openmeld 0.3.213 → 0.3.214

package/dist/{service-Cev-7yAJ.js → service-Cl_Ge6oJ.js}

@@ -1,28 +1,30 @@
 #!/usr/bin/env node
 
 import { f as toSpaceMetaUrl, g as toSpaceUpdatesUrl } from "./urls-CY2uzH2-.js";
-import { E as assessLocalMachineFailure, F as accountProfileSpaceCacheDir, J as legacyAccountProfileSpacesDir, M as formatLocalMachineIssueMessage, N as OPENMELD_HOME_ENV_KEY, R as accountsDir, X as normalizeAccountKey, Z as normalizeOpenMeldProfileId, d as runWithHeldLock, dt as resolveOpenMeldEnvPreset, et as openMeldManagedBinaryPath, ft as resolveOpenMeldRootDir, i as isOpenMeldLockError, k as createServiceSpawnPendingIssue, pt as resolveOpenMeldServiceOwnedPathInput, q as isPublishedOpenMeldHome, rt as openMeldRootDir, s as releaseLock, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue, v as resolveCliContextId, x as resolveOpenMeldLaneDescriptor } from "./lock-Dxp6o_t_.js";
-import { $r as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, Ai as archiveProjectResponseSchema, Bi as toCompatibleSpaceAddressingRequestWireValue, Cr as betterAuthDeviceAuthorizationTokenRequestSchema, Di as localProjectControlConnectionSchema, Fi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Fr as getOrganizationSkillResponseSchema, Gr as createCenterAgentRoutineResponseSchema, Hr as organizationComputersResponseSchema, Ii as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Ir as listOrganizationSkillsResponseSchema, Jn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Jr as listCenterAgentRoutinesResponseSchema, Kr as deleteCenterAgentRoutineResponseSchema, Li as computerFileAccessDaemonFrameSchema, Mi as listProjectsResponseSchema, Ni as projectSchema, Nr as spaceCreatorSchema, Oi as localProjectControlDaemonFrameSchema, Pi as updateProjectResponseSchema, Pr as spaceMetaSchema, Ri as computerFileAccessPolicyInputSchema, Rn as DAEMON_STREAM_KEEPALIVE_PING, Rr as organizationSkillReleaseSummarySchema, Sr as betterAuthDeviceAuthorizationErrorResponseSchema, Ti as serviceConnectionEvidenceJournalSchema, Tr as betterAuthSessionSnapshotResponseSchema, Tt as buildSpaceAttachmentDownloadPath, Ur as submitFeedbackIssueRequestSchema, Vr as organizationDirectoryResponseSchema, Wr as submitFeedbackIssueResponseSchema, Xr as resumeCenterAgentRoutineResponseSchema, Yr as pauseCenterAgentRoutineResponseSchema, Zn as getSpaceUpdatesResponseSchema, Zr as updateCenterAgentRoutineResponseSchema, _i as agentActivitySessionInventoryResponseSchema, an as createRuntimeReportingApi, ar as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, bi as centerAgentToolSpeakerSchema, br as betterAuthDeviceAuthorizationCodeRequestSchema, di as spaceMemberDirectoryEntrySchema, ei as agentActivityEventSchema, fi as spaceMemberDirectorySchema, hr as submitAgentControllerTaskLifecycleEventItemSchema, ii as agentActivitySnapshotResponseSchema, ji as createProjectResponseSchema, jn as toStructuredApiClientFailure, jr as organizationSpaceDirectoryWithMemberCountsResponseSchema, jt as createAgentActivityApi, ki as localProjectControlDiscoverProjectsResponseSchema, kr as gatewayErrorEnvelopeSchema, li as spaceMemberAgentWakeAvailabilitySchema, on as createServiceConnectionEvidenceApi, pi as spaceMemberKindSchema, qn as OPENMELD_HEADER_REQUEST_ID, qr as listCenterAgentRoutineRunsResponseSchema, rr as spaceEntryTargetSchema, sn as createSpaceApi, t as OpenMeldApiClientHttpError, ui as spaceMemberDirectoryAllowedRelationsSchema, wi as serviceConnectionEvidenceEventSchema, wr as betterAuthDeviceAuthorizationTokenResponseSchema, xr as betterAuthDeviceAuthorizationCodeResponseSchema, yi as observedLocalAgentSessionSchema, yr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, zi as computerFileAccessPolicySchema, zr as organizationSkillSummarySchema } from "./dist-CAx_kxvt.js";
+import { A as OPENMELD_HOME_ENV_KEY, C as assessLocalMachineFailure, E as createServiceSpawnPendingIssue, F as accountsDir, G as legacyAccountProfileSpacesDir, J as normalizeOpenMeldProfileId, M as accountProfileSpaceCacheDir, W as isPublishedOpenMeldHome, Z as openMeldManagedBinaryPath, ct as resolveOpenMeldEnvPreset, d as runWithHeldLock, et as openMeldRootDir, i as isOpenMeldLockError, k as formatLocalMachineIssueMessage, lt as resolveOpenMeldRootDir, nt as organizationSkillReleaseDir, q as normalizeAccountKey, s as releaseLock, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue, ut as resolveOpenMeldServiceOwnedPathInput, v as resolveCliContextId, x as resolveOpenMeldLaneDescriptor } from "./lock-CAt9uTnZ.js";
+import { $n as getSpaceUpdatesResponseSchema, $r as updateCenterAgentRoutineResponseSchema, Ai as localProjectControlDaemonFrameSchema, Bi as computerFileAccessPolicyInputSchema, Bn as DAEMON_STREAM_KEEPALIVE_PING, Br as organizationSkillReleaseSummarySchema, Cr as betterAuthDeviceAuthorizationCodeResponseSchema, Di as serviceConnectionEvidenceJournalSchema, Dr as betterAuthSessionSnapshotResponseSchema, Ei as serviceConnectionEvidenceEventSchema, Er as betterAuthDeviceAuthorizationTokenResponseSchema, Fi as projectSchema, Fr as spaceCreatorSchema, Gr as submitFeedbackIssueRequestSchema, Hi as toCompatibleSpaceAddressingRequestWireValue, Hr as stringifyOrganizationSkillBundleCanonicalJson, Ii as updateProjectResponseSchema, Ir as spaceMetaSchema, Jr as deleteCenterAgentRoutineResponseSchema, Kr as submitFeedbackIssueResponseSchema, Li as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Lr as getOrganizationSkillResponseSchema, Mi as archiveProjectResponseSchema, Ni as createProjectResponseSchema, Nn as toStructuredApiClientFailure, Nr as organizationSpaceDirectoryWithMemberCountsResponseSchema, Pi as listProjectsResponseSchema, Qr as resumeCenterAgentRoutineResponseSchema, Ri as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Rr as listOrganizationSkillsResponseSchema, Si as centerAgentToolSpeakerSchema, Sr as betterAuthDeviceAuthorizationCodeRequestSchema, Tr as betterAuthDeviceAuthorizationTokenRequestSchema, Tt as buildSpaceAttachmentDownloadPath, Ur as organizationDirectoryResponseSchema, Vi as computerFileAccessPolicySchema, Vr as organizationSkillSummarySchema, Wr as organizationComputersResponseSchema, Xn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Xr as listCenterAgentRoutinesResponseSchema, Xt as createOrganizationSkillsApi, Yn as OPENMELD_HEADER_REQUEST_ID, Yr as listCenterAgentRoutineRunsResponseSchema, Zr as pauseCenterAgentRoutineResponseSchema, _r as submitAgentControllerTaskLifecycleEventItemSchema, an as createRuntimeReportingApi, ar as spaceEntryTargetSchema, di as spaceMemberAgentWakeAvailabilitySchema, fi as spaceMemberDirectoryAllowedRelationsSchema, hi as spaceMemberKindSchema, ji as localProjectControlDiscoverProjectsResponseSchema, jr as gatewayErrorEnvelopeSchema, jt as createAgentActivityApi, ki as localProjectControlConnectionSchema, mi as spaceMemberDirectorySchema, ni as agentActivityEventSchema, oi as agentActivitySnapshotResponseSchema, on as createServiceConnectionEvidenceApi, pi as spaceMemberDirectoryEntrySchema, qr as createCenterAgentRoutineResponseSchema, sn as createSpaceApi, sr as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, t as OpenMeldApiClientHttpError, ti as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, wr as betterAuthDeviceAuthorizationErrorResponseSchema, xi as observedLocalAgentSessionSchema, xr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, yi as agentActivitySessionInventoryResponseSchema, zi as computerFileAccessDaemonFrameSchema, zr as organizationSkillBundleSchema } from "./dist-Dj3TOx03.js";
 import { b as normalizeKnownBuiltinAgentControllerId, d as resolveBuiltinAgentControllerConversationKind, l as buildAgentControllerConversationRef } from "./controller-contract-pe3_Re-c.js";
-import { $ as buildDaemonServiceDependencyTitle, $a as readDaemonCatalogSyncSignal, $i as describeServerRequiredVersionUnavailableReason, $n as ProjectBindingStoreUpdateRequiredError, $r as settleInflightTask, $t as resolveCurrentDaemonExpectedVersion, Aa as HEARTBEAT_RESPONSE_TIMEOUT_MS, Ai as createLocalAdapterEntries, An as setAgentRegistrationEnabled, Ar as createInflightTaskControlRegistry, At as uninstallDaemonServiceUpdateWorker, Bi as forkCodexAppServerThread, Bn as resolveSkillsAgentRegistry, Br as resolveDispatchContinuityObservation, C as formatDaemonServiceRefreshReliabilityMessage, Ca as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, Cn as listAgentTargetStates, Cr as buildDispatchReplyContextSummary, D as writeDaemonStartFailureState, Da as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Dr as createLocalTaskInterruptSender, Dt as writeOpenMeldToolsMaintenancePolicy, E as clearDaemonStartFailureState, Ea as DAEMON_STREAM_CONNECT_TIMEOUT_MS, En as reconcileNewRunnableBuiltinAgentRegistrations, Er as mergeOpenClawGatewayVisibility, Et as resolveOpenMeldToolsMaintenanceProjection, Fa as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Fi as probeGrokBuildAcpInterface, Fr as applyIntervalJitterMs$1, Ft as readCurrentDaemonOwnerSnapshot, Gi as createUnsupportedProviderUsageLimits, Gn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Gr as buildRuntimeWorkspaceFingerprint, Gt as isVersionDowngrade, Ha as requireOpenMeldProfile, Hi as verifyCodexAppServerThread, Hr as resolveCompatibleConversationExecutionState, Ht as readDaemonRuntimeContractRepairReport, Ia as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, Ii as resolveInstalledGrokBuildLaunchCandidates, Ir as pruneStaleLeases, It as resolveDaemonStopStrategy, Ji as materializeCliLaunchCommand, Jn as isHomebrewCommandPath, Jr as commitResolvedAgentContext, Jt as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, Kn as resolveBuiltinAgentControllerDefinition, Kr as buildTaskResultEnvelope, La as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Li as projectCodexUsageLimits, Lr as resolveAdaptiveHeartbeatIntervalMs, Lt as resolveStoppedContractWriteBlockedReason, Ma as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Mi as forkOpenCodeServerSession, Mr as MAX_HEARTBEAT_INTERVAL_MS, Mt as buildDaemonOwnerSnapshotFromObservedState, Na as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Ni as resolveInstalledOpenCodeLaunchCandidates, Nr as MIN_HEARTBEAT_INTERVAL_MS, Nt as formatDaemonOwnerSummaryLabel, Oa as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, Oi as resolveCatalogSyncSkippedProfilesLogState, Or as buildLocalServiceDiagnosticsPayload, Ot as ensureDaemonServiceMaintenanceInstalled, Pa as REGISTER_RESPONSE_TIMEOUT_MS, Pi as GrokBuildAcpTransportError, Pr as applyAcceptedLeases, Pt as hasActiveDaemonOwners, Q as buildDaemonServiceDependencySummary, Qi as assessServerRequiredVersion, Qn as ProjectBindingOperationError, Qr as seedLegacyAgentContext, Qt as classifyDaemonServiceWakeability, Ri as resolveCodexTimeoutMs, Rn as canManageRegistryAgentSkillTargets, Rr as resolveCatalogSyncIntervalMs, Rt as summarizeDaemonOwnerSnapshot, S as buildDaemonServiceUpdateRequiredNextStep, Sa as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Sr as createSerialAgentInteractionCallback, Ta as DAEMON_RUNTIME_CONTRACT_EPOCH, Tr as createPendingAgentInteractionRegistry, Tt as readOpenMeldToolsMaintenancePolicy, Ua as resolveOpenMeldProfileOrNull, Ui as resolveInstalledClaudeCodeLaunchCandidates, Un as resolveRegistryRuntimeAdapterCapabilitySnapshot, Ur as resolveLatestScopedConversationExecutionState, Ut as buildDaemonServiceTargetSpec, Vi as resolveCodexAppServerCompletedTurn, Vr as resolveCompatibleAgentContextMatch, Vt as ensureDaemonRuntimeContractState, W as resolveLocalServiceDemand, Wi as createUnavailableProviderUsageLimits, Wn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Wr as runRuntimeTask, Wt as resolveDaemonServiceAlignmentDecision, X as buildDaemonServiceDependencyMeaning, Xi as createProviderOriginalError, Xn as isPnpmGlobalCommandPath, Xr as removeConversationExecutionState, Y as buildDaemonServiceDependencyDetails, Yi as listAgentControllerSupervisedProcessIds, Yn as isNpmGlobalCommandPath, Yr as loadLedgerState, Yt as DAEMON_SERVICE_REPAIR_ANOMALIES, Z as buildDaemonServiceDependencyNextStep, Zi as resolveServiceUpdateUrgency, Zr as resolveConversationExecutionStateByLookupKey, Zt as classifyDaemonServiceRunStartability, _i as parseAgentControllerRef, _o as resolveCurrentOpenMeldAccountContext, _r as syncRuntimeEventToInflightTaskControlRegistry, _t as syncDeviceRuntimeStateProjection, a as isDaemonInventoryRunningAndStartReady$1, aa as resolvePreferredDaemonDeviceId, ai as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, an as readLocalEnabledControllers, ar as removeAgentActivityBindingsWhileDeliveryLocked, at as slugifyOpenClawNamePart, ba as CATALOG_SYNC_RETRY_INTERVAL_MS, bi as renderInformationProtectionPrompt, br as isDaemonReconcileInProgressError, c as waitForSystemServiceStartup$1, ca as emitRunLine, ci as buildInformationProtectionPromptPlan, cn as resolveProfileWorkspaceRuntime, co as buildHumanAuthenticationCard, cr as resolveProjectBindingForPath, ct as createMutableRouteCatalogState, d as captureDaemonServiceEvidenceBestEffort, da as normalizeOptionalText$11, do as resolveAuthenticationGuidance, dt as summarizeSkippedDaemonProfiles, ei as upsertConversationExecutionState, en as emitDriftDetectedEvidence, er as bindProject, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, fa as normalizeText$2, fn as readProfileWorkspaceConfigForAccount, ft as syncDaemonRouteCatalogState, g as resolveServiceReadiness, ga as assessCliUpdate, gr as normalizeDispatchThreadAction, h as resolveDaemonStatusAuthenticationAttention, ha as warnDaemonEvent, hn as setCustomProfileWorkspace, hr as withAgentActivityLocalStateLock, ht as resolveCurrentEffectiveProfileWorkingFolderRuntime, i as runDaemonServiceLifecycle, ia as resolveDaemonDeviceId, ii as buildAgentContextLookupKey, in as buildRuntimeRouteTargets, it as normalizeOpenClawSpaceIdPrefix, ja as MAX_RECONNECT_DELAY_MS, ji as parseOpenCodeGoUsageResponse, jr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, jt as inspectDaemonServiceInventory, ka as DEFAULT_RECONNECT_DELAY_MS, ki as createLocalAdapterContainer, kr as createLocalExecutionSlots, l as startDaemonSystemServiceWithAutoRepair, la as normalizeHeartbeatIntervalMs, li as buildWorkingLanguagePromptPlan, ln as ensureOpenMeldManagedProfileWorkspace, lo as createAuthenticationError, lt as createRouteCatalogFromMutableState, m as resolveDaemonStatusAttention, ma as toErrorMessage$10, mn as resolveConfiguredProfileWorkspacePathForAccount, mo as resolveAuthenticationReasonFromState, mr as withAgentActivityDeliveryLock, n as scheduleDaemonServiceUpdate, na as buildLedgerPaths, ni as buildAuthenticatedControlPlaneResponse, nn as emitReconcileStartedEvidence, nr as listProjectBindings, nt as prepareProviderRuntime, o as isSystemServiceStartupTimeoutError, oa as asRecord, oi as areAgentControllerInterfaceAccountsSame, on as resolveLocalController, oo as buildAuthenticationStatusLabel, or as removeMissingProjectConnections, ot as readDaemonRouteCatalogCache, p as resolveDaemonStatusSnapshot, pa as nowIsoString, pr as resolveLocalProjectConnectionForPath, qi as buildCliLaunchInvocation, qn as isBunGlobalCommandPath, qr as appendLedgerHistoryEntry, qt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, r as DaemonServiceLifecycleDrainTimeoutError, ra as ensureDaemonRuntimePaths, ri as assertLegacyAgentContextAssociation, rn as DaemonServiceRunError, rr as listProjectConnectionsWithStatus, rt as buildOpenClawSpaceSessionKey, s as resolveSystemServiceStartupWaitMs, sa as dirnamePath, si as buildAgentControllerRef, sn as resolveLocalRuntimeControllerSupport, so as buildCommandAuthenticationPromptMessage$1, sr as removeProjectConnection, st as writeDaemonRouteCatalogCache, ti as withLedgerStateTransaction, tn as emitReconcileCompletedEvidence, to as clearAllSelectedOpenMeldProfileIds, tr as isProjectBound, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, ua as normalizeNonNegativeInteger$1, uo as extractAuthenticationPromptAction, ur as setDefaultProjectConnection, ut as loadDaemonRouteCatalog, v as buildDaemonServiceRefreshNextStep, va as buildDaemonSystemServiceCommandSpec, vr as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, w as formatDaemonServiceUpdateRequiredMessage, wa as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, wn as manageAgentRegistrationInstallation, wr as normalizeDispatchPostMessageAction, x as buildDaemonServiceStatusReadOnlyDetail, xa as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, xi as renderWorkingLanguagePrompt, xr as resolveRouteRegistrationReconcileDecision, xt as createOpenMeldToolsUpdateCoordinator, y as buildDaemonServiceRefreshPromptMessage, ya as ensureDaemonSystemServiceCommandFiles, yr as SPACE_ACTION_TARGET_GUIDANCE_LINES, yt as resolveAgentProfilePrimaryAgentControllerReport, za as resolveRuntimeContext, zi as resolveInstalledCodexLaunchCandidates, zr as resolveDispatchQueueLogMeta } from "./daemon-service-update-coordinator-BcbbIDzC.js";
-import { A as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, An as normalizeMessageEnvelope, C as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, Cr as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, D as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Dr as localFolderPickerHelperResultSchema, E as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, En as collectCanonicalMentionTextFragments, Er as localFolderPickerHelperProtocolResultSchema, F as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Fn as executionContextAssignmentSchema, Gn as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, I as runtimeTransportRouteCatalogChangedFramePayloadSchema, J as openMeldSpaceEgressActionSchema, K as openMeldDaemonTaskResultPayloadSchema, Ln as executionContextTaskSchema, M as runtimeTransportRegisterSessionResponseSchema, On as getSpaceMessageAddressingRelationSupportForTargetKind, P as runtimeTransportResumeControllerConversationFramePayloadSchema, Q as sanitizeDispatchErrorSummary, R as runtimeTransportSubmitTaskResultRequestSchema, S as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, T as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Tn as MESSAGE_MENTION_TYPE_VALUES, Tr as localFolderPickerDaemonFrameSchema, X as resolvePublicAgentAvailabilityCopy, Xr as openMeldRequestContextSchema, _r as OPENMELD_REASONING_STREAM_HEADER, a as localWakeRouteWorkingFolderObservationSchema, b as runtimeTransportHeartbeatResponseSchema, c as runtimeTransportDispatchInteractionDeliveredRequestSchema, d as runtimeTransportDispatchLifecycleRequestSchema, f as runtimeTransportDispatchPreviewEndRequestSchema, g as runtimeTransportDispatchToolActivityRequestSchema, gr as LOCAL_AGENT_REASONING_MAX_CHARS, h as runtimeTransportDispatchRuntimeEvidenceRequestSchema, ir as runtimeTransportDeliveryExecutionIdentitySchema, j as runtimeTransportRegisterSessionRequestSchema, jn as resolveMessageEnvelopeTargetField, k as runtimeTransportOpenMeldToolsControlFramePayloadSchema, l as runtimeTransportDispatchInteractionRequestSchema, lr as resolveSingleSpaceMentionLabels, m as runtimeTransportDispatchReasoningRequestSchema, p as runtimeTransportDispatchPreviewRequestSchema, qn as agentInteractionRequestSchema, r as daemonStreamFrameSchema, rr as runtimeCoordinatorExecutionTokenEnvelopeSchema, s as runtimeTransportDeliverDispatchRequestSchema, sr as normalizeSpacePasswordText, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, u as runtimeTransportDispatchInteractionResponseFramePayloadSchema, ur as resolveSpaceMentionLabels, v as runtimeTransportForkAgentSessionResultSchema, vr as localAgentReasoningPreferencesSchema, w as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, wr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, x as runtimeTransportLocalAgentControlCancelFramePayloadSchema, xt as sanitizeSignalTextPreview, y as runtimeTransportHeartbeatRequestSchema } from "./runtime-transport-DxISZdzf.js";
-import { E as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-DgHvRt5i.js";
+import { $ as buildDaemonServiceDependencyTitle, $a as readDaemonCatalogSyncSignal, $i as describeServerRequiredVersionUnavailableReason, $n as ProjectBindingStoreUpdateRequiredError, $r as settleInflightTask, $t as resolveCurrentDaemonExpectedVersion, Aa as HEARTBEAT_RESPONSE_TIMEOUT_MS, Ai as createLocalAdapterEntries, An as setAgentRegistrationEnabled, Ar as createInflightTaskControlRegistry, At as uninstallDaemonServiceUpdateWorker, Bi as forkCodexAppServerThread, Bn as resolveSkillsAgentRegistry, Br as resolveDispatchContinuityObservation, C as formatDaemonServiceRefreshReliabilityMessage, Ca as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, Cn as listAgentTargetStates, Cr as buildDispatchReplyContextSummary, D as writeDaemonStartFailureState, Da as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, Dr as createLocalTaskInterruptSender, Dt as writeOpenMeldToolsMaintenancePolicy, E as clearDaemonStartFailureState, Ea as DAEMON_STREAM_CONNECT_TIMEOUT_MS, En as reconcileNewRunnableBuiltinAgentRegistrations, Er as mergeOpenClawGatewayVisibility, Et as resolveOpenMeldToolsMaintenanceProjection, Fa as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, Fi as probeGrokBuildAcpInterface, Fr as applyIntervalJitterMs$1, Ft as readCurrentDaemonOwnerSnapshot, Gi as createUnsupportedProviderUsageLimits, Gn as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, Gr as buildRuntimeWorkspaceFingerprint, Gt as isVersionDowngrade, Ha as requireOpenMeldProfile, Hi as verifyCodexAppServerThread, Hr as resolveCompatibleConversationExecutionState, Ht as readDaemonRuntimeContractRepairReport, Ia as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, Ii as resolveInstalledGrokBuildLaunchCandidates, Ir as pruneStaleLeases, It as resolveDaemonStopStrategy, Ji as materializeCliLaunchCommand, Jn as isHomebrewCommandPath, Jr as commitResolvedAgentContext, Jt as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, Kn as resolveBuiltinAgentControllerDefinition, Kr as buildTaskResultEnvelope, La as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Li as projectCodexUsageLimits, Lr as resolveAdaptiveHeartbeatIntervalMs, Lt as resolveStoppedContractWriteBlockedReason, Ma as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, Mi as forkOpenCodeServerSession, Mr as MAX_HEARTBEAT_INTERVAL_MS, Mt as buildDaemonOwnerSnapshotFromObservedState, Na as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Ni as resolveInstalledOpenCodeLaunchCandidates, Nr as MIN_HEARTBEAT_INTERVAL_MS, Nt as formatDaemonOwnerSummaryLabel, Oa as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, Oi as resolveCatalogSyncSkippedProfilesLogState, Or as buildLocalServiceDiagnosticsPayload, Ot as ensureDaemonServiceMaintenanceInstalled, Pa as REGISTER_RESPONSE_TIMEOUT_MS, Pi as GrokBuildAcpTransportError, Pr as applyAcceptedLeases, Pt as hasActiveDaemonOwners, Q as buildDaemonServiceDependencySummary, Qi as assessServerRequiredVersion, Qn as ProjectBindingOperationError, Qr as seedLegacyAgentContext, Qt as classifyDaemonServiceWakeability, Ri as resolveCodexTimeoutMs, Rn as canManageRegistryAgentSkillTargets, Rr as resolveCatalogSyncIntervalMs, Rt as summarizeDaemonOwnerSnapshot, S as buildDaemonServiceUpdateRequiredNextStep, Sa as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, Sr as createSerialAgentInteractionCallback, Ta as DAEMON_RUNTIME_CONTRACT_EPOCH, Tr as createPendingAgentInteractionRegistry, Tt as readOpenMeldToolsMaintenancePolicy, Ua as resolveOpenMeldProfileOrNull, Ui as resolveInstalledClaudeCodeLaunchCandidates, Un as resolveRegistryRuntimeAdapterCapabilitySnapshot, Ur as resolveLatestScopedConversationExecutionState, Ut as buildDaemonServiceTargetSpec, Vi as resolveCodexAppServerCompletedTurn, Vr as resolveCompatibleAgentContextMatch, Vt as ensureDaemonRuntimeContractState, W as resolveLocalServiceDemand, Wi as createUnavailableProviderUsageLimits, Wn as resolveRegistryRuntimeAdapterContractByAgentControllerRef, Wr as runRuntimeTask, Wt as resolveDaemonServiceAlignmentDecision, X as buildDaemonServiceDependencyMeaning, Xi as createProviderOriginalError, Xn as isPnpmGlobalCommandPath, Xr as removeConversationExecutionState, Y as buildDaemonServiceDependencyDetails, Yi as listAgentControllerSupervisedProcessIds, Yn as isNpmGlobalCommandPath, Yr as loadLedgerState, Yt as DAEMON_SERVICE_REPAIR_ANOMALIES, Z as buildDaemonServiceDependencyNextStep, Zi as resolveServiceUpdateUrgency, Zr as resolveConversationExecutionStateByLookupKey, Zt as classifyDaemonServiceRunStartability, _i as parseAgentControllerRef, _o as resolveCurrentOpenMeldAccountContext, _r as syncRuntimeEventToInflightTaskControlRegistry, _t as syncDeviceRuntimeStateProjection, a as isDaemonInventoryRunningAndStartReady$1, aa as resolvePreferredDaemonDeviceId, ai as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, an as readLocalEnabledControllers, ar as removeAgentActivityBindingsWhileDeliveryLocked, at as slugifyOpenClawNamePart, ba as CATALOG_SYNC_RETRY_INTERVAL_MS, bi as renderInformationProtectionPrompt, br as isDaemonReconcileInProgressError, c as waitForSystemServiceStartup$1, ca as emitRunLine, ci as buildInformationProtectionPromptPlan, cn as resolveProfileWorkspaceRuntime, co as buildHumanAuthenticationCard, cr as resolveProjectBindingForPath, ct as createMutableRouteCatalogState, d as captureDaemonServiceEvidenceBestEffort, da as normalizeOptionalText$11, do as resolveAuthenticationGuidance, dt as summarizeSkippedDaemonProfiles, ei as upsertConversationExecutionState, en as emitDriftDetectedEvidence, er as bindProject, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, fa as normalizeText$2, fn as readProfileWorkspaceConfigForAccount, ft as syncDaemonRouteCatalogState, g as resolveServiceReadiness, ga as assessCliUpdate, gr as normalizeDispatchThreadAction, h as resolveDaemonStatusAuthenticationAttention, ha as warnDaemonEvent, hn as setCustomProfileWorkspace, hr as withAgentActivityLocalStateLock, ht as resolveCurrentEffectiveProfileWorkingFolderRuntime, i as runDaemonServiceLifecycle, ia as resolveDaemonDeviceId, ii as buildAgentContextLookupKey, in as buildRuntimeRouteTargets, it as normalizeOpenClawSpaceIdPrefix, ja as MAX_RECONNECT_DELAY_MS, ji as parseOpenCodeGoUsageResponse, jr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, jt as inspectDaemonServiceInventory, ka as DEFAULT_RECONNECT_DELAY_MS, ki as createLocalAdapterContainer, kr as createLocalExecutionSlots, l as startDaemonSystemServiceWithAutoRepair, la as normalizeHeartbeatIntervalMs, li as buildWorkingLanguagePromptPlan, ln as ensureOpenMeldManagedProfileWorkspace, lo as createAuthenticationError, lt as createRouteCatalogFromMutableState, m as resolveDaemonStatusAttention, ma as toErrorMessage$10, mn as resolveConfiguredProfileWorkspacePathForAccount, mo as resolveAuthenticationReasonFromState, mr as withAgentActivityDeliveryLock, n as scheduleDaemonServiceUpdate, na as buildLedgerPaths, ni as buildAuthenticatedControlPlaneResponse, nn as emitReconcileStartedEvidence, nr as listProjectBindings, nt as prepareProviderRuntime, o as isSystemServiceStartupTimeoutError, oa as asRecord, oi as areAgentControllerInterfaceAccountsSame, on as resolveLocalController, oo as buildAuthenticationStatusLabel, or as removeMissingProjectConnections, ot as readDaemonRouteCatalogCache, p as resolveDaemonStatusSnapshot, pa as nowIsoString, pr as resolveLocalProjectConnectionForPath, qi as buildCliLaunchInvocation, qn as isBunGlobalCommandPath, qr as appendLedgerHistoryEntry, qt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, r as DaemonServiceLifecycleDrainTimeoutError, ra as ensureDaemonRuntimePaths, ri as assertLegacyAgentContextAssociation, rn as DaemonServiceRunError, rr as listProjectConnectionsWithStatus, rt as buildOpenClawSpaceSessionKey, s as resolveSystemServiceStartupWaitMs, sa as dirnamePath, si as buildAgentControllerRef, sn as resolveLocalRuntimeControllerSupport, so as buildCommandAuthenticationPromptMessage$1, sr as removeProjectConnection, st as writeDaemonRouteCatalogCache, ti as withLedgerStateTransaction, tn as emitReconcileCompletedEvidence, to as clearAllSelectedOpenMeldProfileIds, tr as isProjectBound, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, ua as normalizeNonNegativeInteger$1, uo as extractAuthenticationPromptAction, ur as setDefaultProjectConnection, ut as loadDaemonRouteCatalog, v as buildDaemonServiceRefreshNextStep, va as buildDaemonSystemServiceCommandSpec, vr as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, w as formatDaemonServiceUpdateRequiredMessage, wa as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, wn as manageAgentRegistrationInstallation, wr as normalizeDispatchPostMessageAction, x as buildDaemonServiceStatusReadOnlyDetail, xa as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, xi as renderWorkingLanguagePrompt, xr as resolveRouteRegistrationReconcileDecision, xt as createOpenMeldToolsUpdateCoordinator, y as buildDaemonServiceRefreshPromptMessage, ya as ensureDaemonSystemServiceCommandFiles, yr as SPACE_ACTION_TARGET_GUIDANCE_LINES, yt as resolveAgentProfilePrimaryAgentControllerReport, za as resolveRuntimeContext, zi as resolveInstalledCodexLaunchCandidates, zr as resolveDispatchQueueLogMeta } from "./daemon-service-update-coordinator--xLHNqDT.js";
+import { A as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, Ar as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Bt as spaceWorkRelativePathSchema, C as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, Cr as LOCAL_AGENT_REASONING_MAX_CHARS, D as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, E as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, F as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Fn as getSpaceMessageAddressingRelationSupportForTargetKind, Hn as executionContextAssignmentSchema, I as runtimeTransportRouteCatalogChangedFramePayloadSchema, J as openMeldSpaceEgressActionSchema, K as openMeldDaemonTaskResultPayloadSchema, Ln as normalizeMessageEnvelope, Lt as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, M as runtimeTransportRegisterSessionResponseSchema, Mn as MESSAGE_MENTION_TYPE_VALUES, Mr as localFolderPickerDaemonFrameSchema, Nn as collectCanonicalMentionTextFragments, Nr as localFolderPickerHelperProtocolResultSchema, P as runtimeTransportResumeControllerConversationFramePayloadSchema, Pr as localFolderPickerHelperResultSchema, Q as sanitizeDispatchErrorSummary, Qn as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, R as runtimeTransportSubmitTaskResultRequestSchema, Rn as resolveMessageEnvelopeTargetField, Rt as SPACE_WORK_MAX_BYTES, S as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, T as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, Tr as localAgentReasoningPreferencesSchema, Vt as spaceWorkSelectionSchema, Wn as executionContextTaskSchema, X as resolvePublicAgentAvailabilityCopy, _r as resolveSpaceMentionLabels, a as localWakeRouteWorkingFolderObservationSchema, b as runtimeTransportHeartbeatResponseSchema, c as runtimeTransportDispatchInteractionDeliveredRequestSchema, d as runtimeTransportDispatchLifecycleRequestSchema, dr as runtimeTransportDeliveryExecutionIdentitySchema, er as agentInteractionRequestSchema, f as runtimeTransportDispatchPreviewEndRequestSchema, g as runtimeTransportDispatchToolActivityRequestSchema, gr as resolveSingleSpaceMentionLabels, h as runtimeTransportDispatchRuntimeEvidenceRequestSchema, j as runtimeTransportRegisterSessionRequestSchema, jr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, k as runtimeTransportOpenMeldToolsControlFramePayloadSchema, l as runtimeTransportDispatchInteractionRequestSchema, m as runtimeTransportDispatchReasoningRequestSchema, mr as normalizeSpacePasswordText, p as runtimeTransportDispatchPreviewRequestSchema, r as daemonStreamFrameSchema, ri as openMeldRequestContextSchema, s as runtimeTransportDeliverDispatchRequestSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, u as runtimeTransportDispatchInteractionResponseFramePayloadSchema, ur as runtimeCoordinatorExecutionTokenEnvelopeSchema, v as runtimeTransportForkAgentSessionResultSchema, w as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, wr as OPENMELD_REASONING_STREAM_HEADER, x as runtimeTransportLocalAgentControlCancelFramePayloadSchema, xt as sanitizeSignalTextPreview, y as runtimeTransportHeartbeatRequestSchema } from "./runtime-transport-D8G8sANa.js";
+import { E as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-gaLjWIKR.js";
 import { C as normalizeOptionalWorkingDirectory, a as openMeldDaemonControlPlaneResponseSchema, w as openMeldRuntimeProfileIdSchema } from "./control-plane-Bpu7g9Av.js";
 import { F as iso, G as string, L as literal, N as enumFactory, W as strictObject, X as url, a as formatLocalSetupActionLabel, f as localServiceComponentUpdateProjectionSchema, i as formatLocalSetupActionDescription, j as discriminatedUnion, k as boolean, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel, s as localCliComponentUpdateProjectionSchema } from "./local-components-B6SCXZf9.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { b as withSkillsInstallLock, f as ensureLocalSkills, g as loadSelectedSkillAssets, l as installSkillsToTargets, n as collectSkillsReadinessSnapshot, u as resolveSkillInstallStateForTarget, v as hashBundledSkillAssets, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installation-inventory-C92AkQkA.js";
-import { n as resolveOpenMeldDistribution, o as serviceControlCapabilitiesSchema, t as isBinaryDistribution } from "./distribution-DY2fBeSW.js";
-import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-Dd4hdHNo.js";
-import { $ as readManagedCliInstallation, A as prepareDaemonServiceBundle, Ft as requestLocalDaemonShutdown, H as formatDaemonLifecycleOriginSummary, Ht as upsertDaemonServiceContract, J as runWithDaemonLifecycleCommandJournal, K as resolveRecentDaemonSignalStopCause, Lt as sendLocalDaemonControlPlaneRequest, M as resolveAlignedDaemonActiveBundleEntryPath, Mt as LocalDaemonControlPlaneClientError, N as resolveDaemonBundleEntryPathFromState, Rt as clearDaemonServiceContract, U as readLatestDaemonLifecycleConnectionStateEvent, V as emitDaemonLifecycleEvent, Vt as readDaemonServiceContract, W as readLatestDaemonLifecycleOriginEvent, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, lt as compareSemver, n as getEffectiveDaemonRuntimeStatus, nt as OPENMELD_VERSION, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, q as runDaemonServiceManagerAction, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath, zt as isDaemonServiceContractIdentityReusable } from "./daemon-service-runtime-CY6wdBe1.js";
-import { $ as SPACE_PERSONAL_CONTRIBUTION_RULE, Bt as buildAgentOverviewFromContract, Gt as createPresenter, Kt as sanitizeTerminalDisplayText, Mt as validateDaemonControlTargetInput, Xt as outLine, Yt as outJsonLine, Z as SPACE_COLLABORATION_CONTEXT_RULE, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceAgentIdentityLine, d as formatDaemonServiceMissingStatus, dt as isSelfWakeSpaceAction, f as getDaemonDowngradeBlockedTitle, ft as renderSpaceEntryBrief, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, ht as getCommandEntryContract, it as buildCompactDispatchActionGuidanceLines, l as formatDaemonServiceMissingRunStepOne, lt as composeDispatchBrief, mt as resolveSpacePublicationRequirement, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, ot as buildSpaceEntryBriefNeedMoreLine, pt as resolvePublicAgentFailureReason, r as formatDaemonDowngradeBlockedNextStep, rt as buildCenterAgentRoleTemplateText, s as formatDaemonServiceMissingMeaning, st as buildSpaceWakeParticipantLines, t as formatElapsedTime, tt as buildAgentFacingMentalModelLines, u as formatDaemonServiceMissingRunStepTwo, ut as deriveContinuity } from "./elapsed-time-Do3uIV__.js";
-import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-C6sHRNGu.js";
+import { b as withSkillsInstallLock, f as ensureLocalSkills, g as loadSelectedSkillAssets, l as installSkillsToTargets, n as collectSkillsReadinessSnapshot, u as resolveSkillInstallStateForTarget, v as hashBundledSkillAssets, x as OFFICIAL_CLI_SKILL_URL, y as computeDirectoryContentHash } from "./installation-inventory-C4WKcVEj.js";
+import { i as serviceControlCapabilitiesSchema } from "./service-account-admission-Dy2W3n3_.js";
+import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-CIzOT1zx.js";
+import { $ as readManagedCliInstallation, A as prepareDaemonServiceBundle, Ft as requestLocalDaemonShutdown, H as formatDaemonLifecycleOriginSummary, Ht as upsertDaemonServiceContract, J as runWithDaemonLifecycleCommandJournal, K as resolveRecentDaemonSignalStopCause, Lt as sendLocalDaemonControlPlaneRequest, M as resolveAlignedDaemonActiveBundleEntryPath, Mt as LocalDaemonControlPlaneClientError, N as resolveDaemonBundleEntryPathFromState, Rt as clearDaemonServiceContract, U as readLatestDaemonLifecycleConnectionStateEvent, V as emitDaemonLifecycleEvent, Vt as readDaemonServiceContract, W as readLatestDaemonLifecycleOriginEvent, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, lt as compareSemver, n as getEffectiveDaemonRuntimeStatus, nt as OPENMELD_VERSION, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, q as runDaemonServiceManagerAction, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath, zt as isDaemonServiceContractIdentityReusable } from "./daemon-service-runtime-CGT3yVOs.js";
+import { $ as SPACE_PERSONAL_CONTRIBUTION_RULE, Bt as buildAgentOverviewFromContract, Gt as createPresenter, Kt as sanitizeTerminalDisplayText, Mt as validateDaemonControlTargetInput, Xt as outLine, Yt as outJsonLine, Z as SPACE_COLLABORATION_CONTEXT_RULE, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, at as buildSpaceAgentIdentityLine, d as formatDaemonServiceMissingStatus, dt as isSelfWakeSpaceAction, f as getDaemonDowngradeBlockedTitle, ft as renderSpaceEntryBrief, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, ht as getCommandEntryContract, it as buildCompactDispatchActionGuidanceLines, l as formatDaemonServiceMissingRunStepOne, lt as composeDispatchBrief, mt as resolveSpacePublicationRequirement, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, ot as buildSpaceEntryBriefNeedMoreLine, pt as resolvePublicAgentFailureReason, r as formatDaemonDowngradeBlockedNextStep, rt as buildCenterAgentRoleTemplateText, s as formatDaemonServiceMissingMeaning, st as buildSpaceWakeParticipantLines, t as formatElapsedTime, tt as buildAgentFacingMentalModelLines, u as formatDaemonServiceMissingRunStepTwo, ut as deriveContinuity } from "./elapsed-time-CCFWbCC8.js";
+import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-BczddvzH.js";
+import { n as isPreciseProcessStartIdentity, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-Clby123a.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
-import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, d as daemonDispatchJournalPath, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-C37ZtIZK.js";
-import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-GiMCiTmu.js";
-import { a as formatOpenMeldCliCommand, c as formatOpenMeldCliTextBlock, f as resolveUserFacingCliEntryCommand, i as formatInlineOpenMeldCliCommands, o as formatOpenMeldCliCommands, r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-NtJYJe1D.js";
-import { t as admitServiceAccountStop } from "./service-account-authorization-AbowIr6n.js";
+import { n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
+import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, d as daemonDispatchJournalPath, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-CoAZLwpi.js";
+import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-DxS5eH_N.js";
+import { a as formatOpenMeldCliCommand, c as formatOpenMeldCliTextBlock, f as resolveUserFacingCliEntryCommand, i as formatInlineOpenMeldCliCommands, o as formatOpenMeldCliCommands, r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-BWI2adGw.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-4oZuo8sT.js";
 import { n as toErrorMessage$11, t as sleep } from "./dist-o3UL1EGQ.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, f as buildOpenMeldRequestContextFromProfileIdentity, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-km8Ol1P4.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, f as buildOpenMeldRequestContextFromProfileIdentity, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-CKRP7Ymg.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, loadavg, tmpdir } from "node:os";
 import { basename, delimiter, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -11319,6 +11321,7 @@ function parseDispatchTask(input) {
 	return {
 		...requiredFields,
 		executionContext: payload.executionContext,
+		workHandoff: payload.sourceSignalSnapshot?.workHandoff,
 		agentControllerConversationId,
 		...resolveDispatchSourceFiles(payload),
 		...controllerSelection,
@@ -11832,6 +11835,19 @@ function buildDispatchCorrelation(input) {
 	};
 }
 //#endregion
+//#region src/lib/path-containment.ts
+const nativePath = {
+	isAbsolute,
+	relative,
+	sep
+};
+/** Lexical containment of already canonical absolute paths, not symlink resolution. */
+function isSameOrDescendantPath(candidate, parent, paths = nativePath) {
+	if (!(paths.isAbsolute(candidate) && paths.isAbsolute(parent))) return false;
+	const relation = paths.relative(parent, candidate);
+	return relation === "" || relation !== ".." && !relation.startsWith(`..${paths.sep}`) && !paths.isAbsolute(relation);
+}
+//#endregion
 //#region src/local-service/file-access/computer-file-access-store.ts
 const LEGACY_COMPUTER_FILE_ACCESS_STORE_SCHEMA = "openmeld-computer-file-access-v1";
 const COMPUTER_FILE_ACCESS_STORE_SCHEMA = "openmeld-computer-file-access-v2";
@@ -11989,8 +12005,7 @@ function removeRedundantFolders(folders) {
 	return unique.filter((candidate, index) => !unique.some((parent, parentIndex) => parentIndex !== index && isPathInside(candidate, parent)));
 }
 function isPathInside(candidate, parent) {
-	const relation = relative(parent, candidate);
-	return relation.length > 0 && !relation.startsWith("..") && !isAbsolute(relation);
+	return relative(parent, candidate) !== "" && isSameOrDescendantPath(candidate, parent);
 }
 function hasSamePolicyValue(current, next) {
 	if (current.mode !== next.mode) return false;
@@ -16849,17 +16864,13 @@ async function resolveComputerFileAccessAdmission(input) {
 }
 async function assertComputerFileAccessWorkingDirectoryAllowed(input) {
 	const workingDirectory = await realpath(input.providerRuntimeWorkingDirectory);
-	const matchesConfiguredFolder = input.boundary.folders.some((folder) => isSameOrDescendant(workingDirectory, folder));
+	const matchesConfiguredFolder = input.boundary.folders.some((folder) => isSameOrDescendantPath(workingDirectory, folder));
 	if (input.boundary.mode === "only_selected_folders" ? matchesConfiguredFolder : !matchesConfiguredFolder) return;
 	throw new DaemonServiceRunError({
 		code: "computer.file_access.working_directory_denied",
 		message: "computer.file_access.working_directory_denied: this Wake’s working folder is outside the Computer file access boundary"
 	});
 }
-function isSameOrDescendant(candidate, parent) {
-	const relativePath = relative(parent, candidate);
-	return relativePath === "" || !(relativePath.startsWith("..") || isAbsolute(relativePath));
-}
 //#endregion
 //#region src/local-service/file-access/computer-file-access-prompt.ts
 const COMPUTER_FILE_ACCESS_AWARENESS = "Stay within the file access available to this OpenMeld run. Treat denied paths as intentional and continue with the safest useful alternative. Only the Computer owner can change this boundary.";
@@ -18971,6 +18982,7 @@ function createDispatchSpaceActionContext(input) {
 	const contextPath = join(contextDir, "context.json");
 	const actionRecordPath = join(contextDir, "action.json");
 	const context = {
+		...input.workingCopyId ? { workingCopyId: input.workingCopyId } : {},
 		version: DISPATCH_SPACE_ACTION_CONTEXT_VERSION,
 		actionRecordPath,
 		attemptId: input.attemptId,
@@ -19094,7 +19106,8 @@ function parseDispatchSpaceActionContext(value) {
 		spaceContractSnapshot: parseSpaceContractSnapshot(record.spaceContractSnapshot),
 		spaceId: requiredString(record.spaceId, "spaceId"),
 		targetProfileId: requiredString(record.targetProfileId, "targetProfileId"),
-		taskId: requiredString(record.taskId, "taskId")
+		taskId: requiredString(record.taskId, "taskId"),
+		...record.workingCopyId ? { workingCopyId: requiredString(record.workingCopyId, "workingCopyId") } : {}
 	};
 }
 function assertDispatchRuntimeEnvMatchesContext(input) {
@@ -19714,6 +19727,673 @@ function normalizeOptionalText(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 //#endregion
+//#region src/organization-skills/cache.ts
+const CACHE_MARKER_FILENAME = ".openmeld-organization-skill.json";
+const DIRECTORY_READ_ONLY_MODE = 365;
+const FILE_READ_ONLY_MODE = 292;
+const PRIVATE_DIRECTORY_MODE = 448;
+const PRIVATE_FILE_MODE = 384;
+async function materializeOrganizationSkillRelease(input) {
+	const bundle = organizationSkillBundleSchema.parse(input.bundle);
+	if (sha256(stringifyOrganizationSkillBundleCanonicalJson(bundle)) !== input.digest) throw new Error("The Organization Skill release digest does not match its downloaded bundle.");
+	const releaseDir = input.releaseDirectory ?? organizationSkillReleaseDir(input.organizationId, input.skillId, input.releaseId);
+	const skillMarkdown = serializePortableSkillMarkdown(bundle);
+	const expectedFiles = buildExpectedCacheFiles({
+		bundle,
+		marker: {
+			digest: input.digest,
+			organizationId: input.organizationId,
+			releaseId: input.releaseId,
+			schemaVersion: 1,
+			skillId: input.skillId
+		},
+		skillMarkdown
+	});
+	if (await cacheMatches(releaseDir, expectedFiles)) return buildResult({
+		bundle,
+		releaseDir,
+		reused: true
+	});
+	const skillDir = dirname(releaseDir);
+	await mkdir(skillDir, {
+		mode: PRIVATE_DIRECTORY_MODE,
+		recursive: true
+	});
+	await chmod(skillDir, PRIVATE_DIRECTORY_MODE);
+	const temporaryDir = await mkdtemp(join(skillDir, `.load-${randomUUID()}-`));
+	try {
+		await writeCacheFiles(temporaryDir, expectedFiles);
+		await makeCacheReadOnly(temporaryDir, bundle);
+		if (await pathExists$1(releaseDir)) throw new Error(`The existing Organization Skill cache is not valid. Remove "${releaseDir}" and run the load command again.`);
+		await rename(temporaryDir, releaseDir);
+	} catch (error) {
+		await rm(temporaryDir, {
+			force: true,
+			recursive: true
+		}).catch(() => {});
+		throw error;
+	}
+	return buildResult({
+		bundle,
+		releaseDir,
+		reused: false
+	});
+}
+function serializePortableSkillMarkdown(bundle) {
+	const portable = bundle.portable;
+	return `${[
+		"---",
+		`name: ${toYamlString(portable.name)}`,
+		`description: ${toYamlString(portable.description)}`,
+		...portable.license === null ? [] : [`license: ${toYamlString(portable.license)}`],
+		...portable.compatibility === null ? [] : [`compatibility: ${toYamlString(portable.compatibility)}`],
+		...portable.allowedTools === null ? [] : [`allowed-tools: ${toYamlString(portable.allowedTools)}`],
+		...serializeMetadata(portable.metadata),
+		"---",
+		""
+	].join("\n")}${bundle.instructions}${bundle.instructions.endsWith("\n") ? "" : "\n"}`;
+}
+function buildExpectedCacheFiles(input) {
+	const files = /* @__PURE__ */ new Map();
+	files.set("SKILL.md", Buffer.from(input.skillMarkdown, "utf8"));
+	for (const file of input.bundle.files) files.set(file.path, decodeSkillFile(file));
+	files.set(CACHE_MARKER_FILENAME, Buffer.from(`${JSON.stringify(input.marker, null, 2)}\n`, "utf8"));
+	return files;
+}
+async function writeCacheFiles(rootDir, files) {
+	for (const [relativePath, bytes] of files) {
+		const absolutePath = join(rootDir, relativePath);
+		await mkdir(dirname(absolutePath), {
+			mode: PRIVATE_DIRECTORY_MODE,
+			recursive: true
+		});
+		await writeFile(absolutePath, bytes, { mode: PRIVATE_FILE_MODE });
+	}
+}
+async function cacheMatches(rootDir, expectedFiles) {
+	if (!await pathExists$1(rootDir)) return false;
+	try {
+		for (const [relativePath, expected] of expectedFiles) {
+			let current = join(rootDir, relativePath);
+			while (current !== dirname(rootDir)) {
+				const info = await lstat(current);
+				if (info.isSymbolicLink() || info.isFile() && info.nlink !== 1) return false;
+				current = dirname(current);
+			}
+			if (!(await readFile(join(rootDir, relativePath))).equals(expected)) return false;
+		}
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function makeCacheReadOnly(rootDir, bundle) {
+	const directories = /* @__PURE__ */ new Set([rootDir]);
+	for (const relativePath of [
+		"SKILL.md",
+		CACHE_MARKER_FILENAME,
+		...bundle.files.map((file) => file.path)
+	]) {
+		const absolutePath = join(rootDir, relativePath);
+		await chmod(absolutePath, FILE_READ_ONLY_MODE);
+		let current = dirname(absolutePath);
+		while (current !== rootDir && current.startsWith(`${rootDir}/`)) {
+			directories.add(current);
+			current = dirname(current);
+		}
+	}
+	const deepestFirst = [...directories].sort((left, right) => right.length - left.length);
+	for (const directory of deepestFirst) await chmod(directory, DIRECTORY_READ_ONLY_MODE);
+}
+function buildResult(input) {
+	return {
+		cachePath: input.releaseDir,
+		resourcePaths: input.bundle.files.map((file) => join(input.releaseDir, file.path)),
+		reused: input.reused,
+		skillMarkdownPath: join(input.releaseDir, "SKILL.md")
+	};
+}
+function decodeSkillFile(file) {
+	return Buffer.from(file.content, file.encoding === "base64" ? "base64" : "utf8");
+}
+function serializeMetadata(metadata) {
+	const entries = Object.entries(metadata).sort(([left], [right]) => {
+		if (left < right) return -1;
+		if (left > right) return 1;
+		return 0;
+	});
+	if (entries.length === 0) return [];
+	return ["metadata:", ...entries.map(([key, value]) => `  ${toYamlString(key)}: ${toYamlString(value)}`)];
+}
+function toYamlString(value) {
+	return JSON.stringify(value);
+}
+function sha256(value) {
+	return createHash("sha256").update(value).digest("hex");
+}
+async function pathExists$1(path) {
+	try {
+		await stat(path);
+		return true;
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/space/working-copy-download.ts
+/** Bound bytes while reading, rather than allocating an oversized response first. */
+async function downloadWorkingCopyFile(api, input) {
+	const content = await api.streamFileContent({
+		...input,
+		signal: AbortSignal.timeout(3e4)
+	});
+	const reader = content.bytes.getReader();
+	const chunks = [];
+	let size = 0;
+	try {
+		while (true) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			size += value.byteLength;
+			if (size > 10485760) throw new Error("Handoff files must be 10 MiB or smaller.");
+			chunks.push(value);
+		}
+	} finally {
+		await reader.cancel();
+		reader.releaseLock();
+	}
+	return {
+		revision: content.revision,
+		mimeType: content.mimeType,
+		bytes: Buffer.concat(chunks)
+	};
+}
+//#endregion
+//#region src/local-service/file-access/space-working-copy.ts
+const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
+const O_NOFOLLOW_ANY = 536870912;
+const CREATE_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | O_NOFOLLOW_ANY;
+const READ_FLAGS = constants.O_RDONLY | O_NOFOLLOW_ANY | constants.O_NONBLOCK;
+const fileStateSchema = z.object({
+	fileId: z.string(),
+	relativePath: spaceWorkRelativePathSchema,
+	revision: z.number().int().positive(),
+	mimeType: z.string().optional(),
+	sizeBytes: z.number().int().nonnegative().optional(),
+	baseHash: z.string().optional(),
+	conflict: z.object({
+		digest: z.string(),
+		mutationId: z.string().uuid(),
+		incoming: z.object({
+			revision: z.number().int().positive(),
+			relativePath: spaceWorkRelativePathSchema,
+			digest: z.string(),
+			mimeType: z.string(),
+			sizeBytes: z.number().int().nonnegative()
+		}).optional()
+	}).optional(),
+	pending: z.object({
+		mutationId: z.string().uuid(),
+		digest: z.string(),
+		baseRevision: z.number().int().positive()
+	}).optional()
+});
+const stateSchema = z.object({
+	schemaVersion: z.literal(1),
+	copyId: z.string().uuid(),
+	scope: z.string(),
+	root: z.string(),
+	rootDevice: z.number(),
+	rootInode: z.number(),
+	files: z.array(fileStateSchema).min(1).max(10)
+});
+/** Local receipts only. Every network operation still uses ordinary Space authorization. */
+function createSpaceWorkingCopies(input) {
+	if (process.platform !== "darwin") throw new Error("Managed working copies are not supported on this platform yet. Use explicit file download and write commands.");
+	const scope = hash(JSON.stringify({
+		accountId: input.scope.accountId,
+		organizationId: input.scope.organizationId,
+		spaceId: input.scope.spaceId,
+		profileId: input.scope.profileId,
+		baseUrl: input.scope.baseUrl
+	}));
+	const directory = join(input.laneRoot, "space-working-copies", scope);
+	const metadataPath = (id) => join(directory, `${z.string().uuid().parse(id)}.json`);
+	async function save(state) {
+		const path = metadataPath(state.copyId);
+		const temporary = `${path}.${randomUUID()}.tmp`;
+		await writeDurablePrivateFile(temporary, JSON.stringify(state));
+		await rename(temporary, path);
+		await createLedgerIo().syncPath(directory);
+	}
+	async function owned(id, run) {
+		const lock = await acquireLock({
+			openMeldProfileId: input.scope.profileId,
+			key: `space-copy:${scope}:${id}`,
+			pathResolution: { env: {
+				...process.env,
+				OPENMELD_HOME: input.laneRoot
+			} }
+		});
+		try {
+			await input.assertCurrentIdentity();
+			const state = stateSchema.parse(JSON.parse(await readFile(metadataPath(id), "utf8")));
+			if (state.scope !== scope || state.copyId !== id) throw new Error("This working copy belongs to another account or Space.");
+			await verifyRoot(state);
+			return await run(state);
+		} finally {
+			await releaseLock(lock);
+		}
+	}
+	async function prepareFiles(state) {
+		let total = 0;
+		for (const file of state.files) {
+			if (file.baseHash) continue;
+			await input.assertCurrentIdentity();
+			const remote = await input.transport.read(file.fileId, file.revision);
+			total += remote.bytes.byteLength;
+			if (remote.revision !== file.revision || remote.bytes.byteLength > 10485760 || total > SPACE_WORK_MAX_BYTES) throw new Error("The selected files exceed transfer limits or do not match their revisions.");
+			const path = await safePath(state, file.relativePath, true);
+			const current = await localBytes(state, file.relativePath);
+			if (current && hash(current) !== hash(remote.bytes)) throw new Error("Preparation found local changes. Keep this copy and prepare a new directory.");
+			if (!current) {
+				const handle = await open(path, CREATE_FLAGS, 384);
+				try {
+					await handle.writeFile(remote.bytes);
+					await handle.sync();
+				} finally {
+					await handle.close();
+				}
+			}
+			file.baseHash = hash(remote.bytes);
+			file.mimeType = remote.mimeType;
+			file.sizeBytes = remote.bytes.byteLength;
+			await save(state);
+		}
+		return {
+			copyId: state.copyId,
+			root: state.root,
+			ready: true
+		};
+	}
+	async function submitPending(state, file) {
+		if (file.conflict) throw new Error("Resolve the file conflict before saving. Use refresh to retrieve the shared version, merge your edits, then resolve with its file ID and revision.");
+		if (!(file.pending && file.mimeType)) return;
+		const pending = file.pending;
+		const bytes = await readFile(join(directory, `${pending.mutationId}.bin`));
+		if (hash(bytes) !== pending.digest) throw new Error("The pending upload snapshot is damaged. Local edits have been preserved.");
+		await input.assertCurrentIdentity();
+		const receipt = await input.transport.write({
+			fileId: file.fileId,
+			baseRevision: pending.baseRevision,
+			bytes,
+			mimeType: file.mimeType,
+			clientMutationId: pending.mutationId
+		}).catch(async (error) => {
+			if (error instanceof OpenMeldApiClientHttpError && error.status === 409 && (error.code === "space_file.conflict" || error.upstreamCode === "space_file.conflict")) {
+				file.conflict = {
+					digest: pending.digest,
+					mutationId: pending.mutationId
+				};
+				file.pending = void 0;
+				await save(state);
+			}
+			throw error;
+		});
+		if (receipt.id !== file.fileId || receipt.latestRevision.sizeBytes !== bytes.byteLength) throw new Error("The file receipt does not match the pending write.");
+		file.revision = receipt.latestRevision.revision;
+		file.baseHash = pending.digest;
+		file.sizeBytes = bytes.byteLength;
+		file.pending = void 0;
+		await save(state);
+		await unlink(join(directory, `${pending.mutationId}.bin`));
+	}
+	return {
+		async prepare(selection, root, copyId = randomUUID()) {
+			const validated = spaceWorkSelectionSchema.parse(selection);
+			await input.assertCurrentIdentity();
+			await mkdir(directory, {
+				recursive: true,
+				mode: 448
+			});
+			const canonicalRoot = join(await realpath(dirname(resolve(root))), basename(resolve(root)));
+			await mkdir(canonicalRoot, { mode: 448 });
+			const identity = await lstat(canonicalRoot);
+			const state = {
+				schemaVersion: 1,
+				copyId: z.uuid().parse(copyId),
+				scope,
+				root: canonicalRoot,
+				rootDevice: identity.dev,
+				rootInode: identity.ino,
+				files: validated.files
+			};
+			await save(state);
+			try {
+				return await owned(state.copyId, prepareFiles);
+			} catch (error) {
+				throw new Error(`Working copy ${state.copyId} is incomplete. Resume preparation with this copy ID; its files are preserved.`, { cause: error });
+			}
+		},
+		resume: (copyId) => owned(copyId, prepareFiles),
+		status: (copyId) => owned(copyId, async (state) => ({
+			copyId,
+			root: state.root,
+			files: await Promise.all(state.files.map(async (file) => {
+				const bytes = file.baseHash ? await localBytes(state, file.relativePath) : null;
+				return {
+					fileId: file.fileId,
+					relativePath: file.relativePath,
+					revision: file.revision,
+					status: localStatus(file, bytes),
+					...file.conflict?.incoming ? {
+						incomingRevision: file.conflict.incoming.revision,
+						incomingPath: file.conflict.incoming.relativePath
+					} : {}
+				};
+			}))
+		})),
+		commit: (copyId) => owned(copyId, async (state) => {
+			if (state.files.some((file) => !(file.baseHash && file.mimeType))) throw new Error("Finish preparing all selected files before committing.");
+			for (const file of state.files) await submitPending(state, file);
+			for (const file of state.files) {
+				const bytes = await localBytes(state, file.relativePath);
+				if (!bytes) throw new Error("A selected local file is missing. Missing files do not delete shared files.");
+				if (hash(bytes) === file.baseHash) continue;
+				const mutationId = randomUUID();
+				await writeDurablePrivateFile(join(directory, `${mutationId}.bin`), bytes);
+				file.pending = {
+					mutationId,
+					digest: hash(bytes),
+					baseRevision: file.revision
+				};
+				await save(state);
+				await submitPending(state, file);
+			}
+			return {
+				copyId,
+				references: await Promise.all(state.files.map(async (file) => {
+					await input.assertCurrentIdentity();
+					const current = await input.transport.get(file.fileId);
+					return {
+						fileId: file.fileId,
+						revision: file.revision,
+						name: current.name,
+						mimeType: z.string().parse(file.mimeType),
+						sizeBytes: z.number().int().nonnegative().parse(file.sizeBytes)
+					};
+				})),
+				files: state.files.map(({ fileId, relativePath, revision }) => ({
+					fileId,
+					relativePath,
+					revision
+				}))
+			};
+		}),
+		reconcile: (copyId) => owned(copyId, async (state) => {
+			for (const file of state.files) await submitPending(state, file);
+			return {
+				copyId,
+				reconciled: true
+			};
+		}),
+		refresh: (copyId) => owned(copyId, async (state) => {
+			for (const file of state.files) {
+				if (!file.conflict || file.conflict.incoming) continue;
+				await input.assertCurrentIdentity();
+				const revision = (await input.transport.get(file.fileId)).latestRevision.revision;
+				const remote = await input.transport.read(file.fileId, revision);
+				if (remote.revision !== revision || remote.bytes.byteLength > 10485760) throw new Error("The incoming file does not match its revision or exceeds transfer limits.");
+				const relativePath = `.openmeld-incoming-${randomUUID()}`;
+				const handle = await open(await safePath(state, relativePath), CREATE_FLAGS, 384);
+				try {
+					await handle.writeFile(remote.bytes);
+					await handle.sync();
+				} finally {
+					await handle.close();
+				}
+				file.conflict.incoming = {
+					revision,
+					relativePath,
+					digest: hash(remote.bytes),
+					mimeType: remote.mimeType,
+					sizeBytes: remote.bytes.byteLength
+				};
+				await save(state);
+			}
+			return {
+				copyId,
+				refreshed: true
+			};
+		}),
+		resolve: (copyId, fileId, revision) => owned(copyId, async (state) => {
+			const file = state.files.find((entry) => entry.fileId === fileId);
+			const conflict = file?.conflict;
+			const incoming = conflict?.incoming;
+			if (!(file && incoming) || incoming.revision !== revision) throw new Error("Refresh this conflicted file and explicitly select the downloaded incoming revision.");
+			const bytes = await localBytes(state, file.relativePath);
+			const digest = bytes ? hash(bytes) : null;
+			if (!digest || digest === conflict.digest && digest !== incoming.digest) throw new Error("Merge the incoming version into the working file before resolving. The rejected edit cannot be resubmitted against a newer base unchanged.");
+			file.revision = revision;
+			file.baseHash = incoming.digest;
+			file.mimeType = incoming.mimeType;
+			file.sizeBytes = incoming.sizeBytes;
+			file.conflict = void 0;
+			await save(state);
+			return {
+				copyId,
+				resolved: true
+			};
+		}),
+		incoming: (copyId, root) => owned(copyId, async (state) => {
+			const files = [];
+			for (const file of state.files) {
+				await input.assertCurrentIdentity();
+				const current = await input.transport.get(file.fileId);
+				files.push({
+					fileId: file.fileId,
+					relativePath: file.relativePath,
+					revision: current.latestRevision.revision
+				});
+			}
+			return await createSpaceWorkingCopies(input).prepare({
+				schemaVersion: 1,
+				files
+			}, root);
+		})
+	};
+}
+async function writeDurablePrivateFile(path, data) {
+	const file = await open(path, "wx", 384);
+	try {
+		await file.writeFile(data);
+		await file.sync();
+	} finally {
+		await file.close();
+	}
+}
+async function verifyRoot(state) {
+	const root = await lstat(state.root);
+	if (!root.isDirectory() || root.isSymbolicLink() || root.dev !== state.rootDevice || root.ino !== state.rootInode || await realpath(state.root) !== state.root) throw new Error("The working directory changed. No files were submitted.");
+}
+async function safePath(state, relativePath, createParents = false) {
+	await verifyRoot(state);
+	const segments = spaceWorkRelativePathSchema.parse(relativePath).split("/");
+	let parent = state.root;
+	for (const segment of segments.slice(0, -1)) {
+		parent = join(parent, segment);
+		if (createParents) try {
+			await mkdir(parent, { mode: 448 });
+		} catch (error) {
+			if (error.code !== "EEXIST") throw error;
+		}
+		const stat = await lstat(parent);
+		if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(parent) !== parent) throw new Error("A working file path crosses a symbolic link or changed directory.");
+	}
+	return join(parent, segments.at(-1) ?? "");
+}
+async function localBytes(state, relativePath) {
+	const path = await safePath(state, relativePath);
+	let handle;
+	try {
+		handle = await open(path, READ_FLAGS);
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	}
+	try {
+		const stat = await handle.stat();
+		if (!stat.isFile() || stat.nlink !== 1 || stat.size > 10485760) throw new Error("Select a regular file up to 10 MiB without hard links.");
+		const bytes = Buffer.alloc(stat.size);
+		let offset = 0;
+		while (offset < bytes.length) {
+			const result = await handle.read(bytes, offset, bytes.length - offset, offset);
+			if (result.bytesRead === 0) throw new Error("The local file changed while it was being read. Retry the save.");
+			offset += result.bytesRead;
+		}
+		const after = await handle.stat();
+		if (after.size !== stat.size || after.mtimeMs !== stat.mtimeMs || after.ctimeMs !== stat.ctimeMs) throw new Error("The local file changed while it was being read. Retry the save.");
+		await verifyRoot(state);
+		return bytes;
+	} finally {
+		await handle.close();
+	}
+}
+function localStatus(file, bytes) {
+	if (file.conflict) return "conflict";
+	if (file.pending) return "pending";
+	if (!file.baseHash) return "preparing";
+	if (!bytes) return "missing";
+	return hash(bytes) === file.baseHash ? "clean" : "changed";
+}
+//#endregion
+//#region src/local-service/file-access/dispatch-work-handoff.ts
+/** The admitted Service prepares inputs; no login state is copied into the workspace. */
+async function prepareDispatchWorkHandoff(input) {
+	const { task } = input;
+	if (!task.workHandoff) return input.workingDirectory;
+	if (!task.executionContext || task.executionContext.access !== "space_context" || task.agentControllerRef !== "builtin:codex" || task.transportMode !== "codex-app-server") throw new Error("Selected-file handoffs require a new Space-only context on Codex App Server. This controller cannot enforce that boundary.");
+	const organizationId = task.executionContext.scope.organizationId;
+	const baseUrl = await resolveBaseUrl();
+	const laneRoot = resolveOpenMeldRootDir();
+	const assertCurrentIdentity = async () => {
+		const auth = await getAuthSessionState({ validateRemote: false });
+		if (auth.session?.user?.id !== input.ownerUserId || auth.session?.activeOrganization?.id !== organizationId) throw new Error("The account or Organization changed before handoff preparation.");
+	};
+	await assertCurrentIdentity();
+	const requestContext = buildOpenMeldRequestContextFromProfileIdentity({ profileIdentity: {
+		openMeldProfileId: task.targetProfileId,
+		profileKind: "agent",
+		ownerUserId: input.ownerUserId,
+		profileName: task.targetProfileName ?? task.targetProfileId
+	} });
+	const foundation = createCliApiClientFoundation(baseUrl, {
+		expectedOwnerUserId: input.ownerUserId,
+		organizationId
+	});
+	const api = createSpaceApi(foundation);
+	const common = {
+		spaceId: task.spaceId,
+		requestContext,
+		...task.spacePassword ? { spacePassword: task.spacePassword } : {}
+	};
+	const copies = createSpaceWorkingCopies({
+		laneRoot,
+		scope: {
+			accountId: input.ownerUserId,
+			organizationId,
+			spaceId: task.spaceId,
+			profileId: task.targetProfileId,
+			baseUrl
+		},
+		assertCurrentIdentity,
+		transport: {
+			read: (fileId, revision) => downloadWorkingCopyFile(api, {
+				...common,
+				fileId,
+				revision
+			}),
+			get: async (fileId) => (await api.getFile({
+				...common,
+				fileId
+			})).file,
+			write: async (write) => await api.updateFileContent({
+				...common,
+				...write
+			})
+		}
+	});
+	const key = createHash("sha256").update(JSON.stringify([
+		baseUrl,
+		input.ownerUserId,
+		organizationId,
+		task.spaceId,
+		task.targetProfileId,
+		task.taskId
+	])).digest("hex");
+	const records = join(laneRoot, "space-work-dispatches");
+	await mkdir(records, {
+		recursive: true,
+		mode: 448
+	});
+	const recordPath = join(records, `${key}.json`);
+	let copyId;
+	let root;
+	const stored = await readFile(recordPath, "utf8").catch((error) => {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	});
+	if (stored) {
+		const record = JSON.parse(stored);
+		copyId = record.copyId;
+		root = (await copies.resume(copyId)).root;
+		if (root !== record.root || root !== join(input.workingDirectory, `handoff-${copyId}`)) throw new Error("The handoff workspace identity changed.");
+	} else {
+		copyId = randomUUID();
+		root = join(input.workingDirectory, `handoff-${copyId}`);
+		await copies.prepare(spaceWorkSelectionSchema.parse({
+			schemaVersion: 1,
+			files: task.workHandoff.files
+		}), root, copyId);
+		await writeFile(recordPath, JSON.stringify({
+			copyId,
+			root
+		}), {
+			flag: "wx",
+			mode: 384
+		});
+	}
+	const skillsRoot = join(root, ".openmeld-skills");
+	if (task.workHandoff.skills.length) {
+		await mkdir(skillsRoot, {
+			recursive: true,
+			mode: 448
+		});
+		if ((await lstat(skillsRoot)).isSymbolicLink()) throw new Error("The Skill directory was replaced by a symbolic link.");
+	}
+	const skills = createOrganizationSkillsApi(foundation);
+	for (const [index, selected] of task.workHandoff.skills.entries()) {
+		await assertCurrentIdentity();
+		const result = await skills.get({
+			...selected,
+			requestContext
+		});
+		const release = result.selectedRelease;
+		if (!release || result.skill.organizationId !== organizationId || !result.skill.enabled || release.releaseId !== selected.releaseId || release.digest !== selected.digest || release.bundle.portable.name !== selected.name) throw new Error("The selected Skill release is unavailable or changed. No latest-version fallback is allowed.");
+		await materializeOrganizationSkillRelease({
+			...selected,
+			organizationId,
+			bundle: release.bundle,
+			releaseDirectory: join(skillsRoot, String(index))
+		});
+	}
+	await assertCurrentIdentity();
+	await copies.status(copyId);
+	task.workingCopyId = copyId;
+	task.prompt += "\n\nThe selected inputs are prepared in your working directory. Selected Skills (including resources) are in .openmeld-skills/<selection index>/SKILL.md. Use the working_copy tool to check, commit or reconcile your edits; it does not complete this Wake. Attach the exact saved file references with the reply tool when delivering results.";
+	return root;
+}
+//#endregion
 //#region src/space/cli-space-api.ts
 function createCliSpaceApi(baseUrl, options = {}) {
 	return createSpaceApi(createCliApiClientFoundation(baseUrl, options));
@@ -21389,10 +22069,7 @@ function executionContextResourceScope(context) {
 	return context.access === "workspace" ? "exclusive" : "read_only";
 }
 function executionContextFileAccessBoundary(input) {
-	const within = (child, parent) => {
-		const path = relative(parent, child);
-		return path === "" || path !== ".." && !path.startsWith("../") && !isAbsolute(path);
-	};
+	const within = isSameOrDescendantPath;
 	const policy = input.policy;
 	if (input.context.access !== "space_context") {
 		const policySource = input.taskWorkspace?.sourceWorkingDirectory ?? input.workingDirectory;
@@ -21401,10 +22078,11 @@ function executionContextFileAccessBoundary(input) {
 	}
 	return {
 		mode: "only_selected_folders",
-		folders: [input.taskWorkspace?.boundaryRoot ?? input.workingDirectory],
+		folders: [input.context.access === "space_context" && input.workingCopyId ? input.workingDirectory : input.taskWorkspace?.boundaryRoot ?? input.workingDirectory],
 		revision: policy.revision,
 		updatedAtMs: policy.updatedAtMs,
-		executionContextAccess: input.context.access
+		executionContextAccess: input.context.access,
+		...input.context.access === "space_context" && input.workingCopyId ? { workingCopyId: input.workingCopyId } : {}
 	};
 }
 async function executionContextWorkingDirectory(input) {
@@ -22375,7 +23053,11 @@ async function handleDispatchDeliverFrame(input) {
 			currentWorkingDirectory: originalWorkingDirectory,
 			computerFileAccessStorePath: input.computerFileAccessStorePath
 		});
-		effectiveRuntimeContext = { providerRuntimeWorkingDirectory: taskWorkspace.workingDirectory };
+		effectiveRuntimeContext = { providerRuntimeWorkingDirectory: await prepareDispatchWorkHandoff({
+			task: parsedTask,
+			ownerUserId: input.profileOwnerUserId,
+			workingDirectory: taskWorkspace.workingDirectory
+		}) };
 		runtimePreparation.effectiveRuntimeContext = effectiveRuntimeContext;
 		computerFileAccessBoundary = await resolveDispatchComputerFileAccess({
 			computerFileAccessStorePath: input.computerFileAccessStorePath,
@@ -23693,7 +24375,8 @@ async function resolveDispatchComputerFileAccess(input) {
 			context,
 			workingDirectory,
 			policy,
-			taskWorkspace: input.taskWorkspace
+			taskWorkspace: input.taskWorkspace,
+			workingCopyId: input.parsedTask.workingCopyId
 		});
 		if (!(await verifier({
 			boundary,
@@ -23740,6 +24423,7 @@ async function resolveDispatchComputerFileAccess(input) {
 }
 function createDispatchSpaceActionRuntimeContext(input) {
 	const contextResult = createDispatchSpaceActionContext({
+		workingCopyId: input.parsedTask.workingCopyId,
 		attemptId: input.parsedTask.attemptId,
 		dispatchId: input.parsedTask.dispatchId,
 		env: process.env,
@@ -28469,6 +29153,7 @@ function createStopAwareDelay() {
 //#region src/local-service/carrier/service-runner.ts
 function buildLocalServiceCapabilityHeaders(input) {
 	return {
+		...process.platform === "darwin" ? { [SPACE_WORK_HANDOFF_CAPABILITY_HEADER]: "1" } : {},
 		[OPENMELD_REASONING_STREAM_HEADER]: "1",
 		...input.localFolderPickerAvailable ? { [OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER]: LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY } : {},
 		[OPENMELD_RUNTIME_CAPABILITIES_HEADER]: COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY
@@ -28888,7 +29573,7 @@ const runAccountBoundDaemonServiceLoop = async (input) => {
 			});
 		},
 		getContext: async () => ({
-			accountCheckedServiceControl: process.platform !== "win32",
+			accountCheckedServiceControl: isPreciseProcessStartIdentity(CURRENT_PROCESS_START_IDENTITY),
 			healthPayload: {
 				checkedAt: nowIsoString(),
 				...toHealthProjection(stopRequested ? {
@@ -37056,6 +37741,6 @@ function parseDaemonRunMode(rawMode) {
 	return DEFAULT_DAEMON_RUN_MODE;
 }
 //#endregion
-export { readDispatchOwnedRuntimeGuard as $, runInteractivePrompt as $n, isTargetPickerState as $t, buildDaemonStartNeedsAttentionCard as A, AGENT_ACTIVITY_INTEGRATION_OWNER as An, writeSpaceCacheDeletionNoticeState as At, resolveDaemonServiceParticipationStatus as B, runAuthLogout as Bn, buildSpaceMentionProfileIndex as Bt, buildProfileWorkspaceRows as C, removeProjectOutbox as Cn, readSpaceLastSeenTs as Ct, createDelayedSpinner as D, registerAgentActivityRoute as Dn, toSpaceConfigListIntegrityError as Dt, emitDaemonAgentOverview as E, isAgentActivityRouteRegistered as En, toLocalSpaceStateIntegrityError as Et, emitCliJsonEnvelope as F, uninstallAgentActivityIntegrations as Fn, buildPublicSpaceEntryUrl as Ft, parseSpaceMetaPayload as G, buildAuthStatusSnapshot as Gn, closeMentionPickerState as Gt, createCliSpaceApi as H, runAuthStatus as Hn, buildSpaceProfileAddPlan as Ht, runDaemonStartupPreflight as I, buildCommandAuthenticationPromptMessage as In, buildSignalIndex as It, readGatewayJsonResponse as J, renderInfoCard as Jn, createSpaceTargetCatalog as Jt, parseSpaceMetaResponse as K, formatActiveOrganizationLabel as Kn, collectResolvedSpaceMentions as Kt, readDaemonIncidentLogTail as L, ensureCommandAuthenticationOrCancel as Ln, buildSignalMessageReadProjection as Lt, buildHumanErrorCopy as M, installAgentActivityIntegrations as Mn, SpaceComposerSubmissionError as Mt, renderHumanErrorCard as N, readAgentActivityIntegrationStatus as Nn, buildDispatchResultMessageReadProjection as Nt, shouldEmitAgentOverview as O, resolveAgentActivityRouteForPath as On, updateSpaceLastSeenTs as Ot, renderHumanTextErrorCard as P, resolveAgentActivityDispatcherCommand as Pn, buildDispatchResultReplyWorkflowProjection as Pt, assertDispatchOwnedRuntimePublicWriteAllowed as Q, isReturnKeypress as Qn, isRelationPickerState as Qt, resolveLocalComponentsStatus as R, evaluateCommandAuthentication as Rn, buildSignalReplyWorkflowProjection as Rt, buildProfileWorkspacePresentation as S, readAgentActivityOutboxHealth as Sn, readSpaceConfig as St, createQuietPresenter as T, readControllerTaskLifecycleOutboxHealth as Tn, removeSpaceConfig as Tt, fetchSpaceMeta as U, exchangeOneTimeTokenAuthSession as Un, buildSpaceRoundReadProjection as Ut, fetchSpaceUpdates as V, runAuthMenu as Vn, buildSpaceMessageReadRelationSummary as Vt, updateSpaceMeta as W, buildAuthStatusRows as Wn, buildUpdatesReplyWorkflowProjection as Wt, toStructuredGatewayFailure as X, buildUnifiedCardFrame as Xn, extractMentionAuthoringPrefix as Xt, readGatewayTextResponse as Y, renderTextInfoCard as Yn, enterRelationPickerState as Yt, parseJsonResponse as Z, promptTextEntry as Zn, formatRemovedCcRelationMessage as Zt, buildDaemonBackgroundStartFailure as _, readCodexSessionTitles as _n, getOrganizationJoinLinkResponseSchema as _r, LocalSpaceStateIntegrityError as _t, runDaemonBackgroundStartForDecision as a, resolveNextRecentMentionProfileIdsForQueuedText as an, extractAuthApiErrorMessage as ar, LocalProjectConnectionError as at, formatServiceRuntimeHeadline as b, enqueueAgentActivityHookEvent as bn, revokeOrganizationJoinLinkResponseSchema as br, listSpaceConfigs as bt, runDaemonInterrupt as c, updateAuthoredMentionRanges as cn, resolveDeviceAuthClientId as cr, submitProfileRuntimeAgentControllerReport as ct, runDaemonServiceDetached as d, readRecentDaemonDispatchJournalEvents as dn, cliJsonErrorEnvelopeSchema as dr, collectLocalAgentControllerInventory as dt, listSpaceMentionRelationChoices as en, finishCurrentCommandCheckScope as er, DispatchSpaceActionClosedError as et, runDaemonSnapshot as f, connectWebSocket as fn, cliJsonOutputEnvelopeSchema as fr, resolveLocalAgentControllerBlockerReasonCodes as ft, runDaemonUninstall as g, normalizeSharedSessionTitle as gn, acceptOrganizationJoinLinkBodySchema as gr, projectSpaceProfileCache as gt, runDaemonTeardownStrict as h, resolveObservedAgentActivityBinding as hn, cliJsonSkillsShowEnvelopeSchema as hr, resolveAgentControllerInterfaceSnapshot as ht, runDaemonAutostart as i, prepareSpaceFileOnlySubmission as in, startCurrentCommandCheckScope as ir, writeDispatchSpaceActionRecord as it, runDaemonStartDecisionPrompt as j, defaultManagedIntegrationPaths as jn, writeSpaceRecentMentionProfileIds as jt, buildDaemonStartDeferredCard as k, unregisterAgentActivityRoute as kn, upsertSpaceConfig as kt, runDaemonReinstall as l, DISPATCH_OWNED_RUNTIME_MODE as ln, resolveDeviceTokenExpiresAt as lr, submitRuntimeAgentControllerReport as lt, runDaemonStop as m, buildAgentActivityEvent as mn, cliJsonSkillsLoadEnvelopeSchema as mr, resolveLocalAgentControllerReportDecision as mt, isManagedSystemServiceBootstrapRun as n, openTargetPickerState as nn, isCurrentCommandCheckScopeActive as nr, readDispatchSpaceActionContextForReceiptFromEnv as nt, runDaemonCancel as o, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as on, fetchAuthUserSnapshot as or, validateLocalProjectConnectionPath as ot, runDaemonStatusFlow as p, syncLocalAgentActivity as pn, cliJsonSkillsListEnvelopeSchema as pr, resolveLocalAgentControllerLaunchability as pt, GatewayHttpError as q, buildTextInfoCardLines as qn, createSpaceMemberIdentityIndex as qt, runDaemon as r, prepareSpaceComposerSubmission as rn, resetCurrentCommandCheckState as rr, readDispatchSpaceActionContextFromEnv as rt, runDaemonInstall as s, returnToTargetPickerState as sn, requestDeviceToken as sr, readRuntimeReportingHealthState as st, bestEffortStopCurrentLaneDaemonService as t, listSpaceMentionSuggestions as tn, getCurrentCommandCheckState as tr, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as tt, runDaemonRunAfterEntryChecks as u, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as un, revokeAuthAccessToken as ur, submitRuntimeAgentControllerReports as ut, buildSystemServiceStartupFailureReportFromVerdict as v, readAgentActivityContextForPath as vn, organizationJoinLinkErrorResponseSchema as vr, inspectSpaceCacheFile as vt, reconcileCliVersionView as w, enqueueControllerTaskLifecycleEventWhileLocked as wn, readSpaceRecentMentionProfileIds as wt, resolveServiceParticipationReadiness as x, removeProjectInbox as xn, readSpaceCacheDeletionNoticeState as xt, formatServiceParticipationReadinessLabel as y, removeAgentActivityContextCache as yn, organizationJoinLinkManagementQuerySchema as yr, isLocalSpaceStateCorruptResult as yt, writeInstalledLocalComponentsSnapshot as z, runAuthLogin as zn, buildSpaceMemberAgentPresencePresentation as zt };
+export { toStructuredGatewayFailure as $, buildUnifiedCardFrame as $n, extractMentionAuthoringPrefix as $t, buildDaemonStartNeedsAttentionCard as A, registerAgentActivityRoute as An, toSpaceConfigListIntegrityError as At, resolveDaemonServiceParticipationStatus as B, ensureCommandAuthenticationOrCancel as Bn, buildSignalMessageReadProjection as Bt, buildProfileWorkspaceRows as C, enqueueAgentActivityHookEvent as Cn, revokeOrganizationJoinLinkResponseSchema as Cr, listSpaceConfigs as Ct, createDelayedSpinner as D, enqueueControllerTaskLifecycleEventWhileLocked as Dn, readSpaceRecentMentionProfileIds as Dt, emitDaemonAgentOverview as E, removeProjectOutbox as En, readSpaceLastSeenTs as Et, emitCliJsonEnvelope as F, installAgentActivityIntegrations as Fn, SpaceComposerSubmissionError as Ft, materializeOrganizationSkillRelease as G, runAuthStatus as Gn, buildSpaceProfileAddPlan as Gt, createCliSpaceApi as H, runAuthLogin as Hn, buildSpaceMemberAgentPresencePresentation as Ht, runDaemonStartupPreflight as I, readAgentActivityIntegrationStatus as In, buildDispatchResultMessageReadProjection as It, parseSpaceMetaPayload as J, buildAuthStatusSnapshot as Jn, closeMentionPickerState as Jt, fetchSpaceMeta as K, exchangeOneTimeTokenAuthSession as Kn, buildSpaceRoundReadProjection as Kt, readDaemonIncidentLogTail as L, resolveAgentActivityDispatcherCommand as Ln, buildDispatchResultReplyWorkflowProjection as Lt, buildHumanErrorCopy as M, unregisterAgentActivityRoute as Mn, upsertSpaceConfig as Mt, renderHumanErrorCard as N, AGENT_ACTIVITY_INTEGRATION_OWNER as Nn, writeSpaceCacheDeletionNoticeState as Nt, shouldEmitAgentOverview as O, readControllerTaskLifecycleOutboxHealth as On, removeSpaceConfig as Ot, renderHumanTextErrorCard as P, defaultManagedIntegrationPaths as Pn, writeSpaceRecentMentionProfileIds as Pt, readGatewayTextResponse as Q, renderTextInfoCard as Qn, enterRelationPickerState as Qt, resolveLocalComponentsStatus as R, uninstallAgentActivityIntegrations as Rn, buildPublicSpaceEntryUrl as Rt, buildProfileWorkspacePresentation as S, removeAgentActivityContextCache as Sn, organizationJoinLinkManagementQuerySchema as Sr, isLocalSpaceStateCorruptResult as St, createQuietPresenter as T, readAgentActivityOutboxHealth as Tn, readSpaceConfig as Tt, createSpaceWorkingCopies as U, runAuthLogout as Un, buildSpaceMentionProfileIndex as Ut, fetchSpaceUpdates as V, evaluateCommandAuthentication as Vn, buildSignalReplyWorkflowProjection as Vt, downloadWorkingCopyFile as W, runAuthMenu as Wn, buildSpaceMessageReadRelationSummary as Wt, GatewayHttpError as X, buildTextInfoCardLines as Xn, createSpaceMemberIdentityIndex as Xt, parseSpaceMetaResponse as Y, formatActiveOrganizationLabel as Yn, collectResolvedSpaceMentions as Yt, readGatewayJsonResponse as Z, renderInfoCard as Zn, createSpaceTargetCatalog as Zt, buildDaemonBackgroundStartFailure as _, buildAgentActivityEvent as _n, cliJsonSkillsLoadEnvelopeSchema as _r, resolveLocalAgentControllerReportDecision as _t, runDaemonBackgroundStartForDecision as a, openTargetPickerState as an, isCurrentCommandCheckScopeActive as ar, readDispatchSpaceActionContextForReceiptFromEnv as at, formatServiceRuntimeHeadline as b, readCodexSessionTitles as bn, getOrganizationJoinLinkResponseSchema as br, LocalSpaceStateIntegrityError as bt, runDaemonInterrupt as c, resolveNextRecentMentionProfileIdsForQueuedText as cn, extractAuthApiErrorMessage as cr, LocalProjectConnectionError as ct, runDaemonServiceDetached as d, updateAuthoredMentionRanges as dn, resolveDeviceAuthClientId as dr, submitProfileRuntimeAgentControllerReport as dt, formatRemovedCcRelationMessage as en, promptTextEntry as er, parseJsonResponse as et, runDaemonSnapshot as f, DISPATCH_OWNED_RUNTIME_MODE as fn, resolveDeviceTokenExpiresAt as fr, submitRuntimeAgentControllerReport as ft, runDaemonUninstall as g, syncLocalAgentActivity as gn, cliJsonSkillsListEnvelopeSchema as gr, resolveLocalAgentControllerLaunchability as gt, runDaemonTeardownStrict as h, connectWebSocket as hn, cliJsonOutputEnvelopeSchema as hr, resolveLocalAgentControllerBlockerReasonCodes as ht, runDaemonAutostart as i, listSpaceMentionSuggestions as in, getCurrentCommandCheckState as ir, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as it, runDaemonStartDecisionPrompt as j, resolveAgentActivityRouteForPath as jn, updateSpaceLastSeenTs as jt, buildDaemonStartDeferredCard as k, isAgentActivityRouteRegistered as kn, toLocalSpaceStateIntegrityError as kt, runDaemonReinstall as l, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as ln, fetchAuthUserSnapshot as lr, validateLocalProjectConnectionPath as lt, runDaemonStop as m, readRecentDaemonDispatchJournalEvents as mn, cliJsonErrorEnvelopeSchema as mr, collectLocalAgentControllerInventory as mt, isManagedSystemServiceBootstrapRun as n, isTargetPickerState as nn, runInteractivePrompt as nr, readDispatchOwnedRuntimeGuard as nt, runDaemonCancel as o, prepareSpaceComposerSubmission as on, resetCurrentCommandCheckState as or, readDispatchSpaceActionContextFromEnv as ot, runDaemonStatusFlow as p, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as pn, revokeAuthAccessToken as pr, submitRuntimeAgentControllerReports as pt, updateSpaceMeta as q, buildAuthStatusRows as qn, buildUpdatesReplyWorkflowProjection as qt, runDaemon as r, listSpaceMentionRelationChoices as rn, finishCurrentCommandCheckScope as rr, DispatchSpaceActionClosedError as rt, runDaemonInstall as s, prepareSpaceFileOnlySubmission as sn, startCurrentCommandCheckScope as sr, writeDispatchSpaceActionRecord as st, bestEffortStopCurrentLaneDaemonService as t, isRelationPickerState as tn, isReturnKeypress as tr, assertDispatchOwnedRuntimePublicWriteAllowed as tt, runDaemonRunAfterEntryChecks as u, returnToTargetPickerState as un, requestDeviceToken as ur, readRuntimeReportingHealthState as ut, buildSystemServiceStartupFailureReportFromVerdict as v, resolveObservedAgentActivityBinding as vn, cliJsonSkillsShowEnvelopeSchema as vr, resolveAgentControllerInterfaceSnapshot as vt, reconcileCliVersionView as w, removeProjectInbox as wn, readSpaceCacheDeletionNoticeState as wt, resolveServiceParticipationReadiness as x, readAgentActivityContextForPath as xn, organizationJoinLinkErrorResponseSchema as xr, inspectSpaceCacheFile as xt, formatServiceParticipationReadinessLabel as y, normalizeSharedSessionTitle as yn, acceptOrganizationJoinLinkBodySchema as yr, projectSpaceProfileCache as yt, writeInstalledLocalComponentsSnapshot as z, buildCommandAuthenticationPromptMessage as zn, buildSignalIndex as zt };
 
-//# sourceMappingURL=service-Cev-7yAJ.js.map
+//# sourceMappingURL=service-Cl_Ge6oJ.js.map