openmeld 0.3.240 → 0.3.241

package/dist/{openmeld-tools-update-join-QLXJ0nhz.js → openmeld-tools-update-join-7k8F3WoX.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
-import { $ as readPendingDaemonServiceUpdate } from "./daemon-service-runtime-C1JWxsWw.js";
-import { at as readPendingOpenMeldToolsUpdateAttempt } from "./daemon-service-update-coordinator-BTLSv327.js";
-import { m as resolveOpenMeldToolsUpdateOperation } from "./elapsed-time-Db-ZMRoB.js";
+import { $ as readPendingDaemonServiceUpdate } from "./daemon-service-runtime-DVou-9gk.js";
+import { at as readPendingOpenMeldToolsUpdateAttempt } from "./daemon-service-update-coordinator-j-NJ6SG6.js";
+import { m as resolveOpenMeldToolsUpdateOperation } from "./elapsed-time-8Z_hiMHG.js";
 import { setTimeout } from "node:timers/promises";
 //#region src/local-service/maintenance/openmeld-tools-update-join.ts
 const DEFAULT_UPDATE_JOIN_POLL_INTERVAL_MS = 500;
@@ -61,4 +61,4 @@ async function waitForExternalOpenMeldToolsUpdate(input = {}) {
 //#endregion
 export { waitForExternalOpenMeldToolsUpdate as n, waitForOpenMeldToolsUpdateCompletion as r, resolveExternalOpenMeldToolsUpdate as t };
 
-//# sourceMappingURL=openmeld-tools-update-join-QLXJ0nhz.js.map
+//# sourceMappingURL=openmeld-tools-update-join-7k8F3WoX.js.map

package/dist/{openmeld-tools-update-join-QLXJ0nhz.js.map → openmeld-tools-update-join-7k8F3WoX.js.map}

@@ -1 +1 @@
-{"version":3,"file":"openmeld-tools-update-join-QLXJ0nhz.js","names":["sleep"],"sources":["../src/local-service/maintenance/openmeld-tools-update-join.ts"],"sourcesContent":["import { setTimeout as sleep } from \"node:timers/promises\";\nimport type { OpenMeldToolsUpdateOperation } from \"@openmeld/schemas/types\";\nimport type { OpenMeldPathResolutionInput } from \"../../config/paths\";\nimport { readPendingDaemonServiceUpdate } from \"../lifecycle/daemon-service-update-state\";\nimport { readPendingOpenMeldToolsUpdateAttempt } from \"./openmeld-tools-update-attempt-state\";\nimport { resolveOpenMeldToolsUpdateOperation } from \"./openmeld-tools-update-operation\";\n\nconst DEFAULT_UPDATE_JOIN_POLL_INTERVAL_MS = 500;\n\n// This is an observer of the existing durable operation, never an updater.\n// The OS-owned worker continues even if this caller exits while waiting.\nexport async function waitForOpenMeldToolsUpdateCompletion(\n  input: {\n    operationId?: string;\n    pollIntervalMs?: number;\n    onWaiting?: (\n      operation: OpenMeldToolsUpdateOperation\n    ) => Promise<void> | void;\n  } = {}\n): Promise<OpenMeldToolsUpdateOperation | null> {\n  let operationId = input.operationId ?? null;\n  await waitForExternalOpenMeldToolsUpdate({\n    completedServiceUpdateIsIdle: true,\n    pollIntervalMs: input.pollIntervalMs,\n    onWaiting: async (operation) => {\n      if (operationId !== null && operationId !== operation.operationId) {\n        throw new Error(\n          `OpenMeld update ${operationId} was replaced before its completion could be verified.`\n        );\n      }\n      operationId = operation.operationId;\n      await input.onWaiting?.(operation);\n    },\n  });\n  const completed = await resolveOpenMeldToolsUpdateOperation();\n  if (\n    operationId !== null &&\n    (completed?.operationId !== operationId || completed.phase !== \"updated\")\n  ) {\n    throw new Error(\n      `OpenMeld update ${operationId} did not finish successfully (${completed?.phase ?? \"completion evidence unavailable\"}).`\n    );\n  }\n  return completed;\n}\n\nexport async function resolveExternalOpenMeldToolsUpdate(\n  input: OpenMeldPathResolutionInput & {\n    currentOperationId?: string | null;\n    completedServiceUpdateIsIdle?: boolean;\n  } = {}\n): Promise<OpenMeldToolsUpdateOperation | null> {\n  // The coordinator persists the Service job before discarding the tools\n  // attempt. Reading in this order prevents observers from seeing a false idle\n  // gap while ownership moves from the CLI download to the Service worker.\n  const toolsAttempt = await readPendingOpenMeldToolsUpdateAttempt(input);\n  const serviceJob = await readPendingDaemonServiceUpdate(input);\n  if (\n    serviceJob &&\n    serviceJob.jobId !== (input.currentOperationId ?? null) &&\n    !(input.completedServiceUpdateIsIdle && serviceJob.phase === \"updated\")\n  ) {\n    return {\n      operationId: serviceJob.jobId,\n      phase: serviceJob.phase,\n      requestSource: serviceJob.requestSource,\n      requestedAt: serviceJob.requestedAt,\n      ...(serviceJob.targetCliVersion\n        ? { targetCliVersion: serviceJob.targetCliVersion }\n        : {}),\n      ...(serviceJob.targetServiceVersion\n        ? { targetServiceVersion: serviceJob.targetServiceVersion }\n        : {}),\n      targetVersion: serviceJob.targetVersion,\n      updatedAt: serviceJob.updatedAt,\n      urgency: serviceJob.urgency,\n    };\n  }\n  if (\n    toolsAttempt &&\n    toolsAttempt.operation.operationId !== (input.currentOperationId ?? null)\n  ) {\n    return toolsAttempt.operation;\n  }\n  return null;\n}\n\nexport async function waitForExternalOpenMeldToolsUpdate(\n  input: OpenMeldPathResolutionInput & {\n    currentOperationId?: string | null;\n    completedServiceUpdateIsIdle?: boolean;\n    onWaiting?: (\n      operation: OpenMeldToolsUpdateOperation\n    ) => Promise<void> | void;\n    pollIntervalMs?: number;\n    unclaimedTimeoutMs?: number;\n  } = {}\n): Promise<void> {\n  let reportedOperationId: string | null = null;\n  let unclaimedSince: number | null = null;\n  while (true) {\n    const operation = await resolveExternalOpenMeldToolsUpdate(input);\n    if (!operation) {\n      return;\n    }\n    if (input.unclaimedTimeoutMs !== undefined) {\n      const pending = await readPendingOpenMeldToolsUpdateAttempt(input);\n      if (\n        pending?.operation.operationId === operation.operationId &&\n        pending.attempts === 0\n      ) {\n        unclaimedSince ??= Date.now();\n        if (Date.now() - unclaimedSince >= input.unclaimedTimeoutMs) {\n          throw new Error(\n            \"OpenMeld's background updater did not start. Run openmeld doctor to check the background service, then try setup again.\"\n          );\n        }\n      } else {\n        unclaimedSince = null;\n      }\n    }\n    if (reportedOperationId !== operation.operationId) {\n      reportedOperationId = operation.operationId;\n      await input.onWaiting?.(operation);\n    }\n    await sleep(\n      Math.max(1, input.pollIntervalMs ?? DEFAULT_UPDATE_JOIN_POLL_INTERVAL_MS)\n    );\n  }\n}\n"],"mappings":";;;;;;;AAOA,MAAM,uCAAuC;AAI7C,eAAsB,qCACpB,QAMI,CAAC,GACyC;CAC9C,IAAI,cAAc,MAAM,eAAe;CACvC,MAAM,mCAAmC;EACvC,8BAA8B;EAC9B,gBAAgB,MAAM;EACtB,WAAW,OAAO,cAAc;GAC9B,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,aACpD,MAAM,IAAI,MACR,mBAAmB,YAAY,uDACjC;GAEF,cAAc,UAAU;GACxB,MAAM,MAAM,YAAY,SAAS;EACnC;CACF,CAAC;CACD,MAAM,YAAY,MAAM,oCAAoC;CAC5D,IACE,gBAAgB,SACf,WAAW,gBAAgB,eAAe,UAAU,UAAU,YAE/D,MAAM,IAAI,MACR,mBAAmB,YAAY,gCAAgC,WAAW,SAAS,kCAAkC,GACvH;CAEF,OAAO;AACT;AAEA,eAAsB,mCACpB,QAGI,CAAC,GACyC;CAI9C,MAAM,eAAe,MAAM,sCAAsC,KAAK;CACtE,MAAM,aAAa,MAAM,+BAA+B,KAAK;CAC7D,IACE,cACA,WAAW,WAAW,MAAM,sBAAsB,SAClD,EAAE,MAAM,gCAAgC,WAAW,UAAU,YAE7D,OAAO;EACL,aAAa,WAAW;EACxB,OAAO,WAAW;EAClB,eAAe,WAAW;EAC1B,aAAa,WAAW;EACxB,GAAI,WAAW,mBACX,EAAE,kBAAkB,WAAW,iBAAiB,IAChD,CAAC;EACL,GAAI,WAAW,uBACX,EAAE,sBAAsB,WAAW,qBAAqB,IACxD,CAAC;EACL,eAAe,WAAW;EAC1B,WAAW,WAAW;EACtB,SAAS,WAAW;CACtB;CAEF,IACE,gBACA,aAAa,UAAU,iBAAiB,MAAM,sBAAsB,OAEpE,OAAO,aAAa;CAEtB,OAAO;AACT;AAEA,eAAsB,mCACpB,QAQI,CAAC,GACU;CACf,IAAI,sBAAqC;CACzC,IAAI,iBAAgC;CACpC,OAAO,MAAM;EACX,MAAM,YAAY,MAAM,mCAAmC,KAAK;EAChE,IAAI,CAAC,WACH;EAEF,IAAI,MAAM,uBAAuB,KAAA,GAAW;GAC1C,MAAM,UAAU,MAAM,sCAAsC,KAAK;GACjE,IACE,SAAS,UAAU,gBAAgB,UAAU,eAC7C,QAAQ,aAAa,GACrB;IACA,mBAAmB,KAAK,IAAI;IAC5B,IAAI,KAAK,IAAI,IAAI,kBAAkB,MAAM,oBACvC,MAAM,IAAI,MACR,yHACF;GAEJ,OACE,iBAAiB;EAErB;EACA,IAAI,wBAAwB,UAAU,aAAa;GACjD,sBAAsB,UAAU;GAChC,MAAM,MAAM,YAAY,SAAS;EACnC;EACA,MAAMA,WACJ,KAAK,IAAI,GAAG,MAAM,kBAAkB,oCAAoC,CAC1E;CACF;AACF"}
+{"version":3,"file":"openmeld-tools-update-join-7k8F3WoX.js","names":["sleep"],"sources":["../src/local-service/maintenance/openmeld-tools-update-join.ts"],"sourcesContent":["import { setTimeout as sleep } from \"node:timers/promises\";\nimport type { OpenMeldToolsUpdateOperation } from \"@openmeld/schemas/types\";\nimport type { OpenMeldPathResolutionInput } from \"../../config/paths\";\nimport { readPendingDaemonServiceUpdate } from \"../lifecycle/daemon-service-update-state\";\nimport { readPendingOpenMeldToolsUpdateAttempt } from \"./openmeld-tools-update-attempt-state\";\nimport { resolveOpenMeldToolsUpdateOperation } from \"./openmeld-tools-update-operation\";\n\nconst DEFAULT_UPDATE_JOIN_POLL_INTERVAL_MS = 500;\n\n// This is an observer of the existing durable operation, never an updater.\n// The OS-owned worker continues even if this caller exits while waiting.\nexport async function waitForOpenMeldToolsUpdateCompletion(\n  input: {\n    operationId?: string;\n    pollIntervalMs?: number;\n    onWaiting?: (\n      operation: OpenMeldToolsUpdateOperation\n    ) => Promise<void> | void;\n  } = {}\n): Promise<OpenMeldToolsUpdateOperation | null> {\n  let operationId = input.operationId ?? null;\n  await waitForExternalOpenMeldToolsUpdate({\n    completedServiceUpdateIsIdle: true,\n    pollIntervalMs: input.pollIntervalMs,\n    onWaiting: async (operation) => {\n      if (operationId !== null && operationId !== operation.operationId) {\n        throw new Error(\n          `OpenMeld update ${operationId} was replaced before its completion could be verified.`\n        );\n      }\n      operationId = operation.operationId;\n      await input.onWaiting?.(operation);\n    },\n  });\n  const completed = await resolveOpenMeldToolsUpdateOperation();\n  if (\n    operationId !== null &&\n    (completed?.operationId !== operationId || completed.phase !== \"updated\")\n  ) {\n    throw new Error(\n      `OpenMeld update ${operationId} did not finish successfully (${completed?.phase ?? \"completion evidence unavailable\"}).`\n    );\n  }\n  return completed;\n}\n\nexport async function resolveExternalOpenMeldToolsUpdate(\n  input: OpenMeldPathResolutionInput & {\n    currentOperationId?: string | null;\n    completedServiceUpdateIsIdle?: boolean;\n  } = {}\n): Promise<OpenMeldToolsUpdateOperation | null> {\n  // The coordinator persists the Service job before discarding the tools\n  // attempt. Reading in this order prevents observers from seeing a false idle\n  // gap while ownership moves from the CLI download to the Service worker.\n  const toolsAttempt = await readPendingOpenMeldToolsUpdateAttempt(input);\n  const serviceJob = await readPendingDaemonServiceUpdate(input);\n  if (\n    serviceJob &&\n    serviceJob.jobId !== (input.currentOperationId ?? null) &&\n    !(input.completedServiceUpdateIsIdle && serviceJob.phase === \"updated\")\n  ) {\n    return {\n      operationId: serviceJob.jobId,\n      phase: serviceJob.phase,\n      requestSource: serviceJob.requestSource,\n      requestedAt: serviceJob.requestedAt,\n      ...(serviceJob.targetCliVersion\n        ? { targetCliVersion: serviceJob.targetCliVersion }\n        : {}),\n      ...(serviceJob.targetServiceVersion\n        ? { targetServiceVersion: serviceJob.targetServiceVersion }\n        : {}),\n      targetVersion: serviceJob.targetVersion,\n      updatedAt: serviceJob.updatedAt,\n      urgency: serviceJob.urgency,\n    };\n  }\n  if (\n    toolsAttempt &&\n    toolsAttempt.operation.operationId !== (input.currentOperationId ?? null)\n  ) {\n    return toolsAttempt.operation;\n  }\n  return null;\n}\n\nexport async function waitForExternalOpenMeldToolsUpdate(\n  input: OpenMeldPathResolutionInput & {\n    currentOperationId?: string | null;\n    completedServiceUpdateIsIdle?: boolean;\n    onWaiting?: (\n      operation: OpenMeldToolsUpdateOperation\n    ) => Promise<void> | void;\n    pollIntervalMs?: number;\n    unclaimedTimeoutMs?: number;\n  } = {}\n): Promise<void> {\n  let reportedOperationId: string | null = null;\n  let unclaimedSince: number | null = null;\n  while (true) {\n    const operation = await resolveExternalOpenMeldToolsUpdate(input);\n    if (!operation) {\n      return;\n    }\n    if (input.unclaimedTimeoutMs !== undefined) {\n      const pending = await readPendingOpenMeldToolsUpdateAttempt(input);\n      if (\n        pending?.operation.operationId === operation.operationId &&\n        pending.attempts === 0\n      ) {\n        unclaimedSince ??= Date.now();\n        if (Date.now() - unclaimedSince >= input.unclaimedTimeoutMs) {\n          throw new Error(\n            \"OpenMeld's background updater did not start. Run openmeld doctor to check the background service, then try setup again.\"\n          );\n        }\n      } else {\n        unclaimedSince = null;\n      }\n    }\n    if (reportedOperationId !== operation.operationId) {\n      reportedOperationId = operation.operationId;\n      await input.onWaiting?.(operation);\n    }\n    await sleep(\n      Math.max(1, input.pollIntervalMs ?? DEFAULT_UPDATE_JOIN_POLL_INTERVAL_MS)\n    );\n  }\n}\n"],"mappings":";;;;;;;AAOA,MAAM,uCAAuC;AAI7C,eAAsB,qCACpB,QAMI,CAAC,GACyC;CAC9C,IAAI,cAAc,MAAM,eAAe;CACvC,MAAM,mCAAmC;EACvC,8BAA8B;EAC9B,gBAAgB,MAAM;EACtB,WAAW,OAAO,cAAc;GAC9B,IAAI,gBAAgB,QAAQ,gBAAgB,UAAU,aACpD,MAAM,IAAI,MACR,mBAAmB,YAAY,uDACjC;GAEF,cAAc,UAAU;GACxB,MAAM,MAAM,YAAY,SAAS;EACnC;CACF,CAAC;CACD,MAAM,YAAY,MAAM,oCAAoC;CAC5D,IACE,gBAAgB,SACf,WAAW,gBAAgB,eAAe,UAAU,UAAU,YAE/D,MAAM,IAAI,MACR,mBAAmB,YAAY,gCAAgC,WAAW,SAAS,kCAAkC,GACvH;CAEF,OAAO;AACT;AAEA,eAAsB,mCACpB,QAGI,CAAC,GACyC;CAI9C,MAAM,eAAe,MAAM,sCAAsC,KAAK;CACtE,MAAM,aAAa,MAAM,+BAA+B,KAAK;CAC7D,IACE,cACA,WAAW,WAAW,MAAM,sBAAsB,SAClD,EAAE,MAAM,gCAAgC,WAAW,UAAU,YAE7D,OAAO;EACL,aAAa,WAAW;EACxB,OAAO,WAAW;EAClB,eAAe,WAAW;EAC1B,aAAa,WAAW;EACxB,GAAI,WAAW,mBACX,EAAE,kBAAkB,WAAW,iBAAiB,IAChD,CAAC;EACL,GAAI,WAAW,uBACX,EAAE,sBAAsB,WAAW,qBAAqB,IACxD,CAAC;EACL,eAAe,WAAW;EAC1B,WAAW,WAAW;EACtB,SAAS,WAAW;CACtB;CAEF,IACE,gBACA,aAAa,UAAU,iBAAiB,MAAM,sBAAsB,OAEpE,OAAO,aAAa;CAEtB,OAAO;AACT;AAEA,eAAsB,mCACpB,QAQI,CAAC,GACU;CACf,IAAI,sBAAqC;CACzC,IAAI,iBAAgC;CACpC,OAAO,MAAM;EACX,MAAM,YAAY,MAAM,mCAAmC,KAAK;EAChE,IAAI,CAAC,WACH;EAEF,IAAI,MAAM,uBAAuB,KAAA,GAAW;GAC1C,MAAM,UAAU,MAAM,sCAAsC,KAAK;GACjE,IACE,SAAS,UAAU,gBAAgB,UAAU,eAC7C,QAAQ,aAAa,GACrB;IACA,mBAAmB,KAAK,IAAI;IAC5B,IAAI,KAAK,IAAI,IAAI,kBAAkB,MAAM,oBACvC,MAAM,IAAI,MACR,yHACF;GAEJ,OACE,iBAAiB;EAErB;EACA,IAAI,wBAAwB,UAAU,aAAa;GACjD,sBAAsB,UAAU;GAChC,MAAM,MAAM,YAAY,SAAS;EACnC;EACA,MAAMA,WACJ,KAAK,IAAI,GAAG,MAAM,kBAAkB,oCAAoC,CAC1E;CACF;AACF"}

package/dist/openmeld.js

@@ -11,7 +11,7 @@ if (process.argv.includes("--openmeld-windows-task")) {
 }
 const args = process.argv.slice(2);
 if (args.length === 3 && args[0] === "service" && args[1] === "execution-host") try {
-	const { runExecutionHost } = await import("./entry-DBhL4ZRa.js");
+	const { runExecutionHost } = await import("./entry-CRNdcPn2.js");
 	const hostInstanceId = args[2];
 	if (!hostInstanceId) throw new Error("The Host incarnation is required.");
 	await runExecutionHost(hostInstanceId);
@@ -21,14 +21,14 @@ if (args.length === 3 && args[0] === "service" && args[1] === "execution-host")
 	if (process.connected) process.disconnect();
 }
 else if (args.length === 2 && args[0] === "service" && args[1] === "update-worker") try {
-	const { runOpenMeldMaintenanceWorker } = await import("./openmeld-maintenance-worker-Bk8iJrZe.js");
+	const { runOpenMeldMaintenanceWorker } = await import("./openmeld-maintenance-worker-DO2-9bPr.js");
 	await runOpenMeldMaintenanceWorker();
 } catch (error) {
 	console.error("[openmeld.maintenance.failed]", error);
 	process.exitCode = 1;
 }
 else if (args.length === 1 && (args[0] === "maintenance-upgrade" || args[0] === "maintenance-align-service")) try {
-	const { runMaintenanceUpgrade } = await import("./upgrade-n4gQvHoE.js");
+	const { runMaintenanceUpgrade } = await import("./upgrade-BoX1y1zH.js");
 	await runMaintenanceUpgrade(args[0] === "maintenance-align-service");
 } catch (error) {
 	try {
@@ -38,7 +38,7 @@ else if (args.length === 1 && (args[0] === "maintenance-upgrade" || args[0] ===
 	console.error("[openmeld.maintenance.upgrade_failed]", error);
 	process.exitCode = 1;
 }
-else await import("./openmeld-BxJZzTQQ.js");
+else await import("./openmeld-pa6CFD0L.js");
 //#endregion
 export {};
 

package/dist/{prepare-provider-runtime-BMV0ay2U.js → prepare-provider-runtime-CRKT1qfE.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
 import { F as resolveOpenMeldRootDir, P as resolveOpenMeldEnvPreset, a as accountProfileWorkspacePath, b as normalizeOpenMeldProfileId, c as deviceOpenClawProfileBootstrapPath, h as isPublishedOpenMeldHome, l as deviceOpenClawProfileDir, n as accountProfileLocalMetaPath, u as deviceOpenClawProfileWorkspaceDir } from "./paths-De9xdA2h.js";
-import { $t as createLocalRuntimeExpectedRoutesApi, Di as modelCatalogSchema, Rt as createAgentProfileBindingApi, t as OpenMeldApiClientHttpError } from "./dist-BytcJRwx.js";
-import { Bi as resolveCommandAgentWorkActivity, G as isOriginalErrorSafeForMessageDetails, J as openMeldDaemonProviderAccessEvidenceSchema, Pr as agentInteractionResolutionSchema, W as OPENMELD_ORIGINAL_ERROR_MAX_LENGTH, X as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, Y as openMeldDaemonTaskResultEnvelopeWriteSchema, pr as normalizeMessageEnvelope, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, tt as aiUsageObservationSchema, ur as formatCanonicalMentionLiteral } from "./runtime-transport-BVCHi4qM.js";
+import { $t as createLocalRuntimeExpectedRoutesApi, Ai as modelCatalogSchema, Rt as createAgentProfileBindingApi, t as OpenMeldApiClientHttpError } from "./dist-BE0dKSoc.js";
+import { G as isOriginalErrorSafeForMessageDetails, J as openMeldDaemonProviderAccessEvidenceSchema, Lr as agentInteractionResolutionSchema, W as OPENMELD_ORIGINAL_ERROR_MAX_LENGTH, Wi as resolveCommandAgentWorkActivity, X as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, Y as openMeldDaemonTaskResultEnvelopeWriteSchema, gr as normalizeMessageEnvelope, pr as formatCanonicalMentionLiteral, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, tt as aiUsageObservationSchema } from "./runtime-transport-BPK70mkB.js";
 import { C as conversationExecutionStateSchema, D as normalizeOptionalWorkingDirectory, P as profileWorkspaceModeSchema, T as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, o as openMeldDaemonControlPlaneRequestSchema, s as openMeldDaemonControlPlaneResponseSchema, x as providerDispatchRuntimeContextSchema } from "./control-plane-QqGL-jtT.js";
 import { _ as canonicalizeAgentControllerRef, b as normalizeKnownBuiltinAgentControllerId, d as resolveBuiltinAgentControllerConversationKind, f as HOSTED_CENTER_AGENT_CONTROLLER_REF, g as buildAgentControllerRoutingKey, l as buildAgentControllerConversationRef, m as HOSTED_REMOTE_AGENT_CONTROLLER_REF, p as HOSTED_CENTER_AGENT_CONTROLLER_REF_ID, s as runtimeTransportModeSchema, v as canonicalizeBuiltinAgentControllerRef, x as parseAgentControllerRef$1 } from "./controller-contract-DAOCaefz.js";
-import { J as OPENCLAW_CLI_TIMEOUT_MS$1, d as getAuthSessionState } from "./auth-session-BTRu2Kc5.js";
+import { J as OPENCLAW_CLI_TIMEOUT_MS$1, d as getAuthSessionState } from "./auth-session-Injt39gv.js";
 import { r as daemonServiceLaneSchema } from "./service-contract-CRyDcIIf.js";
-import { Ct as agentExecutionSteerRequestSchema, St as daemonRouteCatalogCacheSchema, Y as listOpenMeldProfiles, _ as toErrorMessage$20, bt as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, d as normalizeText$11, g as parseTransportMode$1, h as parseStreamingMode$1, m as parseRuntimeTransportMode, p as parseContextIdMappingSpec, s as emitRunLine, tt as touchDaemonCatalogSyncSignal, u as normalizeOptionalText$51, yt as resolveCurrentOpenMeldAccountContext } from "./daemon-device-id-D7lbw6c4.js";
+import { Ct as agentExecutionSteerRequestSchema, St as daemonRouteCatalogCacheSchema, Y as listOpenMeldProfiles, _ as toErrorMessage$20, bt as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, d as normalizeText$11, g as parseTransportMode$1, h as parseStreamingMode$1, m as parseRuntimeTransportMode, p as parseContextIdMappingSpec, s as emitRunLine, tt as touchDaemonCatalogSyncSignal, u as normalizeOptionalText$51, yt as resolveCurrentOpenMeldAccountContext } from "./daemon-device-id-CAKHWLK9.js";
 import { n as agentControllerPermissionModeSchema, r as agentControllerCollaborationModeSchema } from "./open-code-permission-DHFJYc_o.js";
 import { c as readWindowsProcessStartFileTime, d as resolveWindowsNativeProcessHelper, f as windowsNativeProcessRequestSchema, l as resolveWindowsPowerShellPath, o as powerShellEncodedArguments, r as isProcessIdentityAlive, t as CURRENT_PROCESS_START_IDENTITY, u as WINDOWS_NATIVE_PROCESS_REQUEST_ENV } from "./process-identity-BRbhGGTM.js";
 import { a as isOpenMeldOrphanedLockError, d as runWithHeldLock, i as isOpenMeldLockError, t as acquireLock } from "./lock-BMI00i2F.js";
@@ -16,9 +16,9 @@ import { n as normalizeCommandEnvironment } from "./process-environment-BWSFeUu6
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
 import { m as daemonRuntimeDataPath } from "./daemon-state-Dte9re5V.js";
 import { i as readDaemonServiceContract } from "./daemon-service-contract-COPKbCy_.js";
-import { C as requestLocalSyncRouteCatalog } from "./daemon-lifecycle-journal-DGJEfJJV.js";
+import { C as requestLocalSyncRouteCatalog } from "./daemon-lifecycle-journal-txRGG09R.js";
 import { i as resolveWindowsCommandPath, n as quoteWindowsProcessArgument, r as resolvePlatformCommand, t as execPlatformFile } from "./process-launch-B0pHlkV_.js";
-import { d as buildOpenMeldRequestContextFromProfile, t as createCliApiClientFoundation } from "./api-client-foundation-BawOr_Me.js";
+import { d as buildOpenMeldRequestContextFromProfile, t as createCliApiClientFoundation } from "./api-client-foundation-Dbc5MXyW.js";
 import { createRequire } from "node:module";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir, loadavg, tmpdir } from "node:os";
@@ -2955,6 +2955,7 @@ var registry_default$1 = {
 					"transportModes": ["local-cli"],
 					"capabilityDeclaration": {
 						"executionContextVersion": 3,
+						"executionContextPermissionInheritance": true,
 						"streamingCapability": "preview_capable",
 						"imageInputCapability": "local_file_path",
 						"runtimeWorkingDirectoryMode": "spawn_cwd",
@@ -3024,6 +3025,7 @@ var registry_default$1 = {
 					},
 					"transportModes": ["codex-app-server"],
 					"capabilityDeclaration": {
+						"executionContextPermissionInheritance": true,
 						"executionContextVersion": 2,
 						"streamingCapability": "preview_capable",
 						"imageInputCapability": "local_file_path",
@@ -6313,6 +6315,8 @@ const OPENMELD_SPACE_ACTION_MCP_TOOL_NAMES = [
 	"working_copy",
 	"read_file",
 	"read_history",
+	"read_evidence",
+	"read_thread",
 	"read_documents",
 	"read_skills",
 	"read_result",
@@ -11421,7 +11425,7 @@ function isClaudeDeliveryOnly(input) {
 function buildClaudeSpaceToolOptions(input) {
 	const server = resolveDispatchSpaceActionMcpServer(input.env);
 	const deliveryOnly = isClaudeDeliveryOnly(input);
-	const isolated = Boolean(input.executionContext || deliveryOnly);
+	const isolated = Boolean(deliveryOnly || input.executionContext && input.executionContext.permissionSource !== "agent_settings");
 	const tools = input.spaceActionTools;
 	let names = [];
 	if (tools) names = tools.tools.map((definition) => `mcp__${OPENMELD_SPACE_ACTION_MCP_SERVER_ID}__${definition.name}`);
@@ -12087,7 +12091,7 @@ function buildClaudeAgentSdkOptions(input) {
 		} : {}
 	};
 	Object.assign(options, buildClaudeSpaceToolOptions(input));
-	if (input.executionContext?.access === "workspace" && input.executionMode !== "repair" && !deliveryOnly) applyClaudeProjectToolBoundary(options, permissionMode);
+	if (input.executionContext?.access === "workspace" && input.executionContext.permissionSource !== "agent_settings" && input.executionMode !== "repair" && !deliveryOnly) applyClaudeProjectToolBoundary(options, permissionMode);
 	const sessionId = normalizeOptionalText$34(input.sessionId);
 	if (sessionId) {
 		options.resume = sessionId;
@@ -12103,7 +12107,7 @@ function buildClaudeAgentSdkOptions(input) {
 	return options;
 }
 function isSupportedClaudeExecutionContext(context) {
-	return !context || context.access === "space_context" || context.access === "workspace" && context.workspace === "isolated";
+	return !context || context.access === "space_context" || context.access === "workspace" && (context.permissionSource === "agent_settings" || context.workspace === "isolated");
 }
 function applyClaudeProjectToolBoundary(options, permissionMode) {
 	if (permissionMode === "bypassPermissions") throw new Error("execution_context.permission_mode_unsupported");
@@ -14463,7 +14467,7 @@ var CodexAppServerSession = class {
 			cwd: tmpdir(),
 			env: launch.env,
 			shell: launch.shell ?? false,
-			...this.#computerFileAccessBoundary?.executionContextAccess && this.#env?.OPENMELD_PROCESS_SUPERVISION_ID ? { supervisionId: this.#env.OPENMELD_PROCESS_SUPERVISION_ID } : {}
+			...this.#env?.OPENMELD_PROCESS_SUPERVISION_ID ? { supervisionId: this.#env.OPENMELD_PROCESS_SUPERVISION_ID } : {}
 		});
 		const { child, processId, signalTarget } = runtimeProcess;
 		this.#child = child;
@@ -14776,7 +14780,7 @@ var CodexAppServerSession = class {
 		if (!(scoped || this.spaceToolInvocation.enabled)) return;
 		const inventory = await this.requestControl("mcpServerStatus/list", {
 			threadId,
-			detail: "full",
+			detail: scoped ? "full" : "toolsAndAuthOnly",
 			limit: 100
 		}, {
 			code: "execution_context.mcp_inventory_timeout",
@@ -16722,7 +16726,7 @@ async function invokeCodexWithSingleContextHeal(input) {
 async function invokeCodexAppServer(input) {
 	const result = await invokeWithSingleContextHeal({
 		contextId: input.threadId,
-		contextLossPolicy: input.computerFileAccessBoundary?.executionContextAccess || input.executionMode === "repair" ? "fail" : "rebuild",
+		contextLossPolicy: input.executionContext || input.computerFileAccessBoundary?.executionContextAccess || input.executionMode === "repair" ? "fail" : "rebuild",
 		createRebuildFailedError: (error) => new CodexRuntimeError({
 			code: "context.rebuild_failed",
 			errorType: "adapter",
@@ -17359,6 +17363,7 @@ const resolveDefaultCodexAppServerInvoke = (input) => {
 			agentControllerPermissionMode: dispatchInput.agentControllerPermissionMode,
 			cancellationSignal: dispatchInput.cancellationSignal,
 			computerFileAccessBoundary: dispatchInput.computerFileAccessBoundary,
+			executionContext: dispatchInput.executionContext,
 			launchContract,
 			codexTimeoutMs,
 			codexWorkdir: dispatchInput.runtimeContext.providerRuntimeWorkingDirectory,
@@ -27402,6 +27407,7 @@ var registry_default = {
 					"transportModes": ["local-cli"],
 					"capabilityDeclaration": {
 						"executionContextVersion": 3,
+						"executionContextPermissionInheritance": true,
 						"streamingCapability": "preview_capable",
 						"imageInputCapability": "local_file_path",
 						"runtimeWorkingDirectoryMode": "spawn_cwd",
@@ -27471,6 +27477,7 @@ var registry_default = {
 					},
 					"transportModes": ["codex-app-server"],
 					"capabilityDeclaration": {
+						"executionContextPermissionInheritance": true,
 						"executionContextVersion": 2,
 						"streamingCapability": "preview_capable",
 						"imageInputCapability": "local_file_path",
@@ -29634,6 +29641,7 @@ function parseAgentsRegistryRuntimeCapabilityDeclaration(value, context) {
 	]);
 	return {
 		continuationCapability,
+		...objectValue.executionContextPermissionInheritance === true ? { executionContextPermissionInheritance: true } : {},
 		...objectValue.executionContextVersion === 1 || objectValue.executionContextVersion === 2 || objectValue.executionContextVersion === 3 ? { executionContextVersion: objectValue.executionContextVersion } : {},
 		...imageInputCapability ? { imageInputCapability } : {},
 		preparationRequirement,
@@ -32562,9 +32570,9 @@ function createModelCatalogReadSession(input) {
 async function readModelCatalogOnce(baseUrl) {
 	try {
 		const [apiClient, baseUrlModule, clientFoundationModule] = await Promise.all([
-			import("./dist-GOicky_R.js"),
+			import("./dist-D4nEGVsQ.js"),
 			import("./base-url-Bdjp-5vy.js"),
-			import("./api-client-foundation-D4d0zKkj.js")
+			import("./api-client-foundation-uYxH6diU.js")
 		]);
 		if (typeof apiClient.createConfigApi !== "function") throw new Error("config api client is unavailable");
 		const resolvedBaseUrl = baseUrl ?? await baseUrlModule.resolveBaseUrl();
@@ -34422,4 +34430,4 @@ async function prepareProviderRuntime(input, options = {}) {
 //#endregion
 export { canManageRegistryAgentSkillTargets as $, resolveExecutablePathsOnPath as $n, mergeOpenClawGatewayVisibility as $t, createExpectedRoutesReadSession as A, emitReconcileCompletedEvidence as An, resolveNativeAgentControllerPermissionModeForController as Ar, ensureOpenMeldManagedProfileWorkspace as At, reconcileNewRunnableBuiltinAgentsForSetup as B, resolveConversationExecutionStateByLookupKey as Bn, resolveCatalogSyncIntervalMs as Br, createMutableRouteCatalogState as Bt, createModelCatalogReadSession as C, probeCodexAppServerAccount as Cn, renderInformationProtectionPrompt as Cr, resolveLocalProjectConnectionForPath as Ct, NO_LOCAL_AGENTS_NEED_OPENMELD_SERVICE_REASON as D, probeClaudeCodeUsageLimits as Dn, resolveAgentExecutionStatus as Dr, resolveRegistryOriginLaunchCommand as Dt, resolveProfileWorkspaceRuntime as E, projectCodexUsageLimits as En, resolveAgentControllerPermissionModeForController as Er, listBuiltinAgentsRegistryEntries as Et, listAgentRegistrations as F, buildTaskResultEnvelope as Fn, MIN_HEARTBEAT_INTERVAL_MS as Fr, resolveConfiguredProfileWorkspacePathForAccount as Ft, updateAgentRegistrations as G, buildAuthenticatedControlPlaneResponse as Gn, syncRuntimeEventToInflightTaskControlRegistry as Gt, resolveAgentTargetState as H, settleInflightTask as Hn, resolveBuiltinAgentControllerBrand as Hr, summarizeSkippedDaemonProfiles as Ht, listAgentTargetStates as I, appendLedgerHistoryEntry as In, applyAcceptedLeases as Ir, setCustomProfileWorkspace as It, normalizeAgentIds as J, createUnavailableProviderUsageLimits as Jn, isDaemonReconcileInProgressError as Jt, notifyDaemonRouteCatalogChanged as K, assertLegacyAgentContextAssociation as Kn, SPACE_ACTION_CONTEXT_GUIDANCE_LINES as Kt, manageAgentRegistrationInstallation as L, commitResolvedAgentContext as Ln, applyIntervalJitterMs as Lr, setOpenMeldManagedProfileWorkspace as Lt, addAgentCustomTarget as M, DaemonServiceRunError as Mn, resolveRouteRegistrationReconcileDecision as Mr, readProfileWorkspaceConfig as Mt, createRegistrationFromCatalogTarget as N, runRuntimeTask as Nn, ADAPTIVE_HEARTBEAT_JITTER_RATIO as Nr, readProfileWorkspaceConfigForAccount as Nt, syncDeviceRuntimeStateProjection as O, resolveInstalledClaudeCodeLaunchCandidates as On, resolveAgentProfileEditCapabilities as Or, resolveRegistryRuntimeAdapterCapabilitySnapshot as Ot, listAgentCustomTargets as P, buildRuntimeWorkspaceFingerprint as Pn, MAX_HEARTBEAT_INTERVAL_MS as Pr, resolveConfiguredProfileWorkspacePath as Pt, resolveLocalRegistryAgentIdFromAgentControllerRef as Q, materializeCliLaunchCommand as Qn, createPendingAgentInteractionRegistry as Qt, readAgentRuntimeConfigHealth as R, loadLedgerState as Rn, pruneStaleLeases as Rr, validateCustomProfileWorkspacePath as Rt, syncProfileWorkspaceState as S, forkCodexAppServerThread as Sn, projectPeopleComputersToLegacyLocalRuntimes as Sr, canonicalizeLocalProjectPath as St, resolveEffectiveProfileWorkingFolderRuntime as T, verifyCodexAppServerThread as Tn, renderWorkingLanguagePrompt as Tr, withAgentActivityLocalStateLock as Tt, setAgentRegistrationEnabled as U, upsertConversationExecutionState as Un, __toESM as Ur, syncDaemonRouteCatalogState as Ut, removeAgentCustomTarget as V, seedLegacyAgentContext as Vn, compareAgentControllerRefsForDisplay as Vr, createRouteCatalogFromMutableState as Vt, updateAgentCustomTarget as W, withLedgerStateTransaction as Wn, normalizeDispatchThreadAction as Wt, sortAgentRegistrations as X, resolveDispatchSpaceActionMcpServer as Xn, buildDispatchReplyContextSummary as Xt, parseAgentEnabledOption as Y, createUnsupportedProviderUsageLimits as Yn, createSerialAgentInteractionCallback as Yt, repairBuiltinControllerInstall as Z, buildCliLaunchInvocation as Zn, normalizeDispatchPostMessageAction as Zt, loadDaemonRouteCatalog as _, probeGrokBuildAcpInterface as _n, isAgentControllerUsageRefreshUnavailable as _r, removeProjectConnection as _t, buildOpenClawSpaceSessionKey as a, resolveDispatchContinuityObservation as an, TASK_KNOWLEDGE_GUIDANCE as ar, isHomebrewCommandPath as at, resolveLocalController as b, resolveCodexTimeoutMs as bn, parseAgentControllerRef as br, setDefaultProjectConnection as bt, findOpenClawAgentById as c, resolveLatestScopedConversationExecutionState as cn, buildInformationProtectionPromptPlan as cr, ProjectBindingOperationError as ct, resolveOpenClawAuthStatus as d, createLocalAdapterEntries as dn, createAgentControllerInterfaceDisplayRows as dr, isProjectBound as dt, createLocalTaskInterruptSender as en, listAgentControllerSupervisedProcessIds as er, detectInstalledSkillsAgents as et, resolveOpenClawProviderRuntimeWorkingDirectory as f, parseOpenRouterUsageResponse as fn, createAgentExecutionStatusDisplayRows as fr, listProjectBindings as ft, writeDaemonRouteCatalogCache as g, GrokBuildAcpTransportError as gn, isAgentControllerUsageAccountUnavailable as gr, removeMissingProjectConnections as gt, readDaemonRouteCatalogCache as h, resolveInstalledOpenCodeLaunchCandidates as hn, getAgentControllerPermissionModeFieldLabel as hr, removeAgentActivityBindingsWhileDeliveryLocked as ht, listOpenClawGatewayAgents as i, resolveDispatchQueueLogMeta as in, DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS as ir, isBunGlobalCommandPath as it, resolveAgentProfilePrimaryAgentControllerReport as j, emitReconcileStartedEvidence as jn, resolveSelectableCandidates as jr, normalizeCustomProfileWorkspacePath as jt, createPrimaryBindingReadSession as k, emitDriftDetectedEvidence as kn, resolveEvidenceSyncHealth as kr, resolveRegistryRuntimeAdapterContractByAgentControllerRef as kt, findOpenClawAgentsByWorkspace as l, resolveCatalogSyncSkippedProfilesLogState as ln, buildWorkingLanguagePromptPlan as lr, ProjectBindingStoreUpdateRequiredError as lt, resolveOpenClawLocalBootstrapPaths as m, forkOpenCodeServerSession as mn, getAgentControllerPermissionModeDisplayMetadata as mr, migrateProjectBindingStore as mt, fetchOpenClawGatewayHealth as n, createLocalExecutionSlots as nn, DISPATCH_SPACE_ACTION_DELIVERY_ONLY_ENV as nr, EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES as nt, normalizeOpenClawSpaceIdPrefix as o, resolveCompatibleAgentContextMatch as on, areAgentControllerInterfaceAccountsSame as or, isNpmGlobalCommandPath as ot, readOpenClawLocalBootstrapState as p, parseOpenCodeGoUsageResponse as pn, createAuthorityOpenMeldServiceRuntimeId as pr, listProjectConnectionsWithStatus as pt, normalizeAgentId as q, buildAgentContextLookupKey as qn, SPACE_ACTION_TARGET_GUIDANCE_LINES as qt, listOpenClawAgents as r, createInflightTaskControlRegistry as rn, isDispatchSpaceActionDeliveryOnly as rr, resolveBuiltinAgentControllerDefinition as rt, slugifyOpenClawNamePart as s, resolveCompatibleConversationExecutionState as sn, buildAgentControllerRef as sr, isPnpmGlobalCommandPath as st, prepareProviderRuntime as t, buildLocalServiceDiagnosticsPayload as tn, createProviderOriginalError as tr, resolveSkillsAgentRegistry as tt, matchesExpectedWorkspace as u, createLocalAdapterContainer as un, compareAgentControllerVersions as ur, bindProject as ut, buildRuntimeRouteTargets as v, resolveInstalledGrokBuildLaunchCandidates as vn, isAgentExecutionReadyOrConnecting as vr, resolveProjectBindingForPath as vt, resolveCurrentEffectiveProfileWorkingFolderRuntime as w, resolveCodexAppServerCompletedTurn as wn, renderTaskKnowledgeIndex as wr, withAgentActivityDeliveryLock as wt, resolveLocalRuntimeControllerSupport as x, resolveInstalledCodexLaunchCandidates as xn, peopleComputerContainsDevice as xr, unbindProject as xt, readLocalEnabledControllers as y, projectCursorUsageLimits as yn, listAgentControllerPermissionModeOptions as yr, runIfAgentActivityBindingGenerationIsCurrent as yt, reconcileNewRunnableBuiltinAgentRegistrations as z, removeConversationExecutionState as zn, resolveAdaptiveHeartbeatIntervalMs as zr, describeProfileWorkspacePathValidationFailure as zt };
 
-//# sourceMappingURL=prepare-provider-runtime-BMV0ay2U.js.map
+//# sourceMappingURL=prepare-provider-runtime-CRKT1qfE.js.map