openmeld 0.3.263 → 0.3.264

package/dist/{daemon-state-C09DaALw.js → daemon-state-CiTQcAWA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { F as resolveOpenMeldRootDir, I as resolveOpenMeldServiceOwnedPathInput, P as resolveOpenMeldEnvPreset, R as runtimeDir, U as systemDir } from "./paths-De9xdA2h.js";
-import { d as runWithHeldLock, f as tryCleanupStaleLock, o as readLockMeta, s as releaseLock, t as acquireLock } from "./lock-Cz8h_yJh.js";
+import { d as runWithHeldLock, f as tryCleanupStaleLock, o as readLockMeta, s as releaseLock, t as acquireLock } from "./lock-y1PCtVSn.js";
 import { createHash, randomBytes } from "node:crypto";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -137,7 +137,7 @@ async function setDaemonServiceRuntimeState(state, pathInput = {}) {
 	await writeDaemonServiceRuntimeState(state, pathInput);
 }
 async function clearDaemonServiceRuntimeState(pathInput = {}) {
-	const { clearDaemonRuntimeLease } = await import("./daemon-runtime-lease-CACGRuZ3.js");
+	const { clearDaemonRuntimeLease } = await import("./daemon-runtime-lease-DJx3N2Sa.js");
 	await Promise.all([rm(daemonServiceRuntimeStatePath(pathInput), { force: true }), clearDaemonRuntimeLease(pathInput)]);
 }
 function withDaemonServiceRunLock(callback, meta = {
@@ -653,4 +653,4 @@ async function pathExists(path) {
 //#endregion
 export { getDaemonStatus as A, restoreDaemonInstallStateSnapshot as B, daemonServiceStableBinaryExecutablePath as C, daemonStatePath as D, daemonServiceUpdateWorkerBinaryExecutablePath as E, readDaemonServiceLifecycleLockMetaWithCleanup as F, withDaemonServiceReconcileLock as G, setDaemonServiceRuntimeState as H, readDaemonServiceRuntimeSnapshot as I, withDaemonServiceStopLock as J, withDaemonServiceRegistrationMutationLock as K, releaseDaemonServiceLifecycleLock as L, isDaemonServiceRuntimeHeartbeatStale as M, readDaemonControlPlaneToken as N, ensureDaemonControlPlaneToken as O, readDaemonServiceLifecycleLockMeta as P, resolveDaemonControlPlaneEndpoint as R, daemonServiceRepairJournalPath as S, daemonServiceStableLauncherPath as T, uninstallDaemon as U, rotateDaemonControlPlaneTokenIfExpired as V, withDaemonServiceLifecycleLock as W, daemonRuntimeStateRootPath as _, DAEMON_SERVICE_RUNTIME_MODE_ENV as a, daemonServiceLegacyExecutableWrapperPath as b, acquireDaemonServiceLifecycleLock as c, daemonDispatchJournalPath as d, daemonLifecycleJournalPath as f, daemonRuntimeServiceManagerPath as g, daemonRuntimeRootPath as h, DAEMON_SERVICE_RUNTIME_DETACHED_ENV as i, installDaemon as j, getDaemonRuntimeStatus as k, clearDaemonServiceRuntimeState as l, daemonRuntimeDataPath as m, DAEMON_SERVICE_RUNTIME_AUTO_START_ENV as n, DAEMON_SERVICE_RUNTIME_STATE_SCHEMA as o, daemonRuntimeBundlesPath as p, withDaemonServiceRunLock as q, DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV as r, DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV as s, DAEMON_HEARTBEAT_STALE_MS as t, currentDaemonServiceLifecycleLock as u, daemonServiceActiveBundleStatePath as v, daemonServiceStableExecutableWrapperPath as w, daemonServiceRecognizedExecutablePaths as x, daemonServiceExecutableWrapperPaths as y, resolveDaemonServiceRuntimeMetadata as z };
 
-//# sourceMappingURL=daemon-state-C09DaALw.js.map
+//# sourceMappingURL=daemon-state-CiTQcAWA.js.map

package/dist/{daemon-state-C09DaALw.js.map → daemon-state-CiTQcAWA.js.map}

@@ -1 +1 @@
-{"version":3,"file":"daemon-state-C09DaALw.js","names":[],"sources":["../src/config/daemon-state.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { createHash, randomBytes } from \"node:crypto\";\nimport {\n  chmod,\n  mkdir,\n  readFile,\n  rename,\n  rm,\n  stat,\n  writeFile,\n} from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  acquireLock,\n  type OpenMeldLock,\n  readLockMeta,\n  releaseLock,\n  runWithHeldLock,\n  tryCleanupStaleLock,\n} from \"./lock\";\nimport type { OpenMeldEnvPreset, OpenMeldPathResolutionInput } from \"./paths\";\nimport {\n  resolveOpenMeldEnvPreset,\n  resolveOpenMeldRootDir,\n  resolveOpenMeldServiceOwnedPathInput,\n  runtimeDir,\n  systemDir,\n} from \"./paths\";\n\nconst DAEMON_STATE_SCHEMA = \"openmeld-daemon-install-v1\";\nexport const DAEMON_SERVICE_RUNTIME_STATE_SCHEMA =\n  \"openmeld-daemon-service-state-v1\";\nexport const DAEMON_SERVICE_RUNTIME_MODE_ENV = \"OPENMELD_DAEMON_RUNTIME_MODE\";\nexport const DAEMON_SERVICE_RUNTIME_DETACHED_ENV =\n  \"OPENMELD_DAEMON_RUNTIME_DETACHED\";\nexport const DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV =\n  \"OPENMELD_DAEMON_SERVICE_CONTROLLER\";\nexport const DAEMON_SERVICE_RUNTIME_AUTO_START_ENV =\n  \"OPENMELD_DAEMON_SERVICE_AUTO_START\";\nexport const DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV =\n  \"OPENMELD_DAEMON_RUNTIME_SYSTEM_SERVICE\";\nconst DAEMON_TOKEN_SCHEMA = \"openmeld-daemon-token-v1\";\nconst DAEMON_TOKEN_ROTATE_MAX_AGE_MS = 24 * 60 * 60 * 1000;\nexport const DAEMON_HEARTBEAT_STALE_MS = 3 * 60 * 1000;\nconst DAEMON_ACTIVE_BUNDLE_STATE_FILENAME = \"active-bundle.json\";\nconst DAEMON_DISPATCH_JOURNAL_FILENAME = \"daemon-dispatch-journal.jsonl\";\nconst DAEMON_LIFECYCLE_JOURNAL_FILENAME = \"daemon-lifecycle-journal.jsonl\";\nconst DAEMON_REPAIR_JOURNAL_FILENAME = \"repair-journal.json\";\nconst DAEMON_SERVICE_LOCK_PROFILE = \"daemon-service\";\nconst DAEMON_SERVICE_LOCK_KEY = \"daemon-service-run\";\ntype DaemonServiceLifecycleLockContext = {\n  lock: OpenMeldLock;\n  active: boolean;\n  failures: unknown[];\n  ownerRoot: string;\n  pendingOperations: Set<Promise<void>>;\n};\nconst daemonServiceLifecycleLockContext =\n  new AsyncLocalStorage<DaemonServiceLifecycleLockContext>();\n\nexport function currentDaemonServiceLifecycleLock(): OpenMeldLock | null {\n  const context = daemonServiceLifecycleLockContext.getStore();\n  return context?.active &&\n    context.ownerRoot ===\n      resolveOpenMeldRootDir(resolveOpenMeldServiceOwnedPathInput())\n    ? context.lock\n    : null;\n}\nconst DAEMON_STABLE_LAUNCHER_FILENAME = \"daemon-service-launcher.mjs\";\nconst DAEMON_SERVICE_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET = {\n  prod: \"OpenMeld Service\",\n  \"dev-local\": \"OpenMeld Service Dev\",\n  canary: \"OpenMeld Service Canary\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nconst DAEMON_SERVICE_BINARY_EXECUTABLE_FILENAME_BY_PRESET = {\n  prod: \"OpenMeld Service Binary\",\n  \"dev-local\": \"OpenMeld Service Binary Dev\",\n  canary: \"OpenMeld Service Binary Canary\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nconst DAEMON_SERVICE_UPDATE_WORKER_BINARY_FILENAME_BY_PRESET = {\n  prod: \"OpenMeld Update Worker Binary\",\n  \"dev-local\": \"OpenMeld Update Worker Binary Dev\",\n  canary: \"OpenMeld Update Worker Binary Canary\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nconst DAEMON_SERVICE_LEGACY_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET = {\n  prod: \"openmeld-service\",\n  \"dev-local\": \"openmeld-dev-service\",\n  canary: \"openmeld-canary-service\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nexport const DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE =\n  DAEMON_SERVICE_LOCK_PROFILE;\nexport const DAEMON_SERVICE_LIFECYCLE_LOCK_KEY = DAEMON_SERVICE_LOCK_KEY;\nexport type DaemonServiceLifecycleLock = OpenMeldLock;\n\nexport type DaemonLifecycleIntent =\n  | \"run_background\"\n  | \"run_foreground\"\n  | \"stop\"\n  | \"autostart\"\n  | \"status_cleanup\"\n  | \"startup_check\"\n  | \"start\"\n  | \"reinstall\"\n  | \"uninstall\"\n  | \"upgrade_reconcile\";\n\nexport type DaemonLifecycleLockMeta = {\n  intent: DaemonLifecycleIntent;\n  command: string;\n  pid?: number;\n  sessionId?: string;\n  at?: string;\n};\n\nexport type DaemonInstallSource = \"cli.auto_check\" | \"daemon.command.install\";\nexport type DaemonRunMode = \"foreground\" | \"background\";\nexport type DaemonServiceController =\n  | \"launchd\"\n  | \"systemd\"\n  | \"windows-service\"\n  | \"legacy-detached\"\n  | \"unknown\";\n\ntype BaseDaemonServiceRuntimeState = {\n  mode: DaemonRunMode;\n  command: string;\n  gatewayUrl: string | null;\n  openMeldProfileId: string | null;\n  stopRequestedAt: string | null;\n  startedAt: string;\n  updatedAt: string;\n  heartbeatAt: string | null;\n  managedBySystemService: boolean;\n  serviceController: DaemonServiceController;\n  autoStart: boolean;\n};\n\nexport type DaemonServiceRuntimeState = BaseDaemonServiceRuntimeState & {\n  v: 1;\n  schema: typeof DAEMON_SERVICE_RUNTIME_STATE_SCHEMA;\n  status: \"running\";\n  pid: number;\n};\n\nexport type DaemonServiceRuntimeStatus = {\n  status: \"running\" | \"stale\" | \"not_running\" | \"unknown\";\n  mode: DaemonRunMode | null;\n  pid: number | null;\n  startedAt: string | null;\n  updatedAt: string | null;\n  managedBySystemService: boolean;\n  serviceController: DaemonServiceRuntimeState[\"serviceController\"];\n  autoStart: boolean;\n  reason?: string;\n};\n\nexport type DaemonServiceRuntimeMetadataInput = {\n  managedBySystemService?: boolean;\n  serviceController?: string;\n  autoStart?: boolean;\n  env?: NodeJS.ProcessEnv;\n};\n\nexport type DaemonServiceRuntimeMetadata = {\n  managedBySystemService: boolean;\n  serviceController: DaemonServiceController;\n  autoStart: boolean;\n};\n\nexport type DaemonInstallState = {\n  v: 1;\n  schema: typeof DAEMON_STATE_SCHEMA;\n  daemonVersion: string;\n  installSource: DaemonInstallSource;\n  installedAt: string;\n  updatedAt: string;\n};\n\nexport type DaemonTokenState = {\n  v: 1;\n  schema: typeof DAEMON_TOKEN_SCHEMA;\n  token: string;\n  issuedAt: string;\n  updatedAt: string;\n};\n\nexport type DaemonInstallResult = {\n  status: \"installed\" | \"already_installed\";\n  state: DaemonInstallState;\n};\n\nexport type DaemonUninstallResult = {\n  removed: boolean;\n};\n\nexport type DaemonStatus =\n  | {\n      installed: true;\n      state: DaemonInstallState;\n    }\n  | {\n      installed: false;\n      state: null;\n    };\n\nexport async function getDaemonStatus(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonStatus> {\n  const [state, runtimeExists] = await Promise.all([\n    readDaemonInstallState(pathInput),\n    pathExists(daemonRuntimeRootPath(pathInput)),\n  ]);\n  if (state && runtimeExists) {\n    return {\n      installed: true,\n      state,\n    };\n  }\n  return {\n    installed: false,\n    state: null,\n  };\n}\n\nexport async function getDaemonRuntimeStatus(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonServiceRuntimeStatus> {\n  const state = await readDaemonServiceRuntimeState(pathInput);\n  if (!state) {\n    return {\n      status: \"not_running\",\n      mode: null,\n      pid: null,\n      startedAt: null,\n      updatedAt: null,\n      managedBySystemService: false,\n      serviceController: \"unknown\",\n      autoStart: false,\n    };\n  }\n  if (!Number.isInteger(state.pid) || state.pid <= 0) {\n    return {\n      status: \"stale\",\n      mode: state.mode,\n      pid: state.pid,\n      startedAt: state.startedAt,\n      updatedAt: state.updatedAt,\n      managedBySystemService: state.managedBySystemService,\n      serviceController: state.serviceController,\n      autoStart: state.autoStart,\n      reason: \"invalid_pid\",\n    };\n  }\n  if (!isPidAlive(state.pid)) {\n    return {\n      status: \"stale\",\n      mode: state.mode,\n      pid: state.pid,\n      startedAt: state.startedAt,\n      updatedAt: state.updatedAt,\n      managedBySystemService: state.managedBySystemService,\n      serviceController: state.serviceController,\n      autoStart: state.autoStart,\n      reason: \"process_not_alive\",\n    };\n  }\n  if (isDaemonServiceRuntimeHeartbeatStale(state)) {\n    return {\n      status: \"stale\",\n      mode: state.mode,\n      pid: state.pid,\n      startedAt: state.startedAt,\n      updatedAt: state.updatedAt,\n      managedBySystemService: state.managedBySystemService,\n      serviceController: state.serviceController,\n      autoStart: state.autoStart,\n      reason: \"heartbeat_stale\",\n    };\n  }\n  return {\n    status: \"running\",\n    mode: state.mode,\n    pid: state.pid,\n    startedAt: state.startedAt,\n    updatedAt: state.updatedAt,\n    managedBySystemService: state.managedBySystemService,\n    serviceController: state.serviceController,\n    autoStart: state.autoStart,\n  };\n}\n\nexport async function readDaemonServiceRuntimeSnapshot(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonServiceRuntimeState | null> {\n  return await readDaemonServiceRuntimeState(pathInput);\n}\n\nexport function resolveDaemonServiceRuntimeMetadata(\n  input: DaemonServiceRuntimeMetadataInput = {}\n): DaemonServiceRuntimeMetadata {\n  const env = input.env ?? process.env;\n  const managedBySystemService =\n    input.managedBySystemService === true ||\n    env[DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV] === \"1\";\n  const serviceControllerInput =\n    typeof input.serviceController === \"string\" &&\n    input.serviceController.length > 0\n      ? input.serviceController\n      : env[DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV];\n  const autoStart =\n    input.autoStart === true ||\n    env[DAEMON_SERVICE_RUNTIME_AUTO_START_ENV] === \"1\";\n\n  return {\n    managedBySystemService,\n    serviceController: parseDaemonServiceController(serviceControllerInput),\n    autoStart,\n  };\n}\n\nexport async function setDaemonServiceRuntimeState(\n  state: DaemonServiceRuntimeState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  await writeDaemonServiceRuntimeState(state, pathInput);\n}\n\nexport async function clearDaemonServiceRuntimeState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const { clearDaemonRuntimeLease } = await import(\"./daemon-runtime-lease\");\n  await Promise.all([\n    rm(daemonServiceRuntimeStatePath(pathInput), { force: true }),\n    clearDaemonRuntimeLease(pathInput),\n  ]);\n}\n\nexport function withDaemonServiceRunLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"run_background\",\n    command: \"openmeld service start\",\n  }\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport async function acquireDaemonServiceLifecycleLock(\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"run_background\",\n    command: \"openmeld service start\",\n  },\n  pathResolution: OpenMeldPathResolutionInput = resolveOpenMeldServiceOwnedPathInput()\n): Promise<DaemonServiceLifecycleLock> {\n  return await acquireLock({\n    openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    key: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n    meta,\n    pathResolution,\n  });\n}\n\nexport async function releaseDaemonServiceLifecycleLock(\n  lock: DaemonServiceLifecycleLock\n): Promise<void> {\n  await releaseLock(lock);\n}\n\nexport function withDaemonServiceStopLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"stop\",\n    command: \"openmeld service stop\",\n  }\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport function withDaemonServiceReconcileLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"upgrade_reconcile\",\n    command: \"openmeld service update\",\n  }\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport function withDaemonServiceRegistrationMutationLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport function withDaemonServiceLifecycleLock<T>(\n  meta: DaemonLifecycleLockMeta,\n  callback: () => Promise<T>,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<T> {\n  const pathResolution = resolveOpenMeldServiceOwnedPathInput(pathInput);\n  const ownerRoot = resolveOpenMeldRootDir(pathResolution);\n  const currentContext = daemonServiceLifecycleLockContext.getStore();\n  if (currentContext?.active && currentContext.ownerRoot === ownerRoot) {\n    let operation: Promise<T>;\n    try {\n      operation = callback();\n    } catch (error) {\n      operation = Promise.reject(error);\n    }\n    let trackedOperation: Promise<void>;\n    trackedOperation = operation\n      .then(\n        () => undefined,\n        (error: unknown) => {\n          currentContext.failures.push(error);\n        }\n      )\n      .finally(() => {\n        currentContext.pendingOperations.delete(trackedOperation);\n      });\n    currentContext.pendingOperations.add(trackedOperation);\n    return operation;\n  }\n  return withDaemonServiceLifecycleOwnerLock({\n    callback,\n    meta,\n    ownerRoot,\n    pathResolution,\n  });\n}\n\nasync function withDaemonServiceLifecycleOwnerLock<T>(input: {\n  callback: () => Promise<T>;\n  meta: DaemonLifecycleLockMeta;\n  ownerRoot: string;\n  pathResolution: OpenMeldPathResolutionInput;\n}): Promise<T> {\n  const lock = await acquireDaemonServiceLifecycleLock(\n    input.meta,\n    input.pathResolution\n  );\n  return await runWithHeldLock({\n    lock,\n    run: async () => {\n      const context: DaemonServiceLifecycleLockContext = {\n        lock,\n        active: true,\n        failures: [],\n        ownerRoot: input.ownerRoot,\n        pendingOperations: new Set(),\n      };\n      let outcome: { ok: true; value: T } | { ok: false; error: unknown };\n      try {\n        outcome = {\n          ok: true,\n          value: await daemonServiceLifecycleLockContext.run(\n            context,\n            input.callback\n          ),\n        };\n      } catch (error) {\n        outcome = { ok: false, error };\n      } finally {\n        while (context.pendingOperations.size > 0) {\n          await Promise.all([...context.pendingOperations]);\n        }\n        context.active = false;\n      }\n      const failures = [\n        ...(outcome.ok ? [] : [outcome.error]),\n        ...context.failures,\n      ].filter(\n        (failure, index, allFailures) => allFailures.indexOf(failure) === index\n      );\n      if (failures.length === 1) {\n        throw failures[0];\n      }\n      if (failures.length > 1) {\n        throw new AggregateError(\n          failures,\n          \"daemon service lifecycle mutation failed in more than one operation\"\n        );\n      }\n      if (!outcome.ok) {\n        throw outcome.error;\n      }\n      return outcome.value;\n    },\n    releaseContext: {\n      command: input.meta.command,\n      component: \"daemon_service_lifecycle\",\n      intent: input.meta.intent,\n      lockKey: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n      openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    },\n  });\n}\n\nexport async function readDaemonServiceLifecycleLockMeta(): Promise<DaemonLifecycleLockMeta | null> {\n  const meta = await readLockMeta({\n    openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    key: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n    pathResolution: resolveOpenMeldServiceOwnedPathInput(),\n  });\n  if (!meta) {\n    return null;\n  }\n  const intent =\n    typeof meta.intent === \"string\"\n      ? normalizeDaemonLifecycleIntent(meta.intent)\n      : null;\n  const command = typeof meta.command === \"string\" ? meta.command.trim() : \"\";\n  if (!intent || command.length === 0) {\n    return null;\n  }\n  const pid = typeof meta.pid === \"number\" ? meta.pid : undefined;\n  const sessionId =\n    typeof meta.sessionId === \"string\" && meta.sessionId.trim().length > 0\n      ? meta.sessionId.trim()\n      : undefined;\n  const at =\n    typeof meta.at === \"string\" && meta.at.trim().length > 0\n      ? meta.at.trim()\n      : undefined;\n  return {\n    intent,\n    command,\n    ...(typeof pid === \"number\" ? { pid } : {}),\n    ...(sessionId ? { sessionId } : {}),\n    ...(at ? { at } : {}),\n  };\n}\n\nexport async function readDaemonServiceLifecycleLockMetaWithCleanup(): Promise<DaemonLifecycleLockMeta | null> {\n  await tryCleanupStaleLock({\n    openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    key: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n    pathResolution: resolveOpenMeldServiceOwnedPathInput(),\n  });\n  return await readDaemonServiceLifecycleLockMeta();\n}\n\nexport async function installDaemon(input: {\n  daemonVersion: string;\n  source: DaemonInstallSource;\n}): Promise<DaemonInstallResult> {\n  const existingState = await readDaemonInstallState();\n  const runtimeExists = await pathExists(daemonRuntimeRootPath());\n  if (\n    existingState &&\n    runtimeExists &&\n    existingState.daemonVersion === input.daemonVersion\n  ) {\n    await ensureDaemonTokenState();\n    return {\n      status: \"already_installed\",\n      state: existingState,\n    };\n  }\n\n  await ensureDaemonRuntimeLayout();\n  const now = new Date().toISOString();\n  const nextState: DaemonInstallState = {\n    v: 1,\n    schema: DAEMON_STATE_SCHEMA,\n    daemonVersion: input.daemonVersion,\n    installSource: input.source,\n    installedAt: existingState?.installedAt ?? now,\n    updatedAt: now,\n  };\n  await writeDaemonInstallState(nextState);\n  await ensureDaemonTokenState();\n\n  return {\n    status: \"installed\",\n    state: nextState,\n  };\n}\n\nexport async function uninstallDaemon(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonUninstallResult> {\n  const [hasState, hasRuntimeDir, hasToken] = await Promise.all([\n    pathExists(daemonStatePath(pathInput)),\n    pathExists(daemonRuntimeRootPath(pathInput)),\n    pathExists(daemonTokenPath(pathInput)),\n  ]);\n\n  await Promise.all([\n    rm(daemonStatePath(pathInput), { force: true }),\n    rm(daemonTokenPath(pathInput), { force: true }),\n    rm(daemonServiceRuntimeStatePath(pathInput), { force: true }),\n    rm(daemonRuntimeRootPath(pathInput), { recursive: true, force: true }),\n  ]);\n\n  return {\n    removed: hasState || hasRuntimeDir || hasToken,\n  };\n}\n\nexport function daemonStatePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(systemDir(pathInput), \"daemon-install.json\");\n}\n\nexport function daemonRuntimeRootPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(runtimeDir(pathInput), \"daemon\");\n}\n\nexport function daemonServiceRuntimeStatePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"service-runtime.json\");\n}\n\nexport function daemonRuntimeDataPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"data\");\n}\n\nexport function daemonRuntimeBundlesPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"bundles\");\n}\n\nexport function daemonRuntimeStateRootPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"state\");\n}\n\nexport function daemonLifecycleJournalPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeRootPath(pathInput),\n    \"logs\",\n    DAEMON_LIFECYCLE_JOURNAL_FILENAME\n  );\n}\n\nexport function daemonDispatchJournalPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeRootPath(pathInput),\n    \"logs\",\n    DAEMON_DISPATCH_JOURNAL_FILENAME\n  );\n}\n\nexport function daemonServiceActiveBundleStatePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeStateRootPath(pathInput),\n    DAEMON_ACTIVE_BUNDLE_STATE_FILENAME\n  );\n}\n\nexport function daemonServiceRepairJournalPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeStateRootPath(pathInput),\n    DAEMON_REPAIR_JOURNAL_FILENAME\n  );\n}\n\nexport function daemonRuntimeServiceManagerPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"service-manager\");\n}\n\nexport function daemonServiceStableLauncherPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_STABLE_LAUNCHER_FILENAME\n  );\n}\n\nexport function daemonServiceStableExecutableWrapperPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceStableBinaryExecutablePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_BINARY_EXECUTABLE_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceUpdateWorkerBinaryExecutablePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_UPDATE_WORKER_BINARY_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceLegacyExecutableWrapperPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_LEGACY_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceExecutableWrapperPaths(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string[] {\n  return [\n    daemonServiceStableExecutableWrapperPath(pathInput),\n    daemonServiceLegacyExecutableWrapperPath(pathInput),\n  ];\n}\n\nexport function daemonServiceRecognizedExecutablePaths(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string[] {\n  return [\n    daemonServiceStableBinaryExecutablePath(pathInput),\n    ...daemonServiceExecutableWrapperPaths(pathInput),\n  ];\n}\n\nexport function daemonTokenPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(systemDir(pathInput), \"daemon-token.json\");\n}\n\nexport async function restoreDaemonInstallStateSnapshot(\n  snapshot: DaemonInstallState | null,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  if (!snapshot) {\n    await rm(daemonStatePath(pathInput), { force: true });\n    return;\n  }\n  await writeDaemonInstallState(snapshot, pathInput);\n}\n\nexport function resolveDaemonControlPlaneEndpoint(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const runtimeRoot = daemonRuntimeRootPath(pathInput);\n  const suffix = createHash(\"sha256\")\n    .update(runtimeRoot)\n    .digest(\"hex\")\n    .slice(0, 24);\n  if (process.platform === \"win32\") {\n    return `\\\\\\\\.\\\\pipe\\\\openmeld-daemon-control-${suffix}`;\n  }\n  return join(tmpdir(), `openmeld-daemon-control-${suffix}.sock`);\n}\n\nexport async function ensureDaemonControlPlaneToken(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<string> {\n  const state = await ensureDaemonTokenState(pathInput);\n  return state.token;\n}\n\nexport async function rotateDaemonControlPlaneTokenIfExpired(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonTokenState> {\n  const current = await readDaemonTokenState(pathInput);\n  if (current && !isDaemonTokenExpired(current)) {\n    await chmod(daemonTokenPath(pathInput), 0o600).catch(() => undefined);\n    return current;\n  }\n\n  return await writeNewDaemonTokenState(pathInput);\n}\n\nexport async function readDaemonControlPlaneToken(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<string | null> {\n  const state = await readDaemonTokenState(pathInput);\n  return state?.token ?? null;\n}\n\nfunction isPidAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !(\n      error instanceof Error &&\n      (error as NodeJS.ErrnoException).code === \"ESRCH\"\n    );\n  }\n}\n\nasync function readDaemonServiceRuntimeState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonServiceRuntimeState | null> {\n  const raw = await readFile(\n    daemonServiceRuntimeStatePath(pathInput),\n    \"utf8\"\n  ).catch((error) => {\n    if (\n      error &&\n      typeof error === \"object\" &&\n      \"code\" in error &&\n      error.code === \"ENOENT\"\n    ) {\n      return null;\n    }\n    throw error;\n  });\n  if (raw === null) {\n    return null;\n  }\n  return parseDaemonServiceRuntimeState(raw);\n}\n\nfunction parseDaemonServiceRuntimeState(\n  raw: string\n): DaemonServiceRuntimeState | null {\n  try {\n    const parsed = JSON.parse(raw);\n    if (!isDaemonServiceRuntimeStateObject(parsed)) {\n      return null;\n    }\n\n    return {\n      v: 1,\n      schema: DAEMON_SERVICE_RUNTIME_STATE_SCHEMA,\n      status: \"running\",\n      pid: parsed.pid,\n      mode: parsed.mode,\n      command: parsed.command,\n      gatewayUrl: parseNullableString(parsed.gatewayUrl),\n      openMeldProfileId: resolveStoredDaemonServiceOpenMeldProfileId(parsed),\n      stopRequestedAt: parseNullableString(parsed.stopRequestedAt),\n      heartbeatAt: parseNullableString(parsed.heartbeatAt),\n      startedAt: parsed.startedAt,\n      updatedAt: parsed.updatedAt,\n      managedBySystemService: parsed.managedBySystemService === true,\n      serviceController: parseDaemonServiceController(parsed.serviceController),\n      autoStart: parsed.autoStart === true,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction isDaemonServiceRuntimeStateObject(value: unknown): value is {\n  v: 1;\n  schema: string;\n  status: \"running\";\n  pid: number;\n  mode: DaemonRunMode;\n  command: string;\n  gatewayUrl: string | null;\n  openMeldProfileId?: string | null;\n  profile?: string | null;\n  stopRequestedAt: string | null;\n  heartbeatAt: string | null;\n  startedAt: string;\n  updatedAt: string;\n  managedBySystemService?: boolean;\n  serviceController?: string;\n  autoStart?: boolean;\n} {\n  if (!value || typeof value !== \"object\") {\n    return false;\n  }\n  const candidate = value as Record<string, unknown>;\n  return (\n    candidate.v === 1 &&\n    candidate.schema === DAEMON_SERVICE_RUNTIME_STATE_SCHEMA &&\n    candidate.status === \"running\" &&\n    typeof candidate.pid === \"number\" &&\n    candidate.pid > 0 &&\n    (candidate.mode === \"foreground\" || candidate.mode === \"background\") &&\n    typeof candidate.command === \"string\" &&\n    candidate.command.length > 0 &&\n    isValidNullableString(candidate.gatewayUrl) &&\n    isValidOptionalNullableString(candidate.openMeldProfileId) &&\n    isValidOptionalNullableString(candidate.profile) &&\n    isValidNullableString(candidate.stopRequestedAt) &&\n    isValidNullableString(candidate.heartbeatAt) &&\n    typeof candidate.startedAt === \"string\" &&\n    candidate.startedAt.length > 0 &&\n    typeof candidate.updatedAt === \"string\" &&\n    candidate.updatedAt.length > 0\n  );\n}\n\nexport function parseDaemonServiceController(\n  value: unknown\n): DaemonServiceController {\n  if (\n    value === \"launchd\" ||\n    value === \"systemd\" ||\n    value === \"windows-service\" ||\n    value === \"legacy-detached\" ||\n    value === \"unknown\"\n  ) {\n    return value;\n  }\n  return \"unknown\";\n}\n\nfunction isValidNullableString(value: unknown): value is string | null {\n  return value === null || typeof value === \"string\";\n}\n\nfunction isValidOptionalNullableString(\n  value: unknown\n): value is string | null | undefined {\n  return value === undefined || value === null || typeof value === \"string\";\n}\n\nfunction parseNullableString(value: unknown): string | null {\n  if (value === null) {\n    return null;\n  }\n  if (typeof value !== \"string\") {\n    return null;\n  }\n  return value;\n}\n\nfunction resolveStoredDaemonServiceOpenMeldProfileId(input: {\n  openMeldProfileId?: unknown;\n  profile?: unknown;\n}): string | null {\n  const openMeldProfileId = parseNullableString(input.openMeldProfileId);\n  const legacyProfile = parseNullableString(input.profile);\n  if (\n    openMeldProfileId &&\n    legacyProfile &&\n    openMeldProfileId !== legacyProfile\n  ) {\n    throw new Error(\"conflicting openMeldProfileId values\");\n  }\n  return openMeldProfileId ?? legacyProfile;\n}\n\nexport function isDaemonServiceRuntimeHeartbeatStale(\n  state: DaemonServiceRuntimeState\n): boolean {\n  const latestSignalAt = Math.max(\n    parseIsoTimestampOrZero(state.heartbeatAt),\n    parseIsoTimestampOrZero(state.updatedAt)\n  );\n  if (latestSignalAt <= 0) {\n    return false;\n  }\n  return Date.now() - latestSignalAt > DAEMON_HEARTBEAT_STALE_MS;\n}\n\nfunction parseIsoTimestampOrZero(value: string | null): number {\n  if (!value) {\n    return 0;\n  }\n  const parsed = Date.parse(value);\n  return Number.isFinite(parsed) ? parsed : 0;\n}\n\nasync function writeDaemonServiceRuntimeState(\n  state: DaemonServiceRuntimeState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const path = daemonServiceRuntimeStatePath(pathInput);\n  const runtimeRootPath = daemonRuntimeRootPath(pathInput);\n  await mkdir(runtimeRootPath, { recursive: true });\n  const tempPath = `${path}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n\n  try {\n    await writeFile(tempPath, `${JSON.stringify(state, null, 2)}\\n`, {\n      encoding: \"utf8\",\n      mode: 0o600,\n    });\n    await rename(tempPath, path);\n    await chmod(path, 0o600);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nasync function ensureDaemonRuntimeLayout(): Promise<void> {\n  await Promise.all([\n    mkdir(systemDir(), { recursive: true }),\n    mkdir(join(daemonRuntimeRootPath(), \"bin\"), { recursive: true }),\n    mkdir(daemonRuntimeBundlesPath(), { recursive: true }),\n    mkdir(join(daemonRuntimeRootPath(), \"data\"), { recursive: true }),\n    mkdir(join(daemonRuntimeRootPath(), \"logs\"), { recursive: true }),\n    mkdir(daemonRuntimeStateRootPath(), { recursive: true }),\n    mkdir(daemonRuntimeServiceManagerPath(), { recursive: true }),\n  ]);\n}\n\nfunction normalizeDaemonLifecycleIntent(\n  value: string\n): DaemonLifecycleIntent | null {\n  switch (value) {\n    case \"run_background\":\n    case \"run_foreground\":\n    case \"stop\":\n    case \"autostart\":\n    case \"status_cleanup\":\n    case \"startup_check\":\n    case \"start\":\n    case \"reinstall\":\n    case \"uninstall\":\n    case \"upgrade_reconcile\":\n      return value;\n    default:\n      return null;\n  }\n}\n\nasync function ensureDaemonTokenState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonTokenState> {\n  const current = await readDaemonTokenState(pathInput);\n  if (current) {\n    await chmod(daemonTokenPath(pathInput), 0o600).catch(() => undefined);\n    return current;\n  }\n\n  return await writeNewDaemonTokenState(pathInput);\n}\n\nasync function writeNewDaemonTokenState(\n  pathInput: OpenMeldPathResolutionInput\n): Promise<DaemonTokenState> {\n  const nowIso = new Date().toISOString();\n  const next: DaemonTokenState = {\n    v: 1,\n    schema: DAEMON_TOKEN_SCHEMA,\n    token: createDaemonTokenValue(),\n    issuedAt: nowIso,\n    updatedAt: nowIso,\n  };\n  await writeDaemonTokenState(next, pathInput);\n  return next;\n}\n\nasync function readDaemonInstallState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonInstallState | null> {\n  const raw = await readFile(daemonStatePath(pathInput), \"utf8\").catch(\n    (error) => {\n      if (\n        error &&\n        typeof error === \"object\" &&\n        \"code\" in error &&\n        error.code === \"ENOENT\"\n      ) {\n        return null;\n      }\n      throw error;\n    }\n  );\n  if (raw === null) {\n    return null;\n  }\n  return parseDaemonInstallState(raw);\n}\n\nfunction parseDaemonInstallState(raw: string): DaemonInstallState | null {\n  try {\n    const parsed = JSON.parse(raw) as Partial<DaemonInstallState>;\n    if (parsed.v !== 1) {\n      return null;\n    }\n    if (parsed.schema !== DAEMON_STATE_SCHEMA) {\n      return null;\n    }\n    if (typeof parsed.daemonVersion !== \"string\" || !parsed.daemonVersion) {\n      return null;\n    }\n    if (!isDaemonInstallSource(parsed.installSource)) {\n      return null;\n    }\n    if (typeof parsed.installedAt !== \"string\" || !parsed.installedAt) {\n      return null;\n    }\n    if (typeof parsed.updatedAt !== \"string\" || !parsed.updatedAt) {\n      return null;\n    }\n    return {\n      v: 1,\n      schema: DAEMON_STATE_SCHEMA,\n      daemonVersion: parsed.daemonVersion,\n      installSource: parsed.installSource,\n      installedAt: parsed.installedAt,\n      updatedAt: parsed.updatedAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction isDaemonInstallSource(value: unknown): value is DaemonInstallSource {\n  return value === \"cli.auto_check\" || value === \"daemon.command.install\";\n}\n\nasync function writeDaemonInstallState(\n  state: DaemonInstallState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const path = daemonStatePath(pathInput);\n  await mkdir(systemDir(pathInput), { recursive: true });\n  const tempPath = `${path}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n\n  try {\n    await writeFile(tempPath, `${JSON.stringify(state, null, 2)}\\n`, \"utf8\");\n    await rename(tempPath, path);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nasync function readDaemonTokenState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonTokenState | null> {\n  const raw = await readFile(daemonTokenPath(pathInput), \"utf8\").catch(\n    (error) => {\n      if (\n        error &&\n        typeof error === \"object\" &&\n        \"code\" in error &&\n        error.code === \"ENOENT\"\n      ) {\n        return null;\n      }\n      throw error;\n    }\n  );\n  if (raw === null) {\n    return null;\n  }\n  return parseDaemonTokenState(raw);\n}\n\nfunction parseDaemonTokenState(raw: string): DaemonTokenState | null {\n  try {\n    const parsed = JSON.parse(raw) as Partial<DaemonTokenState>;\n    if (parsed.v !== 1 || parsed.schema !== DAEMON_TOKEN_SCHEMA) {\n      return null;\n    }\n    if (typeof parsed.token !== \"string\" || parsed.token.length < 16) {\n      return null;\n    }\n    if (typeof parsed.issuedAt !== \"string\" || !parsed.issuedAt) {\n      return null;\n    }\n    if (typeof parsed.updatedAt !== \"string\" || !parsed.updatedAt) {\n      return null;\n    }\n    return {\n      v: 1,\n      schema: DAEMON_TOKEN_SCHEMA,\n      token: parsed.token,\n      issuedAt: parsed.issuedAt,\n      updatedAt: parsed.updatedAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\nasync function writeDaemonTokenState(\n  state: DaemonTokenState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const path = daemonTokenPath(pathInput);\n  await mkdir(systemDir(pathInput), { recursive: true });\n  const tempPath = `${path}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n\n  try {\n    await writeFile(tempPath, `${JSON.stringify(state, null, 2)}\\n`, {\n      encoding: \"utf8\",\n      mode: 0o600,\n    });\n    await rename(tempPath, path);\n    await chmod(path, 0o600);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nfunction isDaemonTokenExpired(state: DaemonTokenState): boolean {\n  const updatedAtMs = Date.parse(state.updatedAt);\n  if (!Number.isFinite(updatedAtMs)) {\n    return true;\n  }\n  return Date.now() - updatedAtMs >= DAEMON_TOKEN_ROTATE_MAX_AGE_MS;\n}\n\nfunction createDaemonTokenValue(): string {\n  return randomBytes(32).toString(\"base64url\");\n}\n\nasync function pathExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch (error) {\n    if (\n      error &&\n      typeof error === \"object\" &&\n      \"code\" in error &&\n      error.code === \"ENOENT\"\n    ) {\n      return false;\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;AA8BA,MAAM,sBAAsB;AAC5B,MAAa,sCACX;AACF,MAAa,kCAAkC;AAC/C,MAAa,sCACX;AACF,MAAa,wCACX;AACF,MAAa,wCACX;AACF,MAAa,4CACX;AACF,MAAM,sBAAsB;AAC5B,MAAM,iCAAiC,OAAU,KAAK;AACtD,MAAa,4BAA4B,MAAS;AAClD,MAAM,sCAAsC;AAC5C,MAAM,mCAAmC;AACzC,MAAM,oCAAoC;AAC1C,MAAM,iCAAiC;AACvC,MAAM,8BAA8B;AACpC,MAAM,0BAA0B;AAQhC,MAAM,oCACJ,IAAI,kBAAqD;AAE3D,SAAgB,oCAAyD;CACvE,MAAM,UAAU,kCAAkC,SAAS;CAC3D,OAAO,SAAS,UACd,QAAQ,cACN,uBAAuB,qCAAqC,CAAC,IAC7D,QAAQ,OACR;AACN;AACA,MAAM,kCAAkC;AACxC,MAAM,uDAAuD;CAC3D,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAM,sDAAsD;CAC1D,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAM,yDAAyD;CAC7D,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAM,8DAA8D;CAClE,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAa,wCACX;AACF,MAAa,oCAAoC;AAkHjD,eAAsB,gBACpB,YAAyC,CAAC,GACnB;CACvB,MAAM,CAAC,OAAO,iBAAiB,MAAM,QAAQ,IAAI,CAC/C,uBAAuB,SAAS,GAChC,WAAW,sBAAsB,SAAS,CAAC,CAC7C,CAAC;CACD,IAAI,SAAS,eACX,OAAO;EACL,WAAW;EACX;CACF;CAEF,OAAO;EACL,WAAW;EACX,OAAO;CACT;AACF;AAEA,eAAsB,uBACpB,YAAyC,CAAC,GACL;CACrC,MAAM,QAAQ,MAAM,8BAA8B,SAAS;CAC3D,IAAI,CAAC,OACH,OAAO;EACL,QAAQ;EACR,MAAM;EACN,KAAK;EACL,WAAW;EACX,WAAW;EACX,wBAAwB;EACxB,mBAAmB;EACnB,WAAW;CACb;CAEF,IAAI,CAAC,OAAO,UAAU,MAAM,GAAG,KAAK,MAAM,OAAO,GAC/C,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;EACjB,QAAQ;CACV;CAEF,IAAI,CAAC,WAAW,MAAM,GAAG,GACvB,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;EACjB,QAAQ;CACV;CAEF,IAAI,qCAAqC,KAAK,GAC5C,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;EACjB,QAAQ;CACV;CAEF,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;CACnB;AACF;AAEA,eAAsB,iCACpB,YAAyC,CAAC,GACC;CAC3C,OAAO,MAAM,8BAA8B,SAAS;AACtD;AAEA,SAAgB,oCACd,QAA2C,CAAC,GACd;CAC9B,MAAM,MAAM,MAAM,OAAO,QAAQ;CACjC,MAAM,yBACJ,MAAM,2BAA2B,QACjC,IAAA,8CAAmD;CACrD,MAAM,yBACJ,OAAO,MAAM,sBAAsB,YACnC,MAAM,kBAAkB,SAAS,IAC7B,MAAM,oBACN,IAAI;CACV,MAAM,YACJ,MAAM,cAAc,QACpB,IAAA,0CAA+C;CAEjD,OAAO;EACL;EACA,mBAAmB,6BAA6B,sBAAsB;EACtE;CACF;AACF;AAEA,eAAsB,6BACpB,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,+BAA+B,OAAO,SAAS;AACvD;AAEA,eAAsB,+BACpB,YAAyC,CAAC,GAC3B;CACf,MAAM,EAAE,4BAA4B,MAAM,OAAO;CACjD,MAAM,QAAQ,IAAI,CAChB,GAAG,8BAA8B,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC,GAC5D,wBAAwB,SAAS,CACnC,CAAC;AACH;AAEA,SAAgB,yBACd,UACA,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,eAAsB,kCACpB,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACA,iBAA8C,qCAAqC,GAC9C;CACrC,OAAO,MAAM,YAAY;EACvB,mBAAmB;EACnB,KAAK;EACL;EACA;CACF,CAAC;AACH;AAEA,eAAsB,kCACpB,MACe;CACf,MAAM,YAAY,IAAI;AACxB;AAEA,SAAgB,0BACd,UACA,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,SAAgB,+BACd,UACA,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,SAAgB,0CACd,UACA,MACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,SAAgB,+BACd,MACA,UACA,YAAyC,CAAC,GAC9B;CACZ,MAAM,iBAAiB,qCAAqC,SAAS;CACrE,MAAM,YAAY,uBAAuB,cAAc;CACvD,MAAM,iBAAiB,kCAAkC,SAAS;CAClE,IAAI,gBAAgB,UAAU,eAAe,cAAc,WAAW;EACpE,IAAI;EACJ,IAAI;GACF,YAAY,SAAS;EACvB,SAAS,OAAO;GACd,YAAY,QAAQ,OAAO,KAAK;EAClC;EACA,IAAI;EACJ,mBAAmB,UAChB,WACO,KAAA,IACL,UAAmB;GAClB,eAAe,SAAS,KAAK,KAAK;EACpC,CACF,CAAC,CACA,cAAc;GACb,eAAe,kBAAkB,OAAO,gBAAgB;EAC1D,CAAC;EACH,eAAe,kBAAkB,IAAI,gBAAgB;EACrD,OAAO;CACT;CACA,OAAO,oCAAoC;EACzC;EACA;EACA;EACA;CACF,CAAC;AACH;AAEA,eAAe,oCAAuC,OAKvC;CACb,MAAM,OAAO,MAAM,kCACjB,MAAM,MACN,MAAM,cACR;CACA,OAAO,MAAM,gBAAgB;EAC3B;EACA,KAAK,YAAY;GACf,MAAM,UAA6C;IACjD;IACA,QAAQ;IACR,UAAU,CAAC;IACX,WAAW,MAAM;IACjB,mCAAmB,IAAI,IAAI;GAC7B;GACA,IAAI;GACJ,IAAI;IACF,UAAU;KACR,IAAI;KACJ,OAAO,MAAM,kCAAkC,IAC7C,SACA,MAAM,QACR;IACF;GACF,SAAS,OAAO;IACd,UAAU;KAAE,IAAI;KAAO;IAAM;GAC/B,UAAU;IACR,OAAO,QAAQ,kBAAkB,OAAO,GACtC,MAAM,QAAQ,IAAI,CAAC,GAAG,QAAQ,iBAAiB,CAAC;IAElD,QAAQ,SAAS;GACnB;GACA,MAAM,WAAW,CACf,GAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,GACpC,GAAG,QAAQ,QACb,CAAC,CAAC,QACC,SAAS,OAAO,gBAAgB,YAAY,QAAQ,OAAO,MAAM,KACpE;GACA,IAAI,SAAS,WAAW,GACtB,MAAM,SAAS;GAEjB,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eACR,UACA,qEACF;GAEF,IAAI,CAAC,QAAQ,IACX,MAAM,QAAQ;GAEhB,OAAO,QAAQ;EACjB;EACA,gBAAgB;GACd,SAAS,MAAM,KAAK;GACpB,WAAW;GACX,QAAQ,MAAM,KAAK;GACnB,SAAS;GACT,mBAAmB;EACrB;CACF,CAAC;AACH;AAEA,eAAsB,qCAA8E;CAClG,MAAM,OAAO,MAAM,aAAa;EAC9B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,qCAAqC;CACvD,CAAC;CACD,IAAI,CAAC,MACH,OAAO;CAET,MAAM,SACJ,OAAO,KAAK,WAAW,WACnB,+BAA+B,KAAK,MAAM,IAC1C;CACN,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,KAAK,IAAI;CACzE,IAAI,CAAC,UAAU,QAAQ,WAAW,GAChC,OAAO;CAET,MAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM,KAAA;CACtD,MAAM,YACJ,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,KAAK,CAAC,CAAC,SAAS,IACjE,KAAK,UAAU,KAAK,IACpB,KAAA;CACN,MAAM,KACJ,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,IACnD,KAAK,GAAG,KAAK,IACb,KAAA;CACN,OAAO;EACL;EACA;EACA,GAAI,OAAO,QAAQ,WAAW,EAAE,IAAI,IAAI,CAAC;EACzC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACjC,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC;CACrB;AACF;AAEA,eAAsB,gDAAyF;CAC7G,MAAM,oBAAoB;EACxB,mBAAmB;EACnB,KAAK;EACL,gBAAgB,qCAAqC;CACvD,CAAC;CACD,OAAO,MAAM,mCAAmC;AAClD;AAEA,eAAsB,cAAc,OAGH;CAC/B,MAAM,gBAAgB,MAAM,uBAAuB;CACnD,MAAM,gBAAgB,MAAM,WAAW,sBAAsB,CAAC;CAC9D,IACE,iBACA,iBACA,cAAc,kBAAkB,MAAM,eACtC;EACA,MAAM,uBAAuB;EAC7B,OAAO;GACL,QAAQ;GACR,OAAO;EACT;CACF;CAEA,MAAM,0BAA0B;CAChC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,MAAM,YAAgC;EACpC,GAAG;EACH,QAAQ;EACR,eAAe,MAAM;EACrB,eAAe,MAAM;EACrB,aAAa,eAAe,eAAe;EAC3C,WAAW;CACb;CACA,MAAM,wBAAwB,SAAS;CACvC,MAAM,uBAAuB;CAE7B,OAAO;EACL,QAAQ;EACR,OAAO;CACT;AACF;AAEA,eAAsB,gBACpB,YAAyC,CAAC,GACV;CAChC,MAAM,CAAC,UAAU,eAAe,YAAY,MAAM,QAAQ,IAAI;EAC5D,WAAW,gBAAgB,SAAS,CAAC;EACrC,WAAW,sBAAsB,SAAS,CAAC;EAC3C,WAAW,gBAAgB,SAAS,CAAC;CACvC,CAAC;CAED,MAAM,QAAQ,IAAI;EAChB,GAAG,gBAAgB,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EAC9C,GAAG,gBAAgB,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EAC9C,GAAG,8BAA8B,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EAC5D,GAAG,sBAAsB,SAAS,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACvE,CAAC;CAED,OAAO,EACL,SAAS,YAAY,iBAAiB,SACxC;AACF;AAEA,SAAgB,gBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,UAAU,SAAS,GAAG,qBAAqB;AACzD;AAEA,SAAgB,sBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,WAAW,SAAS,GAAG,QAAQ;AAC7C;AAEA,SAAgB,8BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,sBAAsB;AACtE;AAEA,SAAgB,sBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,MAAM;AACtD;AAEA,SAAgB,yBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,SAAS;AACzD;AAEA,SAAgB,2BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,OAAO;AACvD;AAEA,SAAgB,2BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,sBAAsB,SAAS,GAC/B,QACA,iCACF;AACF;AAEA,SAAgB,0BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,sBAAsB,SAAS,GAC/B,QACA,gCACF;AACF;AAEA,SAAgB,mCACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,2BAA2B,SAAS,GACpC,mCACF;AACF;AAEA,SAAgB,+BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,2BAA2B,SAAS,GACpC,8BACF;AACF;AAEA,SAAgB,gCACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,iBAAiB;AACjE;AAEA,SAAgB,gCACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,gCAAgC,SAAS,GACzC,+BACF;AACF;AAEA,SAAgB,yCACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,qDAAqD,OACvD;AACF;AAEA,SAAgB,wCACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,oDAAoD,OACtD;AACF;AAEA,SAAgB,8CACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,uDAAuD,OACzD;AACF;AAEA,SAAgB,yCACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,4DAA4D,OAC9D;AACF;AAEA,SAAgB,oCACd,YAAyC,CAAC,GAChC;CACV,OAAO,CACL,yCAAyC,SAAS,GAClD,yCAAyC,SAAS,CACpD;AACF;AAEA,SAAgB,uCACd,YAAyC,CAAC,GAChC;CACV,OAAO,CACL,wCAAwC,SAAS,GACjD,GAAG,oCAAoC,SAAS,CAClD;AACF;AAEA,SAAgB,gBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,UAAU,SAAS,GAAG,mBAAmB;AACvD;AAEA,eAAsB,kCACpB,UACA,YAAyC,CAAC,GAC3B;CACf,IAAI,CAAC,UAAU;EACb,MAAM,GAAG,gBAAgB,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EACpD;CACF;CACA,MAAM,wBAAwB,UAAU,SAAS;AACnD;AAEA,SAAgB,kCACd,YAAyC,CAAC,GAClC;CACR,MAAM,cAAc,sBAAsB,SAAS;CACnD,MAAM,SAAS,WAAW,QAAQ,CAAC,CAChC,OAAO,WAAW,CAAC,CACnB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,IAAI,QAAQ,aAAa,SACvB,OAAO,wCAAwC;CAEjD,OAAO,KAAK,OAAO,GAAG,2BAA2B,OAAO,MAAM;AAChE;AAEA,eAAsB,8BACpB,YAAyC,CAAC,GACzB;CAEjB,QAAO,MADa,uBAAuB,SAAS,EAAA,CACvC;AACf;AAEA,eAAsB,uCACpB,YAAyC,CAAC,GACf;CAC3B,MAAM,UAAU,MAAM,qBAAqB,SAAS;CACpD,IAAI,WAAW,CAAC,qBAAqB,OAAO,GAAG;EAC7C,MAAM,MAAM,gBAAgB,SAAS,GAAG,GAAK,CAAC,CAAC,YAAY,KAAA,CAAS;EACpE,OAAO;CACT;CAEA,OAAO,MAAM,yBAAyB,SAAS;AACjD;AAEA,eAAsB,4BACpB,YAAyC,CAAC,GAClB;CAExB,QAAO,MADa,qBAAqB,SAAS,EAAA,EACpC,SAAS;AACzB;AAEA,SAAS,WAAW,KAAsB;CACxC,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,EACL,iBAAiB,SAChB,MAAgC,SAAS;CAE9C;AACF;AAEA,eAAe,8BACb,YAAyC,CAAC,GACC;CAC3C,MAAM,MAAM,MAAM,SAChB,8BAA8B,SAAS,GACvC,MACF,CAAC,CAAC,OAAO,UAAU;EACjB,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR,CAAC;CACD,IAAI,QAAQ,MACV,OAAO;CAET,OAAO,+BAA+B,GAAG;AAC3C;AAEA,SAAS,+BACP,KACkC;CAClC,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,CAAC,kCAAkC,MAAM,GAC3C,OAAO;EAGT,OAAO;GACL,GAAG;GACH,QAAQ;GACR,QAAQ;GACR,KAAK,OAAO;GACZ,MAAM,OAAO;GACb,SAAS,OAAO;GAChB,YAAY,oBAAoB,OAAO,UAAU;GACjD,mBAAmB,4CAA4C,MAAM;GACrE,iBAAiB,oBAAoB,OAAO,eAAe;GAC3D,aAAa,oBAAoB,OAAO,WAAW;GACnD,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,wBAAwB,OAAO,2BAA2B;GAC1D,mBAAmB,6BAA6B,OAAO,iBAAiB;GACxE,WAAW,OAAO,cAAc;EAClC;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,kCAAkC,OAiBzC;CACA,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAET,MAAM,YAAY;CAClB,OACE,UAAU,MAAM,KAChB,UAAU,WAAA,sCACV,UAAU,WAAW,aACrB,OAAO,UAAU,QAAQ,YACzB,UAAU,MAAM,MACf,UAAU,SAAS,gBAAgB,UAAU,SAAS,iBACvD,OAAO,UAAU,YAAY,YAC7B,UAAU,QAAQ,SAAS,KAC3B,sBAAsB,UAAU,UAAU,KAC1C,8BAA8B,UAAU,iBAAiB,KACzD,8BAA8B,UAAU,OAAO,KAC/C,sBAAsB,UAAU,eAAe,KAC/C,sBAAsB,UAAU,WAAW,KAC3C,OAAO,UAAU,cAAc,YAC/B,UAAU,UAAU,SAAS,KAC7B,OAAO,UAAU,cAAc,YAC/B,UAAU,UAAU,SAAS;AAEjC;AAEA,SAAgB,6BACd,OACyB;CACzB,IACE,UAAU,aACV,UAAU,aACV,UAAU,qBACV,UAAU,qBACV,UAAU,WAEV,OAAO;CAET,OAAO;AACT;AAEA,SAAS,sBAAsB,OAAwC;CACrE,OAAO,UAAU,QAAQ,OAAO,UAAU;AAC5C;AAEA,SAAS,8BACP,OACoC;CACpC,OAAO,UAAU,KAAA,KAAa,UAAU,QAAQ,OAAO,UAAU;AACnE;AAEA,SAAS,oBAAoB,OAA+B;CAC1D,IAAI,UAAU,MACZ,OAAO;CAET,IAAI,OAAO,UAAU,UACnB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,4CAA4C,OAGnC;CAChB,MAAM,oBAAoB,oBAAoB,MAAM,iBAAiB;CACrE,MAAM,gBAAgB,oBAAoB,MAAM,OAAO;CACvD,IACE,qBACA,iBACA,sBAAsB,eAEtB,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO,qBAAqB;AAC9B;AAEA,SAAgB,qCACd,OACS;CACT,MAAM,iBAAiB,KAAK,IAC1B,wBAAwB,MAAM,WAAW,GACzC,wBAAwB,MAAM,SAAS,CACzC;CACA,IAAI,kBAAkB,GACpB,OAAO;CAET,OAAO,KAAK,IAAI,IAAI,iBAAiB;AACvC;AAEA,SAAS,wBAAwB,OAA8B;CAC7D,IAAI,CAAC,OACH,OAAO;CAET,MAAM,SAAS,KAAK,MAAM,KAAK;CAC/B,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;AAEA,eAAe,+BACb,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,OAAO,8BAA8B,SAAS;CAEpD,MAAM,MADkB,sBAAsB,SACpB,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,WAAW,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CACxD,IAAI,oBAAoB;CAExB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK;GAC/D,UAAU;GACV,MAAM;EACR,CAAC;EACD,MAAM,OAAO,UAAU,IAAI;EAC3B,MAAM,MAAM,MAAM,GAAK;EACvB,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,eAAe,4BAA2C;CACxD,MAAM,QAAQ,IAAI;EAChB,MAAM,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;EACtC,MAAM,KAAK,sBAAsB,GAAG,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;EAC/D,MAAM,yBAAyB,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,MAAM,KAAK,sBAAsB,GAAG,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAChE,MAAM,KAAK,sBAAsB,GAAG,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAChE,MAAM,2BAA2B,GAAG,EAAE,WAAW,KAAK,CAAC;EACvD,MAAM,gCAAgC,GAAG,EAAE,WAAW,KAAK,CAAC;CAC9D,CAAC;AACH;AAEA,SAAS,+BACP,OAC8B;CAC9B,QAAQ,OAAR;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,qBACH,OAAO;EACT,SACE,OAAO;CACX;AACF;AAEA,eAAe,uBACb,YAAyC,CAAC,GACf;CAC3B,MAAM,UAAU,MAAM,qBAAqB,SAAS;CACpD,IAAI,SAAS;EACX,MAAM,MAAM,gBAAgB,SAAS,GAAG,GAAK,CAAC,CAAC,YAAY,KAAA,CAAS;EACpE,OAAO;CACT;CAEA,OAAO,MAAM,yBAAyB,SAAS;AACjD;AAEA,eAAe,yBACb,WAC2B;CAC3B,MAAM,0BAAS,IAAI,KAAK,EAAA,CAAE,YAAY;CACtC,MAAM,OAAyB;EAC7B,GAAG;EACH,QAAQ;EACR,OAAO,uBAAuB;EAC9B,UAAU;EACV,WAAW;CACb;CACA,MAAM,sBAAsB,MAAM,SAAS;CAC3C,OAAO;AACT;AAEA,eAAe,uBACb,YAAyC,CAAC,GACN;CACpC,MAAM,MAAM,MAAM,SAAS,gBAAgB,SAAS,GAAG,MAAM,CAAC,CAAC,OAC5D,UAAU;EACT,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR,CACF;CACA,IAAI,QAAQ,MACV,OAAO;CAET,OAAO,wBAAwB,GAAG;AACpC;AAEA,SAAS,wBAAwB,KAAwC;CACvE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,MAAM,GACf,OAAO;EAET,IAAI,OAAO,WAAW,qBACpB,OAAO;EAET,IAAI,OAAO,OAAO,kBAAkB,YAAY,CAAC,OAAO,eACtD,OAAO;EAET,IAAI,CAAC,sBAAsB,OAAO,aAAa,GAC7C,OAAO;EAET,IAAI,OAAO,OAAO,gBAAgB,YAAY,CAAC,OAAO,aACpD,OAAO;EAET,IAAI,OAAO,OAAO,cAAc,YAAY,CAAC,OAAO,WAClD,OAAO;EAET,OAAO;GACL,GAAG;GACH,QAAQ;GACR,eAAe,OAAO;GACtB,eAAe,OAAO;GACtB,aAAa,OAAO;GACpB,WAAW,OAAO;EACpB;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,sBAAsB,OAA8C;CAC3E,OAAO,UAAU,oBAAoB,UAAU;AACjD;AAEA,eAAe,wBACb,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,OAAO,gBAAgB,SAAS;CACtC,MAAM,MAAM,UAAU,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,WAAW,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CACxD,IAAI,oBAAoB;CAExB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM;EACvE,MAAM,OAAO,UAAU,IAAI;EAC3B,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,eAAe,qBACb,YAAyC,CAAC,GACR;CAClC,MAAM,MAAM,MAAM,SAAS,gBAAgB,SAAS,GAAG,MAAM,CAAC,CAAC,OAC5D,UAAU;EACT,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR,CACF;CACA,IAAI,QAAQ,MACV,OAAO;CAET,OAAO,sBAAsB,GAAG;AAClC;AAEA,SAAS,sBAAsB,KAAsC;CACnE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,MAAM,KAAK,OAAO,WAAW,qBACtC,OAAO;EAET,IAAI,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,SAAS,IAC5D,OAAO;EAET,IAAI,OAAO,OAAO,aAAa,YAAY,CAAC,OAAO,UACjD,OAAO;EAET,IAAI,OAAO,OAAO,cAAc,YAAY,CAAC,OAAO,WAClD,OAAO;EAET,OAAO;GACL,GAAG;GACH,QAAQ;GACR,OAAO,OAAO;GACd,UAAU,OAAO;GACjB,WAAW,OAAO;EACpB;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,sBACb,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,OAAO,gBAAgB,SAAS;CACtC,MAAM,MAAM,UAAU,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,WAAW,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CACxD,IAAI,oBAAoB;CAExB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK;GAC/D,UAAU;GACV,MAAM;EACR,CAAC;EACD,MAAM,OAAO,UAAU,IAAI;EAC3B,MAAM,MAAM,MAAM,GAAK;EACvB,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,SAAS,qBAAqB,OAAkC;CAC9D,MAAM,cAAc,KAAK,MAAM,MAAM,SAAS;CAC9C,IAAI,CAAC,OAAO,SAAS,WAAW,GAC9B,OAAO;CAET,OAAO,KAAK,IAAI,IAAI,eAAe;AACrC;AAEA,SAAS,yBAAiC;CACxC,OAAO,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;AAC7C;AAEA,eAAe,WAAW,MAAgC;CACxD,IAAI;EACF,MAAM,KAAK,IAAI;EACf,OAAO;CACT,SAAS,OAAO;EACd,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR;AACF"}
+{"version":3,"file":"daemon-state-CiTQcAWA.js","names":[],"sources":["../src/config/daemon-state.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { createHash, randomBytes } from \"node:crypto\";\nimport {\n  chmod,\n  mkdir,\n  readFile,\n  rename,\n  rm,\n  stat,\n  writeFile,\n} from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  acquireLock,\n  type OpenMeldLock,\n  readLockMeta,\n  releaseLock,\n  runWithHeldLock,\n  tryCleanupStaleLock,\n} from \"./lock\";\nimport type { OpenMeldEnvPreset, OpenMeldPathResolutionInput } from \"./paths\";\nimport {\n  resolveOpenMeldEnvPreset,\n  resolveOpenMeldRootDir,\n  resolveOpenMeldServiceOwnedPathInput,\n  runtimeDir,\n  systemDir,\n} from \"./paths\";\n\nconst DAEMON_STATE_SCHEMA = \"openmeld-daemon-install-v1\";\nexport const DAEMON_SERVICE_RUNTIME_STATE_SCHEMA =\n  \"openmeld-daemon-service-state-v1\";\nexport const DAEMON_SERVICE_RUNTIME_MODE_ENV = \"OPENMELD_DAEMON_RUNTIME_MODE\";\nexport const DAEMON_SERVICE_RUNTIME_DETACHED_ENV =\n  \"OPENMELD_DAEMON_RUNTIME_DETACHED\";\nexport const DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV =\n  \"OPENMELD_DAEMON_SERVICE_CONTROLLER\";\nexport const DAEMON_SERVICE_RUNTIME_AUTO_START_ENV =\n  \"OPENMELD_DAEMON_SERVICE_AUTO_START\";\nexport const DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV =\n  \"OPENMELD_DAEMON_RUNTIME_SYSTEM_SERVICE\";\nconst DAEMON_TOKEN_SCHEMA = \"openmeld-daemon-token-v1\";\nconst DAEMON_TOKEN_ROTATE_MAX_AGE_MS = 24 * 60 * 60 * 1000;\nexport const DAEMON_HEARTBEAT_STALE_MS = 3 * 60 * 1000;\nconst DAEMON_ACTIVE_BUNDLE_STATE_FILENAME = \"active-bundle.json\";\nconst DAEMON_DISPATCH_JOURNAL_FILENAME = \"daemon-dispatch-journal.jsonl\";\nconst DAEMON_LIFECYCLE_JOURNAL_FILENAME = \"daemon-lifecycle-journal.jsonl\";\nconst DAEMON_REPAIR_JOURNAL_FILENAME = \"repair-journal.json\";\nconst DAEMON_SERVICE_LOCK_PROFILE = \"daemon-service\";\nconst DAEMON_SERVICE_LOCK_KEY = \"daemon-service-run\";\ntype DaemonServiceLifecycleLockContext = {\n  lock: OpenMeldLock;\n  active: boolean;\n  failures: unknown[];\n  ownerRoot: string;\n  pendingOperations: Set<Promise<void>>;\n};\nconst daemonServiceLifecycleLockContext =\n  new AsyncLocalStorage<DaemonServiceLifecycleLockContext>();\n\nexport function currentDaemonServiceLifecycleLock(): OpenMeldLock | null {\n  const context = daemonServiceLifecycleLockContext.getStore();\n  return context?.active &&\n    context.ownerRoot ===\n      resolveOpenMeldRootDir(resolveOpenMeldServiceOwnedPathInput())\n    ? context.lock\n    : null;\n}\nconst DAEMON_STABLE_LAUNCHER_FILENAME = \"daemon-service-launcher.mjs\";\nconst DAEMON_SERVICE_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET = {\n  prod: \"OpenMeld Service\",\n  \"dev-local\": \"OpenMeld Service Dev\",\n  canary: \"OpenMeld Service Canary\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nconst DAEMON_SERVICE_BINARY_EXECUTABLE_FILENAME_BY_PRESET = {\n  prod: \"OpenMeld Service Binary\",\n  \"dev-local\": \"OpenMeld Service Binary Dev\",\n  canary: \"OpenMeld Service Binary Canary\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nconst DAEMON_SERVICE_UPDATE_WORKER_BINARY_FILENAME_BY_PRESET = {\n  prod: \"OpenMeld Update Worker Binary\",\n  \"dev-local\": \"OpenMeld Update Worker Binary Dev\",\n  canary: \"OpenMeld Update Worker Binary Canary\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nconst DAEMON_SERVICE_LEGACY_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET = {\n  prod: \"openmeld-service\",\n  \"dev-local\": \"openmeld-dev-service\",\n  canary: \"openmeld-canary-service\",\n} as const satisfies Record<OpenMeldEnvPreset, string>;\nexport const DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE =\n  DAEMON_SERVICE_LOCK_PROFILE;\nexport const DAEMON_SERVICE_LIFECYCLE_LOCK_KEY = DAEMON_SERVICE_LOCK_KEY;\nexport type DaemonServiceLifecycleLock = OpenMeldLock;\n\nexport type DaemonLifecycleIntent =\n  | \"run_background\"\n  | \"run_foreground\"\n  | \"stop\"\n  | \"autostart\"\n  | \"status_cleanup\"\n  | \"startup_check\"\n  | \"start\"\n  | \"reinstall\"\n  | \"uninstall\"\n  | \"upgrade_reconcile\";\n\nexport type DaemonLifecycleLockMeta = {\n  intent: DaemonLifecycleIntent;\n  command: string;\n  pid?: number;\n  sessionId?: string;\n  at?: string;\n};\n\nexport type DaemonInstallSource = \"cli.auto_check\" | \"daemon.command.install\";\nexport type DaemonRunMode = \"foreground\" | \"background\";\nexport type DaemonServiceController =\n  | \"launchd\"\n  | \"systemd\"\n  | \"windows-service\"\n  | \"legacy-detached\"\n  | \"unknown\";\n\ntype BaseDaemonServiceRuntimeState = {\n  mode: DaemonRunMode;\n  command: string;\n  gatewayUrl: string | null;\n  openMeldProfileId: string | null;\n  stopRequestedAt: string | null;\n  startedAt: string;\n  updatedAt: string;\n  heartbeatAt: string | null;\n  managedBySystemService: boolean;\n  serviceController: DaemonServiceController;\n  autoStart: boolean;\n};\n\nexport type DaemonServiceRuntimeState = BaseDaemonServiceRuntimeState & {\n  v: 1;\n  schema: typeof DAEMON_SERVICE_RUNTIME_STATE_SCHEMA;\n  status: \"running\";\n  pid: number;\n};\n\nexport type DaemonServiceRuntimeStatus = {\n  status: \"running\" | \"stale\" | \"not_running\" | \"unknown\";\n  mode: DaemonRunMode | null;\n  pid: number | null;\n  startedAt: string | null;\n  updatedAt: string | null;\n  managedBySystemService: boolean;\n  serviceController: DaemonServiceRuntimeState[\"serviceController\"];\n  autoStart: boolean;\n  reason?: string;\n};\n\nexport type DaemonServiceRuntimeMetadataInput = {\n  managedBySystemService?: boolean;\n  serviceController?: string;\n  autoStart?: boolean;\n  env?: NodeJS.ProcessEnv;\n};\n\nexport type DaemonServiceRuntimeMetadata = {\n  managedBySystemService: boolean;\n  serviceController: DaemonServiceController;\n  autoStart: boolean;\n};\n\nexport type DaemonInstallState = {\n  v: 1;\n  schema: typeof DAEMON_STATE_SCHEMA;\n  daemonVersion: string;\n  installSource: DaemonInstallSource;\n  installedAt: string;\n  updatedAt: string;\n};\n\nexport type DaemonTokenState = {\n  v: 1;\n  schema: typeof DAEMON_TOKEN_SCHEMA;\n  token: string;\n  issuedAt: string;\n  updatedAt: string;\n};\n\nexport type DaemonInstallResult = {\n  status: \"installed\" | \"already_installed\";\n  state: DaemonInstallState;\n};\n\nexport type DaemonUninstallResult = {\n  removed: boolean;\n};\n\nexport type DaemonStatus =\n  | {\n      installed: true;\n      state: DaemonInstallState;\n    }\n  | {\n      installed: false;\n      state: null;\n    };\n\nexport async function getDaemonStatus(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonStatus> {\n  const [state, runtimeExists] = await Promise.all([\n    readDaemonInstallState(pathInput),\n    pathExists(daemonRuntimeRootPath(pathInput)),\n  ]);\n  if (state && runtimeExists) {\n    return {\n      installed: true,\n      state,\n    };\n  }\n  return {\n    installed: false,\n    state: null,\n  };\n}\n\nexport async function getDaemonRuntimeStatus(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonServiceRuntimeStatus> {\n  const state = await readDaemonServiceRuntimeState(pathInput);\n  if (!state) {\n    return {\n      status: \"not_running\",\n      mode: null,\n      pid: null,\n      startedAt: null,\n      updatedAt: null,\n      managedBySystemService: false,\n      serviceController: \"unknown\",\n      autoStart: false,\n    };\n  }\n  if (!Number.isInteger(state.pid) || state.pid <= 0) {\n    return {\n      status: \"stale\",\n      mode: state.mode,\n      pid: state.pid,\n      startedAt: state.startedAt,\n      updatedAt: state.updatedAt,\n      managedBySystemService: state.managedBySystemService,\n      serviceController: state.serviceController,\n      autoStart: state.autoStart,\n      reason: \"invalid_pid\",\n    };\n  }\n  if (!isPidAlive(state.pid)) {\n    return {\n      status: \"stale\",\n      mode: state.mode,\n      pid: state.pid,\n      startedAt: state.startedAt,\n      updatedAt: state.updatedAt,\n      managedBySystemService: state.managedBySystemService,\n      serviceController: state.serviceController,\n      autoStart: state.autoStart,\n      reason: \"process_not_alive\",\n    };\n  }\n  if (isDaemonServiceRuntimeHeartbeatStale(state)) {\n    return {\n      status: \"stale\",\n      mode: state.mode,\n      pid: state.pid,\n      startedAt: state.startedAt,\n      updatedAt: state.updatedAt,\n      managedBySystemService: state.managedBySystemService,\n      serviceController: state.serviceController,\n      autoStart: state.autoStart,\n      reason: \"heartbeat_stale\",\n    };\n  }\n  return {\n    status: \"running\",\n    mode: state.mode,\n    pid: state.pid,\n    startedAt: state.startedAt,\n    updatedAt: state.updatedAt,\n    managedBySystemService: state.managedBySystemService,\n    serviceController: state.serviceController,\n    autoStart: state.autoStart,\n  };\n}\n\nexport async function readDaemonServiceRuntimeSnapshot(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonServiceRuntimeState | null> {\n  return await readDaemonServiceRuntimeState(pathInput);\n}\n\nexport function resolveDaemonServiceRuntimeMetadata(\n  input: DaemonServiceRuntimeMetadataInput = {}\n): DaemonServiceRuntimeMetadata {\n  const env = input.env ?? process.env;\n  const managedBySystemService =\n    input.managedBySystemService === true ||\n    env[DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV] === \"1\";\n  const serviceControllerInput =\n    typeof input.serviceController === \"string\" &&\n    input.serviceController.length > 0\n      ? input.serviceController\n      : env[DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV];\n  const autoStart =\n    input.autoStart === true ||\n    env[DAEMON_SERVICE_RUNTIME_AUTO_START_ENV] === \"1\";\n\n  return {\n    managedBySystemService,\n    serviceController: parseDaemonServiceController(serviceControllerInput),\n    autoStart,\n  };\n}\n\nexport async function setDaemonServiceRuntimeState(\n  state: DaemonServiceRuntimeState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  await writeDaemonServiceRuntimeState(state, pathInput);\n}\n\nexport async function clearDaemonServiceRuntimeState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const { clearDaemonRuntimeLease } = await import(\"./daemon-runtime-lease\");\n  await Promise.all([\n    rm(daemonServiceRuntimeStatePath(pathInput), { force: true }),\n    clearDaemonRuntimeLease(pathInput),\n  ]);\n}\n\nexport function withDaemonServiceRunLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"run_background\",\n    command: \"openmeld service start\",\n  }\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport async function acquireDaemonServiceLifecycleLock(\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"run_background\",\n    command: \"openmeld service start\",\n  },\n  pathResolution: OpenMeldPathResolutionInput = resolveOpenMeldServiceOwnedPathInput()\n): Promise<DaemonServiceLifecycleLock> {\n  return await acquireLock({\n    openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    key: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n    meta,\n    pathResolution,\n  });\n}\n\nexport async function releaseDaemonServiceLifecycleLock(\n  lock: DaemonServiceLifecycleLock\n): Promise<void> {\n  await releaseLock(lock);\n}\n\nexport function withDaemonServiceStopLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"stop\",\n    command: \"openmeld service stop\",\n  }\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport function withDaemonServiceReconcileLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta = {\n    intent: \"upgrade_reconcile\",\n    command: \"openmeld service update\",\n  }\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport function withDaemonServiceRegistrationMutationLock<T>(\n  callback: () => Promise<T>,\n  meta: DaemonLifecycleLockMeta\n): Promise<T> {\n  return withDaemonServiceLifecycleLock(meta, callback);\n}\n\nexport function withDaemonServiceLifecycleLock<T>(\n  meta: DaemonLifecycleLockMeta,\n  callback: () => Promise<T>,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<T> {\n  const pathResolution = resolveOpenMeldServiceOwnedPathInput(pathInput);\n  const ownerRoot = resolveOpenMeldRootDir(pathResolution);\n  const currentContext = daemonServiceLifecycleLockContext.getStore();\n  if (currentContext?.active && currentContext.ownerRoot === ownerRoot) {\n    let operation: Promise<T>;\n    try {\n      operation = callback();\n    } catch (error) {\n      operation = Promise.reject(error);\n    }\n    let trackedOperation: Promise<void>;\n    trackedOperation = operation\n      .then(\n        () => undefined,\n        (error: unknown) => {\n          currentContext.failures.push(error);\n        }\n      )\n      .finally(() => {\n        currentContext.pendingOperations.delete(trackedOperation);\n      });\n    currentContext.pendingOperations.add(trackedOperation);\n    return operation;\n  }\n  return withDaemonServiceLifecycleOwnerLock({\n    callback,\n    meta,\n    ownerRoot,\n    pathResolution,\n  });\n}\n\nasync function withDaemonServiceLifecycleOwnerLock<T>(input: {\n  callback: () => Promise<T>;\n  meta: DaemonLifecycleLockMeta;\n  ownerRoot: string;\n  pathResolution: OpenMeldPathResolutionInput;\n}): Promise<T> {\n  const lock = await acquireDaemonServiceLifecycleLock(\n    input.meta,\n    input.pathResolution\n  );\n  return await runWithHeldLock({\n    lock,\n    run: async () => {\n      const context: DaemonServiceLifecycleLockContext = {\n        lock,\n        active: true,\n        failures: [],\n        ownerRoot: input.ownerRoot,\n        pendingOperations: new Set(),\n      };\n      let outcome: { ok: true; value: T } | { ok: false; error: unknown };\n      try {\n        outcome = {\n          ok: true,\n          value: await daemonServiceLifecycleLockContext.run(\n            context,\n            input.callback\n          ),\n        };\n      } catch (error) {\n        outcome = { ok: false, error };\n      } finally {\n        while (context.pendingOperations.size > 0) {\n          await Promise.all([...context.pendingOperations]);\n        }\n        context.active = false;\n      }\n      const failures = [\n        ...(outcome.ok ? [] : [outcome.error]),\n        ...context.failures,\n      ].filter(\n        (failure, index, allFailures) => allFailures.indexOf(failure) === index\n      );\n      if (failures.length === 1) {\n        throw failures[0];\n      }\n      if (failures.length > 1) {\n        throw new AggregateError(\n          failures,\n          \"daemon service lifecycle mutation failed in more than one operation\"\n        );\n      }\n      if (!outcome.ok) {\n        throw outcome.error;\n      }\n      return outcome.value;\n    },\n    releaseContext: {\n      command: input.meta.command,\n      component: \"daemon_service_lifecycle\",\n      intent: input.meta.intent,\n      lockKey: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n      openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    },\n  });\n}\n\nexport async function readDaemonServiceLifecycleLockMeta(): Promise<DaemonLifecycleLockMeta | null> {\n  const meta = await readLockMeta({\n    openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    key: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n    pathResolution: resolveOpenMeldServiceOwnedPathInput(),\n  });\n  if (!meta) {\n    return null;\n  }\n  const intent =\n    typeof meta.intent === \"string\"\n      ? normalizeDaemonLifecycleIntent(meta.intent)\n      : null;\n  const command = typeof meta.command === \"string\" ? meta.command.trim() : \"\";\n  if (!intent || command.length === 0) {\n    return null;\n  }\n  const pid = typeof meta.pid === \"number\" ? meta.pid : undefined;\n  const sessionId =\n    typeof meta.sessionId === \"string\" && meta.sessionId.trim().length > 0\n      ? meta.sessionId.trim()\n      : undefined;\n  const at =\n    typeof meta.at === \"string\" && meta.at.trim().length > 0\n      ? meta.at.trim()\n      : undefined;\n  return {\n    intent,\n    command,\n    ...(typeof pid === \"number\" ? { pid } : {}),\n    ...(sessionId ? { sessionId } : {}),\n    ...(at ? { at } : {}),\n  };\n}\n\nexport async function readDaemonServiceLifecycleLockMetaWithCleanup(): Promise<DaemonLifecycleLockMeta | null> {\n  await tryCleanupStaleLock({\n    openMeldProfileId: DAEMON_SERVICE_LIFECYCLE_LOCK_PROFILE,\n    key: DAEMON_SERVICE_LIFECYCLE_LOCK_KEY,\n    pathResolution: resolveOpenMeldServiceOwnedPathInput(),\n  });\n  return await readDaemonServiceLifecycleLockMeta();\n}\n\nexport async function installDaemon(input: {\n  daemonVersion: string;\n  source: DaemonInstallSource;\n}): Promise<DaemonInstallResult> {\n  const existingState = await readDaemonInstallState();\n  const runtimeExists = await pathExists(daemonRuntimeRootPath());\n  if (\n    existingState &&\n    runtimeExists &&\n    existingState.daemonVersion === input.daemonVersion\n  ) {\n    await ensureDaemonTokenState();\n    return {\n      status: \"already_installed\",\n      state: existingState,\n    };\n  }\n\n  await ensureDaemonRuntimeLayout();\n  const now = new Date().toISOString();\n  const nextState: DaemonInstallState = {\n    v: 1,\n    schema: DAEMON_STATE_SCHEMA,\n    daemonVersion: input.daemonVersion,\n    installSource: input.source,\n    installedAt: existingState?.installedAt ?? now,\n    updatedAt: now,\n  };\n  await writeDaemonInstallState(nextState);\n  await ensureDaemonTokenState();\n\n  return {\n    status: \"installed\",\n    state: nextState,\n  };\n}\n\nexport async function uninstallDaemon(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonUninstallResult> {\n  const [hasState, hasRuntimeDir, hasToken] = await Promise.all([\n    pathExists(daemonStatePath(pathInput)),\n    pathExists(daemonRuntimeRootPath(pathInput)),\n    pathExists(daemonTokenPath(pathInput)),\n  ]);\n\n  await Promise.all([\n    rm(daemonStatePath(pathInput), { force: true }),\n    rm(daemonTokenPath(pathInput), { force: true }),\n    rm(daemonServiceRuntimeStatePath(pathInput), { force: true }),\n    rm(daemonRuntimeRootPath(pathInput), { recursive: true, force: true }),\n  ]);\n\n  return {\n    removed: hasState || hasRuntimeDir || hasToken,\n  };\n}\n\nexport function daemonStatePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(systemDir(pathInput), \"daemon-install.json\");\n}\n\nexport function daemonRuntimeRootPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(runtimeDir(pathInput), \"daemon\");\n}\n\nexport function daemonServiceRuntimeStatePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"service-runtime.json\");\n}\n\nexport function daemonRuntimeDataPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"data\");\n}\n\nexport function daemonRuntimeBundlesPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"bundles\");\n}\n\nexport function daemonRuntimeStateRootPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"state\");\n}\n\nexport function daemonLifecycleJournalPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeRootPath(pathInput),\n    \"logs\",\n    DAEMON_LIFECYCLE_JOURNAL_FILENAME\n  );\n}\n\nexport function daemonDispatchJournalPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeRootPath(pathInput),\n    \"logs\",\n    DAEMON_DISPATCH_JOURNAL_FILENAME\n  );\n}\n\nexport function daemonServiceActiveBundleStatePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeStateRootPath(pathInput),\n    DAEMON_ACTIVE_BUNDLE_STATE_FILENAME\n  );\n}\n\nexport function daemonServiceRepairJournalPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeStateRootPath(pathInput),\n    DAEMON_REPAIR_JOURNAL_FILENAME\n  );\n}\n\nexport function daemonRuntimeServiceManagerPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(daemonRuntimeRootPath(pathInput), \"service-manager\");\n}\n\nexport function daemonServiceStableLauncherPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_STABLE_LAUNCHER_FILENAME\n  );\n}\n\nexport function daemonServiceStableExecutableWrapperPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceStableBinaryExecutablePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_BINARY_EXECUTABLE_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceUpdateWorkerBinaryExecutablePath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_UPDATE_WORKER_BINARY_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceLegacyExecutableWrapperPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const preset = resolveOpenMeldEnvPreset(pathInput);\n  return join(\n    daemonRuntimeServiceManagerPath(pathInput),\n    DAEMON_SERVICE_LEGACY_EXECUTABLE_WRAPPER_FILENAME_BY_PRESET[preset]\n  );\n}\n\nexport function daemonServiceExecutableWrapperPaths(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string[] {\n  return [\n    daemonServiceStableExecutableWrapperPath(pathInput),\n    daemonServiceLegacyExecutableWrapperPath(pathInput),\n  ];\n}\n\nexport function daemonServiceRecognizedExecutablePaths(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string[] {\n  return [\n    daemonServiceStableBinaryExecutablePath(pathInput),\n    ...daemonServiceExecutableWrapperPaths(pathInput),\n  ];\n}\n\nexport function daemonTokenPath(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  return join(systemDir(pathInput), \"daemon-token.json\");\n}\n\nexport async function restoreDaemonInstallStateSnapshot(\n  snapshot: DaemonInstallState | null,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  if (!snapshot) {\n    await rm(daemonStatePath(pathInput), { force: true });\n    return;\n  }\n  await writeDaemonInstallState(snapshot, pathInput);\n}\n\nexport function resolveDaemonControlPlaneEndpoint(\n  pathInput: OpenMeldPathResolutionInput = {}\n): string {\n  const runtimeRoot = daemonRuntimeRootPath(pathInput);\n  const suffix = createHash(\"sha256\")\n    .update(runtimeRoot)\n    .digest(\"hex\")\n    .slice(0, 24);\n  if (process.platform === \"win32\") {\n    return `\\\\\\\\.\\\\pipe\\\\openmeld-daemon-control-${suffix}`;\n  }\n  return join(tmpdir(), `openmeld-daemon-control-${suffix}.sock`);\n}\n\nexport async function ensureDaemonControlPlaneToken(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<string> {\n  const state = await ensureDaemonTokenState(pathInput);\n  return state.token;\n}\n\nexport async function rotateDaemonControlPlaneTokenIfExpired(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonTokenState> {\n  const current = await readDaemonTokenState(pathInput);\n  if (current && !isDaemonTokenExpired(current)) {\n    await chmod(daemonTokenPath(pathInput), 0o600).catch(() => undefined);\n    return current;\n  }\n\n  return await writeNewDaemonTokenState(pathInput);\n}\n\nexport async function readDaemonControlPlaneToken(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<string | null> {\n  const state = await readDaemonTokenState(pathInput);\n  return state?.token ?? null;\n}\n\nfunction isPidAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !(\n      error instanceof Error &&\n      (error as NodeJS.ErrnoException).code === \"ESRCH\"\n    );\n  }\n}\n\nasync function readDaemonServiceRuntimeState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonServiceRuntimeState | null> {\n  const raw = await readFile(\n    daemonServiceRuntimeStatePath(pathInput),\n    \"utf8\"\n  ).catch((error) => {\n    if (\n      error &&\n      typeof error === \"object\" &&\n      \"code\" in error &&\n      error.code === \"ENOENT\"\n    ) {\n      return null;\n    }\n    throw error;\n  });\n  if (raw === null) {\n    return null;\n  }\n  return parseDaemonServiceRuntimeState(raw);\n}\n\nfunction parseDaemonServiceRuntimeState(\n  raw: string\n): DaemonServiceRuntimeState | null {\n  try {\n    const parsed = JSON.parse(raw);\n    if (!isDaemonServiceRuntimeStateObject(parsed)) {\n      return null;\n    }\n\n    return {\n      v: 1,\n      schema: DAEMON_SERVICE_RUNTIME_STATE_SCHEMA,\n      status: \"running\",\n      pid: parsed.pid,\n      mode: parsed.mode,\n      command: parsed.command,\n      gatewayUrl: parseNullableString(parsed.gatewayUrl),\n      openMeldProfileId: resolveStoredDaemonServiceOpenMeldProfileId(parsed),\n      stopRequestedAt: parseNullableString(parsed.stopRequestedAt),\n      heartbeatAt: parseNullableString(parsed.heartbeatAt),\n      startedAt: parsed.startedAt,\n      updatedAt: parsed.updatedAt,\n      managedBySystemService: parsed.managedBySystemService === true,\n      serviceController: parseDaemonServiceController(parsed.serviceController),\n      autoStart: parsed.autoStart === true,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction isDaemonServiceRuntimeStateObject(value: unknown): value is {\n  v: 1;\n  schema: string;\n  status: \"running\";\n  pid: number;\n  mode: DaemonRunMode;\n  command: string;\n  gatewayUrl: string | null;\n  openMeldProfileId?: string | null;\n  profile?: string | null;\n  stopRequestedAt: string | null;\n  heartbeatAt: string | null;\n  startedAt: string;\n  updatedAt: string;\n  managedBySystemService?: boolean;\n  serviceController?: string;\n  autoStart?: boolean;\n} {\n  if (!value || typeof value !== \"object\") {\n    return false;\n  }\n  const candidate = value as Record<string, unknown>;\n  return (\n    candidate.v === 1 &&\n    candidate.schema === DAEMON_SERVICE_RUNTIME_STATE_SCHEMA &&\n    candidate.status === \"running\" &&\n    typeof candidate.pid === \"number\" &&\n    candidate.pid > 0 &&\n    (candidate.mode === \"foreground\" || candidate.mode === \"background\") &&\n    typeof candidate.command === \"string\" &&\n    candidate.command.length > 0 &&\n    isValidNullableString(candidate.gatewayUrl) &&\n    isValidOptionalNullableString(candidate.openMeldProfileId) &&\n    isValidOptionalNullableString(candidate.profile) &&\n    isValidNullableString(candidate.stopRequestedAt) &&\n    isValidNullableString(candidate.heartbeatAt) &&\n    typeof candidate.startedAt === \"string\" &&\n    candidate.startedAt.length > 0 &&\n    typeof candidate.updatedAt === \"string\" &&\n    candidate.updatedAt.length > 0\n  );\n}\n\nexport function parseDaemonServiceController(\n  value: unknown\n): DaemonServiceController {\n  if (\n    value === \"launchd\" ||\n    value === \"systemd\" ||\n    value === \"windows-service\" ||\n    value === \"legacy-detached\" ||\n    value === \"unknown\"\n  ) {\n    return value;\n  }\n  return \"unknown\";\n}\n\nfunction isValidNullableString(value: unknown): value is string | null {\n  return value === null || typeof value === \"string\";\n}\n\nfunction isValidOptionalNullableString(\n  value: unknown\n): value is string | null | undefined {\n  return value === undefined || value === null || typeof value === \"string\";\n}\n\nfunction parseNullableString(value: unknown): string | null {\n  if (value === null) {\n    return null;\n  }\n  if (typeof value !== \"string\") {\n    return null;\n  }\n  return value;\n}\n\nfunction resolveStoredDaemonServiceOpenMeldProfileId(input: {\n  openMeldProfileId?: unknown;\n  profile?: unknown;\n}): string | null {\n  const openMeldProfileId = parseNullableString(input.openMeldProfileId);\n  const legacyProfile = parseNullableString(input.profile);\n  if (\n    openMeldProfileId &&\n    legacyProfile &&\n    openMeldProfileId !== legacyProfile\n  ) {\n    throw new Error(\"conflicting openMeldProfileId values\");\n  }\n  return openMeldProfileId ?? legacyProfile;\n}\n\nexport function isDaemonServiceRuntimeHeartbeatStale(\n  state: DaemonServiceRuntimeState\n): boolean {\n  const latestSignalAt = Math.max(\n    parseIsoTimestampOrZero(state.heartbeatAt),\n    parseIsoTimestampOrZero(state.updatedAt)\n  );\n  if (latestSignalAt <= 0) {\n    return false;\n  }\n  return Date.now() - latestSignalAt > DAEMON_HEARTBEAT_STALE_MS;\n}\n\nfunction parseIsoTimestampOrZero(value: string | null): number {\n  if (!value) {\n    return 0;\n  }\n  const parsed = Date.parse(value);\n  return Number.isFinite(parsed) ? parsed : 0;\n}\n\nasync function writeDaemonServiceRuntimeState(\n  state: DaemonServiceRuntimeState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const path = daemonServiceRuntimeStatePath(pathInput);\n  const runtimeRootPath = daemonRuntimeRootPath(pathInput);\n  await mkdir(runtimeRootPath, { recursive: true });\n  const tempPath = `${path}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n\n  try {\n    await writeFile(tempPath, `${JSON.stringify(state, null, 2)}\\n`, {\n      encoding: \"utf8\",\n      mode: 0o600,\n    });\n    await rename(tempPath, path);\n    await chmod(path, 0o600);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nasync function ensureDaemonRuntimeLayout(): Promise<void> {\n  await Promise.all([\n    mkdir(systemDir(), { recursive: true }),\n    mkdir(join(daemonRuntimeRootPath(), \"bin\"), { recursive: true }),\n    mkdir(daemonRuntimeBundlesPath(), { recursive: true }),\n    mkdir(join(daemonRuntimeRootPath(), \"data\"), { recursive: true }),\n    mkdir(join(daemonRuntimeRootPath(), \"logs\"), { recursive: true }),\n    mkdir(daemonRuntimeStateRootPath(), { recursive: true }),\n    mkdir(daemonRuntimeServiceManagerPath(), { recursive: true }),\n  ]);\n}\n\nfunction normalizeDaemonLifecycleIntent(\n  value: string\n): DaemonLifecycleIntent | null {\n  switch (value) {\n    case \"run_background\":\n    case \"run_foreground\":\n    case \"stop\":\n    case \"autostart\":\n    case \"status_cleanup\":\n    case \"startup_check\":\n    case \"start\":\n    case \"reinstall\":\n    case \"uninstall\":\n    case \"upgrade_reconcile\":\n      return value;\n    default:\n      return null;\n  }\n}\n\nasync function ensureDaemonTokenState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonTokenState> {\n  const current = await readDaemonTokenState(pathInput);\n  if (current) {\n    await chmod(daemonTokenPath(pathInput), 0o600).catch(() => undefined);\n    return current;\n  }\n\n  return await writeNewDaemonTokenState(pathInput);\n}\n\nasync function writeNewDaemonTokenState(\n  pathInput: OpenMeldPathResolutionInput\n): Promise<DaemonTokenState> {\n  const nowIso = new Date().toISOString();\n  const next: DaemonTokenState = {\n    v: 1,\n    schema: DAEMON_TOKEN_SCHEMA,\n    token: createDaemonTokenValue(),\n    issuedAt: nowIso,\n    updatedAt: nowIso,\n  };\n  await writeDaemonTokenState(next, pathInput);\n  return next;\n}\n\nasync function readDaemonInstallState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonInstallState | null> {\n  const raw = await readFile(daemonStatePath(pathInput), \"utf8\").catch(\n    (error) => {\n      if (\n        error &&\n        typeof error === \"object\" &&\n        \"code\" in error &&\n        error.code === \"ENOENT\"\n      ) {\n        return null;\n      }\n      throw error;\n    }\n  );\n  if (raw === null) {\n    return null;\n  }\n  return parseDaemonInstallState(raw);\n}\n\nfunction parseDaemonInstallState(raw: string): DaemonInstallState | null {\n  try {\n    const parsed = JSON.parse(raw) as Partial<DaemonInstallState>;\n    if (parsed.v !== 1) {\n      return null;\n    }\n    if (parsed.schema !== DAEMON_STATE_SCHEMA) {\n      return null;\n    }\n    if (typeof parsed.daemonVersion !== \"string\" || !parsed.daemonVersion) {\n      return null;\n    }\n    if (!isDaemonInstallSource(parsed.installSource)) {\n      return null;\n    }\n    if (typeof parsed.installedAt !== \"string\" || !parsed.installedAt) {\n      return null;\n    }\n    if (typeof parsed.updatedAt !== \"string\" || !parsed.updatedAt) {\n      return null;\n    }\n    return {\n      v: 1,\n      schema: DAEMON_STATE_SCHEMA,\n      daemonVersion: parsed.daemonVersion,\n      installSource: parsed.installSource,\n      installedAt: parsed.installedAt,\n      updatedAt: parsed.updatedAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction isDaemonInstallSource(value: unknown): value is DaemonInstallSource {\n  return value === \"cli.auto_check\" || value === \"daemon.command.install\";\n}\n\nasync function writeDaemonInstallState(\n  state: DaemonInstallState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const path = daemonStatePath(pathInput);\n  await mkdir(systemDir(pathInput), { recursive: true });\n  const tempPath = `${path}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n\n  try {\n    await writeFile(tempPath, `${JSON.stringify(state, null, 2)}\\n`, \"utf8\");\n    await rename(tempPath, path);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nasync function readDaemonTokenState(\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<DaemonTokenState | null> {\n  const raw = await readFile(daemonTokenPath(pathInput), \"utf8\").catch(\n    (error) => {\n      if (\n        error &&\n        typeof error === \"object\" &&\n        \"code\" in error &&\n        error.code === \"ENOENT\"\n      ) {\n        return null;\n      }\n      throw error;\n    }\n  );\n  if (raw === null) {\n    return null;\n  }\n  return parseDaemonTokenState(raw);\n}\n\nfunction parseDaemonTokenState(raw: string): DaemonTokenState | null {\n  try {\n    const parsed = JSON.parse(raw) as Partial<DaemonTokenState>;\n    if (parsed.v !== 1 || parsed.schema !== DAEMON_TOKEN_SCHEMA) {\n      return null;\n    }\n    if (typeof parsed.token !== \"string\" || parsed.token.length < 16) {\n      return null;\n    }\n    if (typeof parsed.issuedAt !== \"string\" || !parsed.issuedAt) {\n      return null;\n    }\n    if (typeof parsed.updatedAt !== \"string\" || !parsed.updatedAt) {\n      return null;\n    }\n    return {\n      v: 1,\n      schema: DAEMON_TOKEN_SCHEMA,\n      token: parsed.token,\n      issuedAt: parsed.issuedAt,\n      updatedAt: parsed.updatedAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\nasync function writeDaemonTokenState(\n  state: DaemonTokenState,\n  pathInput: OpenMeldPathResolutionInput = {}\n): Promise<void> {\n  const path = daemonTokenPath(pathInput);\n  await mkdir(systemDir(pathInput), { recursive: true });\n  const tempPath = `${path}.tmp-${process.pid}-${Date.now()}`;\n  let shouldCleanupTemp = true;\n\n  try {\n    await writeFile(tempPath, `${JSON.stringify(state, null, 2)}\\n`, {\n      encoding: \"utf8\",\n      mode: 0o600,\n    });\n    await rename(tempPath, path);\n    await chmod(path, 0o600);\n    shouldCleanupTemp = false;\n  } finally {\n    if (shouldCleanupTemp) {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  }\n}\n\nfunction isDaemonTokenExpired(state: DaemonTokenState): boolean {\n  const updatedAtMs = Date.parse(state.updatedAt);\n  if (!Number.isFinite(updatedAtMs)) {\n    return true;\n  }\n  return Date.now() - updatedAtMs >= DAEMON_TOKEN_ROTATE_MAX_AGE_MS;\n}\n\nfunction createDaemonTokenValue(): string {\n  return randomBytes(32).toString(\"base64url\");\n}\n\nasync function pathExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch (error) {\n    if (\n      error &&\n      typeof error === \"object\" &&\n      \"code\" in error &&\n      error.code === \"ENOENT\"\n    ) {\n      return false;\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;AA8BA,MAAM,sBAAsB;AAC5B,MAAa,sCACX;AACF,MAAa,kCAAkC;AAC/C,MAAa,sCACX;AACF,MAAa,wCACX;AACF,MAAa,wCACX;AACF,MAAa,4CACX;AACF,MAAM,sBAAsB;AAC5B,MAAM,iCAAiC,OAAU,KAAK;AACtD,MAAa,4BAA4B,MAAS;AAClD,MAAM,sCAAsC;AAC5C,MAAM,mCAAmC;AACzC,MAAM,oCAAoC;AAC1C,MAAM,iCAAiC;AACvC,MAAM,8BAA8B;AACpC,MAAM,0BAA0B;AAQhC,MAAM,oCACJ,IAAI,kBAAqD;AAE3D,SAAgB,oCAAyD;CACvE,MAAM,UAAU,kCAAkC,SAAS;CAC3D,OAAO,SAAS,UACd,QAAQ,cACN,uBAAuB,qCAAqC,CAAC,IAC7D,QAAQ,OACR;AACN;AACA,MAAM,kCAAkC;AACxC,MAAM,uDAAuD;CAC3D,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAM,sDAAsD;CAC1D,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAM,yDAAyD;CAC7D,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAM,8DAA8D;CAClE,MAAM;CACN,aAAa;CACb,QAAQ;AACV;AACA,MAAa,wCACX;AACF,MAAa,oCAAoC;AAkHjD,eAAsB,gBACpB,YAAyC,CAAC,GACnB;CACvB,MAAM,CAAC,OAAO,iBAAiB,MAAM,QAAQ,IAAI,CAC/C,uBAAuB,SAAS,GAChC,WAAW,sBAAsB,SAAS,CAAC,CAC7C,CAAC;CACD,IAAI,SAAS,eACX,OAAO;EACL,WAAW;EACX;CACF;CAEF,OAAO;EACL,WAAW;EACX,OAAO;CACT;AACF;AAEA,eAAsB,uBACpB,YAAyC,CAAC,GACL;CACrC,MAAM,QAAQ,MAAM,8BAA8B,SAAS;CAC3D,IAAI,CAAC,OACH,OAAO;EACL,QAAQ;EACR,MAAM;EACN,KAAK;EACL,WAAW;EACX,WAAW;EACX,wBAAwB;EACxB,mBAAmB;EACnB,WAAW;CACb;CAEF,IAAI,CAAC,OAAO,UAAU,MAAM,GAAG,KAAK,MAAM,OAAO,GAC/C,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;EACjB,QAAQ;CACV;CAEF,IAAI,CAAC,WAAW,MAAM,GAAG,GACvB,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;EACjB,QAAQ;CACV;CAEF,IAAI,qCAAqC,KAAK,GAC5C,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;EACjB,QAAQ;CACV;CAEF,OAAO;EACL,QAAQ;EACR,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,wBAAwB,MAAM;EAC9B,mBAAmB,MAAM;EACzB,WAAW,MAAM;CACnB;AACF;AAEA,eAAsB,iCACpB,YAAyC,CAAC,GACC;CAC3C,OAAO,MAAM,8BAA8B,SAAS;AACtD;AAEA,SAAgB,oCACd,QAA2C,CAAC,GACd;CAC9B,MAAM,MAAM,MAAM,OAAO,QAAQ;CACjC,MAAM,yBACJ,MAAM,2BAA2B,QACjC,IAAA,8CAAmD;CACrD,MAAM,yBACJ,OAAO,MAAM,sBAAsB,YACnC,MAAM,kBAAkB,SAAS,IAC7B,MAAM,oBACN,IAAI;CACV,MAAM,YACJ,MAAM,cAAc,QACpB,IAAA,0CAA+C;CAEjD,OAAO;EACL;EACA,mBAAmB,6BAA6B,sBAAsB;EACtE;CACF;AACF;AAEA,eAAsB,6BACpB,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,+BAA+B,OAAO,SAAS;AACvD;AAEA,eAAsB,+BACpB,YAAyC,CAAC,GAC3B;CACf,MAAM,EAAE,4BAA4B,MAAM,OAAO;CACjD,MAAM,QAAQ,IAAI,CAChB,GAAG,8BAA8B,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC,GAC5D,wBAAwB,SAAS,CACnC,CAAC;AACH;AAEA,SAAgB,yBACd,UACA,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,eAAsB,kCACpB,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACA,iBAA8C,qCAAqC,GAC9C;CACrC,OAAO,MAAM,YAAY;EACvB,mBAAmB;EACnB,KAAK;EACL;EACA;CACF,CAAC;AACH;AAEA,eAAsB,kCACpB,MACe;CACf,MAAM,YAAY,IAAI;AACxB;AAEA,SAAgB,0BACd,UACA,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,SAAgB,+BACd,UACA,OAAgC;CAC9B,QAAQ;CACR,SAAS;AACX,GACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,SAAgB,0CACd,UACA,MACY;CACZ,OAAO,+BAA+B,MAAM,QAAQ;AACtD;AAEA,SAAgB,+BACd,MACA,UACA,YAAyC,CAAC,GAC9B;CACZ,MAAM,iBAAiB,qCAAqC,SAAS;CACrE,MAAM,YAAY,uBAAuB,cAAc;CACvD,MAAM,iBAAiB,kCAAkC,SAAS;CAClE,IAAI,gBAAgB,UAAU,eAAe,cAAc,WAAW;EACpE,IAAI;EACJ,IAAI;GACF,YAAY,SAAS;EACvB,SAAS,OAAO;GACd,YAAY,QAAQ,OAAO,KAAK;EAClC;EACA,IAAI;EACJ,mBAAmB,UAChB,WACO,KAAA,IACL,UAAmB;GAClB,eAAe,SAAS,KAAK,KAAK;EACpC,CACF,CAAC,CACA,cAAc;GACb,eAAe,kBAAkB,OAAO,gBAAgB;EAC1D,CAAC;EACH,eAAe,kBAAkB,IAAI,gBAAgB;EACrD,OAAO;CACT;CACA,OAAO,oCAAoC;EACzC;EACA;EACA;EACA;CACF,CAAC;AACH;AAEA,eAAe,oCAAuC,OAKvC;CACb,MAAM,OAAO,MAAM,kCACjB,MAAM,MACN,MAAM,cACR;CACA,OAAO,MAAM,gBAAgB;EAC3B;EACA,KAAK,YAAY;GACf,MAAM,UAA6C;IACjD;IACA,QAAQ;IACR,UAAU,CAAC;IACX,WAAW,MAAM;IACjB,mCAAmB,IAAI,IAAI;GAC7B;GACA,IAAI;GACJ,IAAI;IACF,UAAU;KACR,IAAI;KACJ,OAAO,MAAM,kCAAkC,IAC7C,SACA,MAAM,QACR;IACF;GACF,SAAS,OAAO;IACd,UAAU;KAAE,IAAI;KAAO;IAAM;GAC/B,UAAU;IACR,OAAO,QAAQ,kBAAkB,OAAO,GACtC,MAAM,QAAQ,IAAI,CAAC,GAAG,QAAQ,iBAAiB,CAAC;IAElD,QAAQ,SAAS;GACnB;GACA,MAAM,WAAW,CACf,GAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,GACpC,GAAG,QAAQ,QACb,CAAC,CAAC,QACC,SAAS,OAAO,gBAAgB,YAAY,QAAQ,OAAO,MAAM,KACpE;GACA,IAAI,SAAS,WAAW,GACtB,MAAM,SAAS;GAEjB,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eACR,UACA,qEACF;GAEF,IAAI,CAAC,QAAQ,IACX,MAAM,QAAQ;GAEhB,OAAO,QAAQ;EACjB;EACA,gBAAgB;GACd,SAAS,MAAM,KAAK;GACpB,WAAW;GACX,QAAQ,MAAM,KAAK;GACnB,SAAS;GACT,mBAAmB;EACrB;CACF,CAAC;AACH;AAEA,eAAsB,qCAA8E;CAClG,MAAM,OAAO,MAAM,aAAa;EAC9B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,qCAAqC;CACvD,CAAC;CACD,IAAI,CAAC,MACH,OAAO;CAET,MAAM,SACJ,OAAO,KAAK,WAAW,WACnB,+BAA+B,KAAK,MAAM,IAC1C;CACN,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,KAAK,IAAI;CACzE,IAAI,CAAC,UAAU,QAAQ,WAAW,GAChC,OAAO;CAET,MAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM,KAAA;CACtD,MAAM,YACJ,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,KAAK,CAAC,CAAC,SAAS,IACjE,KAAK,UAAU,KAAK,IACpB,KAAA;CACN,MAAM,KACJ,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,IACnD,KAAK,GAAG,KAAK,IACb,KAAA;CACN,OAAO;EACL;EACA;EACA,GAAI,OAAO,QAAQ,WAAW,EAAE,IAAI,IAAI,CAAC;EACzC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACjC,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC;CACrB;AACF;AAEA,eAAsB,gDAAyF;CAC7G,MAAM,oBAAoB;EACxB,mBAAmB;EACnB,KAAK;EACL,gBAAgB,qCAAqC;CACvD,CAAC;CACD,OAAO,MAAM,mCAAmC;AAClD;AAEA,eAAsB,cAAc,OAGH;CAC/B,MAAM,gBAAgB,MAAM,uBAAuB;CACnD,MAAM,gBAAgB,MAAM,WAAW,sBAAsB,CAAC;CAC9D,IACE,iBACA,iBACA,cAAc,kBAAkB,MAAM,eACtC;EACA,MAAM,uBAAuB;EAC7B,OAAO;GACL,QAAQ;GACR,OAAO;EACT;CACF;CAEA,MAAM,0BAA0B;CAChC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,MAAM,YAAgC;EACpC,GAAG;EACH,QAAQ;EACR,eAAe,MAAM;EACrB,eAAe,MAAM;EACrB,aAAa,eAAe,eAAe;EAC3C,WAAW;CACb;CACA,MAAM,wBAAwB,SAAS;CACvC,MAAM,uBAAuB;CAE7B,OAAO;EACL,QAAQ;EACR,OAAO;CACT;AACF;AAEA,eAAsB,gBACpB,YAAyC,CAAC,GACV;CAChC,MAAM,CAAC,UAAU,eAAe,YAAY,MAAM,QAAQ,IAAI;EAC5D,WAAW,gBAAgB,SAAS,CAAC;EACrC,WAAW,sBAAsB,SAAS,CAAC;EAC3C,WAAW,gBAAgB,SAAS,CAAC;CACvC,CAAC;CAED,MAAM,QAAQ,IAAI;EAChB,GAAG,gBAAgB,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EAC9C,GAAG,gBAAgB,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EAC9C,GAAG,8BAA8B,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EAC5D,GAAG,sBAAsB,SAAS,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CACvE,CAAC;CAED,OAAO,EACL,SAAS,YAAY,iBAAiB,SACxC;AACF;AAEA,SAAgB,gBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,UAAU,SAAS,GAAG,qBAAqB;AACzD;AAEA,SAAgB,sBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,WAAW,SAAS,GAAG,QAAQ;AAC7C;AAEA,SAAgB,8BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,sBAAsB;AACtE;AAEA,SAAgB,sBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,MAAM;AACtD;AAEA,SAAgB,yBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,SAAS;AACzD;AAEA,SAAgB,2BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,OAAO;AACvD;AAEA,SAAgB,2BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,sBAAsB,SAAS,GAC/B,QACA,iCACF;AACF;AAEA,SAAgB,0BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,sBAAsB,SAAS,GAC/B,QACA,gCACF;AACF;AAEA,SAAgB,mCACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,2BAA2B,SAAS,GACpC,mCACF;AACF;AAEA,SAAgB,+BACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,2BAA2B,SAAS,GACpC,8BACF;AACF;AAEA,SAAgB,gCACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,sBAAsB,SAAS,GAAG,iBAAiB;AACjE;AAEA,SAAgB,gCACd,YAAyC,CAAC,GAClC;CACR,OAAO,KACL,gCAAgC,SAAS,GACzC,+BACF;AACF;AAEA,SAAgB,yCACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,qDAAqD,OACvD;AACF;AAEA,SAAgB,wCACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,oDAAoD,OACtD;AACF;AAEA,SAAgB,8CACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,uDAAuD,OACzD;AACF;AAEA,SAAgB,yCACd,YAAyC,CAAC,GAClC;CACR,MAAM,SAAS,yBAAyB,SAAS;CACjD,OAAO,KACL,gCAAgC,SAAS,GACzC,4DAA4D,OAC9D;AACF;AAEA,SAAgB,oCACd,YAAyC,CAAC,GAChC;CACV,OAAO,CACL,yCAAyC,SAAS,GAClD,yCAAyC,SAAS,CACpD;AACF;AAEA,SAAgB,uCACd,YAAyC,CAAC,GAChC;CACV,OAAO,CACL,wCAAwC,SAAS,GACjD,GAAG,oCAAoC,SAAS,CAClD;AACF;AAEA,SAAgB,gBACd,YAAyC,CAAC,GAClC;CACR,OAAO,KAAK,UAAU,SAAS,GAAG,mBAAmB;AACvD;AAEA,eAAsB,kCACpB,UACA,YAAyC,CAAC,GAC3B;CACf,IAAI,CAAC,UAAU;EACb,MAAM,GAAG,gBAAgB,SAAS,GAAG,EAAE,OAAO,KAAK,CAAC;EACpD;CACF;CACA,MAAM,wBAAwB,UAAU,SAAS;AACnD;AAEA,SAAgB,kCACd,YAAyC,CAAC,GAClC;CACR,MAAM,cAAc,sBAAsB,SAAS;CACnD,MAAM,SAAS,WAAW,QAAQ,CAAC,CAChC,OAAO,WAAW,CAAC,CACnB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,IAAI,QAAQ,aAAa,SACvB,OAAO,wCAAwC;CAEjD,OAAO,KAAK,OAAO,GAAG,2BAA2B,OAAO,MAAM;AAChE;AAEA,eAAsB,8BACpB,YAAyC,CAAC,GACzB;CAEjB,QAAO,MADa,uBAAuB,SAAS,EAAA,CACvC;AACf;AAEA,eAAsB,uCACpB,YAAyC,CAAC,GACf;CAC3B,MAAM,UAAU,MAAM,qBAAqB,SAAS;CACpD,IAAI,WAAW,CAAC,qBAAqB,OAAO,GAAG;EAC7C,MAAM,MAAM,gBAAgB,SAAS,GAAG,GAAK,CAAC,CAAC,YAAY,KAAA,CAAS;EACpE,OAAO;CACT;CAEA,OAAO,MAAM,yBAAyB,SAAS;AACjD;AAEA,eAAsB,4BACpB,YAAyC,CAAC,GAClB;CAExB,QAAO,MADa,qBAAqB,SAAS,EAAA,EACpC,SAAS;AACzB;AAEA,SAAS,WAAW,KAAsB;CACxC,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,EACL,iBAAiB,SAChB,MAAgC,SAAS;CAE9C;AACF;AAEA,eAAe,8BACb,YAAyC,CAAC,GACC;CAC3C,MAAM,MAAM,MAAM,SAChB,8BAA8B,SAAS,GACvC,MACF,CAAC,CAAC,OAAO,UAAU;EACjB,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR,CAAC;CACD,IAAI,QAAQ,MACV,OAAO;CAET,OAAO,+BAA+B,GAAG;AAC3C;AAEA,SAAS,+BACP,KACkC;CAClC,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,CAAC,kCAAkC,MAAM,GAC3C,OAAO;EAGT,OAAO;GACL,GAAG;GACH,QAAQ;GACR,QAAQ;GACR,KAAK,OAAO;GACZ,MAAM,OAAO;GACb,SAAS,OAAO;GAChB,YAAY,oBAAoB,OAAO,UAAU;GACjD,mBAAmB,4CAA4C,MAAM;GACrE,iBAAiB,oBAAoB,OAAO,eAAe;GAC3D,aAAa,oBAAoB,OAAO,WAAW;GACnD,WAAW,OAAO;GAClB,WAAW,OAAO;GAClB,wBAAwB,OAAO,2BAA2B;GAC1D,mBAAmB,6BAA6B,OAAO,iBAAiB;GACxE,WAAW,OAAO,cAAc;EAClC;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,kCAAkC,OAiBzC;CACA,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAET,MAAM,YAAY;CAClB,OACE,UAAU,MAAM,KAChB,UAAU,WAAA,sCACV,UAAU,WAAW,aACrB,OAAO,UAAU,QAAQ,YACzB,UAAU,MAAM,MACf,UAAU,SAAS,gBAAgB,UAAU,SAAS,iBACvD,OAAO,UAAU,YAAY,YAC7B,UAAU,QAAQ,SAAS,KAC3B,sBAAsB,UAAU,UAAU,KAC1C,8BAA8B,UAAU,iBAAiB,KACzD,8BAA8B,UAAU,OAAO,KAC/C,sBAAsB,UAAU,eAAe,KAC/C,sBAAsB,UAAU,WAAW,KAC3C,OAAO,UAAU,cAAc,YAC/B,UAAU,UAAU,SAAS,KAC7B,OAAO,UAAU,cAAc,YAC/B,UAAU,UAAU,SAAS;AAEjC;AAEA,SAAgB,6BACd,OACyB;CACzB,IACE,UAAU,aACV,UAAU,aACV,UAAU,qBACV,UAAU,qBACV,UAAU,WAEV,OAAO;CAET,OAAO;AACT;AAEA,SAAS,sBAAsB,OAAwC;CACrE,OAAO,UAAU,QAAQ,OAAO,UAAU;AAC5C;AAEA,SAAS,8BACP,OACoC;CACpC,OAAO,UAAU,KAAA,KAAa,UAAU,QAAQ,OAAO,UAAU;AACnE;AAEA,SAAS,oBAAoB,OAA+B;CAC1D,IAAI,UAAU,MACZ,OAAO;CAET,IAAI,OAAO,UAAU,UACnB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,4CAA4C,OAGnC;CAChB,MAAM,oBAAoB,oBAAoB,MAAM,iBAAiB;CACrE,MAAM,gBAAgB,oBAAoB,MAAM,OAAO;CACvD,IACE,qBACA,iBACA,sBAAsB,eAEtB,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO,qBAAqB;AAC9B;AAEA,SAAgB,qCACd,OACS;CACT,MAAM,iBAAiB,KAAK,IAC1B,wBAAwB,MAAM,WAAW,GACzC,wBAAwB,MAAM,SAAS,CACzC;CACA,IAAI,kBAAkB,GACpB,OAAO;CAET,OAAO,KAAK,IAAI,IAAI,iBAAiB;AACvC;AAEA,SAAS,wBAAwB,OAA8B;CAC7D,IAAI,CAAC,OACH,OAAO;CAET,MAAM,SAAS,KAAK,MAAM,KAAK;CAC/B,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;AAEA,eAAe,+BACb,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,OAAO,8BAA8B,SAAS;CAEpD,MAAM,MADkB,sBAAsB,SACpB,GAAG,EAAE,WAAW,KAAK,CAAC;CAChD,MAAM,WAAW,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CACxD,IAAI,oBAAoB;CAExB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK;GAC/D,UAAU;GACV,MAAM;EACR,CAAC;EACD,MAAM,OAAO,UAAU,IAAI;EAC3B,MAAM,MAAM,MAAM,GAAK;EACvB,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,eAAe,4BAA2C;CACxD,MAAM,QAAQ,IAAI;EAChB,MAAM,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;EACtC,MAAM,KAAK,sBAAsB,GAAG,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;EAC/D,MAAM,yBAAyB,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,MAAM,KAAK,sBAAsB,GAAG,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAChE,MAAM,KAAK,sBAAsB,GAAG,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAChE,MAAM,2BAA2B,GAAG,EAAE,WAAW,KAAK,CAAC;EACvD,MAAM,gCAAgC,GAAG,EAAE,WAAW,KAAK,CAAC;CAC9D,CAAC;AACH;AAEA,SAAS,+BACP,OAC8B;CAC9B,QAAQ,OAAR;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,qBACH,OAAO;EACT,SACE,OAAO;CACX;AACF;AAEA,eAAe,uBACb,YAAyC,CAAC,GACf;CAC3B,MAAM,UAAU,MAAM,qBAAqB,SAAS;CACpD,IAAI,SAAS;EACX,MAAM,MAAM,gBAAgB,SAAS,GAAG,GAAK,CAAC,CAAC,YAAY,KAAA,CAAS;EACpE,OAAO;CACT;CAEA,OAAO,MAAM,yBAAyB,SAAS;AACjD;AAEA,eAAe,yBACb,WAC2B;CAC3B,MAAM,0BAAS,IAAI,KAAK,EAAA,CAAE,YAAY;CACtC,MAAM,OAAyB;EAC7B,GAAG;EACH,QAAQ;EACR,OAAO,uBAAuB;EAC9B,UAAU;EACV,WAAW;CACb;CACA,MAAM,sBAAsB,MAAM,SAAS;CAC3C,OAAO;AACT;AAEA,eAAe,uBACb,YAAyC,CAAC,GACN;CACpC,MAAM,MAAM,MAAM,SAAS,gBAAgB,SAAS,GAAG,MAAM,CAAC,CAAC,OAC5D,UAAU;EACT,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR,CACF;CACA,IAAI,QAAQ,MACV,OAAO;CAET,OAAO,wBAAwB,GAAG;AACpC;AAEA,SAAS,wBAAwB,KAAwC;CACvE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,MAAM,GACf,OAAO;EAET,IAAI,OAAO,WAAW,qBACpB,OAAO;EAET,IAAI,OAAO,OAAO,kBAAkB,YAAY,CAAC,OAAO,eACtD,OAAO;EAET,IAAI,CAAC,sBAAsB,OAAO,aAAa,GAC7C,OAAO;EAET,IAAI,OAAO,OAAO,gBAAgB,YAAY,CAAC,OAAO,aACpD,OAAO;EAET,IAAI,OAAO,OAAO,cAAc,YAAY,CAAC,OAAO,WAClD,OAAO;EAET,OAAO;GACL,GAAG;GACH,QAAQ;GACR,eAAe,OAAO;GACtB,eAAe,OAAO;GACtB,aAAa,OAAO;GACpB,WAAW,OAAO;EACpB;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,sBAAsB,OAA8C;CAC3E,OAAO,UAAU,oBAAoB,UAAU;AACjD;AAEA,eAAe,wBACb,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,OAAO,gBAAgB,SAAS;CACtC,MAAM,MAAM,UAAU,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,WAAW,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CACxD,IAAI,oBAAoB;CAExB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM;EACvE,MAAM,OAAO,UAAU,IAAI;EAC3B,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,eAAe,qBACb,YAAyC,CAAC,GACR;CAClC,MAAM,MAAM,MAAM,SAAS,gBAAgB,SAAS,GAAG,MAAM,CAAC,CAAC,OAC5D,UAAU;EACT,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR,CACF;CACA,IAAI,QAAQ,MACV,OAAO;CAET,OAAO,sBAAsB,GAAG;AAClC;AAEA,SAAS,sBAAsB,KAAsC;CACnE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,MAAM,KAAK,OAAO,WAAW,qBACtC,OAAO;EAET,IAAI,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,SAAS,IAC5D,OAAO;EAET,IAAI,OAAO,OAAO,aAAa,YAAY,CAAC,OAAO,UACjD,OAAO;EAET,IAAI,OAAO,OAAO,cAAc,YAAY,CAAC,OAAO,WAClD,OAAO;EAET,OAAO;GACL,GAAG;GACH,QAAQ;GACR,OAAO,OAAO;GACd,UAAU,OAAO;GACjB,WAAW,OAAO;EACpB;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,sBACb,OACA,YAAyC,CAAC,GAC3B;CACf,MAAM,OAAO,gBAAgB,SAAS;CACtC,MAAM,MAAM,UAAU,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,WAAW,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI;CACxD,IAAI,oBAAoB;CAExB,IAAI;EACF,MAAM,UAAU,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK;GAC/D,UAAU;GACV,MAAM;EACR,CAAC;EACD,MAAM,OAAO,UAAU,IAAI;EAC3B,MAAM,MAAM,MAAM,GAAK;EACvB,oBAAoB;CACtB,UAAU;EACR,IAAI,mBACF,MAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CAE7D;AACF;AAEA,SAAS,qBAAqB,OAAkC;CAC9D,MAAM,cAAc,KAAK,MAAM,MAAM,SAAS;CAC9C,IAAI,CAAC,OAAO,SAAS,WAAW,GAC9B,OAAO;CAET,OAAO,KAAK,IAAI,IAAI,eAAe;AACrC;AAEA,SAAS,yBAAiC;CACxC,OAAO,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;AAC7C;AAEA,eAAe,WAAW,MAAgC;CACxD,IAAI;EACF,MAAM,KAAK,IAAI;EACf,OAAO;CACT,SAAS,OAAO;EACd,IACE,SACA,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UAEf,OAAO;EAET,MAAM;CACR;AACF"}

package/dist/{dispatch-owned-runtime-BTK0uuOV.js → dispatch-owned-runtime-rL1dMpSL.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 
-import { $t as buildDispatchReplyContextSummary, Br as renderWorkingLanguagePrompt, Cr as buildInformationProtectionPromptPlan, Ct as canonicalizeLocalProjectPath, Et as withAgentActivityLocalStateLock, Fr as parseAgentControllerRef, Rr as renderInformationProtectionPrompt, Yt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, fr as buildCliLaunchInvocation, ft as isProjectBound, jr as isAgentControllerUsageAccountUnavailable, pt as listProjectBindings, qn as DaemonServiceRunError, wr as buildWorkingLanguagePromptPlan, wt as resolveLocalProjectConnectionForPath, xr as areAgentControllerInterfaceAccountsSame } from "./prepare-provider-runtime-CyIGaDTC.js";
-import { d as createDefaultRuntimeAgentControllerSettings } from "./base-url-CLMqlF1w.js";
+import { $t as buildDispatchReplyContextSummary, Ct as canonicalizeLocalProjectPath, Et as withAgentActivityLocalStateLock, Ir as renderInformationProtectionPrompt, Nr as parseAgentControllerRef, Rr as renderWorkingLanguagePrompt, Sr as buildWorkingLanguagePromptPlan, Yt as SPACE_ACTION_CONTEXT_GUIDANCE_LINES, ft as isProjectBound, kr as isAgentControllerUsageAccountUnavailable, pt as listProjectBindings, qn as DaemonServiceRunError, ur as buildCliLaunchInvocation, wt as resolveLocalProjectConnectionForPath, xr as buildInformationProtectionPromptPlan, yr as areAgentControllerInterfaceAccountsSame } from "./prepare-provider-runtime-BbJnigvx.js";
+import { d as createDefaultRuntimeAgentControllerSettings } from "./base-url-Cno_Uo8f.js";
 import { F as resolveOpenMeldRootDir, P as resolveOpenMeldEnvPreset, b as normalizeOpenMeldProfileId, g as legacyAccountProfileSpacesDir, r as accountProfileSpaceCacheDir, w as openMeldManagedBinaryPath } from "./paths-De9xdA2h.js";
-import { $A as computerFileAccessPolicyInputSchema, Dp as spaceMemberDirectoryEntrySchema, Gg as agentActivityEventSchema, HR as openMeldRuntimeProfileIdSchema, J_ as spaceCreatorSchema, Lg as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, Mf as organizationSkillRuntimeReleaseSelectionSchema, Vb as daemonStreamFrameSchema, XO as runtimeCoordinatorExecutionTokenEchoSchema, Xt as spaceEntryTargetSchema, ZD as executionContextAssignmentSchema, bk as resolveSpaceMentionLabels, dD as getSpaceMessageAddressingRelationSupportForTargetKind, gD as normalizeMessageEnvelope, gk as normalizeSpacePasswordText, gx as runtimeTransportHeartbeatResponseSchema, iD as MESSAGE_MENTION_TYPE_VALUES, jx as runtimeTransportRegisterSessionResponseSchema, lD as collectCanonicalMentionTextFragments, nj as computerFileAccessPolicySchema, ow as sanitizeSignalTextPreview, vD as resolveMessageEnvelopeTargetField, x as agentControllerSessionTitleSchema, yS as openMeldSpaceEgressActionSchema, yk as resolveSingleSpaceMentionLabels } from "./dist-YSbIHBnl.js";
-import { v as resolveCliContextId } from "./lock-Cz8h_yJh.js";
-import { F as resolveCurrentOpenMeldAccountContext } from "./context-DFf16i-C.js";
+import { Dp as spaceMemberDirectoryEntrySchema, Gg as agentActivityEventSchema, J_ as spaceCreatorSchema, Lg as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, Mf as organizationSkillRuntimeReleaseSelectionSchema, Mx as runtimeTransportRegisterSessionResponseSchema, QD as executionContextAssignmentSchema, UR as openMeldRuntimeProfileIdSchema, Vb as daemonStreamFrameSchema, Xt as spaceEntryTargetSchema, ZO as runtimeCoordinatorExecutionTokenEchoSchema, _D as normalizeMessageEnvelope, _k as normalizeSpacePasswordText, _x as runtimeTransportHeartbeatResponseSchema, aD as MESSAGE_MENTION_TYPE_VALUES, bS as openMeldSpaceEgressActionSchema, bk as resolveSingleSpaceMentionLabels, ej as computerFileAccessPolicyInputSchema, fD as getSpaceMessageAddressingRelationSupportForTargetKind, rj as computerFileAccessPolicySchema, sw as sanitizeSignalTextPreview, uD as collectCanonicalMentionTextFragments, x as agentControllerSessionTitleSchema, xk as resolveSpaceMentionLabels, yD as resolveMessageEnvelopeTargetField } from "./dist-BOBe5eOZ.js";
+import { v as resolveCliContextId } from "./lock-y1PCtVSn.js";
+import { F as resolveCurrentOpenMeldAccountContext } from "./context-NLQSSnf9.js";
 import { a as formatOpenMeldCliTextBlock } from "./cli-entry-command-CR_9QU1i.js";
-import { d as getAuthSessionState } from "./auth-session-B0J2UwSR.js";
+import { d as getAuthSessionState } from "./auth-session-BpRplB8x.js";
 import { n as resolveOpenMeldDistribution } from "./distribution-BDQT2ilb.js";
-import { a as DAEMON_SERVICE_RUNTIME_MODE_ENV, d as daemonDispatchJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, n as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, r as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, s as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV } from "./daemon-state-C09DaALw.js";
-import { a as asRecord, d as normalizeText, l as normalizeNonNegativeInteger$1, s as emitRunLine, u as normalizeOptionalText$8 } from "./daemon-device-id-C3UTBv9T.js";
-import { B as buildCenterAgentRoleTemplateText, F as SPACE_COLLABORATION_CONTEXT_RULE, H as buildSpaceAgentIdentityLine, J as isSelfWakeSpaceAction, K as composeDispatchBrief, R as buildAgentFacingMentalModelLines, U as buildSpaceEntryBriefNeedMoreLine, V as buildCompactDispatchActionGuidanceLines, W as buildSpaceWakeParticipantLines, Y as renderSpaceEntryBrief, Z as resolveSpacePublicationRequirement, q as deriveContinuity } from "./dual-view-guide-catalog-3LaB18SR.js";
+import { a as DAEMON_SERVICE_RUNTIME_MODE_ENV, d as daemonDispatchJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, n as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, r as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, s as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV } from "./daemon-state-CiTQcAWA.js";
+import { a as asRecord, d as normalizeText, l as normalizeNonNegativeInteger$1, s as emitRunLine, u as normalizeOptionalText$8 } from "./daemon-device-id-Dd-E5NjT.js";
+import { B as buildCenterAgentRoleTemplateText, F as SPACE_COLLABORATION_CONTEXT_RULE, H as buildSpaceAgentIdentityLine, J as isSelfWakeSpaceAction, K as composeDispatchBrief, R as buildAgentFacingMentalModelLines, U as buildSpaceEntryBriefNeedMoreLine, V as buildCompactDispatchActionGuidanceLines, W as buildSpaceWakeParticipantLines, Y as renderSpaceEntryBrief, Z as resolveSpacePublicationRequirement, q as deriveContinuity } from "./dual-view-guide-catalog-CSV_FNr4.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { access, chmod, link, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { z } from "zod/v4";
-import { appendFileSync, chmodSync, constants, existsSync, mkdirSync, readFileSync, renameSync, watch, writeFileSync } from "node:fs";
+import { appendFileSync, chmodSync, constants, existsSync, mkdirSync, readFileSync, renameSync, rmdirSync, watch, writeFileSync } from "node:fs";
 import process$1 from "node:process";
 import { spawn } from "node:child_process";
 import { isDeepStrictEqual } from "node:util";
@@ -2810,7 +2810,7 @@ const SPACE_ACTION_COMPLETION_RULES = [
 	"- Use the Space Action tool first. If your harness offers tool search or discovery, look up the required action before declaring it unavailable. A tool missing from the initial list is not proof of unavailability. Do not read setup or onboarding guides merely to submit this result.",
 	"- For a plain reply, omit wakeTargets and referenceTargets. Add targets only for an intentional handoff or reference to another Agent; never copy incoming activation targets or wake yourself.",
 	"- Submit the actual result and inspect the tool response before ending this turn.",
-	"- After one successful acknowledgement, stop submitting. It confirms a recorded proposal, not publication.",
+	"- After a successful acknowledgement, do not repeat the submission. It confirms a recorded proposal, not final publication. If a material correction is needed before this turn ends, submit the complete revised reply; it updates the same reply. Private output does not revise the public reply. Do not change a reply into another final action type.",
 	"- If a Space Action submission is confirmed rejected before recording, follow its correction guidance. If its submission outcome is unknown, submit no further Space Action in this turn, including an error-report reply. End with the diagnostic; OpenMeld owns recovery. Do not switch tools to retry the submission.",
 	"- A failed context read or business tool is not a Space Action submission. If no Space Action has been submitted, use the required completion action to report the blocker honestly; do not invent results from unread material."
 ];
@@ -3724,7 +3724,7 @@ function toJournalErrorMessage(error) {
 }
 //#endregion
 //#region src/local-service/inventory/agent-controller-interface-keeper.ts
-const LAST_GOOD_REUSE_TTL_MS = 15 * 6e4;
+const LAST_GOOD_REUSE_TTL_MS = 6e4;
 const AGENT_CONTROLLER_INTERFACE_REPROBE_DELAY_MS = 45e3;
 const keeperEntries = /* @__PURE__ */ new Map();
 function buildAgentControllerInterfaceKeeperKey(input) {
@@ -5945,6 +5945,36 @@ function readDispatchSpaceActionContext(contextPath) {
 	return parseDispatchSpaceActionContext(readJsonFile(contextPath));
 }
 function writeDispatchSpaceActionRecord(input) {
+	return withDispatchSpaceActionRecordLock(input.context, () => writeLockedDispatchSpaceActionRecord(input));
+}
+function withDispatchSpaceActionRecordLock(context, mutate) {
+	const lockPath = `${context.actionRecordPath}.lock`;
+	mkdirSync(lockPath, { mode: 448 });
+	try {
+		return mutate();
+	} finally {
+		rmdirSync(lockPath);
+	}
+}
+function replyDigest(action) {
+	return createHash("sha256").update(JSON.stringify(action)).digest("hex");
+}
+function appendReplyDigest(previousReplyDigests, action) {
+	if (previousReplyDigests.length >= 32) throw new DispatchSpaceActionRejectedError("space_action.already_recorded", "The reply revision limit has been reached. Read the current receipt.");
+	return [...previousReplyDigests, replyDigest(action)];
+}
+function readReconsideredReplyHistory(context, action) {
+	const archived = readDispatchSpaceActionRecord({ context: {
+		...context,
+		actionRecordPath: `${context.actionRecordPath}.superseded`
+	} });
+	if (archived.status === "invalid") throw new Error(archived.errorMessage);
+	if (archived.status === "missing") return [];
+	const previousReplyDigests = archived.record.previousReplyDigests ?? [];
+	if (action.type === "post_message" && previousReplyDigests.includes(replyDigest(action))) throw new DispatchSpaceActionRejectedError("space_action.already_recorded", "This reply version was already replaced. Read the current receipt.");
+	return archived.record.action.type === "post_message" && !isDeepStrictEqual(archived.record.action, action) ? appendReplyDigest(previousReplyDigests, archived.record.action) : previousReplyDigests;
+}
+function writeLockedDispatchSpaceActionRecord(input) {
 	const parsedAction = openMeldSpaceEgressActionSchema.safeParse(input.action);
 	if (!parsedAction.success) throw new DispatchSpaceActionRejectedError("space_action.invalid_input", parsedAction.error.message);
 	if (isSelfWakeSpaceAction(parsedAction.data, input.context.targetProfileId)) throw new DispatchSpaceActionRejectedError("space_action.invalid_input", "An Agent cannot Wake itself. To reply to the current message, omit wakeTargets (CLI: --wake) and submit the reply again. No action was recorded.");
@@ -5952,22 +5982,37 @@ function writeDispatchSpaceActionRecord(input) {
 	if (existing.status === "invalid") throw new Error(existing.errorMessage);
 	if (existing.status === "loaded" && isDeepStrictEqual(existing.record.action, parsedAction.data)) return existing.record;
 	assertContextActive(input.context, input.nowMs ?? Date.now());
+	if (existing.status === "loaded" && existing.record.action.type === "post_message" && parsedAction.data.type === "post_message") {
+		const previousReplyDigests = existing.record.previousReplyDigests ?? [];
+		if (previousReplyDigests.includes(replyDigest(parsedAction.data))) return existing.record;
+		const record = {
+			version: DISPATCH_SPACE_ACTION_RECORD_VERSION,
+			action: parsedAction.data,
+			command: input.command,
+			contextId: input.context.contextId,
+			createdAtMs: input.nowMs ?? Date.now(),
+			nonce: input.context.nonce,
+			previousReplyDigests: appendReplyDigest(previousReplyDigests, existing.record.action)
+		};
+		const temporaryPath = `${input.context.actionRecordPath}.${randomUUID()}.tmp`;
+		writeJsonFileExclusive(temporaryPath, record);
+		renameSync(temporaryPath, input.context.actionRecordPath);
+		return record;
+	}
+	const previousReplyDigests = existing.status === "missing" ? readReconsideredReplyHistory(input.context, parsedAction.data) : [];
 	const record = {
 		version: DISPATCH_SPACE_ACTION_RECORD_VERSION,
 		action: parsedAction.data,
 		command: input.command,
 		contextId: input.context.contextId,
 		createdAtMs: input.nowMs ?? Date.now(),
-		nonce: input.context.nonce
+		nonce: input.context.nonce,
+		...previousReplyDigests.length ? { previousReplyDigests } : {}
 	};
 	try {
 		writeJsonFileExclusive(input.context.actionRecordPath, record);
 	} catch (error) {
-		if (isNodeErrorCode(error, "EEXIST")) {
-			const existing = readDispatchSpaceActionRecord({ context: input.context });
-			if (existing.status === "loaded" && isDeepStrictEqual(existing.record.action, parsedAction.data)) return existing.record;
-			throw new DispatchSpaceActionRejectedError("space_action.already_recorded", "An OpenMeld Space Action has already been recorded for this dispatch. A Wake can only have one final Space action. Recover its receipt with the exact original arguments; do not replace it with a different action.");
-		}
+		if (isNodeErrorCode(error, "EEXIST")) throw new DispatchSpaceActionRejectedError("space_action.already_recorded", "An OpenMeld Space Action has already been recorded for this dispatch. A Wake can only have one final Space action. Recover its receipt with the exact original arguments; do not replace it with a different action.");
 		throw error;
 	}
 	return record;
@@ -5996,15 +6041,17 @@ function readDispatchSpaceActionRecord(input) {
 	}
 }
 function supersedeDispatchSpaceActionRecordForReconsideration(input) {
-	const readResult = readDispatchSpaceActionRecord(input);
-	if (readResult.status === "missing") return null;
-	if (readResult.status === "invalid") throw new Error(readResult.errorMessage);
-	const archivedPath = `${input.context.actionRecordPath}.superseded-${String(input.nowMs ?? Date.now())}-${randomUUID()}`;
-	renameSync(input.context.actionRecordPath, archivedPath);
-	return {
-		archivedPath,
-		record: readResult.record
-	};
+	return withDispatchSpaceActionRecordLock(input.context, () => {
+		const readResult = readDispatchSpaceActionRecord(input);
+		if (readResult.status === "missing") return null;
+		if (readResult.status === "invalid") throw new Error(readResult.errorMessage);
+		const archivedPath = `${input.context.actionRecordPath}.superseded`;
+		renameSync(input.context.actionRecordPath, archivedPath);
+		return {
+			archivedPath,
+			record: readResult.record
+		};
+	});
 }
 function parseDispatchSpaceActionContext(value) {
 	const record = toRecord(value, "OpenMeld Space Action context");
@@ -6083,7 +6130,8 @@ function parseDispatchSpaceActionRecord(value) {
 		command: requiredString(record.command, "command"),
 		contextId: requiredString(record.contextId, "contextId"),
 		createdAtMs: requiredFiniteNumber(record.createdAtMs, "createdAtMs"),
-		nonce: requiredString(record.nonce, "nonce")
+		nonce: requiredString(record.nonce, "nonce"),
+		...record.previousReplyDigests === void 0 ? {} : { previousReplyDigests: parseStringArray(record.previousReplyDigests) }
 	};
 }
 function parseSendTargetReference(value) {
@@ -6347,4 +6395,4 @@ function prependPathEntry(input) {
 //#endregion
 export { readReusableAgentControllerInterfaceSnapshot as $, createDispatchContinuationSpaceAccessContext as $t, buildAgentActivityEvent as A, toLocalSpaceStateIntegrityError as At, readAgentActivityOutboxHealth as B, buildPublicSpaceEntryUrl as Bt, recordOpenMeldCreatedLocalAgentSession as C, isLocalSpaceStateCorruptResult as Ct, readOpenCodeSessionRows as D, readSpaceLastSeenTs as Dt, queryOpenCodeReadOnly as E, readSpaceConfig as Et, enqueueAgentActivityHookEvent as F, writeSpaceRecentMentionProfileIds as Ft, buildCanonicalRepositoryUrl as G, buildSpaceMentionProfileIndex as Gt, removeProjectOutbox as H, buildSignalMessageReadProjection as Ht, removeProjectInbox as I, SpaceComposerSubmissionError as It, consumeArmedAgentControllerInterfaceReprobe as J, buildSpaceRoundReadProjection as Jt, buildRepositoryFingerprint as K, buildSpaceMessageReadRelationSummary as Kt, AgentActivitySubmissionResultsMismatchError as L, buildDispatchResultMessageReadProjection as Lt, normalizeSharedSessionTitle as M, updateSpaceLastSeenTs as Mt, readCodexSessionTitles as N, upsertSpaceConfig as Nt, resolveOpenCodeAuthPath as O, readSpaceRecentMentionProfileIds as Ot, drainAgentActivityHookInbox as P, writeSpaceCacheDeletionNoticeState as Pt, readLastSuccessfulAgentControllerInterfaceCheckAt as Q, collectResolvedSpaceMentions as Qt, applyAgentActivitySubmissionResults as R, buildDispatchResultReplyWorkflowProjection as Rt, readOpenMeldCreatedLocalAgentSessionProjectAttributions as S, OPENMELD_DISPATCH_RUNTIME_MODE_ENV as Sn, inspectSpaceCacheFile as St, resolveOpenMeldCreatedLocalAgentSessionProjectAttribution as T, readSpaceCacheDeletionNoticeState as Tt, readRecentAgentActivityHookStatus as U, buildSignalReplyWorkflowProjection as Ut, readDueAgentActivityOutbox as V, buildSignalIndex as Vt, createServiceGitEnvironment as W, buildSpaceMemberAgentPresencePresentation as Wt, readLastKnownAgentControllerAuthSnapshot as X, buildUpdatesReplyWorkflowProjection as Xt, didAgentControllerCommandFingerprintRemainStable as Y, buildSpaceRoundSignalPublication as Yt, readLastKnownAgentControllerUsageLimits as Z, closeMentionPickerState as Zt, sendDaemonFrame as _, resolveSpaceMemberAgentOwnerWakeDiagnosticsView as _n, resolveBootstrapSpaceOwnerProfileId as _t, DispatchSpaceActionClosedError as a, getSpaceAccessPassword as an, emitDaemonDispatchJournalEvent as at, startAgentActivityTranscriptWatchers as b, DISPATCH_OWNED_RUNTIME_MODE as bn, projectSpaceProfileCache as bt, createDispatchSpaceActionContext as c, isTargetPickerState as cn, readComputerFileAccessPolicy as ct, readDispatchSpaceActionRecord as d, listSpaceMentionRelationChoices as dn, isSameOrDescendantPath as dt, createSpaceMemberIdentityIndex as en, recordAgentControllerInterfaceProbeFailure as et, supersedeDispatchSpaceActionRecordForReconsideration as f, listSpaceMentionSuggestions as fn, buildDispatchBootstrapTemplateFacts as ft, parseDaemonFrame as g, resolveNextRecentMentionProfileIdsForQueuedText as gn, parseDispatchTask as gt, handleDaemonTransportFrame as h, prepareSpaceFileOnlySubmission as hn, buildDispatchSessionTitle as ht, readDispatchOwnedRuntimeGuard as i, formatRemovedCcRelationMessage as in, resolveNextRuntimeAgentControllerReportSyncAtMs as it, resolveObservedAgentActivityBinding as j, toSpaceConfigListIntegrityError as jt, resolveOpenCodeDatabasePath as k, removeSpaceConfig as kt, readDispatchSpaceActionContextForReceiptFromEnv as l, isWakeClosingSystemNoticeType as ln, resolveComputerFileAccessStorePath as lt, createCodexJsonRpcClient as m, prepareSpaceComposerSubmission as mn, buildDispatchPromptPlan as mt, assertDispatchOwnedRuntimeServiceMutationAllowed as n, enterRelationPickerState as nn, recordAgentControllerUsageLimitsObservation as nt, DispatchSpaceActionRejectedError as o, getSpaceAccessRequestContext as on, readRecentDaemonDispatchJournalEvents as ot, writeDispatchSpaceActionRecord as p, openTargetPickerState as pn, buildDispatchCorrelation as pt, buildAgentControllerInterfaceKeeperKey as q, buildSpaceProfileAddPlan as qt, buildDispatchOwnedRuntimeEnv as r, extractMentionAuthoringPrefix as rn, resolveAgentControllerCommandFingerprint as rt, OPENMELD_SPACE_ACTION_CONTEXT_PATH_ENV as s, isRelationPickerState as sn, ComputerFileAccessStoreError as st, assertDispatchOwnedRuntimePublicWriteAllowed as t, createSpaceTargetCatalog as tn, recordAgentControllerInterfaceProbeSuccess as tt, readDispatchSpaceActionContextFromEnv as u, listSpaceMemberDirectorySendTargets as un, updateComputerFileAccessPolicy as ut, collectObservedSessionWorkingDirectories as v, returnToTargetPickerState as vn, resolveBootstrapTargetProfileContext as vt, resolveLocalAgentSessionOrigin as w, listSpaceConfigs as wt, readOpenMeldCreatedLocalAgentSessionKeys as x, DISPATCH_SPACE_ACTION_CLI_FALLBACK_COMMAND as xn, LocalSpaceStateIntegrityError as xt, scanLocalAgentActivity as y, updateAuthoredMentionRanges as yn, resolveDispatchMentionSourceContext as yt, deferAgentActivityOutbox as z, buildPublicSpaceEntryPath as zt };
 
-//# sourceMappingURL=dispatch-owned-runtime-BTK0uuOV.js.map
+//# sourceMappingURL=dispatch-owned-runtime-rL1dMpSL.js.map