openmeld 0.3.293 → 0.3.295

package/dist/{service-control-capabilities-Bvhzddzv.js.map → service-control-capabilities-CuDpVm5i.js.map}

@@ -1 +1 @@
-{"version":3,"file":"service-control-capabilities-Bvhzddzv.js","names":[],"sources":["../src/commands/service-control-capabilities.ts"],"sourcesContent":["import { execFile } from \"node:child_process\";\nimport { realpath } from \"node:fs/promises\";\nimport { promisify } from \"node:util\";\nimport {\n  serviceControlCapabilitiesSchema,\n  serviceControlCarrierCapabilitySchema,\n} from \"@openmeld/schemas\";\nimport { readDaemonServiceContract } from \"../config/daemon-service-contract\";\nimport { sendLocalDaemonControlPlaneRequest } from \"../local-service/control-plane/client\";\nimport {\n  daemonServiceBinaryExecutablePath,\n  readDaemonActiveBundleState,\n  resolveAlignedDaemonActiveBundleEntryPath,\n} from \"../local-service/lifecycle/daemon-service-bundle\";\nimport { resolveDaemonServiceManager } from \"../local-service/lifecycle/daemon-service-manager\";\nimport { readCurrentDaemonRuntimeContext } from \"../local-service/lifecycle/daemon-service-runtime\";\n\nasync function resolveCarrierProbe(\n  platform: \"darwin\" | \"win32\",\n  expectedVersion: string,\n  binary: boolean\n) {\n  if (platform === \"darwin\") {\n    return {\n      executable: await realpath(daemonServiceBinaryExecutablePath()),\n      canonicalEntry: null,\n      protocol: \"account-checked-service-control-v1\",\n    };\n  }\n  // Probe the aligned immutable GUI carrier directly. For npm, bypass the\n  // repairing launcher and use its verified JS entry with Start's exact Node.\n  const entry = await resolveAlignedDaemonActiveBundleEntryPath({\n    expectedVersion,\n  });\n  return entry\n    ? {\n        executable: await realpath(binary ? entry : process.execPath),\n        canonicalEntry: binary ? null : await realpath(entry),\n        protocol: binary\n          ? \"account-checked-service-control-v3\"\n          : \"account-checked-service-control-v2\",\n      }\n    : null;\n}\n\n/** Read only: never invoke the repairing npm launcher or a lifecycle operation. */\nexport async function readServiceControlCapabilities(\n  platform: NodeJS.Platform = process.platform\n) {\n  const unsupported = { deviceId: null, start: false, stop: false };\n  if (platform !== \"darwin\" && platform !== \"win32\") {\n    return unsupported;\n  }\n  const contract = await readDaemonServiceContract();\n  const bundle = await readDaemonActiveBundleState();\n  const binary = bundle?.bundleFormat === \"binary_v1\";\n  if (\n    contract?.serviceController !==\n      (platform === \"win32\" ? \"windows-service\" : \"launchd\") ||\n    !(\n      binary ||\n      (platform === \"win32\" && bundle?.bundleFormat === \"self_contained_v1\")\n    )\n  ) {\n    return unsupported;\n  }\n  const manager = await resolveDaemonServiceManager(contract.serviceController);\n  if (!(manager && (await manager.status()).installed)) {\n    return unsupported;\n  }\n  // Guarded Start refreshes the supervisor command to this canonical executable.\n  // Verify the executable that answered, so an old CLI delegating elsewhere\n  // cannot advertise another binary's capability as its own.\n  const probe = await resolveCarrierProbe(\n    platform,\n    contract.daemonVersion,\n    binary\n  );\n  if (!probe) {\n    return unsupported;\n  }\n  const { executable, canonicalEntry, protocol } = probe;\n  const { stdout } = await promisify(execFile)(\n    executable,\n    [\n      ...(canonicalEntry ? [canonicalEntry] : []),\n      \"service\",\n      \"control-carrier-capability\",\n      \"--json\",\n    ],\n    { timeout: 10_000, maxBuffer: 16_384, windowsHide: true }\n  );\n  const carrier = serviceControlCarrierCapabilitySchema.safeParse(\n    JSON.parse(stdout)\n  );\n  if (\n    !carrier.success ||\n    carrier.data.protocol !== protocol ||\n    (await realpath(carrier.data.executable)) !== executable\n  ) {\n    return unsupported;\n  }\n  if (\n    carrier.data.protocol === \"account-checked-service-control-v2\" &&\n    (await realpath(carrier.data.entryScript)) !== canonicalEntry\n  ) {\n    return unsupported;\n  }\n  if (\n    JSON.stringify(await readDaemonActiveBundleState()) !==\n    JSON.stringify(bundle)\n  ) {\n    return unsupported;\n  }\n  const runtime = await readCurrentDaemonRuntimeContext();\n  if (runtime.effectiveRuntimeStatus === \"not_running\") {\n    return { deviceId: contract.deviceId, start: true, stop: false };\n  }\n  if (runtime.effectiveRuntimeStatus !== \"running\") {\n    return unsupported;\n  }\n  const response = await sendLocalDaemonControlPlaneRequest({\n    request: { v: 1, command: \"account_control_capabilities\" },\n  });\n  return serviceControlCapabilitiesSchema.parse({\n    deviceId: contract.deviceId,\n    start: false,\n    stop:\n      response.code === \"service.account_control_capabilities\" &&\n      response.payload.supported,\n  });\n}\n"],"mappings":";;;;;;;;;;;AAiBA,eAAe,oBACb,UACA,iBACA,QACA;CACA,IAAI,aAAa,UACf,OAAO;EACL,YAAY,MAAM,SAAS,kCAAkC,CAAC;EAC9D,gBAAgB;EAChB,UAAU;CACZ;CAIF,MAAM,QAAQ,MAAM,0CAA0C,EAC5D,gBACF,CAAC;CACD,OAAO,QACH;EACE,YAAY,MAAM,SAAS,SAAS,QAAQ,QAAQ,QAAQ;EAC5D,gBAAgB,SAAS,OAAO,MAAM,SAAS,KAAK;EACpD,UAAU,SACN,uCACA;CACN,IACA;AACN;;AAGA,eAAsB,+BACpB,WAA4B,QAAQ,UACpC;CACA,MAAM,cAAc;EAAE,UAAU;EAAM,OAAO;EAAO,MAAM;CAAM;CAChE,IAAI,aAAa,YAAY,aAAa,SACxC,OAAO;CAET,MAAM,WAAW,MAAM,0BAA0B;CACjD,MAAM,SAAS,MAAM,4BAA4B;CACjD,MAAM,SAAS,QAAQ,iBAAiB;CACxC,IACE,UAAU,uBACP,aAAa,UAAU,oBAAoB,cAC9C,EACE,UACC,aAAa,WAAW,QAAQ,iBAAiB,sBAGpD,OAAO;CAET,MAAM,UAAU,MAAM,4BAA4B,SAAS,iBAAiB;CAC5E,IAAI,EAAE,YAAY,MAAM,QAAQ,OAAO,EAAA,CAAG,YACxC,OAAO;CAKT,MAAM,QAAQ,MAAM,oBAClB,UACA,SAAS,eACT,MACF;CACA,IAAI,CAAC,OACH,OAAO;CAET,MAAM,EAAE,YAAY,gBAAgB,aAAa;CACjD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAC1C,YACA;EACE,GAAI,iBAAiB,CAAC,cAAc,IAAI,CAAC;EACzC;EACA;EACA;CACF,GACA;EAAE,SAAS;EAAQ,WAAW;EAAQ,aAAa;CAAK,CAC1D;CACA,MAAM,UAAU,sCAAsC,UACpD,KAAK,MAAM,MAAM,CACnB;CACA,IACE,CAAC,QAAQ,WACT,QAAQ,KAAK,aAAa,YACzB,MAAM,SAAS,QAAQ,KAAK,UAAU,MAAO,YAE9C,OAAO;CAET,IACE,QAAQ,KAAK,aAAa,wCACzB,MAAM,SAAS,QAAQ,KAAK,WAAW,MAAO,gBAE/C,OAAO;CAET,IACE,KAAK,UAAU,MAAM,4BAA4B,CAAC,MAClD,KAAK,UAAU,MAAM,GAErB,OAAO;CAET,MAAM,UAAU,MAAM,gCAAgC;CACtD,IAAI,QAAQ,2BAA2B,eACrC,OAAO;EAAE,UAAU,SAAS;EAAU,OAAO;EAAM,MAAM;CAAM;CAEjE,IAAI,QAAQ,2BAA2B,WACrC,OAAO;CAET,MAAM,WAAW,MAAM,mCAAmC,EACxD,SAAS;EAAE,GAAG;EAAG,SAAS;CAA+B,EAC3D,CAAC;CACD,OAAO,iCAAiC,MAAM;EAC5C,UAAU,SAAS;EACnB,OAAO;EACP,MACE,SAAS,SAAS,0CAClB,SAAS,QAAQ;CACrB,CAAC;AACH"}
+{"version":3,"file":"service-control-capabilities-CuDpVm5i.js","names":[],"sources":["../src/commands/service-control-capabilities.ts"],"sourcesContent":["import { execFile } from \"node:child_process\";\nimport { realpath } from \"node:fs/promises\";\nimport { promisify } from \"node:util\";\nimport {\n  serviceControlCapabilitiesSchema,\n  serviceControlCarrierCapabilitySchema,\n} from \"@openmeld/schemas\";\nimport { readDaemonServiceContract } from \"../config/daemon-service-contract\";\nimport { sendLocalDaemonControlPlaneRequest } from \"../local-service/control-plane/client\";\nimport {\n  daemonServiceBinaryExecutablePath,\n  readDaemonActiveBundleState,\n  resolveAlignedDaemonActiveBundleEntryPath,\n} from \"../local-service/lifecycle/daemon-service-bundle\";\nimport { resolveDaemonServiceManager } from \"../local-service/lifecycle/daemon-service-manager\";\nimport { readCurrentDaemonRuntimeContext } from \"../local-service/lifecycle/daemon-service-runtime\";\n\nasync function resolveCarrierProbe(\n  platform: \"darwin\" | \"win32\",\n  expectedVersion: string,\n  binary: boolean\n) {\n  if (platform === \"darwin\") {\n    return {\n      executable: await realpath(daemonServiceBinaryExecutablePath()),\n      canonicalEntry: null,\n      protocol: \"account-checked-service-control-v1\",\n    };\n  }\n  // Probe the aligned immutable GUI carrier directly. For npm, bypass the\n  // repairing launcher and use its verified JS entry with Start's exact Node.\n  const entry = await resolveAlignedDaemonActiveBundleEntryPath({\n    expectedVersion,\n  });\n  return entry\n    ? {\n        executable: await realpath(binary ? entry : process.execPath),\n        canonicalEntry: binary ? null : await realpath(entry),\n        protocol: binary\n          ? \"account-checked-service-control-v3\"\n          : \"account-checked-service-control-v2\",\n      }\n    : null;\n}\n\n/** Read only: never invoke the repairing npm launcher or a lifecycle operation. */\nexport async function readServiceControlCapabilities(\n  platform: NodeJS.Platform = process.platform\n) {\n  const unsupported = { deviceId: null, start: false, stop: false };\n  if (platform !== \"darwin\" && platform !== \"win32\") {\n    return unsupported;\n  }\n  const contract = await readDaemonServiceContract();\n  const bundle = await readDaemonActiveBundleState();\n  const binary = bundle?.bundleFormat === \"binary_v1\";\n  if (\n    contract?.serviceController !==\n      (platform === \"win32\" ? \"windows-service\" : \"launchd\") ||\n    !(\n      binary ||\n      (platform === \"win32\" && bundle?.bundleFormat === \"self_contained_v1\")\n    )\n  ) {\n    return unsupported;\n  }\n  const manager = await resolveDaemonServiceManager(contract.serviceController);\n  if (!(manager && (await manager.status()).installed)) {\n    return unsupported;\n  }\n  // Guarded Start refreshes the supervisor command to this canonical executable.\n  // Verify the executable that answered, so an old CLI delegating elsewhere\n  // cannot advertise another binary's capability as its own.\n  const probe = await resolveCarrierProbe(\n    platform,\n    contract.daemonVersion,\n    binary\n  );\n  if (!probe) {\n    return unsupported;\n  }\n  const { executable, canonicalEntry, protocol } = probe;\n  const { stdout } = await promisify(execFile)(\n    executable,\n    [\n      ...(canonicalEntry ? [canonicalEntry] : []),\n      \"service\",\n      \"control-carrier-capability\",\n      \"--json\",\n    ],\n    { timeout: 10_000, maxBuffer: 16_384, windowsHide: true }\n  );\n  const carrier = serviceControlCarrierCapabilitySchema.safeParse(\n    JSON.parse(stdout)\n  );\n  if (\n    !carrier.success ||\n    carrier.data.protocol !== protocol ||\n    (await realpath(carrier.data.executable)) !== executable\n  ) {\n    return unsupported;\n  }\n  if (\n    carrier.data.protocol === \"account-checked-service-control-v2\" &&\n    (await realpath(carrier.data.entryScript)) !== canonicalEntry\n  ) {\n    return unsupported;\n  }\n  if (\n    JSON.stringify(await readDaemonActiveBundleState()) !==\n    JSON.stringify(bundle)\n  ) {\n    return unsupported;\n  }\n  const runtime = await readCurrentDaemonRuntimeContext();\n  if (runtime.effectiveRuntimeStatus === \"not_running\") {\n    return { deviceId: contract.deviceId, start: true, stop: false };\n  }\n  if (runtime.effectiveRuntimeStatus !== \"running\") {\n    return unsupported;\n  }\n  const response = await sendLocalDaemonControlPlaneRequest({\n    request: { v: 1, command: \"account_control_capabilities\" },\n  });\n  return serviceControlCapabilitiesSchema.parse({\n    deviceId: contract.deviceId,\n    start: false,\n    stop:\n      response.code === \"service.account_control_capabilities\" &&\n      response.payload.supported,\n  });\n}\n"],"mappings":";;;;;;;;;;;AAiBA,eAAe,oBACb,UACA,iBACA,QACA;CACA,IAAI,aAAa,UACf,OAAO;EACL,YAAY,MAAM,SAAS,kCAAkC,CAAC;EAC9D,gBAAgB;EAChB,UAAU;CACZ;CAIF,MAAM,QAAQ,MAAM,0CAA0C,EAC5D,gBACF,CAAC;CACD,OAAO,QACH;EACE,YAAY,MAAM,SAAS,SAAS,QAAQ,QAAQ,QAAQ;EAC5D,gBAAgB,SAAS,OAAO,MAAM,SAAS,KAAK;EACpD,UAAU,SACN,uCACA;CACN,IACA;AACN;;AAGA,eAAsB,+BACpB,WAA4B,QAAQ,UACpC;CACA,MAAM,cAAc;EAAE,UAAU;EAAM,OAAO;EAAO,MAAM;CAAM;CAChE,IAAI,aAAa,YAAY,aAAa,SACxC,OAAO;CAET,MAAM,WAAW,MAAM,0BAA0B;CACjD,MAAM,SAAS,MAAM,4BAA4B;CACjD,MAAM,SAAS,QAAQ,iBAAiB;CACxC,IACE,UAAU,uBACP,aAAa,UAAU,oBAAoB,cAC9C,EACE,UACC,aAAa,WAAW,QAAQ,iBAAiB,sBAGpD,OAAO;CAET,MAAM,UAAU,MAAM,4BAA4B,SAAS,iBAAiB;CAC5E,IAAI,EAAE,YAAY,MAAM,QAAQ,OAAO,EAAA,CAAG,YACxC,OAAO;CAKT,MAAM,QAAQ,MAAM,oBAClB,UACA,SAAS,eACT,MACF;CACA,IAAI,CAAC,OACH,OAAO;CAET,MAAM,EAAE,YAAY,gBAAgB,aAAa;CACjD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAC1C,YACA;EACE,GAAI,iBAAiB,CAAC,cAAc,IAAI,CAAC;EACzC;EACA;EACA;CACF,GACA;EAAE,SAAS;EAAQ,WAAW;EAAQ,aAAa;CAAK,CAC1D;CACA,MAAM,UAAU,sCAAsC,UACpD,KAAK,MAAM,MAAM,CACnB;CACA,IACE,CAAC,QAAQ,WACT,QAAQ,KAAK,aAAa,YACzB,MAAM,SAAS,QAAQ,KAAK,UAAU,MAAO,YAE9C,OAAO;CAET,IACE,QAAQ,KAAK,aAAa,wCACzB,MAAM,SAAS,QAAQ,KAAK,WAAW,MAAO,gBAE/C,OAAO;CAET,IACE,KAAK,UAAU,MAAM,4BAA4B,CAAC,MAClD,KAAK,UAAU,MAAM,GAErB,OAAO;CAET,MAAM,UAAU,MAAM,gCAAgC;CACtD,IAAI,QAAQ,2BAA2B,eACrC,OAAO;EAAE,UAAU,SAAS;EAAU,OAAO;EAAM,MAAM;CAAM;CAEjE,IAAI,QAAQ,2BAA2B,WACrC,OAAO;CAET,MAAM,WAAW,MAAM,mCAAmC,EACxD,SAAS;EAAE,GAAG;EAAG,SAAS;CAA+B,EAC3D,CAAC;CACD,OAAO,iCAAiC,MAAM;EAC5C,UAAU,SAAS;EACnB,OAAO;EACP,MACE,SAAS,SAAS,0CAClB,SAAS,QAAQ;CACrB,CAAC;AACH"}

package/dist/{service-control-capabilities-CUfHlN2t.js → service-control-capabilities-D2RMffJQ.js}

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
 
-export { t as readServiceControlCapabilities } from "./service-control-capabilities-Bvhzddzv.js";
+export { t as readServiceControlCapabilities } from "./service-control-capabilities-CuDpVm5i.js";

package/dist/{service-CML_ZTQ7.js → service-l9DU4V5Q.js}

@@ -5,45 +5,45 @@ import { D as openMeldRootDir, F as resolveOpenMeldRootDir, I as resolveOpenMeld
 import { r as resolveAuthBaseUrl } from "./auth-url-CzfXOINs.js";
 import { lt as daemonServiceLaneSchema } from "./dist-CfBtqP8H.js";
 import { tt as sanitizeDispatchErrorSummary } from "./task-result-CWH3TdDu.js";
-import { Db as COMPUTER_POWER_CAPABILITY_HEADER, El as SESSION_HISTORY_CAPABILITY_HEADER, En as createServiceConnectionEvidenceApi, Ja as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, Ll as sessionHistoryRequestFrameSchema, Ol as SESSION_HISTORY_RUNTIME_CAPABILITY, Pl as sessionHistoryPolicySchema, Py as localProjectControlDaemonFrameSchema, Ry as localProjectControlDiscoverProjectsResponseSchema, Tg as serviceConnectionEvidenceJournalSchema, Xa as betterAuthDeviceAuthorizationCodeRequestSchema, Za as betterAuthDeviceAuthorizationCodeResponseSchema, eo as betterAuthDeviceAuthorizationErrorResponseSchema, fb as computerFileAccessDaemonFrameSchema, io as betterAuthSessionSnapshotResponseSchema, kl as sessionHistoryAuditSchema, lb as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, no as betterAuthDeviceAuthorizationTokenRequestSchema, ro as betterAuthDeviceAuthorizationTokenResponseSchema, ub as OPENMELD_RUNTIME_CAPABILITIES_HEADER, ur as DAEMON_STREAM_KEEPALIVE_PING, wg as serviceConnectionEvidenceEventSchema, zl as sessionHistoryResultFrameSchema } from "./dist-B08nRCGz.js";
-import { $ as bindProject, At as listAgentTargetStates, C as syncDaemonRouteCatalogState, G as resolveConfiguredProfileWorkspacePathForAccount, H as readProfileWorkspaceConfigForAccount, I as ensureOpenMeldManagedProfileWorkspace, Jn as resolveInstalledCodexLaunchCandidates, K as setCustomProfileWorkspace, Kr as DaemonServiceRunError, Kt as resolveRegistryRuntimeAdapterCapabilitySnapshot, Q as ProjectBindingStoreUpdateRequiredError, S as summarizeSkippedDaemonProfiles, St as emitReconcileStartedEvidence, U as readSavedProfileWorkspaceForAccount, Z as ProjectBindingOperationError, b as createRouteCatalogFromMutableState, bt as emitDriftDetectedEvidence, ct as removeProjectConnection, dn as MIN_HEARTBEAT_INTERVAL_MS, dt as setDefaultProjectConnection, fn as applyAcceptedLeases, gn as resolveCatalogSyncIntervalMs, hn as resolveAdaptiveHeartbeatIntervalMs, ht as resolveLocalProjectConnectionForPath, it as listProjectConnectionsWithStatus, ln as ADAPTIVE_HEARTBEAT_JITTER_RATIO, mn as pruneStaleLeases, mt as isProjectConnectionReadableByOwner, pn as applyIntervalJitterMs$1, rt as listProjectBindings, sn as resolveRouteRegistrationReconcileDecision, st as removeMissingProjectConnections, un as MAX_HEARTBEAT_INTERVAL_MS, xt as emitReconcileCompletedEvidence, y as createMutableRouteCatalogState, yt as syncDeviceRuntimeStateProjection } from "./prepare-provider-runtime-CQ7ZJMG8.js";
-import { $ as runtimeTransportOpenMeldToolsControlFramePayloadSchema, Ca as localFolderPickerHelperProtocolResultSchema, J as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, K as runtimeTransportLocalAgentControlManageProfileFoldersFramePayloadSchema, X as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Xn as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, _a as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, ba as localFolderPickerDaemonFrameSchema, cr as OPENMELD_COMPUTER_CARE_HEADER, ct as runtimeTransportRouteCatalogChangedFramePayloadSchema, et as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, f as localWakeRouteWorkingFolderObservationSchema, i as OPENMELD_EXECUTION_ADMISSION_HEADER, ia as OPENMELD_REASONING_STREAM_HEADER, nt as runtimeTransportRegisterSessionRequestSchema, q as runtimeTransportLocalAgentControlReadProfileWorkspaceFramePayloadSchema, r as OPENMELD_ADMISSION_EVIDENCE_HEADER, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, va as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, wa as localFolderPickerHelperResultSchema, z as runtimeTransportHeartbeatRequestSchema } from "./runtime-transport-DNkqgRhX.js";
-import { a as formatLocalSetupActionLabel, i as formatLocalSetupActionDescription, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel } from "./local-components-DlEpUgN3.js";
-import { c as resolveCliBinaryPlatform } from "./cli-binary-manifest-t_TXQ6-t.js";
-import { A as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, F as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, I as REGISTER_RESPONSE_TIMEOUT_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, M as HEARTBEAT_RESPONSE_TIMEOUT_MS, N as MAX_RECONNECT_DELAY_MS, O as DAEMON_STREAM_CONNECT_TIMEOUT_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, R as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, S as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, T as DAEMON_RUNTIME_CONTRACT_EPOCH, b as CATALOG_SYNC_RETRY_INTERVAL_MS, c as logComputerControlStage, d as normalizeOptionalText$2, f as normalizeText$1, i as resolvePreferredDaemonDeviceId, j as DEFAULT_RECONNECT_DELAY_MS, k as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, l as normalizeHeartbeatIntervalMs, n as ensureDaemonRuntimePaths, p as nowIsoString, r as resolveDaemonDeviceId, s as emitRunLine, v as toErrorMessage$6, w as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, x as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, y as warnDaemonEvent, z as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS } from "./daemon-device-id-B-iuoFzM.js";
+import { Db as COMPUTER_POWER_CAPABILITY_HEADER, El as SESSION_HISTORY_CAPABILITY_HEADER, En as createServiceConnectionEvidenceApi, Ja as BETTER_AUTH_DEVICE_AUTHORIZATION_GRANT_TYPE, Ll as sessionHistoryRequestFrameSchema, Ol as SESSION_HISTORY_RUNTIME_CAPABILITY, Pl as sessionHistoryPolicySchema, Py as localProjectControlDaemonFrameSchema, Ry as localProjectControlDiscoverProjectsResponseSchema, Tg as serviceConnectionEvidenceJournalSchema, Xa as betterAuthDeviceAuthorizationCodeRequestSchema, Za as betterAuthDeviceAuthorizationCodeResponseSchema, eo as betterAuthDeviceAuthorizationErrorResponseSchema, fb as computerFileAccessDaemonFrameSchema, io as betterAuthSessionSnapshotResponseSchema, kl as sessionHistoryAuditSchema, lb as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, no as betterAuthDeviceAuthorizationTokenRequestSchema, ro as betterAuthDeviceAuthorizationTokenResponseSchema, ub as OPENMELD_RUNTIME_CAPABILITIES_HEADER, ur as DAEMON_STREAM_KEEPALIVE_PING, wg as serviceConnectionEvidenceEventSchema, zl as sessionHistoryResultFrameSchema } from "./dist-DsyrZzyU.js";
+import { $ as bindProject, At as listAgentTargetStates, C as syncDaemonRouteCatalogState, G as resolveConfiguredProfileWorkspacePathForAccount, H as readProfileWorkspaceConfigForAccount, I as ensureOpenMeldManagedProfileWorkspace, Jn as resolveInstalledCodexLaunchCandidates, K as setCustomProfileWorkspace, Kr as DaemonServiceRunError, Kt as resolveRegistryRuntimeAdapterCapabilitySnapshot, Q as ProjectBindingStoreUpdateRequiredError, S as summarizeSkippedDaemonProfiles, St as emitReconcileStartedEvidence, U as readSavedProfileWorkspaceForAccount, Z as ProjectBindingOperationError, b as createRouteCatalogFromMutableState, bt as emitDriftDetectedEvidence, ct as removeProjectConnection, dn as MIN_HEARTBEAT_INTERVAL_MS, dt as setDefaultProjectConnection, fn as applyAcceptedLeases, gn as resolveCatalogSyncIntervalMs, hn as resolveAdaptiveHeartbeatIntervalMs, ht as resolveLocalProjectConnectionForPath, it as listProjectConnectionsWithStatus, ln as ADAPTIVE_HEARTBEAT_JITTER_RATIO, mn as pruneStaleLeases, mt as isProjectConnectionReadableByOwner, pn as applyIntervalJitterMs$1, rt as listProjectBindings, sn as resolveRouteRegistrationReconcileDecision, st as removeMissingProjectConnections, un as MAX_HEARTBEAT_INTERVAL_MS, xt as emitReconcileCompletedEvidence, y as createMutableRouteCatalogState, yt as syncDeviceRuntimeStateProjection } from "./prepare-provider-runtime-Cdm1_kJt.js";
+import { $ as runtimeTransportOpenMeldToolsControlFramePayloadSchema, Ca as localFolderPickerHelperProtocolResultSchema, J as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, K as runtimeTransportLocalAgentControlManageProfileFoldersFramePayloadSchema, X as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Xn as SPACE_WORK_HANDOFF_CAPABILITY_HEADER, _a as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, ba as localFolderPickerDaemonFrameSchema, cr as OPENMELD_COMPUTER_CARE_HEADER, ct as runtimeTransportRouteCatalogChangedFramePayloadSchema, et as runtimeTransportOpenMeldToolsControlResultFramePayloadSchema, f as localWakeRouteWorkingFolderObservationSchema, i as OPENMELD_EXECUTION_ADMISSION_HEADER, ia as OPENMELD_REASONING_STREAM_HEADER, nt as runtimeTransportRegisterSessionRequestSchema, q as runtimeTransportLocalAgentControlReadProfileWorkspaceFramePayloadSchema, r as OPENMELD_ADMISSION_EVIDENCE_HEADER, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, va as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, wa as localFolderPickerHelperResultSchema, z as runtimeTransportHeartbeatRequestSchema } from "./runtime-transport-Ca0cGpAY.js";
+import { R as openMeldToolsUpdateStepCode, a as formatLocalSetupActionLabel, i as formatLocalSetupActionDescription, n as formatLocalComponentsSummaryDescription, o as installedLocalComponentsSnapshotSchema, r as formatLocalComponentsSummaryLabel } from "./local-components-BpA9Lc4v.js";
+import { c as resolveCliBinaryPlatform } from "./cli-binary-manifest-DhSiC1mr.js";
+import { A as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS, F as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS, I as REGISTER_RESPONSE_TIMEOUT_MS, L as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS, M as HEARTBEAT_RESPONSE_TIMEOUT_MS, N as MAX_RECONNECT_DELAY_MS, O as DAEMON_STREAM_CONNECT_TIMEOUT_MS, P as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS, R as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS, S as CONTROLLED_SHUTDOWN_REQUEST_TIMEOUT_MS, T as DAEMON_RUNTIME_CONTRACT_EPOCH, b as CATALOG_SYNC_RETRY_INTERVAL_MS, c as logComputerControlStage, d as normalizeOptionalText$2, f as normalizeText$1, i as resolvePreferredDaemonDeviceId, j as DEFAULT_RECONNECT_DELAY_MS, k as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS, l as normalizeHeartbeatIntervalMs, n as ensureDaemonRuntimePaths, p as nowIsoString, r as resolveDaemonDeviceId, s as emitRunLine, v as toErrorMessage$6, w as CONTROLLED_SHUTDOWN_SOCKET_CLOSE_TIMEOUT_MS, x as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS, y as warnDaemonEvent, z as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS } from "./daemon-device-id-DLKuN3Eo.js";
 import { d as openMeldDaemonControlPlaneRequestSchema, f as openMeldDaemonControlPlaneResponseSchema } from "./control-plane-CDbk-45J.js";
-import { _ as localExecutionInputFrameSchema, b as localExecutionInputResponseSchema, h as LOCAL_EXECUTION_INPUT_CAPABILITY_HEADER, m as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, t as ExecutionHostError, u as serviceExecutionHostMethods } from "./channel-DfaHRitM.js";
-import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-DI3VCm3Z.js";
-import { $ as resolveNextRuntimeAgentControllerReportSyncAtMs, Ln as cliJsonOutputEnvelopeSchema, V as buildRepositoryFingerprint, a as createCodexJsonRpcClient, at as updateComputerFileAccessPolicy, c as sendDaemonFrame, et as emitDaemonDispatchJournalEvent, it as resolveComputerFileAccessStorePath, l as ProfileFolderOperationError, n as assertDispatchOwnedRuntimeServiceMutationAllowed, nt as ComputerFileAccessStoreError, o as handleDaemonTransportFrame, ot as isSameOrDescendantPath, p as collectObservedSessionWorkingDirectories, rt as readComputerFileAccessPolicy, s as parseDaemonFrame, u as applyProfileFolderOperation, w as resolveOpenCodeDatabasePath, x as queryOpenCodeReadOnly, z as createServiceGitEnvironment } from "./dispatch-owned-runtime-DlpQwB6N.js";
-import { A as prepareDaemonServiceBundle, G as readManagedCliInstallation, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-Dg8V-t-u.js";
+import { _ as localExecutionInputFrameSchema, b as localExecutionInputResponseSchema, h as LOCAL_EXECUTION_INPUT_CAPABILITY_HEADER, m as serviceExecutionHostSnapshotSchema, n as createExecutionHostClient, t as ExecutionHostError, u as serviceExecutionHostMethods } from "./channel-D1NKTdY0.js";
+import { m as hashBundledSkillAssets, p as computeDirectoryContentHash, u as loadSelectedSkillAssets } from "./state-nzWj4_Pk.js";
+import { $ as resolveNextRuntimeAgentControllerReportSyncAtMs, Ln as cliJsonOutputEnvelopeSchema, V as buildRepositoryFingerprint, a as createCodexJsonRpcClient, at as updateComputerFileAccessPolicy, c as sendDaemonFrame, et as emitDaemonDispatchJournalEvent, it as resolveComputerFileAccessStorePath, l as ProfileFolderOperationError, n as assertDispatchOwnedRuntimeServiceMutationAllowed, nt as ComputerFileAccessStoreError, o as handleDaemonTransportFrame, ot as isSameOrDescendantPath, p as collectObservedSessionWorkingDirectories, rt as readComputerFileAccessPolicy, s as parseDaemonFrame, u as applyProfileFolderOperation, w as resolveOpenCodeDatabasePath, x as queryOpenCodeReadOnly, z as createServiceGitEnvironment } from "./dispatch-owned-runtime-B6VEu6Ak.js";
+import { A as prepareDaemonServiceBundle, H as readOpenMeldToolsUpdateContextFromEnv, M as resolveAlignedDaemonActiveBundleEntryPath, N as resolveDaemonBundleEntryPathFromState, U as readUpdateStep, Y as readManagedCliInstallation, a as resolveDaemonRuntimeState, b as cleanupInactiveDaemonServiceBundles, f as listDaemonOwnedProcesses, h as resolveDaemonBundleIdFromEntryPath, i as readCurrentObservedDaemonRuntimeStatus, j as readDaemonActiveBundleState, n as getEffectiveDaemonRuntimeStatus, o as resolveDaemonServiceManagerForRuntimeState, p as extractDaemonCommandEntryPath, r as readCurrentDaemonRuntimeContext, s as waitForDaemonSystemServiceToStop, t as clearDaemonRuntimeStateIfDefinitelyStopped, u as cleanupLegacySharedDaemonServiceState, v as isOpenMeldManagedBinaryPath } from "./daemon-service-runtime-C1o0PjSJ.js";
 import { i as writeDaemonRuntimeLease, r as readDaemonRuntimeLease } from "./daemon-runtime-lease-BMT2SIW9.js";
-import { a as readPendingDaemonServiceUpdate } from "./daemon-service-update-state-BclTmkAC.js";
-import { A as resolveDaemonStatusSnapshot, B as formatDaemonServiceRefreshReliabilityMessage, Bt as classifyDaemonServiceRunStartability, C as isSystemServiceStartupTimeoutError, D as captureDaemonServiceEvidence, E as startDaemonSystemServiceWithAutoRepair, Et as resolveCurrentDaemonExpectedVersion, F as buildDaemonServiceRefreshNextStep, G as buildDaemonServiceDependencyDetails, Ht as ensureDaemonSystemServiceCommandFiles, I as buildDaemonServiceRefreshPromptMessage, It as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, J as buildDaemonServiceDependencySummary, K as buildDaemonServiceDependencyMeaning, Lt as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, M as resolveDaemonStatusAuthenticationAttention, Mt as buildDaemonServiceTargetSpec, N as resolveServiceReadiness, Nt as resolveDaemonServiceAlignmentDecision, O as captureDaemonServiceEvidenceBestEffort, Pt as isVersionDowngrade, R as buildDaemonServiceStatusReadOnlyDetail, Rt as DAEMON_SERVICE_REPAIR_ANOMALIES, S as isDaemonInventoryRunningAndStartReady$1, T as waitForSystemServiceStartup$1, Tt as readDaemonRuntimeContractRepairReport, U as clearDaemonStartFailureState, Ut as resolveInstalledDaemonSystemServiceCommandSpec, V as formatDaemonServiceUpdateRequiredMessage, Vt as classifyDaemonServiceWakeability, W as writeDaemonStartFailureState, X as resolveDaemonServiceDependencyDiagnostics, Y as buildDaemonServiceDependencyTitle, _ as runDaemonServiceLifecycle, _t as hasActiveDaemonOwners, a as resolveServiceUpdateUrgency, b as startDaemonServiceUpdateWorker, bt as resolveStoppedContractWriteBlockedReason, c as readCurrentLocalRuntimeReplyReadiness, d as assessCliUpdate, g as DaemonServiceLifecycleDrainTimeoutError, gt as formatDaemonOwnerSummaryLabel, h as scheduleDaemonServiceUpdate, ht as buildDaemonOwnerSnapshotFromObservedState, i as writeOpenMeldToolsMaintenancePolicy, j as resolveDaemonStatusAttention, jt as writeDaemonServiceContract, k as formatDaemonFailureContextText, mt as inspectDaemonServiceInventory, n as readOpenMeldToolsMaintenancePolicy, o as assessServerRequiredVersion, p as readOpenMeldToolsUpdateContextFromEnv, pt as resolveLocalServiceDemand, q as buildDaemonServiceDependencyNextStep, r as resolveOpenMeldToolsMaintenanceProjection, s as describeServerRequiredVersionUnavailableReason, t as createOpenMeldToolsUpdateCoordinator, v as ensureDaemonServiceMaintenanceInstalled, vt as readCurrentDaemonOwnerSnapshot, w as resolveSystemServiceStartupWaitMs, wt as ensureDaemonRuntimeContractState, x as uninstallDaemonServiceUpdateWorker, xt as summarizeDaemonOwnerSnapshot, yt as resolveDaemonStopStrategy, z as buildDaemonServiceUpdateRequiredNextStep, zt as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES } from "./openmeld-tools-update-coordinator-C3W6sFnm.js";
-import { E as withAdmittedServiceSession, S as recordInterruptedComputerAuthSessionRecoveryFailure, a as beginAuthSessionTransition, c as completeInterruptedComputerAuthSessionRecovery, ct as formatOpenMeldCliCommands, d as getAuthSessionState, g as markInterruptedComputerAuthSessionRecovery, i as assertAuthSessionMutationAvailable, k as ServiceAccountAdmissionError, m as hasInterruptedComputerAuthSessionTransition, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, ot as formatInlineOpenMeldCliCommands, p as getInterruptedComputerAuthSessionRecovery, s as clearAuthSession, st as formatOpenMeldCliCommand, ut as formatOpenMeldCliTextBlock, v as onAuthSessionCredentialAvailable, w as setAuthSession, y as onAuthSessionCredentialObservation } from "./auth-session-GYsWoDuJ.js";
+import { a as readPendingDaemonServiceUpdate } from "./daemon-service-update-state-CtzTzni1.js";
+import { A as resolveDaemonStatusAttention, At as writeDaemonServiceContract, B as formatDaemonServiceUpdateRequiredMessage, Bt as classifyDaemonServiceWakeability, C as resolveSystemServiceStartupWaitMs, Ct as ensureDaemonRuntimeContractState, D as captureDaemonServiceEvidenceBestEffort, E as captureDaemonServiceEvidence, F as buildDaemonServiceRefreshPromptMessage, Ft as DAEMON_SERVICE_AUTO_HEAL_ANOMALIES, G as buildDaemonServiceDependencyMeaning, H as clearDaemonStartFailureState, Ht as resolveInstalledDaemonSystemServiceCommandSpec, It as DAEMON_SERVICE_FULL_ALIGNMENT_ANOMALIES, J as buildDaemonServiceDependencyTitle, K as buildDaemonServiceDependencyNextStep, L as buildDaemonServiceStatusReadOnlyDetail, Lt as DAEMON_SERVICE_REPAIR_ANOMALIES, M as resolveServiceReadiness, Mt as resolveDaemonServiceAlignmentDecision, Nt as isVersionDowngrade, O as formatDaemonFailureContextText, P as buildDaemonServiceRefreshNextStep, R as buildDaemonServiceUpdateRequiredNextStep, Rt as DAEMON_SERVICE_WAKEABILITY_ADVISORY_ANOMALIES, S as isSystemServiceStartupTimeoutError, T as startDaemonSystemServiceWithAutoRepair, Tt as resolveCurrentDaemonExpectedVersion, U as writeDaemonStartFailureState, Vt as ensureDaemonSystemServiceCommandFiles, W as buildDaemonServiceDependencyDetails, Y as resolveDaemonServiceDependencyDiagnostics, _ as ensureDaemonServiceMaintenanceInstalled, _t as readCurrentDaemonOwnerSnapshot, a as resolveServiceUpdateUrgency, b as uninstallDaemonServiceUpdateWorker, bt as summarizeDaemonOwnerSnapshot, c as readCurrentLocalRuntimeReplyReadiness, d as assessCliUpdate, ft as resolveLocalServiceDemand, g as runDaemonServiceLifecycle, gt as hasActiveDaemonOwners, h as DaemonServiceLifecycleDrainTimeoutError, ht as formatDaemonOwnerSummaryLabel, i as writeOpenMeldToolsMaintenancePolicy, j as resolveDaemonStatusAuthenticationAttention, jt as buildDaemonServiceTargetSpec, k as resolveDaemonStatusSnapshot, m as scheduleDaemonServiceUpdate, mt as buildDaemonOwnerSnapshotFromObservedState, n as readOpenMeldToolsMaintenancePolicy, o as assessServerRequiredVersion, pt as inspectDaemonServiceInventory, q as buildDaemonServiceDependencySummary, r as resolveOpenMeldToolsMaintenanceProjection, s as describeServerRequiredVersionUnavailableReason, t as createOpenMeldToolsUpdateCoordinator, vt as resolveDaemonStopStrategy, w as waitForSystemServiceStartup$1, wt as readDaemonRuntimeContractRepairReport, x as isDaemonInventoryRunningAndStartReady$1, y as startDaemonServiceUpdateWorker, yt as resolveStoppedContractWriteBlockedReason, z as formatDaemonServiceRefreshReliabilityMessage, zt as classifyDaemonServiceRunStartability } from "./openmeld-tools-update-coordinator-Doj6V0Qx.js";
+import { E as withAdmittedServiceSession, S as recordInterruptedComputerAuthSessionRecoveryFailure, a as beginAuthSessionTransition, c as completeInterruptedComputerAuthSessionRecovery, ct as formatOpenMeldCliCommands, d as getAuthSessionState, g as markInterruptedComputerAuthSessionRecovery, i as assertAuthSessionMutationAvailable, k as ServiceAccountAdmissionError, m as hasInterruptedComputerAuthSessionTransition, n as AuthSessionRecoveryInProgressError, o as buildStoredAuthSessionIdentity, ot as formatInlineOpenMeldCliCommands, p as getInterruptedComputerAuthSessionRecovery, s as clearAuthSession, st as formatOpenMeldCliCommand, ut as formatOpenMeldCliTextBlock, v as onAuthSessionCredentialAvailable, w as setAuthSession, y as onAuthSessionCredentialObservation } from "./auth-session-QFK36vfX.js";
 import { D as createServiceSpawnPendingIssue, S as resolveOpenMeldLaneDescriptor, a as isOpenMeldLockError, d as resolveOpenMeldOrphanedLockIssue, j as formatLocalMachineIssueMessage, w as assessLocalMachineFailure } from "./lock-B0YzvcUu.js";
 import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-DsKKbftl.js";
 import "./openmeld-dev-environment-CGgHQJDn.js";
 import { n as toErrorMessage$7, t as sleep } from "./dist-BLuEEVHh.js";
-import { D as createAuthenticationError, E as buildHumanAuthenticationCard, F as resolveCurrentOpenMeldAccountContext, M as resolveAuthenticationReasonFromState, O as extractAuthenticationPromptAction, T as buildCommandAuthenticationPromptMessage$1, a as requireOpenMeldProfile, g as readDaemonCatalogSyncSignal, k as resolveAuthenticationGuidance, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull, w as buildAuthenticationStatusLabel, y as clearAllSelectedOpenMeldProfileIds } from "./context-CPKBlAps.js";
+import { D as createAuthenticationError, E as buildHumanAuthenticationCard, F as resolveCurrentOpenMeldAccountContext, M as resolveAuthenticationReasonFromState, O as extractAuthenticationPromptAction, T as buildCommandAuthenticationPromptMessage$1, a as requireOpenMeldProfile, g as readDaemonCatalogSyncSignal, k as resolveAuthenticationGuidance, n as resolveRuntimeContext, o as resolveOpenMeldProfileOrNull, w as buildAuthenticationStatusLabel, y as clearAllSelectedOpenMeldProfileIds } from "./context-DqEUJy_k.js";
 import { n as writeDaemonLocalStateFile, t as readDaemonLocalStateFile } from "./daemon-local-state-file-jOXuXrky.js";
 import { t as isBinaryDistribution } from "./distribution-BDQT2ilb.js";
 import { A as getDaemonStatus, G as withDaemonServiceReconcileLock, H as setDaemonServiceRuntimeState, I as readDaemonServiceRuntimeSnapshot, J as withDaemonServiceStopLock, K as withDaemonServiceRegistrationMutationLock, L as releaseDaemonServiceLifecycleLock, M as isDaemonServiceRuntimeHeartbeatStale, O as ensureDaemonControlPlaneToken, R as resolveDaemonControlPlaneEndpoint, S as daemonServiceRepairJournalPath, U as uninstallDaemon, _ as daemonRuntimeStateRootPath, a as DAEMON_SERVICE_RUNTIME_MODE_ENV, c as acquireDaemonServiceLifecycleLock, f as daemonLifecycleJournalPath, h as daemonRuntimeRootPath, i as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, j as installDaemon, l as clearDaemonServiceRuntimeState, o as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, q as withDaemonServiceRunLock, z as resolveDaemonServiceRuntimeMetadata } from "./daemon-state-BJqUWJvZ.js";
-import { a as outJsonLine, n as sanitizeTerminalDisplayText, o as outLine, t as createPresenter } from "./presenter-BIwIweT9.js";
-import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-D4qt8-I7.js";
+import { a as outJsonLine, n as sanitizeTerminalDisplayText, o as outLine, t as createPresenter } from "./presenter-DqdYrUMa.js";
+import { c as buildRequestAuthHeaders, i as AuthRequestCredentialError, l as canAttachAuthTokenToRequest, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-CRQZIYVN.js";
 import { i as readDaemonServiceContract, n as isDaemonServiceContractIdentityReusable, o as upsertDaemonServiceContract, t as clearDaemonServiceContract } from "./daemon-service-contract-B1EbK5p7.js";
-import { t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-BOA_c8yO.js";
-import { t as admitServiceAccountStop } from "./service-account-authorization-DbbHAoMV.js";
+import { t as resolveOpenMeldEnvironmentTarget } from "./openmeld-environment-target-mLK2dK1_.js";
+import { t as admitServiceAccountStop } from "./service-account-authorization-CdUOvV3c.js";
 import { i as requestLocalDaemonShutdown, r as requestLocalDaemonServiceUpdateReadiness, s as sendLocalDaemonControlPlaneRequest, t as LocalDaemonControlPlaneClientError } from "./client-BPUPVl9o.js";
-import { c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-ywEIaUn3.js";
+import { c as runWithDaemonLifecycleCommandJournal, d as compareSemver, i as readLatestDaemonLifecycleOriginEvent, l as OPENMELD_VERSION, n as formatDaemonLifecycleOriginSummary, o as resolveRecentDaemonSignalStopCause, r as readLatestDaemonLifecycleConnectionStateEvent, s as runDaemonServiceManagerAction, t as emitDaemonLifecycleEvent } from "./daemon-lifecycle-journal-D1dCp8bJ.js";
 import { r as readWindowsManagedCliInstallation } from "./windows-managed-install-BVlswqjA.js";
 import { S as resolveDaemonServiceManager, _ as readDaemonServiceJobCrashExitCode, a as disableDaemonServiceAutostartIfConfigured, c as getDaemonSystemServiceLogPath, f as isDaemonServiceJobSpawnPending, o as formatDaemonServiceJobDiagnosticsEvidence, s as getDaemonServiceLaunchdLabel } from "./daemon-service-manager-CSD613gh.js";
-import { P as getCommandEntryContract, Z as validateDaemonControlTargetInput, at as buildAgentOverviewFromContract, t as createAuthLoginGuideError } from "./dual-view-guide-catalog-DE3NLJFV.js";
-import { a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, i as formatDaemonInstallFailedMessage, l as formatDaemonServiceMissingRunStepOne, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo } from "./elapsed-time-FUf-2Hna.js";
-import { a as readPendingOpenMeldToolsUpdateAttempt } from "./openmeld-tools-update-attempt-state-D8oDuOp9.js";
-import { i as resolveOpenMeldToolsUpdateOperationProjection, n as waitForExternalOpenMeldToolsUpdate, r as waitForOpenMeldToolsUpdateCompletion, t as resolveExternalOpenMeldToolsUpdate } from "./openmeld-tools-update-join-CDWWs9KY.js";
+import { P as getCommandEntryContract, Z as validateDaemonControlTargetInput, at as buildAgentOverviewFromContract, t as createAuthLoginGuideError } from "./dual-view-guide-catalog-DljFCp4Y.js";
+import { a as formatDaemonServiceDowngradeBlockedRecommendation, d as formatDaemonServiceMissingStatus, f as getDaemonDowngradeBlockedTitle, i as formatDaemonInstallFailedMessage, l as formatDaemonServiceMissingRunStepOne, m as canUseInteractivePrompts, n as resolveElapsedTimeMs, o as formatDaemonServiceMissingAction, p as runDaemonInstallDecisionPrompt, r as formatDaemonDowngradeBlockedNextStep, s as formatDaemonServiceMissingMeaning, t as formatElapsedTime, u as formatDaemonServiceMissingRunStepTwo } from "./elapsed-time-CviuvW6T.js";
+import { a as readPendingOpenMeldToolsUpdateAttempt } from "./openmeld-tools-update-attempt-state--4fS27OC.js";
+import { i as resolveOpenMeldToolsUpdateOperationProjection, n as waitForExternalOpenMeldToolsUpdate, r as waitForOpenMeldToolsUpdateCompletion, t as resolveExternalOpenMeldToolsUpdate } from "./openmeld-tools-update-join-B6HcSSiK.js";
 import { t as createSetupUpdateObserver } from "./setup-update-progress-pq_ZnoqB.js";
-import { t as childExecutionHostChannel } from "./process-channel-Dx1KqiZj.js";
-import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-C0tUL2nW.js";
+import { t as childExecutionHostChannel } from "./process-channel-Vz_ntXXU.js";
+import { n as collectSkillsReadinessSnapshot } from "./installation-inventory-D6L-BdIi.js";
 import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
@@ -62,6 +62,7 @@ import { getSessionInfo, getSessionMessages } from "@anthropic-ai/claude-agent-s
 import WebSocket from "ws";
 //#region ../../packages/schemas/dist/schemas/daemon/service-connection-correlation.js
 const SERVICE_CONNECTION_ID_QUERY_PARAMETER = "connectionId";
+const SERVICE_PREVIOUS_CONNECTION_ID_HEADER = "x-openmeld-previous-connection-id";
 z$1.uuid();
 //#endregion
 //#region src/commands/auth-device-session-client.ts
@@ -5528,6 +5529,7 @@ function readServiceConnectionFailureEvidence(error) {
 function createServiceConnectionEvidenceObserver(input) {
 	const recorder = createServiceConnectionEvidenceRecorder(input);
 	let connectionId = randomUUID();
+	let lastAcknowledgedConnectionId;
 	let phase = "credentials";
 	let lastHeartbeatAckAtMs;
 	let attemptStartedAtMs = Date.now();
@@ -5551,6 +5553,9 @@ function createServiceConnectionEvidenceObserver(input) {
 		get connectionDiagnosticId() {
 			return connectionId;
 		},
+		get lastAcknowledgedConnectionId() {
+			return lastAcknowledgedConnectionId;
+		},
 		beginAttempt() {
 			recorder.setOnline(false);
 			connectionId = randomUUID();
@@ -5591,6 +5596,7 @@ function createServiceConnectionEvidenceObserver(input) {
 			const timestamp = Date.parse(heartbeatAt);
 			if (Number.isFinite(timestamp)) lastHeartbeatAckAtMs = timestamp;
 			phase = "online";
+			lastAcknowledgedConnectionId = acknowledgedId;
 			if (transitioned) record({
 				kind: "registered",
 				reason: "recovered",
@@ -9834,10 +9840,18 @@ async function resolveLocalComponentsStatus(input = {}) {
 	]);
 	const resolvedCli = await resolveCliComponentStatus(input);
 	const installationSource = await resolveLocalComponentsInstallationSource({ expectedVersion: resolvedCli.packageVersion });
-	const cli = updateProjection?.failureCode ? {
+	const reasonCodes = new Set(resolvedCli.reasonCodes);
+	if (updateProjection) {
+		if (updateProjection.failureCode) reasonCodes.add(updateProjection.failureCode);
+		if (updateProjection.operation.phase !== "updated") {
+			const step = await readUpdateStep(updateProjection.operation, updateProjection.checkpointOwner) ?? updateProjection.fallbackStep;
+			if (step) reasonCodes.add(openMeldToolsUpdateStepCode(step));
+		}
+	}
+	const cli = {
 		...resolvedCli,
-		reasonCodes: Array.from(/* @__PURE__ */ new Set([...resolvedCli.reasonCodes, updateProjection.failureCode]))
-	} : resolvedCli;
+		reasonCodes: [...reasonCodes]
+	};
 	const selectedSkill = await loadSelectedSkillAssets();
 	const setupAction = resolveLocalComponentsSetupAction({
 		cliStatus: cli.status,
@@ -10868,6 +10882,7 @@ const runAccountBoundDaemonServiceLoop = async (input) => {
 			const ws = await connectWebSocket(wsUrl, {
 				headers: {
 					...authContext.headers,
+					...connectionEvidence.lastAcknowledgedConnectionId ? { [SERVICE_PREVIOUS_CONNECTION_ID_HEADER]: connectionEvidence.lastAcknowledgedConnectionId } : {},
 					...buildLocalServiceCapabilityHeaders({ localFolderPickerAvailable: localFolderPicker.available })
 				},
 				openTimeoutMs: DAEMON_STREAM_CONNECT_TIMEOUT_MS
@@ -18287,6 +18302,6 @@ function parseDaemonRunMode(rawMode) {
 	return DEFAULT_DAEMON_RUN_MODE;
 }
 //#endregion
-export { renderHumanTextErrorCard as $, resolveLocalComponentsStatus as A, runAuthMenu as B, createQuietPresenter as C, emitCliJsonEnvelope as D, shouldEmitAgentOverview as E, buildCommandAuthenticationPromptMessage as F, recoverInterruptedComputerAuthHandoff as G, exchangeOneTimeTokenAuthSession as H, ensureCommandAuthenticationOrCancel as I, runDaemonServiceParticipationGate as J, exchangeComputerAuthorizationGrant as K, evaluateCommandAuthentication as L, LocalProjectConnectionError as M, validateLocalProjectConnectionPath as N, runDaemonStartupPreflight as O, connectWebSocket as P, renderHumanErrorCard as Q, runAuthLogin as R, reconcileCliVersionView as S, createDelayedSpinner as T, emitUnusedSetupSessionCleanupWarning as U, runAuthStatus as V, formatComputerAuthCleanupFailureSuffix as W, runDaemonStartDecisionPrompt as X, resolveDaemonServiceParticipationStatus as Y, buildHumanErrorCopy as Z, formatServiceParticipationReadinessLabel as _, runDaemonBackgroundStartForDecision as a, renderTextInfoCard as at, buildProfileWorkspacePresentation as b, runDaemonInterrupt as c, isReturnKeypress as ct, runDaemonServiceDetached as d, getCurrentCommandCheckState as dt, buildAuthStatusRows as et, runDaemonSnapshot as f, isCurrentCommandCheckScopeActive as ft, runDaemonUninstall as g, SERVICE_CONNECTION_ID_QUERY_PARAMETER as gt, runDaemonTeardownStrict as h, fetchAuthUserSnapshot as ht, runDaemonAutostart as i, renderInfoCard as it, writeInstalledLocalComponentsSnapshot as j, readDaemonIncidentLogTail as k, runDaemonReinstall as l, runInteractivePrompt as lt, runDaemonStop as m, startCurrentCommandCheckScope as mt, isManagedSystemServiceBootstrapRun as n, formatActiveOrganizationLabel as nt, runDaemonCancel as o, buildUnifiedCardFrame as ot, runDaemonStatusFlow as p, resetCurrentCommandCheckState as pt, revokePreparedAuthSession as q, runDaemon as r, buildTextInfoCardLines as rt, runDaemonInstall as s, promptTextEntry as st, bestEffortStopCurrentLaneDaemonService as t, buildAuthStatusSnapshot as tt, runDaemonRunAfterEntryChecks as u, finishCurrentCommandCheckScope as ut, formatServiceRuntimeHeadline as v, emitDaemonAgentOverview as w, buildProfileWorkspaceRows as x, resolveServiceParticipationReadiness as y, runAuthLogout as z };
+export { renderHumanTextErrorCard as $, resolveLocalComponentsStatus as A, runAuthMenu as B, createQuietPresenter as C, emitCliJsonEnvelope as D, shouldEmitAgentOverview as E, buildCommandAuthenticationPromptMessage as F, recoverInterruptedComputerAuthHandoff as G, exchangeOneTimeTokenAuthSession as H, ensureCommandAuthenticationOrCancel as I, runDaemonServiceParticipationGate as J, exchangeComputerAuthorizationGrant as K, evaluateCommandAuthentication as L, LocalProjectConnectionError as M, validateLocalProjectConnectionPath as N, runDaemonStartupPreflight as O, connectWebSocket as P, renderHumanErrorCard as Q, runAuthLogin as R, reconcileCliVersionView as S, createDelayedSpinner as T, emitUnusedSetupSessionCleanupWarning as U, runAuthStatus as V, formatComputerAuthCleanupFailureSuffix as W, runDaemonStartDecisionPrompt as X, resolveDaemonServiceParticipationStatus as Y, buildHumanErrorCopy as Z, formatServiceParticipationReadinessLabel as _, SERVICE_PREVIOUS_CONNECTION_ID_HEADER as _t, runDaemonBackgroundStartForDecision as a, renderTextInfoCard as at, buildProfileWorkspacePresentation as b, runDaemonInterrupt as c, isReturnKeypress as ct, runDaemonServiceDetached as d, getCurrentCommandCheckState as dt, buildAuthStatusRows as et, runDaemonSnapshot as f, isCurrentCommandCheckScopeActive as ft, runDaemonUninstall as g, SERVICE_CONNECTION_ID_QUERY_PARAMETER as gt, runDaemonTeardownStrict as h, fetchAuthUserSnapshot as ht, runDaemonAutostart as i, renderInfoCard as it, writeInstalledLocalComponentsSnapshot as j, readDaemonIncidentLogTail as k, runDaemonReinstall as l, runInteractivePrompt as lt, runDaemonStop as m, startCurrentCommandCheckScope as mt, isManagedSystemServiceBootstrapRun as n, formatActiveOrganizationLabel as nt, runDaemonCancel as o, buildUnifiedCardFrame as ot, runDaemonStatusFlow as p, resetCurrentCommandCheckState as pt, revokePreparedAuthSession as q, runDaemon as r, buildTextInfoCardLines as rt, runDaemonInstall as s, promptTextEntry as st, bestEffortStopCurrentLaneDaemonService as t, buildAuthStatusSnapshot as tt, runDaemonRunAfterEntryChecks as u, finishCurrentCommandCheckScope as ut, formatServiceRuntimeHeadline as v, emitDaemonAgentOverview as w, buildProfileWorkspaceRows as x, resolveServiceParticipationReadiness as y, runAuthLogout as z };
 
-//# sourceMappingURL=service-CML_ZTQ7.js.map
+//# sourceMappingURL=service-l9DU4V5Q.js.map