openmeld 0.3.219 → 0.3.221

package/dist/{entry-B4G_hqId.js → entry-BE8uqbkD.js}

@@ -196,7 +196,7 @@ function runExecutionHost(hostInstanceId) {
 				ownership = verifiedOwnership;
 				session = verified.session;
 				await withAdmittedServiceSession(session, async () => {
-					const { createExecutionHostRuntime, createExecutionHostResources } = await import("./runtime-COI2XGXX.js");
+					const { createExecutionHostRuntime, createExecutionHostResources } = await import("./runtime-DMYoB5_x.js");
 					const runtimePaths = await ensureDaemonRuntimePaths();
 					const presenter = createPresenter(await resolveRuntimeContext({ view: "agent" }));
 					runtime = await createExecutionHostRuntime({
@@ -250,4 +250,4 @@ function runExecutionHost(hostInstanceId) {
 //#endregion
 export { runExecutionHost };
 
-//# sourceMappingURL=entry-B4G_hqId.js.map
+//# sourceMappingURL=entry-BE8uqbkD.js.map

package/dist/{entry-B4G_hqId.js.map → entry-BE8uqbkD.js.map}

@@ -1 +1 @@
-{"version":3,"file":"entry-B4G_hqId.js","names":[],"sources":["../src/local-service/execution-host/identity.ts","../src/local-service/execution-host/ownership.ts","../src/local-service/execution-host/entry.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport type { ServiceExecutionHostIdentity } from \"@openmeld/schemas\";\nimport {\n  buildStoredAuthSessionIdentity,\n  getAuthSessionState,\n} from \"../../config/auth-session\";\nimport { resolveBaseUrl } from \"../../config/base-url\";\nimport { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { resolveOpenMeldRootDir } from \"../../config/paths\";\nimport { readProcessStartIdentity } from \"../../system/process-identity\";\nimport { ExecutionHostError } from \"./channel\";\n\nexport async function validateExecutionHostIdentity(\n  identity: ServiceExecutionHostIdentity\n) {\n  if (\n    process.ppid !== identity.parentPid ||\n    (process.platform !== \"win32\" &&\n      readProcessStartIdentity(process.ppid) !==\n        identity.parentProcessStartedAt) ||\n    resolve(resolveOpenMeldRootDir()) !== resolve(identity.stateRoot)\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's parent or installation changed.\"\n    );\n  }\n  const [auth, contract, gateway] = await Promise.all([\n    getAuthSessionState(),\n    readDaemonServiceContract(),\n    resolveBaseUrl(),\n  ]);\n  const session = auth.session;\n  if (\n    auth.state !== \"valid\" ||\n    !session ||\n    !contract ||\n    session.user?.id !== identity.ownerUserId ||\n    buildStoredAuthSessionIdentity(session) !== identity.sessionIdentity ||\n    session.authBaseUrl !== identity.authBaseUrl ||\n    gateway !== identity.gatewayBaseUrl ||\n    contract.gatewayUrl !== identity.gatewayBaseUrl ||\n    contract.ownerUserId !== identity.ownerUserId ||\n    contract.deviceId !== identity.deviceId ||\n    contract.lane !== identity.lane ||\n    contract.generation !== identity.serviceContractGeneration\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's account, device or Service generation changed.\"\n    );\n  }\n  return { session, contract };\n}\n","import { execFile } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { serviceExecutionHostOwnerSchema } from \"@openmeld/schemas\";\nimport { z } from \"zod/v4\";\nimport { acquireLock, releaseLock } from \"../../config/lock\";\nimport { systemDir } from \"../../config/paths\";\nimport { ExecutionHostError } from \"./channel\";\n\nconst run = promisify(execFile);\nconst WINDOWS_BOOT_EVENT = /^\\d+:\\d+$/;\nconst DECIMAL = /^\\d+$/;\n\nexport async function readExecutionHostBootIdentity(): Promise<string | null> {\n  try {\n    return await readBootIdentity();\n  } catch {\n    // Fresh/quiescent starts do not require reboot evidence. Unknown evidence\n    // can never clear an unsafe previous owner, and is not another boot.\n    console.warn(\n      \"[openmeld.execution_host.boot_unknown] Automatic recovery of unconfirmed work requires operating-system restart evidence.\"\n    );\n    return null;\n  }\n}\n\nasync function readBootIdentity(): Promise<string | null> {\n  if (process.platform === \"linux\") {\n    const id = z\n      .uuid()\n      .parse(\n        (await readFile(\"/proc/sys/kernel/random/boot_id\", \"utf8\")).trim()\n      );\n    return `linux:${id.toLowerCase()}`;\n  }\n  let stdout = \"\";\n  if (process.platform === \"darwin\") {\n    // XNU's immutable boot-session UUID, not its clock-adjustable boot time.\n    ({ stdout } = await run(\n      \"/usr/sbin/sysctl\",\n      [\"-n\", \"kern.bootsessionuuid\"],\n      {\n        timeout: 5000,\n      }\n    ));\n    return `darwin:${z.uuid().parse(stdout.trim()).toLowerCase()}`;\n  }\n  if (process.platform === \"win32\") {\n    ({ stdout } = await run(\n      \"powershell.exe\",\n      [\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-Command\",\n        \"$ErrorActionPreference='Stop'; $e=Get-WinEvent -FilterHashtable @{LogName='System';ProviderName='Microsoft-Windows-Kernel-General';Id=12} -MaxEvents 1; if($null -eq $e.RecordId -or $null -eq $e.TimeCreated){throw 'Boot event unavailable'}; [Console]::WriteLine(([string]$e.RecordId)+':'+([string]$e.TimeCreated.ToUniversalTime().Ticks))\",\n      ],\n      { timeout: 5000, windowsHide: true }\n    ));\n    if (!WINDOWS_BOOT_EVENT.test(stdout.trim())) {\n      throw new Error(\"Invalid Windows boot event\");\n    }\n    return `win32:${stdout.trim()}`;\n  }\n  return null;\n}\n\nfunction confirmsNewBoot(\n  previous: string | null,\n  current: string | null\n): boolean {\n  if (!(previous && current) || previous === current) {\n    return false;\n  }\n  const [priorSource, priorId, priorTime] = previous.split(\":\");\n  const [source, id, time] = current.split(\":\");\n  if (source !== priorSource) {\n    return false;\n  }\n  if (source === \"linux\" || source === \"darwin\") {\n    return (\n      z.uuid().safeParse(id).success && z.uuid().safeParse(priorId).success\n    );\n  }\n  // Kernel-General 12 records OS startup, not EventLog-service restarts or\n  // wall-clock corrections. Require a later retained event in both fields;\n  // missing/cleared/rotated evidence cannot authorize replacing unknown work.\n  if (\n    source !== \"win32\" ||\n    !id ||\n    !time ||\n    !priorId ||\n    !priorTime ||\n    ![id, time, priorId, priorTime].every((value) => DECIMAL.test(value))\n  ) {\n    return false;\n  }\n  return BigInt(id) > BigInt(priorId) && BigInt(time) > BigInt(priorTime);\n}\n\nexport async function acquireExecutionHostOwnership(input: {\n  hostInstanceId: string;\n  ownerUserId: string;\n  deviceId: string;\n  lane: \"prod\" | \"dev-local\" | \"canary\";\n  stateRoot: string;\n  bootIdentity: string | null;\n}) {\n  const lock = await acquireLock({\n    openMeldProfileId: \"service-execution-host\",\n    key: \"process-owner\",\n    pathResolution: { env: { ...process.env, OPENMELD_HOME: input.stateRoot } },\n    meta: {\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n    },\n  });\n  const path = join(\n    systemDir({ env: { OPENMELD_HOME: input.stateRoot } }),\n    \"execution-host-owner.json\"\n  );\n  try {\n    const previous = readOwner(path);\n    if (\n      previous &&\n      !previous.localQuiescent &&\n      !confirmsNewBoot(previous.bootIdentity, input.bootIdentity)\n    ) {\n      throw new ExecutionHostError(\n        \"host.previous_work_unconfirmed\",\n        \"The previous execution host ended before its local work was confirmed stopped. Restart this Computer, then check its connection. If restart evidence is unavailable, inspect the retained Host diagnostics before recovery. Existing results remain saved; no task will be restarted automatically.\"\n      );\n    }\n    let owner = serviceExecutionHostOwnerSchema.parse({\n      schema: \"service-execution-host-owner-v1\",\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n      deviceId: input.deviceId,\n      lane: input.lane,\n      pid: process.pid,\n      bootIdentity: input.bootIdentity,\n      localQuiescent: true,\n    });\n    persist(owner);\n    function persist(next: typeof owner) {\n      mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      writeFileSync(temporary, JSON.stringify(next), {\n        mode: 0o600,\n        flag: \"wx\",\n      });\n      renameSync(temporary, path);\n    }\n    return {\n      observeLocalQuiescence(quiescent: boolean) {\n        if (owner.localQuiescent === quiescent) {\n          return;\n        }\n        const next = { ...owner, localQuiescent: quiescent };\n        // The unsafe transition is durable before any provider operation. A\n        // failed write refuses that operation rather than weakening the fence.\n        persist(next);\n        owner = next;\n      },\n      release: () => releaseLock(lock),\n    };\n  } catch (error) {\n    await releaseLock(lock);\n    throw error;\n  }\n}\n\nfunction readOwner(path: string) {\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return null;\n    }\n    throw error;\n  }\n  const parsed = serviceExecutionHostOwnerSchema.safeParse(JSON.parse(raw));\n  if (!parsed.success) {\n    throw new ExecutionHostError(\n      \"host.owner_corrupt\",\n      \"The Host ownership record cannot be verified. Preserve it for diagnostics; automatic replacement is refused.\"\n    );\n  }\n  return parsed.data;\n}\n","import {\n  type ServiceExecutionHostIdentity,\n  serviceExecutionHostMethods,\n} from \"@openmeld/schemas\";\nimport {\n  type StoredAuthSession,\n  withAdmittedServiceSession,\n} from \"../../config/auth-session\";\nimport { resolveRuntimeContext } from \"../../runtime/context\";\nimport { createPresenter } from \"../../runtime/presenter/index\";\nimport { ensureDaemonRuntimePaths } from \"../state/daemon-device-id\";\nimport {\n  ExecutionHostError,\n  type ExecutionHostHandlers,\n  serveExecutionHost,\n} from \"./channel\";\nimport { validateExecutionHostIdentity } from \"./identity\";\nimport {\n  acquireExecutionHostOwnership,\n  readExecutionHostBootIdentity,\n} from \"./ownership\";\nimport { parentExecutionHostChannel } from \"./process-channel\";\n\n// This entry has no public listener and accepts no executable/path override.\n// The inherited pipe, parent incarnation and current Service account are all\n// required before the provider graph or any local runtime state is opened.\nexport function runExecutionHost(hostInstanceId: string): Promise<void> {\n  const channel = parentExecutionHostChannel();\n  const done = Promise.withResolvers<void>();\n  let runtime: Awaited<\n    ReturnType<typeof import(\"./runtime\").createExecutionHostRuntime>\n  > | null = null;\n  let ownership: Awaited<\n    ReturnType<typeof acquireExecutionHostOwnership>\n  > | null = null;\n  let session: StoredAuthSession | null = null;\n  let acceptedIdentity: ServiceExecutionHostIdentity | null = null;\n  let initializing: Promise<void> | null = null;\n  let closing: Promise<void> | null = null;\n  let disconnected = false;\n\n  const close = (): Promise<void> => {\n    if (!closing) {\n      closing = (async () => {\n        try {\n          await initializing;\n          if (runtime && session) {\n            const currentRuntime = runtime;\n            await withAdmittedServiceSession(session, () =>\n              currentRuntime.closeAfterConnectorLoss()\n            );\n          }\n        } finally {\n          await ownership?.release();\n          server.dispose();\n          if (process.connected) {\n            process.disconnect();\n          }\n        }\n      })();\n      closing.then(\n        () => done.resolve(),\n        (error) => done.reject(error)\n      );\n    }\n    return closing;\n  };\n\n  const handlers = {\n    initialize: async (identity: ServiceExecutionHostIdentity) => {\n      if (\n        acceptedIdentity &&\n        JSON.stringify(acceptedIdentity) !== JSON.stringify(identity)\n      ) {\n        throw new ExecutionHostError(\n          \"host.identity_mismatch\",\n          \"This Host is already assigned to a different Service incarnation.\"\n        );\n      }\n      if (!initializing) {\n        acceptedIdentity = identity;\n        initializing = (async () => {\n          const verified = await validateExecutionHostIdentity(identity);\n          if (disconnected) {\n            throw new ExecutionHostError(\n              \"host.disconnected\",\n              \"The supervising Service left before Host initialization.\"\n            );\n          }\n          const verifiedOwnership = await acquireExecutionHostOwnership({\n            ...identity,\n            hostInstanceId,\n            bootIdentity: await readExecutionHostBootIdentity(),\n          });\n          ownership = verifiedOwnership;\n          session = verified.session;\n          await withAdmittedServiceSession(session, async () => {\n            const { createExecutionHostRuntime, createExecutionHostResources } =\n              await import(\"./runtime\");\n            const runtimePaths = await ensureDaemonRuntimePaths();\n            const presenter = createPresenter(\n              await resolveRuntimeContext({ view: \"agent\" })\n            );\n            runtime = await createExecutionHostRuntime({\n              resources: await createExecutionHostResources({\n                runtimePaths,\n                presenter,\n              }),\n              hostInstanceId,\n              identity,\n              runtimePaths,\n              serviceBundleId: verified.contract.bundleId,\n              profileOwnerName: verified.session.user?.name ?? null,\n              presenter,\n              emit: (event) => {\n                if (!disconnected) {\n                  server.emit(event);\n                }\n              },\n              onWorkStateChange: (quiescent) =>\n                verifiedOwnership.observeLocalQuiescence(quiescent),\n            });\n          });\n        })();\n      }\n      await initializing;\n      if (!runtime || disconnected) {\n        throw new ExecutionHostError(\n          \"host.disconnected\",\n          \"The execution Host is not available.\"\n        );\n      }\n      return runtime.snapshot();\n    },\n  } as ExecutionHostHandlers;\n\n  // Each concrete method is still decoded by the shared method table at both\n  // ends; the forwarding bridge cannot select a new account or mutate identity.\n  for (const method of Object.keys(serviceExecutionHostMethods) as Array<\n    keyof ExecutionHostHandlers\n  >) {\n    if (method === \"initialize\") {\n      continue;\n    }\n    const target = handlers as unknown as Record<\n      string,\n      (payload: unknown) => Promise<unknown>\n    >;\n    target[method] = async (payload) => {\n      if (!(runtime && session) || disconnected) {\n        throw new ExecutionHostError(\n          \"host.not_initialized\",\n          \"Initialize this Host through its supervising Service first.\"\n        );\n      }\n      const invoke = runtime.handlers[method] as (value: unknown) => unknown;\n      return await withAdmittedServiceSession(\n        session,\n        async () => await invoke(payload)\n      );\n    };\n  }\n\n  const server = serveExecutionHost({\n    channel,\n    hostInstanceId,\n    handlers,\n    onFailure: (error) => {\n      console.error(\"[openmeld.execution_host.channel_failed]\", error);\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n    onDisconnect: () => {\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n  });\n  return done.promise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAYA,eAAsB,8BACpB,UACA;CACA,IACE,QAAQ,SAAS,SAAS,aACzB,QAAQ,aAAa,WACpB,yBAAyB,QAAQ,IAAI,MACnC,SAAS,0BACb,QAAQ,uBAAuB,CAAC,MAAM,QAAQ,SAAS,SAAS,GAEhE,MAAM,IAAI,mBACR,0BACA,4CACF;CAEF,MAAM,CAAC,MAAM,UAAU,WAAW,MAAM,QAAQ,IAAI;EAClD,oBAAoB;EACpB,0BAA0B;EAC1B,eAAe;CACjB,CAAC;CACD,MAAM,UAAU,KAAK;CACrB,IACE,KAAK,UAAU,WACf,CAAC,WACD,CAAC,YACD,QAAQ,MAAM,OAAO,SAAS,eAC9B,+BAA+B,OAAO,MAAM,SAAS,mBACrD,QAAQ,gBAAgB,SAAS,eACjC,YAAY,SAAS,kBACrB,SAAS,eAAe,SAAS,kBACjC,SAAS,gBAAgB,SAAS,eAClC,SAAS,aAAa,SAAS,YAC/B,SAAS,SAAS,SAAS,QAC3B,SAAS,eAAe,SAAS,2BAEjC,MAAM,IAAI,mBACR,0BACA,2DACF;CAEF,OAAO;EAAE;EAAS;CAAS;AAC7B;;;ACzCA,MAAM,MAAM,UAAU,QAAQ;AAC9B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;AAEhB,eAAsB,gCAAwD;CAC5E,IAAI;EACF,OAAO,MAAM,iBAAiB;CAChC,QAAQ;EAGN,QAAQ,KACN,2HACF;EACA,OAAO;CACT;AACF;AAEA,eAAe,mBAA2C;CACxD,IAAI,QAAQ,aAAa,SAMvB,OAAO,SALI,EACR,KAAK,CAAC,CACN,OACE,MAAM,SAAS,mCAAmC,MAAM,EAAA,CAAG,KAAK,CAEpD,CAAC,CAAC,YAAY;CAEjC,IAAI,SAAS;CACb,IAAI,QAAQ,aAAa,UAAU;EAEjC,CAAC,CAAE,UAAW,MAAM,IAClB,oBACA,CAAC,MAAM,sBAAsB,GAC7B,EACE,SAAS,IACX,CACF;EACA,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY;CAC7D;CACA,IAAI,QAAQ,aAAa,SAAS;EAChC,CAAC,CAAE,UAAW,MAAM,IAClB,kBACA;GACE;GACA;GACA;GACA;EACF,GACA;GAAE,SAAS;GAAM,aAAa;EAAK,CACrC;EACA,IAAI,CAAC,mBAAmB,KAAK,OAAO,KAAK,CAAC,GACxC,MAAM,IAAI,MAAM,4BAA4B;EAE9C,OAAO,SAAS,OAAO,KAAK;CAC9B;CACA,OAAO;AACT;AAEA,SAAS,gBACP,UACA,SACS;CACT,IAAI,EAAE,YAAY,YAAY,aAAa,SACzC,OAAO;CAET,MAAM,CAAC,aAAa,SAAS,aAAa,SAAS,MAAM,GAAG;CAC5D,MAAM,CAAC,QAAQ,IAAI,QAAQ,QAAQ,MAAM,GAAG;CAC5C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,WAAW,WAAW,UACnC,OACE,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC;CAMlE,IACE,WAAW,WACX,CAAC,MACD,CAAC,QACD,CAAC,WACD,CAAC,aACD,CAAC;EAAC;EAAI;EAAM;EAAS;CAAS,CAAC,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,CAAC,GAEpE,OAAO;CAET,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,IAAI,OAAO,SAAS;AACxE;AAEA,eAAsB,8BAA8B,OAOjD;CACD,MAAM,OAAO,MAAM,YAAY;EAC7B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,EAAE,KAAK;GAAE,GAAG,QAAQ;GAAK,eAAe,MAAM;EAAU,EAAE;EAC1E,MAAM;GACJ,gBAAgB,MAAM;GACtB,aAAa,MAAM;EACrB;CACF,CAAC;CACD,MAAM,OAAO,KACX,UAAU,EAAE,KAAK,EAAE,eAAe,MAAM,UAAU,EAAE,CAAC,GACrD,2BACF;CACA,IAAI;EACF,MAAM,WAAW,UAAU,IAAI;EAC/B,IACE,YACA,CAAC,SAAS,kBACV,CAAC,gBAAgB,SAAS,cAAc,MAAM,YAAY,GAE1D,MAAM,IAAI,mBACR,kCACA,qSACF;EAEF,IAAI,QAAQ,gCAAgC,MAAM;GAChD,QAAQ;GACR,gBAAgB,MAAM;GACtB,aAAa,MAAM;GACnB,UAAU,MAAM;GAChB,MAAM,MAAM;GACZ,KAAK,QAAQ;GACb,cAAc,MAAM;GACpB,gBAAgB;EAClB,CAAC;EACD,QAAQ,KAAK;EACb,SAAS,QAAQ,MAAoB;GACnC,UAAU,QAAQ,IAAI,GAAG;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACzD,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;GAC1C,cAAc,WAAW,KAAK,UAAU,IAAI,GAAG;IAC7C,MAAM;IACN,MAAM;GACR,CAAC;GACD,WAAW,WAAW,IAAI;EAC5B;EACA,OAAO;GACL,uBAAuB,WAAoB;IACzC,IAAI,MAAM,mBAAmB,WAC3B;IAEF,MAAM,OAAO;KAAE,GAAG;KAAO,gBAAgB;IAAU;IAGnD,QAAQ,IAAI;IACZ,QAAQ;GACV;GACA,eAAe,YAAY,IAAI;EACjC;CACF,SAAS,OAAO;EACd,MAAM,YAAY,IAAI;EACtB,MAAM;CACR;AACF;AAEA,SAAS,UAAU,MAAc;CAC/B,IAAI;CACJ,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,OAAO;EAET,MAAM;CACR;CACA,MAAM,SAAS,gCAAgC,UAAU,KAAK,MAAM,GAAG,CAAC;CACxE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,mBACR,sBACA,8GACF;CAEF,OAAO,OAAO;AAChB;;;ACtKA,SAAgB,iBAAiB,gBAAuC;CACtE,MAAM,UAAU,2BAA2B;CAC3C,MAAM,OAAO,QAAQ,cAAoB;CACzC,IAAI,UAEO;CACX,IAAI,YAEO;CACX,IAAI,UAAoC;CACxC,IAAI,mBAAwD;CAC5D,IAAI,eAAqC;CACzC,IAAI,UAAgC;CACpC,IAAI,eAAe;CAEnB,MAAM,cAA6B;EACjC,IAAI,CAAC,SAAS;GACZ,WAAW,YAAY;IACrB,IAAI;KACF,MAAM;KACN,IAAI,WAAW,SAAS;MACtB,MAAM,iBAAiB;MACvB,MAAM,2BAA2B,eAC/B,eAAe,wBAAwB,CACzC;KACF;IACF,UAAU;KACR,MAAM,WAAW,QAAQ;KACzB,OAAO,QAAQ;KACf,IAAI,QAAQ,WACV,QAAQ,WAAW;IAEvB;GACF,EAAA,CAAG;GACH,QAAQ,WACA,KAAK,QAAQ,IAClB,UAAU,KAAK,OAAO,KAAK,CAC9B;EACF;EACA,OAAO;CACT;CAEA,MAAM,WAAW,EACf,YAAY,OAAO,aAA2C;EAC5D,IACE,oBACA,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,QAAQ,GAE5D,MAAM,IAAI,mBACR,0BACA,mEACF;EAEF,IAAI,CAAC,cAAc;GACjB,mBAAmB;GACnB,gBAAgB,YAAY;IAC1B,MAAM,WAAW,MAAM,8BAA8B,QAAQ;IAC7D,IAAI,cACF,MAAM,IAAI,mBACR,qBACA,0DACF;IAEF,MAAM,oBAAoB,MAAM,8BAA8B;KAC5D,GAAG;KACH;KACA,cAAc,MAAM,8BAA8B;IACpD,CAAC;IACD,YAAY;IACZ,UAAU,SAAS;IACnB,MAAM,2BAA2B,SAAS,YAAY;KACpD,MAAM,EAAE,4BAA4B,iCAClC,MAAM,OAAO;KACf,MAAM,eAAe,MAAM,yBAAyB;KACpD,MAAM,YAAY,gBAChB,MAAM,sBAAsB,EAAE,MAAM,QAAQ,CAAC,CAC/C;KACA,UAAU,MAAM,2BAA2B;MACzC,WAAW,MAAM,6BAA6B;OAC5C;OACA;MACF,CAAC;MACD;MACA;MACA;MACA,iBAAiB,SAAS,SAAS;MACnC,kBAAkB,SAAS,QAAQ,MAAM,QAAQ;MACjD;MACA,OAAO,UAAU;OACf,IAAI,CAAC,cACH,OAAO,KAAK,KAAK;MAErB;MACA,oBAAoB,cAClB,kBAAkB,uBAAuB,SAAS;KACtD,CAAC;IACH,CAAC;GACH,EAAA,CAAG;EACL;EACA,MAAM;EACN,IAAI,CAAC,WAAW,cACd,MAAM,IAAI,mBACR,qBACA,sCACF;EAEF,OAAO,QAAQ,SAAS;CAC1B,EACF;CAIA,KAAK,MAAM,UAAU,OAAO,KAAK,2BAA2B,GAEzD;EACD,IAAI,WAAW,cACb;EAEF,MAAM,SAAS;EAIf,OAAO,UAAU,OAAO,YAAY;GAClC,IAAI,EAAE,WAAW,YAAY,cAC3B,MAAM,IAAI,mBACR,wBACA,6DACF;GAEF,MAAM,SAAS,QAAQ,SAAS;GAChC,OAAO,MAAM,2BACX,SACA,YAAY,MAAM,OAAO,OAAO,CAClC;EACF;CACF;CAEA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA;EACA,YAAY,UAAU;GACpB,QAAQ,MAAM,4CAA4C,KAAK;GAC/D,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;EACA,oBAAoB;GAClB,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;CACF,CAAC;CACD,OAAO,KAAK;AACd"}
+{"version":3,"file":"entry-BE8uqbkD.js","names":[],"sources":["../src/local-service/execution-host/identity.ts","../src/local-service/execution-host/ownership.ts","../src/local-service/execution-host/entry.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport type { ServiceExecutionHostIdentity } from \"@openmeld/schemas\";\nimport {\n  buildStoredAuthSessionIdentity,\n  getAuthSessionState,\n} from \"../../config/auth-session\";\nimport { resolveBaseUrl } from \"../../config/base-url\";\nimport { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { resolveOpenMeldRootDir } from \"../../config/paths\";\nimport { readProcessStartIdentity } from \"../../system/process-identity\";\nimport { ExecutionHostError } from \"./channel\";\n\nexport async function validateExecutionHostIdentity(\n  identity: ServiceExecutionHostIdentity\n) {\n  if (\n    process.ppid !== identity.parentPid ||\n    (process.platform !== \"win32\" &&\n      readProcessStartIdentity(process.ppid) !==\n        identity.parentProcessStartedAt) ||\n    resolve(resolveOpenMeldRootDir()) !== resolve(identity.stateRoot)\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's parent or installation changed.\"\n    );\n  }\n  const [auth, contract, gateway] = await Promise.all([\n    getAuthSessionState(),\n    readDaemonServiceContract(),\n    resolveBaseUrl(),\n  ]);\n  const session = auth.session;\n  if (\n    auth.state !== \"valid\" ||\n    !session ||\n    !contract ||\n    session.user?.id !== identity.ownerUserId ||\n    buildStoredAuthSessionIdentity(session) !== identity.sessionIdentity ||\n    session.authBaseUrl !== identity.authBaseUrl ||\n    gateway !== identity.gatewayBaseUrl ||\n    contract.gatewayUrl !== identity.gatewayBaseUrl ||\n    contract.ownerUserId !== identity.ownerUserId ||\n    contract.deviceId !== identity.deviceId ||\n    contract.lane !== identity.lane ||\n    contract.generation !== identity.serviceContractGeneration\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's account, device or Service generation changed.\"\n    );\n  }\n  return { session, contract };\n}\n","import { execFile } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { serviceExecutionHostOwnerSchema } from \"@openmeld/schemas\";\nimport { z } from \"zod/v4\";\nimport { acquireLock, releaseLock } from \"../../config/lock\";\nimport { systemDir } from \"../../config/paths\";\nimport { ExecutionHostError } from \"./channel\";\n\nconst run = promisify(execFile);\nconst WINDOWS_BOOT_EVENT = /^\\d+:\\d+$/;\nconst DECIMAL = /^\\d+$/;\n\nexport async function readExecutionHostBootIdentity(): Promise<string | null> {\n  try {\n    return await readBootIdentity();\n  } catch {\n    // Fresh/quiescent starts do not require reboot evidence. Unknown evidence\n    // can never clear an unsafe previous owner, and is not another boot.\n    console.warn(\n      \"[openmeld.execution_host.boot_unknown] Automatic recovery of unconfirmed work requires operating-system restart evidence.\"\n    );\n    return null;\n  }\n}\n\nasync function readBootIdentity(): Promise<string | null> {\n  if (process.platform === \"linux\") {\n    const id = z\n      .uuid()\n      .parse(\n        (await readFile(\"/proc/sys/kernel/random/boot_id\", \"utf8\")).trim()\n      );\n    return `linux:${id.toLowerCase()}`;\n  }\n  let stdout = \"\";\n  if (process.platform === \"darwin\") {\n    // XNU's immutable boot-session UUID, not its clock-adjustable boot time.\n    ({ stdout } = await run(\n      \"/usr/sbin/sysctl\",\n      [\"-n\", \"kern.bootsessionuuid\"],\n      {\n        timeout: 5000,\n      }\n    ));\n    return `darwin:${z.uuid().parse(stdout.trim()).toLowerCase()}`;\n  }\n  if (process.platform === \"win32\") {\n    ({ stdout } = await run(\n      \"powershell.exe\",\n      [\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-Command\",\n        \"$ErrorActionPreference='Stop'; $e=Get-WinEvent -FilterHashtable @{LogName='System';ProviderName='Microsoft-Windows-Kernel-General';Id=12} -MaxEvents 1; if($null -eq $e.RecordId -or $null -eq $e.TimeCreated){throw 'Boot event unavailable'}; [Console]::WriteLine(([string]$e.RecordId)+':'+([string]$e.TimeCreated.ToUniversalTime().Ticks))\",\n      ],\n      { timeout: 5000, windowsHide: true }\n    ));\n    if (!WINDOWS_BOOT_EVENT.test(stdout.trim())) {\n      throw new Error(\"Invalid Windows boot event\");\n    }\n    return `win32:${stdout.trim()}`;\n  }\n  return null;\n}\n\nfunction confirmsNewBoot(\n  previous: string | null,\n  current: string | null\n): boolean {\n  if (!(previous && current) || previous === current) {\n    return false;\n  }\n  const [priorSource, priorId, priorTime] = previous.split(\":\");\n  const [source, id, time] = current.split(\":\");\n  if (source !== priorSource) {\n    return false;\n  }\n  if (source === \"linux\" || source === \"darwin\") {\n    return (\n      z.uuid().safeParse(id).success && z.uuid().safeParse(priorId).success\n    );\n  }\n  // Kernel-General 12 records OS startup, not EventLog-service restarts or\n  // wall-clock corrections. Require a later retained event in both fields;\n  // missing/cleared/rotated evidence cannot authorize replacing unknown work.\n  if (\n    source !== \"win32\" ||\n    !id ||\n    !time ||\n    !priorId ||\n    !priorTime ||\n    ![id, time, priorId, priorTime].every((value) => DECIMAL.test(value))\n  ) {\n    return false;\n  }\n  return BigInt(id) > BigInt(priorId) && BigInt(time) > BigInt(priorTime);\n}\n\nexport async function acquireExecutionHostOwnership(input: {\n  hostInstanceId: string;\n  ownerUserId: string;\n  deviceId: string;\n  lane: \"prod\" | \"dev-local\" | \"canary\";\n  stateRoot: string;\n  bootIdentity: string | null;\n}) {\n  const lock = await acquireLock({\n    openMeldProfileId: \"service-execution-host\",\n    key: \"process-owner\",\n    pathResolution: { env: { ...process.env, OPENMELD_HOME: input.stateRoot } },\n    meta: {\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n    },\n  });\n  const path = join(\n    systemDir({ env: { OPENMELD_HOME: input.stateRoot } }),\n    \"execution-host-owner.json\"\n  );\n  try {\n    const previous = readOwner(path);\n    if (\n      previous &&\n      !previous.localQuiescent &&\n      !confirmsNewBoot(previous.bootIdentity, input.bootIdentity)\n    ) {\n      throw new ExecutionHostError(\n        \"host.previous_work_unconfirmed\",\n        \"The previous execution host ended before its local work was confirmed stopped. Restart this Computer, then check its connection. If restart evidence is unavailable, inspect the retained Host diagnostics before recovery. Existing results remain saved; no task will be restarted automatically.\"\n      );\n    }\n    let owner = serviceExecutionHostOwnerSchema.parse({\n      schema: \"service-execution-host-owner-v1\",\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n      deviceId: input.deviceId,\n      lane: input.lane,\n      pid: process.pid,\n      bootIdentity: input.bootIdentity,\n      localQuiescent: true,\n    });\n    persist(owner);\n    function persist(next: typeof owner) {\n      mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      writeFileSync(temporary, JSON.stringify(next), {\n        mode: 0o600,\n        flag: \"wx\",\n      });\n      renameSync(temporary, path);\n    }\n    return {\n      observeLocalQuiescence(quiescent: boolean) {\n        if (owner.localQuiescent === quiescent) {\n          return;\n        }\n        const next = { ...owner, localQuiescent: quiescent };\n        // The unsafe transition is durable before any provider operation. A\n        // failed write refuses that operation rather than weakening the fence.\n        persist(next);\n        owner = next;\n      },\n      release: () => releaseLock(lock),\n    };\n  } catch (error) {\n    await releaseLock(lock);\n    throw error;\n  }\n}\n\nfunction readOwner(path: string) {\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return null;\n    }\n    throw error;\n  }\n  const parsed = serviceExecutionHostOwnerSchema.safeParse(JSON.parse(raw));\n  if (!parsed.success) {\n    throw new ExecutionHostError(\n      \"host.owner_corrupt\",\n      \"The Host ownership record cannot be verified. Preserve it for diagnostics; automatic replacement is refused.\"\n    );\n  }\n  return parsed.data;\n}\n","import {\n  type ServiceExecutionHostIdentity,\n  serviceExecutionHostMethods,\n} from \"@openmeld/schemas\";\nimport {\n  type StoredAuthSession,\n  withAdmittedServiceSession,\n} from \"../../config/auth-session\";\nimport { resolveRuntimeContext } from \"../../runtime/context\";\nimport { createPresenter } from \"../../runtime/presenter/index\";\nimport { ensureDaemonRuntimePaths } from \"../state/daemon-device-id\";\nimport {\n  ExecutionHostError,\n  type ExecutionHostHandlers,\n  serveExecutionHost,\n} from \"./channel\";\nimport { validateExecutionHostIdentity } from \"./identity\";\nimport {\n  acquireExecutionHostOwnership,\n  readExecutionHostBootIdentity,\n} from \"./ownership\";\nimport { parentExecutionHostChannel } from \"./process-channel\";\n\n// This entry has no public listener and accepts no executable/path override.\n// The inherited pipe, parent incarnation and current Service account are all\n// required before the provider graph or any local runtime state is opened.\nexport function runExecutionHost(hostInstanceId: string): Promise<void> {\n  const channel = parentExecutionHostChannel();\n  const done = Promise.withResolvers<void>();\n  let runtime: Awaited<\n    ReturnType<typeof import(\"./runtime\").createExecutionHostRuntime>\n  > | null = null;\n  let ownership: Awaited<\n    ReturnType<typeof acquireExecutionHostOwnership>\n  > | null = null;\n  let session: StoredAuthSession | null = null;\n  let acceptedIdentity: ServiceExecutionHostIdentity | null = null;\n  let initializing: Promise<void> | null = null;\n  let closing: Promise<void> | null = null;\n  let disconnected = false;\n\n  const close = (): Promise<void> => {\n    if (!closing) {\n      closing = (async () => {\n        try {\n          await initializing;\n          if (runtime && session) {\n            const currentRuntime = runtime;\n            await withAdmittedServiceSession(session, () =>\n              currentRuntime.closeAfterConnectorLoss()\n            );\n          }\n        } finally {\n          await ownership?.release();\n          server.dispose();\n          if (process.connected) {\n            process.disconnect();\n          }\n        }\n      })();\n      closing.then(\n        () => done.resolve(),\n        (error) => done.reject(error)\n      );\n    }\n    return closing;\n  };\n\n  const handlers = {\n    initialize: async (identity: ServiceExecutionHostIdentity) => {\n      if (\n        acceptedIdentity &&\n        JSON.stringify(acceptedIdentity) !== JSON.stringify(identity)\n      ) {\n        throw new ExecutionHostError(\n          \"host.identity_mismatch\",\n          \"This Host is already assigned to a different Service incarnation.\"\n        );\n      }\n      if (!initializing) {\n        acceptedIdentity = identity;\n        initializing = (async () => {\n          const verified = await validateExecutionHostIdentity(identity);\n          if (disconnected) {\n            throw new ExecutionHostError(\n              \"host.disconnected\",\n              \"The supervising Service left before Host initialization.\"\n            );\n          }\n          const verifiedOwnership = await acquireExecutionHostOwnership({\n            ...identity,\n            hostInstanceId,\n            bootIdentity: await readExecutionHostBootIdentity(),\n          });\n          ownership = verifiedOwnership;\n          session = verified.session;\n          await withAdmittedServiceSession(session, async () => {\n            const { createExecutionHostRuntime, createExecutionHostResources } =\n              await import(\"./runtime\");\n            const runtimePaths = await ensureDaemonRuntimePaths();\n            const presenter = createPresenter(\n              await resolveRuntimeContext({ view: \"agent\" })\n            );\n            runtime = await createExecutionHostRuntime({\n              resources: await createExecutionHostResources({\n                runtimePaths,\n                presenter,\n              }),\n              hostInstanceId,\n              identity,\n              runtimePaths,\n              serviceBundleId: verified.contract.bundleId,\n              profileOwnerName: verified.session.user?.name ?? null,\n              presenter,\n              emit: (event) => {\n                if (!disconnected) {\n                  server.emit(event);\n                }\n              },\n              onWorkStateChange: (quiescent) =>\n                verifiedOwnership.observeLocalQuiescence(quiescent),\n            });\n          });\n        })();\n      }\n      await initializing;\n      if (!runtime || disconnected) {\n        throw new ExecutionHostError(\n          \"host.disconnected\",\n          \"The execution Host is not available.\"\n        );\n      }\n      return runtime.snapshot();\n    },\n  } as ExecutionHostHandlers;\n\n  // Each concrete method is still decoded by the shared method table at both\n  // ends; the forwarding bridge cannot select a new account or mutate identity.\n  for (const method of Object.keys(serviceExecutionHostMethods) as Array<\n    keyof ExecutionHostHandlers\n  >) {\n    if (method === \"initialize\") {\n      continue;\n    }\n    const target = handlers as unknown as Record<\n      string,\n      (payload: unknown) => Promise<unknown>\n    >;\n    target[method] = async (payload) => {\n      if (!(runtime && session) || disconnected) {\n        throw new ExecutionHostError(\n          \"host.not_initialized\",\n          \"Initialize this Host through its supervising Service first.\"\n        );\n      }\n      const invoke = runtime.handlers[method] as (value: unknown) => unknown;\n      return await withAdmittedServiceSession(\n        session,\n        async () => await invoke(payload)\n      );\n    };\n  }\n\n  const server = serveExecutionHost({\n    channel,\n    hostInstanceId,\n    handlers,\n    onFailure: (error) => {\n      console.error(\"[openmeld.execution_host.channel_failed]\", error);\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n    onDisconnect: () => {\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n  });\n  return done.promise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAYA,eAAsB,8BACpB,UACA;CACA,IACE,QAAQ,SAAS,SAAS,aACzB,QAAQ,aAAa,WACpB,yBAAyB,QAAQ,IAAI,MACnC,SAAS,0BACb,QAAQ,uBAAuB,CAAC,MAAM,QAAQ,SAAS,SAAS,GAEhE,MAAM,IAAI,mBACR,0BACA,4CACF;CAEF,MAAM,CAAC,MAAM,UAAU,WAAW,MAAM,QAAQ,IAAI;EAClD,oBAAoB;EACpB,0BAA0B;EAC1B,eAAe;CACjB,CAAC;CACD,MAAM,UAAU,KAAK;CACrB,IACE,KAAK,UAAU,WACf,CAAC,WACD,CAAC,YACD,QAAQ,MAAM,OAAO,SAAS,eAC9B,+BAA+B,OAAO,MAAM,SAAS,mBACrD,QAAQ,gBAAgB,SAAS,eACjC,YAAY,SAAS,kBACrB,SAAS,eAAe,SAAS,kBACjC,SAAS,gBAAgB,SAAS,eAClC,SAAS,aAAa,SAAS,YAC/B,SAAS,SAAS,SAAS,QAC3B,SAAS,eAAe,SAAS,2BAEjC,MAAM,IAAI,mBACR,0BACA,2DACF;CAEF,OAAO;EAAE;EAAS;CAAS;AAC7B;;;ACzCA,MAAM,MAAM,UAAU,QAAQ;AAC9B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;AAEhB,eAAsB,gCAAwD;CAC5E,IAAI;EACF,OAAO,MAAM,iBAAiB;CAChC,QAAQ;EAGN,QAAQ,KACN,2HACF;EACA,OAAO;CACT;AACF;AAEA,eAAe,mBAA2C;CACxD,IAAI,QAAQ,aAAa,SAMvB,OAAO,SALI,EACR,KAAK,CAAC,CACN,OACE,MAAM,SAAS,mCAAmC,MAAM,EAAA,CAAG,KAAK,CAEpD,CAAC,CAAC,YAAY;CAEjC,IAAI,SAAS;CACb,IAAI,QAAQ,aAAa,UAAU;EAEjC,CAAC,CAAE,UAAW,MAAM,IAClB,oBACA,CAAC,MAAM,sBAAsB,GAC7B,EACE,SAAS,IACX,CACF;EACA,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY;CAC7D;CACA,IAAI,QAAQ,aAAa,SAAS;EAChC,CAAC,CAAE,UAAW,MAAM,IAClB,kBACA;GACE;GACA;GACA;GACA;EACF,GACA;GAAE,SAAS;GAAM,aAAa;EAAK,CACrC;EACA,IAAI,CAAC,mBAAmB,KAAK,OAAO,KAAK,CAAC,GACxC,MAAM,IAAI,MAAM,4BAA4B;EAE9C,OAAO,SAAS,OAAO,KAAK;CAC9B;CACA,OAAO;AACT;AAEA,SAAS,gBACP,UACA,SACS;CACT,IAAI,EAAE,YAAY,YAAY,aAAa,SACzC,OAAO;CAET,MAAM,CAAC,aAAa,SAAS,aAAa,SAAS,MAAM,GAAG;CAC5D,MAAM,CAAC,QAAQ,IAAI,QAAQ,QAAQ,MAAM,GAAG;CAC5C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,WAAW,WAAW,UACnC,OACE,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC;CAMlE,IACE,WAAW,WACX,CAAC,MACD,CAAC,QACD,CAAC,WACD,CAAC,aACD,CAAC;EAAC;EAAI;EAAM;EAAS;CAAS,CAAC,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,CAAC,GAEpE,OAAO;CAET,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,IAAI,OAAO,SAAS;AACxE;AAEA,eAAsB,8BAA8B,OAOjD;CACD,MAAM,OAAO,MAAM,YAAY;EAC7B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,EAAE,KAAK;GAAE,GAAG,QAAQ;GAAK,eAAe,MAAM;EAAU,EAAE;EAC1E,MAAM;GACJ,gBAAgB,MAAM;GACtB,aAAa,MAAM;EACrB;CACF,CAAC;CACD,MAAM,OAAO,KACX,UAAU,EAAE,KAAK,EAAE,eAAe,MAAM,UAAU,EAAE,CAAC,GACrD,2BACF;CACA,IAAI;EACF,MAAM,WAAW,UAAU,IAAI;EAC/B,IACE,YACA,CAAC,SAAS,kBACV,CAAC,gBAAgB,SAAS,cAAc,MAAM,YAAY,GAE1D,MAAM,IAAI,mBACR,kCACA,qSACF;EAEF,IAAI,QAAQ,gCAAgC,MAAM;GAChD,QAAQ;GACR,gBAAgB,MAAM;GACtB,aAAa,MAAM;GACnB,UAAU,MAAM;GAChB,MAAM,MAAM;GACZ,KAAK,QAAQ;GACb,cAAc,MAAM;GACpB,gBAAgB;EAClB,CAAC;EACD,QAAQ,KAAK;EACb,SAAS,QAAQ,MAAoB;GACnC,UAAU,QAAQ,IAAI,GAAG;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACzD,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;GAC1C,cAAc,WAAW,KAAK,UAAU,IAAI,GAAG;IAC7C,MAAM;IACN,MAAM;GACR,CAAC;GACD,WAAW,WAAW,IAAI;EAC5B;EACA,OAAO;GACL,uBAAuB,WAAoB;IACzC,IAAI,MAAM,mBAAmB,WAC3B;IAEF,MAAM,OAAO;KAAE,GAAG;KAAO,gBAAgB;IAAU;IAGnD,QAAQ,IAAI;IACZ,QAAQ;GACV;GACA,eAAe,YAAY,IAAI;EACjC;CACF,SAAS,OAAO;EACd,MAAM,YAAY,IAAI;EACtB,MAAM;CACR;AACF;AAEA,SAAS,UAAU,MAAc;CAC/B,IAAI;CACJ,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,OAAO;EAET,MAAM;CACR;CACA,MAAM,SAAS,gCAAgC,UAAU,KAAK,MAAM,GAAG,CAAC;CACxE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,mBACR,sBACA,8GACF;CAEF,OAAO,OAAO;AAChB;;;ACtKA,SAAgB,iBAAiB,gBAAuC;CACtE,MAAM,UAAU,2BAA2B;CAC3C,MAAM,OAAO,QAAQ,cAAoB;CACzC,IAAI,UAEO;CACX,IAAI,YAEO;CACX,IAAI,UAAoC;CACxC,IAAI,mBAAwD;CAC5D,IAAI,eAAqC;CACzC,IAAI,UAAgC;CACpC,IAAI,eAAe;CAEnB,MAAM,cAA6B;EACjC,IAAI,CAAC,SAAS;GACZ,WAAW,YAAY;IACrB,IAAI;KACF,MAAM;KACN,IAAI,WAAW,SAAS;MACtB,MAAM,iBAAiB;MACvB,MAAM,2BAA2B,eAC/B,eAAe,wBAAwB,CACzC;KACF;IACF,UAAU;KACR,MAAM,WAAW,QAAQ;KACzB,OAAO,QAAQ;KACf,IAAI,QAAQ,WACV,QAAQ,WAAW;IAEvB;GACF,EAAA,CAAG;GACH,QAAQ,WACA,KAAK,QAAQ,IAClB,UAAU,KAAK,OAAO,KAAK,CAC9B;EACF;EACA,OAAO;CACT;CAEA,MAAM,WAAW,EACf,YAAY,OAAO,aAA2C;EAC5D,IACE,oBACA,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,QAAQ,GAE5D,MAAM,IAAI,mBACR,0BACA,mEACF;EAEF,IAAI,CAAC,cAAc;GACjB,mBAAmB;GACnB,gBAAgB,YAAY;IAC1B,MAAM,WAAW,MAAM,8BAA8B,QAAQ;IAC7D,IAAI,cACF,MAAM,IAAI,mBACR,qBACA,0DACF;IAEF,MAAM,oBAAoB,MAAM,8BAA8B;KAC5D,GAAG;KACH;KACA,cAAc,MAAM,8BAA8B;IACpD,CAAC;IACD,YAAY;IACZ,UAAU,SAAS;IACnB,MAAM,2BAA2B,SAAS,YAAY;KACpD,MAAM,EAAE,4BAA4B,iCAClC,MAAM,OAAO;KACf,MAAM,eAAe,MAAM,yBAAyB;KACpD,MAAM,YAAY,gBAChB,MAAM,sBAAsB,EAAE,MAAM,QAAQ,CAAC,CAC/C;KACA,UAAU,MAAM,2BAA2B;MACzC,WAAW,MAAM,6BAA6B;OAC5C;OACA;MACF,CAAC;MACD;MACA;MACA;MACA,iBAAiB,SAAS,SAAS;MACnC,kBAAkB,SAAS,QAAQ,MAAM,QAAQ;MACjD;MACA,OAAO,UAAU;OACf,IAAI,CAAC,cACH,OAAO,KAAK,KAAK;MAErB;MACA,oBAAoB,cAClB,kBAAkB,uBAAuB,SAAS;KACtD,CAAC;IACH,CAAC;GACH,EAAA,CAAG;EACL;EACA,MAAM;EACN,IAAI,CAAC,WAAW,cACd,MAAM,IAAI,mBACR,qBACA,sCACF;EAEF,OAAO,QAAQ,SAAS;CAC1B,EACF;CAIA,KAAK,MAAM,UAAU,OAAO,KAAK,2BAA2B,GAEzD;EACD,IAAI,WAAW,cACb;EAEF,MAAM,SAAS;EAIf,OAAO,UAAU,OAAO,YAAY;GAClC,IAAI,EAAE,WAAW,YAAY,cAC3B,MAAM,IAAI,mBACR,wBACA,6DACF;GAEF,MAAM,SAAS,QAAQ,SAAS;GAChC,OAAO,MAAM,2BACX,SACA,YAAY,MAAM,OAAO,OAAO,CAClC;EACF;CACF;CAEA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA;EACA,YAAY,UAAU;GACpB,QAAQ,MAAM,4CAA4C,KAAK;GAC/D,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;EACA,oBAAoB;GAClB,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;CACF,CAAC;CACD,OAAO,KAAK;AACd"}

package/dist/{installation-inventory-vyAkTNzT.js → installation-inventory-Dwn8FoKT.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { mt as skillsDir } from "./lock-Bsl_ElWy.js";
-import { $ as canManageRegistryAgentSkillTargets, et as detectInstalledSkillsAgents, tt as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-niE5QEAv.js";
-import { n as resolveSkillsInstallStates, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-Cwf0cTLu.js";
+import { $ as canManageRegistryAgentSkillTargets, et as detectInstalledSkillsAgents, tt as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-CD5ZI-ct.js";
+import { n as resolveSkillsInstallStates, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-CK1WXIsI.js";
 import { T as updateConfiguredSkillsConfig, g as getConfiguredSkillsConfig, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-D7uE_xTo.js";
 import { stat } from "node:fs/promises";
 //#region src/skills/installation-inventory.ts
@@ -240,4 +240,4 @@ function normalizeInstallRecordForCompare(input) {
 //#endregion
 export { mergeTargetsByDir as a, summarizeSkillState as c, filterTargetsWithInstalledOpenMeldSkills as i, collectSkillsReadinessSnapshot as n, persistDetectedInstallStateFromCheck as o, compareInstallRecords as r, resolveTrackedInstallTargets as s, buildAgentTargets as t };
 
-//# sourceMappingURL=installation-inventory-vyAkTNzT.js.map
+//# sourceMappingURL=installation-inventory-Dwn8FoKT.js.map

package/dist/{installation-inventory-vyAkTNzT.js.map → installation-inventory-Dwn8FoKT.js.map}

@@ -1 +1 @@
-{"version":3,"file":"installation-inventory-vyAkTNzT.js","names":[],"sources":["../src/skills/installation-inventory.ts"],"sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { skillsDir } from \"../config/paths\";\nimport {\n  getConfiguredSkillsConfig,\n  type RuntimeSkillsConfig,\n  type RuntimeSkillsCustomTarget,\n  type RuntimeSkillsInstallRecord,\n  resolveRuntimeSkillsCustomTargetId,\n  updateConfiguredSkillsConfig,\n} from \"../config/runtime-config\";\nimport {\n  canManageRegistryAgentSkillTargets,\n  detectInstalledSkillsAgents,\n  resolveSkillsAgentRegistry,\n} from \"./agents\";\nimport type { SkillsInstallTarget } from \"./installer\";\nimport {\n  resolveSkillInstallStateForTarget,\n  resolveSkillsInstallStates,\n  type SkillInstallStateResult,\n} from \"./state\";\nimport { ensureLocalSkills, type LocalSkill } from \"./store\";\n\nexport type SkillsReadinessSnapshot = {\n  status: \"up_to_date\" | \"action_required\" | \"no_targets\";\n  targetCount: number;\n  summary: {\n    upToDate: number;\n    outdated: number;\n    missing: number;\n    externalConflict: number;\n  };\n};\n\nexport async function collectSkillsReadinessSnapshot(): Promise<SkillsReadinessSnapshot> {\n  const skillsConfig = await getConfiguredSkillsConfig();\n  const registry = resolveSkillsAgentRegistry(skillsConfig);\n  const installedAgents = await detectInstalledSkillsAgents(registry);\n  const localSkills = await ensureLocalSkills();\n  const detectedAgentTargets = buildAgentTargets(installedAgents, registry);\n  const trackedTargets = await resolveTrackedInstallTargets({\n    skillsConfig,\n    registry,\n    localSkills,\n    onlyOpenMeldInstalledTargets: false,\n  });\n  const checkTargets = mergeTargetsByDir({\n    primary: detectedAgentTargets,\n    secondary: trackedTargets,\n  });\n  const states = await resolveSkillsInstallStates({\n    skills: localSkills,\n    targets: checkTargets,\n  });\n  await persistDetectedInstallStateFromCheck({ states });\n  const summary = summarizeSkillState(states);\n  const hasIssues =\n    summary.outdated > 0 || summary.missing > 0 || summary.externalConflict > 0;\n  let status: SkillsReadinessSnapshot[\"status\"] = \"up_to_date\";\n  if (checkTargets.length === 0) {\n    status = \"no_targets\";\n  } else if (hasIssues) {\n    status = \"action_required\";\n  }\n  return {\n    status,\n    targetCount: checkTargets.length,\n    summary,\n  };\n}\n\nexport function buildAgentTargets(\n  agents: string[],\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>\n): SkillsInstallTarget[] {\n  return agents.flatMap((agentName) => {\n    const config = registry[agentName];\n    if (!config?.globalSkillsDir || config.skillsInstallable !== true) {\n      return [];\n    }\n    return [\n      {\n        id: agentName,\n        dir: config.globalSkillsDir,\n        type: \"agent\" as const,\n      },\n    ];\n  });\n}\n\nfunction isLikelyCustomTargetId(value: string): boolean {\n  return value.startsWith(\"custom-\");\n}\n\nexport function resolveTrackedInstallTargets(input: {\n  skillsConfig: RuntimeSkillsConfig | null;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const installs = input.skillsConfig?.installs ?? [];\n  const customTargets = input.skillsConfig?.customTargets ?? [];\n  const customTargetByDir = buildCustomTargetByDir(customTargets);\n  const byTargetDir = new Map<string, SkillsInstallTarget>();\n  seedTrackedTargetsFromCustomTargets({\n    byTargetDir,\n    customTargetByDir,\n  });\n  seedTrackedTargetsFromInstallRecords({\n    byTargetDir,\n    installs,\n    registry: input.registry,\n    customTargetByDir,\n  });\n\n  const candidates = sortTrackedTargets([...byTargetDir.values()]);\n  const allowRegistryDefaults = canManageRegistryAgentSkillTargets();\n  const laneSafeCandidates = allowRegistryDefaults\n    ? candidates\n    : candidates.filter(\n        (target) =>\n          target.type === \"custom\" ||\n          input.registry[target.id]?.globalSkillsDirSource === \"config-override\"\n      );\n  return filterTrackedTargetsByState({\n    candidates: laneSafeCandidates,\n    localSkills: input.localSkills,\n    onlyOpenMeldInstalledTargets: input.onlyOpenMeldInstalledTargets,\n  });\n}\n\nfunction buildCustomTargetByDir(\n  customTargets: RuntimeSkillsCustomTarget[]\n): Map<string, RuntimeSkillsCustomTarget> {\n  const customTargetByDir = new Map<string, RuntimeSkillsCustomTarget>();\n  for (const customTarget of customTargets) {\n    const id = resolveRuntimeSkillsCustomTargetId({\n      dir: customTarget.dir,\n      ...(customTarget.id ? { id: customTarget.id } : {}),\n    });\n    customTargetByDir.set(customTarget.dir, {\n      id,\n      name: customTarget.name,\n      dir: customTarget.dir,\n    });\n  }\n  return customTargetByDir;\n}\n\nfunction seedTrackedTargetsFromCustomTargets(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const customTarget of input.customTargetByDir.values()) {\n    input.byTargetDir.set(customTarget.dir, {\n      id:\n        customTarget.id ??\n        resolveRuntimeSkillsCustomTargetId({ dir: customTarget.dir }),\n      dir: customTarget.dir,\n      type: \"custom\",\n    });\n  }\n}\n\nfunction seedTrackedTargetsFromInstallRecords(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  installs: RuntimeSkillsInstallRecord[];\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const install of input.installs) {\n    const trackedTarget = buildTrackedTargetFromInstallRecord({\n      install,\n      registry: input.registry,\n      customTargetByDir: input.customTargetByDir,\n    });\n    input.byTargetDir.set(install.targetDir, trackedTarget);\n  }\n}\n\nfunction buildTrackedTargetFromInstallRecord(input: {\n  install: RuntimeSkillsInstallRecord;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): SkillsInstallTarget {\n  const knownAgentDir = input.registry[input.install.targetId]?.globalSkillsDir;\n  const targetType: SkillsInstallTarget[\"type\"] =\n    knownAgentDir && knownAgentDir === input.install.targetDir\n      ? \"agent\"\n      : \"custom\";\n  if (targetType === \"agent\") {\n    return {\n      id: input.install.targetId,\n      dir: input.install.targetDir,\n      type: \"agent\",\n    };\n  }\n\n  const customTarget = input.customTargetByDir.get(input.install.targetDir);\n  const fallbackCustomId = isLikelyCustomTargetId(input.install.targetId)\n    ? input.install.targetId\n    : undefined;\n  const resolvedCustomId = customTarget?.id ?? fallbackCustomId;\n  return {\n    id: resolveRuntimeSkillsCustomTargetId({\n      dir: input.install.targetDir,\n      ...(resolvedCustomId ? { id: resolvedCustomId } : {}),\n    }),\n    dir: input.install.targetDir,\n    type: \"custom\",\n  };\n}\n\nfunction sortTrackedTargets(\n  targets: SkillsInstallTarget[]\n): SkillsInstallTarget[] {\n  return [...targets].sort((a, b) =>\n    `${a.id}:${a.dir}`.localeCompare(`${b.id}:${b.dir}`)\n  );\n}\n\nexport function mergeTargetsByDir(input: {\n  primary: SkillsInstallTarget[];\n  secondary: SkillsInstallTarget[];\n}): SkillsInstallTarget[] {\n  const byDir = new Map<string, SkillsInstallTarget>();\n  for (const target of input.secondary) {\n    byDir.set(target.dir, target);\n  }\n  for (const target of input.primary) {\n    byDir.set(target.dir, target);\n  }\n  return sortTrackedTargets([...byDir.values()]);\n}\n\nasync function filterInstalledTrackedTargets(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const installedOnly: SkillsInstallTarget[] = [];\n  for (const candidate of input.candidates) {\n    const hasInstalledOpenMeldSkill = await targetHasInstalledOpenMeldSkill({\n      target: candidate,\n      localSkills: input.localSkills,\n    });\n    if (!hasInstalledOpenMeldSkill) {\n      continue;\n    }\n    installedOnly.push(candidate);\n  }\n  return installedOnly;\n}\n\nexport async function filterTargetsWithInstalledOpenMeldSkills(input: {\n  targets: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.targets);\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterTrackedTargetsByState(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.candidates);\n  if (!input.onlyOpenMeldInstalledTargets) {\n    return existingTargets;\n  }\n\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterExistingTargetDirs(\n  candidates: SkillsInstallTarget[]\n): Promise<SkillsInstallTarget[]> {\n  const existing: SkillsInstallTarget[] = [];\n  for (const candidate of candidates) {\n    const targetDirStats = await stat(candidate.dir).catch(() => null);\n    if (!targetDirStats?.isDirectory()) {\n      continue;\n    }\n    existing.push(candidate);\n  }\n  return existing;\n}\n\nexport function summarizeSkillState(states: SkillInstallStateResult[]): {\n  upToDate: number;\n  outdated: number;\n  missing: number;\n  externalConflict: number;\n} {\n  return {\n    upToDate: states.filter((state) => state.state === \"up_to_date\").length,\n    outdated: states.filter((state) => state.state === \"outdated\").length,\n    missing: states.filter((state) => state.state === \"missing\").length,\n    externalConflict: states.filter(\n      (state) => state.state === \"external_conflict\"\n    ).length,\n  };\n}\n\nasync function targetHasInstalledOpenMeldSkill(input: {\n  target: SkillsInstallTarget;\n  localSkills: LocalSkill[];\n}): Promise<boolean> {\n  const targetDirStats = await stat(input.target.dir).catch(() => null);\n  if (!targetDirStats?.isDirectory()) {\n    return false;\n  }\n\n  for (const skill of input.localSkills) {\n    const state = await resolveSkillInstallStateForTarget({\n      skill,\n      target: input.target,\n    });\n    if (state.state === \"up_to_date\" || state.state === \"outdated\") {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport async function persistDetectedInstallStateFromCheck(input: {\n  states: SkillInstallStateResult[];\n}): Promise<void> {\n  const discoveredByTargetDir = new Map<string, SkillInstallStateResult[]>();\n  for (const state of input.states) {\n    if (!(state.state === \"up_to_date\" || state.state === \"outdated\")) {\n      continue;\n    }\n    const list = discoveredByTargetDir.get(state.targetDir) ?? [];\n    list.push(state);\n    discoveredByTargetDir.set(state.targetDir, list);\n  }\n\n  if (discoveredByTargetDir.size === 0) {\n    return;\n  }\n\n  await updateConfiguredSkillsConfig((currentSkillsConfig) => {\n    const byTargetDir = new Map<string, RuntimeSkillsInstallRecord>();\n    for (const record of currentSkillsConfig?.installs ?? []) {\n      byTargetDir.set(record.targetDir, record);\n    }\n\n    const now = new Date().toISOString();\n    for (const [targetDir, group] of discoveredByTargetDir) {\n      const first = group[0];\n      if (!first) {\n        continue;\n      }\n      const mode: RuntimeSkillsInstallRecord[\"mode\"] = group.some(\n        (state) => state.targetMode === \"copy\"\n      )\n        ? \"copy\"\n        : \"symlink\";\n      const skillIds = Array.from(\n        new Set(group.map((state) => state.skillId))\n      ).sort((a, b) => a.localeCompare(b));\n\n      byTargetDir.set(targetDir, {\n        targetId: first.targetId,\n        targetDir,\n        mode,\n        status: \"installed\",\n        skillIds,\n        updatedAt: now,\n      });\n    }\n\n    const nextInstalls = [...byTargetDir.values()].sort(compareInstallRecords);\n    const previousInstalls = [...(currentSkillsConfig?.installs ?? [])]\n      .sort(compareInstallRecords)\n      .map(normalizeInstallRecordForCompare);\n    const nextComparable = nextInstalls.map(normalizeInstallRecordForCompare);\n    if (JSON.stringify(previousInstalls) === JSON.stringify(nextComparable)) {\n      return currentSkillsConfig;\n    }\n\n    return {\n      storeDir: currentSkillsConfig?.storeDir ?? skillsDir(),\n      ...(currentSkillsConfig?.agents\n        ? { agents: currentSkillsConfig.agents }\n        : {}),\n      ...(currentSkillsConfig?.customTargets\n        ? { customTargets: currentSkillsConfig.customTargets }\n        : {}),\n      installs: nextInstalls,\n    };\n  });\n}\n\nexport function compareInstallRecords(\n  left: RuntimeSkillsInstallRecord,\n  right: RuntimeSkillsInstallRecord\n): number {\n  const byTargetId = left.targetId.localeCompare(right.targetId);\n  if (byTargetId !== 0) {\n    return byTargetId;\n  }\n  return left.targetDir.localeCompare(right.targetDir);\n}\n\nfunction normalizeInstallRecordForCompare(\n  input: RuntimeSkillsInstallRecord\n): Omit<RuntimeSkillsInstallRecord, \"updatedAt\"> {\n  return {\n    targetId: input.targetId,\n    targetDir: input.targetDir,\n    mode: input.mode,\n    status: input.status,\n    skillIds: [...input.skillIds].sort((a, b) => a.localeCompare(b)),\n    ...(input.reason ? { reason: input.reason } : {}),\n  };\n}\n"],"mappings":";;;;;;;;AAkCA,eAAsB,iCAAmE;CACvF,MAAM,eAAe,MAAM,0BAA0B;CACrD,MAAM,WAAW,2BAA2B,YAAY;CACxD,MAAM,kBAAkB,MAAM,4BAA4B,QAAQ;CAClE,MAAM,cAAc,MAAM,kBAAkB;CAQ5C,MAAM,eAAe,kBAAkB;EACrC,SAR2B,kBAAkB,iBAAiB,QAQlC;EAC5B,WAAW,MARgB,6BAA6B;GACxD;GACA;GACA;GACA,8BAA8B;EAChC,CAAC;CAID,CAAC;CACD,MAAM,SAAS,MAAM,2BAA2B;EAC9C,QAAQ;EACR,SAAS;CACX,CAAC;CACD,MAAM,qCAAqC,EAAE,OAAO,CAAC;CACrD,MAAM,UAAU,oBAAoB,MAAM;CAC1C,MAAM,YACJ,QAAQ,WAAW,KAAK,QAAQ,UAAU,KAAK,QAAQ,mBAAmB;CAC5E,IAAI,SAA4C;CAChD,IAAI,aAAa,WAAW,GAC1B,SAAS;MACJ,IAAI,WACT,SAAS;CAEX,OAAO;EACL;EACA,aAAa,aAAa;EAC1B;CACF;AACF;AAEA,SAAgB,kBACd,QACA,UACuB;CACvB,OAAO,OAAO,SAAS,cAAc;EACnC,MAAM,SAAS,SAAS;EACxB,IAAI,CAAC,QAAQ,mBAAmB,OAAO,sBAAsB,MAC3D,OAAO,CAAC;EAEV,OAAO,CACL;GACE,IAAI;GACJ,KAAK,OAAO;GACZ,MAAM;EACR,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBAAuB,OAAwB;CACtD,OAAO,MAAM,WAAW,SAAS;AACnC;AAEA,SAAgB,6BAA6B,OAKV;CACjC,MAAM,WAAW,MAAM,cAAc,YAAY,CAAC;CAElD,MAAM,oBAAoB,uBADJ,MAAM,cAAc,iBAAiB,CAAC,CACE;CAC9D,MAAM,8BAAc,IAAI,IAAiC;CACzD,oCAAoC;EAClC;EACA;CACF,CAAC;CACD,qCAAqC;EACnC;EACA;EACA,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,aAAa,mBAAmB,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC;CAS/D,OAAO,4BAA4B;EACjC,YAT4B,mCACiB,IAC3C,aACA,WAAW,QACR,WACC,OAAO,SAAS,YAChB,MAAM,SAAS,OAAO,GAAG,EAAE,0BAA0B,iBACzD;EAGF,aAAa,MAAM;EACnB,8BAA8B,MAAM;CACtC,CAAC;AACH;AAEA,SAAS,uBACP,eACwC;CACxC,MAAM,oCAAoB,IAAI,IAAuC;CACrE,KAAK,MAAM,gBAAgB,eAAe;EACxC,MAAM,KAAK,mCAAmC;GAC5C,KAAK,aAAa;GAClB,GAAI,aAAa,KAAK,EAAE,IAAI,aAAa,GAAG,IAAI,CAAC;EACnD,CAAC;EACD,kBAAkB,IAAI,aAAa,KAAK;GACtC;GACA,MAAM,aAAa;GACnB,KAAK,aAAa;EACpB,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,oCAAoC,OAGpC;CACP,KAAK,MAAM,gBAAgB,MAAM,kBAAkB,OAAO,GACxD,MAAM,YAAY,IAAI,aAAa,KAAK;EACtC,IACE,aAAa,MACb,mCAAmC,EAAE,KAAK,aAAa,IAAI,CAAC;EAC9D,KAAK,aAAa;EAClB,MAAM;CACR,CAAC;AAEL;AAEA,SAAS,qCAAqC,OAKrC;CACP,KAAK,MAAM,WAAW,MAAM,UAAU;EACpC,MAAM,gBAAgB,oCAAoC;GACxD;GACA,UAAU,MAAM;GAChB,mBAAmB,MAAM;EAC3B,CAAC;EACD,MAAM,YAAY,IAAI,QAAQ,WAAW,aAAa;CACxD;AACF;AAEA,SAAS,oCAAoC,OAIrB;CACtB,MAAM,gBAAgB,MAAM,SAAS,MAAM,QAAQ,SAAS,EAAE;CAK9D,KAHE,iBAAiB,kBAAkB,MAAM,QAAQ,YAC7C,UACA,cACa,SACjB,OAAO;EACL,IAAI,MAAM,QAAQ;EAClB,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;CAGF,MAAM,eAAe,MAAM,kBAAkB,IAAI,MAAM,QAAQ,SAAS;CACxE,MAAM,mBAAmB,uBAAuB,MAAM,QAAQ,QAAQ,IAClE,MAAM,QAAQ,WACd,KAAA;CACJ,MAAM,mBAAmB,cAAc,MAAM;CAC7C,OAAO;EACL,IAAI,mCAAmC;GACrC,KAAK,MAAM,QAAQ;GACnB,GAAI,mBAAmB,EAAE,IAAI,iBAAiB,IAAI,CAAC;EACrD,CAAC;EACD,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;AACF;AAEA,SAAS,mBACP,SACuB;CACvB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,MAC3B,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,cAAc,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,CACrD;AACF;AAEA,SAAgB,kBAAkB,OAGR;CACxB,MAAM,wBAAQ,IAAI,IAAiC;CACnD,KAAK,MAAM,UAAU,MAAM,WACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,OAAO,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC;AAC/C;AAEA,eAAe,8BAA8B,OAGV;CACjC,MAAM,gBAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,MAAM,YAAY;EAKxC,IAAI,CAAC,MAJmC,gCAAgC;GACtE,QAAQ;GACR,aAAa,MAAM;EACrB,CAAC,GAEC;EAEF,cAAc,KAAK,SAAS;CAC9B;CACA,OAAO;AACT;AAEA,eAAsB,yCAAyC,OAG5B;CAEjC,OAAO,8BAA8B;EACnC,YAAY,MAFgB,yBAAyB,MAAM,OAAO;EAGlE,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,4BAA4B,OAIR;CACjC,MAAM,kBAAkB,MAAM,yBAAyB,MAAM,UAAU;CACvE,IAAI,CAAC,MAAM,8BACT,OAAO;CAGT,OAAO,8BAA8B;EACnC,YAAY;EACZ,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,yBACb,YACgC;CAChC,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAElC,IAAI,EAAC,MADwB,KAAK,UAAU,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC5C,YAAY,GAC/B;EAEF,SAAS,KAAK,SAAS;CACzB;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB,QAKlC;CACA,OAAO;EACL,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,YAAY,CAAC,CAAC;EACjE,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,UAAU,CAAC,CAAC;EAC/D,SAAS,OAAO,QAAQ,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC;EAC7D,kBAAkB,OAAO,QACtB,UAAU,MAAM,UAAU,mBAC7B,CAAC,CAAC;CACJ;AACF;AAEA,eAAe,gCAAgC,OAG1B;CAEnB,IAAI,EAAC,MADwB,KAAK,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC/C,YAAY,GAC/B,OAAO;CAGT,KAAK,MAAM,SAAS,MAAM,aAAa;EACrC,MAAM,QAAQ,MAAM,kCAAkC;GACpD;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,IAAI,MAAM,UAAU,gBAAgB,MAAM,UAAU,YAClD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,eAAsB,qCAAqC,OAEzC;CAChB,MAAM,wCAAwB,IAAI,IAAuC;CACzE,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,IAAI,EAAE,MAAM,UAAU,gBAAgB,MAAM,UAAU,aACpD;EAEF,MAAM,OAAO,sBAAsB,IAAI,MAAM,SAAS,KAAK,CAAC;EAC5D,KAAK,KAAK,KAAK;EACf,sBAAsB,IAAI,MAAM,WAAW,IAAI;CACjD;CAEA,IAAI,sBAAsB,SAAS,GACjC;CAGF,MAAM,8BAA8B,wBAAwB;EAC1D,MAAM,8BAAc,IAAI,IAAwC;EAChE,KAAK,MAAM,UAAU,qBAAqB,YAAY,CAAC,GACrD,YAAY,IAAI,OAAO,WAAW,MAAM;EAG1C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,MAAM,CAAC,WAAW,UAAU,uBAAuB;GACtD,MAAM,QAAQ,MAAM;GACpB,IAAI,CAAC,OACH;GAEF,MAAM,OAA2C,MAAM,MACpD,UAAU,MAAM,eAAe,MAClC,IACI,SACA;GACJ,MAAM,WAAW,MAAM,KACrB,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7C,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;GAEnC,YAAY,IAAI,WAAW;IACzB,UAAU,MAAM;IAChB;IACA;IACA,QAAQ;IACR;IACA,WAAW;GACb,CAAC;EACH;EAEA,MAAM,eAAe,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB;EACzE,MAAM,mBAAmB,CAAC,GAAI,qBAAqB,YAAY,CAAC,CAAE,CAAC,CAChE,KAAK,qBAAqB,CAAC,CAC3B,IAAI,gCAAgC;EACvC,MAAM,iBAAiB,aAAa,IAAI,gCAAgC;EACxE,IAAI,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,cAAc,GACpE,OAAO;EAGT,OAAO;GACL,UAAU,qBAAqB,YAAY,UAAU;GACrD,GAAI,qBAAqB,SACrB,EAAE,QAAQ,oBAAoB,OAAO,IACrC,CAAC;GACL,GAAI,qBAAqB,gBACrB,EAAE,eAAe,oBAAoB,cAAc,IACnD,CAAC;GACL,UAAU;EACZ;CACF,CAAC;AACH;AAEA,SAAgB,sBACd,MACA,OACQ;CACR,MAAM,aAAa,KAAK,SAAS,cAAc,MAAM,QAAQ;CAC7D,IAAI,eAAe,GACjB,OAAO;CAET,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS;AACrD;AAEA,SAAS,iCACP,OAC+C;CAC/C,OAAO;EACL,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC/D,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD;AACF"}
+{"version":3,"file":"installation-inventory-Dwn8FoKT.js","names":[],"sources":["../src/skills/installation-inventory.ts"],"sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { skillsDir } from \"../config/paths\";\nimport {\n  getConfiguredSkillsConfig,\n  type RuntimeSkillsConfig,\n  type RuntimeSkillsCustomTarget,\n  type RuntimeSkillsInstallRecord,\n  resolveRuntimeSkillsCustomTargetId,\n  updateConfiguredSkillsConfig,\n} from \"../config/runtime-config\";\nimport {\n  canManageRegistryAgentSkillTargets,\n  detectInstalledSkillsAgents,\n  resolveSkillsAgentRegistry,\n} from \"./agents\";\nimport type { SkillsInstallTarget } from \"./installer\";\nimport {\n  resolveSkillInstallStateForTarget,\n  resolveSkillsInstallStates,\n  type SkillInstallStateResult,\n} from \"./state\";\nimport { ensureLocalSkills, type LocalSkill } from \"./store\";\n\nexport type SkillsReadinessSnapshot = {\n  status: \"up_to_date\" | \"action_required\" | \"no_targets\";\n  targetCount: number;\n  summary: {\n    upToDate: number;\n    outdated: number;\n    missing: number;\n    externalConflict: number;\n  };\n};\n\nexport async function collectSkillsReadinessSnapshot(): Promise<SkillsReadinessSnapshot> {\n  const skillsConfig = await getConfiguredSkillsConfig();\n  const registry = resolveSkillsAgentRegistry(skillsConfig);\n  const installedAgents = await detectInstalledSkillsAgents(registry);\n  const localSkills = await ensureLocalSkills();\n  const detectedAgentTargets = buildAgentTargets(installedAgents, registry);\n  const trackedTargets = await resolveTrackedInstallTargets({\n    skillsConfig,\n    registry,\n    localSkills,\n    onlyOpenMeldInstalledTargets: false,\n  });\n  const checkTargets = mergeTargetsByDir({\n    primary: detectedAgentTargets,\n    secondary: trackedTargets,\n  });\n  const states = await resolveSkillsInstallStates({\n    skills: localSkills,\n    targets: checkTargets,\n  });\n  await persistDetectedInstallStateFromCheck({ states });\n  const summary = summarizeSkillState(states);\n  const hasIssues =\n    summary.outdated > 0 || summary.missing > 0 || summary.externalConflict > 0;\n  let status: SkillsReadinessSnapshot[\"status\"] = \"up_to_date\";\n  if (checkTargets.length === 0) {\n    status = \"no_targets\";\n  } else if (hasIssues) {\n    status = \"action_required\";\n  }\n  return {\n    status,\n    targetCount: checkTargets.length,\n    summary,\n  };\n}\n\nexport function buildAgentTargets(\n  agents: string[],\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>\n): SkillsInstallTarget[] {\n  return agents.flatMap((agentName) => {\n    const config = registry[agentName];\n    if (!config?.globalSkillsDir || config.skillsInstallable !== true) {\n      return [];\n    }\n    return [\n      {\n        id: agentName,\n        dir: config.globalSkillsDir,\n        type: \"agent\" as const,\n      },\n    ];\n  });\n}\n\nfunction isLikelyCustomTargetId(value: string): boolean {\n  return value.startsWith(\"custom-\");\n}\n\nexport function resolveTrackedInstallTargets(input: {\n  skillsConfig: RuntimeSkillsConfig | null;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const installs = input.skillsConfig?.installs ?? [];\n  const customTargets = input.skillsConfig?.customTargets ?? [];\n  const customTargetByDir = buildCustomTargetByDir(customTargets);\n  const byTargetDir = new Map<string, SkillsInstallTarget>();\n  seedTrackedTargetsFromCustomTargets({\n    byTargetDir,\n    customTargetByDir,\n  });\n  seedTrackedTargetsFromInstallRecords({\n    byTargetDir,\n    installs,\n    registry: input.registry,\n    customTargetByDir,\n  });\n\n  const candidates = sortTrackedTargets([...byTargetDir.values()]);\n  const allowRegistryDefaults = canManageRegistryAgentSkillTargets();\n  const laneSafeCandidates = allowRegistryDefaults\n    ? candidates\n    : candidates.filter(\n        (target) =>\n          target.type === \"custom\" ||\n          input.registry[target.id]?.globalSkillsDirSource === \"config-override\"\n      );\n  return filterTrackedTargetsByState({\n    candidates: laneSafeCandidates,\n    localSkills: input.localSkills,\n    onlyOpenMeldInstalledTargets: input.onlyOpenMeldInstalledTargets,\n  });\n}\n\nfunction buildCustomTargetByDir(\n  customTargets: RuntimeSkillsCustomTarget[]\n): Map<string, RuntimeSkillsCustomTarget> {\n  const customTargetByDir = new Map<string, RuntimeSkillsCustomTarget>();\n  for (const customTarget of customTargets) {\n    const id = resolveRuntimeSkillsCustomTargetId({\n      dir: customTarget.dir,\n      ...(customTarget.id ? { id: customTarget.id } : {}),\n    });\n    customTargetByDir.set(customTarget.dir, {\n      id,\n      name: customTarget.name,\n      dir: customTarget.dir,\n    });\n  }\n  return customTargetByDir;\n}\n\nfunction seedTrackedTargetsFromCustomTargets(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const customTarget of input.customTargetByDir.values()) {\n    input.byTargetDir.set(customTarget.dir, {\n      id:\n        customTarget.id ??\n        resolveRuntimeSkillsCustomTargetId({ dir: customTarget.dir }),\n      dir: customTarget.dir,\n      type: \"custom\",\n    });\n  }\n}\n\nfunction seedTrackedTargetsFromInstallRecords(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  installs: RuntimeSkillsInstallRecord[];\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const install of input.installs) {\n    const trackedTarget = buildTrackedTargetFromInstallRecord({\n      install,\n      registry: input.registry,\n      customTargetByDir: input.customTargetByDir,\n    });\n    input.byTargetDir.set(install.targetDir, trackedTarget);\n  }\n}\n\nfunction buildTrackedTargetFromInstallRecord(input: {\n  install: RuntimeSkillsInstallRecord;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): SkillsInstallTarget {\n  const knownAgentDir = input.registry[input.install.targetId]?.globalSkillsDir;\n  const targetType: SkillsInstallTarget[\"type\"] =\n    knownAgentDir && knownAgentDir === input.install.targetDir\n      ? \"agent\"\n      : \"custom\";\n  if (targetType === \"agent\") {\n    return {\n      id: input.install.targetId,\n      dir: input.install.targetDir,\n      type: \"agent\",\n    };\n  }\n\n  const customTarget = input.customTargetByDir.get(input.install.targetDir);\n  const fallbackCustomId = isLikelyCustomTargetId(input.install.targetId)\n    ? input.install.targetId\n    : undefined;\n  const resolvedCustomId = customTarget?.id ?? fallbackCustomId;\n  return {\n    id: resolveRuntimeSkillsCustomTargetId({\n      dir: input.install.targetDir,\n      ...(resolvedCustomId ? { id: resolvedCustomId } : {}),\n    }),\n    dir: input.install.targetDir,\n    type: \"custom\",\n  };\n}\n\nfunction sortTrackedTargets(\n  targets: SkillsInstallTarget[]\n): SkillsInstallTarget[] {\n  return [...targets].sort((a, b) =>\n    `${a.id}:${a.dir}`.localeCompare(`${b.id}:${b.dir}`)\n  );\n}\n\nexport function mergeTargetsByDir(input: {\n  primary: SkillsInstallTarget[];\n  secondary: SkillsInstallTarget[];\n}): SkillsInstallTarget[] {\n  const byDir = new Map<string, SkillsInstallTarget>();\n  for (const target of input.secondary) {\n    byDir.set(target.dir, target);\n  }\n  for (const target of input.primary) {\n    byDir.set(target.dir, target);\n  }\n  return sortTrackedTargets([...byDir.values()]);\n}\n\nasync function filterInstalledTrackedTargets(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const installedOnly: SkillsInstallTarget[] = [];\n  for (const candidate of input.candidates) {\n    const hasInstalledOpenMeldSkill = await targetHasInstalledOpenMeldSkill({\n      target: candidate,\n      localSkills: input.localSkills,\n    });\n    if (!hasInstalledOpenMeldSkill) {\n      continue;\n    }\n    installedOnly.push(candidate);\n  }\n  return installedOnly;\n}\n\nexport async function filterTargetsWithInstalledOpenMeldSkills(input: {\n  targets: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.targets);\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterTrackedTargetsByState(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.candidates);\n  if (!input.onlyOpenMeldInstalledTargets) {\n    return existingTargets;\n  }\n\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterExistingTargetDirs(\n  candidates: SkillsInstallTarget[]\n): Promise<SkillsInstallTarget[]> {\n  const existing: SkillsInstallTarget[] = [];\n  for (const candidate of candidates) {\n    const targetDirStats = await stat(candidate.dir).catch(() => null);\n    if (!targetDirStats?.isDirectory()) {\n      continue;\n    }\n    existing.push(candidate);\n  }\n  return existing;\n}\n\nexport function summarizeSkillState(states: SkillInstallStateResult[]): {\n  upToDate: number;\n  outdated: number;\n  missing: number;\n  externalConflict: number;\n} {\n  return {\n    upToDate: states.filter((state) => state.state === \"up_to_date\").length,\n    outdated: states.filter((state) => state.state === \"outdated\").length,\n    missing: states.filter((state) => state.state === \"missing\").length,\n    externalConflict: states.filter(\n      (state) => state.state === \"external_conflict\"\n    ).length,\n  };\n}\n\nasync function targetHasInstalledOpenMeldSkill(input: {\n  target: SkillsInstallTarget;\n  localSkills: LocalSkill[];\n}): Promise<boolean> {\n  const targetDirStats = await stat(input.target.dir).catch(() => null);\n  if (!targetDirStats?.isDirectory()) {\n    return false;\n  }\n\n  for (const skill of input.localSkills) {\n    const state = await resolveSkillInstallStateForTarget({\n      skill,\n      target: input.target,\n    });\n    if (state.state === \"up_to_date\" || state.state === \"outdated\") {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport async function persistDetectedInstallStateFromCheck(input: {\n  states: SkillInstallStateResult[];\n}): Promise<void> {\n  const discoveredByTargetDir = new Map<string, SkillInstallStateResult[]>();\n  for (const state of input.states) {\n    if (!(state.state === \"up_to_date\" || state.state === \"outdated\")) {\n      continue;\n    }\n    const list = discoveredByTargetDir.get(state.targetDir) ?? [];\n    list.push(state);\n    discoveredByTargetDir.set(state.targetDir, list);\n  }\n\n  if (discoveredByTargetDir.size === 0) {\n    return;\n  }\n\n  await updateConfiguredSkillsConfig((currentSkillsConfig) => {\n    const byTargetDir = new Map<string, RuntimeSkillsInstallRecord>();\n    for (const record of currentSkillsConfig?.installs ?? []) {\n      byTargetDir.set(record.targetDir, record);\n    }\n\n    const now = new Date().toISOString();\n    for (const [targetDir, group] of discoveredByTargetDir) {\n      const first = group[0];\n      if (!first) {\n        continue;\n      }\n      const mode: RuntimeSkillsInstallRecord[\"mode\"] = group.some(\n        (state) => state.targetMode === \"copy\"\n      )\n        ? \"copy\"\n        : \"symlink\";\n      const skillIds = Array.from(\n        new Set(group.map((state) => state.skillId))\n      ).sort((a, b) => a.localeCompare(b));\n\n      byTargetDir.set(targetDir, {\n        targetId: first.targetId,\n        targetDir,\n        mode,\n        status: \"installed\",\n        skillIds,\n        updatedAt: now,\n      });\n    }\n\n    const nextInstalls = [...byTargetDir.values()].sort(compareInstallRecords);\n    const previousInstalls = [...(currentSkillsConfig?.installs ?? [])]\n      .sort(compareInstallRecords)\n      .map(normalizeInstallRecordForCompare);\n    const nextComparable = nextInstalls.map(normalizeInstallRecordForCompare);\n    if (JSON.stringify(previousInstalls) === JSON.stringify(nextComparable)) {\n      return currentSkillsConfig;\n    }\n\n    return {\n      storeDir: currentSkillsConfig?.storeDir ?? skillsDir(),\n      ...(currentSkillsConfig?.agents\n        ? { agents: currentSkillsConfig.agents }\n        : {}),\n      ...(currentSkillsConfig?.customTargets\n        ? { customTargets: currentSkillsConfig.customTargets }\n        : {}),\n      installs: nextInstalls,\n    };\n  });\n}\n\nexport function compareInstallRecords(\n  left: RuntimeSkillsInstallRecord,\n  right: RuntimeSkillsInstallRecord\n): number {\n  const byTargetId = left.targetId.localeCompare(right.targetId);\n  if (byTargetId !== 0) {\n    return byTargetId;\n  }\n  return left.targetDir.localeCompare(right.targetDir);\n}\n\nfunction normalizeInstallRecordForCompare(\n  input: RuntimeSkillsInstallRecord\n): Omit<RuntimeSkillsInstallRecord, \"updatedAt\"> {\n  return {\n    targetId: input.targetId,\n    targetDir: input.targetDir,\n    mode: input.mode,\n    status: input.status,\n    skillIds: [...input.skillIds].sort((a, b) => a.localeCompare(b)),\n    ...(input.reason ? { reason: input.reason } : {}),\n  };\n}\n"],"mappings":";;;;;;;;AAkCA,eAAsB,iCAAmE;CACvF,MAAM,eAAe,MAAM,0BAA0B;CACrD,MAAM,WAAW,2BAA2B,YAAY;CACxD,MAAM,kBAAkB,MAAM,4BAA4B,QAAQ;CAClE,MAAM,cAAc,MAAM,kBAAkB;CAQ5C,MAAM,eAAe,kBAAkB;EACrC,SAR2B,kBAAkB,iBAAiB,QAQlC;EAC5B,WAAW,MARgB,6BAA6B;GACxD;GACA;GACA;GACA,8BAA8B;EAChC,CAAC;CAID,CAAC;CACD,MAAM,SAAS,MAAM,2BAA2B;EAC9C,QAAQ;EACR,SAAS;CACX,CAAC;CACD,MAAM,qCAAqC,EAAE,OAAO,CAAC;CACrD,MAAM,UAAU,oBAAoB,MAAM;CAC1C,MAAM,YACJ,QAAQ,WAAW,KAAK,QAAQ,UAAU,KAAK,QAAQ,mBAAmB;CAC5E,IAAI,SAA4C;CAChD,IAAI,aAAa,WAAW,GAC1B,SAAS;MACJ,IAAI,WACT,SAAS;CAEX,OAAO;EACL;EACA,aAAa,aAAa;EAC1B;CACF;AACF;AAEA,SAAgB,kBACd,QACA,UACuB;CACvB,OAAO,OAAO,SAAS,cAAc;EACnC,MAAM,SAAS,SAAS;EACxB,IAAI,CAAC,QAAQ,mBAAmB,OAAO,sBAAsB,MAC3D,OAAO,CAAC;EAEV,OAAO,CACL;GACE,IAAI;GACJ,KAAK,OAAO;GACZ,MAAM;EACR,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBAAuB,OAAwB;CACtD,OAAO,MAAM,WAAW,SAAS;AACnC;AAEA,SAAgB,6BAA6B,OAKV;CACjC,MAAM,WAAW,MAAM,cAAc,YAAY,CAAC;CAElD,MAAM,oBAAoB,uBADJ,MAAM,cAAc,iBAAiB,CAAC,CACE;CAC9D,MAAM,8BAAc,IAAI,IAAiC;CACzD,oCAAoC;EAClC;EACA;CACF,CAAC;CACD,qCAAqC;EACnC;EACA;EACA,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,aAAa,mBAAmB,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC;CAS/D,OAAO,4BAA4B;EACjC,YAT4B,mCACiB,IAC3C,aACA,WAAW,QACR,WACC,OAAO,SAAS,YAChB,MAAM,SAAS,OAAO,GAAG,EAAE,0BAA0B,iBACzD;EAGF,aAAa,MAAM;EACnB,8BAA8B,MAAM;CACtC,CAAC;AACH;AAEA,SAAS,uBACP,eACwC;CACxC,MAAM,oCAAoB,IAAI,IAAuC;CACrE,KAAK,MAAM,gBAAgB,eAAe;EACxC,MAAM,KAAK,mCAAmC;GAC5C,KAAK,aAAa;GAClB,GAAI,aAAa,KAAK,EAAE,IAAI,aAAa,GAAG,IAAI,CAAC;EACnD,CAAC;EACD,kBAAkB,IAAI,aAAa,KAAK;GACtC;GACA,MAAM,aAAa;GACnB,KAAK,aAAa;EACpB,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,oCAAoC,OAGpC;CACP,KAAK,MAAM,gBAAgB,MAAM,kBAAkB,OAAO,GACxD,MAAM,YAAY,IAAI,aAAa,KAAK;EACtC,IACE,aAAa,MACb,mCAAmC,EAAE,KAAK,aAAa,IAAI,CAAC;EAC9D,KAAK,aAAa;EAClB,MAAM;CACR,CAAC;AAEL;AAEA,SAAS,qCAAqC,OAKrC;CACP,KAAK,MAAM,WAAW,MAAM,UAAU;EACpC,MAAM,gBAAgB,oCAAoC;GACxD;GACA,UAAU,MAAM;GAChB,mBAAmB,MAAM;EAC3B,CAAC;EACD,MAAM,YAAY,IAAI,QAAQ,WAAW,aAAa;CACxD;AACF;AAEA,SAAS,oCAAoC,OAIrB;CACtB,MAAM,gBAAgB,MAAM,SAAS,MAAM,QAAQ,SAAS,EAAE;CAK9D,KAHE,iBAAiB,kBAAkB,MAAM,QAAQ,YAC7C,UACA,cACa,SACjB,OAAO;EACL,IAAI,MAAM,QAAQ;EAClB,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;CAGF,MAAM,eAAe,MAAM,kBAAkB,IAAI,MAAM,QAAQ,SAAS;CACxE,MAAM,mBAAmB,uBAAuB,MAAM,QAAQ,QAAQ,IAClE,MAAM,QAAQ,WACd,KAAA;CACJ,MAAM,mBAAmB,cAAc,MAAM;CAC7C,OAAO;EACL,IAAI,mCAAmC;GACrC,KAAK,MAAM,QAAQ;GACnB,GAAI,mBAAmB,EAAE,IAAI,iBAAiB,IAAI,CAAC;EACrD,CAAC;EACD,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;AACF;AAEA,SAAS,mBACP,SACuB;CACvB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,MAC3B,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,cAAc,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,CACrD;AACF;AAEA,SAAgB,kBAAkB,OAGR;CACxB,MAAM,wBAAQ,IAAI,IAAiC;CACnD,KAAK,MAAM,UAAU,MAAM,WACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,OAAO,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC;AAC/C;AAEA,eAAe,8BAA8B,OAGV;CACjC,MAAM,gBAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,MAAM,YAAY;EAKxC,IAAI,CAAC,MAJmC,gCAAgC;GACtE,QAAQ;GACR,aAAa,MAAM;EACrB,CAAC,GAEC;EAEF,cAAc,KAAK,SAAS;CAC9B;CACA,OAAO;AACT;AAEA,eAAsB,yCAAyC,OAG5B;CAEjC,OAAO,8BAA8B;EACnC,YAAY,MAFgB,yBAAyB,MAAM,OAAO;EAGlE,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,4BAA4B,OAIR;CACjC,MAAM,kBAAkB,MAAM,yBAAyB,MAAM,UAAU;CACvE,IAAI,CAAC,MAAM,8BACT,OAAO;CAGT,OAAO,8BAA8B;EACnC,YAAY;EACZ,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,yBACb,YACgC;CAChC,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAElC,IAAI,EAAC,MADwB,KAAK,UAAU,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC5C,YAAY,GAC/B;EAEF,SAAS,KAAK,SAAS;CACzB;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB,QAKlC;CACA,OAAO;EACL,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,YAAY,CAAC,CAAC;EACjE,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,UAAU,CAAC,CAAC;EAC/D,SAAS,OAAO,QAAQ,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC;EAC7D,kBAAkB,OAAO,QACtB,UAAU,MAAM,UAAU,mBAC7B,CAAC,CAAC;CACJ;AACF;AAEA,eAAe,gCAAgC,OAG1B;CAEnB,IAAI,EAAC,MADwB,KAAK,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC/C,YAAY,GAC/B,OAAO;CAGT,KAAK,MAAM,SAAS,MAAM,aAAa;EACrC,MAAM,QAAQ,MAAM,kCAAkC;GACpD;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,IAAI,MAAM,UAAU,gBAAgB,MAAM,UAAU,YAClD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,eAAsB,qCAAqC,OAEzC;CAChB,MAAM,wCAAwB,IAAI,IAAuC;CACzE,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,IAAI,EAAE,MAAM,UAAU,gBAAgB,MAAM,UAAU,aACpD;EAEF,MAAM,OAAO,sBAAsB,IAAI,MAAM,SAAS,KAAK,CAAC;EAC5D,KAAK,KAAK,KAAK;EACf,sBAAsB,IAAI,MAAM,WAAW,IAAI;CACjD;CAEA,IAAI,sBAAsB,SAAS,GACjC;CAGF,MAAM,8BAA8B,wBAAwB;EAC1D,MAAM,8BAAc,IAAI,IAAwC;EAChE,KAAK,MAAM,UAAU,qBAAqB,YAAY,CAAC,GACrD,YAAY,IAAI,OAAO,WAAW,MAAM;EAG1C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,MAAM,CAAC,WAAW,UAAU,uBAAuB;GACtD,MAAM,QAAQ,MAAM;GACpB,IAAI,CAAC,OACH;GAEF,MAAM,OAA2C,MAAM,MACpD,UAAU,MAAM,eAAe,MAClC,IACI,SACA;GACJ,MAAM,WAAW,MAAM,KACrB,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7C,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;GAEnC,YAAY,IAAI,WAAW;IACzB,UAAU,MAAM;IAChB;IACA;IACA,QAAQ;IACR;IACA,WAAW;GACb,CAAC;EACH;EAEA,MAAM,eAAe,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB;EACzE,MAAM,mBAAmB,CAAC,GAAI,qBAAqB,YAAY,CAAC,CAAE,CAAC,CAChE,KAAK,qBAAqB,CAAC,CAC3B,IAAI,gCAAgC;EACvC,MAAM,iBAAiB,aAAa,IAAI,gCAAgC;EACxE,IAAI,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,cAAc,GACpE,OAAO;EAGT,OAAO;GACL,UAAU,qBAAqB,YAAY,UAAU;GACrD,GAAI,qBAAqB,SACrB,EAAE,QAAQ,oBAAoB,OAAO,IACrC,CAAC;GACL,GAAI,qBAAqB,gBACrB,EAAE,eAAe,oBAAoB,cAAc,IACnD,CAAC;GACL,UAAU;EACZ;CACF,CAAC;AACH;AAEA,SAAgB,sBACd,MACA,OACQ;CACR,MAAM,aAAa,KAAK,SAAS,cAAc,MAAM,QAAQ;CAC7D,IAAI,eAAe,GACjB,OAAO;CAET,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS;AACrD;AAEA,SAAS,iCACP,OAC+C;CAC/C,OAAO;EACL,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC/D,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD;AACF"}

package/dist/{installer-Cw05xb5l.js → installer-CsQ4vNjT.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { c as replaceSkillDirectory, f as withSkillsInstallLock, o as writeOpenMeldSkillMarker, s as recoverSkillReplacement, t as resolveSkillInstallStateForTarget } from "./state-Cwf0cTLu.js";
+import { c as replaceSkillDirectory, f as withSkillsInstallLock, o as writeOpenMeldSkillMarker, s as recoverSkillReplacement, t as resolveSkillInstallStateForTarget } from "./state-CK1WXIsI.js";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { cp, mkdir, readFile, realpath, symlink } from "node:fs/promises";
 import process from "node:process";
@@ -122,4 +122,4 @@ async function tryCreateSymlink(input) {
 //#endregion
 export { installSkillsToTargets as t };
 
-//# sourceMappingURL=installer-Cw05xb5l.js.map
+//# sourceMappingURL=installer-CsQ4vNjT.js.map

package/dist/{installer-Cw05xb5l.js.map → installer-CsQ4vNjT.js.map}

@@ -1 +1 @@
-{"version":3,"file":"installer-Cw05xb5l.js","names":[],"sources":["../src/skills/installer.ts"],"sourcesContent":["import { cp, mkdir, readFile, realpath, symlink } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport process from \"node:process\";\nimport { withSkillsInstallLock } from \"./install-lock\";\n\n// biome-ignore lint/performance/noBarrelFile: Keep the existing installer lock API while the source store shares its owner.\nexport { withSkillsInstallLock } from \"./install-lock\";\n\nimport {\n  recoverSkillReplacement,\n  replaceSkillDirectory,\n} from \"./replace-directory\";\nimport type { SkillInstallStateResult } from \"./state\";\nimport { resolveSkillInstallStateForTarget } from \"./state\";\nimport type { LocalSkill } from \"./store\";\nimport { writeOpenMeldSkillMarker } from \"./store\";\n\nexport type SkillsInstallMode = \"symlink\" | \"copy\" | \"unknown\";\nexport type SkillsInstallStatus = \"installed\" | \"skipped\" | \"failed\";\n\nexport type SkillsInstallTarget = {\n  id: string;\n  dir: string;\n  type: \"agent\" | \"custom\";\n};\n\nexport type SkillsInstallResult = {\n  targetId: string;\n  targetDir: string;\n  targetType: \"agent\" | \"custom\";\n  skillId: string;\n  status: SkillsInstallStatus;\n  mode: SkillsInstallMode;\n  degraded: boolean;\n  reason?: string;\n};\n\nexport function installSkillsToTargets(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));\n}\n\nasync function installSkillsToTargetsLocked(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  const results: SkillsInstallResult[] = [];\n\n  for (const target of input.targets) {\n    for (const skill of input.skills) {\n      const result = await installOneSkillToTarget({\n        skill,\n        target,\n      });\n      results.push(result);\n    }\n  }\n\n  return results;\n}\n\nasync function installOneSkillToTarget(input: {\n  skill: LocalSkill;\n  target: SkillsInstallTarget;\n}): Promise<SkillsInstallResult> {\n  const targetDir = input.target.dir;\n  const failInstall = (reason: string): SkillsInstallResult => ({\n    targetId: input.target.id,\n    targetDir,\n    targetType: input.target.type,\n    skillId: input.skill.id,\n    status: \"failed\",\n    mode: \"unknown\",\n    degraded: false,\n    reason,\n  });\n\n  if (!isAbsolute(targetDir)) {\n    return failInstall(\"target dir must be an absolute path\");\n  }\n\n  const skillId = input.skill.id;\n  if (\n    skillId.trim().length === 0 ||\n    isAbsolute(skillId) ||\n    skillId === \".\" ||\n    skillId === \"..\" ||\n    skillId.includes(\"/\") ||\n    skillId.includes(\"\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const resolvedTargetDir = resolve(targetDir);\n  const resolvedSkillDir = resolve(resolvedTargetDir, skillId);\n  const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);\n  if (\n    skillRelativePath === \"..\" ||\n    skillRelativePath.startsWith(\"../\") ||\n    skillRelativePath.startsWith(\"..\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const skillTargetDir = resolvedSkillDir;\n\n  await mkdir(targetDir, { recursive: true });\n  await recoverSkillReplacement(skillTargetDir);\n  const state = await resolveSkillInstallStateForTarget({\n    skill: input.skill,\n    target: input.target,\n  });\n  if (state.state === \"external_conflict\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  if (state.state === \"up_to_date\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  const installation: { mode: SkillsInstallMode } = { mode: \"symlink\" };\n  try {\n    await readFile(join(input.skill.absolutePath, \"SKILL.md\"), \"utf8\");\n    await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {\n      const symlinked = await tryCreateSymlink({\n        sourceDir: input.skill.absolutePath,\n        targetDir: stagedDir,\n      });\n      if (symlinked) {\n        return;\n      }\n      installation.mode = \"copy\";\n      await cp(input.skill.absolutePath, stagedDir, {\n        recursive: true,\n        errorOnExist: true,\n        force: false,\n      });\n      await writeOpenMeldSkillMarker({\n        skillDir: stagedDir,\n        skillId: input.skill.id,\n        mode: \"copy\",\n        ...(input.skill.contentHash\n          ? { contentHash: input.skill.contentHash }\n          : {}),\n        ...(input.skill.version ? { version: input.skill.version } : {}),\n      });\n    });\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"installed\",\n      mode: installation.mode,\n      degraded: installation.mode === \"copy\",\n      ...(installation.mode === \"copy\"\n        ? { reason: \"symlink failed; fell back to copy\" }\n        : {}),\n    };\n  } catch (error) {\n    return failInstall(\n      error instanceof Error\n        ? error.message\n        : \"failed to install skill to target\"\n    );\n  }\n}\n\nfunction resolveSkippedInstallMode(\n  state: SkillInstallStateResult\n): SkillsInstallMode {\n  if (state.targetMode === \"copy\") {\n    return \"copy\";\n  }\n  if (state.targetMode === \"symlink\") {\n    return \"symlink\";\n  }\n  return \"unknown\";\n}\n\nasync function tryCreateSymlink(input: {\n  sourceDir: string;\n  targetDir: string;\n}): Promise<boolean> {\n  try {\n    await mkdir(dirname(input.targetDir), { recursive: true });\n\n    const targetParentDir = dirname(input.targetDir);\n    const resolvedTargetParentDir = await realpath(targetParentDir).catch(\n      () => targetParentDir\n    );\n    const resolvedSourceDir = await realpath(input.sourceDir).catch(\n      () => input.sourceDir\n    );\n    const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);\n    await symlink(\n      process.platform === \"win32\" ? resolvedSourceDir : relativeTarget,\n      input.targetDir,\n      process.platform === \"win32\" ? \"junction\" : undefined\n    );\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAqCA,SAAgB,uBAAuB,OAGJ;CACjC,OAAO,4BAA4B,6BAA6B,KAAK,CAAC;AACxE;AAEA,eAAe,6BAA6B,OAGT;CACjC,MAAM,UAAiC,CAAC;CAExC,KAAK,MAAM,UAAU,MAAM,SACzB,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,MAAM,SAAS,MAAM,wBAAwB;GAC3C;GACA;EACF,CAAC;EACD,QAAQ,KAAK,MAAM;CACrB;CAGF,OAAO;AACT;AAEA,eAAe,wBAAwB,OAGN;CAC/B,MAAM,YAAY,MAAM,OAAO;CAC/B,MAAM,eAAe,YAAyC;EAC5D,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM;EACN,UAAU;EACV;CACF;CAEA,IAAI,CAAC,WAAW,SAAS,GACvB,OAAO,YAAY,qCAAqC;CAG1D,MAAM,UAAU,MAAM,MAAM;CAC5B,IACE,QAAQ,KAAK,CAAC,CAAC,WAAW,KAC1B,WAAW,OAAO,KAClB,YAAY,OACZ,YAAY,QACZ,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,GAErB,OAAO,YAAY,kCAAkC;CAGvD,MAAM,oBAAoB,QAAQ,SAAS;CAC3C,MAAM,mBAAmB,QAAQ,mBAAmB,OAAO;CAC3D,MAAM,oBAAoB,SAAS,mBAAmB,gBAAgB;CACtE,IACE,sBAAsB,QACtB,kBAAkB,WAAW,KAAK,KAClC,kBAAkB,WAAW,MAAM,GAEnC,OAAO,YAAY,kCAAkC;CAGvD,MAAM,iBAAiB;CAEvB,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,MAAM,wBAAwB,cAAc;CAC5C,MAAM,QAAQ,MAAM,kCAAkC;EACpD,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,MAAM,UAAU,qBAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,IAAI,MAAM,UAAU,cAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,MAAM,eAA4C,EAAE,MAAM,UAAU;CACpE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,MAAM,cAAc,UAAU,GAAG,MAAM;EACjE,MAAM,sBAAsB,gBAAgB,OAAO,cAAc;GAK/D,IAAI,MAJoB,iBAAiB;IACvC,WAAW,MAAM,MAAM;IACvB,WAAW;GACb,CAAC,GAEC;GAEF,aAAa,OAAO;GACpB,MAAM,GAAG,MAAM,MAAM,cAAc,WAAW;IAC5C,WAAW;IACX,cAAc;IACd,OAAO;GACT,CAAC;GACD,MAAM,yBAAyB;IAC7B,UAAU;IACV,SAAS,MAAM,MAAM;IACrB,MAAM;IACN,GAAI,MAAM,MAAM,cACZ,EAAE,aAAa,MAAM,MAAM,YAAY,IACvC,CAAC;IACL,GAAI,MAAM,MAAM,UAAU,EAAE,SAAS,MAAM,MAAM,QAAQ,IAAI,CAAC;GAChE,CAAC;EACH,CAAC;EACD,OAAO;GACL,UAAU,MAAM,OAAO;GACvB;GACA,YAAY,MAAM,OAAO;GACzB,SAAS,MAAM,MAAM;GACrB,QAAQ;GACR,MAAM,aAAa;GACnB,UAAU,aAAa,SAAS;GAChC,GAAI,aAAa,SAAS,SACtB,EAAE,QAAQ,oCAAoC,IAC9C,CAAC;EACP;CACF,SAAS,OAAO;EACd,OAAO,YACL,iBAAiB,QACb,MAAM,UACN,mCACN;CACF;AACF;AAEA,SAAS,0BACP,OACmB;CACnB,IAAI,MAAM,eAAe,QACvB,OAAO;CAET,IAAI,MAAM,eAAe,WACvB,OAAO;CAET,OAAO;AACT;AAEA,eAAe,iBAAiB,OAGX;CACnB,IAAI;EACF,MAAM,MAAM,QAAQ,MAAM,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;EAEzD,MAAM,kBAAkB,QAAQ,MAAM,SAAS;EAC/C,MAAM,0BAA0B,MAAM,SAAS,eAAe,CAAC,CAAC,YACxD,eACR;EACA,MAAM,oBAAoB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,YAClD,MAAM,SACd;EACA,MAAM,iBAAiB,SAAS,yBAAyB,iBAAiB;EAC1E,MAAM,QACJ,QAAQ,aAAa,UAAU,oBAAoB,gBACnD,MAAM,WACN,QAAQ,aAAa,UAAU,aAAa,KAAA,CAC9C;EACA,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF"}
+{"version":3,"file":"installer-CsQ4vNjT.js","names":[],"sources":["../src/skills/installer.ts"],"sourcesContent":["import { cp, mkdir, readFile, realpath, symlink } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport process from \"node:process\";\nimport { withSkillsInstallLock } from \"./install-lock\";\n\n// biome-ignore lint/performance/noBarrelFile: Keep the existing installer lock API while the source store shares its owner.\nexport { withSkillsInstallLock } from \"./install-lock\";\n\nimport {\n  recoverSkillReplacement,\n  replaceSkillDirectory,\n} from \"./replace-directory\";\nimport type { SkillInstallStateResult } from \"./state\";\nimport { resolveSkillInstallStateForTarget } from \"./state\";\nimport type { LocalSkill } from \"./store\";\nimport { writeOpenMeldSkillMarker } from \"./store\";\n\nexport type SkillsInstallMode = \"symlink\" | \"copy\" | \"unknown\";\nexport type SkillsInstallStatus = \"installed\" | \"skipped\" | \"failed\";\n\nexport type SkillsInstallTarget = {\n  id: string;\n  dir: string;\n  type: \"agent\" | \"custom\";\n};\n\nexport type SkillsInstallResult = {\n  targetId: string;\n  targetDir: string;\n  targetType: \"agent\" | \"custom\";\n  skillId: string;\n  status: SkillsInstallStatus;\n  mode: SkillsInstallMode;\n  degraded: boolean;\n  reason?: string;\n};\n\nexport function installSkillsToTargets(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));\n}\n\nasync function installSkillsToTargetsLocked(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  const results: SkillsInstallResult[] = [];\n\n  for (const target of input.targets) {\n    for (const skill of input.skills) {\n      const result = await installOneSkillToTarget({\n        skill,\n        target,\n      });\n      results.push(result);\n    }\n  }\n\n  return results;\n}\n\nasync function installOneSkillToTarget(input: {\n  skill: LocalSkill;\n  target: SkillsInstallTarget;\n}): Promise<SkillsInstallResult> {\n  const targetDir = input.target.dir;\n  const failInstall = (reason: string): SkillsInstallResult => ({\n    targetId: input.target.id,\n    targetDir,\n    targetType: input.target.type,\n    skillId: input.skill.id,\n    status: \"failed\",\n    mode: \"unknown\",\n    degraded: false,\n    reason,\n  });\n\n  if (!isAbsolute(targetDir)) {\n    return failInstall(\"target dir must be an absolute path\");\n  }\n\n  const skillId = input.skill.id;\n  if (\n    skillId.trim().length === 0 ||\n    isAbsolute(skillId) ||\n    skillId === \".\" ||\n    skillId === \"..\" ||\n    skillId.includes(\"/\") ||\n    skillId.includes(\"\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const resolvedTargetDir = resolve(targetDir);\n  const resolvedSkillDir = resolve(resolvedTargetDir, skillId);\n  const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);\n  if (\n    skillRelativePath === \"..\" ||\n    skillRelativePath.startsWith(\"../\") ||\n    skillRelativePath.startsWith(\"..\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const skillTargetDir = resolvedSkillDir;\n\n  await mkdir(targetDir, { recursive: true });\n  await recoverSkillReplacement(skillTargetDir);\n  const state = await resolveSkillInstallStateForTarget({\n    skill: input.skill,\n    target: input.target,\n  });\n  if (state.state === \"external_conflict\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  if (state.state === \"up_to_date\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  const installation: { mode: SkillsInstallMode } = { mode: \"symlink\" };\n  try {\n    await readFile(join(input.skill.absolutePath, \"SKILL.md\"), \"utf8\");\n    await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {\n      const symlinked = await tryCreateSymlink({\n        sourceDir: input.skill.absolutePath,\n        targetDir: stagedDir,\n      });\n      if (symlinked) {\n        return;\n      }\n      installation.mode = \"copy\";\n      await cp(input.skill.absolutePath, stagedDir, {\n        recursive: true,\n        errorOnExist: true,\n        force: false,\n      });\n      await writeOpenMeldSkillMarker({\n        skillDir: stagedDir,\n        skillId: input.skill.id,\n        mode: \"copy\",\n        ...(input.skill.contentHash\n          ? { contentHash: input.skill.contentHash }\n          : {}),\n        ...(input.skill.version ? { version: input.skill.version } : {}),\n      });\n    });\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"installed\",\n      mode: installation.mode,\n      degraded: installation.mode === \"copy\",\n      ...(installation.mode === \"copy\"\n        ? { reason: \"symlink failed; fell back to copy\" }\n        : {}),\n    };\n  } catch (error) {\n    return failInstall(\n      error instanceof Error\n        ? error.message\n        : \"failed to install skill to target\"\n    );\n  }\n}\n\nfunction resolveSkippedInstallMode(\n  state: SkillInstallStateResult\n): SkillsInstallMode {\n  if (state.targetMode === \"copy\") {\n    return \"copy\";\n  }\n  if (state.targetMode === \"symlink\") {\n    return \"symlink\";\n  }\n  return \"unknown\";\n}\n\nasync function tryCreateSymlink(input: {\n  sourceDir: string;\n  targetDir: string;\n}): Promise<boolean> {\n  try {\n    await mkdir(dirname(input.targetDir), { recursive: true });\n\n    const targetParentDir = dirname(input.targetDir);\n    const resolvedTargetParentDir = await realpath(targetParentDir).catch(\n      () => targetParentDir\n    );\n    const resolvedSourceDir = await realpath(input.sourceDir).catch(\n      () => input.sourceDir\n    );\n    const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);\n    await symlink(\n      process.platform === \"win32\" ? resolvedSourceDir : relativeTarget,\n      input.targetDir,\n      process.platform === \"win32\" ? \"junction\" : undefined\n    );\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAqCA,SAAgB,uBAAuB,OAGJ;CACjC,OAAO,4BAA4B,6BAA6B,KAAK,CAAC;AACxE;AAEA,eAAe,6BAA6B,OAGT;CACjC,MAAM,UAAiC,CAAC;CAExC,KAAK,MAAM,UAAU,MAAM,SACzB,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,MAAM,SAAS,MAAM,wBAAwB;GAC3C;GACA;EACF,CAAC;EACD,QAAQ,KAAK,MAAM;CACrB;CAGF,OAAO;AACT;AAEA,eAAe,wBAAwB,OAGN;CAC/B,MAAM,YAAY,MAAM,OAAO;CAC/B,MAAM,eAAe,YAAyC;EAC5D,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM;EACN,UAAU;EACV;CACF;CAEA,IAAI,CAAC,WAAW,SAAS,GACvB,OAAO,YAAY,qCAAqC;CAG1D,MAAM,UAAU,MAAM,MAAM;CAC5B,IACE,QAAQ,KAAK,CAAC,CAAC,WAAW,KAC1B,WAAW,OAAO,KAClB,YAAY,OACZ,YAAY,QACZ,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,GAErB,OAAO,YAAY,kCAAkC;CAGvD,MAAM,oBAAoB,QAAQ,SAAS;CAC3C,MAAM,mBAAmB,QAAQ,mBAAmB,OAAO;CAC3D,MAAM,oBAAoB,SAAS,mBAAmB,gBAAgB;CACtE,IACE,sBAAsB,QACtB,kBAAkB,WAAW,KAAK,KAClC,kBAAkB,WAAW,MAAM,GAEnC,OAAO,YAAY,kCAAkC;CAGvD,MAAM,iBAAiB;CAEvB,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,MAAM,wBAAwB,cAAc;CAC5C,MAAM,QAAQ,MAAM,kCAAkC;EACpD,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,MAAM,UAAU,qBAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,IAAI,MAAM,UAAU,cAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,MAAM,eAA4C,EAAE,MAAM,UAAU;CACpE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,MAAM,cAAc,UAAU,GAAG,MAAM;EACjE,MAAM,sBAAsB,gBAAgB,OAAO,cAAc;GAK/D,IAAI,MAJoB,iBAAiB;IACvC,WAAW,MAAM,MAAM;IACvB,WAAW;GACb,CAAC,GAEC;GAEF,aAAa,OAAO;GACpB,MAAM,GAAG,MAAM,MAAM,cAAc,WAAW;IAC5C,WAAW;IACX,cAAc;IACd,OAAO;GACT,CAAC;GACD,MAAM,yBAAyB;IAC7B,UAAU;IACV,SAAS,MAAM,MAAM;IACrB,MAAM;IACN,GAAI,MAAM,MAAM,cACZ,EAAE,aAAa,MAAM,MAAM,YAAY,IACvC,CAAC;IACL,GAAI,MAAM,MAAM,UAAU,EAAE,SAAS,MAAM,MAAM,QAAQ,IAAI,CAAC;GAChE,CAAC;EACH,CAAC;EACD,OAAO;GACL,UAAU,MAAM,OAAO;GACvB;GACA,YAAY,MAAM,OAAO;GACzB,SAAS,MAAM,MAAM;GACrB,QAAQ;GACR,MAAM,aAAa;GACnB,UAAU,aAAa,SAAS;GAChC,GAAI,aAAa,SAAS,SACtB,EAAE,QAAQ,oCAAoC,IAC9C,CAAC;EACP;CACF,SAAS,OAAO;EACd,OAAO,YACL,iBAAiB,QACb,MAAM,UACN,mCACN;CACF;AACF;AAEA,SAAS,0BACP,OACmB;CACnB,IAAI,MAAM,eAAe,QACvB,OAAO;CAET,IAAI,MAAM,eAAe,WACvB,OAAO;CAET,OAAO;AACT;AAEA,eAAe,iBAAiB,OAGX;CACnB,IAAI;EACF,MAAM,MAAM,QAAQ,MAAM,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;EAEzD,MAAM,kBAAkB,QAAQ,MAAM,SAAS;EAC/C,MAAM,0BAA0B,MAAM,SAAS,eAAe,CAAC,CAAC,YACxD,eACR;EACA,MAAM,oBAAoB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,YAClD,MAAM,SACd;EACA,MAAM,iBAAiB,SAAS,yBAAyB,iBAAiB;EAC1E,MAAM,QACJ,QAAQ,aAAa,UAAU,oBAAoB,gBACnD,MAAM,WACN,QAAQ,aAAa,UAAU,aAAa,KAAA,CAC9C;EACA,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/{openmeld-CheYNGUc.js → openmeld-Tkp17vPg.js}

@@ -2,22 +2,22 @@
 
 import { c as toSpaceDispatchLookupUrl, h as toSpaceResultUrl, i as toSpaceContractUrl, l as toSpaceDispatchTraceUrl, r as toSpaceBoardUrl, t as normalizeBaseUrl } from "./urls-CY2uzH2-.js";
 import { D as isLocalMachineFailureError, F as accountsDir, M as accountProfileSpaceCacheDir, N as accountProfileViewPath, O as toRecognizedLocalMachineFailureError, Q as openMeldManagedVersionBinaryPath, S as LocalMachineFailureError, T as createOrphanedSetupConcurrencyIssue, Y as openMeldBackupsDir, Z as openMeldManagedBinaryPath, _ as resolveCliContext, a as isOpenMeldOrphanedLockError, b as formatLaneScopeSentence, c as releaseLockSync, ct as resolveOpenMeldEnvPreset, d as runWithHeldLock, et as openMeldRootDir, gt as systemDir, ht as spacesDir, i as isOpenMeldLockError, it as profileViewPath, k as formatLocalMachineIssueMessage, l as repairOrphanedLegacyLocks, lt as resolveOpenMeldRootDir, m as OPENMELD_CLI_CONTEXT_ENV_KEY, mt as skillsDir, p as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, q as normalizeAccountKey, r as buildOpenMeldOrphanedLockAction, rt as profileDir, st as resolveOpenMeldCliEntryNameFromArgv, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue, w as createActiveSetupConcurrencyIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-Bsl_ElWy.js";
-import { $r as agentActivityInventorySessionStatusSchema, $t as createPrepareReadinessApi, Ar as observabilityWakeTraceSelectorSchema, Cn as postSpaceWorkHandoff, Cr as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Dr as spaceDispatchTraceAttemptStatusSchema, Er as resolveSpaceDispatchTraceRootCause, Ft as createCenterAgentApi, Jr as ownerComputerDiagnosticsSchema, Jt as createOrganizationApi, Lt as createComputerFileAccessApi, Mt as createAgentProfileBindingApi, Nn as toStructuredApiClientFailure, Nt as createAgentProfileExecutionModeApi, Or as spaceDispatchTraceDispatchStatusSchema, Qr as agentActivityInventorySessionOriginSchema, Qt as createPluginsApi, Ti as signalTextEnvelopeSchema, Tr as resolveRuntimeCoordinatorHeadStatusRootCause, Vr as resolvedSpaceMemberProfileSchema, Vt as createFeedbackApi, Xn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Xr as summarizeComputerFileAccessPolicy, Xt as createOrganizationSkillsApi, Yr as projectOwnerComputerLocalRuntimes, _r as spaceTaskMutationReceiptSchema, bi as agentActivitySnapshotQuerySchema, br as submitFeedbackIssueRequestSchema, dr as createAgentProfileCreationRequestBodySchema, ei as agentActivitySessionInventoryQuerySchema, er as spaceEntryTargetSchema, gr as spaceTaskIdSchema, hr as mutateSpaceTaskBodySchema, in as createRoutinesApi, jr as projectObservabilityWakeCorrelation, jt as createAgentActivityApi, kr as spaceDispatchTraceResponseSchema, lr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, mr as listSpaceTasksResponseSchema, ni as localAgentSessionProviderSchema, nn as createProjectsApi, pr as createSpaceTaskBodySchema, qn as OPENMELD_HEADER_PROFILE_ID, tr as pluginActionRequestSchema, ur as agentProfileCreationConfigurationSchema, vi as agentActivityProviderSchema, wr as projectSpaceDispatchTraceFinalVisibleOutcome, yi as agentActivitySessionStatusSchema, zt as createCurrentDeviceApi } from "./dist-B6Z-8B4v.js";
+import { $r as agentActivityInventorySessionStatusSchema, $t as createPrepareReadinessApi, Ar as observabilityWakeTraceSelectorSchema, Cn as postSpaceWorkHandoff, Cr as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Dr as spaceDispatchTraceAttemptStatusSchema, Er as resolveSpaceDispatchTraceRootCause, Ft as createCenterAgentApi, Jr as ownerComputerDiagnosticsSchema, Jt as createOrganizationApi, Lt as createComputerFileAccessApi, Mt as createAgentProfileBindingApi, Nn as toStructuredApiClientFailure, Nt as createAgentProfileExecutionModeApi, Or as spaceDispatchTraceDispatchStatusSchema, Qr as agentActivityInventorySessionOriginSchema, Qt as createPluginsApi, Ti as signalTextEnvelopeSchema, Tr as resolveRuntimeCoordinatorHeadStatusRootCause, Vr as resolvedSpaceMemberProfileSchema, Vt as createFeedbackApi, Xn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Xr as summarizeComputerFileAccessPolicy, Xt as createOrganizationSkillsApi, Yr as projectOwnerComputerLocalRuntimes, _r as spaceTaskMutationReceiptSchema, bi as agentActivitySnapshotQuerySchema, br as submitFeedbackIssueRequestSchema, dr as createAgentProfileCreationRequestBodySchema, ei as agentActivitySessionInventoryQuerySchema, er as spaceEntryTargetSchema, gr as spaceTaskIdSchema, hr as mutateSpaceTaskBodySchema, in as createRoutinesApi, jr as projectObservabilityWakeCorrelation, jt as createAgentActivityApi, kr as spaceDispatchTraceResponseSchema, lr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, mr as listSpaceTasksResponseSchema, ni as localAgentSessionProviderSchema, nn as createProjectsApi, pr as createSpaceTaskBodySchema, qn as OPENMELD_HEADER_PROFILE_ID, tr as pluginActionRequestSchema, ur as agentProfileCreationConfigurationSchema, vi as agentActivityProviderSchema, wr as projectSpaceDispatchTraceFinalVisibleOutcome, yi as agentActivitySessionStatusSchema, zt as createCurrentDeviceApi } from "./dist-BewA9srP.js";
 import { c as agentControllerConversationRefSchema } from "./controller-contract-DAOCaefz.js";
-import { Ar as compareAgentControllerRefsForDisplay, At as ensureOpenMeldManagedProfileWorkspace, C as createModelCatalogReadSession, E as resolveProfileWorkspaceRuntime, Et as listBuiltinAgentsRegistryEntries, I as listAgentTargetStates, It as setCustomProfileWorkspace, K as notifyDaemonRouteCatalogChanged, Lt as setOpenMeldManagedProfileWorkspace, Mt as readProfileWorkspaceConfig, O as syncDeviceRuntimeStateProjection, Pt as resolveConfiguredProfileWorkspacePath, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, Rt as validateCustomProfileWorkspacePath, S as syncProfileWorkspaceState, St as canonicalizeLocalProjectPath, _r as resolveAgentProfileEditCapabilities, _t as removeProjectConnection, bt as setDefaultProjectConnection, dr as peopleComputerContainsDevice, fr as projectPeopleComputersToLegacyLocalRuntimes, ft as listProjectBindings, gr as resolveAgentExecutionStatus, hr as resolveAgentControllerPermissionModeForController, ir as createAgentExecutionStatusDisplayRows, j as resolveAgentProfilePrimaryAgentControllerReport, jt as normalizeCustomProfileWorkspacePath, k as createPrimaryBindingReadSession, lr as listAgentControllerPermissionModeOptions, mt as migrateProjectBindingStore, or as getAgentControllerPermissionModeDisplayMetadata, pt as listProjectConnectionsWithStatus, qn as resolveDispatchSpaceActionMcpServer, sr as getAgentControllerPermissionModeFieldLabel, ur as parseAgentControllerRef, ut as bindProject, vr as resolveEvidenceSyncHealth, xt as unbindProject, yr as resolveNativeAgentControllerPermissionModeForController, yt as runIfAgentActivityBindingGenerationIsCurrent, zt as describeProfileWorkspacePathValidationFailure } from "./prepare-provider-runtime-niE5QEAv.js";
+import { Ar as compareAgentControllerRefsForDisplay, At as ensureOpenMeldManagedProfileWorkspace, C as createModelCatalogReadSession, E as resolveProfileWorkspaceRuntime, Et as listBuiltinAgentsRegistryEntries, I as listAgentTargetStates, It as setCustomProfileWorkspace, K as notifyDaemonRouteCatalogChanged, Lt as setOpenMeldManagedProfileWorkspace, Mt as readProfileWorkspaceConfig, O as syncDeviceRuntimeStateProjection, Pt as resolveConfiguredProfileWorkspacePath, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, Rt as validateCustomProfileWorkspacePath, S as syncProfileWorkspaceState, St as canonicalizeLocalProjectPath, _r as resolveAgentProfileEditCapabilities, _t as removeProjectConnection, bt as setDefaultProjectConnection, dr as peopleComputerContainsDevice, fr as projectPeopleComputersToLegacyLocalRuntimes, ft as listProjectBindings, gr as resolveAgentExecutionStatus, hr as resolveAgentControllerPermissionModeForController, ir as createAgentExecutionStatusDisplayRows, j as resolveAgentProfilePrimaryAgentControllerReport, jt as normalizeCustomProfileWorkspacePath, k as createPrimaryBindingReadSession, lr as listAgentControllerPermissionModeOptions, mt as migrateProjectBindingStore, or as getAgentControllerPermissionModeDisplayMetadata, pt as listProjectConnectionsWithStatus, qn as resolveDispatchSpaceActionMcpServer, sr as getAgentControllerPermissionModeFieldLabel, ur as parseAgentControllerRef, ut as bindProject, vr as resolveEvidenceSyncHealth, xt as unbindProject, yr as resolveNativeAgentControllerPermissionModeForController, yt as runIfAgentActivityBindingGenerationIsCurrent, zt as describeProfileWorkspacePathValidationFailure } from "./prepare-provider-runtime-CD5ZI-ct.js";
 import { Gt as spaceWorkingCopyResultSchema, Hn as messageEnvelopeSchema, Ht as spaceWorkHandoffSchema, On as spaceContractFieldsSchema, Qt as isSpaceFileTextEditable, Rt as spaceStatusSchema, Wr as START_BOUNDED_ID_SCHEMA, Wt as spaceWorkSelectionSchema, ci as openMeldProfileIdSchema, cr as agentInteractionResponseSchema, dn as spaceFileEntryIdSchema, dr as clientMessageIdSchema, gn as spaceMessageFileReferenceSchema, hn as spaceFileRevisionNumberSchema, kn as spaceContractSchema, li as openMeldRequestContextSchema, nn as readSpaceFileTextResponseSchema, qr as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, rn as resolveSpaceFileMimeType, wn as spaceThreadContextSchema, zt as centerAgentInteractionSourceSchema } from "./runtime-transport-0F5E6So6.js";
 import { C as updateAuthSessionActiveOrganization, T as runMacOsNativeKeychainHelperIfRequested, a as beginAuthSessionTransition, d as getAuthSessionState, f as getCurrentAuthOwnerUserId, g as normalizeStoredActiveOrganization, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, s as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getAuthSessionMetadata } from "./auth-session-CDhQANWx.js";
 import { L as nonEmptyTrimmedStringFromUnknown, O as openMeldRuntimeProfileIdSchema, w as dispatchExecutionSchema, z as trimmedStringFromUnknown } from "./control-plane-BDS63N7Y.js";
 import { t as computerConnectionIntentSchema } from "./computer-connection-DYnof5Xw.js";
-import { d as readSelectedSkillDocument, r as ensureLocalSkills } from "./state-Cwf0cTLu.js";
-import { $ as buildAuthStatusSnapshot, B as resolveDaemonServiceParticipationStatus, C as buildProfileWorkspaceRows, Ct as cliJsonSkillsShowEnvelopeSchema, Dt as organizationJoinLinkManagementQuerySchema, E as emitDaemonAgentOverview, Et as organizationJoinLinkErrorResponseSchema, F as emitCliJsonEnvelope, G as ensureCommandAuthenticationOrCancel, H as validateLocalProjectConnectionPath, I as runDaemonStartupPreflight, J as runAuthLogout, K as evaluateCommandAuthentication, M as buildHumanErrorCopy, N as renderHumanErrorCard, O as shouldEmitAgentOverview, Ot as revokeOrganizationJoinLinkResponseSchema, P as renderHumanTextErrorCard, Q as buildAuthStatusRows, R as resolveLocalComponentsStatus, S as buildProfileWorkspacePresentation, St as cliJsonSkillsLoadEnvelopeSchema, Tt as getOrganizationJoinLinkResponseSchema, V as LocalProjectConnectionError, W as buildCommandAuthenticationPromptMessage, X as runAuthStatus, Y as runAuthMenu, Z as exchangeOneTimeTokenAuthSession, a as runDaemonBackgroundStartForDecision, at as promptTextEntry, bt as cliJsonOutputEnvelopeSchema, c as runDaemonInterrupt, ct as finishCurrentCommandCheckScope, dt as resetCurrentCommandCheckState, et as formatActiveOrganizationLabel, f as runDaemonSnapshot, ft as startCurrentCommandCheckScope, g as runDaemonUninstall, h as runDaemonTeardownStrict, i as runDaemonAutostart, j as runDaemonStartDecisionPrompt, l as runDaemonReinstall, lt as getCurrentCommandCheckState, m as runDaemonStop, n as isManagedSystemServiceBootstrapRun, nt as renderInfoCard, o as runDaemonCancel, ot as isReturnKeypress, p as runDaemonStatusFlow, q as runAuthLogin, r as runDaemon, rt as renderTextInfoCard, s as runDaemonInstall, st as runInteractivePrompt, t as bestEffortStopCurrentLaneDaemonService, u as runDaemonRunAfterEntryChecks, ut as isCurrentCommandCheckScopeActive, w as reconcileCliVersionView, wt as acceptOrganizationJoinLinkBodySchema, x as resolveServiceParticipationReadiness, xt as cliJsonSkillsListEnvelopeSchema, y as formatServiceParticipationReadinessLabel, yt as cliJsonErrorEnvelopeSchema, z as writeInstalledLocalComponentsSnapshot } from "./service-CgAFfq0Y.js";
-import { C as defaultManagedIntegrationPaths, D as uninstallAgentActivityIntegrations, E as resolveAgentActivityDispatcherCommand, T as readAgentActivityIntegrationStatus, _ as readControllerTaskLifecycleOutboxHealth, a as fetchSpaceUpdates, b as resolveAgentActivityRouteForPath, c as downloadWorkingCopyFile, d as syncLocalAgentActivity, g as enqueueControllerTaskLifecycleEventWhileLocked, h as removeAgentActivityContextCache, l as materializeOrganizationSkillRelease, m as readAgentActivityContextForPath, o as createSpaceWorkingCopies, t as readRuntimeReportingHealthState, v as isAgentActivityRouteRegistered, w as installAgentActivityIntegrations, x as unregisterAgentActivityRoute, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-HhsHeySN.js";
+import { d as readSelectedSkillDocument, r as ensureLocalSkills } from "./state-CK1WXIsI.js";
+import { $ as buildAuthStatusSnapshot, B as resolveDaemonServiceParticipationStatus, C as buildProfileWorkspaceRows, Ct as cliJsonSkillsShowEnvelopeSchema, Dt as organizationJoinLinkManagementQuerySchema, E as emitDaemonAgentOverview, Et as organizationJoinLinkErrorResponseSchema, F as emitCliJsonEnvelope, G as ensureCommandAuthenticationOrCancel, H as validateLocalProjectConnectionPath, I as runDaemonStartupPreflight, J as runAuthLogout, K as evaluateCommandAuthentication, M as buildHumanErrorCopy, N as renderHumanErrorCard, O as shouldEmitAgentOverview, Ot as revokeOrganizationJoinLinkResponseSchema, P as renderHumanTextErrorCard, Q as buildAuthStatusRows, R as resolveLocalComponentsStatus, S as buildProfileWorkspacePresentation, St as cliJsonSkillsLoadEnvelopeSchema, Tt as getOrganizationJoinLinkResponseSchema, V as LocalProjectConnectionError, W as buildCommandAuthenticationPromptMessage, X as runAuthStatus, Y as runAuthMenu, Z as exchangeOneTimeTokenAuthSession, a as runDaemonBackgroundStartForDecision, at as promptTextEntry, bt as cliJsonOutputEnvelopeSchema, c as runDaemonInterrupt, ct as finishCurrentCommandCheckScope, dt as resetCurrentCommandCheckState, et as formatActiveOrganizationLabel, f as runDaemonSnapshot, ft as startCurrentCommandCheckScope, g as runDaemonUninstall, h as runDaemonTeardownStrict, i as runDaemonAutostart, j as runDaemonStartDecisionPrompt, l as runDaemonReinstall, lt as getCurrentCommandCheckState, m as runDaemonStop, n as isManagedSystemServiceBootstrapRun, nt as renderInfoCard, o as runDaemonCancel, ot as isReturnKeypress, p as runDaemonStatusFlow, q as runAuthLogin, r as runDaemon, rt as renderTextInfoCard, s as runDaemonInstall, st as runInteractivePrompt, t as bestEffortStopCurrentLaneDaemonService, u as runDaemonRunAfterEntryChecks, ut as isCurrentCommandCheckScopeActive, w as reconcileCliVersionView, wt as acceptOrganizationJoinLinkBodySchema, x as resolveServiceParticipationReadiness, xt as cliJsonSkillsListEnvelopeSchema, y as formatServiceParticipationReadinessLabel, yt as cliJsonErrorEnvelopeSchema, z as writeInstalledLocalComponentsSnapshot } from "./service-C72KhNft.js";
+import { C as defaultManagedIntegrationPaths, D as uninstallAgentActivityIntegrations, E as resolveAgentActivityDispatcherCommand, T as readAgentActivityIntegrationStatus, _ as readControllerTaskLifecycleOutboxHealth, a as fetchSpaceUpdates, b as resolveAgentActivityRouteForPath, c as downloadWorkingCopyFile, d as syncLocalAgentActivity, g as enqueueControllerTaskLifecycleEventWhileLocked, h as removeAgentActivityContextCache, l as materializeOrganizationSkillRelease, m as readAgentActivityContextForPath, o as createSpaceWorkingCopies, t as readRuntimeReportingHealthState, v as isAgentActivityRouteRegistered, w as installAgentActivityIntegrations, x as unregisterAgentActivityRoute, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-BWZgy4pF.js";
 import { B as createOpenMeldHumanProfile, G as resolveOpenMeldProfile, U as listOpenMeldProfiles, V as deleteOpenMeldProfile, W as primeOpenMeldProfilesSessionCache, Z as buildAgentAuthenticationGuide, at as resolveAuthenticationGuidanceFromMessage, et as buildHumanAuthenticationCard, it as resolveAuthenticationGuidanceFromError, q as updateOpenMeldProfile, rt as resolveAuthenticationGuidance, tt as createAuthenticationError, z as createOpenMeldAgentProfile } from "./daemon-device-id-YnLMx1kN.js";
-import { H as buildInstallSelfJsonPayload, U as performManagedInstall, r as readCurrentDaemonRuntimeContext } from "./daemon-service-runtime-BYWOcDb7.js";
-import { A as formatDeviceReplyReadinessLabel, B as resolveGatewayChainReadiness, Bt as assessCliUpdate, It as assessServerRequiredVersion, J as getSetupFlowCopy, K as buildDaemonRouteObservationPresentation$1, Mt as classifyDaemonServiceRunStartability, N as mapAgentReplyReadinessToLegacyAutoReply, Nt as classifyDaemonServiceWakeability, O as resolveCurrentReplyReadinessSnapshot, Pt as resolveCurrentDaemonExpectedVersion, T as resolveDaemonServiceFreshnessWarning, U as resolveOpenClawLocalDiagnosticsValue, Vt as isCliUpdateCheckApplicable, _ as resolveServiceReadinessFromServiceStatus, ft as inspectDaemonServiceInventory, j as formatHumanReplyReadinessReason$1, k as formatAgentReplyReadinessLabel, q as buildOnboardingPlan, t as runPendingDaemonServiceUpdate, zt as readCurrentLocalDeviceId } from "./daemon-service-update-coordinator-Cf4NtdK7.js";
-import { $ as resolveCreateProfileKind, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as createProfileByKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as resolveSpaceTaskSelection, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as resolveCreateProfileName, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, nt as assessActionParticipationCandidate, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as ensureAgentProfileRuntimeBinding, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-CFDUoorG.js";
+import { H as buildInstallSelfJsonPayload, U as performManagedInstall, r as readCurrentDaemonRuntimeContext } from "./daemon-service-runtime-Kr6Bs2J2.js";
+import { A as formatDeviceReplyReadinessLabel, B as resolveGatewayChainReadiness, Bt as assessCliUpdate, It as assessServerRequiredVersion, J as getSetupFlowCopy, K as buildDaemonRouteObservationPresentation$1, Mt as classifyDaemonServiceRunStartability, N as mapAgentReplyReadinessToLegacyAutoReply, Nt as classifyDaemonServiceWakeability, O as resolveCurrentReplyReadinessSnapshot, Pt as resolveCurrentDaemonExpectedVersion, T as resolveDaemonServiceFreshnessWarning, U as resolveOpenClawLocalDiagnosticsValue, Vt as isCliUpdateCheckApplicable, _ as resolveServiceReadinessFromServiceStatus, ft as inspectDaemonServiceInventory, j as formatHumanReplyReadinessReason$1, k as formatAgentReplyReadinessLabel, q as buildOnboardingPlan, t as runPendingDaemonServiceUpdate, zt as readCurrentLocalDeviceId } from "./daemon-service-update-coordinator-RJO997me.js";
+import { $ as resolveCreateProfileKind, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as createProfileByKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as resolveSpaceTaskSelection, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as resolveCreateProfileName, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, nt as assessActionParticipationCandidate, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as ensureAgentProfileRuntimeBinding, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-MlrjQYq5.js";
 import { a as areAllowedActionsEquivalent, p as canonicalizeAllowedActions, r as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, s as buildAgentFacingPublicationModeGuideLines, t as OPENMELD_AGENT_MENTAL_MODEL_LINES } from "./dist-ChS52b_E.js";
-import { C as readAgentActivityOutboxHealth, Dt as upsertSpaceConfig, Ft as buildSignalMessageReadProjection, Mt as buildDispatchResultReplyWorkflowProjection, Nt as buildPublicSpaceEntryUrl, Pt as buildSignalIndex, T as removeProjectOutbox, Ut as buildUpdatesReplyWorkflowProjection, Vt as buildSpaceRoundReadProjection, Zt as formatRemovedCcRelationMessage, et as readRecentDaemonDispatchJournalEvents, g as readCodexSessionTitles, gt as inspectSpaceCacheFile, h as normalizeSharedSessionTitle, jt as buildDispatchResultMessageReadProjection, m as resolveObservedAgentActivityBinding, p as buildAgentActivityEvent, qt as createSpaceMemberIdentityIndex, v as enqueueAgentActivityHookEvent, y as removeProjectInbox } from "./daemon-frame-transport-BOZpAMMJ.js";
+import { C as readAgentActivityOutboxHealth, Dt as upsertSpaceConfig, Ft as buildSignalMessageReadProjection, Mt as buildDispatchResultReplyWorkflowProjection, Nt as buildPublicSpaceEntryUrl, Pt as buildSignalIndex, T as removeProjectOutbox, Ut as buildUpdatesReplyWorkflowProjection, Vt as buildSpaceRoundReadProjection, Zt as formatRemovedCcRelationMessage, et as readRecentDaemonDispatchJournalEvents, g as readCodexSessionTitles, gt as inspectSpaceCacheFile, h as normalizeSharedSessionTitle, jt as buildDispatchResultMessageReadProjection, m as resolveObservedAgentActivityBinding, p as buildAgentActivityEvent, qt as createSpaceMemberIdentityIndex, v as enqueueAgentActivityHookEvent, y as removeProjectInbox } from "./daemon-frame-transport-D-4StENt.js";
 import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-D7uE_xTo.js";
 import { n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
 import { A as getDaemonStatus } from "./daemon-state-B44aq2nm.js";
@@ -25,18 +25,18 @@ import { i as readDaemonServiceContract } from "./daemon-service-contract-BpOBMG
 import { a as formatOpenMeldCliTextBlock, c as resolveSetupFollowUpCliEntryCommand, i as formatOpenMeldCliLine, l as resolveUserFacingCliEntryCommand, n as formatOpenMeldCliCommand, r as formatOpenMeldCliCommands, s as formatProfileAwareOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
 import { r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-B6HqY0_a.js";
 import { r as runServiceAccountCarrier } from "./service-account-authorization-DAPQy2yP.js";
-import { b as requestLocalAgentActivitySync, d as compareSemver, f as ensureVersionStateReady, l as OPENMELD_VERSION, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-Bp0fPeui.js";
+import { b as requestLocalAgentActivitySync, d as compareSemver, f as ensureVersionStateReady, l as OPENMELD_VERSION, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DcrVY0xb.js";
 import { a as requireOpenMeldProfile, d as setSelectedOpenMeldProfileId, f as getProfileDefaultView, i as isSelectedOpenMeldProfileRequiredError, l as clearSelectedOpenMeldProfileId, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull, p as setProfileDefaultView, r as resolveViewProfileKey, s as alignSelectedOpenMeldProfileStorage, t as parseCliViewMode, u as getSelectedOpenMeldProfileId } from "./context-D9Ebb5wl.js";
 import { a as outJsonLine, i as errLine, n as sanitizeTerminalDisplayText, o as outLine, r as formatMessage, t as createPresenter } from "./presenter-BcxiQyJg.js";
-import { Ct as formatDualViewGuideForDisplay, D as createSpaceContractSetGuideError, E as createSpaceAliasTargetGuideError, J as createStartAuthenticationGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, P as createSpacePublicationSetGuideError, R as createSpaceResultGuideError, S as createResetConfirmationGuideError, St as DualViewGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, W as createSpaceTargetGuideError, Z as getCommandHintsFromContract, b as createProfileCreateGuideError, ct as registerSkillsTargetSelectionOptions, dt as getCliVersionInfo, et as registerSpaceMemberSelectionOptions, ft as registerDaemonControlTargetOptions, g as canUseInteractivePrompts, j as createSpaceLeaveGuideError, mt as registerAuthLoginRequestOptions, q as createStartAgentIdentityGuideError, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, v as createDoctorFailedGuideError, wt as buildDualViewGuideMessage, x as createProfileMenuGuideError, y as createProfileActionGuideError, yt as registerBuiltinAgentSelectionOptions } from "./elapsed-time-BP84Tz_l.js";
-import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-Dmjk9vVk.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-vyAkTNzT.js";
-import { t as runServiceAccountControl } from "./service-account-control-DiLG-w18.js";
-import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-DhWSYpJX.js";
-import { C as resolveGatewayWebOrigin, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, a as runAgentsCustomRemove, c as runAgentsDisable, d as runAgentsManage, f as runAgentsRepair, h as promptSearchMultiselect, i as runAgentsCustomList, l as runAgentsEnable, m as formatTransportModeDisplay, n as runAgentsConfig, o as runAgentsCustomUpdate, p as runAgentsShow, r as runAgentsCustomAdd, s as runAgentsDetect, t as runAgents, u as runAgentsList, w as resolveSpaceWebGatewayOrigin } from "./agents-B0LFMdki.js";
-import { n as submitProfileRuntimeAgentControllerReport, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-BgkhnPU5.js";
-import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-CaPzHLuW.js";
-import { _ as readDispatchSpaceActionContextForReceiptFromEnv, c as readGatewayTextResponse, d as assertDispatchOwnedRuntimePublicWriteAllowed, l as toStructuredGatewayFailure, m as DispatchSpaceActionClosedError, n as fetchSpaceMeta, p as readDispatchOwnedRuntimeGuard, r as updateSpaceMeta, s as readGatewayJsonResponse, t as createCliSpaceApi, u as parseJsonResponse, v as readDispatchSpaceActionContextFromEnv, x as writeDispatchSpaceActionRecord } from "./cli-space-api-DVfyQOhC.js";
+import { Ct as formatDualViewGuideForDisplay, D as createSpaceContractSetGuideError, E as createSpaceAliasTargetGuideError, J as createStartAuthenticationGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, P as createSpacePublicationSetGuideError, R as createSpaceResultGuideError, S as createResetConfirmationGuideError, St as DualViewGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, W as createSpaceTargetGuideError, Z as getCommandHintsFromContract, b as createProfileCreateGuideError, ct as registerSkillsTargetSelectionOptions, dt as getCliVersionInfo, et as registerSpaceMemberSelectionOptions, ft as registerDaemonControlTargetOptions, g as canUseInteractivePrompts, j as createSpaceLeaveGuideError, mt as registerAuthLoginRequestOptions, q as createStartAgentIdentityGuideError, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, v as createDoctorFailedGuideError, wt as buildDualViewGuideMessage, x as createProfileMenuGuideError, y as createProfileActionGuideError, yt as registerBuiltinAgentSelectionOptions } from "./elapsed-time-Cw6b9rYy.js";
+import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-D-Cb6EVg.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-Dwn8FoKT.js";
+import { t as runServiceAccountControl } from "./service-account-control-DZjUR3I_.js";
+import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-C2nNM2yb.js";
+import { C as resolveGatewayWebOrigin, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, a as runAgentsCustomRemove, c as runAgentsDisable, d as runAgentsManage, f as runAgentsRepair, h as promptSearchMultiselect, i as runAgentsCustomList, l as runAgentsEnable, m as formatTransportModeDisplay, n as runAgentsConfig, o as runAgentsCustomUpdate, p as runAgentsShow, r as runAgentsCustomAdd, s as runAgentsDetect, t as runAgents, u as runAgentsList, w as resolveSpaceWebGatewayOrigin } from "./agents-2TzCubpV.js";
+import { n as submitProfileRuntimeAgentControllerReport, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-DGm8O4q_.js";
+import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-BTIKVek7.js";
+import { _ as readDispatchSpaceActionContextForReceiptFromEnv, c as readGatewayTextResponse, d as assertDispatchOwnedRuntimePublicWriteAllowed, l as toStructuredGatewayFailure, m as DispatchSpaceActionClosedError, n as fetchSpaceMeta, p as readDispatchOwnedRuntimeGuard, r as updateSpaceMeta, s as readGatewayJsonResponse, t as createCliSpaceApi, u as parseJsonResponse, v as readDispatchSpaceActionContextFromEnv, x as writeDispatchSpaceActionRecord } from "./cli-space-api-B2l1xMPn.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -23827,7 +23827,7 @@ function createSpaceActionMcpServer() {
 	})));
 	server.registerTool("submit_task_result", {
 		title: "Submit a result for a Space Task",
-		description: "Submit the concrete result and verification for an in-progress Task. A Task with a reviewer moves to In review; otherwise the stated completion boundary moves it to Done. If the reviewer is an Agent, use your one final reply to wake that reviewer.",
+		description: "Submit the concrete result and verification for an in-progress Task. A Task with a reviewer moves to In review; otherwise the stated completion boundary moves it to Done. The Space delivers the review handoff to the reviewer.",
 		inputSchema: {
 			taskId: spaceTaskIdSchema,
 			expectedRevision: z.number().int().min(1),
@@ -23850,10 +23850,11 @@ function createSpaceActionMcpServer() {
 	})));
 	server.registerTool("review_task", {
 		title: "Review a Space Task result",
-		description: "Accept the current result or request specific changes as this Task's reviewer. Change requests require feedback. If the assignee is an Agent and the Task returns to In progress, use your one final reply to wake that assignee with the feedback. Do not wake more work when needsHumanDecision is true. Agent-to-Agent rework stops for a human decision after two automatic rounds.",
+		description: "Accept the exact result you read or request specific changes as this Task's reviewer. Pass that result's resultRevision as expectedResultRevision and the Task's revision as expectedRevision. A conflict requires reading the current Task and deciding again. Change requests require feedback. The Space delivers review and rework handoffs. Agent-to-Agent rework stops for a human decision after two automatic rounds.",
 		inputSchema: {
 			taskId: spaceTaskIdSchema,
 			expectedRevision: z.number().int().min(1),
+			expectedResultRevision: z.number().int().min(1),
 			decision: z.enum(["accepted", "changes_requested"]),
 			feedback: z.string().trim().min(1).max(8e3).nullable().optional()
 		},
@@ -23864,11 +23865,12 @@ function createSpaceActionMcpServer() {
 			idempotentHint: false,
 			openWorldHint: false
 		}
-	}, async ({ decision, expectedRevision, feedback, taskId }) => executeTaskAction(() => mutateDispatchSpaceTask({
+	}, async ({ decision, expectedRevision, expectedResultRevision, feedback, taskId }) => executeTaskAction(() => mutateDispatchSpaceTask({
 		taskId,
 		body: {
 			action: "review",
 			expectedRevision,
+			expectedResultRevision,
 			decision,
 			...feedback === void 0 ? {} : { feedback }
 		}
@@ -24650,7 +24652,7 @@ function normalizeOptionalString(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 async function runDefaultSpaceAddMeMembership(input) {
-	const { runSpaceAddMeMembership } = await import("./add-me-membership-DUspkb62.js");
+	const { runSpaceAddMeMembership } = await import("./add-me-membership-DpckwGof.js");
 	return await runSpaceAddMeMembership(input);
 }
 //#endregion
@@ -29668,7 +29670,7 @@ computerCmd.command("disconnect").description("Disconnect this computer from its
 		routeTokens: ["computer", "disconnect"],
 		view,
 		run: async () => {
-			const { runComputerDisconnect } = await import("./computer-disconnect-B0BqUt8x.js");
+			const { runComputerDisconnect } = await import("./computer-disconnect-CLtQwKDS.js");
 			await runComputerDisconnect(computerConnectionIntentSchema.parse(JSON.parse(opts.connectionIntent)), view);
 		}
 	});
@@ -31883,7 +31885,7 @@ async function main() {
 	if (await runMacOsNativeKeychainHelperIfRequested()) return;
 	const argv = process.argv.map((arg) => arg === "--h" ? "--help" : arg);
 	if (argv.length === 5 && argv[2] === "computer" && argv[3] === "connection-review" && argv[4] === "--json") {
-		const { readComputerConnectionReview } = await import("./computer-connection-review-Brrrl6Hk.js");
+		const { readComputerConnectionReview } = await import("./computer-connection-review-mO6vn3C3.js");
 		outLine(JSON.stringify(await readComputerConnectionReview()));
 		return;
 	}
@@ -31894,7 +31896,7 @@ async function main() {
 			return;
 		}
 		if (argv[3] === "control-capabilities") {
-			const { readServiceControlCapabilities } = await import("./service-control-capabilities-BP8sLHBA.js");
+			const { readServiceControlCapabilities } = await import("./service-control-capabilities-Y4CGrchz.js");
 			emitCliJsonEnvelope({
 				schemaVersion: 1,
 				type: "service.control_capabilities",
@@ -32077,4 +32079,4 @@ main().catch((error) => {
 //#endregion
 export {};
 
-//# sourceMappingURL=openmeld-CheYNGUc.js.map
+//# sourceMappingURL=openmeld-Tkp17vPg.js.map