dorkos 0.126.2 → 0.126.4

package/dist/bin/cli.js

@@ -26826,6 +26826,15 @@ var init_env = __esm({
       // so the admin restart/reset endpoints refuse (409) rather than exit into a
       // process nothing will bring back. See routes/admin.ts.
       DORKOS_MANAGED_BY: external_exports.enum(["desktop"]).optional(),
+      // Which kind of DorkOS this is, set by whatever launched the server: `desktop`
+      // (the Electron shell), `npm` or `homebrew` (the CLI, from its own install
+      // path), `docker` (the image), `dev` (a repo checkout). Free text on purpose:
+      // a value this build does not know reads as `unknown` rather than refusing to
+      // boot. See lib/distribution/, which is the only reader.
+      DORKOS_DISTRIBUTION: external_exports.string().optional(),
+      // The desktop app's own version, set by the Electron shell beside the above,
+      // so a server bundle that drifted from the app it ships in says so.
+      DORKOS_DESKTOP_VERSION: external_exports.string().optional(),
       // Single-instance lock escape hatch (DOR-532) — when 'true', skip the
       // per-data-directory lock that stops two servers from sharing one `~/.dork`.
       // The lock is already inert under NODE_ENV=test.
@@ -27003,7 +27012,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.126.2";
+  if (true) return "0.126.4";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -49044,8 +49053,8 @@ function requireDumper() {
   function blockHeader(string4, indentPerLevel) {
     const indentIndicator = needIndentIndicator(string4) ? String(indentPerLevel) : "";
     const clip3 = string4[string4.length - 1] === "\n";
-    const keep = clip3 && (string4[string4.length - 2] === "\n" || string4 === "\n");
-    const chomp = keep ? "+" : clip3 ? "" : "-";
+    const keep2 = clip3 && (string4[string4.length - 2] === "\n" || string4 === "\n");
+    const chomp = keep2 ? "+" : clip3 ? "" : "-";
     return indentIndicator + chomp + "\n";
   }
   function dropEndingNewline(string4) {
@@ -52368,12 +52377,10 @@ function mergeTeammateOrigins(a2, b2) {
   const added = b2.filter((origin) => !seen.has(key(origin)));
   return added.length === 0 ? a2 : [...a2, ...added];
 }
-function ceilingCarriesOutsider(ceiling) {
-  if (!Array.isArray(ceiling)) {
-    return ceiling === "runtime-default" || ceiling.outsider === true;
-  }
+function ceilingHoldsForOutsider(ceiling) {
+  if (!Array.isArray(ceiling)) return ceiling === "runtime-default";
   const bounds = ceiling;
-  return bounds.length === 0 || bounds.some(ceilingCarriesOutsider);
+  return bounds.length === 0 || bounds.some(ceilingHoldsForOutsider);
 }
 function stricterPower(a2, b2) {
   const fits = (inner, outer) => isNoLooserThan(outer, inner) && (!inner.auto || outer.auto === true || outer.asks === "never");
@@ -52399,7 +52406,7 @@ function clampModeToCeiling(declared, modeId, ceiling) {
   )[0];
   return strictest?.id ?? modeId;
 }
-var PERMISSION_STOPS, ASKS_RANK, REACH_RANK, AUTO_MODE_ID, READ_ONLY_LEVEL;
+var PERMISSION_STOPS, ASKS_RANK, REACH_RANK, AUTO_MODE_ID, READ_ONLY_LEVEL, CARRIED_OUTSIDER_LEVEL;
 var init_permission_semantics = __esm({
   "../shared/src/permission-semantics.ts"() {
     "use strict";
@@ -52417,6 +52424,11 @@ var init_permission_semantics = __esm({
     };
     AUTO_MODE_ID = "auto";
     READ_ONLY_LEVEL = { asks: "always", reach: "read" };
+    CARRIED_OUTSIDER_LEVEL = Object.freeze({
+      asks: "never",
+      reach: "everything",
+      outsider: true
+    });
   }
 });
 
@@ -113184,6 +113196,7 @@ function defuseSystemTags(text3, tagNames) {
 var IDENTITY_MAX_LENGTH, INVISIBLE_FORMAT, CONTROL_CHARS, PATTERN_CACHE;
 var init_untrusted_text = __esm({
   "../shared/src/untrusted-text.ts"() {
+    "use strict";
     IDENTITY_MAX_LENGTH = 80;
     INVISIBLE_FORMAT = /[\u00ad\u200b-\u200f\u202a-\u202e\u2060-\u2064\ufeff\ufff9-\ufffb]/g;
     CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g;
@@ -115467,76 +115480,22 @@ var init_event_fan_out = __esm({
       get listenerCount() {
         return this.listeners.size;
       }
-      /**
-       * Broadcast an event to every connected client, and to every in-process
-       * listener.
-       *
-       * Backpressure: a frame a client cannot take immediately still buffers in
-       * process memory, so a slow consumer cannot lose frames mid-stream — but one
-       * whose buffer grows past {@link SSE.MAX_BUFFERED_BYTES} is dropped instead of
-       * accumulating unbounded memory. The client reconnects and re-baselines, which
-       * is the honest recovery for a consumer that can't keep up with a fan-out that
-       * cannot await any single client.
-       *
-       * The frame is encoded ONCE per wire format and the same strings sent to
-       * every client — see {@link EncodedBroadcast}. That stays true of an
-       * addressed broadcast: the audience decides who a frame is written to, never
-       * how many times it is rendered.
-       *
-       * A client the audience skips is left exactly as it was — not measured for
-       * backpressure, not dropped, not removed from the set. It is simply not this
-       * frame's reader.
-       *
-       * @param eventName - The event name, e.g. `session_status`.
-       * @param data - The payload, serialized once per wire format.
-       * @param audience - Which connections this frame is for. Omitted means every
-       *   one of them, which is what all but one event on this bus mean — see
-       *   {@link BroadcastAudience}.
-       */
       broadcast(eventName, data, audience) {
         this.notifyListeners(eventName, data);
+        if (eventName.startsWith("room_") && !audience) return;
         this.writeToClients(() => encodeBroadcast(eventName, data), audience);
       }
-      /**
-       * Broadcast ONE event rendered two ways: in full to the connections entitled
-       * to its detail, and redacted to the rest.
-       *
-       * `session_status` needs this and an audience alone cannot give it.
-       * `SessionStatus.activity` carries the tool a session is on and the one
-       * argument of it a person would recognize — for a `blocked` session that is
-       * the very thing the Ask is asking about — while the same frame carries the
-       * lifecycle every reader legitimately needs. Withholding the whole frame
-       * would leave an unentitled reader's view of that session silently stuck on
-       * its previous lifecycle, which is a worse property than the leak it closes;
-       * sending it whole is the leak. So the detail is dropped and the lifecycle is
-       * kept (spec `ask-entitlement`, review finding 1).
-       *
-       * Every property {@link broadcast} holds is held here:
-       *
-       * - **In-process listeners are notified ONCE**, with the FULL payload. They
-       *   are the server itself, not callers; a listener that received the same
-       *   event twice — or received a redacted one — would be a new bug.
-       * - **Each rendering is encoded once**, whatever the split, and the redacted
-       *   one is not encoded at all when every connection is entitled.
-       * - **Backpressure is unchanged**: each client is measured on the one frame
-       *   it actually received.
-       *
-       * @param eventName - The event name.
-       * @param full - The payload for entitled connections.
-       * @param redacted - The payload for everybody else.
-       * @param entitled - Which connections may have the full one.
-       * @param audience - Which connections get either rendering; omitted means
-       *   every one of them.
-       */
-      broadcastRedacted(eventName, full, redacted, entitled, audience = () => true) {
+      broadcastRedacted(eventName, full, redacted, entitled, audience) {
         this.notifyListeners(eventName, full);
+        if (eventName.startsWith("room_") && !audience) return;
+        const receives = audience ?? (() => true);
         this.writeToClients(
           () => encodeBroadcast(eventName, full),
-          (principal) => audience(principal) && entitled(principal)
+          (principal) => receives(principal) && entitled(principal)
         );
         this.writeToClients(
           () => encodeBroadcast(eventName, redacted),
-          (principal) => audience(principal) && !entitled(principal)
+          (principal) => receives(principal) && !entitled(principal)
         );
       }
       /**
@@ -118765,6 +118724,15 @@ function withMarks(level, marks) {
   if (carriesAllMarks(own2, marks)) return level;
   return { ...level, ...mergeMarks(own2, marks) };
 }
+function withCarriedHold(runtimeType, opts, setToFull = false) {
+  const ceiling = opts?.permissionCeiling;
+  if (ceiling === void 0 || setToFull || GATES_CARRIED_SHELL.has(runtimeType)) return opts;
+  if (ceilingHoldsForOutsider(ceiling) || marksOfCeiling(ceiling).outsider !== true) return opts;
+  const bounds = Array.isArray(ceiling) ? [...ceiling] : [ceiling];
+  bounds.push("runtime-default");
+  const { continuationHold: _dropped, ...rest } = opts ?? {};
+  return { ...rest, permissionCeiling: bounds.length === 1 ? bounds[0] : bounds };
+}
 async function* refused(reason) {
   yield* [];
   throw new Error(reason);
@@ -118777,13 +118745,13 @@ function placeOf(runtime, sessionId, opts) {
   }
   return { cwd, forAgent: turnAgentOf(opts) };
 }
-function applyTurnMarks(runtime, marksOfSession, recordRefused) {
+function applyTurnMarks(runtime, marksOfSession, recordRefused, setToFull) {
   const places = /* @__PURE__ */ new Map();
   function markedTurn(target, sessionId, opts, start) {
     const marks = marksForTurn(opts);
     if (!hasMarks(marks)) return start(opts);
     if (marks.outsider === true) noteChatHeardOutsider(sessionId);
-    let sent = opts;
+    let sent = withCarriedHold(target.type, opts, setToFull?.(sessionId, opts) === true);
     if (marks.teammate !== void 0) {
       sent = teammateTurnOpts(opts);
       const refusal2 = teammateTurnRefusal(target.type, marks.teammate);
@@ -118823,7 +118791,7 @@ function applyTurnMarks(runtime, marksOfSession, recordRefused) {
     }
   });
 }
-var TURN_MARK_KINDS, NO_MARKS, PLACE_MEMORY, UNKNOWN_SOURCE, sameOrigin, RULES;
+var TURN_MARK_KINDS, NO_MARKS, PLACE_MEMORY, UNKNOWN_SOURCE, sameOrigin, RULES, GATES_CARRIED_SHELL;
 var init_turn_marks = __esm({
   "../../apps/server/src/services/core/turn-power/turn-marks.ts"() {
     "use strict";
@@ -118850,13 +118818,19 @@ var init_turn_marks = __esm({
         covers: (outer, inner) => inner === void 0 || outer !== void 0 && inner.every((origin) => outer.some((o3) => sameOrigin(o3, origin)))
       }
     };
+    GATES_CARRIED_SHELL = /* @__PURE__ */ new Set(["claude-code"]);
   }
 });
 
 // ../../apps/server/src/services/core/turn-power/continuation-hold.ts
-function noteTurnHold(sessionId, held2) {
-  if (!db) return;
+function noteTurnHold(sessionId, held2, carried = false) {
   const key = primaryOf(sessionId);
+  carriedOnly.delete(key);
+  if (held2 && carried) {
+    carriedOnly.add(key);
+    if (carriedOnly.size > WRITTEN_MAX) carriedOnly.delete(carriedOnly.values().next().value);
+  }
+  if (!db) return;
   if (written.get(key) === held2) return;
   try {
     db.insert(sessionMetadata).values({
@@ -118875,15 +118849,59 @@ function noteTurnHold(sessionId, held2) {
     });
   }
 }
-var db, written, WRITTEN_MAX;
+var db, written, WRITTEN_MAX, carriedOnly;
 var init_continuation_hold = __esm({
   "../../apps/server/src/services/core/turn-power/continuation-hold.ts"() {
     "use strict";
     init_src2();
+    init_permission_semantics();
     init_session_key_registry();
     init_logger();
     written = /* @__PURE__ */ new Map();
     WRITTEN_MAX = 1e4;
+    carriedOnly = /* @__PURE__ */ new Set();
+  }
+});
+
+// ../shared/src/session-link.ts
+var init_session_link = __esm({
+  "../shared/src/session-link.ts"() {
+  }
+});
+
+// ../../apps/server/src/services/core/turn-power/full-autonomy.ts
+function keep(set3, key, on) {
+  set3.delete(key);
+  if (!on) return;
+  set3.add(key);
+  if (set3.size > MEMORY) set3.delete(set3.values().next().value);
+}
+function isFullLevel(level) {
+  return level !== void 0 && level.asks === "never" && level.reach === "everything";
+}
+function ownLevelBounds(ceiling) {
+  if (ceiling === void 0) return void 0;
+  const bounds = Array.isArray(ceiling) ? ceiling : [ceiling];
+  const kept = bounds.filter((bound) => {
+    if (typeof bound !== "object" || bound === null) return false;
+    const level = bound;
+    return level.outsider !== true && level.teammate === void 0;
+  });
+  if (kept.length === 0) return void 0;
+  return kept.length === 1 ? kept[0] : kept;
+}
+function noteChosenTurn(sessionId, chosen, nobodyToAsk) {
+  keep(fullChats, sessionId, isFullLevel(chosen));
+  keep(unattendedChats, sessionId, nobodyToAsk);
+}
+var MEMORY, fullChats, unattendedChats;
+var init_full_autonomy = __esm({
+  "../../apps/server/src/services/core/turn-power/full-autonomy.ts"() {
+    "use strict";
+    init_session_link();
+    MEMORY = 1e4;
+    fullChats = /* @__PURE__ */ new Set();
+    unattendedChats = /* @__PURE__ */ new Set();
   }
 });
 
@@ -118902,6 +118920,46 @@ function lastTurnLevelOf(sessionId) {
 function levelForTurn(runtime, stored, opts) {
   return withMarks(powerForTurn(runtime, stored, opts), marksForTurn(opts));
 }
+function recordTurn(runtime, sessionId, stored, opts) {
+  const level = levelForTurn(runtime, stored, opts);
+  remember(turnLevels, sessionId, level);
+  noteChosenTurn(
+    sessionId,
+    chosenLevelOf(runtime, stored, opts),
+    opts?.unattended === true || opts?.unattendedApprovals === true
+  );
+  const ceiling = opts?.continuationHold === true ? void 0 : opts?.permissionCeiling;
+  if (ceiling !== void 0 && ceilingHoldsForOutsider(ceiling)) {
+    strangerHeld.add(sessionId);
+    const own2 = withoutStrangerHold(ceiling);
+    const { permissionCeiling: _held, ...rest } = opts ?? {};
+    const handOff = withMarks(
+      powerForTurn(runtime, stored, own2 === void 0 ? rest : { ...rest, permissionCeiling: own2 }),
+      marksOfLevel(level)
+    );
+    remember(handOffLevels, sessionId, handOff);
+  } else {
+    strangerHeld.delete(sessionId);
+    handOffLevels.delete(sessionId);
+  }
+  if (strangerHeld.size > TURN_LEVEL_MEMORY) {
+    strangerHeld.delete(strangerHeld.values().next().value);
+  }
+  return level;
+}
+function chosenLevelOf(runtime, stored, opts) {
+  const { permissionCeiling, ...unbounded } = opts ?? {};
+  const own2 = ownLevelBounds(permissionCeiling);
+  const kept = own2 === void 0 ? unbounded : { ...unbounded, permissionCeiling: own2 };
+  return powerForTurn(runtime, stored, kept);
+}
+function withoutStrangerHold(ceiling) {
+  if (!Array.isArray(ceiling)) return ceiling === "runtime-default" ? void 0 : ceiling;
+  const kept = ceiling.filter(
+    (bound) => bound !== "runtime-default"
+  );
+  return kept.length === 0 ? void 0 : kept.length === 1 ? kept[0] : kept;
+}
 function powerForTurn(runtime, stored, opts) {
   let declared;
   try {
@@ -118916,18 +118974,21 @@ function powerForTurn(runtime, stored, opts) {
   return opts?.permissionCeiling !== void 0 ? stricterLevel(base, resolveCeilingLevel(declared, opts.permissionCeiling)) : base;
 }
 function recordTurnLevels(runtime, storedModeOf) {
+  const storedOf2 = (sessionId) => {
+    try {
+      return storedModeOf(sessionId);
+    } catch {
+      return void 0;
+    }
+  };
   return applyTurnMarks(
     recordLevels(runtime, storedModeOf),
     (sessionId) => marksOfLevel(turnLevels.get(sessionId)),
     (sessionId, opts) => {
-      let stored;
-      try {
-        stored = storedModeOf(sessionId);
-      } catch {
-        stored = void 0;
-      }
-      remember(turnLevels, sessionId, levelForTurn(runtime, stored, opts));
-    }
+      recordTurn(runtime, sessionId, storedOf2(sessionId), opts);
+    },
+    // A chat set to Full is never held for a mark it carries (DOR-3394).
+    (sessionId, opts) => isFullLevel(chosenLevelOf(runtime, storedOf2(sessionId), opts))
   );
 }
 function recordLevels(runtime, storedModeOf) {
@@ -118942,9 +119003,13 @@ function recordLevels(runtime, storedModeOf) {
           } catch {
             stored = void 0;
           }
-          const level = levelForTurn(target, stored, opts);
-          remember(turnLevels, sessionId, level);
-          if (opts?.continuationHold !== true) noteTurnHold(sessionId, level.outsider === true);
+          const level = recordTurn(target, sessionId, stored, opts);
+          if (opts?.continuationHold !== true) {
+            const held2 = level.outsider === true;
+            const ceiling = opts?.permissionCeiling;
+            const carried = held2 && !(ceiling !== void 0 && ceilingHoldsForOutsider(ceiling));
+            noteTurnHold(sessionId, held2, carried);
+          }
           const serial = ++nextTurnSerial;
           for (const id of /* @__PURE__ */ new Set([sessionId, primaryOf(sessionId)])) {
             turnSerials.delete(id);
@@ -118961,7 +119026,7 @@ function recordLevels(runtime, storedModeOf) {
     }
   });
 }
-var TURN_LEVEL_MEMORY, AUTO_MODE_ID2, AUTO_FALLBACK_MODE_ID, turnLevels, turnSerials, nextTurnSerial;
+var TURN_LEVEL_MEMORY, AUTO_MODE_ID2, AUTO_FALLBACK_MODE_ID, turnLevels, handOffLevels, strangerHeld, turnSerials, nextTurnSerial;
 var init_turn_levels = __esm({
   "../../apps/server/src/services/core/turn-power/turn-levels.ts"() {
     "use strict";
@@ -118969,16 +119034,34 @@ var init_turn_levels = __esm({
     init_session_key_registry();
     init_outsider_turns();
     init_continuation_hold();
+    init_full_autonomy();
     init_permission_semantics();
     TURN_LEVEL_MEMORY = 1e4;
     AUTO_MODE_ID2 = "auto";
     AUTO_FALLBACK_MODE_ID = "default";
     turnLevels = /* @__PURE__ */ new Map();
+    handOffLevels = /* @__PURE__ */ new Map();
+    strangerHeld = /* @__PURE__ */ new Set();
     turnSerials = /* @__PURE__ */ new Map();
     nextTurnSerial = 0;
   }
 });
 
+// ../../apps/server/src/services/connectors/principal/server-principal.ts
+var init_server_principal = __esm({
+  "../../apps/server/src/services/connectors/principal/server-principal.ts"() {
+    "use strict";
+  }
+});
+
+// ../../apps/server/src/services/core/capabilities/marked-turn-holds.ts
+var init_marked_turn_holds = __esm({
+  "../../apps/server/src/services/core/capabilities/marked-turn-holds.ts"() {
+    "use strict";
+    init_server_principal();
+  }
+});
+
 // ../../apps/server/src/services/core/capabilities/permission-enforcement.ts
 function permissionGateSources() {
   return sources;
@@ -118992,6 +119075,8 @@ var init_permission_enforcement = __esm({
     init_mesh_schemas();
     init_permissions();
     init_turn_levels();
+    init_full_autonomy();
+    init_marked_turn_holds();
     init_logger();
     UNCHOSEN = { preset: null, defaults: { areas: {}, actions: {} } };
     DEFAULT_SOURCES = {
@@ -120742,9 +120827,10 @@ async function agentOfTurn(runtime, sessionId, opts, recordedAgentOf) {
 }
 function turnIsMarked(opts) {
   const ceiling = opts?.permissionCeiling;
-  if (ceiling !== void 0 && ceilingCarriesOutsider(ceiling)) return true;
+  if (ceiling !== void 0 && ceilingHoldsForOutsider(ceiling)) return true;
   if (opts?.teammate === true || opts?.roomTurn?.teammate === true) return true;
-  return hasMarks(marksForTurn(opts));
+  if (opts?.roomTurn?.outsiderInView === true) return true;
+  return marksForTurn(opts).teammate !== void 0;
 }
 function rises(runtime, sessionId, agentPath, stored, levelMode, opts) {
   if (opts?.permissionMode !== void 0 || opts?.unattended === true) return false;
@@ -123969,7 +124055,7 @@ var init_project_registry = __esm({
        * re-checks lookup-only in the delete itself, so a row another process
        * upgraded meanwhile stays, and memory learns its new state.
        */
-      forgetOldLookups(keep) {
+      forgetOldLookups(keep2) {
         let held2;
         try {
           held2 = new Set(this.protectedRoots());
@@ -123989,7 +124075,7 @@ var init_project_registry = __esm({
         const over = excess;
         for (const project2 of lookups) {
           if (excess <= 0) break;
-          if (project2.root === keep) continue;
+          if (project2.root === keep2) continue;
           let removed;
           try {
             removed = this.store ? this.store.removeLookupOnly(project2.root) : true;
@@ -138233,10 +138319,10 @@ var init_marketplace_cache = __esm({
        * @returns What was removed, the bytes freed, and any entry that could not be
        *   removed (the others still are).
        */
-      async removeUnused(keep) {
+      async removeUnused(keep2) {
         const treesRoot = join51(this.cacheRoot, TREES_DIRNAME);
         const entries = await this.listPackages();
-        const kept = keep(entries);
+        const kept = keep2(entries);
         const result2 = { removed: [], freedBytes: 0, failed: [] };
         for (const entry of entries) {
           if (kept.has(entry.path)) continue;
@@ -142631,7 +142717,7 @@ function createInstallationJobs(configuration, options = { ownerKind: "controlle
     );
     requireFact2(!expected || sameFileIdentity(identity2(s2), expected), "ROOT_CHANGED");
   }
-  async function readPinned(slot, path71, digest2, cap, expected, keep = false) {
+  async function readPinned(slot, path71, digest2, cap, expected, keep2 = false) {
     const before = await lstat5(path71, { bigint: true });
     requireFact2(
       before.isFile() && !before.isSymbolicLink() && before.size <= BigInt(cap),
@@ -142667,7 +142753,7 @@ function createInstallationJobs(configuration, options = { ownerKind: "controlle
         bytes += result3.bytesRead;
         requireFact2(bytes <= cap, "RETENTION_EXCEEDED");
         hash3.update(buffer.subarray(0, result3.bytesRead));
-        if (keep) chunks.push(buffer.slice(0, result3.bytesRead));
+        if (keep2) chunks.push(buffer.slice(0, result3.bytesRead));
       }
       requireFact2(
         sameFileIdentity(beforeIdentity, identity2(await original.stat({ bigint: true }))) && sameFileIdentity(beforeIdentity, identity2(await lstat5(path71, { bigint: true }))),
@@ -142690,7 +142776,7 @@ function createInstallationJobs(configuration, options = { ownerKind: "controlle
       }
     }
     if (failed) throw primary;
-    const result2 = new Uint8Array(keep ? bytes : 0);
+    const result2 = new Uint8Array(keep2 ? bytes : 0);
     let offset = 0;
     for (const chunk of chunks) {
       result2.set(chunk, offset);
@@ -174258,13 +174344,19 @@ var init_connector_event_schemas = __esm({
 });
 
 // ../connector-providers/src/connector-managed-schemas.ts
-var ManagedConnectorErrorBodySchema, ManagedConnectorOperationSelectorSchema, ManagedAuthorityCommandBaseSchema, ManagedConnectorAuthorityCommandSchema, ManagedAuthorityStatusBaseSchema, ManagedConnectorAuthorityCommandStatusSchema, ManagedConnectorExecutionAttributionSchema, ManagedConnectorExecutionRequestSchema, ManagedConnectorExecutionReceiptSchema, ManagedConnectorCompletedExecutionResponseSchema, ManagedConnectorExecutionResponseSchema, ManagedConnectorExecutionReceiptStatusSchema;
+var ManagedConnectorApprovalRefSchema, ManagedConnectorErrorBodySchema, ManagedConnectorOperationSelectorSchema, ManagedAuthorityCommandBaseSchema, ManagedConnectorAuthorityCommandSchema, ManagedAuthorityStatusBaseSchema, ManagedConnectorAuthorityCommandStatusSchema, ManagedConnectorTurnMarkSchema, ManagedConnectorExecutionAttributionSchema, ManagedConnectorExecutionRequestSchema, ManagedConnectorExecutionReceiptSchema, ManagedConnectorHeldExecutionSchema, ManagedConnectorCompletedExecutionResponseSchema, ManagedConnectorExecutionResponseSchema, ManagedConnectorExecutionReceiptStatusSchema, ManagedConnectorInstanceApprovalSchema, ManagedConnectorInstanceApprovalListSchema;
 var init_connector_managed_schemas = __esm({
   "../connector-providers/src/connector-managed-schemas.ts"() {
     init_dist13();
     init_zod();
+    init_stable_stringify();
     init_connector_event_schemas();
     init_connector_schemas();
+    ManagedConnectorApprovalRefSchema = external_exports.object({
+      approvalId: external_exports.string().uuid(),
+      approveUrl: external_exports.string().url(),
+      expiresAt: external_exports.string().datetime().refine((at) => Date.parse(at) > Date.now(), "The approval has already expired")
+    }).strict();
     ManagedConnectorErrorBodySchema = external_exports.object({
       error: external_exports.string().min(1).max(100),
       reason: external_exports.string().max(1e3).optional()
@@ -174333,16 +174425,32 @@ var init_connector_managed_schemas = __esm({
           "event_subscription_limit_reached",
           "invalid_event_filter",
           "permission_upgrade_required",
-          "scope_conflict"
+          "scope_conflict",
+          "approval_denied",
+          "approval_expired",
+          "approval_limit_reached"
         ])
       }).strict(),
-      ManagedAuthorityStatusBaseSchema.extend({ state: external_exports.literal("superseded") }).strict()
+      ManagedAuthorityStatusBaseSchema.extend({ state: external_exports.literal("superseded") }).strict(),
+      // Not applied yet: the owner has not approved it. The client keeps honouring
+      // the last `applied` set for that scope; this is not a stall and not a reason
+      // to resend. Sent only to a client that sent MANAGED_APPROVALS_HEADER.
+      ManagedAuthorityStatusBaseSchema.extend({ state: external_exports.literal("awaiting_approval") }).merge(ManagedConnectorApprovalRefSchema).strict()
     ]);
+    ManagedConnectorTurnMarkSchema = external_exports.enum(["outsider", "tool_read", "teammate"]);
     ManagedConnectorExecutionAttributionSchema = external_exports.object({
       surface: external_exports.enum(["mcp", "rest", "cli", "event"]),
       actorKind: external_exports.enum(["operator", "agent", "program", "event", "runtime"]),
       actorId: external_exports.string().min(1).max(200),
-      sessionId: external_exports.string().min(1).max(200).optional()
+      sessionId: external_exports.string().min(1).max(200).optional(),
+      /**
+       * What the calling turn carries, derived by the broker, never the agent, so
+       * the owner's approval card can say it: `outsider` (the turn read words
+       * from outside the owner's circle, or a stranger started it), `tool_read`
+       * (it read outside text through a tool) and `teammate` (a teammate in a
+       * shared space started the chain). Absent means none is known.
+       */
+      marks: external_exports.array(ManagedConnectorTurnMarkSchema).max(3).optional()
     }).strict();
     ManagedConnectorExecutionRequestSchema = external_exports.object({
       version: external_exports.literal(1),
@@ -174381,6 +174489,12 @@ var init_connector_managed_schemas = __esm({
         });
       }
     });
+    ManagedConnectorHeldExecutionSchema = external_exports.object({
+      state: external_exports.literal("held"),
+      attemptId: external_exports.string().min(1).max(200),
+      approval: external_exports.enum(["awaiting", "approved"]),
+      requestHash: external_exports.string().regex(/^[0-9a-f]{64}$/)
+    }).merge(ManagedConnectorApprovalRefSchema).strict();
     ManagedConnectorCompletedExecutionResponseSchema = external_exports.object({
       state: external_exports.literal("completed"),
       result: ConnectorProviderExecuteResultSchema,
@@ -174404,7 +174518,8 @@ var init_connector_managed_schemas = __esm({
       external_exports.object({
         state: external_exports.literal("pending"),
         attemptId: external_exports.string().min(1).max(200)
-      }).strict()
+      }).strict(),
+      ManagedConnectorHeldExecutionSchema
     ]);
     ManagedConnectorExecutionReceiptStatusSchema = external_exports.discriminatedUnion("state", [
       external_exports.object({
@@ -174414,8 +174529,19 @@ var init_connector_managed_schemas = __esm({
       external_exports.object({
         state: external_exports.literal("recorded"),
         receipt: ManagedConnectorExecutionReceiptSchema
-      }).strict()
+      }).strict(),
+      ManagedConnectorHeldExecutionSchema
     ]);
+    ManagedConnectorInstanceApprovalSchema = external_exports.object({
+      kind: external_exports.enum(["grant", "grant_review", "execution"]),
+      managedConnectionId: external_exports.string().min(1).max(200),
+      commandId: external_exports.string().min(1).max(200).optional(),
+      attemptId: external_exports.string().min(1).max(200).optional()
+    }).merge(ManagedConnectorApprovalRefSchema).strict();
+    ManagedConnectorInstanceApprovalListSchema = external_exports.object({
+      version: external_exports.literal(1),
+      approvals: external_exports.array(ManagedConnectorInstanceApprovalSchema)
+    }).strict();
   }
 });
 
@@ -178890,6 +179016,21 @@ function installCliErrorHandlers(reporter) {
 // src/cli.ts
 init_dork_home2();
 
+// src/lib/distribution.ts
+function cliDistribution(entryPath, inherited) {
+  if (inherited?.trim().toLowerCase() === "docker") return "docker";
+  const normalized = entryPath.replace(/\\/g, "/");
+  if (normalized.includes("/Cellar/")) return "homebrew";
+  if (normalized.includes("/node_modules/")) return "npm";
+  if (normalized.includes("/packages/cli/dist/")) return "dev";
+  return "unknown";
+}
+function stampCliLaunch(env6, entryPath, version4) {
+  env6.DORKOS_CLI_ENTRYPOINT = entryPath;
+  env6.DORKOS_CLI_VERSION = version4;
+  env6.DORKOS_DISTRIBUTION = cliDistribution(entryPath, env6.DORKOS_DISTRIBUTION);
+}
+
 // src/parse-cli-args.ts
 import { parseArgs } from "node:util";
 function parseCliArgs(args = process.argv.slice(2)) {
@@ -179381,7 +179522,7 @@ if (process.argv[2] === "community") {
     );
     Object.assign(childEnv, credentialEnv.pickCommunityCredentialEnv(rawProcessEnv));
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.126.2",
+      cliVersion: "0.126.4",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -179389,7 +179530,7 @@ if (process.argv[2] === "community") {
         {
           platform: { os: "linux", architecture: "amd64" },
           configSchemaVersion: releaseContract.COMMUNITY_CONFIG_SCHEMA_VERSION,
-          migrationCompatibilityId: "sha256:92df0e89ae4ba6c9e7a91699e39f0110f24e8ac1362a11c0d263adf3a20bac7d"
+          migrationCompatibilityId: "sha256:137102b0b50d6beffe53867c67282c84d4b7bf27f2f27134fec41c72289bca28"
         }
       )
     });
@@ -179399,7 +179540,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.126.2" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.126.4" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -179409,7 +179550,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.126.2", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.126.4", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -179508,7 +179649,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.126.2", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.126.4", DORK_HOME, subArgs));
 }
 var { values, positionals } = parseCliArgs();
 if (positionals[0] && !knownCommands.has(positionals[0])) {
@@ -179602,14 +179743,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.126.2");
+  console.log("0.126.4");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.126.2"}`);
+  console.log(`dorkos ${"0.126.4"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -179756,8 +179897,7 @@ if (fs40.existsSync(envPath)) {
   dotenv.config({ path: envPath, override: false });
 }
 uninstallCliErrorHandlers?.();
-process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath7(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.126.2";
+stampCliLaunch(process.env, fileURLToPath7(import.meta.url), "0.126.4");
 var server;
 try {
   server = await import("../server/index.js");
@@ -179782,7 +179922,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.126.2"}`);
+console.log(`  DorkOS v${"0.126.4"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -179808,9 +179948,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.126.2").then((latestVersion) => {
+checkForUpdate("0.126.4").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.126.2"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.126.4"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;