openmeld 0.3.258 → 0.3.261

package/dist/{process-channel-BYaPF16N.js → process-channel-BCIgC7jM.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as ExecutionHostError } from "./channel-48XSbUsz.js";
+import { t as ExecutionHostError } from "./channel-fUczwp7l.js";
 //#region src/local-service/execution-host/process-channel.ts
 function childExecutionHostChannel(child) {
 	return {
@@ -61,4 +61,4 @@ function parentExecutionHostChannel() {
 //#endregion
 export { parentExecutionHostChannel as n, childExecutionHostChannel as t };
 
-//# sourceMappingURL=process-channel-BYaPF16N.js.map
+//# sourceMappingURL=process-channel-BCIgC7jM.js.map

package/dist/{process-channel-BYaPF16N.js.map → process-channel-BCIgC7jM.js.map}

@@ -1 +1 @@
-{"version":3,"file":"process-channel-BYaPF16N.js","names":[],"sources":["../src/local-service/execution-host/process-channel.ts"],"sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport type { ExecutionHostChannel } from \"./channel\";\nimport { ExecutionHostError } from \"./channel\";\n\n// Use inherited Node-compatible IPC with JSON serialization. Provider stdout is\n// not a protocol channel; ordinary logs cannot become control messages.\nexport function childExecutionHostChannel(\n  child: ChildProcess\n): ExecutionHostChannel {\n  return {\n    connected: () => child.connected,\n    send: (message, completed) => {\n      child.send(message, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      child.on(\"message\", listener);\n      return () => {\n        child.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      let observed = false;\n      const finish = (error?: Error) => {\n        if (!observed) {\n          observed = true;\n          listener(error);\n        }\n      };\n      const exited = (code: number | null, signal: NodeJS.Signals | null) => {\n        finish(\n          new Error(`Host process exited (${signal ?? code ?? \"unknown\"})`)\n        );\n      };\n      child.on(\"disconnect\", finish);\n      child.on(\"exit\", exited);\n      // Spawn/send failures must not become unhandled EventEmitter errors.\n      child.on(\"error\", finish);\n      return () => {\n        child.off(\"disconnect\", finish);\n        child.off(\"exit\", exited);\n        child.off(\"error\", finish);\n      };\n    },\n  };\n}\n\nexport function parentExecutionHostChannel(): ExecutionHostChannel {\n  const send = process.send?.bind(process);\n  if (!(send && process.connected)) {\n    throw new ExecutionHostError(\n      \"host.inherited_channel_required\",\n      \"The execution host requires its supervisor's inherited IPC channel.\"\n    );\n  }\n  return {\n    connected: () => process.connected === true,\n    send: (message, completed) => {\n      send(message, undefined, undefined, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      process.on(\"message\", listener);\n      return () => {\n        process.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      process.on(\"disconnect\", listener);\n      return () => {\n        process.off(\"disconnect\", listener);\n      };\n    },\n  };\n}\n"],"mappings":";;;;AAMA,SAAgB,0BACd,OACsB;CACtB,OAAO;EACL,iBAAiB,MAAM;EACvB,OAAO,SAAS,cAAc;GAC5B,MAAM,KAAK,UAAU,UAAU,UAAU,SAAS,IAAI,CAAC;EACzD;EACA,YAAY,aAAa;GACvB,MAAM,GAAG,WAAW,QAAQ;GAC5B,aAAa;IACX,MAAM,IAAI,WAAW,QAAQ;GAC/B;EACF;EACA,eAAe,aAAa;GAC1B,IAAI,WAAW;GACf,MAAM,UAAU,UAAkB;IAChC,IAAI,CAAC,UAAU;KACb,WAAW;KACX,SAAS,KAAK;IAChB;GACF;GACA,MAAM,UAAU,MAAqB,WAAkC;IACrE,uBACE,IAAI,MAAM,wBAAwB,UAAU,QAAQ,UAAU,EAAE,CAClE;GACF;GACA,MAAM,GAAG,cAAc,MAAM;GAC7B,MAAM,GAAG,QAAQ,MAAM;GAEvB,MAAM,GAAG,SAAS,MAAM;GACxB,aAAa;IACX,MAAM,IAAI,cAAc,MAAM;IAC9B,MAAM,IAAI,QAAQ,MAAM;IACxB,MAAM,IAAI,SAAS,MAAM;GAC3B;EACF;CACF;AACF;AAEA,SAAgB,6BAAmD;CACjE,MAAM,OAAO,QAAQ,MAAM,KAAK,OAAO;CACvC,IAAI,EAAE,QAAQ,QAAQ,YACpB,MAAM,IAAI,mBACR,mCACA,qEACF;CAEF,OAAO;EACL,iBAAiB,QAAQ,cAAc;EACvC,OAAO,SAAS,cAAc;GAC5B,KAAK,SAAS,KAAA,GAAW,KAAA,IAAY,UAAU,UAAU,SAAS,IAAI,CAAC;EACzE;EACA,YAAY,aAAa;GACvB,QAAQ,GAAG,WAAW,QAAQ;GAC9B,aAAa;IACX,QAAQ,IAAI,WAAW,QAAQ;GACjC;EACF;EACA,eAAe,aAAa;GAC1B,QAAQ,GAAG,cAAc,QAAQ;GACjC,aAAa;IACX,QAAQ,IAAI,cAAc,QAAQ;GACpC;EACF;CACF;AACF"}
+{"version":3,"file":"process-channel-BCIgC7jM.js","names":[],"sources":["../src/local-service/execution-host/process-channel.ts"],"sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport type { ExecutionHostChannel } from \"./channel\";\nimport { ExecutionHostError } from \"./channel\";\n\n// Use inherited Node-compatible IPC with JSON serialization. Provider stdout is\n// not a protocol channel; ordinary logs cannot become control messages.\nexport function childExecutionHostChannel(\n  child: ChildProcess\n): ExecutionHostChannel {\n  return {\n    connected: () => child.connected,\n    send: (message, completed) => {\n      child.send(message, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      child.on(\"message\", listener);\n      return () => {\n        child.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      let observed = false;\n      const finish = (error?: Error) => {\n        if (!observed) {\n          observed = true;\n          listener(error);\n        }\n      };\n      const exited = (code: number | null, signal: NodeJS.Signals | null) => {\n        finish(\n          new Error(`Host process exited (${signal ?? code ?? \"unknown\"})`)\n        );\n      };\n      child.on(\"disconnect\", finish);\n      child.on(\"exit\", exited);\n      // Spawn/send failures must not become unhandled EventEmitter errors.\n      child.on(\"error\", finish);\n      return () => {\n        child.off(\"disconnect\", finish);\n        child.off(\"exit\", exited);\n        child.off(\"error\", finish);\n      };\n    },\n  };\n}\n\nexport function parentExecutionHostChannel(): ExecutionHostChannel {\n  const send = process.send?.bind(process);\n  if (!(send && process.connected)) {\n    throw new ExecutionHostError(\n      \"host.inherited_channel_required\",\n      \"The execution host requires its supervisor's inherited IPC channel.\"\n    );\n  }\n  return {\n    connected: () => process.connected === true,\n    send: (message, completed) => {\n      send(message, undefined, undefined, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      process.on(\"message\", listener);\n      return () => {\n        process.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      process.on(\"disconnect\", listener);\n      return () => {\n        process.off(\"disconnect\", listener);\n      };\n    },\n  };\n}\n"],"mappings":";;;;AAMA,SAAgB,0BACd,OACsB;CACtB,OAAO;EACL,iBAAiB,MAAM;EACvB,OAAO,SAAS,cAAc;GAC5B,MAAM,KAAK,UAAU,UAAU,UAAU,SAAS,IAAI,CAAC;EACzD;EACA,YAAY,aAAa;GACvB,MAAM,GAAG,WAAW,QAAQ;GAC5B,aAAa;IACX,MAAM,IAAI,WAAW,QAAQ;GAC/B;EACF;EACA,eAAe,aAAa;GAC1B,IAAI,WAAW;GACf,MAAM,UAAU,UAAkB;IAChC,IAAI,CAAC,UAAU;KACb,WAAW;KACX,SAAS,KAAK;IAChB;GACF;GACA,MAAM,UAAU,MAAqB,WAAkC;IACrE,uBACE,IAAI,MAAM,wBAAwB,UAAU,QAAQ,UAAU,EAAE,CAClE;GACF;GACA,MAAM,GAAG,cAAc,MAAM;GAC7B,MAAM,GAAG,QAAQ,MAAM;GAEvB,MAAM,GAAG,SAAS,MAAM;GACxB,aAAa;IACX,MAAM,IAAI,cAAc,MAAM;IAC9B,MAAM,IAAI,QAAQ,MAAM;IACxB,MAAM,IAAI,SAAS,MAAM;GAC3B;EACF;CACF;AACF;AAEA,SAAgB,6BAAmD;CACjE,MAAM,OAAO,QAAQ,MAAM,KAAK,OAAO;CACvC,IAAI,EAAE,QAAQ,QAAQ,YACpB,MAAM,IAAI,mBACR,mCACA,qEACF;CAEF,OAAO;EACL,iBAAiB,QAAQ,cAAc;EACvC,OAAO,SAAS,cAAc;GAC5B,KAAK,SAAS,KAAA,GAAW,KAAA,IAAY,UAAU,UAAU,SAAS,IAAI,CAAC;EACzE;EACA,YAAY,aAAa;GACvB,QAAQ,GAAG,WAAW,QAAQ;GAC9B,aAAa;IACX,QAAQ,IAAI,WAAW,QAAQ;GACjC;EACF;EACA,eAAe,aAAa;GAC1B,QAAQ,GAAG,cAAc,QAAQ;GACjC,aAAa;IACX,QAAQ,IAAI,cAAc,QAAQ;GACpC;EACF;CACF;AACF"}

package/dist/{process-identity-DtRa8niy.js → process-identity-e30Hp6t3.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { Pa as windowsNativeProcessRequestSchema, pF as WINDOWS_PROCESS_HELPER_FILENAME } from "./dist-Dx5paVZY.js";
+import { Pa as windowsNativeProcessRequestSchema, xF as WINDOWS_PROCESS_HELPER_FILENAME } from "./dist-CMBBVJVE.js";
 import { n as normalizeCommandEnvironment } from "./process-environment-BWSFeUu6.js";
 import { win32 } from "node:path";
 import { execFile, execFileSync, spawn } from "node:child_process";
@@ -169,4 +169,4 @@ function isNodeError(error, code) {
 //#endregion
 export { activateWindowsManagedCommand as a, readWindowsProcessStartFileTime as c, WINDOWS_NATIVE_PROCESS_REQUEST_ENV as d, resolveWindowsNativeProcessHelper as f, readProcessStartIdentity as i, resolveWindowsPowerShellPath as l, isPreciseProcessStartIdentity as n, powerShellEncodedArguments as o, isProcessIdentityAlive as r, pruneWindowsBinaryBundle as s, CURRENT_PROCESS_START_IDENTITY as t, startWindowsIdleSleepBlocker as u };
 
-//# sourceMappingURL=process-identity-DtRa8niy.js.map
+//# sourceMappingURL=process-identity-e30Hp6t3.js.map

package/dist/{process-identity-DtRa8niy.js.map → process-identity-e30Hp6t3.js.map}

@@ -1 +1 @@
-{"version":3,"file":"process-identity-DtRa8niy.js","names":[],"sources":["../../../runtime/adapters/core/dist/windows-native-process.js","../../../runtime/adapters/core/dist/windows-system.js","../src/system/process-identity.ts"],"sourcesContent":["import { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { WINDOWS_PROCESS_HELPER_FILENAME } from \"@openmeld/schemas\";\nexport const WINDOWS_NATIVE_PROCESS_REQUEST_ENV = \"OPENMELD_NATIVE_JOB_REQUEST\";\nexport function resolveWindowsNativeProcessHelper() {\n    const binary = typeof __OPENMELD_DISTRIBUTION__ !== \"undefined\" &&\n        __OPENMELD_DISTRIBUTION__ === \"binary\";\n    return binary\n        ? join(dirname(process.execPath), WINDOWS_PROCESS_HELPER_FILENAME)\n        : fileURLToPath(\n        // Both src/ (workspace tests) and dist/ (installed code) share this\n        // package-owned build output. Never search another installation.\n        new URL(`../dist/windows/${WINDOWS_PROCESS_HELPER_FILENAME}`, import.meta.url));\n}\n","import { execFile, execFileSync, spawn } from \"node:child_process\";\nimport { win32 } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { windowsNativeProcessRequestSchema } from \"@openmeld/schemas\";\nimport { normalizeCommandEnvironment } from \"./process-environment.js\";\nimport { resolveWindowsNativeProcessHelper, WINDOWS_NATIVE_PROCESS_REQUEST_ENV, } from \"./windows-native-process.js\";\nexport function resolveWindowsPowerShellPath(env = process.env) {\n    const source = normalizeCommandEnvironment(env, \"win32\");\n    const root = source.SystemRoot ?? source.WINDIR;\n    if (!(root && win32.isAbsolute(root))) {\n        throw new Error(\"Windows system directory is unavailable.\");\n    }\n    return win32.join(root, \"System32\", \"WindowsPowerShell\", \"v1.0\", \"powershell.exe\");\n}\nexport function powerShellEncodedArguments(script) {\n    return [\n        \"-NoLogo\",\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-EncodedCommand\",\n        Buffer.from(script, \"utf16le\").toString(\"base64\"),\n    ];\n}\nconst FILE_TIME_PATTERN = /^\\d{10,20}$/u;\n// Keep native identity reads bounded; an unavailable identity fails admission.\nconst PROCESS_IDENTITY_TIMEOUT_MS = 15_000;\nlet currentProcessFileTime;\nexport async function activateWindowsManagedCommand(binDirectory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"activate-managed-command\",\n        binDirectory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"activated\" && result !== \"already_active\") {\n        throw new Error(\"Windows returned an invalid command activation receipt.\");\n    }\n    return result;\n}\n/** Kernel sharing rules keep a live CLI and its helper together during pruning. */\nexport async function pruneWindowsBinaryBundle(directory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"prune-binary-bundle\",\n        directory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"removed\" &&\n        result !== \"absent\" &&\n        result !== \"in_use\" &&\n        result !== \"unrecognized\") {\n        throw new Error(\"Windows returned an invalid managed-version cleanup receipt.\");\n    }\n    return result;\n}\n/** An opened process handle binds the observation to the actual instance, not a reused PID. */\nexport function readWindowsProcessStartFileTime(pid) {\n    if (!(Number.isSafeInteger(pid) && pid > 0)) {\n        return null;\n    }\n    if (pid === process.pid && currentProcessFileTime) {\n        return currentProcessFileTime;\n    }\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"identity\",\n        pid,\n    });\n    try {\n        const output = execFileSync(resolveWindowsNativeProcessHelper(), [], {\n            env: {\n                ...process.env,\n                [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n            },\n            encoding: \"utf8\",\n            windowsHide: true,\n            timeout: PROCESS_IDENTITY_TIMEOUT_MS,\n            maxBuffer: 1024,\n            stdio: [\"ignore\", \"pipe\", \"ignore\"],\n        }).trim();\n        if (!FILE_TIME_PATTERN.test(output)) {\n            return null;\n        }\n        if (pid === process.pid) {\n            currentProcessFileTime = output;\n        }\n        return output;\n    }\n    catch {\n        return null;\n    }\n}\nexport function startWindowsIdleSleepBlocker() {\n    return spawn(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(windowsNativeProcessRequestSchema.parse({\n                operation: \"prevent-idle-sleep\",\n            }))).toString(\"base64\"),\n        },\n        windowsHide: true,\n        stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n}\n","import { execFileSync } from \"node:child_process\";\nimport { readWindowsProcessStartFileTime } from \"@openmeld/adapter-core/windows-system\";\n\nconst WINDOWS_PROCESS_IDENTITY_PATTERN = /^win32:\\d{10,20}$/u;\n\nexport function isPreciseProcessStartIdentity(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    ((value.startsWith(\"ps:\") && value.length > 3) ||\n      WINDOWS_PROCESS_IDENTITY_PATTERN.test(value))\n  );\n}\n\nexport const CURRENT_PROCESS_START_IDENTITY =\n  readProcessStartIdentity(process.pid) ??\n  `fallback:${process.pid}:${Math.floor(Date.now() - process.uptime() * 1000)}`;\n\nexport function isProcessIdentityAlive(\n  input: { ownerPid: number; ownerProcessStartedAt: string },\n  platform: NodeJS.Platform = process.platform\n): boolean {\n  if (!isProcessAlive(input.ownerPid)) {\n    return false;\n  }\n  const observedIdentity = readProcessStartIdentity(input.ownerPid, platform);\n  if (\n    isPreciseProcessStartIdentity(observedIdentity) &&\n    isPreciseProcessStartIdentity(input.ownerProcessStartedAt) &&\n    observedIdentity.split(\":\", 1)[0] ===\n      input.ownerProcessStartedAt.split(\":\", 1)[0]\n  ) {\n    return observedIdentity === input.ownerProcessStartedAt;\n  }\n  // Fail closed when a live process cannot be identified precisely. A caller\n  // may recover only after it can prove that the transition owner has exited.\n  return true;\n}\n\nexport function readProcessStartIdentity(\n  pid: number,\n  platform: NodeJS.Platform = process.platform\n): string | null {\n  if (!(Number.isSafeInteger(pid) && pid > 0)) {\n    return null;\n  }\n  if (platform === \"win32\") {\n    const created = readWindowsProcessStartFileTime(pid);\n    return created === null ? null : `win32:${created}`;\n  }\n  try {\n    const output = execFileSync(\"ps\", [\"-o\", \"lstart=\", \"-p\", String(pid)], {\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      timeout: 1000,\n      windowsHide: true,\n    }).trim();\n    return output.length > 0 ? `ps:${output}` : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !isNodeError(error, \"ESRCH\");\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error instanceof Error && \"code\" in error && String(error.code) === code\n  );\n}\n"],"mappings":";;;;;;;;;AAGA,MAAa,qCAAqC;AAClD,SAAgB,oCAAoC;CAGhD,OAEM,cAGF,IAAI,IAAI,mBAAmB,mCAAmC,OAAO,KAAK,GAAG,CAAC;AACtF;;;ACPA,SAAgB,6BAA6B,MAAM,QAAQ,KAAK;CAC5D,MAAM,SAAS,4BAA4B,KAAK,OAAO;CACvD,MAAM,OAAO,OAAO,cAAc,OAAO;CACzC,IAAI,EAAE,QAAQ,MAAM,WAAW,IAAI,IAC/B,MAAM,IAAI,MAAM,0CAA0C;CAE9D,OAAO,MAAM,KAAK,MAAM,YAAY,qBAAqB,QAAQ,gBAAgB;AACrF;AACA,SAAgB,2BAA2B,QAAQ;CAC/C,OAAO;EACH;EACA;EACA;EACA;EACA,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,QAAQ;CACpD;AACJ;AACA,MAAM,oBAAoB;AAE1B,MAAM,8BAA8B;AACpC,IAAI;AACJ,eAAsB,8BAA8B,cAAc;CAC9D,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,eAAe,WAAW,kBACrC,MAAM,IAAI,MAAM,yDAAyD;CAE7E,OAAO;AACX;;AAEA,eAAsB,yBAAyB,WAAW;CACtD,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,aACX,WAAW,YACX,WAAW,YACX,WAAW,gBACX,MAAM,IAAI,MAAM,8DAA8D;CAElF,OAAO;AACX;;AAEA,SAAgB,gCAAgC,KAAK;CACjD,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACrC,OAAO;CAEX,IAAI,QAAQ,QAAQ,OAAO,wBACvB,OAAO;CAEX,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,IAAI;EACA,MAAM,SAAS,aAAa,kCAAkC,GAAG,CAAC,GAAG;GACjE,KAAK;IACD,GAAG,QAAQ;KACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;GACxG;GACA,UAAU;GACV,aAAa;GACb,SAAS;GACT,WAAW;GACX,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACtC,CAAC,CAAC,CAAC,KAAK;EACR,IAAI,CAAC,kBAAkB,KAAK,MAAM,GAC9B,OAAO;EAEX,IAAI,QAAQ,QAAQ,KAChB,yBAAyB;EAE7B,OAAO;CACX,QACM;EACF,OAAO;CACX;AACJ;AACA,SAAgB,+BAA+B;CAC3C,OAAO,MAAM,kCAAkC,GAAG,CAAC,GAAG;EAClD,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,kCAAkC,MAAM,EACrG,WAAW,qBACf,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ;EAC1B;EACA,aAAa;EACb,OAAO;GAAC;GAAQ;GAAQ;EAAM;CAClC,CAAC;AACL;;;ACrHA,MAAM,mCAAmC;AAEzC,SAAgB,8BAA8B,OAAiC;CAC7E,OACE,OAAO,UAAU,aACf,MAAM,WAAW,KAAK,KAAK,MAAM,SAAS,KAC1C,iCAAiC,KAAK,KAAK;AAEjD;AAEA,MAAa,iCACX,yBAAyB,QAAQ,GAAG,KACpC,YAAY,QAAQ,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,IAAI,QAAQ,OAAO,IAAI,GAAI;AAE5E,SAAgB,uBACd,OACA,WAA4B,QAAQ,UAC3B;CACT,IAAI,CAAC,eAAe,MAAM,QAAQ,GAChC,OAAO;CAET,MAAM,mBAAmB,yBAAyB,MAAM,UAAU,QAAQ;CAC1E,IACE,8BAA8B,gBAAgB,KAC9C,8BAA8B,MAAM,qBAAqB,KACzD,iBAAiB,MAAM,KAAK,CAAC,CAAC,CAAC,OAC7B,MAAM,sBAAsB,MAAM,KAAK,CAAC,CAAC,CAAC,IAE5C,OAAO,qBAAqB,MAAM;CAIpC,OAAO;AACT;AAEA,SAAgB,yBACd,KACA,WAA4B,QAAQ,UACrB;CACf,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACvC,OAAO;CAET,IAAI,aAAa,SAAS;EACxB,MAAM,UAAU,gCAAgC,GAAG;EACnD,OAAO,YAAY,OAAO,OAAO,SAAS;CAC5C;CACA,IAAI;EACF,MAAM,SAAS,aAAa,MAAM;GAAC;GAAM;GAAW;GAAM,OAAO,GAAG;EAAC,GAAG;GACtE,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;GAClC,SAAS;GACT,aAAa;EACf,CAAC,CAAC,CAAC,KAAK;EACR,OAAO,OAAO,SAAS,IAAI,MAAM,WAAW;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,KAAsB;CAC5C,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,CAAC,YAAY,OAAO,OAAO;CACpC;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;CAC1D,OACE,iBAAiB,SAAS,UAAU,SAAS,OAAO,MAAM,IAAI,MAAM;AAExE"}
+{"version":3,"file":"process-identity-e30Hp6t3.js","names":[],"sources":["../../../runtime/adapters/core/dist/windows-native-process.js","../../../runtime/adapters/core/dist/windows-system.js","../src/system/process-identity.ts"],"sourcesContent":["import { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { WINDOWS_PROCESS_HELPER_FILENAME } from \"@openmeld/schemas\";\nexport const WINDOWS_NATIVE_PROCESS_REQUEST_ENV = \"OPENMELD_NATIVE_JOB_REQUEST\";\nexport function resolveWindowsNativeProcessHelper() {\n    const binary = typeof __OPENMELD_DISTRIBUTION__ !== \"undefined\" &&\n        __OPENMELD_DISTRIBUTION__ === \"binary\";\n    return binary\n        ? join(dirname(process.execPath), WINDOWS_PROCESS_HELPER_FILENAME)\n        : fileURLToPath(\n        // Both src/ (workspace tests) and dist/ (installed code) share this\n        // package-owned build output. Never search another installation.\n        new URL(`../dist/windows/${WINDOWS_PROCESS_HELPER_FILENAME}`, import.meta.url));\n}\n","import { execFile, execFileSync, spawn } from \"node:child_process\";\nimport { win32 } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { windowsNativeProcessRequestSchema } from \"@openmeld/schemas\";\nimport { normalizeCommandEnvironment } from \"./process-environment.js\";\nimport { resolveWindowsNativeProcessHelper, WINDOWS_NATIVE_PROCESS_REQUEST_ENV, } from \"./windows-native-process.js\";\nexport function resolveWindowsPowerShellPath(env = process.env) {\n    const source = normalizeCommandEnvironment(env, \"win32\");\n    const root = source.SystemRoot ?? source.WINDIR;\n    if (!(root && win32.isAbsolute(root))) {\n        throw new Error(\"Windows system directory is unavailable.\");\n    }\n    return win32.join(root, \"System32\", \"WindowsPowerShell\", \"v1.0\", \"powershell.exe\");\n}\nexport function powerShellEncodedArguments(script) {\n    return [\n        \"-NoLogo\",\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-EncodedCommand\",\n        Buffer.from(script, \"utf16le\").toString(\"base64\"),\n    ];\n}\nconst FILE_TIME_PATTERN = /^\\d{10,20}$/u;\n// Keep native identity reads bounded; an unavailable identity fails admission.\nconst PROCESS_IDENTITY_TIMEOUT_MS = 15_000;\nlet currentProcessFileTime;\nexport async function activateWindowsManagedCommand(binDirectory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"activate-managed-command\",\n        binDirectory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"activated\" && result !== \"already_active\") {\n        throw new Error(\"Windows returned an invalid command activation receipt.\");\n    }\n    return result;\n}\n/** Kernel sharing rules keep a live CLI and its helper together during pruning. */\nexport async function pruneWindowsBinaryBundle(directory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"prune-binary-bundle\",\n        directory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"removed\" &&\n        result !== \"absent\" &&\n        result !== \"in_use\" &&\n        result !== \"unrecognized\") {\n        throw new Error(\"Windows returned an invalid managed-version cleanup receipt.\");\n    }\n    return result;\n}\n/** An opened process handle binds the observation to the actual instance, not a reused PID. */\nexport function readWindowsProcessStartFileTime(pid) {\n    if (!(Number.isSafeInteger(pid) && pid > 0)) {\n        return null;\n    }\n    if (pid === process.pid && currentProcessFileTime) {\n        return currentProcessFileTime;\n    }\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"identity\",\n        pid,\n    });\n    try {\n        const output = execFileSync(resolveWindowsNativeProcessHelper(), [], {\n            env: {\n                ...process.env,\n                [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n            },\n            encoding: \"utf8\",\n            windowsHide: true,\n            timeout: PROCESS_IDENTITY_TIMEOUT_MS,\n            maxBuffer: 1024,\n            stdio: [\"ignore\", \"pipe\", \"ignore\"],\n        }).trim();\n        if (!FILE_TIME_PATTERN.test(output)) {\n            return null;\n        }\n        if (pid === process.pid) {\n            currentProcessFileTime = output;\n        }\n        return output;\n    }\n    catch {\n        return null;\n    }\n}\nexport function startWindowsIdleSleepBlocker() {\n    return spawn(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(windowsNativeProcessRequestSchema.parse({\n                operation: \"prevent-idle-sleep\",\n            }))).toString(\"base64\"),\n        },\n        windowsHide: true,\n        stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n}\n","import { execFileSync } from \"node:child_process\";\nimport { readWindowsProcessStartFileTime } from \"@openmeld/adapter-core/windows-system\";\n\nconst WINDOWS_PROCESS_IDENTITY_PATTERN = /^win32:\\d{10,20}$/u;\n\nexport function isPreciseProcessStartIdentity(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    ((value.startsWith(\"ps:\") && value.length > 3) ||\n      WINDOWS_PROCESS_IDENTITY_PATTERN.test(value))\n  );\n}\n\nexport const CURRENT_PROCESS_START_IDENTITY =\n  readProcessStartIdentity(process.pid) ??\n  `fallback:${process.pid}:${Math.floor(Date.now() - process.uptime() * 1000)}`;\n\nexport function isProcessIdentityAlive(\n  input: { ownerPid: number; ownerProcessStartedAt: string },\n  platform: NodeJS.Platform = process.platform\n): boolean {\n  if (!isProcessAlive(input.ownerPid)) {\n    return false;\n  }\n  const observedIdentity = readProcessStartIdentity(input.ownerPid, platform);\n  if (\n    isPreciseProcessStartIdentity(observedIdentity) &&\n    isPreciseProcessStartIdentity(input.ownerProcessStartedAt) &&\n    observedIdentity.split(\":\", 1)[0] ===\n      input.ownerProcessStartedAt.split(\":\", 1)[0]\n  ) {\n    return observedIdentity === input.ownerProcessStartedAt;\n  }\n  // Fail closed when a live process cannot be identified precisely. A caller\n  // may recover only after it can prove that the transition owner has exited.\n  return true;\n}\n\nexport function readProcessStartIdentity(\n  pid: number,\n  platform: NodeJS.Platform = process.platform\n): string | null {\n  if (!(Number.isSafeInteger(pid) && pid > 0)) {\n    return null;\n  }\n  if (platform === \"win32\") {\n    const created = readWindowsProcessStartFileTime(pid);\n    return created === null ? null : `win32:${created}`;\n  }\n  try {\n    const output = execFileSync(\"ps\", [\"-o\", \"lstart=\", \"-p\", String(pid)], {\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      timeout: 1000,\n      windowsHide: true,\n    }).trim();\n    return output.length > 0 ? `ps:${output}` : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !isNodeError(error, \"ESRCH\");\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error instanceof Error && \"code\" in error && String(error.code) === code\n  );\n}\n"],"mappings":";;;;;;;;;AAGA,MAAa,qCAAqC;AAClD,SAAgB,oCAAoC;CAGhD,OAEM,cAGF,IAAI,IAAI,mBAAmB,mCAAmC,OAAO,KAAK,GAAG,CAAC;AACtF;;;ACPA,SAAgB,6BAA6B,MAAM,QAAQ,KAAK;CAC5D,MAAM,SAAS,4BAA4B,KAAK,OAAO;CACvD,MAAM,OAAO,OAAO,cAAc,OAAO;CACzC,IAAI,EAAE,QAAQ,MAAM,WAAW,IAAI,IAC/B,MAAM,IAAI,MAAM,0CAA0C;CAE9D,OAAO,MAAM,KAAK,MAAM,YAAY,qBAAqB,QAAQ,gBAAgB;AACrF;AACA,SAAgB,2BAA2B,QAAQ;CAC/C,OAAO;EACH;EACA;EACA;EACA;EACA,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,QAAQ;CACpD;AACJ;AACA,MAAM,oBAAoB;AAE1B,MAAM,8BAA8B;AACpC,IAAI;AACJ,eAAsB,8BAA8B,cAAc;CAC9D,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,eAAe,WAAW,kBACrC,MAAM,IAAI,MAAM,yDAAyD;CAE7E,OAAO;AACX;;AAEA,eAAsB,yBAAyB,WAAW;CACtD,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,aACX,WAAW,YACX,WAAW,YACX,WAAW,gBACX,MAAM,IAAI,MAAM,8DAA8D;CAElF,OAAO;AACX;;AAEA,SAAgB,gCAAgC,KAAK;CACjD,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACrC,OAAO;CAEX,IAAI,QAAQ,QAAQ,OAAO,wBACvB,OAAO;CAEX,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,IAAI;EACA,MAAM,SAAS,aAAa,kCAAkC,GAAG,CAAC,GAAG;GACjE,KAAK;IACD,GAAG,QAAQ;KACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;GACxG;GACA,UAAU;GACV,aAAa;GACb,SAAS;GACT,WAAW;GACX,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACtC,CAAC,CAAC,CAAC,KAAK;EACR,IAAI,CAAC,kBAAkB,KAAK,MAAM,GAC9B,OAAO;EAEX,IAAI,QAAQ,QAAQ,KAChB,yBAAyB;EAE7B,OAAO;CACX,QACM;EACF,OAAO;CACX;AACJ;AACA,SAAgB,+BAA+B;CAC3C,OAAO,MAAM,kCAAkC,GAAG,CAAC,GAAG;EAClD,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,kCAAkC,MAAM,EACrG,WAAW,qBACf,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ;EAC1B;EACA,aAAa;EACb,OAAO;GAAC;GAAQ;GAAQ;EAAM;CAClC,CAAC;AACL;;;ACrHA,MAAM,mCAAmC;AAEzC,SAAgB,8BAA8B,OAAiC;CAC7E,OACE,OAAO,UAAU,aACf,MAAM,WAAW,KAAK,KAAK,MAAM,SAAS,KAC1C,iCAAiC,KAAK,KAAK;AAEjD;AAEA,MAAa,iCACX,yBAAyB,QAAQ,GAAG,KACpC,YAAY,QAAQ,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,IAAI,QAAQ,OAAO,IAAI,GAAI;AAE5E,SAAgB,uBACd,OACA,WAA4B,QAAQ,UAC3B;CACT,IAAI,CAAC,eAAe,MAAM,QAAQ,GAChC,OAAO;CAET,MAAM,mBAAmB,yBAAyB,MAAM,UAAU,QAAQ;CAC1E,IACE,8BAA8B,gBAAgB,KAC9C,8BAA8B,MAAM,qBAAqB,KACzD,iBAAiB,MAAM,KAAK,CAAC,CAAC,CAAC,OAC7B,MAAM,sBAAsB,MAAM,KAAK,CAAC,CAAC,CAAC,IAE5C,OAAO,qBAAqB,MAAM;CAIpC,OAAO;AACT;AAEA,SAAgB,yBACd,KACA,WAA4B,QAAQ,UACrB;CACf,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACvC,OAAO;CAET,IAAI,aAAa,SAAS;EACxB,MAAM,UAAU,gCAAgC,GAAG;EACnD,OAAO,YAAY,OAAO,OAAO,SAAS;CAC5C;CACA,IAAI;EACF,MAAM,SAAS,aAAa,MAAM;GAAC;GAAM;GAAW;GAAM,OAAO,GAAG;EAAC,GAAG;GACtE,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;GAClC,SAAS;GACT,aAAa;EACf,CAAC,CAAC,CAAC,KAAK;EACR,OAAO,OAAO,SAAS,IAAI,MAAM,WAAW;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,KAAsB;CAC5C,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,CAAC,YAAY,OAAO,OAAO;CACpC;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;CAC1D,OACE,iBAAiB,SAAS,UAAU,SAAS,OAAO,MAAM,IAAI,MAAM;AAExE"}

package/dist/{runtime-CUN9BLfZ.js → runtime-DoIazDNu.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 
-import { $n as buildAgentContextLookupKey, $t as normalizeDispatchPostMessageAction, Ar as renderTaskKnowledgeIndex, Bn as buildRuntimeWorkspaceFingerprint, Cn as resolveCodexTimeoutMs, Dn as resolveCodexAppServerCompletedTurn, E as resolveProfileWorkspaceRuntime, Gn as removeConversationExecutionState, H as setAgentRegistrationEnabled, Hn as appendLedgerHistoryEntry, Ht as createRouteCatalogFromMutableState, Jn as settleInflightTask, Jt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Kn as resolveConversationExecutionStateByLookupKey, Kt as normalizeDispatchThreadAction, L as manageAgentRegistrationInstallation, On as verifyCodexAppServerThread, Q as canManageRegistryAgentSkillTargets, Qn as assertLegacyAgentContextAssociation, Rn as DaemonServiceRunError, Tn as forkCodexAppServerThread, Un as commitResolvedAgentContext, Ut as replaceMutableRouteCatalogState, Vn as buildTaskResultEnvelope, Vt as createMutableRouteCatalogState, Wn as loadLedgerState, Xn as withLedgerStateTransaction, Yn as upsertConversationExecutionState, Yt as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zt as createSerialAgentInteractionCallback, _ as loadDaemonRouteCatalog, a as buildOpenClawSpaceSessionKey, an as createInflightTaskControlRegistry, b as resolveLocalController, cn as resolveCompatibleAgentContextMatch, cr as DISPATCH_SPACE_ACTION_DELIVERY_ONLY_ENV, dr as TASK_KNOWLEDGE_GUIDANCE, en as createPendingAgentInteractionRegistry, et as resolveSkillsAgentRegistry, fn as createLocalAdapterContainer, ft as listProjectBindings, g as writeDaemonRouteCatalogCache, gn as forkOpenCodeServerSession, h as readDaemonRouteCatalogCache, in as createLocalExecutionSlots, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, ln as resolveCompatibleConversationExecutionState, nn as createLocalTaskInterruptSender, nt as resolveBuiltinAgentControllerDefinition, o as normalizeOpenClawSpaceIdPrefix, on as resolveDispatchQueueLogMeta, pn as createLocalAdapterEntries, pt as listProjectConnectionsWithStatus, qn as seedLegacyAgentContext, qt as syncRuntimeEventToInflightTaskControlRegistry, s as slugifyOpenClawNamePart, sn as resolveDispatchContinuityObservation, t as prepareProviderRuntime, tn as mergeOpenClawGatewayVisibility, un as resolveLatestScopedConversationExecutionState, ur as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, v as buildRuntimeRouteTargets, vn as resolveInstalledOpenCodeLaunchCandidates, w as resolveCurrentEffectiveProfileWorkingFolderRuntime, wn as resolveInstalledCodexLaunchCandidates, x as resolveLocalRuntimeControllerSupport, y as readLocalEnabledControllers, zn as runRuntimeTask, zr as supportsSpaceWorkHandoff } from "./prepare-provider-runtime-N0uP2aUG.js";
-import { a as resolveBaseUrl, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig } from "./base-url-BMrQwJW4.js";
+import { $n as withLedgerStateTransaction, $t as normalizeDispatchPostMessageAction, Cn as resolveCodexTimeoutMs, Dn as resolveCodexAppServerCompletedTurn, E as resolveProfileWorkspaceRuntime, Gn as appendLedgerHistoryEntry, H as setAgentRegistrationEnabled, Hn as runRuntimeTask, Hr as supportsSpaceWorkHandoff, Ht as createRouteCatalogFromMutableState, Jn as removeConversationExecutionState, Jt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, Kn as commitResolvedAgentContext, Kt as normalizeDispatchThreadAction, L as manageAgentRegistrationInstallation, Mn as readClaudeNativeVersion, Nn as resolveClaudeNativeUpdateCommand, Nr as renderTaskKnowledgeIndex, On as verifyCodexAppServerThread, Pn as updateClaudeNativeInstallation, Q as canManageRegistryAgentSkillTargets, Qn as upsertConversationExecutionState, Tn as forkCodexAppServerThread, Un as buildRuntimeWorkspaceFingerprint, Ut as replaceMutableRouteCatalogState, V as resolveAgentTargetState, Vn as DaemonServiceRunError, Vt as createMutableRouteCatalogState, Wn as buildTaskResultEnvelope, Xn as seedLegacyAgentContext, Yn as resolveConversationExecutionStateByLookupKey, Yt as SPACE_ACTION_TARGET_GUIDANCE_LINES, Zn as settleInflightTask, Zt as createSerialAgentInteractionCallback, _ as loadDaemonRouteCatalog, a as buildOpenClawSpaceSessionKey, an as createInflightTaskControlRegistry, b as resolveLocalController, cn as resolveCompatibleAgentContextMatch, dr as DISPATCH_SPACE_ACTION_DELIVERY_ONLY_ENV, en as createPendingAgentInteractionRegistry, et as resolveSkillsAgentRegistry, fn as createLocalAdapterContainer, ft as listProjectBindings, g as writeDaemonRouteCatalogCache, gn as forkOpenCodeServerSession, h as readDaemonRouteCatalogCache, in as createLocalExecutionSlots, kt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, ln as resolveCompatibleConversationExecutionState, mr as TASK_KNOWLEDGE_GUIDANCE, nn as createLocalTaskInterruptSender, nr as buildAgentContextLookupKey, nt as resolveBuiltinAgentControllerDefinition, o as normalizeOpenClawSpaceIdPrefix, on as resolveDispatchQueueLogMeta, pn as createLocalAdapterEntries, pr as DEFAULT_TASK_LIFECYCLE_HEARTBEAT_INTERVAL_MS, pt as listProjectConnectionsWithStatus, qn as loadLedgerState, qt as syncRuntimeEventToInflightTaskControlRegistry, s as slugifyOpenClawNamePart, sn as resolveDispatchContinuityObservation, t as prepareProviderRuntime, tn as mergeOpenClawGatewayVisibility, tr as assertLegacyAgentContextAssociation, un as resolveLatestScopedConversationExecutionState, v as buildRuntimeRouteTargets, vn as resolveInstalledOpenCodeLaunchCandidates, w as resolveCurrentEffectiveProfileWorkingFolderRuntime, wn as resolveInstalledCodexLaunchCandidates, x as resolveLocalRuntimeControllerSupport, y as readLocalEnabledControllers } from "./prepare-provider-runtime-CkW7c9bF.js";
+import { a as resolveBaseUrl, f as getConfiguredDaemonDispatchLimits, g as getConfiguredSkillsConfig } from "./base-url-B9NwMjEF.js";
 import { F as resolveOpenMeldRootDir } from "./paths-De9xdA2h.js";
-import { AR as normalizeOptionalWorkingDirectory, BO as runtimeCoordinatorExecutionTokenEnvelopeSchema, CI as normalizeKnownBuiltinAgentControllerId, Cv as agentExecutionSteerResponseSchema, Gw as OPENMELD_DAEMON_CANCEL_WITHDRAWN_BEFORE_START_REASON_CODE, Jb as runtimeTransportDispatchInteractionRequestSchema, Kb as runtimeTransportDeliverDispatchRequestSchema, Ox as runtimeTransportResumeControllerConversationFramePayloadSchema, PA as COMPUTER_FILE_ACCESS_OWNER_CANCELLED_REASON_CODE, Qb as runtimeTransportDispatchLifecycleRequestSchema, Rw as spaceWorkSelectionSchema, WT as providerDispatchRuntimeContextSchema, Ww as OPENMELD_DAEMON_CANCEL_STOP_REQUESTED_AFTER_START_REASON_CODE, Xb as runtimeTransportDispatchLifecycleAcknowledgementSchema, Xx as runtimeTransportSubmitTaskResultRequestSchema, Yb as runtimeTransportDispatchInteractionResponseFramePayloadSchema, ax as runtimeTransportDispatchRuntimeEvidenceRequestSchema, bu as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, cS as openMeldDaemonTaskResultPayloadSchema, d as SERVICE_EXECUTION_HOST_PROTOCOL, ek as runtimeTransportDeliveryExecutionIdentitySchema, ex as runtimeTransportDispatchPreviewEndRequestSchema, gE as resolveBuiltinAgentControllerConversationKind, gk as LOCAL_AGENT_REASONING_MAX_CHARS, gx as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, hx as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, iO as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, kx as runtimeTransportResumeControllerConversationResultFramePayloadSchema, lx as runtimeTransportForkAgentSessionResultSchema, mE as buildAgentControllerConversationRef, mO as agentInteractionResolutionSchema, mx as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema, nj as computerPowerRequestSchema, nx as runtimeTransportDispatchProgressRequestSchema, p as serviceExecutionHostCatalogSchema, pO as agentInteractionRequestSchema, pv as OFFICIAL_CLI_SKILL_URL, px as runtimeTransportLocalAgentControlCancelFramePayloadSchema, qP as toCompatibleSpaceAddressingRequestWireValue, qb as runtimeTransportDispatchInteractionDeliveredRequestSchema, r as buildWorkingFolderRecoveryQuestion, rx as runtimeTransportDispatchReasoningRequestSchema, sx as runtimeTransportDispatchToolActivityRequestSchema, t as WORKING_FOLDER_RECOVERY_DECLINED, tj as computerPowerRequestFrameSchema, tx as runtimeTransportDispatchPreviewRequestSchema, vk as localAgentReasoningPreferencesSchema, yx as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema } from "./dist-Dx5paVZY.js";
-import { u as startWindowsIdleSleepBlocker } from "./process-identity-DtRa8niy.js";
-import { Nt as buildSpaceAttachmentDownloadPath, ln as createOrganizationSkillsApi, xn as createSpaceApi } from "./dist-BJy9X73H.js";
-import { d as getAuthSessionState } from "./auth-session-mNZMZihh.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, f as buildOpenMeldRequestContextFromProfileIdentity, n as fetchSpaceRequestWithTimeout, t as createCliApiClientFoundation } from "./api-client-foundation-BDbeHD1i.js";
-import { t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-B2cNyBV2.js";
-import { S as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, _ as toErrorMessage$2, n as ensureDaemonRuntimePaths, s as emitRunLine, t as buildLedgerPaths, u as normalizeOptionalText$3, v as warnDaemonEvent } from "./daemon-device-id-DrGRbKdb.js";
-import { F as SPACE_COLLABORATION_CONTEXT_RULE, I as SPACE_PERSONAL_CONTRIBUTION_RULE, X as resolvePublicAgentFailureReason, Z as resolveSpacePublicationRequirement } from "./dual-view-guide-catalog-Cm8_zKnl.js";
-import { $t as createDispatchContinuationSpaceAccessContext, C as recordOpenMeldCreatedLocalAgentSession, D as readOpenCodeSessionRows, J as consumeArmedAgentControllerInterfaceReprobe, Yt as buildSpaceRoundSignalPublication, _ as sendDaemonFrame$1, _t as resolveBootstrapSpaceOwnerProfileId, an as getSpaceAccessPassword, at as emitDaemonDispatchJournalEvent, c as createDispatchSpaceActionContext, ct as readComputerFileAccessPolicy, d as readDispatchSpaceActionRecord, dt as isSameOrDescendantPath, f as supersedeDispatchSpaceActionRecordForReconsideration, ft as buildDispatchBootstrapTemplateFacts, g as parseDaemonFrame, gt as parseDispatchTask, ht as buildDispatchSessionTitle, k as resolveOpenCodeDatabasePath, l as readDispatchSpaceActionContextForReceiptFromEnv, ln as isWakeClosingSystemNoticeType, lt as resolveComputerFileAccessStorePath, mt as buildDispatchPromptPlan, on as getSpaceAccessRequestContext, pt as buildDispatchCorrelation, r as buildDispatchOwnedRuntimeEnv, s as OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV, un as listSpaceMemberDirectorySendTargets, vt as resolveBootstrapTargetProfileContext, xn as DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND, yt as resolveDispatchMentionSourceContext } from "./dispatch-owned-runtime-BxpC_aaI.js";
-import { t as ExecutionHostError } from "./channel-48XSbUsz.js";
-import { f as withSkillsInstallLock, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-CBWBsV1X.js";
-import { a as submitRuntimeProviderConversationProofs, f as recordRuntimeProviderUsageLimits, i as submitRuntimeAgentControllerReports, l as resolveLocalAgentControllerReportDecision, o as collectLocalAgentControllerInventory, t as notifyRuntimeReportingAttemptObserver, u as probeAgentControllerUsageObservationAuth } from "./runtime-agent-controller-reporting-submission-YtLJgQc7.js";
-import { t as installSkillsToTargets } from "./installer-BLijIl6G.js";
-import { B as installAgentActivityIntegrations, C as recordRuntimeReportingFailure, D as startLocalAgentActivitySyncLoop, E as createLedgerIo, F as registerAgentActivityRoute, T as recordRuntimeReportingSuccess, _ as markExecutionContextWorkspaceInUse, a as createDispatchSpaceTools, b as releaseExecutionContextWorkspace, g as deriveExecutionContextComputerFileAccessPolicy, h as startDispatchSpaceProgressRelay, i as materializeOrganizationSkillRelease, k as discoverLocalAgentSessionProviders, n as createSpaceWorkingCopies, r as downloadWorkingCopyFile, s as readTaskKnowledge, t as fetchSpaceUpdates, v as prepareExecutionContextWorkspace, w as recordRuntimeReportingNotApplicable, x as prepareClaudeProjectContainer, y as readExecutionContextWorkspace, z as defaultManagedIntegrationPaths } from "./updates-api-ByctphEr.js";
-import { h as createCliSpaceApi } from "./meta-api-C0lRMWF1.js";
+import { $b as runtimeTransportDispatchInteractionRequestSchema, Cv as agentExecutionSteerResponseSchema, Ek as localAgentReasoningPreferencesSchema, HA as COMPUTER_FILE_ACCESS_OWNER_CANCELLED_REASON_CODE, JO as runtimeCoordinatorExecutionTokenEnvelopeSchema, Nx as runtimeTransportResumeControllerConversationFramePayloadSchema, Px as runtimeTransportResumeControllerConversationResultFramePayloadSchema, Qb as runtimeTransportDispatchInteractionDeliveredRequestSchema, RR as normalizeOptionalWorkingDirectory, SE as buildAgentControllerConversationRef, SO as agentInteractionResolutionSchema, Uw as spaceWorkSelectionSchema, XT as localAgentUpdateOperationSchema, Xw as OPENMELD_DAEMON_CANCEL_WITHDRAWN_BEFORE_START_REASON_CODE, YT as providerDispatchRuntimeContextSchema, Yw as OPENMELD_DAEMON_CANCEL_STOP_REQUESTED_AFTER_START_REASON_CODE, Zb as runtimeTransportDeliverDispatchRequestSchema, ax as runtimeTransportDispatchPreviewEndRequestSchema, bu as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, bx as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, ck as runtimeTransportDeliveryExecutionIdentitySchema, cx as runtimeTransportDispatchReasoningRequestSchema, d as SERVICE_EXECUTION_HOST_PROTOCOL, ex as runtimeTransportDispatchInteractionResponseFramePayloadSchema, fO as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, fx as runtimeTransportDispatchToolActivityRequestSchema, jI as normalizeKnownBuiltinAgentControllerId, lj as computerPowerRequestFrameSchema, mx as runtimeTransportForkAgentSessionResultSchema, ox as runtimeTransportDispatchPreviewRequestSchema, p as serviceExecutionHostCatalogSchema, pS as openMeldDaemonTaskResultPayloadSchema, pv as OFFICIAL_CLI_SKILL_URL, r as buildWorkingFolderRecoveryQuestion, rx as runtimeTransportDispatchLifecycleRequestSchema, sx as runtimeTransportDispatchProgressRequestSchema, t as WORKING_FOLDER_RECOVERY_DECLINED, tF as toCompatibleSpaceAddressingRequestWireValue, tS as runtimeTransportSubmitTaskResultRequestSchema, tx as runtimeTransportDispatchLifecycleAcknowledgementSchema, uj as computerPowerRequestSchema, ux as runtimeTransportDispatchRuntimeEvidenceRequestSchema, vx as runtimeTransportLocalAgentControlCancelFramePayloadSchema, wE as resolveBuiltinAgentControllerConversationKind, wk as LOCAL_AGENT_REASONING_MAX_CHARS, wx as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, xO as agentInteractionRequestSchema, xx as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, yx as runtimeTransportLocalAgentControlForkSessionFramePayloadSchema } from "./dist-CMBBVJVE.js";
+import { u as startWindowsIdleSleepBlocker } from "./process-identity-e30Hp6t3.js";
+import { Nt as buildSpaceAttachmentDownloadPath, ln as createOrganizationSkillsApi, xn as createSpaceApi } from "./dist-Dip3sgFz.js";
+import { d as getAuthSessionState } from "./auth-session-RQOVI0Gb.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, f as buildOpenMeldRequestContextFromProfileIdentity, n as fetchSpaceRequestWithTimeout, t as createCliApiClientFoundation } from "./api-client-foundation-DBl_OaMj.js";
+import { t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-D4Xupqhp.js";
+import { S as CONTROLLED_SHUTDOWN_RESULT_ACK_TIMEOUT_MS, _ as toErrorMessage$2, n as ensureDaemonRuntimePaths, s as emitRunLine, t as buildLedgerPaths, u as normalizeOptionalText$3, v as warnDaemonEvent } from "./daemon-device-id-BmL_1aHE.js";
+import { F as SPACE_COLLABORATION_CONTEXT_RULE, I as SPACE_PERSONAL_CONTRIBUTION_RULE, X as resolvePublicAgentFailureReason, Z as resolveSpacePublicationRequirement } from "./dual-view-guide-catalog-DkoOcvAt.js";
+import { $t as createDispatchContinuationSpaceAccessContext, C as recordOpenMeldCreatedLocalAgentSession, D as readOpenCodeSessionRows, J as consumeArmedAgentControllerInterfaceReprobe, Yt as buildSpaceRoundSignalPublication, _ as sendDaemonFrame$1, _t as resolveBootstrapSpaceOwnerProfileId, an as getSpaceAccessPassword, at as emitDaemonDispatchJournalEvent, c as createDispatchSpaceActionContext, ct as readComputerFileAccessPolicy, d as readDispatchSpaceActionRecord, dt as isSameOrDescendantPath, f as supersedeDispatchSpaceActionRecordForReconsideration, ft as buildDispatchBootstrapTemplateFacts, g as parseDaemonFrame, gt as parseDispatchTask, ht as buildDispatchSessionTitle, k as resolveOpenCodeDatabasePath, l as readDispatchSpaceActionContextForReceiptFromEnv, ln as isWakeClosingSystemNoticeType, lt as resolveComputerFileAccessStorePath, mt as buildDispatchPromptPlan, on as getSpaceAccessRequestContext, pt as buildDispatchCorrelation, r as buildDispatchOwnedRuntimeEnv, s as OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV, un as listSpaceMemberDirectorySendTargets, vt as resolveBootstrapTargetProfileContext, xn as DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND, yt as resolveDispatchMentionSourceContext } from "./dispatch-owned-runtime-D5J7omXK.js";
+import { t as ExecutionHostError } from "./channel-fUczwp7l.js";
+import { f as withSkillsInstallLock, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-6y71kBCo.js";
+import { a as submitRuntimeProviderConversationProofs, f as recordRuntimeProviderUsageLimits, i as submitRuntimeAgentControllerReports, l as resolveLocalAgentControllerReportDecision, o as collectLocalAgentControllerInventory, t as notifyRuntimeReportingAttemptObserver, u as probeAgentControllerUsageObservationAuth } from "./runtime-agent-controller-reporting-submission-ZLj8H7TM.js";
+import { t as installSkillsToTargets } from "./installer-BZfDlcZI.js";
+import { B as installAgentActivityIntegrations, C as recordRuntimeReportingFailure, D as startLocalAgentActivitySyncLoop, E as createLedgerIo, F as registerAgentActivityRoute, T as recordRuntimeReportingSuccess, _ as markExecutionContextWorkspaceInUse, a as createDispatchSpaceTools, b as releaseExecutionContextWorkspace, g as deriveExecutionContextComputerFileAccessPolicy, h as startDispatchSpaceProgressRelay, i as materializeOrganizationSkillRelease, k as discoverLocalAgentSessionProviders, n as createSpaceWorkingCopies, r as downloadWorkingCopyFile, s as readTaskKnowledge, t as fetchSpaceUpdates, v as prepareExecutionContextWorkspace, w as recordRuntimeReportingNotApplicable, x as prepareClaudeProjectContainer, y as readExecutionContextWorkspace, z as defaultManagedIntegrationPaths } from "./updates-api-DluYmth3.js";
+import { h as createCliSpaceApi } from "./meta-api-BPhaiMmU.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { basename, dirname, extname, join } from "node:path";
@@ -2551,6 +2551,151 @@ function stableJson(value) {
 	return JSON.stringify(value) ?? "null";
 }
 //#endregion
+//#region src/local-service/execution-host/local-agent-update.ts
+function createLocalAgentUpdater(input) {
+	const active = /* @__PURE__ */ new Set();
+	let tail = Promise.resolve();
+	const directory = join(input.rootDir, "local-agent-updates");
+	const path = join(directory, "operations.json");
+	const serialize = (run) => {
+		const next = tail.then(run, run);
+		tail = next.catch(() => void 0);
+		return next;
+	};
+	async function read() {
+		try {
+			return localAgentUpdateOperationSchema.array().parse(JSON.parse(await readFile(path, "utf8")));
+		} catch (error) {
+			if (error.code === "ENOENT") return [];
+			throw new Error("agents.update_receipt_unavailable: Update history could not be read. Check OpenMeld Service diagnostics.", { cause: error });
+		}
+	}
+	async function save(operation) {
+		const records = await read();
+		const index = records.findIndex((record) => record.operationId === operation.operationId);
+		if (index < 0) records.push(operation);
+		else records[index] = operation;
+		await mkdir(directory, {
+			recursive: true,
+			mode: 448
+		});
+		await writeFile(`${path}.tmp`, JSON.stringify(records), { mode: 384 });
+		await rename(`${path}.tmp`, path);
+	}
+	function project(operation) {
+		if (!operation) return null;
+		return operation.status === "running" && !active.has(operation.operationId) ? {
+			...operation,
+			status: "outcome_unknown",
+			message: "OpenMeld Service restarted before the update was confirmed. Check the installation in your terminal before updating again."
+		} : operation;
+	}
+	async function command(agentId, installationId) {
+		if (agentId !== "claude-code") return null;
+		const installations = await manageAgentRegistrationInstallation({
+			agentId,
+			operation: "list"
+		});
+		if (!installations.selectedInstallationId || installationId && installationId !== installations.selectedInstallationId) return null;
+		const contract = (await resolveAgentTargetState(agentId))?.registration?.launchContract;
+		return contract ? await resolveClaudeNativeUpdateCommand(contract) : null;
+	}
+	async function state(agentId) {
+		const records = agentId === "claude-code" ? await serialize(read) : [];
+		let supported = false;
+		try {
+			supported = Boolean(await command(agentId));
+		} catch (error) {
+			if (!records.length) throw error;
+			input.log(`Could not inspect the installation for update status: ${String(error)}`);
+		}
+		return {
+			supported,
+			operation: project(records.at(-1))
+		};
+	}
+	async function start(agentId, request) {
+		let started;
+		let rejected;
+		const ready = new Promise((resolve, reject) => {
+			started = resolve;
+			rejected = reject;
+		});
+		await serialize(async () => {
+			const records = await read();
+			const existing = records.find((record) => record.operationId === request.operationId);
+			if (existing) {
+				if (agentId !== "claude-code" || existing.installationId !== request.installationId) throw new Error("agents.update_conflict: This update request belongs to a different installation.");
+				started({
+					supported: true,
+					operation: project(existing)
+				});
+				return;
+			}
+			if (records.some((record) => record.status === "running" || record.status === "outcome_unknown")) throw new Error("agents.update_unconfirmed: An earlier update has not been confirmed. Check its status before updating again.");
+			const executable = await command(agentId, request.installationId);
+			if (!executable) throw new Error("agents.update_unsupported: This installation cannot be updated from OpenMeld. Use its original installer.");
+			input.slots.runAdapterOperationIfIdle(agentId, async () => {
+				const beforeVersion = await readClaudeNativeVersion(executable);
+				const operation = {
+					installationId: request.installationId,
+					operationId: request.operationId,
+					beforeVersion,
+					afterVersion: null,
+					status: "running",
+					message: "Updating Claude Code. You can close this window."
+				};
+				active.add(request.operationId);
+				await save(operation);
+				started({
+					supported: true,
+					operation
+				});
+				try {
+					if (await command(agentId, request.installationId) !== executable) throw new Error("The selected installation changed before the update started.");
+					await updateClaudeNativeInstallation(executable);
+					if (await command(agentId, request.installationId) !== executable) throw new Error("The selected installation could not be confirmed after the update.");
+					const afterVersion = await readClaudeNativeVersion(executable);
+					return {
+						...operation,
+						afterVersion,
+						status: "succeeded",
+						message: beforeVersion === afterVersion ? `No newer version was installed. Claude Code is still ${afterVersion}.` : `Claude Code was updated from ${beforeVersion} to ${afterVersion}.`
+					};
+				} catch (error) {
+					input.log(`Local agent update ${request.operationId} failed: ${String(error)}`);
+					return {
+						...operation,
+						status: "outcome_unknown",
+						message: "The update could not be verified. Check Claude Code in your terminal and OpenMeld Service diagnostics before trying again."
+					};
+				}
+			}).then(async (result) => {
+				if (!result.accepted) {
+					rejected(/* @__PURE__ */ new Error(result.status === "blocked_by_work" ? "agents.update_blocked_by_work: Claude Code has work in progress. Wait until it finishes before updating." : "agents.update_in_progress: This installation is already being changed. Check again shortly."));
+					return;
+				}
+				await serialize(() => save(result.value));
+				active.delete(request.operationId);
+				await input.refresh();
+			}, (error) => {
+				active.delete(request.operationId);
+				input.log(`Local agent update ${request.operationId} could not complete: ${String(error)}`);
+				rejected(error);
+			}).catch((error) => {
+				active.delete(request.operationId);
+				input.log(`Could not publish local agent update completion: ${String(error)}`);
+			});
+			await ready;
+		});
+		return ready;
+	}
+	return {
+		state,
+		start
+	};
+}
+//#endregion
 //#region src/local-service/execution-host/controls.ts
 function isExecutionHostControlFrame(frame) {
 	return frame.code === "daemon.local_agent_control.set_enabled" || frame.code === "daemon.local_agent_control.manage_installation" || frame.code === "daemon.local_agent_control.fork_session" || frame.code === "daemon.execution_recovery.resume_controller_conversation";
@@ -2561,6 +2706,15 @@ function createExecutionHostControls(input) {
 		code,
 		text
 	});
+	const updater = createLocalAgentUpdater({
+		rootDir: input.ledgerPaths.rootDirPath,
+		slots: input.localExecutionSlots,
+		refresh: async () => {
+			await refreshReports();
+			input.invalidate("routes");
+		},
+		log: (message) => log("daemon.local_agent_update", message)
+	});
 	async function refreshReports() {
 		try {
 			const result = await input.refreshReports();
@@ -2603,12 +2757,24 @@ function createExecutionHostControls(input) {
 	}
 	async function manageInstallation(control) {
 		try {
+			if (control.operation === "update" || control.operation === "read_update") {
+				const update = control.operation === "update" ? await updater.start(control.agentId, control) : await updater.state(control.agentId);
+				return {
+					accepted: true,
+					agentId: control.agentId,
+					status: "update_state",
+					update
+				};
+			}
 			let result;
 			if (control.operation === "select") {
 				const guarded = await input.localExecutionSlots.runAdapterOperationIfIdle(control.agentId, () => manageAgentRegistrationInstallation(control));
 				if (!guarded.accepted) throw new Error(guarded.status === "operation_in_progress" ? "agents.installation_change_in_progress: this installation is already being changed; check again in a moment" : "agents.installation_change_blocked_by_work: this agent has work in progress; wait until it finishes before changing installations");
 				result = guarded.value;
-			} else result = await manageAgentRegistrationInstallation(control);
+			} else result = await manageAgentRegistrationInstallation({
+				agentId: control.agentId,
+				operation: "list"
+			});
 			const selectionStatus = input.localExecutionSlots.getAdapterOperationStatus(control.agentId);
 			const reportSyncStatus = result.changed ? await refreshReports() : "skipped";
 			if (result.changed) input.invalidate("routes");
@@ -9707,4 +9873,4 @@ function createExecutionHostRuntime(input) {
 //#endregion
 export { createExecutionHostResources, createExecutionHostRuntime };
 
-//# sourceMappingURL=runtime-CUN9BLfZ.js.map
+//# sourceMappingURL=runtime-DoIazDNu.js.map