequestPayloadSchema, openMeldDaemonProviderConversationProofMethodSchema, openMeldDaemonProviderConversationProofProviderSchema, openMeldDaemonProviderConversationProofSchema, openMeldDaemonProviderConversationProofStatusSchema, openMeldDaemonRequestAgentActivitySyncPayloadSchema, openMeldDaemonRequestAgentActivitySyncRequestPayloadSchema, openMeldDaemonRequestAgentActivitySyncResponseSchema, openMeldDaemonRuntimeHealthStateSchema, openMeldDaemonServiceUpdateReadinessPayloadSchema, openMeldDaemonServiceUpdateReadinessResponseSchema, openMeldDaemonSetLocalAgentEnabledPayloadSchema, openMeldDaemonSetLocalAgentEnabledRequestPayloadSchema, openMeldDaemonSetLocalAgentEnabledResponseSchema, openMeldDaemonSetProfileWorkspacePayloadSchema, openMeldDaemonSetProfileWorkspaceRequestPayloadSchema, openMeldDaemonSetProfileWorkspaceResponseSchema, openMeldDaemonShutdownPayloadSchema, openMeldDaemonShutdownRequestPayloadSchema, openMeldDaemonShutdownResponseSchema, openMeldDaemonStatusPayloadSchema, openMeldDaemonStatusResponseSchema, openMeldDaemonSyncRouteCatalogPayloadSchema, openMeldDaemonSyncRouteCatalogRequestPayloadSchema, openMeldDaemonSyncRouteCatalogResponseSchema, openMeldDaemonSyncRouteCatalogStatusSchema, skippedDaemonProfileSchema };\n\n//# sourceMappingURL=control-plane.js.map"],"mappings":";;;;;;AAEA,MAAM,4BAA4B,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;AACrE,MAAM,mCAAmC,IAAI,WAAW,0BAA0B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;AACrG,MAAM,sBAAsB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AACtD,MAAM,6BAA6B,IAAI,YAAY,UAAU;CAC5D,IAAI,UAAU,KAAK,KAAK,UAAU,QAAQ,UAAU,IAAI;CACxD,IAAI,OAAO,UAAU,WAAW,OAAO;CACvC,MAAM,aAAa,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY;CACpD,IAAI,eAAe,UAAU,eAAe,KAAK,OAAO;CACxD,IAAI,eAAe,WAAW,eAAe,KAAK,OAAO;CACzD,OAAO;AACR,GAAG,IAAI,QAAQ,CAAC,CAAC,SAAS,CAAC;;;ACR3B,MAAM,sBAAsB;CAC3B;CACA;CACA;AACD;AACA,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AAEjC,MAAM,iCAAiC,UAAU;CAChD,MAAM,aAAa,yBAAyB,KAAK;CACjD,IAAI,WAAW,WAAW,GAAG;CAC7B,OAAO,WAAW,MAAM,GAAG,EAAE;AAC9B;AACA,MAAM,kCAAkC,UAAU;CACjD,MAAM,aAAa,yBAAyB,KAAK;CACjD,IAAI,WAAW,WAAW,GAAG;CAC7B,OAAO,oBAAoB,UAAU,UAAU,CAAC,CAAC,UAAU,aAAa,KAAK;AAC9E;AACA,MAAM,uCAAuC;AAC7C,MAAM,6BAA6B,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC;AAC1E,MAAM,gCAAgC,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,QAAQ,UAAU,CAAC,MAAM,SAAS,IAAI,GAAG,EAAE,SAAS,8CAA8C,CAAC;AACvM,MAAM,qCAAqC,UAAU;CACpD,IAAI,OAAO,UAAU,UAAU;CAC/B,MAAM,SAAS,8BAA8B,UAAU,KAAK;CAC5D,OAAO,OAAO,UAAU,OAAO,OAAO,KAAK;AAC5C;AAEA,MAAM,oBAAoB;;;;;;AAM1B,MAAM,8BAA8B,UAAU;CAC7C,MAAM,aAAa,yBAAyB,KAAK;CACjD,IAAI,WAAW,WAAW,KAAK,WAAW,SAAS,MAAM;CACzD,OAAO,kBAAkB,KAAK,UAAU,IAAI,aAAa,KAAK;AAC/D;;AAEA,MAAM,gCAAgC,IAAI,YAAY,UAAU;CAC/D,MAAM,SAAS,IAAI,KAAK,mBAAmB,CAAC,CAAC,UAAU,KAAK;CAC5D,OAAO,OAAO,UAAU,OAAO,OAAO;AACvC,GAAG,IAAI,KAAK,mBAAmB,CAAC;AAChC,MAAM,oBAAoB,IAAI,KAAK,mBAAmB;AACtD,MAAM,qBAAqB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;AACrD,MAAM,sBAAsB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,sBAAsB;AACrF,MAAM,yBAAyB,IAAI,WAAW,0BAA0B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnG,MAAM,sBAAsB,IAAI,WAAW,0BAA0B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,uBAAuB,CAAC;AAC/H,MAAM,uBAAuB,IAAI,WAAW,0BAA0B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,wBAAwB,CAAC;;;;;;;;;AASjI,MAAM,iCAAiC,IAAI,WAAW,0BAA0B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,UAAU,wBAAwB,KAAK,KAAK,KAAK,yBAAyB,KAAK,KAAK,GAAG,qCAAqC,CAAC;;;;;;;;;;;;;AAajP,MAAM,gBAAgB,IAAI,OAAO;CAChC,MAAM,8BAA8B,SAAS;CAC7C,WAAW;CACX,eAAe,IAAI,QAAQ,CAAC,CAAC,SAAS;CACtC,aAAa,IAAI,QAAQ,CAAC,CAAC,SAAS;CACpC,OAAO,IAAI,QAAQ,CAAC,CAAC,SAAS;CAC9B,WAAW,IAAI,QAAQ,CAAC,CAAC,SAAS;CAClC,oBAAoB,IAAI,QAAQ,CAAC,CAAC,SAAS;CAC3C,+BAA+B,IAAI,QAAQ,CAAC,CAAC,SAAS;CACtD,kBAAkB,IAAI,QAAQ,CAAC,CAAC,SAAS;CACzC,WAAW,IAAI,QAAQ,CAAC,CAAC,SAAS;AACnC,CAAC,CAAC,CAAC,WAAW,UAAU;CACvB,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,gBAAgB,+BAA+B,MAAM,aAAa;CACxE,MAAM,cAAc,8BAA8B,MAAM,WAAW;CACnE,MAAM,QAAQ,SAAS,UAAU,8BAA8B,MAAM,KAAK,IAAI,KAAK;CACnF,MAAM,YAAY,SAAS,UAAU,8BAA8B,MAAM,SAAS,IAAI,KAAK;CAC3F,MAAM,qBAAqB,SAAS,UAAU,8BAA8B,MAAM,kBAAkB,IAAI,KAAK;CAC7G,MAAM,gCAAgC,SAAS,UAAU,8BAA8B,MAAM,6BAA6B,IAAI,KAAK;CACnI,MAAM,mBAAmB,SAAS,UAAU,kCAAkC,MAAM,gBAAgB,IAAI,KAAK;CAC7G,MAAM,YAAY,2BAA2B,MAAM,SAAS;CAC5D,OAAO;EACN;EACA,WAAW,MAAM;EACjB,GAAG,gBAAgB,EAAE,cAAc,IAAI,CAAC;EACxC,GAAG,cAAc,EAAE,YAAY,IAAI,CAAC;EACpC,GAAG,QAAQ,EAAE,MAAM,IAAI,CAAC;EACxB,GAAG,YAAY,EAAE,UAAU,IAAI,CAAC;EAChC,GAAG,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;EAClD,GAAG,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;EACxE,GAAG,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;EAC9C,GAAG,YAAY,EAAE,UAAU,IAAI,CAAC;CACjC;AACD,CAAC;;;AC1GD,MAAM,oCAAoC,IAAI,KAAK;CAClD;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,kCAAkC,IAAI,KAAK;CAChD;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,2DAA2D,IAAI,KAAK,CAAC,oBAAoB,CAAC;AAChG,MAAM,8CAA8C,IAAI,mBAAmB,UAAU;CACpF,IAAI,aAAa,EAAE,QAAQ,IAAI,QAAQ,WAAW,EAAE,CAAC;CACrD,IAAI,aAAa,EAAE,QAAQ,IAAI,QAAQ,mBAAmB,EAAE,CAAC;CAC7D,IAAI,aAAa;EAChB,QAAQ,IAAI,QAAQ,SAAS;EAC7B,QAAQ;CACT,CAAC;AACF,CAAC;AACD,MAAM,gCAAgC,IAAI,aAAa;CACtD,QAAQ,IAAI,KAAK,CAAC,SAAS,UAAU,CAAC;CACtC,QAAQ,IAAI,MAAM,CAAC,iCAAiC,IAAI,KAAK,CAAC,CAAC;AAChE,CAAC;AACD,MAAM,8BAA8B,IAAI,mBAAmB,UAAU,CAAC,IAAI,aAAa;CACtF,QAAQ,IAAI,KAAK;CACjB,QAAQ,IAAI,QAAQ,SAAS;AAC9B,CAAC,GAAG,IAAI,aAAa;CACpB,QAAQ;CACR,QAAQ,IAAI,QAAQ,SAAS;AAC9B,CAAC,CAAC,CAAC;AAC4B,IAAI,aAAa;CAC/C,mCAAmC;CACnC,qBAAqB;CACrB,WAAW;AACZ,CAAC;AACD,MAAM,0CAA0C,IAAI,mBAAmB,UAAU;CAChF,IAAI,aAAa,EAAE,QAAQ,IAAI,QAAQ,WAAW,EAAE,CAAC;CACrD,IAAI,aAAa,EAAE,QAAQ,IAAI,QAAQ,WAAW,EAAE,CAAC;CACrD,IAAI,aAAa,EAAE,QAAQ,IAAI,QAAQ,sBAAsB,EAAE,CAAC;AACjE,CAAC;AACD,MAAM,qCAAqC,IAAI,aAAa;CAC3D,QAAQ,IAAI,KAAK,CAAC,UAAU,WAAW,CAAC;CACxC,QAAQ,IAAI,MAAM,CAAC,iCAAiC,IAAI,KAAK,CAAC,CAAC;AAChE,CAAC;AACD,MAAM,0BAA0B,IAAI,aAAa;CAChD,mCAAmC;CACnC,qBAAqB;CACrB,WAAW;AACZ,CAAC;;;ACpDD,MAAM,uBAAuB,IAAI,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC;AAC9D,MAAM,+BAA+B,IAAI,aAAa;CACrD,iBAAiB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CACnC,oBAAoB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AACD,MAAM,mCAAmC,IAAI,aAAa;CACzD,uBAAuB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CACzC,iBAAiB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC9C,yCAAyC,qCAAqC,SAAS;CACvF,0BAA0B,8BAA8B,SAAS;CACjE,6BAA6B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;CAC/C,wBAAwB,qBAAqB,SAAS;CACtD,0BAA0B,qBAAqB,SAAS;CACxD,iCAAiC,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CACzD,4BAA4B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACzD,+BAA+B,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC5D,wBAAwB,kCAAkC,SAAS;CACnE,WAAW;AACZ,CAAC;;;ACpBD,MAAM,uCAAuC,IAAI,aAAa,EAAE,iCAAiC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,QAAQ,UAAU,CAAC,MAAM,SAAS,IAAI,GAAG,EAAE,SAAS,6DAA6D,CAAC,EAAE,CAAC;ACK3O,YAAY;CAC3D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,kCAAkC,YAAY;CACnD;CACA;CACA;AACD,CAAC;AACD,MAAM,yCAAyC,YAAY;CAC1D;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,4CAA4C,mBAAmB,MAAM,CAAC,aAAa;CACxF,IAAI,QAAQ,UAAU;CACtB,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;AAC3B,CAAC,GAAG,aAAa;CAChB,IAAI,QAAQ,MAAM;CAClB,QAAQ,OAAO,CAAC,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC,CAAC;AACH,MAAM,8CAA8C,aAAa;CAChE,+BAA+B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxD,QAAQ;CACR,MAAM,YAAY,CAAC,YAAY,OAAO,CAAC,CAAC,CAAC,SAAS;CAClD,QAAQ,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAClC,CAAC;AACD,MAAM,2CAA2C,aAAa;CAC7D,+BAA+B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxD,QAAQ;CACR,QAAQ,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAClC,CAAC;AACD,MAAM,6CAA6C,aAAa;CAC/D,oBAAoB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS;CAC7C,MAAM,YAAY,CAAC,YAAY,OAAO,CAAC,CAAC,CAAC,QAAQ,UAAU;CAC3D,eAAe,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,GAAG;AACxD,CAAC;AACD,MAAM,oDAAoD,aAAa;CACtE,mBAAmB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC9C,cAAc,QAAQ;CACtB,2BAA2B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;AACvD,CAAC;AACD,MAAM,kEAAkE,YAAY;CACnF;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,mCAAmC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;AAC/E,MAAM,+BAA+B,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;AAC3E,MAAM,gEAAgE,aAAa;CAClF,yBAAyB;CACzB,+BAA+B;CAC/B,oBAAoB,OAAO,CAAC,CAAC,IAAI,CAAC;CAClC,SAAS;CACT,iBAAiB;CACjB,eAAe;CACf,UAAU,QAAQ;AACnB,CAAC;AACD,MAAM,qDAAqD,aAAa,EAAE,QAAQ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACnG,MAAM,6DAA6D,aAAa,EAAE,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAC3H,MAAM,yDAAyD,aAAa;CAC3E,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACvC,SAAS,QAAQ;AAClB,CAAC;AACD,MAAM,qCAAqC,aAAa;CACvD,gBAAgB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAC9C,MAAM,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACpC,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACvC,UAAU,QAAQ;AACnB,CAAC;AACD,MAAM,iEAAiE,mBAAmB,aAAa,CAAC,aAAa;CACpH,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACvC,WAAW,QAAQ,MAAM;AAC1B,CAAC,GAAG,aAAa;CAChB,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACvC,gBAAgB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAC9C,WAAW,QAAQ,QAAQ;AAC5B,CAAC,CAAC,CAAC;AACH,MAAM,wDAAwD,aAAa;CAC1E,iBAAiB;CACjB,eAAe;CACf,eAAe,8BAA8B,SAAS;AACvD,CAAC,CAAC,CAAC,aAAa,OAAO,YAAY;CAClC,IAAI,MAAM,kBAAkB,YAAY,CAAC,MAAM,eAAe,QAAQ,SAAS;EAC9E,MAAM;EACN,SAAS;EACT,MAAM,CAAC,eAAe;CACvB,CAAC;CACD,IAAI,MAAM,kBAAkB,sBAAsB,MAAM,eAAe,QAAQ,SAAS;EACvF,MAAM;EACN,SAAS;EACT,MAAM,CAAC,eAAe;CACvB,CAAC;AACF,CAAC;AAkCD,MAAM,4DAA4D,mBAAmB,UAAU;CAjCxB,aAAa;EACnF,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;EAC1B,yBAAyB,OAAO,CAAC,CAAC,IAAI,CAAC;EACvC,aAAa,OAAO,CAAC,CAAC,IAAI,CAAC;EAC3B,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC;EACpB,YAAY,YAAY;EACxB,YAAY,YAAY;EACxB,gBAAgB;EAChB,QAAQ,QAAQ,OAAO;EACvB,eAAe;CAChB,CAwBC;CAvBwE,aAAa;EACrF,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;EAC1B,yBAAyB,YAAY;EACrC,aAAa,YAAY;EACzB,MAAM,YAAY;EAClB,YAAY,QAAQ,mBAAmB;EACvC,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;EAC1B,gBAAgB,YAAY;EAC5B,QAAQ,QAAQ,SAAS;EACzB,eAAe,YAAY;CAC5B,CAcC;CAbwE,aAAa;EACrF,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;EAC1B,yBAAyB,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;EAC/D,aAAa,YAAY;EACzB,MAAM,YAAY;EAClB,YAAY,QAAQ,mBAAmB;EACvC,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;EAC1B,gBAAgB,YAAY;EAC5B,QAAQ,QAAQ,SAAS;EACzB,eAAe,MAAM,CAAC,4BAA4B,YAAY,CAAC,CAAC;CACjE,CAIC;AACD,CAAC;AACD,MAAM,qEAAqE,YAAY;CACtF;CACA;CACA;AACD,CAAC;AACD,MAAM,sDAAsD,YAAY;CACvE;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,wDAAwD,YAAY;CACzE;CACA;CACA;AACD,CAAC;AACD,MAAM,sDAAsD,YAAY,CAAC,gCAAgC,CAAC;AAC1G,MAAM,gDAAgD,aAAa;CAClE,+BAA+B;CAC/B,WAAW,MAAM,CAAC,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC,GAAG,YAAY,CAAC,CAAC;CAChE,WAAW;CACX,cAAc;CACd,WAAW;CACX,WAAW,MAAM,CAAC,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC,GAAG,YAAY,CAAC,CAAC;CAChE,WAAW,QAAQ,KAAK;CACxB,QAAQ,MAAM,CAAC,qDAAqD,YAAY,CAAC,CAAC;CAClF,UAAU,MAAM,CAAC,uDAAuD,YAAY,CAAC,CAAC;CACtF,QAAQ;CACR,eAAe,MAAM,CAAC,4BAA4B,YAAY,CAAC,CAAC;AACjE,CAAC;AACD,MAAM,yDAAyD,aAAa;CAC3E,uBAAuB,OAAO,CAAC,CAAC,IAAI,CAAC;CACrC,wBAAwB;CACxB,gBAAgB,iCAAiC,SAAS;CAC1D,qBAAqB,aAAa;EACjC,uBAAuB,OAAO,CAAC,CAAC,IAAI,CAAC;EACrC,6BAA6B;EAC7B,QAAQ;CACT,CAAC;CACD,2BAA2B;CAC3B,kBAAkB;AACnB,CAAC;AACD,MAAM,6CAA6C,YAAY;CAC9D;CACA;CACA;CACA;CACA;AACD,CAAC;AAeD,MAAM,6BAA6B,aAAa;CAC/C,WAAW;CACX,aAAa;CACb,YAJqC,YAAY;EAZjD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CAEiD,CAIrC;AACb,CAAC;AACD,MAAM,8CAA8C,aAAa;CAChE,UAAU,QAAQ;CAClB,YAAY;CACZ,YAAY,MAAM,oBAAoB;CACtC,iBAAiB,MAAM,oBAAoB,CAAC,CAAC,SAAS;CACtD,gBAAgB,MAAM,oBAAoB,CAAC,CAAC,SAAS;CACrD,mBAAmB,MAAM,oBAAoB,CAAC,CAAC,SAAS;CACxD,iBAAiB,MAAM,0BAA0B,CAAC,CAAC,SAAS;CAC5D,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC/B,cAAc,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACxC,CAAC;AACD,MAAM,sDAAsD,aAAa,EAAE,UAAU,QAAQ,EAAE,CAAC;AAChG,MAAM,kDAAkD,aAAa;CACpE,UAAU,QAAQ;CAClB,oBAAoB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC7C,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACvC,SAAS,QAAQ;CACjB,SAAS,QAAQ;CACjB,SAAS,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAClC,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrC,kBAAkB,YAAY;EAC7B;EACA;EACA;CACD,CAAC;CACD,QAAQ,YAAY;EACnB;EACA;EACA;CACD,CAAC;AACF,CAAC;AACD,MAAM,0DAA0D,mBAAmB,YAAY,CAAC,aAAa;CAC5G,UAAU,QAAQ,IAAI;CACtB,oBAAoB,OAAO,CAAC,CAAC,IAAI,CAAC;CAClC,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACvC,SAAS,QAAQ;CACjB,eAAe,MAAM,kCAAkC;CACvD,kBAAkB,YAAY;EAC7B;EACA;EACA;CACD,CAAC;CACD,iBAAiB,YAAY;EAC5B;EACA;EACA;CACD,CAAC,CAAC,CAAC,SAAS;CACZ,wBAAwB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CACjE,QAAQ,YAAY;EACnB;EACA;EACA;CACD,CAAC;AACF,CAAC,GAAG,aAAa;CAChB,UAAU,QAAQ,KAAK;CACvB,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACvC,SAAS,QAAQ,KAAK;CACtB,eAAe,MAAM,kCAAkC;CACvD,SAAS,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAClC,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrC,kBAAkB,QAAQ,QAAQ;CAClC,iBAAiB,YAAY;EAC5B;EACA;EACA;CACD,CAAC,CAAC,CAAC,SAAS;CACZ,wBAAwB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CACjE,QAAQ,QAAQ,UAAU;AAC3B,CAAC,CAAC,CAAC;AACH,MAAM,iDAAiD,mBAAmB,YAAY,CAAC,aAAa;CACnG,UAAU,QAAQ,IAAI;CACtB,iBAAiB;CACjB,QAAQ,QAAQ,SAAS;CACzB,eAAe;CACf,eAAe,OAAO,CAAC,CAAC,IAAI,CAAC;AAC9B,CAAC,GAAG,aAAa;CAChB,UAAU,QAAQ,KAAK;CACvB,iBAAiB;CACjB,SAAS,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAClC,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrC,QAAQ,QAAQ,UAAU;AAC3B,CAAC,CAAC,CAAC;AACH,MAAM,8CAA8C,aAAa;CAChE,GAAG,QAAQ,CAAC;CACZ,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACpC,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACrC,CAAC;AACD,MAAM,0CAA0C,mBAAmB,WAAW;CAC7E,4CAA4C,OAAO,EAAE,SAAS,QAAQ,8BAA8B,EAAE,CAAC;CACvG,4CAA4C,OAAO,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;CACjF,4CAA4C,OAAO,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;CACjF,4CAA4C,OAAO,EAAE,SAAS,QAAQ,SAAS,EAAE,CAAC;CAClF,4CAA4C,OAAO;EAClD,SAAS,QAAQ,WAAW;EAC5B,SAAS;CACV,CAAC;CACD,4CAA4C,OAAO;EAClD,SAAS,QAAQ,QAAQ;EACzB,SAAS;CACV,CAAC;CACD,4CAA4C,OAAO;EAClD,SAAS,QAAQ,+BAA+B;EAChD,SAAS;CACV,CAAC;CACD,4CAA4C,OAAO;EAClD,SAAS,QAAQ,oBAAoB;EACrC,SAAS;CACV,CAAC;CACD,4CAA4C,OAAO;EAClD,SAAS,QAAQ,6BAA6B;EAC9C,SAAS;CACV,CAAC;CACD,4CAA4C,OAAO;EAClD,SAAS,QAAQ,yBAAyB;EAC1C,SAAS;CACV,CAAC;CACD,4CAA4C,OAAO;EAClD,SAAS,QAAQ,uBAAuB;EACxC,SAAS;CACV,CAAC;CACD,4CAA4C,OAAO,EAAE,SAAS,QAAQ,0BAA0B,EAAE,CAAC;CACnG,4CAA4C,OAAO;EAClD,SAAS,QAAQ,UAAU;EAC3B,SAAS,2CAA2C,SAAS;CAC9D,CAAC;AACF,CAAC;AACD,MAAM,oCAAoC,aAAa;CACtD,WAAW,QAAQ;CACnB,SAAS,QAAQ;CACjB,eAAe,OAAO,CAAC,CAAC,IAAI,CAAC;CAC7B,aAAa,OAAO,CAAC,CAAC,IAAI,CAAC;CAC3B,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AACD,MAAM,oCAAoC,aAAa;CACtD,OAAO;CACP,cAAc,uCAAuC,SAAS;CAC9D,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC;CAC1B,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAOD,MAAM,qCAAqC,aAAa;CACvD,SAAS,MAP+B,aAAa;EACrD,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;EAClB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC;EAClB,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC;EACpB,SAAS,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,CAEgB,CAAgC;CAC/C,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACtC,CAAC;AACD,MAAM,uCAAuC,aAAa;CACzD,UAAU,QAAQ;CAClB,QAAQ;CACR,oBAAoB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC7C,uCAAuC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAChE,gBAAgB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACzC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC/B,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACtC,CAAC;AACD,MAAM,oCAAoC,aAAa;CACtD,UAAU,QAAQ;CAClB,QAAQ;CACR,oBAAoB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC7C,uCAAuC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAChE,gBAAgB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACzC,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC/B,YAAY,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACtC,CAAC;AACD,MAAM,+CAA+C,aAAa;CACjE,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC;CACzB,cAAc,OAAO,CAAC,CAAC,IAAI,CAAC;CAC5B,MAAM,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAChC,CAAC;AACD,MAAM,sCAAsC,aAAa;CACxD,UAAU,QAAQ;CAClB,MAAM,YAAY,CAAC,YAAY,OAAO,CAAC;CACvC,eAAe,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;AAC3C,CAAC;AACD,MAAM,+CAA+C,aAAa;CACjE,GAAG,QAAQ,CAAC;CACZ,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACrC,CAAC;AACD,MAAM,qCAAqC,6CAA6C,OAAO;CAC9F,MAAM,QAAQ,gBAAgB;CAC9B,SAAS;AACV,CAAC;AACD,MAAM,qCAAqC,6CAA6C,OAAO;CAC9F,MAAM,QAAQ,gBAAgB;CAC9B,SAAS;AACV,CAAC;AACD,MAAM,sCAAsC,6CAA6C,OAAO;CAC/F,MAAM,QAAQ,iBAAiB;CAC/B,SAAS;AACV,CAAC;AACD,MAAM,wCAAwC,6CAA6C,OAAO;CACjG,MAAM,QAAQ,mBAAmB;CACjC,SAAS;AACV,CAAC;AACD,MAAM,qCAAqC,6CAA6C,OAAO;CAC9F,MAAM,QAAQ,gBAAgB;CAC9B,SAAS;AACV,CAAC;AACD,MAAM,0DAA0D,6CAA6C,OAAO;CACnH,MAAM,QAAQ,uCAAuC;CACrD,SAAS;AACV,CAAC;AACD,MAAM,+CAA+C,6CAA6C,OAAO;CACxG,MAAM,QAAQ,4BAA4B;CAC1C,SAAS;AACV,CAAC;AACD,MAAM,uDAAuD,6CAA6C,OAAO;CAChH,MAAM,QAAQ,uCAAuC;CACrD,SAAS;AACV,CAAC;AACD,MAAM,mDAAmD,6CAA6C,OAAO;CAC5G,MAAM,QAAQ,iCAAiC;CAC/C,SAAS;AACV,CAAC;AACD,MAAM,kDAAkD,6CAA6C,OAAO;CAC3G,MAAM,QAAQ,+BAA+B;CAC7C,SAAS;AACV,CAAC;AACD,MAAM,uCAAuC,6CAA6C,OAAO;CAChG,MAAM,QAAQ,kBAAkB;CAChC,SAAS;AACV,CAAC;AACD,MAAM,qDAAqD,6CAA6C,OAAO;CAC9G,MAAM,QAAQ,0BAA0B;CACxC,SAAS;AACV,CAAC;AACD,MAAM,gDAAgD,6CAA6C,OAAO;CACzG,MAAM,QAAQ,eAAe;CAC7B,SAAS;AACV,CAAC;AACD,MAAM,2CAA2C,mBAAmB,QAAQ;CAC3E,6CAA6C,OAAO;EACnD,MAAM,QAAQ,sCAAsC;EACpD,SAAS,aAAa,EAAE,WAAW,QAAQ,EAAE,CAAC;CAC/C,CAAC;CACD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC"}

package/dist/{daemon-service-runtime-D8KrOfSV.js → daemon-service-runtime-CWTlAhZY.js}

@@ -2,7 +2,8 @@
 
 import { $ as openMeldBinDir, N as OPENMELD_HOME_ENV_KEY, a as isOpenMeldOrphanedLockError, d as runWithHeldLock, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, it as openMeldVersionsDir, mt as resolveOpenMeldServiceScope, nt as openMeldManagedVersionDir, rt as openMeldRootDir, t as acquireLock, tt as openMeldManagedVersionBinaryPath, v as resolveCliContextId } from "./lock-Dxp6o_t_.js";
 import { n as cliBinaryManifestSchema, r as cliBinaryServiceReleaseSchema, t as cliBinaryDeltaPatchSchema } from "./cli-binary-manifest-DiUulkp0.js";
-import { R as openMeldToolsUpdateOperationPhaseSchema, V as openMeldToolsUpdateRequestSourceSchema, a as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-D9jDcbMZ.js";
+import { a as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-PxntAyDq.js";
+import { b as openMeldToolsUpdateOperationPhaseSchema, w as openMeldToolsUpdateRequestSourceSchema } from "./local-components-H3SkJMC1.js";
 import { t as daemonServiceContractSchema } from "./service-contract-CRyDcIIf.js";
 import { n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-DY2fBeSW.js";
 import { r as readDaemonRuntimeLease } from "./daemon-runtime-lease-Dd4hdHNo.js";
@@ -19,7 +20,7 @@ import * as z$1 from "zod/v4";
 import { constants } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
-import { setTimeout } from "node:timers/promises";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 import { createConnection } from "node:net";
@@ -422,7 +423,30 @@ function verifyBytes(input) {
 //#endregion
 //#region ../../runtime/local-service/src/cli-binary-update-artifact.ts
 const HARDENED_RUNTIME_FLAG_RE = /flags=.*runtime/iu;
+const RETRY_AFTER_SECONDS_RE = /^\d+$/u;
 const SIGNING_TIMESTAMP_RE = /^Timestamp=/mu;
+const DEFAULT_CLI_BINARY_DOWNLOAD_POLICY = {
+	maxAttempts: 3,
+	retryDelaysMs: [500, 1500],
+	stallTimeoutMs: 6e4,
+	totalBudgetMs: 5 * 6e4
+};
+var CliBinaryUpdateError = class extends Error {
+	allowFullFallback;
+	code;
+	kind;
+	retryAfterMs;
+	retryable;
+	constructor(input) {
+		super(input.message, input.cause === void 0 ? void 0 : { cause: input.cause });
+		this.name = "CliBinaryUpdateError";
+		this.allowFullFallback = input.allowFullFallback;
+		this.code = `openmeld.tools.update.${input.kind}`;
+		this.kind = input.kind;
+		this.retryAfterMs = input.retryAfterMs;
+		this.retryable = input.retryable;
+	}
+};
 async function resolveCliBinaryUpdatePlan(input) {
 	const fullDownloadPlan = resolveFullCliBinaryUpdatePlan(input.release);
 	const versionDeltas = input.release.deltas?.filter((candidate) => candidate.fromVersion === input.currentVersion);
@@ -445,62 +469,79 @@ async function resolveCliBinaryUpdatePlan(input) {
 	};
 }
 async function downloadCliBinaryUpdateArtifact(input) {
+	const recovery = createDownloadRecoveryContext(input.downloadPolicy);
+	if (input.plan.transport === "delta" && input.downloadPolicy.maxAttempts < 2) return downloadFullCliBinaryArtifact({
+		...input,
+		plan: resolveFullCliBinaryUpdatePlan(input.release),
+		recovery
+	});
 	if (input.plan.transport === "delta") {
 		try {
 			return await downloadCliBinaryDelta({
 				...input,
+				attemptCeiling: Math.max(1, input.downloadPolicy.maxAttempts - 1),
 				baseBytes: input.plan.baseBytes,
-				delta: input.plan.delta
+				delta: input.plan.delta,
+				recovery
 			});
 		} catch (error) {
-			input.onDeltaFallback(toError(error));
+			const resolvedError = toError(error);
+			if (resolvedError instanceof CliBinaryUpdateError && !resolvedError.allowFullFallback) throw resolvedError;
+			if (recovery.attemptsStarted >= input.downloadPolicy.maxAttempts) throw resolvedError;
+			input.onDeltaFallback(resolvedError);
+			await waitForRetryDelay({
+				cause: resolvedError,
+				deadlineAtMs: recovery.deadlineAtMs,
+				delayMs: resolvedError instanceof CliBinaryUpdateError ? resolvedError.retryAfterMs ?? 0 : 0
+			});
 		}
 		return downloadFullCliBinaryArtifact({
 			...input,
-			plan: resolveFullCliBinaryUpdatePlan(input.release)
+			plan: resolveFullCliBinaryUpdatePlan(input.release),
+			recovery
 		});
 	}
 	return downloadFullCliBinaryArtifact({
 		...input,
-		plan: input.plan
+		plan: input.plan,
+		recovery
 	});
 }
 async function verifyCliBinaryCodeSignature(input) {
 	const { codeIdentifier, teamIdentifier } = input.release;
 	if (!(codeIdentifier && teamIdentifier)) return;
-	if (process.platform !== "darwin") throw new Error("signed OpenMeld CLI verification requires macOS");
+	if (process.platform !== "darwin") throw integrityError("signed OpenMeld CLI verification requires macOS");
 	const verification = await input.runCommand("/usr/bin/codesign", [
 		"--verify",
 		"--strict",
 		"--verbose=2",
 		input.artifactPath
 	]);
-	if (verification.code !== 0) throw new Error(`binary code signature verification failed: ${commandFailureDetails(verification)}`);
+	if (verification.code !== 0) throw integrityError(`binary code signature verification failed: ${commandFailureDetails(verification)}`);
 	const inspection = await input.runCommand("/usr/bin/codesign", [
 		"--display",
 		"--verbose=4",
 		input.artifactPath
 	]);
-	if (inspection.code !== 0) throw new Error(`binary code signature inspection failed: ${commandFailureDetails(inspection)}`);
+	if (inspection.code !== 0) throw integrityError(`binary code signature inspection failed: ${commandFailureDetails(inspection)}`);
 	const details = `${inspection.stdout}\n${inspection.stderr}`;
 	for (const expected of [
 		`Identifier=${codeIdentifier}`,
 		`TeamIdentifier=${teamIdentifier}`,
 		"Authority=Developer ID Application:"
-	]) if (!details.includes(expected)) throw new Error(`binary code signature is missing expected identity: ${expected}`);
-	if (!HARDENED_RUNTIME_FLAG_RE.test(details)) throw new Error("binary code signature is missing the hardened runtime");
-	if (!SIGNING_TIMESTAMP_RE.test(details)) throw new Error("binary code signature is missing a trusted timestamp");
+	]) if (!details.includes(expected)) throw integrityError(`binary code signature is missing expected identity: ${expected}`);
+	if (!HARDENED_RUNTIME_FLAG_RE.test(details)) throw integrityError("binary code signature is missing the hardened runtime");
+	if (!SIGNING_TIMESTAMP_RE.test(details)) throw integrityError("binary code signature is missing a trusted timestamp");
 }
 async function downloadCliBinaryDelta(input) {
-	const response = await input.fetchImpl(input.delta.patchUrl, {
-		method: "GET",
-		signal: AbortSignal.timeout(input.downloadTimeoutMs)
+	const patchBytes = await downloadBinaryBytesWithRecovery({
+		attemptCeiling: input.attemptCeiling,
+		expectedSizeBytes: input.delta.patchSizeBytes,
+		fetchImpl: input.fetchImpl,
+		label: "binary delta archive",
+		recovery: input.recovery,
+		url: input.delta.patchUrl
 	});
-	if (!response.ok) {
-		const body = await response.text().catch(() => "");
-		throw new Error(`binary delta download failed: HTTP ${response.status}${body ? `: ${body}` : ""}`);
-	}
-	const patchBytes = Buffer.from(await response.arrayBuffer());
 	verifyBinaryBytes({
 		bytes: patchBytes,
 		expectedSha256: input.delta.patchSha256,
@@ -511,16 +552,20 @@ async function downloadCliBinaryDelta(input) {
 	try {
 		patchPayloadBytes = gunzipSync(patchBytes, { maxOutputLength: input.delta.patchPayloadSizeBytes });
 	} catch (error) {
-		throw new Error(`binary delta could not be decompressed: ${toError(error).message}`);
+		throw integrityError(`binary delta could not be decompressed: ${toError(error).message}`, error);
+	}
+	if (patchPayloadBytes.byteLength !== input.delta.patchPayloadSizeBytes) throw integrityError(`binary delta payload size mismatch: expected ${input.delta.patchPayloadSizeBytes} bytes, received ${patchPayloadBytes.byteLength} bytes`);
+	try {
+		return reconstructCliBinaryDelta({
+			baseBytes: input.baseBytes,
+			delta: input.delta,
+			patchPayloadBytes,
+			targetSha256: input.release.sha256,
+			targetSizeBytes: input.release.sizeBytes
+		});
+	} catch (error) {
+		throw integrityError(`binary delta reconstruction failed: ${toError(error).message}`, error);
 	}
-	if (patchPayloadBytes.byteLength !== input.delta.patchPayloadSizeBytes) throw new Error(`binary delta payload size mismatch: expected ${input.delta.patchPayloadSizeBytes} bytes, received ${patchPayloadBytes.byteLength} bytes`);
-	return reconstructCliBinaryDelta({
-		baseBytes: input.baseBytes,
-		delta: input.delta,
-		patchPayloadBytes,
-		targetSha256: input.release.sha256,
-		targetSizeBytes: input.release.sizeBytes
-	});
 }
 function resolveFullCliBinaryUpdatePlan(release) {
 	if (hasCompressedCliBinaryTransport(release)) return {
@@ -537,15 +582,13 @@ function resolveFullCliBinaryUpdatePlan(release) {
 	};
 }
 async function downloadFullCliBinaryArtifact(input) {
-	const response = await input.fetchImpl(input.plan.downloadUrl, {
-		method: "GET",
-		signal: AbortSignal.timeout(input.downloadTimeoutMs)
+	const downloadBytes = await downloadBinaryBytesWithRecovery({
+		expectedSizeBytes: input.plan.downloadSizeBytes,
+		fetchImpl: input.fetchImpl,
+		label: input.plan.transport === "archive" ? "binary archive" : "binary download",
+		recovery: input.recovery,
+		url: input.plan.downloadUrl
 	});
-	if (!response.ok) {
-		const body = await response.text().catch(() => "");
-		throw new Error(`binary download failed: HTTP ${response.status}${body ? `: ${body}` : ""}`);
-	}
-	const downloadBytes = Buffer.from(await response.arrayBuffer());
 	verifyBinaryBytes({
 		bytes: downloadBytes,
 		expectedSha256: input.plan.downloadSha256,
@@ -556,7 +599,7 @@ async function downloadFullCliBinaryArtifact(input) {
 	if (input.plan.transport === "archive") try {
 		artifactBytes = gunzipSync(downloadBytes, { maxOutputLength: input.release.sizeBytes });
 	} catch (error) {
-		throw new Error(`binary archive could not be decompressed: ${toError(error).message}`);
+		throw integrityError(`binary archive could not be decompressed: ${toError(error).message}`, error);
 	}
 	verifyBinaryBytes({
 		bytes: artifactBytes,
@@ -570,9 +613,212 @@ function hasCompressedCliBinaryTransport(release) {
 	return release.archiveFormat === "gzip" && typeof release.archiveUrl === "string" && typeof release.archiveSha256 === "string" && typeof release.archiveSizeBytes === "number";
 }
 function verifyBinaryBytes(input) {
-	if (input.bytes.byteLength !== input.expectedSizeBytes) throw new Error(`${input.label} size mismatch: expected ${input.expectedSizeBytes} bytes, received ${input.bytes.byteLength} bytes`);
+	if (input.bytes.byteLength !== input.expectedSizeBytes) throw integrityError(`${input.label} size mismatch: expected ${input.expectedSizeBytes} bytes, received ${input.bytes.byteLength} bytes`);
 	const actualSha256 = createHash("sha256").update(input.bytes).digest("hex");
-	if (actualSha256 !== input.expectedSha256.toLowerCase()) throw new Error(`${input.label} sha256 mismatch: expected ${input.expectedSha256.toLowerCase()}, received ${actualSha256}`);
+	if (actualSha256 !== input.expectedSha256.toLowerCase()) throw integrityError(`${input.label} sha256 mismatch: expected ${input.expectedSha256.toLowerCase()}, received ${actualSha256}`);
+}
+function createDownloadRecoveryContext(policy) {
+	if (!Number.isInteger(policy.maxAttempts) || policy.maxAttempts < 1 || !Number.isFinite(policy.stallTimeoutMs) || policy.stallTimeoutMs <= 0 || !Number.isFinite(policy.totalBudgetMs) || policy.totalBudgetMs <= 0 || policy.retryDelaysMs.some((delayMs) => !Number.isFinite(delayMs) || delayMs < 0)) throw new Error("CLI binary download policy is invalid.");
+	return {
+		attemptsStarted: 0,
+		deadlineAtMs: performance.now() + policy.totalBudgetMs,
+		policy
+	};
+}
+async function downloadBinaryBytesWithRecovery(input) {
+	let lastError = null;
+	const attemptCeiling = Math.min(input.attemptCeiling ?? input.recovery.policy.maxAttempts, input.recovery.policy.maxAttempts);
+	while (input.recovery.attemptsStarted < attemptCeiling) {
+		if (performance.now() >= input.recovery.deadlineAtMs) throw totalBudgetError(lastError ?? void 0);
+		const attemptIndex = input.recovery.attemptsStarted;
+		input.recovery.attemptsStarted += 1;
+		try {
+			return await downloadBinaryBytesAttempt(input);
+		} catch (error) {
+			const resolved = normalizeDownloadError(error, input.label);
+			lastError = resolved;
+			if (!resolved.retryable) throw resolved;
+			if (input.recovery.attemptsStarted >= attemptCeiling) throw resolved;
+			const delayMs = input.recovery.policy.retryDelaysMs[attemptIndex] ?? input.recovery.policy.retryDelaysMs.at(-1) ?? 0;
+			await waitForRetryDelay({
+				cause: resolved,
+				deadlineAtMs: input.recovery.deadlineAtMs,
+				delayMs: Math.max(delayMs, resolved.retryAfterMs ?? 0)
+			});
+		}
+	}
+	throw lastError ?? totalBudgetError();
+}
+async function downloadBinaryBytesAttempt(input) {
+	const controller = new AbortController();
+	let reader = null;
+	let lastProgressAtMs = performance.now();
+	try {
+		const response = await waitForDownloadProgress(input.fetchImpl(input.url, {
+			method: "GET",
+			signal: controller.signal
+		}), {
+			controller,
+			lastProgressAtMs,
+			recovery: input.recovery
+		});
+		if (!response.ok) {
+			cancelReadableStream(response.body);
+			throw httpDownloadError({
+				label: input.label,
+				retryAfter: response.headers.get("retry-after"),
+				status: response.status,
+				statusText: response.statusText
+			});
+		}
+		if (!response.body) return Buffer.alloc(0);
+		reader = response.body.getReader();
+		const chunks = [];
+		let receivedBytes = 0;
+		while (true) {
+			const next = await waitForDownloadProgress(reader.read(), {
+				controller,
+				lastProgressAtMs,
+				recovery: input.recovery
+			});
+			if (next.done) return Buffer.concat(chunks, receivedBytes);
+			if (!next.value || next.value.byteLength === 0) continue;
+			lastProgressAtMs = performance.now();
+			receivedBytes += next.value.byteLength;
+			if (receivedBytes > input.expectedSizeBytes) throw integrityError(`${input.label} size exceeded the declared ${input.expectedSizeBytes} bytes while downloading`);
+			chunks.push(Buffer.from(next.value));
+		}
+	} catch (error) {
+		controller.abort(error);
+		if (reader) cancelReadableStreamReader(reader);
+		throw error;
+	} finally {
+		reader?.releaseLock();
+	}
+}
+async function waitForDownloadProgress(pending, input) {
+	const stallDeadlineAtMs = input.lastProgressAtMs + input.recovery.policy.stallTimeoutMs;
+	const totalDeadlineWins = input.recovery.deadlineAtMs <= stallDeadlineAtMs;
+	const deadlineAtMs = Math.min(stallDeadlineAtMs, input.recovery.deadlineAtMs);
+	const timeoutMs = Math.max(0, deadlineAtMs - performance.now());
+	let timer = null;
+	const timeout = new Promise((_resolve, reject) => {
+		timer = setTimeout(() => {
+			const error = totalDeadlineWins ? totalBudgetError() : stalledError();
+			reject(error);
+			input.controller.abort(error);
+		}, timeoutMs);
+	});
+	try {
+		return await Promise.race([pending, timeout]);
+	} finally {
+		if (timer) clearTimeout(timer);
+	}
+}
+async function waitForRetryDelay(input) {
+	if (input.delayMs === 0) return;
+	if (input.deadlineAtMs - performance.now() <= input.delayMs) throw totalBudgetError(input.cause);
+	await new Promise((resolve) => setTimeout(resolve, input.delayMs));
+}
+function normalizeDownloadError(error, label) {
+	if (error instanceof CliBinaryUpdateError) return error;
+	const resolved = toError(error);
+	const terminalTlsFailure = findErrorCode(error, isTerminalTlsErrorCode);
+	if (terminalTlsFailure || isTerminalTlsErrorMessage(resolved.message)) return new CliBinaryUpdateError({
+		allowFullFallback: false,
+		cause: error,
+		kind: "download_failed",
+		message: `${label} download failed TLS certificate verification${terminalTlsFailure ? ` (${terminalTlsFailure})` : ""}`,
+		retryable: false
+	});
+	const retryable = Boolean(findErrorCode(error, isRetryableNetworkErrorCode));
+	return new CliBinaryUpdateError({
+		allowFullFallback: true,
+		cause: error,
+		kind: "download_failed",
+		message: `${label} download failed: ${resolved.message}`,
+		retryable
+	});
+}
+function httpDownloadError(input) {
+	const retryable = input.status === 408 || input.status === 429 || input.status === 500 || input.status === 502 || input.status === 503 || input.status === 504;
+	const missingDelta = input.status === 404 || input.status === 410;
+	const retryAfterMs = input.retryAfter ? parseRetryAfterMs(input.retryAfter) : void 0;
+	return new CliBinaryUpdateError({
+		allowFullFallback: retryable || missingDelta,
+		kind: "download_failed",
+		message: `${input.label} download failed: HTTP ${input.status}${input.statusText ? ` ${input.statusText}` : ""}`,
+		...retryAfterMs === void 0 ? {} : { retryAfterMs },
+		retryable
+	});
+}
+function parseRetryAfterMs(value) {
+	const trimmed = value.trim();
+	if (RETRY_AFTER_SECONDS_RE.test(trimmed)) {
+		const milliseconds = Number(trimmed) * 1e3;
+		return Number.isSafeInteger(milliseconds) ? milliseconds : void 0;
+	}
+	const retryAtMs = Date.parse(trimmed);
+	if (!Number.isFinite(retryAtMs)) return;
+	return Math.max(0, retryAtMs - Date.now());
+}
+function stalledError() {
+	return new CliBinaryUpdateError({
+		allowFullFallback: true,
+		kind: "download_stalled",
+		message: "binary download stopped making progress",
+		retryable: true
+	});
+}
+function totalBudgetError(cause) {
+	return new CliBinaryUpdateError({
+		allowFullFallback: false,
+		...cause === void 0 ? {} : { cause },
+		kind: "download_timed_out",
+		message: "binary download exceeded the total recovery time budget",
+		retryable: false
+	});
+}
+function integrityError(message, cause) {
+	return new CliBinaryUpdateError({
+		allowFullFallback: true,
+		...cause === void 0 ? {} : { cause },
+		kind: "integrity_check_failed",
+		message,
+		retryable: false
+	});
+}
+function findErrorCode(error, predicate) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	while (current && typeof current === "object" && !seen.has(current)) {
+		seen.add(current);
+		const code = current.code;
+		if (typeof code === "string" && predicate(code.toUpperCase())) return code;
+		current = current.cause;
+	}
+	return null;
+}
+function cancelReadableStream(stream) {
+	if (!stream) return;
+	try {
+		stream.cancel().catch(() => void 0);
+	} catch {}
+}
+function cancelReadableStreamReader(reader) {
+	try {
+		reader.cancel().catch(() => void 0);
+	} catch {}
+}
+function isTerminalTlsErrorCode(code) {
+	return code.startsWith("CERT_") || code.includes("_CERT_") || code.startsWith("ERR_OSSL_") || code.startsWith("ERR_SSL_") || code.startsWith("ERR_TLS_") || code === "DEPTH_ZERO_SELF_SIGNED_CERT" || code === "SELF_SIGNED_CERT_IN_CHAIN" || code.startsWith("UNABLE_TO_GET_ISSUER_CERT") || code === "UNABLE_TO_VERIFY_LEAF_SIGNATURE";
+}
+function isTerminalTlsErrorMessage(message) {
+	const normalized = message.toLowerCase();
+	return normalized.includes("certificate") || normalized.includes("self signed") || normalized.includes("tls handshake") || normalized.includes("unable to verify");
+}
+function isRetryableNetworkErrorCode(code) {
+	return code === "EAI_AGAIN" || code === "ECONNABORTED" || code === "ECONNREFUSED" || code === "ECONNRESET" || code === "EHOSTUNREACH" || code === "ENETDOWN" || code === "ENETUNREACH" || code === "ENOTFOUND" || code === "EPIPE" || code === "ETIMEDOUT" || code === "UND_ERR_BODY_TIMEOUT" || code === "UND_ERR_CONNECT_TIMEOUT" || code === "UND_ERR_HEADERS_TIMEOUT" || code === "UND_ERR_RES_CONTENT_LENGTH_MISMATCH" || code === "UND_ERR_SOCKET";
 }
 function commandFailureDetails(result) {
 	return result.stderr.trim() || result.stdout.trim() || `exit ${result.code}`;
@@ -701,7 +947,7 @@ function getErrorCode$2(error) {
 var package_default = {
 	$schema: "https://www.schemastore.org/package.json",
 	name: "openmeld",
-	version: "0.3.211",
+	version: "0.3.212",
 	openMeldReleaseDate: "2026-09-16",
 	description: "OpenMeld CLI - https://openmeld.ai",
 	license: "MIT",
@@ -1242,7 +1488,7 @@ async function withManagedInstallTransaction(run, pathInput = {}) {
 		});
 	} catch (error) {
 		if (!isOpenMeldLockError(error) || isOpenMeldOrphanedLockError(error) || Date.now() - startedAtMs >= MANAGED_INSTALL_LOCK_TIMEOUT_MS) throw error;
-		await setTimeout(MANAGED_INSTALL_LOCK_RETRY_DELAY_MS);
+		await setTimeout$1(MANAGED_INSTALL_LOCK_RETRY_DELAY_MS);
 	}
 }
 /**
@@ -1983,7 +2229,7 @@ async function prepareSelectedBinaryDaemonServiceBundle(input) {
 		release: input.release
 	});
 	const bytes = await downloadCliBinaryUpdateArtifact({
-		downloadTimeoutMs: 6e4,
+		downloadPolicy: DEFAULT_CLI_BINARY_DOWNLOAD_POLICY,
 		fetchImpl: fetch,
 		onDeltaFallback,
 		plan,
@@ -3637,6 +3883,6 @@ async function readObservedRuntimeState() {
 	});
 }
 //#endregion
-export { readManagedCliInstallation as $, prepareDaemonServiceBundle as A, verifyCliBinaryCodeSignature as At, resolveDaemonServiceArtifact as B, readDaemonServiceContract as Bt, daemonServiceExecutableWrapperPath as C, resolveDaemonServiceUpdateWorkerLaunchdPlistPath as Ct, ensureDaemonServiceStableBinaryExecutable as D, resolveDaemonServiceUpdateWorkerWindowsScriptPath as Dt, discardPreparedDaemonServiceBundle as E, resolveDaemonServiceUpdateWorkerSystemdUnitPath as Et, restoreDaemonActiveBundleStateSnapshot as F, requestLocalSyncRouteCatalog as Ft, readRecentDaemonLifecycleEvents as G, formatDaemonLifecycleOriginSummary as H, runAuditedServiceManagerCarrierMutation as I, sendLocalDaemonControlPlaneRequest as It, runWithDaemonLifecycleCommandJournal as J, resolveRecentDaemonSignalStopCause as K, verifyDaemonActiveBundleIntegrity as L, clearDaemonServiceContract as Lt, resolveAlignedDaemonActiveBundleEntryPath as M, requestLocalAgentActivitySync as Mt, resolveDaemonBundleEntryPathFromState as N, requestLocalDaemonServiceUpdateReadiness as Nt, ensureDaemonServiceUpdateWorkerBinaryExecutable as O, downloadCliBinaryUpdateArtifact as Ot, resolveInstalledDaemonBundleFingerprint as P, requestLocalDaemonShutdown as Pt, pruneManagedInstallVersions as Q, writeDaemonServiceExecutableWrapper as R, isDaemonServiceContractIdentityReusable as Rt, daemonServiceBinaryExecutablePath as S, resolveDaemonServiceUpdateWorkerIdentity as St, daemonServiceUpdateWorkerBinaryPath as T, resolveDaemonServiceUpdateWorkerSystemdTimerUnitPath as Tt, readLatestDaemonLifecycleConnectionStateEvent as U, emitDaemonLifecycleEvent as V, upsertDaemonServiceContract as Vt, readLatestDaemonLifecycleOriginEvent as W, buildInstallSelfJsonPayload as X, collectLocalOperationFailure as Y, performManagedInstall as Z, matchesExpectedDaemonServiceManagerDefinition as _, package_default as _t, resolveDaemonRuntimeState as a, persistPendingDaemonServiceUpdate as at, cleanupInactiveDaemonServiceBundles as b, daemonServiceUpdateWorkerNpmEntryPath as bt, resolveObservedDaemonRuntimeStatus as c, buildNextVersionState as ct, inspectLegacySharedDaemonService as d, fetchLatestCliBinaryRelease as dt, resolveCliSelfVersion as et, listDaemonOwnedProcesses as f, fetchLatestPackageInfo as ft, assertDaemonMaintenanceInstallationOwnership as g, resolveBundledServiceRelease as gt, resolveDaemonBundleIdFromEntryPath as h, writeVersionState as ht, readCurrentObservedDaemonRuntimeStatus as i, completePendingDaemonServiceUpdate as it, readDaemonActiveBundleState as j, LocalDaemonControlPlaneClientError as jt, isDaemonBundleSourceAllowedForLane as k, resolveCliBinaryUpdatePlan as kt, resolveObservedRuntimeCommandEntryPath as l, compareSemver as lt, normalizeDaemonCommandPath as m, readVersionState as mt, getEffectiveDaemonRuntimeStatus as n, OPENMELD_VERSION as nt, resolveDaemonServiceManagerForRuntimeState as o, readLastDaemonServiceUpdate as ot, extractDaemonCommandEntryPath as p, isPlainReleaseVersion as pt, runDaemonServiceManagerAction as q, readCurrentDaemonRuntimeContext as r, DAEMON_SERVICE_UPDATE_JOB_SCHEMA as rt, waitForDaemonSystemServiceToStop as s, readPendingDaemonServiceUpdate as st, clearDaemonRuntimeStateIfDefinitelyStopped as t, withManagedInstallTransaction as tt, cleanupLegacySharedDaemonServiceState as u, ensureVersionStateReady as ut, isOpenMeldManagedBinaryPath as v, INDEPENDENT_MAINTENANCE_REGISTRATION as vt, daemonServiceLauncherPath as w, resolveDaemonServiceUpdateWorkerSystemdPathUnitPath as wt, clearDaemonServiceUpdateWorkerBinaryExecutable as x, hasIndependentMaintenanceRegistration as xt, activateDaemonServiceBundle as y, configureDaemonMaintenanceEnvironment as yt, writeDaemonServiceLauncher as z, isUnsafeProductionDeviceId as zt };
+export { readManagedCliInstallation as $, prepareDaemonServiceBundle as A, resolveCliBinaryUpdatePlan as At, resolveDaemonServiceArtifact as B, isUnsafeProductionDeviceId as Bt, daemonServiceExecutableWrapperPath as C, resolveDaemonServiceUpdateWorkerLaunchdPlistPath as Ct, ensureDaemonServiceStableBinaryExecutable as D, resolveDaemonServiceUpdateWorkerWindowsScriptPath as Dt, discardPreparedDaemonServiceBundle as E, resolveDaemonServiceUpdateWorkerSystemdUnitPath as Et, restoreDaemonActiveBundleStateSnapshot as F, requestLocalDaemonShutdown as Ft, readRecentDaemonLifecycleEvents as G, formatDaemonLifecycleOriginSummary as H, upsertDaemonServiceContract as Ht, runAuditedServiceManagerCarrierMutation as I, requestLocalSyncRouteCatalog as It, runWithDaemonLifecycleCommandJournal as J, resolveRecentDaemonSignalStopCause as K, verifyDaemonActiveBundleIntegrity as L, sendLocalDaemonControlPlaneRequest as Lt, resolveAlignedDaemonActiveBundleEntryPath as M, LocalDaemonControlPlaneClientError as Mt, resolveDaemonBundleEntryPathFromState as N, requestLocalAgentActivitySync as Nt, ensureDaemonServiceUpdateWorkerBinaryExecutable as O, DEFAULT_CLI_BINARY_DOWNLOAD_POLICY as Ot, resolveInstalledDaemonBundleFingerprint as P, requestLocalDaemonServiceUpdateReadiness as Pt, pruneManagedInstallVersions as Q, writeDaemonServiceExecutableWrapper as R, clearDaemonServiceContract as Rt, daemonServiceBinaryExecutablePath as S, resolveDaemonServiceUpdateWorkerIdentity as St, daemonServiceUpdateWorkerBinaryPath as T, resolveDaemonServiceUpdateWorkerSystemdTimerUnitPath as Tt, readLatestDaemonLifecycleConnectionStateEvent as U, emitDaemonLifecycleEvent as V, readDaemonServiceContract as Vt, readLatestDaemonLifecycleOriginEvent as W, buildInstallSelfJsonPayload as X, collectLocalOperationFailure as Y, performManagedInstall as Z, matchesExpectedDaemonServiceManagerDefinition as _, package_default as _t, resolveDaemonRuntimeState as a, persistPendingDaemonServiceUpdate as at, cleanupInactiveDaemonServiceBundles as b, daemonServiceUpdateWorkerNpmEntryPath as bt, resolveObservedDaemonRuntimeStatus as c, buildNextVersionState as ct, inspectLegacySharedDaemonService as d, fetchLatestCliBinaryRelease as dt, resolveCliSelfVersion as et, listDaemonOwnedProcesses as f, fetchLatestPackageInfo as ft, assertDaemonMaintenanceInstallationOwnership as g, resolveBundledServiceRelease as gt, resolveDaemonBundleIdFromEntryPath as h, writeVersionState as ht, readCurrentObservedDaemonRuntimeStatus as i, completePendingDaemonServiceUpdate as it, readDaemonActiveBundleState as j, verifyCliBinaryCodeSignature as jt, isDaemonBundleSourceAllowedForLane as k, downloadCliBinaryUpdateArtifact as kt, resolveObservedRuntimeCommandEntryPath as l, compareSemver as lt, normalizeDaemonCommandPath as m, readVersionState as mt, getEffectiveDaemonRuntimeStatus as n, OPENMELD_VERSION as nt, resolveDaemonServiceManagerForRuntimeState as o, readLastDaemonServiceUpdate as ot, extractDaemonCommandEntryPath as p, isPlainReleaseVersion as pt, runDaemonServiceManagerAction as q, readCurrentDaemonRuntimeContext as r, DAEMON_SERVICE_UPDATE_JOB_SCHEMA as rt, waitForDaemonSystemServiceToStop as s, readPendingDaemonServiceUpdate as st, clearDaemonRuntimeStateIfDefinitelyStopped as t, withManagedInstallTransaction as tt, cleanupLegacySharedDaemonServiceState as u, ensureVersionStateReady as ut, isOpenMeldManagedBinaryPath as v, INDEPENDENT_MAINTENANCE_REGISTRATION as vt, daemonServiceLauncherPath as w, resolveDaemonServiceUpdateWorkerSystemdPathUnitPath as wt, clearDaemonServiceUpdateWorkerBinaryExecutable as x, hasIndependentMaintenanceRegistration as xt, activateDaemonServiceBundle as y, configureDaemonMaintenanceEnvironment as yt, writeDaemonServiceLauncher as z, isDaemonServiceContractIdentityReusable as zt };
 
-//# sourceMappingURL=daemon-service-runtime-D8KrOfSV.js.map
+//# sourceMappingURL=daemon-service-runtime-CWTlAhZY.js.map