openmeld 0.3.67 → 0.3.69

package/dist/{add-me-membership-D6hoCQ8S.js → add-me-membership-BCFUe-Ix.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { r as runSpaceAddMembers } from "./command-YqKBiXiz.js";
+import { r as runSpaceAddMembers } from "./command-CDkR9Ss2.js";
 //#region src/space/add-me-membership.ts
 async function runSpaceAddMeMembership(input) {
 	return await runSpaceAddMembers(input);
@@ -8,4 +8,4 @@ async function runSpaceAddMeMembership(input) {
 //#endregion
 export { runSpaceAddMeMembership };
 
-//# sourceMappingURL=add-me-membership-D6hoCQ8S.js.map
+//# sourceMappingURL=add-me-membership-BCFUe-Ix.js.map

package/dist/{add-me-membership-D6hoCQ8S.js.map → add-me-membership-BCFUe-Ix.js.map}

@@ -1 +1 @@
-{"version":3,"file":"add-me-membership-D6hoCQ8S.js","names":[],"sources":["../src/space/add-me-membership.ts"],"sourcesContent":["import { runSpaceAddMembers } from \"./command\";\nimport type { SpaceCommandNavigationStatus } from \"./navigation-status\";\n\nexport type SpaceAddMeMembershipInput = Parameters<\n  typeof runSpaceAddMembers\n>[0];\nexport type SpaceAddMeMembershipRunner = (\n  input: SpaceAddMeMembershipInput\n) => Promise<SpaceCommandNavigationStatus>;\n\nexport async function runSpaceAddMeMembership(\n  input: SpaceAddMeMembershipInput\n): Promise<SpaceCommandNavigationStatus> {\n  return await runSpaceAddMembers(input);\n}\n"],"mappings":";;;;AAUA,eAAsB,wBACpB,OACuC;CACvC,OAAO,MAAM,mBAAmB,KAAK;AACvC"}
+{"version":3,"file":"add-me-membership-BCFUe-Ix.js","names":[],"sources":["../src/space/add-me-membership.ts"],"sourcesContent":["import { runSpaceAddMembers } from \"./command\";\nimport type { SpaceCommandNavigationStatus } from \"./navigation-status\";\n\nexport type SpaceAddMeMembershipInput = Parameters<\n  typeof runSpaceAddMembers\n>[0];\nexport type SpaceAddMeMembershipRunner = (\n  input: SpaceAddMeMembershipInput\n) => Promise<SpaceCommandNavigationStatus>;\n\nexport async function runSpaceAddMeMembership(\n  input: SpaceAddMeMembershipInput\n): Promise<SpaceCommandNavigationStatus> {\n  return await runSpaceAddMembers(input);\n}\n"],"mappings":";;;;AAUA,eAAsB,wBACpB,OACuC;CACvC,OAAO,MAAM,mBAAmB,KAAK;AACvC"}

package/dist/{api-client-foundation-tG8UYUTY.js → api-client-foundation-CrP6qikm.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { T as normalizeBaseUrl, hn as __exportAll } from "./base-url-KfrIdedc.js";
-import { F as OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID, L as buildOpenMeldRequestContextHeaders, m as createOpenMeldApiClient } from "./dist-B9083HmF.js";
+import { F as OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID, L as buildOpenMeldRequestContextHeaders, m as createOpenMeldApiClient } from "./dist-CbsUWTyE.js";
 import { C as MIN_SPACE_REQUEST_TIMEOUT_MS, a as getAuthSessionState, v as DEFAULT_SPACE_REQUEST_TIMEOUT_MS, x as MAX_SPACE_REQUEST_TIMEOUT_MS } from "./auth-session-C7ZQlX6v.js";
 import crypto from "node:crypto";
 //#region src/config/auth-request-compatibility.ts
@@ -381,4 +381,4 @@ function createCliApiClientFoundation(baseUrl, options = {}) {
 //#endregion
 export { buildOpenMeldProfileIdentityRequestHeadersWithAuth as a, buildRequestAuthHeaders as c, buildOpenMeldRequestContextFromProfile as d, buildOpenMeldRequestContextFromProfileIdentity as f, resolveSpaceRequestTimeoutMsForDiagnostics as i, canAttachAuthTokenToRequest as l, resolveAuthRequestCompatibility as m, createCliApiClientFoundation as n, buildOpenMeldProfileRequestHeadersWithAuth as o, deriveAuthBaseUrlFromGatewayUrl as p, fetchSpaceRequestWithTimeout as r, buildOpenMeldRequestContextHeadersWithAuth as s, api_client_foundation_exports as t, resolveAuthTokenAttachment as u };
 
-//# sourceMappingURL=api-client-foundation-tG8UYUTY.js.map
+//# sourceMappingURL=api-client-foundation-CrP6qikm.js.map

package/dist/{api-client-foundation-tG8UYUTY.js.map → api-client-foundation-CrP6qikm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"api-client-foundation-tG8UYUTY.js","names":["resolveSpaceRequestTimeoutMsForDiagnostics","resolveSpaceRequestTimeoutMsForCliDiagnostics"],"sources":["../src/config/auth-request-compatibility.ts","../src/config/openmeld-request-context.ts","../src/config/request-headers.ts","../src/space/request-timeout.ts","../src/space/fetch-with-timeout.ts","../src/space/api-client-foundation.ts"],"sourcesContent":["import { normalizeBaseUrl } from \"../protocol/urls\";\nimport type { StoredAuthSession } from \"./auth-session\";\n\nexport type AuthRequestCompatibilityReason =\n  | \"invalid_request_url\"\n  | \"invalid_auth_url\"\n  | \"insecure_transport\"\n  | \"host_mismatch\"\n  | \"loopback\"\n  | \"same_host\"\n  | \"gateway_sibling\";\n\nexport type AuthRequestCompatibility = {\n  compatible: boolean;\n  reason: AuthRequestCompatibilityReason;\n  requestHost: string | null;\n  authHost: string | null;\n  expectedGatewayHost: string | null;\n};\n\nexport function resolveAuthRequestCompatibility(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthRequestCompatibility {\n  const requestUrl = parseUrlOrNull(input.requestUrl);\n  if (!requestUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_request_url\",\n      requestHost: null,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const authBaseUrl = parseUrlOrNull(input.session.authBaseUrl);\n  if (!authBaseUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_auth_url\",\n      requestHost: requestUrl.host,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const expectedGatewayHost = deriveGatewayHost(authBaseUrl);\n  const requestHost = requestUrl.host;\n  const authHost = authBaseUrl.host;\n\n  if (\n    isLoopbackHostname(requestUrl.hostname) &&\n    isLoopbackHostname(authBaseUrl.hostname)\n  ) {\n    return {\n      compatible: true,\n      reason: \"loopback\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (!isSecureTransportProtocol(requestUrl.protocol)) {\n    return {\n      compatible: false,\n      reason: \"insecure_transport\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (requestHost === authHost) {\n    return {\n      compatible: true,\n      reason: \"same_host\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (expectedGatewayHost && requestHost === expectedGatewayHost) {\n    return {\n      compatible: true,\n      reason: \"gateway_sibling\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  return {\n    compatible: false,\n    reason: \"host_mismatch\",\n    requestHost,\n    authHost,\n    expectedGatewayHost,\n  };\n}\n\nexport function canUseAuthSessionForRequest(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): boolean {\n  return resolveAuthRequestCompatibility(input).compatible;\n}\n\nexport function deriveAuthBaseUrlFromGatewayUrl(\n  gatewayUrl: string\n): string | null {\n  const parsed = parseUrlOrNull(gatewayUrl);\n  if (!parsed) {\n    return null;\n  }\n  if (!isHttpTransportProtocol(parsed.protocol)) {\n    return null;\n  }\n  if (!parsed.hostname.startsWith(\"gateway.\")) {\n    return null;\n  }\n\n  const authUrl = new URL(parsed.toString());\n  authUrl.hostname = `auth.${parsed.hostname.slice(\"gateway.\".length)}`;\n  authUrl.pathname = \"/\";\n  authUrl.search = \"\";\n  authUrl.hash = \"\";\n  return normalizeBaseUrl(authUrl.toString());\n}\n\nfunction deriveGatewayHost(authBaseUrl: URL): string | null {\n  if (!authBaseUrl.hostname.startsWith(\"auth.\")) {\n    return null;\n  }\n\n  const gatewayUrl = new URL(authBaseUrl.toString());\n  gatewayUrl.hostname = `gateway.${authBaseUrl.hostname.slice(\"auth.\".length)}`;\n  return gatewayUrl.host;\n}\n\nfunction parseUrlOrNull(value: string): URL | null {\n  try {\n    return new URL(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n  return (\n    hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"::1\"\n  );\n}\n\nfunction isSecureTransportProtocol(protocol: string): boolean {\n  return protocol === \"https:\" || protocol === \"wss:\";\n}\n\nfunction isHttpTransportProtocol(protocol: string): boolean {\n  return protocol === \"http:\" || protocol === \"https:\";\n}\n","import crypto from \"node:crypto\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\n\nexport type OpenMeldRequestContextProfileIdentity = {\n  openMeldProfileId: string;\n  profileKind?: \"human\" | \"agent\" | \"system\";\n  kind?: \"human\" | \"agent\";\n  profileHandle?: string;\n  profileName: string;\n  ownerUserId?: string;\n  ownerName?: string;\n  agentControllerConversationId?: string;\n};\n\nexport function buildOpenMeldRequestContextFromProfile(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestId?: string;\n  agentControllerConversationId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const agentControllerConversationId = normalizeOptionalText(\n    input.agentControllerConversationId\n  );\n  const ownerName = normalizeOptionalText(input.openMeldProfile.ownerName);\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.openMeldProfile.openMeldProfileId,\n      profileKind: input.openMeldProfile.profileKind,\n      profileHandle: input.openMeldProfile.profileHandle,\n      profileName: input.openMeldProfile.profileName,\n      ownerUserId: input.openMeldProfile.ownerUserId,\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nexport function buildOpenMeldRequestContextFromProfileIdentity(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const profileHandle = normalizeOptionalText(\n    input.profileIdentity.profileHandle\n  );\n  const ownerUserId = normalizeOptionalText(input.profileIdentity.ownerUserId);\n  const ownerName = normalizeOptionalText(input.profileIdentity.ownerName);\n  const agentControllerConversationId = normalizeOptionalText(\n    input.profileIdentity.agentControllerConversationId\n  );\n  const profileKind =\n    input.profileIdentity.profileKind ??\n    (input.profileIdentity.kind === \"human\" ||\n    input.profileIdentity.kind === \"agent\"\n      ? input.profileIdentity.kind\n      : \"system\");\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.profileIdentity.openMeldProfileId,\n      profileKind,\n      ...(profileHandle ? { profileHandle } : {}),\n      profileName: input.profileIdentity.profileName,\n      ...(ownerUserId ? { ownerUserId } : {}),\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import {\n  buildOpenMeldRequestContextHeaders,\n  type OpenMeldRequestContextHeadersInput,\n} from \"@openmeld/gateway-contract\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport {\n  type AuthRequestCompatibilityReason,\n  canUseAuthSessionForRequest,\n  resolveAuthRequestCompatibility,\n} from \"./auth-request-compatibility\";\nimport { getAuthSessionState, type StoredAuthSession } from \"./auth-session\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\nimport {\n  buildOpenMeldRequestContextFromProfile,\n  buildOpenMeldRequestContextFromProfileIdentity,\n  type OpenMeldRequestContextProfileIdentity,\n} from \"./openmeld-request-context\";\n\nconst DEFAULT_TOKEN_TYPE = \"Bearer\";\nconst AUTHORIZATION_HEADER = \"Authorization\";\n\ntype RequestAuthHeadersInput = {\n  authSession?: StoredAuthSession | null;\n  requestUrl: string;\n};\n\ntype OpenMeldRequestContextHeadersWithAuthInput =\n  OpenMeldRequestContextHeadersInput & {\n    authSession?: StoredAuthSession | null;\n    requestUrl: string;\n  };\n\nexport type AuthTokenAttachment =\n  | {\n      status: \"attachable\";\n      token: string;\n      tokenType: string;\n    }\n  | {\n      status: \"dropped\";\n      reason: \"empty_token\" | AuthRequestCompatibilityReason;\n      requestHost: string | null;\n      authHost: string | null;\n      expectedGatewayHost: string | null;\n    };\n\nexport type DroppedAuthTokenAttachment = Extract<\n  AuthTokenAttachment,\n  { status: \"dropped\" }\n>;\n\nexport async function buildRequestAuthHeaders(\n  input: RequestAuthHeadersInput\n): Promise<Record<string, string>> {\n  const headers: Record<string, string> = {};\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldRequestContextHeadersWithAuth(\n  input: OpenMeldRequestContextHeadersWithAuthInput\n): Promise<Record<string, string>> {\n  const headers = buildOpenMeldRequestContextHeaders(input);\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldProfileRequestHeadersWithAuth(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  agentControllerConversationId?: string;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfile({\n      openMeldProfile: input.openMeldProfile,\n      agentControllerConversationId: input.agentControllerConversationId,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport async function buildOpenMeldProfileIdentityRequestHeadersWithAuth(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfileIdentity({\n      profileIdentity: input.profileIdentity,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport function withSpacePassword(\n  requestContext: OpenMeldRequestContext,\n  spacePassword?: string\n): OpenMeldRequestContextHeadersInput {\n  return {\n    requestContext,\n    ...(spacePassword === undefined ? {} : { spacePassword }),\n  };\n}\n\n// One decision for \"can this stored session authenticate this request\", with\n// the drop reason preserved. Header building and the daemon stream connect\n// gate must share this so they cannot drift apart.\nexport function resolveAuthTokenAttachment(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthTokenAttachment {\n  const compatibility = resolveAuthRequestCompatibility({\n    session: input.session,\n    requestUrl: input.requestUrl,\n  });\n  const token = normalizeAccessToken(input.session);\n  if (!token) {\n    return {\n      status: \"dropped\",\n      reason: \"empty_token\",\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  if (!compatibility.compatible) {\n    return {\n      status: \"dropped\",\n      reason: compatibility.reason,\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  return {\n    status: \"attachable\",\n    token,\n    tokenType: normalizeTokenType(input.session.tokenType),\n  };\n}\n\nasync function attachAuthHeader(\n  headers: Record<string, string>,\n  input: RequestAuthHeadersInput\n): Promise<void> {\n  const session = await resolveAuthSessionForHeaders(input);\n  if (session === null) {\n    // No stored credentials exist, so there is nothing to strip: the caller\n    // is knowingly sending an unauthenticated request.\n    return;\n  }\n\n  const attachment = resolveAuthTokenAttachment({\n    session,\n    requestUrl: input.requestUrl,\n  });\n  if (attachment.status === \"dropped\") {\n    // The caller holds a session it believes is usable. Dropping the token is\n    // still the safe outcome (never leak credentials to an incompatible\n    // host), but it must stay visible in diagnostics instead of silently\n    // dialing bare and surfacing as a remote 401.\n    warnDroppedAuthToken(attachment);\n    return;\n  }\n  headers[AUTHORIZATION_HEADER] = `${attachment.tokenType} ${attachment.token}`;\n}\n\nfunction warnDroppedAuthToken(attachment: DroppedAuthTokenAttachment): void {\n  console.warn(\"[openmeld.auth.request_token_dropped]\", {\n    authHost: attachment.authHost,\n    expectedGatewayHost: attachment.expectedGatewayHost,\n    reason: attachment.reason,\n    requestHost: attachment.requestHost,\n  });\n}\n\nasync function resolveAuthSessionForHeaders(\n  input: RequestAuthHeadersInput\n): Promise<StoredAuthSession | null> {\n  if (input.authSession !== undefined) {\n    return input.authSession;\n  }\n\n  const sessionState = await getAuthSessionState();\n  if (sessionState.state !== \"valid\" || sessionState.session === null) {\n    return null;\n  }\n\n  return sessionState.session;\n}\n\nfunction normalizeAccessToken(session: StoredAuthSession): string {\n  return String(session.accessToken ?? \"\").trim();\n}\n\nfunction normalizeTokenType(tokenType: string | undefined): string {\n  const normalized = String(tokenType ?? \"\").trim();\n  return normalized.length > 0 ? normalized : DEFAULT_TOKEN_TYPE;\n}\n\nexport function canAttachAuthTokenToRequest(\n  session: StoredAuthSession,\n  requestUrl: string\n): boolean {\n  return canUseAuthSessionForRequest({\n    session,\n    requestUrl,\n  });\n}\n","import {\n  DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS,\n  DEFAULT_SPACE_REQUEST_TIMEOUT_MS,\n  MAX_SPACE_REQUEST_TIMEOUT_MS,\n  MIN_SPACE_REQUEST_TIMEOUT_MS,\n} from \"../strategy-constants\";\n\nconst SPACE_REQUEST_TIMEOUT_ENV_KEY = \"OPENMELD_SPACE_REQUEST_TIMEOUT_MS\";\n\nexport function resolveSpaceRequestTimeoutMs(override?: number): number {\n  if (isFinitePositiveNumber(override)) {\n    return clampSpaceRequestTimeoutMs(override);\n  }\n\n  const fromEnv = Number.parseInt(\n    String(process.env[SPACE_REQUEST_TIMEOUT_ENV_KEY] ?? \"\"),\n    10\n  );\n  if (isFinitePositiveNumber(fromEnv)) {\n    return clampSpaceRequestTimeoutMs(fromEnv);\n  }\n\n  return DEFAULT_SPACE_REQUEST_TIMEOUT_MS;\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMs(undefined);\n}\n\nexport function resolveSpaceConversationValidateTimeoutMs(): number {\n  return Math.max(\n    resolveSpaceRequestTimeoutMs(undefined),\n    DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS\n  );\n}\n\nfunction clampSpaceRequestTimeoutMs(value: number): number {\n  const normalized = Math.trunc(value);\n  return Math.max(\n    MIN_SPACE_REQUEST_TIMEOUT_MS,\n    Math.min(MAX_SPACE_REQUEST_TIMEOUT_MS, normalized)\n  );\n}\n\nfunction isFinitePositiveNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value) && value > 0;\n}\n","import {\n  resolveSpaceRequestTimeoutMs,\n  resolveSpaceRequestTimeoutMsForDiagnostics as resolveSpaceRequestTimeoutMsForCliDiagnostics,\n} from \"./request-timeout\";\n\nexport async function fetchSpaceRequestWithTimeout(input: {\n  url: string;\n  operation: string;\n  init?: RequestInit;\n  timeoutMs?: number;\n}): Promise<Response> {\n  const timeoutMs = resolveSpaceRequestTimeoutMs(input.timeoutMs);\n  const timeoutSignal = AbortSignal.timeout(timeoutMs);\n  const composed = composeAbortSignals(input.init?.signal, timeoutSignal);\n\n  try {\n    try {\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    } catch (error) {\n      // A keep-alive connection that a proxy silently dropped fails exactly\n      // once and undici evicts it; the retry rides a fresh connection. This\n      // is what keeps a long-lived service working behind flaky proxies\n      // without asking users to touch their network config.\n      if (\n        timeoutSignal.aborted ||\n        composed.signal.aborted ||\n        !shouldWrapNetworkRequestError(error)\n      ) {\n        throw error;\n      }\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    }\n  } catch (error) {\n    if (timeoutSignal.aborted) {\n      throw createSpaceRequestTimeoutError({\n        operation: input.operation,\n        timeoutMs,\n        cause: error,\n      });\n    }\n    if (shouldWrapNetworkRequestError(error)) {\n      throw createSpaceRequestNetworkError({\n        operation: input.operation,\n        url: input.url,\n        cause: error,\n      });\n    }\n    throw error;\n  } finally {\n    composed.cleanup();\n  }\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMsForCliDiagnostics();\n}\n\nfunction createSpaceRequestTimeoutError(input: {\n  operation: string;\n  timeoutMs: number;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request timed out after ${input.timeoutMs}ms`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.timeout\";\n  return error;\n}\n\nfunction createSpaceRequestNetworkError(input: {\n  operation: string;\n  url: string;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request could not reach ${describeRequestTarget(input.url)} (${toErrorMessage(input.cause)})`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.request_failed\";\n  return error;\n}\n\nfunction composeAbortSignals(\n  parent: AbortSignal | null | undefined,\n  timeout: AbortSignal\n): { signal: AbortSignal; cleanup: () => void } {\n  if (!parent) {\n    return {\n      signal: timeout,\n      cleanup: () => undefined,\n    };\n  }\n\n  if (parent.aborted || timeout.aborted) {\n    const controller = new AbortController();\n    controller.abort();\n    return {\n      signal: controller.signal,\n      cleanup: () => undefined,\n    };\n  }\n\n  const controller = new AbortController();\n  const abort = () => {\n    controller.abort();\n  };\n\n  parent.addEventListener(\"abort\", abort, { once: true });\n  timeout.addEventListener(\"abort\", abort, { once: true });\n\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      parent.removeEventListener(\"abort\", abort);\n      timeout.removeEventListener(\"abort\", abort);\n    },\n  };\n}\n\nfunction describeRequestTarget(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return url;\n  }\n}\n\nfunction toErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    const message = error.message.trim();\n    return message.length > 0 ? message : \"request failed\";\n  }\n  const message = String(error ?? \"\").trim();\n  return message.length > 0 ? message : \"request failed\";\n}\n\nfunction shouldWrapNetworkRequestError(error: unknown): boolean {\n  if (error instanceof TypeError) {\n    return true;\n  }\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    typeof error.code === \"string\" &&\n    error.code.startsWith(\"ERR_SSL_\")\n  ) {\n    return true;\n  }\n  const message = toErrorMessage(error).toLowerCase();\n  return (\n    message.includes(\"fetch failed\") ||\n    message.includes(\"failed to fetch\") ||\n    message.includes(\"network request failed\") ||\n    message.includes(\"ssl_decryption_failed_or_bad_record_mac\")\n  );\n}\n","import {\n  createOpenMeldApiClient,\n  type OpenMeldApiClientFoundation,\n} from \"@openmeld/api-client\";\nimport {\n  buildOpenMeldRequestContextHeaders,\n  OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID,\n} from \"@openmeld/gateway-contract\";\nimport { buildRequestAuthHeaders } from \"../config/request-headers\";\nimport { fetchSpaceRequestWithTimeout } from \"./fetch-with-timeout\";\n\nexport function createCliApiClientFoundation(\n  baseUrl: string,\n  options: {\n    onAuthHeadersResolved?: (headers: Record<string, string>) => void;\n    organizationId?: string;\n  } = {}\n): OpenMeldApiClientFoundation {\n  return createOpenMeldApiClient({\n    baseUrl,\n    transport: async (request) =>\n      await fetchSpaceRequestWithTimeout({\n        url: request.url,\n        operation: request.operation,\n        init: request.init,\n        timeoutMs: request.timeoutMs,\n      }),\n    getAuthHeaders: async ({ requestUrl }) => {\n      const headers = await buildRequestAuthHeaders({\n        requestUrl,\n      });\n      if (options.organizationId) {\n        headers[OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID] =\n          options.organizationId;\n      }\n      options.onAuthHeadersResolved?.(headers);\n      return headers;\n    },\n    getRequestContextHeaders: async ({ requestContext, spacePassword }) =>\n      buildOpenMeldRequestContextHeaders({\n        requestContext,\n        ...(spacePassword === undefined ? {} : { spacePassword }),\n      }),\n  });\n}\n"],"mappings":";;;;;;;AAoBA,SAAgB,gCAAgC,OAGnB;CAC3B,MAAM,aAAa,eAAe,MAAM,UAAU;CAClD,IAAI,CAAC,YACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa;EACb,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,cAAc,eAAe,MAAM,QAAQ,WAAW;CAC5D,IAAI,CAAC,aACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa,WAAW;EACxB,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,sBAAsB,kBAAkB,WAAW;CACzD,MAAM,cAAc,WAAW;CAC/B,MAAM,WAAW,YAAY;CAE7B,IACE,mBAAmB,WAAW,QAAQ,KACtC,mBAAmB,YAAY,QAAQ,GAEvC,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,CAAC,0BAA0B,WAAW,QAAQ,GAChD,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,gBAAgB,UAClB,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,uBAAuB,gBAAgB,qBACzC,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,4BAA4B,OAGhC;CACV,OAAO,gCAAgC,KAAK,CAAC,CAAC;AAChD;AAEA,SAAgB,gCACd,YACe;CACf,MAAM,SAAS,eAAe,UAAU;CACxC,IAAI,CAAC,QACH,OAAO;CAET,IAAI,CAAC,wBAAwB,OAAO,QAAQ,GAC1C,OAAO;CAET,IAAI,CAAC,OAAO,SAAS,WAAW,UAAU,GACxC,OAAO;CAGT,MAAM,UAAU,IAAI,IAAI,OAAO,SAAS,CAAC;CACzC,QAAQ,WAAW,QAAQ,OAAO,SAAS,MAAM,CAAiB;CAClE,QAAQ,WAAW;CACnB,QAAQ,SAAS;CACjB,QAAQ,OAAO;CACf,OAAO,iBAAiB,QAAQ,SAAS,CAAC;AAC5C;AAEA,SAAS,kBAAkB,aAAiC;CAC1D,IAAI,CAAC,YAAY,SAAS,WAAW,OAAO,GAC1C,OAAO;CAGT,MAAM,aAAa,IAAI,IAAI,YAAY,SAAS,CAAC;CACjD,WAAW,WAAW,WAAW,YAAY,SAAS,MAAM,CAAc;CAC1E,OAAO,WAAW;AACpB;AAEA,SAAS,eAAe,OAA2B;CACjD,IAAI;EACF,OAAO,IAAI,IAAI,KAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,mBAAmB,UAA2B;CACrD,OACE,aAAa,eAAe,aAAa,eAAe,aAAa;AAEzE;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OAAO,aAAa,YAAY,aAAa;AAC/C;AAEA,SAAS,wBAAwB,UAA2B;CAC1D,OAAO,aAAa,WAAW,aAAa;AAC9C;;;AClJA,SAAgB,uCAAuC,OAI5B;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gCAAgC,sBACpC,MAAM,6BACR;CACA,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CAEvE,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC,aAAa,MAAM,gBAAgB;GACnC,eAAe,MAAM,gBAAgB;GACrC,aAAa,MAAM,gBAAgB;GACnC,aAAa,MAAM,gBAAgB;GACnC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAgB,+CAA+C,OAGpC;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gBAAgB,sBACpB,MAAM,gBAAgB,aACxB;CACA,MAAM,cAAc,sBAAsB,MAAM,gBAAgB,WAAW;CAC3E,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CACvE,MAAM,gCAAgC,sBACpC,MAAM,gBAAgB,6BACxB;CACA,MAAM,cACJ,MAAM,gBAAgB,gBACrB,MAAM,gBAAgB,SAAS,WAChC,MAAM,gBAAgB,SAAS,UAC3B,MAAM,gBAAgB,OACtB;CAEN,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC;GACA,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;GACzC,aAAa,MAAM,gBAAgB;GACnC,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;GACrC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;AC7DA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAgC7B,eAAsB,wBACpB,OACiC;CACjC,MAAM,UAAkC,CAAC;CACzC,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CACpB,OACiC;CACjC,MAAM,UAAU,mCAAmC,KAAK;CACxD,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CAA2C,OAM7B;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,uCAAuC;GACrD,iBAAiB,MAAM;GACvB,+BAA+B,MAAM;EACvC,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAEA,eAAsB,mDAAmD,OAKrC;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,+CAA+C,EAC7D,iBAAiB,MAAM,gBACzB,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAeA,SAAgB,2BAA2B,OAGnB;CACtB,MAAM,gBAAgB,gCAAgC;EACpD,SAAS,MAAM;EACf,YAAY,MAAM;CACpB,CAAC;CACD,MAAM,QAAQ,qBAAqB,MAAM,OAAO;CAChD,IAAI,CAAC,OACH,OAAO;EACL,QAAQ;EACR,QAAQ;EACR,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,IAAI,CAAC,cAAc,YACjB,OAAO;EACL,QAAQ;EACR,QAAQ,cAAc;EACtB,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,OAAO;EACL,QAAQ;EACR;EACA,WAAW,mBAAmB,MAAM,QAAQ,SAAS;CACvD;AACF;AAEA,eAAe,iBACb,SACA,OACe;CACf,MAAM,UAAU,MAAM,6BAA6B,KAAK;CACxD,IAAI,YAAY,MAGd;CAGF,MAAM,aAAa,2BAA2B;EAC5C;EACA,YAAY,MAAM;CACpB,CAAC;CACD,IAAI,WAAW,WAAW,WAAW;EAKnC,qBAAqB,UAAU;EAC/B;CACF;CACA,QAAQ,wBAAwB,GAAG,WAAW,UAAU,GAAG,WAAW;AACxE;AAEA,SAAS,qBAAqB,YAA8C;CAC1E,QAAQ,KAAK,yCAAyC;EACpD,UAAU,WAAW;EACrB,qBAAqB,WAAW;EAChC,QAAQ,WAAW;EACnB,aAAa,WAAW;CAC1B,CAAC;AACH;AAEA,eAAe,6BACb,OACmC;CACnC,IAAI,MAAM,gBAAgB,KAAA,GACxB,OAAO,MAAM;CAGf,MAAM,eAAe,MAAM,oBAAoB;CAC/C,IAAI,aAAa,UAAU,WAAW,aAAa,YAAY,MAC7D,OAAO;CAGT,OAAO,aAAa;AACtB;AAEA,SAAS,qBAAqB,SAAoC;CAChE,OAAO,OAAO,QAAQ,eAAe,EAAE,CAAC,CAAC,KAAK;AAChD;AAEA,SAAS,mBAAmB,WAAuC;CACjE,MAAM,aAAa,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK;CAChD,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAgB,4BACd,SACA,YACS;CACT,OAAO,4BAA4B;EACjC;EACA;CACF,CAAC;AACH;;;ACxNA,MAAM,gCAAgC;AAEtC,SAAgB,6BAA6B,UAA2B;CACtE,IAAI,uBAAuB,QAAQ,GACjC,OAAO,2BAA2B,QAAQ;CAG5C,MAAM,UAAU,OAAO,SACrB,OAAO,QAAQ,IAAI,kCAAkC,EAAE,GACvD,EACF;CACA,IAAI,uBAAuB,OAAO,GAChC,OAAO,2BAA2B,OAAO;CAG3C,OAAO;AACT;AAEA,SAAgBA,+CAAqD;CACnE,OAAO,6BAA6B,KAAA,CAAS;AAC/C;AASA,SAAS,2BAA2B,OAAuB;CAEzD,OAAO,KAAK,IACV,8BACA,KAAK,IAAI,8BAHQ,KAAK,MAAM,KAGoB,CAAC,CACnD;AACF;AAEA,SAAS,uBAAuB,OAAiC;CAC/D,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ;AACxE;;;ACzCA,eAAsB,6BAA6B,OAK7B;CACpB,MAAM,YAAY,6BAA6B,MAAM,SAAS;CAC9D,MAAM,gBAAgB,YAAY,QAAQ,SAAS;CACnD,MAAM,WAAW,oBAAoB,MAAM,MAAM,QAAQ,aAAa;CAEtE,IAAI;EACF,IAAI;GACF,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH,SAAS,OAAO;GAKd,IACE,cAAc,WACd,SAAS,OAAO,WAChB,CAAC,8BAA8B,KAAK,GAEpC,MAAM;GAER,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH;CACF,SAAS,OAAO;EACd,IAAI,cAAc,SAChB,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB;GACA,OAAO;EACT,CAAC;EAEH,IAAI,8BAA8B,KAAK,GACrC,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB,KAAK,MAAM;GACX,OAAO;EACT,CAAC;EAEH,MAAM;CACR,UAAU;EACR,SAAS,QAAQ;CACnB;AACF;AAEA,SAAgB,6CAAqD;CACnE,OAAOC,6CAA8C;AACvD;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,MAAM,UAAU,KAC9D,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,sBAAsB,MAAM,GAAG,EAAE,IAAI,eAAe,MAAM,KAAK,EAAE,IAC/G,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,oBACP,QACA,SAC8C;CAC9C,IAAI,CAAC,QACH,OAAO;EACL,QAAQ;EACR,eAAe,KAAA;CACjB;CAGF,IAAI,OAAO,WAAW,QAAQ,SAAS;EACrC,MAAM,aAAa,IAAI,gBAAgB;EACvC,WAAW,MAAM;EACjB,OAAO;GACL,QAAQ,WAAW;GACnB,eAAe,KAAA;EACjB;CACF;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,cAAc;EAClB,WAAW,MAAM;CACnB;CAEA,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACtD,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CAEvD,OAAO;EACL,QAAQ,WAAW;EACnB,eAAe;GACb,OAAO,oBAAoB,SAAS,KAAK;GACzC,QAAQ,oBAAoB,SAAS,KAAK;EAC5C;CACF;AACF;AAEA,SAAS,sBAAsB,KAAqB;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,OAAwB;CAC9C,IAAI,iBAAiB,OAAO;EAC1B,MAAM,UAAU,MAAM,QAAQ,KAAK;EACnC,OAAO,QAAQ,SAAS,IAAI,UAAU;CACxC;CACA,MAAM,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CACzC,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,8BAA8B,OAAyB;CAC9D,IAAI,iBAAiB,WACnB,OAAO;CAET,IACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,OAAO,MAAM,SAAS,YACtB,MAAM,KAAK,WAAW,UAAU,GAEhC,OAAO;CAET,MAAM,UAAU,eAAe,KAAK,CAAC,CAAC,YAAY;CAClD,OACE,QAAQ,SAAS,cAAc,KAC/B,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,wBAAwB,KACzC,QAAQ,SAAS,yCAAyC;AAE9D;;;;ACxJA,SAAgB,6BACd,SACA,UAGI,CAAC,GACwB;CAC7B,OAAO,wBAAwB;EAC7B;EACA,WAAW,OAAO,YAChB,MAAM,6BAA6B;GACjC,KAAK,QAAQ;GACb,WAAW,QAAQ;GACnB,MAAM,QAAQ;GACd,WAAW,QAAQ;EACrB,CAAC;EACH,gBAAgB,OAAO,EAAE,iBAAiB;GACxC,MAAM,UAAU,MAAM,wBAAwB,EAC5C,WACF,CAAC;GACD,IAAI,QAAQ,gBACV,QAAQ,6CACN,QAAQ;GAEZ,QAAQ,wBAAwB,OAAO;GACvC,OAAO;EACT;EACA,0BAA0B,OAAO,EAAE,gBAAgB,oBACjD,mCAAmC;GACjC;GACA,GAAI,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc;EACzD,CAAC;CACL,CAAC;AACH"}
+{"version":3,"file":"api-client-foundation-CrP6qikm.js","names":["resolveSpaceRequestTimeoutMsForDiagnostics","resolveSpaceRequestTimeoutMsForCliDiagnostics"],"sources":["../src/config/auth-request-compatibility.ts","../src/config/openmeld-request-context.ts","../src/config/request-headers.ts","../src/space/request-timeout.ts","../src/space/fetch-with-timeout.ts","../src/space/api-client-foundation.ts"],"sourcesContent":["import { normalizeBaseUrl } from \"../protocol/urls\";\nimport type { StoredAuthSession } from \"./auth-session\";\n\nexport type AuthRequestCompatibilityReason =\n  | \"invalid_request_url\"\n  | \"invalid_auth_url\"\n  | \"insecure_transport\"\n  | \"host_mismatch\"\n  | \"loopback\"\n  | \"same_host\"\n  | \"gateway_sibling\";\n\nexport type AuthRequestCompatibility = {\n  compatible: boolean;\n  reason: AuthRequestCompatibilityReason;\n  requestHost: string | null;\n  authHost: string | null;\n  expectedGatewayHost: string | null;\n};\n\nexport function resolveAuthRequestCompatibility(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthRequestCompatibility {\n  const requestUrl = parseUrlOrNull(input.requestUrl);\n  if (!requestUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_request_url\",\n      requestHost: null,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const authBaseUrl = parseUrlOrNull(input.session.authBaseUrl);\n  if (!authBaseUrl) {\n    return {\n      compatible: false,\n      reason: \"invalid_auth_url\",\n      requestHost: requestUrl.host,\n      authHost: null,\n      expectedGatewayHost: null,\n    };\n  }\n\n  const expectedGatewayHost = deriveGatewayHost(authBaseUrl);\n  const requestHost = requestUrl.host;\n  const authHost = authBaseUrl.host;\n\n  if (\n    isLoopbackHostname(requestUrl.hostname) &&\n    isLoopbackHostname(authBaseUrl.hostname)\n  ) {\n    return {\n      compatible: true,\n      reason: \"loopback\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (!isSecureTransportProtocol(requestUrl.protocol)) {\n    return {\n      compatible: false,\n      reason: \"insecure_transport\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (requestHost === authHost) {\n    return {\n      compatible: true,\n      reason: \"same_host\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  if (expectedGatewayHost && requestHost === expectedGatewayHost) {\n    return {\n      compatible: true,\n      reason: \"gateway_sibling\",\n      requestHost,\n      authHost,\n      expectedGatewayHost,\n    };\n  }\n\n  return {\n    compatible: false,\n    reason: \"host_mismatch\",\n    requestHost,\n    authHost,\n    expectedGatewayHost,\n  };\n}\n\nexport function canUseAuthSessionForRequest(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): boolean {\n  return resolveAuthRequestCompatibility(input).compatible;\n}\n\nexport function deriveAuthBaseUrlFromGatewayUrl(\n  gatewayUrl: string\n): string | null {\n  const parsed = parseUrlOrNull(gatewayUrl);\n  if (!parsed) {\n    return null;\n  }\n  if (!isHttpTransportProtocol(parsed.protocol)) {\n    return null;\n  }\n  if (!parsed.hostname.startsWith(\"gateway.\")) {\n    return null;\n  }\n\n  const authUrl = new URL(parsed.toString());\n  authUrl.hostname = `auth.${parsed.hostname.slice(\"gateway.\".length)}`;\n  authUrl.pathname = \"/\";\n  authUrl.search = \"\";\n  authUrl.hash = \"\";\n  return normalizeBaseUrl(authUrl.toString());\n}\n\nfunction deriveGatewayHost(authBaseUrl: URL): string | null {\n  if (!authBaseUrl.hostname.startsWith(\"auth.\")) {\n    return null;\n  }\n\n  const gatewayUrl = new URL(authBaseUrl.toString());\n  gatewayUrl.hostname = `gateway.${authBaseUrl.hostname.slice(\"auth.\".length)}`;\n  return gatewayUrl.host;\n}\n\nfunction parseUrlOrNull(value: string): URL | null {\n  try {\n    return new URL(value);\n  } catch {\n    return null;\n  }\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n  return (\n    hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"::1\"\n  );\n}\n\nfunction isSecureTransportProtocol(protocol: string): boolean {\n  return protocol === \"https:\" || protocol === \"wss:\";\n}\n\nfunction isHttpTransportProtocol(protocol: string): boolean {\n  return protocol === \"http:\" || protocol === \"https:\";\n}\n","import crypto from \"node:crypto\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\n\nexport type OpenMeldRequestContextProfileIdentity = {\n  openMeldProfileId: string;\n  profileKind?: \"human\" | \"agent\" | \"system\";\n  kind?: \"human\" | \"agent\";\n  profileHandle?: string;\n  profileName: string;\n  ownerUserId?: string;\n  ownerName?: string;\n  agentControllerConversationId?: string;\n};\n\nexport function buildOpenMeldRequestContextFromProfile(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestId?: string;\n  agentControllerConversationId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const agentControllerConversationId = normalizeOptionalText(\n    input.agentControllerConversationId\n  );\n  const ownerName = normalizeOptionalText(input.openMeldProfile.ownerName);\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.openMeldProfile.openMeldProfileId,\n      profileKind: input.openMeldProfile.profileKind,\n      profileHandle: input.openMeldProfile.profileHandle,\n      profileName: input.openMeldProfile.profileName,\n      ownerUserId: input.openMeldProfile.ownerUserId,\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nexport function buildOpenMeldRequestContextFromProfileIdentity(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestId?: string;\n}): OpenMeldRequestContext {\n  const requestId =\n    normalizeOptionalText(input.requestId) ?? crypto.randomUUID();\n  const profileHandle = normalizeOptionalText(\n    input.profileIdentity.profileHandle\n  );\n  const ownerUserId = normalizeOptionalText(input.profileIdentity.ownerUserId);\n  const ownerName = normalizeOptionalText(input.profileIdentity.ownerName);\n  const agentControllerConversationId = normalizeOptionalText(\n    input.profileIdentity.agentControllerConversationId\n  );\n  const profileKind =\n    input.profileIdentity.profileKind ??\n    (input.profileIdentity.kind === \"human\" ||\n    input.profileIdentity.kind === \"agent\"\n      ? input.profileIdentity.kind\n      : \"system\");\n\n  return {\n    actorContext: {\n      requestId,\n      openMeldProfileId: input.profileIdentity.openMeldProfileId,\n      profileKind,\n      ...(profileHandle ? { profileHandle } : {}),\n      profileName: input.profileIdentity.profileName,\n      ...(ownerUserId ? { ownerUserId } : {}),\n      ...(ownerName ? { ownerName } : {}),\n    },\n    ...(agentControllerConversationId ? { agentControllerConversationId } : {}),\n  };\n}\n\nfunction normalizeOptionalText(value: unknown): string | null {\n  const normalized = String(value ?? \"\").trim();\n  return normalized.length > 0 ? normalized : null;\n}\n","import {\n  buildOpenMeldRequestContextHeaders,\n  type OpenMeldRequestContextHeadersInput,\n} from \"@openmeld/gateway-contract\";\nimport type { OpenMeldRequestContext } from \"@openmeld/schemas/types\";\nimport {\n  type AuthRequestCompatibilityReason,\n  canUseAuthSessionForRequest,\n  resolveAuthRequestCompatibility,\n} from \"./auth-request-compatibility\";\nimport { getAuthSessionState, type StoredAuthSession } from \"./auth-session\";\nimport type { OpenMeldProfile } from \"./openmeld-profiles-api\";\nimport {\n  buildOpenMeldRequestContextFromProfile,\n  buildOpenMeldRequestContextFromProfileIdentity,\n  type OpenMeldRequestContextProfileIdentity,\n} from \"./openmeld-request-context\";\n\nconst DEFAULT_TOKEN_TYPE = \"Bearer\";\nconst AUTHORIZATION_HEADER = \"Authorization\";\n\ntype RequestAuthHeadersInput = {\n  authSession?: StoredAuthSession | null;\n  requestUrl: string;\n};\n\ntype OpenMeldRequestContextHeadersWithAuthInput =\n  OpenMeldRequestContextHeadersInput & {\n    authSession?: StoredAuthSession | null;\n    requestUrl: string;\n  };\n\nexport type AuthTokenAttachment =\n  | {\n      status: \"attachable\";\n      token: string;\n      tokenType: string;\n    }\n  | {\n      status: \"dropped\";\n      reason: \"empty_token\" | AuthRequestCompatibilityReason;\n      requestHost: string | null;\n      authHost: string | null;\n      expectedGatewayHost: string | null;\n    };\n\nexport type DroppedAuthTokenAttachment = Extract<\n  AuthTokenAttachment,\n  { status: \"dropped\" }\n>;\n\nexport async function buildRequestAuthHeaders(\n  input: RequestAuthHeadersInput\n): Promise<Record<string, string>> {\n  const headers: Record<string, string> = {};\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldRequestContextHeadersWithAuth(\n  input: OpenMeldRequestContextHeadersWithAuthInput\n): Promise<Record<string, string>> {\n  const headers = buildOpenMeldRequestContextHeaders(input);\n  await attachAuthHeader(headers, input);\n  return headers;\n}\n\nexport async function buildOpenMeldProfileRequestHeadersWithAuth(input: {\n  openMeldProfile: OpenMeldProfile;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  agentControllerConversationId?: string;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfile({\n      openMeldProfile: input.openMeldProfile,\n      agentControllerConversationId: input.agentControllerConversationId,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport async function buildOpenMeldProfileIdentityRequestHeadersWithAuth(input: {\n  profileIdentity: OpenMeldRequestContextProfileIdentity;\n  requestUrl: string;\n  authSession?: StoredAuthSession | null;\n  spacePassword?: string;\n}): Promise<Record<string, string>> {\n  return await buildOpenMeldRequestContextHeadersWithAuth({\n    requestContext: buildOpenMeldRequestContextFromProfileIdentity({\n      profileIdentity: input.profileIdentity,\n    }),\n    requestUrl: input.requestUrl,\n    ...(input.authSession === undefined\n      ? {}\n      : { authSession: input.authSession }),\n    ...(input.spacePassword === undefined\n      ? {}\n      : { spacePassword: input.spacePassword }),\n  });\n}\n\nexport function withSpacePassword(\n  requestContext: OpenMeldRequestContext,\n  spacePassword?: string\n): OpenMeldRequestContextHeadersInput {\n  return {\n    requestContext,\n    ...(spacePassword === undefined ? {} : { spacePassword }),\n  };\n}\n\n// One decision for \"can this stored session authenticate this request\", with\n// the drop reason preserved. Header building and the daemon stream connect\n// gate must share this so they cannot drift apart.\nexport function resolveAuthTokenAttachment(input: {\n  session: StoredAuthSession;\n  requestUrl: string;\n}): AuthTokenAttachment {\n  const compatibility = resolveAuthRequestCompatibility({\n    session: input.session,\n    requestUrl: input.requestUrl,\n  });\n  const token = normalizeAccessToken(input.session);\n  if (!token) {\n    return {\n      status: \"dropped\",\n      reason: \"empty_token\",\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  if (!compatibility.compatible) {\n    return {\n      status: \"dropped\",\n      reason: compatibility.reason,\n      requestHost: compatibility.requestHost,\n      authHost: compatibility.authHost,\n      expectedGatewayHost: compatibility.expectedGatewayHost,\n    };\n  }\n  return {\n    status: \"attachable\",\n    token,\n    tokenType: normalizeTokenType(input.session.tokenType),\n  };\n}\n\nasync function attachAuthHeader(\n  headers: Record<string, string>,\n  input: RequestAuthHeadersInput\n): Promise<void> {\n  const session = await resolveAuthSessionForHeaders(input);\n  if (session === null) {\n    // No stored credentials exist, so there is nothing to strip: the caller\n    // is knowingly sending an unauthenticated request.\n    return;\n  }\n\n  const attachment = resolveAuthTokenAttachment({\n    session,\n    requestUrl: input.requestUrl,\n  });\n  if (attachment.status === \"dropped\") {\n    // The caller holds a session it believes is usable. Dropping the token is\n    // still the safe outcome (never leak credentials to an incompatible\n    // host), but it must stay visible in diagnostics instead of silently\n    // dialing bare and surfacing as a remote 401.\n    warnDroppedAuthToken(attachment);\n    return;\n  }\n  headers[AUTHORIZATION_HEADER] = `${attachment.tokenType} ${attachment.token}`;\n}\n\nfunction warnDroppedAuthToken(attachment: DroppedAuthTokenAttachment): void {\n  console.warn(\"[openmeld.auth.request_token_dropped]\", {\n    authHost: attachment.authHost,\n    expectedGatewayHost: attachment.expectedGatewayHost,\n    reason: attachment.reason,\n    requestHost: attachment.requestHost,\n  });\n}\n\nasync function resolveAuthSessionForHeaders(\n  input: RequestAuthHeadersInput\n): Promise<StoredAuthSession | null> {\n  if (input.authSession !== undefined) {\n    return input.authSession;\n  }\n\n  const sessionState = await getAuthSessionState();\n  if (sessionState.state !== \"valid\" || sessionState.session === null) {\n    return null;\n  }\n\n  return sessionState.session;\n}\n\nfunction normalizeAccessToken(session: StoredAuthSession): string {\n  return String(session.accessToken ?? \"\").trim();\n}\n\nfunction normalizeTokenType(tokenType: string | undefined): string {\n  const normalized = String(tokenType ?? \"\").trim();\n  return normalized.length > 0 ? normalized : DEFAULT_TOKEN_TYPE;\n}\n\nexport function canAttachAuthTokenToRequest(\n  session: StoredAuthSession,\n  requestUrl: string\n): boolean {\n  return canUseAuthSessionForRequest({\n    session,\n    requestUrl,\n  });\n}\n","import {\n  DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS,\n  DEFAULT_SPACE_REQUEST_TIMEOUT_MS,\n  MAX_SPACE_REQUEST_TIMEOUT_MS,\n  MIN_SPACE_REQUEST_TIMEOUT_MS,\n} from \"../strategy-constants\";\n\nconst SPACE_REQUEST_TIMEOUT_ENV_KEY = \"OPENMELD_SPACE_REQUEST_TIMEOUT_MS\";\n\nexport function resolveSpaceRequestTimeoutMs(override?: number): number {\n  if (isFinitePositiveNumber(override)) {\n    return clampSpaceRequestTimeoutMs(override);\n  }\n\n  const fromEnv = Number.parseInt(\n    String(process.env[SPACE_REQUEST_TIMEOUT_ENV_KEY] ?? \"\"),\n    10\n  );\n  if (isFinitePositiveNumber(fromEnv)) {\n    return clampSpaceRequestTimeoutMs(fromEnv);\n  }\n\n  return DEFAULT_SPACE_REQUEST_TIMEOUT_MS;\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMs(undefined);\n}\n\nexport function resolveSpaceConversationValidateTimeoutMs(): number {\n  return Math.max(\n    resolveSpaceRequestTimeoutMs(undefined),\n    DEFAULT_SPACE_CONVERSATION_VALIDATE_TIMEOUT_MS\n  );\n}\n\nfunction clampSpaceRequestTimeoutMs(value: number): number {\n  const normalized = Math.trunc(value);\n  return Math.max(\n    MIN_SPACE_REQUEST_TIMEOUT_MS,\n    Math.min(MAX_SPACE_REQUEST_TIMEOUT_MS, normalized)\n  );\n}\n\nfunction isFinitePositiveNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value) && value > 0;\n}\n","import {\n  resolveSpaceRequestTimeoutMs,\n  resolveSpaceRequestTimeoutMsForDiagnostics as resolveSpaceRequestTimeoutMsForCliDiagnostics,\n} from \"./request-timeout\";\n\nexport async function fetchSpaceRequestWithTimeout(input: {\n  url: string;\n  operation: string;\n  init?: RequestInit;\n  timeoutMs?: number;\n}): Promise<Response> {\n  const timeoutMs = resolveSpaceRequestTimeoutMs(input.timeoutMs);\n  const timeoutSignal = AbortSignal.timeout(timeoutMs);\n  const composed = composeAbortSignals(input.init?.signal, timeoutSignal);\n\n  try {\n    try {\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    } catch (error) {\n      // A keep-alive connection that a proxy silently dropped fails exactly\n      // once and undici evicts it; the retry rides a fresh connection. This\n      // is what keeps a long-lived service working behind flaky proxies\n      // without asking users to touch their network config.\n      if (\n        timeoutSignal.aborted ||\n        composed.signal.aborted ||\n        !shouldWrapNetworkRequestError(error)\n      ) {\n        throw error;\n      }\n      return await fetch(input.url, {\n        ...input.init,\n        signal: composed.signal,\n      });\n    }\n  } catch (error) {\n    if (timeoutSignal.aborted) {\n      throw createSpaceRequestTimeoutError({\n        operation: input.operation,\n        timeoutMs,\n        cause: error,\n      });\n    }\n    if (shouldWrapNetworkRequestError(error)) {\n      throw createSpaceRequestNetworkError({\n        operation: input.operation,\n        url: input.url,\n        cause: error,\n      });\n    }\n    throw error;\n  } finally {\n    composed.cleanup();\n  }\n}\n\nexport function resolveSpaceRequestTimeoutMsForDiagnostics(): number {\n  return resolveSpaceRequestTimeoutMsForCliDiagnostics();\n}\n\nfunction createSpaceRequestTimeoutError(input: {\n  operation: string;\n  timeoutMs: number;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request timed out after ${input.timeoutMs}ms`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.timeout\";\n  return error;\n}\n\nfunction createSpaceRequestNetworkError(input: {\n  operation: string;\n  url: string;\n  cause: unknown;\n}): Error {\n  const error = new Error(\n    `${input.operation} request could not reach ${describeRequestTarget(input.url)} (${toErrorMessage(input.cause)})`,\n    { cause: input.cause }\n  ) as Error & { code?: string };\n  error.code = \"network.request_failed\";\n  return error;\n}\n\nfunction composeAbortSignals(\n  parent: AbortSignal | null | undefined,\n  timeout: AbortSignal\n): { signal: AbortSignal; cleanup: () => void } {\n  if (!parent) {\n    return {\n      signal: timeout,\n      cleanup: () => undefined,\n    };\n  }\n\n  if (parent.aborted || timeout.aborted) {\n    const controller = new AbortController();\n    controller.abort();\n    return {\n      signal: controller.signal,\n      cleanup: () => undefined,\n    };\n  }\n\n  const controller = new AbortController();\n  const abort = () => {\n    controller.abort();\n  };\n\n  parent.addEventListener(\"abort\", abort, { once: true });\n  timeout.addEventListener(\"abort\", abort, { once: true });\n\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      parent.removeEventListener(\"abort\", abort);\n      timeout.removeEventListener(\"abort\", abort);\n    },\n  };\n}\n\nfunction describeRequestTarget(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return url;\n  }\n}\n\nfunction toErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    const message = error.message.trim();\n    return message.length > 0 ? message : \"request failed\";\n  }\n  const message = String(error ?? \"\").trim();\n  return message.length > 0 ? message : \"request failed\";\n}\n\nfunction shouldWrapNetworkRequestError(error: unknown): boolean {\n  if (error instanceof TypeError) {\n    return true;\n  }\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    typeof error.code === \"string\" &&\n    error.code.startsWith(\"ERR_SSL_\")\n  ) {\n    return true;\n  }\n  const message = toErrorMessage(error).toLowerCase();\n  return (\n    message.includes(\"fetch failed\") ||\n    message.includes(\"failed to fetch\") ||\n    message.includes(\"network request failed\") ||\n    message.includes(\"ssl_decryption_failed_or_bad_record_mac\")\n  );\n}\n","import {\n  createOpenMeldApiClient,\n  type OpenMeldApiClientFoundation,\n} from \"@openmeld/api-client\";\nimport {\n  buildOpenMeldRequestContextHeaders,\n  OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID,\n} from \"@openmeld/gateway-contract\";\nimport { buildRequestAuthHeaders } from \"../config/request-headers\";\nimport { fetchSpaceRequestWithTimeout } from \"./fetch-with-timeout\";\n\nexport function createCliApiClientFoundation(\n  baseUrl: string,\n  options: {\n    onAuthHeadersResolved?: (headers: Record<string, string>) => void;\n    organizationId?: string;\n  } = {}\n): OpenMeldApiClientFoundation {\n  return createOpenMeldApiClient({\n    baseUrl,\n    transport: async (request) =>\n      await fetchSpaceRequestWithTimeout({\n        url: request.url,\n        operation: request.operation,\n        init: request.init,\n        timeoutMs: request.timeoutMs,\n      }),\n    getAuthHeaders: async ({ requestUrl }) => {\n      const headers = await buildRequestAuthHeaders({\n        requestUrl,\n      });\n      if (options.organizationId) {\n        headers[OPENMELD_HEADER_REQUESTED_ORGANIZATION_ID] =\n          options.organizationId;\n      }\n      options.onAuthHeadersResolved?.(headers);\n      return headers;\n    },\n    getRequestContextHeaders: async ({ requestContext, spacePassword }) =>\n      buildOpenMeldRequestContextHeaders({\n        requestContext,\n        ...(spacePassword === undefined ? {} : { spacePassword }),\n      }),\n  });\n}\n"],"mappings":";;;;;;;AAoBA,SAAgB,gCAAgC,OAGnB;CAC3B,MAAM,aAAa,eAAe,MAAM,UAAU;CAClD,IAAI,CAAC,YACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa;EACb,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,cAAc,eAAe,MAAM,QAAQ,WAAW;CAC5D,IAAI,CAAC,aACH,OAAO;EACL,YAAY;EACZ,QAAQ;EACR,aAAa,WAAW;EACxB,UAAU;EACV,qBAAqB;CACvB;CAGF,MAAM,sBAAsB,kBAAkB,WAAW;CACzD,MAAM,cAAc,WAAW;CAC/B,MAAM,WAAW,YAAY;CAE7B,IACE,mBAAmB,WAAW,QAAQ,KACtC,mBAAmB,YAAY,QAAQ,GAEvC,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,CAAC,0BAA0B,WAAW,QAAQ,GAChD,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,gBAAgB,UAClB,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,IAAI,uBAAuB,gBAAgB,qBACzC,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;CAGF,OAAO;EACL,YAAY;EACZ,QAAQ;EACR;EACA;EACA;CACF;AACF;AAEA,SAAgB,4BAA4B,OAGhC;CACV,OAAO,gCAAgC,KAAK,CAAC,CAAC;AAChD;AAEA,SAAgB,gCACd,YACe;CACf,MAAM,SAAS,eAAe,UAAU;CACxC,IAAI,CAAC,QACH,OAAO;CAET,IAAI,CAAC,wBAAwB,OAAO,QAAQ,GAC1C,OAAO;CAET,IAAI,CAAC,OAAO,SAAS,WAAW,UAAU,GACxC,OAAO;CAGT,MAAM,UAAU,IAAI,IAAI,OAAO,SAAS,CAAC;CACzC,QAAQ,WAAW,QAAQ,OAAO,SAAS,MAAM,CAAiB;CAClE,QAAQ,WAAW;CACnB,QAAQ,SAAS;CACjB,QAAQ,OAAO;CACf,OAAO,iBAAiB,QAAQ,SAAS,CAAC;AAC5C;AAEA,SAAS,kBAAkB,aAAiC;CAC1D,IAAI,CAAC,YAAY,SAAS,WAAW,OAAO,GAC1C,OAAO;CAGT,MAAM,aAAa,IAAI,IAAI,YAAY,SAAS,CAAC;CACjD,WAAW,WAAW,WAAW,YAAY,SAAS,MAAM,CAAc;CAC1E,OAAO,WAAW;AACpB;AAEA,SAAS,eAAe,OAA2B;CACjD,IAAI;EACF,OAAO,IAAI,IAAI,KAAK;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,mBAAmB,UAA2B;CACrD,OACE,aAAa,eAAe,aAAa,eAAe,aAAa;AAEzE;AAEA,SAAS,0BAA0B,UAA2B;CAC5D,OAAO,aAAa,YAAY,aAAa;AAC/C;AAEA,SAAS,wBAAwB,UAA2B;CAC1D,OAAO,aAAa,WAAW,aAAa;AAC9C;;;AClJA,SAAgB,uCAAuC,OAI5B;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gCAAgC,sBACpC,MAAM,6BACR;CACA,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CAEvE,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC,aAAa,MAAM,gBAAgB;GACnC,eAAe,MAAM,gBAAgB;GACrC,aAAa,MAAM,gBAAgB;GACnC,aAAa,MAAM,gBAAgB;GACnC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAgB,+CAA+C,OAGpC;CACzB,MAAM,YACJ,sBAAsB,MAAM,SAAS,KAAK,OAAO,WAAW;CAC9D,MAAM,gBAAgB,sBACpB,MAAM,gBAAgB,aACxB;CACA,MAAM,cAAc,sBAAsB,MAAM,gBAAgB,WAAW;CAC3E,MAAM,YAAY,sBAAsB,MAAM,gBAAgB,SAAS;CACvE,MAAM,gCAAgC,sBACpC,MAAM,gBAAgB,6BACxB;CACA,MAAM,cACJ,MAAM,gBAAgB,gBACrB,MAAM,gBAAgB,SAAS,WAChC,MAAM,gBAAgB,SAAS,UAC3B,MAAM,gBAAgB,OACtB;CAEN,OAAO;EACL,cAAc;GACZ;GACA,mBAAmB,MAAM,gBAAgB;GACzC;GACA,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;GACzC,aAAa,MAAM,gBAAgB;GACnC,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;GACrC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC;EACA,GAAI,gCAAgC,EAAE,8BAA8B,IAAI,CAAC;CAC3E;AACF;AAEA,SAAS,sBAAsB,OAA+B;CAC5D,MAAM,aAAa,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC5C,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;;;AC7DA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAgC7B,eAAsB,wBACpB,OACiC;CACjC,MAAM,UAAkC,CAAC;CACzC,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CACpB,OACiC;CACjC,MAAM,UAAU,mCAAmC,KAAK;CACxD,MAAM,iBAAiB,SAAS,KAAK;CACrC,OAAO;AACT;AAEA,eAAsB,2CAA2C,OAM7B;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,uCAAuC;GACrD,iBAAiB,MAAM;GACvB,+BAA+B,MAAM;EACvC,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAEA,eAAsB,mDAAmD,OAKrC;CAClC,OAAO,MAAM,2CAA2C;EACtD,gBAAgB,+CAA+C,EAC7D,iBAAiB,MAAM,gBACzB,CAAC;EACD,YAAY,MAAM;EAClB,GAAI,MAAM,gBAAgB,KAAA,IACtB,CAAC,IACD,EAAE,aAAa,MAAM,YAAY;EACrC,GAAI,MAAM,kBAAkB,KAAA,IACxB,CAAC,IACD,EAAE,eAAe,MAAM,cAAc;CAC3C,CAAC;AACH;AAeA,SAAgB,2BAA2B,OAGnB;CACtB,MAAM,gBAAgB,gCAAgC;EACpD,SAAS,MAAM;EACf,YAAY,MAAM;CACpB,CAAC;CACD,MAAM,QAAQ,qBAAqB,MAAM,OAAO;CAChD,IAAI,CAAC,OACH,OAAO;EACL,QAAQ;EACR,QAAQ;EACR,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,IAAI,CAAC,cAAc,YACjB,OAAO;EACL,QAAQ;EACR,QAAQ,cAAc;EACtB,aAAa,cAAc;EAC3B,UAAU,cAAc;EACxB,qBAAqB,cAAc;CACrC;CAEF,OAAO;EACL,QAAQ;EACR;EACA,WAAW,mBAAmB,MAAM,QAAQ,SAAS;CACvD;AACF;AAEA,eAAe,iBACb,SACA,OACe;CACf,MAAM,UAAU,MAAM,6BAA6B,KAAK;CACxD,IAAI,YAAY,MAGd;CAGF,MAAM,aAAa,2BAA2B;EAC5C;EACA,YAAY,MAAM;CACpB,CAAC;CACD,IAAI,WAAW,WAAW,WAAW;EAKnC,qBAAqB,UAAU;EAC/B;CACF;CACA,QAAQ,wBAAwB,GAAG,WAAW,UAAU,GAAG,WAAW;AACxE;AAEA,SAAS,qBAAqB,YAA8C;CAC1E,QAAQ,KAAK,yCAAyC;EACpD,UAAU,WAAW;EACrB,qBAAqB,WAAW;EAChC,QAAQ,WAAW;EACnB,aAAa,WAAW;CAC1B,CAAC;AACH;AAEA,eAAe,6BACb,OACmC;CACnC,IAAI,MAAM,gBAAgB,KAAA,GACxB,OAAO,MAAM;CAGf,MAAM,eAAe,MAAM,oBAAoB;CAC/C,IAAI,aAAa,UAAU,WAAW,aAAa,YAAY,MAC7D,OAAO;CAGT,OAAO,aAAa;AACtB;AAEA,SAAS,qBAAqB,SAAoC;CAChE,OAAO,OAAO,QAAQ,eAAe,EAAE,CAAC,CAAC,KAAK;AAChD;AAEA,SAAS,mBAAmB,WAAuC;CACjE,MAAM,aAAa,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK;CAChD,OAAO,WAAW,SAAS,IAAI,aAAa;AAC9C;AAEA,SAAgB,4BACd,SACA,YACS;CACT,OAAO,4BAA4B;EACjC;EACA;CACF,CAAC;AACH;;;ACxNA,MAAM,gCAAgC;AAEtC,SAAgB,6BAA6B,UAA2B;CACtE,IAAI,uBAAuB,QAAQ,GACjC,OAAO,2BAA2B,QAAQ;CAG5C,MAAM,UAAU,OAAO,SACrB,OAAO,QAAQ,IAAI,kCAAkC,EAAE,GACvD,EACF;CACA,IAAI,uBAAuB,OAAO,GAChC,OAAO,2BAA2B,OAAO;CAG3C,OAAO;AACT;AAEA,SAAgBA,+CAAqD;CACnE,OAAO,6BAA6B,KAAA,CAAS;AAC/C;AASA,SAAS,2BAA2B,OAAuB;CAEzD,OAAO,KAAK,IACV,8BACA,KAAK,IAAI,8BAHQ,KAAK,MAAM,KAGoB,CAAC,CACnD;AACF;AAEA,SAAS,uBAAuB,OAAiC;CAC/D,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ;AACxE;;;ACzCA,eAAsB,6BAA6B,OAK7B;CACpB,MAAM,YAAY,6BAA6B,MAAM,SAAS;CAC9D,MAAM,gBAAgB,YAAY,QAAQ,SAAS;CACnD,MAAM,WAAW,oBAAoB,MAAM,MAAM,QAAQ,aAAa;CAEtE,IAAI;EACF,IAAI;GACF,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH,SAAS,OAAO;GAKd,IACE,cAAc,WACd,SAAS,OAAO,WAChB,CAAC,8BAA8B,KAAK,GAEpC,MAAM;GAER,OAAO,MAAM,MAAM,MAAM,KAAK;IAC5B,GAAG,MAAM;IACT,QAAQ,SAAS;GACnB,CAAC;EACH;CACF,SAAS,OAAO;EACd,IAAI,cAAc,SAChB,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB;GACA,OAAO;EACT,CAAC;EAEH,IAAI,8BAA8B,KAAK,GACrC,MAAM,+BAA+B;GACnC,WAAW,MAAM;GACjB,KAAK,MAAM;GACX,OAAO;EACT,CAAC;EAEH,MAAM;CACR,UAAU;EACR,SAAS,QAAQ;CACnB;AACF;AAEA,SAAgB,6CAAqD;CACnE,OAAOC,6CAA8C;AACvD;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,MAAM,UAAU,KAC9D,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,+BAA+B,OAI9B;CACR,MAAM,QAAQ,IAAI,MAChB,GAAG,MAAM,UAAU,2BAA2B,sBAAsB,MAAM,GAAG,EAAE,IAAI,eAAe,MAAM,KAAK,EAAE,IAC/G,EAAE,OAAO,MAAM,MAAM,CACvB;CACA,MAAM,OAAO;CACb,OAAO;AACT;AAEA,SAAS,oBACP,QACA,SAC8C;CAC9C,IAAI,CAAC,QACH,OAAO;EACL,QAAQ;EACR,eAAe,KAAA;CACjB;CAGF,IAAI,OAAO,WAAW,QAAQ,SAAS;EACrC,MAAM,aAAa,IAAI,gBAAgB;EACvC,WAAW,MAAM;EACjB,OAAO;GACL,QAAQ,WAAW;GACnB,eAAe,KAAA;EACjB;CACF;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,cAAc;EAClB,WAAW,MAAM;CACnB;CAEA,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACtD,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CAEvD,OAAO;EACL,QAAQ,WAAW;EACnB,eAAe;GACb,OAAO,oBAAoB,SAAS,KAAK;GACzC,QAAQ,oBAAoB,SAAS,KAAK;EAC5C;CACF;AACF;AAEA,SAAS,sBAAsB,KAAqB;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,OAAwB;CAC9C,IAAI,iBAAiB,OAAO;EAC1B,MAAM,UAAU,MAAM,QAAQ,KAAK;EACnC,OAAO,QAAQ,SAAS,IAAI,UAAU;CACxC;CACA,MAAM,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CACzC,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,8BAA8B,OAAyB;CAC9D,IAAI,iBAAiB,WACnB,OAAO;CAET,IACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,OAAO,MAAM,SAAS,YACtB,MAAM,KAAK,WAAW,UAAU,GAEhC,OAAO;CAET,MAAM,UAAU,eAAe,KAAK,CAAC,CAAC,YAAY;CAClD,OACE,QAAQ,SAAS,cAAc,KAC/B,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,wBAAwB,KACzC,QAAQ,SAAS,yCAAyC;AAE9D;;;;ACxJA,SAAgB,6BACd,SACA,UAGI,CAAC,GACwB;CAC7B,OAAO,wBAAwB;EAC7B;EACA,WAAW,OAAO,YAChB,MAAM,6BAA6B;GACjC,KAAK,QAAQ;GACb,WAAW,QAAQ;GACnB,MAAM,QAAQ;GACd,WAAW,QAAQ;EACrB,CAAC;EACH,gBAAgB,OAAO,EAAE,iBAAiB;GACxC,MAAM,UAAU,MAAM,wBAAwB,EAC5C,WACF,CAAC;GACD,IAAI,QAAQ,gBACV,QAAQ,6CACN,QAAQ;GAEZ,QAAQ,wBAAwB,OAAO;GACvC,OAAO;EACT;EACA,0BAA0B,OAAO,EAAE,gBAAgB,oBACjD,mCAAmC;GACjC;GACA,GAAI,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc;EACzD,CAAC;CACL,CAAC;AACH"}

package/dist/{command-YqKBiXiz.js → command-CDkR9Ss2.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
 import { A as toSpaceCursorUrl, At as openMeldManagedBinaryPath, B as toSpaceUpdatesUrl, C as updateConfiguredSkillsConfig, Ct as deviceOpenClawProfileWorkspaceDir, Dt as normalizeOpenMeldProfileId, E as toDaemonRouteObservationUrl, Et as normalizeAccountKey, F as toSpaceMembersUrl, G as isOpenMeldOrphanedLockError, Gt as runtimeLogsDir, H as acquireLock, Ht as resolveOpenMeldPresetOwnedPathInput, I as toSpaceMetaUrl, Jt as systemDir, Kt as skillsDir, L as toSpacePasswordUrl, Mt as openMeldManagedVersionDir, Nt as openMeldRootDir, Ot as openMeldBackupsDir, P as toSpaceLeaveUrl, Pt as openMeldVersionsDir, Qt as runtimeAgentControllerLaunchContractSchema, R as toSpaceRemoveMembersUrl, Rt as resolveDefaultOpenMeldHomeDirname, St as deviceOpenClawProfileDir, T as normalizeBaseUrl, Tt as legacyAccountProfileSpacesDir, Ut as resolveOpenMeldRootDir, V as toSpaceWsUrl, Vt as resolveOpenMeldEnvPreset, W as isOpenMeldLockError, Wt as runtimeDir, X as resolveOpenMeldOrphanedLockIssue, Yt as formatLocalMachineIssueMessage, Z as runWithHeldLock, Zt as runtimeAgentControllerConversationIdMappingSpecSchema, _ as getRuntimeConfigReadHealth, _t as accountProfileSpaceCacheDir, a as resolveBaseUrl, an as resolveBuiltinAgentControllerConversationKind, at as writeCliContextState, b as setConfiguredSkillsConfig, bt as accountsDir, c as resolveExplicitGatewayUrlOrThrow, d as createDefaultRuntimeAgentControllerSettings, dn as canonicalizeBuiltinAgentControllerRef, dt as createBackgroundExecutionBlockedIssue, en as runtimeStreamingModeSchema, f as getConfiguredDaemonDispatchLimits, fn as normalizeBuiltinAgentControllerId, g as getConfiguredViewCustomization, gt as accountProfileLocalMetaPath, h as getConfiguredSkillsConfig, ht as OPENMELD_HOME_ENV_KEY, i as normalizeGatewayBaseUrlOrNull, in as conversationPolicySchema, it as resolveCliContextId, j as toSpaceDeleteUrl, jt as openMeldManagedVersionBinaryPath, k as toSpaceCreateUrl, kt as openMeldBinDir, l as DEFAULT_RUNTIME_AGENT_TRANSPORT_MODE, ln as buildAgentControllerRoutingKey, lt as assessLocalMachineFailure, mn as parseAgentControllerRef$1, nt as readCliContextState, o as resolveBaseUrlOrNull, on as HOSTED_CENTER_AGENT_CONTROLLER_REF, p as getConfiguredDeviceRuntimeState, pn as normalizeKnownBuiltinAgentControllerId, r as normalizeGatewayBaseUrl, rn as buildAgentControllerConversationRef, rt as resolveCliContext, s as resolveDefaultGatewayBaseUrl, sn as HOSTED_CENTER_AGENT_CONTROLLER_REF_ID, st as resolveOpenMeldLaneDescriptor, tn as runtimeTransportModeSchema, tt as listCliContextStates, un as canonicalizeAgentControllerRef, v as resolveRuntimeSkillsCustomTargetId, vt as accountProfileViewPath, wt as isPublishedOpenMeldHome, x as updateConfiguredDeviceRuntimeState, xt as deviceOpenClawProfileBootstrapPath, yt as accountProfileWorkspacePath, zt as resolveExplicitOpenMeldEnvPreset } from "./base-url-KfrIdedc.js";
-import { $ as OPENMELD_RUNTIME_CAPABILITIES_HEADER, A as parseEnvelope$1, At as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, B as toErrorMessage$40, Bt as archiveProjectResponseSchema, Ct as deleteCenterAgentRoutineResponseSchema, D as DAEMON_STREAM_KEEPALIVE_PING, Dt as resumeCenterAgentRoutineResponseSchema, E as toStructuredApiClientFailure, Et as pauseCenterAgentRoutineResponseSchema, Ft as agentActivitySnapshotResponseSchema, Gt as leaveSpaceResponseSchema, H as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Ht as listProjectsResponseSchema, I as OPENMELD_HEADER_REQUEST_ID, It as centerAgentToolSpeakerSchema, Jt as spaceMemberDirectoryEntrySchema, Kt as postSpaceMembersResponseSchema, Lt as localProjectControlConnectionSchema, M as parseServerErrorFrame$1, N as resolveCustomMentionAliasOverride, Ot as updateCenterAgentRoutineResponseSchema, P as OPENMELD_HEADER_PROFILE_ID, Q as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, R as toErrorMessage$41, Rt as localProjectControlDaemonFrameSchema, S as createSpaceApi, St as createCenterAgentRoutineResponseSchema, T as resolveProfileSpaceHistoryGatewayHost, Tt as listCenterAgentRoutinesResponseSchema, Ut as projectSchema, V as getSpaceUpdatesResponseSchema, Vt as createProjectResponseSchema, Wt as updateProjectResponseSchema, X as submitAgentControllerTaskLifecycleEventItemSchema, Xt as openCodePermissionConfigSchema, Yt as spaceMemberDirectorySchema, Z as gatewayErrorEnvelopeSchema, _t as authProfileManagedRoleSchema, a as buildSpaceAttachmentDownloadPath, an as toLegacySpaceAddressingWireValue, at as spaceCreatorSchema, bt as submitFeedbackIssueRequestSchema, c as createAgentProfileBindingApi, ct as listOrganizationSkillsResponseSchema, dt as organizationSkillSummarySchema, et as computerFileAccessDaemonFrameSchema, f as createFetchTransport, h as createOrganizationApi, ht as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, i as buildProfileSpaceHistoryUpsertPath, in as agentControllerCollaborationModeSchema, it as organizationSpaceDirectoryWithMemberCountsResponseSchema, j as parseIncoming$1, jt as agentActivityEventSchema, k as MAX_TEXT_LENGTH, m as createOpenMeldApiClient, mt as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE, n as OpenMeldApiClientInvalidResponseError, nt as computerFileAccessPolicySchema, o as createAccountSpaceIndexApi, ot as spaceMetaSchema, p as createLocalRuntimeExpectedRoutesApi, pt as organizationDirectoryResponseSchema, qt as removeSpaceMembersResponseSchema, r as buildProfileSpaceHistoryStatusPath, rn as agentControllerPermissionModeSchema, rt as modelCatalogSchema, s as createAgentActivityApi, st as getOrganizationSkillResponseSchema, t as OpenMeldApiClientHttpError, tt as computerFileAccessPolicyInputSchema, u as createCurrentDeviceApi, ut as organizationSkillReleaseSummarySchema, v as createProfileSpaceHistoryApi, vt as profileCapabilitiesResponseSchema, w as resolveAccountSpaceIndexGatewayHost, wt as listCenterAgentRoutineRunsResponseSchema, x as createRuntimeReportingApi, xt as submitFeedbackIssueResponseSchema, yt as profileErrorResponseSchema, z as sleep, zt as localProjectControlDiscoverProjectsResponseSchema } from "./dist-B9083HmF.js";
+import { $ as OPENMELD_RUNTIME_CAPABILITIES_HEADER, A as parseEnvelope$1, At as AGENT_ACTIVITY_PRESENCE_TTL_MAX_MS, B as toErrorMessage$40, Bt as archiveProjectResponseSchema, Ct as deleteCenterAgentRoutineResponseSchema, D as DAEMON_STREAM_KEEPALIVE_PING, Dt as resumeCenterAgentRoutineResponseSchema, E as toStructuredApiClientFailure, Et as pauseCenterAgentRoutineResponseSchema, Ft as agentActivitySnapshotResponseSchema, Gt as leaveSpaceResponseSchema, H as SPACE_DISPATCH_TRACE_PROMPT_PREVIEW_MAX_CHARS, Ht as listProjectsResponseSchema, I as OPENMELD_HEADER_REQUEST_ID, It as centerAgentToolSpeakerSchema, Jt as spaceMemberDirectoryEntrySchema, Kt as postSpaceMembersResponseSchema, Lt as localProjectControlConnectionSchema, M as parseServerErrorFrame$1, N as resolveCustomMentionAliasOverride, Ot as updateCenterAgentRoutineResponseSchema, P as OPENMELD_HEADER_PROFILE_ID, Q as COMPUTER_FILE_ACCESS_RUNTIME_CAPABILITY, R as toErrorMessage$41, Rt as localProjectControlDaemonFrameSchema, S as createSpaceApi, St as createCenterAgentRoutineResponseSchema, T as resolveProfileSpaceHistoryGatewayHost, Tt as listCenterAgentRoutinesResponseSchema, Ut as projectSchema, V as getSpaceUpdatesResponseSchema, Vt as createProjectResponseSchema, Wt as updateProjectResponseSchema, X as submitAgentControllerTaskLifecycleEventItemSchema, Xt as openCodePermissionConfigSchema, Yt as spaceMemberDirectorySchema, Z as gatewayErrorEnvelopeSchema, _t as authProfileManagedRoleSchema, a as buildSpaceAttachmentDownloadPath, an as toLegacySpaceAddressingWireValue, at as spaceCreatorSchema, bt as submitFeedbackIssueRequestSchema, c as createAgentProfileBindingApi, ct as listOrganizationSkillsResponseSchema, dt as organizationSkillSummarySchema, et as computerFileAccessDaemonFrameSchema, f as createFetchTransport, h as createOrganizationApi, ht as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_MESSAGE, i as buildProfileSpaceHistoryUpsertPath, in as agentControllerCollaborationModeSchema, it as organizationSpaceDirectoryWithMemberCountsResponseSchema, j as parseIncoming$1, jt as agentActivityEventSchema, k as MAX_TEXT_LENGTH, m as createOpenMeldApiClient, mt as ADDITIONAL_HUMAN_PROFILE_CREATION_DISABLED_CODE, n as OpenMeldApiClientInvalidResponseError, nt as computerFileAccessPolicySchema, o as createAccountSpaceIndexApi, ot as spaceMetaSchema, p as createLocalRuntimeExpectedRoutesApi, pt as organizationDirectoryResponseSchema, qt as removeSpaceMembersResponseSchema, r as buildProfileSpaceHistoryStatusPath, rn as agentControllerPermissionModeSchema, rt as modelCatalogSchema, s as createAgentActivityApi, st as getOrganizationSkillResponseSchema, t as OpenMeldApiClientHttpError, tt as computerFileAccessPolicyInputSchema, u as createCurrentDeviceApi, ut as organizationSkillReleaseSummarySchema, v as createProfileSpaceHistoryApi, vt as profileCapabilitiesResponseSchema, w as resolveAccountSpaceIndexGatewayHost, wt as listCenterAgentRoutineRunsResponseSchema, x as createRuntimeReportingApi, xt as submitFeedbackIssueResponseSchema, yt as profileErrorResponseSchema, z as sleep, zt as localProjectControlDiscoverProjectsResponseSchema } from "./dist-CbsUWTyE.js";
 import { A as runtimeTransportRouteCatalogChangedFramePayloadSchema, An as installedLocalComponentsSnapshotSchema, B as runtimeTransportSubmitTaskResultRequestSchema, C as runtimeTransportLocalAgentControlSetProfileWorkspaceFramePayloadSchema, Cn as agentInteractionRequestSchema, Cr as resolvePublicAgentAvailabilityCopy, D as runtimeTransportRejectedProfileRegistrationSchema, Dn as formatLocalComponentsSummaryLabel, Dt as SPACE_ATTACHMENT_MAX_SIZE_BYTES, E as runtimeTransportRegisterSessionResponseSchema, En as formatLocalComponentsSummaryDescription, Fn as localServiceComponentUpdateProjectionSchema, Gt as providerDispatchRuntimeContextSchema, H as openMeldDaemonTaskResultEnvelopeWriteSchema, Ht as openMeldDaemonControlPlaneResponseSchema, J as OPENMELD_LOCAL_FOLDER_PICKER_CAPABILITY_HEADER, K as openMeldSpaceEgressActionSchema, Kt as conversationExecutionStateSchema, Mt as spaceAttachmentFileNameSchema, O as runtimeTransportResumeControllerConversationFramePayloadSchema, On as formatLocalSetupActionDescription, Ot as detectSpaceAttachmentMimeType, S as runtimeTransportLocalAgentControlSetEnabledFramePayloadSchema, Sr as resolveMappedPublicAgentFailureReason, St as sanitizeSignalTextPreview, T as runtimeTransportRegisterSessionRequestSchema, Tr as shouldPreferMappedPublicAgentFailureReason, U as openMeldDaemonTaskResultOpenClawGatewayVisibilityStatusSchema, Un as runtimeCoordinatorExecutionTokenEnvelopeSchema, Vt as openMeldDaemonControlPlaneRequestSchema, W as openMeldDaemonTaskResultPayloadSchema, Wn as runtimeTransportDeliveryExecutionIdentitySchema, Wt as skippedDaemonProfileSchema, X as localFolderPickerHelperProtocolResultSchema, Xn as resolveSpaceMentionLabels, Y as localFolderPickerDaemonFrameSchema, Yn as resolveSingleSpaceMentionLabels, Z as localFolderPickerHelperResultSchema, _ as runtimeTransportHeartbeatResponseSchema, a as runtimeTransportCapabilitiesSchema, b as runtimeTransportLocalAgentControlManageInstallationFramePayloadSchema, br as MAX_TEXT_LENGTH$1, bt as SPACE_MENTION_REJECT_NOTICE_PURPOSE, c as runtimeTransportDispatchInteractionRequestSchema, cn as collectCanonicalMentionTextFragments, cr as agentProfileIdSchema, d as runtimeTransportDispatchPreviewEndRequestSchema, f as runtimeTransportDispatchPreviewRequestSchema, fn as normalizeMessageEnvelope, g as runtimeTransportHeartbeatRequestSchema, h as runtimeTransportErrorCodeSchema, i as localWakeRouteReportSchema, jn as localCliComponentUpdateProjectionSchema, k as runtimeTransportResumeControllerConversationResultFramePayloadSchema, kn as formatLocalSetupActionLabel, kr as resolveCommandAgentWorkActivity, kt as projectSpaceMessageAttachment, l as runtimeTransportDispatchInteractionResponseFramePayloadSchema, ln as formatCanonicalMentionLiteral, lr as normalizeOptionalWorkingDirectory, m as runtimeTransportDispatchToolActivityRequestSchema, mr as profileWorkspaceModeSchema, mt as CONVERSATION_CONTINUITY_WARNING_PURPOSE, n as daemonExecutionCompatibilitySchema, o as runtimeTransportDeliverDispatchRequestSchema, or as openMeldRequestContextSchema, p as runtimeTransportDispatchRuntimeEvidenceRequestSchema, pn as resolveMessageEnvelopeTargetField, q as LOCAL_FOLDER_PICKER_RUNTIME_CAPABILITY, qn as normalizeSpacePasswordText, r as daemonStreamFrameSchema, s as runtimeTransportDispatchInteractionDeliveredRequestSchema, sn as MESSAGE_MENTION_TYPE_VALUES, sr as MAX_PROFILE_WORKING_DIRECTORY_LENGTH, t as CURRENT_DAEMON_EXECUTION_CONTRACT_EPOCH, u as runtimeTransportDispatchLifecycleRequestSchema, un as getSpaceMessageAddressingRelationSupportForTargetKind, ur as openMeldRuntimeProfileIdSchema, v as runtimeTransportLocalAgentControlCancelFramePayloadSchema, vt as SPACE_MEMBER_JOIN_NOTICE_PURPOSE, w as runtimeTransportLookupRouteOwnerServiceEvidenceSchema, wn as agentInteractionResolutionSchema, wr as resolvePublicAgentFailureRecovery, x as runtimeTransportLocalAgentControlRefreshCatalogFramePayloadSchema, xn as AGENT_INTERACTION_DEFAULT_TIMEOUT_MS, xr as resolveDetailedPublicAgentFailureReason$1, y as runtimeTransportLocalAgentControlInterruptFramePayloadSchema, yr as trimmedStringFromUnknown, yt as SPACE_MEMBER_REMOVE_NOTICE_PURPOSE, zn as parseOptionalClientMessageId } from "./runtime-transport-CaAK1jo1.js";
 import { r as daemonServiceLaneSchema, t as daemonServiceContractSchema } from "./service-contract-DZWQdPz5.js";
 import { A as isDaemonServiceRuntimeHeartbeatStale, B as uninstallDaemon, C as daemonServiceStableExecutableWrapperPath, D as getDaemonRuntimeStatus, E as ensureDaemonControlPlaneToken, F as releaseDaemonServiceLifecycleLock, G as readDaemonLocalStateFile, H as withDaemonServiceRegistrationMutationLock, I as resolveDaemonControlPlaneEndpoint, K as writeDaemonLocalStateFile, L as resolveDaemonServiceRuntimeMetadata, M as readDaemonServiceLifecycleLockMeta, N as readDaemonServiceLifecycleLockMetaWithCleanup, O as getDaemonStatus, P as readDaemonServiceRuntimeSnapshot, R as restoreDaemonInstallStateSnapshot, S as daemonServiceRepairJournalPath, T as daemonStatePath, U as withDaemonServiceRunLock, V as withDaemonServiceReconcileLock, W as withDaemonServiceStopLock, _ as daemonRuntimeServiceManagerPath, a as DAEMON_SERVICE_RUNTIME_CONTROLLER_ENV, b as daemonServiceLegacyExecutableWrapperPath, c as DAEMON_SERVICE_RUNTIME_STATE_SCHEMA, d as clearDaemonServiceRuntimeState, f as daemonDispatchJournalPath, g as daemonRuntimeRootPath, h as daemonRuntimeDataPath, i as DAEMON_SERVICE_RUNTIME_AUTO_START_ENV, j as readDaemonControlPlaneToken, k as installDaemon, l as DAEMON_SERVICE_RUNTIME_SYSTEM_SERVICE_ENV, m as daemonRuntimeBundlesPath, n as writeDaemonRuntimeLease, o as DAEMON_SERVICE_RUNTIME_DETACHED_ENV, p as daemonLifecycleJournalPath, r as DAEMON_HEARTBEAT_STALE_MS, s as DAEMON_SERVICE_RUNTIME_MODE_ENV, t as readDaemonRuntimeLease, u as acquireDaemonServiceLifecycleLock, v as daemonRuntimeStateRootPath, w as daemonServiceStableLauncherPath, x as daemonServiceRecognizedExecutableWrapperPaths, y as daemonServiceActiveBundleStatePath, z as setDaemonServiceRuntimeState } from "./daemon-runtime-lease-7AQYjp3h.js";
 import { A as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_RETRY_INTERVAL_MS$1, D as REGISTER_RESPONSE_TIMEOUT_MS$1, E as PROVIDER_CONVERSATION_PROOF_SYNC_RETRY_INTERVAL_MS$1, S as MIN_HEARTBEAT_INTERVAL_MS$2, T as PROVIDER_CONVERSATION_PROOF_SYNC_INTERVAL_MS$1, _ as DEFAULT_HEARTBEAT_INTERVAL_MS$1, a as getAuthSessionState, b as MAX_HEARTBEAT_INTERVAL_MS$2, c as setAuthSession, d as CATALOG_SYNC_SIGNAL_POLL_INTERVAL_MS$1, f as DAEMON_RUNTIME_CONTRACT_EPOCH$1, g as DEFAULT_GATEWAY_CHAIN_TIMEOUT_MS$1, h as DAEMON_STREAM_KEEPALIVE_PONG_TIMEOUT_MS$1, j as RUNTIME_STATE_PERSIST_MIN_INTERVAL_MS$1, k as RUNTIME_AGENT_CONTROLLER_REPORT_SYNC_INTERVAL_MS$1, m as DAEMON_STREAM_KEEPALIVE_INTERVAL_MS$1, n as clearAuthSession, p as DAEMON_STREAM_CONNECT_TIMEOUT_MS$1, r as getAuthSession, u as CATALOG_SYNC_RETRY_INTERVAL_MS$1, w as OPENCLAW_CLI_TIMEOUT_MS$1, y as HEARTBEAT_RESPONSE_TIMEOUT_MS$1 } from "./auth-session-C7ZQlX6v.js";
-import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, f as buildOpenMeldRequestContextFromProfileIdentity, i as resolveSpaceRequestTimeoutMsForDiagnostics, l as canAttachAuthTokenToRequest, m as resolveAuthRequestCompatibility, n as createCliApiClientFoundation, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, r as fetchSpaceRequestWithTimeout, s as buildOpenMeldRequestContextHeadersWithAuth, u as resolveAuthTokenAttachment } from "./api-client-foundation-tG8UYUTY.js";
+import { a as buildOpenMeldProfileIdentityRequestHeadersWithAuth, c as buildRequestAuthHeaders, d as buildOpenMeldRequestContextFromProfile, f as buildOpenMeldRequestContextFromProfileIdentity, i as resolveSpaceRequestTimeoutMsForDiagnostics, l as canAttachAuthTokenToRequest, m as resolveAuthRequestCompatibility, n as createCliApiClientFoundation, o as buildOpenMeldProfileRequestHeadersWithAuth, p as deriveAuthBaseUrlFromGatewayUrl, r as fetchSpaceRequestWithTimeout, s as buildOpenMeldRequestContextHeadersWithAuth, u as resolveAuthTokenAttachment } from "./api-client-foundation-CrP6qikm.js";
 import { createRequire } from "node:module";
 import { homedir, tmpdir, userInfo } from "node:os";
 import { z } from "zod/v4";
@@ -34,7 +34,7 @@ import { Box, Container, Editor, Key, ProcessTerminal, TUI, Text, getEditorKeybi
 var package_default = {
 	$schema: "https://www.schemastore.org/package.json",
 	name: "openmeld",
-	version: "0.3.67",
+	version: "0.3.69",
 	openMeldReleaseDate: "2026-08-18",
 	description: "OpenMeld CLI - https://openmeld.ai",
 	license: "MIT",
@@ -10480,7 +10480,7 @@ async function readCurrentObservedDaemonRuntimeStatus() {
 }
 async function clearDaemonRuntimeStateIfDefinitelyStopped() {
 	const context = await readCurrentDaemonRuntimeContext();
-	if (context.effectiveRuntimeStatus !== "not_running") return {
+	if (!(context.effectiveRuntimeStatus === "not_running" || await isStoppedSystemServiceSnapshot(context))) return {
 		context,
 		cleared: false
 	};
@@ -10490,6 +10490,10 @@ async function clearDaemonRuntimeStateIfDefinitelyStopped() {
 		cleared: true
 	};
 }
+async function isStoppedSystemServiceSnapshot(context) {
+	if (context.runtimeStatus.status !== "stale" || !context.runtimeStatus.managedBySystemService || context.serviceManagerStatus?.running !== false) return false;
+	return (await listDaemonOwnedProcesses({ ignoreProcessIds: [process$1.pid, process$1.ppid] })).length === 0;
+}
 async function readCurrentDaemonRuntimeContext(input = {}) {
 	const status = input.status ?? await getDaemonStatus();
 	const runtimeStatus = await readCurrentObservedDaemonRuntimeStatus();
@@ -26603,9 +26607,11 @@ const isTaskResultStatusSuccessLike = (status) => status === "success" || status
 const resolveTaskResultDeliverySemantic = (input) => isTaskResultStatusSuccessLike(input.payloadStatus) ? SUCCESS_LIKE_TASK_RESULT_DELIVERY_SEMANTIC : FAILED_TASK_RESULT_DELIVERY_SEMANTIC;
 const WORKING_LANGUAGE_DEVELOPER_INSTRUCTIONS = `Working language:
 
-You decide the language for this response from the full current semantic context. This is an Agent judgment, not a text-classification rule.
-- An explicit language request from the current user wins.
-- When the current user-authored request is clearly in one language, answer in that language. In particular, answer a request written fully in English in English unless the user explicitly asks for another language.
+You decide the language for this response from full semantic context, not text classification.
+- The current user's explicit language request wins.
+- A complete, self-contained request clearly in one language controls that response only; answer a complete request written fully in English in English.
+- A single complete request in another language does not reset the conversation's established language. Change it only when the user explicitly asks to continue in that language or a sustained sequence of complete requests follows.
+- A short fragment, proper name, identifier, @handle, URL, number, or answer to your follow-up question inherits the established language because it continues the current task. Fangyuan, Yes, OK8, @handle, a URL, or a number never switches language by itself.
 - The current conversation, Slack thread or channel, Space, intended audience, and requested artifact language outweigh an Organization preference when they clearly use another language.
 - For a new Web conversation without connected work context, follow the current request and do not treat that one message as an Organization-wide change.
 - A Local Agent also considers its owner's established working habits and the current work environment. For agent-to-agent work, an Organization preference is only a fallback when the task and audience provide no stronger signal.
@@ -35418,9 +35424,9 @@ function createModelCatalogReadSession(input) {
 async function readModelCatalogOnce(baseUrl) {
 	try {
 		const [apiClient, baseUrlModule, clientFoundationModule] = await Promise.all([
-			import("./dist-B9083HmF.js").then((n) => n.C),
+			import("./dist-CbsUWTyE.js").then((n) => n.C),
 			import("./base-url-KfrIdedc.js").then((n) => n.n),
-			import("./api-client-foundation-tG8UYUTY.js").then((n) => n.t)
+			import("./api-client-foundation-CrP6qikm.js").then((n) => n.t)
 		]);
 		if (typeof apiClient.createConfigApi !== "function") throw new Error("config api client is unavailable");
 		const resolvedBaseUrl = baseUrl ?? await baseUrlModule.resolveBaseUrl();
@@ -40572,6 +40578,13 @@ const VERIFIED_ROLLBACK_UNTRUSTED_ANOMALIES = /* @__PURE__ */ new Set([
 	"runtime_bundle_mismatch",
 	"service_manager_path_drift"
 ]);
+const STOPPED_LIFECYCLE_RUNTIME_SNAPSHOT_ANOMALIES = /* @__PURE__ */ new Set([
+	"runtime_stale",
+	"runtime_bundle_mismatch",
+	"runtime_contract_missing",
+	"runtime_contract_mismatch",
+	"runtime_contract_unavailable"
+]);
 var DaemonServiceLifecycleDrainTimeoutError = class extends Error {
 	waitMs;
 	constructor(waitMs) {
@@ -41648,12 +41661,19 @@ function verifyLifecycleInventoryStaticRequirements(input) {
 }
 function verifyLifecycleInventoryDecision(input) {
 	const decision = resolveDaemonServiceAlignmentDecision({
-		inventory: input.inventory,
+		inventory: buildLifecycleAlignmentInventory(input),
 		target: input.target
 	});
 	if (decision.status === "already_aligned") return null;
 	return `Lifecycle verification failed because the service is still ${decision.status}. reasons=${decision.reasonCodes.join(",") || "none"}`;
 }
+function buildLifecycleAlignmentInventory(input) {
+	if (input.shouldStartAfterLifecycle || input.inventory.serviceManagerStatus?.running !== false || input.inventory.ownedProcesses.length > 0) return input.inventory;
+	return {
+		...input.inventory,
+		anomalies: input.inventory.anomalies.filter((anomaly) => !STOPPED_LIFECYCLE_RUNTIME_SNAPSHOT_ANOMALIES.has(anomaly.code))
+	};
+}
 function verifyLifecycleInventoryContractState(input) {
 	const contract = input.inventory.serviceContract ?? null;
 	if (!contract) return "Lifecycle verification failed because the service contract is missing.";
@@ -73616,6 +73636,7 @@ function createDaemonReinstallStoppedSafeOutcome(input) {
 		...input.evidencePath ? { evidencePath: input.evidencePath } : {},
 		...input.failureStage ? { failureStage: input.failureStage } : {},
 		forceUsed: input.forceUsed,
+		reasonCodes: input.reasonCodes,
 		serviceState: "stopped",
 		errorMessage: input.errorMessage
 	};
@@ -73922,7 +73943,12 @@ function emitDaemonInstallDowngradeBlocked(input) {
 function summarizeDaemonReinstallJournalResult(outcome) {
 	return {
 		result: outcome.ok ? outcome.result : outcome.result,
-		metadata: { ok: outcome.ok }
+		metadata: {
+			ok: outcome.ok,
+			..."failureStage" in outcome && outcome.failureStage ? { failureStage: outcome.failureStage } : {},
+			..."errorMessage" in outcome ? { errorMessage: outcome.errorMessage } : {},
+			..."reasonCodes" in outcome && outcome.reasonCodes.length > 0 ? { reasonCodes: outcome.reasonCodes } : {}
+		}
 	};
 }
 function buildDaemonReinstallUnexpectedStartSummary(error, action = "repair") {
@@ -75147,7 +75173,8 @@ async function performDaemonReinstall(input) {
 			evidencePath: lifecycleResult.evidencePath,
 			failureStage: lifecycleResult.failureStage,
 			forceUsed,
-			errorMessage: lifecycleResult.errorMessage
+			errorMessage: lifecycleResult.errorMessage,
+			reasonCodes: lifecycleResult.reasonCodes
 		});
 		await applyDaemonReinstallTargetDesiredState({
 			runtime: input.runtime,
@@ -104513,4 +104540,4 @@ function isHumanInteractiveSpaceRuntime(runtime) {
 //#endregion
 export { formatTransportModeDisplay as $, formatOpenMeldCliTextBlock as $a, compareSemver as $i, canUseInteractivePrompts as $n, normalizeCustomProfileWorkspacePath as $r, readRecentDaemonDispatchJournalEvents as $t, prepareAuthenticatedSpaceCommandContext as A, buildHumanAuthenticationCard as Aa, listAgentControllerPermissionModeOptions as Ai, assertNoRemovedCcSpaceAddressingSyntax as An, emitCliJsonEnvelope as Ao, formatDualViewGuideForDisplay as Ar, readDaemonStartFailureLogTailLines as At, runAgents as B, registerAgentActivityRoute as Ba, resetCurrentCommandCheckState as Bi, promptSearchSelect as Bn, organizationJoinLinkErrorResponseSchema as Bo, resolveServiceReadinessFromServiceStatus as Br, writeInstalledLocalComponentsSnapshot as Bt, buildFormalSignalReadPayload as C, resolveOpenMeldProfile as Ca, ensureDaemonRuntimePaths as Ci, submitRuntimeAgentControllerReports as Cn, unbindProject as Co, registerSkillsTargetSelectionOptions as Cr, buildProfileWorkspacePresentation as Ct, isSpaceCommandOutputHandledError as D, getSelectedOpenMeldProfileId as Da, createAgentExecutionStatusDisplayRows as Di, resolveLocalAgentControllerReportDecision as Dn, renderInfoCard as Do, registerBuiltinAgentSelectionOptions as Dr, createDelayedSpinner as Dt, parseEnvelope as E, clearSelectedOpenMeldProfileId as Ea, buildAgentControllerRef as Ei, resolveLocalAgentControllerLaunchability as En, readControllerTaskLifecycleOutboxHealth as Eo, registerAuthLoginRequestOptions as Er, emitDaemonAgentOverview as Et, prepareLocalAgentReadiness as F, getProfileDefaultView as Fa, resolveEvidenceSyncHealth as Fi, buildSpaceRoundReadProjection as Fn, cliJsonOutputEnvelopeSchema as Fo, areAllowedActionsEquivalent as Fr, readGatewayJsonResponse as Ft, runAgentsCustomUpdate as G, installAgentActivityIntegrations as Ga, readCurrentObservedDaemonRuntimeStatus as Gi, assertDispatchOwnedRuntimePublicWriteAllowed as Gn, formatHumanReplyReadinessReason as Gr, runSkillsCheck as Gt, runAgentsCustomAdd as H, unregisterAgentActivityRoute as Ha, inspectDaemonServiceInventory as Hi, runInteractivePrompt as Hn, compareAgentControllerRefsForDisplay as Ho, resolveCurrentReplyReadinessSnapshot as Hr, runDaemonServiceParticipationGate as Ht, buildReplyReadinessGuidance as I, setProfileDefaultView as Ia, resolveNativeAgentControllerPermissionModeForController as Ii, buildUpdatesReplyWorkflowProjection as In, cliJsonSkillsListEnvelopeSchema as Io, buildAgentFacingPublicationModeGuideLines as Ir, readGatewayTextResponse as It, runAgentsEnable as J, uninstallAgentActivityIntegrations as Ja, readDaemonServiceJobCrashExitCode as Ji, writeDispatchSpaceActionRecord as Jn, resolveOpenClawLocalDiagnosticsValue as Jr, runSkillsUninstall as Jt, runAgentsDetect as K, readAgentActivityIntegrationStatus as Ka, getDaemonSystemServiceLogPath as Ki, readDispatchOwnedRuntimeGuard as Kn, mapAgentReplyReadinessToLegacyAutoReply as Kr, runSkillsEnsure as Kt, resolveHumanControllerDisplayName as L, LocalProjectConnectionError as La, finishCurrentCommandCheckScope as Li, createSpaceMemberIdentityIndex as Ln, cliJsonSkillsLoadEnvelopeSchema as Lo, canonicalizeAllowedActions as Lr, toStructuredGatewayFailure as Lt, resolveSpaceAccessLabel as M, resolveAuthenticationGuidance as Ma, resolveAgentControllerPermissionModeForController as Mi, buildDispatchResultReplyWorkflowProjection as Mn, outJsonLine as Mo, formatAgentOverviewPayload as Mr, createCliSpaceApi as Mt, emitSpaceAgentOverview as N, resolveAuthenticationGuidanceFromError as Na, resolveAgentExecutionStatus as Ni, buildSignalIndex as Nn, outLine as No, OPENMELD_AGENT_MENTAL_MODEL_LINES as Nr, fetchSpaceMeta as Nt, assertFullSignalIdArgument as O, setSelectedOpenMeldProfileId as Oa, getAgentControllerPermissionModeDisplayMetadata as Oi, inspectSpaceCacheFile as On, renderTextInfoCard as Oo, buildAgentOverviewFromContract as Or, shouldEmitAgentOverview as Ot, emitSpaceCliAgentOverview as P, resolveAuthenticationGuidanceFromMessage as Pa, resolveAgentProfileEditCapabilities as Pi, buildSignalMessageReadProjection as Pn, cliBinaryDeltaPatchSchema as Po, SPACE_CONTRACT_ALLOWED_ACTION_ORDER as Pr, updateSpaceMeta as Pt, runAgentsShow as Q, formatOpenMeldCliLine as Qa, buildNextVersionState as Qi, formatDaemonServiceMissingRecommendation as Qn, ensureOpenMeldManagedProfileWorkspace as Qr, readRuntimeReportingHealthState as Qt, persistAgentTransportSelection as R, validateLocalProjectConnectionPath as Ra, getCurrentCommandCheckState as Ri, formatRemovedCcRelationMessage as Rn, cliJsonSkillsShowEnvelopeSchema as Ro, runDaemonServiceFullAlignment as Rr, parseJsonResponse$1 as Rt, buildFormalDispatchResultReadPayload as S, primeOpenMeldProfilesSessionCache as Sa, readRecentDaemonLifecycleEvents as Si, submitRuntimeAgentControllerReport as Sn, setDefaultProjectConnection as So, SPACE_ADD_MEMBERS_PROGRESS_HEARTBEAT_MS as Sr, runDaemonUninstall as St, formatHumanReadTargetList as T, alignSelectedOpenMeldProfileStorage as Ta, resolveOpenMeldEnvironmentTarget as Ti, resolveLocalAgentControllerBlockerReasonCodes as Tn, enqueueControllerTaskLifecycleEventWhileLocked as To, registerDaemonControlTargetOptions as Tr, reconcileCliVersionView as Tt, runAgentsCustomList as U, AGENT_ACTIVITY_INTEGRATION_OWNER as Ua, resolveVersionChangeDirection as Ui, assessCliUpdate as Un, package_default as Uo, formatAgentReplyReadinessLabel as Ur, runDaemonStartDecisionPrompt as Ut, runAgentsConfig as V, resolveAgentActivityRouteForPath as Va, startCurrentCommandCheckScope as Vi, isReturnKeypress as Vn, revokeOrganizationJoinLinkResponseSchema as Vo, resolveDaemonServiceFreshnessWarning as Vr, resolveDaemonServiceParticipationStatus as Vt, runAgentsCustomRemove as W, defaultManagedIntegrationPaths as Wa, readCurrentDaemonRuntimeContext as Wi, isCliUpdateCheckApplicable as Wn, formatDeviceReplyReadinessLabel as Wr, collectSkillsReadinessSnapshot as Wt, runAgentsManage as X, formatOpenMeldCliCommand as Xa, buildInstallSelfJsonPayload as Xi, resolveElapsedTimeMs as Xn, createModelCatalogReadSession as Xr, ensureLocalSkills as Xt, runAgentsList as Y, formatInlineOpenMeldCliCommands as Ya, resolveDaemonServiceManager as Yi, formatElapsedTime as Yn, syncProfileWorkspaceState as Yr, runSkillsUpdate as Yt, runAgentsRepair as Z, formatOpenMeldCliCommands as Za, performManagedInstall as Zi, formatDaemonServiceDowngradeBlockedRecommendation as Zn, resolveProfileWorkspaceRuntime as Zr, readBundledOpenMeldCliSkillDocumentByPath as Zt, emitHumanReadSignalsTextProjection as _, resolveOpenMeldProfileOrNull as _a, getSetupFlowCopy as _i, formatServiceParticipationReadinessLabel as _n, listProjectBindings as _o, createStartAuthenticationGuideError as _r, runDaemonRunAfterEntryChecks as _t, runSpaceDelete as a, isBinaryDistribution as aa, describeProfileWorkspacePathValidationFailure as ai, runAuthLogin as an, upsertDaemonServiceContract as ao, createSpaceAddMembersGuideError as ar, renderOpenMeldHeader as at, loadSpaceSignalIndexOrNull as b, deleteOpenMeldProfile as ba, classifyDaemonServiceRunStartability as bi, computeRetryDelayMs as bn, removeProjectConnection as bo, getCommandHintsFromContract as br, runDaemonStop as bt, runSpaceLeave as c, toStartBackgroundHelperExecutionCompatibility as ca, resolveAgentProfilePrimaryAgentControllerReport as ci, runAuthStatus as cn, buildAgentActivityEvent as co, createSpaceLeaveGuideError as cr, resolveGatewayWebOrigin as ct, runSpaceRemoveMembers as d, formatMessage as da, listBuiltinAgentsRegistryEntries as di, formatActiveOrganizationLabel as dn, readCodexSessionTitles as do, createSpaceRemoveMembersGuideError as dr, runDaemonAutostart as dt, ensureVersionStateReady as ea, readProfileWorkspaceConfig as ei, connectWebSocket as en, formatProfileAwareOpenMeldCliCommands as eo, createDoctorFailedGuideError as er, postLocalParticipationMutationReconcile as et, runSpaceSend as f, parseCliViewMode as fa, notifyDaemonRouteCatalogChanged as fi, createProfileByKind as fn, enqueueAgentActivityHookEvent as fo, createSpaceResultGuideError as fr, runDaemonBackgroundStartForDecision as ft, buildHumanReadSignalsTranscriptItems as g, requireOpenMeldProfile as ga, buildOnboardingPlan as gi, ensureAgentProfileRuntimeBinding as gn, bindProject as go, createStartAgentIdentityGuideError as gr, runDaemonReinstall as gt, runSpaceWriteWithPasswordRetry as h, isSelectedOpenMeldProfileRequiredError as ha, buildDaemonRouteObservationPresentation as hi, promptTextEntry as hn, removeProjectOutbox as ho, createSpaceUpdatesGuideError as hr, runDaemonInterrupt as ht, runSpaceCreate as i, writeVersionState as ia, validateCustomProfileWorkspacePath as ii, evaluateCommandAuthentication as in, readDaemonServiceContract as io, createResetConfirmationGuideError as ir, renderOpenMeldBrandBlockLines as it, resolveOpenMeldProfileForSpaceCommand as j, createAuthenticationError as ja, parseAgentControllerRef as ji, buildDispatchResultMessageReadProjection as jn, errLine as jo, buildDualViewGuideMessage as jr, fetchSpaceUpdates as jt, assertValidSpaceIdTarget as k, buildAgentAuthenticationGuide as ka, getAgentControllerPermissionModeFieldLabel as ki, upsertSpaceConfig as kn, sanitizeTerminalDisplayText as ko, DualViewGuideError as kr, runDaemonStartupPreflight as kt, runSpaceList as l, resolveCurrentDaemonExpectedVersion as la, listAgentTargetStates as li, buildAuthStatusRows as ln, resolveObservedAgentActivityBinding as lo, createSpaceMenuGuideError as lr, resolveSpaceSendText as lt, runSpaceReadWithPasswordRetry as m, resolveViewProfileKey as ma, PREPARE_SESSION_RECONNECT_GRACE_MS as mi, resolveCreateProfileName as mn, readAgentActivityOutboxHealth as mo, createSpaceTargetGuideError as mr, runDaemonInstall as mt, promptAndConfirmSpacePassword as n, fetchLatestPackageInfo as na, setCustomProfileWorkspace as ni, buildCommandAuthenticationPromptMessage as nn, resolveUserFacingCliEntryCommand as no, createProfileCreateGuideError as nr, colorizeDisplayProfileLabel as nt, runSpaceHistory as o, resolveOpenMeldDistribution as oa, syncDeviceRuntimeStateProjection as oi, runAuthLogout as on, readAgentActivityContextForPath as oo, createSpaceAliasTargetGuideError as or, renderOpenMeldLogo as ot, runSpaceWatch as p, resolveRuntimeContext as pa, resolveLocalRegistryAgentIdFromAgentControllerRef as pi, resolveCreateProfileKind as pn, removeProjectInbox as po, createSpaceSubcommandTargetGuideError as pr, runDaemonCancel as pt, runAgentsDisable as q, resolveAgentActivityDispatcherCommand as qa, isDaemonServiceJobNeverSpawned as qi, readDispatchSpaceActionContextFromEnv as qn, resolveGatewayChainReadiness as qr, runSkillsInstall as qt, runSpaceAddMembers as r, readVersionState as ra, setOpenMeldManagedProfileWorkspace as ri, ensureCommandAuthenticationOrCancel as rn, syncLocalAgentActivity as ro, createProfileMenuGuideError as rr, printOpenMeldBanner as rt, runSpaceJoin as s, resolveDaemonRuntimeContractCompatibility as sa, createPrimaryBindingReadSession as si, runAuthMenu as sn, removeAgentActivityContextCache as so, createSpaceContractSetGuideError as sr, renderOpenMeldTagline as st, buildCreateSpacePasswordPromptConfig as t, fetchLatestCliBinaryRelease as ta, resolveConfiguredProfileWorkspacePath as ti, assessServerRequiredVersion as tn, resolveSetupFollowUpCliEntryCommand as to, createProfileActionGuideError as tr, colorizeAgentLabel as tt, runSpacePassword as u, createPresenter as ua, reconcileNewRunnableBuiltinAgentsForSetup as ui, buildAuthStatusSnapshot as un, normalizeSharedSessionTitle as uo, createSpacePublicationSetGuideError as ur, runDaemon as ut, buildIdentityOnlyMembersSnapshotForReadProjection as v, createOpenMeldAgentProfile as va, buildDaemonServiceTargetSpec as vi, resolveServiceParticipationReadiness as vn, listProjectConnectionsWithStatus as vo, createUpgradeConfirmationGuideError as vr, runDaemonSnapshot as vt, buildHumanReplyContextSummary as w, updateOpenMeldProfile as wa, resolveDaemonDeviceId as wi, collectLocalAgentControllerInventory as wn, canonicalizeLocalProjectPath as wo, getCliVersionInfo as wr, buildProfileWorkspaceRows as wt, toSpaceMetaUpsertInput as x, listOpenMeldProfiles as xa, classifyDaemonServiceWakeability as xi, submitProfileRuntimeAgentControllerReport as xn, runIfAgentActivityBindingGenerationIsCurrent as xo, registerSpaceMemberSelectionOptions as xr, runDaemonTeardownStrict as xt, loadSpaceIdentityDirectoryOrNull as y, createOpenMeldHumanProfile as ya, resolveDaemonServiceAlignmentDecision as yi, assessActionParticipationCandidate as yn, migrateProjectBindingStore as yo, getCommandEntryContract as yr, runDaemonStatusFlow as yt, resolveAgentProfileSetup as z, isAgentActivityRouteRegistered as za, isCurrentCommandCheckScopeActive as zi, promptSearchMultiselect as zn, getOrganizationJoinLinkResponseSchema as zo, formatDaemonFailureContextText as zr, resolveLocalComponentsStatus as zt };
 
-//# sourceMappingURL=command-YqKBiXiz.js.map
+//# sourceMappingURL=command-CDkR9Ss2.js.map