openmeld 0.3.218 → 0.3.220

package/dist/{daemon-device-id-bP58j3NL.js.map → daemon-device-id-YnLMx1kN.js.map}

@@ -1 +1 @@
-{"version":3,"file":"daemon-device-id-bP58j3NL.js","names":["normalizeOptionalString","normalizeOptionalString","STRATEGY_CATALOG_SYNC_RETRY_INTERVAL_MS","STRATEGY_CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS","STRATEGY_DAEMON_RUNTIME_CONTRACT_EPOCH","STRATEGY_DAEMON_STREAM_CONNECT_TIMEOUT_MS","STRATEGY_DAEMON_STREAM_KEEPALIVE_INTERVAL_MS","STRATEGY_DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS","STRATEGY_DEFAULT_HEARTBEAT_INTERVAL_MS","STRATEGY_HEARTBEAT_RESPONSE_TIMEOUT_MS","STRATEGY_MAX_HEARTBEAT_INTERVAL_MS","STRATEGY_MIN_HEARTBEAT_INTERVAL_MS","STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS","STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS","STRATEGY_REGISTER_RESPONSE_TIMEOUT_MS","STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS","STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS","STRATEGY_RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS","sharedToErrorMessage"],"sources":["../../../packages/schemas/dist/schemas/daemon/route-catalog-cache.js","../src/config/account-context.ts","../src/auth/auth-guidance.ts","../src/local-service/state/catalog-sync-signal.ts","../src/config/profile-creation-capability.ts","../src/config/openmeld-profiles-api.ts","../src/local-service/core/constants.ts","../src/local-service/core/logger.ts","../src/local-service/state/daemon-device-id.ts"],"sourcesContent":["import { agentProfileIdSchema } from \"../protocol/profile.js\";\nimport { daemonServiceLaneSchema } from \"./service-contract.js\";\nimport { conversationPolicySchema } from \"./conversation-contract.js\";\nimport { runtimeAgentControllerConversationIdMappingSpecSchema, runtimeAgentControllerLaunchContractSchema, runtimeStreamingModeSchema, runtimeTransportModeSchema } from \"./controller-contract.js\";\nimport { skippedDaemonProfileSchema } from \"./control-plane.js\";\nimport { CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH } from \"./runtime-transport.js\";\nimport { agentControllerCollaborationModeSchema } from \"../agent-controller-collaboration-mode.js\";\nimport { agentControllerPermissionModeSchema } from \"../agent-controller-permission-mode.js\";\nimport { openCodePermissionConfigSchema } from \"../open-code-permission.js\";\nimport * as z$1 from \"zod/v4\";\n//#region src/schemas/daemon/route-catalog-cache.ts\nconst DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_VERSION = 4;\nconst DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME = \"openmeld-daemon-route-catalog-cache-v4\";\nconst cachedDaemonRouteConfigSchema = z$1.strictObject({\n\tagentControllerRef: z$1.string().trim().min(1),\n\tbindingId: z$1.string().trim().min(1).optional(),\n\tagentControllerCollaborationMode: agentControllerCollaborationModeSchema.optional(),\n\tagentControllerPermissionMode: agentControllerPermissionModeSchema.optional(),\n\tconfigurationRevision: z$1.number().int().positive().optional(),\n\tcontextIdMappingSpec: runtimeAgentControllerConversationIdMappingSpecSchema,\n\tconversationPolicy: conversationPolicySchema.optional(),\n\topenCodePermission: openCodePermissionConfigSchema.optional(),\n\tlaunchContract: runtimeAgentControllerLaunchContractSchema.nullable().optional(),\n\tprofileId: agentProfileIdSchema,\n\tstreamingMode: runtimeStreamingModeSchema,\n\ttransportMode: runtimeTransportModeSchema,\n\topenMeldServiceRuntimeId: z$1.string().trim().min(1).optional()\n});\nconst daemonRouteCatalogCacheBodySchema = z$1.strictObject({\n\tcachedAt: z$1.iso.datetime({ offset: true }),\n\truntimeContractEpoch: z$1.literal(CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH),\n\townerUserId: z$1.string().trim().min(1),\n\tlane: daemonServiceLaneSchema,\n\tserviceBundleId: z$1.string().trim().min(1),\n\tprofileIds: z$1.array(agentProfileIdSchema),\n\troutes: z$1.array(cachedDaemonRouteConfigSchema),\n\tskippedProfiles: z$1.array(skippedDaemonProfileSchema)\n});\nconst daemonRouteCatalogCacheSchema = z$1.discriminatedUnion(\"v\", [\n\tdaemonRouteCatalogCacheBodySchema.extend({\n\t\tv: z$1.literal(2),\n\t\tschema: z$1.literal(\"openmeld-daemon-route-catalog-cache-v2\")\n\t}),\n\tdaemonRouteCatalogCacheBodySchema.extend({\n\t\tv: z$1.literal(3),\n\t\tschema: z$1.literal(\"openmeld-daemon-route-catalog-cache-v3\")\n\t}),\n\tdaemonRouteCatalogCacheBodySchema.extend({\n\t\tv: z$1.literal(4),\n\t\tschema: z$1.literal(DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME)\n\t})\n]).superRefine((value, ctx) => {\n\tconst routeIds = new Set(value.routes.map((route) => route.profileId));\n\tfor (const profileId of value.profileIds) if (!routeIds.has(profileId)) ctx.addIssue({\n\t\tcode: \"custom\",\n\t\tmessage: \"route catalog cache profileIds must match routes\",\n\t\tpath: [\"profileIds\"]\n\t});\n});\n//#endregion\nexport { DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_VERSION, cachedDaemonRouteConfigSchema, daemonRouteCatalogCacheSchema };\n\n//# sourceMappingURL=route-catalog-cache.js.map","import { createHash } from \"node:crypto\";\nimport type { StoredAuthSession } from \"./auth-session\";\nimport { normalizeAccountKey, type OpenMeldAccountKey } from \"./paths\";\n\ntype AuthSessionLike = Pick<\n  StoredAuthSession,\n  \"authBaseUrl\" | \"clientId\" | \"createdAt\" | \"user\"\n>;\n\nexport type OpenMeldAccountContext = {\n  key: OpenMeldAccountKey;\n  source: \"session\" | \"fallback\";\n  authBaseUrl?: string;\n  user?: {\n    id?: string;\n    email?: string;\n    name?: string;\n  };\n};\n\nexport function resolveOpenMeldAccountContext(input?: {\n  session?: AuthSessionLike | null;\n}): OpenMeldAccountContext {\n  const session = input?.session ?? null;\n  if (!session) {\n    return {\n      key: normalizeAccountKey({}),\n      source: \"fallback\",\n    };\n  }\n\n  const normalizedBaseUrl = normalizeOptionalString(session.authBaseUrl);\n  const hostKey = resolveHostKey(normalizedBaseUrl);\n  const user = normalizeUser(session.user);\n  const userKey =\n    user?.id ??\n    user?.email ??\n    buildSessionScopedUserKey({\n      authBaseUrl: normalizedBaseUrl,\n      clientId: normalizeOptionalString(session.clientId),\n      createdAt: normalizeOptionalString(session.createdAt),\n    });\n  const key = normalizeAccountKey({\n    hostKey: hostKey ?? undefined,\n    userKey,\n  });\n\n  return {\n    key,\n    source: \"session\",\n    ...(normalizedBaseUrl ? { authBaseUrl: normalizedBaseUrl } : {}),\n    ...(user ? { user } : {}),\n  };\n}\n\nexport async function resolveCurrentOpenMeldAccountContext(): Promise<OpenMeldAccountContext> {\n  const { getAuthSessionMetadata } = await import(\"./auth-session\");\n  const session = await getAuthSessionMetadata().catch(() => null);\n  return resolveOpenMeldAccountContext({ session });\n}\n\nfunction resolveHostKey(baseUrl: string | null): string | null {\n  if (!baseUrl) {\n    return null;\n  }\n  try {\n    return new URL(baseUrl).host;\n  } catch {\n    return null;\n  }\n}\n\nfunction buildSessionScopedUserKey(input: {\n  authBaseUrl: string | null;\n  clientId: string | null;\n  createdAt: string | null;\n}): string | undefined {\n  const seed = [input.authBaseUrl, input.clientId, input.createdAt]\n    .filter((value) => typeof value === \"string\" && value.length > 0)\n    .join(\"|\");\n  if (!seed) {\n    return undefined;\n  }\n  const digest = createHash(\"sha256\").update(seed, \"utf8\").digest(\"hex\");\n  return `session-${digest.slice(0, 16)}`;\n}\n\nfunction normalizeUser(value: unknown): OpenMeldAccountContext[\"user\"] | null {\n  if (!(value && typeof value === \"object\")) {\n    return null;\n  }\n  const record = value as Record<string, unknown>;\n  const id = normalizeOptionalString(record.id);\n  const email = normalizeOptionalString(record.email);\n  const name = normalizeOptionalString(record.name);\n  if (!(id || email || name)) {\n    return null;\n  }\n  return {\n    ...(id ? { id } : {}),\n    ...(email ? { email } : {}),\n    ...(name ? { name } : {}),\n  };\n}\n\nfunction normalizeOptionalString(value: unknown): string | null {\n  if (typeof value !== \"string\") {\n    return null;\n  }\n  const normalized = value.trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import type { AuthSessionState } from \"../config/auth-session\";\nimport {\n  formatInlineOpenMeldCliCommands,\n  formatOpenMeldCliCommands,\n} from \"../runtime/cli-entry-command\";\nimport type { DualViewGuideInput } from \"../runtime/dual-view-guide\";\n\nconst AUTH_MISMATCH_ERROR_RE =\n  /session auth:\\s*(.+?),\\s*gateway:\\s*(.+?)\\);?\\s*run/u;\nconst AUTH_MISMATCH_SUMMARY_RE =\n  /Current session is for\\s+(.+?),\\s+but.+?\\s+is\\s+(.+?)\\./u;\nconst AUTH_PROMPT_ACTION_RE =\n  /^Sign in is required before (?<action>.+?)\\. What do you want to do\\?$/u;\n\nexport type AuthenticationGuidanceReason =\n  | \"required\"\n  | \"expired\"\n  | \"invalid\"\n  | \"revoked\"\n  | \"unavailable\"\n  | \"mismatch\";\n\nexport type AuthenticationGuidance = {\n  reason: AuthenticationGuidanceReason;\n  action: string | null;\n  authBaseUrl: string | null;\n  gatewayUrl: string | null;\n  title: string;\n  statusLabel: string;\n  summary: string;\n  promptNextStep: string;\n  errorNextStep: string;\n  commandErrorMessage: string;\n  agentErrorMessage: string;\n};\n\nexport class OpenMeldAuthenticationError extends Error {\n  readonly code = \"auth.authentication_required\";\n  readonly guidance: AuthenticationGuidance;\n\n  constructor(guidance: AuthenticationGuidance) {\n    super(guidance.commandErrorMessage);\n    this.name = \"OpenMeldAuthenticationError\";\n    this.guidance = guidance;\n  }\n}\n\nexport function createAuthenticationError(input: {\n  reason: AuthenticationGuidanceReason;\n  action?: string | null;\n  authBaseUrl?: string | null;\n  gatewayUrl?: string | null;\n}): OpenMeldAuthenticationError {\n  return new OpenMeldAuthenticationError(resolveAuthenticationGuidance(input));\n}\n\nexport function resolveAuthenticationGuidance(input: {\n  reason: AuthenticationGuidanceReason;\n  action?: string | null;\n  authBaseUrl?: string | null;\n  gatewayUrl?: string | null;\n}): AuthenticationGuidance {\n  const action = normalizeOptionalString(input.action);\n  const authBaseUrl = normalizeOptionalString(input.authBaseUrl);\n  const gatewayUrl = normalizeOptionalString(input.gatewayUrl);\n  if (input.reason === \"mismatch\") {\n    return {\n      reason: input.reason,\n      action,\n      authBaseUrl,\n      gatewayUrl,\n      title: \"Wrong OpenMeld Environment\",\n      statusLabel: \"wrong OpenMeld environment\",\n      summary: \"This command is using a different OpenMeld environment.\",\n      promptNextStep: \"Choose Sign in now to switch and continue.\",\n      errorNextStep: formatInlineOpenMeldCliCommands(\n        \"Run `openmeld login` for this OpenMeld environment, then retry.\"\n      ),\n      commandErrorMessage: formatInlineOpenMeldCliCommands(\n        `authentication does not match current gateway (session auth: ${\n          authBaseUrl ?? \"another OpenMeld environment\"\n        }, gateway: ${gatewayUrl ?? \"the current OpenMeld gateway\"}); run \\`openmeld login\\` and retry`\n      ),\n      agentErrorMessage: formatInlineOpenMeldCliCommands(\n        \"sign-in is for a different OpenMeld environment; run `openmeld login` for this OpenMeld environment, then retry\"\n      ),\n    };\n  }\n\n  const requiredGuidance = resolveRequiredAuthenticationGuidance(input.reason);\n  return {\n    reason: input.reason,\n    action,\n    authBaseUrl,\n    gatewayUrl,\n    ...requiredGuidance,\n  };\n}\n\nexport function buildCommandAuthenticationPromptMessage(\n  action?: string\n): string {\n  const normalizedAction = normalizeOptionalString(action);\n  if (!normalizedAction) {\n    return \"Sign in is required to continue. What do you want to do?\";\n  }\n  return `Sign in is required before ${normalizedAction}. What do you want to do?`;\n}\n\nexport function buildHumanAuthenticationCard(input: {\n  guidance: AuthenticationGuidance;\n  mode: \"prompt\" | \"error\";\n}): {\n  title: string;\n  rows: Array<{ label: string; value: string }>;\n} {\n  const rows: Array<{ label: string; value: string }> = [];\n  rows.push({\n    label: \"What happened\",\n    value: buildHumanAuthenticationStatusText(input.guidance),\n  });\n\n  rows.push({\n    label: \"Next\",\n    value:\n      input.mode === \"prompt\"\n        ? input.guidance.promptNextStep\n        : input.guidance.errorNextStep,\n  });\n\n  return {\n    title: input.guidance.title,\n    rows,\n  };\n}\n\nexport function buildAgentAuthenticationGuide(\n  guidance: AuthenticationGuidance\n): DualViewGuideInput {\n  if (guidance.reason === \"unavailable\") {\n    return {\n      summary: guidance.agentErrorMessage,\n      humanSteps: [\n        \"Retry the same command from a fresh CLI process.\",\n        ...formatOpenMeldCliCommands([\n          \"If it still fails, run `openmeld auth status --view agent` and share the diagnostics with the operator.\",\n        ]),\n      ],\n      agentCommands: [\n        \"Retry the same command once from a fresh CLI process.\",\n        ...formatOpenMeldCliCommands([\n          \"If it still fails, run `openmeld auth status --view agent` for diagnostics.\",\n        ]),\n      ],\n      notes: buildAgentAuthenticationNotes(guidance),\n    };\n  }\n  return {\n    summary: guidance.agentErrorMessage,\n    humanSteps: buildAgentAuthenticationHumanSteps(guidance),\n    agentCommands: [\n      \"Ask the operator to complete sign-in in a human terminal, then retry the same command.\",\n    ],\n    notes: buildAgentAuthenticationNotes(guidance),\n  };\n}\n\nexport function buildAuthenticationStatusLabel(\n  state: AuthSessionState | AuthenticationGuidanceReason\n): string {\n  switch (state) {\n    case \"valid\":\n      return \"signed in\";\n    case \"missing\":\n    case \"required\":\n      return \"sign in needed\";\n    case \"expired\":\n      return \"sign in expired\";\n    case \"invalid\":\n      return \"sign in needs refresh\";\n    case \"revoked\":\n      return \"sign in removed\";\n    case \"mismatch\":\n      return \"wrong OpenMeld environment\";\n    case \"unavailable\":\n      return \"saved sign-in unavailable\";\n    default:\n      return \"sign in needed\";\n  }\n}\n\nexport function resolveAuthenticationReasonFromState(\n  state: AuthSessionState\n): AuthenticationGuidanceReason | null {\n  switch (state) {\n    case \"missing\":\n      return \"required\";\n    case \"expired\":\n    case \"invalid\":\n    case \"revoked\":\n      return state;\n    default:\n      return null;\n  }\n}\n\nexport function isAuthenticationError(\n  error: unknown\n): error is OpenMeldAuthenticationError {\n  return error instanceof OpenMeldAuthenticationError;\n}\n\nexport function resolveAuthenticationGuidanceFromError(\n  error: unknown\n): AuthenticationGuidance | null {\n  if (error instanceof OpenMeldAuthenticationError) {\n    return error.guidance;\n  }\n\n  const message = error instanceof Error ? error.message : String(error ?? \"\");\n  return resolveAuthenticationGuidanceFromMessage(message);\n}\n\nexport function resolveAuthenticationGuidanceFromMessage(\n  message: string\n): AuthenticationGuidance | null {\n  const normalizedMessage = String(message ?? \"\").trim();\n  if (normalizedMessage.length === 0) {\n    return null;\n  }\n  const loweredMessage = normalizedMessage.toLowerCase();\n\n  const mismatch = AUTH_MISMATCH_ERROR_RE.exec(normalizedMessage);\n  if (mismatch?.[1] && mismatch[2]) {\n    return resolveAuthenticationGuidance({\n      reason: \"mismatch\",\n      authBaseUrl: mismatch[1],\n      gatewayUrl: mismatch[2],\n    });\n  }\n\n  if (normalizedMessage.includes(\"Current session is for\")) {\n    const parsed = AUTH_MISMATCH_SUMMARY_RE.exec(normalizedMessage);\n    return resolveAuthenticationGuidance({\n      reason: \"mismatch\",\n      authBaseUrl: parsed?.[1] ?? null,\n      gatewayUrl: parsed?.[2] ?? null,\n    });\n  }\n\n  if (loweredMessage.includes(\"auth session expired\")) {\n    return resolveAuthenticationGuidance({\n      reason: \"expired\",\n    });\n  }\n  if (loweredMessage.includes(\"invalid local auth session\")) {\n    return resolveAuthenticationGuidance({\n      reason: \"invalid\",\n    });\n  }\n  if (loweredMessage.includes(\"auth session revoked\")) {\n    return resolveAuthenticationGuidance({\n      reason: \"revoked\",\n    });\n  }\n  if (\n    loweredMessage.includes(\"saved sign-in is unavailable\") ||\n    loweredMessage.includes(\"saved sign-in is temporarily unavailable\")\n  ) {\n    return resolveAuthenticationGuidance({\n      reason: \"unavailable\",\n    });\n  }\n  if (\n    loweredMessage.includes(\"authentication required\") ||\n    loweredMessage.includes(\"auth.unauthenticated\") ||\n    loweredMessage.includes(\"auth.authentication_required\") ||\n    loweredMessage.includes(\"sign-in required\")\n  ) {\n    return resolveAuthenticationGuidance({\n      reason: \"required\",\n    });\n  }\n\n  return null;\n}\n\nexport function extractAuthenticationPromptAction(\n  promptMessage: string\n): string | null {\n  const normalizedMessage = String(promptMessage ?? \"\").trim();\n  if (normalizedMessage.length === 0) {\n    return null;\n  }\n  const match = AUTH_PROMPT_ACTION_RE.exec(normalizedMessage);\n  return normalizeOptionalString(match?.groups?.action);\n}\n\nfunction resolveRequiredAuthenticationGuidance(\n  reason: Exclude<AuthenticationGuidanceReason, \"mismatch\">\n): Omit<\n  AuthenticationGuidance,\n  \"reason\" | \"action\" | \"authBaseUrl\" | \"gatewayUrl\"\n> {\n  switch (reason) {\n    case \"unavailable\":\n      return {\n        title: \"OpenMeld Sign-In Unavailable\",\n        statusLabel: \"saved sign-in unavailable\",\n        summary: \"OpenMeld could not read this device's saved sign-in.\",\n        promptNextStep: formatInlineOpenMeldCliCommands(\n          \"Retry the same command. If it still fails, run `openmeld auth status --view agent` for diagnostics.\"\n        ),\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Retry the same command. If it still fails, run `openmeld auth status --view agent` for diagnostics.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"saved sign-in is unavailable; retry the same command once; if it still fails, run `openmeld auth status --view agent` for diagnostics\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"saved sign-in is unavailable; retry the same command once; if it still fails, run `openmeld auth status --view agent` for diagnostics\"\n        ),\n      };\n    case \"expired\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in expired\",\n        summary: \"Your OpenMeld sign-in has expired.\",\n        promptNextStep: \"Choose Sign in now to refresh and continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` again to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in expired; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in expired; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    case \"invalid\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in needs refresh\",\n        summary: \"This device's OpenMeld sign-in is no longer valid.\",\n        promptNextStep: \"Choose Sign in now to refresh and continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` again to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"local sign-in is invalid; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"local sign-in is invalid; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    case \"revoked\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in removed\",\n        summary: \"Your OpenMeld sign-in was revoked.\",\n        promptNextStep: \"Choose Sign in now to refresh and continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` again to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in was revoked; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in was revoked; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    case \"required\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in needed\",\n        summary: \"You're not signed in to OpenMeld yet.\",\n        promptNextStep: \"Choose Sign in now to continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    default:\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in needed\",\n        summary: \"You're not signed in to OpenMeld yet.\",\n        promptNextStep: \"Choose Sign in now to continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n  }\n}\n\nfunction buildHumanAuthenticationStatusText(\n  guidance: AuthenticationGuidance\n): string {\n  const actionText = guidance.action\n    ? ` before ${guidance.action}`\n    : \" to continue\";\n  if (guidance.reason === \"mismatch\") {\n    return `Sign in to the right OpenMeld environment${actionText}.`;\n  }\n  if (guidance.reason === \"unavailable\") {\n    return `OpenMeld could not read this device's saved sign-in${actionText}.`;\n  }\n  if (\n    guidance.reason === \"expired\" ||\n    guidance.reason === \"invalid\" ||\n    guidance.reason === \"revoked\"\n  ) {\n    return `Sign in again${actionText}.`;\n  }\n  return `Sign in${actionText}.`;\n}\n\nfunction buildAgentAuthenticationHumanSteps(\n  guidance: AuthenticationGuidance\n): string[] {\n  const retryStep = guidance.action\n    ? `Retry after sign-in, then continue ${guidance.action}.`\n    : \"Retry the same command after sign-in finishes.\";\n  const steps = [...formatOpenMeldCliCommands([\"openmeld login\"]), retryStep];\n  if (guidance.reason === \"mismatch\" && guidance.gatewayUrl) {\n    steps.splice(\n      1,\n      0,\n      `Use the OpenMeld environment for ${guidance.gatewayUrl}.`\n    );\n  }\n  return steps;\n}\n\nfunction buildAgentAuthenticationNotes(\n  guidance: AuthenticationGuidance\n): string[] {\n  const notes: string[] = [];\n  if (guidance.action) {\n    notes.push(`Blocked action: ${guidance.action}`);\n  }\n  if (guidance.authBaseUrl) {\n    notes.push(`Current sign-in: ${guidance.authBaseUrl}`);\n  }\n  if (guidance.gatewayUrl) {\n    notes.push(`Current gateway: ${guidance.gatewayUrl}`);\n  }\n  return notes;\n}\n\nfunction normalizeOptionalString(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import { randomUUID } from \"node:crypto\";\nimport { mkdir, readFile, rename, rm, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { daemonRuntimeDataPath } from \"../../config/daemon-state\";\nimport { OPENMELD_HOME_ENV_KEY } from \"../../config/paths\";\n\nconst CATALOG_SYNC_SIGNAL_FILE = \"catalog-sync-signal.json\";\nconst CATALOG_SYNC_SIGNAL_SCHEMA = \"openmeld-daemon-catalog-sync-signal-v1\";\n\nexport type DaemonCatalogSyncSignal = {\n  signalId?: string;\n  updatedAt: string;\n  updatedAtMs: number;\n  reason: string;\n};\n\ntype DaemonCatalogSyncSignalFile = {\n  signalId?: string;\n  v: 1;\n  schema: string;\n  updatedAt: string;\n  reason: string;\n};\n\nexport async function touchDaemonCatalogSyncSignal(input: {\n  reason: string;\n  rootDir?: string;\n}): Promise<void> {\n  const now = new Date().toISOString();\n  const runtimeDataPath = resolveDaemonRuntimeDataPath(input.rootDir);\n  const signalPath = daemonCatalogSyncSignalPath(runtimeDataPath);\n  await mkdir(runtimeDataPath, { recursive: true });\n  const next: DaemonCatalogSyncSignalFile = {\n    signalId: randomUUID(),\n    v: 1,\n    schema: CATALOG_SYNC_SIGNAL_SCHEMA,\n    updatedAt: now,\n    reason: normalizeReason(input.reason),\n  };\n\n  const tempPath = `${signalPath}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n  try {\n    await writeFile(tempPath, `${JSON.stringify(next, null, 2)}\\n`, \"utf8\");\n    await rename(tempPath, signalPath);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nexport async function readDaemonCatalogSyncSignal(\n  input: { rootDir?: string } = {}\n): Promise<DaemonCatalogSyncSignal | null> {\n  const raw = await readFile(\n    daemonCatalogSyncSignalPath(resolveDaemonRuntimeDataPath(input.rootDir)),\n    \"utf8\"\n  ).catch(() => null);\n  if (!raw) {\n    return null;\n  }\n\n  try {\n    const parsed = JSON.parse(raw) as Partial<DaemonCatalogSyncSignalFile>;\n    if (parsed.v !== 1) {\n      return null;\n    }\n    if (\n      parsed.schema !== CATALOG_SYNC_SIGNAL_SCHEMA ||\n      typeof parsed.updatedAt !== \"string\" ||\n      parsed.updatedAt.trim().length === 0 ||\n      typeof parsed.reason !== \"string\"\n    ) {\n      return null;\n    }\n    const updatedAt = parsed.updatedAt.trim();\n    const updatedAtMs = Date.parse(updatedAt);\n    if (!Number.isFinite(updatedAtMs) || updatedAtMs <= 0) {\n      return null;\n    }\n    return {\n      ...(typeof parsed.signalId === \"string\" && parsed.signalId.trim()\n        ? { signalId: parsed.signalId.trim() }\n        : {}),\n      updatedAt,\n      updatedAtMs,\n      reason: normalizeReason(parsed.reason),\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction daemonCatalogSyncSignalPath(runtimeDataPath: string): string {\n  return join(runtimeDataPath, CATALOG_SYNC_SIGNAL_FILE);\n}\n\nfunction resolveDaemonRuntimeDataPath(rootDir: string | undefined): string {\n  if (!rootDir) {\n    return daemonRuntimeDataPath();\n  }\n  return daemonRuntimeDataPath({\n    env: { ...process.env, [OPENMELD_HOME_ENV_KEY]: rootDir },\n  });\n}\n\nfunction normalizeReason(value: string): string {\n  const normalized = value.trim();\n  if (normalized.length > 0) {\n    return normalized;\n  }\n  return \"local_state_changed\";\n}\n","import {\n  ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE,\n  ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE,\n} from \"@openmeld/schemas\";\n\nexport function assertAdditionalHumanProfileCreationEnabled(input: {\n  additionalHumanProfileCreationEnabled: boolean;\n  cause?: unknown;\n}): void {\n  if (input.additionalHumanProfileCreationEnabled) {\n    return;\n  }\n  throw Object.assign(\n    new Error(ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, {\n      cause: input.cause,\n    }),\n    {\n      code: ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE,\n    }\n  );\n}\n","import {\n  ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE,\n  authProfileManagedRoleSchema,\n  profileCapabilitiesResponseSchema,\n  profileErrorResponseSchema,\n} from \"@openmeld/schemas\";\nimport type { z } from \"zod/v4\";\nimport {\n  createAuthenticationError,\n  resolveAuthenticationReasonFromState,\n} from \"../auth/auth-guidance\";\nimport { touchDaemonCatalogSyncSignal } from \"../local-service/state/catalog-sync-signal\";\nimport { getAuthSessionState, type StoredAuthSession } from \"./auth-session\";\nimport { isLoopbackHostname } from \"./loopback-hostname\";\nimport { assertAdditionalHumanProfileCreationEnabled } from \"./profile-creation-capability\";\n\nexport type OpenMeldProfileKind = \"human\" | \"agent\" | \"system\";\nexport type OpenMeldProfileStatus = \"active\" | \"disabled\";\nexport type OpenMeldProfileManagedRole = z.infer<\n  typeof authProfileManagedRoleSchema\n>;\nexport type OpenMeldProfileCapabilities = z.infer<\n  typeof profileCapabilitiesResponseSchema\n>;\n\nexport type OpenMeldProfile = {\n  openMeldProfileId: string;\n  profileName: string;\n  profileHandle: string;\n  profileKind: OpenMeldProfileKind;\n  isDefault?: boolean;\n  status: OpenMeldProfileStatus;\n  ownerUserId: string;\n  ownerName?: string;\n  source: string;\n  managedRole?: OpenMeldProfileManagedRole | null;\n  createdByUserId: string | null;\n  defaultProjectId?: string | null;\n  creationActorProfileId?: string | null;\n  creatorProfileId?: string | null;\n  lastUsedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n};\n\nconst VALIDATED_SESSION_CACHE_TTL_MS = 5000;\nconst DEFAULT_OPENMELD_PROFILES_API_TIMEOUT_MS = 10_000;\nconst LOOPBACK_OPENMELD_PROFILES_API_TIMEOUT_MS = 2500;\nconst PROFILE_HANDLE_PREFIX_RE = /^@+/;\n\nlet validatedSessionCache: {\n  session: StoredAuthSession;\n  validatedAtMs: number;\n} | null = null;\n\nexport function resetOpenMeldProfilesSessionCacheForTests(): void {\n  validatedSessionCache = null;\n}\n\nexport function primeOpenMeldProfilesSessionCache(\n  session: StoredAuthSession\n): void {\n  validatedSessionCache = {\n    session,\n    validatedAtMs: Date.now(),\n  };\n}\n\nclass AuthProfilesApiError extends Error {\n  readonly status: number;\n  readonly endpoint: string;\n  readonly code: string | null;\n\n  constructor(input: {\n    message: string;\n    status: number;\n    endpoint: string;\n    code?: string | null;\n  }) {\n    super(input.message);\n    this.name = \"AuthProfilesApiError\";\n    this.status = input.status;\n    this.endpoint = input.endpoint;\n    this.code = normalizeOptionalString(input.code);\n  }\n}\n\nfunction isAuthProfilesApiError(error: unknown): error is AuthProfilesApiError {\n  return error instanceof AuthProfilesApiError;\n}\n\nexport async function listOpenMeldProfiles(): Promise<OpenMeldProfile[]> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"GET\",\n    path: \"/v1/profiles\",\n  });\n\n  const profiles = readArrayField(payload, \"profiles\");\n  return profiles.map(parseOpenMeldProfileItem);\n}\n\nexport async function getOpenMeldProfileCapabilities(): Promise<OpenMeldProfileCapabilities> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"GET\",\n    path: \"/v1/profiles/capabilities\",\n  });\n  const parsed = profileCapabilitiesResponseSchema.safeParse(payload);\n  if (!parsed.success) {\n    throw new Error(\"invalid profile capabilities payload\", {\n      cause: parsed.error,\n    });\n  }\n  return parsed.data;\n}\n\nexport async function resolveOpenMeldProfile(input: {\n  openMeldProfileId?: string;\n  profileKind?: OpenMeldProfileKind;\n}): Promise<OpenMeldProfile> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/resolve\",\n    body: {\n      ...(normalizeOptionalString(input.openMeldProfileId)\n        ? {\n            openMeldProfileId: normalizeOptionalString(input.openMeldProfileId),\n          }\n        : {}),\n      ...(input.profileKind ? { profileKind: input.profileKind } : {}),\n    },\n  });\n\n  return parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n}\n\nexport async function resolveOpenMeldProfileByIdOrName(input: {\n  profileIdentifier: string;\n  profileKind?: OpenMeldProfileKind;\n}): Promise<OpenMeldProfile> {\n  const profileIdentifier = normalizeOptionalString(input.profileIdentifier);\n  if (!profileIdentifier) {\n    throw new Error(\"profile identifier is required\");\n  }\n\n  try {\n    return await resolveOpenMeldProfile({\n      openMeldProfileId: profileIdentifier,\n      ...(input.profileKind ? { profileKind: input.profileKind } : {}),\n    });\n  } catch (idError) {\n    const matched = await findOpenMeldProfileByNameOrHandle({\n      profileIdentifier,\n      ...(input.profileKind ? { profileKind: input.profileKind } : {}),\n    });\n    if (matched.status === \"found\") {\n      return matched.profile;\n    }\n    if (matched.status === \"ambiguous\") {\n      throw new Error(\n        `OpenMeld profile name is ambiguous: ${profileIdentifier}. Pass the profile ID instead.`\n      );\n    }\n    if (isAuthProfilesApiError(idError)) {\n      throw new Error(`OpenMeld profile not found: ${profileIdentifier}`);\n    }\n    throw idError;\n  }\n}\n\nexport function createOpenMeldAgentProfile(input: {\n  profileName: string;\n  creatorProfileId?: string | null;\n}): Promise<OpenMeldProfile> {\n  const profileName = normalizeOptionalString(input.profileName);\n  const creatorProfileId =\n    normalizeOptionalString(input.creatorProfileId) ?? undefined;\n  if (!profileName) {\n    throw new Error(\"profile name is required\");\n  }\n  return createOpenMeldAgentProfileRequest({\n    profileName,\n    ...(creatorProfileId ? { creatorProfileId } : {}),\n  });\n}\n\nexport function ensureOpenMeldManagedAgentProfile(input: {\n  profileName: string;\n  managedRole: OpenMeldProfileManagedRole;\n  creatorProfileId?: string | null;\n}): Promise<OpenMeldProfile> {\n  const profileName = normalizeOptionalString(input.profileName);\n  const creatorProfileId =\n    normalizeOptionalString(input.creatorProfileId) ?? undefined;\n  if (!profileName) {\n    throw new Error(\"profile name is required\");\n  }\n  return ensureOpenMeldManagedAgentProfileRequest({\n    profileName,\n    managedRole: input.managedRole,\n    ...(creatorProfileId ? { creatorProfileId } : {}),\n  });\n}\n\nexport async function createOpenMeldHumanProfile(input: {\n  profileName: string;\n  creatorProfileId?: string | null;\n}): Promise<OpenMeldProfile> {\n  const profileName = normalizeOptionalString(input.profileName);\n  const creatorProfileId =\n    normalizeOptionalString(input.creatorProfileId) ?? undefined;\n  if (!profileName) {\n    throw new Error(\"profile name is required\");\n  }\n\n  try {\n    const capabilities = await getOpenMeldProfileCapabilities();\n    assertAdditionalHumanProfileCreationEnabled(capabilities);\n  } catch (error) {\n    if (\n      error instanceof Error &&\n      \"code\" in error &&\n      error.code === ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE\n    ) {\n      throw error;\n    }\n    assertAdditionalHumanProfileCreationEnabled({\n      additionalHumanProfileCreationEnabled: false,\n      cause: error,\n    });\n  }\n\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/humans\",\n    body: {\n      profileName,\n      ...(creatorProfileId ? { creatorProfileId } : {}),\n    },\n  });\n\n  const created = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_created\");\n  return created;\n}\n\nexport async function updateOpenMeldProfile(input: {\n  openMeldProfileId: string;\n  profileName?: string;\n}): Promise<OpenMeldProfile> {\n  const openMeldProfileId = normalizeOptionalString(input.openMeldProfileId);\n  if (!openMeldProfileId) {\n    throw new Error(\"openMeldProfileId is required\");\n  }\n\n  const profileName = normalizeOptionalString(input.profileName);\n  const hasProfileName = Boolean(profileName);\n\n  if (!hasProfileName) {\n    throw new Error(\"profileName is required\");\n  }\n\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"PATCH\",\n    path: `/v1/profiles/${encodeURIComponent(openMeldProfileId)}`,\n    body: {\n      ...(profileName ? { profileName } : {}),\n    },\n  });\n\n  const updated = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_updated\");\n  return updated;\n}\n\nexport async function deleteOpenMeldProfile(input: {\n  openMeldProfileId: string;\n}): Promise<OpenMeldProfile> {\n  const openMeldProfileId = normalizeOptionalString(input.openMeldProfileId);\n  if (!openMeldProfileId) {\n    throw new Error(\"openMeldProfileId is required\");\n  }\n\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"DELETE\",\n    path: `/v1/profiles/${encodeURIComponent(openMeldProfileId)}`,\n  });\n\n  const deleted = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_deleted\");\n  return deleted;\n}\n\nasync function requestOpenMeldProfilesApi(input: {\n  method: \"GET\" | \"POST\" | \"DELETE\" | \"PATCH\";\n  path: string;\n  body?: Record<string, unknown>;\n}): Promise<Record<string, unknown>> {\n  const session = await requireOpenMeldProfilesSession();\n  const endpoint = toAuthEndpoint(session.authBaseUrl, input.path);\n  const response = await fetch(endpoint, {\n    method: input.method,\n    headers: {\n      Authorization: `${normalizeTokenType(session.tokenType)} ${session.accessToken}`,\n      ...(input.body ? { \"content-type\": \"application/json\" } : {}),\n    },\n    ...(input.body ? { body: JSON.stringify(input.body) } : {}),\n    signal: AbortSignal.timeout(resolveOpenMeldProfilesApiTimeoutMs(endpoint)),\n  });\n\n  const payload = await parseResponseJson(response);\n\n  if (!response.ok) {\n    const parsedError = profileErrorResponseSchema.safeParse(payload);\n    const status = response.status;\n    const code = parsedError.success ? parsedError.data.code : null;\n    if (status === 401 || status === 403 || code === \"auth.unauthenticated\") {\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: \"required\",\n      });\n    }\n\n    const message = resolveProfilesApiErrorMessage({\n      payload: parsedError.success ? parsedError.data : payload,\n      status,\n      code,\n      endpoint,\n    });\n    throw new AuthProfilesApiError({\n      status,\n      endpoint,\n      code,\n      message,\n    });\n  }\n\n  const record = isRecord(payload) ? payload : {};\n  const ok = readBooleanField(record, \"ok\");\n  if (!ok) {\n    const parsedError = profileErrorResponseSchema.safeParse(payload);\n    const code = parsedError.success ? parsedError.data.code : null;\n    throw new AuthProfilesApiError({\n      status: response.status,\n      endpoint,\n      code,\n      message: resolveProfilesApiErrorMessage({\n        payload: parsedError.success ? parsedError.data : payload,\n        status: response.status,\n        code,\n        endpoint,\n      }),\n    });\n  }\n\n  return record;\n}\n\nasync function createOpenMeldAgentProfileRequest(input: {\n  profileName: string;\n  creatorProfileId?: string;\n}): Promise<OpenMeldProfile> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/agents\",\n    body: {\n      profileName: input.profileName,\n      ...(input.creatorProfileId\n        ? { creatorProfileId: input.creatorProfileId }\n        : {}),\n    },\n  });\n\n  const created = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_created\");\n  return created;\n}\n\nasync function ensureOpenMeldManagedAgentProfileRequest(input: {\n  profileName: string;\n  managedRole: OpenMeldProfileManagedRole;\n  creatorProfileId?: string;\n}): Promise<OpenMeldProfile> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/agents/managed/ensure\",\n    body: {\n      profileName: input.profileName,\n      managedRole: input.managedRole,\n      ...(input.creatorProfileId\n        ? { creatorProfileId: input.creatorProfileId }\n        : {}),\n    },\n  });\n\n  const ensured = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_ensured\");\n  return ensured;\n}\n\nasync function requireOpenMeldProfilesSession(): Promise<StoredAuthSession> {\n  const now = Date.now();\n  if (\n    validatedSessionCache &&\n    now - validatedSessionCache.validatedAtMs <= VALIDATED_SESSION_CACHE_TTL_MS\n  ) {\n    const localState = await getAuthSessionState({\n      validateRemote: false,\n    });\n    if (\n      localState.state === \"valid\" &&\n      localState.session &&\n      isSameStoredAuthSession(localState.session, validatedSessionCache.session)\n    ) {\n      return validatedSessionCache.session;\n    }\n    validatedSessionCache = null;\n  }\n\n  const state = await getAuthSessionState({\n    validateRemote: true,\n  });\n\n  switch (state.state) {\n    case \"valid\": {\n      if (!state.session) {\n        throw new Error(\"auth session unavailable\");\n      }\n      validatedSessionCache = {\n        session: state.session,\n        validatedAtMs: now,\n      };\n      return state.session;\n    }\n    case \"missing\":\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: \"required\",\n      });\n    case \"expired\":\n    case \"invalid\":\n    case \"revoked\":\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: resolveAuthenticationReasonFromState(state.state) ?? \"required\",\n      });\n    default:\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: \"required\",\n      });\n  }\n}\n\nfunction resolveOpenMeldProfilesApiTimeoutMs(endpoint: string): number {\n  const url = parseUrlOrNull(endpoint);\n  if (url && isLoopbackHostname(url.hostname)) {\n    return LOOPBACK_OPENMELD_PROFILES_API_TIMEOUT_MS;\n  }\n  return DEFAULT_OPENMELD_PROFILES_API_TIMEOUT_MS;\n}\n\nfunction parseUrlOrNull(value: string): URL | null {\n  try {\n    return new URL(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction isSameStoredAuthSession(\n  a: StoredAuthSession,\n  b: StoredAuthSession\n): boolean {\n  return (\n    a.authBaseUrl === b.authBaseUrl &&\n    a.clientId === b.clientId &&\n    a.tokenType === b.tokenType &&\n    a.accessToken === b.accessToken &&\n    (a.expiresAt ?? null) === (b.expiresAt ?? null)\n  );\n}\n\nasync function emitRouteCatalogSync(reason: string): Promise<void> {\n  await touchDaemonCatalogSyncSignal({ reason }).catch(() => undefined);\n}\n\nfunction parseOpenMeldProfileItem(value: unknown): OpenMeldProfile {\n  const record = isRecord(value) ? value : {};\n\n  const openMeldProfileId = readOptionalStringField(\n    record,\n    \"openMeldProfileId\"\n  );\n  if (!openMeldProfileId) {\n    throw new Error(\"invalid profile payload: missing openMeldProfileId\");\n  }\n\n  const profileName = readRequiredStringField(record, \"profileName\");\n  const profileHandle = readRequiredStringField(record, \"profileHandle\");\n  const profileKind = readProfileKind(record, \"profileKind\");\n  const isDefault = readOptionalBooleanField(record, \"isDefault\") ?? false;\n  const status = readProfileStatus(record, \"status\");\n  const ownerUserId = readRequiredStringField(record, \"ownerUserId\");\n  const ownerName = readOptionalStringField(record, \"ownerName\") ?? undefined;\n  const source = readRequiredStringField(record, \"source\");\n  const managedRole = readOptionalManagedRoleField(record, \"managedRole\");\n  const createdByUserId =\n    readOptionalStringField(record, \"createdByUserId\") ?? null;\n  const defaultProjectId = readOptionalStringField(record, \"defaultProjectId\");\n  const creationActorProfileId =\n    readOptionalStringField(record, \"creationActorProfileId\") ?? null;\n  const creatorProfileId =\n    readOptionalStringField(record, \"creatorProfileId\") ?? null;\n  const lastUsedAt = readOptionalStringField(record, \"lastUsedAt\");\n  const createdAt = readRequiredStringField(record, \"createdAt\");\n  const updatedAt = readRequiredStringField(record, \"updatedAt\");\n\n  return {\n    openMeldProfileId,\n    profileName,\n    profileHandle,\n    profileKind,\n    isDefault,\n    status,\n    ownerUserId,\n    ...(ownerName ? { ownerName } : {}),\n    source,\n    managedRole,\n    createdByUserId,\n    defaultProjectId,\n    creationActorProfileId,\n    creatorProfileId,\n    lastUsedAt,\n    createdAt,\n    updatedAt,\n  };\n}\n\nfunction readProfileKind(\n  input: Record<string, unknown>,\n  field: string\n): OpenMeldProfileKind {\n  const value = readRequiredStringField(input, field);\n  if (value === \"human\" || value === \"agent\" || value === \"system\") {\n    return value;\n  }\n  throw new Error(`invalid profile payload: unsupported ${field}`);\n}\n\nfunction readProfileStatus(\n  input: Record<string, unknown>,\n  field: string\n): OpenMeldProfileStatus {\n  const value = readRequiredStringField(input, field);\n  if (value === \"active\" || value === \"disabled\") {\n    return value;\n  }\n  throw new Error(`invalid profile payload: unsupported ${field}`);\n}\n\nfunction readOptionalManagedRoleField(\n  input: Record<string, unknown>,\n  field: string\n): OpenMeldProfileManagedRole | null {\n  const value = readOptionalStringField(input, field);\n  if (!value) {\n    return null;\n  }\n  const parsed = authProfileManagedRoleSchema.safeParse(value);\n  if (parsed.success) {\n    return parsed.data;\n  }\n  throw new Error(`invalid profile payload: unsupported ${field}`);\n}\n\nfunction readRecordField(\n  input: Record<string, unknown>,\n  field: string\n): Record<string, unknown> {\n  const value = input[field];\n  if (isRecord(value)) {\n    return value;\n  }\n  throw new Error(`invalid api payload: missing ${field}`);\n}\n\nfunction readArrayField(\n  input: Record<string, unknown>,\n  field: string\n): Record<string, unknown>[] {\n  const value = input[field];\n  if (!Array.isArray(value)) {\n    throw new Error(`invalid api payload: missing ${field}`);\n  }\n\n  return value.filter(isRecord);\n}\n\nfunction readRequiredStringField(\n  input: Record<string, unknown>,\n  field: string\n): string {\n  const value = normalizeOptionalString(input[field]);\n  if (!value) {\n    throw new Error(`invalid profile payload: missing ${field}`);\n  }\n  return value;\n}\n\nfunction readOptionalStringField(\n  input: Record<string, unknown>,\n  field: string\n): string | null {\n  return normalizeOptionalString(input[field]);\n}\n\nfunction readBooleanField(\n  input: Record<string, unknown>,\n  field: string\n): boolean {\n  return input[field] === true;\n}\n\nfunction readOptionalBooleanField(\n  input: Record<string, unknown>,\n  field: string\n): boolean | null {\n  const value = input[field];\n  if (typeof value === \"boolean\") {\n    return value;\n  }\n  return null;\n}\n\nfunction normalizeOptionalString(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction normalizeTokenType(tokenType: string): string {\n  const normalized = tokenType.trim();\n  return normalized.length > 0 ? normalized : \"Bearer\";\n}\n\nfunction toAuthEndpoint(baseUrl: string, pathname: string): string {\n  const url = new URL(baseUrl);\n  url.pathname = pathname;\n  url.search = \"\";\n  url.hash = \"\";\n  return url.toString();\n}\n\nasync function parseResponseJson(response: Response): Promise<unknown> {\n  const raw = await response.text();\n  if (!raw) {\n    return null;\n  }\n  try {\n    return JSON.parse(raw);\n  } catch {\n    return { message: raw };\n  }\n}\n\nfunction extractApiErrorMessage(payload: unknown, status: number): string {\n  const record = isRecord(payload) ? payload : {};\n  const message =\n    normalizeOptionalString(record.message) ??\n    normalizeOptionalString(record.error_description) ??\n    normalizeOptionalString(record.error);\n\n  if (message) {\n    return message;\n  }\n\n  return `request failed with status ${status}`;\n}\n\nfunction resolveProfilesApiErrorMessage(input: {\n  payload: unknown;\n  status: number;\n  code: string | null;\n  endpoint: string;\n}): string {\n  const message = extractApiErrorMessage(input.payload, input.status);\n  if (\n    input.status === 500 &&\n    input.code === \"profile.internal_error\" &&\n    isLoopbackProfileEndpoint(input.endpoint)\n  ) {\n    return (\n      \"internal error from local auth service; if profile schema changed, run \" +\n      \"`pnpm db:migrate:dev` and retry.\"\n    );\n  }\n  if (\n    input.status === 500 &&\n    input.code === \"profile.internal_error\" &&\n    isHostedProfilesEndpoint(input.endpoint)\n  ) {\n    return (\n      \"internal error from OpenMeld auth service while handling profile state. \" +\n      \"If this works in `openmeld-dev` but fails in `openmeld`, the hosted auth deployment \" +\n      \"is likely out of sync with the latest profile flow. Retry after the \" +\n      \"production auth deploy/migration is updated.\"\n    );\n  }\n\n  return message;\n}\n\nfunction normalizeProfileLookupKey(value: string): string {\n  return value.trim().replace(PROFILE_HANDLE_PREFIX_RE, \"\").toLowerCase();\n}\n\nasync function findOpenMeldProfileByNameOrHandle(input: {\n  profileIdentifier: string;\n  profileKind?: OpenMeldProfileKind;\n}): Promise<\n  | { status: \"found\"; profile: OpenMeldProfile }\n  | { status: \"ambiguous\" }\n  | { status: \"not_found\" }\n> {\n  const lookupKey = normalizeProfileLookupKey(input.profileIdentifier);\n  const matches = (await listOpenMeldProfiles()).filter((profile) => {\n    if (input.profileKind && profile.profileKind !== input.profileKind) {\n      return false;\n    }\n    return (\n      normalizeProfileLookupKey(profile.profileName) === lookupKey ||\n      normalizeProfileLookupKey(profile.profileHandle) === lookupKey\n    );\n  });\n\n  if (matches.length === 1) {\n    const profile = matches[0];\n    if (profile) {\n      return { status: \"found\", profile };\n    }\n  }\n  if (matches.length > 1) {\n    return { status: \"ambiguous\" };\n  }\n  return { status: \"not_found\" };\n}\n\nfunction isLoopbackProfileEndpoint(endpoint: string): boolean {\n  const url = parseUrlOrNull(endpoint);\n  return Boolean(\n    url &&\n      isLoopbackHostname(url.hostname) &&\n      url.pathname.startsWith(\"/v1/profiles\")\n  );\n}\n\nfunction isHostedProfilesEndpoint(endpoint: string): boolean {\n  const url = parseUrlOrNull(endpoint);\n  return Boolean(\n    url &&\n      !isLoopbackHostname(url.hostname) &&\n      url.pathname.startsWith(\"/v1/profiles\")\n  );\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value && typeof value === \"object\" && !Array.isArray(value));\n}\n","import {\n  CATALOG_SYNC_INTERVAL_MULTIPLIER as STRATEGY_CATALOG_SYNC_INTERVAL_MULTIPLIER,\n  CATALOG_SYNC_RETRY_INTERVAL_MS as STRATEGY_CATALOG_SYNC_RETRY_INTERVAL_MS,\n  CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS as STRATEGY_CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS,\n  DAEMON_RUNTIME_CONTRACT_EPOCH as STRATEGY_DAEMON_RUNTIME_CONTRACT_EPOCH,\n  DAEMON_STREAM_CONNECT_TIMEOUT_MS as STRATEGY_DAEMON_STREAM_CONNECT_TIMEOUT_MS,\n  DAEMON_STREAM_KEEPALIVE_INTERVAL_MS as STRATEGY_DAEMON_STREAM_KEEPALIVE_INTERVAL_MS,\n  DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS as STRATEGY_DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS,\n  DEFAULT_HEARTBEAT_INTERVAL_MS as STRATEGY_DEFAULT_HEARTBEAT_INTERVAL_MS,\n  HEARTBEAT_RESPONSE_TIMEOUT_MS as STRATEGY_HEARTBEAT_RESPONSE_TIMEOUT_MS,\n  MAX_CATALOG_SYNC_INTERVAL_MS as STRATEGY_MAX_CATALOG_SYNC_INTERVAL_MS,\n  MAX_HEARTBEAT_INTERVAL_MS as STRATEGY_MAX_HEARTBEAT_INTERVAL_MS,\n  MIN_CATALOG_SYNC_INTERVAL_MS as STRATEGY_MIN_CATALOG_SYNC_INTERVAL_MS,\n  MIN_HEARTBEAT_INTERVAL_MS as STRATEGY_MIN_HEARTBEAT_INTERVAL_MS,\n  PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS as STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS,\n  PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS as STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS,\n  REGISTER_RESPONSE_TIMEOUT_MS as STRATEGY_REGISTER_RESPONSE_TIMEOUT_MS,\n  RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS as STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS,\n  RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS as STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS,\n  RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS as STRATEGY_RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS,\n} from \"../../strategy-constants\";\n\nexport const ADAPTIVE_HEARTBEAT_GROWTH_FACTOR = 1.35;\nexport const ADAPTIVE_HEARTBEAT_JITTER_RATIO = 0.1;\nexport const CATALOG_SYNC_INTERVAL_MULTIPLIER =\n  STRATEGY_CATALOG_SYNC_INTERVAL_MULTIPLIER;\nexport const CATALOG_SYNC_RETRY_INTERVAL_MS =\n  STRATEGY_CATALOG_SYNC_RETRY_INTERVAL_MS;\nexport const CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS =\n  STRATEGY_CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS;\nexport const DAEMON_RUNTIME_CONTRACT_EPOCH =\n  STRATEGY_DAEMON_RUNTIME_CONTRACT_EPOCH;\nexport const DAEMON_STREAM_CONNECT_TIMEOUT_MS =\n  STRATEGY_DAEMON_STREAM_CONNECT_TIMEOUT_MS;\nexport const DAEMON_STREAM_KEEPALIVE_INTERVAL_MS =\n  STRATEGY_DAEMON_STREAM_KEEPALIVE_INTERVAL_MS;\nexport const DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS =\n  STRATEGY_DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS;\nexport const DEFAULT_HEARTBEAT_INTERVAL_MS =\n  STRATEGY_DEFAULT_HEARTBEAT_INTERVAL_MS;\nexport const HEARTBEAT_RESPONSE_TIMEOUT_MS =\n  STRATEGY_HEARTBEAT_RESPONSE_TIMEOUT_MS;\nexport const MAX_CATALOG_SYNC_INTERVAL_MS =\n  STRATEGY_MAX_CATALOG_SYNC_INTERVAL_MS;\nexport const MAX_HEARTBEAT_INTERVAL_MS = STRATEGY_MAX_HEARTBEAT_INTERVAL_MS;\nexport const MIN_CATALOG_SYNC_INTERVAL_MS =\n  STRATEGY_MIN_CATALOG_SYNC_INTERVAL_MS;\nexport const MIN_HEARTBEAT_INTERVAL_MS = STRATEGY_MIN_HEARTBEAT_INTERVAL_MS;\nexport const PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS =\n  STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS;\nexport const PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS =\n  STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS;\nexport const REGISTER_RESPONSE_TIMEOUT_MS =\n  STRATEGY_REGISTER_RESPONSE_TIMEOUT_MS;\nexport const RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS =\n  STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS;\nexport const RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS =\n  STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS;\nexport const RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS =\n  STRATEGY_RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS;\nexport const DEFAULT_RECONNECT_DELAY_MS = 1000;\nexport const MAX_RECONNECT_DELAY_MS = 10_000;\nexport const HEARTBEAT_CONSECUTIVE_FAILURES_BEFORE_CLOSE = 3;\nexport const CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS = 5000;\nexport const CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS = 5000;\nexport const CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS = 15_000;\nexport const DAEMON_DEVICE_ID_FILE = \"daemon-device-id.txt\";\nexport const CONTEXT_STORE_FILE = \"daemon-context-map.json\";\nexport const LEDGER_DIR_NAME = \"openMeldDaemon-ledger\";\nexport const DAEMON_RUNTIME_CONTRACT_META_FILE = \"runtime-contract-meta.json\";\nexport const DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE =\n  \"runtime-contract-repair-report.json\";\nexport const OPENMELD_CLI_NPX_COMMAND = \"npx -y openmeld@latest\";\nexport const SPACE_HISTORY_BOOTSTRAP_LIMIT = 200;\nexport const BOOTSTRAP_INJECTION_KEY_SEPARATOR = \"::\";\n","import { runtimeTransportModeSchema } from \"@openmeld/schemas\";\nimport type { RuntimeTransportMode } from \"@openmeld/schemas/types\";\nimport {\n  sleep as sharedSleep,\n  toErrorMessage as sharedToErrorMessage,\n} from \"@openmeld/utils\";\n\nimport type {\n  RuntimeAgentControllerConversationIdMappingSpec,\n  RuntimeAgentStreamingMode,\n  RuntimeAgentTransportMode,\n} from \"../../config/runtime-config\";\nimport type { Presenter } from \"../../runtime/presenter/types\";\nimport {\n  DEFAULT_HEARTBEAT_INTERVAL_MS,\n  MAX_HEARTBEAT_INTERVAL_MS,\n  MIN_HEARTBEAT_INTERVAL_MS,\n} from \"./constants\";\n\nexport function emitRunLine(input: {\n  code: string;\n  payload?: unknown;\n  presenter: Presenter;\n  text: string;\n}): void {\n  if (input.presenter.view === \"agent\") {\n    input.presenter.data({\n      code: input.code,\n      payload: {\n        message: input.text,\n        ...(input.payload === undefined ? {} : { payload: input.payload }),\n      },\n    });\n    return;\n  }\n  input.presenter.line({\n    code: input.code,\n    text: input.text,\n  });\n}\n\nexport function clampInteger(value: number, min: number, max: number): number {\n  return Math.min(max, Math.max(min, Math.trunc(value)));\n}\n\nexport function normalizeHeartbeatIntervalMs(\n  value: number | undefined\n): number {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) {\n    return DEFAULT_HEARTBEAT_INTERVAL_MS;\n  }\n  return clampInteger(\n    value,\n    MIN_HEARTBEAT_INTERVAL_MS,\n    MAX_HEARTBEAT_INTERVAL_MS\n  );\n}\n\nexport function parseTransportMode(\n  value: unknown\n): RuntimeAgentTransportMode | null {\n  const parsed = runtimeTransportModeSchema.safeParse(value);\n  return parsed.success ? parsed.data : null;\n}\n\nexport function parseStreamingMode(\n  value: unknown\n): RuntimeAgentStreamingMode | null {\n  if (value === \"final\" || value === \"stream\") {\n    return value;\n  }\n  return null;\n}\n\nexport function parseRuntimeTransportMode(\n  value: unknown\n): RuntimeTransportMode | null {\n  return parseTransportMode(value);\n}\n\nexport function parseDispatchSourceProfileKind(\n  value: unknown\n): \"agent\" | \"human\" | \"system\" | null {\n  const normalized = normalizeText(value).toLowerCase();\n  if (\n    normalized === \"agent\" ||\n    normalized === \"human\" ||\n    normalized === \"system\"\n  ) {\n    return normalized;\n  }\n  return null;\n}\n\nexport function parseContextIdMappingSpec(\n  value: unknown\n): RuntimeAgentControllerConversationIdMappingSpec | null {\n  const record = asRecord(value);\n  if (!record) {\n    return null;\n  }\n  const sourceField = normalizeOptionalText(record.sourceField);\n  const mappingVersion = normalizePositiveInteger(record.mappingVersion);\n  if (!(sourceField && mappingVersion)) {\n    return null;\n  }\n  return {\n    sourceField,\n    mappingVersion,\n  };\n}\n\nexport function parsePositiveInteger(value: unknown): number | null {\n  if (!(typeof value === \"number\" && Number.isInteger(value) && value > 0)) {\n    return null;\n  }\n  return value;\n}\n\nexport function normalizeNonNegativeInteger(value: unknown): number | null {\n  if (!(typeof value === \"number\" && Number.isInteger(value) && value >= 0)) {\n    return null;\n  }\n  return value;\n}\n\nexport function normalizePositiveInteger(value: unknown): number | null {\n  return parsePositiveInteger(value);\n}\n\nexport function asRecord(value: unknown): Record<string, unknown> | null {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n  return value as Record<string, unknown>;\n}\n\nexport function normalizeText(value: unknown): string {\n  return String(value ?? \"\").trim();\n}\n\nexport function normalizeOptionalText(value: unknown): string | null {\n  const normalized = normalizeText(value);\n  return normalized.length > 0 ? normalized : null;\n}\n\nexport function nowIsoString(): string {\n  return new Date().toISOString();\n}\n\ntype DaemonLogField =\n  | string\n  | number\n  | boolean\n  | null\n  | readonly (string | number | boolean | null)[];\n\nexport function warnDaemonEvent(\n  eventName: string,\n  fields: Record<string, DaemonLogField | undefined>\n): void {\n  const definedFields = Object.fromEntries(\n    Object.entries(fields).filter((entry) => entry[1] !== undefined)\n  );\n  console.warn(\n    `${nowIsoString()} ${eventName} ${JSON.stringify(definedFields)}`\n  );\n}\n\nexport const toErrorMessage: (error: unknown) => string = sharedToErrorMessage;\n\nexport const sleep: (delayMs: number) => Promise<void> = sharedSleep;\n\nexport function dirnamePath(path: string): string {\n  const lastSlash = Math.max(path.lastIndexOf(\"/\"), path.lastIndexOf(\"\\\\\"));\n  if (lastSlash <= 0) {\n    return \".\";\n  }\n  return path.slice(0, lastSlash);\n}\n","import { randomUUID } from \"node:crypto\";\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { daemonRuntimeRootPath } from \"../../config/daemon-state\";\nimport { systemDir } from \"../../config/paths\";\nimport {\n  CONTEXT_STORE_FILE,\n  DAEMON_DEVICE_ID_FILE,\n  DAEMON_RUNTIME_CONTRACT_META_FILE,\n  DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE,\n  LEDGER_DIR_NAME,\n} from \"../core/constants\";\nimport { dirnamePath, normalizeOptionalText } from \"../core/logger\";\nimport type { DaemonRuntimePaths, LedgerPaths } from \"../core/types\";\n\nexport function resolvePreferredDaemonDeviceId(input: {\n  explicitDeviceId?: string;\n  contractDeviceId?: string | null;\n}): string | undefined {\n  return (\n    normalizeOptionalText(input.explicitDeviceId) ??\n    normalizeOptionalText(input.contractDeviceId) ??\n    undefined\n  );\n}\n\nexport async function resolveDaemonDeviceId(input: {\n  deviceId?: string;\n  deviceIdPath: string;\n  shouldDiscardPersistedDeviceId?: (deviceId: string) => boolean;\n}): Promise<string> {\n  const explicit = normalizeOptionalText(input.deviceId);\n  if (explicit) {\n    await persistDaemonDeviceIdIfNeeded({\n      deviceId: explicit,\n      deviceIdPath: input.deviceIdPath,\n    });\n    return explicit;\n  }\n\n  const persisted = normalizeOptionalText(\n    await readFile(input.deviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (\n    persisted &&\n    !(input.shouldDiscardPersistedDeviceId?.(persisted) ?? false)\n  ) {\n    return persisted;\n  }\n\n  const generated = randomUUID();\n  await writeDaemonDeviceId({\n    deviceId: generated,\n    deviceIdPath: input.deviceIdPath,\n  });\n  return generated;\n}\n\nexport async function ensureDaemonRuntimePaths(): Promise<DaemonRuntimePaths> {\n  const dataRootPath = join(daemonRuntimeRootPath(), \"data\");\n  const contextStorePath = join(dataRootPath, CONTEXT_STORE_FILE);\n  const deviceIdPath = daemonDeviceIdPath();\n  const legacyDeviceIdPath = join(dataRootPath, DAEMON_DEVICE_ID_FILE);\n  const ledgerRootPath = join(dataRootPath, LEDGER_DIR_NAME);\n  await mkdir(dataRootPath, {\n    recursive: true,\n  });\n  await mkdir(ledgerRootPath, {\n    recursive: true,\n  });\n  await mkdir(dirnamePath(deviceIdPath), { recursive: true });\n  await migrateLegacyDaemonDeviceId({ deviceIdPath, legacyDeviceIdPath });\n  return {\n    contractMetaPath: join(dataRootPath, DAEMON_RUNTIME_CONTRACT_META_FILE),\n    contractRepairReportPath: join(\n      dataRootPath,\n      DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE\n    ),\n    contextStorePath,\n    dataRootPath,\n    deviceIdPath,\n    ledgerRootPath,\n  };\n}\n\nexport function daemonDeviceIdPath(): string {\n  return join(systemDir(), DAEMON_DEVICE_ID_FILE);\n}\n\nexport function buildLedgerPaths(ledgerRootPath: string): LedgerPaths {\n  return {\n    backupStateFilePath: join(ledgerRootPath, \"state.backup.json\"),\n    historyFilePath: join(ledgerRootPath, \"history.ndjson\"),\n    historyTempFilePath: join(ledgerRootPath, \"history.tmp\"),\n    rootDirPath: ledgerRootPath,\n    stateFilePath: join(ledgerRootPath, \"state.json\"),\n    stateTempFilePath: join(ledgerRootPath, \"state.tmp\"),\n  };\n}\n\nasync function persistDaemonDeviceIdIfNeeded(input: {\n  deviceId: string;\n  deviceIdPath: string;\n}): Promise<void> {\n  const persisted = normalizeOptionalText(\n    await readFile(input.deviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (persisted === input.deviceId) {\n    return;\n  }\n  await writeDaemonDeviceId(input);\n}\n\nasync function writeDaemonDeviceId(input: {\n  deviceId: string;\n  deviceIdPath: string;\n}): Promise<void> {\n  await mkdir(dirnamePath(input.deviceIdPath), { recursive: true });\n  await writeFile(input.deviceIdPath, `${input.deviceId}\\n`, \"utf8\");\n}\n\nasync function migrateLegacyDaemonDeviceId(input: {\n  deviceIdPath: string;\n  legacyDeviceIdPath: string;\n}): Promise<void> {\n  const current = normalizeOptionalText(\n    await readFile(input.deviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (current) {\n    return;\n  }\n  const legacy = normalizeOptionalText(\n    await readFile(input.legacyDeviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (!legacy) {\n    return;\n  }\n  await writeDaemonDeviceId({\n    deviceId: legacy,\n    deviceIdPath: input.deviceIdPath,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAYA,MAAM,yCAAyC;AAC/C,MAAM,gCAAgC,IAAI,aAAa;CACtD,oBAAoB,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC7C,WAAW,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC/C,kCAAkC,uCAAuC,SAAS;CAClF,+BAA+B,oCAAoC,SAAS;CAC5E,uBAAuB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC9D,sBAAsB;CACtB,oBAAoB,yBAAyB,SAAS;CACtD,oBAAoB,+BAA+B,SAAS;CAC5D,gBAAgB,2CAA2C,SAAS,CAAC,CAAC,SAAS;CAC/E,WAAW;CACX,eAAe;CACf,eAAe;CACf,0BAA0B,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAC/D,CAAC;AACD,MAAM,oCAAoC,IAAI,aAAa;CAC1D,UAAU,IAAI,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC;CAC3C,sBAAsB,IAAI,QAAQ,uCAAuC;CACzE,aAAa,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CACtC,MAAM;CACN,iBAAiB,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC1C,YAAY,IAAI,MAAM,oBAAoB;CAC1C,QAAQ,IAAI,MAAM,6BAA6B;CAC/C,iBAAiB,IAAI,MAAM,0BAA0B;AACtD,CAAC;AACD,MAAM,gCAAgC,IAAI,mBAAmB,KAAK;CACjE,kCAAkC,OAAO;EACxC,GAAG,IAAI,QAAQ,CAAC;EAChB,QAAQ,IAAI,QAAQ,wCAAwC;CAC7D,CAAC;CACD,kCAAkC,OAAO;EACxC,GAAG,IAAI,QAAQ,CAAC;EAChB,QAAQ,IAAI,QAAQ,wCAAwC;CAC7D,CAAC;CACD,kCAAkC,OAAO;EACxC,GAAG,IAAI,QAAQ,CAAC;EAChB,QAAQ,IAAI,QAAQ,sCAAsC;CAC3D,CAAC;AACF,CAAC,CAAC,CAAC,aAAa,OAAO,QAAQ;CAC9B,MAAM,WAAW,IAAI,IAAI,MAAM,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;CACrE,KAAK,MAAM,aAAa,MAAM,YAAY,IAAI,CAAC,SAAS,IAAI,SAAS,GAAG,IAAI,SAAS;EACpF,MAAM;EACN,SAAS;EACT,MAAM,CAAC,YAAY;CACpB,CAAC;AACF,CAAC;;;ACtCD,SAAgB,8BAA8B,OAEnB;CACzB,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,CAAC,SACH,OAAO;EACL,KAAK,oBAAoB,CAAC,CAAC;EAC3B,QAAQ;CACV;CAGF,MAAM,oBAAoBA,0BAAwB,QAAQ,WAAW;CACrE,MAAM,UAAU,eAAe,iBAAiB;CAChD,MAAM,OAAO,cAAc,QAAQ,IAAI;CACvC,MAAM,UACJ,MAAM,MACN,MAAM,SACN,0BAA0B;EACxB,aAAa;EACb,UAAUA,0BAAwB,QAAQ,QAAQ;EAClD,WAAWA,0BAAwB,QAAQ,SAAS;CACtD,CAAC;CAMH,OAAO;EACL,KANU,oBAAoB;GAC9B,SAAS,WAAW,KAAA;GACpB;EACF,CAGI;EACF,QAAQ;EACR,GAAI,oBAAoB,EAAE,aAAa,kBAAkB,IAAI,CAAC;EAC9D,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;CACzB;AACF;AAEA,eAAsB,uCAAwE;CAC5F,MAAM,EAAE,2BAA2B,MAAM,OAAO;CAEhD,OAAO,8BAA8B,EAAE,SAAA,MADjB,uBAAuB,CAAC,CAAC,YAAY,IAAI,EAChB,CAAC;AAClD;AAEA,SAAS,eAAe,SAAuC;CAC7D,IAAI,CAAC,SACH,OAAO;CAET,IAAI;EACF,OAAO,IAAI,IAAI,OAAO,CAAC,CAAC;CAC1B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,OAIZ;CACrB,MAAM,OAAO;EAAC,MAAM;EAAa,MAAM;EAAU,MAAM;CAAS,CAAC,CAC9D,QAAQ,UAAU,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,CAChE,KAAK,GAAG;CACX,IAAI,CAAC,MACH;CAGF,OAAO,WADQ,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,MAAM,CAAC,CAAC,OAAO,KACzC,CAAC,CAAC,MAAM,GAAG,EAAE;AACtC;AAEA,SAAS,cAAc,OAAuD;CAC5E,IAAI,EAAE,SAAS,OAAO,UAAU,WAC9B,OAAO;CAET,MAAM,SAAS;CACf,MAAM,KAAKA,0BAAwB,OAAO,EAAE;CAC5C,MAAM,QAAQA,0BAAwB,OAAO,KAAK;CAClD,MAAM,OAAOA,0BAAwB,OAAO,IAAI;CAChD,IAAI,EAAE,MAAM,SAAS,OACnB,OAAO;CAET,OAAO;EACL,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC;EACnB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;EACzB,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;CACzB;AACF;AAEA,SAASA,0BAAwB,OAA+B;CAC9D,IAAI,OAAO,UAAU,UACnB,OAAO;CAET,MAAM,aAAa,MAAM,KAAK;CAC9B,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;ACxGA,MAAM,yBACJ;AACF,MAAM,2BACJ;AACF,MAAM,wBACJ;AAwBF,IAAa,8BAAb,cAAiD,MAAM;CACrD,OAAgB;CAChB;CAEA,YAAY,UAAkC;EAC5C,MAAM,SAAS,mBAAmB;EAClC,KAAK,OAAO;EACZ,KAAK,WAAW;CAClB;AACF;AAEA,SAAgB,0BAA0B,OAKV;CAC9B,OAAO,IAAI,4BAA4B,8BAA8B,KAAK,CAAC;AAC7E;AAEA,SAAgB,8BAA8B,OAKnB;CACzB,MAAM,SAASC,0BAAwB,MAAM,MAAM;CACnD,MAAM,cAAcA,0BAAwB,MAAM,WAAW;CAC7D,MAAM,aAAaA,0BAAwB,MAAM,UAAU;CAC3D,IAAI,MAAM,WAAW,YACnB,OAAO;EACL,QAAQ,MAAM;EACd;EACA;EACA;EACA,OAAO;EACP,aAAa;EACb,SAAS;EACT,gBAAgB;EAChB,eAAe,gCACb,iEACF;EACA,qBAAqB,gCACnB,gEACE,eAAe,+BAChB,aAAa,cAAc,+BAA+B,oCAC7D;EACA,mBAAmB,gCACjB,iHACF;CACF;CAGF,MAAM,mBAAmB,sCAAsC,MAAM,MAAM;CAC3E,OAAO;EACL,QAAQ,MAAM;EACd;EACA;EACA;EACA,GAAG;CACL;AACF;AAEA,SAAgB,wCACd,QACQ;CACR,MAAM,mBAAmBA,0BAAwB,MAAM;CACvD,IAAI,CAAC,kBACH,OAAO;CAET,OAAO,8BAA8B,iBAAiB;AACxD;AAEA,SAAgB,6BAA6B,OAM3C;CACA,MAAM,OAAgD,CAAC;CACvD,KAAK,KAAK;EACR,OAAO;EACP,OAAO,mCAAmC,MAAM,QAAQ;CAC1D,CAAC;CAED,KAAK,KAAK;EACR,OAAO;EACP,OACE,MAAM,SAAS,WACX,MAAM,SAAS,iBACf,MAAM,SAAS;CACvB,CAAC;CAED,OAAO;EACL,OAAO,MAAM,SAAS;EACtB;CACF;AACF;AAEA,SAAgB,8BACd,UACoB;CACpB,IAAI,SAAS,WAAW,eACtB,OAAO;EACL,SAAS,SAAS;EAClB,YAAY,CACV,oDACA,GAAG,0BAA0B,CAC3B,yGACF,CAAC,CACH;EACA,eAAe,CACb,yDACA,GAAG,0BAA0B,CAC3B,6EACF,CAAC,CACH;EACA,OAAO,8BAA8B,QAAQ;CAC/C;CAEF,OAAO;EACL,SAAS,SAAS;EAClB,YAAY,mCAAmC,QAAQ;EACvD,eAAe,CACb,wFACF;EACA,OAAO,8BAA8B,QAAQ;CAC/C;AACF;AAEA,SAAgB,+BACd,OACQ;CACR,QAAQ,OAAR;EACE,KAAK,SACH,OAAO;EACT,KAAK;EACL,KAAK,YACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,YACH,OAAO;EACT,KAAK,eACH,OAAO;EACT,SACE,OAAO;CACX;AACF;AAEA,SAAgB,qCACd,OACqC;CACrC,QAAQ,OAAR;EACE,KAAK,WACH,OAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK,WACH,OAAO;EACT,SACE,OAAO;CACX;AACF;AAQA,SAAgB,uCACd,OAC+B;CAC/B,IAAI,iBAAiB,6BACnB,OAAO,MAAM;CAIf,OAAO,yCADS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,CACpB;AACzD;AAEA,SAAgB,yCACd,SAC+B;CAC/B,MAAM,oBAAoB,OAAO,WAAW,EAAE,CAAC,CAAC,KAAK;CACrD,IAAI,kBAAkB,WAAW,GAC/B,OAAO;CAET,MAAM,iBAAiB,kBAAkB,YAAY;CAErD,MAAM,WAAW,uBAAuB,KAAK,iBAAiB;CAC9D,IAAI,WAAW,MAAM,SAAS,IAC5B,OAAO,8BAA8B;EACnC,QAAQ;EACR,aAAa,SAAS;EACtB,YAAY,SAAS;CACvB,CAAC;CAGH,IAAI,kBAAkB,SAAS,wBAAwB,GAAG;EACxD,MAAM,SAAS,yBAAyB,KAAK,iBAAiB;EAC9D,OAAO,8BAA8B;GACnC,QAAQ;GACR,aAAa,SAAS,MAAM;GAC5B,YAAY,SAAS,MAAM;EAC7B,CAAC;CACH;CAEA,IAAI,eAAe,SAAS,sBAAsB,GAChD,OAAO,8BAA8B,EACnC,QAAQ,UACV,CAAC;CAEH,IAAI,eAAe,SAAS,4BAA4B,GACtD,OAAO,8BAA8B,EACnC,QAAQ,UACV,CAAC;CAEH,IAAI,eAAe,SAAS,sBAAsB,GAChD,OAAO,8BAA8B,EACnC,QAAQ,UACV,CAAC;CAEH,IACE,eAAe,SAAS,8BAA8B,KACtD,eAAe,SAAS,0CAA0C,GAElE,OAAO,8BAA8B,EACnC,QAAQ,cACV,CAAC;CAEH,IACE,eAAe,SAAS,yBAAyB,KACjD,eAAe,SAAS,sBAAsB,KAC9C,eAAe,SAAS,8BAA8B,KACtD,eAAe,SAAS,kBAAkB,GAE1C,OAAO,8BAA8B,EACnC,QAAQ,WACV,CAAC;CAGH,OAAO;AACT;AAEA,SAAgB,kCACd,eACe;CACf,MAAM,oBAAoB,OAAO,iBAAiB,EAAE,CAAC,CAAC,KAAK;CAC3D,IAAI,kBAAkB,WAAW,GAC/B,OAAO;CAGT,OAAOA,0BADO,sBAAsB,KAAK,iBACN,CAAC,EAAE,QAAQ,MAAM;AACtD;AAEA,SAAS,sCACP,QAIA;CACA,QAAQ,QAAR;EACE,KAAK,eACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB,gCACd,qGACF;GACA,eAAe,gCACb,qGACF;GACA,qBAAqB,gCACnB,uIACF;GACA,mBAAmB,gCACjB,uIACF;EACF;EACF,KAAK,WACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,yCACF;GACA,qBAAqB,gCACnB,uCACF;GACA,mBAAmB,gCACjB,uEACF;EACF;EACF,KAAK,WACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,yCACF;GACA,qBAAqB,gCACnB,gDACF;GACA,mBAAmB,gCACjB,gFACF;EACF;EACF,KAAK,WACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,yCACF;GACA,qBAAqB,gCACnB,2CACF;GACA,mBAAmB,gCACjB,2EACF;EACF;EACF,KAAK,YACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,mCACF;GACA,qBAAqB,gCACnB,wCACF;GACA,mBAAmB,gCACjB,wEACF;EACF;EACF,SACE,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,mCACF;GACA,qBAAqB,gCACnB,wCACF;GACA,mBAAmB,gCACjB,wEACF;EACF;CACJ;AACF;AAEA,SAAS,mCACP,UACQ;CACR,MAAM,aAAa,SAAS,SACxB,WAAW,SAAS,WACpB;CACJ,IAAI,SAAS,WAAW,YACtB,OAAO,4CAA4C,WAAW;CAEhE,IAAI,SAAS,WAAW,eACtB,OAAO,sDAAsD,WAAW;CAE1E,IACE,SAAS,WAAW,aACpB,SAAS,WAAW,aACpB,SAAS,WAAW,WAEpB,OAAO,gBAAgB,WAAW;CAEpC,OAAO,UAAU,WAAW;AAC9B;AAEA,SAAS,mCACP,UACU;CACV,MAAM,YAAY,SAAS,SACvB,sCAAsC,SAAS,OAAO,KACtD;CACJ,MAAM,QAAQ,CAAC,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,GAAG,SAAS;CAC1E,IAAI,SAAS,WAAW,cAAc,SAAS,YAC7C,MAAM,OACJ,GACA,GACA,oCAAoC,SAAS,WAAW,EAC1D;CAEF,OAAO;AACT;AAEA,SAAS,8BACP,UACU;CACV,MAAM,QAAkB,CAAC;CACzB,IAAI,SAAS,QACX,MAAM,KAAK,mBAAmB,SAAS,QAAQ;CAEjD,IAAI,SAAS,aACX,MAAM,KAAK,oBAAoB,SAAS,aAAa;CAEvD,IAAI,SAAS,YACX,MAAM,KAAK,oBAAoB,SAAS,YAAY;CAEtD,OAAO;AACT;AAEA,SAASA,0BAAwB,OAA+B;CAC9D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;AC1cA,MAAM,2BAA2B;AACjC,MAAM,6BAA6B;AAiBnC,eAAsB,6BAA6B,OAGjC;CAChB,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,MAAM,kBAAkB,6BAA6B,MAAM,OAAO;CAClE,MAAM,aAAa,4BAA4B,eAAe;CAC9D,MAAM,MAAM,iBAAiB,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,OAAoC;EACxC,UAAU,WAAW;EACrB,GAAG;EACH,QAAQ;EACR,WAAW;EACX,QAAQ,gBAAgB,MAAM,MAAM;CACtC;CAEA,MAAM,WAAW,GAAG,WAAW,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CAC9D,IAAI,oBAAoB;CACxB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,MAAM;EACtE,MAAM,OAAO,UAAU,UAAU;EACjC,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,eAAsB,4BACpB,QAA8B,CAAC,GACU;CACzC,MAAM,MAAM,MAAM,SAChB,4BAA4B,6BAA6B,MAAM,OAAO,CAAC,GACvE,MACF,CAAC,CAAC,YAAY,IAAI;CAClB,IAAI,CAAC,KACH,OAAO;CAGT,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,MAAM,GACf,OAAO;EAET,IACE,OAAO,WAAW,8BAClB,OAAO,OAAO,cAAc,YAC5B,OAAO,UAAU,KAAK,CAAC,CAAC,WAAW,KACnC,OAAO,OAAO,WAAW,UAEzB,OAAO;EAET,MAAM,YAAY,OAAO,UAAU,KAAK;EACxC,MAAM,cAAc,KAAK,MAAM,SAAS;EACxC,IAAI,CAAC,OAAO,SAAS,WAAW,KAAK,eAAe,GAClD,OAAO;EAET,OAAO;GACL,GAAI,OAAO,OAAO,aAAa,YAAY,OAAO,SAAS,KAAK,IAC5D,EAAE,UAAU,OAAO,SAAS,KAAK,EAAE,IACnC,CAAC;GACL;GACA;GACA,QAAQ,gBAAgB,OAAO,MAAM;EACvC;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,4BAA4B,iBAAiC;CACpE,OAAO,KAAK,iBAAiB,wBAAwB;AACvD;AAEA,SAAS,6BAA6B,SAAqC;CACzE,IAAI,CAAC,SACH,OAAO,sBAAsB;CAE/B,OAAO,sBAAsB,EAC3B,KAAK;EAAE,GAAG,QAAQ;GAAM,wBAAwB;CAAQ,EAC1D,CAAC;AACH;AAEA,SAAS,gBAAgB,OAAuB;CAC9C,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,WAAW,SAAS,GACtB,OAAO;CAET,OAAO;AACT;;;AC7GA,SAAgB,4CAA4C,OAGnD;CACP,IAAI,MAAM,uCACR;CAEF,MAAM,OAAO,OACX,IAAI,MAAM,oDAAoD,EAC5D,OAAO,MAAM,MACf,CAAC,GACD,EACE,MAAM,gDACR,CACF;AACF;;;ACyBA,MAAM,iCAAiC;AACvC,MAAM,2CAA2C;AACjD,MAAM,4CAA4C;AAClD,MAAM,2BAA2B;AAEjC,IAAI,wBAGO;AAMX,SAAgB,kCACd,SACM;CACN,wBAAwB;EACtB;EACA,eAAe,KAAK,IAAI;CAC1B;AACF;AAEA,IAAM,uBAAN,cAAmC,MAAM;CACvC;CACA;CACA;CAEA,YAAY,OAKT;EACD,MAAM,MAAM,OAAO;EACnB,KAAK,OAAO;EACZ,KAAK,SAAS,MAAM;EACpB,KAAK,WAAW,MAAM;EACtB,KAAK,OAAO,wBAAwB,MAAM,IAAI;CAChD;AACF;AAEA,SAAS,uBAAuB,OAA+C;CAC7E,OAAO,iBAAiB;AAC1B;AAEA,eAAsB,uBAAmD;CAOvE,OADiB,eAAe,MALV,2BAA2B;EAC/C,QAAQ;EACR,MAAM;CACR,CAAC,GAEwC,UAC3B,CAAC,CAAC,IAAI,wBAAwB;AAC9C;AAEA,eAAsB,iCAAuE;CAC3F,MAAM,UAAU,MAAM,2BAA2B;EAC/C,QAAQ;EACR,MAAM;CACR,CAAC;CACD,MAAM,SAAS,kCAAkC,UAAU,OAAO;CAClE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,wCAAwC,EACtD,OAAO,OAAO,MAChB,CAAC;CAEH,OAAO,OAAO;AAChB;AAEA,eAAsB,uBAAuB,OAGhB;CAc3B,OAAO,yBAAyB,gBAAgB,MAb1B,2BAA2B;EAC/C,QAAQ;EACR,MAAM;EACN,MAAM;GACJ,GAAI,wBAAwB,MAAM,iBAAiB,IAC/C,EACE,mBAAmB,wBAAwB,MAAM,iBAAiB,EACpE,IACA,CAAC;GACL,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAChE;CACF,CAAC,GAEwD,SAAS,CAAC;AACrE;AAEA,eAAsB,iCAAiC,OAG1B;CAC3B,MAAM,oBAAoB,wBAAwB,MAAM,iBAAiB;CACzE,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,gCAAgC;CAGlD,IAAI;EACF,OAAO,MAAM,uBAAuB;GAClC,mBAAmB;GACnB,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAChE,CAAC;CACH,SAAS,SAAS;EAChB,MAAM,UAAU,MAAM,kCAAkC;GACtD;GACA,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAChE,CAAC;EACD,IAAI,QAAQ,WAAW,SACrB,OAAO,QAAQ;EAEjB,IAAI,QAAQ,WAAW,aACrB,MAAM,IAAI,MACR,uCAAuC,kBAAkB,+BAC3D;EAEF,IAAI,uBAAuB,OAAO,GAChC,MAAM,IAAI,MAAM,+BAA+B,mBAAmB;EAEpE,MAAM;CACR;AACF;AAEA,SAAgB,2BAA2B,OAGd;CAC3B,MAAM,cAAc,wBAAwB,MAAM,WAAW;CAC7D,MAAM,mBACJ,wBAAwB,MAAM,gBAAgB,KAAK,KAAA;CACrD,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,0BAA0B;CAE5C,OAAO,kCAAkC;EACvC;EACA,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;CACjD,CAAC;AACH;AAoBA,eAAsB,2BAA2B,OAGpB;CAC3B,MAAM,cAAc,wBAAwB,MAAM,WAAW;CAC7D,MAAM,mBACJ,wBAAwB,MAAM,gBAAgB,KAAK,KAAA;CACrD,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,0BAA0B;CAG5C,IAAI;EAEF,4CAA4C,MADjB,+BAA+B,CACF;CAC1D,SAAS,OAAO;EACd,IACE,iBAAiB,SACjB,UAAU,SACV,MAAM,SAAA,sDAEN,MAAM;EAER,4CAA4C;GAC1C,uCAAuC;GACvC,OAAO;EACT,CAAC;CACH;CAWA,MAAM,UAAU,yBAAyB,gBAAgB,MATnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM;EACN,MAAM;GACJ;GACA,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;EACjD;CACF,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAEA,eAAsB,sBAAsB,OAGf;CAC3B,MAAM,oBAAoB,wBAAwB,MAAM,iBAAiB;CACzE,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,+BAA+B;CAGjD,MAAM,cAAc,wBAAwB,MAAM,WAAW;CAG7D,IAAI,CAFmB,QAAQ,WAEb,GAChB,MAAM,IAAI,MAAM,yBAAyB;CAW3C,MAAM,UAAU,yBAAyB,gBAAgB,MARnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM,gBAAgB,mBAAmB,iBAAiB;EAC1D,MAAM,EACJ,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC,EACvC;CACF,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAEA,eAAsB,sBAAsB,OAEf;CAC3B,MAAM,oBAAoB,wBAAwB,MAAM,iBAAiB;CACzE,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,+BAA+B;CAQjD,MAAM,UAAU,yBAAyB,gBAAgB,MALnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM,gBAAgB,mBAAmB,iBAAiB;CAC5D,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAEA,eAAe,2BAA2B,OAIL;CACnC,MAAM,UAAU,MAAM,+BAA+B;CACrD,MAAM,WAAW,eAAe,QAAQ,aAAa,MAAM,IAAI;CAC/D,MAAM,WAAW,MAAM,MAAM,UAAU;EACrC,QAAQ,MAAM;EACd,SAAS;GACP,eAAe,GAAG,mBAAmB,QAAQ,SAAS,EAAE,GAAG,QAAQ;GACnE,GAAI,MAAM,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;EAC7D;EACA,GAAI,MAAM,OAAO,EAAE,MAAM,KAAK,UAAU,MAAM,IAAI,EAAE,IAAI,CAAC;EACzD,QAAQ,YAAY,QAAQ,oCAAoC,QAAQ,CAAC;CAC3E,CAAC;CAED,MAAM,UAAU,MAAM,kBAAkB,QAAQ;CAEhD,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,cAAc,2BAA2B,UAAU,OAAO;EAChE,MAAM,SAAS,SAAS;EACxB,MAAM,OAAO,YAAY,UAAU,YAAY,KAAK,OAAO;EAC3D,IAAI,WAAW,OAAO,WAAW,OAAO,SAAS,wBAAwB;GACvE,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,WACV,CAAC;EACH;EAQA,MAAM,IAAI,qBAAqB;GAC7B;GACA;GACA;GACA,SAVc,+BAA+B;IAC7C,SAAS,YAAY,UAAU,YAAY,OAAO;IAClD;IACA;IACA;GACF,CAKE;EACF,CAAC;CACH;CAEA,MAAM,SAAS,SAAS,OAAO,IAAI,UAAU,CAAC;CAE9C,IAAI,CADO,iBAAiB,QAAQ,IAC9B,GAAG;EACP,MAAM,cAAc,2BAA2B,UAAU,OAAO;EAChE,MAAM,OAAO,YAAY,UAAU,YAAY,KAAK,OAAO;EAC3D,MAAM,IAAI,qBAAqB;GAC7B,QAAQ,SAAS;GACjB;GACA;GACA,SAAS,+BAA+B;IACtC,SAAS,YAAY,UAAU,YAAY,OAAO;IAClD,QAAQ,SAAS;IACjB;IACA;GACF,CAAC;EACH,CAAC;CACH;CAEA,OAAO;AACT;AAEA,eAAe,kCAAkC,OAGpB;CAY3B,MAAM,UAAU,yBAAyB,gBAAgB,MAXnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM;EACN,MAAM;GACJ,aAAa,MAAM;GACnB,GAAI,MAAM,mBACN,EAAE,kBAAkB,MAAM,iBAAiB,IAC3C,CAAC;EACP;CACF,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAwBA,eAAe,iCAA6D;CAC1E,MAAM,MAAM,KAAK,IAAI;CACrB,IACE,yBACA,MAAM,sBAAsB,iBAAiB,gCAC7C;EACA,MAAM,aAAa,MAAM,oBAAoB,EAC3C,gBAAgB,MAClB,CAAC;EACD,IACE,WAAW,UAAU,WACrB,WAAW,WACX,wBAAwB,WAAW,SAAS,sBAAsB,OAAO,GAEzE,OAAO,sBAAsB;EAE/B,wBAAwB;CAC1B;CAEA,MAAM,QAAQ,MAAM,oBAAoB,EACtC,gBAAgB,KAClB,CAAC;CAED,QAAQ,MAAM,OAAd;EACE,KAAK;GACH,IAAI,CAAC,MAAM,SACT,MAAM,IAAI,MAAM,0BAA0B;GAE5C,wBAAwB;IACtB,SAAS,MAAM;IACf,eAAe;GACjB;GACA,OAAO,MAAM;EAEf,KAAK;GACH,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,WACV,CAAC;EACH,KAAK;EACL,KAAK;EACL,KAAK;GACH,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,qCAAqC,MAAM,KAAK,KAAK,WAC/D,CAAC;EACH;GACE,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,WACV,CAAC;CACL;AACF;AAEA,SAAS,oCAAoC,UAA0B;CACrE,MAAM,MAAM,eAAe,QAAQ;CACnC,IAAI,OAAO,mBAAmB,IAAI,QAAQ,GACxC,OAAO;CAET,OAAO;AACT;AAEA,SAAS,eAAe,OAA2B;CACjD,IAAI;EACF,OAAO,IAAI,IAAI,KAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,wBACP,GACA,GACS;CACT,OACE,EAAE,gBAAgB,EAAE,eACpB,EAAE,aAAa,EAAE,YACjB,EAAE,cAAc,EAAE,aAClB,EAAE,gBAAgB,EAAE,gBACnB,EAAE,aAAa,WAAW,EAAE,aAAa;AAE9C;AAEA,eAAe,qBAAqB,QAA+B;CACjE,MAAM,6BAA6B,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;AACtE;AAEA,SAAS,yBAAyB,OAAiC;CACjE,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;CAE1C,MAAM,oBAAoB,wBACxB,QACA,mBACF;CACA,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,oDAAoD;CAGtE,MAAM,cAAc,wBAAwB,QAAQ,aAAa;CACjE,MAAM,gBAAgB,wBAAwB,QAAQ,eAAe;CACrE,MAAM,cAAc,gBAAgB,QAAQ,aAAa;CACzD,MAAM,YAAY,yBAAyB,QAAQ,WAAW,KAAK;CACnE,MAAM,SAAS,kBAAkB,QAAQ,QAAQ;CACjD,MAAM,cAAc,wBAAwB,QAAQ,aAAa;CACjE,MAAM,YAAY,wBAAwB,QAAQ,WAAW,KAAK,KAAA;CAClE,MAAM,SAAS,wBAAwB,QAAQ,QAAQ;CACvD,MAAM,cAAc,6BAA6B,QAAQ,aAAa;CACtE,MAAM,kBACJ,wBAAwB,QAAQ,iBAAiB,KAAK;CACxD,MAAM,mBAAmB,wBAAwB,QAAQ,kBAAkB;CAC3E,MAAM,yBACJ,wBAAwB,QAAQ,wBAAwB,KAAK;CAC/D,MAAM,mBACJ,wBAAwB,QAAQ,kBAAkB,KAAK;CACzD,MAAM,aAAa,wBAAwB,QAAQ,YAAY;CAC/D,MAAM,YAAY,wBAAwB,QAAQ,WAAW;CAC7D,MAAM,YAAY,wBAAwB,QAAQ,WAAW;CAE7D,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;AAEA,SAAS,gBACP,OACA,OACqB;CACrB,MAAM,QAAQ,wBAAwB,OAAO,KAAK;CAClD,IAAI,UAAU,WAAW,UAAU,WAAW,UAAU,UACtD,OAAO;CAET,MAAM,IAAI,MAAM,wCAAwC,OAAO;AACjE;AAEA,SAAS,kBACP,OACA,OACuB;CACvB,MAAM,QAAQ,wBAAwB,OAAO,KAAK;CAClD,IAAI,UAAU,YAAY,UAAU,YAClC,OAAO;CAET,MAAM,IAAI,MAAM,wCAAwC,OAAO;AACjE;AAEA,SAAS,6BACP,OACA,OACmC;CACnC,MAAM,QAAQ,wBAAwB,OAAO,KAAK;CAClD,IAAI,CAAC,OACH,OAAO;CAET,MAAM,SAAS,6BAA6B,UAAU,KAAK;CAC3D,IAAI,OAAO,SACT,OAAO,OAAO;CAEhB,MAAM,IAAI,MAAM,wCAAwC,OAAO;AACjE;AAEA,SAAS,gBACP,OACA,OACyB;CACzB,MAAM,QAAQ,MAAM;CACpB,IAAI,SAAS,KAAK,GAChB,OAAO;CAET,MAAM,IAAI,MAAM,gCAAgC,OAAO;AACzD;AAEA,SAAS,eACP,OACA,OAC2B;CAC3B,MAAM,QAAQ,MAAM;CACpB,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,MAAM,gCAAgC,OAAO;CAGzD,OAAO,MAAM,OAAO,QAAQ;AAC9B;AAEA,SAAS,wBACP,OACA,OACQ;CACR,MAAM,QAAQ,wBAAwB,MAAM,MAAM;CAClD,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,oCAAoC,OAAO;CAE7D,OAAO;AACT;AAEA,SAAS,wBACP,OACA,OACe;CACf,OAAO,wBAAwB,MAAM,MAAM;AAC7C;AAEA,SAAS,iBACP,OACA,OACS;CACT,OAAO,MAAM,WAAW;AAC1B;AAEA,SAAS,yBACP,OACA,OACgB;CAChB,MAAM,QAAQ,MAAM;CACpB,IAAI,OAAO,UAAU,WACnB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,wBAAwB,OAA+B;CAC9D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,mBAAmB,WAA2B;CACrD,MAAM,aAAa,UAAU,KAAK;CAClC,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,eAAe,SAAiB,UAA0B;CACjE,MAAM,MAAM,IAAI,IAAI,OAAO;CAC3B,IAAI,WAAW;CACf,IAAI,SAAS;CACb,IAAI,OAAO;CACX,OAAO,IAAI,SAAS;AACtB;AAEA,eAAe,kBAAkB,UAAsC;CACrE,MAAM,MAAM,MAAM,SAAS,KAAK;CAChC,IAAI,CAAC,KACH,OAAO;CAET,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN,OAAO,EAAE,SAAS,IAAI;CACxB;AACF;AAEA,SAAS,uBAAuB,SAAkB,QAAwB;CACxE,MAAM,SAAS,SAAS,OAAO,IAAI,UAAU,CAAC;CAC9C,MAAM,UACJ,wBAAwB,OAAO,OAAO,KACtC,wBAAwB,OAAO,iBAAiB,KAChD,wBAAwB,OAAO,KAAK;CAEtC,IAAI,SACF,OAAO;CAGT,OAAO,8BAA8B;AACvC;AAEA,SAAS,+BAA+B,OAK7B;CACT,MAAM,UAAU,uBAAuB,MAAM,SAAS,MAAM,MAAM;CAClE,IACE,MAAM,WAAW,OACjB,MAAM,SAAS,4BACf,0BAA0B,MAAM,QAAQ,GAExC,OACE;CAIJ,IACE,MAAM,WAAW,OACjB,MAAM,SAAS,4BACf,yBAAyB,MAAM,QAAQ,GAEvC,OACE;CAOJ,OAAO;AACT;AAEA,SAAS,0BAA0B,OAAuB;CACxD,OAAO,MAAM,KAAK,CAAC,CAAC,QAAQ,0BAA0B,EAAE,CAAC,CAAC,YAAY;AACxE;AAEA,eAAe,kCAAkC,OAO/C;CACA,MAAM,YAAY,0BAA0B,MAAM,iBAAiB;CACnE,MAAM,WAAW,MAAM,qBAAqB,EAAA,CAAG,QAAQ,YAAY;EACjE,IAAI,MAAM,eAAe,QAAQ,gBAAgB,MAAM,aACrD,OAAO;EAET,OACE,0BAA0B,QAAQ,WAAW,MAAM,aACnD,0BAA0B,QAAQ,aAAa,MAAM;CAEzD,CAAC;CAED,IAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,UAAU,QAAQ;EACxB,IAAI,SACF,OAAO;GAAE,QAAQ;GAAS;EAAQ;CAEtC;CACA,IAAI,QAAQ,SAAS,GACnB,OAAO,EAAE,QAAQ,YAAY;CAE/B,OAAO,EAAE,QAAQ,YAAY;AAC/B;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,MAAM,MAAM,eAAe,QAAQ;CACnC,OAAO,QACL,OACE,mBAAmB,IAAI,QAAQ,KAC/B,IAAI,SAAS,WAAW,cAAc,CAC1C;AACF;AAEA,SAAS,yBAAyB,UAA2B;CAC3D,MAAM,MAAM,eAAe,QAAQ;CACnC,OAAO,QACL,OACE,CAAC,mBAAmB,IAAI,QAAQ,KAChC,IAAI,SAAS,WAAW,cAAc,CAC1C;AACF;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,QAAQ,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,CAAC;AAC5E;;;ACpuBA,MAAa,iCACXC;AACF,MAAa,uCACXC;AACF,MAAa,gCACXC;AACF,MAAa,mCACXC;AACF,MAAa,sCACXC;AACF,MAAa,0CACXC;AACF,MAAa,gCACXC;AACF,MAAa,gCACXC;AAGF,MAAa,4BAA4BC;AAGzC,MAAa,4BAA4BC;AACzC,MAAa,+CACXC;AACF,MAAa,qDACXC;AACF,MAAa,+BACXC;AACF,MAAa,mDACXC;AACF,MAAa,yDACXC;AACF,MAAa,wCACXC;AACF,MAAa,6BAA6B;AAC1C,MAAa,yBAAyB;AAEtC,MAAa,4CAA4C;AACzD,MAAa,8CAA8C;AAC3D,MAAa,yCAAyC;AACtD,MAAa,wBAAwB;AACrC,MAAa,qBAAqB;AAClC,MAAa,kBAAkB;AAC/B,MAAa,oCAAoC;AACjD,MAAa,6CACX;;;ACpDF,SAAgB,YAAY,OAKnB;CACP,IAAI,MAAM,UAAU,SAAS,SAAS;EACpC,MAAM,UAAU,KAAK;GACnB,MAAM,MAAM;GACZ,SAAS;IACP,SAAS,MAAM;IACf,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;GAClE;EACF,CAAC;EACD;CACF;CACA,MAAM,UAAU,KAAK;EACnB,MAAM,MAAM;EACZ,MAAM,MAAM;CACd,CAAC;AACH;AAEA,SAAgB,aAAa,OAAe,KAAa,KAAqB;CAC5E,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,CAAC,CAAC;AACvD;AAEA,SAAgB,6BACd,OACQ;CACR,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,OAAO;CAET,OAAO,aACL,OACA,2BACA,yBACF;AACF;AAEA,SAAgB,mBACd,OACkC;CAClC,MAAM,SAAS,2BAA2B,UAAU,KAAK;CACzD,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,SAAgB,mBACd,OACkC;CAClC,IAAI,UAAU,WAAW,UAAU,UACjC,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,0BACd,OAC6B;CAC7B,OAAO,mBAAmB,KAAK;AACjC;AAgBA,SAAgB,0BACd,OACwD;CACxD,MAAM,SAAS,SAAS,KAAK;CAC7B,IAAI,CAAC,QACH,OAAO;CAET,MAAM,cAAc,sBAAsB,OAAO,WAAW;CAC5D,MAAM,iBAAiB,yBAAyB,OAAO,cAAc;CACrE,IAAI,EAAE,eAAe,iBACnB,OAAO;CAET,OAAO;EACL;EACA;CACF;AACF;AAEA,SAAgB,qBAAqB,OAA+B;CAClE,IAAI,EAAE,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,QAAQ,IACpE,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,4BAA4B,OAA+B;CACzE,IAAI,EAAE,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,IACrE,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,yBAAyB,OAA+B;CACtE,OAAO,qBAAqB,KAAK;AACnC;AAEA,SAAgB,SAAS,OAAgD;CACvE,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,cAAc,OAAwB;CACpD,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;AAClC;AAEA,SAAgB,sBAAsB,OAA+B;CACnE,MAAM,aAAa,cAAc,KAAK;CACtC,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAgB,eAAuB;CACrC,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY;AAChC;AASA,SAAgB,gBACd,WACA,QACM;CACN,MAAM,gBAAgB,OAAO,YAC3B,OAAO,QAAQ,MAAM,CAAC,CAAC,QAAQ,UAAU,MAAM,OAAO,KAAA,CAAS,CACjE;CACA,QAAQ,KACN,GAAG,aAAa,EAAE,GAAG,UAAU,GAAG,KAAK,UAAU,aAAa,GAChE;AACF;AAEA,MAAa,iBAA6CC;AAI1D,SAAgB,YAAY,MAAsB;CAChD,MAAM,YAAY,KAAK,IAAI,KAAK,YAAY,GAAG,GAAG,KAAK,YAAY,IAAI,CAAC;CACxE,IAAI,aAAa,GACf,OAAO;CAET,OAAO,KAAK,MAAM,GAAG,SAAS;AAChC;;;ACpKA,SAAgB,+BAA+B,OAGxB;CACrB,OACE,sBAAsB,MAAM,gBAAgB,KAC5C,sBAAsB,MAAM,gBAAgB,KAC5C,KAAA;AAEJ;AAEA,eAAsB,sBAAsB,OAIxB;CAClB,MAAM,WAAW,sBAAsB,MAAM,QAAQ;CACrD,IAAI,UAAU;EACZ,MAAM,8BAA8B;GAClC,UAAU;GACV,cAAc,MAAM;EACtB,CAAC;EACD,OAAO;CACT;CAEA,MAAM,YAAY,sBAChB,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC,CAAC,YAAY,EAAE,CAC3D;CACA,IACE,aACA,EAAE,MAAM,iCAAiC,SAAS,KAAK,QAEvD,OAAO;CAGT,MAAM,YAAY,WAAW;CAC7B,MAAM,oBAAoB;EACxB,UAAU;EACV,cAAc,MAAM;CACtB,CAAC;CACD,OAAO;AACT;AAEA,eAAsB,2BAAwD;CAC5E,MAAM,eAAe,KAAK,sBAAsB,GAAG,MAAM;CACzD,MAAM,mBAAmB,KAAK,cAAc,kBAAkB;CAC9D,MAAM,eAAe,mBAAmB;CACxC,MAAM,qBAAqB,KAAK,cAAc,qBAAqB;CACnE,MAAM,iBAAiB,KAAK,cAAc,eAAe;CACzD,MAAM,MAAM,cAAc,EACxB,WAAW,KACb,CAAC;CACD,MAAM,MAAM,gBAAgB,EAC1B,WAAW,KACb,CAAC;CACD,MAAM,MAAM,YAAY,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;CAC1D,MAAM,4BAA4B;EAAE;EAAc;CAAmB,CAAC;CACtE,OAAO;EACL,kBAAkB,KAAK,cAAc,iCAAiC;EACtE,0BAA0B,KACxB,cACA,0CACF;EACA;EACA;EACA;EACA;CACF;AACF;AAEA,SAAgB,qBAA6B;CAC3C,OAAO,KAAK,UAAU,GAAG,qBAAqB;AAChD;AAEA,SAAgB,iBAAiB,gBAAqC;CACpE,OAAO;EACL,qBAAqB,KAAK,gBAAgB,mBAAmB;EAC7D,iBAAiB,KAAK,gBAAgB,gBAAgB;EACtD,qBAAqB,KAAK,gBAAgB,aAAa;EACvD,aAAa;EACb,eAAe,KAAK,gBAAgB,YAAY;EAChD,mBAAmB,KAAK,gBAAgB,WAAW;CACrD;AACF;AAEA,eAAe,8BAA8B,OAG3B;CAIhB,IAHkB,sBAChB,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC,CAAC,YAAY,EAAE,CAE/C,MAAM,MAAM,UACtB;CAEF,MAAM,oBAAoB,KAAK;AACjC;AAEA,eAAe,oBAAoB,OAGjB;CAChB,MAAM,MAAM,YAAY,MAAM,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;CAChE,MAAM,UAAU,MAAM,cAAc,GAAG,MAAM,SAAS,KAAK,MAAM;AACnE;AAEA,eAAe,4BAA4B,OAGzB;CAIhB,IAHgB,sBACd,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC,CAAC,YAAY,EAAE,CAEjD,GACR;CAEF,MAAM,SAAS,sBACb,MAAM,SAAS,MAAM,oBAAoB,MAAM,CAAC,CAAC,YAAY,EAAE,CACjE;CACA,IAAI,CAAC,QACH;CAEF,MAAM,oBAAoB;EACxB,UAAU;EACV,cAAc,MAAM;CACtB,CAAC;AACH"}
+{"version":3,"file":"daemon-device-id-YnLMx1kN.js","names":["normalizeOptionalString","normalizeOptionalString","STRATEGY_CATALOG_SYNC_RETRY_INTERVAL_MS","STRATEGY_CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS","STRATEGY_DAEMON_RUNTIME_CONTRACT_EPOCH","STRATEGY_DAEMON_STREAM_CONNECT_TIMEOUT_MS","STRATEGY_DAEMON_STREAM_KEEPALIVE_INTERVAL_MS","STRATEGY_DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS","STRATEGY_DEFAULT_HEARTBEAT_INTERVAL_MS","STRATEGY_HEARTBEAT_RESPONSE_TIMEOUT_MS","STRATEGY_MAX_HEARTBEAT_INTERVAL_MS","STRATEGY_MIN_HEARTBEAT_INTERVAL_MS","STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS","STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS","STRATEGY_REGISTER_RESPONSE_TIMEOUT_MS","STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS","STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS","STRATEGY_RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS","sharedToErrorMessage"],"sources":["../../../packages/schemas/dist/schemas/daemon/route-catalog-cache.js","../src/config/account-context.ts","../src/auth/auth-guidance.ts","../src/local-service/state/catalog-sync-signal.ts","../src/config/profile-creation-capability.ts","../src/config/openmeld-profiles-api.ts","../src/local-service/core/constants.ts","../src/local-service/core/logger.ts","../src/local-service/state/daemon-device-id.ts"],"sourcesContent":["import { agentProfileIdSchema } from \"../protocol/profile.js\";\nimport { daemonServiceLaneSchema } from \"./service-contract.js\";\nimport { conversationPolicySchema } from \"./conversation-contract.js\";\nimport { runtimeAgentControllerConversationIdMappingSpecSchema, runtimeAgentControllerLaunchContractSchema, runtimeStreamingModeSchema, runtimeTransportModeSchema } from \"./controller-contract.js\";\nimport { skippedDaemonProfileSchema } from \"./control-plane.js\";\nimport { CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH } from \"./runtime-transport.js\";\nimport { agentControllerCollaborationModeSchema } from \"../agent-controller-collaboration-mode.js\";\nimport { agentControllerPermissionModeSchema } from \"../agent-controller-permission-mode.js\";\nimport { openCodePermissionConfigSchema } from \"../open-code-permission.js\";\nimport * as z$1 from \"zod/v4\";\n//#region src/schemas/daemon/route-catalog-cache.ts\nconst DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_VERSION = 4;\nconst DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME = \"openmeld-daemon-route-catalog-cache-v4\";\nconst cachedDaemonRouteConfigSchema = z$1.strictObject({\n\tagentControllerRef: z$1.string().trim().min(1),\n\tbindingId: z$1.string().trim().min(1).optional(),\n\tagentControllerCollaborationMode: agentControllerCollaborationModeSchema.optional(),\n\tagentControllerPermissionMode: agentControllerPermissionModeSchema.optional(),\n\tconfigurationRevision: z$1.number().int().positive().optional(),\n\tcontextIdMappingSpec: runtimeAgentControllerConversationIdMappingSpecSchema,\n\tconversationPolicy: conversationPolicySchema.optional(),\n\topenCodePermission: openCodePermissionConfigSchema.optional(),\n\tlaunchContract: runtimeAgentControllerLaunchContractSchema.nullable().optional(),\n\tprofileId: agentProfileIdSchema,\n\tstreamingMode: runtimeStreamingModeSchema,\n\ttransportMode: runtimeTransportModeSchema,\n\topenMeldServiceRuntimeId: z$1.string().trim().min(1).optional()\n});\nconst daemonRouteCatalogCacheBodySchema = z$1.strictObject({\n\tcachedAt: z$1.iso.datetime({ offset: true }),\n\truntimeContractEpoch: z$1.literal(CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH),\n\townerUserId: z$1.string().trim().min(1),\n\tlane: daemonServiceLaneSchema,\n\tserviceBundleId: z$1.string().trim().min(1),\n\tprofileIds: z$1.array(agentProfileIdSchema),\n\troutes: z$1.array(cachedDaemonRouteConfigSchema),\n\tskippedProfiles: z$1.array(skippedDaemonProfileSchema)\n});\nconst daemonRouteCatalogCacheSchema = z$1.discriminatedUnion(\"v\", [\n\tdaemonRouteCatalogCacheBodySchema.extend({\n\t\tv: z$1.literal(2),\n\t\tschema: z$1.literal(\"openmeld-daemon-route-catalog-cache-v2\")\n\t}),\n\tdaemonRouteCatalogCacheBodySchema.extend({\n\t\tv: z$1.literal(3),\n\t\tschema: z$1.literal(\"openmeld-daemon-route-catalog-cache-v3\")\n\t}),\n\tdaemonRouteCatalogCacheBodySchema.extend({\n\t\tv: z$1.literal(4),\n\t\tschema: z$1.literal(DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME)\n\t})\n]).superRefine((value, ctx) => {\n\tconst routeIds = new Set(value.routes.map((route) => route.profileId));\n\tfor (const profileId of value.profileIds) if (!routeIds.has(profileId)) ctx.addIssue({\n\t\tcode: \"custom\",\n\t\tmessage: \"route catalog cache profileIds must match routes\",\n\t\tpath: [\"profileIds\"]\n\t});\n});\n//#endregion\nexport { DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_VERSION, cachedDaemonRouteConfigSchema, daemonRouteCatalogCacheSchema };\n\n//# sourceMappingURL=route-catalog-cache.js.map","import { createHash } from \"node:crypto\";\nimport type { StoredAuthSession } from \"./auth-session\";\nimport { normalizeAccountKey, type OpenMeldAccountKey } from \"./paths\";\n\ntype AuthSessionLike = Pick<\n  StoredAuthSession,\n  \"authBaseUrl\" | \"clientId\" | \"createdAt\" | \"user\"\n>;\n\nexport type OpenMeldAccountContext = {\n  key: OpenMeldAccountKey;\n  source: \"session\" | \"fallback\";\n  authBaseUrl?: string;\n  user?: {\n    id?: string;\n    email?: string;\n    name?: string;\n  };\n};\n\nexport function resolveOpenMeldAccountContext(input?: {\n  session?: AuthSessionLike | null;\n}): OpenMeldAccountContext {\n  const session = input?.session ?? null;\n  if (!session) {\n    return {\n      key: normalizeAccountKey({}),\n      source: \"fallback\",\n    };\n  }\n\n  const normalizedBaseUrl = normalizeOptionalString(session.authBaseUrl);\n  const hostKey = resolveHostKey(normalizedBaseUrl);\n  const user = normalizeUser(session.user);\n  const userKey =\n    user?.id ??\n    user?.email ??\n    buildSessionScopedUserKey({\n      authBaseUrl: normalizedBaseUrl,\n      clientId: normalizeOptionalString(session.clientId),\n      createdAt: normalizeOptionalString(session.createdAt),\n    });\n  const key = normalizeAccountKey({\n    hostKey: hostKey ?? undefined,\n    userKey,\n  });\n\n  return {\n    key,\n    source: \"session\",\n    ...(normalizedBaseUrl ? { authBaseUrl: normalizedBaseUrl } : {}),\n    ...(user ? { user } : {}),\n  };\n}\n\nexport async function resolveCurrentOpenMeldAccountContext(): Promise<OpenMeldAccountContext> {\n  const { getAuthSessionMetadata } = await import(\"./auth-session\");\n  const session = await getAuthSessionMetadata().catch(() => null);\n  return resolveOpenMeldAccountContext({ session });\n}\n\nfunction resolveHostKey(baseUrl: string | null): string | null {\n  if (!baseUrl) {\n    return null;\n  }\n  try {\n    return new URL(baseUrl).host;\n  } catch {\n    return null;\n  }\n}\n\nfunction buildSessionScopedUserKey(input: {\n  authBaseUrl: string | null;\n  clientId: string | null;\n  createdAt: string | null;\n}): string | undefined {\n  const seed = [input.authBaseUrl, input.clientId, input.createdAt]\n    .filter((value) => typeof value === \"string\" && value.length > 0)\n    .join(\"|\");\n  if (!seed) {\n    return undefined;\n  }\n  const digest = createHash(\"sha256\").update(seed, \"utf8\").digest(\"hex\");\n  return `session-${digest.slice(0, 16)}`;\n}\n\nfunction normalizeUser(value: unknown): OpenMeldAccountContext[\"user\"] | null {\n  if (!(value && typeof value === \"object\")) {\n    return null;\n  }\n  const record = value as Record<string, unknown>;\n  const id = normalizeOptionalString(record.id);\n  const email = normalizeOptionalString(record.email);\n  const name = normalizeOptionalString(record.name);\n  if (!(id || email || name)) {\n    return null;\n  }\n  return {\n    ...(id ? { id } : {}),\n    ...(email ? { email } : {}),\n    ...(name ? { name } : {}),\n  };\n}\n\nfunction normalizeOptionalString(value: unknown): string | null {\n  if (typeof value !== \"string\") {\n    return null;\n  }\n  const normalized = value.trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import type { AuthSessionState } from \"../config/auth-session\";\nimport {\n  formatInlineOpenMeldCliCommands,\n  formatOpenMeldCliCommands,\n} from \"../runtime/cli-entry-command\";\nimport type { DualViewGuideInput } from \"../runtime/dual-view-guide\";\n\nconst AUTH_MISMATCH_ERROR_RE =\n  /session auth:\\s*(.+?),\\s*gateway:\\s*(.+?)\\);?\\s*run/u;\nconst AUTH_MISMATCH_SUMMARY_RE =\n  /Current session is for\\s+(.+?),\\s+but.+?\\s+is\\s+(.+?)\\./u;\nconst AUTH_PROMPT_ACTION_RE =\n  /^Sign in is required before (?<action>.+?)\\. What do you want to do\\?$/u;\n\nexport type AuthenticationGuidanceReason =\n  | \"required\"\n  | \"expired\"\n  | \"invalid\"\n  | \"revoked\"\n  | \"unavailable\"\n  | \"mismatch\";\n\nexport type AuthenticationGuidance = {\n  reason: AuthenticationGuidanceReason;\n  action: string | null;\n  authBaseUrl: string | null;\n  gatewayUrl: string | null;\n  title: string;\n  statusLabel: string;\n  summary: string;\n  promptNextStep: string;\n  errorNextStep: string;\n  commandErrorMessage: string;\n  agentErrorMessage: string;\n};\n\nexport class OpenMeldAuthenticationError extends Error {\n  readonly code = \"auth.authentication_required\";\n  readonly guidance: AuthenticationGuidance;\n\n  constructor(guidance: AuthenticationGuidance) {\n    super(guidance.commandErrorMessage);\n    this.name = \"OpenMeldAuthenticationError\";\n    this.guidance = guidance;\n  }\n}\n\nexport function createAuthenticationError(input: {\n  reason: AuthenticationGuidanceReason;\n  action?: string | null;\n  authBaseUrl?: string | null;\n  gatewayUrl?: string | null;\n}): OpenMeldAuthenticationError {\n  return new OpenMeldAuthenticationError(resolveAuthenticationGuidance(input));\n}\n\nexport function resolveAuthenticationGuidance(input: {\n  reason: AuthenticationGuidanceReason;\n  action?: string | null;\n  authBaseUrl?: string | null;\n  gatewayUrl?: string | null;\n}): AuthenticationGuidance {\n  const action = normalizeOptionalString(input.action);\n  const authBaseUrl = normalizeOptionalString(input.authBaseUrl);\n  const gatewayUrl = normalizeOptionalString(input.gatewayUrl);\n  if (input.reason === \"mismatch\") {\n    return {\n      reason: input.reason,\n      action,\n      authBaseUrl,\n      gatewayUrl,\n      title: \"Wrong OpenMeld Environment\",\n      statusLabel: \"wrong OpenMeld environment\",\n      summary: \"This command is using a different OpenMeld environment.\",\n      promptNextStep: \"Choose Sign in now to switch and continue.\",\n      errorNextStep: formatInlineOpenMeldCliCommands(\n        \"Run `openmeld login` for this OpenMeld environment, then retry.\"\n      ),\n      commandErrorMessage: formatInlineOpenMeldCliCommands(\n        `authentication does not match current gateway (session auth: ${\n          authBaseUrl ?? \"another OpenMeld environment\"\n        }, gateway: ${gatewayUrl ?? \"the current OpenMeld gateway\"}); run \\`openmeld login\\` and retry`\n      ),\n      agentErrorMessage: formatInlineOpenMeldCliCommands(\n        \"sign-in is for a different OpenMeld environment; run `openmeld login` for this OpenMeld environment, then retry\"\n      ),\n    };\n  }\n\n  const requiredGuidance = resolveRequiredAuthenticationGuidance(input.reason);\n  return {\n    reason: input.reason,\n    action,\n    authBaseUrl,\n    gatewayUrl,\n    ...requiredGuidance,\n  };\n}\n\nexport function buildCommandAuthenticationPromptMessage(\n  action?: string\n): string {\n  const normalizedAction = normalizeOptionalString(action);\n  if (!normalizedAction) {\n    return \"Sign in is required to continue. What do you want to do?\";\n  }\n  return `Sign in is required before ${normalizedAction}. What do you want to do?`;\n}\n\nexport function buildHumanAuthenticationCard(input: {\n  guidance: AuthenticationGuidance;\n  mode: \"prompt\" | \"error\";\n}): {\n  title: string;\n  rows: Array<{ label: string; value: string }>;\n} {\n  const rows: Array<{ label: string; value: string }> = [];\n  rows.push({\n    label: \"What happened\",\n    value: buildHumanAuthenticationStatusText(input.guidance),\n  });\n\n  rows.push({\n    label: \"Next\",\n    value:\n      input.mode === \"prompt\"\n        ? input.guidance.promptNextStep\n        : input.guidance.errorNextStep,\n  });\n\n  return {\n    title: input.guidance.title,\n    rows,\n  };\n}\n\nexport function buildAgentAuthenticationGuide(\n  guidance: AuthenticationGuidance\n): DualViewGuideInput {\n  if (guidance.reason === \"unavailable\") {\n    return {\n      summary: guidance.agentErrorMessage,\n      humanSteps: [\n        \"Retry the same command from a fresh CLI process.\",\n        ...formatOpenMeldCliCommands([\n          \"If it still fails, run `openmeld auth status --view agent` and share the diagnostics with the operator.\",\n        ]),\n      ],\n      agentCommands: [\n        \"Retry the same command once from a fresh CLI process.\",\n        ...formatOpenMeldCliCommands([\n          \"If it still fails, run `openmeld auth status --view agent` for diagnostics.\",\n        ]),\n      ],\n      notes: buildAgentAuthenticationNotes(guidance),\n    };\n  }\n  return {\n    summary: guidance.agentErrorMessage,\n    humanSteps: buildAgentAuthenticationHumanSteps(guidance),\n    agentCommands: [\n      \"Ask the operator to complete sign-in in a human terminal, then retry the same command.\",\n    ],\n    notes: buildAgentAuthenticationNotes(guidance),\n  };\n}\n\nexport function buildAuthenticationStatusLabel(\n  state: AuthSessionState | AuthenticationGuidanceReason\n): string {\n  switch (state) {\n    case \"valid\":\n      return \"signed in\";\n    case \"missing\":\n    case \"required\":\n      return \"sign in needed\";\n    case \"expired\":\n      return \"sign in expired\";\n    case \"invalid\":\n      return \"sign in needs refresh\";\n    case \"revoked\":\n      return \"sign in removed\";\n    case \"mismatch\":\n      return \"wrong OpenMeld environment\";\n    case \"unavailable\":\n      return \"saved sign-in unavailable\";\n    default:\n      return \"sign in needed\";\n  }\n}\n\nexport function resolveAuthenticationReasonFromState(\n  state: AuthSessionState\n): AuthenticationGuidanceReason | null {\n  switch (state) {\n    case \"missing\":\n      return \"required\";\n    case \"expired\":\n    case \"invalid\":\n    case \"revoked\":\n      return state;\n    default:\n      return null;\n  }\n}\n\nexport function isAuthenticationError(\n  error: unknown\n): error is OpenMeldAuthenticationError {\n  return error instanceof OpenMeldAuthenticationError;\n}\n\nexport function resolveAuthenticationGuidanceFromError(\n  error: unknown\n): AuthenticationGuidance | null {\n  if (error instanceof OpenMeldAuthenticationError) {\n    return error.guidance;\n  }\n\n  const message = error instanceof Error ? error.message : String(error ?? \"\");\n  return resolveAuthenticationGuidanceFromMessage(message);\n}\n\nexport function resolveAuthenticationGuidanceFromMessage(\n  message: string\n): AuthenticationGuidance | null {\n  const normalizedMessage = String(message ?? \"\").trim();\n  if (normalizedMessage.length === 0) {\n    return null;\n  }\n  const loweredMessage = normalizedMessage.toLowerCase();\n\n  const mismatch = AUTH_MISMATCH_ERROR_RE.exec(normalizedMessage);\n  if (mismatch?.[1] && mismatch[2]) {\n    return resolveAuthenticationGuidance({\n      reason: \"mismatch\",\n      authBaseUrl: mismatch[1],\n      gatewayUrl: mismatch[2],\n    });\n  }\n\n  if (normalizedMessage.includes(\"Current session is for\")) {\n    const parsed = AUTH_MISMATCH_SUMMARY_RE.exec(normalizedMessage);\n    return resolveAuthenticationGuidance({\n      reason: \"mismatch\",\n      authBaseUrl: parsed?.[1] ?? null,\n      gatewayUrl: parsed?.[2] ?? null,\n    });\n  }\n\n  if (loweredMessage.includes(\"auth session expired\")) {\n    return resolveAuthenticationGuidance({\n      reason: \"expired\",\n    });\n  }\n  if (loweredMessage.includes(\"invalid local auth session\")) {\n    return resolveAuthenticationGuidance({\n      reason: \"invalid\",\n    });\n  }\n  if (loweredMessage.includes(\"auth session revoked\")) {\n    return resolveAuthenticationGuidance({\n      reason: \"revoked\",\n    });\n  }\n  if (\n    loweredMessage.includes(\"saved sign-in is unavailable\") ||\n    loweredMessage.includes(\"saved sign-in is temporarily unavailable\")\n  ) {\n    return resolveAuthenticationGuidance({\n      reason: \"unavailable\",\n    });\n  }\n  if (\n    loweredMessage.includes(\"authentication required\") ||\n    loweredMessage.includes(\"auth.unauthenticated\") ||\n    loweredMessage.includes(\"auth.authentication_required\") ||\n    loweredMessage.includes(\"sign-in required\")\n  ) {\n    return resolveAuthenticationGuidance({\n      reason: \"required\",\n    });\n  }\n\n  return null;\n}\n\nexport function extractAuthenticationPromptAction(\n  promptMessage: string\n): string | null {\n  const normalizedMessage = String(promptMessage ?? \"\").trim();\n  if (normalizedMessage.length === 0) {\n    return null;\n  }\n  const match = AUTH_PROMPT_ACTION_RE.exec(normalizedMessage);\n  return normalizeOptionalString(match?.groups?.action);\n}\n\nfunction resolveRequiredAuthenticationGuidance(\n  reason: Exclude<AuthenticationGuidanceReason, \"mismatch\">\n): Omit<\n  AuthenticationGuidance,\n  \"reason\" | \"action\" | \"authBaseUrl\" | \"gatewayUrl\"\n> {\n  switch (reason) {\n    case \"unavailable\":\n      return {\n        title: \"OpenMeld Sign-In Unavailable\",\n        statusLabel: \"saved sign-in unavailable\",\n        summary: \"OpenMeld could not read this device's saved sign-in.\",\n        promptNextStep: formatInlineOpenMeldCliCommands(\n          \"Retry the same command. If it still fails, run `openmeld auth status --view agent` for diagnostics.\"\n        ),\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Retry the same command. If it still fails, run `openmeld auth status --view agent` for diagnostics.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"saved sign-in is unavailable; retry the same command once; if it still fails, run `openmeld auth status --view agent` for diagnostics\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"saved sign-in is unavailable; retry the same command once; if it still fails, run `openmeld auth status --view agent` for diagnostics\"\n        ),\n      };\n    case \"expired\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in expired\",\n        summary: \"Your OpenMeld sign-in has expired.\",\n        promptNextStep: \"Choose Sign in now to refresh and continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` again to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in expired; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in expired; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    case \"invalid\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in needs refresh\",\n        summary: \"This device's OpenMeld sign-in is no longer valid.\",\n        promptNextStep: \"Choose Sign in now to refresh and continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` again to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"local sign-in is invalid; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"local sign-in is invalid; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    case \"revoked\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in removed\",\n        summary: \"Your OpenMeld sign-in was revoked.\",\n        promptNextStep: \"Choose Sign in now to refresh and continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` again to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in was revoked; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in was revoked; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    case \"required\":\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in needed\",\n        summary: \"You're not signed in to OpenMeld yet.\",\n        promptNextStep: \"Choose Sign in now to continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n    default:\n      return {\n        title: \"Sign In Needed\",\n        statusLabel: \"sign in needed\",\n        summary: \"You're not signed in to OpenMeld yet.\",\n        promptNextStep: \"Choose Sign in now to continue.\",\n        errorNextStep: formatInlineOpenMeldCliCommands(\n          \"Run `openmeld login` to continue.\"\n        ),\n        commandErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login`\"\n        ),\n        agentErrorMessage: formatInlineOpenMeldCliCommands(\n          \"sign-in required; run `openmeld login` in a human terminal, then retry\"\n        ),\n      };\n  }\n}\n\nfunction buildHumanAuthenticationStatusText(\n  guidance: AuthenticationGuidance\n): string {\n  const actionText = guidance.action\n    ? ` before ${guidance.action}`\n    : \" to continue\";\n  if (guidance.reason === \"mismatch\") {\n    return `Sign in to the right OpenMeld environment${actionText}.`;\n  }\n  if (guidance.reason === \"unavailable\") {\n    return `OpenMeld could not read this device's saved sign-in${actionText}.`;\n  }\n  if (\n    guidance.reason === \"expired\" ||\n    guidance.reason === \"invalid\" ||\n    guidance.reason === \"revoked\"\n  ) {\n    return `Sign in again${actionText}.`;\n  }\n  return `Sign in${actionText}.`;\n}\n\nfunction buildAgentAuthenticationHumanSteps(\n  guidance: AuthenticationGuidance\n): string[] {\n  const retryStep = guidance.action\n    ? `Retry after sign-in, then continue ${guidance.action}.`\n    : \"Retry the same command after sign-in finishes.\";\n  const steps = [...formatOpenMeldCliCommands([\"openmeld login\"]), retryStep];\n  if (guidance.reason === \"mismatch\" && guidance.gatewayUrl) {\n    steps.splice(\n      1,\n      0,\n      `Use the OpenMeld environment for ${guidance.gatewayUrl}.`\n    );\n  }\n  return steps;\n}\n\nfunction buildAgentAuthenticationNotes(\n  guidance: AuthenticationGuidance\n): string[] {\n  const notes: string[] = [];\n  if (guidance.action) {\n    notes.push(`Blocked action: ${guidance.action}`);\n  }\n  if (guidance.authBaseUrl) {\n    notes.push(`Current sign-in: ${guidance.authBaseUrl}`);\n  }\n  if (guidance.gatewayUrl) {\n    notes.push(`Current gateway: ${guidance.gatewayUrl}`);\n  }\n  return notes;\n}\n\nfunction normalizeOptionalString(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import { randomUUID } from \"node:crypto\";\nimport { mkdir, readFile, rename, rm, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { daemonRuntimeDataPath } from \"../../config/daemon-state\";\nimport { OPENMELD_HOME_ENV_KEY } from \"../../config/paths\";\n\nconst CATALOG_SYNC_SIGNAL_FILE = \"catalog-sync-signal.json\";\nconst CATALOG_SYNC_SIGNAL_SCHEMA = \"openmeld-daemon-catalog-sync-signal-v1\";\n\nexport type DaemonCatalogSyncSignal = {\n  signalId?: string;\n  updatedAt: string;\n  updatedAtMs: number;\n  reason: string;\n};\n\ntype DaemonCatalogSyncSignalFile = {\n  signalId?: string;\n  v: 1;\n  schema: string;\n  updatedAt: string;\n  reason: string;\n};\n\nexport async function touchDaemonCatalogSyncSignal(input: {\n  reason: string;\n  rootDir?: string;\n}): Promise<void> {\n  const now = new Date().toISOString();\n  const runtimeDataPath = resolveDaemonRuntimeDataPath(input.rootDir);\n  const signalPath = daemonCatalogSyncSignalPath(runtimeDataPath);\n  await mkdir(runtimeDataPath, { recursive: true });\n  const next: DaemonCatalogSyncSignalFile = {\n    signalId: randomUUID(),\n    v: 1,\n    schema: CATALOG_SYNC_SIGNAL_SCHEMA,\n    updatedAt: now,\n    reason: normalizeReason(input.reason),\n  };\n\n  const tempPath = `${signalPath}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n  try {\n    await writeFile(tempPath, `${JSON.stringify(next, null, 2)}\\n`, \"utf8\");\n    await rename(tempPath, signalPath);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nexport async function readDaemonCatalogSyncSignal(\n  input: { rootDir?: string } = {}\n): Promise<DaemonCatalogSyncSignal | null> {\n  const raw = await readFile(\n    daemonCatalogSyncSignalPath(resolveDaemonRuntimeDataPath(input.rootDir)),\n    \"utf8\"\n  ).catch(() => null);\n  if (!raw) {\n    return null;\n  }\n\n  try {\n    const parsed = JSON.parse(raw) as Partial<DaemonCatalogSyncSignalFile>;\n    if (parsed.v !== 1) {\n      return null;\n    }\n    if (\n      parsed.schema !== CATALOG_SYNC_SIGNAL_SCHEMA ||\n      typeof parsed.updatedAt !== \"string\" ||\n      parsed.updatedAt.trim().length === 0 ||\n      typeof parsed.reason !== \"string\"\n    ) {\n      return null;\n    }\n    const updatedAt = parsed.updatedAt.trim();\n    const updatedAtMs = Date.parse(updatedAt);\n    if (!Number.isFinite(updatedAtMs) || updatedAtMs <= 0) {\n      return null;\n    }\n    return {\n      ...(typeof parsed.signalId === \"string\" && parsed.signalId.trim()\n        ? { signalId: parsed.signalId.trim() }\n        : {}),\n      updatedAt,\n      updatedAtMs,\n      reason: normalizeReason(parsed.reason),\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction daemonCatalogSyncSignalPath(runtimeDataPath: string): string {\n  return join(runtimeDataPath, CATALOG_SYNC_SIGNAL_FILE);\n}\n\nfunction resolveDaemonRuntimeDataPath(rootDir: string | undefined): string {\n  if (!rootDir) {\n    return daemonRuntimeDataPath();\n  }\n  return daemonRuntimeDataPath({\n    env: { ...process.env, [OPENMELD_HOME_ENV_KEY]: rootDir },\n  });\n}\n\nfunction normalizeReason(value: string): string {\n  const normalized = value.trim();\n  if (normalized.length > 0) {\n    return normalized;\n  }\n  return \"local_state_changed\";\n}\n","import {\n  ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE,\n  ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE,\n} from \"@openmeld/schemas\";\n\nexport function assertAdditionalHumanProfileCreationEnabled(input: {\n  additionalHumanProfileCreationEnabled: boolean;\n  cause?: unknown;\n}): void {\n  if (input.additionalHumanProfileCreationEnabled) {\n    return;\n  }\n  throw Object.assign(\n    new Error(ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, {\n      cause: input.cause,\n    }),\n    {\n      code: ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE,\n    }\n  );\n}\n","import {\n  ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE,\n  authProfileManagedRoleSchema,\n  profileCapabilitiesResponseSchema,\n  profileErrorResponseSchema,\n} from \"@openmeld/schemas\";\nimport type { z } from \"zod/v4\";\nimport {\n  createAuthenticationError,\n  resolveAuthenticationReasonFromState,\n} from \"../auth/auth-guidance\";\nimport { touchDaemonCatalogSyncSignal } from \"../local-service/state/catalog-sync-signal\";\nimport { getAuthSessionState, type StoredAuthSession } from \"./auth-session\";\nimport { isLoopbackHostname } from \"./loopback-hostname\";\nimport { assertAdditionalHumanProfileCreationEnabled } from \"./profile-creation-capability\";\n\nexport type OpenMeldProfileKind = \"human\" | \"agent\" | \"system\";\nexport type OpenMeldProfileStatus = \"active\" | \"disabled\";\nexport type OpenMeldProfileManagedRole = z.infer<\n  typeof authProfileManagedRoleSchema\n>;\nexport type OpenMeldProfileCapabilities = z.infer<\n  typeof profileCapabilitiesResponseSchema\n>;\n\nexport type OpenMeldProfile = {\n  openMeldProfileId: string;\n  profileName: string;\n  profileHandle: string;\n  profileKind: OpenMeldProfileKind;\n  isDefault?: boolean;\n  status: OpenMeldProfileStatus;\n  ownerUserId: string;\n  ownerName?: string;\n  source: string;\n  managedRole?: OpenMeldProfileManagedRole | null;\n  createdByUserId: string | null;\n  defaultProjectId?: string | null;\n  creationActorProfileId?: string | null;\n  creatorProfileId?: string | null;\n  lastUsedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n};\n\nconst VALIDATED_SESSION_CACHE_TTL_MS = 5000;\nconst DEFAULT_OPENMELD_PROFILES_API_TIMEOUT_MS = 10_000;\nconst LOOPBACK_OPENMELD_PROFILES_API_TIMEOUT_MS = 2500;\nconst PROFILE_HANDLE_PREFIX_RE = /^@+/;\n\nlet validatedSessionCache: {\n  session: StoredAuthSession;\n  validatedAtMs: number;\n} | null = null;\n\nexport function resetOpenMeldProfilesSessionCacheForTests(): void {\n  validatedSessionCache = null;\n}\n\nexport function primeOpenMeldProfilesSessionCache(\n  session: StoredAuthSession\n): void {\n  validatedSessionCache = {\n    session,\n    validatedAtMs: Date.now(),\n  };\n}\n\nclass AuthProfilesApiError extends Error {\n  readonly status: number;\n  readonly endpoint: string;\n  readonly code: string | null;\n\n  constructor(input: {\n    message: string;\n    status: number;\n    endpoint: string;\n    code?: string | null;\n  }) {\n    super(input.message);\n    this.name = \"AuthProfilesApiError\";\n    this.status = input.status;\n    this.endpoint = input.endpoint;\n    this.code = normalizeOptionalString(input.code);\n  }\n}\n\nfunction isAuthProfilesApiError(error: unknown): error is AuthProfilesApiError {\n  return error instanceof AuthProfilesApiError;\n}\n\nexport async function listOpenMeldProfiles(): Promise<OpenMeldProfile[]> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"GET\",\n    path: \"/v1/profiles\",\n  });\n\n  const profiles = readArrayField(payload, \"profiles\");\n  return profiles.map(parseOpenMeldProfileItem);\n}\n\nexport async function getOpenMeldProfileCapabilities(): Promise<OpenMeldProfileCapabilities> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"GET\",\n    path: \"/v1/profiles/capabilities\",\n  });\n  const parsed = profileCapabilitiesResponseSchema.safeParse(payload);\n  if (!parsed.success) {\n    throw new Error(\"invalid profile capabilities payload\", {\n      cause: parsed.error,\n    });\n  }\n  return parsed.data;\n}\n\nexport async function resolveOpenMeldProfile(input: {\n  openMeldProfileId?: string;\n  profileKind?: OpenMeldProfileKind;\n}): Promise<OpenMeldProfile> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/resolve\",\n    body: {\n      ...(normalizeOptionalString(input.openMeldProfileId)\n        ? {\n            openMeldProfileId: normalizeOptionalString(input.openMeldProfileId),\n          }\n        : {}),\n      ...(input.profileKind ? { profileKind: input.profileKind } : {}),\n    },\n  });\n\n  return parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n}\n\nexport async function resolveOpenMeldProfileByIdOrName(input: {\n  profileIdentifier: string;\n  profileKind?: OpenMeldProfileKind;\n}): Promise<OpenMeldProfile> {\n  const profileIdentifier = normalizeOptionalString(input.profileIdentifier);\n  if (!profileIdentifier) {\n    throw new Error(\"profile identifier is required\");\n  }\n\n  try {\n    return await resolveOpenMeldProfile({\n      openMeldProfileId: profileIdentifier,\n      ...(input.profileKind ? { profileKind: input.profileKind } : {}),\n    });\n  } catch (idError) {\n    const matched = await findOpenMeldProfileByNameOrHandle({\n      profileIdentifier,\n      ...(input.profileKind ? { profileKind: input.profileKind } : {}),\n    });\n    if (matched.status === \"found\") {\n      return matched.profile;\n    }\n    if (matched.status === \"ambiguous\") {\n      throw new Error(\n        `OpenMeld profile name is ambiguous: ${profileIdentifier}. Pass the profile ID instead.`\n      );\n    }\n    if (isAuthProfilesApiError(idError)) {\n      throw new Error(`OpenMeld profile not found: ${profileIdentifier}`);\n    }\n    throw idError;\n  }\n}\n\nexport function createOpenMeldAgentProfile(input: {\n  profileName: string;\n  creatorProfileId?: string | null;\n}): Promise<OpenMeldProfile> {\n  const profileName = normalizeOptionalString(input.profileName);\n  const creatorProfileId =\n    normalizeOptionalString(input.creatorProfileId) ?? undefined;\n  if (!profileName) {\n    throw new Error(\"profile name is required\");\n  }\n  return createOpenMeldAgentProfileRequest({\n    profileName,\n    ...(creatorProfileId ? { creatorProfileId } : {}),\n  });\n}\n\nexport function ensureOpenMeldManagedAgentProfile(input: {\n  profileName: string;\n  managedRole: OpenMeldProfileManagedRole;\n  creatorProfileId?: string | null;\n}): Promise<OpenMeldProfile> {\n  const profileName = normalizeOptionalString(input.profileName);\n  const creatorProfileId =\n    normalizeOptionalString(input.creatorProfileId) ?? undefined;\n  if (!profileName) {\n    throw new Error(\"profile name is required\");\n  }\n  return ensureOpenMeldManagedAgentProfileRequest({\n    profileName,\n    managedRole: input.managedRole,\n    ...(creatorProfileId ? { creatorProfileId } : {}),\n  });\n}\n\nexport async function createOpenMeldHumanProfile(input: {\n  profileName: string;\n  creatorProfileId?: string | null;\n}): Promise<OpenMeldProfile> {\n  const profileName = normalizeOptionalString(input.profileName);\n  const creatorProfileId =\n    normalizeOptionalString(input.creatorProfileId) ?? undefined;\n  if (!profileName) {\n    throw new Error(\"profile name is required\");\n  }\n\n  try {\n    const capabilities = await getOpenMeldProfileCapabilities();\n    assertAdditionalHumanProfileCreationEnabled(capabilities);\n  } catch (error) {\n    if (\n      error instanceof Error &&\n      \"code\" in error &&\n      error.code === ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE\n    ) {\n      throw error;\n    }\n    assertAdditionalHumanProfileCreationEnabled({\n      additionalHumanProfileCreationEnabled: false,\n      cause: error,\n    });\n  }\n\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/humans\",\n    body: {\n      profileName,\n      ...(creatorProfileId ? { creatorProfileId } : {}),\n    },\n  });\n\n  const created = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_created\");\n  return created;\n}\n\nexport async function updateOpenMeldProfile(input: {\n  openMeldProfileId: string;\n  profileName?: string;\n}): Promise<OpenMeldProfile> {\n  const openMeldProfileId = normalizeOptionalString(input.openMeldProfileId);\n  if (!openMeldProfileId) {\n    throw new Error(\"openMeldProfileId is required\");\n  }\n\n  const profileName = normalizeOptionalString(input.profileName);\n  const hasProfileName = Boolean(profileName);\n\n  if (!hasProfileName) {\n    throw new Error(\"profileName is required\");\n  }\n\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"PATCH\",\n    path: `/v1/profiles/${encodeURIComponent(openMeldProfileId)}`,\n    body: {\n      ...(profileName ? { profileName } : {}),\n    },\n  });\n\n  const updated = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_updated\");\n  return updated;\n}\n\nexport async function deleteOpenMeldProfile(input: {\n  openMeldProfileId: string;\n}): Promise<OpenMeldProfile> {\n  const openMeldProfileId = normalizeOptionalString(input.openMeldProfileId);\n  if (!openMeldProfileId) {\n    throw new Error(\"openMeldProfileId is required\");\n  }\n\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"DELETE\",\n    path: `/v1/profiles/${encodeURIComponent(openMeldProfileId)}`,\n  });\n\n  const deleted = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_deleted\");\n  return deleted;\n}\n\nasync function requestOpenMeldProfilesApi(input: {\n  method: \"GET\" | \"POST\" | \"DELETE\" | \"PATCH\";\n  path: string;\n  body?: Record<string, unknown>;\n}): Promise<Record<string, unknown>> {\n  const session = await requireOpenMeldProfilesSession();\n  const endpoint = toAuthEndpoint(session.authBaseUrl, input.path);\n  const response = await fetch(endpoint, {\n    method: input.method,\n    headers: {\n      Authorization: `${normalizeTokenType(session.tokenType)} ${session.accessToken}`,\n      ...(input.body ? { \"content-type\": \"application/json\" } : {}),\n    },\n    ...(input.body ? { body: JSON.stringify(input.body) } : {}),\n    signal: AbortSignal.timeout(resolveOpenMeldProfilesApiTimeoutMs(endpoint)),\n  });\n\n  const payload = await parseResponseJson(response);\n\n  if (!response.ok) {\n    const parsedError = profileErrorResponseSchema.safeParse(payload);\n    const status = response.status;\n    const code = parsedError.success ? parsedError.data.code : null;\n    if (status === 401 || status === 403 || code === \"auth.unauthenticated\") {\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: \"required\",\n      });\n    }\n\n    const message = resolveProfilesApiErrorMessage({\n      payload: parsedError.success ? parsedError.data : payload,\n      status,\n      code,\n      endpoint,\n    });\n    throw new AuthProfilesApiError({\n      status,\n      endpoint,\n      code,\n      message,\n    });\n  }\n\n  const record = isRecord(payload) ? payload : {};\n  const ok = readBooleanField(record, \"ok\");\n  if (!ok) {\n    const parsedError = profileErrorResponseSchema.safeParse(payload);\n    const code = parsedError.success ? parsedError.data.code : null;\n    throw new AuthProfilesApiError({\n      status: response.status,\n      endpoint,\n      code,\n      message: resolveProfilesApiErrorMessage({\n        payload: parsedError.success ? parsedError.data : payload,\n        status: response.status,\n        code,\n        endpoint,\n      }),\n    });\n  }\n\n  return record;\n}\n\nasync function createOpenMeldAgentProfileRequest(input: {\n  profileName: string;\n  creatorProfileId?: string;\n}): Promise<OpenMeldProfile> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/agents\",\n    body: {\n      profileName: input.profileName,\n      ...(input.creatorProfileId\n        ? { creatorProfileId: input.creatorProfileId }\n        : {}),\n    },\n  });\n\n  const created = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_created\");\n  return created;\n}\n\nasync function ensureOpenMeldManagedAgentProfileRequest(input: {\n  profileName: string;\n  managedRole: OpenMeldProfileManagedRole;\n  creatorProfileId?: string;\n}): Promise<OpenMeldProfile> {\n  const payload = await requestOpenMeldProfilesApi({\n    method: \"POST\",\n    path: \"/v1/profiles/agents/managed/ensure\",\n    body: {\n      profileName: input.profileName,\n      managedRole: input.managedRole,\n      ...(input.creatorProfileId\n        ? { creatorProfileId: input.creatorProfileId }\n        : {}),\n    },\n  });\n\n  const ensured = parseOpenMeldProfileItem(readRecordField(payload, \"profile\"));\n  await emitRouteCatalogSync(\"profile_ensured\");\n  return ensured;\n}\n\nasync function requireOpenMeldProfilesSession(): Promise<StoredAuthSession> {\n  const now = Date.now();\n  if (\n    validatedSessionCache &&\n    now - validatedSessionCache.validatedAtMs <= VALIDATED_SESSION_CACHE_TTL_MS\n  ) {\n    const localState = await getAuthSessionState({\n      validateRemote: false,\n    });\n    if (\n      localState.state === \"valid\" &&\n      localState.session &&\n      isSameStoredAuthSession(localState.session, validatedSessionCache.session)\n    ) {\n      return validatedSessionCache.session;\n    }\n    validatedSessionCache = null;\n  }\n\n  const state = await getAuthSessionState({\n    validateRemote: true,\n  });\n\n  switch (state.state) {\n    case \"valid\": {\n      if (!state.session) {\n        throw new Error(\"auth session unavailable\");\n      }\n      validatedSessionCache = {\n        session: state.session,\n        validatedAtMs: now,\n      };\n      return state.session;\n    }\n    case \"missing\":\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: \"required\",\n      });\n    case \"expired\":\n    case \"invalid\":\n    case \"revoked\":\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: resolveAuthenticationReasonFromState(state.state) ?? \"required\",\n      });\n    default:\n      validatedSessionCache = null;\n      throw createAuthenticationError({\n        reason: \"required\",\n      });\n  }\n}\n\nfunction resolveOpenMeldProfilesApiTimeoutMs(endpoint: string): number {\n  const url = parseUrlOrNull(endpoint);\n  if (url && isLoopbackHostname(url.hostname)) {\n    return LOOPBACK_OPENMELD_PROFILES_API_TIMEOUT_MS;\n  }\n  return DEFAULT_OPENMELD_PROFILES_API_TIMEOUT_MS;\n}\n\nfunction parseUrlOrNull(value: string): URL | null {\n  try {\n    return new URL(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction isSameStoredAuthSession(\n  a: StoredAuthSession,\n  b: StoredAuthSession\n): boolean {\n  return (\n    a.authBaseUrl === b.authBaseUrl &&\n    a.clientId === b.clientId &&\n    a.tokenType === b.tokenType &&\n    a.accessToken === b.accessToken &&\n    (a.expiresAt ?? null) === (b.expiresAt ?? null)\n  );\n}\n\nasync function emitRouteCatalogSync(reason: string): Promise<void> {\n  await touchDaemonCatalogSyncSignal({ reason }).catch(() => undefined);\n}\n\nfunction parseOpenMeldProfileItem(value: unknown): OpenMeldProfile {\n  const record = isRecord(value) ? value : {};\n\n  const openMeldProfileId = readOptionalStringField(\n    record,\n    \"openMeldProfileId\"\n  );\n  if (!openMeldProfileId) {\n    throw new Error(\"invalid profile payload: missing openMeldProfileId\");\n  }\n\n  const profileName = readRequiredStringField(record, \"profileName\");\n  const profileHandle = readRequiredStringField(record, \"profileHandle\");\n  const profileKind = readProfileKind(record, \"profileKind\");\n  const isDefault = readOptionalBooleanField(record, \"isDefault\") ?? false;\n  const status = readProfileStatus(record, \"status\");\n  const ownerUserId = readRequiredStringField(record, \"ownerUserId\");\n  const ownerName = readOptionalStringField(record, \"ownerName\") ?? undefined;\n  const source = readRequiredStringField(record, \"source\");\n  const managedRole = readOptionalManagedRoleField(record, \"managedRole\");\n  const createdByUserId =\n    readOptionalStringField(record, \"createdByUserId\") ?? null;\n  const defaultProjectId = readOptionalStringField(record, \"defaultProjectId\");\n  const creationActorProfileId =\n    readOptionalStringField(record, \"creationActorProfileId\") ?? null;\n  const creatorProfileId =\n    readOptionalStringField(record, \"creatorProfileId\") ?? null;\n  const lastUsedAt = readOptionalStringField(record, \"lastUsedAt\");\n  const createdAt = readRequiredStringField(record, \"createdAt\");\n  const updatedAt = readRequiredStringField(record, \"updatedAt\");\n\n  return {\n    openMeldProfileId,\n    profileName,\n    profileHandle,\n    profileKind,\n    isDefault,\n    status,\n    ownerUserId,\n    ...(ownerName ? { ownerName } : {}),\n    source,\n    managedRole,\n    createdByUserId,\n    defaultProjectId,\n    creationActorProfileId,\n    creatorProfileId,\n    lastUsedAt,\n    createdAt,\n    updatedAt,\n  };\n}\n\nfunction readProfileKind(\n  input: Record<string, unknown>,\n  field: string\n): OpenMeldProfileKind {\n  const value = readRequiredStringField(input, field);\n  if (value === \"human\" || value === \"agent\" || value === \"system\") {\n    return value;\n  }\n  throw new Error(`invalid profile payload: unsupported ${field}`);\n}\n\nfunction readProfileStatus(\n  input: Record<string, unknown>,\n  field: string\n): OpenMeldProfileStatus {\n  const value = readRequiredStringField(input, field);\n  if (value === \"active\" || value === \"disabled\") {\n    return value;\n  }\n  throw new Error(`invalid profile payload: unsupported ${field}`);\n}\n\nfunction readOptionalManagedRoleField(\n  input: Record<string, unknown>,\n  field: string\n): OpenMeldProfileManagedRole | null {\n  const value = readOptionalStringField(input, field);\n  if (!value) {\n    return null;\n  }\n  const parsed = authProfileManagedRoleSchema.safeParse(value);\n  if (parsed.success) {\n    return parsed.data;\n  }\n  throw new Error(`invalid profile payload: unsupported ${field}`);\n}\n\nfunction readRecordField(\n  input: Record<string, unknown>,\n  field: string\n): Record<string, unknown> {\n  const value = input[field];\n  if (isRecord(value)) {\n    return value;\n  }\n  throw new Error(`invalid api payload: missing ${field}`);\n}\n\nfunction readArrayField(\n  input: Record<string, unknown>,\n  field: string\n): Record<string, unknown>[] {\n  const value = input[field];\n  if (!Array.isArray(value)) {\n    throw new Error(`invalid api payload: missing ${field}`);\n  }\n\n  return value.filter(isRecord);\n}\n\nfunction readRequiredStringField(\n  input: Record<string, unknown>,\n  field: string\n): string {\n  const value = normalizeOptionalString(input[field]);\n  if (!value) {\n    throw new Error(`invalid profile payload: missing ${field}`);\n  }\n  return value;\n}\n\nfunction readOptionalStringField(\n  input: Record<string, unknown>,\n  field: string\n): string | null {\n  return normalizeOptionalString(input[field]);\n}\n\nfunction readBooleanField(\n  input: Record<string, unknown>,\n  field: string\n): boolean {\n  return input[field] === true;\n}\n\nfunction readOptionalBooleanField(\n  input: Record<string, unknown>,\n  field: string\n): boolean | null {\n  const value = input[field];\n  if (typeof value === \"boolean\") {\n    return value;\n  }\n  return null;\n}\n\nfunction normalizeOptionalString(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction normalizeTokenType(tokenType: string): string {\n  const normalized = tokenType.trim();\n  return normalized.length > 0 ? normalized : \"Bearer\";\n}\n\nfunction toAuthEndpoint(baseUrl: string, pathname: string): string {\n  const url = new URL(baseUrl);\n  url.pathname = pathname;\n  url.search = \"\";\n  url.hash = \"\";\n  return url.toString();\n}\n\nasync function parseResponseJson(response: Response): Promise<unknown> {\n  const raw = await response.text();\n  if (!raw) {\n    return null;\n  }\n  try {\n    return JSON.parse(raw);\n  } catch {\n    return { message: raw };\n  }\n}\n\nfunction extractApiErrorMessage(payload: unknown, status: number): string {\n  const record = isRecord(payload) ? payload : {};\n  const message =\n    normalizeOptionalString(record.message) ??\n    normalizeOptionalString(record.error_description) ??\n    normalizeOptionalString(record.error);\n\n  if (message) {\n    return message;\n  }\n\n  return `request failed with status ${status}`;\n}\n\nfunction resolveProfilesApiErrorMessage(input: {\n  payload: unknown;\n  status: number;\n  code: string | null;\n  endpoint: string;\n}): string {\n  const message = extractApiErrorMessage(input.payload, input.status);\n  if (\n    input.status === 500 &&\n    input.code === \"profile.internal_error\" &&\n    isLoopbackProfileEndpoint(input.endpoint)\n  ) {\n    return (\n      \"internal error from local auth service; if profile schema changed, run \" +\n      \"`pnpm db:migrate:dev` and retry.\"\n    );\n  }\n  if (\n    input.status === 500 &&\n    input.code === \"profile.internal_error\" &&\n    isHostedProfilesEndpoint(input.endpoint)\n  ) {\n    return (\n      \"internal error from OpenMeld auth service while handling profile state. \" +\n      \"If this works in `openmeld-dev` but fails in `openmeld`, the hosted auth deployment \" +\n      \"is likely out of sync with the latest profile flow. Retry after the \" +\n      \"production auth deploy/migration is updated.\"\n    );\n  }\n\n  return message;\n}\n\nfunction normalizeProfileLookupKey(value: string): string {\n  return value.trim().replace(PROFILE_HANDLE_PREFIX_RE, \"\").toLowerCase();\n}\n\nasync function findOpenMeldProfileByNameOrHandle(input: {\n  profileIdentifier: string;\n  profileKind?: OpenMeldProfileKind;\n}): Promise<\n  | { status: \"found\"; profile: OpenMeldProfile }\n  | { status: \"ambiguous\" }\n  | { status: \"not_found\" }\n> {\n  const lookupKey = normalizeProfileLookupKey(input.profileIdentifier);\n  const matches = (await listOpenMeldProfiles()).filter((profile) => {\n    if (input.profileKind && profile.profileKind !== input.profileKind) {\n      return false;\n    }\n    return (\n      normalizeProfileLookupKey(profile.profileName) === lookupKey ||\n      normalizeProfileLookupKey(profile.profileHandle) === lookupKey\n    );\n  });\n\n  if (matches.length === 1) {\n    const profile = matches[0];\n    if (profile) {\n      return { status: \"found\", profile };\n    }\n  }\n  if (matches.length > 1) {\n    return { status: \"ambiguous\" };\n  }\n  return { status: \"not_found\" };\n}\n\nfunction isLoopbackProfileEndpoint(endpoint: string): boolean {\n  const url = parseUrlOrNull(endpoint);\n  return Boolean(\n    url &&\n      isLoopbackHostname(url.hostname) &&\n      url.pathname.startsWith(\"/v1/profiles\")\n  );\n}\n\nfunction isHostedProfilesEndpoint(endpoint: string): boolean {\n  const url = parseUrlOrNull(endpoint);\n  return Boolean(\n    url &&\n      !isLoopbackHostname(url.hostname) &&\n      url.pathname.startsWith(\"/v1/profiles\")\n  );\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value && typeof value === \"object\" && !Array.isArray(value));\n}\n","import {\n  CATALOG_SYNC_INTERVAL_MULTIPLIER as STRATEGY_CATALOG_SYNC_INTERVAL_MULTIPLIER,\n  CATALOG_SYNC_RETRY_INTERVAL_MS as STRATEGY_CATALOG_SYNC_RETRY_INTERVAL_MS,\n  CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS as STRATEGY_CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS,\n  DAEMON_RUNTIME_CONTRACT_EPOCH as STRATEGY_DAEMON_RUNTIME_CONTRACT_EPOCH,\n  DAEMON_STREAM_CONNECT_TIMEOUT_MS as STRATEGY_DAEMON_STREAM_CONNECT_TIMEOUT_MS,\n  DAEMON_STREAM_KEEPALIVE_INTERVAL_MS as STRATEGY_DAEMON_STREAM_KEEPALIVE_INTERVAL_MS,\n  DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS as STRATEGY_DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS,\n  DEFAULT_HEARTBEAT_INTERVAL_MS as STRATEGY_DEFAULT_HEARTBEAT_INTERVAL_MS,\n  HEARTBEAT_RESPONSE_TIMEOUT_MS as STRATEGY_HEARTBEAT_RESPONSE_TIMEOUT_MS,\n  MAX_CATALOG_SYNC_INTERVAL_MS as STRATEGY_MAX_CATALOG_SYNC_INTERVAL_MS,\n  MAX_HEARTBEAT_INTERVAL_MS as STRATEGY_MAX_HEARTBEAT_INTERVAL_MS,\n  MIN_CATALOG_SYNC_INTERVAL_MS as STRATEGY_MIN_CATALOG_SYNC_INTERVAL_MS,\n  MIN_HEARTBEAT_INTERVAL_MS as STRATEGY_MIN_HEARTBEAT_INTERVAL_MS,\n  PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS as STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS,\n  PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS as STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS,\n  REGISTER_RESPONSE_TIMEOUT_MS as STRATEGY_REGISTER_RESPONSE_TIMEOUT_MS,\n  RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS as STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS,\n  RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS as STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS,\n  RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS as STRATEGY_RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS,\n} from \"../../strategy-constants\";\n\nexport const ADAPTIVE_HEARTBEAT_GROWTH_FACTOR = 1.35;\nexport const ADAPTIVE_HEARTBEAT_JITTER_RATIO = 0.1;\nexport const CATALOG_SYNC_INTERVAL_MULTIPLIER =\n  STRATEGY_CATALOG_SYNC_INTERVAL_MULTIPLIER;\nexport const CATALOG_SYNC_RETRY_INTERVAL_MS =\n  STRATEGY_CATALOG_SYNC_RETRY_INTERVAL_MS;\nexport const CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS =\n  STRATEGY_CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS;\nexport const DAEMON_RUNTIME_CONTRACT_EPOCH =\n  STRATEGY_DAEMON_RUNTIME_CONTRACT_EPOCH;\nexport const DAEMON_STREAM_CONNECT_TIMEOUT_MS =\n  STRATEGY_DAEMON_STREAM_CONNECT_TIMEOUT_MS;\nexport const DAEMON_STREAM_KEEPALIVE_INTERVAL_MS =\n  STRATEGY_DAEMON_STREAM_KEEPALIVE_INTERVAL_MS;\nexport const DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS =\n  STRATEGY_DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS;\nexport const DEFAULT_HEARTBEAT_INTERVAL_MS =\n  STRATEGY_DEFAULT_HEARTBEAT_INTERVAL_MS;\nexport const HEARTBEAT_RESPONSE_TIMEOUT_MS =\n  STRATEGY_HEARTBEAT_RESPONSE_TIMEOUT_MS;\nexport const MAX_CATALOG_SYNC_INTERVAL_MS =\n  STRATEGY_MAX_CATALOG_SYNC_INTERVAL_MS;\nexport const MAX_HEARTBEAT_INTERVAL_MS = STRATEGY_MAX_HEARTBEAT_INTERVAL_MS;\nexport const MIN_CATALOG_SYNC_INTERVAL_MS =\n  STRATEGY_MIN_CATALOG_SYNC_INTERVAL_MS;\nexport const MIN_HEARTBEAT_INTERVAL_MS = STRATEGY_MIN_HEARTBEAT_INTERVAL_MS;\nexport const PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS =\n  STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS;\nexport const PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS =\n  STRATEGY_PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS;\nexport const REGISTER_RESPONSE_TIMEOUT_MS =\n  STRATEGY_REGISTER_RESPONSE_TIMEOUT_MS;\nexport const RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS =\n  STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS;\nexport const RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS =\n  STRATEGY_RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS;\nexport const RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS =\n  STRATEGY_RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS;\nexport const DEFAULT_RECONNECT_DELAY_MS = 1000;\nexport const MAX_RECONNECT_DELAY_MS = 10_000;\nexport const HEARTBEAT_CONSECUTIVE_FAILURES_BEFORE_CLOSE = 3;\nexport const CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS = 5000;\nexport const CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS = 5000;\nexport const CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS = 15_000;\nexport const DAEMON_DEVICE_ID_FILE = \"daemon-device-id.txt\";\nexport const CONTEXT_STORE_FILE = \"daemon-context-map.json\";\nexport const LEDGER_DIR_NAME = \"openMeldDaemon-ledger\";\nexport const DAEMON_RUNTIME_CONTRACT_META_FILE = \"runtime-contract-meta.json\";\nexport const DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE =\n  \"runtime-contract-repair-report.json\";\nexport const OPENMELD_CLI_NPX_COMMAND = \"npx -y openmeld@latest\";\nexport const SPACE_HISTORY_BOOTSTRAP_LIMIT = 200;\nexport const BOOTSTRAP_INJECTION_KEY_SEPARATOR = \"::\";\n","import { runtimeTransportModeSchema } from \"@openmeld/schemas\";\nimport type { RuntimeTransportMode } from \"@openmeld/schemas/types\";\nimport {\n  sleep as sharedSleep,\n  toErrorMessage as sharedToErrorMessage,\n} from \"@openmeld/utils\";\n\nimport type {\n  RuntimeAgentControllerConversationIdMappingSpec,\n  RuntimeAgentStreamingMode,\n  RuntimeAgentTransportMode,\n} from \"../../config/runtime-config\";\nimport type { Presenter } from \"../../runtime/presenter/types\";\nimport {\n  DEFAULT_HEARTBEAT_INTERVAL_MS,\n  MAX_HEARTBEAT_INTERVAL_MS,\n  MIN_HEARTBEAT_INTERVAL_MS,\n} from \"./constants\";\n\nexport function emitRunLine(input: {\n  code: string;\n  payload?: unknown;\n  presenter: Presenter;\n  text: string;\n}): void {\n  if (input.presenter.view === \"agent\") {\n    input.presenter.data({\n      code: input.code,\n      payload: {\n        message: input.text,\n        ...(input.payload === undefined ? {} : { payload: input.payload }),\n      },\n    });\n    return;\n  }\n  input.presenter.line({\n    code: input.code,\n    text: input.text,\n  });\n}\n\nexport function clampInteger(value: number, min: number, max: number): number {\n  return Math.min(max, Math.max(min, Math.trunc(value)));\n}\n\nexport function normalizeHeartbeatIntervalMs(\n  value: number | undefined\n): number {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) {\n    return DEFAULT_HEARTBEAT_INTERVAL_MS;\n  }\n  return clampInteger(\n    value,\n    MIN_HEARTBEAT_INTERVAL_MS,\n    MAX_HEARTBEAT_INTERVAL_MS\n  );\n}\n\nexport function parseTransportMode(\n  value: unknown\n): RuntimeAgentTransportMode | null {\n  const parsed = runtimeTransportModeSchema.safeParse(value);\n  return parsed.success ? parsed.data : null;\n}\n\nexport function parseStreamingMode(\n  value: unknown\n): RuntimeAgentStreamingMode | null {\n  if (value === \"final\" || value === \"stream\") {\n    return value;\n  }\n  return null;\n}\n\nexport function parseRuntimeTransportMode(\n  value: unknown\n): RuntimeTransportMode | null {\n  return parseTransportMode(value);\n}\n\nexport function parseDispatchSourceProfileKind(\n  value: unknown\n): \"agent\" | \"human\" | \"system\" | null {\n  const normalized = normalizeText(value).toLowerCase();\n  if (\n    normalized === \"agent\" ||\n    normalized === \"human\" ||\n    normalized === \"system\"\n  ) {\n    return normalized;\n  }\n  return null;\n}\n\nexport function parseContextIdMappingSpec(\n  value: unknown\n): RuntimeAgentControllerConversationIdMappingSpec | null {\n  const record = asRecord(value);\n  if (!record) {\n    return null;\n  }\n  const sourceField = normalizeOptionalText(record.sourceField);\n  const mappingVersion = normalizePositiveInteger(record.mappingVersion);\n  if (!(sourceField && mappingVersion)) {\n    return null;\n  }\n  return {\n    sourceField,\n    mappingVersion,\n  };\n}\n\nexport function parsePositiveInteger(value: unknown): number | null {\n  if (!(typeof value === \"number\" && Number.isInteger(value) && value > 0)) {\n    return null;\n  }\n  return value;\n}\n\nexport function normalizeNonNegativeInteger(value: unknown): number | null {\n  if (!(typeof value === \"number\" && Number.isInteger(value) && value >= 0)) {\n    return null;\n  }\n  return value;\n}\n\nexport function normalizePositiveInteger(value: unknown): number | null {\n  return parsePositiveInteger(value);\n}\n\nexport function asRecord(value: unknown): Record<string, unknown> | null {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n  return value as Record<string, unknown>;\n}\n\nexport function normalizeText(value: unknown): string {\n  return String(value ?? \"\").trim();\n}\n\nexport function normalizeOptionalText(value: unknown): string | null {\n  const normalized = normalizeText(value);\n  return normalized.length > 0 ? normalized : null;\n}\n\nexport function nowIsoString(): string {\n  return new Date().toISOString();\n}\n\ntype DaemonLogField =\n  | string\n  | number\n  | boolean\n  | null\n  | readonly (string | number | boolean | null)[];\n\nexport function warnDaemonEvent(\n  eventName: string,\n  fields: Record<string, DaemonLogField | undefined>\n): void {\n  const definedFields = Object.fromEntries(\n    Object.entries(fields).filter((entry) => entry[1] !== undefined)\n  );\n  console.warn(\n    `${nowIsoString()} ${eventName} ${JSON.stringify(definedFields)}`\n  );\n}\n\nexport const toErrorMessage: (error: unknown) => string = sharedToErrorMessage;\n\nexport const sleep: (delayMs: number) => Promise<void> = sharedSleep;\n\nexport function dirnamePath(path: string): string {\n  const lastSlash = Math.max(path.lastIndexOf(\"/\"), path.lastIndexOf(\"\\\\\"));\n  if (lastSlash <= 0) {\n    return \".\";\n  }\n  return path.slice(0, lastSlash);\n}\n","import { randomUUID } from \"node:crypto\";\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { daemonRuntimeRootPath } from \"../../config/daemon-state\";\nimport { systemDir } from \"../../config/paths\";\nimport {\n  CONTEXT_STORE_FILE,\n  DAEMON_DEVICE_ID_FILE,\n  DAEMON_RUNTIME_CONTRACT_META_FILE,\n  DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE,\n  LEDGER_DIR_NAME,\n} from \"../core/constants\";\nimport { dirnamePath, normalizeOptionalText } from \"../core/logger\";\nimport type { DaemonRuntimePaths, LedgerPaths } from \"../core/types\";\n\nexport function resolvePreferredDaemonDeviceId(input: {\n  explicitDeviceId?: string;\n  contractDeviceId?: string | null;\n}): string | undefined {\n  return (\n    normalizeOptionalText(input.explicitDeviceId) ??\n    normalizeOptionalText(input.contractDeviceId) ??\n    undefined\n  );\n}\n\nexport async function resolveDaemonDeviceId(input: {\n  deviceId?: string;\n  deviceIdPath: string;\n  shouldDiscardPersistedDeviceId?: (deviceId: string) => boolean;\n}): Promise<string> {\n  const explicit = normalizeOptionalText(input.deviceId);\n  if (explicit) {\n    await persistDaemonDeviceIdIfNeeded({\n      deviceId: explicit,\n      deviceIdPath: input.deviceIdPath,\n    });\n    return explicit;\n  }\n\n  const persisted = normalizeOptionalText(\n    await readFile(input.deviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (\n    persisted &&\n    !(input.shouldDiscardPersistedDeviceId?.(persisted) ?? false)\n  ) {\n    return persisted;\n  }\n\n  const generated = randomUUID();\n  await writeDaemonDeviceId({\n    deviceId: generated,\n    deviceIdPath: input.deviceIdPath,\n  });\n  return generated;\n}\n\nexport async function ensureDaemonRuntimePaths(): Promise<DaemonRuntimePaths> {\n  const dataRootPath = join(daemonRuntimeRootPath(), \"data\");\n  const contextStorePath = join(dataRootPath, CONTEXT_STORE_FILE);\n  const deviceIdPath = daemonDeviceIdPath();\n  const legacyDeviceIdPath = join(dataRootPath, DAEMON_DEVICE_ID_FILE);\n  const ledgerRootPath = join(dataRootPath, LEDGER_DIR_NAME);\n  await mkdir(dataRootPath, {\n    recursive: true,\n  });\n  await mkdir(ledgerRootPath, {\n    recursive: true,\n  });\n  await mkdir(dirnamePath(deviceIdPath), { recursive: true });\n  await migrateLegacyDaemonDeviceId({ deviceIdPath, legacyDeviceIdPath });\n  return {\n    contractMetaPath: join(dataRootPath, DAEMON_RUNTIME_CONTRACT_META_FILE),\n    contractRepairReportPath: join(\n      dataRootPath,\n      DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE\n    ),\n    contextStorePath,\n    dataRootPath,\n    deviceIdPath,\n    ledgerRootPath,\n  };\n}\n\nexport function daemonDeviceIdPath(): string {\n  return join(systemDir(), DAEMON_DEVICE_ID_FILE);\n}\n\nexport function buildLedgerPaths(ledgerRootPath: string): LedgerPaths {\n  return {\n    backupStateFilePath: join(ledgerRootPath, \"state.backup.json\"),\n    historyFilePath: join(ledgerRootPath, \"history.ndjson\"),\n    historyTempFilePath: join(ledgerRootPath, \"history.tmp\"),\n    rootDirPath: ledgerRootPath,\n    stateFilePath: join(ledgerRootPath, \"state.json\"),\n    stateTempFilePath: join(ledgerRootPath, \"state.tmp\"),\n  };\n}\n\nasync function persistDaemonDeviceIdIfNeeded(input: {\n  deviceId: string;\n  deviceIdPath: string;\n}): Promise<void> {\n  const persisted = normalizeOptionalText(\n    await readFile(input.deviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (persisted === input.deviceId) {\n    return;\n  }\n  await writeDaemonDeviceId(input);\n}\n\nasync function writeDaemonDeviceId(input: {\n  deviceId: string;\n  deviceIdPath: string;\n}): Promise<void> {\n  await mkdir(dirnamePath(input.deviceIdPath), { recursive: true });\n  await writeFile(input.deviceIdPath, `${input.deviceId}\\n`, \"utf8\");\n}\n\nasync function migrateLegacyDaemonDeviceId(input: {\n  deviceIdPath: string;\n  legacyDeviceIdPath: string;\n}): Promise<void> {\n  const current = normalizeOptionalText(\n    await readFile(input.deviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (current) {\n    return;\n  }\n  const legacy = normalizeOptionalText(\n    await readFile(input.legacyDeviceIdPath, \"utf8\").catch(() => \"\")\n  );\n  if (!legacy) {\n    return;\n  }\n  await writeDaemonDeviceId({\n    deviceId: legacy,\n    deviceIdPath: input.deviceIdPath,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAYA,MAAM,yCAAyC;AAC/C,MAAM,gCAAgC,IAAI,aAAa;CACtD,oBAAoB,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC7C,WAAW,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC/C,kCAAkC,uCAAuC,SAAS;CAClF,+BAA+B,oCAAoC,SAAS;CAC5E,uBAAuB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC9D,sBAAsB;CACtB,oBAAoB,yBAAyB,SAAS;CACtD,oBAAoB,+BAA+B,SAAS;CAC5D,gBAAgB,2CAA2C,SAAS,CAAC,CAAC,SAAS;CAC/E,WAAW;CACX,eAAe;CACf,eAAe;CACf,0BAA0B,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAC/D,CAAC;AACD,MAAM,oCAAoC,IAAI,aAAa;CAC1D,UAAU,IAAI,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC;CAC3C,sBAAsB,IAAI,QAAQ,uCAAuC;CACzE,aAAa,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CACtC,MAAM;CACN,iBAAiB,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC1C,YAAY,IAAI,MAAM,oBAAoB;CAC1C,QAAQ,IAAI,MAAM,6BAA6B;CAC/C,iBAAiB,IAAI,MAAM,0BAA0B;AACtD,CAAC;AACD,MAAM,gCAAgC,IAAI,mBAAmB,KAAK;CACjE,kCAAkC,OAAO;EACxC,GAAG,IAAI,QAAQ,CAAC;EAChB,QAAQ,IAAI,QAAQ,wCAAwC;CAC7D,CAAC;CACD,kCAAkC,OAAO;EACxC,GAAG,IAAI,QAAQ,CAAC;EAChB,QAAQ,IAAI,QAAQ,wCAAwC;CAC7D,CAAC;CACD,kCAAkC,OAAO;EACxC,GAAG,IAAI,QAAQ,CAAC;EAChB,QAAQ,IAAI,QAAQ,sCAAsC;CAC3D,CAAC;AACF,CAAC,CAAC,CAAC,aAAa,OAAO,QAAQ;CAC9B,MAAM,WAAW,IAAI,IAAI,MAAM,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;CACrE,KAAK,MAAM,aAAa,MAAM,YAAY,IAAI,CAAC,SAAS,IAAI,SAAS,GAAG,IAAI,SAAS;EACpF,MAAM;EACN,SAAS;EACT,MAAM,CAAC,YAAY;CACpB,CAAC;AACF,CAAC;;;ACtCD,SAAgB,8BAA8B,OAEnB;CACzB,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,CAAC,SACH,OAAO;EACL,KAAK,oBAAoB,CAAC,CAAC;EAC3B,QAAQ;CACV;CAGF,MAAM,oBAAoBA,0BAAwB,QAAQ,WAAW;CACrE,MAAM,UAAU,eAAe,iBAAiB;CAChD,MAAM,OAAO,cAAc,QAAQ,IAAI;CACvC,MAAM,UACJ,MAAM,MACN,MAAM,SACN,0BAA0B;EACxB,aAAa;EACb,UAAUA,0BAAwB,QAAQ,QAAQ;EAClD,WAAWA,0BAAwB,QAAQ,SAAS;CACtD,CAAC;CAMH,OAAO;EACL,KANU,oBAAoB;GAC9B,SAAS,WAAW,KAAA;GACpB;EACF,CAGI;EACF,QAAQ;EACR,GAAI,oBAAoB,EAAE,aAAa,kBAAkB,IAAI,CAAC;EAC9D,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;CACzB;AACF;AAEA,eAAsB,uCAAwE;CAC5F,MAAM,EAAE,2BAA2B,MAAM,OAAO;CAEhD,OAAO,8BAA8B,EAAE,SAAA,MADjB,uBAAuB,CAAC,CAAC,YAAY,IAAI,EAChB,CAAC;AAClD;AAEA,SAAS,eAAe,SAAuC;CAC7D,IAAI,CAAC,SACH,OAAO;CAET,IAAI;EACF,OAAO,IAAI,IAAI,OAAO,CAAC,CAAC;CAC1B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,OAIZ;CACrB,MAAM,OAAO;EAAC,MAAM;EAAa,MAAM;EAAU,MAAM;CAAS,CAAC,CAC9D,QAAQ,UAAU,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,CAChE,KAAK,GAAG;CACX,IAAI,CAAC,MACH;CAGF,OAAO,WADQ,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,MAAM,CAAC,CAAC,OAAO,KACzC,CAAC,CAAC,MAAM,GAAG,EAAE;AACtC;AAEA,SAAS,cAAc,OAAuD;CAC5E,IAAI,EAAE,SAAS,OAAO,UAAU,WAC9B,OAAO;CAET,MAAM,SAAS;CACf,MAAM,KAAKA,0BAAwB,OAAO,EAAE;CAC5C,MAAM,QAAQA,0BAAwB,OAAO,KAAK;CAClD,MAAM,OAAOA,0BAAwB,OAAO,IAAI;CAChD,IAAI,EAAE,MAAM,SAAS,OACnB,OAAO;CAET,OAAO;EACL,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC;EACnB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;EACzB,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;CACzB;AACF;AAEA,SAASA,0BAAwB,OAA+B;CAC9D,IAAI,OAAO,UAAU,UACnB,OAAO;CAET,MAAM,aAAa,MAAM,KAAK;CAC9B,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;ACxGA,MAAM,yBACJ;AACF,MAAM,2BACJ;AACF,MAAM,wBACJ;AAwBF,IAAa,8BAAb,cAAiD,MAAM;CACrD,OAAgB;CAChB;CAEA,YAAY,UAAkC;EAC5C,MAAM,SAAS,mBAAmB;EAClC,KAAK,OAAO;EACZ,KAAK,WAAW;CAClB;AACF;AAEA,SAAgB,0BAA0B,OAKV;CAC9B,OAAO,IAAI,4BAA4B,8BAA8B,KAAK,CAAC;AAC7E;AAEA,SAAgB,8BAA8B,OAKnB;CACzB,MAAM,SAASC,0BAAwB,MAAM,MAAM;CACnD,MAAM,cAAcA,0BAAwB,MAAM,WAAW;CAC7D,MAAM,aAAaA,0BAAwB,MAAM,UAAU;CAC3D,IAAI,MAAM,WAAW,YACnB,OAAO;EACL,QAAQ,MAAM;EACd;EACA;EACA;EACA,OAAO;EACP,aAAa;EACb,SAAS;EACT,gBAAgB;EAChB,eAAe,gCACb,iEACF;EACA,qBAAqB,gCACnB,gEACE,eAAe,+BAChB,aAAa,cAAc,+BAA+B,oCAC7D;EACA,mBAAmB,gCACjB,iHACF;CACF;CAGF,MAAM,mBAAmB,sCAAsC,MAAM,MAAM;CAC3E,OAAO;EACL,QAAQ,MAAM;EACd;EACA;EACA;EACA,GAAG;CACL;AACF;AAEA,SAAgB,wCACd,QACQ;CACR,MAAM,mBAAmBA,0BAAwB,MAAM;CACvD,IAAI,CAAC,kBACH,OAAO;CAET,OAAO,8BAA8B,iBAAiB;AACxD;AAEA,SAAgB,6BAA6B,OAM3C;CACA,MAAM,OAAgD,CAAC;CACvD,KAAK,KAAK;EACR,OAAO;EACP,OAAO,mCAAmC,MAAM,QAAQ;CAC1D,CAAC;CAED,KAAK,KAAK;EACR,OAAO;EACP,OACE,MAAM,SAAS,WACX,MAAM,SAAS,iBACf,MAAM,SAAS;CACvB,CAAC;CAED,OAAO;EACL,OAAO,MAAM,SAAS;EACtB;CACF;AACF;AAEA,SAAgB,8BACd,UACoB;CACpB,IAAI,SAAS,WAAW,eACtB,OAAO;EACL,SAAS,SAAS;EAClB,YAAY,CACV,oDACA,GAAG,0BAA0B,CAC3B,yGACF,CAAC,CACH;EACA,eAAe,CACb,yDACA,GAAG,0BAA0B,CAC3B,6EACF,CAAC,CACH;EACA,OAAO,8BAA8B,QAAQ;CAC/C;CAEF,OAAO;EACL,SAAS,SAAS;EAClB,YAAY,mCAAmC,QAAQ;EACvD,eAAe,CACb,wFACF;EACA,OAAO,8BAA8B,QAAQ;CAC/C;AACF;AAEA,SAAgB,+BACd,OACQ;CACR,QAAQ,OAAR;EACE,KAAK,SACH,OAAO;EACT,KAAK;EACL,KAAK,YACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,YACH,OAAO;EACT,KAAK,eACH,OAAO;EACT,SACE,OAAO;CACX;AACF;AAEA,SAAgB,qCACd,OACqC;CACrC,QAAQ,OAAR;EACE,KAAK,WACH,OAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK,WACH,OAAO;EACT,SACE,OAAO;CACX;AACF;AAQA,SAAgB,uCACd,OAC+B;CAC/B,IAAI,iBAAiB,6BACnB,OAAO,MAAM;CAIf,OAAO,yCADS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,CACpB;AACzD;AAEA,SAAgB,yCACd,SAC+B;CAC/B,MAAM,oBAAoB,OAAO,WAAW,EAAE,CAAC,CAAC,KAAK;CACrD,IAAI,kBAAkB,WAAW,GAC/B,OAAO;CAET,MAAM,iBAAiB,kBAAkB,YAAY;CAErD,MAAM,WAAW,uBAAuB,KAAK,iBAAiB;CAC9D,IAAI,WAAW,MAAM,SAAS,IAC5B,OAAO,8BAA8B;EACnC,QAAQ;EACR,aAAa,SAAS;EACtB,YAAY,SAAS;CACvB,CAAC;CAGH,IAAI,kBAAkB,SAAS,wBAAwB,GAAG;EACxD,MAAM,SAAS,yBAAyB,KAAK,iBAAiB;EAC9D,OAAO,8BAA8B;GACnC,QAAQ;GACR,aAAa,SAAS,MAAM;GAC5B,YAAY,SAAS,MAAM;EAC7B,CAAC;CACH;CAEA,IAAI,eAAe,SAAS,sBAAsB,GAChD,OAAO,8BAA8B,EACnC,QAAQ,UACV,CAAC;CAEH,IAAI,eAAe,SAAS,4BAA4B,GACtD,OAAO,8BAA8B,EACnC,QAAQ,UACV,CAAC;CAEH,IAAI,eAAe,SAAS,sBAAsB,GAChD,OAAO,8BAA8B,EACnC,QAAQ,UACV,CAAC;CAEH,IACE,eAAe,SAAS,8BAA8B,KACtD,eAAe,SAAS,0CAA0C,GAElE,OAAO,8BAA8B,EACnC,QAAQ,cACV,CAAC;CAEH,IACE,eAAe,SAAS,yBAAyB,KACjD,eAAe,SAAS,sBAAsB,KAC9C,eAAe,SAAS,8BAA8B,KACtD,eAAe,SAAS,kBAAkB,GAE1C,OAAO,8BAA8B,EACnC,QAAQ,WACV,CAAC;CAGH,OAAO;AACT;AAEA,SAAgB,kCACd,eACe;CACf,MAAM,oBAAoB,OAAO,iBAAiB,EAAE,CAAC,CAAC,KAAK;CAC3D,IAAI,kBAAkB,WAAW,GAC/B,OAAO;CAGT,OAAOA,0BADO,sBAAsB,KAAK,iBACN,CAAC,EAAE,QAAQ,MAAM;AACtD;AAEA,SAAS,sCACP,QAIA;CACA,QAAQ,QAAR;EACE,KAAK,eACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB,gCACd,qGACF;GACA,eAAe,gCACb,qGACF;GACA,qBAAqB,gCACnB,uIACF;GACA,mBAAmB,gCACjB,uIACF;EACF;EACF,KAAK,WACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,yCACF;GACA,qBAAqB,gCACnB,uCACF;GACA,mBAAmB,gCACjB,uEACF;EACF;EACF,KAAK,WACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,yCACF;GACA,qBAAqB,gCACnB,gDACF;GACA,mBAAmB,gCACjB,gFACF;EACF;EACF,KAAK,WACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,yCACF;GACA,qBAAqB,gCACnB,2CACF;GACA,mBAAmB,gCACjB,2EACF;EACF;EACF,KAAK,YACH,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,mCACF;GACA,qBAAqB,gCACnB,wCACF;GACA,mBAAmB,gCACjB,wEACF;EACF;EACF,SACE,OAAO;GACL,OAAO;GACP,aAAa;GACb,SAAS;GACT,gBAAgB;GAChB,eAAe,gCACb,mCACF;GACA,qBAAqB,gCACnB,wCACF;GACA,mBAAmB,gCACjB,wEACF;EACF;CACJ;AACF;AAEA,SAAS,mCACP,UACQ;CACR,MAAM,aAAa,SAAS,SACxB,WAAW,SAAS,WACpB;CACJ,IAAI,SAAS,WAAW,YACtB,OAAO,4CAA4C,WAAW;CAEhE,IAAI,SAAS,WAAW,eACtB,OAAO,sDAAsD,WAAW;CAE1E,IACE,SAAS,WAAW,aACpB,SAAS,WAAW,aACpB,SAAS,WAAW,WAEpB,OAAO,gBAAgB,WAAW;CAEpC,OAAO,UAAU,WAAW;AAC9B;AAEA,SAAS,mCACP,UACU;CACV,MAAM,YAAY,SAAS,SACvB,sCAAsC,SAAS,OAAO,KACtD;CACJ,MAAM,QAAQ,CAAC,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,GAAG,SAAS;CAC1E,IAAI,SAAS,WAAW,cAAc,SAAS,YAC7C,MAAM,OACJ,GACA,GACA,oCAAoC,SAAS,WAAW,EAC1D;CAEF,OAAO;AACT;AAEA,SAAS,8BACP,UACU;CACV,MAAM,QAAkB,CAAC;CACzB,IAAI,SAAS,QACX,MAAM,KAAK,mBAAmB,SAAS,QAAQ;CAEjD,IAAI,SAAS,aACX,MAAM,KAAK,oBAAoB,SAAS,aAAa;CAEvD,IAAI,SAAS,YACX,MAAM,KAAK,oBAAoB,SAAS,YAAY;CAEtD,OAAO;AACT;AAEA,SAASA,0BAAwB,OAA+B;CAC9D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;AC1cA,MAAM,2BAA2B;AACjC,MAAM,6BAA6B;AAiBnC,eAAsB,6BAA6B,OAGjC;CAChB,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,MAAM,kBAAkB,6BAA6B,MAAM,OAAO;CAClE,MAAM,aAAa,4BAA4B,eAAe;CAC9D,MAAM,MAAM,iBAAiB,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,OAAoC;EACxC,UAAU,WAAW;EACrB,GAAG;EACH,QAAQ;EACR,WAAW;EACX,QAAQ,gBAAgB,MAAM,MAAM;CACtC;CAEA,MAAM,WAAW,GAAG,WAAW,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CAC9D,IAAI,oBAAoB;CACxB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,MAAM;EACtE,MAAM,OAAO,UAAU,UAAU;EACjC,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,eAAsB,4BACpB,QAA8B,CAAC,GACU;CACzC,MAAM,MAAM,MAAM,SAChB,4BAA4B,6BAA6B,MAAM,OAAO,CAAC,GACvE,MACF,CAAC,CAAC,YAAY,IAAI;CAClB,IAAI,CAAC,KACH,OAAO;CAGT,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,MAAM,GACf,OAAO;EAET,IACE,OAAO,WAAW,8BAClB,OAAO,OAAO,cAAc,YAC5B,OAAO,UAAU,KAAK,CAAC,CAAC,WAAW,KACnC,OAAO,OAAO,WAAW,UAEzB,OAAO;EAET,MAAM,YAAY,OAAO,UAAU,KAAK;EACxC,MAAM,cAAc,KAAK,MAAM,SAAS;EACxC,IAAI,CAAC,OAAO,SAAS,WAAW,KAAK,eAAe,GAClD,OAAO;EAET,OAAO;GACL,GAAI,OAAO,OAAO,aAAa,YAAY,OAAO,SAAS,KAAK,IAC5D,EAAE,UAAU,OAAO,SAAS,KAAK,EAAE,IACnC,CAAC;GACL;GACA;GACA,QAAQ,gBAAgB,OAAO,MAAM;EACvC;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,4BAA4B,iBAAiC;CACpE,OAAO,KAAK,iBAAiB,wBAAwB;AACvD;AAEA,SAAS,6BAA6B,SAAqC;CACzE,IAAI,CAAC,SACH,OAAO,sBAAsB;CAE/B,OAAO,sBAAsB,EAC3B,KAAK;EAAE,GAAG,QAAQ;GAAM,wBAAwB;CAAQ,EAC1D,CAAC;AACH;AAEA,SAAS,gBAAgB,OAAuB;CAC9C,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,WAAW,SAAS,GACtB,OAAO;CAET,OAAO;AACT;;;AC7GA,SAAgB,4CAA4C,OAGnD;CACP,IAAI,MAAM,uCACR;CAEF,MAAM,OAAO,OACX,IAAI,MAAM,oDAAoD,EAC5D,OAAO,MAAM,MACf,CAAC,GACD,EACE,MAAM,gDACR,CACF;AACF;;;ACyBA,MAAM,iCAAiC;AACvC,MAAM,2CAA2C;AACjD,MAAM,4CAA4C;AAClD,MAAM,2BAA2B;AAEjC,IAAI,wBAGO;AAMX,SAAgB,kCACd,SACM;CACN,wBAAwB;EACtB;EACA,eAAe,KAAK,IAAI;CAC1B;AACF;AAEA,IAAM,uBAAN,cAAmC,MAAM;CACvC;CACA;CACA;CAEA,YAAY,OAKT;EACD,MAAM,MAAM,OAAO;EACnB,KAAK,OAAO;EACZ,KAAK,SAAS,MAAM;EACpB,KAAK,WAAW,MAAM;EACtB,KAAK,OAAO,wBAAwB,MAAM,IAAI;CAChD;AACF;AAEA,SAAS,uBAAuB,OAA+C;CAC7E,OAAO,iBAAiB;AAC1B;AAEA,eAAsB,uBAAmD;CAOvE,OADiB,eAAe,MALV,2BAA2B;EAC/C,QAAQ;EACR,MAAM;CACR,CAAC,GAEwC,UAC3B,CAAC,CAAC,IAAI,wBAAwB;AAC9C;AAEA,eAAsB,iCAAuE;CAC3F,MAAM,UAAU,MAAM,2BAA2B;EAC/C,QAAQ;EACR,MAAM;CACR,CAAC;CACD,MAAM,SAAS,kCAAkC,UAAU,OAAO;CAClE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,wCAAwC,EACtD,OAAO,OAAO,MAChB,CAAC;CAEH,OAAO,OAAO;AAChB;AAEA,eAAsB,uBAAuB,OAGhB;CAc3B,OAAO,yBAAyB,gBAAgB,MAb1B,2BAA2B;EAC/C,QAAQ;EACR,MAAM;EACN,MAAM;GACJ,GAAI,wBAAwB,MAAM,iBAAiB,IAC/C,EACE,mBAAmB,wBAAwB,MAAM,iBAAiB,EACpE,IACA,CAAC;GACL,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAChE;CACF,CAAC,GAEwD,SAAS,CAAC;AACrE;AAEA,eAAsB,iCAAiC,OAG1B;CAC3B,MAAM,oBAAoB,wBAAwB,MAAM,iBAAiB;CACzE,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,gCAAgC;CAGlD,IAAI;EACF,OAAO,MAAM,uBAAuB;GAClC,mBAAmB;GACnB,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAChE,CAAC;CACH,SAAS,SAAS;EAChB,MAAM,UAAU,MAAM,kCAAkC;GACtD;GACA,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;EAChE,CAAC;EACD,IAAI,QAAQ,WAAW,SACrB,OAAO,QAAQ;EAEjB,IAAI,QAAQ,WAAW,aACrB,MAAM,IAAI,MACR,uCAAuC,kBAAkB,+BAC3D;EAEF,IAAI,uBAAuB,OAAO,GAChC,MAAM,IAAI,MAAM,+BAA+B,mBAAmB;EAEpE,MAAM;CACR;AACF;AAEA,SAAgB,2BAA2B,OAGd;CAC3B,MAAM,cAAc,wBAAwB,MAAM,WAAW;CAC7D,MAAM,mBACJ,wBAAwB,MAAM,gBAAgB,KAAK,KAAA;CACrD,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,0BAA0B;CAE5C,OAAO,kCAAkC;EACvC;EACA,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;CACjD,CAAC;AACH;AAoBA,eAAsB,2BAA2B,OAGpB;CAC3B,MAAM,cAAc,wBAAwB,MAAM,WAAW;CAC7D,MAAM,mBACJ,wBAAwB,MAAM,gBAAgB,KAAK,KAAA;CACrD,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,0BAA0B;CAG5C,IAAI;EAEF,4CAA4C,MADjB,+BAA+B,CACF;CAC1D,SAAS,OAAO;EACd,IACE,iBAAiB,SACjB,UAAU,SACV,MAAM,SAAA,sDAEN,MAAM;EAER,4CAA4C;GAC1C,uCAAuC;GACvC,OAAO;EACT,CAAC;CACH;CAWA,MAAM,UAAU,yBAAyB,gBAAgB,MATnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM;EACN,MAAM;GACJ;GACA,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;EACjD;CACF,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAEA,eAAsB,sBAAsB,OAGf;CAC3B,MAAM,oBAAoB,wBAAwB,MAAM,iBAAiB;CACzE,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,+BAA+B;CAGjD,MAAM,cAAc,wBAAwB,MAAM,WAAW;CAG7D,IAAI,CAFmB,QAAQ,WAEb,GAChB,MAAM,IAAI,MAAM,yBAAyB;CAW3C,MAAM,UAAU,yBAAyB,gBAAgB,MARnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM,gBAAgB,mBAAmB,iBAAiB;EAC1D,MAAM,EACJ,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC,EACvC;CACF,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAEA,eAAsB,sBAAsB,OAEf;CAC3B,MAAM,oBAAoB,wBAAwB,MAAM,iBAAiB;CACzE,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,+BAA+B;CAQjD,MAAM,UAAU,yBAAyB,gBAAgB,MALnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM,gBAAgB,mBAAmB,iBAAiB;CAC5D,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAEA,eAAe,2BAA2B,OAIL;CACnC,MAAM,UAAU,MAAM,+BAA+B;CACrD,MAAM,WAAW,eAAe,QAAQ,aAAa,MAAM,IAAI;CAC/D,MAAM,WAAW,MAAM,MAAM,UAAU;EACrC,QAAQ,MAAM;EACd,SAAS;GACP,eAAe,GAAG,mBAAmB,QAAQ,SAAS,EAAE,GAAG,QAAQ;GACnE,GAAI,MAAM,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;EAC7D;EACA,GAAI,MAAM,OAAO,EAAE,MAAM,KAAK,UAAU,MAAM,IAAI,EAAE,IAAI,CAAC;EACzD,QAAQ,YAAY,QAAQ,oCAAoC,QAAQ,CAAC;CAC3E,CAAC;CAED,MAAM,UAAU,MAAM,kBAAkB,QAAQ;CAEhD,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,cAAc,2BAA2B,UAAU,OAAO;EAChE,MAAM,SAAS,SAAS;EACxB,MAAM,OAAO,YAAY,UAAU,YAAY,KAAK,OAAO;EAC3D,IAAI,WAAW,OAAO,WAAW,OAAO,SAAS,wBAAwB;GACvE,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,WACV,CAAC;EACH;EAQA,MAAM,IAAI,qBAAqB;GAC7B;GACA;GACA;GACA,SAVc,+BAA+B;IAC7C,SAAS,YAAY,UAAU,YAAY,OAAO;IAClD;IACA;IACA;GACF,CAKE;EACF,CAAC;CACH;CAEA,MAAM,SAAS,SAAS,OAAO,IAAI,UAAU,CAAC;CAE9C,IAAI,CADO,iBAAiB,QAAQ,IAC9B,GAAG;EACP,MAAM,cAAc,2BAA2B,UAAU,OAAO;EAChE,MAAM,OAAO,YAAY,UAAU,YAAY,KAAK,OAAO;EAC3D,MAAM,IAAI,qBAAqB;GAC7B,QAAQ,SAAS;GACjB;GACA;GACA,SAAS,+BAA+B;IACtC,SAAS,YAAY,UAAU,YAAY,OAAO;IAClD,QAAQ,SAAS;IACjB;IACA;GACF,CAAC;EACH,CAAC;CACH;CAEA,OAAO;AACT;AAEA,eAAe,kCAAkC,OAGpB;CAY3B,MAAM,UAAU,yBAAyB,gBAAgB,MAXnC,2BAA2B;EAC/C,QAAQ;EACR,MAAM;EACN,MAAM;GACJ,aAAa,MAAM;GACnB,GAAI,MAAM,mBACN,EAAE,kBAAkB,MAAM,iBAAiB,IAC3C,CAAC;EACP;CACF,CAAC,GAEiE,SAAS,CAAC;CAC5E,MAAM,qBAAqB,iBAAiB;CAC5C,OAAO;AACT;AAwBA,eAAe,iCAA6D;CAC1E,MAAM,MAAM,KAAK,IAAI;CACrB,IACE,yBACA,MAAM,sBAAsB,iBAAiB,gCAC7C;EACA,MAAM,aAAa,MAAM,oBAAoB,EAC3C,gBAAgB,MAClB,CAAC;EACD,IACE,WAAW,UAAU,WACrB,WAAW,WACX,wBAAwB,WAAW,SAAS,sBAAsB,OAAO,GAEzE,OAAO,sBAAsB;EAE/B,wBAAwB;CAC1B;CAEA,MAAM,QAAQ,MAAM,oBAAoB,EACtC,gBAAgB,KAClB,CAAC;CAED,QAAQ,MAAM,OAAd;EACE,KAAK;GACH,IAAI,CAAC,MAAM,SACT,MAAM,IAAI,MAAM,0BAA0B;GAE5C,wBAAwB;IACtB,SAAS,MAAM;IACf,eAAe;GACjB;GACA,OAAO,MAAM;EAEf,KAAK;GACH,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,WACV,CAAC;EACH,KAAK;EACL,KAAK;EACL,KAAK;GACH,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,qCAAqC,MAAM,KAAK,KAAK,WAC/D,CAAC;EACH;GACE,wBAAwB;GACxB,MAAM,0BAA0B,EAC9B,QAAQ,WACV,CAAC;CACL;AACF;AAEA,SAAS,oCAAoC,UAA0B;CACrE,MAAM,MAAM,eAAe,QAAQ;CACnC,IAAI,OAAO,mBAAmB,IAAI,QAAQ,GACxC,OAAO;CAET,OAAO;AACT;AAEA,SAAS,eAAe,OAA2B;CACjD,IAAI;EACF,OAAO,IAAI,IAAI,KAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,wBACP,GACA,GACS;CACT,OACE,EAAE,gBAAgB,EAAE,eACpB,EAAE,aAAa,EAAE,YACjB,EAAE,cAAc,EAAE,aAClB,EAAE,gBAAgB,EAAE,gBACnB,EAAE,aAAa,WAAW,EAAE,aAAa;AAE9C;AAEA,eAAe,qBAAqB,QAA+B;CACjE,MAAM,6BAA6B,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;AACtE;AAEA,SAAS,yBAAyB,OAAiC;CACjE,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;CAE1C,MAAM,oBAAoB,wBACxB,QACA,mBACF;CACA,IAAI,CAAC,mBACH,MAAM,IAAI,MAAM,oDAAoD;CAGtE,MAAM,cAAc,wBAAwB,QAAQ,aAAa;CACjE,MAAM,gBAAgB,wBAAwB,QAAQ,eAAe;CACrE,MAAM,cAAc,gBAAgB,QAAQ,aAAa;CACzD,MAAM,YAAY,yBAAyB,QAAQ,WAAW,KAAK;CACnE,MAAM,SAAS,kBAAkB,QAAQ,QAAQ;CACjD,MAAM,cAAc,wBAAwB,QAAQ,aAAa;CACjE,MAAM,YAAY,wBAAwB,QAAQ,WAAW,KAAK,KAAA;CAClE,MAAM,SAAS,wBAAwB,QAAQ,QAAQ;CACvD,MAAM,cAAc,6BAA6B,QAAQ,aAAa;CACtE,MAAM,kBACJ,wBAAwB,QAAQ,iBAAiB,KAAK;CACxD,MAAM,mBAAmB,wBAAwB,QAAQ,kBAAkB;CAC3E,MAAM,yBACJ,wBAAwB,QAAQ,wBAAwB,KAAK;CAC/D,MAAM,mBACJ,wBAAwB,QAAQ,kBAAkB,KAAK;CACzD,MAAM,aAAa,wBAAwB,QAAQ,YAAY;CAC/D,MAAM,YAAY,wBAAwB,QAAQ,WAAW;CAC7D,MAAM,YAAY,wBAAwB,QAAQ,WAAW;CAE7D,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;AAEA,SAAS,gBACP,OACA,OACqB;CACrB,MAAM,QAAQ,wBAAwB,OAAO,KAAK;CAClD,IAAI,UAAU,WAAW,UAAU,WAAW,UAAU,UACtD,OAAO;CAET,MAAM,IAAI,MAAM,wCAAwC,OAAO;AACjE;AAEA,SAAS,kBACP,OACA,OACuB;CACvB,MAAM,QAAQ,wBAAwB,OAAO,KAAK;CAClD,IAAI,UAAU,YAAY,UAAU,YAClC,OAAO;CAET,MAAM,IAAI,MAAM,wCAAwC,OAAO;AACjE;AAEA,SAAS,6BACP,OACA,OACmC;CACnC,MAAM,QAAQ,wBAAwB,OAAO,KAAK;CAClD,IAAI,CAAC,OACH,OAAO;CAET,MAAM,SAAS,6BAA6B,UAAU,KAAK;CAC3D,IAAI,OAAO,SACT,OAAO,OAAO;CAEhB,MAAM,IAAI,MAAM,wCAAwC,OAAO;AACjE;AAEA,SAAS,gBACP,OACA,OACyB;CACzB,MAAM,QAAQ,MAAM;CACpB,IAAI,SAAS,KAAK,GAChB,OAAO;CAET,MAAM,IAAI,MAAM,gCAAgC,OAAO;AACzD;AAEA,SAAS,eACP,OACA,OAC2B;CAC3B,MAAM,QAAQ,MAAM;CACpB,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,MAAM,IAAI,MAAM,gCAAgC,OAAO;CAGzD,OAAO,MAAM,OAAO,QAAQ;AAC9B;AAEA,SAAS,wBACP,OACA,OACQ;CACR,MAAM,QAAQ,wBAAwB,MAAM,MAAM;CAClD,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,oCAAoC,OAAO;CAE7D,OAAO;AACT;AAEA,SAAS,wBACP,OACA,OACe;CACf,OAAO,wBAAwB,MAAM,MAAM;AAC7C;AAEA,SAAS,iBACP,OACA,OACS;CACT,OAAO,MAAM,WAAW;AAC1B;AAEA,SAAS,yBACP,OACA,OACgB;CAChB,MAAM,QAAQ,MAAM;CACpB,IAAI,OAAO,UAAU,WACnB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,wBAAwB,OAA+B;CAC9D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,mBAAmB,WAA2B;CACrD,MAAM,aAAa,UAAU,KAAK;CAClC,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,eAAe,SAAiB,UAA0B;CACjE,MAAM,MAAM,IAAI,IAAI,OAAO;CAC3B,IAAI,WAAW;CACf,IAAI,SAAS;CACb,IAAI,OAAO;CACX,OAAO,IAAI,SAAS;AACtB;AAEA,eAAe,kBAAkB,UAAsC;CACrE,MAAM,MAAM,MAAM,SAAS,KAAK;CAChC,IAAI,CAAC,KACH,OAAO;CAET,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN,OAAO,EAAE,SAAS,IAAI;CACxB;AACF;AAEA,SAAS,uBAAuB,SAAkB,QAAwB;CACxE,MAAM,SAAS,SAAS,OAAO,IAAI,UAAU,CAAC;CAC9C,MAAM,UACJ,wBAAwB,OAAO,OAAO,KACtC,wBAAwB,OAAO,iBAAiB,KAChD,wBAAwB,OAAO,KAAK;CAEtC,IAAI,SACF,OAAO;CAGT,OAAO,8BAA8B;AACvC;AAEA,SAAS,+BAA+B,OAK7B;CACT,MAAM,UAAU,uBAAuB,MAAM,SAAS,MAAM,MAAM;CAClE,IACE,MAAM,WAAW,OACjB,MAAM,SAAS,4BACf,0BAA0B,MAAM,QAAQ,GAExC,OACE;CAIJ,IACE,MAAM,WAAW,OACjB,MAAM,SAAS,4BACf,yBAAyB,MAAM,QAAQ,GAEvC,OACE;CAOJ,OAAO;AACT;AAEA,SAAS,0BAA0B,OAAuB;CACxD,OAAO,MAAM,KAAK,CAAC,CAAC,QAAQ,0BAA0B,EAAE,CAAC,CAAC,YAAY;AACxE;AAEA,eAAe,kCAAkC,OAO/C;CACA,MAAM,YAAY,0BAA0B,MAAM,iBAAiB;CACnE,MAAM,WAAW,MAAM,qBAAqB,EAAA,CAAG,QAAQ,YAAY;EACjE,IAAI,MAAM,eAAe,QAAQ,gBAAgB,MAAM,aACrD,OAAO;EAET,OACE,0BAA0B,QAAQ,WAAW,MAAM,aACnD,0BAA0B,QAAQ,aAAa,MAAM;CAEzD,CAAC;CAED,IAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,UAAU,QAAQ;EACxB,IAAI,SACF,OAAO;GAAE,QAAQ;GAAS;EAAQ;CAEtC;CACA,IAAI,QAAQ,SAAS,GACnB,OAAO,EAAE,QAAQ,YAAY;CAE/B,OAAO,EAAE,QAAQ,YAAY;AAC/B;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,MAAM,MAAM,eAAe,QAAQ;CACnC,OAAO,QACL,OACE,mBAAmB,IAAI,QAAQ,KAC/B,IAAI,SAAS,WAAW,cAAc,CAC1C;AACF;AAEA,SAAS,yBAAyB,UAA2B;CAC3D,MAAM,MAAM,eAAe,QAAQ;CACnC,OAAO,QACL,OACE,CAAC,mBAAmB,IAAI,QAAQ,KAChC,IAAI,SAAS,WAAW,cAAc,CAC1C;AACF;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,QAAQ,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,CAAC;AAC5E;;;ACpuBA,MAAa,iCACXC;AACF,MAAa,uCACXC;AACF,MAAa,gCACXC;AACF,MAAa,mCACXC;AACF,MAAa,sCACXC;AACF,MAAa,0CACXC;AACF,MAAa,gCACXC;AACF,MAAa,gCACXC;AAGF,MAAa,4BAA4BC;AAGzC,MAAa,4BAA4BC;AACzC,MAAa,+CACXC;AACF,MAAa,qDACXC;AACF,MAAa,+BACXC;AACF,MAAa,mDACXC;AACF,MAAa,yDACXC;AACF,MAAa,wCACXC;AACF,MAAa,6BAA6B;AAC1C,MAAa,yBAAyB;AAEtC,MAAa,4CAA4C;AACzD,MAAa,8CAA8C;AAC3D,MAAa,yCAAyC;AACtD,MAAa,wBAAwB;AACrC,MAAa,qBAAqB;AAClC,MAAa,kBAAkB;AAC/B,MAAa,oCAAoC;AACjD,MAAa,6CACX;;;ACpDF,SAAgB,YAAY,OAKnB;CACP,IAAI,MAAM,UAAU,SAAS,SAAS;EACpC,MAAM,UAAU,KAAK;GACnB,MAAM,MAAM;GACZ,SAAS;IACP,SAAS,MAAM;IACf,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;GAClE;EACF,CAAC;EACD;CACF;CACA,MAAM,UAAU,KAAK;EACnB,MAAM,MAAM;EACZ,MAAM,MAAM;CACd,CAAC;AACH;AAEA,SAAgB,aAAa,OAAe,KAAa,KAAqB;CAC5E,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,CAAC,CAAC;AACvD;AAEA,SAAgB,6BACd,OACQ;CACR,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,OAAO;CAET,OAAO,aACL,OACA,2BACA,yBACF;AACF;AAEA,SAAgB,mBACd,OACkC;CAClC,MAAM,SAAS,2BAA2B,UAAU,KAAK;CACzD,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,SAAgB,mBACd,OACkC;CAClC,IAAI,UAAU,WAAW,UAAU,UACjC,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,0BACd,OAC6B;CAC7B,OAAO,mBAAmB,KAAK;AACjC;AAgBA,SAAgB,0BACd,OACwD;CACxD,MAAM,SAAS,SAAS,KAAK;CAC7B,IAAI,CAAC,QACH,OAAO;CAET,MAAM,cAAc,sBAAsB,OAAO,WAAW;CAC5D,MAAM,iBAAiB,yBAAyB,OAAO,cAAc;CACrE,IAAI,EAAE,eAAe,iBACnB,OAAO;CAET,OAAO;EACL;EACA;CACF;AACF;AAEA,SAAgB,qBAAqB,OAA+B;CAClE,IAAI,EAAE,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,QAAQ,IACpE,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,4BAA4B,OAA+B;CACzE,IAAI,EAAE,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,IACrE,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,yBAAyB,OAA+B;CACtE,OAAO,qBAAqB,KAAK;AACnC;AAEA,SAAgB,SAAS,OAAgD;CACvE,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,cAAc,OAAwB;CACpD,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;AAClC;AAEA,SAAgB,sBAAsB,OAA+B;CACnE,MAAM,aAAa,cAAc,KAAK;CACtC,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAgB,eAAuB;CACrC,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY;AAChC;AASA,SAAgB,gBACd,WACA,QACM;CACN,MAAM,gBAAgB,OAAO,YAC3B,OAAO,QAAQ,MAAM,CAAC,CAAC,QAAQ,UAAU,MAAM,OAAO,KAAA,CAAS,CACjE;CACA,QAAQ,KACN,GAAG,aAAa,EAAE,GAAG,UAAU,GAAG,KAAK,UAAU,aAAa,GAChE;AACF;AAEA,MAAa,iBAA6CC;AAI1D,SAAgB,YAAY,MAAsB;CAChD,MAAM,YAAY,KAAK,IAAI,KAAK,YAAY,GAAG,GAAG,KAAK,YAAY,IAAI,CAAC;CACxE,IAAI,aAAa,GACf,OAAO;CAET,OAAO,KAAK,MAAM,GAAG,SAAS;AAChC;;;ACpKA,SAAgB,+BAA+B,OAGxB;CACrB,OACE,sBAAsB,MAAM,gBAAgB,KAC5C,sBAAsB,MAAM,gBAAgB,KAC5C,KAAA;AAEJ;AAEA,eAAsB,sBAAsB,OAIxB;CAClB,MAAM,WAAW,sBAAsB,MAAM,QAAQ;CACrD,IAAI,UAAU;EACZ,MAAM,8BAA8B;GAClC,UAAU;GACV,cAAc,MAAM;EACtB,CAAC;EACD,OAAO;CACT;CAEA,MAAM,YAAY,sBAChB,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC,CAAC,YAAY,EAAE,CAC3D;CACA,IACE,aACA,EAAE,MAAM,iCAAiC,SAAS,KAAK,QAEvD,OAAO;CAGT,MAAM,YAAY,WAAW;CAC7B,MAAM,oBAAoB;EACxB,UAAU;EACV,cAAc,MAAM;CACtB,CAAC;CACD,OAAO;AACT;AAEA,eAAsB,2BAAwD;CAC5E,MAAM,eAAe,KAAK,sBAAsB,GAAG,MAAM;CACzD,MAAM,mBAAmB,KAAK,cAAc,kBAAkB;CAC9D,MAAM,eAAe,mBAAmB;CACxC,MAAM,qBAAqB,KAAK,cAAc,qBAAqB;CACnE,MAAM,iBAAiB,KAAK,cAAc,eAAe;CACzD,MAAM,MAAM,cAAc,EACxB,WAAW,KACb,CAAC;CACD,MAAM,MAAM,gBAAgB,EAC1B,WAAW,KACb,CAAC;CACD,MAAM,MAAM,YAAY,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;CAC1D,MAAM,4BAA4B;EAAE;EAAc;CAAmB,CAAC;CACtE,OAAO;EACL,kBAAkB,KAAK,cAAc,iCAAiC;EACtE,0BAA0B,KACxB,cACA,0CACF;EACA;EACA;EACA;EACA;CACF;AACF;AAEA,SAAgB,qBAA6B;CAC3C,OAAO,KAAK,UAAU,GAAG,qBAAqB;AAChD;AAEA,SAAgB,iBAAiB,gBAAqC;CACpE,OAAO;EACL,qBAAqB,KAAK,gBAAgB,mBAAmB;EAC7D,iBAAiB,KAAK,gBAAgB,gBAAgB;EACtD,qBAAqB,KAAK,gBAAgB,aAAa;EACvD,aAAa;EACb,eAAe,KAAK,gBAAgB,YAAY;EAChD,mBAAmB,KAAK,gBAAgB,WAAW;CACrD;AACF;AAEA,eAAe,8BAA8B,OAG3B;CAIhB,IAHkB,sBAChB,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC,CAAC,YAAY,EAAE,CAE/C,MAAM,MAAM,UACtB;CAEF,MAAM,oBAAoB,KAAK;AACjC;AAEA,eAAe,oBAAoB,OAGjB;CAChB,MAAM,MAAM,YAAY,MAAM,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;CAChE,MAAM,UAAU,MAAM,cAAc,GAAG,MAAM,SAAS,KAAK,MAAM;AACnE;AAEA,eAAe,4BAA4B,OAGzB;CAIhB,IAHgB,sBACd,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC,CAAC,YAAY,EAAE,CAEjD,GACR;CAEF,MAAM,SAAS,sBACb,MAAM,SAAS,MAAM,oBAAoB,MAAM,CAAC,CAAC,YAAY,EAAE,CACjE;CACA,IAAI,CAAC,QACH;CAEF,MAAM,oBAAoB;EACxB,UAAU;EACV,cAAc,MAAM;CACtB,CAAC;AACH"}

package/dist/{daemon-frame-transport-DFfxVRi2.js → daemon-frame-transport-E-H3DjWA.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
 import { G as legacyAccountProfileSpacesDir, J as normalizeOpenMeldProfileId, M as accountProfileSpaceCacheDir, ct as resolveOpenMeldEnvPreset, lt as resolveOpenMeldRootDir, v as resolveCliContextId } from "./lock-Bsl_ElWy.js";
-import { Ri as computerFileAccessPolicyInputSchema, Vi as toCompatibleSpaceAddressingRequestWireValue, _i as agentActivityEventSchema, ai as spaceCreatorSchema, er as spaceEntryTargetSchema, gi as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, zi as computerFileAccessPolicySchema } from "./dist-CiLvbjZA.js";
-import { $n as areAgentControllerInterfaceAccountsSame, Ct as resolveLocalProjectConnectionForPath, Kt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Mn as buildTaskResultEnvelope, Tt as withAgentActivityLocalStateLock, Xt as buildDispatchReplyContextSummary, dt as isProjectBound, ft as listProjectBindings, jn as buildRuntimeWorkspaceFingerprint, kn as DaemonServiceRunError, mr as renderWorkingLanguagePrompt, nr as buildWorkingLanguagePromptPlan, pr as renderInformationProtectionPrompt, tr as buildInformationProtectionPromptPlan, ur as parseAgentControllerRef } from "./prepare-provider-runtime-3eIWxGgM.js";
-import { Cr as resolveSpaceMentionLabels, F as runtimeTransportRegisterSessionResponseSchema, Rn as MESSAGE_MENTION_TYPE_VALUES, S as runtimeTransportHeartbeatResponseSchema, Sr as resolveSingleSpaceMentionLabels, Un as normalizeMessageEnvelope, V as runtimeTransportSubmitTaskResultRequestSchema, Vn as getSpaceMessageAddressingRelationSupportForTargetKind, Wn as resolveMessageEnvelopeTargetField, Y as openMeldDaemonTaskResultPayloadSchema, _ as runtimeTransportDispatchRuntimeEvidenceRequestSchema, br as normalizeSpacePasswordText, g as runtimeTransportDispatchReasoningRequestSchema, h as runtimeTransportDispatchPreviewRequestSchema, i as daemonStreamFrameSchema, m as runtimeTransportDispatchPreviewEndRequestSchema, p as runtimeTransportDispatchLifecycleRequestSchema, u as runtimeTransportDispatchInteractionRequestSchema, v as runtimeTransportDispatchToolActivityRequestSchema, wt as sanitizeSignalTextPreview, zn as collectCanonicalMentionTextFragments } from "./runtime-transport-KEwcSZ89.js";
+import { Ri as computerFileAccessPolicyInputSchema, Vi as toCompatibleSpaceAddressingRequestWireValue, _i as agentActivityEventSchema, ai as spaceCreatorSchema, er as spaceEntryTargetSchema, gi as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, zi as computerFileAccessPolicySchema } from "./dist-YPzkhLLp.js";
+import { $n as areAgentControllerInterfaceAccountsSame, Ct as resolveLocalProjectConnectionForPath, Kt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Mn as buildTaskResultEnvelope, Tt as withAgentActivityLocalStateLock, Xt as buildDispatchReplyContextSummary, dt as isProjectBound, ft as listProjectBindings, jn as buildRuntimeWorkspaceFingerprint, kn as DaemonServiceRunError, mr as renderWorkingLanguagePrompt, nr as buildWorkingLanguagePromptPlan, pr as renderInformationProtectionPrompt, tr as buildInformationProtectionPromptPlan, ur as parseAgentControllerRef } from "./prepare-provider-runtime-iA3g-8MS.js";
+import { Cr as resolveSpaceMentionLabels, F as runtimeTransportRegisterSessionResponseSchema, Rn as MESSAGE_MENTION_TYPE_VALUES, S as runtimeTransportHeartbeatResponseSchema, Sr as resolveSingleSpaceMentionLabels, Un as normalizeMessageEnvelope, V as runtimeTransportSubmitTaskResultRequestSchema, Vn as getSpaceMessageAddressingRelationSupportForTargetKind, Wn as resolveMessageEnvelopeTargetField, Y as openMeldDaemonTaskResultPayloadSchema, _ as runtimeTransportDispatchRuntimeEvidenceRequestSchema, br as normalizeSpacePasswordText, g as runtimeTransportDispatchReasoningRequestSchema, h as runtimeTransportDispatchPreviewRequestSchema, i as daemonStreamFrameSchema, m as runtimeTransportDispatchPreviewEndRequestSchema, p as runtimeTransportDispatchLifecycleRequestSchema, u as runtimeTransportDispatchInteractionRequestSchema, v as runtimeTransportDispatchToolActivityRequestSchema, wt as sanitizeSignalTextPreview, zn as collectCanonicalMentionTextFragments } from "./runtime-transport-0F5E6So6.js";
 import { D as normalizeOptionalWorkingDirectory, O as openMeldRuntimeProfileIdSchema } from "./control-plane-BDS63N7Y.js";
-import { _ as toErrorMessage, a as asRecord, d as normalizeText, l as normalizeNonNegativeInteger$1, s as emitRunLine, st as resolveCurrentOpenMeldAccountContext, u as normalizeOptionalText$8 } from "./daemon-device-id-bP58j3NL.js";
-import { _ as renderSpaceEntryBrief, c as buildCenterAgentRoleTemplateText, d as buildSpaceEntryBriefNeedMoreLine, f as buildSpaceWakeParticipantLines, h as deriveContinuity, l as buildCompactDispatchActionGuidanceLines, m as composeDispatchBrief, n as SPACE_COLLABORATION_CONTEXT_RULE, o as buildAgentFacingMentalModelLines, u as buildSpaceAgentIdentityLine, y as resolveSpacePublicationRequirement } from "./dist-CBWePGgY.js";
+import { _ as toErrorMessage, a as asRecord, d as normalizeText, l as normalizeNonNegativeInteger$1, s as emitRunLine, st as resolveCurrentOpenMeldAccountContext, u as normalizeOptionalText$8 } from "./daemon-device-id-YnLMx1kN.js";
+import { _ as renderSpaceEntryBrief, c as buildCenterAgentRoleTemplateText, d as buildSpaceEntryBriefNeedMoreLine, f as buildSpaceWakeParticipantLines, h as deriveContinuity, l as buildCompactDispatchActionGuidanceLines, m as composeDispatchBrief, n as SPACE_COLLABORATION_CONTEXT_RULE, o as buildAgentFacingMentalModelLines, u as buildSpaceAgentIdentityLine, y as resolveSpacePublicationRequirement } from "./dist-ChS52b_E.js";
 import { d as createDefaultRuntimeAgentControllerSettings } from "./base-url-D7uE_xTo.js";
 import { d as daemonDispatchJournalPath } from "./daemon-state-B44aq2nm.js";
 import { a as formatOpenMeldCliTextBlock } from "./cli-entry-command-CR_9QU1i.js";
@@ -511,26 +511,46 @@ function prepareSpaceFileOnlySubmission(input) {
 function normalizeAuthoredMentionsInTextOrder(input) {
 	const normalizedMentions = [];
 	let searchStart = 0;
+	let sharedAudienceRange = null;
 	for (const mention of input.mentions ?? []) {
 		const profileId = normalizeOptionalText$5(mention.profileId);
 		const text = normalizeOptionalText$5(mention.text);
 		if (!(profileId && text)) throw createSubmissionError("addressing.invalid_message_envelope", "Authored mention target must include a profile and visible mention text.");
 		if (!CANONICAL_MENTION_TYPES.has(mention.relation)) throw createSubmissionError("addressing.invalid_message_envelope", INVALID_MENTION_ACTION_GUIDANCE);
 		const declaredStart = mention.start;
-		const hasValidDeclaredStart = Number.isInteger(declaredStart) && (declaredStart ?? -1) >= searchStart && input.text.slice(declaredStart, (declaredStart ?? 0) + text.length) === text;
+		const hasValidDeclaredStart = isDeclaredMentionStartValid({
+			declaredStart,
+			audience: mention.audience,
+			searchStart,
+			sharedAudienceRange,
+			text,
+			sourceText: input.text
+		});
 		if (declaredStart !== void 0 && !hasValidDeclaredStart) continue;
 		const start = hasValidDeclaredStart ? declaredStart : input.text.indexOf(text, searchStart);
 		if (start < 0) continue;
 		normalizedMentions.push({
+			...mention.audience ? { audience: mention.audience } : {},
 			profileId,
 			relation: mention.relation,
 			start,
 			text
 		});
 		searchStart = start + text.length;
+		sharedAudienceRange = mention.audience ? {
+			audience: mention.audience,
+			start,
+			text
+		} : null;
 	}
 	return normalizedMentions;
 }
+function isDeclaredMentionStartValid(input) {
+	const start = input.declaredStart;
+	if (!Number.isInteger(start)) return false;
+	const sharesAudienceRange = input.audience !== void 0 && input.sharedAudienceRange?.audience === input.audience && input.sharedAudienceRange.start === start && input.sharedAudienceRange.text === input.text;
+	return (start ?? -1) >= 0 && ((start ?? -1) >= input.searchStart || sharesAudienceRange) && input.sourceText.slice(start, (start ?? 0) + input.text.length) === input.text;
+}
 function emptyResolvedStructuredTargets() {
 	return {
 		mentionsInTextOrder: [],
@@ -6096,4 +6116,4 @@ function sendDaemonFrame(sink, input) {
 //#endregion
 export { emitDaemonDispatchJournalEvent as $, getSpaceAccessRequestContext as $t, readLastKnownAgentControllerAuthSnapshot as A, SpaceComposerSubmissionError as At, enqueueDispatchResultOutboxRecord as B, buildSpaceProfileAddPlan as Bt, readAgentActivityOutboxHealth as C, removeSpaceConfig as Ct, buildAgentControllerInterfaceKeeperKey as D, upsertSpaceConfig as Dt, readRecentAgentActivityHookStatus as E, updateSpaceLastSeenTs as Et, recordAgentControllerInterfaceProbeSuccess as F, buildSignalMessageReadProjection as Ft, resolveDispatchResultPayload as G, collectResolvedSpaceMentions as Gt, listDispatchResultOutboxPendingAcknowledgementKeys as H, buildSpaceRoundSignalPublication as Ht, recordAgentControllerUsageLimitsObservation as I, buildSignalReplyWorkflowProjection as It, sendDispatchPreviewEndFrame as J, createSpaceTargetCatalog as Jt, sendDispatchInteractionRequestFrame as K, createDispatchContinuationSpaceAccessContext as Kt, resolveAgentControllerCommandFingerprint as L, buildSpaceMemberAgentPresencePresentation as Lt, readLastSuccessfulAgentControllerInterfaceCheckAt as M, buildDispatchResultReplyWorkflowProjection as Mt, readReusableAgentControllerInterfaceSnapshot as N, buildPublicSpaceEntryUrl as Nt, consumeArmedAgentControllerInterfaceReprobe as O, writeSpaceCacheDeletionNoticeState as Ot, recordAgentControllerInterfaceProbeFailure as P, buildSignalIndex as Pt, sendDispatchToolActivityFrame as Q, getSpaceAccessPassword as Qt, resolveNextRuntimeAgentControllerReportSyncAtMs as R, buildSpaceMentionProfileIndex as Rt, deferAgentActivityOutbox as S, readSpaceRecentMentionProfileIds as St, removeProjectOutbox as T, toSpaceConfigListIntegrityError as Tt, waitForDispatchResultOutboxAcknowledgement as U, buildUpdatesReplyWorkflowProjection as Ut, flushDispatchResultOutbox as V, buildSpaceRoundReadProjection as Vt, buildFailedTaskResultPayload as W, closeMentionPickerState as Wt, sendDispatchReasoningFrame as X, extractMentionAuthoringPrefix as Xt, sendDispatchPreviewFrame as Y, enterRelationPickerState as Yt, sendDispatchRuntimeEvidenceFrame as Z, formatRemovedCcRelationMessage as Zt, drainAgentActivityHookInbox as _, OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV as _n, isLocalSpaceStateCorruptResult as _t, resolveRegisterResponseFrame as a, listSpaceMentionSuggestions as an, isSameOrDescendantPath as at, AgentActivitySubmissionResultsMismatchError as b, readSpaceConfig as bt, scanLocalAgentActivity as c, prepareSpaceFileOnlySubmission as cn, buildDispatchPromptPlan as ct, resolveOpenCodeAuthPath as d, returnToTargetPickerState as dn, resolveBootstrapSpaceOwnerProfileId as dt, isRelationPickerState as en, readRecentDaemonDispatchJournalEvents as et, resolveOpenCodeDatabasePath as f, updateAuthoredMentionRanges as fn, resolveBootstrapTargetProfileContext as ft, readCodexSessionTitles as g, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as gn, inspectSpaceCacheFile as gt, normalizeSharedSessionTitle as h, OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV as hn, LocalSpaceStateIntegrityError as ht, resolveHeartbeatResponseFrame as i, listSpaceMentionRelationChoices as in, updateComputerFileAccessPolicy as it, readLastKnownAgentControllerUsageLimits as j, buildDispatchResultMessageReadProjection as jt, didAgentControllerCommandFingerprintRemainStable as k, writeSpaceRecentMentionProfileIds as kt, startAgentActivityTranscriptWatchers as l, resolveNextRecentMentionProfileIdsForQueuedText as ln, buildDispatchSessionTitle as lt, resolveObservedAgentActivityBinding as m, DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND as mn, projectSpaceProfileCache as mt, handleDaemonTransportFrame as n, isWakeClosingSystemNoticeType as nn, readComputerFileAccessPolicy as nt, sendDaemonFrame as o, openTargetPickerState as on, buildDispatchBootstrapTemplateFacts as ot, buildAgentActivityEvent as p, DISPATCH_OWNED_RUNTIME_MODE as pn, resolveDispatchMentionSourceContext as pt, sendDispatchLifecycleFrame as q, createSpaceMemberIdentityIndex as qt, parseDaemonFrame as r, listSpaceMemberDirectorySendTargets as rn, resolveComputerFileAccessStorePath as rt, collectObservedSessionWorkingDirectories as s, prepareSpaceComposerSubmission as sn, buildDispatchCorrelation as st, emitDaemonErrorFrame as t, isTargetPickerState as tn, ComputerFileAccessStoreError as tt, readOpenCodeSessionRows as u, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as un, parseDispatchTask as ut, enqueueAgentActivityHookEvent as v, OPENMELD_SPACE_ACTION_TOOL_COMMAND_PATH_ENV as vn, listSpaceConfigs as vt, readDueAgentActivityOutbox as w, toLocalSpaceStateIntegrityError as wt, applyAgentActivitySubmissionResults as x, readSpaceLastSeenTs as xt, removeProjectInbox as y, OPENMELD_USER_FACING_CLI_COMMAND_ENV as yn, readSpaceCacheDeletionNoticeState as yt, acknowledgeDispatchResultOutboxRecord as z, buildSpaceMessageReadRelationSummary as zt };
 
-//# sourceMappingURL=daemon-frame-transport-DFfxVRi2.js.map
+//# sourceMappingURL=daemon-frame-transport-E-H3DjWA.js.map