openmeld 0.3.232 → 0.3.233

package/dist/{service-KHA_Yv8q.js → service-D9QVc4_y.js}

@@ -2,22 +2,23 @@
 
 import { D as openMeldRootDir, F as resolveOpenMeldRootDir, I as resolveOpenMeldServiceOwnedPathInput, P as resolveOpenMeldEnvPreset, h as isPublishedOpenMeldHome, o as accountsDir, y as normalizeAccountKey } from "./paths-De9xdA2h.js";
 import { r as resolveAuthBaseUrl } from "./auth-url-6Bb6YdNm.js";
-import { Gi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Ki as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Li as localProjectControlDaemonFrameSchema, Ni as serviceConnectionEvidenceEventSchema, Pi as serviceConnectionEvidenceJournalSchema, Ri as localProjectControlDiscoverProjectsResponseSchema, dr as betterAuthDeviceAuthorizationCodeResponseSchema, fr as betterAuthDeviceAuthorizationErrorResponseSchema, hr as betterAuthSessionSnapshotResponseSchema, lr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, mr as betterAuthDeviceAuthorizationTokenResponseSchema, pn as createServiceConnectionEvidenceApi, pr as betterAuthDeviceAuthorizationTokenRequestSchema, qi as computerFileAccessDaemonFrameSchema, qn as DAEMON_STREAM_KEEPALIVE_PING, ur as betterAuthDeviceAuthorizationCodeRequestSchema } from "./dist-Bw6OBFYo.js";
-import { Ar as pruneStaleLeases, At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Dn as emitReconcileCompletedEvidence, Dr as MIN_HEARTBEAT_INTERVAL_MS, En as emitDriftDetectedEvidence, Er as MAX_HEARTBEAT_INTERVAL_MS, Ft as resolveConfiguredProfileWorkspacePathForAccount, Hn as buildAuthenticatedControlPlaneResponse, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Mr as resolveCatalogSyncIntervalMs, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, On as emitReconcileStartedEvidence, Or as applyAcceptedLeases, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Tr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, Ut as syncDaemonRouteCatalogState, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, jr as resolveAdaptiveHeartbeatIntervalMs, kn as DaemonServiceRunError, kr as applyIntervalJitterMs$1, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject, wr as resolveRouteRegistrationReconcileDecision } from "./prepare-provider-runtime-BGdfbFyZ.js";
-import { $r as localFolderPickerHelperResultSchema, A as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, An as OPENMELD_COMPUTER_CARE_HEADER, C as runtimeTransportHeartbeatRequestSchema, F as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, I as runtimeTransportRegisterSessionRequestSchema, M as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, P as runtimeTransportOpenMeldToolsControlFramePayloadSchema, Qr as localFolderPickerHelperProtocolResultSchema, Ur as OPENMELD_REASONING_STREAM_HEADER, Ut as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, V as runtimeTransportRouteCatalogChangedFramePayloadSchema, Xr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Yr as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Zr as localFolderPickerDaemonFrameSchema, it as sanitizeDispatchErrorSummary, n as OPENMELD_ADMISSION_EVIDENCE_HEADER, r as OPENMELD_EXECUTION_ADMISSION_HEADER, s as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH } from "./runtime-transport-DH8Ks-AU.js";
-import { E as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-DhSHCYvl.js";
-import { s as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-rTE2rHZ5.js";
-import { a as formatLocalSetupActionLabel, i as formatLocalSetupActionDescription, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel } from "./local-components-DleLEzSU.js";
+import { Gi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Ki as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Li as localProjectControlDaemonFrameSchema, Ni as serviceConnectionEvidenceEventSchema, Pi as serviceConnectionEvidenceJournalSchema, Ri as localProjectControlDiscoverProjectsResponseSchema, dr as betterAuthDeviceAuthorizationCodeResponseSchema, fr as betterAuthDeviceAuthorizationErrorResponseSchema, hr as betterAuthSessionSnapshotResponseSchema, lr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, mr as betterAuthDeviceAuthorizationTokenResponseSchema, pn as createServiceConnectionEvidenceApi, pr as betterAuthDeviceAuthorizationTokenRequestSchema, qi as computerFileAccessDaemonFrameSchema, qn as DAEMON_STREAM_KEEPALIVE_PING, ur as betterAuthDeviceAuthorizationCodeRequestSchema } from "./dist-BgYBvEBB.js";
+import { An as emitDriftDetectedEvidence, Ar as resolveRouteRegistrationReconcileDecision, At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Fr as applyIntervalJitterMs$1, Ft as resolveConfiguredProfileWorkspacePathForAccount, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, Ir as pruneStaleLeases, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Kn as buildAuthenticatedControlPlaneResponse, Lr as resolveAdaptiveHeartbeatIntervalMs, Mn as emitReconcileStartedEvidence, Mr as MAX_HEARTBEAT_INTERVAL_MS, Nn as DaemonServiceRunError, Nr as MIN_HEARTBEAT_INTERVAL_MS, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Pr as applyAcceptedLeases, Rr as resolveCatalogSyncIntervalMs, Ut as syncDaemonRouteCatalogState, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, jn as emitReconcileCompletedEvidence, jr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject } from "./prepare-provider-runtime-CD6XRt7X.js";
+import { $r as localFolderPickerHelperResultSchema, A as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, An as OPENMELD_COMPUTER_CARE_HEADER, C as runtimeTransportHeartbeatRequestSchema, F as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, I as runtimeTransportRegisterSessionRequestSchema, M as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, P as runtimeTransportOpenMeldToolsControlFramePayloadSchema, Qr as localFolderPickerHelperProtocolResultSchema, Ur as OPENMELD_REASONING_STREAM_HEADER, Ut as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, V as runtimeTransportRouteCatalogChangedFramePayloadSchema, Xr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Yr as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Zr as localFolderPickerDaemonFrameSchema, it as sanitizeDispatchErrorSummary, n as OPENMELD_ADMISSION_EVIDENCE_HEADER, r as OPENMELD_EXECUTION_ADMISSION_HEADER, s as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH } from "./runtime-transport-D4CVffnp.js";
+import { a as formatLocalSetupActionLabel, i as formatLocalSetupActionDescription, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel } from "./local-components-DJiMS67S.js";
+import { o as resolveCliBinaryPlatform } from "./cli-binary-manifest-ETxqCzfS.js";
+import { D as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-iXCJO5oB.js";
+import { s as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-QqGL-jtT.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-iJqU2XWw.js";
-import { Z as resolveNextRuntimeAgentControllerReportSyncAtMs, _t as resolveComputerFileAccessStorePath, b as collectObservedSessionWorkingDirectories, g as parseDaemonFrame, gt as readComputerFileAccessPolicy, h as handleDaemonTransportFrame, ht as ComputerFileAccessStoreError, jn as cliJsonOutputEnvelopeSchema, n as assertDispatchOwnedRuntimeServiceMutationAllowed, pt as emitDaemonDispatchJournalEvent, vt as updateComputerFileAccessPolicy, y as sendDaemonFrame } from "./dispatch-owned-runtime-CK2YJ2Oo.js";
-import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-BTzL0w6s.js";
-import { A as DEFAULT_RECONNECT_DELAY_MS, B as requireOpenMeldProfile, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as readDaemonCatalogSyncSignal, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, V as resolveOpenMeldProfileOrNull, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, ct as buildHumanAuthenticationCard, d as normalizeText$1, dt as resolveAuthenticationGuidance, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, lt as createAuthenticationError, mt as resolveAuthenticationReasonFromState, n as ensureDaemonRuntimePaths, ot as buildAuthenticationStatusLabel, r as resolveDaemonDeviceId, s as emitRunLine, st as buildCommandAuthenticationPromptMessage$1, tt as clearAllSelectedOpenMeldProfileIds, u as normalizeOptionalText$1, ut as extractAuthenticationPromptAction, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-DDazRZUV.js";
+import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-AWe5DSV8.js";
+import { Z as resolveNextRuntimeAgentControllerReportSyncAtMs, _t as resolveComputerFileAccessStorePath, b as collectObservedSessionWorkingDirectories, g as parseDaemonFrame, gt as readComputerFileAccessPolicy, h as handleDaemonTransportFrame, ht as ComputerFileAccessStoreError, jn as cliJsonOutputEnvelopeSchema, n as assertDispatchOwnedRuntimeServiceMutationAllowed, pt as emitDaemonDispatchJournalEvent, vt as updateComputerFileAccessPolicy, y as sendDaemonFrame } from "./dispatch-owned-runtime-BeIQetEt.js";
+import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-DZI6Ke3_.js";
+import { A as DEFAULT_RECONNECT_DELAY_MS, B as requireOpenMeldProfile, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as readDaemonCatalogSyncSignal, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, V as resolveOpenMeldProfileOrNull, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, ct as buildHumanAuthenticationCard, d as normalizeText$1, dt as resolveAuthenticationGuidance, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, lt as createAuthenticationError, mt as resolveAuthenticationReasonFromState, n as ensureDaemonRuntimePaths, ot as buildAuthenticationStatusLabel, r as resolveDaemonDeviceId, s as emitRunLine, st as buildCommandAuthenticationPromptMessage$1, tt as clearAllSelectedOpenMeldProfileIds, u as normalizeOptionalText$1, ut as extractAuthenticationPromptAction, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-DbSIqHoZ.js";
 import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-Bv6vhqOe.js";
 import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-BRbhGGTM.js";
-import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, C as formatDaemonServiceRefreshReliabilityMessage, Ct as ensureDaemonRuntimeContractState, D as writeDaemonStartFailureState, Dt as isVersionDowngrade, E as clearDaemonStartFailureState, Et as resolveDaemonServiceAlignmentDecision, Ft as resolveCurrentDaemonExpectedVersion, It as resolveServiceUpdateUrgency, Lt as assessServerRequiredVersion, Nt as classifyDaemonServiceRunStartability, Pt as classifyDaemonServiceWakeability, Q as buildDaemonServiceDependencySummary, Rt as describeServerRequiredVersionUnavailableReason, S as buildDaemonServiceUpdateRequiredNextStep, Tt as buildDaemonServiceTargetSpec, Ut as ensureDaemonSystemServiceCommandFiles, Vt as assessCliUpdate, W as resolveLocalServiceDemand, Wt as resolveInstalledDaemonSystemServiceCommandSpec, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as readCurrentDaemonOwnerSnapshot, a as isDaemonInventoryRunningAndStartReady$1, bt as summarizeDaemonOwnerSnapshot, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as uninstallDaemonServiceUpdateWorker, g as resolveServiceReadiness, gt as hasActiveDaemonOwners, h as resolveDaemonStatusAuthenticationAttention, ht as formatDaemonOwnerSummaryLabel, i as runDaemonServiceLifecycle, jt as DAEMON_SERVICE_REPAIR_ANOMALIES, kt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as buildDaemonOwnerSnapshotFromObservedState, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as inspectDaemonServiceInventory, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveDaemonStopStrategy, w as formatDaemonServiceUpdateRequiredMessage, wt as readDaemonRuntimeContractRepairReport, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as resolveStoppedContractWriteBlockedReason } from "./daemon-service-update-coordinator-BDs0p4bA.js";
+import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, C as formatDaemonServiceRefreshReliabilityMessage, Ct as ensureDaemonRuntimeContractState, D as writeDaemonStartFailureState, Dt as isVersionDowngrade, E as clearDaemonStartFailureState, Et as resolveDaemonServiceAlignmentDecision, Ft as resolveCurrentDaemonExpectedVersion, It as resolveServiceUpdateUrgency, Lt as assessServerRequiredVersion, Nt as classifyDaemonServiceRunStartability, Pt as classifyDaemonServiceWakeability, Q as buildDaemonServiceDependencySummary, Rt as describeServerRequiredVersionUnavailableReason, S as buildDaemonServiceUpdateRequiredNextStep, Tt as buildDaemonServiceTargetSpec, Ut as ensureDaemonSystemServiceCommandFiles, Vt as assessCliUpdate, W as resolveLocalServiceDemand, Wt as resolveInstalledDaemonSystemServiceCommandSpec, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as readCurrentDaemonOwnerSnapshot, a as isDaemonInventoryRunningAndStartReady$1, bt as summarizeDaemonOwnerSnapshot, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as uninstallDaemonServiceUpdateWorker, g as resolveServiceReadiness, gt as hasActiveDaemonOwners, h as resolveDaemonStatusAuthenticationAttention, ht as formatDaemonOwnerSummaryLabel, i as runDaemonServiceLifecycle, jt as DAEMON_SERVICE_REPAIR_ANOMALIES, kt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as buildDaemonOwnerSnapshotFromObservedState, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as inspectDaemonServiceInventory, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveDaemonStopStrategy, w as formatDaemonServiceUpdateRequiredMessage, wt as readDaemonRuntimeContractRepairReport, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as resolveStoppedContractWriteBlockedReason } from "./daemon-service-update-coordinator-BgVBlJ4d.js";
 import { C as assessLocalMachineFailure, E as createServiceSpawnPendingIssue, i as isOpenMeldLockError, k as formatLocalMachineIssueMessage, u as resolveOpenMeldOrphanedLockIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-BMI00i2F.js";
-import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-tvFZSSVr.js";
+import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-BciBrA3Y.js";
 import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, f as getConfiguredDaemonDispatchLimits, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-0AoeTi3w.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
 import { t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
@@ -25,17 +26,18 @@ import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H
 import { a as upsertDaemonServiceContract, i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, t as clearDaemonServiceContract } from "./daemon-service-contract-COPKbCy_.js";
 import { a as formatOpenMeldCliTextBlock, n as formatOpenMeldCliCommand, r as formatOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
 import { t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-BgYR6ozy.js";
-import { t as admitServiceAccountStop } from "./service-account-authorization-BHWs8cRP.js";
-import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-CRxQL9m6.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-DLhUgGDb.js";
+import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DsVVvKJe.js";
+import { r as readWindowsManagedCliInstallation } from "./windows-managed-install-BVlswqjA.js";
 import { n as toErrorMessage$6, t as sleep } from "./dist-BLuEEVHh.js";
 import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-BXAp21GH.js";
-import { n as resolveRuntimeContext } from "./context-BPIoofMa.js";
+import { n as resolveRuntimeContext } from "./context-BnhlFS8m.js";
 import { n as outJsonLine, r as outLine } from "./io-DT66typ4.js";
 import { n as sanitizeTerminalDisplayText, t as createPresenter } from "./presenter-MJ5YgsOT.js";
-import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-C3nfbdd9.js";
-import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-EZpFLGVC.js";
-import { t as childExecutionHostChannel } from "./process-channel-C1wRGUmk.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-Bq8iZfSa.js";
+import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-C7S-6bWV.js";
+import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-C-RPnq_p.js";
+import { t as childExecutionHostChannel } from "./process-channel-CzgOWiuh.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-B3mwQFEA.js";
 import { createHash, randomUUID } from "node:crypto";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import { access, mkdir, open, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -4806,6 +4808,7 @@ async function rejectAfter(operation, timeoutMs, createError) {
 const runGitCommand = async (input) => await new Promise((resolveCommand, rejectCommand) => {
 	execFile(input.command, input.args, {
 		encoding: "utf8",
+		windowsHide: true,
 		maxBuffer: 1024 * 1024,
 		timeout: input.timeoutMs
 	}, (error, stdout, stderr) => {
@@ -7312,6 +7315,37 @@ async function resolveDaemonServiceParticipationStatus(input) {
 	};
 }
 //#endregion
+//#region src/local-components/installation-source.ts
+async function resolveLocalComponentsInstallationSource(input = {}) {
+	const os = input.platform ?? process.platform;
+	const platform = resolveCliBinaryPlatform(os, input.arch ?? process.arch);
+	if (!(input.binaryDistribution ?? isBinaryDistribution())) return {
+		distribution: "npm",
+		channel: "stable",
+		platform
+	};
+	try {
+		const installed = await (input.readInstallation ?? readManagedCliInstallation)();
+		if (!installed || input.expectedVersion && installed.version !== input.expectedVersion) return;
+		if (os === "win32") {
+			const record = await (input.readWindowsInstallation ?? readWindowsManagedCliInstallation)(input.root ?? resolveOpenMeldRootDir());
+			if (!record || record.version !== installed.version) return;
+			return {
+				distribution: "binary",
+				channel: record.releaseChannel ?? "stable",
+				platform
+			};
+		}
+		return {
+			distribution: "binary",
+			channel: "stable",
+			platform
+		};
+	} catch {
+		return;
+	}
+}
+//#endregion
 //#region src/local-components/manifest.ts
 const OPENMELD_CLI_COMMAND_CONTRACT_VERSION = "openmeld-cli-command-contract-2026-09-space-files-1gib-v1";
 const OPENMELD_SKILLS_CONTRACT_VERSION = "openmeld-skills-contract-2026-09-explicit-space-recipients-v1";
@@ -7392,6 +7426,7 @@ async function resolveLocalComponentsStatus(input = {}) {
 		resolveOpenMeldToolsUpdateOperationProjection()
 	]);
 	const resolvedCli = await resolveCliComponentStatus(input);
+	const installationSource = await resolveLocalComponentsInstallationSource({ expectedVersion: resolvedCli.packageVersion });
 	const cli = updateProjection?.failureCode ? {
 		...resolvedCli,
 		reasonCodes: Array.from(/* @__PURE__ */ new Set([...resolvedCli.reasonCodes, updateProjection.failureCode]))
@@ -7407,6 +7442,7 @@ async function resolveLocalComponentsStatus(input = {}) {
 		schemaVersion: 1,
 		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
 		entrypoint: "setup",
+		...installationSource ? { installationSource } : {},
 		summaryLabel: formatLocalComponentsSummaryLabel({
 			cliStatus: cli.status,
 			setupAction
@@ -15974,4 +16010,4 @@ function parseDaemonRunMode(rawMode) {
 //#endregion
 export { buildAuthStatusSnapshot as $, buildDaemonStartNeedsAttentionCard as A, resolveDaemonServiceParticipationStatus as B, buildProfileWorkspaceRows as C, createDelayedSpinner as D, emitDaemonAgentOverview as E, emitCliJsonEnvelope as F, ensureCommandAuthenticationOrCancel as G, validateLocalProjectConnectionPath as H, runDaemonStartupPreflight as I, runAuthLogout as J, evaluateCommandAuthentication as K, readDaemonIncidentLogTail as L, buildHumanErrorCopy as M, renderHumanErrorCard as N, shouldEmitAgentOverview as O, renderHumanTextErrorCard as P, buildAuthStatusRows as Q, resolveLocalComponentsStatus as R, buildProfileWorkspacePresentation as S, createQuietPresenter as T, connectWebSocket as U, LocalProjectConnectionError as V, buildCommandAuthenticationPromptMessage as W, runAuthStatus as X, runAuthMenu as Y, exchangeOneTimeTokenAuthSession as Z, buildDaemonBackgroundStartFailure as _, resolveDeviceTokenExpiresAt as _t, runDaemonBackgroundStartForDecision as a, promptTextEntry as at, formatServiceRuntimeHeadline as b, runDaemonInterrupt as c, finishCurrentCommandCheckScope as ct, runDaemonServiceDetached as d, resetCurrentCommandCheckState as dt, formatActiveOrganizationLabel as et, runDaemonSnapshot as f, startCurrentCommandCheckScope as ft, runDaemonUninstall as g, resolveDeviceAuthClientId as gt, runDaemonTeardownStrict as h, requestDeviceToken as ht, runDaemonAutostart as i, buildUnifiedCardFrame as it, runDaemonStartDecisionPrompt as j, buildDaemonStartDeferredCard as k, runDaemonReinstall as l, getCurrentCommandCheckState as lt, runDaemonStop as m, fetchAuthUserSnapshot as mt, isManagedSystemServiceBootstrapRun as n, renderInfoCard as nt, runDaemonCancel as o, isReturnKeypress as ot, runDaemonStatusFlow as p, extractAuthApiErrorMessage as pt, runAuthLogin as q, runDaemon as r, renderTextInfoCard as rt, runDaemonInstall as s, runInteractivePrompt as st, bestEffortStopCurrentLaneDaemonService as t, buildTextInfoCardLines as tt, runDaemonRunAfterEntryChecks as u, isCurrentCommandCheckScopeActive as ut, buildSystemServiceStartupFailureReportFromVerdict as v, revokeAuthAccessToken as vt, reconcileCliVersionView as w, resolveServiceParticipationReadiness as x, formatServiceParticipationReadinessLabel as y, writeInstalledLocalComponentsSnapshot as z };
 
-//# sourceMappingURL=service-KHA_Yv8q.js.map
+//# sourceMappingURL=service-D9QVc4_y.js.map