openmeld 0.3.215 → 0.3.216

package/dist/{process-channel-8KzXhiJa.js → process-channel-BTxB9zK-.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as ExecutionHostError } from "./channel-D7RQQwTe.js";
+import { t as ExecutionHostError } from "./channel-CKmbucdt.js";
 //#region src/local-service/execution-host/process-channel.ts
 function childExecutionHostChannel(child) {
 	return {
@@ -61,4 +61,4 @@ function parentExecutionHostChannel() {
 //#endregion
 export { parentExecutionHostChannel as n, childExecutionHostChannel as t };
 
-//# sourceMappingURL=process-channel-8KzXhiJa.js.map
+//# sourceMappingURL=process-channel-BTxB9zK-.js.map

package/dist/{process-channel-8KzXhiJa.js.map → process-channel-BTxB9zK-.js.map}

@@ -1 +1 @@
-{"version":3,"file":"process-channel-8KzXhiJa.js","names":[],"sources":["../src/local-service/execution-host/process-channel.ts"],"sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport type { ExecutionHostChannel } from \"./channel\";\nimport { ExecutionHostError } from \"./channel\";\n\n// Use inherited Node-compatible IPC with JSON serialization. Provider stdout is\n// not a protocol channel; ordinary logs cannot become control messages.\nexport function childExecutionHostChannel(\n  child: ChildProcess\n): ExecutionHostChannel {\n  return {\n    connected: () => child.connected,\n    send: (message, completed) => {\n      child.send(message, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      child.on(\"message\", listener);\n      return () => {\n        child.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      let observed = false;\n      const finish = (error?: Error) => {\n        if (!observed) {\n          observed = true;\n          listener(error);\n        }\n      };\n      const exited = (code: number | null, signal: NodeJS.Signals | null) => {\n        finish(\n          new Error(`Host process exited (${signal ?? code ?? \"unknown\"})`)\n        );\n      };\n      child.on(\"disconnect\", finish);\n      child.on(\"exit\", exited);\n      // Spawn/send failures must not become unhandled EventEmitter errors.\n      child.on(\"error\", finish);\n      return () => {\n        child.off(\"disconnect\", finish);\n        child.off(\"exit\", exited);\n        child.off(\"error\", finish);\n      };\n    },\n  };\n}\n\nexport function parentExecutionHostChannel(): ExecutionHostChannel {\n  const send = process.send?.bind(process);\n  if (!(send && process.connected)) {\n    throw new ExecutionHostError(\n      \"host.inherited_channel_required\",\n      \"The execution host requires its supervisor's inherited IPC channel.\"\n    );\n  }\n  return {\n    connected: () => process.connected === true,\n    send: (message, completed) => {\n      send(message, undefined, undefined, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      process.on(\"message\", listener);\n      return () => {\n        process.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      process.on(\"disconnect\", listener);\n      return () => {\n        process.off(\"disconnect\", listener);\n      };\n    },\n  };\n}\n"],"mappings":";;;;AAMA,SAAgB,0BACd,OACsB;CACtB,OAAO;EACL,iBAAiB,MAAM;EACvB,OAAO,SAAS,cAAc;GAC5B,MAAM,KAAK,UAAU,UAAU,UAAU,SAAS,IAAI,CAAC;EACzD;EACA,YAAY,aAAa;GACvB,MAAM,GAAG,WAAW,QAAQ;GAC5B,aAAa;IACX,MAAM,IAAI,WAAW,QAAQ;GAC/B;EACF;EACA,eAAe,aAAa;GAC1B,IAAI,WAAW;GACf,MAAM,UAAU,UAAkB;IAChC,IAAI,CAAC,UAAU;KACb,WAAW;KACX,SAAS,KAAK;IAChB;GACF;GACA,MAAM,UAAU,MAAqB,WAAkC;IACrE,uBACE,IAAI,MAAM,wBAAwB,UAAU,QAAQ,UAAU,EAAE,CAClE;GACF;GACA,MAAM,GAAG,cAAc,MAAM;GAC7B,MAAM,GAAG,QAAQ,MAAM;GAEvB,MAAM,GAAG,SAAS,MAAM;GACxB,aAAa;IACX,MAAM,IAAI,cAAc,MAAM;IAC9B,MAAM,IAAI,QAAQ,MAAM;IACxB,MAAM,IAAI,SAAS,MAAM;GAC3B;EACF;CACF;AACF;AAEA,SAAgB,6BAAmD;CACjE,MAAM,OAAO,QAAQ,MAAM,KAAK,OAAO;CACvC,IAAI,EAAE,QAAQ,QAAQ,YACpB,MAAM,IAAI,mBACR,mCACA,qEACF;CAEF,OAAO;EACL,iBAAiB,QAAQ,cAAc;EACvC,OAAO,SAAS,cAAc;GAC5B,KAAK,SAAS,KAAA,GAAW,KAAA,IAAY,UAAU,UAAU,SAAS,IAAI,CAAC;EACzE;EACA,YAAY,aAAa;GACvB,QAAQ,GAAG,WAAW,QAAQ;GAC9B,aAAa;IACX,QAAQ,IAAI,WAAW,QAAQ;GACjC;EACF;EACA,eAAe,aAAa;GAC1B,QAAQ,GAAG,cAAc,QAAQ;GACjC,aAAa;IACX,QAAQ,IAAI,cAAc,QAAQ;GACpC;EACF;CACF;AACF"}
+{"version":3,"file":"process-channel-BTxB9zK-.js","names":[],"sources":["../src/local-service/execution-host/process-channel.ts"],"sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport type { ExecutionHostChannel } from \"./channel\";\nimport { ExecutionHostError } from \"./channel\";\n\n// Use inherited Node-compatible IPC with JSON serialization. Provider stdout is\n// not a protocol channel; ordinary logs cannot become control messages.\nexport function childExecutionHostChannel(\n  child: ChildProcess\n): ExecutionHostChannel {\n  return {\n    connected: () => child.connected,\n    send: (message, completed) => {\n      child.send(message, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      child.on(\"message\", listener);\n      return () => {\n        child.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      let observed = false;\n      const finish = (error?: Error) => {\n        if (!observed) {\n          observed = true;\n          listener(error);\n        }\n      };\n      const exited = (code: number | null, signal: NodeJS.Signals | null) => {\n        finish(\n          new Error(`Host process exited (${signal ?? code ?? \"unknown\"})`)\n        );\n      };\n      child.on(\"disconnect\", finish);\n      child.on(\"exit\", exited);\n      // Spawn/send failures must not become unhandled EventEmitter errors.\n      child.on(\"error\", finish);\n      return () => {\n        child.off(\"disconnect\", finish);\n        child.off(\"exit\", exited);\n        child.off(\"error\", finish);\n      };\n    },\n  };\n}\n\nexport function parentExecutionHostChannel(): ExecutionHostChannel {\n  const send = process.send?.bind(process);\n  if (!(send && process.connected)) {\n    throw new ExecutionHostError(\n      \"host.inherited_channel_required\",\n      \"The execution host requires its supervisor's inherited IPC channel.\"\n    );\n  }\n  return {\n    connected: () => process.connected === true,\n    send: (message, completed) => {\n      send(message, undefined, undefined, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      process.on(\"message\", listener);\n      return () => {\n        process.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      process.on(\"disconnect\", listener);\n      return () => {\n        process.off(\"disconnect\", listener);\n      };\n    },\n  };\n}\n"],"mappings":";;;;AAMA,SAAgB,0BACd,OACsB;CACtB,OAAO;EACL,iBAAiB,MAAM;EACvB,OAAO,SAAS,cAAc;GAC5B,MAAM,KAAK,UAAU,UAAU,UAAU,SAAS,IAAI,CAAC;EACzD;EACA,YAAY,aAAa;GACvB,MAAM,GAAG,WAAW,QAAQ;GAC5B,aAAa;IACX,MAAM,IAAI,WAAW,QAAQ;GAC/B;EACF;EACA,eAAe,aAAa;GAC1B,IAAI,WAAW;GACf,MAAM,UAAU,UAAkB;IAChC,IAAI,CAAC,UAAU;KACb,WAAW;KACX,SAAS,KAAK;IAChB;GACF;GACA,MAAM,UAAU,MAAqB,WAAkC;IACrE,uBACE,IAAI,MAAM,wBAAwB,UAAU,QAAQ,UAAU,EAAE,CAClE;GACF;GACA,MAAM,GAAG,cAAc,MAAM;GAC7B,MAAM,GAAG,QAAQ,MAAM;GAEvB,MAAM,GAAG,SAAS,MAAM;GACxB,aAAa;IACX,MAAM,IAAI,cAAc,MAAM;IAC9B,MAAM,IAAI,QAAQ,MAAM;IACxB,MAAM,IAAI,SAAS,MAAM;GAC3B;EACF;CACF;AACF;AAEA,SAAgB,6BAAmD;CACjE,MAAM,OAAO,QAAQ,MAAM,KAAK,OAAO;CACvC,IAAI,EAAE,QAAQ,QAAQ,YACpB,MAAM,IAAI,mBACR,mCACA,qEACF;CAEF,OAAO;EACL,iBAAiB,QAAQ,cAAc;EACvC,OAAO,SAAS,cAAc;GAC5B,KAAK,SAAS,KAAA,GAAW,KAAA,IAAY,UAAU,UAAU,SAAS,IAAI,CAAC;EACzE;EACA,YAAY,aAAa;GACvB,QAAQ,GAAG,WAAW,QAAQ;GAC9B,aAAa;IACX,QAAQ,IAAI,WAAW,QAAQ;GACjC;EACF;EACA,eAAe,aAAa;GAC1B,QAAQ,GAAG,cAAc,QAAQ;GACjC,aAAa;IACX,QAAQ,IAAI,cAAc,QAAQ;GACpC;EACF;CACF;AACF"}

package/dist/{process-identity-Clby123a.js → process-identity-CNus0e6E.js}

@@ -63,6 +63,7 @@ function powerShellEncodedArguments(script) {
 	];
 }
 const FILE_TIME_PATTERN = /^\d{10,20}$/u;
+const PROCESS_IDENTITY_TIMEOUT_MS = 15e3;
 let currentProcessFileTime;
 /** An opened process handle binds the observation to the actual instance, not a reused PID. */
 function readWindowsProcessStartFileTime(pid) {
@@ -73,7 +74,7 @@ function readWindowsProcessStartFileTime(pid) {
 		const output = execFileSync(resolveWindowsPowerShellPath(), powerShellEncodedArguments(script), {
 			encoding: "utf8",
 			windowsHide: true,
-			timeout: 5e3,
+			timeout: PROCESS_IDENTITY_TIMEOUT_MS,
 			maxBuffer: 1024,
 			stdio: [
 				"ignore",
@@ -142,4 +143,4 @@ function isNodeError(error, code) {
 //#endregion
 export { powerShellEncodedArguments as a, WINDOWS_RUNTIME_ENV_KEYS as c, readProcessStartIdentity as i, normalizeCommandEnvironment as l, isPreciseProcessStartIdentity as n, readWindowsProcessStartFileTime as o, isProcessIdentityAlive as r, resolveWindowsPowerShellPath as s, CURRENT_PROCESS_START_IDENTITY as t };
 
-//# sourceMappingURL=process-identity-Clby123a.js.map
+//# sourceMappingURL=process-identity-CNus0e6E.js.map

package/dist/process-identity-CNus0e6E.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity-CNus0e6E.js","names":[],"sources":["../../../runtime/adapters/core/dist/process-environment.js","../../../runtime/adapters/core/dist/windows-system.js","../src/system/process-identity.ts"],"sourcesContent":["const WINDOWS_KEY_SPELLINGS = {\n    PATH: \"PATH\",\n    PATHEXT: \"PATHEXT\",\n    SYSTEMROOT: \"SystemRoot\",\n    COMSPEC: \"ComSpec\",\n    WINDIR: \"WINDIR\",\n    USERPROFILE: \"USERPROFILE\",\n    HOMEDRIVE: \"HOMEDRIVE\",\n    HOMEPATH: \"HOMEPATH\",\n    APPDATA: \"APPDATA\",\n    LOCALAPPDATA: \"LOCALAPPDATA\",\n    TEMP: \"TEMP\",\n    TMP: \"TMP\",\n};\n/** Match Node's Windows duplicate-key precedence, then use stable OS key names. */\nexport function normalizeCommandEnvironment(source, platform = process.platform) {\n    if (platform !== \"win32\") {\n        return { ...source };\n    }\n    const result = {};\n    const seen = new Set();\n    for (const key of Object.keys(source).sort()) {\n        const value = source[key];\n        const identity = key.toUpperCase();\n        if (value === undefined || seen.has(identity)) {\n            continue;\n        }\n        seen.add(identity);\n        result[WINDOWS_KEY_SPELLINGS[identity] ?? key] = value;\n    }\n    return result;\n}\n/** Non-secret Windows runtime context needed by an independently started process. */\nexport const WINDOWS_RUNTIME_ENV_KEYS = [\n    \"SystemRoot\",\n    \"ComSpec\",\n    \"WINDIR\",\n    \"PATHEXT\",\n    \"USERPROFILE\",\n    \"HOMEDRIVE\",\n    \"HOMEPATH\",\n    \"APPDATA\",\n    \"LOCALAPPDATA\",\n    \"TEMP\",\n    \"TMP\",\n];\n","import { execFileSync } from \"node:child_process\";\nimport { win32 } from \"node:path\";\nimport { normalizeCommandEnvironment } from \"./process-environment.js\";\nexport function resolveWindowsPowerShellPath(env = process.env) {\n    const source = normalizeCommandEnvironment(env, \"win32\");\n    const root = source.SystemRoot ?? source.WINDIR;\n    if (!(root && win32.isAbsolute(root))) {\n        throw new Error(\"Windows system directory is unavailable.\");\n    }\n    return win32.join(root, \"System32\", \"WindowsPowerShell\", \"v1.0\", \"powershell.exe\");\n}\nexport function powerShellEncodedArguments(script) {\n    return [\n        \"-NoLogo\",\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-EncodedCommand\",\n        Buffer.from(script, \"utf16le\").toString(\"base64\"),\n    ];\n}\nconst FILE_TIME_PATTERN = /^\\d{10,20}$/u;\n// A fresh Windows Service can spend more than five seconds starting its first\n// system PowerShell process. Keep the native identity read bounded without\n// rejecting that cold start before the script gets a chance to run.\nconst PROCESS_IDENTITY_TIMEOUT_MS = 15_000;\nlet currentProcessFileTime;\n/** An opened process handle binds the observation to the actual instance, not a reused PID. */\nexport function readWindowsProcessStartFileTime(pid) {\n    if (!(Number.isSafeInteger(pid) && pid > 0)) {\n        return null;\n    }\n    if (pid === process.pid && currentProcessFileTime) {\n        return currentProcessFileTime;\n    }\n    const script = `$ErrorActionPreference='Stop'; $p=[Diagnostics.Process]::GetProcessById(${pid}); try { $null=$p.Handle; [Console]::Write($p.StartTime.ToUniversalTime().ToFileTimeUtc().ToString([Globalization.CultureInfo]::InvariantCulture)) } finally { $p.Dispose() }`;\n    try {\n        const output = execFileSync(resolveWindowsPowerShellPath(), powerShellEncodedArguments(script), {\n            encoding: \"utf8\",\n            windowsHide: true,\n            timeout: PROCESS_IDENTITY_TIMEOUT_MS,\n            maxBuffer: 1024,\n            stdio: [\"ignore\", \"pipe\", \"ignore\"],\n        }).trim();\n        if (!FILE_TIME_PATTERN.test(output)) {\n            return null;\n        }\n        if (pid === process.pid) {\n            currentProcessFileTime = output;\n        }\n        return output;\n    }\n    catch {\n        return null;\n    }\n}\n","import { execFileSync } from \"node:child_process\";\nimport { readWindowsProcessStartFileTime } from \"@openmeld/adapter-core/windows-system\";\n\nconst WINDOWS_PROCESS_IDENTITY_PATTERN = /^win32:\\d{10,20}$/u;\n\nexport function isPreciseProcessStartIdentity(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    ((value.startsWith(\"ps:\") && value.length > 3) ||\n      WINDOWS_PROCESS_IDENTITY_PATTERN.test(value))\n  );\n}\n\nexport const CURRENT_PROCESS_START_IDENTITY =\n  readProcessStartIdentity(process.pid) ??\n  `fallback:${process.pid}:${Math.floor(Date.now() - process.uptime() * 1000)}`;\n\nexport function isProcessIdentityAlive(\n  input: { ownerPid: number; ownerProcessStartedAt: string },\n  platform: NodeJS.Platform = process.platform\n): boolean {\n  if (!isProcessAlive(input.ownerPid)) {\n    return false;\n  }\n  const observedIdentity = readProcessStartIdentity(input.ownerPid, platform);\n  if (\n    isPreciseProcessStartIdentity(observedIdentity) &&\n    isPreciseProcessStartIdentity(input.ownerProcessStartedAt) &&\n    observedIdentity.split(\":\", 1)[0] ===\n      input.ownerProcessStartedAt.split(\":\", 1)[0]\n  ) {\n    return observedIdentity === input.ownerProcessStartedAt;\n  }\n  // Fail closed when a live process cannot be identified precisely. A caller\n  // may recover only after it can prove that the transition owner has exited.\n  return true;\n}\n\nexport function readProcessStartIdentity(\n  pid: number,\n  platform: NodeJS.Platform = process.platform\n): string | null {\n  if (!(Number.isSafeInteger(pid) && pid > 0)) {\n    return null;\n  }\n  if (platform === \"win32\") {\n    const created = readWindowsProcessStartFileTime(pid);\n    return created === null ? null : `win32:${created}`;\n  }\n  try {\n    const output = execFileSync(\"ps\", [\"-o\", \"lstart=\", \"-p\", String(pid)], {\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      timeout: 1000,\n      windowsHide: true,\n    }).trim();\n    return output.length > 0 ? `ps:${output}` : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !isNodeError(error, \"ESRCH\");\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error instanceof Error && \"code\" in error && String(error.code) === code\n  );\n}\n"],"mappings":";;;;;AAAA,MAAM,wBAAwB;CAC1B,MAAM;CACN,SAAS;CACT,YAAY;CACZ,SAAS;CACT,QAAQ;CACR,aAAa;CACb,WAAW;CACX,UAAU;CACV,SAAS;CACT,cAAc;CACd,MAAM;CACN,KAAK;AACT;;AAEA,SAAgB,4BAA4B,QAAQ,WAAW,QAAQ,UAAU;CAC7E,IAAI,aAAa,SACb,OAAO,EAAE,GAAG,OAAO;CAEvB,MAAM,SAAS,CAAC;CAChB,MAAM,uBAAO,IAAI,IAAI;CACrB,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,KAAK,GAAG;EAC1C,MAAM,QAAQ,OAAO;EACrB,MAAM,WAAW,IAAI,YAAY;EACjC,IAAI,UAAU,KAAA,KAAa,KAAK,IAAI,QAAQ,GACxC;EAEJ,KAAK,IAAI,QAAQ;EACjB,OAAO,sBAAsB,aAAa,OAAO;CACrD;CACA,OAAO;AACX;;AAEA,MAAa,2BAA2B;CACpC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ;;;AC1CA,SAAgB,6BAA6B,MAAM,QAAQ,KAAK;CAC5D,MAAM,SAAS,4BAA4B,KAAK,OAAO;CACvD,MAAM,OAAO,OAAO,cAAc,OAAO;CACzC,IAAI,EAAE,QAAQ,MAAM,WAAW,IAAI,IAC/B,MAAM,IAAI,MAAM,0CAA0C;CAE9D,OAAO,MAAM,KAAK,MAAM,YAAY,qBAAqB,QAAQ,gBAAgB;AACrF;AACA,SAAgB,2BAA2B,QAAQ;CAC/C,OAAO;EACH;EACA;EACA;EACA;EACA,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,QAAQ;CACpD;AACJ;AACA,MAAM,oBAAoB;AAI1B,MAAM,8BAA8B;AACpC,IAAI;;AAEJ,SAAgB,gCAAgC,KAAK;CACjD,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACrC,OAAO;CAEX,IAAI,QAAQ,QAAQ,OAAO,wBACvB,OAAO;CAEX,MAAM,SAAS,2EAA2E,IAAI;CAC9F,IAAI;EACA,MAAM,SAAS,aAAa,6BAA6B,GAAG,2BAA2B,MAAM,GAAG;GAC5F,UAAU;GACV,aAAa;GACb,SAAS;GACT,WAAW;GACX,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACtC,CAAC,CAAC,CAAC,KAAK;EACR,IAAI,CAAC,kBAAkB,KAAK,MAAM,GAC9B,OAAO;EAEX,IAAI,QAAQ,QAAQ,KAChB,yBAAyB;EAE7B,OAAO;CACX,QACM;EACF,OAAO;CACX;AACJ;;;ACnDA,MAAM,mCAAmC;AAEzC,SAAgB,8BAA8B,OAAiC;CAC7E,OACE,OAAO,UAAU,aACf,MAAM,WAAW,KAAK,KAAK,MAAM,SAAS,KAC1C,iCAAiC,KAAK,KAAK;AAEjD;AAEA,MAAa,iCACX,yBAAyB,QAAQ,GAAG,KACpC,YAAY,QAAQ,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,IAAI,QAAQ,OAAO,IAAI,GAAI;AAE5E,SAAgB,uBACd,OACA,WAA4B,QAAQ,UAC3B;CACT,IAAI,CAAC,eAAe,MAAM,QAAQ,GAChC,OAAO;CAET,MAAM,mBAAmB,yBAAyB,MAAM,UAAU,QAAQ;CAC1E,IACE,8BAA8B,gBAAgB,KAC9C,8BAA8B,MAAM,qBAAqB,KACzD,iBAAiB,MAAM,KAAK,CAAC,CAAC,CAAC,OAC7B,MAAM,sBAAsB,MAAM,KAAK,CAAC,CAAC,CAAC,IAE5C,OAAO,qBAAqB,MAAM;CAIpC,OAAO;AACT;AAEA,SAAgB,yBACd,KACA,WAA4B,QAAQ,UACrB;CACf,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACvC,OAAO;CAET,IAAI,aAAa,SAAS;EACxB,MAAM,UAAU,gCAAgC,GAAG;EACnD,OAAO,YAAY,OAAO,OAAO,SAAS;CAC5C;CACA,IAAI;EACF,MAAM,SAAS,aAAa,MAAM;GAAC;GAAM;GAAW;GAAM,OAAO,GAAG;EAAC,GAAG;GACtE,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;GAClC,SAAS;GACT,aAAa;EACf,CAAC,CAAC,CAAC,KAAK;EACR,OAAO,OAAO,SAAS,IAAI,MAAM,WAAW;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,KAAsB;CAC5C,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,CAAC,YAAY,OAAO,OAAO;CACpC;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;CAC1D,OACE,iBAAiB,SAAS,UAAU,SAAS,OAAO,MAAM,IAAI,MAAM;AAExE"}

package/dist/{published-production-safety-C4uPjpYe.js → published-production-safety-dp-fOmmB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { at as resolveDefaultOpenMeldHomeDirname, ct as resolveOpenMeldEnvPreset, lt as resolveOpenMeldRootDir, ot as resolveExplicitOpenMeldEnvPreset } from "./lock-CAt9uTnZ.js";
+import { at as resolveDefaultOpenMeldHomeDirname, ct as resolveOpenMeldEnvPreset, lt as resolveOpenMeldRootDir, ot as resolveExplicitOpenMeldEnvPreset } from "./lock-Bsl_ElWy.js";
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 //#region src/config/published-production-safety.ts
@@ -50,4 +50,4 @@ function normalizeComparablePath(path) {
 //#endregion
 export { isTestProcess as i, assertSafePublishedProductionServiceRegistrationMutation as n, isPublishedProductionOpenMeldRoot as r, assertNoPublishedProductionMutationDuringTests as t };
 
-//# sourceMappingURL=published-production-safety-C4uPjpYe.js.map
+//# sourceMappingURL=published-production-safety-dp-fOmmB.js.map

package/dist/{published-production-safety-C4uPjpYe.js.map → published-production-safety-dp-fOmmB.js.map}

@@ -1 +1 @@
-{"version":3,"file":"published-production-safety-C4uPjpYe.js","names":[],"sources":["../src/config/published-production-safety.ts"],"sourcesContent":["import { homedir } from \"node:os\";\nimport { join, resolve } from \"node:path\";\nimport type { OpenMeldPathResolutionInput } from \"./paths\";\nimport {\n  resolveDefaultOpenMeldHomeDirname,\n  resolveExplicitOpenMeldEnvPreset,\n  resolveOpenMeldEnvPreset,\n  resolveOpenMeldRootDir,\n} from \"./paths\";\n\nconst PUBLISHED_PRODUCTION_OPENMELD_ROOT = normalizeComparablePath(\n  join(homedir(), resolveDefaultOpenMeldHomeDirname(\"prod\"))\n);\n\nexport function assertNoPublishedProductionMutationDuringTests(\n  pathInput: OpenMeldPathResolutionInput,\n  targetName: string\n): void {\n  if (!isTestProcess(pathInput)) {\n    return;\n  }\n  if (!isPublishedProductionOpenMeldRoot(pathInput)) {\n    return;\n  }\n  throw new Error(\n    [\n      `Refusing to mutate ${targetName} in the published production lane during tests.`,\n      \"Set OPENMELD_HOME to a fresh temporary directory, or run the validation through openmeld-dev or openmeld-canary.\",\n    ].join(\" \")\n  );\n}\n\n/**\n * The OS service manager registration (launchd label / systemd unit / Windows\n * service name) is a per-user global resource keyed only by the env preset.\n * OPENMELD_HOME isolates lane files but does NOT isolate this registration, so\n * a process with an isolated root can still stop, boot out, or uninstall the\n * real published production service. Fail closed before any such mutation:\n * - test processes must never mutate the production registration, and\n * - a non-test process whose effective root left the published production\n *   lane must state its intent with an explicit OPENMELD_ENV_PRESET.\n */\nexport function assertSafePublishedProductionServiceRegistrationMutation(\n  operation: string,\n  pathInput: OpenMeldPathResolutionInput = {}\n): void {\n  if (resolveOpenMeldEnvPreset(pathInput) !== \"prod\") {\n    return;\n  }\n  if (isTestProcess(pathInput)) {\n    throw new Error(\n      [\n        `Refusing to ${operation} the published production OpenMeld Service registration during tests.`,\n        \"OPENMELD_HOME does not isolate the OS service manager registration.\",\n        \"Target an isolated lane with OPENMELD_ENV_PRESET=dev-local or OPENMELD_ENV_PRESET=canary, or stub the service manager.\",\n      ].join(\" \")\n    );\n  }\n  if (resolveExplicitOpenMeldEnvPreset(pathInput) === \"prod\") {\n    return;\n  }\n  if (isPublishedProductionOpenMeldRoot(pathInput)) {\n    return;\n  }\n  throw new Error(\n    [\n      `Refusing to ${operation} the published production OpenMeld Service registration:`,\n      \"the effective OpenMeld root is outside the published production lane, but the service identity resolved to the production label.\",\n      \"Set OPENMELD_ENV_PRESET explicitly to state which service registration this command must mutate.\",\n    ].join(\" \")\n  );\n}\n\nexport function isPublishedProductionOpenMeldRoot(\n  pathInput: OpenMeldPathResolutionInput\n): boolean {\n  return (\n    normalizeComparablePath(resolveOpenMeldRootDir(pathInput)) ===\n    PUBLISHED_PRODUCTION_OPENMELD_ROOT\n  );\n}\n\nexport function isTestProcess(\n  pathInput: OpenMeldPathResolutionInput = {}\n): boolean {\n  const env = pathInput.env ?? process.env;\n  const argv = pathInput.argv ?? process.argv;\n  return (\n    env.NODE_ENV === \"test\" ||\n    env.VITEST === \"true\" ||\n    typeof env.VITEST_WORKER_ID === \"string\" ||\n    typeof env.JEST_WORKER_ID === \"string\" ||\n    argv.some((arg) => arg.includes(\"vitest\"))\n  );\n}\n\nfunction normalizeComparablePath(path: string): string {\n  const normalized = resolve(path);\n  return process.platform === \"win32\" ? normalized.toLowerCase() : normalized;\n}\n"],"mappings":";;;;;;AAUA,MAAM,qCAAqC,wBACzC,KAAK,QAAQ,GAAG,kCAAkC,MAAM,CAAC,CAC3D;AAEA,SAAgB,+CACd,WACA,YACM;CACN,IAAI,CAAC,cAAc,SAAS,GAC1B;CAEF,IAAI,CAAC,kCAAkC,SAAS,GAC9C;CAEF,MAAM,IAAI,MACR,CACE,sBAAsB,WAAW,kDACjC,kHACF,CAAC,CAAC,KAAK,GAAG,CACZ;AACF;;;;;;;;;;;AAYA,SAAgB,yDACd,WACA,YAAyC,CAAC,GACpC;CACN,IAAI,yBAAyB,SAAS,MAAM,QAC1C;CAEF,IAAI,cAAc,SAAS,GACzB,MAAM,IAAI,MACR;EACE,eAAe,UAAU;EACzB;EACA;CACF,CAAC,CAAC,KAAK,GAAG,CACZ;CAEF,IAAI,iCAAiC,SAAS,MAAM,QAClD;CAEF,IAAI,kCAAkC,SAAS,GAC7C;CAEF,MAAM,IAAI,MACR;EACE,eAAe,UAAU;EACzB;EACA;CACF,CAAC,CAAC,KAAK,GAAG,CACZ;AACF;AAEA,SAAgB,kCACd,WACS;CACT,OACE,wBAAwB,uBAAuB,SAAS,CAAC,MACzD;AAEJ;AAEA,SAAgB,cACd,YAAyC,CAAC,GACjC;CACT,MAAM,MAAM,UAAU,OAAO,QAAQ;CACrC,MAAM,OAAO,UAAU,QAAQ,QAAQ;CACvC,OACE,IAAI,aAAa,UACjB,IAAI,WAAW,UACf,OAAO,IAAI,qBAAqB,YAChC,OAAO,IAAI,mBAAmB,YAC9B,KAAK,MAAM,QAAQ,IAAI,SAAS,QAAQ,CAAC;AAE7C;AAEA,SAAS,wBAAwB,MAAsB;CACrD,MAAM,aAAa,QAAQ,IAAI;CAC/B,OAAO,QAAQ,aAAa,UAAU,WAAW,YAAY,IAAI;AACnE"}
+{"version":3,"file":"published-production-safety-dp-fOmmB.js","names":[],"sources":["../src/config/published-production-safety.ts"],"sourcesContent":["import { homedir } from \"node:os\";\nimport { join, resolve } from \"node:path\";\nimport type { OpenMeldPathResolutionInput } from \"./paths\";\nimport {\n  resolveDefaultOpenMeldHomeDirname,\n  resolveExplicitOpenMeldEnvPreset,\n  resolveOpenMeldEnvPreset,\n  resolveOpenMeldRootDir,\n} from \"./paths\";\n\nconst PUBLISHED_PRODUCTION_OPENMELD_ROOT = normalizeComparablePath(\n  join(homedir(), resolveDefaultOpenMeldHomeDirname(\"prod\"))\n);\n\nexport function assertNoPublishedProductionMutationDuringTests(\n  pathInput: OpenMeldPathResolutionInput,\n  targetName: string\n): void {\n  if (!isTestProcess(pathInput)) {\n    return;\n  }\n  if (!isPublishedProductionOpenMeldRoot(pathInput)) {\n    return;\n  }\n  throw new Error(\n    [\n      `Refusing to mutate ${targetName} in the published production lane during tests.`,\n      \"Set OPENMELD_HOME to a fresh temporary directory, or run the validation through openmeld-dev or openmeld-canary.\",\n    ].join(\" \")\n  );\n}\n\n/**\n * The OS service manager registration (launchd label / systemd unit / Windows\n * service name) is a per-user global resource keyed only by the env preset.\n * OPENMELD_HOME isolates lane files but does NOT isolate this registration, so\n * a process with an isolated root can still stop, boot out, or uninstall the\n * real published production service. Fail closed before any such mutation:\n * - test processes must never mutate the production registration, and\n * - a non-test process whose effective root left the published production\n *   lane must state its intent with an explicit OPENMELD_ENV_PRESET.\n */\nexport function assertSafePublishedProductionServiceRegistrationMutation(\n  operation: string,\n  pathInput: OpenMeldPathResolutionInput = {}\n): void {\n  if (resolveOpenMeldEnvPreset(pathInput) !== \"prod\") {\n    return;\n  }\n  if (isTestProcess(pathInput)) {\n    throw new Error(\n      [\n        `Refusing to ${operation} the published production OpenMeld Service registration during tests.`,\n        \"OPENMELD_HOME does not isolate the OS service manager registration.\",\n        \"Target an isolated lane with OPENMELD_ENV_PRESET=dev-local or OPENMELD_ENV_PRESET=canary, or stub the service manager.\",\n      ].join(\" \")\n    );\n  }\n  if (resolveExplicitOpenMeldEnvPreset(pathInput) === \"prod\") {\n    return;\n  }\n  if (isPublishedProductionOpenMeldRoot(pathInput)) {\n    return;\n  }\n  throw new Error(\n    [\n      `Refusing to ${operation} the published production OpenMeld Service registration:`,\n      \"the effective OpenMeld root is outside the published production lane, but the service identity resolved to the production label.\",\n      \"Set OPENMELD_ENV_PRESET explicitly to state which service registration this command must mutate.\",\n    ].join(\" \")\n  );\n}\n\nexport function isPublishedProductionOpenMeldRoot(\n  pathInput: OpenMeldPathResolutionInput\n): boolean {\n  return (\n    normalizeComparablePath(resolveOpenMeldRootDir(pathInput)) ===\n    PUBLISHED_PRODUCTION_OPENMELD_ROOT\n  );\n}\n\nexport function isTestProcess(\n  pathInput: OpenMeldPathResolutionInput = {}\n): boolean {\n  const env = pathInput.env ?? process.env;\n  const argv = pathInput.argv ?? process.argv;\n  return (\n    env.NODE_ENV === \"test\" ||\n    env.VITEST === \"true\" ||\n    typeof env.VITEST_WORKER_ID === \"string\" ||\n    typeof env.JEST_WORKER_ID === \"string\" ||\n    argv.some((arg) => arg.includes(\"vitest\"))\n  );\n}\n\nfunction normalizeComparablePath(path: string): string {\n  const normalized = resolve(path);\n  return process.platform === \"win32\" ? normalized.toLowerCase() : normalized;\n}\n"],"mappings":";;;;;;AAUA,MAAM,qCAAqC,wBACzC,KAAK,QAAQ,GAAG,kCAAkC,MAAM,CAAC,CAC3D;AAEA,SAAgB,+CACd,WACA,YACM;CACN,IAAI,CAAC,cAAc,SAAS,GAC1B;CAEF,IAAI,CAAC,kCAAkC,SAAS,GAC9C;CAEF,MAAM,IAAI,MACR,CACE,sBAAsB,WAAW,kDACjC,kHACF,CAAC,CAAC,KAAK,GAAG,CACZ;AACF;;;;;;;;;;;AAYA,SAAgB,yDACd,WACA,YAAyC,CAAC,GACpC;CACN,IAAI,yBAAyB,SAAS,MAAM,QAC1C;CAEF,IAAI,cAAc,SAAS,GACzB,MAAM,IAAI,MACR;EACE,eAAe,UAAU;EACzB;EACA;CACF,CAAC,CAAC,KAAK,GAAG,CACZ;CAEF,IAAI,iCAAiC,SAAS,MAAM,QAClD;CAEF,IAAI,kCAAkC,SAAS,GAC7C;CAEF,MAAM,IAAI,MACR;EACE,eAAe,UAAU;EACzB;EACA;CACF,CAAC,CAAC,KAAK,GAAG,CACZ;AACF;AAEA,SAAgB,kCACd,WACS;CACT,OACE,wBAAwB,uBAAuB,SAAS,CAAC,MACzD;AAEJ;AAEA,SAAgB,cACd,YAAyC,CAAC,GACjC;CACT,MAAM,MAAM,UAAU,OAAO,QAAQ;CACrC,MAAM,OAAO,UAAU,QAAQ,QAAQ;CACvC,OACE,IAAI,aAAa,UACjB,IAAI,WAAW,UACf,OAAO,IAAI,qBAAqB,YAChC,OAAO,IAAI,mBAAmB,YAC9B,KAAK,MAAM,QAAQ,IAAI,SAAS,QAAQ,CAAC;AAE7C;AAEA,SAAS,wBAAwB,MAAsB;CACrD,MAAM,aAAa,QAAQ,IAAI;CAC/B,OAAO,QAAQ,aAAa,UAAU,WAAW,YAAY,IAAI;AACnE"}

package/dist/{runtime-CbAkLHoN.js → runtime-CesmzZ2L.js}

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 
-import { d as runWithHeldLock, lt as resolveOpenMeldRootDir, s as releaseLock, t as acquireLock } from "./lock-CAt9uTnZ.js";
+import { d as runWithHeldLock, lt as resolveOpenMeldRootDir, s as releaseLock, t as acquireLock } from "./lock-Bsl_ElWy.js";
 import { Pi as COMPUTER_FILE_ACCESS_OWNER_CANCELLED_REASON_CODE, Tt as buildSpaceAttachmentDownloadPath, Xt as createOrganizationSkillsApi, nr as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, sn as createSpaceApi } from "./dist-CkGG099H.js";
 import { b as normalizeKnownBuiltinAgentControllerId, d as resolveBuiltinAgentControllerConversationKind, l as buildAgentControllerConversationRef } from "./controller-contract-pe3_Re-c.js";
-import { $ as canManageRegistryAgentSkillTargets, $t as mergeOpenClawGatewayVisibility, An as buildRuntimeWorkspaceFingerprint, Bn as withLedgerStateTransaction, Bt as createMutableRouteCatalogState, Cn as verifyCodexAppServerThread, E as resolveProfileWorkspaceRuntime, Fn as removeConversationExecutionState, Gt as syncRuntimeEventToInflightTaskControlRegistry, Hn as assertLegacyAgentContextAssociation, In as resolveConversationExecutionStateByLookupKey, Kt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, L as manageAgentRegistrationInstallation, Ln as seedLegacyAgentContext, Mn as appendLedgerHistoryEntry, Nn as commitResolvedAgentContext, On as DaemonServiceRunError, Pn as loadLedgerState, Qt as createPendingAgentInteractionRegistry, Rn as settleInflightTask, Sn as resolveCodexAppServerCompletedTurn, U as setAgentRegistrationEnabled, Un as buildAgentContextLookupKey, Vt as createRouteCatalogFromMutableState, Wt as normalizeDispatchThreadAction, Yn as listAgentControllerSupervisedProcessIds, Yt as createSerialAgentInteractionCallback, Zn as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, Zt as normalizeDispatchPostMessageAction, _ as loadDaemonRouteCatalog, a as buildOpenClawSpaceSessionKey, an as resolveDispatchContinuityObservation, b as resolveLocalController, bn as resolveInstalledCodexLaunchCandidates, cn as resolveLatestScopedConversationExecutionState, dn as createLocalAdapterEntries, en as createLocalTaskInterruptSender, ft as listProjectBindings, g as writeDaemonRouteCatalogCache, h as readDaemonRouteCatalogCache, in as resolveDispatchQueueLogMeta, kn as runRuntimeTask, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, mn as resolveInstalledOpenCodeLaunchCandidates, nn as createLocalExecutionSlots, o as normalizeOpenClawSpaceIdPrefix, on as resolveCompatibleAgentContextMatch, pn as forkOpenCodeServerSession, qt as SPACE_ACTION_TARGET_GUIDANCE_LINES, rn as createInflightTaskControlRegistry, rt as resolveBuiltinAgentControllerDefinition, s as slugifyOpenClawNamePart, sn as resolveCompatibleConversationExecutionState, t as prepareProviderRuntime, tt as resolveSkillsAgentRegistry, un as createLocalAdapterContainer, v as buildRuntimeRouteTargets, w as resolveCurrentEffectiveProfileWorkingFolderRuntime, x as resolveLocalRuntimeControllerSupport, xn as forkCodexAppServerThread, y as readLocalEnabledControllers, yn as resolveCodexTimeoutMs, z as reconcileNewRunnableBuiltinAgentRegistrations, zn as upsertConversationExecutionState } from "./prepare-provider-runtime-CMX59Gmv.js";
+import { $ as canManageRegistryAgentSkillTargets, $t as mergeOpenClawGatewayVisibility, An as buildRuntimeWorkspaceFingerprint, Bn as withLedgerStateTransaction, Bt as createMutableRouteCatalogState, Cn as verifyCodexAppServerThread, E as resolveProfileWorkspaceRuntime, Fn as removeConversationExecutionState, Gt as syncRuntimeEventToInflightTaskControlRegistry, Hn as assertLegacyAgentContextAssociation, In as resolveConversationExecutionStateByLookupKey, Kt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, L as manageAgentRegistrationInstallation, Ln as seedLegacyAgentContext, Mn as appendLedgerHistoryEntry, Nn as commitResolvedAgentContext, On as DaemonServiceRunError, Pn as loadLedgerState, Qt as createPendingAgentInteractionRegistry, Rn as settleInflightTask, Sn as resolveCodexAppServerCompletedTurn, U as setAgentRegistrationEnabled, Un as buildAgentContextLookupKey, Vt as createRouteCatalogFromMutableState, Wt as normalizeDispatchThreadAction, Yn as listAgentControllerSupervisedProcessIds, Yt as createSerialAgentInteractionCallback, Zn as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, Zt as normalizeDispatchPostMessageAction, _ as loadDaemonRouteCatalog, a as buildOpenClawSpaceSessionKey, an as resolveDispatchContinuityObservation, b as resolveLocalController, bn as resolveInstalledCodexLaunchCandidates, cn as resolveLatestScopedConversationExecutionState, dn as createLocalAdapterEntries, en as createLocalTaskInterruptSender, ft as listProjectBindings, g as writeDaemonRouteCatalogCache, h as readDaemonRouteCatalogCache, in as resolveDispatchQueueLogMeta, kn as runRuntimeTask, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, mn as resolveInstalledOpenCodeLaunchCandidates, nn as createLocalExecutionSlots, o as normalizeOpenClawSpaceIdPrefix, on as resolveCompatibleAgentContextMatch, pn as forkOpenCodeServerSession, qt as SPACE_ACTION_TARGET_GUIDANCE_LINES, rn as createInflightTaskControlRegistry, rt as resolveBuiltinAgentControllerDefinition, s as slugifyOpenClawNamePart, sn as resolveCompatibleConversationExecutionState, t as prepareProviderRuntime, tt as resolveSkillsAgentRegistry, un as createLocalAdapterContainer, v as buildRuntimeRouteTargets, w as resolveCurrentEffectiveProfileWorkingFolderRuntime, x as resolveLocalRuntimeControllerSupport, xn as forkCodexAppServerThread, y as readLocalEnabledControllers, yn as resolveCodexTimeoutMs, z as reconcileNewRunnableBuiltinAgentRegistrations, zn as upsertConversationExecutionState } from "./prepare-provider-runtime-CeGzeQbD.js";
 import { Ar as localAgentReasoningPreferencesSchema, D as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, E as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, L as runtimeTransportResumeControllerConversationFramePayloadSchema, Or as LOCAL_AGENT_REASONING_MAX_CHARS, R as runtimeTransportResumeControllerConversationResultFramePayloadSchema, T as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Wt as spaceWorkSelectionSchema, Y as openMeldDaemonTaskResultPayloadSchema, Yn as executionContextTaskSchema, ar as agentInteractionRequestSchema, b as runtimeTransportForkAgentSessionResultSchema, c as runtimeTransportDeliverDispatchRequestSchema, d as runtimeTransportDispatchInteractionResponseFramePayloadSchema, f as runtimeTransportDispatchLifecycleAcknowledgementSchema, gr as runtimeTransportDeliveryExecutionIdentitySchema, hr as runtimeCoordinatorExecutionTokenEnvelopeSchema, k as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, l as runtimeTransportDispatchInteractionDeliveredRequestSchema, p as runtimeTransportDispatchLifecycleRequestSchema, qn as executionContextAssignmentSchema, rr as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, w as runtimeTransportLocalAgentControlCancelFramePayloadSchema } from "./runtime-transport-CVtBXzIp.js";
-import { d as getAuthSessionState } from "./auth-session-CunWE9Up.js";
+import { d as getAuthSessionState } from "./auth-session-B9Whm1hq.js";
 import { n as OPENMELD_DAEMON_CANCEL_WITHDRAWN_BEFORE_START_REASON_CODE, t as OPENMELD_DAEMON_CANCEL_STOP_REQUESTED_AFTER_START_REASON_CODE } from "./control-plane-DKPz7DMv.js";
-import { f as withSkillsInstallLock, h as OFFICIAL_CLI_SKILL_URL, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-1l1SJPpK.js";
-import { C as defaultManagedIntegrationPaths, a as fetchSpaceUpdates, c as downloadWorkingCopyFile, f as discoverLocalAgentSessionProviders, i as recordRuntimeReportingSuccess, l as materializeOrganizationSkillRelease, n as recordRuntimeReportingFailure, o as createSpaceWorkingCopies, p as recordOpenMeldCreatedLocalAgentSession, r as recordRuntimeReportingNotApplicable, s as createLedgerIo, u as startLocalAgentActivitySyncLoop, w as installAgentActivityIntegrations, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-za-84KvT.js";
-import { S as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, _ as toErrorMessage$2, n as ensureDaemonRuntimePaths, s as emitRunLine, t as buildLedgerPaths, u as normalizeOptionalText$3, v as warnDaemonEvent } from "./daemon-device-id-DCsEEIDx.js";
+import { f as withSkillsInstallLock, h as OFFICIAL_CLI_SKILL_URL, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-C2ztY4iq.js";
+import { C as defaultManagedIntegrationPaths, a as fetchSpaceUpdates, c as downloadWorkingCopyFile, f as discoverLocalAgentSessionProviders, i as recordRuntimeReportingSuccess, l as materializeOrganizationSkillRelease, n as recordRuntimeReportingFailure, o as createSpaceWorkingCopies, p as recordOpenMeldCreatedLocalAgentSession, r as recordRuntimeReportingNotApplicable, s as createLedgerIo, u as startLocalAgentActivitySyncLoop, w as installAgentActivityIntegrations, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-Cjavvccq.js";
+import { S as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, _ as toErrorMessage$2, n as ensureDaemonRuntimePaths, s as emitRunLine, t as buildLedgerPaths, u as normalizeOptionalText$3, v as warnDaemonEvent } from "./daemon-device-id-KgO7zcEr.js";
 import { i as SPACE_PERSONAL_CONTRIBUTION_RULE, n as SPACE_COLLABORATION_CONTEXT_RULE, v as resolvePublicAgentFailureReason, y as resolveSpacePublicationRequirement } from "./dist-Ddy96dwl.js";
-import { B as flushDispatchResultOutbox, D as consumeArmedAgentControllerInterfaceReprobe, G as sendDispatchInteractionRequestFrame, Gt as createDispatchContinuationSpaceAccessContext, H as waitForDispatchResultOutboxAcknowledgement, J as sendDispatchPreviewFrame, K as sendDispatchLifecycleFrame, Q as emitDaemonDispatchJournalEvent, Qt as getSpaceAccessRequestContext, R as acknowledgeDispatchResultOutboxRecord, U as buildFailedTaskResultPayload, V as listDispatchResultOutboxPendingAcknowledgementKeys, Vt as buildSpaceRoundSignalPublication, W as resolveDispatchResultPayload, X as sendDispatchRuntimeEvidenceFrame, Y as sendDispatchReasoningFrame, Z as sendDispatchToolActivityFrame, Zt as getSpaceAccessPassword, a as resolveRegisterResponseFrame, at as buildDispatchBootstrapTemplateFacts, ct as buildDispatchSessionTitle, dt as resolveBootstrapTargetProfileContext, ft as resolveDispatchMentionSourceContext, i as resolveHeartbeatResponseFrame, it as isSameOrDescendantPath, lt as parseDispatchTask, nn as listSpaceMemberDirectorySendTargets, nt as resolveComputerFileAccessStorePath, o as sendDaemonFrame, ot as buildDispatchCorrelation, pn as DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND, q as sendDispatchPreviewEndFrame, r as parseDaemonFrame, st as buildDispatchPromptPlan, t as emitDaemonErrorFrame, tn as isWakeClosingSystemNoticeType, tt as readComputerFileAccessPolicy, ut as resolveBootstrapSpaceOwnerProfileId, z as enqueueDispatchResultOutboxRecord } from "./daemon-frame-transport-BI53VLpj.js";
-import { a as serviceExecutionHostCatalogSchema, i as SERVICE_EXECUTION_HOST_PROTOCOL, t as ExecutionHostError } from "./channel-D7RQQwTe.js";
-import { a as resolveBaseUrl, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig } from "./base-url-BczddvzH.js";
-import { t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-CoWJG0xk.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, f as buildOpenMeldRequestContextFromProfileIdentity, n as fetchSpaceRequestWithTimeout, t as createCliApiClientFoundation } from "./api-client-foundation-y_0cvP4z.js";
-import { a as submitRuntimeProviderConversationProofs, f as recordRuntimeProviderUsageLimits, i as submitRuntimeAgentControllerReports, l as resolveLocalAgentControllerReportDecision, o as collectLocalAgentControllerInventory, t as notifyRuntimeReportingAttemptObserver, u as probeAgentControllerUsageObservationAuth } from "./runtime-agent-controller-reporting-submission-C0ZsJp2Y.js";
-import { t as installSkillsToTargets } from "./installer-DWcT57F5.js";
-import { b as supersedeDispatchSpaceActionRecordForReconsideration, f as buildDispatchOwnedRuntimeEnv, g as createDispatchSpaceActionContext, h as OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV, n as fetchSpaceMeta, t as createCliSpaceApi, y as readDispatchSpaceActionRecord } from "./cli-space-api-BSpnKocX.js";
+import { B as flushDispatchResultOutbox, D as consumeArmedAgentControllerInterfaceReprobe, G as sendDispatchInteractionRequestFrame, Gt as createDispatchContinuationSpaceAccessContext, H as waitForDispatchResultOutboxAcknowledgement, J as sendDispatchPreviewFrame, K as sendDispatchLifecycleFrame, Q as emitDaemonDispatchJournalEvent, Qt as getSpaceAccessRequestContext, R as acknowledgeDispatchResultOutboxRecord, U as buildFailedTaskResultPayload, V as listDispatchResultOutboxPendingAcknowledgementKeys, Vt as buildSpaceRoundSignalPublication, W as resolveDispatchResultPayload, X as sendDispatchRuntimeEvidenceFrame, Y as sendDispatchReasoningFrame, Z as sendDispatchToolActivityFrame, Zt as getSpaceAccessPassword, a as resolveRegisterResponseFrame, at as buildDispatchBootstrapTemplateFacts, ct as buildDispatchSessionTitle, dt as resolveBootstrapTargetProfileContext, ft as resolveDispatchMentionSourceContext, i as resolveHeartbeatResponseFrame, it as isSameOrDescendantPath, lt as parseDispatchTask, nn as listSpaceMemberDirectorySendTargets, nt as resolveComputerFileAccessStorePath, o as sendDaemonFrame, ot as buildDispatchCorrelation, pn as DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND, q as sendDispatchPreviewEndFrame, r as parseDaemonFrame, st as buildDispatchPromptPlan, t as emitDaemonErrorFrame, tn as isWakeClosingSystemNoticeType, tt as readComputerFileAccessPolicy, ut as resolveBootstrapSpaceOwnerProfileId, z as enqueueDispatchResultOutboxRecord } from "./daemon-frame-transport-DUDAgNbO.js";
+import { a as serviceExecutionHostCatalogSchema, i as SERVICE_EXECUTION_HOST_PROTOCOL, t as ExecutionHostError } from "./channel-CKmbucdt.js";
+import { a as resolveBaseUrl, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig } from "./base-url-jdL78gyl.js";
+import { t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-Bj-fw052.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, f as buildOpenMeldRequestContextFromProfileIdentity, n as fetchSpaceRequestWithTimeout, t as createCliApiClientFoundation } from "./api-client-foundation-XILCNkrF.js";
+import { a as submitRuntimeProviderConversationProofs, f as recordRuntimeProviderUsageLimits, i as submitRuntimeAgentControllerReports, l as resolveLocalAgentControllerReportDecision, o as collectLocalAgentControllerInventory, t as notifyRuntimeReportingAttemptObserver, u as probeAgentControllerUsageObservationAuth } from "./runtime-agent-controller-reporting-submission-B6cDV_zW.js";
+import { t as installSkillsToTargets } from "./installer-CWgaNzfE.js";
+import { b as supersedeDispatchSpaceActionRecordForReconsideration, f as buildDispatchOwnedRuntimeEnv, g as createDispatchSpaceActionContext, h as OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV, n as fetchSpaceMeta, t as createCliSpaceApi, y as readDispatchSpaceActionRecord } from "./cli-space-api-DlDztj9O.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -9013,4 +9013,4 @@ function createExecutionHostRuntime(input) {
 //#endregion
 export { createExecutionHostResources, createExecutionHostRuntime };
 
-//# sourceMappingURL=runtime-CbAkLHoN.js.map
+//# sourceMappingURL=runtime-CesmzZ2L.js.map