openmeld 0.3.215 → 0.3.217

package/dist/{service-DDYwhWFs.js → service-ClETdJbz.js}

@@ -1,39 +1,39 @@
 #!/usr/bin/env node
 
-import { C as assessLocalMachineFailure, E as createServiceSpawnPendingIssue, F as accountsDir, W as isPublishedOpenMeldHome, ct as resolveOpenMeldEnvPreset, et as openMeldRootDir, i as isOpenMeldLockError, k as formatLocalMachineIssueMessage, lt as resolveOpenMeldRootDir, q as normalizeAccountKey, u as resolveOpenMeldOrphanedLockIssue, ut as resolveOpenMeldServiceOwnedPathInput, x as resolveOpenMeldLaneDescriptor } from "./lock-CAt9uTnZ.js";
-import { $r as updateCenterAgentRoutineResponseSchema, Ai as createProjectResponseSchema, Bn as DAEMON_STREAM_KEEPALIVE_PING, Br as organizationSkillReleaseSummarySchema, Ci as serviceConnectionEvidenceEventSchema, Di as localProjectControlDaemonFrameSchema, Ei as localProjectControlConnectionSchema, Fi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Gr as submitFeedbackIssueRequestSchema, Ii as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Jr as deleteCenterAgentRoutineResponseSchema, Kr as submitFeedbackIssueResponseSchema, Li as computerFileAccessDaemonFrameSchema, Lr as getOrganizationSkillResponseSchema, Mi as projectSchema, Ni as updateProjectResponseSchema, Nr as organizationSpaceDirectoryWithMemberCountsResponseSchema, Oi as localProjectControlDiscoverProjectsResponseSchema, Qr as resumeCenterAgentRoutineResponseSchema, Rr as listOrganizationSkillsResponseSchema, Si as centerAgentToolSpeakerSchema, Sr as betterAuthSessionSnapshotResponseSchema, Ur as organizationDirectoryResponseSchema, Vr as organizationSkillSummarySchema, Wr as organizationComputersResponseSchema, Xr as listCenterAgentRoutinesResponseSchema, Yr as listCenterAgentRoutineRunsResponseSchema, Zr as pauseCenterAgentRoutineResponseSchema, _r as betterAuthDeviceAuthorizationCodeRequestSchema, br as betterAuthDeviceAuthorizationTokenRequestSchema, di as spaceMemberAgentWakeAvailabilitySchema, fi as spaceMemberDirectoryAllowedRelationsSchema, gr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, hi as spaceMemberKindSchema, ji as listProjectsResponseSchema, ki as archiveProjectResponseSchema, mi as spaceMemberDirectorySchema, oi as agentActivitySnapshotResponseSchema, on as createServiceConnectionEvidenceApi, qr as createCenterAgentRoutineResponseSchema, vr as betterAuthDeviceAuthorizationCodeResponseSchema, wi as serviceConnectionEvidenceJournalSchema, xr as betterAuthDeviceAuthorizationTokenResponseSchema, yi as agentActivitySessionInventoryResponseSchema, yr as betterAuthDeviceAuthorizationErrorResponseSchema } from "./dist-CkGG099H.js";
-import { At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Cr as MIN_HEARTBEAT_INTERVAL_MS, Dn as emitReconcileStartedEvidence, Dr as resolveAdaptiveHeartbeatIntervalMs, En as emitReconcileCompletedEvidence, Er as pruneStaleLeases, Ft as resolveConfiguredProfileWorkspacePathForAccount, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, On as DaemonServiceRunError, Or as resolveCatalogSyncIntervalMs, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Sr as MAX_HEARTBEAT_INTERVAL_MS, Tn as emitDriftDetectedEvidence, Tr as applyIntervalJitterMs$1, Ut as syncDaemonRouteCatalogState, Vn as buildAuthenticatedControlPlaneResponse, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, br as resolveRouteRegistrationReconcileDecision, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject, wr as applyAcceptedLeases, xr as ADAPTIVE_HEARTBEAT_JITTER_RATIO } from "./prepare-provider-runtime-CMX59Gmv.js";
-import { A as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Bt as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, Fr as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Ir as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Lr as localFolderPickerDaemonFrameSchema, M as runtimeTransportOpenMeldToolsControlFramePayloadSchema, N as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, O as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, P as runtimeTransportRegisterSessionRequestSchema, Rr as localFolderPickerHelperProtocolResultSchema, ci as openMeldRequestContextSchema, kr as OPENMELD_REASONING_STREAM_HEADER, n as OPENMELD_EXECUTION_ADMISSION_HEADER, o as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, tt as sanitizeDispatchErrorSummary, x as runtimeTransportHeartbeatRequestSchema, xn as OPENMELD_COMPUTER_CARE_HEADER, z as runtimeTransportRouteCatalogChangedFramePayloadSchema, zr as localFolderPickerHelperResultSchema } from "./runtime-transport-CVtBXzIp.js";
-import { E as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-CunWE9Up.js";
-import { s as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-DKPz7DMv.js";
+import { C as assessLocalMachineFailure, E as createServiceSpawnPendingIssue, F as accountsDir, W as isPublishedOpenMeldHome, ct as resolveOpenMeldEnvPreset, et as openMeldRootDir, i as isOpenMeldLockError, k as formatLocalMachineIssueMessage, lt as resolveOpenMeldRootDir, q as normalizeAccountKey, u as resolveOpenMeldOrphanedLockIssue, ut as resolveOpenMeldServiceOwnedPathInput, x as resolveOpenMeldLaneDescriptor } from "./lock-Bsl_ElWy.js";
+import { Ai as createProjectResponseSchema, Bn as DAEMON_STREAM_KEEPALIVE_PING, Ci as serviceConnectionEvidenceEventSchema, Di as localProjectControlDaemonFrameSchema, Ei as localProjectControlConnectionSchema, Fi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Fr as organizationSkillReleaseSummarySchema, Gr as spaceMemberDirectorySchema, Hr as spaceMemberAgentWakeAvailabilitySchema, Ii as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Ir as organizationSkillSummarySchema, Kr as spaceMemberKindSchema, Li as computerFileAccessDaemonFrameSchema, Mi as projectSchema, Mr as getOrganizationSkillResponseSchema, Ni as updateProjectResponseSchema, Nr as listOrganizationSkillsResponseSchema, Oi as localProjectControlDiscoverProjectsResponseSchema, Si as centerAgentToolSpeakerSchema, Ur as spaceMemberDirectoryAllowedRelationsSchema, Zr as organizationComputersResponseSchema, ar as betterAuthDeviceAuthorizationErrorResponseSchema, br as submitFeedbackIssueRequestSchema, ci as deleteCenterAgentRoutineResponseSchema, cr as betterAuthSessionSnapshotResponseSchema, di as pauseCenterAgentRoutineResponseSchema, fi as resumeCenterAgentRoutineResponseSchema, ir as betterAuthDeviceAuthorizationCodeResponseSchema, ji as listProjectsResponseSchema, ki as archiveProjectResponseSchema, li as listCenterAgentRoutineRunsResponseSchema, nr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, on as createServiceConnectionEvidenceApi, or as betterAuthDeviceAuthorizationTokenRequestSchema, pi as updateCenterAgentRoutineResponseSchema, rr as betterAuthDeviceAuthorizationCodeRequestSchema, si as createCenterAgentRoutineResponseSchema, sr as betterAuthDeviceAuthorizationTokenResponseSchema, ti as agentActivitySessionInventoryResponseSchema, ui as listCenterAgentRoutinesResponseSchema, vr as organizationSpaceDirectoryWithMemberCountsResponseSchema, wi as serviceConnectionEvidenceJournalSchema, xi as agentActivitySnapshotResponseSchema, xr as submitFeedbackIssueResponseSchema, yr as organizationDirectoryResponseSchema } from "./dist-DkRliHib.js";
+import { At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Cr as MAX_HEARTBEAT_INTERVAL_MS, Dn as emitReconcileCompletedEvidence, Dr as pruneStaleLeases, En as emitDriftDetectedEvidence, Er as applyIntervalJitterMs$1, Ft as resolveConfiguredProfileWorkspacePathForAccount, Hn as buildAuthenticatedControlPlaneResponse, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, On as emitReconcileStartedEvidence, Or as resolveAdaptiveHeartbeatIntervalMs, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Sr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, Tr as applyAcceptedLeases, Ut as syncDaemonRouteCatalogState, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, kn as DaemonServiceRunError, kr as resolveCatalogSyncIntervalMs, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject, wr as MIN_HEARTBEAT_INTERVAL_MS, xr as resolveRouteRegistrationReconcileDecision } from "./prepare-provider-runtime-DxaGSe3R.js";
+import { A as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Ar as OPENMELD_REASONING_STREAM_HEADER, Br as localFolderPickerHelperResultSchema, Bt as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, Ir as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Lr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, M as runtimeTransportOpenMeldToolsControlFramePayloadSchema, N as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, O as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, P as runtimeTransportRegisterSessionRequestSchema, Rr as localFolderPickerDaemonFrameSchema, Sn as OPENMELD_COMPUTER_CARE_HEADER, li as openMeldRequestContextSchema, n as OPENMELD_EXECUTION_ADMISSION_HEADER, o as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, tt as sanitizeDispatchErrorSummary, x as runtimeTransportHeartbeatRequestSchema, z as runtimeTransportRouteCatalogChangedFramePayloadSchema, zr as localFolderPickerHelperProtocolResultSchema } from "./runtime-transport-BLtOFrtv.js";
+import { E as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-DOjVKRI_.js";
+import { s as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-BDS63N7Y.js";
 import { F as iso, G as string, L as literal, N as enumFactory, W as strictObject, X as url, a as formatLocalSetupActionLabel, f as localServiceComponentUpdateProjectionSchema, i as formatLocalSetupActionDescription, j as discriminatedUnion, k as boolean, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel, s as localCliComponentUpdateProjectionSchema } from "./local-components-B6SCXZf9.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-1l1SJPpK.js";
+import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-CMs4p0wo.js";
 import { i as serviceControlCapabilitiesSchema } from "./service-account-admission-Dy2W3n3_.js";
-import { $ as buildCommandAuthenticationPromptMessage$1, A as DEFAULT_RECONNECT_DELAY_MS, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as buildAuthenticationStatusLabel, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Y as readDaemonCatalogSyncSignal, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, d as normalizeText$1, et as buildHumanAuthenticationCard, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, n as ensureDaemonRuntimePaths, nt as extractAuthenticationPromptAction, ot as resolveAuthenticationReasonFromState, r as resolveDaemonDeviceId, rt as resolveAuthenticationGuidance, s as emitRunLine, tt as createAuthenticationError, u as normalizeOptionalText$1, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-DCsEEIDx.js";
-import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-CIzOT1zx.js";
-import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-DNBMVcCI.js";
-import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_REPAIR_ANOMALIES, Bt as assessCliUpdate, C as formatDaemonServiceRefreshReliabilityMessage, Ct as readDaemonRuntimeContractRepairReport, D as writeDaemonStartFailureState, E as clearDaemonStartFailureState, Et as isVersionDowngrade, Ft as resolveServiceUpdateUrgency, Ht as buildDaemonSystemServiceCommandSpec, It as assessServerRequiredVersion, Lt as describeServerRequiredVersionUnavailableReason, Mt as classifyDaemonServiceRunStartability, Nt as classifyDaemonServiceWakeability, Ot as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, Pt as resolveCurrentDaemonExpectedVersion, Q as buildDaemonServiceDependencySummary, S as buildDaemonServiceUpdateRequiredNextStep, St as ensureDaemonRuntimeContractState, Tt as resolveDaemonServiceAlignmentDecision, Ut as ensureDaemonSystemServiceCommandFiles, W as resolveLocalServiceDemand, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as resolveDaemonStopStrategy, a as isDaemonInventoryRunningAndStartReady$1, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, dt as uninstallDaemonServiceUpdateWorker, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as inspectDaemonServiceInventory, g as resolveServiceReadiness, gt as readCurrentDaemonOwnerSnapshot, h as resolveDaemonStatusAuthenticationAttention, ht as hasActiveDaemonOwners, i as runDaemonServiceLifecycle, kt as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as formatDaemonOwnerSummaryLabel, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as buildDaemonOwnerSnapshotFromObservedState, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveStoppedContractWriteBlockedReason, w as formatDaemonServiceUpdateRequiredMessage, wt as buildDaemonServiceTargetSpec, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as summarizeDaemonOwnerSnapshot } from "./daemon-service-update-coordinator-BXLsu_wO.js";
-import { L as resolveNextRuntimeAgentControllerReportSyncAtMs, Q as emitDaemonDispatchJournalEvent, et as ComputerFileAccessStoreError, n as handleDaemonTransportFrame, nt as resolveComputerFileAccessStorePath, o as sendDaemonFrame, r as parseDaemonFrame, rt as updateComputerFileAccessPolicy, s as collectObservedSessionWorkingDirectories, tt as readComputerFileAccessPolicy } from "./daemon-frame-transport-BI53VLpj.js";
-import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-D7RQQwTe.js";
-import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, f as getConfiguredDaemonDispatchLimits, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-BczddvzH.js";
-import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-Clby123a.js";
+import { $ as buildCommandAuthenticationPromptMessage$1, A as DEFAULT_RECONNECT_DELAY_MS, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as buildAuthenticationStatusLabel, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, Y as readDaemonCatalogSyncSignal, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, d as normalizeText$1, et as buildHumanAuthenticationCard, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, n as ensureDaemonRuntimePaths, nt as extractAuthenticationPromptAction, ot as resolveAuthenticationReasonFromState, r as resolveDaemonDeviceId, rt as resolveAuthenticationGuidance, s as emitRunLine, tt as createAuthenticationError, u as normalizeOptionalText$1, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-bfkbZj9G.js";
+import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-BUr4qsLo.js";
+import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-DpiD8oap.js";
+import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_REPAIR_ANOMALIES, Bt as assessCliUpdate, C as formatDaemonServiceRefreshReliabilityMessage, Ct as readDaemonRuntimeContractRepairReport, D as writeDaemonStartFailureState, E as clearDaemonStartFailureState, Et as isVersionDowngrade, Ft as resolveServiceUpdateUrgency, Ht as buildDaemonSystemServiceCommandSpec, It as assessServerRequiredVersion, Lt as describeServerRequiredVersionUnavailableReason, Mt as classifyDaemonServiceRunStartability, Nt as classifyDaemonServiceWakeability, Ot as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, Pt as resolveCurrentDaemonExpectedVersion, Q as buildDaemonServiceDependencySummary, S as buildDaemonServiceUpdateRequiredNextStep, St as ensureDaemonRuntimeContractState, Tt as resolveDaemonServiceAlignmentDecision, Ut as ensureDaemonSystemServiceCommandFiles, W as resolveLocalServiceDemand, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as resolveDaemonStopStrategy, a as isDaemonInventoryRunningAndStartReady$1, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, dt as uninstallDaemonServiceUpdateWorker, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as inspectDaemonServiceInventory, g as resolveServiceReadiness, gt as readCurrentDaemonOwnerSnapshot, h as resolveDaemonStatusAuthenticationAttention, ht as hasActiveDaemonOwners, i as runDaemonServiceLifecycle, kt as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as formatDaemonOwnerSummaryLabel, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as buildDaemonOwnerSnapshotFromObservedState, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveStoppedContractWriteBlockedReason, w as formatDaemonServiceUpdateRequiredMessage, wt as buildDaemonServiceTargetSpec, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as summarizeDaemonOwnerSnapshot } from "./daemon-service-update-coordinator-BuCEBJoe.js";
+import { L as resolveNextRuntimeAgentControllerReportSyncAtMs, Q as emitDaemonDispatchJournalEvent, et as ComputerFileAccessStoreError, n as handleDaemonTransportFrame, nt as resolveComputerFileAccessStorePath, o as sendDaemonFrame, r as parseDaemonFrame, rt as updateComputerFileAccessPolicy, s as collectObservedSessionWorkingDirectories, tt as readComputerFileAccessPolicy } from "./daemon-frame-transport-saNQVOyi.js";
+import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-BfTy6fDo.js";
+import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, f as getConfiguredDaemonDispatchLimits, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-D7uE_xTo.js";
+import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-CNus0e6E.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
 import { t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
-import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-CoAZLwpi.js";
-import { a as upsertDaemonServiceContract, i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, t as clearDaemonServiceContract } from "./daemon-service-contract-XfV9t96H.js";
+import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-B44aq2nm.js";
+import { a as upsertDaemonServiceContract, i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, t as clearDaemonServiceContract } from "./daemon-service-contract-BpOBMGX0.js";
 import { a as formatOpenMeldCliTextBlock, n as formatOpenMeldCliCommand, r as formatOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
-import { r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-dXGKoZuo.js";
-import { t as admitServiceAccountStop } from "./service-account-authorization-CI_QP6KS.js";
-import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-CoWJG0xk.js";
-import { n as toErrorMessage$6, t as sleep } from "./dist-o3UL1EGQ.js";
-import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-CyEK02Yv.js";
-import { a as requireOpenMeldProfile, c as clearAllSelectedOpenMeldProfileIds, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull } from "./context-BfxDJBzm.js";
+import { r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-B6HqY0_a.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-kciEaW5t.js";
+import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DP01txRB.js";
+import { n as toErrorMessage$6, t as sleep } from "./dist-BLuEEVHh.js";
+import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-CXbN836B.js";
+import { a as requireOpenMeldProfile, c as clearAllSelectedOpenMeldProfileIds, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull } from "./context-Di5R4iik.js";
 import { a as outJsonLine, n as sanitizeTerminalDisplayText, o as outLine, t as createPresenter } from "./presenter-BcxiQyJg.js";
-import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-CtNv_azD.js";
-import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-y_0cvP4z.js";
-import { t as childExecutionHostChannel } from "./process-channel-8KzXhiJa.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-DDLKowYl.js";
+import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-CR9OIZSD.js";
+import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-Cib1elkI.js";
+import { t as childExecutionHostChannel } from "./process-channel-Cocpv3Br.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-CscX0nmD.js";
 import { createHash, randomUUID } from "node:crypto";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import { access, mkdir, open, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -6324,6 +6324,7 @@ async function runDaemonSocketSession(input) {
 	let closeReason = "closed";
 	const socketConnectedAtMs = Date.now();
 	let heartbeatInFlight = false;
+	let admissionHeartbeatPending = false;
 	const heartbeatIdleWaiters = [];
 	let acceptingDispatches = false;
 	let shutdownStopCause = null;
@@ -6381,7 +6382,7 @@ async function runDaemonSocketSession(input) {
 		socket: input.socket,
 		onAdmissionChanged: () => {
 			acceptingDispatches = !shutdownStopCause && hostLink.canAccept();
-			if (lastHeartbeatSentAtMs !== null) scheduleHeartbeat({
+			if (heartbeatInFlight || lastHeartbeatSentAtMs !== null) scheduleHeartbeat({
 				delayMs: 0,
 				reason: "execution_host_admission_changed"
 			});
@@ -6416,6 +6417,8 @@ async function runDaemonSocketSession(input) {
 	const waitForClose = new Promise((resolve) => {
 		input.socket.onClose((code, reason) => {
 			closed = true;
+			admissionHeartbeatPending = false;
+			clearHeartbeatTimer();
 			hostLink.detach().catch(reportHostFailure);
 			closeCode = code;
 			closeReason = normalizeText$1(reason) || "closed";
@@ -6558,7 +6561,11 @@ async function runDaemonSocketSession(input) {
 		};
 	}
 	async function sendHeartbeat(options = {}) {
-		if (closed || heartbeatInFlight) return;
+		if (closed) return;
+		if (heartbeatInFlight) {
+			if (options.publishAdmissionAfterInFlight) admissionHeartbeatPending = true;
+			return;
+		}
 		heartbeatInFlight = true;
 		try {
 			const leases = Array.from(leasesByProfileId.entries()).map(([profileId, leaseEpoch]) => ({
@@ -6649,6 +6656,7 @@ async function runDaemonSocketSession(input) {
 			startSupplementalEvidenceSyncs();
 		} catch (error) {
 			if (recordHeartbeatFailure(error)) {
+				admissionHeartbeatPending = false;
 				input.socket.terminate();
 				return;
 			}
@@ -6662,6 +6670,12 @@ async function runDaemonSocketSession(input) {
 			});
 		} finally {
 			heartbeatInFlight = false;
+			const publishPendingAdmission = admissionHeartbeatPending;
+			admissionHeartbeatPending = false;
+			if (!closed && publishPendingAdmission) scheduleHeartbeat({
+				delayMs: 0,
+				reason: "execution_host_admission_changed"
+			});
 			resolveHeartbeatIdleWaiters(heartbeatIdleWaiters);
 			schedulePendingLocalExecutionEvidenceRefreshIfNeeded();
 		}
@@ -6675,6 +6689,10 @@ async function runDaemonSocketSession(input) {
 	function scheduleHeartbeat(inputSchedule) {
 		if (closed) return;
 		const normalizedDelayMs = Math.max(0, Math.trunc(inputSchedule.delayMs));
+		if (heartbeatInFlight && inputSchedule.reason === "execution_host_admission_changed") {
+			admissionHeartbeatPending = true;
+			return;
+		}
 		const dueAtMs = Date.now() + normalizedDelayMs;
 		if (heartbeatTimer && heartbeatTimerDueAtMs !== null && heartbeatTimerDueAtMs <= dueAtMs) return;
 		clearHeartbeatTimer();
@@ -6682,7 +6700,10 @@ async function runDaemonSocketSession(input) {
 		heartbeatTimer = setTimeout(() => {
 			heartbeatTimer = null;
 			heartbeatTimerDueAtMs = null;
-			sendHeartbeat({ advanceIdleCadence: inputSchedule.reason !== "execution_host_admission_changed" }).catch((error) => {
+			sendHeartbeat({
+				advanceIdleCadence: inputSchedule.reason !== "execution_host_admission_changed",
+				publishAdmissionAfterInFlight: inputSchedule.reason === "execution_host_admission_changed"
+			}).catch((error) => {
 				emitRunLine({
 					presenter: input.presenter,
 					code: "daemon.run.heartbeat_failed",
@@ -7688,9 +7709,9 @@ async function resolveDaemonServiceParticipationStatus(input) {
 }
 //#endregion
 //#region src/local-components/manifest.ts
-const OPENMELD_CLI_COMMAND_CONTRACT_VERSION = "openmeld-cli-command-contract-2026-09-large-space-files-v1";
+const OPENMELD_CLI_COMMAND_CONTRACT_VERSION = "openmeld-cli-command-contract-2026-09-image-geometry-v1";
 const OPENMELD_SKILLS_CONTRACT_VERSION = "openmeld-skills-contract-2026-09-explicit-space-recipients-v1";
-const OPENMELD_SERVICE_CONTRACT_VERSION = "openmeld-service-contract-2026-09-space-access-and-large-files-v1";
+const OPENMELD_SERVICE_CONTRACT_VERSION = "openmeld-service-contract-2026-09-image-geometry-v1";
 const LOCAL_COMPONENTS_SNAPSHOT_FILE = "local-components.json";
 const SERVICE_COMPONENT_UPDATE_CODES = /* @__PURE__ */ new Set([
 	"version_outdated",
@@ -16343,4 +16364,4 @@ function parseDaemonRunMode(rawMode) {
 //#endregion
 export { buildAuthStatusSnapshot as $, buildDaemonStartNeedsAttentionCard as A, resolveDaemonServiceParticipationStatus as B, buildProfileWorkspaceRows as C, cliJsonSkillsShowEnvelopeSchema as Ct, createDelayedSpinner as D, organizationJoinLinkManagementQuerySchema as Dt, emitDaemonAgentOverview as E, organizationJoinLinkErrorResponseSchema as Et, emitCliJsonEnvelope as F, ensureCommandAuthenticationOrCancel as G, validateLocalProjectConnectionPath as H, runDaemonStartupPreflight as I, runAuthLogout as J, evaluateCommandAuthentication as K, readDaemonIncidentLogTail as L, buildHumanErrorCopy as M, renderHumanErrorCard as N, shouldEmitAgentOverview as O, revokeOrganizationJoinLinkResponseSchema as Ot, renderHumanTextErrorCard as P, buildAuthStatusRows as Q, resolveLocalComponentsStatus as R, buildProfileWorkspacePresentation as S, cliJsonSkillsLoadEnvelopeSchema as St, createQuietPresenter as T, getOrganizationJoinLinkResponseSchema as Tt, connectWebSocket as U, LocalProjectConnectionError as V, buildCommandAuthenticationPromptMessage as W, runAuthStatus as X, runAuthMenu as Y, exchangeOneTimeTokenAuthSession as Z, buildDaemonBackgroundStartFailure as _, resolveDeviceTokenExpiresAt as _t, runDaemonBackgroundStartForDecision as a, promptTextEntry as at, formatServiceRuntimeHeadline as b, cliJsonOutputEnvelopeSchema as bt, runDaemonInterrupt as c, finishCurrentCommandCheckScope as ct, runDaemonServiceDetached as d, resetCurrentCommandCheckState as dt, formatActiveOrganizationLabel as et, runDaemonSnapshot as f, startCurrentCommandCheckScope as ft, runDaemonUninstall as g, resolveDeviceAuthClientId as gt, runDaemonTeardownStrict as h, requestDeviceToken as ht, runDaemonAutostart as i, buildUnifiedCardFrame as it, runDaemonStartDecisionPrompt as j, buildDaemonStartDeferredCard as k, runDaemonReinstall as l, getCurrentCommandCheckState as lt, runDaemonStop as m, fetchAuthUserSnapshot as mt, isManagedSystemServiceBootstrapRun as n, renderInfoCard as nt, runDaemonCancel as o, isReturnKeypress as ot, runDaemonStatusFlow as p, extractAuthApiErrorMessage as pt, runAuthLogin as q, runDaemon as r, renderTextInfoCard as rt, runDaemonInstall as s, runInteractivePrompt as st, bestEffortStopCurrentLaneDaemonService as t, buildTextInfoCardLines as tt, runDaemonRunAfterEntryChecks as u, isCurrentCommandCheckScopeActive as ut, buildSystemServiceStartupFailureReportFromVerdict as v, revokeAuthAccessToken as vt, reconcileCliVersionView as w, acceptOrganizationJoinLinkBodySchema as wt, resolveServiceParticipationReadiness as x, cliJsonSkillsListEnvelopeSchema as xt, formatServiceParticipationReadinessLabel as y, cliJsonErrorEnvelopeSchema as yt, writeInstalledLocalComponentsSnapshot as z };
 
-//# sourceMappingURL=service-DDYwhWFs.js.map
+//# sourceMappingURL=service-ClETdJbz.js.map