openmeld 0.3.222 → 0.3.224

package/dist/{runtime-BYaFkkLK.js → runtime-D6jItuQ-.js}

@@ -1,33 +1,31 @@
 #!/usr/bin/env node
 
-import { d as runWithHeldLock, lt as resolveOpenMeldRootDir, s as releaseLock, t as acquireLock } from "./lock-Bsl_ElWy.js";
-import { Pi as COMPUTER_FILE_ACCESS_OWNER_CANCELLED_REASON_CODE, Sr as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Tt as buildSpaceAttachmentDownloadPath, Xt as createOrganizationSkillsApi, sn as createSpaceApi } from "./dist-B07ziN_u.js";
+import { ut as resolveOpenMeldRootDir } from "./lock-iue1J2xy.js";
+import { Pi as COMPUTER_FILE_ACCESS_OWNER_CANCELLED_REASON_CODE, Sr as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Tt as buildSpaceAttachmentDownloadPath, Zt as createOrganizationSkillsApi, cn as createSpaceApi } from "./dist-BeJcIdCZ.js";
 import { b as normalizeKnownBuiltinAgentControllerId, d as resolveBuiltinAgentControllerConversationKind, l as buildAgentControllerConversationRef } from "./controller-contract-DAOCaefz.js";
-import { $ as canManageRegistryAgentSkillTargets, $t as mergeOpenClawGatewayVisibility, An as runRuntimeTask, Bn as upsertConversationExecutionState, Bt as createMutableRouteCatalogState, Cn as verifyCodexAppServerThread, E as resolveProfileWorkspaceRuntime, Fn as loadLedgerState, Gt as syncRuntimeEventToInflightTaskControlRegistry, In as removeConversationExecutionState, Kt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, L as manageAgentRegistrationInstallation, Ln as resolveConversationExecutionStateByLookupKey, Nn as appendLedgerHistoryEntry, Pn as commitResolvedAgentContext, Qn as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, Qt as createPendingAgentInteractionRegistry, Rn as seedLegacyAgentContext, Sn as resolveCodexAppServerCompletedTurn, U as setAgentRegistrationEnabled, Un as assertLegacyAgentContextAssociation, Vn as withLedgerStateTransaction, Vt as createRouteCatalogFromMutableState, Wn as buildAgentContextLookupKey, Wt as normalizeDispatchThreadAction, Xn as listAgentControllerSupervisedProcessIds, Yt as createSerialAgentInteractionCallback, Zt as normalizeDispatchPostMessageAction, _ as loadDaemonRouteCatalog, a as buildOpenClawSpaceSessionKey, an as resolveDispatchContinuityObservation, b as resolveLocalController, bn as resolveInstalledCodexLaunchCandidates, cn as resolveLatestScopedConversationExecutionState, dn as createLocalAdapterEntries, en as createLocalTaskInterruptSender, ft as listProjectBindings, g as writeDaemonRouteCatalogCache, h as readDaemonRouteCatalogCache, in as resolveDispatchQueueLogMeta, jn as buildRuntimeWorkspaceFingerprint, kn as DaemonServiceRunError, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, mn as resolveInstalledOpenCodeLaunchCandidates, nn as createLocalExecutionSlots, o as normalizeOpenClawSpaceIdPrefix, on as resolveCompatibleAgentContextMatch, pn as forkOpenCodeServerSession, qt as SPACE_ACTION_TARGET_GUIDANCE_LINES, rn as createInflightTaskControlRegistry, rt as resolveBuiltinAgentControllerDefinition, s as slugifyOpenClawNamePart, sn as resolveCompatibleConversationExecutionState, t as prepareProviderRuntime, tt as resolveSkillsAgentRegistry, un as createLocalAdapterContainer, v as buildRuntimeRouteTargets, w as resolveCurrentEffectiveProfileWorkingFolderRuntime, x as resolveLocalRuntimeControllerSupport, xn as forkCodexAppServerThread, y as readLocalEnabledControllers, yn as resolveCodexTimeoutMs, z as reconcileNewRunnableBuiltinAgentRegistrations, zn as settleInflightTask } from "./prepare-provider-runtime-CWZcuMF6.js";
-import { D as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, E as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, Jn as executionContextAssignmentSchema, L as runtimeTransportResumeControllerConversationFramePayloadSchema, R as runtimeTransportResumeControllerConversationResultFramePayloadSchema, T as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Wt as spaceWorkSelectionSchema, Xn as executionContextTaskSchema, Y as openMeldDaemonTaskResultPayloadSchema, _r as runtimeTransportDeliveryExecutionIdentitySchema, b as runtimeTransportForkAgentSessionResultSchema, c as runtimeTransportDeliverDispatchRequestSchema, d as runtimeTransportDispatchInteractionResponseFramePayloadSchema, f as runtimeTransportDispatchLifecycleAcknowledgementSchema, gr as runtimeCoordinatorExecutionTokenEnvelopeSchema, ir as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, jr as localAgentReasoningPreferencesSchema, k as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, kr as LOCAL_AGENT_REASONING_MAX_CHARS, l as runtimeTransportDispatchInteractionDeliveredRequestSchema, or as agentInteractionRequestSchema, p as runtimeTransportDispatchLifecycleRequestSchema, w as runtimeTransportLocalAgentControlCancelFramePayloadSchema } from "./runtime-transport-Cc_RN-PL.js";
-import { d as getAuthSessionState } from "./auth-session-nhS8jyux.js";
-import { n as OPENMELD_DAEMON_CANCEL_WITHDRAWN_BEFORE_START_REASON_CODE, t as OPENMELD_DAEMON_CANCEL_STOP_REQUESTED_AFTER_START_REASON_CODE } from "./control-plane-e3W6PD2M.js";
-import { f as withSkillsInstallLock, h as OFFICIAL_CLI_SKILL_URL, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-CQG3k9eh.js";
-import { C as defaultManagedIntegrationPaths, a as fetchSpaceUpdates, c as downloadWorkingCopyFile, f as discoverLocalAgentSessionProviders, i as recordRuntimeReportingSuccess, l as materializeOrganizationSkillRelease, n as recordRuntimeReportingFailure, o as createSpaceWorkingCopies, p as recordOpenMeldCreatedLocalAgentSession, r as recordRuntimeReportingNotApplicable, s as createLedgerIo, u as startLocalAgentActivitySyncLoop, w as installAgentActivityIntegrations, y as registerAgentActivityRoute } from "./runtime-reporting-health-state-BgwfrH7f.js";
-import { S as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, _ as toErrorMessage$2, n as ensureDaemonRuntimePaths, s as emitRunLine, t as buildLedgerPaths, u as normalizeOptionalText$3, v as warnDaemonEvent } from "./daemon-device-id-DWO9_QW6.js";
-import { i as SPACE_PERSONAL_CONTRIBUTION_RULE, n as SPACE_COLLABORATION_CONTEXT_RULE, v as resolvePublicAgentFailureReason, y as resolveSpacePublicationRequirement } from "./dist-B2EauBG6.js";
-import { $ as emitDaemonDispatchJournalEvent, $t as getSpaceAccessRequestContext, B as enqueueDispatchResultOutboxRecord, G as resolveDispatchResultPayload, H as listDispatchResultOutboxPendingAcknowledgementKeys, Ht as buildSpaceRoundSignalPublication, J as sendDispatchPreviewEndFrame, K as sendDispatchInteractionRequestFrame, Kt as createDispatchContinuationSpaceAccessContext, O as consumeArmedAgentControllerInterfaceReprobe, Q as sendDispatchToolActivityFrame, Qt as getSpaceAccessPassword, U as waitForDispatchResultOutboxAcknowledgement, V as flushDispatchResultOutbox, W as buildFailedTaskResultPayload, X as sendDispatchReasoningFrame, Y as sendDispatchPreviewFrame, Z as sendDispatchRuntimeEvidenceFrame, a as resolveRegisterResponseFrame, at as isSameOrDescendantPath, ct as buildDispatchPromptPlan, dt as resolveBootstrapSpaceOwnerProfileId, f as resolveOpenCodeDatabasePath, ft as resolveBootstrapTargetProfileContext, i as resolveHeartbeatResponseFrame, lt as buildDispatchSessionTitle, mn as DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND, nn as isWakeClosingSystemNoticeType, nt as readComputerFileAccessPolicy, o as sendDaemonFrame, ot as buildDispatchBootstrapTemplateFacts, pt as resolveDispatchMentionSourceContext, q as sendDispatchLifecycleFrame, r as parseDaemonFrame, rn as listSpaceMemberDirectorySendTargets, rt as resolveComputerFileAccessStorePath, st as buildDispatchCorrelation, t as emitDaemonErrorFrame, u as readOpenCodeSessionRows, ut as parseDispatchTask, z as acknowledgeDispatchResultOutboxRecord } from "./daemon-frame-transport-D2-tazuK.js";
-import { a as serviceExecutionHostCatalogSchema, i as SERVICE_EXECUTION_HOST_PROTOCOL, t as ExecutionHostError } from "./channel-ggx0o_aG.js";
-import { a as resolveBaseUrl, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig } from "./base-url-D7uE_xTo.js";
-import { t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-DyKx1xzm.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, f as buildOpenMeldRequestContextFromProfileIdentity, n as fetchSpaceRequestWithTimeout, t as createCliApiClientFoundation } from "./api-client-foundation-DnJ_JYli.js";
-import { a as submitRuntimeProviderConversationProofs, f as recordRuntimeProviderUsageLimits, i as submitRuntimeAgentControllerReports, l as resolveLocalAgentControllerReportDecision, o as collectLocalAgentControllerInventory, t as notifyRuntimeReportingAttemptObserver, u as probeAgentControllerUsageObservationAuth } from "./runtime-agent-controller-reporting-submission-BUUub9_1.js";
-import { t as installSkillsToTargets } from "./installer-D2bWZT88.js";
-import { b as supersedeDispatchSpaceActionRecordForReconsideration, f as buildDispatchOwnedRuntimeEnv, g as createDispatchSpaceActionContext, h as OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV, n as fetchSpaceMeta, t as createCliSpaceApi, y as readDispatchSpaceActionRecord } from "./cli-space-api-CQtKu9Zt.js";
+import { $ as canManageRegistryAgentSkillTargets, $n as DISPATCH_SPACE_ACTION_DELIVERY_ONLY_ENV, $t as mergeOpenClawGatewayVisibility, An as runRuntimeTask, Bn as upsertConversationExecutionState, Bt as createMutableRouteCatalogState, Cn as verifyCodexAppServerThread, E as resolveProfileWorkspaceRuntime, Fn as loadLedgerState, Gt as syncRuntimeEventToInflightTaskControlRegistry, In as removeConversationExecutionState, Kt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, L as manageAgentRegistrationInstallation, Ln as resolveConversationExecutionStateByLookupKey, Nn as appendLedgerHistoryEntry, Pn as commitResolvedAgentContext, Qt as createPendingAgentInteractionRegistry, Rn as seedLegacyAgentContext, Sn as resolveCodexAppServerCompletedTurn, U as setAgentRegistrationEnabled, Un as assertLegacyAgentContextAssociation, Vn as withLedgerStateTransaction, Vt as createRouteCatalogFromMutableState, Wn as buildAgentContextLookupKey, Wt as normalizeDispatchThreadAction, Yt as createSerialAgentInteractionCallback, Zt as normalizeDispatchPostMessageAction, _ as loadDaemonRouteCatalog, a as buildOpenClawSpaceSessionKey, an as resolveDispatchContinuityObservation, b as resolveLocalController, bn as resolveInstalledCodexLaunchCandidates, cn as resolveLatestScopedConversationExecutionState, dn as createLocalAdapterEntries, en as createLocalTaskInterruptSender, ft as listProjectBindings, g as writeDaemonRouteCatalogCache, h as readDaemonRouteCatalogCache, in as resolveDispatchQueueLogMeta, jn as buildRuntimeWorkspaceFingerprint, kn as DaemonServiceRunError, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, mn as resolveInstalledOpenCodeLaunchCandidates, nn as createLocalExecutionSlots, o as normalizeOpenClawSpaceIdPrefix, on as resolveCompatibleAgentContextMatch, pn as forkOpenCodeServerSession, qt as SPACE_ACTION_TARGET_GUIDANCE_LINES, rn as createInflightTaskControlRegistry, rt as resolveBuiltinAgentControllerDefinition, s as slugifyOpenClawNamePart, sn as resolveCompatibleConversationExecutionState, t as prepareProviderRuntime, tr as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, tt as resolveSkillsAgentRegistry, un as createLocalAdapterContainer, v as buildRuntimeRouteTargets, w as resolveCurrentEffectiveProfileWorkingFolderRuntime, x as resolveLocalRuntimeControllerSupport, xn as forkCodexAppServerThread, y as readLocalEnabledControllers, yn as resolveCodexTimeoutMs, z as reconcileNewRunnableBuiltinAgentRegistrations, zn as settleInflightTask } from "./prepare-provider-runtime-MB-BxOgt.js";
+import { A as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, D as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, E as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, Gt as spaceWorkSelectionSchema, Nr as localAgentReasoningPreferencesSchema, O as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, R as runtimeTransportResumeControllerConversationFramePayloadSchema, T as runtimeTransportLocalAgentControlCancelFramePayloadSchema, X as openMeldDaemonTaskResultPayloadSchema, ar as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, f as runtimeTransportDispatchInteractionResponseFramePayloadSchema, jr as LOCAL_AGENT_REASONING_MAX_CHARS, l as runtimeTransportDeliverDispatchRequestSchema, m as runtimeTransportDispatchLifecycleRequestSchema, p as runtimeTransportDispatchLifecycleAcknowledgementSchema, sr as agentInteractionRequestSchema, u as runtimeTransportDispatchInteractionDeliveredRequestSchema, vr as runtimeCoordinatorExecutionTokenEnvelopeSchema, x as runtimeTransportForkAgentSessionResultSchema, yr as runtimeTransportDeliveryExecutionIdentitySchema, z as runtimeTransportResumeControllerConversationResultFramePayloadSchema } from "./runtime-transport-YIYHSJPn.js";
+import { d as getAuthSessionState } from "./auth-session-uEk_Tx6T.js";
+import { n as OPENMELD_DAEMON_CANCEL_WITHDRAWN_BEFORE_START_REASON_CODE, t as OPENMELD_DAEMON_CANCEL_STOP_REQUESTED_AFTER_START_REASON_CODE } from "./control-plane-rTE2rHZ5.js";
+import { f as withSkillsInstallLock, h as OFFICIAL_CLI_SKILL_URL, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-GxF_KAM1.js";
+import { $ as emitDaemonDispatchJournalEvent, $t as getSpaceAccessRequestContext, B as enqueueDispatchResultOutboxRecord, G as resolveDispatchResultPayload, H as listDispatchResultOutboxPendingAcknowledgementKeys, Ht as buildSpaceRoundSignalPublication, J as sendDispatchPreviewEndFrame, K as sendDispatchInteractionRequestFrame, Kt as createDispatchContinuationSpaceAccessContext, O as consumeArmedAgentControllerInterfaceReprobe, Q as sendDispatchToolActivityFrame, Qt as getSpaceAccessPassword, U as waitForDispatchResultOutboxAcknowledgement, V as flushDispatchResultOutbox, W as buildFailedTaskResultPayload, X as sendDispatchReasoningFrame, Y as sendDispatchPreviewFrame, Z as sendDispatchRuntimeEvidenceFrame, a as resolveRegisterResponseFrame, at as isSameOrDescendantPath, ct as buildDispatchPromptPlan, dt as resolveBootstrapSpaceOwnerProfileId, f as resolveOpenCodeDatabasePath, ft as resolveBootstrapTargetProfileContext, i as resolveHeartbeatResponseFrame, lt as buildDispatchSessionTitle, mn as DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND, nn as isWakeClosingSystemNoticeType, nt as readComputerFileAccessPolicy, o as sendDaemonFrame, ot as buildDispatchBootstrapTemplateFacts, pt as resolveDispatchMentionSourceContext, q as sendDispatchLifecycleFrame, r as parseDaemonFrame, rn as listSpaceMemberDirectorySendTargets, rt as resolveComputerFileAccessStorePath, st as buildDispatchCorrelation, t as emitDaemonErrorFrame, u as readOpenCodeSessionRows, ut as parseDispatchTask, z as acknowledgeDispatchResultOutboxRecord } from "./daemon-frame-transport-WiB73yhT.js";
+import { C as startLocalAgentActivitySyncLoop, E as recordOpenMeldCreatedLocalAgentSession, I as defaultManagedIntegrationPaths, L as installAgentActivityIntegrations, M as registerAgentActivityRoute, S as prepareClaudeProjectContainer, T as discoverLocalAgentSessionProviders, _ as markExecutionContextWorkspaceInUse, a as fetchSpaceUpdates, b as releaseExecutionContextWorkspace, c as materializeOrganizationSkillRelease, i as recordRuntimeReportingSuccess, l as createDispatchSpaceTools, n as recordRuntimeReportingFailure, o as createSpaceWorkingCopies, r as recordRuntimeReportingNotApplicable, s as downloadWorkingCopyFile, v as prepareExecutionContextWorkspace, x as createLedgerIo, y as readExecutionContextWorkspace } from "./runtime-reporting-health-state-DA-_vW-n.js";
+import { S as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, _ as toErrorMessage$2, n as ensureDaemonRuntimePaths, s as emitRunLine, t as buildLedgerPaths, u as normalizeOptionalText$3, v as warnDaemonEvent } from "./daemon-device-id-B1Af2Zmn.js";
+import { _ as resolvePublicAgentFailureReason, n as SPACE_COLLABORATION_CONTEXT_RULE, r as SPACE_PERSONAL_CONTRIBUTION_RULE, v as resolveSpacePublicationRequirement } from "./dist-YbTZ-Y-2.js";
+import { a as serviceExecutionHostCatalogSchema, i as SERVICE_EXECUTION_HOST_PROTOCOL, t as ExecutionHostError } from "./channel-B2fD2_be.js";
+import { a as resolveBaseUrl, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig } from "./base-url-DvjOkKPs.js";
+import { t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-CDZLWgMj.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, f as buildOpenMeldRequestContextFromProfileIdentity, n as fetchSpaceRequestWithTimeout, t as createCliApiClientFoundation } from "./api-client-foundation-DpVwrgh-.js";
+import { a as submitRuntimeProviderConversationProofs, f as recordRuntimeProviderUsageLimits, i as submitRuntimeAgentControllerReports, l as resolveLocalAgentControllerReportDecision, o as collectLocalAgentControllerInventory, t as notifyRuntimeReportingAttemptObserver, u as probeAgentControllerUsageObservationAuth } from "./runtime-agent-controller-reporting-submission-D9ysbi7R.js";
+import { t as installSkillsToTargets } from "./installer-054NLJg6.js";
+import { C as supersedeDispatchSpaceActionRecordForReconsideration, S as readDispatchSpaceActionRecord, f as createCliSpaceApi, m as buildDispatchOwnedRuntimeEnv, t as fetchSpaceMeta, v as OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV, y as createDispatchSpaceActionContext } from "./meta-api-B1k3mwHN.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
-import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { lstat, mkdir, open, readFile, readdir, readlink, realpath, rename, rm, writeFile } from "node:fs/promises";
+import { basename, dirname, extname, join } from "node:path";
+import { lstat, mkdir, readFile, realpath, rename, writeFile } from "node:fs/promises";
 import { z } from "zod/v4";
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { execFile } from "node:child_process";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import { promisify } from "node:util";
 import { forkSession, getSessionInfo, getSessionMessages } from "@anthropic-ai/claude-agent-sdk";
 import { performance } from "node:perf_hooks";
 //#region ../../packages/schemas/dist/working-folder-recovery.js
@@ -414,10 +412,10 @@ async function resolveWorkingFolderRecovery(input) {
 		selectedFolderLabel: basename(selectedFolder)
 	}));
 	const choice = response.kind === "question" && response.answers.length === 1 && response.answers[0]?.questionId === "working_folder_recovery" && response.answers[0].values.length === 1 ? response.answers[0].values[0] : null;
-	if (choice === "leave_task") throw failure$1(WORKING_FOLDER_RECOVERY_DECLINED, "The Computer owner stopped this task before the Agent started. The previous conversation is saved.");
-	if (choice !== "start_new_conversation" && !(choice === "use_previous_folder" && previousFolderAllowed)) throw failure$1("context.workspace_recovery_unanswered", "This task did not start because no folder choice was confirmed. Send it again when you’re ready.");
+	if (choice === "leave_task") throw failure(WORKING_FOLDER_RECOVERY_DECLINED, "The Computer owner stopped this task before the Agent started. The previous conversation is saved.");
+	if (choice !== "start_new_conversation" && !(choice === "use_previous_folder" && previousFolderAllowed)) throw failure("context.workspace_recovery_unanswered", "This task did not start because no folder choice was confirmed. Send it again when you’re ready.");
 	const latest = await inspect();
-	if (latest.sessionId !== session.sessionId || latest.directory !== session.directory || await realpath(input.workingDirectory).catch(() => null) !== selectedFolder || previousFolder && await realpath(session.directory).catch(() => null) !== previousFolder) throw failure$1("context.workspace_recovery_changed", "The conversation or folder changed while waiting. Send this task again to review the current choices.");
+	if (latest.sessionId !== session.sessionId || latest.directory !== session.directory || await realpath(input.workingDirectory).catch(() => null) !== selectedFolder || previousFolder && await realpath(session.directory).catch(() => null) !== previousFolder) throw failure("context.workspace_recovery_changed", "The conversation or folder changed while waiting. Send this task again to review the current choices.");
 	return {
 		workingDirectory: choice === "use_previous_folder" && previousFolder ? previousFolder : selectedFolder,
 		startNewConversation: choice === "start_new_conversation"
@@ -430,7 +428,7 @@ function resolveRecoveredLedgerConversation(input) {
 		currentExecutionState: null
 	} : input;
 }
-function failure$1(code, message, cause) {
+function failure(code, message, cause) {
 	const error = new DaemonServiceRunError({
 		code,
 		message
@@ -447,9 +445,9 @@ async function inspectRetainedOpenCodeSession(nativeSessionId) {
 			sessionId: nativeSessionId
 		};
 	} catch (cause) {
-		throw failure$1("context.workspace_verification_unavailable", "OpenMeld could not read this conversation’s folder. Open the conversation in OpenCode, then try this task again.", cause);
+		throw failure("context.workspace_verification_unavailable", "OpenMeld could not read this conversation’s folder. Open the conversation in OpenCode, then try this task again.", cause);
 	}
-	throw failure$1("context.workspace_verification_unavailable", "OpenMeld could not read this conversation’s folder. Open the conversation in OpenCode, then try this task again.");
+	throw failure("context.workspace_verification_unavailable", "OpenMeld could not read this conversation’s folder. Open the conversation in OpenCode, then try this task again.");
 }
 //#endregion
 //#region src/local-service/file-access/computer-file-access-prompt.ts
@@ -1515,11 +1513,7 @@ function buildResultDispatchJournalMetadata(payload) {
 //#endregion
 //#region src/local-service/dispatch/execute-dispatch-structured-action-repair.ts
 function resolveStructuredActionRequirementFailure$1(input) {
-	if (input.resolution.parseError) return {
-		failureReason: input.resolution.parseError,
-		kind: "repair"
-	};
-	if (!(input.requiresStructuredSpaceAction && !input.resolution.action)) return null;
+	if (!(input.resolution.parseError || input.requiresStructuredSpaceAction && !input.resolution.action)) return null;
 	const payload = input.runtimeResult.resultPayload;
 	if (payload.status === "failed") return {
 		failureReason: resolvePublicAgentFailureReason({
@@ -1530,7 +1524,7 @@ function resolveStructuredActionRequirementFailure$1(input) {
 		kind: "preserve_runtime_failure"
 	};
 	return {
-		failureReason: "A valid OpenMeld Space action is required in collaboration mode.",
+		failureReason: input.resolution.parseError ?? "A valid OpenMeld Space action is required in collaboration mode.",
 		kind: "repair"
 	};
 }
@@ -1545,19 +1539,22 @@ function resolveStructuredActionOutputFallback(input) {
 	}
 }
 function buildStructuredActionRepairPrompt$1(input) {
-	const previousOutput = buildBoundedRepairOutputPreview(input.previousOutput);
+	const previousOutput = normalizeOptionalText$3(input.previousOutput);
 	const publicationRequirement = resolveSpacePublicationRequirement(input.spaceContractSnapshot);
 	return [
 		`OpenMeld delivery repair: ${input.parseError}`,
 		...previousOutput ? [
-			"Your previous final answer was:",
+			"Previous private output, for context only (not authorization to publish it):",
 			"```text",
 			previousOutput,
 			"```"
 		] : [],
 		"Do not redo the user's work or change the intended public outcome.",
-		"Never publish a shell, CLI, MCP, or transport failure message as the user's normal Space reply.",
-		"If the previous turn tried an action and that transport failed, retry the same intended action and message through the dispatch-scoped tool.",
+		"This invocation is delivery-only: do not inspect or edit code, run commands, call business tools, or repeat the user's task. No shell, CLI, Skill research, or knowledge of OpenMeld internals is needed.",
+		"If an earlier call reported an unknown outcome, use read_receipt first. Recover an existing record; do not replace it. If the record is invalid or cannot be verified, stop rather than resend.",
+		"Only a positively rejected input may be corrected and retried. Explicit denials, cancellation and expired authority remain in force; do not change transports to bypass them.",
+		"Use the exact tool names and input schemas in this invocation's catalog. reply takes message (the explicit public text), with optional files and recipient IDs; stay_silent takes reason; read_receipt takes no arguments.",
+		"Author a deliberate public reply when the task has an answer, a known limitation, or a request for help. Do not turn private analysis or delivery-infrastructure logs into a public answer.",
 		...SPACE_ACTION_CONTEXT_GUIDANCE_LINES,
 		"Your answer text never selects an OpenMeld Space action.",
 		"Call exactly one dispatch-scoped OpenMeld Space Action tool now.",
@@ -1566,29 +1563,9 @@ function buildStructuredActionRepairPrompt$1(input) {
 		...normalizeOptionalText$3(input.currentReplyToSignalId) ? [`post_message.messageEnvelope.replyToSignalId must match the current dispatch reply target: ${normalizeOptionalText$3(input.currentReplyToSignalId)}.`] : [],
 		...publicationRequirement.actionGuidanceLines,
 		...buildStructuredActionRepairSendTargetReferenceLines(input.sendTargetReferenceLines),
-		"Use the official `openmeld-cli` skill for future OpenMeld work.",
-		...buildStructuredActionRepairCompletionLines({ publicationRequirement })
-	].join("\n");
-}
-function buildStructuredActionRepairCompletionLines(input) {
-	return [
-		buildStructuredActionRepairPrimaryCommandLine(input),
-		"If neither the tool nor the fallback command can record the action, stop. Do not print JSON or prose as a substitute.",
+		"If the permitted tool cannot record the action, stop. Do not run a fallback CLI or print JSON/prose as a substitute. A native structured-output carrier may request an explicit public action through its supplied schema instead.",
 		"Do not finish with an explanation of what you will do."
-	];
-}
-const REPAIR_OUTPUT_PREVIEW_MAX_CHARS = 1200;
-function buildBoundedRepairOutputPreview(value) {
-	const normalized = normalizeOptionalText$3(value);
-	if (!normalized) return null;
-	if (normalized.length <= REPAIR_OUTPUT_PREVIEW_MAX_CHARS) return normalized;
-	return `${normalized.slice(0, REPAIR_OUTPUT_PREVIEW_MAX_CHARS).trimEnd()}\n[truncated; reuse the complete answer already in this conversation]`;
-}
-function buildStructuredActionRepairPrimaryCommandLine(input) {
-	if (input.publicationRequirement.allowedActions.includes("post_message")) return `For a normal reply, call the dispatch-scoped OpenMeld Space Action \`reply\` tool with the corrected public message. If that tool is unavailable, run the fallback CLI command \`${DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND} space action reply "corrected public message"\` and wait for it to finish.`;
-	if (input.publicationRequirement.allowedActions.includes("post_status")) return `For a final status, call the dispatch-scoped OpenMeld Space Action \`status\` tool with a final-safe status and short update. If that tool is unavailable, run the fallback CLI command \`${DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND} space action status done "short completion update"\` and wait for it to finish.`;
-	if (input.publicationRequirement.allowedActions.includes("stay_silent")) return `If no public reply is needed, call the dispatch-scoped OpenMeld Space Action \`stay_silent\` tool with your reason. If that tool is unavailable, run the fallback CLI command \`${DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND} space action silent --reason "reason"\` and wait for it to finish.`;
-	return "No permitted OpenMeld Space action is available. Do not invent one in answer text.";
+	].join("\n");
 }
 function buildStructuredActionRepairSendTargetReferenceLines(sendTargetReferenceLines) {
 	if (!(sendTargetReferenceLines && sendTargetReferenceLines.length > 0)) return [];
@@ -1879,583 +1856,6 @@ function stableJson$1(value) {
 	return JSON.stringify(value) ?? "null";
 }
 //#endregion
-//#region src/local-service/dispatch/execution-context-workspace.ts
-const execFileAsync = promisify(execFile);
-const syncDirectory = createLedgerIo().syncPath;
-const COMMIT_PATTERN = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u;
-const manifestSchema = z.strictObject({
-	version: z.union([z.literal(1), z.literal(2)]),
-	identity: executionContextAssignmentSchema,
-	sourceWorkingDirectory: z.string().nullable(),
-	baseCommit: z.string().regex(COMMIT_PATTERN).nullable(),
-	boundaryRoot: z.string(),
-	workingDirectory: z.string(),
-	status: z.enum([
-		"preparing",
-		"restoring",
-		"completed",
-		"in_use",
-		"retiring",
-		"released"
-	]),
-	pristineFingerprint: z.string().regex(/^[a-f0-9]{64}$/u).optional(),
-	copiedUncommittedFiles: z.literal(false),
-	processSupervisionId: z.uuid().optional(),
-	retirement: z.strictObject({
-		path: z.string(),
-		pristineFingerprint: z.string().regex(/^[a-f0-9]{64}$/u)
-	}).optional()
-}).refine((manifest) => manifest.version === 2 || (manifest.status === "preparing" || manifest.status === "completed") && !manifest.pristineFingerprint && !manifest.processSupervisionId && !manifest.retirement).refine((manifest) => manifest.identity.access === "space_context" ? manifest.sourceWorkingDirectory === null && manifest.baseCommit === null : manifest.sourceWorkingDirectory !== null && isAbsolute(manifest.sourceWorkingDirectory) && manifest.baseCommit !== null && manifest.identity.workspace === "isolated");
-async function prepareExecutionContextWorkspace(input) {
-	const parsed = executionContextTaskSchema.safeParse(input.context);
-	if (!parsed.success) throw failure("invalid_workspace_context");
-	const { nativeConversationId, runtimeWorkspaceFingerprint } = parsed.data;
-	const identity = executionContextAssignmentSchema.strip().parse(parsed.data);
-	const source = identity.access !== "space_context" ? await canonicalDirectory(input.currentWorkingDirectory) : null;
-	if (source) {
-		assertSourceAllowed(source, input.policy);
-		if (identity.workspace === "current") return {
-			workingDirectory: source,
-			boundaryRoot: source
-		};
-	}
-	const ledgerRoot = await ensureDirectory(input.ledgerRootPath, true);
-	const workspaceRoot = await ensureDirectory(join(ledgerRoot, "execution-context-workspaces"));
-	const recordsRoot = await ensureDirectory(join(ledgerRoot, "execution-context-workspace-records"));
-	const boundaryRoot = join(workspaceRoot, identity.id);
-	const workingDirectory = source ? join(boundaryRoot, "worktree") : boundaryRoot;
-	const recordPath = join(recordsRoot, `${identity.id}.json`);
-	return await withWorkspaceLock(ledgerRoot, identity.id, async () => {
-		const stored = await readManifest(recordPath);
-		if (stored) {
-			if (JSON.stringify(stored.identity) !== JSON.stringify(identity) || stored.sourceWorkingDirectory !== source || stored.boundaryRoot !== boundaryRoot || stored.workingDirectory !== workingDirectory) throw failure("workspace_identity_mismatch");
-			await reconcileRetainedWorkspace(stored, recordPath, Boolean(runtimeWorkspaceFingerprint || nativeConversationId), ledgerRoot);
-			return await verifyRetainedWorkspace(stored);
-		}
-		if (runtimeWorkspaceFingerprint || nativeConversationId) throw failure("workspace_record_missing");
-		if (await inspectPath(boundaryRoot)) throw failure("workspace_already_exists");
-		const baseCommit = source ? await resolveSourceCommit(source) : null;
-		const manifest = {
-			version: 2,
-			identity,
-			sourceWorkingDirectory: source,
-			baseCommit,
-			boundaryRoot,
-			workingDirectory,
-			status: "preparing",
-			copiedUncommittedFiles: false,
-			processSupervisionId: randomUUID()
-		};
-		await writeManifest(recordPath, manifest, "wx");
-		await finishWorkspacePreparation(manifest, recordPath, true);
-		return workspaceResult(manifest);
-	});
-}
-async function reconcileRetainedWorkspace(record, path, hasNativeIdentity, ledgerRoot) {
-	if (record.status === "retiring") await runWithHeldLock({
-		lock: await acquireWorkspaceExecutionLock(ledgerRoot, record.identity.id),
-		run: async () => {
-			if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
-				fresh: true,
-				processId: null,
-				supervisionId: record.processSupervisionId
-			})).length > 0) throw failure("workspace_execution_quiescence_unconfirmed");
-			const reconciled = await finishWorkspaceRetirement(record, path);
-			if (reconciled.status === "released") await restoreReleasedWorkspace(reconciled, path);
-		}
-	});
-	else if (record.status === "released") await restoreReleasedWorkspace(record, path);
-	else if (record.status === "preparing" || record.status === "restoring") {
-		if (record.status === "preparing" && hasNativeIdentity) throw failure("workspace_creation_incomplete");
-		if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
-			fresh: true,
-			processId: null,
-			supervisionId: record.processSupervisionId
-		})).length > 0) throw failure("workspace_preparation_quiescence_unconfirmed");
-		await finishWorkspacePreparation(record, path);
-	} else if (record.status === "in_use") await runWithHeldLock({
-		lock: await acquireWorkspaceExecutionLock(ledgerRoot, record.identity.id),
-		run: async () => {
-			if (!record.processSupervisionId || (await listAgentControllerSupervisedProcessIds({
-				fresh: true,
-				processId: null,
-				supervisionId: record.processSupervisionId
-			})).length > 0) throw failure("workspace_execution_quiescence_unconfirmed");
-			await verifyRetainedWorkspace(record);
-			await writeManifest(path, {
-				...record,
-				status: "completed"
-			}, "r+");
-		}
-	});
-}
-async function finishWorkspacePreparation(manifest, recordPath, pristineCreation = false) {
-	const { boundaryRoot, workingDirectory, sourceWorkingDirectory: source, baseCommit } = manifest;
-	await ensureDirectory(boundaryRoot);
-	const repository = join(boundaryRoot, "repository.git");
-	if (source && baseCommit) {
-		if (!await inspectPath(repository)) {
-			if ((await readdir(boundaryRoot)).length > 0) throw failure("workspace_creation_incomplete");
-			await git(boundaryRoot, [
-				"init",
-				"--bare",
-				"--template=",
-				`--object-format=${baseCommit.length === 64 ? "sha256" : "sha1"}`,
-				repository
-			], manifest.processSupervisionId);
-		}
-		await canonicalDirectory(repository);
-		await assertPrivateMetadata(repository);
-		if ((await readdir(boundaryRoot)).some((name) => name !== "repository.git" && name !== "worktree")) throw failure("workspace_creation_incomplete");
-		if (await inspectPath(join(repository, "objects", "info", "alternates"))) throw failure("workspace_git_metadata_changed");
-		if (!await inspectPath(workingDirectory)) {
-			await git(boundaryRoot, [
-				`--git-dir=${repository}`,
-				"fetch",
-				"--no-tags",
-				"--no-recurse-submodules",
-				"--depth=1",
-				"--no-write-fetch-head",
-				source,
-				`${baseCommit}:refs/openmeld/base`
-			], manifest.processSupervisionId);
-			await git(boundaryRoot, [
-				`--git-dir=${repository}`,
-				"worktree",
-				"add",
-				"--detach",
-				workingDirectory,
-				baseCommit
-			], manifest.processSupervisionId);
-		}
-		await verifyOwnedRepository(manifest);
-		await finishMissingCheckoutFiles(manifest);
-		if (!await isUnchangedCheckout(manifest)) throw failure("workspace_creation_incomplete");
-	} else if ((await readdir(boundaryRoot)).length > 0) throw failure("workspace_creation_incomplete");
-	await writeManifest(recordPath, {
-		...manifest,
-		status: "completed",
-		pristineFingerprint: pristineCreation ? await fingerprintDirectory(boundaryRoot) : void 0
-	}, "r+");
-}
-async function readExecutionContextWorkspace(input) {
-	if (!executionContextAssignmentSchema.shape.id.safeParse(input.contextId).success) throw failure("invalid_workspace_context");
-	if (!await inspectPath(input.ledgerRootPath)) return null;
-	const ledgerRoot = await canonicalDirectory(input.ledgerRootPath);
-	const recordsRoot = join(ledgerRoot, "execution-context-workspace-records");
-	if (!await inspectPath(recordsRoot)) return null;
-	await canonicalDirectory(recordsRoot);
-	const manifest = await readManifest(join(recordsRoot, `${input.contextId}.json`));
-	if (!manifest) return null;
-	const boundaryRoot = join(await canonicalDirectory(join(ledgerRoot, "execution-context-workspaces")), input.contextId);
-	const workingDirectory = manifest.identity.access !== "space_context" ? join(boundaryRoot, "worktree") : boundaryRoot;
-	if (manifest.identity.id !== input.contextId || manifest.boundaryRoot !== boundaryRoot || manifest.workingDirectory !== workingDirectory) throw failure("workspace_identity_mismatch");
-	if (manifest.status === "released" || manifest.status === "retiring") return workspaceResult(manifest);
-	if (manifest.status === "preparing" || manifest.status === "restoring") throw failure("workspace_creation_incomplete");
-	return await verifyRetainedWorkspace(manifest);
-}
-async function markExecutionContextWorkspaceInUse(input) {
-	const context = input.context;
-	if (!context || context.workspace !== "isolated" || context.access === "space_context") return null;
-	const root = await canonicalDirectory(input.ledgerRootPath);
-	const lock = await acquireWorkspaceExecutionLock(root, context.id);
-	const processSupervisionId = randomUUID();
-	try {
-		await withWorkspaceLock(root, context.id, async () => {
-			await readExecutionContextWorkspace({
-				ledgerRootPath: root,
-				contextId: context.id
-			});
-			const path = join(root, "execution-context-workspace-records", `${context.id}.json`);
-			const record = await readManifest(path);
-			if (record?.status !== "completed") throw failure("workspace_execution_quiescence_unconfirmed");
-			await writeManifest(path, {
-				...record,
-				status: "in_use",
-				processSupervisionId
-			}, "r+");
-		});
-		return {
-			lock,
-			processSupervisionId
-		};
-	} catch (error) {
-		await releaseLock(lock);
-		throw error;
-	}
-}
-async function releaseExecutionContextWorkspace(input) {
-	const root = await canonicalDirectory(input.ledgerRootPath);
-	try {
-		return await withWorkspaceLock(root, input.context.id, async () => {
-			await readExecutionContextWorkspace({
-				ledgerRootPath: root,
-				contextId: input.context.id
-			});
-			const path = join(root, "execution-context-workspace-records", `${input.context.id}.json`);
-			let record = await readManifest(path);
-			if (!(record && ["completed", "in_use"].includes(record.status))) throw failure("workspace_creation_incomplete");
-			if (!input.ownedProcessesQuiescent) return {
-				status: "retained",
-				reason: "execution_quiescence_unconfirmed"
-			};
-			const completed = {
-				...record,
-				status: "completed"
-			};
-			await writeManifest(path, completed, "r+");
-			record = await removePristineRetirement(completed, path);
-			if (record.retirement) return {
-				status: "retained",
-				reason: "cleanup_incomplete"
-			};
-			if (!record.pristineFingerprint) return {
-				status: "retained",
-				reason: "baseline_unverified"
-			};
-			await verifyRetainedWorkspace(record);
-			if (await fingerprintDirectory(record.boundaryRoot) !== record.pristineFingerprint) return {
-				status: "retained",
-				reason: "workspace_changed"
-			};
-			if (record.sourceWorkingDirectory && !await sourceHasCommit(record)) return {
-				status: "retained",
-				reason: "source_commit_unavailable"
-			};
-			return (await retirePristineWorkspace(record, path)).status === "released" ? { status: "released" } : {
-				status: "retained",
-				reason: "workspace_changed"
-			};
-		});
-	} finally {
-		if (input.use) await releaseLock(input.use.lock);
-	}
-}
-async function retirePristineWorkspace(record, recordPath) {
-	if (!record.pristineFingerprint || await fingerprintDirectory(record.boundaryRoot) !== record.pristineFingerprint) throw failure("workspace_release_incomplete");
-	const retiring = {
-		...record,
-		status: "retiring",
-		retirement: {
-			path: `${recordPath}.retired-${randomUUID()}`,
-			pristineFingerprint: record.pristineFingerprint
-		}
-	};
-	await writeManifest(recordPath, retiring, "r+");
-	return await finishWorkspaceRetirement(retiring, recordPath);
-}
-async function finishWorkspaceRetirement(record, recordPath) {
-	const retirement = record.retirement;
-	if (!retirement) throw failure("workspace_release_incomplete");
-	const live = await inspectPath(record.boundaryRoot);
-	const retired = await inspectPath(retirement.path);
-	if (live && retired || !(live || retired)) throw failure("workspace_release_incomplete");
-	if (live) await moveWorkspace(record.boundaryRoot, retirement.path);
-	if (await fingerprintDirectory(retirement.path) !== retirement.pristineFingerprint) {
-		if (await inspectPath(record.boundaryRoot)) throw failure("workspace_release_incomplete");
-		await moveWorkspace(retirement.path, record.boundaryRoot);
-		const retained = {
-			...record,
-			retirement: void 0,
-			status: "completed"
-		};
-		await writeManifest(recordPath, retained, "r+");
-		return retained;
-	}
-	const released = {
-		...record,
-		status: "released"
-	};
-	await writeManifest(recordPath, released, "r+");
-	return await removePristineRetirement(released, recordPath);
-}
-async function removePristineRetirement(record, recordPath) {
-	const retirement = record.retirement;
-	if (!retirement) return record;
-	if (await inspectPath(retirement.path)) {
-		if (await fingerprintDirectory(retirement.path) !== retirement.pristineFingerprint) return record;
-		await rm(retirement.path, { recursive: true });
-	}
-	const removed = {
-		...record,
-		retirement: void 0
-	};
-	await writeManifest(recordPath, removed, "r+");
-	return removed;
-}
-async function restoreReleasedWorkspace(record, recordPath) {
-	if (record.sourceWorkingDirectory && !await sourceHasCommit(record)) throw failure("workspace_base_commit_unavailable");
-	if (await inspectPath(record.boundaryRoot)) throw failure("workspace_already_exists");
-	const restoring = {
-		...record,
-		status: "restoring",
-		processSupervisionId: randomUUID()
-	};
-	await writeManifest(recordPath, restoring, "r+");
-	await finishWorkspacePreparation(restoring, recordPath, true);
-}
-async function sourceHasCommit(record) {
-	if (!(record.sourceWorkingDirectory && record.baseCommit)) return false;
-	try {
-		await git(record.sourceWorkingDirectory, [
-			"cat-file",
-			"-e",
-			`${record.baseCommit}^{commit}`
-		]);
-		return true;
-	} catch {
-		return false;
-	}
-}
-async function isUnchangedCheckout(record) {
-	return await git(record.workingDirectory, ["rev-parse", "HEAD"]) === record.baseCommit && await git(record.workingDirectory, [
-		"status",
-		"--porcelain",
-		"--untracked-files=all",
-		"--ignored"
-	]) === "";
-}
-async function finishMissingCheckoutFiles(record) {
-	if (await git(record.workingDirectory, ["rev-parse", "HEAD"]) !== record.baseCommit) throw failure("workspace_creation_incomplete");
-	if ((await git(record.workingDirectory, [
-		"ls-files",
-		"-v",
-		"-z"
-	])).split("\0").some((entry) => entry && !entry.startsWith("H "))) throw failure("workspace_creation_incomplete");
-	const status = await git(record.workingDirectory, [
-		"status",
-		"--porcelain",
-		"-z",
-		"--untracked-files=all",
-		"--ignored"
-	]);
-	if (!status) return;
-	const changes = status.split("\0").filter(Boolean);
-	if (changes.some((entry) => !entry.startsWith(" D "))) throw failure("workspace_creation_incomplete");
-	const paths = changes.map((entry) => entry.slice(3));
-	for (let offset = 0; offset < paths.length; offset += 100) await git(record.workingDirectory, [
-		"checkout-index",
-		"--",
-		...paths.slice(offset, offset + 100)
-	], record.processSupervisionId);
-}
-async function fingerprintDirectory(root) {
-	const hash = createHash("sha256");
-	const visit = async (directory) => {
-		for (const name of (await readdir(directory)).sort()) {
-			const path = join(directory, name);
-			const info = await lstat(path);
-			hash.update(JSON.stringify([
-				relative(root, path),
-				info.mode,
-				info.nlink
-			]));
-			if (info.isSymbolicLink()) hash.update(JSON.stringify(await readlink(path)));
-			else if (info.isDirectory()) await visit(path);
-			else if (info.isFile() && info.nlink === 1) {
-				hash.update(String(info.size));
-				hash.update(await fingerprintFile(path));
-			} else throw failure("workspace_git_metadata_changed");
-		}
-	};
-	await visit(root);
-	return hash.digest("hex");
-}
-async function fingerprintFile(path) {
-	const hash = createHash("sha256");
-	const file = await open(path, "r");
-	try {
-		const buffer = Buffer.alloc(64 * 1024);
-		for (;;) {
-			const { bytesRead } = await file.read(buffer);
-			if (!bytesRead) break;
-			hash.update(buffer.subarray(0, bytesRead));
-		}
-	} finally {
-		await file.close();
-	}
-	return hash.digest("hex");
-}
-async function withWorkspaceLock(root, contextId, run) {
-	if (!executionContextAssignmentSchema.shape.id.safeParse(contextId).success) throw failure("invalid_workspace_context");
-	return await runWithHeldLock({
-		lock: await acquireLock({
-			openMeldProfileId: "execution-context-workspaces",
-			key: contextId,
-			pathResolution: { env: { OPENMELD_HOME: root } }
-		}),
-		run
-	});
-}
-async function verifyRetainedWorkspace(manifest) {
-	await canonicalDirectory(manifest.boundaryRoot);
-	await canonicalDirectory(manifest.workingDirectory);
-	if (manifest.sourceWorkingDirectory) await verifyOwnedRepository(manifest);
-	return workspaceResult(manifest);
-}
-async function acquireWorkspaceExecutionLock(root, contextId) {
-	return await acquireLock({
-		openMeldProfileId: "execution-context-workspaces",
-		key: `${contextId}-execution`,
-		pathResolution: { env: { OPENMELD_HOME: root } }
-	});
-}
-function workspaceResult(manifest) {
-	return {
-		workingDirectory: manifest.workingDirectory,
-		boundaryRoot: manifest.boundaryRoot,
-		...manifest.sourceWorkingDirectory ? { sourceWorkingDirectory: manifest.sourceWorkingDirectory } : {},
-		...manifest.baseCommit ? { baseCommit: manifest.baseCommit } : {}
-	};
-}
-function assertSourceAllowed(source, policy) {
-	if (policy.mode === "only_selected_folders" && !policy.folders.some((folder) => within(source, folder))) throw failure("workspace_outside_computer_policy");
-	if (policy.mode === "block_selected_folders" && policy.folders.some((folder) => within(source, folder) || within(folder, source))) throw failure("workspace_overlaps_blocked_folder");
-}
-async function resolveSourceCommit(source) {
-	if (!await inspectPath(join(source, ".git"))) throw failure("project_repository_required");
-	if (await realpath(await git(source, ["rev-parse", "--show-toplevel"])) !== source) throw failure("project_repository_root_required");
-	const commit = await git(source, [
-		"rev-parse",
-		"--verify",
-		"HEAD^{commit}"
-	]).catch((cause) => {
-		throw new Error("execution_context.project_commit_required", { cause });
-	});
-	if (!COMMIT_PATTERN.test(commit)) throw failure("project_commit_required");
-	return commit;
-}
-async function verifyOwnedRepository(manifest) {
-	const repository = join(manifest.boundaryRoot, "repository.git");
-	await canonicalDirectory(repository);
-	await assertPrivateMetadata(repository);
-	if (await inspectPath(join(repository, "objects", "info", "alternates"))) throw failure("workspace_git_metadata_changed");
-	const gitFile = join(manifest.workingDirectory, ".git");
-	const gitFileInfo = await inspectPath(gitFile);
-	if (!gitFileInfo?.isFile() || gitFileInfo.size > 4096) throw failure("workspace_git_metadata_changed");
-	const expectedGitDir = join(repository, "worktrees", "worktree");
-	if ((await readFile(gitFile, "utf8")).trim() !== `gitdir: ${expectedGitDir}`) throw failure("workspace_git_metadata_changed");
-	if (await realpath(join(expectedGitDir, (await readFile(join(expectedGitDir, "commondir"), "utf8")).trim())) !== repository) throw failure("workspace_git_metadata_changed");
-	if (await git(manifest.boundaryRoot, [
-		`--git-dir=${repository}`,
-		"rev-parse",
-		"--verify",
-		"refs/openmeld/base^{commit}"
-	]) !== manifest.baseCommit) throw failure("workspace_base_commit_changed");
-}
-async function assertPrivateMetadata(path) {
-	for (const entry of await readdir(path, { withFileTypes: true })) {
-		if (entry.isSymbolicLink()) throw failure("workspace_is_symlink");
-		if (entry.isDirectory()) await assertPrivateMetadata(join(path, entry.name));
-		else if ((await lstat(join(path, entry.name))).nlink !== 1) throw failure("workspace_git_metadata_changed");
-	}
-}
-async function readManifest(path) {
-	const info = await inspectPath(path);
-	if (!info) return null;
-	if (!info.isFile() || info.size > 32768) throw failure("workspace_record_invalid");
-	let content;
-	try {
-		content = JSON.parse(await readFile(path, "utf8"));
-	} catch {
-		throw failure("workspace_record_invalid");
-	}
-	const parsed = manifestSchema.safeParse(content);
-	if (!parsed.success) throw failure("workspace_record_invalid");
-	const retirement = parsed.data.retirement;
-	const prefix = `${path}.retired-`;
-	if (parsed.data.status === "retiring" && !retirement || retirement && !(retirement.path.startsWith(prefix) && z.uuid().safeParse(retirement.path.slice(prefix.length)).success)) throw failure("workspace_record_invalid");
-	return parsed.data;
-}
-async function writeManifest(path, manifest, flags) {
-	const temporaryPath = flags === "wx" ? path : `${path}.${randomUUID()}.tmp`;
-	const file = await open(temporaryPath, "wx", 384);
-	try {
-		await file.writeFile(`${JSON.stringify({
-			...manifest,
-			version: 2
-		})}\n`, "utf8");
-		await file.sync();
-	} finally {
-		await file.close();
-	}
-	if (flags !== "wx") await rename(temporaryPath, path);
-	await syncDirectory(dirname(path));
-}
-async function moveWorkspace(from, to) {
-	await rename(from, to);
-	await syncDirectory(dirname(from));
-	await syncDirectory(dirname(to));
-}
-async function inspectPath(path) {
-	const info = await lstat(path).catch((error) => {
-		if (error.code === "ENOENT") return null;
-		throw error;
-	});
-	if (info?.isSymbolicLink()) throw failure("workspace_is_symlink");
-	return info;
-}
-async function canonicalDirectory(path) {
-	if (!(await inspectPath(path))?.isDirectory()) throw failure("workspace_directory_unavailable");
-	return await realpath(path);
-}
-async function ensureDirectory(path, recursive = false) {
-	await inspectPath(path);
-	await mkdir(path, {
-		recursive,
-		mode: 448
-	}).catch((error) => {
-		if (error.code !== "EEXIST") throw error;
-	});
-	return await canonicalDirectory(path);
-}
-function within(child, parent) {
-	const path = relative(resolve(parent), child);
-	return path === "" || path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path);
-}
-const GIT_SETTINGS = {
-	"core.hooksPath": "/dev/null",
-	"core.attributesFile": "/dev/null",
-	"core.fsmonitor": "false",
-	"credential.helper": "",
-	"protocol.allow": "never",
-	"protocol.file.allow": "always",
-	"fetch.recurseSubmodules": "false",
-	"submodule.recurse": "false",
-	"uploadpack.packObjectsHook": "",
-	"gc.auto": "0",
-	"maintenance.auto": "false"
-};
-async function git(cwd, args, processSupervisionId) {
-	const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_")));
-	Object.assign(env, {
-		...processSupervisionId ? { OPENMELD_PROCESS_SUPERVISION_ID: processSupervisionId } : {},
-		GIT_CONFIG_NOSYSTEM: "1",
-		GIT_CONFIG_SYSTEM: "/dev/null",
-		GIT_CONFIG_GLOBAL: "/dev/null",
-		GIT_ATTR_NOSYSTEM: "1",
-		GIT_NO_REPLACE_OBJECTS: "1",
-		GIT_NO_LAZY_FETCH: "1",
-		GIT_ALLOW_PROTOCOL: "file",
-		GIT_TERMINAL_PROMPT: "0",
-		GIT_CONFIG_COUNT: String(Object.keys(GIT_SETTINGS).length)
-	});
-	for (const [index, [key, value]] of Object.entries(GIT_SETTINGS).entries()) {
-		env[`GIT_CONFIG_KEY_${index}`] = key;
-		env[`GIT_CONFIG_VALUE_${index}`] = value;
-	}
-	return (await execFileAsync("git", args, {
-		cwd,
-		env,
-		encoding: "utf8",
-		timeout: 3e4,
-		maxBuffer: 1024 * 1024
-	})).stdout.trimEnd();
-}
-function failure(code) {
-	return /* @__PURE__ */ new Error(`execution_context.${code}`);
-}
-//#endregion
 //#region src/local-service/dispatch/execution-context-session.ts
 function executionContextLedgerPolicy(context) {
 	return context ? "throw" : "backup_and_reset";
@@ -3403,6 +2803,7 @@ async function handleDispatchDeliverFrame(input) {
 	let dispatchSpaceActionContext = null;
 	let nativeQuiescence;
 	let workspaceUse = null;
+	let claudeProjectRuntime = null;
 	const workspaceProcesses = /* @__PURE__ */ new Map();
 	const observeWorkspaceProcess = (event) => observeExecutionContextWorkspaceProcess(workspaceProcesses, event);
 	let completedTurnId = null;
@@ -3462,13 +2863,20 @@ async function handleDispatchDeliverFrame(input) {
 			currentWorkingDirectory: originalWorkingDirectory,
 			computerFileAccessStorePath: input.computerFileAccessStorePath
 		});
-		effectiveRuntimeContext = { providerRuntimeWorkingDirectory: await prepareDispatchWorkHandoff({
+		const handoffWorkingDirectory = await prepareDispatchWorkHandoff({
 			task: parsedTask,
 			ownerUserId: input.profileOwnerUserId,
 			workingDirectory: taskWorkspace.workingDirectory
-		}) };
+		});
+		effectiveRuntimeContext = { providerRuntimeWorkingDirectory: handoffWorkingDirectory };
 		runtimePreparation.effectiveRuntimeContext = effectiveRuntimeContext;
+		claudeProjectRuntime = await prepareDispatchClaudeProjectContainer({
+			parsedTask,
+			taskWorkspace,
+			workingDirectory: handoffWorkingDirectory
+		});
 		computerFileAccessBoundary = await resolveDispatchComputerFileAccess({
+			claudeProjectRuntime,
 			computerFileAccessStorePath: input.computerFileAccessStorePath,
 			onInteractionRequest,
 			parsedTask,
@@ -3506,9 +2914,12 @@ async function handleDispatchDeliverFrame(input) {
 		});
 		const spaceActionRuntimeContext = createDispatchSpaceActionRuntimeContext({
 			bootstrapContext,
+			claudeProjectRuntime,
+			ledgerRootPath: input.ledgerPaths.rootDirPath,
 			parsedTask,
 			runtimePreparation,
-			sendTargetReference
+			sendTargetReference,
+			taskWorkspace
 		});
 		dispatchSpaceActionContext = spaceActionRuntimeContext.dispatchSpaceActionContext;
 		runtimeEnvOverrides = spaceActionRuntimeContext.runtimeEnvOverrides;
@@ -3547,7 +2958,10 @@ async function handleDispatchDeliverFrame(input) {
 			existingContextId
 		});
 		workspaceUse = await markExecutionContextWorkspaceInUse({
+			attemptId: parsedTask.attemptId,
 			context: parsedTask.executionContext,
+			containerRuntime: claudeProjectRuntime,
+			dispatchId: parsedTask.dispatchId,
 			ledgerRootPath: input.ledgerPaths.rootDirPath
 		});
 		runtimeEnvOverrides = {
@@ -4686,6 +4100,7 @@ async function resolveDispatchSpaceMetaContext(input) {
 }
 function buildDispatchRuntimePrompt(input) {
 	return buildDispatchPromptPlan({
+		executionContextAccess: input.parsedTask.executionContext?.access,
 		callerContext: input.parsedTask.callerContext,
 		shouldInjectBootstrap: input.shouldInjectBootstrap,
 		shouldInjectCenterAgentRoleTemplate: input.parsedTask.targetProfileIsCenterAgent,
@@ -4744,6 +4159,26 @@ async function prepareDispatchTaskWorkspace(input) {
 		boundaryRoot: workingDirectory
 	};
 }
+async function prepareDispatchClaudeProjectContainer(input) {
+	const context = input.parsedTask.executionContext;
+	if (input.parsedTask.agentControllerRef !== "builtin:claude-code" || context?.access !== "workspace" || context.workspace !== "isolated") return null;
+	try {
+		return await prepareClaudeProjectContainer({
+			boundaryRoot: input.taskWorkspace.boundaryRoot,
+			contextId: context.id,
+			workspacePath: input.workingDirectory
+		});
+	} catch (error) {
+		const code = error instanceof Error && error.message.startsWith("claude_project.") ? error.message.split(":")[0] : "claude_project.isolation_unverified";
+		let message = "OpenMeld could not verify this task's project container isolation. Check Docker or Podman and try again.";
+		if (code === "claude_project.container_runtime_unavailable") message = "Start Docker or Podman with a Linux container engine on this computer, then try this project task again.";
+		else if (code === "claude_project.image_unavailable") message = "Docker or Podman could not prepare the task image. Check the container engine and try again.";
+		throw new DaemonServiceRunError({
+			code: code ?? "claude_project.isolation_unverified",
+			message
+		});
+	}
+}
 async function releaseDispatchTaskWorkspace(input) {
 	const context = input.parsedTask.executionContext;
 	if (!(input.workspaceUse && context)) return;
@@ -4785,6 +4220,7 @@ async function resolveDispatchComputerFileAccess(input) {
 	if (input.parsedTask.executionContext) {
 		const context = input.parsedTask.executionContext;
 		if (input.parsedTask.agentControllerRef === "builtin:claude-code" && context.access === "space_context") return null;
+		if (input.parsedTask.agentControllerRef === "builtin:claude-code" && context.access === "workspace" && context.workspace === "isolated" && input.claudeProjectRuntime) return null;
 		if (input.parsedTask.agentControllerRef !== "builtin:codex" || input.parsedTask.transportMode !== "codex-app-server" || !verifier) throw new Error("execution_context.file_access_unsupported");
 		const workingDirectory = input.runtimePreparation.effectiveRuntimeContext.providerRuntimeWorkingDirectory;
 		const boundary = executionContextFileAccessBoundary({
@@ -4839,6 +4275,13 @@ async function resolveDispatchComputerFileAccess(input) {
 }
 function createDispatchSpaceActionRuntimeContext(input) {
 	const contextResult = createDispatchSpaceActionContext({
+		...input.claudeProjectRuntime && input.parsedTask.executionContext ? { projectShell: {
+			boundaryRoot: input.taskWorkspace.boundaryRoot,
+			executionContextId: input.parsedTask.executionContext.id,
+			ledgerRootPath: input.ledgerRootPath,
+			workspacePath: input.runtimePreparation.effectiveRuntimeContext.providerRuntimeWorkingDirectory,
+			runtime: input.claudeProjectRuntime
+		} } : {},
 		workingCopyId: input.parsedTask.workingCopyId,
 		attemptId: input.parsedTask.attemptId,
 		dispatchId: input.parsedTask.dispatchId,
@@ -5268,7 +4711,10 @@ async function resolveRuntimeResultStructuredSpaceAction(input) {
 					prompt,
 					routeConfig: input.routeConfig,
 					runtimeContext: input.runtimeContext,
-					runtimeEnvOverrides: input.runtimeEnvOverrides,
+					runtimeEnvOverrides: {
+						...input.runtimeEnvOverrides,
+						[DISPATCH_SPACE_ACTION_DELIVERY_ONLY_ENV]: "1"
+					},
 					runtimeControllerSupport: input.runtimeControllerSupport,
 					streamingModeOverride: "final",
 					agentControllerConversationOverride: repairContinuation.agentControllerConversationOverride
@@ -5721,21 +5167,6 @@ async function maybeRepairStructuredSpaceAction(input) {
 			taskId: input.parsedTask.taskId
 		}
 	});
-	const skillRepair = await ensureDispatchControllerOpenMeldSkill({ agentControllerRef: input.parsedTask.agentControllerRef });
-	emitRunLine({
-		presenter: input.presenter,
-		code: "daemon.run.dispatch_controller_skill_repair_checked",
-		text: `OpenMeld skill repair checked for task ${input.parsedTask.taskId}`,
-		payload: {
-			agentControllerRef: input.parsedTask.agentControllerRef,
-			agentId: skillRepair.agentId,
-			dispatchId: input.parsedTask.dispatchId,
-			...skillRepair.reason ? { reason: skillRepair.reason } : {},
-			status: skillRepair.status,
-			targetProfileId: input.parsedTask.targetProfileId,
-			taskId: input.parsedTask.taskId
-		}
-	});
 	if (!input.runControllerRepair) return {
 		finalFailureDiagnostics: resolveStructuredActionFailureDiagnostics({
 			carrierKind: "none",
@@ -5940,36 +5371,46 @@ function resolveStructuredSpaceActionProvenance(input) {
 	return input.runtimeResult.resultPayload.spaceActionProvenance ?? "direct";
 }
 async function runDispatchRuntimeExecution(input) {
-	await input.onNativeTurnStarted();
-	const result = await runRuntimeTask({
-		agentContextOverride: {
-			agentControllerConversationId: input.contextId,
-			agentControllerConversationOverride: input.agentControllerConversationOverride ?? null
-		},
-		io: input.io,
-		...input.onInteractionRequest ? { onInteractionRequest: input.onInteractionRequest } : {},
-		...input.onPreview ? { onPreview: input.onPreview } : {},
-		...input.onRuntimeEvent ? { onRuntimeEvent: input.onRuntimeEvent } : {},
-		paths: input.ledgerPaths,
-		route: buildDispatchRuntimeRoute({
-			contextId: input.contextId,
-			envOverrides: input.runtimeEnvOverrides,
-			parsedTask: input.parsedTask,
-			routeConfig: input.routeConfig,
-			runtimeControllerSupport: input.runtimeControllerSupport,
-			streamingMode: input.streamingModeOverride ?? input.parsedTask.streamingMode
-		}),
-		task: buildDispatchRuntimeTask({
-			computerFileAccessBoundary: input.computerFileAccessBoundary,
-			executionMode: input.executionMode,
-			instructionPrompt: input.instructionPrompt,
-			parsedTask: input.parsedTask,
-			prompt: input.prompt,
-			runtimeContext: input.runtimeContext
-		})
-	});
-	input.onNativeTurnCompleted(result);
-	return result;
+	const route = buildDispatchRuntimeRoute({
+		contextId: input.contextId,
+		envOverrides: input.runtimeEnvOverrides,
+		parsedTask: input.parsedTask,
+		routeConfig: input.routeConfig,
+		runtimeControllerSupport: input.runtimeControllerSupport,
+		streamingMode: input.streamingModeOverride ?? input.parsedTask.streamingMode
+	});
+	const spaceActionTools = route.env?.["OPENMELD_SPACE_ACTION_CONTEXT_PATH"] ? createDispatchSpaceTools({ env: {
+		...process.env,
+		...route.env
+	} }) : void 0;
+	try {
+		await input.onNativeTurnStarted();
+		const result = await runRuntimeTask({
+			spaceActionTools,
+			agentContextOverride: {
+				agentControllerConversationId: input.contextId,
+				agentControllerConversationOverride: input.agentControllerConversationOverride ?? null
+			},
+			io: input.io,
+			...input.onInteractionRequest ? { onInteractionRequest: input.onInteractionRequest } : {},
+			...input.onPreview ? { onPreview: input.onPreview } : {},
+			...input.onRuntimeEvent ? { onRuntimeEvent: input.onRuntimeEvent } : {},
+			paths: input.ledgerPaths,
+			route,
+			task: buildDispatchRuntimeTask({
+				computerFileAccessBoundary: input.computerFileAccessBoundary,
+				executionMode: input.executionMode,
+				instructionPrompt: input.instructionPrompt,
+				parsedTask: input.parsedTask,
+				prompt: input.prompt,
+				runtimeContext: input.runtimeContext
+			})
+		});
+		input.onNativeTurnCompleted(result);
+		return result;
+	} finally {
+		spaceActionTools?.close();
+	}
 }
 function buildDispatchRuntimeRoute(input) {
 	const runtimeEnv = input.contextId ? {
@@ -8929,13 +8370,35 @@ function createExecutionHostRuntime(input) {
 			if (request.connectionGeneration < generation || disposed) throw new ExecutionHostError("host.connection_replaced", "An older connector cannot replace the active connection.");
 			const catalog = catalogs.get(request.catalogRevision);
 			if (!catalog || request.catalogRevision < activeCatalogRevision) throw new ExecutionHostError("host.catalog_replaced", "The requested Host catalog is no longer available.");
+			const applyRouteFacts = () => {
+				activeCatalogRevision = request.catalogRevision;
+				Object.assign(routeCatalogState, createMutableRouteCatalogState(catalog));
+				leasesByProfileId.clear();
+				for (const lease of request.leases) leasesByProfileId.set(lease.profileId, lease.leaseEpoch);
+			};
+			const syncPermissionModes = async () => {
+				const outcomes = await syncActiveTaskPermissionModes({
+					catalogState: routeCatalogState,
+					inflightTaskControlRegistry,
+					localAdapterContainer
+				});
+				for (const outcome of outcomes) emitRunLine({
+					presenter: input.presenter,
+					code: "daemon.run.active_permission_mode_sync",
+					text: `active permission update ${outcome.status} for ${outcome.taskId}`,
+					payload: outcome
+				});
+			};
+			if (request.connectionGeneration === generation && currentSocketRef.socket !== null) {
+				applyRouteFacts();
+				await syncPermissionModes();
+				assertConnection(request.connectionGeneration);
+				return snapshot();
+			}
 			connectionAbort?.abort();
 			connectionAbort = new AbortController();
 			generation = request.connectionGeneration;
-			activeCatalogRevision = request.catalogRevision;
-			Object.assign(routeCatalogState, createMutableRouteCatalogState(catalog));
-			leasesByProfileId.clear();
-			for (const lease of request.leases) leasesByProfileId.set(lease.profileId, lease.leaseEpoch);
+			applyRouteFacts();
 			const sink = { send: (raw) => {
 				if (generation !== request.connectionGeneration || currentSocketRef.socket !== sink) throw new ExecutionHostError("host.connection_replaced", "This execution frame's connector has been retired.");
 				const frame = parseDaemonFrame(raw);
@@ -8953,17 +8416,7 @@ function createExecutionHostRuntime(input) {
 			currentSocketRef.socket = sink;
 			currentSocketRef.connectionGeneration = generation;
 			executionAdmission.resend();
-			const outcomes = await syncActiveTaskPermissionModes({
-				catalogState: routeCatalogState,
-				inflightTaskControlRegistry,
-				localAdapterContainer
-			});
-			for (const outcome of outcomes) emitRunLine({
-				presenter: input.presenter,
-				code: "daemon.run.active_permission_mode_sync",
-				text: `active permission update ${outcome.status} for ${outcome.taskId}`,
-				payload: outcome
-			});
+			await syncPermissionModes();
 			assertConnection(request.connectionGeneration);
 			replayInteractions();
 			startResultReplay();
@@ -9134,4 +8587,4 @@ function createExecutionHostRuntime(input) {
 //#endregion
 export { createExecutionHostResources, createExecutionHostRuntime };
 
-//# sourceMappingURL=runtime-BYaFkkLK.js.map
+//# sourceMappingURL=runtime-D6jItuQ-.js.map