dorkos 0.122.0 → 0.123.0

package/dist/bin/cli.js

@@ -22178,15 +22178,26 @@ var init_runtime_settings = __esm({
        * agent is the same executable with the same permissions and the same
        * per-dispatch boundary check, held open for longer — nothing about what
        * it may DO changes. The real cost is memory, and the bounds on it live
-       * in code rather than under this setting: at most twelve stay warm, about
-       * 1 GB each worst case, and the idle reaper closes the rest.
+       * in `maxWarmProcesses` below, and the idle
+       * reaper closes the rest.
        *
        * Read when a chat's agent starts, so a chat already under way keeps
        * the way it started until its process is replaced. That is what lets
        * one machine run chats both ways at the same time and compare them on
        * the same work (spec `persistent-session-runtime` §P3).
        */
-      persistentSession: external_exports.boolean().default(true)
+      persistentSession: external_exports.boolean().default(true),
+      /**
+       * The most chats whose agent may be running at once on this machine
+       * (DOR-3012). `null`, the default, sizes it to the machine's memory: one per
+       * 2 GB, at least 12 and at most 32. A number pins it.
+       *
+       * A chat past the limit is never refused outright: the least recently used
+       * idle agent is closed to make room, and when every one is mid-turn the chat
+       * waits for one to finish. Read when an agent starts, so a change applies to
+       * the next one.
+       */
+      maxWarmProcesses: external_exports.number().int().min(1).max(128).nullable().default(null)
     });
     DoeInferenceConfigSchema = external_exports.object({
       source: external_exports.enum(["api-key", "local", "dorkos-credits"]),
@@ -22284,7 +22295,8 @@ var init_runtime_settings = __esm({
         // carry this value — the per-field one on `ClaudeCodeSettingsSchema`,
         // this one, and the `runtimes` literal below — and all three have to
         // agree or the shallow defaults-merge lands somebody on the old value.
-        persistentSession: true
+        persistentSession: true,
+        maxWarmProcesses: null
       })),
       doe: DoeRuntimeSettingsSchema,
       opencode: external_exports.object({
@@ -22377,7 +22389,8 @@ var init_runtime_settings = __esm({
         defaultModel: null,
         defaultEffort: null,
         defaultTrustStop: null,
-        persistentSession: true
+        persistentSession: true,
+        maxWarmProcesses: null
       },
       opencode: {
         enabled: true,
@@ -26760,7 +26773,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.122.0";
+  if (true) return "0.123.0";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -40752,6 +40765,12 @@ function seedLanAccess(store) {
   if ("lanAccess" in server2) return;
   store.set("server", { ...server2, lanAccess: false });
 }
+function seedMaxWarmProcesses(store) {
+  const claudeCode = store.get("runtimes.claudeCode");
+  if (claudeCode === null || typeof claudeCode !== "object" || Array.isArray(claudeCode)) return;
+  if ("maxWarmProcesses" in claudeCode) return;
+  store.set("runtimes.claudeCode", { ...claudeCode, maxWarmProcesses: null });
+}
 function raiseEngagedWindowDefaults(store) {
   if (store.get("rooms") === void 0) return;
   const minutes = store.get("rooms.engagedWindowMinutes");
@@ -41450,7 +41469,14 @@ var init_config_migrations = __esm({
             enabled: sessionRelay.enabled === true
           });
         }
-      }
+      },
+      // v0.122.0 is the newest release, so this opens 0.123.0. Frozen from merge;
+      // anything further opens `'0.124.0'`.
+      //
+      // Writes `runtimes.claudeCode.maxWarmProcesses: null` where the stored
+      // section lacks it, and touches nothing else (DOR-3012). See
+      // `seedMaxWarmProcesses`.
+      "0.123.0": seedMaxWarmProcesses
     };
   }
 });
@@ -41549,6 +41575,7 @@ __export(config_manager_exports, {
   seedIdentityPromptDismissedDefault: () => seedIdentityPromptDismissedDefault,
   seedLanAccess: () => seedLanAccess,
   seedMaxConcurrentTurnsPerAgent: () => seedMaxConcurrentTurnsPerAgent,
+  seedMaxWarmProcesses: () => seedMaxWarmProcesses,
   seedMemoryProviderDefault: () => seedMemoryProviderDefault,
   seedPermissionPresetFromDoor: () => seedPermissionPresetFromDoor,
   seedRoomCanvasOps: () => seedRoomCanvasOps,
@@ -49413,6 +49440,7 @@ function parseSkillFile(filePath, content, schema3, options) {
 }
 var init_parser = __esm({
   "../skills/src/parser.ts"() {
+    "use strict";
     init_constants7();
     init_frontmatter();
   }
@@ -52386,6 +52414,7 @@ function foldLegacyPermissionFields(raw) {
 var AgentRuntimeSchema, AgentHealthStatusSchema, ResponseModeSchema, AgentBehaviorSchema, McpServerAuthKindSchema, McpServerTransportSchema, ManagedMcpServerSchema, McpServerAuthStatusSchema, McpClientOriginSchema, ManagedMcpServerViewSchema, TraitsSchema, ConventionsSchema, AgentModelSchema, AgentEffortSchema, AgentWorkspaceBindingSchema, WORKSPACE_BINDING_OPENAPI, UNREADABLE_BINDING_FALLBACK, AgentManifestSchema2, LEGACY_GROUP_AREAS, AgentManifestFileSchema, AgentPathEntrySchema, AgentHintsSchema, DiscoveryCandidateSchema, DenialRecordSchema, AGENT_PAUSED_CODE, AGENT_PAUSE_REASON_MAX, AgentPauseSchema, AgentPauseListSchema, AgentPauseRequestSchema, AgentPauseResultSchema, TopologyAgentSchema, NamespaceInfoSchema, OPEN_MESH_NAMESPACE, CrossNamespaceRuleSchema, TopologyViewSchema, DiscoverRequestSchema, RegisterAgentRequestSchema, DenyRequestSchema, UpdateAgentRequestSchema, UpdateAgentConventionsSchema, WILDCARD_NAMESPACE_BOTH_SIDES_MESSAGE, UpdateAccessRuleRequestSchema, ResolveAgentsRequestSchema, ResolveAgentsResponseSchema, CreateAgentOptionsSchema, CreateAgentRequestSchema, AgentListQuerySchema, AgentHealthSchema, MeshStatusSchema, MeshInspectSchema, MeshLifecycleEventSchema, HeartbeatRequestSchema, ScanProgressSchema;
 var init_mesh_schemas = __esm({
   "../shared/src/mesh-schemas.ts"() {
+    "use strict";
     init_zod();
     init_zod_openapi();
     init_validation();
@@ -53006,6 +53035,7 @@ var init_direct_notes_context = __esm({
 var GitStatusDataSchema, EnvDataSchema, RelayContextDataSchema, RoomContextOriginSchema, RoomContextAuthorSchema, RoomContextMemberSchema, RoomContextEntrySchema, RoomContextAcknowledgmentSchema, MainMovedSchema, WorktreeRefreshOutcomeSchema, RoomContextFilesSchema, RoomContextDataSchema, SeedContextDataSchema, StagedContextDataSchema, AccountsAccessDataSchema, ContextWarningDataSchema, ApprovalVerdictDataSchema, AdditionalContextEntrySchema, AdditionalContextSchema, ClientContextSchema;
 var init_additional_context = __esm({
   "../shared/src/additional-context.ts"() {
+    "use strict";
     init_zod();
     init_canvas_channel_schemas();
     init_mesh_schemas();
@@ -54085,6 +54115,7 @@ function isSafeSigninUrl(value) {
 var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, TrackerItemRefSchema, SessionStartedBySchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedWaitingOnSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, agentCompactionShape, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, ModelSubstitutedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, ModelSubstitutedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, HistoryReadSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, LanAccessStatusSchema, RemoteAccessStateSchema, RemoteAccessAvailabilitySchema, RemoteAccessEnrolmentSchema, RemoteAccessReportSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema2, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema, KeepAwakeUnsupportedReasonSchema, KeepAwakeStatusSchema;
 var init_schemas4 = __esm({
   "../shared/src/schemas.ts"() {
+    "use strict";
     init_canvas_channel_schemas();
     init_zod();
     init_zod_openapi();
@@ -123821,6 +123852,11 @@ var init_auth = __esm({
         updatedAt: integer2("updated_at", { mode: "timestamp_ms" }).$onUpdate(() => /* @__PURE__ */ new Date()).notNull(),
         ipAddress: text("ip_address"),
         userAgent: text("user_agent"),
+        // The way the sign-in that made this session came in: 'local', 'wifi',
+        // 'tunnel', 'managed', 'network' or 'hub'. A session works only on that
+        // route (DOR-2969). Null for a session made before it was recorded, which
+        // works only on this computer.
+        route: text("route"),
         userId: text("user_id").notNull().references(() => user.id, { onDelete: "cascade" }),
         // A sign-in on a shared or public computer (A4, DOR-2936): the cookie ends
         // with the browser, the session cannot outlive a working day, and the app
@@ -126245,7 +126281,8 @@ var init_notifications = __esm({
             "community.owner-replacement",
             "heartbeat.credits-offer",
             "connector.destructive_pending",
-            "connector.destructive_executed"
+            "connector.destructive_executed",
+            "web.new_device"
           ]
         }).notNull(),
         /** How loud this was allowed to be. Copied from the registry at write time. */
@@ -128912,6 +128949,18 @@ var init_setup_code_gate = __esm({
   }
 });
 
+// ../../apps/server/src/services/core/auth/sessions/session-route.ts
+var WIFI_SESSION_MAX_SECONDS;
+var init_session_route = __esm({
+  "../../apps/server/src/services/core/auth/sessions/session-route.ts"() {
+    "use strict";
+    init_request_classifier();
+    init_server_role();
+    init_registration_policy();
+    WIFI_SESSION_MAX_SECONDS = 7 * 24 * 60 * 60;
+  }
+});
+
 // ../../apps/server/src/services/core/auth/cookie-security.ts
 var AUTH_COOKIES_SECURE;
 var init_cookie_security = __esm({
@@ -128923,7 +128972,7 @@ var init_cookie_security = __esm({
 });
 
 // ../shared/src/session-relay.ts
-var SESSION_RELAY_MAX_FRAME_LENGTH, SESSION_RELAY_MAX_MESSAGE_LENGTH, SESSION_RELAY_MAX_CHATS, SESSION_RELAY_IDLE_CLOSE_MS, VersionSchema, RelayVersionRangeSchema, AdvertisedFeaturesSchema, RequestIdSchema, StreamIdSchema, SessionIdSchema, AgentIdSchema, ToolCallIdSchema, ResumeCursorSchema, base64url3, ChatsListRequestSchema, SessionStreamRequestSchema, SessionSendRequestSchema, SessionInterruptRequestSchema, ApprovalDecisionSchema, InteractionChallengeRequestSchema, RelayApprovalProofSchema, InteractionAnswerSchema, InteractionRespondRequestSchema, RelayRequestSchema, RelayChatSummarySchema, RelayResultBodySchemas, RelayErrorSchema, exactBase64url, RelayEphemeralKeySchema, RelaySignatureSchema, RelayNonceSchema, RelayPinnedHubKeySchema, RelayHelloFrameSchema, RelayHandshakeAnswerSchema, RelaySealedFrameSchema, HeartbeatFrameSchema, RelayWebFrameSchema, RelayStreamFrameSchema, RelayComputerFrameSchema, RelayFinishFrameSchema;
+var SESSION_RELAY_MAX_FRAME_LENGTH, SESSION_RELAY_MAX_MESSAGE_LENGTH, SESSION_RELAY_MAX_CHATS, SESSION_RELAY_IDLE_CLOSE_MS, VersionSchema, RelayVersionRangeSchema, AdvertisedFeaturesSchema, RequestIdSchema, StreamIdSchema, SessionIdSchema, AgentIdSchema, ToolCallIdSchema, ResumeCursorSchema, NO_CONTROL, INVISIBLE, RelayDisplayNameSchema, RelayDeviceSchema, base64url3, ChatsListRequestSchema, SessionStreamRequestSchema, SessionSendRequestSchema, SessionInterruptRequestSchema, ApprovalDecisionSchema, InteractionChallengeRequestSchema, RelayApprovalProofSchema, InteractionAnswerSchema, InteractionRespondRequestSchema, RelayRequestSchema, RelayChatSummarySchema, RelayResultBodySchemas, RelayErrorSchema, exactBase64url, RelayEphemeralKeySchema, RelaySignatureSchema, RelayNonceSchema, RelayPinnedHubKeySchema, RelayHelloFrameSchema, RelayHandshakeAnswerSchema, RelaySealedFrameSchema, HeartbeatFrameSchema, RelayWebFrameSchema, RelayStreamFrameSchema, RelayComputerFrameSchema, RelayFinishFrameSchema;
 var init_session_relay = __esm({
   "../shared/src/session-relay.ts"() {
     "use strict";
@@ -128942,6 +128991,13 @@ var init_session_relay = __esm({
     AgentIdSchema = external_exports.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/);
     ToolCallIdSchema = external_exports.string().min(1).max(256).regex(/^[\w.:-]+$/);
     ResumeCursorSchema = external_exports.string().max(256).regex(/^[0-9a-f-]+-\d+-g\d+-\d+$/);
+    NO_CONTROL = /^[^\u0000-\u001f\u007f]*$/;
+    INVISIBLE = /[\p{Cf}\u2028\u2029]/u;
+    RelayDisplayNameSchema = external_exports.string().min(1).max(64).regex(NO_CONTROL).refine((name2) => name2.trim() === name2, "no leading or trailing whitespace").refine((name2) => !INVISIBLE.test(name2), "no invisible characters");
+    RelayDeviceSchema = external_exports.strictObject({
+      id: external_exports.string().min(8).max(64).regex(/^[A-Za-z0-9_-]+$/),
+      label: RelayDisplayNameSchema
+    });
     base64url3 = (max2) => external_exports.string().min(1).max(max2).regex(/^[A-Za-z0-9_-]+$/);
     ChatsListRequestSchema = external_exports.strictObject({
       op: external_exports.literal("chats.list"),
@@ -129084,7 +129140,13 @@ var init_session_relay = __esm({
        * `stream.frame`s and one `stream.end`, which carries the refusal if it never
        * opened.
        */
-      external_exports.strictObject({ type: external_exports.literal("request"), id: RequestIdSchema, request: RelayRequestSchema }),
+      external_exports.strictObject({
+        type: external_exports.literal("request"),
+        id: RequestIdSchema,
+        request: RelayRequestSchema,
+        /** The browser that asked; sent only to a computer that advertised `request.device`. */
+        device: RelayDeviceSchema.optional()
+      }),
       external_exports.strictObject({ type: external_exports.literal("stream.close"), streamId: StreamIdSchema }),
       /**
        * How many viewers have a chat of this computer open right now. At 0, and
@@ -129132,7 +129194,7 @@ var init_session_relay = __esm({
 });
 
 // ../shared/src/session-relay-link.ts
-var RELAY_LINK_CODE_TTL_MS, RelayLinkComputerIdSchema, Sha256Base64urlSchema, NO_CONTROL, INVISIBLE, RelayLinkComputerNameSchema, RelayLinkRequestSchema, RelayLinkResponseSchema, HubComputerSummarySchema, HubComputerListSchema, HubLinkCodeSchema, SessionRelayLevelSchema, SessionRelayStatusSchema, StepUpPasswordSchema, SessionRelayLinkBodySchema, SessionRelayLevelBodySchema, SessionRelayResumeBodySchema, SessionRelayLinkRefusalSchema;
+var RELAY_LINK_CODE_TTL_MS, RelayLinkComputerIdSchema, Sha256Base64urlSchema, NO_CONTROL2, RelayLinkComputerNameSchema, RelayLinkRequestSchema, RelayLinkResponseSchema, HubComputerSummarySchema, HubComputerListSchema, HubLinkCodeSchema, SessionRelayLevelSchema, SessionRelayStatusSchema, StepUpPasswordSchema, SessionRelayLinkBodySchema, SessionRelayLevelBodySchema, SessionRelayResumeBodySchema, SessionRelayLinkRefusalSchema, SessionRelayDeviceSchema, SessionRelayPresenceSchema, SessionRelayDeviceListSchema;
 var init_session_relay_link = __esm({
   "../shared/src/session-relay-link.ts"() {
     init_zod();
@@ -129140,9 +129202,8 @@ var init_session_relay_link = __esm({
     RELAY_LINK_CODE_TTL_MS = 10 * 60 * 1e3;
     RelayLinkComputerIdSchema = external_exports.string().min(1).max(64).regex(/^[\w.:-]+$/);
     Sha256Base64urlSchema = external_exports.string().length(43).regex(/^[A-Za-z0-9_-]+$/);
-    NO_CONTROL = /^[^\u0000-\u001f\u007f]*$/;
-    INVISIBLE = /[\p{Cf}\u2028\u2029]/u;
-    RelayLinkComputerNameSchema = external_exports.string().min(1).max(64).regex(NO_CONTROL).refine((name2) => name2.trim() === name2, "no leading or trailing whitespace").refine((name2) => !INVISIBLE.test(name2), "no invisible characters");
+    NO_CONTROL2 = /^[^\u0000-\u001f\u007f]*$/;
+    RelayLinkComputerNameSchema = RelayDisplayNameSchema;
     RelayLinkRequestSchema = external_exports.strictObject({
       v: external_exports.literal(1),
       /** The code part of the link code, as the owner pasted it. */
@@ -129160,9 +129221,9 @@ var init_session_relay_link = __esm({
       /** The hub's Ed25519 public key, raw 32 bytes base64url. Pin this one. */
       hubKey: RelayPinnedHubKeySchema,
       /** The hub owner's account id at `issuer`. */
-      ownerAccountId: external_exports.string().min(1).max(128).regex(NO_CONTROL).optional(),
+      ownerAccountId: external_exports.string().min(1).max(128).regex(NO_CONTROL2).optional(),
       /** The issuer that account id belongs to. */
-      issuer: external_exports.string().min(1).max(512).startsWith("https://").regex(NO_CONTROL).optional(),
+      issuer: external_exports.string().min(1).max(512).startsWith("https://").regex(NO_CONTROL2).optional(),
       signature: RelaySignatureSchema
     });
     HubComputerSummarySchema = external_exports.object({
@@ -129233,6 +129294,23 @@ var init_session_relay_link = __esm({
       /** This computer is linked to a DorkOS account that could not be read just now. */
       "account-unreadable"
     ]);
+    SessionRelayDeviceSchema = external_exports.object({
+      label: external_exports.string(),
+      /** When this computer first saw it (ISO 8601). */
+      firstSeenAt: external_exports.string(),
+      /** When it last asked this computer for something (ISO 8601). */
+      lastSeenAt: external_exports.string()
+    });
+    SessionRelayPresenceSchema = external_exports.object({
+      active: external_exports.boolean(),
+      /** When it became active (ISO 8601); absent while not active. */
+      since: external_exports.string().optional(),
+      /** The browsers seen since then, most recent first; empty while not active. */
+      devices: external_exports.array(SessionRelayDeviceSchema)
+    });
+    SessionRelayDeviceListSchema = external_exports.object({
+      devices: external_exports.array(SessionRelayDeviceSchema)
+    });
   }
 });
 
@@ -129247,6 +129325,7 @@ var init_session_gate = __esm({
     init_server_role();
     init_public_computer();
     init_session_relay_link();
+    init_session_route();
   }
 });
 
@@ -129288,6 +129367,7 @@ var init_auth2 = __esm({
     init_server_role();
     init_seed_legacy_mcp_key();
     init_setup_code_gate();
+    init_session_route();
     init_setup_code();
     init_cookie_security();
     init_session_gate();
@@ -129336,7 +129416,6 @@ function defuseSystemTags(text3, tagNames) {
 var IDENTITY_MAX_LENGTH, INVISIBLE_FORMAT, CONTROL_CHARS, PATTERN_CACHE;
 var init_untrusted_text = __esm({
   "../shared/src/untrusted-text.ts"() {
-    "use strict";
     IDENTITY_MAX_LENGTH = 80;
     INVISIBLE_FORMAT = /[\u00ad\u200b-\u200f\u202a-\u202e\u2060-\u2064\ufeff\ufff9-\ufffb]/g;
     CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g;
@@ -129745,6 +129824,9 @@ var init_config_disclosure = __esm({
       // work runs on this machine, names no credential and no person, and an agent
       // that can see it can say why a session behaves the way it does.
       "runtimes.claudeCode.persistentSession": "expose",
+      // How many agents may run at once here (DOR-3012). A number about this
+      // machine, naming no credential and no person.
+      "runtimes.claudeCode.maxWarmProcesses": "expose",
       "runtimes.opencode.defaultModel": "expose",
       "runtimes.codex.defaultModel": "expose",
       "runtimes.codex.defaultEffort": "expose",
@@ -130502,6 +130584,9 @@ var init_config_write_policy = __esm({
       // what makes the verdict cheap: refusing the agent takes nothing away from the
       // person, who was never going to reach for a config door to begin with.
       "runtimes.claudeCode.persistentSession": "operator-only",
+      // How many agents may run at once (DOR-3012): memory on this machine, so the
+      // person sets it, like `scheduler.maxConcurrentRuns`.
+      "runtimes.claudeCode.maxWarmProcesses": "operator-only",
       "runtimes.opencode.defaultModel": "agent-writable",
       "runtimes.codex.defaultModel": "agent-writable",
       "runtimes.codex.defaultEffort": "agent-writable",
@@ -130808,6 +130893,9 @@ var init_config_write_policy = __esm({
           // and the wipe floor says an agent may not widen it back (DOR-1505).
           "uploads.allowedTypes",
           "runtimes.claudeCode.persistentSession",
+          // How many agents may run at once: a person who lowered it to save memory
+          // must not have an agent raise it back (DOR-3012).
+          "runtimes.claudeCode.maxWarmProcesses",
           "scheduler.maxConcurrentRuns",
           // Whether the computer stays awake for the work, and whether it is woken
           // for it: battery, and whether the machine is on while nobody is there.
@@ -131193,21 +131281,45 @@ var init_constants9 = __esm({
        */
       WARM_IDLE_MS: 5 * 60 * 1e3,
       /**
-       * How many sessions may hold a subprocess at once (spec §4.4).
+       * The fewest sessions that may hold a subprocess at once when the ceiling is
+       * sized automatically (spec §4.4; DOR-3012).
        *
-       * This counts PROCESSES; `MAX_SESSIONS` (50) counts session RECORDS, and the
-       * two are deliberately different numbers. Fifty concurrent CLI subprocesses
-       * plus their MCP children on a laptop is not a shape to ship, so warmth stops
-       * at twelve while records stay at fifty — which keeps `ensureSession`'s throw
-       * the genuinely exceptional path it is today.
+       * The ceiling counts PROCESSES; `MAX_SESSIONS` (50) counts session RECORDS,
+       * and the two are deliberately different numbers. It is set by
+       * `runtimes.claudeCode.maxWarmProcesses`, and left unset it is sized to the
+       * machine: one process per {@link SESSIONS.WARM_SESSION_RAM_GB} of memory,
+       * never fewer than this and never more than
+       * {@link SESSIONS.MAX_WARM_SESSIONS_AUTO}. Twelve was the fixed ceiling until
+       * DOR-3012, and a machine with 48 GB filled it with 5.5 GB in use.
        *
-       * It is also **not** a refusal ceiling in the way `MAX_SESSIONS` is. Warmth is
-       * a cache, so the thirteenth warm session does not fail: the least recently
-       * used warm process is reaped to make room for it, and only a host where
-       * nothing is reclaimable — every process mid-turn or parked on a person — is
-       * refused.
+       * It is **not** a refusal ceiling in the way `MAX_SESSIONS` is. Warmth is a
+       * cache, so a launch past it reclaims the least recently used warm process,
+       * and when nothing is reclaimable — every process mid-turn or parked on a
+       * person — it waits for one to come free ({@link SESSIONS.WARM_SLOT_WAIT_MS}).
+       */
+      MIN_WARM_SESSIONS: 12,
+      /** The most an automatically sized warm ceiling allows; see {@link SESSIONS.MIN_WARM_SESSIONS}. */
+      MAX_WARM_SESSIONS_AUTO: 32,
+      /**
+       * Memory an automatically sized ceiling budgets per warm process, in GB. A
+       * busy claude-code process measured about 0.5 GB on 2026-10-18; four times
+       * that leaves room for its MCP children and for everything else on the
+       * machine.
        */
-      MAX_WARM_SESSIONS: 12,
+      WARM_SESSION_RAM_GB: 2,
+      /**
+       * How long a turn waits for a warm slot when every process is busy, before it
+       * is refused in plain words (DOR-3012).
+       *
+       * Long on purpose: a full ceiling is the busiest moment a room has, and a
+       * late answer beats a failed one. Every busy process frees its slot when its
+       * turn ends, so a wait this long means every agent sat on one turn for most
+       * of an hour. Kept under the room's default late-reply ceiling (60 min) so the
+       * room hears the reason rather than giving up first. The turn says it is
+       * waiting on a beat (`SLOT_WAIT_BEAT_MS`), which keeps the stall guard from
+       * mistaking the wait for a stalled turn.
+       */
+      WARM_SLOT_WAIT_MS: 45 * 60 * 1e3,
       /**
        * How long a warm process must be CONTINUOUSLY quiet before its busy spell is
        * over (spec `warm-process-lifecycle` D1).
@@ -131229,7 +131341,7 @@ var init_constants9 = __esm({
        * The same four hours, and the same reasoning, as
        * {@link SESSIONS.INTERACTION_PARK_CEILING_MS}: a hold with no bound is a
        * resource leak with a story attached, and twelve processes pinned by helpers
-       * that will never finish fill `MAX_WARM_SESSIONS` exactly as twelve parked
+       * that will never finish fill the warm ceiling exactly as a ceiling's worth of parked
        * ones do. Deliberately a SEPARATE constant from the person-wait ceiling even
        * though both are four hours: one bounds how long DorkOS waits for a person,
        * the other how long it waits for an agent, and a future change to either
@@ -151626,6 +151738,7 @@ function writeGlobalSharing(harnesses, reason, now3 = /* @__PURE__ */ new Date()
 var NOTHING_SHARED;
 var init_global_scope = __esm({
   "../../apps/server/src/services/harness/global-scope.ts"() {
+    "use strict";
     init_src5();
     init_config_schema();
     init_boundary();
@@ -170597,6 +170710,7 @@ var init_connection_copy = __esm({
 var CONNECTOR_OPERATION_SELECTION_LIMIT, CONNECTOR_AUTHENTICATION_FLOW_TTL_MS, CONNECTOR_EVENT_REVIEW_SCOPE_LIMIT, ConnectorJsonValueSchema, ConnectorJsonObjectSchema, ConnectorProviderInstanceIdSchema, ConnectionIdSchema, ConnectorExternalAccountRefSchema, ConnectorProviderModeSchema, ConnectorProviderHealthSchema, ConnectorGrantReconciliationStatusSchema, ConnectorOperationClassificationSchema, ConnectorAccessLevelSchema, ConnectorRetryPolicySchema, ConnectorOperationRevisionSchema, ConnectorOperationPageSchema, ConnectorCapabilityAvailabilitySchema, ConnectorUnsupportedResultSchema, ConnectorProviderCapabilitySetSchema, ConnectorToolkitVersionResultSchema, ConnectorProviderExecuteResultSchema, ConnectorAuthenticationFlowSchema, ConnectorExecutionTargetSchema, ConnectorProgramExecutionRequestSchema, ConnectorExecutionPublicResultSchema, ConnectorExecutionResponseSchema, ConnectionReadinessStateSchema, ConnectionReadinessReasonSchema, ConnectionFixActionSchema, ConnectionFixSchema, ConnectionReadinessSchema, AccessibleConnectorConnectionSchema, AccessibleConnectorOperationSchema, ConnectorAccessibleConnectionsResponseSchema, ConnectorAccessibleOperationsResponseSchema, ConnectorUsageItemSchema, ConnectorUsagePageSchema, ConnectorReconciliationPreviewRequestSchema, ConnectorReconciliationGrantSelectionSchema, ConnectorReconciliationEveryAgentSelectionSchema, ConnectorReconciliationEveryAgentStateSchema, ConnectorEveryAgentRevokeResponseSchema, ConnectorReconciliationAgentSchema, ConnectorReconciliationCandidateSchema, ConnectorReconciliationPreviewSchema, ConnectorReconciliationApplyRequestSchema, ConnectorReconciliationApplyResponseSchema, ReviewActionBaseSchema, ConnectionTargetSchema, ConnectorRequestAccessSchema, ConnectorReviewActionSchema, ConnectorAgentConnectionRequestInputSchema, ConnectorAgentRequestBaseSchema, ConnectorRequestNotGrantedSchema, ConnectorAgentRequestStatusSchema, ConnectorAgentRequestItemSchema, ConnectorAgentRequestListResponseSchema, ConnectorManagementConnectActionSchema, ConnectorManagementAppliedActionSchema, ConnectorManagementReviewActionSchema, ConnectorManagementReviewCreateRequestSchema, ConnectorManagementReviewOutcomeSchema, ConnectorManagementReviewOperationContextSchema, ConnectorManagementReviewConnectionContextSchema, ConnectorManagementReviewAgentContextSchema, ConnectorManagementReviewContextSchema, ManagementReviewItemBaseShape, ConnectorPendingManagementReviewItemSchema, ConnectorResolvingManagementReviewItemSchema, ConnectorExpiredManagementReviewItemSchema, ConnectorDeniedManagementReviewItemSchema, ConnectorApprovedAppliedManagementReviewItemSchema, ConnectorApprovedConnectManagementReviewItemSchema, ConnectorApprovedUnknownManagementReviewItemSchema, ConnectorManagementReviewItemSchema, ProgramReviewStatusBaseShape, ConnectorProgramReviewStatusSchema, ConnectorManagementReviewDecisionSchema, ConnectorManagementReviewDecisionResultSchema;
 var init_connector_schemas = __esm({
   "../connector-providers/src/connector-schemas.ts"() {
+    "use strict";
     init_zod();
     init_connection_copy();
     CONNECTOR_OPERATION_SELECTION_LIMIT = 1e5;
@@ -176722,7 +176836,7 @@ if (process.argv[2] === "community") {
     );
     Object.assign(childEnv, credentialEnv.pickCommunityCredentialEnv(rawProcessEnv));
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.122.0",
+      cliVersion: "0.123.0",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -176740,7 +176854,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.122.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.123.0" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -176750,7 +176864,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.122.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.123.0", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -176849,7 +176963,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.122.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.123.0", DORK_HOME, subArgs));
 }
 var { values, positionals } = parseCliArgs();
 if (positionals[0] && !knownCommands.has(positionals[0])) {
@@ -176943,14 +177057,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.122.0");
+  console.log("0.123.0");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.122.0"}`);
+  console.log(`dorkos ${"0.123.0"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -177098,7 +177212,7 @@ if (fs39.existsSync(envPath)) {
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath7(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.122.0";
+process.env.DORKOS_CLI_VERSION = "0.123.0";
 var server;
 try {
   server = await import("../server/index.js");
@@ -177123,7 +177237,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.122.0"}`);
+console.log(`  DorkOS v${"0.123.0"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -177149,9 +177263,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.122.0").then((latestVersion) => {
+checkForUpdate("0.123.0").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.122.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.123.0"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;

package/dist/browser/native/package-manifest.json

@@ -1 +1 @@
-{"version":1,"controllerSHA256":"fffcb86512aeca5e40caa8b1eaa8b2962d6304ba42044c02ad477e4b396b9385","nativeManifestSHA256":"19fb0607902e9c30bc693f3a8f7e80601f6ccfd090ffa412a5a38614e6eb7c00","platform":"darwin","arch":"arm64","availability":"available","workers":[{"name":"darwin-journal-worker.mjs","sha256":"739958b3515b48dda8cf40366aa6e34cf65366662c96dba1c951f38bc2f97603","bytes":88486},{"name":"darwin-supervisor-worker.mjs","sha256":"83b9b1e6d8969f5f909b43ebcf2d3ae6830601908bd2e4e4b2747d9ee7e55b77","bytes":74686}]}
+{"version":1,"controllerSHA256":"9319124b611319ba2df2f8912d1d1f653b5368925332e74e0001e1b04ab36f3d","nativeManifestSHA256":"19fb0607902e9c30bc693f3a8f7e80601f6ccfd090ffa412a5a38614e6eb7c00","platform":"darwin","arch":"arm64","availability":"available","workers":[{"name":"darwin-journal-worker.mjs","sha256":"739958b3515b48dda8cf40366aa6e34cf65366662c96dba1c951f38bc2f97603","bytes":88486},{"name":"darwin-supervisor-worker.mjs","sha256":"83b9b1e6d8969f5f909b43ebcf2d3ae6830601908bd2e4e4b2747d9ee7e55b77","bytes":74686}]}

package/dist/browser/source-manifest.json

@@ -1 +1 @@
-{"schemaVersion":1,"controllerSHA256":"fffcb86512aeca5e40caa8b1eaa8b2962d6304ba42044c02ad477e4b396b9385","verifierSHA256":"5cb8f248a264a0602757ad2c0971c1b1e84bcf3185a2b8d706230d2cfac0703c"}
+{"schemaVersion":1,"controllerSHA256":"9319124b611319ba2df2f8912d1d1f653b5368925332e74e0001e1b04ab36f3d","verifierSHA256":"5cb8f248a264a0602757ad2c0971c1b1e84bcf3185a2b8d706230d2cfac0703c"}

package/dist/client/assets/{AboutPage-ClN3P9B8.js → AboutPage-BmtoPqP9.js}

@@ -1 +1 @@
-import{b as N,d as v,j as e,e as w,r as d,X as C,I as k,B as D,f as S}from"./index-DBdO-_iL.js";function j({children:i}){return e.jsx("div",{className:"text-muted-foreground text-3xs font-medium tracking-wider uppercase",children:i})}function A({agent:i,onUpdate:t}){const[a,l]=d.useState(!1),[o,u]=d.useState(""),n=i.capabilities??[];function c(){const s=o.trim();s&&!n.includes(s)&&t({capabilities:[...n,s]}),u(""),l(!1)}return e.jsxs("div",{className:"space-y-1",children:[e.jsx(j,{children:"Capabilities"}),e.jsxs("div",{className:"flex flex-wrap items-center gap-1.5",children:[n.map(s=>e.jsxs("span",{className:"bg-accent text-accent-foreground inline-flex items-center gap-1 rounded-full px-2 py-0.5 text-xs",children:[s,e.jsx("button",{type:"button",onClick:()=>t({capabilities:n.filter(p=>p!==s)}),className:"hover:text-destructive transition-colors","aria-label":`Remove capability ${s}`,children:e.jsx(C,{"aria-hidden":!0,className:"size-3"})})]},s)),a?e.jsx(k,{autoFocus:!0,value:o,onChange:s=>u(s.target.value),onBlur:c,onKeyDown:s=>{s.key==="Enter"&&c(),s.key==="Escape"&&l(!1)},className:"h-6 w-28 text-xs",placeholder:"Capability name","aria-label":"New capability"}):e.jsxs(D,{type:"button",variant:"ghost",size:"sm",onClick:()=>l(!0),className:"text-muted-foreground hover:text-foreground h-auto gap-0.5 px-1 py-0 text-xs",children:[e.jsx(S,{"aria-hidden":!0,className:"size-3"})," Add"]})]})]})}function b({label:i,value:t,placeholder:a,multiline:l,testId:o,onCommit:u}){const[n,c]=d.useState(t),[s,p]=d.useState(t),[m,f]=d.useState(null);s!==t&&(p(t),c(t));function x(){const r=n.trim();if(r===t.trim())return;const g=u(r);if(typeof g!="string")return f(null);c(t),f(g)}const h="border-input bg-background placeholder:text-muted-foreground focus-visible:ring-ring w-full rounded-md border px-3 py-2 text-sm focus-visible:ring-2 focus-visible:outline-none",y=m?e.jsx("p",{role:"status",className:"text-destructive text-xs",children:m}):null;return e.jsxs("div",{className:"space-y-1",children:[e.jsx(j,{children:i}),l?e.jsx("textarea",{value:n,rows:4,"data-testid":o,"aria-label":i,placeholder:a,onChange:r=>{f(null),c(r.target.value)},onBlur:x,onKeyDown:r=>{r.key==="Enter"&&!r.shiftKey&&(r.preventDefault(),x())},className:h}):e.jsx("input",{value:n,"data-testid":o,"aria-label":i,placeholder:a,onChange:r=>{f(null),c(r.target.value)},onBlur:x,onKeyDown:r=>{r.key==="Enter"&&x()},className:h}),y]})}function R({member:i,roster:t}){const{agent:a,isPending:l,update:o}=N(i),u=v(i,t)==="managed";return l?e.jsx(w,{className:"h-16 w-full"}):!u||!a?e.jsx(E,{member:i,agent:a}):e.jsxs("div",{className:"flex flex-col gap-4","data-slot":"profile-about",children:[e.jsx(b,{label:"Name",value:a.displayName??a.name,placeholder:"What you call this agent",testId:"agent-name-field",onCommit:n=>{if(!n)return"A name can’t be empty, so the old one was kept.";o({displayName:n})}}),e.jsx(b,{multiline:!0,label:"Description",value:a.description??"",placeholder:"What is this agent for?",testId:"agent-description-field",onCommit:n=>o({description:n})}),e.jsx(A,{agent:a,onUpdate:o})]})}function E({member:i,agent:t}){var l;const a=(l=t==null?void 0:t.description)==null?void 0:l.trim();return a?e.jsx("p",{className:"text-sm leading-relaxed whitespace-pre-wrap",children:a}):e.jsxs("p",{className:"text-muted-foreground text-sm",children:[i.displayName," has no description yet."]})}export{R as AboutPage};
+import{b as N,d as v,j as e,e as w,r as d,X as C,I as k,B as D,f as S}from"./index-8-iQ6PnT.js";function j({children:i}){return e.jsx("div",{className:"text-muted-foreground text-3xs font-medium tracking-wider uppercase",children:i})}function A({agent:i,onUpdate:t}){const[a,l]=d.useState(!1),[o,u]=d.useState(""),n=i.capabilities??[];function c(){const s=o.trim();s&&!n.includes(s)&&t({capabilities:[...n,s]}),u(""),l(!1)}return e.jsxs("div",{className:"space-y-1",children:[e.jsx(j,{children:"Capabilities"}),e.jsxs("div",{className:"flex flex-wrap items-center gap-1.5",children:[n.map(s=>e.jsxs("span",{className:"bg-accent text-accent-foreground inline-flex items-center gap-1 rounded-full px-2 py-0.5 text-xs",children:[s,e.jsx("button",{type:"button",onClick:()=>t({capabilities:n.filter(p=>p!==s)}),className:"hover:text-destructive transition-colors","aria-label":`Remove capability ${s}`,children:e.jsx(C,{"aria-hidden":!0,className:"size-3"})})]},s)),a?e.jsx(k,{autoFocus:!0,value:o,onChange:s=>u(s.target.value),onBlur:c,onKeyDown:s=>{s.key==="Enter"&&c(),s.key==="Escape"&&l(!1)},className:"h-6 w-28 text-xs",placeholder:"Capability name","aria-label":"New capability"}):e.jsxs(D,{type:"button",variant:"ghost",size:"sm",onClick:()=>l(!0),className:"text-muted-foreground hover:text-foreground h-auto gap-0.5 px-1 py-0 text-xs",children:[e.jsx(S,{"aria-hidden":!0,className:"size-3"})," Add"]})]})]})}function b({label:i,value:t,placeholder:a,multiline:l,testId:o,onCommit:u}){const[n,c]=d.useState(t),[s,p]=d.useState(t),[m,f]=d.useState(null);s!==t&&(p(t),c(t));function x(){const r=n.trim();if(r===t.trim())return;const g=u(r);if(typeof g!="string")return f(null);c(t),f(g)}const h="border-input bg-background placeholder:text-muted-foreground focus-visible:ring-ring w-full rounded-md border px-3 py-2 text-sm focus-visible:ring-2 focus-visible:outline-none",y=m?e.jsx("p",{role:"status",className:"text-destructive text-xs",children:m}):null;return e.jsxs("div",{className:"space-y-1",children:[e.jsx(j,{children:i}),l?e.jsx("textarea",{value:n,rows:4,"data-testid":o,"aria-label":i,placeholder:a,onChange:r=>{f(null),c(r.target.value)},onBlur:x,onKeyDown:r=>{r.key==="Enter"&&!r.shiftKey&&(r.preventDefault(),x())},className:h}):e.jsx("input",{value:n,"data-testid":o,"aria-label":i,placeholder:a,onChange:r=>{f(null),c(r.target.value)},onBlur:x,onKeyDown:r=>{r.key==="Enter"&&x()},className:h}),y]})}function R({member:i,roster:t}){const{agent:a,isPending:l,update:o}=N(i),u=v(i,t)==="managed";return l?e.jsx(w,{className:"h-16 w-full"}):!u||!a?e.jsx(E,{member:i,agent:a}):e.jsxs("div",{className:"flex flex-col gap-4","data-slot":"profile-about",children:[e.jsx(b,{label:"Name",value:a.displayName??a.name,placeholder:"What you call this agent",testId:"agent-name-field",onCommit:n=>{if(!n)return"A name can’t be empty, so the old one was kept.";o({displayName:n})}}),e.jsx(b,{multiline:!0,label:"Description",value:a.description??"",placeholder:"What is this agent for?",testId:"agent-description-field",onCommit:n=>o({description:n})}),e.jsx(A,{agent:a,onUpdate:o})]})}function E({member:i,agent:t}){var l;const a=(l=t==null?void 0:t.description)==null?void 0:l.trim();return a?e.jsx("p",{className:"text-sm leading-relaxed whitespace-pre-wrap",children:a}):e.jsxs("p",{className:"text-muted-foreground text-sm",children:[i.displayName," has no description yet."]})}export{R as AboutPage};

package/dist/client/assets/{ActivityErrorState-B2lq1pyE.js → ActivityErrorState-CEzdFJiR.js}

@@ -1 +1 @@
-import{ep as x,a1 as o,av as u,eq as f,j as a,G as c,a0 as p,B as y}from"./index-DBdO-_iL.js";const g=["Today","Yesterday","This week","Earlier"];function A(e,s){const t=new Map;for(const r of e){const n=h(new Date(r.occurredAt),s),i=t.get(n)??[];i.push(r),t.set(n,i)}return g.filter(r=>t.has(r)).map(r=>({label:r,items:t.get(r)}))}function h(e,s){const t=new Date(s);t.setHours(0,0,0,0);const r=new Date(t);r.setDate(r.getDate()-1);const n=new Date(t);return n.setDate(n.getDate()-n.getDay()),e>=t?"Today":e>=r?"Yesterday":e>=n?"This week":"Earlier"}const T={person:"user",external:"user",agent:"agent",system:"system"};function k(e){return e.source.sessionId?x({session:e.source.sessionId}):null}function v(e){return{id:e.id,occurredAt:e.at,actorType:T[e.actor.kind],actorLabel:e.actor.name,summary:e.summary,linkPath:k(e)}}const d=["audit"],l=50;function m(e){return e.pages.flatMap(s=>s.events.map(v))}function E(e={}){const s=o();return u({queryKey:[...d,"list",e],queryFn:({pageParam:t})=>s.listAuditEvents({...e,limit:l,beforeSeq:t}),initialPageParam:void 0,getNextPageParam:t=>t.nextBeforeSeq,select:m,staleTime:3e4,refetchOnWindowFocus:!0})}function P(e){const s=o();return u({queryKey:[...d,"timeline",e],queryFn:e===null?f:({pageParam:t})=>s.getAccountTimeline(e,{limit:l,beforeSeq:t}),initialPageParam:void 0,getNextPageParam:t=>t.nextBeforeSeq,select:m,staleTime:3e4,refetchOnWindowFocus:!0})}function j({label:e,className:s}){return a.jsx("div",{"data-slot":"activity-group-header",className:c("sticky top-0 z-10 -mx-4 px-4 py-2 sm:-mx-6 sm:px-6","bg-background/95 backdrop-blur-sm",s),children:a.jsx("h3",{className:"text-muted-foreground text-xs font-medium tracking-wider uppercase",children:e})})}function D({onRetry:e,className:s}){return a.jsxs("div",{"data-slot":"activity-error-state",className:c("flex flex-col items-center justify-center gap-3 py-16 text-center",s),children:[a.jsx("div",{className:"bg-destructive/10 rounded-xl p-3",children:a.jsx(p,{className:"text-destructive size-6","aria-hidden":"true"})}),a.jsxs("div",{className:"space-y-1",children:[a.jsx("p",{className:"text-foreground text-sm font-medium",children:"Couldn’t load your activity"}),a.jsx("p",{className:"text-muted-foreground max-w-xs text-xs",children:"The DorkOS server didn’t answer. Check that it’s running."})]}),a.jsx(y,{variant:"outline",size:"sm",onClick:e,children:"Retry"})]})}export{D as A,j as a,E as b,A as g,P as u};
+import{ep as x,a1 as o,av as u,eq as f,j as a,G as c,a0 as p,B as y}from"./index-8-iQ6PnT.js";const g=["Today","Yesterday","This week","Earlier"];function A(e,s){const t=new Map;for(const r of e){const n=h(new Date(r.occurredAt),s),i=t.get(n)??[];i.push(r),t.set(n,i)}return g.filter(r=>t.has(r)).map(r=>({label:r,items:t.get(r)}))}function h(e,s){const t=new Date(s);t.setHours(0,0,0,0);const r=new Date(t);r.setDate(r.getDate()-1);const n=new Date(t);return n.setDate(n.getDate()-n.getDay()),e>=t?"Today":e>=r?"Yesterday":e>=n?"This week":"Earlier"}const T={person:"user",external:"user",agent:"agent",system:"system"};function k(e){return e.source.sessionId?x({session:e.source.sessionId}):null}function v(e){return{id:e.id,occurredAt:e.at,actorType:T[e.actor.kind],actorLabel:e.actor.name,summary:e.summary,linkPath:k(e)}}const d=["audit"],l=50;function m(e){return e.pages.flatMap(s=>s.events.map(v))}function E(e={}){const s=o();return u({queryKey:[...d,"list",e],queryFn:({pageParam:t})=>s.listAuditEvents({...e,limit:l,beforeSeq:t}),initialPageParam:void 0,getNextPageParam:t=>t.nextBeforeSeq,select:m,staleTime:3e4,refetchOnWindowFocus:!0})}function P(e){const s=o();return u({queryKey:[...d,"timeline",e],queryFn:e===null?f:({pageParam:t})=>s.getAccountTimeline(e,{limit:l,beforeSeq:t}),initialPageParam:void 0,getNextPageParam:t=>t.nextBeforeSeq,select:m,staleTime:3e4,refetchOnWindowFocus:!0})}function j({label:e,className:s}){return a.jsx("div",{"data-slot":"activity-group-header",className:c("sticky top-0 z-10 -mx-4 px-4 py-2 sm:-mx-6 sm:px-6","bg-background/95 backdrop-blur-sm",s),children:a.jsx("h3",{className:"text-muted-foreground text-xs font-medium tracking-wider uppercase",children:e})})}function D({onRetry:e,className:s}){return a.jsxs("div",{"data-slot":"activity-error-state",className:c("flex flex-col items-center justify-center gap-3 py-16 text-center",s),children:[a.jsx("div",{className:"bg-destructive/10 rounded-xl p-3",children:a.jsx(p,{className:"text-destructive size-6","aria-hidden":"true"})}),a.jsxs("div",{className:"space-y-1",children:[a.jsx("p",{className:"text-foreground text-sm font-medium",children:"Couldn’t load your activity"}),a.jsx("p",{className:"text-muted-foreground max-w-xs text-xs",children:"The DorkOS server didn’t answer. Check that it’s running."})]}),a.jsx(y,{variant:"outline",size:"sm",onClick:e,children:"Retry"})]})}export{D as A,j as a,E as b,A as g,P as u};

package/dist/client/assets/{ActivityPage-htTkSy18.js → ActivityPage-mFYgTr3e.js}

@@ -1 +1 @@
-import{r as c,j as e,e as d,A as u,B as j,x as v}from"./index-DBdO-_iL.js";import{E as g}from"./empty-state-BsA3jcrO.js";import{T as N,a as A}from"./table-BjHA85BX.js";import{u as b,g as w,A as E,a as T}from"./ActivityErrorState-B2lq1pyE.js";import{A as B}from"./ActivityRow-BqV0B1T0.js";function I({member:i}){var n;const r=((n=i.agent)==null?void 0:n.manifestId)??null,{data:l,isLoading:x,isError:m,refetch:p,isFetchingNextPage:o,hasNextPage:h,fetchNextPage:f}=b(r),s=c.useMemo(()=>l??[],[l]),y=c.useMemo(()=>w(s,new Date),[s]);return r===null?e.jsx("div",{className:"min-h-0 flex-1 px-4 py-3","data-slot":"profile-activity",children:e.jsx("p",{className:"text-muted-foreground text-xs",children:"Activity is kept per agent."})}):x?e.jsxs("div",{className:"min-h-0 flex-1 space-y-2 px-4 py-3","data-slot":"profile-activity","aria-busy":"true",children:[e.jsx(d,{className:"h-3 w-16"}),Array.from({length:5}).map((t,a)=>e.jsx(d,{className:"h-4 w-full"},a))]}):m&&s.length===0?e.jsx("div",{className:"min-h-0 flex-1 px-2","data-slot":"profile-activity",children:e.jsx(E,{onRetry:()=>void p()})}):s.length===0?e.jsx("div",{className:"min-h-0 flex-1 px-4 py-8","data-slot":"profile-activity",children:e.jsx(g,{icon:u,headline:"Nothing on record yet",description:`What ${i.displayName} does shows up here.`})}):e.jsxs("div",{className:"min-h-0 flex-1 px-2 py-2","data-slot":"profile-activity",children:[y.map(t=>e.jsxs("section",{children:[e.jsx(T,{label:t.label}),e.jsx(N,{children:e.jsx(A,{children:t.items.map(a=>e.jsx(B,{item:a,compact:!0},a.id))})})]},t.label)),h&&e.jsx("div",{className:"flex justify-center py-3",children:e.jsxs(j,{variant:"outline",size:"sm",onClick:()=>void f(),disabled:o,className:"gap-2",children:[o&&e.jsx(v,{size:"xs"}),"Load 50 more"]})})]})}export{I as ActivityPage};
+import{r as c,j as e,e as d,A as u,B as j,x as v}from"./index-8-iQ6PnT.js";import{E as g}from"./empty-state-kISAAp0z.js";import{T as N,a as A}from"./table-DvU_oS4E.js";import{u as b,g as w,A as E,a as T}from"./ActivityErrorState-CEzdFJiR.js";import{A as B}from"./ActivityRow-Bkc0kkim.js";function I({member:i}){var n;const r=((n=i.agent)==null?void 0:n.manifestId)??null,{data:l,isLoading:x,isError:m,refetch:p,isFetchingNextPage:o,hasNextPage:h,fetchNextPage:f}=b(r),s=c.useMemo(()=>l??[],[l]),y=c.useMemo(()=>w(s,new Date),[s]);return r===null?e.jsx("div",{className:"min-h-0 flex-1 px-4 py-3","data-slot":"profile-activity",children:e.jsx("p",{className:"text-muted-foreground text-xs",children:"Activity is kept per agent."})}):x?e.jsxs("div",{className:"min-h-0 flex-1 space-y-2 px-4 py-3","data-slot":"profile-activity","aria-busy":"true",children:[e.jsx(d,{className:"h-3 w-16"}),Array.from({length:5}).map((t,a)=>e.jsx(d,{className:"h-4 w-full"},a))]}):m&&s.length===0?e.jsx("div",{className:"min-h-0 flex-1 px-2","data-slot":"profile-activity",children:e.jsx(E,{onRetry:()=>void p()})}):s.length===0?e.jsx("div",{className:"min-h-0 flex-1 px-4 py-8","data-slot":"profile-activity",children:e.jsx(g,{icon:u,headline:"Nothing on record yet",description:`What ${i.displayName} does shows up here.`})}):e.jsxs("div",{className:"min-h-0 flex-1 px-2 py-2","data-slot":"profile-activity",children:[y.map(t=>e.jsxs("section",{children:[e.jsx(T,{label:t.label}),e.jsx(N,{children:e.jsx(A,{children:t.items.map(a=>e.jsx(B,{item:a,compact:!0},a.id))})})]},t.label)),h&&e.jsx("div",{className:"flex justify-center py-3",children:e.jsxs(j,{variant:"outline",size:"sm",onClick:()=>void f(),disabled:o,className:"gap-2",children:[o&&e.jsx(v,{size:"xs"}),"Load 50 more"]})})]})}export{I as ActivityPage};

package/dist/client/assets/{ActivityRow-BqV0B1T0.js → ActivityRow-Bkc0kkim.js}

@@ -1 +1 @@
-import{b7 as d,d3 as x,j as e,_ as u,G as l,c4 as m,d4 as g,B as h}from"./index-DBdO-_iL.js";import{b as f,c}from"./table-BjHA85BX.js";const k={tasks:{text:"text-purple-500",bg:"bg-purple-500/10",label:"Schedules"},relay:{text:"text-teal-500",bg:"bg-teal-500/10",label:"Messages"},agent:{text:"text-indigo-500",bg:"bg-indigo-500/10",label:"Agent"},config:{text:"text-amber-500",bg:"bg-amber-500/10",label:"Settings"},system:{text:"text-neutral-500",bg:"bg-neutral-500/10",label:"System"},permissions:{text:"text-sky-500",bg:"bg-sky-500/10",label:"Permissions"}},p={user:{text:"text-muted-foreground"},agent:{text:"text-foreground"},system:{icon:x,text:"text-neutral-500"},tasks:{icon:d,text:"text-purple-500"}};function b({actorType:s,actorLabel:r,agentColor:a,className:n}){const i=p[s],t=i.icon;return s==="user"?e.jsx(u,{shape:"pill",variant:"outline",className:l("text-muted-foreground",n),children:r}):s==="agent"?e.jsxs("span",{"data-slot":"actor-badge",className:l("inline-flex items-center gap-1.5 text-xs font-medium",i.text,n),children:[e.jsx("span",{className:"size-2 shrink-0 rounded-full",style:a?{backgroundColor:a}:void 0,"aria-hidden":!0}),e.jsx("span",{className:"truncate",children:r})]}):e.jsxs("span",{"data-slot":"actor-badge",className:l("inline-flex items-center gap-1 text-xs font-medium",i.text,n),children:[t&&e.jsx(t,{className:"size-3 shrink-0","aria-hidden":!0}),e.jsx("span",{children:r})]})}function y(s,r=new Date){const a=new Date(s),n=new Date(r);n.setHours(0,0,0,0);const i=new Date(n);i.setDate(i.getDate()-1);const t=new Date(n);t.setDate(t.getDate()-t.getDay());const o=a.toLocaleTimeString("en-US",{hour:"numeric",minute:"2-digit",hour12:!0});return a>=n?o:a>=i?`Yesterday ${o}`:a>=t?`${a.toLocaleDateString("en-US",{weekday:"long"})} ${o}`:a.toLocaleDateString("en-US",{month:"short",day:"numeric"})}function v({item:s,compact:r=!1,className:a}){const n=m(),i=y(s.occurredAt),t=s.linkPath?g(s.linkPath):null;return e.jsxs(f,{"data-slot":"activity-row","data-activity-row":t?"":void 0,tabIndex:t?0:void 0,onKeyDown:t?o=>{o.key==="Enter"&&n({href:t,replace:!1})}:void 0,className:l(t?"focus-visible:ring-ring focus-visible:ring-2 focus-visible:outline-none":"hover:bg-transparent",a),children:[!r&&e.jsxs(e.Fragment,{children:[e.jsx(c,{className:"w-28 py-1.5 pr-0 pl-2 max-sm:hidden",children:e.jsx("span",{className:"text-muted-foreground text-xs tabular-nums",children:i})}),e.jsx(c,{className:"w-24 py-1.5 pr-0 max-sm:hidden",children:e.jsx(b,{actorType:s.actorType,actorLabel:s.actorLabel})})]}),e.jsx(c,{className:l("max-w-0 py-1.5",r?"pl-2":"max-sm:pl-2"),children:e.jsxs("span",{className:"text-foreground/80 block truncate text-sm",children:[e.jsx("span",{className:l("text-muted-foreground mr-1 text-xs font-medium",!r&&"sm:hidden"),children:s.actorLabel}),s.summary]})}),e.jsx(c,{className:l("py-1.5 pr-2 text-right",r?"w-10":"w-16 max-sm:w-10"),children:t&&e.jsx(h,{variant:"ghost",size:"sm",className:"h-6 min-h-[44px] px-2 text-xs sm:min-h-0",onClick:()=>n({href:t,replace:!1}),children:"Open →"})})]})}export{v as A,k as C};
+import{b7 as d,d3 as x,j as e,_ as u,G as l,c4 as m,d4 as g,B as h}from"./index-8-iQ6PnT.js";import{b as f,c}from"./table-DvU_oS4E.js";const k={tasks:{text:"text-purple-500",bg:"bg-purple-500/10",label:"Schedules"},relay:{text:"text-teal-500",bg:"bg-teal-500/10",label:"Messages"},agent:{text:"text-indigo-500",bg:"bg-indigo-500/10",label:"Agent"},config:{text:"text-amber-500",bg:"bg-amber-500/10",label:"Settings"},system:{text:"text-neutral-500",bg:"bg-neutral-500/10",label:"System"},permissions:{text:"text-sky-500",bg:"bg-sky-500/10",label:"Permissions"}},p={user:{text:"text-muted-foreground"},agent:{text:"text-foreground"},system:{icon:x,text:"text-neutral-500"},tasks:{icon:d,text:"text-purple-500"}};function b({actorType:s,actorLabel:r,agentColor:a,className:n}){const i=p[s],t=i.icon;return s==="user"?e.jsx(u,{shape:"pill",variant:"outline",className:l("text-muted-foreground",n),children:r}):s==="agent"?e.jsxs("span",{"data-slot":"actor-badge",className:l("inline-flex items-center gap-1.5 text-xs font-medium",i.text,n),children:[e.jsx("span",{className:"size-2 shrink-0 rounded-full",style:a?{backgroundColor:a}:void 0,"aria-hidden":!0}),e.jsx("span",{className:"truncate",children:r})]}):e.jsxs("span",{"data-slot":"actor-badge",className:l("inline-flex items-center gap-1 text-xs font-medium",i.text,n),children:[t&&e.jsx(t,{className:"size-3 shrink-0","aria-hidden":!0}),e.jsx("span",{children:r})]})}function y(s,r=new Date){const a=new Date(s),n=new Date(r);n.setHours(0,0,0,0);const i=new Date(n);i.setDate(i.getDate()-1);const t=new Date(n);t.setDate(t.getDate()-t.getDay());const o=a.toLocaleTimeString("en-US",{hour:"numeric",minute:"2-digit",hour12:!0});return a>=n?o:a>=i?`Yesterday ${o}`:a>=t?`${a.toLocaleDateString("en-US",{weekday:"long"})} ${o}`:a.toLocaleDateString("en-US",{month:"short",day:"numeric"})}function v({item:s,compact:r=!1,className:a}){const n=m(),i=y(s.occurredAt),t=s.linkPath?g(s.linkPath):null;return e.jsxs(f,{"data-slot":"activity-row","data-activity-row":t?"":void 0,tabIndex:t?0:void 0,onKeyDown:t?o=>{o.key==="Enter"&&n({href:t,replace:!1})}:void 0,className:l(t?"focus-visible:ring-ring focus-visible:ring-2 focus-visible:outline-none":"hover:bg-transparent",a),children:[!r&&e.jsxs(e.Fragment,{children:[e.jsx(c,{className:"w-28 py-1.5 pr-0 pl-2 max-sm:hidden",children:e.jsx("span",{className:"text-muted-foreground text-xs tabular-nums",children:i})}),e.jsx(c,{className:"w-24 py-1.5 pr-0 max-sm:hidden",children:e.jsx(b,{actorType:s.actorType,actorLabel:s.actorLabel})})]}),e.jsx(c,{className:l("max-w-0 py-1.5",r?"pl-2":"max-sm:pl-2"),children:e.jsxs("span",{className:"text-foreground/80 block truncate text-sm",children:[e.jsx("span",{className:l("text-muted-foreground mr-1 text-xs font-medium",!r&&"sm:hidden"),children:s.actorLabel}),s.summary]})}),e.jsx(c,{className:l("py-1.5 pr-2 text-right",r?"w-10":"w-16 max-sm:w-10"),children:t&&e.jsx(h,{variant:"ghost",size:"sm",className:"h-6 min-h-[44px] px-2 text-xs sm:min-h-0",onClick:()=>n({href:t,replace:!1}),children:"Open →"})})]})}export{v as A,k as C};

package/dist/client/assets/{AdapterIcon-DlkN0YJo.js → AdapterIcon-DVgTrgnM.js}

@@ -1 +1 @@
-import{bD as n,bE as r,j as c,bF as s,aS as A}from"./index-DBdO-_iL.js";const g={connected:n.success,disconnected:n.neutral,error:n.error,starting:`${n.warning} ${r}`,stopping:`${n.warning} ${r}`,reconnecting:`${n.warning} ${r}`},E={connected:"Connected",disconnected:"Ready",error:"Error",starting:"Connecting…",stopping:"Stopping…",reconnecting:"Reconnecting…"};function S({iconId:i,adapterType:a,size:t=16,className:o}){const e=s[i??""]??s[a??""];return e?c.jsx(e,{size:t,className:o}):c.jsx(A,{className:o,style:{width:t,height:t}})}export{S as A,g as a,E as b};
+import{bD as n,bE as r,j as c,bF as s,aS as A}from"./index-8-iQ6PnT.js";const g={connected:n.success,disconnected:n.neutral,error:n.error,starting:`${n.warning} ${r}`,stopping:`${n.warning} ${r}`,reconnecting:`${n.warning} ${r}`},E={connected:"Connected",disconnected:"Ready",error:"Error",starting:"Connecting…",stopping:"Stopping…",reconnecting:"Reconnecting…"};function S({iconId:i,adapterType:a,size:t=16,className:o}){const e=s[i??""]??s[a??""];return e?c.jsx(e,{size:t,className:o}):c.jsx(A,{className:o,style:{width:t,height:t}})}export{S as A,g as a,E as b};