openmeld 0.3.222 → 0.3.224

package/dist/{openmeld-BQy0nMox.js → openmeld-BFO3sfC_.js}

@@ -1,59 +1,57 @@
 #!/usr/bin/env node
 
 import { c as toSpaceDispatchLookupUrl, h as toSpaceResultUrl, i as toSpaceContractUrl, l as toSpaceDispatchTraceUrl, r as toSpaceBoardUrl, t as normalizeBaseUrl } from "./urls-CY2uzH2-.js";
-import { D as isLocalMachineFailureError, F as accountsDir, M as accountProfileSpaceCacheDir, N as accountProfileViewPath, O as toRecognizedLocalMachineFailureError, Q as openMeldManagedVersionBinaryPath, S as LocalMachineFailureError, T as createOrphanedSetupConcurrencyIssue, Y as openMeldBackupsDir, Z as openMeldManagedBinaryPath, _ as resolveCliContext, a as isOpenMeldOrphanedLockError, b as formatLaneScopeSentence, c as releaseLockSync, ct as resolveOpenMeldEnvPreset, d as runWithHeldLock, et as openMeldRootDir, gt as systemDir, ht as spacesDir, i as isOpenMeldLockError, it as profileViewPath, k as formatLocalMachineIssueMessage, l as repairOrphanedLegacyLocks, lt as resolveOpenMeldRootDir, m as OPENMELD_CLI_CONTEXT_ENV_KEY, mt as skillsDir, p as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, q as normalizeAccountKey, r as buildOpenMeldOrphanedLockAction, rt as profileDir, st as resolveOpenMeldCliEntryNameFromArgv, t as acquireLock, u as resolveOpenMeldOrphanedLockIssue, w as createActiveSetupConcurrencyIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-Bsl_ElWy.js";
-import { $r as agentActivityInventorySessionStatusSchema, $t as createPrepareReadinessApi, Ar as observabilityWakeTraceSelectorSchema, Cn as postSpaceWorkHandoff, Cr as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Dr as spaceDispatchTraceAttemptStatusSchema, Er as resolveSpaceDispatchTraceRootCause, Ft as createCenterAgentApi, Jr as ownerComputerDiagnosticsSchema, Jt as createOrganizationApi, Lt as createComputerFileAccessApi, Mt as createAgentProfileBindingApi, Nn as toStructuredApiClientFailure, Nt as createAgentProfileExecutionModeApi, Or as spaceDispatchTraceDispatchStatusSchema, Qr as agentActivityInventorySessionOriginSchema, Qt as createPluginsApi, Ti as signalTextEnvelopeSchema, Tr as resolveRuntimeCoordinatorHeadStatusRootCause, Vr as resolvedSpaceMemberProfileSchema, Vt as createFeedbackApi, Xn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Xr as summarizeComputerFileAccessPolicy, Xt as createOrganizationSkillsApi, Yr as projectOwnerComputerLocalRuntimes, _r as spaceTaskMutationReceiptSchema, bi as agentActivitySnapshotQuerySchema, br as submitFeedbackIssueRequestSchema, dr as createAgentProfileCreationRequestBodySchema, ei as agentActivitySessionInventoryQuerySchema, er as spaceEntryTargetSchema, gr as spaceTaskIdSchema, hr as mutateSpaceTaskBodySchema, in as createRoutinesApi, jr as projectObservabilityWakeCorrelation, jt as createAgentActivityApi, kr as spaceDispatchTraceResponseSchema, lr as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, mr as listSpaceTasksResponseSchema, ni as localAgentSessionProviderSchema, nn as createProjectsApi, pr as createSpaceTaskBodySchema, qn as OPENMELD_HEADER_PROFILE_ID, tr as pluginActionRequestSchema, ur as agentProfileCreationConfigurationSchema, vi as agentActivityProviderSchema, wr as projectSpaceDispatchTraceFinalVisibleOutcome, yi as agentActivitySessionStatusSchema, zt as createCurrentDeviceApi } from "./dist-B07ziN_u.js";
+import { D as isLocalMachineFailureError, F as accountsDir, M as accountProfileSpaceCacheDir, N as accountProfileViewPath, O as toRecognizedLocalMachineFailureError, S as LocalMachineFailureError, T as createOrphanedSetupConcurrencyIssue, X as openMeldBinDir, Y as openMeldBackupsDir, _ as resolveCliContext, _t as systemDir, a as isOpenMeldOrphanedLockError, at as profileViewPath, b as formatLaneScopeSentence, c as releaseLockSync, ct as resolveOpenMeldCliEntryNameFromArgv, d as runWithHeldLock, gt as spacesDir, ht as skillsDir, i as isOpenMeldLockError, it as profileDir, k as formatLocalMachineIssueMessage, l as repairOrphanedLegacyLocks, lt as resolveOpenMeldEnvPreset, m as OPENMELD_CLI_CONTEXT_ENV_KEY, p as LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY, q as normalizeAccountKey, r as buildOpenMeldOrphanedLockAction, t as acquireLock, tt as openMeldRootDir, u as resolveOpenMeldOrphanedLockIssue, ut as resolveOpenMeldRootDir, w as createActiveSetupConcurrencyIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-iue1J2xy.js";
+import { $r as agentActivityInventorySessionStatusSchema, $t as createPluginsApi, Ar as observabilityWakeTraceSelectorSchema, Bt as createCurrentDeviceApi, Cr as SPACE_DISPATCH_TRACE_RESPONSE_CONTRACT_VERSION_HEADER, Dr as spaceDispatchTraceAttemptStatusSchema, Er as resolveSpaceDispatchTraceRootCause, Ht as createFeedbackApi, It as createCenterAgentApi, Jn as OPENMELD_HEADER_PROFILE_ID, Jr as ownerComputerDiagnosticsSchema, Mt as createAgentActivityApi, Nt as createAgentProfileBindingApi, Or as spaceDispatchTraceDispatchStatusSchema, Pn as toStructuredApiClientFailure, Pt as createAgentProfileExecutionModeApi, Qr as agentActivityInventorySessionOriginSchema, Rt as createComputerFileAccessApi, Tr as resolveRuntimeCoordinatorHeadStatusRootCause, Vr as resolvedSpaceMemberProfileSchema, Xr as summarizeComputerFileAccessPolicy, Yr as projectOwnerComputerLocalRuntimes, Yt as createOrganizationApi, Zn as OPENMELD_HEADER_SPACE_ADDRESSING_VERSION, Zt as createOrganizationSkillsApi, an as createRoutinesApi, bi as agentActivitySnapshotQuerySchema, br as submitFeedbackIssueRequestSchema, dr as agentProfileCreationConfigurationSchema, ei as agentActivitySessionInventoryQuerySchema, en as createPrepareReadinessApi, fr as createAgentProfileCreationRequestBodySchema, jr as projectObservabilityWakeCorrelation, kr as spaceDispatchTraceResponseSchema, ni as localAgentSessionProviderSchema, nr as pluginActionRequestSchema, rn as createProjectsApi, tr as spaceEntryTargetSchema, ur as DEFAULT_AGENT_PROFILE_CREATION_CONFIGURATION, vi as agentActivityProviderSchema, wn as postSpaceWorkHandoff, wr as projectSpaceDispatchTraceFinalVisibleOutcome, yi as agentActivitySessionStatusSchema } from "./dist-BeJcIdCZ.js";
 import { c as agentControllerConversationRefSchema } from "./controller-contract-DAOCaefz.js";
-import { Ar as compareAgentControllerRefsForDisplay, At as ensureOpenMeldManagedProfileWorkspace, C as createModelCatalogReadSession, E as resolveProfileWorkspaceRuntime, Et as listBuiltinAgentsRegistryEntries, I as listAgentTargetStates, It as setCustomProfileWorkspace, K as notifyDaemonRouteCatalogChanged, Lt as setOpenMeldManagedProfileWorkspace, Mt as readProfileWorkspaceConfig, O as syncDeviceRuntimeStateProjection, Pt as resolveConfiguredProfileWorkspacePath, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, Rt as validateCustomProfileWorkspacePath, S as syncProfileWorkspaceState, St as canonicalizeLocalProjectPath, _r as resolveAgentProfileEditCapabilities, _t as removeProjectConnection, bt as setDefaultProjectConnection, dr as peopleComputerContainsDevice, fr as projectPeopleComputersToLegacyLocalRuntimes, ft as listProjectBindings, gr as resolveAgentExecutionStatus, hr as resolveAgentControllerPermissionModeForController, ir as createAgentExecutionStatusDisplayRows, j as resolveAgentProfilePrimaryAgentControllerReport, jt as normalizeCustomProfileWorkspacePath, k as createPrimaryBindingReadSession, lr as listAgentControllerPermissionModeOptions, mt as migrateProjectBindingStore, or as getAgentControllerPermissionModeDisplayMetadata, pt as listProjectConnectionsWithStatus, qn as resolveDispatchSpaceActionMcpServer, sr as getAgentControllerPermissionModeFieldLabel, ur as parseAgentControllerRef, ut as bindProject, vr as resolveEvidenceSyncHealth, xt as unbindProject, yr as resolveNativeAgentControllerPermissionModeForController, yt as runIfAgentActivityBindingGenerationIsCurrent, zt as describeProfileWorkspacePathValidationFailure } from "./prepare-provider-runtime-CWZcuMF6.js";
-import { Gt as spaceWorkingCopyResultSchema, Hn as messageEnvelopeSchema, Ht as spaceWorkHandoffSchema, On as spaceContractFieldsSchema, Qt as isSpaceFileTextEditable, Rt as spaceStatusSchema, Wr as START_BOUNDED_ID_SCHEMA, Wt as spaceWorkSelectionSchema, ci as openMeldProfileIdSchema, cr as agentInteractionResponseSchema, dn as spaceFileEntryIdSchema, dr as clientMessageIdSchema, gn as spaceMessageFileReferenceSchema, hn as spaceFileRevisionNumberSchema, kn as spaceContractSchema, li as openMeldRequestContextSchema, nn as readSpaceFileTextResponseSchema, qr as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, rn as resolveSpaceFileMimeType, wn as spaceThreadContextSchema, zt as centerAgentInteractionSourceSchema } from "./runtime-transport-Cc_RN-PL.js";
-import { C as updateAuthSessionActiveOrganization, T as runMacOsNativeKeychainHelperIfRequested, a as beginAuthSessionTransition, d as getAuthSessionState, f as getCurrentAuthOwnerUserId, g as normalizeStoredActiveOrganization, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, s as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getAuthSessionMetadata } from "./auth-session-nhS8jyux.js";
-import { L as nonEmptyTrimmedStringFromUnknown, O as openMeldRuntimeProfileIdSchema, w as dispatchExecutionSchema, z as trimmedStringFromUnknown } from "./control-plane-e3W6PD2M.js";
-import { t as computerConnectionIntentSchema } from "./computer-connection-M3N6plkj.js";
-import { d as readSelectedSkillDocument, r as ensureLocalSkills } from "./state-CQG3k9eh.js";
-import { $ as buildAuthStatusSnapshot, B as resolveDaemonServiceParticipationStatus, C as buildProfileWorkspaceRows, Ct as cliJsonSkillsShowEnvelopeSchema, Dt as organizationJoinLinkManagementQuerySchema, E as emitDaemonAgentOverview, Et as organizationJoinLinkErrorResponseSchema, F as emitCliJsonEnvelope, G as ensureCommandAuthenticationOrCancel, H as validateLocalProjectConnectionPath, I as runDaemonStartupPreflight, J as runAuthLogout, K as evaluateCommandAuthentication, M as buildHumanErrorCopy, N as renderHumanErrorCard, O as shouldEmitAgentOverview, Ot as revokeOrganizationJoinLinkResponseSchema, P as renderHumanTextErrorCard, Q as buildAuthStatusRows, R as resolveLocalComponentsStatus, S as buildProfileWorkspacePresentation, St as cliJsonSkillsLoadEnvelopeSchema, Tt as getOrganizationJoinLinkResponseSchema, V as LocalProjectConnectionError, W as buildCommandAuthenticationPromptMessage, X as runAuthStatus, Y as runAuthMenu, Z as exchangeOneTimeTokenAuthSession, a as runDaemonBackgroundStartForDecision, at as promptTextEntry, bt as cliJsonOutputEnvelopeSchema, c as runDaemonInterrupt, ct as finishCurrentCommandCheckScope, dt as resetCurrentCommandCheckState, et as formatActiveOrganizationLabel, f as runDaemonSnapshot, ft as startCurrentCommandCheckScope, g as runDaemonUninstall, h as runDaemonTeardownStrict, i as runDaemonAutostart, j as runDaemonStartDecisionPrompt, l as runDaemonReinstall, lt as getCurrentCommandCheckState, m as runDaemonStop, n as isManagedSystemServiceBootstrapRun, nt as renderInfoCard, o as runDaemonCancel, ot as isReturnKeypress, p as runDaemonStatusFlow, q as runAuthLogin, r as runDaemon, rt as renderTextInfoCard, s as runDaemonInstall, st as runInteractivePrompt, t as bestEffortStopCurrentLaneDaemonService, u as runDaemonRunAfterEntryChecks, ut as isCurrentCommandCheckScopeActive, w as reconcileCliVersionView, wt as acceptOrganizationJoinLinkBodySchema, x as resolveServiceParticipationReadiness, xt as cliJsonSkillsListEnvelopeSchema, y as formatServiceParticipationReadinessLabel, yt as cliJsonErrorEnvelopeSchema, z as writeInstalledLocalComponentsSnapshot } from "./service-CfO38_a-.js";
-import { C as defaultManagedIntegrationPaths, D as uninstallAgentActivityIntegrations, E as resolveAgentActivityDispatcherCommand, T as readAgentActivityIntegrationStatus, _ as readControllerTaskLifecycleOutboxHealth, a as fetchSpaceUpdates, b as resolveAgentActivityRouteForPath, c as downloadWorkingCopyFile, d as syncLocalAgentActivity, g as enqueueControllerTaskLifecycleEventWhileLocked, h as removeAgentActivityContextCache, l as materializeOrganizationSkillRelease, m as readAgentActivityContextForPath, o as createSpaceWorkingCopies, t as readRuntimeReportingHealthState, v as isAgentActivityRouteRegistered, w as installAgentActivityIntegrations, x as unregisterAgentActivityRoute, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-BgwfrH7f.js";
-import { B as createOpenMeldHumanProfile, G as resolveOpenMeldProfile, U as listOpenMeldProfiles, V as deleteOpenMeldProfile, W as primeOpenMeldProfilesSessionCache, Z as buildAgentAuthenticationGuide, at as resolveAuthenticationGuidanceFromMessage, et as buildHumanAuthenticationCard, it as resolveAuthenticationGuidanceFromError, q as updateOpenMeldProfile, rt as resolveAuthenticationGuidance, tt as createAuthenticationError, z as createOpenMeldAgentProfile } from "./daemon-device-id-DWO9_QW6.js";
-import { H as buildInstallSelfJsonPayload, U as performManagedInstall, r as readCurrentDaemonRuntimeContext } from "./daemon-service-runtime-bKt0YjC7.js";
-import { A as formatDeviceReplyReadinessLabel, B as resolveGatewayChainReadiness, Bt as assessCliUpdate, It as assessServerRequiredVersion, J as getSetupFlowCopy, K as buildDaemonRouteObservationPresentation$1, Mt as classifyDaemonServiceRunStartability, N as mapAgentReplyReadinessToLegacyAutoReply, Nt as classifyDaemonServiceWakeability, O as resolveCurrentReplyReadinessSnapshot, Pt as resolveCurrentDaemonExpectedVersion, T as resolveDaemonServiceFreshnessWarning, U as resolveOpenClawLocalDiagnosticsValue, Vt as isCliUpdateCheckApplicable, _ as resolveServiceReadinessFromServiceStatus, ft as inspectDaemonServiceInventory, j as formatHumanReplyReadinessReason$1, k as formatAgentReplyReadinessLabel, q as buildOnboardingPlan, t as runPendingDaemonServiceUpdate, zt as readCurrentLocalDeviceId } from "./daemon-service-update-coordinator-D8O1uTtu.js";
-import { $ as resolveCreateProfileKind, A as parseEnvelope, B as resolveHumanControllerDisplayName, C as toSpaceMetaUpsertInput, D as formatHumanReadTargetList, E as buildHumanReplyContextSummary, F as resolveOpenMeldProfileForSpaceCommand, G as printOpenMeldBanner, H as resolveAgentProfileSetup, I as emitSpaceAgentOverview, J as renderOpenMeldLogo, K as renderOpenMeldBrandBlockLines, L as emitSpaceCliAgentOverview, M as assertFullSignalIdArgument, N as assertValidSpaceIdTarget, O as resolveLinkAccessLabel, P as prepareAuthenticatedSpaceCommandContext, Q as createProfileByKind, R as prepareLocalAgentReadiness, S as loadSpaceSignalIndexOrNull, T as buildFormalSignalReadPayload, U as colorizeAgentLabel, V as persistAgentTransportSelection, W as colorizeDisplayProfileLabel, X as resolveSpaceSendText, Y as renderOpenMeldTagline, Z as resolveSpaceTaskSelection, _ as runSpaceWriteWithPasswordRetry, a as runSpaceDelete, b as buildIdentityOnlyMembersSnapshotForReadProjection, c as runSpaceLeave, d as runSpaceRemoveMembers, et as resolveCreateProfileName, f as runSpaceSend, g as runSpaceReadWithPasswordRetry, h as uploadPreparedSpaceFiles, i as runSpaceCreate, j as isSpaceCommandOutputHandledError, k as resolveOrganizationVisibilityLabel, l as runSpaceList, m as prepareRequestedSpaceSendFiles, n as promptAndConfirmSpacePassword, nt as assessActionParticipationCandidate, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldHeader, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, tt as ensureAgentProfileRuntimeBinding, u as runSpacePassword, v as buildHumanReadSignalsTranscriptItems, w as buildFormalDispatchResultReadPayload, x as loadSpaceIdentityDirectoryOrNull, y as emitHumanReadSignalsTextProjection, z as buildReplyReadinessGuidance } from "./command-Bz9x7V2T.js";
-import { a as areAllowedActionsEquivalent, p as canonicalizeAllowedActions, r as SPACE_CONTRACT_ALLOWED_ACTION_ORDER, s as buildAgentFacingPublicationModeGuideLines, t as OPENMELD_AGENT_MENTAL_MODEL_LINES } from "./dist-B2EauBG6.js";
-import { C as readAgentActivityOutboxHealth, Dt as upsertSpaceConfig, Ft as buildSignalMessageReadProjection, Mt as buildDispatchResultReplyWorkflowProjection, Nt as buildPublicSpaceEntryUrl, Pt as buildSignalIndex, T as removeProjectOutbox, Ut as buildUpdatesReplyWorkflowProjection, Vt as buildSpaceRoundReadProjection, Zt as formatRemovedCcRelationMessage, et as readRecentDaemonDispatchJournalEvents, g as readCodexSessionTitles, gt as inspectSpaceCacheFile, h as normalizeSharedSessionTitle, jt as buildDispatchResultMessageReadProjection, m as resolveObservedAgentActivityBinding, p as buildAgentActivityEvent, qt as createSpaceMemberIdentityIndex, v as enqueueAgentActivityHookEvent, y as removeProjectInbox } from "./daemon-frame-transport-D2-tazuK.js";
-import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-D7uE_xTo.js";
+import { At as ensureOpenMeldManagedProfileWorkspace, C as createModelCatalogReadSession, E as resolveProfileWorkspaceRuntime, Et as listBuiltinAgentsRegistryEntries, I as listAgentTargetStates, It as setCustomProfileWorkspace, K as notifyDaemonRouteCatalogChanged, Lt as setOpenMeldManagedProfileWorkspace, Mt as readProfileWorkspaceConfig, Nr as compareAgentControllerRefsForDisplay, O as syncDeviceRuntimeStateProjection, Pt as resolveConfiguredProfileWorkspacePath, Q as resolveLocalRegistryAgentIdFromAgentControllerRef, Rt as validateCustomProfileWorkspacePath, S as syncProfileWorkspaceState, Sr as resolveNativeAgentControllerPermissionModeForController, St as canonicalizeLocalProjectPath, _t as removeProjectConnection, br as resolveAgentProfileEditCapabilities, bt as setDefaultProjectConnection, fr as listAgentControllerPermissionModeOptions, ft as listProjectBindings, hr as projectPeopleComputersToLegacyLocalRuntimes, j as resolveAgentProfilePrimaryAgentControllerReport, jt as normalizeCustomProfileWorkspacePath, k as createPrimaryBindingReadSession, lr as getAgentControllerPermissionModeDisplayMetadata, mr as peopleComputerContainsDevice, mt as migrateProjectBindingStore, pr as parseAgentControllerRef, pt as listProjectConnectionsWithStatus, sr as createAgentExecutionStatusDisplayRows, ur as getAgentControllerPermissionModeFieldLabel, ut as bindProject, vr as resolveAgentControllerPermissionModeForController, xr as resolveEvidenceSyncHealth, xt as unbindProject, yr as resolveAgentExecutionStatus, yt as runIfAgentActivityBindingGenerationIsCurrent, zt as describeProfileWorkspacePathValidationFailure } from "./prepare-provider-runtime-MB-BxOgt.js";
+import { $t as isSpaceFileTextEditable, An as spaceContractSchema, Bt as centerAgentInteractionSourceSchema, Gt as spaceWorkSelectionSchema, Jt as SPACE_FILE_MAX_SIZE_BYTES, Kr as START_BOUNDED_ID_SCHEMA, Kt as spaceWorkingCopyResultSchema, Tn as spaceThreadContextSchema, Un as messageEnvelopeSchema, Ut as spaceWorkHandoffSchema, Yr as START_TRIMMED_NON_EMPTY_STRING_SCHEMA, Yt as SPACE_FILE_RAW_UPLOAD_MAX_BYTES, _r as runtimeTransportAdmissionEvidenceSchema, di as openMeldRequestContextSchema, fr as clientMessageIdSchema, in as resolveSpaceFileMimeType, kn as spaceContractFieldsSchema, lr as agentInteractionResponseSchema, ui as openMeldProfileIdSchema, zt as spaceStatusSchema } from "./runtime-transport-YIYHSJPn.js";
+import { C as updateAuthSessionActiveOrganization, T as runMacOsNativeKeychainHelperIfRequested, a as beginAuthSessionTransition, d as getAuthSessionState, f as getCurrentAuthOwnerUserId, g as normalizeStoredActiveOrganization, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, s as clearAuthSession, t as AuthSessionChangedBeforeTransitionError, u as getAuthSessionMetadata } from "./auth-session-uEk_Tx6T.js";
+import { L as nonEmptyTrimmedStringFromUnknown, O as openMeldRuntimeProfileIdSchema, w as dispatchExecutionSchema, z as trimmedStringFromUnknown } from "./control-plane-rTE2rHZ5.js";
+import { t as computerConnectionIntentSchema } from "./computer-connection-Dm7iTnRK.js";
+import { d as readSelectedSkillDocument, r as ensureLocalSkills } from "./state-GxF_KAM1.js";
+import { $ as buildAuthStatusSnapshot, B as resolveDaemonServiceParticipationStatus, C as buildProfileWorkspaceRows, E as emitDaemonAgentOverview, F as emitCliJsonEnvelope, G as ensureCommandAuthenticationOrCancel, H as validateLocalProjectConnectionPath, I as runDaemonStartupPreflight, J as runAuthLogout, K as evaluateCommandAuthentication, M as buildHumanErrorCopy, N as renderHumanErrorCard, O as shouldEmitAgentOverview, P as renderHumanTextErrorCard, Q as buildAuthStatusRows, R as resolveLocalComponentsStatus, S as buildProfileWorkspacePresentation, V as LocalProjectConnectionError, W as buildCommandAuthenticationPromptMessage, X as runAuthStatus, Y as runAuthMenu, Z as exchangeOneTimeTokenAuthSession, a as runDaemonBackgroundStartForDecision, at as promptTextEntry, c as runDaemonInterrupt, ct as finishCurrentCommandCheckScope, dt as resetCurrentCommandCheckState, et as formatActiveOrganizationLabel, f as runDaemonSnapshot, ft as startCurrentCommandCheckScope, g as runDaemonUninstall, h as runDaemonTeardownStrict, i as runDaemonAutostart, j as runDaemonStartDecisionPrompt, l as runDaemonReinstall, lt as getCurrentCommandCheckState, m as runDaemonStop, n as isManagedSystemServiceBootstrapRun, nt as renderInfoCard, o as runDaemonCancel, ot as isReturnKeypress, p as runDaemonStatusFlow, q as runAuthLogin, r as runDaemon, rt as renderTextInfoCard, s as runDaemonInstall, st as runInteractivePrompt, t as bestEffortStopCurrentLaneDaemonService, u as runDaemonRunAfterEntryChecks, ut as isCurrentCommandCheckScopeActive, w as reconcileCliVersionView, x as resolveServiceParticipationReadiness, y as formatServiceParticipationReadinessLabel, z as writeInstalledLocalComponentsSnapshot } from "./service-Dz2MsvGr.js";
+import { C as readAgentActivityOutboxHealth, Cn as cliJsonSkillsLoadEnvelopeSchema, Dn as organizationJoinLinkErrorResponseSchema, Dt as upsertSpaceConfig, En as getOrganizationJoinLinkResponseSchema, Ft as buildSignalMessageReadProjection, Mt as buildDispatchResultReplyWorkflowProjection, Nt as buildPublicSpaceEntryUrl, On as organizationJoinLinkManagementQuerySchema, Pt as buildSignalIndex, Sn as cliJsonSkillsListEnvelopeSchema, T as removeProjectOutbox, Tn as acceptOrganizationJoinLinkBodySchema, Ut as buildUpdatesReplyWorkflowProjection, Vt as buildSpaceRoundReadProjection, Zt as formatRemovedCcRelationMessage, et as readRecentDaemonDispatchJournalEvents, g as readCodexSessionTitles, gt as inspectSpaceCacheFile, h as normalizeSharedSessionTitle, jt as buildDispatchResultMessageReadProjection, kn as revokeOrganizationJoinLinkResponseSchema, m as resolveObservedAgentActivityBinding, p as buildAgentActivityEvent, qt as createSpaceMemberIdentityIndex, v as enqueueAgentActivityHookEvent, wn as cliJsonSkillsShowEnvelopeSchema, xn as cliJsonOutputEnvelopeSchema, y as removeProjectInbox } from "./daemon-frame-transport-WiB73yhT.js";
+import { A as readControllerTaskLifecycleOutboxHealth, B as uninstallAgentActivityIntegrations, D as readAgentActivityContextForPath, I as defaultManagedIntegrationPaths, L as installAgentActivityIntegrations, M as registerAgentActivityRoute, N as resolveAgentActivityRouteForPath, O as removeAgentActivityContextCache, P as unregisterAgentActivityRoute, R as readAgentActivityIntegrationStatus, a as fetchSpaceUpdates, c as materializeOrganizationSkillRelease, d as runSpaceActionHelp, f as runSpaceActionReply, g as runSpaceActionWake, h as runSpaceActionTargets, j as isAgentActivityRouteRegistered, k as enqueueControllerTaskLifecycleEventWhileLocked, m as runSpaceActionStatus, o as createSpaceWorkingCopies, p as runSpaceActionSilent, s as downloadWorkingCopyFile, t as readRuntimeReportingHealthState, u as runSpaceActionMcpServer, w as syncLocalAgentActivity, z as resolveAgentActivityDispatcherCommand } from "./runtime-reporting-health-state-DA-_vW-n.js";
+import { G as readManagedCliInstallation, H as buildInstallSelfJsonPayload, U as performManagedInstall, r as readCurrentDaemonRuntimeContext } from "./daemon-service-runtime-CBJtgM4P.js";
+import { B as requireOpenMeldProfile, H as createOpenMeldAgentProfile, J as resolveOpenMeldProfile, K as listOpenMeldProfiles, U as createOpenMeldHumanProfile, V as resolveOpenMeldProfileOrNull, W as deleteOpenMeldProfile, X as updateOpenMeldProfile, at as buildAgentAuthenticationGuide, ct as buildHumanAuthenticationCard, dt as resolveAuthenticationGuidance, et as alignSelectedOpenMeldProfileStorage, ft as resolveAuthenticationGuidanceFromError, it as setSelectedOpenMeldProfileId, lt as createAuthenticationError, nt as clearSelectedOpenMeldProfileId, pt as resolveAuthenticationGuidanceFromMessage, q as primeOpenMeldProfilesSessionCache, rt as getSelectedOpenMeldProfileId, z as isSelectedOpenMeldProfileRequiredError } from "./daemon-device-id-B1Af2Zmn.js";
+import { a as activateWindowsManagedCommand } from "./process-identity-BQLdaZdB.js";
+import { A as formatDeviceReplyReadinessLabel, B as resolveGatewayChainReadiness, Bt as assessCliUpdate, It as assessServerRequiredVersion, J as getSetupFlowCopy, K as buildDaemonRouteObservationPresentation$1, Mt as classifyDaemonServiceRunStartability, N as mapAgentReplyReadinessToLegacyAutoReply, Nt as classifyDaemonServiceWakeability, O as resolveCurrentReplyReadinessSnapshot, Pt as resolveCurrentDaemonExpectedVersion, T as resolveDaemonServiceFreshnessWarning, U as resolveOpenClawLocalDiagnosticsValue, Vt as isCliUpdateCheckApplicable, _ as resolveServiceReadinessFromServiceStatus, ft as inspectDaemonServiceInventory, j as formatHumanReplyReadinessReason$1, k as formatAgentReplyReadinessLabel, q as buildOnboardingPlan, t as runPendingDaemonServiceUpdate, zt as readCurrentLocalDeviceId } from "./daemon-service-update-coordinator-0LB_XGVZ.js";
+import { $ as ensureAgentProfileRuntimeBinding, A as assertFullSignalIdArgument, B as resolveAgentProfileSetup, C as buildFormalSignalReadPayload, D as resolveOrganizationVisibilityLabel, E as resolveLinkAccessLabel, F as emitSpaceCliAgentOverview, G as renderOpenMeldHeader, H as colorizeDisplayProfileLabel, I as prepareLocalAgentReadiness, J as resolveSpaceSendText, K as renderOpenMeldLogo, L as buildReplyReadinessGuidance, M as prepareAuthenticatedSpaceCommandContext, N as resolveOpenMeldProfileForSpaceCommand, O as parseEnvelope, P as emitSpaceAgentOverview, Q as resolveCreateProfileName, R as resolveHumanControllerDisplayName, S as buildFormalDispatchResultReadPayload, T as formatHumanReadTargetList, U as printOpenMeldBanner, V as colorizeAgentLabel, W as renderOpenMeldBrandBlockLines, X as createProfileByKind, Y as resolveSpaceTaskSelection, Z as resolveCreateProfileKind, _ as emitHumanReadSignalsTextProjection, a as runSpaceDelete, b as loadSpaceSignalIndexOrNull, c as runSpaceLeave, d as runSpaceRemoveMembers, et as assessActionParticipationCandidate, f as runSpaceSend, g as buildHumanReadSignalsTranscriptItems, h as runSpaceWriteWithPasswordRetry, i as runSpaceCreate, j as assertValidSpaceIdTarget, k as isSpaceCommandOutputHandledError, l as runSpaceList, m as runSpaceReadWithPasswordRetry, n as promptAndConfirmSpacePassword, o as runSpaceHistory, p as runSpaceWatch, q as renderOpenMeldTagline, r as runSpaceAddMembers, s as runSpaceJoin, t as buildCreateSpacePasswordPromptConfig, u as runSpacePassword, v as buildIdentityOnlyMembersSnapshotForReadProjection, w as buildHumanReplyContextSummary, x as toSpaceMetaUpsertInput, y as loadSpaceIdentityDirectoryOrNull, z as persistAgentTransportSelection } from "./command-CQ9XRwqf.js";
+import { f as canonicalizeAllowedActions, i as areAllowedActionsEquivalent, o as buildAgentFacingPublicationModeGuideLines, t as OPENMELD_AGENT_MENTAL_MODEL_LINES } from "./dist-YbTZ-Y-2.js";
+import { E as updateConfiguredStartV1OnboardingState, S as setConfiguredSkillsConfig, a as resolveBaseUrl, b as setConfiguredBaseUrl, c as resolveExplicitGatewayUrlOrThrow, g as getConfiguredSkillsConfig, m as getConfiguredOnboardingDisclaimerAcceptedAt, o as resolveBaseUrlOrNull, u as alignRuntimeConfigStorage, w as updateConfiguredOnboardingConfig } from "./base-url-DvjOkKPs.js";
 import { n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
-import { A as getDaemonStatus } from "./daemon-state-B44aq2nm.js";
-import { i as readDaemonServiceContract } from "./daemon-service-contract-BpOBMGX0.js";
+import { A as getDaemonStatus } from "./daemon-state-Ca0WK5x0.js";
+import { i as readDaemonServiceContract } from "./daemon-service-contract-GLmAxsq-.js";
 import { a as formatOpenMeldCliTextBlock, c as resolveSetupFollowUpCliEntryCommand, i as formatOpenMeldCliLine, l as resolveUserFacingCliEntryCommand, n as formatOpenMeldCliCommand, r as formatOpenMeldCliCommands, s as formatProfileAwareOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
-import { r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-B6HqY0_a.js";
-import { r as runServiceAccountCarrier } from "./service-account-authorization-DKpIpxXo.js";
-import { b as requestLocalAgentActivitySync, d as compareSemver, f as ensureVersionStateReady, l as OPENMELD_VERSION, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DyKx1xzm.js";
-import { a as requireOpenMeldProfile, d as setSelectedOpenMeldProfileId, f as getProfileDefaultView, i as isSelectedOpenMeldProfileRequiredError, l as clearSelectedOpenMeldProfileId, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull, p as setProfileDefaultView, r as resolveViewProfileKey, s as alignSelectedOpenMeldProfileStorage, t as parseCliViewMode, u as getSelectedOpenMeldProfileId } from "./context-l_31Mn4X.js";
-import { a as outJsonLine, i as errLine, n as sanitizeTerminalDisplayText, o as outLine, r as formatMessage, t as createPresenter } from "./presenter-BcxiQyJg.js";
-import { Ct as formatDualViewGuideForDisplay, D as createSpaceContractSetGuideError, E as createSpaceAliasTargetGuideError, J as createStartAuthenticationGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, P as createSpacePublicationSetGuideError, R as createSpaceResultGuideError, S as createResetConfirmationGuideError, St as DualViewGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, W as createSpaceTargetGuideError, Z as getCommandHintsFromContract, b as createProfileCreateGuideError, ct as registerSkillsTargetSelectionOptions, dt as getCliVersionInfo, et as registerSpaceMemberSelectionOptions, ft as registerDaemonControlTargetOptions, g as canUseInteractivePrompts, j as createSpaceLeaveGuideError, mt as registerAuthLoginRequestOptions, q as createStartAgentIdentityGuideError, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, v as createDoctorFailedGuideError, wt as buildDualViewGuideMessage, x as createProfileMenuGuideError, y as createProfileActionGuideError, yt as registerBuiltinAgentSelectionOptions } from "./elapsed-time-Ooo4IC25.js";
-import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-DnJ_JYli.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-DThnBEhV.js";
-import { t as runServiceAccountControl } from "./service-account-control-CCPQAZzn.js";
-import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-CkDxstsf.js";
-import { C as resolveGatewayWebOrigin, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, a as runAgentsCustomRemove, c as runAgentsDisable, d as runAgentsManage, f as runAgentsRepair, h as promptSearchMultiselect, i as runAgentsCustomList, l as runAgentsEnable, m as formatTransportModeDisplay, n as runAgentsConfig, o as runAgentsCustomUpdate, p as runAgentsShow, r as runAgentsCustomAdd, s as runAgentsDetect, t as runAgents, u as runAgentsList, w as resolveSpaceWebGatewayOrigin } from "./agents-B8zhQnGw.js";
-import { n as submitProfileRuntimeAgentControllerReport, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-BUUub9_1.js";
-import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-D5FxGbh1.js";
-import { _ as readDispatchSpaceActionContextForReceiptFromEnv, c as readGatewayTextResponse, d as assertDispatchOwnedRuntimePublicWriteAllowed, l as toStructuredGatewayFailure, m as DispatchSpaceActionClosedError, n as fetchSpaceMeta, p as readDispatchOwnedRuntimeGuard, r as updateSpaceMeta, s as readGatewayJsonResponse, t as createCliSpaceApi, u as parseJsonResponse, v as readDispatchSpaceActionContextFromEnv, x as writeDispatchSpaceActionRecord } from "./cli-space-api-CQtKu9Zt.js";
+import { r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-BBn5Ko6p.js";
+import { r as runServiceAccountCarrier } from "./service-account-authorization-DZbUOD29.js";
+import { b as requestLocalAgentActivitySync, d as compareSemver, f as ensureVersionStateReady, l as OPENMELD_VERSION, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-CDZLWgMj.js";
+import { a as setProfileDefaultView, i as getProfileDefaultView, n as resolveRuntimeContext, r as resolveViewProfileKey, t as parseCliViewMode } from "./context-Bdh3nAzw.js";
+import { n as outJsonLine, r as outLine, t as errLine } from "./io-DT66typ4.js";
+import { n as sanitizeTerminalDisplayText, r as formatMessage, t as createPresenter } from "./presenter-MJ5YgsOT.js";
+import { Ct as formatDualViewGuideForDisplay, D as createSpaceContractSetGuideError, E as createSpaceAliasTargetGuideError, J as createStartAuthenticationGuideError, K as createSpaceUpdatesGuideError, L as createSpaceRemoveMembersGuideError, M as createSpaceMenuGuideError, P as createSpacePublicationSetGuideError, R as createSpaceResultGuideError, S as createResetConfirmationGuideError, St as DualViewGuideError, T as createSpaceAddMembersGuideError, Tt as formatAgentOverviewPayload, U as createSpaceSubcommandTargetGuideError, W as createSpaceTargetGuideError, Z as getCommandHintsFromContract, b as createProfileCreateGuideError, ct as registerSkillsTargetSelectionOptions, dt as getCliVersionInfo, et as registerSpaceMemberSelectionOptions, ft as registerDaemonControlTargetOptions, g as canUseInteractivePrompts, j as createSpaceLeaveGuideError, mt as registerAuthLoginRequestOptions, q as createStartAgentIdentityGuideError, rt as SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS, v as createDoctorFailedGuideError, wt as buildDualViewGuideMessage, x as createProfileMenuGuideError, y as createProfileActionGuideError, yt as registerBuiltinAgentSelectionOptions } from "./elapsed-time-q8lSPcfm.js";
+import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, p as deriveAuthBaseUrlFromGatewayUrl, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-DpVwrgh-.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-C5FsAvrf.js";
+import { t as runServiceAccountControl } from "./service-account-control-DCMOKXDT.js";
+import { C as buildNoLocalAgentsNoticeLines, D as recoverInterruptedComputerAuthHandoff, E as formatComputerAuthCleanupFailureSuffix, O as exchangeComputerAuthorizationGrant, S as buildLocalAgentsGuideUrl, T as emitUnusedSetupSessionCleanupWarning, _ as runStartLocalAgentsEnable, a as assertSetupServiceUpdateComplete, b as submitSelectedAgentControllerReports, c as collectObservedDeviceMetadata, d as collectStartLocalReadiness, f as runSkillsCheck$1, g as runSkillsUpdate, h as runSkillsUninstall, i as runPrepareSessionExecutor, j as writePrepareSessionSetupBootstrapResult, k as revokePreparedAuthSession, l as createSetupProgressReporter, m as runSkillsInstall, n as reportPrepareHandoffStopped, o as shouldForceSetupServiceRefresh, p as runSkillsEnsure, r as resolvePrepareSessionForHandoff, s as syncLocalSetupCurrentDeviceTargetFromServiceContract, t as connectPrepareSessionStream, u as resolveControllingTerminalSession, v as isCliOutputHandledError, w as confirmContinueWithoutLocalAgents, x as appendLocalAgentsGuideUrl, y as assertSelectedAgentControllerReportSubmissionsAccepted } from "./prepare-session-executor-zvSZ6jqy.js";
+import { C as resolveGatewayWebOrigin, T as runDaemonServiceParticipationGate, _ as promptSearchSelect, a as runAgentsCustomRemove, c as runAgentsDisable, d as runAgentsManage, f as runAgentsRepair, h as promptSearchMultiselect, i as runAgentsCustomList, l as runAgentsEnable, m as formatTransportModeDisplay, n as runAgentsConfig, o as runAgentsCustomUpdate, p as runAgentsShow, r as runAgentsCustomAdd, s as runAgentsDetect, t as runAgents, u as runAgentsList, w as resolveSpaceWebGatewayOrigin } from "./agents-CR7BebgO.js";
+import { n as submitProfileRuntimeAgentControllerReport, r as submitRuntimeAgentControllerReport } from "./runtime-agent-controller-reporting-submission-D9ysbi7R.js";
+import { a as runUpgrade, c as OPENMELD_UPGRADE_FAILURE_HINTS, l as OPENMELD_UPGRADE_METADATA_RECOVERY_HINTS, n as isUpgradeOutputHandledError, o as emitTopLevelAgentOverview, s as emitTopLevelCliAgentOverview, t as UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG$1 } from "./upgrade-DfJwCD5H.js";
+import { c as toStructuredGatewayFailure, f as createCliSpaceApi, h as readDispatchOwnedRuntimeGuard, l as parseJsonResponse, n as updateSpaceMeta, o as readGatewayJsonResponse, p as assertDispatchOwnedRuntimePublicWriteAllowed, s as readGatewayTextResponse, t as fetchSpaceMeta, x as readDispatchSpaceActionContextFromEnv } from "./meta-api-B1k3mwHN.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
-import { access, appendFile, mkdir, open, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
+import { appendFile, mkdir, open, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
-import { z } from "zod/v4";
-import { constants, openAsBlob, readFileSync, realpathSync } from "node:fs";
+import { openAsBlob, realpathSync } from "node:fs";
 import process$1 from "node:process";
 import { execFile, spawn } from "node:child_process";
-import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { promisify } from "node:util";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import pc from "picocolors";
 import { cancel, confirm, intro, isCancel, multiselect, note, outro, select, spinner, text } from "@clack/prompts";
-import { performance } from "node:perf_hooks";
 import { Command, Option } from "commander";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 //#region ../../packages/schemas/dist/organization-join-request.js
 const id$1 = z$1.string().trim().min(1).max(255);
 const organizationJoinRequestSchema = z$1.strictObject({
@@ -360,9 +358,7 @@ const spaceBoardResponseSchema = z$1.strictObject({
 	workingNow: z$1.array(spaceBoardWorkingExecutionSchema),
 	recentOutcomes: z$1.array(spaceBoardRecentOutcomeSchema).max(10)
 });
-//#endregion
-//#region ../../packages/schemas/dist/schemas/http/space-contract.js
-const patchSpaceContractBodySchema = spaceContractFieldsSchema.pick({
+const patchSpaceContractBodySchema = spaceContractFieldsSchema.extend({ allowedActions: spaceContractFieldsSchema.shape.allowedActions.transform((actions) => actions.filter((action) => action !== "post_status")).refine((actions) => actions.length > 0, { message: "The status tool is retired. Choose reply (post_message), stay_silent, or both; no replacement permission is granted automatically." }) }).pick({
 	dispatchPolicy: true,
 	publicationMode: true,
 	allowedActions: true,
@@ -503,50 +499,6 @@ z$1.strictObject({
 });
 const getSpaceDispatchResultResponseSchema = dispatchResultSchema;
 //#endregion
-//#region ../../packages/schemas/dist/schemas/space-mesh/dispatch-space-action-receipt.js
-const dispatchSpaceActionClosedReasonCodeSchema = z$1.enum(["space_action.context_expired", "space_action.context_mismatch"]);
-const dispatchSpaceActionReceiptSchema = z$1.discriminatedUnion("status", [
-	z$1.strictObject({
-		status: z$1.literal("proposal_saved_locally"),
-		actionType: z$1.enum([
-			"post_message",
-			"post_status",
-			"stay_silent"
-		]),
-		attemptId: z$1.string().min(1),
-		contextId: z$1.string().min(1),
-		dispatchId: z$1.string().min(1),
-		recordedAtMs: z$1.number().int().nonnegative(),
-		contextState: z$1.enum(["active", "expired"]),
-		coordinatorAcceptance: z$1.literal("unconfirmed"),
-		publication: z$1.literal("unconfirmed")
-	}),
-	z$1.strictObject({
-		status: z$1.literal("rejected_closed"),
-		reasonCode: dispatchSpaceActionClosedReasonCodeSchema,
-		coordinatorAcceptance: z$1.literal("unconfirmed"),
-		publication: z$1.literal("unconfirmed")
-	}),
-	z$1.strictObject({
-		status: z$1.literal("outcome_unknown"),
-		reasonCode: z$1.literal("space_action.recording_outcome_unknown"),
-		coordinatorAcceptance: z$1.literal("unconfirmed"),
-		publication: z$1.literal("unconfirmed")
-	})
-]);
-const dispatchSpaceActionToolResultSchema = z$1.strictObject({ receipt: dispatchSpaceActionReceiptSchema });
-//#endregion
-//#region ../../packages/schemas/dist/schemas/space-mesh/dispatch-space-history.js
-const dispatchSpaceHistoryRequestSchema = z$1.strictObject({});
-const dispatchSpaceHistoryResultSchema = z$1.strictObject({
-	spaceId: z$1.string().min(1),
-	sourceSignalId: z$1.string().min(1),
-	beforeCount: z$1.literal(20),
-	afterCount: z$1.literal(0),
-	signals: z$1.array(z$1.record(z$1.string(), z$1.unknown())).max(21),
-	nextCursor: z$1.string().min(1).nullable()
-});
-//#endregion
 //#region ../../packages/schemas/dist/space-invitation.js
 const id = z$1.string().trim().min(1).max(200);
 const spaceInvitationRequestSchema = z$1.discriminatedUnion("action", [
@@ -8884,6 +8836,13 @@ function getManagedCliCommandActivationNotice(activation) {
 async function activateManagedCliCommand(input) {
 	const env = input.env ?? process.env;
 	if (resolveOpenMeldEnvPreset({ env }) !== "prod" || normalizeOptionalText$5(env["OPENMELD_HOME"])) return { status: "not_applicable" };
+	if (process.platform === "win32") return await withManagedCliCommandActivationLock({
+		env,
+		run: async () => ({
+			status: await activateWindowsManagedCommand(openMeldBinDir({ env })),
+			registryPath: "HKEY_CURRENT_USER\\Environment\\Path"
+		})
+	});
 	const home = normalizeOptionalText$5(env.HOME);
 	if (!home) return {
 		shell: normalizeOptionalText$5(env.SHELL),
@@ -9433,7 +9392,7 @@ async function updateAgentProfilePrimaryBindingAgentControllerPermissionMode(inp
 //#region src/system/agent-profile-binding-model-selection.ts
 async function updateAgentProfilePrimaryBindingModelSelection(input) {
 	const api = createAgentProfileBindingApi(createCliApiClientFoundation(await resolveBaseUrl()));
-	const modelId = normalizeRequiredText$1(input.modelId, "--model is required.");
+	const modelId = normalizeRequiredText(input.modelId, "--model is required.");
 	const reasoningLevel = normalizeOptionalText$4(input.reasoningLevel);
 	return await api.updatePrimaryBindingModelSelection({
 		agentProfileId: input.profile.openMeldProfileId,
@@ -9442,7 +9401,7 @@ async function updateAgentProfilePrimaryBindingModelSelection(input) {
 		...reasoningLevel ? { reasoningLevel } : {}
 	});
 }
-function normalizeRequiredText$1(value, message) {
+function normalizeRequiredText(value, message) {
 	const normalized = normalizeOptionalText$4(value);
 	if (!normalized) throw new Error(message);
 	return normalized;
@@ -12110,6 +12069,7 @@ async function runServiceTrace(input, deps = {}) {
 	const evidenceSyncHealth = agentExecutionStatus ? buildServiceTraceEvidenceSyncHealth({ projection: agentExecutionStatus }) : null;
 	const daemonDispatchJournal = resolveDaemonDispatchJournalEvidence(selection.dispatchId);
 	const agentSummary = buildAgentTraceCompactSummary({ trace: traceResponse.trace });
+	const admissionRejections = resolveAdmissionRejections(traceResponse.trace);
 	const traceReadinessGuidance = shouldExposeCurrentReadinessGuidance(traceResponse.trace) ? targetContext.guidance : null;
 	const payload = {
 		...traceResponse.serviceConnectionDiagnostics ? { serviceConnectionDiagnostics: traceResponse.serviceConnectionDiagnostics } : {},
@@ -12140,6 +12100,7 @@ async function runServiceTrace(input, deps = {}) {
 		},
 		currentProfileWorkspace: targetContext.currentProfileWorkspace,
 		agentSummary,
+		admissionRejections,
 		guidance: traceReadinessGuidance
 	};
 	if (runtime.resolvedView === "agent") {
@@ -12157,6 +12118,7 @@ async function runServiceTrace(input, deps = {}) {
 				targetProfile: payload.targetProfile,
 				projectFailureContext: traceResponse.trace?.resultInbox?.projectFailureContext ?? null,
 				agentSummary,
+				admissionRejections,
 				diagnosticSummary: buildAgentTraceSummary({
 					dispatchId: traceResponse.query.dispatchId,
 					trace: traceResponse.trace
@@ -13036,6 +12998,20 @@ function parseRuntimeCoordinatorEventPayload(event) {
 		return null;
 	}
 }
+function resolveAdmissionRejections(trace) {
+	return (trace?.runtimeCoordinatorEvents ?? []).filter((event) => event.eventType === "delivery_rejected").slice(-10).map((event) => {
+		const routeEvidence = parseRuntimeCoordinatorEventPayload(event)?.deliveryRouteEvidence;
+		const route = routeEvidence && typeof routeEvidence === "object" && !Array.isArray(routeEvidence) ? routeEvidence : null;
+		const parsed = runtimeTransportAdmissionEvidenceSchema.safeParse(route?.admissionEvidence);
+		return {
+			observedAtMs: event.observedAtMs,
+			rejectionReasonCode: event.reasonCode,
+			acceptingDispatches: route?.acceptingDispatches ?? "unknown",
+			admissionEvidence: parsed.success ? parsed.data : null,
+			evidenceStatus: parsed.success ? "reported" : "not_reported"
+		};
+	});
+}
 function readRuntimeCoordinatorPayloadString(payload, fieldName) {
 	const value = payload?.[fieldName];
 	return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
@@ -16263,7 +16239,7 @@ function isFlowResult(value) {
 }
 //#endregion
 //#region src/commands/uninstall.ts
-const execFileAsync$1 = promisify(execFile);
+const execFileAsync = promisify(execFile);
 const UNINSTALL_INTERNAL_SAFE_VALIDATION_FLAG = "--internal-safe-validation";
 async function runUninstall(input) {
 	const runtime = await resolveRuntimeContext({ view: input.view });
@@ -16590,7 +16566,7 @@ function resolvedKeepAction() {
 }
 async function resolveProductionCliInstallSource() {
 	const npmCommand = process.platform === "win32" ? "npm.cmd" : "npm";
-	const npmGlobalRootPath = await execFileAsync$1(npmCommand, ["root", "-g"], { encoding: "utf8" }).then((result) => String(result.stdout ?? "").trim()).catch(() => "");
+	const npmGlobalRootPath = await execFileAsync(npmCommand, ["root", "-g"], { encoding: "utf8" }).then((result) => String(result.stdout ?? "").trim()).catch(() => "");
 	return inferProductionCliInstallSourceFromPaths({
 		cliScriptPath: process.argv[1],
 		npmGlobalRootPath
@@ -17611,11 +17587,12 @@ async function resolveManagedCliDelegation(input) {
 		env,
 		argv: input.argv
 	}) !== "prod" || normalizeOptionalText$2(env["OPENMELD_HOME"]) || env[MANAGED_CLI_DELEGATION_ENV] === "1" || isServiceCarrierCommand(firstCommand, secondCommand) || args.includes(UPGRADE_INTERNAL_ALIGN_SERVICE_FLAG)) return { status: "stay" };
-	const managed = await resolveUsableManagedCli({
+	const managed = await readManagedCliInstallation({
 		env,
 		argv: input.argv
 	});
 	if (!managed) return { status: "stay" };
+	const managedPath = await realpath(managed.binaryPath);
 	let versionComparison;
 	try {
 		versionComparison = compareSemver(managed.version, input.currentVersion);
@@ -17624,13 +17601,13 @@ async function resolveManagedCliDelegation(input) {
 	}
 	if (versionComparison >= 0) return {
 		args,
-		command: managed.path,
+		command: managedPath,
 		reason: "managed_cli_is_current",
 		status: "delegate"
 	};
 	if (firstCommand === "upgrade") return {
 		args,
-		command: managed.path,
+		command: managedPath,
 		reason: "managed_cli_upgrade_owns_channel",
 		status: "delegate"
 	};
@@ -17655,18 +17632,6 @@ async function runManagedCliDelegation(delegation, env = process.env) {
 		});
 	});
 }
-async function resolveUsableManagedCli(input) {
-	const resolvedPath = await realpath(openMeldManagedBinaryPath(input)).catch(() => null);
-	if (!resolvedPath) return null;
-	if (!(await stat(resolvedPath).catch(() => null))?.isFile()) return null;
-	if (!await access(resolvedPath, constants.X_OK).then(() => true, () => false)) return null;
-	const version = basename(dirname(resolvedPath));
-	if (!version) return null;
-	return await realpath(openMeldManagedVersionBinaryPath(version, input)).catch(() => null) === resolvedPath ? {
-		path: resolvedPath,
-		version
-	} : null;
-}
 function isServiceCarrierCommand(firstCommand, secondCommand) {
 	return (firstCommand === "service" || firstCommand === "daemon") && secondCommand === "run";
 }
@@ -23149,897 +23114,6 @@ async function runSpaceAccess(input) {
 	});
 }
 //#endregion
-//#region src/space/action-command.ts
-const FINAL_SAFE_STATUSES = /* @__PURE__ */ new Set([
-	"blocked",
-	"done",
-	"handoff",
-	"needs_input"
-]);
-const DISPATCH_ACTION_CLI_PLACEHOLDER = "<DISPATCH_ACTION_CLI>";
-const SPACE_ACTION_REPLY_TIMING_EVENT = "openmeld.space_action.reply_timing";
-function runSpaceActionReply(input) {
-	const text = resolveReplyMessageText(input);
-	const result = recordDispatchSpaceReply({
-		filePaths: input.filePaths,
-		messagePartCount: input.messageParts.length,
-		mentionTargets: input.mentionTargets,
-		referenceTargets: input.referenceTargets,
-		text,
-		wakeTargets: input.wakeTargets
-	});
-	if (result instanceof Promise) return result.then((record) => {
-		emitActionRecorded(record);
-	});
-	emitActionRecorded(result);
-}
-function recordDispatchSpaceReply(input) {
-	const timing = createSpaceActionReplyTiming();
-	timing.emit("command_start", void 0, {
-		messagePartCount: input.messagePartCount ?? 0,
-		mentionTargetCount: input.mentionTargets?.length ?? 0,
-		referenceTargetCount: input.referenceTargets?.length ?? 0,
-		wakeTargetCount: input.wakeTargets?.length ?? 0
-	});
-	const filePaths = input.filePaths ?? [];
-	if (filePaths.length && input.files?.length) throw new Error("Choose uploaded paths or saved file revisions for this reply.");
-	const context = filePaths.length > 0 ? readDispatchSpaceActionContextFromEnv() : readDispatchSpaceActionContextForReceiptFromEnv();
-	timing.emit("context_ready", context);
-	assertAllowedAction(context, "post_message");
-	const text = normalizeRequiredText(input.text, "Reply message is required.");
-	const targetIds = resolveMessageEnvelopeTargetIds({
-		context,
-		mentionTargets: input.mentionTargets ?? [],
-		wakeTargets: input.wakeTargets ?? [],
-		referenceTargets: input.referenceTargets ?? []
-	});
-	timing.emit("targets_resolved", context, {
-		activationTargetCount: targetIds.activationTargets.length,
-		messageLength: text.length,
-		mentionTargetCount: targetIds.mentionTargets.length,
-		referenceTargetCount: targetIds.referenceTargets.length
-	});
-	if (filePaths.length === 0) return writeSpaceActionReplyRecord({
-		context,
-		files: input.files ? [...input.files] : [],
-		targetIds,
-		text,
-		timing
-	});
-	return uploadAndRecordSpaceActionReply({
-		context,
-		filePaths,
-		targetIds,
-		text,
-		timing
-	});
-}
-function resolveReplyMessageText(input) {
-	const hasInlineMessage = input.messageParts.length > 0;
-	const messageFilePath = input.messageFilePath?.trim();
-	if (hasInlineMessage && messageFilePath) throw new Error("Choose either a reply message or --message-file, not both.");
-	if (!messageFilePath) return normalizeRequiredJoinedText(input.messageParts, "Reply message is required.");
-	return normalizeRequiredText(readFileSync(messageFilePath === "-" ? 0 : messageFilePath, { encoding: "utf8" }), "Reply message is required.");
-}
-async function uploadAndRecordSpaceActionReply(input) {
-	const files = await uploadSpaceActionReplyFiles({
-		context: input.context,
-		filePaths: input.filePaths
-	});
-	return writeSpaceActionReplyRecord({
-		...input,
-		files
-	});
-}
-function writeSpaceActionReplyRecord(input) {
-	const record = recordAction({
-		action: {
-			type: "post_message",
-			...input.files.length > 0 ? { files: [...input.files] } : {},
-			messageEnvelope: {
-				activationTargets: input.targetIds.activationTargets,
-				mentionTargets: input.targetIds.mentionTargets,
-				referenceTargets: input.targetIds.referenceTargets,
-				...input.context.replyToSignalId ? { replyToSignalId: input.context.replyToSignalId } : {},
-				text: input.text
-			}
-		},
-		command: "reply",
-		context: input.context
-	});
-	input.timing.emit("record_written", input.context, { actionType: record.action.type });
-	input.timing.emit("done", input.context, { actionType: record.action.type });
-	return record;
-}
-async function uploadSpaceActionReplyFiles(input) {
-	const prepared = await prepareRequestedSpaceSendFiles({ filePaths: input.filePaths });
-	if (prepared.length === 0) return [];
-	return await uploadPreparedSpaceFiles({
-		files: prepared,
-		requestContext: buildOpenMeldRequestContextFromProfile({ openMeldProfile: await requireOpenMeldProfile({
-			openMeldProfileId: input.context.targetProfileId,
-			persistSelection: false,
-			authAction: "sharing files in a Space reply"
-		}) }),
-		spaceApi: createCliSpaceApi(await resolveBaseUrl()),
-		spaceId: input.context.spaceId
-	});
-}
-function runSpaceActionWake(input) {
-	const context = readDispatchSpaceActionContextForReceiptFromEnv();
-	assertAllowedAction(context, "post_message");
-	const text = normalizeRequiredJoinedText(input.messageParts, "Wake handoff message is required.");
-	recordAction({
-		action: {
-			type: "post_message",
-			messageEnvelope: {
-				activationTargets: resolveTargetProfileIds({
-					context,
-					relation: "wake",
-					targets: [input.target]
-				}),
-				mentionTargets: [],
-				referenceTargets: [],
-				...context.replyToSignalId ? { replyToSignalId: context.replyToSignalId } : {},
-				text
-			}
-		},
-		command: "wake",
-		context
-	});
-}
-function runSpaceActionStatus(input) {
-	emitActionRecorded(recordDispatchSpaceStatus({
-		status: input.status,
-		text: normalizeRequiredJoinedText(input.textParts, "Status text is required.")
-	}));
-}
-function recordDispatchSpaceStatus(input) {
-	const context = readDispatchSpaceActionContextForReceiptFromEnv();
-	assertAllowedAction(context, "post_status");
-	return recordAction({
-		action: {
-			type: "post_status",
-			status: normalizeStatus(input.status),
-			text: normalizeRequiredText(input.text, "Status text is required.")
-		},
-		command: "status",
-		context
-	});
-}
-function runSpaceActionSilent(input) {
-	emitActionRecorded(recordDispatchSpaceSilent(input));
-}
-function recordDispatchSpaceSilent(input) {
-	const context = readDispatchSpaceActionContextForReceiptFromEnv();
-	assertAllowedAction(context, "stay_silent");
-	return recordAction({
-		action: {
-			type: "stay_silent",
-			reason: normalizeRequiredText(input.reason, "A silent action requires --reason.")
-		},
-		command: "silent",
-		context
-	});
-}
-function runSpaceActionTargets() {
-	const targetReference = requireLoadedTargets(readDispatchSpaceActionContextFromEnv().sendTargetReference);
-	const wakeTargets = targetReference.projection.filter((target) => target.allowedRelations.wake);
-	const referenceTargets = targetReference.projection.filter((target) => target.allowedRelations.reference);
-	const mentionTargets = targetReference.projection.filter((target) => target.allowedRelations.mention);
-	outLine("Wake targets:");
-	if (wakeTargets.length === 0) outLine("- none");
-	else for (const target of wakeTargets) outLine(`- ${formatTargetLine(target, "wake")}`);
-	outLine("");
-	outLine("Mention targets:");
-	if (mentionTargets.length === 0) outLine("- none");
-	else for (const target of mentionTargets) outLine(`- ${formatTargetLine(target, "mention")}`);
-	outLine("");
-	outLine("Reference targets:");
-	if (referenceTargets.length === 0) outLine("- none");
-	else for (const target of referenceTargets) outLine(`- ${formatTargetLine(target, "reference")}`);
-}
-function runSpaceActionHelp() {
-	let context = null;
-	try {
-		context = readDispatchSpaceActionContextFromEnv();
-	} catch {
-		context = null;
-	}
-	outLine("OpenMeld Space Action commands:");
-	outLine(formatSpaceActionHelpExample("Reply", "reply \"message\"", context));
-	outLine(formatSpaceActionHelpExample("Handoff and wake another agent", "wake <agent-profile-id> \"summary and request\"", context));
-	outLine(formatSpaceActionHelpExample("Reply and also wake another agent", "reply --wake <agent-profile-id> \"message\"", context));
-	outLine(formatSpaceActionHelpExample("Reply and reference another agent", "reply --reference <agent-profile-id> \"message\"", context));
-	outLine(formatSpaceActionHelpExample("Reply and mention a person", "reply --mention <human-profile-id> \"message\"", context));
-	outLine(formatSpaceActionHelpExample("Final status", "status done \"short completion update\"", context));
-	outLine(formatSpaceActionHelpExample("Stay silent", "silent --reason \"No public reply is needed.\"", context));
-	outLine(formatSpaceActionHelpExample("Current targets", "targets", context));
-	outLine(formatSpaceActionHelpExample("Help", "help", context));
-	outLine("");
-	outLine("Run exactly one final action for the current Wake. OpenMeld posts the accepted action to the Space.");
-	if (!context) {
-		outLine("");
-		outLine(`No active dispatch context was found. ${DISPATCH_ACTION_CLI_PLACEHOLDER} is a placeholder for the exact Space Action command prefix printed in an OpenMeld Space Wake dispatch prompt.`);
-		outLine("Write actions and targets require an active OpenMeld Space Wake dispatch. Do not guess the command prefix or rewrite it to npx.");
-		return;
-	}
-	outLine("");
-	outLine(`Active dispatch: ${context.dispatchId}`);
-	outLine(`Current target profile: ${context.targetProfileId}`);
-}
-function formatSpaceActionHelpExample(label, action, context) {
-	return `- ${label}: ${formatSpaceActionHelpCommand(action, context)}`;
-}
-function formatSpaceActionHelpCommand(action, context) {
-	if (!context) return `${DISPATCH_ACTION_CLI_PLACEHOLDER} space action ${action}`;
-	return formatOpenMeldCliCommand(`openmeld space action ${action}`);
-}
-function recordAction(input) {
-	return writeDispatchSpaceActionRecord(input);
-}
-function emitActionRecorded(record) {
-	outLine(`Action recorded: OpenMeld saved this unpublished Space action proposal (${record.action.type}) for the current Wake.`);
-}
-function createSpaceActionReplyTiming() {
-	const startedAt = performance.now();
-	let previousAt = startedAt;
-	const commandStartProcessUptimeMs = Math.round(startedAt);
-	return { emit: (phase, context, fields = {}) => {
-		const now = performance.now();
-		const elapsedMs = Math.max(0, Math.round(now - startedAt));
-		const durationMs = Math.max(0, Math.round(now - previousAt));
-		previousAt = now;
-		process.stderr.write(`[${SPACE_ACTION_REPLY_TIMING_EVENT}] ${JSON.stringify({
-			event: SPACE_ACTION_REPLY_TIMING_EVENT,
-			phase,
-			elapsedMs,
-			durationMs,
-			commandStartProcessUptimeMs,
-			attemptId: context?.attemptId ?? null,
-			dispatchId: context?.dispatchId ?? null,
-			spaceId: context?.spaceId ?? null,
-			targetProfileId: context?.targetProfileId ?? null,
-			taskId: context?.taskId ?? null,
-			...fields
-		})}\n`);
-	} };
-}
-function resolveMessageEnvelopeTargetIds(input) {
-	const targets = {
-		activationTargets: resolveTargetProfileIds({
-			context: input.context,
-			relation: "wake",
-			targets: input.wakeTargets
-		}),
-		mentionTargets: resolveTargetProfileIds({
-			context: input.context,
-			relation: "mention",
-			targets: input.mentionTargets
-		}),
-		referenceTargets: resolveTargetProfileIds({
-			context: input.context,
-			relation: "reference",
-			targets: input.referenceTargets
-		})
-	};
-	assertDistinctMessageEnvelopeTargets(targets);
-	return targets;
-}
-function assertDistinctMessageEnvelopeTargets(input) {
-	const seen = /* @__PURE__ */ new Map();
-	const relationTargets = [
-		["wake", input.activationTargets],
-		["reference", input.referenceTargets],
-		["mention", input.mentionTargets]
-	];
-	for (const [relation, profileIds] of relationTargets) for (const profileId of profileIds) {
-		const existingRelation = seen.get(profileId);
-		if (!existingRelation) {
-			seen.set(profileId, relation);
-			continue;
-		}
-		if (existingRelation === relation) throw new Error(`The same target (${profileId}) was listed more than once as ${formatRelation(relation)}. Choose it once, or send separate messages.`);
-		throw new Error(`The same target (${profileId}) cannot be both ${formatRelation(existingRelation)} and ${formatRelation(relation)} in one Space Action. Choose one relationship, or send separate messages.`);
-	}
-}
-function assertAllowedAction(context, actionType) {
-	const allowedActions = context.spaceContractSnapshot?.allowedActions ?? null;
-	if (allowedActions && !allowedActions.includes(actionType)) throw new Error(`This Space does not allow ${actionType}.`);
-}
-function normalizeStatus(value) {
-	const normalized = value.trim().toLowerCase();
-	if (normalized === "working") throw new Error("`working` would close the current Wake. Non-final progress updates are not supported by OpenMeld Space Action yet.");
-	if (normalized === "blocked" || normalized === "done" || normalized === "handoff" || normalized === "needs_input") return normalized;
-	if (!FINAL_SAFE_STATUSES.has(normalized)) throw new Error("Status must be one of: done, blocked, needs_input, handoff.");
-	return normalized;
-}
-function resolveTargetProfileIds(input) {
-	return [...new Set(input.targets)].map((target) => resolveTargetProfileId({
-		context: input.context,
-		relation: input.relation,
-		target
-	}));
-}
-function resolveTargetProfileId(input) {
-	const targetReference = requireLoadedTargets(input.context.sendTargetReference);
-	const query = normalizeRequiredText(input.target, "Target is required.");
-	const selected = targetReference.projection.find((target) => target.profileId === query);
-	if (!selected) throw new Error(`No current Space target has Profile ID "${query}". Run openmeld space action targets and use the full Profile ID.`);
-	if (!selected.allowedRelations[input.relation]) throw new Error(`${formatRelation(input.relation)} is not allowed for ${selected.primaryMentionLabel}.`);
-	return selected.profileId;
-}
-function requireLoadedTargets(targetReference) {
-	if (targetReference.status === "loaded") return targetReference;
-	throw new Error(`Current Space targets are not available for this dispatch: ${targetReference.errorMessage}`);
-}
-function formatTargetLine(target, relation) {
-	const relationLabel = formatRelation(relation);
-	return `${target.primaryMentionLabel} · ${target.profileKind} · ${relationLabel} · ${target.profileId}`;
-}
-function formatRelation(relation) {
-	switch (relation) {
-		case "wake": return "Wake";
-		case "reference": return "Reference";
-		default: return relation;
-	}
-}
-function normalizeRequiredJoinedText(parts, errorMessage) {
-	return normalizeRequiredText(parts.join(" "), errorMessage);
-}
-function normalizeRequiredText(value, errorMessage) {
-	const normalized = String(value ?? "").trim();
-	if (normalized.length === 0) throw new Error(errorMessage);
-	return normalized;
-}
-//#endregion
-//#region src/space/dispatch-file-read.ts
-const execFileAsync = promisify(execFile);
-/** Keep file access outside the controller sandbox, under the existing CLI auth contract. */
-async function readDispatchSpaceFile(input) {
-	if (process.env["OPENMELD_DISPATCH_RUNTIME_MODE"] !== "dispatch-owned-runtime") throw new Error("Space file tools require an active OpenMeld dispatch runtime.");
-	const context = readDispatchSpaceActionContextFromEnv();
-	const command = resolveDispatchSpaceActionMcpServer(process.env);
-	if (!command) throw new Error("No active OpenMeld dispatch file reader was found.");
-	const fileId = spaceFileEntryIdSchema.parse(input.fileId);
-	const revision = spaceFileRevisionNumberSchema.optional().parse(input.revision);
-	const args = [
-		"space",
-		"files",
-		"read",
-		"--profile",
-		context.targetProfileId,
-		"--json",
-		"--view",
-		"agent",
-		...revision === void 0 ? [] : ["--revision", String(revision)],
-		"--",
-		context.spaceId,
-		fileId
-	];
-	const { stdout } = await execFileAsync(command.commandPath, args, {
-		encoding: "utf8",
-		maxBuffer: 8 * 1024 * 1024,
-		timeout: 3e4
-	}).catch((error) => {
-		if (error && typeof error === "object" && "stdout" in error && typeof error.stdout === "string") {
-			let value;
-			try {
-				value = JSON.parse(error.stdout);
-			} catch {}
-			const parsed = cliJsonErrorEnvelopeSchema.safeParse(value);
-			if (parsed.success) throw new Error(JSON.stringify(parsed.data), { cause: error });
-		}
-		throw error;
-	});
-	const result = readSpaceFileTextResponseSchema.parse(JSON.parse(stdout));
-	if (result.file.spaceId !== context.spaceId || result.file.id !== fileId || revision !== void 0 && result.revision !== revision) throw new Error("The Space file response does not match the requested file revision.");
-	return result;
-}
-//#endregion
-//#region src/space/dispatch-history-read.ts
-/** Read the current Wake's bounded Space history through the existing member API. */
-async function readDispatchSpaceHistory() {
-	if (process.env["OPENMELD_DISPATCH_RUNTIME_MODE"] !== "dispatch-owned-runtime") throw new Error("Space history tools require an active OpenMeld dispatch runtime.");
-	const context = readDispatchSpaceActionContextFromEnv();
-	const profile = await requireOpenMeldProfile({
-		openMeldProfileId: context.targetProfileId,
-		persistSelection: false,
-		authAction: "reading the current Wake's Space history"
-	});
-	if (profile.openMeldProfileId !== context.targetProfileId || profile.profileKind !== "agent") throw new Error("The Space history reader does not match the current Agent.");
-	const result = await createCliSpaceApi(await resolveBaseUrl()).listSignals({
-		spaceId: context.spaceId,
-		requestContext: buildOpenMeldRequestContextFromProfile({ openMeldProfile: profile }),
-		query: {
-			aroundSignalId: context.sourceEventId,
-			beforeCount: 20,
-			afterCount: 0,
-			kinds: ["text"]
-		}
-	});
-	const current = readDispatchSpaceActionContextFromEnv();
-	if (current.contextId !== context.contextId || current.nonce !== context.nonce || current.spaceId !== context.spaceId || current.sourceEventId !== context.sourceEventId || current.targetProfileId !== context.targetProfileId) throw new Error("The dispatch context changed during the Space history read.");
-	const output = dispatchSpaceHistoryResultSchema.parse({
-		spaceId: context.spaceId,
-		sourceSignalId: context.sourceEventId,
-		beforeCount: 20,
-		afterCount: 0,
-		signals: result.signals,
-		nextCursor: result.nextCursor
-	});
-	const signals = output.signals.map((signal) => signalTextEnvelopeSchema.parse(signal));
-	if (signals.some((signal) => signal.spaceId !== context.spaceId)) throw new Error("The Space history response does not match the current Space.");
-	return {
-		...output,
-		signals
-	};
-}
-//#endregion
-//#region src/space/dispatch-task.ts
-async function listDispatchSpaceTasks(phase) {
-	return await withDispatchTaskContext(async ({ actionContext, api, requestContext }) => await api.listTasks({
-		spaceId: actionContext.spaceId,
-		requestContext,
-		...phase ? { phase } : {}
-	}));
-}
-async function createDispatchSpaceTask(body) {
-	return await withDispatchTaskContext(async ({ actionContext, api, requestContext }) => await api.createTask({
-		spaceId: actionContext.spaceId,
-		requestContext,
-		body: createSpaceTaskBodySchema.parse({
-			...body,
-			operationId: crypto.randomUUID(),
-			sourceSignalId: actionContext.sourceEventId,
-			assigneeProfileId: body.assigneeProfileId === void 0 ? actionContext.targetProfileId : body.assigneeProfileId
-		})
-	}));
-}
-async function mutateDispatchSpaceTask(input) {
-	const taskId = spaceTaskIdSchema.parse(input.taskId);
-	const body = mutateSpaceTaskBodySchema.parse({
-		...input.body,
-		operationId: crypto.randomUUID()
-	});
-	return await withDispatchTaskContext(async ({ actionContext, api, requestContext }) => await api.mutateTask({
-		spaceId: actionContext.spaceId,
-		requestContext,
-		taskId,
-		body
-	}));
-}
-async function withDispatchTaskContext(operation) {
-	if (process.env["OPENMELD_DISPATCH_RUNTIME_MODE"] !== "dispatch-owned-runtime") throw new Error("Space Task tools require an active OpenMeld dispatch runtime.");
-	const actionContext = readDispatchSpaceActionContextFromEnv();
-	const profile = await requireOpenMeldProfile({
-		openMeldProfileId: actionContext.targetProfileId,
-		persistSelection: false,
-		authAction: "working with Tasks in the current OpenMeld Space"
-	});
-	if (profile.openMeldProfileId !== actionContext.targetProfileId || profile.profileKind !== "agent") throw new Error("The Space Task actor does not match the current Agent.");
-	const result = await operation({
-		actionContext,
-		api: createCliSpaceApi(await resolveBaseUrl()),
-		requestContext: buildOpenMeldRequestContextFromProfile({ openMeldProfile: profile })
-	});
-	const current = readDispatchSpaceActionContextFromEnv();
-	if (current.contextId !== actionContext.contextId || current.nonce !== actionContext.nonce || current.spaceId !== actionContext.spaceId || current.sourceEventId !== actionContext.sourceEventId || current.targetProfileId !== actionContext.targetProfileId) throw new Error("The dispatch context changed during the Space Task action.");
-	return result;
-}
-//#endregion
-//#region src/space/dispatch-working-copy.ts
-const run = promisify(execFile);
-async function runDispatchWorkingCopy(action, resolution) {
-	const context = readDispatchSpaceActionContextFromEnv();
-	const command = resolveDispatchSpaceActionMcpServer(process.env);
-	if (!(command && context.workingCopyId)) throw new Error("This Wake has no prepared working copy.");
-	const { stdout } = await run(command.commandPath, [
-		"space",
-		"files",
-		"working-copy",
-		action,
-		"--profile",
-		context.targetProfileId,
-		"--json",
-		"--view",
-		"agent",
-		...action === "resolve" ? [
-			"--file-id",
-			resolution?.fileId ?? "",
-			"--revision",
-			String(resolution?.revision ?? 0)
-		] : [],
-		"--",
-		context.spaceId,
-		context.workingCopyId
-	], {
-		encoding: "utf8",
-		maxBuffer: 1024 * 1024,
-		timeout: 12e4
-	}).catch((error) => {
-		if (error && typeof error === "object" && "stdout" in error && typeof error.stdout === "string") {
-			let value;
-			try {
-				value = JSON.parse(error.stdout);
-			} catch {}
-			const parsed = cliJsonErrorEnvelopeSchema.safeParse(value);
-			if (parsed.success) throw new Error(JSON.stringify(parsed.data), { cause: error });
-		}
-		throw error;
-	});
-	return spaceWorkingCopyResultSchema.parse(JSON.parse(stdout));
-}
-//#endregion
-//#region src/space/action-mcp-server.ts
-const FINAL_STATUS_SCHEMA = z.enum([
-	"done",
-	"blocked",
-	"needs_input",
-	"handoff"
-]);
-function createSpaceActionMcpServer() {
-	const server = new McpServer({
-		name: "openmeld-dispatch-space-action",
-		version: "1.0.0"
-	}, { instructions: "Use read_history for the bounded text history around the current Wake, and read_file for shared text files in the current Space. Use Space Task tools only when a clear deliverable needs durable ownership, progress, review, or later closure; questions and tiny same-turn actions stay in Messages. Task operations are non-final. Then choose exactly one final OpenMeld Space Action: reply for the exact public message, status for a final visible status, or stay_silent when no public message is needed. Private assistant output is not posted to the Space." });
-	server.registerTool("working_copy", {
-		title: "Save or inspect this handoff's files",
-		description: "Inspect or commit this handoff's files; reconcile retries an unknown save. On conflict, refresh downloads the shared version, then status shows its path and revision. Merge it into the original working file, then resolve with fileId and incoming revision before committing again. No automatic merge or overwrite. Does not deliver or close the Wake. No Space, profile or path overrides.",
-		inputSchema: {
-			action: z.enum([
-				"status",
-				"commit",
-				"reconcile",
-				"refresh",
-				"resolve"
-			]),
-			fileId: z.string().optional(),
-			revision: z.number().int().positive().optional()
-		}
-	}, async ({ action, fileId, revision }) => {
-		try {
-			return { content: [{
-				type: "text",
-				text: JSON.stringify(await runDispatchWorkingCopy(action, {
-					fileId,
-					revision
-				}))
-			}] };
-		} catch (error) {
-			return {
-				isError: true,
-				content: [{
-					type: "text",
-					text: error instanceof Error ? error.message : String(error)
-				}]
-			};
-		}
-	});
-	server.registerTool("read_history", {
-		title: "Read the current Wake's Space history",
-		description: "Read up to 20 text messages before the current Wake, plus its source message. Space, Agent identity and source are fixed by the active dispatch. Use this instead of terminal CLI history. This read does not submit a reply or close the Wake.",
-		inputSchema: dispatchSpaceHistoryRequestSchema,
-		outputSchema: dispatchSpaceHistoryResultSchema,
-		annotations: {
-			readOnlyHint: true,
-			destructiveHint: false,
-			idempotentHint: true,
-			openWorldHint: false
-		}
-	}, async () => {
-		try {
-			const result = await readDispatchSpaceHistory();
-			return {
-				structuredContent: result,
-				content: [{
-					type: "text",
-					text: JSON.stringify(result)
-				}]
-			};
-		} catch (error) {
-			return {
-				isError: true,
-				content: [{
-					type: "text",
-					text: error instanceof Error ? error.message : String(error)
-				}]
-			};
-		}
-	});
-	server.registerTool("read_file", {
-		title: "Read a file in the current OpenMeld Space",
-		description: "Read a shared text file as the Agent in the current Wake. Use this for attached CSV, text, Markdown, or JSON files instead of running the CLI in a terminal. Pass the attachment's file ID and revision. This is a context read; it does not submit a reply or close the Wake.",
-		inputSchema: {
-			fileId: spaceFileEntryIdSchema,
-			revision: spaceFileRevisionNumberSchema.optional()
-		},
-		annotations: {
-			readOnlyHint: true,
-			destructiveHint: false,
-			idempotentHint: true,
-			openWorldHint: false
-		}
-	}, async (input) => {
-		try {
-			const result = await readDispatchSpaceFile(input);
-			return { content: [{
-				type: "text",
-				text: JSON.stringify(result)
-			}] };
-		} catch (error) {
-			return {
-				content: [{
-					type: "text",
-					text: error instanceof Error ? error.message : String(error)
-				}],
-				isError: true
-			};
-		}
-	});
-	server.registerTool("list_tasks", {
-		title: "List Tasks in the current OpenMeld Space",
-		description: "Read durable collaboration Tasks for this Space. Use the returned revision before changing a Task. Task phase is collaboration state, not Agent execution truth.",
-		inputSchema: { phase: z.enum([
-			"to_do",
-			"in_progress",
-			"in_review",
-			"done",
-			"canceled"
-		]).optional() },
-		outputSchema: listSpaceTasksResponseSchema,
-		annotations: {
-			readOnlyHint: true,
-			destructiveHint: false,
-			idempotentHint: true,
-			openWorldHint: false
-		}
-	}, async ({ phase }) => executeTaskAction(() => listDispatchSpaceTasks(phase)));
-	server.registerTool("create_task", {
-		title: "Create a Task from the current Space message",
-		description: "Create a durable Task only for a clear deliverable that needs ownership, progress, review, or later closure. The source message and Space are fixed by this Wake. The Task is assigned to the current Agent by default and remains To do until start_task is called.",
-		inputSchema: {
-			title: z.string().trim().min(1).max(200),
-			description: z.string().trim().min(1).max(8e3).nullable().optional(),
-			completionConditions: z.array(z.string().trim().min(1).max(500)).max(12).optional(),
-			assigneeProfileId: openMeldRuntimeProfileIdSchema.nullable().optional(),
-			reviewerProfileId: openMeldRuntimeProfileIdSchema.nullable().optional()
-		},
-		outputSchema: spaceTaskMutationReceiptSchema,
-		annotations: {
-			readOnlyHint: false,
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false
-		}
-	}, async (body) => executeTaskAction(() => createDispatchSpaceTask(body)));
-	server.registerTool("start_task", {
-		title: "Mark a Space Task in progress",
-		description: "Record that the current assigned Agent has begun advancing this Task. This changes collaboration state and does not start a separate Agent execution.",
-		inputSchema: {
-			taskId: spaceTaskIdSchema,
-			expectedRevision: z.number().int().min(1)
-		},
-		outputSchema: spaceTaskMutationReceiptSchema,
-		annotations: {
-			readOnlyHint: false,
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false
-		}
-	}, async ({ expectedRevision, taskId }) => executeTaskAction(() => mutateDispatchSpaceTask({
-		taskId,
-		body: {
-			action: "mark_in_progress",
-			expectedRevision
-		}
-	})));
-	server.registerTool("submit_task_result", {
-		title: "Submit a result for a Space Task",
-		description: "Submit the concrete result and verification for an in-progress Task. A Task with a reviewer moves to In review; otherwise the stated completion boundary moves it to Done. The Space delivers the review handoff to the reviewer.",
-		inputSchema: {
-			taskId: spaceTaskIdSchema,
-			expectedRevision: z.number().int().min(1),
-			summary: z.string().trim().min(1).max(8e3)
-		},
-		outputSchema: spaceTaskMutationReceiptSchema,
-		annotations: {
-			readOnlyHint: false,
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false
-		}
-	}, async ({ expectedRevision, summary, taskId }) => executeTaskAction(() => mutateDispatchSpaceTask({
-		taskId,
-		body: {
-			action: "submit_result",
-			expectedRevision,
-			summary
-		}
-	})));
-	server.registerTool("review_task", {
-		title: "Review a Space Task result",
-		description: "Accept the exact result you read or request specific changes as this Task's reviewer. Pass that result's resultRevision as expectedResultRevision and the Task's revision as expectedRevision. A conflict requires reading the current Task and deciding again. Change requests require feedback. The Space delivers review and rework handoffs. Agent-to-Agent rework stops for a human decision after two automatic rounds.",
-		inputSchema: {
-			taskId: spaceTaskIdSchema,
-			expectedRevision: z.number().int().min(1),
-			expectedResultRevision: z.number().int().min(1),
-			decision: z.enum(["accepted", "changes_requested"]),
-			feedback: z.string().trim().min(1).max(8e3).nullable().optional()
-		},
-		outputSchema: spaceTaskMutationReceiptSchema,
-		annotations: {
-			readOnlyHint: false,
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false
-		}
-	}, async ({ decision, expectedRevision, expectedResultRevision, feedback, taskId }) => executeTaskAction(() => mutateDispatchSpaceTask({
-		taskId,
-		body: {
-			action: "review",
-			expectedRevision,
-			expectedResultRevision,
-			decision,
-			...feedback === void 0 ? {} : { feedback }
-		}
-	})));
-	server.registerTool("cancel_task", {
-		title: "Cancel a Space Task",
-		description: "Cancel a Task when its accepted commitment should no longer be done. Cancellation fences later Task progress; it does not by itself prove that an Agent execution stopped.",
-		inputSchema: {
-			taskId: spaceTaskIdSchema,
-			expectedRevision: z.number().int().min(1),
-			reason: z.string().trim().min(1).max(1e3)
-		},
-		outputSchema: spaceTaskMutationReceiptSchema,
-		annotations: {
-			readOnlyHint: false,
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false
-		}
-	}, async ({ expectedRevision, reason, taskId }) => executeTaskAction(() => mutateDispatchSpaceTask({
-		taskId,
-		body: {
-			action: "cancel",
-			expectedRevision,
-			reason
-		}
-	})));
-	server.registerTool("reply", {
-		title: "Reply in the current OpenMeld Space",
-		description: "Record the exact final public reply for the active OpenMeld Wake. Use real newline characters for paragraph breaks. Optionally wake or reference an Agent, or mention a person, by mention label or profile ID.",
-		inputSchema: {
-			message: z.string().min(1),
-			files: z.array(spaceMessageFileReferenceSchema).max(10).optional(),
-			mentionTargets: z.array(z.string().min(1)).optional(),
-			referenceTargets: z.array(z.string().min(1)).optional(),
-			wakeTargets: z.array(z.string().min(1)).optional()
-		},
-		outputSchema: dispatchSpaceActionToolResultSchema,
-		annotations: {
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false,
-			readOnlyHint: false
-		}
-	}, async ({ files, mentionTargets, message, referenceTargets, wakeTargets }) => executeSpaceAction(() => recordDispatchSpaceReply({
-		files,
-		mentionTargets,
-		referenceTargets,
-		text: message,
-		wakeTargets
-	})));
-	server.registerTool("status", {
-		title: "Set the final OpenMeld Space status",
-		description: "Record one final visible status for the active OpenMeld Wake. This closes the Wake; do not use it for interim progress.",
-		inputSchema: {
-			status: FINAL_STATUS_SCHEMA,
-			text: z.string().min(1)
-		},
-		outputSchema: dispatchSpaceActionToolResultSchema,
-		annotations: {
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false,
-			readOnlyHint: false
-		}
-	}, async ({ status, text }) => executeSpaceAction(() => recordDispatchSpaceStatus({
-		status,
-		text
-	})));
-	server.registerTool("stay_silent", {
-		title: "Stay silent in the current OpenMeld Space",
-		description: "Record that the active OpenMeld Wake intentionally needs no public reply. Use this only after deciding that silence is the correct final outcome.",
-		inputSchema: { reason: z.string().min(1) },
-		outputSchema: dispatchSpaceActionToolResultSchema,
-		annotations: {
-			destructiveHint: false,
-			idempotentHint: false,
-			openWorldHint: false,
-			readOnlyHint: false
-		}
-	}, async ({ reason }) => executeSpaceAction(() => recordDispatchSpaceSilent({ reason })));
-	return server;
-}
-async function runSpaceActionMcpServer() {
-	readDispatchSpaceActionContextForReceiptFromEnv();
-	await createSpaceActionMcpServer().connect(new StdioServerTransport());
-}
-async function executeSpaceAction(action) {
-	try {
-		const context = readDispatchSpaceActionContextForReceiptFromEnv();
-		const record = await action();
-		if (record.contextId !== context.contextId || record.nonce !== context.nonce) throw new DispatchSpaceActionClosedError("space_action.context_mismatch", "The saved action does not match the current dispatch context.");
-		const contextState = Date.now() > context.expiresAtMs ? "expired" : "active";
-		return {
-			structuredContent: dispatchSpaceActionToolResultSchema.parse({ receipt: {
-				status: "proposal_saved_locally",
-				actionType: record.action.type,
-				attemptId: context.attemptId,
-				contextId: context.contextId,
-				dispatchId: context.dispatchId,
-				recordedAtMs: record.createdAtMs,
-				contextState,
-				coordinatorAcceptance: "unconfirmed",
-				publication: "unconfirmed"
-			} }),
-			content: [{
-				type: "text",
-				text: `Local proposal saved (receipt: proposal_saved_locally, action: ${record.action.type}). OpenMeld has recorded this unpublished Space action proposal on this computer. ${contextState === "expired" ? "The local context has expired. This receipt identifies the existing record and does not extend action authority. " : ""}Coordinator acceptance and Space publication are NOT yet confirmed; do not report it as posted.`
-			}]
-		};
-	} catch (error) {
-		if (error instanceof DispatchSpaceActionClosedError) return {
-			structuredContent: dispatchSpaceActionToolResultSchema.parse({ receipt: {
-				status: "rejected_closed",
-				reasonCode: error.reasonCode,
-				coordinatorAcceptance: "unconfirmed",
-				publication: "unconfirmed"
-			} }),
-			content: [{
-				type: "text",
-				text: `Action rejected (receipt: rejected_closed, reason: ${error.reasonCode}). ${error.message} New actions are not permitted in this context. Existing records are preserved; Coordinator acceptance and Space publication are unconfirmed.`
-			}],
-			isError: true
-		};
-		return {
-			structuredContent: dispatchSpaceActionToolResultSchema.parse({ receipt: {
-				status: "outcome_unknown",
-				reasonCode: "space_action.recording_outcome_unknown",
-				coordinatorAcceptance: "unconfirmed",
-				publication: "unconfirmed"
-			} }),
-			content: [{
-				type: "text",
-				text: `Action receipt unavailable (receipt: outcome_unknown). ${error instanceof Error ? error.message : String(error)} Existing records are preserved; Coordinator acceptance and Space publication are unconfirmed.`
-			}],
-			isError: true
-		};
-	}
-}
-async function executeTaskAction(action) {
-	try {
-		const result = await action();
-		return {
-			structuredContent: result,
-			content: [{
-				type: "text",
-				text: JSON.stringify(result)
-			}]
-		};
-	} catch (error) {
-		return {
-			isError: true,
-			content: [{
-				type: "text",
-				text: error instanceof Error ? error.message : String(error)
-			}]
-		};
-	}
-}
-//#endregion
 //#region src/space/space-target.ts
 const SPACE_ID_HEX_REGEX = /^[0-9a-f]{64}$/i;
 const INVALID_SPACE_TARGET_MESSAGE = "Space target must be a 64-character Space ID or an OpenMeld Space URL.";
@@ -24661,7 +23735,7 @@ function normalizeOptionalString(value) {
 	return normalized.length > 0 ? normalized : null;
 }
 async function runDefaultSpaceAddMeMembership(input) {
-	const { runSpaceAddMeMembership } = await import("./add-me-membership-Wc69O6rA.js");
+	const { runSpaceAddMeMembership } = await import("./add-me-membership-CGISMRPF.js");
 	return await runSpaceAddMeMembership(input);
 }
 //#endregion
@@ -24794,7 +23868,7 @@ async function fetchSpaceContract(input) {
 //#region src/space/contract-set-options.ts
 const SPACE_CONTRACT_DISPATCH_POLICY_VALUES = ["mention_only", "listen_all"];
 const SPACE_CONTRACT_PUBLICATION_MODE_VALUES = ["collaboration", "raw_context_sharing"];
-const SPACE_CONTRACT_ALLOWED_ACTION_VALUES = SPACE_CONTRACT_ALLOWED_ACTION_ORDER;
+const SPACE_CONTRACT_ALLOWED_ACTION_VALUES = ["post_message", "stay_silent"];
 const SPACE_CONTRACT_RESULT_ARCHIVE_MODE_VALUES = [
 	"none",
 	"space_reply_only",
@@ -25024,24 +24098,16 @@ async function runSpaceContractSetFlow(input) {
 	const allowedActions = await multiselect({
 		message: "Allowed actions",
 		required: true,
-		initialValues: [...input.currentContract.allowedActions],
-		options: [
-			{
-				value: SPACE_CONTRACT_ALLOWED_ACTION_VALUES[0],
-				label: "post_message",
-				hint: "Publish a normal message"
-			},
-			{
-				value: SPACE_CONTRACT_ALLOWED_ACTION_VALUES[1],
-				label: "post_status",
-				hint: "Publish a status bubble"
-			},
-			{
-				value: SPACE_CONTRACT_ALLOWED_ACTION_VALUES[2],
-				label: "stay_silent",
-				hint: "Let system record a silent decision"
-			}
-		]
+		initialValues: input.currentContract.allowedActions.filter((action) => action !== "post_status"),
+		options: [{
+			value: SPACE_CONTRACT_ALLOWED_ACTION_VALUES[0],
+			label: "post_message",
+			hint: "Publish a normal message"
+		}, {
+			value: SPACE_CONTRACT_ALLOWED_ACTION_VALUES[1],
+			label: "stay_silent",
+			hint: "Let system record a silent decision"
+		}]
 	});
 	if (isCancel(allowedActions)) {
 		cancel("Cancelled.");
@@ -25212,10 +24278,10 @@ function buildExplicitSpaceContractPatch(input) {
 	if (Object.keys(candidatePatch).length === 0) return null;
 	const parsed = patchSpaceContractBodySchema.safeParse(candidatePatch);
 	if (!parsed.success) throw new Error(parsed.error.issues[0]?.message ?? "space contract patch is invalid");
-	return {
+	return patchSpaceContractBodySchema.parse({
 		...parsed.data,
 		...parsed.data.allowedActions ? { allowedActions: canonicalizeAllowedActions(parsed.data.allowedActions) } : {}
-	};
+	});
 }
 function pruneUnchangedSpaceContractPatch(input) {
 	const nextPatch = {};
@@ -25668,7 +24734,7 @@ function normalizeFolderId(value) {
 }
 async function readLocalFile(path) {
 	const bytes = await openAsBlob(path);
-	if (bytes.size > 262144e3) throw new Error("Space files must be 250 MiB or smaller.");
+	if (bytes.size > 1073741824) throw new Error(`Space files must be ${SPACE_FILE_MAX_SIZE_BYTES / (1024 * 1024)} MiB or smaller.`);
 	return bytes;
 }
 async function resolveContentBytes(input) {
@@ -25680,7 +24746,7 @@ async function resolveContentBytes(input) {
 	for await (const chunk of process.stdin) {
 		const bytes = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
 		total += bytes.byteLength;
-		if (total > 262144e3) throw new Error("Space files must be 250 MiB or smaller.");
+		if (total > 10485760) throw new Error(`Standard input is limited to ${SPACE_FILE_RAW_UPLOAD_MAX_BYTES / (1024 * 1024)} MiB. Use --file for larger files.`);
 		chunks.push(bytes);
 	}
 	return Buffer.concat(chunks, total);
@@ -29679,7 +28745,7 @@ computerCmd.command("disconnect").description("Disconnect this computer from its
 		routeTokens: ["computer", "disconnect"],
 		view,
 		run: async () => {
-			const { runComputerDisconnect } = await import("./computer-disconnect-DR1WDSPK.js");
+			const { runComputerDisconnect } = await import("./computer-disconnect-BWRsge_2.js");
 			await runComputerDisconnect(computerConnectionIntentSchema.parse(JSON.parse(opts.connectionIntent)), view);
 		}
 	});
@@ -30450,7 +29516,7 @@ spaceActionCmd.command("wake").description("Record a final handoff message that
 		messageParts: Array.isArray(messageParts) ? messageParts : []
 	});
 });
-spaceActionCmd.command("status").description("Record a final Space status for the current dispatch.").argument("<status>", "Final status: done|blocked|needs_input|handoff").argument("<text...>", "Short status text").action(async (status, textParts) => {
+spaceActionCmd.command("status", { hidden: true }).description("Record a legacy final Space status for an existing dispatch.").argument("<status>", "Final status: done|blocked|needs_input|handoff").argument("<text...>", "Short status text").action(async (status, textParts) => {
 	await runSpaceActionStatus({
 		status,
 		textParts: Array.isArray(textParts) ? textParts : []
@@ -31894,18 +30960,18 @@ async function main() {
 	if (await runMacOsNativeKeychainHelperIfRequested()) return;
 	const argv = process.argv.map((arg) => arg === "--h" ? "--help" : arg);
 	if (argv.length === 5 && argv[2] === "computer" && argv[3] === "connection-review" && argv[4] === "--json") {
-		const { readComputerConnectionReview } = await import("./computer-connection-review-DY5BK_27.js");
+		const { readComputerConnectionReview } = await import("./computer-connection-review-RHAoddSS.js");
 		outLine(JSON.stringify(await readComputerConnectionReview()));
 		return;
 	}
 	if (argv.length === 5 && argv[2] === "service" && argv[4] === "--json") {
 		if (argv[3] === "control-carrier-capability") {
-			const { readServiceControlCarrierCapability } = await import("./service-control-carrier-capability-DDNyE5cB.js");
+			const { readServiceControlCarrierCapability } = await import("./service-control-carrier-capability-gMk5gMKU.js");
 			outLine(JSON.stringify(readServiceControlCarrierCapability()));
 			return;
 		}
 		if (argv[3] === "control-capabilities") {
-			const { readServiceControlCapabilities } = await import("./service-control-capabilities-C9UHSMPz.js");
+			const { readServiceControlCapabilities } = await import("./service-control-capabilities-3_bdeHXu.js");
 			emitCliJsonEnvelope({
 				schemaVersion: 1,
 				type: "service.control_capabilities",
@@ -32088,4 +31154,4 @@ main().catch((error) => {
 //#endregion
 export {};
 
-//# sourceMappingURL=openmeld-BQy0nMox.js.map
+//# sourceMappingURL=openmeld-BFO3sfC_.js.map