openmeld 0.3.281 → 0.3.287

package/dist/{openmeld-environment-target-CeFk6jOe.js → openmeld-environment-target-DydyKO8Z.js}

@@ -3,7 +3,7 @@
 import { a as resolveBaseUrl, r as normalizeGatewayBaseUrl, s as resolveDefaultGatewayBaseUrl } from "./base-url-b30kK86t.js";
 import { P as resolveOpenMeldEnvPreset } from "./paths-De9xdA2h.js";
 import { r as resolveAuthBaseUrl } from "./auth-url-Dnpds8Yf.js";
-import { ft as resolveUserFacingCliEntryCommand } from "./auth-session-D3JW6vDg.js";
+import { ft as resolveUserFacingCliEntryCommand } from "./auth-session-DRQMn41Z.js";
 import process from "node:process";
 //#region src/config/openmeld-environment-target.ts
 const OPENMELD_USER_FACING_CLI_COMMAND_ENV = "OPENMELD_USER_FACING_CLI_COMMAND";
@@ -57,4 +57,4 @@ function normalizeOptionalText(value) {
 //#endregion
 export { resolveOpenMeldEnvironmentTargetFromEnv as n, resolveOpenMeldEnvironmentTarget as t };
 
-//# sourceMappingURL=openmeld-environment-target-CeFk6jOe.js.map
+//# sourceMappingURL=openmeld-environment-target-DydyKO8Z.js.map

package/dist/{openmeld-environment-target-CeFk6jOe.js.map → openmeld-environment-target-DydyKO8Z.js.map}

@@ -1 +1 @@
-{"version":3,"file":"openmeld-environment-target-CeFk6jOe.js","names":[],"sources":["../src/config/openmeld-environment-target.ts"],"sourcesContent":["import process from \"node:process\";\nimport { resolveUserFacingCliEntryCommand } from \"../runtime/cli-entry-command\";\nimport { resolveAuthBaseUrl } from \"./auth-url\";\nimport {\n  normalizeGatewayBaseUrl,\n  resolveBaseUrl,\n  resolveDefaultGatewayBaseUrl,\n} from \"./base-url\";\nimport type { OpenMeldEnvPreset } from \"./paths\";\nimport { resolveOpenMeldEnvPreset } from \"./paths\";\n\nconst OPENMELD_USER_FACING_CLI_COMMAND_ENV = \"OPENMELD_USER_FACING_CLI_COMMAND\";\n\nexport type OpenMeldEnvironmentTarget = {\n  preset: OpenMeldEnvPreset;\n  gatewayUrl: string;\n  authBaseUrl: string;\n  userFacingCommand: string;\n};\n\ntype OpenMeldEnvironmentTargetInput = {\n  gatewayUrl?: string;\n  authUrl?: string;\n  env?: NodeJS.ProcessEnv;\n};\n\nexport async function resolveOpenMeldEnvironmentTarget(\n  input: OpenMeldEnvironmentTargetInput = {}\n): Promise<OpenMeldEnvironmentTarget> {\n  const env = input.env ?? process.env;\n  const preset = resolveOpenMeldEnvPreset({ env });\n  return {\n    preset,\n    gatewayUrl: await resolveBaseUrl(input.gatewayUrl, { env }),\n    authBaseUrl: resolveAuthBaseUrl(input.authUrl, { env }),\n    userFacingCommand: resolveUserFacingCommandForPreset({ env, preset }),\n  };\n}\n\nexport function resolveOpenMeldEnvironmentTargetFromEnv(\n  input: OpenMeldEnvironmentTargetInput = {}\n): OpenMeldEnvironmentTarget {\n  const env = input.env ?? process.env;\n  const preset = resolveOpenMeldEnvPreset({ env });\n  return {\n    preset,\n    gatewayUrl: resolveGatewayUrlFromEnvOnly({\n      env,\n      gatewayUrl: input.gatewayUrl,\n    }),\n    authBaseUrl: resolveAuthBaseUrl(input.authUrl, { env }),\n    userFacingCommand: resolveUserFacingCommandForPreset({ env, preset }),\n  };\n}\n\nfunction resolveUserFacingCommandForPreset(input: {\n  env: NodeJS.ProcessEnv;\n  preset: OpenMeldEnvPreset;\n}): string {\n  const explicitCommand = normalizeOptionalText(\n    input.env[OPENMELD_USER_FACING_CLI_COMMAND_ENV]\n  );\n  if (explicitCommand) {\n    return explicitCommand;\n  }\n  if (input.preset === \"dev-local\") {\n    return \"openmeld-dev\";\n  }\n  if (input.preset === \"canary\") {\n    return \"openmeld-canary\";\n  }\n  return resolveUserFacingCliEntryCommand({ env: input.env });\n}\n\nfunction resolveGatewayUrlFromEnvOnly(input: {\n  env: NodeJS.ProcessEnv;\n  gatewayUrl?: string;\n}): string {\n  const fromInput = normalizeOptionalText(input.gatewayUrl);\n  if (fromInput) {\n    return normalizeGatewayBaseUrl(fromInput);\n  }\n  const fromEnv = normalizeOptionalText(input.env.OPENMELD_GATEWAY_URL);\n  if (fromEnv) {\n    return normalizeGatewayBaseUrl(fromEnv);\n  }\n  return normalizeGatewayBaseUrl(\n    resolveDefaultGatewayBaseUrl({ env: input.env })\n  );\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n"],"mappings":";;;;;;;;AAWA,MAAM,uCAAuC;AAe7C,eAAsB,iCACpB,QAAwC,CAAC,GACL;CACpC,MAAM,MAAM,MAAM,OAAO,QAAQ;CACjC,MAAM,SAAS,yBAAyB,EAAE,IAAI,CAAC;CAC/C,OAAO;EACL;EACA,YAAY,MAAM,eAAe,MAAM,YAAY,EAAE,IAAI,CAAC;EAC1D,aAAa,mBAAmB,MAAM,SAAS,EAAE,IAAI,CAAC;EACtD,mBAAmB,kCAAkC;GAAE;GAAK;EAAO,CAAC;CACtE;AACF;AAEA,SAAgB,wCACd,QAAwC,CAAC,GACd;CAC3B,MAAM,MAAM,MAAM,OAAO,QAAQ;CACjC,MAAM,SAAS,yBAAyB,EAAE,IAAI,CAAC;CAC/C,OAAO;EACL;EACA,YAAY,6BAA6B;GACvC;GACA,YAAY,MAAM;EACpB,CAAC;EACD,aAAa,mBAAmB,MAAM,SAAS,EAAE,IAAI,CAAC;EACtD,mBAAmB,kCAAkC;GAAE;GAAK;EAAO,CAAC;CACtE;AACF;AAEA,SAAS,kCAAkC,OAGhC;CACT,MAAM,kBAAkB,sBACtB,MAAM,IAAI,qCACZ;CACA,IAAI,iBACF,OAAO;CAET,IAAI,MAAM,WAAW,aACnB,OAAO;CAET,IAAI,MAAM,WAAW,UACnB,OAAO;CAET,OAAO,iCAAiC,EAAE,KAAK,MAAM,IAAI,CAAC;AAC5D;AAEA,SAAS,6BAA6B,OAG3B;CACT,MAAM,YAAY,sBAAsB,MAAM,UAAU;CACxD,IAAI,WACF,OAAO,wBAAwB,SAAS;CAE1C,MAAM,UAAU,sBAAsB,MAAM,IAAI,oBAAoB;CACpE,IAAI,SACF,OAAO,wBAAwB,OAAO;CAExC,OAAO,wBACL,6BAA6B,EAAE,KAAK,MAAM,IAAI,CAAC,CACjD;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C"}
+{"version":3,"file":"openmeld-environment-target-DydyKO8Z.js","names":[],"sources":["../src/config/openmeld-environment-target.ts"],"sourcesContent":["import process from \"node:process\";\nimport { resolveUserFacingCliEntryCommand } from \"../runtime/cli-entry-command\";\nimport { resolveAuthBaseUrl } from \"./auth-url\";\nimport {\n  normalizeGatewayBaseUrl,\n  resolveBaseUrl,\n  resolveDefaultGatewayBaseUrl,\n} from \"./base-url\";\nimport type { OpenMeldEnvPreset } from \"./paths\";\nimport { resolveOpenMeldEnvPreset } from \"./paths\";\n\nconst OPENMELD_USER_FACING_CLI_COMMAND_ENV = \"OPENMELD_USER_FACING_CLI_COMMAND\";\n\nexport type OpenMeldEnvironmentTarget = {\n  preset: OpenMeldEnvPreset;\n  gatewayUrl: string;\n  authBaseUrl: string;\n  userFacingCommand: string;\n};\n\ntype OpenMeldEnvironmentTargetInput = {\n  gatewayUrl?: string;\n  authUrl?: string;\n  env?: NodeJS.ProcessEnv;\n};\n\nexport async function resolveOpenMeldEnvironmentTarget(\n  input: OpenMeldEnvironmentTargetInput = {}\n): Promise<OpenMeldEnvironmentTarget> {\n  const env = input.env ?? process.env;\n  const preset = resolveOpenMeldEnvPreset({ env });\n  return {\n    preset,\n    gatewayUrl: await resolveBaseUrl(input.gatewayUrl, { env }),\n    authBaseUrl: resolveAuthBaseUrl(input.authUrl, { env }),\n    userFacingCommand: resolveUserFacingCommandForPreset({ env, preset }),\n  };\n}\n\nexport function resolveOpenMeldEnvironmentTargetFromEnv(\n  input: OpenMeldEnvironmentTargetInput = {}\n): OpenMeldEnvironmentTarget {\n  const env = input.env ?? process.env;\n  const preset = resolveOpenMeldEnvPreset({ env });\n  return {\n    preset,\n    gatewayUrl: resolveGatewayUrlFromEnvOnly({\n      env,\n      gatewayUrl: input.gatewayUrl,\n    }),\n    authBaseUrl: resolveAuthBaseUrl(input.authUrl, { env }),\n    userFacingCommand: resolveUserFacingCommandForPreset({ env, preset }),\n  };\n}\n\nfunction resolveUserFacingCommandForPreset(input: {\n  env: NodeJS.ProcessEnv;\n  preset: OpenMeldEnvPreset;\n}): string {\n  const explicitCommand = normalizeOptionalText(\n    input.env[OPENMELD_USER_FACING_CLI_COMMAND_ENV]\n  );\n  if (explicitCommand) {\n    return explicitCommand;\n  }\n  if (input.preset === \"dev-local\") {\n    return \"openmeld-dev\";\n  }\n  if (input.preset === \"canary\") {\n    return \"openmeld-canary\";\n  }\n  return resolveUserFacingCliEntryCommand({ env: input.env });\n}\n\nfunction resolveGatewayUrlFromEnvOnly(input: {\n  env: NodeJS.ProcessEnv;\n  gatewayUrl?: string;\n}): string {\n  const fromInput = normalizeOptionalText(input.gatewayUrl);\n  if (fromInput) {\n    return normalizeGatewayBaseUrl(fromInput);\n  }\n  const fromEnv = normalizeOptionalText(input.env.OPENMELD_GATEWAY_URL);\n  if (fromEnv) {\n    return normalizeGatewayBaseUrl(fromEnv);\n  }\n  return normalizeGatewayBaseUrl(\n    resolveDefaultGatewayBaseUrl({ env: input.env })\n  );\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n"],"mappings":";;;;;;;;AAWA,MAAM,uCAAuC;AAe7C,eAAsB,iCACpB,QAAwC,CAAC,GACL;CACpC,MAAM,MAAM,MAAM,OAAO,QAAQ;CACjC,MAAM,SAAS,yBAAyB,EAAE,IAAI,CAAC;CAC/C,OAAO;EACL;EACA,YAAY,MAAM,eAAe,MAAM,YAAY,EAAE,IAAI,CAAC;EAC1D,aAAa,mBAAmB,MAAM,SAAS,EAAE,IAAI,CAAC;EACtD,mBAAmB,kCAAkC;GAAE;GAAK;EAAO,CAAC;CACtE;AACF;AAEA,SAAgB,wCACd,QAAwC,CAAC,GACd;CAC3B,MAAM,MAAM,MAAM,OAAO,QAAQ;CACjC,MAAM,SAAS,yBAAyB,EAAE,IAAI,CAAC;CAC/C,OAAO;EACL;EACA,YAAY,6BAA6B;GACvC;GACA,YAAY,MAAM;EACpB,CAAC;EACD,aAAa,mBAAmB,MAAM,SAAS,EAAE,IAAI,CAAC;EACtD,mBAAmB,kCAAkC;GAAE;GAAK;EAAO,CAAC;CACtE;AACF;AAEA,SAAS,kCAAkC,OAGhC;CACT,MAAM,kBAAkB,sBACtB,MAAM,IAAI,qCACZ;CACA,IAAI,iBACF,OAAO;CAET,IAAI,MAAM,WAAW,aACnB,OAAO;CAET,IAAI,MAAM,WAAW,UACnB,OAAO;CAET,OAAO,iCAAiC,EAAE,KAAK,MAAM,IAAI,CAAC;AAC5D;AAEA,SAAS,6BAA6B,OAG3B;CACT,MAAM,YAAY,sBAAsB,MAAM,UAAU;CACxD,IAAI,WACF,OAAO,wBAAwB,SAAS;CAE1C,MAAM,UAAU,sBAAsB,MAAM,IAAI,oBAAoB;CACpE,IAAI,SACF,OAAO,wBAAwB,OAAO;CAExC,OAAO,wBACL,6BAA6B,EAAE,KAAK,MAAM,IAAI,CAAC,CACjD;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C"}

package/dist/{openmeld-maintenance-worker-Cito5UjR.js → openmeld-maintenance-worker-C3cdKkJO.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 
 import { g as getConfiguredSkillsConfig } from "./base-url-b30kK86t.js";
-import { Ut as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-D9G1oa37.js";
-import { f as withSkillsInstallLock, l as downloadOfficialSkillUpdate, r as ensureLocalSkills } from "./state-BrFamidO.js";
-import { K as reconcileManagedCliLauncher, Z as configureDaemonMaintenanceEnvironment, g as assertDaemonMaintenanceInstallationOwnership } from "./daemon-service-runtime-CfxejhNC.js";
+import { Ut as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-B4go-qdR.js";
+import { f as withSkillsInstallLock, l as downloadOfficialSkillUpdate, r as ensureLocalSkills } from "./state-Der85tER.js";
+import { K as reconcileManagedCliLauncher, Z as configureDaemonMaintenanceEnvironment, g as assertDaemonMaintenanceInstallationOwnership } from "./daemon-service-runtime-CaUu_AdU.js";
 import { a as readPendingDaemonServiceUpdate, n as completePendingDaemonServiceUpdate } from "./daemon-service-update-state-BSn45OHj.js";
-import { h as scheduleDaemonServiceUpdate, m as runPendingDaemonServiceUpdate, n as readOpenMeldToolsMaintenancePolicy, t as createOpenMeldToolsUpdateCoordinator, y as prepareDaemonServiceUpdateWorkerCarrier } from "./openmeld-tools-update-coordinator-DasnCwiO.js";
+import { h as scheduleDaemonServiceUpdate, m as runPendingDaemonServiceUpdate, n as readOpenMeldToolsMaintenancePolicy, t as createOpenMeldToolsUpdateCoordinator, y as prepareDaemonServiceUpdateWorkerCarrier } from "./openmeld-tools-update-coordinator-B_Dd_-GW.js";
 import { a as isOpenMeldOrphanedLockError, d as runWithHeldLock, i as isOpenMeldLockError, t as acquireLock } from "./lock-DP8d33p_.js";
 import { G as withDaemonServiceReconcileLock } from "./daemon-state-CTOVPwNq.js";
 import { i as readDaemonServiceContract } from "./daemon-service-contract-CsANv7K_.js";
-import { l as OPENMELD_VERSION } from "./daemon-lifecycle-journal-CazLvrLu.js";
+import { l as OPENMELD_VERSION } from "./daemon-lifecycle-journal-BK-K3kGX.js";
 import { S as resolveDaemonServiceManager, v as readDaemonServiceStartupPolicyCurrent } from "./daemon-service-manager-a5tY3qpR.js";
 import { a as readPendingOpenMeldToolsUpdateAttempt } from "./openmeld-tools-update-attempt-state-B6t53OYC.js";
-import { s as resolveTrackedInstallTargets } from "./installation-inventory-BMPU4Tgf.js";
-import { t as installSkillsToTargets } from "./installer-BLAf7RHI.js";
+import { s as resolveTrackedInstallTargets } from "./installation-inventory-Cm-cGiGv.js";
+import { t as installSkillsToTargets } from "./installer-BMX4Gbpp.js";
 //#region src/skills/maintenance.ts
 async function maintainOfficialCliSkill() {
 	if (await downloadOfficialSkillUpdate().catch((error) => {
@@ -80,7 +80,7 @@ async function runMaintenancePass() {
 	}
 	const result = await runPendingDaemonServiceUpdate();
 	if (result?.phase === "updated") {
-		const { finishComputerSetupAfterBackgroundUpdate, recoverComputerSetupAfterBackgroundUpdate } = await import("./computer-setup-continuation-a55NW4KT.js");
+		const { finishComputerSetupAfterBackgroundUpdate, recoverComputerSetupAfterBackgroundUpdate } = await import("./computer-setup-continuation-CnIYFkOu.js");
 		await prepareDaemonServiceUpdateWorkerCarrier(result);
 		await finishComputerSetupAfterBackgroundUpdate();
 		await withDaemonServiceReconcileLock(async () => {
@@ -103,10 +103,11 @@ async function reconcileCurrentServiceStartupPolicy(updatesCurrent) {
 		status: await manager?.status() ?? null
 	}) === false) await scheduleDaemonServiceUpdate({
 		targetVersion: contract.daemonVersion,
-		urgency: "available"
+		urgency: "available",
+		requestSource: "automatic"
 	});
 }
 //#endregion
 export { runOpenMeldMaintenanceWorker };
 
-//# sourceMappingURL=openmeld-maintenance-worker-Cito5UjR.js.map
+//# sourceMappingURL=openmeld-maintenance-worker-C3cdKkJO.js.map

package/dist/{openmeld-maintenance-worker-Cito5UjR.js.map → openmeld-maintenance-worker-C3cdKkJO.js.map}

@@ -1 +1 @@
-{"version":3,"file":"openmeld-maintenance-worker-Cito5UjR.js","names":[],"sources":["../src/skills/maintenance.ts","../src/local-service/maintenance/openmeld-maintenance-worker.ts"],"sourcesContent":["import { getConfiguredSkillsConfig } from \"../config/runtime-config\";\nimport { resolveSkillsAgentRegistry } from \"./agents\";\nimport { resolveTrackedInstallTargets } from \"./installation-inventory\";\nimport { installSkillsToTargets, withSkillsInstallLock } from \"./installer\";\nimport { downloadOfficialSkillUpdate } from \"./official-release\";\nimport { ensureLocalSkills } from \"./store\";\n\nexport async function maintainOfficialCliSkill(): Promise<void> {\n  const outcome = await downloadOfficialSkillUpdate().catch(\n    (error: unknown) => {\n      process.stderr.write(\n        `[openmeld] Skill download deferred: ${error instanceof Error ? error.message : String(error)}\\n`\n      );\n      return \"deferred\" as const;\n    }\n  );\n  if (outcome === \"lane_isolated\") {\n    return;\n  }\n  await withSkillsInstallLock(async () => {\n    const localSkills = await ensureLocalSkills();\n    const skillsConfig = await getConfiguredSkillsConfig();\n    const targets = await resolveTrackedInstallTargets({\n      skillsConfig,\n      registry: resolveSkillsAgentRegistry(skillsConfig),\n      localSkills,\n      onlyOpenMeldInstalledTargets: false,\n    });\n    const results = await installSkillsToTargets({\n      skills: localSkills,\n      targets,\n    });\n    const failures = results.filter((result) => result.status === \"failed\");\n    if (failures.length) {\n      throw new Error(\n        failures\n          .map((result) => `${result.targetId}: ${result.reason}`)\n          .join(\"; \")\n      );\n    }\n  });\n}\n","import { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { configureDaemonMaintenanceEnvironment } from \"../../config/daemon-service-update-worker-registration\";\nimport { withDaemonServiceReconcileLock } from \"../../config/daemon-state\";\nimport {\n  acquireLock,\n  isOpenMeldLockError,\n  isOpenMeldOrphanedLockError,\n  runWithHeldLock,\n} from \"../../config/lock\";\nimport { reconcileManagedCliLauncher } from \"../../local-components/managed-install\";\nimport { OPENMELD_VERSION } from \"../../runtime/version\";\nimport { maintainOfficialCliSkill } from \"../../skills/maintenance\";\nimport {\n  readDaemonServiceStartupPolicyCurrent,\n  resolveDaemonServiceManager,\n} from \"../lifecycle/daemon-service-manager\";\nimport { assertDaemonMaintenanceInstallationOwnership } from \"../lifecycle/daemon-service-manager-command-match\";\nimport {\n  runPendingDaemonServiceUpdate,\n  scheduleDaemonServiceUpdate,\n} from \"../lifecycle/daemon-service-update-coordinator\";\nimport {\n  completePendingDaemonServiceUpdate,\n  readPendingDaemonServiceUpdate,\n} from \"../lifecycle/daemon-service-update-state\";\nimport { prepareDaemonServiceUpdateWorkerCarrier } from \"../lifecycle/daemon-service-update-worker-manager\";\nimport { readOpenMeldToolsMaintenancePolicy } from \"./openmeld-tools-maintenance-policy\";\nimport { readPendingOpenMeldToolsUpdateAttempt } from \"./openmeld-tools-update-attempt-state\";\nimport { createOpenMeldToolsUpdateCoordinator } from \"./openmeld-tools-update-coordinator\";\n\n// The OS owns this process. It is also the sole executor of persisted download\n// attempts; Service requests only publish an attempt and wake this worker.\nexport async function runOpenMeldMaintenanceWorker(): Promise<void> {\n  configureDaemonMaintenanceEnvironment(process.env);\n  await runMaintenanceWithLock();\n}\n\nasync function runMaintenanceWithLock(): Promise<boolean> {\n  try {\n    const lock = await acquireLock({\n      openMeldProfileId: \"__system__\",\n      key: \"maintenance-worker\",\n    });\n    return await runWithHeldLock({\n      lock,\n      run: runMaintenancePass,\n      releaseContext: { component: \"maintenance_worker\" },\n    });\n  } catch (error) {\n    // Setup/repair may still own the lifecycle lock when the OS first runs us.\n    // Leave its state intact; the existing OS trigger will run another pass.\n    if (isOpenMeldLockError(error) && !isOpenMeldOrphanedLockError(error)) {\n      return false;\n    }\n    throw error;\n  }\n}\n\nasync function runMaintenancePass(): Promise<boolean> {\n  const pendingJob = await readPendingDaemonServiceUpdate();\n  const pendingAttempt = await readPendingOpenMeldToolsUpdateAttempt();\n  if (!(pendingJob || pendingAttempt)) {\n    const contract = await readDaemonServiceContract();\n    if (!contract || contract.desiredState !== \"background\") {\n      return false;\n    }\n  }\n  await assertDaemonMaintenanceInstallationOwnership();\n  await reconcileManagedCliLauncher();\n  if ((await readOpenMeldToolsMaintenancePolicy()).automaticUpdatesEnabled) {\n    try {\n      await maintainOfficialCliSkill();\n    } catch (error) {\n      process.stderr.write(\n        `[openmeld] Skill maintenance deferred: ${error instanceof Error ? error.message : String(error)}\\n`\n      );\n    }\n  }\n  const coordinator = createOpenMeldToolsUpdateCoordinator();\n  if (!pendingJob) {\n    if (pendingAttempt) {\n      await coordinator.resumePendingUpdate();\n    } else {\n      const update = await coordinator.requestUpdate({\n        requestSource: \"automatic\",\n      });\n      await reconcileCurrentServiceStartupPolicy(update.status === \"current\");\n    }\n    await coordinator.waitForIdle();\n  }\n  const result = await runPendingDaemonServiceUpdate();\n  if (result?.phase === \"updated\") {\n    const {\n      finishComputerSetupAfterBackgroundUpdate,\n      recoverComputerSetupAfterBackgroundUpdate,\n    } = await import(\"../../commands/computer-setup-continuation\");\n    // Only a verified replacement may replace the working recovery carrier.\n    await prepareDaemonServiceUpdateWorkerCarrier(result);\n    await finishComputerSetupAfterBackgroundUpdate();\n    await withDaemonServiceReconcileLock(async () => {\n      const current = await readPendingDaemonServiceUpdate();\n      if (\n        current?.jobId === result.jobId &&\n        current.phase === \"updated\" &&\n        current.targetVersion === result.targetVersion\n      ) {\n        await completePendingDaemonServiceUpdate(current);\n      }\n    });\n    await recoverComputerSetupAfterBackgroundUpdate();\n    return true;\n  }\n  if (result?.phase === \"restored\" || result?.phase === \"needs_help\") {\n    process.exitCode = 1;\n  }\n  return false;\n}\n\nasync function reconcileCurrentServiceStartupPolicy(\n  updatesCurrent: boolean\n): Promise<void> {\n  if (!updatesCurrent) {\n    return;\n  }\n  const contract = await readDaemonServiceContract();\n  // An older recovery worker must not apply its policy to a newer Service,\n  // and maintenance must preserve an explicit user stop.\n  if (\n    contract?.desiredState !== \"background\" ||\n    contract.daemonVersion !== OPENMELD_VERSION\n  ) {\n    return;\n  }\n  const manager = await resolveDaemonServiceManager();\n  if (\n    (await readDaemonServiceStartupPolicyCurrent({\n      controller: manager?.controller ?? null,\n      status: (await manager?.status()) ?? null,\n    })) === false\n  ) {\n    await scheduleDaemonServiceUpdate({\n      targetVersion: contract.daemonVersion,\n      urgency: \"available\",\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAOA,eAAsB,2BAA0C;CAS9D,IAAI,MARkB,4BAA4B,CAAC,CAAC,OACjD,UAAmB;EAClB,QAAQ,OAAO,MACb,uCAAuC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAChG;EACA,OAAO;CACT,CACF,MACgB,iBACd;CAEF,MAAM,sBAAsB,YAAY;EACtC,MAAM,cAAc,MAAM,kBAAkB;EAC5C,MAAM,eAAe,MAAM,0BAA0B;EACrD,MAAM,UAAU,MAAM,6BAA6B;GACjD;GACA,UAAU,2BAA2B,YAAY;GACjD;GACA,8BAA8B;EAChC,CAAC;EAKD,MAAM,YAAW,MAJK,uBAAuB;GAC3C,QAAQ;GACR;EACF,CAAC,EAAA,CACwB,QAAQ,WAAW,OAAO,WAAW,QAAQ;EACtE,IAAI,SAAS,QACX,MAAM,IAAI,MACR,SACG,KAAK,WAAW,GAAG,OAAO,SAAS,IAAI,OAAO,QAAQ,CAAC,CACvD,KAAK,IAAI,CACd;CAEJ,CAAC;AACH;;;ACTA,eAAsB,+BAA8C;CAClE,sCAAsC,QAAQ,GAAG;CACjD,MAAM,uBAAuB;AAC/B;AAEA,eAAe,yBAA2C;CACxD,IAAI;EACF,MAAM,OAAO,MAAM,YAAY;GAC7B,mBAAmB;GACnB,KAAK;EACP,CAAC;EACD,OAAO,MAAM,gBAAgB;GAC3B;GACA,KAAK;GACL,gBAAgB,EAAE,WAAW,qBAAqB;EACpD,CAAC;CACH,SAAS,OAAO;EAGd,IAAI,oBAAoB,KAAK,KAAK,CAAC,4BAA4B,KAAK,GAClE,OAAO;EAET,MAAM;CACR;AACF;AAEA,eAAe,qBAAuC;CACpD,MAAM,aAAa,MAAM,+BAA+B;CACxD,MAAM,iBAAiB,MAAM,sCAAsC;CACnE,IAAI,EAAE,cAAc,iBAAiB;EACnC,MAAM,WAAW,MAAM,0BAA0B;EACjD,IAAI,CAAC,YAAY,SAAS,iBAAiB,cACzC,OAAO;CAEX;CACA,MAAM,6CAA6C;CACnD,MAAM,4BAA4B;CAClC,KAAK,MAAM,mCAAmC,EAAA,CAAG,yBAC/C,IAAI;EACF,MAAM,yBAAyB;CACjC,SAAS,OAAO;EACd,QAAQ,OAAO,MACb,0CAA0C,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACnG;CACF;CAEF,MAAM,cAAc,qCAAqC;CACzD,IAAI,CAAC,YAAY;EACf,IAAI,gBACF,MAAM,YAAY,oBAAoB;OAKtC,MAAM,sCAAqC,MAHtB,YAAY,cAAc,EAC7C,eAAe,YACjB,CAAC,EAAA,CACiD,WAAW,SAAS;EAExE,MAAM,YAAY,YAAY;CAChC;CACA,MAAM,SAAS,MAAM,8BAA8B;CACnD,IAAI,QAAQ,UAAU,WAAW;EAC/B,MAAM,EACJ,0CACA,8CACE,MAAM,OAAO;EAEjB,MAAM,wCAAwC,MAAM;EACpD,MAAM,yCAAyC;EAC/C,MAAM,+BAA+B,YAAY;GAC/C,MAAM,UAAU,MAAM,+BAA+B;GACrD,IACE,SAAS,UAAU,OAAO,SAC1B,QAAQ,UAAU,aAClB,QAAQ,kBAAkB,OAAO,eAEjC,MAAM,mCAAmC,OAAO;EAEpD,CAAC;EACD,MAAM,0CAA0C;EAChD,OAAO;CACT;CACA,IAAI,QAAQ,UAAU,cAAc,QAAQ,UAAU,cACpD,QAAQ,WAAW;CAErB,OAAO;AACT;AAEA,eAAe,qCACb,gBACe;CACf,IAAI,CAAC,gBACH;CAEF,MAAM,WAAW,MAAM,0BAA0B;CAGjD,IACE,UAAU,iBAAiB,gBAC3B,SAAS,kBAAkB,kBAE3B;CAEF,MAAM,UAAU,MAAM,4BAA4B;CAClD,IACG,MAAM,sCAAsC;EAC3C,YAAY,SAAS,cAAc;EACnC,QAAS,MAAM,SAAS,OAAO,KAAM;CACvC,CAAC,MAAO,OAER,MAAM,4BAA4B;EAChC,eAAe,SAAS;EACxB,SAAS;CACX,CAAC;AAEL"}
+{"version":3,"file":"openmeld-maintenance-worker-C3cdKkJO.js","names":[],"sources":["../src/skills/maintenance.ts","../src/local-service/maintenance/openmeld-maintenance-worker.ts"],"sourcesContent":["import { getConfiguredSkillsConfig } from \"../config/runtime-config\";\nimport { resolveSkillsAgentRegistry } from \"./agents\";\nimport { resolveTrackedInstallTargets } from \"./installation-inventory\";\nimport { installSkillsToTargets, withSkillsInstallLock } from \"./installer\";\nimport { downloadOfficialSkillUpdate } from \"./official-release\";\nimport { ensureLocalSkills } from \"./store\";\n\nexport async function maintainOfficialCliSkill(): Promise<void> {\n  const outcome = await downloadOfficialSkillUpdate().catch(\n    (error: unknown) => {\n      process.stderr.write(\n        `[openmeld] Skill download deferred: ${error instanceof Error ? error.message : String(error)}\\n`\n      );\n      return \"deferred\" as const;\n    }\n  );\n  if (outcome === \"lane_isolated\") {\n    return;\n  }\n  await withSkillsInstallLock(async () => {\n    const localSkills = await ensureLocalSkills();\n    const skillsConfig = await getConfiguredSkillsConfig();\n    const targets = await resolveTrackedInstallTargets({\n      skillsConfig,\n      registry: resolveSkillsAgentRegistry(skillsConfig),\n      localSkills,\n      onlyOpenMeldInstalledTargets: false,\n    });\n    const results = await installSkillsToTargets({\n      skills: localSkills,\n      targets,\n    });\n    const failures = results.filter((result) => result.status === \"failed\");\n    if (failures.length) {\n      throw new Error(\n        failures\n          .map((result) => `${result.targetId}: ${result.reason}`)\n          .join(\"; \")\n      );\n    }\n  });\n}\n","import { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { configureDaemonMaintenanceEnvironment } from \"../../config/daemon-service-update-worker-registration\";\nimport { withDaemonServiceReconcileLock } from \"../../config/daemon-state\";\nimport {\n  acquireLock,\n  isOpenMeldLockError,\n  isOpenMeldOrphanedLockError,\n  runWithHeldLock,\n} from \"../../config/lock\";\nimport { reconcileManagedCliLauncher } from \"../../local-components/managed-install\";\nimport { OPENMELD_VERSION } from \"../../runtime/version\";\nimport { maintainOfficialCliSkill } from \"../../skills/maintenance\";\nimport {\n  readDaemonServiceStartupPolicyCurrent,\n  resolveDaemonServiceManager,\n} from \"../lifecycle/daemon-service-manager\";\nimport { assertDaemonMaintenanceInstallationOwnership } from \"../lifecycle/daemon-service-manager-command-match\";\nimport {\n  runPendingDaemonServiceUpdate,\n  scheduleDaemonServiceUpdate,\n} from \"../lifecycle/daemon-service-update-coordinator\";\nimport {\n  completePendingDaemonServiceUpdate,\n  readPendingDaemonServiceUpdate,\n} from \"../lifecycle/daemon-service-update-state\";\nimport { prepareDaemonServiceUpdateWorkerCarrier } from \"../lifecycle/daemon-service-update-worker-manager\";\nimport { readOpenMeldToolsMaintenancePolicy } from \"./openmeld-tools-maintenance-policy\";\nimport { readPendingOpenMeldToolsUpdateAttempt } from \"./openmeld-tools-update-attempt-state\";\nimport { createOpenMeldToolsUpdateCoordinator } from \"./openmeld-tools-update-coordinator\";\n\n// The OS owns this process. It is also the sole executor of persisted download\n// attempts; Service requests only publish an attempt and wake this worker.\nexport async function runOpenMeldMaintenanceWorker(): Promise<void> {\n  configureDaemonMaintenanceEnvironment(process.env);\n  await runMaintenanceWithLock();\n}\n\nasync function runMaintenanceWithLock(): Promise<boolean> {\n  try {\n    const lock = await acquireLock({\n      openMeldProfileId: \"__system__\",\n      key: \"maintenance-worker\",\n    });\n    return await runWithHeldLock({\n      lock,\n      run: runMaintenancePass,\n      releaseContext: { component: \"maintenance_worker\" },\n    });\n  } catch (error) {\n    // Setup/repair may still own the lifecycle lock when the OS first runs us.\n    // Leave its state intact; the existing OS trigger will run another pass.\n    if (isOpenMeldLockError(error) && !isOpenMeldOrphanedLockError(error)) {\n      return false;\n    }\n    throw error;\n  }\n}\n\nasync function runMaintenancePass(): Promise<boolean> {\n  const pendingJob = await readPendingDaemonServiceUpdate();\n  const pendingAttempt = await readPendingOpenMeldToolsUpdateAttempt();\n  if (!(pendingJob || pendingAttempt)) {\n    const contract = await readDaemonServiceContract();\n    if (!contract || contract.desiredState !== \"background\") {\n      return false;\n    }\n  }\n  await assertDaemonMaintenanceInstallationOwnership();\n  await reconcileManagedCliLauncher();\n  if ((await readOpenMeldToolsMaintenancePolicy()).automaticUpdatesEnabled) {\n    try {\n      await maintainOfficialCliSkill();\n    } catch (error) {\n      process.stderr.write(\n        `[openmeld] Skill maintenance deferred: ${error instanceof Error ? error.message : String(error)}\\n`\n      );\n    }\n  }\n  const coordinator = createOpenMeldToolsUpdateCoordinator();\n  if (!pendingJob) {\n    if (pendingAttempt) {\n      await coordinator.resumePendingUpdate();\n    } else {\n      const update = await coordinator.requestUpdate({\n        requestSource: \"automatic\",\n      });\n      await reconcileCurrentServiceStartupPolicy(update.status === \"current\");\n    }\n    await coordinator.waitForIdle();\n  }\n  const result = await runPendingDaemonServiceUpdate();\n  if (result?.phase === \"updated\") {\n    const {\n      finishComputerSetupAfterBackgroundUpdate,\n      recoverComputerSetupAfterBackgroundUpdate,\n    } = await import(\"../../commands/computer-setup-continuation\");\n    // Only a verified replacement may replace the working recovery carrier.\n    await prepareDaemonServiceUpdateWorkerCarrier(result);\n    await finishComputerSetupAfterBackgroundUpdate();\n    await withDaemonServiceReconcileLock(async () => {\n      const current = await readPendingDaemonServiceUpdate();\n      if (\n        current?.jobId === result.jobId &&\n        current.phase === \"updated\" &&\n        current.targetVersion === result.targetVersion\n      ) {\n        await completePendingDaemonServiceUpdate(current);\n      }\n    });\n    await recoverComputerSetupAfterBackgroundUpdate();\n    return true;\n  }\n  if (result?.phase === \"restored\" || result?.phase === \"needs_help\") {\n    process.exitCode = 1;\n  }\n  return false;\n}\n\nasync function reconcileCurrentServiceStartupPolicy(\n  updatesCurrent: boolean\n): Promise<void> {\n  if (!updatesCurrent) {\n    return;\n  }\n  const contract = await readDaemonServiceContract();\n  // An older recovery worker must not apply its policy to a newer Service,\n  // and maintenance must preserve an explicit user stop.\n  if (\n    contract?.desiredState !== \"background\" ||\n    contract.daemonVersion !== OPENMELD_VERSION\n  ) {\n    return;\n  }\n  const manager = await resolveDaemonServiceManager();\n  if (\n    (await readDaemonServiceStartupPolicyCurrent({\n      controller: manager?.controller ?? null,\n      status: (await manager?.status()) ?? null,\n    })) === false\n  ) {\n    await scheduleDaemonServiceUpdate({\n      targetVersion: contract.daemonVersion,\n      urgency: \"available\",\n      requestSource: \"automatic\",\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAOA,eAAsB,2BAA0C;CAS9D,IAAI,MARkB,4BAA4B,CAAC,CAAC,OACjD,UAAmB;EAClB,QAAQ,OAAO,MACb,uCAAuC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAChG;EACA,OAAO;CACT,CACF,MACgB,iBACd;CAEF,MAAM,sBAAsB,YAAY;EACtC,MAAM,cAAc,MAAM,kBAAkB;EAC5C,MAAM,eAAe,MAAM,0BAA0B;EACrD,MAAM,UAAU,MAAM,6BAA6B;GACjD;GACA,UAAU,2BAA2B,YAAY;GACjD;GACA,8BAA8B;EAChC,CAAC;EAKD,MAAM,YAAW,MAJK,uBAAuB;GAC3C,QAAQ;GACR;EACF,CAAC,EAAA,CACwB,QAAQ,WAAW,OAAO,WAAW,QAAQ;EACtE,IAAI,SAAS,QACX,MAAM,IAAI,MACR,SACG,KAAK,WAAW,GAAG,OAAO,SAAS,IAAI,OAAO,QAAQ,CAAC,CACvD,KAAK,IAAI,CACd;CAEJ,CAAC;AACH;;;ACTA,eAAsB,+BAA8C;CAClE,sCAAsC,QAAQ,GAAG;CACjD,MAAM,uBAAuB;AAC/B;AAEA,eAAe,yBAA2C;CACxD,IAAI;EACF,MAAM,OAAO,MAAM,YAAY;GAC7B,mBAAmB;GACnB,KAAK;EACP,CAAC;EACD,OAAO,MAAM,gBAAgB;GAC3B;GACA,KAAK;GACL,gBAAgB,EAAE,WAAW,qBAAqB;EACpD,CAAC;CACH,SAAS,OAAO;EAGd,IAAI,oBAAoB,KAAK,KAAK,CAAC,4BAA4B,KAAK,GAClE,OAAO;EAET,MAAM;CACR;AACF;AAEA,eAAe,qBAAuC;CACpD,MAAM,aAAa,MAAM,+BAA+B;CACxD,MAAM,iBAAiB,MAAM,sCAAsC;CACnE,IAAI,EAAE,cAAc,iBAAiB;EACnC,MAAM,WAAW,MAAM,0BAA0B;EACjD,IAAI,CAAC,YAAY,SAAS,iBAAiB,cACzC,OAAO;CAEX;CACA,MAAM,6CAA6C;CACnD,MAAM,4BAA4B;CAClC,KAAK,MAAM,mCAAmC,EAAA,CAAG,yBAC/C,IAAI;EACF,MAAM,yBAAyB;CACjC,SAAS,OAAO;EACd,QAAQ,OAAO,MACb,0CAA0C,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACnG;CACF;CAEF,MAAM,cAAc,qCAAqC;CACzD,IAAI,CAAC,YAAY;EACf,IAAI,gBACF,MAAM,YAAY,oBAAoB;OAKtC,MAAM,sCAAqC,MAHtB,YAAY,cAAc,EAC7C,eAAe,YACjB,CAAC,EAAA,CACiD,WAAW,SAAS;EAExE,MAAM,YAAY,YAAY;CAChC;CACA,MAAM,SAAS,MAAM,8BAA8B;CACnD,IAAI,QAAQ,UAAU,WAAW;EAC/B,MAAM,EACJ,0CACA,8CACE,MAAM,OAAO;EAEjB,MAAM,wCAAwC,MAAM;EACpD,MAAM,yCAAyC;EAC/C,MAAM,+BAA+B,YAAY;GAC/C,MAAM,UAAU,MAAM,+BAA+B;GACrD,IACE,SAAS,UAAU,OAAO,SAC1B,QAAQ,UAAU,aAClB,QAAQ,kBAAkB,OAAO,eAEjC,MAAM,mCAAmC,OAAO;EAEpD,CAAC;EACD,MAAM,0CAA0C;EAChD,OAAO;CACT;CACA,IAAI,QAAQ,UAAU,cAAc,QAAQ,UAAU,cACpD,QAAQ,WAAW;CAErB,OAAO;AACT;AAEA,eAAe,qCACb,gBACe;CACf,IAAI,CAAC,gBACH;CAEF,MAAM,WAAW,MAAM,0BAA0B;CAGjD,IACE,UAAU,iBAAiB,gBAC3B,SAAS,kBAAkB,kBAE3B;CAEF,MAAM,UAAU,MAAM,4BAA4B;CAClD,IACG,MAAM,sCAAsC;EAC3C,YAAY,SAAS,cAAc;EACnC,QAAS,MAAM,SAAS,OAAO,KAAM;CACvC,CAAC,MAAO,OAER,MAAM,4BAA4B;EAChC,eAAe,SAAS;EACxB,SAAS;EACT,eAAe;CACjB,CAAC;AAEL"}

package/dist/{openmeld-tools-update-coordinator-DasnCwiO.js → openmeld-tools-update-coordinator-B_Dd_-GW.js}

@@ -5,30 +5,30 @@ import { D as isLoopbackHostname, a as resolveBaseUrl, c as resolveExplicitGatew
 import { D as openMeldRootDir, F as resolveOpenMeldRootDir, P as resolveOpenMeldEnvPreset, T as openMeldManagedVersionBinaryPath, t as OPENMELD_HOME_ENV_KEY, x as openMeldBackupsDir } from "./paths-De9xdA2h.js";
 import { r as resolveAuthBaseUrl } from "./auth-url-Dnpds8Yf.js";
 import { lt as daemonServiceLaneSchema, mt as localAgentCatalogSchema } from "./dist-zRc0hA1y.js";
-import { $ as resolvePublicAgentFailureRecovery, Q as resolvePublicAgentAvailabilityCopy } from "./task-result-DB1vR1p4.js";
-import { en as createCurrentDeviceApi, rr as toStructuredApiClientFailure } from "./dist-Ba813GzD.js";
-import { Ct as createPrimaryBindingReadSession, Kr as DaemonServiceRunError, Lt as resolveAgentTargetState, Mn as createLocalAdapterEntries, Tt as resolveAgentProfilePrimaryAgentControllerReport, d as matchesExpectedWorkspace, f as resolveOpenClawAuthStatus, g as readDaemonRouteCatalogCache, h as resolveOpenClawLocalBootstrapPaths, i as listOpenClawGatewayAgents, j as resolveEffectiveProfileWorkingFolderRuntime, jn as createLocalAdapterContainer, l as findOpenClawAgentById, m as readOpenClawLocalBootstrapState, n as fetchOpenClawGatewayHealth, p as resolveOpenClawProviderRuntimeWorkingDirectory, qt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, r as listOpenClawAgents, t as prepareProviderRuntime, u as findOpenClawAgentsByWorkspace, v as loadDaemonRouteCatalog, vt as NO_LOCAL_AGENTS_NEED_OPENMELD_SERVICE_REASON, wt as createExpectedRoutesReadSession, yt as syncDeviceRuntimeStateProjection } from "./prepare-provider-runtime-D9G1oa37.js";
-import { M as toErrorMessage$4, m as OPENMELD_HEADER_PROFILE_ID } from "./dist-Bc3Rc5Tm.js";
-import { L as runtimeTransportErrorCodeSchema, Z as runtimeTransportLookupRouteOwnerServiceEvidenceSchema, a as daemonExecutionCompatibilitySchema, d as localWakeRouteReportSchema, it as runtimeTransportRejectedProfileRegistrationSchema, v as runtimeTransportCapabilitiesSchema } from "./runtime-transport--NUjMys2.js";
+import { $ as resolvePublicAgentAvailabilityCopy, et as resolvePublicAgentFailureRecovery } from "./task-result-DhOFm1C_.js";
+import { en as createCurrentDeviceApi, rr as toStructuredApiClientFailure } from "./dist-53uvP0DN.js";
+import { Ct as createPrimaryBindingReadSession, Kr as DaemonServiceRunError, Lt as resolveAgentTargetState, Mn as createLocalAdapterEntries, Tt as resolveAgentProfilePrimaryAgentControllerReport, d as matchesExpectedWorkspace, f as resolveOpenClawAuthStatus, g as readDaemonRouteCatalogCache, h as resolveOpenClawLocalBootstrapPaths, i as listOpenClawGatewayAgents, j as resolveEffectiveProfileWorkingFolderRuntime, jn as createLocalAdapterContainer, l as findOpenClawAgentById, m as readOpenClawLocalBootstrapState, n as fetchOpenClawGatewayHealth, p as resolveOpenClawProviderRuntimeWorkingDirectory, qt as resolveRegistryRuntimeAdapterContractByAgentControllerRef, r as listOpenClawAgents, t as prepareProviderRuntime, u as findOpenClawAgentsByWorkspace, v as loadDaemonRouteCatalog, vt as NO_LOCAL_AGENTS_NEED_OPENMELD_SERVICE_REASON, wt as createExpectedRoutesReadSession, yt as syncDeviceRuntimeStateProjection } from "./prepare-provider-runtime-B4go-qdR.js";
+import { M as toErrorMessage$4, m as OPENMELD_HEADER_PROFILE_ID } from "./dist-D7SkvUZW.js";
+import { L as runtimeTransportErrorCodeSchema, Z as runtimeTransportLookupRouteOwnerServiceEvidenceSchema, a as daemonExecutionCompatibilitySchema, d as localWakeRouteReportSchema, it as runtimeTransportRejectedProfileRegistrationSchema, v as runtimeTransportCapabilitiesSchema } from "./runtime-transport-Dg7E0ROH.js";
 import { I as openMeldToolsUpdateRequestSourceSchema } from "./local-components-B3vffkMy.js";
-import { it as providerDispatchRuntimeContextSchema } from "./control-plane-Cenl7yjL.js";
-import { E as DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE, T as DAEMON_RUNTIME_CONTRACT_META_FILE, _ as toErrorMessage$5, c as normalizeHeartbeatIntervalMs, i as resolvePreferredDaemonDeviceId, n as ensureDaemonRuntimePaths, o as dirnamePath, r as resolveDaemonDeviceId, u as normalizeOptionalText$3, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS } from "./daemon-device-id-BqFtu1Mo.js";
-import { $ as hasIndependentMaintenanceRegistration, A as prepareDaemonServiceBundle, B as resolveDaemonServiceArtifact, C as daemonServiceExecutableWrapperPath, D as ensureDaemonServiceStableBinaryExecutable, E as discardPreparedDaemonServiceBundle, F as restoreDaemonActiveBundleStateSnapshot, G as readManagedCliInstallation, I as runAuditedServiceManagerCarrierMutation, J as withManagedInstallTransaction, L as verifyDaemonActiveBundleIntegrity, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, O as ensureDaemonServiceUpdateWorkerBinaryExecutable, P as resolveInstalledDaemonBundleFingerprint, Q as daemonServiceUpdateWorkerNpmEntryPath, R as writeDaemonServiceExecutableWrapper, S as daemonServiceBinaryExecutablePath, T as daemonServiceUpdateWorkerBinaryPath, W as pruneManagedInstallVersions, X as INDEPENDENT_MAINTENANCE_REGISTRATION, Y as resolveBundledServiceRelease, Z as configureDaemonMaintenanceEnvironment, _ as matchesExpectedDaemonServiceManagerDefinition, a as resolveDaemonRuntimeState, at as resolveDaemonServiceUpdateWorkerWindowsScriptPath, c as resolveObservedDaemonRuntimeStatus, d as inspectLegacySharedDaemonService, et as resolveDaemonServiceUpdateWorkerIdentity, f as listDaemonOwnedProcesses, g as assertDaemonMaintenanceInstallationOwnership, i as readCurrentObservedDaemonRuntimeStatus, it as resolveDaemonServiceUpdateWorkerSystemdUnitPath, j as readDaemonActiveBundleState, k as isDaemonBundleSourceAllowedForLane, l as resolveObservedRuntimeCommandEntryPath, m as normalizeDaemonCommandPath, n as getEffectiveDaemonRuntimeStatus, nt as resolveDaemonServiceUpdateWorkerSystemdPathUnitPath, o as resolveDaemonServiceManagerForRuntimeState, q as resolveCliSelfVersion, r as readCurrentDaemonRuntimeContext, rt as resolveDaemonServiceUpdateWorkerSystemdTimerUnitPath, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, tt as resolveDaemonServiceUpdateWorkerLaunchdPlistPath, u as cleanupLegacySharedDaemonServiceState, w as daemonServiceLauncherPath, x as clearDaemonServiceUpdateWorkerBinaryExecutable, y as activateDaemonServiceBundle, z as writeDaemonServiceLauncher } from "./daemon-service-runtime-CfxejhNC.js";
+import { it as providerDispatchRuntimeContextSchema } from "./control-plane-dGjd5iC7.js";
+import { E as DAEMON_RUNTIME_CONTRACT_REPAIR_REPORT_FILE, T as DAEMON_RUNTIME_CONTRACT_META_FILE, _ as toErrorMessage$5, c as normalizeHeartbeatIntervalMs, i as resolvePreferredDaemonDeviceId, n as ensureDaemonRuntimePaths, o as dirnamePath, r as resolveDaemonDeviceId, u as normalizeOptionalText$3, x as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS } from "./daemon-device-id-D-RHe9se.js";
+import { $ as hasIndependentMaintenanceRegistration, A as prepareDaemonServiceBundle, B as resolveDaemonServiceArtifact, C as daemonServiceExecutableWrapperPath, D as ensureDaemonServiceStableBinaryExecutable, E as discardPreparedDaemonServiceBundle, F as restoreDaemonActiveBundleStateSnapshot, G as readManagedCliInstallation, I as runAuditedServiceManagerCarrierMutation, J as withManagedInstallTransaction, L as verifyDaemonActiveBundleIntegrity, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, O as ensureDaemonServiceUpdateWorkerBinaryExecutable, P as resolveInstalledDaemonBundleFingerprint, Q as daemonServiceUpdateWorkerNpmEntryPath, R as writeDaemonServiceExecutableWrapper, S as daemonServiceBinaryExecutablePath, T as daemonServiceUpdateWorkerBinaryPath, W as pruneManagedInstallVersions, X as INDEPENDENT_MAINTENANCE_REGISTRATION, Y as resolveBundledServiceRelease, Z as configureDaemonMaintenanceEnvironment, _ as matchesExpectedDaemonServiceManagerDefinition, a as resolveDaemonRuntimeState, at as resolveDaemonServiceUpdateWorkerWindowsScriptPath, c as resolveObservedDaemonRuntimeStatus, d as inspectLegacySharedDaemonService, et as resolveDaemonServiceUpdateWorkerIdentity, f as listDaemonOwnedProcesses, g as assertDaemonMaintenanceInstallationOwnership, i as readCurrentObservedDaemonRuntimeStatus, it as resolveDaemonServiceUpdateWorkerSystemdUnitPath, j as readDaemonActiveBundleState, k as isDaemonBundleSourceAllowedForLane, l as resolveObservedRuntimeCommandEntryPath, m as normalizeDaemonCommandPath, n as getEffectiveDaemonRuntimeStatus, nt as resolveDaemonServiceUpdateWorkerSystemdPathUnitPath, o as resolveDaemonServiceManagerForRuntimeState, q as resolveCliSelfVersion, r as readCurrentDaemonRuntimeContext, rt as resolveDaemonServiceUpdateWorkerSystemdTimerUnitPath, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, tt as resolveDaemonServiceUpdateWorkerLaunchdPlistPath, u as cleanupLegacySharedDaemonServiceState, w as daemonServiceLauncherPath, x as clearDaemonServiceUpdateWorkerBinaryExecutable, y as activateDaemonServiceBundle, z as writeDaemonServiceLauncher } from "./daemon-service-runtime-CaUu_AdU.js";
 import { r as readDaemonRuntimeLease } from "./daemon-runtime-lease-DRYVXnBQ.js";
 import { a as readPendingDaemonServiceUpdate, n as completePendingDaemonServiceUpdate, r as persistPendingDaemonServiceUpdate, t as DAEMON_SERVICE_UPDATE_JOB_SCHEMA } from "./daemon-service-update-state-BSn45OHj.js";
 import { r as windowsDirectTaskArguments } from "./windows-task-command-COu_6Ke3.js";
-import { H as DEFAULT_GATEWAY_CHAIN_TIMEOUT_MS$1, at as formatOpenMeldCliCommand, ct as formatOpenMeldCliTextBlock, d as getAuthSessionState, h as hasPendingComputerSetupContinuation, it as formatInlineOpenMeldCliCommands, ot as formatOpenMeldCliCommands } from "./auth-session-D3JW6vDg.js";
+import { H as DEFAULT_GATEWAY_CHAIN_TIMEOUT_MS$1, at as formatOpenMeldCliCommand, ct as formatOpenMeldCliTextBlock, d as getAuthSessionState, h as hasPendingComputerSetupContinuation, it as formatInlineOpenMeldCliCommands, ot as formatOpenMeldCliCommands } from "./auth-session-DRQMn41Z.js";
 import { n as normalizeCommandEnvironment, t as WINDOWS_RUNTIME_ENV_KEYS } from "./process-environment-BWSFeUu6.js";
 import { n as toErrorMessage$6, t as sleep } from "./dist-BLuEEVHh.js";
-import { n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull } from "./context-BvTB6oYE.js";
+import { n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull } from "./context-BvLQjNGR.js";
 import { n as resolveOpenMeldDistribution, t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
 import { A as getDaemonStatus, B as restoreDaemonInstallStateSnapshot, F as readDaemonServiceLifecycleLockMetaWithCleanup, G as withDaemonServiceReconcileLock, I as readDaemonServiceRuntimeSnapshot, V as rotateDaemonControlPlaneTokenIfExpired, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, m as daemonRuntimeDataPath, n as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, r as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, s as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV } from "./daemon-state-CTOVPwNq.js";
-import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-C4qyWlX3.js";
+import { c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, n as fetchSpaceRequestWithTimeout, s as buildOpenMeldRequestContextHeadersWithAuth, t as createCliApiClientFoundation } from "./api-client-foundation-i2KBsQ7r.js";
 import { n as assertSafePublishedProductionServiceRegistrationMutation } from "./published-production-safety-zANGAGDI.js";
 import { i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, o as upsertDaemonServiceContract, r as isUnsafeProductionDeviceId, t as clearDaemonServiceContract } from "./daemon-service-contract-CsANv7K_.js";
-import { n as resolveOpenMeldEnvironmentTargetFromEnv, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-CeFk6jOe.js";
-import { i as requestLocalDaemonShutdown, r as requestLocalDaemonServiceUpdateReadiness, t as LocalDaemonControlPlaneClientError } from "./client-DiJSFcdx.js";
-import { _ as writeVersionState, d as compareSemver, g as readVersionState, h as isPlainReleaseVersion, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, m as fetchLatestPackageInfo, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, u as buildNextVersionState } from "./daemon-lifecycle-journal-CazLvrLu.js";
+import { n as resolveOpenMeldEnvironmentTargetFromEnv, t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-DydyKO8Z.js";
+import { i as requestLocalDaemonShutdown, r as requestLocalDaemonServiceUpdateReadiness, t as LocalDaemonControlPlaneClientError } from "./client-CBTgmyFC.js";
+import { _ as writeVersionState, d as compareSemver, g as readVersionState, h as isPlainReleaseVersion, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, m as fetchLatestPackageInfo, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent, u as buildNextVersionState } from "./daemon-lifecycle-journal-BK-K3kGX.js";
 import { i as windowsTaskActionArguments, l as windowsMaintenanceBinaryPath, n as runWindowsUserTask, r as windowsPowerShellPath } from "./windows-user-task-CKb_u29X.js";
 import { S as resolveDaemonServiceManager, T as waitForLaunchdJobUnloaded, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel, v as readDaemonServiceStartupPolicyCurrent, w as startLaunchdService } from "./daemon-service-manager-a5tY3qpR.js";
 import { a as readPendingOpenMeldToolsUpdateAttempt, n as discardPendingOpenMeldToolsUpdateAttempt, r as persistOpenMeldToolsUpdateAttempt, t as completeOpenMeldToolsUpdateAttempt } from "./openmeld-tools-update-attempt-state-B6t53OYC.js";
@@ -5306,6 +5306,12 @@ var DaemonServiceLifecycleDrainTimeoutError = class extends Error {
 		this.waitMs = waitMs;
 	}
 };
+var DaemonServiceUpdateDeferredError = class extends Error {
+	constructor() {
+		super("New local work arrived before the update could switch the Service.");
+		this.name = "DaemonServiceUpdateDeferredError";
+	}
+};
 var DaemonServiceLifecycleControlledDrainError = class extends Error {
 	cause;
 	constructor(cause) {
@@ -5362,6 +5368,7 @@ async function runDaemonServiceLifecycle(input) {
 		});
 	};
 	try {
+		if (input.onlyIfIdle && input.forceKillAfterDrainTimeout) throw new Error("An idle update switch cannot force-stop the Service.");
 		await emitPhase("inspect");
 		state.inventoryBefore = await inspectDaemonServiceInventory({
 			expectedVersion: input.expectedVersion,
@@ -5443,10 +5450,11 @@ async function runDaemonServiceLifecycle(input) {
 			restorePoint,
 			preparedBundle,
 			drainWaitMs: input.drainWaitMs ?? PROCESS_STOP_WAIT_MS,
-			forceKillAfterDrainTimeout: input.forceKillAfterDrainTimeout === true
+			forceKillAfterDrainTimeout: input.forceKillAfterDrainTimeout === true,
+			onlyIfIdle: input.onlyIfIdle
 		});
 	} catch (error) {
-		if (error instanceof DaemonServiceLifecycleDrainTimeoutError) throw error;
+		if (error instanceof DaemonServiceLifecycleDrainTimeoutError || error instanceof DaemonServiceUpdateDeferredError) throw error;
 		state.evidencePath = await captureDaemonServiceEvidenceBestEffort({
 			evidencePath: state.evidencePath ?? void 0,
 			phase: "after_failure",
@@ -5520,6 +5528,7 @@ async function executeDaemonServiceLifecycle(input) {
 		await stopLifecycleRuntime({
 			drainWaitMs: input.drainWaitMs,
 			forceKillAfterDrainTimeout: input.forceKillAfterDrainTimeout,
+			onlyIfIdle: input.onlyIfIdle,
 			inventory: input.inventoryBefore,
 			operation: input.operation,
 			serviceManager: input.context.serviceManager,
@@ -5531,11 +5540,13 @@ async function executeDaemonServiceLifecycle(input) {
 			inventory: input.inventoryBefore,
 			serviceManager: input.context.serviceManager
 		});
-		input.state.failureStage = "backup";
-		await input.emitPhase("backup");
-		input.state.runtimeDataBackup = await backupDaemonRuntimeDataForReinstall();
-		input.state.backupRootPath = input.state.runtimeDataBackup?.backupRootPath ?? null;
-		input.state.backupDataPath = input.state.runtimeDataBackup?.backupDataPath ?? null;
+		if (input.inventoryBefore.legacySharedService?.present) {
+			input.state.failureStage = "backup";
+			await input.emitPhase("backup");
+			input.state.runtimeDataBackup = await backupDaemonRuntimeDataForReinstall();
+			input.state.backupRootPath = input.state.runtimeDataBackup?.backupRootPath ?? null;
+			input.state.backupDataPath = input.state.runtimeDataBackup?.backupDataPath ?? null;
+		}
 		input.state.failureStage = "unregister";
 		await input.emitPhase("unregister");
 		await input.context.serviceManager.uninstall();
@@ -5642,7 +5653,7 @@ async function executeDaemonServiceLifecycle(input) {
 			errorMessage: null
 		};
 	} catch (error) {
-		if (error instanceof DaemonServiceLifecycleDrainTimeoutError || error instanceof DaemonServiceLifecycleControlledDrainError) throw error;
+		if (error instanceof DaemonServiceLifecycleDrainTimeoutError || error instanceof DaemonServiceUpdateDeferredError || error instanceof DaemonServiceLifecycleControlledDrainError || input.onlyIfIdle && input.state.failureStage === "stop_or_drain") throw error;
 		input.state.evidencePath = await captureDaemonServiceEvidenceBestEffort({
 			evidencePath: input.state.evidencePath ?? void 0,
 			phase: "after_failure"
@@ -5706,6 +5717,31 @@ async function recoverLifecycleFailure(input) {
 		};
 	}
 	const recoveryErrorMessage = verifiedRollbackError ? `${originalErrorMessage}; verified previous Service recovery failed: ${toErrorMessage$6(verifiedRollbackError)}` : originalErrorMessage;
+	if (originalFailureStage === "backup") {
+		let backupRecoveryErrorMessage = recoveryErrorMessage;
+		if (input.inventoryBefore.serviceManagerStatus?.enabled === true) await input.serviceManager.enableAutostart().catch((error) => {
+			backupRecoveryErrorMessage += `; failed to restore service autostart: ${toErrorMessage$6(error)}`;
+		});
+		if (input.restorePoint.shouldStartAfterLifecycle) await input.serviceManager.start().catch((error) => {
+			backupRecoveryErrorMessage += `; failed to restart previous Service: ${toErrorMessage$6(error)}`;
+		});
+		return {
+			status: "failed",
+			targetVersion: input.expectedVersion,
+			inventoryBefore: input.inventoryBefore,
+			inventoryAfter: null,
+			reasonCodes: originalReasonCodes,
+			completedPhases: input.state.completedPhases,
+			desiredState: input.restorePoint.desiredState,
+			shouldStartAfterLifecycle: input.restorePoint.shouldStartAfterLifecycle,
+			backupDataPath: input.state.backupDataPath,
+			failureStage: originalFailureStage,
+			evidencePath: input.state.evidencePath,
+			recoveryStatus: "failed_before_safe_state",
+			errorCode: originalErrorCode,
+			errorMessage: backupRecoveryErrorMessage
+		};
+	}
 	const stoppedSafe = await transitionLifecycleToStoppedSafeCurrentVersion({
 		commandOptions: input.commandOptions,
 		currentContract: input.currentContract,
@@ -5898,6 +5934,13 @@ async function stopLifecycleRuntime(input) {
 	}
 	const runtimeStatus = input.inventory.runtimeStatus;
 	if (runtimeStatus.status !== "running") return;
+	if (input.onlyIfIdle) {
+		await requestControlledSystemServiceDrain({
+			...input,
+			lifecycleIntent
+		});
+		return;
+	}
 	if (!Number.isInteger(runtimeStatus.pid) || runtimeStatus.pid === null) throw new DaemonServiceLifecycleStageError({
 		message: "OpenMeld runtime is marked running but no pid is available.",
 		stage: "stop_or_drain"
@@ -5917,6 +5960,7 @@ async function stopLifecycleSystemServiceRuntime(input) {
 	let drained = false;
 	try {
 		drained = hasActiveLifecycleRuntimeEvidence(input.inventory) && !input.forceKillAfterDrainTimeout && await requestControlledSystemServiceDrain({
+			onlyIfIdle: input.onlyIfIdle,
 			drainWaitMs: input.drainWaitMs,
 			inventory: input.inventory,
 			lifecycleIntent: input.lifecycleIntent,
@@ -5927,11 +5971,7 @@ async function stopLifecycleSystemServiceRuntime(input) {
 		if (restoreAutostartOnDrainFailure) try {
 			await input.serviceManager.enableAutostart();
 		} catch (restoreError) {
-			throw new DaemonServiceLifecycleStageError({
-				cause: restoreError,
-				message: `${toErrorMessage$6(drainError)}; failed to restore service autostart: ${toErrorMessage$6(restoreError)}`,
-				stage: "stop_or_drain"
-			});
+			throw new DaemonServiceLifecycleControlledDrainError(/* @__PURE__ */ new Error(`${toErrorMessage$6(drainError)}; failed to restore service autostart: ${toErrorMessage$6(restoreError)}`));
 		}
 		throw drainError;
 	}
@@ -5946,12 +5986,14 @@ function hasActiveLifecycleRuntimeEvidence(inventory) {
 async function requestControlledSystemServiceDrain(input) {
 	try {
 		const shutdown = await requestLocalDaemonShutdown({
+			...input.onlyIfIdle ? { onlyIfIdle: true } : {},
 			payload: {
 				gracePeriodMs: input.drainWaitMs,
 				mode: "graceful"
 			},
 			timeoutMs: CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS
 		});
+		const refusedResult = input.onlyIfIdle ? "deferred" : "unsupported";
 		await emitDaemonLifecycleEvent({
 			command: `openmeld service ${input.operation.replaceAll("_", "-")}`,
 			intent: input.lifecycleIntent,
@@ -5960,24 +6002,15 @@ async function requestControlledSystemServiceDrain(input) {
 				gracePeriodMs: shutdown.gracePeriodMs,
 				mode: shutdown.mode
 			},
-			result: shutdown.accepted ? "completed" : "unsupported",
+			result: shutdown.accepted ? "completed" : refusedResult,
 			stopCause: input.stopCause,
 			type: "stop.controlled_drain"
 		});
+		if (input.onlyIfIdle && !shutdown.accepted) throw new DaemonServiceUpdateDeferredError();
 		return shutdown.accepted;
 	} catch (error) {
-		const isLegacyShutdownContract = error instanceof LocalDaemonControlPlaneClientError && error.code === "daemon.control.contract_mismatch";
-		const isManagerRunningWithoutRuntime = error instanceof LocalDaemonControlPlaneClientError && error.code === "daemon.control.endpoint_missing" && input.inventory.runtimeStatus.status !== "running" && input.inventory.ownedProcesses.length === 0;
-		const isLegacyMissingCloseReason = isLegacyMissingControlledShutdownCloseReason({
-			error,
-			inventory: input.inventory
-		});
-		const isLegacyControlledShutdownTimeout = isOlderServiceControlledShutdownTimeout({
-			error,
-			inventory: input.inventory
-		});
-		const isCompatibilityFallback = isLegacyShutdownContract || isLegacyMissingCloseReason || isLegacyControlledShutdownTimeout || isManagerRunningWithoutRuntime;
-		const observedDaemonVersion = isLegacyMissingCloseReason || isLegacyControlledShutdownTimeout ? resolveObservedDaemonVersion(input.inventory) : null;
+		if (error instanceof DaemonServiceUpdateDeferredError) throw error;
+		const { isLegacyShutdownContract, isManagerRunningWithoutRuntime, isLegacyMissingCloseReason, observedDaemonVersion, isCompatibilityFallback } = classifyControlledShutdownFailure(error, input.inventory, input.onlyIfIdle === true);
 		await emitDaemonLifecycleEvent({
 			command: `openmeld service ${input.operation.replaceAll("_", "-")}`,
 			intent: input.lifecycleIntent,
@@ -5987,11 +6020,6 @@ async function requestControlledSystemServiceDrain(input) {
 					compatibilityReason: "legacy_missing_close_reason",
 					observedDaemonVersion
 				} : {},
-				...isLegacyControlledShutdownTimeout ? {
-					compatibilityReason: "legacy_controlled_shutdown_timeout",
-					observedDaemonVersion,
-					reasonCode: "socket_close_timeout"
-				} : {},
 				...isManagerRunningWithoutRuntime ? { compatibilityReason: "manager_running_without_runtime" } : {},
 				errorMessage: toErrorMessage$6(error)
 			},
@@ -6000,21 +6028,24 @@ async function requestControlledSystemServiceDrain(input) {
 			type: "stop.controlled_drain"
 		});
 		if (isCompatibilityFallback) return false;
+		if (input.onlyIfIdle && isLegacyShutdownContract) throw new DaemonServiceLifecycleControlledDrainError(/* @__PURE__ */ new Error("This Service cannot confirm an atomic idle update switch. Update OpenMeld manually when current work finishes."));
 		throw new DaemonServiceLifecycleControlledDrainError(error);
 	}
 }
-function isOlderServiceControlledShutdownTimeout(input) {
-	if (!(input.error instanceof LocalDaemonControlPlaneClientError) || input.error.code !== "daemon.control.timeout") return false;
-	const observedDaemonVersion = resolveObservedDaemonVersion(input.inventory);
-	if (!observedDaemonVersion) return false;
-	try {
-		return resolveVersionChangeDirection({
-			fromVersion: observedDaemonVersion,
-			toVersion: input.inventory.expectedVersion
-		}) === "upgrade";
-	} catch {
-		return false;
-	}
+function classifyControlledShutdownFailure(error, inventory, onlyIfIdle) {
+	const isLegacyShutdownContract = error instanceof LocalDaemonControlPlaneClientError && error.code === "daemon.control.contract_mismatch";
+	const isManagerRunningWithoutRuntime = error instanceof LocalDaemonControlPlaneClientError && error.code === "daemon.control.endpoint_missing" && inventory.runtimeStatus.status !== "running" && inventory.ownedProcesses.length === 0;
+	const isLegacyMissingCloseReason = isLegacyMissingControlledShutdownCloseReason({
+		error,
+		inventory
+	});
+	return {
+		isLegacyShutdownContract,
+		isManagerRunningWithoutRuntime,
+		isLegacyMissingCloseReason,
+		isCompatibilityFallback: isManagerRunningWithoutRuntime || !onlyIfIdle && (isLegacyShutdownContract || isLegacyMissingCloseReason),
+		observedDaemonVersion: isLegacyMissingCloseReason ? resolveObservedDaemonVersion(inventory) : null
+	};
 }
 function isLegacyMissingControlledShutdownCloseReason(input) {
 	if (!(input.error instanceof LocalDaemonControlPlaneClientError) || input.error.code !== "daemon.run.socket_closed" || input.error.message !== "daemon stream closed (code=1000, reason=closed)") return false;
@@ -6548,6 +6579,7 @@ async function writeLifecycleEvidenceEvent(input) {
 //#endregion
 //#region src/local-service/lifecycle/daemon-service-update-coordinator.ts
 const MAX_BACKGROUND_UPDATE_ATTEMPTS = 5;
+const SAFE_SWITCH_POLL_INTERVAL_MS = 2e3;
 async function scheduleDaemonServiceUpdate(input, overrides = {}) {
 	const deps = resolveScheduleDependencies(overrides, { useDefaultLock: Object.keys(overrides).length === 0 });
 	return await deps.withReconcileLock(async () => await scheduleDaemonServiceUpdateLocked(input, deps));
@@ -6649,20 +6681,24 @@ async function pruneWorkerVersionsBestEffort(input) {
 }
 async function runPendingDaemonServiceUpdate(overrides = {}) {
 	const deps = resolveRunDependencies(overrides, { useDefaultLock: Object.keys(overrides).length === 0 });
-	const pending = await deps.withReconcileLock(async () => await preparePendingUpdateForSwitch(deps));
-	if (!pending) return null;
-	if (pending.phase === "updated") return pending;
-	if (pending.urgency === "available") try {
-		await deps.waitUntilSafeToSwitch(pending);
-	} catch (waitError) {
-		try {
-			await deps.withReconcileLock(async () => await recordSafeSwitchWaitFailure(deps, pending, waitError));
-		} catch (recordError) {
-			throw new AggregateError([waitError, recordError], "OpenMeld could not safely switch the Service or record the failure.");
+	while (true) {
+		const pending = await deps.withReconcileLock(async () => await preparePendingUpdateForSwitch(deps));
+		if (!pending) return null;
+		if (pending.phase === "updated") return pending;
+		if (pending.urgency === "available") try {
+			await deps.waitUntilSafeToSwitch(pending);
+		} catch (waitError) {
+			try {
+				await deps.withReconcileLock(async () => await recordSafeSwitchWaitFailure(deps, pending, waitError));
+			} catch (recordError) {
+				throw new AggregateError([waitError, recordError], "OpenMeld could not safely switch the Service or record the failure.");
+			}
+			throw waitError;
 		}
-		throw waitError;
+		const result = await deps.withReconcileLock(async () => await runPreparedPendingUpdate(deps));
+		if (result?.phase !== "waiting_for_work") return result;
+		await sleep(SAFE_SWITCH_POLL_INTERVAL_MS);
 	}
-	return await deps.withReconcileLock(async () => await runPreparedPendingUpdate(deps));
 }
 async function preparePendingUpdateForSwitch(deps) {
 	const pending = await deps.readPendingJob();
@@ -6683,6 +6719,14 @@ async function preparePendingUpdateForSwitch(deps) {
 async function recordSafeSwitchWaitFailure(deps, waiting, error) {
 	const current = await deps.readPendingJob();
 	if (!(current && isSameWaitingUpdate(current, waiting))) return;
+	if (isPreviousHostWorkUnconfirmed(error)) {
+		await deps.completePendingJob(finishJob(current, {
+			errorMessage: `${error.code}: ${toErrorMessage$6(error)}`,
+			now: deps.now(),
+			phase: "needs_help"
+		}));
+		return;
+	}
 	await deps.persistPendingJob({
 		...current,
 		errorMessage: toErrorMessage$6(error),
@@ -6696,11 +6740,12 @@ async function runPreparedPendingUpdate(deps) {
 	const pending = await deps.readPendingJob();
 	if (!pending) return null;
 	if (pending.phase === "updated") return pending;
+	const onlyIfIdle = pending.urgency === "available" && pending.requestSource === "automatic";
 	const running = {
 		...pending,
 		attempts: pending.attempts + 1,
 		errorMessage: null,
-		phase: "updating",
+		phase: onlyIfIdle ? "waiting_for_work" : "updating",
 		updatedAt: deps.now()
 	};
 	await deps.persistPendingJob(running);
@@ -6713,7 +6758,17 @@ async function runPreparedPendingUpdate(deps) {
 			installSource: "cli.auto_check",
 			operation: "upgrade_reconcile",
 			preparedBundle: running.preparedBundle,
-			shouldStartAfterLifecycle: running.desiredState === "background"
+			shouldStartAfterLifecycle: running.desiredState === "background",
+			...onlyIfIdle ? {
+				onlyIfIdle: true,
+				onPhase: async (phase) => {
+					if (phase === "wait_stopped") await deps.persistPendingJob({
+						...running,
+						phase: "updating",
+						updatedAt: deps.now()
+					});
+				}
+			} : {}
 		});
 		if (lifecycle.status !== "aligned" && lifecycle.status !== "already_aligned") {
 			const failed = finishJob(running, {
@@ -6732,6 +6787,16 @@ async function runPreparedPendingUpdate(deps) {
 		await deps.completePendingJob(completed);
 		return completed;
 	} catch (error) {
+		if (error instanceof DaemonServiceUpdateDeferredError && onlyIfIdle) {
+			const waiting = {
+				...pending,
+				phase: "waiting_for_work",
+				errorMessage: null,
+				updatedAt: deps.now()
+			};
+			await deps.persistPendingJob(waiting);
+			return waiting;
+		}
 		const errorMessage = toErrorMessage$6(error);
 		if (running.attempts < MAX_BACKGROUND_UPDATE_ATTEMPTS) {
 			const retry = {
@@ -6827,9 +6892,10 @@ async function waitUntilDaemonServiceSafeSwitch(job, overrides = {}) {
 		try {
 			if ((await requestReadiness()).safeToSwitch) return;
 		} catch (error) {
+			if (isPreviousHostWorkUnconfirmed(error)) throw error;
 			if (error instanceof LocalDaemonControlPlaneClientError && (error.code === "daemon.control.contract_mismatch" || error.code === "daemon.control.endpoint_missing")) return;
 		}
-		await wait(2e3);
+		await wait(SAFE_SWITCH_POLL_INTERVAL_MS);
 	}
 }
 async function resolveCurrentDaemonDesiredState() {
@@ -6838,6 +6904,9 @@ async function resolveCurrentDaemonDesiredState() {
 	const runtime = await readCurrentObservedDaemonRuntimeStatus();
 	return runtime.status === "running" && runtime.mode === "background" ? "background" : "stopped";
 }
+function isPreviousHostWorkUnconfirmed(error) {
+	return error instanceof LocalDaemonControlPlaneClientError && error.code === "host.previous_work_unconfirmed";
+}
 function finishJob(job, input) {
 	return {
 		...job,
@@ -7451,4 +7520,4 @@ function projectServiceJob(job) {
 //#endregion
 export { formatDeviceReplyReadinessLabel as $, resolveDaemonStatusSnapshot as A, getSetupFlowCopy as At, formatDaemonServiceRefreshReliabilityMessage as B, classifyDaemonServiceRunStartability as Bt, isSystemServiceStartupTimeoutError as C, toStartBackgroundHelperExecutionCompatibility as Ct, captureDaemonServiceEvidence as D, PREPARE_SESSION_RECONNECT_GRACE_MS as Dt, startDaemonSystemServiceWithAutoRepair as E, resolveCurrentDaemonExpectedVersion as Et, buildDaemonServiceRefreshNextStep as F, resolveVersionChangeDirection as Ft, buildDaemonServiceDependencyDetails as G, daemonRouteObservationRouteSchema as Gt, resolveDaemonServiceFreshnessWarning as H, ensureDaemonSystemServiceCommandFiles as Ht, buildDaemonServiceRefreshPromptMessage as I, DAEMON_SERVICE_AUTO_HEAL_ANOMALIES as It, buildDaemonServiceDependencySummary as J, buildDaemonServiceDependencyMeaning as K, buildDaemonServiceRepairGuidance as L, DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES as Lt, resolveDaemonStatusAuthenticationAttention as M, buildDaemonServiceTargetSpec as Mt, resolveServiceReadiness as N, resolveDaemonServiceAlignmentDecision as Nt, captureDaemonServiceEvidenceBestEffort as O, buildDaemonRouteObservationPresentation as Ot, resolveServiceReadinessFromServiceStatus as P, isVersionDowngrade as Pt, formatAgentReplyReadinessLabel as Q, buildDaemonServiceStatusReadOnlyDetail as R, DAEMON_SERVICE_REPAIR_ANOMALIES as Rt, isDaemonInventoryRunningAndStartReady as S, resolveDaemonRuntimeContractCompatibility as St, waitForSystemServiceStartup as T, readDaemonRuntimeContractRepairReport as Tt, clearDaemonStartFailureState as U, resolveInstalledDaemonSystemServiceCommandSpec as Ut, formatDaemonServiceUpdateRequiredMessage as V, classifyDaemonServiceWakeability as Vt, writeDaemonStartFailureState as W, daemonRouteObservationResponseSchema as Wt, resolveDaemonServiceDependencyDiagnostics as X, buildDaemonServiceDependencyTitle as Y, resolveCurrentReplyReadinessSnapshot as Z, runDaemonServiceLifecycle as _, hasActiveDaemonOwners as _t, resolveServiceUpdateUrgency as a, resolveReplyReadinessAvailabilityReasonCopy as at, startDaemonServiceUpdateWorker as b, resolveStoppedContractWriteBlockedReason as bt, readCurrentLocalRuntimeReplyReadiness as c, classifyGatewayChainFailure as ct, assessCliUpdate as d, resolveGatewayChainRetryGuidance as dt, formatHumanReplyReadinessReason as et, isCliUpdateCheckApplicable as f, resolveOpenClawLocalDiagnosticsValue as ft, DaemonServiceLifecycleDrainTimeoutError as g, formatDaemonOwnerSummaryLabel as gt, scheduleDaemonServiceUpdate as h, buildDaemonOwnerSnapshotFromObservedState as ht, writeOpenMeldToolsMaintenancePolicy as i, formatSpaceMemberCommandRecoveryCopy as it, resolveDaemonStatusAttention as j, writeDaemonServiceContract as jt, formatDaemonFailureContextText as k, buildOnboardingPlan as kt, buildLocalAgentCatalogFromReadiness as l, resolveGatewayChainReadiness as lt, runPendingDaemonServiceUpdate as m, inspectDaemonServiceInventory as mt, readOpenMeldToolsMaintenancePolicy as n, mapAgentReplyReadinessToLegacyAutoReply as nt, assessServerRequiredVersion as o, resolveReplyReadinessGuidanceSummaryCopy as ot, readOpenMeldToolsUpdateContextFromEnv as p, resolveLocalServiceDemand as pt, buildDaemonServiceDependencyNextStep as q, resolveOpenMeldToolsMaintenanceProjection as r, REPLY_READINESS_COPY as rt, describeServerRequiredVersionUnavailableReason as s, resolveOpenClawDiagnosticsGuidance as st, createOpenMeldToolsUpdateCoordinator as t, formatReplyReadinessSummary as tt, readCurrentLocalDeviceId as u, resolveGatewayChainRepairGuidance as ut, ensureDaemonServiceMaintenanceInstalled as v, readCurrentDaemonOwnerSnapshot as vt, resolveSystemServiceStartupWaitMs as w, ensureDaemonRuntimeContractState as wt, uninstallDaemonServiceUpdateWorker as x, summarizeDaemonOwnerSnapshot as xt, prepareDaemonServiceUpdateWorkerCarrier as y, resolveDaemonStopStrategy as yt, buildDaemonServiceUpdateRequiredNextStep as z, DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES as zt };
 
-//# sourceMappingURL=openmeld-tools-update-coordinator-DasnCwiO.js.map
+//# sourceMappingURL=openmeld-tools-update-coordinator-B_Dd_-GW.js.map