dorkos 0.128.0 → 0.130.0

package/dist/bin/cli.js

@@ -16831,13 +16831,13 @@ var init_json_schema_processors = __esm({
             ...params,
             path: [...params.path, "propertyNames"]
           });
-          let pending2 = pendingRecords.get(ctx);
-          if (!pending2) {
-            pending2 = [];
-            pendingRecords.set(ctx, pending2);
+          let pending = pendingRecords.get(ctx);
+          if (!pending) {
+            pending = [];
+            pendingRecords.set(ctx, pending);
             ctx.deferred.push(() => rewriteKeyNames(ctx));
           }
-          pending2.push(schema3);
+          pending.push(schema3);
         }
         json3.additionalProperties = processSchema(def.valueType, ctx, {
           ...params,
@@ -23335,9 +23335,9 @@ var init_account_signin_policy = __esm({
       save(value) {
         const next = PolicySchema.parse(value);
         fs2.mkdirSync(path2.dirname(this.file), { recursive: true });
-        const pending2 = this.file + ".pending";
-        fs2.writeFileSync(pending2, JSON.stringify(next), { mode: 384 });
-        fs2.renameSync(pending2, this.file);
+        const pending = this.file + ".pending";
+        fs2.writeFileSync(pending, JSON.stringify(next), { mode: 384 });
+        fs2.renameSync(pending, this.file);
         this.value = next;
       }
     };
@@ -25767,8 +25767,17 @@ var init_config_sections = __esm({
        * reads as `null`, which is exactly "not chosen", so there is no value a
        * migration could seed that the absence does not already say. Operator-only.
        */
-      triageOnCredits: external_exports.boolean().nullable().default(null)
-    }).default(() => ({ enabled: true, triageOnCredits: null }));
+      triageOnCredits: external_exports.boolean().nullable().default(null),
+      /**
+       * The room that hears "nothing is running" (DOR-3675): no agent chat on this computer has
+       * run for 30 minutes while work is still open. `null` posts in the team room. An agent
+       * could aim a post its alerts carry at a room of its choosing, so only a person sets it.
+       *
+       * No migration: a stored `heartbeats` section without this leaf reads as `null`, the team
+       * room, which is the default. Operator-only.
+       */
+      idleAlertRoomId: external_exports.string().min(1).nullable().default(null)
+    }).default(() => ({ enabled: true, triageOnCredits: null, idleAlertRoomId: null }));
     ActivityConfigSchema = external_exports.object({
       /**
        * Days of Activity history to keep. `DORKOS_ACTIVITY_RETENTION_DAYS`
@@ -26860,7 +26869,6 @@ function repoUrl(path77 = "") {
 var GITHUB_ORG, links;
 var init_links = __esm({
   "../shared/src/links.ts"() {
-    "use strict";
     GITHUB_ORG = "dork-labs";
     links = {
       /** The public origin of the marketing site, the docs and DorkOS Cloud. */
@@ -27128,6 +27136,11 @@ var init_env = __esm({
       // `apps/e2e/playwright.config.ts` sets this on both Express legs; nothing
       // else in the repo does. See services/search/registry.ts `selectSearchSources`.
       DORKOS_SEARCH_NO_EXTERNAL_HISTORY: boolFlag,
+      // Turn off agent introductions in rooms (DOR-2106). An introduction starts a
+      // real agent turn, so a harness that must start none sets this:
+      // `apps/e2e/playwright.config.ts` does on its real-runtime Express legs, whose
+      // fixtures guarantee that no spec reaches a real runtime. Off by default.
+      DORKOS_NO_ROOM_INTRODUCTIONS: boolFlag,
       // Activity feed retention in days. Overrides `activity.retentionDays` (default 365) when set.
       DORKOS_ACTIVITY_RETENTION_DAYS: external_exports.coerce.number().int().min(1).optional(),
       // Test mode — TestModeRuntime is registered instead of ClaudeCodeRuntime
@@ -27289,7 +27302,7 @@ import path3 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.128.0";
+  if (true) return "0.130.0";
   const pkgPath = path3.join(path3.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -42991,8 +43004,13 @@ function overrideNames(input4) {
     names.add("OPENCODE_SERVER_PASSWORD");
     names.add("OPENCODE_CONFIG_CONTENT");
   }
+  for (const name2 of Object.keys(flowIdentityEnv(input4.runtime, input4.purpose))) names.add(name2);
   return names;
 }
+function flowIdentityEnv(runtime, purpose) {
+  if (purpose !== "turn" || runtime === "doe") return {};
+  return { FLOW_RUNTIME: runtime, FLOW_HARNESS: "dorkos" };
+}
 function projectRuntimeEnvironment(input4) {
   const inherit = RuntimeInheritedEnvNamesSchema.parse(input4.inherit ?? []);
   const allowed = /* @__PURE__ */ new Set([...BASELINE_ENV_NAMES, ...profileNames(input4), ...inherit]);
@@ -43035,7 +43053,14 @@ var init_runtime_environment = __esm({
 function runtimeEnvironment(runtime, purpose, overrides) {
   const inherit = runtimeInheritedNames(runtime);
   return withGitConfigEnv(
-    projectRuntimeEnvironment({ parent: process.env, runtime, purpose, inherit, overrides }),
+    projectRuntimeEnvironment({
+      // eslint-disable-next-line no-restricted-syntax -- deliberate ambient-input boundary for the pure child-environment projection
+      parent: process.env,
+      runtime,
+      purpose,
+      inherit,
+      overrides: { ...overrides, ...flowIdentityEnv(runtime, purpose) }
+    }),
     SESSION_GIT_CONFIG
   );
 }
@@ -50154,11 +50179,11 @@ function containerEntries(value) {
 }
 function inspectBoundedJson(value, bounds) {
   const { maxBytes, maxDepth } = bounds;
-  const pending2 = [{ value, depth: 0 }];
+  const pending = [{ value, depth: 0 }];
   const ancestors = /* @__PURE__ */ new Set();
   let bytes = 0;
-  while (pending2.length) {
-    const item = pending2.pop();
+  while (pending.length) {
+    const item = pending.pop();
     const current3 = item.value;
     if (item.exit) {
       ancestors.delete(current3);
@@ -50172,10 +50197,10 @@ function inspectBoundedJson(value, bounds) {
       if (!entries) return "Expected plain JSON without unsafe keys or accessors";
       bytes += 2 + Math.max(0, entries.length - 1);
       ancestors.add(current3);
-      pending2.push({ value: current3, depth: item.depth, exit: true });
+      pending.push({ value: current3, depth: item.depth, exit: true });
       for (const [key, child] of entries) {
         if (!Array.isArray(current3)) bytes += encoder.encode(JSON.stringify(key)).length + 1;
-        pending2.push({ value: child, depth: item.depth + 1 });
+        pending.push({ value: child, depth: item.depth + 1 });
       }
     } else {
       if (typeof current3 === "number" && !Number.isFinite(current3))
@@ -52304,6 +52329,39 @@ var init_canvas_channel_schemas = __esm({
   }
 });
 
+// ../shared/src/task-approval-schemas.ts
+var ScheduleOriginMarksSchema, TaskFolderRulesSchema;
+var init_task_approval_schemas = __esm({
+  "../shared/src/task-approval-schemas.ts"() {
+    "use strict";
+    init_zod();
+    init_zod_openapi();
+    extendZodWithOpenApiOnce();
+    ScheduleOriginMarksSchema = external_exports.object({
+      /** The turn read words DorkOS can't vouch for: a stranger's message, or another agent's that carried one. */
+      outsider: external_exports.literal(true).optional(),
+      /** Each teammate whose message started the chain, and the space room they wrote in. */
+      teammate: external_exports.array(
+        external_exports.object({
+          roomId: external_exports.string(),
+          authorId: external_exports.string(),
+          /** The teammate's name when the mark was written, or null when it was unknown. */
+          name: external_exports.string().nullable().default(null),
+          /** The room's title when the mark was written, or null when it was unknown. */
+          room: external_exports.string().nullable().default(null)
+        })
+      ).optional()
+    }).openapi("ScheduleOriginMarks");
+    TaskFolderRulesSchema = external_exports.object({
+      status: external_exports.enum(["approved", "waiting", "none", "unavailable"]),
+      /** Only rules that a launch would apply; empty while approval is outstanding. */
+      applied: external_exports.array(external_exports.string()),
+      /** The filtered folder list waiting for a separate person's approval. */
+      pending: external_exports.array(external_exports.string())
+    });
+  }
+});
+
 // ../shared/src/validation.ts
 var AGENT_NAME_REGEX;
 var init_validation = __esm({
@@ -52715,6 +52773,12 @@ function mergeTeammateOrigins(a2, b2) {
   const added = b2.filter((origin) => !seen.has(key(origin)));
   return added.length === 0 ? a2 : [...a2, ...added];
 }
+function ceilingOnlyRecords(ceiling) {
+  const bounds = Array.isArray(ceiling) ? ceiling : [ceiling];
+  return bounds.length > 0 && bounds.every(
+    (bound) => bound !== "runtime-default" && bound.asks === "never" && bound.reach === "everything" && bound.outsider !== true
+  );
+}
 function ceilingHoldsForOutsider(ceiling) {
   if (!Array.isArray(ceiling)) return ceiling === "runtime-default";
   const bounds = ceiling;
@@ -52729,6 +52793,7 @@ function stricterPower(a2, b2) {
   return a2.auto && b2.auto ? { asks, reach, auto: true } : { asks, reach };
 }
 function clampModeToCeiling(declared, modeId, ceiling) {
+  if (ceilingOnlyRecords(ceiling)) return modeId;
   const level = resolveCeilingLevel(declared, ceiling);
   const own2 = declared.values.find((m2) => m2.id === modeId);
   if (own2 && admits(level, own2)) return modeId;
@@ -54116,7 +54181,6 @@ var init_capabilities = __esm({
 var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, ProjectWithoutCreditsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema, NoAutoMoveSchema;
 var init_project_schemas = __esm({
   "../shared/src/project-schemas.ts"() {
-    "use strict";
     init_zod();
     init_zod_openapi();
     extendZodWithOpenApiOnce();
@@ -54228,7 +54292,7 @@ var init_project_schemas = __esm({
 });
 
 // ../shared/src/approval-schemas.ts
-var APPROVAL_SUMMARY_MAX_LENGTH, APPROVAL_DETAIL_MAX_LENGTH, APPROVAL_SUBJECT_LABEL_MAX_LENGTH, APPROVAL_SUBJECT_KINDS, ApprovalSubjectSchema, APPROVAL_SERVICE_ACTION_MAX_DETAILS, APPROVAL_SERVICE_DETAIL_VALUE_MAX_LENGTH, APPROVAL_SERVICE_DETAIL_LABEL_MAX_LENGTH, APPROVAL_SERVICE_NAME_MAX_LENGTH, APPROVAL_SERVICE_FULL_VALUE_MAX_LENGTH, APPROVAL_SERVICE_FULL_MAX_LINES, APPROVAL_SERVICE_FULL_MAX_DEPTH, ApprovalServiceActionLineSchema, ApprovalServiceActionDetailSchema, ApprovalServiceActionSchema, APPROVAL_ORIGINS, APPROVAL_REQUEST_REASON_MAX_LENGTH, PendingApprovalSchema, PendingApprovalsResponseSchema, CAPABILITY_APPROVAL_OUTCOMES, CapabilityApprovalOutcomeSchema, APPROVAL_ANSWERS, GrantApprovalBodySchema, DenyApprovalBodySchema, ApprovalDecisionResponseSchema;
+var APPROVAL_SUMMARY_MAX_LENGTH, APPROVAL_CONSEQUENCE_MAX_LENGTH, APPROVAL_DETAIL_MAX_LENGTH, APPROVAL_SUBJECT_LABEL_MAX_LENGTH, APPROVAL_SUBJECT_KINDS, ApprovalSubjectSchema, APPROVAL_SERVICE_ACTION_MAX_DETAILS, APPROVAL_SERVICE_DETAIL_VALUE_MAX_LENGTH, APPROVAL_SERVICE_DETAIL_LABEL_MAX_LENGTH, APPROVAL_SERVICE_NAME_MAX_LENGTH, APPROVAL_SERVICE_FULL_VALUE_MAX_LENGTH, APPROVAL_SERVICE_FULL_MAX_LINES, APPROVAL_SERVICE_FULL_MAX_DEPTH, ApprovalServiceActionLineSchema, ApprovalServiceActionDetailSchema, ApprovalServiceActionSchema, APPROVAL_ORIGINS, APPROVAL_REQUEST_REASON_MAX_LENGTH, APPROVAL_FULL_DETAIL_MAX_LENGTH, MARKETPLACE_RISK_KINDS, MARKETPLACE_RISK_CHANGES, MarketplaceRiskSchema, MarketplacePackageSummarySchema, MarketplaceApprovalSummarySchema, ApprovalFullDetailResponseSchema, PendingApprovalSchema, PendingApprovalsResponseSchema, CAPABILITY_APPROVAL_OUTCOMES, CapabilityApprovalOutcomeSchema, APPROVAL_ANSWERS, GrantApprovalBodySchema, DenyApprovalBodySchema, ApprovalDecisionResponseSchema;
 var init_approval_schemas = __esm({
   "../shared/src/approval-schemas.ts"() {
     "use strict";
@@ -54239,6 +54303,7 @@ var init_approval_schemas = __esm({
     init_project_schemas();
     extendZodWithOpenApiOnce();
     APPROVAL_SUMMARY_MAX_LENGTH = 500;
+    APPROVAL_CONSEQUENCE_MAX_LENGTH = 40;
     APPROVAL_DETAIL_MAX_LENGTH = 4e3;
     APPROVAL_SUBJECT_LABEL_MAX_LENGTH = 60;
     APPROVAL_SUBJECT_KINDS = ["agent", "task", "room"];
@@ -54306,6 +54371,59 @@ var init_approval_schemas = __esm({
     }).strict().openapi("ApprovalServiceAction");
     APPROVAL_ORIGINS = ["session", "external-mcp"];
     APPROVAL_REQUEST_REASON_MAX_LENGTH = 500;
+    APPROVAL_FULL_DETAIL_MAX_LENGTH = 2e5;
+    MARKETPLACE_RISK_KINDS = [
+      "extension",
+      "hook",
+      "skillCommand",
+      "mcp",
+      "lsp",
+      "monitor",
+      "executable",
+      "schedule",
+      "host",
+      "secret",
+      "skillTools",
+      "dependency",
+      "unreadable"
+    ];
+    MARKETPLACE_RISK_CHANGES = ["new", "broader", "removed"];
+    MarketplaceRiskSchema = external_exports.object({
+      kind: external_exports.enum(MARKETPLACE_RISK_KINDS),
+      change: external_exports.enum(MARKETPLACE_RISK_CHANGES),
+      /** The row's sentence, with every value quoted and hidden characters shown. */
+      text: external_exports.string().max(4e3),
+      /** The whole command it runs, escaped, never shortened. */
+      command: external_exports.string().max(APPROVAL_FULL_DETAIL_MAX_LENGTH).optional(),
+      /** Broader only: what it was before, in words. */
+      was: external_exports.string().max(APPROVAL_FULL_DETAIL_MAX_LENGTH).optional(),
+      /** Named values under the row: an extension's hosts, a skill's tools. */
+      items: external_exports.array(external_exports.string().max(4e3)).optional()
+    }).openapi("MarketplaceRisk");
+    MarketplacePackageSummarySchema = external_exports.object({
+      name: external_exports.string().max(4e3),
+      /** The package's type and where it is or will be installed, in words. */
+      where: external_exports.string().max(4e3),
+      /** Update only: the version installed now. */
+      fromVersion: external_exports.string().max(4e3).optional(),
+      toVersion: external_exports.string().max(4e3),
+      /** `adds` when any row is New or Broader; decided by the server. */
+      power: external_exports.enum(["adds", "none"]),
+      /** New and Broader rows first, most powerful first; Removed rows last. */
+      risks: external_exports.array(MarketplaceRiskSchema),
+      /** Update only: things it already runs that stay exactly the same. */
+      unchangedCount: external_exports.number().int().min(0)
+    }).openapi("MarketplacePackageSummary");
+    MarketplaceApprovalSummarySchema = external_exports.object({
+      operation: external_exports.enum(["install", "update"]),
+      packages: external_exports.array(MarketplacePackageSummarySchema).min(1),
+      /** How long the full list is, so the link can say what it opens. */
+      fullDetailLength: external_exports.number().int().min(0)
+    }).openapi("MarketplaceApprovalSummary");
+    ApprovalFullDetailResponseSchema = external_exports.object({
+      /** Everything the approval is about, written out whole, swept for secrets. */
+      text: external_exports.string().max(APPROVAL_FULL_DETAIL_MAX_LENGTH)
+    }).openapi("ApprovalFullDetailResponse");
     PendingApprovalSchema = external_exports.object({
       /** ULID identifying the approval. Carries no secret. */
       approvalId: external_exports.string(),
@@ -54315,6 +54433,12 @@ var init_approval_schemas = __esm({
       capabilityTitle: external_exports.string(),
       /** Permission tier of the capability being requested. */
       tier: external_exports.enum(CAPABILITY_TIERS),
+      /**
+       * What a yes does, in a few words ("Runs code on this Mac"), for the badge
+       * in place of the tier's own label. Set by the capability, for cards whose
+       * tier label would mislead (repo pins, DOR-3359); absent everywhere else.
+       */
+      consequence: external_exports.string().max(APPROVAL_CONSEQUENCE_MAX_LENGTH).optional(),
       /** One plain sentence describing what would happen. */
       summary: external_exports.string().max(APPROVAL_SUMMARY_MAX_LENGTH),
       /** Opaque label for who asked, when the request carried one. */
@@ -54404,6 +54528,12 @@ var init_approval_schemas = __esm({
        * at render time.
        */
       detail: external_exports.string().max(APPROVAL_DETAIL_MAX_LENGTH).optional(),
+      /**
+       * A Marketplace install or update whose full list is too long for
+       * {@link detail} (DOR-3070): the card renders this instead of the detail,
+       * and the full list is served by `GET /api/approvals/:id/full-detail`.
+       */
+      marketplaceSummary: MarketplaceApprovalSummarySchema.optional(),
       /**
        * The thing this would act on, named — when the server could name it.
        *
@@ -54511,7 +54641,6 @@ var init_account_usage_codex = __esm({
 var LEDGER_RUNTIMES, LEDGER_SOURCES, RateLimitStatusSchema, ISO_TIME_PATTERN, IsoTimeSchema, LedgerSourceSchema, LedgerEntrySchema, WINDOW_KEY_PATTERN, LedgerPlanSchema, LedgerCreditsSchema, LedgerSpendSchema, UsageLedgerSchema, MINUTE_MS, HOUR_MS, FIVE_HOUR_MS, SEVEN_DAY_MS, MAX_FUTURE_SKEW_MS, AccountUsageSchema, LimitResolutionSchema, LimitHistoryEntrySchema, LimitHistoryResponseSchema, FoundClaudeFolderSchema, DismissFoundFolderRequestSchema;
 var init_account_usage = __esm({
   "../shared/src/account-usage.ts"() {
-    "use strict";
     init_zod();
     init_zod_openapi();
     init_ledger_slug();
@@ -54968,10 +55097,12 @@ function isSafeSigninUrl(value) {
   if (url2.protocol !== "http:") return false;
   return url2.hostname === "localhost" || url2.hostname === "127.0.0.1" || url2.hostname === "[::1]";
 }
-var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, TrackerItemRefSchema, SessionStartedBySchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedWaitingOnSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, agentCompactionShape, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, ModelSubstitutedEventSchema, WorkLeftEndStatusSchema, WorkLeftTaskSchema, WorkLeftRunningEventSchema, WorkLeftEndedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, ModelSubstitutedPartSchema, WorkLeftRunningPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, HistoryReadSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, FRAME_SCRIPT_HTML_MAX_BYTES, FrameBridgeRefusalSchema, WorkbenchBridgeStatusRequestSchema, WorkbenchBridgeStatusResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, LanAccessStatusSchema, RemoteAccessStateSchema, RemoteAccessAvailabilitySchema, RemoteAccessEnrolmentSchema, RemoteAccessReportSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, CompanyCertificatesStatusSchema, ServerConfigSchema2, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunOutcomeSchema, TaskFailureReasonSchema, TaskHealthSchema, TaskRunTriggerSchema, ScheduleOriginMarksSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema, KeepAwakeUnsupportedReasonSchema, KeepAwakeStatusSchema, StreamHealthReportSchema;
+var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, TrackerItemRefSchema, SessionStartedBySchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedWaitingOnSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, agentCompactionShape, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, ModelSubstitutedEventSchema, WorkLeftEndStatusSchema, WorkLeftTaskSchema, WorkLeftRunningEventSchema, WorkLeftEndedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, ModelSubstitutedPartSchema, WorkLeftRunningPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, HistoryReadSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, FRAME_SCRIPT_HTML_MAX_BYTES, FrameBridgeRefusalSchema, WorkbenchBridgeStatusRequestSchema, WorkbenchBridgeStatusResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, LanAccessStatusSchema, RemoteAccessStateSchema, RemoteAccessAvailabilitySchema, RemoteAccessEnrolmentSchema, RemoteAccessReportSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, CompanyCertificatesStatusSchema, ServerConfigSchema2, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunOutcomeSchema, TaskFailureReasonSchema, TaskHealthSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema, KeepAwakeUnsupportedReasonSchema, KeepAwakeStatusSchema, StreamHealthReportSchema;
 var init_schemas4 = __esm({
   "../shared/src/schemas.ts"() {
     "use strict";
+    init_task_approval_schemas();
+    init_task_approval_schemas();
     init_canvas_channel_schemas();
     init_zod();
     init_zod_openapi();
@@ -57372,6 +57503,13 @@ var init_schemas4 = __esm({
       callerRoute: external_exports.enum(["local", "wifi", "tunnel", "managed", "network", "hub"]).nullable().optional().openapi({
         description: "The way THIS request reached DorkOS, as the server classified it: `local` at the computer DorkOS runs on, `wifi` over the Wi-Fi listener, and so on. Read only. A Wi-Fi request answers approvals with Allow once or Deny, never Always allow, so the app hides that choice there. Null for the relay; absent from an older server"
       }),
+      capacity: external_exports.object({
+        maxAgentChats: external_exports.number().int(),
+        loadAverage: external_exports.number().nullable(),
+        freeDiskBytes: external_exports.number().nullable()
+      }).optional().openapi({
+        description: "How much room this computer has right now, for the Team view: the cap on chats agents may run at once, the one-minute load average (null where the system reports none) and the free bytes on the DorkOS data disk (null when it cannot be read). Absent from an older server"
+      }),
       dismissedUpgradeVersions: external_exports.array(external_exports.string()).openapi({ description: "Versions the user has dismissed upgrade notifications for" }),
       dismissedPromoIds: external_exports.array(external_exports.string()).openapi({
         description: "Feature-promo ids the user has waved away. Server-held rather than per-browser, so dismissing a card on one device settles it on all of them"
@@ -57865,21 +58003,6 @@ var init_schemas4 = __esm({
       lastRunId: external_exports.string().nullable()
     }).openapi("TaskHealth");
     TaskRunTriggerSchema = external_exports.enum(["scheduled", "manual", "agent"]).openapi("TaskRunTrigger");
-    ScheduleOriginMarksSchema = external_exports.object({
-      /** The turn read words DorkOS can't vouch for: a stranger's message, or another agent's that carried one. */
-      outsider: external_exports.literal(true).optional(),
-      /** Each teammate whose message started the chain, and the space room they wrote in. */
-      teammate: external_exports.array(
-        external_exports.object({
-          roomId: external_exports.string(),
-          authorId: external_exports.string(),
-          /** The teammate's name when the mark was written, or null when it was unknown. */
-          name: external_exports.string().nullable().default(null),
-          /** The room's title when the mark was written, or null when it was unknown. */
-          room: external_exports.string().nullable().default(null)
-        })
-      ).optional()
-    }).openapi("ScheduleOriginMarks");
     TaskSchema = external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
@@ -57929,6 +58052,17 @@ var init_schemas4 = __esm({
       packageOwned: external_exports.enum(["record", "legacy"]).nullable().default(null).openapi({
         description: "Whether an installed package owns this schedule's file: 'record' (the package lists it), 'legacy' (installed before DorkOS kept file lists), or null (the person's own)."
       }),
+      /**
+       * Whether a person declined this schedule as it reads now (DOR-2097).
+       *
+       * Only a schedule an installed package owns can be declined rather than
+       * deleted: removing its file would break the package. A declined schedule
+       * never runs and asks nobody. When the package changes the schedule, it asks
+       * again and this reads false.
+       */
+      declined: external_exports.boolean().optional().openapi({
+        description: "Whether a person declined this schedule as it reads now. A declined schedule never runs and asks again only when its file changes."
+      }),
       /**
        * Whether this is one project's copy of a global schedule marked
        * `scope: project` (DOR-3376). Its switch and timing belong to this project
@@ -57938,6 +58072,14 @@ var init_schemas4 = __esm({
       projectOnly: external_exports.boolean().optional().openapi({
         description: "True when this is one project's copy of a global schedule that only runs inside a project. Its switch and timing are this project's; its file is shared. Absent means false."
       }),
+      /**
+       * Whether a person is offered "Turn on" (DOR-3309): the schedule's file now
+       * says on, and a file may switch a schedule off but never on, so it stayed
+       * off. Absent reads as false.
+       */
+      offersTurnOn: external_exports.boolean().optional().openapi({
+        description: "True when the schedule stayed off although its file now says on. A file can switch a schedule off but never on, so a person is offered Turn on. Absent means false."
+      }),
       /**
        * What changed since this schedule was last approved, for a schedule
        * waiting again (DOR-2323): each part of the approved work that differs,
@@ -57987,6 +58129,8 @@ var init_schemas4 = __esm({
       sticky: external_exports.boolean().default(false),
       maxRuntime: external_exports.number().int().nullable(),
       permissionMode: PermissionModeSchema,
+      /** Read-time, person-only preview; absent for older servers and agent callers. */
+      folderRules: TaskFolderRulesSchema.optional(),
       /**
        * Which agent runtime this task's runs execute on, or `null` to follow the
        * task's agent (DOR-1615).
@@ -58045,6 +58189,13 @@ var init_schemas4 = __esm({
        * nothing resolves, which is what the "An agent" fallback is for.
        */
       proposedByName: external_exports.string().nullable().default(null),
+      /**
+       * The name of the agent this schedule runs as (the agent `agentId` names),
+       * resolved when the task is READ, like `proposedByName`, so an approval card
+       * and its notification say whose turn it would be (DOR-3640 R1). `null` for
+       * a global schedule, or when the agent cannot be named; absent on a task not yet read that way.
+       */
+      runsAsName: external_exports.string().nullable().optional(),
       /**
        * Where this schedule came from, when that is not a person using DorkOS.
        *
@@ -58072,6 +58223,12 @@ var init_schemas4 = __esm({
        * the trust preset; approving it clears this.
        */
       originMarks: ScheduleOriginMarksSchema.nullable().optional(),
+      /**
+       * Held for a person, but nothing is waiting on them (DOR-3425): the file of a
+       * schedule whose agent is at Full autonomy asks for more than was approved. It
+       * stays a row under Needs you, with no knock and no escalation.
+       */
+      quietHold: external_exports.boolean().optional(),
       nextRun: external_exports.string().nullable().optional(),
       /**
        * When the schedule last started a run (ISO 8601), or null when it never
@@ -61035,11 +61192,11 @@ async function measurePackageTree(root, limits = PACKAGE_SIZE_LIMITS, { countGit
   let entries = 0;
   let bytes = 0;
   let inNodeModules = 0;
-  const pending2 = [
+  const pending = [
     { rel: "", underNodeModules: false }
   ];
-  while (pending2.length > 0) {
-    const { rel, underNodeModules } = pending2.pop();
+  while (pending.length > 0) {
+    const { rel, underNodeModules } = pending.pop();
     let listed2;
     try {
       listed2 = await readdir2(path23.join(root, rel), { withFileTypes: true });
@@ -61058,7 +61215,7 @@ async function measurePackageTree(root, limits = PACKAGE_SIZE_LIMITS, { countGit
         throw new PackageTooLargeError("entries", limits, void 0, inNodeModules);
       }
       if (entry.isDirectory()) {
-        pending2.push({ rel: childRel, underNodeModules: inside });
+        pending.push({ rel: childRel, underNodeModules: inside });
         continue;
       }
       const { size } = await lstat2(path23.join(root, childRel));
@@ -64006,9 +64163,9 @@ var init_endpoint_context = __esm({
     getOrCreateEndpointContextStorage = async () => {
       const existing = getExistingEndpointContextStorage();
       if (existing) return existing;
-      const AsyncLocalStorage8 = await getAsyncLocalStorage();
+      const AsyncLocalStorage7 = await getAsyncLocalStorage();
       const globalContext = __getBetterAuthGlobal().context;
-      return globalContext.endpointContextAsyncStorage ??= new AsyncLocalStorage8();
+      return globalContext.endpointContextAsyncStorage ??= new AsyncLocalStorage7();
     };
   }
 });
@@ -64604,8 +64761,8 @@ var init_request_state = __esm({
       const betterAuthGlobal = __getBetterAuthGlobal();
       const existing = betterAuthGlobal.context.requestStateAsyncStorage;
       if (existing) return existing;
-      const AsyncLocalStorage8 = await getAsyncLocalStorage();
-      betterAuthGlobal.context.requestStateAsyncStorage ??= new AsyncLocalStorage8();
+      const AsyncLocalStorage7 = await getAsyncLocalStorage();
+      betterAuthGlobal.context.requestStateAsyncStorage ??= new AsyncLocalStorage7();
       return betterAuthGlobal.context.requestStateAsyncStorage;
     };
   }
@@ -65276,8 +65433,8 @@ var init_transaction = __esm({
       const betterAuthGlobal = __getBetterAuthGlobal();
       const existing = betterAuthGlobal.context.adapterAsyncStorage;
       if (existing) return existing;
-      const AsyncLocalStorage8 = await getAsyncLocalStorage();
-      betterAuthGlobal.context.adapterAsyncStorage ??= new AsyncLocalStorage8();
+      const AsyncLocalStorage7 = await getAsyncLocalStorage();
+      betterAuthGlobal.context.adapterAsyncStorage ??= new AsyncLocalStorage7();
       return betterAuthGlobal.context.adapterAsyncStorage;
     };
     getCurrentAdapter = async (fallback) => {
@@ -67818,14 +67975,14 @@ function isUsableJWK(jwk, entry, alg2, kid) {
 async function importWithAlgCache(cache3, jwk, entry) {
   const cached2 = cache3.get(jwk) || cache3.set(jwk, {}).get(jwk), { alg: alg2 } = entry;
   if (cached2[alg2] === void 0) {
-    const pending2 = jwkToKey(entry, jwk, true).then((key) => {
+    const pending = jwkToKey(entry, jwk, true).then((key) => {
       if (key.type !== "public")
         throw new JWKSInvalid("JSON Web Key Set members must be public keys");
       return cached2[alg2] = key, key;
     }).catch((error63) => {
-      throw cached2[alg2] === pending2 && delete cached2[alg2], error63;
+      throw cached2[alg2] === pending && delete cached2[alg2], error63;
     });
-    cached2[alg2] = pending2;
+    cached2[alg2] = pending;
   }
   return cached2[alg2];
 }
@@ -106691,6 +106848,20 @@ var init_approvals = __esm({
          * longer parses renders as a card with the summary instead of failing.
          */
         serviceAction: text("service_action"),
+        /**
+         * A Marketplace card's summary, as JSON matching the wire schema's
+         * `MarketplaceApprovalSummary`, or null (DOR-3070). Written only when the
+         * full list is too long for `detail`; read back through that schema, so a
+         * row that no longer parses renders with the summary sentence instead.
+         */
+        marketplaceSummary: text("marketplace_summary"),
+        /**
+         * Everything a Marketplace card is about, written out whole and swept for
+         * secrets, or null (DOR-3070). Served by `GET /api/approvals/:id/full-detail`
+         * while the card is pending; the approval itself is bound to the
+         * disclosure this text describes, never to the summary.
+         */
+        fullDetail: text("full_detail"),
         /** Opaque label for who asked — an agent path, a display name, or null. */
         requestedBy: text("requested_by"),
         /**
@@ -106964,6 +107135,17 @@ var init_tasks = __esm({
        * what was approved, not an approval.
        */
       previousApprovalKey: text("previous_approval_key"),
+      /**
+       * The schedule content a person declined, as a content key, for a schedule
+       * whose file an installed package owns (DOR-2097).
+       *
+       * That file is the package's, so declining cannot remove it, and the decision
+       * lives here instead. While the content that would run still has this key, the
+       * schedule stays waiting, never runs, and asks nobody. A changed file has a
+       * different key, so it asks again. Cleared by an approval. NULL means nobody
+       * declined it.
+       */
+      declinedContentKey: text("declined_content_key"),
       /**
        * The turn marks of the turn that created or last edited this schedule (DOR-3036,
        * `specs/turn-marks`): JSON `{ outsider?: true, teammate?: [{ roomId, authorId, name?, room? }] }`,
@@ -106983,6 +107165,20 @@ var init_tasks = __esm({
        */
       followedAgentChanges: text("followed_agent_changes"),
       enabled: integer2("enabled", { mode: "boolean" }).notNull().default(true),
+      /**
+       * The SKILL.md's own `enabled`, as the last sync read it (DOR-3309). A file
+       * may switch a task off but never on, so the row and its file can disagree;
+       * this is how a sync tells a file that has just started saying "on" from one
+       * that always did. NULL: the row is older than the column, so nothing is
+       * known yet and nothing is offered.
+       */
+      fileEnabled: integer2("file_enabled", { mode: "boolean" }),
+      /**
+       * Whether a person is being offered "Turn on", because the task's file now
+       * says on while the task stays off (DOR-3309). Cleared when anybody switches
+       * the task either way, or the file says off again.
+       */
+      offersTurnOn: integer2("offers_turn_on", { mode: "boolean" }).notNull().default(false),
       /**
        * Whether every fire of this schedule RESUMES one persistent session instead
        * of starting a fresh one (DOR-1571).
@@ -107427,6 +107623,12 @@ var init_sessions = __esm({
         // whether a limited session may carry its work to another account (spec
         // `claude-account-fleet` D9). NULL = bound before this column existed.
         launchOrigin: text("launch_origin"),
+        // Who chose where an agent-launched chat runs (DOR-3644): the launching
+        // agent's Mesh id, its home when Mesh could not name it, or `unidentified`.
+        // Written with `launchOrigin`, first-write-wins, never overwritten. NULL = a
+        // person's chat, a chat the server placed itself, or one bound before this
+        // column existed.
+        launchedBy: text("launched_by"),
         // The episode `resetsAt` (else `since`) of the last usage limit core resumed
         // this session from by itself (spec `claude-account-fleet` D9 "Wait, then
         // resume by itself"): at most one automatic resume per window reset. Kept
@@ -111133,6 +111335,33 @@ var init_registry = __esm({
   }
 });
 
+// ../db/src/schema/browser/agent-profiles.ts
+var agentBrowserProfiles, agentBrowserProfileAgents;
+var init_agent_profiles = __esm({
+  "../db/src/schema/browser/agent-profiles.ts"() {
+    "use strict";
+    init_sqlite_core();
+    agentBrowserProfiles = sqliteTable("agent_browser_profiles", {
+      id: text("id").primaryKey(),
+      label: text("label").notNull(),
+      createdAt: text("created_at").notNull()
+    });
+    agentBrowserProfileAgents = sqliteTable(
+      "agent_browser_profile_agents",
+      {
+        profileId: text("profile_id").notNull().references(() => agentBrowserProfiles.id, { onDelete: "cascade" }),
+        agentId: text("agent_id").notNull(),
+        createdAt: text("created_at").notNull(),
+        signature: text("signature").notNull()
+      },
+      (t2) => [
+        primaryKey({ columns: [t2.profileId, t2.agentId] }),
+        index("agent_browser_profile_agents_agent").on(t2.agentId)
+      ]
+    );
+  }
+});
+
 // ../db/src/schema/session/session-locations.ts
 var sessionLocations;
 var init_session_locations = __esm({
@@ -111339,6 +111568,90 @@ var init_commitments = __esm({
   }
 });
 
+// ../db/src/schema/work-queue/work-queue.ts
+var agentWorkQueues, workQueueControl, agentWorkItems;
+var init_work_queue = __esm({
+  "../db/src/schema/work-queue/work-queue.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_sqlite_core();
+    agentWorkQueues = sqliteTable("agent_work_queues", {
+      /** The Mesh id of the agent. */
+      agentId: text("agent_id").primaryKey(),
+      /** Whether a person turned the queue on. Turning it off is how a person pauses it. */
+      enabled: integer2("enabled", { mode: "boolean" }).notNull().default(false),
+      /** How many of the queue's chats may run at once. */
+      target: integer2("target").notNull().default(1),
+      /** The most chats the queue may start in one UTC day. */
+      dailyStartCap: integer2("daily_start_cap").notNull().default(20),
+      /** The UTC day {@link startsToday} counts (`YYYY-MM-DD`), or NULL before the first start. */
+      startsDay: text("starts_day"),
+      /** How many chats the queue started on {@link startsDay}. */
+      startsToday: integer2("starts_today").notNull().default(0),
+      /** When this row last changed (ISO 8601). */
+      updatedAt: text("updated_at").notNull()
+    });
+    workQueueControl = sqliteTable(
+      "work_queue_control",
+      {
+        /** Always 1. */
+        id: integer2("id").primaryKey(),
+        /** Whether a person stopped every queue. */
+        stopped: integer2("stopped", { mode: "boolean" }).notNull(),
+        /** When it last changed (ISO 8601). */
+        updatedAt: text("updated_at").notNull()
+      },
+      (table2) => [check3("work_queue_control_one_row", sql2`${table2.id} = 1`)]
+    );
+    agentWorkItems = sqliteTable(
+      "agent_work_items",
+      {
+        /** ULID. */
+        id: text("id").primaryKey(),
+        /** The Mesh id of the agent whose queue this is. */
+        agentId: text("agent_id").notNull(),
+        /** Where it sits among the queued items: lowest starts first. */
+        position: integer2("position").notNull(),
+        /** A short title, used for the chat it starts. */
+        title: text("title").notNull(),
+        /** The first message of the chat it starts. */
+        prompt: text("prompt").notNull(),
+        /** The folder the chat works in, or NULL for the agent's own. */
+        cwd: text("cwd"),
+        /** Where it stands. */
+        state: text("state", { enum: ["queued", "starting", "running", "ended"] }).notNull(),
+        /** How it ended, or NULL before then. */
+        outcome: text("outcome", {
+          enum: ["finished", "failed", "stopped", "limit", "interrupted"]
+        }),
+        /** A short note on why it ended the way it did, or NULL. */
+        note: text("note"),
+        /** The chat it started, or NULL before then. */
+        sessionId: text("session_id"),
+        /** The account the chat runs on, or NULL when the usual choice decided. */
+        accountId: text("account_id"),
+        /** Who queued it. */
+        addedBy: text("added_by", { enum: ["person", "agent"] }).notNull(),
+        /** When it was queued (ISO 8601). */
+        createdAt: text("created_at").notNull(),
+        /** When its chat started (ISO 8601), or NULL. */
+        startedAt: text("started_at"),
+        /** When it ended (ISO 8601), or NULL. */
+        endedAt: text("ended_at")
+      },
+      (table2) => [
+        index("agent_work_items_agent_state_idx").on(table2.agentId, table2.state, table2.position),
+        index("agent_work_items_session_idx").on(table2.sessionId),
+        check3(
+          "agent_work_items_state",
+          sql2`${table2.state} IN ('queued', 'starting', 'running', 'ended')`
+        ),
+        check3("agent_work_items_title_length", sql2`length(${table2.title}) <= 80`)
+      ]
+    );
+  }
+});
+
 // ../db/src/schema/heartbeats/heartbeats.ts
 var heartbeatState, heartbeatBeats, heartbeatOutbox, heartbeatReportItems;
 var init_heartbeats = __esm({
@@ -111634,10 +111947,14 @@ __export(schema_exports, {
   account: () => account,
   accountRelations: () => accountRelations,
   activityEvents: () => activityEvents,
+  agentBrowserProfileAgents: () => agentBrowserProfileAgents,
+  agentBrowserProfiles: () => agentBrowserProfiles,
   agentConnectionAttachments: () => agentConnectionAttachments,
   agentDenials: () => agentDenials,
   agentIdentityTokens: () => agentIdentityTokens,
   agentPauses: () => agentPauses,
+  agentWorkItems: () => agentWorkItems,
+  agentWorkQueues: () => agentWorkQueues,
   agents: () => agents,
   apikey: () => apikey,
   approvals: () => approvals,
@@ -111755,6 +112072,7 @@ __export(schema_exports, {
   user: () => user,
   userRelations: () => userRelations,
   verification: () => verification,
+  workQueueControl: () => workQueueControl,
   workspaces: () => workspaces
 });
 var init_schema2 = __esm({
@@ -111800,11 +112118,13 @@ var init_schema2 = __esm({
     init_channel();
     init_file_save_intents();
     init_registry();
+    init_agent_profiles();
     init_session_locations();
     init_session_native_bindings();
     init_session_touches();
     init_chat_messages2();
     init_commitments();
+    init_work_queue();
     init_heartbeats();
     init_remote_commands();
   }
@@ -113910,6 +114230,9 @@ var init_config_disclosure = __esm({
       // Whether cheap checks may run on DorkOS credits (spec `heartbeats` §6.3): a
       // plain yes, no or not answered, so an agent can say where its checks run.
       "heartbeats.triageOnCredits": "expose",
+      // Which room hears "nothing is running" (DOR-3675): a room id, which an agent may read so
+      // it can say where the alert goes. Only a person may change it.
+      "heartbeats.idleAlertRoomId": "expose",
       // How long the Activity feed keeps its rows (spec `audit-trail` §3.5).
       "activity.retentionDays": "expose",
       // Where the company certificates the desktop app trusts live (DOR-3361).
@@ -114684,7 +115007,9 @@ var init_operator_only_stakes = __esm({
           "notifications.sounds.allClear",
           "notifications.sounds.turnEnd",
           "notifications.notifyOnTurnCompleteWhileAway",
-          "notifications.browserPermissionPrimerDismissed"
+          "notifications.browserPermissionPrimerDismissed",
+          // Which room is told nothing is running while work is open (DOR-3675).
+          "heartbeats.idleAlertRoomId"
         ]
       }
     ];
@@ -114896,6 +115221,9 @@ var init_config_write_policy = __esm({
       // Whether cheap checks spend DorkOS credits (spec `heartbeats` §6.3). Only a
       // person's **Use credits** may say yes: it spends the account owner's money.
       "heartbeats.triageOnCredits": "operator-only",
+      // Which room hears "nothing is running" (DOR-3675). An agent that could set it could aim
+      // the alert at a room of its choosing, so it is a person's call.
+      "heartbeats.idleAlertRoomId": "operator-only",
       // How long the Activity feed keeps the history people review (spec
       // `audit-trail` §3.5). Shortening it deletes rows a person may not have read
       // yet; lengthening it spends disk. Either is the person's call.
@@ -115690,14 +116018,14 @@ var init_constants8 = __esm({
        * would trade a real resource ceiling for a case nobody has reported.
        */
       INTERACTION_PARK_CEILING_MS: 4 * 60 * 60 * 1e3,
-      /** Maximum number of concurrent in-memory sessions. */
+      /** Session-record cache size. At capacity, reclaim LRU idle records; refuse only if all are live. */
       MAX_SESSIONS: 50,
       /**
        * How long a WARM session's subprocess may sit with no turn open before it is
        * given back (spec `persistent-session-runtime` §4.3).
        *
        * This is **not** session eviction. `TIMEOUT_MS` retires the session RECORD
-       * after 30 minutes and the person loses their place; this closes a PROCESS
+       * after 30 minutes (or sooner for an idle record at the cap); this closes a PROCESS
        * after 5 minutes and the person cannot tell — the record, the transcript and
        * the conversation are untouched, and the next message resumes. Eviction
        * implies a reap; a reap never implies eviction.
@@ -115719,7 +116047,7 @@ var init_constants8 = __esm({
        * {@link SESSIONS.MAX_WARM_SESSIONS_AUTO}. Twelve was the fixed ceiling until
        * DOR-3012, and a machine with 48 GB filled it with 5.5 GB in use.
        *
-       * It is **not** a refusal ceiling in the way `MAX_SESSIONS` is. Warmth is a
+       * Like the session-record cap, it reclaims idle entries first. Warmth is a
        * cache, so a launch past it reclaims the least recently used warm process,
        * and when nothing is reclaimable — every process mid-turn or parked on a
        * person — it waits for one to come free ({@link SESSIONS.WARM_SLOT_WAIT_MS}).
@@ -117101,6 +117429,196 @@ var init_agent_home = __esm({
   }
 });
 
+// ../../apps/server/src/services/core/turn-power/live-outsider-turns.ts
+function homeKey(dir, forAgent) {
+  try {
+    return homeOf(resolveAgentHome(dir, forAgent));
+  } catch {
+    return void 0;
+  }
+}
+function countWhileRunning(place2, marks, events) {
+  const key = homeKey(place2.cwd, place2.forAgent) ?? UNPLACED;
+  return (async function* counted() {
+    const token = { marks };
+    const turns = running.get(key) ?? /* @__PURE__ */ new Set();
+    turns.add(token);
+    running.set(key, turns);
+    try {
+      yield* events;
+    } finally {
+      turns.delete(token);
+      if (turns.size === 0 && running.get(key) === turns) running.delete(key);
+    }
+  })();
+}
+var UNPLACED, running;
+var init_live_outsider_turns = __esm({
+  "../../apps/server/src/services/core/turn-power/live-outsider-turns.ts"() {
+    "use strict";
+    init_agent_home();
+    UNPLACED = "";
+    running = /* @__PURE__ */ new Map();
+  }
+});
+
+// ../../apps/server/src/services/core/turn-power/teammate-mark.ts
+function teammateTurnRefusal(origins) {
+  const gate = spaceAllows;
+  if (gate && origins.some((origin) => !gate(origin.roomId))) return TEAMMATE_LIMIT_REFUSAL;
+  return null;
+}
+var TEAMMATE_LIMIT_REFUSAL, spaceAllows;
+var init_teammate_mark = __esm({
+  "../../apps/server/src/services/core/turn-power/teammate-mark.ts"() {
+    "use strict";
+    TEAMMATE_LIMIT_REFUSAL = "This space reached its monthly limit for teammates, so this turn didn\u2019t run.";
+    spaceAllows = null;
+  }
+});
+
+// ../../apps/server/src/services/core/turn-power/turn-marks.ts
+function presentKinds(marks) {
+  return TURN_MARK_KINDS.filter((kind) => marks[kind] !== void 0);
+}
+function marksFrom(fields) {
+  const kinds = presentKinds(fields);
+  if (kinds.length === 0) return NO_MARKS;
+  return Object.fromEntries(kinds.map((kind) => [kind, fields[kind]]));
+}
+function teammateOrigins(marks) {
+  return marks.teammate ?? [];
+}
+function marksOfLevel(level) {
+  return level === void 0 ? NO_MARKS : marksFrom(level);
+}
+function marksOfCeiling(ceiling) {
+  if (!Array.isArray(ceiling)) {
+    return ceiling === "runtime-default" ? UNKNOWN_SOURCE : marksOfLevel(ceiling);
+  }
+  const bounds = ceiling;
+  if (bounds.length === 0) return UNKNOWN_SOURCE;
+  return bounds.map(marksOfCeiling).reduce(mergeMarks, NO_MARKS);
+}
+function marksForTurn(opts) {
+  const ceiling = opts?.continuationHold === true ? withoutContinuationBound(opts.permissionCeiling) : opts?.permissionCeiling;
+  const fromCeiling = ceiling !== void 0 ? marksOfCeiling(ceiling) : NO_MARKS;
+  return opts?.carriedMarks?.outsider === true ? mergeMarks(fromCeiling, { outsider: true }) : fromCeiling;
+}
+function withoutContinuationBound(ceiling) {
+  if (ceiling === void 0 || ceiling === "runtime-default") return void 0;
+  if (!Array.isArray(ceiling)) return ceiling;
+  const bounds = [...ceiling];
+  const at = bounds.indexOf("runtime-default");
+  if (at !== -1) bounds.splice(at, 1);
+  return bounds.length === 0 ? void 0 : bounds;
+}
+function mergeMarks(a2, b2) {
+  const merged = {};
+  for (const kind of TURN_MARK_KINDS) {
+    const rules = RULES[kind];
+    const value = rules.merge(a2[kind], b2[kind]);
+    if (value !== void 0) merged[kind] = value;
+  }
+  return marksFrom(merged);
+}
+function hasMarks(marks) {
+  return presentKinds(marks).length > 0;
+}
+function carriesAllMarks(receiver, sender) {
+  return TURN_MARK_KINDS.every(
+    (kind) => RULES[kind].covers(receiver[kind], sender[kind])
+  );
+}
+function withMarks(level, marks) {
+  const own2 = marksOfLevel(level);
+  if (carriesAllMarks(own2, marks)) return level;
+  return { ...level, ...mergeMarks(own2, marks) };
+}
+async function* refused(reason) {
+  yield* [];
+  throw new Error(reason);
+}
+function placeOf(runtime, sessionId, opts) {
+  let cwd = opts?.cwd ?? opts?.roomTurn?.cwd;
+  try {
+    cwd ??= runtime.getSessionCwd?.(sessionId);
+  } catch {
+  }
+  return { cwd, forAgent: turnAgentOf(opts) };
+}
+function applyTurnMarks(runtime, marksOfSession, recordRefused) {
+  const places = /* @__PURE__ */ new Map();
+  function markedTurn(target, sessionId, opts, start) {
+    const marks = marksForTurn(opts);
+    if (!hasMarks(marks)) return start(opts);
+    if (marks.teammate !== void 0) {
+      const refusal2 = teammateTurnRefusal(marks.teammate);
+      if (refusal2 !== null) {
+        if (opts) recordRefused?.(sessionId, opts);
+        return refused(refusal2);
+      }
+    }
+    const place2 = placeOf(target, sessionId, opts);
+    places.delete(sessionId);
+    places.set(sessionId, place2);
+    if (places.size > PLACE_MEMORY) places.delete(places.keys().next().value);
+    return countWhileRunning(place2, marks, start(opts));
+  }
+  return new Proxy(runtime, {
+    get(target, prop) {
+      if ((prop === "sendMessage" || prop === "executeCommandIntent") && typeof target[prop] === "function") {
+        const start = target[prop].bind(target);
+        return (sessionId, input4, opts) => markedTurn(target, sessionId, opts, (sent) => start(sessionId, input4, sent));
+      }
+      if (prop === "onRuntimeTurn" && typeof target.onRuntimeTurn === "function") {
+        const subscribe = target.onRuntimeTurn.bind(target);
+        return (listener) => subscribe((sessionId, events) => {
+          const marks = marksOfSession(sessionId);
+          listener(
+            sessionId,
+            hasMarks(marks) ? countWhileRunning(
+              places.get(sessionId) ?? placeOf(target, sessionId, void 0),
+              marks,
+              events
+            ) : events
+          );
+        });
+      }
+      const value = Reflect.get(target, prop, target);
+      return typeof value === "function" ? value.bind(target) : value;
+    }
+  });
+}
+var TURN_MARK_KINDS, NO_MARKS, PLACE_MEMORY, UNKNOWN_SOURCE, sameOrigin, RULES;
+var init_turn_marks = __esm({
+  "../../apps/server/src/services/core/turn-power/turn-marks.ts"() {
+    "use strict";
+    init_permission_semantics();
+    init_agent_home();
+    init_live_outsider_turns();
+    init_teammate_mark();
+    TURN_MARK_KINDS = [
+      "outsider",
+      "teammate"
+    ];
+    NO_MARKS = Object.freeze({});
+    PLACE_MEMORY = 1e4;
+    UNKNOWN_SOURCE = Object.freeze({ outsider: true });
+    sameOrigin = (a2, b2) => a2.roomId === b2.roomId && a2.authorId === b2.authorId;
+    RULES = {
+      outsider: {
+        merge: (a2, b2) => a2 === true || b2 === true ? true : void 0,
+        covers: (outer, inner) => inner !== true || outer === true
+      },
+      teammate: {
+        merge: (a2, b2) => mergeTeammateOrigins(a2, b2),
+        covers: (outer, inner) => inner === void 0 || outer !== void 0 && inner.every((origin) => outer.some((o3) => sameOrigin(o3, origin)))
+      }
+    };
+  }
+});
+
 // ../../apps/server/src/services/session/turn-identity/durable-rekey.ts
 var init_durable_rekey = __esm({
   "../../apps/server/src/services/session/turn-identity/durable-rekey.ts"() {
@@ -118638,8 +119156,8 @@ var init_devtools_capture_store = __esm({
        * @param pending - The recording id and working directory to write under.
        * @param timeoutMs - How long to wait before giving up on the window.
        */
-      awaitRecording(requestId, pending2, timeoutMs) {
-        this.pendingRecordings.set(requestId, pending2);
+      awaitRecording(requestId, pending, timeoutMs) {
+        this.pendingRecordings.set(requestId, pending);
         return new Promise((resolve14) => {
           const timer = setTimeout(() => {
             this.recordingWaiters.delete(requestId);
@@ -118660,17 +119178,17 @@ var init_devtools_capture_store = __esm({
        * @param requestId - The round trip id the upload carries.
        */
       pendingRecording(requestId) {
-        const pending2 = this.pendingRecordings.get(requestId);
-        return pending2 ? { ...pending2 } : void 0;
+        const pending = this.pendingRecordings.get(requestId);
+        return pending ? { ...pending } : void 0;
       }
       /** Recording uploads require the pinned live claim, even while decoder/encoder work is finishing. */
       admitsRecording(requestId, actual) {
-        const pending2 = this.pendingRecordings.get(requestId);
-        if (!pending2 || !matchesBinding(pending2.binding ?? {}, actual)) return false;
-        if (!pending2.binding) return true;
+        const pending = this.pendingRecordings.get(requestId);
+        if (!pending || !matchesBinding(pending.binding ?? {}, actual)) return false;
+        if (!pending.binding) return true;
         return [...this.buffers.values()].some(
           (buffer) => buffer.drivers.some(
-            (claim2) => matchesBinding(pending2.binding, claim2) && claim2.activeAt >= Date.now() - WORKBENCH.DEVTOOLS_SEAT_STALE_MS
+            (claim2) => matchesBinding(pending.binding, claim2) && claim2.activeAt >= Date.now() - WORKBENCH.DEVTOOLS_SEAT_STALE_MS
           )
         );
       }
@@ -119083,287 +119601,9 @@ var init_session_key_registry = __esm({
   }
 });
 
-// ../../apps/server/src/services/session/origin/outsider-turns.ts
-import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
-function noteLatest(sessionId, outsider) {
-  const key = primaryOf(sessionId);
-  latest.set(key, outsider);
-  if (outsider) heard.add(key);
-}
-function isOutsiderOrigin(origin) {
-  if (origin.kind === "room") return origin.externalAuthor;
-  return OUTSIDER_ORIGIN_KINDS.has(origin.kind);
-}
-function noteTurnOrigin(sessionId, origin) {
-  const messageId = holdingFor.getStore();
-  if (messageId === void 0) {
-    noteLatest(sessionId, isOutsiderOrigin(origin));
-    return;
-  }
-  pending.set(messageId, isOutsiderOrigin(origin));
-  if (pending.size > PENDING_MAX) pending.delete(pending.keys().next().value);
-}
-function noteChatHeardOutsider(sessionId) {
-  heard.add(primaryOf(sessionId));
-}
-var OUTSIDER_ORIGIN_KINDS, latest, heard, pending, PENDING_MAX, holdingFor;
-var init_outsider_turns = __esm({
-  "../../apps/server/src/services/session/origin/outsider-turns.ts"() {
-    "use strict";
-    init_session_key_registry();
-    OUTSIDER_ORIGIN_KINDS = /* @__PURE__ */ new Set([
-      "relay-binding",
-      "outside-sender",
-      "connector-event"
-    ]);
-    latest = /* @__PURE__ */ new Map();
-    heard = /* @__PURE__ */ new Set();
-    pending = /* @__PURE__ */ new Map();
-    PENDING_MAX = 1e3;
-    holdingFor = new AsyncLocalStorage5();
-  }
-});
-
-// ../../apps/server/src/services/core/turn-power/live-outsider-turns.ts
-function homeKey(dir, forAgent) {
-  try {
-    return homeOf(resolveAgentHome(dir, forAgent));
-  } catch {
-    return void 0;
-  }
-}
-function countWhileRunning(place2, marks, events) {
-  const key = homeKey(place2.cwd, place2.forAgent) ?? UNPLACED;
-  return (async function* counted() {
-    const token = { marks };
-    const turns = running.get(key) ?? /* @__PURE__ */ new Set();
-    turns.add(token);
-    running.set(key, turns);
-    try {
-      yield* events;
-    } finally {
-      turns.delete(token);
-      if (turns.size === 0 && running.get(key) === turns) running.delete(key);
-    }
-  })();
-}
-var UNPLACED, running;
-var init_live_outsider_turns = __esm({
-  "../../apps/server/src/services/core/turn-power/live-outsider-turns.ts"() {
-    "use strict";
-    init_agent_home();
-    UNPLACED = "";
-    running = /* @__PURE__ */ new Map();
-  }
-});
-
-// ../../apps/server/src/services/core/turn-power/teammate-mark.ts
-function runsTeammateTurns(runtimeType) {
-  return TEAMMATE_TURN_RUNTIMES.has(runtimeType);
-}
-function teammateRuntimeRefusal(runtimeType) {
-  return `A teammate's message cannot start a turn on ${runtimeType} yet`;
-}
-function teammateTurnRefusal(runtimeType, origins) {
-  if (!runsTeammateTurns(runtimeType)) return teammateRuntimeRefusal(runtimeType);
-  const gate = spaceAllows;
-  if (gate && origins.some((origin) => !gate(origin.roomId))) return TEAMMATE_LIMIT_REFUSAL;
-  return null;
-}
-function teammateTurnOpts(opts) {
-  const { additionalDirectories: _granted, ...rest } = opts ?? {};
-  return {
-    ...rest,
-    teammate: true,
-    unattended: true,
-    permissionCeiling: withReadOnly(opts?.permissionCeiling),
-    ...opts?.roomTurn ? { roomTurn: { ...opts.roomTurn, teammate: true, untrustedText: true } } : {}
-  };
-}
-function withReadOnly(ceiling) {
-  if (ceiling === void 0) return READ_ONLY_LEVEL;
-  if (Array.isArray(ceiling) && ceiling.length === 0) return ["runtime-default", READ_ONLY_LEVEL];
-  const bounds = Array.isArray(ceiling) ? ceiling : [ceiling];
-  return [...bounds, READ_ONLY_LEVEL];
-}
-var TEAMMATE_TURN_RUNTIMES, TEAMMATE_LIMIT_REFUSAL, spaceAllows;
-var init_teammate_mark = __esm({
-  "../../apps/server/src/services/core/turn-power/teammate-mark.ts"() {
-    "use strict";
-    init_permission_semantics();
-    TEAMMATE_TURN_RUNTIMES = /* @__PURE__ */ new Set(["claude-code", "test-mode"]);
-    TEAMMATE_LIMIT_REFUSAL = "This space reached its monthly limit for teammates, so this turn didn\u2019t run.";
-    spaceAllows = null;
-  }
-});
-
-// ../../apps/server/src/services/core/turn-power/turn-marks.ts
-function presentKinds(marks) {
-  return TURN_MARK_KINDS.filter((kind) => marks[kind] !== void 0);
-}
-function marksFrom(fields) {
-  const kinds = presentKinds(fields);
-  if (kinds.length === 0) return NO_MARKS;
-  return Object.fromEntries(kinds.map((kind) => [kind, fields[kind]]));
-}
-function teammateOrigins(marks) {
-  return marks.teammate ?? [];
-}
-function marksOfLevel(level) {
-  return level === void 0 ? NO_MARKS : marksFrom(level);
-}
-function marksOfCeiling(ceiling) {
-  if (!Array.isArray(ceiling)) {
-    return ceiling === "runtime-default" ? UNKNOWN_SOURCE : marksOfLevel(ceiling);
-  }
-  const bounds = ceiling;
-  if (bounds.length === 0) return UNKNOWN_SOURCE;
-  return bounds.map(marksOfCeiling).reduce(mergeMarks, NO_MARKS);
-}
-function marksForTurn(opts) {
-  const ceiling = opts?.continuationHold === true ? withoutContinuationBound(opts.permissionCeiling) : opts?.permissionCeiling;
-  const fromCeiling = ceiling !== void 0 ? marksOfCeiling(ceiling) : NO_MARKS;
-  return mergeMarks(
-    fromCeiling,
-    opts?.roomTurn?.outsiderInView === true ? { outsider: true } : NO_MARKS
-  );
-}
-function withoutContinuationBound(ceiling) {
-  if (ceiling === void 0 || ceiling === "runtime-default") return void 0;
-  if (!Array.isArray(ceiling)) return ceiling;
-  const bounds = [...ceiling];
-  const at = bounds.indexOf("runtime-default");
-  if (at !== -1) bounds.splice(at, 1);
-  return bounds.length === 0 ? void 0 : bounds;
-}
-function mergeMarks(a2, b2) {
-  const merged = {};
-  for (const kind of TURN_MARK_KINDS) {
-    const rules = RULES[kind];
-    const value = rules.merge(a2[kind], b2[kind]);
-    if (value !== void 0) merged[kind] = value;
-  }
-  return marksFrom(merged);
-}
-function hasMarks(marks) {
-  return presentKinds(marks).length > 0;
-}
-function carriesAllMarks(receiver, sender) {
-  return TURN_MARK_KINDS.every(
-    (kind) => RULES[kind].covers(receiver[kind], sender[kind])
-  );
-}
-function withMarks(level, marks) {
-  const own2 = marksOfLevel(level);
-  if (carriesAllMarks(own2, marks)) return level;
-  return { ...level, ...mergeMarks(own2, marks) };
-}
-function withCarriedHold(runtimeType, opts, setToFull = false) {
-  const ceiling = opts?.permissionCeiling;
-  if (ceiling === void 0 || setToFull || GATES_CARRIED_SHELL.has(runtimeType)) return opts;
-  if (ceilingHoldsForOutsider(ceiling) || marksOfCeiling(ceiling).outsider !== true) return opts;
-  const bounds = Array.isArray(ceiling) ? [...ceiling] : [ceiling];
-  bounds.push("runtime-default");
-  const { continuationHold: _dropped, ...rest } = opts ?? {};
-  return { ...rest, permissionCeiling: bounds.length === 1 ? bounds[0] : bounds };
-}
-async function* refused(reason) {
-  yield* [];
-  throw new Error(reason);
-}
-function placeOf(runtime, sessionId, opts) {
-  let cwd = opts?.cwd ?? opts?.roomTurn?.cwd;
-  try {
-    cwd ??= runtime.getSessionCwd?.(sessionId);
-  } catch {
-  }
-  return { cwd, forAgent: turnAgentOf(opts) };
-}
-function applyTurnMarks(runtime, marksOfSession, recordRefused, setToFull) {
-  const places = /* @__PURE__ */ new Map();
-  function markedTurn(target, sessionId, opts, start) {
-    const marks = marksForTurn(opts);
-    if (!hasMarks(marks)) return start(opts);
-    if (marks.outsider === true) noteChatHeardOutsider(sessionId);
-    let sent = withCarriedHold(target.type, opts, setToFull?.(sessionId, opts) === true);
-    if (marks.teammate !== void 0) {
-      sent = teammateTurnOpts(opts);
-      const refusal2 = teammateTurnRefusal(target.type, marks.teammate);
-      if (refusal2 !== null) {
-        recordRefused?.(sessionId, sent);
-        return refused(refusal2);
-      }
-    }
-    const place2 = placeOf(target, sessionId, sent);
-    places.delete(sessionId);
-    places.set(sessionId, place2);
-    if (places.size > PLACE_MEMORY) places.delete(places.keys().next().value);
-    return countWhileRunning(place2, marks, start(sent));
-  }
-  return new Proxy(runtime, {
-    get(target, prop) {
-      if ((prop === "sendMessage" || prop === "executeCommandIntent") && typeof target[prop] === "function") {
-        const start = target[prop].bind(target);
-        return (sessionId, input4, opts) => markedTurn(target, sessionId, opts, (sent) => start(sessionId, input4, sent));
-      }
-      if (prop === "onRuntimeTurn" && typeof target.onRuntimeTurn === "function") {
-        const subscribe = target.onRuntimeTurn.bind(target);
-        return (listener) => subscribe((sessionId, events) => {
-          const marks = marksOfSession(sessionId);
-          listener(
-            sessionId,
-            hasMarks(marks) ? countWhileRunning(
-              places.get(sessionId) ?? placeOf(target, sessionId, void 0),
-              marks,
-              events
-            ) : events
-          );
-        });
-      }
-      const value = Reflect.get(target, prop, target);
-      return typeof value === "function" ? value.bind(target) : value;
-    }
-  });
-}
-var TURN_MARK_KINDS, NO_MARKS, PLACE_MEMORY, UNKNOWN_SOURCE, sameOrigin, RULES, GATES_CARRIED_SHELL;
-var init_turn_marks = __esm({
-  "../../apps/server/src/services/core/turn-power/turn-marks.ts"() {
-    "use strict";
-    init_permission_semantics();
-    init_agent_home();
-    init_outsider_turns();
-    init_live_outsider_turns();
-    init_teammate_mark();
-    TURN_MARK_KINDS = [
-      "outsider",
-      "teammate"
-    ];
-    NO_MARKS = Object.freeze({});
-    PLACE_MEMORY = 1e4;
-    UNKNOWN_SOURCE = Object.freeze({ outsider: true });
-    sameOrigin = (a2, b2) => a2.roomId === b2.roomId && a2.authorId === b2.authorId;
-    RULES = {
-      outsider: {
-        merge: (a2, b2) => a2 === true || b2 === true ? true : void 0,
-        covers: (outer, inner) => inner !== true || outer === true
-      },
-      teammate: {
-        merge: (a2, b2) => mergeTeammateOrigins(a2, b2),
-        covers: (outer, inner) => inner === void 0 || outer !== void 0 && inner.every((origin) => outer.some((o3) => sameOrigin(o3, origin)))
-      }
-    };
-    GATES_CARRIED_SHELL = /* @__PURE__ */ new Set(["claude-code"]);
-  }
-});
-
 // ../../apps/server/src/services/core/turn-power/continuation-hold.ts
-function noteTurnHold(sessionId, held2, carried = false) {
+function noteTurnHold(sessionId, held2) {
   const key = primaryOf(sessionId);
-  carriedOnly.delete(key);
-  if (held2 && carried) {
-    carriedOnly.add(key);
-    if (carriedOnly.size > WRITTEN_MAX) carriedOnly.delete(carriedOnly.values().next().value);
-  }
   if (!db) return;
   if (written.get(key) === held2) return;
   try {
@@ -119383,17 +119623,15 @@ function noteTurnHold(sessionId, held2, carried = false) {
     });
   }
 }
-var db, written, WRITTEN_MAX, carriedOnly;
+var db, written, WRITTEN_MAX;
 var init_continuation_hold = __esm({
   "../../apps/server/src/services/core/turn-power/continuation-hold.ts"() {
     "use strict";
     init_src2();
-    init_permission_semantics();
     init_session_key_registry();
     init_logger();
     written = /* @__PURE__ */ new Map();
     WRITTEN_MAX = 1e4;
-    carriedOnly = /* @__PURE__ */ new Set();
   }
 });
 
@@ -119566,9 +119804,7 @@ function recordTurnLevels(runtime, storedModeOf) {
     (sessionId) => marksOfLevel(turnLevels.get(sessionId)),
     (sessionId, opts) => {
       recordTurn(runtime, sessionId, storedOf2(sessionId), opts);
-    },
-    // A chat set to Full is never held for a mark it carries (DOR-3394).
-    (sessionId, opts) => isFullLevel(chosenLevelOf(runtime, storedOf2(sessionId), opts))
+    }
   );
 }
 function recordLevels(runtime, storedModeOf) {
@@ -119584,12 +119820,7 @@ function recordLevels(runtime, storedModeOf) {
             stored = void 0;
           }
           const level = recordTurn(target, sessionId, stored, opts);
-          if (opts?.continuationHold !== true) {
-            const held2 = level.outsider === true;
-            const ceiling = opts?.permissionCeiling;
-            const carried = held2 && !(ceiling !== void 0 && ceilingHoldsForOutsider(ceiling));
-            noteTurnHold(sessionId, held2, carried);
-          }
+          if (opts?.continuationHold !== true) noteTurnHold(sessionId, level.outsider === true);
           const serial = ++nextTurnSerial;
           for (const id of /* @__PURE__ */ new Set([sessionId, primaryOf(sessionId)])) {
             turnSerials.delete(id);
@@ -119612,7 +119843,6 @@ var init_turn_levels = __esm({
     "use strict";
     init_turn_marks();
     init_session_key_registry();
-    init_outsider_turns();
     init_continuation_hold();
     init_full_autonomy();
     init_permission_semantics();
@@ -119785,10 +120015,7 @@ function permissionSeedForOrigin(origin) {
     // The owner on the web, with the chat's stream open through the relay. A
     // new chat is born at the operator's configured stop, as one started here
     // is, so the chat is the same chat when its owner comes back to this
-    // computer. What a relayed TURN may do is bounded separately: every one is
-    // held to the runtime's default by the relay (`RELAY_TURN_CEILING`), so it
-    // asks before anything that needs a person (spec `everything-is-a-space`
-    // B2, the operator's option 2).
+    // computer.
     case "session-relay":
       return "configured-stop";
     // Nobody is watching a room turn either, and that is the reason it follows
@@ -119818,12 +120045,8 @@ function permissionSeedForOrigin(origin) {
     // own: the turn runs at the stricter of the two. On insert only, so an
     // existing chat a person set keeps what they chose. A person who later
     // types into it gets the same stop a chat of their own starts at.
-    //
-    // A message from a MARKED turn seeds nothing (DOR-3107, Security): the
-    // chat it opens never inherits the agent's own level from a turn a
-    // stranger's words reached.
     case "chat-message":
-      return origin.marked ? "none" : "configured-stop-on-insert";
+      return "configured-stop-on-insert";
     // Everything below seeds nothing, for two different reasons.
     //
     // A schedule's power is already decided and already stored, on the schedule
@@ -119868,14 +120091,9 @@ function permissionSeedForOrigin(origin) {
     }
   }
 }
-function seedForTurn(sessionId, origin) {
-  noteTurnOrigin(sessionId, origin);
-  return permissionSeedForOrigin(origin);
-}
 var init_turn_origin = __esm({
   "../../apps/server/src/services/session/origin/turn-origin.ts"() {
     "use strict";
-    init_outsider_turns();
   }
 });
 
@@ -121325,16 +121543,6 @@ var init_existing_chats_raise = __esm({
   }
 });
 
-// ../../apps/server/src/services/core/permissions/chat-launch-marks.ts
-var init_chat_launch_marks = __esm({
-  "../../apps/server/src/services/core/permissions/chat-launch-marks.ts"() {
-    "use strict";
-    init_src2();
-    init_turn_marks();
-    init_existing_chats_raise();
-  }
-});
-
 // ../../apps/server/src/services/core/turn-power/chat-rise-facts.ts
 function chatRiseFacts() {
   return facts;
@@ -121344,10 +121552,7 @@ var init_chat_rise_facts = __esm({
   "../../apps/server/src/services/core/turn-power/chat-rise-facts.ts"() {
     "use strict";
     init_src2();
-    init_chat_launch_marks();
     init_session_key_registry();
-    init_outsider_turns();
-    init_continuation_hold();
     init_logger();
     facts = null;
   }
@@ -121410,10 +121615,7 @@ async function agentOfTurn(runtime, sessionId, opts, recordedAgentOf) {
 }
 function turnIsMarked(opts) {
   const ceiling = opts?.permissionCeiling;
-  if (ceiling !== void 0 && ceilingHoldsForOutsider(ceiling)) return true;
-  if (opts?.teammate === true || opts?.roomTurn?.teammate === true) return true;
-  if (opts?.roomTurn?.outsiderInView === true) return true;
-  return marksForTurn(opts).teammate !== void 0;
+  return ceiling !== void 0 && ceilingHoldsForOutsider(ceiling);
 }
 function rises(runtime, sessionId, agentPath, stored, levelMode, opts) {
   if (opts?.permissionMode !== void 0 || opts?.unattended === true) return false;
@@ -121519,7 +121721,6 @@ var init_agent_level_bound = __esm({
     init_agent_launch_level();
     init_existing_chats_raise();
     init_chat_rise_facts();
-    init_turn_marks();
     init_logger();
     COMPUTER_LOCAL_RUNTIME = "computer-local";
   }
@@ -122372,7 +122573,7 @@ function toolFields(event) {
   };
 }
 async function* recordDuring(runtime, sessionId, opts, source) {
-  const pending2 = /* @__PURE__ */ new Map();
+  const pending = /* @__PURE__ */ new Map();
   const seen = /* @__PURE__ */ new Set();
   let actor;
   const actorOf = () => actor ??= toolActorOf(runtime.type, opts);
@@ -122415,15 +122616,15 @@ async function* recordDuring(runtime, sessionId, opts, source) {
     seen.add(fields.id);
     if (isFinished(sessionId, fields.id)) return;
     const earlier = stillRunning.get(sessionId)?.get(fields.id);
-    let call = pending2.get(fields.id);
+    let call = pending.get(fields.id);
     if (!call && earlier) {
       call = { name: earlier.name, input: earlier.input, inputDone: true };
-      pending2.set(fields.id, call);
+      pending.set(fields.id, call);
     }
     if (!call) {
       if (!fields.name || isDorkosTool(runtime.type, fields.name)) return;
       call = { name: fields.name, input: "", inputDone: false };
-      pending2.set(fields.id, call);
+      pending.set(fields.id, call);
     }
     if (event.type === "tool_call_end" || event.type !== "tool_call_delta" && fields.input !== void 0 && fields.input !== "") {
       call.inputDone = true;
@@ -122432,7 +122633,7 @@ async function* recordDuring(runtime, sessionId, opts, source) {
       call.input = event.type === "tool_call_delta" ? (call.input + fields.input).slice(0, MAX_INPUT) : fields.input.slice(0, MAX_INPUT);
     }
     if (fields.status === "complete" || fields.status === "error") {
-      pending2.delete(fields.id);
+      pending.delete(fields.id);
       const finishedCall = earlier ?? callOf(fields.id, call);
       if (finishedCall) {
         recordRuntimeToolCall(
@@ -122451,7 +122652,7 @@ async function* recordDuring(runtime, sessionId, opts, source) {
       yield event;
     }
   } finally {
-    for (const [toolCallId, call] of pending2) {
+    for (const [toolCallId, call] of pending) {
       if (!call.inputDone) continue;
       try {
         const running2 = callOf(toolCallId, call);
@@ -122733,22 +122934,7 @@ var init_decorate_runtime = __esm({
   }
 });
 
-// ../../apps/server/src/services/core/runtime-registry.ts
-function rowToSettings(row2) {
-  const settings = {};
-  if (row2.permissionMode != null) settings.permissionMode = row2.permissionMode;
-  if (row2.model != null) settings.model = row2.model;
-  if (row2.effort != null) {
-    const effort = EffortLevelSchema.safeParse(row2.effort);
-    if (effort.success) settings.effort = effort.data;
-    else
-      logger.warn("[RuntimeRegistry] ignoring an unreadable stored effort level", {
-        stored: row2.effort
-      });
-  }
-  if (row2.fastMode != null) settings.fastMode = row2.fastMode;
-  return settings;
-}
+// ../../apps/server/src/services/core/runtime-seam/session-metadata-columns.ts
 function pickSettings(settings) {
   const patch = {};
   if (settings.permissionMode !== void 0) patch.permissionMode = settings.permissionMode;
@@ -122765,6 +122951,37 @@ function fillNullsWith(seed) {
   }
   return update;
 }
+function launchColumns(origin, claim2) {
+  const launchedBy = origin.kind === "agent-launch" ? origin.launchedBy : void 0;
+  if (!claim2) return { launchOrigin: origin.kind, ...launchedBy ? { launchedBy } : {} };
+  return {
+    launchOrigin: sql2`coalesce(${sessionMetadata.launchOrigin}, ${origin.kind})`,
+    ...launchedBy ? { launchedBy: sql2`coalesce(${sessionMetadata.launchedBy}, ${launchedBy})` } : {}
+  };
+}
+var init_session_metadata_columns = __esm({
+  "../../apps/server/src/services/core/runtime-seam/session-metadata-columns.ts"() {
+    "use strict";
+    init_src2();
+  }
+});
+
+// ../../apps/server/src/services/core/runtime-registry.ts
+function rowToSettings(row2) {
+  const settings = {};
+  if (row2.permissionMode != null) settings.permissionMode = row2.permissionMode;
+  if (row2.model != null) settings.model = row2.model;
+  if (row2.effort != null) {
+    const effort = EffortLevelSchema.safeParse(row2.effort);
+    if (effort.success) settings.effort = effort.data;
+    else
+      logger.warn("[RuntimeRegistry] ignoring an unreadable stored effort level", {
+        stored: row2.effort
+      });
+  }
+  if (row2.fastMode != null) settings.fastMode = row2.fastMode;
+  return settings;
+}
 function moveSessionContext(db2, fromId, toId) {
   const source = db2.select().from(sessionContext).where(eq(sessionContext.sessionId, fromId)).get();
   if (!source) return;
@@ -122799,6 +123016,7 @@ var init_runtime_registry = __esm({
     init_session_started_by_store();
     init_session_touch_store();
     init_decorate_runtime();
+    init_session_metadata_columns();
     BOUND_RUNTIME_CHUNK_SIZE = 500;
     RuntimeNotRegisteredError = class extends Error {
       constructor(runtime, sessionId) {
@@ -122916,7 +123134,7 @@ var init_runtime_registry = __esm({
       async persistSessionRuntime(sessionId, runtime, origin, agentPath) {
         const db2 = this.requireDb("persistSessionRuntime");
         const agent = await readAgentExecutionDefaults(agentPath);
-        const seedPolicy = seedForTurn(sessionId, origin);
+        const seedPolicy = permissionSeedForOrigin(origin);
         const seed = this.seedForNewRow(runtime, { agent, seedPolicy });
         const result2 = await db2.insert(sessionMetadata).values({
           sessionId,
@@ -122925,7 +123143,7 @@ var init_runtime_registry = __esm({
           // What started it, server-held and never overwritten: the fact that
           // decides whether a limited session may carry its work to another
           // account (spec `claude-account-fleet` D9).
-          launchOrigin: origin.kind,
+          ...launchColumns(origin),
           createdAt: (/* @__PURE__ */ new Date()).toISOString(),
           ...seed
         }).onConflictDoUpdate({
@@ -122938,7 +123156,7 @@ var init_runtime_registry = __esm({
             ...agentPath !== void 0 ? { agentPath } : {},
             ...fillNullsWith(seed),
             // The claim names what started the session only when nothing has yet.
-            launchOrigin: sql2`coalesce(${sessionMetadata.launchOrigin}, ${origin.kind})`,
+            ...launchColumns(origin, "claim"),
             // **The UPDATE branch is a CLAIM, and not every origin may seed one.**
             // This row already exists: something created it before the session
             // started, which for a person is their own pre-launch settings change
@@ -123525,6 +123743,7 @@ var init_runtime_registry = __esm({
             fastMode: destination.fastMode ?? source.fastMode,
             agentPath: destination.agentPath ?? source.agentPath,
             launchOrigin: destination.launchOrigin ?? source.launchOrigin,
+            launchedBy: destination.launchedBy ?? source.launchedBy,
             lastAutoResumeFor: destination.lastAutoResumeFor ?? source.lastAutoResumeFor
           }).where(eq(sessionMetadata.sessionId, toId)).run();
         });
@@ -124254,9 +124473,13 @@ var init_safe_git = __esm({
         "blame\\.ignorerevsfile",
         "rerere\\.enabled",
         "lfs\\.repositoryformatversion",
-        "gtr\\.[a-z.]+",
-        "gc\\.[a-z]+",
-        "maintenance\\.[a-z.]+",
+        // Named keys only, never a whole section: `gc.recentObjectsHook` is a
+        // shell command gc runs, and a commit or fetch can start gc by itself
+        // (DOR-3667). `gtr.*` is read by git-worktree-runner, never by git; its
+        // hook and editor keys name programs, so they are left out too.
+        "gtr\\.(?:worktrees\\.(?:dir|prefix)|defaults\\.branch|copy\\.(?:include|exclude|includedirs|excludedirs))",
+        "gc\\.(?:auto|autopacklimit|autodetach|aggressivedepth|aggressivewindow|bigpackthreshold|cruftpacks|maxcruftsize|logexpiry|packrefs|pruneexpire|worktreepruneexpire|reflogexpire|reflogexpireunreachable|rerereresolved|rerereunresolved|writecommitgraph)",
+        "maintenance\\.(?:auto|autodetach|strategy|(?:gc|commit-graph|prefetch|loose-objects|incremental-repack|pack-refs|reflog-expire|worktree-prune|rerere-gc)\\.(?:enabled|schedule|auto)|loose-objects\\.batchsize)",
         "fetch\\.(?:prune|writecommitgraph)",
         "pull\\.rebase",
         "user\\.(?:name|email)"
@@ -124857,18 +125080,18 @@ var init_project_registry = __esm({
        */
       async withSlot(extensionId, root, name2) {
         if (this.reporters.get(root)?.has(extensionId)) return name2();
-        let pending2 = this.reserved.get(extensionId);
-        if (pending2?.has(root)) return name2();
-        if (this.namedBy(extensionId) + (pending2?.size ?? 0) >= MAX_REPORTED_ROOTS_PER_EXTENSION) {
+        let pending = this.reserved.get(extensionId);
+        if (pending?.has(root)) return name2();
+        if (this.namedBy(extensionId) + (pending?.size ?? 0) >= MAX_REPORTED_ROOTS_PER_EXTENSION) {
           return null;
         }
-        if (!pending2) this.reserved.set(extensionId, pending2 = /* @__PURE__ */ new Set());
-        pending2.add(root);
+        if (!pending) this.reserved.set(extensionId, pending = /* @__PURE__ */ new Set());
+        pending.add(root);
         try {
           return await name2();
         } finally {
-          pending2.delete(root);
-          if (pending2.size === 0) this.reserved.delete(extensionId);
+          pending.delete(root);
+          if (pending.size === 0) this.reserved.delete(extensionId);
         }
       }
       /**
@@ -133822,7 +134045,9 @@ call.
   the repository is refused. Copy the real content in and commit that instead;
   when the source changes, copy it again.
 - **This room does not have files of its own**: most rooms are conversations.
-  There is nothing to merge into, so answer in the room instead.
+  There is nothing to merge into. If this room's work needs shared files, use the
+  tool whose name ends in \`set_up_room_files\`: you don't need to ask anyone, and
+  your copy appears on your next turn. Otherwise answer in the room instead.
 
 ## Your own code
 
@@ -133862,7 +134087,7 @@ var init_using_the_agent_browser = __esm({
     init_tool_name_note();
     usingTheAgentBrowser = {
       name: "using-the-agent-browser",
-      description: "Use when you browse a website that needs a sign-in, when a page you opened asks you to sign in, or when the user mentions the signed-in browser or the agent browser. Covers what your browser starts signed in to, why you never type or ask for a password, what to ask the person to run when a sign-in is missing or expired, and how to check which sites are saved.",
+      description: "Use when you browse a website that needs a sign-in, when a page you opened asks you to sign in, or when the user mentions the signed-in browser or the agent browser. Covers what your browser starts signed in to, why you never type or ask for a password, what to do when a browser tool fails or a sign-in is missing, and how to check which sites are saved.",
       body: `# Using the agent browser
 
 ${TOOL_NAME_NOTE}
@@ -133882,6 +134107,10 @@ Two sets of tools can both end in \`browser_navigate\`, \`browser_click\` and so
 - **DorkOS's own browser tools** (\`browser_navigate\`, \`browser_read_page\`,
   \`browser_read_console\` and the rest, on the DorkOS server) drive the browser
   a person can watch in the app. It is NOT signed in to anything.
+- **The shared browser** (\`local_browser_state\`, \`local_browser_observe\`,
+  \`local_browser_act\`, \`local_browser_screenshot\`) drives a real browser page
+  a person shared with this chat. They sign in there themselves. Only a person
+  can open it: Browser, in the right panel's + menu.
 
 ## What you get
 
@@ -133911,17 +134140,27 @@ Two sets of tools can both end in \`browser_navigate\`, \`browser_click\` and so
 The site is not saved, or its sign-in ran out. Stop and say so, in one message:
 
 1. Name the site you need.
-2. Ask the person to run \`dorkos browser login <site>\` in a terminal, sign in,
-   and press Enter.
-3. Tell them to start a new session with you afterwards (or re-run the task),
-   since your current browser started before the new sign-in.
+2. Ask the person to share a browser page with this chat (Browser, in the right
+   panel's + menu) and sign in there.
+3. Carry on in that page with your shared-browser tools.
 
-You cannot do this step for them: the command needs a person at the keyboard
-and refuses to run without one.
+Never send the person to a terminal. Only they can sign in, and the app is where
+they do it. \`dorkos browser login <site>\` also exists, and may not be installed
+on their computer, so name it only if they ask for a command-line way.
 
 Do not save a sign-in from inside your own browser. It is thrown away when the
 browser closes, and it would be a login made without the operator watching.
 
+## When a browser tool fails
+
+Say so in plain words, in one message: what you tried and what you need. Then
+offer the shared browser, as above. A site that blocks you, a browser that will
+not start and a tool you don't have all get the same answer. Don't hand the person
+commands to run, and don't try to install or start a browser yourself.
+
+If nobody is there to share a page (a schedule or a heartbeat), say the work is
+stuck and why, and stop.
+
 ## Checking what is saved
 
 Your DorkOS context tells you (an \`<agent_browser>\` note) when your browser has
@@ -134009,6 +134248,10 @@ the person, or paused at an account limit, its last message arrives in your
 chat as a report. If you are idle, the report starts a turn for you. It does
 not report when a turn ends only to wait.
 
+Started from a room, the report comes to your chat in that room as a turn
+only you see. Nobody else in the room reads it. Post there only if the room
+needs to know.
+
 So after you start one, end your turn. Do not poll it.
 
 ## Check on one
@@ -138440,7 +138683,9 @@ function fileFingerprint(abs) {
   }
   if (stat6.isDirectory()) return "dir";
   if (!stat6.isFile()) return "unreadable";
-  if (stat6.size > MAX_HASHED_BYTES) return `large:${stat6.size}:${stat6.mtimeMs}`;
+  if (stat6.size > MAX_HASHED_BYTES) {
+    return `large:${stat6.size}:${stat6.mtimeMs}:${stat6.ctimeMs}:${stat6.ino}`;
+  }
   try {
     return createHash7("sha256").update(readFileSync22(abs)).digest("hex");
   } catch {
@@ -138792,7 +139037,7 @@ __export(project_with_consent_exports, {
   withProjectLock: () => withProjectLock,
   withProvenInstalls: () => withProvenInstalls
 });
-import { AsyncLocalStorage as AsyncLocalStorage6 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
 import { realpathSync as realpathSync14 } from "node:fs";
 import { join as join49, resolve as resolve9 } from "node:path";
 function projectLockKey(projectPath) {
@@ -139019,13 +139264,13 @@ var init_project_with_consent = __esm({
     };
     projectLocks = /* @__PURE__ */ new Map();
     projectLockQueue = /* @__PURE__ */ new Map();
-    heldByCaller = new AsyncLocalStorage6();
+    heldByCaller = new AsyncLocalStorage5();
     reportedAtFull = /* @__PURE__ */ new Set();
   }
 });
 
 // ../shared/src/atomic-write.ts
-import { AsyncLocalStorage as AsyncLocalStorage7 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage6 } from "node:async_hooks";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { chmod, mkdir as mkdir4, rename as rename2, rm, writeFile as writeFile3 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname13, join as join50, resolve as resolve10 } from "node:path";
@@ -139077,7 +139322,7 @@ var pathLocks, heldLocks;
 var init_atomic_write2 = __esm({
   "../shared/src/atomic-write.ts"() {
     pathLocks = /* @__PURE__ */ new Map();
-    heldLocks = new AsyncLocalStorage7();
+    heldLocks = new AsyncLocalStorage6();
   }
 });
 
@@ -145737,17 +145982,17 @@ function launchChromeWithPipe(executable, args, spawnChrome = defaultSpawn) {
   }
   let nextId = 0;
   let exitedFlag = false;
-  const pending2 = /* @__PURE__ */ new Map();
+  const pending = /* @__PURE__ */ new Map();
   const listeners = /* @__PURE__ */ new Set();
   const exited = new Promise((resolve14) => {
     const finish = (code, signal) => {
       if (exitedFlag) return;
       exitedFlag = true;
-      for (const waiter of pending2.values()) {
+      for (const waiter of pending.values()) {
         clearTimeout(waiter.timer);
         waiter.reject(new ChromeExitedError());
       }
-      pending2.clear();
+      pending.clear();
       resolve14({ code, signal });
     };
     child.once("exit", finish);
@@ -145771,9 +146016,9 @@ function launchChromeWithPipe(executable, args, spawnChrome = defaultSpawn) {
         continue;
       }
       if (typeof message2.id === "number") {
-        const waiter = pending2.get(message2.id);
+        const waiter = pending.get(message2.id);
         if (!waiter) continue;
-        pending2.delete(message2.id);
+        pending.delete(message2.id);
         clearTimeout(waiter.timer);
         if (message2.error) waiter.reject(new Error(message2.error.message ?? "Chrome refused."));
         else waiter.resolve(message2.result ?? {});
@@ -145792,10 +146037,10 @@ function launchChromeWithPipe(executable, args, spawnChrome = defaultSpawn) {
     const id = ++nextId;
     return new Promise((resolve14, reject) => {
       const timer = setTimeout(() => {
-        pending2.delete(id);
+        pending.delete(id);
         reject(new Error(`Chrome did not answer ${method} in time.`));
       }, timeoutMs);
-      pending2.set(id, { resolve: resolve14, reject, timer });
+      pending.set(id, { resolve: resolve14, reject, timer });
       toChrome.write(
         `${JSON.stringify({ id, method, params, ...sessionId ? { sessionId } : {} })}\0`
       );
@@ -145973,7 +146218,9 @@ var init_profile2 = __esm({
 
 // ../shared/src/cloud-origin.ts
 function normalizeHost2(host) {
-  return host.toLowerCase().replace(/\.+$/, "");
+  let end = host.length;
+  while (end > 0 && host[end - 1] === ".") end -= 1;
+  return host.slice(0, end).toLowerCase();
 }
 function entryFor(url2) {
   let parsed;
@@ -146790,9 +147037,9 @@ function formatVersion(version4, source) {
 }
 function formatUpdateLine(check4) {
   const installed = formatVersion(check4.installedVersion, check4.installedVersionSource);
-  const latest2 = formatVersion(check4.latestVersion, check4.latestVersionSource);
+  const latest = formatVersion(check4.latestVersion, check4.latestVersionSource);
   const from = check4.marketplace ? `  (${check4.marketplace})` : "";
-  return `${labelOf(check4)}  ${installed} \u2192 ${latest2}${from}`;
+  return `${labelOf(check4)}  ${installed} \u2192 ${latest}${from}`;
 }
 var init_installation_label = __esm({
   "src/lib/installation-label.ts"() {
@@ -150688,7 +150935,7 @@ async function unsetFlyTigrisSecrets(options, appName) {
 }
 function verifyFlyDeployment(inventory, previousReleases, expectedRepository, expectedDigest) {
   const latestRelease = inventory.releases.reduce(
-    (latest2, release) => !latest2 || release.version > latest2.version ? release : latest2,
+    (latest, release) => !latest || release.version > latest.version ? release : latest,
     void 0
   );
   const releaseIsNew = latestRelease !== void 0 && !previousReleases.some(
@@ -150701,7 +150948,7 @@ function verifyFlyDeployment(inventory, previousReleases, expectedRepository, ex
 }
 function isInterruptedFlyDeployment(inventory, expectedRepository, expectedDigest) {
   const latestRelease = inventory.releases.reduce(
-    (latest2, release) => !latest2 || release.version > latest2.version ? release : latest2,
+    (latest, release) => !latest || release.version > latest.version ? release : latest,
     void 0
   );
   const machine = inventory.machines[0];
@@ -150709,7 +150956,7 @@ function isInterruptedFlyDeployment(inventory, expectedRepository, expectedDiges
 }
 function verifyExistingFlyDeployment(inventory, expectedRepository, expectedDigest) {
   const latestRelease = inventory.releases.reduce(
-    (latest2, release) => !latest2 || release.version > latest2.version ? release : latest2,
+    (latest, release) => !latest || release.version > latest.version ? release : latest,
     void 0
   );
   if (inventory.machines.length !== 1 || inventory.machines[0]?.state !== "started" || inventory.machines[0]?.imageRepository !== expectedRepository || inventory.machines[0]?.imageDigest !== expectedDigest || inventory.machines[0]?.checks.length === 0 || inventory.machines[0]?.checks.some((check4) => check4.status !== "passing") || latestRelease?.status !== "complete" || latestRelease.imageRef !== `${expectedRepository}@${expectedDigest}` || inventory.addresses.length === 0) {
@@ -152642,7 +152889,7 @@ async function waitForFlyMachineLeases(options) {
   }
 }
 async function latestLeaseEnd(options) {
-  let latest2;
+  let latest;
   for (const machineId of options.machineIds) {
     let lease;
     try {
@@ -152653,10 +152900,10 @@ async function latestLeaseEnd(options) {
     }
     if (!lease) continue;
     if (lease.expiresAtMs !== null && lease.expiresAtMs <= options.now()) continue;
-    if (lease.expiresAtMs === null || latest2 === null) latest2 = null;
-    else latest2 = latest2 === void 0 ? lease.expiresAtMs : Math.max(latest2, lease.expiresAtMs);
+    if (lease.expiresAtMs === null || latest === null) latest = null;
+    else latest = latest === void 0 ? lease.expiresAtMs : Math.max(latest, lease.expiresAtMs);
   }
-  return latest2;
+  return latest;
 }
 async function heldLeaseMinutes(options) {
   const ends = await latestLeaseEnd({
@@ -153752,7 +153999,7 @@ function provesFreshStage(inventory, baseline) {
 function runtimeEvidence(inventory) {
   const machine = inventory.machines[0];
   const release = inventory.releases.reduce(
-    (latest2, value) => !latest2 || value.version > latest2.version ? value : latest2,
+    (latest, value) => !latest || value.version > latest.version ? value : latest,
     void 0
   );
   const address = inventory.addresses[0];
@@ -155571,8 +155818,8 @@ function formatCommunityRecovery(journal) {
     Console: https://fly.io/apps/${selection.appName}
     Access key: usually ${tigrisAccessKeyName(selection.bucketName)} in Tigris. Removing the bucket does not remove this key; it keeps working until you remove it in Tigris.` : `  Tigris bucket ${journal.resources.tigrisBucketId} \u2014 saved owner unavailable; may incur charges; private files may exist.` : null
   ].filter((row2) => row2 !== null);
-  const pending2 = journal.pendingIntent;
-  const tigrisKeysMissing = pending2?.provider === "tigris" && journal.resources.tigrisBucketId !== void 0 && journal.lastSafeError?.code === "MISSING_TIGRIS_SECRETS";
+  const pending = journal.pendingIntent;
+  const tigrisKeysMissing = pending?.provider === "tigris" && journal.resources.tigrisBucketId !== void 0 && journal.lastSafeError?.code === "MISSING_TIGRIS_SECRETS";
   const reconciliation = tigrisKeysMissing ? selection ? [
     `Tigris bucket ${selection.bucketName} exists, but its access keys are not on app ${selection.appName}, and Fly would not return them again. Keep this bucket; setup must not create another.`,
     `1. Open the bucket's Tigris console: fly storage dashboard ${selection.bucketName} --app ${selection.appName}`,
@@ -155581,12 +155828,12 @@ function formatCommunityRecovery(journal) {
     "   then type two lines, AWS_ACCESS_KEY_ID=<key id> and AWS_SECRET_ACCESS_KEY=<secret>, and press Ctrl-D.",
     "   (Typing them keeps the secret out of your shell history.)",
     "4. Resume with the command below."
-  ].join("\n") : `Tigris bucket ${journal.resources.tigrisBucketId} exists, but its access keys are not on the app. Add AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY with fly secrets import --stage, then resume.` : pending2 ? pending2.provider === "fly" ? `Unresolved Fly creation intent for ${pending2.resourceName} in ${pending2.organizationId}. Do not create or adopt a name match. Inspect: fly apps list --org ${pending2.organizationId} --json
-Console: https://fly.io/dashboard/${pending2.organizationId}` : pending2.provider === "neon" ? `Unresolved Neon creation intent for ${pending2.resourceName} in ${pending2.organizationId}. Do not create or adopt a name match. Inspect: neonctl projects list --org-id ${pending2.organizationId} --output json
-Console: https://console.neon.tech` : `Unresolved Tigris creation intent for ${pending2.resourceName} in ${pending2.organizationId}. Do not create or adopt a name match. Inspect: fly storage list --org ${pending2.organizationId}
-Console: https://fly.io/dashboard/${pending2.organizationId}` : null;
+  ].join("\n") : `Tigris bucket ${journal.resources.tigrisBucketId} exists, but its access keys are not on the app. Add AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY with fly secrets import --stage, then resume.` : pending ? pending.provider === "fly" ? `Unresolved Fly creation intent for ${pending.resourceName} in ${pending.organizationId}. Do not create or adopt a name match. Inspect: fly apps list --org ${pending.organizationId} --json
+Console: https://fly.io/dashboard/${pending.organizationId}` : pending.provider === "neon" ? `Unresolved Neon creation intent for ${pending.resourceName} in ${pending.organizationId}. Do not create or adopt a name match. Inspect: neonctl projects list --org-id ${pending.organizationId} --output json
+Console: https://console.neon.tech` : `Unresolved Tigris creation intent for ${pending.resourceName} in ${pending.organizationId}. Do not create or adopt a name match. Inspect: fly storage list --org ${pending.organizationId}
+Console: https://fly.io/dashboard/${pending.organizationId}` : null;
   const command = resumeCommand(journal);
-  const noRecordedId = pending2 !== null && !journal.resources[pending2.provider === "fly" ? "flyAppId" : pending2.provider === "neon" ? "neonProjectId" : "tigrisBucketId"];
+  const noRecordedId = pending !== null && !journal.resources[pending.provider === "fly" ? "flyAppId" : pending.provider === "neon" ? "neonProjectId" : "tigrisBucketId"];
   const nextStep = journal.pendingRemoval ? [
     "Next: finish the removal that is in progress with:",
     `  dorkos community deploy --remove-uncertain ${journal.runId}`
@@ -155740,7 +155987,7 @@ async function runCommunityDispatcher(args, context2) {
       `This run stopped while creating a ${SERVICE_LABEL[unresolved.intent.provider]}, and DorkOS has not checked whether it landed. Check it first, and the run can continue: dorkos community deploy --remove-uncertain ${resumeJournal.runId}`
     );
   }
-  let latest2 = resumeJournal;
+  let latest = resumeJournal;
   let selection;
   try {
     const appName = required2(parsed.values["app-name"], "--app-name");
@@ -155756,9 +156003,9 @@ async function runCommunityDispatcher(args, context2) {
       bucketName: parsed.values["bucket-name"] ?? appName
     };
   } catch (error63) {
-    if (latest2) {
+    if (latest) {
       process.stderr.write(`Space setup stopped.
-${formatCommunityRecovery(latest2)}
+${formatCommunityRecovery(latest)}
 `);
     }
     throw error63;
@@ -155851,7 +156098,7 @@ Journal: ${journalPath}
           if (parsed.values.resume) {
             const existing = resumeJournal;
             assertCommunityLaunchPlanUnchanged(existing, result2.plan);
-            latest2 = existing;
+            latest = existing;
           }
           await confirmOwnerClipboardWrite(
             localEnv,
@@ -155860,28 +156107,28 @@ Journal: ${journalPath}
             cancellation.signal
           );
           if (!parsed.values.resume) {
-            latest2 = createInitialCommunityLaunchJournal(
+            latest = createInitialCommunityLaunchJournal(
               runId,
               result2.plan,
               (/* @__PURE__ */ new Date()).toISOString()
             );
-            await initializeLaunchJournal(journalPath, latest2);
+            await initializeLaunchJournal(journalPath, latest);
           }
-          if (!latest2) throw new Error("Space server launch journal was not initialized");
+          if (!latest) throw new Error("Space server launch journal was not initialized");
           const persist3 = async (next, expectedRevision) => {
             await writeLaunchJournal(journalPath, next, expectedRevision);
-            latest2 = next;
+            latest = next;
           };
           process.stdout.write(
             "Provisioning Fly, Neon, and private Tigris resources. Progress is saved after each verified identity.\n"
           );
-          latest2 = await executeCommunityCreationPhase(
+          latest = await executeCommunityCreationPhase(
             result2.plan,
-            latest2,
+            latest,
             createDefaultCommunityCreationDependencies({
               options: serviceOptions,
               plan: result2.plan,
-              latestJournal: () => latest2,
+              latestJournal: () => latest,
               persist: persist3,
               now: () => (/* @__PURE__ */ new Date()).toISOString(),
               progress: (service) => process.stdout.write(`Checking ${service} resource identity\u2026
@@ -155898,21 +156145,21 @@ Journal: ${journalPath}
           );
           const deployed = await executeCommunityDeployPhase(
             result2.plan,
-            latest2,
+            latest,
             createDefaultCommunityDeployDependencies({
               options: serviceOptions,
               plan: result2.plan,
-              latestJournal: () => latest2,
+              latestJournal: () => latest,
               persist: persist3,
               now: () => (/* @__PURE__ */ new Date()).toISOString(),
               resolvePlatformDigest: platformDigest
             })
           );
-          latest2 = deployed.journal;
+          latest = deployed.journal;
           process.stdout.write("Verifying the owner handoff and final deployment health\u2026\n");
-          latest2 = await executeCommunityOwnerHandoff(
+          latest = await executeCommunityOwnerHandoff(
             result2.plan,
-            latest2,
+            latest,
             deployed.bootstrapSecret,
             createDefaultCommunityOwnerDependencies({
               options: serviceOptions,
@@ -155921,13 +156168,13 @@ Journal: ${journalPath}
               persist: persist3,
               now: () => (/* @__PURE__ */ new Date()).toISOString(),
               signal: cancellation.signal,
-              platformDigest: async () => latest2?.imagePlatformDigest ?? platformDigest()
+              platformDigest: async () => latest?.imagePlatformDigest ?? platformDigest()
             })
           );
           process.stdout.write(
-            latest2.state === "complete" ? `${formatCommunityCompletion(`https://${result2.plan.fly.appName}.fly.dev`)}
+            latest.state === "complete" ? `${formatCommunityCompletion(`https://${result2.plan.fly.appName}.fly.dev`)}
 ` : `Space setup is waiting for owner completion.
-${formatCommunityRecovery(latest2)}
+${formatCommunityRecovery(latest)}
 `
           );
         }
@@ -155935,33 +156182,33 @@ ${formatCommunityRecovery(latest2)}
     );
     return 0;
   } catch (error63) {
-    if (latest2 && cancellation.signal.aborted && !latest2.pendingRemoval) {
-      const uncertain = latest2.pendingIntent !== null || latest2.state === "uncertain";
+    if (latest && cancellation.signal.aborted && !latest.pendingRemoval) {
+      const uncertain = latest.pendingIntent !== null || latest.state === "uncertain";
       const cancelled = {
-        ...latest2,
-        revision: latest2.revision + 1,
-        state: uncertain ? "uncertain" : latest2.state,
+        ...latest,
+        revision: latest.revision + 1,
+        state: uncertain ? "uncertain" : latest.state,
         lastSafeError: uncertain ? { category: "uncertain", code: "CREATION_OUTCOME_UNCERTAIN" } : { category: "transient", code: "CANCELLED" },
         updatedAt: (/* @__PURE__ */ new Date()).toISOString()
       };
-      await writeLaunchJournal(journalPath, cancelled, latest2.revision).catch(() => void 0);
-      latest2 = cancelled;
+      await writeLaunchJournal(journalPath, cancelled, latest.revision).catch(() => void 0);
+      latest = cancelled;
     }
-    const failed = latest2 && !cancellation.signal.aborted && !(error63 instanceof CommunityCreationRefusedError) ? recordLaunchFailure(latest2, error63, (/* @__PURE__ */ new Date()).toISOString()) : null;
-    if (latest2 && failed) {
-      const previous = latest2;
+    const failed = latest && !cancellation.signal.aborted && !(error63 instanceof CommunityCreationRefusedError) ? recordLaunchFailure(latest, error63, (/* @__PURE__ */ new Date()).toISOString()) : null;
+    if (latest && failed) {
+      const previous = latest;
       await writeLaunchJournal(journalPath, failed, previous.revision).catch(() => void 0);
-      latest2 = failed;
+      latest = failed;
     }
-    if (error63 instanceof CommunityCreationRefusedError && latest2) {
-      await stopForRefusedCreate(error63, latest2, journalPath, childEnv, formatCommunityRecovery);
+    if (error63 instanceof CommunityCreationRefusedError && latest) {
+      await stopForRefusedCreate(error63, latest, journalPath, childEnv, formatCommunityRecovery);
     }
-    if (latest2) {
+    if (latest) {
       process.stderr.write(`Space setup stopped.
-${formatCommunityRecovery(latest2)}
+${formatCommunityRecovery(latest)}
 `);
-      if (cancellation.signal.aborted && !latest2.pendingRemoval) {
-        process.stderr.write(`${describeStoppedLaunch(latest2)}
+      if (cancellation.signal.aborted && !latest.pendingRemoval) {
+        process.stderr.write(`${describeStoppedLaunch(latest)}
 `);
         return stopExitCode(stopSignal);
       }
@@ -160416,7 +160663,7 @@ var init_internal_adapter = __esm({
                 field: "identifier",
                 value: id
               }];
-              const latest2 = (await txAdapter.findMany({
+              const latest = (await txAdapter.findMany({
                 model: "verification",
                 where,
                 sortBy: {
@@ -160425,16 +160672,16 @@ var init_internal_adapter = __esm({
                 },
                 limit: 1
               }))[0] ?? null;
-              if (!latest2) return null;
+              if (!latest) return null;
               return consumeOneWithHooks("verification", [{
                 field: "id",
-                value: latest2.id
+                value: latest.id
               }], async () => {
                 const row2 = await txAdapter.consumeOne({
                   model: "verification",
                   where: [{
                     field: "id",
-                    value: latest2.id
+                    value: latest.id
                   }]
                 });
                 if (!row2) return null;
@@ -160443,7 +160690,7 @@ var init_internal_adapter = __esm({
                   where
                 });
                 return row2;
-              }, latest2);
+              }, latest);
             }));
             for (const stored of identifiersToTry) {
               consumed = await consumeByIdentifier(stored);
@@ -174680,7 +174927,6 @@ var init_connection_copy = __esm({
 var CONNECTOR_OPERATION_SELECTION_LIMIT, CONNECTOR_AUTHENTICATION_FLOW_TTL_MS, CONNECTOR_EVENT_REVIEW_SCOPE_LIMIT, ConnectorJsonValueSchema, ConnectorJsonObjectSchema, ConnectorProviderInstanceIdSchema, ConnectionIdSchema, ConnectorExternalAccountRefSchema, ConnectorProviderModeSchema, ConnectorProviderHealthSchema, ConnectorGrantReconciliationStatusSchema, ConnectorOperationClassificationSchema, ConnectorAccessLevelSchema, ConnectorRetryPolicySchema, ConnectorOperationRevisionSchema, ConnectorOperationPageSchema, ConnectorCapabilityAvailabilitySchema, ConnectorUnsupportedResultSchema, ConnectorProviderCapabilitySetSchema, ConnectorToolkitVersionResultSchema, ConnectorProviderExecuteResultSchema, ConnectorAuthenticationFlowSchema, ConnectorExecutionTargetSchema, ConnectorProgramExecutionRequestSchema, ConnectorExecutionPublicResultSchema, ConnectorExecutionResponseSchema, ConnectionReadinessStateSchema, ConnectionReadinessReasonSchema, ConnectionFixActionSchema, ConnectionFixSchema, ConnectionReadinessSchema, AccessibleConnectorConnectionSchema, AccessibleConnectorOperationSchema, ConnectorAccessibleConnectionsResponseSchema, ConnectorAccessibleOperationsResponseSchema, ConnectorUsageItemSchema, ConnectorUsagePageSchema, ConnectorReconciliationPreviewRequestSchema, ConnectorReconciliationGrantSelectionSchema, ConnectorReconciliationEveryAgentSelectionSchema, ConnectorReconciliationEveryAgentStateSchema, ConnectorEveryAgentRevokeResponseSchema, ConnectorReconciliationAgentSchema, ConnectorReconciliationCandidateSchema, ConnectorReconciliationPreviewSchema, ConnectorReconciliationApplyRequestSchema, ConnectorReconciliationApplyResponseSchema, ReviewActionBaseSchema, ConnectionTargetSchema, ConnectorRequestAccessSchema, ConnectorReviewActionSchema, ConnectorAgentConnectionRequestInputSchema, ConnectorAgentRequestBaseSchema, ConnectorRequestNotGrantedSchema, ConnectorAgentRequestStatusSchema, ConnectorAgentRequestItemSchema, ConnectorAgentRequestListResponseSchema, ConnectorManagementConnectActionSchema, ConnectorManagementAppliedActionSchema, ConnectorManagementReviewActionSchema, ConnectorManagementReviewCreateRequestSchema, ConnectorManagementReviewOutcomeSchema, ConnectorManagementReviewOperationContextSchema, ConnectorManagementReviewConnectionContextSchema, ConnectorManagementReviewAgentContextSchema, ConnectorManagementReviewContextSchema, ManagementReviewItemBaseShape, ConnectorPendingManagementReviewItemSchema, ConnectorResolvingManagementReviewItemSchema, ConnectorExpiredManagementReviewItemSchema, ConnectorDeniedManagementReviewItemSchema, ConnectorApprovedAppliedManagementReviewItemSchema, ConnectorApprovedConnectManagementReviewItemSchema, ConnectorApprovedUnknownManagementReviewItemSchema, ConnectorManagementReviewItemSchema, ProgramReviewStatusBaseShape, ConnectorProgramReviewStatusSchema, ConnectorManagementReviewDecisionSchema, ConnectorManagementReviewDecisionResultSchema;
 var init_connector_schemas = __esm({
   "../connector-providers/src/connector-schemas.ts"() {
-    "use strict";
     init_zod();
     init_connection_copy();
     CONNECTOR_OPERATION_SELECTION_LIMIT = 1e5;
@@ -177971,14 +178217,14 @@ function suggestedFilename(disposition, roomId) {
 }
 async function streamExport(body, destination, closeDestination) {
   const decoder2 = new TextDecoder();
-  let pending2 = "";
+  let pending = "";
   let lastLine = "";
   const watched = async function* watch() {
     for await (const chunk of Readable.fromWeb(body)) {
       const bytes = chunk;
-      pending2 += decoder2.decode(bytes, { stream: true });
-      const parts = pending2.split("\n");
-      pending2 = parts.pop() ?? "";
+      pending += decoder2.decode(bytes, { stream: true });
+      const parts = pending.split("\n");
+      pending = parts.pop() ?? "";
       for (const part of parts) if (part.trim()) lastLine = part;
       yield bytes;
     }
@@ -177990,7 +178236,7 @@ async function streamExport(body, destination, closeDestination) {
     reason = err instanceof Error ? err.message : String(err);
   }
   try {
-    const trailing = pending2.trim() || lastLine;
+    const trailing = pending.trim() || lastLine;
     const parsed = JSON.parse(trailing);
     if (parsed.type === "summary" && typeof parsed.entryCount === "number") {
       if (reason === null) return { entryCount: parsed.entryCount, reason: null };
@@ -180510,6 +180756,7 @@ var MAX_FEEDBACK_SESSION_ID_LEN = 128;
 var MAX_FEEDBACK_SCREENSHOT_DATA_URL_LEN = 85e4;
 var MAX_REPORTER_NAME_LEN = 128;
 var MAX_TRANSCRIPT_LEN = 2e4;
+var MAX_FEEDBACK_ROOM_ID_LEN = 128;
 var MAX_LOG_EXCERPT_LEN = 8e3;
 var MAX_BREADCRUMBS = 50;
 var MAX_BREADCRUMB_MESSAGE_LEN = 300;
@@ -180630,6 +180877,8 @@ var FeedbackSubmissionSchema = external_exports.object({
   contact: external_exports.string().min(1).max(MAX_FEEDBACK_CONTACT_LEN).optional(),
   route: external_exports.string().min(1).max(MAX_FEEDBACK_ROUTE_LEN).optional(),
   sessionId: external_exports.string().min(1).max(MAX_FEEDBACK_SESSION_ID_LEN).optional(),
+  roomId: external_exports.string().min(1).max(MAX_FEEDBACK_ROOM_ID_LEN).optional(),
+  roomThroughSeq: external_exports.number().int().min(1).optional(),
   diagnostics: FeedbackDiagnosticsSchema.optional(),
   transcriptExcerpt: external_exports.string().max(MAX_TRANSCRIPT_LEN).optional(),
   screenshot: FeedbackScreenshotSchema.optional(),
@@ -180898,7 +181147,7 @@ if (process.argv[2] === "community") {
     );
     Object.assign(childEnv, credentialEnv.pickCommunityCredentialEnv(rawProcessEnv));
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.128.0",
+      cliVersion: "0.130.0",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -180906,7 +181155,7 @@ if (process.argv[2] === "community") {
         {
           platform: { os: "linux", architecture: "amd64" },
           configSchemaVersion: releaseContract.COMMUNITY_CONFIG_SCHEMA_VERSION,
-          migrationCompatibilityId: "sha256:913dcdd9f86a45c66ba3752d59cf3585a5a3d2a73a841137ffe22fa8a052fd89"
+          migrationCompatibilityId: "sha256:58cd9b9199646a5a3dff5317d98138fd846b48aa00e874fe0beadc2ed039073b"
         }
       )
     });
@@ -180916,7 +181165,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.128.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.130.0" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -180926,7 +181175,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.128.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.130.0", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -181025,7 +181274,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.128.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.130.0", DORK_HOME, subArgs));
 }
 var { values, positionals } = parseCliArgs();
 if (positionals[0] && !knownCommands.has(positionals[0])) {
@@ -181119,14 +181368,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.128.0");
+  console.log("0.130.0");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.128.0"}`);
+  console.log(`dorkos ${"0.130.0"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -181273,7 +181522,7 @@ if (fs42.existsSync(envPath)) {
   dotenv.config({ path: envPath, override: false });
 }
 uninstallCliErrorHandlers?.();
-stampCliLaunch(process.env, fileURLToPath7(import.meta.url), "0.128.0");
+stampCliLaunch(process.env, fileURLToPath7(import.meta.url), "0.130.0");
 var server;
 try {
   server = await import("../server/index.js");
@@ -181298,7 +181547,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.128.0"}`);
+console.log(`  DorkOS v${"0.130.0"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -181324,9 +181573,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.128.0").then((latestVersion) => {
+checkForUpdate("0.130.0").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.128.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.130.0"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;