openmeld 0.3.221 → 0.3.222

package/dist/{entry-BE8uqbkD.js → entry-DeIRMCiW.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
 import { gt as systemDir, lt as resolveOpenMeldRootDir, s as releaseLock, t as acquireLock } from "./lock-Bsl_ElWy.js";
-import { d as getAuthSessionState, o as buildStoredAuthSessionIdentity, w as withAdmittedServiceSession } from "./auth-session-CDhQANWx.js";
-import { n as ensureDaemonRuntimePaths } from "./daemon-device-id-YnLMx1kN.js";
-import { o as serviceExecutionHostMethods, r as serveExecutionHost, s as serviceExecutionHostOwnerSchema, t as ExecutionHostError } from "./channel-D5ABuavH.js";
+import { d as getAuthSessionState, o as buildStoredAuthSessionIdentity, w as withAdmittedServiceSession } from "./auth-session-nhS8jyux.js";
+import { n as ensureDaemonRuntimePaths } from "./daemon-device-id-DWO9_QW6.js";
+import { o as serviceExecutionHostMethods, r as serveExecutionHost, s as serviceExecutionHostOwnerSchema, t as ExecutionHostError } from "./channel-ggx0o_aG.js";
 import { a as resolveBaseUrl } from "./base-url-D7uE_xTo.js";
 import { i as readProcessStartIdentity } from "./process-identity-CNus0e6E.js";
 import { i as readDaemonServiceContract } from "./daemon-service-contract-BpOBMGX0.js";
-import { n as resolveRuntimeContext } from "./context-D9Ebb5wl.js";
+import { n as resolveRuntimeContext } from "./context-l_31Mn4X.js";
 import { t as createPresenter } from "./presenter-BcxiQyJg.js";
-import { n as parentExecutionHostChannel } from "./process-channel-B2BU2X7x.js";
+import { n as parentExecutionHostChannel } from "./process-channel-BQwtOlRc.js";
 import { randomUUID } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
 import { readFile } from "node:fs/promises";
@@ -196,7 +196,7 @@ function runExecutionHost(hostInstanceId) {
 				ownership = verifiedOwnership;
 				session = verified.session;
 				await withAdmittedServiceSession(session, async () => {
-					const { createExecutionHostRuntime, createExecutionHostResources } = await import("./runtime-DMYoB5_x.js");
+					const { createExecutionHostRuntime, createExecutionHostResources } = await import("./runtime-BYaFkkLK.js");
 					const runtimePaths = await ensureDaemonRuntimePaths();
 					const presenter = createPresenter(await resolveRuntimeContext({ view: "agent" }));
 					runtime = await createExecutionHostRuntime({
@@ -250,4 +250,4 @@ function runExecutionHost(hostInstanceId) {
 //#endregion
 export { runExecutionHost };
 
-//# sourceMappingURL=entry-BE8uqbkD.js.map
+//# sourceMappingURL=entry-DeIRMCiW.js.map

package/dist/{entry-BE8uqbkD.js.map → entry-DeIRMCiW.js.map}

@@ -1 +1 @@
-{"version":3,"file":"entry-BE8uqbkD.js","names":[],"sources":["../src/local-service/execution-host/identity.ts","../src/local-service/execution-host/ownership.ts","../src/local-service/execution-host/entry.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport type { ServiceExecutionHostIdentity } from \"@openmeld/schemas\";\nimport {\n  buildStoredAuthSessionIdentity,\n  getAuthSessionState,\n} from \"../../config/auth-session\";\nimport { resolveBaseUrl } from \"../../config/base-url\";\nimport { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { resolveOpenMeldRootDir } from \"../../config/paths\";\nimport { readProcessStartIdentity } from \"../../system/process-identity\";\nimport { ExecutionHostError } from \"./channel\";\n\nexport async function validateExecutionHostIdentity(\n  identity: ServiceExecutionHostIdentity\n) {\n  if (\n    process.ppid !== identity.parentPid ||\n    (process.platform !== \"win32\" &&\n      readProcessStartIdentity(process.ppid) !==\n        identity.parentProcessStartedAt) ||\n    resolve(resolveOpenMeldRootDir()) !== resolve(identity.stateRoot)\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's parent or installation changed.\"\n    );\n  }\n  const [auth, contract, gateway] = await Promise.all([\n    getAuthSessionState(),\n    readDaemonServiceContract(),\n    resolveBaseUrl(),\n  ]);\n  const session = auth.session;\n  if (\n    auth.state !== \"valid\" ||\n    !session ||\n    !contract ||\n    session.user?.id !== identity.ownerUserId ||\n    buildStoredAuthSessionIdentity(session) !== identity.sessionIdentity ||\n    session.authBaseUrl !== identity.authBaseUrl ||\n    gateway !== identity.gatewayBaseUrl ||\n    contract.gatewayUrl !== identity.gatewayBaseUrl ||\n    contract.ownerUserId !== identity.ownerUserId ||\n    contract.deviceId !== identity.deviceId ||\n    contract.lane !== identity.lane ||\n    contract.generation !== identity.serviceContractGeneration\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's account, device or Service generation changed.\"\n    );\n  }\n  return { session, contract };\n}\n","import { execFile } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { serviceExecutionHostOwnerSchema } from \"@openmeld/schemas\";\nimport { z } from \"zod/v4\";\nimport { acquireLock, releaseLock } from \"../../config/lock\";\nimport { systemDir } from \"../../config/paths\";\nimport { ExecutionHostError } from \"./channel\";\n\nconst run = promisify(execFile);\nconst WINDOWS_BOOT_EVENT = /^\\d+:\\d+$/;\nconst DECIMAL = /^\\d+$/;\n\nexport async function readExecutionHostBootIdentity(): Promise<string | null> {\n  try {\n    return await readBootIdentity();\n  } catch {\n    // Fresh/quiescent starts do not require reboot evidence. Unknown evidence\n    // can never clear an unsafe previous owner, and is not another boot.\n    console.warn(\n      \"[openmeld.execution_host.boot_unknown] Automatic recovery of unconfirmed work requires operating-system restart evidence.\"\n    );\n    return null;\n  }\n}\n\nasync function readBootIdentity(): Promise<string | null> {\n  if (process.platform === \"linux\") {\n    const id = z\n      .uuid()\n      .parse(\n        (await readFile(\"/proc/sys/kernel/random/boot_id\", \"utf8\")).trim()\n      );\n    return `linux:${id.toLowerCase()}`;\n  }\n  let stdout = \"\";\n  if (process.platform === \"darwin\") {\n    // XNU's immutable boot-session UUID, not its clock-adjustable boot time.\n    ({ stdout } = await run(\n      \"/usr/sbin/sysctl\",\n      [\"-n\", \"kern.bootsessionuuid\"],\n      {\n        timeout: 5000,\n      }\n    ));\n    return `darwin:${z.uuid().parse(stdout.trim()).toLowerCase()}`;\n  }\n  if (process.platform === \"win32\") {\n    ({ stdout } = await run(\n      \"powershell.exe\",\n      [\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-Command\",\n        \"$ErrorActionPreference='Stop'; $e=Get-WinEvent -FilterHashtable @{LogName='System';ProviderName='Microsoft-Windows-Kernel-General';Id=12} -MaxEvents 1; if($null -eq $e.RecordId -or $null -eq $e.TimeCreated){throw 'Boot event unavailable'}; [Console]::WriteLine(([string]$e.RecordId)+':'+([string]$e.TimeCreated.ToUniversalTime().Ticks))\",\n      ],\n      { timeout: 5000, windowsHide: true }\n    ));\n    if (!WINDOWS_BOOT_EVENT.test(stdout.trim())) {\n      throw new Error(\"Invalid Windows boot event\");\n    }\n    return `win32:${stdout.trim()}`;\n  }\n  return null;\n}\n\nfunction confirmsNewBoot(\n  previous: string | null,\n  current: string | null\n): boolean {\n  if (!(previous && current) || previous === current) {\n    return false;\n  }\n  const [priorSource, priorId, priorTime] = previous.split(\":\");\n  const [source, id, time] = current.split(\":\");\n  if (source !== priorSource) {\n    return false;\n  }\n  if (source === \"linux\" || source === \"darwin\") {\n    return (\n      z.uuid().safeParse(id).success && z.uuid().safeParse(priorId).success\n    );\n  }\n  // Kernel-General 12 records OS startup, not EventLog-service restarts or\n  // wall-clock corrections. Require a later retained event in both fields;\n  // missing/cleared/rotated evidence cannot authorize replacing unknown work.\n  if (\n    source !== \"win32\" ||\n    !id ||\n    !time ||\n    !priorId ||\n    !priorTime ||\n    ![id, time, priorId, priorTime].every((value) => DECIMAL.test(value))\n  ) {\n    return false;\n  }\n  return BigInt(id) > BigInt(priorId) && BigInt(time) > BigInt(priorTime);\n}\n\nexport async function acquireExecutionHostOwnership(input: {\n  hostInstanceId: string;\n  ownerUserId: string;\n  deviceId: string;\n  lane: \"prod\" | \"dev-local\" | \"canary\";\n  stateRoot: string;\n  bootIdentity: string | null;\n}) {\n  const lock = await acquireLock({\n    openMeldProfileId: \"service-execution-host\",\n    key: \"process-owner\",\n    pathResolution: { env: { ...process.env, OPENMELD_HOME: input.stateRoot } },\n    meta: {\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n    },\n  });\n  const path = join(\n    systemDir({ env: { OPENMELD_HOME: input.stateRoot } }),\n    \"execution-host-owner.json\"\n  );\n  try {\n    const previous = readOwner(path);\n    if (\n      previous &&\n      !previous.localQuiescent &&\n      !confirmsNewBoot(previous.bootIdentity, input.bootIdentity)\n    ) {\n      throw new ExecutionHostError(\n        \"host.previous_work_unconfirmed\",\n        \"The previous execution host ended before its local work was confirmed stopped. Restart this Computer, then check its connection. If restart evidence is unavailable, inspect the retained Host diagnostics before recovery. Existing results remain saved; no task will be restarted automatically.\"\n      );\n    }\n    let owner = serviceExecutionHostOwnerSchema.parse({\n      schema: \"service-execution-host-owner-v1\",\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n      deviceId: input.deviceId,\n      lane: input.lane,\n      pid: process.pid,\n      bootIdentity: input.bootIdentity,\n      localQuiescent: true,\n    });\n    persist(owner);\n    function persist(next: typeof owner) {\n      mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      writeFileSync(temporary, JSON.stringify(next), {\n        mode: 0o600,\n        flag: \"wx\",\n      });\n      renameSync(temporary, path);\n    }\n    return {\n      observeLocalQuiescence(quiescent: boolean) {\n        if (owner.localQuiescent === quiescent) {\n          return;\n        }\n        const next = { ...owner, localQuiescent: quiescent };\n        // The unsafe transition is durable before any provider operation. A\n        // failed write refuses that operation rather than weakening the fence.\n        persist(next);\n        owner = next;\n      },\n      release: () => releaseLock(lock),\n    };\n  } catch (error) {\n    await releaseLock(lock);\n    throw error;\n  }\n}\n\nfunction readOwner(path: string) {\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return null;\n    }\n    throw error;\n  }\n  const parsed = serviceExecutionHostOwnerSchema.safeParse(JSON.parse(raw));\n  if (!parsed.success) {\n    throw new ExecutionHostError(\n      \"host.owner_corrupt\",\n      \"The Host ownership record cannot be verified. Preserve it for diagnostics; automatic replacement is refused.\"\n    );\n  }\n  return parsed.data;\n}\n","import {\n  type ServiceExecutionHostIdentity,\n  serviceExecutionHostMethods,\n} from \"@openmeld/schemas\";\nimport {\n  type StoredAuthSession,\n  withAdmittedServiceSession,\n} from \"../../config/auth-session\";\nimport { resolveRuntimeContext } from \"../../runtime/context\";\nimport { createPresenter } from \"../../runtime/presenter/index\";\nimport { ensureDaemonRuntimePaths } from \"../state/daemon-device-id\";\nimport {\n  ExecutionHostError,\n  type ExecutionHostHandlers,\n  serveExecutionHost,\n} from \"./channel\";\nimport { validateExecutionHostIdentity } from \"./identity\";\nimport {\n  acquireExecutionHostOwnership,\n  readExecutionHostBootIdentity,\n} from \"./ownership\";\nimport { parentExecutionHostChannel } from \"./process-channel\";\n\n// This entry has no public listener and accepts no executable/path override.\n// The inherited pipe, parent incarnation and current Service account are all\n// required before the provider graph or any local runtime state is opened.\nexport function runExecutionHost(hostInstanceId: string): Promise<void> {\n  const channel = parentExecutionHostChannel();\n  const done = Promise.withResolvers<void>();\n  let runtime: Awaited<\n    ReturnType<typeof import(\"./runtime\").createExecutionHostRuntime>\n  > | null = null;\n  let ownership: Awaited<\n    ReturnType<typeof acquireExecutionHostOwnership>\n  > | null = null;\n  let session: StoredAuthSession | null = null;\n  let acceptedIdentity: ServiceExecutionHostIdentity | null = null;\n  let initializing: Promise<void> | null = null;\n  let closing: Promise<void> | null = null;\n  let disconnected = false;\n\n  const close = (): Promise<void> => {\n    if (!closing) {\n      closing = (async () => {\n        try {\n          await initializing;\n          if (runtime && session) {\n            const currentRuntime = runtime;\n            await withAdmittedServiceSession(session, () =>\n              currentRuntime.closeAfterConnectorLoss()\n            );\n          }\n        } finally {\n          await ownership?.release();\n          server.dispose();\n          if (process.connected) {\n            process.disconnect();\n          }\n        }\n      })();\n      closing.then(\n        () => done.resolve(),\n        (error) => done.reject(error)\n      );\n    }\n    return closing;\n  };\n\n  const handlers = {\n    initialize: async (identity: ServiceExecutionHostIdentity) => {\n      if (\n        acceptedIdentity &&\n        JSON.stringify(acceptedIdentity) !== JSON.stringify(identity)\n      ) {\n        throw new ExecutionHostError(\n          \"host.identity_mismatch\",\n          \"This Host is already assigned to a different Service incarnation.\"\n        );\n      }\n      if (!initializing) {\n        acceptedIdentity = identity;\n        initializing = (async () => {\n          const verified = await validateExecutionHostIdentity(identity);\n          if (disconnected) {\n            throw new ExecutionHostError(\n              \"host.disconnected\",\n              \"The supervising Service left before Host initialization.\"\n            );\n          }\n          const verifiedOwnership = await acquireExecutionHostOwnership({\n            ...identity,\n            hostInstanceId,\n            bootIdentity: await readExecutionHostBootIdentity(),\n          });\n          ownership = verifiedOwnership;\n          session = verified.session;\n          await withAdmittedServiceSession(session, async () => {\n            const { createExecutionHostRuntime, createExecutionHostResources } =\n              await import(\"./runtime\");\n            const runtimePaths = await ensureDaemonRuntimePaths();\n            const presenter = createPresenter(\n              await resolveRuntimeContext({ view: \"agent\" })\n            );\n            runtime = await createExecutionHostRuntime({\n              resources: await createExecutionHostResources({\n                runtimePaths,\n                presenter,\n              }),\n              hostInstanceId,\n              identity,\n              runtimePaths,\n              serviceBundleId: verified.contract.bundleId,\n              profileOwnerName: verified.session.user?.name ?? null,\n              presenter,\n              emit: (event) => {\n                if (!disconnected) {\n                  server.emit(event);\n                }\n              },\n              onWorkStateChange: (quiescent) =>\n                verifiedOwnership.observeLocalQuiescence(quiescent),\n            });\n          });\n        })();\n      }\n      await initializing;\n      if (!runtime || disconnected) {\n        throw new ExecutionHostError(\n          \"host.disconnected\",\n          \"The execution Host is not available.\"\n        );\n      }\n      return runtime.snapshot();\n    },\n  } as ExecutionHostHandlers;\n\n  // Each concrete method is still decoded by the shared method table at both\n  // ends; the forwarding bridge cannot select a new account or mutate identity.\n  for (const method of Object.keys(serviceExecutionHostMethods) as Array<\n    keyof ExecutionHostHandlers\n  >) {\n    if (method === \"initialize\") {\n      continue;\n    }\n    const target = handlers as unknown as Record<\n      string,\n      (payload: unknown) => Promise<unknown>\n    >;\n    target[method] = async (payload) => {\n      if (!(runtime && session) || disconnected) {\n        throw new ExecutionHostError(\n          \"host.not_initialized\",\n          \"Initialize this Host through its supervising Service first.\"\n        );\n      }\n      const invoke = runtime.handlers[method] as (value: unknown) => unknown;\n      return await withAdmittedServiceSession(\n        session,\n        async () => await invoke(payload)\n      );\n    };\n  }\n\n  const server = serveExecutionHost({\n    channel,\n    hostInstanceId,\n    handlers,\n    onFailure: (error) => {\n      console.error(\"[openmeld.execution_host.channel_failed]\", error);\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n    onDisconnect: () => {\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n  });\n  return done.promise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAYA,eAAsB,8BACpB,UACA;CACA,IACE,QAAQ,SAAS,SAAS,aACzB,QAAQ,aAAa,WACpB,yBAAyB,QAAQ,IAAI,MACnC,SAAS,0BACb,QAAQ,uBAAuB,CAAC,MAAM,QAAQ,SAAS,SAAS,GAEhE,MAAM,IAAI,mBACR,0BACA,4CACF;CAEF,MAAM,CAAC,MAAM,UAAU,WAAW,MAAM,QAAQ,IAAI;EAClD,oBAAoB;EACpB,0BAA0B;EAC1B,eAAe;CACjB,CAAC;CACD,MAAM,UAAU,KAAK;CACrB,IACE,KAAK,UAAU,WACf,CAAC,WACD,CAAC,YACD,QAAQ,MAAM,OAAO,SAAS,eAC9B,+BAA+B,OAAO,MAAM,SAAS,mBACrD,QAAQ,gBAAgB,SAAS,eACjC,YAAY,SAAS,kBACrB,SAAS,eAAe,SAAS,kBACjC,SAAS,gBAAgB,SAAS,eAClC,SAAS,aAAa,SAAS,YAC/B,SAAS,SAAS,SAAS,QAC3B,SAAS,eAAe,SAAS,2BAEjC,MAAM,IAAI,mBACR,0BACA,2DACF;CAEF,OAAO;EAAE;EAAS;CAAS;AAC7B;;;ACzCA,MAAM,MAAM,UAAU,QAAQ;AAC9B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;AAEhB,eAAsB,gCAAwD;CAC5E,IAAI;EACF,OAAO,MAAM,iBAAiB;CAChC,QAAQ;EAGN,QAAQ,KACN,2HACF;EACA,OAAO;CACT;AACF;AAEA,eAAe,mBAA2C;CACxD,IAAI,QAAQ,aAAa,SAMvB,OAAO,SALI,EACR,KAAK,CAAC,CACN,OACE,MAAM,SAAS,mCAAmC,MAAM,EAAA,CAAG,KAAK,CAEpD,CAAC,CAAC,YAAY;CAEjC,IAAI,SAAS;CACb,IAAI,QAAQ,aAAa,UAAU;EAEjC,CAAC,CAAE,UAAW,MAAM,IAClB,oBACA,CAAC,MAAM,sBAAsB,GAC7B,EACE,SAAS,IACX,CACF;EACA,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY;CAC7D;CACA,IAAI,QAAQ,aAAa,SAAS;EAChC,CAAC,CAAE,UAAW,MAAM,IAClB,kBACA;GACE;GACA;GACA;GACA;EACF,GACA;GAAE,SAAS;GAAM,aAAa;EAAK,CACrC;EACA,IAAI,CAAC,mBAAmB,KAAK,OAAO,KAAK,CAAC,GACxC,MAAM,IAAI,MAAM,4BAA4B;EAE9C,OAAO,SAAS,OAAO,KAAK;CAC9B;CACA,OAAO;AACT;AAEA,SAAS,gBACP,UACA,SACS;CACT,IAAI,EAAE,YAAY,YAAY,aAAa,SACzC,OAAO;CAET,MAAM,CAAC,aAAa,SAAS,aAAa,SAAS,MAAM,GAAG;CAC5D,MAAM,CAAC,QAAQ,IAAI,QAAQ,QAAQ,MAAM,GAAG;CAC5C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,WAAW,WAAW,UACnC,OACE,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC;CAMlE,IACE,WAAW,WACX,CAAC,MACD,CAAC,QACD,CAAC,WACD,CAAC,aACD,CAAC;EAAC;EAAI;EAAM;EAAS;CAAS,CAAC,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,CAAC,GAEpE,OAAO;CAET,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,IAAI,OAAO,SAAS;AACxE;AAEA,eAAsB,8BAA8B,OAOjD;CACD,MAAM,OAAO,MAAM,YAAY;EAC7B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,EAAE,KAAK;GAAE,GAAG,QAAQ;GAAK,eAAe,MAAM;EAAU,EAAE;EAC1E,MAAM;GACJ,gBAAgB,MAAM;GACtB,aAAa,MAAM;EACrB;CACF,CAAC;CACD,MAAM,OAAO,KACX,UAAU,EAAE,KAAK,EAAE,eAAe,MAAM,UAAU,EAAE,CAAC,GACrD,2BACF;CACA,IAAI;EACF,MAAM,WAAW,UAAU,IAAI;EAC/B,IACE,YACA,CAAC,SAAS,kBACV,CAAC,gBAAgB,SAAS,cAAc,MAAM,YAAY,GAE1D,MAAM,IAAI,mBACR,kCACA,qSACF;EAEF,IAAI,QAAQ,gCAAgC,MAAM;GAChD,QAAQ;GACR,gBAAgB,MAAM;GACtB,aAAa,MAAM;GACnB,UAAU,MAAM;GAChB,MAAM,MAAM;GACZ,KAAK,QAAQ;GACb,cAAc,MAAM;GACpB,gBAAgB;EAClB,CAAC;EACD,QAAQ,KAAK;EACb,SAAS,QAAQ,MAAoB;GACnC,UAAU,QAAQ,IAAI,GAAG;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACzD,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;GAC1C,cAAc,WAAW,KAAK,UAAU,IAAI,GAAG;IAC7C,MAAM;IACN,MAAM;GACR,CAAC;GACD,WAAW,WAAW,IAAI;EAC5B;EACA,OAAO;GACL,uBAAuB,WAAoB;IACzC,IAAI,MAAM,mBAAmB,WAC3B;IAEF,MAAM,OAAO;KAAE,GAAG;KAAO,gBAAgB;IAAU;IAGnD,QAAQ,IAAI;IACZ,QAAQ;GACV;GACA,eAAe,YAAY,IAAI;EACjC;CACF,SAAS,OAAO;EACd,MAAM,YAAY,IAAI;EACtB,MAAM;CACR;AACF;AAEA,SAAS,UAAU,MAAc;CAC/B,IAAI;CACJ,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,OAAO;EAET,MAAM;CACR;CACA,MAAM,SAAS,gCAAgC,UAAU,KAAK,MAAM,GAAG,CAAC;CACxE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,mBACR,sBACA,8GACF;CAEF,OAAO,OAAO;AAChB;;;ACtKA,SAAgB,iBAAiB,gBAAuC;CACtE,MAAM,UAAU,2BAA2B;CAC3C,MAAM,OAAO,QAAQ,cAAoB;CACzC,IAAI,UAEO;CACX,IAAI,YAEO;CACX,IAAI,UAAoC;CACxC,IAAI,mBAAwD;CAC5D,IAAI,eAAqC;CACzC,IAAI,UAAgC;CACpC,IAAI,eAAe;CAEnB,MAAM,cAA6B;EACjC,IAAI,CAAC,SAAS;GACZ,WAAW,YAAY;IACrB,IAAI;KACF,MAAM;KACN,IAAI,WAAW,SAAS;MACtB,MAAM,iBAAiB;MACvB,MAAM,2BAA2B,eAC/B,eAAe,wBAAwB,CACzC;KACF;IACF,UAAU;KACR,MAAM,WAAW,QAAQ;KACzB,OAAO,QAAQ;KACf,IAAI,QAAQ,WACV,QAAQ,WAAW;IAEvB;GACF,EAAA,CAAG;GACH,QAAQ,WACA,KAAK,QAAQ,IAClB,UAAU,KAAK,OAAO,KAAK,CAC9B;EACF;EACA,OAAO;CACT;CAEA,MAAM,WAAW,EACf,YAAY,OAAO,aAA2C;EAC5D,IACE,oBACA,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,QAAQ,GAE5D,MAAM,IAAI,mBACR,0BACA,mEACF;EAEF,IAAI,CAAC,cAAc;GACjB,mBAAmB;GACnB,gBAAgB,YAAY;IAC1B,MAAM,WAAW,MAAM,8BAA8B,QAAQ;IAC7D,IAAI,cACF,MAAM,IAAI,mBACR,qBACA,0DACF;IAEF,MAAM,oBAAoB,MAAM,8BAA8B;KAC5D,GAAG;KACH;KACA,cAAc,MAAM,8BAA8B;IACpD,CAAC;IACD,YAAY;IACZ,UAAU,SAAS;IACnB,MAAM,2BAA2B,SAAS,YAAY;KACpD,MAAM,EAAE,4BAA4B,iCAClC,MAAM,OAAO;KACf,MAAM,eAAe,MAAM,yBAAyB;KACpD,MAAM,YAAY,gBAChB,MAAM,sBAAsB,EAAE,MAAM,QAAQ,CAAC,CAC/C;KACA,UAAU,MAAM,2BAA2B;MACzC,WAAW,MAAM,6BAA6B;OAC5C;OACA;MACF,CAAC;MACD;MACA;MACA;MACA,iBAAiB,SAAS,SAAS;MACnC,kBAAkB,SAAS,QAAQ,MAAM,QAAQ;MACjD;MACA,OAAO,UAAU;OACf,IAAI,CAAC,cACH,OAAO,KAAK,KAAK;MAErB;MACA,oBAAoB,cAClB,kBAAkB,uBAAuB,SAAS;KACtD,CAAC;IACH,CAAC;GACH,EAAA,CAAG;EACL;EACA,MAAM;EACN,IAAI,CAAC,WAAW,cACd,MAAM,IAAI,mBACR,qBACA,sCACF;EAEF,OAAO,QAAQ,SAAS;CAC1B,EACF;CAIA,KAAK,MAAM,UAAU,OAAO,KAAK,2BAA2B,GAEzD;EACD,IAAI,WAAW,cACb;EAEF,MAAM,SAAS;EAIf,OAAO,UAAU,OAAO,YAAY;GAClC,IAAI,EAAE,WAAW,YAAY,cAC3B,MAAM,IAAI,mBACR,wBACA,6DACF;GAEF,MAAM,SAAS,QAAQ,SAAS;GAChC,OAAO,MAAM,2BACX,SACA,YAAY,MAAM,OAAO,OAAO,CAClC;EACF;CACF;CAEA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA;EACA,YAAY,UAAU;GACpB,QAAQ,MAAM,4CAA4C,KAAK;GAC/D,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;EACA,oBAAoB;GAClB,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;CACF,CAAC;CACD,OAAO,KAAK;AACd"}
+{"version":3,"file":"entry-DeIRMCiW.js","names":[],"sources":["../src/local-service/execution-host/identity.ts","../src/local-service/execution-host/ownership.ts","../src/local-service/execution-host/entry.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport type { ServiceExecutionHostIdentity } from \"@openmeld/schemas\";\nimport {\n  buildStoredAuthSessionIdentity,\n  getAuthSessionState,\n} from \"../../config/auth-session\";\nimport { resolveBaseUrl } from \"../../config/base-url\";\nimport { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { resolveOpenMeldRootDir } from \"../../config/paths\";\nimport { readProcessStartIdentity } from \"../../system/process-identity\";\nimport { ExecutionHostError } from \"./channel\";\n\nexport async function validateExecutionHostIdentity(\n  identity: ServiceExecutionHostIdentity\n) {\n  if (\n    process.ppid !== identity.parentPid ||\n    (process.platform !== \"win32\" &&\n      readProcessStartIdentity(process.ppid) !==\n        identity.parentProcessStartedAt) ||\n    resolve(resolveOpenMeldRootDir()) !== resolve(identity.stateRoot)\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's parent or installation changed.\"\n    );\n  }\n  const [auth, contract, gateway] = await Promise.all([\n    getAuthSessionState(),\n    readDaemonServiceContract(),\n    resolveBaseUrl(),\n  ]);\n  const session = auth.session;\n  if (\n    auth.state !== \"valid\" ||\n    !session ||\n    !contract ||\n    session.user?.id !== identity.ownerUserId ||\n    buildStoredAuthSessionIdentity(session) !== identity.sessionIdentity ||\n    session.authBaseUrl !== identity.authBaseUrl ||\n    gateway !== identity.gatewayBaseUrl ||\n    contract.gatewayUrl !== identity.gatewayBaseUrl ||\n    contract.ownerUserId !== identity.ownerUserId ||\n    contract.deviceId !== identity.deviceId ||\n    contract.lane !== identity.lane ||\n    contract.generation !== identity.serviceContractGeneration\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's account, device or Service generation changed.\"\n    );\n  }\n  return { session, contract };\n}\n","import { execFile } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { serviceExecutionHostOwnerSchema } from \"@openmeld/schemas\";\nimport { z } from \"zod/v4\";\nimport { acquireLock, releaseLock } from \"../../config/lock\";\nimport { systemDir } from \"../../config/paths\";\nimport { ExecutionHostError } from \"./channel\";\n\nconst run = promisify(execFile);\nconst WINDOWS_BOOT_EVENT = /^\\d+:\\d+$/;\nconst DECIMAL = /^\\d+$/;\n\nexport async function readExecutionHostBootIdentity(): Promise<string | null> {\n  try {\n    return await readBootIdentity();\n  } catch {\n    // Fresh/quiescent starts do not require reboot evidence. Unknown evidence\n    // can never clear an unsafe previous owner, and is not another boot.\n    console.warn(\n      \"[openmeld.execution_host.boot_unknown] Automatic recovery of unconfirmed work requires operating-system restart evidence.\"\n    );\n    return null;\n  }\n}\n\nasync function readBootIdentity(): Promise<string | null> {\n  if (process.platform === \"linux\") {\n    const id = z\n      .uuid()\n      .parse(\n        (await readFile(\"/proc/sys/kernel/random/boot_id\", \"utf8\")).trim()\n      );\n    return `linux:${id.toLowerCase()}`;\n  }\n  let stdout = \"\";\n  if (process.platform === \"darwin\") {\n    // XNU's immutable boot-session UUID, not its clock-adjustable boot time.\n    ({ stdout } = await run(\n      \"/usr/sbin/sysctl\",\n      [\"-n\", \"kern.bootsessionuuid\"],\n      {\n        timeout: 5000,\n      }\n    ));\n    return `darwin:${z.uuid().parse(stdout.trim()).toLowerCase()}`;\n  }\n  if (process.platform === \"win32\") {\n    ({ stdout } = await run(\n      \"powershell.exe\",\n      [\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-Command\",\n        \"$ErrorActionPreference='Stop'; $e=Get-WinEvent -FilterHashtable @{LogName='System';ProviderName='Microsoft-Windows-Kernel-General';Id=12} -MaxEvents 1; if($null -eq $e.RecordId -or $null -eq $e.TimeCreated){throw 'Boot event unavailable'}; [Console]::WriteLine(([string]$e.RecordId)+':'+([string]$e.TimeCreated.ToUniversalTime().Ticks))\",\n      ],\n      { timeout: 5000, windowsHide: true }\n    ));\n    if (!WINDOWS_BOOT_EVENT.test(stdout.trim())) {\n      throw new Error(\"Invalid Windows boot event\");\n    }\n    return `win32:${stdout.trim()}`;\n  }\n  return null;\n}\n\nfunction confirmsNewBoot(\n  previous: string | null,\n  current: string | null\n): boolean {\n  if (!(previous && current) || previous === current) {\n    return false;\n  }\n  const [priorSource, priorId, priorTime] = previous.split(\":\");\n  const [source, id, time] = current.split(\":\");\n  if (source !== priorSource) {\n    return false;\n  }\n  if (source === \"linux\" || source === \"darwin\") {\n    return (\n      z.uuid().safeParse(id).success && z.uuid().safeParse(priorId).success\n    );\n  }\n  // Kernel-General 12 records OS startup, not EventLog-service restarts or\n  // wall-clock corrections. Require a later retained event in both fields;\n  // missing/cleared/rotated evidence cannot authorize replacing unknown work.\n  if (\n    source !== \"win32\" ||\n    !id ||\n    !time ||\n    !priorId ||\n    !priorTime ||\n    ![id, time, priorId, priorTime].every((value) => DECIMAL.test(value))\n  ) {\n    return false;\n  }\n  return BigInt(id) > BigInt(priorId) && BigInt(time) > BigInt(priorTime);\n}\n\nexport async function acquireExecutionHostOwnership(input: {\n  hostInstanceId: string;\n  ownerUserId: string;\n  deviceId: string;\n  lane: \"prod\" | \"dev-local\" | \"canary\";\n  stateRoot: string;\n  bootIdentity: string | null;\n}) {\n  const lock = await acquireLock({\n    openMeldProfileId: \"service-execution-host\",\n    key: \"process-owner\",\n    pathResolution: { env: { ...process.env, OPENMELD_HOME: input.stateRoot } },\n    meta: {\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n    },\n  });\n  const path = join(\n    systemDir({ env: { OPENMELD_HOME: input.stateRoot } }),\n    \"execution-host-owner.json\"\n  );\n  try {\n    const previous = readOwner(path);\n    if (\n      previous &&\n      !previous.localQuiescent &&\n      !confirmsNewBoot(previous.bootIdentity, input.bootIdentity)\n    ) {\n      throw new ExecutionHostError(\n        \"host.previous_work_unconfirmed\",\n        \"The previous execution host ended before its local work was confirmed stopped. Restart this Computer, then check its connection. If restart evidence is unavailable, inspect the retained Host diagnostics before recovery. Existing results remain saved; no task will be restarted automatically.\"\n      );\n    }\n    let owner = serviceExecutionHostOwnerSchema.parse({\n      schema: \"service-execution-host-owner-v1\",\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n      deviceId: input.deviceId,\n      lane: input.lane,\n      pid: process.pid,\n      bootIdentity: input.bootIdentity,\n      localQuiescent: true,\n    });\n    persist(owner);\n    function persist(next: typeof owner) {\n      mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      writeFileSync(temporary, JSON.stringify(next), {\n        mode: 0o600,\n        flag: \"wx\",\n      });\n      renameSync(temporary, path);\n    }\n    return {\n      observeLocalQuiescence(quiescent: boolean) {\n        if (owner.localQuiescent === quiescent) {\n          return;\n        }\n        const next = { ...owner, localQuiescent: quiescent };\n        // The unsafe transition is durable before any provider operation. A\n        // failed write refuses that operation rather than weakening the fence.\n        persist(next);\n        owner = next;\n      },\n      release: () => releaseLock(lock),\n    };\n  } catch (error) {\n    await releaseLock(lock);\n    throw error;\n  }\n}\n\nfunction readOwner(path: string) {\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return null;\n    }\n    throw error;\n  }\n  const parsed = serviceExecutionHostOwnerSchema.safeParse(JSON.parse(raw));\n  if (!parsed.success) {\n    throw new ExecutionHostError(\n      \"host.owner_corrupt\",\n      \"The Host ownership record cannot be verified. Preserve it for diagnostics; automatic replacement is refused.\"\n    );\n  }\n  return parsed.data;\n}\n","import {\n  type ServiceExecutionHostIdentity,\n  serviceExecutionHostMethods,\n} from \"@openmeld/schemas\";\nimport {\n  type StoredAuthSession,\n  withAdmittedServiceSession,\n} from \"../../config/auth-session\";\nimport { resolveRuntimeContext } from \"../../runtime/context\";\nimport { createPresenter } from \"../../runtime/presenter/index\";\nimport { ensureDaemonRuntimePaths } from \"../state/daemon-device-id\";\nimport {\n  ExecutionHostError,\n  type ExecutionHostHandlers,\n  serveExecutionHost,\n} from \"./channel\";\nimport { validateExecutionHostIdentity } from \"./identity\";\nimport {\n  acquireExecutionHostOwnership,\n  readExecutionHostBootIdentity,\n} from \"./ownership\";\nimport { parentExecutionHostChannel } from \"./process-channel\";\n\n// This entry has no public listener and accepts no executable/path override.\n// The inherited pipe, parent incarnation and current Service account are all\n// required before the provider graph or any local runtime state is opened.\nexport function runExecutionHost(hostInstanceId: string): Promise<void> {\n  const channel = parentExecutionHostChannel();\n  const done = Promise.withResolvers<void>();\n  let runtime: Awaited<\n    ReturnType<typeof import(\"./runtime\").createExecutionHostRuntime>\n  > | null = null;\n  let ownership: Awaited<\n    ReturnType<typeof acquireExecutionHostOwnership>\n  > | null = null;\n  let session: StoredAuthSession | null = null;\n  let acceptedIdentity: ServiceExecutionHostIdentity | null = null;\n  let initializing: Promise<void> | null = null;\n  let closing: Promise<void> | null = null;\n  let disconnected = false;\n\n  const close = (): Promise<void> => {\n    if (!closing) {\n      closing = (async () => {\n        try {\n          await initializing;\n          if (runtime && session) {\n            const currentRuntime = runtime;\n            await withAdmittedServiceSession(session, () =>\n              currentRuntime.closeAfterConnectorLoss()\n            );\n          }\n        } finally {\n          await ownership?.release();\n          server.dispose();\n          if (process.connected) {\n            process.disconnect();\n          }\n        }\n      })();\n      closing.then(\n        () => done.resolve(),\n        (error) => done.reject(error)\n      );\n    }\n    return closing;\n  };\n\n  const handlers = {\n    initialize: async (identity: ServiceExecutionHostIdentity) => {\n      if (\n        acceptedIdentity &&\n        JSON.stringify(acceptedIdentity) !== JSON.stringify(identity)\n      ) {\n        throw new ExecutionHostError(\n          \"host.identity_mismatch\",\n          \"This Host is already assigned to a different Service incarnation.\"\n        );\n      }\n      if (!initializing) {\n        acceptedIdentity = identity;\n        initializing = (async () => {\n          const verified = await validateExecutionHostIdentity(identity);\n          if (disconnected) {\n            throw new ExecutionHostError(\n              \"host.disconnected\",\n              \"The supervising Service left before Host initialization.\"\n            );\n          }\n          const verifiedOwnership = await acquireExecutionHostOwnership({\n            ...identity,\n            hostInstanceId,\n            bootIdentity: await readExecutionHostBootIdentity(),\n          });\n          ownership = verifiedOwnership;\n          session = verified.session;\n          await withAdmittedServiceSession(session, async () => {\n            const { createExecutionHostRuntime, createExecutionHostResources } =\n              await import(\"./runtime\");\n            const runtimePaths = await ensureDaemonRuntimePaths();\n            const presenter = createPresenter(\n              await resolveRuntimeContext({ view: \"agent\" })\n            );\n            runtime = await createExecutionHostRuntime({\n              resources: await createExecutionHostResources({\n                runtimePaths,\n                presenter,\n              }),\n              hostInstanceId,\n              identity,\n              runtimePaths,\n              serviceBundleId: verified.contract.bundleId,\n              profileOwnerName: verified.session.user?.name ?? null,\n              presenter,\n              emit: (event) => {\n                if (!disconnected) {\n                  server.emit(event);\n                }\n              },\n              onWorkStateChange: (quiescent) =>\n                verifiedOwnership.observeLocalQuiescence(quiescent),\n            });\n          });\n        })();\n      }\n      await initializing;\n      if (!runtime || disconnected) {\n        throw new ExecutionHostError(\n          \"host.disconnected\",\n          \"The execution Host is not available.\"\n        );\n      }\n      return runtime.snapshot();\n    },\n  } as ExecutionHostHandlers;\n\n  // Each concrete method is still decoded by the shared method table at both\n  // ends; the forwarding bridge cannot select a new account or mutate identity.\n  for (const method of Object.keys(serviceExecutionHostMethods) as Array<\n    keyof ExecutionHostHandlers\n  >) {\n    if (method === \"initialize\") {\n      continue;\n    }\n    const target = handlers as unknown as Record<\n      string,\n      (payload: unknown) => Promise<unknown>\n    >;\n    target[method] = async (payload) => {\n      if (!(runtime && session) || disconnected) {\n        throw new ExecutionHostError(\n          \"host.not_initialized\",\n          \"Initialize this Host through its supervising Service first.\"\n        );\n      }\n      const invoke = runtime.handlers[method] as (value: unknown) => unknown;\n      return await withAdmittedServiceSession(\n        session,\n        async () => await invoke(payload)\n      );\n    };\n  }\n\n  const server = serveExecutionHost({\n    channel,\n    hostInstanceId,\n    handlers,\n    onFailure: (error) => {\n      console.error(\"[openmeld.execution_host.channel_failed]\", error);\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n    onDisconnect: () => {\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n  });\n  return done.promise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAYA,eAAsB,8BACpB,UACA;CACA,IACE,QAAQ,SAAS,SAAS,aACzB,QAAQ,aAAa,WACpB,yBAAyB,QAAQ,IAAI,MACnC,SAAS,0BACb,QAAQ,uBAAuB,CAAC,MAAM,QAAQ,SAAS,SAAS,GAEhE,MAAM,IAAI,mBACR,0BACA,4CACF;CAEF,MAAM,CAAC,MAAM,UAAU,WAAW,MAAM,QAAQ,IAAI;EAClD,oBAAoB;EACpB,0BAA0B;EAC1B,eAAe;CACjB,CAAC;CACD,MAAM,UAAU,KAAK;CACrB,IACE,KAAK,UAAU,WACf,CAAC,WACD,CAAC,YACD,QAAQ,MAAM,OAAO,SAAS,eAC9B,+BAA+B,OAAO,MAAM,SAAS,mBACrD,QAAQ,gBAAgB,SAAS,eACjC,YAAY,SAAS,kBACrB,SAAS,eAAe,SAAS,kBACjC,SAAS,gBAAgB,SAAS,eAClC,SAAS,aAAa,SAAS,YAC/B,SAAS,SAAS,SAAS,QAC3B,SAAS,eAAe,SAAS,2BAEjC,MAAM,IAAI,mBACR,0BACA,2DACF;CAEF,OAAO;EAAE;EAAS;CAAS;AAC7B;;;ACzCA,MAAM,MAAM,UAAU,QAAQ;AAC9B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;AAEhB,eAAsB,gCAAwD;CAC5E,IAAI;EACF,OAAO,MAAM,iBAAiB;CAChC,QAAQ;EAGN,QAAQ,KACN,2HACF;EACA,OAAO;CACT;AACF;AAEA,eAAe,mBAA2C;CACxD,IAAI,QAAQ,aAAa,SAMvB,OAAO,SALI,EACR,KAAK,CAAC,CACN,OACE,MAAM,SAAS,mCAAmC,MAAM,EAAA,CAAG,KAAK,CAEpD,CAAC,CAAC,YAAY;CAEjC,IAAI,SAAS;CACb,IAAI,QAAQ,aAAa,UAAU;EAEjC,CAAC,CAAE,UAAW,MAAM,IAClB,oBACA,CAAC,MAAM,sBAAsB,GAC7B,EACE,SAAS,IACX,CACF;EACA,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY;CAC7D;CACA,IAAI,QAAQ,aAAa,SAAS;EAChC,CAAC,CAAE,UAAW,MAAM,IAClB,kBACA;GACE;GACA;GACA;GACA;EACF,GACA;GAAE,SAAS;GAAM,aAAa;EAAK,CACrC;EACA,IAAI,CAAC,mBAAmB,KAAK,OAAO,KAAK,CAAC,GACxC,MAAM,IAAI,MAAM,4BAA4B;EAE9C,OAAO,SAAS,OAAO,KAAK;CAC9B;CACA,OAAO;AACT;AAEA,SAAS,gBACP,UACA,SACS;CACT,IAAI,EAAE,YAAY,YAAY,aAAa,SACzC,OAAO;CAET,MAAM,CAAC,aAAa,SAAS,aAAa,SAAS,MAAM,GAAG;CAC5D,MAAM,CAAC,QAAQ,IAAI,QAAQ,QAAQ,MAAM,GAAG;CAC5C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,WAAW,WAAW,UACnC,OACE,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC;CAMlE,IACE,WAAW,WACX,CAAC,MACD,CAAC,QACD,CAAC,WACD,CAAC,aACD,CAAC;EAAC;EAAI;EAAM;EAAS;CAAS,CAAC,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,CAAC,GAEpE,OAAO;CAET,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,IAAI,OAAO,SAAS;AACxE;AAEA,eAAsB,8BAA8B,OAOjD;CACD,MAAM,OAAO,MAAM,YAAY;EAC7B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,EAAE,KAAK;GAAE,GAAG,QAAQ;GAAK,eAAe,MAAM;EAAU,EAAE;EAC1E,MAAM;GACJ,gBAAgB,MAAM;GACtB,aAAa,MAAM;EACrB;CACF,CAAC;CACD,MAAM,OAAO,KACX,UAAU,EAAE,KAAK,EAAE,eAAe,MAAM,UAAU,EAAE,CAAC,GACrD,2BACF;CACA,IAAI;EACF,MAAM,WAAW,UAAU,IAAI;EAC/B,IACE,YACA,CAAC,SAAS,kBACV,CAAC,gBAAgB,SAAS,cAAc,MAAM,YAAY,GAE1D,MAAM,IAAI,mBACR,kCACA,qSACF;EAEF,IAAI,QAAQ,gCAAgC,MAAM;GAChD,QAAQ;GACR,gBAAgB,MAAM;GACtB,aAAa,MAAM;GACnB,UAAU,MAAM;GAChB,MAAM,MAAM;GACZ,KAAK,QAAQ;GACb,cAAc,MAAM;GACpB,gBAAgB;EAClB,CAAC;EACD,QAAQ,KAAK;EACb,SAAS,QAAQ,MAAoB;GACnC,UAAU,QAAQ,IAAI,GAAG;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACzD,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;GAC1C,cAAc,WAAW,KAAK,UAAU,IAAI,GAAG;IAC7C,MAAM;IACN,MAAM;GACR,CAAC;GACD,WAAW,WAAW,IAAI;EAC5B;EACA,OAAO;GACL,uBAAuB,WAAoB;IACzC,IAAI,MAAM,mBAAmB,WAC3B;IAEF,MAAM,OAAO;KAAE,GAAG;KAAO,gBAAgB;IAAU;IAGnD,QAAQ,IAAI;IACZ,QAAQ;GACV;GACA,eAAe,YAAY,IAAI;EACjC;CACF,SAAS,OAAO;EACd,MAAM,YAAY,IAAI;EACtB,MAAM;CACR;AACF;AAEA,SAAS,UAAU,MAAc;CAC/B,IAAI;CACJ,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,OAAO;EAET,MAAM;CACR;CACA,MAAM,SAAS,gCAAgC,UAAU,KAAK,MAAM,GAAG,CAAC;CACxE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,mBACR,sBACA,8GACF;CAEF,OAAO,OAAO;AAChB;;;ACtKA,SAAgB,iBAAiB,gBAAuC;CACtE,MAAM,UAAU,2BAA2B;CAC3C,MAAM,OAAO,QAAQ,cAAoB;CACzC,IAAI,UAEO;CACX,IAAI,YAEO;CACX,IAAI,UAAoC;CACxC,IAAI,mBAAwD;CAC5D,IAAI,eAAqC;CACzC,IAAI,UAAgC;CACpC,IAAI,eAAe;CAEnB,MAAM,cAA6B;EACjC,IAAI,CAAC,SAAS;GACZ,WAAW,YAAY;IACrB,IAAI;KACF,MAAM;KACN,IAAI,WAAW,SAAS;MACtB,MAAM,iBAAiB;MACvB,MAAM,2BAA2B,eAC/B,eAAe,wBAAwB,CACzC;KACF;IACF,UAAU;KACR,MAAM,WAAW,QAAQ;KACzB,OAAO,QAAQ;KACf,IAAI,QAAQ,WACV,QAAQ,WAAW;IAEvB;GACF,EAAA,CAAG;GACH,QAAQ,WACA,KAAK,QAAQ,IAClB,UAAU,KAAK,OAAO,KAAK,CAC9B;EACF;EACA,OAAO;CACT;CAEA,MAAM,WAAW,EACf,YAAY,OAAO,aAA2C;EAC5D,IACE,oBACA,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,QAAQ,GAE5D,MAAM,IAAI,mBACR,0BACA,mEACF;EAEF,IAAI,CAAC,cAAc;GACjB,mBAAmB;GACnB,gBAAgB,YAAY;IAC1B,MAAM,WAAW,MAAM,8BAA8B,QAAQ;IAC7D,IAAI,cACF,MAAM,IAAI,mBACR,qBACA,0DACF;IAEF,MAAM,oBAAoB,MAAM,8BAA8B;KAC5D,GAAG;KACH;KACA,cAAc,MAAM,8BAA8B;IACpD,CAAC;IACD,YAAY;IACZ,UAAU,SAAS;IACnB,MAAM,2BAA2B,SAAS,YAAY;KACpD,MAAM,EAAE,4BAA4B,iCAClC,MAAM,OAAO;KACf,MAAM,eAAe,MAAM,yBAAyB;KACpD,MAAM,YAAY,gBAChB,MAAM,sBAAsB,EAAE,MAAM,QAAQ,CAAC,CAC/C;KACA,UAAU,MAAM,2BAA2B;MACzC,WAAW,MAAM,6BAA6B;OAC5C;OACA;MACF,CAAC;MACD;MACA;MACA;MACA,iBAAiB,SAAS,SAAS;MACnC,kBAAkB,SAAS,QAAQ,MAAM,QAAQ;MACjD;MACA,OAAO,UAAU;OACf,IAAI,CAAC,cACH,OAAO,KAAK,KAAK;MAErB;MACA,oBAAoB,cAClB,kBAAkB,uBAAuB,SAAS;KACtD,CAAC;IACH,CAAC;GACH,EAAA,CAAG;EACL;EACA,MAAM;EACN,IAAI,CAAC,WAAW,cACd,MAAM,IAAI,mBACR,qBACA,sCACF;EAEF,OAAO,QAAQ,SAAS;CAC1B,EACF;CAIA,KAAK,MAAM,UAAU,OAAO,KAAK,2BAA2B,GAEzD;EACD,IAAI,WAAW,cACb;EAEF,MAAM,SAAS;EAIf,OAAO,UAAU,OAAO,YAAY;GAClC,IAAI,EAAE,WAAW,YAAY,cAC3B,MAAM,IAAI,mBACR,wBACA,6DACF;GAEF,MAAM,SAAS,QAAQ,SAAS;GAChC,OAAO,MAAM,2BACX,SACA,YAAY,MAAM,OAAO,OAAO,CAClC;EACF;CACF;CAEA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA;EACA,YAAY,UAAU;GACpB,QAAQ,MAAM,4CAA4C,KAAK;GAC/D,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;EACA,oBAAoB;GAClB,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;CACF,CAAC;CACD,OAAO,KAAK;AACd"}

package/dist/{installation-inventory-Dwn8FoKT.js → installation-inventory-DThnBEhV.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { mt as skillsDir } from "./lock-Bsl_ElWy.js";
-import { $ as canManageRegistryAgentSkillTargets, et as detectInstalledSkillsAgents, tt as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-CD5ZI-ct.js";
-import { n as resolveSkillsInstallStates, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-CK1WXIsI.js";
+import { $ as canManageRegistryAgentSkillTargets, et as detectInstalledSkillsAgents, tt as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-CWZcuMF6.js";
+import { n as resolveSkillsInstallStates, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-CQG3k9eh.js";
 import { T as updateConfiguredSkillsConfig, g as getConfiguredSkillsConfig, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-D7uE_xTo.js";
 import { stat } from "node:fs/promises";
 //#region src/skills/installation-inventory.ts
@@ -240,4 +240,4 @@ function normalizeInstallRecordForCompare(input) {
 //#endregion
 export { mergeTargetsByDir as a, summarizeSkillState as c, filterTargetsWithInstalledOpenMeldSkills as i, collectSkillsReadinessSnapshot as n, persistDetectedInstallStateFromCheck as o, compareInstallRecords as r, resolveTrackedInstallTargets as s, buildAgentTargets as t };
 
-//# sourceMappingURL=installation-inventory-Dwn8FoKT.js.map
+//# sourceMappingURL=installation-inventory-DThnBEhV.js.map

package/dist/{installation-inventory-Dwn8FoKT.js.map → installation-inventory-DThnBEhV.js.map}

@@ -1 +1 @@
-{"version":3,"file":"installation-inventory-Dwn8FoKT.js","names":[],"sources":["../src/skills/installation-inventory.ts"],"sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { skillsDir } from \"../config/paths\";\nimport {\n  getConfiguredSkillsConfig,\n  type RuntimeSkillsConfig,\n  type RuntimeSkillsCustomTarget,\n  type RuntimeSkillsInstallRecord,\n  resolveRuntimeSkillsCustomTargetId,\n  updateConfiguredSkillsConfig,\n} from \"../config/runtime-config\";\nimport {\n  canManageRegistryAgentSkillTargets,\n  detectInstalledSkillsAgents,\n  resolveSkillsAgentRegistry,\n} from \"./agents\";\nimport type { SkillsInstallTarget } from \"./installer\";\nimport {\n  resolveSkillInstallStateForTarget,\n  resolveSkillsInstallStates,\n  type SkillInstallStateResult,\n} from \"./state\";\nimport { ensureLocalSkills, type LocalSkill } from \"./store\";\n\nexport type SkillsReadinessSnapshot = {\n  status: \"up_to_date\" | \"action_required\" | \"no_targets\";\n  targetCount: number;\n  summary: {\n    upToDate: number;\n    outdated: number;\n    missing: number;\n    externalConflict: number;\n  };\n};\n\nexport async function collectSkillsReadinessSnapshot(): Promise<SkillsReadinessSnapshot> {\n  const skillsConfig = await getConfiguredSkillsConfig();\n  const registry = resolveSkillsAgentRegistry(skillsConfig);\n  const installedAgents = await detectInstalledSkillsAgents(registry);\n  const localSkills = await ensureLocalSkills();\n  const detectedAgentTargets = buildAgentTargets(installedAgents, registry);\n  const trackedTargets = await resolveTrackedInstallTargets({\n    skillsConfig,\n    registry,\n    localSkills,\n    onlyOpenMeldInstalledTargets: false,\n  });\n  const checkTargets = mergeTargetsByDir({\n    primary: detectedAgentTargets,\n    secondary: trackedTargets,\n  });\n  const states = await resolveSkillsInstallStates({\n    skills: localSkills,\n    targets: checkTargets,\n  });\n  await persistDetectedInstallStateFromCheck({ states });\n  const summary = summarizeSkillState(states);\n  const hasIssues =\n    summary.outdated > 0 || summary.missing > 0 || summary.externalConflict > 0;\n  let status: SkillsReadinessSnapshot[\"status\"] = \"up_to_date\";\n  if (checkTargets.length === 0) {\n    status = \"no_targets\";\n  } else if (hasIssues) {\n    status = \"action_required\";\n  }\n  return {\n    status,\n    targetCount: checkTargets.length,\n    summary,\n  };\n}\n\nexport function buildAgentTargets(\n  agents: string[],\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>\n): SkillsInstallTarget[] {\n  return agents.flatMap((agentName) => {\n    const config = registry[agentName];\n    if (!config?.globalSkillsDir || config.skillsInstallable !== true) {\n      return [];\n    }\n    return [\n      {\n        id: agentName,\n        dir: config.globalSkillsDir,\n        type: \"agent\" as const,\n      },\n    ];\n  });\n}\n\nfunction isLikelyCustomTargetId(value: string): boolean {\n  return value.startsWith(\"custom-\");\n}\n\nexport function resolveTrackedInstallTargets(input: {\n  skillsConfig: RuntimeSkillsConfig | null;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const installs = input.skillsConfig?.installs ?? [];\n  const customTargets = input.skillsConfig?.customTargets ?? [];\n  const customTargetByDir = buildCustomTargetByDir(customTargets);\n  const byTargetDir = new Map<string, SkillsInstallTarget>();\n  seedTrackedTargetsFromCustomTargets({\n    byTargetDir,\n    customTargetByDir,\n  });\n  seedTrackedTargetsFromInstallRecords({\n    byTargetDir,\n    installs,\n    registry: input.registry,\n    customTargetByDir,\n  });\n\n  const candidates = sortTrackedTargets([...byTargetDir.values()]);\n  const allowRegistryDefaults = canManageRegistryAgentSkillTargets();\n  const laneSafeCandidates = allowRegistryDefaults\n    ? candidates\n    : candidates.filter(\n        (target) =>\n          target.type === \"custom\" ||\n          input.registry[target.id]?.globalSkillsDirSource === \"config-override\"\n      );\n  return filterTrackedTargetsByState({\n    candidates: laneSafeCandidates,\n    localSkills: input.localSkills,\n    onlyOpenMeldInstalledTargets: input.onlyOpenMeldInstalledTargets,\n  });\n}\n\nfunction buildCustomTargetByDir(\n  customTargets: RuntimeSkillsCustomTarget[]\n): Map<string, RuntimeSkillsCustomTarget> {\n  const customTargetByDir = new Map<string, RuntimeSkillsCustomTarget>();\n  for (const customTarget of customTargets) {\n    const id = resolveRuntimeSkillsCustomTargetId({\n      dir: customTarget.dir,\n      ...(customTarget.id ? { id: customTarget.id } : {}),\n    });\n    customTargetByDir.set(customTarget.dir, {\n      id,\n      name: customTarget.name,\n      dir: customTarget.dir,\n    });\n  }\n  return customTargetByDir;\n}\n\nfunction seedTrackedTargetsFromCustomTargets(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const customTarget of input.customTargetByDir.values()) {\n    input.byTargetDir.set(customTarget.dir, {\n      id:\n        customTarget.id ??\n        resolveRuntimeSkillsCustomTargetId({ dir: customTarget.dir }),\n      dir: customTarget.dir,\n      type: \"custom\",\n    });\n  }\n}\n\nfunction seedTrackedTargetsFromInstallRecords(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  installs: RuntimeSkillsInstallRecord[];\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const install of input.installs) {\n    const trackedTarget = buildTrackedTargetFromInstallRecord({\n      install,\n      registry: input.registry,\n      customTargetByDir: input.customTargetByDir,\n    });\n    input.byTargetDir.set(install.targetDir, trackedTarget);\n  }\n}\n\nfunction buildTrackedTargetFromInstallRecord(input: {\n  install: RuntimeSkillsInstallRecord;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): SkillsInstallTarget {\n  const knownAgentDir = input.registry[input.install.targetId]?.globalSkillsDir;\n  const targetType: SkillsInstallTarget[\"type\"] =\n    knownAgentDir && knownAgentDir === input.install.targetDir\n      ? \"agent\"\n      : \"custom\";\n  if (targetType === \"agent\") {\n    return {\n      id: input.install.targetId,\n      dir: input.install.targetDir,\n      type: \"agent\",\n    };\n  }\n\n  const customTarget = input.customTargetByDir.get(input.install.targetDir);\n  const fallbackCustomId = isLikelyCustomTargetId(input.install.targetId)\n    ? input.install.targetId\n    : undefined;\n  const resolvedCustomId = customTarget?.id ?? fallbackCustomId;\n  return {\n    id: resolveRuntimeSkillsCustomTargetId({\n      dir: input.install.targetDir,\n      ...(resolvedCustomId ? { id: resolvedCustomId } : {}),\n    }),\n    dir: input.install.targetDir,\n    type: \"custom\",\n  };\n}\n\nfunction sortTrackedTargets(\n  targets: SkillsInstallTarget[]\n): SkillsInstallTarget[] {\n  return [...targets].sort((a, b) =>\n    `${a.id}:${a.dir}`.localeCompare(`${b.id}:${b.dir}`)\n  );\n}\n\nexport function mergeTargetsByDir(input: {\n  primary: SkillsInstallTarget[];\n  secondary: SkillsInstallTarget[];\n}): SkillsInstallTarget[] {\n  const byDir = new Map<string, SkillsInstallTarget>();\n  for (const target of input.secondary) {\n    byDir.set(target.dir, target);\n  }\n  for (const target of input.primary) {\n    byDir.set(target.dir, target);\n  }\n  return sortTrackedTargets([...byDir.values()]);\n}\n\nasync function filterInstalledTrackedTargets(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const installedOnly: SkillsInstallTarget[] = [];\n  for (const candidate of input.candidates) {\n    const hasInstalledOpenMeldSkill = await targetHasInstalledOpenMeldSkill({\n      target: candidate,\n      localSkills: input.localSkills,\n    });\n    if (!hasInstalledOpenMeldSkill) {\n      continue;\n    }\n    installedOnly.push(candidate);\n  }\n  return installedOnly;\n}\n\nexport async function filterTargetsWithInstalledOpenMeldSkills(input: {\n  targets: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.targets);\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterTrackedTargetsByState(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.candidates);\n  if (!input.onlyOpenMeldInstalledTargets) {\n    return existingTargets;\n  }\n\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterExistingTargetDirs(\n  candidates: SkillsInstallTarget[]\n): Promise<SkillsInstallTarget[]> {\n  const existing: SkillsInstallTarget[] = [];\n  for (const candidate of candidates) {\n    const targetDirStats = await stat(candidate.dir).catch(() => null);\n    if (!targetDirStats?.isDirectory()) {\n      continue;\n    }\n    existing.push(candidate);\n  }\n  return existing;\n}\n\nexport function summarizeSkillState(states: SkillInstallStateResult[]): {\n  upToDate: number;\n  outdated: number;\n  missing: number;\n  externalConflict: number;\n} {\n  return {\n    upToDate: states.filter((state) => state.state === \"up_to_date\").length,\n    outdated: states.filter((state) => state.state === \"outdated\").length,\n    missing: states.filter((state) => state.state === \"missing\").length,\n    externalConflict: states.filter(\n      (state) => state.state === \"external_conflict\"\n    ).length,\n  };\n}\n\nasync function targetHasInstalledOpenMeldSkill(input: {\n  target: SkillsInstallTarget;\n  localSkills: LocalSkill[];\n}): Promise<boolean> {\n  const targetDirStats = await stat(input.target.dir).catch(() => null);\n  if (!targetDirStats?.isDirectory()) {\n    return false;\n  }\n\n  for (const skill of input.localSkills) {\n    const state = await resolveSkillInstallStateForTarget({\n      skill,\n      target: input.target,\n    });\n    if (state.state === \"up_to_date\" || state.state === \"outdated\") {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport async function persistDetectedInstallStateFromCheck(input: {\n  states: SkillInstallStateResult[];\n}): Promise<void> {\n  const discoveredByTargetDir = new Map<string, SkillInstallStateResult[]>();\n  for (const state of input.states) {\n    if (!(state.state === \"up_to_date\" || state.state === \"outdated\")) {\n      continue;\n    }\n    const list = discoveredByTargetDir.get(state.targetDir) ?? [];\n    list.push(state);\n    discoveredByTargetDir.set(state.targetDir, list);\n  }\n\n  if (discoveredByTargetDir.size === 0) {\n    return;\n  }\n\n  await updateConfiguredSkillsConfig((currentSkillsConfig) => {\n    const byTargetDir = new Map<string, RuntimeSkillsInstallRecord>();\n    for (const record of currentSkillsConfig?.installs ?? []) {\n      byTargetDir.set(record.targetDir, record);\n    }\n\n    const now = new Date().toISOString();\n    for (const [targetDir, group] of discoveredByTargetDir) {\n      const first = group[0];\n      if (!first) {\n        continue;\n      }\n      const mode: RuntimeSkillsInstallRecord[\"mode\"] = group.some(\n        (state) => state.targetMode === \"copy\"\n      )\n        ? \"copy\"\n        : \"symlink\";\n      const skillIds = Array.from(\n        new Set(group.map((state) => state.skillId))\n      ).sort((a, b) => a.localeCompare(b));\n\n      byTargetDir.set(targetDir, {\n        targetId: first.targetId,\n        targetDir,\n        mode,\n        status: \"installed\",\n        skillIds,\n        updatedAt: now,\n      });\n    }\n\n    const nextInstalls = [...byTargetDir.values()].sort(compareInstallRecords);\n    const previousInstalls = [...(currentSkillsConfig?.installs ?? [])]\n      .sort(compareInstallRecords)\n      .map(normalizeInstallRecordForCompare);\n    const nextComparable = nextInstalls.map(normalizeInstallRecordForCompare);\n    if (JSON.stringify(previousInstalls) === JSON.stringify(nextComparable)) {\n      return currentSkillsConfig;\n    }\n\n    return {\n      storeDir: currentSkillsConfig?.storeDir ?? skillsDir(),\n      ...(currentSkillsConfig?.agents\n        ? { agents: currentSkillsConfig.agents }\n        : {}),\n      ...(currentSkillsConfig?.customTargets\n        ? { customTargets: currentSkillsConfig.customTargets }\n        : {}),\n      installs: nextInstalls,\n    };\n  });\n}\n\nexport function compareInstallRecords(\n  left: RuntimeSkillsInstallRecord,\n  right: RuntimeSkillsInstallRecord\n): number {\n  const byTargetId = left.targetId.localeCompare(right.targetId);\n  if (byTargetId !== 0) {\n    return byTargetId;\n  }\n  return left.targetDir.localeCompare(right.targetDir);\n}\n\nfunction normalizeInstallRecordForCompare(\n  input: RuntimeSkillsInstallRecord\n): Omit<RuntimeSkillsInstallRecord, \"updatedAt\"> {\n  return {\n    targetId: input.targetId,\n    targetDir: input.targetDir,\n    mode: input.mode,\n    status: input.status,\n    skillIds: [...input.skillIds].sort((a, b) => a.localeCompare(b)),\n    ...(input.reason ? { reason: input.reason } : {}),\n  };\n}\n"],"mappings":";;;;;;;;AAkCA,eAAsB,iCAAmE;CACvF,MAAM,eAAe,MAAM,0BAA0B;CACrD,MAAM,WAAW,2BAA2B,YAAY;CACxD,MAAM,kBAAkB,MAAM,4BAA4B,QAAQ;CAClE,MAAM,cAAc,MAAM,kBAAkB;CAQ5C,MAAM,eAAe,kBAAkB;EACrC,SAR2B,kBAAkB,iBAAiB,QAQlC;EAC5B,WAAW,MARgB,6BAA6B;GACxD;GACA;GACA;GACA,8BAA8B;EAChC,CAAC;CAID,CAAC;CACD,MAAM,SAAS,MAAM,2BAA2B;EAC9C,QAAQ;EACR,SAAS;CACX,CAAC;CACD,MAAM,qCAAqC,EAAE,OAAO,CAAC;CACrD,MAAM,UAAU,oBAAoB,MAAM;CAC1C,MAAM,YACJ,QAAQ,WAAW,KAAK,QAAQ,UAAU,KAAK,QAAQ,mBAAmB;CAC5E,IAAI,SAA4C;CAChD,IAAI,aAAa,WAAW,GAC1B,SAAS;MACJ,IAAI,WACT,SAAS;CAEX,OAAO;EACL;EACA,aAAa,aAAa;EAC1B;CACF;AACF;AAEA,SAAgB,kBACd,QACA,UACuB;CACvB,OAAO,OAAO,SAAS,cAAc;EACnC,MAAM,SAAS,SAAS;EACxB,IAAI,CAAC,QAAQ,mBAAmB,OAAO,sBAAsB,MAC3D,OAAO,CAAC;EAEV,OAAO,CACL;GACE,IAAI;GACJ,KAAK,OAAO;GACZ,MAAM;EACR,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBAAuB,OAAwB;CACtD,OAAO,MAAM,WAAW,SAAS;AACnC;AAEA,SAAgB,6BAA6B,OAKV;CACjC,MAAM,WAAW,MAAM,cAAc,YAAY,CAAC;CAElD,MAAM,oBAAoB,uBADJ,MAAM,cAAc,iBAAiB,CAAC,CACE;CAC9D,MAAM,8BAAc,IAAI,IAAiC;CACzD,oCAAoC;EAClC;EACA;CACF,CAAC;CACD,qCAAqC;EACnC;EACA;EACA,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,aAAa,mBAAmB,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC;CAS/D,OAAO,4BAA4B;EACjC,YAT4B,mCACiB,IAC3C,aACA,WAAW,QACR,WACC,OAAO,SAAS,YAChB,MAAM,SAAS,OAAO,GAAG,EAAE,0BAA0B,iBACzD;EAGF,aAAa,MAAM;EACnB,8BAA8B,MAAM;CACtC,CAAC;AACH;AAEA,SAAS,uBACP,eACwC;CACxC,MAAM,oCAAoB,IAAI,IAAuC;CACrE,KAAK,MAAM,gBAAgB,eAAe;EACxC,MAAM,KAAK,mCAAmC;GAC5C,KAAK,aAAa;GAClB,GAAI,aAAa,KAAK,EAAE,IAAI,aAAa,GAAG,IAAI,CAAC;EACnD,CAAC;EACD,kBAAkB,IAAI,aAAa,KAAK;GACtC;GACA,MAAM,aAAa;GACnB,KAAK,aAAa;EACpB,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,oCAAoC,OAGpC;CACP,KAAK,MAAM,gBAAgB,MAAM,kBAAkB,OAAO,GACxD,MAAM,YAAY,IAAI,aAAa,KAAK;EACtC,IACE,aAAa,MACb,mCAAmC,EAAE,KAAK,aAAa,IAAI,CAAC;EAC9D,KAAK,aAAa;EAClB,MAAM;CACR,CAAC;AAEL;AAEA,SAAS,qCAAqC,OAKrC;CACP,KAAK,MAAM,WAAW,MAAM,UAAU;EACpC,MAAM,gBAAgB,oCAAoC;GACxD;GACA,UAAU,MAAM;GAChB,mBAAmB,MAAM;EAC3B,CAAC;EACD,MAAM,YAAY,IAAI,QAAQ,WAAW,aAAa;CACxD;AACF;AAEA,SAAS,oCAAoC,OAIrB;CACtB,MAAM,gBAAgB,MAAM,SAAS,MAAM,QAAQ,SAAS,EAAE;CAK9D,KAHE,iBAAiB,kBAAkB,MAAM,QAAQ,YAC7C,UACA,cACa,SACjB,OAAO;EACL,IAAI,MAAM,QAAQ;EAClB,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;CAGF,MAAM,eAAe,MAAM,kBAAkB,IAAI,MAAM,QAAQ,SAAS;CACxE,MAAM,mBAAmB,uBAAuB,MAAM,QAAQ,QAAQ,IAClE,MAAM,QAAQ,WACd,KAAA;CACJ,MAAM,mBAAmB,cAAc,MAAM;CAC7C,OAAO;EACL,IAAI,mCAAmC;GACrC,KAAK,MAAM,QAAQ;GACnB,GAAI,mBAAmB,EAAE,IAAI,iBAAiB,IAAI,CAAC;EACrD,CAAC;EACD,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;AACF;AAEA,SAAS,mBACP,SACuB;CACvB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,MAC3B,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,cAAc,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,CACrD;AACF;AAEA,SAAgB,kBAAkB,OAGR;CACxB,MAAM,wBAAQ,IAAI,IAAiC;CACnD,KAAK,MAAM,UAAU,MAAM,WACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,OAAO,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC;AAC/C;AAEA,eAAe,8BAA8B,OAGV;CACjC,MAAM,gBAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,MAAM,YAAY;EAKxC,IAAI,CAAC,MAJmC,gCAAgC;GACtE,QAAQ;GACR,aAAa,MAAM;EACrB,CAAC,GAEC;EAEF,cAAc,KAAK,SAAS;CAC9B;CACA,OAAO;AACT;AAEA,eAAsB,yCAAyC,OAG5B;CAEjC,OAAO,8BAA8B;EACnC,YAAY,MAFgB,yBAAyB,MAAM,OAAO;EAGlE,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,4BAA4B,OAIR;CACjC,MAAM,kBAAkB,MAAM,yBAAyB,MAAM,UAAU;CACvE,IAAI,CAAC,MAAM,8BACT,OAAO;CAGT,OAAO,8BAA8B;EACnC,YAAY;EACZ,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,yBACb,YACgC;CAChC,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAElC,IAAI,EAAC,MADwB,KAAK,UAAU,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC5C,YAAY,GAC/B;EAEF,SAAS,KAAK,SAAS;CACzB;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB,QAKlC;CACA,OAAO;EACL,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,YAAY,CAAC,CAAC;EACjE,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,UAAU,CAAC,CAAC;EAC/D,SAAS,OAAO,QAAQ,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC;EAC7D,kBAAkB,OAAO,QACtB,UAAU,MAAM,UAAU,mBAC7B,CAAC,CAAC;CACJ;AACF;AAEA,eAAe,gCAAgC,OAG1B;CAEnB,IAAI,EAAC,MADwB,KAAK,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC/C,YAAY,GAC/B,OAAO;CAGT,KAAK,MAAM,SAAS,MAAM,aAAa;EACrC,MAAM,QAAQ,MAAM,kCAAkC;GACpD;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,IAAI,MAAM,UAAU,gBAAgB,MAAM,UAAU,YAClD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,eAAsB,qCAAqC,OAEzC;CAChB,MAAM,wCAAwB,IAAI,IAAuC;CACzE,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,IAAI,EAAE,MAAM,UAAU,gBAAgB,MAAM,UAAU,aACpD;EAEF,MAAM,OAAO,sBAAsB,IAAI,MAAM,SAAS,KAAK,CAAC;EAC5D,KAAK,KAAK,KAAK;EACf,sBAAsB,IAAI,MAAM,WAAW,IAAI;CACjD;CAEA,IAAI,sBAAsB,SAAS,GACjC;CAGF,MAAM,8BAA8B,wBAAwB;EAC1D,MAAM,8BAAc,IAAI,IAAwC;EAChE,KAAK,MAAM,UAAU,qBAAqB,YAAY,CAAC,GACrD,YAAY,IAAI,OAAO,WAAW,MAAM;EAG1C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,MAAM,CAAC,WAAW,UAAU,uBAAuB;GACtD,MAAM,QAAQ,MAAM;GACpB,IAAI,CAAC,OACH;GAEF,MAAM,OAA2C,MAAM,MACpD,UAAU,MAAM,eAAe,MAClC,IACI,SACA;GACJ,MAAM,WAAW,MAAM,KACrB,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7C,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;GAEnC,YAAY,IAAI,WAAW;IACzB,UAAU,MAAM;IAChB;IACA;IACA,QAAQ;IACR;IACA,WAAW;GACb,CAAC;EACH;EAEA,MAAM,eAAe,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB;EACzE,MAAM,mBAAmB,CAAC,GAAI,qBAAqB,YAAY,CAAC,CAAE,CAAC,CAChE,KAAK,qBAAqB,CAAC,CAC3B,IAAI,gCAAgC;EACvC,MAAM,iBAAiB,aAAa,IAAI,gCAAgC;EACxE,IAAI,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,cAAc,GACpE,OAAO;EAGT,OAAO;GACL,UAAU,qBAAqB,YAAY,UAAU;GACrD,GAAI,qBAAqB,SACrB,EAAE,QAAQ,oBAAoB,OAAO,IACrC,CAAC;GACL,GAAI,qBAAqB,gBACrB,EAAE,eAAe,oBAAoB,cAAc,IACnD,CAAC;GACL,UAAU;EACZ;CACF,CAAC;AACH;AAEA,SAAgB,sBACd,MACA,OACQ;CACR,MAAM,aAAa,KAAK,SAAS,cAAc,MAAM,QAAQ;CAC7D,IAAI,eAAe,GACjB,OAAO;CAET,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS;AACrD;AAEA,SAAS,iCACP,OAC+C;CAC/C,OAAO;EACL,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC/D,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD;AACF"}
+{"version":3,"file":"installation-inventory-DThnBEhV.js","names":[],"sources":["../src/skills/installation-inventory.ts"],"sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { skillsDir } from \"../config/paths\";\nimport {\n  getConfiguredSkillsConfig,\n  type RuntimeSkillsConfig,\n  type RuntimeSkillsCustomTarget,\n  type RuntimeSkillsInstallRecord,\n  resolveRuntimeSkillsCustomTargetId,\n  updateConfiguredSkillsConfig,\n} from \"../config/runtime-config\";\nimport {\n  canManageRegistryAgentSkillTargets,\n  detectInstalledSkillsAgents,\n  resolveSkillsAgentRegistry,\n} from \"./agents\";\nimport type { SkillsInstallTarget } from \"./installer\";\nimport {\n  resolveSkillInstallStateForTarget,\n  resolveSkillsInstallStates,\n  type SkillInstallStateResult,\n} from \"./state\";\nimport { ensureLocalSkills, type LocalSkill } from \"./store\";\n\nexport type SkillsReadinessSnapshot = {\n  status: \"up_to_date\" | \"action_required\" | \"no_targets\";\n  targetCount: number;\n  summary: {\n    upToDate: number;\n    outdated: number;\n    missing: number;\n    externalConflict: number;\n  };\n};\n\nexport async function collectSkillsReadinessSnapshot(): Promise<SkillsReadinessSnapshot> {\n  const skillsConfig = await getConfiguredSkillsConfig();\n  const registry = resolveSkillsAgentRegistry(skillsConfig);\n  const installedAgents = await detectInstalledSkillsAgents(registry);\n  const localSkills = await ensureLocalSkills();\n  const detectedAgentTargets = buildAgentTargets(installedAgents, registry);\n  const trackedTargets = await resolveTrackedInstallTargets({\n    skillsConfig,\n    registry,\n    localSkills,\n    onlyOpenMeldInstalledTargets: false,\n  });\n  const checkTargets = mergeTargetsByDir({\n    primary: detectedAgentTargets,\n    secondary: trackedTargets,\n  });\n  const states = await resolveSkillsInstallStates({\n    skills: localSkills,\n    targets: checkTargets,\n  });\n  await persistDetectedInstallStateFromCheck({ states });\n  const summary = summarizeSkillState(states);\n  const hasIssues =\n    summary.outdated > 0 || summary.missing > 0 || summary.externalConflict > 0;\n  let status: SkillsReadinessSnapshot[\"status\"] = \"up_to_date\";\n  if (checkTargets.length === 0) {\n    status = \"no_targets\";\n  } else if (hasIssues) {\n    status = \"action_required\";\n  }\n  return {\n    status,\n    targetCount: checkTargets.length,\n    summary,\n  };\n}\n\nexport function buildAgentTargets(\n  agents: string[],\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>\n): SkillsInstallTarget[] {\n  return agents.flatMap((agentName) => {\n    const config = registry[agentName];\n    if (!config?.globalSkillsDir || config.skillsInstallable !== true) {\n      return [];\n    }\n    return [\n      {\n        id: agentName,\n        dir: config.globalSkillsDir,\n        type: \"agent\" as const,\n      },\n    ];\n  });\n}\n\nfunction isLikelyCustomTargetId(value: string): boolean {\n  return value.startsWith(\"custom-\");\n}\n\nexport function resolveTrackedInstallTargets(input: {\n  skillsConfig: RuntimeSkillsConfig | null;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const installs = input.skillsConfig?.installs ?? [];\n  const customTargets = input.skillsConfig?.customTargets ?? [];\n  const customTargetByDir = buildCustomTargetByDir(customTargets);\n  const byTargetDir = new Map<string, SkillsInstallTarget>();\n  seedTrackedTargetsFromCustomTargets({\n    byTargetDir,\n    customTargetByDir,\n  });\n  seedTrackedTargetsFromInstallRecords({\n    byTargetDir,\n    installs,\n    registry: input.registry,\n    customTargetByDir,\n  });\n\n  const candidates = sortTrackedTargets([...byTargetDir.values()]);\n  const allowRegistryDefaults = canManageRegistryAgentSkillTargets();\n  const laneSafeCandidates = allowRegistryDefaults\n    ? candidates\n    : candidates.filter(\n        (target) =>\n          target.type === \"custom\" ||\n          input.registry[target.id]?.globalSkillsDirSource === \"config-override\"\n      );\n  return filterTrackedTargetsByState({\n    candidates: laneSafeCandidates,\n    localSkills: input.localSkills,\n    onlyOpenMeldInstalledTargets: input.onlyOpenMeldInstalledTargets,\n  });\n}\n\nfunction buildCustomTargetByDir(\n  customTargets: RuntimeSkillsCustomTarget[]\n): Map<string, RuntimeSkillsCustomTarget> {\n  const customTargetByDir = new Map<string, RuntimeSkillsCustomTarget>();\n  for (const customTarget of customTargets) {\n    const id = resolveRuntimeSkillsCustomTargetId({\n      dir: customTarget.dir,\n      ...(customTarget.id ? { id: customTarget.id } : {}),\n    });\n    customTargetByDir.set(customTarget.dir, {\n      id,\n      name: customTarget.name,\n      dir: customTarget.dir,\n    });\n  }\n  return customTargetByDir;\n}\n\nfunction seedTrackedTargetsFromCustomTargets(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const customTarget of input.customTargetByDir.values()) {\n    input.byTargetDir.set(customTarget.dir, {\n      id:\n        customTarget.id ??\n        resolveRuntimeSkillsCustomTargetId({ dir: customTarget.dir }),\n      dir: customTarget.dir,\n      type: \"custom\",\n    });\n  }\n}\n\nfunction seedTrackedTargetsFromInstallRecords(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  installs: RuntimeSkillsInstallRecord[];\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const install of input.installs) {\n    const trackedTarget = buildTrackedTargetFromInstallRecord({\n      install,\n      registry: input.registry,\n      customTargetByDir: input.customTargetByDir,\n    });\n    input.byTargetDir.set(install.targetDir, trackedTarget);\n  }\n}\n\nfunction buildTrackedTargetFromInstallRecord(input: {\n  install: RuntimeSkillsInstallRecord;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): SkillsInstallTarget {\n  const knownAgentDir = input.registry[input.install.targetId]?.globalSkillsDir;\n  const targetType: SkillsInstallTarget[\"type\"] =\n    knownAgentDir && knownAgentDir === input.install.targetDir\n      ? \"agent\"\n      : \"custom\";\n  if (targetType === \"agent\") {\n    return {\n      id: input.install.targetId,\n      dir: input.install.targetDir,\n      type: \"agent\",\n    };\n  }\n\n  const customTarget = input.customTargetByDir.get(input.install.targetDir);\n  const fallbackCustomId = isLikelyCustomTargetId(input.install.targetId)\n    ? input.install.targetId\n    : undefined;\n  const resolvedCustomId = customTarget?.id ?? fallbackCustomId;\n  return {\n    id: resolveRuntimeSkillsCustomTargetId({\n      dir: input.install.targetDir,\n      ...(resolvedCustomId ? { id: resolvedCustomId } : {}),\n    }),\n    dir: input.install.targetDir,\n    type: \"custom\",\n  };\n}\n\nfunction sortTrackedTargets(\n  targets: SkillsInstallTarget[]\n): SkillsInstallTarget[] {\n  return [...targets].sort((a, b) =>\n    `${a.id}:${a.dir}`.localeCompare(`${b.id}:${b.dir}`)\n  );\n}\n\nexport function mergeTargetsByDir(input: {\n  primary: SkillsInstallTarget[];\n  secondary: SkillsInstallTarget[];\n}): SkillsInstallTarget[] {\n  const byDir = new Map<string, SkillsInstallTarget>();\n  for (const target of input.secondary) {\n    byDir.set(target.dir, target);\n  }\n  for (const target of input.primary) {\n    byDir.set(target.dir, target);\n  }\n  return sortTrackedTargets([...byDir.values()]);\n}\n\nasync function filterInstalledTrackedTargets(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const installedOnly: SkillsInstallTarget[] = [];\n  for (const candidate of input.candidates) {\n    const hasInstalledOpenMeldSkill = await targetHasInstalledOpenMeldSkill({\n      target: candidate,\n      localSkills: input.localSkills,\n    });\n    if (!hasInstalledOpenMeldSkill) {\n      continue;\n    }\n    installedOnly.push(candidate);\n  }\n  return installedOnly;\n}\n\nexport async function filterTargetsWithInstalledOpenMeldSkills(input: {\n  targets: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.targets);\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterTrackedTargetsByState(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.candidates);\n  if (!input.onlyOpenMeldInstalledTargets) {\n    return existingTargets;\n  }\n\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterExistingTargetDirs(\n  candidates: SkillsInstallTarget[]\n): Promise<SkillsInstallTarget[]> {\n  const existing: SkillsInstallTarget[] = [];\n  for (const candidate of candidates) {\n    const targetDirStats = await stat(candidate.dir).catch(() => null);\n    if (!targetDirStats?.isDirectory()) {\n      continue;\n    }\n    existing.push(candidate);\n  }\n  return existing;\n}\n\nexport function summarizeSkillState(states: SkillInstallStateResult[]): {\n  upToDate: number;\n  outdated: number;\n  missing: number;\n  externalConflict: number;\n} {\n  return {\n    upToDate: states.filter((state) => state.state === \"up_to_date\").length,\n    outdated: states.filter((state) => state.state === \"outdated\").length,\n    missing: states.filter((state) => state.state === \"missing\").length,\n    externalConflict: states.filter(\n      (state) => state.state === \"external_conflict\"\n    ).length,\n  };\n}\n\nasync function targetHasInstalledOpenMeldSkill(input: {\n  target: SkillsInstallTarget;\n  localSkills: LocalSkill[];\n}): Promise<boolean> {\n  const targetDirStats = await stat(input.target.dir).catch(() => null);\n  if (!targetDirStats?.isDirectory()) {\n    return false;\n  }\n\n  for (const skill of input.localSkills) {\n    const state = await resolveSkillInstallStateForTarget({\n      skill,\n      target: input.target,\n    });\n    if (state.state === \"up_to_date\" || state.state === \"outdated\") {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport async function persistDetectedInstallStateFromCheck(input: {\n  states: SkillInstallStateResult[];\n}): Promise<void> {\n  const discoveredByTargetDir = new Map<string, SkillInstallStateResult[]>();\n  for (const state of input.states) {\n    if (!(state.state === \"up_to_date\" || state.state === \"outdated\")) {\n      continue;\n    }\n    const list = discoveredByTargetDir.get(state.targetDir) ?? [];\n    list.push(state);\n    discoveredByTargetDir.set(state.targetDir, list);\n  }\n\n  if (discoveredByTargetDir.size === 0) {\n    return;\n  }\n\n  await updateConfiguredSkillsConfig((currentSkillsConfig) => {\n    const byTargetDir = new Map<string, RuntimeSkillsInstallRecord>();\n    for (const record of currentSkillsConfig?.installs ?? []) {\n      byTargetDir.set(record.targetDir, record);\n    }\n\n    const now = new Date().toISOString();\n    for (const [targetDir, group] of discoveredByTargetDir) {\n      const first = group[0];\n      if (!first) {\n        continue;\n      }\n      const mode: RuntimeSkillsInstallRecord[\"mode\"] = group.some(\n        (state) => state.targetMode === \"copy\"\n      )\n        ? \"copy\"\n        : \"symlink\";\n      const skillIds = Array.from(\n        new Set(group.map((state) => state.skillId))\n      ).sort((a, b) => a.localeCompare(b));\n\n      byTargetDir.set(targetDir, {\n        targetId: first.targetId,\n        targetDir,\n        mode,\n        status: \"installed\",\n        skillIds,\n        updatedAt: now,\n      });\n    }\n\n    const nextInstalls = [...byTargetDir.values()].sort(compareInstallRecords);\n    const previousInstalls = [...(currentSkillsConfig?.installs ?? [])]\n      .sort(compareInstallRecords)\n      .map(normalizeInstallRecordForCompare);\n    const nextComparable = nextInstalls.map(normalizeInstallRecordForCompare);\n    if (JSON.stringify(previousInstalls) === JSON.stringify(nextComparable)) {\n      return currentSkillsConfig;\n    }\n\n    return {\n      storeDir: currentSkillsConfig?.storeDir ?? skillsDir(),\n      ...(currentSkillsConfig?.agents\n        ? { agents: currentSkillsConfig.agents }\n        : {}),\n      ...(currentSkillsConfig?.customTargets\n        ? { customTargets: currentSkillsConfig.customTargets }\n        : {}),\n      installs: nextInstalls,\n    };\n  });\n}\n\nexport function compareInstallRecords(\n  left: RuntimeSkillsInstallRecord,\n  right: RuntimeSkillsInstallRecord\n): number {\n  const byTargetId = left.targetId.localeCompare(right.targetId);\n  if (byTargetId !== 0) {\n    return byTargetId;\n  }\n  return left.targetDir.localeCompare(right.targetDir);\n}\n\nfunction normalizeInstallRecordForCompare(\n  input: RuntimeSkillsInstallRecord\n): Omit<RuntimeSkillsInstallRecord, \"updatedAt\"> {\n  return {\n    targetId: input.targetId,\n    targetDir: input.targetDir,\n    mode: input.mode,\n    status: input.status,\n    skillIds: [...input.skillIds].sort((a, b) => a.localeCompare(b)),\n    ...(input.reason ? { reason: input.reason } : {}),\n  };\n}\n"],"mappings":";;;;;;;;AAkCA,eAAsB,iCAAmE;CACvF,MAAM,eAAe,MAAM,0BAA0B;CACrD,MAAM,WAAW,2BAA2B,YAAY;CACxD,MAAM,kBAAkB,MAAM,4BAA4B,QAAQ;CAClE,MAAM,cAAc,MAAM,kBAAkB;CAQ5C,MAAM,eAAe,kBAAkB;EACrC,SAR2B,kBAAkB,iBAAiB,QAQlC;EAC5B,WAAW,MARgB,6BAA6B;GACxD;GACA;GACA;GACA,8BAA8B;EAChC,CAAC;CAID,CAAC;CACD,MAAM,SAAS,MAAM,2BAA2B;EAC9C,QAAQ;EACR,SAAS;CACX,CAAC;CACD,MAAM,qCAAqC,EAAE,OAAO,CAAC;CACrD,MAAM,UAAU,oBAAoB,MAAM;CAC1C,MAAM,YACJ,QAAQ,WAAW,KAAK,QAAQ,UAAU,KAAK,QAAQ,mBAAmB;CAC5E,IAAI,SAA4C;CAChD,IAAI,aAAa,WAAW,GAC1B,SAAS;MACJ,IAAI,WACT,SAAS;CAEX,OAAO;EACL;EACA,aAAa,aAAa;EAC1B;CACF;AACF;AAEA,SAAgB,kBACd,QACA,UACuB;CACvB,OAAO,OAAO,SAAS,cAAc;EACnC,MAAM,SAAS,SAAS;EACxB,IAAI,CAAC,QAAQ,mBAAmB,OAAO,sBAAsB,MAC3D,OAAO,CAAC;EAEV,OAAO,CACL;GACE,IAAI;GACJ,KAAK,OAAO;GACZ,MAAM;EACR,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBAAuB,OAAwB;CACtD,OAAO,MAAM,WAAW,SAAS;AACnC;AAEA,SAAgB,6BAA6B,OAKV;CACjC,MAAM,WAAW,MAAM,cAAc,YAAY,CAAC;CAElD,MAAM,oBAAoB,uBADJ,MAAM,cAAc,iBAAiB,CAAC,CACE;CAC9D,MAAM,8BAAc,IAAI,IAAiC;CACzD,oCAAoC;EAClC;EACA;CACF,CAAC;CACD,qCAAqC;EACnC;EACA;EACA,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,aAAa,mBAAmB,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC;CAS/D,OAAO,4BAA4B;EACjC,YAT4B,mCACiB,IAC3C,aACA,WAAW,QACR,WACC,OAAO,SAAS,YAChB,MAAM,SAAS,OAAO,GAAG,EAAE,0BAA0B,iBACzD;EAGF,aAAa,MAAM;EACnB,8BAA8B,MAAM;CACtC,CAAC;AACH;AAEA,SAAS,uBACP,eACwC;CACxC,MAAM,oCAAoB,IAAI,IAAuC;CACrE,KAAK,MAAM,gBAAgB,eAAe;EACxC,MAAM,KAAK,mCAAmC;GAC5C,KAAK,aAAa;GAClB,GAAI,aAAa,KAAK,EAAE,IAAI,aAAa,GAAG,IAAI,CAAC;EACnD,CAAC;EACD,kBAAkB,IAAI,aAAa,KAAK;GACtC;GACA,MAAM,aAAa;GACnB,KAAK,aAAa;EACpB,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,oCAAoC,OAGpC;CACP,KAAK,MAAM,gBAAgB,MAAM,kBAAkB,OAAO,GACxD,MAAM,YAAY,IAAI,aAAa,KAAK;EACtC,IACE,aAAa,MACb,mCAAmC,EAAE,KAAK,aAAa,IAAI,CAAC;EAC9D,KAAK,aAAa;EAClB,MAAM;CACR,CAAC;AAEL;AAEA,SAAS,qCAAqC,OAKrC;CACP,KAAK,MAAM,WAAW,MAAM,UAAU;EACpC,MAAM,gBAAgB,oCAAoC;GACxD;GACA,UAAU,MAAM;GAChB,mBAAmB,MAAM;EAC3B,CAAC;EACD,MAAM,YAAY,IAAI,QAAQ,WAAW,aAAa;CACxD;AACF;AAEA,SAAS,oCAAoC,OAIrB;CACtB,MAAM,gBAAgB,MAAM,SAAS,MAAM,QAAQ,SAAS,EAAE;CAK9D,KAHE,iBAAiB,kBAAkB,MAAM,QAAQ,YAC7C,UACA,cACa,SACjB,OAAO;EACL,IAAI,MAAM,QAAQ;EAClB,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;CAGF,MAAM,eAAe,MAAM,kBAAkB,IAAI,MAAM,QAAQ,SAAS;CACxE,MAAM,mBAAmB,uBAAuB,MAAM,QAAQ,QAAQ,IAClE,MAAM,QAAQ,WACd,KAAA;CACJ,MAAM,mBAAmB,cAAc,MAAM;CAC7C,OAAO;EACL,IAAI,mCAAmC;GACrC,KAAK,MAAM,QAAQ;GACnB,GAAI,mBAAmB,EAAE,IAAI,iBAAiB,IAAI,CAAC;EACrD,CAAC;EACD,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;AACF;AAEA,SAAS,mBACP,SACuB;CACvB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,MAC3B,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,cAAc,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,CACrD;AACF;AAEA,SAAgB,kBAAkB,OAGR;CACxB,MAAM,wBAAQ,IAAI,IAAiC;CACnD,KAAK,MAAM,UAAU,MAAM,WACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,OAAO,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC;AAC/C;AAEA,eAAe,8BAA8B,OAGV;CACjC,MAAM,gBAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,MAAM,YAAY;EAKxC,IAAI,CAAC,MAJmC,gCAAgC;GACtE,QAAQ;GACR,aAAa,MAAM;EACrB,CAAC,GAEC;EAEF,cAAc,KAAK,SAAS;CAC9B;CACA,OAAO;AACT;AAEA,eAAsB,yCAAyC,OAG5B;CAEjC,OAAO,8BAA8B;EACnC,YAAY,MAFgB,yBAAyB,MAAM,OAAO;EAGlE,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,4BAA4B,OAIR;CACjC,MAAM,kBAAkB,MAAM,yBAAyB,MAAM,UAAU;CACvE,IAAI,CAAC,MAAM,8BACT,OAAO;CAGT,OAAO,8BAA8B;EACnC,YAAY;EACZ,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,yBACb,YACgC;CAChC,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAElC,IAAI,EAAC,MADwB,KAAK,UAAU,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC5C,YAAY,GAC/B;EAEF,SAAS,KAAK,SAAS;CACzB;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB,QAKlC;CACA,OAAO;EACL,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,YAAY,CAAC,CAAC;EACjE,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,UAAU,CAAC,CAAC;EAC/D,SAAS,OAAO,QAAQ,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC;EAC7D,kBAAkB,OAAO,QACtB,UAAU,MAAM,UAAU,mBAC7B,CAAC,CAAC;CACJ;AACF;AAEA,eAAe,gCAAgC,OAG1B;CAEnB,IAAI,EAAC,MADwB,KAAK,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC/C,YAAY,GAC/B,OAAO;CAGT,KAAK,MAAM,SAAS,MAAM,aAAa;EACrC,MAAM,QAAQ,MAAM,kCAAkC;GACpD;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,IAAI,MAAM,UAAU,gBAAgB,MAAM,UAAU,YAClD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,eAAsB,qCAAqC,OAEzC;CAChB,MAAM,wCAAwB,IAAI,IAAuC;CACzE,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,IAAI,EAAE,MAAM,UAAU,gBAAgB,MAAM,UAAU,aACpD;EAEF,MAAM,OAAO,sBAAsB,IAAI,MAAM,SAAS,KAAK,CAAC;EAC5D,KAAK,KAAK,KAAK;EACf,sBAAsB,IAAI,MAAM,WAAW,IAAI;CACjD;CAEA,IAAI,sBAAsB,SAAS,GACjC;CAGF,MAAM,8BAA8B,wBAAwB;EAC1D,MAAM,8BAAc,IAAI,IAAwC;EAChE,KAAK,MAAM,UAAU,qBAAqB,YAAY,CAAC,GACrD,YAAY,IAAI,OAAO,WAAW,MAAM;EAG1C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,MAAM,CAAC,WAAW,UAAU,uBAAuB;GACtD,MAAM,QAAQ,MAAM;GACpB,IAAI,CAAC,OACH;GAEF,MAAM,OAA2C,MAAM,MACpD,UAAU,MAAM,eAAe,MAClC,IACI,SACA;GACJ,MAAM,WAAW,MAAM,KACrB,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7C,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;GAEnC,YAAY,IAAI,WAAW;IACzB,UAAU,MAAM;IAChB;IACA;IACA,QAAQ;IACR;IACA,WAAW;GACb,CAAC;EACH;EAEA,MAAM,eAAe,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB;EACzE,MAAM,mBAAmB,CAAC,GAAI,qBAAqB,YAAY,CAAC,CAAE,CAAC,CAChE,KAAK,qBAAqB,CAAC,CAC3B,IAAI,gCAAgC;EACvC,MAAM,iBAAiB,aAAa,IAAI,gCAAgC;EACxE,IAAI,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,cAAc,GACpE,OAAO;EAGT,OAAO;GACL,UAAU,qBAAqB,YAAY,UAAU;GACrD,GAAI,qBAAqB,SACrB,EAAE,QAAQ,oBAAoB,OAAO,IACrC,CAAC;GACL,GAAI,qBAAqB,gBACrB,EAAE,eAAe,oBAAoB,cAAc,IACnD,CAAC;GACL,UAAU;EACZ;CACF,CAAC;AACH;AAEA,SAAgB,sBACd,MACA,OACQ;CACR,MAAM,aAAa,KAAK,SAAS,cAAc,MAAM,QAAQ;CAC7D,IAAI,eAAe,GACjB,OAAO;CAET,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS;AACrD;AAEA,SAAS,iCACP,OAC+C;CAC/C,OAAO;EACL,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC/D,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD;AACF"}

package/dist/{installer-CsQ4vNjT.js → installer-D2bWZT88.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { c as replaceSkillDirectory, f as withSkillsInstallLock, o as writeOpenMeldSkillMarker, s as recoverSkillReplacement, t as resolveSkillInstallStateForTarget } from "./state-CK1WXIsI.js";
+import { c as replaceSkillDirectory, f as withSkillsInstallLock, o as writeOpenMeldSkillMarker, s as recoverSkillReplacement, t as resolveSkillInstallStateForTarget } from "./state-CQG3k9eh.js";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { cp, mkdir, readFile, realpath, symlink } from "node:fs/promises";
 import process from "node:process";
@@ -122,4 +122,4 @@ async function tryCreateSymlink(input) {
 //#endregion
 export { installSkillsToTargets as t };
 
-//# sourceMappingURL=installer-CsQ4vNjT.js.map
+//# sourceMappingURL=installer-D2bWZT88.js.map

package/dist/{installer-CsQ4vNjT.js.map → installer-D2bWZT88.js.map}

@@ -1 +1 @@
-{"version":3,"file":"installer-CsQ4vNjT.js","names":[],"sources":["../src/skills/installer.ts"],"sourcesContent":["import { cp, mkdir, readFile, realpath, symlink } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport process from \"node:process\";\nimport { withSkillsInstallLock } from \"./install-lock\";\n\n// biome-ignore lint/performance/noBarrelFile: Keep the existing installer lock API while the source store shares its owner.\nexport { withSkillsInstallLock } from \"./install-lock\";\n\nimport {\n  recoverSkillReplacement,\n  replaceSkillDirectory,\n} from \"./replace-directory\";\nimport type { SkillInstallStateResult } from \"./state\";\nimport { resolveSkillInstallStateForTarget } from \"./state\";\nimport type { LocalSkill } from \"./store\";\nimport { writeOpenMeldSkillMarker } from \"./store\";\n\nexport type SkillsInstallMode = \"symlink\" | \"copy\" | \"unknown\";\nexport type SkillsInstallStatus = \"installed\" | \"skipped\" | \"failed\";\n\nexport type SkillsInstallTarget = {\n  id: string;\n  dir: string;\n  type: \"agent\" | \"custom\";\n};\n\nexport type SkillsInstallResult = {\n  targetId: string;\n  targetDir: string;\n  targetType: \"agent\" | \"custom\";\n  skillId: string;\n  status: SkillsInstallStatus;\n  mode: SkillsInstallMode;\n  degraded: boolean;\n  reason?: string;\n};\n\nexport function installSkillsToTargets(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));\n}\n\nasync function installSkillsToTargetsLocked(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  const results: SkillsInstallResult[] = [];\n\n  for (const target of input.targets) {\n    for (const skill of input.skills) {\n      const result = await installOneSkillToTarget({\n        skill,\n        target,\n      });\n      results.push(result);\n    }\n  }\n\n  return results;\n}\n\nasync function installOneSkillToTarget(input: {\n  skill: LocalSkill;\n  target: SkillsInstallTarget;\n}): Promise<SkillsInstallResult> {\n  const targetDir = input.target.dir;\n  const failInstall = (reason: string): SkillsInstallResult => ({\n    targetId: input.target.id,\n    targetDir,\n    targetType: input.target.type,\n    skillId: input.skill.id,\n    status: \"failed\",\n    mode: \"unknown\",\n    degraded: false,\n    reason,\n  });\n\n  if (!isAbsolute(targetDir)) {\n    return failInstall(\"target dir must be an absolute path\");\n  }\n\n  const skillId = input.skill.id;\n  if (\n    skillId.trim().length === 0 ||\n    isAbsolute(skillId) ||\n    skillId === \".\" ||\n    skillId === \"..\" ||\n    skillId.includes(\"/\") ||\n    skillId.includes(\"\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const resolvedTargetDir = resolve(targetDir);\n  const resolvedSkillDir = resolve(resolvedTargetDir, skillId);\n  const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);\n  if (\n    skillRelativePath === \"..\" ||\n    skillRelativePath.startsWith(\"../\") ||\n    skillRelativePath.startsWith(\"..\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const skillTargetDir = resolvedSkillDir;\n\n  await mkdir(targetDir, { recursive: true });\n  await recoverSkillReplacement(skillTargetDir);\n  const state = await resolveSkillInstallStateForTarget({\n    skill: input.skill,\n    target: input.target,\n  });\n  if (state.state === \"external_conflict\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  if (state.state === \"up_to_date\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  const installation: { mode: SkillsInstallMode } = { mode: \"symlink\" };\n  try {\n    await readFile(join(input.skill.absolutePath, \"SKILL.md\"), \"utf8\");\n    await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {\n      const symlinked = await tryCreateSymlink({\n        sourceDir: input.skill.absolutePath,\n        targetDir: stagedDir,\n      });\n      if (symlinked) {\n        return;\n      }\n      installation.mode = \"copy\";\n      await cp(input.skill.absolutePath, stagedDir, {\n        recursive: true,\n        errorOnExist: true,\n        force: false,\n      });\n      await writeOpenMeldSkillMarker({\n        skillDir: stagedDir,\n        skillId: input.skill.id,\n        mode: \"copy\",\n        ...(input.skill.contentHash\n          ? { contentHash: input.skill.contentHash }\n          : {}),\n        ...(input.skill.version ? { version: input.skill.version } : {}),\n      });\n    });\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"installed\",\n      mode: installation.mode,\n      degraded: installation.mode === \"copy\",\n      ...(installation.mode === \"copy\"\n        ? { reason: \"symlink failed; fell back to copy\" }\n        : {}),\n    };\n  } catch (error) {\n    return failInstall(\n      error instanceof Error\n        ? error.message\n        : \"failed to install skill to target\"\n    );\n  }\n}\n\nfunction resolveSkippedInstallMode(\n  state: SkillInstallStateResult\n): SkillsInstallMode {\n  if (state.targetMode === \"copy\") {\n    return \"copy\";\n  }\n  if (state.targetMode === \"symlink\") {\n    return \"symlink\";\n  }\n  return \"unknown\";\n}\n\nasync function tryCreateSymlink(input: {\n  sourceDir: string;\n  targetDir: string;\n}): Promise<boolean> {\n  try {\n    await mkdir(dirname(input.targetDir), { recursive: true });\n\n    const targetParentDir = dirname(input.targetDir);\n    const resolvedTargetParentDir = await realpath(targetParentDir).catch(\n      () => targetParentDir\n    );\n    const resolvedSourceDir = await realpath(input.sourceDir).catch(\n      () => input.sourceDir\n    );\n    const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);\n    await symlink(\n      process.platform === \"win32\" ? resolvedSourceDir : relativeTarget,\n      input.targetDir,\n      process.platform === \"win32\" ? \"junction\" : undefined\n    );\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAqCA,SAAgB,uBAAuB,OAGJ;CACjC,OAAO,4BAA4B,6BAA6B,KAAK,CAAC;AACxE;AAEA,eAAe,6BAA6B,OAGT;CACjC,MAAM,UAAiC,CAAC;CAExC,KAAK,MAAM,UAAU,MAAM,SACzB,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,MAAM,SAAS,MAAM,wBAAwB;GAC3C;GACA;EACF,CAAC;EACD,QAAQ,KAAK,MAAM;CACrB;CAGF,OAAO;AACT;AAEA,eAAe,wBAAwB,OAGN;CAC/B,MAAM,YAAY,MAAM,OAAO;CAC/B,MAAM,eAAe,YAAyC;EAC5D,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM;EACN,UAAU;EACV;CACF;CAEA,IAAI,CAAC,WAAW,SAAS,GACvB,OAAO,YAAY,qCAAqC;CAG1D,MAAM,UAAU,MAAM,MAAM;CAC5B,IACE,QAAQ,KAAK,CAAC,CAAC,WAAW,KAC1B,WAAW,OAAO,KAClB,YAAY,OACZ,YAAY,QACZ,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,GAErB,OAAO,YAAY,kCAAkC;CAGvD,MAAM,oBAAoB,QAAQ,SAAS;CAC3C,MAAM,mBAAmB,QAAQ,mBAAmB,OAAO;CAC3D,MAAM,oBAAoB,SAAS,mBAAmB,gBAAgB;CACtE,IACE,sBAAsB,QACtB,kBAAkB,WAAW,KAAK,KAClC,kBAAkB,WAAW,MAAM,GAEnC,OAAO,YAAY,kCAAkC;CAGvD,MAAM,iBAAiB;CAEvB,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,MAAM,wBAAwB,cAAc;CAC5C,MAAM,QAAQ,MAAM,kCAAkC;EACpD,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,MAAM,UAAU,qBAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,IAAI,MAAM,UAAU,cAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,MAAM,eAA4C,EAAE,MAAM,UAAU;CACpE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,MAAM,cAAc,UAAU,GAAG,MAAM;EACjE,MAAM,sBAAsB,gBAAgB,OAAO,cAAc;GAK/D,IAAI,MAJoB,iBAAiB;IACvC,WAAW,MAAM,MAAM;IACvB,WAAW;GACb,CAAC,GAEC;GAEF,aAAa,OAAO;GACpB,MAAM,GAAG,MAAM,MAAM,cAAc,WAAW;IAC5C,WAAW;IACX,cAAc;IACd,OAAO;GACT,CAAC;GACD,MAAM,yBAAyB;IAC7B,UAAU;IACV,SAAS,MAAM,MAAM;IACrB,MAAM;IACN,GAAI,MAAM,MAAM,cACZ,EAAE,aAAa,MAAM,MAAM,YAAY,IACvC,CAAC;IACL,GAAI,MAAM,MAAM,UAAU,EAAE,SAAS,MAAM,MAAM,QAAQ,IAAI,CAAC;GAChE,CAAC;EACH,CAAC;EACD,OAAO;GACL,UAAU,MAAM,OAAO;GACvB;GACA,YAAY,MAAM,OAAO;GACzB,SAAS,MAAM,MAAM;GACrB,QAAQ;GACR,MAAM,aAAa;GACnB,UAAU,aAAa,SAAS;GAChC,GAAI,aAAa,SAAS,SACtB,EAAE,QAAQ,oCAAoC,IAC9C,CAAC;EACP;CACF,SAAS,OAAO;EACd,OAAO,YACL,iBAAiB,QACb,MAAM,UACN,mCACN;CACF;AACF;AAEA,SAAS,0BACP,OACmB;CACnB,IAAI,MAAM,eAAe,QACvB,OAAO;CAET,IAAI,MAAM,eAAe,WACvB,OAAO;CAET,OAAO;AACT;AAEA,eAAe,iBAAiB,OAGX;CACnB,IAAI;EACF,MAAM,MAAM,QAAQ,MAAM,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;EAEzD,MAAM,kBAAkB,QAAQ,MAAM,SAAS;EAC/C,MAAM,0BAA0B,MAAM,SAAS,eAAe,CAAC,CAAC,YACxD,eACR;EACA,MAAM,oBAAoB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,YAClD,MAAM,SACd;EACA,MAAM,iBAAiB,SAAS,yBAAyB,iBAAiB;EAC1E,MAAM,QACJ,QAAQ,aAAa,UAAU,oBAAoB,gBACnD,MAAM,WACN,QAAQ,aAAa,UAAU,aAAa,KAAA,CAC9C;EACA,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF"}
+{"version":3,"file":"installer-D2bWZT88.js","names":[],"sources":["../src/skills/installer.ts"],"sourcesContent":["import { cp, mkdir, readFile, realpath, symlink } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport process from \"node:process\";\nimport { withSkillsInstallLock } from \"./install-lock\";\n\n// biome-ignore lint/performance/noBarrelFile: Keep the existing installer lock API while the source store shares its owner.\nexport { withSkillsInstallLock } from \"./install-lock\";\n\nimport {\n  recoverSkillReplacement,\n  replaceSkillDirectory,\n} from \"./replace-directory\";\nimport type { SkillInstallStateResult } from \"./state\";\nimport { resolveSkillInstallStateForTarget } from \"./state\";\nimport type { LocalSkill } from \"./store\";\nimport { writeOpenMeldSkillMarker } from \"./store\";\n\nexport type SkillsInstallMode = \"symlink\" | \"copy\" | \"unknown\";\nexport type SkillsInstallStatus = \"installed\" | \"skipped\" | \"failed\";\n\nexport type SkillsInstallTarget = {\n  id: string;\n  dir: string;\n  type: \"agent\" | \"custom\";\n};\n\nexport type SkillsInstallResult = {\n  targetId: string;\n  targetDir: string;\n  targetType: \"agent\" | \"custom\";\n  skillId: string;\n  status: SkillsInstallStatus;\n  mode: SkillsInstallMode;\n  degraded: boolean;\n  reason?: string;\n};\n\nexport function installSkillsToTargets(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));\n}\n\nasync function installSkillsToTargetsLocked(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  const results: SkillsInstallResult[] = [];\n\n  for (const target of input.targets) {\n    for (const skill of input.skills) {\n      const result = await installOneSkillToTarget({\n        skill,\n        target,\n      });\n      results.push(result);\n    }\n  }\n\n  return results;\n}\n\nasync function installOneSkillToTarget(input: {\n  skill: LocalSkill;\n  target: SkillsInstallTarget;\n}): Promise<SkillsInstallResult> {\n  const targetDir = input.target.dir;\n  const failInstall = (reason: string): SkillsInstallResult => ({\n    targetId: input.target.id,\n    targetDir,\n    targetType: input.target.type,\n    skillId: input.skill.id,\n    status: \"failed\",\n    mode: \"unknown\",\n    degraded: false,\n    reason,\n  });\n\n  if (!isAbsolute(targetDir)) {\n    return failInstall(\"target dir must be an absolute path\");\n  }\n\n  const skillId = input.skill.id;\n  if (\n    skillId.trim().length === 0 ||\n    isAbsolute(skillId) ||\n    skillId === \".\" ||\n    skillId === \"..\" ||\n    skillId.includes(\"/\") ||\n    skillId.includes(\"\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const resolvedTargetDir = resolve(targetDir);\n  const resolvedSkillDir = resolve(resolvedTargetDir, skillId);\n  const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);\n  if (\n    skillRelativePath === \"..\" ||\n    skillRelativePath.startsWith(\"../\") ||\n    skillRelativePath.startsWith(\"..\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const skillTargetDir = resolvedSkillDir;\n\n  await mkdir(targetDir, { recursive: true });\n  await recoverSkillReplacement(skillTargetDir);\n  const state = await resolveSkillInstallStateForTarget({\n    skill: input.skill,\n    target: input.target,\n  });\n  if (state.state === \"external_conflict\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  if (state.state === \"up_to_date\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  const installation: { mode: SkillsInstallMode } = { mode: \"symlink\" };\n  try {\n    await readFile(join(input.skill.absolutePath, \"SKILL.md\"), \"utf8\");\n    await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {\n      const symlinked = await tryCreateSymlink({\n        sourceDir: input.skill.absolutePath,\n        targetDir: stagedDir,\n      });\n      if (symlinked) {\n        return;\n      }\n      installation.mode = \"copy\";\n      await cp(input.skill.absolutePath, stagedDir, {\n        recursive: true,\n        errorOnExist: true,\n        force: false,\n      });\n      await writeOpenMeldSkillMarker({\n        skillDir: stagedDir,\n        skillId: input.skill.id,\n        mode: \"copy\",\n        ...(input.skill.contentHash\n          ? { contentHash: input.skill.contentHash }\n          : {}),\n        ...(input.skill.version ? { version: input.skill.version } : {}),\n      });\n    });\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"installed\",\n      mode: installation.mode,\n      degraded: installation.mode === \"copy\",\n      ...(installation.mode === \"copy\"\n        ? { reason: \"symlink failed; fell back to copy\" }\n        : {}),\n    };\n  } catch (error) {\n    return failInstall(\n      error instanceof Error\n        ? error.message\n        : \"failed to install skill to target\"\n    );\n  }\n}\n\nfunction resolveSkippedInstallMode(\n  state: SkillInstallStateResult\n): SkillsInstallMode {\n  if (state.targetMode === \"copy\") {\n    return \"copy\";\n  }\n  if (state.targetMode === \"symlink\") {\n    return \"symlink\";\n  }\n  return \"unknown\";\n}\n\nasync function tryCreateSymlink(input: {\n  sourceDir: string;\n  targetDir: string;\n}): Promise<boolean> {\n  try {\n    await mkdir(dirname(input.targetDir), { recursive: true });\n\n    const targetParentDir = dirname(input.targetDir);\n    const resolvedTargetParentDir = await realpath(targetParentDir).catch(\n      () => targetParentDir\n    );\n    const resolvedSourceDir = await realpath(input.sourceDir).catch(\n      () => input.sourceDir\n    );\n    const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);\n    await symlink(\n      process.platform === \"win32\" ? resolvedSourceDir : relativeTarget,\n      input.targetDir,\n      process.platform === \"win32\" ? \"junction\" : undefined\n    );\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAqCA,SAAgB,uBAAuB,OAGJ;CACjC,OAAO,4BAA4B,6BAA6B,KAAK,CAAC;AACxE;AAEA,eAAe,6BAA6B,OAGT;CACjC,MAAM,UAAiC,CAAC;CAExC,KAAK,MAAM,UAAU,MAAM,SACzB,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,MAAM,SAAS,MAAM,wBAAwB;GAC3C;GACA;EACF,CAAC;EACD,QAAQ,KAAK,MAAM;CACrB;CAGF,OAAO;AACT;AAEA,eAAe,wBAAwB,OAGN;CAC/B,MAAM,YAAY,MAAM,OAAO;CAC/B,MAAM,eAAe,YAAyC;EAC5D,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM;EACN,UAAU;EACV;CACF;CAEA,IAAI,CAAC,WAAW,SAAS,GACvB,OAAO,YAAY,qCAAqC;CAG1D,MAAM,UAAU,MAAM,MAAM;CAC5B,IACE,QAAQ,KAAK,CAAC,CAAC,WAAW,KAC1B,WAAW,OAAO,KAClB,YAAY,OACZ,YAAY,QACZ,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,GAErB,OAAO,YAAY,kCAAkC;CAGvD,MAAM,oBAAoB,QAAQ,SAAS;CAC3C,MAAM,mBAAmB,QAAQ,mBAAmB,OAAO;CAC3D,MAAM,oBAAoB,SAAS,mBAAmB,gBAAgB;CACtE,IACE,sBAAsB,QACtB,kBAAkB,WAAW,KAAK,KAClC,kBAAkB,WAAW,MAAM,GAEnC,OAAO,YAAY,kCAAkC;CAGvD,MAAM,iBAAiB;CAEvB,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,MAAM,wBAAwB,cAAc;CAC5C,MAAM,QAAQ,MAAM,kCAAkC;EACpD,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,MAAM,UAAU,qBAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,IAAI,MAAM,UAAU,cAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,MAAM,eAA4C,EAAE,MAAM,UAAU;CACpE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,MAAM,cAAc,UAAU,GAAG,MAAM;EACjE,MAAM,sBAAsB,gBAAgB,OAAO,cAAc;GAK/D,IAAI,MAJoB,iBAAiB;IACvC,WAAW,MAAM,MAAM;IACvB,WAAW;GACb,CAAC,GAEC;GAEF,aAAa,OAAO;GACpB,MAAM,GAAG,MAAM,MAAM,cAAc,WAAW;IAC5C,WAAW;IACX,cAAc;IACd,OAAO;GACT,CAAC;GACD,MAAM,yBAAyB;IAC7B,UAAU;IACV,SAAS,MAAM,MAAM;IACrB,MAAM;IACN,GAAI,MAAM,MAAM,cACZ,EAAE,aAAa,MAAM,MAAM,YAAY,IACvC,CAAC;IACL,GAAI,MAAM,MAAM,UAAU,EAAE,SAAS,MAAM,MAAM,QAAQ,IAAI,CAAC;GAChE,CAAC;EACH,CAAC;EACD,OAAO;GACL,UAAU,MAAM,OAAO;GACvB;GACA,YAAY,MAAM,OAAO;GACzB,SAAS,MAAM,MAAM;GACrB,QAAQ;GACR,MAAM,aAAa;GACnB,UAAU,aAAa,SAAS;GAChC,GAAI,aAAa,SAAS,SACtB,EAAE,QAAQ,oCAAoC,IAC9C,CAAC;EACP;CACF,SAAS,OAAO;EACd,OAAO,YACL,iBAAiB,QACb,MAAM,UACN,mCACN;CACF;AACF;AAEA,SAAS,0BACP,OACmB;CACnB,IAAI,MAAM,eAAe,QACvB,OAAO;CAET,IAAI,MAAM,eAAe,WACvB,OAAO;CAET,OAAO;AACT;AAEA,eAAe,iBAAiB,OAGX;CACnB,IAAI;EACF,MAAM,MAAM,QAAQ,MAAM,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;EAEzD,MAAM,kBAAkB,QAAQ,MAAM,SAAS;EAC/C,MAAM,0BAA0B,MAAM,SAAS,eAAe,CAAC,CAAC,YACxD,eACR;EACA,MAAM,oBAAoB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,YAClD,MAAM,SACd;EACA,MAAM,iBAAiB,SAAS,yBAAyB,iBAAiB;EAC1E,MAAM,QACJ,QAAQ,aAAa,UAAU,oBAAoB,gBACnD,MAAM,WACN,QAAQ,aAAa,UAAU,aAAa,KAAA,CAC9C;EACA,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/{openmeld-Tkp17vPg.js → openmeld-BQy0nMox.js}

@@ -2,41 +2,41 @@
 
 import { c as toSpaceDispatchLookupUrl, h as toSpaceResultUrl, i as toSpaceContractUrl, l as toSpaceDispatchTraceUrl, r as toSpaceBoardUrl, t as normalizeBaseUrl } from "./urls-CY2uzH2-.js";
 import { D as isLocalMachineFailureError, F as accountsDir, M as accountProfileSpaceCacheDir, N as accountProfileViewPath, O as toRecognizedLocalMachineFailureError, Q as openMeldManagedVersionBinaryPath, S as LocalMachineFailureError, T as createOrphanedSetupConcurrencyIssue, Y as openMeldBackupsDir, Z as openMeldManagedBinaryPath, _ as resolveCliContext, a as isOpenMeldOrphanedLockError, b as formatLaneScopeSentence, c as releaseLockSync, ct as resolveOpenMeldEnvPreset, d as runWithHeldLock, et as openMeldRootDir, gt as systemDir, ht as spacesDir, i as isOpenMeldLockError, it as profileViewPath, k as formatLocalMachineIssueMessage, l as repairOrphanedLegacyLocks, lt as resolveOpenMeldRootDir, m as OPENMELD_CLI_CONTEXT_ENV_KEY, mt as skillsDir, p as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, q as normalizeAccountKey, r as buildOpenMeldOrphanedLockAction, rt as profileDir, st as resolveOpenMeldCliEntryNameFromArgv, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue, w as createActiveSetupConcurrencyIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-Bsl_ElWy.js";
-import { $r as agentActivityInventorySessionStatusSchema, $t as createPrepareReadinessApi, Ar as observabilityWakeTraceSelectorSchema, Cn as postSpaceWorkHandoff, Cr as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Dr as spaceDispatchTraceAttemptStatusSchema, Er as resolveSpaceDispatchTraceRootCause, Ft as createCenterAgentApi, Jr as ownerComputerDiagnosticsSchema, Jt as createOrganizationApi, Lt as createComputerFileAccessApi, Mt as createAgentProfileBindingApi, Nn as toStructuredApiClientFailure, Nt as createAgentProfileExecutionModeApi, Or as spaceDispatchTraceDispatchStatusSchema, Qr as agentActivityInventorySessionOriginSchema, Qt as createPluginsApi, Ti as signalTextEnvelopeSchema, Tr as resolveRuntimeCoordinatorHeadStatusRootCause, Vr as resolvedSpaceMemberProfileSchema, Vt as createFeedbackApi, Xn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Xr as summarizeComputerFileAccessPolicy, Xt as createOrganizationSkillsApi, Yr as projectOwnerComputerLocalRuntimes, _r as spaceTaskMutationReceiptSchema, bi as agentActivitySnapshotQuerySchema, br as submitFeedbackIssueRequestSchema, dr as createAgentProfileCreationRequestBodySchema, ei as agentActivitySessionInventoryQuerySchema, er as spaceEntryTargetSchema, gr as spaceTaskIdSchema, hr as mutateSpaceTaskBodySchema, in as createRoutinesApi, jr as projectObservabilityWakeCorrelation, jt as createAgentActivityApi, kr as spaceDispatchTraceResponseSchema, lr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, mr as listSpaceTasksResponseSchema, ni as localAgentSessionProviderSchema, nn as createProjectsApi, pr as createSpaceTaskBodySchema, qn as OPENMELD_HEADER_PROFILE_ID, tr as pluginActionRequestSchema, ur as agentProfileCreationConfigurationSchema, vi as agentActivityProviderSchema, wr as projectSpaceDispatchTraceFinalVisibleOutcome, yi as agentActivitySessionStatusSchema, zt as createCurrentDeviceApi } from "./dist-BewA9srP.js";
+import { $r as agentActivityInventorySessionStatusSchema, $t as createPrepareReadinessApi, Ar as observabilityWakeTraceSelectorSchema, Cn as postSpaceWorkHandoff, Cr as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Dr as spaceDispatchTraceAttemptStatusSchema, Er as resolveSpaceDispatchTraceRootCause, Ft as createCenterAgentApi, Jr as ownerComputerDiagnosticsSchema, Jt as createOrganizationApi, Lt as createComputerFileAccessApi, Mt as createAgentProfileBindingApi, Nn as toStructuredApiClientFailure, Nt as createAgentProfileExecutionModeApi, Or as spaceDispatchTraceDispatchStatusSchema, Qr as agentActivityInventorySessionOriginSchema, Qt as createPluginsApi, Ti as signalTextEnvelopeSchema, Tr as resolveRuntimeCoordinatorHeadStatusRootCause, Vr as resolvedSpaceMemberProfileSchema, Vt as createFeedbackApi, Xn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Xr as summarizeComputerFileAccessPolicy, Xt as createOrganizationSkillsApi, Yr as projectOwnerComputerLocalRuntimes, _r as spaceTaskMutationReceiptSchema, bi as agentActivitySnapshotQuerySchema, br as submitFeedbackIssueRequestSchema, dr as createAgentProfileCreationRequestBodySchema, ei as agentActivitySessionInventoryQuerySchema, er as spaceEntryTargetSchema, gr as spaceTaskIdSchema, hr as mutateSpaceTaskBodySchema, in as createRoutinesApi, jr as projectObservabilityWakeCorrelation, jt as createAgentActivityApi, kr as spaceDispatchTraceResponseSchema, lr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, mr as listSpaceTasksResponseSchema, ni as localAgentSessionProviderSchema, nn as createProjectsApi, pr as createSpaceTaskBodySchema, qn as OPENMELD_HEADER_PROFILE_ID, tr as pluginActionRequestSchema, ur as agentProfileCreationConfigurationSchema, vi as agentActivityProviderSchema, wr as projectSpaceDispatchTraceFinalVisibleOutcome, yi as agentActivitySessionStatusSchema, zt as createCurrentDeviceApi } from "./dist-B07ziN_u.js";
 import { c as agentControllerConversationRefSchema } from "./controller-contract-DAOCaefz.js";
-import { Ar as compareAgentControllerRefsForDisplay, At as ensureOpenMeldManagedProfileWorkspace, C as createModelCatalogReadSession, E as resolveProfileWorkspaceRuntime, Et as listBuiltinAgentsRegistryEntries, I as listAgentTargetStates, It as setCustomProfileWorkspace, K as notifyDaemonRouteCatalogChanged, Lt as setOpenMeldManagedProfileWorkspace, Mt as readProfileWorkspaceConfig, O as syncDeviceRuntimeStateProjection, Pt as resolveConfiguredProfileWorkspacePath, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, Rt as validateCustomProfileWorkspacePath, S as syncProfileWorkspaceState, St as canonicalizeLocalProjectPath, _r as resolveAgentProfileEditCapabilities, _t as removeProjectConnection, bt as setDefaultProjectConnection, dr as peopleComputerContainsDevice, fr as projectPeopleComputersToLegacyLocalRuntimes, ft as listProjectBindings, gr as resolveAgentExecutionStatus, hr as resolveAgentControllerPermissionModeForController, ir as createAgentExecutionStatusDisplayRows, j as resolveAgentProfilePrimaryAgentControllerReport, jt as normalizeCustomProfileWorkspacePath, k as createPrimaryBindingReadSession, lr as listAgentControllerPermissionModeOptions, mt as migrateProjectBindingStore, or as getAgentControllerPermissionModeDisplayMetadata, pt as listProjectConnectionsWithStatus, qn as resolveDispatchSpaceActionMcpServer, sr as getAgentControllerPermissionModeFieldLabel, ur as parseAgentControllerRef, ut as bindProject, vr as resolveEvidenceSyncHealth, xt as unbindProject, yr as resolveNativeAgentControllerPermissionModeForController, yt as runIfAgentActivityBindingGenerationIsCurrent, zt as describeProfileWorkspacePathValidationFailure } from "./prepare-provider-runtime-CD5ZI-ct.js";
-import { Gt as spaceWorkingCopyResultSchema, Hn as messageEnvelopeSchema, Ht as spaceWorkHandoffSchema, On as spaceContractFieldsSchema, Qt as isSpaceFileTextEditable, Rt as spaceStatusSchema, Wr as START_BOUNDED_ID_SCHEMA, Wt as spaceWorkSelectionSchema, ci as openMeldProfileIdSchema, cr as agentInteractionResponseSchema, dn as spaceFileEntryIdSchema, dr as clientMessageIdSchema, gn as spaceMessageFileReferenceSchema, hn as spaceFileRevisionNumberSchema, kn as spaceContractSchema, li as openMeldRequestContextSchema, nn as readSpaceFileTextResponseSchema, qr as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, rn as resolveSpaceFileMimeType, wn as spaceThreadContextSchema, zt as centerAgentInteractionSourceSchema } from "./runtime-transport-0F5E6So6.js";
-import { C as updateAuthSessionActiveOrganization, T as runMacOsNativeKeychainHelperIfRequested, a as beginAuthSessionTransition, d as getAuthSessionState, f as getCurrentAuthOwnerUserId, g as normalizeStoredActiveOrganization, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, s as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getAuthSessionMetadata } from "./auth-session-CDhQANWx.js";
-import { L as nonEmptyTrimmedStringFromUnknown, O as openMeldRuntimeProfileIdSchema, w as dispatchExecutionSchema, z as trimmedStringFromUnknown } from "./control-plane-BDS63N7Y.js";
-import { t as computerConnectionIntentSchema } from "./computer-connection-DYnof5Xw.js";
-import { d as readSelectedSkillDocument, r as ensureLocalSkills } from "./state-CK1WXIsI.js";
-import { $ as buildAuthStatusSnapshot, B as resolveDaemonServiceParticipationStatus, C as buildProfileWorkspaceRows, Ct as cliJsonSkillsShowEnvelopeSchema, Dt as organizationJoinLinkManagementQuerySchema, E as emitDaemonAgentOverview, Et as organizationJoinLinkErrorResponseSchema, F as emitCliJsonEnvelope, G as ensureCommandAuthenticationOrCancel, H as validateLocalProjectConnectionPath, I as runDaemonStartupPreflight, J as runAuthLogout, K as evaluateCommandAuthentication, M as buildHumanErrorCopy, N as renderHumanErrorCard, O as shouldEmitAgentOverview, Ot as revokeOrganizationJoinLinkResponseSchema, P as renderHumanTextErrorCard, Q as buildAuthStatusRows, R as resolveLocalComponentsStatus, S as buildProfileWorkspacePresentation, St as cliJsonSkillsLoadEnvelopeSchema, Tt as getOrganizationJoinLinkResponseSchema, V as LocalProjectConnectionError, W as buildCommandAuthenticationPromptMessage, X as runAuthStatus, Y as runAuthMenu, Z as exchangeOneTimeTokenAuthSession, a as runDaemonBackgroundStartForDecision, at as promptTextEntry, bt as cliJsonOutputEnvelopeSchema, c as runDaemonInterrupt, ct as finishCurrentCommandCheckScope, dt as resetCurrentCommandCheckState, et as formatActiveOrganizationLabel, f as runDaemonSnapshot, ft as startCurrentCommandCheckScope, g as runDaemonUninstall, h as runDaemonTeardownStrict, i as runDaemonAutostart, j as runDaemonStartDecisionPrompt, l as runDaemonReinstall, lt as getCurrentCommandCheckState, m as runDaemonStop, n as isManagedSystemServiceBootstrapRun, nt as renderInfoCard, o as runDaemonCancel, ot as isReturnKeypress, p as runDaemonStatusFlow, q as runAuthLogin, r as runDaemon, rt as renderTextInfoCard, s as runDaemonInstall, st as runInteractivePrompt, t as bestEffortStopCurrentLaneDaemonService, u as runDaemonRunAfterEntryChecks, ut as isCurrentCommandCheckScopeActive, w as reconcileCliVersionView, wt as acceptOrganizationJoinLinkBodySchema, x as resolveServiceParticipationReadiness, xt as cliJsonSkillsListEnvelopeSchema, y as formatServiceParticipationReadinessLabel, yt as cliJsonErrorEnvelopeSchema, z as writeInstalledLocalComponentsSnapshot } from "./service-C72KhNft.js";
-import { C as defaultManagedIntegrationPaths, D as uninstallAgentActivityIntegrations, E as resolveAgentActivityDispatcherCommand, T as readAgentActivityIntegrationStatus, _ as readControllerTaskLifecycleOutboxHealth, a as fetchSpaceUpdates, b as resolveAgentActivityRouteForPath, c as downloadWorkingCopyFile, d as syncLocalAgentActivity, g as enqueueControllerTaskLifecycleEventWhileLocked, h as removeAgentActivityContextCache, l as materializeOrganizationSkillRelease, m as readAgentActivityContextForPath, o as createSpaceWorkingCopies, t as readRuntimeReportingHealthState, v as isAgentActivityRouteRegistered, w as installAgentActivityIntegrations, x as unregisterAgentActivityRoute, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-BWZgy4pF.js";
-import { B as createOpenMeldHumanProfile, G as resolveOpenMeldProfile, U as listOpenMeldProfiles, V as deleteOpenMeldProfile, W as primeOpenMeldProfilesSessionCache, Z as buildAgentAuthenticationGuide, at as resolveAuthenticationGuidanceFromMessage, et as buildHumanAuthenticationCard, it as resolveAuthenticationGuidanceFromError, q as updateOpenMeldProfile, rt as resolveAuthenticationGuidance, tt as createAuthenticationError, z as createOpenMeldAgentProfile } from "./daemon-device-id-YnLMx1kN.js";
-import { H as buildInstallSelfJsonPayload, U as performManagedInstall, r as readCurrentDaemonRuntimeContext } from "./daemon-service-runtime-Kr6Bs2J2.js";
-import { A as formatDeviceReplyReadinessLabel, B as resolveGatewayChainReadiness, Bt as assessCliUpdate, It as assessServerRequiredVersion, J as getSetupFlowCopy, K as buildDaemonRouteObservationPresentation$1, Mt as classifyDaemonServiceRunStartability, N as mapAgentReplyReadinessToLegacyAutoReply, Nt as classifyDaemonServiceWakeability, O as resolveCurrentReplyReadinessSnapshot, Pt as resolveCurrentDaemonExpectedVersion, T as resolveDaemonServiceFreshnessWarning, U as resolveOpenClawLocalDiagnosticsValue, Vt as isCliUpdateCheckApplicable, _ as resolveServiceReadinessFromServiceStatus, ft as inspectDaemonServiceInventory, j as formatHumanReplyReadinessReason$1, k as formatAgentReplyReadinessLabel, q as buildOnboardingPlan, t as runPendingDaemonServiceUpdate, zt as readCurrentLocalDeviceId } from "./daemon-service-update-coordinator-RJO997me.js";
-import { $ as resolveCreateProfileKind, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as createProfileByKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as resolveSpaceTaskSelection, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as resolveCreateProfileName, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, nt as assessActionParticipationCandidate, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as ensureAgentProfileRuntimeBinding, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-MlrjQYq5.js";
-import { a as areAllowedActionsEquivalent, p as canonicalizeAllowedActions, r as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, s as buildAgentFacingPublicationModeGuideLines, t as OPENMELD_AGENT_MENTAL_MODEL_LINES } from "./dist-ChS52b_E.js";
-import { C as readAgentActivityOutboxHealth, Dt as upsertSpaceConfig, Ft as buildSignalMessageReadProjection, Mt as buildDispatchResultReplyWorkflowProjection, Nt as buildPublicSpaceEntryUrl, Pt as buildSignalIndex, T as removeProjectOutbox, Ut as buildUpdatesReplyWorkflowProjection, Vt as buildSpaceRoundReadProjection, Zt as formatRemovedCcRelationMessage, et as readRecentDaemonDispatchJournalEvents, g as readCodexSessionTitles, gt as inspectSpaceCacheFile, h as normalizeSharedSessionTitle, jt as buildDispatchResultMessageReadProjection, m as resolveObservedAgentActivityBinding, p as buildAgentActivityEvent, qt as createSpaceMemberIdentityIndex, v as enqueueAgentActivityHookEvent, y as removeProjectInbox } from "./daemon-frame-transport-D-4StENt.js";
+import { Ar as compareAgentControllerRefsForDisplay, At as ensureOpenMeldManagedProfileWorkspace, C as createModelCatalogReadSession, E as resolveProfileWorkspaceRuntime, Et as listBuiltinAgentsRegistryEntries, I as listAgentTargetStates, It as setCustomProfileWorkspace, K as notifyDaemonRouteCatalogChanged, Lt as setOpenMeldManagedProfileWorkspace, Mt as readProfileWorkspaceConfig, O as syncDeviceRuntimeStateProjection, Pt as resolveConfiguredProfileWorkspacePath, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, Rt as validateCustomProfileWorkspacePath, S as syncProfileWorkspaceState, St as canonicalizeLocalProjectPath, _r as resolveAgentProfileEditCapabilities, _t as removeProjectConnection, bt as setDefaultProjectConnection, dr as peopleComputerContainsDevice, fr as projectPeopleComputersToLegacyLocalRuntimes, ft as listProjectBindings, gr as resolveAgentExecutionStatus, hr as resolveAgentControllerPermissionModeForController, ir as createAgentExecutionStatusDisplayRows, j as resolveAgentProfilePrimaryAgentControllerReport, jt as normalizeCustomProfileWorkspacePath, k as createPrimaryBindingReadSession, lr as listAgentControllerPermissionModeOptions, mt as migrateProjectBindingStore, or as getAgentControllerPermissionModeDisplayMetadata, pt as listProjectConnectionsWithStatus, qn as resolveDispatchSpaceActionMcpServer, sr as getAgentControllerPermissionModeFieldLabel, ur as parseAgentControllerRef, ut as bindProject, vr as resolveEvidenceSyncHealth, xt as unbindProject, yr as resolveNativeAgentControllerPermissionModeForController, yt as runIfAgentActivityBindingGenerationIsCurrent, zt as describeProfileWorkspacePathValidationFailure } from "./prepare-provider-runtime-CWZcuMF6.js";
+import { Gt as spaceWorkingCopyResultSchema, Hn as messageEnvelopeSchema, Ht as spaceWorkHandoffSchema, On as spaceContractFieldsSchema, Qt as isSpaceFileTextEditable, Rt as spaceStatusSchema, Wr as START_BOUNDED_ID_SCHEMA, Wt as spaceWorkSelectionSchema, ci as openMeldProfileIdSchema, cr as agentInteractionResponseSchema, dn as spaceFileEntryIdSchema, dr as clientMessageIdSchema, gn as spaceMessageFileReferenceSchema, hn as spaceFileRevisionNumberSchema, kn as spaceContractSchema, li as openMeldRequestContextSchema, nn as readSpaceFileTextResponseSchema, qr as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, rn as resolveSpaceFileMimeType, wn as spaceThreadContextSchema, zt as centerAgentInteractionSourceSchema } from "./runtime-transport-Cc_RN-PL.js";
+import { C as updateAuthSessionActiveOrganization, T as runMacOsNativeKeychainHelperIfRequested, a as beginAuthSessionTransition, d as getAuthSessionState, f as getCurrentAuthOwnerUserId, g as normalizeStoredActiveOrganization, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, s as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getAuthSessionMetadata } from "./auth-session-nhS8jyux.js";
+import { L as nonEmptyTrimmedStringFromUnknown, O as openMeldRuntimeProfileIdSchema, w as dispatchExecutionSchema, z as trimmedStringFromUnknown } from "./control-plane-e3W6PD2M.js";
+import { t as computerConnectionIntentSchema } from "./computer-connection-M3N6plkj.js";
+import { d as readSelectedSkillDocument, r as ensureLocalSkills } from "./state-CQG3k9eh.js";
+import { $ as buildAuthStatusSnapshot, B as resolveDaemonServiceParticipationStatus, C as buildProfileWorkspaceRows, Ct as cliJsonSkillsShowEnvelopeSchema, Dt as organizationJoinLinkManagementQuerySchema, E as emitDaemonAgentOverview, Et as organizationJoinLinkErrorResponseSchema, F as emitCliJsonEnvelope, G as ensureCommandAuthenticationOrCancel, H as validateLocalProjectConnectionPath, I as runDaemonStartupPreflight, J as runAuthLogout, K as evaluateCommandAuthentication, M as buildHumanErrorCopy, N as renderHumanErrorCard, O as shouldEmitAgentOverview, Ot as revokeOrganizationJoinLinkResponseSchema, P as renderHumanTextErrorCard, Q as buildAuthStatusRows, R as resolveLocalComponentsStatus, S as buildProfileWorkspacePresentation, St as cliJsonSkillsLoadEnvelopeSchema, Tt as getOrganizationJoinLinkResponseSchema, V as LocalProjectConnectionError, W as buildCommandAuthenticationPromptMessage, X as runAuthStatus, Y as runAuthMenu, Z as exchangeOneTimeTokenAuthSession, a as runDaemonBackgroundStartForDecision, at as promptTextEntry, bt as cliJsonOutputEnvelopeSchema, c as runDaemonInterrupt, ct as finishCurrentCommandCheckScope, dt as resetCurrentCommandCheckState, et as formatActiveOrganizationLabel, f as runDaemonSnapshot, ft as startCurrentCommandCheckScope, g as runDaemonUninstall, h as runDaemonTeardownStrict, i as runDaemonAutostart, j as runDaemonStartDecisionPrompt, l as runDaemonReinstall, lt as getCurrentCommandCheckState, m as runDaemonStop, n as isManagedSystemServiceBootstrapRun, nt as renderInfoCard, o as runDaemonCancel, ot as isReturnKeypress, p as runDaemonStatusFlow, q as runAuthLogin, r as runDaemon, rt as renderTextInfoCard, s as runDaemonInstall, st as runInteractivePrompt, t as bestEffortStopCurrentLaneDaemonService, u as runDaemonRunAfterEntryChecks, ut as isCurrentCommandCheckScopeActive, w as reconcileCliVersionView, wt as acceptOrganizationJoinLinkBodySchema, x as resolveServiceParticipationReadiness, xt as cliJsonSkillsListEnvelopeSchema, y as formatServiceParticipationReadinessLabel, yt as cliJsonErrorEnvelopeSchema, z as writeInstalledLocalComponentsSnapshot } from "./service-CfO38_a-.js";
+import { C as defaultManagedIntegrationPaths, D as uninstallAgentActivityIntegrations, E as resolveAgentActivityDispatcherCommand, T as readAgentActivityIntegrationStatus, _ as readControllerTaskLifecycleOutboxHealth, a as fetchSpaceUpdates, b as resolveAgentActivityRouteForPath, c as downloadWorkingCopyFile, d as syncLocalAgentActivity, g as enqueueControllerTaskLifecycleEventWhileLocked, h as removeAgentActivityContextCache, l as materializeOrganizationSkillRelease, m as readAgentActivityContextForPath, o as createSpaceWorkingCopies, t as readRuntimeReportingHealthState, v as isAgentActivityRouteRegistered, w as installAgentActivityIntegrations, x as unregisterAgentActivityRoute, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-BgwfrH7f.js";
+import { B as createOpenMeldHumanProfile, G as resolveOpenMeldProfile, U as listOpenMeldProfiles, V as deleteOpenMeldProfile, W as primeOpenMeldProfilesSessionCache, Z as buildAgentAuthenticationGuide, at as resolveAuthenticationGuidanceFromMessage, et as buildHumanAuthenticationCard, it as resolveAuthenticationGuidanceFromError, q as updateOpenMeldProfile, rt as resolveAuthenticationGuidance, tt as createAuthenticationError, z as createOpenMeldAgentProfile } from "./daemon-device-id-DWO9_QW6.js";
+import { H as buildInstallSelfJsonPayload, U as performManagedInstall, r as readCurrentDaemonRuntimeContext } from "./daemon-service-runtime-bKt0YjC7.js";
+import { A as formatDeviceReplyReadinessLabel, B as resolveGatewayChainReadiness, Bt as assessCliUpdate, It as assessServerRequiredVersion, J as getSetupFlowCopy, K as buildDaemonRouteObservationPresentation$1, Mt as classifyDaemonServiceRunStartability, N as mapAgentReplyReadinessToLegacyAutoReply, Nt as classifyDaemonServiceWakeability, O as resolveCurrentReplyReadinessSnapshot, Pt as resolveCurrentDaemonExpectedVersion, T as resolveDaemonServiceFreshnessWarning, U as resolveOpenClawLocalDiagnosticsValue, Vt as isCliUpdateCheckApplicable, _ as resolveServiceReadinessFromServiceStatus, ft as inspectDaemonServiceInventory, j as formatHumanReplyReadinessReason$1, k as formatAgentReplyReadinessLabel, q as buildOnboardingPlan, t as runPendingDaemonServiceUpdate, zt as readCurrentLocalDeviceId } from "./daemon-service-update-coordinator-D8O1uTtu.js";
+import { $ as resolveCreateProfileKind, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as createProfileByKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as resolveSpaceTaskSelection, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as resolveCreateProfileName, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, nt as assessActionParticipationCandidate, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as ensureAgentProfileRuntimeBinding, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-Bz9x7V2T.js";
+import { a as areAllowedActionsEquivalent, p as canonicalizeAllowedActions, r as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, s as buildAgentFacingPublicationModeGuideLines, t as OPENMELD_AGENT_MENTAL_MODEL_LINES } from "./dist-B2EauBG6.js";
+import { C as readAgentActivityOutboxHealth, Dt as upsertSpaceConfig, Ft as buildSignalMessageReadProjection, Mt as buildDispatchResultReplyWorkflowProjection, Nt as buildPublicSpaceEntryUrl, Pt as buildSignalIndex, T as removeProjectOutbox, Ut as buildUpdatesReplyWorkflowProjection, Vt as buildSpaceRoundReadProjection, Zt as formatRemovedCcRelationMessage, et as readRecentDaemonDispatchJournalEvents, g as readCodexSessionTitles, gt as inspectSpaceCacheFile, h as normalizeSharedSessionTitle, jt as buildDispatchResultMessageReadProjection, m as resolveObservedAgentActivityBinding, p as buildAgentActivityEvent, qt as createSpaceMemberIdentityIndex, v as enqueueAgentActivityHookEvent, y as removeProjectInbox } from "./daemon-frame-transport-D2-tazuK.js";
 import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-D7uE_xTo.js";
 import { n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
 import { A as getDaemonStatus } from "./daemon-state-B44aq2nm.js";
 import { i as readDaemonServiceContract } from "./daemon-service-contract-BpOBMGX0.js";
 import { a as formatOpenMeldCliTextBlock, c as resolveSetupFollowUpCliEntryCommand, i as formatOpenMeldCliLine, l as resolveUserFacingCliEntryCommand, n as formatOpenMeldCliCommand, r as formatOpenMeldCliCommands, s as formatProfileAwareOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
 import { r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-B6HqY0_a.js";
-import { r as runServiceAccountCarrier } from "./service-account-authorization-DAPQy2yP.js";
-import { b as requestLocalAgentActivitySync, d as compareSemver, f as ensureVersionStateReady, l as OPENMELD_VERSION, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DcrVY0xb.js";
-import { a as requireOpenMeldProfile, d as setSelectedOpenMeldProfileId, f as getProfileDefaultView, i as isSelectedOpenMeldProfileRequiredError, l as clearSelectedOpenMeldProfileId, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull, p as setProfileDefaultView, r as resolveViewProfileKey, s as alignSelectedOpenMeldProfileStorage, t as parseCliViewMode, u as getSelectedOpenMeldProfileId } from "./context-D9Ebb5wl.js";
+import { r as runServiceAccountCarrier } from "./service-account-authorization-DKpIpxXo.js";
+import { b as requestLocalAgentActivitySync, d as compareSemver, f as ensureVersionStateReady, l as OPENMELD_VERSION, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DyKx1xzm.js";
+import { a as requireOpenMeldProfile, d as setSelectedOpenMeldProfileId, f as getProfileDefaultView, i as isSelectedOpenMeldProfileRequiredError, l as clearSelectedOpenMeldProfileId, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull, p as setProfileDefaultView, r as resolveViewProfileKey, s as alignSelectedOpenMeldProfileStorage, t as parseCliViewMode, u as getSelectedOpenMeldProfileId } from "./context-l_31Mn4X.js";
 import { a as outJsonLine, i as errLine, n as sanitizeTerminalDisplayText, o as outLine, r as formatMessage, t as createPresenter } from "./presenter-BcxiQyJg.js";
-import { Ct as formatDualViewGuideForDisplay, D as createSpaceContractSetGuideError, E as createSpaceAliasTargetGuideError, J as createStartAuthenticationGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, P as createSpacePublicationSetGuideError, R as createSpaceResultGuideError, S as createResetConfirmationGuideError, St as DualViewGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, W as createSpaceTargetGuideError, Z as getCommandHintsFromContract, b as createProfileCreateGuideError, ct as registerSkillsTargetSelectionOptions, dt as getCliVersionInfo, et as registerSpaceMemberSelectionOptions, ft as registerDaemonControlTargetOptions, g as canUseInteractivePrompts, j as createSpaceLeaveGuideError, mt as registerAuthLoginRequestOptions, q as createStartAgentIdentityGuideError, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, v as createDoctorFailedGuideError, wt as buildDualViewGuideMessage, x as createProfileMenuGuideError, y as createProfileActionGuideError, yt as registerBuiltinAgentSelectionOptions } from "./elapsed-time-Cw6b9rYy.js";
-import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-D-Cb6EVg.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-Dwn8FoKT.js";
-import { t as runServiceAccountControl } from "./service-account-control-DZjUR3I_.js";
-import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-C2nNM2yb.js";
-import { C as resolveGatewayWebOrigin, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, a as runAgentsCustomRemove, c as runAgentsDisable, d as runAgentsManage, f as runAgentsRepair, h as promptSearchMultiselect, i as runAgentsCustomList, l as runAgentsEnable, m as formatTransportModeDisplay, n as runAgentsConfig, o as runAgentsCustomUpdate, p as runAgentsShow, r as runAgentsCustomAdd, s as runAgentsDetect, t as runAgents, u as runAgentsList, w as resolveSpaceWebGatewayOrigin } from "./agents-2TzCubpV.js";
-import { n as submitProfileRuntimeAgentControllerReport, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-DGm8O4q_.js";
-import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-BTIKVek7.js";
-import { _ as readDispatchSpaceActionContextForReceiptFromEnv, c as readGatewayTextResponse, d as assertDispatchOwnedRuntimePublicWriteAllowed, l as toStructuredGatewayFailure, m as DispatchSpaceActionClosedError, n as fetchSpaceMeta, p as readDispatchOwnedRuntimeGuard, r as updateSpaceMeta, s as readGatewayJsonResponse, t as createCliSpaceApi, u as parseJsonResponse, v as readDispatchSpaceActionContextFromEnv, x as writeDispatchSpaceActionRecord } from "./cli-space-api-B2l1xMPn.js";
+import { Ct as formatDualViewGuideForDisplay, D as createSpaceContractSetGuideError, E as createSpaceAliasTargetGuideError, J as createStartAuthenticationGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, P as createSpacePublicationSetGuideError, R as createSpaceResultGuideError, S as createResetConfirmationGuideError, St as DualViewGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, W as createSpaceTargetGuideError, Z as getCommandHintsFromContract, b as createProfileCreateGuideError, ct as registerSkillsTargetSelectionOptions, dt as getCliVersionInfo, et as registerSpaceMemberSelectionOptions, ft as registerDaemonControlTargetOptions, g as canUseInteractivePrompts, j as createSpaceLeaveGuideError, mt as registerAuthLoginRequestOptions, q as createStartAgentIdentityGuideError, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, v as createDoctorFailedGuideError, wt as buildDualViewGuideMessage, x as createProfileMenuGuideError, y as createProfileActionGuideError, yt as registerBuiltinAgentSelectionOptions } from "./elapsed-time-Ooo4IC25.js";
+import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-DnJ_JYli.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-DThnBEhV.js";
+import { t as runServiceAccountControl } from "./service-account-control-CCPQAZzn.js";
+import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-CkDxstsf.js";
+import { C as resolveGatewayWebOrigin, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, a as runAgentsCustomRemove, c as runAgentsDisable, d as runAgentsManage, f as runAgentsRepair, h as promptSearchMultiselect, i as runAgentsCustomList, l as runAgentsEnable, m as formatTransportModeDisplay, n as runAgentsConfig, o as runAgentsCustomUpdate, p as runAgentsShow, r as runAgentsCustomAdd, s as runAgentsDetect, t as runAgents, u as runAgentsList, w as resolveSpaceWebGatewayOrigin } from "./agents-B8zhQnGw.js";
+import { n as submitProfileRuntimeAgentControllerReport, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-BUUub9_1.js";
+import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-D5FxGbh1.js";
+import { _ as readDispatchSpaceActionContextForReceiptFromEnv, c as readGatewayTextResponse, d as assertDispatchOwnedRuntimePublicWriteAllowed, l as toStructuredGatewayFailure, m as DispatchSpaceActionClosedError, n as fetchSpaceMeta, p as readDispatchOwnedRuntimeGuard, r as updateSpaceMeta, s as readGatewayJsonResponse, t as createCliSpaceApi, u as parseJsonResponse, v as readDispatchSpaceActionContextFromEnv, x as writeDispatchSpaceActionRecord } from "./cli-space-api-CQtKu9Zt.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -20906,6 +20906,7 @@ async function runProfileCreationRequestCreate(input) {
 async function resolveRequestConfiguration(options) {
 	const { context, input, targetOwnerUserId } = options;
 	const agentControllerRef = normalizeOptionalText$1(input.agentController);
+	if (agentControllerRef === "hosted:remote-agent" && input.sessionStrategy !== void 0 && input.sessionStrategy !== "new") throw new Error("Remote Agents start new Sessions; Resume and Fork require a Local Agent.");
 	const targetComputerId = await resolveRequestComputerId({
 		agentControllerRef,
 		context,
@@ -20938,6 +20939,10 @@ async function resolveRequestConfiguration(options) {
 }
 async function resolveRequestComputerId(options) {
 	const { agentControllerRef, context, requestedComputerId, targetOwnerUserId } = options;
+	if (agentControllerRef === "hosted:remote-agent") {
+		if (requestedComputerId) throw new Error("Remote Agents do not use a Computer. Remove --computer.");
+		return null;
+	}
 	if (!(agentControllerRef || requestedComputerId)) return null;
 	if (!agentControllerRef) throw new ProfileCreationRequestCliError({
 		code: "profile.creation_request.agent_controller_required",
@@ -20979,6 +20984,10 @@ async function resolveRequestComputerId(options) {
 async function resolveRequestDefaultProjectId(options) {
 	const { agentControllerRef, context, input, targetOwnerUserId } = options;
 	const explicitProjectId = normalizeOptionalText$1(input.defaultProjectId);
+	if (agentControllerRef === "hosted:remote-agent") {
+		if (explicitProjectId) throw new Error("Remote Agents do not use a Project folder. Remove --project.");
+		return null;
+	}
 	if (explicitProjectId) return explicitProjectId;
 	if (input.reuseSavedDefaultProject === false || !agentControllerRef || targetOwnerUserId !== context.callerUserId) return null;
 	return (await context.api.getAgentProfileCreationDefaults({
@@ -24652,7 +24661,7 @@ function normalizeOptionalString(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 async function runDefaultSpaceAddMeMembership(input) {
-	const { runSpaceAddMeMembership } = await import("./add-me-membership-DpckwGof.js");
+	const { runSpaceAddMeMembership } = await import("./add-me-membership-Wc69O6rA.js");
 	return await runSpaceAddMeMembership(input);
 }
 //#endregion
@@ -29670,7 +29679,7 @@ computerCmd.command("disconnect").description("Disconnect this computer from its
 		routeTokens: ["computer", "disconnect"],
 		view,
 		run: async () => {
-			const { runComputerDisconnect } = await import("./computer-disconnect-CLtQwKDS.js");
+			const { runComputerDisconnect } = await import("./computer-disconnect-DR1WDSPK.js");
 			await runComputerDisconnect(computerConnectionIntentSchema.parse(JSON.parse(opts.connectionIntent)), view);
 		}
 	});
@@ -31595,7 +31604,7 @@ profileCmd.command("create").description("Create an Agent Profile, or an additio
 	});
 });
 function shouldUseProfileCreationRequest(input) {
-	return typeof input.owner === "string" || typeof input.computer === "string" || typeof input.project === "string" || input.defaultProject === false || typeof input.space === "string" || typeof input.organization === "string" || typeof input.agentControllerCollaborationMode === "string" || typeof input.openCodePermission === "string" || typeof input.nativeSession === "string" || input.session !== "new";
+	return input.agentController === "hosted:remote-agent" || typeof input.owner === "string" || typeof input.computer === "string" || typeof input.project === "string" || input.defaultProject === false || typeof input.space === "string" || typeof input.organization === "string" || typeof input.agentControllerCollaborationMode === "string" || typeof input.openCodePermission === "string" || typeof input.nativeSession === "string" || input.session !== "new";
 }
 function assertSupportedProfileCreationRequestSessionInput(input) {
 	if (input.usesCreationRequest && typeof input.agentControllerConversationId === "string") throw createProfileCreateGuideError("--agent-controller-conversation-id cannot be combined with owner-request options because that legacy flag would lose the requested session. Use --session resume --native-session <id> instead.");
@@ -31885,7 +31894,7 @@ async function main() {
 	if (await runMacOsNativeKeychainHelperIfRequested()) return;
 	const argv = process.argv.map((arg) => arg === "--h" ? "--help" : arg);
 	if (argv.length === 5 && argv[2] === "computer" && argv[3] === "connection-review" && argv[4] === "--json") {
-		const { readComputerConnectionReview } = await import("./computer-connection-review-mO6vn3C3.js");
+		const { readComputerConnectionReview } = await import("./computer-connection-review-DY5BK_27.js");
 		outLine(JSON.stringify(await readComputerConnectionReview()));
 		return;
 	}
@@ -31896,7 +31905,7 @@ async function main() {
 			return;
 		}
 		if (argv[3] === "control-capabilities") {
-			const { readServiceControlCapabilities } = await import("./service-control-capabilities-Y4CGrchz.js");
+			const { readServiceControlCapabilities } = await import("./service-control-capabilities-C9UHSMPz.js");
 			emitCliJsonEnvelope({
 				schemaVersion: 1,
 				type: "service.control_capabilities",
@@ -32079,4 +32088,4 @@ main().catch((error) => {
 //#endregion
 export {};
 
-//# sourceMappingURL=openmeld-Tkp17vPg.js.map
+//# sourceMappingURL=openmeld-BQy0nMox.js.map