dorkos 0.123.0 → 0.124.0

package/dist/bin/cli.js

@@ -26773,7 +26773,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.123.0";
+  if (true) return "0.124.0";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -29477,11 +29477,11 @@ var require_util = __commonJS({
       return false;
     }
     exports.schemaHasRules = schemaHasRules;
-    function schemaHasRulesButRef(schema3, RULES) {
+    function schemaHasRulesButRef(schema3, RULES2) {
       if (typeof schema3 == "boolean")
         return !schema3;
       for (const key in schema3)
-        if (key !== "$ref" && RULES.all[key])
+        if (key !== "$ref" && RULES2.all[key])
           return true;
       return false;
     }
@@ -30875,17 +30875,17 @@ var require_validate = __commonJS({
     }
     function schemaKeywords(it, types2, typeErrors, errsCount) {
       const { gen, schema: schema3, data, allErrors, opts, self: self2 } = it;
-      const { RULES } = self2;
-      if (schema3.$ref && (opts.ignoreKeywordsWithRef || !(0, util_1.schemaHasRulesButRef)(schema3, RULES))) {
-        gen.block(() => keywordCode(it, "$ref", RULES.all.$ref.definition));
+      const { RULES: RULES2 } = self2;
+      if (schema3.$ref && (opts.ignoreKeywordsWithRef || !(0, util_1.schemaHasRulesButRef)(schema3, RULES2))) {
+        gen.block(() => keywordCode(it, "$ref", RULES2.all.$ref.definition));
         return;
       }
       if (!opts.jtd)
         checkStrictTypes(it, types2);
       gen.block(() => {
-        for (const group of RULES.rules)
+        for (const group of RULES2.rules)
           groupKeywords(group);
-        groupKeywords(RULES.post);
+        groupKeywords(RULES2.post);
       });
       function groupKeywords(group) {
         if (!(0, applicability_1.shouldUseGroup)(schema3, group))
@@ -32984,10 +32984,10 @@ var require_core = __commonJS({
       }
       // Remove keyword
       removeKeyword(keyword) {
-        const { RULES } = this;
-        delete RULES.keywords[keyword];
-        delete RULES.all[keyword];
-        for (const group of RULES.rules) {
+        const { RULES: RULES2 } = this;
+        delete RULES2.keywords[keyword];
+        delete RULES2.all[keyword];
+        for (const group of RULES2.rules) {
           const i2 = group.rules.findIndex((rule) => rule.keyword === keyword);
           if (i2 >= 0)
             group.rules.splice(i2, 1);
@@ -33155,9 +33155,9 @@ var require_core = __commonJS({
     }
     var KEYWORD_NAME = /^[a-z_$][a-z0-9_$:-]*$/i;
     function checkKeyword(keyword, def) {
-      const { RULES } = this;
+      const { RULES: RULES2 } = this;
       (0, util_1.eachItem)(keyword, (kwd) => {
-        if (RULES.keywords[kwd])
+        if (RULES2.keywords[kwd])
           throw new Error(`Keyword ${kwd} is already defined`);
         if (!KEYWORD_NAME.test(kwd))
           throw new Error(`Keyword ${kwd} has invalid name`);
@@ -33173,13 +33173,13 @@ var require_core = __commonJS({
       const post = definition === null || definition === void 0 ? void 0 : definition.post;
       if (dataType && post)
         throw new Error('keyword with "post" flag cannot have "type"');
-      const { RULES } = this;
-      let ruleGroup = post ? RULES.post : RULES.rules.find(({ type: t2 }) => t2 === dataType);
+      const { RULES: RULES2 } = this;
+      let ruleGroup = post ? RULES2.post : RULES2.rules.find(({ type: t2 }) => t2 === dataType);
       if (!ruleGroup) {
         ruleGroup = { type: dataType, rules: [] };
-        RULES.rules.push(ruleGroup);
+        RULES2.rules.push(ruleGroup);
       }
-      RULES.keywords[keyword] = true;
+      RULES2.keywords[keyword] = true;
       if (!definition)
         return;
       const rule = {
@@ -33194,7 +33194,7 @@ var require_core = __commonJS({
         addBeforeRule.call(this, ruleGroup, rule, definition.before);
       else
         ruleGroup.rules.push(rule);
-      RULES.all[keyword] = rule;
+      RULES2.all[keyword] = rule;
       (_a7 = definition.implements) === null || _a7 === void 0 ? void 0 : _a7.forEach((kwd) => this.addKeyword(kwd));
     }
     function addBeforeRule(ruleGroup, rule, before) {
@@ -49462,6 +49462,98 @@ var init_canvas_doc_incarnation = __esm({
   }
 });
 
+// ../shared/src/bounded-json.ts
+function containerEntries(value) {
+  const prototype = Object.getPrototypeOf(value);
+  if (Array.isArray(value)) {
+    if (prototype !== Array.prototype) return void 0;
+  } else if (prototype !== Object.prototype && prototype !== null) return void 0;
+  const descriptors = Object.getOwnPropertyDescriptors(value);
+  if (Object.getOwnPropertySymbols(value).length) return void 0;
+  const keys = Array.isArray(value) ? Array.from({ length: value.length }, (_3, index2) => String(index2)) : Object.keys(descriptors);
+  if (Array.isArray(value) && Object.keys(descriptors).length !== value.length + 1)
+    return void 0;
+  const entries = [];
+  for (const key of keys) {
+    const descriptor = descriptors[key];
+    if (UNSAFE_JSON_KEYS.has(key) || !descriptor || !("value" in descriptor) || !descriptor.enumerable)
+      return void 0;
+    entries.push([key, descriptor.value]);
+  }
+  return entries;
+}
+function inspectBoundedJson(value, bounds) {
+  const { maxBytes, maxDepth } = bounds;
+  const pending2 = [{ value, depth: 0 }];
+  const ancestors = /* @__PURE__ */ new Set();
+  let bytes = 0;
+  while (pending2.length) {
+    const item = pending2.pop();
+    const current3 = item.value;
+    if (item.exit) {
+      ancestors.delete(current3);
+      continue;
+    }
+    if (current3 !== null && typeof current3 === "object") {
+      if (item.depth > maxDepth) return "JSON exceeds the maximum depth";
+      if (ancestors.has(current3)) return "JSON must not contain cycles";
+      if (Array.isArray(current3) && current3.length > maxBytes) return "JSON exceeds the byte limit";
+      const entries = containerEntries(current3);
+      if (!entries) return "Expected plain JSON without unsafe keys or accessors";
+      bytes += 2 + Math.max(0, entries.length - 1);
+      ancestors.add(current3);
+      pending2.push({ value: current3, depth: item.depth, exit: true });
+      for (const [key, child] of entries) {
+        if (!Array.isArray(current3)) bytes += encoder.encode(JSON.stringify(key)).length + 1;
+        pending2.push({ value: child, depth: item.depth + 1 });
+      }
+    } else {
+      if (typeof current3 === "number" && !Number.isFinite(current3))
+        return "Expected finite JSON numbers";
+      if (current3 !== null && !["string", "number", "boolean"].includes(typeof current3))
+        return "Expected JSON data";
+      bytes += encoder.encode(JSON.stringify(current3)).length;
+    }
+    if (bytes > maxBytes) return "JSON exceeds the byte limit";
+  }
+  return void 0;
+}
+function jsonValueUnion(self2) {
+  return external_exports.union([
+    external_exports.string(),
+    external_exports.number().finite(),
+    external_exports.boolean(),
+    external_exports.null(),
+    external_exports.array(self2),
+    external_exports.object({}).catchall(self2)
+  ]);
+}
+function withJsonBounds(schema3, bounds) {
+  return external_exports.preprocess((value, context2) => {
+    const problem = inspectBoundedJson(value, bounds);
+    if (problem) {
+      context2.addIssue({ code: "custom", message: problem });
+      return external_exports.NEVER;
+    }
+    return value;
+  }, schema3);
+}
+var UNSAFE_JSON_KEYS, encoder, JsonValueSchema, JsonObjectSchema;
+var init_bounded_json = __esm({
+  "../shared/src/bounded-json.ts"() {
+    "use strict";
+    init_zod();
+    UNSAFE_JSON_KEYS = /* @__PURE__ */ new Set([
+      "__proto__",
+      "prototype",
+      "constructor"
+    ]);
+    encoder = new TextEncoder();
+    JsonValueSchema = external_exports.lazy(() => jsonValueUnion(JsonValueSchema));
+    JsonObjectSchema = external_exports.object({}).catchall(JsonValueSchema);
+  }
+});
+
 // ../../node_modules/.pnpm/@asteasolutions+zod-to-openapi@9.1.0_zod@4.6.5/node_modules/@asteasolutions/zod-to-openapi/dist/index.cjs
 var require_dist2 = __commonJS({
   "../../node_modules/.pnpm/@asteasolutions+zod-to-openapi@9.1.0_zod@4.6.5/node_modules/@asteasolutions/zod-to-openapi/dist/index.cjs"(exports) {
@@ -51086,92 +51178,22 @@ var init_zod_openapi = __esm({
 });
 
 // ../shared/src/canvas-channel-json.ts
-function containerEntries(value) {
-  const prototype = Object.getPrototypeOf(value);
-  if (Array.isArray(value)) {
-    if (prototype !== Array.prototype) return void 0;
-  } else if (prototype !== Object.prototype && prototype !== null) return void 0;
-  const descriptors = Object.getOwnPropertyDescriptors(value);
-  if (Object.getOwnPropertySymbols(value).length) return void 0;
-  const keys = Array.isArray(value) ? Array.from({ length: value.length }, (_3, index2) => String(index2)) : Object.keys(descriptors);
-  if (Array.isArray(value) && Object.keys(descriptors).length !== value.length + 1)
-    return void 0;
-  const entries = [];
-  for (const key of keys) {
-    const descriptor = descriptors[key];
-    if (unsafeKeys.has(key) || !descriptor || !("value" in descriptor) || !descriptor.enumerable)
-      return void 0;
-    entries.push([key, descriptor.value]);
-  }
-  return entries;
-}
-function inspectCanvasChannelJson(value, maxBytes = CANVAS_CHANNEL_ENVELOPE_BYTES) {
-  const pending2 = [{ value, depth: 0 }];
-  const ancestors = /* @__PURE__ */ new Set();
-  let bytes = 0;
-  while (pending2.length) {
-    const item = pending2.pop();
-    const current3 = item.value;
-    if (item.exit) {
-      ancestors.delete(current3);
-      continue;
-    }
-    if (current3 !== null && typeof current3 === "object") {
-      if (item.depth > CANVAS_CHANNEL_JSON_DEPTH) return "JSON exceeds the maximum depth";
-      if (ancestors.has(current3)) return "JSON must not contain cycles";
-      if (Array.isArray(current3) && current3.length > maxBytes) return "JSON exceeds the byte limit";
-      const entries = containerEntries(current3);
-      if (!entries) return "Expected plain JSON without unsafe keys or accessors";
-      bytes += 2 + Math.max(0, entries.length - 1);
-      ancestors.add(current3);
-      pending2.push({ value: current3, depth: item.depth, exit: true });
-      for (const [key, child] of entries) {
-        if (!Array.isArray(current3)) bytes += encoder.encode(JSON.stringify(key)).length + 1;
-        pending2.push({ value: child, depth: item.depth + 1 });
-      }
-    } else {
-      if (typeof current3 === "number" && !Number.isFinite(current3))
-        return "Expected finite JSON numbers";
-      if (current3 !== null && !["string", "number", "boolean"].includes(typeof current3))
-        return "Expected JSON data";
-      bytes += encoder.encode(JSON.stringify(current3)).length;
-    }
-    if (bytes > maxBytes) return "JSON exceeds the byte limit";
-  }
-  return void 0;
-}
 function boundedJson(schema3, maxBytes = CANVAS_CHANNEL_ENVELOPE_BYTES) {
-  return external_exports.preprocess((value, context2) => {
-    const problem = inspectCanvasChannelJson(value, maxBytes);
-    if (problem) {
-      context2.addIssue({ code: "custom", message: problem });
-      return external_exports.NEVER;
-    }
-    return value;
-  }, schema3);
+  return withJsonBounds(schema3, { maxBytes, maxDepth: CANVAS_CHANNEL_JSON_DEPTH });
 }
-var CANVAS_CHANNEL_ENVELOPE_BYTES, CANVAS_CHANNEL_JSON_DEPTH, CANVAS_CHANNEL_STATE_BYTES, unsafeKeys, encoder, RecursiveJsonSchema, CanvasChannelJsonValueSchema, CanvasChannelStateSchema;
+var CANVAS_CHANNEL_ENVELOPE_BYTES, CANVAS_CHANNEL_JSON_DEPTH, CANVAS_CHANNEL_STATE_BYTES, unsafeKeys, RecursiveJsonSchema, CanvasChannelJsonValueSchema, CanvasChannelStateSchema;
 var init_canvas_channel_json = __esm({
   "../shared/src/canvas-channel-json.ts"() {
     "use strict";
     init_zod();
+    init_bounded_json();
     init_zod_openapi();
     extendZodWithOpenApiOnce();
     CANVAS_CHANNEL_ENVELOPE_BYTES = 16 * 1024;
     CANVAS_CHANNEL_JSON_DEPTH = 32;
     CANVAS_CHANNEL_STATE_BYTES = 256 * 1024;
-    unsafeKeys = /* @__PURE__ */ new Set(["__proto__", "prototype", "constructor"]);
-    encoder = new TextEncoder();
-    RecursiveJsonSchema = external_exports.lazy(
-      () => external_exports.union([
-        external_exports.string(),
-        external_exports.number().finite(),
-        external_exports.boolean(),
-        external_exports.null(),
-        external_exports.array(RecursiveJsonSchema),
-        external_exports.object({}).catchall(RecursiveJsonSchema)
-      ])
-    ).openapi("CanvasChannelJson");
+    unsafeKeys = UNSAFE_JSON_KEYS;
+    RecursiveJsonSchema = external_exports.lazy(() => jsonValueUnion(RecursiveJsonSchema)).openapi("CanvasChannelJson");
     CanvasChannelJsonValueSchema = boundedJson(RecursiveJsonSchema);
     CanvasChannelStateSchema = boundedJson(
       external_exports.object({}).catchall(RecursiveJsonSchema),
@@ -52007,14 +52029,17 @@ function resolveCeilingLevel(declared, ceiling) {
 }
 function stricterLevel(a2, b2) {
   const level = stricterPower(a2, b2);
-  return (a2.outsider || b2.outsider) && !level.outsider ? { ...level, outsider: true } : level;
-}
-function ceilingCarriesOutsider(ceiling) {
-  if (!Array.isArray(ceiling)) {
-    return ceiling === "runtime-default" || ceiling.outsider === true;
-  }
-  const bounds = ceiling;
-  return bounds.length === 0 || bounds.some(ceilingCarriesOutsider);
+  const marked = (a2.outsider || b2.outsider) && !level.outsider ? { ...level, outsider: true } : level;
+  const teammate = mergeTeammateOrigins(a2.teammate, b2.teammate);
+  return teammate === void 0 || teammate === marked.teammate ? marked : { ...marked, teammate };
+}
+function mergeTeammateOrigins(a2, b2) {
+  if (b2 === void 0) return a2;
+  if (a2 === void 0) return b2;
+  const key = (origin) => `${origin.roomId}\0${origin.authorId}`;
+  const seen = new Set(a2.map(key));
+  const added = b2.filter((origin) => !seen.has(key(origin)));
+  return added.length === 0 ? a2 : [...a2, ...added];
 }
 function stricterPower(a2, b2) {
   const fits = (inner, outer) => isNoLooserThan(outer, inner) && (!inner.auto || outer.auto === true || outer.asks === "never");
@@ -52046,7 +52071,11 @@ var init_permission_semantics = __esm({
 });
 
 // ../shared/src/permissions/permission-schemas.ts
-var PermissionStateSchema, PermissionAreaIdSchema, PermissionPresetSchema, PermissionActionIdSchema, PermissionOverridesSchema, PermissionStopSchema, AgentPermissionsSchema, PERMISSION_SOURCES, PermissionSourceSchema, PermissionLayerSchema, ResolvedPermissionSchema, PERMISSION_SURFACES, PermissionSurfaceSchema, PermissionAttributionSchema, PermissionChangeTargetSchema, PermissionChangeKeySchema, PermissionChangeSchema, PermissionChangedMetadataSchema, PERMISSION_ANSWERS, PermissionAnsweredMetadataSchema, PermissionSuggestionDismissedMetadataSchema, PermissionSuggestionRestoredMetadataSchema, ALWAYS_SUGGESTION_WINDOW_MS;
+function chatModeWord(modeId) {
+  if (modeId === null) return "the default";
+  return CHAT_MODE_WORD[modeId] ?? modeId;
+}
+var PermissionStateSchema, PermissionAreaIdSchema, PermissionPresetSchema, PermissionActionIdSchema, PermissionOverridesSchema, PermissionStopSchema, AgentPermissionsSchema, PERMISSION_SOURCES, PermissionSourceSchema, PermissionLayerSchema, ResolvedPermissionSchema, PERMISSION_SURFACES, PermissionSurfaceSchema, PermissionAttributionSchema, PermissionChangeTargetSchema, PermissionChangeKeySchema, PermissionChangeSchema, PermissionChangedMetadataSchema, PERMISSION_ANSWERS, PermissionAnsweredMetadataSchema, PermissionSuggestionDismissedMetadataSchema, PermissionSuggestionRestoredMetadataSchema, ALWAYS_SUGGESTION_WINDOW_MS, CHAT_MODE_WORD;
 var init_permission_schemas = __esm({
   "../shared/src/permissions/permission-schemas.ts"() {
     "use strict";
@@ -52123,7 +52152,13 @@ var init_permission_schemas = __esm({
         kind: external_exports.literal("files"),
         /** The runtime whose own stop changed; absent for the global one. */
         runtime: external_exports.string().optional()
-      })
+      }),
+      /**
+       * One chat's Files & commands mode, as its runtime names it (`before` and
+       * `after` are mode ids). Recorded under the chat's agent; only the one-time
+       * raise of existing chats writes it (DOR-3107), and its Undo sets each chat back.
+       */
+      external_exports.object({ kind: external_exports.literal("chat"), sessionId: external_exports.string() })
     ]);
     PermissionChangeSchema = external_exports.object({
       target: PermissionChangeTargetSchema,
@@ -52193,6 +52228,14 @@ var init_permission_schemas = __esm({
       undoOf: external_exports.string()
     });
     ALWAYS_SUGGESTION_WINDOW_MS = 7 * 24 * 60 * 60 * 1e3;
+    CHAT_MODE_WORD = {
+      default: "Ask first",
+      plan: "Plan",
+      acceptEdits: "Act",
+      auto: "Auto",
+      dontAsk: "Never ask",
+      bypassPermissions: "Full autonomy"
+    };
   }
 });
 
@@ -53320,6 +53363,7 @@ var init_capabilities = __esm({
 var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, ProjectWithoutCreditsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema;
 var init_project_schemas = __esm({
   "../shared/src/project-schemas.ts"() {
+    "use strict";
     init_zod();
     init_zod_openapi();
     extendZodWithOpenApiOnce();
@@ -53703,6 +53747,7 @@ var init_account_usage_codex = __esm({
 var LEDGER_RUNTIMES, LEDGER_SOURCES, RateLimitStatusSchema, ISO_TIME_PATTERN, IsoTimeSchema, LedgerSourceSchema, LedgerEntrySchema, WINDOW_KEY_PATTERN, LedgerPlanSchema, LedgerCreditsSchema, LedgerSpendSchema, UsageLedgerSchema, MINUTE_MS, HOUR_MS, FIVE_HOUR_MS, SEVEN_DAY_MS, MAX_FUTURE_SKEW_MS, AccountUsageSchema, LimitResolutionSchema, LimitHistoryEntrySchema, LimitHistoryResponseSchema, FoundClaudeFolderSchema, DismissFoundFolderRequestSchema;
 var init_account_usage = __esm({
   "../shared/src/account-usage.ts"() {
+    "use strict";
     init_zod();
     init_zod_openapi();
     init_ledger_slug();
@@ -54112,7 +54157,7 @@ function isSafeSigninUrl(value) {
   if (url2.protocol !== "http:") return false;
   return url2.hostname === "localhost" || url2.hostname === "127.0.0.1" || url2.hostname === "[::1]";
 }
-var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, TrackerItemRefSchema, SessionStartedBySchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedWaitingOnSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, agentCompactionShape, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, ModelSubstitutedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, ModelSubstitutedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, HistoryReadSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, LanAccessStatusSchema, RemoteAccessStateSchema, RemoteAccessAvailabilitySchema, RemoteAccessEnrolmentSchema, RemoteAccessReportSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema2, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema, KeepAwakeUnsupportedReasonSchema, KeepAwakeStatusSchema;
+var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, TrackerItemRefSchema, SessionStartedBySchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedWaitingOnSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, agentCompactionShape, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, ModelSubstitutedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, ModelSubstitutedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, HistoryReadSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, LanAccessStatusSchema, RemoteAccessStateSchema, RemoteAccessAvailabilitySchema, RemoteAccessEnrolmentSchema, RemoteAccessReportSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema2, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, ScheduleOriginMarksSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema, KeepAwakeUnsupportedReasonSchema, KeepAwakeStatusSchema;
 var init_schemas4 = __esm({
   "../shared/src/schemas.ts"() {
     "use strict";
@@ -56435,6 +56480,9 @@ var init_schemas4 = __esm({
       isLocalCaller: external_exports.boolean().openapi({
         description: "Whether THIS request reached DorkOS from the machine it runs on. The one field here that describes the caller rather than the server: it is answered per request by the same predicate that guards the loopback-only connect endpoints (`lib/caller-authority.ts`), so a client can be told in advance what those endpoints would do instead of discovering it from a 403. False for a phone or any browser arriving over the tunnel, over the LAN, or through a reverse proxy. True whenever `DORKOS_ALLOW_INSECURE_BIND` is set, because under that flag those endpoints accept"
       }),
+      callerRoute: external_exports.enum(["local", "wifi", "tunnel", "managed", "network", "hub"]).nullable().optional().openapi({
+        description: "The way THIS request reached DorkOS, as the server classified it: `local` at the computer DorkOS runs on, `wifi` over the Wi-Fi listener, and so on. Read only. A Wi-Fi request answers approvals with Allow once or Deny, never Always allow, so the app hides that choice there. Null for the relay; absent from an older server"
+      }),
       dismissedUpgradeVersions: external_exports.array(external_exports.string()).openapi({ description: "Versions the user has dismissed upgrade notifications for" }),
       dismissedPromoIds: external_exports.array(external_exports.string()).openapi({
         description: "Feature-promo ids the user has waved away. Server-held rather than per-browser, so dismissing a card on one device settles it on all of them"
@@ -56890,6 +56938,21 @@ var init_schemas4 = __esm({
     ).refine((s2) => !s2.includes("--"), "Must not contain consecutive hyphens");
     TaskRunStatusSchema = external_exports.enum(["running", "completed", "failed", "cancelled", "skipped", "blocked"]).openapi("TaskRunStatus");
     TaskRunTriggerSchema = external_exports.enum(["scheduled", "manual", "agent"]).openapi("TaskRunTrigger");
+    ScheduleOriginMarksSchema = external_exports.object({
+      /** The turn read words DorkOS can't vouch for: a stranger's message, or another agent's that carried one. */
+      outsider: external_exports.literal(true).optional(),
+      /** Each teammate whose message started the chain, and the space room they wrote in. */
+      teammate: external_exports.array(
+        external_exports.object({
+          roomId: external_exports.string(),
+          authorId: external_exports.string(),
+          /** The teammate's name when the mark was written, or null when it was unknown. */
+          name: external_exports.string().nullable().default(null),
+          /** The room's title when the mark was written, or null when it was unknown. */
+          room: external_exports.string().nullable().default(null)
+        })
+      ).optional()
+    }).openapi("ScheduleOriginMarks");
     TaskSchema = external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
@@ -57067,6 +57130,12 @@ var init_schemas4 = __esm({
        * such. `null` on every schedule a person or an agent explained themselves.
        */
       reasonSource: external_exports.enum(["dorkos"]).nullable().default(null),
+      /**
+       * The turn marks the schedule was created or last edited under, or null for an unmarked
+       * turn or a person's own schedule (DOR-3036). A marked schedule waits for a person, whatever
+       * the trust preset; approving it clears this.
+       */
+      originMarks: ScheduleOriginMarksSchema.nullable().optional(),
       nextRun: external_exports.string().nullable().optional(),
       /**
        * When the schedule last started a run (ISO 8601), or null when it never
@@ -59863,7 +59932,7 @@ function checkContributionShape(contribution, readExtra) {
 }
 function checkDeclaredTools(manifest) {
   return (manifest.tools ?? []).map((tool) => {
-    const refused2 = (reason) => ({
+    const refused3 = (reason) => ({
       ok: false,
       name: tool.name,
       title: tool.title,
@@ -59871,7 +59940,7 @@ function checkDeclaredTools(manifest) {
       reason: plainReason(reason)
     });
     const schema3 = checkToolInputSchema(tool.inputSchema);
-    if (!schema3.ok) return refused2(schema3.reason);
+    if (!schema3.ok) return refused3(schema3.reason);
     const checked = checkContributionShape(
       {
         owner: manifest.id,
@@ -59889,7 +59958,7 @@ function checkDeclaredTools(manifest) {
       },
       NO_EXTRA
     );
-    if (!checked.ok) return refused2(checked.reason);
+    if (!checked.ok) return refused3(checked.reason);
     const timeout = Math.min(
       Math.max(1, Math.trunc(tool.timeoutSeconds ?? EXTENSION_TOOL_TIMEOUT_DEFAULT_SECONDS)),
       EXTENSION_TOOL_TIMEOUT_MAX_SECONDS
@@ -109432,7 +109501,7 @@ var init_billing = __esm({
 });
 
 // ../cloud-api/dist/inference.js
-var InferenceTokenRequestSchema, InferenceEndpointsSchema, InferenceFormatSchema, InferenceLimitsSchema, InferenceTokenSchema, ModelSupportsSchema, InferenceModelSchema, InferenceModelsResponseSchema, InferenceTokenRevokeResponseSchema, InferenceRefusalReasonSchema;
+var InferenceTokenRequestSchema, InferenceEndpointsSchema, InferenceFormatSchema, InferenceLimitsSchema, InferenceTokenSchema, ModelSupportsSchema, InferenceModelSchema, InferenceModelsResponseSchema, InferenceTokenRevokeResponseSchema, InferenceRefusalReasonSchema, InferenceErrorBodySchema;
 var init_inference = __esm({
   "../cloud-api/dist/inference.js"() {
     "use strict";
@@ -109441,7 +109510,7 @@ var init_inference = __esm({
     InferenceTokenRequestSchema = external_exports.object({
       instanceId: IdSchema,
       seatRef: IdSchema.optional(),
-      agentRef: IdSchema.optional()
+      agentRef: IdSchema.optional().describe("The agent the token is for. On a cloud agent computer, the agent`s id on its hub. The computer`s own claim: attribution and billing only, never authorization.")
     }).describe("Mint a short-lived inference token for one instance.");
     InferenceEndpointsSchema = external_exports.object({
       anthropicMessages: external_exports.string().url(),
@@ -109497,6 +109566,16 @@ var init_inference = __esm({
       "daily_limit_reached",
       "turn_budget_exhausted"
     ]).describe("Why an inference request was refused. Conditions a caller can act on; nothing about what they bought.");
+    InferenceErrorBodySchema = external_exports.object({
+      type: external_exports.literal("error"),
+      error: external_exports.object({
+        type: external_exports.string().describe("The vendor-style error type."),
+        message: external_exports.string().describe("What went wrong, for a log; never shown as a decision."),
+        dorkos_code: external_exports.string().optional().describe("The endpoint`s own word for the refusal. Never branched on."),
+        dorkos_reason: tolerantEnum(InferenceRefusalReasonSchema).optional().catch(UNRECOGNISED).describe("The published refusal reason, when there is one. Unknown reads as unrecognised.")
+      }),
+      request_id: external_exports.string().nullable().optional()
+    }).describe("The body an inference request is refused with: the vendor error envelope plus two fields of the service`s own.");
   }
 });
 
@@ -109856,6 +109935,11 @@ var init_remote2 = __esm({
         id: IdSchema,
         leaseToken: external_exports.string().min(1)
       }).describe("For a hub only: read `GET /v1/hubs/self/assignment` again now, because its front-door proof was replaced or it ended. Carries nothing else, and no authority."),
+      external_exports.object({
+        kind: external_exports.literal("agent_computer_assignment_changed"),
+        id: IdSchema,
+        leaseToken: external_exports.string().min(1)
+      }).describe("For an agent computer only: read `GET /v1/agent-computers/self/assignment` again now, because its link code or its hub changed. Carries nothing else, and no authority. Sent only to a computer whose version knows it."),
       external_exports.object({
         kind: external_exports.literal("keepalive"),
         id: IdSchema,
@@ -110158,7 +110242,7 @@ var init_communities = __esm({
 });
 
 // ../cloud-api/dist/hubs.js
-var HubAssignmentStateSchema, HttpsOriginSchema, HubSignInClientSchema, HubAssignmentSchema, HubAssignmentConfirmRequestSchema, HubAssignmentConfirmResponseSchema, CloudComputerStateSchema, CloudComputerStopReasonSchema, CloudComputerSchema, CloudComputerListResponseSchema, CloudComputerCreateRequestSchema, CloudComputerCreateResponseSchema, CloudComputerTransitionResponseSchema, ViewerOpenResponseSchema, CloudComputerDeletedResponseSchema;
+var HubAssignmentStateSchema, HttpsOriginSchema, HubSignInClientSchema, HubAssignmentSchema, HubAssignmentConfirmRequestSchema, HubAssignmentConfirmResponseSchema, CloudComputerStateSchema, CloudComputerStopReasonSchema, CloudComputerSchema, CloudComputerListResponseSchema, CloudComputerCreateRequestSchema, CloudComputerCreateResponseSchema, CloudComputerTransitionResponseSchema, CloudComputerStartReasonSchema, CloudComputerStartRequestSchema, ViewerOpenResponseSchema, CloudComputerDeletedResponseSchema, AgentComputerLinkCodeSchema, AgentComputerLinkCodeRequestSchema, AgentComputerAssignmentSchema, AgentComputerActivityRequestSchema, HubNextWakeRequestSchema;
 var init_hubs = __esm({
   "../cloud-api/dist/hubs.js"() {
     "use strict";
@@ -110226,6 +110310,10 @@ var init_hubs = __esm({
     CloudComputerTransitionResponseSchema = external_exports.object({
       computer: CloudComputerSchema
     }).describe("The computer as it is after a start or stop was accepted.");
+    CloudComputerStartReasonSchema = external_exports.enum(["turn", "viewer", "beat"]).describe("Why a hub starts a computer: a turn, a viewer, or a beat. For metering only.");
+    CloudComputerStartRequestSchema = external_exports.object({
+      reason: tolerantEnum(CloudComputerStartReasonSchema).optional().describe("Why the computer is started, for metering. A reason this release does not know reads as unrecognised. Absent says nothing.")
+    }).describe("Start a cloud agent computer, optionally saying why. The body may be left out.");
     ViewerOpenResponseSchema = external_exports.object({
       commandId: IdSchema.describe("The command waiting for the computer: the `id` it will see on its stream."),
       queuedAt: TimestampSchema
@@ -110233,6 +110321,28 @@ var init_hubs = __esm({
     CloudComputerDeletedResponseSchema = external_exports.object({
       deletedAt: TimestampSchema
     }).describe("When the computer, its disk and its snapshots were deleted. Cannot be undone.");
+    AgentComputerLinkCodeSchema = external_exports.object({
+      code: external_exports.string().regex(/^[0-9A-HJKMNP-TV-Z]{16}$/, "must be 16 characters of uppercase Crockford base32, with no spaces or dashes").meta({
+        description: "The code itself: 16 characters of uppercase Crockford base32, 80 bits. Single use. Never log it or return it to a browser.",
+        [ONE_TIME_CREDENTIAL_META]: true
+      }),
+      expiresAt: TimestampSchema.describe("When the code stops working: at most ten minutes after the hub minted it.")
+    }).describe("A one-time code an agent computer links to its hub with. Single use, ten minutes at most, bound to one computer.");
+    AgentComputerLinkCodeRequestSchema = AgentComputerLinkCodeSchema.describe("The link code a hub minted for an agent computer on its account. Hub instance key only; answered 204.");
+    AgentComputerAssignmentSchema = external_exports.object({
+      computerId: IdSchema.describe("This computer, as the hub and `GET /v1/computers` name it."),
+      hubOrigin: HttpsOriginSchema.describe("Where this computer reaches its hub: an https origin with no path, through the hub`s front door."),
+      ownerAccountId: IdSchema.describe("The account id, at `issuer`, of the person the hub belongs to. Never an email, and never changes."),
+      issuer: HttpsUrlSchema.describe("The issuer `ownerAccountId` belongs to, compared exactly."),
+      linkCode: AgentComputerLinkCodeSchema.nullable().describe("The one-time code to redeem at the hub, or null when none is waiting. Handed out once."),
+      pollAfterSeconds: external_exports.number().int().positive().optional().describe("How long to wait before reading again when no command arrives. Absent leaves the wait to the computer.")
+    }).describe("Which hub an agent computer works for, and the code it links with. That computer`s instance key only; never cached by a proxy.");
+    AgentComputerActivityRequestSchema = external_exports.object({
+      busy: external_exports.boolean().describe("True while the computer is in the middle of work. Holds for ten minutes unless sent again.")
+    }).describe("Whether an agent computer is in the middle of work. That computer`s instance key only; answered 204.");
+    HubNextWakeRequestSchema = external_exports.object({
+      at: TimestampSchema.nullable().describe("When the hub next has a schedule due, or null when nothing is. More than 31 days ahead is ignored.")
+    }).describe("When a hub next needs waking for a due schedule. Hub instance key only; answered 204.");
   }
 });
 
@@ -122982,6 +123092,13 @@ var init_tasks = __esm({
        * what was approved, not an approval.
        */
       previousApprovalKey: text("previous_approval_key"),
+      /**
+       * The turn marks of the turn that created or last edited this schedule (DOR-3036,
+       * `specs/turn-marks`): JSON `{ outsider?: true, teammate?: [{ roomId, authorId, name?, room? }] }`,
+       * or NULL. A marked schedule parks for a person, whatever the trust preset, and its approval
+       * card names each mark and where it came from. A person's approval clears it.
+       */
+      originMarks: text("origin_marks"),
       /**
        * The agent's runtime, model or effort that changed outside DorkOS since this
        * schedule was approved, while the schedule follows the agent for that part
@@ -125324,6 +125441,13 @@ var init_rooms2 = __esm({
          * it rather than letting it ride into `RoomEntry`.
          */
         dispatchId: text("dispatch_id"),
+        /**
+         * The turn marks the post was written under (DOR-3036, `specs/turn-marks`): JSON
+         * `{ outsider?: true, teammate?: [{ roomId, authorId }] }`, `{}` for a known unmarked turn, and
+         * NULL when nobody knows (an unverified caller, a row from before this column). Kept so a
+         * restart does not read a teammate-marked agent post as merely an outsider's. Off the wire.
+         */
+        turnMarks: text("turn_marks"),
         /** The entry this one answers, in this same room. Null for a top-level entry. */
         parentEntryId: text("parent_entry_id"),
         /**
@@ -126279,6 +126403,8 @@ var init_notifications = __esm({
             "extension.approval",
             "extension.decision",
             "community.owner-replacement",
+            "community.teammate-limit",
+            "community.teammate-limits-reset",
             "heartbeat.credits-offer",
             "connector.destructive_pending",
             "connector.destructive_executed",
@@ -127282,7 +127408,13 @@ var init_commitments = __esm({
         /** When it left `open` (ISO 8601), or NULL while open. */
         closedAt: text("closed_at"),
         /** A short note on how it ended or why it moved, or NULL. */
-        note: text("note")
+        note: text("note"),
+        /**
+         * The turn marks the promise was made under (DOR-3036, `specs/turn-marks`): JSON
+         * `{ outsider?: true, teammate?: [{ roomId, authorId }] }`, or NULL for an unmarked turn. The
+         * beat its due date wakes carries them on, since it reads the promise's words.
+         */
+        originMarks: text("origin_marks")
       },
       (table2) => [
         index("commitments_agent_state_idx").on(table2.agentId, table2.state),
@@ -127501,7 +127633,8 @@ var init_remote_commands = __esm({
       "revoke",
       "inbox_pending",
       "viewer_open",
-      "hub_assignment_changed"
+      "hub_assignment_changed",
+      "agent_computer_assignment_changed"
     ];
     REMOTE_COMMAND_ACK_STATES = ["pending", "acked", "rejected", "unconfirmed"];
     remoteCommandJournal = sqliteTable(
@@ -127535,7 +127668,7 @@ var init_remote_commands = __esm({
         index("remote_command_journal_ack_idx").on(table2.ackState, table2.receivedAt),
         check3(
           "remote_command_journal_verb",
-          sql2`${table2.verb} IN ('open', 'close', 'rotate', 'revoke', 'inbox_pending', 'viewer_open', 'hub_assignment_changed')`
+          sql2`${table2.verb} IN ('open', 'close', 'rotate', 'revoke', 'inbox_pending', 'viewer_open', 'hub_assignment_changed', 'agent_computer_assignment_changed')`
         ),
         check3(
           "remote_command_journal_ack_state",
@@ -128961,6 +129094,17 @@ var init_session_route = __esm({
   }
 });
 
+// ../../apps/server/src/services/core/auth/sessions/live-connections.ts
+var ENDED_SESSION_MEMORY_MS, startedAt;
+var init_live_connections = __esm({
+  "../../apps/server/src/services/core/auth/sessions/live-connections.ts"() {
+    "use strict";
+    init_logger();
+    ENDED_SESSION_MEMORY_MS = 5 * 60 * 1e3;
+    startedAt = Date.now();
+  }
+});
+
 // ../../apps/server/src/services/core/auth/cookie-security.ts
 var AUTH_COOKIES_SECURE;
 var init_cookie_security = __esm({
@@ -128972,23 +129116,25 @@ var init_cookie_security = __esm({
 });
 
 // ../shared/src/session-relay.ts
-var SESSION_RELAY_MAX_FRAME_LENGTH, SESSION_RELAY_MAX_MESSAGE_LENGTH, SESSION_RELAY_MAX_CHATS, SESSION_RELAY_IDLE_CLOSE_MS, VersionSchema, RelayVersionRangeSchema, AdvertisedFeaturesSchema, RequestIdSchema, StreamIdSchema, SessionIdSchema, AgentIdSchema, ToolCallIdSchema, ResumeCursorSchema, NO_CONTROL, INVISIBLE, RelayDisplayNameSchema, RelayDeviceSchema, base64url3, ChatsListRequestSchema, SessionStreamRequestSchema, SessionSendRequestSchema, SessionInterruptRequestSchema, ApprovalDecisionSchema, InteractionChallengeRequestSchema, RelayApprovalProofSchema, InteractionAnswerSchema, InteractionRespondRequestSchema, RelayRequestSchema, RelayChatSummarySchema, RelayResultBodySchemas, RelayErrorSchema, exactBase64url, RelayEphemeralKeySchema, RelaySignatureSchema, RelayNonceSchema, RelayPinnedHubKeySchema, RelayHelloFrameSchema, RelayHandshakeAnswerSchema, RelaySealedFrameSchema, HeartbeatFrameSchema, RelayWebFrameSchema, RelayStreamFrameSchema, RelayComputerFrameSchema, RelayFinishFrameSchema;
+var SESSION_RELAY_MAX_FRAME_LENGTH, SESSION_RELAY_MAX_INNER_FRAME_BYTES, SESSION_RELAY_MAX_MESSAGE_LENGTH, RelayMessageContentSchema, SESSION_RELAY_MAX_CHATS, SESSION_RELAY_IDLE_CLOSE_MS, VersionSchema, RelayVersionRangeSchema, RelayAdvertisedFeaturesSchema, RelayRequestIdSchema, StreamIdSchema, RelaySessionIdSchema, RelayAgentIdSchema, ToolCallIdSchema, ResumeCursorSchema, NO_CONTROL, INVISIBLE, RelayDisplayNameSchema, RelayDeviceSchema, base64url3, ChatsListRequestSchema, SessionStreamRequestSchema, SessionSendRequestSchema, SessionInterruptRequestSchema, ApprovalDecisionSchema, InteractionChallengeRequestSchema, RelayApprovalProofSchema, InteractionAnswerSchema, InteractionRespondRequestSchema, RelayRequestSchema, RelayChatSummarySchema, RelayResultBodySchemas, RelayErrorSchema, exactBase64url, RelayEphemeralKeySchema, RelaySignatureSchema, RelayNonceSchema, RelayPinnedHubKeySchema, RelayHelloFrameSchema, RelayHandshakeAnswerSchema, RelaySealedFrameSchema, HeartbeatFrameSchema, RelayWebFrameSchema, RelayStreamFrameSchema, RelayComputerFrameSchema, RelayFinishFrameSchema;
 var init_session_relay = __esm({
   "../shared/src/session-relay.ts"() {
     "use strict";
     init_zod();
     init_schemas4();
     SESSION_RELAY_MAX_FRAME_LENGTH = 1048576;
+    SESSION_RELAY_MAX_INNER_FRAME_BYTES = Math.floor((SESSION_RELAY_MAX_FRAME_LENGTH - 64) * 3 / 4) - 16;
     SESSION_RELAY_MAX_MESSAGE_LENGTH = 2e5;
+    RelayMessageContentSchema = external_exports.string().min(1).max(SESSION_RELAY_MAX_MESSAGE_LENGTH);
     SESSION_RELAY_MAX_CHATS = 200;
     SESSION_RELAY_IDLE_CLOSE_MS = 3 * 60 * 1e3;
     VersionSchema = external_exports.number().int().positive();
     RelayVersionRangeSchema = external_exports.strictObject({ min: VersionSchema, max: VersionSchema }).refine((range) => range.min <= range.max, { message: "min must not exceed max" });
-    AdvertisedFeaturesSchema = external_exports.array(external_exports.string().min(1).max(64)).max(64);
-    RequestIdSchema = external_exports.string().min(1).max(64).regex(/^[\w.:-]+$/);
-    StreamIdSchema = RequestIdSchema;
-    SessionIdSchema = external_exports.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);
-    AgentIdSchema = external_exports.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+    RelayAdvertisedFeaturesSchema = external_exports.array(external_exports.string().min(1).max(64)).max(64);
+    RelayRequestIdSchema = external_exports.string().min(1).max(64).regex(/^[\w.:-]+$/);
+    StreamIdSchema = RelayRequestIdSchema;
+    RelaySessionIdSchema = external_exports.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);
+    RelayAgentIdSchema = external_exports.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/);
     ToolCallIdSchema = external_exports.string().min(1).max(256).regex(/^[\w.:-]+$/);
     ResumeCursorSchema = external_exports.string().max(256).regex(/^[0-9a-f-]+-\d+-g\d+-\d+$/);
     NO_CONTROL = /^[^\u0000-\u001f\u007f]*$/;
@@ -129001,36 +129147,36 @@ var init_session_relay = __esm({
     base64url3 = (max2) => external_exports.string().min(1).max(max2).regex(/^[A-Za-z0-9_-]+$/);
     ChatsListRequestSchema = external_exports.strictObject({
       op: external_exports.literal("chats.list"),
-      agentId: AgentIdSchema
+      agentId: RelayAgentIdSchema
     });
     SessionStreamRequestSchema = external_exports.strictObject({
       op: external_exports.literal("session.stream"),
       streamId: StreamIdSchema,
-      sessionId: SessionIdSchema,
+      sessionId: RelaySessionIdSchema,
       resume: ResumeCursorSchema.optional()
     });
     SessionSendRequestSchema = external_exports.strictObject({
       op: external_exports.literal("session.send"),
-      sessionId: SessionIdSchema,
-      content: external_exports.string().min(1).max(SESSION_RELAY_MAX_MESSAGE_LENGTH),
-      clientMessageId: RequestIdSchema.optional(),
+      sessionId: RelaySessionIdSchema,
+      content: RelayMessageContentSchema,
+      clientMessageId: RelayRequestIdSchema.optional(),
       disposition: MessageDispositionSchema.optional(),
-      newChat: external_exports.strictObject({ agentId: AgentIdSchema }).optional()
+      newChat: external_exports.strictObject({ agentId: RelayAgentIdSchema }).optional()
     });
     SessionInterruptRequestSchema = external_exports.strictObject({
       op: external_exports.literal("session.interrupt"),
-      sessionId: SessionIdSchema
+      sessionId: RelaySessionIdSchema
     });
     ApprovalDecisionSchema = external_exports.enum(["approve", "deny"]);
     InteractionChallengeRequestSchema = external_exports.strictObject({
       op: external_exports.literal("interaction.challenge"),
-      sessionId: SessionIdSchema,
+      sessionId: RelaySessionIdSchema,
       toolCallId: ToolCallIdSchema,
       decision: ApprovalDecisionSchema
     });
     RelayApprovalProofSchema = external_exports.strictObject({
       /** The `challengeId` the computer answered `interaction.challenge` with. */
-      challengeId: RequestIdSchema,
+      challengeId: RelayRequestIdSchema,
       credentialId: base64url3(1400),
       clientDataJSON: base64url3(4096),
       authenticatorData: base64url3(1024),
@@ -129057,7 +129203,7 @@ var init_session_relay = __esm({
     ]);
     InteractionRespondRequestSchema = external_exports.strictObject({
       op: external_exports.literal("interaction.respond"),
-      sessionId: SessionIdSchema,
+      sessionId: RelaySessionIdSchema,
       answer: InteractionAnswerSchema
     });
     RelayRequestSchema = external_exports.discriminatedUnion("op", [
@@ -129069,7 +129215,7 @@ var init_session_relay = __esm({
       InteractionRespondRequestSchema
     ]);
     RelayChatSummarySchema = external_exports.strictObject({
-      sessionId: SessionIdSchema,
+      sessionId: RelaySessionIdSchema,
       title: external_exports.string().max(500),
       updatedAt: external_exports.string().datetime(),
       lastMessagePreview: external_exports.string().max(500).optional()
@@ -129078,13 +129224,13 @@ var init_session_relay = __esm({
       "chats.list": external_exports.strictObject({
         chats: external_exports.array(RelayChatSummarySchema).max(SESSION_RELAY_MAX_CHATS)
       }),
-      "session.send": external_exports.strictObject({ sessionId: SessionIdSchema }),
+      "session.send": external_exports.strictObject({ sessionId: RelaySessionIdSchema }),
       "session.interrupt": external_exports.strictObject({
         receipt: InterruptReceiptSchema,
         cancelledQueued: external_exports.array(QueuedMessageSchema)
       }),
       "interaction.challenge": external_exports.strictObject({
-        challengeId: RequestIdSchema,
+        challengeId: RelayRequestIdSchema,
         /** The bytes to sign, base64url. Opaque to the web side. */
         challenge: base64url3(256),
         /** When the computer stops accepting a proof over it. */
@@ -129108,7 +129254,7 @@ var init_session_relay = __esm({
       /** The computer's id as its hub knows it. Proved by `finish`, never taken on trust. */
       computerId: external_exports.string().min(1).max(64).regex(/^[\w.:-]+$/),
       versions: RelayVersionRangeSchema,
-      features: AdvertisedFeaturesSchema,
+      features: RelayAdvertisedFeaturesSchema,
       /** The computer's DorkOS version, for "needs an update" copy. */
       appVersion: external_exports.string().min(1).max(64),
       nonce: RelayNonceSchema,
@@ -129142,7 +129288,7 @@ var init_session_relay = __esm({
        */
       external_exports.strictObject({
         type: external_exports.literal("request"),
-        id: RequestIdSchema,
+        id: RelayRequestIdSchema,
         request: RelayRequestSchema,
         /** The browser that asked; sent only to a computer that advertised `request.device`. */
         device: RelayDeviceSchema.optional()
@@ -129164,13 +129310,13 @@ var init_session_relay = __esm({
     RelayComputerFrameSchema = external_exports.discriminatedUnion("type", [
       external_exports.strictObject({
         type: external_exports.literal("result"),
-        id: RequestIdSchema,
+        id: RelayRequestIdSchema,
         ok: external_exports.literal(true),
         body: external_exports.unknown()
       }),
       external_exports.strictObject({
         type: external_exports.literal("error"),
-        id: RequestIdSchema,
+        id: RelayRequestIdSchema,
         ok: external_exports.literal(false),
         error: RelayErrorSchema
       }),
@@ -129326,6 +129472,7 @@ var init_session_gate = __esm({
     init_public_computer();
     init_session_relay_link();
     init_session_route();
+    init_live_connections();
   }
 });
 
@@ -129368,6 +129515,7 @@ var init_auth2 = __esm({
     init_seed_legacy_mcp_key();
     init_setup_code_gate();
     init_session_route();
+    init_live_connections();
     init_setup_code();
     init_cookie_security();
     init_session_gate();
@@ -129416,6 +129564,7 @@ function defuseSystemTags(text3, tagNames) {
 var IDENTITY_MAX_LENGTH, INVISIBLE_FORMAT, CONTROL_CHARS, PATTERN_CACHE;
 var init_untrusted_text = __esm({
   "../shared/src/untrusted-text.ts"() {
+    "use strict";
     IDENTITY_MAX_LENGTH = 80;
     INVISIBLE_FORMAT = /[\u00ad\u200b-\u200f\u202a-\u202e\u2060-\u2064\ufeff\ufff9-\ufffb]/g;
     CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g;
@@ -132699,40 +132848,6 @@ var init_agent_home = __esm({
   }
 });
 
-// ../../apps/server/src/services/core/turn-power/live-outsider-turns.ts
-function homeKey(dir, forAgent) {
-  try {
-    return homeOf(resolveAgentHome(dir, forAgent));
-  } catch {
-    return void 0;
-  }
-}
-function adjust(key, by) {
-  const next = (running.get(key) ?? 0) + by;
-  if (next > 0) running.set(key, next);
-  else running.delete(key);
-}
-function countWhileRunning(place2, events) {
-  const key = homeKey(place2.cwd, place2.forAgent) ?? UNPLACED;
-  return (async function* counted() {
-    adjust(key, 1);
-    try {
-      yield* events;
-    } finally {
-      adjust(key, -1);
-    }
-  })();
-}
-var UNPLACED, running;
-var init_live_outsider_turns = __esm({
-  "../../apps/server/src/services/core/turn-power/live-outsider-turns.ts"() {
-    "use strict";
-    init_agent_home();
-    UNPLACED = "";
-    running = /* @__PURE__ */ new Map();
-  }
-});
-
 // ../../apps/server/src/services/session/turn-identity/durable-rekey.ts
 var init_durable_rekey = __esm({
   "../../apps/server/src/services/session/turn-identity/durable-rekey.ts"() {
@@ -134694,6 +134809,260 @@ var init_session_key_registry = __esm({
   }
 });
 
+// ../../apps/server/src/services/session/origin/outsider-turns.ts
+import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
+function noteLatest(sessionId, outsider) {
+  const key = primaryOf(sessionId);
+  latest.set(key, outsider);
+  if (outsider) heard.add(key);
+}
+function isOutsiderOrigin(origin) {
+  if (origin.kind === "room") return origin.externalAuthor;
+  return OUTSIDER_ORIGIN_KINDS.has(origin.kind);
+}
+function noteTurnOrigin(sessionId, origin) {
+  const messageId = holdingFor.getStore();
+  if (messageId === void 0) {
+    noteLatest(sessionId, isOutsiderOrigin(origin));
+    return;
+  }
+  pending.set(messageId, isOutsiderOrigin(origin));
+  if (pending.size > PENDING_MAX) pending.delete(pending.keys().next().value);
+}
+function noteChatHeardOutsider(sessionId) {
+  heard.add(primaryOf(sessionId));
+}
+var OUTSIDER_ORIGIN_KINDS, latest, heard, pending, PENDING_MAX, holdingFor;
+var init_outsider_turns = __esm({
+  "../../apps/server/src/services/session/origin/outsider-turns.ts"() {
+    "use strict";
+    init_session_key_registry();
+    OUTSIDER_ORIGIN_KINDS = /* @__PURE__ */ new Set([
+      "relay-binding",
+      "outside-sender",
+      "connector-event"
+    ]);
+    latest = /* @__PURE__ */ new Map();
+    heard = /* @__PURE__ */ new Set();
+    pending = /* @__PURE__ */ new Map();
+    PENDING_MAX = 1e3;
+    holdingFor = new AsyncLocalStorage5();
+  }
+});
+
+// ../../apps/server/src/services/core/turn-power/live-outsider-turns.ts
+function homeKey(dir, forAgent) {
+  try {
+    return homeOf(resolveAgentHome(dir, forAgent));
+  } catch {
+    return void 0;
+  }
+}
+function countWhileRunning(place2, marks, events) {
+  const key = homeKey(place2.cwd, place2.forAgent) ?? UNPLACED;
+  return (async function* counted() {
+    const token = { marks };
+    const turns = running.get(key) ?? /* @__PURE__ */ new Set();
+    turns.add(token);
+    running.set(key, turns);
+    try {
+      yield* events;
+    } finally {
+      turns.delete(token);
+      if (turns.size === 0 && running.get(key) === turns) running.delete(key);
+    }
+  })();
+}
+var UNPLACED, running;
+var init_live_outsider_turns = __esm({
+  "../../apps/server/src/services/core/turn-power/live-outsider-turns.ts"() {
+    "use strict";
+    init_agent_home();
+    UNPLACED = "";
+    running = /* @__PURE__ */ new Map();
+  }
+});
+
+// ../../apps/server/src/services/core/turn-power/teammate-mark.ts
+function runsTeammateTurns(runtimeType) {
+  return TEAMMATE_TURN_RUNTIMES.has(runtimeType);
+}
+function teammateRuntimeRefusal(runtimeType) {
+  return `A teammate's message cannot start a turn on ${runtimeType} yet`;
+}
+function teammateTurnRefusal(runtimeType, origins) {
+  if (!runsTeammateTurns(runtimeType)) return teammateRuntimeRefusal(runtimeType);
+  const gate = spaceAllows;
+  if (gate && origins.some((origin) => !gate(origin.roomId))) return TEAMMATE_LIMIT_REFUSAL;
+  return null;
+}
+function teammateTurnOpts(opts) {
+  const { additionalDirectories: _granted, ...rest } = opts ?? {};
+  return {
+    ...rest,
+    teammate: true,
+    unattended: true,
+    permissionCeiling: withReadOnly(opts?.permissionCeiling),
+    ...opts?.roomTurn ? { roomTurn: { ...opts.roomTurn, teammate: true, untrustedText: true } } : {}
+  };
+}
+function withReadOnly(ceiling) {
+  if (ceiling === void 0) return READ_ONLY_LEVEL;
+  if (Array.isArray(ceiling) && ceiling.length === 0) return ["runtime-default", READ_ONLY_LEVEL];
+  const bounds = Array.isArray(ceiling) ? ceiling : [ceiling];
+  return [...bounds, READ_ONLY_LEVEL];
+}
+var TEAMMATE_TURN_RUNTIMES, TEAMMATE_LIMIT_REFUSAL, spaceAllows;
+var init_teammate_mark = __esm({
+  "../../apps/server/src/services/core/turn-power/teammate-mark.ts"() {
+    "use strict";
+    init_permission_semantics();
+    TEAMMATE_TURN_RUNTIMES = /* @__PURE__ */ new Set(["claude-code", "test-mode"]);
+    TEAMMATE_LIMIT_REFUSAL = "This space reached its monthly limit for teammates, so this turn didn\u2019t run.";
+    spaceAllows = null;
+  }
+});
+
+// ../../apps/server/src/services/core/turn-power/turn-marks.ts
+function presentKinds(marks) {
+  return TURN_MARK_KINDS.filter((kind) => marks[kind] !== void 0);
+}
+function marksFrom(fields) {
+  const kinds = presentKinds(fields);
+  if (kinds.length === 0) return NO_MARKS;
+  return Object.fromEntries(kinds.map((kind) => [kind, fields[kind]]));
+}
+function teammateOrigins(marks) {
+  return marks.teammate ?? [];
+}
+function marksOfLevel(level) {
+  return level === void 0 ? NO_MARKS : marksFrom(level);
+}
+function marksOfCeiling(ceiling) {
+  if (!Array.isArray(ceiling)) {
+    return ceiling === "runtime-default" ? UNKNOWN_SOURCE : marksOfLevel(ceiling);
+  }
+  const bounds = ceiling;
+  if (bounds.length === 0) return UNKNOWN_SOURCE;
+  return bounds.map(marksOfCeiling).reduce(mergeMarks, NO_MARKS);
+}
+function marksForTurn(opts) {
+  const fromCeiling = opts?.permissionCeiling !== void 0 ? marksOfCeiling(opts.permissionCeiling) : NO_MARKS;
+  return mergeMarks(
+    fromCeiling,
+    opts?.roomTurn?.outsiderInView === true ? { outsider: true } : NO_MARKS
+  );
+}
+function mergeMarks(a2, b2) {
+  const merged = {};
+  for (const kind of TURN_MARK_KINDS) {
+    const rules = RULES[kind];
+    const value = rules.merge(a2[kind], b2[kind]);
+    if (value !== void 0) merged[kind] = value;
+  }
+  return marksFrom(merged);
+}
+function hasMarks(marks) {
+  return presentKinds(marks).length > 0;
+}
+function carriesAllMarks(receiver, sender) {
+  return TURN_MARK_KINDS.every(
+    (kind) => RULES[kind].covers(receiver[kind], sender[kind])
+  );
+}
+function withMarks(level, marks) {
+  const own2 = marksOfLevel(level);
+  if (carriesAllMarks(own2, marks)) return level;
+  return { ...level, ...mergeMarks(own2, marks) };
+}
+async function* refused(reason) {
+  yield* [];
+  throw new Error(reason);
+}
+function placeOf(runtime, sessionId, opts) {
+  let cwd = opts?.cwd ?? opts?.roomTurn?.cwd;
+  try {
+    cwd ??= runtime.getSessionCwd?.(sessionId);
+  } catch {
+  }
+  return { cwd, forAgent: turnAgentOf(opts) };
+}
+function applyTurnMarks(runtime, marksOfSession, recordRefused) {
+  const places = /* @__PURE__ */ new Map();
+  function markedTurn(target, sessionId, opts, start) {
+    const marks = marksForTurn(opts);
+    if (!hasMarks(marks)) return start(opts);
+    if (marks.outsider === true) noteChatHeardOutsider(sessionId);
+    let sent = opts;
+    if (marks.teammate !== void 0) {
+      sent = teammateTurnOpts(opts);
+      const refusal2 = teammateTurnRefusal(target.type, marks.teammate);
+      if (refusal2 !== null) {
+        recordRefused?.(sessionId, sent);
+        return refused(refusal2);
+      }
+    }
+    const place2 = placeOf(target, sessionId, sent);
+    places.delete(sessionId);
+    places.set(sessionId, place2);
+    if (places.size > PLACE_MEMORY) places.delete(places.keys().next().value);
+    return countWhileRunning(place2, marks, start(sent));
+  }
+  return new Proxy(runtime, {
+    get(target, prop) {
+      if ((prop === "sendMessage" || prop === "executeCommandIntent") && typeof target[prop] === "function") {
+        const start = target[prop].bind(target);
+        return (sessionId, input4, opts) => markedTurn(target, sessionId, opts, (sent) => start(sessionId, input4, sent));
+      }
+      if (prop === "onRuntimeTurn" && typeof target.onRuntimeTurn === "function") {
+        const subscribe = target.onRuntimeTurn.bind(target);
+        return (listener) => subscribe((sessionId, events) => {
+          const marks = marksOfSession(sessionId);
+          listener(
+            sessionId,
+            hasMarks(marks) ? countWhileRunning(
+              places.get(sessionId) ?? placeOf(target, sessionId, void 0),
+              marks,
+              events
+            ) : events
+          );
+        });
+      }
+      const value = Reflect.get(target, prop, target);
+      return typeof value === "function" ? value.bind(target) : value;
+    }
+  });
+}
+var TURN_MARK_KINDS, NO_MARKS, PLACE_MEMORY, UNKNOWN_SOURCE, sameOrigin, RULES;
+var init_turn_marks = __esm({
+  "../../apps/server/src/services/core/turn-power/turn-marks.ts"() {
+    "use strict";
+    init_permission_semantics();
+    init_agent_home();
+    init_outsider_turns();
+    init_live_outsider_turns();
+    init_teammate_mark();
+    TURN_MARK_KINDS = [
+      "outsider",
+      "teammate"
+    ];
+    NO_MARKS = Object.freeze({});
+    PLACE_MEMORY = 1e4;
+    UNKNOWN_SOURCE = Object.freeze({ outsider: true });
+    sameOrigin = (a2, b2) => a2.roomId === b2.roomId && a2.authorId === b2.authorId;
+    RULES = {
+      outsider: {
+        merge: (a2, b2) => a2 === true || b2 === true ? true : void 0,
+        covers: (outer, inner) => inner !== true || outer === true
+      },
+      teammate: {
+        merge: (a2, b2) => mergeTeammateOrigins(a2, b2),
+        covers: (outer, inner) => inner === void 0 || outer !== void 0 && inner.every((origin) => outer.some((o3) => sameOrigin(o3, origin)))
+      }
+    };
+  }
+});
+
 // ../../apps/server/src/services/core/turn-power/turn-levels.ts
 function remember(map4, key, level) {
   map4.delete(key);
@@ -134703,10 +135072,11 @@ function remember(map4, key, level) {
     if (oldest !== void 0) map4.delete(oldest);
   }
 }
+function lastTurnLevelOf(sessionId) {
+  return turnLevels.get(sessionId);
+}
 function levelForTurn(runtime, stored, opts) {
-  const level = powerForTurn(runtime, stored, opts);
-  const outsider = opts?.roomTurn?.outsiderInView === true || opts?.permissionCeiling !== void 0 && ceilingCarriesOutsider(opts.permissionCeiling);
-  return outsider && !level.outsider ? { ...level, outsider: true } : level;
+  return withMarks(powerForTurn(runtime, stored, opts), marksForTurn(opts));
 }
 function powerForTurn(runtime, stored, opts) {
   let declared;
@@ -134722,18 +135092,26 @@ function powerForTurn(runtime, stored, opts) {
   const base = known.length > 0 ? known.reduce(stricterLevel) : levelOfMode(declared, declared.default) ?? READ_ONLY_LEVEL;
   return opts?.permissionCeiling !== void 0 ? stricterLevel(base, resolveCeilingLevel(declared, opts.permissionCeiling)) : base;
 }
-function placeOf(runtime, sessionId, opts) {
-  let cwd = opts?.cwd ?? opts?.roomTurn?.cwd;
-  try {
-    cwd ??= runtime.getSessionCwd?.(sessionId);
-  } catch {
-  }
-  return { cwd, forAgent: turnAgentOf(opts) };
-}
 function recordTurnLevels(runtime, storedModeOf) {
+  return applyTurnMarks(
+    recordLevels(runtime, storedModeOf),
+    (sessionId) => marksOfLevel(turnLevels.get(sessionId)),
+    (sessionId, opts) => {
+      let stored;
+      try {
+        stored = storedModeOf(sessionId);
+      } catch {
+        stored = void 0;
+      }
+      remember(turnLevels, sessionId, levelForTurn(runtime, stored, opts));
+    }
+  );
+}
+function recordLevels(runtime, storedModeOf) {
   return new Proxy(runtime, {
     get(target, prop) {
-      if (prop === "sendMessage") {
+      if ((prop === "sendMessage" || prop === "executeCommandIntent") && typeof target[prop] === "function") {
+        const start = target[prop].bind(target);
         return (sessionId, content, opts) => {
           let stored;
           try {
@@ -134741,8 +135119,7 @@ function recordTurnLevels(runtime, storedModeOf) {
           } catch {
             stored = void 0;
           }
-          const level = levelForTurn(target, stored, opts);
-          remember(turnLevels, sessionId, level);
+          remember(turnLevels, sessionId, levelForTurn(target, stored, opts));
           const serial = ++nextTurnSerial;
           for (const id of /* @__PURE__ */ new Set([sessionId, primaryOf(sessionId)])) {
             turnSerials.delete(id);
@@ -134751,47 +135128,26 @@ function recordTurnLevels(runtime, storedModeOf) {
           while (turnSerials.size > TURN_LEVEL_MEMORY) {
             turnSerials.delete(turnSerials.keys().next().value);
           }
-          const events = target.sendMessage(sessionId, content, opts);
-          if (!level.outsider) return events;
-          const place2 = placeOf(target, sessionId, opts);
-          outsiderPlaces.delete(sessionId);
-          outsiderPlaces.set(sessionId, place2);
-          if (outsiderPlaces.size > TURN_LEVEL_MEMORY) {
-            outsiderPlaces.delete(outsiderPlaces.keys().next().value);
-          }
-          return countWhileRunning(place2, events);
+          return start(sessionId, content, opts);
         };
       }
-      if (prop === "onRuntimeTurn" && typeof target.onRuntimeTurn === "function") {
-        const subscribe = target.onRuntimeTurn.bind(target);
-        return (listener) => subscribe(
-          (sessionId, events) => listener(
-            sessionId,
-            turnLevels.get(sessionId)?.outsider ? countWhileRunning(
-              outsiderPlaces.get(sessionId) ?? placeOf(target, sessionId, void 0),
-              events
-            ) : events
-          )
-        );
-      }
       const value = Reflect.get(target, prop, target);
       return typeof value === "function" ? value.bind(target) : value;
     }
   });
 }
-var TURN_LEVEL_MEMORY, AUTO_MODE_ID2, AUTO_FALLBACK_MODE_ID, turnLevels, outsiderPlaces, turnSerials, nextTurnSerial;
+var TURN_LEVEL_MEMORY, AUTO_MODE_ID2, AUTO_FALLBACK_MODE_ID, turnLevels, turnSerials, nextTurnSerial;
 var init_turn_levels = __esm({
   "../../apps/server/src/services/core/turn-power/turn-levels.ts"() {
     "use strict";
-    init_agent_home();
-    init_live_outsider_turns();
+    init_turn_marks();
     init_session_key_registry();
+    init_outsider_turns();
     init_permission_semantics();
     TURN_LEVEL_MEMORY = 1e4;
     AUTO_MODE_ID2 = "auto";
     AUTO_FALLBACK_MODE_ID = "default";
     turnLevels = /* @__PURE__ */ new Map();
-    outsiderPlaces = /* @__PURE__ */ new Map();
     turnSerials = /* @__PURE__ */ new Map();
     nextTurnSerial = 0;
   }
@@ -134904,38 +135260,6 @@ var init_resolve_session_defaults = __esm({
   }
 });
 
-// ../../apps/server/src/services/session/origin/outsider-turns.ts
-import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
-function isOutsiderOrigin(origin) {
-  if (origin.kind === "room") return origin.externalAuthor;
-  return OUTSIDER_ORIGIN_KINDS.has(origin.kind);
-}
-function noteTurnOrigin(sessionId, origin) {
-  const messageId = holdingFor.getStore();
-  if (messageId === void 0) {
-    latest.set(primaryOf(sessionId), isOutsiderOrigin(origin));
-    return;
-  }
-  pending.set(messageId, isOutsiderOrigin(origin));
-  if (pending.size > PENDING_MAX) pending.delete(pending.keys().next().value);
-}
-var OUTSIDER_ORIGIN_KINDS, latest, pending, PENDING_MAX, holdingFor;
-var init_outsider_turns = __esm({
-  "../../apps/server/src/services/session/origin/outsider-turns.ts"() {
-    "use strict";
-    init_session_key_registry();
-    OUTSIDER_ORIGIN_KINDS = /* @__PURE__ */ new Set([
-      "relay-binding",
-      "outside-sender",
-      "connector-event"
-    ]);
-    latest = /* @__PURE__ */ new Map();
-    pending = /* @__PURE__ */ new Map();
-    PENDING_MAX = 1e3;
-    holdingFor = new AsyncLocalStorage5();
-  }
-});
-
 // ../../apps/server/src/services/session/origin/turn-origin.ts
 function permissionSeedForOrigin(origin) {
   switch (origin.kind) {
@@ -134980,8 +135304,12 @@ function permissionSeedForOrigin(origin) {
     // own: the turn runs at the stricter of the two. On insert only, so an
     // existing chat a person set keeps what they chose. A person who later
     // types into it gets the same stop a chat of their own starts at.
+    //
+    // A message from a MARKED turn seeds nothing (DOR-3107, Security): the
+    // chat it opens never inherits the agent's own level from a turn a
+    // stranger's words reached.
     case "chat-message":
-      return "configured-stop-on-insert";
+      return origin.marked ? "none" : "configured-stop-on-insert";
     // Everything below seeds nothing, for two different reasons.
     //
     // A schedule's power is already decided and already stored, on the schedule
@@ -135205,6 +135533,16 @@ var init_otel = __esm({
 });
 
 // ../../apps/server/src/services/observability/ai-metadata.ts
+function turnCostOf(runtimeType, state) {
+  return state.turnCostUsd ?? (RUNNING_COST_RUNTIMES.has(runtimeType) ? void 0 : state.costUsd);
+}
+function turnCostReader(runtimeType) {
+  const state = {};
+  return {
+    see: (event) => harvestEvent(event, state),
+    costUsd: () => turnCostOf(runtimeType, state)
+  };
+}
 function isAiObservabilityActive() {
   return isTracingEnabled() || bridge !== null;
 }
@@ -135223,7 +135561,7 @@ async function* observeRuntimeTurn(runtimeType, sessionId, source) {
     [ATTR.RUNTIME]: runtimeType,
     [ATTR.SESSION_ID]: sessionId
   }) : null;
-  const startedAt = Date.now();
+  const startedAt2 = Date.now();
   const state = {};
   let count2 = 0;
   try {
@@ -135236,8 +135574,8 @@ async function* observeRuntimeTurn(runtimeType, sessionId, source) {
     span?.markError();
     throw err;
   } finally {
-    const latencyMs = Date.now() - startedAt;
-    const costUsd = state.turnCostUsd ?? (RUNNING_COST_RUNTIMES.has(runtimeType) ? void 0 : state.costUsd);
+    const latencyMs = Date.now() - startedAt2;
+    const costUsd = turnCostOf(runtimeType, state);
     if (span) {
       span.setAttr(ATTR.EVENT_COUNT, count2);
       span.setAttr(ATTR.GEN_AI_SYSTEM, runtimeType);
@@ -135422,7 +135760,7 @@ function accountOf(runtime, sessionId) {
   }
 }
 async function* watchTurn(runtime, sessionId, source) {
-  const startedAt = Date.now();
+  const startedAt2 = Date.now();
   let sawAuthError = false;
   let reachedProvider = false;
   try {
@@ -135448,7 +135786,7 @@ async function* watchTurn(runtime, sessionId, source) {
     throw err;
   }
   if (!sawAuthError && reachedProvider) {
-    noteSigninRecovery(runtime.type, accountOf(runtime, sessionId), startedAt);
+    noteSigninRecovery(runtime.type, accountOf(runtime, sessionId), startedAt2);
   }
 }
 function watchRuntimeSignin(runtime) {
@@ -136356,6 +136694,93 @@ var init_hold_during_turn = __esm({
   }
 });
 
+// ../../apps/server/src/services/core/turn-power/teammate-turn-cost.ts
+function meterTeammateTurns(runtime) {
+  return new Proxy(runtime, {
+    get(target, prop) {
+      if ((prop === "sendMessage" || prop === "executeCommandIntent") && typeof target[prop] === "function") {
+        const start = target[prop].bind(target);
+        return (sessionId, input4, opts) => {
+          const turn = start(sessionId, input4, opts);
+          const rooms2 = teammateRoomsOf(opts);
+          return rooms2.length === 0 ? turn : metered(target.type, rooms2, turn);
+        };
+      }
+      if (prop === "onRuntimeTurn" && typeof target.onRuntimeTurn === "function") {
+        const subscribe = target.onRuntimeTurn.bind(target);
+        return (listener) => subscribe((sessionId, events) => {
+          const rooms2 = sessionTeammateRooms(sessionId);
+          listener(
+            sessionId,
+            rooms2.length === 0 ? events : metered(target.type, rooms2, toGenerator(events))
+          );
+        });
+      }
+      const value = Reflect.get(target, prop, target);
+      return typeof value === "function" ? value.bind(target) : value;
+    }
+  });
+}
+function sessionTeammateRooms(sessionId) {
+  const rooms2 = teammateOrigins(marksOfLevel(lastTurnLevelOf(sessionId))).map((o3) => o3.roomId);
+  return [...new Set(rooms2)];
+}
+async function* toGenerator(events) {
+  yield* events;
+}
+function teammateRoomsOf(opts) {
+  const rooms2 = teammateOrigins(marksForTurn(opts)).map((origin) => origin.roomId);
+  if (opts?.roomTurn?.teammate === true) rooms2.push(opts.roomTurn.roomId);
+  return [...new Set(rooms2)];
+}
+function answered(event) {
+  if (event.type === "text_delta" || event.type === "tool_call_start") return true;
+  if (event.type !== "session_status") return false;
+  const data = event.data;
+  return ["turnInputTokens", "turnOutputTokens", "turnCostUsd", "costUsd"].some(
+    (field) => typeof data[field] === "number"
+  );
+}
+async function* metered(runtimeType, rooms2, source) {
+  const cost = turnCostReader(runtimeType);
+  let ran = false;
+  let failed = false;
+  try {
+    for await (const event of source) {
+      cost.see(event);
+      if (answered(event)) ran = true;
+      else if (event.type === "error") failed = true;
+      yield event;
+    }
+  } catch (error63) {
+    failed = true;
+    throw error63;
+  } finally {
+    const costUsd = failed && !ran ? 0 : cost.costUsd();
+    for (const roomId of rooms2) {
+      try {
+        sink2?.({ roomId, costUsd });
+      } catch (error63) {
+        logger.warn("[teammate-turn-cost] Could not count a teammate turn", {
+          roomId,
+          error: error63 instanceof Error ? error63.message : String(error63)
+        });
+      }
+    }
+  }
+}
+var sink2;
+var init_teammate_turn_cost = __esm({
+  "../../apps/server/src/services/core/turn-power/teammate-turn-cost.ts"() {
+    "use strict";
+    init_logger();
+    init_ai_metadata();
+    init_turn_marks();
+    init_turn_levels();
+    sink2 = null;
+  }
+});
+
 // ../../apps/server/src/services/runtimes/shared/dorkos-tool-names.ts
 var DORKOS_MCP_SERVER_NAME, CODEX_DORKOS_TOOL_PREFIX, OPENCODE_DORKOS_TOOL_PREFIX, CLAUDE_CODE_DORKOS_TOOL_PREFIX;
 var init_dorkos_tool_names = __esm({
@@ -137331,7 +137756,7 @@ async function* untilPaused(runtime, pauses, turn, events) {
     yield event;
   }
 }
-function refused(error63) {
+function refused2(error63) {
   return (async function* () {
     yield* [];
     throw error63;
@@ -137350,7 +137775,7 @@ function holdOrRun(runtime, sessionId, opts, run) {
   const paused2 = pauses.pausedAgentOfSession(sessionId, storedCwdOf(runtime, sessionId), opts);
   if (paused2) {
     pauses.recordHeld(paused2, { via: "turn", sessionId, runtime: runtime.type });
-    return refused(new AgentPausedError(paused2));
+    return refused2(new AgentPausedError(paused2));
   }
   const turn = {
     sessionId,
@@ -137444,7 +137869,11 @@ var init_hold_paused_turns = __esm({
 function decorateRuntime(runtime, storedModeOf) {
   return holdPausedAgents(
     holdAwakeDuringTurns(
-      recordToolUse(watchRuntimeSignin(traceRuntime(recordTurnLevels(runtime, storedModeOf)))),
+      recordToolUse(
+        watchRuntimeSignin(
+          traceRuntime(meterTeammateTurns(recordTurnLevels(runtime, storedModeOf)))
+        )
+      ),
       keepAwakeService,
       (sessionId) => isSessionPaused(runtime, sessionId)
     )
@@ -137456,6 +137885,7 @@ var init_decorate_runtime = __esm({
     init_observability();
     init_hold_during_turn();
     init_turn_levels();
+    init_teammate_turn_cost();
     init_record_tool_use();
     init_hold_paused_turns();
     init_keep_awake_service();
@@ -138973,11 +139403,11 @@ function createProjectRootResolver(overrides = {}) {
     const previousMisses = byCwd.get(key)?.misses ?? 0;
     const entry = {
       misses: previousMisses,
-      root: lookups.run(() => lookUp(key)).then(({ root, answered }) => {
+      root: lookups.run(() => lookUp(key)).then(({ root, answered: answered2 }) => {
         entry.settled = { root };
         if (root === null) {
-          if (answered) entry.misses = previousMisses + 1;
-          entry.retryAt = deps.now() + (answered ? negativeTtl(entry.misses) : NEGATIVE_ROOT_TTL_MS);
+          if (answered2) entry.misses = previousMisses + 1;
+          entry.retryAt = deps.now() + (answered2 ? negativeTtl(entry.misses) : NEGATIVE_ROOT_TTL_MS);
         }
         return root;
       })
@@ -140935,57 +141365,57 @@ function isHookProjectionApproved(request, decisions = storedHookDecisions()) {
 function isHookProjectionRefused(request, decisions = storedHookDecisions()) {
   return decisions.refused.includes(hookApprovalEntry(request));
 }
-function writeDecisions(reason, approved, refused2) {
+function writeDecisions(reason, approved, refused3) {
   const harness = configManager.get("harness");
   const sameApproved = approved.length === harness.approvedHooks.length && approved.every((entry, i2) => entry === harness.approvedHooks[i2]);
-  const sameRefused = refused2.length === harness.refusedHooks.length && refused2.every((entry, i2) => entry === harness.refusedHooks[i2]);
+  const sameRefused = refused3.length === harness.refusedHooks.length && refused3.every((entry, i2) => entry === harness.refusedHooks[i2]);
   if (sameApproved && sameRefused) return;
-  configManager.set("harness", { ...harness, approvedHooks: approved, refusedHooks: refused2 });
+  configManager.set("harness", { ...harness, approvedHooks: approved, refusedHooks: refused3 });
   logConfigWrite(reason, "harness", harness, configManager.get("harness"));
 }
 function recordHookApproval(request) {
   recordApprovedEntry(hookApprovalEntry(request), "approving a package hook");
 }
 function recordApprovedEntry(entry, reason, replacing = () => false) {
-  const { approved, refused: refused2 } = storedHookDecisions();
+  const { approved, refused: refused3 } = storedHookDecisions();
   const kept = approved.filter((stored) => stored === entry || !replacing(stored));
   writeDecisions(
     reason,
     kept.includes(entry) ? kept : [...kept, entry],
-    refused2.filter((stored) => stored !== entry)
+    refused3.filter((stored) => stored !== entry)
   );
 }
 function forgetApprovedEntries(matches, reason) {
-  const { approved, refused: refused2 } = storedHookDecisions();
+  const { approved, refused: refused3 } = storedHookDecisions();
   writeDecisions(
     reason,
     approved.filter((stored) => !matches(stored)),
-    [...refused2]
+    [...refused3]
   );
 }
 function recordRefusedEntry(entry, reason) {
-  const { approved, refused: refused2 } = storedHookDecisions();
+  const { approved, refused: refused3 } = storedHookDecisions();
   writeDecisions(
     reason,
     approved.filter((stored) => stored !== entry),
-    refused2.includes(entry) ? [...refused2] : [...refused2, entry]
+    refused3.includes(entry) ? [...refused3] : [...refused3, entry]
   );
 }
 function recordHookRefusal(request) {
   recordRefusedEntry(hookApprovalEntry(request), "turning down a package hook");
 }
 function revokeHookDecisions(packageName) {
-  const { approved, refused: refused2 } = storedHookDecisions();
+  const { approved, refused: refused3 } = storedHookDecisions();
   const mine = (entry) => hookEntryPackageName(entry) === packageName;
   const removed = [
     ...approved.filter(mine).map((entry) => ({ entry, decision: "approved" })),
-    ...refused2.filter(mine).map((entry) => ({ entry, decision: "refused" }))
+    ...refused3.filter(mine).map((entry) => ({ entry, decision: "refused" }))
   ];
   if (removed.length === 0) return [];
   writeDecisions(
     "revoking a package hook decision",
     approved.filter((entry) => !mine(entry)),
-    refused2.filter((entry) => !mine(entry))
+    refused3.filter((entry) => !mine(entry))
   );
   return removed;
 }
@@ -151738,7 +152168,6 @@ function writeGlobalSharing(harnesses, reason, now3 = /* @__PURE__ */ new Date()
 var NOTHING_SHARED;
 var init_global_scope = __esm({
   "../../apps/server/src/services/harness/global-scope.ts"() {
-    "use strict";
     init_src5();
     init_config_schema();
     init_boundary();
@@ -154445,7 +154874,7 @@ function parseHarnessHooksArgs(rawArgs) {
   return { list: Boolean(values2.list) || revoke === void 0, revoke };
 }
 async function listDecisions(dorkHome) {
-  const { approved, refused: refused2, unreadable } = await readStoredDecisions(dorkHome);
+  const { approved, refused: refused3, unreadable } = await readStoredDecisions(dorkHome);
   if (unreadable !== void 0) {
     console.error(`DorkOS could not read ${configPathFor(dorkHome)}: ${unreadable}`);
     console.error(
@@ -154453,7 +154882,7 @@ async function listDecisions(dorkHome) {
     );
     return 1;
   }
-  if (approved.length === 0 && refused2.length === 0) {
+  if (approved.length === 0 && refused3.length === 0) {
     console.log("No hook decisions stored yet.");
     console.log(
       "  A package that ships hooks is held back until you allow it, and nothing here has been asked about."
@@ -154473,7 +154902,7 @@ async function listDecisions(dorkHome) {
   console.log(`Hook decisions stored in ${configPathFor(dorkHome)}:`);
   for (const [heading, entries] of [
     ["Allowed to run commands", approved],
-    ["Turned down", refused2]
+    ["Turned down", refused3]
   ]) {
     if (entries.length === 0) continue;
     console.log("");
@@ -158198,7 +158627,7 @@ function createInstallationTransaction(configuration, dependencies, generation3)
       check4(bounds, options.signal);
       const candidate = reuse ? await fs40.bindExistingCandidate(reservation, attempt, reserved.installation) : await fs40.stageCandidate(reservation, attempt);
       require2(sameBinding(candidate.binding, binding) && candidate.reuse === reuse, "BINDING_MISMATCH");
-      const sink2 = fs40.createJobSink(reservation, attempt);
+      const sink3 = fs40.createJobSink(reservation, attempt);
       let installer = {
         kind: "not-invoked"
       };
@@ -158211,7 +158640,7 @@ function createInstallationTransaction(configuration, dependencies, generation3)
           attempt,
           candidate,
           library,
-          sink: sink2,
+          sink: sink3,
           signal: options.signal
         });
         const facts = jobReturned(run, "official-install", binding, bounds, [
@@ -158260,7 +158689,7 @@ function createInstallationTransaction(configuration, dependencies, generation3)
         attempt,
         candidate,
         library,
-        sink: sink2,
+        sink: sink3,
         request,
         signal: options.signal
       });
@@ -162774,11 +163203,11 @@ function runProviderCommand(options) {
       if (code !== 0) {
         const errorOutput = Buffer.concat(stderrHead);
         const text3 = errorOutput.toString("utf8");
-        const refused2 = isProviderAccessRefusal(text3);
+        const refused3 = isProviderAccessRefusal(text3);
         const keyKindLimited = isProviderKeyKindLimit(text3);
         errorOutput.fill(0);
         scrubStdout();
-        return reject(new ProviderCommandError("EXIT", refused2, keyKindLimited));
+        return reject(new ProviderCommandError("EXIT", refused3, keyKindLimited));
       }
       const output2 = Buffer.concat(stdout3);
       try {
@@ -162826,12 +163255,12 @@ var init_provider_process = __esm({
        * @param refused - Whether the service definitely refused the credential.
        * @param keyKindLimited - Whether the endpoint does not serve this kind of key.
        */
-      constructor(code, refused2 = false, keyKindLimited = false) {
+      constructor(code, refused3 = false, keyKindLimited = false) {
         super(`Provider command failed (${code})`);
         this.name = "ProviderCommandError";
         this.code = code;
-        this.refused = code === "EXIT" && refused2;
-        this.keyKindLimited = code === "EXIT" && !refused2 && keyKindLimited;
+        this.refused = code === "EXIT" && refused3;
+        this.keyKindLimited = code === "EXIT" && !refused3 && keyKindLimited;
       }
     };
   }
@@ -163873,7 +164302,7 @@ async function createFlyApp(options, appName, organizationSlug, network, readPro
   const app = parseInput2(ExternalIdentifierSchema, appName);
   const organization2 = parseInput2(ExternalIdentifierSchema, organizationSlug);
   const networkName = parseInput2(ExternalIdentifierSchema, network);
-  let refused2 = false;
+  let refused3 = false;
   const created = await runProviderMutation({
     ...options,
     timeoutMs: writeDeadline(options.timeoutMs),
@@ -163905,14 +164334,14 @@ async function createFlyApp(options, appName, organizationSlug, network, readPro
     }
   }).catch((error63) => {
     if (!(error63 instanceof ProviderMutationError) || error63.code !== "ACCESS_DENIED") throw error63;
-    refused2 = true;
+    refused3 = true;
     return null;
   });
   if (created) return created;
   const found = await readProvenance(app).catch(() => {
     throw new ProviderMutationError("CREATION_OUTCOME_UNCERTAIN");
   });
-  if (refused2 && found === FLY_APP_NOT_FOUND) {
+  if (refused3 && found === FLY_APP_NOT_FOUND) {
     const listed2 = await readFlyApps(options, organization2).catch(() => null);
     if (listed2 !== null && !listed2.some((listedApp) => listedApp.name === app)) {
       throw new ProviderMutationError("ACCESS_DENIED");
@@ -170039,12 +170468,16 @@ async function runAuthEnable(deps) {
     io.error("A password is required.");
     return 1;
   }
+  let signUpToken;
   try {
-    await auth.api.signUpEmail({ body: { name: "", email: email3, password } });
+    ({ token: signUpToken } = await auth.api.signUpEmail({
+      body: { name: "", email: email3, password }
+    }));
   } catch (err) {
     io.error(`Could not create the owner account: ${errorMessage(err)}`);
     return 1;
   }
+  if (signUpToken) await (await auth.$context).internalAdapter.deleteSession(signUpToken);
   configStore.setDot("auth.enabled", true);
   io.log(`Owner account created for ${email3}.`);
   io.log("This computer now asks for a password too. Other devices always do.");
@@ -170092,9 +170525,9 @@ async function runAuthResetPassword(deps) {
   io.log(
     `Signed out everywhere (${signedOut} ${signedOut === 1 ? "sign-in" : "sign-ins"} ended). Sign in again with the new password.`
   );
+  io.log("A running DorkOS closes their open chat streams and terminals within a minute.");
   io.log("What this cannot cut off yet:");
   io.log("  - a window already open may keep working for up to 5 minutes;");
-  io.log("  - live chat streams and terminals stay open until they reconnect;");
   io.log("  - API keys keep working. Revoke them in Settings > Login & security.");
   return 0;
 }
@@ -172677,6 +173110,40 @@ Examples:
   }
 });
 
+// src/commands/permission-undo-rows.ts
+function valueText(value, key, labels) {
+  if (key.kind === "chat") return chatModeWord(value);
+  if (value === null) return "not set";
+  const words = key.kind === "files" ? labels.stop : key.kind === "preset" ? labels.preset : labels.state;
+  return words[value] ?? value;
+}
+function settingText(key) {
+  switch (key.kind) {
+    case "area":
+      return key.area;
+    case "action":
+      return key.action;
+    case "files":
+      return `files${key.runtime ? ` (${key.runtime})` : ""}`;
+    case "chat":
+      return `chat ${key.sessionId.slice(0, 8)}`;
+    case "preset":
+      return "preset";
+  }
+}
+function skipRow(skip, labels) {
+  const { change } = skip;
+  const who = change.target.kind === "agent" ? change.target.agentName : "Everyone";
+  const why = skip.reason === "changed-since" ? `changed since: now ${valueText(skip.current, change.key, labels)}` : skip.reason === "floor" ? change.key.kind === "chat" ? "would loosen the chat" : "would set something that always asks to Allowed" : "no longer exists";
+  return [who, settingText(change.key), valueText(change.before, change.key, labels), why];
+}
+var init_permission_undo_rows = __esm({
+  "src/commands/permission-undo-rows.ts"() {
+    "use strict";
+    init_permissions();
+  }
+});
+
 // src/commands/permissions.ts
 var permissions_exports = {};
 __export(permissions_exports, {
@@ -172969,18 +173436,6 @@ function defaultKeyOf(target, overview) {
   const area = overview.areas.find((a2) => a2.actions.some((action) => action.id === target.id));
   return area ? { kind: "action", action: target.id, area: area.id } : void 0;
 }
-function valueText(value, key) {
-  if (value === null) return "not set";
-  const labels = key.kind === "files" ? STOP_LABEL : key.kind === "preset" ? PRESET_LABEL : STATE_LABEL;
-  return labels[value] ?? value;
-}
-function skipRow(skip) {
-  const { change } = skip;
-  const who = change.target.kind === "agent" ? change.target.agentName : "Everyone";
-  const what = change.key.kind === "area" ? change.key.area : change.key.kind === "action" ? change.key.action : change.key.kind === "files" ? `files${change.key.runtime ? ` (${change.key.runtime})` : ""}` : "preset";
-  const why = skip.reason === "changed-since" ? `changed since: now ${valueText(skip.current, change.key)}` : skip.reason === "floor" ? "would set something that always asks to Allowed" : "no longer exists";
-  return [who, what, valueText(change.before, change.key), why];
-}
 async function runPermissionsUndo(rawArgs) {
   const { values: values2, positionals: positionals2 } = parseArgs27({
     args: rawArgs,
@@ -173013,7 +173468,12 @@ async function runPermissionsUndo(rawArgs) {
     );
     if (result2.skipped.length > 0) {
       console.log("Left alone:");
-      console.log(renderTable(["FOR", "SETTING", "WOULD SET", "WHY"], result2.skipped.map(skipRow)));
+      console.log(
+        renderTable(
+          ["FOR", "SETTING", "WOULD SET", "WHY"],
+          result2.skipped.map((skip) => skipRow(skip, UNDO_LABELS))
+        )
+      );
     }
     return 0;
   } catch (err) {
@@ -173021,7 +173481,12 @@ async function runPermissionsUndo(rawArgs) {
     if (err instanceof ApiError && err.body.code === "UNDO_CONFLICT") {
       const conflicts = err.body.conflicts ?? [];
       if (conflicts.length > 0) {
-        console.error(renderTable(["FOR", "SETTING", "WOULD SET", "WHY"], conflicts.map(skipRow)));
+        console.error(
+          renderTable(
+            ["FOR", "SETTING", "WOULD SET", "WHY"],
+            conflicts.map((skip) => skipRow(skip, UNDO_LABELS))
+          )
+        );
       }
       console.error(`Run \`dorkos permissions undo ${eventId} --force\` to set it back anyway.`);
     }
@@ -173113,11 +173578,12 @@ ${usage}`);
     return 1;
   }
 }
-var PERMISSIONS_HELP, AGENT_PERMISSIONS_HELP, PRESET_LABEL, STOP_LABEL, STATE_LABEL;
+var PERMISSIONS_HELP, AGENT_PERMISSIONS_HELP, PRESET_LABEL, STOP_LABEL, STATE_LABEL, UNDO_LABELS;
 var init_permissions2 = __esm({
   "src/commands/permissions.ts"() {
     "use strict";
     init_permissions();
+    init_permission_undo_rows();
     init_api_client();
     init_operator_output();
     PERMISSIONS_HELP = `Usage: dorkos permissions <subcommand> [options]
@@ -173184,6 +173650,7 @@ Examples:
       ask: "Ask",
       allowed: "Allowed"
     };
+    UNDO_LABELS = { stop: STOP_LABEL, preset: PRESET_LABEL, state: STATE_LABEL };
   }
 });
 
@@ -176836,7 +177303,7 @@ if (process.argv[2] === "community") {
     );
     Object.assign(childEnv, credentialEnv.pickCommunityCredentialEnv(rawProcessEnv));
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.123.0",
+      cliVersion: "0.124.0",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -176854,7 +177321,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.123.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.124.0" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -176864,7 +177331,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.123.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.124.0", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -176963,7 +177430,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.123.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.124.0", DORK_HOME, subArgs));
 }
 var { values, positionals } = parseCliArgs();
 if (positionals[0] && !knownCommands.has(positionals[0])) {
@@ -177057,14 +177524,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.123.0");
+  console.log("0.124.0");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.123.0"}`);
+  console.log(`dorkos ${"0.124.0"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -177212,7 +177679,7 @@ if (fs39.existsSync(envPath)) {
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath7(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.123.0";
+process.env.DORKOS_CLI_VERSION = "0.124.0";
 var server;
 try {
   server = await import("../server/index.js");
@@ -177237,7 +177704,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.123.0"}`);
+console.log(`  DorkOS v${"0.124.0"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -177263,9 +177730,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.123.0").then((latestVersion) => {
+checkForUpdate("0.124.0").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.123.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.124.0"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;