openmeld 0.3.231 → 0.3.232

package/dist/{service-B9y1SQlB.js → service-KHA_Yv8q.js}

@@ -1,40 +1,41 @@
 #!/usr/bin/env node
 
-import { D as openMeldRootDir, F as resolveOpenMeldEnvPreset, I as resolveOpenMeldRootDir, L as resolveOpenMeldServiceOwnedPathInput, h as isPublishedOpenMeldHome, o as accountsDir, y as normalizeAccountKey } from "./paths-DSkUuEu3.js";
-import { Gi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Ki as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Li as localProjectControlDaemonFrameSchema, Ni as serviceConnectionEvidenceEventSchema, Pi as serviceConnectionEvidenceJournalSchema, Ri as localProjectControlDiscoverProjectsResponseSchema, dr as betterAuthDeviceAuthorizationCodeResponseSchema, fr as betterAuthDeviceAuthorizationErrorResponseSchema, hr as betterAuthSessionSnapshotResponseSchema, lr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, mr as betterAuthDeviceAuthorizationTokenResponseSchema, pn as createServiceConnectionEvidenceApi, pr as betterAuthDeviceAuthorizationTokenRequestSchema, qi as computerFileAccessDaemonFrameSchema, qn as DAEMON_STREAM_KEEPALIVE_PING, ur as betterAuthDeviceAuthorizationCodeRequestSchema } from "./dist-CAypwFRu.js";
-import { Ar as pruneStaleLeases, At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Dn as emitReconcileCompletedEvidence, Dr as MIN_HEARTBEAT_INTERVAL_MS, En as emitDriftDetectedEvidence, Er as MAX_HEARTBEAT_INTERVAL_MS, Ft as resolveConfiguredProfileWorkspacePathForAccount, Hn as buildAuthenticatedControlPlaneResponse, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Mr as resolveCatalogSyncIntervalMs, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, On as emitReconcileStartedEvidence, Or as applyAcceptedLeases, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Tr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, Ut as syncDaemonRouteCatalogState, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, jr as resolveAdaptiveHeartbeatIntervalMs, kn as DaemonServiceRunError, kr as applyIntervalJitterMs$1, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject, wr as resolveRouteRegistrationReconcileDecision } from "./prepare-provider-runtime-DfsSj_N_.js";
-import { B as runtimeTransportRouteCatalogChangedFramePayloadSchema, Br as OPENMELD_REASONING_STREAM_HEADER, F as runtimeTransportRegisterSessionRequestSchema, Jr as localFolderPickerDaemonFrameSchema, Kr as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, N as runtimeTransportOpenMeldToolsControlFramePayloadSchema, On as OPENMELD_COMPUTER_CARE_HEADER, P as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, S as runtimeTransportHeartbeatRequestSchema, Vt as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, Xr as localFolderPickerHelperResultSchema, Yr as localFolderPickerHelperProtocolResultSchema, j as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, k as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, n as OPENMELD_ADMISSION_EVIDENCE_HEADER, nt as sanitizeDispatchErrorSummary, qr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, r as OPENMELD_EXECUTION_ADMISSION_HEADER, s as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH } from "./runtime-transport-D4x8_AmR.js";
-import { E as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-pLaN5cnC.js";
+import { D as openMeldRootDir, F as resolveOpenMeldRootDir, I as resolveOpenMeldServiceOwnedPathInput, P as resolveOpenMeldEnvPreset, h as isPublishedOpenMeldHome, o as accountsDir, y as normalizeAccountKey } from "./paths-De9xdA2h.js";
+import { r as resolveAuthBaseUrl } from "./auth-url-6Bb6YdNm.js";
+import { Gi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Ki as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Li as localProjectControlDaemonFrameSchema, Ni as serviceConnectionEvidenceEventSchema, Pi as serviceConnectionEvidenceJournalSchema, Ri as localProjectControlDiscoverProjectsResponseSchema, dr as betterAuthDeviceAuthorizationCodeResponseSchema, fr as betterAuthDeviceAuthorizationErrorResponseSchema, hr as betterAuthSessionSnapshotResponseSchema, lr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, mr as betterAuthDeviceAuthorizationTokenResponseSchema, pn as createServiceConnectionEvidenceApi, pr as betterAuthDeviceAuthorizationTokenRequestSchema, qi as computerFileAccessDaemonFrameSchema, qn as DAEMON_STREAM_KEEPALIVE_PING, ur as betterAuthDeviceAuthorizationCodeRequestSchema } from "./dist-Bw6OBFYo.js";
+import { Ar as pruneStaleLeases, At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Dn as emitReconcileCompletedEvidence, Dr as MIN_HEARTBEAT_INTERVAL_MS, En as emitDriftDetectedEvidence, Er as MAX_HEARTBEAT_INTERVAL_MS, Ft as resolveConfiguredProfileWorkspacePathForAccount, Hn as buildAuthenticatedControlPlaneResponse, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Mr as resolveCatalogSyncIntervalMs, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, On as emitReconcileStartedEvidence, Or as applyAcceptedLeases, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Tr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, Ut as syncDaemonRouteCatalogState, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, jr as resolveAdaptiveHeartbeatIntervalMs, kn as DaemonServiceRunError, kr as applyIntervalJitterMs$1, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject, wr as resolveRouteRegistrationReconcileDecision } from "./prepare-provider-runtime-BGdfbFyZ.js";
+import { $r as localFolderPickerHelperResultSchema, A as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, An as OPENMELD_COMPUTER_CARE_HEADER, C as runtimeTransportHeartbeatRequestSchema, F as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, I as runtimeTransportRegisterSessionRequestSchema, M as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, P as runtimeTransportOpenMeldToolsControlFramePayloadSchema, Qr as localFolderPickerHelperProtocolResultSchema, Ur as OPENMELD_REASONING_STREAM_HEADER, Ut as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, V as runtimeTransportRouteCatalogChangedFramePayloadSchema, Xr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Yr as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Zr as localFolderPickerDaemonFrameSchema, it as sanitizeDispatchErrorSummary, n as OPENMELD_ADMISSION_EVIDENCE_HEADER, r as OPENMELD_EXECUTION_ADMISSION_HEADER, s as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH } from "./runtime-transport-DH8Ks-AU.js";
+import { E as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-DhSHCYvl.js";
 import { s as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-rTE2rHZ5.js";
 import { a as formatLocalSetupActionLabel, i as formatLocalSetupActionDescription, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel } from "./local-components-DleLEzSU.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-CdSbKM0J.js";
-import { $ as emitDaemonDispatchJournalEvent, R as resolveNextRuntimeAgentControllerReportSyncAtMs, it as updateComputerFileAccessPolicy, n as handleDaemonTransportFrame, nt as readComputerFileAccessPolicy, o as sendDaemonFrame, r as parseDaemonFrame, rt as resolveComputerFileAccessStorePath, s as collectObservedSessionWorkingDirectories, tt as ComputerFileAccessStoreError, xn as cliJsonOutputEnvelopeSchema } from "./daemon-frame-transport-xQnNyg6E.js";
-import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-B4nWB2Qx.js";
-import { A as DEFAULT_RECONNECT_DELAY_MS, B as requireOpenMeldProfile, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as readDaemonCatalogSyncSignal, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, V as resolveOpenMeldProfileOrNull, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, ct as buildHumanAuthenticationCard, d as normalizeText$1, dt as resolveAuthenticationGuidance, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, lt as createAuthenticationError, mt as resolveAuthenticationReasonFromState, n as ensureDaemonRuntimePaths, ot as buildAuthenticationStatusLabel, r as resolveDaemonDeviceId, s as emitRunLine, st as buildCommandAuthenticationPromptMessage$1, tt as clearAllSelectedOpenMeldProfileIds, u as normalizeOptionalText$1, ut as extractAuthenticationPromptAction, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-B6iDyQEs.js";
-import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-C1wkT4Bi.js";
+import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-iJqU2XWw.js";
+import { Z as resolveNextRuntimeAgentControllerReportSyncAtMs, _t as resolveComputerFileAccessStorePath, b as collectObservedSessionWorkingDirectories, g as parseDaemonFrame, gt as readComputerFileAccessPolicy, h as handleDaemonTransportFrame, ht as ComputerFileAccessStoreError, jn as cliJsonOutputEnvelopeSchema, n as assertDispatchOwnedRuntimeServiceMutationAllowed, pt as emitDaemonDispatchJournalEvent, vt as updateComputerFileAccessPolicy, y as sendDaemonFrame } from "./dispatch-owned-runtime-CK2YJ2Oo.js";
+import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-BTzL0w6s.js";
+import { A as DEFAULT_RECONNECT_DELAY_MS, B as requireOpenMeldProfile, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as readDaemonCatalogSyncSignal, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, V as resolveOpenMeldProfileOrNull, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, ct as buildHumanAuthenticationCard, d as normalizeText$1, dt as resolveAuthenticationGuidance, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, lt as createAuthenticationError, mt as resolveAuthenticationReasonFromState, n as ensureDaemonRuntimePaths, ot as buildAuthenticationStatusLabel, r as resolveDaemonDeviceId, s as emitRunLine, st as buildCommandAuthenticationPromptMessage$1, tt as clearAllSelectedOpenMeldProfileIds, u as normalizeOptionalText$1, ut as extractAuthenticationPromptAction, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-DDazRZUV.js";
+import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-Bv6vhqOe.js";
 import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-BRbhGGTM.js";
-import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, C as formatDaemonServiceRefreshReliabilityMessage, Ct as ensureDaemonRuntimeContractState, D as writeDaemonStartFailureState, Dt as isVersionDowngrade, E as clearDaemonStartFailureState, Et as resolveDaemonServiceAlignmentDecision, Ft as resolveCurrentDaemonExpectedVersion, It as resolveServiceUpdateUrgency, Lt as assessServerRequiredVersion, Nt as classifyDaemonServiceRunStartability, Pt as classifyDaemonServiceWakeability, Q as buildDaemonServiceDependencySummary, Rt as describeServerRequiredVersionUnavailableReason, S as buildDaemonServiceUpdateRequiredNextStep, Tt as buildDaemonServiceTargetSpec, Ut as ensureDaemonSystemServiceCommandFiles, Vt as assessCliUpdate, W as resolveLocalServiceDemand, Wt as resolveInstalledDaemonSystemServiceCommandSpec, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as readCurrentDaemonOwnerSnapshot, a as isDaemonInventoryRunningAndStartReady$1, bt as summarizeDaemonOwnerSnapshot, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as uninstallDaemonServiceUpdateWorker, g as resolveServiceReadiness, gt as hasActiveDaemonOwners, h as resolveDaemonStatusAuthenticationAttention, ht as formatDaemonOwnerSummaryLabel, i as runDaemonServiceLifecycle, jt as DAEMON_SERVICE_REPAIR_ANOMALIES, kt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as buildDaemonOwnerSnapshotFromObservedState, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as inspectDaemonServiceInventory, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveDaemonStopStrategy, w as formatDaemonServiceUpdateRequiredMessage, wt as readDaemonRuntimeContractRepairReport, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as resolveStoppedContractWriteBlockedReason } from "./daemon-service-update-coordinator-C8cW7Vn_.js";
-import { C as assessLocalMachineFailure, E as createServiceSpawnPendingIssue, i as isOpenMeldLockError, k as formatLocalMachineIssueMessage, u as resolveOpenMeldOrphanedLockIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-CMH9eoS7.js";
-import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-DppbHxHw.js";
-import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, f as getConfiguredDaemonDispatchLimits, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-eck31vC8.js";
+import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, C as formatDaemonServiceRefreshReliabilityMessage, Ct as ensureDaemonRuntimeContractState, D as writeDaemonStartFailureState, Dt as isVersionDowngrade, E as clearDaemonStartFailureState, Et as resolveDaemonServiceAlignmentDecision, Ft as resolveCurrentDaemonExpectedVersion, It as resolveServiceUpdateUrgency, Lt as assessServerRequiredVersion, Nt as classifyDaemonServiceRunStartability, Pt as classifyDaemonServiceWakeability, Q as buildDaemonServiceDependencySummary, Rt as describeServerRequiredVersionUnavailableReason, S as buildDaemonServiceUpdateRequiredNextStep, Tt as buildDaemonServiceTargetSpec, Ut as ensureDaemonSystemServiceCommandFiles, Vt as assessCliUpdate, W as resolveLocalServiceDemand, Wt as resolveInstalledDaemonSystemServiceCommandSpec, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as readCurrentDaemonOwnerSnapshot, a as isDaemonInventoryRunningAndStartReady$1, bt as summarizeDaemonOwnerSnapshot, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as uninstallDaemonServiceUpdateWorker, g as resolveServiceReadiness, gt as hasActiveDaemonOwners, h as resolveDaemonStatusAuthenticationAttention, ht as formatDaemonOwnerSummaryLabel, i as runDaemonServiceLifecycle, jt as DAEMON_SERVICE_REPAIR_ANOMALIES, kt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as buildDaemonOwnerSnapshotFromObservedState, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as inspectDaemonServiceInventory, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveDaemonStopStrategy, w as formatDaemonServiceUpdateRequiredMessage, wt as readDaemonRuntimeContractRepairReport, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as resolveStoppedContractWriteBlockedReason } from "./daemon-service-update-coordinator-BDs0p4bA.js";
+import { C as assessLocalMachineFailure, E as createServiceSpawnPendingIssue, i as isOpenMeldLockError, k as formatLocalMachineIssueMessage, u as resolveOpenMeldOrphanedLockIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-BMI00i2F.js";
+import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-tvFZSSVr.js";
+import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, f as getConfiguredDaemonDispatchLimits, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-0AoeTi3w.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
 import { t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
-import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-B6G5xe7f.js";
-import { a as upsertDaemonServiceContract, i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, t as clearDaemonServiceContract } from "./daemon-service-contract-DhEfbzHt.js";
+import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-Dte9re5V.js";
+import { a as upsertDaemonServiceContract, i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, t as clearDaemonServiceContract } from "./daemon-service-contract-COPKbCy_.js";
 import { a as formatOpenMeldCliTextBlock, n as formatOpenMeldCliCommand, r as formatOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
-import { r as resolveAuthBaseUrl, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-Cw3V0WnE.js";
-import { t as admitServiceAccountStop } from "./service-account-authorization-Di59Cjth.js";
-import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DrwEygzu.js";
+import { t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-BgYR6ozy.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-BHWs8cRP.js";
+import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-CRxQL9m6.js";
 import { n as toErrorMessage$6, t as sleep } from "./dist-BLuEEVHh.js";
-import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-CRnFxPKA.js";
-import { n as resolveRuntimeContext } from "./context-qbQXVLF5.js";
+import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-BXAp21GH.js";
+import { n as resolveRuntimeContext } from "./context-BPIoofMa.js";
 import { n as outJsonLine, r as outLine } from "./io-DT66typ4.js";
 import { n as sanitizeTerminalDisplayText, t as createPresenter } from "./presenter-MJ5YgsOT.js";
-import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-COv3bjEl.js";
-import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-DgTXf3Gb.js";
-import { t as childExecutionHostChannel } from "./process-channel-DmTb_kO4.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-DllgoKT1.js";
+import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-C3nfbdd9.js";
+import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-EZpFLGVC.js";
+import { t as childExecutionHostChannel } from "./process-channel-C1wRGUmk.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-Bq8iZfSa.js";
 import { createHash, randomUUID } from "node:crypto";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import { access, mkdir, open, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -2739,6 +2740,25 @@ function createExecutionHostCatalogClient(host) {
 //#endregion
 //#region src/local-service/execution-host/launch.ts
 const HOST_HEALTH_TIMEOUT_MS = 2e3;
+const EXECUTION_HOST_REASON_CODE_PATTERN = /^host\.[a-z0-9_.-]{1,80}$/u;
+function projectExecutionHostUnavailableReason(error) {
+	const code = error instanceof ExecutionHostError ? error.code : "host.operation_failed";
+	if (code === "host.previous_work_unconfirmed") return {
+		code,
+		message: "OpenMeld cannot confirm that work from the previous local execution host has ended.",
+		recoveryAction: "restart_computer"
+	};
+	if (code === "host.entry_unavailable") return {
+		code,
+		message: "OpenMeld cannot find its bundled local execution host.",
+		recoveryAction: "update_openmeld_tools"
+	};
+	return {
+		code: EXECUTION_HOST_REASON_CODE_PATTERN.test(code) ? code : "host.operation_failed",
+		message: "OpenMeld could not start or verify its local execution host.",
+		recoveryAction: "open_diagnostics"
+	};
+}
 function executionHostLaunchArguments(input) {
 	const command = [
 		"service",
@@ -2787,6 +2807,7 @@ function launchExecutionHost(input) {
 	let observedAtMs = null;
 	let responsive = false;
 	let failed = false;
+	let unavailableReason = null;
 	let closing = false;
 	const eventListeners = /* @__PURE__ */ new Set();
 	const availabilityListeners = /* @__PURE__ */ new Set();
@@ -2803,6 +2824,7 @@ function launchExecutionHost(input) {
 		},
 		onFailure: (error) => {
 			failed = true;
+			unavailableReason = projectExecutionHostUnavailableReason(error);
 			setResponsive(false);
 			if (!closing) input.onFailure(error);
 		}
@@ -2819,11 +2841,15 @@ function launchExecutionHost(input) {
 				if (observation.data.pid !== child.pid) throw new ExecutionHostError("host.identity_mismatch", "The Host response belongs to a different process.");
 				lastSnapshot = observation.data;
 				observedAtMs = Date.now();
+				unavailableReason = null;
 				if (!failed) setResponsive(true);
 			}
 			return result;
 		} catch (error) {
-			if (method === "health" || method === "initialize" || method === "heartbeat") setResponsive(false);
+			if (method === "health" || method === "initialize" || method === "heartbeat") {
+				unavailableReason = projectExecutionHostUnavailableReason(error);
+				setResponsive(false);
+			}
 			throw error;
 		}
 	}
@@ -2843,7 +2869,8 @@ function launchExecutionHost(input) {
 			activeCount: lastSnapshot?.activeCount ?? null,
 			pendingCount: lastSnapshot?.pendingCount ?? null,
 			unacknowledgedResultCount: lastSnapshot?.unacknowledgedResultCount ?? null,
-			startupReplayPending: lastSnapshot?.startupReplayPending ?? null
+			startupReplayPending: lastSnapshot?.startupReplayPending ?? null,
+			unavailableReason
 		}),
 		onEvent: (listener) => {
 			eventListeners.add(listener);
@@ -3372,6 +3399,7 @@ async function assertDaemonServiceLaunchScope(input = {}) {
 		...input,
 		env: {
 			...input.env ?? process.env,
+			OPENMELD_ENV: "prod",
 			OPENMELD_ENV_PRESET: "prod",
 			OPENMELD_HOME: ""
 		}
@@ -12754,6 +12782,7 @@ async function runDaemon(input) {
 	});
 }
 async function runDaemonInstall(input, options = {}) {
+	assertDispatchOwnedRuntimeServiceMutationAllowed({ commandLabel: "openmeld service install" });
 	const runtime = await resolveRuntimeContext({ view: input.view });
 	const presenter = createPresenter(runtime);
 	emitDaemonOverviewIfAgent({
@@ -12889,6 +12918,7 @@ async function alignStoppedDaemonInstallContract(input) {
 	});
 }
 async function runDaemonUninstall(input, options = {}) {
+	assertDispatchOwnedRuntimeServiceMutationAllowed({ commandLabel: "openmeld service uninstall" });
 	const runtime = await resolveRuntimeContext({ view: input.view });
 	const presenter = createPresenter(runtime);
 	emitDaemonOverviewIfAgent({
@@ -12977,6 +13007,7 @@ async function confirmCleanDaemonUninstall() {
 }
 async function runDaemonReinstall(input, options = {}) {
 	const displayAction = normalizeDaemonServiceMaintenanceAction(input.displayAction);
+	assertDispatchOwnedRuntimeServiceMutationAllowed({ commandLabel: formatDaemonServiceMaintenanceCommand(displayAction) });
 	const runtime = await resolveRuntimeContext({
 		profile: input.profile,
 		view: input.view
@@ -13965,6 +13996,7 @@ async function runDaemonRunInteractivePreflightBeforeModePrompt(input) {
 	return null;
 }
 async function runDaemonStop(input, internal = {}) {
+	assertDispatchOwnedRuntimeServiceMutationAllowed({ commandLabel: "openmeld service stop" });
 	const runtime = await resolveRuntimeContext({ view: input.view });
 	const presenter = input.json === true ? createQuietPresenter(runtime) : createPresenter(runtime);
 	emitDaemonOverviewIfAgent({
@@ -14011,6 +14043,7 @@ async function runDaemonStop(input, internal = {}) {
 	return result;
 }
 async function runDaemonAutostart(input, options = {}) {
+	assertDispatchOwnedRuntimeServiceMutationAllowed({ commandLabel: `openmeld service autostart ${input.action}` });
 	const runtime = await resolveRuntimeContext({ view: input.view });
 	const presenter = input.json === true ? createQuietPresenter(runtime) : createPresenter(runtime);
 	const resolveServiceManager = options.resolveServiceManager ?? resolveDaemonServiceManager;
@@ -15941,4 +15974,4 @@ function parseDaemonRunMode(rawMode) {
 //#endregion
 export { buildAuthStatusSnapshot as $, buildDaemonStartNeedsAttentionCard as A, resolveDaemonServiceParticipationStatus as B, buildProfileWorkspaceRows as C, createDelayedSpinner as D, emitDaemonAgentOverview as E, emitCliJsonEnvelope as F, ensureCommandAuthenticationOrCancel as G, validateLocalProjectConnectionPath as H, runDaemonStartupPreflight as I, runAuthLogout as J, evaluateCommandAuthentication as K, readDaemonIncidentLogTail as L, buildHumanErrorCopy as M, renderHumanErrorCard as N, shouldEmitAgentOverview as O, renderHumanTextErrorCard as P, buildAuthStatusRows as Q, resolveLocalComponentsStatus as R, buildProfileWorkspacePresentation as S, createQuietPresenter as T, connectWebSocket as U, LocalProjectConnectionError as V, buildCommandAuthenticationPromptMessage as W, runAuthStatus as X, runAuthMenu as Y, exchangeOneTimeTokenAuthSession as Z, buildDaemonBackgroundStartFailure as _, resolveDeviceTokenExpiresAt as _t, runDaemonBackgroundStartForDecision as a, promptTextEntry as at, formatServiceRuntimeHeadline as b, runDaemonInterrupt as c, finishCurrentCommandCheckScope as ct, runDaemonServiceDetached as d, resetCurrentCommandCheckState as dt, formatActiveOrganizationLabel as et, runDaemonSnapshot as f, startCurrentCommandCheckScope as ft, runDaemonUninstall as g, resolveDeviceAuthClientId as gt, runDaemonTeardownStrict as h, requestDeviceToken as ht, runDaemonAutostart as i, buildUnifiedCardFrame as it, runDaemonStartDecisionPrompt as j, buildDaemonStartDeferredCard as k, runDaemonReinstall as l, getCurrentCommandCheckState as lt, runDaemonStop as m, fetchAuthUserSnapshot as mt, isManagedSystemServiceBootstrapRun as n, renderInfoCard as nt, runDaemonCancel as o, isReturnKeypress as ot, runDaemonStatusFlow as p, extractAuthApiErrorMessage as pt, runAuthLogin as q, runDaemon as r, renderTextInfoCard as rt, runDaemonInstall as s, runInteractivePrompt as st, bestEffortStopCurrentLaneDaemonService as t, buildTextInfoCardLines as tt, runDaemonRunAfterEntryChecks as u, isCurrentCommandCheckScopeActive as ut, buildSystemServiceStartupFailureReportFromVerdict as v, revokeAuthAccessToken as vt, reconcileCliVersionView as w, resolveServiceParticipationReadiness as x, formatServiceParticipationReadinessLabel as y, writeInstalledLocalComponentsSnapshot as z };
 
-//# sourceMappingURL=service-B9y1SQlB.js.map
+//# sourceMappingURL=service-KHA_Yv8q.js.map