Function process_message_with_capability 

pub async fn process_message_with_capability(
    config: Config,
    agent_alias: &str,
    message: &str,
    session_id: Option<&str>,
    origin: TurnOrigin,
    execution_capability: Option<AgentExecutionCapability>,
) -> Result<String, Error>

Process a message after admitting its target through the daemon-owned authority. The plain process-message path remains for callers without managed lifecycle state.