dorkos 0.125.0 → 0.125.2

package/dist/server/index.js

@@ -4322,6 +4322,10 @@ var init_env = __esm({
       // `@dorkos/shared/telemetry-consent` so the server and CLI agree exactly.
       DO_NOT_TRACK: z2.string().optional(),
       DORKOS_TELEMETRY_DISABLED: z2.string().optional(),
+      // Keeps the server off the npm registry: no "update available" check
+      // (DOR-3226). '1'/'true' turns it off. The contract harness sets it so no
+      // test server reaches the network.
+      DORKOS_UPDATE_CHECK_DISABLED: z2.string().optional(),
       // Telemetry debug mode (DOR-312) — when '1'/'true', the heartbeat, install,
       // usage, and error-report senders print the exact JSON payload to stderr
       // instead of sending it.
@@ -76158,6 +76162,7 @@ function claimSecretText(filePath2, contents, mode) {
 }
 var init_secret_file = __esm({
   "../shared/src/secret-file.ts"() {
+    "use strict";
   }
 });
 
@@ -77382,6 +77387,7 @@ var init_rooms2 = __esm({
 var SDK_TOOL_NAMES, EFFORT_LEVELS;
 var init_constants2 = __esm({
   "../shared/src/constants.ts"() {
+    "use strict";
     SDK_TOOL_NAMES = {
       /** Interactive question-and-answer tool for human input. */
       ASK_USER_QUESTION: "AskUserQuestion",
@@ -78680,7 +78686,6 @@ import { z as z70 } from "zod";
 var AgentMemoryRefSchema, MemoryCapabilitiesSchema, BUILTIN_MEMORY_PROVIDER_ID, MemoryProviderInfoSchema, MemorySnapshotSchema, WINDOWS_RESERVED_NAME, MemoryNoteNameSchema, MemoryNoteDescriptionSchema, MemoryProvenanceSchema, MemoryWriteOpSchema, MemoryWriteResultSchema, MemoryQuerySchema, MemoryHitSchema, MemoryHitsSchema, MemorySelectorSchema, MemoryNoteListQuerySchema, MemoryNoteEntrySchema, MemoryNoteListSchema, MemoryUnsupportedError, MemoryMatchError, MemoryCapExceededError, MemoryNoteShapeError, MemoryNoteError, MemoryIOError;
 var init_memory_provider = __esm({
   "../shared/src/memory-provider.ts"() {
-    "use strict";
     AgentMemoryRefSchema = z70.object({
       /** The agent's opaque local id — what a backend keys on, and what a log names. */
       agentId: z70.string().min(1),
@@ -79827,7 +79832,7 @@ import path9 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.125.0";
+  if (true) return "0.125.2";
   const pkgPath = path9.join(path9.dirname(fileURLToPath2(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync2(pkgPath, "utf-8")).version;
 }
@@ -97500,7 +97505,6 @@ function capitalize(s5) {
 var TRAIT_LEVELS, DEFAULT_TRAITS, TRAIT_ORDER;
 var init_trait_renderer = __esm({
   "../shared/src/trait-renderer.ts"() {
-    "use strict";
     TRAIT_LEVELS = {
       verbosity: {
         1: {
@@ -97728,7 +97732,6 @@ function defaultNopeTemplate() {
 var CONVENTION_DIR, CONVENTION_FILES, MEMORY_FENCE_LABEL, OUTSIDER_PROVENANCE_PHRASE, MEMORY_FENCE_PREAMBLE, MEMORY_TRUST_FRAMING, MEMORY_NOTES_FENCE_LABEL, MEMORY_NOTES_FENCE_PREAMBLE, MEMORY_STALENESS_LINE, SOUL_MAX_CHARS, NOPE_MAX_CHARS, HEARTBEAT_MAX_CHARS, MEMORY_MAX_CHARS, MEMORY_OVERSIZE_WARNING, MEMORY_PROVIDER_BENCHED_NOTICE, MEMORY_NOTES_DIR, MEMORY_NOTE_MAX_CHARS, MEMORY_NOTES_TIDY_THRESHOLD, MIGRATED_PROVENANCE_PHRASE, TRAIT_SECTION_START, TRAIT_SECTION_END;
 var init_convention_files = __esm({
   "../shared/src/convention-files.ts"() {
-    "use strict";
     init_trait_renderer();
     CONVENTION_DIR = ".dork";
     CONVENTION_FILES = {
@@ -98653,7 +98656,6 @@ function foldLegacyPermissionFields(raw2) {
 var AgentRuntimeSchema, AgentHealthStatusSchema, ResponseModeSchema, AgentBehaviorSchema, McpServerAuthKindSchema, McpServerTransportSchema, ManagedMcpServerSchema, McpServerAuthStatusSchema, McpClientOriginSchema, ManagedMcpServerViewSchema, TraitsSchema, ConventionsSchema, AgentModelSchema, AgentEffortSchema, AgentWorkspaceBindingSchema, WORKSPACE_BINDING_OPENAPI, UNREADABLE_BINDING_FALLBACK, AgentManifestSchema, LEGACY_GROUP_AREAS, AgentManifestFileSchema, AgentPathEntrySchema, AgentHintsSchema, DiscoveryCandidateSchema, DenialRecordSchema, AGENT_PAUSED_CODE, CANNOT_RESUME_SELF_CODE, AGENT_PAUSE_REASON_MAX, AgentPauseSchema, AgentPauseListSchema, AgentPauseRequestSchema, AgentPauseResultSchema, TopologyAgentSchema, NamespaceInfoSchema, OPEN_MESH_NAMESPACE, CrossNamespaceRuleSchema, TopologyViewSchema, DiscoverRequestSchema, RegisterAgentRequestSchema, DenyRequestSchema, UpdateAgentRequestSchema, UpdateAgentConventionsSchema, WILDCARD_NAMESPACE_BOTH_SIDES_MESSAGE, UpdateAccessRuleRequestSchema, ResolveAgentsRequestSchema, ResolveAgentsResponseSchema, CreateAgentOptionsSchema, CreateAgentRequestSchema, AgentListQuerySchema, AgentHealthSchema, MeshStatusSchema, MeshInspectSchema, MeshLifecycleEventSchema, HeartbeatRequestSchema, ScanProgressSchema;
 var init_mesh_schemas = __esm({
   "../shared/src/mesh-schemas.ts"() {
-    "use strict";
     init_zod_openapi();
     init_validation();
     init_constants2();
@@ -99297,6 +99299,7 @@ function stripInjectedTagBlocks(text10) {
 var CONTEXT_TAG, GitStatusDataSchema, EnvDataSchema, RelayContextDataSchema, RoomContextOriginSchema, RoomContextAuthorSchema, RoomContextMemberSchema, RoomContextEntrySchema, RoomContextAcknowledgmentSchema, MainMovedSchema, WorktreeRefreshOutcomeSchema, RoomContextFilesSchema, RoomContextDataSchema, SeedContextDataSchema, StagedContextDataSchema, AccountsAccessDataSchema, ContextWarningDataSchema, ApprovalVerdictDataSchema, AdditionalContextEntrySchema, AdditionalContextSchema, ClientContextSchema;
 var init_additional_context = __esm({
   "../shared/src/additional-context.ts"() {
+    "use strict";
     init_canvas_channel_schemas();
     init_mesh_schemas();
     init_schemas2();
@@ -99613,6 +99616,7 @@ import { z as z89 } from "zod";
 var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, ProjectWithoutCreditsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema, NoAutoMoveSchema, ACCOUNT_NOT_ALLOWED_CODE;
 var init_project_schemas = __esm({
   "../shared/src/project-schemas.ts"() {
+    "use strict";
     init_zod_openapi();
     extendZodWithOpenApiOnce();
     PROJECT_NAME_PATTERN = /^[A-Za-z0-9._~-]+$/;
@@ -100172,8 +100176,8 @@ function replacesWindow(next, stored) {
   const nextAt = Date.parse(next.observedAt);
   const storedAt = Date.parse(stored.observedAt);
   if (nextAt !== storedAt) return nextAt > storedAt;
-  const rank = (e4) => e4.status === null ? 0 : STATUS_RANK[e4.status];
-  if (rank(next) !== rank(stored)) return rank(next) > rank(stored);
+  const rank2 = (e4) => e4.status === null ? 0 : STATUS_RANK[e4.status];
+  if (rank2(next) !== rank2(stored)) return rank2(next) > rank2(stored);
   const used = (e4) => e4.usedPct ?? -1;
   if (used(next) !== used(stored)) return used(next) > used(stored);
   const resets = (e4) => e4.resetsAt === null ? -Infinity : Date.parse(e4.resetsAt);
@@ -100291,8 +100295,8 @@ function windowRank(key8) {
   return key8.startsWith("model:") ? KNOWN_WINDOW_ORDER.length + 1 : KNOWN_WINDOW_ORDER.length;
 }
 function compareWindowKeys(a4, b5) {
-  const rank = windowRank(a4) - windowRank(b5);
-  if (rank !== 0) return rank;
+  const rank2 = windowRank(a4) - windowRank(b5);
+  if (rank2 !== 0) return rank2;
   return a4 < b5 ? -1 : a4 > b5 ? 1 : 0;
 }
 function toAccountUsage(ledger, identity, now5, subscriptionType = null) {
@@ -100638,6 +100642,7 @@ function chatMessageWords(content3) {
 var CHAT_SEND_TOOL, CHAT_READ_TOOL, CHAT_STOP_TOOL, ChatMessageKindSchema, ChatDeliverySchema, ChatMessageStatusSchema, ChatMessageSenderSchema, ChatMessageStampSchema, RoomMessageAuthorSchema, RoomMessageStampSchema, SentChatMessageSchema, ChatStopNoticeSchema, CHAT_MESSAGE_FENCE_LABEL, FENCE_PATTERN, ChatActivityResponseSchema;
 var init_chat_messages2 = __esm({
   "../shared/src/chat-messages.ts"() {
+    "use strict";
     init_zod_openapi();
     extendZodWithOpenApiOnce();
     CHAT_SEND_TOOL = "chat_send";
@@ -106376,7 +106381,7 @@ var init_resolve_permission = __esm({
 
 // ../shared/src/permissions/permission-api-schemas.ts
 import { z as z95 } from "zod";
-var NullableStateSchema, PermissionLastChangeSchema, PermissionActionEntrySchema, PermissionAreaEntrySchema, PermissionExceptionSchema, FilesAndCommandsSourceSchema, ResolvedFilesAndCommandsSchema, DefaultFilesAndCommandsSchema, PermissionsResponseSchema, AgentPermissionsResponseSchema, SetPermissionPresetBodySchema, PatchPermissionDefaultsBodySchema, PatchAgentPermissionsBodySchema, PermissionHistoryQuerySchema, PermissionHistoryEntrySchema, PermissionHistoryResponseSchema, UndoPermissionChangeBodySchema, PermissionUndoSkipReasonSchema, PermissionUndoSkipSchema, UndoPermissionChangeResponseSchema, UndoConflictResponseSchema;
+var NullableStateSchema, PermissionLastChangeSchema, PermissionActionEntrySchema, PermissionAreaEntrySchema, PermissionExceptionSchema, FilesAndCommandsSourceSchema, ResolvedFilesAndCommandsSchema, DefaultFilesAndCommandsSchema, PermissionsResponseSchema, AgentPermissionsResponseSchema, AgentLevelResponseSchema, SetPermissionPresetBodySchema, PatchPermissionDefaultsBodySchema, PatchAgentPermissionsBodySchema, PermissionHistoryQuerySchema, PermissionHistoryEntrySchema, PermissionHistoryResponseSchema, UndoPermissionChangeBodySchema, PermissionUndoSkipReasonSchema, PermissionUndoSkipSchema, UndoPermissionChangeResponseSchema, UndoConflictResponseSchema;
 var init_permission_api_schemas = __esm({
   "../shared/src/permissions/permission-api-schemas.ts"() {
     "use strict";
@@ -106511,6 +106516,16 @@ var init_permission_api_schemas = __esm({
         inherited: ResolvedFilesAndCommandsSchema
       })
     }).openapi("AgentPermissionsResponse");
+    AgentLevelResponseSchema = z95.object({
+      /** The stop a launch resolves for this agent, or `null` for the runtime's own default. */
+      effective: PermissionStopSchema.nullable(),
+      /** That stop as the agent's runtime names its mode, or `null` when the runtime decides. */
+      effectiveMode: z95.string().nullable(),
+      /** The stop this runtime's agents get with nothing set for this one, or `null` for none. */
+      declared: PermissionStopSchema.nullable(),
+      /** True when what a person set for this agent holds it below `declared`. */
+      cappedByPerson: z95.boolean()
+    }).openapi("AgentLevelResponse");
     SetPermissionPresetBodySchema = z95.object({
       preset: PermissionPresetSchema,
       applyToAgents: z95.array(z95.string().min(1)).max(500).optional(),
@@ -106633,6 +106648,7 @@ function assertValidExtensionId(extensionId) {
 var EXTENSION_ID_REGEX, InvalidExtensionIdError;
 var init_extension_id = __esm({
   "../shared/src/extension-id.ts"() {
+    "use strict";
     EXTENSION_ID_REGEX = /^[a-z0-9][a-z0-9-]*$/;
     InvalidExtensionIdError = class extends Error {
       /** The rejected id, kept so callers can report what was refused. */
@@ -114090,8 +114106,8 @@ function callRaisesPermissions(action2, input) {
   return areasForCall(action2, input).some((area) => PERMISSION_RAISING_AREAS.has(area));
 }
 function stricter(a4, b5) {
-  const rank = STATE_RANK[b5.state] - STATE_RANK[a4.state];
-  if (rank !== 0) return rank > 0 ? b5 : a4;
+  const rank2 = STATE_RANK[b5.state] - STATE_RANK[a4.state];
+  if (rank2 !== 0) return rank2 > 0 ? b5 : a4;
   return !isFloorArea(a4.area) && isFloorArea(b5.area) ? b5 : a4;
 }
 async function resolveCallPermission(request) {
@@ -137389,6 +137405,7 @@ function missingRelayFeature(advertised, request) {
 var SESSION_RELAY_VERSIONS, SESSION_RELAY_MAX_FRAME_LENGTH, SESSION_RELAY_MAX_INNER_FRAME_BYTES, SESSION_RELAY_MAX_MESSAGE_LENGTH, RelayMessageContentSchema, SESSION_RELAY_MAX_OPEN_STREAMS, SESSION_RELAY_MAX_INFLIGHT_REQUESTS, SESSION_RELAY_MAX_CHATS, SESSION_RELAY_IDLE_CLOSE_MS, VersionSchema, RelayVersionRangeSchema, SESSION_RELAY_FEATURES, SESSION_RELAY_DEVICE_FEATURE, RelayAdvertisedFeaturesSchema, RelayRequestIdSchema, StreamIdSchema, RelaySessionIdSchema, RelayAgentIdSchema, ToolCallIdSchema2, ResumeCursorSchema, NO_CONTROL2, INVISIBLE2, RelayDisplayNameSchema, RelayDeviceSchema, base64url2, ChatsListRequestSchema, SessionStreamRequestSchema, SessionSendRequestSchema, SessionInterruptRequestSchema, ApprovalDecisionSchema, InteractionChallengeRequestSchema, RelayApprovalProofSchema, InteractionAnswerSchema, InteractionRespondRequestSchema, RelayRequestSchema, RelayChatSummarySchema, RelayResultBodySchemas, RelayErrorSchema, exactBase64url, RelayEphemeralKeySchema, RelaySignatureSchema, RelayNonceSchema, RelayPinnedHubKeySchema, RelayHelloFrameSchema, RelayHandshakeAnswerSchema, RelaySealedFrameSchema, HeartbeatFrameSchema, RelayWebFrameSchema, RelayStreamFrameSchema, RelayComputerFrameSchema, RelayFinishFrameSchema, SESSION_RELAY_TRANSCRIPT_LABEL;
 var init_session_relay = __esm({
   "../shared/src/session-relay.ts"() {
+    "use strict";
     init_dist3();
     init_schemas2();
     SESSION_RELAY_VERSIONS = { min: 1, max: 1 };
@@ -198619,7 +198636,7 @@ var init_format_heading_as_setext = __esm({
 
 // ../../node_modules/.pnpm/mdast-util-to-markdown@2.1.2/node_modules/mdast-util-to-markdown/lib/handle/heading.js
 function heading(node2, _6, state7, info2) {
-  const rank = Math.max(Math.min(6, node2.depth || 1), 1);
+  const rank2 = Math.max(Math.min(6, node2.depth || 1), 1);
   const tracker = state7.createTracker(info2);
   if (formatHeadingAsSetext(node2, state7)) {
     const exit4 = state7.enter("headingSetext");
@@ -198631,14 +198648,14 @@ function heading(node2, _6, state7, info2) {
     });
     subexit2();
     exit4();
-    return value3 + "\n" + (rank === 1 ? "=" : "-").repeat(
+    return value3 + "\n" + (rank2 === 1 ? "=" : "-").repeat(
       // The whole size…
       value3.length - // Minus the position of the character after the last EOL (or
       // 0 if there is none)…
       (Math.max(value3.lastIndexOf("\r"), value3.lastIndexOf("\n")) + 1)
     );
   }
-  const sequence2 = "#".repeat(rank);
+  const sequence2 = "#".repeat(rank2);
   const exit3 = state7.enter("headingAtx");
   const subexit = state7.enter("phrasing");
   tracker.move(sequence2 + " ");
@@ -257377,9 +257394,9 @@ function hasHeldMessage(sessionKey) {
 }
 function orderedWaiting(sessionKey) {
   const rows = getMessageQueueStore()?.list(queueKeyOf(sessionKey)) ?? [];
-  const rank = new Map(rows.map((row, index5) => [row.id, index5]));
+  const rank2 = new Map(rows.map((row, index5) => [row.id, index5]));
   return [...pending3.values()].filter((entry2) => entry2.sessionKey === sessionKey).sort(
-    (a4, b5) => (rank.get(a4.messageId) ?? Number.MAX_SAFE_INTEGER) - (rank.get(b5.messageId) ?? Number.MAX_SAFE_INTEGER)
+    (a4, b5) => (rank2.get(a4.messageId) ?? Number.MAX_SAFE_INTEGER) - (rank2.get(b5.messageId) ?? Number.MAX_SAFE_INTEGER)
   );
 }
 function noteTurnBoundary(sessionId) {
@@ -263770,6 +263787,7 @@ async function nestedClaudeFolders(packagePath) {
 var HARNESS_OF, SUBAGENT_EFFECT_FIELDS, MAX_AGENTS_DEPTH, NESTED_WALK_SKIP;
 var init_agent_workspace_config = __esm({
   "../marketplace/src/agent-workspace-config.ts"() {
+    "use strict";
     init_frontmatter();
     HARNESS_OF = {
       ".claude/settings.json": "Claude Code",
@@ -263987,7 +264005,6 @@ var init_disclosed_effects = __esm({
 var PACKAGE_MANIFEST_PATH, CLAUDE_PLUGIN_MANIFEST_PATH, AGENT_MANIFEST_PATH, INSTALLED_FILES_PATH, INSTALL_METADATA_POSIX_PATH, UNINSTALLED_AGENT_PATH, PACKAGE_DATA_DIR, SAVED_COPIES_DIR, PACKAGE_SECRETS_PATH, EFFECT_BEARING_PATHS, AGENT_IDENTITY_FILES;
 var init_constants10 = __esm({
   "../marketplace/src/constants.ts"() {
-    "use strict";
     PACKAGE_MANIFEST_PATH = ".dork/manifest.json";
     CLAUDE_PLUGIN_MANIFEST_PATH = ".claude-plugin/plugin.json";
     AGENT_MANIFEST_PATH = ".dork/agent.json";
@@ -264194,7 +264211,6 @@ function parseDuration(duration) {
 var DURATION_MAX_LENGTH, DurationSchema;
 var init_duration = __esm({
   "../skills/src/duration.ts"() {
-    "use strict";
     DURATION_MAX_LENGTH = 32;
     DurationSchema = z127.string().max(DURATION_MAX_LENGTH).regex(/^(\d+h)?(\d+m)?(\d+s)?$/, 'Duration must be like "5m", "1h", "30s", or "2h30m"').refine((v5) => v5.length > 0, "Duration must not be empty");
   }
@@ -265653,6 +265669,7 @@ function describePackageLink(link3) {
 var SKIPPED_DIRS, MAX_ENTRIES_WALKED;
 var init_package_links = __esm({
   "../marketplace/src/package-links.ts"() {
+    "use strict";
     SKIPPED_DIRS = /* @__PURE__ */ new Set([".git", "node_modules"]);
     MAX_ENTRIES_WALKED = 5e4;
   }
@@ -265662,7 +265679,6 @@ var init_package_links = __esm({
 var SKILL_FILENAME, WIDGET_TEMPLATE_SUFFIX;
 var init_constants11 = __esm({
   "../skills/src/constants.ts"() {
-    "use strict";
     SKILL_FILENAME = "SKILL.md";
     WIDGET_TEMPLATE_SUFFIX = ".widget.json";
   }
@@ -265733,7 +265749,6 @@ function parseSkillFile(filePath2, content3, schema4, options) {
 }
 var init_parser2 = __esm({
   "../skills/src/parser.ts"() {
-    "use strict";
     init_constants11();
     init_frontmatter();
   }
@@ -273155,6 +273170,7 @@ var init_session6 = __esm({
     init_settle_open_turn();
     init_canonical_rekey();
     init_resolve_session_defaults();
+    init_agent_launch_level();
     init_trigger_command_intent();
     init_message_dispatcher();
     init_reconcile_session_rows();
@@ -288213,7 +288229,6 @@ function projectConnectorAuthentication(toolkit, includeSetup) {
 var CONNECTOR_AUTH_SETUP_HEADER, CONNECTOR_AUTH_SETUP_VERSION, ConnectorAuthenticationSetupSchema;
 var init_connector_authentication_setup = __esm({
   "../connector-providers/src/connector-authentication-setup.ts"() {
-    "use strict";
     CONNECTOR_AUTH_SETUP_HEADER = "x-dorkos-catalog-auth-setup";
     CONNECTOR_AUTH_SETUP_VERSION = "1";
     ConnectorAuthenticationSetupSchema = z154.object({
@@ -299467,7 +299482,6 @@ function listAuthoredSkills(repoRoot) {
 var INSTALLED_PROJECTION_MARKER, AGENTS_SKILLS_DIR, CLAUDE_PLUGIN_ROOT_TOKEN, CLAUDE_PLUGIN_DATA_TOKEN;
 var init_scanner2 = __esm({
   "../harness/src/scan/scanner.ts"() {
-    "use strict";
     init_marketplace_schemas();
     INSTALLED_PROJECTION_MARKER = "__";
     AGENTS_SKILLS_DIR = ".agents/skills";
@@ -305242,7 +305256,7 @@ var init_client4 = __esm({
         }
         const { autoRefresh, debounceMs } = parseResult.data;
         const { onChanged } = options;
-        const refresh = async () => {
+        const refresh2 = async () => {
           if (!autoRefresh) {
             onChanged(null, null);
             return;
@@ -305261,10 +305275,10 @@ var init_client4 = __esm({
             if (existingTimer) {
               clearTimeout(existingTimer);
             }
-            const timer = setTimeout(refresh, debounceMs);
+            const timer = setTimeout(refresh2, debounceMs);
             this._listChangedDebounceTimers.set(listType, timer);
           } else {
-            refresh();
+            refresh2();
           }
         };
         this.setNotificationHandler(notificationSchema, handler);
@@ -308661,7 +308675,7 @@ var init_agent_mcp_access_token_cache = __esm({
        * @param refresh - Produces the next cached token when the timer fires, or the
        *   verdict explaining why there isn't one.
        */
-      store(agentId, serverName, token, refresh) {
+      store(agentId, serverName, token, refresh2) {
         const key8 = cacheKey2(agentId, serverName);
         const previous3 = this.entries.get(key8);
         if (previous3?.timer) this.scheduler.clear(previous3.timer);
@@ -308669,7 +308683,7 @@ var init_agent_mcp_access_token_cache = __esm({
           accessToken: token.accessToken,
           expiresAt: token.expiresAt,
           serverUrl: token.serverUrl,
-          refresh
+          refresh: refresh2
         };
         this.entries.set(key8, entry2);
         if (!token.refreshable) return;
@@ -317875,7 +317889,6 @@ function withoutActivityTarget(payload) {
 var RoomKindSchema, AuthorKindSchema, AuthorOriginSchema, RoomEntryKindSchema, ROOM_RECEIPT_EMOJI, RoomNoticeCodeSchema, NAMED_PARTICIPANTS, AuthorRefSchema, ROOM_SLUG_REGEX, RoomBridgeInfoSchema, TEAM_ROOM_WELL_KNOWN, roomLimitOverrideFields, RoomSchema, ROOM_LAST_LINE_MAX_CHARS, ROOM_MENTION_COUNT_CAP, RoomSummarySchema, RoomMemberSchema, RoomRosterEntrySchema, RoomFormerAuthorSchema, RoomWorkingClaimSchema, RoomWithRosterSchema, RoomMomentKindSchema, RoomMomentSourceKindSchema, RoomMomentSourceSchema, RoomMomentSchema, RoomWaitingKindSchema, RoomMergeEventSchema, ROOM_FILE_CHANGE_MAX_PATHS, RoomFileChangeEventSchema, RoomCanvasChangeSchema, CanvasDocumentListResponseSchema, OpenCanvasDocumentRequestSchema, UpdateCanvasDocumentRequestSchema, RoomSignalViewSchema, ROOM_LIVE_BEAT_MS, ROOM_LIVE_TTL_MS, FollowRoomMemberRequestSchema, PublishRoomViewRequestSchema, PublishRoomViewResponseSchema, CanvasThreadResponseSchema, CanvasEditingRequestSchema, CanvasEditingResponseSchema, CanvasViewingRequestSchema, MERGE_SUMMARY_MAX_CHARS, MergeRoomRepoRequestSchema, RoomEntryBodySchema, REACTION_EMOJI_MAX_CODE_POINTS, REACTION_EMOJI_ONLY, REACTION_EMOJI_PICTURE, ReactionEmojiSchema, REACTION_FREQUENTS_COUNT, REACTION_FREQUENTS_DEFAULT, RoomEntryReactionSchema, RoomAttachmentPreviewSchema, ROOM_ATTACHMENT_NAME_MAX, ROOM_ATTACHMENT_MAX_PER_ENTRY, RoomAttachmentSchema, RoomAttachmentUploadResponseSchema, MentionSpanSchema, RoomEntrySchema, CreateRoomRequestSchema, OpenDirectChatRequestSchema, DirectChatSchema, UpdateRoomRequestSchema, PostToRoomRequestSchema, AddRoomMemberRequestSchema, UpdateMembershipRequestSchema, ReseatSeatRequestSchema, ReseatOptionsSchema, SetAuthorHandleRequestSchema, PostThreadReplyRequestSchema, ToggleReactionRequestSchema, ToggleReactionResponseSchema, ListRoomsQuerySchema, ROOM_ENTRY_PAGE_SIZE_DEFAULT, ROOM_ENTRY_PAGE_SIZE_MAX, ListRoomEntriesQuerySchema, THREAD_LIST_LIMIT_DEFAULT, THREAD_LIST_LIMIT_MAX, THREAD_PREVIEW_MAX_CHARS, ListThreadsQuerySchema, ThreadSummarySchema, RoomListWarningSchema, RoomListResponseSchema, ThreadListResponseSchema, RoomEntryListResponseSchema, RoomTriggerSkipReasonSchema, SkippedTriggerSchema, PostToRoomResponseSchema, HaltRoomResponseSchema, PromoteHoldResponseSchema, RoomSessionBindingSchema, RoomSessionsResponseSchema, RoomSnapshotSchema, RoomPresenceStateSchema, RoomHeldBehindSchema, RoomEntryEventSchema, RoomSignalEventSchema, RoomReactionEventSchema, RoomCanvasEventSchema, RoomRevisionEventSchema, RoomEventSchema;
 var init_room_schemas = __esm({
   "../shared/src/room-schemas.ts"() {
-    "use strict";
     init_canvas_channel_schemas();
     init_zod_openapi();
     init_config_schema();
@@ -340612,7 +340625,7 @@ var init_room_search = __esm({
           limit: opts.threadRootEntryId === void 0 ? wanted : HISTORY_PAGE_MAX
         });
         if (hits.length === 0) return [];
-        const ranked2 = new Map(hits.map((hit, rank) => [hit.seq, rank]));
+        const ranked2 = new Map(hits.map((hit, rank2) => [hit.seq, rank2]));
         const found = this.store.listEntriesBySeq(roomId, [...ranked2.keys()]).filter(
           (entry2) => opts.threadRootEntryId === void 0 || entry2.threadRootEntryId === opts.threadRootEntryId
         ).sort((a4, b5) => (ranked2.get(a4.seq) ?? 0) - (ranked2.get(b5.seq) ?? 0)).slice(0, wanted);
@@ -340771,9 +340784,9 @@ var init_room_search = __esm({
         if (hits.length === 0) return [];
         const ranked2 = /* @__PURE__ */ new Map();
         const seqsByRoom = /* @__PURE__ */ new Map();
-        for (const [rank, hit] of hits.entries()) {
+        for (const [rank2, hit] of hits.entries()) {
           const key8 = matchKey(hit.roomId, hit.seq);
-          if (!ranked2.has(key8)) ranked2.set(key8, rank);
+          if (!ranked2.has(key8)) ranked2.set(key8, rank2);
           const seqs = seqsByRoom.get(hit.roomId);
           if (seqs) seqs.push(hit.seq);
           else seqsByRoom.set(hit.roomId, [hit.seq]);
@@ -346318,13 +346331,13 @@ var init_search_schemas = __esm({
 // ../../apps/server/src/services/connectors/readiness/connection-readiness.ts
 function wayHealthOf(live3, problem, anotherWayWorks = () => false, recheck = () => ({})) {
   if (!live3) {
-    const { checking: checking2, nextCheckAt } = recheck();
+    const { checking: checking2, nextCheckAt: nextCheckAt2 } = recheck();
     return {
       status: "down",
       problem: problem() ?? "unreachable",
       anotherWayWorks: anotherWayWorks(),
       ...checking2 === true && { checking: checking2 },
-      ...nextCheckAt !== void 0 && { nextCheckAt }
+      ...nextCheckAt2 !== void 0 && { nextCheckAt: nextCheckAt2 }
     };
   }
   if (live3.getCapabilities().capabilities.execution.status === "available") {
@@ -355687,11 +355700,10 @@ function createSessionRoomTurnRunner(options = {}) {
       });
       const roomContext = request.roomContext;
       const isNewSession = await runtimeRegistry.getSessionSettings(sessionId) === null;
-      const agentStop = isNewSession && !request.externalAuthor ? (await readAgentExecutionDefaults(request.agentPath)).filesAndCommands : void 0;
-      const unattendedMode = isNewSession && !request.externalAuthor ? resolveUnattendedPermissionMode({
-        capabilities: runtime.getCapabilities(),
-        ...agentStop ? { agent: { filesAndCommands: agentStop } } : {}
-      }) : void 0;
+      const unattendedMode = isNewSession && !request.externalAuthor ? (await resolveAgentLaunchLevel({
+        agentPath: request.agentPath,
+        capabilities: runtime.getCapabilities()
+      })).mode : void 0;
       const seed = isNewSession ? await resolveUnattendedSessionDefaults({
         runtimeType,
         agentPath: request.agentPath,
@@ -362200,6 +362212,14 @@ async function checkedAddress(origin, resolve20 = (host2) => dnsLookup(host2, {
   }
   return local2 ? answers.find((answer4) => answer4.family === 4) ?? answers[0] : answers[0];
 }
+function pinnedLookup(address) {
+  return (_hostname, options, callback) => {
+    setImmediate(() => {
+      if (options.all) callback(null, [address]);
+      else callback(null, address.address, address.family);
+    });
+  };
+}
 function remoteErrorCode(content3) {
   try {
     const parsed = CommunityWireErrorCodeSchema.safeParse(
@@ -362220,10 +362240,7 @@ async function pinnedJson(origin, path361, body2, signal, options = {}) {
   if (target.origin !== origin.origin || !path361.startsWith("/api/v1/"))
     throw new PinnedOriginError("INVALID_ORIGIN");
   const address = await checkedAddress(origin);
-  const lookup5 = (_hostname, options2, callback) => {
-    if (options2.all) callback(null, [address]);
-    else callback(null, address.address, address.family);
-  };
+  const lookup5 = pinnedLookup(address);
   const agent = origin.protocol === "https:" ? new HttpsAgent({ keepAlive: false, lookup: lookup5 }) : new HttpAgent({ keepAlive: false, lookup: lookup5 });
   const payload = options.rawBody ?? (body2 === void 0 ? void 0 : Buffer.from(JSON.stringify(body2)));
   const method = options.method ?? (payload ? "POST" : "GET");
@@ -362298,10 +362315,7 @@ async function* pinnedSse(origin, path361, authorization2, lastEventId, signal,
   if (target.origin !== origin.origin || !path361.startsWith("/api/v1/"))
     throw new PinnedOriginError("INVALID_ORIGIN");
   const address = await checkedAddress(origin);
-  const lookup5 = (_hostname, options, callback) => {
-    if (options.all) callback(null, [address]);
-    else callback(null, address.address, address.family);
-  };
+  const lookup5 = pinnedLookup(address);
   const agent = origin.protocol === "https:" ? new HttpsAgent({ keepAlive: false, lookup: lookup5 }) : new HttpAgent({ keepAlive: false, lookup: lookup5 });
   const bounded2 = new AbortController();
   let timer;
@@ -367301,11 +367315,11 @@ function commits(count4) {
   return count4 === 1 ? "1 commit" : `${count4} commits`;
 }
 function heldMoves(files) {
-  const refresh = files.refresh;
-  if (!refresh || refresh.kind !== "held") return null;
-  if (refresh.reason === "busy" || refresh.reason === "off-branch") return null;
-  if (!refresh.moved || refresh.moved.commits.length === 0) return null;
-  return refresh.moved;
+  const refresh2 = files.refresh;
+  if (!refresh2 || refresh2.kind !== "held") return null;
+  if (refresh2.reason === "busy" || refresh2.reason === "off-branch") return null;
+  if (!refresh2.moved || refresh2.moved.commits.length === 0) return null;
+  return refresh2.moved;
 }
 function fileList(shown, total) {
   const listed2 = shown.slice(0, MAIN_MOVED_FILES_SHOWN).map((file) => inertLine(file));
@@ -367313,21 +367327,21 @@ function fileList(shown, total) {
   return more > 0 ? `${listed2.join(", ")}, and ${more} more` : listed2.join(", ");
 }
 function refreshLines(files, worktree) {
-  const refresh = files.refresh;
-  if (!refresh) return [];
-  if (refresh.kind === "refreshed") {
-    const n4 = refresh.paths.length;
+  const refresh2 = files.refresh;
+  if (!refresh2) return [];
+  if (refresh2.kind === "refreshed") {
+    const n4 = refresh2.paths.length;
     return [
       `Your copy was brought up to date with main at the start of this turn (${n4 === 1 ? "1 file" : `${n4} files`} changed).`
     ];
   }
-  if (refresh.kind !== "held") return [];
-  if (refresh.reason === "unsafe-config") {
+  if (refresh2.kind !== "held") return [];
+  if (refresh2.reason === "unsafe-config") {
     return [
       "Your copy was not updated: the room's shared git settings contain entries that can make git run programs, so DorkOS will not update, merge or save this room\u2019s files until a person removes those entries (the operator is told which ones). Never add git settings to the room\u2019s repository. If you need to merge, say so in the room."
     ];
   }
-  if (refresh.reason === "off-branch") {
+  if (refresh2.reason === "off-branch") {
     const branch = sanitizeIdentity(files.branch) ?? "its own branch";
     return [`Your copy is not on ${branch}, so it was not updated. Switch back before you merge.`];
   }
@@ -458835,9 +458849,9 @@ var init_x509_workload_identity_auth = __esm({
         }
         __classPrivateFieldSet4(this, _X509WorkloadIdentityAuth_tokenGeneration, __classPrivateFieldGet5(this, _X509WorkloadIdentityAuth_tokenGeneration, "f") + 1, "f");
         __classPrivateFieldSet4(this, _X509WorkloadIdentityAuth_cachedToken, void 0, "f");
-        const refresh = __classPrivateFieldGet5(this, _X509WorkloadIdentityAuth_refresh, "f");
+        const refresh2 = __classPrivateFieldGet5(this, _X509WorkloadIdentityAuth_refresh, "f");
         __classPrivateFieldSet4(this, _X509WorkloadIdentityAuth_refresh, void 0, "f");
-        refresh?.controller.abort(new APIUserAbortError2());
+        refresh2?.controller.abort(new APIUserAbortError2());
       }
       /** Binds the minted credential to the original headers before protected request hooks run. */
       bindRequest(options, request, adminAPIKey) {
@@ -482241,10 +482255,10 @@ var init_bootstrap = __esm({
           () => this._anotherWayWorks(providerInstanceId, toolkit),
           () => {
             const key8 = this._wayKey(providerInstanceId);
-            const nextCheckAt = this.nextWayCheckAt(providerInstanceId);
+            const nextCheckAt2 = this.nextWayCheckAt(providerInstanceId);
             return {
               ...key8 !== void 0 && this._checking.has(key8) && { checking: true },
-              ...nextCheckAt !== void 0 && { nextCheckAt }
+              ...nextCheckAt2 !== void 0 && { nextCheckAt: nextCheckAt2 }
             };
           }
         );
@@ -491744,8 +491758,8 @@ function toCompatOAuthFlows(core2) {
         tokenUrl: v5.tokenUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.authorizationCode.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.authorizationCode.refreshUrl = refresh2;
       break;
     }
     case "clientCredentials": {
@@ -491754,8 +491768,8 @@ function toCompatOAuthFlows(core2) {
         tokenUrl: v5.tokenUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.clientCredentials.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.clientCredentials.refreshUrl = refresh2;
       break;
     }
     case "implicit": {
@@ -491764,8 +491778,8 @@ function toCompatOAuthFlows(core2) {
         authorizationUrl: v5.authorizationUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.implicit.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.implicit.refreshUrl = refresh2;
       break;
     }
     case "password": {
@@ -491774,8 +491788,8 @@ function toCompatOAuthFlows(core2) {
         tokenUrl: v5.tokenUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.password.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.password.refreshUrl = refresh2;
       break;
     }
     case "deviceCode":
@@ -493854,32 +493868,53 @@ function resolveSidebarItems(refs2, roster) {
 }
 
 // ../../apps/server/src/services/core/update-checker.ts
+init_env();
 init_version4();
 init_server_role();
 var CACHE_TTL = 60 * 60 * 1e3;
+var FAILURE_BACKOFF = 5 * 60 * 1e3;
 var FETCH_TIMEOUT = 5e3;
+var VERSION_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+var MAX_VERSION_LENGTH = 64;
 var cachedLatest = null;
-var lastChecked2 = 0;
-async function getLatestVersion() {
-  if (IS_DEV_BUILD) return null;
-  if (currentServerRole() === "hub") return null;
-  if (Date.now() - lastChecked2 < CACHE_TTL) return cachedLatest;
+var nextCheckAt = 0;
+var refreshing = null;
+function checksRegistry() {
+  if (IS_DEV_BUILD) return false;
+  if (currentServerRole() === "hub") return false;
+  return !isSwitchOn(env2.DORKOS_UPDATE_CHECK_DISABLED);
+}
+function isSwitchOn(value2) {
+  return value2 === "1" || value2?.toLowerCase() === "true";
+}
+async function refresh() {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT);
   try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT);
     const res = await fetch("https://registry.npmjs.org/dorkos/latest", {
       signal: controller.signal
     });
-    clearTimeout(timeout);
-    if (!res.ok) return cachedLatest;
-    const data = await res.json();
-    cachedLatest = data.version;
-    lastChecked2 = Date.now();
-    return cachedLatest;
+    if (!res.ok) throw new Error(`registry answered ${res.status}`);
+    const { version: version4 } = await res.json();
+    if (typeof version4 !== "string" || version4.length > MAX_VERSION_LENGTH || !VERSION_PATTERN.test(version4))
+      throw new Error("registry answered no version");
+    cachedLatest = version4;
+    nextCheckAt = Date.now() + CACHE_TTL;
   } catch {
-    return cachedLatest;
+    nextCheckAt = Date.now() + FAILURE_BACKOFF;
+  } finally {
+    clearTimeout(timeout);
   }
 }
+async function getLatestVersion() {
+  if (!checksRegistry()) return null;
+  if (refreshing === null && Date.now() >= nextCheckAt) {
+    refreshing = refresh().finally(() => {
+      refreshing = null;
+    });
+  }
+  return cachedLatest;
+}
 
 // ../../apps/server/src/services/core/operator/operator-tool-handlers.ts
 init_session6();
@@ -507313,6 +507348,15 @@ function createPermissionsRoutes(deps3) {
       return sendPermissionError(c5, err);
     }
   });
+  const readAgentLevel = deps3.readAgentLevel;
+  if (readAgentLevel) {
+    router29.get("/agents/:id/level", async (c5) => {
+      const id13 = c5.req.param("id");
+      const level = await readAgentLevel(id13);
+      if (!level) return c5.json({ error: `No agent with id "${id13}".`, code: "UNKNOWN_AGENT" }, 404);
+      return c5.json(level);
+    });
+  }
   router29.patch("/agents/:id/permissions", async (c5) => {
     const caller = person(c5);
     if ("refusal" in caller) return caller.refusal;
@@ -523722,6 +523766,24 @@ registry2.registerPath({
     }
   }
 });
+registry2.registerPath({
+  method: "get",
+  path: "/api/agents/{id}/level",
+  tags: ["Permissions"],
+  summary: "Read the level an agent runs at",
+  description: "The Files & commands level a new chat of this agent starts at, before any per-chat limit, the level its runtime's agents get by default, and whether a person's setting holds it lower.",
+  request: { params: z256.object({ id: z256.string() }) },
+  responses: {
+    200: {
+      description: "The agent's level",
+      content: { "application/json": { schema: AgentLevelResponseSchema } }
+    },
+    404: {
+      description: "No such agent (`UNKNOWN_AGENT`)",
+      content: { "application/json": { schema: ErrorResponseSchema } }
+    }
+  }
+});
 registry2.registerPath({
   method: "patch",
   path: "/api/agents/{id}/permissions",
@@ -532166,11 +532228,11 @@ function readinessFrom(facts2) {
 var card = null;
 var lastRefreshAt = Number.NEGATIVE_INFINITY;
 var lastRetryAt = Number.NEGATIVE_INFINITY;
-var refreshing = false;
+var refreshing2 = false;
 function refreshInBackground(deps3, linkKey2) {
   const now5 = deps3.now();
-  if (refreshing || now5 - lastRefreshAt < REFRESH_EVERY_MS) return;
-  refreshing = true;
+  if (refreshing2 || now5 - lastRefreshAt < REFRESH_EVERY_MS) return;
+  refreshing2 = true;
   lastRefreshAt = now5;
   void Promise.all([
     deps3.readCatalog().catch(() => null),
@@ -532180,7 +532242,7 @@ function refreshInBackground(deps3, linkKey2) {
   ]).catch((err) => {
     logger.debug("[credits] readiness refresh failed", { err: String(err) });
   }).finally(() => {
-    refreshing = false;
+    refreshing2 = false;
   });
 }
 function creditsReadinessWith(deps3) {
@@ -533931,7 +533993,7 @@ router4.get("/", async (c5) => {
   if (!parsed.success) {
     return c5.json({ error: "Invalid query", details: z291.treeifyError(parsed.error) }, 400);
   }
-  const refresh = parsed.data.refresh === "true";
+  const refresh2 = parsed.data.refresh === "true";
   const runtimeParam = parsed.data.runtime;
   const sessionId = parsed.data.sessionId;
   try {
@@ -533953,7 +534015,7 @@ router4.get("/", async (c5) => {
       }
       runtime = runtimeRegistry.getDefault();
     }
-    const commands = await runtime.getCommands(refresh, validatedCwd);
+    const commands = await runtime.getCommands(refresh2, validatedCwd);
     return c5.json(commands);
   } catch (err) {
     if (err instanceof BoundaryError) {
@@ -611500,6 +611562,76 @@ function registerHeartbeat(options) {
 // ../../apps/server/src/index.ts
 init_usage_reporter();
 
+// ../../apps/server/src/lib/process/network-fault.ts
+var NETWORK_FAULT_CODES = /* @__PURE__ */ new Set([
+  "ECONNRESET",
+  "ECONNREFUSED",
+  "ETIMEDOUT",
+  "EHOSTUNREACH",
+  "ENETUNREACH",
+  "ENOTFOUND",
+  "EAI_AGAIN",
+  "EPIPE",
+  "UND_ERR_SOCKET",
+  "UND_ERR_CONNECT_TIMEOUT",
+  "UND_ERR_HEADERS_TIMEOUT"
+]);
+var CONNECT_ONLY_FAULT_CODES = /* @__PURE__ */ new Set([
+  "EADDRNOTAVAIL",
+  "ENETDOWN",
+  "EHOSTDOWN"
+]);
+var NETWORK_SYSCALLS = /* @__PURE__ */ new Set([
+  "connect",
+  "read",
+  "write",
+  "getaddrinfo",
+  "getnameinfo",
+  "queryA",
+  "queryAaaa"
+]);
+function isNetworkFailure(value2) {
+  if (typeof value2 !== "object" || value2 === null) return false;
+  const { code: code3, syscall } = value2;
+  if (typeof code3 === "string" && CONNECT_ONLY_FAULT_CODES.has(code3)) return syscall === "connect";
+  if (typeof code3 !== "string" || !NETWORK_FAULT_CODES.has(code3)) return false;
+  if (code3.startsWith("UND_ERR_")) return true;
+  return typeof syscall === "string" && NETWORK_SYSCALLS.has(syscall);
+}
+function isSurvivableNetworkFault(value2) {
+  if (isNetworkFailure(value2)) return true;
+  const cause = typeof value2 === "object" && value2 !== null ? value2.cause : null;
+  return isNetworkFailure(cause);
+}
+function faultOrigin(value2) {
+  const stack = typeof value2 === "object" && value2 !== null ? value2.stack : null;
+  if (typeof stack !== "string") return "unknown";
+  const frame = stack.split("\n").slice(1).map((line3) => line3.trim()).find((line3) => line3.startsWith("at ") && !line3.includes("node:"));
+  return frame ? frame.slice(3) : "unknown";
+}
+function createProcessFaultHandlers(deps3) {
+  let survived = 0;
+  const handle3 = (kind, value2) => {
+    if (!isSurvivableNetworkFault(value2)) {
+      deps3.fatal(kind, value2);
+      return;
+    }
+    survived += 1;
+    const failure7 = isNetworkFailure(value2) ? value2 : value2.cause;
+    deps3.warn("[DorkOS] A network connection failed and nothing caught it; still running", {
+      kind,
+      code: failure7.code,
+      origin: faultOrigin(value2),
+      survived
+    });
+  };
+  return {
+    onUncaughtException: (error8) => handle3("uncaughtException", error8),
+    onUnhandledRejection: (reason) => handle3("unhandledRejection", reason),
+    survivedCount: () => survived
+  };
+}
+
 // ../../apps/server/src/services/core/ai-metadata-reporter.ts
 init_links();
 init_telemetry_events();
@@ -643726,7 +643858,7 @@ ${prose}`;
 function refreshDorkbotAgentsMd(content3) {
   return PREVIOUS_DORKBOT_AGENTS_MD.includes(content3) ? dorkbotClaudeMdTemplate() : null;
 }
-async function refreshFile(filePath2, refresh) {
+async function refreshFile(filePath2, refresh2) {
   return withFileLock(filePath2, async (write) => {
     let content3;
     try {
@@ -643735,7 +643867,7 @@ async function refreshFile(filePath2, refresh) {
     } catch {
       return false;
     }
-    const next = refresh(content3);
+    const next = refresh2(content3);
     if (next === null) return false;
     await write(next);
     return true;
@@ -662866,7 +662998,37 @@ function levelReachFor(db3, config2) {
   });
 }
 
+// ../../apps/server/src/services/core/permissions/agent-level.ts
+init_permission_semantics();
+init_agent_launch_level();
+init_resolve_session_defaults();
+init_permission_enforcement();
+function rank(stop) {
+  return PERMISSION_STOPS.indexOf(stop);
+}
+function createAgentLevelReader(deps3) {
+  const personSetStop = deps3.personSetStop ?? ((agentPath) => permissionGateSources().personSetFilesAndCommands?.(agentPath) ?? "unknown");
+  return async (agentId) => {
+    const agentPath = deps3.agentPath(agentId);
+    if (!agentPath) return null;
+    const capabilities3 = deps3.capabilities(await deps3.runtimeType(agentPath));
+    const launch = await resolveAgentLaunchLevel({ agentPath, capabilities: capabilities3 });
+    const declared = resolveUnattendedDefaultStop({
+      configSection: capabilities3?.settings.configSection ?? null
+    });
+    const set2 = personSetStop(agentPath);
+    const cappedByPerson = set2 !== "unknown" && set2 !== null && declared !== null && launch.stop === set2 && rank(set2) < rank(declared);
+    return {
+      effective: launch.stop,
+      effectiveMode: launch.mode ?? null,
+      declared,
+      cappedByPerson
+    };
+  };
+}
+
 // ../../apps/server/src/startup/steps/core-routes.ts
+init_resolve_agent_runtime_type();
 init_logger();
 
 // ../../apps/server/src/services/session/runtime-turns/runtime-turn.ts
@@ -663865,7 +664027,16 @@ function mountCoreRoutes(refs2, built) {
     arrivalRecord.clear(agentId);
     void permissionObserver.forget(agentId);
   });
-  deps3.permissions = { permissions: permissionService, activity: activityService };
+  deps3.permissions = {
+    permissions: permissionService,
+    activity: activityService,
+    // The profile's Level row: the launch rule itself, read for one agent.
+    readAgentLevel: createAgentLevelReader({
+      agentPath: (agentId) => refs2.meshCore?.listWithPaths().find((agent) => agent.id === agentId)?.projectPath,
+      runtimeType: resolveAgentRuntimeType,
+      capabilities: (type2) => runtimeRegistry.has(type2) ? runtimeRegistry.get(type2).getCapabilities() : void 0
+    })
+  };
   mountedRouters.push("permissions");
   deps3.commitments = commitments2.routeDeps;
   deps3.agentPause = { registry: () => refs2.capabilityRegistry };
@@ -671562,6 +671733,7 @@ async function startAfterListen(refs2, built) {
     setHubRelaySigner(signWithHubKey, hubSigningPublicKey);
     setHubRelayWaker(hubRelayWake());
   }
+  void getLatestVersion();
   const sweepCanvases = () => sweepOrphanedCanvases(peekCanvasService(), async () => {
     const listing = await aggregateSessionList({
       runtimes: runtimeRegistry.listRuntimes(),
@@ -672080,14 +672252,19 @@ async function shutdownServices() {
 var shutdown = createSignalShutdown(shutdownServices);
 process.on("SIGINT", shutdown);
 process.on("SIGTERM", shutdown);
-process.on("uncaughtException", (err) => {
-  logger.error("[DorkOS] Uncaught exception \u2014 shutting down", err);
-  void flushServerError(err).finally(() => process.exit(1));
-});
-process.on("unhandledRejection", (reason) => {
-  logger.error("[DorkOS] Unhandled promise rejection", { reason });
-  void captureServerError(reason);
+var processFaults = createProcessFaultHandlers({
+  warn: (message4, data) => logger.warn(message4, data),
+  fatal: (kind, value2) => {
+    if (kind === "unhandledRejection") {
+      logger.error("[DorkOS] Unhandled promise rejection \u2014 shutting down", { reason: value2 });
+    } else {
+      logger.error("[DorkOS] Uncaught exception \u2014 shutting down", value2);
+    }
+    void flushServerError(value2).finally(() => process.exit(1));
+  }
 });
+process.on("uncaughtException", processFaults.onUncaughtException);
+process.on("unhandledRejection", processFaults.onUnhandledRejection);
 start().catch(async (err) => {
   mainRequestAdmission.close();
   try {