openmeld 0.3.222 → 0.3.224

package/dist/{daemon-device-id-DWO9_QW6.js → daemon-device-id-B1Af2Zmn.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 
 import { t as isLoopbackHostname } from "./loopback-hostname-DHQPKq8N.js";
-import { A as OPENMELD_HOME_ENV_KEY, gt as systemDir, q as normalizeAccountKey } from "./lock-Bsl_ElWy.js";
+import { A as OPENMELD_HOME_ENV_KEY, _ as resolveCliContext, _t as systemDir, g as readCliContextState, h as listCliContextStates, pt as runtimeDir, q as normalizeAccountKey, tt as openMeldRootDir, y as writeCliContextState } from "./lock-iue1J2xy.js";
 import { n as runtimeAgentControllerConversationIdMappingSpecSchema, o as runtimeStreamingModeSchema, r as runtimeAgentControllerLaunchContractSchema, s as runtimeTransportModeSchema, u as conversationPolicySchema } from "./controller-contract-DAOCaefz.js";
-import { $r as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, Qr as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE, ii as profileErrorResponseSchema, ri as profileCapabilitiesResponseSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, ti as authProfileManagedRoleSchema } from "./runtime-transport-Cc_RN-PL.js";
-import { $ as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS$1, B as DEFAULT_HEARTBEAT_INTERVAL_MS$1, F as DAEMON_RUNTIME_CONTRACT_EPOCH$1, G as MIN_HEARTBEAT_INTERVAL_MS$1, H as HEARTBEAT_RESPONSE_TIMEOUT_MS$1, I as DAEMON_STREAM_CONNECT_TIMEOUT_MS$1, J as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS$1, L as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1, N as CATALOG_SYNC_RETRY_INTERVAL_MS$1, P as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1, Q as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS$1, R as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1, U as MAX_HEARTBEAT_INTERVAL_MS$1, X as REGISTER_RESPONSE_TIMEOUT_MS$1, Y as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS$1, d as getAuthSessionState, et as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS$1 } from "./auth-session-nhS8jyux.js";
-import { E as agentProfileIdSchema, b as skippedDaemonProfileSchema } from "./control-plane-e3W6PD2M.js";
+import { ai as profileCapabilitiesResponseSchema, ei as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE, oi as profileErrorResponseSchema, ri as authProfileManagedRoleSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, ti as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE } from "./runtime-transport-YIYHSJPn.js";
+import { $ as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS$1, B as DEFAULT_HEARTBEAT_INTERVAL_MS$1, F as DAEMON_RUNTIME_CONTRACT_EPOCH$1, G as MIN_HEARTBEAT_INTERVAL_MS$1, H as HEARTBEAT_RESPONSE_TIMEOUT_MS$1, I as DAEMON_STREAM_CONNECT_TIMEOUT_MS$1, J as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS$1, L as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1, N as CATALOG_SYNC_RETRY_INTERVAL_MS$1, P as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1, Q as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS$1, R as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1, U as MAX_HEARTBEAT_INTERVAL_MS$1, X as REGISTER_RESPONSE_TIMEOUT_MS$1, Y as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS$1, d as getAuthSessionState, et as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS$1 } from "./auth-session-uEk_Tx6T.js";
+import { E as agentProfileIdSchema, b as skippedDaemonProfileSchema } from "./control-plane-rTE2rHZ5.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
 import { n as agentControllerPermissionModeSchema, r as agentControllerCollaborationModeSchema, t as openCodePermissionConfigSchema } from "./open-code-permission-DHFJYc_o.js";
-import { h as daemonRuntimeRootPath, m as daemonRuntimeDataPath } from "./daemon-state-B44aq2nm.js";
+import { h as daemonRuntimeRootPath, m as daemonRuntimeDataPath } from "./daemon-state-Ca0WK5x0.js";
 import { r as formatOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
 import { n as toErrorMessage$1 } from "./dist-BLuEEVHh.js";
 import { createHash, randomUUID } from "node:crypto";
 import { join } from "node:path";
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
 //#region ../../packages/schemas/dist/schemas/daemon/route-catalog-cache.js
 const DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME = "openmeld-daemon-route-catalog-cache-v4";
@@ -71,13 +71,13 @@ function resolveOpenMeldAccountContext(input) {
 		key: normalizeAccountKey({}),
 		source: "fallback"
 	};
-	const normalizedBaseUrl = normalizeOptionalString$2(session.authBaseUrl);
+	const normalizedBaseUrl = normalizeOptionalString$4(session.authBaseUrl);
 	const hostKey = resolveHostKey(normalizedBaseUrl);
 	const user = normalizeUser(session.user);
 	const userKey = user?.id ?? user?.email ?? buildSessionScopedUserKey({
 		authBaseUrl: normalizedBaseUrl,
-		clientId: normalizeOptionalString$2(session.clientId),
-		createdAt: normalizeOptionalString$2(session.createdAt)
+		clientId: normalizeOptionalString$4(session.clientId),
+		createdAt: normalizeOptionalString$4(session.createdAt)
 	});
 	return {
 		key: normalizeAccountKey({
@@ -90,7 +90,7 @@ function resolveOpenMeldAccountContext(input) {
 	};
 }
 async function resolveCurrentOpenMeldAccountContext() {
-	const { getAuthSessionMetadata } = await import("./auth-session-D8dbMpaK.js");
+	const { getAuthSessionMetadata } = await import("./auth-session-BJfKu74u.js");
 	return resolveOpenMeldAccountContext({ session: await getAuthSessionMetadata().catch(() => null) });
 }
 function resolveHostKey(baseUrl) {
@@ -113,9 +113,9 @@ function buildSessionScopedUserKey(input) {
 function normalizeUser(value) {
 	if (!(value && typeof value === "object")) return null;
 	const record = value;
-	const id = normalizeOptionalString$2(record.id);
-	const email = normalizeOptionalString$2(record.email);
-	const name = normalizeOptionalString$2(record.name);
+	const id = normalizeOptionalString$4(record.id);
+	const email = normalizeOptionalString$4(record.email);
+	const name = normalizeOptionalString$4(record.name);
 	if (!(id || email || name)) return null;
 	return {
 		...id ? { id } : {},
@@ -123,7 +123,7 @@ function normalizeUser(value) {
 		...name ? { name } : {}
 	};
 }
-function normalizeOptionalString$2(value) {
+function normalizeOptionalString$4(value) {
 	if (typeof value !== "string") return null;
 	const normalized = value.trim();
 	return normalized.length > 0 ? normalized : null;
@@ -146,9 +146,9 @@ function createAuthenticationError(input) {
 	return new OpenMeldAuthenticationError(resolveAuthenticationGuidance(input));
 }
 function resolveAuthenticationGuidance(input) {
-	const action = normalizeOptionalString$1(input.action);
-	const authBaseUrl = normalizeOptionalString$1(input.authBaseUrl);
-	const gatewayUrl = normalizeOptionalString$1(input.gatewayUrl);
+	const action = normalizeOptionalString$3(input.action);
+	const authBaseUrl = normalizeOptionalString$3(input.authBaseUrl);
+	const gatewayUrl = normalizeOptionalString$3(input.gatewayUrl);
 	if (input.reason === "mismatch") return {
 		reason: input.reason,
 		action,
@@ -172,7 +172,7 @@ function resolveAuthenticationGuidance(input) {
 	};
 }
 function buildCommandAuthenticationPromptMessage(action) {
-	const normalizedAction = normalizeOptionalString$1(action);
+	const normalizedAction = normalizeOptionalString$3(action);
 	if (!normalizedAction) return "Sign in is required to continue. What do you want to do?";
 	return `Sign in is required before ${normalizedAction}. What do you want to do?`;
 }
@@ -259,7 +259,7 @@ function resolveAuthenticationGuidanceFromMessage(message) {
 function extractAuthenticationPromptAction(promptMessage) {
 	const normalizedMessage = String(promptMessage ?? "").trim();
 	if (normalizedMessage.length === 0) return null;
-	return normalizeOptionalString$1(AUTH_PROMPT_ACTION_RE.exec(normalizedMessage)?.groups?.action);
+	return normalizeOptionalString$3(AUTH_PROMPT_ACTION_RE.exec(normalizedMessage)?.groups?.action);
 }
 function resolveRequiredAuthenticationGuidance(reason) {
 	switch (reason) {
@@ -339,10 +339,220 @@ function buildAgentAuthenticationNotes(guidance) {
 	if (guidance.gatewayUrl) notes.push(`Current gateway: ${guidance.gatewayUrl}`);
 	return notes;
 }
-function normalizeOptionalString$1(value) {
+function normalizeOptionalString$3(value) {
+	const normalized = String(value ?? "").trim();
+	return normalized.length > 0 ? normalized : null;
+}
+//#endregion
+//#region src/config/openmeld-profile-selection.ts
+const SESSION_FILE_HASH_LENGTH = 8;
+const SESSION_FILE_MAX_LENGTH = 128;
+const FALLBACK_SELECTION_SESSION_ID = "global-default";
+const FALLBACK_SELECTION_SOURCE = "fallback:no_runtime_session";
+async function setSelectedOpenMeldProfileId(openMeldProfileId) {
+	const normalized = normalizeRequiredString(openMeldProfileId, "openMeldProfileId");
+	await rm(legacySelectionPath(), { force: true }).catch(() => void 0);
+	const cliContext = resolveCliContext();
+	if (!cliContext) {
+		await writeFallbackSelectionPayload(normalized);
+		return {
+			persistent: true,
+			cliContextSource: FALLBACK_SELECTION_SOURCE
+		};
+	}
+	await writeCliContextState({ selectedOpenMeldProfileId: normalized });
+	await rm(selectionPath(cliContext.cliContextId), { force: true }).catch(() => void 0);
+	return {
+		persistent: true,
+		cliContextSource: cliContext.source
+	};
+}
+async function getSelectedOpenMeldProfileId() {
+	const cliContext = resolveCliContext();
+	if (!cliContext) return await readFallbackSelectionPayload();
+	const sessionState = await readCliContextState();
+	if (sessionState?.selectedOpenMeldProfileId) return sessionState.selectedOpenMeldProfileId;
+	const legacySelection = await readLegacySelectionPayload(cliContext.cliContextId);
+	if (!legacySelection?.openMeldProfileId) return null;
+	await writeCliContextState({
+		sessionId: legacySelection.sessionId,
+		sessionSource: legacySelection.sessionSource,
+		openMeldProfileId: legacySelection.openMeldProfileId
+	});
+	await rm(selectionPath(cliContext.cliContextId), { force: true }).catch(() => void 0);
+	return legacySelection.openMeldProfileId;
+}
+async function clearSelectedOpenMeldProfileId() {
+	const cliContext = resolveCliContext();
+	if (!cliContext) {
+		await rm(fallbackSelectionPath(), { force: true }).catch(() => void 0);
+		await rm(legacySelectionPath(), { force: true }).catch(() => void 0);
+		return;
+	}
+	await writeCliContextState({ selectedOpenMeldProfileId: null });
+	await rm(selectionPath(cliContext.cliContextId), { force: true });
+	await rm(legacySelectionPath(), { force: true }).catch(() => void 0);
+}
+async function clearAllSelectedOpenMeldProfileIds() {
+	const sessionStates = await listCliContextStates();
+	let clearedSessionSelections = 0;
+	const failedSessionIds = [];
+	for (const sessionState of sessionStates) {
+		if (!sessionState.selectedOpenMeldProfileId) continue;
+		try {
+			if (await writeCliContextState({
+				sessionId: sessionState.sessionId,
+				sessionSource: sessionState.cliContextSource,
+				selectedOpenMeldProfileId: null
+			})) {
+				clearedSessionSelections += 1;
+				continue;
+			}
+		} catch {}
+		failedSessionIds.push(sessionState.sessionId);
+	}
+	const removedFallbackSelection = await removeFileIfPresent(fallbackSelectionPath());
+	const removedLegacySelectionFile = await removeFileIfPresent(legacySelectionPath());
+	const removedLegacySessionSelectionDirectory = await removeDirectoryIfPresent(sessionSelectionDir());
+	return {
+		clearedSessionSelections,
+		failedSessionIds,
+		removedFallbackSelection,
+		removedLegacySelectionFile,
+		removedLegacySessionSelectionDirectory
+	};
+}
+async function alignSelectedOpenMeldProfileStorage() {
+	let migratedSessionSelections = 0;
+	const entryNames = await readdir(sessionSelectionDir()).catch(() => []);
+	for (const entryName of entryNames) {
+		if (!entryName.endsWith(".selected-profile.json")) continue;
+		const raw = await readFile(join(sessionSelectionDir(), entryName), "utf8").catch(() => null);
+		if (!raw) continue;
+		const parsed = parseLegacySelectionPayload(raw);
+		if (!parsed) continue;
+		if (await writeCliContextState({
+			sessionId: parsed.sessionId,
+			sessionSource: parsed.sessionSource,
+			selectedOpenMeldProfileId: parsed.openMeldProfileId
+		})) migratedSessionSelections += 1;
+	}
+	const legacyDirectoryExists = entryNames.length > 0;
+	if (legacyDirectoryExists) await rm(sessionSelectionDir(), {
+		recursive: true,
+		force: true
+	});
+	await migrateLegacyFallbackSelection();
+	const removedLegacySelectionFile = await removeLegacySelectionFile();
+	return {
+		migratedSessionSelections,
+		removedLegacyDirectory: legacyDirectoryExists,
+		removedLegacySelectionFile
+	};
+}
+function selectionPath(sessionId) {
+	return join(sessionSelectionDir(), `${toSafeSessionFile(sessionId)}.selected-profile.json`);
+}
+function sessionSelectionDir() {
+	return join(runtimeDir(), "selected-openmeld-profiles");
+}
+function legacySelectionPath() {
+	return join(openMeldRootDir(), "auth", "selected-profile.json");
+}
+function fallbackSelectionPath() {
+	return join(runtimeDir(), "selected-profile-fallback.json");
+}
+async function readLegacySelectionPayload(sessionId) {
+	const raw = await readFile(selectionPath(sessionId), "utf8").catch(() => null);
+	if (!raw) return null;
+	return parseLegacySelectionPayload(raw);
+}
+async function readFallbackSelectionPayload() {
+	const raw = await readFile(fallbackSelectionPath(), "utf8").catch(() => null);
+	if (!raw) {
+		const legacyFallback = await readLegacyFallbackSelection();
+		if (!legacyFallback) return null;
+		await writeFallbackSelectionPayload(legacyFallback.openMeldProfileId);
+		await rm(legacySelectionPath(), { force: true }).catch(() => void 0);
+		return legacyFallback.openMeldProfileId;
+	}
+	return parseLegacySelectionPayload(raw)?.openMeldProfileId ?? null;
+}
+async function writeFallbackSelectionPayload(openMeldProfileId) {
+	await mkdir(runtimeDir(), { recursive: true });
+	const payload = {
+		v: 1,
+		sessionId: FALLBACK_SELECTION_SESSION_ID,
+		sessionSource: FALLBACK_SELECTION_SOURCE,
+		openMeldProfileId,
+		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+	};
+	await writeFile(fallbackSelectionPath(), `${JSON.stringify(payload, null, 2)}\n`, "utf8");
+}
+function parseLegacySelectionPayload(raw) {
+	try {
+		const payload = JSON.parse(raw);
+		if (payload.v !== 1) return null;
+		const sessionId = normalizeOptionalString$2(payload.sessionId);
+		const openMeldProfileId = normalizeOptionalString$2(payload.openMeldProfileId);
+		if (!(sessionId && openMeldProfileId)) return null;
+		return {
+			v: 1,
+			sessionId,
+			sessionSource: normalizeOptionalString$2(payload.sessionSource) ?? "manual",
+			openMeldProfileId,
+			updatedAt: normalizeOptionalString$2(payload.updatedAt) ?? (/* @__PURE__ */ new Date(0)).toISOString()
+		};
+	} catch {
+		return null;
+	}
+}
+async function readLegacyFallbackSelection() {
+	const raw = await readFile(legacySelectionPath(), "utf8").catch(() => null);
+	if (!raw) return null;
+	const parsed = parseLegacySelectionPayload(raw);
+	if (parsed?.sessionSource !== FALLBACK_SELECTION_SOURCE) return null;
+	return parsed;
+}
+async function migrateLegacyFallbackSelection() {
+	const legacyFallback = await readLegacyFallbackSelection();
+	if (!legacyFallback) return;
+	if (!await readFile(fallbackSelectionPath(), "utf8").catch(() => null)) await writeFallbackSelectionPayload(legacyFallback.openMeldProfileId);
+}
+async function removeLegacySelectionFile() {
+	if (!await readFile(legacySelectionPath(), "utf8").catch(() => null)) return false;
+	await rm(legacySelectionPath(), { force: true }).catch(() => void 0);
+	return true;
+}
+function toSafeSessionFile(value) {
+	const hash = createHash("sha1").update(value, "utf8").digest("hex").slice(0, SESSION_FILE_HASH_LENGTH);
+	const safeBaseRaw = value.replace(/[^a-zA-Z0-9._-]+/g, "_");
+	const safeBase = safeBaseRaw.length > 0 ? safeBaseRaw : "session";
+	const maxBaseLength = Math.max(1, SESSION_FILE_MAX_LENGTH - SESSION_FILE_HASH_LENGTH - 1);
+	return `${safeBase.slice(0, maxBaseLength)}-${hash}`;
+}
+function normalizeOptionalString$2(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
+function normalizeRequiredString(value, field) {
+	const normalized = normalizeOptionalString$2(value);
+	if (!normalized) throw new Error(`${field} is required`);
+	return normalized;
+}
+async function removeFileIfPresent(path) {
+	if (await readFile(path, "utf8").catch(() => null) === null) return false;
+	await rm(path, { force: true }).catch(() => void 0);
+	return true;
+}
+async function removeDirectoryIfPresent(path) {
+	if (!(await stat(path).catch(() => null))?.isDirectory()) return false;
+	await rm(path, {
+		recursive: true,
+		force: true
+	}).catch(() => void 0);
+	return true;
+}
 //#endregion
 //#region src/local-service/state/catalog-sync-signal.ts
 const CATALOG_SYNC_SIGNAL_FILE = "catalog-sync-signal.json";
@@ -432,7 +642,7 @@ var AuthProfilesApiError = class extends Error {
 		this.name = "AuthProfilesApiError";
 		this.status = input.status;
 		this.endpoint = input.endpoint;
-		this.code = normalizeOptionalString(input.code);
+		this.code = normalizeOptionalString$1(input.code);
 	}
 };
 function isAuthProfilesApiError(error) {
@@ -458,13 +668,13 @@ async function resolveOpenMeldProfile(input) {
 		method: "POST",
 		path: "/v1/profiles/resolve",
 		body: {
-			...normalizeOptionalString(input.openMeldProfileId) ? { openMeldProfileId: normalizeOptionalString(input.openMeldProfileId) } : {},
+			...normalizeOptionalString$1(input.openMeldProfileId) ? { openMeldProfileId: normalizeOptionalString$1(input.openMeldProfileId) } : {},
 			...input.profileKind ? { profileKind: input.profileKind } : {}
 		}
 	}), "profile"));
 }
 async function resolveOpenMeldProfileByIdOrName(input) {
-	const profileIdentifier = normalizeOptionalString(input.profileIdentifier);
+	const profileIdentifier = normalizeOptionalString$1(input.profileIdentifier);
 	if (!profileIdentifier) throw new Error("profile identifier is required");
 	try {
 		return await resolveOpenMeldProfile({
@@ -483,8 +693,8 @@ async function resolveOpenMeldProfileByIdOrName(input) {
 	}
 }
 function createOpenMeldAgentProfile(input) {
-	const profileName = normalizeOptionalString(input.profileName);
-	const creatorProfileId = normalizeOptionalString(input.creatorProfileId) ?? void 0;
+	const profileName = normalizeOptionalString$1(input.profileName);
+	const creatorProfileId = normalizeOptionalString$1(input.creatorProfileId) ?? void 0;
 	if (!profileName) throw new Error("profile name is required");
 	return createOpenMeldAgentProfileRequest({
 		profileName,
@@ -492,8 +702,8 @@ function createOpenMeldAgentProfile(input) {
 	});
 }
 async function createOpenMeldHumanProfile(input) {
-	const profileName = normalizeOptionalString(input.profileName);
-	const creatorProfileId = normalizeOptionalString(input.creatorProfileId) ?? void 0;
+	const profileName = normalizeOptionalString$1(input.profileName);
+	const creatorProfileId = normalizeOptionalString$1(input.creatorProfileId) ?? void 0;
 	if (!profileName) throw new Error("profile name is required");
 	try {
 		assertAdditionalHumanProfileCreationEnabled(await getOpenMeldProfileCapabilities());
@@ -516,9 +726,9 @@ async function createOpenMeldHumanProfile(input) {
 	return created;
 }
 async function updateOpenMeldProfile(input) {
-	const openMeldProfileId = normalizeOptionalString(input.openMeldProfileId);
+	const openMeldProfileId = normalizeOptionalString$1(input.openMeldProfileId);
 	if (!openMeldProfileId) throw new Error("openMeldProfileId is required");
-	const profileName = normalizeOptionalString(input.profileName);
+	const profileName = normalizeOptionalString$1(input.profileName);
 	if (!Boolean(profileName)) throw new Error("profileName is required");
 	const updated = parseOpenMeldProfileItem(readRecordField(await requestOpenMeldProfilesApi({
 		method: "PATCH",
@@ -529,7 +739,7 @@ async function updateOpenMeldProfile(input) {
 	return updated;
 }
 async function deleteOpenMeldProfile(input) {
-	const openMeldProfileId = normalizeOptionalString(input.openMeldProfileId);
+	const openMeldProfileId = normalizeOptionalString$1(input.openMeldProfileId);
 	if (!openMeldProfileId) throw new Error("openMeldProfileId is required");
 	const deleted = parseOpenMeldProfileItem(readRecordField(await requestOpenMeldProfilesApi({
 		method: "DELETE",
@@ -716,12 +926,12 @@ function readArrayField(input, field) {
 	return value.filter(isRecord);
 }
 function readRequiredStringField(input, field) {
-	const value = normalizeOptionalString(input[field]);
+	const value = normalizeOptionalString$1(input[field]);
 	if (!value) throw new Error(`invalid profile payload: missing ${field}`);
 	return value;
 }
 function readOptionalStringField(input, field) {
-	return normalizeOptionalString(input[field]);
+	return normalizeOptionalString$1(input[field]);
 }
 function readBooleanField(input, field) {
 	return input[field] === true;
@@ -731,7 +941,7 @@ function readOptionalBooleanField(input, field) {
 	if (typeof value === "boolean") return value;
 	return null;
 }
-function normalizeOptionalString(value) {
+function normalizeOptionalString$1(value) {
 	const normalized = String(value ?? "").trim();
 	return normalized.length > 0 ? normalized : null;
 }
@@ -757,7 +967,7 @@ async function parseResponseJson(response) {
 }
 function extractApiErrorMessage(payload, status) {
 	const record = isRecord(payload) ? payload : {};
-	const message = normalizeOptionalString(record.message) ?? normalizeOptionalString(record.error_description) ?? normalizeOptionalString(record.error);
+	const message = normalizeOptionalString$1(record.message) ?? normalizeOptionalString$1(record.error_description) ?? normalizeOptionalString$1(record.error);
 	if (message) return message;
 	return `request failed with status ${status}`;
 }
@@ -798,6 +1008,104 @@ function isRecord(value) {
 	return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 //#endregion
+//#region src/config/resolve-openmeld-profile.ts
+const PROFILE_REQUIRED_ERROR_ROOT = "no OpenMeld profile is selected for this terminal session yet";
+const PROFILE_REQUIRED_ERROR_MESSAGE = `${PROFILE_REQUIRED_ERROR_ROOT}; run \`openmeld start\` to choose one, or pass \`--profile <id>\`.`;
+const SERVICE_TRACE_PROFILE_REQUIRED_ERROR_MESSAGE = `${PROFILE_REQUIRED_ERROR_ROOT}; dispatch trace needs an acting profile. Run \`openmeld profile set <profile-id>\` once, or pass \`--profile <profile-id>\` with this trace command. \`--target-profile\` only identifies the agent being traced.`;
+const PROFILE_REQUIRED_ERROR_PREFIX = "no OpenMeld profile is selected for this terminal session yet; run `";
+const PROFILE_REQUIRED_ERROR_SUFFIX = " start` to choose one, or pass `--profile <id>`.";
+function isSelectedOpenMeldProfileRequiredError(error) {
+	if (!(error instanceof Error)) return false;
+	if (error.message === PROFILE_REQUIRED_ERROR_MESSAGE) return true;
+	if (error.message.includes(PROFILE_REQUIRED_ERROR_ROOT) && error.message.includes("--profile <")) return true;
+	return error.message.startsWith(PROFILE_REQUIRED_ERROR_PREFIX) && error.message.endsWith(PROFILE_REQUIRED_ERROR_SUFFIX);
+}
+async function resolveOpenMeldProfileOrNull(input = {}) {
+	const explicitOpenMeldProfileId = normalizeOptionalString(input.openMeldProfileId);
+	if (explicitOpenMeldProfileId) return await resolveExplicitOpenMeldProfile(explicitOpenMeldProfileId, {
+		profileKind: input.profileKind,
+		allowUnauthenticated: input.allowUnauthenticated === true,
+		persistSelection: input.persistSelection !== false
+	});
+	const selectedOpenMeldProfileId = await getSelectedOpenMeldProfileId();
+	if (selectedOpenMeldProfileId) {
+		const selectedProfile = await resolveSelectedOpenMeldProfile(selectedOpenMeldProfileId, {
+			profileKind: input.profileKind,
+			allowUnauthenticated: input.allowUnauthenticated === true
+		});
+		if (selectedProfile) return selectedProfile;
+	}
+	if (input.allowUnauthenticated === true) {
+		if ((await getAuthSessionState({ validateRemote: false })).state !== "valid") return null;
+	}
+	if (input.allowDefaultFallback !== true) return null;
+	let fallbackProfile;
+	try {
+		fallbackProfile = await resolveOpenMeldProfile({ profileKind: input.profileKind });
+	} catch (error) {
+		if (input.allowUnauthenticated === true && isAuthRequiredError(error)) return null;
+		throw error;
+	}
+	if (input.persistSelection !== false) await setSelectedOpenMeldProfileId(fallbackProfile.openMeldProfileId);
+	return fallbackProfile;
+}
+async function resolveExplicitOpenMeldProfile(openMeldProfileId, input) {
+	try {
+		const profile = await resolveOpenMeldProfileByIdOrName({
+			profileIdentifier: openMeldProfileId,
+			profileKind: input.profileKind
+		});
+		if (input.persistSelection) await setSelectedOpenMeldProfileId(profile.openMeldProfileId);
+		return profile;
+	} catch (error) {
+		if (isAuthRequiredError(error) && input.allowUnauthenticated) return null;
+		throw error;
+	}
+}
+async function requireOpenMeldProfile(input = {}) {
+	const profile = await resolveOpenMeldProfileOrNull(input);
+	if (profile) return profile;
+	const authState = await getAuthSessionState({ validateRemote: false });
+	if (authState.state === "valid") throw new Error(formatInlineOpenMeldCliCommands(resolveProfileRequiredErrorMessage(input.authAction)));
+	throw createAuthenticationError({
+		reason: resolveAuthenticationReasonFromState(authState.state) ?? "required",
+		action: input.authAction
+	});
+}
+function resolveProfileRequiredErrorMessage(authAction) {
+	if (authAction === "reading a dispatch trace") return SERVICE_TRACE_PROFILE_REQUIRED_ERROR_MESSAGE;
+	return PROFILE_REQUIRED_ERROR_MESSAGE;
+}
+async function resolveSelectedOpenMeldProfile(selectedOpenMeldProfileId, input) {
+	try {
+		return await resolveOpenMeldProfile({
+			openMeldProfileId: selectedOpenMeldProfileId,
+			profileKind: input.profileKind
+		});
+	} catch (error) {
+		if (isAuthRequiredError(error)) {
+			if (input.allowUnauthenticated) return null;
+			throw error;
+		}
+		if (isProfileMissingError(error)) {
+			await clearSelectedOpenMeldProfileId();
+			return null;
+		}
+		throw error;
+	}
+}
+function normalizeOptionalString(value) {
+	const normalized = String(value ?? "").trim();
+	return normalized.length > 0 ? normalized : null;
+}
+function isAuthRequiredError(error) {
+	return resolveAuthenticationGuidanceFromError(error) !== null;
+}
+function isProfileMissingError(error) {
+	if ((error && typeof error === "object" && "code" in error ? String(error.code ?? "") : "") === "profile.not_found") return true;
+	return (error instanceof Error ? error.message : String(error ?? "")).includes("profile not found");
+}
+//#endregion
 //#region src/local-service/core/constants.ts
 const CATALOG_SYNC_RETRY_INTERVAL_MS = CATALOG_SYNC_RETRY_INTERVAL_MS$1;
 const CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS = CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1;
@@ -983,6 +1291,6 @@ async function migrateLegacyDaemonDeviceId(input) {
 	});
 }
 //#endregion
-export { buildCommandAuthenticationPromptMessage as $, DEFAULT_RECONNECT_DELAY_MS as A, createOpenMeldHumanProfile as B, CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS as C, DAEMON_STREAM_CONNECT_TIMEOUT_MS as D, DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE as E, REGISTER_RESPONSE_TIMEOUT_MS as F, resolveOpenMeldProfile as G, getOpenMeldProfileCapabilities as H, RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS as I, assertAdditionalHumanProfileCreationEnabled as J, resolveOpenMeldProfileByIdOrName as K, RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS as L, MAX_RECONNECT_DELAY_MS as M, PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS as N, DAEMON_STREAM_KEEPALIVE_INTERVAL_MS as O, PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS as P, buildAuthenticationStatusLabel as Q, RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS as R, CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS as S, DAEMON_RUNTIME_CONTRACT_META_FILE as T, listOpenMeldProfiles as U, deleteOpenMeldProfile as V, primeOpenMeldProfilesSessionCache as W, touchDaemonCatalogSyncSignal as X, readDaemonCatalogSyncSignal as Y, buildAgentAuthenticationGuide as Z, toErrorMessage as _, asRecord as a, resolveAuthenticationGuidanceFromMessage as at, CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS as b, normalizeHeartbeatIntervalMs as c, DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME as ct, normalizeText as d, buildHumanAuthenticationCard as et, nowIsoString as f, parseTransportMode as g, parseStreamingMode as h, resolvePreferredDaemonDeviceId as i, resolveAuthenticationGuidanceFromError as it, HEARTBEAT_RESPONSE_TIMEOUT_MS as j, DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS as k, normalizeNonNegativeInteger as l, cachedDaemonRouteConfigSchema as lt, parseRuntimeTransportMode as m, ensureDaemonRuntimePaths as n, extractAuthenticationPromptAction as nt, dirnamePath as o, resolveAuthenticationReasonFromState as ot, parseContextIdMappingSpec as p, updateOpenMeldProfile as q, resolveDaemonDeviceId as r, resolveAuthenticationGuidance as rt, emitRunLine as s, resolveCurrentOpenMeldAccountContext as st, buildLedgerPaths as t, createAuthenticationError as tt, normalizeOptionalText as u, daemonRouteCatalogCacheSchema as ut, warnDaemonEvent as v, DAEMON_RUNTIME_CONTRACT_EPOCH as w, CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS as x, CATALOG_SYNC_RETRY_INTERVAL_MS as y, createOpenMeldAgentProfile as z };
+export { touchDaemonCatalogSyncSignal as $, DEFAULT_RECONNECT_DELAY_MS as A, requireOpenMeldProfile as B, CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS as C, DAEMON_STREAM_CONNECT_TIMEOUT_MS as D, DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE as E, REGISTER_RESPONSE_TIMEOUT_MS as F, getOpenMeldProfileCapabilities as G, createOpenMeldAgentProfile as H, RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS as I, resolveOpenMeldProfile as J, listOpenMeldProfiles as K, RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS as L, MAX_RECONNECT_DELAY_MS as M, PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS as N, DAEMON_STREAM_KEEPALIVE_INTERVAL_MS as O, PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS as P, readDaemonCatalogSyncSignal as Q, RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS as R, CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS as S, DAEMON_RUNTIME_CONTRACT_META_FILE as T, createOpenMeldHumanProfile as U, resolveOpenMeldProfileOrNull as V, deleteOpenMeldProfile as W, updateOpenMeldProfile as X, resolveOpenMeldProfileByIdOrName as Y, assertAdditionalHumanProfileCreationEnabled as Z, toErrorMessage as _, cachedDaemonRouteConfigSchema as _t, asRecord as a, buildAgentAuthenticationGuide as at, CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS as b, normalizeHeartbeatIntervalMs as c, buildHumanAuthenticationCard as ct, normalizeText as d, resolveAuthenticationGuidance as dt, alignSelectedOpenMeldProfileStorage as et, nowIsoString as f, resolveAuthenticationGuidanceFromError as ft, parseTransportMode as g, DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME as gt, parseStreamingMode as h, resolveCurrentOpenMeldAccountContext as ht, resolvePreferredDaemonDeviceId as i, setSelectedOpenMeldProfileId as it, HEARTBEAT_RESPONSE_TIMEOUT_MS as j, DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS as k, normalizeNonNegativeInteger as l, createAuthenticationError as lt, parseRuntimeTransportMode as m, resolveAuthenticationReasonFromState as mt, ensureDaemonRuntimePaths as n, clearSelectedOpenMeldProfileId as nt, dirnamePath as o, buildAuthenticationStatusLabel as ot, parseContextIdMappingSpec as p, resolveAuthenticationGuidanceFromMessage as pt, primeOpenMeldProfilesSessionCache as q, resolveDaemonDeviceId as r, getSelectedOpenMeldProfileId as rt, emitRunLine as s, buildCommandAuthenticationPromptMessage as st, buildLedgerPaths as t, clearAllSelectedOpenMeldProfileIds as tt, normalizeOptionalText as u, extractAuthenticationPromptAction as ut, warnDaemonEvent as v, daemonRouteCatalogCacheSchema as vt, DAEMON_RUNTIME_CONTRACT_EPOCH as w, CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS as x, CATALOG_SYNC_RETRY_INTERVAL_MS as y, isSelectedOpenMeldProfileRequiredError as z };
 
-//# sourceMappingURL=daemon-device-id-DWO9_QW6.js.map
+//# sourceMappingURL=daemon-device-id-B1Af2Zmn.js.map