openmeld 0.3.257 → 0.3.259

package/dist/{prepare-provider-runtime-DhhvHw2L.js → prepare-provider-runtime-BYKiQArk.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 
-import { C as updateConfiguredDeviceRuntimeState, T as updateConfiguredSkillsConfig, a as resolveBaseUrl, d as createDefaultRuntimeAgentControllerSettings, g as getConfiguredSkillsConfig, p as getConfiguredDeviceRuntimeState, v as getRuntimeConfigReadHealth, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-B9lLWy47.js";
+import { C as updateConfiguredDeviceRuntimeState, T as updateConfiguredSkillsConfig, a as resolveBaseUrl, d as createDefaultRuntimeAgentControllerSettings, g as getConfiguredSkillsConfig, p as getConfiguredDeviceRuntimeState, v as getRuntimeConfigReadHealth, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-BMrQwJW4.js";
 import { F as resolveOpenMeldRootDir, P as resolveOpenMeldEnvPreset, a as accountProfileWorkspacePath, b as normalizeOpenMeldProfileId, c as deviceOpenClawProfileBootstrapPath, h as isPublishedOpenMeldHome, l as deviceOpenClawProfileDir, n as accountProfileLocalMetaPath, u as deviceOpenClawProfileWorkspaceDir } from "./paths-De9xdA2h.js";
-import { $F as resolveCommandAgentWorkActivity, $w as openMeldDaemonControlPlaneResponseSchema, Ag as modelCatalogSchema, BP as agentControllerPermissionModeSchema, CI as parseAgentControllerRef$1, Db as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, ER as normalizeOptionalWorkingDirectory, GT as conversationExecutionStateSchema, NR as profileWorkspaceModeSchema, Na as windowsNativeProcessRequestSchema, PR as profileWorkspaceOriginSchema, QE as formatCanonicalMentionLiteral, Qa as daemonRouteCatalogCacheSchema, Qw as openMeldDaemonControlPlaneRequestSchema, UT as providerDispatchRuntimeContextSchema, VP as agentControllerCollaborationModeSchema, Xa as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, Xx as OPENMELD_ORIGINAL_ERROR_MAX_LENGTH, Zx as isOriginalErrorSafeForMessageDetails, _I as HOSTED_REMOTE_AGENT_CONTROLLER_REF, bI as canonicalizeBuiltinAgentControllerRef, dM as daemonServiceLaneSchema, fI as compareAgentControllerRefsForDisplay, gI as HOSTED_CENTER_AGENT_CONTROLLER_REF_ID, hE as resolveBuiltinAgentControllerConversationKind, hI as HOSTED_CENTER_AGENT_CONTROLLER_REF, iD as normalizeMessageEnvelope, iS as openMeldDaemonTaskResultEnvelopeWriteSchema, lE as runtimeTransportModeSchema, oS as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, pE as buildAgentControllerConversationRef, pO as agentInteractionResolutionSchema, tS as openMeldDaemonProviderAccessEvidenceSchema, vI as buildAgentControllerRoutingKey, wR as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, xS as aiUsageObservationSchema, xv as agentExecutionSteerRequestSchema, yI as canonicalizeAgentControllerRef } from "./dist-Bk1WQ99A.js";
-import { a as isOpenMeldOrphanedLockError, d as runWithHeldLock, i as isOpenMeldLockError, t as acquireLock } from "./lock-CQFhdvaP.js";
+import { $E as formatCanonicalMentionLiteral, $a as daemonRouteCatalogCacheSchema, $w as openMeldDaemonControlPlaneRequestSchema, AR as normalizeOptionalWorkingDirectory, HP as agentControllerCollaborationModeSchema, KT as conversationExecutionStateSchema, LR as profileWorkspaceModeSchema, OR as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, Ob as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, Pa as windowsNativeProcessRequestSchema, Qx as isOriginalErrorSafeForMessageDetails, RR as profileWorkspaceOriginSchema, SS as aiUsageObservationSchema, Sv as agentExecutionSteerRequestSchema, VP as agentControllerPermissionModeSchema, WT as providerDispatchRuntimeContextSchema, Za as DAEMON_ROUTE_CATALOG_CACHE_SCHEMA_NAME, Zx as OPENMELD_ORIGINAL_ERROR_MAX_LENGTH, _I as HOSTED_CENTER_AGENT_CONTROLLER_REF_ID, aD as normalizeMessageEnvelope, aS as openMeldDaemonTaskResultEnvelopeWriteSchema, bI as canonicalizeAgentControllerRef, eI as resolveCommandAgentWorkActivity, eT as openMeldDaemonControlPlaneResponseSchema, fM as daemonServiceLaneSchema, gE as resolveBuiltinAgentControllerConversationKind, gI as HOSTED_CENTER_AGENT_CONTROLLER_REF, jg as modelCatalogSchema, mE as buildAgentControllerConversationRef, mO as agentInteractionResolutionSchema, nS as openMeldDaemonProviderAccessEvidenceSchema, pI as compareAgentControllerRefsForDisplay, sS as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, uE as runtimeTransportModeSchema, vI as HOSTED_REMOTE_AGENT_CONTROLLER_REF, wI as parseAgentControllerRef$1, xI as canonicalizeBuiltinAgentControllerRef, yI as buildAgentControllerRoutingKey } from "./dist-Dx5paVZY.js";
+import { a as isOpenMeldOrphanedLockError, d as runWithHeldLock, i as isOpenMeldLockError, t as acquireLock } from "./lock-CDdQw0gQ.js";
 import { n as normalizeCommandEnvironment } from "./process-environment-BWSFeUu6.js";
-import { c as readWindowsProcessStartFileTime, d as WINDOWS_NATIVE_PROCESS_REQUEST_ENV, f as resolveWindowsNativeProcessHelper, l as resolveWindowsPowerShellPath, o as powerShellEncodedArguments, r as isProcessIdentityAlive, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-h1RYDsRm.js";
-import { Vt as createAgentProfileBindingApi, an as createLocalRuntimeExpectedRoutesApi, t as OpenMeldApiClientHttpError } from "./dist-Nhlf_Xfo.js";
-import { F as resolveCurrentOpenMeldAccountContext, _ as touchDaemonCatalogSyncSignal, d as listOpenMeldProfiles } from "./context-CtpDI4OE.js";
-import { Y as OPENCLAW_CLI_TIMEOUT_MS$1, d as getAuthSessionState } from "./auth-session-gCSwPpKk.js";
+import { c as readWindowsProcessStartFileTime, d as WINDOWS_NATIVE_PROCESS_REQUEST_ENV, f as resolveWindowsNativeProcessHelper, l as resolveWindowsPowerShellPath, o as powerShellEncodedArguments, r as isProcessIdentityAlive, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-DtRa8niy.js";
+import { Vt as createAgentProfileBindingApi, an as createLocalRuntimeExpectedRoutesApi, t as OpenMeldApiClientHttpError } from "./dist-BJy9X73H.js";
+import { F as resolveCurrentOpenMeldAccountContext, _ as touchDaemonCatalogSyncSignal, d as listOpenMeldProfiles } from "./context-BT5P1qqr.js";
+import { Y as OPENCLAW_CLI_TIMEOUT_MS$1, d as getAuthSessionState } from "./auth-session-mNZMZihh.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
-import { m as daemonRuntimeDataPath } from "./daemon-state-BpDMuV9q.js";
-import { d as buildOpenMeldRequestContextFromProfile, t as createCliApiClientFoundation } from "./api-client-foundation-K-xme5wi.js";
-import { i as readDaemonServiceContract } from "./daemon-service-contract-BliSi2Kx.js";
-import { C as requestLocalSyncRouteCatalog } from "./daemon-lifecycle-journal-kn_V27_x.js";
+import { m as daemonRuntimeDataPath } from "./daemon-state-B8L0_xPT.js";
+import { d as buildOpenMeldRequestContextFromProfile, t as createCliApiClientFoundation } from "./api-client-foundation-BDbeHD1i.js";
+import { i as readDaemonServiceContract } from "./daemon-service-contract-Dkgengx4.js";
+import { C as requestLocalSyncRouteCatalog } from "./daemon-lifecycle-journal-oMoQyKEB.js";
 import { i as resolveWindowsCommandPath, n as quoteWindowsProcessArgument, r as resolvePlatformCommand, t as execPlatformFile } from "./process-launch-B0pHlkV_.js";
-import { _ as toErrorMessage$20, d as normalizeText$11, g as parseTransportMode$1, h as parseStreamingMode$1, m as parseRuntimeTransportMode, p as parseContextIdMappingSpec, s as emitRunLine, u as normalizeOptionalText$49 } from "./daemon-device-id-BPwCO8jO.js";
+import { _ as toErrorMessage$20, d as normalizeText$11, g as parseTransportMode$1, h as parseStreamingMode$1, m as parseRuntimeTransportMode, p as parseContextIdMappingSpec, s as emitRunLine, u as normalizeOptionalText$49 } from "./daemon-device-id-DrGRbKdb.js";
 import { createRequire } from "node:module";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { homedir, loadavg, tmpdir } from "node:os";
@@ -23,7 +23,7 @@ import { basename, delimiter, dirname, extname, isAbsolute, join, normalize, par
 import { access, chmod, copyFile, cp, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { toJSONSchema } from "zod/v4";
 import { accessSync, constants, existsSync, readFileSync, realpathSync, statSync, watch } from "node:fs";
-import { execFile, spawn } from "node:child_process";
+import { execFile, execFileSync, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import { fileURLToPath } from "node:url";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
@@ -935,6 +935,13 @@ var require_satisfies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../packages/agent-runtime/dist/index.js
 var import_parse = /* @__PURE__ */ __toESM(require_parse(), 1);
 var import_satisfies = /* @__PURE__ */ __toESM(require_satisfies(), 1);
+/** Session selection support; execution still checks live identity and access. */
+function supportsExecutionContextSelection(ref) {
+	return supportsExecutionContextAccess(ref, "workspace", "agent_settings");
+}
+function supportsExecutionContextAccess(ref, access, permissionSource) {
+	return ref === "builtin:codex" || ref === "builtin:antigravity" && access === "workspace" && permissionSource === "agent_settings" || ref === "builtin:claude-code" && (access === "space_context" || access === "workspace");
+}
 /** Material support only; live readiness and permissions remain owner checks. */
 function supportsSpaceWorkHandoff(input) {
 	const ref = input.agentControllerRef;
@@ -1074,6 +1081,10 @@ function createAgentControllerInterfaceOperationalDisplayRows(snapshot) {
 }
 function createAgentControllerInterfaceDisplayRows(snapshot) {
 	const rows = createAgentControllerInterfaceOperationalDisplayRows(snapshot);
+	if (snapshot.controllerId === "antigravity" && snapshot.check?.status === "succeeded") {
+		const controller = rows.find((row) => row.label === "Controller");
+		if (controller && snapshot.auth.status !== "authenticated") controller.value = snapshot.auth.status === "unauthenticated" ? "Not signed in" : "Installed";
+	}
 	rows.splice(1, 0, {
 		label: "Account",
 		value: formatAgentControllerAccount(snapshot)
@@ -2797,7 +2808,8 @@ var registry_default$1 = {
 					},
 					"transportModes": ["local-cli"],
 					"capabilityDeclaration": {
-						"executionContextVersion": 2,
+						"executionContextVersion": 5,
+						"executionContextPermissionInheritance": true,
 						"streamingCapability": "preview_capable",
 						"imageInputCapability": "unsupported",
 						"runtimeWorkingDirectoryMode": "spawn_cwd",
@@ -5461,6 +5473,7 @@ var AcpProcessSession = class {
 	#onClientRequest;
 	#onLifecycleEvent;
 	#onNotification;
+	#consumeNonProtocolLine;
 	#onProcessControlEvent;
 	#pending = /* @__PURE__ */ new Map();
 	#processLabel;
@@ -5485,6 +5498,7 @@ var AcpProcessSession = class {
 	#runtimeProcess = null;
 	#settledFailure = null;
 	#stderr = "";
+	#stderrLineBuffer = "";
 	constructor(input) {
 		this.#args = input.args;
 		this.#createError = input.createError;
@@ -5495,6 +5509,7 @@ var AcpProcessSession = class {
 		this.#onClientRequest = input.onClientRequest;
 		this.#onLifecycleEvent = input.onLifecycleEvent;
 		this.#onNotification = input.onNotification;
+		this.#consumeNonProtocolLine = input.consumeNonProtocolLine;
 		this.#onProcessControlEvent = input.onProcessControlEvent;
 		this.#processLabel = input.processLabel;
 		this.#timeoutMs = input.timeoutMs;
@@ -5560,7 +5575,21 @@ var AcpProcessSession = class {
 					tsMs: firstStderrAtMs
 				});
 			}
-			this.#stderr = `${this.#stderr}${String(chunk)}`.slice(-16e3);
+			if (this.#consumeNonProtocolLine) {
+				this.#stderrLineBuffer += String(chunk);
+				let newline = this.#stderrLineBuffer.indexOf("\n");
+				while (newline >= 0) {
+					const line = this.#stderrLineBuffer.slice(0, newline).trim();
+					this.#stderrLineBuffer = this.#stderrLineBuffer.slice(newline + 1);
+					try {
+						if (!this.#consumeNonProtocolLine(line)) this.#stderr = `${this.#stderr}${line}\n`.slice(-16e3);
+					} catch (error) {
+						this.#failAll(error);
+					}
+					newline = this.#stderrLineBuffer.indexOf("\n");
+				}
+				this.#stderrLineBuffer = this.#stderrLineBuffer.slice(-16e3);
+			} else this.#stderr = `${this.#stderr}${String(chunk)}`.slice(-16e3);
 		});
 		child.stdin.on("error", (error) => {
 			this.#failAll(this.#buildStdinWriteError(error));
@@ -5713,6 +5742,12 @@ var AcpProcessSession = class {
 		}
 	}
 	#handleStdoutLine(line) {
+		try {
+			if (this.#consumeNonProtocolLine?.(line)) return;
+		} catch (error) {
+			this.#failAll(error);
+			return;
+		}
 		let message;
 		try {
 			const parsed = JSON.parse(line);
@@ -9176,6 +9211,56 @@ function emitStructuredReconcileEvidence(eventName, payload) {
 	});
 }
 //#endregion
+//#region ../../runtime/adapters/antigravity/dist/transport/antigravity-acp-auth.js
+const AUTH_URL_PREFIX = "Open the following link to authenticate the ACP server: ";
+const WHITESPACE_RE = /\s/u;
+const LOOPBACK_REDIRECT_RE = /^http:\/\/127\.0\.0\.1:[1-9][0-9]{0,4}\/$/u;
+function antigravityAuthRequired() {
+	return Object.assign(/* @__PURE__ */ new Error("Sign in to Antigravity ACP on this computer, then check again."), {
+		code: "auth.required",
+		errorType: "auth"
+	});
+}
+function consumeAntigravityAuthLine(onAuthorizationUrl) {
+	const seen = /* @__PURE__ */ new Set();
+	return (line) => {
+		if (!onAuthorizationUrl && line.endsWith("Credentials missing or invalid. Launching browser login flow...")) throw antigravityAuthRequired();
+		if (!line.startsWith(AUTH_URL_PREFIX)) return false;
+		if (!onAuthorizationUrl) throw antigravityAuthRequired();
+		const text = line.slice(56);
+		let url;
+		try {
+			url = new URL(text);
+		} catch {
+			throw new Error("Antigravity returned an invalid sign-in URL.");
+		}
+		const redirect = url.searchParams.get("redirect_uri");
+		if (text.length > 16384 || WHITESPACE_RE.test(text) || url.origin !== "https://accounts.google.com" || url.pathname !== "/o/oauth2/v2/auth" || url.username || url.password || url.hash || url.searchParams.getAll("state").length !== 1 || !url.searchParams.get("state") || url.searchParams.getAll("redirect_uri").length !== 1 || url.searchParams.getAll("response_type").length !== 1 || url.searchParams.get("response_type") !== "code" || !redirect || !LOOPBACK_REDIRECT_RE.test(redirect)) throw new Error("Antigravity returned an invalid sign-in URL.");
+		const port = Number(new URL(redirect).port);
+		if (port < 1024 || port > 65535) throw new Error("Antigravity returned an invalid sign-in URL.");
+		if (!seen.has(text)) {
+			seen.add(text);
+			onAuthorizationUrl(text);
+		}
+		return true;
+	};
+}
+function antigravityAcpEnvironment(launch, env) {
+	const harness = join(dirname(launch.kind === "node_script" ? launch.scriptPath : launch.commandPath), process.platform === "win32" ? "localharness_external.exe" : "localharness_external");
+	const browser = process.platform === "win32" ? "node -e \"process.exit(0)\" -- %s" : "/usr/bin/true";
+	execFileSync(process.platform === "win32" ? "node" : browser, process.platform === "win32" ? ["-e", "process.exit(0)"] : [], {
+		timeout: 2e3,
+		stdio: "ignore"
+	});
+	return {
+		...env,
+		...existsSync(harness) ? { ANTIGRAVITY_HARNESS_PATH: harness } : {},
+		AGY_ACP_FORCE_FILE_STORAGE: "1",
+		BROWSER: browser,
+		PYTHONUNBUFFERED: "1"
+	};
+}
+//#endregion
 //#region ../../runtime/adapters/antigravity/dist/transport/antigravity-acp-interactions.js
 const CANCELLED = { outcome: { outcome: "cancelled" } };
 async function answerAntigravityAcpInteraction(request, callback, signal) {
@@ -9266,24 +9351,11 @@ function isAntigravityAcpLaunchContract(launch) {
 	return ["agy_acp_server.par", "agy_acp_server.exe"].includes(basename(path).toLowerCase());
 }
 function acpError(input) {
-	if (input.code === "protocol.invalid" && input.message.includes("Open the following link to authenticate")) return Object.assign(/* @__PURE__ */ new Error("Sign in to Antigravity ACP, then try again."), {
-		code: "auth.required",
-		errorType: "auth"
-	});
 	return Object.assign(new Error(input.message, { cause: input.cause }), {
 		code: input.code,
 		errorType: input.errorType
 	});
 }
-function acpEnvironment(launch, env) {
-	const harness = join(dirname(launch.kind === "node_script" ? launch.scriptPath : launch.commandPath), process.platform === "win32" ? "localharness_external.exe" : "localharness_external");
-	return {
-		...env,
-		...existsSync(harness) ? { ANTIGRAVITY_HARNESS_PATH: harness } : {},
-		BROWSER: process.platform === "win32" ? "cmd /c exit 1" : "/usr/bin/false",
-		PYTHONUNBUFFERED: "1"
-	};
-}
 const initializeParams = {
 	protocolVersion: 1,
 	clientInfo: {
@@ -9308,11 +9380,10 @@ function readInitialize(value) {
 	return result;
 }
 async function admissionRequest(process, method, params) {
-	const authentication = method === "authenticate";
 	const timer = setTimeout(() => process.fail(acpError({
-		code: authentication ? "auth.required" : "protocol.timeout",
-		errorType: authentication ? "auth" : "timeout",
-		message: authentication ? "Sign in to Antigravity ACP, then try again." : "Antigravity did not finish starting its ACP session."
+		code: "protocol.timeout",
+		errorType: "timeout",
+		message: "Antigravity did not finish starting its ACP session."
 	})), 15e3);
 	try {
 		return await process.request(method, params);
@@ -9324,7 +9395,8 @@ async function probeAntigravityAcp(input) {
 	const process = new AcpProcessSession({
 		args: [],
 		cwd: input.cwd,
-		env: acpEnvironment(input.launchContract),
+		env: antigravityAcpEnvironment(input.launchContract),
+		consumeNonProtocolLine: consumeAntigravityAuthLine(),
 		launchContract: input.launchContract,
 		createError: acpError,
 		processLabel: "Antigravity",
@@ -9337,6 +9409,78 @@ async function probeAntigravityAcp(input) {
 		await process.close();
 	}
 }
+function mapAcpError(error) {
+	const message = error.message ?? "Antigravity rejected the request.";
+	return acpError({
+		code: error.code === -32e3 ? "auth.required" : "protocol.request_failed",
+		errorType: error.code === -32e3 ? "auth" : "adapter",
+		message
+	});
+}
+async function checkAntigravityAcpAccount(input) {
+	const process = new AcpProcessSession({
+		args: [],
+		cwd: input.cwd,
+		env: antigravityAcpEnvironment(input.launchContract, input.env),
+		launchContract: input.launchContract,
+		createError: acpError,
+		consumeNonProtocolLine: consumeAntigravityAuthLine(input.login?.onAuthorizationUrl),
+		mapJsonRpcError: mapAcpError,
+		processLabel: "Antigravity",
+		timeoutMs: input.timeoutMs ?? (input.login ? 3e5 : 15e3)
+	});
+	const abort = () => {
+		process.fail(acpError({
+			code: "auth.cancelled",
+			errorType: "auth",
+			message: "Antigravity sign-in was cancelled."
+		}));
+	};
+	input.signal?.throwIfAborted();
+	input.signal?.addEventListener("abort", abort, { once: true });
+	try {
+		process.start();
+		const initialized = readInitialize(await process.request("initialize", initializeParams));
+		if (input.login) {
+			if (!initialized.authMethods?.some((method) => method.id === input.login?.methodId)) throw acpError({
+				code: "auth.method_unavailable",
+				errorType: "auth",
+				message: "This Antigravity installation does not offer the selected sign-in method."
+			});
+			await process.request("authenticate", { methodId: input.login.methodId });
+		}
+		try {
+			const session = await process.request("session/new", {
+				cwd: input.cwd,
+				mcpServers: []
+			});
+			if (!session?.sessionId) throw acpError({
+				code: "protocol.invalid",
+				errorType: "adapter",
+				message: "Antigravity did not return a conversation identifier."
+			});
+			const config = session.configOptions?.find((option) => option.id === "model" && option.type === "select");
+			return {
+				initialized,
+				authStatus: "authenticated",
+				models: (config?.type === "select" ? config.options.flatMap((option) => "value" in option ? [option] : option.options) : []).map((option) => ({
+					id: option.value,
+					displayName: option.name
+				}))
+			};
+		} catch (error) {
+			if (!input.login && error instanceof Error && "code" in error && error.code === "auth.required") return {
+				initialized,
+				authStatus: "unauthenticated",
+				models: []
+			};
+			throw error;
+		}
+	} finally {
+		input.signal?.removeEventListener("abort", abort);
+		await process.close();
+	}
+}
 async function invokeAntigravityAcpTransport(input) {
 	const { request } = input;
 	if (isDispatchSpaceActionDeliveryOnly(request.env) || request.executionMode === "repair") throw acpError({
@@ -9357,7 +9501,8 @@ async function invokeAntigravityAcpTransport(input) {
 	const process = new AcpProcessSession({
 		args: [],
 		cwd: request.runtimeContext.providerRuntimeWorkingDirectory,
-		env: acpEnvironment(input.launchContract, request.env),
+		env: antigravityAcpEnvironment(input.launchContract, request.env),
+		consumeNonProtocolLine: consumeAntigravityAuthLine(),
 		launchContract: input.launchContract,
 		createError: acpError,
 		processLabel: "Antigravity",
@@ -9473,13 +9618,6 @@ async function invokeAntigravityAcpTransport(input) {
 async function configureSession(process, input) {
 	const { request } = input;
 	const initialized = readInitialize(await admissionRequest(process, "initialize", initializeParams));
-	const methodId = request.env?.OPENMELD_ANTIGRAVITY_ACP_AUTH_METHOD ?? "oauth-personal";
-	if (!initialized.authMethods?.some((method) => method.id === methodId)) throw acpError({
-		code: "auth.method_unavailable",
-		errorType: "auth",
-		message: `Antigravity does not offer authentication method '${methodId}'.`
-	});
-	await admissionRequest(process, "authenticate", { methodId });
 	if (input.sessionId && !initialized.agentCapabilities?.sessionCapabilities?.resume) throw acpError({
 		code: "context.resume_unsupported",
 		errorType: "adapter",
@@ -10365,6 +10503,20 @@ function createAntigravityAdapter(options = {}) {
 		})
 	};
 }
+function assertExecutionContextSupported(request, launchContract) {
+	if (request.executionContext) {
+		if (!isAntigravityAcpLaunchContract(launchContract)) throw new AntigravityCliTransportError({
+			code: "execution_context.antigravity_acp_required",
+			errorType: "config",
+			message: "Select the official Antigravity ACP installation and sign in before starting an independent task."
+		});
+		if (request.executionContext.permissionSource !== "agent_settings" || request.executionContext.access !== "workspace" || request.executionContext.forkSource) throw new AntigravityCliTransportError({
+			code: "execution_context.controller_access_unsupported",
+			errorType: "config",
+			message: "Antigravity tasks use Agent settings. Start a new task without extra access restrictions or a history fork."
+		});
+	}
+}
 function createDefaultAntigravityInvoke(input) {
 	return async (request) => {
 		const task = {
@@ -10383,9 +10535,10 @@ function createDefaultAntigravityInvoke(input) {
 				errorType: "adapter",
 				message: "runtime.cancelled_before_start: Antigravity dispatch was canceled before launch"
 			});
+			assertExecutionContextSupported(request, launchContract);
 			const result = await invokeWithSingleContextHeal({
 				contextId: normalizeOptionalText$38(request.agentControllerConversationId),
-				contextLossPolicy: request.executionMode === "repair" ? "fail" : "rebuild",
+				contextLossPolicy: request.executionContext || request.executionMode === "repair" ? "fail" : "rebuild",
 				createRebuildFailedError: (error) => new AntigravityCliTransportError({
 					code: "context.rebuild_failed",
 					errorType: "adapter",
@@ -28091,7 +28244,8 @@ var registry_default = {
 					},
 					"transportModes": ["local-cli"],
 					"capabilityDeclaration": {
-						"executionContextVersion": 2,
+						"executionContextVersion": 5,
+						"executionContextPermissionInheritance": true,
 						"streamingCapability": "preview_capable",
 						"imageInputCapability": "unsupported",
 						"runtimeWorkingDirectoryMode": "spawn_cwd",
@@ -33377,9 +33531,9 @@ function createModelCatalogReadSession(input) {
 async function readModelCatalogOnce(baseUrl) {
 	try {
 		const [apiClient, baseUrlModule, clientFoundationModule] = await Promise.all([
-			import("./dist-C1X_UGiT.js"),
-			import("./base-url-CBkrCY1z.js"),
-			import("./api-client-foundation-DS6edHLv.js")
+			import("./dist-BFz8AKxR.js"),
+			import("./base-url-uwbKIZtP.js"),
+			import("./api-client-foundation-Dye8bbn0.js")
 		]);
 		if (typeof apiClient.createConfigApi !== "function") throw new Error("config api client is unavailable");
 		const resolvedBaseUrl = baseUrl ?? await baseUrlModule.resolveBaseUrl();
@@ -35223,6 +35377,6 @@ async function prepareProviderRuntime(input, options = {}) {
 	return await preparer(input);
 }
 //#endregion
-export { detectInstalledSkillsAgents as $, buildAgentContextLookupKey as $n, normalizeDispatchPostMessageAction as $t, createExpectedRoutesReadSession as A, readCodexAccountUsageObservation as An, renderTaskKnowledgeIndex as Ar, ensureOpenMeldManagedProfileWorkspace as At, removeAgentCustomTarget as B, buildRuntimeWorkspaceFingerprint as Bn, ADAPTIVE_HEARTBEAT_JITTER_RATIO as Br, describeProfileWorkspacePathValidationFailure as Bt, createModelCatalogReadSession as C, resolveCodexTimeoutMs as Cn, isAgentControllerUsageRefreshUnavailable as Cr, resolveLocalProjectConnectionForPath as Ct, NO_LOCAL_AGENTS_NEED_OPENMELD_SERVICE_REASON as D, resolveCodexAppServerCompletedTurn as Dn, peopleComputerContainsDevice as Dr, resolveRegistryOriginLaunchCommand as Dt, resolveProfileWorkspaceRuntime as E, probeCodexAppServerAccount as En, parseAgentControllerRef as Er, listBuiltinAgentsRegistryEntries as Et, listAgentRegistrations as F, emitDriftDetectedEvidence as Fn, resolveEvidenceSyncHealth as Fr, resolveConfiguredProfileWorkspacePath as Ft, notifyDaemonRouteCatalogChanged as G, removeConversationExecutionState as Gn, pruneStaleLeases as Gr, syncDaemonRouteCatalogState as Gt, setAgentRegistrationEnabled as H, appendLedgerHistoryEntry as Hn, MIN_HEARTBEAT_INTERVAL_MS as Hr, createRouteCatalogFromMutableState as Ht, listAgentTargetStates as I, emitReconcileCompletedEvidence as In, resolveNativeAgentControllerPermissionModeForController as Ir, resolveConfiguredProfileWorkspacePathForAccount as It, parseAgentEnabledOption as J, settleInflightTask as Jn, __toESM as Jr, SPACE_ACTION_CONTEXT_GUIDANCE_LINES as Jt, normalizeAgentId as K, resolveConversationExecutionStateByLookupKey as Kn, resolveAdaptiveHeartbeatIntervalMs as Kr, normalizeDispatchThreadAction as Kt, manageAgentRegistrationInstallation as L, emitReconcileStartedEvidence as Ln, resolveSelectableCandidates as Lr, setCustomProfileWorkspace as Lt, addAgentCustomTarget as M, resolveInstalledClaudeCodeLaunchCandidates as Mn, resolveAgentControllerPermissionModeForController as Mr, readProfileWorkspaceConfig as Mt, createRegistrationFromCatalogTarget as N, isAntigravityAcpLaunchContract as Nn, resolveAgentExecutionStatus as Nr, readProfileWorkspaceConfigForAccount as Nt, syncDeviceRuntimeStateProjection as O, verifyCodexAppServerThread as On, projectPeopleComputersToLegacyLocalRuntimes as Or, resolveRegistryRuntimeAdapterCapabilitySnapshot as Ot, listAgentCustomTargets as P, probeAntigravityAcp as Pn, resolveAgentProfileEditCapabilities as Pr, readSavedProfileWorkspaceForAccount as Pt, canManageRegistryAgentSkillTargets as Q, assertLegacyAgentContextAssociation as Qn, buildDispatchReplyContextSummary as Qt, readAgentRuntimeConfigHealth as R, DaemonServiceRunError as Rn, supportsSpaceWorkHandoff as Rr, setOpenMeldManagedProfileWorkspace as Rt, syncProfileWorkspaceState as S, projectCursorUsageLimits as Sn, isAgentControllerUsageAccountUnavailable as Sr, canonicalizeLocalProjectPath as St, resolveEffectiveProfileWorkingFolderRuntime as T, forkCodexAppServerThread as Tn, listAgentControllerPermissionModeOptions as Tr, withAgentActivityLocalStateLock as Tt, updateAgentCustomTarget as U, commitResolvedAgentContext as Un, applyAcceptedLeases as Ur, replaceMutableRouteCatalogState as Ut, resolveAgentTargetState as V, buildTaskResultEnvelope as Vn, MAX_HEARTBEAT_INTERVAL_MS as Vr, createMutableRouteCatalogState as Vt, updateAgentRegistrations as W, loadLedgerState as Wn, applyIntervalJitterMs as Wr, summarizeSkippedDaemonProfiles as Wt, repairBuiltinControllerInstall as X, withLedgerStateTransaction as Xn, isDaemonReconcileInProgressError as Xt, sortAgentRegistrations as Y, upsertConversationExecutionState as Yn, SPACE_ACTION_TARGET_GUIDANCE_LINES as Yt, resolveLocalRegistryAgentIdFromAgentControllerRef as Z, buildAuthenticatedControlPlaneResponse as Zn, createSerialAgentInteractionCallback as Zt, loadDaemonRouteCatalog as _, readOpenCode2Inventory as _n, createAgentControllerInterfaceDisplayRows as _r, removeProjectConnection as _t, buildOpenClawSpaceSessionKey as a, createInflightTaskControlRegistry as an, resolveExecutablePathsOnPath as ar, isNpmGlobalCommandPath as at, resolveLocalController as b, probeGrokBuildAcpInterface as bn, getAgentControllerPermissionModeDisplayMetadata as br, setDefaultProjectConnection as bt, findOpenClawAgentById as c, resolveCompatibleAgentContextMatch as cn, DISPATCH_SPACE_ACTION_DELIVERY_ONLY_ENV as cr, ProjectBindingStoreUpdateRequiredError as ct, resolveOpenClawAuthStatus as d, resolveCatalogSyncSkippedProfilesLogState as dn, TASK_KNOWLEDGE_GUIDANCE as dr, isProjectBound as dt, createPendingAgentInteractionRegistry as en, createUnavailableProviderUsageLimits as er, resolveSkillsAgentRegistry as et, resolveOpenClawProviderRuntimeWorkingDirectory as f, createLocalAdapterContainer as fn, areAgentControllerInterfaceAccountsSame as fr, listProjectBindings as ft, writeDaemonRouteCatalogCache as g, forkOpenCodeServerSession as gn, compareAgentControllerVersions as gr, removeMissingProjectConnections as gt, readDaemonRouteCatalogCache as h, parseOpenCodeGoUsageResponse as hn, buildWorkingLanguagePromptPlan as hr, removeAgentActivityBindingsWhileDeliveryLocked as ht, listOpenClawGatewayAgents as i, createLocalExecutionSlots as in, materializeCliLaunchCommand as ir, isHomebrewCommandPath as it, resolveAgentProfilePrimaryAgentControllerReport as j, probeClaudeCodeUsageLimits as jn, renderWorkingLanguagePrompt as jr, normalizeCustomProfileWorkspacePath as jt, createPrimaryBindingReadSession as k, projectCodexUsageObservation as kn, renderInformationProtectionPrompt as kr, resolveRegistryRuntimeAdapterContractByAgentControllerRef as kt, findOpenClawAgentsByWorkspace as l, resolveCompatibleConversationExecutionState as ln, isDispatchSpaceActionDeliveryOnly as lr, bindProject as lt, resolveOpenClawLocalBootstrapPaths as m, parseOpenRouterUsageResponse as mn, buildInformationProtectionPromptPlan as mr, migrateProjectBindingStore as mt, fetchOpenClawGatewayHealth as n, createLocalTaskInterruptSender as nn, resolveDispatchSpaceActionMcpServer as nr, resolveBuiltinAgentControllerDefinition as nt, normalizeOpenClawSpaceIdPrefix as o, resolveDispatchQueueLogMeta as on, listAgentControllerSupervisedProcessIds as or, isPnpmGlobalCommandPath as ot, readOpenClawLocalBootstrapState as p, createLocalAdapterEntries as pn, buildAgentControllerRef as pr, listProjectConnectionsWithStatus as pt, normalizeAgentIds as q, seedLegacyAgentContext as qn, resolveCatalogSyncIntervalMs as qr, syncRuntimeEventToInflightTaskControlRegistry as qt, listOpenClawAgents as r, buildLocalServiceDiagnosticsPayload as rn, buildCliLaunchInvocation as rr, isBunGlobalCommandPath as rt, slugifyOpenClawNamePart as s, resolveDispatchContinuityObservation as sn, createProviderOriginalError as sr, ProjectBindingOperationError as st, prepareProviderRuntime as t, mergeOpenClawGatewayVisibility as tn, createUnsupportedProviderUsageLimits as tr, EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES as tt, matchesExpectedWorkspace as u, resolveLatestScopedConversationExecutionState as un, DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS as ur, hasProjectBindingForPath as ut, buildRuntimeRouteTargets as v, resolveInstalledOpenCodeLaunchCandidates as vn, createAgentExecutionStatusDisplayRows as vr, resolveProjectBindingForPath as vt, resolveCurrentEffectiveProfileWorkingFolderRuntime as w, resolveInstalledCodexLaunchCandidates as wn, isAgentExecutionReadyOrConnecting as wr, withAgentActivityDeliveryLock as wt, resolveLocalRuntimeControllerSupport as x, resolveInstalledGrokBuildLaunchCandidates as xn, getAgentControllerPermissionModeFieldLabel as xr, unbindProject as xt, readLocalEnabledControllers as y, GrokBuildAcpTransportError as yn, createAuthorityOpenMeldServiceRuntimeId as yr, runIfAgentActivityBindingGenerationIsCurrent as yt, reconcileNewRunnableBuiltinAgentsForSetup as z, runRuntimeTask as zn, resolveRouteRegistrationReconcileDecision as zr, validateCustomProfileWorkspacePath as zt };
+export { detectInstalledSkillsAgents as $, buildAgentContextLookupKey as $n, normalizeDispatchPostMessageAction as $t, createExpectedRoutesReadSession as A, readCodexAccountUsageObservation as An, renderTaskKnowledgeIndex as Ar, ensureOpenMeldManagedProfileWorkspace as At, removeAgentCustomTarget as B, buildRuntimeWorkspaceFingerprint as Bn, resolveRouteRegistrationReconcileDecision as Br, describeProfileWorkspacePathValidationFailure as Bt, createModelCatalogReadSession as C, resolveCodexTimeoutMs as Cn, isAgentControllerUsageRefreshUnavailable as Cr, resolveLocalProjectConnectionForPath as Ct, NO_LOCAL_AGENTS_NEED_OPENMELD_SERVICE_REASON as D, resolveCodexAppServerCompletedTurn as Dn, peopleComputerContainsDevice as Dr, resolveRegistryOriginLaunchCommand as Dt, resolveProfileWorkspaceRuntime as E, probeCodexAppServerAccount as En, parseAgentControllerRef as Er, listBuiltinAgentsRegistryEntries as Et, listAgentRegistrations as F, emitDriftDetectedEvidence as Fn, resolveEvidenceSyncHealth as Fr, resolveConfiguredProfileWorkspacePath as Ft, notifyDaemonRouteCatalogChanged as G, removeConversationExecutionState as Gn, applyIntervalJitterMs as Gr, syncDaemonRouteCatalogState as Gt, setAgentRegistrationEnabled as H, appendLedgerHistoryEntry as Hn, MAX_HEARTBEAT_INTERVAL_MS as Hr, createRouteCatalogFromMutableState as Ht, listAgentTargetStates as I, emitReconcileCompletedEvidence as In, resolveNativeAgentControllerPermissionModeForController as Ir, resolveConfiguredProfileWorkspacePathForAccount as It, parseAgentEnabledOption as J, settleInflightTask as Jn, resolveCatalogSyncIntervalMs as Jr, SPACE_ACTION_CONTEXT_GUIDANCE_LINES as Jt, normalizeAgentId as K, resolveConversationExecutionStateByLookupKey as Kn, pruneStaleLeases as Kr, normalizeDispatchThreadAction as Kt, manageAgentRegistrationInstallation as L, emitReconcileStartedEvidence as Ln, resolveSelectableCandidates as Lr, setCustomProfileWorkspace as Lt, addAgentCustomTarget as M, resolveInstalledClaudeCodeLaunchCandidates as Mn, resolveAgentControllerPermissionModeForController as Mr, readProfileWorkspaceConfig as Mt, createRegistrationFromCatalogTarget as N, checkAntigravityAcpAccount as Nn, resolveAgentExecutionStatus as Nr, readProfileWorkspaceConfigForAccount as Nt, syncDeviceRuntimeStateProjection as O, verifyCodexAppServerThread as On, projectPeopleComputersToLegacyLocalRuntimes as Or, resolveRegistryRuntimeAdapterCapabilitySnapshot as Ot, listAgentCustomTargets as P, isAntigravityAcpLaunchContract as Pn, resolveAgentProfileEditCapabilities as Pr, readSavedProfileWorkspaceForAccount as Pt, canManageRegistryAgentSkillTargets as Q, assertLegacyAgentContextAssociation as Qn, buildDispatchReplyContextSummary as Qt, readAgentRuntimeConfigHealth as R, DaemonServiceRunError as Rn, supportsExecutionContextSelection as Rr, setOpenMeldManagedProfileWorkspace as Rt, syncProfileWorkspaceState as S, projectCursorUsageLimits as Sn, isAgentControllerUsageAccountUnavailable as Sr, canonicalizeLocalProjectPath as St, resolveEffectiveProfileWorkingFolderRuntime as T, forkCodexAppServerThread as Tn, listAgentControllerPermissionModeOptions as Tr, withAgentActivityLocalStateLock as Tt, updateAgentCustomTarget as U, commitResolvedAgentContext as Un, MIN_HEARTBEAT_INTERVAL_MS as Ur, replaceMutableRouteCatalogState as Ut, resolveAgentTargetState as V, buildTaskResultEnvelope as Vn, ADAPTIVE_HEARTBEAT_JITTER_RATIO as Vr, createMutableRouteCatalogState as Vt, updateAgentRegistrations as W, loadLedgerState as Wn, applyAcceptedLeases as Wr, summarizeSkippedDaemonProfiles as Wt, repairBuiltinControllerInstall as X, withLedgerStateTransaction as Xn, isDaemonReconcileInProgressError as Xt, sortAgentRegistrations as Y, upsertConversationExecutionState as Yn, __toESM as Yr, SPACE_ACTION_TARGET_GUIDANCE_LINES as Yt, resolveLocalRegistryAgentIdFromAgentControllerRef as Z, buildAuthenticatedControlPlaneResponse as Zn, createSerialAgentInteractionCallback as Zt, loadDaemonRouteCatalog as _, readOpenCode2Inventory as _n, createAgentControllerInterfaceDisplayRows as _r, removeProjectConnection as _t, buildOpenClawSpaceSessionKey as a, createInflightTaskControlRegistry as an, resolveExecutablePathsOnPath as ar, isNpmGlobalCommandPath as at, resolveLocalController as b, probeGrokBuildAcpInterface as bn, getAgentControllerPermissionModeDisplayMetadata as br, setDefaultProjectConnection as bt, findOpenClawAgentById as c, resolveCompatibleAgentContextMatch as cn, DISPATCH_SPACE_ACTION_DELIVERY_ONLY_ENV as cr, ProjectBindingStoreUpdateRequiredError as ct, resolveOpenClawAuthStatus as d, resolveCatalogSyncSkippedProfilesLogState as dn, TASK_KNOWLEDGE_GUIDANCE as dr, isProjectBound as dt, createPendingAgentInteractionRegistry as en, createUnavailableProviderUsageLimits as er, resolveSkillsAgentRegistry as et, resolveOpenClawProviderRuntimeWorkingDirectory as f, createLocalAdapterContainer as fn, areAgentControllerInterfaceAccountsSame as fr, listProjectBindings as ft, writeDaemonRouteCatalogCache as g, forkOpenCodeServerSession as gn, compareAgentControllerVersions as gr, removeMissingProjectConnections as gt, readDaemonRouteCatalogCache as h, parseOpenCodeGoUsageResponse as hn, buildWorkingLanguagePromptPlan as hr, removeAgentActivityBindingsWhileDeliveryLocked as ht, listOpenClawGatewayAgents as i, createLocalExecutionSlots as in, materializeCliLaunchCommand as ir, isHomebrewCommandPath as it, resolveAgentProfilePrimaryAgentControllerReport as j, probeClaudeCodeUsageLimits as jn, renderWorkingLanguagePrompt as jr, normalizeCustomProfileWorkspacePath as jt, createPrimaryBindingReadSession as k, projectCodexUsageObservation as kn, renderInformationProtectionPrompt as kr, resolveRegistryRuntimeAdapterContractByAgentControllerRef as kt, findOpenClawAgentsByWorkspace as l, resolveCompatibleConversationExecutionState as ln, isDispatchSpaceActionDeliveryOnly as lr, bindProject as lt, resolveOpenClawLocalBootstrapPaths as m, parseOpenRouterUsageResponse as mn, buildInformationProtectionPromptPlan as mr, migrateProjectBindingStore as mt, fetchOpenClawGatewayHealth as n, createLocalTaskInterruptSender as nn, resolveDispatchSpaceActionMcpServer as nr, resolveBuiltinAgentControllerDefinition as nt, normalizeOpenClawSpaceIdPrefix as o, resolveDispatchQueueLogMeta as on, listAgentControllerSupervisedProcessIds as or, isPnpmGlobalCommandPath as ot, readOpenClawLocalBootstrapState as p, createLocalAdapterEntries as pn, buildAgentControllerRef as pr, listProjectConnectionsWithStatus as pt, normalizeAgentIds as q, seedLegacyAgentContext as qn, resolveAdaptiveHeartbeatIntervalMs as qr, syncRuntimeEventToInflightTaskControlRegistry as qt, listOpenClawAgents as r, buildLocalServiceDiagnosticsPayload as rn, buildCliLaunchInvocation as rr, isBunGlobalCommandPath as rt, slugifyOpenClawNamePart as s, resolveDispatchContinuityObservation as sn, createProviderOriginalError as sr, ProjectBindingOperationError as st, prepareProviderRuntime as t, mergeOpenClawGatewayVisibility as tn, createUnsupportedProviderUsageLimits as tr, EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES as tt, matchesExpectedWorkspace as u, resolveLatestScopedConversationExecutionState as un, DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS as ur, hasProjectBindingForPath as ut, buildRuntimeRouteTargets as v, resolveInstalledOpenCodeLaunchCandidates as vn, createAgentExecutionStatusDisplayRows as vr, resolveProjectBindingForPath as vt, resolveCurrentEffectiveProfileWorkingFolderRuntime as w, resolveInstalledCodexLaunchCandidates as wn, isAgentExecutionReadyOrConnecting as wr, withAgentActivityDeliveryLock as wt, resolveLocalRuntimeControllerSupport as x, resolveInstalledGrokBuildLaunchCandidates as xn, getAgentControllerPermissionModeFieldLabel as xr, unbindProject as xt, readLocalEnabledControllers as y, GrokBuildAcpTransportError as yn, createAuthorityOpenMeldServiceRuntimeId as yr, runIfAgentActivityBindingGenerationIsCurrent as yt, reconcileNewRunnableBuiltinAgentsForSetup as z, runRuntimeTask as zn, supportsSpaceWorkHandoff as zr, validateCustomProfileWorkspacePath as zt };
 
-//# sourceMappingURL=prepare-provider-runtime-DhhvHw2L.js.map
+//# sourceMappingURL=prepare-provider-runtime-BYKiQArk.js.map