openmeld 0.3.220 → 0.3.221

package/dist/{api-client-foundation-Dv2OE-Pi.js → api-client-foundation-CGImd4c8.js}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 
-import { t as createCliApiClientFoundation } from "./api-client-foundation-CDlVc0zT.js";
+import { t as createCliApiClientFoundation } from "./api-client-foundation-D-Cb6EVg.js";
 export { createCliApiClientFoundation };

package/dist/{api-client-foundation-CDlVc0zT.js → api-client-foundation-D-Cb6EVg.js}

@@ -2,7 +2,7 @@
 
 import { t as normalizeBaseUrl } from "./urls-CY2uzH2-.js";
 import { t as isLoopbackHostname } from "./loopback-hostname-DHQPKq8N.js";
-import { Jn as OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID, Zn as buildOpenMeldRequestContextHeaders, qt as createOpenMeldApiClient } from "./dist-YPzkhLLp.js";
+import { Jn as OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID, Zn as buildOpenMeldRequestContextHeaders, qt as createOpenMeldApiClient } from "./dist-BewA9srP.js";
 import { K as MIN_SPACE_REQUEST_TIMEOUT_MS, M as resolveAuthSessionExpiryEligibility, V as DEFAULT_SPACE_REQUEST_TIMEOUT_MS, W as MAX_SPACE_REQUEST_TIMEOUT_MS, d as getAuthSessionState } from "./auth-session-CDhQANWx.js";
 import crypto, { createHash } from "node:crypto";
 //#region src/config/auth-request-compatibility.ts
@@ -452,4 +452,4 @@ function createCliApiClientFoundation(baseUrl, options = {}) {
 //#endregion
 export { buildOpenMeldProfileIdentityRequestHeadersWithAuth as a, buildRequestAuthHeaders as c, buildOpenMeldRequestContextFromProfile as d, buildOpenMeldRequestContextFromProfileIdentity as f, AuthRequestCredentialError as i, canAttachAuthTokenToRequest as l, resolveAuthRequestCompatibility as m, fetchSpaceRequestWithTimeout as n, buildOpenMeldProfileRequestHeadersWithAuth as o, deriveAuthBaseUrlFromGatewayUrl as p, resolveSpaceRequestTimeoutMsForDiagnostics as r, buildOpenMeldRequestContextHeadersWithAuth as s, createCliApiClientFoundation as t, fingerprintRequestAuthorization as u };
 
-//# sourceMappingURL=api-client-foundation-CDlVc0zT.js.map
+//# sourceMappingURL=api-client-foundation-D-Cb6EVg.js.map

package/dist/{api-client-foundation-CDlVc0zT.js.map → api-client-foundation-D-Cb6EVg.js.map}

@@ -1 +1 @@
-{"version":3,"file":"api-client-foundation-CDlVc0zT.js","names":["resolveSpaceRequestTimeoutMsForDiagnostics","resolveSpaceRequestTimeoutMsForCliDiagnostics"],"sources":["../src/config/auth-request-compatibility.ts","../src/config/openmeld-request-context.ts","../src/config/request-headers.ts","../src/space/request-timeout.ts","../src/space/fetch-with-timeout.ts","../src/space/api-client-foundation.ts"],"sourcesContent":["import { normalizeBaseUrl } from \"../protocol/urls\";\nimport type { StoredAuthSession } from \"./auth-session\";\nimport { isLoopbackHostname } from \"./loopback-hostname\";\n\nexport type AuthRequestCompatibilityReason =\n  | \"invalid_request_url\"\n  | \"invalid_auth_url\"\n  | \"insecure_transport\"\n  | \"host_mismatch\"\n  | \"loopback\"\n  | \"same_host\"\n  | \"gateway_sibling\";\n\nexport type AuthRequestCompatibility = {\n  compatible: boolean;\n  reason: AuthRequestCompatibilityReason;\n  requestHost: string | null;\n  authHost: string | null;\n  expectedGatewayHost: string | null;\n};\n\nexport function resolveAuthRequestCompatibility(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthRequestCompatibility {\n  const requestUrl = parseUrlOrNull(input.requestUrl);\n  if (!requestUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_request_url\",\n      requestHost: null,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const authBaseUrl = parseUrlOrNull(input.session.authBaseUrl);\n  if (!authBaseUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_auth_url\",\n      requestHost: requestUrl.host,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const expectedGatewayHost = deriveGatewayHost(authBaseUrl);\n  const requestHost = requestUrl.host;\n  const authHost = authBaseUrl.host;\n\n  if (\n    (isLoopbackHostname(requestUrl.hostname) &&\n      isLoopbackHostname(authBaseUrl.hostname)) ||\n    // Isolated worktrees share a hostname across Auth and Gateway ports.\n    // Never treat different named localhost lanes as interchangeable.\n    (requestUrl.hostname.endsWith(\".localhost\") &&\n      requestUrl.hostname === authBaseUrl.hostname &&\n      isHttpTransportProtocol(authBaseUrl.protocol) &&\n      [\"http:\", \"https:\", \"ws:\", \"wss:\"].includes(requestUrl.protocol))\n  ) {\n    return {\n      compatible: true,\n      reason: \"loopback\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (!isSecureTransportProtocol(requestUrl.protocol)) {\n    return {\n      compatible: false,\n      reason: \"insecure_transport\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (requestHost === authHost) {\n    return {\n      compatible: true,\n      reason: \"same_host\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (expectedGatewayHost && requestHost === expectedGatewayHost) {\n    return {\n      compatible: true,\n      reason: \"gateway_sibling\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  return {\n    compatible: false,\n    reason: \"host_mismatch\",\n    requestHost,\n    authHost,\n    expectedGatewayHost,\n  };\n}\n\nexport function deriveAuthBaseUrlFromGatewayUrl(\n  gatewayUrl: string\n): string | null {\n  const parsed = parseUrlOrNull(gatewayUrl);\n  if (!parsed) {\n    return null;\n  }\n  if (!isHttpTransportProtocol(parsed.protocol)) {\n    return null;\n  }\n  if (!parsed.hostname.startsWith(\"gateway.\")) {\n    return null;\n  }\n\n  const authUrl = new URL(parsed.toString());\n  authUrl.hostname = `auth.${parsed.hostname.slice(\"gateway.\".length)}`;\n  authUrl.pathname = \"/\";\n  authUrl.search = \"\";\n  authUrl.hash = \"\";\n  return normalizeBaseUrl(authUrl.toString());\n}\n\nfunction deriveGatewayHost(authBaseUrl: URL): string | null {\n  if (!authBaseUrl.hostname.startsWith(\"auth.\")) {\n    return null;\n  }\n\n  const gatewayUrl = new URL(authBaseUrl.toString());\n  gatewayUrl.hostname = `gateway.${authBaseUrl.hostname.slice(\"auth.\".length)}`;\n  return gatewayUrl.host;\n}\n\nfunction parseUrlOrNull(value: string): URL | null {\n  try {\n    return new URL(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction isSecureTransportProtocol(protocol: string): boolean {\n  return protocol === \"https:\" || protocol === \"wss:\";\n}\n\nfunction isHttpTransportProtocol(protocol: string): boolean {\n  return protocol === \"http:\" || protocol === \"https:\";\n}\n","import crypto from \"node:crypto\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\n\nexport type OpenMeldRequestContextProfileIdentity = {\n  openMeldProfileId: string;\n  profileKind?: \"human\" | \"agent\" | \"system\";\n  kind?: \"human\" | \"agent\";\n  profileHandle?: string;\n  profileName: string;\n  ownerUserId?: string;\n  ownerName?: string;\n  agentControllerConversationId?: string;\n};\n\nexport function buildOpenMeldRequestContextFromProfile(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestId?: string;\n  agentControllerConversationId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const agentControllerConversationId = normalizeOptionalText(\n    input.agentControllerConversationId\n  );\n  const ownerName = normalizeOptionalText(input.openMeldProfile.ownerName);\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.openMeldProfile.openMeldProfileId,\n      profileKind: input.openMeldProfile.profileKind,\n      profileHandle: input.openMeldProfile.profileHandle,\n      profileName: input.openMeldProfile.profileName,\n      ownerUserId: input.openMeldProfile.ownerUserId,\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nexport function buildOpenMeldRequestContextFromProfileIdentity(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const profileHandle = normalizeOptionalText(\n    input.profileIdentity.profileHandle\n  );\n  const ownerUserId = normalizeOptionalText(input.profileIdentity.ownerUserId);\n  const ownerName = normalizeOptionalText(input.profileIdentity.ownerName);\n  const agentControllerConversationId = normalizeOptionalText(\n    input.profileIdentity.agentControllerConversationId\n  );\n  const profileKind =\n    input.profileIdentity.profileKind ??\n    (input.profileIdentity.kind === \"human\" ||\n    input.profileIdentity.kind === \"agent\"\n      ? input.profileIdentity.kind\n      : \"system\");\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.profileIdentity.openMeldProfileId,\n      profileKind,\n      ...(profileHandle ? { profileHandle } : {}),\n      profileName: input.profileIdentity.profileName,\n      ...(ownerUserId ? { ownerUserId } : {}),\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import { createHash } from \"node:crypto\";\nimport {\n  buildOpenMeldRequestContextHeaders,\n  type OpenMeldRequestContextHeadersInput,\n} from \"@openmeld/gateway-contract\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport {\n  type AuthRequestCompatibilityReason,\n  resolveAuthRequestCompatibility,\n} from \"./auth-request-compatibility\";\nimport {\n  type AuthSessionStateReasonCode,\n  getAuthSessionState,\n  type StoredAuthSession,\n} from \"./auth-session\";\nimport { resolveAuthSessionExpiryEligibility } from \"./auth-session-expiry\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\nimport {\n  buildOpenMeldRequestContextFromProfile,\n  buildOpenMeldRequestContextFromProfileIdentity,\n  type OpenMeldRequestContextProfileIdentity,\n} from \"./openmeld-request-context\";\n\nconst DEFAULT_TOKEN_TYPE = \"Bearer\";\nconst AUTHORIZATION_HEADER = \"Authorization\";\n\n// Ephemeral correlation for the exact credential attached to a request/socket.\n// Never include this fingerprint in persisted or uploaded diagnostics.\nexport function fingerprintRequestAuthorization(authorization: string): string {\n  return createHash(\"sha256\").update(authorization).digest(\"hex\");\n}\n\ntype RequestAuthHeadersInput = {\n  authSession?: StoredAuthSession | null;\n  expectedOwnerUserId?: string;\n  requestUrl: string;\n};\n\ntype OpenMeldRequestContextHeadersWithAuthInput =\n  OpenMeldRequestContextHeadersInput & {\n    authSession?: StoredAuthSession | null;\n    requestUrl: string;\n  };\n\nexport type AuthTokenAttachment =\n  | {\n      status: \"attachable\";\n      token: string;\n      tokenType: string;\n    }\n  | {\n      status: \"dropped\";\n      reason:\n        | \"empty_token\"\n        | \"session_expired\"\n        | \"session_expiry_invalid\"\n        | AuthRequestCompatibilityReason;\n      requestHost: string | null;\n      authHost: string | null;\n      expectedGatewayHost: string | null;\n    };\n\nexport type DroppedAuthTokenAttachment = Extract<\n  AuthTokenAttachment,\n  { status: \"dropped\" }\n>;\n\nexport type AuthRequestCredentialFailureReason =\n  | DroppedAuthTokenAttachment[\"reason\"]\n  | AuthSessionStateReasonCode\n  | \"session_invalid\"\n  | \"session_revoked\";\n\nexport class AuthRequestCredentialError extends Error {\n  readonly retryAfterMs?: number;\n  readonly authHost: string | null;\n  readonly expectedGatewayHost: string | null;\n  readonly reason: AuthRequestCredentialFailureReason;\n  readonly requestHost: string | null;\n  readonly droppedAttachment?: DroppedAuthTokenAttachment;\n\n  constructor(input: {\n    retryAfterMs?: number;\n    authHost: string | null;\n    expectedGatewayHost: string | null;\n    reason: AuthRequestCredentialFailureReason;\n    requestHost: string | null;\n    droppedAttachment?: DroppedAuthTokenAttachment;\n  }) {\n    super(\n      `OpenMeld refused to send a request with unusable stored credentials (${input.reason}).`\n    );\n    this.name = \"AuthRequestCredentialError\";\n    this.authHost = input.authHost;\n    this.expectedGatewayHost = input.expectedGatewayHost;\n    this.reason = input.reason;\n    this.requestHost = input.requestHost;\n    this.droppedAttachment = input.droppedAttachment;\n    this.retryAfterMs = input.retryAfterMs;\n  }\n}\n\nexport async function buildRequestAuthHeaders(\n  input: RequestAuthHeadersInput\n): Promise<Record<string, string>> {\n  const headers: Record<string, string> = {};\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldRequestContextHeadersWithAuth(\n  input: OpenMeldRequestContextHeadersWithAuthInput\n): Promise<Record<string, string>> {\n  const headers = buildOpenMeldRequestContextHeaders(input);\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldProfileRequestHeadersWithAuth(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  agentControllerConversationId?: string;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfile({\n      openMeldProfile: input.openMeldProfile,\n      agentControllerConversationId: input.agentControllerConversationId,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport async function buildOpenMeldProfileIdentityRequestHeadersWithAuth(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfileIdentity({\n      profileIdentity: input.profileIdentity,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport function withSpacePassword(\n  requestContext: OpenMeldRequestContext,\n  spacePassword?: string\n): OpenMeldRequestContextHeadersInput {\n  return {\n    requestContext,\n    ...(spacePassword === undefined ? {} : { spacePassword }),\n  };\n}\n\n// One decision for \"can this stored session authenticate this request\", with\n// the drop reason preserved. Header building and the daemon stream connect\n// gate must share this so they cannot drift apart.\nexport function resolveAuthTokenAttachment(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthTokenAttachment {\n  const compatibility = resolveAuthRequestCompatibility({\n    session: input.session,\n    requestUrl: input.requestUrl,\n  });\n  const token = normalizeAccessToken(input.session);\n  if (!token) {\n    return {\n      status: \"dropped\",\n      reason: \"empty_token\",\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  if (!compatibility.compatible) {\n    return {\n      status: \"dropped\",\n      reason: compatibility.reason,\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  const expiryReason = resolveSessionExpiryReason(input.session);\n  if (expiryReason) {\n    return {\n      status: \"dropped\",\n      reason: expiryReason,\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  return {\n    status: \"attachable\",\n    token,\n    tokenType: normalizeTokenType(input.session.tokenType),\n  };\n}\n\nexport function requireAuthTokenAttachment(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): Extract<AuthTokenAttachment, { status: \"attachable\" }> {\n  const attachment = resolveAuthTokenAttachment(input);\n  if (attachment.status === \"dropped\") {\n    throw createAuthRequestCredentialError(attachment);\n  }\n  return attachment;\n}\n\nasync function attachAuthHeader(\n  headers: Record<string, string>,\n  input: RequestAuthHeadersInput\n): Promise<void> {\n  const session = await resolveAuthSessionForHeaders(input);\n  if (\n    input.expectedOwnerUserId &&\n    session?.user?.id !== input.expectedOwnerUserId\n  ) {\n    throw new Error(\"auth.session_owner_changed\");\n  }\n  if (session === null) {\n    // No stored credentials exist, so there is nothing to strip: the caller\n    // is knowingly sending an unauthenticated request.\n    return;\n  }\n\n  let attachment: Extract<AuthTokenAttachment, { status: \"attachable\" }>;\n  try {\n    attachment = requireAuthTokenAttachment({\n      session,\n      requestUrl: input.requestUrl,\n    });\n  } catch (error) {\n    if (error instanceof AuthRequestCredentialError) {\n      logRejectedAuthRequestCredential(error);\n    }\n    throw error;\n  }\n  headers[AUTHORIZATION_HEADER] = `${attachment.tokenType} ${attachment.token}`;\n}\n\nfunction logRejectedAuthRequestCredential(\n  error: AuthRequestCredentialError\n): void {\n  console.error(\"[openmeld.auth.request_credential_rejected]\", {\n    authHost: error.authHost,\n    expectedGatewayHost: error.expectedGatewayHost,\n    reason: error.reason,\n    requestHost: error.requestHost,\n  });\n}\n\nasync function resolveAuthSessionForHeaders(\n  input: RequestAuthHeadersInput\n): Promise<StoredAuthSession | null> {\n  if (input.authSession !== undefined) {\n    return input.authSession;\n  }\n\n  const sessionState = await getAuthSessionState({ refreshExpired: true });\n  if (sessionState.state === \"missing\") {\n    return null;\n  }\n  if (sessionState.state !== \"valid\" || sessionState.session === null) {\n    const error = new AuthRequestCredentialError({\n      retryAfterMs: sessionState.retryAfterMs,\n      authHost: null,\n      expectedGatewayHost: null,\n      reason:\n        sessionState.reasonCode ??\n        (sessionState.state === \"revoked\"\n          ? \"session_revoked\"\n          : \"session_invalid\"),\n      requestHost: parseRequestHost(input.requestUrl),\n    });\n    logRejectedAuthRequestCredential(error);\n    throw error;\n  }\n\n  return sessionState.session;\n}\n\nfunction createAuthRequestCredentialError(\n  attachment: DroppedAuthTokenAttachment\n): AuthRequestCredentialError {\n  return new AuthRequestCredentialError({\n    authHost: attachment.authHost,\n    expectedGatewayHost: attachment.expectedGatewayHost,\n    reason: attachment.reason,\n    requestHost: attachment.requestHost,\n    droppedAttachment: attachment,\n  });\n}\n\nfunction parseRequestHost(requestUrl: string): string | null {\n  try {\n    return new URL(requestUrl).host || null;\n  } catch {\n    return null;\n  }\n}\n\nfunction normalizeAccessToken(session: StoredAuthSession): string {\n  return String(session.accessToken ?? \"\").trim();\n}\n\nfunction normalizeTokenType(tokenType: string | undefined): string {\n  const normalized = String(tokenType ?? \"\").trim();\n  return normalized.length > 0 ? normalized : DEFAULT_TOKEN_TYPE;\n}\n\nfunction resolveSessionExpiryReason(\n  session: StoredAuthSession\n): \"session_expired\" | \"session_expiry_invalid\" | null {\n  const eligibility = resolveAuthSessionExpiryEligibility(session.expiresAt);\n  if (eligibility.status === \"invalid\") {\n    return \"session_expiry_invalid\";\n  }\n  return eligibility.status === \"expired\" ? \"session_expired\" : null;\n}\n\nexport function canAttachAuthTokenToRequest(\n  session: StoredAuthSession,\n  requestUrl: string\n): boolean {\n  return (\n    resolveAuthTokenAttachment({\n      session,\n      requestUrl,\n    }).status === \"attachable\"\n  );\n}\n","import {\n  DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS,\n  DEFAULT_SPACE_REQUEST_TIMEOUT_MS,\n  MAX_SPACE_REQUEST_TIMEOUT_MS,\n  MIN_SPACE_REQUEST_TIMEOUT_MS,\n} from \"../strategy-constants\";\n\nconst SPACE_REQUEST_TIMEOUT_ENV_KEY = \"OPENMELD_SPACE_REQUEST_TIMEOUT_MS\";\n\nexport function resolveSpaceRequestTimeoutMs(override?: number): number {\n  if (isFinitePositiveNumber(override)) {\n    return clampSpaceRequestTimeoutMs(override);\n  }\n\n  const fromEnv = Number.parseInt(\n    String(process.env[SPACE_REQUEST_TIMEOUT_ENV_KEY] ?? \"\"),\n    10\n  );\n  if (isFinitePositiveNumber(fromEnv)) {\n    return clampSpaceRequestTimeoutMs(fromEnv);\n  }\n\n  return DEFAULT_SPACE_REQUEST_TIMEOUT_MS;\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMs(undefined);\n}\n\nexport function resolveSpaceConversationValidateTimeoutMs(): number {\n  return Math.max(\n    resolveSpaceRequestTimeoutMs(undefined),\n    DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS\n  );\n}\n\nfunction clampSpaceRequestTimeoutMs(value: number): number {\n  const normalized = Math.trunc(value);\n  return Math.max(\n    MIN_SPACE_REQUEST_TIMEOUT_MS,\n    Math.min(MAX_SPACE_REQUEST_TIMEOUT_MS, normalized)\n  );\n}\n\nfunction isFinitePositiveNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value) && value > 0;\n}\n","import {\n  resolveSpaceRequestTimeoutMs,\n  resolveSpaceRequestTimeoutMsForDiagnostics as resolveSpaceRequestTimeoutMsForCliDiagnostics,\n} from \"./request-timeout\";\n\nexport async function fetchSpaceRequestWithTimeout(input: {\n  url: string;\n  operation: string;\n  init?: RequestInit;\n  timeoutMs?: number;\n}): Promise<Response> {\n  const timeoutMs = resolveSpaceRequestTimeoutMs(input.timeoutMs);\n  const timeoutSignal = AbortSignal.timeout(timeoutMs);\n  const composed = composeAbortSignals(input.init?.signal, timeoutSignal);\n\n  try {\n    try {\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    } catch (error) {\n      // A keep-alive connection that a proxy silently dropped fails exactly\n      // once and undici evicts it; the retry rides a fresh connection. This\n      // is what keeps a long-lived service working behind flaky proxies\n      // without asking users to touch their network config.\n      if (\n        timeoutSignal.aborted ||\n        composed.signal.aborted ||\n        !shouldWrapNetworkRequestError(error)\n      ) {\n        throw error;\n      }\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    }\n  } catch (error) {\n    if (timeoutSignal.aborted) {\n      throw createSpaceRequestTimeoutError({\n        operation: input.operation,\n        timeoutMs,\n        cause: error,\n      });\n    }\n    if (shouldWrapNetworkRequestError(error)) {\n      throw createSpaceRequestNetworkError({\n        operation: input.operation,\n        url: input.url,\n        cause: error,\n      });\n    }\n    throw error;\n  } finally {\n    composed.cleanup();\n  }\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMsForCliDiagnostics();\n}\n\nfunction createSpaceRequestTimeoutError(input: {\n  operation: string;\n  timeoutMs: number;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request timed out after ${input.timeoutMs}ms`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.timeout\";\n  return error;\n}\n\nfunction createSpaceRequestNetworkError(input: {\n  operation: string;\n  url: string;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request could not reach ${describeRequestTarget(input.url)} (${toErrorMessage(input.cause)})`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.request_failed\";\n  return error;\n}\n\nfunction composeAbortSignals(\n  parent: AbortSignal | null | undefined,\n  timeout: AbortSignal\n): { signal: AbortSignal; cleanup: () => void } {\n  if (!parent) {\n    return {\n      signal: timeout,\n      cleanup: () => undefined,\n    };\n  }\n\n  if (parent.aborted || timeout.aborted) {\n    const controller = new AbortController();\n    controller.abort();\n    return {\n      signal: controller.signal,\n      cleanup: () => undefined,\n    };\n  }\n\n  const controller = new AbortController();\n  const abort = () => {\n    controller.abort();\n  };\n\n  parent.addEventListener(\"abort\", abort, { once: true });\n  timeout.addEventListener(\"abort\", abort, { once: true });\n\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      parent.removeEventListener(\"abort\", abort);\n      timeout.removeEventListener(\"abort\", abort);\n    },\n  };\n}\n\nfunction describeRequestTarget(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return url;\n  }\n}\n\nfunction toErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    const message = error.message.trim();\n    return message.length > 0 ? message : \"request failed\";\n  }\n  const message = String(error ?? \"\").trim();\n  return message.length > 0 ? message : \"request failed\";\n}\n\nfunction shouldWrapNetworkRequestError(error: unknown): boolean {\n  if (error instanceof TypeError) {\n    return true;\n  }\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    typeof error.code === \"string\" &&\n    error.code.startsWith(\"ERR_SSL_\")\n  ) {\n    return true;\n  }\n  const message = toErrorMessage(error).toLowerCase();\n  return (\n    message.includes(\"fetch failed\") ||\n    message.includes(\"failed to fetch\") ||\n    message.includes(\"network request failed\") ||\n    message.includes(\"ssl_decryption_failed_or_bad_record_mac\")\n  );\n}\n","import {\n  createOpenMeldApiClient,\n  type OpenMeldApiClientFoundation,\n} from \"@openmeld/api-client\";\nimport {\n  buildOpenMeldRequestContextHeaders,\n  OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID,\n} from \"@openmeld/gateway-contract\";\nimport { buildRequestAuthHeaders } from \"../config/request-headers\";\nimport { fetchSpaceRequestWithTimeout } from \"./fetch-with-timeout\";\n\nexport function createCliApiClientFoundation(\n  baseUrl: string,\n  options: {\n    onAuthHeadersResolved?: (headers: Record<string, string>) => void;\n    organizationId?: string;\n    expectedOwnerUserId?: string;\n  } = {}\n): OpenMeldApiClientFoundation {\n  return createOpenMeldApiClient({\n    baseUrl,\n    transport: async (request) =>\n      await fetchSpaceRequestWithTimeout({\n        url: request.url,\n        operation: request.operation,\n        init: request.init,\n        timeoutMs: request.timeoutMs,\n      }),\n    getAuthHeaders: async ({ requestUrl }) => {\n      const headers = await buildRequestAuthHeaders({\n        requestUrl,\n        expectedOwnerUserId: options.expectedOwnerUserId,\n      });\n      if (options.organizationId) {\n        headers[OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID] =\n          options.organizationId;\n      }\n      options.onAuthHeadersResolved?.(headers);\n      return headers;\n    },\n    getRequestContextHeaders: async ({ requestContext, spacePassword }) =>\n      buildOpenMeldRequestContextHeaders({\n        requestContext,\n        ...(spacePassword === undefined ? {} : { spacePassword }),\n      }),\n  });\n}\n"],"mappings":";;;;;;;;AAqBA,SAAgB,gCAAgC,OAGnB;CAC3B,MAAM,aAAa,eAAe,MAAM,UAAU;CAClD,IAAI,CAAC,YACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa;EACb,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,cAAc,eAAe,MAAM,QAAQ,WAAW;CAC5D,IAAI,CAAC,aACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa,WAAW;EACxB,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,sBAAsB,kBAAkB,WAAW;CACzD,MAAM,cAAc,WAAW;CAC/B,MAAM,WAAW,YAAY;CAE7B,IACG,mBAAmB,WAAW,QAAQ,KACrC,mBAAmB,YAAY,QAAQ,KAGxC,WAAW,SAAS,SAAS,YAAY,KACxC,WAAW,aAAa,YAAY,YACpC,wBAAwB,YAAY,QAAQ,KAC5C;EAAC;EAAS;EAAU;EAAO;CAAM,CAAC,CAAC,SAAS,WAAW,QAAQ,GAEjE,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,CAAC,0BAA0B,WAAW,QAAQ,GAChD,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,gBAAgB,UAClB,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,uBAAuB,gBAAgB,qBACzC,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,gCACd,YACe;CACf,MAAM,SAAS,eAAe,UAAU;CACxC,IAAI,CAAC,QACH,OAAO;CAET,IAAI,CAAC,wBAAwB,OAAO,QAAQ,GAC1C,OAAO;CAET,IAAI,CAAC,OAAO,SAAS,WAAW,UAAU,GACxC,OAAO;CAGT,MAAM,UAAU,IAAI,IAAI,OAAO,SAAS,CAAC;CACzC,QAAQ,WAAW,QAAQ,OAAO,SAAS,MAAM,CAAiB;CAClE,QAAQ,WAAW;CACnB,QAAQ,SAAS;CACjB,QAAQ,OAAO;CACf,OAAO,iBAAiB,QAAQ,SAAS,CAAC;AAC5C;AAEA,SAAS,kBAAkB,aAAiC;CAC1D,IAAI,CAAC,YAAY,SAAS,WAAW,OAAO,GAC1C,OAAO;CAGT,MAAM,aAAa,IAAI,IAAI,YAAY,SAAS,CAAC;CACjD,WAAW,WAAW,WAAW,YAAY,SAAS,MAAM,CAAc;CAC1E,OAAO,WAAW;AACpB;AAEA,SAAS,eAAe,OAA2B;CACjD,IAAI;EACF,OAAO,IAAI,IAAI,KAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OAAO,aAAa,YAAY,aAAa;AAC/C;AAEA,SAAS,wBAAwB,UAA2B;CAC1D,OAAO,aAAa,WAAW,aAAa;AAC9C;;;AC5IA,SAAgB,uCAAuC,OAI5B;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gCAAgC,sBACpC,MAAM,6BACR;CACA,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CAEvE,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC,aAAa,MAAM,gBAAgB;GACnC,eAAe,MAAM,gBAAgB;GACrC,aAAa,MAAM,gBAAgB;GACnC,aAAa,MAAM,gBAAgB;GACnC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAgB,+CAA+C,OAGpC;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gBAAgB,sBACpB,MAAM,gBAAgB,aACxB;CACA,MAAM,cAAc,sBAAsB,MAAM,gBAAgB,WAAW;CAC3E,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CACvE,MAAM,gCAAgC,sBACpC,MAAM,gBAAgB,6BACxB;CACA,MAAM,cACJ,MAAM,gBAAgB,gBACrB,MAAM,gBAAgB,SAAS,WAChC,MAAM,gBAAgB,SAAS,UAC3B,MAAM,gBAAgB,OACtB;CAEN,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC;GACA,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;GACzC,aAAa,MAAM,gBAAgB;GACnC,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;GACrC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;ACxDA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAI7B,SAAgB,gCAAgC,eAA+B;CAC7E,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,OAAO,KAAK;AAChE;AA2CA,IAAa,6BAAb,cAAgD,MAAM;CACpD;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,OAOT;EACD,MACE,wEAAwE,MAAM,OAAO,GACvF;EACA,KAAK,OAAO;EACZ,KAAK,WAAW,MAAM;EACtB,KAAK,sBAAsB,MAAM;EACjC,KAAK,SAAS,MAAM;EACpB,KAAK,cAAc,MAAM;EACzB,KAAK,oBAAoB,MAAM;EAC/B,KAAK,eAAe,MAAM;CAC5B;AACF;AAEA,eAAsB,wBACpB,OACiC;CACjC,MAAM,UAAkC,CAAC;CACzC,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CACpB,OACiC;CACjC,MAAM,UAAU,mCAAmC,KAAK;CACxD,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CAA2C,OAM7B;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,uCAAuC;GACrD,iBAAiB,MAAM;GACvB,+BAA+B,MAAM;EACvC,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAEA,eAAsB,mDAAmD,OAKrC;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,+CAA+C,EAC7D,iBAAiB,MAAM,gBACzB,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAeA,SAAgB,2BAA2B,OAGnB;CACtB,MAAM,gBAAgB,gCAAgC;EACpD,SAAS,MAAM;EACf,YAAY,MAAM;CACpB,CAAC;CACD,MAAM,QAAQ,qBAAqB,MAAM,OAAO;CAChD,IAAI,CAAC,OACH,OAAO;EACL,QAAQ;EACR,QAAQ;EACR,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,IAAI,CAAC,cAAc,YACjB,OAAO;EACL,QAAQ;EACR,QAAQ,cAAc;EACtB,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,MAAM,eAAe,2BAA2B,MAAM,OAAO;CAC7D,IAAI,cACF,OAAO;EACL,QAAQ;EACR,QAAQ;EACR,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,OAAO;EACL,QAAQ;EACR;EACA,WAAW,mBAAmB,MAAM,QAAQ,SAAS;CACvD;AACF;AAEA,SAAgB,2BAA2B,OAGgB;CACzD,MAAM,aAAa,2BAA2B,KAAK;CACnD,IAAI,WAAW,WAAW,WACxB,MAAM,iCAAiC,UAAU;CAEnD,OAAO;AACT;AAEA,eAAe,iBACb,SACA,OACe;CACf,MAAM,UAAU,MAAM,6BAA6B,KAAK;CACxD,IACE,MAAM,uBACN,SAAS,MAAM,OAAO,MAAM,qBAE5B,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,YAAY,MAGd;CAGF,IAAI;CACJ,IAAI;EACF,aAAa,2BAA2B;GACtC;GACA,YAAY,MAAM;EACpB,CAAC;CACH,SAAS,OAAO;EACd,IAAI,iBAAiB,4BACnB,iCAAiC,KAAK;EAExC,MAAM;CACR;CACA,QAAQ,wBAAwB,GAAG,WAAW,UAAU,GAAG,WAAW;AACxE;AAEA,SAAS,iCACP,OACM;CACN,QAAQ,MAAM,+CAA+C;EAC3D,UAAU,MAAM;EAChB,qBAAqB,MAAM;EAC3B,QAAQ,MAAM;EACd,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,6BACb,OACmC;CACnC,IAAI,MAAM,gBAAgB,KAAA,GACxB,OAAO,MAAM;CAGf,MAAM,eAAe,MAAM,oBAAoB,EAAE,gBAAgB,KAAK,CAAC;CACvE,IAAI,aAAa,UAAU,WACzB,OAAO;CAET,IAAI,aAAa,UAAU,WAAW,aAAa,YAAY,MAAM;EACnE,MAAM,QAAQ,IAAI,2BAA2B;GAC3C,cAAc,aAAa;GAC3B,UAAU;GACV,qBAAqB;GACrB,QACE,aAAa,eACZ,aAAa,UAAU,YACpB,oBACA;GACN,aAAa,iBAAiB,MAAM,UAAU;EAChD,CAAC;EACD,iCAAiC,KAAK;EACtC,MAAM;CACR;CAEA,OAAO,aAAa;AACtB;AAEA,SAAS,iCACP,YAC4B;CAC5B,OAAO,IAAI,2BAA2B;EACpC,UAAU,WAAW;EACrB,qBAAqB,WAAW;EAChC,QAAQ,WAAW;EACnB,aAAa,WAAW;EACxB,mBAAmB;CACrB,CAAC;AACH;AAEA,SAAS,iBAAiB,YAAmC;CAC3D,IAAI;EACF,OAAO,IAAI,IAAI,UAAU,CAAC,CAAC,QAAQ;CACrC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,qBAAqB,SAAoC;CAChE,OAAO,OAAO,QAAQ,eAAe,EAAE,CAAC,CAAC,KAAK;AAChD;AAEA,SAAS,mBAAmB,WAAuC;CACjE,MAAM,aAAa,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK;CAChD,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,2BACP,SACqD;CACrD,MAAM,cAAc,oCAAoC,QAAQ,SAAS;CACzE,IAAI,YAAY,WAAW,WACzB,OAAO;CAET,OAAO,YAAY,WAAW,YAAY,oBAAoB;AAChE;AAEA,SAAgB,4BACd,SACA,YACS;CACT,OACE,2BAA2B;EACzB;EACA;CACF,CAAC,CAAC,CAAC,WAAW;AAElB;;;ACvVA,MAAM,gCAAgC;AAEtC,SAAgB,6BAA6B,UAA2B;CACtE,IAAI,uBAAuB,QAAQ,GACjC,OAAO,2BAA2B,QAAQ;CAG5C,MAAM,UAAU,OAAO,SACrB,OAAO,QAAQ,IAAI,kCAAkC,EAAE,GACvD,EACF;CACA,IAAI,uBAAuB,OAAO,GAChC,OAAO,2BAA2B,OAAO;CAG3C,OAAO;AACT;AAEA,SAAgBA,+CAAqD;CACnE,OAAO,6BAA6B,KAAA,CAAS;AAC/C;AASA,SAAS,2BAA2B,OAAuB;CAEzD,OAAO,KAAK,IACV,8BACA,KAAK,IAAI,8BAHQ,KAAK,MAAM,KAGoB,CAAC,CACnD;AACF;AAEA,SAAS,uBAAuB,OAAiC;CAC/D,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ;AACxE;;;ACzCA,eAAsB,6BAA6B,OAK7B;CACpB,MAAM,YAAY,6BAA6B,MAAM,SAAS;CAC9D,MAAM,gBAAgB,YAAY,QAAQ,SAAS;CACnD,MAAM,WAAW,oBAAoB,MAAM,MAAM,QAAQ,aAAa;CAEtE,IAAI;EACF,IAAI;GACF,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH,SAAS,OAAO;GAKd,IACE,cAAc,WACd,SAAS,OAAO,WAChB,CAAC,8BAA8B,KAAK,GAEpC,MAAM;GAER,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH;CACF,SAAS,OAAO;EACd,IAAI,cAAc,SAChB,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB;GACA,OAAO;EACT,CAAC;EAEH,IAAI,8BAA8B,KAAK,GACrC,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB,KAAK,MAAM;GACX,OAAO;EACT,CAAC;EAEH,MAAM;CACR,UAAU;EACR,SAAS,QAAQ;CACnB;AACF;AAEA,SAAgB,6CAAqD;CACnE,OAAOC,6CAA8C;AACvD;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,MAAM,UAAU,KAC9D,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,sBAAsB,MAAM,GAAG,EAAE,IAAI,eAAe,MAAM,KAAK,EAAE,IAC/G,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,oBACP,QACA,SAC8C;CAC9C,IAAI,CAAC,QACH,OAAO;EACL,QAAQ;EACR,eAAe,KAAA;CACjB;CAGF,IAAI,OAAO,WAAW,QAAQ,SAAS;EACrC,MAAM,aAAa,IAAI,gBAAgB;EACvC,WAAW,MAAM;EACjB,OAAO;GACL,QAAQ,WAAW;GACnB,eAAe,KAAA;EACjB;CACF;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,cAAc;EAClB,WAAW,MAAM;CACnB;CAEA,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACtD,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CAEvD,OAAO;EACL,QAAQ,WAAW;EACnB,eAAe;GACb,OAAO,oBAAoB,SAAS,KAAK;GACzC,QAAQ,oBAAoB,SAAS,KAAK;EAC5C;CACF;AACF;AAEA,SAAS,sBAAsB,KAAqB;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,OAAwB;CAC9C,IAAI,iBAAiB,OAAO;EAC1B,MAAM,UAAU,MAAM,QAAQ,KAAK;EACnC,OAAO,QAAQ,SAAS,IAAI,UAAU;CACxC;CACA,MAAM,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CACzC,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,8BAA8B,OAAyB;CAC9D,IAAI,iBAAiB,WACnB,OAAO;CAET,IACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,OAAO,MAAM,SAAS,YACtB,MAAM,KAAK,WAAW,UAAU,GAEhC,OAAO;CAET,MAAM,UAAU,eAAe,KAAK,CAAC,CAAC,YAAY;CAClD,OACE,QAAQ,SAAS,cAAc,KAC/B,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,wBAAwB,KACzC,QAAQ,SAAS,yCAAyC;AAE9D;;;ACxJA,SAAgB,6BACd,SACA,UAII,CAAC,GACwB;CAC7B,OAAO,wBAAwB;EAC7B;EACA,WAAW,OAAO,YAChB,MAAM,6BAA6B;GACjC,KAAK,QAAQ;GACb,WAAW,QAAQ;GACnB,MAAM,QAAQ;GACd,WAAW,QAAQ;EACrB,CAAC;EACH,gBAAgB,OAAO,EAAE,iBAAiB;GACxC,MAAM,UAAU,MAAM,wBAAwB;IAC5C;IACA,qBAAqB,QAAQ;GAC/B,CAAC;GACD,IAAI,QAAQ,gBACV,QAAQ,6CACN,QAAQ;GAEZ,QAAQ,wBAAwB,OAAO;GACvC,OAAO;EACT;EACA,0BAA0B,OAAO,EAAE,gBAAgB,oBACjD,mCAAmC;GACjC;GACA,GAAI,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc;EACzD,CAAC;CACL,CAAC;AACH"}
+{"version":3,"file":"api-client-foundation-D-Cb6EVg.js","names":["resolveSpaceRequestTimeoutMsForDiagnostics","resolveSpaceRequestTimeoutMsForCliDiagnostics"],"sources":["../src/config/auth-request-compatibility.ts","../src/config/openmeld-request-context.ts","../src/config/request-headers.ts","../src/space/request-timeout.ts","../src/space/fetch-with-timeout.ts","../src/space/api-client-foundation.ts"],"sourcesContent":["import { normalizeBaseUrl } from \"../protocol/urls\";\nimport type { StoredAuthSession } from \"./auth-session\";\nimport { isLoopbackHostname } from \"./loopback-hostname\";\n\nexport type AuthRequestCompatibilityReason =\n  | \"invalid_request_url\"\n  | \"invalid_auth_url\"\n  | \"insecure_transport\"\n  | \"host_mismatch\"\n  | \"loopback\"\n  | \"same_host\"\n  | \"gateway_sibling\";\n\nexport type AuthRequestCompatibility = {\n  compatible: boolean;\n  reason: AuthRequestCompatibilityReason;\n  requestHost: string | null;\n  authHost: string | null;\n  expectedGatewayHost: string | null;\n};\n\nexport function resolveAuthRequestCompatibility(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthRequestCompatibility {\n  const requestUrl = parseUrlOrNull(input.requestUrl);\n  if (!requestUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_request_url\",\n      requestHost: null,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const authBaseUrl = parseUrlOrNull(input.session.authBaseUrl);\n  if (!authBaseUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_auth_url\",\n      requestHost: requestUrl.host,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const expectedGatewayHost = deriveGatewayHost(authBaseUrl);\n  const requestHost = requestUrl.host;\n  const authHost = authBaseUrl.host;\n\n  if (\n    (isLoopbackHostname(requestUrl.hostname) &&\n      isLoopbackHostname(authBaseUrl.hostname)) ||\n    // Isolated worktrees share a hostname across Auth and Gateway ports.\n    // Never treat different named localhost lanes as interchangeable.\n    (requestUrl.hostname.endsWith(\".localhost\") &&\n      requestUrl.hostname === authBaseUrl.hostname &&\n      isHttpTransportProtocol(authBaseUrl.protocol) &&\n      [\"http:\", \"https:\", \"ws:\", \"wss:\"].includes(requestUrl.protocol))\n  ) {\n    return {\n      compatible: true,\n      reason: \"loopback\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (!isSecureTransportProtocol(requestUrl.protocol)) {\n    return {\n      compatible: false,\n      reason: \"insecure_transport\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (requestHost === authHost) {\n    return {\n      compatible: true,\n      reason: \"same_host\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (expectedGatewayHost && requestHost === expectedGatewayHost) {\n    return {\n      compatible: true,\n      reason: \"gateway_sibling\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  return {\n    compatible: false,\n    reason: \"host_mismatch\",\n    requestHost,\n    authHost,\n    expectedGatewayHost,\n  };\n}\n\nexport function deriveAuthBaseUrlFromGatewayUrl(\n  gatewayUrl: string\n): string | null {\n  const parsed = parseUrlOrNull(gatewayUrl);\n  if (!parsed) {\n    return null;\n  }\n  if (!isHttpTransportProtocol(parsed.protocol)) {\n    return null;\n  }\n  if (!parsed.hostname.startsWith(\"gateway.\")) {\n    return null;\n  }\n\n  const authUrl = new URL(parsed.toString());\n  authUrl.hostname = `auth.${parsed.hostname.slice(\"gateway.\".length)}`;\n  authUrl.pathname = \"/\";\n  authUrl.search = \"\";\n  authUrl.hash = \"\";\n  return normalizeBaseUrl(authUrl.toString());\n}\n\nfunction deriveGatewayHost(authBaseUrl: URL): string | null {\n  if (!authBaseUrl.hostname.startsWith(\"auth.\")) {\n    return null;\n  }\n\n  const gatewayUrl = new URL(authBaseUrl.toString());\n  gatewayUrl.hostname = `gateway.${authBaseUrl.hostname.slice(\"auth.\".length)}`;\n  return gatewayUrl.host;\n}\n\nfunction parseUrlOrNull(value: string): URL | null {\n  try {\n    return new URL(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction isSecureTransportProtocol(protocol: string): boolean {\n  return protocol === \"https:\" || protocol === \"wss:\";\n}\n\nfunction isHttpTransportProtocol(protocol: string): boolean {\n  return protocol === \"http:\" || protocol === \"https:\";\n}\n","import crypto from \"node:crypto\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\n\nexport type OpenMeldRequestContextProfileIdentity = {\n  openMeldProfileId: string;\n  profileKind?: \"human\" | \"agent\" | \"system\";\n  kind?: \"human\" | \"agent\";\n  profileHandle?: string;\n  profileName: string;\n  ownerUserId?: string;\n  ownerName?: string;\n  agentControllerConversationId?: string;\n};\n\nexport function buildOpenMeldRequestContextFromProfile(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestId?: string;\n  agentControllerConversationId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const agentControllerConversationId = normalizeOptionalText(\n    input.agentControllerConversationId\n  );\n  const ownerName = normalizeOptionalText(input.openMeldProfile.ownerName);\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.openMeldProfile.openMeldProfileId,\n      profileKind: input.openMeldProfile.profileKind,\n      profileHandle: input.openMeldProfile.profileHandle,\n      profileName: input.openMeldProfile.profileName,\n      ownerUserId: input.openMeldProfile.ownerUserId,\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nexport function buildOpenMeldRequestContextFromProfileIdentity(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const profileHandle = normalizeOptionalText(\n    input.profileIdentity.profileHandle\n  );\n  const ownerUserId = normalizeOptionalText(input.profileIdentity.ownerUserId);\n  const ownerName = normalizeOptionalText(input.profileIdentity.ownerName);\n  const agentControllerConversationId = normalizeOptionalText(\n    input.profileIdentity.agentControllerConversationId\n  );\n  const profileKind =\n    input.profileIdentity.profileKind ??\n    (input.profileIdentity.kind === \"human\" ||\n    input.profileIdentity.kind === \"agent\"\n      ? input.profileIdentity.kind\n      : \"system\");\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.profileIdentity.openMeldProfileId,\n      profileKind,\n      ...(profileHandle ? { profileHandle } : {}),\n      profileName: input.profileIdentity.profileName,\n      ...(ownerUserId ? { ownerUserId } : {}),\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import { createHash } from \"node:crypto\";\nimport {\n  buildOpenMeldRequestContextHeaders,\n  type OpenMeldRequestContextHeadersInput,\n} from \"@openmeld/gateway-contract\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport {\n  type AuthRequestCompatibilityReason,\n  resolveAuthRequestCompatibility,\n} from \"./auth-request-compatibility\";\nimport {\n  type AuthSessionStateReasonCode,\n  getAuthSessionState,\n  type StoredAuthSession,\n} from \"./auth-session\";\nimport { resolveAuthSessionExpiryEligibility } from \"./auth-session-expiry\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\nimport {\n  buildOpenMeldRequestContextFromProfile,\n  buildOpenMeldRequestContextFromProfileIdentity,\n  type OpenMeldRequestContextProfileIdentity,\n} from \"./openmeld-request-context\";\n\nconst DEFAULT_TOKEN_TYPE = \"Bearer\";\nconst AUTHORIZATION_HEADER = \"Authorization\";\n\n// Ephemeral correlation for the exact credential attached to a request/socket.\n// Never include this fingerprint in persisted or uploaded diagnostics.\nexport function fingerprintRequestAuthorization(authorization: string): string {\n  return createHash(\"sha256\").update(authorization).digest(\"hex\");\n}\n\ntype RequestAuthHeadersInput = {\n  authSession?: StoredAuthSession | null;\n  expectedOwnerUserId?: string;\n  requestUrl: string;\n};\n\ntype OpenMeldRequestContextHeadersWithAuthInput =\n  OpenMeldRequestContextHeadersInput & {\n    authSession?: StoredAuthSession | null;\n    requestUrl: string;\n  };\n\nexport type AuthTokenAttachment =\n  | {\n      status: \"attachable\";\n      token: string;\n      tokenType: string;\n    }\n  | {\n      status: \"dropped\";\n      reason:\n        | \"empty_token\"\n        | \"session_expired\"\n        | \"session_expiry_invalid\"\n        | AuthRequestCompatibilityReason;\n      requestHost: string | null;\n      authHost: string | null;\n      expectedGatewayHost: string | null;\n    };\n\nexport type DroppedAuthTokenAttachment = Extract<\n  AuthTokenAttachment,\n  { status: \"dropped\" }\n>;\n\nexport type AuthRequestCredentialFailureReason =\n  | DroppedAuthTokenAttachment[\"reason\"]\n  | AuthSessionStateReasonCode\n  | \"session_invalid\"\n  | \"session_revoked\";\n\nexport class AuthRequestCredentialError extends Error {\n  readonly retryAfterMs?: number;\n  readonly authHost: string | null;\n  readonly expectedGatewayHost: string | null;\n  readonly reason: AuthRequestCredentialFailureReason;\n  readonly requestHost: string | null;\n  readonly droppedAttachment?: DroppedAuthTokenAttachment;\n\n  constructor(input: {\n    retryAfterMs?: number;\n    authHost: string | null;\n    expectedGatewayHost: string | null;\n    reason: AuthRequestCredentialFailureReason;\n    requestHost: string | null;\n    droppedAttachment?: DroppedAuthTokenAttachment;\n  }) {\n    super(\n      `OpenMeld refused to send a request with unusable stored credentials (${input.reason}).`\n    );\n    this.name = \"AuthRequestCredentialError\";\n    this.authHost = input.authHost;\n    this.expectedGatewayHost = input.expectedGatewayHost;\n    this.reason = input.reason;\n    this.requestHost = input.requestHost;\n    this.droppedAttachment = input.droppedAttachment;\n    this.retryAfterMs = input.retryAfterMs;\n  }\n}\n\nexport async function buildRequestAuthHeaders(\n  input: RequestAuthHeadersInput\n): Promise<Record<string, string>> {\n  const headers: Record<string, string> = {};\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldRequestContextHeadersWithAuth(\n  input: OpenMeldRequestContextHeadersWithAuthInput\n): Promise<Record<string, string>> {\n  const headers = buildOpenMeldRequestContextHeaders(input);\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldProfileRequestHeadersWithAuth(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  agentControllerConversationId?: string;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfile({\n      openMeldProfile: input.openMeldProfile,\n      agentControllerConversationId: input.agentControllerConversationId,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport async function buildOpenMeldProfileIdentityRequestHeadersWithAuth(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfileIdentity({\n      profileIdentity: input.profileIdentity,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport function withSpacePassword(\n  requestContext: OpenMeldRequestContext,\n  spacePassword?: string\n): OpenMeldRequestContextHeadersInput {\n  return {\n    requestContext,\n    ...(spacePassword === undefined ? {} : { spacePassword }),\n  };\n}\n\n// One decision for \"can this stored session authenticate this request\", with\n// the drop reason preserved. Header building and the daemon stream connect\n// gate must share this so they cannot drift apart.\nexport function resolveAuthTokenAttachment(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthTokenAttachment {\n  const compatibility = resolveAuthRequestCompatibility({\n    session: input.session,\n    requestUrl: input.requestUrl,\n  });\n  const token = normalizeAccessToken(input.session);\n  if (!token) {\n    return {\n      status: \"dropped\",\n      reason: \"empty_token\",\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  if (!compatibility.compatible) {\n    return {\n      status: \"dropped\",\n      reason: compatibility.reason,\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  const expiryReason = resolveSessionExpiryReason(input.session);\n  if (expiryReason) {\n    return {\n      status: \"dropped\",\n      reason: expiryReason,\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  return {\n    status: \"attachable\",\n    token,\n    tokenType: normalizeTokenType(input.session.tokenType),\n  };\n}\n\nexport function requireAuthTokenAttachment(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): Extract<AuthTokenAttachment, { status: \"attachable\" }> {\n  const attachment = resolveAuthTokenAttachment(input);\n  if (attachment.status === \"dropped\") {\n    throw createAuthRequestCredentialError(attachment);\n  }\n  return attachment;\n}\n\nasync function attachAuthHeader(\n  headers: Record<string, string>,\n  input: RequestAuthHeadersInput\n): Promise<void> {\n  const session = await resolveAuthSessionForHeaders(input);\n  if (\n    input.expectedOwnerUserId &&\n    session?.user?.id !== input.expectedOwnerUserId\n  ) {\n    throw new Error(\"auth.session_owner_changed\");\n  }\n  if (session === null) {\n    // No stored credentials exist, so there is nothing to strip: the caller\n    // is knowingly sending an unauthenticated request.\n    return;\n  }\n\n  let attachment: Extract<AuthTokenAttachment, { status: \"attachable\" }>;\n  try {\n    attachment = requireAuthTokenAttachment({\n      session,\n      requestUrl: input.requestUrl,\n    });\n  } catch (error) {\n    if (error instanceof AuthRequestCredentialError) {\n      logRejectedAuthRequestCredential(error);\n    }\n    throw error;\n  }\n  headers[AUTHORIZATION_HEADER] = `${attachment.tokenType} ${attachment.token}`;\n}\n\nfunction logRejectedAuthRequestCredential(\n  error: AuthRequestCredentialError\n): void {\n  console.error(\"[openmeld.auth.request_credential_rejected]\", {\n    authHost: error.authHost,\n    expectedGatewayHost: error.expectedGatewayHost,\n    reason: error.reason,\n    requestHost: error.requestHost,\n  });\n}\n\nasync function resolveAuthSessionForHeaders(\n  input: RequestAuthHeadersInput\n): Promise<StoredAuthSession | null> {\n  if (input.authSession !== undefined) {\n    return input.authSession;\n  }\n\n  const sessionState = await getAuthSessionState({ refreshExpired: true });\n  if (sessionState.state === \"missing\") {\n    return null;\n  }\n  if (sessionState.state !== \"valid\" || sessionState.session === null) {\n    const error = new AuthRequestCredentialError({\n      retryAfterMs: sessionState.retryAfterMs,\n      authHost: null,\n      expectedGatewayHost: null,\n      reason:\n        sessionState.reasonCode ??\n        (sessionState.state === \"revoked\"\n          ? \"session_revoked\"\n          : \"session_invalid\"),\n      requestHost: parseRequestHost(input.requestUrl),\n    });\n    logRejectedAuthRequestCredential(error);\n    throw error;\n  }\n\n  return sessionState.session;\n}\n\nfunction createAuthRequestCredentialError(\n  attachment: DroppedAuthTokenAttachment\n): AuthRequestCredentialError {\n  return new AuthRequestCredentialError({\n    authHost: attachment.authHost,\n    expectedGatewayHost: attachment.expectedGatewayHost,\n    reason: attachment.reason,\n    requestHost: attachment.requestHost,\n    droppedAttachment: attachment,\n  });\n}\n\nfunction parseRequestHost(requestUrl: string): string | null {\n  try {\n    return new URL(requestUrl).host || null;\n  } catch {\n    return null;\n  }\n}\n\nfunction normalizeAccessToken(session: StoredAuthSession): string {\n  return String(session.accessToken ?? \"\").trim();\n}\n\nfunction normalizeTokenType(tokenType: string | undefined): string {\n  const normalized = String(tokenType ?? \"\").trim();\n  return normalized.length > 0 ? normalized : DEFAULT_TOKEN_TYPE;\n}\n\nfunction resolveSessionExpiryReason(\n  session: StoredAuthSession\n): \"session_expired\" | \"session_expiry_invalid\" | null {\n  const eligibility = resolveAuthSessionExpiryEligibility(session.expiresAt);\n  if (eligibility.status === \"invalid\") {\n    return \"session_expiry_invalid\";\n  }\n  return eligibility.status === \"expired\" ? \"session_expired\" : null;\n}\n\nexport function canAttachAuthTokenToRequest(\n  session: StoredAuthSession,\n  requestUrl: string\n): boolean {\n  return (\n    resolveAuthTokenAttachment({\n      session,\n      requestUrl,\n    }).status === \"attachable\"\n  );\n}\n","import {\n  DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS,\n  DEFAULT_SPACE_REQUEST_TIMEOUT_MS,\n  MAX_SPACE_REQUEST_TIMEOUT_MS,\n  MIN_SPACE_REQUEST_TIMEOUT_MS,\n} from \"../strategy-constants\";\n\nconst SPACE_REQUEST_TIMEOUT_ENV_KEY = \"OPENMELD_SPACE_REQUEST_TIMEOUT_MS\";\n\nexport function resolveSpaceRequestTimeoutMs(override?: number): number {\n  if (isFinitePositiveNumber(override)) {\n    return clampSpaceRequestTimeoutMs(override);\n  }\n\n  const fromEnv = Number.parseInt(\n    String(process.env[SPACE_REQUEST_TIMEOUT_ENV_KEY] ?? \"\"),\n    10\n  );\n  if (isFinitePositiveNumber(fromEnv)) {\n    return clampSpaceRequestTimeoutMs(fromEnv);\n  }\n\n  return DEFAULT_SPACE_REQUEST_TIMEOUT_MS;\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMs(undefined);\n}\n\nexport function resolveSpaceConversationValidateTimeoutMs(): number {\n  return Math.max(\n    resolveSpaceRequestTimeoutMs(undefined),\n    DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS\n  );\n}\n\nfunction clampSpaceRequestTimeoutMs(value: number): number {\n  const normalized = Math.trunc(value);\n  return Math.max(\n    MIN_SPACE_REQUEST_TIMEOUT_MS,\n    Math.min(MAX_SPACE_REQUEST_TIMEOUT_MS, normalized)\n  );\n}\n\nfunction isFinitePositiveNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value) && value > 0;\n}\n","import {\n  resolveSpaceRequestTimeoutMs,\n  resolveSpaceRequestTimeoutMsForDiagnostics as resolveSpaceRequestTimeoutMsForCliDiagnostics,\n} from \"./request-timeout\";\n\nexport async function fetchSpaceRequestWithTimeout(input: {\n  url: string;\n  operation: string;\n  init?: RequestInit;\n  timeoutMs?: number;\n}): Promise<Response> {\n  const timeoutMs = resolveSpaceRequestTimeoutMs(input.timeoutMs);\n  const timeoutSignal = AbortSignal.timeout(timeoutMs);\n  const composed = composeAbortSignals(input.init?.signal, timeoutSignal);\n\n  try {\n    try {\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    } catch (error) {\n      // A keep-alive connection that a proxy silently dropped fails exactly\n      // once and undici evicts it; the retry rides a fresh connection. This\n      // is what keeps a long-lived service working behind flaky proxies\n      // without asking users to touch their network config.\n      if (\n        timeoutSignal.aborted ||\n        composed.signal.aborted ||\n        !shouldWrapNetworkRequestError(error)\n      ) {\n        throw error;\n      }\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    }\n  } catch (error) {\n    if (timeoutSignal.aborted) {\n      throw createSpaceRequestTimeoutError({\n        operation: input.operation,\n        timeoutMs,\n        cause: error,\n      });\n    }\n    if (shouldWrapNetworkRequestError(error)) {\n      throw createSpaceRequestNetworkError({\n        operation: input.operation,\n        url: input.url,\n        cause: error,\n      });\n    }\n    throw error;\n  } finally {\n    composed.cleanup();\n  }\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMsForCliDiagnostics();\n}\n\nfunction createSpaceRequestTimeoutError(input: {\n  operation: string;\n  timeoutMs: number;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request timed out after ${input.timeoutMs}ms`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.timeout\";\n  return error;\n}\n\nfunction createSpaceRequestNetworkError(input: {\n  operation: string;\n  url: string;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request could not reach ${describeRequestTarget(input.url)} (${toErrorMessage(input.cause)})`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.request_failed\";\n  return error;\n}\n\nfunction composeAbortSignals(\n  parent: AbortSignal | null | undefined,\n  timeout: AbortSignal\n): { signal: AbortSignal; cleanup: () => void } {\n  if (!parent) {\n    return {\n      signal: timeout,\n      cleanup: () => undefined,\n    };\n  }\n\n  if (parent.aborted || timeout.aborted) {\n    const controller = new AbortController();\n    controller.abort();\n    return {\n      signal: controller.signal,\n      cleanup: () => undefined,\n    };\n  }\n\n  const controller = new AbortController();\n  const abort = () => {\n    controller.abort();\n  };\n\n  parent.addEventListener(\"abort\", abort, { once: true });\n  timeout.addEventListener(\"abort\", abort, { once: true });\n\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      parent.removeEventListener(\"abort\", abort);\n      timeout.removeEventListener(\"abort\", abort);\n    },\n  };\n}\n\nfunction describeRequestTarget(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return url;\n  }\n}\n\nfunction toErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    const message = error.message.trim();\n    return message.length > 0 ? message : \"request failed\";\n  }\n  const message = String(error ?? \"\").trim();\n  return message.length > 0 ? message : \"request failed\";\n}\n\nfunction shouldWrapNetworkRequestError(error: unknown): boolean {\n  if (error instanceof TypeError) {\n    return true;\n  }\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    typeof error.code === \"string\" &&\n    error.code.startsWith(\"ERR_SSL_\")\n  ) {\n    return true;\n  }\n  const message = toErrorMessage(error).toLowerCase();\n  return (\n    message.includes(\"fetch failed\") ||\n    message.includes(\"failed to fetch\") ||\n    message.includes(\"network request failed\") ||\n    message.includes(\"ssl_decryption_failed_or_bad_record_mac\")\n  );\n}\n","import {\n  createOpenMeldApiClient,\n  type OpenMeldApiClientFoundation,\n} from \"@openmeld/api-client\";\nimport {\n  buildOpenMeldRequestContextHeaders,\n  OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID,\n} from \"@openmeld/gateway-contract\";\nimport { buildRequestAuthHeaders } from \"../config/request-headers\";\nimport { fetchSpaceRequestWithTimeout } from \"./fetch-with-timeout\";\n\nexport function createCliApiClientFoundation(\n  baseUrl: string,\n  options: {\n    onAuthHeadersResolved?: (headers: Record<string, string>) => void;\n    organizationId?: string;\n    expectedOwnerUserId?: string;\n  } = {}\n): OpenMeldApiClientFoundation {\n  return createOpenMeldApiClient({\n    baseUrl,\n    transport: async (request) =>\n      await fetchSpaceRequestWithTimeout({\n        url: request.url,\n        operation: request.operation,\n        init: request.init,\n        timeoutMs: request.timeoutMs,\n      }),\n    getAuthHeaders: async ({ requestUrl }) => {\n      const headers = await buildRequestAuthHeaders({\n        requestUrl,\n        expectedOwnerUserId: options.expectedOwnerUserId,\n      });\n      if (options.organizationId) {\n        headers[OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID] =\n          options.organizationId;\n      }\n      options.onAuthHeadersResolved?.(headers);\n      return headers;\n    },\n    getRequestContextHeaders: async ({ requestContext, spacePassword }) =>\n      buildOpenMeldRequestContextHeaders({\n        requestContext,\n        ...(spacePassword === undefined ? {} : { spacePassword }),\n      }),\n  });\n}\n"],"mappings":";;;;;;;;AAqBA,SAAgB,gCAAgC,OAGnB;CAC3B,MAAM,aAAa,eAAe,MAAM,UAAU;CAClD,IAAI,CAAC,YACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa;EACb,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,cAAc,eAAe,MAAM,QAAQ,WAAW;CAC5D,IAAI,CAAC,aACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa,WAAW;EACxB,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,sBAAsB,kBAAkB,WAAW;CACzD,MAAM,cAAc,WAAW;CAC/B,MAAM,WAAW,YAAY;CAE7B,IACG,mBAAmB,WAAW,QAAQ,KACrC,mBAAmB,YAAY,QAAQ,KAGxC,WAAW,SAAS,SAAS,YAAY,KACxC,WAAW,aAAa,YAAY,YACpC,wBAAwB,YAAY,QAAQ,KAC5C;EAAC;EAAS;EAAU;EAAO;CAAM,CAAC,CAAC,SAAS,WAAW,QAAQ,GAEjE,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,CAAC,0BAA0B,WAAW,QAAQ,GAChD,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,gBAAgB,UAClB,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,uBAAuB,gBAAgB,qBACzC,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,gCACd,YACe;CACf,MAAM,SAAS,eAAe,UAAU;CACxC,IAAI,CAAC,QACH,OAAO;CAET,IAAI,CAAC,wBAAwB,OAAO,QAAQ,GAC1C,OAAO;CAET,IAAI,CAAC,OAAO,SAAS,WAAW,UAAU,GACxC,OAAO;CAGT,MAAM,UAAU,IAAI,IAAI,OAAO,SAAS,CAAC;CACzC,QAAQ,WAAW,QAAQ,OAAO,SAAS,MAAM,CAAiB;CAClE,QAAQ,WAAW;CACnB,QAAQ,SAAS;CACjB,QAAQ,OAAO;CACf,OAAO,iBAAiB,QAAQ,SAAS,CAAC;AAC5C;AAEA,SAAS,kBAAkB,aAAiC;CAC1D,IAAI,CAAC,YAAY,SAAS,WAAW,OAAO,GAC1C,OAAO;CAGT,MAAM,aAAa,IAAI,IAAI,YAAY,SAAS,CAAC;CACjD,WAAW,WAAW,WAAW,YAAY,SAAS,MAAM,CAAc;CAC1E,OAAO,WAAW;AACpB;AAEA,SAAS,eAAe,OAA2B;CACjD,IAAI;EACF,OAAO,IAAI,IAAI,KAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OAAO,aAAa,YAAY,aAAa;AAC/C;AAEA,SAAS,wBAAwB,UAA2B;CAC1D,OAAO,aAAa,WAAW,aAAa;AAC9C;;;AC5IA,SAAgB,uCAAuC,OAI5B;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gCAAgC,sBACpC,MAAM,6BACR;CACA,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CAEvE,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC,aAAa,MAAM,gBAAgB;GACnC,eAAe,MAAM,gBAAgB;GACrC,aAAa,MAAM,gBAAgB;GACnC,aAAa,MAAM,gBAAgB;GACnC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAgB,+CAA+C,OAGpC;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gBAAgB,sBACpB,MAAM,gBAAgB,aACxB;CACA,MAAM,cAAc,sBAAsB,MAAM,gBAAgB,WAAW;CAC3E,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CACvE,MAAM,gCAAgC,sBACpC,MAAM,gBAAgB,6BACxB;CACA,MAAM,cACJ,MAAM,gBAAgB,gBACrB,MAAM,gBAAgB,SAAS,WAChC,MAAM,gBAAgB,SAAS,UAC3B,MAAM,gBAAgB,OACtB;CAEN,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC;GACA,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;GACzC,aAAa,MAAM,gBAAgB;GACnC,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;GACrC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;ACxDA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAI7B,SAAgB,gCAAgC,eAA+B;CAC7E,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,OAAO,KAAK;AAChE;AA2CA,IAAa,6BAAb,cAAgD,MAAM;CACpD;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,OAOT;EACD,MACE,wEAAwE,MAAM,OAAO,GACvF;EACA,KAAK,OAAO;EACZ,KAAK,WAAW,MAAM;EACtB,KAAK,sBAAsB,MAAM;EACjC,KAAK,SAAS,MAAM;EACpB,KAAK,cAAc,MAAM;EACzB,KAAK,oBAAoB,MAAM;EAC/B,KAAK,eAAe,MAAM;CAC5B;AACF;AAEA,eAAsB,wBACpB,OACiC;CACjC,MAAM,UAAkC,CAAC;CACzC,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CACpB,OACiC;CACjC,MAAM,UAAU,mCAAmC,KAAK;CACxD,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CAA2C,OAM7B;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,uCAAuC;GACrD,iBAAiB,MAAM;GACvB,+BAA+B,MAAM;EACvC,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAEA,eAAsB,mDAAmD,OAKrC;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,+CAA+C,EAC7D,iBAAiB,MAAM,gBACzB,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAeA,SAAgB,2BAA2B,OAGnB;CACtB,MAAM,gBAAgB,gCAAgC;EACpD,SAAS,MAAM;EACf,YAAY,MAAM;CACpB,CAAC;CACD,MAAM,QAAQ,qBAAqB,MAAM,OAAO;CAChD,IAAI,CAAC,OACH,OAAO;EACL,QAAQ;EACR,QAAQ;EACR,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,IAAI,CAAC,cAAc,YACjB,OAAO;EACL,QAAQ;EACR,QAAQ,cAAc;EACtB,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,MAAM,eAAe,2BAA2B,MAAM,OAAO;CAC7D,IAAI,cACF,OAAO;EACL,QAAQ;EACR,QAAQ;EACR,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,OAAO;EACL,QAAQ;EACR;EACA,WAAW,mBAAmB,MAAM,QAAQ,SAAS;CACvD;AACF;AAEA,SAAgB,2BAA2B,OAGgB;CACzD,MAAM,aAAa,2BAA2B,KAAK;CACnD,IAAI,WAAW,WAAW,WACxB,MAAM,iCAAiC,UAAU;CAEnD,OAAO;AACT;AAEA,eAAe,iBACb,SACA,OACe;CACf,MAAM,UAAU,MAAM,6BAA6B,KAAK;CACxD,IACE,MAAM,uBACN,SAAS,MAAM,OAAO,MAAM,qBAE5B,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,YAAY,MAGd;CAGF,IAAI;CACJ,IAAI;EACF,aAAa,2BAA2B;GACtC;GACA,YAAY,MAAM;EACpB,CAAC;CACH,SAAS,OAAO;EACd,IAAI,iBAAiB,4BACnB,iCAAiC,KAAK;EAExC,MAAM;CACR;CACA,QAAQ,wBAAwB,GAAG,WAAW,UAAU,GAAG,WAAW;AACxE;AAEA,SAAS,iCACP,OACM;CACN,QAAQ,MAAM,+CAA+C;EAC3D,UAAU,MAAM;EAChB,qBAAqB,MAAM;EAC3B,QAAQ,MAAM;EACd,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,6BACb,OACmC;CACnC,IAAI,MAAM,gBAAgB,KAAA,GACxB,OAAO,MAAM;CAGf,MAAM,eAAe,MAAM,oBAAoB,EAAE,gBAAgB,KAAK,CAAC;CACvE,IAAI,aAAa,UAAU,WACzB,OAAO;CAET,IAAI,aAAa,UAAU,WAAW,aAAa,YAAY,MAAM;EACnE,MAAM,QAAQ,IAAI,2BAA2B;GAC3C,cAAc,aAAa;GAC3B,UAAU;GACV,qBAAqB;GACrB,QACE,aAAa,eACZ,aAAa,UAAU,YACpB,oBACA;GACN,aAAa,iBAAiB,MAAM,UAAU;EAChD,CAAC;EACD,iCAAiC,KAAK;EACtC,MAAM;CACR;CAEA,OAAO,aAAa;AACtB;AAEA,SAAS,iCACP,YAC4B;CAC5B,OAAO,IAAI,2BAA2B;EACpC,UAAU,WAAW;EACrB,qBAAqB,WAAW;EAChC,QAAQ,WAAW;EACnB,aAAa,WAAW;EACxB,mBAAmB;CACrB,CAAC;AACH;AAEA,SAAS,iBAAiB,YAAmC;CAC3D,IAAI;EACF,OAAO,IAAI,IAAI,UAAU,CAAC,CAAC,QAAQ;CACrC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,qBAAqB,SAAoC;CAChE,OAAO,OAAO,QAAQ,eAAe,EAAE,CAAC,CAAC,KAAK;AAChD;AAEA,SAAS,mBAAmB,WAAuC;CACjE,MAAM,aAAa,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK;CAChD,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,2BACP,SACqD;CACrD,MAAM,cAAc,oCAAoC,QAAQ,SAAS;CACzE,IAAI,YAAY,WAAW,WACzB,OAAO;CAET,OAAO,YAAY,WAAW,YAAY,oBAAoB;AAChE;AAEA,SAAgB,4BACd,SACA,YACS;CACT,OACE,2BAA2B;EACzB;EACA;CACF,CAAC,CAAC,CAAC,WAAW;AAElB;;;ACvVA,MAAM,gCAAgC;AAEtC,SAAgB,6BAA6B,UAA2B;CACtE,IAAI,uBAAuB,QAAQ,GACjC,OAAO,2BAA2B,QAAQ;CAG5C,MAAM,UAAU,OAAO,SACrB,OAAO,QAAQ,IAAI,kCAAkC,EAAE,GACvD,EACF;CACA,IAAI,uBAAuB,OAAO,GAChC,OAAO,2BAA2B,OAAO;CAG3C,OAAO;AACT;AAEA,SAAgBA,+CAAqD;CACnE,OAAO,6BAA6B,KAAA,CAAS;AAC/C;AASA,SAAS,2BAA2B,OAAuB;CAEzD,OAAO,KAAK,IACV,8BACA,KAAK,IAAI,8BAHQ,KAAK,MAAM,KAGoB,CAAC,CACnD;AACF;AAEA,SAAS,uBAAuB,OAAiC;CAC/D,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ;AACxE;;;ACzCA,eAAsB,6BAA6B,OAK7B;CACpB,MAAM,YAAY,6BAA6B,MAAM,SAAS;CAC9D,MAAM,gBAAgB,YAAY,QAAQ,SAAS;CACnD,MAAM,WAAW,oBAAoB,MAAM,MAAM,QAAQ,aAAa;CAEtE,IAAI;EACF,IAAI;GACF,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH,SAAS,OAAO;GAKd,IACE,cAAc,WACd,SAAS,OAAO,WAChB,CAAC,8BAA8B,KAAK,GAEpC,MAAM;GAER,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH;CACF,SAAS,OAAO;EACd,IAAI,cAAc,SAChB,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB;GACA,OAAO;EACT,CAAC;EAEH,IAAI,8BAA8B,KAAK,GACrC,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB,KAAK,MAAM;GACX,OAAO;EACT,CAAC;EAEH,MAAM;CACR,UAAU;EACR,SAAS,QAAQ;CACnB;AACF;AAEA,SAAgB,6CAAqD;CACnE,OAAOC,6CAA8C;AACvD;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,MAAM,UAAU,KAC9D,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,sBAAsB,MAAM,GAAG,EAAE,IAAI,eAAe,MAAM,KAAK,EAAE,IAC/G,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,oBACP,QACA,SAC8C;CAC9C,IAAI,CAAC,QACH,OAAO;EACL,QAAQ;EACR,eAAe,KAAA;CACjB;CAGF,IAAI,OAAO,WAAW,QAAQ,SAAS;EACrC,MAAM,aAAa,IAAI,gBAAgB;EACvC,WAAW,MAAM;EACjB,OAAO;GACL,QAAQ,WAAW;GACnB,eAAe,KAAA;EACjB;CACF;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,cAAc;EAClB,WAAW,MAAM;CACnB;CAEA,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACtD,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CAEvD,OAAO;EACL,QAAQ,WAAW;EACnB,eAAe;GACb,OAAO,oBAAoB,SAAS,KAAK;GACzC,QAAQ,oBAAoB,SAAS,KAAK;EAC5C;CACF;AACF;AAEA,SAAS,sBAAsB,KAAqB;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,OAAwB;CAC9C,IAAI,iBAAiB,OAAO;EAC1B,MAAM,UAAU,MAAM,QAAQ,KAAK;EACnC,OAAO,QAAQ,SAAS,IAAI,UAAU;CACxC;CACA,MAAM,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CACzC,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,8BAA8B,OAAyB;CAC9D,IAAI,iBAAiB,WACnB,OAAO;CAET,IACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,OAAO,MAAM,SAAS,YACtB,MAAM,KAAK,WAAW,UAAU,GAEhC,OAAO;CAET,MAAM,UAAU,eAAe,KAAK,CAAC,CAAC,YAAY;CAClD,OACE,QAAQ,SAAS,cAAc,KAC/B,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,wBAAwB,KACzC,QAAQ,SAAS,yCAAyC;AAE9D;;;ACxJA,SAAgB,6BACd,SACA,UAII,CAAC,GACwB;CAC7B,OAAO,wBAAwB;EAC7B;EACA,WAAW,OAAO,YAChB,MAAM,6BAA6B;GACjC,KAAK,QAAQ;GACb,WAAW,QAAQ;GACnB,MAAM,QAAQ;GACd,WAAW,QAAQ;EACrB,CAAC;EACH,gBAAgB,OAAO,EAAE,iBAAiB;GACxC,MAAM,UAAU,MAAM,wBAAwB;IAC5C;IACA,qBAAqB,QAAQ;GAC/B,CAAC;GACD,IAAI,QAAQ,gBACV,QAAQ,6CACN,QAAQ;GAEZ,QAAQ,wBAAwB,OAAO;GACvC,OAAO;EACT;EACA,0BAA0B,OAAO,EAAE,gBAAgB,oBACjD,mCAAmC;GACjC;GACA,GAAI,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc;EACzD,CAAC;CACL,CAAC;AACH"}

package/dist/{cli-space-api-skevaFSC.js → cli-space-api-B2l1xMPn.js}

@@ -2,13 +2,13 @@
 
 import { f as toSpaceMetaUrl } from "./urls-CY2uzH2-.js";
 import { Z as openMeldManagedBinaryPath, ct as resolveOpenMeldEnvPreset } from "./lock-Bsl_ElWy.js";
-import { Wr as spaceMemberDirectoryEntrySchema, Yn as OPENMELD_HEADER_REQUEST_ID, fr as gatewayErrorEnvelopeSchema, oi as spaceMetaSchema, sn as createSpaceApi, t as OpenMeldApiClientHttpError } from "./dist-YPzkhLLp.js";
+import { Wr as spaceMemberDirectoryEntrySchema, Yn as OPENMELD_HEADER_REQUEST_ID, fr as gatewayErrorEnvelopeSchema, oi as spaceMetaSchema, sn as createSpaceApi, t as OpenMeldApiClientHttpError } from "./dist-BewA9srP.js";
 import { Z as openMeldSpaceEgressActionSchema } from "./runtime-transport-0F5E6So6.js";
 import { g as isSelfWakeSpaceAction } from "./dist-ChS52b_E.js";
-import { _n as OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV, gn as OPENMELD_DISPATCH_RUNTIME_MODE_ENV, hn as OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV, pn as DISPATCH_OWNED_RUNTIME_MODE, vn as OPENMELD_SPACE_ACTION_TOOL_COMMAND_PATH_ENV, yn as OPENMELD_USER_FACING_CLI_COMMAND_ENV } from "./daemon-frame-transport-E-H3DjWA.js";
+import { _n as OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV, gn as OPENMELD_DISPATCH_RUNTIME_MODE_ENV, hn as OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV, pn as DISPATCH_OWNED_RUNTIME_MODE, vn as OPENMELD_SPACE_ACTION_TOOL_COMMAND_PATH_ENV, yn as OPENMELD_USER_FACING_CLI_COMMAND_ENV } from "./daemon-frame-transport-D-4StENt.js";
 import { n as resolveOpenMeldDistribution } from "./distribution-BDQT2ilb.js";
 import { h as daemonRuntimeRootPath } from "./daemon-state-B44aq2nm.js";
-import { n as fetchSpaceRequestWithTimeout, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-CDlVc0zT.js";
+import { n as fetchSpaceRequestWithTimeout, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-D-Cb6EVg.js";
 import { randomUUID } from "node:crypto";
 import { delimiter, dirname, join, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
@@ -655,4 +655,4 @@ function createCliSpaceApi(baseUrl, options = {}) {
 //#endregion
 export { readDispatchSpaceActionContextForReceiptFromEnv as _, parseSpaceMetaResponse as a, supersedeDispatchSpaceActionRecordForReconsideration as b, readGatewayTextResponse as c, assertDispatchOwnedRuntimePublicWriteAllowed as d, buildDispatchOwnedRuntimeEnv as f, createDispatchSpaceActionContext as g, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as h, parseSpaceMetaPayload as i, toStructuredGatewayFailure as l, DispatchSpaceActionClosedError as m, fetchSpaceMeta as n, GatewayHttpError as o, readDispatchOwnedRuntimeGuard as p, updateSpaceMeta as r, readGatewayJsonResponse as s, createCliSpaceApi as t, parseJsonResponse as u, readDispatchSpaceActionContextFromEnv as v, writeDispatchSpaceActionRecord as x, readDispatchSpaceActionRecord as y };
 
-//# sourceMappingURL=cli-space-api-skevaFSC.js.map
+//# sourceMappingURL=cli-space-api-B2l1xMPn.js.map

package/dist/{cli-space-api-skevaFSC.js.map → cli-space-api-B2l1xMPn.js.map}

@@ -1 +1 @@
-{"version":3,"file":"cli-space-api-skevaFSC.js","names":["normalizeOptionalText","normalizeOptionalText","record"],"sources":["../src/runtime/dispatch-space-action-context.ts","../src/runtime/dispatch-owned-runtime.ts","../src/space/api-json.ts","../src/space/gateway-response.ts","../src/space/space-meta-response.ts","../src/space/meta-api.ts","../src/space/cli-space-api.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport {\n  chmodSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  renameSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { join } from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport {\n  openMeldSpaceEgressActionSchema,\n  spaceMemberDirectoryEntrySchema,\n} from \"@openmeld/schemas\";\nimport type {\n  DispatchSpaceActionClosedReasonCode,\n  OpenMeldSpaceEgressAction,\n  SpaceContract,\n  SpaceMemberDirectoryEntry,\n} from \"@openmeld/schemas/types\";\nimport { isSelfWakeSpaceAction } from \"@openmeld/space-mesh\";\nimport { daemonRuntimeRootPath } from \"../config/daemon-state\";\nimport type { OpenMeldPathResolutionInput } from \"../config/paths\";\nimport {\n  DISPATCH_OWNED_RUNTIME_MODE,\n  OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV,\n  OPENMELD_DISPATCH_RUNTIME_MODE_ENV,\n  OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV,\n} from \"./dispatch-runtime-env\";\n\nexport const OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV =\n  \"OPENMELD_SPACE_ACTION_CONTEXT_PATH\";\n\n/** The local action context is known expired/closed/mismatched: a new ordinary action must be rejected, never recorded. */\nexport class DispatchSpaceActionClosedError extends Error {\n  readonly receipt = \"rejected_closed\" as const;\n  readonly reasonCode: DispatchSpaceActionClosedReasonCode;\n  constructor(\n    reasonCode: DispatchSpaceActionClosedReasonCode,\n    message: string\n  ) {\n    super(message);\n    this.name = \"DispatchSpaceActionClosedError\";\n    this.reasonCode = reasonCode;\n  }\n}\n\nconst DISPATCH_SPACE_ACTION_CONTEXT_VERSION = 1 as const;\nconst DISPATCH_SPACE_ACTION_RECORD_VERSION = 1 as const;\nconst DEFAULT_CONTEXT_TTL_MS = 12 * 60 * 60 * 1000;\n\nexport type DispatchSpaceActionSendTargetReference =\n  | {\n      status: \"loaded\";\n      projection: SpaceMemberDirectoryEntry[];\n      referenceLines: string[];\n    }\n  | {\n      status: \"failed\";\n      errorMessage: string;\n      projection: null;\n      referenceLines: [];\n    };\n\nexport type DispatchSpaceActionContext = {\n  workingCopyId?: string;\n  version: typeof DISPATCH_SPACE_ACTION_CONTEXT_VERSION;\n  actionRecordPath: string;\n  attemptId: string;\n  contextId: string;\n  dispatchId: string;\n  expiresAtMs: number;\n  nonce: string;\n  replyToSignalId: string | null;\n  sendTargetReference: DispatchSpaceActionSendTargetReference;\n  sourceEventId: string;\n  spaceContractSnapshot: Pick<\n    SpaceContract,\n    \"allowedActions\" | \"publicationMode\"\n  > | null;\n  spaceId: string;\n  targetProfileId: string;\n  taskId: string;\n};\n\nexport type DispatchSpaceActionRecord = {\n  version: typeof DISPATCH_SPACE_ACTION_RECORD_VERSION;\n  action: OpenMeldSpaceEgressAction;\n  command: string;\n  contextId: string;\n  createdAtMs: number;\n  nonce: string;\n};\n\nexport type DispatchSpaceActionRecordReadResult =\n  | {\n      status: \"missing\";\n    }\n  | {\n      errorMessage: string;\n      status: \"invalid\";\n    }\n  | {\n      record: DispatchSpaceActionRecord;\n      status: \"loaded\";\n    };\n\nexport function createDispatchSpaceActionContext(input: {\n  workingCopyId?: string;\n  attemptId: string;\n  dispatchId: string;\n  env?: Record<string, string | undefined>;\n  pathInput?: OpenMeldPathResolutionInput;\n  replyToSignalId?: string | null;\n  sendTargetReference: DispatchSpaceActionSendTargetReference;\n  sourceEventId: string;\n  spaceContractSnapshot:\n    | Pick<SpaceContract, \"allowedActions\" | \"publicationMode\">\n    | null\n    | undefined;\n  spaceId: string;\n  targetProfileId: string;\n  taskId: string;\n  ttlMs?: number;\n}): {\n  context: DispatchSpaceActionContext;\n  contextPath: string;\n} {\n  const contextId = randomUUID();\n  const nonce = randomUUID();\n  const contextDir = join(\n    daemonRuntimeRootPath(input.pathInput ?? { env: input.env }),\n    \"dispatch-space-actions\",\n    `${Date.now().toString(36)}-${contextId}`\n  );\n  mkdirSync(contextDir, { recursive: true, mode: 0o700 });\n  chmodSync(contextDir, 0o700);\n\n  const contextPath = join(contextDir, \"context.json\");\n  const actionRecordPath = join(contextDir, \"action.json\");\n  const context: DispatchSpaceActionContext = {\n    ...(input.workingCopyId ? { workingCopyId: input.workingCopyId } : {}),\n    version: DISPATCH_SPACE_ACTION_CONTEXT_VERSION,\n    actionRecordPath,\n    attemptId: input.attemptId,\n    contextId,\n    dispatchId: input.dispatchId,\n    expiresAtMs: Date.now() + (input.ttlMs ?? DEFAULT_CONTEXT_TTL_MS),\n    nonce,\n    replyToSignalId: normalizeOptionalText(input.replyToSignalId),\n    sendTargetReference: input.sendTargetReference,\n    sourceEventId: input.sourceEventId,\n    spaceContractSnapshot: input.spaceContractSnapshot\n      ? {\n          allowedActions: input.spaceContractSnapshot.allowedActions,\n          publicationMode: input.spaceContractSnapshot.publicationMode,\n        }\n      : null,\n    spaceId: input.spaceId,\n    targetProfileId: input.targetProfileId,\n    taskId: input.taskId,\n  };\n\n  writeJsonFileExclusive(contextPath, context);\n  return { context, contextPath };\n}\n\nexport function readDispatchSpaceActionContextFromEnv(\n  env: NodeJS.ProcessEnv = process.env\n): DispatchSpaceActionContext {\n  const context = readDispatchSpaceActionContextForReceiptFromEnv(env);\n  assertContextActive(context, Date.now());\n  return context;\n}\n\n// Expiry does not erase a prior receipt. Callers may use this context to compare\n// an exact existing action; writeDispatchSpaceActionRecord still rejects new\n// actions after expiry. File reads/uploads and target listing use the active\n// context reader instead.\nexport function readDispatchSpaceActionContextForReceiptFromEnv(\n  env: NodeJS.ProcessEnv = process.env\n): DispatchSpaceActionContext {\n  const contextPath = normalizeOptionalText(\n    env[OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]\n  );\n  if (!contextPath) {\n    throw new Error(\n      \"No active OpenMeld Space Action dispatch context was found. Use this command inside an OpenMeld Space Wake dispatch.\"\n    );\n  }\n  const context = readDispatchSpaceActionContext(contextPath);\n  assertDispatchRuntimeEnvMatchesContext({ context, env });\n  return context;\n}\n\nexport function readDispatchSpaceActionContext(\n  contextPath: string\n): DispatchSpaceActionContext {\n  return parseDispatchSpaceActionContext(readJsonFile(contextPath));\n}\n\nexport function writeDispatchSpaceActionRecord(input: {\n  action: OpenMeldSpaceEgressAction;\n  command: string;\n  context: DispatchSpaceActionContext;\n  nowMs?: number;\n}): DispatchSpaceActionRecord {\n  const parsedAction = openMeldSpaceEgressActionSchema.safeParse(input.action);\n  if (!parsedAction.success) {\n    throw parsedAction.error;\n  }\n  if (isSelfWakeSpaceAction(parsedAction.data, input.context.targetProfileId)) {\n    throw new Error(\n      \"An Agent cannot Wake itself. To reply to the current message, omit wakeTargets (CLI: --wake) and submit the reply again. No action was recorded.\"\n    );\n  }\n\n  const existing = readDispatchSpaceActionRecord({ context: input.context });\n  if (existing.status === \"invalid\") {\n    throw new Error(existing.errorMessage);\n  }\n  if (\n    existing.status === \"loaded\" &&\n    isDeepStrictEqual(existing.record.action, parsedAction.data)\n  ) {\n    return existing.record;\n  }\n  assertContextActive(input.context, input.nowMs ?? Date.now());\n\n  const record: DispatchSpaceActionRecord = {\n    version: DISPATCH_SPACE_ACTION_RECORD_VERSION,\n    action: parsedAction.data,\n    command: input.command,\n    contextId: input.context.contextId,\n    createdAtMs: input.nowMs ?? Date.now(),\n    nonce: input.context.nonce,\n  };\n  try {\n    writeJsonFileExclusive(input.context.actionRecordPath, record);\n  } catch (error) {\n    if (isNodeErrorCode(error, \"EEXIST\")) {\n      const existing = readDispatchSpaceActionRecord({\n        context: input.context,\n      });\n      // A lost acknowledgement may cause the same proposal to be submitted\n      // again. Acknowledge that record, never replace it or accept a new action.\n      if (\n        existing.status === \"loaded\" &&\n        isDeepStrictEqual(existing.record.action, parsedAction.data)\n      ) {\n        return existing.record;\n      }\n      throw new Error(\n        \"An OpenMeld Space Action has already been recorded for this dispatch. A Wake can only have one final Space action.\"\n      );\n    }\n    throw error;\n  }\n  return record;\n}\n\nexport function readDispatchSpaceActionRecord(input: {\n  context: DispatchSpaceActionContext;\n  nowMs?: number;\n}): DispatchSpaceActionRecordReadResult {\n  if (!existsSync(input.context.actionRecordPath)) {\n    return { status: \"missing\" };\n  }\n  try {\n    const record = parseDispatchSpaceActionRecord(\n      readJsonFile(input.context.actionRecordPath)\n    );\n    if (\n      record.contextId !== input.context.contextId ||\n      record.nonce !== input.context.nonce\n    ) {\n      return {\n        status: \"invalid\",\n        errorMessage:\n          \"OpenMeld Space Action record does not match the active dispatch context.\",\n      };\n    }\n    if (record.createdAtMs > input.context.expiresAtMs) {\n      return {\n        status: \"invalid\",\n        errorMessage:\n          \"OpenMeld Space Action record was created after the active dispatch context expired.\",\n      };\n    }\n    return { status: \"loaded\", record };\n  } catch (error) {\n    return {\n      status: \"invalid\",\n      errorMessage: error instanceof Error ? error.message : String(error),\n    };\n  }\n}\n\nexport function supersedeDispatchSpaceActionRecordForReconsideration(input: {\n  context: DispatchSpaceActionContext;\n  nowMs?: number;\n}): { archivedPath: string; record: DispatchSpaceActionRecord } | null {\n  const readResult = readDispatchSpaceActionRecord(input);\n  if (readResult.status === \"missing\") {\n    return null;\n  }\n  if (readResult.status === \"invalid\") {\n    throw new Error(readResult.errorMessage);\n  }\n  const archivedPath = `${input.context.actionRecordPath}.superseded-${String(input.nowMs ?? Date.now())}-${randomUUID()}`;\n  renameSync(input.context.actionRecordPath, archivedPath);\n  return { archivedPath, record: readResult.record };\n}\n\nfunction parseDispatchSpaceActionContext(\n  value: unknown\n): DispatchSpaceActionContext {\n  const record = toRecord(value, \"OpenMeld Space Action context\");\n  const version = record.version;\n  if (version !== DISPATCH_SPACE_ACTION_CONTEXT_VERSION) {\n    throw new Error(\"Unsupported OpenMeld Space Action context version.\");\n  }\n  const sendTargetReference = parseSendTargetReference(\n    record.sendTargetReference\n  );\n  return {\n    version,\n    actionRecordPath: requiredString(\n      record.actionRecordPath,\n      \"actionRecordPath\"\n    ),\n    attemptId: requiredString(record.attemptId, \"attemptId\"),\n    contextId: requiredString(record.contextId, \"contextId\"),\n    dispatchId: requiredString(record.dispatchId, \"dispatchId\"),\n    expiresAtMs: requiredFiniteNumber(record.expiresAtMs, \"expiresAtMs\"),\n    nonce: requiredString(record.nonce, \"nonce\"),\n    replyToSignalId: optionalString(record.replyToSignalId),\n    sendTargetReference,\n    sourceEventId: requiredString(record.sourceEventId, \"sourceEventId\"),\n    spaceContractSnapshot: parseSpaceContractSnapshot(\n      record.spaceContractSnapshot\n    ),\n    spaceId: requiredString(record.spaceId, \"spaceId\"),\n    targetProfileId: requiredString(record.targetProfileId, \"targetProfileId\"),\n    taskId: requiredString(record.taskId, \"taskId\"),\n    ...(record.workingCopyId\n      ? { workingCopyId: requiredString(record.workingCopyId, \"workingCopyId\") }\n      : {}),\n  };\n}\n\nfunction assertDispatchRuntimeEnvMatchesContext(input: {\n  context: DispatchSpaceActionContext;\n  env: NodeJS.ProcessEnv;\n}): void {\n  const mode = normalizeOptionalText(\n    input.env[OPENMELD_DISPATCH_RUNTIME_MODE_ENV]\n  );\n  if (mode !== DISPATCH_OWNED_RUNTIME_MODE) {\n    return;\n  }\n\n  const envDispatchId = normalizeOptionalText(\n    input.env[OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]\n  );\n  if (!envDispatchId) {\n    throw new Error(\n      \"OpenMeld Space Action dispatch runtime is missing the active dispatch ID.\"\n    );\n  }\n  if (envDispatchId !== input.context.dispatchId) {\n    throw new DispatchSpaceActionClosedError(\n      \"space_action.context_mismatch\",\n      \"OpenMeld Space Action dispatch context does not match the active dispatch runtime.\"\n    );\n  }\n\n  const envTargetProfileId = normalizeOptionalText(\n    input.env[OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]\n  );\n  if (!envTargetProfileId) {\n    throw new Error(\n      \"OpenMeld Space Action dispatch runtime is missing the active target profile ID.\"\n    );\n  }\n  if (envTargetProfileId !== input.context.targetProfileId) {\n    throw new DispatchSpaceActionClosedError(\n      \"space_action.context_mismatch\",\n      \"OpenMeld Space Action target profile does not match the active dispatch runtime.\"\n    );\n  }\n}\n\nfunction parseDispatchSpaceActionRecord(\n  value: unknown\n): DispatchSpaceActionRecord {\n  const record = toRecord(value, \"OpenMeld Space Action record\");\n  const version = record.version;\n  if (version !== DISPATCH_SPACE_ACTION_RECORD_VERSION) {\n    throw new Error(\"Unsupported OpenMeld Space Action record version.\");\n  }\n  const parsedAction = openMeldSpaceEgressActionSchema.safeParse(record.action);\n  if (!parsedAction.success) {\n    throw parsedAction.error;\n  }\n  return {\n    version,\n    action: parsedAction.data,\n    command: requiredString(record.command, \"command\"),\n    contextId: requiredString(record.contextId, \"contextId\"),\n    createdAtMs: requiredFiniteNumber(record.createdAtMs, \"createdAtMs\"),\n    nonce: requiredString(record.nonce, \"nonce\"),\n  };\n}\n\nfunction parseSendTargetReference(\n  value: unknown\n): DispatchSpaceActionSendTargetReference {\n  const record = toRecord(value, \"sendTargetReference\");\n  if (record.status === \"loaded\") {\n    if (!Array.isArray(record.projection)) {\n      throw new Error(\n        \"OpenMeld Space Action send target projection must be an array.\"\n      );\n    }\n    return {\n      status: \"loaded\",\n      projection: record.projection.map(parseSendTargetProjectionEntry),\n      referenceLines: parseStringArray(record.referenceLines),\n    };\n  }\n  if (record.status === \"failed\") {\n    return {\n      status: \"failed\",\n      errorMessage: requiredString(record.errorMessage, \"errorMessage\"),\n      projection: null,\n      referenceLines: [],\n    };\n  }\n  throw new Error(\n    \"Invalid OpenMeld Space Action send target reference status.\"\n  );\n}\n\nfunction parseSendTargetProjectionEntry(\n  value: unknown,\n  index: number\n): SpaceMemberDirectoryEntry {\n  const parsed = spaceMemberDirectoryEntrySchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(\n      `OpenMeld Space Action target projection entry ${index} is not a valid Space member directory entry.`\n    );\n  }\n  return parsed.data;\n}\n\nfunction parseSpaceContractSnapshot(\n  value: unknown\n): Pick<SpaceContract, \"allowedActions\" | \"publicationMode\"> | null {\n  if (value === null || value === undefined) {\n    return null;\n  }\n  const record = toRecord(value, \"spaceContractSnapshot\");\n  return {\n    allowedActions: Array.isArray(record.allowedActions)\n      ? (record.allowedActions as SpaceContract[\"allowedActions\"])\n      : [],\n    publicationMode:\n      record.publicationMode === \"raw_context_sharing\"\n        ? \"raw_context_sharing\"\n        : \"collaboration\",\n  };\n}\n\nfunction assertContextActive(\n  context: DispatchSpaceActionContext,\n  nowMs: number\n): void {\n  if (nowMs > context.expiresAtMs) {\n    throw new DispatchSpaceActionClosedError(\n      \"space_action.context_expired\",\n      \"The OpenMeld Space Action dispatch context has expired.\"\n    );\n  }\n}\n\nfunction readJsonFile(path: string): unknown {\n  return JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n}\n\nfunction writeJsonFileExclusive(path: string, value: unknown): void {\n  writeFileSync(path, `${JSON.stringify(value, null, 2)}\\n`, {\n    encoding: \"utf8\",\n    flag: \"wx\",\n    mode: 0o600,\n  });\n  chmodSync(path, 0o600);\n}\n\nfunction toRecord(value: unknown, label: string): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    throw new Error(`${label} must be a JSON object.`);\n  }\n  return value as Record<string, unknown>;\n}\n\nfunction requiredString(value: unknown, fieldName: string): string {\n  const normalized = normalizeOptionalText(value);\n  if (!normalized) {\n    throw new Error(`${fieldName} must be a non-empty string.`);\n  }\n  return normalized;\n}\n\nfunction requiredFiniteNumber(value: unknown, fieldName: string): number {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) {\n    throw new Error(`${fieldName} must be a finite number.`);\n  }\n  return value;\n}\n\nfunction optionalString(value: unknown): string | null {\n  if (value === null || value === undefined) {\n    return null;\n  }\n  return normalizeOptionalText(value);\n}\n\nfunction parseStringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) {\n    return [];\n  }\n  return value\n    .map((item) => normalizeOptionalText(item))\n    .filter((item): item is string => Boolean(item));\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction isNodeErrorCode(error: unknown, code: string): boolean {\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    (error as { code?: unknown }).code === code\n  );\n}\n","import {\n  chmodSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { delimiter, dirname, join, resolve } from \"node:path\";\nimport { daemonRuntimeRootPath } from \"../config/daemon-state\";\nimport {\n  type OpenMeldPathResolutionInput,\n  openMeldManagedBinaryPath,\n  resolveOpenMeldEnvPreset,\n} from \"../config/paths\";\nimport {\n  DISPATCH_OWNED_RUNTIME_MODE,\n  OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV,\n  OPENMELD_DISPATCH_RUNTIME_MODE_ENV,\n  OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV,\n  OPENMELD_SPACE_ACTION_TOOL_COMMAND_PATH_ENV,\n  OPENMELD_USER_FACING_CLI_COMMAND_ENV,\n} from \"./dispatch-runtime-env\";\nimport { OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV } from \"./dispatch-space-action-context\";\nimport {\n  type OpenMeldDistribution,\n  resolveOpenMeldDistribution,\n} from \"./distribution\";\n\nconst DISPATCH_OWNED_RUNTIME_CLI_SHIM_DIRNAME = \"dispatch-owned-cli\";\nconst DISPATCH_SPACE_ACTION_CLI_SHIM_DIRNAME = \"bin\";\nconst OPENMELD_ENV_PRESET_ENV = \"OPENMELD_ENV_PRESET\";\nconst DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES = [\n  \"openmeld\",\n  \"openmeld-dev\",\n  \"openmeld-canary\",\n] as const;\n\nexport type DispatchOwnedRuntimeGuard = {\n  active: boolean;\n  dispatchId: string | null;\n  targetProfileId: string | null;\n};\n\nexport function buildDispatchOwnedRuntimeEnv(input: {\n  dispatchId: string;\n  targetProfileId: string;\n  distribution?: OpenMeldDistribution;\n  env?: Record<string, string | undefined>;\n  cliEntryPath?: string;\n  spaceActionContextPath?: string | null;\n}): Record<string, string | undefined> {\n  // Provider overrides are not a replacement for the carrier's lane. Keep\n  // these non-secret installation selectors without copying unrelated Service\n  // credentials into the provider environment.\n  const env = {\n    OPENMELD_HOME: process.env.OPENMELD_HOME,\n    OPENMELD_ENV_PRESET: process.env.OPENMELD_ENV_PRESET,\n    ...(input.env ?? {}),\n  };\n  const currentPath = normalizeOptionalText(\n    input.env?.PATH ?? process.env.PATH\n  );\n  const shimDir = ensureDispatchOwnedRuntimeCliShims({\n    cliEntryPath: input.cliEntryPath,\n    dispatchId: input.dispatchId,\n    distribution: input.distribution,\n    env,\n    spaceActionContextPath: input.spaceActionContextPath,\n    targetProfileId: input.targetProfileId,\n  });\n  const actionCommand = resolveDispatchOwnedRuntimeActionCliEntryCommand({\n    env,\n  });\n  return {\n    ...env,\n    PATH: prependPathEntry({\n      currentPath,\n      nextEntry: shimDir,\n    }),\n    [OPENMELD_DISPATCH_RUNTIME_MODE_ENV]: DISPATCH_OWNED_RUNTIME_MODE,\n    [OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]: input.dispatchId,\n    [OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]: input.targetProfileId,\n    [OPENMELD_USER_FACING_CLI_COMMAND_ENV]: actionCommand,\n    [OPENMELD_SPACE_ACTION_TOOL_COMMAND_PATH_ENV]: join(shimDir, actionCommand),\n    [OPENMELD_ENV_PRESET_ENV]: resolveDispatchOwnedRuntimeEnvPreset({\n      env,\n    }),\n    ...(input.spaceActionContextPath\n      ? {\n          [OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]:\n            input.spaceActionContextPath,\n        }\n      : {}),\n  };\n}\n\nexport function resolveDispatchOwnedRuntimeActionCliEntryCommand(\n  input: OpenMeldPathResolutionInput = {}\n): \"openmeld\" | \"openmeld-dev\" | \"openmeld-canary\" {\n  const preset = resolveOpenMeldEnvPreset(input);\n  if (preset === \"dev-local\") {\n    return \"openmeld-dev\";\n  }\n  if (preset === \"canary\") {\n    return \"openmeld-canary\";\n  }\n  return \"openmeld\";\n}\n\nexport function resolveDispatchOwnedRuntimeCliShimDir(\n  input: OpenMeldPathResolutionInput & {\n    spaceActionContextPath?: string | null;\n  } = {}\n): string {\n  const spaceActionContextPath = normalizeOptionalText(\n    input.spaceActionContextPath\n  );\n  if (spaceActionContextPath) {\n    return join(\n      dirname(spaceActionContextPath),\n      DISPATCH_SPACE_ACTION_CLI_SHIM_DIRNAME\n    );\n  }\n  return join(\n    daemonRuntimeRootPath(input),\n    \"bin\",\n    DISPATCH_OWNED_RUNTIME_CLI_SHIM_DIRNAME\n  );\n}\n\nexport function ensureDispatchOwnedRuntimeCliShims(input?: {\n  cliEntryPath?: string;\n  distribution?: OpenMeldDistribution;\n  dispatchId?: string;\n  env?: Record<string, string | undefined>;\n  spaceActionContextPath?: string | null;\n  targetProfileId?: string;\n}): string {\n  const distribution = input?.distribution ?? resolveOpenMeldDistribution();\n  const cliEntryPath =\n    distribution === \"binary\"\n      ? resolveDispatchOwnedRuntimeBinaryCliEntryPath({\n          cliEntryPath: input?.cliEntryPath,\n          env: input?.env,\n        })\n      : resolveDispatchOwnedRuntimeCliEntryPath(input?.cliEntryPath);\n  const shimDir = resolveDispatchOwnedRuntimeCliShimDir({\n    env: input?.env,\n    spaceActionContextPath: input?.spaceActionContextPath,\n  });\n  mkdirSync(shimDir, { recursive: true });\n\n  for (const commandName of DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES) {\n    const shimPath = join(shimDir, commandName);\n    const shimSource = buildDispatchOwnedRuntimeCliShimSource({\n      cliEntryPath,\n      commandName,\n      dispatchId: input?.dispatchId,\n      distribution,\n      nodePath: process.execPath,\n      spaceActionContextPath: input?.spaceActionContextPath,\n      targetProfileId: input?.targetProfileId,\n    });\n    if (existsSync(shimPath)) {\n      const currentSource = safeReadTextFile(shimPath);\n      if (currentSource === shimSource) {\n        chmodSync(shimPath, 0o755);\n        continue;\n      }\n    }\n    writeFileSync(shimPath, shimSource, {\n      encoding: \"utf8\",\n      mode: 0o755,\n    });\n    chmodSync(shimPath, 0o755);\n  }\n\n  return shimDir;\n}\n\nexport function readDispatchOwnedRuntimeGuard(\n  env: NodeJS.ProcessEnv = process.env\n): DispatchOwnedRuntimeGuard {\n  const mode = normalizeOptionalText(env[OPENMELD_DISPATCH_RUNTIME_MODE_ENV]);\n  if (mode !== DISPATCH_OWNED_RUNTIME_MODE) {\n    return {\n      active: false,\n      dispatchId: null,\n      targetProfileId: null,\n    };\n  }\n\n  return {\n    active: true,\n    dispatchId: normalizeOptionalText(\n      env[OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]\n    ),\n    targetProfileId: normalizeOptionalText(\n      env[OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]\n    ),\n  };\n}\n\nexport function assertDispatchOwnedRuntimePublicWriteAllowed(input: {\n  commandLabel: string;\n  env?: NodeJS.ProcessEnv;\n}): void {\n  const guard = readDispatchOwnedRuntimeGuard(input.env);\n  if (!guard.active) {\n    return;\n  }\n\n  const dispatchIdSuffix = guard.dispatchId\n    ? ` (dispatch ${guard.dispatchId})`\n    : \"\";\n  throw new Error(\n    `${input.commandLabel} is blocked inside a dispatch-owned runtime${dispatchIdSuffix}. Public space writes must be returned through OpenMeld Space structured actions: post_message, post_status, or stay_silent.`\n  );\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction resolveDispatchOwnedRuntimeCliEntryPath(\n  cliEntryPath?: string\n): string {\n  const normalizedCliEntryPath =\n    normalizeOptionalText(cliEntryPath) ??\n    normalizeOptionalText(process.argv[1]) ??\n    null;\n  if (!normalizedCliEntryPath) {\n    throw new Error(\n      \"dispatch-owned runtime CLI shim requires a current CLI entry path\"\n    );\n  }\n  return resolve(normalizedCliEntryPath);\n}\n\nfunction resolveDispatchOwnedRuntimeBinaryCliEntryPath(input: {\n  cliEntryPath?: string;\n  env?: Record<string, string | undefined>;\n}): string {\n  // A background Service may keep running from an executable path that an\n  // upgrade later replaces with a launcher. The lane-owned managed CLI is the\n  // stable command authority for new Space Action subprocesses.\n  const normalizedCliEntryPath =\n    normalizeOptionalText(input.cliEntryPath) ??\n    normalizeOptionalText(openMeldManagedBinaryPath({ env: input.env })) ??\n    null;\n  if (!normalizedCliEntryPath) {\n    throw new Error(\n      \"dispatch-owned runtime CLI shim requires a current binary CLI path\"\n    );\n  }\n  return resolve(normalizedCliEntryPath);\n}\n\nfunction buildDispatchOwnedRuntimeCliShimSource(input: {\n  cliEntryPath: string;\n  commandName: (typeof DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES)[number];\n  distribution: OpenMeldDistribution;\n  dispatchId?: string;\n  nodePath: string;\n  spaceActionContextPath?: string | null;\n  targetProfileId?: string;\n}): string {\n  const embeddedEnv = {\n    [OPENMELD_DISPATCH_RUNTIME_MODE_ENV]: DISPATCH_OWNED_RUNTIME_MODE,\n    [OPENMELD_ENV_PRESET_ENV]: resolveEnvPresetForCommandName(\n      input.commandName\n    ),\n    [OPENMELD_USER_FACING_CLI_COMMAND_ENV]: input.commandName,\n    ...(normalizeOptionalText(input.dispatchId)\n      ? {\n          [OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]: normalizeOptionalText(\n            input.dispatchId\n          ) as string,\n        }\n      : {}),\n    ...(normalizeOptionalText(input.targetProfileId)\n      ? {\n          [OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]:\n            normalizeOptionalText(input.targetProfileId) as string,\n        }\n      : {}),\n    ...(normalizeOptionalText(input.spaceActionContextPath)\n      ? {\n          [OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]: normalizeOptionalText(\n            input.spaceActionContextPath\n          ) as string,\n        }\n      : {}),\n  };\n  if (input.distribution === \"binary\") {\n    const exportRows = Object.entries(embeddedEnv).map(\n      ([key, value]) => `export ${key}=${quoteShellValue(value)}`\n    );\n    return `#!/bin/sh\n${exportRows.join(\"\\n\")}\nexec ${quoteShellValue(input.cliEntryPath)} \"$@\"\n`;\n  }\n  return `#!/usr/bin/env node\nimport { spawnSync } from \"node:child_process\";\n\nconst result = spawnSync(${JSON.stringify(input.nodePath)}, [${JSON.stringify(\n    input.cliEntryPath\n  )}, ...process.argv.slice(2)], {\n  env: { ...process.env, ...${JSON.stringify(embeddedEnv)} },\n  stdio: \"inherit\",\n});\n\nif (result.error) {\n  throw result.error;\n}\n\nprocess.exit(result.status ?? 1);\n`;\n}\n\nfunction resolveDispatchOwnedRuntimeEnvPreset(input: {\n  env?: Record<string, string | undefined>;\n}): \"prod\" | \"dev-local\" | \"canary\" {\n  return resolveEnvPresetForCommandName(\n    resolveDispatchOwnedRuntimeActionCliEntryCommand({\n      env: input.env,\n    })\n  );\n}\n\nfunction resolveEnvPresetForCommandName(\n  commandName: (typeof DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES)[number]\n): \"prod\" | \"dev-local\" | \"canary\" {\n  if (commandName === \"openmeld-dev\") {\n    return \"dev-local\";\n  }\n  if (commandName === \"openmeld-canary\") {\n    return \"canary\";\n  }\n  return \"prod\";\n}\n\nfunction quoteShellValue(value: string): string {\n  return `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n}\n\nfunction safeReadTextFile(path: string): string | null {\n  try {\n    return readFileSync(path, \"utf8\");\n  } catch {\n    return null;\n  }\n}\n\nfunction prependPathEntry(input: {\n  currentPath: string | null;\n  nextEntry: string;\n}): string {\n  const currentEntries = (input.currentPath ?? \"\")\n    .split(delimiter)\n    .map((entry) => entry.trim())\n    .filter((entry) => entry.length > 0);\n  const dedupedEntries = currentEntries.filter(\n    (entry) => entry !== input.nextEntry\n  );\n  return [input.nextEntry, ...dedupedEntries].join(delimiter);\n}\n","export function parseJsonResponse(raw: string): unknown {\n  if (!raw.trim()) {\n    return null;\n  }\n  try {\n    return JSON.parse(raw);\n  } catch {\n    return null;\n  }\n}\n","import { OpenMeldApiClientHttpError } from \"@openmeld/api-client\";\nimport { OPENMELD_HEADER_REQUEST_ID } from \"@openmeld/gateway-contract\";\nimport { gatewayErrorEnvelopeSchema } from \"@openmeld/schemas\";\nimport type { GatewayErrorCode } from \"@openmeld/schemas/types\";\nimport { parseJsonResponse } from \"./api-json\";\n\nconst FALLBACK_GATEWAY_HTTP_ERROR_CODE = \"gateway.http_error\" as const;\nconst GENERIC_NETWORK_ERROR_CODES = [\n  \"network.timeout\",\n  \"network.request_failed\",\n] as const;\n\ntype SafeParseResult<T> = { success: true; data: T } | { success: false };\n\ntype GatewayResponseSchema<T> = {\n  safeParse: (value: unknown) => SafeParseResult<T>;\n};\n\nexport type GatewayResponseErrorCode =\n  | GatewayErrorCode\n  | typeof FALLBACK_GATEWAY_HTTP_ERROR_CODE\n  | (typeof GENERIC_NETWORK_ERROR_CODES)[number]\n  | string;\n\nexport type StructuredGatewayFailure = {\n  code: GatewayResponseErrorCode | null;\n  message: string;\n  requestId: string | null;\n  status: number | null;\n  upstreamCode: string | null;\n};\n\nexport class GatewayHttpError extends Error {\n  readonly code: GatewayResponseErrorCode;\n  readonly requestId: string | null;\n  readonly status: number;\n  readonly rawBody: string;\n  readonly upstreamCode: string | null;\n\n  constructor(input: {\n    code: GatewayResponseErrorCode;\n    message: string;\n    requestId?: string | null;\n    status: number;\n    rawBody: string;\n    upstreamCode?: string | null;\n  }) {\n    super(input.message);\n    this.name = \"GatewayHttpError\";\n    this.code = input.code;\n    this.requestId = normalizeOptionalText(input.requestId);\n    this.status = input.status;\n    this.rawBody = input.rawBody;\n    this.upstreamCode = normalizeOptionalText(input.upstreamCode);\n  }\n}\n\nexport async function readGatewayJsonResponse<T>(input: {\n  response: Response;\n  schema: GatewayResponseSchema<T>;\n  invalidMessage: string;\n}): Promise<T> {\n  const raw = await input.response.text();\n  assertGatewayResponseOk({\n    response: input.response,\n    raw,\n  });\n\n  const parsed = input.schema.safeParse(parseJsonResponse(raw));\n  if (!parsed.success) {\n    throw new Error(input.invalidMessage);\n  }\n  return parsed.data;\n}\n\nexport async function readGatewayTextResponse(input: {\n  response: Response;\n}): Promise<string> {\n  const raw = await input.response.text();\n  assertGatewayResponseOk({\n    response: input.response,\n    raw,\n  });\n  return raw;\n}\n\nexport function assertGatewayResponseOk(input: {\n  response: Response;\n  raw: string;\n}): void {\n  if (input.response.ok) {\n    return;\n  }\n  throw parseGatewayErrorResponse(input);\n}\n\nexport function parseGatewayErrorResponse(input: {\n  response: Pick<Response, \"headers\" | \"status\">;\n  raw: string;\n}): GatewayHttpError {\n  const payload = parseJsonResponse(input.raw);\n  const parsed = gatewayErrorEnvelopeSchema.safeParse(payload);\n  const headerRequestId = normalizeOptionalText(\n    input.response.headers.get(OPENMELD_HEADER_REQUEST_ID)\n  );\n\n  if (parsed.success) {\n    return new GatewayHttpError({\n      code: parsed.data.error.code,\n      message: parsed.data.error.message,\n      requestId: parsed.data.error.requestId || headerRequestId,\n      status: input.response.status,\n      rawBody: input.raw,\n      upstreamCode: parsed.data.error.upstreamCode ?? null,\n    });\n  }\n\n  const looseEnvelope = readLooseGatewayErrorEnvelope(payload);\n  if (looseEnvelope) {\n    return new GatewayHttpError({\n      code: looseEnvelope.code ?? FALLBACK_GATEWAY_HTTP_ERROR_CODE,\n      message:\n        looseEnvelope.message ??\n        `Gateway request failed with HTTP ${input.response.status}.`,\n      requestId: looseEnvelope.requestId ?? headerRequestId,\n      status: input.response.status,\n      rawBody: input.raw,\n      upstreamCode: looseEnvelope.upstreamCode,\n    });\n  }\n\n  return new GatewayHttpError({\n    code: FALLBACK_GATEWAY_HTTP_ERROR_CODE,\n    message:\n      normalizeOptionalText(input.raw) ??\n      `Gateway request failed with HTTP ${input.response.status}.`,\n    requestId: headerRequestId,\n    status: input.response.status,\n    rawBody: input.raw,\n    upstreamCode: null,\n  });\n}\n\nexport function toStructuredGatewayFailure(\n  error: unknown\n): StructuredGatewayFailure {\n  if (error instanceof OpenMeldApiClientHttpError) {\n    return {\n      code: error.code,\n      message: normalizeFailureMessage(error.message),\n      requestId: error.requestId,\n      status: error.status,\n      upstreamCode: error.upstreamCode,\n    };\n  }\n\n  if (error instanceof GatewayHttpError) {\n    return {\n      code: error.code,\n      message: normalizeFailureMessage(error.message),\n      requestId: error.requestId,\n      status: error.status,\n      upstreamCode: error.upstreamCode,\n    };\n  }\n\n  const genericErrorCode = readGenericErrorCode(error);\n  if (genericErrorCode) {\n    return {\n      code: genericErrorCode,\n      message: normalizeFailureMessage(\n        error instanceof Error ? error.message : String(error)\n      ),\n      requestId: null,\n      status: null,\n      upstreamCode: null,\n    };\n  }\n\n  return {\n    code: null,\n    message: normalizeFailureMessage(\n      error instanceof Error ? error.message : String(error)\n    ),\n    requestId: null,\n    status: null,\n    upstreamCode: null,\n  };\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction normalizeFailureMessage(value: unknown): string {\n  return normalizeOptionalText(value) ?? \"Unknown error.\";\n}\n\nfunction readGenericErrorCode(value: unknown): GatewayResponseErrorCode | null {\n  if (!value || typeof value !== \"object\" || !(\"code\" in value)) {\n    return null;\n  }\n\n  const normalized = normalizeOptionalText(\n    (value as { code?: unknown }).code ?? null\n  );\n  return normalized as GatewayResponseErrorCode | null;\n}\n\nfunction readLooseGatewayErrorEnvelope(value: unknown): {\n  code: string | null;\n  message: string | null;\n  requestId: string | null;\n  upstreamCode: string | null;\n} | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const record = value as {\n    error?: {\n      code?: unknown;\n      message?: unknown;\n      requestId?: unknown;\n      upstreamCode?: unknown;\n    } | null;\n  };\n  const error = record.error;\n  if (!error || typeof error !== \"object\") {\n    return null;\n  }\n\n  const code = normalizeOptionalText(error.code);\n  const message = normalizeOptionalText(error.message);\n  const requestId = normalizeOptionalText(error.requestId);\n  const upstreamCode = normalizeOptionalText(error.upstreamCode);\n  if (!(code || message || requestId || upstreamCode)) {\n    return null;\n  }\n\n  return {\n    code,\n    message,\n    requestId,\n    upstreamCode,\n  };\n}\n","import type { SpaceMeta } from \"@openmeld/protocol\";\nimport { spaceMetaSchema } from \"@openmeld/schemas\";\n\ntype SpaceMetaParseOperation =\n  | \"createSpaceMeta\"\n  | \"fetchSpaceMeta\"\n  | \"updateSpaceMeta\";\n\nexport function parseSpaceMetaPayload(input: {\n  data: unknown;\n  endpoint: string;\n  operation: SpaceMetaParseOperation;\n}): SpaceMeta {\n  try {\n    const validation = spaceMetaSchema.safeParse(input.data);\n    if (!validation.success) {\n      const reason =\n        validation.error.issues[0]?.message ??\n        \"space meta payload does not match schema\";\n      throw new Error(reason);\n    }\n    return validation.data;\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `${input.operation} received invalid response payload from ${input.endpoint}: ${reason}; raw=${JSON.stringify(input.data)}`\n    );\n  }\n}\n\nexport function parseSpaceMetaResponse(input: {\n  raw: string;\n  endpoint: string;\n  operation: Extract<\n    SpaceMetaParseOperation,\n    \"fetchSpaceMeta\" | \"updateSpaceMeta\"\n  >;\n}): SpaceMeta {\n  try {\n    return parseSpaceMetaPayload({\n      data: JSON.parse(input.raw) as unknown,\n      endpoint: input.endpoint,\n      operation: input.operation,\n    });\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `${input.operation} received invalid response payload from ${input.endpoint}: ${reason}; raw=${input.raw}`\n    );\n  }\n}\n","import type { SpaceMeta } from \"@openmeld/protocol\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport { buildOpenMeldRequestContextHeadersWithAuth } from \"../config/request-headers\";\nimport { toSpaceMetaUrl } from \"../protocol/urls\";\nimport { fetchSpaceRequestWithTimeout } from \"./fetch-with-timeout\";\nimport { readGatewayTextResponse } from \"./gateway-response\";\nimport { parseSpaceMetaResponse } from \"./space-meta-response\";\n\ntype SpaceMetaApiInput = {\n  requestContext: OpenMeldRequestContext;\n  baseUrl: string;\n  space: string;\n  password?: string;\n};\n\nexport async function fetchSpaceMeta(\n  input: SpaceMetaApiInput\n): Promise<SpaceMeta> {\n  const endpoint = toSpaceMetaUrl(input.baseUrl, input.space);\n  const response = await fetchSpaceRequestWithTimeout({\n    url: endpoint,\n    operation: \"space.fetch_meta\",\n    init: {\n      method: \"GET\",\n      headers: await buildOpenMeldRequestContextHeadersWithAuth({\n        requestUrl: endpoint,\n        requestContext: input.requestContext,\n        spacePassword: input.password,\n      }),\n    },\n  });\n  const raw = await readGatewayTextResponse({ response });\n\n  return parseSpaceMetaResponse({\n    raw,\n    endpoint,\n    operation: \"fetchSpaceMeta\",\n  });\n}\n\nexport async function updateSpaceMeta(\n  input: SpaceMetaApiInput & {\n    purpose?: string;\n    guide?: string;\n  }\n): Promise<SpaceMeta> {\n  const endpoint = toSpaceMetaUrl(input.baseUrl, input.space);\n  const headers = await buildOpenMeldRequestContextHeadersWithAuth({\n    requestUrl: endpoint,\n    requestContext: input.requestContext,\n    spacePassword: input.password,\n  });\n  headers[\"content-type\"] = \"application/json\";\n\n  const response = await fetchSpaceRequestWithTimeout({\n    url: endpoint,\n    operation: \"space.update_meta\",\n    init: {\n      method: \"PATCH\",\n      headers,\n      body: JSON.stringify({\n        ...(input.purpose === undefined ? {} : { purpose: input.purpose }),\n        ...(input.guide === undefined ? {} : { guide: input.guide }),\n      }),\n    },\n  });\n  const raw = await readGatewayTextResponse({ response });\n\n  return parseSpaceMetaResponse({\n    raw,\n    endpoint,\n    operation: \"updateSpaceMeta\",\n  });\n}\n","import { createSpaceApi, type SpaceApi } from \"@openmeld/api-client\";\nimport { createCliApiClientFoundation } from \"./api-client-foundation\";\n\nexport type {\n  SpaceApi,\n  SpaceSignalsReadQuery,\n} from \"@openmeld/api-client\";\n\nexport function createCliSpaceApi(\n  baseUrl: string,\n  options: Parameters<typeof createCliApiClientFoundation>[1] = {}\n): SpaceApi {\n  return createSpaceApi(createCliApiClientFoundation(baseUrl, options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BA,MAAa,yCACX;;AAGF,IAAa,iCAAb,cAAoD,MAAM;CACxD,UAAmB;CACnB;CACA,YACE,YACA,SACA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,aAAa;CACpB;AACF;AAEA,MAAM,wCAAwC;AAC9C,MAAM,uCAAuC;AAC7C,MAAM,yBAAyB,MAAU,KAAK;AA0D9C,SAAgB,iCAAiC,OAoB/C;CACA,MAAM,YAAY,WAAW;CAC7B,MAAM,QAAQ,WAAW;CACzB,MAAM,aAAa,KACjB,sBAAsB,MAAM,aAAa,EAAE,KAAK,MAAM,IAAI,CAAC,GAC3D,0BACA,GAAG,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,GAAG,WAChC;CACA,UAAU,YAAY;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACtD,UAAU,YAAY,GAAK;CAE3B,MAAM,cAAc,KAAK,YAAY,cAAc;CACnD,MAAM,mBAAmB,KAAK,YAAY,aAAa;CACvD,MAAM,UAAsC;EAC1C,GAAI,MAAM,gBAAgB,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;EACpE,SAAS;EACT;EACA,WAAW,MAAM;EACjB;EACA,YAAY,MAAM;EAClB,aAAa,KAAK,IAAI,KAAK,MAAM,SAAS;EAC1C;EACA,iBAAiBA,wBAAsB,MAAM,eAAe;EAC5D,qBAAqB,MAAM;EAC3B,eAAe,MAAM;EACrB,uBAAuB,MAAM,wBACzB;GACE,gBAAgB,MAAM,sBAAsB;GAC5C,iBAAiB,MAAM,sBAAsB;EAC/C,IACA;EACJ,SAAS,MAAM;EACf,iBAAiB,MAAM;EACvB,QAAQ,MAAM;CAChB;CAEA,uBAAuB,aAAa,OAAO;CAC3C,OAAO;EAAE;EAAS;CAAY;AAChC;AAEA,SAAgB,sCACd,MAAyB,QAAQ,KACL;CAC5B,MAAM,UAAU,gDAAgD,GAAG;CACnE,oBAAoB,SAAS,KAAK,IAAI,CAAC;CACvC,OAAO;AACT;AAMA,SAAgB,gDACd,MAAyB,QAAQ,KACL;CAC5B,MAAM,cAAcA,wBAClB,IAAI,uCACN;CACA,IAAI,CAAC,aACH,MAAM,IAAI,MACR,sHACF;CAEF,MAAM,UAAU,+BAA+B,WAAW;CAC1D,uCAAuC;EAAE;EAAS;CAAI,CAAC;CACvD,OAAO;AACT;AAEA,SAAgB,+BACd,aAC4B;CAC5B,OAAO,gCAAgC,aAAa,WAAW,CAAC;AAClE;AAEA,SAAgB,+BAA+B,OAKjB;CAC5B,MAAM,eAAe,gCAAgC,UAAU,MAAM,MAAM;CAC3E,IAAI,CAAC,aAAa,SAChB,MAAM,aAAa;CAErB,IAAI,sBAAsB,aAAa,MAAM,MAAM,QAAQ,eAAe,GACxE,MAAM,IAAI,MACR,kJACF;CAGF,MAAM,WAAW,8BAA8B,EAAE,SAAS,MAAM,QAAQ,CAAC;CACzE,IAAI,SAAS,WAAW,WACtB,MAAM,IAAI,MAAM,SAAS,YAAY;CAEvC,IACE,SAAS,WAAW,YACpB,kBAAkB,SAAS,OAAO,QAAQ,aAAa,IAAI,GAE3D,OAAO,SAAS;CAElB,oBAAoB,MAAM,SAAS,MAAM,SAAS,KAAK,IAAI,CAAC;CAE5D,MAAM,SAAoC;EACxC,SAAS;EACT,QAAQ,aAAa;EACrB,SAAS,MAAM;EACf,WAAW,MAAM,QAAQ;EACzB,aAAa,MAAM,SAAS,KAAK,IAAI;EACrC,OAAO,MAAM,QAAQ;CACvB;CACA,IAAI;EACF,uBAAuB,MAAM,QAAQ,kBAAkB,MAAM;CAC/D,SAAS,OAAO;EACd,IAAI,gBAAgB,OAAO,QAAQ,GAAG;GACpC,MAAM,WAAW,8BAA8B,EAC7C,SAAS,MAAM,QACjB,CAAC;GAGD,IACE,SAAS,WAAW,YACpB,kBAAkB,SAAS,OAAO,QAAQ,aAAa,IAAI,GAE3D,OAAO,SAAS;GAElB,MAAM,IAAI,MACR,oHACF;EACF;EACA,MAAM;CACR;CACA,OAAO;AACT;AAEA,SAAgB,8BAA8B,OAGN;CACtC,IAAI,CAAC,WAAW,MAAM,QAAQ,gBAAgB,GAC5C,OAAO,EAAE,QAAQ,UAAU;CAE7B,IAAI;EACF,MAAM,SAAS,+BACb,aAAa,MAAM,QAAQ,gBAAgB,CAC7C;EACA,IACE,OAAO,cAAc,MAAM,QAAQ,aACnC,OAAO,UAAU,MAAM,QAAQ,OAE/B,OAAO;GACL,QAAQ;GACR,cACE;EACJ;EAEF,IAAI,OAAO,cAAc,MAAM,QAAQ,aACrC,OAAO;GACL,QAAQ;GACR,cACE;EACJ;EAEF,OAAO;GAAE,QAAQ;GAAU;EAAO;CACpC,SAAS,OAAO;EACd,OAAO;GACL,QAAQ;GACR,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE;CACF;AACF;AAEA,SAAgB,qDAAqD,OAGE;CACrE,MAAM,aAAa,8BAA8B,KAAK;CACtD,IAAI,WAAW,WAAW,WACxB,OAAO;CAET,IAAI,WAAW,WAAW,WACxB,MAAM,IAAI,MAAM,WAAW,YAAY;CAEzC,MAAM,eAAe,GAAG,MAAM,QAAQ,iBAAiB,cAAc,OAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,GAAG,WAAW;CACrH,WAAW,MAAM,QAAQ,kBAAkB,YAAY;CACvD,OAAO;EAAE;EAAc,QAAQ,WAAW;CAAO;AACnD;AAEA,SAAS,gCACP,OAC4B;CAC5B,MAAM,SAAS,SAAS,OAAO,+BAA+B;CAC9D,MAAM,UAAU,OAAO;CACvB,IAAI,YAAY,uCACd,MAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,sBAAsB,yBAC1B,OAAO,mBACT;CACA,OAAO;EACL;EACA,kBAAkB,eAChB,OAAO,kBACP,kBACF;EACA,WAAW,eAAe,OAAO,WAAW,WAAW;EACvD,WAAW,eAAe,OAAO,WAAW,WAAW;EACvD,YAAY,eAAe,OAAO,YAAY,YAAY;EAC1D,aAAa,qBAAqB,OAAO,aAAa,aAAa;EACnE,OAAO,eAAe,OAAO,OAAO,OAAO;EAC3C,iBAAiB,eAAe,OAAO,eAAe;EACtD;EACA,eAAe,eAAe,OAAO,eAAe,eAAe;EACnE,uBAAuB,2BACrB,OAAO,qBACT;EACA,SAAS,eAAe,OAAO,SAAS,SAAS;EACjD,iBAAiB,eAAe,OAAO,iBAAiB,iBAAiB;EACzE,QAAQ,eAAe,OAAO,QAAQ,QAAQ;EAC9C,GAAI,OAAO,gBACP,EAAE,eAAe,eAAe,OAAO,eAAe,eAAe,EAAE,IACvE,CAAC;CACP;AACF;AAEA,SAAS,uCAAuC,OAGvC;CAIP,IAHaA,wBACX,MAAM,IAAA,iCAED,MAAA,0BACL;CAGF,MAAM,gBAAgBA,wBACpB,MAAM,IAAI,0CACZ;CACA,IAAI,CAAC,eACH,MAAM,IAAI,MACR,2EACF;CAEF,IAAI,kBAAkB,MAAM,QAAQ,YAClC,MAAM,IAAI,+BACR,iCACA,oFACF;CAGF,MAAM,qBAAqBA,wBACzB,MAAM,IAAI,gDACZ;CACA,IAAI,CAAC,oBACH,MAAM,IAAI,MACR,iFACF;CAEF,IAAI,uBAAuB,MAAM,QAAQ,iBACvC,MAAM,IAAI,+BACR,iCACA,kFACF;AAEJ;AAEA,SAAS,+BACP,OAC2B;CAC3B,MAAM,SAAS,SAAS,OAAO,8BAA8B;CAC7D,MAAM,UAAU,OAAO;CACvB,IAAI,YAAY,sCACd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,eAAe,gCAAgC,UAAU,OAAO,MAAM;CAC5E,IAAI,CAAC,aAAa,SAChB,MAAM,aAAa;CAErB,OAAO;EACL;EACA,QAAQ,aAAa;EACrB,SAAS,eAAe,OAAO,SAAS,SAAS;EACjD,WAAW,eAAe,OAAO,WAAW,WAAW;EACvD,aAAa,qBAAqB,OAAO,aAAa,aAAa;EACnE,OAAO,eAAe,OAAO,OAAO,OAAO;CAC7C;AACF;AAEA,SAAS,yBACP,OACwC;CACxC,MAAM,SAAS,SAAS,OAAO,qBAAqB;CACpD,IAAI,OAAO,WAAW,UAAU;EAC9B,IAAI,CAAC,MAAM,QAAQ,OAAO,UAAU,GAClC,MAAM,IAAI,MACR,gEACF;EAEF,OAAO;GACL,QAAQ;GACR,YAAY,OAAO,WAAW,IAAI,8BAA8B;GAChE,gBAAgB,iBAAiB,OAAO,cAAc;EACxD;CACF;CACA,IAAI,OAAO,WAAW,UACpB,OAAO;EACL,QAAQ;EACR,cAAc,eAAe,OAAO,cAAc,cAAc;EAChE,YAAY;EACZ,gBAAgB,CAAC;CACnB;CAEF,MAAM,IAAI,MACR,6DACF;AACF;AAEA,SAAS,+BACP,OACA,OAC2B;CAC3B,MAAM,SAAS,gCAAgC,UAAU,KAAK;CAC9D,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MACR,iDAAiD,MAAM,8CACzD;CAEF,OAAO,OAAO;AAChB;AAEA,SAAS,2BACP,OACkE;CAClE,IAAI,UAAU,QAAQ,UAAU,KAAA,GAC9B,OAAO;CAET,MAAM,SAAS,SAAS,OAAO,uBAAuB;CACtD,OAAO;EACL,gBAAgB,MAAM,QAAQ,OAAO,cAAc,IAC9C,OAAO,iBACR,CAAC;EACL,iBACE,OAAO,oBAAoB,wBACvB,wBACA;CACR;AACF;AAEA,SAAS,oBACP,SACA,OACM;CACN,IAAI,QAAQ,QAAQ,aAClB,MAAM,IAAI,+BACR,gCACA,yDACF;AAEJ;AAEA,SAAS,aAAa,MAAuB;CAC3C,OAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAC9C;AAEA,SAAS,uBAAuB,MAAc,OAAsB;CAClE,cAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK;EACzD,UAAU;EACV,MAAM;EACN,MAAM;CACR,CAAC;CACD,UAAU,MAAM,GAAK;AACvB;AAEA,SAAS,SAAS,OAAgB,OAAwC;CACxE,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,MAAM,IAAI,MAAM,GAAG,MAAM,wBAAwB;CAEnD,OAAO;AACT;AAEA,SAAS,eAAe,OAAgB,WAA2B;CACjE,MAAM,aAAaA,wBAAsB,KAAK;CAC9C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,GAAG,UAAU,6BAA6B;CAE5D,OAAO;AACT;AAEA,SAAS,qBAAqB,OAAgB,WAA2B;CACvE,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,MAAM,GAAG,UAAU,0BAA0B;CAEzD,OAAO;AACT;AAEA,SAAS,eAAe,OAA+B;CACrD,IAAI,UAAU,QAAQ,UAAU,KAAA,GAC9B,OAAO;CAET,OAAOA,wBAAsB,KAAK;AACpC;AAEA,SAAS,iBAAiB,OAA0B;CAClD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO,CAAC;CAEV,OAAO,MACJ,KAAK,SAASA,wBAAsB,IAAI,CAAC,CAAC,CAC1C,QAAQ,SAAyB,QAAQ,IAAI,CAAC;AACnD;AAEA,SAASA,wBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,gBAAgB,OAAgB,MAAuB;CAC9D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAA6B,SAAS;AAE3C;;;AC3gBA,MAAM,0CAA0C;AAChD,MAAM,yCAAyC;AAC/C,MAAM,0BAA0B;AAChC,MAAM,2CAA2C;CAC/C;CACA;CACA;AACF;AAQA,SAAgB,6BAA6B,OAON;CAIrC,MAAM,MAAM;EACV,eAAe,QAAQ,IAAI;EAC3B,qBAAqB,QAAQ,IAAI;EACjC,GAAI,MAAM,OAAO,CAAC;CACpB;CACA,MAAM,cAAcC,wBAClB,MAAM,KAAK,QAAQ,QAAQ,IAAI,IACjC;CACA,MAAM,UAAU,mCAAmC;EACjD,cAAc,MAAM;EACpB,YAAY,MAAM;EAClB,cAAc,MAAM;EACpB;EACA,wBAAwB,MAAM;EAC9B,iBAAiB,MAAM;CACzB,CAAC;CACD,MAAM,gBAAgB,iDAAiD,EACrE,IACF,CAAC;CACD,OAAO;EACL,GAAG;EACH,MAAM,iBAAiB;GACrB;GACA,WAAW;EACb,CAAC;GACA,qCAAqC;GACrC,4CAA4C,MAAM;GAClD,kDAAkD,MAAM;GACxD,uCAAuC;GACvC,8CAA8C,KAAK,SAAS,aAAa;GACzE,0BAA0B,qCAAqC,EAC9D,IACF,CAAC;EACD,GAAI,MAAM,yBACN,GACG,yCACC,MAAM,uBACV,IACA,CAAC;CACP;AACF;AAEA,SAAgB,iDACd,QAAqC,CAAC,GACW;CACjD,MAAM,SAAS,yBAAyB,KAAK;CAC7C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,UACb,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,sCACd,QAEI,CAAC,GACG;CACR,MAAM,yBAAyBA,wBAC7B,MAAM,sBACR;CACA,IAAI,wBACF,OAAO,KACL,QAAQ,sBAAsB,GAC9B,sCACF;CAEF,OAAO,KACL,sBAAsB,KAAK,GAC3B,OACA,uCACF;AACF;AAEA,SAAgB,mCAAmC,OAOxC;CACT,MAAM,eAAe,OAAO,gBAAgB,4BAA4B;CACxE,MAAM,eACJ,iBAAiB,WACb,8CAA8C;EAC5C,cAAc,OAAO;EACrB,KAAK,OAAO;CACd,CAAC,IACD,wCAAwC,OAAO,YAAY;CACjE,MAAM,UAAU,sCAAsC;EACpD,KAAK,OAAO;EACZ,wBAAwB,OAAO;CACjC,CAAC;CACD,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;CAEtC,KAAK,MAAM,eAAe,0CAA0C;EAClE,MAAM,WAAW,KAAK,SAAS,WAAW;EAC1C,MAAM,aAAa,uCAAuC;GACxD;GACA;GACA,YAAY,OAAO;GACnB;GACA,UAAU,QAAQ;GAClB,wBAAwB,OAAO;GAC/B,iBAAiB,OAAO;EAC1B,CAAC;EACD,IAAI,WAAW,QAAQ;OACC,iBAAiB,QACvB,MAAM,YAAY;IAChC,UAAU,UAAU,GAAK;IACzB;GACF;;EAEF,cAAc,UAAU,YAAY;GAClC,UAAU;GACV,MAAM;EACR,CAAC;EACD,UAAU,UAAU,GAAK;CAC3B;CAEA,OAAO;AACT;AAEA,SAAgB,8BACd,MAAyB,QAAQ,KACN;CAE3B,IADaA,wBAAsB,IAAA,iCAC5B,MAAA,0BACL,OAAO;EACL,QAAQ;EACR,YAAY;EACZ,iBAAiB;CACnB;CAGF,OAAO;EACL,QAAQ;EACR,YAAYA,wBACV,IAAI,0CACN;EACA,iBAAiBA,wBACf,IAAI,gDACN;CACF;AACF;AAEA,SAAgB,6CAA6C,OAGpD;CACP,MAAM,QAAQ,8BAA8B,MAAM,GAAG;CACrD,IAAI,CAAC,MAAM,QACT;CAGF,MAAM,mBAAmB,MAAM,aAC3B,cAAc,MAAM,WAAW,KAC/B;CACJ,MAAM,IAAI,MACR,GAAG,MAAM,aAAa,6CAA6C,iBAAiB,6HACtF;AACF;AAEA,SAASA,wBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,wCACP,cACQ;CACR,MAAM,yBACJA,wBAAsB,YAAY,KAClCA,wBAAsB,QAAQ,KAAK,EAAE,KACrC;CACF,IAAI,CAAC,wBACH,MAAM,IAAI,MACR,mEACF;CAEF,OAAO,QAAQ,sBAAsB;AACvC;AAEA,SAAS,8CAA8C,OAG5C;CAIT,MAAM,yBACJA,wBAAsB,MAAM,YAAY,KACxCA,wBAAsB,0BAA0B,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,KACnE;CACF,IAAI,CAAC,wBACH,MAAM,IAAI,MACR,oEACF;CAEF,OAAO,QAAQ,sBAAsB;AACvC;AAEA,SAAS,uCAAuC,OAQrC;CACT,MAAM,cAAc;GACjB,qCAAqC;GACrC,0BAA0B,+BACzB,MAAM,WACR;GACC,uCAAuC,MAAM;EAC9C,GAAIA,wBAAsB,MAAM,UAAU,IACtC,GACG,4CAA4CA,wBAC3C,MAAM,UACR,EACF,IACA,CAAC;EACL,GAAIA,wBAAsB,MAAM,eAAe,IAC3C,GACG,kDACCA,wBAAsB,MAAM,eAAe,EAC/C,IACA,CAAC;EACL,GAAIA,wBAAsB,MAAM,sBAAsB,IAClD,GACG,yCAAyCA,wBACxC,MAAM,sBACR,EACF,IACA,CAAC;CACP;CACA,IAAI,MAAM,iBAAiB,UAIzB,OAAO;EAHY,OAAO,QAAQ,WAAW,CAAC,CAAC,KAC5C,CAAC,KAAK,WAAW,UAAU,IAAI,GAAG,gBAAgB,KAAK,GAGnD,CAAC,CAAC,KAAK,IAAI,EAAE;OACjB,gBAAgB,MAAM,YAAY,EAAE;;CAGzC,OAAO;;;2BAGkB,KAAK,UAAU,MAAM,QAAQ,EAAE,KAAK,KAAK,UAChE,MAAM,YACR,EAAE;8BAC0B,KAAK,UAAU,WAAW,EAAE;;;;;;;;;;AAU1D;AAEA,SAAS,qCAAqC,OAEV;CAClC,OAAO,+BACL,iDAAiD,EAC/C,KAAK,MAAM,IACb,CAAC,CACH;AACF;AAEA,SAAS,+BACP,aACiC;CACjC,IAAI,gBAAgB,gBAClB,OAAO;CAET,IAAI,gBAAgB,mBAClB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAuB;CAC9C,OAAO,IAAI,MAAM,WAAW,KAAK,OAAO,EAAE;AAC5C;AAEA,SAAS,iBAAiB,MAA6B;CACrD,IAAI;EACF,OAAO,aAAa,MAAM,MAAM;CAClC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,OAGf;CAKT,MAAM,kBAJkB,MAAM,eAAe,GAAA,CAC1C,MAAM,SAAS,CAAC,CAChB,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CACA,CAAC,CAAC,QACnC,UAAU,UAAU,MAAM,SAC7B;CACA,OAAO,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,KAAK,SAAS;AAC5D;;;AChXA,SAAgB,kBAAkB,KAAsB;CACtD,IAAI,CAAC,IAAI,KAAK,GACZ,OAAO;CAET,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN,OAAO;CACT;AACF;;;ACHA,MAAM,mCAAmC;AA0BzC,IAAa,mBAAb,cAAsC,MAAM;CAC1C;CACA;CACA;CACA;CACA;CAEA,YAAY,OAOT;EACD,MAAM,MAAM,OAAO;EACnB,KAAK,OAAO;EACZ,KAAK,OAAO,MAAM;EAClB,KAAK,YAAY,sBAAsB,MAAM,SAAS;EACtD,KAAK,SAAS,MAAM;EACpB,KAAK,UAAU,MAAM;EACrB,KAAK,eAAe,sBAAsB,MAAM,YAAY;CAC9D;AACF;AAEA,eAAsB,wBAA2B,OAIlC;CACb,MAAM,MAAM,MAAM,MAAM,SAAS,KAAK;CACtC,wBAAwB;EACtB,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,SAAS,MAAM,OAAO,UAAU,kBAAkB,GAAG,CAAC;CAC5D,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,MAAM,cAAc;CAEtC,OAAO,OAAO;AAChB;AAEA,eAAsB,wBAAwB,OAE1B;CAClB,MAAM,MAAM,MAAM,MAAM,SAAS,KAAK;CACtC,wBAAwB;EACtB,UAAU,MAAM;EAChB;CACF,CAAC;CACD,OAAO;AACT;AAEA,SAAgB,wBAAwB,OAG/B;CACP,IAAI,MAAM,SAAS,IACjB;CAEF,MAAM,0BAA0B,KAAK;AACvC;AAEA,SAAgB,0BAA0B,OAGrB;CACnB,MAAM,UAAU,kBAAkB,MAAM,GAAG;CAC3C,MAAM,SAAS,2BAA2B,UAAU,OAAO;CAC3D,MAAM,kBAAkB,sBACtB,MAAM,SAAS,QAAQ,IAAI,0BAA0B,CACvD;CAEA,IAAI,OAAO,SACT,OAAO,IAAI,iBAAiB;EAC1B,MAAM,OAAO,KAAK,MAAM;EACxB,SAAS,OAAO,KAAK,MAAM;EAC3B,WAAW,OAAO,KAAK,MAAM,aAAa;EAC1C,QAAQ,MAAM,SAAS;EACvB,SAAS,MAAM;EACf,cAAc,OAAO,KAAK,MAAM,gBAAgB;CAClD,CAAC;CAGH,MAAM,gBAAgB,8BAA8B,OAAO;CAC3D,IAAI,eACF,OAAO,IAAI,iBAAiB;EAC1B,MAAM,cAAc,QAAQ;EAC5B,SACE,cAAc,WACd,oCAAoC,MAAM,SAAS,OAAO;EAC5D,WAAW,cAAc,aAAa;EACtC,QAAQ,MAAM,SAAS;EACvB,SAAS,MAAM;EACf,cAAc,cAAc;CAC9B,CAAC;CAGH,OAAO,IAAI,iBAAiB;EAC1B,MAAM;EACN,SACE,sBAAsB,MAAM,GAAG,KAC/B,oCAAoC,MAAM,SAAS,OAAO;EAC5D,WAAW;EACX,QAAQ,MAAM,SAAS;EACvB,SAAS,MAAM;EACf,cAAc;CAChB,CAAC;AACH;AAEA,SAAgB,2BACd,OAC0B;CAC1B,IAAI,iBAAiB,4BACnB,OAAO;EACL,MAAM,MAAM;EACZ,SAAS,wBAAwB,MAAM,OAAO;EAC9C,WAAW,MAAM;EACjB,QAAQ,MAAM;EACd,cAAc,MAAM;CACtB;CAGF,IAAI,iBAAiB,kBACnB,OAAO;EACL,MAAM,MAAM;EACZ,SAAS,wBAAwB,MAAM,OAAO;EAC9C,WAAW,MAAM;EACjB,QAAQ,MAAM;EACd,cAAc,MAAM;CACtB;CAGF,MAAM,mBAAmB,qBAAqB,KAAK;CACnD,IAAI,kBACF,OAAO;EACL,MAAM;EACN,SAAS,wBACP,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD;EACA,WAAW;EACX,QAAQ;EACR,cAAc;CAChB;CAGF,OAAO;EACL,MAAM;EACN,SAAS,wBACP,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD;EACA,WAAW;EACX,QAAQ;EACR,cAAc;CAChB;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,wBAAwB,OAAwB;CACvD,OAAO,sBAAsB,KAAK,KAAK;AACzC;AAEA,SAAS,qBAAqB,OAAiD;CAC7E,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,EAAE,UAAU,QACrD,OAAO;CAMT,OAHmB,sBAChB,MAA6B,QAAQ,IAExB;AAClB;AAEA,SAAS,8BAA8B,OAK9B;CACP,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAWT,MAAM,QAAQC,MAAO;CACrB,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAGT,MAAM,OAAO,sBAAsB,MAAM,IAAI;CAC7C,MAAM,UAAU,sBAAsB,MAAM,OAAO;CACnD,MAAM,YAAY,sBAAsB,MAAM,SAAS;CACvD,MAAM,eAAe,sBAAsB,MAAM,YAAY;CAC7D,IAAI,EAAE,QAAQ,WAAW,aAAa,eACpC,OAAO;CAGT,OAAO;EACL;EACA;EACA;EACA;CACF;AACF;;;AC/OA,SAAgB,sBAAsB,OAIxB;CACZ,IAAI;EACF,MAAM,aAAa,gBAAgB,UAAU,MAAM,IAAI;EACvD,IAAI,CAAC,WAAW,SAAS;GACvB,MAAM,SACJ,WAAW,MAAM,OAAO,EAAE,EAAE,WAC5B;GACF,MAAM,IAAI,MAAM,MAAM;EACxB;EACA,OAAO,WAAW;CACpB,SAAS,OAAO;EACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACpE,MAAM,IAAI,MACR,GAAG,MAAM,UAAU,0CAA0C,MAAM,SAAS,IAAI,OAAO,QAAQ,KAAK,UAAU,MAAM,IAAI,GAC1H;CACF;AACF;AAEA,SAAgB,uBAAuB,OAOzB;CACZ,IAAI;EACF,OAAO,sBAAsB;GAC3B,MAAM,KAAK,MAAM,MAAM,GAAG;GAC1B,UAAU,MAAM;GAChB,WAAW,MAAM;EACnB,CAAC;CACH,SAAS,OAAO;EACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACpE,MAAM,IAAI,MACR,GAAG,MAAM,UAAU,0CAA0C,MAAM,SAAS,IAAI,OAAO,QAAQ,MAAM,KACvG;CACF;AACF;;;ACnCA,eAAsB,eACpB,OACoB;CACpB,MAAM,WAAW,eAAe,MAAM,SAAS,MAAM,KAAK;CAe1D,OAAO,uBAAuB;EAC5B,KAAA,MAHgB,wBAAwB,EAAE,UAAA,MAZrB,6BAA6B;GAClD,KAAK;GACL,WAAW;GACX,MAAM;IACJ,QAAQ;IACR,SAAS,MAAM,2CAA2C;KACxD,YAAY;KACZ,gBAAgB,MAAM;KACtB,eAAe,MAAM;IACvB,CAAC;GACH;EACF,CAAC,EACoD,CAAC;EAIpD;EACA,WAAW;CACb,CAAC;AACH;AAEA,eAAsB,gBACpB,OAIoB;CACpB,MAAM,WAAW,eAAe,MAAM,SAAS,MAAM,KAAK;CAC1D,MAAM,UAAU,MAAM,2CAA2C;EAC/D,YAAY;EACZ,gBAAgB,MAAM;EACtB,eAAe,MAAM;CACvB,CAAC;CACD,QAAQ,kBAAkB;CAgB1B,OAAO,uBAAuB;EAC5B,KAAA,MAHgB,wBAAwB,EAAE,UAAA,MAZrB,6BAA6B;GAClD,KAAK;GACL,WAAW;GACX,MAAM;IACJ,QAAQ;IACR;IACA,MAAM,KAAK,UAAU;KACnB,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;KAChE,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;IAC5D,CAAC;GACH;EACF,CAAC,EACoD,CAAC;EAIpD;EACA,WAAW;CACb,CAAC;AACH;;;ACjEA,SAAgB,kBACd,SACA,UAA8D,CAAC,GACrD;CACV,OAAO,eAAe,6BAA6B,SAAS,OAAO,CAAC;AACtE"}
+{"version":3,"file":"cli-space-api-B2l1xMPn.js","names":["normalizeOptionalText","normalizeOptionalText","record"],"sources":["../src/runtime/dispatch-space-action-context.ts","../src/runtime/dispatch-owned-runtime.ts","../src/space/api-json.ts","../src/space/gateway-response.ts","../src/space/space-meta-response.ts","../src/space/meta-api.ts","../src/space/cli-space-api.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport {\n  chmodSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  renameSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { join } from \"node:path\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport {\n  openMeldSpaceEgressActionSchema,\n  spaceMemberDirectoryEntrySchema,\n} from \"@openmeld/schemas\";\nimport type {\n  DispatchSpaceActionClosedReasonCode,\n  OpenMeldSpaceEgressAction,\n  SpaceContract,\n  SpaceMemberDirectoryEntry,\n} from \"@openmeld/schemas/types\";\nimport { isSelfWakeSpaceAction } from \"@openmeld/space-mesh\";\nimport { daemonRuntimeRootPath } from \"../config/daemon-state\";\nimport type { OpenMeldPathResolutionInput } from \"../config/paths\";\nimport {\n  DISPATCH_OWNED_RUNTIME_MODE,\n  OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV,\n  OPENMELD_DISPATCH_RUNTIME_MODE_ENV,\n  OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV,\n} from \"./dispatch-runtime-env\";\n\nexport const OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV =\n  \"OPENMELD_SPACE_ACTION_CONTEXT_PATH\";\n\n/** The local action context is known expired/closed/mismatched: a new ordinary action must be rejected, never recorded. */\nexport class DispatchSpaceActionClosedError extends Error {\n  readonly receipt = \"rejected_closed\" as const;\n  readonly reasonCode: DispatchSpaceActionClosedReasonCode;\n  constructor(\n    reasonCode: DispatchSpaceActionClosedReasonCode,\n    message: string\n  ) {\n    super(message);\n    this.name = \"DispatchSpaceActionClosedError\";\n    this.reasonCode = reasonCode;\n  }\n}\n\nconst DISPATCH_SPACE_ACTION_CONTEXT_VERSION = 1 as const;\nconst DISPATCH_SPACE_ACTION_RECORD_VERSION = 1 as const;\nconst DEFAULT_CONTEXT_TTL_MS = 12 * 60 * 60 * 1000;\n\nexport type DispatchSpaceActionSendTargetReference =\n  | {\n      status: \"loaded\";\n      projection: SpaceMemberDirectoryEntry[];\n      referenceLines: string[];\n    }\n  | {\n      status: \"failed\";\n      errorMessage: string;\n      projection: null;\n      referenceLines: [];\n    };\n\nexport type DispatchSpaceActionContext = {\n  workingCopyId?: string;\n  version: typeof DISPATCH_SPACE_ACTION_CONTEXT_VERSION;\n  actionRecordPath: string;\n  attemptId: string;\n  contextId: string;\n  dispatchId: string;\n  expiresAtMs: number;\n  nonce: string;\n  replyToSignalId: string | null;\n  sendTargetReference: DispatchSpaceActionSendTargetReference;\n  sourceEventId: string;\n  spaceContractSnapshot: Pick<\n    SpaceContract,\n    \"allowedActions\" | \"publicationMode\"\n  > | null;\n  spaceId: string;\n  targetProfileId: string;\n  taskId: string;\n};\n\nexport type DispatchSpaceActionRecord = {\n  version: typeof DISPATCH_SPACE_ACTION_RECORD_VERSION;\n  action: OpenMeldSpaceEgressAction;\n  command: string;\n  contextId: string;\n  createdAtMs: number;\n  nonce: string;\n};\n\nexport type DispatchSpaceActionRecordReadResult =\n  | {\n      status: \"missing\";\n    }\n  | {\n      errorMessage: string;\n      status: \"invalid\";\n    }\n  | {\n      record: DispatchSpaceActionRecord;\n      status: \"loaded\";\n    };\n\nexport function createDispatchSpaceActionContext(input: {\n  workingCopyId?: string;\n  attemptId: string;\n  dispatchId: string;\n  env?: Record<string, string | undefined>;\n  pathInput?: OpenMeldPathResolutionInput;\n  replyToSignalId?: string | null;\n  sendTargetReference: DispatchSpaceActionSendTargetReference;\n  sourceEventId: string;\n  spaceContractSnapshot:\n    | Pick<SpaceContract, \"allowedActions\" | \"publicationMode\">\n    | null\n    | undefined;\n  spaceId: string;\n  targetProfileId: string;\n  taskId: string;\n  ttlMs?: number;\n}): {\n  context: DispatchSpaceActionContext;\n  contextPath: string;\n} {\n  const contextId = randomUUID();\n  const nonce = randomUUID();\n  const contextDir = join(\n    daemonRuntimeRootPath(input.pathInput ?? { env: input.env }),\n    \"dispatch-space-actions\",\n    `${Date.now().toString(36)}-${contextId}`\n  );\n  mkdirSync(contextDir, { recursive: true, mode: 0o700 });\n  chmodSync(contextDir, 0o700);\n\n  const contextPath = join(contextDir, \"context.json\");\n  const actionRecordPath = join(contextDir, \"action.json\");\n  const context: DispatchSpaceActionContext = {\n    ...(input.workingCopyId ? { workingCopyId: input.workingCopyId } : {}),\n    version: DISPATCH_SPACE_ACTION_CONTEXT_VERSION,\n    actionRecordPath,\n    attemptId: input.attemptId,\n    contextId,\n    dispatchId: input.dispatchId,\n    expiresAtMs: Date.now() + (input.ttlMs ?? DEFAULT_CONTEXT_TTL_MS),\n    nonce,\n    replyToSignalId: normalizeOptionalText(input.replyToSignalId),\n    sendTargetReference: input.sendTargetReference,\n    sourceEventId: input.sourceEventId,\n    spaceContractSnapshot: input.spaceContractSnapshot\n      ? {\n          allowedActions: input.spaceContractSnapshot.allowedActions,\n          publicationMode: input.spaceContractSnapshot.publicationMode,\n        }\n      : null,\n    spaceId: input.spaceId,\n    targetProfileId: input.targetProfileId,\n    taskId: input.taskId,\n  };\n\n  writeJsonFileExclusive(contextPath, context);\n  return { context, contextPath };\n}\n\nexport function readDispatchSpaceActionContextFromEnv(\n  env: NodeJS.ProcessEnv = process.env\n): DispatchSpaceActionContext {\n  const context = readDispatchSpaceActionContextForReceiptFromEnv(env);\n  assertContextActive(context, Date.now());\n  return context;\n}\n\n// Expiry does not erase a prior receipt. Callers may use this context to compare\n// an exact existing action; writeDispatchSpaceActionRecord still rejects new\n// actions after expiry. File reads/uploads and target listing use the active\n// context reader instead.\nexport function readDispatchSpaceActionContextForReceiptFromEnv(\n  env: NodeJS.ProcessEnv = process.env\n): DispatchSpaceActionContext {\n  const contextPath = normalizeOptionalText(\n    env[OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]\n  );\n  if (!contextPath) {\n    throw new Error(\n      \"No active OpenMeld Space Action dispatch context was found. Use this command inside an OpenMeld Space Wake dispatch.\"\n    );\n  }\n  const context = readDispatchSpaceActionContext(contextPath);\n  assertDispatchRuntimeEnvMatchesContext({ context, env });\n  return context;\n}\n\nexport function readDispatchSpaceActionContext(\n  contextPath: string\n): DispatchSpaceActionContext {\n  return parseDispatchSpaceActionContext(readJsonFile(contextPath));\n}\n\nexport function writeDispatchSpaceActionRecord(input: {\n  action: OpenMeldSpaceEgressAction;\n  command: string;\n  context: DispatchSpaceActionContext;\n  nowMs?: number;\n}): DispatchSpaceActionRecord {\n  const parsedAction = openMeldSpaceEgressActionSchema.safeParse(input.action);\n  if (!parsedAction.success) {\n    throw parsedAction.error;\n  }\n  if (isSelfWakeSpaceAction(parsedAction.data, input.context.targetProfileId)) {\n    throw new Error(\n      \"An Agent cannot Wake itself. To reply to the current message, omit wakeTargets (CLI: --wake) and submit the reply again. No action was recorded.\"\n    );\n  }\n\n  const existing = readDispatchSpaceActionRecord({ context: input.context });\n  if (existing.status === \"invalid\") {\n    throw new Error(existing.errorMessage);\n  }\n  if (\n    existing.status === \"loaded\" &&\n    isDeepStrictEqual(existing.record.action, parsedAction.data)\n  ) {\n    return existing.record;\n  }\n  assertContextActive(input.context, input.nowMs ?? Date.now());\n\n  const record: DispatchSpaceActionRecord = {\n    version: DISPATCH_SPACE_ACTION_RECORD_VERSION,\n    action: parsedAction.data,\n    command: input.command,\n    contextId: input.context.contextId,\n    createdAtMs: input.nowMs ?? Date.now(),\n    nonce: input.context.nonce,\n  };\n  try {\n    writeJsonFileExclusive(input.context.actionRecordPath, record);\n  } catch (error) {\n    if (isNodeErrorCode(error, \"EEXIST\")) {\n      const existing = readDispatchSpaceActionRecord({\n        context: input.context,\n      });\n      // A lost acknowledgement may cause the same proposal to be submitted\n      // again. Acknowledge that record, never replace it or accept a new action.\n      if (\n        existing.status === \"loaded\" &&\n        isDeepStrictEqual(existing.record.action, parsedAction.data)\n      ) {\n        return existing.record;\n      }\n      throw new Error(\n        \"An OpenMeld Space Action has already been recorded for this dispatch. A Wake can only have one final Space action.\"\n      );\n    }\n    throw error;\n  }\n  return record;\n}\n\nexport function readDispatchSpaceActionRecord(input: {\n  context: DispatchSpaceActionContext;\n  nowMs?: number;\n}): DispatchSpaceActionRecordReadResult {\n  if (!existsSync(input.context.actionRecordPath)) {\n    return { status: \"missing\" };\n  }\n  try {\n    const record = parseDispatchSpaceActionRecord(\n      readJsonFile(input.context.actionRecordPath)\n    );\n    if (\n      record.contextId !== input.context.contextId ||\n      record.nonce !== input.context.nonce\n    ) {\n      return {\n        status: \"invalid\",\n        errorMessage:\n          \"OpenMeld Space Action record does not match the active dispatch context.\",\n      };\n    }\n    if (record.createdAtMs > input.context.expiresAtMs) {\n      return {\n        status: \"invalid\",\n        errorMessage:\n          \"OpenMeld Space Action record was created after the active dispatch context expired.\",\n      };\n    }\n    return { status: \"loaded\", record };\n  } catch (error) {\n    return {\n      status: \"invalid\",\n      errorMessage: error instanceof Error ? error.message : String(error),\n    };\n  }\n}\n\nexport function supersedeDispatchSpaceActionRecordForReconsideration(input: {\n  context: DispatchSpaceActionContext;\n  nowMs?: number;\n}): { archivedPath: string; record: DispatchSpaceActionRecord } | null {\n  const readResult = readDispatchSpaceActionRecord(input);\n  if (readResult.status === \"missing\") {\n    return null;\n  }\n  if (readResult.status === \"invalid\") {\n    throw new Error(readResult.errorMessage);\n  }\n  const archivedPath = `${input.context.actionRecordPath}.superseded-${String(input.nowMs ?? Date.now())}-${randomUUID()}`;\n  renameSync(input.context.actionRecordPath, archivedPath);\n  return { archivedPath, record: readResult.record };\n}\n\nfunction parseDispatchSpaceActionContext(\n  value: unknown\n): DispatchSpaceActionContext {\n  const record = toRecord(value, \"OpenMeld Space Action context\");\n  const version = record.version;\n  if (version !== DISPATCH_SPACE_ACTION_CONTEXT_VERSION) {\n    throw new Error(\"Unsupported OpenMeld Space Action context version.\");\n  }\n  const sendTargetReference = parseSendTargetReference(\n    record.sendTargetReference\n  );\n  return {\n    version,\n    actionRecordPath: requiredString(\n      record.actionRecordPath,\n      \"actionRecordPath\"\n    ),\n    attemptId: requiredString(record.attemptId, \"attemptId\"),\n    contextId: requiredString(record.contextId, \"contextId\"),\n    dispatchId: requiredString(record.dispatchId, \"dispatchId\"),\n    expiresAtMs: requiredFiniteNumber(record.expiresAtMs, \"expiresAtMs\"),\n    nonce: requiredString(record.nonce, \"nonce\"),\n    replyToSignalId: optionalString(record.replyToSignalId),\n    sendTargetReference,\n    sourceEventId: requiredString(record.sourceEventId, \"sourceEventId\"),\n    spaceContractSnapshot: parseSpaceContractSnapshot(\n      record.spaceContractSnapshot\n    ),\n    spaceId: requiredString(record.spaceId, \"spaceId\"),\n    targetProfileId: requiredString(record.targetProfileId, \"targetProfileId\"),\n    taskId: requiredString(record.taskId, \"taskId\"),\n    ...(record.workingCopyId\n      ? { workingCopyId: requiredString(record.workingCopyId, \"workingCopyId\") }\n      : {}),\n  };\n}\n\nfunction assertDispatchRuntimeEnvMatchesContext(input: {\n  context: DispatchSpaceActionContext;\n  env: NodeJS.ProcessEnv;\n}): void {\n  const mode = normalizeOptionalText(\n    input.env[OPENMELD_DISPATCH_RUNTIME_MODE_ENV]\n  );\n  if (mode !== DISPATCH_OWNED_RUNTIME_MODE) {\n    return;\n  }\n\n  const envDispatchId = normalizeOptionalText(\n    input.env[OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]\n  );\n  if (!envDispatchId) {\n    throw new Error(\n      \"OpenMeld Space Action dispatch runtime is missing the active dispatch ID.\"\n    );\n  }\n  if (envDispatchId !== input.context.dispatchId) {\n    throw new DispatchSpaceActionClosedError(\n      \"space_action.context_mismatch\",\n      \"OpenMeld Space Action dispatch context does not match the active dispatch runtime.\"\n    );\n  }\n\n  const envTargetProfileId = normalizeOptionalText(\n    input.env[OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]\n  );\n  if (!envTargetProfileId) {\n    throw new Error(\n      \"OpenMeld Space Action dispatch runtime is missing the active target profile ID.\"\n    );\n  }\n  if (envTargetProfileId !== input.context.targetProfileId) {\n    throw new DispatchSpaceActionClosedError(\n      \"space_action.context_mismatch\",\n      \"OpenMeld Space Action target profile does not match the active dispatch runtime.\"\n    );\n  }\n}\n\nfunction parseDispatchSpaceActionRecord(\n  value: unknown\n): DispatchSpaceActionRecord {\n  const record = toRecord(value, \"OpenMeld Space Action record\");\n  const version = record.version;\n  if (version !== DISPATCH_SPACE_ACTION_RECORD_VERSION) {\n    throw new Error(\"Unsupported OpenMeld Space Action record version.\");\n  }\n  const parsedAction = openMeldSpaceEgressActionSchema.safeParse(record.action);\n  if (!parsedAction.success) {\n    throw parsedAction.error;\n  }\n  return {\n    version,\n    action: parsedAction.data,\n    command: requiredString(record.command, \"command\"),\n    contextId: requiredString(record.contextId, \"contextId\"),\n    createdAtMs: requiredFiniteNumber(record.createdAtMs, \"createdAtMs\"),\n    nonce: requiredString(record.nonce, \"nonce\"),\n  };\n}\n\nfunction parseSendTargetReference(\n  value: unknown\n): DispatchSpaceActionSendTargetReference {\n  const record = toRecord(value, \"sendTargetReference\");\n  if (record.status === \"loaded\") {\n    if (!Array.isArray(record.projection)) {\n      throw new Error(\n        \"OpenMeld Space Action send target projection must be an array.\"\n      );\n    }\n    return {\n      status: \"loaded\",\n      projection: record.projection.map(parseSendTargetProjectionEntry),\n      referenceLines: parseStringArray(record.referenceLines),\n    };\n  }\n  if (record.status === \"failed\") {\n    return {\n      status: \"failed\",\n      errorMessage: requiredString(record.errorMessage, \"errorMessage\"),\n      projection: null,\n      referenceLines: [],\n    };\n  }\n  throw new Error(\n    \"Invalid OpenMeld Space Action send target reference status.\"\n  );\n}\n\nfunction parseSendTargetProjectionEntry(\n  value: unknown,\n  index: number\n): SpaceMemberDirectoryEntry {\n  const parsed = spaceMemberDirectoryEntrySchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(\n      `OpenMeld Space Action target projection entry ${index} is not a valid Space member directory entry.`\n    );\n  }\n  return parsed.data;\n}\n\nfunction parseSpaceContractSnapshot(\n  value: unknown\n): Pick<SpaceContract, \"allowedActions\" | \"publicationMode\"> | null {\n  if (value === null || value === undefined) {\n    return null;\n  }\n  const record = toRecord(value, \"spaceContractSnapshot\");\n  return {\n    allowedActions: Array.isArray(record.allowedActions)\n      ? (record.allowedActions as SpaceContract[\"allowedActions\"])\n      : [],\n    publicationMode:\n      record.publicationMode === \"raw_context_sharing\"\n        ? \"raw_context_sharing\"\n        : \"collaboration\",\n  };\n}\n\nfunction assertContextActive(\n  context: DispatchSpaceActionContext,\n  nowMs: number\n): void {\n  if (nowMs > context.expiresAtMs) {\n    throw new DispatchSpaceActionClosedError(\n      \"space_action.context_expired\",\n      \"The OpenMeld Space Action dispatch context has expired.\"\n    );\n  }\n}\n\nfunction readJsonFile(path: string): unknown {\n  return JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n}\n\nfunction writeJsonFileExclusive(path: string, value: unknown): void {\n  writeFileSync(path, `${JSON.stringify(value, null, 2)}\\n`, {\n    encoding: \"utf8\",\n    flag: \"wx\",\n    mode: 0o600,\n  });\n  chmodSync(path, 0o600);\n}\n\nfunction toRecord(value: unknown, label: string): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    throw new Error(`${label} must be a JSON object.`);\n  }\n  return value as Record<string, unknown>;\n}\n\nfunction requiredString(value: unknown, fieldName: string): string {\n  const normalized = normalizeOptionalText(value);\n  if (!normalized) {\n    throw new Error(`${fieldName} must be a non-empty string.`);\n  }\n  return normalized;\n}\n\nfunction requiredFiniteNumber(value: unknown, fieldName: string): number {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) {\n    throw new Error(`${fieldName} must be a finite number.`);\n  }\n  return value;\n}\n\nfunction optionalString(value: unknown): string | null {\n  if (value === null || value === undefined) {\n    return null;\n  }\n  return normalizeOptionalText(value);\n}\n\nfunction parseStringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) {\n    return [];\n  }\n  return value\n    .map((item) => normalizeOptionalText(item))\n    .filter((item): item is string => Boolean(item));\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction isNodeErrorCode(error: unknown, code: string): boolean {\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    (error as { code?: unknown }).code === code\n  );\n}\n","import {\n  chmodSync,\n  existsSync,\n  mkdirSync,\n  readFileSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { delimiter, dirname, join, resolve } from \"node:path\";\nimport { daemonRuntimeRootPath } from \"../config/daemon-state\";\nimport {\n  type OpenMeldPathResolutionInput,\n  openMeldManagedBinaryPath,\n  resolveOpenMeldEnvPreset,\n} from \"../config/paths\";\nimport {\n  DISPATCH_OWNED_RUNTIME_MODE,\n  OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV,\n  OPENMELD_DISPATCH_RUNTIME_MODE_ENV,\n  OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV,\n  OPENMELD_SPACE_ACTION_TOOL_COMMAND_PATH_ENV,\n  OPENMELD_USER_FACING_CLI_COMMAND_ENV,\n} from \"./dispatch-runtime-env\";\nimport { OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV } from \"./dispatch-space-action-context\";\nimport {\n  type OpenMeldDistribution,\n  resolveOpenMeldDistribution,\n} from \"./distribution\";\n\nconst DISPATCH_OWNED_RUNTIME_CLI_SHIM_DIRNAME = \"dispatch-owned-cli\";\nconst DISPATCH_SPACE_ACTION_CLI_SHIM_DIRNAME = \"bin\";\nconst OPENMELD_ENV_PRESET_ENV = \"OPENMELD_ENV_PRESET\";\nconst DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES = [\n  \"openmeld\",\n  \"openmeld-dev\",\n  \"openmeld-canary\",\n] as const;\n\nexport type DispatchOwnedRuntimeGuard = {\n  active: boolean;\n  dispatchId: string | null;\n  targetProfileId: string | null;\n};\n\nexport function buildDispatchOwnedRuntimeEnv(input: {\n  dispatchId: string;\n  targetProfileId: string;\n  distribution?: OpenMeldDistribution;\n  env?: Record<string, string | undefined>;\n  cliEntryPath?: string;\n  spaceActionContextPath?: string | null;\n}): Record<string, string | undefined> {\n  // Provider overrides are not a replacement for the carrier's lane. Keep\n  // these non-secret installation selectors without copying unrelated Service\n  // credentials into the provider environment.\n  const env = {\n    OPENMELD_HOME: process.env.OPENMELD_HOME,\n    OPENMELD_ENV_PRESET: process.env.OPENMELD_ENV_PRESET,\n    ...(input.env ?? {}),\n  };\n  const currentPath = normalizeOptionalText(\n    input.env?.PATH ?? process.env.PATH\n  );\n  const shimDir = ensureDispatchOwnedRuntimeCliShims({\n    cliEntryPath: input.cliEntryPath,\n    dispatchId: input.dispatchId,\n    distribution: input.distribution,\n    env,\n    spaceActionContextPath: input.spaceActionContextPath,\n    targetProfileId: input.targetProfileId,\n  });\n  const actionCommand = resolveDispatchOwnedRuntimeActionCliEntryCommand({\n    env,\n  });\n  return {\n    ...env,\n    PATH: prependPathEntry({\n      currentPath,\n      nextEntry: shimDir,\n    }),\n    [OPENMELD_DISPATCH_RUNTIME_MODE_ENV]: DISPATCH_OWNED_RUNTIME_MODE,\n    [OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]: input.dispatchId,\n    [OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]: input.targetProfileId,\n    [OPENMELD_USER_FACING_CLI_COMMAND_ENV]: actionCommand,\n    [OPENMELD_SPACE_ACTION_TOOL_COMMAND_PATH_ENV]: join(shimDir, actionCommand),\n    [OPENMELD_ENV_PRESET_ENV]: resolveDispatchOwnedRuntimeEnvPreset({\n      env,\n    }),\n    ...(input.spaceActionContextPath\n      ? {\n          [OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]:\n            input.spaceActionContextPath,\n        }\n      : {}),\n  };\n}\n\nexport function resolveDispatchOwnedRuntimeActionCliEntryCommand(\n  input: OpenMeldPathResolutionInput = {}\n): \"openmeld\" | \"openmeld-dev\" | \"openmeld-canary\" {\n  const preset = resolveOpenMeldEnvPreset(input);\n  if (preset === \"dev-local\") {\n    return \"openmeld-dev\";\n  }\n  if (preset === \"canary\") {\n    return \"openmeld-canary\";\n  }\n  return \"openmeld\";\n}\n\nexport function resolveDispatchOwnedRuntimeCliShimDir(\n  input: OpenMeldPathResolutionInput & {\n    spaceActionContextPath?: string | null;\n  } = {}\n): string {\n  const spaceActionContextPath = normalizeOptionalText(\n    input.spaceActionContextPath\n  );\n  if (spaceActionContextPath) {\n    return join(\n      dirname(spaceActionContextPath),\n      DISPATCH_SPACE_ACTION_CLI_SHIM_DIRNAME\n    );\n  }\n  return join(\n    daemonRuntimeRootPath(input),\n    \"bin\",\n    DISPATCH_OWNED_RUNTIME_CLI_SHIM_DIRNAME\n  );\n}\n\nexport function ensureDispatchOwnedRuntimeCliShims(input?: {\n  cliEntryPath?: string;\n  distribution?: OpenMeldDistribution;\n  dispatchId?: string;\n  env?: Record<string, string | undefined>;\n  spaceActionContextPath?: string | null;\n  targetProfileId?: string;\n}): string {\n  const distribution = input?.distribution ?? resolveOpenMeldDistribution();\n  const cliEntryPath =\n    distribution === \"binary\"\n      ? resolveDispatchOwnedRuntimeBinaryCliEntryPath({\n          cliEntryPath: input?.cliEntryPath,\n          env: input?.env,\n        })\n      : resolveDispatchOwnedRuntimeCliEntryPath(input?.cliEntryPath);\n  const shimDir = resolveDispatchOwnedRuntimeCliShimDir({\n    env: input?.env,\n    spaceActionContextPath: input?.spaceActionContextPath,\n  });\n  mkdirSync(shimDir, { recursive: true });\n\n  for (const commandName of DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES) {\n    const shimPath = join(shimDir, commandName);\n    const shimSource = buildDispatchOwnedRuntimeCliShimSource({\n      cliEntryPath,\n      commandName,\n      dispatchId: input?.dispatchId,\n      distribution,\n      nodePath: process.execPath,\n      spaceActionContextPath: input?.spaceActionContextPath,\n      targetProfileId: input?.targetProfileId,\n    });\n    if (existsSync(shimPath)) {\n      const currentSource = safeReadTextFile(shimPath);\n      if (currentSource === shimSource) {\n        chmodSync(shimPath, 0o755);\n        continue;\n      }\n    }\n    writeFileSync(shimPath, shimSource, {\n      encoding: \"utf8\",\n      mode: 0o755,\n    });\n    chmodSync(shimPath, 0o755);\n  }\n\n  return shimDir;\n}\n\nexport function readDispatchOwnedRuntimeGuard(\n  env: NodeJS.ProcessEnv = process.env\n): DispatchOwnedRuntimeGuard {\n  const mode = normalizeOptionalText(env[OPENMELD_DISPATCH_RUNTIME_MODE_ENV]);\n  if (mode !== DISPATCH_OWNED_RUNTIME_MODE) {\n    return {\n      active: false,\n      dispatchId: null,\n      targetProfileId: null,\n    };\n  }\n\n  return {\n    active: true,\n    dispatchId: normalizeOptionalText(\n      env[OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]\n    ),\n    targetProfileId: normalizeOptionalText(\n      env[OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]\n    ),\n  };\n}\n\nexport function assertDispatchOwnedRuntimePublicWriteAllowed(input: {\n  commandLabel: string;\n  env?: NodeJS.ProcessEnv;\n}): void {\n  const guard = readDispatchOwnedRuntimeGuard(input.env);\n  if (!guard.active) {\n    return;\n  }\n\n  const dispatchIdSuffix = guard.dispatchId\n    ? ` (dispatch ${guard.dispatchId})`\n    : \"\";\n  throw new Error(\n    `${input.commandLabel} is blocked inside a dispatch-owned runtime${dispatchIdSuffix}. Public space writes must be returned through OpenMeld Space structured actions: post_message, post_status, or stay_silent.`\n  );\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction resolveDispatchOwnedRuntimeCliEntryPath(\n  cliEntryPath?: string\n): string {\n  const normalizedCliEntryPath =\n    normalizeOptionalText(cliEntryPath) ??\n    normalizeOptionalText(process.argv[1]) ??\n    null;\n  if (!normalizedCliEntryPath) {\n    throw new Error(\n      \"dispatch-owned runtime CLI shim requires a current CLI entry path\"\n    );\n  }\n  return resolve(normalizedCliEntryPath);\n}\n\nfunction resolveDispatchOwnedRuntimeBinaryCliEntryPath(input: {\n  cliEntryPath?: string;\n  env?: Record<string, string | undefined>;\n}): string {\n  // A background Service may keep running from an executable path that an\n  // upgrade later replaces with a launcher. The lane-owned managed CLI is the\n  // stable command authority for new Space Action subprocesses.\n  const normalizedCliEntryPath =\n    normalizeOptionalText(input.cliEntryPath) ??\n    normalizeOptionalText(openMeldManagedBinaryPath({ env: input.env })) ??\n    null;\n  if (!normalizedCliEntryPath) {\n    throw new Error(\n      \"dispatch-owned runtime CLI shim requires a current binary CLI path\"\n    );\n  }\n  return resolve(normalizedCliEntryPath);\n}\n\nfunction buildDispatchOwnedRuntimeCliShimSource(input: {\n  cliEntryPath: string;\n  commandName: (typeof DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES)[number];\n  distribution: OpenMeldDistribution;\n  dispatchId?: string;\n  nodePath: string;\n  spaceActionContextPath?: string | null;\n  targetProfileId?: string;\n}): string {\n  const embeddedEnv = {\n    [OPENMELD_DISPATCH_RUNTIME_MODE_ENV]: DISPATCH_OWNED_RUNTIME_MODE,\n    [OPENMELD_ENV_PRESET_ENV]: resolveEnvPresetForCommandName(\n      input.commandName\n    ),\n    [OPENMELD_USER_FACING_CLI_COMMAND_ENV]: input.commandName,\n    ...(normalizeOptionalText(input.dispatchId)\n      ? {\n          [OPENMELD_DISPATCH_RUNTIME_DISPATCH_ID_ENV]: normalizeOptionalText(\n            input.dispatchId\n          ) as string,\n        }\n      : {}),\n    ...(normalizeOptionalText(input.targetProfileId)\n      ? {\n          [OPENMELD_DISPATCH_RUNTIME_TARGET_PROFILE_ID_ENV]:\n            normalizeOptionalText(input.targetProfileId) as string,\n        }\n      : {}),\n    ...(normalizeOptionalText(input.spaceActionContextPath)\n      ? {\n          [OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV]: normalizeOptionalText(\n            input.spaceActionContextPath\n          ) as string,\n        }\n      : {}),\n  };\n  if (input.distribution === \"binary\") {\n    const exportRows = Object.entries(embeddedEnv).map(\n      ([key, value]) => `export ${key}=${quoteShellValue(value)}`\n    );\n    return `#!/bin/sh\n${exportRows.join(\"\\n\")}\nexec ${quoteShellValue(input.cliEntryPath)} \"$@\"\n`;\n  }\n  return `#!/usr/bin/env node\nimport { spawnSync } from \"node:child_process\";\n\nconst result = spawnSync(${JSON.stringify(input.nodePath)}, [${JSON.stringify(\n    input.cliEntryPath\n  )}, ...process.argv.slice(2)], {\n  env: { ...process.env, ...${JSON.stringify(embeddedEnv)} },\n  stdio: \"inherit\",\n});\n\nif (result.error) {\n  throw result.error;\n}\n\nprocess.exit(result.status ?? 1);\n`;\n}\n\nfunction resolveDispatchOwnedRuntimeEnvPreset(input: {\n  env?: Record<string, string | undefined>;\n}): \"prod\" | \"dev-local\" | \"canary\" {\n  return resolveEnvPresetForCommandName(\n    resolveDispatchOwnedRuntimeActionCliEntryCommand({\n      env: input.env,\n    })\n  );\n}\n\nfunction resolveEnvPresetForCommandName(\n  commandName: (typeof DISPATCH_OWNED_RUNTIME_CLI_COMMAND_NAMES)[number]\n): \"prod\" | \"dev-local\" | \"canary\" {\n  if (commandName === \"openmeld-dev\") {\n    return \"dev-local\";\n  }\n  if (commandName === \"openmeld-canary\") {\n    return \"canary\";\n  }\n  return \"prod\";\n}\n\nfunction quoteShellValue(value: string): string {\n  return `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n}\n\nfunction safeReadTextFile(path: string): string | null {\n  try {\n    return readFileSync(path, \"utf8\");\n  } catch {\n    return null;\n  }\n}\n\nfunction prependPathEntry(input: {\n  currentPath: string | null;\n  nextEntry: string;\n}): string {\n  const currentEntries = (input.currentPath ?? \"\")\n    .split(delimiter)\n    .map((entry) => entry.trim())\n    .filter((entry) => entry.length > 0);\n  const dedupedEntries = currentEntries.filter(\n    (entry) => entry !== input.nextEntry\n  );\n  return [input.nextEntry, ...dedupedEntries].join(delimiter);\n}\n","export function parseJsonResponse(raw: string): unknown {\n  if (!raw.trim()) {\n    return null;\n  }\n  try {\n    return JSON.parse(raw);\n  } catch {\n    return null;\n  }\n}\n","import { OpenMeldApiClientHttpError } from \"@openmeld/api-client\";\nimport { OPENMELD_HEADER_REQUEST_ID } from \"@openmeld/gateway-contract\";\nimport { gatewayErrorEnvelopeSchema } from \"@openmeld/schemas\";\nimport type { GatewayErrorCode } from \"@openmeld/schemas/types\";\nimport { parseJsonResponse } from \"./api-json\";\n\nconst FALLBACK_GATEWAY_HTTP_ERROR_CODE = \"gateway.http_error\" as const;\nconst GENERIC_NETWORK_ERROR_CODES = [\n  \"network.timeout\",\n  \"network.request_failed\",\n] as const;\n\ntype SafeParseResult<T> = { success: true; data: T } | { success: false };\n\ntype GatewayResponseSchema<T> = {\n  safeParse: (value: unknown) => SafeParseResult<T>;\n};\n\nexport type GatewayResponseErrorCode =\n  | GatewayErrorCode\n  | typeof FALLBACK_GATEWAY_HTTP_ERROR_CODE\n  | (typeof GENERIC_NETWORK_ERROR_CODES)[number]\n  | string;\n\nexport type StructuredGatewayFailure = {\n  code: GatewayResponseErrorCode | null;\n  message: string;\n  requestId: string | null;\n  status: number | null;\n  upstreamCode: string | null;\n};\n\nexport class GatewayHttpError extends Error {\n  readonly code: GatewayResponseErrorCode;\n  readonly requestId: string | null;\n  readonly status: number;\n  readonly rawBody: string;\n  readonly upstreamCode: string | null;\n\n  constructor(input: {\n    code: GatewayResponseErrorCode;\n    message: string;\n    requestId?: string | null;\n    status: number;\n    rawBody: string;\n    upstreamCode?: string | null;\n  }) {\n    super(input.message);\n    this.name = \"GatewayHttpError\";\n    this.code = input.code;\n    this.requestId = normalizeOptionalText(input.requestId);\n    this.status = input.status;\n    this.rawBody = input.rawBody;\n    this.upstreamCode = normalizeOptionalText(input.upstreamCode);\n  }\n}\n\nexport async function readGatewayJsonResponse<T>(input: {\n  response: Response;\n  schema: GatewayResponseSchema<T>;\n  invalidMessage: string;\n}): Promise<T> {\n  const raw = await input.response.text();\n  assertGatewayResponseOk({\n    response: input.response,\n    raw,\n  });\n\n  const parsed = input.schema.safeParse(parseJsonResponse(raw));\n  if (!parsed.success) {\n    throw new Error(input.invalidMessage);\n  }\n  return parsed.data;\n}\n\nexport async function readGatewayTextResponse(input: {\n  response: Response;\n}): Promise<string> {\n  const raw = await input.response.text();\n  assertGatewayResponseOk({\n    response: input.response,\n    raw,\n  });\n  return raw;\n}\n\nexport function assertGatewayResponseOk(input: {\n  response: Response;\n  raw: string;\n}): void {\n  if (input.response.ok) {\n    return;\n  }\n  throw parseGatewayErrorResponse(input);\n}\n\nexport function parseGatewayErrorResponse(input: {\n  response: Pick<Response, \"headers\" | \"status\">;\n  raw: string;\n}): GatewayHttpError {\n  const payload = parseJsonResponse(input.raw);\n  const parsed = gatewayErrorEnvelopeSchema.safeParse(payload);\n  const headerRequestId = normalizeOptionalText(\n    input.response.headers.get(OPENMELD_HEADER_REQUEST_ID)\n  );\n\n  if (parsed.success) {\n    return new GatewayHttpError({\n      code: parsed.data.error.code,\n      message: parsed.data.error.message,\n      requestId: parsed.data.error.requestId || headerRequestId,\n      status: input.response.status,\n      rawBody: input.raw,\n      upstreamCode: parsed.data.error.upstreamCode ?? null,\n    });\n  }\n\n  const looseEnvelope = readLooseGatewayErrorEnvelope(payload);\n  if (looseEnvelope) {\n    return new GatewayHttpError({\n      code: looseEnvelope.code ?? FALLBACK_GATEWAY_HTTP_ERROR_CODE,\n      message:\n        looseEnvelope.message ??\n        `Gateway request failed with HTTP ${input.response.status}.`,\n      requestId: looseEnvelope.requestId ?? headerRequestId,\n      status: input.response.status,\n      rawBody: input.raw,\n      upstreamCode: looseEnvelope.upstreamCode,\n    });\n  }\n\n  return new GatewayHttpError({\n    code: FALLBACK_GATEWAY_HTTP_ERROR_CODE,\n    message:\n      normalizeOptionalText(input.raw) ??\n      `Gateway request failed with HTTP ${input.response.status}.`,\n    requestId: headerRequestId,\n    status: input.response.status,\n    rawBody: input.raw,\n    upstreamCode: null,\n  });\n}\n\nexport function toStructuredGatewayFailure(\n  error: unknown\n): StructuredGatewayFailure {\n  if (error instanceof OpenMeldApiClientHttpError) {\n    return {\n      code: error.code,\n      message: normalizeFailureMessage(error.message),\n      requestId: error.requestId,\n      status: error.status,\n      upstreamCode: error.upstreamCode,\n    };\n  }\n\n  if (error instanceof GatewayHttpError) {\n    return {\n      code: error.code,\n      message: normalizeFailureMessage(error.message),\n      requestId: error.requestId,\n      status: error.status,\n      upstreamCode: error.upstreamCode,\n    };\n  }\n\n  const genericErrorCode = readGenericErrorCode(error);\n  if (genericErrorCode) {\n    return {\n      code: genericErrorCode,\n      message: normalizeFailureMessage(\n        error instanceof Error ? error.message : String(error)\n      ),\n      requestId: null,\n      status: null,\n      upstreamCode: null,\n    };\n  }\n\n  return {\n    code: null,\n    message: normalizeFailureMessage(\n      error instanceof Error ? error.message : String(error)\n    ),\n    requestId: null,\n    status: null,\n    upstreamCode: null,\n  };\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n\nfunction normalizeFailureMessage(value: unknown): string {\n  return normalizeOptionalText(value) ?? \"Unknown error.\";\n}\n\nfunction readGenericErrorCode(value: unknown): GatewayResponseErrorCode | null {\n  if (!value || typeof value !== \"object\" || !(\"code\" in value)) {\n    return null;\n  }\n\n  const normalized = normalizeOptionalText(\n    (value as { code?: unknown }).code ?? null\n  );\n  return normalized as GatewayResponseErrorCode | null;\n}\n\nfunction readLooseGatewayErrorEnvelope(value: unknown): {\n  code: string | null;\n  message: string | null;\n  requestId: string | null;\n  upstreamCode: string | null;\n} | null {\n  if (!value || typeof value !== \"object\") {\n    return null;\n  }\n\n  const record = value as {\n    error?: {\n      code?: unknown;\n      message?: unknown;\n      requestId?: unknown;\n      upstreamCode?: unknown;\n    } | null;\n  };\n  const error = record.error;\n  if (!error || typeof error !== \"object\") {\n    return null;\n  }\n\n  const code = normalizeOptionalText(error.code);\n  const message = normalizeOptionalText(error.message);\n  const requestId = normalizeOptionalText(error.requestId);\n  const upstreamCode = normalizeOptionalText(error.upstreamCode);\n  if (!(code || message || requestId || upstreamCode)) {\n    return null;\n  }\n\n  return {\n    code,\n    message,\n    requestId,\n    upstreamCode,\n  };\n}\n","import type { SpaceMeta } from \"@openmeld/protocol\";\nimport { spaceMetaSchema } from \"@openmeld/schemas\";\n\ntype SpaceMetaParseOperation =\n  | \"createSpaceMeta\"\n  | \"fetchSpaceMeta\"\n  | \"updateSpaceMeta\";\n\nexport function parseSpaceMetaPayload(input: {\n  data: unknown;\n  endpoint: string;\n  operation: SpaceMetaParseOperation;\n}): SpaceMeta {\n  try {\n    const validation = spaceMetaSchema.safeParse(input.data);\n    if (!validation.success) {\n      const reason =\n        validation.error.issues[0]?.message ??\n        \"space meta payload does not match schema\";\n      throw new Error(reason);\n    }\n    return validation.data;\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `${input.operation} received invalid response payload from ${input.endpoint}: ${reason}; raw=${JSON.stringify(input.data)}`\n    );\n  }\n}\n\nexport function parseSpaceMetaResponse(input: {\n  raw: string;\n  endpoint: string;\n  operation: Extract<\n    SpaceMetaParseOperation,\n    \"fetchSpaceMeta\" | \"updateSpaceMeta\"\n  >;\n}): SpaceMeta {\n  try {\n    return parseSpaceMetaPayload({\n      data: JSON.parse(input.raw) as unknown,\n      endpoint: input.endpoint,\n      operation: input.operation,\n    });\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `${input.operation} received invalid response payload from ${input.endpoint}: ${reason}; raw=${input.raw}`\n    );\n  }\n}\n","import type { SpaceMeta } from \"@openmeld/protocol\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport { buildOpenMeldRequestContextHeadersWithAuth } from \"../config/request-headers\";\nimport { toSpaceMetaUrl } from \"../protocol/urls\";\nimport { fetchSpaceRequestWithTimeout } from \"./fetch-with-timeout\";\nimport { readGatewayTextResponse } from \"./gateway-response\";\nimport { parseSpaceMetaResponse } from \"./space-meta-response\";\n\ntype SpaceMetaApiInput = {\n  requestContext: OpenMeldRequestContext;\n  baseUrl: string;\n  space: string;\n  password?: string;\n};\n\nexport async function fetchSpaceMeta(\n  input: SpaceMetaApiInput\n): Promise<SpaceMeta> {\n  const endpoint = toSpaceMetaUrl(input.baseUrl, input.space);\n  const response = await fetchSpaceRequestWithTimeout({\n    url: endpoint,\n    operation: \"space.fetch_meta\",\n    init: {\n      method: \"GET\",\n      headers: await buildOpenMeldRequestContextHeadersWithAuth({\n        requestUrl: endpoint,\n        requestContext: input.requestContext,\n        spacePassword: input.password,\n      }),\n    },\n  });\n  const raw = await readGatewayTextResponse({ response });\n\n  return parseSpaceMetaResponse({\n    raw,\n    endpoint,\n    operation: \"fetchSpaceMeta\",\n  });\n}\n\nexport async function updateSpaceMeta(\n  input: SpaceMetaApiInput & {\n    purpose?: string;\n    guide?: string;\n  }\n): Promise<SpaceMeta> {\n  const endpoint = toSpaceMetaUrl(input.baseUrl, input.space);\n  const headers = await buildOpenMeldRequestContextHeadersWithAuth({\n    requestUrl: endpoint,\n    requestContext: input.requestContext,\n    spacePassword: input.password,\n  });\n  headers[\"content-type\"] = \"application/json\";\n\n  const response = await fetchSpaceRequestWithTimeout({\n    url: endpoint,\n    operation: \"space.update_meta\",\n    init: {\n      method: \"PATCH\",\n      headers,\n      body: JSON.stringify({\n        ...(input.purpose === undefined ? {} : { purpose: input.purpose }),\n        ...(input.guide === undefined ? {} : { guide: input.guide }),\n      }),\n    },\n  });\n  const raw = await readGatewayTextResponse({ response });\n\n  return parseSpaceMetaResponse({\n    raw,\n    endpoint,\n    operation: \"updateSpaceMeta\",\n  });\n}\n","import { createSpaceApi, type SpaceApi } from \"@openmeld/api-client\";\nimport { createCliApiClientFoundation } from \"./api-client-foundation\";\n\nexport type {\n  SpaceApi,\n  SpaceSignalsReadQuery,\n} from \"@openmeld/api-client\";\n\nexport function createCliSpaceApi(\n  baseUrl: string,\n  options: Parameters<typeof createCliApiClientFoundation>[1] = {}\n): SpaceApi {\n  return createSpaceApi(createCliApiClientFoundation(baseUrl, options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BA,MAAa,yCACX;;AAGF,IAAa,iCAAb,cAAoD,MAAM;CACxD,UAAmB;CACnB;CACA,YACE,YACA,SACA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,aAAa;CACpB;AACF;AAEA,MAAM,wCAAwC;AAC9C,MAAM,uCAAuC;AAC7C,MAAM,yBAAyB,MAAU,KAAK;AA0D9C,SAAgB,iCAAiC,OAoB/C;CACA,MAAM,YAAY,WAAW;CAC7B,MAAM,QAAQ,WAAW;CACzB,MAAM,aAAa,KACjB,sBAAsB,MAAM,aAAa,EAAE,KAAK,MAAM,IAAI,CAAC,GAC3D,0BACA,GAAG,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,GAAG,WAChC;CACA,UAAU,YAAY;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACtD,UAAU,YAAY,GAAK;CAE3B,MAAM,cAAc,KAAK,YAAY,cAAc;CACnD,MAAM,mBAAmB,KAAK,YAAY,aAAa;CACvD,MAAM,UAAsC;EAC1C,GAAI,MAAM,gBAAgB,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;EACpE,SAAS;EACT;EACA,WAAW,MAAM;EACjB;EACA,YAAY,MAAM;EAClB,aAAa,KAAK,IAAI,KAAK,MAAM,SAAS;EAC1C;EACA,iBAAiBA,wBAAsB,MAAM,eAAe;EAC5D,qBAAqB,MAAM;EAC3B,eAAe,MAAM;EACrB,uBAAuB,MAAM,wBACzB;GACE,gBAAgB,MAAM,sBAAsB;GAC5C,iBAAiB,MAAM,sBAAsB;EAC/C,IACA;EACJ,SAAS,MAAM;EACf,iBAAiB,MAAM;EACvB,QAAQ,MAAM;CAChB;CAEA,uBAAuB,aAAa,OAAO;CAC3C,OAAO;EAAE;EAAS;CAAY;AAChC;AAEA,SAAgB,sCACd,MAAyB,QAAQ,KACL;CAC5B,MAAM,UAAU,gDAAgD,GAAG;CACnE,oBAAoB,SAAS,KAAK,IAAI,CAAC;CACvC,OAAO;AACT;AAMA,SAAgB,gDACd,MAAyB,QAAQ,KACL;CAC5B,MAAM,cAAcA,wBAClB,IAAI,uCACN;CACA,IAAI,CAAC,aACH,MAAM,IAAI,MACR,sHACF;CAEF,MAAM,UAAU,+BAA+B,WAAW;CAC1D,uCAAuC;EAAE;EAAS;CAAI,CAAC;CACvD,OAAO;AACT;AAEA,SAAgB,+BACd,aAC4B;CAC5B,OAAO,gCAAgC,aAAa,WAAW,CAAC;AAClE;AAEA,SAAgB,+BAA+B,OAKjB;CAC5B,MAAM,eAAe,gCAAgC,UAAU,MAAM,MAAM;CAC3E,IAAI,CAAC,aAAa,SAChB,MAAM,aAAa;CAErB,IAAI,sBAAsB,aAAa,MAAM,MAAM,QAAQ,eAAe,GACxE,MAAM,IAAI,MACR,kJACF;CAGF,MAAM,WAAW,8BAA8B,EAAE,SAAS,MAAM,QAAQ,CAAC;CACzE,IAAI,SAAS,WAAW,WACtB,MAAM,IAAI,MAAM,SAAS,YAAY;CAEvC,IACE,SAAS,WAAW,YACpB,kBAAkB,SAAS,OAAO,QAAQ,aAAa,IAAI,GAE3D,OAAO,SAAS;CAElB,oBAAoB,MAAM,SAAS,MAAM,SAAS,KAAK,IAAI,CAAC;CAE5D,MAAM,SAAoC;EACxC,SAAS;EACT,QAAQ,aAAa;EACrB,SAAS,MAAM;EACf,WAAW,MAAM,QAAQ;EACzB,aAAa,MAAM,SAAS,KAAK,IAAI;EACrC,OAAO,MAAM,QAAQ;CACvB;CACA,IAAI;EACF,uBAAuB,MAAM,QAAQ,kBAAkB,MAAM;CAC/D,SAAS,OAAO;EACd,IAAI,gBAAgB,OAAO,QAAQ,GAAG;GACpC,MAAM,WAAW,8BAA8B,EAC7C,SAAS,MAAM,QACjB,CAAC;GAGD,IACE,SAAS,WAAW,YACpB,kBAAkB,SAAS,OAAO,QAAQ,aAAa,IAAI,GAE3D,OAAO,SAAS;GAElB,MAAM,IAAI,MACR,oHACF;EACF;EACA,MAAM;CACR;CACA,OAAO;AACT;AAEA,SAAgB,8BAA8B,OAGN;CACtC,IAAI,CAAC,WAAW,MAAM,QAAQ,gBAAgB,GAC5C,OAAO,EAAE,QAAQ,UAAU;CAE7B,IAAI;EACF,MAAM,SAAS,+BACb,aAAa,MAAM,QAAQ,gBAAgB,CAC7C;EACA,IACE,OAAO,cAAc,MAAM,QAAQ,aACnC,OAAO,UAAU,MAAM,QAAQ,OAE/B,OAAO;GACL,QAAQ;GACR,cACE;EACJ;EAEF,IAAI,OAAO,cAAc,MAAM,QAAQ,aACrC,OAAO;GACL,QAAQ;GACR,cACE;EACJ;EAEF,OAAO;GAAE,QAAQ;GAAU;EAAO;CACpC,SAAS,OAAO;EACd,OAAO;GACL,QAAQ;GACR,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE;CACF;AACF;AAEA,SAAgB,qDAAqD,OAGE;CACrE,MAAM,aAAa,8BAA8B,KAAK;CACtD,IAAI,WAAW,WAAW,WACxB,OAAO;CAET,IAAI,WAAW,WAAW,WACxB,MAAM,IAAI,MAAM,WAAW,YAAY;CAEzC,MAAM,eAAe,GAAG,MAAM,QAAQ,iBAAiB,cAAc,OAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,GAAG,WAAW;CACrH,WAAW,MAAM,QAAQ,kBAAkB,YAAY;CACvD,OAAO;EAAE;EAAc,QAAQ,WAAW;CAAO;AACnD;AAEA,SAAS,gCACP,OAC4B;CAC5B,MAAM,SAAS,SAAS,OAAO,+BAA+B;CAC9D,MAAM,UAAU,OAAO;CACvB,IAAI,YAAY,uCACd,MAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,sBAAsB,yBAC1B,OAAO,mBACT;CACA,OAAO;EACL;EACA,kBAAkB,eAChB,OAAO,kBACP,kBACF;EACA,WAAW,eAAe,OAAO,WAAW,WAAW;EACvD,WAAW,eAAe,OAAO,WAAW,WAAW;EACvD,YAAY,eAAe,OAAO,YAAY,YAAY;EAC1D,aAAa,qBAAqB,OAAO,aAAa,aAAa;EACnE,OAAO,eAAe,OAAO,OAAO,OAAO;EAC3C,iBAAiB,eAAe,OAAO,eAAe;EACtD;EACA,eAAe,eAAe,OAAO,eAAe,eAAe;EACnE,uBAAuB,2BACrB,OAAO,qBACT;EACA,SAAS,eAAe,OAAO,SAAS,SAAS;EACjD,iBAAiB,eAAe,OAAO,iBAAiB,iBAAiB;EACzE,QAAQ,eAAe,OAAO,QAAQ,QAAQ;EAC9C,GAAI,OAAO,gBACP,EAAE,eAAe,eAAe,OAAO,eAAe,eAAe,EAAE,IACvE,CAAC;CACP;AACF;AAEA,SAAS,uCAAuC,OAGvC;CAIP,IAHaA,wBACX,MAAM,IAAA,iCAED,MAAA,0BACL;CAGF,MAAM,gBAAgBA,wBACpB,MAAM,IAAI,0CACZ;CACA,IAAI,CAAC,eACH,MAAM,IAAI,MACR,2EACF;CAEF,IAAI,kBAAkB,MAAM,QAAQ,YAClC,MAAM,IAAI,+BACR,iCACA,oFACF;CAGF,MAAM,qBAAqBA,wBACzB,MAAM,IAAI,gDACZ;CACA,IAAI,CAAC,oBACH,MAAM,IAAI,MACR,iFACF;CAEF,IAAI,uBAAuB,MAAM,QAAQ,iBACvC,MAAM,IAAI,+BACR,iCACA,kFACF;AAEJ;AAEA,SAAS,+BACP,OAC2B;CAC3B,MAAM,SAAS,SAAS,OAAO,8BAA8B;CAC7D,MAAM,UAAU,OAAO;CACvB,IAAI,YAAY,sCACd,MAAM,IAAI,MAAM,mDAAmD;CAErE,MAAM,eAAe,gCAAgC,UAAU,OAAO,MAAM;CAC5E,IAAI,CAAC,aAAa,SAChB,MAAM,aAAa;CAErB,OAAO;EACL;EACA,QAAQ,aAAa;EACrB,SAAS,eAAe,OAAO,SAAS,SAAS;EACjD,WAAW,eAAe,OAAO,WAAW,WAAW;EACvD,aAAa,qBAAqB,OAAO,aAAa,aAAa;EACnE,OAAO,eAAe,OAAO,OAAO,OAAO;CAC7C;AACF;AAEA,SAAS,yBACP,OACwC;CACxC,MAAM,SAAS,SAAS,OAAO,qBAAqB;CACpD,IAAI,OAAO,WAAW,UAAU;EAC9B,IAAI,CAAC,MAAM,QAAQ,OAAO,UAAU,GAClC,MAAM,IAAI,MACR,gEACF;EAEF,OAAO;GACL,QAAQ;GACR,YAAY,OAAO,WAAW,IAAI,8BAA8B;GAChE,gBAAgB,iBAAiB,OAAO,cAAc;EACxD;CACF;CACA,IAAI,OAAO,WAAW,UACpB,OAAO;EACL,QAAQ;EACR,cAAc,eAAe,OAAO,cAAc,cAAc;EAChE,YAAY;EACZ,gBAAgB,CAAC;CACnB;CAEF,MAAM,IAAI,MACR,6DACF;AACF;AAEA,SAAS,+BACP,OACA,OAC2B;CAC3B,MAAM,SAAS,gCAAgC,UAAU,KAAK;CAC9D,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MACR,iDAAiD,MAAM,8CACzD;CAEF,OAAO,OAAO;AAChB;AAEA,SAAS,2BACP,OACkE;CAClE,IAAI,UAAU,QAAQ,UAAU,KAAA,GAC9B,OAAO;CAET,MAAM,SAAS,SAAS,OAAO,uBAAuB;CACtD,OAAO;EACL,gBAAgB,MAAM,QAAQ,OAAO,cAAc,IAC9C,OAAO,iBACR,CAAC;EACL,iBACE,OAAO,oBAAoB,wBACvB,wBACA;CACR;AACF;AAEA,SAAS,oBACP,SACA,OACM;CACN,IAAI,QAAQ,QAAQ,aAClB,MAAM,IAAI,+BACR,gCACA,yDACF;AAEJ;AAEA,SAAS,aAAa,MAAuB;CAC3C,OAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAC9C;AAEA,SAAS,uBAAuB,MAAc,OAAsB;CAClE,cAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK;EACzD,UAAU;EACV,MAAM;EACN,MAAM;CACR,CAAC;CACD,UAAU,MAAM,GAAK;AACvB;AAEA,SAAS,SAAS,OAAgB,OAAwC;CACxE,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,MAAM,IAAI,MAAM,GAAG,MAAM,wBAAwB;CAEnD,OAAO;AACT;AAEA,SAAS,eAAe,OAAgB,WAA2B;CACjE,MAAM,aAAaA,wBAAsB,KAAK;CAC9C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,GAAG,UAAU,6BAA6B;CAE5D,OAAO;AACT;AAEA,SAAS,qBAAqB,OAAgB,WAA2B;CACvE,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GACrD,MAAM,IAAI,MAAM,GAAG,UAAU,0BAA0B;CAEzD,OAAO;AACT;AAEA,SAAS,eAAe,OAA+B;CACrD,IAAI,UAAU,QAAQ,UAAU,KAAA,GAC9B,OAAO;CAET,OAAOA,wBAAsB,KAAK;AACpC;AAEA,SAAS,iBAAiB,OAA0B;CAClD,IAAI,CAAC,MAAM,QAAQ,KAAK,GACtB,OAAO,CAAC;CAEV,OAAO,MACJ,KAAK,SAASA,wBAAsB,IAAI,CAAC,CAAC,CAC1C,QAAQ,SAAyB,QAAQ,IAAI,CAAC;AACnD;AAEA,SAASA,wBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,gBAAgB,OAAgB,MAAuB;CAC9D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAA6B,SAAS;AAE3C;;;AC3gBA,MAAM,0CAA0C;AAChD,MAAM,yCAAyC;AAC/C,MAAM,0BAA0B;AAChC,MAAM,2CAA2C;CAC/C;CACA;CACA;AACF;AAQA,SAAgB,6BAA6B,OAON;CAIrC,MAAM,MAAM;EACV,eAAe,QAAQ,IAAI;EAC3B,qBAAqB,QAAQ,IAAI;EACjC,GAAI,MAAM,OAAO,CAAC;CACpB;CACA,MAAM,cAAcC,wBAClB,MAAM,KAAK,QAAQ,QAAQ,IAAI,IACjC;CACA,MAAM,UAAU,mCAAmC;EACjD,cAAc,MAAM;EACpB,YAAY,MAAM;EAClB,cAAc,MAAM;EACpB;EACA,wBAAwB,MAAM;EAC9B,iBAAiB,MAAM;CACzB,CAAC;CACD,MAAM,gBAAgB,iDAAiD,EACrE,IACF,CAAC;CACD,OAAO;EACL,GAAG;EACH,MAAM,iBAAiB;GACrB;GACA,WAAW;EACb,CAAC;GACA,qCAAqC;GACrC,4CAA4C,MAAM;GAClD,kDAAkD,MAAM;GACxD,uCAAuC;GACvC,8CAA8C,KAAK,SAAS,aAAa;GACzE,0BAA0B,qCAAqC,EAC9D,IACF,CAAC;EACD,GAAI,MAAM,yBACN,GACG,yCACC,MAAM,uBACV,IACA,CAAC;CACP;AACF;AAEA,SAAgB,iDACd,QAAqC,CAAC,GACW;CACjD,MAAM,SAAS,yBAAyB,KAAK;CAC7C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,UACb,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,sCACd,QAEI,CAAC,GACG;CACR,MAAM,yBAAyBA,wBAC7B,MAAM,sBACR;CACA,IAAI,wBACF,OAAO,KACL,QAAQ,sBAAsB,GAC9B,sCACF;CAEF,OAAO,KACL,sBAAsB,KAAK,GAC3B,OACA,uCACF;AACF;AAEA,SAAgB,mCAAmC,OAOxC;CACT,MAAM,eAAe,OAAO,gBAAgB,4BAA4B;CACxE,MAAM,eACJ,iBAAiB,WACb,8CAA8C;EAC5C,cAAc,OAAO;EACrB,KAAK,OAAO;CACd,CAAC,IACD,wCAAwC,OAAO,YAAY;CACjE,MAAM,UAAU,sCAAsC;EACpD,KAAK,OAAO;EACZ,wBAAwB,OAAO;CACjC,CAAC;CACD,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;CAEtC,KAAK,MAAM,eAAe,0CAA0C;EAClE,MAAM,WAAW,KAAK,SAAS,WAAW;EAC1C,MAAM,aAAa,uCAAuC;GACxD;GACA;GACA,YAAY,OAAO;GACnB;GACA,UAAU,QAAQ;GAClB,wBAAwB,OAAO;GAC/B,iBAAiB,OAAO;EAC1B,CAAC;EACD,IAAI,WAAW,QAAQ;OACC,iBAAiB,QACvB,MAAM,YAAY;IAChC,UAAU,UAAU,GAAK;IACzB;GACF;;EAEF,cAAc,UAAU,YAAY;GAClC,UAAU;GACV,MAAM;EACR,CAAC;EACD,UAAU,UAAU,GAAK;CAC3B;CAEA,OAAO;AACT;AAEA,SAAgB,8BACd,MAAyB,QAAQ,KACN;CAE3B,IADaA,wBAAsB,IAAA,iCAC5B,MAAA,0BACL,OAAO;EACL,QAAQ;EACR,YAAY;EACZ,iBAAiB;CACnB;CAGF,OAAO;EACL,QAAQ;EACR,YAAYA,wBACV,IAAI,0CACN;EACA,iBAAiBA,wBACf,IAAI,gDACN;CACF;AACF;AAEA,SAAgB,6CAA6C,OAGpD;CACP,MAAM,QAAQ,8BAA8B,MAAM,GAAG;CACrD,IAAI,CAAC,MAAM,QACT;CAGF,MAAM,mBAAmB,MAAM,aAC3B,cAAc,MAAM,WAAW,KAC/B;CACJ,MAAM,IAAI,MACR,GAAG,MAAM,aAAa,6CAA6C,iBAAiB,6HACtF;AACF;AAEA,SAASA,wBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,wCACP,cACQ;CACR,MAAM,yBACJA,wBAAsB,YAAY,KAClCA,wBAAsB,QAAQ,KAAK,EAAE,KACrC;CACF,IAAI,CAAC,wBACH,MAAM,IAAI,MACR,mEACF;CAEF,OAAO,QAAQ,sBAAsB;AACvC;AAEA,SAAS,8CAA8C,OAG5C;CAIT,MAAM,yBACJA,wBAAsB,MAAM,YAAY,KACxCA,wBAAsB,0BAA0B,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,KACnE;CACF,IAAI,CAAC,wBACH,MAAM,IAAI,MACR,oEACF;CAEF,OAAO,QAAQ,sBAAsB;AACvC;AAEA,SAAS,uCAAuC,OAQrC;CACT,MAAM,cAAc;GACjB,qCAAqC;GACrC,0BAA0B,+BACzB,MAAM,WACR;GACC,uCAAuC,MAAM;EAC9C,GAAIA,wBAAsB,MAAM,UAAU,IACtC,GACG,4CAA4CA,wBAC3C,MAAM,UACR,EACF,IACA,CAAC;EACL,GAAIA,wBAAsB,MAAM,eAAe,IAC3C,GACG,kDACCA,wBAAsB,MAAM,eAAe,EAC/C,IACA,CAAC;EACL,GAAIA,wBAAsB,MAAM,sBAAsB,IAClD,GACG,yCAAyCA,wBACxC,MAAM,sBACR,EACF,IACA,CAAC;CACP;CACA,IAAI,MAAM,iBAAiB,UAIzB,OAAO;EAHY,OAAO,QAAQ,WAAW,CAAC,CAAC,KAC5C,CAAC,KAAK,WAAW,UAAU,IAAI,GAAG,gBAAgB,KAAK,GAGnD,CAAC,CAAC,KAAK,IAAI,EAAE;OACjB,gBAAgB,MAAM,YAAY,EAAE;;CAGzC,OAAO;;;2BAGkB,KAAK,UAAU,MAAM,QAAQ,EAAE,KAAK,KAAK,UAChE,MAAM,YACR,EAAE;8BAC0B,KAAK,UAAU,WAAW,EAAE;;;;;;;;;;AAU1D;AAEA,SAAS,qCAAqC,OAEV;CAClC,OAAO,+BACL,iDAAiD,EAC/C,KAAK,MAAM,IACb,CAAC,CACH;AACF;AAEA,SAAS,+BACP,aACiC;CACjC,IAAI,gBAAgB,gBAClB,OAAO;CAET,IAAI,gBAAgB,mBAClB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,gBAAgB,OAAuB;CAC9C,OAAO,IAAI,MAAM,WAAW,KAAK,OAAO,EAAE;AAC5C;AAEA,SAAS,iBAAiB,MAA6B;CACrD,IAAI;EACF,OAAO,aAAa,MAAM,MAAM;CAClC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,OAGf;CAKT,MAAM,kBAJkB,MAAM,eAAe,GAAA,CAC1C,MAAM,SAAS,CAAC,CAChB,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CACA,CAAC,CAAC,QACnC,UAAU,UAAU,MAAM,SAC7B;CACA,OAAO,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,KAAK,SAAS;AAC5D;;;AChXA,SAAgB,kBAAkB,KAAsB;CACtD,IAAI,CAAC,IAAI,KAAK,GACZ,OAAO;CAET,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN,OAAO;CACT;AACF;;;ACHA,MAAM,mCAAmC;AA0BzC,IAAa,mBAAb,cAAsC,MAAM;CAC1C;CACA;CACA;CACA;CACA;CAEA,YAAY,OAOT;EACD,MAAM,MAAM,OAAO;EACnB,KAAK,OAAO;EACZ,KAAK,OAAO,MAAM;EAClB,KAAK,YAAY,sBAAsB,MAAM,SAAS;EACtD,KAAK,SAAS,MAAM;EACpB,KAAK,UAAU,MAAM;EACrB,KAAK,eAAe,sBAAsB,MAAM,YAAY;CAC9D;AACF;AAEA,eAAsB,wBAA2B,OAIlC;CACb,MAAM,MAAM,MAAM,MAAM,SAAS,KAAK;CACtC,wBAAwB;EACtB,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,SAAS,MAAM,OAAO,UAAU,kBAAkB,GAAG,CAAC;CAC5D,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,MAAM,cAAc;CAEtC,OAAO,OAAO;AAChB;AAEA,eAAsB,wBAAwB,OAE1B;CAClB,MAAM,MAAM,MAAM,MAAM,SAAS,KAAK;CACtC,wBAAwB;EACtB,UAAU,MAAM;EAChB;CACF,CAAC;CACD,OAAO;AACT;AAEA,SAAgB,wBAAwB,OAG/B;CACP,IAAI,MAAM,SAAS,IACjB;CAEF,MAAM,0BAA0B,KAAK;AACvC;AAEA,SAAgB,0BAA0B,OAGrB;CACnB,MAAM,UAAU,kBAAkB,MAAM,GAAG;CAC3C,MAAM,SAAS,2BAA2B,UAAU,OAAO;CAC3D,MAAM,kBAAkB,sBACtB,MAAM,SAAS,QAAQ,IAAI,0BAA0B,CACvD;CAEA,IAAI,OAAO,SACT,OAAO,IAAI,iBAAiB;EAC1B,MAAM,OAAO,KAAK,MAAM;EACxB,SAAS,OAAO,KAAK,MAAM;EAC3B,WAAW,OAAO,KAAK,MAAM,aAAa;EAC1C,QAAQ,MAAM,SAAS;EACvB,SAAS,MAAM;EACf,cAAc,OAAO,KAAK,MAAM,gBAAgB;CAClD,CAAC;CAGH,MAAM,gBAAgB,8BAA8B,OAAO;CAC3D,IAAI,eACF,OAAO,IAAI,iBAAiB;EAC1B,MAAM,cAAc,QAAQ;EAC5B,SACE,cAAc,WACd,oCAAoC,MAAM,SAAS,OAAO;EAC5D,WAAW,cAAc,aAAa;EACtC,QAAQ,MAAM,SAAS;EACvB,SAAS,MAAM;EACf,cAAc,cAAc;CAC9B,CAAC;CAGH,OAAO,IAAI,iBAAiB;EAC1B,MAAM;EACN,SACE,sBAAsB,MAAM,GAAG,KAC/B,oCAAoC,MAAM,SAAS,OAAO;EAC5D,WAAW;EACX,QAAQ,MAAM,SAAS;EACvB,SAAS,MAAM;EACf,cAAc;CAChB,CAAC;AACH;AAEA,SAAgB,2BACd,OAC0B;CAC1B,IAAI,iBAAiB,4BACnB,OAAO;EACL,MAAM,MAAM;EACZ,SAAS,wBAAwB,MAAM,OAAO;EAC9C,WAAW,MAAM;EACjB,QAAQ,MAAM;EACd,cAAc,MAAM;CACtB;CAGF,IAAI,iBAAiB,kBACnB,OAAO;EACL,MAAM,MAAM;EACZ,SAAS,wBAAwB,MAAM,OAAO;EAC9C,WAAW,MAAM;EACjB,QAAQ,MAAM;EACd,cAAc,MAAM;CACtB;CAGF,MAAM,mBAAmB,qBAAqB,KAAK;CACnD,IAAI,kBACF,OAAO;EACL,MAAM;EACN,SAAS,wBACP,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD;EACA,WAAW;EACX,QAAQ;EACR,cAAc;CAChB;CAGF,OAAO;EACL,MAAM;EACN,SAAS,wBACP,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD;EACA,WAAW;EACX,QAAQ;EACR,cAAc;CAChB;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAS,wBAAwB,OAAwB;CACvD,OAAO,sBAAsB,KAAK,KAAK;AACzC;AAEA,SAAS,qBAAqB,OAAiD;CAC7E,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,EAAE,UAAU,QACrD,OAAO;CAMT,OAHmB,sBAChB,MAA6B,QAAQ,IAExB;AAClB;AAEA,SAAS,8BAA8B,OAK9B;CACP,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAWT,MAAM,QAAQC,MAAO;CACrB,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAGT,MAAM,OAAO,sBAAsB,MAAM,IAAI;CAC7C,MAAM,UAAU,sBAAsB,MAAM,OAAO;CACnD,MAAM,YAAY,sBAAsB,MAAM,SAAS;CACvD,MAAM,eAAe,sBAAsB,MAAM,YAAY;CAC7D,IAAI,EAAE,QAAQ,WAAW,aAAa,eACpC,OAAO;CAGT,OAAO;EACL;EACA;EACA;EACA;CACF;AACF;;;AC/OA,SAAgB,sBAAsB,OAIxB;CACZ,IAAI;EACF,MAAM,aAAa,gBAAgB,UAAU,MAAM,IAAI;EACvD,IAAI,CAAC,WAAW,SAAS;GACvB,MAAM,SACJ,WAAW,MAAM,OAAO,EAAE,EAAE,WAC5B;GACF,MAAM,IAAI,MAAM,MAAM;EACxB;EACA,OAAO,WAAW;CACpB,SAAS,OAAO;EACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACpE,MAAM,IAAI,MACR,GAAG,MAAM,UAAU,0CAA0C,MAAM,SAAS,IAAI,OAAO,QAAQ,KAAK,UAAU,MAAM,IAAI,GAC1H;CACF;AACF;AAEA,SAAgB,uBAAuB,OAOzB;CACZ,IAAI;EACF,OAAO,sBAAsB;GAC3B,MAAM,KAAK,MAAM,MAAM,GAAG;GAC1B,UAAU,MAAM;GAChB,WAAW,MAAM;EACnB,CAAC;CACH,SAAS,OAAO;EACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACpE,MAAM,IAAI,MACR,GAAG,MAAM,UAAU,0CAA0C,MAAM,SAAS,IAAI,OAAO,QAAQ,MAAM,KACvG;CACF;AACF;;;ACnCA,eAAsB,eACpB,OACoB;CACpB,MAAM,WAAW,eAAe,MAAM,SAAS,MAAM,KAAK;CAe1D,OAAO,uBAAuB;EAC5B,KAAA,MAHgB,wBAAwB,EAAE,UAAA,MAZrB,6BAA6B;GAClD,KAAK;GACL,WAAW;GACX,MAAM;IACJ,QAAQ;IACR,SAAS,MAAM,2CAA2C;KACxD,YAAY;KACZ,gBAAgB,MAAM;KACtB,eAAe,MAAM;IACvB,CAAC;GACH;EACF,CAAC,EACoD,CAAC;EAIpD;EACA,WAAW;CACb,CAAC;AACH;AAEA,eAAsB,gBACpB,OAIoB;CACpB,MAAM,WAAW,eAAe,MAAM,SAAS,MAAM,KAAK;CAC1D,MAAM,UAAU,MAAM,2CAA2C;EAC/D,YAAY;EACZ,gBAAgB,MAAM;EACtB,eAAe,MAAM;CACvB,CAAC;CACD,QAAQ,kBAAkB;CAgB1B,OAAO,uBAAuB;EAC5B,KAAA,MAHgB,wBAAwB,EAAE,UAAA,MAZrB,6BAA6B;GAClD,KAAK;GACL,WAAW;GACX,MAAM;IACJ,QAAQ;IACR;IACA,MAAM,KAAK,UAAU;KACnB,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;KAChE,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;IAC5D,CAAC;GACH;EACF,CAAC,EACoD,CAAC;EAIpD;EACA,WAAW;CACb,CAAC;AACH;;;ACjEA,SAAgB,kBACd,SACA,UAA8D,CAAC,GACrD;CACV,OAAO,eAAe,6BAA6B,SAAS,OAAO,CAAC;AACtE"}

package/dist/{command-CmlgCUU2.js → command-MlrjQYq5.js}

@@ -3,26 +3,26 @@
 import { _ as toSpaceWsUrl, a as toSpaceCreateUrl, d as toSpaceMembersUrl, f as toSpaceMetaUrl, m as toSpaceRemoveMembersUrl, o as toSpaceCursorUrl, p as toSpacePasswordUrl, s as toSpaceDeleteUrl, t as normalizeBaseUrl, u as toSpaceLeaveUrl } from "./urls-CY2uzH2-.js";
 import { t as isLoopbackHostname } from "./loopback-hostname-DHQPKq8N.js";
 import { ct as resolveOpenMeldEnvPreset, d as runWithHeldLock, i as isOpenMeldLockError, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue } from "./lock-Bsl_ElWy.js";
-import { An as resolveAccountSpaceIndexGatewayHost, At as createAccountSpaceIndexApi, Bi as toLegacySpaceImageGeometryWireValue, Br as removeSpaceMembersResponseSchema, Gn as parseServerErrorFrame$1, Hn as MAX_TEXT_LENGTH, Ht as createFetchTransport, Jt as createOrganizationApi, Kn as resolveCustomMentionAliasOverride, Mt as createAgentProfileBindingApi, Nn as toStructuredApiClientFailure, Rr as leaveSpaceResponseSchema, Un as parseEnvelope$1, Vi as toCompatibleSpaceAddressingRequestWireValue, Wn as parseIncoming$1, en as createProfileSpaceHistoryApi, gt as buildProfileSpaceHistoryUpsertPath, ht as buildProfileSpaceHistoryStatusPath, ii as resolveInitialSpaceAccessMode, jn as resolveProfileSpaceHistoryGatewayHost, n as OpenMeldApiClientInvalidResponseError, qt as createOpenMeldApiClient, t as OpenMeldApiClientHttpError, zr as postSpaceMembersResponseSchema } from "./dist-YPzkhLLp.js";
+import { An as resolveAccountSpaceIndexGatewayHost, At as createAccountSpaceIndexApi, Bi as toLegacySpaceImageGeometryWireValue, Br as removeSpaceMembersResponseSchema, Gn as parseServerErrorFrame$1, Hn as MAX_TEXT_LENGTH, Ht as createFetchTransport, Jt as createOrganizationApi, Kn as resolveCustomMentionAliasOverride, Mt as createAgentProfileBindingApi, Nn as toStructuredApiClientFailure, Rr as leaveSpaceResponseSchema, Un as parseEnvelope$1, Vi as toCompatibleSpaceAddressingRequestWireValue, Wn as parseIncoming$1, en as createProfileSpaceHistoryApi, gt as buildProfileSpaceHistoryUpsertPath, ht as buildProfileSpaceHistoryStatusPath, ii as resolveInitialSpaceAccessMode, jn as resolveProfileSpaceHistoryGatewayHost, n as OpenMeldApiClientInvalidResponseError, qt as createOpenMeldApiClient, t as OpenMeldApiClientHttpError, zr as postSpaceMembersResponseSchema } from "./dist-BewA9srP.js";
 import { v as canonicalizeBuiltinAgentControllerRef, x as parseAgentControllerRef, y as normalizeBuiltinAgentControllerId } from "./controller-contract-DAOCaefz.js";
-import { Dt as resolveRegistryOriginLaunchCommand, Et as listBuiltinAgentsRegistryEntries, G as updateAgentRegistrations, H as resolveAgentTargetState, I as listAgentTargetStates, O as syncDeviceRuntimeStateProjection, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, S as syncProfileWorkspaceState, ar as createAuthorityOpenMeldServiceRuntimeId, br as resolveSelectableCandidates, cr as isAgentExecutionReadyOrConnecting, er as buildAgentControllerRef, j as resolveAgentProfilePrimaryAgentControllerReport, jr as resolveBuiltinAgentControllerBrand, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, ur as parseAgentControllerRef$1 } from "./prepare-provider-runtime-iA3g-8MS.js";
+import { Dt as resolveRegistryOriginLaunchCommand, Et as listBuiltinAgentsRegistryEntries, G as updateAgentRegistrations, H as resolveAgentTargetState, I as listAgentTargetStates, O as syncDeviceRuntimeStateProjection, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, S as syncProfileWorkspaceState, ar as createAuthorityOpenMeldServiceRuntimeId, br as resolveSelectableCandidates, cr as isAgentExecutionReadyOrConnecting, er as buildAgentControllerRef, j as resolveAgentProfilePrimaryAgentControllerReport, jr as resolveBuiltinAgentControllerBrand, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, ur as parseAgentControllerRef$1 } from "./prepare-provider-runtime-CD5ZI-ct.js";
 import { Ct as SPACE_MENTION_REJECT_NOTICE_PURPOSE, In as buildTargetWakeLifecycleId, Sr as resolveSingleSpaceMentionLabels, St as SPACE_MEMBER_REMOVE_NOTICE_PURPOSE, Yn as executionContextSelectionSchema, _t as CONVERSATION_CONTINUITY_WARNING_PURPOSE, br as normalizeSpacePasswordText, fr as parseOptionalClientMessageId, pn as spaceFileNameSchema, qt as SPACE_FILE_MAX_SIZE_BYTES, rn as resolveSpaceFileMimeType, ui as MAX_TEXT_LENGTH$1, xt as SPACE_MEMBER_JOIN_NOTICE_PURPOSE } from "./runtime-transport-0F5E6So6.js";
 import { d as getAuthSessionState } from "./auth-session-CDhQANWx.js";
 import { D as normalizeOptionalWorkingDirectory } from "./control-plane-BDS63N7Y.js";
-import { D as createDelayedSpinner, G as ensureCommandAuthenticationOrCancel, N as renderHumanErrorCard, U as connectWebSocket, W as buildCommandAuthenticationPromptMessage, at as promptTextEntry, b as formatServiceRuntimeHeadline, it as buildUnifiedCardFrame, lt as getCurrentCommandCheckState, nt as renderInfoCard, x as resolveServiceParticipationReadiness, y as formatServiceParticipationReadinessLabel } from "./service-yziCG6lR.js";
+import { D as createDelayedSpinner, G as ensureCommandAuthenticationOrCancel, N as renderHumanErrorCard, U as connectWebSocket, W as buildCommandAuthenticationPromptMessage, at as promptTextEntry, b as formatServiceRuntimeHeadline, it as buildUnifiedCardFrame, lt as getCurrentCommandCheckState, nt as renderInfoCard, x as resolveServiceParticipationReadiness, y as formatServiceParticipationReadinessLabel } from "./service-C72KhNft.js";
 import { B as createOpenMeldHumanProfile, H as getOpenMeldProfileCapabilities, J as assertAdditionalHumanProfileCreationEnabled, U as listOpenMeldProfiles, et as buildHumanAuthenticationCard, it as resolveAuthenticationGuidanceFromError, rt as resolveAuthenticationGuidance, st as resolveCurrentOpenMeldAccountContext, z as createOpenMeldAgentProfile } from "./daemon-device-id-YnLMx1kN.js";
-import { F as formatSpaceMemberCommandRecoveryCopy, H as resolveGatewayChainRetryGuidance, I as resolveReplyReadinessAvailabilityReasonCopy, L as resolveReplyReadinessGuidanceSummaryCopy, M as formatReplyReadinessSummary, O as resolveCurrentReplyReadinessSnapshot, P as REPLY_READINESS_COPY, R as resolveOpenClawDiagnosticsGuidance, U as resolveOpenClawLocalDiagnosticsValue, V as resolveGatewayChainRepairGuidance, W as resolveLocalServiceDemand, b as buildDaemonServiceRepairGuidance, z as classifyGatewayChainFailure } from "./daemon-service-update-coordinator-Clqxj3A1.js";
-import { At as SpaceComposerSubmissionError, Bt as buildSpaceProfileAddPlan, Ct as removeSpaceConfig, Dt as upsertSpaceConfig, Et as updateSpaceLastSeenTs, Ft as buildSignalMessageReadProjection, Gt as collectResolvedSpaceMentions, It as buildSignalReplyWorkflowProjection, Jt as createSpaceTargetCatalog, Lt as buildSpaceMemberAgentPresencePresentation, Ot as writeSpaceCacheDeletionNoticeState, Pt as buildSignalIndex, Rt as buildSpaceMentionProfileIndex, St as readSpaceRecentMentionProfileIds, Tt as toSpaceConfigListIntegrityError, Wt as closeMentionPickerState, Xt as extractMentionAuthoringPrefix, Yt as enterRelationPickerState, _t as isLocalSpaceStateCorruptResult, an as listSpaceMentionSuggestions, bt as readSpaceConfig, cn as prepareSpaceFileOnlySubmission, dn as returnToTargetPickerState, en as isRelationPickerState, fn as updateAuthoredMentionRanges, ht as LocalSpaceStateIntegrityError, in as listSpaceMentionRelationChoices, jt as buildDispatchResultMessageReadProjection, kt as writeSpaceRecentMentionProfileIds, ln as resolveNextRecentMentionProfileIdsForQueuedText, mt as projectSpaceProfileCache, on as openTargetPickerState, sn as prepareSpaceComposerSubmission, tn as isTargetPickerState, un as resolveSpaceMemberAgentOwnerWakeDiagnosticsView, vt as listSpaceConfigs, wt as toLocalSpaceStateIntegrityError, xt as readSpaceLastSeenTs, yt as readSpaceCacheDeletionNoticeState, zt as buildSpaceMessageReadRelationSummary } from "./daemon-frame-transport-E-H3DjWA.js";
+import { F as formatSpaceMemberCommandRecoveryCopy, H as resolveGatewayChainRetryGuidance, I as resolveReplyReadinessAvailabilityReasonCopy, L as resolveReplyReadinessGuidanceSummaryCopy, M as formatReplyReadinessSummary, O as resolveCurrentReplyReadinessSnapshot, P as REPLY_READINESS_COPY, R as resolveOpenClawDiagnosticsGuidance, U as resolveOpenClawLocalDiagnosticsValue, V as resolveGatewayChainRepairGuidance, W as resolveLocalServiceDemand, b as buildDaemonServiceRepairGuidance, z as classifyGatewayChainFailure } from "./daemon-service-update-coordinator-RJO997me.js";
+import { At as SpaceComposerSubmissionError, Bt as buildSpaceProfileAddPlan, Ct as removeSpaceConfig, Dt as upsertSpaceConfig, Et as updateSpaceLastSeenTs, Ft as buildSignalMessageReadProjection, Gt as collectResolvedSpaceMentions, It as buildSignalReplyWorkflowProjection, Jt as createSpaceTargetCatalog, Lt as buildSpaceMemberAgentPresencePresentation, Ot as writeSpaceCacheDeletionNoticeState, Pt as buildSignalIndex, Rt as buildSpaceMentionProfileIndex, St as readSpaceRecentMentionProfileIds, Tt as toSpaceConfigListIntegrityError, Wt as closeMentionPickerState, Xt as extractMentionAuthoringPrefix, Yt as enterRelationPickerState, _t as isLocalSpaceStateCorruptResult, an as listSpaceMentionSuggestions, bt as readSpaceConfig, cn as prepareSpaceFileOnlySubmission, dn as returnToTargetPickerState, en as isRelationPickerState, fn as updateAuthoredMentionRanges, ht as LocalSpaceStateIntegrityError, in as listSpaceMentionRelationChoices, jt as buildDispatchResultMessageReadProjection, kt as writeSpaceRecentMentionProfileIds, ln as resolveNextRecentMentionProfileIdsForQueuedText, mt as projectSpaceProfileCache, on as openTargetPickerState, sn as prepareSpaceComposerSubmission, tn as isTargetPickerState, un as resolveSpaceMemberAgentOwnerWakeDiagnosticsView, vt as listSpaceConfigs, wt as toLocalSpaceStateIntegrityError, xt as readSpaceLastSeenTs, yt as readSpaceCacheDeletionNoticeState, zt as buildSpaceMessageReadRelationSummary } from "./daemon-frame-transport-D-4StENt.js";
 import { a as resolveBaseUrl, d as createDefaultRuntimeAgentControllerSettings } from "./base-url-D7uE_xTo.js";
 import { a as formatOpenMeldCliTextBlock, l as resolveUserFacingCliEntryCommand, n as formatOpenMeldCliCommand, o as formatProfileAwareOpenMeldCliCommand, r as formatOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
 import { t as sleep } from "./dist-BLuEEVHh.js";
 import { a as requireOpenMeldProfile, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull } from "./context-D9Ebb5wl.js";
 import { a as outJsonLine, i as errLine, n as sanitizeTerminalDisplayText, o as outLine, r as formatMessage, t as createPresenter } from "./presenter-BcxiQyJg.js";
-import { $ as ROOT_ENTRY_START_COMMAND, A as createSpaceLeaveCreatorGuideError, B as createSpaceSendInputEmptyGuideError, D as createSpaceContractSetGuideError, F as createSpaceRemoveMembersCreatorGuideError, G as createSpaceUnsupportedProfileKindGuideError, H as createSpaceSendInputRequiredGuideError, I as createSpaceRemoveMembersCurrentProfileGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, N as createSpaceProfileRequiredGuideError, O as createSpaceCreateGuideError, P as createSpacePublicationSetGuideError, Q as ROOT_ENTRY_COMMANDS, R as createSpaceResultGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, V as createSpaceSendInputFileReadFailedGuideError, W as createSpaceTargetGuideError, b as createProfileCreateGuideError, dt as getCliVersionInfo, g as canUseInteractivePrompts, it as resolveSpaceAddMembersProgressPhase, j as createSpaceLeaveGuideError, k as createSpaceDeleteHumanApprovalGuideError, nt as SPACE_ADD_MEMBERS_AGENT_OVERVIEW_STAGES, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, tt as validateSpaceMemberSelectionInput, ut as formatCliVersionSummary, w as createSpaceAddMembersCurrentProfileGuideError, z as createSpaceSendInputConflictGuideError } from "./elapsed-time-4PuBjDUi.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, d as buildOpenMeldRequestContextFromProfile, f as buildOpenMeldRequestContextFromProfileIdentity, m as resolveAuthRequestCompatibility, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, r as resolveSpaceRequestTimeoutMsForDiagnostics, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-CDlVc0zT.js";
-import { S as buildSpaceWebUrl, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, b as resolveOffsetVisibleWindow, f as runAgentsRepair, g as promptSearchMultiselectWorkbench, h as promptSearchMultiselect, l as runAgentsEnable, m as formatTransportModeDisplay, v as clampNumber$2, x as computeRetryDelayMs, y as resolveAnchoredVisibleWindow } from "./agents-C8ATowD6.js";
-import { l as resolveLocalAgentControllerReportDecision, n as submitProfileRuntimeAgentControllerReport, o as collectLocalAgentControllerInventory, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-CB25cpq0.js";
-import { a as parseSpaceMetaResponse, d as assertDispatchOwnedRuntimePublicWriteAllowed, i as parseSpaceMetaPayload, l as toStructuredGatewayFailure, n as fetchSpaceMeta, o as GatewayHttpError, s as readGatewayJsonResponse, t as createCliSpaceApi } from "./cli-space-api-skevaFSC.js";
+import { $ as ROOT_ENTRY_START_COMMAND, A as createSpaceLeaveCreatorGuideError, B as createSpaceSendInputEmptyGuideError, D as createSpaceContractSetGuideError, F as createSpaceRemoveMembersCreatorGuideError, G as createSpaceUnsupportedProfileKindGuideError, H as createSpaceSendInputRequiredGuideError, I as createSpaceRemoveMembersCurrentProfileGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, N as createSpaceProfileRequiredGuideError, O as createSpaceCreateGuideError, P as createSpacePublicationSetGuideError, Q as ROOT_ENTRY_COMMANDS, R as createSpaceResultGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, V as createSpaceSendInputFileReadFailedGuideError, W as createSpaceTargetGuideError, b as createProfileCreateGuideError, dt as getCliVersionInfo, g as canUseInteractivePrompts, it as resolveSpaceAddMembersProgressPhase, j as createSpaceLeaveGuideError, k as createSpaceDeleteHumanApprovalGuideError, nt as SPACE_ADD_MEMBERS_AGENT_OVERVIEW_STAGES, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, tt as validateSpaceMemberSelectionInput, ut as formatCliVersionSummary, w as createSpaceAddMembersCurrentProfileGuideError, z as createSpaceSendInputConflictGuideError } from "./elapsed-time-Cw6b9rYy.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, d as buildOpenMeldRequestContextFromProfile, f as buildOpenMeldRequestContextFromProfileIdentity, m as resolveAuthRequestCompatibility, n as fetchSpaceRequestWithTimeout, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, r as resolveSpaceRequestTimeoutMsForDiagnostics, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-D-Cb6EVg.js";
+import { S as buildSpaceWebUrl, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, b as resolveOffsetVisibleWindow, f as runAgentsRepair, g as promptSearchMultiselectWorkbench, h as promptSearchMultiselect, l as runAgentsEnable, m as formatTransportModeDisplay, v as clampNumber$2, x as computeRetryDelayMs, y as resolveAnchoredVisibleWindow } from "./agents-2TzCubpV.js";
+import { l as resolveLocalAgentControllerReportDecision, n as submitProfileRuntimeAgentControllerReport, o as collectLocalAgentControllerInventory, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-DGm8O4q_.js";
+import { a as parseSpaceMetaResponse, d as assertDispatchOwnedRuntimePublicWriteAllowed, i as parseSpaceMetaPayload, l as toStructuredGatewayFailure, n as fetchSpaceMeta, o as GatewayHttpError, s as readGatewayJsonResponse, t as createCliSpaceApi } from "./cli-space-api-B2l1xMPn.js";
 import { basename } from "node:path";
 import { access, readFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
@@ -24483,4 +24483,4 @@ function isHumanInteractiveSpaceRuntime(runtime) {
 //#endregion
 export { resolveCreateProfileKind as $, parseEnvelope as A, resolveHumanControllerDisplayName as B, toSpaceMetaUpsertInput as C, formatHumanReadTargetList as D, buildHumanReplyContextSummary as E, resolveOpenMeldProfileForSpaceCommand as F, printOpenMeldBanner as G, resolveAgentProfileSetup as H, emitSpaceAgentOverview as I, renderOpenMeldLogo as J, renderOpenMeldBrandBlockLines as K, emitSpaceCliAgentOverview as L, assertFullSignalIdArgument as M, assertValidSpaceIdTarget as N, resolveLinkAccessLabel as O, prepareAuthenticatedSpaceCommandContext as P, createProfileByKind as Q, prepareLocalAgentReadiness as R, loadSpaceSignalIndexOrNull as S, buildFormalSignalReadPayload as T, colorizeAgentLabel as U, persistAgentTransportSelection as V, colorizeDisplayProfileLabel as W, resolveSpaceSendText as X, renderOpenMeldTagline as Y, resolveSpaceTaskSelection as Z, runSpaceWriteWithPasswordRetry as _, runSpaceDelete as a, buildIdentityOnlyMembersSnapshotForReadProjection as b, runSpaceLeave as c, runSpaceRemoveMembers as d, resolveCreateProfileName as et, runSpaceSend as f, runSpaceReadWithPasswordRetry as g, uploadPreparedSpaceFiles as h, runSpaceCreate as i, isSpaceCommandOutputHandledError as j, resolveOrganizationVisibilityLabel as k, runSpaceList as l, prepareRequestedSpaceSendFiles as m, promptAndConfirmSpacePassword as n, assessActionParticipationCandidate as nt, runSpaceHistory as o, runSpaceWatch as p, renderOpenMeldHeader as q, runSpaceAddMembers as r, runSpaceJoin as s, buildCreateSpacePasswordPromptConfig as t, ensureAgentProfileRuntimeBinding as tt, runSpacePassword as u, buildHumanReadSignalsTranscriptItems as v, buildFormalDispatchResultReadPayload as w, loadSpaceIdentityDirectoryOrNull as x, emitHumanReadSignalsTextProjection as y, buildReplyReadinessGuidance as z };
 
-//# sourceMappingURL=command-CmlgCUU2.js.map
+//# sourceMappingURL=command-MlrjQYq5.js.map