dorkos 0.125.1 → 0.125.2

package/dist/server/index.js

@@ -4322,6 +4322,10 @@ var init_env = __esm({
       // `@dorkos/shared/telemetry-consent` so the server and CLI agree exactly.
       DO_NOT_TRACK: z2.string().optional(),
       DORKOS_TELEMETRY_DISABLED: z2.string().optional(),
+      // Keeps the server off the npm registry: no "update available" check
+      // (DOR-3226). '1'/'true' turns it off. The contract harness sets it so no
+      // test server reaches the network.
+      DORKOS_UPDATE_CHECK_DISABLED: z2.string().optional(),
       // Telemetry debug mode (DOR-312) — when '1'/'true', the heartbeat, install,
       // usage, and error-report senders print the exact JSON payload to stderr
       // instead of sending it.
@@ -77383,6 +77387,7 @@ var init_rooms2 = __esm({
 var SDK_TOOL_NAMES, EFFORT_LEVELS;
 var init_constants2 = __esm({
   "../shared/src/constants.ts"() {
+    "use strict";
     SDK_TOOL_NAMES = {
       /** Interactive question-and-answer tool for human input. */
       ASK_USER_QUESTION: "AskUserQuestion",
@@ -79827,7 +79832,7 @@ import path9 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.125.1";
+  if (true) return "0.125.2";
   const pkgPath = path9.join(path9.dirname(fileURLToPath2(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync2(pkgPath, "utf-8")).version;
 }
@@ -97054,6 +97059,7 @@ function refineTokenReadTypes(value2, context2) {
 var IdentifierSchema, HashSchema, CanvasChannelSequenceSchema, CanvasChannelEventIdSchema, CanvasChannelEventTypeSchema, CanvasChannelEventPatternSchema, CanvasChannelPublicEventTypeSchema, CanvasChannelDownstreamEventTypeSchema, PageEventShape, PageEventSchema, StoredPageEventSchema, IngestReceiptSchema, CanvasChannelEventSchema, CanvasChannelFrameSchema, CanvasChannelDestinationSchema, CanvasChannelTurnSchema, CanvasChannelRouteSchema, CanvasChannelDeclarationSchema, CanvasChannelCheckboxBindingSchema, CanvasChannelGrantSchema, CanvasChannelDeliveryStatusSchema, CanvasChannelDeliverySchema, CanvasChannelEventReceiptSchema, CanvasChannelAppAckSchema, CanvasChannelPointerSchema, CanvasChannelStateOperationSchema, CanvasChannelPatchStateRequestSchema, CanvasChannelSendRequestSchema, CanvasChannelPatchStateReceiptSchema, CanvasChannelReplayQuerySchema, CanvasChannelHealthSchema, CanvasChannelRoutingSchema, canvasChannelReplayBaseSchema, CanvasChannelReplayResponseSchema, CanvasChannelDocEventsContextSchema, CanvasChannelEmitActionSchema, CanvasChannelBindSchema, CanvasChannelPresenceRequestSchema, CanvasChannelPresenceResponseSchema, CanvasChannelBridgeStatusSchema, TokenEventTypeSchema, tokenReservedDirections, CanvasChannelTokenRequestSchema, CanvasChannelTokenRecordSchema, CanvasChannelTokenResponseSchema, CanvasChannelCheckboxRequestSchema, CanvasChannelCheckboxIntentSchema, CanvasChannelCheckboxReceiptSchema, CanvasChannelSnapshotFrameSchema, CanvasChannelNotificationSchema;
 var init_canvas_channel_schemas = __esm({
   "../shared/src/canvas-channel-schemas.ts"() {
+    "use strict";
     init_canvas_doc_incarnation();
     init_canvas_doc_incarnation();
     init_canvas_channel_json();
@@ -97476,6 +97482,7 @@ function slugifyAgentName(displayName) {
 var AGENT_NAME_REGEX;
 var init_validation = __esm({
   "../shared/src/validation.ts"() {
+    "use strict";
     AGENT_NAME_REGEX = /^[a-z][a-z0-9-]{0,62}[a-z0-9]$|^[a-z]$/;
   }
 });
@@ -97498,7 +97505,6 @@ function capitalize(s5) {
 var TRAIT_LEVELS, DEFAULT_TRAITS, TRAIT_ORDER;
 var init_trait_renderer = __esm({
   "../shared/src/trait-renderer.ts"() {
-    "use strict";
     TRAIT_LEVELS = {
       verbosity: {
         1: {
@@ -97726,7 +97732,6 @@ function defaultNopeTemplate() {
 var CONVENTION_DIR, CONVENTION_FILES, MEMORY_FENCE_LABEL, OUTSIDER_PROVENANCE_PHRASE, MEMORY_FENCE_PREAMBLE, MEMORY_TRUST_FRAMING, MEMORY_NOTES_FENCE_LABEL, MEMORY_NOTES_FENCE_PREAMBLE, MEMORY_STALENESS_LINE, SOUL_MAX_CHARS, NOPE_MAX_CHARS, HEARTBEAT_MAX_CHARS, MEMORY_MAX_CHARS, MEMORY_OVERSIZE_WARNING, MEMORY_PROVIDER_BENCHED_NOTICE, MEMORY_NOTES_DIR, MEMORY_NOTE_MAX_CHARS, MEMORY_NOTES_TIDY_THRESHOLD, MIGRATED_PROVENANCE_PHRASE, TRAIT_SECTION_START, TRAIT_SECTION_END;
 var init_convention_files = __esm({
   "../shared/src/convention-files.ts"() {
-    "use strict";
     init_trait_renderer();
     CONVENTION_DIR = ".dork";
     CONVENTION_FILES = {
@@ -98651,7 +98656,6 @@ function foldLegacyPermissionFields(raw2) {
 var AgentRuntimeSchema, AgentHealthStatusSchema, ResponseModeSchema, AgentBehaviorSchema, McpServerAuthKindSchema, McpServerTransportSchema, ManagedMcpServerSchema, McpServerAuthStatusSchema, McpClientOriginSchema, ManagedMcpServerViewSchema, TraitsSchema, ConventionsSchema, AgentModelSchema, AgentEffortSchema, AgentWorkspaceBindingSchema, WORKSPACE_BINDING_OPENAPI, UNREADABLE_BINDING_FALLBACK, AgentManifestSchema, LEGACY_GROUP_AREAS, AgentManifestFileSchema, AgentPathEntrySchema, AgentHintsSchema, DiscoveryCandidateSchema, DenialRecordSchema, AGENT_PAUSED_CODE, CANNOT_RESUME_SELF_CODE, AGENT_PAUSE_REASON_MAX, AgentPauseSchema, AgentPauseListSchema, AgentPauseRequestSchema, AgentPauseResultSchema, TopologyAgentSchema, NamespaceInfoSchema, OPEN_MESH_NAMESPACE, CrossNamespaceRuleSchema, TopologyViewSchema, DiscoverRequestSchema, RegisterAgentRequestSchema, DenyRequestSchema, UpdateAgentRequestSchema, UpdateAgentConventionsSchema, WILDCARD_NAMESPACE_BOTH_SIDES_MESSAGE, UpdateAccessRuleRequestSchema, ResolveAgentsRequestSchema, ResolveAgentsResponseSchema, CreateAgentOptionsSchema, CreateAgentRequestSchema, AgentListQuerySchema, AgentHealthSchema, MeshStatusSchema, MeshInspectSchema, MeshLifecycleEventSchema, HeartbeatRequestSchema, ScanProgressSchema;
 var init_mesh_schemas = __esm({
   "../shared/src/mesh-schemas.ts"() {
-    "use strict";
     init_zod_openapi();
     init_validation();
     init_constants2();
@@ -99612,6 +99616,7 @@ import { z as z89 } from "zod";
 var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, ProjectWithoutCreditsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema, NoAutoMoveSchema, ACCOUNT_NOT_ALLOWED_CODE;
 var init_project_schemas = __esm({
   "../shared/src/project-schemas.ts"() {
+    "use strict";
     init_zod_openapi();
     extendZodWithOpenApiOnce();
     PROJECT_NAME_PATTERN = /^[A-Za-z0-9._~-]+$/;
@@ -107129,6 +107134,7 @@ function checkToolDeclarations(manifest, ctx) {
 var ExtensionCapabilitiesSchema, SecretDeclarationSchema, SettingOptionSchema, SettingDeclarationSchema, DataProxySchema, WORKER_RUNTIME_REFUSAL, ALLOW_NEEDS_SUBPROCESS, EXTERNAL_HOSTS_NEED_ALLOW_NET, NO_SERVER_CODE_TO_ISOLATE, ALLOW_NET_MAX, ALLOW_RUN_MAX, ISOLATION_MEMORY_MB, IsolationRuntimeSchema, ExtensionAllowSchema, ExtensionLimitsSchema, ServerCapabilitiesSchema, StorageMigrationSchema, StorageDeclarationSchema, EXTENSION_TOOL_TIMEOUT_MAX_SECONDS, EXTENSION_TOOL_TIMEOUT_DEFAULT_SECONDS, ExtensionToolDeclarationSchema, ExtensionSkillDeclarationSchema, ExtensionManifestObjectSchema, ExtensionManifestSchema;
 var init_manifest_schema = __esm({
   "../extension-api/src/manifest-schema.ts"() {
+    "use strict";
     init_capabilities();
     init_extension_id();
     init_slug();
@@ -109311,6 +109317,7 @@ function createRefusedAskLog() {
 var NO_APPROVAL_SURFACE, MAX_NAMED_TOOLS;
 var init_run_refusals = __esm({
   "../shared/src/run-refusals.ts"() {
+    "use strict";
     NO_APPROVAL_SURFACE = "no_approval_surface";
     MAX_NAMED_TOOLS = 5;
   }
@@ -164983,6 +164990,7 @@ function assessProcessLiveness(pid, referenceTime, toleranceMs = DEFAULT_PID_REU
 var PS_TIMEOUT_MS, DEFAULT_PID_REUSE_TOLERANCE_MS;
 var init_process_liveness = __esm({
   "../shared/src/process-liveness.ts"() {
+    "use strict";
     PS_TIMEOUT_MS = 2e3;
     DEFAULT_PID_REUSE_TOLERANCE_MS = 12e4;
   }
@@ -263572,7 +263580,6 @@ ${fields}
 var DATA_LANGUAGES, FRONTMATTER_LIMITS, UnsupportedFrontmatterError, OversizedFrontmatterError, NonMappingFrontmatterError, ALIAS_NODE, FRONTMATTER_PARSERS;
 var init_frontmatter = __esm({
   "../skills/src/frontmatter.ts"() {
-    "use strict";
     init_js_yaml();
     DATA_LANGUAGES = /* @__PURE__ */ new Map([
       ["yaml", "yaml"],
@@ -263780,6 +263787,7 @@ async function nestedClaudeFolders(packagePath) {
 var HARNESS_OF, SUBAGENT_EFFECT_FIELDS, MAX_AGENTS_DEPTH, NESTED_WALK_SKIP;
 var init_agent_workspace_config = __esm({
   "../marketplace/src/agent-workspace-config.ts"() {
+    "use strict";
     init_frontmatter();
     HARNESS_OF = {
       ".claude/settings.json": "Claude Code",
@@ -305248,7 +305256,7 @@ var init_client4 = __esm({
         }
         const { autoRefresh, debounceMs } = parseResult.data;
         const { onChanged } = options;
-        const refresh = async () => {
+        const refresh2 = async () => {
           if (!autoRefresh) {
             onChanged(null, null);
             return;
@@ -305267,10 +305275,10 @@ var init_client4 = __esm({
             if (existingTimer) {
               clearTimeout(existingTimer);
             }
-            const timer = setTimeout(refresh, debounceMs);
+            const timer = setTimeout(refresh2, debounceMs);
             this._listChangedDebounceTimers.set(listType, timer);
           } else {
-            refresh();
+            refresh2();
           }
         };
         this.setNotificationHandler(notificationSchema, handler);
@@ -308667,7 +308675,7 @@ var init_agent_mcp_access_token_cache = __esm({
        * @param refresh - Produces the next cached token when the timer fires, or the
        *   verdict explaining why there isn't one.
        */
-      store(agentId, serverName, token, refresh) {
+      store(agentId, serverName, token, refresh2) {
         const key8 = cacheKey2(agentId, serverName);
         const previous3 = this.entries.get(key8);
         if (previous3?.timer) this.scheduler.clear(previous3.timer);
@@ -308675,7 +308683,7 @@ var init_agent_mcp_access_token_cache = __esm({
           accessToken: token.accessToken,
           expiresAt: token.expiresAt,
           serverUrl: token.serverUrl,
-          refresh
+          refresh: refresh2
         };
         this.entries.set(key8, entry2);
         if (!token.refreshable) return;
@@ -346323,13 +346331,13 @@ var init_search_schemas = __esm({
 // ../../apps/server/src/services/connectors/readiness/connection-readiness.ts
 function wayHealthOf(live3, problem, anotherWayWorks = () => false, recheck = () => ({})) {
   if (!live3) {
-    const { checking: checking2, nextCheckAt } = recheck();
+    const { checking: checking2, nextCheckAt: nextCheckAt2 } = recheck();
     return {
       status: "down",
       problem: problem() ?? "unreachable",
       anotherWayWorks: anotherWayWorks(),
       ...checking2 === true && { checking: checking2 },
-      ...nextCheckAt !== void 0 && { nextCheckAt }
+      ...nextCheckAt2 !== void 0 && { nextCheckAt: nextCheckAt2 }
     };
   }
   if (live3.getCapabilities().capabilities.execution.status === "available") {
@@ -358656,7 +358664,6 @@ import { z as z271 } from "zod";
 var CommunityDeliveryAttachmentSchema, CommunityDeliveryAuthorSchema, CommunityDeliveryBaseSchema, CommunityPendingDeliverySchema, CommunityFailedDeliverySchema, CommunityDeliverySchema, CommunityDeliverySnapshotSchema;
 var init_community_deliveries = __esm({
   "../shared/src/community-deliveries.ts"() {
-    "use strict";
     init_community_adapter();
     CommunityDeliveryAttachmentSchema = z271.strictObject({
       name: z271.string().trim().min(1).max(255),
@@ -358904,7 +358911,6 @@ import { z as z274 } from "zod";
 var id5, timestamp3, version3, CommunityAdminLifecycleSchema, CommunityAdminAdmissionPolicySchema, COMMUNITY_SHORT_NAME_PATTERN, CommunityShortNameSchema2, CommunityAdminShortNameUpdateRequestSchema, CommunityAdminShortNamesSchema, CommunityAdminShortNameAvailabilitySchema, CommunityAdminImportStateSchema, CommunityAdminOwnerReplacementReasonSchema, CommunityAdminOwnerReplacementStateSchema, CommunityAdminOwnerReplacementOpenStateSchema, CommunityAdminHostProjectionSchema, maxActiveMembers, maxStorageBytes, bytes, CommunityAdminLimitsSchema, CommunityAdminLimitsUpdateRequestSchema, CommunityAdminMemberLimitsRequestSchema, CommunityAdminMemberLimitsSchema, CommunityAdminUsageSchema, CommunityAdminUsagePageSchema, CommunityAdminCreateRequestSchema, CommunityAdminCreateResponseSchema, CommunityAdminReservedNameCreateRequestSchema, CommunityAdminClaimMutationRequestSchema, CommunityAdminClaimResponseSchema, CommunityAdminSettingsSchema, CommunityAdminSettingsConflictSchema, CommunityAdminSettingsUpdateRequestSchema, CommunityAdminHostLifecycleRequestSchema, CommunityAdminHostDeletionRequestSchema, CommunityAdminHostLegalHoldRequestSchema, CommunityAdminOwnerLifecycleRequestSchema, CommunityAdminDeletionRequestSchema, CommunityAdminDeletionStatusSchema, COMMUNITY_ERASURE_JOURNAL_PAGE_MAX, COMMUNITY_ERASURE_JOURNAL_PAGE_DEFAULT, CommunityAdminErasureJournalQuerySchema, CommunityAdminErasureJournalLineSchema, CommunityAdminErasureJournalPageSchema, COMMUNITY_OWNER_REPLACEMENT_REFERENCE_PATTERN, CommunityAdminOwnerReplacementRequestSchema, CommunityAdminOwnerReplacementSchema, CommunityAdminOwnerReplacementCreateResponseSchema, CommunityAdminOwnerReplacementListSchema, CommunityAdminOwnerReplacementCancelRequestSchema, CommunityAdminOwnerReplacementClaimTokenRequestSchema, CommunityAdminOwnerReplacementClaimTokenSchema, CommunityAdminAccountClosureReasonSchema, CommunityAdminAccountClosureRequestSchema, CommunityAdminAccountClosureStateSchema, CommunityAdminAccountClosureSchema, CommunityAdminAccountClosureCreateResponseSchema, CommunityAdminAccountClosureCancelRequestSchema, CommunityAdminImportCreateRequestSchema, CommunityAdminImportReportSchema, CommunityAdminImportFailureCodeSchema, CommunityAdminImportSchema, CommunityAdminImportCreateResponseSchema, CommunityAdminImportMutationRequestSchema, sha256Hex3, COMMUNITY_IMPORT_MAX_PARTS, CommunityAdminImportPartSchema, CommunityAdminImportPartListSchema, CommunityAdminImportCompleteRequestSchema, CommunityAdminTakedownCategorySchema, takedownReference, CommunityAdminTakedownRequestSchema, CommunityAdminTakedownEvidenceStateSchema, CommunityAdminTakedownSchema, CommunityAdminTakedownResponseSchema, CommunityAdminTakedownListSchema, CommunityAdminTakedownReverseRequestSchema, CommunityAdminTakedownEvidenceRetryRequestSchema, CommunityAdminTakedownReleaseHeldRequestSchema, evidenceSession, evidenceAccount, evidenceFile, CommunityEvidenceRecordV1Schema, CommunityAdminHostCapabilitiesSchema;
 var init_community_admin_wire = __esm({
   "../shared/src/community-admin-wire.ts"() {
-    "use strict";
     init_community_admin_accounts();
     init_community_reserved_short_names();
     init_community_admin_host_keys();
@@ -360267,7 +360273,6 @@ function parseCommunityReportMailto(value2) {
 var id10, timestamp8, cursor, idempotencyKey, attachmentIds, mentions, CommunityWireHandleSchema, COMMUNITY_API_V1_ROUTES, CommunityWireCommunitySchema, CommunityWireBootstrapPreflightRequestSchema, CommunityWireBootstrapPreflightResponseSchema, COMMUNITY_PASSWORD_MIN_LENGTH, CommunityWireBootstrapCompleteRequestSchema, CommunityWireBootstrapCompleteResponseSchema, CommunityWireBootstrapClaimResponseSchema, CommunityWireHostCommunitySchema, CommunityWireHostCommunityListResponseSchema, CommunityWireMembershipSummarySchema, CommunityWireShortNameLookupSchema, CommunityWireMembershipListResponseSchema, CommunityWireHostCommunityCreateRequestSchema, CommunityWireHostCommunityCreateResponseSchema, CommunityWireHostCommunityLifecycleRequestSchema, CommunityWireOwnerClaimPreflightRequestSchema, CommunityWireOwnerClaimPreflightResponseSchema, CommunityWireOwnerClaimRequestSchema, ownerReplacementToken, CommunityWireOwnerReplacementOptionsSchema, ownerReplacementNoticeFields, CommunityWireOwnerReplacementAdminNoticeSchema, CommunityWireOwnerReplacementOwnerNoticeSchema, CommunityWireOwnerReplacementNoticeResponseSchema, CommunityWireOwnerReplacementObjectionRequestSchema, CommunityWireOwnerReplacementObjectRequestSchema, CommunityWireOwnerReplacementObjectPreflightResponseSchema, CommunityWireOwnerReplacementObjectResponseSchema, CommunityWireOwnerReplacementPreflightRequestSchema, CommunityWireOwnerReplacementPreflightResponseSchema, CommunityWireOwnerReplacementClaimRequestSchema, CommunityWireOwnerReplacementClaimResponseSchema, CommunityWireHumanRoleSchema, CommunityWireMemberSchema, CommunityWireMemberListResponseSchema, CommunityWireMemberRoleUpdateRequestSchema, CommunityWireMemberResponseSchema, CommunityWireMemberDirectoryQuerySchema, CommunityWireMemberDirectoryPageSchema, COMMUNITY_MINIMUM_AGE_FLOOR, COMMUNITY_MINIMUM_AGE_CEILING, CommunityWireSignInMarkSchema, COUNTRY_CODES, CommunityWireAuthOptionsSchema, CommunityWireSignUpConfirmationRequestSchema, CommunityWireSignUpConfirmationResponseSchema, REPORT_MAILBOX, CommunityWireHostLinksSchema, CommunityWireAccountSignInMethodsSchema, CommunityWireAccountPasswordRequestSchema, CommunityWireSignInLinkRequestSchema, CommunityWireSignInLinkResponseSchema, CommunityWireSignInLinkNoticeSchema, CommunityWireEmailLinkKindSchema, CommunityWireEmailLinkTokenSchema, CommunityWireNewPasswordSchema, CommunityWirePasswordResetRequestSchema, CommunityWireEmailLinkAcceptedSchema, CommunityWireEmailLinkTokenRequestSchema, CommunityWireEmailLinkPeekSchema, CommunityWirePasswordResetUseRequestSchema, CommunityWirePasswordResetUseResponseSchema, CommunityWireEmailSignInResponseSchema, CommunityWireEmailConfirmRequestSchema, CommunityWireEmailConfirmResponseSchema, CommunityWireChannelSchema, CommunityWireAttentionResponseSchema, CommunityWireChannelCreateRequestSchema, CommunityWireChannelUpdateRequestSchema, CommunityWireChannelAutoJoinResponseSchema, CommunityWireChannelListResponseSchema, CommunityWireChannelResponseSchema, CommunityWireChannelMemberRequestSchema, CommunityWireAgentChannelMembershipRequestSchema, CommunityWireAgentChannelMembershipResponseSchema, CommunityWireAttachmentSchema, CommunityWireAttachmentUploadRequestSchema, CommunityWireAttachmentUploadResponseSchema, CommunityWireEntrySchema, CommunityWireEntryPostRequestSchema, CommunityWireEntryPostResponseSchema, CommunityWireEntryRemoveResponseSchema, CommunityWireEntryPageSchema, CommunityWireEntryPageQuerySchema, CommunityWireThreadSummaryQuerySchema, CommunityWireThreadSummarySchema, CommunityWireThreadSummaryListSchema, CommunityWireRedactionPageQuerySchema, CommunityWireRedactionSchema, CommunityWireRedactionPageSchema, CommunityWireReadCursorRequestSchema, CommunityWireReadCursorResponseSchema, CommunityWireEventSchema, CommunityWireInviteCreateRequestSchema, CommunityWireInviteSchema, CommunityWireInviteCreateResponseSchema, CommunityWireInviteListResponseSchema, CommunityWireInvitePreflightResponseSchema, CommunityWireInviteTokenRequestSchema, CommunityWireInvitePreviewResponseSchema, CommunityWireInvitePendingResponseSchema, CommunityWireInviteBindResponseSchema, CommunityWireInviteRedeemRequestSchema, CommunityWireInviteRedeemResponseSchema, CommunityWireOpenAdmissionSchema, CommunityWireOpenAdmissionPreflightResponseSchema, CommunityWireOpenAdmissionJoinRequestSchema, CommunityWireOpenAdmissionJoinResponseSchema, CommunityWirePairingStartRequestSchema, CommunityWirePairingStartResponseSchema, CommunityWirePairingApproveRequestSchema, CommunityWirePairingApproveResponseSchema, CommunityWirePairingDeclineRequestSchema, CommunityWirePairingDeclineResponseSchema, CommunityWirePairingPollRequestSchema, CommunityWirePairingStatusResponseSchema, CommunityWirePairingExchangeRequestSchema, CommunityWireGrantCapabilitiesSchema, CommunityConnectionAccessSchema, CommunityWireConnectionAccessResponseSchema, CommunityWireHostAccessResponseSchema, CommunityWireGrantSchema, CommunityWireGrantListResponseSchema, CommunityWireDisconnectAllRequestSchema, CommunityWireOwnerTransferRequestSchema, CommunityWireMemberLeaveRequestSchema, CommunityWireOwnerTransferResponseSchema, CommunityWireOwnerExportRequestSchema, CommunityWireExportFailureCodeSchema, CommunityWireExportSchema, CommunityWireExportResponseSchema, CommunityWireExportListSchema, CommunityWireHistoryOriginSchema, CommunityWireErasureSchema, CommunityWireErasureCreateRequestSchema, CommunityWireErasureResponseSchema, CommunityWireErasureListResponseSchema, CommunityWireFormerMembershipSchema, CommunityWireFormerMembershipListResponseSchema, CommunityWireOwnerErasureSchema, CommunityWireOwnerErasureListResponseSchema, CommunityWireTakedownCategorySchema, CommunityWireTakedownNoticeSchema, CommunityWireTakedownNoticeListResponseSchema, CommunityWireErrorCodeSchema, CommunityWireErrorSchema;
 var init_community_wire = __esm({
   "../shared/src/community-wire.ts"() {
-    "use strict";
     init_community_admin_wire();
     init_handle2();
     init_community_moderation_wire();
@@ -362207,6 +362212,14 @@ async function checkedAddress(origin, resolve20 = (host2) => dnsLookup(host2, {
   }
   return local2 ? answers.find((answer4) => answer4.family === 4) ?? answers[0] : answers[0];
 }
+function pinnedLookup(address) {
+  return (_hostname, options, callback) => {
+    setImmediate(() => {
+      if (options.all) callback(null, [address]);
+      else callback(null, address.address, address.family);
+    });
+  };
+}
 function remoteErrorCode(content3) {
   try {
     const parsed = CommunityWireErrorCodeSchema.safeParse(
@@ -362227,10 +362240,7 @@ async function pinnedJson(origin, path361, body2, signal, options = {}) {
   if (target.origin !== origin.origin || !path361.startsWith("/api/v1/"))
     throw new PinnedOriginError("INVALID_ORIGIN");
   const address = await checkedAddress(origin);
-  const lookup5 = (_hostname, options2, callback) => {
-    if (options2.all) callback(null, [address]);
-    else callback(null, address.address, address.family);
-  };
+  const lookup5 = pinnedLookup(address);
   const agent = origin.protocol === "https:" ? new HttpsAgent({ keepAlive: false, lookup: lookup5 }) : new HttpAgent({ keepAlive: false, lookup: lookup5 });
   const payload = options.rawBody ?? (body2 === void 0 ? void 0 : Buffer.from(JSON.stringify(body2)));
   const method = options.method ?? (payload ? "POST" : "GET");
@@ -362305,10 +362315,7 @@ async function* pinnedSse(origin, path361, authorization2, lastEventId, signal,
   if (target.origin !== origin.origin || !path361.startsWith("/api/v1/"))
     throw new PinnedOriginError("INVALID_ORIGIN");
   const address = await checkedAddress(origin);
-  const lookup5 = (_hostname, options, callback) => {
-    if (options.all) callback(null, [address]);
-    else callback(null, address.address, address.family);
-  };
+  const lookup5 = pinnedLookup(address);
   const agent = origin.protocol === "https:" ? new HttpsAgent({ keepAlive: false, lookup: lookup5 }) : new HttpAgent({ keepAlive: false, lookup: lookup5 });
   const bounded2 = new AbortController();
   let timer;
@@ -367308,11 +367315,11 @@ function commits(count4) {
   return count4 === 1 ? "1 commit" : `${count4} commits`;
 }
 function heldMoves(files) {
-  const refresh = files.refresh;
-  if (!refresh || refresh.kind !== "held") return null;
-  if (refresh.reason === "busy" || refresh.reason === "off-branch") return null;
-  if (!refresh.moved || refresh.moved.commits.length === 0) return null;
-  return refresh.moved;
+  const refresh2 = files.refresh;
+  if (!refresh2 || refresh2.kind !== "held") return null;
+  if (refresh2.reason === "busy" || refresh2.reason === "off-branch") return null;
+  if (!refresh2.moved || refresh2.moved.commits.length === 0) return null;
+  return refresh2.moved;
 }
 function fileList(shown, total) {
   const listed2 = shown.slice(0, MAIN_MOVED_FILES_SHOWN).map((file) => inertLine(file));
@@ -367320,21 +367327,21 @@ function fileList(shown, total) {
   return more > 0 ? `${listed2.join(", ")}, and ${more} more` : listed2.join(", ");
 }
 function refreshLines(files, worktree) {
-  const refresh = files.refresh;
-  if (!refresh) return [];
-  if (refresh.kind === "refreshed") {
-    const n4 = refresh.paths.length;
+  const refresh2 = files.refresh;
+  if (!refresh2) return [];
+  if (refresh2.kind === "refreshed") {
+    const n4 = refresh2.paths.length;
     return [
       `Your copy was brought up to date with main at the start of this turn (${n4 === 1 ? "1 file" : `${n4} files`} changed).`
     ];
   }
-  if (refresh.kind !== "held") return [];
-  if (refresh.reason === "unsafe-config") {
+  if (refresh2.kind !== "held") return [];
+  if (refresh2.reason === "unsafe-config") {
     return [
       "Your copy was not updated: the room's shared git settings contain entries that can make git run programs, so DorkOS will not update, merge or save this room\u2019s files until a person removes those entries (the operator is told which ones). Never add git settings to the room\u2019s repository. If you need to merge, say so in the room."
     ];
   }
-  if (refresh.reason === "off-branch") {
+  if (refresh2.reason === "off-branch") {
     const branch = sanitizeIdentity(files.branch) ?? "its own branch";
     return [`Your copy is not on ${branch}, so it was not updated. Switch back before you merge.`];
   }
@@ -409566,6 +409573,7 @@ var init_event_client = __esm({
 // ../connector-providers/src/composio/index.ts
 var init_composio = __esm({
   "../connector-providers/src/composio/index.ts"() {
+    "use strict";
     init_sdk_client();
     init_event_client();
   }
@@ -458841,9 +458849,9 @@ var init_x509_workload_identity_auth = __esm({
         }
         __classPrivateFieldSet4(this, _X509WorkloadIdentityAuth_tokenGeneration, __classPrivateFieldGet5(this, _X509WorkloadIdentityAuth_tokenGeneration, "f") + 1, "f");
         __classPrivateFieldSet4(this, _X509WorkloadIdentityAuth_cachedToken, void 0, "f");
-        const refresh = __classPrivateFieldGet5(this, _X509WorkloadIdentityAuth_refresh, "f");
+        const refresh2 = __classPrivateFieldGet5(this, _X509WorkloadIdentityAuth_refresh, "f");
         __classPrivateFieldSet4(this, _X509WorkloadIdentityAuth_refresh, void 0, "f");
-        refresh?.controller.abort(new APIUserAbortError2());
+        refresh2?.controller.abort(new APIUserAbortError2());
       }
       /** Binds the minted credential to the original headers before protected request hooks run. */
       bindRequest(options, request, adminAPIKey) {
@@ -482247,10 +482255,10 @@ var init_bootstrap = __esm({
           () => this._anotherWayWorks(providerInstanceId, toolkit),
           () => {
             const key8 = this._wayKey(providerInstanceId);
-            const nextCheckAt = this.nextWayCheckAt(providerInstanceId);
+            const nextCheckAt2 = this.nextWayCheckAt(providerInstanceId);
             return {
               ...key8 !== void 0 && this._checking.has(key8) && { checking: true },
-              ...nextCheckAt !== void 0 && { nextCheckAt }
+              ...nextCheckAt2 !== void 0 && { nextCheckAt: nextCheckAt2 }
             };
           }
         );
@@ -491750,8 +491758,8 @@ function toCompatOAuthFlows(core2) {
         tokenUrl: v5.tokenUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.authorizationCode.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.authorizationCode.refreshUrl = refresh2;
       break;
     }
     case "clientCredentials": {
@@ -491760,8 +491768,8 @@ function toCompatOAuthFlows(core2) {
         tokenUrl: v5.tokenUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.clientCredentials.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.clientCredentials.refreshUrl = refresh2;
       break;
     }
     case "implicit": {
@@ -491770,8 +491778,8 @@ function toCompatOAuthFlows(core2) {
         authorizationUrl: v5.authorizationUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.implicit.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.implicit.refreshUrl = refresh2;
       break;
     }
     case "password": {
@@ -491780,8 +491788,8 @@ function toCompatOAuthFlows(core2) {
         tokenUrl: v5.tokenUrl,
         scopes: { ...v5.scopes }
       };
-      const refresh = nonEmpty(v5.refreshUrl);
-      if (refresh !== void 0) result3.password.refreshUrl = refresh;
+      const refresh2 = nonEmpty(v5.refreshUrl);
+      if (refresh2 !== void 0) result3.password.refreshUrl = refresh2;
       break;
     }
     case "deviceCode":
@@ -493860,32 +493868,53 @@ function resolveSidebarItems(refs2, roster) {
 }
 
 // ../../apps/server/src/services/core/update-checker.ts
+init_env();
 init_version4();
 init_server_role();
 var CACHE_TTL = 60 * 60 * 1e3;
+var FAILURE_BACKOFF = 5 * 60 * 1e3;
 var FETCH_TIMEOUT = 5e3;
+var VERSION_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+var MAX_VERSION_LENGTH = 64;
 var cachedLatest = null;
-var lastChecked2 = 0;
-async function getLatestVersion() {
-  if (IS_DEV_BUILD) return null;
-  if (currentServerRole() === "hub") return null;
-  if (Date.now() - lastChecked2 < CACHE_TTL) return cachedLatest;
+var nextCheckAt = 0;
+var refreshing = null;
+function checksRegistry() {
+  if (IS_DEV_BUILD) return false;
+  if (currentServerRole() === "hub") return false;
+  return !isSwitchOn(env2.DORKOS_UPDATE_CHECK_DISABLED);
+}
+function isSwitchOn(value2) {
+  return value2 === "1" || value2?.toLowerCase() === "true";
+}
+async function refresh() {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT);
   try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT);
     const res = await fetch("https://registry.npmjs.org/dorkos/latest", {
       signal: controller.signal
     });
-    clearTimeout(timeout);
-    if (!res.ok) return cachedLatest;
-    const data = await res.json();
-    cachedLatest = data.version;
-    lastChecked2 = Date.now();
-    return cachedLatest;
+    if (!res.ok) throw new Error(`registry answered ${res.status}`);
+    const { version: version4 } = await res.json();
+    if (typeof version4 !== "string" || version4.length > MAX_VERSION_LENGTH || !VERSION_PATTERN.test(version4))
+      throw new Error("registry answered no version");
+    cachedLatest = version4;
+    nextCheckAt = Date.now() + CACHE_TTL;
   } catch {
-    return cachedLatest;
+    nextCheckAt = Date.now() + FAILURE_BACKOFF;
+  } finally {
+    clearTimeout(timeout);
   }
 }
+async function getLatestVersion() {
+  if (!checksRegistry()) return null;
+  if (refreshing === null && Date.now() >= nextCheckAt) {
+    refreshing = refresh().finally(() => {
+      refreshing = null;
+    });
+  }
+  return cachedLatest;
+}
 
 // ../../apps/server/src/services/core/operator/operator-tool-handlers.ts
 init_session6();
@@ -532199,11 +532228,11 @@ function readinessFrom(facts2) {
 var card = null;
 var lastRefreshAt = Number.NEGATIVE_INFINITY;
 var lastRetryAt = Number.NEGATIVE_INFINITY;
-var refreshing = false;
+var refreshing2 = false;
 function refreshInBackground(deps3, linkKey2) {
   const now5 = deps3.now();
-  if (refreshing || now5 - lastRefreshAt < REFRESH_EVERY_MS) return;
-  refreshing = true;
+  if (refreshing2 || now5 - lastRefreshAt < REFRESH_EVERY_MS) return;
+  refreshing2 = true;
   lastRefreshAt = now5;
   void Promise.all([
     deps3.readCatalog().catch(() => null),
@@ -532213,7 +532242,7 @@ function refreshInBackground(deps3, linkKey2) {
   ]).catch((err) => {
     logger.debug("[credits] readiness refresh failed", { err: String(err) });
   }).finally(() => {
-    refreshing = false;
+    refreshing2 = false;
   });
 }
 function creditsReadinessWith(deps3) {
@@ -533964,7 +533993,7 @@ router4.get("/", async (c5) => {
   if (!parsed.success) {
     return c5.json({ error: "Invalid query", details: z291.treeifyError(parsed.error) }, 400);
   }
-  const refresh = parsed.data.refresh === "true";
+  const refresh2 = parsed.data.refresh === "true";
   const runtimeParam = parsed.data.runtime;
   const sessionId = parsed.data.sessionId;
   try {
@@ -533986,7 +534015,7 @@ router4.get("/", async (c5) => {
       }
       runtime = runtimeRegistry.getDefault();
     }
-    const commands = await runtime.getCommands(refresh, validatedCwd);
+    const commands = await runtime.getCommands(refresh2, validatedCwd);
     return c5.json(commands);
   } catch (err) {
     if (err instanceof BoundaryError) {
@@ -611533,6 +611562,76 @@ function registerHeartbeat(options) {
 // ../../apps/server/src/index.ts
 init_usage_reporter();
 
+// ../../apps/server/src/lib/process/network-fault.ts
+var NETWORK_FAULT_CODES = /* @__PURE__ */ new Set([
+  "ECONNRESET",
+  "ECONNREFUSED",
+  "ETIMEDOUT",
+  "EHOSTUNREACH",
+  "ENETUNREACH",
+  "ENOTFOUND",
+  "EAI_AGAIN",
+  "EPIPE",
+  "UND_ERR_SOCKET",
+  "UND_ERR_CONNECT_TIMEOUT",
+  "UND_ERR_HEADERS_TIMEOUT"
+]);
+var CONNECT_ONLY_FAULT_CODES = /* @__PURE__ */ new Set([
+  "EADDRNOTAVAIL",
+  "ENETDOWN",
+  "EHOSTDOWN"
+]);
+var NETWORK_SYSCALLS = /* @__PURE__ */ new Set([
+  "connect",
+  "read",
+  "write",
+  "getaddrinfo",
+  "getnameinfo",
+  "queryA",
+  "queryAaaa"
+]);
+function isNetworkFailure(value2) {
+  if (typeof value2 !== "object" || value2 === null) return false;
+  const { code: code3, syscall } = value2;
+  if (typeof code3 === "string" && CONNECT_ONLY_FAULT_CODES.has(code3)) return syscall === "connect";
+  if (typeof code3 !== "string" || !NETWORK_FAULT_CODES.has(code3)) return false;
+  if (code3.startsWith("UND_ERR_")) return true;
+  return typeof syscall === "string" && NETWORK_SYSCALLS.has(syscall);
+}
+function isSurvivableNetworkFault(value2) {
+  if (isNetworkFailure(value2)) return true;
+  const cause = typeof value2 === "object" && value2 !== null ? value2.cause : null;
+  return isNetworkFailure(cause);
+}
+function faultOrigin(value2) {
+  const stack = typeof value2 === "object" && value2 !== null ? value2.stack : null;
+  if (typeof stack !== "string") return "unknown";
+  const frame = stack.split("\n").slice(1).map((line3) => line3.trim()).find((line3) => line3.startsWith("at ") && !line3.includes("node:"));
+  return frame ? frame.slice(3) : "unknown";
+}
+function createProcessFaultHandlers(deps3) {
+  let survived = 0;
+  const handle3 = (kind, value2) => {
+    if (!isSurvivableNetworkFault(value2)) {
+      deps3.fatal(kind, value2);
+      return;
+    }
+    survived += 1;
+    const failure7 = isNetworkFailure(value2) ? value2 : value2.cause;
+    deps3.warn("[DorkOS] A network connection failed and nothing caught it; still running", {
+      kind,
+      code: failure7.code,
+      origin: faultOrigin(value2),
+      survived
+    });
+  };
+  return {
+    onUncaughtException: (error8) => handle3("uncaughtException", error8),
+    onUnhandledRejection: (reason) => handle3("unhandledRejection", reason),
+    survivedCount: () => survived
+  };
+}
+
 // ../../apps/server/src/services/core/ai-metadata-reporter.ts
 init_links();
 init_telemetry_events();
@@ -643759,7 +643858,7 @@ ${prose}`;
 function refreshDorkbotAgentsMd(content3) {
   return PREVIOUS_DORKBOT_AGENTS_MD.includes(content3) ? dorkbotClaudeMdTemplate() : null;
 }
-async function refreshFile(filePath2, refresh) {
+async function refreshFile(filePath2, refresh2) {
   return withFileLock(filePath2, async (write) => {
     let content3;
     try {
@@ -643768,7 +643867,7 @@ async function refreshFile(filePath2, refresh) {
     } catch {
       return false;
     }
-    const next = refresh(content3);
+    const next = refresh2(content3);
     if (next === null) return false;
     await write(next);
     return true;
@@ -671634,6 +671733,7 @@ async function startAfterListen(refs2, built) {
     setHubRelaySigner(signWithHubKey, hubSigningPublicKey);
     setHubRelayWaker(hubRelayWake());
   }
+  void getLatestVersion();
   const sweepCanvases = () => sweepOrphanedCanvases(peekCanvasService(), async () => {
     const listing = await aggregateSessionList({
       runtimes: runtimeRegistry.listRuntimes(),
@@ -672152,14 +672252,19 @@ async function shutdownServices() {
 var shutdown = createSignalShutdown(shutdownServices);
 process.on("SIGINT", shutdown);
 process.on("SIGTERM", shutdown);
-process.on("uncaughtException", (err) => {
-  logger.error("[DorkOS] Uncaught exception \u2014 shutting down", err);
-  void flushServerError(err).finally(() => process.exit(1));
-});
-process.on("unhandledRejection", (reason) => {
-  logger.error("[DorkOS] Unhandled promise rejection", { reason });
-  void captureServerError(reason);
+var processFaults = createProcessFaultHandlers({
+  warn: (message4, data) => logger.warn(message4, data),
+  fatal: (kind, value2) => {
+    if (kind === "unhandledRejection") {
+      logger.error("[DorkOS] Unhandled promise rejection \u2014 shutting down", { reason: value2 });
+    } else {
+      logger.error("[DorkOS] Uncaught exception \u2014 shutting down", value2);
+    }
+    void flushServerError(value2).finally(() => process.exit(1));
+  }
 });
+process.on("uncaughtException", processFaults.onUncaughtException);
+process.on("unhandledRejection", processFaults.onUnhandledRejection);
 start().catch(async (err) => {
   mainRequestAdmission.close();
   try {

package/dist/server/index.js.map

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/server/index.js.map
-size: 64244043 bytes
-sha256: 310935988a7b312affb8647fda3f63d416d78370e9d212f7162230692df338cb
+size: 64257265 bytes
+sha256: c9a448e0e0b110e28fba86600564364c3f9b4e9c69b62c06483630ba514ca5f2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dorkos",
-  "version": "0.125.1",
+  "version": "0.125.2",
   "description": "You, multiplied. Build and run your business with an agent team. Your agents join your team chat, take on real work, and build the tools your company runs on.",
   "license": "MIT",
   "author": "Dorian Collier",
@@ -82,14 +82,14 @@
     "tsx": "^4.23.15",
     "typescript": "^5.9.3",
     "vitest": "^4.1.11",
-    "@dorkos/marketplace": "0.0.0",
+    "@dorkos/browser": "0.0.0",
     "@dorkos/db": "0.0.0",
     "@dorkos/harness": "0.0.0",
+    "@dorkos/marketplace": "0.0.0",
     "@dorkos/server": "0.0.0",
+    "@dorkos/eslint-config": "0.0.0",
     "@dorkos/typescript-config": "0.0.0",
     "@dorkos/shared": "0.0.0",
-    "@dorkos/browser": "0.0.0",
-    "@dorkos/eslint-config": "0.0.0",
     "@dorkos/client": "0.0.0"
   },
   "scripts": {

package/dist/client/assets/HandlePage-BFp054RW.js

@@ -1 +0,0 @@
-import{j as o}from"./index-BDJuvXMG.js";import{a as t}from"./ProfileFields-BIDZHo11.js";import"./profile-errors-XchEnatB.js";import"./use-mounted-ref-NbCy8N-y.js";function n({member:r}){return o.jsx(t,{member:r})}export{n as HandlePage};

package/dist/client/assets/NamePage-CaA8-GZa.js

@@ -1 +0,0 @@
-import{j as o}from"./index-BDJuvXMG.js";import{P as m}from"./ProfileFields-BIDZHo11.js";import"./profile-errors-XchEnatB.js";import"./use-mounted-ref-NbCy8N-y.js";function a({member:r}){return o.jsx(m,{member:r})}export{a as NamePage};

package/dist/client/assets/PhotoPage-B-aM0VI7.js

@@ -1 +0,0 @@
-import{j as r}from"./index-BDJuvXMG.js";import{b as t}from"./ProfileFields-BIDZHo11.js";import"./profile-errors-XchEnatB.js";import"./use-mounted-ref-NbCy8N-y.js";function s({member:o}){return r.jsx(t,{member:o})}export{s as PhotoPage};

package/dist/client/assets/_shell.marketplace-D5vPAK8b.js

@@ -1 +0,0 @@
-import{j as t}from"./index-BDJuvXMG.js";import{M as o}from"./Marketplace-nlAKYRdC.js";import{P as r}from"./page-container-CGXX9atD.js";import"./PreviewRefusedNotice-B6hvUBqt.js";import"./shield-x-DxL97yUb.js";import"./card-CHG8Y8EA.js";import"./empty-state-BO-UXPQj.js";import"./markdown-content-NzXgwE2G.js";import"./use-unclaimed-chats-BrLVSVmS.js";import"./use-bindings-BAKvriCK.js";import"./UnlinkDialog-CHiFjqy9.js";import"./use-dev-links-D5AXy-P_.js";import"./more-details-XSn-_PbH.js";import"./file-DQJ4ncBH.js";import"./AgentPicker-D4o66W3h.js";import"./command-BiVO_CS1.js";import"./AgentOptionRow-BcNFNeXa.js";import"./useMutationState-BwG8hXiA.js";import"./file-exclamation-point-3K4for51.js";import"./rotate-ccw-clock-Cvx7qMiL.js";import"./path-input-mDIpl2-x.js";function i(){return t.jsx(r,{width:"wide",children:t.jsx(o,{})})}const R=i;export{R as component};