dorkos 0.126.0 → 0.126.2

package/dist/bin/cli.js

@@ -345,10 +345,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema3) {
   return mergeDefs(schema3._zod.def);
 }
-function getElementAtPath(obj, path68) {
-  if (!path68)
+function getElementAtPath(obj, path71) {
+  if (!path71)
     return obj;
-  return path68.reduce((acc, key) => acc?.[key], obj);
+  return path71.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -607,11 +607,11 @@ function explicitlyAborted(x2, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path68, issues) {
+function prefixIssues(path71, issues) {
   return issues.map((iss) => {
     var _a7;
     (_a7 = iss).path ?? (_a7.path = []);
-    iss.path.unshift(path68);
+    iss.path.unshift(path71);
     return iss;
   });
 }
@@ -1144,16 +1144,16 @@ function flattenError(error63, mapper = (issue2) => issue2.message) {
 }
 function formatError(error63, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error64, path68 = []) => {
+  const processError = (error64, path71 = []) => {
     for (const issue2 of error64.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path68, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path71, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path68, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path71, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path68, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path71, ...issue2.path]);
       } else {
-        const fullpath = [...path68, ...issue2.path];
+        const fullpath = [...path71, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -1192,17 +1192,17 @@ function formatError(error63, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error63, mapper = (issue2) => issue2.message) {
   const result2 = { errors: [] };
-  const processError = (error64, path68 = []) => {
+  const processError = (error64, path71 = []) => {
     var _a7;
     for (const issue2 of error64.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path68, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path71, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path68, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path71, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path68, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path71, ...issue2.path]);
       } else {
-        const fullpath = [...path68, ...issue2.path];
+        const fullpath = [...path71, ...issue2.path];
         if (fullpath.length === 0) {
           result2.errors.push(mapper(issue2));
           continue;
@@ -1241,8 +1241,8 @@ function treeifyError(error63, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path68 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path68) {
+  const path71 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path71) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -19274,13 +19274,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path68 = ref.slice(1).split("/").filter(Boolean);
-  if (path68.length === 0) {
+  const path71 = ref.slice(1).split("/").filter(Boolean);
+  if (path71.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path68[0] === defsKey) {
-    const key = path68[1] === void 0 ? void 0 : decodeJSONPointerSegment(path68[1]);
+  if (path71[0] === defsKey) {
+    const key = path71[1] === void 0 ? void 0 : decodeJSONPointerSegment(path71[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -22684,11 +22684,47 @@ var init_extension_config_schemas = __esm({
        */
       origin: ExtensionOriginSchema.optional(),
       /**
-       * For a copy whose plugin files changed after DorkOS installed it: the
-       * whole plugin folder's digest the person said yes to. Any further change
-       * asks again, because a path alone no longer says what is there.
+       * The folder digest the yes was given to (DOR-3068): the whole plugin
+       * folder for a plugin-carried copy, the extension's own folder otherwise.
+       * Any change to those files waits for a person, because a path alone no
+       * longer says what is there. Absent only for a dev link, or for a copy
+       * that keeps its path trust (`authorHome`).
        */
       digest: external_exports.string().min(1).optional(),
+      /**
+       * The real path of the folder of the agent that created this extension
+       * with `create_extension` (DOR-3068). Its edits keep loading without a
+       * digest only while the copy runs separately, declares exactly `grants`,
+       * and its real path stays inside this folder. Absent for a copy a person
+       * approved by hand, which is always pinned by `digest`.
+       */
+      authorHome: external_exports.string().min(1).optional(),
+      /**
+       * A digest of what the copy declared it may reach when the yes was given
+       * (DOR-3068): where it runs, its `allow` lists, its secrets, its data
+       * proxy and its server entry. Any change waits for a person.
+       */
+      grants: external_exports.string().min(1).optional(),
+      /**
+       * When DorkOS pinned an approval given before approvals named content to
+       * the files it found then (DOR-3068), once, on the first scan after the
+       * upgrade. ISO 8601. Absent for every approval given since.
+       */
+      pinnedOnFirstUse: external_exports.string().optional(),
+      /**
+       * Set once, by the `'0.126.1'` config migration, on an approval written
+       * before approvals named content (DOR-3068). Only such an approval is pinned
+       * to the files the next scan finds; a digest-less approval written since is
+       * never pinned to whatever is on disk.
+       */
+      legacyPathOnly: external_exports.boolean().optional(),
+      /**
+       * The digest of the exact screen code (the client bundle the app loads) the
+       * yes was given to, for a copy that keeps path trust (DOR-3068). Path trust
+       * covers the server half only: when the bundle the app would load differs,
+       * the screen half stays off until a person approves again.
+       */
+      clientDigest: external_exports.string().min(1).optional(),
       /**
        * The real path of the dev link this approval was given to (DOR-2696);
        * absent for an installed copy. A dev link sits at its package's normal
@@ -22789,6 +22825,17 @@ var init_tooling = __esm({
        * `operator-only` for the same reason as `approvedToRun`.
        */
       approvedSources: external_exports.record(external_exports.string(), ExtensionApprovedSourceSchema).default(() => ({})),
+      /**
+       * The approved ids that named no copy when content pins arrived (DOR-3068),
+       * written once by the `'0.126.1'` config migration. Only these are bound,
+       * on a later scan, to the extension installed directly under
+       * `{dorkHome}/extensions/<id>`; an id is dropped from here once bound. An
+       * unsourced id not listed is never bound, so a folder an agent creates
+       * later under an old approved name never inherits that approval.
+       *
+       * `operator-only` for the same reason as `approvedToRun`.
+       */
+      legacyUnsourced: external_exports.array(external_exports.string()).optional(),
       /**
        * The permission set each approval covers, keyed by extension id
        * (DOR-2686): what the extension declared when a person said yes.
@@ -22952,6 +22999,38 @@ var init_tooling = __esm({
        * wants to run stops matching and is asked about again.
        */
       refusedHooks: external_exports.array(external_exports.string()).default(() => []),
+      /**
+       * The state of each agent's own folder settings a person let run
+       * (DOR-3068): its hooks and MCP choices in `.claude/settings*.json`, its
+       * `.mcp.json`, and its agent file's MCP servers and account. Each entry is
+       * `<agentId>@folder-config-<digest>`, where the digest covers the agent's
+       * home and those three parts, so a change the agent makes waits for a person
+       * instead of riding an old yes. An agent with no entry is pinned to what its
+       * folder holds the first time it runs. Empty by default.
+       */
+      approvedFolderConfig: external_exports.array(external_exports.string().min(1)).default(() => []),
+      /**
+       * The per-part digests behind each agent's yes in
+       * {@link approvedFolderConfig}, by agent id, so a card can say which part
+       * changed. Read only while a stored yes still digests to them.
+       */
+      approvedFolderConfigParts: external_exports.record(
+        external_exports.string(),
+        external_exports.object({ hooks: external_exports.string(), mcpJson: external_exports.string(), manifest: external_exports.string() })
+      ).default(() => ({})),
+      /**
+       * The states a person turned down, in the same form as
+       * {@link approvedFolderConfig}. Not asked about again until the settings
+       * change again.
+       */
+      refusedFolderConfig: external_exports.array(external_exports.string().min(1)).default(() => []),
+      /**
+       * Whether DorkOS has pinned the agents that already existed (DOR-3068). It
+       * does that once, at the first start with the folder settings pin; after
+       * that, an agent with no record whose home runs anything waits for a
+       * person. Carried across a config wipe, so a wipe never re-pins.
+       */
+      folderConfigPinned: external_exports.boolean().default(false),
       /**
        * The two decisions global scope records: which agent tools DorkOS shares
        * your globally installed packages with, and when it last asked.
@@ -22988,6 +23067,10 @@ var init_tooling = __esm({
       autoAdopt: false,
       approvedHooks: [],
       refusedHooks: [],
+      approvedFolderConfig: [],
+      approvedFolderConfigParts: {},
+      refusedFolderConfig: [],
+      folderConfigPinned: false,
       global: { harnesses: [], askedAt: null }
     }));
     WorkbenchConfigSchema = external_exports.object({
@@ -26485,18 +26568,18 @@ var init_logger = __esm({
 });
 
 // ../shared/src/links.ts
-function join(base, path68) {
-  if (path68 === "" || /^[/?#]/.test(path68)) return `${base}${path68}`;
-  return `${base}/${path68}`;
+function join(base, path71) {
+  if (path71 === "" || /^[/?#]/.test(path71)) return `${base}${path71}`;
+  return `${base}/${path71}`;
 }
-function siteUrl(path68 = "") {
-  return join(links.site, path68);
+function siteUrl(path71 = "") {
+  return join(links.site, path71);
 }
-function docsUrl(path68 = "") {
-  return join(links.docs, path68);
+function docsUrl(path71 = "") {
+  return join(links.docs, path71);
 }
-function repoUrl(path68 = "") {
-  return join(links.repo, path68);
+function repoUrl(path71 = "") {
+  return join(links.repo, path71);
 }
 var GITHUB_ORG, links;
 var init_links = __esm({
@@ -26920,7 +27003,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.126.0";
+  if (true) return "0.126.2";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -27123,8 +27206,8 @@ and your settings stay in the file you renamed.`;
 });
 
 // ../../apps/server/src/services/core/config/browser-setting.ts
-function browserSettingRefusal(path68, value) {
-  const enabled3 = path68 === "browser.enabled" ? value : path68 === "browser" && value !== null && typeof value === "object" ? value.enabled : void 0;
+function browserSettingRefusal(path71, value) {
+  const enabled3 = path71 === "browser.enabled" ? value : path71 === "browser" && value !== null && typeof value === "object" ? value.enabled : void 0;
   return enabled3 === true ? BROWSER_SETTING_UNAVAILABLE : null;
 }
 var BROWSER_SETTING_UNAVAILABLE;
@@ -27156,9 +27239,9 @@ function hubPinnedRead(key, value) {
   }
   return value;
 }
-function hubSettingRefusal(path68, value) {
+function hubSettingRefusal(path71, value) {
   if (currentServerRole() !== "hub") return null;
-  const enabled3 = path68 === "auth.enabled" ? value : path68 === "auth" && value !== null && typeof value === "object" ? value.enabled : true;
+  const enabled3 = path71 === "auth.enabled" ? value : path71 === "auth" && value !== null && typeof value === "object" ? value.enabled : true;
   return enabled3 === false ? HUB_LOGIN_ALWAYS_ON : null;
 }
 var HUB_LOGIN_ALWAYS_ON;
@@ -27238,9 +27321,9 @@ var init_trusted_carryovers = __esm({
 });
 
 // ../../apps/server/src/services/core/safe-defaults/protected-state.ts
-function readPath(root, path68) {
+function readPath(root, path71) {
   let cursor = root;
-  for (const part of path68.split(".")) {
+  for (const part of path71.split(".")) {
     if (cursor === null || typeof cursor !== "object") return void 0;
     cursor = cursor[part];
   }
@@ -27252,8 +27335,8 @@ function sectionSchemaAccepts(section, draft) {
   if (!schema3) return false;
   return schema3.safeParse(draft).success;
 }
-function writePath(root, path68, value) {
-  const parts = path68.split(".");
+function writePath(root, path71, value) {
+  const parts = path71.split(".");
   const leaf = parts.pop();
   if (leaf === void 0) return;
   let cursor = root;
@@ -27386,13 +27469,13 @@ function applyProtectedState(store, salvaged) {
     sections.set("telemetry", { ...section("telemetry"), ...salvaged.telemetry });
     label("telemetry", "telemetry (your consent choice)");
   }
-  for (const [path68, value] of Object.entries(salvaged.leaves)) {
-    const [top, ...rest] = path68.split(".");
+  for (const [path71, value] of Object.entries(salvaged.leaves)) {
+    const [top, ...rest] = path71.split(".");
     if (top === void 0) continue;
     const draft = section(top);
     if (rest.length === 0) continue;
     writePath(draft, rest.join("."), value);
-    label(top, path68);
+    label(top, path71);
   }
   const restored = [];
   for (const [name2, value] of sections) {
@@ -27418,9 +27501,9 @@ function restoreProtectedState(store, stored, context2) {
   if (restored.length > 0) {
     logger.warn(`[Config] ${context2}: kept your safer settings \u2014 ${restored.join(", ")}`);
   }
-  for (const { path: path68, reason } of salvaged.dropped) {
+  for (const { path: path71, reason } of salvaged.dropped) {
     logger.warn(
-      `[Config] Could not keep your ${path68} setting: ${reason}. It is back at the default.`
+      `[Config] Could not keep your ${path71} setting: ${reason}. It is back at the default.`
     );
   }
 }
@@ -27458,6 +27541,12 @@ var init_protected_state = __esm({
         protectiveValue: false,
         reason: "The external /mcp tool endpoint defaults ON. Someone who closed it should not have it re-opened by a wipe."
       },
+      {
+        path: "harness.folderConfigPinned",
+        direction: "boolean",
+        protectiveValue: true,
+        reason: "The first start pins the agents DorkOS already had, as they stand (DOR-3068). After a wipe, an agent with no record should wait for a person, never be pinned again unasked."
+      },
       {
         path: "harness.autoSync",
         direction: "boolean",
@@ -27754,16 +27843,16 @@ function processSegment(segment, parts) {
   }
   return true;
 }
-function parsePath(path68) {
-  if (typeof path68 !== "string") {
-    throw new TypeError(`Expected a string, got ${typeof path68}`);
+function parsePath(path71) {
+  if (typeof path71 !== "string") {
+    throw new TypeError(`Expected a string, got ${typeof path71}`);
   }
   const parts = [];
   let currentSegment = "";
   let currentPart = "start";
   let isEscaping = false;
   let position = 0;
-  for (const character of path68) {
+  for (const character of path71) {
     position++;
     if (isEscaping) {
       currentSegment += character;
@@ -27873,13 +27962,13 @@ function parsePath(path68) {
   }
   return parts;
 }
-function normalizePath(path68) {
-  if (typeof path68 === "string") {
-    return parsePath(path68);
+function normalizePath(path71) {
+  if (typeof path71 === "string") {
+    return parsePath(path71);
   }
-  if (Array.isArray(path68)) {
+  if (Array.isArray(path71)) {
     const normalized = [];
-    for (const [index2, segment] of path68.entries()) {
+    for (const [index2, segment] of path71.entries()) {
       if (typeof segment !== "string" && typeof segment !== "number") {
         throw new TypeError(`Expected a string or number for path segment at index ${index2}, got ${typeof segment}`);
       }
@@ -27899,11 +27988,11 @@ function normalizePath(path68) {
   }
   return [];
 }
-function getProperty(object2, path68, value) {
-  if (!isObject2(object2) || typeof path68 !== "string" && !Array.isArray(path68)) {
+function getProperty(object2, path71, value) {
+  if (!isObject2(object2) || typeof path71 !== "string" && !Array.isArray(path71)) {
     return value === void 0 ? object2 : value;
   }
-  const pathArray = normalizePath(path68);
+  const pathArray = normalizePath(path71);
   if (pathArray.length === 0) {
     return value;
   }
@@ -27919,12 +28008,12 @@ function getProperty(object2, path68, value) {
   }
   return object2 === void 0 ? value : object2;
 }
-function setProperty(object2, path68, value) {
-  if (!isObject2(object2) || typeof path68 !== "string" && !Array.isArray(path68)) {
+function setProperty(object2, path71, value) {
+  if (!isObject2(object2) || typeof path71 !== "string" && !Array.isArray(path71)) {
     return object2;
   }
   const root = object2;
-  const pathArray = normalizePath(path68);
+  const pathArray = normalizePath(path71);
   if (pathArray.length === 0) {
     return object2;
   }
@@ -27941,11 +28030,11 @@ function setProperty(object2, path68, value) {
   }
   return root;
 }
-function deleteProperty(object2, path68) {
-  if (!isObject2(object2) || typeof path68 !== "string" && !Array.isArray(path68)) {
+function deleteProperty(object2, path71) {
+  if (!isObject2(object2) || typeof path71 !== "string" && !Array.isArray(path71)) {
     return false;
   }
-  const pathArray = normalizePath(path68);
+  const pathArray = normalizePath(path71);
   if (pathArray.length === 0) {
     return false;
   }
@@ -27965,11 +28054,11 @@ function deleteProperty(object2, path68) {
     }
   }
 }
-function hasProperty(object2, path68) {
-  if (!isObject2(object2) || typeof path68 !== "string" && !Array.isArray(path68)) {
+function hasProperty(object2, path71) {
+  if (!isObject2(object2) || typeof path71 !== "string" && !Array.isArray(path71)) {
     return false;
   }
-  const pathArray = normalizePath(path68);
+  const pathArray = normalizePath(path71);
   if (pathArray.length === 0) {
     return false;
   }
@@ -31788,8 +31877,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path68) {
-      let input4 = path68;
+    function removeDotSegments(path71) {
+      let input4 = path71;
       const output2 = [];
       let nextSlash = -1;
       let len = 0;
@@ -32198,8 +32287,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path68 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path68 && path68 !== "/" ? path68 : void 0;
+        const path71 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path71 && path71 !== "/" ? path71 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -39758,22 +39847,22 @@ function withPath(root, segments, value) {
   if (!isPlainObject4(root)) return root;
   return { ...root, [head]: withPath(root[head], rest, value) };
 }
-function leavesUnder(path68, policy) {
-  const section = path68.split(".")[0];
+function leavesUnder(path71, policy) {
+  const section = path71.split(".")[0];
   const candidates = policy.bySection.get(section);
   if (candidates === void 0) return NO_RELAXED;
-  if (path68 === section) return candidates;
-  return candidates.filter((leaf) => leaf.path === path68 || leaf.path.startsWith(`${path68}.`));
+  if (path71 === section) return candidates;
+  return candidates.filter((leaf) => leaf.path === path71 || leaf.path.startsWith(`${path71}.`));
 }
-function relativeSegments(path68, leafPath) {
-  return leafPath === path68 ? [] : leafPath.slice(path68.length + 1).split(".");
+function relativeSegments(path71, leafPath) {
+  return leafPath === path71 ? [] : leafPath.slice(path71.length + 1).split(".");
 }
-function repairWidenedLeaves(path68, value, policy) {
-  const leaves = leavesUnder(path68, policy);
+function repairWidenedLeaves(path71, value, policy) {
+  const leaves = leavesUnder(path71, policy);
   let repaired = value;
   let skewed;
   for (const leaf of leaves) {
-    const relative12 = relativeSegments(path68, leaf.path);
+    const relative12 = relativeSegments(path71, leaf.path);
     const stored = relative12.length === 0 ? value : valueAt(value, relative12);
     if (stored === MISSING) continue;
     if (stored === leaf.fallback) continue;
@@ -40954,6 +41043,33 @@ function seedUiDmViewLeaves(store) {
     ...!("showSessions" in ui) && { showSessions: false }
   });
 }
+function markLegacyPathOnlyApprovals(store) {
+  const extensions = store.get("extensions");
+  if (extensions === null || typeof extensions !== "object" || Array.isArray(extensions)) return;
+  const sources2 = extensions.approvedSources;
+  if (sources2 === null || typeof sources2 !== "object" || Array.isArray(sources2)) return;
+  const approvedToRun = extensions.approvedToRun;
+  const unsourced = Array.isArray(approvedToRun) ? approvedToRun.filter(
+    (id) => typeof id === "string" && !(id in sources2)
+  ) : [];
+  const listed2 = extensions.legacyUnsourced;
+  const needsList = unsourced.length > 0 && !Array.isArray(listed2);
+  let changed = false;
+  const next = {};
+  for (const [id, source] of Object.entries(sources2)) {
+    const entry = source;
+    const pathOnly = entry !== null && typeof entry === "object" && !entry.digest && !entry.authorHome && !entry.grants && !entry.devLink && entry.legacyPathOnly !== true;
+    next[id] = pathOnly ? { ...entry, legacyPathOnly: true } : source;
+    changed ||= pathOnly;
+  }
+  if (changed || needsList) {
+    store.set("extensions", {
+      ...extensions,
+      approvedSources: next,
+      ...needsList ? { legacyUnsourced: unsourced } : {}
+    });
+  }
+}
 var KEPT_FROM_AUTO_MOVES_ACCOUNT_ID;
 var init_v0_90_onward = __esm({
   "../../apps/server/src/services/core/config-migrations/v0-90-onward.ts"() {
@@ -41668,7 +41784,15 @@ var init_config_migrations = __esm({
       // Writes `ui.dmView: false` and `ui.showSessions: false` where the stored
       // `ui` section lacks them, and touches nothing else (DOR-3074). See
       // `seedUiDmViewLeaves`.
-      "0.125.0": seedUiDmViewLeaves
+      "0.125.0": seedUiDmViewLeaves,
+      // v0.126.0 is the newest tag, so this opens 0.126.1. Frozen from merge;
+      // anything further opens `'0.127.0'`.
+      //
+      // Marks each extension approval that names no content with
+      // `legacyPathOnly: true`, and touches nothing else (DOR-3068). Only a marked
+      // approval is pinned to the files the next scan finds. See
+      // `markLegacyPathOnlyApprovals`.
+      "0.126.1": markLegacyPathOnlyApprovals
     };
   }
 });
@@ -41733,6 +41857,7 @@ __export(config_manager_exports, {
   generalizeTelemetryConsent: () => generalizeTelemetryConsent,
   initConfigManager: () => initConfigManager,
   keepAccountOutOfAutoMoves: () => keepAccountOutOfAutoMoves,
+  markLegacyPathOnlyApprovals: () => markLegacyPathOnlyApprovals,
   migrateClaudeAccountRegistry: () => migrateClaudeAccountRegistry,
   migrateSidebarMembersToItemRefs: () => migrateSidebarMembersToItemRefs,
   migrateSidebarSectionPrefs: () => migrateSidebarSectionPrefs,
@@ -45609,16 +45734,16 @@ function resolveRelativePath(source, context2) {
     throw new ResolvePluginSourceError('Relative paths must not contain ".."');
   }
   const startsWithDotSlash = source.startsWith("./");
-  let path68;
+  let path71;
   if (startsWithDotSlash) {
-    path68 = stripLeadingDotSlash(source);
+    path71 = stripLeadingDotSlash(source);
   } else {
     const pluginRoot = normalizePluginRoot(context2.pluginRoot);
-    path68 = pluginRoot ? `${pluginRoot}/${source}` : source;
+    path71 = pluginRoot ? `${pluginRoot}/${source}` : source;
   }
   return {
     type: "relative-path",
-    path: path68,
+    path: path71,
     marketplaceRoot: context2.marketplaceRoot
   };
 }
@@ -46200,7 +46325,7 @@ var init_marketplace_schemas = __esm({
       default: "runs at the most careful setting its agent offers",
       plan: "can only read and plan, and cannot change anything",
       acceptEdits: "can change files on its own, and on some agents run commands too",
-      dontAsk: "runs only the tools it is allowed, and refuses the rest without asking",
+      dontAsk: "never asks, and refuses tools it is not allowed; it can still read its own folder",
       bypassPermissions: "can run any command without a permission prompt",
       auto: "decides for itself which actions are safe to take"
     };
@@ -51109,11 +51234,11 @@ var require_dist2 = __commonJS({
         return schema3;
       }
       generatePath(route) {
-        const { method, path: path68, request, responses } = route, pathItemConfig = __rest(route, ["method", "path", "request", "responses"]);
+        const { method, path: path71, request, responses } = route, pathItemConfig = __rest(route, ["method", "path", "request", "responses"]);
         const generatedResponses = mapValues(responses, (response) => {
           return this.getResponse(response);
         });
-        const parameters = enhanceMissingParametersError(() => this.getParameters(request), { route: `${method} ${path68}` });
+        const parameters = enhanceMissingParametersError(() => this.getParameters(request), { route: `${method} ${path71}` });
         const requestBody = this.getRequestBody(request === null || request === void 0 ? void 0 : request.body);
         const routeDoc = {
           [method]: Object.assign(Object.assign(Object.assign(Object.assign({}, pathItemConfig), parameters.length > 0 ? {
@@ -51580,10 +51705,10 @@ var init_canvas_channel_schemas = __esm({
         });
     });
     CanvasChannelPointerSchema = external_exports.string().max(4096).refine(
-      (path68) => {
-        if (path68 === "") return true;
-        if (!path68.startsWith("/")) return false;
-        return path68.slice(1).split("/").every(
+      (path71) => {
+        if (path71 === "") return true;
+        if (!path71.startsWith("/")) return false;
+        return path71.slice(1).split("/").every(
           (segment) => !/~(?![01])/u.test(segment) && !unsafeKeys.has(segment.replaceAll("~1", "/").replaceAll("~0", "~"))
         );
       },
@@ -59103,9 +59228,9 @@ function substitutePlaceholders(value) {
   }
   return value;
 }
-function getValueAtPath(value, path68) {
+function getValueAtPath(value, path71) {
   let current3 = value;
-  for (const segment of path68) {
+  for (const segment of path71) {
     if (current3 === null || typeof current3 !== "object") return void 0;
     current3 = current3[segment];
   }
@@ -59134,12 +59259,12 @@ var init_ui_template = __esm({
         const result2 = WidgetDocumentSchema.safeParse(substitutePlaceholders(value));
         if (result2.success) return;
         for (const issue2 of result2.error.issues) {
-          const path68 = issue2.path.filter(
+          const path71 = issue2.path.filter(
             (segment) => segment !== void 0 && typeof segment !== "symbol"
           );
-          const original = getValueAtPath(value, path68);
-          const message2 = typeof original === "string" && WHOLE_PLACEHOLDER_PATTERN.test(original) ? `Placeholder "${original}" is not allowed in field "${path68.join(".")}" \u2014 placeholders may only fill free-form string fields, not number or enum fields` : issue2.message;
-          ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: path68, message: message2 });
+          const original = getValueAtPath(value, path71);
+          const message2 = typeof original === "string" && WHOLE_PLACEHOLDER_PATTERN.test(original) ? `Placeholder "${original}" is not allowed in field "${path71.join(".")}" \u2014 placeholders may only fill free-form string fields, not number or enum fields` : issue2.message;
+          ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: path71, message: message2 });
         }
       }).transform((value) => value)
     });
@@ -62237,7 +62362,7 @@ var init_context = __esm({
     init_utils();
     init_cookies();
     init_validator2();
-    createInternalContext = async (context2, { options, path: path68 }) => {
+    createInternalContext = async (context2, { options, path: path71 }) => {
       const headers = new Headers();
       let responseStatus = void 0;
       const { data, error: error63 } = await runValidation(options, context2);
@@ -62249,7 +62374,7 @@ var init_context = __esm({
         ...context2,
         body: data.body,
         query: data.query,
-        path: context2.path || path68 || "virtual:",
+        path: context2.path || path71 || "virtual:",
         context: "context" in context2 && context2.context ? context2.context : {},
         returned: void 0,
         headers: context2?.headers,
@@ -62476,16 +62601,16 @@ var init_to_response = __esm({
 
 // ../../node_modules/.pnpm/better-call@1.4.0_zod@4.6.7/node_modules/better-call/dist/endpoint.mjs
 function createEndpoint(pathOrOptions, handlerOrOptions, handlerOrNever) {
-  const path68 = typeof pathOrOptions === "string" ? pathOrOptions : void 0;
+  const path71 = typeof pathOrOptions === "string" ? pathOrOptions : void 0;
   const options = typeof handlerOrOptions === "object" ? handlerOrOptions : pathOrOptions;
   const handler = typeof handlerOrOptions === "function" ? handlerOrOptions : handlerOrNever;
   if ((options.method === "GET" || options.method === "HEAD") && options.body) throw new BetterCallError("Body is not allowed with GET or HEAD methods");
-  if (path68 && /\/{2,}/.test(path68)) throw new BetterCallError("Path cannot contain consecutive slashes");
+  if (path71 && /\/{2,}/.test(path71)) throw new BetterCallError("Path cannot contain consecutive slashes");
   const internalHandler = async (...inputCtx) => {
     const context2 = inputCtx[0] || {};
     const { data: internalContext, error: validationError } = await tryCatch(createInternalContext(context2, {
       options,
-      path: path68
+      path: path71
     }));
     if (validationError) {
       if (!(validationError instanceof ValidationError)) throw validationError;
@@ -62524,7 +62649,7 @@ function createEndpoint(pathOrOptions, handlerOrOptions, handlerOrNever) {
     } : response;
   };
   internalHandler.options = options;
-  internalHandler.path = path68;
+  internalHandler.path = path71;
   return internalHandler;
 }
 function combineMiddleware(local, configured) {
@@ -62539,8 +62664,8 @@ var init_endpoint = __esm({
     createEndpoint.create = (opts) => {
       function createConfiguredEndpoint(...args) {
         if (args.length === 3) {
-          const [path68, options2, handler2] = args;
-          return createEndpoint(path68, {
+          const [path71, options2, handler2] = args;
+          return createEndpoint(path71, {
             ...options2,
             use: combineMiddleware(options2.use, opts?.use)
           }, handler2);
@@ -62810,39 +62935,39 @@ function createRouter() {
     static: new NullProtoObj()
   };
 }
-function scanFirstGroup(path68) {
+function scanFirstGroup(path71) {
   let i2 = 0;
   let depth = 0;
-  for (; i2 < path68.length; i2++) {
-    const c3 = path68.charCodeAt(i2);
+  for (; i2 < path71.length; i2++) {
+    const c3 = path71.charCodeAt(i2);
     if (c3 === 92) i2++;
     else if (c3 === 40) depth++;
     else if (c3 === 41 && depth > 0) depth--;
     else if (c3 === 123 && depth === 0) break;
   }
-  if (i2 >= path68.length) return;
+  if (i2 >= path71.length) return;
   let j = i2 + 1;
   depth = 0;
-  for (; j < path68.length; j++) {
-    const c3 = path68.charCodeAt(j);
+  for (; j < path71.length; j++) {
+    const c3 = path71.charCodeAt(j);
     if (c3 === 92) j++;
     else if (c3 === 40) depth++;
     else if (c3 === 41 && depth > 0) depth--;
     else if (c3 === 125 && depth === 0) break;
   }
-  if (j >= path68.length) return;
-  const mod = path68[j + 1];
+  if (j >= path71.length) return;
+  const mod = path71[j + 1];
   const hasMod = mod === "?" || mod === "+" || mod === "*";
   return [
-    path68.slice(0, i2),
-    path68.slice(i2 + 1, j),
-    path68.slice(j + (hasMod ? 2 : 1)),
+    path71.slice(0, i2),
+    path71.slice(i2 + 1, j),
+    path71.slice(j + (hasMod ? 2 : 1)),
     hasMod ? mod : void 0
   ];
 }
-function expandGroupDelimiters(path68) {
-  if (!path68.includes("{")) return;
-  const group = scanFirstGroup(path68);
+function expandGroupDelimiters(path71) {
+  if (!path71.includes("{")) return;
+  const group = scanFirstGroup(path71);
   if (!group) return;
   const [pre, body, suf, mod] = group;
   if (!mod) return [pre + body + suf];
@@ -62910,9 +63035,9 @@ function replaceSegmentWildcards(segment, unnamedStart, toGroupKey = toUnnamedGr
   }
   return [replaced, nextIndex];
 }
-function encodeEscapes(path68) {
-  if (!path68.includes("\\")) return path68;
-  return path68.replace(/\\([:(){}])/g, (_3, c3) => "\uFFFD" + "ABCDE"[":(){}".indexOf(c3)]);
+function encodeEscapes(path71) {
+  if (!path71.includes("\\")) return path71;
+  return path71.replace(/\\([:(){}])/g, (_3, c3) => "\uFFFD" + "ABCDE"[":(){}".indexOf(c3)]);
 }
 function segmentKey(segment) {
   if (segment.startsWith("**")) return 2;
@@ -62941,22 +63066,22 @@ function expandModifiers(segments) {
     return m2[2] === "+" ? [wc] : [wc, without];
   }
 }
-function normalizePath2(path68) {
-  if (!path68.includes("/.")) return path68;
+function normalizePath2(path71) {
+  if (!path71.includes("/.")) return path71;
   const r3 = [];
-  for (const s2 of path68.split("/")) if (s2 === ".") continue;
+  for (const s2 of path71.split("/")) if (s2 === ".") continue;
   else if (s2 === ".." && r3.length > 1) r3.pop();
   else r3.push(s2);
   return r3.join("/") || "/";
 }
-function splitPath(path68) {
-  const s2 = path68.split("/");
+function splitPath(path71) {
+  const s2 = path71.split("/");
   s2.shift();
   if (s2[s2.length - 1] === "") s2.pop();
   return s2;
 }
-function splitRoute(path68) {
-  const s2 = splitPath(path68);
+function splitRoute(path71) {
+  const s2 = splitPath(path71);
   while (s2[s2.length - 1] === "") s2.pop();
   return s2;
 }
@@ -62972,16 +63097,16 @@ function getMatchParams(segments, paramsMap) {
   }
   return params;
 }
-function addRoute(ctx, method = "", path68, data) {
+function addRoute(ctx, method = "", path71, data) {
   method = method.toUpperCase();
-  if (path68.charCodeAt(0) !== 47) path68 = `/${path68}`;
-  const groupExpanded = expandGroupDelimiters(path68);
+  if (path71.charCodeAt(0) !== 47) path71 = `/${path71}`;
+  const groupExpanded = expandGroupDelimiters(path71);
   if (groupExpanded) {
     for (const expandedPath of groupExpanded) addRoute(ctx, method, expandedPath, data);
     return;
   }
-  path68 = encodeEscapes(path68);
-  const segments = splitRoute(path68);
+  path71 = encodeEscapes(path71);
+  const segments = splitRoute(path71);
   const expanded = expandModifiers(segments);
   if (expanded) {
     for (const p of expanded) addRoute(ctx, method, p, data);
@@ -63072,15 +63197,15 @@ function getParamRegexp(segment, unnamedStart = 0) {
   const regex2 = _s.replace(/:([\w-]+)(?:\(([^)]*)\))?/g, (_3, id, p) => `(?<${toGroupName(id)}>${p || "[^/]+"})`).replace(/\((?![?<])/g, () => `(?<${toUnnamedGroupKey(_i++)}>`).replace(/\uFFFE(.)/g, (_3, c3) => /[.*+?^${}()|[\]\\]/.test(c3) ? `\\${c3}` : c3);
   return [new RegExp(`^${regex2}$`), _i];
 }
-function findRoute(ctx, method = "", path68, opts) {
-  if (opts?.normalize) path68 = normalizePath2(path68);
-  if (path68.charCodeAt(path68.length - 1) === 47) path68 = path68.slice(0, -1);
-  const staticNode = ctx.static[path68];
+function findRoute(ctx, method = "", path71, opts) {
+  if (opts?.normalize) path71 = normalizePath2(path71);
+  if (path71.charCodeAt(path71.length - 1) === 47) path71 = path71.slice(0, -1);
+  const staticNode = ctx.static[path71];
   if (staticNode && staticNode.methods) {
     const staticMatch = staticNode.methods[method] || staticNode.methods[""];
     if (staticMatch !== void 0) return staticMatch[0];
   }
-  const segments = splitPath(path68);
+  const segments = splitPath(path71);
   const match = _lookupTree(ctx.root, method, segments, 0);
   if (match === void 0) return;
   if (opts?.params === false) return match;
@@ -63142,10 +63267,10 @@ function _selectMatcher(methods2, method, segments, dynamicTerminal, optionalOnl
   }
   return best;
 }
-function findAllRoutes(ctx, method = "", path68, opts) {
-  if (opts?.normalize) path68 = normalizePath2(path68);
-  if (path68.charCodeAt(path68.length - 1) === 47) path68 = path68.slice(0, -1);
-  const segments = splitPath(path68);
+function findAllRoutes(ctx, method = "", path71, opts) {
+  if (opts?.normalize) path71 = normalizePath2(path71);
+  if (path71.charCodeAt(path71.length - 1) === 47) path71 = path71.slice(0, -1);
+  const segments = splitPath(path71);
   const matches = _findAll(ctx.root, method, segments, 0);
   if (opts?.params === false) return matches;
   return matches.map((m2) => {
@@ -63249,25 +63374,25 @@ var init_router = __esm({
         const methods2 = Array.isArray(endpoint.options?.method) ? endpoint.options.method : [endpoint.options?.method];
         for (const method of methods2) addRoute(router2, method, endpoint.path, endpoint);
       }
-      if (config3?.routerMiddleware?.length) for (const { path: path68, middleware } of config3.routerMiddleware) addRoute(middlewareRouter, "*", path68, middleware);
+      if (config3?.routerMiddleware?.length) for (const { path: path71, middleware } of config3.routerMiddleware) addRoute(middlewareRouter, "*", path71, middleware);
       const basePath = config3?.basePath && config3.basePath !== "/" ? config3.basePath.replace(/\/+$/, "") : "";
       const processRequest = async (request) => {
         const url2 = new URL(request.url);
         const pathname = url2.pathname;
-        let path68;
+        let path71;
         if (basePath) {
           if (!pathname.startsWith(`${basePath}/`)) return new Response(null, {
             status: 404,
             statusText: "Not Found"
           });
-          path68 = pathname.slice(basePath.length);
-        } else path68 = pathname;
-        if (path68.length === 0 || /\/{2,}/.test(path68)) return new Response(null, {
+          path71 = pathname.slice(basePath.length);
+        } else path71 = pathname;
+        if (path71.length === 0 || /\/{2,}/.test(path71)) return new Response(null, {
           status: 404,
           statusText: "Not Found"
         });
-        const route = findRoute(router2, request.method, path68);
-        if (path68.endsWith("/") !== route?.data?.path?.endsWith("/") && !config3?.skipTrailingSlashes) return new Response(null, {
+        const route = findRoute(router2, request.method, path71);
+        if (path71.endsWith("/") !== route?.data?.path?.endsWith("/") && !config3?.skipTrailingSlashes) return new Response(null, {
           status: 404,
           statusText: "Not Found"
         });
@@ -63285,7 +63410,7 @@ var init_router = __esm({
         try {
           const allowedMediaTypes = handler.options.metadata?.allowedMediaTypes || config3?.allowedMediaTypes;
           const context2 = {
-            path: path68,
+            path: path71,
             method: request.method,
             headers: request.headers,
             params: route.params ? { ...route.params } : {},
@@ -63296,7 +63421,7 @@ var init_router = __esm({
             asResponse: true,
             context: config3?.routerContext
           };
-          const middlewareRoutes = findAllRoutes(middlewareRouter, "*", path68);
+          const middlewareRoutes = findAllRoutes(middlewareRouter, "*", path71);
           if (middlewareRoutes?.length) for (const { data: middleware, params } of middlewareRoutes) {
             const res = await middleware({
               ...context2,
@@ -63482,8 +63607,8 @@ function wrapEndpointHandler(handler, options) {
 }
 function createAuthEndpoint(...args) {
   if (args.length === 3) {
-    const [path68, options2, handler2] = args;
-    return createEndpointWithAuthContext(path68, options2, wrapEndpointHandler(handler2, options2));
+    const [path71, options2, handler2] = args;
+    return createEndpointWithAuthContext(path71, options2, wrapEndpointHandler(handler2, options2));
   }
   const [options, handler] = args;
   return createEndpointWithAuthContext(options, wrapEndpointHandler(handler, options));
@@ -63992,8 +64117,8 @@ function getIP(req, options) {
   if (isTest() || isDevelopment()) return LOCALHOST_IP;
   return null;
 }
-function createRateLimitKey(ip, path68) {
-  return `${ip}|${path68}`;
+function createRateLimitKey(ip, path71) {
+  return `${ip}|${path71}`;
 }
 var ipv4Schema, ipv6Schema, CIDR_PREFIX_PATTERN, LOCALHOST_IP, DEFAULT_IP_HEADERS;
 var init_ip = __esm({
@@ -70865,20 +70990,20 @@ function createRetryStrategy(options) {
       throw new Error("Invalid retry strategy");
   }
 }
-function parseMethodModifier(path68) {
-  if (!path68.startsWith("@")) return {
+function parseMethodModifier(path71) {
+  if (!path71.startsWith("@")) return {
     method: void 0,
-    path: path68
+    path: path71
   };
-  const separator = path68.indexOf("/");
-  const method = path68.slice(1, separator === -1 ? void 0 : separator);
+  const separator = path71.indexOf("/");
+  const method = path71.slice(1, separator === -1 ? void 0 : separator);
   if (!methods.includes(method)) return {
     method: void 0,
-    path: path68
+    path: path71
   };
   return {
     method,
-    path: separator === -1 ? path68 : path68.slice(separator + 1)
+    path: separator === -1 ? path71 : path71.slice(separator + 1)
   };
 }
 function resolvePathSegment(segment, pathParams) {
@@ -70897,7 +71022,7 @@ function getURL$1(url2, option) {
   const { path: requestPath } = parseMethodModifier(url2);
   if (requestPath !== url2) url2 = `/${requestPath}`;
   if (!basePath.endsWith("/")) basePath += "/";
-  let [path68, urlQuery] = url2.replace(basePath, "").split("?");
+  let [path71, urlQuery] = url2.replace(basePath, "").split("?");
   const queryParams = new URLSearchParams(urlQuery);
   for (const [key, value] of Object.entries(query || {})) {
     if (value == null) continue;
@@ -70911,18 +71036,18 @@ function getURL$1(url2, option) {
   }
   const pathParams = /* @__PURE__ */ new Map();
   if (params) if (Array.isArray(params)) {
-    const paramPaths = path68.split("/").filter((p) => p.startsWith(":"));
+    const paramPaths = path71.split("/").filter((p) => p.startsWith(":"));
     for (const [index2, key] of paramPaths.entries()) {
       const value = params[index2];
       pathParams.set(key, String(value));
     }
   } else for (const [key, value] of Object.entries(params)) pathParams.set(`:${key}`, String(value));
-  path68 = path68.split("/").map((segment) => resolvePathSegment(segment, pathParams)).join("/");
-  path68 = path68.replace(/^\/+/, "");
+  path71 = path71.split("/").map((segment) => resolvePathSegment(segment, pathParams)).join("/");
+  path71 = path71.replace(/^\/+/, "");
   let queryParamString = queryParams.toString();
   queryParamString = queryParamString.length > 0 ? `?${queryParamString}`.replace(/\+/g, "%20") : "";
-  if (!basePath.startsWith("http")) return `${basePath}${path68}${queryParamString}`;
-  return new URL(`${path68}${queryParamString}`, basePath);
+  if (!basePath.startsWith("http")) return `${basePath}${path71}${queryParamString}`;
+  return new URL(`${path71}${queryParamString}`, basePath);
 }
 function detectResponseType(request) {
   const _contentType = request.headers.get("content-type");
@@ -98575,7 +98700,7 @@ var init_query_promise = __esm({
 function mapResultRow(columns, row2, joinsNotNullableMap) {
   const nullifyMap = {};
   const result2 = columns.reduce(
-    (result22, { path: path68, field }, columnIndex) => {
+    (result22, { path: path71, field }, columnIndex) => {
       let decoder2;
       if (is(field, Column)) {
         decoder2 = field;
@@ -98587,8 +98712,8 @@ function mapResultRow(columns, row2, joinsNotNullableMap) {
         decoder2 = field.sql.decoder;
       }
       let node2 = result22;
-      for (const [pathChunkIndex, pathChunk] of path68.entries()) {
-        if (pathChunkIndex < path68.length - 1) {
+      for (const [pathChunkIndex, pathChunk] of path71.entries()) {
+        if (pathChunkIndex < path71.length - 1) {
           if (!(pathChunk in node2)) {
             node2[pathChunk] = {};
           }
@@ -98596,8 +98721,8 @@ function mapResultRow(columns, row2, joinsNotNullableMap) {
         } else {
           const rawValue = row2[columnIndex];
           const value = node2[pathChunk] = rawValue === null ? null : decoder2.mapFromDriverValue(rawValue);
-          if (joinsNotNullableMap && is(field, Column) && path68.length === 2) {
-            const objectName = path68[0];
+          if (joinsNotNullableMap && is(field, Column) && path71.length === 2) {
+            const objectName = path71[0];
             if (!(objectName in nullifyMap)) {
               nullifyMap[objectName] = value === null ? getTableName(field.table) : false;
             } else if (typeof nullifyMap[objectName] === "string" && nullifyMap[objectName] !== getTableName(field.table)) {
@@ -109719,7 +109844,8 @@ var init_notifications = __esm({
             "heartbeat.credits-offer",
             "connector.destructive_pending",
             "connector.destructive_executed",
-            "web.new_device"
+            "web.new_device",
+            "agent.secret_files"
           ]
         }).notNull(),
         /** How loud this was allowed to be. Copied from the registry at write time. */
@@ -113058,7 +113184,6 @@ function defuseSystemTags(text3, tagNames) {
 var IDENTITY_MAX_LENGTH, INVISIBLE_FORMAT, CONTROL_CHARS, PATTERN_CACHE;
 var init_untrusted_text = __esm({
   "../shared/src/untrusted-text.ts"() {
-    "use strict";
     IDENTITY_MAX_LENGTH = 80;
     INVISIBLE_FORMAT = /[\u00ad\u200b-\u200f\u202a-\u202e\u2060-\u2064\ufeff\ufff9-\ufffb]/g;
     CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g;
@@ -113375,6 +113500,8 @@ var init_config_disclosure = __esm({
       // including the home directory. An agent needs none of it — the refusal it
       // reads already names the id to ask the person about — so it stays in.
       "extensions.approvedSources": "withhold",
+      // The old approvals still waiting for a copy (DOR-3068). Nothing an agent needs.
+      "extensions.legacyUnsourced": "withhold",
       // The permission set each approval covers (DOR-2686). Nothing an agent needs:
       // the extension's own manifest says what it declares.
       "extensions.approvedPermissions": "withhold",
@@ -113425,6 +113552,13 @@ var init_config_disclosure = __esm({
       // The other half of the same record: which packages a person turned down.
       // Same contents, same reasoning — package names and digests, no secrets.
       "harness.refusedHooks": "expose",
+      // Which state of each agent's own folder settings a person let run or turned
+      // down (DOR-3068): agent ids and digests, no secrets. The part digests behind
+      // each yes are nothing an agent needs.
+      "harness.approvedFolderConfig": "expose",
+      "harness.refusedFolderConfig": "expose",
+      "harness.folderConfigPinned": "expose",
+      "harness.approvedFolderConfigParts": "withhold",
       // Which agent tools DorkOS shares your globally installed packages with, and
       // when it last asked. Neither is a credential nor names one, and an agent that
       // can say "your all-projects packages are not shared with Codex" is more
@@ -113619,17 +113753,17 @@ function patchPaths(value, prefix = "") {
   if (entries.length === 0) return prefix ? [prefix] : [];
   return entries.flatMap(([key, child]) => patchPaths(child, prefix ? `${prefix}.${key}` : key));
 }
-function withoutArrayMarkers(path68) {
-  return path68.replaceAll("[]", "");
+function withoutArrayMarkers(path71) {
+  return path71.replaceAll("[]", "");
 }
 function prepareGuardedPaths(paths2) {
-  return paths2.map((path68) => ({ path: path68, plain: withoutArrayMarkers(path68) }));
+  return paths2.map((path71) => ({ path: path71, plain: withoutArrayMarkers(path71) }));
 }
 function matchGuardedPaths(touched, guarded) {
   const hits = /* @__PURE__ */ new Set();
-  for (const path68 of new Set(touched)) {
+  for (const path71 of new Set(touched)) {
     for (const { path: guardedPath, plain } of guarded) {
-      if (path68 === plain || path68.startsWith(`${plain}.`) || plain.startsWith(`${path68}.`)) {
+      if (path71 === plain || path71.startsWith(`${plain}.`) || plain.startsWith(`${path71}.`)) {
         hits.add(guardedPath);
       }
     }
@@ -113665,8 +113799,8 @@ var init_remote_config_policy = __esm({
       "cloud.remote.edgeProofRef"
     ];
     CLOUD_REMOTE_WRITE_POLICY = Object.fromEntries(
-      [...CLOUD_REMOTE_REACH_PATHS, ...CLOUD_REMOTE_CREDENTIAL_PATHS].map((path68) => [
-        path68,
+      [...CLOUD_REMOTE_REACH_PATHS, ...CLOUD_REMOTE_CREDENTIAL_PATHS].map((path71) => [
+        path71,
         "operator-only"
       ])
     );
@@ -113830,6 +113964,7 @@ var init_operator_only_stakes = __esm({
           "extensions.disabled",
           "extensions.approvedToRun",
           "extensions.approvedSources",
+          "extensions.legacyUnsourced",
           "extensions.approvedPermissions",
           "extensions.dismissedApprovals",
           "extensions.trustedSources[].source",
@@ -113838,6 +113973,10 @@ var init_operator_only_stakes = __esm({
           "extensions.forwardAgents",
           "harness.approvedHooks",
           "harness.refusedHooks",
+          "harness.approvedFolderConfig",
+          "harness.approvedFolderConfigParts",
+          "harness.refusedFolderConfig",
+          "harness.folderConfigPinned",
           "runtimes.opencode.binaryPath",
           "runtimes.codex.binaryPath",
           "runtimes.codex.transport",
@@ -114415,6 +114554,10 @@ var init_config_write_policy = __esm({
       // the same record: a caller that could point an approved id at another copy
       // would move a person's decision onto code they never saw.
       "extensions.approvedSources": "operator-only",
+      // The pre-DOR-2383 approvals still waiting to be bound to a copy (DOR-3068).
+      // A caller that could add an id here would have the next scan bind an old
+      // approval to whatever folder sits at that name.
+      "extensions.legacyUnsourced": "operator-only",
       // The permission set each of those approvals covers (DOR-2686). The third
       // half of the record: a caller that could widen an entry would let an
       // extension reach hosts, programs or agents a person never saw on its card.
@@ -114484,6 +114627,13 @@ var init_config_write_policy = __esm({
       // record of somebody turning its package down, and the next sync would ask
       // again instead of obeying the answer already given.
       "harness.refusedHooks": "operator-only",
+      // Which state of each agent's own hooks, MCP servers file and agent file a
+      // person let run (DOR-3068). An agent that could write the yes would approve
+      // the hooks it just wrote itself; one that could clear a no would be asked again.
+      "harness.approvedFolderConfig": "operator-only",
+      "harness.approvedFolderConfigParts": "operator-only",
+      "harness.refusedFolderConfig": "operator-only",
+      "harness.folderConfigPinned": "operator-only",
       // Which agent tools DorkOS shares your globally installed packages with
       // (DOR-1924). Adding an entry here is what lets DorkOS put links in somebody's
       // home directory, which is the "how far DorkOS reaches on disk" line this
@@ -115504,17 +115654,17 @@ var init_agent_binding = __esm({
         if (!this.runtimes || !this.defaultRuntime) throw new Error("COMPUTER_REGISTRY_UNAVAILABLE");
         return resolveRegisteredAgentRuntime(id, mesh, this.runtimes, this.defaultRuntime, this);
       }
-      configure(id, path68) {
-        if (!id || id.length > 128 || !path68.startsWith("/") || canonicalDirectory(path68) !== path68) {
+      configure(id, path71) {
+        if (!id || id.length > 128 || !path71.startsWith("/") || canonicalDirectory(path71) !== path71) {
           throw new Error("COMPUTER_AGENT_BINDING_REFUSED");
         }
-        if (this.binding && (this.binding.id !== id || this.binding.path !== path68)) {
+        if (this.binding && (this.binding.id !== id || this.binding.path !== path71)) {
           throw new Error("COMPUTER_AGENT_BINDING_REFUSED");
         }
-        this.binding = { id, path: path68 };
+        this.binding = { id, path: path71 };
       }
-      forPath(path68) {
-        return this.binding?.path === path68 ? "computer-local" : void 0;
+      forPath(path71) {
+        return this.binding?.path === path71 ? "computer-local" : void 0;
       }
       forId(id) {
         return this.binding?.id === id ? "computer-local" : void 0;
@@ -119670,9 +119820,9 @@ var init_windows_execution_state = __esm({
 
 // ../keep-awake/src/environment.ts
 import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
-function readFileOrNull(path68) {
+function readFileOrNull(path71) {
   try {
-    return readFileSync4(path68, "utf8");
+    return readFileSync4(path71, "utf8");
   } catch {
     return null;
   }
@@ -120632,9 +120782,9 @@ async function boundTurnOpts(runtime, sessionId, incoming, deps) {
   }
   const { agentPath } = agent;
   const read = deps.levelOf ?? resolveAgentLaunchLevel;
-  const modeOf = async (path68) => {
+  const modeOf = async (path71) => {
     try {
-      return (await read({ agentPath: path68, capabilities })).mode ?? null;
+      return (await read({ agentPath: path71, capabilities })).mode ?? null;
     } catch (err) {
       logger.warn(
         "[agent-level] could not read the agent\u2019s level; holding the turn to the default",
@@ -124900,13 +125050,13 @@ function sameLeaf(a2, b2) {
 function collectChangedPaths(before, after, prefix, out) {
   for (const key of /* @__PURE__ */ new Set([...Object.keys(before), ...Object.keys(after)])) {
     if (DANGEROUS_KEYS.has(key)) continue;
-    const path68 = prefix ? `${prefix}.${key}` : key;
+    const path71 = prefix ? `${prefix}.${key}` : key;
     const a2 = before[key];
     const b2 = after[key];
     if (isPlainObject6(a2) && isPlainObject6(b2)) {
-      collectChangedPaths(a2, b2, path68, out);
+      collectChangedPaths(a2, b2, path71, out);
     } else if (!sameLeaf(a2, b2)) {
-      out.push(path68);
+      out.push(path71);
     }
   }
 }
@@ -124918,9 +125068,9 @@ function renderSegment(segment) {
     (char) => `\\u${char.codePointAt(0).toString(16).padStart(4, "0")}`
   );
 }
-function isOperatorOnlyPath(path68) {
+function isOperatorOnlyPath(path71) {
   return OPERATOR_ONLY_CONFIG_PATHS.some(
-    (guarded) => path68 === guarded || path68.startsWith(`${guarded}.`)
+    (guarded) => path71 === guarded || path71.startsWith(`${guarded}.`)
   );
 }
 function describeConfigWrite(before, after) {
@@ -124930,14 +125080,14 @@ function describeConfigWrite(before, after) {
   if (changed.length === 0) return "";
   const ordered = [
     ...changed.filter(isOperatorOnlyPath).sort(),
-    ...changed.filter((path68) => !isOperatorOnlyPath(path68)).sort()
+    ...changed.filter((path71) => !isOperatorOnlyPath(path71)).sort()
   ];
-  const named3 = ordered.slice(0, LOGGED_PATH_LIMIT).map((path68) => path68.split(".").map(renderSegment).join(".")).join(", ");
+  const named3 = ordered.slice(0, LOGGED_PATH_LIMIT).map((path71) => path71.split(".").map(renderSegment).join(".")).join(", ");
   return ordered.length <= LOGGED_PATH_LIMIT ? named3 : `${named3}, and ${ordered.length - LOGGED_PATH_LIMIT} more`;
 }
-function valueAtPath(root, path68) {
+function valueAtPath(root, path71) {
   let node2 = root;
-  for (const key of path68.split(".")) {
+  for (const key of path71.split(".")) {
     if (!isPlainObject6(node2)) return void 0;
     node2 = node2[key];
   }
@@ -125068,9 +125218,9 @@ function describeOperatorOnlyRefusal(paths2) {
   const remaining = new Set(paths2);
   const clauses = [];
   for (const group of OPERATOR_ONLY_STAKES) {
-    const matched = paths2.filter((path68) => group.paths.includes(path68));
+    const matched = paths2.filter((path71) => group.paths.includes(path71));
     if (matched.length === 0) continue;
-    for (const path68 of matched) remaining.delete(path68);
+    for (const path71 of matched) remaining.delete(path71);
     clauses.push(`${group.description}: ${matched.join(", ")}.`);
   }
   if (remaining.size > 0) {
@@ -125109,7 +125259,7 @@ __export(config_write_exports, {
 function personApprovedAuthority(decidedByUserId, isLoginEnabled = () => decidedByUserId !== void 0 || configManager.get("auth")?.enabled === true, isOwner = (userId) => isInstallOwner(userId === void 0 ? void 0 : { userId })) {
   return {
     refuseOperatorOnly: (paths2) => {
-      const cloudPaths = paths2.filter((path68) => path68.startsWith("cloud."));
+      const cloudPaths = paths2.filter((path71) => path71.startsWith("cloud."));
       if (cloudPaths.length === 0 || !isLoginEnabled() || isOwner(decidedByUserId)) {
         return void 0;
       }
@@ -125123,9 +125273,9 @@ function personApprovedAuthority(decidedByUserId, isLoginEnabled = () => decided
     }
   };
 }
-function leafAt(config3, path68) {
+function leafAt(config3, path71) {
   let current3 = config3;
-  for (const key of path68) {
+  for (const key of path71) {
     if (current3 === null || typeof current3 !== "object") return null;
     current3 = current3[key];
   }
@@ -125136,9 +125286,9 @@ function onTrustStopChange(listener) {
 }
 function reportTrustStopMoves(before, after, write) {
   if (!trustStopListener) return;
-  const moves = TRUST_STOP_LEAVES.flatMap(({ path: path68, runtime }) => {
-    const was = leafAt(before, path68);
-    const now3 = leafAt(after, path68);
+  const moves = TRUST_STOP_LEAVES.flatMap(({ path: path71, runtime }) => {
+    const was = leafAt(before, path71);
+    const now3 = leafAt(after, path71);
     return was === now3 ? [] : [{ ...runtime ? { runtime } : {}, before: was, after: now3 }];
   });
   if (moves.length === 0) return;
@@ -128292,9 +128442,9 @@ function inventoryMcpServers(repoRoot) {
   );
   if (unreadable) return { mcpServers: [], unreadable: [unreadable] };
   if (value === void 0) return { mcpServers: [], unreadable: [] };
-  const servers = value.mcpServers;
-  if (servers === void 0) return { mcpServers: [], unreadable: [] };
-  if (typeof servers !== "object" || servers === null || Array.isArray(servers)) {
+  const servers2 = value.mcpServers;
+  if (servers2 === void 0) return { mcpServers: [], unreadable: [] };
+  if (typeof servers2 !== "object" || servers2 === null || Array.isArray(servers2)) {
     return {
       mcpServers: [],
       unreadable: [
@@ -128307,7 +128457,7 @@ function inventoryMcpServers(repoRoot) {
     };
   }
   return {
-    mcpServers: Object.keys(servers).sort((a2, b2) => a2.localeCompare(b2)).map((name2) => ({
+    mcpServers: Object.keys(servers2).sort((a2, b2) => a2.localeCompare(b2)).map((name2) => ({
       kind: "mcp",
       name: name2,
       source: MCP_CONFIG_SOURCE,
@@ -130004,14 +130154,14 @@ import { join as join24 } from "node:path";
 function stripBom(text3) {
   return text3.startsWith(BOM) ? text3.slice(BOM.length) : text3;
 }
-function countTableKeys(servers, label, wrongShape) {
-  if (servers === void 0) return {};
-  if (typeof servers !== "object" || servers === null || Array.isArray(servers)) {
+function countTableKeys(servers2, label, wrongShape) {
+  if (servers2 === void 0) return {};
+  if (typeof servers2 !== "object" || servers2 === null || Array.isArray(servers2)) {
     return {
       unreadable: `${label} has ${wrongShape}, so DorkOS could not count the MCP servers in it`
     };
   }
-  return { servers: Object.keys(servers).length };
+  return { servers: Object.keys(servers2).length };
 }
 function countJsonServers(key, label) {
   return (text3) => {
@@ -131293,8 +131443,8 @@ var init_manifest_edit = __esm({
 import { readFileSync as readFileSync9 } from "node:fs";
 import { join as join30 } from "node:path";
 function enableHarnessInManifest(repoRoot, harness) {
-  const path68 = HARNESS_MANIFEST_PATH;
-  const abs = join30(repoRoot, path68);
+  const path71 = HARNESS_MANIFEST_PATH;
+  const abs = join30(repoRoot, path71);
   const before = readFileSync9(abs, "utf8");
   let parsed;
   try {
@@ -131303,7 +131453,7 @@ function enableHarnessInManifest(repoRoot, harness) {
     return {
       outcome: "unwritable",
       harness,
-      path: path68,
+      path: path71,
       reason: `it is not valid JSON (${err instanceof Error ? err.message : String(err)})`
     };
   }
@@ -131311,16 +131461,16 @@ function enableHarnessInManifest(repoRoot, harness) {
   try {
     manifest = parseHarnessManifest(parsed);
   } catch (err) {
-    return { outcome: "unwritable", harness, path: path68, reason: manifestSchemaReason(err) };
+    return { outcome: "unwritable", harness, path: path71, reason: manifestSchemaReason(err) };
   }
   const existing = manifest.harnesses;
-  if (existing.includes(harness)) return { outcome: "already-enabled", harness, path: path68 };
+  if (existing.includes(harness)) return { outcome: "already-enabled", harness, path: path71 };
   const edit = plannedEdit(before, existing, harness);
   if (!edit) {
     return {
       outcome: "unwritable",
       harness,
-      path: path68,
+      path: path71,
       reason: 'its "harnesses" list could not be located in the file as written'
     };
   }
@@ -131329,12 +131479,12 @@ function enableHarnessInManifest(repoRoot, harness) {
     return {
       outcome: "unwritable",
       harness,
-      path: path68,
+      path: path71,
       reason: "adding the harness would have changed something else in the file"
     };
   }
   writeFileAtomic(abs, after);
-  return { outcome: "enabled", harness, path: path68, inserted };
+  return { outcome: "enabled", harness, path: path71, inserted };
 }
 function plannedEdit(text3, existing, harness) {
   const array2 = findValueSpan(text3, "harnesses", "[");
@@ -131369,8 +131519,8 @@ var init_enable_harness = __esm({
 import { readFileSync as readFileSync10 } from "node:fs";
 import { join as join31 } from "node:path";
 function declareClaudeOnlySkill(repoRoot, entry) {
-  const path68 = HARNESS_MANIFEST_PATH;
-  const abs = join31(repoRoot, path68);
+  const path71 = HARNESS_MANIFEST_PATH;
+  const abs = join31(repoRoot, path71);
   const before = readFileSync10(abs, "utf8");
   let parsed;
   try {
@@ -131378,7 +131528,7 @@ function declareClaudeOnlySkill(repoRoot, entry) {
   } catch (err) {
     return {
       outcome: "unwritable",
-      path: path68,
+      path: path71,
       reason: `it is not valid JSON (${err instanceof Error ? err.message : String(err)})`
     };
   }
@@ -131386,10 +131536,10 @@ function declareClaudeOnlySkill(repoRoot, entry) {
   try {
     manifest = parseHarnessManifest(parsed);
   } catch (err) {
-    return { outcome: "unwritable", path: path68, reason: manifestSchemaReason(err) };
+    return { outcome: "unwritable", path: path71, reason: manifestSchemaReason(err) };
   }
   if (manifest.claudeOnlySkills.some((declared) => declared.name === entry.name)) {
-    return { outcome: "already-declared", path: path68 };
+    return { outcome: "already-declared", path: path71 };
   }
   const raw = parsed.claudeOnlySkills;
   const rawEntries = Array.isArray(raw) ? raw : [];
@@ -131398,7 +131548,7 @@ function declareClaudeOnlySkill(repoRoot, entry) {
   if (!edit) {
     return {
       outcome: "unwritable",
-      path: path68,
+      path: path71,
       reason: 'its "claudeOnlySkills" list could not be located in the file as written'
     };
   }
@@ -131406,12 +131556,12 @@ function declareClaudeOnlySkill(repoRoot, entry) {
   if (!isExactlyOneSkillDeclared(after, parsed, rawEntries, entry)) {
     return {
       outcome: "unwritable",
-      path: path68,
+      path: path71,
       reason: "recording the skill would have changed something else in the file"
     };
   }
   writeFileAtomic(abs, after);
-  return { outcome: "declared", path: path68, inserted };
+  return { outcome: "declared", path: path71, inserted };
 }
 function editAddingTheKey(text3, existing, entry) {
   const root = findRootObject(text3);
@@ -133398,14 +133548,14 @@ function ignoringLayer(layers, relPath2, leafKind) {
   }
   return decided;
 }
-function pathWithin(dir, path68) {
-  if (dir === "") return path68;
-  return path68.startsWith(`${dir}/`) ? path68.slice(dir.length + 1) : void 0;
+function pathWithin(dir, path71) {
+  if (dir === "") return path71;
+  return path71.startsWith(`${dir}/`) ? path71.slice(dir.length + 1) : void 0;
 }
 function gitignorePatternMatches(pattern, relPath2, leafKind = "file") {
   return isPathIgnored([pattern], relPath2, leafKind);
 }
-function decidePattern(pattern, path68, isDir) {
+function decidePattern(pattern, path71, isDir) {
   const trimmed = pattern.trim();
   if (trimmed === "" || trimmed.startsWith("#")) return void 0;
   const negated = trimmed.startsWith("!");
@@ -133418,7 +133568,7 @@ function decidePattern(pattern, path68, isDir) {
   if (body === "") return void 0;
   const anchored = !anyDepth && (rule.startsWith("/") || body.includes("/"));
   const prefix = anchored ? "^" : "^(?:.*/)?";
-  return new RegExp(`${prefix}${globToRegExpBody(body)}$`).test(path68) ? !negated : void 0;
+  return new RegExp(`${prefix}${globToRegExpBody(body)}$`).test(path71) ? !negated : void 0;
 }
 function globToRegExpBody(body) {
   let out = "";
@@ -133454,11 +133604,11 @@ function gitCheckoutRoot(projectRoot) {
     dir = parent;
   }
 }
-function physicalPath(path68) {
+function physicalPath(path71) {
   try {
-    return realpathSync8.native(path68);
+    return realpathSync8.native(path71);
   } catch {
-    return resolve4(path68);
+    return resolve4(path71);
   }
 }
 function projectPrefix(checkoutRoot, projectRoot) {
@@ -133515,7 +133665,7 @@ function ephemeralPaths(plan, repoRoot) {
     }
   }
   if (existsSync10(join32(repoRoot, PROJECT_PLUGINS_DIR))) paths2.set(INSTALL_ROOT_PROBE, "dir");
-  return [...paths2].map(([path68, kind]) => ({ path: path68, kind }));
+  return [...paths2].map(([path71, kind]) => ({ path: path71, kind }));
 }
 function onDiskKind(repoRoot, relPath2, fallback) {
   try {
@@ -133544,13 +133694,13 @@ function missingGitignoreLines(repoRoot, plan) {
   const checkout = checkoutContext(repoRoot);
   if (checkout === void 0) return [];
   const missing = /* @__PURE__ */ new Set();
-  for (const { path: path68, kind } of ephemeralPaths(plan, repoRoot)) {
-    if (ignoredBy(checkout.root, underPrefix(checkout.prefix, path68), kind) !== void 0) continue;
-    if (selfIgnored(plan, path68)) continue;
+  for (const { path: path71, kind } of ephemeralPaths(plan, repoRoot)) {
+    if (ignoredBy(checkout.root, underPrefix(checkout.prefix, path71), kind) !== void 0) continue;
+    if (selfIgnored(plan, path71)) continue;
     const covering = EPHEMERAL_GITIGNORE_PATTERNS.filter(
-      (pattern) => gitignorePatternMatches(pattern, path68, kind)
+      (pattern) => gitignorePatternMatches(pattern, path71, kind)
     );
-    if (covering.length === 0) missing.add(path68);
+    if (covering.length === 0) missing.add(path71);
     else for (const pattern of covering) missing.add(pattern);
   }
   const declared = EPHEMERAL_GITIGNORE_PATTERNS;
@@ -133729,10 +133879,10 @@ var init_read2 = __esm({
 // ../harness/src/apply/sweep-reasons.ts
 import { basename as basename4 } from "node:path";
 function explainSweep(paths2, cause) {
-  return paths2.map((path68) => ({ path: path68, reason: sweepReason(path68, cause) }));
+  return paths2.map((path71) => ({ path: path71, reason: sweepReason(path71, cause) }));
 }
-function sweepReason(path68, cause) {
-  if (cause === "command-wrapper" && isAtomicTempName(basename4(path68))) {
+function sweepReason(path71, cause) {
+  if (cause === "command-wrapper" && isAtomicTempName(basename4(path71))) {
     return SWEEP_REASONS["stale-temp"];
   }
   return SWEEP_REASONS[cause];
@@ -133809,10 +133959,10 @@ function partitionRemovable(repoRoot, paths2) {
   const removable = [];
   const warnings = [];
   const probed = /* @__PURE__ */ new Map();
-  for (const path68 of paths2) {
-    const absDir = unwritableParent(join34(repoRoot, path68), probed);
-    if (absDir === void 0) removable.push(path68);
-    else warnings.push(blockedRemovalWarning(path68, spell(repoRoot, absDir)));
+  for (const path71 of paths2) {
+    const absDir = unwritableParent(join34(repoRoot, path71), probed);
+    if (absDir === void 0) removable.push(path71);
+    else warnings.push(blockedRemovalWarning(path71, spell(repoRoot, absDir)));
   }
   return { removable, warnings };
 }
@@ -133890,8 +134040,8 @@ var init_authored_orphans = __esm({
 // ../harness/src/apply/symlink-occupants.ts
 import { readdirSync as readdirSync7, readFileSync as readFileSync14, readlinkSync as readlinkSync3, realpathSync as realpathSync9, statSync as statSync8 } from "node:fs";
 import { basename as basename5, dirname as dirname10 } from "node:path";
-function withForwardSlashes(path68) {
-  return path68.split("\\").join("/");
+function withForwardSlashes(path71) {
+  return path71.split("\\").join("/");
 }
 function holdsOwnLinkText(absTarget, linkText) {
   try {
@@ -134538,7 +134688,7 @@ function applyPlan(repoRoot, plan, opts) {
   return {
     applied,
     conflicts,
-    swept: removals.map(({ path: path68 }) => path68),
+    swept: removals.map(({ path: path71 }) => path71),
     removals,
     leftAlone,
     // Three subjects, one list, and the junction one sits OUTSIDE the sweep
@@ -134656,7 +134806,7 @@ function checkPlan(repoRoot, plan) {
   return {
     drifted,
     blocked,
-    orphans: removals.map(({ path: path68 }) => path68),
+    orphans: removals.map(({ path: path71 }) => path71),
     removals,
     leftAlone: findLeftAloneGeneratedHookFiles(repoRoot, plan),
     // Not drift, and the first two are never an exit code either: a junction
@@ -134924,7 +135074,7 @@ function globalOrphanCandidates(plan, roots) {
 function findGlobalOrphans(plan, roots) {
   const orphans = globalOrphanCandidates(plan, roots);
   const removable = new Set(removableOf("", [...orphans.keys()]));
-  return [...orphans.entries()].filter(([path68]) => removable.has(path68)).sort(([a2], [b2]) => a2 < b2 ? -1 : a2 > b2 ? 1 : 0).map(([path68, reason]) => ({ path: path68, reason }));
+  return [...orphans.entries()].filter(([path71]) => removable.has(path71)).sort(([a2], [b2]) => a2 < b2 ? -1 : a2 > b2 ? 1 : 0).map(([path71, reason]) => ({ path: path71, reason }));
 }
 function findBlockedGlobalRemovals(plan, roots) {
   if (plan.unreadableRoot !== void 0) return [];
@@ -134935,7 +135085,7 @@ function rawGlobalOrphanPaths(plan, roots) {
 }
 function sweepGlobalOrphans(plan, roots) {
   const orphans = findGlobalOrphans(plan, roots);
-  for (const { path: path68 } of orphans) rmSync8(path68, { force: true });
+  for (const { path: path71 } of orphans) rmSync8(path71, { force: true });
   return orphans;
 }
 function globalLinkText(action) {
@@ -135037,7 +135187,7 @@ function applyGlobalPlan(plan, roots, opts) {
   return {
     applied,
     conflicts,
-    swept: removals.map(({ path: path68 }) => path68),
+    swept: removals.map(({ path: path71 }) => path71),
     removals,
     leftAlone: [],
     // A global run has no folder to be BLIND inside — `findGlobalOrphans` walks
@@ -135070,7 +135220,7 @@ function checkGlobalPlan(plan, roots) {
   return {
     drifted,
     blocked,
-    orphans: removals.map(({ path: path68 }) => path68),
+    orphans: removals.map(({ path: path71 }) => path71),
     removals,
     leftAlone: [],
     // The junction family cannot reach a global plan at all, and by nature
@@ -135240,16 +135390,16 @@ import {
   statSync as statSync10
 } from "node:fs";
 import { basename as basename7, isAbsolute as isAbsolute7, join as join42, relative as relative8, resolve as resolve7, sep as sep9 } from "node:path";
-function statOrUndefined(path68) {
+function statOrUndefined(path71) {
   try {
-    return statSync10(path68, { throwIfNoEntry: false });
+    return statSync10(path71, { throwIfNoEntry: false });
   } catch {
     return void 0;
   }
 }
-function lstatOrUndefined(path68) {
+function lstatOrUndefined(path71) {
   try {
-    return lstatSync14(path68, { throwIfNoEntry: false });
+    return lstatSync14(path71, { throwIfNoEntry: false });
   } catch {
     return void 0;
   }
@@ -135473,13 +135623,13 @@ function scanClaudeOnlySkills(repoRoot, manifest) {
   const resolved = /* @__PURE__ */ new Map();
   for (const entry of manifest.claudeOnlySkills) {
     const defaultPath = `${CLAUDE_SKILLS_DIR}/${entry.name}`;
-    const path68 = entry.path.trim() === "" ? defaultPath : entry.path;
-    const abs = join43(repoRoot, path68);
+    const path71 = entry.path.trim() === "" ? defaultPath : entry.path;
+    const abs = join43(repoRoot, path71);
     let kind = "missing";
     const stats2 = lstatSync15(abs, { throwIfNoEntry: false });
     if (stats2?.isSymbolicLink()) kind = "symlink";
     else if (stats2?.isDirectory() && existsSync15(join43(abs, "SKILL.md"))) kind = "directory";
-    resolved.set(entry.name, { path: path68, kind, atProjectionTarget: path68 === defaultPath });
+    resolved.set(entry.name, { path: path71, kind, atProjectionTarget: path71 === defaultPath });
   }
   return resolved;
 }
@@ -136364,7 +136514,7 @@ async function listSharing(dorkHome) {
 function removalLines(removals, about) {
   if (removals.length === 0) return [];
   const heading = about === "will" ? `Removing ${removals.length} link(s):` : `Removed ${removals.length} link(s):`;
-  return ["", heading, ...removals.map(({ path: path68, reason }) => `  ${path68} \u2014 ${reason}`)];
+  return ["", heading, ...removals.map(({ path: path71, reason }) => `  ${path71} \u2014 ${reason}`)];
 }
 async function enableTool(dorkHome, tool) {
   const {
@@ -136573,7 +136723,7 @@ function globalActionLine(action) {
 function removalPreview(removals, about) {
   if (removals.length === 0) return [];
   const heading = about === "will" ? `Removing ${removals.length} link(s):` : `Removed ${removals.length} link(s):`;
-  return ["", heading, ...removals.map(({ path: path68, reason }) => `  ${path68} \u2014 ${reason}`)];
+  return ["", heading, ...removals.map(({ path: path71, reason }) => `  ${path71} \u2014 ${reason}`)];
 }
 function linkNamesIn(plan) {
   return [...new Set(plan.actions.map((action) => action.name))];
@@ -136805,6 +136955,516 @@ var init_harness_sync_claude_only = __esm({
   }
 });
 
+// ../../apps/server/src/services/runtimes/claude-code/folder-settings/folder-config-scripts.ts
+import { createHash as createHash4 } from "node:crypto";
+import { lstatSync as lstatSync16, readdirSync as readdirSync10, readFileSync as readFileSync21, statSync as statSync11 } from "node:fs";
+import path47 from "node:path";
+function isInside4(base, target) {
+  const rel = path47.relative(base, target);
+  return rel !== "" && !rel.startsWith("..") && !path47.isAbsolute(rel);
+}
+function sha2562(content) {
+  return createHash4("sha256").update(content).digest("hex");
+}
+function namedTargets(root, pluginsRoot, commands) {
+  const found = /* @__PURE__ */ new Set();
+  const pluginSegment = `${path47.sep}.dork${path47.sep}plugins${path47.sep}`;
+  for (const command of commands) {
+    const words = command.replace(/["']/g, "").replace(OUTPUT_REDIRECT, " ").replace(PROJECT_DIR_VAR, HOME_MARK).split(WORD_BREAK);
+    for (const word of words) {
+      if (!word) continue;
+      if (word.startsWith(HOME_MARK)) {
+        const target = path47.join(root, word.slice(HOME_MARK.length).split(HOME_MARK).join(root));
+        if (isInside4(root, target)) found.add(target);
+      } else if (path47.isAbsolute(word)) {
+        const target = path47.resolve(word);
+        if (isInside4(root, target) || isInside4(pluginsRoot, target) || target.includes(pluginSegment)) {
+          found.add(target);
+        }
+      } else if (!word.startsWith("~") && !word.startsWith("$") && !word.startsWith("-") && PATH_LIKE.test(word)) {
+        const target = path47.resolve(root, word);
+        if (isInside4(root, target)) found.add(target);
+      }
+    }
+  }
+  return [...found];
+}
+function hookScriptFiles(home2, commands, dorkHome) {
+  const root = path47.resolve(home2);
+  const entries = /* @__PURE__ */ new Map();
+  let files = 0;
+  const hash3 = (abs) => {
+    if (entries.has(abs)) return true;
+    let stat5;
+    try {
+      stat5 = lstatSync16(abs);
+    } catch (err) {
+      if (err.code !== "ENOENT") return false;
+      entries.set(abs, "absent");
+      return true;
+    }
+    if (stat5.isDirectory()) {
+      entries.set(abs, "dir");
+      return true;
+    }
+    if (!stat5.isFile() || stat5.size > MAX_FILE_BYTES || files >= MAX_FILES) return false;
+    try {
+      const content = readFileSync21(abs);
+      if (content.byteLength > MAX_FILE_BYTES) return false;
+      files += 1;
+      entries.set(abs, sha2562(content));
+      return true;
+    } catch {
+      return false;
+    }
+  };
+  const walk = (abs, depth) => {
+    let stat5;
+    try {
+      stat5 = lstatSync16(abs);
+    } catch (err) {
+      return err.code === "ENOENT";
+    }
+    if (!stat5.isDirectory() || depth > MAX_DEPTH2) return false;
+    let names;
+    try {
+      names = readdirSync10(abs);
+    } catch {
+      return false;
+    }
+    for (const name2 of names) {
+      const child = path47.join(abs, name2);
+      let childStat;
+      try {
+        childStat = lstatSync16(child);
+      } catch {
+        return false;
+      }
+      if (!(childStat.isDirectory() ? walk(child, depth + 1) : hash3(child))) return false;
+    }
+    return true;
+  };
+  if (!walk(path47.join(root, ".claude", "hooks"), 1)) return void 0;
+  for (const target of namedTargets(root, path47.resolve(dorkHome, "plugins"), commands)) {
+    if (!hash3(target)) return void 0;
+  }
+  return sortedByPath(root, entries);
+}
+function sortedByPath(root, entries) {
+  return [...entries].map(([abs, value]) => [
+    isInside4(root, abs) ? path47.relative(root, abs).split(path47.sep).join("/") : abs,
+    value
+  ]).sort(([a2], [b2]) => a2 < b2 ? -1 : a2 > b2 ? 1 : 0);
+}
+function agentFileHooks(home2) {
+  const root = path47.resolve(home2);
+  const entries = /* @__PURE__ */ new Map();
+  let files = 0;
+  const read = (abs) => {
+    let stat5;
+    try {
+      stat5 = statSync11(abs);
+    } catch (err) {
+      return err.code === "ENOENT";
+    }
+    if (!stat5.isFile() || stat5.size > MAX_FILE_BYTES || files >= MAX_FILES) return false;
+    let text3;
+    try {
+      text3 = readFileSync21(abs, "utf8");
+    } catch {
+      return false;
+    }
+    files += 1;
+    let picked;
+    try {
+      const { data } = parseFrontmatter(text3);
+      picked = {};
+      for (const field of AGENT_FILE_FIELDS) {
+        if (Object.hasOwn(data, field)) picked[field] = data[field];
+      }
+    } catch {
+      const block = /^---[^\n]*\n([\s\S]*?)\n---/.exec(text3)?.[1] ?? text3;
+      picked = { unparseable: sha2562(block) };
+    }
+    if (Object.keys(picked).length > 0) entries.set(abs, picked);
+    return true;
+  };
+  const listDir2 = (abs) => {
+    try {
+      if (!statSync11(abs).isDirectory()) return void 0;
+      return readdirSync10(abs);
+    } catch (err) {
+      return err.code === "ENOENT" ? null : void 0;
+    }
+  };
+  const walkAgents = (abs, depth) => {
+    if (depth > MAX_DEPTH2) return false;
+    const names = listDir2(abs);
+    if (names === null) return true;
+    if (names === void 0) return false;
+    for (const name2 of names) {
+      const child = path47.join(abs, name2);
+      const sub = listDir2(child);
+      if (sub !== void 0 && sub !== null) {
+        if (!walkAgents(child, depth + 1)) return false;
+      } else if (name2.endsWith(".md") && !read(child)) {
+        return false;
+      }
+    }
+    return true;
+  };
+  if (!walkAgents(path47.join(root, ".claude", "agents"), 1)) return void 0;
+  if (!walkAgents(path47.join(root, ".claude", "commands"), 1)) return void 0;
+  const skillsDir = path47.join(root, ".claude", "skills");
+  const skills = listDir2(skillsDir);
+  if (skills === void 0) return void 0;
+  for (const name2 of skills ?? []) {
+    if (!read(path47.join(skillsDir, name2, "SKILL.md"))) {
+      if (listDir2(path47.join(skillsDir, name2)) !== void 0) return void 0;
+    }
+  }
+  return sortedByPath(root, entries);
+}
+var MAX_FILE_BYTES, MAX_FILES, MAX_DEPTH2, HOME_MARK, PROJECT_DIR_VAR, OUTPUT_REDIRECT, WORD_BREAK, PATH_LIKE, AGENT_FILE_FIELDS;
+var init_folder_config_scripts = __esm({
+  "../../apps/server/src/services/runtimes/claude-code/folder-settings/folder-config-scripts.ts"() {
+    "use strict";
+    init_frontmatter();
+    MAX_FILE_BYTES = 64 * 1024;
+    MAX_FILES = 200;
+    MAX_DEPTH2 = 4;
+    HOME_MARK = "\0home\0";
+    PROJECT_DIR_VAR = /\$\{CLAUDE_PROJECT_DIR\}|\$CLAUDE_PROJECT_DIR\b/g;
+    OUTPUT_REDIRECT = /\d*>>?\s*\S+/g;
+    WORD_BREAK = /[\s;&|<>()`=]+/;
+    PATH_LIKE = /\/|\.[A-Za-z0-9]+$/;
+    AGENT_FILE_FIELDS = [
+      "hooks",
+      "mcpServers",
+      // Fields that let a skill, command or subagent skip DorkOS's permission
+      // check or raise its own mode (DOR-3068 M2).
+      "allowed-tools",
+      "tools",
+      "disallowedTools",
+      "permissionMode"
+    ];
+  }
+});
+
+// ../../apps/server/src/services/runtimes/claude-code/folder-settings/folder-config-pin.ts
+import { createHash as createHash5 } from "node:crypto";
+import { readFileSync as readFileSync22, statSync as statSync12 } from "node:fs";
+import path48 from "node:path";
+function readJsonFile2(file2) {
+  let size;
+  try {
+    const stat5 = statSync12(file2);
+    if (!stat5.isFile()) return { kind: "unverifiable" };
+    size = stat5.size;
+  } catch (err) {
+    return err.code === "ENOENT" ? { kind: "absent" } : { kind: "unverifiable" };
+  }
+  if (size > MAX_FILE_BYTES2) return { kind: "unverifiable" };
+  let text3;
+  try {
+    text3 = readFileSync22(file2, "utf8");
+  } catch {
+    return { kind: "unverifiable" };
+  }
+  if (Buffer.byteLength(text3) > MAX_FILE_BYTES2) return { kind: "unverifiable" };
+  try {
+    return { kind: "parsed", value: JSON.parse(text3) };
+  } catch {
+    return { kind: "malformed", text: text3 };
+  }
+}
+function canonicalJson(value) {
+  return JSON.stringify(sortKeys(value));
+}
+function sortKeys(value) {
+  if (Array.isArray(value)) return value.map(sortKeys);
+  if (value === null || typeof value !== "object") return value;
+  const out = {};
+  for (const key of Object.keys(value).sort()) {
+    out[key] = sortKeys(value[key]);
+  }
+  return out;
+}
+function sha2563(text3) {
+  return createHash5("sha256").update(text3).digest("hex");
+}
+function malformed(text3) {
+  return { malformed: sha2563(text3) };
+}
+function pick2(value, keys) {
+  if (value === null || typeof value !== "object" || Array.isArray(value))
+    return { notAnObject: value };
+  const out = {};
+  for (const key of keys) {
+    if (Object.hasOwn(value, key)) out[key] = value[key];
+  }
+  return out;
+}
+function servers(value) {
+  if (!Array.isArray(value)) return value;
+  return value.map((entry) => {
+    if (entry === null || typeof entry !== "object" || Array.isArray(entry)) return entry;
+    const { addedAt: _at, addedBy: _by, ...rest } = entry;
+    const connection = rest.connection;
+    if (connection !== null && typeof connection === "object" && !Array.isArray(connection)) {
+      const { authKind: _kind, ...kept } = connection;
+      return { ...rest, connection: kept };
+    }
+    return rest;
+  });
+}
+function hooksPart(home2, dorkHome) {
+  const value = {};
+  let verifiable = true;
+  const commands = [];
+  for (const name2 of SETTINGS_FILES) {
+    const read = readJsonFile2(path48.join(home2, ".claude", name2));
+    if (read.kind === "unverifiable") verifiable = false;
+    const picked = read.kind === "parsed" ? pick2(read.value, CODE_SETTINGS_KEYS) : void 0;
+    if (picked !== void 0) collectCommands2(picked, commands);
+    value[name2] = picked !== void 0 ? picked : read.kind === "malformed" ? malformed(read.text) : read.kind === "absent" ? null : { unverifiable: true };
+  }
+  const files = hookScriptFiles(home2, commands, dorkHome);
+  const agentFiles = agentFileHooks(home2);
+  if (files === void 0 || agentFiles === void 0) {
+    return { value: { ...value, files: { unverifiable: true } }, verifiable: false };
+  }
+  return { value: { ...value, files, agentFiles }, verifiable };
+}
+function collectCommands2(value, out) {
+  if (Array.isArray(value)) {
+    for (const item of value) collectCommands2(item, out);
+    return;
+  }
+  if (value === null || typeof value !== "object") return;
+  for (const [key, child] of Object.entries(value)) {
+    if ((key === "command" || HELPER_KEYS.includes(key)) && typeof child === "string") {
+      out.push(child);
+    } else {
+      collectCommands2(child, out);
+    }
+  }
+}
+function mcpJsonPart(home2) {
+  const read = readJsonFile2(path48.join(home2, ".mcp.json"));
+  if (read.kind === "unverifiable") return { value: { unverifiable: true }, verifiable: false };
+  if (read.kind === "malformed") return { value: malformed(read.text), verifiable: true };
+  return { value: read.kind === "parsed" ? read.value : null, verifiable: true };
+}
+function manifestPart(home2) {
+  const read = readJsonFile2(path48.join(home2, ".dork", "agent.json"));
+  if (read.kind === "unverifiable") return { value: { unverifiable: true }, verifiable: false };
+  if (read.kind === "malformed") return { value: malformed(read.text), verifiable: true };
+  if (read.kind === "absent") return { value: null, verifiable: true };
+  const manifest = read.value;
+  if (manifest === null || typeof manifest !== "object" || Array.isArray(manifest)) {
+    return { value: { notAnObject: manifest }, verifiable: true };
+  }
+  const fields = manifest;
+  return {
+    value: {
+      id: Object.hasOwn(fields, "id") ? fields.id : null,
+      runtime: Object.hasOwn(fields, "runtime") ? fields.runtime : null,
+      mcpServers: Object.hasOwn(fields, "mcpServers") ? servers(fields.mcpServers) : null,
+      account: Object.hasOwn(fields, "account") ? fields.account : null
+    },
+    verifiable: true
+  };
+}
+function isEmptyValue(value) {
+  if (value === null || value === void 0 || value === "") return true;
+  if (Array.isArray(value)) return value.length === 0;
+  if (typeof value === "object") return Object.values(value).every(isEmptyValue);
+  return false;
+}
+function hooksInert(value) {
+  const { files, agentFiles, ...settings } = value ?? {};
+  return isEmptyValue(settings) && isEmptyValue(files) && isEmptyValue(agentFiles);
+}
+function mcpJsonInert(value) {
+  if (value === null) return true;
+  const servers2 = value?.mcpServers;
+  return typeof value === "object" && !Array.isArray(value) && isEmptyValue(servers2) && Object.keys(value).every((key) => key === "mcpServers");
+}
+function manifestInert(value) {
+  if (value === null) return true;
+  const fields = value;
+  if (typeof value !== "object" || !Object.hasOwn(fields, "id")) return false;
+  const runtimeInert = fields.runtime === null || fields.runtime === "claude-code";
+  return runtimeInert && isEmptyValue(fields.mcpServers) && isEmptyValue(fields.account);
+}
+function readFolderConfigParts(home2, dorkHome = resolveDorkHome()) {
+  const values2 = {
+    hooks: hooksPart(home2, dorkHome),
+    mcpJson: mcpJsonPart(home2),
+    manifest: manifestPart(home2)
+  };
+  const digests = {};
+  const unverifiable = [];
+  for (const part of FOLDER_CONFIG_PARTS) {
+    digests[part] = sha2563(canonicalJson(values2[part].value));
+    if (!values2[part].verifiable) unverifiable.push(part);
+  }
+  const inert = unverifiable.length === 0 && hooksInert(values2.hooks.value) && mcpJsonInert(values2.mcpJson.value) && manifestInert(values2.manifest.value);
+  return {
+    digests,
+    unverifiable,
+    inert,
+    values: {
+      hooks: values2.hooks.value,
+      mcpJson: values2.mcpJson.value,
+      manifest: values2.manifest.value
+    }
+  };
+}
+var FOLDER_CONFIG_PARTS, CODE_SETTINGS_KEYS, SETTINGS_FILES, MAX_FILE_BYTES2, HELPER_KEYS;
+var init_folder_config_pin = __esm({
+  "../../apps/server/src/services/runtimes/claude-code/folder-settings/folder-config-pin.ts"() {
+    "use strict";
+    init_dork_home();
+    init_folder_config_scripts();
+    FOLDER_CONFIG_PARTS = ["hooks", "mcpJson", "manifest"];
+    CODE_SETTINGS_KEYS = [
+      "hooks",
+      "statusLine",
+      "enabledPlugins",
+      "extraKnownMarketplaces",
+      "enableAllProjectMcpServers",
+      "enabledMcpjsonServers",
+      "disabledMcpjsonServers",
+      "apiKeyHelper",
+      "awsAuthRefresh",
+      "awsCredentialExport",
+      "otelHeadersHelper",
+      "env",
+      // The rest of the CLI's own list of settings that run a command (DOR-3068 M1).
+      "gcpAuthRefresh",
+      "proxyAuthHelper",
+      "subagentStatusLine",
+      "fileSuggestion",
+      // Which `.claude/agents` file the main thread runs as.
+      "agent"
+    ];
+    SETTINGS_FILES = ["settings.json", "settings.local.json"];
+    MAX_FILE_BYTES2 = 64 * 1024;
+    HELPER_KEYS = ["apiKeyHelper", "awsAuthRefresh", "awsCredentialExport", "otelHeadersHelper"];
+  }
+});
+
+// ../../apps/server/src/services/runtimes/claude-code/folder-settings/folder-config-consent.ts
+import { createHash as createHash6 } from "node:crypto";
+import { realpathSync as realpathSync12 } from "node:fs";
+import path49 from "node:path";
+function folderConfigEntry(state) {
+  const parts = Object.fromEntries(FOLDER_CONFIG_PARTS.map((p) => [p, state.digests[p]]));
+  const digest2 = createHash6("sha256").update(JSON.stringify({ home: canonicalHome2(state.home), parts })).digest("hex");
+  return `${state.agentId}${FOLDER_CONFIG_ENTRY_MARKER}${digest2}`;
+}
+function canonicalHome2(home2) {
+  const resolved = path49.resolve(home2);
+  try {
+    return realpathSync12.native(resolved);
+  } catch {
+    return resolved;
+  }
+}
+function isAgentEntry(agentId) {
+  return (stored) => stored.startsWith(`${agentId}${FOLDER_CONFIG_ENTRY_MARKER}`);
+}
+function storedDecisions() {
+  const harness = configManager.get("harness") ?? {};
+  return {
+    approved: [...harness.approvedFolderConfig ?? []],
+    refused: [...harness.refusedFolderConfig ?? []],
+    parts: { ...harness.approvedFolderConfigParts ?? {} }
+  };
+}
+function writeDecisions2(reason, next) {
+  const harness = configManager.get("harness");
+  const current3 = storedDecisions();
+  if (JSON.stringify(next) === JSON.stringify(current3)) return;
+  configManager.set("harness", {
+    ...harness,
+    approvedFolderConfig: next.approved,
+    refusedFolderConfig: next.refused,
+    approvedFolderConfigParts: next.parts
+  });
+  logConfigWrite(reason, "harness", harness, configManager.get("harness"));
+}
+function lastApprovedParts(agentId, home2) {
+  const { approved, parts } = storedDecisions();
+  const previous = parts[agentId];
+  if (!previous) return void 0;
+  return approved.includes(folderConfigEntry({ agentId, home: home2, digests: previous })) ? { ...previous } : void 0;
+}
+function recordFolderConfigApproval(state, reason = "allowing an agent's folder settings") {
+  const entry = folderConfigEntry(state);
+  const { approved, refused: refused3, parts } = storedDecisions();
+  writeDecisions2(reason, {
+    approved: [...approved.filter((stored) => !isAgentEntry(state.agentId)(stored)), entry],
+    refused: refused3.filter((stored) => stored !== entry),
+    parts: { ...parts, [state.agentId]: { ...state.digests } }
+  });
+}
+function repinFolderConfigPart(agentId, home2, part, before, after, reason) {
+  const approved = lastApprovedParts(agentId, home2);
+  if (!approved || approved[part] !== before) return false;
+  if (before === after) return true;
+  recordFolderConfigApproval({ agentId, home: home2, digests: { ...approved, [part]: after } }, reason);
+  return true;
+}
+function withPersonRepinAtHome(home2, part, reason, write) {
+  let agents2 = [];
+  try {
+    agents2 = Object.keys(storedDecisions().parts).filter(
+      (agentId) => lastApprovedParts(agentId, home2) !== void 0
+    );
+  } catch {
+  }
+  if (agents2.length === 0) return write();
+  const before = safeRead(home2, part);
+  const result2 = write();
+  const after = safeRead(home2, part);
+  if (before !== void 0 && after !== void 0) {
+    for (const agentId of agents2) {
+      try {
+        repinFolderConfigPart(agentId, home2, part, before, after, reason);
+      } catch (err) {
+        logger.warn("[FolderConfig] Could not move the pin after a projection", {
+          agentId,
+          part,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      }
+    }
+  }
+  return result2;
+}
+function safeRead(home2, part) {
+  try {
+    const read = readFolderConfigParts(home2);
+    return read.unverifiable.includes(part) ? void 0 : read.digests[part];
+  } catch {
+    return void 0;
+  }
+}
+var FOLDER_CONFIG_ENTRY_MARKER;
+var init_folder_config_consent = __esm({
+  "../../apps/server/src/services/runtimes/claude-code/folder-settings/folder-config-consent.ts"() {
+    "use strict";
+    init_logger();
+    init_config_manager();
+    init_config_write();
+    init_folder_config_pin();
+    FOLDER_CONFIG_ENTRY_MARKER = "@folder-config-";
+  }
+});
+
 // ../../apps/server/src/services/harness/project-with-consent.ts
 var project_with_consent_exports = {};
 __export(project_with_consent_exports, {
@@ -136817,11 +137477,11 @@ __export(project_with_consent_exports, {
   withProjectLock: () => withProjectLock
 });
 import { AsyncLocalStorage as AsyncLocalStorage6 } from "node:async_hooks";
-import { realpathSync as realpathSync12 } from "node:fs";
+import { realpathSync as realpathSync13 } from "node:fs";
 import { resolve as resolve9 } from "node:path";
 function projectLockKey(projectPath) {
   try {
-    return realpathSync12(projectPath);
+    return realpathSync13(projectPath);
   } catch {
     return resolve9(projectPath);
   }
@@ -136907,10 +137567,11 @@ function projectWithConsent(projectPath, opts) {
     );
   }
   const { plan, withheld } = planWithConsent(projectPath, opts);
-  const { applied, conflicts, swept, removals, leftAlone, warnings } = _internal.applyPlan(
+  const { applied, conflicts, swept, removals, leftAlone, warnings } = withPersonRepinAtHome(
     projectPath,
-    plan,
-    { sweepOrphans: opts.sweepOrphans }
+    "hooks",
+    "projecting hooks a person allowed",
+    () => _internal.applyPlan(projectPath, plan, { sweepOrphans: opts.sweepOrphans })
   );
   return { plan, withheld, applied, conflicts, swept, removals, leftAlone, warnings };
 }
@@ -136920,6 +137581,7 @@ var init_project_with_consent = __esm({
     init_src5();
     init_hook_consent();
     init_global_scope();
+    init_folder_config_consent();
     _internal = {
       project,
       applyPlan,
@@ -136990,11 +137652,11 @@ var init_atomic_write2 = __esm({
 });
 
 // ../../apps/server/src/services/marketplace/lib/package-paths.ts
-import path47 from "node:path";
+import path50 from "node:path";
 function assertContainedIn(root, candidate) {
-  const resolvedRoot = path47.resolve(root);
-  const resolved = path47.resolve(candidate);
-  if (!resolved.startsWith(resolvedRoot + path47.sep)) {
+  const resolvedRoot = path50.resolve(root);
+  const resolved = path50.resolve(candidate);
+  if (!resolved.startsWith(resolvedRoot + path50.sep)) {
     throw new PathEscapeError(root, candidate);
   }
   return candidate;
@@ -137109,7 +137771,7 @@ import { join as join50 } from "node:path";
 async function directorySize(root) {
   let total = 0;
   const walk = async (dir, depth) => {
-    if (depth > MAX_DEPTH2) return;
+    if (depth > MAX_DEPTH3) return;
     let entries;
     try {
       entries = await readdir3(dir, { withFileTypes: true });
@@ -137131,16 +137793,16 @@ async function directorySize(root) {
   await walk(root, 0);
   return total;
 }
-var MAX_DEPTH2;
+var MAX_DEPTH3;
 var init_directory_size = __esm({
   "../../apps/server/src/services/marketplace/lib/directory-size.ts"() {
     "use strict";
-    MAX_DEPTH2 = 256;
+    MAX_DEPTH3 = 256;
   }
 });
 
 // ../../apps/server/src/services/marketplace/cache/marketplace-cache.ts
-import { createHash as createHash4, randomUUID as randomUUID4 } from "node:crypto";
+import { createHash as createHash7, randomUUID as randomUUID4 } from "node:crypto";
 import {
   access,
   mkdir as mkdir4,
@@ -137161,15 +137823,15 @@ function isFetchStatus(value) {
 }
 function subpathDigest(subpath) {
   if (subpath === "") return "";
-  return createHash4("sha256").update(subpath).digest("hex").slice(0, 12);
+  return createHash7("sha256").update(subpath).digest("hex").slice(0, 12);
 }
-async function stampUsed(path68) {
+async function stampUsed(path71) {
   const now3 = /* @__PURE__ */ new Date();
   try {
-    await utimes(path68, now3, now3);
+    await utimes(path71, now3, now3);
     return now3;
   } catch {
-    return (await stat2(path68)).mtime;
+    return (await stat2(path71)).mtime;
   }
 }
 function parsePackageDirName(entry) {
@@ -137410,14 +138072,14 @@ var init_marketplace_cache = __esm({
        * @returns A descriptor when a non-empty entry is present, `null` otherwise.
        */
       async getPackage(packageName, commitSha, subpath) {
-        const path68 = this.packageDir(packageName, commitSha, subpath);
-        const usedAt = await this.stampIfPresent(path68);
+        const path71 = this.packageDir(packageName, commitSha, subpath);
+        const usedAt = await this.stampIfPresent(path71);
         if (usedAt === null) return null;
         return {
           packageName,
           commitSha,
           subpathDigest: subpathDigest(subpath),
-          path: path68,
+          path: path71,
           lastUsedAt: usedAt
         };
       }
@@ -137609,10 +138271,10 @@ var init_marketplace_cache = __esm({
        * @returns When it was stamped, or `null` when there is no valid entry.
        * @internal
        */
-      stampIfPresent(path68) {
+      stampIfPresent(path71) {
         return this.exclusive(async () => {
-          if (!await isNonEmptyDir(path68)) return null;
-          return stampUsed(path68);
+          if (!await isNonEmptyDir(path71)) return null;
+          return stampUsed(path71);
         });
       }
       /**
@@ -137650,9 +138312,9 @@ var init_marketplace_cache = __esm({
           if (!parsed) {
             continue;
           }
-          const path68 = join51(root, entry);
+          const path71 = join51(root, entry);
           try {
-            const info2 = await stat2(path68);
+            const info2 = await stat2(path71);
             if (!info2.isDirectory()) {
               continue;
             }
@@ -137660,7 +138322,7 @@ var init_marketplace_cache = __esm({
               packageName: parsed.packageName,
               commitSha: parsed.commitSha,
               subpathDigest: parsed.subpathDigest,
-              path: path68,
+              path: path71,
               lastUsedAt: info2.mtime
             });
           } catch {
@@ -138028,7 +138690,7 @@ __export(claude_enabled_plugins_exports, {
   readClaudeOnlyPlugins: () => readClaudeOnlyPlugins
 });
 import { readFile as readFile5 } from "node:fs/promises";
-import path48 from "node:path";
+import path51 from "node:path";
 function causeOf(err) {
   return err instanceof Error ? err.message : String(err);
 }
@@ -138127,7 +138789,7 @@ function splitPluginKey(key) {
 }
 async function readDorkosSources(dorkHome) {
   let sources2;
-  const sourcesPath = path48.join(dorkHome, "marketplaces.json");
+  const sourcesPath = path51.join(dorkHome, "marketplaces.json");
   try {
     sources2 = await new MarketplaceSourceManager(dorkHome).list();
   } catch {
@@ -138163,7 +138825,7 @@ function classifyOffer(repo, name2, dorkos) {
 async function readClaudeOnlyPlugins(input4) {
   const { claudeRoot, projectPath, dorkHome } = input4;
   const base = { root: claudeRoot, readAt: (/* @__PURE__ */ new Date()).toISOString(), mayBeOverridden: true };
-  const user2 = await readSettingsSlice(path48.join(claudeRoot, "settings.json"));
+  const user2 = await readSettingsSlice(path51.join(claudeRoot, "settings.json"));
   if (user2.slice === void 0) {
     return {
       ...base,
@@ -138173,8 +138835,8 @@ async function readClaudeOnlyPlugins(input4) {
       personalHookCommands: 0
     };
   }
-  const project2 = await readSettingsSlice(path48.join(projectPath, ".claude", "settings.json"));
-  const local = await readSettingsSlice(path48.join(projectPath, ".claude", "settings.local.json"));
+  const project2 = await readSettingsSlice(path51.join(projectPath, ".claude", "settings.json"));
+  const local = await readSettingsSlice(path51.join(projectPath, ".claude", "settings.local.json"));
   const merged = mergeSettings([user2.slice, project2.slice ?? {}, local.slice ?? {}]);
   const hooks = countHookCommands(user2.slice.hooks);
   const partial2 = {
@@ -138279,7 +138941,7 @@ __export(harness_sync_command_exports, {
   parseHarnessSyncArgs: () => parseHarnessSyncArgs,
   runHarnessSync: () => runHarnessSync
 });
-import { existsSync as existsSync18, readFileSync as readFileSync21 } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync23 } from "node:fs";
 import { join as join53 } from "node:path";
 import { parseArgs as parseArgs4 } from "node:util";
 function parseHarnessSyncArgs(rawArgs) {
@@ -138316,9 +138978,9 @@ function parseHarnessSyncArgs(rawArgs) {
   };
 }
 function formatAction2(action) {
-  const path68 = action.target ?? action.source ?? "(no path)";
+  const path71 = action.target ?? action.source ?? "(no path)";
   const note = action.reason ? ` \u2014 ${action.reason}` : "";
-  return `  [${action.kind}] ${action.artifact} "${action.name}" -> ${path68}  (${action.harness})${note}`;
+  return `  [${action.kind}] ${action.artifact} "${action.name}" -> ${path71}  (${action.harness})${note}`;
 }
 function formatAdoptable(repoRoot, manifest) {
   const { candidates } = readAdoptCandidates(repoRoot, inventorySourceTree(repoRoot), manifest);
@@ -138344,26 +139006,26 @@ function formatAutoAdoptInert(inert) {
   return inert ? ["", ADOPT_SENTENCES.S8()] : [];
 }
 function formatLeftAlone(leftAlone, manifest, harnessFilter) {
-  const shown2 = harnessFilter ? leftAlone.filter((path68) => harnessOf(path68) === harnessFilter) : leftAlone;
+  const shown2 = harnessFilter ? leftAlone.filter((path71) => harnessOf(path71) === harnessFilter) : leftAlone;
   if (shown2.length === 0) return [];
   const stopped = new Set(pluginHookReach(manifest).suppressed.map((s2) => s2.harness));
-  const carried = shown2.filter((path68) => {
-    const harness = harnessOf(path68);
+  const carried = shown2.filter((path71) => {
+    const harness = harnessOf(path71);
     return harness === void 0 || !stopped.has(harness);
   });
   return [
     "",
     "Left alone \u2014 files DorkOS did not write, at paths it would otherwise generate:",
-    ...shown2.map((path68) => {
-      const harness = harnessOf(path68);
+    ...shown2.map((path71) => {
+      const harness = harnessOf(path71);
       const note = harness && stopped.has(harness) ? " \u2014 your manifest's hookPolicies says not to write here" : "";
-      return `  ${path68}  (${harness})${note}`;
+      return `  ${path71}  (${harness})${note}`;
     }),
     carried.length > 0 ? "  Nothing to fix. Put these hooks in .claude/settings.json if you want DorkOS to carry them to every harness." : "  Nothing to fix, and nothing to move: your manifest tells DorkOS not to write these files."
   ];
 }
-function harnessOf(path68) {
-  return GENERATED_HOOK_TARGET_HARNESSES[path68];
+function harnessOf(path71) {
+  return GENERATED_HOOK_TARGET_HARNESSES[path71];
 }
 function summarizeActions(actions, withheld, enabled3) {
   const withheldLine = withheldSummaryLine(withheld);
@@ -138418,7 +139080,7 @@ function reportClaudeSkillsRestart(existedBefore, repoRoot) {
 }
 function readIfPresent(repoRoot, rel) {
   try {
-    return readFileSync21(join53(repoRoot, rel), "utf8");
+    return readFileSync23(join53(repoRoot, rel), "utf8");
   } catch {
     return void 0;
   }
@@ -138461,8 +139123,8 @@ function formatIgnoredCanonicalLayer(repoRoot) {
     "  on purpose."
   ];
 }
-function orphanLine({ path: path68, reason }) {
-  return `  ${path68} \u2014 ${reason}`;
+function orphanLine({ path: path71, reason }) {
+  return `  ${path71} \u2014 ${reason}`;
 }
 function reportCheck(repoRoot, plan, withheld, dorkHome, manifest, claudeOnly, autoAdoptInert, harnessFilter) {
   const drift = checkPlan(repoRoot, plan);
@@ -139181,7 +139843,7 @@ Examples:
 
 // src/lib/api-client.ts
 import fs23 from "node:fs";
-import path49 from "node:path";
+import path52 from "node:path";
 function getServerBaseUrl() {
   const envPort = process.env.DORKOS_PORT;
   if (envPort && /^\d+$/.test(envPort)) {
@@ -139193,7 +139855,7 @@ function getServerBaseUrl() {
 function readConfigPort() {
   const dorkHome = resolveDorkHome2();
   try {
-    const raw = fs23.readFileSync(path49.join(dorkHome, "config.json"), "utf-8");
+    const raw = fs23.readFileSync(path52.join(dorkHome, "config.json"), "utf-8");
     const config3 = JSON.parse(raw);
     const port2 = config3?.server?.port;
     if (typeof port2 === "number" && port2 > 0) return port2;
@@ -139206,7 +139868,7 @@ function agentIdentityHeaders() {
   return token ? { "X-DorkOS-Agent": token } : {};
 }
 function apiKeyFilePath() {
-  return path49.join(resolveDorkHome2(), API_KEY_FILE_NAME);
+  return path52.join(resolveDorkHome2(), API_KEY_FILE_NAME);
 }
 function resolveApiKey() {
   const fromEnv = process.env[API_KEY_ENV_VAR]?.trim();
@@ -139918,7 +140580,7 @@ var init_scanner3 = __esm({
 });
 
 // ../browser/src/runtime/installation/contracts.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 function failureCode(error63) {
   return error63 instanceof InstallationFailure ? error63.code : "IO_FAILED";
 }
@@ -139928,11 +140590,11 @@ function sameBinding(a2, b2) {
 function sameFileIdentity(a2, b2) {
   return a2.device === b2.device && a2.inode === b2.inode && a2.size === b2.size && a2.mtimeNs === b2.mtimeNs && a2.ctimeNs === b2.ctimeNs && a2.type === b2.type && a2.uid === b2.uid && a2.mode === b2.mode;
 }
-function sha2562(bytes) {
-  return createHash5("sha256").update(bytes).digest("hex");
+function sha2564(bytes) {
+  return createHash8("sha256").update(bytes).digest("hex");
 }
 function canonicalDigest(value) {
-  const hash3 = createHash5("sha256");
+  const hash3 = createHash8("sha256");
   const visit2 = (v2) => {
     if (v2 === null) {
       hash3.update("null;");
@@ -140198,10 +140860,10 @@ var init_contracts = __esm({
 });
 
 // ../browser/src/runtime/installation/filesystem.ts
-import { createHash as createHash6, randomUUID as randomUUID5 } from "node:crypto";
+import { createHash as createHash9, randomUUID as randomUUID5 } from "node:crypto";
 import { constants as constants5 } from "node:fs";
 import * as fs24 from "node:fs/promises";
-import path50 from "node:path";
+import path53 from "node:path";
 function requireFact(value, code) {
   if (!value) throw new InstallationFailure(code);
 }
@@ -140322,14 +140984,14 @@ var init_filesystem = __esm({
       }
       async ancestors(name2, missing = false) {
         requireFact(
-          path50.isAbsolute(name2) && path50.normalize(name2) === name2,
+          path53.isAbsolute(name2) && path53.normalize(name2) === name2,
           "INVALID_INSTALL_CONFIGURATION"
         );
         const result2 = [];
-        let current3 = path50.parse(name2).root;
-        const parts = path50.relative(current3, name2).split(path50.sep).filter(Boolean);
+        let current3 = path53.parse(name2).root;
+        const parts = path53.relative(current3, name2).split(path53.sep).filter(Boolean);
         for (const part of ["", ...parts]) {
-          if (part) current3 = path50.join(current3, part);
+          if (part) current3 = path53.join(current3, part);
           try {
             const stat5 = await fs24.lstat(current3, { bigint: true });
             this.directorySecure(stat5);
@@ -140436,10 +141098,10 @@ var init_filesystem = __esm({
         });
       }
       async ensureDirectories(name2) {
-        let current3 = path50.parse(name2).root;
-        for (const part of path50.relative(current3, name2).split(path50.sep).filter(Boolean)) {
+        let current3 = path53.parse(name2).root;
+        for (const part of path53.relative(current3, name2).split(path53.sep).filter(Boolean)) {
           const parent = current3;
-          current3 = path50.join(current3, part);
+          current3 = path53.join(current3, part);
           try {
             this.directorySecure(await fs24.lstat(current3, { bigint: true }));
           } catch (error63) {
@@ -140457,7 +141119,7 @@ var init_filesystem = __esm({
         }
       }
       async exclusiveDirectory(name2) {
-        await this.ancestors(path50.dirname(name2));
+        await this.ancestors(path53.dirname(name2));
         await fs24.mkdir(name2, { mode: 448 });
         const stat5 = await fs24.lstat(name2, { bigint: true });
         this.directorySecure(stat5);
@@ -140466,10 +141128,10 @@ var init_filesystem = __esm({
           "OWNERSHIP_UNCERTAIN"
         );
         await this.syncDirectory(name2);
-        await this.syncDirectory(path50.dirname(name2));
+        await this.syncDirectory(path53.dirname(name2));
       }
       async read(name2, cap, retain = 0) {
-        const parents = await this.ancestors(path50.dirname(name2));
+        const parents = await this.ancestors(path53.dirname(name2));
         const named3 = identity(await fs24.lstat(name2, { bigint: true }));
         requireFact(named3.type === "file" && BigInt(named3.size) <= BigInt(cap), "INSTALLATION_INVALID");
         const duty = await this.acquire(
@@ -140480,7 +141142,7 @@ var init_filesystem = __esm({
         return this.closeAfter([duty], async () => {
           const acquired = identity(await handle.stat({ bigint: true }));
           requireFact(sameFileIdentity(named3, acquired), "ROOT_CHANGED");
-          const hash3 = createHash6("sha256"), chunks = [];
+          const hash3 = createHash9("sha256"), chunks = [];
           const buffer = Buffer.alloc(INSTALLATION_LIMITS.bufferBytes);
           let bytes = 0, retained2 = 0;
           let prefix = new Uint8Array();
@@ -140538,7 +141200,7 @@ var init_filesystem = __esm({
         });
       }
       async libraryBinMetadata(root, directory) {
-        const parents = await this.ancestors(directory), bins = path50.join(directory, ".bin");
+        const parents = await this.ancestors(directory), bins = path53.join(directory, ".bin");
         const before = identity(await fs24.lstat(directory, { bigint: true }));
         requireFact(
           (await this.names(directory, INSTALLATION_LIMITS.libraryEntries)).join(",") === ".bin",
@@ -140549,11 +141211,11 @@ var init_filesystem = __esm({
           (await this.names(bins, INSTALLATION_LIMITS.libraryEntries)).join(",") === "playwright-core",
           "LIBRARY_MISMATCH"
         );
-        const shim = path50.join(bins, "playwright-core"), stat5 = await fs24.lstat(shim, { bigint: true });
+        const shim = path53.join(bins, "playwright-core"), stat5 = await fs24.lstat(shim, { bigint: true });
         if (stat5.isSymbolicLink()) {
           const link3 = await fs24.readlink(shim);
           requireFact(
-            Buffer.byteLength(link3) <= INSTALLATION_LIMITS.bufferBytes && await fs24.realpath(shim) === path50.join(root, "cli.js"),
+            Buffer.byteLength(link3) <= INSTALLATION_LIMITS.bufferBytes && await fs24.realpath(shim) === path53.join(root, "cli.js"),
             "LIBRARY_MISMATCH"
           );
           const after = await fs24.lstat(shim, { bigint: true });
@@ -140584,13 +141246,13 @@ var init_filesystem = __esm({
           requireFact(dirIdentity.type === "directory", "ROOT_CHANGED");
           result2.directories.push({ path: directory, identity: dirIdentity });
           result2.rows.push({
-            path: path50.relative(root, directory).split(path50.sep).join("/"),
+            path: path53.relative(root, directory).split(path53.sep).join("/"),
             type: "directory",
             identity: dirIdentity
           });
           for (const name2 of await this.names(directory, entryLimit)) {
             requireFact(++result2.entries <= entryLimit, "RETENTION_EXCEEDED");
-            const absolute = path50.join(directory, name2), relative12 = path50.relative(root, absolute).split(path50.sep).join("/");
+            const absolute = path53.join(directory, name2), relative12 = path53.relative(root, absolute).split(path53.sep).join("/");
             requireFact(relativePath.safeParse(relative12).success, "INSTALLATION_INVALID");
             const stat5 = await fs24.lstat(absolute, { bigint: true });
             if (library && relative12 === "node_modules") {
@@ -140601,7 +141263,7 @@ var init_filesystem = __esm({
             if (stat5.isSymbolicLink()) {
               requireFact(!library, "LIBRARY_MISMATCH");
               const link3 = await fs24.readlink(absolute), resolved = await fs24.realpath(absolute);
-              requireFact(resolved.startsWith(root + path50.sep), "ROOT_CHANGED");
+              requireFact(resolved.startsWith(root + path53.sep), "ROOT_CHANGED");
               const target = await fs24.stat(resolved, { bigint: true });
               requireFact(target.isFile() || target.isDirectory(), "ROOT_CHANGED");
               const after = await fs24.lstat(absolute, { bigint: true });
@@ -140671,18 +141333,18 @@ var init_filesystem = __esm({
           this.supported();
           const tree = await this.tree(this.configuration.libraryRoot, true);
           requireFact(tree.files.length === 114, "LIBRARY_MISMATCH");
-          const distribution = createHash6("sha256");
+          const distribution = createHash9("sha256");
           for (const file2 of [...tree.files].sort(
             (a2, b2) => a2.path < b2.path ? -1 : a2.path > b2.path ? 1 : 0
           ))
             distribution.update(
-              path50.relative(this.configuration.libraryRoot, file2.path).split(path50.sep).join("/") + "\0" + file2.sha256 + "\n"
+              path53.relative(this.configuration.libraryRoot, file2.path).split(path53.sep).join("/") + "\0" + file2.sha256 + "\n"
             );
           const distributionSHA256 = distribution.digest("hex");
           requireFact(distributionSHA256 === INSTALLATION_TARGET.libraryDistributionSHA256, "LIBRARY_MISMATCH");
           const find = (name2) => {
             const file2 = tree.files.find(
-              (f3) => f3.path === path50.join(this.configuration.libraryRoot, name2)
+              (f3) => f3.path === path53.join(this.configuration.libraryRoot, name2)
             );
             requireFact(file2, "LIBRARY_MISMATCH");
             return file2;
@@ -140763,7 +141425,7 @@ var init_filesystem = __esm({
           requireFact(!this.active || this.active.state === "released", "PUBLICATION_BUSY");
           await this.ensureDirectories(this.configuration.cacheRoot);
           const root = await this.directory(this.configuration.cacheRoot);
-          const name2 = path50.join(root.path, "reservation");
+          const name2 = path53.join(root.path, "reservation");
           try {
             await this.exclusiveDirectory(name2);
           } catch (error63) {
@@ -140815,7 +141477,7 @@ var init_filesystem = __esm({
           directory.duty.lease = true;
           try {
             reservation.ownerFile = await this.atomicRecord(
-              path50.join(name2, "owner.json"),
+              path53.join(name2, "owner.json"),
               owner,
               INSTALLATION_LIMITS.journalBytes,
               false
@@ -140835,12 +141497,12 @@ var init_filesystem = __esm({
           await this.checkReservation(reservation);
           this.checkEnd(reservation);
           requireFact(reservation.attempt === null, "BINDING_MISMATCH");
-          const parent = path50.join(this.configuration.cacheRoot, "attempts");
+          const parent = path53.join(this.configuration.cacheRoot, "attempts");
           await this.ensureDirectories(parent);
-          const root = path50.join(parent, handle.binding.attemptId);
+          const root = path53.join(parent, handle.binding.attemptId);
           await this.exclusiveDirectory(root);
           for (const child of ["home", "tmp", "diagnostics"])
-            await this.exclusiveDirectory(path50.join(root, child));
+            await this.exclusiveDirectory(path53.join(root, child));
           await this.syncDirectory(root);
           await this.syncDirectory(parent);
           const stat5 = identity(await fs24.lstat(root, { bigint: true }));
@@ -140848,21 +141510,21 @@ var init_filesystem = __esm({
             kind: "installation-attempt",
             binding: handle.binding,
             attemptRoot: root,
-            homeRoot: path50.join(root, "home"),
-            temporaryRoot: path50.join(root, "tmp"),
+            homeRoot: path53.join(root, "home"),
+            temporaryRoot: path53.join(root, "tmp"),
             identity: stat5
           });
           this.attempts.set(attempt, {
             reservation,
             handle: attempt,
-            diagnostics: path50.join(root, "diagnostics")
+            diagnostics: path53.join(root, "diagnostics")
           });
           reservation.attempt = attempt;
           return attempt;
         });
       }
       async atomicRecord(name2, record2, cap, replace) {
-        const bytes = recordBytes(record2, cap), parent = path50.dirname(name2), parents = await this.ancestors(parent);
+        const bytes = recordBytes(record2, cap), parent = path53.dirname(name2), parents = await this.ancestors(parent);
         if (!replace) {
           try {
             await fs24.lstat(name2);
@@ -140871,7 +141533,7 @@ var init_filesystem = __esm({
             if (!isMissing(error63)) throw error63;
           }
         }
-        const temporary = path50.join(parent, ".installation-" + randomUUID5() + ".tmp");
+        const temporary = path53.join(parent, ".installation-" + randomUUID5() + ".tmp");
         const duty = await this.acquire(
           temporary,
           constants5.O_WRONLY | constants5.O_CREAT | constants5.O_EXCL | constants5.O_NOFOLLOW
@@ -140908,7 +141570,7 @@ var init_filesystem = __esm({
         await fs24.rename(temporary, name2);
         await this.syncDirectory(parent);
         const result2 = await this.read(name2, cap, cap);
-        requireFact(result2.file.sha256 === sha2562(bytes), "RECORD_FAILED");
+        requireFact(result2.file.sha256 === sha2564(bytes), "RECORD_FAILED");
         return result2.file;
       }
       async writeOwner(reservationHandle, attemptHandle, record2) {
@@ -140931,7 +141593,7 @@ var init_filesystem = __esm({
           await this.checkReservation(reservation);
           this.checkEnd(reservation);
           const old = await this.read(
-            path50.join(reservation.directory.path, "owner.json"),
+            path53.join(reservation.directory.path, "owner.json"),
             INSTALLATION_LIMITS.journalBytes,
             INSTALLATION_LIMITS.journalBytes
           );
@@ -140954,11 +141616,11 @@ var init_filesystem = __esm({
           requireFact(reservation.candidate === null, "BINDING_MISMATCH");
           await this.checkReservation(reservation);
           this.checkEnd(reservation);
-          const parent = path50.join(this.configuration.cacheRoot, "candidates");
+          const parent = path53.join(this.configuration.cacheRoot, "candidates");
           await this.ensureDirectories(parent);
-          const candidateRoot = path50.join(parent, handle.binding.installationId);
+          const candidateRoot = path53.join(parent, handle.binding.installationId);
           await this.exclusiveDirectory(candidateRoot);
-          const payloadRoot = path50.join(candidateRoot, "payload");
+          const payloadRoot = path53.join(candidateRoot, "payload");
           await this.exclusiveDirectory(payloadRoot);
           const candidate = Object.freeze({
             kind: "installation-candidate",
@@ -140996,8 +141658,8 @@ var init_filesystem = __esm({
         });
       }
       async snapshot(installationId, candidateRoot) {
-        const payloadRoot = path50.join(candidateRoot, "payload"), tree = await this.tree(payloadRoot);
-        const executablePath = path50.join(candidateRoot, INSTALLATION_TARGET.executablePath);
+        const payloadRoot = path53.join(candidateRoot, "payload"), tree = await this.tree(payloadRoot);
+        const executablePath = path53.join(candidateRoot, INSTALLATION_TARGET.executablePath);
         const executable = await this.read(executablePath, INSTALLATION_LIMITS.executableBytes);
         const observed = tree.files.find((file2) => file2.path === executablePath);
         requireFact(
@@ -141034,7 +141696,7 @@ var init_filesystem = __esm({
       async current() {
         try {
           const value = await this.read(
-            path50.join(this.configuration.cacheRoot, "current.json"),
+            path53.join(this.configuration.cacheRoot, "current.json"),
             INSTALLATION_LIMITS.pointerBytes,
             INSTALLATION_LIMITS.pointerBytes
           );
@@ -141080,13 +141742,13 @@ var init_filesystem = __esm({
                 installation: null
               };
             requireFact(current3.state === "present", "INSTALLATION_INVALID");
-            const root = path50.join(
+            const root = path53.join(
               this.configuration.cacheRoot,
               "candidates",
               current3.pointer.installationId
             );
             const manifestRead = await this.read(
-              path50.join(root, "manifest.json"),
+              path53.join(root, "manifest.json"),
               INSTALLATION_LIMITS.manifestBytes,
               INSTALLATION_LIMITS.manifestBytes
             );
@@ -141096,7 +141758,7 @@ var init_filesystem = __esm({
             );
             const manifest = parseRecord(manifestRead.bytes, ManifestSchema, INSTALLATION_LIMITS.manifestBytes);
             const verificationRead = await this.read(
-              path50.join(root, "verification.json"),
+              path53.join(root, "verification.json"),
               INSTALLATION_LIMITS.journalBytes,
               INSTALLATION_LIMITS.journalBytes
             );
@@ -141184,7 +141846,7 @@ var init_filesystem = __esm({
           for (const directory of [...tree.directories].reverse())
             await this.syncDirectory(directory.path);
           await this.syncDirectory(handle.candidateRoot);
-          await this.syncDirectory(path50.dirname(handle.candidateRoot));
+          await this.syncDirectory(path53.dirname(handle.candidateRoot));
           await this.syncDirectory(this.configuration.cacheRoot);
           await this.revalidateCandidate(handle, expected);
           candidate.durable = await this.observeCandidate(handle);
@@ -141246,7 +141908,7 @@ var init_filesystem = __esm({
             throw error63;
           }
           const manifestBytes = recordBytes(parsedManifest, INSTALLATION_LIMITS.manifestBytes), verificationBytes = recordBytes(parsedVerification, INSTALLATION_LIMITS.journalBytes);
-          const manifestDigest = sha2562(manifestBytes), verificationDigest = sha2562(verificationBytes);
+          const manifestDigest = sha2564(manifestBytes), verificationDigest = sha2564(verificationBytes);
           let pointerReplaced = false, replacementAttempted = false, after = { state: "unknown" };
           try {
             await this.checkReservation(reservation);
@@ -141254,18 +141916,18 @@ var init_filesystem = __esm({
             await this.revalidateCandidate(candidateHandle, candidate.durable);
             requireFact(compareCurrent(before, await this.current()), "ROOT_CHANGED");
             await this.atomicRecord(
-              path50.join(candidateHandle.candidateRoot, "verification.json"),
+              path53.join(candidateHandle.candidateRoot, "verification.json"),
               parsedVerification,
               INSTALLATION_LIMITS.journalBytes,
               false
             );
             await this.atomicRecord(
-              path50.join(candidateHandle.candidateRoot, "manifest.json"),
+              path53.join(candidateHandle.candidateRoot, "manifest.json"),
               parsedManifest,
               INSTALLATION_LIMITS.manifestBytes,
               false
             );
-            await this.syncDirectory(path50.dirname(candidateHandle.candidateRoot));
+            await this.syncDirectory(path53.dirname(candidateHandle.candidateRoot));
             await this.revalidateCandidate(candidateHandle, candidate.durable);
             requireFact(compareCurrent(before, await this.current()), "ROOT_CHANGED");
             this.checkEnd(reservation);
@@ -141273,7 +141935,7 @@ var init_filesystem = __esm({
               { schemaVersion: 1, installationId: parsedManifest.installationId, manifestDigest },
               INSTALLATION_LIMITS.pointerBytes
             );
-            const temporary = path50.join(
+            const temporary = path53.join(
               this.configuration.cacheRoot,
               ".current-" + randomUUID5() + ".json"
             );
@@ -141283,12 +141945,12 @@ var init_filesystem = __esm({
               INSTALLATION_LIMITS.pointerBytes,
               false
             );
-            requireFact(file2.sha256 === sha2562(pointer), "RECORD_FAILED");
+            requireFact(file2.sha256 === sha2564(pointer), "RECORD_FAILED");
             await this.checkReservation(reservation);
             requireFact(compareCurrent(before, await this.current()), "ROOT_CHANGED");
             this.checkEnd(reservation);
             replacementAttempted = true;
-            await fs24.rename(temporary, path50.join(this.configuration.cacheRoot, "current.json"));
+            await fs24.rename(temporary, path53.join(this.configuration.cacheRoot, "current.json"));
             pointerReplaced = true;
             await this.syncDirectory(this.configuration.cacheRoot);
             after = await this.current();
@@ -141355,7 +142017,7 @@ var init_filesystem = __esm({
             throw error63;
           }
           const oldVerification = await this.read(
-            path50.join(
+            path53.join(
               this.configuration.cacheRoot,
               "candidates",
               handle.binding.installationId,
@@ -141368,18 +142030,18 @@ var init_filesystem = __esm({
             "BINDING_MISMATCH"
           );
           const file2 = await this.atomicRecord(
-            path50.join(attempt.handle.attemptRoot, "reuse.json"),
+            path53.join(attempt.handle.attemptRoot, "reuse.json"),
             parsed,
             INSTALLATION_LIMITS.journalBytes,
             false
           );
-          await this.syncDirectory(path50.dirname(attempt.handle.attemptRoot));
+          await this.syncDirectory(path53.dirname(attempt.handle.attemptRoot));
           requireFact(compareCurrent(current3, await this.current()), "ROOT_CHANGED");
           return file2;
         });
       }
       async writer(name2, reservation, diagnosticBudget) {
-        const parents = await this.ancestors(path50.dirname(name2));
+        const parents = await this.ancestors(path53.dirname(name2));
         const duty = await this.acquire(
           name2,
           constants5.O_WRONLY | constants5.O_CREAT | constants5.O_EXCL | constants5.O_NOFOLLOW
@@ -141409,7 +142071,7 @@ var init_filesystem = __esm({
             "OWNERSHIP_UNCERTAIN"
           );
           expected = identity(stat5);
-          hash3 = createHash6("sha256");
+          hash3 = createHash9("sha256");
           await observe(0);
           await original.sync();
           await observe(0);
@@ -141499,7 +142161,7 @@ var init_filesystem = __esm({
                 first ??= error63;
               }
               try {
-                await this.syncDirectory(path50.dirname(name2));
+                await this.syncDirectory(path53.dirname(name2));
               } catch (error63) {
                 first ??= error63;
                 this.fault(error63);
@@ -141547,7 +142209,7 @@ var init_filesystem = __esm({
       }
       sink(attempt, reservation, probe2) {
         const jobs = reservation?.jobs ?? /* @__PURE__ */ new Map(), budget = reservation?.diagnosticBudget ?? { bytes: 0, reserved: 0 };
-        const diagnostics = path50.join(attempt.attemptRoot, "diagnostics");
+        const diagnostics = path53.join(attempt.attemptRoot, "diagnostics");
         const reobserve = async () => {
           if (reservation) await this.checkReservation(reservation);
           requireFact(
@@ -141573,7 +142235,7 @@ var init_filesystem = __esm({
             );
             requireFact(!jobs.has(parsed.jobId), "BINDING_MISMATCH");
             await reobserve();
-            const prefix = path50.join(diagnostics, (probe2 ? "probe_" : "") + parsed.jobId);
+            const prefix = path53.join(diagnostics, (probe2 ? "probe_" : "") + parsed.jobId);
             const job = {
               intent: parsed,
               prefix,
@@ -141659,18 +142321,18 @@ var init_filesystem = __esm({
           requireFact(!this.freshAdmissionStarted, "BINDING_MISMATCH");
           this.freshAdmissionStarted = true;
           requireFact(
-            parsed.cacheRoot === c3.cacheRoot && parsed.libraryRoot === c3.libraryRoot && parsed.nodeExecutable === c3.nodeExecutable && parsed.nodeExecutableSHA256 === c3.nodeExecutableSHA256 && parsed.verifierEntry === c3.verifierEntry && parsed.controllerEntry === c3.controllerEntry && parsed.sourceManifestPath === c3.sourceManifestPath && canonicalDigest(parsed.sourceVintage) === canonicalDigest(c3.sourceVintage) && path50.resolve(process.execPath) === c3.nodeExecutable && process.argv[1] && path50.resolve(process.argv[1]) === c3.verifierEntry,
+            parsed.cacheRoot === c3.cacheRoot && parsed.libraryRoot === c3.libraryRoot && parsed.nodeExecutable === c3.nodeExecutable && parsed.nodeExecutableSHA256 === c3.nodeExecutableSHA256 && parsed.verifierEntry === c3.verifierEntry && parsed.controllerEntry === c3.controllerEntry && parsed.sourceManifestPath === c3.sourceManifestPath && canonicalDigest(parsed.sourceVintage) === canonicalDigest(c3.sourceVintage) && path53.resolve(process.execPath) === c3.nodeExecutable && process.argv[1] && path53.resolve(process.argv[1]) === c3.verifierEntry,
             "SOURCE_MISMATCH"
           );
           requireFact(
-            parsed.attemptRoot === path50.join(c3.cacheRoot, "attempts", parsed.binding.attemptId) && parsed.candidateRoot === path50.join(c3.cacheRoot, "candidates", parsed.binding.installationId) && parsed.executablePath === INSTALLATION_TARGET.executablePath,
+            parsed.attemptRoot === path53.join(c3.cacheRoot, "attempts", parsed.binding.attemptId) && parsed.candidateRoot === path53.join(c3.cacheRoot, "candidates", parsed.binding.installationId) && parsed.executablePath === INSTALLATION_TARGET.executablePath,
             "BINDING_MISMATCH"
           );
           const attempt = identity(await fs24.lstat(parsed.attemptRoot, { bigint: true }));
           requireFact(sameFileIdentity(attempt, parsed.attemptIdentity), "ROOT_CHANGED");
           await this.ancestors(parsed.attemptRoot);
           const ownerRead = await this.read(
-            path50.join(c3.cacheRoot, "reservation", "owner.json"),
+            path53.join(c3.cacheRoot, "reservation", "owner.json"),
             INSTALLATION_LIMITS.journalBytes,
             INSTALLATION_LIMITS.journalBytes
           );
@@ -141686,7 +142348,7 @@ var init_filesystem = __esm({
             birth && birth.executable === c3.nodeExecutable && birth.argv.includes(c3.verifierEntry),
             "BINDING_MISMATCH"
           );
-          const prefix = path50.join(parsed.attemptRoot, "diagnostics", birth.jobId);
+          const prefix = path53.join(parsed.attemptRoot, "diagnostics", birth.jobId);
           const intentRead = await this.read(
             prefix + ".intent.json",
             INSTALLATION_LIMITS.journalBytes,
@@ -141731,8 +142393,8 @@ var init_filesystem = __esm({
           kind: "installation-attempt",
           binding: admitted.request.binding,
           attemptRoot: admitted.request.attemptRoot,
-          homeRoot: path50.join(admitted.request.attemptRoot, "home"),
-          temporaryRoot: path50.join(admitted.request.attemptRoot, "tmp"),
+          homeRoot: path53.join(admitted.request.attemptRoot, "home"),
+          temporaryRoot: path53.join(admitted.request.attemptRoot, "tmp"),
           identity: admitted.attempt
         });
         admitted.sink ??= this.sink(attempt, null, admitted);
@@ -141749,7 +142411,7 @@ var init_filesystem = __esm({
             "CUSTODY_UNCERTAIN"
           );
           const owner = await this.read(
-            path50.join(reservation.directory.path, "owner.json"),
+            path53.join(reservation.directory.path, "owner.json"),
             INSTALLATION_LIMITS.journalBytes
           );
           requireFact(
@@ -141794,7 +142456,7 @@ var init_filesystem = __esm({
 
 // ../browser/src/runtime/installation/jobs.ts
 import { spawn } from "node:child_process";
-import { randomBytes as randomBytes5, createHash as createHash7 } from "node:crypto";
+import { randomBytes as randomBytes5, createHash as createHash10 } from "node:crypto";
 import { constants as constants6 } from "node:fs";
 import { lstat as lstat5, open as open4, realpath as realpath4 } from "node:fs/promises";
 import { join as join55, resolve as resolve12, relative as relative11, isAbsolute as isAbsolute10, dirname as dirname14 } from "node:path";
@@ -141813,8 +142475,8 @@ function identity2(s2) {
     type: s2.isFile() ? "file" : "directory"
   });
 }
-function within(root, path68) {
-  const name2 = relative11(root, path68);
+function within(root, path71) {
+  const name2 = relative11(root, path71);
   return name2 !== "" && !name2.startsWith("../") && name2 !== ".." && !isAbsolute10(name2);
 }
 function streamFacts(s2) {
@@ -141960,30 +142622,30 @@ function createInstallationJobs(configuration, options = { ownerKind: "controlle
     originals.push(slot);
     return slot;
   }
-  async function assertDirectory(path68, expected) {
-    requireFact2(isAbsolute10(path68) && resolve12(path68) === path68, "ROOT_CHANGED");
-    const s2 = await lstat5(path68, { bigint: true });
+  async function assertDirectory(path71, expected) {
+    requireFact2(isAbsolute10(path71) && resolve12(path71) === path71, "ROOT_CHANGED");
+    const s2 = await lstat5(path71, { bigint: true });
     requireFact2(
-      s2.isDirectory() && !s2.isSymbolicLink() && await realpath4(path68) === path68,
+      s2.isDirectory() && !s2.isSymbolicLink() && await realpath4(path71) === path71,
       "ROOT_CHANGED"
     );
     requireFact2(!expected || sameFileIdentity(identity2(s2), expected), "ROOT_CHANGED");
   }
-  async function readPinned(slot, path68, digest2, cap, expected, keep = false) {
-    const before = await lstat5(path68, { bigint: true });
+  async function readPinned(slot, path71, digest2, cap, expected, keep = false) {
+    const before = await lstat5(path71, { bigint: true });
     requireFact2(
       before.isFile() && !before.isSymbolicLink() && before.size <= BigInt(cap),
       "SOURCE_MISMATCH"
     );
-    requireFact2(await realpath4(path68) === path68, "ROOT_CHANGED");
+    requireFact2(await realpath4(path71) === path71, "ROOT_CHANGED");
     const beforeIdentity = identity2(before);
     requireFact2(!expected || sameFileIdentity(beforeIdentity, expected), "HASH_MISMATCH");
     const original = await open4(
-      path68,
+      path71,
       constants6.O_RDONLY | constants6.O_NOFOLLOW | constants6.O_NONBLOCK
     );
     heldReads.add(original);
-    const hash3 = createHash7("sha256");
+    const hash3 = createHash10("sha256");
     const chunks = [];
     let bytes = 0;
     let failed = false;
@@ -142008,7 +142670,7 @@ function createInstallationJobs(configuration, options = { ownerKind: "controlle
         if (keep) chunks.push(buffer.slice(0, result3.bytesRead));
       }
       requireFact2(
-        sameFileIdentity(beforeIdentity, identity2(await original.stat({ bigint: true }))) && sameFileIdentity(beforeIdentity, identity2(await lstat5(path68, { bigint: true }))),
+        sameFileIdentity(beforeIdentity, identity2(await original.stat({ bigint: true }))) && sameFileIdentity(beforeIdentity, identity2(await lstat5(path71, { bigint: true }))),
         "ROOT_CHANGED"
       );
       requireFact2(hash3.digest("hex") === digest2 && bytes === Number(before.size), "HASH_MISMATCH");
@@ -142788,7 +143450,7 @@ function createInstallationTransaction(configuration, dependencies, generation3)
         verifier: {
           jobId: verifierFacts.jobId,
           receiptDigest: canonicalDigest(verifierFacts),
-          replyDigest: sha2562(verifier.stdout)
+          replyDigest: sha2564(verifier.stdout)
         },
         reply,
         candidateInventoryDigest: snapshot.inventoryDigest,
@@ -142811,7 +143473,7 @@ function createInstallationTransaction(configuration, dependencies, generation3)
         recordBytes(journal, INSTALLATION_LIMITS.journalBytes);
         check4(bounds, options.signal);
         const written2 = await fs41.writeReuseJournal(reservation, attempt, journal);
-        require2(written2.path === join56(attempt.attemptRoot, "reuse.json") && written2.sha256 === sha2562(recordBytes(journal, INSTALLATION_LIMITS.journalBytes)), "OWNERSHIP_UNCERTAIN");
+        require2(written2.path === join56(attempt.attemptRoot, "reuse.json") && written2.sha256 === sha2564(recordBytes(journal, INSTALLATION_LIMITS.journalBytes)), "OWNERSHIP_UNCERTAIN");
         const unchanged = await fs41.inspectExisting({ signal: options.signal });
         require2(canonicalDigest(unchanged.current) === canonicalDigest(reserved.current) && canonicalDigest(unchanged.installation) === canonicalDigest(reserved.installation), "ROOT_CHANGED");
         journalDigest = written2.sha256;
@@ -142853,8 +143515,8 @@ function createInstallationTransaction(configuration, dependencies, generation3)
         publicationMayHaveChanged ||= published.pointerReplaced;
         require2(published.state === "durable" && published.pointerReplaced && published.firstCause === null, published.firstCause ?? "PUBLICATION_UNCERTAIN");
         require2(published.currentAfter.state === "present" && published.currentAfter.pointer.installationId === binding.installationId && published.currentAfter.pointer.manifestDigest === published.manifestDigest, "PUBLICATION_UNCERTAIN");
-        require2(published.manifestDigest === sha2562(recordBytes(manifest, INSTALLATION_LIMITS.manifestBytes)) && canonicalDigest(published.currentBefore) === canonicalDigest(reserved.current), "PUBLICATION_UNCERTAIN");
-        require2(published.verificationDigest === sha2562(
+        require2(published.manifestDigest === sha2564(recordBytes(manifest, INSTALLATION_LIMITS.manifestBytes)) && canonicalDigest(published.currentBefore) === canonicalDigest(reserved.current), "PUBLICATION_UNCERTAIN");
+        require2(published.verificationDigest === sha2564(
           recordBytes(verification2, INSTALLATION_LIMITS.journalBytes)
         ), "PUBLICATION_UNCERTAIN");
         currentManifestDigest = published.manifestDigest;
@@ -142915,7 +143577,7 @@ var init_transaction2 = __esm({
 });
 
 // ../browser/src/runtime/installation/packaged.ts
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 import { constants as constants7 } from "node:fs";
 import { lstat as lstat6, open as open5, realpath as realpath5 } from "node:fs/promises";
 import { createRequire as createRequire3 } from "node:module";
@@ -142939,7 +143601,7 @@ async function inspectFile(filename, cap, retainBytes = false) {
   try {
     if (!sameFile(before, await original.stat({ bigint: true })))
       throw new Error("Browser package file changed.");
-    const hash3 = createHash8("sha256"), chunks = [], buffer = Buffer.alloc(65536);
+    const hash3 = createHash11("sha256"), chunks = [], buffer = Buffer.alloc(65536);
     let total = 0;
     while (true) {
       const { bytesRead } = await original.read(
@@ -143566,7 +144228,7 @@ var init_operator_output = __esm({
 });
 
 // src/lib/agent-browser/chrome-locator.ts
-import path51 from "node:path";
+import path54 from "node:path";
 function chromeCandidates(env6) {
   if (env6.platform === "darwin") {
     const apps = [
@@ -143574,8 +144236,8 @@ function chromeCandidates(env6) {
       ["Chromium.app", "Chromium"]
     ];
     return apps.flatMap(([app, binary3]) => [
-      path51.posix.join("/Applications", app, "Contents", "MacOS", binary3),
-      path51.posix.join(env6.homeDir, "Applications", app, "Contents", "MacOS", binary3)
+      path54.posix.join("/Applications", app, "Contents", "MacOS", binary3),
+      path54.posix.join(env6.homeDir, "Applications", app, "Contents", "MacOS", binary3)
     ]);
   }
   if (env6.platform === "win32") {
@@ -143584,15 +144246,15 @@ function chromeCandidates(env6) {
     );
     return [
       ...roots.map(
-        (root) => path51.win32.join(root, "Google", "Chrome", "Application", "chrome.exe")
+        (root) => path54.win32.join(root, "Google", "Chrome", "Application", "chrome.exe")
       ),
-      ...roots.map((root) => path51.win32.join(root, "Chromium", "Application", "chrome.exe"))
+      ...roots.map((root) => path54.win32.join(root, "Chromium", "Application", "chrome.exe"))
     ];
   }
   const names = ["google-chrome", "google-chrome-stable", "chromium", "chromium-browser"];
-  const dirs = (env6.pathVar ?? "").split(path51.posix.delimiter).filter(Boolean);
+  const dirs = (env6.pathVar ?? "").split(path54.posix.delimiter).filter(Boolean);
   return [
-    ...names.flatMap((name2) => dirs.map((dir) => path51.posix.join(dir, name2))),
+    ...names.flatMap((name2) => dirs.map((dir) => path54.posix.join(dir, name2))),
     "/opt/google/chrome/chrome"
   ];
 }
@@ -143758,7 +144420,7 @@ var init_process_liveness = __esm({
 
 // src/lib/agent-browser/profile.ts
 import fs25 from "node:fs";
-import path52 from "node:path";
+import path55 from "node:path";
 function themePreferences() {
   const color = AGENT_BROWSER_THEME_COLOR;
   return {
@@ -143818,18 +144480,18 @@ function hasOwnThemeColor(prefs) {
 }
 function ensureAgentProfile(profileDir, now3 = /* @__PURE__ */ new Date()) {
   const created = !fs25.existsSync(profileDir);
-  fs25.mkdirSync(path52.dirname(profileDir), { recursive: true, mode: 448 });
-  fs25.chmodSync(path52.dirname(profileDir), 448);
+  fs25.mkdirSync(path55.dirname(profileDir), { recursive: true, mode: 448 });
+  fs25.chmodSync(path55.dirname(profileDir), 448);
   fs25.mkdirSync(profileDir, { recursive: true, mode: 448 });
-  const marker = path52.join(profileDir, THEME_MARKER_FILE);
+  const marker = path55.join(profileDir, THEME_MARKER_FILE);
   if (fs25.existsSync(marker)) return { created, themed: false };
-  const prefsFile = path52.join(profileDir, "Default", "Preferences");
+  const prefsFile = path55.join(profileDir, "Default", "Preferences");
   const prefs = readJsonObject(prefsFile);
   const themed = !hasOwnThemeColor(prefs);
   if (themed) {
-    fs25.mkdirSync(path52.dirname(prefsFile), { recursive: true, mode: 448 });
+    fs25.mkdirSync(path55.dirname(prefsFile), { recursive: true, mode: 448 });
     fs25.writeFileSync(prefsFile, JSON.stringify(deepMerge2(prefs, themePreferences())));
-    const localStateFile = path52.join(profileDir, "Local State");
+    const localStateFile = path55.join(profileDir, "Local State");
     const localState = readJsonObject(localStateFile);
     fs25.writeFileSync(
       localStateFile,
@@ -143845,7 +144507,7 @@ function ensureAgentProfile(profileDir, now3 = /* @__PURE__ */ new Date()) {
 }
 function profileLock(profileDir, platform3 = process.platform) {
   if (platform3 === "win32") {
-    const lockfile = path52.join(profileDir, "lockfile");
+    const lockfile = path55.join(profileDir, "lockfile");
     if (!fs25.existsSync(lockfile)) return { inUse: false };
     try {
       fs25.rmSync(lockfile);
@@ -143856,7 +144518,7 @@ function profileLock(profileDir, platform3 = process.platform) {
   }
   let target;
   try {
-    target = fs25.readlinkSync(path52.join(profileDir, "SingletonLock"));
+    target = fs25.readlinkSync(path55.join(profileDir, "SingletonLock"));
   } catch {
     return { inUse: false };
   }
@@ -143959,7 +144621,7 @@ var init_cloud_origin = __esm({
 
 // src/lib/agent-browser/storage-state.ts
 import fs26 from "node:fs";
-import path53 from "node:path";
+import path56 from "node:path";
 function toStorageStateCookie(cookie) {
   const copy2 = {
     name: cookie.name,
@@ -144030,7 +144692,7 @@ function cliCloudOrigins() {
 }
 async function writeStorageState(file2, state) {
   const saved = withoutCloudOrigin(state, cliCloudOrigins()).state;
-  fs26.mkdirSync(path53.dirname(file2), { recursive: true, mode: 448 });
+  fs26.mkdirSync(path56.dirname(file2), { recursive: true, mode: 448 });
   await writeFileAtomic2(file2, `${JSON.stringify(saved, null, 2)}
 `, { mode: 384 });
   return saved;
@@ -144149,12 +144811,12 @@ __export(browser_commands_exports, {
   runBrowserStatus: () => runBrowserStatus
 });
 import fs27 from "node:fs";
-import path54 from "node:path";
+import path57 from "node:path";
 import { parseArgs as parseArgs8 } from "node:util";
 function agentBrowserPaths(dorkHome) {
   return {
-    profileDir: path54.join(dorkHome, ...AGENT_BROWSER_PROFILE_SEGMENTS),
-    stateFile: path54.join(dorkHome, ...AGENT_BROWSER_STATE_SEGMENTS)
+    profileDir: path57.join(dorkHome, ...AGENT_BROWSER_PROFILE_SEGMENTS),
+    stateFile: path57.join(dorkHome, ...AGENT_BROWSER_STATE_SEGMENTS)
   };
 }
 function profileFlags(profileDir) {
@@ -144707,9 +145369,9 @@ var init_installation_label = __esm({
 });
 
 // src/lib/package-commands.ts
-import path55 from "node:path";
+import path58 from "node:path";
 function resolveProjectFlag(value) {
-  return typeof value === "string" ? path55.resolve(process.cwd(), value) : void 0;
+  return typeof value === "string" ? path58.resolve(process.cwd(), value) : void 0;
 }
 function shellWord(value) {
   return /^[A-Za-z0-9_./,:@%+=-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
@@ -145498,8 +146160,8 @@ async function runUninstall(args) {
       console.log(
         result2.unproven && result2.unproven.length > 0 ? "Kept these files:" : "Kept the files you and your agents added or changed:"
       );
-      for (const path68 of result2.preservedData) {
-        console.log(`  ${path68}`);
+      for (const path71 of result2.preservedData) {
+        console.log(`  ${path71}`);
       }
     }
     if (result2.agentRemoved) {
@@ -145731,8 +146393,8 @@ function filesOf(pkg) {
 }
 function devLinkNoteOf(pkg) {
   if (!pkg.devLink) return void 0;
-  const { path: path68, state } = pkg.devLink;
-  return state === "active" ? `dev link \u2192 ${path68}` : `dev link \u2192 ${path68} (${DEV_LINK_TROUBLE[state]})`;
+  const { path: path71, state } = pkg.devLink;
+  return state === "active" ? `dev link \u2192 ${path71}` : `dev link \u2192 ${path71} (${DEV_LINK_TROUBLE[state]})`;
 }
 function notesOf(pkg) {
   return [
@@ -146080,7 +146742,7 @@ __export(marketplace_link_exports, {
   runMarketplaceLink: () => runMarketplaceLink
 });
 import fs29 from "node:fs";
-import path56 from "node:path";
+import path59 from "node:path";
 import { parseArgs as parseArgs17 } from "node:util";
 function parseMarketplaceLinkArgs(rawArgs) {
   let parsed;
@@ -146107,7 +146769,7 @@ ${USAGE_LINE16}`);
   if (positionals2.length > 1) throw new Error(`Link one folder at a time.
 ${USAGE_LINE16}`);
   return {
-    folder: path56.resolve(process.cwd(), folder),
+    folder: path59.resolve(process.cwd(), folder),
     projectPath: resolveProjectFlag(values2.project),
     replaceInstalled: Boolean(values2["replace-installed"]),
     yes: Boolean(values2.yes),
@@ -146121,7 +146783,7 @@ function runningAsAgent() {
 function describeUnreadableFolder(typed, err) {
   const code = err?.code;
   const reason = code === "ENOENT" ? `No folder at ${typed}.` : code === "EACCES" || code === "EPERM" ? `Can't read ${typed}: permission denied (${code}).` : `Can't read ${typed}${code ? ` (${code})` : ""}.`;
-  const tilde = typed.split(path56.sep).includes("~") ? " The shell does not expand ~ inside quotes; use the full path." : "";
+  const tilde = typed.split(path59.sep).includes("~") ? " The shell does not expand ~ inside quotes; use the full path." : "";
   return `Error: ${reason}${tilde}`;
 }
 function describeLinkPreview(preview) {
@@ -147475,10 +148137,10 @@ function createGitHubCommunityReleaseSource(options) {
     },
     verifyManifest: async (bytes, trusted) => {
       const directory = await mkdtemp2(join58(tmpdir3(), "dorkos-community-manifest-"));
-      const path68 = join58(directory, "manifest.json");
+      const path71 = join58(directory, "manifest.json");
       try {
-        await writeFile5(path68, bytes, { mode: 384, flag: "wx" });
-        return await verify(path68, trusted);
+        await writeFile5(path71, bytes, { mode: 384, flag: "wx" });
+        return await verify(path71, trusted);
       } finally {
         await rm3(directory, { recursive: true, force: true });
       }
@@ -147494,7 +148156,7 @@ var init_github_release_source = __esm({
 });
 
 // src/commands/community-deploy/plan.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 function createLaunchPlan(input4) {
   const parsed = LaunchPlanInputSchema.parse(input4);
   Object.freeze(parsed.fly);
@@ -147524,7 +148186,7 @@ function hashLaunchPlan(plan) {
       private: plan.tigris.private
     }
   });
-  return createHash9("sha256").update(canonical2, "utf8").digest("hex");
+  return createHash12("sha256").update(canonical2, "utf8").digest("hex");
 }
 var SafeIdentifierSchema, DisplayNameSchema, RegionSchema, Sha256DigestSchema, LaunchPlanInputSchema;
 var init_plan2 = __esm({
@@ -150283,10 +150945,10 @@ kill_timeout = "30s"
 }
 async function withCommunityFlyConfig(plan, consumer) {
   const directory = await mkdtemp3(join59(tmpdir4(), "dorkos-community-fly-"));
-  const path68 = join59(directory, "fly.toml");
+  const path71 = join59(directory, "fly.toml");
   try {
-    await writeFile6(path68, renderCommunityFlyConfig(plan), { mode: 384, flag: "wx" });
-    return await consumer(path68);
+    await writeFile6(path71, renderCommunityFlyConfig(plan), { mode: 384, flag: "wx" });
+    return await consumer(path71);
   } finally {
     await rm4(directory, { recursive: true, force: true });
   }
@@ -150366,14 +151028,14 @@ var init_health = __esm({
 });
 
 // src/commands/community-deploy/runtime/image-platform.ts
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash13 } from "node:crypto";
 function invalid2() {
   return new ProviderMutationError("INVALID_RESPONSE");
 }
 function selectPlatformDigest(bytes, headerMediaType, attestedDigest, platform3 = FLY_MACHINE_PLATFORM) {
   if (!Sha256DigestSchema2.safeParse(attestedDigest).success) throw invalid2();
   if (bytes.byteLength > MAX_INDEX_BYTES) throw invalid2();
-  if (`sha256:${createHash10("sha256").update(bytes).digest("hex")}` !== attestedDigest) {
+  if (`sha256:${createHash13("sha256").update(bytes).digest("hex")}` !== attestedDigest) {
     throw invalid2();
   }
   let document;
@@ -150424,7 +151086,7 @@ async function resolvePlatformImageDigest(input4) {
   if (!match || !REGISTRY_ALLOW_LIST.has(match[1]) || !Sha256DigestSchema2.safeParse(input4.digest).success) {
     throw invalid2();
   }
-  const [, host, path68] = match;
+  const [, host, path71] = match;
   const request = input4.fetch ?? fetch;
   const signal = AbortSignal.any([
     AbortSignal.timeout(input4.timeoutMs),
@@ -150434,14 +151096,14 @@ async function resolvePlatformImageDigest(input4) {
   let mediaType;
   try {
     const tokenResponse = await request(
-      `https://${host}/token?scope=${encodeURIComponent(`repository:${path68}:pull`)}&service=${host}`,
+      `https://${host}/token?scope=${encodeURIComponent(`repository:${path71}:pull`)}&service=${host}`,
       { signal, redirect: "error" }
     );
     if (!tokenResponse.ok) throw invalid2();
     const token = external_exports.object({ token: external_exports.string().min(1).max(8192) }).passthrough().parse(
       JSON.parse(Buffer.from(await readBounded2(tokenResponse, MAX_TOKEN_BYTES)).toString("utf8"))
     ).token;
-    const response = await request(`https://${host}/v2/${path68}/manifests/${input4.digest}`, {
+    const response = await request(`https://${host}/v2/${path71}/manifests/${input4.digest}`, {
       signal,
       redirect: "error",
       headers: {
@@ -150756,8 +151418,8 @@ function handoffCommands(system) {
     browser: { executable: "xdg-open", args: (origin) => [origin] }
   };
 }
-async function executableOnPath(executable, path68) {
-  for (const directory of path68.split(delimiter).filter(Boolean)) {
+async function executableOnPath(executable, path71) {
+  for (const directory of path71.split(delimiter).filter(Boolean)) {
     try {
       await access2(join60(directory, executable), constants9.X_OK);
       return true;
@@ -150771,11 +151433,11 @@ async function assertOwnerHandoffPrerequisites(env6, system = platform2()) {
     throw new Error(`Owner handoff is unsupported on this platform. See ${FLY_GUIDE_URL}`);
   }
   const commands = handoffCommands(system);
-  const path68 = env6.PATH ?? "";
+  const path71 = env6.PATH ?? "";
   const missing = (await Promise.all(
     [commands.clipboard.executable].map(async (executable) => ({
       executable,
-      found: await executableOnPath(executable, path68)
+      found: await executableOnPath(executable, path71)
     }))
   )).filter(({ found }) => !found);
   if (missing.length > 0) {
@@ -150981,9 +151643,9 @@ function launchJournalPath(dorkHome, runId) {
   const safeRunId = external_exports.uuid().parse(runId);
   return join61(dorkHome, "launches", "community", `${safeRunId}.json`);
 }
-async function rejectSymlink(path68) {
+async function rejectSymlink(path71) {
   try {
-    if ((await lstat7(path68)).isSymbolicLink()) throw new Error(`Refusing symbolic link: ${path68}`);
+    if ((await lstat7(path71)).isSymbolicLink()) throw new Error(`Refusing symbolic link: ${path71}`);
   } catch (error63) {
     if (error63.code !== "ENOENT") throw error63;
   }
@@ -151005,9 +151667,9 @@ async function prepareDirectory(filePath) {
     await rejectSymlink(directory);
   }
 }
-async function exists2(path68) {
+async function exists2(path71) {
   try {
-    await lstat7(path68);
+    await lstat7(path71);
     return true;
   } catch (error63) {
     if (error63.code === "ENOENT") return false;
@@ -153941,7 +154603,7 @@ There is no --yes mode. Before the first write, type the generated app name in a
 import { execFileSync as execFileSync3 } from "node:child_process";
 import net from "node:net";
 import fs30 from "node:fs";
-import path57 from "node:path";
+import path60 from "node:path";
 function checkNode() {
   const issue2 = checkNodeVersion();
   if (issue2) {
@@ -153950,7 +154612,7 @@ function checkNode() {
   return { label: `Node.js ${process.versions.node}`, status: "pass" };
 }
 function checkDorkHomeWritable(dorkHome) {
-  const probe2 = path57.join(dorkHome, `.doctor-write-${process.pid}`);
+  const probe2 = path60.join(dorkHome, `.doctor-write-${process.pid}`);
   try {
     fs30.mkdirSync(dorkHome, { recursive: true });
     fs30.writeFileSync(probe2, "ok");
@@ -154003,7 +154665,7 @@ function readGitVersion() {
   return execFileSync3("git", ["--version"], { encoding: "utf-8", stdio: "pipe", timeout: 1e4 });
 }
 function checkClaudeAuth(homeDir) {
-  const claudeDir = path57.join(homeDir, ".claude");
+  const claudeDir = path60.join(homeDir, ".claude");
   if (fs30.existsSync(claudeDir)) {
     return { label: "Claude looks configured", status: "info", detail: claudeDir };
   }
@@ -154094,7 +154756,7 @@ function checkFileDescriptors(softLimit) {
   };
 }
 function checkDevLinks(dorkHome) {
-  const file2 = path57.join(dorkHome, DEV_LINKS_FILE);
+  const file2 = path60.join(dorkHome, DEV_LINKS_FILE);
   let text3;
   try {
     text3 = fs30.readFileSync(file2, "utf-8");
@@ -154139,7 +154801,7 @@ function devLinkStateSync(record2) {
   if (lstatIsLink && realpathOfSlot === null) {
     try {
       const text3 = fs30.readlinkSync(record2.slot);
-      if (path57.resolve(path57.dirname(record2.slot), text3) === record2.target) return "folder-missing";
+      if (path60.resolve(path60.dirname(record2.slot), text3) === record2.target) return "folder-missing";
     } catch {
     }
   }
@@ -154261,7 +154923,7 @@ __export(doctor_exports, {
 });
 import fs31 from "node:fs";
 import os9 from "node:os";
-import path58 from "node:path";
+import path61 from "node:path";
 function parseDoctorArgs(rawArgs) {
   const usage = "Usage: dorkos doctor [--json] [--deep]";
   const args = { json: false, deep: false };
@@ -154318,7 +154980,7 @@ function configFailureCheck(err, dorkHome) {
     label: "Your settings could not be used",
     status: "fail",
     detail: describeConfigFailure(err),
-    fix: `DorkOS did not replace or delete the file: ${path58.join(dorkHome, "config.json")}
+    fix: `DorkOS did not replace or delete the file: ${path61.join(dorkHome, "config.json")}
 Everything below was checked against the built-in defaults instead.
 ` + adviceFrom(err)
   };
@@ -154364,7 +155026,7 @@ async function gatherResults(dorkHome, store) {
     checkDevLinks(dorkHome),
     checkAuthConfig({
       authEnabled: readBool(store, "auth.enabled", false),
-      secretFileExists: fs31.existsSync(path58.join(dorkHome, SECRET_FILE_NAME2)),
+      secretFileExists: fs31.existsSync(path61.join(dorkHome, SECRET_FILE_NAME2)),
       // eslint-disable-next-line no-restricted-syntax -- reading an operator env override, matching secret.ts
       secretEnvSet: Boolean(process.env.BETTER_AUTH_SECRET?.trim())
     }),
@@ -154814,13 +155476,13 @@ function assertHasProtocol(url2) {
     throw new BetterAuthError(`Invalid base URL: ${url2}. Please provide a valid base URL.`, { cause: error63 });
   }
 }
-function withPath2(url2, path68 = "/api/auth") {
+function withPath2(url2, path71 = "/api/auth") {
   assertHasProtocol(url2);
   if (checkHasPath(url2)) return url2;
   const trimmedUrl = trimTrailingSlashes(url2);
-  if (!path68 || path68 === "/") return trimmedUrl;
-  path68 = path68.startsWith("/") ? path68 : `/${path68}`;
-  return `${trimmedUrl}${path68}`;
+  if (!path71 || path71 === "/") return trimmedUrl;
+  path71 = path71.startsWith("/") ? path71 : `/${path71}`;
+  return `${trimmedUrl}${path71}`;
 }
 function validateProxyHeader(header, type2) {
   if (!header || header.trim() === "") return false;
@@ -154840,26 +155502,26 @@ function validateProxyHeader(header, type2) {
   }
   return false;
 }
-function getBaseURL(url2, path68, request, loadEnv, trustedProxyHeaders) {
-  if (url2) return withPath2(url2, path68);
+function getBaseURL(url2, path71, request, loadEnv, trustedProxyHeaders) {
+  if (url2) return withPath2(url2, path71);
   if (loadEnv !== false) {
     const fromEnv = env5.BETTER_AUTH_URL || env5.NEXT_PUBLIC_BETTER_AUTH_URL || env5.PUBLIC_BETTER_AUTH_URL || env5.NUXT_PUBLIC_BETTER_AUTH_URL || env5.NUXT_PUBLIC_AUTH_URL || (env5.BASE_URL !== "/" ? env5.BASE_URL : void 0);
-    if (fromEnv) return withPath2(fromEnv, path68);
+    if (fromEnv) return withPath2(fromEnv, path71);
   }
   const fromRequest = request?.headers.get("x-forwarded-host");
   const fromRequestProto = request?.headers.get("x-forwarded-proto");
   if (fromRequest && fromRequestProto && trustedProxyHeaders) {
     if (validateProxyHeader(fromRequestProto, "proto") && validateProxyHeader(fromRequest, "host")) try {
-      return withPath2(`${fromRequestProto}://${fromRequest}`, path68);
+      return withPath2(`${fromRequestProto}://${fromRequest}`, path71);
     } catch (_error) {
     }
   }
   if (request) {
     const url3 = getOrigin(request.url);
     if (!url3) throw new BetterAuthError("Could not get origin from request. Please provide a valid base URL.");
-    return withPath2(url3, path68);
+    return withPath2(url3, path71);
   }
-  if (typeof window !== "undefined" && window.location) return withPath2(window.location.origin, path68);
+  if (typeof window !== "undefined" && window.location) return withPath2(window.location.origin, path71);
 }
 function getOrigin(url2) {
   try {
@@ -155450,9 +156112,9 @@ function parseCookieCachePayload(value) {
   if (parsed === null) return null;
   const result2 = cookieCachePayloadSchema.safeParse(parsed);
   if (result2.success) return result2.data;
-  logger2.warn("Cookie cache payload failed schema validation", { issues: result2.error.issues.map(({ code, path: path68 }) => ({
+  logger2.warn("Cookie cache payload failed schema validation", { issues: result2.error.issues.map(({ code, path: path71 }) => ({
     code,
-    path: path68
+    path: path71
   })) });
   return null;
 }
@@ -156225,10 +156887,10 @@ var init_trusted_origins2 = __esm({
     CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f-\u009f]/;
     RELATIVE_URL_PARSER_ORIGIN = "https://better-auth.invalid";
     ENCODED_PATH_SEPARATOR_PATTERN = /%2[fF]|%5[cC]/;
-    normalizePath3 = (path68) => {
-      let decoded = path68;
+    normalizePath3 = (path71) => {
+      let decoded = path71;
       try {
-        decoded = decodeURIComponent(path68);
+        decoded = decodeURIComponent(path71);
       } catch {
       }
       const segments = [];
@@ -156255,18 +156917,18 @@ var init_trusted_origins2 = __esm({
         }
       }
       const pathEnd = rest.search(/[?#]/);
-      const path68 = normalizePath3(pathEnd === -1 ? rest : rest.slice(0, pathEnd));
+      const path71 = normalizePath3(pathEnd === -1 ? rest : rest.slice(0, pathEnd));
       return {
         scheme,
         authority: authority.toLowerCase(),
-        path: path68
+        path: path71
       };
     };
     isSafeRelativeURL = (value) => {
       if (!value.startsWith("/") || value.startsWith("//") || value.includes("\\") || CONTROL_CHARACTER_PATTERN.test(value)) return false;
       const pathEnd = value.search(/[?#]/);
-      const path68 = pathEnd === -1 ? value : value.slice(0, pathEnd);
-      if (ENCODED_PATH_SEPARATOR_PATTERN.test(path68)) return false;
+      const path71 = pathEnd === -1 ? value : value.slice(0, pathEnd);
+      if (ENCODED_PATH_SEPARATOR_PATTERN.test(path71)) return false;
       try {
         return new URL(value, RELATIVE_URL_PARSER_ORIGIN).origin === RELATIVE_URL_PARSER_ORIGIN;
       } catch {
@@ -156647,7 +157309,7 @@ function getRateLimitStorage(ctx, rateLimitSettings) {
 }
 async function resolveRateLimitConfig(req, ctx) {
   const basePath = new URL(ctx.baseURL).pathname;
-  const path68 = normalizePathname(req.url, basePath);
+  const path71 = normalizePathname(req.url, basePath);
   let currentWindow = ctx.rateLimit.window;
   let currentMax = ctx.rateLimit.max;
   const ip = getIP(req, ctx.options);
@@ -156656,14 +157318,14 @@ async function resolveRateLimitConfig(req, ctx) {
     ctx.logger.warn("Rate limiting could not determine a client IP and is falling back to a single shared per-path bucket. Ensure your runtime forwards a trusted client IP header, then set `advanced.ipAddress.ipAddressHeaders` or `advanced.ipAddress.trustedProxies` so the address can be resolved.");
     ipWarningLogged = true;
   }
-  const key = createRateLimitKey(ip ?? NO_TRUSTED_IP_KEY, path68);
-  const specialRule = getDefaultSpecialRules().find((rule) => rule.pathMatcher(path68));
+  const key = createRateLimitKey(ip ?? NO_TRUSTED_IP_KEY, path71);
+  const specialRule = getDefaultSpecialRules().find((rule) => rule.pathMatcher(path71));
   if (specialRule) {
     currentWindow = specialRule.window;
     currentMax = specialRule.max;
   }
   for (const plugin of ctx.options.plugins || []) if (plugin.rateLimit) {
-    const matchedRule = plugin.rateLimit.find((rule) => rule.pathMatcher(path68));
+    const matchedRule = plugin.rateLimit.find((rule) => rule.pathMatcher(path71));
     if (matchedRule) {
       currentWindow = matchedRule.window;
       currentMax = matchedRule.max;
@@ -156672,8 +157334,8 @@ async function resolveRateLimitConfig(req, ctx) {
   }
   if (ctx.rateLimit.customRules) {
     const _path = Object.keys(ctx.rateLimit.customRules).find((p) => {
-      if (p.includes("*")) return wildcardMatch(p)(path68);
-      return p === path68;
+      if (p.includes("*")) return wildcardMatch(p)(path71);
+      return p === path71;
     });
     if (_path) {
       const customRule = ctx.rateLimit.customRules[_path];
@@ -156709,14 +157371,14 @@ async function onRequestRateLimit(req, ctx) {
 }
 function getDefaultSpecialRules() {
   return [{
-    pathMatcher(path68) {
-      return path68.startsWith("/sign-in") || path68.startsWith("/sign-up") || path68.startsWith("/change-password") || path68.startsWith("/change-email");
+    pathMatcher(path71) {
+      return path71.startsWith("/sign-in") || path71.startsWith("/sign-up") || path71.startsWith("/change-password") || path71.startsWith("/change-email");
     },
     window: 10,
     max: 3
   }, {
-    pathMatcher(path68) {
-      return path68 === "/request-password-reset" || path68 === "/send-verification-email" || path68.startsWith("/forget-password") || path68 === "/email-otp/send-verification-otp" || path68 === "/email-otp/request-password-reset";
+    pathMatcher(path71) {
+      return path71 === "/request-password-reset" || path71 === "/send-verification-email" || path71.startsWith("/forget-password") || path71 === "/email-otp/send-verification-otp" || path71 === "/email-otp/request-password-reset";
     },
     window: 60,
     max: 3
@@ -162422,15 +163084,15 @@ function checkEndpointConflicts(options, logger3) {
   options.plugins?.forEach((plugin) => {
     if (plugin.endpoints) {
       for (const [key, endpoint] of Object.entries(plugin.endpoints)) if (endpoint && "path" in endpoint && typeof endpoint.path === "string") {
-        const path68 = endpoint.path;
+        const path71 = endpoint.path;
         let methods2 = [];
         if (endpoint.options && "method" in endpoint.options) {
           if (Array.isArray(endpoint.options.method)) methods2 = endpoint.options.method;
           else if (typeof endpoint.options.method === "string") methods2 = [endpoint.options.method];
         }
         if (methods2.length === 0) methods2 = ["*"];
-        if (!endpointRegistry.has(path68)) endpointRegistry.set(path68, []);
-        endpointRegistry.get(path68).push({
+        if (!endpointRegistry.has(path71)) endpointRegistry.set(path71, []);
+        endpointRegistry.get(path71).push({
           pluginId: plugin.id,
           endpointKey: key,
           methods: methods2
@@ -162439,7 +163101,7 @@ function checkEndpointConflicts(options, logger3) {
     }
   });
   const conflicts = [];
-  for (const [path68, entries] of endpointRegistry.entries()) if (entries.length > 1) {
+  for (const [path71, entries] of endpointRegistry.entries()) if (entries.length > 1) {
     const methodMap = /* @__PURE__ */ new Map();
     let hasConflict = false;
     for (const entry of entries) for (const method of entry.methods) {
@@ -162454,7 +163116,7 @@ function checkEndpointConflicts(options, logger3) {
       const conflictingMethods = [];
       for (const [method, plugins] of methodMap.entries()) if (plugins.length > 1 || method === "*" && entries.length > 1 || method !== "*" && methodMap.has("*")) conflictingMethods.push(method);
       conflicts.push({
-        path: path68,
+        path: path71,
         plugins: uniquePlugins,
         conflictingMethods
       });
@@ -172043,12 +172705,12 @@ __export(ended_standing_grants_exports, {
   recordEndedStandingGrants: () => recordEndedStandingGrants
 });
 import fs32 from "node:fs/promises";
-import { readFileSync as readFileSync22, writeFileSync as writeFileSync4, renameSync as renameSync4 } from "node:fs";
-import path59 from "node:path";
+import { readFileSync as readFileSync24, writeFileSync as writeFileSync4, renameSync as renameSync4 } from "node:fs";
+import path62 from "node:path";
 function readStandingGrantLicence(dorkHome) {
   let config3;
   try {
-    config3 = JSON.parse(readFileSync22(path59.join(dorkHome, "config.json"), "utf-8"));
+    config3 = JSON.parse(readFileSync24(path62.join(dorkHome, "config.json"), "utf-8"));
   } catch {
     return NO_LICENCE;
   }
@@ -172091,7 +172753,7 @@ function captureLiveStandingGrants(db2, dorkHome, logger3, licence, now3 = /* @_
       capabilityId: row2.capability_id,
       expiresAt: row2.expires_at
     }));
-    const file2 = path59.join(dorkHome, ENDED_STANDING_GRANTS_FILE);
+    const file2 = path62.join(dorkHome, ENDED_STANDING_GRANTS_FILE);
     const existing = readCaptured(file2);
     const byId = new Map([...existing, ...grants].map((grant) => [grant.id, grant]));
     const tmp = `${file2}.tmp`;
@@ -172108,7 +172770,7 @@ function captureLiveStandingGrants(db2, dorkHome, logger3, licence, now3 = /* @_
 function readCaptured(file2) {
   let raw;
   try {
-    raw = readFileSync22(file2, "utf-8");
+    raw = readFileSync24(file2, "utf-8");
   } catch {
     return [];
   }
@@ -172123,7 +172785,7 @@ function readCaptured(file2) {
   }
 }
 async function recordEndedStandingGrants(deps) {
-  const file2 = path59.join(deps.dorkHome, ENDED_STANDING_GRANTS_FILE);
+  const file2 = path62.join(deps.dorkHome, ENDED_STANDING_GRANTS_FILE);
   const grants = readCaptured(file2);
   if (grants.length === 0) {
     await fs32.rm(file2, { force: true });
@@ -172132,7 +172794,7 @@ async function recordEndedStandingGrants(deps) {
   const agents2 = new Map(deps.agents().map((agent) => [agent.projectPath, agent]));
   for (const grant of grants) {
     const agent = agents2.get(grant.agentPath);
-    const name2 = agent ? agent.displayName || agent.name : path59.basename(grant.agentPath);
+    const name2 = agent ? agent.displayName || agent.name : path62.basename(grant.agentPath);
     const title = deps.actionTitle(grant.capabilityId);
     await deps.activity.emit({
       actorType: UPGRADE_WRITER.actorType,
@@ -172175,12 +172837,12 @@ var init_ended_standing_grants = __esm({
 });
 
 // src/commands/auth-runtime.ts
-import path60 from "node:path";
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync23 } from "node:fs";
+import path63 from "node:path";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync25 } from "node:fs";
 import { input as input2, password as passwordPrompt } from "@inquirer/prompts";
 async function buildAuthRuntime(dorkHome) {
   mkdirSync8(dorkHome, { recursive: true });
-  const db2 = createDb(path60.join(dorkHome, "dork.db"));
+  const db2 = createDb(path63.join(dorkHome, "dork.db"));
   const { captureLiveStandingGrants: captureLiveStandingGrants2, readStandingGrantLicence: readStandingGrantLicence2 } = await Promise.resolve().then(() => (init_ended_standing_grants(), ended_standing_grants_exports));
   captureLiveStandingGrants2(db2, dorkHome, console, readStandingGrantLicence2(dorkHome));
   runMigrations(db2);
@@ -172214,7 +172876,7 @@ function resolveCredentialPrompt() {
     if (!stdinPrompt) {
       let raw = "";
       try {
-        raw = readFileSync23(0, "utf8");
+        raw = readFileSync25(0, "utf8");
       } catch {
       }
       stdinPrompt = createStdinPrompt(raw);
@@ -172556,6 +173218,7 @@ var init_connection_copy = __esm({
 var CONNECTOR_OPERATION_SELECTION_LIMIT, CONNECTOR_AUTHENTICATION_FLOW_TTL_MS, CONNECTOR_EVENT_REVIEW_SCOPE_LIMIT, ConnectorJsonValueSchema, ConnectorJsonObjectSchema, ConnectorProviderInstanceIdSchema, ConnectionIdSchema, ConnectorExternalAccountRefSchema, ConnectorProviderModeSchema, ConnectorProviderHealthSchema, ConnectorGrantReconciliationStatusSchema, ConnectorOperationClassificationSchema, ConnectorAccessLevelSchema, ConnectorRetryPolicySchema, ConnectorOperationRevisionSchema, ConnectorOperationPageSchema, ConnectorCapabilityAvailabilitySchema, ConnectorUnsupportedResultSchema, ConnectorProviderCapabilitySetSchema, ConnectorToolkitVersionResultSchema, ConnectorProviderExecuteResultSchema, ConnectorAuthenticationFlowSchema, ConnectorExecutionTargetSchema, ConnectorProgramExecutionRequestSchema, ConnectorExecutionPublicResultSchema, ConnectorExecutionResponseSchema, ConnectionReadinessStateSchema, ConnectionReadinessReasonSchema, ConnectionFixActionSchema, ConnectionFixSchema, ConnectionReadinessSchema, AccessibleConnectorConnectionSchema, AccessibleConnectorOperationSchema, ConnectorAccessibleConnectionsResponseSchema, ConnectorAccessibleOperationsResponseSchema, ConnectorUsageItemSchema, ConnectorUsagePageSchema, ConnectorReconciliationPreviewRequestSchema, ConnectorReconciliationGrantSelectionSchema, ConnectorReconciliationEveryAgentSelectionSchema, ConnectorReconciliationEveryAgentStateSchema, ConnectorEveryAgentRevokeResponseSchema, ConnectorReconciliationAgentSchema, ConnectorReconciliationCandidateSchema, ConnectorReconciliationPreviewSchema, ConnectorReconciliationApplyRequestSchema, ConnectorReconciliationApplyResponseSchema, ReviewActionBaseSchema, ConnectionTargetSchema, ConnectorRequestAccessSchema, ConnectorReviewActionSchema, ConnectorAgentConnectionRequestInputSchema, ConnectorAgentRequestBaseSchema, ConnectorRequestNotGrantedSchema, ConnectorAgentRequestStatusSchema, ConnectorAgentRequestItemSchema, ConnectorAgentRequestListResponseSchema, ConnectorManagementConnectActionSchema, ConnectorManagementAppliedActionSchema, ConnectorManagementReviewActionSchema, ConnectorManagementReviewCreateRequestSchema, ConnectorManagementReviewOutcomeSchema, ConnectorManagementReviewOperationContextSchema, ConnectorManagementReviewConnectionContextSchema, ConnectorManagementReviewAgentContextSchema, ConnectorManagementReviewContextSchema, ManagementReviewItemBaseShape, ConnectorPendingManagementReviewItemSchema, ConnectorResolvingManagementReviewItemSchema, ConnectorExpiredManagementReviewItemSchema, ConnectorDeniedManagementReviewItemSchema, ConnectorApprovedAppliedManagementReviewItemSchema, ConnectorApprovedConnectManagementReviewItemSchema, ConnectorApprovedUnknownManagementReviewItemSchema, ConnectorManagementReviewItemSchema, ProgramReviewStatusBaseShape, ConnectorProgramReviewStatusSchema, ConnectorManagementReviewDecisionSchema, ConnectorManagementReviewDecisionResultSchema;
 var init_connector_schemas = __esm({
   "../connector-providers/src/connector-schemas.ts"() {
+    "use strict";
     init_zod();
     init_connection_copy();
     CONNECTOR_OPERATION_SELECTION_LIMIT = 1e5;
@@ -174230,9 +174893,9 @@ var init_cloud_link_client = __esm({
 // ../../apps/server/src/lib/instance-id.ts
 import { randomUUID as randomUUID8 } from "node:crypto";
 import fs33 from "node:fs/promises";
-import path61 from "node:path";
+import path64 from "node:path";
 async function getOrCreateInstanceId(dorkHome) {
-  const filePath = path61.join(dorkHome, INSTANCE_ID_FILENAME2);
+  const filePath = path64.join(dorkHome, INSTANCE_ID_FILENAME2);
   try {
     const existing = await fs33.readFile(filePath, "utf8");
     const trimmed = existing.trim();
@@ -175112,14 +175775,14 @@ function parseAgentCreateArgs(rawArgs) {
   }
   const { values: values2 } = parsed;
   const name2 = typeof values2.name === "string" ? values2.name : void 0;
-  const path68 = typeof values2.path === "string" ? values2.path : void 0;
+  const path71 = typeof values2.path === "string" ? values2.path : void 0;
   if (!name2) throw new Error(`Missing required --name.
 ${usage}`);
-  if (!path68) throw new Error(`Missing required --path.
+  if (!path71) throw new Error(`Missing required --path.
 ${usage}`);
   return {
     name: name2,
-    path: path68,
+    path: path71,
     template: typeof values2.template === "string" ? values2.template : void 0,
     displayName: typeof values2["display-name"] === "string" ? values2["display-name"] : void 0,
     description: typeof values2.description === "string" ? values2.description : void 0,
@@ -175169,12 +175832,12 @@ function parseAgentUpdateArgs(rawArgs) {
     rethrowUnknownOption(err, "agent update", usage);
   }
   const { values: values2 } = parsed;
-  const path68 = typeof values2.path === "string" ? values2.path : void 0;
-  if (!path68) throw new Error(`Missing required --path.
+  const path71 = typeof values2.path === "string" ? values2.path : void 0;
+  if (!path71) throw new Error(`Missing required --path.
 ${usage}`);
   const clearable = (v2) => typeof v2 === "string" ? v2.length === 0 ? null : v2 : void 0;
   return {
-    path: path68,
+    path: path71,
     displayName: typeof values2["display-name"] === "string" ? values2["display-name"] : void 0,
     description: typeof values2.description === "string" ? values2.description : void 0,
     color: clearable(values2.color),
@@ -175749,7 +176412,7 @@ __export(room_exports, {
 });
 import { parseArgs as parseArgs30 } from "node:util";
 import fs34 from "node:fs";
-import path62 from "node:path";
+import path65 from "node:path";
 import { Readable } from "node:stream";
 import { finished as finished2, pipeline } from "node:stream/promises";
 function parseRoomExportArgs(rawArgs) {
@@ -175801,7 +176464,7 @@ async function resolveRoomId(reference) {
 }
 function suggestedFilename(disposition, roomId) {
   const match = disposition?.match(/filename="([^"]+)"/);
-  const name2 = match ? path62.basename(match[1]) : "";
+  const name2 = match ? path65.basename(match[1]) : "";
   return name2 && name2 !== "." && name2 !== ".." ? name2 : `room-${roomId}.jsonl`;
 }
 async function streamExport(body, destination, closeDestination) {
@@ -175835,8 +176498,8 @@ async function streamExport(body, destination, closeDestination) {
   return { entryCount: null, reason };
 }
 async function writeExportFile(body, target) {
-  const staging = fs34.mkdtempSync(path62.join(path62.dirname(target), ".dorkos-export-"));
-  const scratch = path62.join(staging, path62.basename(target));
+  const staging = fs34.mkdtempSync(path65.join(path65.dirname(target), ".dorkos-export-"));
+  const scratch = path65.join(staging, path65.basename(target));
   let file2;
   try {
     file2 = fs34.createWriteStream(scratch);
@@ -175857,7 +176520,7 @@ async function runRoomExport(args) {
     const toStdout = args.out === STDOUT_TARGET;
     let target = null;
     if (!toStdout) {
-      target = path62.resolve(
+      target = path65.resolve(
         args.out ?? suggestedFilename(res.headers.get("content-disposition"), roomId)
       );
       if (!args.force && fs34.existsSync(target)) {
@@ -177181,7 +177844,7 @@ __export(version_exports, {
   runVersionDispatcher: () => runVersionDispatcher
 });
 import fs37 from "node:fs";
-import path63 from "node:path";
+import path66 from "node:path";
 import { parseArgs as parseArgs35 } from "node:util";
 function parseVersionArgs(rawArgs) {
   const usage = "Usage: dorkos version [--check] [--json]";
@@ -177203,7 +177866,7 @@ function parseVersionArgs(rawArgs) {
 }
 function readCachedLatest(dorkHome) {
   try {
-    const raw = fs37.readFileSync(path63.join(dorkHome, "cache", "update-check.json"), "utf-8");
+    const raw = fs37.readFileSync(path66.join(dorkHome, "cache", "update-check.json"), "utf-8");
     const cache3 = JSON.parse(raw);
     return typeof cache3.latestVersion === "string" ? cache3.latestVersion : null;
   } catch {
@@ -177298,11 +177961,11 @@ __export(cleanup_command_exports, {
 });
 import { confirm as confirm2 } from "@inquirer/prompts";
 import fs38 from "fs";
-import path64 from "path";
+import path67 from "path";
 import http from "node:http";
 function readPort(dorkHome) {
   try {
-    const raw = fs38.readFileSync(path64.join(dorkHome, "config.json"), "utf-8");
+    const raw = fs38.readFileSync(path67.join(dorkHome, "config.json"), "utf-8");
     const config3 = JSON.parse(raw);
     const port2 = config3?.server?.port;
     if (typeof port2 === "number" && port2 > 0) return port2;
@@ -177329,7 +177992,7 @@ async function findProjectPaths(dbPath) {
     const db2 = new Database3(dbPath, { readonly: true });
     try {
       const rows = db2.prepare("SELECT DISTINCT project_path FROM agents").all();
-      return rows.map((r3) => r3.project_path).filter((p) => fs38.existsSync(path64.join(p, ".dork")));
+      return rows.map((r3) => r3.project_path).filter((p) => fs38.existsSync(path67.join(p, ".dork")));
     } finally {
       db2.close();
     }
@@ -177363,7 +178026,7 @@ DorkOS server is running on port ${port2}. Stop it before running cleanup.
     console.log(`  ${entry.padEnd(20)} (${description})`);
   }
   console.log("");
-  const dbPath = path64.join(dorkHome, "dork.db");
+  const dbPath = path67.join(dorkHome, "dork.db");
   const projectPaths = fs38.existsSync(dbPath) ? await findProjectPaths(dbPath) : [];
   const removeGlobal = await confirm2({
     message: `Remove global DorkOS data (${dorkHome})?`,
@@ -177389,7 +178052,7 @@ DorkOS server is running on port ${port2}. Stop it before running cleanup.
     });
     if (removeProjects) {
       for (const p of projectPaths) {
-        const dorkDir = path64.join(p, ".dork");
+        const dorkDir = path67.join(p, ".dork");
         fs38.rmSync(dorkDir, { recursive: true, force: true });
         console.log(`  Removed ${dorkDir}`);
       }
@@ -177425,9 +178088,9 @@ __export(config_write_exports2, {
   createServerConfigWriter: () => createServerConfigWriter,
   writeOrExplain: () => writeOrExplain
 });
-import path65 from "path";
+import path68 from "path";
 async function openAuditLog(dorkHome, level) {
-  const logDir2 = path65.join(dorkHome, "logs");
+  const logDir2 = path68.join(dorkHome, "logs");
   try {
     const { initLogger: initLogger2 } = await Promise.resolve().then(() => (init_logger(), logger_exports));
     initLogger2({ logDir: logDir2, level });
@@ -177717,10 +178380,10 @@ __export(init_wizard_exports, {
 });
 import { input as input3, select, confirm as confirm3 } from "@inquirer/prompts";
 import fs39 from "fs";
-import path66 from "path";
+import path69 from "path";
 async function runInitWizard(options) {
   const { yes, dorkHome, store } = options;
-  const configPath = path66.join(dorkHome, "config.json");
+  const configPath = path69.join(dorkHome, "config.json");
   if (yes) {
     store.reset();
     console.log(`Config initialized with defaults at ${configPath}`);
@@ -177770,7 +178433,7 @@ async function runInitWizard(options) {
   store.setDot("ui.theme", theme);
   store.setDot("tunnel.enabled", tunnelEnabled);
   if (cwd && cwd.trim() !== "") {
-    store.setDot("server.cwd", path66.resolve(cwd));
+    store.setDot("server.cwd", path69.resolve(cwd));
   }
   console.log(`
 Config saved to ${configPath}`);
@@ -177787,7 +178450,7 @@ init_check_claude();
 init_check_core_extensions();
 init_check_extension_compilation();
 import os11, { networkInterfaces } from "os";
-import path67 from "path";
+import path70 from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 import fs40 from "fs";
 
@@ -177861,9 +178524,9 @@ async function alreadyShown() {
   }
 }
 async function markShown() {
-  const path68 = getMarkerPath();
-  await mkdir2(dirname2(path68), { recursive: true });
-  await writeFile2(path68, JSON.stringify({ shownAt: Date.now() }));
+  const path71 = getMarkerPath();
+  await mkdir2(dirname2(path71), { recursive: true });
+  await writeFile2(path71, JSON.stringify({ shownAt: Date.now() }));
 }
 async function maybeShowNewsletterTip() {
   try {
@@ -178564,7 +179227,7 @@ if (nodeVersionIssue) {
   console.error(formatDiagnostic(nodeVersionIssue));
   process.exit(1);
 }
-var __dirname2 = path67.dirname(fileURLToPath7(import.meta.url));
+var __dirname2 = path70.dirname(fileURLToPath7(import.meta.url));
 var knownCommands = /* @__PURE__ */ new Set([
   "package",
   "harness",
@@ -178718,7 +179381,7 @@ if (process.argv[2] === "community") {
     );
     Object.assign(childEnv, credentialEnv.pickCommunityCredentialEnv(rawProcessEnv));
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.126.0",
+      cliVersion: "0.126.2",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -178736,7 +179399,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.126.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.126.2" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -178746,7 +179409,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.126.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.126.2", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -178845,7 +179508,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.126.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.126.2", DORK_HOME, subArgs));
 }
 var { values, positionals } = parseCliArgs();
 if (positionals[0] && !knownCommands.has(positionals[0])) {
@@ -178939,14 +179602,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.126.0");
+  console.log("0.126.2");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.126.0"}`);
+  console.log(`dorkos ${"0.126.2"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -179023,7 +179686,7 @@ if (cliPort) {
   process.env.DORKOS_PORT = configPort ? String(configPort) : String(DEFAULT_PORT);
 }
 process.env.NODE_ENV = "production";
-process.env.CLIENT_DIST_PATH = path67.join(__dirname2, "../client");
+process.env.CLIENT_DIST_PATH = path70.join(__dirname2, "../client");
 if (values.tunnel) process.env.TUNNEL_ENABLED = "true";
 var tunnelAuthtoken = cfgMgr.getDot("tunnel.authtoken");
 if (tunnelAuthtoken && !process.env.NGROK_AUTHTOKEN) {
@@ -179056,18 +179719,18 @@ if (values.open !== void 0) {
 }
 var cliDir = values.dir;
 if (cliDir) {
-  process.env.DORKOS_DEFAULT_CWD = path67.resolve(cliDir);
+  process.env.DORKOS_DEFAULT_CWD = path70.resolve(cliDir);
 } else if (!process.env.DORKOS_DEFAULT_CWD) {
   const configCwd = cfgMgr.getDot("server.cwd");
-  process.env.DORKOS_DEFAULT_CWD = configCwd ? path67.resolve(configCwd) : process.cwd();
+  process.env.DORKOS_DEFAULT_CWD = configCwd ? path70.resolve(configCwd) : process.cwd();
 }
 var cliBoundary = values.boundary;
 if (cliBoundary) {
-  process.env.DORKOS_BOUNDARY = path67.resolve(cliBoundary);
+  process.env.DORKOS_BOUNDARY = path70.resolve(cliBoundary);
 } else if (!process.env.DORKOS_BOUNDARY) {
   const configBoundary = cfgMgr.getDot("server.boundary");
   if (configBoundary) {
-    process.env.DORKOS_BOUNDARY = path67.resolve(configBoundary);
+    process.env.DORKOS_BOUNDARY = path70.resolve(configBoundary);
   }
 }
 var boundaryVal = process.env.DORKOS_BOUNDARY;
@@ -179079,7 +179742,7 @@ if (boundaryVal) {
 }
 var effectiveBoundary = process.env.DORKOS_BOUNDARY || home;
 var resolvedDir = process.env.DORKOS_DEFAULT_CWD;
-if (resolvedDir !== effectiveBoundary && !resolvedDir.startsWith(effectiveBoundary + path67.sep)) {
+if (resolvedDir !== effectiveBoundary && !resolvedDir.startsWith(effectiveBoundary + path70.sep)) {
   console.warn(
     `[Warning] Default CWD "${resolvedDir}" is outside boundary "${effectiveBoundary}". Falling back to boundary root.`
   );
@@ -179087,14 +179750,14 @@ if (resolvedDir !== effectiveBoundary && !resolvedDir.startsWith(effectiveBounda
 }
 var logLevelName = values["log-level"] || env4.LOG_LEVEL || cfgMgr.getDot("logging.level") || (env4.NODE_ENV === "production" ? "info" : "debug");
 process.env.DORKOS_LOG_LEVEL = String(LOG_LEVEL_MAP[logLevelName] ?? 3);
-var envPath = path67.join(process.env.DORKOS_DEFAULT_CWD, ".env");
+var envPath = path70.join(process.env.DORKOS_DEFAULT_CWD, ".env");
 if (fs40.existsSync(envPath)) {
   const dotenv = await import("dotenv");
   dotenv.config({ path: envPath, override: false });
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath7(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.126.0";
+process.env.DORKOS_CLI_VERSION = "0.126.2";
 var server;
 try {
   server = await import("../server/index.js");
@@ -179119,7 +179782,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.126.0"}`);
+console.log(`  DorkOS v${"0.126.2"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -179145,9 +179808,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.126.0").then((latestVersion) => {
+checkForUpdate("0.126.2").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.126.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.126.2"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;