openmeld 0.3.233 → 0.3.234

package/dist/{service-D9QVc4_y.js → service-CMNaJrvV.js}

@@ -2,42 +2,43 @@
 
 import { D as openMeldRootDir, F as resolveOpenMeldRootDir, I as resolveOpenMeldServiceOwnedPathInput, P as resolveOpenMeldEnvPreset, h as isPublishedOpenMeldHome, o as accountsDir, y as normalizeAccountKey } from "./paths-De9xdA2h.js";
 import { r as resolveAuthBaseUrl } from "./auth-url-6Bb6YdNm.js";
-import { Gi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, Ki as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Li as localProjectControlDaemonFrameSchema, Ni as serviceConnectionEvidenceEventSchema, Pi as serviceConnectionEvidenceJournalSchema, Ri as localProjectControlDiscoverProjectsResponseSchema, dr as betterAuthDeviceAuthorizationCodeResponseSchema, fr as betterAuthDeviceAuthorizationErrorResponseSchema, hr as betterAuthSessionSnapshotResponseSchema, lr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, mr as betterAuthDeviceAuthorizationTokenResponseSchema, pn as createServiceConnectionEvidenceApi, pr as betterAuthDeviceAuthorizationTokenRequestSchema, qi as computerFileAccessDaemonFrameSchema, qn as DAEMON_STREAM_KEEPALIVE_PING, ur as betterAuthDeviceAuthorizationCodeRequestSchema } from "./dist-BgYBvEBB.js";
-import { An as emitDriftDetectedEvidence, Ar as resolveRouteRegistrationReconcileDecision, At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Fr as applyIntervalJitterMs$1, Ft as resolveConfiguredProfileWorkspacePathForAccount, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, Ir as pruneStaleLeases, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Kn as buildAuthenticatedControlPlaneResponse, Lr as resolveAdaptiveHeartbeatIntervalMs, Mn as emitReconcileStartedEvidence, Mr as MAX_HEARTBEAT_INTERVAL_MS, Nn as DaemonServiceRunError, Nr as MIN_HEARTBEAT_INTERVAL_MS, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Pr as applyAcceptedLeases, Rr as resolveCatalogSyncIntervalMs, Ut as syncDaemonRouteCatalogState, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, jn as emitReconcileCompletedEvidence, jr as ADAPTIVE_HEARTBEAT_JITTER_RATIO, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject } from "./prepare-provider-runtime-CD6XRt7X.js";
-import { $r as localFolderPickerHelperResultSchema, A as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, An as OPENMELD_COMPUTER_CARE_HEADER, C as runtimeTransportHeartbeatRequestSchema, F as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, I as runtimeTransportRegisterSessionRequestSchema, M as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, P as runtimeTransportOpenMeldToolsControlFramePayloadSchema, Qr as localFolderPickerHelperProtocolResultSchema, Ur as OPENMELD_REASONING_STREAM_HEADER, Ut as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, V as runtimeTransportRouteCatalogChangedFramePayloadSchema, Xr as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, Yr as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, Zr as localFolderPickerDaemonFrameSchema, it as sanitizeDispatchErrorSummary, n as OPENMELD_ADMISSION_EVIDENCE_HEADER, r as OPENMELD_EXECUTION_ADMISSION_HEADER, s as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH } from "./runtime-transport-D4CVffnp.js";
+import { Gi as OPENMELD_RUNTIME_CAPABILITIES_HEADER, Ii as localProjectControlDaemonFrameSchema, Ki as computerFileAccessDaemonFrameSchema, Li as localProjectControlDiscoverProjectsResponseSchema, Mi as serviceConnectionEvidenceEventSchema, Ni as serviceConnectionEvidenceJournalSchema, Wi as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, dr as betterAuthDeviceAuthorizationCodeResponseSchema, fr as betterAuthDeviceAuthorizationErrorResponseSchema, hr as betterAuthSessionSnapshotResponseSchema, lr as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, mr as betterAuthDeviceAuthorizationTokenResponseSchema, pn as createServiceConnectionEvidenceApi, pr as betterAuthDeviceAuthorizationTokenRequestSchema, qn as DAEMON_STREAM_KEEPALIVE_PING, ur as betterAuthDeviceAuthorizationCodeRequestSchema } from "./dist-CJL7LE-y.js";
+import { A as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, C as runtimeTransportHeartbeatRequestSchema, F as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, I as runtimeTransportRegisterSessionRequestSchema, M as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, P as runtimeTransportOpenMeldToolsControlFramePayloadSchema, V as runtimeTransportRouteCatalogChangedFramePayloadSchema, Wn as OPENMELD_COMPUTER_CARE_HEADER, di as localFolderPickerDaemonFrameSchema, fi as localFolderPickerHelperProtocolResultSchema, li as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, n as OPENMELD_ADMISSION_EVIDENCE_HEADER, pi as localFolderPickerHelperResultSchema, r as OPENMELD_EXECUTION_ADMISSION_HEADER, ri as OPENMELD_REASONING_STREAM_HEADER, rn as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, s as localWakeRouteWorkingFolderObservationSchema, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, ui as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, vt as sanitizeDispatchErrorSummary } from "./runtime-transport-DyBmX7ds.js";
+import { s as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-QqGL-jtT.js";
+import { An as emitReconcileCompletedEvidence, Ar as ADAPTIVE_HEARTBEAT_JITTER_RATIO, At as ensureOpenMeldManagedProfileWorkspace, Bt as createMutableRouteCatalogState, Fr as pruneStaleLeases, Ft as resolveConfiguredProfileWorkspacePathForAccount, Gn as buildAuthenticatedControlPlaneResponse, Ht as summarizeSkippedDaemonProfiles, I as listAgentTargetStates, Ir as resolveAdaptiveHeartbeatIntervalMs, It as setCustomProfileWorkspace, Jt as isDaemonReconcileInProgressError, Lr as resolveCatalogSyncIntervalMs, Mn as DaemonServiceRunError, Mr as MIN_HEARTBEAT_INTERVAL_MS, Nr as applyAcceptedLeases, Nt as readProfileWorkspaceConfigForAccount, O as syncDeviceRuntimeStateProjection, Ot as resolveRegistryRuntimeAdapterCapabilitySnapshot, Pr as applyIntervalJitterMs$1, Ut as syncDaemonRouteCatalogState, Vt as createRouteCatalogFromMutableState, _t as removeProjectConnection, bt as setDefaultProjectConnection, ct as ProjectBindingOperationError, ft as listProjectBindings, gt as removeMissingProjectConnections, jn as emitReconcileStartedEvidence, jr as MAX_HEARTBEAT_INTERVAL_MS, kn as emitDriftDetectedEvidence, kr as resolveRouteRegistrationReconcileDecision, ln as resolveCatalogSyncSkippedProfilesLogState, lt as ProjectBindingStoreUpdateRequiredError, pt as listProjectConnectionsWithStatus, tn as buildLocalServiceDiagnosticsPayload, ut as bindProject } from "./prepare-provider-runtime-Bf2GBijn.js";
 import { a as formatLocalSetupActionLabel, i as formatLocalSetupActionDescription, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel } from "./local-components-DJiMS67S.js";
 import { o as resolveCliBinaryPlatform } from "./cli-binary-manifest-ETxqCzfS.js";
-import { D as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-iXCJO5oB.js";
-import { s as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-QqGL-jtT.js";
+import { D as ServiceAccountAdmissionError, S as setAuthSession, _ as onAuthSessionCredentialAvailable, a as beginAuthSessionTransition, d as getAuthSessionState, i as assertAuthSessionMutationAvailable, o as buildStoredAuthSessionIdentity, s as clearAuthSession, v as onAuthSessionCredentialObservation, w as withAdmittedServiceSession } from "./auth-session-CjxqNKvh.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-AWe5DSV8.js";
-import { Z as resolveNextRuntimeAgentControllerReportSyncAtMs, _t as resolveComputerFileAccessStorePath, b as collectObservedSessionWorkingDirectories, g as parseDaemonFrame, gt as readComputerFileAccessPolicy, h as handleDaemonTransportFrame, ht as ComputerFileAccessStoreError, jn as cliJsonOutputEnvelopeSchema, n as assertDispatchOwnedRuntimeServiceMutationAllowed, pt as emitDaemonDispatchJournalEvent, vt as updateComputerFileAccessPolicy, y as sendDaemonFrame } from "./dispatch-owned-runtime-BeIQetEt.js";
-import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-DZI6Ke3_.js";
-import { A as DEFAULT_RECONNECT_DELAY_MS, B as requireOpenMeldProfile, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as readDaemonCatalogSyncSignal, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, V as resolveOpenMeldProfileOrNull, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, ct as buildHumanAuthenticationCard, d as normalizeText$1, dt as resolveAuthenticationGuidance, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, lt as createAuthenticationError, mt as resolveAuthenticationReasonFromState, n as ensureDaemonRuntimePaths, ot as buildAuthenticationStatusLabel, r as resolveDaemonDeviceId, s as emitRunLine, st as buildCommandAuthenticationPromptMessage$1, tt as clearAllSelectedOpenMeldProfileIds, u as normalizeOptionalText$1, ut as extractAuthenticationPromptAction, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-DbSIqHoZ.js";
+import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-CON1kJsS.js";
+import { $ as readComputerFileAccessPolicy, L as createServiceGitEnvironment, Q as ComputerFileAccessStoreError, X as emitDaemonDispatchJournalEvent, Y as resolveNextRuntimeAgentControllerReportSyncAtMs, _ as collectObservedSessionWorkingDirectories, et as resolveComputerFileAccessStorePath, g as sendDaemonFrame, h as parseDaemonFrame, m as handleDaemonTransportFrame, mn as cliJsonOutputEnvelopeSchema, n as assertDispatchOwnedRuntimeServiceMutationAllowed, tt as updateComputerFileAccessPolicy } from "./dispatch-owned-runtime-Czq270vy.js";
+import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-B-x4bBKx.js";
+import { A as DEFAULT_RECONNECT_DELAY_MS, B as requireOpenMeldProfile, C as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, D as DAEMON_STREAM_CONNECT_TIMEOUT_MS, F as REGISTER_RESPONSE_TIMEOUT_MS, I as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, M as MAX_RECONNECT_DELAY_MS, N as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, O as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, Q as readDaemonCatalogSyncSignal, R as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS, V as resolveOpenMeldProfileOrNull, _ as toErrorMessage$5, b as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, c as normalizeHeartbeatIntervalMs, ct as buildHumanAuthenticationCard, d as normalizeText$1, dt as resolveAuthenticationGuidance, f as nowIsoString, i as resolvePreferredDaemonDeviceId, j as HEARTBEAT_RESPONSE_TIMEOUT_MS, k as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, lt as createAuthenticationError, mt as resolveAuthenticationReasonFromState, n as ensureDaemonRuntimePaths, ot as buildAuthenticationStatusLabel, r as resolveDaemonDeviceId, s as emitRunLine, st as buildCommandAuthenticationPromptMessage$1, tt as clearAllSelectedOpenMeldProfileIds, u as normalizeOptionalText$1, ut as extractAuthenticationPromptAction, v as warnDaemonEvent, w as DAEMON_RUNTIME_CONTRACT_EPOCH, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, y as CATALOG_SYNC_RETRY_INTERVAL_MS } from "./daemon-device-id-OMqh2F9_.js";
 import { i as writeDaemonRuntimeLease } from "./daemon-runtime-lease-Bv6vhqOe.js";
 import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-BRbhGGTM.js";
-import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, C as formatDaemonServiceRefreshReliabilityMessage, Ct as ensureDaemonRuntimeContractState, D as writeDaemonStartFailureState, Dt as isVersionDowngrade, E as clearDaemonStartFailureState, Et as resolveDaemonServiceAlignmentDecision, Ft as resolveCurrentDaemonExpectedVersion, It as resolveServiceUpdateUrgency, Lt as assessServerRequiredVersion, Nt as classifyDaemonServiceRunStartability, Pt as classifyDaemonServiceWakeability, Q as buildDaemonServiceDependencySummary, Rt as describeServerRequiredVersionUnavailableReason, S as buildDaemonServiceUpdateRequiredNextStep, Tt as buildDaemonServiceTargetSpec, Ut as ensureDaemonSystemServiceCommandFiles, Vt as assessCliUpdate, W as resolveLocalServiceDemand, Wt as resolveInstalledDaemonSystemServiceCommandSpec, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as readCurrentDaemonOwnerSnapshot, a as isDaemonInventoryRunningAndStartReady$1, bt as summarizeDaemonOwnerSnapshot, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as uninstallDaemonServiceUpdateWorker, g as resolveServiceReadiness, gt as hasActiveDaemonOwners, h as resolveDaemonStatusAuthenticationAttention, ht as formatDaemonOwnerSummaryLabel, i as runDaemonServiceLifecycle, jt as DAEMON_SERVICE_REPAIR_ANOMALIES, kt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as buildDaemonOwnerSnapshotFromObservedState, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as inspectDaemonServiceInventory, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveDaemonStopStrategy, w as formatDaemonServiceUpdateRequiredMessage, wt as readDaemonRuntimeContractRepairReport, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as resolveStoppedContractWriteBlockedReason } from "./daemon-service-update-coordinator-BgVBlJ4d.js";
+import { $ as buildDaemonServiceDependencyTitle, At as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, C as formatDaemonServiceRefreshReliabilityMessage, Ct as ensureDaemonRuntimeContractState, D as writeDaemonStartFailureState, Dt as isVersionDowngrade, E as clearDaemonStartFailureState, Et as resolveDaemonServiceAlignmentDecision, Ft as resolveCurrentDaemonExpectedVersion, It as resolveServiceUpdateUrgency, Lt as assessServerRequiredVersion, Nt as classifyDaemonServiceRunStartability, Pt as classifyDaemonServiceWakeability, Q as buildDaemonServiceDependencySummary, Rt as describeServerRequiredVersionUnavailableReason, S as buildDaemonServiceUpdateRequiredNextStep, Tt as buildDaemonServiceTargetSpec, Ut as ensureDaemonSystemServiceCommandFiles, Vt as assessCliUpdate, W as resolveLocalServiceDemand, Wt as resolveInstalledDaemonSystemServiceCommandSpec, X as buildDaemonServiceDependencyMeaning, Y as buildDaemonServiceDependencyDetails, Z as buildDaemonServiceDependencyNextStep, _t as readCurrentDaemonOwnerSnapshot, a as isDaemonInventoryRunningAndStartReady$1, bt as summarizeDaemonOwnerSnapshot, c as waitForSystemServiceStartup$1, ct as writeOpenMeldToolsMaintenancePolicy, d as captureDaemonServiceEvidenceBestEffort, et as resolveDaemonServiceDependencyDiagnostics, f as formatDaemonFailureContextText, ft as uninstallDaemonServiceUpdateWorker, g as resolveServiceReadiness, gt as hasActiveDaemonOwners, h as resolveDaemonStatusAuthenticationAttention, ht as formatDaemonOwnerSummaryLabel, i as runDaemonServiceLifecycle, jt as DAEMON_SERVICE_REPAIR_ANOMALIES, kt as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, l as startDaemonSystemServiceWithAutoRepair, lt as ensureDaemonServiceMaintenanceInstalled, m as resolveDaemonStatusAttention, mt as buildDaemonOwnerSnapshotFromObservedState, n as scheduleDaemonServiceUpdate, nt as createOpenMeldToolsUpdateCoordinator, o as isSystemServiceStartupTimeoutError, ot as readOpenMeldToolsMaintenancePolicy, p as resolveDaemonStatusSnapshot, pt as inspectDaemonServiceInventory, r as DaemonServiceLifecycleDrainTimeoutError, s as resolveSystemServiceStartupWaitMs, st as resolveOpenMeldToolsMaintenanceProjection, tt as writeDaemonServiceContract, u as captureDaemonServiceEvidence, v as buildDaemonServiceRefreshNextStep, vt as resolveDaemonStopStrategy, w as formatDaemonServiceUpdateRequiredMessage, wt as readDaemonRuntimeContractRepairReport, x as buildDaemonServiceStatusReadOnlyDetail, y as buildDaemonServiceRefreshPromptMessage, yt as resolveStoppedContractWriteBlockedReason } from "./daemon-service-update-coordinator-Brv_30Kn.js";
 import { C as assessLocalMachineFailure, E as createServiceSpawnPendingIssue, i as isOpenMeldLockError, k as formatLocalMachineIssueMessage, u as resolveOpenMeldOrphanedLockIssue, x as resolveOpenMeldLaneDescriptor } from "./lock-BMI00i2F.js";
-import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-BciBrA3Y.js";
+import { c as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, o as serviceExecutionHostMethods, t as ExecutionHostError } from "./channel-BW2_rI6u.js";
 import { a as resolveBaseUrl, c as resolveExplicitGatewayUrlOrThrow, f as getConfiguredDaemonDispatchLimits, i as normalizeGatewayBaseUrlOrNull, o as resolveBaseUrlOrNull, r as normalizeGatewayBaseUrl } from "./base-url-0AoeTi3w.js";
+import "./openmeld-dev-environment-DwdvL7jg.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
 import { t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
 import { A as getDaemonStatus, G as withDaemonServiceRegistrationMutationLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, K as withDaemonServiceRunLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, W as withDaemonServiceReconcileLock, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceStopLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-Dte9re5V.js";
 import { a as upsertDaemonServiceContract, i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, t as clearDaemonServiceContract } from "./daemon-service-contract-COPKbCy_.js";
 import { a as formatOpenMeldCliTextBlock, n as formatOpenMeldCliCommand, r as formatOpenMeldCliCommands, t as formatInlineOpenMeldCliCommands } from "./cli-entry-command-CR_9QU1i.js";
 import { t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-BgYR6ozy.js";
-import { t as admitServiceAccountStop } from "./service-account-authorization-DLhUgGDb.js";
-import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-DsVVvKJe.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-CdyvPbvg.js";
+import { S as requestLocalDaemonShutdown, c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, w as sendLocalDaemonControlPlaneRequest, y as LocalDaemonControlPlaneClientError } from "./daemon-lifecycle-journal-Dq8W9V9C.js";
 import { r as readWindowsManagedCliInstallation } from "./windows-managed-install-BVlswqjA.js";
 import { n as toErrorMessage$6, t as sleep } from "./dist-BLuEEVHh.js";
 import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-BXAp21GH.js";
-import { n as resolveRuntimeContext } from "./context-BnhlFS8m.js";
+import { n as resolveRuntimeContext } from "./context-D3GnSqg8.js";
 import { n as outJsonLine, r as outLine } from "./io-DT66typ4.js";
 import { n as sanitizeTerminalDisplayText, t as createPresenter } from "./presenter-MJ5YgsOT.js";
-import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-C7S-6bWV.js";
-import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-C-RPnq_p.js";
-import { t as childExecutionHostChannel } from "./process-channel-CzgOWiuh.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-B3mwQFEA.js";
+import { X as getCommandEntryContract, _ as createAuthLoginGuideError, a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, g as canUseInteractivePrompts, h as resolveOpenMeldToolsUpdateOperationProjection, l as formatDaemonServiceMissingRunStepOne, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, pt as validateDaemonControlTargetInput, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo, xt as buildAgentOverviewFromContract } from "./elapsed-time-BSphCejK.js";
+import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-D6zHrrGV.js";
+import { t as childExecutionHostChannel } from "./process-channel-CTPL81j6.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-CRnah3Xf.js";
 import { createHash, randomUUID } from "node:crypto";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import { access, mkdir, open, readFile, readdir, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -56,7 +57,6 @@ const SERVICE_CONNECTION_ID_QUERY_PARAMETER = "connectionId";
 z$1.uuid();
 //#endregion
 //#region src/commands/auth-device-session-client.ts
-const DEFAULT_DEVICE_CLIENT_ID = "openmeld-cli";
 const DEVICE_CLIENT_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{1,63}$/;
 var AuthDeviceSessionClientError = class extends Error {
 	endpoint;
@@ -203,7 +203,7 @@ async function revokeAuthAccessToken(input) {
 	return { ok: true };
 }
 function resolveDeviceAuthClientId(value) {
-	const clientId = normalizeOptionalString$5(value) ?? normalizeOptionalString$5(process.env.OPENMELD_AUTH_CLIENT_ID) ?? DEFAULT_DEVICE_CLIENT_ID;
+	const clientId = normalizeOptionalString$5(value) ?? normalizeOptionalString$5(process.env.OPENMELD_AUTH_CLIENT_ID) ?? (resolveOpenMeldEnvPreset() === "dev-local" ? "openmeld-cli-dev" : "openmeld-cli");
 	if (!DEVICE_CLIENT_ID_PATTERN.test(clientId)) throw new Error(`invalid client_id "${clientId}" (allowed: letters, numbers, . _ : -)`);
 	return clientId;
 }
@@ -4806,11 +4806,18 @@ async function rejectAfter(operation, timeoutMs, createError) {
 	}
 }
 const runGitCommand = async (input) => await new Promise((resolveCommand, rejectCommand) => {
-	execFile(input.command, input.args, {
+	execFile(input.command, input.command === "git" ? [
+		"-c",
+		"core.fsmonitor=false",
+		"-c",
+		"core.hooksPath=/dev/null",
+		...input.args
+	] : input.args, {
 		encoding: "utf8",
 		windowsHide: true,
 		maxBuffer: 1024 * 1024,
-		timeout: input.timeoutMs
+		timeout: input.timeoutMs,
+		...input.command === "git" ? { env: createServiceGitEnvironment() } : {}
 	}, (error, stdout, stderr) => {
 		if (!error) {
 			resolveCommand({
@@ -6156,7 +6163,13 @@ async function runDaemonSocketSession(input) {
 		};
 	}
 	async function sendHeartbeat(options = {}) {
-		if (closed) return;
+		if (closed) {
+			if (options.requireAcknowledgement) throw new DaemonServiceRunError({
+				code: "daemon.run.socket_closed",
+				message: "Transport closed before the final heartbeat."
+			});
+			return;
+		}
 		if (heartbeatInFlight) {
 			if (options.publishAdmissionAfterInFlight) admissionHeartbeatPending = true;
 			return;
@@ -6204,6 +6217,10 @@ async function runDaemonSocketSession(input) {
 				timeoutMs: HEARTBEAT_RESPONSE_TIMEOUT_MS,
 				waiters
 			});
+			if (!heartbeatResponse.ok) throw new DaemonServiceRunError({
+				code: "daemon.run.heartbeat_rejected",
+				message: "Core rejected the service heartbeat."
+			});
 			pruneStaleLeases({
 				leasesByProfileId,
 				staleLeases: heartbeatResponse.staleLeases
@@ -6251,7 +6268,7 @@ async function runDaemonSocketSession(input) {
 			startRouteCatalogSyncIfDue();
 			startSupplementalEvidenceSyncs();
 		} catch (error) {
-			if (recordHeartbeatFailure(error)) {
+			if (recordHeartbeatFailure(error) && !options.requireAcknowledgement) {
 				admissionHeartbeatPending = false;
 				input.socket.terminate();
 				return;
@@ -6264,6 +6281,7 @@ async function runDaemonSocketSession(input) {
 				delayMs: MIN_HEARTBEAT_INTERVAL_MS,
 				reason: "heartbeat_retry"
 			});
+			if (options.requireAcknowledgement) throw error;
 		} finally {
 			heartbeatInFlight = false;
 			const publishPendingAdmission = admissionHeartbeatPending;
@@ -6409,7 +6427,7 @@ async function runDaemonSocketSession(input) {
 				profileConfigurationRevision: hasCompleteProfileConfigurationRevisions(routeCatalog)
 			}),
 			runtimeContract: { epoch: DAEMON_RUNTIME_CONTRACT_EPOCH },
-			connectedAtMs: Date.now()
+			connectedAtMs: socketConnectedAtMs
 		});
 		if (!registerPayload.success) throw new DaemonServiceRunError({
 			code: "daemon.run.register_payload_invalid",
@@ -7059,12 +7077,17 @@ async function runDaemonSocketSession(input) {
 			code: "daemon.run.controlled_shutdown_inflight_heartbeat_completed",
 			text: "Controlled shutdown finished waiting for the active heartbeat."
 		});
-		await sendHeartbeat();
-		emitRunLine({
-			presenter: input.presenter,
-			code: "daemon.run.controlled_shutdown_final_heartbeat_completed",
-			text: "Controlled shutdown completed its final heartbeat."
-		});
+		let finalHeartbeatError;
+		try {
+			await sendHeartbeat({ requireAcknowledgement: true });
+			emitRunLine({
+				presenter: input.presenter,
+				code: "daemon.run.controlled_shutdown_final_heartbeat_completed",
+				text: "Controlled shutdown completed its final heartbeat."
+			});
+		} catch (error) {
+			finalHeartbeatError = error;
+		}
 		emitRunLine({
 			presenter: input.presenter,
 			code: "daemon.run.controlled_shutdown_draining",
@@ -7072,6 +7095,7 @@ async function runDaemonSocketSession(input) {
 		});
 		await input.executionHost.call("drain", {}, { timeoutMs: null });
 		const result = await input.executionHost.call("settleResults", {});
+		if (finalHeartbeatError) throw finalHeartbeatError;
 		if (result.status === "connection_closed") return false;
 		if (result.status === "timeout") emitRunLine({
 			presenter: input.presenter,
@@ -7105,12 +7129,18 @@ async function runDaemonSocketSession(input) {
 		kind: "shutdown_requested",
 		stopCause
 	})) ?? new Promise(() => void 0)]);
-	if (sessionExit.kind === "shutdown_requested" && !closed) controlledShutdownCompleted = await finishControlledShutdown(sessionExit.stopCause);
-	hostLink.detach().catch(reportHostFailure);
-	input.attachRouteCatalogSyncInvoker?.(null);
-	clearHeartbeatTimer();
-	keepalive.stop();
-	clearCatalogSyncSignalTimer();
+	try {
+		if (sessionExit.kind === "shutdown_requested" && !closed) controlledShutdownCompleted = await finishControlledShutdown(sessionExit.stopCause);
+	} catch (error) {
+		input.socket.terminate();
+		throw error;
+	} finally {
+		hostLink.detach().catch(reportHostFailure);
+		input.attachRouteCatalogSyncInvoker?.(null);
+		clearHeartbeatTimer();
+		keepalive.stop();
+		clearCatalogSyncSignalTimer();
+	}
 	if (controlledShutdownCompleted || closeCode === 1e3 && closeReason === "shutdown") return;
 	throw new DaemonServiceRunError({
 		code: "daemon.run.socket_closed",
@@ -16010,4 +16040,4 @@ function parseDaemonRunMode(rawMode) {
 //#endregion
 export { buildAuthStatusSnapshot as $, buildDaemonStartNeedsAttentionCard as A, resolveDaemonServiceParticipationStatus as B, buildProfileWorkspaceRows as C, createDelayedSpinner as D, emitDaemonAgentOverview as E, emitCliJsonEnvelope as F, ensureCommandAuthenticationOrCancel as G, validateLocalProjectConnectionPath as H, runDaemonStartupPreflight as I, runAuthLogout as J, evaluateCommandAuthentication as K, readDaemonIncidentLogTail as L, buildHumanErrorCopy as M, renderHumanErrorCard as N, shouldEmitAgentOverview as O, renderHumanTextErrorCard as P, buildAuthStatusRows as Q, resolveLocalComponentsStatus as R, buildProfileWorkspacePresentation as S, createQuietPresenter as T, connectWebSocket as U, LocalProjectConnectionError as V, buildCommandAuthenticationPromptMessage as W, runAuthStatus as X, runAuthMenu as Y, exchangeOneTimeTokenAuthSession as Z, buildDaemonBackgroundStartFailure as _, resolveDeviceTokenExpiresAt as _t, runDaemonBackgroundStartForDecision as a, promptTextEntry as at, formatServiceRuntimeHeadline as b, runDaemonInterrupt as c, finishCurrentCommandCheckScope as ct, runDaemonServiceDetached as d, resetCurrentCommandCheckState as dt, formatActiveOrganizationLabel as et, runDaemonSnapshot as f, startCurrentCommandCheckScope as ft, runDaemonUninstall as g, resolveDeviceAuthClientId as gt, runDaemonTeardownStrict as h, requestDeviceToken as ht, runDaemonAutostart as i, buildUnifiedCardFrame as it, runDaemonStartDecisionPrompt as j, buildDaemonStartDeferredCard as k, runDaemonReinstall as l, getCurrentCommandCheckState as lt, runDaemonStop as m, fetchAuthUserSnapshot as mt, isManagedSystemServiceBootstrapRun as n, renderInfoCard as nt, runDaemonCancel as o, isReturnKeypress as ot, runDaemonStatusFlow as p, extractAuthApiErrorMessage as pt, runAuthLogin as q, runDaemon as r, renderTextInfoCard as rt, runDaemonInstall as s, runInteractivePrompt as st, bestEffortStopCurrentLaneDaemonService as t, buildTextInfoCardLines as tt, runDaemonRunAfterEntryChecks as u, isCurrentCommandCheckScopeActive as ut, buildSystemServiceStartupFailureReportFromVerdict as v, revokeAuthAccessToken as vt, reconcileCliVersionView as w, resolveServiceParticipationReadiness as x, formatServiceParticipationReadinessLabel as y, writeInstalledLocalComponentsSnapshot as z };
 
-//# sourceMappingURL=service-D9QVc4_y.js.map
+//# sourceMappingURL=service-CMNaJrvV.js.map